dsh-totp-proxy：为 DSH 增加 TOTP 与可吊销会话的反向代理
dsh-totp-proxy 是 realjhen123 维护的 DSH/Cordis 插件与反向代理，在 Nginx 与 DSH 3080 之间监听 3090，用 TOTP 或固定 token 登录后向浏览器签发可吊销的 dsg_session，原始 dsh-auth cookie 留在服务端。需 Node.js 22+，凭据存于 ~/.dsh/dsh-totp-proxy/。部署时仅暴露反代到 3090，3080 本机可达；HTTPS 下设置 COOKIE_SECURE。MIT 0.2.0。
Read MoretwoFactor Skill: Implementing TOTP/OTP Two-Factor Authentication in Better Auth
twoFactor is the official Better Auth Agent Skill that explains how to configure the twoFactor plugin and twoFactorClient in an application, covering the complete 2FA lifecycle, including TOTP authenticators, email/SMS OTP, backup codes, the twoFactorRedirect login flow, trusted devices, and encrypted storage. Based on the official SKILL documentation, this article compiles installation commands, migration steps, and typical code examples. It is suitable for developers who need MFA and already use Better Auth, enabling coding assistants to generate configurations according to official practices rather than fragile single-factor approaches.
Read Moredsh-login-gateway: Add TOTP Login to the DeepSeek Harness Web UI
`dsh-login-gateway` is a security authentication plugin for DeepSeek Harness (DSH) that adds username, password, and TOTP two-factor authentication in front of the Web UI. It listens on a dedicated port, performs server-side token exchange with Harness using an HMAC cookie, and supports traffic forwarding, rate limiting, and initial setup. It must be placed behind a reverse proxy (such as Caddy), and accounts should be managed using scripts. Installation requires specific environment prerequisites; if build issues occur during installation, configure `allowBuilds`. This plugin addresses the security risks associated with exposing DSH's default authentication mechanisms to the public internet.
Read MoreDeepSeek Harness Plugin: dsh-otp (One-Time Password TOTP/HOTP)
The DeepSeek Harness plugin dsh-otp is designed specifically to address network dependency and privacy risks associated with two-factor authentication (2FA) code generation in agent development. Implemented purely in Node.js, the plugin generates TOTP and HOTP codes locally without requiring an internet connection. After installing it via the command line and configuring `dsh.profile.bundles`, users can invoke one-time password generation directly within a session. Please review the source code before use to ensure security.
Read More