v0.2.0
Added
- Add optional authentication system with experiment-based access control
- Add logout functionality with experiment name display in banner
- Add support for multiple folder paths per experiment (EXPERIMENT_PATHS)
- Add secure path validation to prevent directory traversal attacks
- Add generate-secrets.sh script for creating Kubernetes secrets with hashed passwords
- Add comprehensive authentication documentation (k8s/AUTHENTICATION.md)
Changed
- Consolidate 2x2 and NDLAR experiments into single 'DUNE' experiment with access to both /data/2x2 and /data/ndlar
- Update login page styling to match main application colors and layout
- Enhance path validation with os.path.normpath() and os.sep for security
Security
- Implement SHA256 password hashing for credential storage
- Add session-based authentication with Flask sessions
- Implement experiment-specific folder access restrictions
Full Changelog: v0.1.2...v0.2.0