Page MenuHome GnuPG

Review JS library dependencies
Open, NormalPublic

Description

The plugin code running in the browser currently requires (at top level)

It may be quite possible to get rid of vue and its dependencies, to reduce the amount of library code we need to trust. Review whether that is worth while.

Related Objects

Event Timeline

tfry mentioned this in Unknown Object (Maniphest Task).Mon, Jan 26, 9:37 AM

Removal of vue: work/tfry/reduce_js_dependencies ; this branch is currently still a bit messy/buggy, but considered to be on par with the functionality master, in theory.

This brings down the size of the minimized JS from ~350kB to ~285kB, which I have to admit is less dramatic than I had hoped for, but a significant reduction, nonetheless.

The vast majority of what remains is MSAL. I do wonder, whether we cannot remove that, too, after all: I stumbled over this: https://learn.microsoft.com/en-us/javascript/api/office/office.auth?view=outlook-js-1.15&preserve-view=true#office-office-auth-getaccesstoken-member(1), and wonder, whether we could change our auth mechanism to that (auth would then run "in outlook", rather than the add-in). No, we cannot use that: https://stackoverflow.com/questions/77839961/unable-to-obtain-access-token-using-office-auth-getaccesstoken-in-office-add-in

werner triaged this task as Normal priority.Thu, Jan 29, 2:28 PM
tfry mentioned this in Unknown Object (Maniphest Task).Mon, Feb 2, 9:18 AM
tfry moved this task from WiP to QA on the gpgol2 board.
tfry moved this task from Backlog to WIP on the gpd5x board.
tfry mentioned this in Unknown Object (Maniphest Task).Mon, Feb 9, 9:32 AM