Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@microsoft/mgt-electron-provider
Advanced tools
The Microsoft Graph Toolkit Electron Provider
The Microsoft Graph Toolkit (mgt) library is a collection of authentication providers and UI components powered by Microsoft Graph.
The @microsoft/mgt-electron-provider
package exposes the ElectronAuthenticator
and ElectronProvider
classes which use MSAL node to sign in users and acquire tokens to use with Microsoft Graph.
Install the packages
npm install @microsoft/mgt-element @microsoft/mgt-electron-provider
Initialize the provider in your renderer process (Front end, eg. renderer.ts)
import {Providers} from '@microsoft/mgt-element';
import {ElectronProvider} from '@microsoft/mgt-electron-provider/dist/Provider';
// initialize the auth provider globally
Providers.globalProvider = new ElectronProvider();
Initialize ElectronAuthenticator in Main.ts (Back end)
import { ElectronAuthenticator, MsalElectronConfig } from '@microsoft/mgt-electron-provider/dist/Authenticator';
...
let mainWindow = new BrowserWindow({
width: 800,
height: 800,
webPreferences: {
nodeIntegration: true //Make sure this is true
}
});
let config: MsalElectronConfig = {
clientId: '<your_client_id>',
authority: '<your_authority_url>', //optional, uses common authority by default
mainWindow: mainWindow, //This is the BrowserWindow instance that requires authentication
scopes: [
'user.read',
],
};
ElectronAuthenticator.initialize(config);
Note : Make sure nodeIntegration
is set to true
under webPreferences
while creating a new BrowserWindow instance.
See provider usage documentation to learn about how to use the providers with the mgt components, to sign in/sign out, get access tokens, call Microsoft Graph, and more. See Electron provider documentation.
MSAL Node supports an in-memory cache by default and provides the ICachePlugin interface to perform cache serialization, but does not provide a default way of storing the token cache to disk. If you need persistent cache storage to enable silent log-ins or cross-platform caching, we recommend using the default implementation provided by MSAL Node here. You can import this plugin, and pass the instance of the cache plugin while initializing ElectronAuthenticator.
let config: MsalElectronConfig = {
...
cachePlugin: new PersistenceCachePlugin(filePersistence)
};
For more details on how to implement this, refer to the sample for this extension here.
FAQs
The Microsoft Graph Toolkit Electron Provider
The npm package @microsoft/mgt-electron-provider receives a total of 41 weekly downloads. As such, @microsoft/mgt-electron-provider popularity was classified as not popular.
We found that @microsoft/mgt-electron-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.