├── .gitignore
├── env.json.example
├── electron_oidc_sample_app_banner.png
├── main
    ├── app-process.js
    ├── preload.js
    ├── auth-process.js
    └── main.js
├── renderers
    ├── home.js
    ├── home.css
    ├── login.js
    ├── login.html
    ├── home.html
    ├── login.css
    ├── image2.svg
    └── image.svg
├── services
    ├── store-service.js
    └── auth-service.js
├── package.json
├── LICENSE
└── README.md


/.gitignore:
--------------------------------------------------------------------------------
1 | env.json
2 | node_modules
3 | dist 


--------------------------------------------------------------------------------
/env.json.example:
--------------------------------------------------------------------------------
1 | {
2 |     "DESCOPE_PROJECT_ID": "<Your Project ID>"
3 | }


--------------------------------------------------------------------------------
/electron_oidc_sample_app_banner.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/descope-sample-apps/electron-oidc-sample-app/HEAD/electron_oidc_sample_app_banner.png


--------------------------------------------------------------------------------
/main/app-process.js:
--------------------------------------------------------------------------------
 1 | const { BrowserWindow } = require("electron");
 2 | const path = require("path");
 3 | 
 4 | function createAppWindow() {
 5 |   let win = new BrowserWindow({
 6 |     width: 1000,
 7 |     height: 600,
 8 |     webPreferences: {
 9 |       preload: path.join(__dirname, "preload.js"),
10 |     }
11 |   });
12 | 
13 |   win.loadFile('./renderers/home.html');
14 |   // win.webContents.openDevTools(); 
15 | 
16 |   win.on('closed', () => {
17 |     win = null;
18 |   });
19 | }
20 | 
21 | module.exports = createAppWindow;


--------------------------------------------------------------------------------
/main/preload.js:
--------------------------------------------------------------------------------
 1 | const { contextBridge, ipcRenderer } = require("electron");
 2 | 
 3 | // API Definition
 4 | const electronAPI = {
 5 |   getProfile: () => ipcRenderer.invoke('auth:get-profile'),
 6 |   goAuthPage: (flowParam) => ipcRenderer.send('auth:go-auth-url', flowParam),
 7 |   logOut: () => ipcRenderer.send('auth:log-out'),
 8 |   validate: () => ipcRenderer.invoke('auth:validate'),
 9 | };
10 | 
11 | // Register the API with the contextBridge
12 | process.once("loaded", () => {
13 |   contextBridge.exposeInMainWorld('electronAPI', electronAPI);
14 | });


--------------------------------------------------------------------------------
/renderers/home.js:
--------------------------------------------------------------------------------
 1 | addEventListener('load',async  () =>{
 2 |   const valid = await window.electronAPI.validate(); // Validates Token on Refresh 
 3 |   if(valid){
 4 |   const profile = await window.electronAPI.getProfile(); 
 5 |   document.getElementById('picture').src = profile.picture;
 6 |   document.getElementById('name').innerText = profile.name;
 7 |   document.getElementById('success').innerText = 'You successfully used OpenID Connect and OAuth 2.0 to authenticate.';
 8 |   }
 9 | });
10 | 
11 | document.getElementById('logout').onclick = () => {
12 |   window.electronAPI.logOut();
13 | };
14 | 


--------------------------------------------------------------------------------
/renderers/home.css:
--------------------------------------------------------------------------------
 1 | body {
 2 |     padding-top: 70px;
 3 |     padding-bottom: 30px;
 4 |   }
 5 |   
 6 |   div.profile {
 7 |     display: grid;
 8 |     grid-template-columns: 1fr auto auto auto;
 9 |     align-items: start;
10 |     width: 100%;
11 |   }
12 |   
13 |   div.profile span {
14 |     display: inline-block;
15 |     align-self: center;
16 |     color: #ccc;
17 |     margin-left: 10px;
18 |     margin-right: 25px;
19 |   }
20 |   
21 |   div.profile img {
22 |     width: 30px;
23 |     border-radius: 50%;
24 |     align-self: center;
25 |   }
26 |   
27 |   div#message {
28 |     display: none;
29 |   }


--------------------------------------------------------------------------------
/services/store-service.js:
--------------------------------------------------------------------------------
 1 | const { safeStorage } = require("electron");
 2 | const settings = require("electron-settings");
 3 | 
 4 | async function storeToken(token_name, token) {
 5 |     const encrypted_token = safeStorage.encryptString(token);
 6 |     await settings.set(token_name, encrypted_token);
 7 | }
 8 | 
 9 | async function retrieveToken(token_name) {
10 |     const token = await settings.get(token_name);
11 |     const decrypted_token = safeStorage.decryptString(Buffer.from(token.data));
12 |     return decrypted_token;
13 | }
14 | 
15 | module.exports = {
16 |     storeToken,
17 |     retrieveToken
18 | }


--------------------------------------------------------------------------------
/renderers/login.js:
--------------------------------------------------------------------------------
 1 | 
 2 | 
 3 | 
 4 | document.getElementById('signInButton').onclick = () => {
 5 |     try {
 6 |         window.electronAPI.goAuthPage("sign-in");
 7 | 
 8 |         if (!document.querySelector('.success-message')) {
 9 |             const message = document.createElement('p');
10 |             message.textContent = 'A browser was opened for you';
11 |             message.className = 'success-message';
12 | 
13 |             const container = document.querySelector('.container');
14 |             const footer = document.querySelector('.footer');
15 |             container.insertBefore(message, footer);
16 |         }
17 |     } catch (error) {
18 |         console.log("Error signing in :",error)
19 | 
20 |     }
21 | };


--------------------------------------------------------------------------------
/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "electron-oidc-sample-app",
 3 |   "version": "1.0.0",
 4 |   "description": "Sample Electron app showing signing up or in using browser",
 5 |   "keywords": [],
 6 |   "author": "",
 7 |   "license": "ISC",
 8 |   "main": "./main/main.js",
 9 |   "scripts": {
10 |     "dist": "electron-builder"
11 |   },
12 |   "build": {
13 |     "appId": "electron-oidc-sample-app",
14 |     "dmg": {
15 |       "title": "${productName} ${version}"
16 |     },
17 |     "linux": {
18 |       "target": [
19 |         "AppImage",
20 |         "deb"
21 |       ]
22 |     },
23 |     "win": {
24 |       "target": "NSIS",
25 |       "icon": "build/icon.ico"
26 |     }
27 |   },
28 |   "devDependencies": {
29 |     "electron": "^32.0.2",
30 |     "electron-builder": "^25.0.5"
31 |   },
32 |   "dependencies": {
33 |     "axios": "^1.7.7",
34 |     "electron-settings": "^4.0.4"
35 |   }
36 | }
37 | 


--------------------------------------------------------------------------------
/renderers/login.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 | <head>
 4 |     <meta charset="UTF-8">
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <title>Login</title>
 7 |     <link rel="stylesheet" href="login.css">
 8 | </head>
 9 | <body>
10 | 
11 |     <div class="container">
12 |         <div class="logo">
13 |             <!-- You can replace this with an actual logo image -->
14 |             <img src="image.svg" alt="Logo" width="250">
15 |         </div>
16 |         <h1>Welcome to sample-app</h1>
17 |         <div class="divider"></div> <!-- Divider Line -->
18 |         <button id="signInButton" class="sign-in">Sign in to sample-app</button>
19 |         <div class="footer">
20 |             <p>Version 95.0.0 (20240731.15435)</p>
21 |             <p>Copyright © 2024 sample-app, Inc</p>
22 |         </div>
23 |     </div>
24 | 
25 |     <script src="login.js"></script>
26 | 
27 | </body>
28 | </html>
29 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2024 Descope Sample Apps
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/main/auth-process.js:
--------------------------------------------------------------------------------
 1 | const { BrowserWindow, shell, app, dialog } = require('electron');
 2 | const authService = require('../services/auth-service');
 3 | const path = require("path");
 4 | 
 5 | let win = null;
 6 | 
 7 | function createAuthWindow() {
 8 |   destroyAuthWin();
 9 | 
10 |   win = new BrowserWindow({
11 |     width: 1000,
12 |     height: 600,
13 |     webPreferences: {
14 |       preload: path.join(__dirname, "preload.js"),
15 |       enableRemoteModule: false
16 |     }
17 |   });
18 |   
19 |   win.loadFile('./renderers/login.html');
20 |   
21 |   win.on('authenticated', () => {
22 |     destroyAuthWin();
23 |   });
24 | 
25 |   win.on('closed', () => {
26 |     win = null;
27 |   });
28 | }
29 | 
30 | async function goAuthUrl(flowParam) {
31 |   try {
32 |     const auth_url = await authService.getAuthenticationURL(flowParam);
33 |     shell.openExternal(auth_url) // Open OIDC Authorize URL in External Browser
34 |   } catch (error) {
35 |         console.error("Could not open Auth URL:", error)
36 |   }
37 | }
38 | 
39 | function destroyAuthWin() {
40 |   if (!win) return;
41 |   win.close();
42 |   win = null;
43 | }
44 | 
45 | function createLogoutWindow() {
46 |     createAuthWindow();
47 |     authService.logout()
48 |     .then()
49 | }
50 | 
51 | module.exports = {
52 |   createAuthWindow,
53 |   createLogoutWindow,
54 |   goAuthUrl
55 | };


--------------------------------------------------------------------------------
/renderers/home.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 |   <head>
 4 |     <meta charset="UTF-8" />
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 |     <meta http-equiv="X-UA-Compatible" content="ie=edge" />
 7 |     <meta http-equiv="Content-Security-Policy" content="script-src 'self'" />
 8 |     <title>sample-app</title>
 9 |     <link
10 |       rel="stylesheet"
11 |       href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css"
12 |       integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO"
13 |       crossorigin="anonymous"
14 |     />
15 |     <link rel="stylesheet" href="home.css" />
16 |   </head>
17 | 
18 |   <body>
19 |     <nav class="navbar fixed-top navbar-expand-lg navbar-dark bg-dark">
20 |       <div class="profile">   
21 |         <img src="image2.svg" alt="Logo" width="100">            
22 |         <img id="picture"/>
23 |         <span id="name"></span>
24 |         <button id="logout" class="btn">Logout</button>
25 |       </div>
26 |     </nav>
27 |     <div class="container-fluid">
28 |       <div class="row">
29 |         <div class="col-sm">
30 |           <h1>Electron App</h1>
31 |           <p>
32 |             This Electron application is secured with OpenID Connect and OAuth
33 |             2.0.
34 |           </p>
35 |         </div>
36 |       </div>
37 |       <div class="row">
38 |         <div class="col-sm">
39 |           <div id="success" class="alert alert-success"></div>
40 |           <div id="message" class="jumbotron"></div>
41 |         </div>
42 |       </div>
43 |     </div>
44 |   </body>
45 | 
46 |   <script src="home.js"></script>
47 | </html>
48 | 


--------------------------------------------------------------------------------
/renderers/login.css:
--------------------------------------------------------------------------------
 1 | body {
 2 |     margin: 0;
 3 |     padding: 0;
 4 |     display: flex;
 5 |     justify-content: center;
 6 |     align-items: center;
 7 |     height: 100vh;
 8 |     background-color: #1C1C1C;
 9 |     color: #FFFFFF;
10 |     font-family: Arial, sans-serif;
11 | }
12 | 
13 | .container {
14 |     text-align: center;
15 |     max-width: 400px;
16 |     width: 100%;
17 | }
18 | 
19 | .logo {
20 |     margin-bottom: 40px;
21 | }
22 | 
23 | h1 {
24 |     font-size: 24px;
25 |     margin-bottom: 20px; /* Reduced margin to make space for the divider */
26 | }
27 | 
28 | .divider {
29 |     width: 100%;
30 |     height: 1px;
31 |     background-color: #6c757d; /* Grey color for the divider */
32 |     margin-bottom: 20px;
33 | }
34 | 
35 | button {
36 |     width: 100%;
37 |     padding: 18px; /* Increased padding to make buttons slightly longer */
38 |     margin: 10px 0;
39 |     font-size: 16px;
40 |     border: none;
41 |     border-radius: 15px; /* Less rounded corners */
42 |     cursor: pointer;
43 |     transition: background-color 0.3s ease, color 0.3s ease, border-color 0.3s ease;
44 | }
45 | 
46 | .sign-in {
47 |     background-color: #FFFFFF;
48 |     color: #000000;
49 | }
50 | 
51 | .sign-in:hover {
52 |     background-color: #f2f2f2; /* Slightly darker on hover */
53 | }
54 | 
55 | .create-account {
56 |     background-color: #000000;
57 |     color: #FFFFFF;
58 |     border: 1px solid #FFFFFF; /* Thin white border */
59 | }
60 | 
61 | .create-account:hover {
62 |     background-color: #333333; /* Slightly lighter black on hover */
63 |     border-color: #f2f2f2; /* Slightly darker border on hover */
64 | }
65 | 
66 | .footer {
67 |     margin-top: 50px;
68 |     font-size: 12px;
69 |     color: #999999;
70 | }
71 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | <img width="1400" alt="Descope Electron OIDC Banner" src="./electron_oidc_sample_app_banner.png">
 2 | 
 3 | # Electron + Descope OIDC Sample App
 4 | 
 5 | This app showcases how to implement OIDC into any Electron application with Descope, allowing for seamless and secure authentication in your desktop app. This app is written in basic HTML, JS, and CSS, so it's great for all experience levels. 
 6 | 
 7 | ## Features
 8 | 
 9 | - **Secure Authentication**: Utilizes Descope for user authentication.
10 | - **Customizable Experience**: Easy-to-change authentication flows for quick implementation.
11 |   
12 | ## Getting Started
13 | Follow these steps to clone the repository and start using the app.
14 | 
15 | ### Prerequisites 
16 | 
17 | - An account on [Descope](https://descope.com/).
18 | 
19 | ### Clone the Repository
20 | 
21 | Start by cloning the repository to your local machine:
22 | 
23 | ```bash
24 | git clone https://github.com/descope-sample-apps/electron-oidc-sample-app.git
25 | cd electron-oidc-sample-app
26 | ```
27 | ### Configuration 
28 | 
29 | First, change `env.json.example` to `env.json`. Then add your [Descope Project ID](https://app.descope.com/settings/project) to `env.json`.
30 | 
31 | ```
32 | {
33 |     "DESCOPE_PROJECT_ID": "<Your Project ID>"
34 | }
35 | ```
36 | 
37 | Second, install packages, and build the Electron app:
38 | 
39 | ```bash
40 | npm i
41 | npm run dist
42 | ```
43 | 
44 | After the app finishes building you can open and run your application in the `dist` folder that was created. 
45 | 
46 | 
47 | ## Learn More
48 | To learn more please see the [Descope Documentation and API reference page](https://docs.descope.com/).
49 | 
50 | ## Contact Us
51 | If you need help you can [contact us](https://docs.descope.com/support/)
52 | 
53 | ## License
54 | The Electron OIDC Sample App is licensed for use under the terms and conditions of the MIT license Agreement.
55 | 


--------------------------------------------------------------------------------
/main/main.js:
--------------------------------------------------------------------------------
 1 | const { app, ipcMain, BrowserWindow } = require("electron");
 2 | const path = require("node:path");
 3 | const { createAuthWindow, createLogoutWindow, goAuthUrl} = require("./auth-process");
 4 | const createAppWindow = require("./app-process");
 5 | const authService = require("../services/auth-service");
 6 | 
 7 | if (process.defaultApp) {
 8 |   // Setup the custom protocol
 9 |   if (process.argv.length >= 2) {
10 |     app.setAsDefaultProtocolClient("electron", process.execPath, [
11 |       path.resolve(process.argv[1]),
12 |     ]);
13 |   }
14 | } else {
15 |   app.setAsDefaultProtocolClient("electron");
16 | }
17 | 
18 | async function showWindow() {
19 |   // Which window to show based on wether valid refresh token exists
20 |   try {
21 |     await authService.refreshTokens();
22 |     createAppWindow();
23 |   } catch (err) {
24 |     createAuthWindow();
25 |   }
26 | }
27 | 
28 | app.on("ready", () => {
29 |   // Handle IPC messages from the renderer process.
30 |   ipcMain.handle("auth:get-profile", authService.getProfile);
31 |   ipcMain.on("auth:go-auth-url", async (event, flowParam) => {
32 |     await goAuthUrl(flowParam);
33 |   });
34 |   ipcMain.handle("auth:validate", async () => {
35 |     const valid = await authService.validateSession();
36 |     if (!valid) {
37 |       BrowserWindow.getAllWindows().forEach((window) => window.close());
38 |       createLogoutWindow();
39 |       createAuthWindow();
40 |       return false;
41 |     } else {
42 |       return true;
43 |     }
44 |   });
45 |   ipcMain.on("auth:log-out", () => {
46 |     BrowserWindow.getAllWindows().forEach((window) => window.close());
47 |     createLogoutWindow();
48 |   });
49 |   // Show window after all listeners have been set and app is ready
50 |   showWindow();
51 | });
52 | 
53 | app.on("open-url", (event, url) => {
54 |   // Listens for app protocol link to be opened and gets custom protocol URL
55 |   authService.loadTokens(url)
56 |     .then(() => {
57 |       BrowserWindow.getAllWindows().forEach((window) => window.close());
58 |       createAppWindow();
59 |     })
60 |     .catch((error) => {
61 |       console.error("Error loading tokens:", error);
62 |     });
63 | });
64 | 
65 | // Quit when all windows are closed.
66 | app.on("window-all-closed", () => {
67 |   app.quit();
68 | });
69 | 


--------------------------------------------------------------------------------
/renderers/image2.svg:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="utf-8"?>
 2 | <!-- Generator: Adobe Illustrator 26.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
 3 | <svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
 4 | 	 width="194.7px" height="215.2px" viewBox="0 0 194.7 215.2" style="enable-background:new 0 0 194.7 215.2;" xml:space="preserve"
 5 | 	>
 6 | <style type="text/css">
 7 | 	.st0{fill:url(#SVGID_1_);}
 8 | 	.st1{fill:url(#SVGID_00000004519561486438896460000001266960168497785022_);}
 9 | 	.st2{fill:url(#SVGID_00000049204468076180615810000015113731544435055266_);}
10 | 	.st3{fill:url(#SVGID_00000116951257355544416270000003794629356563808950_);}
11 | </style>
12 | <g>
13 | 	<linearGradient id="SVGID_1_" gradientUnits="userSpaceOnUse" x1="68.3919" y1="222.1531" x2="185.0265" y2="41.0264">
14 | 		<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
15 | 		<stop  offset="0.4173" style="stop-color:#00FFFF"/>
16 | 		<stop  offset="0.9952" style="stop-color:#6FF12D"/>
17 | 	</linearGradient>
18 | 	<path class="st0" d="M129.8,174.7c7.6-1.6,14-4.8,19.2-9.7c7.7-7.3,8.8-17.1,8.8-29.4V80.7c0-12.3-1.1-22.1-8.8-29.4
19 | 		c-5.2-4.9-11.6-8.1-19.2-9.7V15.4c12.5,1.8,22.9,6.5,31,14.2c10.6,10,19.9,23.5,19.9,40.5v75c0,17-9.3,30.5-19.9,40.5
20 | 		c-8.1,7.7-18.5,12.4-31,14.2V174.7z"/>
21 | 	
22 | 		<linearGradient id="SVGID_00000040544740507634666800000017273841385603649669_" gradientUnits="userSpaceOnUse" x1="5.037" y1="181.3564" x2="121.6716" y2="0.2297">
23 | 		<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
24 | 		<stop  offset="0.4173" style="stop-color:#00FFFF"/>
25 | 		<stop  offset="0.9952" style="stop-color:#6FF12D"/>
26 | 	</linearGradient>
27 | 	<path style="fill:url(#SVGID_00000040544740507634666800000017273841385603649669_);" d="M33.9,29.6c8.1-7.7,18.5-12.4,31-14.2
28 | 		v26.3c-7.6,1.6-14,4.8-19.2,9.7c-7.7,7.3-8.8,17-8.8,29.2v55.1c0,12.3,1.1,22.1,8.8,29.4c5.2,4.9,11.6,8.1,19.2,9.7v25.1
29 | 		c-12.5-1.8-22.9-6.5-31-14.2c-10.6-10-19.9-23.5-19.9-40.5V69.8C13.9,53,23.2,39.6,33.9,29.6z"/>
30 | 	<g>
31 | 		
32 | 			<linearGradient id="SVGID_00000060713993868866928010000000698955780952733088_" gradientUnits="userSpaceOnUse" x1="22.0278" y1="192.2974" x2="138.6624" y2="11.1707">
33 | 			<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
34 | 			<stop  offset="0.4173" style="stop-color:#00FFFF"/>
35 | 			<stop  offset="0.9952" style="stop-color:#6FF12D"/>
36 | 		</linearGradient>
37 | 		<path style="fill:url(#SVGID_00000060713993868866928010000000698955780952733088_);" d="M120.2,87.8l8.5-13.7l-17.8-9.4
38 | 			l-7.5,14.2c-1.1,2.1-3.1,3.3-5.5,3.3c-2.3,0-4.4-1.2-5.5-3.3L85,64.7L67.3,74l12.3,19.7L120.2,87.8z"/>
39 | 		
40 | 			<linearGradient id="SVGID_00000115475840050352750520000000840372054167564949_" gradientUnits="userSpaceOnUse" x1="37.9651" y1="202.5601" x2="154.5998" y2="21.4334">
41 | 			<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
42 | 			<stop  offset="0.4173" style="stop-color:#00FFFF"/>
43 | 			<stop  offset="0.9952" style="stop-color:#6FF12D"/>
44 | 		</linearGradient>
45 | 		<path style="fill:url(#SVGID_00000115475840050352750520000000840372054167564949_);" d="M142.4,97.7l-87.8,0.8v17.7l27.5-0.1
46 | 			l-14.8,23.8l17.7,9.3l7.5-14.2c1.1-2.1,3.1-3.3,5.5-3.3c2.3,0,4.4,1.2,5.5,3.3l7.5,14.2l17.8-9.4l-12-19.3L93.7,116l48.7-0.2V97.7
47 | 			z"/>
48 | 	</g>
49 | </g>
50 | </svg>
51 | 


--------------------------------------------------------------------------------
/renderers/image.svg:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="utf-8"?>
 2 | <!-- Generator: Adobe Illustrator 26.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
 3 | <svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
 4 | 	 width="435.5px" height="113.8px" viewBox="0 0 435.5 113.8" style="enable-background:new 0 0 435.5 113.8;" xml:space="preserve"
 5 | 	>
 6 | <style type="text/css">
 7 | 	.st0{fill:url(#SVGID_1_);}
 8 | 	.st1{fill:url(#SVGID_00000060714236283336436740000012165199764159594676_);}
 9 | 	.st2{fill:#FFFFFF;}
10 | 	.st3{fill:url(#SVGID_00000117676273289031915570000007337032735197337243_);}
11 | 	.st4{fill:url(#SVGID_00000034783717221445088740000004717251064617269158_);}
12 | </style>
13 | <linearGradient id="SVGID_1_" gradientUnits="userSpaceOnUse" x1="264.2229" y1="93.8124" x2="301.8265" y2="35.4162">
14 | 	<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
15 | 	<stop  offset="0.4173" style="stop-color:#00FFFF"/>
16 | 	<stop  offset="0.9952" style="stop-color:#6FF12D"/>
17 | </linearGradient>
18 | <path class="st0" d="M284,78.5c2.5-0.5,4.5-1.6,6.2-3.1c2.5-2.3,2.8-5.5,2.8-9.5V48.2c0-4-0.4-7.1-2.8-9.5c-1.7-1.6-3.7-2.6-6.2-3.1
19 | 	v-8.5c4,0.6,7.4,2.1,10,4.6c3.4,3.2,6.4,7.6,6.4,13.1V69c0,5.5-3,9.8-6.4,13.1c-2.6,2.5-6,4-10,4.6V78.5z"/>
20 | <linearGradient id="SVGID_00000175323035056965818540000002857480534814513585_" gradientUnits="userSpaceOnUse" x1="243.7969" y1="80.6594" x2="281.4005" y2="22.2632">
21 | 	<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
22 | 	<stop  offset="0.4173" style="stop-color:#00FFFF"/>
23 | 	<stop  offset="0.9952" style="stop-color:#6FF12D"/>
24 | </linearGradient>
25 | <path style="fill:url(#SVGID_00000175323035056965818540000002857480534814513585_);" d="M253.1,31.7c2.6-2.5,6-4,10-4.6v8.5
26 | 	c-2.5,0.5-4.5,1.6-6.2,3.1c-2.5,2.3-2.8,5.5-2.8,9.4v17.8c0,4,0.4,7.1,2.8,9.5c1.7,1.6,3.7,2.6,6.2,3.1v8.1c-4-0.6-7.4-2.1-10-4.6
27 | 	c-3.4-3.2-6.4-7.6-6.4-13.1V44.7C246.7,39.3,249.7,35,253.1,31.7z"/>
28 | <g>
29 | 	<g>
30 | 		<g>
31 | 			<path class="st2" d="M29.6,86.5c-5.7,0-10.2-1.9-13.7-5.7c-3.5-3.8-5.2-8.8-5.2-15V48.1c0-6.2,1.7-11.3,5.2-15.1
32 | 				c3.5-3.8,8-5.7,13.7-5.7c3.7,0,6.9,0.8,9.6,2.3c2.7,1.6,4.7,3.7,6,6.5h0.3V9.6h5.2v75.9h-5.2v-7.8h-0.3c-1.2,2.8-3.2,4.9-6,6.5
33 | 				C36.5,85.8,33.3,86.5,29.6,86.5z M30.7,82.1c4.7,0,8.3-1.4,10.9-4.3c2.6-2.9,3.9-6.8,3.9-11.9V48.1c0-5.1-1.3-9.1-3.9-12
34 | 				c-2.6-2.9-6.2-4.3-10.9-4.3c-4.6,0-8.2,1.4-10.8,4.3C17.3,39,16,43,16,48.1v17.8c0,5.1,1.3,9,3.9,11.9S26,82.1,30.7,82.1z"/>
35 | 			<path class="st2" d="M86.3,86.5c-6.4,0-11.3-1.9-14.9-5.7c-3.6-3.8-5.4-8.8-5.4-15.1V48.1c0-6.3,1.8-11.3,5.4-15.1
36 | 				c3.6-3.8,8.6-5.7,14.9-5.7s11.2,1.9,14.8,5.7c3.6,3.8,5.3,8.8,5.3,15.1V58H71.2v7.8c0,5,1.3,8.9,3.9,11.8
37 | 				c2.6,2.9,6.4,4.4,11.2,4.4c3.9,0,7.1-0.9,9.6-2.8c2.5-1.9,4.3-4.4,5.2-7.7h5.2c-1,4.6-3.3,8.3-6.8,11
38 | 				C96,85.2,91.6,86.5,86.3,86.5z M71.2,53.5h30v-5.4c0-5-1.3-8.9-3.9-11.9c-2.6-2.9-6.3-4.4-11-4.4c-4.8,0-8.6,1.4-11.2,4.3
39 | 				c-2.6,2.9-3.9,6.8-3.9,11.9V53.5z"/>
40 | 			<path class="st2" d="M143.2,86.4c-4.4,0-8.2-0.7-11.5-2c-3.3-1.4-5.9-3.3-7.7-5.8c-1.8-2.5-2.7-5.4-2.7-8.8h13.1
41 | 				c0,2,0.8,3.6,2.4,4.6c1.6,1.1,3.8,1.6,6.6,1.6h4.5c3.2,0,5.7-0.6,7.3-1.8c1.6-1.2,2.4-2.8,2.4-4.9c0-4-2.9-6.4-8.8-7.3l-8-1
42 | 				c-12-1.7-17.9-7.4-17.9-17.1c0-5.4,1.8-9.5,5.4-12.3c3.6-2.8,8.9-4.2,15.8-4.2h3.9c6.4,0,11.6,1.4,15.5,4.3
43 | 				c3.9,2.9,5.9,6.7,5.9,11.4h-13.1c0-1.7-0.7-3-2.2-3.9c-1.5-0.9-3.5-1.4-6.2-1.4h-3.9c-5.7,0-8.5,2-8.5,6.1c0,3.5,2.5,5.7,7.6,6.4
44 | 				l8.1,1.2c6.4,0.9,11.2,2.8,14.3,5.6c3.1,2.8,4.7,6.8,4.7,11.8c0,5.5-1.9,9.7-5.6,12.8c-3.8,3-9.3,4.6-16.6,4.6H143.2z"/>
45 | 			<path class="st2" d="M207.9,86.5c-4.8,0-9.1-0.9-12.7-2.8c-3.6-1.8-6.4-4.4-8.4-7.8c-2-3.4-3-7.3-3-11.9V49.7c0-4.6,1-8.5,3-11.9
46 | 				c2-3.4,4.8-6,8.4-7.8c3.6-1.8,7.9-2.8,12.7-2.8c7.2,0,12.9,1.9,17.2,5.6c4.3,3.7,6.5,8.8,6.7,15.1h-12.6c-0.2-3-1.3-5.3-3.4-6.9
47 | 				c-2-1.6-4.7-2.4-7.9-2.4c-3.5,0-6.2,1-8.2,2.9c-2,1.9-3,4.6-3,8.2v14.4c0,3.5,1,6.3,3,8.2c2,1.9,4.7,2.9,8.2,2.9
48 | 				c3.3,0,6-0.8,8-2.4c2-1.6,3.1-3.9,3.3-6.9h12.6c-0.2,6.4-2.5,11.4-6.7,15.1C220.8,84.7,215.1,86.5,207.9,86.5z"/>
49 | 			<path class="st2" d="M315.6,104.2V28.3h12.6v10.3h0.2c1-3.6,2.9-6.4,5.5-8.4c2.7-2,6-3,9.9-3c5.6,0,10.1,2,13.5,5.9
50 | 				c3.4,4,5.1,9.2,5.1,15.9v15.5c0,6.7-1.7,12.1-5.1,16c-3.4,3.9-7.9,5.9-13.5,5.9c-3.9,0-7.1-1-9.8-3c-2.7-2-4.6-4.8-5.6-8.4h-0.2
51 | 				l0.3,13v16H315.6z M339.1,75.3c3.3,0,5.9-1,7.7-2.9c1.8-1.9,2.7-4.7,2.7-8.3V49.7c0-3.6-0.9-6.4-2.7-8.3
52 | 				c-1.8-1.9-4.4-2.9-7.7-2.9s-5.9,1-7.8,3c-1.9,2-2.8,4.8-2.8,8.5v13.7c0,3.7,0.9,6.5,2.8,8.5C333.2,74.3,335.8,75.3,339.1,75.3z"
53 | 				/>
54 | 			<path class="st2" d="M401,86.5c-4.8,0-9.1-0.9-12.6-2.8c-3.6-1.9-6.4-4.5-8.3-7.8c-2-3.4-3-7.3-3-11.8V49.7c0-4.5,1-8.4,3-11.8
55 | 				c2-3.4,4.7-6,8.3-7.8c3.6-1.9,7.8-2.8,12.6-2.8c4.8,0,8.9,0.9,12.5,2.8c3.6,1.9,6.3,4.5,8.3,7.8s3,7.3,3,11.8V60h-35.1v4.1
56 | 				c0,8.1,3.8,12.2,11.5,12.2c5.9,0,9.4-2,10.5-5.9h12.7c-1,4.9-3.6,8.9-7.8,11.8C412.2,85.1,407.1,86.5,401,86.5z M389.6,49.7v2.2
57 | 				l22.6-0.1v-2.2c0-3.9-0.9-7-2.8-9.1c-1.9-2.1-4.7-3.2-8.4-3.2c-3.8,0-6.6,1.1-8.5,3.2C390.5,42.7,389.6,45.8,389.6,49.7z"/>
58 | 		</g>
59 | 	</g>
60 | </g>
61 | <g>
62 | 	
63 | 		<linearGradient id="SVGID_00000103947595425660589550000005526308025592261518_" gradientUnits="userSpaceOnUse" x1="249.2748" y1="84.1868" x2="286.8784" y2="25.7906">
64 | 		<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
65 | 		<stop  offset="0.4173" style="stop-color:#00FFFF"/>
66 | 		<stop  offset="0.9952" style="stop-color:#6FF12D"/>
67 | 	</linearGradient>
68 | 	<path style="fill:url(#SVGID_00000103947595425660589550000005526308025592261518_);" d="M280.9,50.5l2.8-4.4l-5.7-3l-2.4,4.6
69 | 		c-0.4,0.7-1,1.1-1.8,1.1c-0.8,0-1.4-0.4-1.8-1.1l-2.4-4.6l-5.7,3l4,6.3L280.9,50.5z"/>
70 | 	
71 | 		<linearGradient id="SVGID_00000078009363152260107870000015150860037042020742_" gradientUnits="userSpaceOnUse" x1="254.4131" y1="87.4956" x2="292.0167" y2="29.0994">
72 | 		<stop  offset="1.481436e-07" style="stop-color:#0083B5"/>
73 | 		<stop  offset="0.4173" style="stop-color:#00FFFF"/>
74 | 		<stop  offset="0.9952" style="stop-color:#6FF12D"/>
75 | 	</linearGradient>
76 | 	<path style="fill:url(#SVGID_00000078009363152260107870000015150860037042020742_);" d="M288.1,53.7l-28.3,0.2v5.7l8.9,0l-4.8,7.7
77 | 		l5.7,3l2.4-4.6c0.4-0.7,1-1.1,1.8-1.1c0.8,0,1.4,0.4,1.8,1.1l2.4,4.6l5.7-3l-3.9-6.2l-7.4-1.4l15.7-0.1V53.7z"/>
78 | </g>
79 | </svg>
80 | 


--------------------------------------------------------------------------------
/services/auth-service.js:
--------------------------------------------------------------------------------
  1 | const axios = require("axios");
  2 | const url = require("url");
  3 | const {storeToken, retrieveToken} = require("./store-service")
  4 | const env = require("../env");
  5 | 
  6 | const { DESCOPE_PROJECT_ID } = env;
  7 | 
  8 | const redirectUri = "electron://auth/"; // Uses protocol after authenticating
  9 | 
 10 | let accessToken = null;
 11 | let refreshToken = null;
 12 | let codeVerifier = null;
 13 | 
 14 | const getAuthenticationURL = async (flowParam) => {
 15 |   codeVerifier = generateCodeVerifier();
 16 |   const codeChallenge = await generateCodeChallenge(codeVerifier);
 17 |   let baseURL = "api.descope.com";
 18 |   if (DESCOPE_PROJECT_ID && DESCOPE_PROJECT_ID.length >= 32) {
 19 |     const localURL = DESCOPE_PROJECT_ID.substring(1, 5);
 20 |     baseURL = [baseURL.slice(0, 4), localURL, ".", baseURL.slice(4)].join("");
 21 |   }
 22 |   const authUrl = `https://${baseURL}/oauth2/v1/authorize?response_type=code&client_id=${DESCOPE_PROJECT_ID}&redirect_uri=${redirectUri}&scope=openid&code_challenge=${codeChallenge}&code_challenge_method=S256&state=${codeVerifier}&login_hint=${flowParam}`;
 23 |   return authUrl;
 24 | };
 25 | 
 26 | function generateCodeVerifier() {
 27 |   let result = "";
 28 |   const characters =
 29 |     "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
 30 |   const charactersLength = characters.length;
 31 | 
 32 |   for (let i = 0; i < 128; i++) {
 33 |     result += characters.charAt(Math.floor(Math.random() * charactersLength));
 34 |   }
 35 |   return result;
 36 | }
 37 | 
 38 | function generateCodeChallenge(verifier) {
 39 |   return crypto.subtle
 40 |     .digest("SHA-256", new TextEncoder().encode(verifier))
 41 |     .then((arrayBuffer) => {
 42 |       const base64Url = btoa(
 43 |         String.fromCharCode(...new Uint8Array(arrayBuffer))
 44 |       )
 45 |         .replace(/=/g, "")
 46 |         .replace(/\+/g, "-")
 47 |         .replace(/\//g, "_");
 48 |       return base64Url;
 49 |     });
 50 | }
 51 | 
 52 | async function loadTokens(callbackURL) {
 53 |   const urlParts = url.parse(callbackURL, true);
 54 |   const query = urlParts.query;
 55 |   const state = urlParts.state;
 56 | 
 57 |   let baseURL = "api.descope.com";
 58 | 
 59 |   const exchangeOptions = {
 60 |     grant_type: "authorization_code",
 61 |     client_id: DESCOPE_PROJECT_ID,
 62 |     redirect_uri: redirectUri,
 63 |     code: query.code,
 64 |     code_verifier: codeVerifier,
 65 |   };
 66 | 
 67 |   const options = {
 68 |     method: "POST",
 69 |     url: `https://${baseURL}/oauth2/v1/token`,
 70 |     headers: {
 71 |       "content-type": "application/json",
 72 |     },
 73 |     data: JSON.stringify(exchangeOptions),
 74 |   };
 75 | 
 76 |   try {
 77 |     const response = await axios(options);
 78 | 
 79 |     accessToken = response.data.access_token;
 80 |     id_token = response.data.id_token;
 81 |     refreshToken = response.data.refresh_token;
 82 | 
 83 |     await storeToken("refresh", refreshToken);
 84 |     await storeToken("access", accessToken);
 85 |   } catch (error) {
 86 |     console.error(
 87 |       "Error during token exchange:",
 88 |       error.response.data,
 89 |       "\n",
 90 |       error.config
 91 |     );
 92 |     await logout();
 93 |     throw error;
 94 |   }
 95 | }
 96 | 
 97 | async function refreshTokens() {
 98 |   const refreshToken = await retrieveToken("refresh");
 99 | 
100 |   if (refreshToken) {
101 |     const refreshOptions = {
102 |       method: "POST",
103 |       url: `https://api.descope.com/v1/auth/refresh`,
104 |       headers: {
105 |         "content-type": "application/json",
106 |         Authorization: `Bearer ${DESCOPE_PROJECT_ID}:${refreshToken}`,
107 |       },
108 |       data: {},
109 |     };
110 | 
111 |     try {
112 |       const response = await axios(refreshOptions);
113 |       accessToken = response.data.sessionJwt;
114 |       await storeToken("access", accessToken);
115 |     } catch (error) {
116 |       console.error(
117 |         "Error during token refresh:",
118 |         error.data.response,
119 |         error.config
120 |       );
121 |       await logout();
122 |       throw error;
123 |     }
124 |   } else {
125 |     console.error("No available refresh token for refreshing session token.");
126 |     throw new Error("No available refresh token.");
127 |   }
128 | }
129 | 
130 | async function validateSession() {
131 |   let baseURL = "api.descope.com";
132 |   const exchangeOptions = {};
133 | 
134 |   const options = {
135 |     method: "POST",
136 |     url: `https://${baseURL}/v1/auth/validate`,
137 |     headers: {
138 |       "content-type": "application/json",
139 |       Authorization: `Bearer ${DESCOPE_PROJECT_ID}:${accessToken}`,
140 |     },
141 |     data: JSON.stringify(exchangeOptions),
142 |   };
143 | 
144 |   try {
145 |     const response = await axios(options);
146 | 
147 |     if (response.status === 200) {
148 |       return true;
149 |     }
150 |   } catch (error) {
151 |     console.warn("Session validation failed. Attempting to refresh tokens...");
152 |     try {
153 |       await refreshTokens();
154 |       return true;
155 |     } catch (refreshError) {
156 |       console.error(
157 |         "Token refresh failed during session validation:",
158 |         error.response.data,
159 |         error.config
160 |       );
161 |       return false;
162 |     }
163 |   }
164 | 
165 |   return false;
166 | }
167 | 
168 | async function getProfile() {
169 |   refreshToken = await retrieveToken("refresh");
170 | 
171 |   if (refreshToken) {
172 |     const options = {
173 |       method: "GET",
174 |       url: `https://api.descope.com/v1/auth/me`,
175 |       headers: {
176 |         Authorization: `Bearer ${DESCOPE_PROJECT_ID}:${refreshToken}`,
177 |       },
178 |     };
179 | 
180 |     try {
181 |       const response = await axios(options);
182 |       const name = response.data.name;
183 |       const picture = response.data.picture;
184 |       const profileInfo = { name: name, picture: picture };
185 |       return profileInfo;
186 |     } catch (error) {
187 |       console.error(
188 |         "Error during get profile axios:",
189 |         error.response.data,
190 |         error.config
191 |       );
192 |       return null;
193 |     }
194 |   } else {
195 |     console.error("No available refresh token in getProfile.");
196 |   }
197 | }
198 | 
199 | async function logout() {
200 |   refreshToken = await retrieveToken("refresh");
201 | 
202 |   if (refreshToken) {
203 |     let baseURL = "api.descope.com";
204 |     const exchangeOptions = {};
205 | 
206 |     const options = {
207 |       method: "POST",
208 |       url: `https://${baseURL}/v1/auth/logoutall`,
209 |       headers: {
210 |         "content-type": "application/json",
211 |         Authorization: `Bearer ${DESCOPE_PROJECT_ID}:${refreshToken}`,
212 |       },
213 |       data: JSON.stringify(exchangeOptions),
214 |     };
215 | 
216 |     try {
217 |       await axios(options);
218 |     } catch (error) {
219 |       console.error(
220 |         "Logout failed, possibly due to invalid or missing refresh token:",
221 |         error.response.data,
222 |         error.config
223 |       );
224 |     }
225 |   }
226 | 
227 |   await storeToken("access", "");
228 |   await storeToken("refresh", "");
229 | 
230 |   accessToken = null;
231 |   refreshToken = null;
232 | }
233 | 
234 | module.exports = {
235 |   getAuthenticationURL,
236 |   loadTokens,
237 |   refreshTokens,
238 |   validateSession,
239 |   getProfile,
240 |   logout,
241 | };
242 | 


--------------------------------------------------------------------------------