@blucca/n8n-check 0.0.0-stage → 0.1.7

package/examples/propfind-body/README.md

@@ -0,0 +1,75 @@
+# Verify PROPFIND sends its XML body after an n8n upgrade
+
+**The reported Nextcloud workflow sends its complete XML body on n8n 2.41.7. Keep that behavior as a repeatable check.**
+
+[KroetschVialutions reported #39395](https://github.com/n8n-io/n8n/issues/39395) with a three-node workflow on n8n 2.38.4 / HTTP Request 4.5: a PROPFIND request silently omitted its raw XML body. The author included an unclosed `<invalid>` element to make a received body visibly fail XML parsing.
+
+Upstream [PR #24151](https://github.com/n8n-io/n8n/pull/24151) added WebDAV-method support. The [2.38.4 implementation](https://github.com/n8n-io/n8n/blob/n8n%402.38.4/packages/nodes-base/nodes/HttpRequest/V3/HttpRequestV3.node.ts#L458) restricted raw-body serialization to PATCH/POST/PUT/GET. The [2.41.7 implementation](https://github.com/n8n-io/n8n/blob/n8n%402.41.7/packages/nodes-base/nodes/HttpRequest/V3/HttpRequestV3.node.ts#L460) sends a PROPFIND body.
+
+## What this checks
+
+[`workflow.json`](workflow.json) comes from the author's public reproduction. Its HTTP Request parameters, node version and diagnostic XML are preserved. Instance metadata is removed and node IDs are replaced with local labels. The Code-node fixture supplies synthetic values; n8n-check redirects the HTTP URL to a local mock.
+
+[`case.json`](case.json) checks:
+
+- Exactly **one PROPFIND request** to the mock route.
+- The **complete 698-character XML body**, including newlines and the author's diagnostic marker.
+- The HTTP Request node's exact output from the declared JSON mock response.
+
+The real n8n engine executes the HTTP node. This is an **HTTP transmission contract**: the mock captures the body and returns a declared response. Nextcloud authentication, XML parsing, requested properties and live instance behavior have their own integration checks. Remove the deliberate `<invalid>` marker when testing a real property query; update the case's expected body when changing the XML.
+
+## Run the upgrade check
+
+**[Compare the unchanged export on n8n 2.38.4 and 2.41.7](../version-matrix/)** using the v0.1.4 Action. The measured older engine omits the body; 2.41.7 preserves all 698 characters. The commands below run the default 2.41.7 image.
+
+With Git and Docker:
+
+```sh
+git clone --branch v0.1.4 https://github.com/blucca/n8n-check.git
+cd n8n-check
+docker build -t n8n-check .
+
+docker run --rm --network none -v "$PWD:/work" n8n-check \
+  examples/propfind-body/workflow.json examples/propfind-body/case.json \
+  --out /work/results/propfind
+# PASSED ... n8n 2.41.7; 6 checks; exit 0
+```
+
+On Linux, add `--user "$(id -u):$(id -g)"` when your user ID differs from the image's default 1000. Windows users can run these commands in WSL.
+
+The Dockerfile pins n8n 2.41.7. The container uses loopback-only networking; fixture values replace the input Code node and all HTTP traffic goes to the local mock. Reports appear in `results/propfind/report.json` and `junit.xml`.
+
+### Check your own export and installed runtime
+
+From this repository checkout, with the [CLI installed](../../README.md#install-the-cli-from-github):
+
+```sh
+n8n-check /path/to/nextcloud-export.json examples/propfind-body/case.json \
+  --n8n /path/to/n8n --allow-network --out results/propfind-local
+```
+
+Use the same `Code in JavaScript` input boundary and `HTTP Request` node names, or update those names in the case. This case expects the diagnostic XML from the report verbatim. `--n8n` selects the installed runtime you want to verify; its version is recorded in the report. `--allow-network` selects trusted local execution on the host; the declared HTTP mock still captures this request locally. The Docker command above provides network isolation.
+
+## Confirm the test catches a missing body
+
+[`no-body-control.json`](no-body-control.json) changes exactly one HTTP parameter: `sendBody` becomes `false`. It is an intentional negative control using the same n8n version.
+
+```sh
+docker run --rm --network none -v "$PWD:/work" n8n-check \
+  examples/propfind-body/no-body-control.json examples/propfind-body/case.json \
+  --out /work/results/propfind-no-body
+# FAILED ... exact body: expected XML, actual null; exit 1
+```
+
+The workflow execution itself still succeeds. The request-body assertion detects the omitted business payload.
+
+## Recorded results
+
+[Observed JSON](observed-results.json) includes the original-export independent run and runs of both published exports, with versions, exact request bodies and check results. These runs used n8n-check 0.1.2, n8n 2.41.7 and a Linux namespace with only the loopback interface.
+
+| Workflow | n8n execution | Requests | XML body | Check |
+|---|---|---|---|---|
+| Reported parameters | Success | 1 PROPFIND | All 698 characters | 6/6, exit 0 |
+| `sendBody=false` control | Success | 1 PROPFIND | Empty (`null`) | Body assertion fails, exit 1 |
+
+The published fixture and recorded results are maintained by [blucca](https://github.com/blucca), an AI-operated software practice. Original reproduction credit: [KroetschVialutions, n8n #39395](https://github.com/n8n-io/n8n/issues/39395).

package/examples/propfind-body/case.json

@@ -0,0 +1,51 @@
+{
+  "version": 1,
+  "name": "Issue 39395 - PROPFIND transmits its XML body",
+  "input": {
+    "node": "Code in JavaScript",
+    "items": [
+      {
+        "nextcloudInstance": "example.invalid",
+        "userId": "user_id",
+        "auth": "Basic synthetic-placeholder",
+        "webDavPath": "fixture"
+      }
+    ]
+  },
+  "mocks": [
+    {
+      "node": "HTTP Request",
+      "url": "/dav",
+      "routes": [
+        {
+          "method": "PROPFIND",
+          "path": "/dav",
+          "responses": [
+            {
+              "status": 200,
+              "json": {
+                "received": true
+              }
+            }
+          ],
+          "expect": {
+            "count": 1,
+            "bodies": [
+              "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+            ]
+          }
+        }
+      ]
+    }
+  ],
+  "assertions": [
+    {
+      "node": "HTTP Request",
+      "equals": [
+        {
+          "received": true
+        }
+      ]
+    }
+  ]
+}

package/examples/propfind-body/no-body-control.json

@@ -0,0 +1,96 @@
+{
+  "name": "PropFind Test",
+  "nodes": [
+    {
+      "parameters": {},
+      "type": "n8n-nodes-base.manualTrigger",
+      "typeVersion": 1,
+      "position": [
+        0,
+        0
+      ],
+      "id": "manual-trigger",
+      "name": "When clicking ‘Execute workflow’"
+    },
+    {
+      "parameters": {
+        "method": "PROPFIND",
+        "url": "=https://{{$json.nextcloudInstance}}/remote.php/dav/files/{{$json.userId}}/{{$json.webDavPath}}",
+        "sendHeaders": true,
+        "headerParameters": {
+          "parameters": [
+            {
+              "name": "OCS-APIRequest",
+              "value": "true"
+            },
+            {
+              "name": "Depth",
+              "value": "1"
+            },
+            {
+              "name": "Authorization",
+              "value": "={{$json.auth}}"
+            },
+            {
+              "name": "x-requested-with",
+              "value": "XMLHttpRequest"
+            }
+          ]
+        },
+        "sendBody": false,
+        "contentType": "raw",
+        "rawContentType": "application/xml",
+        "body": "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>",
+        "options": {}
+      },
+      "type": "n8n-nodes-base.httpRequest",
+      "typeVersion": 4.5,
+      "position": [
+        448,
+        0
+      ],
+      "id": "propfind-request",
+      "name": "HTTP Request"
+    },
+    {
+      "parameters": {
+        "jsCode": "return {\n  nextcloudInstance: \"nextcloud.instance\", // just domain, no protocol\n  userId: \"user_id\",\n  auth: \"Basic app_password\",\n  webDavPath: \"webdav_path\",\n}"
+      },
+      "type": "n8n-nodes-base.code",
+      "typeVersion": 2,
+      "position": [
+        224,
+        0
+      ],
+      "id": "fixture-input",
+      "name": "Code in JavaScript"
+    }
+  ],
+  "connections": {
+    "When clicking ‘Execute workflow’": {
+      "main": [
+        [
+          {
+            "node": "Code in JavaScript",
+            "type": "main",
+            "index": 0
+          }
+        ]
+      ]
+    },
+    "Code in JavaScript": {
+      "main": [
+        [
+          {
+            "node": "HTTP Request",
+            "type": "main",
+            "index": 0
+          }
+        ]
+      ]
+    }
+  },
+  "settings": {
+    "executionOrder": "v1"
+  }
+}

package/examples/propfind-body/observed-results.json

@@ -0,0 +1,307 @@
+{
+  "description": "Actual n8n 2.41.7 executions of the public reproduction from n8n issue 39395, using local HTTP capture and synthetic fixture inputs. The original export was independently rerun, then both published exports were checked in loopback-only namespaces.",
+  "sourceIssue": "https://github.com/n8n-io/n8n/issues/39395",
+  "upstreamFix": "https://github.com/n8n-io/n8n/pull/24151",
+  "caseSha256": "e37304adb5eacfad5ca773a77510505a8c3c89f1be451854d3b61e63a7029add",
+  "scope": "Exact PROPFIND method, request count, raw XML body and declared mock response. Live Nextcloud authentication, XML parsing and property lookup are separate integration checks.",
+  "runs": [
+    {
+      "description": "Original issue export, independent run",
+      "workflow": "original issue export",
+      "workflowSha256": "e3c4cdacb788a24fa32a20eba16ec0bb9c11f52386805bc6e962a4a76581333d",
+      "runnerVersion": "0.1.2",
+      "n8nVersion": "2.41.7",
+      "nodeVersion": "v26.10.0",
+      "startedAt": "2026-10-06T12:16:15.159Z",
+      "durationMs": 9355,
+      "network": {
+        "mode": "loopback-only",
+        "enforced": true,
+        "interfaces": [
+          "lo"
+        ]
+      },
+      "status": "passed",
+      "exitCode": 0,
+      "preparation": {
+        "inputNode": "Code in JavaScript",
+        "changes": [
+          {
+            "node": "Code in JavaScript",
+            "change": "replace with fixture JSON items"
+          },
+          {
+            "node": "HTTP Request",
+            "change": "route URL to local mock; remove credential references; authentication=none"
+          }
+        ],
+        "omittedNodes": [
+          "When clicking ‘Execute workflow’"
+        ]
+      },
+      "checks": [
+        {
+          "name": "n8n execution succeeds",
+          "passed": true,
+          "actual": {
+            "cliExitCode": 0,
+            "lastNode": "HTTP Request",
+            "executionFound": true
+          }
+        },
+        {
+          "name": "HTTP Request: output 0",
+          "passed": true,
+          "expected": [
+            {
+              "received": true
+            }
+          ],
+          "actual": [
+            {
+              "received": true
+            }
+          ]
+        },
+        {
+          "name": "mock: all requests match routes",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "mock: request limits and server",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request count",
+          "passed": true,
+          "expected": 1,
+          "actual": 1
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request bodies",
+          "passed": true,
+          "expected": [
+            "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+          ],
+          "actual": [
+            "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+          ]
+        }
+      ],
+      "requests": [
+        {
+          "node": "HTTP Request",
+          "method": "PROPFIND",
+          "path": "/dav",
+          "body": "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>",
+          "matched": true,
+          "status": 200,
+          "response": {
+            "received": true
+          }
+        }
+      ],
+      "relationToPublishedExport": "HTTP parameters, node names, types, versions and connections match workflow.json; instance metadata and node IDs were cleaned for publication."
+    },
+    {
+      "description": "Published metadata-cleaned export",
+      "workflow": "workflow.json",
+      "workflowSha256": "f365021255ae250b287848de1bb14c47ed2a244127957268044643ab956156e8",
+      "runnerVersion": "0.1.2",
+      "n8nVersion": "2.41.7",
+      "nodeVersion": "v26.10.0",
+      "startedAt": "2026-10-06T12:19:46.611Z",
+      "durationMs": 10565,
+      "network": {
+        "mode": "loopback-only",
+        "enforced": true,
+        "interfaces": [
+          "lo"
+        ]
+      },
+      "status": "passed",
+      "exitCode": 0,
+      "preparation": {
+        "inputNode": "Code in JavaScript",
+        "changes": [
+          {
+            "node": "Code in JavaScript",
+            "change": "replace with fixture JSON items"
+          },
+          {
+            "node": "HTTP Request",
+            "change": "route URL to local mock; remove credential references; authentication=none"
+          }
+        ],
+        "omittedNodes": [
+          "When clicking ‘Execute workflow’"
+        ]
+      },
+      "checks": [
+        {
+          "name": "n8n execution succeeds",
+          "passed": true,
+          "actual": {
+            "cliExitCode": 0,
+            "lastNode": "HTTP Request",
+            "executionFound": true
+          }
+        },
+        {
+          "name": "HTTP Request: output 0",
+          "passed": true,
+          "expected": [
+            {
+              "received": true
+            }
+          ],
+          "actual": [
+            {
+              "received": true
+            }
+          ]
+        },
+        {
+          "name": "mock: all requests match routes",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "mock: request limits and server",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request count",
+          "passed": true,
+          "expected": 1,
+          "actual": 1
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request bodies",
+          "passed": true,
+          "expected": [
+            "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+          ],
+          "actual": [
+            "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+          ]
+        }
+      ],
+      "requests": [
+        {
+          "node": "HTTP Request",
+          "method": "PROPFIND",
+          "path": "/dav",
+          "body": "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>",
+          "matched": true,
+          "status": 200,
+          "response": {
+            "received": true
+          }
+        }
+      ]
+    },
+    {
+      "description": "Intentional negative control: sendBody=false",
+      "workflow": "no-body-control.json",
+      "workflowSha256": "250f9dc350fbfd9bf35efe72ec24bbf1dd90a407b61c673e9cfbc88df7cc94bb",
+      "runnerVersion": "0.1.2",
+      "n8nVersion": "2.41.7",
+      "nodeVersion": "v26.10.0",
+      "startedAt": "2026-10-06T12:19:46.611Z",
+      "durationMs": 10625,
+      "network": {
+        "mode": "loopback-only",
+        "enforced": true,
+        "interfaces": [
+          "lo"
+        ]
+      },
+      "status": "failed",
+      "exitCode": 1,
+      "preparation": {
+        "inputNode": "Code in JavaScript",
+        "changes": [
+          {
+            "node": "Code in JavaScript",
+            "change": "replace with fixture JSON items"
+          },
+          {
+            "node": "HTTP Request",
+            "change": "route URL to local mock; remove credential references; authentication=none"
+          }
+        ],
+        "omittedNodes": [
+          "When clicking ‘Execute workflow’"
+        ]
+      },
+      "checks": [
+        {
+          "name": "n8n execution succeeds",
+          "passed": true,
+          "actual": {
+            "cliExitCode": 0,
+            "lastNode": "HTTP Request",
+            "executionFound": true
+          }
+        },
+        {
+          "name": "HTTP Request: output 0",
+          "passed": true,
+          "expected": [
+            {
+              "received": true
+            }
+          ],
+          "actual": [
+            {
+              "received": true
+            }
+          ]
+        },
+        {
+          "name": "mock: all requests match routes",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "mock: request limits and server",
+          "passed": true,
+          "actual": []
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request count",
+          "passed": true,
+          "expected": 1,
+          "actual": 1
+        },
+        {
+          "name": "HTTP Request: PROPFIND /dav request bodies",
+          "passed": false,
+          "expected": [
+            "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>"
+          ],
+          "actual": [
+            null
+          ]
+        }
+      ],
+      "requests": [
+        {
+          "node": "HTTP Request",
+          "method": "PROPFIND",
+          "path": "/dav",
+          "body": null,
+          "matched": true,
+          "status": 200,
+          "response": {
+            "received": true
+          }
+        }
+      ]
+    }
+  ]
+}

package/examples/propfind-body/workflow.json

@@ -0,0 +1,96 @@
+{
+  "name": "PropFind Test",
+  "nodes": [
+    {
+      "parameters": {},
+      "type": "n8n-nodes-base.manualTrigger",
+      "typeVersion": 1,
+      "position": [
+        0,
+        0
+      ],
+      "id": "manual-trigger",
+      "name": "When clicking ‘Execute workflow’"
+    },
+    {
+      "parameters": {
+        "method": "PROPFIND",
+        "url": "=https://{{$json.nextcloudInstance}}/remote.php/dav/files/{{$json.userId}}/{{$json.webDavPath}}",
+        "sendHeaders": true,
+        "headerParameters": {
+          "parameters": [
+            {
+              "name": "OCS-APIRequest",
+              "value": "true"
+            },
+            {
+              "name": "Depth",
+              "value": "1"
+            },
+            {
+              "name": "Authorization",
+              "value": "={{$json.auth}}"
+            },
+            {
+              "name": "x-requested-with",
+              "value": "XMLHttpRequest"
+            }
+          ]
+        },
+        "sendBody": true,
+        "contentType": "raw",
+        "rawContentType": "application/xml",
+        "body": "<?xml version=\"1.0\"?>\n<invalid>\n<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\" xmlns:nc=\"http://nextcloud.org/ns\">\n    <d:prop>\n        <d:creationdate />\n        <nc:upload_time />\n        <d:getlastmodified />\n        <d:getetag />\n        <d:getcontenttype />\n        <d:resourcetype />\n        <d:quota-used-bytes />\n        <d:quota-available-bytes />\n        <d:displayname />\n        <nc:has-preview />\n        <oc:id />\n        <oc:fileid />\n        <oc:permissions />\n        <oc:size />\n        <oc:favorite />\n        <oc:tags />\n        <oc:comments-unread />\n        <oc:owner-id />\n        <oc:owner-display-name />\n        <oc:share-types />\n    </d:prop>\n</d:propfind>",
+        "options": {}
+      },
+      "type": "n8n-nodes-base.httpRequest",
+      "typeVersion": 4.5,
+      "position": [
+        448,
+        0
+      ],
+      "id": "propfind-request",
+      "name": "HTTP Request"
+    },
+    {
+      "parameters": {
+        "jsCode": "return {\n  nextcloudInstance: \"nextcloud.instance\", // just domain, no protocol\n  userId: \"user_id\",\n  auth: \"Basic app_password\",\n  webDavPath: \"webdav_path\",\n}"
+      },
+      "type": "n8n-nodes-base.code",
+      "typeVersion": 2,
+      "position": [
+        224,
+        0
+      ],
+      "id": "fixture-input",
+      "name": "Code in JavaScript"
+    }
+  ],
+  "connections": {
+    "When clicking ‘Execute workflow’": {
+      "main": [
+        [
+          {
+            "node": "Code in JavaScript",
+            "type": "main",
+            "index": 0
+          }
+        ]
+      ]
+    },
+    "Code in JavaScript": {
+      "main": [
+        [
+          {
+            "node": "HTTP Request",
+            "type": "main",
+            "index": 0
+          }
+        ]
+      ]
+    }
+  },
+  "settings": {
+    "executionOrder": "v1"
+  }
+}