dsh-plugin-login-gate

The dsh Web UI listens only on loopback and ships without any login page. The moment you want to reach it from another device on a LAN or intranet, you are left with no authentication and no encrypted transport. dsh-plugin-login-gate fills that gap: it places a single-password login gate in front of dsh so unauthorised devices simply cannot open the workspace, while also providing an HTTPS channel for encrypted cross-device access.

Core capabilities include same-port dual-protocol handling with a self-signed certificate and automatic HTTP-to-HTTPS redirect; lossless SSE stream and WebSocket event forwarding so live conversations and session lists keep flowing; and fixes for three common cross-device issues – Host and Origin rewriting at the proxy layer to eliminate 403 errors, an optional browser-side patch that keeps the settings page functional on private subnets, and WebSocket 101 handshake header restoration for reliable event-stream connections. All of these are handled automatically at the proxy layer or on startup. The plugin has zero npm runtime dependencies; a single password file and a certificate pair are all you need.

It is designed as a single-user personal tool: one password, in-memory sessions, ready out of the box. It suits developers who run dsh behind a home router, next to a NAS, or on a team intranet and want other machines to connect securely without introducing a full multi-user system or exposing the service to the public internet.