@tyler9061/dsh-auth
dsh web 认证插件：登录保护、空闲自动登出、认证有效期、设置界面、`dsh web p` 重置密码
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @tyler9061/dsh-auth@0.1.7Auth 以 @tyler9061/dsh-auth 发布，当前版本为 0.1.7。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
Authentication plugin for DeepSeek Harness: accessing dsh web requires sign-in
(username + password); idle sessions log out automatically; sessions expire
after a configurable max age; single sign-on mode; the settings UI changes the
username / password / expiry times; dsh web p resets the password and
dsh web u changes the username.
From npm (recommended):
dsh plugin --profile web add @tyler9061/dsh-auth
From a source directory (development; live-links local code):
dsh plugin --profile web add link:/path/to/dsh-auth
Restart dsh web after installing.
admin). Visiting the web UI redirects to /login.dsh web p prints a new random password (or
dsh web p mypass); dsh web u newname changes the username
(3-32 chars, letters/digits/_``-).The real server binds 127.0.0.1 only; the plugin runs a reverse proxy on
0.0.0.0:<lanPort> (default 3080, override with DSH_AUTH_PORT) that
forwards to loopback and rewrites Host/Origin, so the built-in /api trust fence
accepts every request — all /api RPCs (settings, files, SCM, other plugins)
work from LAN clients. The auth gateway still protects everything.
http://<LAN-IP>:3080 (printed at startup).--host 0.0.0.0 stays rejected by the CLI; use the proxy defaults.ctx.locale);
the login page follows the browser language.--dsw-alias-*) and
adapts to light/dark themes automatically.Stored in $DSH_HOME/auth.json (default ~/.dsh/auth.json):
$DSH_HOME/auth.key
(mode 0600, local only; losing it requires dsh web p to reset). Legacy
plaintext data auto-migrates to ciphertext on the next save.loginHistory and shown under Settings > Auth.admin; change via CLI or the settings UInpm test # node:test unit tests