lloydzhou/dsh-feishu-oauth: Integrate Feishu OAuth login for DSH
lloydzhou's dsh-feishu-oauth is a login entry plugin that integrates Feishu OAuth into DSH's native authentication. It reuses DSH's native session cookies after login without modifying the core or signing cookies itself. The article verifies the details line by line according to the README: it provides declarations for Node.js >= 24.9.0 and DSH >= 0.2.1-rc.3, as well as API prerequisites; the installation path involves `git clone`, `npm ci`, `build:client`, and `dsh plugin --profile web add .`; it covers the three configuration fields `enabled`, `appId`, and `appSecret` along with their rules for leaving them empty; the callback URL is `origin` + `/auth/feishu/callback`; and it explains that the App Secret is stored in plaintext in the local profile without encryption during transmission over HTTP. It also outlines protection measures (S256 PKCE, single-use state with a 300-second validity period, and single-process capacity limits, which are not equivalent to rate limiting or DoS protection), the meanings of error codes TOKEN/HTTP_400/CODE_20002 and 20049, login and recovery paths, the historical version status of Feishu's authorization endpoints and the v2 token interface, and the artifact boundaries of `npm pack`. The conclusion analyzes applicable scenarios: it is an entry point for trusted personnel sharing rather than a multi-user permission system.
Read More