ALTER TABLE `users`
  MODIFY COLUMN `role` ENUM('user', 'admin', 'super_admin') NOT NULL DEFAULT 'user',
  ADD COLUMN `username` VARCHAR(64) NULL AFTER `id`,
  ADD COLUMN `passwordHash` VARCHAR(255) NULL AFTER `username`,
  ADD COLUMN `isActive` INT NOT NULL DEFAULT 0 AFTER `role`,
  ADD COLUMN `mustChangePassword` INT NOT NULL DEFAULT 1 AFTER `isActive`,
  ADD COLUMN `sessionVersion` INT NOT NULL DEFAULT 0 AFTER `mustChangePassword`,
  ADD COLUMN `lastLoginAt` TIMESTAMP NULL AFTER `updatedAt`;

UPDATE `users`
SET `username` = CONCAT('legacy_user_', `id`),
    `isActive` = 0,
    `mustChangePassword` = 1,
    `sessionVersion` = `sessionVersion` + 1;

ALTER TABLE `users`
  MODIFY COLUMN `username` VARCHAR(64) NOT NULL,
  ADD UNIQUE INDEX `users_username_unique` (`username`),
  DROP INDEX `users_openId_unique`,
  DROP COLUMN `openId`,
  DROP COLUMN `loginMethod`,
  DROP COLUMN `lastSignedIn`;