@atom8n/n8n 2.2.0

package/dist/controllers/me.controller.js

@@ -0,0 +1,226 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MeController = void 0;
+const api_types_1 = require("@n8n/api-types");
+const backend_common_1 = require("@n8n/backend-common");
+const db_1 = require("@n8n/db");
+const decorators_1 = require("@n8n/decorators");
+const class_transformer_1 = require("class-transformer");
+const survey_answers_dto_1 = require("./survey-answers.dto");
+const auth_service_1 = require("../auth/auth.service");
+const bad_request_error_1 = require("../errors/response-errors/bad-request.error");
+const invalid_mfa_code_error_1 = require("../errors/response-errors/invalid-mfa-code.error");
+const event_service_1 = require("../events/event.service");
+const external_hooks_1 = require("../external-hooks");
+const generic_helpers_1 = require("../generic-helpers");
+const mfa_service_1 = require("../mfa/mfa.service");
+const password_utility_1 = require("../services/password.utility");
+const user_service_1 = require("../services/user.service");
+const saml_helpers_1 = require("../sso.ee/saml/saml-helpers");
+const sso_helpers_1 = require("../sso.ee/sso-helpers");
+let MeController = class MeController {
+    constructor(logger, externalHooks, authService, userService, passwordUtility, userRepository, eventService, mfaService) {
+        this.logger = logger;
+        this.externalHooks = externalHooks;
+        this.authService = authService;
+        this.userService = userService;
+        this.passwordUtility = passwordUtility;
+        this.userRepository = userRepository;
+        this.eventService = eventService;
+        this.mfaService = mfaService;
+    }
+    async updateCurrentUser(req, res, payload) {
+        const { id: userId, email: currentEmail, firstName: currentFirstName, lastName: currentLastName, } = req.user;
+        const { currentPassword, ...payloadWithoutPassword } = payload;
+        const { email, firstName, lastName } = payload;
+        const isEmailBeingChanged = email !== currentEmail;
+        const isFirstNameChanged = firstName !== currentFirstName;
+        const isLastNameChanged = lastName !== currentLastName;
+        if (((0, sso_helpers_1.isLdapCurrentAuthenticationMethod)() || (0, sso_helpers_1.isOidcCurrentAuthenticationMethod)()) &&
+            (isEmailBeingChanged || isFirstNameChanged || isLastNameChanged)) {
+            this.logger.debug(`Request to update user failed because ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()} user may not change their profile information`, {
+                userId,
+                payload: payloadWithoutPassword,
+            });
+            throw new bad_request_error_1.BadRequestError(` ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()} user may not change their profile information`);
+        }
+        await this.validateChangingUserEmail(req.user, payload);
+        await this.externalHooks.run('user.profile.beforeUpdate', [
+            userId,
+            currentEmail,
+            payloadWithoutPassword,
+        ]);
+        const preUpdateUser = await this.userRepository.findOneByOrFail({ id: userId });
+        await this.userService.update(userId, payloadWithoutPassword);
+        const user = await this.userRepository.findOneOrFail({
+            where: { id: userId },
+            relations: ['role'],
+        });
+        this.logger.info('User updated successfully', { userId });
+        this.authService.issueCookie(res, user, req.authInfo?.usedMfa ?? false, req.browserId);
+        const changeableFields = ['email', 'firstName', 'lastName'];
+        const fieldsChanged = changeableFields.filter((key) => key in payload && payload[key] !== preUpdateUser[key]);
+        this.eventService.emit('user-updated', { user, fieldsChanged });
+        const publicUser = await this.userService.toPublic(user);
+        await this.externalHooks.run('user.profile.update', [currentEmail, publicUser]);
+        return publicUser;
+    }
+    async validateChangingUserEmail(currentUser, payload) {
+        if (!payload.email || payload.email === currentUser.email) {
+            return;
+        }
+        const { currentPassword: providedCurrentPassword, ...payloadWithoutPassword } = payload;
+        const { id: userId, mfaEnabled } = currentUser;
+        if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
+            this.logger.debug('Request to update user failed because SAML user may not change their email', {
+                userId: currentUser.id,
+                payload: payloadWithoutPassword,
+            });
+            throw new bad_request_error_1.BadRequestError('SAML user may not change their email');
+        }
+        if (mfaEnabled) {
+            if (!payload.mfaCode) {
+                throw new bad_request_error_1.BadRequestError('Two-factor code is required to change email');
+            }
+            const isMfaCodeValid = await this.mfaService.validateMfa(userId, payload.mfaCode, undefined);
+            if (!isMfaCodeValid) {
+                throw new invalid_mfa_code_error_1.InvalidMfaCodeError();
+            }
+        }
+        else {
+            if (currentUser.password === null) {
+                this.logger.debug('User with no password changed their email', {
+                    userId: currentUser.id,
+                    payload: payloadWithoutPassword,
+                });
+                return;
+            }
+            if (!providedCurrentPassword || typeof providedCurrentPassword !== 'string') {
+                throw new bad_request_error_1.BadRequestError('Current password is required to change email');
+            }
+            const isProvidedPasswordCorrect = await this.passwordUtility.compare(providedCurrentPassword, currentUser.password);
+            if (!isProvidedPasswordCorrect) {
+                throw new bad_request_error_1.BadRequestError('Unable to update profile. Please check your credentials and try again.');
+            }
+        }
+    }
+    async updatePassword(req, res, payload) {
+        const { user } = req;
+        const { currentPassword, newPassword, mfaCode } = payload;
+        if ((0, saml_helpers_1.isSamlLicensedAndEnabled)()) {
+            this.logger.debug('Attempted to change password for user, while SAML is enabled', {
+                userId: user.id,
+            });
+            throw new bad_request_error_1.BadRequestError('With SAML enabled, users need to use their SAML provider to change passwords');
+        }
+        if (!user.password) {
+            throw new bad_request_error_1.BadRequestError('Requesting user not set up.');
+        }
+        const isCurrentPwCorrect = await this.passwordUtility.compare(currentPassword, user.password);
+        if (!isCurrentPwCorrect) {
+            throw new bad_request_error_1.BadRequestError('Provided current password is incorrect.');
+        }
+        const passwordValidation = api_types_1.passwordSchema.safeParse(newPassword);
+        if (!passwordValidation.success) {
+            throw new bad_request_error_1.BadRequestError(passwordValidation.error.errors.map(({ message }) => message).join(' '));
+        }
+        if (user.mfaEnabled) {
+            if (typeof mfaCode !== 'string') {
+                throw new bad_request_error_1.BadRequestError('Two-factor code is required to change password.');
+            }
+            const isMfaCodeValid = await this.mfaService.validateMfa(user.id, mfaCode, undefined);
+            if (!isMfaCodeValid) {
+                throw new invalid_mfa_code_error_1.InvalidMfaCodeError();
+            }
+        }
+        user.password = await this.passwordUtility.hash(newPassword);
+        const updatedUser = await this.userRepository.save(user, { transaction: false });
+        this.logger.info('Password updated successfully', { userId: user.id });
+        this.authService.issueCookie(res, updatedUser, req.authInfo?.usedMfa ?? false, req.browserId);
+        this.eventService.emit('user-updated', { user: updatedUser, fieldsChanged: ['password'] });
+        await this.externalHooks.run('user.password.update', [updatedUser.email, updatedUser.password]);
+        return { success: true };
+    }
+    async storeSurveyAnswers(req) {
+        const { body: personalizationAnswers } = req;
+        if (!personalizationAnswers) {
+            this.logger.debug('Request to store user personalization survey failed because of undefined payload', {
+                userId: req.user.id,
+            });
+            throw new bad_request_error_1.BadRequestError('Personalization answers are mandatory');
+        }
+        const validatedAnswers = (0, class_transformer_1.plainToInstance)(survey_answers_dto_1.PersonalizationSurveyAnswersV4, personalizationAnswers, { excludeExtraneousValues: true });
+        await (0, generic_helpers_1.validateEntity)(validatedAnswers);
+        await this.userRepository.save({
+            id: req.user.id,
+            personalizationAnswers: validatedAnswers,
+        }, { transaction: false });
+        this.logger.info('User survey updated successfully', { userId: req.user.id });
+        this.eventService.emit('user-submitted-personalization-survey', {
+            userId: req.user.id,
+            answers: validatedAnswers,
+        });
+        return { success: true };
+    }
+    async updateCurrentUserSettings(req, _, payload) {
+        const { id } = req.user;
+        await this.userService.updateSettings(id, payload);
+        const user = await this.userRepository.findOneOrFail({
+            select: ['settings'],
+            where: { id },
+        });
+        return user.settings;
+    }
+};
+exports.MeController = MeController;
+__decorate([
+    (0, decorators_1.Patch)('/'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.UserUpdateRequestDto]),
+    __metadata("design:returntype", Promise)
+], MeController.prototype, "updateCurrentUser", null);
+__decorate([
+    (0, decorators_1.Patch)('/password', { rateLimit: true }),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.PasswordUpdateRequestDto]),
+    __metadata("design:returntype", Promise)
+], MeController.prototype, "updatePassword", null);
+__decorate([
+    (0, decorators_1.Post)('/survey'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], MeController.prototype, "storeSurveyAnswers", null);
+__decorate([
+    (0, decorators_1.Patch)('/settings'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.SettingsUpdateRequestDto]),
+    __metadata("design:returntype", Promise)
+], MeController.prototype, "updateCurrentUserSettings", null);
+exports.MeController = MeController = __decorate([
+    (0, decorators_1.RestController)('/me'),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        external_hooks_1.ExternalHooks,
+        auth_service_1.AuthService,
+        user_service_1.UserService,
+        password_utility_1.PasswordUtility,
+        db_1.UserRepository,
+        event_service_1.EventService,
+        mfa_service_1.MfaService])
+], MeController);
+//# sourceMappingURL=me.controller.js.map

package/dist/controllers/me.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.controller.js","sourceRoot":"","sources":["../../src/controllers/me.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAKwB;AACxB,wDAA6C;AAE7C,gCAA+D;AAC/D,gDAAoE;AACpE,yDAAoD;AAGpD,6DAAsE;AAEtE,sDAAkD;AAClD,kFAA6E;AAC7E,4FAAsF;AACtF,0DAAsD;AACtD,qDAAiD;AACjD,uDAAmD;AACnD,mDAA+C;AAE/C,kEAA8D;AAC9D,0DAAsD;AACtD,6DAAsE;AACtE,sDAI8B;AAGvB,IAAM,YAAY,GAAlB,MAAM,YAAY;IACxB,YACkB,MAAc,EACd,aAA4B,EAC5B,WAAwB,EACxB,WAAwB,EACxB,eAAgC,EAChC,cAA8B,EAC9B,YAA0B,EAC1B,UAAsB;QAPtB,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAe;QAC5B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,oBAAe,GAAf,eAAe,CAAiB;QAChC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,eAAU,GAAV,UAAU,CAAY;IACrC,CAAC;IAME,AAAN,KAAK,CAAC,iBAAiB,CACtB,GAAyB,EACzB,GAAa,EACP,OAA6B;QAEnC,MAAM,EACL,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,EAAE,eAAe,GACzB,GAAG,GAAG,CAAC,IAAI,CAAC;QAEb,MAAM,EAAE,eAAe,EAAE,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC/C,MAAM,mBAAmB,GAAG,KAAK,KAAK,YAAY,CAAC;QACnD,MAAM,kBAAkB,GAAG,SAAS,KAAK,gBAAgB,CAAC;QAC1D,MAAM,iBAAiB,GAAG,QAAQ,KAAK,eAAe,CAAC;QAEvD,IACC,CAAC,IAAA,+CAAiC,GAAE,IAAI,IAAA,+CAAiC,GAAE,CAAC;YAC5E,CAAC,mBAAmB,IAAI,kBAAkB,IAAI,iBAAiB,CAAC,EAC/D,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,yCAAyC,IAAA,4CAA8B,GAAE,gDAAgD,EACzH;gBACC,MAAM;gBACN,OAAO,EAAE,sBAAsB;aAC/B,CACD,CAAC;YACF,MAAM,IAAI,mCAAe,CACxB,IAAI,IAAA,4CAA8B,GAAE,gDAAgD,CACpF,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,2BAA2B,EAAE;YACzD,MAAM;YACN,YAAY;YACZ,sBAAsB;SACtB,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YACpD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvF,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;QACrE,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAC5C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,CAC9D,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAEhE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;QAEhF,OAAO,UAAU,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,WAAiB,EAAE,OAA6B;QACvF,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;YAE3D,OAAO;QACR,CAAC;QACD,MAAM,EAAE,eAAe,EAAE,uBAAuB,EAAE,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC;QACxF,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;QAG/C,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,4EAA4E,EAC5E;gBACC,MAAM,EAAE,WAAW,CAAC,EAAE;gBACtB,OAAO,EAAE,sBAAsB;aAC/B,CACD,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,sCAAsC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,IAAI,mCAAe,CAAC,6CAA6C,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC7F,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,MAAM,IAAI,4CAAmB,EAAE,CAAC;YACjC,CAAC;QACF,CAAC;aAAM,CAAC;YACP,IAAI,WAAW,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;oBAC9D,MAAM,EAAE,WAAW,CAAC,EAAE;oBACtB,OAAO,EAAE,sBAAsB;iBAC/B,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YAED,IAAI,CAAC,uBAAuB,IAAI,OAAO,uBAAuB,KAAK,QAAQ,EAAE,CAAC;gBAC7E,MAAM,IAAI,mCAAe,CAAC,8CAA8C,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,yBAAyB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CACnE,uBAAuB,EACvB,WAAW,CAAC,QAAQ,CACpB,CAAC;YACF,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAChC,MAAM,IAAI,mCAAe,CACxB,wEAAwE,CACxE,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAMK,AAAN,KAAK,CAAC,cAAc,CACnB,GAAyB,EACzB,GAAa,EACP,OAAiC;QAEvC,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;QACrB,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAG1D,IAAI,IAAA,uCAAwB,GAAE,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBACjF,MAAM,EAAE,IAAI,CAAC,EAAE;aACf,CAAC,CAAC;YACH,MAAM,IAAI,mCAAe,CACxB,8EAA8E,CAC9E,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,mCAAe,CAAC,6BAA6B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9F,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzB,MAAM,IAAI,mCAAe,CAAC,yCAAyC,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,kBAAkB,GAAG,0BAAc,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,mCAAe,CACxB,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACvE,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,mCAAe,CAAC,iDAAiD,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,MAAM,IAAI,4CAAmB,EAAE,CAAC;YACjC,CAAC;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE7D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAE9F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3F,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAMK,AAAN,KAAK,CAAC,kBAAkB,CAAC,GAA4B;QACpD,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,GAAG,CAAC;QAE7C,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,kFAAkF,EAClF;gBACC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;aACnB,CACD,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,uCAAuC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAA,mCAAe,EACvC,mDAA8B,EAC9B,sBAAsB,EACtB,EAAE,uBAAuB,EAAE,IAAI,EAAE,CACjC,CAAC;QAEF,MAAM,IAAA,gCAAc,EAAC,gBAAgB,CAAC,CAAC;QAEvC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAC7B;YACC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,sBAAsB,EAAE,gBAAgB;SACxC,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uCAAuC,EAAE;YAC/D,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,OAAO,EAAE,gBAAgB;SACzB,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAMK,AAAN,KAAK,CAAC,yBAAyB,CAC9B,GAAyB,EACzB,CAAW,EACL,OAAiC;QAEvC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAExB,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YACpD,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,KAAK,EAAE,EAAE,EAAE,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;AAvQY,oCAAY;AAgBlB;IADL,IAAA,kBAAK,EAAC,GAAG,CAAC;IAIT,WAAA,iBAAI,CAAA;;qDAAU,gCAAoB;;qDA8DnC;AA4DK;IADL,IAAA,kBAAK,EAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAItC,WAAA,iBAAI,CAAA;;qDAAU,oCAAwB;;kDAsDvC;AAMK;IADL,IAAA,iBAAI,EAAC,SAAS,CAAC;;;;sDAsCf;AAMK;IADL,IAAA,kBAAK,EAAC,WAAW,CAAC;IAIjB,WAAA,iBAAI,CAAA;;qDAAU,oCAAwB;;6DAYvC;uBAtQW,YAAY;IADxB,IAAA,2BAAc,EAAC,KAAK,CAAC;qCAGK,uBAAM;QACC,8BAAa;QACf,0BAAW;QACX,0BAAW;QACP,kCAAe;QAChB,mBAAc;QAChB,4BAAY;QACd,wBAAU;GAT5B,YAAY,CAuQxB"}

package/dist/controllers/mfa.controller.d.ts

@@ -0,0 +1,25 @@
+import { AuthenticatedRequest, UserRepository } from '@n8n/db';
+import { Response } from 'express';
+import { AuthService } from '../auth/auth.service';
+import { EventService } from '../events/event.service';
+import { ExternalHooks } from '../external-hooks';
+import { MfaService } from '../mfa/mfa.service';
+import { MFA } from '../requests';
+export declare class MFAController {
+    private mfaService;
+    private externalHooks;
+    private authService;
+    private userRepository;
+    private eventService;
+    constructor(mfaService: MfaService, externalHooks: ExternalHooks, authService: AuthService, userRepository: UserRepository, eventService: EventService);
+    enforceMFA(req: MFA.Enforce): Promise<void>;
+    canEnableMFA(req: AuthenticatedRequest): Promise<void>;
+    getQRCode(req: AuthenticatedRequest): Promise<{
+        secret: string;
+        recoveryCodes: string[];
+        qrCode: string;
+    }>;
+    activateMFA(req: MFA.Activate, res: Response): Promise<void>;
+    disableMFA(req: MFA.Disable, res: Response): Promise<void>;
+    verifyMFA(req: MFA.Verify): Promise<void>;
+}

package/dist/controllers/mfa.controller.js

@@ -0,0 +1,185 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MFAController = void 0;
+const db_1 = require("@n8n/db");
+const decorators_1 = require("@n8n/decorators");
+const auth_service_1 = require("../auth/auth.service");
+const bad_request_error_1 = require("../errors/response-errors/bad-request.error");
+const event_service_1 = require("../events/event.service");
+const external_hooks_1 = require("../external-hooks");
+const mfa_service_1 = require("../mfa/mfa.service");
+let MFAController = class MFAController {
+    constructor(mfaService, externalHooks, authService, userRepository, eventService) {
+        this.mfaService = mfaService;
+        this.externalHooks = externalHooks;
+        this.authService = authService;
+        this.userRepository = userRepository;
+        this.eventService = eventService;
+    }
+    async enforceMFA(req) {
+        if (req.body.enforce && !(req.authInfo?.usedMfa ?? false)) {
+            throw new bad_request_error_1.BadRequestError('You must enable two-factor authentication on your own account before enforcing it for all users');
+        }
+        await this.mfaService.enforceMFA(req.body.enforce);
+        return;
+    }
+    async canEnableMFA(req) {
+        await this.externalHooks.run('mfa.beforeSetup', [req.user]);
+        return;
+    }
+    async getQRCode(req) {
+        const { email, id, mfaEnabled } = req.user;
+        if (mfaEnabled)
+            throw new bad_request_error_1.BadRequestError('MFA already enabled. Disable it to generate new secret and recovery codes');
+        const { decryptedSecret: secret, decryptedRecoveryCodes: recoveryCodes } = await this.mfaService.getSecretAndRecoveryCodes(id);
+        if (secret && recoveryCodes.length) {
+            const qrCode = this.mfaService.totp.generateTOTPUri({
+                secret,
+                label: email,
+            });
+            return {
+                secret,
+                recoveryCodes,
+                qrCode,
+            };
+        }
+        const newRecoveryCodes = this.mfaService.generateRecoveryCodes();
+        const newSecret = this.mfaService.totp.generateSecret();
+        const qrCode = this.mfaService.totp.generateTOTPUri({ secret: newSecret, label: email });
+        await this.mfaService.saveSecretAndRecoveryCodes(id, newSecret, newRecoveryCodes);
+        return {
+            secret: newSecret,
+            qrCode,
+            recoveryCodes: newRecoveryCodes,
+        };
+    }
+    async activateMFA(req, res) {
+        const { mfaCode = null } = req.body;
+        const { id, mfaEnabled } = req.user;
+        await this.externalHooks.run('mfa.beforeSetup', [req.user]);
+        const { decryptedSecret: secret, decryptedRecoveryCodes: recoveryCodes } = await this.mfaService.getSecretAndRecoveryCodes(id);
+        if (!mfaCode)
+            throw new bad_request_error_1.BadRequestError('Token is required to enable MFA feature');
+        if (mfaEnabled)
+            throw new bad_request_error_1.BadRequestError('MFA already enabled');
+        if (!secret || !recoveryCodes.length) {
+            throw new bad_request_error_1.BadRequestError('Cannot enable MFA without generating secret and recovery codes');
+        }
+        const verified = this.mfaService.totp.verifySecret({ secret, mfaCode, window: 10 });
+        if (!verified)
+            throw new bad_request_error_1.BadRequestError('MFA code expired. Close the modal and enable MFA again', 997);
+        const updatedUser = await this.mfaService.enableMfa(id);
+        this.eventService.emit('user-mfa-enabled', {
+            user: {
+                id: req.user.id,
+                email: req.user.email,
+                firstName: req.user.firstName,
+                lastName: req.user.lastName,
+                role: req.user.role,
+            },
+        });
+        this.authService.issueCookie(res, updatedUser, verified, req.browserId);
+    }
+    async disableMFA(req, res) {
+        const { id: userId } = req.user;
+        const { mfaCode, mfaRecoveryCode } = req.body;
+        const mfaCodeDefined = mfaCode && typeof mfaCode === 'string';
+        const mfaRecoveryCodeDefined = mfaRecoveryCode && typeof mfaRecoveryCode === 'string';
+        if (!mfaCodeDefined === !mfaRecoveryCodeDefined) {
+            throw new bad_request_error_1.BadRequestError('Either MFA code or recovery code is required to disable MFA feature');
+        }
+        if (mfaCodeDefined) {
+            await this.mfaService.disableMfaWithMfaCode(userId, mfaCode);
+        }
+        else if (mfaRecoveryCodeDefined) {
+            await this.mfaService.disableMfaWithRecoveryCode(userId, mfaRecoveryCode);
+        }
+        this.eventService.emit('user-mfa-disabled', {
+            user: {
+                id: req.user.id,
+                email: req.user.email,
+                firstName: req.user.firstName,
+                lastName: req.user.lastName,
+                role: req.user.role,
+            },
+            disableMethod: mfaCodeDefined ? 'mfaCode' : 'recoveryCode',
+        });
+        const updatedUser = await this.userRepository.findOneOrFail({
+            where: { id: userId },
+            relations: ['role'],
+        });
+        this.authService.issueCookie(res, updatedUser, false, req.browserId);
+    }
+    async verifyMFA(req) {
+        const { id } = req.user;
+        const { mfaCode } = req.body;
+        const { decryptedSecret: secret } = await this.mfaService.getSecretAndRecoveryCodes(id);
+        if (!mfaCode)
+            throw new bad_request_error_1.BadRequestError('MFA code is required to enable MFA feature');
+        if (!secret)
+            throw new bad_request_error_1.BadRequestError('No MFA secret se for this user');
+        const verified = this.mfaService.totp.verifySecret({ secret, mfaCode });
+        if (!verified)
+            throw new bad_request_error_1.BadRequestError('MFA secret could not be verified');
+    }
+};
+exports.MFAController = MFAController;
+__decorate([
+    (0, decorators_1.Post)('/enforce-mfa'),
+    (0, decorators_1.GlobalScope)('user:enforceMfa'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "enforceMFA", null);
+__decorate([
+    (0, decorators_1.Post)('/can-enable', {
+        allowSkipMFA: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "canEnableMFA", null);
+__decorate([
+    (0, decorators_1.Get)('/qr', {
+        allowSkipMFA: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "getQRCode", null);
+__decorate([
+    (0, decorators_1.Post)('/enable', { rateLimit: true, allowSkipMFA: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "activateMFA", null);
+__decorate([
+    (0, decorators_1.Post)('/disable', { rateLimit: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "disableMFA", null);
+__decorate([
+    (0, decorators_1.Post)('/verify', { rateLimit: true, allowSkipMFA: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], MFAController.prototype, "verifyMFA", null);
+exports.MFAController = MFAController = __decorate([
+    (0, decorators_1.RestController)('/mfa'),
+    __metadata("design:paramtypes", [mfa_service_1.MfaService,
+        external_hooks_1.ExternalHooks,
+        auth_service_1.AuthService,
+        db_1.UserRepository,
+        event_service_1.EventService])
+], MFAController);
+//# sourceMappingURL=mfa.controller.js.map

package/dist/controllers/mfa.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.controller.js","sourceRoot":"","sources":["../../src/controllers/mfa.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA+D;AAC/D,gDAAyE;AAGzE,sDAAkD;AAClD,kFAA6E;AAC7E,0DAAsD;AACtD,qDAAiD;AACjD,mDAA+C;AAIxC,IAAM,aAAa,GAAnB,MAAM,aAAa;IACzB,YACS,UAAsB,EACtB,aAA4B,EAC5B,WAAwB,EACxB,cAA8B,EAC9B,YAA0B;QAJ1B,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IAChC,CAAC;IAIE,AAAN,KAAK,CAAC,UAAU,CAAC,GAAgB;QAChC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;YAI3D,MAAM,IAAI,mCAAe,CACxB,iGAAiG,CACjG,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO;IACR,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY,CAAC,GAAyB;QAC3C,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO;IACR,CAAC;IAKK,AAAN,KAAK,CAAC,SAAS,CAAC,GAAyB;QACxC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE3C,IAAI,UAAU;YACb,MAAM,IAAI,mCAAe,CACxB,2EAA2E,CAC3E,CAAC;QAEH,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,GACvE,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAErD,IAAI,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC;gBACnD,MAAM;gBACN,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;YAEH,OAAO;gBACN,MAAM;gBACN,aAAa;gBACb,MAAM;aACN,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC;QAEjE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAEzF,MAAM,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAElF,OAAO;YACN,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,aAAa,EAAE,gBAAgB;SAC/B,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,GAAiB,EAAE,GAAa;QACjD,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACpC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEpC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAE5D,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,GACvE,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mCAAe,CAAC,yCAAyC,CAAC,CAAC;QAEnF,IAAI,UAAU;YAAE,MAAM,IAAI,mCAAe,CAAC,qBAAqB,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,mCAAe,CAAC,gEAAgE,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpF,IAAI,CAAC,QAAQ;YACZ,MAAM,IAAI,mCAAe,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;QAE1F,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC1C,IAAI,EAAE;gBACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACrB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;gBAC7B,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ;gBAC3B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;aACnB;SACD,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,GAAa;QAC/C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEhC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE9C,MAAM,cAAc,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC;QAE9D,MAAM,sBAAsB,GAAG,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,CAAC;QAEtF,IAAI,CAAC,cAAc,KAAK,CAAC,sBAAsB,EAAE,CAAC;YACjD,MAAM,IAAI,mCAAe,CACxB,qEAAqE,CACrE,CAAC;QACH,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,sBAAsB,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC3C,IAAI,EAAE;gBACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACrB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;gBAC7B,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ;gBAC3B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;aACnB;YACD,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;SAC1D,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;YAC3D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,GAAe;QAC9B,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7B,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAExF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mCAAe,CAAC,4CAA4C,CAAC,CAAC;QAEtF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mCAAe,CAAC,gCAAgC,CAAC,CAAC;QAEzE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mCAAe,CAAC,kCAAkC,CAAC,CAAC;IAC9E,CAAC;CACD,CAAA;AAxKY,sCAAa;AAWnB;IAFL,IAAA,iBAAI,EAAC,cAAc,CAAC;IACpB,IAAA,wBAAW,EAAC,iBAAiB,CAAC;;;;+CAY9B;AAKK;IAHL,IAAA,iBAAI,EAAC,aAAa,EAAE;QACpB,YAAY,EAAE,IAAI;KAClB,CAAC;;;;iDAID;AAKK;IAHL,IAAA,gBAAG,EAAC,KAAK,EAAE;QACX,YAAY,EAAE,IAAI;KAClB,CAAC;;;;8CAsCD;AAGK;IADL,IAAA,iBAAI,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;;;;gDAoCxD;AAGK;IADL,IAAA,iBAAI,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;;;;+CAuCrC;AAGK;IADL,IAAA,iBAAI,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;;;;8CAcxD;wBAvKW,aAAa;IADzB,IAAA,2BAAc,EAAC,MAAM,CAAC;qCAGD,wBAAU;QACP,8BAAa;QACf,0BAAW;QACR,mBAAc;QAChB,4BAAY;GANvB,aAAa,CAwKzB"}

package/dist/controllers/module-settings.controller.d.ts

@@ -0,0 +1,8 @@
+import { FrontendService } from '../services/frontend.service';
+export declare class ModuleSettingsController {
+    private readonly frontendService;
+    constructor(frontendService: FrontendService);
+    getModuleSettings(): {
+        [k: string]: import("@n8n/decorators").ModuleSettings;
+    };
+}

package/dist/controllers/module-settings.controller.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModuleSettingsController = void 0;
+const decorators_1 = require("@n8n/decorators");
+const frontend_service_1 = require("../services/frontend.service");
+let ModuleSettingsController = class ModuleSettingsController {
+    constructor(frontendService) {
+        this.frontendService = frontendService;
+    }
+    getModuleSettings() {
+        return this.frontendService.getModuleSettings();
+    }
+};
+exports.ModuleSettingsController = ModuleSettingsController;
+__decorate([
+    (0, decorators_1.Get)('/'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], ModuleSettingsController.prototype, "getModuleSettings", null);
+exports.ModuleSettingsController = ModuleSettingsController = __decorate([
+    (0, decorators_1.RestController)('/module-settings'),
+    __metadata("design:paramtypes", [frontend_service_1.FrontendService])
+], ModuleSettingsController);
+//# sourceMappingURL=module-settings.controller.js.map

package/dist/controllers/module-settings.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-settings.controller.js","sourceRoot":"","sources":["../../src/controllers/module-settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAsD;AAEtD,kEAA8D;AAGvD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YAA6B,eAAgC;QAAhC,oBAAe,GAAf,eAAe,CAAiB;IAAG,CAAC;IAMjE,iBAAiB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC;IACjD,CAAC;CACD,CAAA;AAVY,4DAAwB;AAOpC;IADC,IAAA,gBAAG,EAAC,GAAG,CAAC;;;;iEAGR;mCATW,wBAAwB;IADpC,IAAA,2BAAc,EAAC,kBAAkB,CAAC;qCAEY,kCAAe;GADjD,wBAAwB,CAUpC"}

package/dist/controllers/node-types.controller.d.ts

@@ -0,0 +1,10 @@
+import { GlobalConfig } from '@n8n/config';
+import { Request } from 'express';
+import type { INodeTypeDescription } from 'n8n-workflow';
+import { NodeTypes } from '../node-types';
+export declare class NodeTypesController {
+    private readonly nodeTypes;
+    private readonly globalConfig;
+    constructor(nodeTypes: NodeTypes, globalConfig: GlobalConfig);
+    getNodeInfo(req: Request): Promise<INodeTypeDescription[]>;
+}

package/dist/controllers/node-types.controller.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeTypesController = void 0;
+const config_1 = require("@n8n/config");
+const decorators_1 = require("@n8n/decorators");
+const promises_1 = require("fs/promises");
+const get_1 = __importDefault(require("lodash/get"));
+const node_types_1 = require("../node-types");
+let NodeTypesController = class NodeTypesController {
+    constructor(nodeTypes, globalConfig) {
+        this.nodeTypes = nodeTypes;
+        this.globalConfig = globalConfig;
+    }
+    async getNodeInfo(req) {
+        const nodeInfos = (0, get_1.default)(req, 'body.nodeInfos', []);
+        const defaultLocale = this.globalConfig.defaultLocale;
+        if (defaultLocale === 'en') {
+            return nodeInfos.reduce((acc, { name, version }) => {
+                const { description } = this.nodeTypes.getByNameAndVersion(name, version);
+                acc.push(description);
+                return acc;
+            }, []);
+        }
+        const populateTranslation = async (name, version, nodeTypes) => {
+            const { description, sourcePath } = this.nodeTypes.getWithSourcePath(name, version);
+            const translationPath = await this.nodeTypes.getNodeTranslationPath({
+                nodeSourcePath: sourcePath,
+                longNodeType: description.name,
+                locale: defaultLocale,
+            });
+            try {
+                const translation = await (0, promises_1.readFile)(translationPath, 'utf8');
+                description.translation = JSON.parse(translation);
+            }
+            catch {
+            }
+            nodeTypes.push(description);
+        };
+        const nodeTypes = [];
+        const promises = nodeInfos.map(async ({ name, version }) => await populateTranslation(name, version, nodeTypes));
+        await Promise.all(promises);
+        return nodeTypes;
+    }
+};
+exports.NodeTypesController = NodeTypesController;
+__decorate([
+    (0, decorators_1.Post)('/'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], NodeTypesController.prototype, "getNodeInfo", null);
+exports.NodeTypesController = NodeTypesController = __decorate([
+    (0, decorators_1.RestController)('/node-types'),
+    __metadata("design:paramtypes", [node_types_1.NodeTypes,
+        config_1.GlobalConfig])
+], NodeTypesController);
+//# sourceMappingURL=node-types.controller.js.map

package/dist/controllers/node-types.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-types.controller.js","sourceRoot":"","sources":["../../src/controllers/node-types.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAA2C;AAC3C,gDAAuD;AAEvD,0CAAuC;AACvC,qDAA6B;AAG7B,6CAAyC;AAGlC,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,SAAoB,EACpB,YAA0B;QAD1B,cAAS,GAAT,SAAS,CAAW;QACpB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,WAAW,CAAC,GAAY;QAC7B,MAAM,SAAS,GAAG,IAAA,aAAG,EAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAA2B,CAAC;QAE3E,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;QAEtD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC1E,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1E,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACtB,OAAO,GAAG,CAAC;YACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACR,CAAC;QAED,MAAM,mBAAmB,GAAG,KAAK,EAChC,IAAY,EACZ,OAAe,EACf,SAAiC,EAChC,EAAE;YACH,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC;gBACnE,cAAc,EAAE,UAAU;gBAC1B,YAAY,EAAE,WAAW,CAAC,IAAI;gBAC9B,MAAM,EAAE,aAAa;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,MAAM,IAAA,mBAAQ,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;gBAE5D,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,SAAS,GAA2B,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAChF,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5B,OAAO,SAAS,CAAC;IAClB,CAAC;CACD,CAAA;AArDY,kDAAmB;AAOzB;IADL,IAAA,iBAAI,EAAC,GAAG,CAAC;;;;sDA8CT;8BApDW,mBAAmB;IAD/B,IAAA,2BAAc,EAAC,aAAa,CAAC;qCAGA,sBAAS;QACN,qBAAY;GAHhC,mBAAmB,CAqD/B"}

package/dist/controllers/oauth/oauth1-credential.controller.d.ts

@@ -0,0 +1,11 @@
+import { Response } from 'express';
+import { OAuthRequest } from '../../requests';
+import { OauthService } from '../../oauth/oauth.service';
+import { Logger } from '@n8n/backend-common';
+export declare class OAuth1CredentialController {
+    private readonly oauthService;
+    private readonly logger;
+    constructor(oauthService: OauthService, logger: Logger);
+    getAuthUri(req: OAuthRequest.OAuth1Credential.Auth): Promise<string>;
+    handleCallback(req: OAuthRequest.OAuth1Credential.Callback, res: Response): Promise<void>;
+}