user.pass.http, user.login.http, user.login_status.http and user.logout.http routes moved to the rest module

There routes are now deprecated:

• user.pass.http (/user/password)
• user.login.http (/user/login)
• user.login_status.http (/user/login_status)
• user.logout.http (/user/logout)

(These are POST routes handling JSON requests, not the GET routes used by most users.)

They are being replaced by the following routes provided by the rest module:

• rest.pass (/user/password)
• rest.login (/user/login)
• rest.login_status (/user/login_status)
• rest.logout (/user/logout)

If you rely on these routes, you will need to enable the rest module.

If you have code that interacts with these route, you need to update it to use the new routes.

Before:

$url = Url::fromRoute('user.login.http');

After:

$url = Url::fromRoute('rest.login');

If you code calls or extends \Drupal\user\Controller\UserAuthenticationController, you should use \Drupal\rest\Controller\RestAuthenticationController instead.