dsh-ui-auth
Authentication gate for the DeepSeek Harness Web UI: login covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies, IP-based login lockout, a user-management settings panel (users edit their own profile, admins add or remove users and reset passwords), admin-only model and API-key configuration guards, per-user isolation on the REST/list APIs and the WebSocket event streams, session persistence across restarts, a JSONL audit log, and a fail-closed gateway.
DeepSeek Harness Web UI 认证网关：登录门禁覆盖页面、/api、/plugins 与 WebSocket 升级；PBKDF2 口令哈希、HttpOnly SameSite 会话 Cookie、按源 IP 登录锁定；设置面板内置用户管理（普通用户仅可修改本人资料与密码，管理员可新增/删除用户、重置密码、调整角色）；模型配置与 API Key 仅管理员可修改；REST/列表接口与 WebSocket 事件流均按用户隔离；会话重启后免登录恢复；JSONL 审计日志；存储故障时保持 fail-closed。
How to install
dsh plugin add github:0QwQ0/dsh-ui-auth About
dsh-ui-auth — DSH Web UI 认证网关插件 在 DSH Web UI 前套一层用户名/密码登录校验，未登录用户无法访问任何页面、API 或 WebSocket 通道。 功能 **全接口拦截**：直接包装 DSH 的 node:http 服务器，在路由分发之前检查会话， 因此 /api/*（全部 RPC/SSE/下载）、/plugins/*（前端模块）、HMR、SPA fallback 以及 /api/events.mux、/api/events.host 两个 WebSocket 升级通道全部被覆盖， 没有旁路。 未登录：页面请求 302 → /auth/login；API/静态资源 401；WS 升级直接销毁连接。 登录后：原请求原样透传，功能零影响。 **登录页**：/auth/login 提供自带样式的登录页（中文），登录成功写 dsh_auth Cookie（HttpOnly + SameSite=Strict，12 小时滑动续期）。 **注册（0.5.0）**：/auth/register 注册页——新用户凭**邮箱 + 用户名 + 密码 + 有效邀请码**注册（邮箱暂不校验真实性，注册后可在「用户管理」中自行修改； 邮箱验证将在后续版本提供）。邀请码由管理员在【用户管理】→【邀请码管理】中 生成，可查看每个码的已用/可注册次数与剩余数，可撤销。注册成…
Recommendation signals
Meta
- License
- MIT
- Language
- JavaScript
- GitHub stars
- 1
- mo. downloads
- –
- Last push
- 2026-08-30
- Created
- 2026-08-23
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- dsh-plugin
Related plugins
dsh-permission-rules
PerryLink/dsh-permission-rules
Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
dsh-plugin-vetting
truelove-dreamer/dsh-plugin-vetting
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
dsh-webui-auth
Yuuz12/dsh-webui-auth
WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.