dsh-oauth-api

锟斤拷锟斤拷说锟斤拷

Out-of-tree DeepSeek Harness plugin for third-party OAuth login. It is a community plugin, not an official DeepSeek product and not an upstream PR.

After install, Settings 锟斤拷 OAuth 锟斤拷录 shows one card per provider. Successful login does not change the current default model 锟斤拷 pick the provider in the official model picker.

Providers

Settings card	Model picker group	Auth	Inference
Grok / xAI	xai-oauth	Device code (auth.x.ai)	https://api.x.ai/v1/responses
Codex / ChatGPT	codex-oauth	Device code (auth.openai.com/codex/device)	https://chatgpt.com/backend-api/codex
Claude Code	claude-oauth	PKCE: open authorize URL, paste code#state	https://api.anthropic.com/v1/messages
Kimi Code	kimi-oauth	Device code (auth.kimi.com)	https://api.kimi.com/coding/v1

Install

git clone https://github.com/hahaha-taotao/dsh-oauth-api.git
cd dsh-oauth-api
pnpm install
pnpm build
dsh plugin --profile web add .

Confirm the Cordis rows:

dsh --profile web --dump-config

You should see dsh-oauth-host and dsh-oauth-client.

Login

1. Start the UI: dsh web
2. Open Settings 锟斤拷 OAuth 锟斤拷录
3. Click 锟斤拷录 on a provider card
4. Finish the browser step (device code, or paste Claude锟斤拷s code#state)
5. Select the matching group in the model picker (xai-oauth, codex-oauth, claude-oauth, or kimi-oauth)

Grok tokens need the api:access scope. If inference says the scope is missing, log in again.

Token store

Tokens live only in this plugin锟斤拷s store:

• $DSH_HOME/oauth/xai.json
• $DSH_HOME/oauth/codex.json
• $DSH_HOME/oauth/claude.json
• $DSH_HOME/oauth/kimi.json

Default $DSH_HOME is ~/.dsh.

Develop

pnpm install
pnpm test
pnpm run typecheck

License

MIT