This is a release focused on providing some new enterprise features.

What's Changed for GizmoSQL Server

Security

• Support for JWT token-based authentication - see repo: https://github.com/gizmodata/generate-gizmosql-token for details on how to create and use a token
• Support for basic Role Based Access Control (RBAC) - using the role claim on a JWT token - with the ability to restrict users to readonly connections if they have that role designated in the JWT

Logging

• New log format: json - use arg: --log-format to toggle between text and json
• Logging of Basic and Bearer token authentication events. Bearer token authentication will be logged at INFO level for the first event, and subsequently at DEBUG level (per unique token id)
• Access level logging - toggle with arg: --access-log - values: on (default) and off
• Now supports multiple log levels - use: --log-level arg to toggle between info (default), debug, etc...
• Much better logging for SQL execution - including duration, errors, and more - with the user which issued the SQL
• Redaction of SECRET SQL creation statements from logs
• Timestamps for log events

Misc.

• Session middleware - making it easy to log the users of the system
• Ability to cancel in-flight queries - IF you use a supported JDBC driver - see this draft PR on the Arrow Flight SQL JDBC driver for a prototype: apache/arrow-java#828

DuckDB revert

• We have reverted to DuckDB v1.3.2 due to issues when attempting to install extensions with the preview version.

Full Changelog: v1.9.16...v1.9.18