symfony - Digital Craftsman

Beware of APP_DEBUG='false'

Symfony contains a great way to use environment variables in the service configuration. With the environment processor it's possible to supply bool variables the following way. # Subscribers App\EventSubscriber\ExceptionSubscriber: arguments: $areAllExceptionsTranslated: '%env(bool:ARE_ALL_EXCEPTIONS_TRANSLATED)%' tags: [kernel.event_subscriber]The related configuration in the .env

symfony

Adapt timezone for PHP worker on Heroku

When working with custom timezones and Heroku, you have to make sure to add the timezone everywhere. I've published a post recently how to configure it for the web dyno and Postgres. In usual hosted environments there is a php.ini file where you add the timezone and it's used

symfony

Symfony Messenger with custom serializer

Using the JSON serializer makes the messages a lot more readable. But there are still instances where this is not enough or might even be a step back from the default serializer. For example when using UUIDs. When you want to have this, you need to define a custom serializer.

symfony

Symfony messenger with JSON messages

When you start a new project with the Symfony messenger component, the messages will be serialized through the PHP serialization. This has the advantages that you don't need a constructor with all properties and no public properties. On the other hand when you look into the database to see the

symfony

Symfony route parameter with slash as part of the parameter

Usually the parameter you put in your url looks something like this: api_with_token: path: '/api/update-user/{token}' defaults: { _controller: App\Controller\UserController::update } methods: [POST]With this there is no way for your parameter to include a /. If you call the url /api/update-user/my/token

symfony

UUIDs with serializer in Symfony

Internally I've long switched to UUIDs instead of auto increment columns for my Doctrine entities. But as soon as I'm in the realm of business logic or serialization, I always convert the UUIDs to strings. Which doesn't really makes sense as I loose a layer of type safety through that.

symfony

Upload fixture files to Cloudcube on every review app creation

The automatic creation of review apps is one of the biggest advantages of using Heroku. But what about using files in your S3 bucket? I've build a Symfony console command to upload files automatically to Cloudcube through flysystem. The command receives a path to a directory with fixture files and

php

Serialize empty object as empty object instead of empty array with Symfony serializer

The Symfony serializer now for long had the logic that any object without values will be serialized to an empty array. The problem here is for the frontend when they expect an object. For example they might have a Typescript interface like the following: interface User { firstName: string; lastName: string;

doctrine

Import database from dump with Doctrine and Symfony

There are tickets where you have to import a database over and over again. For this it's awesome if you have some kind of automation going. Turns out there is one so easy in Symfony that you don't even think of it. A simple Symfony console command provided with the

symfony

Show environment variables in Symfony

Environment variables can be defined in multiple files and you might need to check a few to see what is used at the moment. Much easier is running the following command to show all environment variables used in the currently used environment with: php bin/console debug:container --env-varsOr use

symfony

Get global symfony kernel parameters

Recently I needed to inject the current environment into a service, but couldn't remember how the parameter Symfony offers for it was named. Luckily you can output the existing parameters on the console. And it makes it easier if you remember that it was something with "kernel". Just run the

symfony

Improve security when working with JWT and Symfony

Using JWT for authentication in a SPA with Symfony is very easy thanks to bundles like FOSUserBundle, LexikJWTAuthenticationBundle and JWTRefreshTokenBundle. Unfortunately they don't provide security against XSS attacks (which you can argue isn't really there purpose). In this post I want to show how we can enhance a Symfony application

php

Remove JWT refresh token on logout in Symfony

Using JWT has a few advantages when working with SPAs, but also a few security disadvantages. One of them is that (depending on the implementation) with only a refresh token you can initiate a new session. This is especially problematic if it's not cleared after logout which is the default

symfony

Cors Listener in Symfony backend

When working with a frontend and backend on different domains I run into issues with the cors headers. Here's a way to solve them for a Symfony backend. A setup might look like the following: www.awesomeproject.tld (Your Website - Frontend) app.awesomeproject.tld (Your API - Backend)Frontend

symfony

Serialize null as undefined with Symfony serializer

There are two popular packages when for serialization when working with Symfony or with PHP in general. One serializes null as undefined and one as null. The one serializing it as undefined by is the JMS serializer. Both packages are getting faster and depending on when you look at them

symfony

Catch all routing in Symfony

When building single page applications, I still base them on top of symfony as I want to use the Symfony profiler. The whole routing should still take place in the frontend, so I want to redirect all routes to the frontend except those starting with /api. To archive this I've

security

Generate a new JWT public and private key

JSON Web Tokens are becoming more and more common in single page applications and I'm also using them in multiple projects. But I also forget how to generate a new token (private and public keys). Which is a common task as you should have a different token in your development

symfony

Create new JWT when user updates email address (username)

Using JWT for a single page application in combination with Symfony in the backend is great when using the bundles lexik/jwt-authentication-bundle and gesdinet/jwt-refresh-token-bundle. lexik/jwt-authentication-bundle provides general JWT based authentication. gesdinet/jwt-refresh-token-bundle provies a way to add a refresh token to refresh the JWT when it's expired. The

php

Symfony http basic auth for debugging on live server

When deploying a Symfony application you usually remove the dev environment for security reasons. Which of course makes it more difficult to debug the system if there are errors occurring. An easy solution would be to hide the dev environment behind a http basic auth. Unfortunately there doesn't seem to

symfony

Get translatable entity from repository with specific locale

I wanted to have translatable entities in my project. So I used Gedmo translatable through the doctrine extensions bundle for Symfony. When using any kind of entity repository, a listener automatically pulls the right translation according to the current locale (from request or the default one). This is a really

symfony

Use environment variables as Symfony parameters

I had a case where I wanted to store a configuration into a vhost environment variable. But how to get this into your symfony parameters? There is a special environment variable prefix in Symfony which will automatically be converted into a parameters variable. It is SYMFONY__. The prefix will be

symfony

Disable elements in the Symfony developer toolbar with CompilerPass

One of the comments of the "Disable elements in the Symfony developer toolbar" post was the question to do the same thing with a compiler pass instead of overwriting the definitions with the services.yml Wouldn't it be a cleaner approach to have a compiler pass that would

symfony

Disable elements in the Symfony developer toolbar

There are a lot of handy elements in the Symfony toolbar. But I think - especially with the last version - the toolbar got a little bit crowded. There are just a few elements I don't need (at least not for now). So I looked into how to remove them.

symfony

How to pass SensioLabs Insight route check when using SonataAdminBundle

One of the rules SensioLabs Insight checks for is: A route should always have a valid HTTP method This will always fail when you use the SonataAdminBundle, because there is no way to set the methods in all routes generated by the admin classes. You can show them with the

php

Add Access-Control-Allow-Origin

Cross-site HTTP requests are HTTP requests for resources from a different domain than the domain of the resource making the request. For instance, a resource loaded from Domain A (http://www.liplex.de) such as an HTML web page, makes a request for a resource on Domain B (http://api.