dsh-web-auth
Transport-level authentication gate that replaces the DSH Web GUI web server with an authenticated compatible service.
Install
$ dsh plugin --profile web add @summersec/dsh-web-authPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- Installs into the DSH web profile through a Cordis bundle patch.
- Replaces the stock webserver with a compatible webServer service.
- Authenticates HTTP routes and WebSocket/HTTP upgrade traffic before application handlers.
- Provides login, logout, and authentication-status endpoints.
- Supports scrypt password hashes, session cookies, sliding session TTLs, and per-IP failed-login limits.
- Includes a CLI to generate passwords and scrypt hashes.
Useful For
- Adding a login boundary before exposing a DSH Web GUI beyond local-only access.
- Protecting DSH GUI, API, plugin assets, SSE, and WebSocket traffic with a shared login.
- Deploying DSH behind a trusted reverse proxy with configured proxy trust and secure cookies.
Who It Fits
- DeepSeek Harness operators using the web profile.
- Developers deploying DSH Web GUI on shared machines or network-accessible hosts.
- Administrators needing a simple shared-account authentication layer for DSH web traffic.
Documented Limitations
- Sessions are stored in memory and are invalidated when the process restarts.
- Provides one shared username/password boundary rather than multi-user RBAC or audit roles.
- Protects only the DSH web carrier; other ports and sidecars require separate protection.
- Does not replace TLS for non-loopback or multi-user network deployments.
- trustProxy must only be enabled when the DSH port is reachable exclusively through a trusted reverse proxy.
- Requires Node.js 22 or later and a DSH web profile with compatible Cordis peer dependency.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 1 development, 1 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub reports the repository license as MIT.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- SummerSec/dsh-web-auth
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- b722e44 · 2026-09-05
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 2GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-17
- Last release
- 2026-08-17
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Compatibility bridge and host ABI enabling unmodified Pi plugins to run natively on DeepSeek Harness.
View plugin →Preview, create, and edit spreadsheets, docs, slides, and canvases in DeepSeek Harness powered by Univer.
View plugin →Native SQLite-backed local project taskboard plugin and UI for DeepSeek Harness with Agent claim and review flows.
View plugin →Persistent multi-model Agent teams and bounded DAG workflows with GUI controls for DeepSeek Harness.
View plugin →