[Security] deprecate BCryptPasswordEncoder in favor of NativePasswordEncoder

Author: nicolas-grekas

Encoder/BCryptPasswordEncoder.php

@@ -11,11 +11,15 @@
 
 namespace Symfony\Component\Security\Core\Encoder;
 
+@trigger_error(sprintf('The "%s" class is deprecated since Symfony 4.3, use "%s" instead.', BCryptPasswordEncoder::class, NativePasswordEncoder::class), E_USER_DEPRECATED);
+
 use Symfony\Component\Security\Core\Exception\BadCredentialsException;
 
 /**
  * @author Elnur Abdurrakhimov <[email protected]>
  * @author Terje Bråten <[email protected]>
+ *
+ * @deprecated since Symfony 4.3, use NativePasswordEncoder instead
  */
 class BCryptPasswordEncoder extends BasePasswordEncoder implements SelfSaltingEncoderInterface
 {

Encoder/EncoderFactory.php

@@ -106,6 +106,7 @@ private function getEncoderConfigFromAlgorithm($config)
                     ],
                 ];
 
+            /* @deprecated since Symfony 4.3 */
             case 'bcrypt':
                 return [
                     'class' => BCryptPasswordEncoder::class,

Tests/Encoder/BCryptPasswordEncoderTest.php

@@ -16,6 +16,8 @@
 
 /**
  * @author Elnur Abdurrakhimov <[email protected]>
+ *
+ * @group legacy
  */
 class BCryptPasswordEncoderTest extends TestCase
 {