diff --git a/servant-server/CHANGELOG.md b/servant-server/CHANGELOG.md
index bbc54235..e784d42e 100644
--- a/servant-server/CHANGELOG.md
+++ b/servant-server/CHANGELOG.md
@@ -3,6 +3,11 @@ HEAD
 
 * Support for the `HttpVersion`, `IsSecure`, `RemoteHost` and `Vault` combinators
 * Drop `EitherT` in favor of `ExceptT`
+* Support for the new authentication framework. Including:
+  * `HasServer` instances for `AuthProtect` in `Strict` and `Lax` mode
+  * `Enter` instances for `AuthProtected`
+  * combinators to support `Basic` authentication.
+  * combinators to support `JWT` authentication
 
 0.4.1
 -----
diff --git a/servant/CHANGELOG.md b/servant/CHANGELOG.md
index 043320ae..34a094a4 100644
--- a/servant/CHANGELOG.md
+++ b/servant/CHANGELOG.md
@@ -4,6 +4,12 @@ HEAD
 * Add `HttpVersion`, `IsSecure`, `RemoteHost` and `Vault` combinators
 * Fix safeLink, so Header is not in fact required.
 * Added more instances for (:<|>)
+* Add combinators for the new authentication framework:
+  * `AuthPolicy` universe to parameterize authentication policy strictness.
+  * `AuthProtect` combinator used to protect sets of endpoints
+  * `AuthProtected` data family that users will provide at the server/client-level.
+  * `BasicAuth` data type for `Basic` authentication.
+  * `JSON` data type for `JWT` authentication.
 
 0.4.2
 -----