dsh-oauth-api
Out-of-tree DeepSeek Harness plugin for third-party OAuth login. It is a community plugin, not an official DeepSeek product and not an upstream PR.
After install, Settings → OAuth 登录 shows one card per provider. Successful login does not change the current default model — pick the provider in the official model picker.
Providers
| Settings card | Model picker group | Auth | Inference |
|---|---|---|---|
| Grok / xAI | xai-oauth |
Device code (auth.x.ai) |
https://api.x.ai/v1/responses |
| Codex / ChatGPT | codex-oauth |
Device code (auth.openai.com/codex/device) |
https://chatgpt.com/backend-api/codex |
| Claude Code | claude-oauth |
PKCE: open authorize URL, paste code#state |
https://api.anthropic.com/v1/messages |
| Kimi Code | kimi-oauth |
Device code (auth.kimi.com) |
https://api.kimi.com/coding/v1 |
Install
git clone https://github.com/hahaha-taotao/dsh-oauth-api.git
cd dsh-oauth-api
pnpm install
pnpm build
dsh plugin --profile web add .Confirm the Cordis rows:
dsh --profile web --dump-configYou should see dsh-oauth-host and dsh-oauth-client.
Login
- Start the UI:
dsh web - Open Settings → OAuth 登录
- Click 登录 on a provider card
- Finish the browser step (device code, or paste Claude’s
code#state) - Select the matching group in the model picker (
xai-oauth,codex-oauth,claude-oauth, orkimi-oauth)
Grok tokens need the api:access scope. If inference says the scope is missing, log in again.
Token store
Tokens live only in this plugin’s store:
$DSH_HOME/oauth/xai.json$DSH_HOME/oauth/codex.json$DSH_HOME/oauth/claude.json$DSH_HOME/oauth/kimi.json
Default $DSH_HOME is ~/.dsh.
Develop
pnpm install
pnpm test
pnpm run typecheckLicense
MIT