| ⇢ | A | LogoutHandler added | |
| ⇢ | A | AbstractRequestRateLimiter added | |
| ⇢ | A | CaptchaAuthenticator added | |
| A | ↛ | CaptchaValidationHandler removed |
| ⇢ | B | CaptchaAuthenticator::authenticate() added | |
| ⇢ | B | LogoutHandler::handle() added | |
| ⇢ | A | Authenticator::executeAuthenticator() added | |
| ⇢ | A | AbstractRequestRateLimiter::consume() added | |
| ⇢ | A | LogoutHandler::__construct() added | |
| ⇢ | A | AbstractRequestRateLimiter::reset() added | |
| ⇢ | A | CaptchaAuthenticator::supports() added | |
| ⇢ | A | CaptchaAuthenticator::__construct() added | |
| C | ↘ | D | FormLoginAuthenticator::authenticate() got worse |
| F | ↗ | D | Authenticator::authenticate() improved |
| B | ↛ | CaptchaValidationHandler::authenticate() removed | |
| A | ↛ | Helper::createRememberMeCookie() removed | |
| A | ↛ | FormLoginAuthenticator::rememberMeCookie() removed | |
| A | ↛ | RemoteUserAuthenticator::setToken() removed | |
| A | ↛ | RemoteUserAuthenticator::clearToken() removed | |
| A | ↛ | RememberMeHandler::getUsersIdCookie() removed | |
| A | ↛ | CsrfTokenAuthenticator::setToken() removed | |
| A | ↛ | CsrfTokenAuthenticator::failure() removed | |
| A | ↛ | CaptchaValidationHandler::add() removed | |
| A | ↛ | FormLoginAuthenticator::failure() removed |