Generate and validate JWT access and refresh tokens for ColdBox REST APIs.
npx skills add https://github.com/ColdBox/skills --skill coldbox-security-jwt
Please help me install this Agent Skill. Skill: coldbox-security-jwt Source: https://github.com/ColdBox/skills/tree/main/security/jwt-development Command: npx skills add https://github.com/ColdBox/skills --skill coldbox-security-jwt
Stateless JWT-based authentication and authorization for ColdBox REST APIs, enabling scalable security without server-side sessions.
Configure the JWT settings in config/ColdBox.cfc (issuer, audience, secret), initialize the CBSecurity JWT service, and authenticate to obtain an access token.
High-intent search queries and answers about installing and using this skill.
Secure a ColdBox REST API using JWT authentication by configuring CBSecurity to generate and validate access tokens, applying middleware-based protection to restrict unauthorized route access.
JWT token refresh issues short-lived access tokens and long-lived refresh tokens for ColdBox REST APIs, enabling clients to obtain new access tokens without re-authenticating, ensuring scalable stateless security.
Yes, role-based access control is enforced by applying JWT middleware in ColdBox, intercepting requests to validate tokens and verify user roles before granting access to protected API routes.
Configure JWT issuer, audience, and secret directly in config/ColdBox.cfc, then initialize the CBSecurity JWT service to ensure tokens are properly signed and validated against expected parameters.
No, JWT authentication provides stateless security for ColdBox REST APIs, eliminating server-side sessions and enabling scalable API access for web and mobile clients through self-contained tokens.
Revoke JWT access tokens in ColdBox by enabling token storage within CBSecurity, allowing the application to track and invalidate active tokens before their expiration, preventing unauthorized API access.
ColdBoxSecure ColdBox and BoxLang apps with annotation-based access control and JWT authentication.
dr-codeImplement NextAuth v5 authentication and authorization for Next.js applications.
HollowvynDevelop Node.js REST APIs in TypeScript with Express or Fastify.
drgaciwImplement JWT, OAuth2, session, and RBAC authentication patterns.
