n8n-core 2.13.0 → 2.14.0

package/dist/utils/signature-helpers.js

@@ -1,16 +1,24 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateUrlSignature = generateUrlSignature;
 exports.prepareUrlForSigning = prepareUrlForSigning;
-const crypto_1 = __importDefault(require("crypto"));
+exports.validateUrlSignature = validateUrlSignature;
+const crypto_1 = require("crypto");
+const constants_1 = require("../constants");
 function generateUrlSignature(url, secret) {
-    const token = crypto_1.default.createHmac('sha256', secret).update(url).digest('hex');
-    return token;
+    return (0, crypto_1.createHmac)('sha256', secret).update(url).digest('hex');
 }
 function prepareUrlForSigning(url) {
-    return `${url.host}${url.pathname}${url.search}`;
+    const urlForSigning = new URL(url.toString());
+    urlForSigning.searchParams.delete(constants_1.WAITING_TOKEN_QUERY_PARAM);
+    return `${urlForSigning.pathname}${urlForSigning.search}`;
+}
+function validateUrlSignature(providedSignature, url, secret) {
+    const urlString = prepareUrlForSigning(url);
+    const expectedSignature = generateUrlSignature(urlString, secret);
+    if (providedSignature.length !== expectedSignature.length) {
+        return false;
+    }
+    return (0, crypto_1.timingSafeEqual)(Buffer.from(providedSignature), Buffer.from(expectedSignature));
 }
 //# sourceMappingURL=signature-helpers.js.map

package/dist/utils/signature-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature-helpers.js","sourceRoot":"","sources":["../../src/utils/signature-helpers.ts"],"names":[],"mappings":";;;;;AAKA,oDAGC;AAKD,oDAEC;AAfD,oDAA4B;AAK5B,SAAgB,oBAAoB,CAAC,GAAW,EAAE,MAAc;IAC/D,MAAM,KAAK,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACd,CAAC;AAKD,SAAgB,oBAAoB,CAAC,GAAQ;IAC5C,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"signature-helpers.js","sourceRoot":"","sources":["../../src/utils/signature-helpers.ts"],"names":[],"mappings":";;AAQA,oDAEC;AAKD,oDAIC;AAWD,oDASC;AAvCD,mCAAqD;AAErD,4CAAyD;AAMzD,SAAgB,oBAAoB,CAAC,GAAW,EAAE,MAAc;IAC/D,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAKD,SAAgB,oBAAoB,CAAC,GAAQ;IAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,qCAAyB,CAAC,CAAC;IAC7D,OAAO,GAAG,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC;AAC3D,CAAC;AAWD,SAAgB,oBAAoB,CAAC,iBAAyB,EAAE,GAAQ,EAAE,MAAc;IACvF,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAElE,IAAI,iBAAiB,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,IAAA,wBAAe,EAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACxF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-core",
-  "version": "2.13.0",
+  "version": "2.14.0",
   "description": "Core functionality of n8n",
   "main": "dist/index",
   "types": "dist/index.d.ts",
@@ -13,8 +13,8 @@
   "files": [
     "dist",
     "bin",
-    "LICENSE_EE.md",
-    "LICENSE.md"
+    "LICENSE.md",
+    "LICENSE_EE.md"
   ],
   "devDependencies": {
     "@types/express": "^5.0.1",
@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "3.808.0",
-    "@langchain/core": "1.1.31",
+    "@langchain/core": "1.1.34",
     "@sentry/node": "^10.36.0",
     "@sentry/node-native": "^10.36.0",
     "@sentry/profiling-node": "^10.36.0",
@@ -60,14 +60,14 @@
     "winston": "3.14.2",
     "xml2js": "0.6.2",
     "zod": "3.25.67",
-    "@n8n/client-oauth2": "1.0.0",
-    "@n8n/config": "2.12.0",
-    "@n8n/backend-common": "1.13.0",
-    "@n8n/constants": "0.19.0",
-    "@n8n/decorators": "1.13.0",
+    "@n8n/backend-common": "1.14.0",
+    "@n8n/client-oauth2": "1.1.0",
+    "@n8n/config": "2.13.0",
     "@n8n/di": "0.10.0",
-    "@n8n/workflow-sdk": "0.6.0",
-    "n8n-workflow": "2.13.0"
+    "@n8n/constants": "0.19.0",
+    "@n8n/decorators": "1.14.0",
+    "n8n-workflow": "2.14.0",
+    "@n8n/workflow-sdk": "0.7.0"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://n8n.io",