Merge "User: Remove deprecated, unused auth functions"

diff --combined RELEASE-NOTES-1.31
index 9d9a26b,628a868..ad4f1b1
--- 1/RELEASE-NOTES-1.31
--- 2/RELEASE-NOTES-1.31
+++ b/RELEASE-NOTES-1.31
@@@ -74,8 -74,6 +74,8 @@@ production
    and non-MySQL ::replace() and ::upsert() no longer roll back the whole
    transaction on failure.
  * (T189785) Added a monthly heartbeat ping to the pingback feature.
 +* The CLI installer (maintenance/install.php) learned to detect and include
 +  extensions. Pass --with-extensions to enable that feature.
  
  === External library changes in 1.31 ===
  
@@@ -205,8 -203,8 +205,8 @@@ changes to languages because of Phabric
    * OutputPage::enableSectionEditLinks()
    * OutputPage::sectionEditLinksEnabled()
    * The public ParserOutput state fields $mTOCEnabled and $mEditSectionTokens are also deprecated.
- * The following methods and constants from the WatchedItem class were deprecated in
-   1.27 have been removed.
+ * The following methods and constants from the WatchedItem class, which were deprecated in
+   1.27, have been removed.
    * WatchedItem::getTitle()
    * WatchedItem::fromUserTitle()
    * WatchedItem::addWatch()
@@@ -290,6 -288,10 +290,10 @@@
    * ::clearCookie()
    * ::setExtendedLoginCookie()
    Note that User::setCookies() remains, and is not deprecated.
+ * Also in User, some auth-related methods which were deprecated in 1.27, have been removed:
+   * ::getEditTokenTimestamp() – use MediaWiki\Session\Token::getTimestamp()
+   * ::getPasswordFactory() – create a PasswordFactory directly
+   * ::passwordChangeInputAttribs()
  * The global functions wfProfileIn and wfProfileOut, deprecated in 1.25, have been removed.
  * The following methods related to caching of half-parsed HTML were deprecated:
    * Parser::serializeHalfParsedText()