roojay/dsh-trusted-host-proxy-403-fix

README 摘要

dsh-trusted-host-proxy-403-fix English 中文 A standalone DeepSeek Harness plugin bundle for the web profile. Compatible with @deepseek-ai/[email protected] . dsh web ( dsh --profile web ) listens on the loopback interface. You can repeat --trusted-host to add trusted host entries that pass the /api browser request security checks. Requests to non-privileged API methods then succeed when their Host matches one of those entries. The Node.js /api handler applies a second check to the privileged method set with an empty trustedHosts list, which restricts these methods to loopback. As a result, a reverse proxy can reach other API methods through a configured host, while these 15 methods remain unavailable. When the proxy preserves the public Host header, Settings → Models fails with: This plugin registers an exact /api/ route for each privileged method and validates those requests against the same trustedHosts list as the rest of /api . It keeps the official connection plugin in place and does not provide authentication. The official host checks control which hostnames may reach the API; they do not verify user identity. The Web transport has no built-in authentication. Before you install Af…

分类