<form method="POST">
    <h3>Editing: RequirePassword.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

namespace Illuminate\Auth\Middleware;

use Closure;
use Illuminate\Contracts\Routing\ResponseFactory;
use Illuminate\Contracts\Routing\UrlGenerator;

class RequirePassword
{
    /**
     * The response factory instance.
     *
     * @var \Illuminate\Contracts\Routing\ResponseFactory
     */
    protected $responseFactory;

    /**
     * The URL generator instance.
     *
     * @var \Illuminate\Contracts\Routing\UrlGenerator
     */
    protected $urlGenerator;

    /**
     * The password timeout.
     *
     * @var int
     */
    protected $passwordTimeout;

    /**
     * Create a new middleware instance.
     *
     * @param  \Illuminate\Contracts\Routing\ResponseFactory  $responseFactory
     * @param  \Illuminate\Contracts\Routing\UrlGenerator  $urlGenerator
     * @param  int|null  $passwordTimeout
     * @return void
     */
    public function __construct(ResponseFactory $responseFactory, UrlGenerator $urlGenerator, $passwordTimeout = null)
    {
        $this-&gt;responseFactory = $responseFactory;
        $this-&gt;urlGenerator = $urlGenerator;
        $this-&gt;passwordTimeout = $passwordTimeout ?: 10800;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  string|null  $redirectToRoute
     * @return mixed
     */
    public function handle($request, Closure $next, $redirectToRoute = null)
    {
        if ($this-&gt;shouldConfirmPassword($request)) {
            if ($request-&gt;expectsJson()) {
                return $this-&gt;responseFactory-&gt;json([
                    'message' =&gt; 'Password confirmation required.',
                ], 423);
            }

            return $this-&gt;responseFactory-&gt;redirectGuest(
                $this-&gt;urlGenerator-&gt;route($redirectToRoute ?? 'password.confirm')
            );
        }

        return $next($request);
    }

    /**
     * Determine if the confirmation timeout has expired.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function shouldConfirmPassword($request)
    {
        $confirmedAt = time() - $request-&gt;session()-&gt;get('auth.password_confirmed_at', 0);

        return $confirmedAt &gt; $this-&gt;passwordTimeout;
    }
}
</textarea><br>
    <input type="submit" value="Save">
</form>