dsh-auth-gate: Adding a Login Gateway to DSH Web Instances

dsh-auth-gate is an authentication plugin for DSH web instances, designed to uniformly add login verification to pages, APIs, and WebSocket connections. The plugin is licensed under the MIT License, requires Node >=22.19.0, supports two modes—password authentication and shared token authentication—with token mode enabled by default and the key managed via the environment variable DSH_AUTH_TOKEN. In password mode, TOTP two-step verification compliant with RFC 6238 can be optionally enabled. In terms of security, the plugin hashes passwords by default, implements login rate limiting, uses Secure session cookies, and blocks access when configuration is missing to ensure safety. The plugin provides the dsh-auth CLI tool, supporting user addition, listing, disabling, and TOTP management. After installation, it must be configured through pr

Read More