You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@couchdb.apache.org by Joan Touzet <wo...@apache.org> on 2020/05/06 07:59:18 UTC
[ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Dear community,
Apache CouchDB® 3.0.1 and 3.1.0 have been released and are available for download.
Apache CouchDB® lets you access your data where you need it. The Couch Replication Protocol is implemented in a variety of projects and products that span every imaginable computing environment from globally distributed server-clusters, over mobile phones to web browsers.
Store your data safely, on your own servers, or with any leading cloud provider. Your web- and native applications love CouchDB, because it speaks JSON natively and supports binary data for all your data storage needs.
The Couch Replication Protocol lets your data flow seamlessly between server clusters to mobile phones and web browsers, enabling a compelling offline-first user-experience while maintaining high performance and strong reliability. CouchDB comes with a developer-friendly query language, and optionally MapReduce for simple, efficient, and comprehensive data retrieval.
https://couchdb.apache.org/#download
Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS are available.
CouchDB 3.0.1 is a maintenance release, and was originally published on 2020-05-05.
CouchDB 3.1.0 is a feature release, and was originally published on 2020-05-05.
The community would like to thank all contributors for their part in making this release, from the smallest bug report or patch to major contributions in code, design, or marketing, we couldn’t have done it without you!
See the official release notes document for an exhaustive list of all changes:
http://docs.couchdb.org/en/stable/whatsnew/3.1.html
Release Notes highlights from 3.0.1:
- A memory leak when encoding large binary content was patched
- Improvements in documentation and defaults
- JavaScript will no longer corrupt UTF-8 strings in various JS functions
Release Notes highlights from 3.1.0:
Everything from 3.0.1, plus...
- Support for Java Web Tokens
- Support for SpiderMonkey 68, including binaries for Ubuntu 20.04 (Focal Fossa)
- Up to a 40% performance improvement in the database compactor
-
On behalf of the CouchDB PMC,
Joan Touzet
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Jan Lehnardt <ja...@apache.org>.
> On 6. May 2020, at 12:55, Sebastien <le...@gmail.com> wrote:
>
> Awesome news, thanks to everyone involved!
>
> A quick question about the JWT authentication support (greatest news in
> this release for my project). Are there plans for Couch to support
> extracting JWT tokens from a cookie?
> In some scenarios it can be easier/safer to pass JWT tokens to clients
> through cookies (secure, sameSite, httpOnly, etc) so that they don't store
> those in localStorage/have to add those themselves.
>
> If you want I can create a ticket with this request (where?).
Tickets go here: https://github.com/apache/couchdb/issues
Best
Jan
—
>
> kr,
> Sébastien D.
>
> On Wed, May 6, 2020 at 9:59 AM Joan Touzet <wo...@apache.org> wrote:
>
>> Dear community,
>>
>> Apache CouchDB® 3.0.1 and 3.1.0 have been released and are available for
>> download.
>>
>> Apache CouchDB® lets you access your data where you need it. The Couch
>> Replication Protocol is implemented in a variety of projects and products
>> that span every imaginable computing environment from globally distributed
>> server-clusters, over mobile phones to web browsers.
>>
>> Store your data safely, on your own servers, or with any leading cloud
>> provider. Your web- and native applications love CouchDB, because it speaks
>> JSON natively and supports binary data for all your data storage needs.
>>
>> The Couch Replication Protocol lets your data flow seamlessly between
>> server clusters to mobile phones and web browsers, enabling a compelling
>> offline-first user-experience while maintaining high performance and strong
>> reliability. CouchDB comes with a developer-friendly query language, and
>> optionally MapReduce for simple, efficient, and comprehensive data
>> retrieval.
>>
>> https://couchdb.apache.org/#download
>>
>> Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS are
>> available.
>>
>> CouchDB 3.0.1 is a maintenance release, and was originally published on
>> 2020-05-05.
>>
>> CouchDB 3.1.0 is a feature release, and was originally published on
>> 2020-05-05.
>>
>> The community would like to thank all contributors for their part in
>> making this release, from the smallest bug report or patch to major
>> contributions in code, design, or marketing, we couldn’t have done it
>> without you!
>>
>> See the official release notes document for an exhaustive list of all
>> changes:
>>
>> http://docs.couchdb.org/en/stable/whatsnew/3.1.html
>>
>> Release Notes highlights from 3.0.1:
>>
>> - A memory leak when encoding large binary content was patched
>>
>> - Improvements in documentation and defaults
>>
>> - JavaScript will no longer corrupt UTF-8 strings in various JS
>> functions
>>
>> Release Notes highlights from 3.1.0:
>>
>> Everything from 3.0.1, plus...
>>
>> - Support for Java Web Tokens
>>
>> - Support for SpiderMonkey 68, including binaries for Ubuntu 20.04
>> (Focal Fossa)
>>
>> - Up to a 40% performance improvement in the database compactor
>>
>> -
>> On behalf of the CouchDB PMC,
>> Joan Touzet
>>
>>
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Robert Samuel Newson <rn...@apache.org>.
that was it.
As an option, I don't think it's a problem. I'd review a Pull Request that brought this in.
B.
> On 6 May 2020, at 19:56, Jan Lehnardt <ja...@apache.org> wrote:
>
>
>
>> On 6. May 2020, at 20:15, Damjan Georgievski <gd...@gmail.com> wrote:
>>
>> On Wed, 6 May 2020 at 16:40, Robert Samuel Newson <rn...@apache.org> wrote:
>>>
>>> Make an issue (https://github.com/apache/couchdb/issues)
>>>
>>> At first blush, I don't see why not, though I thought there was value in
>>> Authorization: Bearer <token> from _not_ being a cookie. I guess those benefits
>>> are not coupled with the token itself though.
>>
>> I think the reasoning was that cookies can be long lived, and can
>> persist in different places,
>> and for JWTs that's generally undesirable. the Authorization: header
>> is explicitly set by code, and shouldn't be persisted.
>
> Plus browsers auto-sending cookies in many occasions when you don’t
> want that. I forget the correct web security acronym this comes out to,
> but it’s somewhere in the family of XSRF and XSS.
>
> Best
> Jan
> —
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Jan Lehnardt <ja...@apache.org>.
> On 6. May 2020, at 20:15, Damjan Georgievski <gd...@gmail.com> wrote:
>
> On Wed, 6 May 2020 at 16:40, Robert Samuel Newson <rn...@apache.org> wrote:
>>
>> Make an issue (https://github.com/apache/couchdb/issues)
>>
>> At first blush, I don't see why not, though I thought there was value in
>> Authorization: Bearer <token> from _not_ being a cookie. I guess those benefits
>> are not coupled with the token itself though.
>
> I think the reasoning was that cookies can be long lived, and can
> persist in different places,
> and for JWTs that's generally undesirable. the Authorization: header
> is explicitly set by code, and shouldn't be persisted.
Plus browsers auto-sending cookies in many occasions when you don’t
want that. I forget the correct web security acronym this comes out to,
but it’s somewhere in the family of XSRF and XSS.
Best
Jan
—
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Damjan Georgievski <gd...@gmail.com>.
On Wed, 6 May 2020 at 16:40, Robert Samuel Newson <rn...@apache.org> wrote:
>
> Make an issue (https://github.com/apache/couchdb/issues)
>
> At first blush, I don't see why not, though I thought there was value in
> Authorization: Bearer <token> from _not_ being a cookie. I guess those benefits
> are not coupled with the token itself though.
I think the reasoning was that cookies can be long lived, and can
persist in different places,
and for JWTs that's generally undesirable. the Authorization: header
is explicitly set by code, and shouldn't be persisted.
--
damjan
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Robert Samuel Newson <rn...@apache.org>.
Make an issue (https://github.com/apache/couchdb/issues)
At first blush, I don't see why not, though I thought there was value in
Authorization: Bearer <token> from _not_ being a cookie. I guess those benefits
are not coupled with the token itself though.
B.
> On 6 May 2020, at 11:55, Sebastien <le...@gmail.com> wrote:
>
> Awesome news, thanks to everyone involved!
>
> A quick question about the JWT authentication support (greatest news in
> this release for my project). Are there plans for Couch to support
> extracting JWT tokens from a cookie?
> In some scenarios it can be easier/safer to pass JWT tokens to clients
> through cookies (secure, sameSite, httpOnly, etc) so that they don't store
> those in localStorage/have to add those themselves.
>
> If you want I can create a ticket with this request (where?).
>
> kr,
> Sébastien D.
>
> On Wed, May 6, 2020 at 9:59 AM Joan Touzet <wo...@apache.org> wrote:
>
>> Dear community,
>>
>> Apache CouchDB® 3.0.1 and 3.1.0 have been released and are available for
>> download.
>>
>> Apache CouchDB® lets you access your data where you need it. The Couch
>> Replication Protocol is implemented in a variety of projects and products
>> that span every imaginable computing environment from globally distributed
>> server-clusters, over mobile phones to web browsers.
>>
>> Store your data safely, on your own servers, or with any leading cloud
>> provider. Your web- and native applications love CouchDB, because it speaks
>> JSON natively and supports binary data for all your data storage needs.
>>
>> The Couch Replication Protocol lets your data flow seamlessly between
>> server clusters to mobile phones and web browsers, enabling a compelling
>> offline-first user-experience while maintaining high performance and strong
>> reliability. CouchDB comes with a developer-friendly query language, and
>> optionally MapReduce for simple, efficient, and comprehensive data
>> retrieval.
>>
>> https://couchdb.apache.org/#download
>>
>> Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS are
>> available.
>>
>> CouchDB 3.0.1 is a maintenance release, and was originally published on
>> 2020-05-05.
>>
>> CouchDB 3.1.0 is a feature release, and was originally published on
>> 2020-05-05.
>>
>> The community would like to thank all contributors for their part in
>> making this release, from the smallest bug report or patch to major
>> contributions in code, design, or marketing, we couldn’t have done it
>> without you!
>>
>> See the official release notes document for an exhaustive list of all
>> changes:
>>
>> http://docs.couchdb.org/en/stable/whatsnew/3.1.html
>>
>> Release Notes highlights from 3.0.1:
>>
>> - A memory leak when encoding large binary content was patched
>>
>> - Improvements in documentation and defaults
>>
>> - JavaScript will no longer corrupt UTF-8 strings in various JS
>> functions
>>
>> Release Notes highlights from 3.1.0:
>>
>> Everything from 3.0.1, plus...
>>
>> - Support for Java Web Tokens
>>
>> - Support for SpiderMonkey 68, including binaries for Ubuntu 20.04
>> (Focal Fossa)
>>
>> - Up to a 40% performance improvement in the database compactor
>>
>> -
>> On behalf of the CouchDB PMC,
>> Joan Touzet
>>
>>
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Jan Lehnardt <ja...@apache.org>.
> On 6. May 2020, at 12:55, Sebastien <le...@gmail.com> wrote:
>
> Awesome news, thanks to everyone involved!
>
> A quick question about the JWT authentication support (greatest news in
> this release for my project). Are there plans for Couch to support
> extracting JWT tokens from a cookie?
> In some scenarios it can be easier/safer to pass JWT tokens to clients
> through cookies (secure, sameSite, httpOnly, etc) so that they don't store
> those in localStorage/have to add those themselves.
>
> If you want I can create a ticket with this request (where?).
Tickets go here: https://github.com/apache/couchdb/issues
Best
Jan
—
>
> kr,
> Sébastien D.
>
> On Wed, May 6, 2020 at 9:59 AM Joan Touzet <wo...@apache.org> wrote:
>
>> Dear community,
>>
>> Apache CouchDB® 3.0.1 and 3.1.0 have been released and are available for
>> download.
>>
>> Apache CouchDB® lets you access your data where you need it. The Couch
>> Replication Protocol is implemented in a variety of projects and products
>> that span every imaginable computing environment from globally distributed
>> server-clusters, over mobile phones to web browsers.
>>
>> Store your data safely, on your own servers, or with any leading cloud
>> provider. Your web- and native applications love CouchDB, because it speaks
>> JSON natively and supports binary data for all your data storage needs.
>>
>> The Couch Replication Protocol lets your data flow seamlessly between
>> server clusters to mobile phones and web browsers, enabling a compelling
>> offline-first user-experience while maintaining high performance and strong
>> reliability. CouchDB comes with a developer-friendly query language, and
>> optionally MapReduce for simple, efficient, and comprehensive data
>> retrieval.
>>
>> https://couchdb.apache.org/#download
>>
>> Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS are
>> available.
>>
>> CouchDB 3.0.1 is a maintenance release, and was originally published on
>> 2020-05-05.
>>
>> CouchDB 3.1.0 is a feature release, and was originally published on
>> 2020-05-05.
>>
>> The community would like to thank all contributors for their part in
>> making this release, from the smallest bug report or patch to major
>> contributions in code, design, or marketing, we couldn’t have done it
>> without you!
>>
>> See the official release notes document for an exhaustive list of all
>> changes:
>>
>> http://docs.couchdb.org/en/stable/whatsnew/3.1.html
>>
>> Release Notes highlights from 3.0.1:
>>
>> - A memory leak when encoding large binary content was patched
>>
>> - Improvements in documentation and defaults
>>
>> - JavaScript will no longer corrupt UTF-8 strings in various JS
>> functions
>>
>> Release Notes highlights from 3.1.0:
>>
>> Everything from 3.0.1, plus...
>>
>> - Support for Java Web Tokens
>>
>> - Support for SpiderMonkey 68, including binaries for Ubuntu 20.04
>> (Focal Fossa)
>>
>> - Up to a 40% performance improvement in the database compactor
>>
>> -
>> On behalf of the CouchDB PMC,
>> Joan Touzet
>>
>>
Re: [ANNOUNCE] Apache CouchDB 3.0.1 and 3.1.0 released
Posted by Sebastien <le...@gmail.com>.
Awesome news, thanks to everyone involved!
A quick question about the JWT authentication support (greatest news in
this release for my project). Are there plans for Couch to support
extracting JWT tokens from a cookie?
In some scenarios it can be easier/safer to pass JWT tokens to clients
through cookies (secure, sameSite, httpOnly, etc) so that they don't store
those in localStorage/have to add those themselves.
If you want I can create a ticket with this request (where?).
kr,
Sébastien D.
On Wed, May 6, 2020 at 9:59 AM Joan Touzet <wo...@apache.org> wrote:
> Dear community,
>
> Apache CouchDB® 3.0.1 and 3.1.0 have been released and are available for
> download.
>
> Apache CouchDB® lets you access your data where you need it. The Couch
> Replication Protocol is implemented in a variety of projects and products
> that span every imaginable computing environment from globally distributed
> server-clusters, over mobile phones to web browsers.
>
> Store your data safely, on your own servers, or with any leading cloud
> provider. Your web- and native applications love CouchDB, because it speaks
> JSON natively and supports binary data for all your data storage needs.
>
> The Couch Replication Protocol lets your data flow seamlessly between
> server clusters to mobile phones and web browsers, enabling a compelling
> offline-first user-experience while maintaining high performance and strong
> reliability. CouchDB comes with a developer-friendly query language, and
> optionally MapReduce for simple, efficient, and comprehensive data
> retrieval.
>
> https://couchdb.apache.org/#download
>
> Pre-built packages for Windows, macOS, Debian/Ubuntu and RHEL/CentOS are
> available.
>
> CouchDB 3.0.1 is a maintenance release, and was originally published on
> 2020-05-05.
>
> CouchDB 3.1.0 is a feature release, and was originally published on
> 2020-05-05.
>
> The community would like to thank all contributors for their part in
> making this release, from the smallest bug report or patch to major
> contributions in code, design, or marketing, we couldn’t have done it
> without you!
>
> See the official release notes document for an exhaustive list of all
> changes:
>
> http://docs.couchdb.org/en/stable/whatsnew/3.1.html
>
> Release Notes highlights from 3.0.1:
>
> - A memory leak when encoding large binary content was patched
>
> - Improvements in documentation and defaults
>
> - JavaScript will no longer corrupt UTF-8 strings in various JS
> functions
>
> Release Notes highlights from 3.1.0:
>
> Everything from 3.0.1, plus...
>
> - Support for Java Web Tokens
>
> - Support for SpiderMonkey 68, including binaries for Ubuntu 20.04
> (Focal Fossa)
>
> - Up to a 40% performance improvement in the database compactor
>
> -
> On behalf of the CouchDB PMC,
> Joan Touzet
>
>