Warning
MongoDB 9.0 Not Yet Available
MongoDB 9.0 release candidates are not yet available. This version of the manual is for an upcoming release and is currently a work in progress.
General Changes
Server-side JavaScript
Starting in MongoDB 9.0, the server-side JavaScript functions
($accumulator, $function, and $where)
are no longer deprecated. MongoDB 9.0 re-enables these functions using a
WebAssembly (WASM)-based JavaScript engine, which improves security
through stronger sandboxing and isolation than prior versions. These
functions were previously deprecated in MongoDB 8.0. To learn more, see
Server-side JavaScript.
Security
useInternalAuthzForX509 Parameter
MongoDB 9.0 adds the useInternalAuthzForX509
parameter. When set to true, clients that authenticate
using MONGODB-X509 use internal authorization,
even when LDAP authorization is configured. For details, see
useInternalAuthzForX509.
usersInfo authenticatedMechanism Field
MongoDB 9.0 adds the authenticatedMechanism field to the
usersInfo command. This optional string field
specifies an authentication mechanism to determine which
authorization backend usersInfo queries when looking up
user authorization information. For details, see
usersInfo.