DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in
← Plugins

@eduwork/dsh-oidc

Oidc

Standards-based OIDC identity, token-authorized model access, declarative branding, and OpenAI-compatible model integration for DeepSeek Harness

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add @eduwork/dsh-oidc@0.3.2
READMECompatibilityVersions

Compatibility and provenance

Oidc is published as @eduwork/dsh-oidc and currently resolves to version 0.3.2. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
web
Release source
npm
Registry updated
11/4/2026

Versions

0.3.2stable
10/24/2026
0.3.1stable
10/22/2026
0.3.0stable
10/18/2026
Show 9 more versionsCollapse versions
0.3.0-dev.2dev
9/21/2026
0.3.0-dev.1dev
9/20/2026
0.2.4stable
9/15/2026
0.2.3stable
9/13/2026
0.2.2stable
9/11/2026
0.2.1stable
9/11/2026
0.2.0stable
9/11/2026
0.1.0stable
9/5/2026
0.1.0-alpha.11prerelease
9/5/2026

Related plugins

Loading related plugins…

Latest
0.3.2
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
692.3 kB
Files
99
Surface
web
License
MIT
Source
npm
GitHub
★ 288
Weekly downloads
788
Last push
11/4/2026
View source ↗Project homepage ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue

Related plugins

More verified plugins in security-access.

Cc Safety Netcc-safety-netA coding agent CLI hook - block destructive commands and secret file accessPocketdsh-pocketPut DeepSeek Harness in your pocket: one package, one settings page, and scan a QR code on your phone to access DSH on your computer in sync (LAN + public network, real-time screen mirroring).Codex Subscriptiondsh-codex-subscriptionUse ChatGPT and Codex subscriptions in DeepSeek Harness with OAuth, quota, safe resets, web search, images and Fast mode, and control DSH from the ChatGPT mobile app (Beta)Xdpooldsh-xdpoolOne DSH model pool for every free quota you have: merge all locally signed-in WorkBuddy accounts with auto-failover, sign in to 13 vendors by QR/web, aggregate 76 vendors' free tiers, plus a usage dashboard, model routing, a local OpenAI-compatible gatewa

README

dsh-oidc

简体中文 | English

一次机构登录，直接使用获授权的模型。

当前源码提供 LiteLLM native OAuth 和显式启用的 oidc-llm 0.1 实验接入。两者共用浏览器/loopback、PKCE、Host 会话、刷新、退出与 DSH Provider；模型请求使用当前 Access Token，客户端不再申请或保存机构模型 API Key。个人 API Key 设置独立保留。

版本 @eduwork/dsh-oidc@0.3.0 面向 Node.js 24.18+ 和 DSH 0.2.1-rc.2，可独立安装到本机 DSH Web Profile；Web 后端不依赖 EduWork 桌面桥接。机构模型接入需要部署者提供兼容网关和公开 Profile 配置。

dsh plugin --profile web add @eduwork/dsh-oidc@0.3.0

启动 DSH 前，将 EDUWORK_OIDC_PROFILE 设为 Profile JSON 文件的绝对路径。默认 bundle 使用 Web 后端；EduWork 桌面用户继续使用发行配置。旧 Key Binding 配置需要先迁移。

开始接入

  1. 根据服务端选择 LiteLLM 接入指南 或 oidc-llm 实验接入。
  2. 复制对应的LiteLLM 示例或OIDC Token 示例，填写完整发现地址与所需公开配置。
  3. 在桌面 Host 使用 backend: desktop，本机 Web 使用 backend: web。仅身份登录仍可使用纯身份示例；该模式不提供企业模型。
  4. 登录后自动读取当前授权的模型目录。账户刷新不应覆盖用户后来选择的个人模型。

当前源码按模型 type 注册，仅 llm 进入对话。服务器只返回 ID 时，升级前须按实际模型 ID 补充 provider.models[].type；服务端类型优先，专用及类型未知的模型不进入对话。仅返回 ID 的服务端需同时补齐配置中的模型类型。详见模型说明。

从源码验证：

cd packages/dsh-oidc
npm ci
npm run check

配置加载、Host 组合和服务端要求见接入指南。发行装配需使用经过审查、已发布并锁定的包；源码修改不会自动进入现有安装包。

功能与边界

  • OIDC 模式验证 ID Token 签名、issuer、audience、nonce 与 UserInfo subject。LiteLLM native 按其自身契约处理，不猜测 Token 类型或降级协议。
  • 请求前检查 Token 有效期；临近到期自动刷新，并发刷新合并为一次。
  • 退出清理本地授权并取消在途模型请求，尽力撤销 Refresh Token。已签发 Access Token 的服务端有效期由服务端管理。
  • 模型目录、JSON/SSE、推理档位和附件处理复用 DSH Provider。机构配额由可选扩展通过共享 Host 传输读取。
  • 品牌配置只接受受限数据，不加载远程代码。插件面向单机客户端，Web 仅监听本机。

进一步阅读：Profile 配置、桌面 Host、架构、安全边界、开发。