deepseek-harness-auth

扫描发现 · 12

• info读取 process.envsrc/cli.ts:109
  export function program(store = new AuthStateStore(process.env.DSH_AUTH_STATE_DIR || defaultStateDir())): Command {
• info发起网络请求（fetch / axios）src/client/index.tsx:31
  await fetch('/auth/logout', { method: 'POST', headers: { 'X-DSH-Auth-Request': '1' } })
• info发起网络请求（fetch / axios）src/client/index.tsx:60
  void fetch('/auth/account').then(async response => {
• info发起网络请求（fetch / axios）src/client/index.tsx:82
  const response = await fetch('/auth/account/password', {
• info硬编码 IP 地址src/client/index.tsx:175
  <label className="dsh-auth-field"><span>{zh ? '免登录 IP / CIDR' : 'Login bypass IPs / CIDRs'}</span><textarea value={whitelistText} onChange={
• info使用 localStoragesrc/client/onboarding.ts:26
  try { acknowledged = localStorage.getItem(WELCOME_ACK_STORAGE_KEY) } catch {}
• info使用 localStoragesrc/client/onboarding.ts:51
  try { localStorage.setItem(WELCOME_ACK_STORAGE_KEY, fingerprint) } catch {}
• info使用 localStoragesrc/client/theme.ts:61
  localStorage.setItem(THEME_STORAGE_KEY, serialized)
• info使用 localStoragesrc/client/theme.ts:71
  try { last = localStorage.getItem(THEME_STORAGE_KEY) ?? undefined } catch {}
• info使用 localStoragesrc/html.ts:29
  const parsed = JSON.parse(localStorage.getItem(key) || 'null');
• info硬编码 IP 地址src/network.ts:25
  const value = rule.trim().toLowerCase() === 'localhost' ? '127.0.0.0/8' : rule.trim()
• warning向裸 IP 地址发起 HTTP 请求src/proxy.ts:471
  console.log(`dsh auth: ${publicBaseUrl ?? `http://127.0.0.1:${String(port)}`}`)

静态启发式扫描，可能误报——使用前请自行审查源码。