My name is Florent Morselli (flɔʁɑ̃ mɔʁseli). I am a French web developer and project manager passionate about PHP, ReactJS and Free, Libre & Open-Source Software. As far as possible, I contribute to projects or publish my own work.
🧡 Since early 2025, I am proud to be a
. This allows me to help shape the future of the framework I use and love daily.
The projects I am working on are mainly related to security over web applications. In particular, you will find useful libraries of Symfony bundles for
- One-Time Passwords (TOTP/HOTP) => see https://github.com/Spomky-Labs/otphp,
- Json Web Tokens (JWT, including signed and encrypted ones) => see https://github.com/web-token,
- Web Push => see https://github.com/Spomky-Labs/web-push,
- Concise Binary Object Representation (CBOR) => see https://github.com/Spomky-Labs/cbor-php,
- Webauthn => see https://github.com/web-auth.
Among all of these projects, let me encourage you to read more about Webauthn, a PHP implementation I am working on since end of 2018 and that will help you to get rid of passwords.
In addition, I had the opportunity to share my knowledge during the following events:
- September 2022: I presented the possibilities offered by this technology during the second edition of ApiPlatformCon in September 2022 in Lille, France.
- March 2023, I gave two 1-day workshops during the Symfony Live Paris 2023.
- December 2023, I gave a 1-day workshop during the Symfony Con Brussels 2023.
- March 2024, I presented my feedback on the Progressive Web Apps and gave a 1-day workshop during the Symfony Live 2024.
- March 2025, I gave a 1-day workshop during the Symfony Live 2025
Feel free to ask me about all of these FLOSS projects or reach me on any other topics you may want to discuss.
Hereafter an overview of my involvement in the Open-Source ecosystem. If you wish, you can sponsor me. The GitHub Sponsors page or the Patreon page are made for that purpose. Any help is greatly appreciated and allows me to spend time on these projects.
- symfony/aws-key-management - Symfony AWS Key Management Bridge (3 days ago)
- symfony/azure-keyvault-key-management - Symfony Azure Key Vault Key Management Bridge (3 days ago)
- symfony/google-cloud-key-management - Symfony Google Cloud Key Management Bridge (3 days ago)
- symfony/hashicorp-vault-key-management - Symfony HashiCorp Vault Key Management Bridge (3 days ago)
- symfony/key-management - Abstracts Key Management Systems (AWS KMS, Azure Key Vault, Google Cloud KMS, HashiCorp Vault Transit, Scaleway Key Manager, KMIP, ...) behind a single interface (3 days ago)
- symfony/scaleway-key-management - Symfony Scaleway Key Management Bridge (3 days ago)
- symfony/symfony - The Symfony PHP framework (3 days ago)
- Spomky-Labs/gh-runner - A container image for a self-hosted GitHub Actions runner. (4 days ago)
- beffroi-auth/docs - Documentation of Beffroi, an identity provider for the Symfony ecosystem: the identity core, OAuth 2.0 and OpenID Connect, the Symfony bundle and the standalone application. A static site on GitHub Pages, one branch per version. (4 days ago)
- Spomky-Labs/access-control-doc - Documentation of the Access Control framework. (5 days ago)
- ci: make ECS, Rector and PHPStan pass with the updated phpqa image on web-token/jwt-framework (today)
- feat(encryption): HPKE for JWE — Integrated Encryption and Key Encryption (draft-ietf-jose-hpke-encrypt) on web-token/jwt-framework (today)
- fix(bundle): load the profiled keys when collecting and report the failures on web-token/jwt-framework (today)
- Behind a proxy that terminates TLS, the site of SERVER_NAME on plain HTTP, the proxies Symfony trusts and the address of the client on beffroi-auth/docs (today)
- Every variable of the image, the value it takes there and its bounds, and whole deployments written with them on beffroi-auth/docs (2 days ago)
- [KeyManagement] Rewrap data keys through wrapDataKey(), not encrypt() on symfony/symfony (3 days ago)
- [KeyManagement] Bring the docs in line with the component on symfony/symfony-docs (3 days ago)
- A Docker daemon of the container's own when the host's socket is not mounted on Spomky-Labs/gh-runner (4 days ago)
- Publish the container for linux/arm64 too, each platform built natively on laminas/automatic-releases (4 days ago)
- The GitHub CLI, the Compose and Buildx plugins of Docker, and passwordless sudo for the runner user on Spomky-Labs/gh-runner (4 days ago)
- leo-gan/GLD.SerializerBenchmark (v0.7.0, 1 day ago) - Serialization benchmarks (14 languages, ~20 standards, ~300 serializers), Compliance tests, Serialization 101–401 courses
- symfony/symfony (v8.1.10, 2 days ago) - The Symfony PHP framework
- symfony/framework-bundle (v8.1.10, 2 days ago) - Provides a tight integration between Symfony components and the Symfony full-stack framework
- symfony/security-core (v8.1.10, 2 days ago) - Symfony Security Component - Core Library
- symfony/security-http (v8.1.10, 2 days ago) - Symfony Security Component - HTTP Integration
- symfony/security-bundle (v8.1.10, 2 days ago) - Provides a tight integration of the Security component into the Symfony full-stack framework
- symfony/console (v8.1.10, 2 days ago) - Eases the creation of beautiful and testable command line interfaces
- symfony/mailer (v8.1.10, 2 days ago) - Helps sending emails
- symfony/mime (v8.1.10, 2 days ago) - Allows manipulating MIME messages
- symfony/validator (v8.1.10, 2 days ago) - Provides tools to validate values
