A new year with some ambitious prospects


On Monday June the 7th, we gathered all together to participate in the Ordinary General Assembly of Les-tilleuls.coop, during which we vote and decide on the applications to join the membership. The annual accounts and economics results of the past year are also shown and submitted to all of the worker-associates. The summary of our activity is also one of the main subjects during this crucial event of our cooperative life.



<figure class="wp-block-image"><a href="https://les-tilleuls.coop/fr/agency/social-project" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/436.jpg" alt="ago2021" title="ago2021"/></a></figure>



<h3>Summary of the past year</h3>



With the events related to the COVID-19, it has been a tough year for our co-op which, even before the announcement of the lockdown in March, decided to temporarily close its facilities and apply full teleworking. When the lockdown was announced, we already were equipped with the necessary tools and the methodologies were well established. Thanks to the fact that before that we used to telework part-time, the transition was easy and without any hiccups.



Regarding the offers, no changes were made and the results were quite positive : all of our consulting, development and training activities were done remotely and gave us the chance to work with some new partners located in the United Kingdom and in Germany.



Last Spring, our co-op was in the spotlight for the development of Click’N’Collect, a free and open-source platform based on Sylius to allow merchant to maintain their activity differently during the sanitary crisis. Still concerning technological evolution, we can highlight the release of API Platform v2.6, Mercure v0.10, and Panther v1.0.



Lastly, it’s with pleasure that we kept sharing our knowledge and showed our tool through various national and international events held remotely (finger crossed: we hope for this adaptation to become an old memory).



<h3>Acceptance of new cooperators</h3>



This day of the OGA, we have accepted <meta charset="utf-8"><a rel="noopener" href="https://twitter.com/rhedynen_" target="_blank">Vincent Fuger</a>, <a rel="noopener" href="https://github.com/grimpereau" target="_blank">Jade Bellereau</a>, <a rel="noopener" href="https://twitter.com/c0il" target="_blank">Loïc Vernet</a>, <a rel="noopener" href="https://fr.linkedin.com/in/c%C3%A9cile-ropital-536548104" target="_blank">Cécile Ropital</a> et <a rel="noopener" href="https://twitter.com/nik0phil" target="_blank">Nicolas Philippe</a>, all votes were unanimous. Congratulations to all of them ! The supervisory board was updated and new members were added: Jade Bellereau and Cécile Ropital joined <meta charset="utf-8"><a rel="noopener" href="https://twitter.com/_alanpoulain" target="_blank">Alan Poulain</a>, <a rel="noopener" href="https://twitter.com/s0yuka" target="_blank">Antoine Bluchet</a>, <a rel="noopener" href="https://twitter.com/gheb_dev" target="_blank">Grégoire Hébert</a> et <a rel="noopener" href="https://twitter.com/jockkos" target="_blank">Jacques Lefèbvre</a>, which one of their role is to check on the accounting and practices of the company.



<h3>A new year with some ambitious prospects</h3>



The management of our cooperative, executed by <meta charset="utf-8"><a rel="noopener" href="http://twitter.com/dunglas" target="_blank">Kévin Dunglas</a> since its foundation in 2011, did also evolve. After an experiment that started at the beginning of the year 2021, we are pleased to announce that Les-Tilleuls.coop is now co-managed by <meta charset="utf-8"><a rel="noopener" href="https://twitter.com/marion_age" target="_blank">Marion Agé</a>, who is now in charge of the strategic management of the cooperative with Kévin. Concerning how we rule, nothing has changed, every major decision is made on the day of the General Assembly which happens every month and the two co-ceo have a revocable imperative mandate to apply them. We will get back on that subject in the near future in the form of a dedicated blog post talking about the reason that motivated this paritary-based co-management.



Our cooperative, which celebrates its 10th anniversary this year, is pleased to be aligned in its growth known since its beginnings while renewing its internal management. Congratulations to Marion Agé and all of our encouragement in this new step that is opening for her and our cooperative.



Now, all eyes are focused on the month of September with <a href="https://api-platform.com/con/2021/" data-type="URL" data-id="https://api-platform.com/con/2021/">our first API Platform Con</a>, a day of English and French speaking conferences with renowned speakers talking about all of the API ecosystem. A bit more than half of the speakers have been announced, <a href="https://api-platform.com/con/2021/#pricing" data-type="URL" data-id="https://api-platform.com/con/2021/#pricing">don’t forget to get your ticket</a> before the places run out !

[Ordinary General Assembly 2021] Naming of a co-ceo: Marion Agé, 2020 a good year despite the global crisis

On Monday June the 7th, we gathered all together to participate in the Ordinary General Assembly of Les-tilleuls.coop, during which we vote and decide on the applications to join the membership. The annual accounts and economics results of the past year are also shown and submitted to all of the worker-associates. The summary of our [&hellip;]

[Ordinary General Assembly 2021] Naming of a co-ceo: Marion Agé, 2020 a good year despite the global crisis | Les-Tilleuls.coop

Accueil

Les-Tilleuls.coop

https://secure.gravatar.com/avatar/54fb8ea2a1a36c3b9ef44f25bf976b48?s=96&d=mm&r=g

Cécile Hamerel

Last month, we made a big announcement about API Platform’s community: Les-Tilleuls.coop is organizing <a href="https://api-platform.com/con/2021/" target="_blank" rel="noopener">the very first conference dedicated to API Platform and its ecosystem</a> and it will take place on September 10th 2021, in Lille (France) but also online.&nbsp;



<figure class="wp-block-image"><a href="https://api-platform.com/con/2021/#" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/432.png" alt="apicon" title="apicon"/></a></figure>







If you’re a PHP developer, <a href="https://api-platform.com/" target="_blank" rel="noopener">API Platform</a> should sound familiar: it is a framework based on Symfony that allows you to create hypermedia REST or GraphQL APIs in a few minutes. It is also a whole ecosystem of interoperable components that can be used independently if needed. With the use of the generator component on the client side (in particular with the <a href="https://nextjs.org/" target="_blank" rel="noopener">Next.js</a> and <a href="https://fr.nuxtjs.org/" target="_blank" rel="noopener">Nuxt.js</a> generators), it is possible to create a JAMstack website instantly (React, Vue.js, Vuetify, or Quasar integrations are also available). An admin interface, powered by React with Next.js and based on React Admin is also available. The development environment and deployment mechanism are based on Docker, Kubernetes and Helm. The architecture is based on the <a href="https://caddyserver.com/" target="_blank" rel="noopener">Caddy web server</a> along with the <a href="https://mercure.rocks/" target="_blank" rel="noopener">Mercure</a> and <a href="https://vulcain.rocks/" target="_blank" rel="noopener">Vulcain</a> protocols Go implementations.&nbsp;



Also, API Platform counts almost <a href="https://packagist.org/packages/api-platform/core" target="_blank" rel="noopener">7 million downloads on Packagist</a>, <a href="https://api-platform.com/community/contributors/" target="_blank" rel="noopener">700 contributors around the world</a>, <a href="https://www.meetup.com/fr-FR/api-platform" target="_blank" rel="noopener">1000 people on the meetup user group</a> and is a recurring topic of conferences.



<h3>A bilingual and hybrid gathering</h3>



You can attend the event in two ways:&nbsp;



<ul><li role="presentation">on site: the event will be held in the heart of Lille.&nbsp;You will be able to freely choose between one of the two stages (the English-speaking track hosted in the auditorium or the French-speaking track in the very next room). Note that <a href="https://api-platform.com/con/2021/#covid" target="_blank" rel="noopener">we will follow sanitary protocols</a>.&nbsp;</li><li role="presentation">online: the English-speaking track will be broadcasted live.</li></ul>



No call for papers needed for this edition, our team has created a line up that will delight multiple interests: we will talk about APIs, PHP, Symfony, JavaScript, React, Vue.js, Docker, or even Kubernetes&#8230;&nbsp;Some first speakers have already been announced:



<ul><li><a rel="noopener" href="https://twitter.com/lukaszchrusciel" target="_blank">Łukasz Chruściel</a> will show you the main challenges Sylius encountered in implementing API Platform in their project.</li><li><a rel="noopener" href="https://twitter.com/ZahiriJ" target="_blank">Justine Zahiri</a> will show you some of the latest changes in the API Platform Next.js client generator and prove that you don’t need to be an expert to contribute to API Platform.</li><li><a rel="noopener" href="https://twitter.com/samuelroze" target="_blank">Samuel Rozé</a> will talk about asynchronous APIs.</li><li>Other names will be announced on Monday 26th April, be patient!</li></ul>



<h3>Revenues transparency</h3>



API Platform Con is financed by only two sources of revenues: <a rel="noopener" href="https://api-platform.com/con/2021/#pricing" target="_blank">ticketing</a> and <a rel="noopener" href="https://api-platform.com/con/2021/#partners" target="_blank">sales of sponsor packages</a> to tech companies. However, making this day possible has various costs:



<ul><li role="presentation">Conference rooms rentals and audiovisual professionals&#8217; hiring.</li><li role="presentation">Speakers’ travel accommodation.</li><li role="presentation">Catering: orders of morning, lunch and afternoon coffee breaks and buffets.</li><li role="presentation">Marketing: graphic design, scenery, printing,&nbsp;web advertising&#8230;</li></ul>



If profits are made from this event, they will be donated to the development of the <a href="https://github.com/api-platform/api-platform" target="_blank" rel="noopener">API Platform project</a>. &nbsp;



Not registered yet? Early Bird tickets for the on-site event are available until April 30, so join us to make sure you don&#8217;t miss out! Your company would like to be one of our partners? Some slots are still available: <a href="mailto:events@les-tilleuls.coop?subject=API%20Platform%20Con%20Sponsorship%20Request">contact our team</a> to get the sponsorship&nbsp;brochure! If you have any questions about the event, <a href="https://api-platform.com/con/2021/faq/" target="_blank" rel="noopener">have a look on our FAQ section</a>.

Everything you need to know about API Platform Con

Last month, we made a big announcement about API Platform’s community: Les-Tilleuls.coop is organizing the very first conference dedicated to API Platform and its ecosystem and it will take place on September 10th 2021, in Lille (France) but also online.&nbsp; If you’re a PHP developer, API Platform should sound familiar: it is a framework based [&hellip;]

Everything you need to know about API Platform Con | Les-Tilleuls.coop

SIGNATURE_KEY=XAR5vxusewjY9KJ2w8apxVzVq5EPtl

&lt;?php
declare(strict_types=1);

namespace AppController;

use CoopTilleulsUrlSignerBundleUrlSignerUrlSignerInterface;
use SymfonyBundleFrameworkBundleControllerAbstractController;
use SymfonyComponentHttpFoundationJsonResponse;
use SymfonyComponentHttpFoundationResponse;
use SymfonyComponentRoutingAnnotationRoute;

class VideoController extends AbstractController
{
    public function __construct(
        private UrlSignerInterface $urlSigner,
    )
    {
    }

    #[Route('/videos/{id}/signed-url', methods: ['GET'])]
    public function newSignedUrl(string $id): Response
    {
        $this->denyAccessUnlessGranted('ROLE_USER');
        return new JsonResponse(['url' => $this->generateSignedUrl($id)]);
    }

    private function generateSignedUrl(string $id): string
    {
        $url = $this->generateUrl('download_video', ['id' => $id]);
        // Will expire after 10 seconds.
        $expiration = (new DateTime('now'))->add(new DateInterval('PT10S'));
        return $this->urlSigner->sign($url, $expiration);
    }
}

&lt;?php
declare(strict_types=1);

namespace AppController;

use SymfonyBundleFrameworkBundleControllerAbstractController;
use SymfonyComponentHttpFoundationBinaryFileResponse;
use SymfonyComponentHttpFoundationResponse;
use SymfonyComponentRoutingAnnotationRoute;

class VideoController extends AbstractController
{
    #[Route('/videos/{id}/download', name: 'download_video', defaults: ['_signed' => true], methods: ['GET'])]
    public function download(string $id): Response
    {
        // Get the file.        return new BinaryFileResponse();
    }
}

&lt;?php
declare(strict_types=1);

namespace AppEntity;

use ApiPlatformCoreAnnotationApiResource;
use AppControllerCreateSignedUrlVideoAction;
use AppControllerDownloadVideoAction;

#[ApiResource(
    itemOperations: [
    'get',
    'delete',
    'put',
    'signed_url' => [
        'security' => "is_granted('ROLE_USER')",
        'method' => 'GET',
        'path' => '/videos/{id}/signed-url',
        'controller' => CreateSignedUrlVideoAction::class,
    ],
    'download' => [
        'method' => 'GET',
        'path' => '/videos/{id}/download',
        'controller' => DownloadVideoAction::class,
        'defaults' => ['_signed' => true],
        'formats' => ['binary'],
    ],
],
)]
class Video
{
    // Properties, getters, setters
}

A signed URL is a URL containing authentication information directly in its query string. It allows a non-authenticated user to access protected resources or routes, for a limited time.



Signing a URL can be very useful in a stateless application. There are two main use cases for using them:



<ul><li>allowing an external user to access a resource otherwise not accessible without being authenticated,</li><li>downloading a file with the browser without using Ajax (without a fetch() sending the authentication information).</li></ul>



The latter is the most common use case. Let&#8217;s take an example: we have created a personal cloud where users can store their files. This application is built with a SPA for the front and communicates with a secured API by using a JWT token. Jean has uploaded a big video showing a live coding session of a nice feature in API Platform, and he wants to download it to watch it again.



The first reflex to implement this download feature in the SPA would be to do something like this:





This method has a lot of drawbacks:



<ul><li>The browser download interface is used only after the file has been downloaded. We need to show Jean that a download is ongoing, for instance by adding a spinner somewhere. Jean cannot pause or cancel the download.</li><li>The downloaded file is stored in memory until it is complete, which can cause performance issues if the file is too big.</li></ul>



To solve this, you could use the JWT token in the query string to download the video. Yes, <a href="https://tools.ietf.org/html/rfc6750#section-2.3" target="_blank" rel="noopener">it is possible</a>, but it is a bad idea:



<ul><li>A JWT token can be big. Big enough to exceed the URL length limit.</li><li>You don&#8217;t want the JWT tokens to show in your server logs. This is a security breach in your application that would facilitate a <a href="https://en.wikipedia.org/wiki/Session_hijacking">session hijacking</a> kind of attack.</li></ul>



That&#8217;s why in this case, it is preferable to use a signed URL, like this:





That&#8217;s way better: fetch() is only used to get the signed URL with authentication, signed URL which is then used directly to download the file. And of course you can also use this signed URL generation for adding a sharing feature, for instance if Jean wants his friends to download the video without being authenticated.



Laravel includes the <a href="https://laravel.com/docs/5.6/urls#signed-urls" target="_blank" rel="noopener">generation of signed URLs</a> since its version 5.6, but there was no easy way to do it in Symfony.



With the <a href="https://github.com/coopTilleuls/UrlSignerBundle" target="_blank" rel="noopener">UrlSignerBundle</a>, it has now been fixed!



So, how do we use it?



<h3>Usage</h3>



First step, install the bundle. By using Symfony Flex, it&#8217;s very straightforward:





Thanks to Flex, all the configuration has been done (see the config/packages/url_signer.yaml file).



Change the signature in the .env (or the .env.local) file:





Everything is ready to start using the bundle and to create your signed URL!



For instance in a controller, we will inject the UrlSignerInterface service and then use it to create a signed URL which will be returned in the JSON response of the /videos/{id}/signed-url route:





We can now retrieve a signed URL from the /videos/{id}/signed-url route. The signed URL will look like this:



/videos/d35e0296-7b19-42be-82f2-789213229f36/download?expires=1611316656&amp;signature=82f6958bd5c96fda58b7a55ade7f651fadb51e12171d58ed271e744bcc7c85c3



As you can see, the signed URL has two parameters:



<ul><li>expires which contains the timestamp of the expiration date: the URL is no longer valid after this date.</li><li>signature which is in fact the hash of the path, the expiration parameter and the secret.</li></ul>



The last step is to validate it when the route corresponding to the URL is accessed. We reuse our VideoController:





As you can see, we just added a _signed <a href="https://symfony.com/doc/current/routing.html#extra-parameters" target="_blank" rel="noopener">extra parameter</a> to the route. It is this parameter that activates the signature validation when a request hits the route.



And that&#8217;s it! If you access the download route without a signature or with an invalid signature, you will get a 403 response.



If you want to use signed URLs in API Platform, how do you do it? Well it&#8217;s even easier!



It will look like this:





The signed_url operation creates the signed URL (and has authentication). The download operation allows users to download the video using the signed URL, with the extra _signed parameter that enables validation of the signed URL. The corresponding controllers are very similar to the previous VideoController controller.



<h3>Features</h3>



There are of course other features in the bundle:



<ul><li>The algorithm to sign the URL can be changed. By default, it is SHA-256.</li><li>You can easily create your own Signer: extend the AbstractUrlSigner class, and you are done (you can use it by modifying the configuration in the config/packages/url_signer.yaml file)!</li><li>The time before expiration is customizable (by default 24h).</li><li>Parameter names in the signed URL are customizable.</li></ul>



<h3>How does it work?</h3>



Internally the bundle uses the library <a href="https://github.com/spatie/url-signer" target="_blank" rel="noopener">spatie/url-signer</a>.



Each Signer corresponds to an algorithm and extends an abstract class (AbstractUrlSigner) based on the Spatie URL signer. In a dedicated compiler pass, the configured signer is automatically aliased to the UrlSignerInterface.



For the validation, the method is really simple: an event listener is used. Each time a request is performed, it checks if the route has the _signed parameter. When it does, the signature is validated by the URL signer.



The bundle is very well tested: it has unit tests with PHPUnit and Prophecy and functional tests with Behat and the SymfonyExtension. The tests cover 100% of the code, and even better, the mutation score, calculated with the mutation testing framework <a href="https://infection.github.io" target="_blank" rel="noopener">Infection</a> is also 100%.



And finally, the type coverage is 100% too, calculated by Psalm (PHPStan is also used).



If you need signed URLs in a Symfony or API Platform project, this bundle is for you! Feel free to test it, tell us what you think about it, and why not contribute to its development on GitHub: <a href="https://github.com/coopTilleuls/UrlSignerBundle" target="_blank" rel="noopener">https://github.com/coopTilleuls/UrlSignerBundle</a>.

UrlSignerBundle, create and validate signed URLs with Symfony

A signed URL is a URL containing authentication information directly in its query string. It allows a non-authenticated user to access protected resources or routes, for a limited time. Signing a URL can be very useful in a stateless application. There are two main use cases for using them: allowing an external user to access [&hellip;]

UrlSignerBundle, create and validate signed URLs with Symfony | Les-Tilleuls.coop

https://secure.gravatar.com/avatar/04b6d9886e782e0676c0d26063f77ac9?s=96&d=mm&r=g

Alan Poulain

After almost a hundred contributions collected last year during <a href="https://hacktoberfest.digitalocean.com/" target="_blank" rel="noopener">Hacktoberfest</a>, we would like to once again thank the <a href="https://api-platform.com/" target="_blank" rel="noopener">API Platform</a> contributors by giving them a brand new and free T-shirt. To win our t-shirt, make 3 pull requests on <a href="https://github.com/api-platform" target="_blank" rel="noopener">API Platform&#8217;s GitHub</a> repositories by October 31st, and <a href="https://cooptilleuls.typeform.com/to/SPZIqyo4" target="_blank" rel="noopener">then fill in this form</a>.&nbsp;



<figure class="wp-block-image"><a href="https://cooptilleuls.typeform.com/to/SPZIqyo4" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/386.jpg" alt="vignette hacktoberfest" title="vignette hacktoberfest"/></a></figure>







Looking for some tips?&nbsp;



<ul><li style="text-align: justify;" role="presentation">Pull requests have to be approved by the API Platform Core Team. As long as they’ve been opened between October 1 and October 31, they count toward a free T-shirt.</li><li style="text-align: justify;" role="presentation">Your help will have a lasting impact on the tools you&#8217;re using&nbsp;so any contribution is welcome&nbsp;but keep in mind that quality is key.&nbsp;</li><li style="text-align: justify;" role="presentation">Looking for easy picks to earn a T-shirt? Some issues are already tagged on <a href="https://github.com/api-platform/core/issues?q=is%3Aissue+is%3Aopen+label%3AHacktoberfest" target="_blank" rel="noopener">API Platform core (PHP)</a>, <a href="https://github.com/api-platform/client-generator/issues?q=is%3Aissue+is%3Aopen+label%3AHacktoberfest" target="_blank" rel="noopener">Client Generator</a>, <a href="https://github.com/api-platform/docs/issues?q=is%3Aissue+is%3Aopen+label%3AHacktoberfest" target="_blank" rel="noopener">Docs</a> or in the <a href="https://github.com/api-platform/api-platform/issues?q=is%3Aissue+is%3Aopen+label%3AHacktoberfest" target="_blank" rel="noopener">Distribution</a>!</li></ul>



About Hacktoberfest: Hacktoberfest is a month-long celebration organized by DigitalOcean (in partnership this year with Intel and Dev) that promotes collaboration and contributions to open source software. Last year, 151 countries took part in the initiative and hundreds of thousands of pull requests were made.

Celebrate Hacktoberfest with API Platform and win a limited-edition t-shirt!

After almost a hundred contributions collected last year during Hacktoberfest, we would like to once again thank the API Platform contributors by giving them a brand new and free T-shirt. To win our t-shirt, make 3 pull requests on API Platform&#8217;s GitHub repositories by October 31st, and then fill in this form.&nbsp; Looking for some [&hellip;]

Celebrate Hacktoberfest with API Platform and win a limited-edition t-shirt! | Les-Tilleuls.coop

API Platform in a few words:



<ul><li style="text-align: justify;" role="presentation">more than 500 contributors.</li><li style="text-align: justify;" role="presentation">3.8&nbsp;million <a href="https://packagist.org/packages/api-platform/core" target="_blank" rel="noopener">downloads on Packagist</a>;</li><li style="text-align: justify;" role="presentation">A core team growing day by day;</li><li style="text-align: justify;" role="presentation">6,000 stars on Github;</li><li style="text-align: justify;" role="presentation">More than 3000 members on the #api-platform channel of Symfony’s Slack;</li><li style="text-align: justify;" role="presentation">A recognized technological reference used by big names on the web around the world: Orange, Decathlon, Arte or even France Télévisions are using API Platform.</li></ul>



A couple of weeks ago, we updated the <a href="https://api-platform.com/" target="_blank" rel="noopener">API Platform</a> website by developing the community sections. Let&#8217;s have a look together:&nbsp;



<blockquote class="twitter-tweet">The <a href="https://twitter.com/ApiPlatform?ref_src=twsrc%5Etfw">@ApiPlatform</a> website now has a community section with a dedicated page for each contributor, the upcoming events and awesome wallpapers featuring Webby! Thanks <a href="https://twitter.com/ginifizz?ref_src=twsrc%5Etfw">@ginifizz</a> for your amazing work! <a href="https://t.co/oq8K35rnXG">https://t.co/oq8K35rnXG</a>— Kévin Dunglas (@dunglas) <a href="https://twitter.com/dunglas/status/1234887739675414528?ref_src=twsrc%5Etfw">March 3, 2020</a></blockquote>
<script async="" src="//platform.twitter.com/widgets.js" charset="utf-8"></script>



<h3>Top contributors</h3>



Because we believe that every community project should value the people who contribute to it, we now display the list of all API Platform contributors on <a href="http://api-platform.com/community/contributors/" target="_blank" rel="noopener">a dedicated page</a>! Not surprisingly, the core team are at the top of the ranking but if you have contributed to the framework, you should see yourself too 🙂



<figure class="wp-block-image"><a href="https://api-platform.com/community/contributors/v" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/353.gif" alt="giphy" title="giphy"/></a></figure>



In addition to this improvement, if you click on a profile, you will have the details of all the repositories on which the contributor has worked:&nbsp;



<figure class="wp-block-image"><a href="https://api-platform.com/community/contributors/Deuchnord" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/355.png" alt="deuchnord" title="deuchnord"/></a></figure>



<h3>Events</h3>



From now on, you can see the upcomings API Platform meetups on <a rel="noreferrer noopener" href="https://api-platform.com/community/events/" target="_blank">a special page</a>. Stay tuned, more events should be coming soon. For the moment only events hosted by Meetup are added (via their API), we are currently looking to add events from other platforms as well.&nbsp;



<figure class="wp-block-image"><a href="https://api-platform.com/community/events/" target="_blank" rel="noreferrer noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/356.png" alt="Events" title="Events"/></a></figure>



<h3>Resources</h3>



From the Resources section, you can now&nbsp;access to different contents:&nbsp;



<ul><li>News: on this part of the website, you have <a href="https://twitter.com/ApiPlatform" target="_blank" rel="noreferrer noopener">API Platform’s Twitter</a> displayed. If you still have not followed this account, this is the moment to do so 🙂&nbsp;</li><li>Logos: you have now access to a page where you can find different logos and typos in SVG or PNG. These creations are protected by a <a href="https://api-platform.com/trademark-policy" target="_blank" rel="noreferrer noopener">trademark policy</a>, don’t hesitate to contact us if you have any questions.</li><li>Wallpapers: now, you can also download API Platform wallpapers ( 2880 x 1800px; 1920 x 1080px or 1920 x 1200px): <a href="https://api-platform.com/resources/wallpapers/" target="_blank" rel="noreferrer noopener">https://api-platform.com/resources/wallpapers/</a></li><li>Coloring Webby: during the lockdown, we created the possibility to <a href="https://api-platform.com/resources/colouring-webby/" target="_blank" rel="noreferrer noopener">download our coloring pages</a>. As you can see below, some little artists shared their masterpieces with us &lt;3</li></ul>



<blockquote class="twitter-tweet"><a href="https://twitter.com/coopTilleuls?ref_src=twsrc%5Etfw">@coopTilleuls</a> voilà un chef-d&#8217;œuvre de mon fils de cinq ans, ravi d&#8217;avoir colorié &#8220;des trucs de l&#8217;espace&#8221;! <a href="https://t.co/MWQmQqrqSf">pic.twitter.com/MWQmQqrqSf</a>— Christophe Dujarric (@Chris_Dujarric) <a href="https://twitter.com/Chris_Dujarric/status/1248252567437692930?ref_src=twsrc%5Etfw">April 9, 2020</a></blockquote>



We are currently working on new evolutions for the website, stay tuned! Help us to continuously improve this project by <a rel="noreferrer noopener" href="http://github.com/api-platform/" target="_blank">contributing to it.</a> You can also give it a star on Github or follow us on <a rel="noreferrer noopener" href="https://twitter.com/ApiPlatform" target="_blank">Twitter</a>!&nbsp;

API Platform: community & ressources

API Platform in a few words: more than 500 contributors. 3.8&nbsp;million downloads on Packagist; A core team growing day by day; 6,000 stars on Github; More than 3000 members on the #api-platform channel of Symfony’s Slack; A recognized technological reference used by big names on the web around the world: Orange, Decathlon, Arte or even [&hellip;]

API Platform: community & ressources | Les-Tilleuls.coop

API Platform: community &#038; ressources

A few weeks ago, <a href="https://les-tilleuls.coop/fr/blog/click-and-collect-sylius" target="_blank" rel="noreferrer noopener">we announced the release of Sylius Click &#8216;N&#8217; Collect</a>, a solution to sell and hand over products safely during the lockdown (and even after that). Creating an e-commerce store, setting up all its parameters or managing its own servers can be complex and quickly time-consuming tasks.



We are now pleased to announce the availability of a hosted version of Sylius Click &#8216;N&#8217; Collect! On <a href="http://click-n-collect.shop" target="_blank" rel="noopener">click-n-collect.shop</a>, you can get a ready-to-use shop in a few minutes. <a href="http://click-n-collect.shop" target="_blank" rel="noopener">Find out here how to create your shop</a> and start selling now!



<figure class="wp-block-image"><a href="https://www.click-n-collect.shop/en" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/343.jpg" alt="logosponsor" title="logosponsor"/></a></figure>







Our hosted version comes with :



<ul><li style="text-align: justify;">An optimal default configuration allowing you to sell immediately (languages, in-store payment, categories, taxonomy, Click &#8216;N&#8217; collect&#8230;)</li><li style="text-align: justify;">Online payment, by credit card thanks to Paypal or Stripe, as well as in store (other payment solutions can be added on request)</li><li style="text-align: justify;">The ability to ship orders, or of course, to offer in-store pick-up or drive-through via our Click and Collect module</li><li style="text-align: justify;">Inventory management</li><li style="text-align: justify;">Issuing invoices</li><li style="text-align: justify;">Refundings</li><li style="text-align: justify;">Help on the setting up of your shop</li><li style="text-align: justify;">Customization features (logo, general terms and conditions of sales, footer, order confirmation e-mails, etc.)&nbsp;</li><li style="text-align: justify;">Multiple stores/channels sellings</li><li style="text-align: justify;">Support for multiple languages and currencies (e.g. English + French, Pounds + Euros)</li><li style="text-align: justify;">High availability hosting based on Kubernetes The ability to use a custom domain name</li><li style="text-align: justify;">The 100% automatic implementation of HTTPS for a safer experience</li></ul>



Continue your activity during lockdown by creating your <a rel="noopener" href="https://www.click-n-collect.shop/en" target="_blank">Click and Collect store in a few clicks</a>! The hosted version of Sylius Click &#8216;N&#8217; Collect is free of charge for worker cooperatives and organizations with less than 10 employees. Need more information? <a href="https://les-tilleuls.coop/en/" target="_blank" rel="noreferrer noopener">Contact us</a>, we remain available remotely.

Sylius Click ‘N’ Collect is now available as a hosted version!

A few weeks ago, we announced the release of Sylius Click &#8216;N&#8217; Collect, a solution to sell and hand over products safely during the lockdown (and even after that). Creating an e-commerce store, setting up all its parameters or managing its own servers can be complex and quickly time-consuming tasks. We are now pleased to [&hellip;]

Sylius Click ‘N’ Collect is now available as a hosted version! | Les-Tilleuls.coop

Because of the coronavirus pandemic, a large part of the world is under lockdown and most shops are closed or with long queues.



<a href="https://click-n-collect.shop/en" target="_blank" rel="noopener">Sylius Click &#8216;N&#8217; Collect </a>is a solution to sell and hand over your products safely during the lockdown (and even after that). By allowing contactless pick up and preventing queues, Sylius Click &#8216;N&#8217; Collect protects your workers and your customers.



Sylius Click &#8216;N&#8217; Collect is a plugin for the <a href="https://sylius.com/" target="_blank" rel="noopener">Sylius eCommerce platform</a>. It&#8217;s free (as in speech, and as in beer), and it&#8217;s brought to you by our little hands. It can also be used in addition to all the existing features and plugins of Sylius.



<figure class="wp-block-image"><a href="https://click-n-collect.shop/en" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/343.jpg" alt="logosponsor" title="logosponsor"/></a></figure>







<h3>How does it work?</h3>



<iframe loading="lazy" src="https://www.youtube.com/embed/bQ9_vQJf-2I" allowfullscreen="allowfullscreen" width="560" height="315" frameborder="0"></iframe>



As a customer:



<ol><li>Go on the shop&#8217;s website</li><li>Select the products to order</li><li>Select the collect location (e.g. the physical shop)</li><li>Select an available time slot</li><li>Pay online, or select in-store payment (Stripe and PayPal are also supported).</li><li>Optional: a PIN is generated, you&#8217;ll need it to retrieve the order</li><li>Pick up your order at the shop during the selected time slot! Use the PIN code to unlock the box if appropriate.</li></ol>



<figure class="wp-block-image"><a href="https://click-n-collect.shop/en" target="_blank" rel="noreferrer noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/341.png" alt="en client" title="EN Client"/></a></figure>



As a seller:



<ol><li>Use the timetable in the admin interface to see the upcoming orders</li><li>Prepare the orders: put them in a bag and make the order number noticeable (staple it or use a marker)</li><li>Clean carefully the shelf and the lock (if appropriate) with the appropriate cleaning products</li><li>Put the bag in the shelf</li><li>Optional: use the PIN to lock the box in the shelf to secure the order</li><li>Monitor the pick up from afar, from behind a window, or using CCTV</li></ol>



<figure class="wp-block-image"><a href="https://click-n-collect.shop/en" target="_blank" rel="noreferrer noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/340.png" alt="enn" title="en"/></a></figure>



Repeat! You&#8217;re now selling while preventing the pandemic to spread!



<h3>How to install?</h3>



Our guidelines are at your disposal&nbsp;<a href="https://github.com/coopTilleuls/CoopTilleulsSyliusClickNCollectPlugin" target="_blank" rel="noreferrer noopener">on Github</a>&nbsp;and a demo can be tried at this adress: <a href="https://demo.click-n-collect.shop/en_US/">https://demo.click-n-collect.shop/en_US/</a>.&nbsp;Sylius Click &#8216;N&#8217; Collect is licensed under&nbsp;<a href="https://github.com/coopTilleuls/CoopTilleulsSyliusClickNCollectPlugin/blob/master/LICENSE">AGPL-3.0</a>. For companies not wanting, or not able to use AGPL-3.0 licensed software, commercial licenses are also available.&nbsp;<a href="mailto:gregory@les-tilleuls.coop">Contact us for more information, we remain avaiilable at a distance!</a>

Sylius Click 'N' Collect: sell and hand over securely during the coronavirus pandemic!

Because of the coronavirus pandemic, a large part of the world is under lockdown and most shops are closed or with long queues. Sylius Click &#8216;N&#8217; Collect is a solution to sell and hand over your products safely during the lockdown (and even after that). By allowing contactless pick up and preventing queues, Sylius Click [&hellip;]

Sylius Click 'N' Collect: sell and hand over securely during the coronavirus pandemic! | Les-Tilleuls.coop

Sylius Click &lsquo;N&rsquo; Collect: sell and hand over securely during the coronavirus pandemic!

For some time now, we have been implementing a new routine in our SCOP: every two months, the whole team meets up for a whole day dedicated to contributing to the Free tools we use, we develop&#8230; or not!



This new initiative comes in addition to what was already allocated to some of our cooperators to maintain some of the projects that allow our structure (like so many others) to prosper. The problem of the sustainability and maintenance of Free Software &#8211; Although they are the foundation of the information society &#8211; is a complex and publicly useful subject to which few effective answers have yet been found.



By dedicating time to our developers to work on these projects, our cooperative is trying to improve the situation and to contribute in return to the public interest infrastructures created and maintained for free by developers from all over the world. It&#8217;s also a good opportunity for our teams to learn new skills, to discover new technologies and to face advanced problems.



Despite the calm of August, we have again taken up this challenge: a few days ago, about twenty cooperators gathered to fix security issues, resolve bugs, review patches proposed by the community and add new features on various free projects that we like.



The day started with the constitution of the working groups:&nbsp;



The API Platform working group was busy releasing API Platform 2.4.6 and preparing the imminent release of API Platform 2.5 beta ;



The team working on React Admin focused on finalizing a brand new version of the integration with API Platform (done in collaboration with Marmelab) which will greatly improve its ease of use and customization;



The team working on Symfony focused on fixing bugs affecting the tool.



Discover our contributions:



The team finalized the addition of a major new feature that will arrive in API Platform 2.5: the support of generated API formats (such as Hydra) in the auto-generated OpenAPI documentation, and the possibility to generate JSON Schema corresponding to a resource;



Using this new infrastructure, Jacques Lefebvre added a command to export a JSON Schema from a ressource;



Quentin Barloy solved a bug affecting API Platform when a data provider returns a generator, he also improved the documentation concerning this feature. Moreover he added unit tests covering the brand new JSON Schema generator;



Kévin Van Der Stracten did his first bug fix on API Platform, with the help of Antoine Bluchet;



Grégory Copin adapted the NextJS application generator provided with API Platform to use the new version of the popular JavaScript framework;



Mathieu Dewet, in collaboration with Robin Chalas, fixed the implementation of the refreshUser method of the LdapProvider, and fixed some other issues in Symfony ;



Vincent Chalamon drastically improved the security and usability of the access control mechanism provided with API Platform;



Grégoire Hébert added a new feature to API Platform allowing to choose which OpenAPI versions to activate;



Jean-François Thuillier and Morgan Auchedé finalized the new version of API Platform Admin and started writing documentation.



The outcome of this working day: 13 PRs have been merged, 2 issues are open and other topics are under consideration.&nbsp;



At Les-Tilleuls.coop, we encourage and support our cooperators, even the beginners or the most shy, to contribute to the software they use. The Free Software community is based on knowledge sharing, collaboration and exchange. Every contribution, no matter how small, is beneficial and has a lasting effect on the ecosystem. Some reticence may arise, linked to the fear of not feeling legitimate to contribute, but we must keep in mind that we are lucky to have access to a large community of contributors acting for the continuous improvement and reliability of the software we use. Supporting them like this is the best way to thank them for all the time they have already undertaken in this process.

A day at Les-Tilleuls.coop: collective contribution to Free Software

For some time now, we have been implementing a new routine in our SCOP: every two months, the whole team meets up for a whole day dedicated to contributing to the Free tools we use, we develop&#8230; or not! This new initiative comes in addition to what was already allocated to some of our cooperators [&hellip;]

A day at Les-Tilleuls.coop: collective contribution to Free Software | Les-Tilleuls.coop

https://secure.gravatar.com/avatar/40dfc350a09c1b2f7391856a676253c3?s=96&d=mm&r=g

tilleuls

What do we do at a General Meeting?

Hello everyone! I&#8217;m <meta charset="utf-8"><a rel="noopener" href="https://twitter.com/Pandora_angora" target="_blank">Caroline</a>, back-end developer freshly arrived at Les-Tilleuls.coop! Today was my first general assembly (GA) and the first of the year 2019. Here is my feedback on this special day.



<h3>What do we do at a General Meeting?</h3>



Les-Tilleuls.coop being a SCOP (go here to learn more), we make decisions together in a democratic way. Each employee can make proposals or give his or her opinion on different areas. Once a month, all the cooperators meet at the office in Lille to make various decisions related to legal news, the budget or recruitment. Each cooperator has one vote representing one vote, it is not a dictatorship here.



The office is busier than usual. We are from a dozen people to about thirty in some minutes. We take a breakfast together, we discuss then we make a Tetris with the armchairs so that everyone can return in the meeting room.



<figure class="wp-block-image"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/286.jpg" alt="AG" title="AG"/></figure>



Tetris with chairs.



 



The agenda is established a few days before and sent to each cooperator who can contribute directly. If someone has a proposal for a tool, an idea, you shouldn&#8217;t hesitate to add it and to present it to everyone during the GM. We discuss the different points, give our opinion and then we vote by a show of hands (for, against, abstention).  



Olivier (our CFO) started this first GM of the year with the balance sheet of the turnover of 2018. It was an opportunity to talk about customer relations, the strong and weak points, to get advice on processes to improve.



An important aspect in the life of our cooperative concerns recruitment. We discuss candidates&#8217; profiles by email or on Slack, we vote on hiring them together at the GM. During a GM, we can also suggest a candidate and then vote to decide if we dig the lead or not, and what offer we can make. We also review current hires and the marketing strategy for future hires (we&#8217;re hiring, come on! &lt;3 ).



Then, we present the different prospects, the current demands of the client, what his needs are and we plan which cooperator will be available and the most suitable for each mission. We then vote on all the other proposals concerning the life of the scop, such as the budget for an event or the implementation of a new reform.



It is 12:30, we end the GM with the presentation of the different workshops planned for the afternoon. We take the opportunity to work together on internal projects, on Open Source contributions or to train for conferences. 



At the end of the day, a report of the GM is sent to all and we fix a date for the next monthly GM. We celebrate the end of the GM with a good meal in a nice brewery. A convivial moment to share with the cooperators of the different offices 🙂



<figure class="wp-block-image"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/287.jpg" alt="TEAM 3B" title="TEAM 3B"/></figure>



We eat a very balanced diet to survive the cold. weather.



<h3>Workshops</h3>



Several groups were formed in the afternoon to work on different internal projects, Open Source projects, preparations for training or upcoming meetups. This afternoon I followed a video-conference training on <meta charset="utf-8"><a rel="noopener" href="https://blackfire.io/" target="_blank">Blackfire</a> given by Christophe Dujarric.



<blockquote class="twitter-tweet" data-lang="fr">Cet après-midi, c’est formation <a href="https://twitter.com/blackfireio?ref_src=twsrc%5Etfw">@blackfireio</a> avec <a href="https://twitter.com/Chris_Dujarric?ref_src=twsrc%5Etfw">@Chris_Dujarric</a> en attendant le meetup <a href="https://twitter.com/afup_hdf?ref_src=twsrc%5Etfw">@afup_hdf</a> de demain <a href="https://twitter.com/hashtag/Masterclass?src=hash&amp;ref_src=twsrc%5Etfw">#Masterclass</a> <a href="https://t.co/N32J6bTQHp">pic.twitter.com/N32J6bTQHp</a>— Les-Tilleuls.coop (@coopTilleuls) <a href="https://twitter.com/coopTilleuls/status/1087362605465985027?ref_src=twsrc%5Etfw">21 janvier 2019</a></blockquote>
<script async="" src="//platform.twitter.com/widgets.js" charset="utf-8"></script>



I then finished my day on the writing workshop for the blog. Another busy day at the cooperative. See you soon!

A day at Les-Tilleuls.coop

Hello everyone! I&#8217;m Caroline, back-end developer freshly arrived at Les-Tilleuls.coop! Today was my first general assembly (GA) and the first of the year 2019. Here is my feedback on this special day. What do we do at a General Meeting? Les-Tilleuls.coop being a SCOP (go here to learn more), we make decisions together in a [&hellip;]

A day at Les-Tilleuls.coop | Les-Tilleuls.coop

You're a collective of freelancers, right?

Les Tilleuls&hellip; Do you work in the agricultural field?

Your model works for now, but what happens when you reach 100?

Cooperatives are the rescues of companies in difficulty

It's too utopian a model, it won't work

Since our founding in 2011, we are regularly subject to a list of questions about how we operate, our governance or how we anticipate our growth.



Often unknown, sometimes misunderstood, cooperative societies have nevertheless been noticed for several years for their performance and dynamism. The latest report from the General Confederation of Cooperatives is clear: the 3,000 cooperatives listed in France represent a turnover of nearly 5 billion euros and a five-year survival rate of 67%, a result higher than the national average of 60.  



<figure class="wp-block-image"><a href="http://www.les-scop.coop/sites/fr/" target="_blank" rel="noopener"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/265.png" alt="CG SCOP" title="CG SCOP"/></a></figure>







In this article, we will try to answer some of the questions received in order to prove that the cooperative sphere offers an effective alternative to traditional economic models.



<h3>You&#8217;re a collective of freelancers, right?</h3>



Not at all. We are a self-managed company. This does not mean that we are an independent group.



We try to shake up traditional management patterns by involving all of our employees in our decision making. To ensure that information circulates throughout our 3 offices, we optimize our internal communication through several platforms (Slack, Google Hangouts, etc.) and for major decisions, we meet for a monthly review. During this meeting, we summarize the budgetary situation, the current recruitments, the internal evolutions, the projects, and when a decision must be acted, we organize a vote (in our case, 1 person = 1 vote).



If a disagreement arises during a meeting, we discuss it, argue it, and try to resolve the issue. When everyone has made up their minds, a vote is taken to confirm the decision.



<h3>Les Tilleuls… Do you work in the agricultural field?</h3>



Although our name can be confusing (I promise, one day we will explain its origin), we are a production cooperative operating in the field of computer development.



Today, there are several forms of cooperatives. We can mention as an example :



<ul><li>Users&#8217; cooperatives: the associates are the users of goods and services. These cooperatives are notably present in the food trade, schools, low-cost housing…</li><li>Cooperatives of enterprises: the associates are independent workers. Agricultural, craft, maritime or transport cooperatives are among them.</li><li>Employee cooperatives: the associate members are the employees.</li><li>Cooperative banks: the partners are the customers and members who receive payment services.</li></ul>



Among the most widespread sectors, the Scop&#8217;s 2017 summary shows that the service sector represents more than 40% of cooperatives in France, followed by industry and education, health and social action. The agricultural cooperatives represent, them, 1.2%.



<figure class="wp-block-image"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/262.png" alt="repartition coopératives" title="repartition secteurs"/></figure>







Cooperative companies are present in sectors as varied as lasers, robotics software, printing, selective sorting… Ditto for digital, as an example, Alma or Code4Corsica offer services similar to ours while Coopcycle has been shaking up foodtech for more than a year by proposing a software (built with <meta charset="utf-8"><a rel="noopener" href="https://api-platform.com/" target="_blank">API Platform</a> &lt;3) to connect customers, merchants and bike delivery cooperatives.



<h3>Your model works for now, but what happens when you reach 100?</h3>



Existing cooperatives with hundreds or thousands of employees prove that it is possible to run a company in this way.



Let&#8217;s take the case of the <meta charset="utf-8"><a rel="noopener" href="https://www.up.coop/" target="_blank">Groupe Up</a> . Founded in 1964, this group has 2,500 employees (including more than 600 associate employees) spread over 14 countries and generates a turnover of nearly 6 billion euros. Its governance is based on three poles: all the employee-members, the Board of Directors (elected every 4 years by the employees) and the Executive Committee. The employee-members (the only shareholders) participate each year in a general meeting where they debate and vote on the group&#8217;s strategic orientations.



This may seem complex, but it makes their organization all the more fluid. The employee shareholders are mobilized to put into practice a 360° management approach where the commitment and involvement of all employees consolidate the foundations of a democratic company. This organization promotes the sustainability of jobs, resources and the solidity of the company. And it works: their annual reports and several publications prove that the Up group is a SCOP where it is good to work and profitable.



<h3>Cooperatives are the rescues of companies in difficulty</h3>



In 2017, 65% of cooperatives were creations ex nihilo and less than 5% of them were the result of rescues of struggling businesses. Moreover, two thirds of the cooperatives created between 2012 and 2017 are still active today. This promises many more good years at Les-Tilleuls.coop…



<figure class="wp-block-image"><img decoding="async" src="https://api.les-tilleuls.coop/wp-content/uploads/2021/08/263.png" alt="creation scop" title="creation scop"/></figure>







<h3>It&#8217;s too utopian a model, it won&#8217;t work</h3>



The cooperative model is a worldwide economic reality: there are more than 180,000 cooperatives in Europe and according to a UN survey, this form of economy represents 20% of GDP in New Zealand, 18% in the Netherlands and 14% in Finland.



The survival rate at 3 years of French companies created in Scop is 82% above the national average (66%, source Insee). At five years, this gap widens further. In the industrial sector, Scops have resisted better than other SMEs over the last ten years. The cooperative movement has many human and economic advantages for employees, who have a majority stake in the capital and ensure democratic governance.



At Les-Tilleuls.coop, each of us invests our time, talents and ideas to make the company grow. This equation works, since our SCOP has grown by almost four figures in 7 years, has always been profitable and has an extremely low turnover. Are you tempted to participate in our project? We are constantly looking for new talent. Do not hesitate to send us your CV, we are currently developing our Paris branch!

5 preconceived notions about our cooperative

Since our founding in 2011, we are regularly subject to a list of questions about how we operate, our governance or how we anticipate our growth. Often unknown, sometimes misunderstood, cooperative societies have nevertheless been noticed for several years for their performance and dynamism. The latest report from the General Confederation of Cooperatives is clear: [&hellip;]

What's new at Les-Tilleuls.coop ?