Skip to content

Releases: lijx122/dsh-plugin-auth-guard

v0.1.1 - Fix Scoped Package Whitelist Matching

Choose a tag to compare

@lijx122 lijx122 released this 15 Aug 15:11

Fixes loading of scoped plugins like @deepseek-ai/dsh-typert-registry\ when auth is active.

v0.1.0 - Initial Release

Choose a tag to compare

@lijx122 lijx122 released this 15 Aug 14:30

🚀 Initial Release of dsh-plugin-auth-guard

DeepSeek Harness (DSH) 原生企业级零信任安全访问控制与账号密码防护插件。

🌟 Features

  • Default-Deny Zero-Trust Gateway: Intercepts HTTP & WebSocket connections at the socket level.
  • Cross-Platform Mobile Polyfill: Injects \crypto.randomUUID\ polyfill dynamically via \ apIndex.
  • Privileged RPC Bridge: Forwards privileged methods for authenticated LAN clients without 403 errors.
  • Cryptographic Security: Salted Scrypt + HMAC-SHA256 stateless session tokens bound to password fingerprints.
  • Active WebSocket Purge: Automatically terminates active remote terminal WebSockets upon password change.
  • Anti-Brute-Force & DoS Defense: Per-IP sliding window rate limiting + global burst throttling + 64KB OOM protection.
  • CSRF & CSWSH Protection: Strict hostname matching against cross-origin forgery and WebSocket hijacking.
  • Native DSH UI Design: DeepSeek theme design tokens, top-level lock portal with background blur, and multi-tab synchronization.