Merge branch 'development'

Author: lmajano

box.json

@@ -1,6 +1,6 @@
 {
     "name":"ColdBox Security",
-    "version":"2.13.0",
+    "version":"2.14.0",
     "location":"https://downloads.ortussolutions.com/ortussolutions/coldbox-modules/cbsecurity/@build.version@/[email protected]@.zip",
     "author":"Ortus Solutions.com <[email protected]>",
     "slug":"cbsecurity",

changelog.md

@@ -7,7 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ----
 
-## [2.13.0] => 2021-SEP-
+## [2.14.0] => 2021-OCT-07
+
+### Added
+
+* `threadsafe` annotation to all models to prevent invalid creations under load, since we don't use circular dependencies.
+
+----
+
+## [2.13.0] => 2021-SEP-02
 
 ### Added
 

models/CBSecurity.cfc

@@ -16,7 +16,7 @@
  * cbsecure().secure();
  * </pre>
  */
-component singleton accessors="true" {
+component threadsafe singleton accessors="true" {
 
 	/*********************************************************************************************/
 	/** DI **/

models/jwt/JwtService.cfc

@@ -5,7 +5,7 @@
  * This is the JWT Services that will provide you with glorious JWT capabilities.
  * Learn more about Json Web Tokens here: https://jwt.io/
  */
-component accessors="true" singleton {
+component accessors="true" singleton threadsafe{
 
 	/*********************************************************************************************/
 	/** DI **/

models/jwt/storages/CacheTokenStorage.cfc

@@ -4,7 +4,7 @@
  * ---
  * A CacheBox cache based token storage
  */
-component accessors="true" singleton {
+component accessors="true" singleton threadsafe{
 
 	// DI
 	property name="wirebox"    inject="wirebox";

models/jwt/storages/DBTokenStorage.cfc

@@ -20,7 +20,7 @@
  * - subject : varchar 255
  *
  */
-component accessors="true" singleton {
+component accessors="true" singleton threadsafe{
 
 	// DI
 	property name="wirebox"    inject="wirebox";

models/util/RulesLoader.cfc

@@ -4,7 +4,7 @@
  * ---
  * Rule loader service
  */
-component accessors="true" singleton {
+component accessors="true" singleton threadsafe{
 
 	// DI
 	property name="controller" inject="coldbox";

models/validators/CBAuthValidator.cfc

@@ -5,7 +5,7 @@
  * This is the core validator which leverages CBAuth
  * https://helpx.adobe.com/coldfusion/developing-applications/developing-cfml-applications/securing-applications/using-coldfusion-security-tags-and-functions.html
  */
-component singleton {
+component singleton threadsafe{
 
 	// Injection
 	property name="cbSecurity" inject="CBSecurity@cbSecurity";

models/validators/CFValidator.cfc

@@ -5,7 +5,7 @@
  * This is the core validator which leverages CF Security via cflogin and cfloginuser
  * https://helpx.adobe.com/coldfusion/developing-applications/developing-cfml-applications/securing-applications/using-coldfusion-security-tags-and-functions.html
  */
-component singleton {
+component singleton threadsafe{
 
 	/**
 	 * This function is called once an incoming event matches a security rule.