
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@microsoft/mgt-electron-provider
Advanced tools
The Microsoft Graph Toolkit Electron Provider
The Microsoft Graph Toolkit (mgt) library is a collection of authentication providers and UI components powered by Microsoft Graph.
The @microsoft/mgt-electron-provider
package exposes the ElectronAuthenticator
and ElectronProvider
classes which use MSAL node to sign in users and acquire tokens to use with Microsoft Graph.
Install the packages
npm install @microsoft/mgt-element @microsoft/mgt-electron-provider
Initialize the provider in your renderer process (Front end, eg. renderer.ts)
import {Providers} from '@microsoft/mgt-element';
import {ElectronProvider} from '@microsoft/mgt-electron-provider/dist/Provider';
// initialize the auth provider globally
Providers.globalProvider = new ElectronProvider();
Initialize ElectronAuthenticator in Main.ts (Back end)
import { ElectronAuthenticator, MsalElectronConfig } from '@microsoft/mgt-electron-provider/dist/Authenticator';
...
let mainWindow = new BrowserWindow({
width: 800,
height: 800,
webPreferences: {
nodeIntegration: true //Make sure this is true
}
});
let config: MsalElectronConfig = {
clientId: '<your_client_id>',
authority: '<your_authority_url>', //optional, uses common authority by default
mainWindow: mainWindow, //This is the BrowserWindow instance that requires authentication
scopes: [
'user.read',
],
};
ElectronAuthenticator.initialize(config);
Note : Make sure nodeIntegration
is set to true
under webPreferences
while creating a new BrowserWindow instance.
See provider usage documentation to learn about how to use the providers with the mgt components, to sign in/sign out, get access tokens, call Microsoft Graph, and more. See Electron provider documentation.
MSAL Node supports an in-memory cache by default and provides the ICachePlugin interface to perform cache serialization, but does not provide a default way of storing the token cache to disk. If you need persistent cache storage to enable silent log-ins or cross-platform caching, we recommend using the default implementation provided by MSAL Node here. You can import this plugin, and pass the instance of the cache plugin while initializing ElectronAuthenticator.
let config: MsalElectronConfig = {
...
cachePlugin: new PersistenceCachePlugin(filePersistence)
};
For more details on how to implement this, refer to the sample for this extension here.
FAQs
The Microsoft Graph Toolkit Electron Provider
The npm package @microsoft/mgt-electron-provider receives a total of 85 weekly downloads. As such, @microsoft/mgt-electron-provider popularity was classified as not popular.
We found that @microsoft/mgt-electron-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.