dsh-auth-proxy: A Token Authentication Reverse Proxy Plugin for DSH Web GUI

dsh-auth-proxy is a plugin that provides static token authentication and access control for the DeepSeek Harness (DSH) Web GUI. It listens on a local port, uses a built-in login page and SHA-256 verification, and forwards traffic to the DSH service. The plugin supports HttpOnly session cookies, IP allowlisting, failure lockout, real-time configuration hot reloading, and branding-layer rewriting, and can be deployed without modifying the source code. Note that it does not handle TLS itself; external access requires use with a reverse proxy.