dsh-lark-web-auth
Feishu/Lark OAuth login and per-user session isolation for the DeepSeek Harness Web GUI.
Install
$ dsh plugin --profile web add dsh-lark-web-authPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Redirects unauthenticated Web GUI visitors through Feishu/Lark OAuth and stores login state in httpOnly cookies.
- Restricts session listing, access, and modification to the session owner.
- Returns 404 for non-owner session requests to avoid disclosing session existence.
- Persists login and session-owner data in SQLite.
- Assigns ownership for newly created sessions from the request context.
- Attempts to backfill ownership for dm:* sessions created by dsh-lark-link.
- Injects login and user-menu UI through webServer.tapIndex() without modifying Harness frontend source.
Useful For
- Provide authenticated public access to an internal DeepSeek Harness Web GUI.
- Isolate conversations among individual employees using a shared Web GUI deployment.
- Expose dsh-lark-link direct-message conversations in the Web GUI for their associated Feishu users.
Who It Fits
- Organizations running DeepSeek Harness Web GUI
- Teams using Feishu/Lark identity services
- Users of dsh-lark-link who want Web GUI access to direct-message sessions
Documented Limitations
- Uses single-machine SQLite storage and does not support multi-instance deployment.
- Existing dm:* session ownership backfill is best-effort; sessions that cannot be resolved remain inaccessible until manually assigned.
- Does not support sharing one session with a team or group.
- Does not provide audit logs for session access.
- Must load after api-remotes because it overrides typert lookup behavior.
- Requires Node.js 22.19.0 or later and Feishu/Lark application credentials.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 2 runtime, 11 development, 6 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- Awesome-AI-Pedia/dsh-lark-web-auth
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- a18cab6 · 2026-08-25
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 3GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-21
- Last release
- No release detected
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Import and resume chat histories from 18+ AI coding agents into DeepSeek Harness with reverse export and sync.
View plugin →Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →Local-first AI agent runtime and DSH plugin bundle providing sandboxed sessions, MCP tools, audit logs, and session replay.
View plugin →Preview, create, and edit spreadsheets, docs, slides, and canvases in DeepSeek Harness powered by Univer.
View plugin →