skills.rest
ColdBox
ColdBoxOFFICIAL
Explore all skills by this author →
Website𝕏@coldboxGitHub

coldbox-security-authentication

Automate CBAuth authentication setup for ColdBox applications with BCrypt password hashing.

1|Updated Apr 10, 2026
Search Tags:#security#bcrypt#authenticate#coldbox#cbauth#remember-me
One-click install
npx skills add https://github.com/ColdBox/skills --skill coldbox-security-authentication
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: coldbox-security-authentication
Source: https://github.com/ColdBox/skills/tree/main/security/authentication
Command: npx skills add https://github.com/ColdBox/skills --skill coldbox-security-authentication

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CBAuth-based authentication patterns for ColdBox streamline secure user login flows, session handling, remember-me cookies, and integration with user services.

Core Features & Use Cases

  • Implement user retrieval by ID and by username for login and account management.
  • Hash and verify passwords with BCrypt, enabling secure credential storage.
  • Configure login/logout flows and remember-me support across ColdBox applications.
  • Use CBAuth module configuration to wire authentication services and session policy in your app.

Quick Start

Set up CBAuth by implementing retrieveUserById and retrieveUserByUsername in your UserService, hashing passwords with BCrypt, and enabling remember-me in the module configuration.

Frequently Asked Questions about coldbox-security-authentication

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up user authentication in a ColdBox application?▼

User authentication in a ColdBox application is set up by implementing the CBAuth module, configuring your UserService with retrieveUserById and retrieveUserByUsername methods, and enabling session management for login flows.

How do I securely hash and verify passwords using BCrypt in ColdBox?▼

Securely hashing passwords with BCrypt in ColdBox involves applying the BCrypt algorithm to encrypt user credentials before storage and verifying the hash against incoming login requests to authenticate users without exposing plaintext passwords.

Can I implement remember-me functionality for login flows in ColdBox?▼

Remember-me functionality can be implemented in ColdBox by enabling the feature within the CBAuth module configuration, allowing your application to persist user sessions across browser closures using secure authentication cookies.

What methods does my UserService need for CBAuth integration?▼

Your UserService must implement retrieveUserById and retrieveUserByUsername methods for CBAuth integration, enabling the authentication service to fetch user records during the login process and manage account sessions effectively.

How do I configure login and logout flows with CBAuth?▼

Configuring login and logout flows with CBAuth requires wiring the authentication services through the ColdBox module configuration, mapping user credentials to your UserService, and defining the session policy for secure access control.

Related Skills

Explore More Software Engineering Skills→
ColdBoxColdBox

coldbox-security-rbac

Implement role-based access control for ColdBox applications with database schemas.

Official
Intermediate
Camilo8902Camilo8902

rbac-permissions-builder

Implement RBAC with permission matrices, route guards, and policy functions.

Community
Advanced
ColdBoxColdBox

coldbox-security-jwt

Generate and validate JWT access and refresh tokens for ColdBox REST APIs.

Official
Advanced
ColdBoxColdBox

cbauth

Implement secure user authentication for ColdBox/BoxLang applications using cbauth.

Official
Advanced