symfony - Digital Craftsman

symfony

A collection of 41 posts

Remove unnecessary polyfills from composer

Remove unnecessary polyfills from composer

Frameworks like Symfony and packages include a lot of polyfills. Not just for extensions but also for older PHP versions. It's not really a bad thing, I use it myself in one of my packages. As far as I'm aware, having them installed has no measurable performance impact. But it's

Reduced complexity in HandlerWrapper of CQRS bundle

Reduced complexity in HandlerWrapper of CQRS bundle

Two days ago I released a new version (0.5.0) of the CQRS bundle for Symfony. It contains the following changes. Reduced complexity in the HandlerWrapper Previously the HandlerWrapper contained 4 steps: * prepare * catch * then * finally When looking through the implementations, I realized that there are no cases that

Package for Id and IdList value objects with Symfony

Package for Id and IdList value objects with Symfony

Just recently I wrote about how I handle ids and id lists as value objects in my projects. Shortly after, I realised that the version I'm using isn't the same in all the projects and decided to streamline them and move them into an open source id package for Symfony

Using CQRS in Symfony

Using CQRS in Symfony

Symfony is really great for building APIs very fast. Especially when using a CRUD / REST methodology. Simply because there are a lot of resources and tools build-in (API platform, request parameter converter, dependency injection into controller methods, ...). There is not that much support for building apps with CQRS. On the

Login throttling with Symfony and multiple server instances

Login throttling with Symfony and multiple server instances

Login throttling is possible with Symfony out of the box since 5.2. But the default configuration doesn't work as soon as you have multiple server instances. Why? Because it stores the relevant data on the local filesystem. So all we need to do is to exchange the storage layer

Beware of APP_DEBUG='false'

Beware of APP_DEBUG='false'

Symfony contains a great way to use environment variables in the service configuration. With the environment processor it's possible to supply bool variables the following way. # Subscribers App\EventSubscriber\ExceptionSubscriber: arguments: $areAllExceptionsTranslated: '%env(bool:ARE_ALL_EXCEPTIONS_TRANSLATED)%' tags: [kernel.event_subscriber] The related configuration in the .env

Adapt timezone for PHP worker on Heroku

Adapt timezone for PHP worker on Heroku

When working with custom timezones and Heroku, you have to make sure to add the timezone everywhere. I've published a post recently how to configure it for the web dyno and Postgres [/adapt-timezones-on-heroku]. In usual hosted environments there is a php.ini file where you add the timezone and it's

Symfony Messenger with custom serializer

Symfony Messenger with custom serializer

Using the JSON serializer makes the messages a lot more readable. But there are still instances where this is not enough or might even be a step back from the default serializer. For example when using UUIDs. When you want to have this, you need to define a custom serializer.

Symfony messenger with JSON messages

Symfony messenger with JSON messages

When you start a new project with the Symfony messenger component, the messages will be serialized through the PHP serialization. This has the advantages that you don't need a constructor with all properties and no public properties. On the other hand when you look into the database to see the

Symfony route parameter with slash as part of the parameter

Symfony route parameter with slash as part of the parameter

Usually the parameter you put in your url looks something like this: api_with_token: path: '/api/update-user/{token}' defaults: { _controller: App\Controller\UserController::update } methods: [POST] With this there is no way for your parameter to include a /. If you call the url /api/update-user/my/token

UUIDs with serializer in Symfony

UUIDs with serializer in Symfony

Internally I've long switched to UUIDs instead of auto increment columns for my Doctrine entities. But as soon as I'm in the realm of business logic or serialization, I always convert the UUIDs to strings. Which doesn't really makes sense as I loose a layer of type safety through that.

Upload fixture files to Cloudcube on every review app creation

Upload fixture files to Cloudcube on every review app creation

The automatic creation of review apps is one of the biggest advantages of using Heroku. But what about using files in your S3 bucket? I've build a Symfony console command to upload files automatically to Cloudcube through flysystem. The command receives a path to a directory with fixture files and

Serialize empty object as empty object instead of empty array with Symfony serializer

Serialize empty object as empty object instead of empty array with Symfony serializer

The Symfony serializer now for long had the logic that any object without values will be serialized to an empty array. The problem here is for the frontend when they expect an object. For example they might have a Typescript interface like the following: interface User { firstName: string; lastName: string;

Import database from dump with Doctrine and Symfony

Import database from dump with Doctrine and Symfony

There are tickets where you have to import a database over and over again. For this it's awesome if you have some kind of automation going. Turns out there is one so easy in Symfony that you don't even think of it. A simple Symfony console command provided with the

Show environment variables in Symfony

Show environment variables in Symfony

Environment variables can be defined in multiple files and you might need to check a few to see what is used at the moment. Much easier is running the following command to show all environment variables used in the currently used environment with: php bin/console debug:container --env-vars Or

Get global symfony kernel parameters

Get global symfony kernel parameters

Recently I needed to inject the current environment into a service, but couldn't remember how the parameter Symfony offers for it was named. Luckily you can output the existing parameters on the console. And it makes it easier if you remember that it was something with "kernel". Just run the

Improve security when working with JWT and Symfony

symfony Featured

Improve security when working with JWT and Symfony

Using JWT for authentication in a SPA with Symfony is very easy thanks to bundles like FOSUserBundle, LexikJWTAuthenticationBundle and JWTRefreshTokenBundle. Unfortunately they don't provide security against XSS attacks (which you can argue isn't really there purpose). In this post I want to show how we can enhance a Symfony application

Remove JWT refresh token on logout in Symfony

Remove JWT refresh token on logout in Symfony

Using JWT has a few advantages when working with SPAs, but also a few security disadvantages. One of them is that (depending on the implementation) with only a refresh token you can initiate a new session. This is especially problematic if it's not cleared after logout which is the default

Cors Listener in Symfony backend

Cors Listener in Symfony backend

When working with a frontend and backend on different domains I run into issues with the cors headers. Here's a way to solve them for a Symfony backend. A setup might look like the following: * www.awesomeproject.tld (Your Website - Frontend) * app.awesomeproject.tld (Your API - Backend) Frontend

Serialize null as undefined with Symfony serializer

Serialize null as undefined with Symfony serializer

There are two popular packages when for serialization when working with Symfony or with PHP in general. One serializes null as undefined and one as null. The one serializing it as undefined by is the JMS serializer [https://jmsyst.com/libs/serializer]. Both packages are getting faster and depending on

Catch all routing in Symfony

Catch all routing in Symfony

When building single page applications, I still base them on top of symfony as I want to use the Symfony profiler. The whole routing should still take place in the frontend, so I want to redirect all routes to the frontend except those starting with /api. To archive this I've

Generate a new JWT public and private key

Generate a new JWT public and private key

JSON Web Tokens are becoming more and more common in single page applications and I'm also using them in multiple projects. But I also forget how to generate a new token (private and public keys). Which is a common task as you should have a different token in your development

Create new JWT when user updates email address (username)

Create new JWT when user updates email address (username)

Using JWT for a single page application in combination with Symfony in the backend is great when using the bundles lexik/jwt-authentication-bundle and gesdinet/jwt-refresh-token-bundle. * lexik/jwt-authentication-bundle provides general JWT based authentication. * gesdinet/jwt-refresh-token-bundle provies a way to add a refresh token to refresh the JWT when it's expired. The

Symfony http basic auth for debugging on live server

Symfony http basic auth for debugging on live server

When deploying a Symfony application you usually remove the dev environment for security reasons. Which of course makes it more difficult to debug the system if there are errors occurring. An easy solution would be to hide the dev environment behind a http basic auth. Unfortunately there doesn't seem to

Get translatable entity from repository with specific locale

Get translatable entity from repository with specific locale

I wanted to have translatable entities in my project. So I used Gedmo translatable [https://github.com/Atlantic18/DoctrineExtensions/blob/master/doc/translatable.md] through the doctrine extensions bundle [https://github.com/stof/StofDoctrineExtensionsBundle] for Symfony. When using any kind of entity repository, a listener automatically pulls the right translation