
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@electron-utils/electron-oauth-github
Advanced tools
Electron helper for OAuth authorization to Github using web application flow strategy.
This package, helps with OAuth authorization from Github. It uses web application flow described here: https://docs.github.com/en/free-pro-team@latest/developers/apps/authorizing-oauth-apps#web-application-flow
Package is exposing 2 functions:
module.exports = {
getAuthorizationCode,
getAccessToken
}
To obtain Access Token, (which is the reason of this package), you need to use only getAccessToken
function. This function uses getAuthorizationCode underneath. When you obtain access token, you can than make request to Github Rest API with it.
npm install @electron-utils/electron-oauth-github
yarn add @electron-utils/electron-oauth-github
const {getAccessToken} = require('@electron-utils/electron-oauth-github')
try {
const {access_token} = await getAccessToken({
clientId: "your github app client id",
clientSecret: "your github app client secret",
redirectUri: "your rediretion uri",
scope: "scope of permissions you want to give"
})
mainWindow.webContents.send('accessToken', access_token) // here, we just send access token to frontend part of electron app (to mainWindow)
} catch (error) {
console.log("error happened")
console.log(error)
}
git clone git@github.com:marckraw/electron-oauth-github.git
yarn link
To use dev version, with you Electron application.
There is no, build / bundling process for it, for now. When merged to master via PR, github action is fired, which deploy package to npm global registry.
You should consider this as a testing/preview package. I needed this for my personal projects, so i've built it and publish it :) If there will be enough interest in it, we can try to make it fully legit. Feel free to create issues, and also pull request.
FAQs
Electron helper for OAuth authorization to Github using web application flow strategy.
We found that @electron-utils/electron-oauth-github demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.