Releases: lijx122/dsh-plugin-auth-guard
Releases · lijx122/dsh-plugin-auth-guard
Release list
v0.1.1 - Fix Scoped Package Whitelist Matching
v0.1.0 - Initial Release
🚀 Initial Release of dsh-plugin-auth-guard
DeepSeek Harness (DSH) 原生企业级零信任安全访问控制与账号密码防护插件。
🌟 Features
- Default-Deny Zero-Trust Gateway: Intercepts HTTP & WebSocket connections at the socket level.
- Cross-Platform Mobile Polyfill: Injects \crypto.randomUUID\ polyfill dynamically via \ apIndex.
- Privileged RPC Bridge: Forwards privileged methods for authenticated LAN clients without 403 errors.
- Cryptographic Security: Salted Scrypt + HMAC-SHA256 stateless session tokens bound to password fingerprints.
- Active WebSocket Purge: Automatically terminates active remote terminal WebSockets upon password change.
- Anti-Brute-Force & DoS Defense: Per-IP sliding window rate limiting + global burst throttling + 64KB OOM protection.
- CSRF & CSWSH Protection: Strict hostname matching against cross-origin forgery and WebSocket hijacking.
- Native DSH UI Design: DeepSeek theme design tokens, top-level lock portal with background blur, and multi-tab synchronization.