| AUTH_001_MAGIC_CODE_NOT_COGNITIVE_BARRIER | | blocker |
| AUTH_002_CODE_INPUT_LABEL_AND_PURPOSE | | blocker |
| AUTH_003_ACCEPT_PASTE_AND_AUTOCOMPLETE | | major |
| AUTH_004_NO_REDUNDANT_REENTRY | | major |
| AUTH_005_RESEND_AND_EXPIRY_ARE_CLEAR | | major |
| AUTH_006_ERROR_MESSAGES_SPECIFIC | | major |
| AUTH_007_TIMEOUT_WARNING_BEFORE_EXPIRY | | blocker |
| AUTH_008_SESSION_EXTENSION_CONTROL | | blocker |
| AUTH_009_REAUTH_PRESERVES_DATA | | blocker |
| AUTH_010_NO_MODAL_AUTH_OR_TIMEOUT | | blocker |
| AUTH_011_STATUS_MESSAGES_FOR_AUTH_STATE | | major |
| AUTH_012_FOCUS_AFTER_AUTH_EVENTS | | major |
| AUTH_013_SECURITY_COPY_IS_ACTIONABLE | | minor |
| AUTH_014_PENDING_AUTH_STATE_NOT_IN_URL | | blocker |
