cordova-electron icon indicating copy to clipboard operation
cordova-electron copied to clipboard

Add Azure Trusted Signing Support

Open OPSnake opened this issue 11 months ago • 0 comments

Feature Request

Motivation Behind Feature

To improve security and simplify the build workflow, it is essential to integrate support for Azure Trusted Signing into cordova-electron. Since electron-builder already supports this feature, cordova-electron should simply pass the configuration options to electron-builder. This will allow developers to easily enable Azure signing without having to manage additional configurations or external scripts

Feature Description

The goal is to add a new configuration section in build.json, for example azureSignOptions, which will be recognized by cordova-electron and passed directly to electron-builder during the build process. The proposed configuration is as follows:

{
  "electron": {
    "windows": {
      "azureSignOptions": {
        "endpoint": "<Trusted Signing account endpoint>",
        "publisherName": "<Publisher name>",
        "certificateProfileName": "<Certificate profile name>",
        "codeSigningAccountName": "<Trusted Signing account name>"
      }
    }
  }
}

The expected behavior is as follows:

Configuration Retrieval: Cordova-electron should read the azureSignOptions present in the configuration file (e.g., build.json). Transmission to electron-builder: These options should be passed to electron-builder, which will then use these parameters to sign the application via Azure Trusted Signing.

Alternatives or Workarounds

Currently, developers must either manually modify electron-builder’s configuration or use external scripts to integrate Azure Trusted Signing after the build. This approach increases complexity and the risk of errors. By centralizing this configuration in cordova-electron and automatically passing it to electron-builder, the process becomes simpler and less error-prone, providing a better user experience.

OPSnake avatar Feb 19 '25 22:02 OPSnake