n8n-nodes-base 2.44.0 → 2.44.1

package/dist/nodes/Telegram/hitl/tokens.js

@@ -9,20 +9,21 @@ const n8n_core_1 = require("n8n-core");
  * callbacks, and verified against the `X-Telegram-Bot-Api-Secret-Token`
  * header on every incoming callback.
  *
- * Scoped by bot id (the non-secret numeric prefix of the bot's access token),
- * not by credential record or node: every holder of this bot's credential
- * derives the same token, so re-registration is idempotent and a Telegram
- * Trigger forwarding a callback (a different credential record, potentially)
- * still verifies. This intentionally differs from the Telegram Trigger's own
- * `workflowId_nodeId` webhook secret, which stays untouched.
+ * Scoped by the full access token, not by credential record or node: every
+ * holder of this bot's token derives the same value, so re-registration is
+ * idempotent and a Telegram Trigger forwarding a callback (a different
+ * credential record, potentially) still verifies. Rotating the token changes
+ * the value, so every credential for the bot must be updated and the webhook
+ * re-registered by the next Send and Wait run. This intentionally differs
+ * from the Telegram Trigger's own `workflowId_nodeId` webhook secret, which
+ * stays untouched.
  */
 function deriveHitlSecretToken(accessToken) {
-    const botId = accessToken.split(':')[0];
     const secret = di_1.Container.get(n8n_core_1.InstanceSettings).hmacSignatureSecret;
     // Telegram's secret_token accepts 1-256 chars of A-Za-z0-9_-, exactly the
     // base64url alphabet.
     return (0, crypto_1.createHmac)('sha256', secret)
-        .update(`n8n-telegram-hitl-secret:${botId}`)
+        .update(`n8n-telegram-hitl-secret:${accessToken}`)
         .digest('base64url')
         .slice(0, 43);
 }

package/dist/nodes/Telegram/hitl/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../nodes/Telegram/hitl/tokens.ts"],"names":[],"mappings":";;;AAAA,gCAAoC;AACpC,mCAAoC;AACpC,uCAA4C;AAE5C;;;;;;;;;;;GAWG;AACH,+BAAsC,WAAmB;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,cAAS,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,mBAAmB,CAAC;IAEnE,0EAA0E;IAC1E,sBAAsB;IACtB,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SACjC,MAAM,CAAC,4BAA4B,KAAK,EAAE,CAAC;SAC3C,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../nodes/Telegram/hitl/tokens.ts"],"names":[],"mappings":";;;AAAA,gCAAoC;AACpC,mCAAoC;AACpC,uCAA4C;AAE5C;;;;;;;;;;;;;GAaG;AACH,+BAAsC,WAAmB;IACxD,MAAM,MAAM,GAAG,cAAS,CAAC,GAAG,CAAC,2BAAgB,CAAC,CAAC,mBAAmB,CAAC;IAEnE,0EAA0E;IAC1E,sBAAsB;IACtB,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SACjC,MAAM,CAAC,4BAA4B,WAAW,EAAE,CAAC;SACjD,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChB,CAAC"}

package/dist/nodes/Wait/Wait.node.d.ts

@@ -8,11 +8,11 @@ export declare class Wait extends Webhook {
         webhookResponse?: undefined;
         workflowData?: undefined;
     } | {
-        noWebhookResponse?: undefined;
         webhookResponse: {
             status: number;
         };
         workflowData: INodeExecutionData[][];
+        noWebhookResponse?: undefined;
     }>;
     execute(context: IExecuteFunctions): Promise<INodeExecutionData[][]>;
     private configureAndPutToWait;