premise:

1. There is an Apache site (the access proxy for dynamic pages is given to Tomcat). Password restrictions need to be added to Apache. That is, users need to enter a password when accessing this site (the user name is optional). After entering the password, they can Access all pages normally.
2. This password should be able to set a validity period.
3. This password should only need to be entered once during the validity period to access all resources.
4. The solution is best to be simple and easy to configure, no coding required.

I checked Apache’s default simple password scheme: http://httpd.apache.org/docs/2.0/howto/auth.html, but it seems that it does not meet the second and third points.

Please give me some advice