Freelance full stack developer
I've been a full stack developer for 20 years, freelance since 2014, based in Bordeaux (France) and working remotely. Back end: Symfony, API Platform and PHP; front end: Nuxt.js, Vue.js and TypeScript.
I've just finished a five-year engagement with an energy supplier in Bordeaux, on the customer applications for businesses and households, the internal APIs and document management. Before going freelance, I spent eight years at IT consulting firms on large-account applications (banking, energy, public sector).
On Malt: 58 completed projects, rated 5/5 across 44 reviews.
I was an OpenClassrooms mentor for three years (PHP / Symfony developer path) and a Laravel trainer for development teams and Toulouse III University. I built this site to learn to code by coding: real frameworks running in the browser, exercises checked by tests, nothing to install. The blog posts start from those exercises and dig into what's new in Symfony, Laravel and PHP.
I'm available for new projects: reach me through Malt, LinkedIn or the contact form.
Symfony 8.2 encrypts a Doctrine column with an attribute, and makes it searchable with a blind index. What that protects against, what the database loses, and how to encrypt a column that already holds data.
How the apprendre.forelse.fr playground puts a whole Symfony or Laravel project in a link, with no database, and why shared code never runs on its own.
Symfony 8.2 turns a ValidationFailedException into a 422 response. A good opportunity to revisit what an API should return when a request is invalid: HTTP status codes, the Problem Details format, stable codes and logging.
Invalid token, 419, CSRF verification failed: what the CSRF token really protects, when it is still needed in the age of SameSite cookies, and how Symfony, Laravel, Django and Rails handle it.
Symfony 8.2 records on the token every proof of identity given during the session. Enough to write SMS two-factor authentication without a bundle, without adding a role to the token and without a subscriber: an authenticator for the code, a voter that requires both proofs, an entry point that asks for the missing one.
Is a session opened three weeks ago worth a password typed a minute ago? When to ask for proof again, which proof, and how to do it without breaking the user's flow, with or without Symfony 8.2.