How can I make my code secure like .JSXBIN used to be?

[photonic]

I’ve been searching a lot about how to protect my UXP code from crackers. With CEP with the JSXBIN was more than enough to create unpenetrable doors, but with UXP I only find obfuscation the only way.

What is the best way to secure my code for authentication of the users?

I’ve been using obfuscator.io, preemptive.com and others with the default settings and works well, but I don’t want to migrate my plugin to UXP and expose all my code there, how can I prevent this in the best way possible?

I would appreciate a lot your help on this topic.

I’ve seen other plugins that have authentication but, how does the protection can be made?

Kind regards,

[Karmalakas]

It was already asked couple of times

I'm Shocked! Why Are Plugins Decrypted on Install?

I just realized that UXP plugins are decrypted and installed as plain text on the user’s computer. Seeing the ccx installer file encyrpted was one of my initial motivations to rewrite my old border scripts for the UXP framework. I’ve poured months, literally thousands of hours into developing a feature-rich plugin and now find that all of my code is just sitting there for anyone that buys the plugin to see. I know that it’s not really possible to completely protect scripting languages from bein…

How to protect a plugin from theft?

Want to package my newly developed plugin and Dev Tool simply Zips all the contents of the folder and changes extension. Even .vscode and other unrelated content gets packaged. Also JS isn’t obfuscated in any way, so anyone can extract a plugin and use your code. So my question would be as title says. What’s the best way to protect a plugin before sharing it? I know I can use some JS obfuscator probably, but maybe some recommendations? Also, what should go to package.json? Is it needed at all?…

[Timothy_Bennett]

I reverse-engineered (copied ) Jarda’s Wepack configuration for the Alchemist plugin to achieve this:

GitHub - jardicc/alchemist: DevTool for plugin developers

[Karmalakas]

Alchemist doesn’t have any obfuscation, or does it? I don’t see any

[Timothy_Bennett]

Ah! Then it was using Jarda’s code to figure out how to use Webpack and then adding an obfustcation plugin.

[Karmalakas]

Yeah, in the first link I shared above, I’ve posted what I used to use. Now I think I have a bit different options set for obfuscator, but principle is still the same

[photonic]

I’m intriged about Webpack configuration, I saw the code on Jarda’s github but I’ve never used Webpacks, I don’t even know what they are hahaha I’m using Vanilla JS to make my UXP plugins haha.

What does the Webpack configuration does to your software or how it works?

[Karmalakas]

It’s basically a packager/builder I guess. Sorry can’t advice much, because I use it only for my UXP plugins and it’s also the first time I encountered it. Managed to set it up to my needs and didn’t touch since

BTW, it also allows a much smoother development workflow. Here’s my other post with example set-up (not full, but you should get the idea) how I use it to automate builds for local (no actual build needed), dev (basically same as prod, but can install locally) and prod (ready for Marketplace).

[photonic]

Thanks for your answer, I just saw your post it is very helpful gonna give it a try man, much appreciated!!