luodeb/dsh-web-auth-gateway

Name: luodeb/dsh-web-auth-gateway
Author: luodeb

Plugin插件 Native原生 ⭐ 3 BSD-3-Clause Notifications & Remote通知与远程

DeepSeek Harness Web 的身份验证反向代理网关插件

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

DSH Web Auth Gateway is a standalone reverse-proxy plugin that fronts DeepSeek Harness Web on a loopback port, gating pages, API calls, and WebSocket upgrades behind a login page with scrypt-hashed passwords, HttpOnly SameSite=Strict cookies, and in-memory sessions; first access requires creating an administrator account. Use it for multi-user setups or remote access. Caveat: the upstream DSH port must stay bound to 127.0.0.1 or the gateway is bypassable, sessions vanish on restart, and remote use demands a TLS proxy.

DSH Web 认证网关是一款独立反向代理插件，在 127.0.0.1 的独立端口提供登录页，通过 scrypt 哈希与 HttpOnly、SameSite=Strict 的内存会话守护页面、API 与 WebSocket；首次访问需创建管理员。适用于多用户部署或需要远程访问的场景。注意上游端口必须绑定 127.0.0.1，否则网关可被绕过；远程访问需前置 TLS 反代或安全隧道，且会话随 DSH 重启失效。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我了解并安装插件：【dsh-web-auth-gateway】【https://github.com/luodeb/dsh-web-auth-gateway】

Send this message to DSH in your current session. CLI install commands may not be accurate across systems — DSH will figure it out for you.把上面这条消息直接发给当前会话里的 DSH，让它帮你了解并安装。安装命令不一定准确，发给 DSH 更稳。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin --profile web add github:luodeb/dsh-web-auth-gateway

把 luodeb/dsh-web-auth-gateway 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

2.3 KB · 缓存于 2026-08-23 03:42:30 · 2.3 KB

dsh-web-auth-gateway

A standalone authentication reverse-proxy gateway plugin for DeepSeek Harness Web.

The plugin serves a login page on a separate loopback port. After authentication, it proxies the complete DSH Web surface, including normal pages, plugin assets, API requests, and WebSocket upgrades.

Features

First-run administrator account creation
scrypt salted password hashing; plaintext passwords are never stored
HttpOnly and SameSite=Strict session cookie
Server-side in-memory sessions
HTTP, API, and WebSocket authentication gate
Settings card under Settings > Plugins > Web UI Plugins
Configurable gateway port and session lifetime
Official @deepseek-ai/* NPM SDK only
No changes to DeepSeek Harness source code

Install

Requires Node.js 22 or newer and DeepSeek Harness.

dsh plugin --profile web add github:luodeb/dsh-web-auth-gateway

Restart DSH Web:

dsh web --host 127.0.0.1 --port 3080

Then open:

http://127.0.0.1:3090

On first access, create the administrator account. Later visits require that account.

Settings

Open Settings > Plugins > Web UI Plugins > Login gateway.

Gateway settings

Defaults:

enabled: true
port: 3090
sessionTtlHours: 12

Settings are persisted through the official DSH Settings service in ~/.dsh/settings.yaml.

Login page

First-run administrator setup

The password credential is stored at:

~/.dsh/web-auth-gateway/credential.json

The file contains only the username, random salt, and scrypt password hash. Its mode is 0600.

Security boundary

The original DSH Web port must remain bound to 127.0.0.1 or another trusted interface. If the upstream port is exposed to untrusted clients, they can bypass the gateway.

This plugin currently listens on 127.0.0.1. Use a TLS reverse proxy or a secure tunnel in front of the gateway for remote access. Do not expose plaintext HTTP directly to an untrusted network.

Sessions are stored in memory and are invalidated when DSH restarts.

Development

corepack enable
pnpm install
pnpm build
pnpm typecheck
pnpm test

Install the local checkout into the Web profile:

dsh plugin --profile web add link:$(pwd)

License

BSD-3-Clause

渲染基于仓库 luodeb/dsh-web-auth-gateway 的 README.md。在 GitHub 查看原文 →

CLI Install命令行安装 Copy Install复制安装命令