Feishu / Lark Dashboard Login
Feishu / Lark OAuth sign-in for the web dashboard, admitted by tenant + open_id allow-list. Registers the `feishu` dashboard auth provider once plugins.entries.dashboard-auth-feishu.settings (app_id, tenant_key, owner_open_ids) and an app secret are configured.
Good to know before installing
Calls only the fixed Feishu or Lark authorize, token and user_info endpoints; reads HERMES_DASHBOARD_FEISHU_APP_SECRET or, as a fallback, the Feishu gateway's FEISHU_APP_SECRET, plus HERMES_DASHBOARD_FEISHU_SESSION_KEY; stores tenant, open_id and display name per sign-in in a 0600 SQLite file under plugin-data (no upstream tokens); a refused sign-in logs the tenant_key and open_id Feishu returned (identifiers only, for first-time setup); every admitted identity gets full dashboard access; upstream PKCE is not used (confidential client with single-use cookie-bound state); pending logins are in memory, so one dashboard worker only; WebSockets opened before logout may stay open until the session key is rotated and the dashboard restarted.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install dashboard-auth-feishu - Said no? Turn it on later:
hermes plugins enable dashboard-auth-feishu - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Cost, speed & monitoring
- Maintained by
- xielevi (Community)
- Needs
- No API keys declared
- Needs Hermes
- 0.21.5 or newer
- Version
- 1.0.1
- In the catalog
- 2026-10-09, updated 2026-10-10
Full setup & settings ↗Source code ↗
More in cost, speed & monitoring
All cost, speed & monitoring plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher