dsh-web-remote-access: Enabling remote access to dsh Web UI with token protection
`studyzy/dsh-web-remote-access` is a bundle plugin for dsh Web profiles designed to address the limitation where local loopback access cannot be shared across a local area network (LAN). This plugin enables remote access via `--host 0.0.0.0` while enforcing a Web Token guard mechanism to ensure the security of web pages, APIs, and WebSocket connections. Core features include: 1. **Secure Access**: Remote access requires verification via the `?web_token=` parameter, issuing session cookies upon successful authentication. Token validation employs SHA256 and constant-time comparison to prevent timing attacks. 2. **Experience Optimization**: Local loopback access does not require a token, preserving the original seamless experience; it auto-starts upon initialization.
Read More