Dsh Auth
hxy91819/dsh-auth · productivity
Caddy-fronted administrator authentication for DeepSeek Harness: Argon2id, revocable sessions, bilingual UI, zero upstream forks.
★ 6GitHub stars
1Forks
2026-09-04Last updated
TypeScriptLanguage
MITLicense
Key features
- Production cookies are HttpOnly, Secure, SameSite=Lax, Path=/, and __Host- prefixed.
- Plain HTTP uses an explicit compatibility cookie mode.
- Argon2id hashes and random session secrets live in separate permission-restricted files.
- Persistent opaque sessions use a 0600 authentication-state document.
- Login, logout, token redemption, and first-time administrator setup enforce CSRF plus exact Origin/Referer checks after trusted-proxy resolution.
Install command
dsh plugin --profile web add github:hxy91819/dsh-auth