n8n-nodes-duo 1.0.0

package/LICENSE.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wetomate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+# n8n-nodes-duo
+
+> A Wetomate n8n community node for the Duo Security multi-factor authentication API.
+> This package provides authentication, pre-authentication, status checks, and availability checks directly within n8n workflows.
+
+## Prerequisites
+
+- n8n version 1.x or higher
+- Node.js v14+
+- Duo Security account with:
+   - Integration Key
+   - Secret Key
+   - API Hostname (e.g., `api-xxxxxxxx.duosecurity.com`)
+
+## Installation
+
+Install the community package from your n8n instance's **Settings > Community Nodes** page using:
+
+```text
+n8n-nodes-duo
+```
+
+## Credential setup
+
+Create a new Duo credential in n8n with these fields:
+
+- **Integration Key**
+- **Secret Key**
+- **API Hostname**
+
+Use this credential in all Duo node endpoints.
+See the [Duo Auth API documentation](https://duo.com/docs/authapi) for integration setup and endpoint details.
+
+## Supported endpoints
+
+| Endpoint               | Description                                                                                                           |
+| ---------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| `/auth/v2/auth`        | Starts second-factor authentication with a push notification, passcode, phone call, or SMS passcode delivery.        |
+| `/auth/v2/auth_status` | Waits for the next status update from an asynchronous authentication transaction.                                     |
+| `/auth/v2/ping`        | Checks whether the Duo Auth API is available without requiring a signed request.                                      |
+| `/auth/v2/preauth`     | Checks whether a user may authenticate and returns the authentication factors available to that user.                |
+
+Each operation accepts input parameters and returns JSON output.
+
+## Development and testing
+
+When the repository Docker development environment starts, it imports the inactive [`Duo Authentication Flow`](./examples/workflows/check-api-health.json) and [`Duo Human-in-the-Loop Approval`](./examples/workflows/duo-human-in-the-loop-approval.json) sample workflows. The authentication example demonstrates availability checking, user pre-authentication, an asynchronous push request, and transaction status polling. The approval example adds an event webhook, contextual `pushinfo`, a synchronous push approval, an allow/deny gate, and an action HTTP request; its brainstorming board is documented in [`duo-human-in-the-loop-approval.md`](./examples/workflows/duo-human-in-the-loop-approval.md). Both workflows intentionally omit credentials. Create or select a Duo credential and use test users and endpoints before running them; the push and approved action steps have real effects.
+
+From the repository root, install the locked dependencies and run the Duo package checks with:
+
+```bash
+npm ci
+npm run build --workspace n8n-nodes-duo
+npm run lint --workspace n8n-nodes-duo
+npm test --workspace n8n-nodes-duo
+```
+
+## Linting
+
+Linting helps ensure code quality, consistency, and prevents common errors.  
+This project uses **ESLint** (and optionally **Prettier** for formatting) to maintain a consistent code style.
+
+### Run the linter
+
+```bash
+npm run lint
+```
+
+### Run Prettier
+
+```bash
+npm run format
+```
+
+## Contributing
+
+Issues and pull requests are welcome! Please ensure code follows linting and testing standards before submitting.
+
+## License
+
+[MIT](./LICENSE.md)

package/dist/credentials/DuoSecurityApi.credentials.js

@@ -0,0 +1,140 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// credentials/DuoSecurityApi.credentials.ts
+var DuoSecurityApi_credentials_exports = {};
+__export(DuoSecurityApi_credentials_exports, {
+  DuoSecurityApi: () => DuoSecurityApi,
+  signV5: () => signV5
+});
+module.exports = __toCommonJS(DuoSecurityApi_credentials_exports);
+var crypto = __toESM(require("crypto"));
+function canonParams(params) {
+  return Object.keys(params).sort().flatMap((k) => {
+    const value = params[k];
+    const keq = encodeURIComponent(k) + "=";
+    return Array.isArray(value) ? value.map((v) => keq + encodeURIComponent(v)) : [keq + encodeURIComponent(value)];
+  }).join("&").replace(/[!'()*]/g, (c) => "%" + c.charCodeAt(0).toString(16).toUpperCase());
+}
+function hashString(to_hash) {
+  return crypto.createHash("sha512").update(to_hash).digest("hex");
+}
+function canonicalizeV5(method, host, path, params, date, body) {
+  return [
+    date,
+    method.toUpperCase(),
+    host.toLowerCase(),
+    path,
+    canonParams(params),
+    hashString(body),
+    hashString("")
+  ].join("\n");
+}
+function signV5(ikey, skey, method, host, path, params, date, body) {
+  const canon = canonicalizeV5(method, host, path, params, date, body);
+  const sig = crypto.createHmac("sha512", skey).update(canon).digest("hex");
+  const auth = Buffer.from([ikey, sig].join(":")).toString("base64");
+  return "Basic " + auth;
+}
+var DuoSecurityApi = class {
+  constructor() {
+    this.name = "duoSecurityApi";
+    this.displayName = "Duo Security API";
+    this.documentationUrl = "https://duo.com";
+    this.icon = {
+      light: "file:../nodes/DuoSecurity/duo.svg",
+      dark: "file:../nodes/DuoSecurity/duo-dark.svg"
+    };
+    this.properties = [
+      {
+        displayName: "Integration Key",
+        name: "ikey",
+        type: "string",
+        default: "",
+        placeholder: "Ex: DIXXXXXXXXXX"
+      },
+      // eslint-disable-next-line @n8n/community-nodes/credential-unnecessary-password
+      {
+        displayName: "Secret Key",
+        name: "skey",
+        type: "string",
+        default: "",
+        typeOptions: {
+          password: true
+        }
+      },
+      {
+        displayName: "API Host",
+        name: "hostname",
+        type: "string",
+        description: "hostname address must be without https or http",
+        placeholder: "Ex: api-XXXXXXXX.duosecurity.com",
+        default: ""
+      }
+    ];
+    this.test = {
+      request: {
+        url: "/auth/v2/check",
+        method: "GET"
+      }
+    };
+  }
+  async authenticate(credentials, requestOptions) {
+    const ikey = credentials.ikey;
+    const skey = credentials.skey;
+    const hostname = credentials.hostname;
+    if (requestOptions.url !== "/auth/v2/ping") {
+      const date = (/* @__PURE__ */ new Date()).toUTCString();
+      const bodyString = requestOptions.body !== void 0 ? requestOptions.body : "";
+      const auth = signV5(
+        ikey,
+        skey,
+        requestOptions.method,
+        hostname,
+        requestOptions.url,
+        requestOptions.qs,
+        date,
+        bodyString
+      );
+      requestOptions.headers = {
+        ...requestOptions.headers,
+        Date: date,
+        Authorization: auth
+      };
+    }
+    requestOptions.baseURL = "https://" + hostname;
+    return requestOptions;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DuoSecurityApi,
+  signV5
+});
+//# sourceMappingURL=DuoSecurityApi.credentials.js.map

package/dist/credentials/DuoSecurityApi.credentials.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../credentials/DuoSecurityApi.credentials.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,aAAwB;AAiBxB,SAAS,YAAY,QAA2C;AAC/D,SAAO,OAAO,KAAK,MAAM,EACvB,KAAK,EACL,QAAQ,CAAC,MAAM;AACf,UAAM,QAAQ,OAAO,CAAC;AACtB,UAAM,MAAM,mBAAmB,CAAC,IAAI;AACpC,WAAO,MAAM,QAAQ,KAAK,IACvB,MAAM,IAAI,CAAC,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAC5C,CAAC,MAAM,mBAAmB,KAAK,CAAC;AAAA,EACpC,CAAC,EACA,KAAK,GAAG,EACR,QAAQ,YAAY,CAAC,MAAM,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC;AAC9E;AAQA,SAAS,WAAW,SAA0B;AAC7C,SAAc,kBAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAChE;AAEA,SAAS,eACR,QACA,MACA,MACA,QACA,MACA,MACS;AACT,SAAO;AAAA,IACN;AAAA,IACA,OAAO,YAAY;AAAA,IACnB,KAAK,YAAY;AAAA,IACjB;AAAA,IACA,YAAY,MAAM;AAAA,IAClB,WAAW,IAAI;AAAA,IACf,WAAW,EAAE;AAAA,EACd,EAAE,KAAK,IAAI;AACZ;AAEO,SAAS,OACf,MACA,MACA,QACA,MACA,MACA,QACA,MACA,MACS;AACT,QAAM,QAAQ,eAAe,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AACnE,QAAM,MAAa,kBAAW,UAAU,IAAI,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAExE,QAAM,OAAO,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,QAAQ;AACjE,SAAO,WAAW;AACnB;AAEO,IAAM,iBAAN,MAAgD;AAAA,EAAhD;AACN,gBAAO;AACP,uBAAc;AACd,4BAAmB;AACnB,gBAAgC;AAAA,MAC/B,OAAO;AAAA,MACP,MAAM;AAAA,IACP;AAEA,sBAAgC;AAAA,MAC/B;AAAA,QACC,aAAa;AAAA,QACb,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,MACd;AAAA;AAAA,MAEA;AAAA,QACC,aAAa;AAAA,QACb,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,UACZ,UAAU;AAAA,QACX;AAAA,MACD;AAAA,MACA;AAAA,QACC,aAAa;AAAA,QACb,MAAM;AAAA,QACN,MAAM;AAAA,QACN,aAAa;AAAA,QACb,aAAa;AAAA,QACb,SAAS;AAAA,MACV;AAAA,IACD;AAsCA,gBAA+B;AAAA,MAC9B,SAAS;AAAA,QACR,KAAK;AAAA,QACL,QAAQ;AAAA,MACT;AAAA,IACD;AAAA;AAAA,EAzCA,MAAM,aACL,aACA,gBAC+B;AAC/B,UAAM,OAAO,YAAY;AACzB,UAAM,OAAO,YAAY;AACzB,UAAM,WAAW,YAAY;AAE7B,QAAI,eAAe,QAAQ,iBAAiB;AAC3C,YAAM,QAAO,oBAAI,KAAK,GAAE,YAAY;AAEpC,YAAM,aACL,eAAe,SAAS,SAAa,eAAe,OAAkB;AAEvE,YAAM,OAAO;AAAA,QACZ;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf;AAAA,QACA,eAAe;AAAA,QACf,eAAe;AAAA,QACf;AAAA,QACA;AAAA,MACD;AAEA,qBAAe,UAAU;AAAA,QACxB,GAAG,eAAe;AAAA,QAClB,MAAM;AAAA,QACN,eAAe;AAAA,MAChB;AAAA,IACD;AAEA,mBAAe,UAAU,aAAa;AACtC,WAAO;AAAA,EACR;AAQD;",
+  "names": []
+}