My name is Florent Morselli (flɔʁɑ̃ mɔʁseli). I am a French web developer and project manager passionate about PHP, ReactJS and Free, Libre & Open-Source Software. As far as possible, I contribute to projects or publish my own work.
The projects I am working on are mainly related to security over web applications. In particular, you will find useful libraries of Symfony bundles for
- One-Time Passwords (TOTP/HOTP) => see https://github.com/Spomky-Labs/otphp,
- Json Web Tokens (JWT, including signed and encrypted ones) => see https://github.com/web-token,
- Web Push => see https://github.com/Spomky-Labs/web-push,
- Concise Binary Object Representation (CBOR) => see https://github.com/Spomky-Labs/cbor-php,
- Webauthn => see https://github.com/web-auth.
Among all of these projects, let me encourage you to read more about Webauthn, a PHP implementation I am working on since end of 2018 and that will help you to get rid of passwords.
In addition, I had the opportunity to share my knowledge during the following events:
- September 2022: I presented the possibilities offered by this technology during the second edition of ApiPlatformCon in September 2022 in Lille, France.
- March 2023, I gave two 1-day workshops during the Symfony Live Paris 2023.
- December 2023, I gave a 1-day workshop during the Symfony Con Brussels 2023.
- March 2024, I presented my feedback on the Progressive Web Apps and gave a 1-day workshop during the Symfony Live 2024.
Feel free to ask me about all of these FLOSS projects or reach me on any other topics you may want to discuss.
Hereafter an overview of my involvement in the Open-Source ecosystem. If you wish, you can sponsor me. The GitHub Sponsors page or the Patreon page are made for that purpose. Any help is greatly appreciated and allows me to spend time on these projects.
- Spomky-Labs/pwa-bundle - PHP library for generating a full featured PWA manifest (1 day ago)
- web-token/jwt-framework - JWT Framework (2 days ago)
- symfony/symfony - The Symfony PHP framework (4 days ago)
- Spomky-Labs/meteofony - [FAKE APP] Community-Driven Weather App (1 week ago)
- web-auth/webauthn-framework - FIDO-U2F / FIDO2 / Webauthn Framework (3 weeks ago)
- dunglas/symfony-docker - A Docker-based installer and runtime for Symfony. Install: download and
docker compose up. (1 month ago) - Spomky-Labs/pki-framework - Public Key Infrastructure (1 month ago)
- Spomky-Labs/phpwa-demo - Demonstration for the PHPWA Bundle (1 month ago)
- Spomky-Labs/cbor-php - CBOR Encoder/Decoder for PHP (3 months ago)
- Spomky-Labs/beaver - My commands for Castor CLI (4 months ago)
- Update phpstan-baseline and GitHub workflow dependencies on web-token/jwt-framework (2 days ago)
- [Security] Add support for encrypted access tokens (JWE) in OIDC on symfony/symfony-docs (2 days ago)
- [Security] Update custom authenticator docs to include identifier normalization on symfony/symfony-docs (4 days ago)
- Add validation for missing "web-token/jwt-library" dependency on web-auth/webauthn-framework (1 week ago)
- Update WebAuthn method calls to use object parameters on web-auth/webauthn-framework (1 week ago)
- Update dependency twig/twig to v3.19.0 [SECURITY] on Spomky-Labs/phpwa-demo (1 week ago)
- Set a length limit for publicKeyCredentialId field on web-auth/webauthn-framework (3 weeks ago)
- Update build process and dependency versions on web-auth/webauthn-framework (3 weeks ago)
- Event dispatch payloads for WebAuthn failure cases on web-auth/webauthn-framework (3 weeks ago)
- Fix PHP 8.4 nullable type on web-auth/webauthn-framework (3 weeks ago)
- web-token/jwt-framework (4.0.3, 2 days ago) - JWT Framework
- symfony/symfony (v7.2.3, 1 week ago) - The Symfony PHP framework
- web-auth/webauthn-framework (5.1.1, 3 weeks ago) - FIDO-U2F / FIDO2 / Webauthn Framework
- symfony/maker-bundle (v1.62.1, 3 weeks ago) - Symfony Maker Bundle
- lexik/LexikJWTAuthenticationBundle (v3.1.1, 1 month ago) - JWT authentication for your Symfony API
- Spomky-Labs/pki-framework (1.2.2, 1 month ago) - Public Key Infrastructure
- Spomky-Labs/pwa-bundle (1.2.5, 1 month ago) - PHP library for generating a full featured PWA manifest
- ekino/phpstan-banned-code (v3.0.0, 3 months ago) - Detect banned code through PHPStan
- Spomky-Labs/beaver (1.0.0, 4 months ago) - My commands for Castor CLI
- web-auth/cose-lib (4.4.0, 6 months ago) - Cose Key and Algorithms support
