lijx122/dsh-plugin-auth-guard

README excerpt

dsh-plugin-auth-guard Enterprise-Grade Zero-Trust Authentication, LAN/Public Access Control & Security Gate Plugin for DeepSeek Harness (DSH) =20" English Documentation 简体中文文档 (README CN.md) 📖 Background & Problem Statement DeepSeek Harness (DSH) is a powerful AI coding agent runtime designed natively for local desktop workflows ( 127.0.0.1 ). When developers attempt to expose DSH across local area networks (LAN) to mobile devices (iOS/Android) or host it on remote cloud servers, they encounter critical barriers: 1. Privileged Interface 403 Blocking : DSH natively enforces hardcoded loopback fences. Any non-localhost request calling settings.describe or llm.providers is blocked with 403 Forbidden , making remote model switching impossible. 2. Mobile RPC Crashes : Mobile browsers (iOS Safari / Chrome Android) lack Secure Context over plain HTTP, rendering crypto.randomUUID undefined and breaking all RPCs. 3. Severe Remote Code Execution (RCE) Risks : DSH lacks built-in authentication. Opening port 3080 to LAN or WAN allows anyone on the network to create sessions and execute arbitrary shell commands via the coding agent. 4. Third-Party Plugin Escapes : Sidebar plugins ( dsh-better-…

Category