cfml #box-products

mburt

04/14/2025, 1:39 PM

A question regarding cbSecurity and refresh tokens (I’m learning, be gentle 😅_)_ I’ve configured my cbSecurity settings to return both access (

expiration:1

) and refresh (

refreshExpiration:720

) tokens (

enableRefreshTokens:true

), and I’m using annotation-based security on the handler. What I’m noticing is that both the access and the refresh token can be used to access the function. So even once my access token is expired and returns a “expired” response, I can still pass the refresh token and get a full response. If the two can be used interchangeably to access a secured route, what is the benefit of using refresh tokens at all? Couldn’t I just set the expiration of my access token to 720 and be done.

coldfusioneer

04/14/2025, 4:25 PM

Hello all, long time CFer and trying out some of the new BoxLang stuff and running into a bit of an issue. I am installing on Windows Server and used the Windows Installer executable to install BoxLang (complete install selected). It installed into C:\boxlang without error. I am able to run the "boxlang" command and it loads a BoxLang window for interactive use, as well as "boxlang-miniserver" to start a server. However, when attempting to add modules I am not able to locate the "install-bx-module" script anywhere to use it to install additional modules, nor the "install-boxlang" script, both of which are mentioned on the installation page of the documentation at https://boxlang.ortusbooks.com/getting-started/installation ... am I doing something wrong or did something change since the docs were last updated? There are a lot of references to the "install-bx-module" command but it does not appear to exist when using the Windows installer.

bhartsfield

04/14/2025, 5:08 PM

I am trying to track down the cause of a memory leak in my ColdBox rest-hmvc app. I've went back through commits on the app to see when it may have started. In the end, none of the app code appears to be the problem. I can spin up a brand new coldbox rest skeleton app and run it out of memory pretty fast by just making repeated /?fwreinit=true requests. Anyone else noticed this or found a root cause? It doesn't appear to happen with the default or superSimple skeletons. I've been through multiple ColdBox and Lucee versions (including the latest of both) but versions do not seem to matter.

Jeff

04/14/2025, 5:40 PM

In regards to CF2025 support, I'm on 7.3.1+17, but that's still breaking on the cfheader changes. I can see the development branch has been updated to fix those - is there a way to 'update coldbox' to that dev version, or would I have just check it out manually? (or wait for an official update?) Tks.

✅ 1

laslo7

04/14/2025, 8:15 PM

Howdy All! I have been tasked with updating a legacy coldbox app and can get it to run locally. I have command box using the same version of java and the same version of lucee. I am getting the following error: Error building: DebuggerService@cbdebugger -> The function [getAppHash] does not exist in the Object. with constructor arguments: {controller={}} Any hints would be appreciated!

bdw429s

04/17/2025, 9:09 PM

Does anyone have a local "legacy" IIS/ColdFusion installation (using Adobe's CF IIS connector) who could test something for me?

adam.euans

04/21/2025, 12:52 PM

When trying to build a BoxLang Lambda using the lambda-template, I get the following error:

Error: InvalidSignatureException: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.

Matt Dyer

04/22/2025, 5:34 PM

I have recently started using the commandbox docker images. I'm using ortussolutions/commandbox:lucee5. Will this be updated at some point to the latest lucee 5? I'm planning to move to lucee 6 later this year, but it will probably be several months still.

Marco

04/22/2025, 6:38 PM

@bdw429s We have a multisite commandBox configuration but need to keep using IIS, so I am looking into BonCode. When runniong the connector setup, on your screencast "using IIS with CommandBox via Boncode" you recomend choosing the "specific site" option instead of "All IIS Sites" Q: is this option applies to a commandbox multi=site configuration as well?

Dana Kowalski

04/22/2025, 9:59 PM

commandbox v6.2.1+00830 I went to a fresh, empty directory and did a 'server start cfengine=adobe --verbose' and I keep getting a fusionreactor error? I did a server set fusionreactor.enable=false but the issue persists? ERROR: fr-server-discovery-impl (3): [com.intergral.fusionreactor.server.discovery.impl.ServerLookupImpl(0)] Failed creating the component instance; see log for reason ERROR FusionReactor FW: The system cannot start because the license service (fusionreactor-odl-bundle) is not available. Thread[Thread-1,5,FusionReactor] java.lang.IllegalStateException: Shutdown in progress log shows issue trying to remove fr-management.jar: _adobe-2025.0.01.331420\fusionreactor\fr-management.jar] at lucee.commons.io.res.type.file.FileResource.remove(FileResource.java:305) at lucee.commons.io.res.type.file.FileResource.remove(FileResource.java:296) at lucee.commons.io.res.type.file.FileResource.remove(FileResource.java:296) at lucee.commons.io.res.type.file.FileResource.remove(FileResource.java:296) at lucee.runtime.tag.Directory.actionDelete(Directory.java:745) at lucee.runtime.functions.file.DirectoryDelete.call(DirectoryDelete.java:34) at system.services.serverservice_cfc$cf.udfCall8(/commandbox/system/services/ServerService.cfc:3063)_

seandaniels

04/23/2025, 8:45 PM

Is it possible in CommandBox multisite to have individual sites respond on port hostname:8080 , but also on another port regardless of hostname, like 0.0.0.0:8081?

Daniel Mejia

04/23/2025, 10:36 PM

Just wanna say the ortus AsyncScheduler is sweet. I'm using it in my Coldbox app, but can't wait to port over all my scheduled tasks from ACF Admin. Good Job #Ortus!

👍 3

🚀 4

bhartsfield

04/24/2025, 2:54 PM

Is there any plan to have devDependencies ignored based on something like a production flag in the start command? For example, I do this to get rid of devDependencies in my docker images

jq 'del(.devDependencies)' /app/box.json > /tmp/box.json && mv /tmp/box.json /app/box.json

No big deal really, I'm mostly just curious if I am missing built-in functionality in commandbox.

elpete

04/24/2025, 5:08 PM

box install —production

Chase Lane

04/25/2025, 1:46 AM

Hey, I've been writing a few custom validators for cbvalidation, where should I keep them? I've been putting them under models/validators/

Patrick Roy

04/28/2025, 8:35 AM

Hello. Apologies, this might not be the right place to ask, but this regards RabbitSDK found here: https://github.com/Ortus-Solutions/RabbitSDK We have 2 small questions: 1. By doing

box install rabbitsdk

it seems to install rather old amqp-client-5.9.0. Could this safely be updated to latest 5.25.0 ? 2. Is this check for still needed on ModuleConfig : https://github.com/Ortus-Solutions/RabbitSDK/blob/development/ModuleConfig.cfc#L34 We're running on Lucee 6.0.3.1. I commented out that block of code from that ModuleConfig.cfc and started Lucee web server. Start a consumer... published ... got processed. The restarted Lucee and just re-published something to Rabbit : got processed. So.. not sure if and how that fileDelete is needed even? If one can explain, time permitting? Much appreciated! Thanks. cc. @bdw429s

philcruz

04/28/2025, 10:41 PM

I'm trying to add a server rule for a simple rewrite. I'm getting an "error parsing predicated handler.." error. What am I missing?

fmdano

04/30/2025, 2:57 PM

DocBox question....hey, so from what my coworker is telling me, we have an issue with docbox on our site because it reaches out external to get google fonts so when our security team at my gov't site scans it finds these and seems to throw some sort of error....i guess cross side scripting I think he said...something we can do to not use the external google calls?

Scott Steinbeck

05/01/2025, 1:22 PM

We’re live at into the box keynote day 1, join our BoxLang stable release announcement! 📣 🙌 https://youtube.com/live/Bn3gzjzjtuc?feature=share Slack Conversation

🙌 1

Jim Priest

05/01/2025, 1:33 PM

Congrats to the Ortus folks on BoxLang and Into The Box 2025 🙂

🙌🏻 2

🙌 9

John Liljegren

05/02/2025, 2:49 AM

I'm trying to take an existing ACF app and start it with BoxLang by changing the engine and java settings per the docs. I have a .cfconfig file, and it seems like some of it was utilized, but the datasource (MSSQL) wouldn't work unless I defined it in Application.cfc, and JSON is getting returned with capitalized struct keys... will I need to convert the .cfconfig file or is there some other way to set up the server settings (like via boxlang.json maybe)? Also, where is the link for the spreadsheet that shows the BIFs and bx modules crosswalk?

Chase Lane

05/02/2025, 3:27 AM

Does declaring my java loadpath in application.bx hook them up into wirebox automatically? Or do I still need to use cbjavaloader?

fmdano

05/02/2025, 3:11 PM

Hey all --- working through some TestBox tests and I see I can run each test individually in VSCode, however I am not sure how...every time i click on the run test icon for that individual test, it says No Testbox Runner URL configured in settings...so click on settings icon to get into the vscode testbox extension display...i assume I put in a path to some runner.cfm file path into testbox.runnerURL item....i put in textbox/tests/com/run.cfm or runner.cfm in an then run the individual test in the file in vscode...now i get test failed and Error running Function test can't parse the URL....any thoughts on what I am missing in my setup in VSCode? thanks

gavinbaumanis

05/04/2025, 8:40 PM

Hey everyone is their a switch/config etc that I can set to use a local copy of box modules? That is I want to change the source code of module(s) and ensure that I used the local/edited copy and not use what was downloaded from forgebox/online. Thanks!

cubortea

05/05/2025, 8:37 AM

Hello Guys, I'm in the process of upgrading Lucee from 5.4.7+3 to 6.2.1+122. (I’m using Docker CommandBox with the image

jdk11-3.13.0

.) After upgrading, I keep getting the following error: > "There is no default object cache defined, you need to define this default cache in the Lucee Administrator." When I check the Lucee Admin, the default object cache setting is empty, even though it worked fine in Lucee 5. It seems like my existing

config.json

is not being properly loaded in Lucee 6. Here’s the relevant part of my config: "caches": { "sst_XXX": { "class": "ortus.extension.cache.redis.RedisCache", "storage": "true", "custom": { "idleConnections": "5", "maxConnections": "99999999", "host": "hosyredis.ccc", "port": "6379", "keyprefix": "ref-cache", "useSSL": "false", "password": "", "timeout": "10000" }, "default": "object" } }, "cacheDefaultObject": "sst_XXX" Has anyone encountered this before or found a way to fix it in Lucee 6? Any help would be appreciated!

Tim Badolato

05/05/2025, 3:47 PM

Here is my Dockerfile:

Copy code

FROM ortussolutions/commandbox:lucee5-3.13.0
RUN box install lucee@5.4.7.3
RUN box server set app.cfengine=lucee@5.4.7.3

And my box.json:

Copy code

{
  "VERSION": "1.4.5",
  "SLUG": "CFWheels",
  "TYPE": "mvc",
  "dependencies": {
    "cfwheels-bcrypt": "1.0.2",
    "lucee": "5.4.7.3",
    "s3sdk": "^5.7.1+94"
  },
  "installPaths": {
    "cfwheels-bcrypt": "plugins/bcrypt/",
    "s3sdk": "modules/s3sdk/"
  }
}

docker-compose.yml:

Copy code

wheelie_cfml1:
    container_name: cfml
    restart: always
    build: "."
    ports:
      - "8080:8080"
      - "8443:8443"
      - "44307:44307"
    environment:
      CFENGINE: lucee@5.4.7.3

I'm having trouble upgrading my Lucee version. When I dump the current running version I see that I'm on 5.4.6.9 instead 5.4.7.3:

Copy code

loaderPath	string	/usr/local/lib/serverHome/WEB-INF/lib/lucee-5.4.6.9.jar

Any idea how to fix this?

seandaniels

05/06/2025, 6:10 PM

Is there a directory of FusionReactor installID values for commandbox-fusionreactor somewhere? Trying to figure out what the ID would be for their new versioning syntax (2025.1.0)

seandaniels

05/06/2025, 8:09 PM

I'm using commandbox-hostupdater module for a couple local multisite servers. I can't seem to figure out how to get the bindings right for having the two running simultaneously. It looks like multisite binds to 0.0.0.0:80 instead of the IP created by hostupdater. Is there a way to do this I'm missing?

danmurphy

05/06/2025, 10:46 PM

I’m not totally sure that this is ColdBox related or something else, but doing a fwreinit “fixes” it each time it happens so I’ll post the question here. At times our app fails to load static files that are referred to by a relative path. For example, it will try to load an img with a source of

src="/includes/images/Dashboard.ico"

. For some reason, it tries to load this as

<http://localhost:10000/includes/images/Dashboard.ico>

instead of

https:/servername/includes/css/app.css

so it fails and the image doesn’t load. This happens with all included css files, js files, images, etc. If we do a fwreinit, they all load properly because they load via the server name and no port. We can’t seem to recreate this, it just seems to happen randomly. Any thoughts on what might be happening?

Chase Lane

05/07/2025, 1:25 AM

Do I need to load my site before I can run testbox? If I don't, I get this error. Also, after I run the testing suite, I have to run a fwreinit to load my site back. I think my Application.cfc is configured wrong because it's overwriting the application.cbcontroller with the mock controller.. but I haven't been able to figure it out