frozo-ai/dsh-teams

README 摘要

dsh-teams Team access for the DeepSeek Harness web UI. The dsh web server ships with no TLS, auth, or origin policy — deliberately out of scope. That's correct for a loopback dev tool, and a problem the moment you want your team on one shared instance. dsh-teams is a zero-dependency auth gateway: a login wall plus a full HTTP and WebSocket reverse proxy in front of a loopback-bound dsh web . Your dsh stays on 127.0.0.1 ; the gateway is the only thing exposed. Quick start Point your team at http:// :3081 . Unauthenticated requests — including WebSocket upgrades — get a login page; authenticated ones are proxied through untouched. What it does - Login wall on every HTTP route and WebSocket upgrade - scrypt password hashing, HMAC-signed HttpOnly cookies, login rate limiting (10 tries / 15 min / IP) - Forwards the authenticated username upstream as x-dsh-teams-user (audit / future per-user routing) - Zero npm dependencies — node:http , node:net , node:crypto ; survives dsh rc churn because it never touches dsh internals CLI Env: DSH TEAMS PORT , DSH TEAMS HOST , DSH UPSTREAM HOST , DSH UPSTREAM PORT , DSH TEAMS HOME (default /.dsh-teams ). SSO (OIDC) Sign in with Google Workspace, Okta…

分类