Translations:Manual:$wgReauthenticateTime/6/en

With only password-based authentication, you'd just add an extra field to the form and ask the user to re-enter their password.