TecFancy/dsh-auth-gate

README excerpt

dsh-auth-gate English 简体中文 A login door for your DeepSeek Harness (dsh) web instance. Put it in front of a public dsh deployment and nobody can reach your agents, your chat sessions, or your LLM credentials without signing in first. What it does - Everything needs a login. Every page, API call, and WebSocket connection is checked. Visitors without a valid session are sent to a simple login page (or rejected with 401 for API/script requests). - Two ways to sign in (pick one in the configuration): - Password (recommended): each admin gets a username and password. - Token : one shared secret token for the whole instance. - Works for browsers and scripts. Browsers use the login page; scripts and curl can pass Authorization: Bearer and skip the page entirely. - Safe by default. Passwords are stored hashed, logins are rate-limited (repeated wrong attempts temporarily lock the address), session cookies are secure, and any missing or broken configuration blocks access instead of silently opening the door . - A small command-line tool for managing users: Quick start See it in action Visitors without a session are sent to the login page: After signing in, they land on your instance: Configur…

Category