dsh-auth-gate: DeepSeek Harness Authentication and Security Hardening Plugin

`dsh-auth-gate` is a security hardening plugin for DeepSeek Harness, designed to address the risk of unauthorized access to local development tools in network scenarios such as Docker and reverse proxies. It provides Bearer token authentication for HTTP and WebSocket routes and supports session login and fail-closed mode. The plugin manages credentials through environment variables and requires specifying a Patch file after installation to enable it. Note that it does not support ACP/SDK channels, does not record audit logs, and lacks user isolation; in reverse proxy scenarios, it is recommended to configure rate limiting at the edge layer.

Read More
DeepSeek Harness Web Authentication Plugin dsh-auth

`dsh-auth` is an authentication gateway plugin specifically designed for the DeepSeek Harness (DSH) Web interface. It enhances system security by supporting password-based login, automatic logout after idle periods, session expiration, and single sign-on. Users can configure credentials and expiration times via the command line or the Web interface. The plugin also supports login history auditing and reverse proxy access. After installation, the default password must be changed immediately, and HTTPS is recommended for production environments. This plugin provides essential security hardening capabilities for the DSH Web interface.

Read More
Introducing the DeepSeek Harness (DSH) Authentication Plugin

DeepSeek Harness (DSH) has released an authentication plugin named dsh-auth-plugin, designed to provide a zero-dependency, configuration-only secure login solution for the DSH Web GUI. The plugin supports multiple login methods, including username and password (scrypt hashing), generic OAuth 2.0 (with built-in GitHub/Google/Discord templates), and Solana and EVM cryptocurrency wallet login. It uses HMAC-SHA256 tokens and session management, and supports one-click installation and configuration. After installation, the service must be restarted. Note that the EVM wallet feature requires additional related libraries to be installed, and Solana login requires a public key whitelist to be configured. This plugin provides DSH with a unified entry point for Web3 and traditional account login, while maintaining code

Read More