coldbox-interceptor-development

What problem does it solve?

This skill helps developers implement ColdBox interceptors to centralize cross-cutting concerns such as authentication, logging, CORS, rate limiting, request/response transformation, and custom lifecycle events to reduce duplicated code and improve consistency across handlers and modules.

Core Features & Use Cases

• Lifecycle Hooks: Listen to framework interception points like preProcess, postProcess, preHandler, postHandler, preRender, and onException to run centralized logic.
• Security & Rate Limiting: Implement authentication checks, protected route handling, and rate limiting with CacheBox integration and configurable responses.
• Integrations & Patterns: Register interceptors in ColdBox.cfc or ModuleConfig.cfc, use interceptData and announce for custom events, support async listeners for non-blocking tasks (email, notifications), and configure CORS headers and preflight handling.
• Use Case: Protect admin routes with an auth interceptor, log request metadata, and apply a rate limiter that returns 429 with retry headers when thresholds are exceeded.

Quick Start

Create an interceptor that authenticates requests to /admin, logs request metadata including IP and user-agent, and returns a 401 or redirects to login when unauthenticated.