dsh-webui-auth
DeepSeek Harness WebUI authentication bundle that gates web resources, plugin bundles, API RPC, and WebSocket connections behind login.
Install
$ 维护者开发模式：在本地源码目录使用 dsh plugin --profile web add ./dsh-webui-auth（link: 安装），改代码 → 重启 DSH 即生效，无需重新安装。Repository Intelligence
AI-assisted, source-grounded explanation based on the public repository snapshot. It does not replace compatibility or security verification.
Key Capabilities
- Installs through the DSH plugin command as an npm, GitHub, or local-source bundle.
- Gates WebUI resources, /plugins bundles, /api RPC requests, and specified WebSocket upgrade requests.
- Provides login and authentication settings pages for creating, changing, disabling, and ending authentication.
- Stores password credentials using scrypt and keeps sessions in server memory.
- Supports configurable session durations and revokes other sessions after a password change.
- Records authentication-related events in an audit.jsonl file and provides CLI and settings-page views.
- Detects missing core-package patches and attempts to reapply them when patch anchors match.
Useful For
- Require a login before users can access a DSH WebUI deployment.
- Add a local authentication gate for WebUI resources, APIs, and real-time event connections.
- Review recent login and configuration events through audit logs.
Who It Fits
- DeepSeek Harness operators running the web profile.
- Administrators who want a login gate for a locally hosted DSH WebUI.
Documented Limitations
- Authentication remains disabled until an administrator creates credentials.
- Sessions are stored only in process memory, so all sessions expire when DSH restarts.
- The plugin modifies core DSH client packages; after a DSH upgrade, an automatically reapplied patch requires another restart to take effect in the running process.
- Automatic patch recovery can fail if core-package structure or anchors change.
- The documented threat model excludes local processes able to directly read or write host process memory or files.
- Some registered exact configuration endpoints are explicitly excluded from the gate.
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
A root package.json was captured and can be inspected by the registry.
GitHub reports the repository license as MIT.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Traceable source and registry metadata for this entry, kept separate from runtime verification.
- Source repository
- Yuuz12/dsh-webui-auth
- Registry source
- Public GitHub repository
- Source snapshot
- 6383fcd718ae
- Artifact type
- plugin-bundle
- AI enrichment
- gpt-5.6-terra · 2026-08-14
- Prompt version
- dsh-plugin-enrichment-v3
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 4
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-08-14
- Last release
- —
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Adds an OpenAI-compatible vision bridge to DeepSeek Harness, forwarding images to a configured vision model and displaying descriptions in a web panel.
View plugin →DeepSeek Harness plugin that reviews risky tool calls with a stronger model and adds a BlockRun x402-paid LLM provider route.
View plugin →A DeepSeek Harness vision plugin that turns pasted images into structured OCR, layout, and semantic evidence for supported text-only models.
View plugin →Telegram mobile remote for attaching to live DeepSeek Harness Web sessions.
View plugin →