apache / apache/cordova-electron
Add Azure Trusted Signing Support
- Dominant language
- JavaScript
- Stars
- 135
- Forks
- 60
- Avg merge
- 1d 6h
- Merged PRs (30d)
- 5
Description
# Feature Request
## Motivation Behind Feature
To improve security and simplify the build workflow, it is essential to integrate support for Azure Trusted Signing into cordova-electron. Since electron-builder already supports this feature, cordova-electron should simply pass the configuration options to electron-builder. This will allow developers to easily enable Azure signing without having to manage additional configurations or external scripts
## Feature Description
The goal is to add a new configuration section in build.json, for example azureSignOptions, which will be recognized by cordova-electron and passed directly to electron-builder during the build process. The proposed configuration is as follows:
```json
{
"electron": {
"windows": {
"azureSignOptions": {
"endpoint": "",
"publisherName": "",
"certificateProfileName": "",
"codeSigningAccountName": ""
}
}
}
}
```
The expected behavior is as follows:
Configuration Retrieval: Cordova-electron should read the azureSignOptions present in the configuration file (e.g., build.json).
Transmission to electron-builder: These options should be passed to electron-builder, which will then use these parameters to sign the application via Azure Trusted Signing.
## Alternatives or Workarounds
Currently, developers must either manually modify electron-builder’s configuration or use external scripts to integrate Azure Trusted Signing after the build. This approach increases complexity and the risk of errors. By centralizing this configuration in cordova-electron and automatically passing it to electron-builder, the process becomes simpler and less error-prone, providing a better user experience.
Contributor guide
Research direction
Start with how cordova-electron reads the Windows section of build.json and constructs the electron-builder configuration. Trace how the proposed azureSignOptions object could be forwarded to electron-builder, then verify that a build using the documented options reaches Azure Trusted Signing without requiring external scripts.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- electron, javascript
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100