Using [asar-plus] can still extract app.asar

[getliuyue]

I have updated your [email protected] Test using commands: asar-plus e -iff -iu app.asar ./app/
You can still extract the app.asar to ./app, is there any way to prevent asar-plus

https://github.com/evlon/asar-plus

[sleeyax]

Have you enabled encryption? Starting from v3 we will focus more on that, other protection methods are no longer as effective as they used to be.

[getliuyue]

Yes, i use the following code
const asarmor = require('asarmor');
const { join } = require("path");

exports.default = async ({ appOutDir, packager }) => {
try {
const asarPath = join(packager.getResourcesDir(appOutDir), 'app.asar');
console.log(asarmor applying patches to ${asarPath});
const archive = await asarmor.open(asarPath);
archive.patch(); // apply default patches
await archive.write(asarPath);
} catch (err) {
console.error(err);
}
};

And I have enabled encryption, using normal unpacking methods will result in multiple 1GB sized files, but using asar-plus will directly result in normal files

[sleeyax]

You're still missing something in your code. Please see

asarmor/example/node/build.js

Line 11 in f9a2c14

await encrypt({src: original, dst: protected});

and

asarmor/example/electron/afterPack.js

Line 13 in f9a2c14

await encrypt({

as examples.

It seems like asar-plus was specifically designed to combat asarmor's base protections so encryption is the only thing that can protect your asar file contents from it.

[getliuyue]

Sorry, I didn't read the document carefully, but I am using vue-cli-plugin-electron-builder, which is different from the structure in the document. How should I configure beforePack.js and where should I copy main.node to?

[getliuyue]

I have enabled encryption now, and all the JavaScript files packaged into the app.asar have been encrypted by AES, but I don't know how to automatically decrypt them at runtime

[sleeyax]

Sorry, I didn't read the document carefully, but I am using vue-cli-plugin-electron-builder, which is different from the structure in the document. How should I configure beforePack.js and where should I copy main.node to?

I can only provide support for electron builder for now, it's impossible to support all plugins / build tools. If this plugin is based on electron builder, you should be able to follow the guide along in a similar manner while also checking the documentation.

[sleeyax]

I have enabled encryption now, and all the JavaScript files packaged into the app.asar have been encrypted by AES, but I don't know how to automatically decrypt them at runtime

For this you need to copy the *.node files and change your entry point in package.json, as shown in the readme and examples.