Issue #144538 by acbramley, tuutti, Damien Tournoud, alexpott, solideogloria, Xano, TwoD, damiankloip, smustgrave, pameeela, deviantintegral, L_VanDamme, daften, karishmaamin, g.oechsler, larowlan, klausi, sun, Fabianx, andypost, dawehner, kwinters, greggles, Wim Leers, grendzy, pwolanin, alexanderpas, drumm, Chi: User logout is vulnerable to CSRF

Issue #3168624 by DerekCresswell, ravi.shankar, BramDriesen, jonathanshaw, catch: Add 'user/edit' route

Benji Fisher authored Sep 21, 2021 and Lee Rowlands committed Sep 21, 2021

Issue #3216341 by benjifisher, manojithape, longwave, larowlan, Berdir, AaronMcHale: Provide a module-specific permissions form

Issue #987978 by vsujeetkumar, paulocs, ankithashetty, Gauravmahlawat, yogen.prasad, Suresh Prabhu Parkala, vikashsoni, dww, AaronMcHale, naught101: Move "administrator role" setting to new Role Settings form

Issue #3182970 by acbramley, paulocs, vakulrai, chandrashekhar_srijan, dww, sonam.chaturvedi, Madhu kumar, vikashsoni: Logout option is displayed for anonymous users

Issue #2193803 by wturrell, ridhimaabrol24, mglaman, Pavan B S, narendra.rajwar27, abhisekmazumdar, dpi, manish.upadhyay, pankaj.singh, paulocs, Charles Belov, quietone, catch, jim_at_miramontes, dawehner, goodboy: Anonymous users receive access denied when attempting to logout

Issue #3018673 by nicksanta, dhirendra.mishra, jibran: Add support for RFC5785 change password well known resource

Issue #2854252 by AdamPS, agoradesign, alexpott, Berdir, borisson_, xjm, jhedstrom, joachim: User forms broken for admin without 'administer users'

Issue #2847708 by arshadcn, tedbow, Wim Leers, ruloweb, larowlan: RPC endpoint to reset user password

Issue #2515050 by alexpott, pwolanin, YesCT, David_Rothstein, prasad_gogate: A valid one-time login link may be leaked by the referer header to 3rd parties

Issue #2403307 by dawehner, marthinal, tedbow, clemens.tolboom, Wim Leers, neclimdul, Crell, klausi, andypost, e0ipso: RPC endpoints for user authentication: log in, check login status, log out

Revert "Issue #2403307 by dawehner, marthinal, tedbow, clemens.tolboom, Wim Leers, neclimdul, Crell, klausi, andypost, e0ipso: RPC endpoints for user authentication: log in, check login status, log out"

This reverts commit 18feefc3.

Issue #2403307 by dawehner, marthinal, tedbow, clemens.tolboom, Wim Leers, neclimdul, Crell, klausi, andypost, e0ipso: RPC endpoints for user authentication: log in, check login status, log out

Revert "Issue #2403307 by dawehner, marthinal, clemens.tolboom, tedbow, Wim Leers, neclimdul, Crell, klausi, andypost, e0ipso: RPC endpoints for user authenication: log in, check login status, log out"

This reverts commit da16ae56.

Issue #2403307 by dawehner, marthinal, clemens.tolboom, tedbow, Wim Leers, neclimdul, Crell, klausi, andypost, e0ipso: RPC endpoints for user authenication: log in, check login status, log out

Issue #2600666 by tim.plunkett: Route definitions using entity type paramconverters with serial IDs should add an integer requirement

Issue #2465053 by larowlan, dawehner, Arla, fago, cilefen, lauriii, Wim Leers: Drupal 8 only allows one user every 6 hours to register when page caching is enabled — caused by entity UUID in form state

Issue #2461087 by Wim Leers, dawehner: Add 'no_cache' route option to mark a route's responses as uncacheable (was: Cron run response should not be cacheable)

Issue #2288911 by znerol, effulgentsia: Use route name instead of system path in user maintenance mode subscriber

Issue #2294571 by znerol, effulgentsia: Redirect anonymous users to login page from an exception listener instead of in MaintenanceModeSubscriber and restrict access to the my-account link to authenticated users.

Issue #1998198 by pwolanin, splatio, Albert Volkman, tim.plunkett, andypost, disasm, Les Lim, tkuldeep17: Convert user_pass_reset to a new-style Form object.

Issue #2288665 by znerol: Remove _maintenance request attribute and replace it with a maintenance mode service.

Issue #1316692 by tim.plunkett, dawehner: Convert hook_admin_paths() into declarative properties on routes.

Issue #1938884 by tim.plunkett, dawehner, Xano, Les Lim: Replace the fallback user listing with a list controller.

Issue #2102125 by dawehner, tim.plunkett, neclimdul, pwolanin, YesCT, damiankloip, Tim Bozeman: Big Local Task Conversion.

Issue #2076085 by dawehner, damiankloip, Letharion, pwolanin: Resolve the need for a 'title callback' using the route .

Issue #2089635 by tim.plunkett, disasm, larowlan: Convert non-test non-form page callbacks to routes and controllers.