My name is Florent Morselli (flɔʁɑ̃ mɔʁseli). I am a French web developer and project manager passionate about PHP, ReactJS and Free, Libre & Open-Source Software. As far as possible, I contribute to projects or publish my own work.
🧡 Since early 2025, I am proud to be a
. This allows me to help shape the future of the framework I use and love daily.
The projects I am working on are mainly related to security over web applications. In particular, you will find useful libraries of Symfony bundles for
- One-Time Passwords (TOTP/HOTP) => see https://github.com/Spomky-Labs/otphp,
- Json Web Tokens (JWT, including signed and encrypted ones) => see https://github.com/web-token,
- Web Push => see https://github.com/Spomky-Labs/web-push,
- Concise Binary Object Representation (CBOR) => see https://github.com/Spomky-Labs/cbor-php,
- Webauthn => see https://github.com/web-auth.
Among all of these projects, let me encourage you to read more about Webauthn, a PHP implementation I am working on since end of 2018 and that will help you to get rid of passwords.
In addition, I had the opportunity to share my knowledge during the following events:
- September 2022: I presented the possibilities offered by this technology during the second edition of ApiPlatformCon in September 2022 in Lille, France.
- March 2023, I gave two 1-day workshops during the Symfony Live Paris 2023.
- December 2023, I gave a 1-day workshop during the Symfony Con Brussels 2023.
- March 2024, I presented my feedback on the Progressive Web Apps and gave a 1-day workshop during the Symfony Live 2024.
- March 2025, I gave a 1-day workshop during the Symfony Live 2025
Feel free to ask me about all of these FLOSS projects or reach me on any other topics you may want to discuss.
Hereafter an overview of my involvement in the Open-Source ecosystem. If you wish, you can sponsor me. The GitHub Sponsors page or the Patreon page are made for that purpose. Any help is greatly appreciated and allows me to spend time on these projects.
- web-auth/cose-lib - Cose Key and Algorithms support (today)
- web-token/jwt-framework - JWT Framework (today)
- Spomky-Labs/cbor-bundle - CBOR Encoder/Decoder Bundle for Symfony (1 day ago)
- Spomky-Labs/cbor-php - CBOR Encoder/Decoder for PHP (1 day ago)
- Spomky-Labs/pki-framework - Public Key Infrastructure (1 day ago)
- leo-gan/GLD.SerializerBenchmark - Serialization benchmarks (13 languages, 200+ codecs), Compliance tests, Serialization 101–401 course (1 day ago)
- web-auth/webauthn-framework - FIDO-U2F / FIDO2 / Webauthn Framework (3 days ago)
- Spomky-Labs/web-push - This framework contains PHP libraries and Symfony bundle to allow developers to integrate web-push notifications into their web applications. (5 days ago)
- symfony/security-bundle - Provides a tight integration of the Security component into the Symfony full-stack framework (5 days ago)
- symfony/security-http - Symfony Security Component - HTTP Integration (5 days ago)
- feat(headers): 3161-ttc and 3161-ctt timestamp tokens, carried and bound, not validated (RFC 9921) (#217) on web-auth/cose-lib (today)
- docs: ES256K moves from the experimental table to the standard one (RFC 8812) on web-token/jwt-doc (today)
- feat(signature): move ES256K from the experimental package to the library (RFC 8812) on web-token/jwt-framework (today)
- docs: document ML-DSA and the AKP key type (RFC 9964) on web-token/jwt-doc (today)
- feat(signature): ML-DSA-44/65/87 and the AKP key type via OpenSSL 3.5 (RFC 9964) on web-token/jwt-framework (today)
- docs: document Ed25519, Ed448, X448 and the EdDSA deprecation (RFC 9864) on web-token/jwt-doc (today)
- feat(signature): Ed25519 and Ed448 fully-specified algorithms, X448 for ECDH-ES (RFC 9864, RFC 8037) on web-token/jwt-framework (today)
- docs: document the JWK Thumbprint URI (RFC 9278) on web-token/jwt-doc (today)
- feat(core): JWK Thumbprint URI (RFC 9278) on web-token/jwt-framework (today)
- docs: document the "typ" header checker (RFC 8725 §3.11) on web-token/jwt-doc (today)
- Spomky-Labs/pki-framework (1.6.3, 1 day ago) - Public Key Infrastructure
- Spomky-Labs/cbor-php (3.4.1, 1 day ago) - CBOR Encoder/Decoder for PHP
- web-auth/cose-lib (4.8.1, 1 day ago) - Cose Key and Algorithms support
- web-token/jwt-framework (4.2.3, 1 day ago) - JWT Framework
- api-platform/core (v5.0.0-beta.1, 1 day ago) - The server component of API Platform: hypermedia and GraphQL APIs in minutes
- leo-gan/GLD.SerializerBenchmark (v0.3.0, 1 day ago) - Serialization benchmarks (13 languages, 200+ codecs), Compliance tests, Serialization 101–401 course
- web-auth/webauthn-framework (5.3.9, 3 days ago) - FIDO-U2F / FIDO2 / Webauthn Framework
- Spomky-Labs/cbor-bundle (3.1.0, 1 week ago) - CBOR Encoder/Decoder Bundle for Symfony
- symfony/symfony (v8.1.6, 2 weeks ago) - The Symfony PHP framework
- symfony/console (v8.1.6, 2 weeks ago) - Eases the creation of beautiful and testable command line interfaces
