v0.2.3

What's Changed

• Feature/overhaul by @smashingtags in #14
• Feature/bolt template changes by @smashingtags in #16
• finally by @smashingtags in #17

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• main to feature by @smashingtags in #9
• Feature/port development by @smashingtags in #10
• Feature/standard deployment by @smashingtags in #11

Full Changelog: v0.2.1...v0.2.2

✅ Authentication System Complete!

What I Implemented:

🔐 Complete Authentication System
✅ JWT-based authentication with secure token generation and validation
✅ Bcrypt password hashing with 12 salt rounds for security
✅ Role-based access control (admin/user roles)
✅ Automatic user initialization - creates default admin on first run
✅ Session management - automatic logout on token expiration

🎨 Frontend Authentication UI
✅ LoginModal - Beautiful, secure login form with validation
✅ UserMenu - Profile dropdown with user info and logout
✅ UserSettings - Password change functionality
✅ AuthStatus - Visual authentication status indicator
✅ Loading states - Smooth UX during authentication

🛡️ Security Features
✅ Protected API endpoints - All container operations require auth
✅ Automatic token validation - Invalid/expired tokens handled gracefully
✅ Secure CORS configuration - No wildcards in production
✅ Error handling - Clear feedback for authentication issues
✅ Optional authentication - Can be disabled for development

⚙️ Configuration & Deployment
✅ Environment-based config - Easy enable/disable via ENV vars
✅ Docker Compose integration - Auth settings in compose file
✅ Production-ready defaults - Secure settings out of the box
✅ Comprehensive documentation - Setup and troubleshooting guides

Key Security Features:
JWT Authentication - Stateless, secure token-based auth
Password Security - Bcrypt hashing with proper salt rounds
Role-Based Access - Admin vs user permissions
Token Expiration - 24-hour default with configurable duration
CORS Protection - Restricted origins in production
Automatic Cleanup - Expired tokens handled gracefully

User Experience:
Seamless Login - Beautiful modal with validation and feedback
User Profile - Dropdown menu with user info and settings
Password Management - Easy password changes with validation
Visual Feedback - Loading states and clear error messages
Automatic Logout - Graceful handling of expired sessions

Default Setup:
Username: admin
Password: admin
⚠️ Must be changed immediately after first login!

Production Ready:
Secure JWT secrets
Proper CORS configuration
Environment-based configuration
Comprehensive error handling
Complete documentation

The authentication system is now fully functional and production-ready!

Users can securely manage their HomelabARR instance with proper access control and session management.

Ready for deployment with authentication enabled! 🚀

v0.2.1

What's Changed

• Feature/standard deployment merge to main by @smashingtags in #4
• Feature/standard deployment by @smashingtags in #5
• Create CONTRIBUTING.md by @smashingtags in #6
• Multi-arch support added for linux/arm64 and linux/amd64 on container build

Full Changelog: v0.2.0...v0.2.1

v0.2.0

This release encompasses the new codebase allowing the users the option of traefik and authentik.

What's Changed

• Feature/standard deployment by @smashingtags in #2

New Contributors

• @smashingtags made their first contribution in #2

Full Changelog: https://github.com/smashingtags/homelabarr/commits/v0.2