n8n
Version:
n8n Workflow Automation Tool
82 lines • 4.03 kB
JavaScript
;
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.N8NIdentifier = exports.N8N_IDENTITY_SOURCES = exports.N8NIdentifierMetadataSchema = void 0;
exports.carriesN8nIdentity = carriesN8nIdentity;
const di_1 = require("@n8n/di");
const auth_service_1 = require("../../../../auth/auth.service");
const zod_1 = require("zod");
const decorators_1 = require("@n8n/decorators");
const oauth_token_verifier_proxy_service_1 = require("../../../../services/oauth-token-verifier-proxy.service");
const MANUAL_EXECUTION_SOURCE = 'manual-execution';
const REQUEST_BOUND_SOURCES = ['chat-hub-injected', 'cookie-source'];
const N8N_OAUTH_SOURCE = 'n8n-oauth';
const ManualExecutionMetadataSchema = zod_1.z.object({
source: zod_1.z.literal(MANUAL_EXECUTION_SOURCE),
});
const RequestBoundMetadataSchema = zod_1.z.object({
source: zod_1.z.enum(REQUEST_BOUND_SOURCES),
method: zod_1.z.string(),
endpoint: zod_1.z.string(),
browserId: zod_1.z.string().optional(),
});
const N8nOAuthMetadataSchema = zod_1.z.object({
source: zod_1.z.literal(N8N_OAUTH_SOURCE),
resource: zod_1.z.string(),
});
exports.N8NIdentifierMetadataSchema = zod_1.z.discriminatedUnion('source', [
ManualExecutionMetadataSchema,
RequestBoundMetadataSchema,
N8nOAuthMetadataSchema,
]);
exports.N8N_IDENTITY_SOURCES = [
MANUAL_EXECUTION_SOURCE,
...REQUEST_BOUND_SOURCES,
N8N_OAUTH_SOURCE,
];
function carriesN8nIdentity(context) {
const source = context.metadata?.source;
return typeof source === 'string' && exports.N8N_IDENTITY_SOURCES.includes(source);
}
let N8NIdentifier = class N8NIdentifier {
constructor(authService, oauthTokenVerifierProxy) {
this.authService = authService;
this.oauthTokenVerifierProxy = oauthTokenVerifierProxy;
}
async validateOptions(_) {
return;
}
async resolve(context, _) {
const metadataResult = exports.N8NIdentifierMetadataSchema.safeParse(context.metadata);
if (!metadataResult.success) {
throw new decorators_1.CredentialResolverError(`Invalid context metadata: ${metadataResult.error.message}`);
}
if (metadataResult.data.source === 'manual-execution') {
const user = await this.authService.authenticateUserByCookie(context.identity);
return user.id;
}
if (metadataResult.data.source === 'n8n-oauth') {
const user = await this.oauthTokenVerifierProxy.verifyOAuthAccessToken(context.identity, metadataResult.data.resource);
if (!user?.user) {
throw new decorators_1.CredentialResolverError(`Invalid OAuth token for resource ${metadataResult.data.resource}`);
}
return user.user.id;
}
const user = await this.authService.authenticateUserBasedOnToken(context.identity, metadataResult.data.method, metadataResult.data.endpoint, metadataResult.data.browserId);
return user.id;
}
};
exports.N8NIdentifier = N8NIdentifier;
exports.N8NIdentifier = N8NIdentifier = __decorate([
(0, di_1.Service)(),
__metadata("design:paramtypes", [auth_service_1.AuthService, oauth_token_verifier_proxy_service_1.OAuthTokenVerifierProxy])
], N8NIdentifier);
//# sourceMappingURL=n8n-identifier.js.map