<form method="POST">
    <h3>Editing: AuthenticateSession.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

namespace Illuminate\Session\Middleware;

use Closure;
use Illuminate\Auth\AuthenticationException;
use Illuminate\Contracts\Auth\Factory as AuthFactory;

class AuthenticateSession
{
    /**
     * The authentication factory implementation.
     *
     * @var \Illuminate\Contracts\Auth\Factory
     */
    protected $auth;

    /**
     * Create a new middleware instance.
     *
     * @param  \Illuminate\Contracts\Auth\Factory  $auth
     * @return void
     */
    public function __construct(AuthFactory $auth)
    {
        $this-&gt;auth = $auth;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (! $request-&gt;hasSession() || ! $request-&gt;user()) {
            return $next($request);
        }

        if ($this-&gt;guard()-&gt;viaRemember()) {
            $passwordHash = explode('|', $request-&gt;cookies-&gt;get($this-&gt;auth-&gt;getRecallerName()))[2] ?? null;

            if (! $passwordHash || $passwordHash != $request-&gt;user()-&gt;getAuthPassword()) {
                $this-&gt;logout($request);
            }
        }

        if (! $request-&gt;session()-&gt;has('password_hash_'.$this-&gt;auth-&gt;getDefaultDriver())) {
            $this-&gt;storePasswordHashInSession($request);
        }

        if ($request-&gt;session()-&gt;get('password_hash_'.$this-&gt;auth-&gt;getDefaultDriver()) !== $request-&gt;user()-&gt;getAuthPassword()) {
            $this-&gt;logout($request);
        }

        return tap($next($request), function () use ($request) {
            if (! is_null($this-&gt;guard()-&gt;user())) {
                $this-&gt;storePasswordHashInSession($request);
            }
        });
    }

    /**
     * Store the user's current password hash in the session.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return void
     */
    protected function storePasswordHashInSession($request)
    {
        if (! $request-&gt;user()) {
            return;
        }

        $request-&gt;session()-&gt;put([
            'password_hash_'.$this-&gt;auth-&gt;getDefaultDriver() =&gt; $request-&gt;user()-&gt;getAuthPassword(),
        ]);
    }

    /**
     * Log the user out of the application.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return void
     *
     * @throws \Illuminate\Auth\AuthenticationException
     */
    protected function logout($request)
    {
        $this-&gt;guard()-&gt;logoutCurrentDevice();

        $request-&gt;session()-&gt;flush();

        throw new AuthenticationException('Unauthenticated.', [$this-&gt;auth-&gt;getDefaultDriver()]);
    }

    /**
     * Get the guard instance that should be used by the middleware.
     *
     * @return \Illuminate\Contracts\Auth\Factory|\Illuminate\Contracts\Auth\Guard
     */
    protected function guard()
    {
        return $this-&gt;auth;
    }
}
</textarea><br>
    <input type="submit" value="Save">
</form>