Yuuz12/dsh-webui-auth
50Last commit Aug 14, 2026
dsh-webui-auth DSH plugin
dsh-webui-auth is an installable DSH bundle for persistent WebUI login protection. It provides server-side sessions carried by HttpOnly cookies, a settings/login interface, credential management, and audit logging.
How to install the dsh-webui-auth DSH plugin
维护者开发模式：在本地源码目录使用 dsh plugin --profile web add ./dsh-webui-auth（link: 安装），改代码 → 重启 DSH 即生效，无需重新安装。Copying does not run this command. Review the repository and version before use.
Data source
Snapshot date: Aug 15, 2026
manifest-valid
What the dsh-webui-auth DSH plugin can do
- Installs through the DSH plugin command as an npm, GitHub, or local-source bundle.
- Gates WebUI resources, /plugins bundles, /api RPC requests, and specified WebSocket upgrade requests.
- Provides login and authentication settings pages for creating, changing, disabling, and ending authentication.
- Stores password credentials using scrypt and keeps sessions in server memory.
- Supports configurable session durations and revokes other sessions after a password change.
- Records authentication-related events in an audit.jsonl file and provides CLI and settings-page views.
- Detects missing core-package patches and attempts to reapply them when patch anchors match.
Where the dsh-webui-auth DSH plugin fits
- Require a login before users can access a DSH WebUI deployment.
- Add a local authentication gate for WebUI resources, APIs, and real-time event connections.
- Review recent login and configuration events through audit logs.
Who the dsh-webui-auth DSH plugin is for
- DeepSeek Harness operators running the web profile.
- Administrators who want a login gate for a locally hosted DSH WebUI.
dsh-webui-auth DSH plugin limitations
- Authentication remains disabled until an administrator creates credentials.
- Sessions are stored only in process memory, so all sessions expire when DSH restarts.
- The plugin modifies core DSH client packages; after a DSH upgrade, an automatically reapplied patch requires another restart to take effect in the running process.
- Automatic patch recovery can fail if core-package structure or anchors change.
- The documented threat model excludes local processes able to directly read or write host process memory or files.
- Some registered exact configuration endpoints are explicitly excluded from the gate.
Objective checks
These signals come from public metadata scans. They are not a security certification.
- info
dependency counts
package.json declares 0 runtime, 0 development, 0 peer, and 0 optional dependencies.
- info
dsh bundle declared
package.json declares DSH bundle metadata.
- info
license declared
GitHub reports the repository license as MIT.
- info
package manifest available
A root package.json was captured and can be inspected by the registry.
- info
source available
Public GitHub source metadata is available for this registry snapshot.
dsh-webui-auth DSH plugin alternatives
dsh-visual-plugin
6
Adds an OpenAI-compatible vision bridge to DeepSeek Harness, forwarding images to a configured vision model and displaying descriptions in a web panel.
dsh-clawrouter
9
DeepSeek Harness plugin that reviews risky tool calls with a stronger model and adds a BlockRun x402-paid LLM provider route.
ModLens
1,421
A DeepSeek Harness vision plugin that turns pasted images into structured OCR, layout, and semantic evidence for supported text-only models.
dsh-telegram-channel
5
Telegram mobile remote for attaching to live DeepSeek Harness Web sessions.
dsh-webui-auth DSH plugin questions
What is the dsh-webui-auth DSH plugin?
dsh-webui-auth is a project included in the current DSH plugin snapshot. This page organizes repository metadata and reviewed notes, but you should still inspect the upstream repository before running it.
How do I install the dsh-webui-auth DSH plugin?
The page shows the install command captured from the source record. Copying does not run it, so confirm the package, profile, and version against upstream documentation first.
Which DSH profile does dsh-webui-auth use?
The snapshot records web as the dsh-webui-auth profile. DSH conventions can change quickly, so verify the manifest and README before installation.
Is dsh-webui-auth compatible with the current DSH release?
The source data does not include a verified compatibility matrix. Check recent commits, releases, and DSH breaking changes, then test in a profile you can roll back.
What should I do if dsh-webui-auth fails to load?
Check the install command, selected profile, dependency logs, and Cordis startup output first. Keep the exact error string, then compare it with this site's fix pages and upstream issues.
What are the closest alternatives to dsh-webui-auth?
Related plugins on this page come from the current snapshot and are only candidates. Compare capabilities, maintenance activity, installation method, and limitations before choosing one.