dsh-auth-gate: An Authentication Gate Plugin for DeepSeek Harness
`dsh-auth-gate` is a security plugin for DeepSeek Harness (DSH), designed to provide login authentication and protection for the Web UI. It intercepts unauthenticated requests upfront through the Nginx `auth_request` interface and offers core features such as SVG image CAPTCHA, brute-force protection (with IP and account rate limiting), single sign-on, and encrypted password storage. The plugin listens on localhost by default and must be configured through an Nginx reverse proxy. After the first login, changing the default credentials is mandatory. To ensure security, public-facing deployments should use HTTPS.
Read Moredsh-auth-gate: DeepSeek Harness Authentication and Security Hardening Plugin
`dsh-auth-gate` is a security hardening plugin for DeepSeek Harness, designed to address the risk of unauthorized access to local development tools in network scenarios such as Docker and reverse proxies. It provides Bearer token authentication for HTTP and WebSocket routes and supports session login and fail-closed mode. The plugin manages credentials through environment variables and requires specifying a Patch file after installation to enable it. Note that it does not support ACP/SDK channels, does not record audit logs, and lacks user isolation; in reverse proxy scenarios, it is recommended to configure rate limiting at the edge layer.
Read Moredsh-auth-gate: Adding a Login Gateway to DSH Web Instances
dsh-auth-gate is an authentication plugin for DSH web instances, designed to uniformly add login verification to pages, APIs, and WebSocket connections. The plugin is licensed under the MIT License, requires Node >=22.19.0, supports two modes—password authentication and shared token authentication—with token mode enabled by default and the key managed via the environment variable DSH_AUTH_TOKEN. In password mode, TOTP two-step verification compliant with RFC 6238 can be optionally enabled. In terms of security, the plugin hashes passwords by default, implements login rate limiting, uses Secure session cookies, and blocks access when configuration is missing to ensure safety. The plugin provides the dsh-auth CLI tool, supporting user addition, listing, disabling, and TOTP management. After installation, it must be configured through pr
Read More