史诗级Bug，Error: desktop welcome: Web authentication failed

[zmbwjt]

客户端启动后窗口显示或弹出 Error: desktop welcome: Web authentication faileddsh的问题，起因是每次启动都会在 127.0.0.1 上新增一个 dsh-auth- ccookie，但是dsh从不清理。累积到70 个后，请求头里的 cookie 会超过16k,node的http服务请上限读取头是16kb,问题就来了，桌面外壳就把这次认证判定为失败，于是客户端起不来，很有意思的是你们他妈的设计的这个bug死活查不出来，我一周多dsh崩了n次找不到原因，卸载重装都解决不了问题，插件全关也没问题，直到手动删除用户目录下的.dsh那堆狗屎从新安装才能正常， 你们的卸载程序竟然不清除那堆破烂，最有意思的这个jar从第一天起就在往71次累加，封顶之后每次启动新发的那条都会把请求头再撑大一点，直到 node崩掉握手失败，得出结论的过程我想都不敢想，是我调试好的微信机器人竟然在我用node模式启动的dsh后自动上线给我发了条信息，我才反应过来是gui界面出问题了，今天崩了之后我把最近的启动日志一条条翻了翻才找到问题根源，相信这个问题已经折磨死了不少用户了，劝退的更不知几何，哪种长期不重启的估计现在还没，本来不想反馈，想到我们这帮穷鬼烧了万M亿Mtoken的穷鬼被蹦的崩溃的情况还是说一下吧
证据在你们dsh主体打包的 app.asar 里，DeepSeek Harness\resources\app.asar
文件是 lib/types/browser-auth.js：
js

const COOKIE_PREFIX = "dsh-auth-";
function cookieName(authority) {
return COOKIE_PREFIX + encodeBase64Url(createHash("sha256").update(authority).digest());
}
authority 是「主机名 + 端口」。dsh 自己的文档也写着：「在确定性名称与签名 payload 中同时绑定规范化 hostname 和 port」。

https://github.com/zmbwjt/dsh-cookie-cleanup 清理工具

DSH Sign-in Cookie Cleanup (English)

WHEN TO USE
The client window shows "DeepSeek Harness" but unusable, or a dialog
reports:
Error: desktop welcome: Web authentication failed
Run this tool once, then start the client again.

WHY THIS HAPPENS
Every launch of DeepSeek Harness adds one dsh-auth- cookie for
127.0.0.1 and never removes it. After roughly 70 launches the Cookie
request header grows past 16 KB, which is Node's default
maxHeaderSize, so the host process answers
431 Request Header Fields Too Large
The desktop shell treats that failed handshake as an authentication
failure and the window never finishes loading.

Measured on the affected store: 71 cookies, Cookie header 16,188 bytes
against the 16,384 byte limit.

This is not a configuration problem and not a damaged installation:
- editing cordis.patch.yml does not help
- a fresh DSH_HOME does not help
- reinstalling the client does not help
Only clearing those 127.0.0.1 cookies restores startup.

HOW TO USE

1. Double-click "Clean Up Cookies (English).cmd"
2. If the client is running, type Y at the prompt to close it
3. Wait for "Done. Cookie rows: N -> M"
4. Start DeepSeek Harness again

SAFETY

• A backup is written before anything is removed:
  %APPDATA%@deepseek-ai\dsh-desktop\Network\Cookies.bak-
• Only cookies with host 127.0.0.1 or localhost are deleted; these are
  the ephemeral handshake credentials issued at each startup.
• Cookies for other sites and platforms are left untouched.

FILES
clean-dsh-cookies-en.ps1 the script that performs the cleanup
Clean Up Cookies (English).cmd double-click launcher
README-en.txt this file

The Chinese originals live in the same folder:
clean-dsh-cookies.ps1, 一键清理Cookie.cmd, 说明.txt

RECURRENCE
The problem returns after about 70 launches.

[QiuYeDx]

我今早重启以后也遇到这个报错了。。。原来不是我的插件写的有问题，白担心一场

[zmbwjt]

我上周5才用 dsh，崩溃了受不了了，昨晚发完问题，翻了下这个社区的记录，发现3周前就有人发过cook这个问题，但是找不到原因，真他妈的蛋疼，每个人的浏览器cook不一样，但是基本就是写满了就爆，我的机器71轮重启肯定蹦，不同环境，现在手动清理一下就ok,之前只能备份数据，全盘删除.dsh.配置文件重新安装，程序根子里带的问题，让我们烧token背锅

[QiuYeDx]

让AI排查了一下还真是有71个cookie 第71轮崩了 写了个脚本以后每次重启都清理一下cookie就行了。。。但这应该是DSH自己要做好的事情，只能说现在都让AI开发了，哪儿藏了个bug他们都不知道