Issue #3432868 by smustgrave, obsidian_, longwave, quietone, mstrelan, catch: Remove deprecated code from user module

Issue #144538 by acbramley, tuutti, Damien Tournoud, alexpott, solideogloria, Xano, TwoD, damiankloip, smustgrave, pameeela, deviantintegral, L_VanDamme, daften, karishmaamin, g.oechsler, larowlan, klausi, sun, Fabianx, andypost, dawehner, kwinters, greggles, Wim Leers, grendzy, pwolanin, alexanderpas, drumm, Chi: User logout is vulnerable to CSRF

Issue #3431203 by kim.pepper, alexpott, smustgrave, longwave: Deprecate user_validate_name() and replace with service

Issue #3410582 by catch, Prashant.c, heddn, alexpott, smustgrave, claudiu.cristea, longwave, quietone: Optimize user logins by avoiding duplicate entity queries

Revert "Issue #3410582 by catch, Prashant.c, heddn, alexpott, smustgrave, claudiu.cristea, longwave, quietone: Optimize user logins by avoiding duplicate entity queries"

This reverts commit 31edb2aa.

Issue #3410582 by catch, Prashant.c, heddn, alexpott, smustgrave, claudiu.cristea, longwave, quietone: Optimize user logins by avoiding duplicate entity queries

Revert: Issue #3410582 by catch, Prashant.c, heddn, alexpott, smustgrave, claudiu.cristea, longwave, quietone: Optimize user logins by avoiding duplicate entity queries

Issue #2926070 by smustgrave, dimitriskr, andypost, gnuget, zahord, yogeshmpawar, MerryHamster, kim.pepper, alexpott, Mile23, daffie, larowlan: Deprecate ModuleHandlerInterface::getName()

Issue #3410582 by catch, heddn, Prashant.c, smustgrave, claudiu.cristea, quietone, longwave: Optimize user logins by avoiding duplicate entity queries

Issue #3328456 by xjm, dimitriskr, murilohp, smustgrave: Replace substr($a, 0, $i) with str_starts_with()

Issue #3181647 by ultimike, guiu.rocafort.ferrer, tobiasb, ilgnerfagundes, prudloff, jurgenhaas, guzmanb, maxime.rffd, hexaki, samuel_orhan, rauch, guiu.rocafort.ferrer, mullzk, binnythomas: Add autocomplete attributes on login form and password reset form

Issue #3344789 by acbramley, Berdir, fenstrat, benjifisher, borisson_: Return early in EntityPermissionsForm::access if the user does not have "administer permissions"

Issue #229193 by dmitrig01, narendraR, katbailey, k4v, Gurpartap Singh, anavarre, kkaefer, chx, Gábor Hojtsy, jrockowitz, Bojhan, catch, Kiphaas7, corey.aufang, webchick, Dries, Senpai, smustgrave, anders.fajerson, larowlan: Incremental filter for permissions page

Issue #3376314 by Spokje, urvashi_vora, catch, lauriii, ckrina, bostonjillian: Remove the username and password descriptions from the login form

Issue #3348093 by andypost, murilohp, elber, Ranjit1032002, ameymudras, smustgrave, alexpott, catch: Deprecate user_roles() and user_role_names()

Issue #3293855 by rkoller, rocketeerbkw, nitin_lama, Anchal_gupta, AaronMcHale, smustgrave, cutehair: Update the outdated user_help text for user.admin_permissions and the description of the select box on the role settings page

Issue #3322743 by Spokje, mondrake: Fix PHPStan L2 errors "Parameter $foo of method Foo::bar() has invalid type Foo\Baz." and "Method Foo::bar() has invalid return type Foo\Baz. "

Issue #3193759 by Bhanu951, _pratik_, lhridley, baliram.patil, mrconnerton, ameymudras, xjm, mfb, longwave, zviryatko, anmolgoyal74: Demote user log entries from "notice" to "info"

Issue #3253955 by benjifisher, kristiaanvandeneynde, AaronMcHale: Let modules opt in to the bundle-specific permissions form

Issue #3261248 by paulocs, andregp, andypost, longwave, quietone: Remove deprecated user.module functions

Issue #3198010 by mcdruid, acbramley, mstrelan, quietone, manojithape, vikashsoni, chetanbharambe, sarguna raj M, larowlan, alexpott: User login page broken when there are more than 5 failed login attempts for an account

Issue #2934995 by benjifisher, larowlan, paulocs, AaronMcHale, vikashsoni, danflanagan8, Berdir, SKAUGHT, alexpott: Add a "Manage permissions" tab for each bundle that has associated permissions

Revert "Issue #2934995 by benjifisher, larowlan, paulocs, AaronMcHale, vikashsoni, danflanagan8, Berdir, SKAUGHT: Add a "Manage permissions" tab for each bundle that has associated permissions"

This reverts commit 3dbf9972.

Benji Fisher authored Oct 25, 2021 and Lee Rowlands committed Oct 25, 2021

Issue #2934995 by benjifisher, larowlan, paulocs, AaronMcHale, vikashsoni, danflanagan8, Berdir, SKAUGHT: Add a "Manage permissions" tab for each bundle that has associated permissions

Paulo Henrique Cota Starling authored Oct 20, 2021 and Lee Rowlands committed Oct 20, 2021

Issue #3199972 by paulocs, xurizaemon, anmolgoyal74, vsujeetkumar, vakulrai, Suresh Prabhu Parkala, gabriel.abdalla, abhisekmazumdar, AaronMcHale, longwave, larowlan, benjifisher, idebr, Nishat Ahmad, ifrik, snehalgaikwad, rachel_norfolk, alexpott, RenatoG, vikashsoni, ravi.shankar, samiullah, tanubansal: Improve user interface text on the account cancellation screen

Benji Fisher authored Sep 21, 2021 and Lee Rowlands committed Sep 21, 2021

Issue #3216341 by benjifisher, manojithape, longwave, larowlan, Berdir, AaronMcHale: Provide a module-specific permissions form

Issue #987978 by vsujeetkumar, paulocs, ankithashetty, Gauravmahlawat, yogen.prasad, Suresh Prabhu Parkala, vikashsoni, dww, AaronMcHale, naught101: Move "administrator role" setting to new Role Settings form

Issue #1521996 by quietone, dww, Sophie.SK, Carsten Müller, Spokje, kim.pepper, izus, mjpa, ashu1629, AlanHDev, mangy.fox, Vivek Panicker, robpowell, jozzy_a, tar_inet, ravi.shankar, sokru, zuhair_ak, cjgratacos, aerozeppelin, darrenwh, lomasr, luismagr, mohit1604, ronald.garcia, matteodem, webchuck, gordon, nginex, jain_deepak, Aunion, ankitgarg, Elendev, Kristen Pol, alexpott, YesCT, dpi, no2e, larowlan, longwave, markpavlitski, acbramley, C_Logemann, cilefen, claudiu.cristea, penyaskito, David_Rothstein, Leeteq, anagp, jlbellido, pdrake, klausi: Password reset form reveals whether an email or username is in use

Issue #2409657 by anushrikumari, StevenPatz, MsG, manauwarsheikh, ressa, roderik, quietone, xjm, Bojhan: Login screen after requesting new password is irrelevant

Issue #86287 by g-brodiei, brianV, drupal_was_my_past, ravi.shankar, krlucas, wengerk, svendecabooter, chmez, paulocs, alexpott, rohit-rajput-sahab, jonathanshaw, salvis, alienzed, joachim, Dries, webchick, catch, Gábor Hojtsy, quietone: Password reset process ignores the user's language preference

Issue #2983395 by mcdruid, narendra.rajwar27, andypost, yogeshmpawar, vijaycs85, prabha1997, swatichouhan012, amjad1233, SunnyGambino, larowlan, borisson_, anavarre, kim.pepper, alexpott: user module's flood controls should do better logging

Issue #3097445 by andypost, Berdir: Remove all @deprecated code in the User module except user:name token

Issue #1681832 by mcdruid, k_zoltan, dougvann, ZenDoodles, Cyberschorsch, kim.pepper, mohit1604, drumm, pdenooijer, eshta, mihai_brb, phiit, grwgreg, larowlan, amateescu, David_Rothstein, klausi, Damien Tournoud, coltrane, sun, aiypz, alippai: Password reset form has no flood protection

Issue #2886622 by Berdir, martin107, Mile23, tim.plunkett, mikelutz, jonathan1055: Deprecate all EntityManager methods with E_USER_DEPRECATED

Issue #3047699 by alfredofonseca, joachim, cosmicdreams: The class docs for the two password reset forms should differentiate them