Secure IPC Communication Bridge

Establishes a robust and secure inter-process communication system between the application's main process (Node.js/Electron) and renderer process (browser).

This module implements the critical security boundary that protects the application from potential security vulnerabilities while still enabling rich functionality. It uses Electron's contextBridge API to create controlled, explicit channels for safe communication across process boundaries.

Security features:

  • Explicit API surface with defined interfaces
  • Process isolation with controlled data flow
  • No direct Node.js access from renderer
  • Type-safe communication contracts
  • Sanitized input/output handling

Exposed functionality domains:

  • Window management (minimize, maximize, close)
  • Theme control (light/dark mode)
  • Spotify API authentication and playback
  • Data persistence and retrieval
  • Statistics collection and analysis
  • File system operations (within safe boundaries)
  • Monitoring and event notification

Interfaces

SpotifyAPI

Type Aliases

AuthStatus
LoginResult
Track
LoginConfig

Functions

contextExposer