user-management
HTTPS authentication gateway and user management system for DeepSeek Harness Web.
Install
$ dsh plugin --profile web add @weibaohui/user-management -wPlugin Overview & Capabilities
AI-assisted organization based on the public repository snapshot. The content must be grounded in source evidence and does not replace compatibility or security verification.
Key Capabilities
- HTTPS reverse proxy gateway requiring authentication for all DSH Web pages, API endpoints, and WebSockets
- First registered user automatically initialized as Administrator
- User lifecycle management including adding users, role assignment, password resets, account enable/disable, and deletion
- RFC 6238 TOTP two-factor authentication with QR code scanner support and rate-limiting against brute force
- Registration approval system where new self-registered accounts require administrator activation by default
- Three-tier audit logging covering login records, page visits, and operational request logs
- Connection-based IP banning with loopback and self-IP protection
- Automated 100-year self-signed HTTPS certificate generation and multi-OS trust certificate guides
- Cordis user-management service export allowing sibling DSH plugins to resolve request identities
Useful For
- Securing DeepSeek Harness Web deployments across local networks, Tailscale, or private servers with login credentials
- Enforcing TOTP two-factor authentication on multi-user DSH instances
- Managing team access to a single DSH instance with audit trails and IP control
- Exposing user identity resolution to other plugins via Cordis service hooks
Who It Fits
- DeepSeek Harness administrators managing shared or remote Web instances
- Developers exposing DSH Web to LAN or Tailscale who require access control
- Teams needing audit logging, 2FA, and registration approval for DSH instances
Documented Limitations
- Provides entry-level access gating and request identification, but does not provide multi-tenant data isolation within DSH
- Requires DSH Web to remain bound to loopback so requests cannot bypass the HTTPS gateway
- TOTP secrets are stored in plaintext base32 in local 0600 file store as required for dynamic code verification
- IP banning relies on the connection source IP and may require proxy configuration adjustments if placed behind external reverse proxies
DSH Compatibility
Version-specific runtime evidence collected by DSH Plugin. A missing result means we have not tested that combination yet.
Security Signals
Objective signals discovered from package metadata and source inspection. These are not a guarantee that a plugin is safe.
package.json declares 1 runtime, 2 development, 2 peer, and 0 optional dependencies.
package.json declares DSH bundle metadata.
GitHub did not report an SPDX license for this repository snapshot.
A root package.json was captured and can be inspected by the registry.
Public GitHub source metadata is available for this registry snapshot.
Source & Registry Notes
Public provenance, Registry classification, and the latest source check for this entry, kept separate from runtime verification.
- Source repository
- weibaohui/user-management
- Registry source
- GitHub · dsh-plugin topic
- Registry classification
- Plugin
- Source checked
- 6025480 · 2026-10-09
This project is independently indexed from public source information. DSH Plugin is not affiliated with DeepSeek or the plugin author. Always check the author repository before installation.
Repository Activity
- GitHub stars
- 1GitHub stars
- Forks
- 0
- Open issues
- 0
- Last commit
- 2026-10-04
- Last release
- 2026-10-04
Related DSH Plugins
Ranked by overlapping capabilities, use cases, plugin type, categories, and DSH profile.
Import and resume conversation histories from 25+ AI coding agents directly into DeepSeek Harness.
View plugin →Full office suite integration for DeepSeek Harness supporting spreadsheets, docs, slides, bases, and canvases.
View plugin →Agent-native multi-market trading terminal and quantitative research plugin bundle for DeepSeek Harness.
View plugin →Session lifecycle manager for DeepSeek Harness with search, restore, idle cleanup, and diagnosis.
View plugin →