FOSUserBundle password hashing upgrade on password changes

migration.sql

UPDATE fos_user SET password_encoder = 'legacy_sha512';

PasswordHashUpgrader.php

<?php

namespace Incenteev\WebBundle\Util;

use FOS\UserBundle\Model\UserInterface;
use FOS\UserBundle\Util\PasswordUpdaterInterface;
use Incenteev\WebBundle\Entity\User;

class PasswordHashUpgrader implements PasswordUpdaterInterface
{
    /**
     * @var PasswordUpdaterInterface
     */
    private $updater;

    public function __construct(PasswordUpdaterInterface $updater)
    {
        $this->updater = $updater;
    }

    public function hashPassword(UserInterface $user)
    {
        if ($user instanceof User && 0 !== strlen($user->getPlainPassword())) {
            // If we have a plain password to re-hash it, force resetting the encoder
            // being used to the best one.
            $user->resetPasswordEncoder();
        }

        $this->updater->hashPassword($user);
    }
}

security.yml

security:
    encoders:
        FOS\UserBundle\Model\User: bcrypt
        # legacy hashing algorithms being used in the project.
        # User objects using one of these will have the "passwordEncoder" property
        # set to the corresponding identifier.
        # User objects with "null" as "passwordEncoder" will use the default encoder
        # for this class, which is configured above.
        legacy_sha512: sha512

User.php

<?php

namespace Incenteev\WebBundle\Entity;

use Doctrine\ORM\Mapping as ORM;
use FOS\UserBundle\Model\User as BaseUser;
use Gedmo\Mapping\Annotation as Gedmo;
use Incenteev\WebBundle\Validator as IncenteevAssert;
use Symfony\Component\Security\Core\Encoder\EncoderAwareInterface;
use Symfony\Component\Validator\Constraints as Assert;

/**
 * @ORM\Table(name="users")
 * @ORM\Entity()
 */
class User extends BaseUser implements EncoderAwareInterface
{
    /**
     * @var int
     *
     * @ORM\Column(name="id", type="integer")
     * @ORM\Id
     * @ORM\GeneratedValue(strategy="AUTO")
     */
    protected $id;

    /**
     * @var string|null
     *
     * @ORM\Column(type="string", length=255, nullable=true)
     */
    private $passwordEncoder;

    public function resetPasswordEncoder()
    {
        $this->passwordEncoder = null;
    }

    public function getEncoderName()
    {
        return $this->passwordEncoder;
    }
}