Hi there 👋
My name is Florent Morselli (flɔʁɑ̃ mɔʁseli). I am a French web developer and project manager passionate about PHP, ReactJS and Free, Libre & Open-Source Software. As far as possible, I contribute to projects or publish my own work.
The projects I am working on are mainly related to security over web applications. In particular, you will find useful libraries of Symfony bundles for
- One-Time Passwords (TOTP/HOTP) => see https://github.com/Spomky-Labs/otphp,
- Json Web Tokens (JWT, including signed and encrypted ones) => see https://github.com/web-token,
- Web Push => see https://github.com/Spomky-Labs/web-push,
- Concise Binary Object Representation (CBOR) => see https://github.com/Spomky-Labs/cbor-php,
- Webauthn => see https://github.com/web-auth.
Among all of these projects, let me encourage you to read more about Webauthn, a PHP implementation I am working on since end of 2018 and that will help you to get rid of passwords. I presented the possibilities offered by this technology during the second edition of ApiPlatformCon in September 2022 in Lille, France.
In addition, I had the opportunity to share my knowledge on web application security on workshops I gave during Symfony Live Paris 2023. In December 2024, I will provide new training on security with Symfony.
Feel free to ask me about all of these FLOSS projects or reach me on any other topics you may want to discuss.
Hereafter an overview of my involvement in the Open-Source ecosystem. If you wish, you can sponsor me. The GitHub Sponsors page or the Patreon page are made for that purpose. Any help is greatly appreciated and allows me to spend time on these projects.
👷 Check out what I'm currently working on
- web-auth/symfony-webauthn-demo - Demo Application using Symfony 6, Tailwind, FrankenPHP, AssetMapper and Webauthn (3 days ago)
- Spomky-Labs/meteofony - [FAKE APP] Community-Driven Weather App (3 days ago)
- web-auth/webauthn-framework - FIDO-U2F / FIDO2 / Webauthn Framework (3 days ago)
- Spomky-Labs/web-push-demo - (6 days ago)
- Spomky-Labs/web-push - This framework contains PHP libraries and Symfony bundle to allow developers to integrate web-push notifications into their web applications. (6 days ago)
- Spomky-Labs/keycloak-app - Keycloak (2 weeks ago)
- Spomky-Labs/otphp - 🔐 A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP) (2 weeks ago)
- Spomky-Labs/php-aes-gcm - AES Galois Counter Mode encryption library for PHP (1 month ago)
- symfony/symfony-docs - The Symfony documentation (2 months ago)
- web-token/jwt-framework - JWT Framework (3 months ago)
🔨 My recent Pull Requests
- Merge up 4.8.x to 5.0.0 on web-auth/webauthn-framework (3 days ago)
- Comments addressed on web-auth/webauthn-framework (3 days ago)
- Merge up 4.7.x to 4.8.x on web-auth/webauthn-framework (3 days ago)
- Deprecations/xsd validation on web-auth/webauthn-framework (3 days ago)
- Enable XSD validation for Doctrine ORM 3.0 compat on web-auth/webauthn-framework (3 days ago)
- Remove useless CBOR Bundle (only lib us used) on web-auth/webauthn-framework (4 days ago)
- Merge up 4.8.x to 5.0.x on web-auth/webauthn-framework (5 days ago)
- Merge up 4.7.x to 4.8.x on web-auth/webauthn-framework (5 days ago)
- Parameter residentKey should not be ignored when initializing Authent… on web-auth/webauthn-framework (5 days ago)
- Enable XSD validation for Doctrine ORM 3.0 compat on web-auth/webauthn-framework (5 days ago)
🔭 Latest releases I've contributed to
- web-auth/webauthn-framework (4.7.7, 3 days ago) - FIDO-U2F / FIDO2 / Webauthn Framework
- Spomky-Labs/web-push (3.0.0, 6 days ago) - This framework contains PHP libraries and Symfony bundle to allow developers to integrate web-push notifications into their web applications.
- symfony/validator (v7.0.0-RC1, 1 week ago) - Provides tools to validate values
- symfony/symfony (v7.0.0-RC1, 1 week ago) - The Symfony PHP framework
- web-token/jwt-framework (3.2.8, 3 months ago) - JWT Framework
- web-auth/cose-lib (4.2.3, 3 months ago) - Cose Key and Algorithms support
- Spomky-Labs/otphp (11.2.0, 7 months ago) - 🔐 A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP)
- web-token/jwt-app (3.1.7, 7 months ago) - Standalone PHAR application to manage JWK, JWKSet and more
- Spomky-Labs/cbor-php (3.0.2, 8 months ago) - CBOR Encoder/Decoder for PHP
- Spomky-Labs/pki-framework (1.1.0, 9 months ago) - Public Key Infrastructure
❤️ These awesome people sponsor me (thank you!)
- YousignAdmin (10 months ago)
- chalasr (2 years ago)
- ErnadoO (2 years ago)
- passbolt (2 years ago)









