dsh-web
zhu1090093659
DeepSeek Harness(DSH)Web Plugin Aggregation Ecosystem Pack · Everything is a plugin, distributed via Creative Workshop
Yuuz12/dsh-webui-auth
dsh-webui-auth is a tool for DeepSeek Harness. WebUI identity authentication: enforced login at HTTP/transport layer (four-layer protection: resources, plugin bundle, /api, WebSocket), server-side session + HttpOnly Cookie.

REVIEW SCORECARD
✓ 无Risky检出 · 自动化扫描结果仅供参考,非官方背书
AI DEEP REVIEW
Well-documented, fail-closed WebUI auth plugin that adds real login protection without patching DSH core; worth installi
README documents a four-layer route-wrapping architecture, fail-closed startup checks, and a CLI audit command, but no test suite or CI is mentioned.
Uses scrypt password hashing, HttpOnly SameSite cookies, server-side persisted sessions, HMAC-pseudonymized audit IPs, and a per-boot setup token; no download-and-execute or plaintext secrets described.
Solves a concrete gap by gating WebUI resources, plugin bundles, /api, and WebSocket upgrades behind authentication for DSH deployments.
Last updated 2026-09-10 with detailed changelog-style notes (0.3.3 fixes, v0.1.2-alpha.2 compatibility) and active issue references, indicating ongoing maintenance.
README covers install (npm/GitHub/manual), uninstall, usage, data file locations, audit logging, and troubleshooting in both Chinese and English.
Generated by AI after reading the project README, as a decision aid; neutral scores are given when information is thin. Not an official endorsement.
正在读取 GitHub README...
README 暂时无法读取。
前往仓库INSTALL REFERENCE
npx @deepseek-ai/dsh plugin --profile web add dsh-webui-authThis command comes from an explicit install reference in the README and is provided for reference only — it is never auto-executed by a DSH host.
PROJECT TOPICS
VALIDATION LADDER
FAQ
WebUI identity authentication: enforced login at HTTP/transport layer (four-layer protection: resources, plugin bundle, /api, WebSocket), server-side session + HttpOnly Cookie.
dsh-webui-auth has 8 stars and 3 forks on GitHub, last updated 2026-09-10.
dsh-webui-auth is distributed under the MIT license.
dsh-webui-auth is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.
CLASSIFICATION EVIDENCE
System reads GitHub Topics first, then compares against the in-site category dictionary and word-root rules. Current match:No valid category tags。