dsh-auth-gate

DeepSeek Harness is a powerful development tool, but when deployed on public networks, unauthorized users may access sensitive resources like agent configurations, chat sessions, or LLM credentials. The dsh-auth-gate plugin addresses this security gap by acting as a login gateway, enforcing authentication on all pages, API calls, and WebSocket connections before granting access, thus ensuring only authorized users can utilize the instance.

In terms of core capabilities, dsh-auth-gate offers flexible authentication methods: you can choose between password mode (where each admin has a unique username and password) or token mode (using a shared secret token). Its default security features include password hashing, login rate limiting, and secure session cookies, which effectively prevent brute-force attacks and session hijacking. The plugin also comes with a command-line tool for easy user list management, eliminating the need for manual file editing.

This plugin is ideal for anyone running a DeepSeek Harness web instance and requiring access control. Whether you're an individual developer protecting your tools or a team or enterprise deploying shared services, it provides simple yet reliable protection. Especially in public deployment scenarios, dsh-auth-gate allows you to quickly harden your instance without delving into complex security details, letting you focus on core development work.