dsh-web
zhu1090093659
DeepSeek Harness(DSH)Web Plugin Aggregation Ecosystem Pack · Everything is a plugin, distributed via Creative Workshop
Yuuz12/dsh-webui-auth
dsh-webui-auth is a tool for DeepSeek Harness. WebUI identity authentication: enforced login at HTTP/transport layer (four-layer protection: resources, plugin bundle, /api, WebSocket), server-side session + HttpOnly Cookie.

REVIEW SCORECARD
✓ No risk detected · Automated scan results are for reference only, not an official endorsement
AI DEEP REVIEW
Well-documented, fail-closed WebUI auth plugin that adds real login protection without patching DSH core; worth installi
README documents a four-layer route-wrapping architecture, fail-closed startup checks, and a CLI audit command, but no test suite or CI is mentioned.
Uses scrypt password hashing, HttpOnly SameSite cookies, server-side persisted sessions, HMAC-pseudonymized audit IPs, and a per-boot setup token; no download-and-execute or plaintext secrets described.
Solves a concrete gap by gating WebUI resources, plugin bundles, /api, and WebSocket upgrades behind authentication for DSH deployments.
Last updated 2026-09-10 with detailed changelog-style notes (0.3.3 fixes, v0.1.2-alpha.2 compatibility) and active issue references, indicating ongoing maintenance.
README covers install (npm/GitHub/manual), uninstall, usage, data file locations, audit logging, and troubleshooting in both Chinese and English.
Generated by AI after reading the project README — a decision aid, not an endorsement. Neutral scores are given when information is limited.
Loading GitHub README...
The GitHub README is temporarily unavailable. Please try again later.
Open repositoryINSTALL REFERENCE
npx @deepseek-ai/dsh plugin --profile web add dsh-webui-authThis command was extracted from an explicit README install reference and is display-only; the DSH host will not execute it automatically.
PROJECT TOPICS
VALIDATION LADDER
FAQ
WebUI identity authentication: enforced login at HTTP/transport layer (four-layer protection: resources, plugin bundle, /api, WebSocket), server-side session + HttpOnly Cookie.
dsh-webui-auth has 8 stars and 3 forks on GitHub, last updated 2026-09-10.
dsh-webui-auth is distributed under the MIT license.
dsh-webui-auth is listed in the DSH Universe directory as a tool for DeepSeek Harness. This plugin is listed in the DSH Universe directory and covered by its validation pipeline.
CLASSIFICATION EVIDENCE
The system checks GitHub Topics against the site taxonomy and keyword rules. Current matches:No valid category tags。