A talk given at Cakefest2017 on the future roadmap of CakePHP.

1. The Road Ahead
3.4 and the path to 4.0

2. Present FuturePast

3. Past

4. Past 2.x - 3.0.0

5. Past Upgrading was hard

6. Past Upgrading was brutal

7. Past 2.x is still active

8. Past What did we learn?

9. Past Difficult upgrades
Fragment the community

10. Past Stagnation
Big releases take time

11. Past

12. PresentPast

13. Present 3.2.x - 3.4.x

14. Present Working towards
stronger typing
Splitting up modal methods

15. $email = new Email();
$email->to(‘mark@example.com')
->from(‘bots@example.com')
->template($template)
->helpers([‘Html’, ‘Emoji’])
->send();
Combined Methods

16. $email = new Email();
$email->to(‘mark@example.com')
->setFrom(‘bots@example.com')
->setTemplate($template)
->setHelpers([‘Html’, ‘Emoji’])
->send();
Combined Methods

17. Present PSR7
Adopting community standards

18. Present Immutability
Request & Response

19. // $response is unchanged here.
$response->withHeader(‘X-yes’, ‘yes’);
// We need to overwrite $response
$response = $response->withHeader(‘X-yes’, ‘yes’);
Immutability

20. Present Middleware
Your application as an onion

21. Present Layers of behavior
Small, focused, and composable

22. App

23. Routes
App

24. Assets
Routes
App

25. Exceptions
Assets
Routes
App

26. CORS
Exceptions
Assets
Routes
App

27. CORS
Exceptions
Assets
Routes
App

28. CORS
Exceptions
Assets
Routes
App
Request

29. CORS
Exceptions
Assets
Routes
App
Request

30. CORS
Exceptions
Assets
Routes
App
Request
Response

31. CORS
Exceptions
Assets
Routes
App

32. CORS
Exceptions
Assets
Routes
App
Request

33. CORS
Exceptions
Assets
Routes
App
Request

34. CORS
Exceptions
Assets
Routes
App
Request
Response

35. PresentPast

36. Present FuturePast

37. Future 3.5

38. Future New Middleware
CSRF, Cookies, Authentication

39. use CakeHttpMiddlewareEncryptedCookiesMiddleware;
$middleware->add(new EncryptedCookiesMiddleware([
[‘remember_me’, ‘secrets’],
Configure::read(‘Cookie.aesKey’)
]));
Cookies

40. use CakeHttpMiddlewareCsrfProtectionMiddleware;
$middleware->add(new CsrfProtectionMiddleware([
‘expiry’ => 600,
‘httpOnly’ => true
]));
CSRF

41. Future Routable Middleware

42. // Register middleware, for use in routing scopes
$routes
->registerMiddleware(‘auth’, new AuthenticationMiddleware(..))
->registerMiddleware(‘cookies’, new EncryptedCookieMiddleware(..));
// Create a routing scope (as you do today)
$routes->scope('/api', function ($routes) {
// Enable middleware
$routes->middleware('csrf', 'cors', 'auth');
$routes->connect('/ping', [‘controller’ => ‘Pings’]);
});
Routable Middleware

43. Future 3.6 & 4.0

44. Future 3.6
Backwards compatible

45. Future Deprecation warnings
Runtime errors for deprecations

46. Future 4.0.0
Svelte CakePHP 3.x

47. Future PHP 7.1
No PHP5 support

48. Future Stricter Typing

49. Future Interface Updates

50. Future Deprecation Cleanup
All currently deprecated methods
will be removed.

51. Future Developer Happiness
Better and earlier errors

53. Late 2017 | Early 2018

54. Future Long Term Support

55. Future 2.10
Long Term Support

56. Future 2.x bugfixes
1 year after 4.0.0

57. Future 2.x Security fixes
18 months after 4.0.0

58. Future 3.6
Long Term Support

59. Future 3.6 bugfixes
18 months after 4.0.0

60. Future 3.6 Security fixes
3 years after 4.0.0

61. Past

62. PresentPast

63. Present FuturePast

64. Thank You
Github - markstory
Twitter - mark_story
https://joind.in/talk/b71f6