cfml #box-products

Jason Ryan

09/06/2022, 9:46 PM

Is there a way to update some of the individual packages located in the bundle

root/.CommandBox/lib/runwar-4.7.7.jar

? This is box-light by the way. In my Lucee hardening adventure, the last two items striking some red flags are io.undertow:undertow-core
and
net.minidev:json-smart-mini
both of which are showing up as included in that .jar file.

dfgrumpy

09/07/2022, 4:14 AM

I am getting an error trying to use cbmarkdown on a live server (CF2016). I think the server in question has enabled sandbox security and other restrictions. I don’t get an error running the same code via commandbox locally Error: Could not initialize class com.vladsch.flexmark.ext.tables.TablesExtension The error is coming from

private function createOptions( required struct options ){

var staticTableExtension = javaloader.create( "com.vladsch.flexmark.ext.tables.TablesExtension" );

I am assuming it is something in javaloader that is not working properly. But I am unsure as I have limited ability to debug in live and have no ability to change any settings.

gpickin

09/07/2022, 12:30 PM

Stream the Into the Box 2022 Day 1 Keynote live at 9am CDT on youtube - for Free!!!! -

https://youtu.be/7puwZE7Gv18▾

gpickin

09/07/2022, 2:00 PM

GOING LIVE NOW - Live Stream Into the Box 2022 Day 1 Keynote live on youtube - for Free!!!! -

https://youtu.be/7puwZE7Gv18▾

gpickin

09/08/2022, 12:10 PM

Catch Day's 2 Keynote from Ortus Solutions live and free at 9am CDT from Into the Box - watch and chat on YouTube

https://youtu.be/D3_-JwWYoWQ▾

gpickin

09/08/2022, 2:00 PM

Free - Going live now for Day's 2 Keynote from Ortus Solutions live at 9am CDT from Into the Box - watch and chat on YouTube

https://youtu.be/D3_-JwWYoWQ▾

Jason Ryan

09/09/2022, 8:34 PM

It's me again 👋 What is the story behind all the `bundle.jar'`s in the

felix-cache

folder? More specifically I'm getting some lit up with some vulnerabilities that I was hoping to (and almost did) avoid with box-light in this folder:

/root/.CommandBox/engine/cfml/cli/lucee-server/felix-cache/bundle56/version0.0/bundle.jar

dfgrumpy

09/11/2022, 4:25 PM

Question… I have a docker container running using ortussolutions/commandbox and CF2021 on port 80. However the CF admin doesn’t appear to be available. I assume I did something wrong but not sure what it is. Any help would be greatly appreciated.

megger

09/12/2022, 3:41 PM

Question regarding https://commandbox.ortusbooks.com/v/5.4.0/package-management/updating-packages: what's wrong if neither

list

nor

outdated

is working (latest commandbox version 5.6.1)? error message is

C:\Users\chucknorris\Projects\commandbox\ is not a package!

Ookma-Kyi

09/12/2022, 5:58 PM

Question regarding checkboxes and ColdBox. I am trying to use a checkbox to allow the user to choose if they wish to receive notifications. There is weird behavior going on at least for me, If the checkbox is ticketed and i use

writeOutput()

to get it's output it displays as on. However when I it isn't ticketed it simply doesn't exist. I thought it would output either

true

false

at least logically. Am I missing something or am I going to have to do a bit more work to get it to do what I want?

Ookma-Kyi

09/12/2022, 7:19 PM

I am getting the error

No matching Method/Function for user defined function (auth).user() found

. Here is a snip of the code I am using as well as all related error logs and stacks( https://bitbucket.org/ookma-kyi/workspace/snippets/6EyeMx ). What's weird is I copied and pasted that portion of the code from another module. The other component I copied and pasted from works but not this one. I double checked and yes I am injecting the

auth

dependency inside my component. Sorry about having no syntax highlighting, Bitbucket doesn't have any for ColdFusion. Trying to end the file with the extension .cfc defaults to C. 😢

cfvonner

09/12/2022, 9:32 PM

You'll have to share the code for your

User.cfc

. I suspect the

get()

method is returning an array, rather than a single user object. And since it's returning an array, the error message is saying that the array doesn't have a

setNotifications

method.

johnbarrett

09/13/2022, 4:03 AM

When the tray doesn't install when installing ColdFusion 2021 with CommandBox, is it possible to add something in the server.json file, or a command to get the tray? Below is my server.json file {

Copy code

"app":{
        "cfengine":"Adobe@2021"
    },
    "web":{
        "http":{
            "port":"2020"
        }
    },
    "jvm":{
        "heapSize":512
    }
}

danlance

09/13/2022, 12:14 PM

Hi @bdw429s / @jclausen Are you able to clarify re: latest CommandBox / Vs CB Docker image versions? We are currently pulling the

ortussolutions/commandbox:3.5.4

tag, which includes COMMANDBOX_VERSION=5.5.2
When I look at commandbox site, I see latest version of CB listed as v5.6.1. I’m not seeing any specific version tags of CB on dockerhub beyond 5.5.2, although the unversioned tags (latest / lucee-light / etc.) have been updated ~5 days ago including CB 5.6.1 We always pull from specific version tag in order to avoid “unexpected upgrades” which have not gone though our / our client’s testing and approval processes… Can you clarify if part of the build scripts have failed / been missed for this latest version… or if this is a deliberate omission?

jclausen

09/13/2022, 12:16 PM

@danlance v3.6.0 of the image was published last week, which runs CommandBox 5.6.1 https://hub.docker.com/layers/ortussolutions/commandbox/3.6.0/images/sha256-84d0eda1fb2b476db1512257f3371bd27ef3d1bbccff896a04e05ced3f232792?context=explore

danlance

09/13/2022, 12:18 PM

Last published 5 years ago…

jclausen

09/13/2022, 12:18 PM

Hmmm. Let me look.

danlance

09/13/2022, 12:19 PM

doing a 3.6.0 tag search on dockerhub shows only alpine-3.6.0 as having been pushed in last 5 years… https://hub.docker.com/r/ortussolutions/commandbox/tags?page=1&name=3.6.0

jclausen

09/13/2022, 12:20 PM

Looks like the Alpine version published but not the Ubuntu one, because the tag build failed. Let me run that again.

jclausen

09/13/2022, 12:22 PM

OK. Re-running now: https://github.com/Ortus-Solutions/docker-commandbox/actions/runs/3018356609

gpickin

09/13/2022, 5:06 PM

Live now - CFML News -

https://youtu.be/EjLH_arxa14▾

davla

09/14/2022, 12:04 PM

My server.json has this:

Copy code

"ssl":{
  "host":"api.domain.app.test",
  "port":"8080",
  "enable":true,
  "sslcert":"/etc/apache2/ssl/domain.app.test.crt",
  "sslkey":"/etc/apache2/ssl/domain.app.test.key",
  "sslkeypass":""
}

The domain.app.test cert is config’d to accept *.domain.app.test and domain.app.test. It was working before the Commandbox upgrade (I was previously on 5.4.2), now on 5.6.1

David Rogers

09/14/2022, 2:15 PM

wirebox q -- I'd like to modify an object after it is fully created by the wirebox binder, including after onDiComplete; I thought an influence closure would do this, but it runs before onDiComplete; is there an instance creation hook like this? Maybe just somehow mock out onDiComplete itself?

nolanerck

09/14/2022, 5:14 PM

CBSecurity / CBAuth question -- we've got an app where if the user types in the wrong password, CBAuth is throwing an "InvalidCredentials" exception. However the cbSecurity module settings in ColdBox.cfc is looking for a setting called "invalidAuthenticationEvent"....which kind of implies the exception it's looking for is actually "InvalidAuthentication", not "InvalidCredentials". And since the exception types aren't the same, our "invalidAuthenticationEvent" ColdBox event never fires. This works:

Copy code

try
		{
			var userObj = AuthService.authenticate(username=rc.email, password=EncryptionService.hashPassword(rc.password));
		}
		catch( ex )
		{
			if( ex.type eq "InvalidCredentials" )
			{
				relocate( event="auth/onInvalidLogin", persistStruct={ errMsg: "something bad happened!" } );
			}
			
		}

...but that seems like the long way around the problem. Trying to figure out why our "invalidAuthenticationEvent' isn't firing off. Suggestions welcome. Thanks.

Scott Steinbeck

09/14/2022, 6:21 PM

For fire and forget tasks, that i want to make sure get completed, is

runAsync

the correct solution? i basically want to fire off a SQL task that runs when a user makes a change, but they dont need to wait around for it to finish

Cavan Vannice

09/14/2022, 6:37 PM

What is the best way to add the ColdBox scheduler to a handler so I can grab a list of scheduled tasks and their last run time? So I can run

getRegisteredTasks()

for example in a handler or model.

Cavan Vannice

09/15/2022, 1:41 PM

Not sure is this is a bug or I am doing something wrong, but when I run

scheduler.task("task_name").getStats();

in my handler. For the ColdBox scheduler. I get the expected structure minus the

nextRun

field. Should I be looking for that somewhere else? @bdw429s

danlance

09/15/2022, 3:44 PM

Hi @bdw429s Is it you that is responsible for maintaining the Forgebox package for CommandBox FusionReactor https://www.forgebox.io/view/commandbox-fusionreactor This is pulling an older version of the FR agent (8.8.0) rather than the latest (9.0.0)… Happy to raise with Integral if it’s their responsibility… but the forgebox package has your name on it 😉

Jordan Clark

09/15/2022, 5:20 PM

@bdw429s Is there a way to tell what embedded version of lucee box is running? If I execute

box task run whatever.cfc

will it honour

ENV BOX_SERVER_APP_CFENGINE=lucee-light@5.3.9.133

and use that engine or is there a way to set the internal engine?

danlance

09/16/2022, 1:22 PM

Hi, We are running into an issue with setting commandbox server name within server.json which I believe started when we upgraded from CommandBox 5.2.0 to 5.4.2… and which persists into current 5.6.0 version. Within our server.json we have (amongst other settings) the following to set the server name:

Copy code

{
  "name": "${INSTANCENAME:UndefinedInEnvironment}"
}

When we were running CB <= 5.2.0, this would correctly set the name of the server to the passed in environment variable… but following on from upgrading to 5.4.2, the servername is always set to

www

- or rather I believe set to the name of the folder the server is started in… Within the detailed output for warmup-server.sh (in this instance running CB 5.5.2) we see the following:

Copy code

Starting up container in test mode
Set verboseErrors = true
INFO: Configuration set to non-root user: CBServerUser
Set verboseErrors = true
INFO: CF Engine defined as lucee@5.3.9+133
INFO: Convention .cfconfig.json found at /var/www/.cfconfig.json
INFO: Server Home Directory set to: /usr/local/lib/serverHome
 √ | Starting Server
   |------------------------------
   | start server in - /var/www/
   | server name - www
   | server config file - /var/www//server.json
   | WAR/zip archive already installed.

..and when the server starts - either locally or on AWS, the server name always shows up as www previously, within the warmup running within the dev ops build script, where the

INSTANCENAME

environment variable was not set, we would see

UndefinedInEnvironment

shown as the server name, and then when running within local / AWS environments where the environment variable was set, the server name would be set to the environment variable. This is particularly an issue when viewing servers within Fusion Reactor Cloud dashboard… as we have multiple servers for different applications and environments appear in the dashboard as www - and not the specific app / environment name specified. All other dynamically set parameters within the server.json - such as the fusionreator settings for cloudgroup, defaultApplicationName etc. which are set from environment variables, appear to be set correctly (so we can for instance see in FR when we dig into the details what app / environment is being run, but on all the menus, all instances appear as www. Can anyone advise why this behaviour seems to have changed… and if there is something we can do to ensure that the server name is set correctly as it was previously?