Skip to content
Index730 resources
Session expired / Re-authentication

Session expired / Re-authentication

The interruption that asks a still-present user to prove identity again without destroying their work.

Onboarding & Auth · 6 checks · 0 resources

Before you ship

6
  1. 01Non-destructive interrupt — a modal or inline prompt over the current screen, never a hard redirect that discards unsaved state
  2. 02Reason stated — whether the session timed out, was revoked, the password changed, or a sensitive action requires step-up auth
  3. 03Credential-only re-entry — ask for password or biometric only, with the email pre-filled and not editable
  4. 04Draft preservation — unsaved form or editor content restored intact after successful re-authentication
  5. 05Return to the same place — the user lands back on the exact screen and scroll position they were on, not the dashboard
  6. 06Step-up scope — for sensitive actions, state what the re-authentication authorises and for how long it lasts

Resources that help you build this

0

Nothing in the index is tagged for this surface yet.