apache / apache/cordova-electron

Add Azure Trusted Signing Support

Open
#281 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
135
Forks
60
Avg merge
1d 6h
Merged PRs (30d)
5

Description

# Feature Request

## Motivation Behind Feature
To improve security and simplify the build workflow, it is essential to integrate support for Azure Trusted Signing into cordova-electron. Since electron-builder already supports this feature, cordova-electron should simply pass the configuration options to electron-builder. This will allow developers to easily enable Azure signing without having to manage additional configurations or external scripts

## Feature Description
The goal is to add a new configuration section in build.json, for example azureSignOptions, which will be recognized by cordova-electron and passed directly to electron-builder during the build process. The proposed configuration is as follows:
```json
{
"electron": {
"windows": {
"azureSignOptions": {
"endpoint": "",
"publisherName": "",
"certificateProfileName": "",
"codeSigningAccountName": ""
}
}
}
}
```
The expected behavior is as follows:

Configuration Retrieval: Cordova-electron should read the azureSignOptions present in the configuration file (e.g., build.json).
Transmission to electron-builder: These options should be passed to electron-builder, which will then use these parameters to sign the application via Azure Trusted Signing.

## Alternatives or Workarounds
Currently, developers must either manually modify electron-builder’s configuration or use external scripts to integrate Azure Trusted Signing after the build. This approach increases complexity and the risk of errors. By centralizing this configuration in cordova-electron and automatically passing it to electron-builder, the process becomes simpler and less error-prone, providing a better user experience.

Contributor guide

Open the contributing guide

Research direction

Start with how cordova-electron reads the Windows section of build.json and constructs the electron-builder configuration. Trace how the proposed azureSignOptions object could be forwarded to electron-builder, then verify that a build using the documented options reaches Azure Trusted Signing without requiring external scripts.

Written by the indexing model from the issue text.

Assessment

Tech stack
electron, javascript
Domain
build-system, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.