# ColdBox Security

## v1.x

- [Introduction](https://coldbox-security.ortusbooks.com/master-4/master.md)
- [Overview](https://coldbox-security.ortusbooks.com/master-4/untitled.md)
- [How It Works](https://coldbox-security.ortusbooks.com/master-4/home.md)
- [Declaring the Interceptor](https://coldbox-security.ortusbooks.com/master-4/first-chapter.md)
- [XML Properties](https://coldbox-security.ortusbooks.com/master-4/first-chapter/xml-properties.md)
- [JSON Properties](https://coldbox-security.ortusbooks.com/master-4/first-chapter/json-properties.md)
- [DB Properties](https://coldbox-security.ortusbooks.com/master-4/first-chapter/untitled.md)
- [IOC Properties](https://coldbox-security.ortusbooks.com/master-4/first-chapter/ioc-properties.md)
- [OCM Properties](https://coldbox-security.ortusbooks.com/master-4/first-chapter/ocm-properties.md)
- [Security Rules](https://coldbox-security.ortusbooks.com/master-4/untitled-1.md)
- [Sample JSON Rules](https://coldbox-security.ortusbooks.com/master-4/untitled-1/sample-json-rules.md)
- [Sample XML Rules](https://coldbox-security.ortusbooks.com/master-4/untitled-1/sample-xml-rules.md)
- [\_securedURL key](https://coldbox-security.ortusbooks.com/master-4/_securedurl-key.md)
- [Default Security](https://coldbox-security.ortusbooks.com/master-4/default-security.md)
- [Custom Security Validator Object](https://coldbox-security.ortusbooks.com/master-4/custom-security-validator-object.md)

## v2.x

- [Introduction](https://coldbox-security.ortusbooks.com/v2.x-3/readme.md)
- [Release History](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history.md)
- [What's New With 2.15.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.15.0.md): 2021-DEC-10
- [What's New With 2.14.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.14.0.md): 2021-OCT-07
- [What's New With 2.13.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.13.0.md): 2021-SEP-
- [What's New With 2.12.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.12.0.md): 2021-MAR-29
- [What's New With 2.11.x](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.11.x.md): 2021-MAR-10
- [What's New With 2.10.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.10.0.md): 2021-FEB-12
- [What's New With 2.9.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.9.0.md): 2020-DEC-11
- [What's New With 2.8.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.8.0.md): 2020-NOV-09
- [What's New With 2.7.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.7.0.md): 2020-SEP-14
- [What's New With 2.6.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.6.0.md): 2020-JUL-22
- [What's New With 2.5.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.5.0.md): 2020-APR-03
- [What's New With 2.4.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.4.0.md): 2020-APR-02
- [What's New With 2.3.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.3.0.md): 2020-MAR-30
- [What's New With 2.2.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.2.0.md): 2020-FEB-12
- [What's New With 2.1.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.1.0.md): 2019-OCT-02
- [What's New With 2.0.0](https://coldbox-security.ortusbooks.com/v2.x-3/intro/release-history/whats-new-with-2.0.0.md): 2019-SEP-25
- [About This Book](https://coldbox-security.ortusbooks.com/v2.x-3/intro/about-this-book.md)
- [Author](https://coldbox-security.ortusbooks.com/v2.x-3/intro/author.md)
- [Installation](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/installation.md)
- [Overview](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/overview.md): In this page you will find a thorough overview of the capabilities of the ColdBox Security module.
- [Configuration](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter.md)
- [Rule Sources](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources.md)
- [DB Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/untitled.md)
- [Inline Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/inline-rules.md)
- [JSON Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/json-properties.md)
- [Model Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/model-rules.md)
- [Module Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/module-rules.md)
- [XML Rules](https://coldbox-security.ortusbooks.com/v2.x-3/getting-started/first-chapter/rule-sources/xml-properties.md)
- [Authentication Services](https://coldbox-security.ortusbooks.com/v2.x-3/usage/authentication-services.md): ColdBox security can work with ANY authentication service provider.
- [Security Rules](https://coldbox-security.ortusbooks.com/v2.x-3/usage/untitled-1.md)
- [Security Annotations](https://coldbox-security.ortusbooks.com/v2.x-3/usage/security-annotations.md)
- [Secured URL](https://coldbox-security.ortusbooks.com/v2.x-3/usage/_securedurl-key.md)
- [Interceptions](https://coldbox-security.ortusbooks.com/v2.x-3/usage/interceptions.md)
- [cbSecurity Model](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cbsecurity-model.md): This object is used to provide you with human, fluent and explicit security authorizations and contexts.
- [secure() Blocking Methods](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cbsecurity-model/secure-blocking-methods.md)
- [Verification Methods](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cbsecurity-model/verification-methods.md)
- [Authorization Contexts](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cbsecurity-model/authorization-contexts.md)
- [Securing Views](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cbsecurity-model/securing-views.md)
- [Cross Site Request Forgery](https://coldbox-security.ortusbooks.com/v2.x-3/usage/cross-site-request-forgery-cbcsrf.md): This feature set is provided by the cbcsrf module.
- [CBAuth Validator](https://coldbox-security.ortusbooks.com/v2.x-3/security-validators/cbauth-validator.md)
- [CFML Security Validator](https://coldbox-security.ortusbooks.com/v2.x-3/security-validators/default-security.md)
- [Custom Validator](https://coldbox-security.ortusbooks.com/v2.x-3/security-validators/custom-security-validator-object.md)
- [JWT Services](https://coldbox-security.ortusbooks.com/v2.x-3/jwt/jwt-services.md)
- [JWT Validator](https://coldbox-security.ortusbooks.com/v2.x-3/jwt/jwt-validator.md)
- [Refresh Tokens](https://coldbox-security.ortusbooks.com/v2.x-3/jwt/refresh-tokens.md)
- [Token Storage](https://coldbox-security.ortusbooks.com/v2.x-3/jwt/jwt-token-storage.md)
- [JWT Interceptions](https://coldbox-security.ortusbooks.com/v2.x-3/jwt/jwt-interceptions.md)

## v3.x

- [Introduction](https://coldbox-security.ortusbooks.com/readme.md): Enterprise-grade security for ColdBox applications with authentication, authorization, JWT, CSRF protection, and comprehensive security headers.
- [Release History](https://coldbox-security.ortusbooks.com/readme/release-history.md): A brief history in time of our major releases
- [What's new With 3.7.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.7.0.md): January 14, 2026
- [What's New With 3.6.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.6.0.md): 2025-12-08
- [What's New With 3.5.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.5.0.md): What's new with CBSecurity 3.5.0
- [What's New With 3.4.3](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.4.3.md): What's new with CBSecurity 3.4.3
- [What's New With 3.4.2](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.4.2.md): What's new with CBSecurity 3.4.2
- [What's New With 3.4.1](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.4.1.md): What's new with CBSecurity 3.4.1
- [What's New With 3.4.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.4.0.md): June 14, 2023
- [What's New With 3.3.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.3.0.md): March 31, 2023
- [What's New With 3.2.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.2.0.md): March 29, 2023
- [What's New With 3.1.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.1.0.md): 2023-FEB-17
- [What's New With 3.0.0](https://coldbox-security.ortusbooks.com/readme/release-history/whats-new-with-3.0.0.md): January 2023
- [Upgrade to 3.0.0](https://coldbox-security.ortusbooks.com/readme/upgrade-to-3.0.0.md)
- [About This Book](https://coldbox-security.ortusbooks.com/readme/about-this-book.md): A little more info about this book
- [Author](https://coldbox-security.ortusbooks.com/readme/about-this-book/author.md): About our authors
- [Installation](https://coldbox-security.ortusbooks.com/getting-started/installation.md): Get up and running with CBSecurity in no time!
- [Overview](https://coldbox-security.ortusbooks.com/getting-started/overview.md): In this page you will find a thorough overview of the capabilities of the ColdBox Security module.
- [Configuration](https://coldbox-security.ortusbooks.com/getting-started/configuration.md): How to configure CBSecurity
- [Authentication](https://coldbox-security.ortusbooks.com/getting-started/configuration/authentication.md): Configuring your authentication services
- [Basic Auth](https://coldbox-security.ortusbooks.com/getting-started/configuration/basic-auth.md): Configuration for basic authentication
- [CSRF](https://coldbox-security.ortusbooks.com/getting-started/configuration/csrf.md): Configuring CBSecurity for cross site request forgery attacks
- [JWT](https://coldbox-security.ortusbooks.com/getting-started/configuration/jwt.md): JSON Web Tokens configurations
- [Firewall](https://coldbox-security.ortusbooks.com/getting-started/configuration/firewall.md): Configuring the security firewall
- [DB Rules](https://coldbox-security.ortusbooks.com/getting-started/configuration/firewall/untitled.md): Security rules from a database
- [JSON Rules](https://coldbox-security.ortusbooks.com/getting-started/configuration/firewall/json-properties.md): Security rules in a JSON file
- [Model Rules](https://coldbox-security.ortusbooks.com/getting-started/configuration/firewall/model-rules.md): Security rules from a model's method call
- [XML Rules](https://coldbox-security.ortusbooks.com/getting-started/configuration/firewall/xml-properties.md): Security rules in an XML file
- [Security Headers](https://coldbox-security.ortusbooks.com/getting-started/configuration/security-headers.md): Configuring the security response headers and features
- [Visualizer](https://coldbox-security.ortusbooks.com/getting-started/configuration/visualizer.md): Configuring the CBSecurity Visualizer
- [Authentication Services](https://coldbox-security.ortusbooks.com/usage/authentication-services.md): ColdBox security can work with ANY authentication service provider.
- [Basic Authentication](https://coldbox-security.ortusbooks.com/usage/basic-authentication.md): Basic access authentication is a method for an HTTP user agent (e.g. a web browser) to provide a user name and password when making a request.
- [Security Rules](https://coldbox-security.ortusbooks.com/usage/untitled-1.md): CBSecurity can apply security rules to incoming events.
- [Security Annotations](https://coldbox-security.ortusbooks.com/usage/security-annotations.md): Security annotations are used to secure your handler and/or handler actions
- [cbSecurity Model](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model.md): This object is used to provide you with human, fluent and explicit security authorizations, authentication insight, utility and contexts.
- [Authentication Methods](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/authentication-methods.md): These methods assist a developer in getting insight into the authentication framework.
- [Authorization Contexts](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/authorization-contexts.md): Create fluent and secure code blocks
- [Blocking Methods](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/secure-blocking-methods.md): Get outta here!
- [Securing Views](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/securing-views.md): Secure access to views in ColdBox
- [Utility Methods](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/utility-methods.md): Get access to several security-focused methods to assist in your security journey.
- [Verification Methods](https://coldbox-security.ortusbooks.com/usage/cbsecurity-model/verification-methods.md): Verify permissions the fluent way!
- [Secured URL](https://coldbox-security.ortusbooks.com/usage/_securedurl-key.md): CBSecurity stores the secured incoming url so you can relocate the user to it after authenticating.
- [Interceptions](https://coldbox-security.ortusbooks.com/usage/interceptions.md): CBSecurity has many events that you can listen to for an event-driven experience.
- [Cross Site Request Forgery](https://coldbox-security.ortusbooks.com/usage/cross-site-request-forgery-cbcsrf.md): This feature set is provided by the cbcsrf module.
- [Delegates](https://coldbox-security.ortusbooks.com/usage/delegates.md): Delegate yourself!
- [Auth User](https://coldbox-security.ortusbooks.com/usage/auth-user.md): CBSecurity comes bundled with a basic authentication User
- [Auth Validator](https://coldbox-security.ortusbooks.com/security-validators/auth-validator.md): The auth validator leverages authentication and role-permission-based authorization for you.
- [BasicAuth Validator](https://coldbox-security.ortusbooks.com/security-validators/basicauth-validator.md): The BasicAuth validator leverages HTTP Basic Authentication for authentication and role-permission-based authorization for you.
- [CFML Security Validator](https://coldbox-security.ortusbooks.com/security-validators/default-security.md): The CFML Security validator leverages the ColdFusion security functions for authentication and role based authorization.
- [Custom Validator](https://coldbox-security.ortusbooks.com/security-validators/custom-security-validator-object.md): You can write your own custom validators with CBSecurity
- [JWT Services](https://coldbox-security.ortusbooks.com/jwt/jwt-services.md)
- [JWT Validator](https://coldbox-security.ortusbooks.com/jwt/jwt-validator.md)
- [Refresh Tokens](https://coldbox-security.ortusbooks.com/jwt/refresh-tokens.md)
- [Token Storage](https://coldbox-security.ortusbooks.com/jwt/jwt-token-storage.md)
- [JWT Interceptions](https://coldbox-security.ortusbooks.com/jwt/jwt-interceptions.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://coldbox-security.ortusbooks.com/readme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.