@atom8n/n8n 2.2.0

package/dist/security-audit/security-audit.service.js

@@ -0,0 +1,106 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityAuditService = void 0;
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const config_2 = __importDefault(require("../config"));
+const constants_1 = require("../security-audit/constants");
+const utils_1 = require("../security-audit/utils");
+let SecurityAuditService = class SecurityAuditService {
+    constructor(workflowRepository, securityConfig) {
+        this.workflowRepository = workflowRepository;
+        this.securityConfig = securityConfig;
+        this.reporters = {};
+    }
+    async run(categories = constants_1.RISK_CATEGORIES, daysAbandonedWorkflow) {
+        if (categories.length === 0)
+            categories = constants_1.RISK_CATEGORIES;
+        await this.initReporters(categories);
+        const daysFromEnv = this.securityConfig.daysAbandonedWorkflow;
+        if (daysAbandonedWorkflow) {
+            config_2.default.set('security.audit.daysAbandonedWorkflow', daysAbandonedWorkflow);
+        }
+        const workflows = await this.workflowRepository.find({
+            select: ['id', 'name', 'active', 'activeVersionId', 'nodes', 'connections'],
+        });
+        const promises = categories.map(async (c) => await this.reporters[c].report(workflows));
+        const reports = (await Promise.all(promises)).filter((r) => r !== null);
+        if (daysAbandonedWorkflow) {
+            config_2.default.set('security.audit.daysAbandonedWorkflow', daysFromEnv);
+        }
+        if (reports.length === 0)
+            return [];
+        return reports.reduce((acc, cur) => {
+            acc[(0, utils_1.toReportTitle)(cur.risk)] = cur;
+            return acc;
+        }, {});
+    }
+    async initReporters(categories) {
+        for (const category of categories) {
+            const className = category.charAt(0).toUpperCase() + category.slice(1) + 'RiskReporter';
+            const toFilename = {
+                CredentialsRiskReporter: 'credentials-risk-reporter',
+                DatabaseRiskReporter: 'database-risk-reporter',
+                FilesystemRiskReporter: 'filesystem-risk-reporter',
+                InstanceRiskReporter: 'instance-risk-reporter',
+                NodesRiskReporter: 'nodes-risk-reporter',
+            };
+            const RiskReporterModule = await Promise.resolve(`${`./risk-reporters/${toFilename[className]}`}`).then(s => __importStar(require(s)));
+            const RiskReporterClass = RiskReporterModule[className];
+            this.reporters[category] = di_1.Container.get(RiskReporterClass);
+        }
+    }
+};
+exports.SecurityAuditService = SecurityAuditService;
+exports.SecurityAuditService = SecurityAuditService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.WorkflowRepository,
+        config_1.SecurityConfig])
+], SecurityAuditService);
+//# sourceMappingURL=security-audit.service.js.map

package/dist/security-audit/security-audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.service.js","sourceRoot":"","sources":["../../src/security-audit/security-audit.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCAA6C;AAC7C,gCAA6C;AAC7C,gCAA6C;AAE7C,sDAA8B;AAC9B,0DAA6D;AAE7D,kDAAuD;AAGhD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAChC,YACkB,kBAAsC,EACtC,cAA8B;QAD9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,mBAAc,GAAd,cAAc,CAAgB;QAGxC,cAAS,GAEb,EAAE,CAAC;IAJJ,CAAC;IAMJ,KAAK,CAAC,GAAG,CAAC,aAA8B,2BAAe,EAAE,qBAA8B;QACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,UAAU,GAAG,2BAAe,CAAC;QAE1D,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAErC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAE9D,IAAI,qBAAqB,EAAE,CAAC;YAC3B,gBAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACpD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,CAAC;SAC3E,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAExF,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAE1F,IAAI,qBAAqB,EAAE,CAAC;YAC3B,gBAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,WAAW,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,OAAO,OAAO,CAAC,MAAM,CAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC9C,GAAG,CAAC,IAAA,qBAAa,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;YAEnC,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAA2B;QAC9C,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC;YAExF,MAAM,UAAU,GAA2B;gBAC1C,uBAAuB,EAAE,2BAA2B;gBACpD,oBAAoB,EAAE,wBAAwB;gBAC9C,sBAAsB,EAAE,0BAA0B;gBAClD,oBAAoB,EAAE,wBAAwB;gBAC9C,iBAAiB,EAAE,qBAAqB;aACxC,CAAC;YAGF,MAAM,kBAAkB,GAAG,yBAAa,oBAAoB,UAAU,CAAC,SAAS,CAAC,EAAE,uCAAC,CAAC;YAGrF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,SAAS,CAA6B,CAAC;YAEpF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,cAAS,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;CACD,CAAA;AA/DY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QACtB,uBAAc;GAHpC,oBAAoB,CA+DhC"}

package/dist/security-audit/types.d.ts

@@ -0,0 +1,76 @@
+import type { IWorkflowBase } from 'n8n-workflow';
+export declare namespace Risk {
+    export type Category = 'database' | 'credentials' | 'nodes' | 'instance' | 'filesystem';
+    type CredLocation = {
+        kind: 'credential';
+        id: string;
+        name: string;
+    };
+    export type NodeLocation = {
+        kind: 'node';
+        workflowId: string;
+        workflowName: string;
+        nodeId: string;
+        nodeName: string;
+        nodeType: string;
+    };
+    export type CommunityNodeDetails = {
+        kind: 'community';
+        nodeType: string;
+        packageUrl: string;
+    };
+    export type CustomNodeDetails = {
+        kind: 'custom';
+        nodeType: string;
+        filePath: string;
+    };
+    type SectionBase = {
+        title: string;
+        description: string;
+        recommendation: string;
+    };
+    export type Report = StandardReport | InstanceReport;
+    export type StandardSection = SectionBase & {
+        location: NodeLocation[] | CredLocation[] | CommunityNodeDetails[] | CustomNodeDetails[];
+    };
+    export type InstanceSection = SectionBase & {
+        location?: NodeLocation[];
+        settings?: Record<string, unknown>;
+        nextVersions?: n8n.Version[];
+    };
+    export type StandardReport = {
+        risk: Exclude<Category, 'instance'>;
+        sections: StandardSection[];
+    };
+    export type InstanceReport = {
+        risk: 'instance';
+        sections: InstanceSection[];
+    };
+    export type Audit = {
+        [reportTitle: string]: Report;
+    };
+    export type SyncReportFn = (workflows: IWorkflowBase[]) => StandardReport | null;
+    export type AsyncReportFn = (workflows: IWorkflowBase[]) => Promise<Report | null>;
+    export {};
+}
+export declare namespace n8n {
+    type Version = {
+        name: string;
+        nodes: Array<IWorkflowBase['nodes'][number] & {
+            iconData?: {
+                type: string;
+                fileBuffer: string;
+            };
+        }>;
+        createdAt: string;
+        description: string;
+        documentationUrl: string;
+        hasBreakingChange: boolean;
+        hasSecurityFix: boolean;
+        hasSecurityIssue: boolean;
+        securityIssueFixVersion: string;
+    };
+}
+export interface RiskReporter {
+    report(workflows: IWorkflowBase[]): Promise<Risk.Report | null>;
+}

package/dist/security-audit/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/security-audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/security-audit/types.ts"],"names":[],"mappings":""}

package/dist/security-audit/utils.d.ts

@@ -0,0 +1,17 @@
+import type { IWorkflowBase } from 'n8n-workflow';
+import type { Risk } from '../security-audit/types';
+type Node = IWorkflowBase['nodes'][number];
+export declare const toFlaggedNode: ({ node, workflow }: {
+    node: Node;
+    workflow: IWorkflowBase;
+}) => {
+    kind: "node";
+    workflowId: string;
+    workflowName: string;
+    nodeId: string;
+    nodeName: string;
+    nodeType: string;
+};
+export declare const toReportTitle: (riskCategory: Risk.Category) => string;
+export declare function getNodeTypes(workflows: IWorkflowBase[], test: (element: Node) => boolean): Risk.NodeLocation[];
+export {};

package/dist/security-audit/utils.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toReportTitle = exports.toFlaggedNode = void 0;
+exports.getNodeTypes = getNodeTypes;
+const toFlaggedNode = ({ node, workflow }) => ({
+    kind: 'node',
+    workflowId: workflow.id,
+    workflowName: workflow.name,
+    nodeId: node.id,
+    nodeName: node.name,
+    nodeType: node.type,
+});
+exports.toFlaggedNode = toFlaggedNode;
+const toReportTitle = (riskCategory) => riskCategory.charAt(0).toUpperCase() + riskCategory.slice(1) + ' Risk Report';
+exports.toReportTitle = toReportTitle;
+function getNodeTypes(workflows, test) {
+    return workflows.reduce((acc, workflow) => {
+        workflow.nodes.forEach((node) => {
+            if (test(node))
+                acc.push((0, exports.toFlaggedNode)({ node, workflow }));
+        });
+        return acc;
+    }, []);
+}
+//# sourceMappingURL=utils.js.map

package/dist/security-audit/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/security-audit/utils.ts"],"names":[],"mappings":";;;AAkBA,oCAQC;AApBM,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAA2C,EAAE,EAAE,CAAC,CAAC;IAC9F,IAAI,EAAE,MAAe;IACrB,UAAU,EAAE,QAAQ,CAAC,EAAE;IACvB,YAAY,EAAE,QAAQ,CAAC,IAAI;IAC3B,MAAM,EAAE,IAAI,CAAC,EAAE;IACf,QAAQ,EAAE,IAAI,CAAC,IAAI;IACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;CACnB,CAAC,CAAC;AAPU,QAAA,aAAa,iBAOvB;AAEI,MAAM,aAAa,GAAG,CAAC,YAA2B,EAAE,EAAE,CAC5D,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC;AADlE,QAAA,aAAa,iBACqD;AAE/E,SAAgB,YAAY,CAAC,SAA0B,EAAE,IAAgC;IACxF,OAAO,SAAS,CAAC,MAAM,CAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QAC9D,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/B,IAAI,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAA,qBAAa,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC;IACZ,CAAC,EAAE,EAAE,CAAC,CAAC;AACR,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,53 @@
+import { InstanceSettings } from 'n8n-core';
+import { AbstractServer } from './abstract-server';
+import { EventService } from './events/event.service';
+import { LoadNodesAndCredentials } from './load-nodes-and-credentials';
+import { PostHogClient } from './posthog';
+import './controllers/active-workflows.controller';
+import './controllers/annotation-tags.controller.ee';
+import './controllers/auth.controller';
+import './controllers/binary-data.controller';
+import './controllers/ai.controller';
+import './controllers/dynamic-node-parameters.controller';
+import './controllers/invitation.controller';
+import './controllers/me.controller';
+import './controllers/node-types.controller';
+import './controllers/oauth/oauth1-credential.controller';
+import './controllers/oauth/oauth2-credential.controller';
+import './controllers/orchestration.controller';
+import './controllers/owner.controller';
+import './controllers/password-reset.controller';
+import './controllers/project.controller';
+import './controllers/role.controller';
+import './controllers/tags.controller';
+import './controllers/translation.controller';
+import './controllers/folder.controller';
+import './controllers/users.controller';
+import './controllers/user-settings.controller';
+import './controllers/workflow-statistics.controller';
+import './controllers/api-keys.controller';
+import './credentials/credentials.controller';
+import './eventbus/event-bus.controller';
+import './events/events.controller';
+import './executions/executions.controller';
+import './license/license.controller';
+import './evaluation.ee/test-runs.controller.ee';
+import './workflows/workflow-history/workflow-history.controller';
+import './workflows/workflows.controller';
+import './webhooks/webhooks.controller';
+export declare class Server extends AbstractServer {
+    private readonly loadNodesAndCredentials;
+    private readonly postHogClient;
+    private readonly eventService;
+    private readonly instanceSettings;
+    private endpointPresetCredentials;
+    private presetCredentialsLoaded;
+    private frontendService?;
+    constructor(loadNodesAndCredentials: LoadNodesAndCredentials, postHogClient: PostHogClient, eventService: EventService, instanceSettings: InstanceSettings);
+    start(): Promise<void>;
+    private registerAdditionalControllers;
+    configure(): Promise<void>;
+    private configureSettingsRoute;
+    private initializeWorkflowIndexing;
+    protected setupPushServer(): void;
+}