I took a look through Obsidian’s minified code to see how it does it’s auto updates, and it’s very neat!
For reference, Obsidian downloads signed asar files instead of the entire binary each time.
I’ve been building an electron app for work. Trying to figure out how to do auto updates in an enterprise environment is a maddening experience right now. Squirrel needs maintainers, electron-builder has it’s own system, electron-forge has it’s own complexities. On top of that, asar signing still isn’t a thing.
Your auto update mechanism looks like a very good solution that I would love to see open sourced.
One question I have, does the exe itself verify the signature of app.asar? I’m guessing y’all are using a custom build of electron?