* Moved handler bean to afterAspectsLoad() to allow for module based invalid events to work.

Author: lmajano

changelog.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 * Moved the registration of the validator from the `configure()` to the `afterAspectsLoad()` interception point to allow for modules to declare the validator if needed.
+* Moved handler bean to `afterAspectsLoad()` to allow for module based invalid events to work.
 
 ----
 

interceptors/Security.cfc

@@ -28,11 +28,6 @@ component accessors="true" extends="coldbox.system.Interceptor" {
 	 * Configure the security firewall
 	 */
 	function configure(){
-		variables.onInvalidEventHandlerBean = javacast( "null", "" );
-        if ( len( variables.invalidEventHandler ) ) {
-            variables.onInvalidEventHandlerBean = handlerService.getHandlerBean( variables.invalidEventHandler );
-        }
-
 		// init the security modules dictionary
 		variables.securityModules = {};
 
@@ -83,6 +78,12 @@ component accessors="true" extends="coldbox.system.Interceptor" {
 				// Register Module
 				registerModule( arguments.module, arguments.config.settings.cbSecurity );
 			} );
+
+		// Once ColdBox has loaded, load up the invalid event bean
+		variables.onInvalidEventHandlerBean = javacast( "null", "" );
+        if ( len( variables.invalidEventHandler ) ) {
+            variables.onInvalidEventHandlerBean = handlerService.getHandlerBean( variables.invalidEventHandler );
+        }
 	}
 
 	/**