dsh-auth-gateway
In-process authentication gateway for DeepSeek Harness Web featuring password login, TOTP 2FA, brute-force protection, and audit logging.
Install
$ dsh plugin --profile web add dsh-auth-gatewayPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Intercepts unauthenticated HTTP API requests (401), web pages (302), and WebSocket connections
- Forces initial password generation and onboarding flow with scrypt-hashed password storage
- Provides optional TOTP two-factor authentication with backup codes and AES-256-GCM encrypted secret storage
- Applies multi-tiered brute-force defenses including source IP lockouts and global attempt rate limits
- Records audit trails for logins, logouts, failures, and password updates in persistent JSONL log files
- Injects client authentication settings panel via DSH client UI slots
Useful For
- Securing DeepSeek Harness Web instances exposed over local area networks or reverse proxies
- Enforcing TOTP two-factor authentication for remote harness access
- Auditing access attempts and preventing brute-force attacks against the harness web interface
Who It Fits
- Developers deploying DeepSeek Harness Web on remote servers or home labs
- Teams needing authenticated access controls and audit logging over DSH web endpoints
Documented Limitations
- Single-user architecture; does not provide multi-tenant data isolation or OS-level role permissions
- Requires DSH versions between 0.1.5-rc.2 and 0.2.0-rc.2
- Does not process or alter model inference requests
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 5 development, 1 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- xbzbing/dsh-auth-gateway
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin Bundle
- Source checked
- 9e75b65 · 2026-10-20
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 17GitHub stars
- Forks
- 3
- Open issues
- 0
- Last commit
- 2026-10-17
- Last release
- 2026-10-17
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Import and resume conversation histories from 25+ AI coding agents directly into DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Real-time market research cockpit and MCP bundle for DeepSeek Harness financial and macro data.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →