SEMANTIC DIRECTORY · plugin-directory-semantic-v3-19
Identity & Access Control
为 Web 界面、HTTP API 或连接层提供登录和访问门槛，包括密码、Token、Cookie、JWT、OAuth/SSO、WebAuthn/TOTP、反向代理、IP 白名单、防暴力破解、会话管理、角色和多用户/租户隔离。
Leaf membership
52 plugins
dsh-totpdsh-totpCatalog AnalyzedTOTP-only access control for personal DeepSeek Harness Web instances, with in-app QR enrollment, single-use recovery codes, live protection controls and lock-all revocation of page access.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.0.4Evidence updated2026-09-26Public signals0 stars · 348 downloadsdsh-trust-landsh-trust-lanCatalog AnalyzedDSH web plugin: a loopback-only General-settings switch that grants non-loopback (LAN) browsers Host settings persistence, through the trust-lan settings namespace and the remoteSettingsAccess gate consulted by the seam-patched dsh-client-ui-settings.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-26Public signals41 downloadsdsh-ui-authdsh-ui-authCatalog AnalyzedAuthentication gate for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a password or second-factor step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); admin-only model and API-key configuration guards; per-user isolation on the REST/list APIs and on the WebSocket event streams; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Runs on both DSH transport lines (0.1.1-rc.2 legacy and 0.1.2+ modern) with no configuration; passkey login needs a localhost or HTTPS origin because browsers require a secure context.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.6.5Evidence updated2026-09-21Public signals3 stars · 616 downloadsdsh-user-managerawol2005ex3/dsh-user-managerCatalog AnalyzedDeepSeek Harness（`dsh`）Plugin：为单机的 harness 增加**用户管理**与**会话按用户隔离**。CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-vault-pluginrobbin810130/dsh-vault-pluginCatalog AnalyzedDSH 保险箱Plugin：项目与对话的前台隐私锁CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-web-authfonlan/dsh-web-authCatalog AnalyzedDSH web plugin: password-gate authentication (login page + HttpOnly signed cookie) for exposing dsh web behind a reverse proxyCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-web-auth@summersec/dsh-web-authCatalog AnalyzedTransport-level authentication gate for the DeepSeek Harness Web GUI with server-side sessions, HttpOnly cookies, IP-based login throttling, and an scrypt password CLI.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.2.0Evidence updated2026-09-22Public signals2 stars · 699 downloadsdsh-web-auth-gatewayluodeb/dsh-web-auth-gatewayCatalog AnalyzedAuthentication reverse-proxy gateway plugin for DeepSeek Harness WebCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals3 starsdsh-web-enterpriseChammoon/dsh-web-enterpriseCatalog AnalyzedDSH plugin from Chammoon/dsh-web-enterpriseCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals1 starsdsh-web-gatezzy2210/dsh-web-gateCatalog AnalyzedDeepSeek Harness (dsh) Web 密钥门禁 / Access gate for dsh Web GUI — 替换出厂 webserver 行,HTTP/WebSocket/SPA 全部先过密钥:登录页 + HMAC Cookie + Bearer Token + 防爆破;host/port/key 环境变量或行内可配;0.0.0.0 无密钥拒绝启动(Security锁). Login page, HMAC cookie, bearer token, lockout; env/row config; refuses 0.0.0.0 without key.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-web-passlinz919/dsh-web-passCatalog AnalyzedDSH Web 密码门禁 – Cookie 认证 + 首次强制设密 + 登录失败锁定60s + 内置访问日志查看器。零依赖，原生集成设置页。CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 starsdsh-web-startup-authGDWhisper/dsh-web-startup-authCatalog AnalyzedReplaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.CompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals43 starsfn-os-apps#dsh-codex-auth-plugin@tnnevol/dsh-codex-authCatalog AnalyzedChatGPT account sign-in for DeepSeek Harness through a Codex browser OAuth flow with no API key and no workspace selection: subscribes the login to pi-ai's Codex provider, lets you set the global default Codex model and reasoning effort for new sessions, refreshes the model list from the signed-in account's own catalog endpoint, and shows the five-hour and weekly usage windows in the composer.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0-rc.7Evidence updated2026-09-19Public signals39 stars · 11842 downloadsowndshboe1900/owndshCatalog AnalyzedThe Self-Hosted Control Plane for DeepSeek-HarnessCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals4 starsowndsh#owndsh-pluginowndsh-pluginCatalog AnalyzedEarly-stage plugin connecting DeepSeek Harness to a separately deployed, self-hosted OwnDsh server for team identity, model access control, quotas, and usage auditing.CompatibilityDSH 0.1.6-alpha.2 · webDependency audit0 reported in bounded auditArtifact0.1.0Evidence updated2026-09-21Public signals4 stars · 490 downloadspanel-authwuwenfengmi1998/panel-authCatalog AnalyzedDSH plugin from wuwenfengmi1998/panel-authCompatibilityDSH 0.1.6-alpha.2 · webDependency auditNot testedArtifactUnresolvedEvidence updated2026-09-27Public signals0 stars
Categories are public semantic index facts, not a final recommendation. Compatibility, permissions, and source evidence remain separate.