Category Selected:

releases

Blog

CommandBox 5.4.1 Released

Brad Wood September 17, 2021

Spread the word

Brad Wood

September 17, 2021

Spread the word


Share your thoughts

We are pleased to announce the release of CommandBox 5.4.1.  This is a patch release with 5 small fixes for the 5.4.0 release.   There are a few bug fixes, and a couple small enhancements in this release.

Get the update

You can download the latest version from our product page:

https://www.ortussolutions.com/products/commandbox#download

This update has no changes to the jar files, so if you are already on the 5.4.0 version, you should be able to use the "upgrade" command to get the 5.4.1 version.

CommandBox> upgrade

Release Notes

Bug

COMMANDBOX-1374 Some installs unnecessarily write to the box.json

COMMANDBOX-1370 ConfigService::settingExists() fails in race conditions due to non-varscoped variables in JSONService

Improvement

COMMANDBOX-1372 Support excludePaths in watcher DSL and watch command

COMMANDBOX-1369 Ensure Adobe wars have a seeds.properties file

COMMANDBOX-1368 Add tab complete for "env clear" command

COMMANDBOX-1367 Ignore empty startScript on server start

Luis Majano

September 02, 2021

Spread the word


Share your thoughts

We are incredibly excited to release cbSecurity version 2.13.0 today. This release packs a big punch in terms of features for our JWT support for RESTFul APIs. We are excited to announce full refresh token support and much more.

# Install
install cbsecurity

# Update
update cbsecurity

Refresh Tokens

ColdBox Security supports the concept of refresh tokens alongside the normal JWT access tokens.

What Is a Refresh Token?

A refresh token is a credential artifact that lets a client application get new access tokens without having to ask the user to log in again. Access tokens may be valid for a short amount of time. Once they expire, client applications can use a refresh token to "refresh" the access token.

The client application can get a new access token as long as the refresh token is valid and unexpired. Consequently, a refresh token that has a very long lifespan could theoretically give infinite power to the token bearer to get a new access token to access protected resources anytime. The bearer of the refresh token could be a legitimate user or a malicious user.

You can read all about how we implemented refresh tokens for ColdBox security here: https://coldbox-security.ortusbooks.com/jwt/refresh-tokens

What's New With 2.13.0

Added

  • Adobe 2021 Support
  • Migration to GitHub Actions from Travis CI
  • Refresh tokens support
  • Refresh token endpoint /cbsecurity/refreshToken for secure refresh token generation
  • Manual refresh token method on the JwtService : refreshToken( token )
  • Auto refresh token header interceptions for JWT validators
  • Detect on authenticate() if the payload is empty and throw the appropriate exceptions
  • Added ability for the authenticate( payload ) to receive a payload to authenticate
  • Added ability to recreate the token storage using a force argument getTokenStorage( force = false )
  • Ability for the parseToken() to choose to store and authenticate or just parse

Fixed

  • Unique jti could have collisions if tokens created at the same time, add randomness to it
  • TokenExpirationException not relayed from the base jwt library
  • If variables.settings.jwt.tokenStorage.enabled is disabled all invalidations failed, make sure if the storage is disabled to not throw storage exceptions.

CommandBox 5.4.0 Released!

Brad Wood |  August 18, 2021

We are pleased to announce the release of CommandBox 5.4.0.  A minor update containing 30 bug fixes and enhancements that has been 3 months in the making.  Our focus for this release was cleaning up some rough edges left from the 5.3.x enhancements, improvements to the CLI to support the latest modules, and enhancements to automation around environment variables.  

Read More

CommandBox-CFConfig 1.6.0 Released!

Brad Wood |  August 05, 2021

Hot on the heels of our previous announcement of big new CFConfig features, we've got another release to let you know about!  This release should all be completely backwards compatible, but we’ve added a bunch of new behaviors so please report any issues you may have.  This release was all about relieving the pain of Lucee developers dealing with the duality of their server and web context.  Some config has to go in the server admin and some config has to go in the web admin.  CFConfig previously would only automatically import config into the server context which left you with a manual task to get your web config imported.  

Read More

CFConfig 1.4.0 released!

Brad Wood |  July 13, 2021

Today we've released a new version of CFConfig-- your friendly neighborhood CLI for configuring Adobe and Lucee servers.  CFConfig sees a lot of little releases that we don't announce, but they are usually very small little releases adding a single setting here or there.  Today's release has a nice collection of brand new features that seemed worth talking about.

Read More

ColdBox 6.5.0 Released

Luis Majano |  July 09, 2021

Today we are excited to release ColdBox v6.5.0 and its standalone companion libraries: CacheBox, LogBox and WireBox. This release has focused on stability and making sure all bugs are addressed especially when using our schedulers and asynchronous processes.

Read More

TestBox v4.4 Released!

Luis Majano |  June 16, 2021

We are excited to announce a major version release of TestBox version 4.4.0. To install just use CommandBox: install testbox --saveDev or to update your TestBox installation update testbox. So let's explore this release!

Read More

TestBox v4.3 Released!

Luis Majano |  May 24, 2021

We are excited to announce a major version release of [TestBox](/products/testbox) version 4.0.0. To install just use CommandBox: `install testbox --saveDev` or to update your TestBox installation `update testbox`. So let's explore this release!
Read More

CommandBox 5.3.1 Released

Brad Wood |  May 18, 2021

We've released a small update to our recent CommandBox 5.3.0 release.  This contains fixes for a handful of regressions as well as a couple new features.  You can access the new version on our Download page, our deb/rpm repos, or Homebrew.  

And of course, you can find the latest docs  and release notes here:

https://commandbox.ortusbooks.com/

Read More

cbValidation v3.1.0 Released

Luis Majano |  May 17, 2021

I am so excited to bring you the release of cbValidation to version 3.1.0. This has been a great collaboration between Wil De Bruin and Eric Peterson. Thanks so much guys for all that you do for open source. You can see all of the release notes below with some of the major improvements of this release. To get this release make sure you are already on version 3.x and use CommandBox: box update cbvalidation. You can find the release notes here: https://coldbox-validation.ortusbooks.com/intro/release-history/whats-new-with-3.1.0 and you can view all the new documentation here: https://coldbox-validation.ortusbooks.com. Enjoy!

Read More