n8n
Version:
n8n Workflow Automation Tool
249 lines • 14.5 kB
JavaScript
"use strict";
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
var desc = Object.getOwnPropertyDescriptor(m, k);
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
desc = { enumerable: true, get: function() { return m[k]; } };
}
Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __importStar = (this && this.__importStar) || (function () {
var ownKeys = function(o) {
ownKeys = Object.getOwnPropertyNames || function (o) {
var ar = [];
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
return ar;
};
return ownKeys(o);
};
return function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
__setModuleDefault(result, mod);
return result;
};
})();
var __metadata = (this && this.__metadata) || function (k, v) {
if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.WorkflowCreationService = void 0;
const backend_common_1 = require("@n8n/backend-common");
const config_1 = require("@n8n/config");
const db_1 = require("@n8n/db");
const di_1 = require("@n8n/di");
const n8n_workflow_1 = require("n8n-workflow");
const uuid_1 = require("uuid");
const credentials_service_1 = require("../credentials/credentials.service");
const bad_request_error_1 = require("../errors/response-errors/bad-request.error");
const forbidden_error_1 = require("../errors/response-errors/forbidden.error");
const internal_server_error_1 = require("../errors/response-errors/internal-server.error");
const not_found_error_1 = require("../errors/response-errors/not-found.error");
const workflow_validation_error_1 = require("../errors/response-errors/workflow-validation.error");
const event_service_1 = require("../events/event.service");
const external_hooks_1 = require("../external-hooks");
const generic_helpers_1 = require("../generic-helpers");
const instance_redaction_enforcement_service_1 = require("../modules/redaction/instance-redaction-enforcement.service");
const redaction_policy_1 = require("../modules/redaction/redaction-policy");
const node_types_1 = require("../node-types");
const check_access_1 = require("../permissions.ee/check-access");
const folder_service_1 = require("../services/folder.service");
const project_service_ee_1 = require("../services/project.service.ee");
const tag_service_1 = require("../services/tag.service");
const WorkflowHelpers = __importStar(require("../workflow-helpers"));
const workflow_hook_context_service_1 = require("../workflow-hook-context.service");
const utils_1 = require("./utils");
const workflow_finder_service_1 = require("./workflow-finder.service");
const workflow_history_service_1 = require("./workflow-history/workflow-history.service");
const workflow_validation_service_1 = require("./workflow-validation.service");
const workflow_service_ee_1 = require("./workflow.service.ee");
let WorkflowCreationService = class WorkflowCreationService {
constructor(logger, sharedWorkflowRepository, tagService, workflowHistoryService, externalHooks, projectService, eventService, globalConfig, workflowFinderService, licenseState, projectRepository, tagRepository, credentialsService, folderService, enterpriseWorkflowService, nodeTypes, workflowValidationService, instanceRedactionEnforcementService, workflowHookContextService) {
this.logger = logger;
this.sharedWorkflowRepository = sharedWorkflowRepository;
this.tagService = tagService;
this.workflowHistoryService = workflowHistoryService;
this.externalHooks = externalHooks;
this.projectService = projectService;
this.eventService = eventService;
this.globalConfig = globalConfig;
this.workflowFinderService = workflowFinderService;
this.licenseState = licenseState;
this.projectRepository = projectRepository;
this.tagRepository = tagRepository;
this.credentialsService = credentialsService;
this.folderService = folderService;
this.enterpriseWorkflowService = enterpriseWorkflowService;
this.nodeTypes = nodeTypes;
this.workflowValidationService = workflowValidationService;
this.instanceRedactionEnforcementService = instanceRedactionEnforcementService;
this.workflowHookContextService = workflowHookContextService;
}
async createWorkflow(user, newWorkflow, options = {}) {
const { tagIds, parentFolderId, projectId, sourceWorkflowId, autosaved = false, uiContext, publicApi = false, source = 'ui', versionName, versionDescription, } = options;
newWorkflow.active = false;
newWorkflow.versionId = (0, uuid_1.v4)();
newWorkflow.parentFolder = null;
newWorkflow.sourceWorkflowId = sourceWorkflowId ?? null;
await (0, generic_helpers_1.validateEntity)(newWorkflow);
if (tagIds?.length && !this.globalConfig.tags.disabled) {
newWorkflow.tags = await this.tagRepository.findMany(tagIds);
}
const effectiveProjectId = projectId ?? (await this.projectRepository.getPersonalProjectForUserOrFail(user.id)).id;
let project = await this.projectService.getProjectWithScope(user, effectiveProjectId, ['workflow:create']);
if (!project) {
if (!(await this.projectRepository.exists({ where: { id: effectiveProjectId } }))) {
throw new not_found_error_1.NotFoundError('Project not found');
}
const message = "You don't have the permissions to save the workflow in this project.";
if (publicApi) {
throw new forbidden_error_1.ForbiddenError(message);
}
throw new bad_request_error_1.BadRequestError(message);
}
await WorkflowHelpers.replaceInvalidCredentials(newWorkflow, effectiveProjectId);
WorkflowHelpers.addNodeIds(newWorkflow);
WorkflowHelpers.resolveNodeWebhookIds(newWorkflow, this.nodeTypes);
WorkflowHelpers.validateWorkflowStructure(newWorkflow);
WorkflowHelpers.validateWorkflowNodeGroups(newWorkflow, WorkflowHelpers.makeGetNodeTypeForGrouping(this.nodeTypes));
if (parentFolderId && parentFolderId !== n8n_workflow_1.PROJECT_ROOT) {
await this.findParentFolderInProjectOrFail(parentFolderId, effectiveProjectId);
}
if ('pinData' in newWorkflow) {
WorkflowHelpers.validatePinDataSize(newWorkflow);
}
if (this.licenseState.isSharingLicensed()) {
const allCredentials = await this.credentialsService.getMany(user, {
includeGlobal: true,
});
try {
this.enterpriseWorkflowService.validateCredentialPermissionsToUser(newWorkflow, allCredentials);
}
catch (error) {
throw new bad_request_error_1.BadRequestError('The workflow you are trying to save contains credentials that are not shared with you');
}
}
const restrictionValidation = this.workflowValidationService.validateCredentialNodeRestrictions(newWorkflow.nodes);
if (!restrictionValidation.isValid) {
throw new workflow_validation_error_1.WorkflowValidationError(restrictionValidation.error ?? 'Credential binding is not allowed.');
}
await this.externalHooks.run('workflow.create', [
newWorkflow,
this.workflowHookContextService,
(0, external_hooks_1.toWorkflowLifecycleHookActor)(user),
]);
const floor = await this.readActiveRedactionFloor();
const { manager: dbManager } = this.projectRepository;
const savedWorkflow = await dbManager.transaction(async (transactionManager) => {
project = await this.projectService.getProjectWithScope(user, effectiveProjectId, ['workflow:create'], transactionManager);
if (project === null) {
const message = "You don't have the permissions to save the workflow in this project.";
if (publicApi) {
throw new forbidden_error_1.ForbiddenError(message);
}
throw new bad_request_error_1.BadRequestError(message);
}
await this.resolveRedactionPolicyOnCreate(newWorkflow, user, effectiveProjectId, transactionManager, floor);
if (parentFolderId && parentFolderId !== n8n_workflow_1.PROJECT_ROOT) {
newWorkflow.parentFolder = await this.findParentFolderInProjectOrFail(parentFolderId, project.id, transactionManager);
}
const workflow = await transactionManager.save(newWorkflow);
const newSharedWorkflow = this.sharedWorkflowRepository.create({
role: 'workflow:owner',
projectId: project.id,
workflow,
});
await transactionManager.save(newSharedWorkflow);
await this.workflowHistoryService.saveVersion(user, workflow, workflow.id, autosaved, source, transactionManager, versionName || versionDescription
? { name: versionName, description: versionDescription }
: undefined);
return await this.workflowFinderService.findWorkflowForUser(workflow.id, user, ['workflow:read'], {
em: transactionManager,
includeTags: true,
includeParentFolder: true,
includeActiveVersion: true,
});
});
if (!savedWorkflow) {
this.logger.error('Failed to create workflow', { userId: user.id });
throw new internal_server_error_1.InternalServerError('Failed to save workflow');
}
if (tagIds && !this.globalConfig.tags.disabled && savedWorkflow.tags) {
savedWorkflow.tags = this.tagService.sortByRequestOrder(savedWorkflow.tags, {
requestOrder: tagIds,
});
}
await this.externalHooks.run('workflow.afterCreate', [
savedWorkflow,
this.workflowHookContextService,
(0, external_hooks_1.toWorkflowLifecycleHookActor)(user),
]);
this.eventService.emit('workflow-created', {
user,
workflow: newWorkflow,
publicApi,
projectId: project.id,
projectType: project.type,
uiContext,
source,
});
return savedWorkflow;
}
async findParentFolderInProjectOrFail(parentFolderId, projectId, em) {
try {
return await this.folderService.findFolderInProjectOrFail(parentFolderId, projectId, em);
}
catch {
throw new not_found_error_1.NotFoundError(`Could not find the folder: ${parentFolderId}`);
}
}
async readActiveRedactionFloor() {
if (!this.licenseState.isDataRedactionLicensed())
return 'off';
return await this.instanceRedactionEnforcementService.get();
}
async resolveRedactionPolicyOnCreate(newWorkflow, user, effectiveProjectId, transactionManager, floor) {
if (!this.licenseState.isDataRedactionLicensed()) {
(0, utils_1.dropRedactionPolicy)(newWorkflow);
return;
}
const incomingPolicy = newWorkflow.settings?.redactionPolicy;
const hasIncoming = incomingPolicy !== undefined && incomingPolicy !== 'none';
if (!hasIncoming && floor === 'off')
return;
const canUpdateRedaction = await (0, check_access_1.userHasScopes)(user, ['workflow:enableRedaction'], false, { projectId: effectiveProjectId }, transactionManager);
if (!canUpdateRedaction && hasIncoming) {
(0, utils_1.dropRedactionPolicy)(newWorkflow);
}
if (floor === 'off' || !canUpdateRedaction)
return;
const current = newWorkflow.settings?.redactionPolicy;
if (current !== undefined && (0, redaction_policy_1.policyMeetsFloor)(current, floor))
return;
const seed = (0, redaction_policy_1.policyForFloor)(floor);
if (seed === undefined)
return;
newWorkflow.settings = { ...(newWorkflow.settings ?? {}), redactionPolicy: seed };
}
};
exports.WorkflowCreationService = WorkflowCreationService;
exports.WorkflowCreationService = WorkflowCreationService = __decorate([
(0, di_1.Service)(),
__metadata("design:paramtypes", [backend_common_1.Logger, db_1.SharedWorkflowRepository, tag_service_1.TagService, workflow_history_service_1.WorkflowHistoryService, external_hooks_1.ExternalHooks, project_service_ee_1.ProjectService, event_service_1.EventService, config_1.GlobalConfig, workflow_finder_service_1.WorkflowFinderService, backend_common_1.LicenseState, db_1.ProjectRepository, db_1.TagRepository, credentials_service_1.CredentialsService, folder_service_1.FolderService, workflow_service_ee_1.EnterpriseWorkflowService, node_types_1.NodeTypes, workflow_validation_service_1.WorkflowValidationService, instance_redaction_enforcement_service_1.InstanceRedactionEnforcementService, workflow_hook_context_service_1.WorkflowHookContextService])
], WorkflowCreationService);
//# sourceMappingURL=workflow-creation.service.js.map