Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.
- GitHub stars
- 5
- License
- MIT
- Added
- 2026-08-17
GitHub info
- GitHub stars
- 5
- License
- MIT
- Primary language
- JavaScript
- Last push
- Aug 21, 2026, 7:15 AM
- Maintainer
- xbzbing
- Added
- 2026-08-17
Preview from README
Screenshots and GIFs extracted from the repository README (badges and avatars filtered out).
登录（含 2FA 验证码）
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/login.png
引导页（设置个人密码）
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/onboarding.png
OTP 设置（QR 码）
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/otp-setup.png
设置菜单（含认证设置入口）
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/settings-menu.png
2FA 登录成功
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/login-success.png
认证设置面板
https://raw.githubusercontent.com/xbzbing/dsh-auth-gateway/main/docs/assets/settings-auth.png
Install
dsh plugin --profile web add github:xbzbing/dsh-auth-gatewayREADME badge
Add this Markdown to your plugin README to link back to its listing.
[](https://dshget.com/plugins/xbzbing/dsh-auth-gateway)Related plugins
Security & Permissionsapi-relay-audit
★ 819Runs local security audits of AI API relays and LLM proxies from DeepSeek Harness, producing Markdown reports for prompt injection, model substitution signals, tool-call rewriting, error leakage, stream integrity, and profile-gated Web3 risks.
dsh-pentest
★ 324Authorized pentest mode for DeepSeek Harness — exploration chain, assets and findings with a Web view.
dsh-auto-review
★ 120Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.