n8n-nodes-duo 1.0.0

package/dist/nodes/DuoSecurity/V1/duo.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" version="1.1"
+     viewBox="0 0 211.1 211.1"><!--Generator: Adobe Illustrator 29.3.1, SVG Export Plug-In . SVG Version: 2.1.0 Build 151)-->
+	<defs>
+		<style>.st0 {
+			fill: #4d4d4f;
+			}
+
+			.st1 {
+			opacity: .8;
+			}
+
+			.st1, .st2 {
+			fill: #74bf4b;
+			}
+		</style>
+	</defs>
+	<g transform="translate(0 54.35)">
+		<path class="st1" d="M.3,102.4h34c18.2,0,33.1-14.3,34-32.3H.3v32.3h0Z"/>
+		<path class="st2" d="M34.3,34.3H.3v32.3h68c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st2" d="M177.2,34.3c-18.2,0-33.1,14.3-34,32.3h67.9c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st1" d="M177.2,102.4c18.2,0,33.1-14.3,34-32.3h-67.9c.9,18,15.8,32.3,34,32.3"/>
+		<path class="st2" d="M71.7,34.3v34c0,18.2,14.3,33.1,32.3,34V34.3h-32.3Z"/>
+		<polygon class="st1" points="107.4 34.3 107.4 102.4 139.8 102.4 139.8 68.3 139.8 34.3 107.4 34.3"/>
+	</g>
+	<g>
+		<rect class="st0" x="18.7" y=".3" width="4.3" height="17"/>
+		<path class="st0"
+		      d="M44.4,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6-5.2,0-9,3.7-9,8.8Z"/>
+		<path class="st0"
+		      d="M0,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6C3.8,0,0,3.7,0,8.8Z"/>
+		<path class="st0"
+		      d="M70.6,0c-5.2,0-8.9,3.9-8.9,8.8s3.7,8.8,8.9,8.8,8.9-3.9,8.9-8.8S75.8,0,70.6,0ZM70.6,13.3c-2.5,0-4.4-2-4.4-4.5s1.9-4.5,4.4-4.5,4.4,2,4.4,4.5-1.9,4.5-4.4,4.5Z"/>
+		<path class="st0"
+		      d="M36.2,7l-1.2-.4c-.7-.2-1.9-.6-1.9-1.6s.9-1.4,2.6-1.4,3.3.5,3.3.5V.5c-.1,0-2.1-.5-4.1-.5-3.9,0-6.3,2.1-6.3,5.3s2,4.2,4.3,5c.3,0,.7.2.9.3,1.1.3,1.9.8,1.9,1.7s-1,1.6-3.1,1.6-3.6-.5-4-.6v3.9c.2,0,2.3.5,4.6.5,3.3,0,7-1.4,7-5.7s-1.3-4-4-4.9Z"/>
+	</g>
+</svg>

package/dist/nodes/DuoSecurity/duo-dark.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" version="1.1"
+	  viewBox="0 0 211.1 211.1"><!--Generator: Adobe Illustrator 29.3.1, SVG Export Plug-In . SVG Version: 2.1.0 Build 151)-->
+	<defs>
+		<style>.st0 {
+			fill: #4d4d4f;
+			}
+
+			.st1 {
+			opacity: .8;
+			}
+
+			.st1, .st2 {
+			fill: #74bf4b;
+			}
+		</style>
+	</defs>
+	<g transform="translate(0 54.35)">
+		<path class="st1" d="M.3,102.4h34c18.2,0,33.1-14.3,34-32.3H.3v32.3h0Z"/>
+		<path class="st2" d="M34.3,34.3H.3v32.3h68c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st2" d="M177.2,34.3c-18.2,0-33.1,14.3-34,32.3h67.9c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st1" d="M177.2,102.4c18.2,0,33.1-14.3,34-32.3h-67.9c.9,18,15.8,32.3,34,32.3"/>
+		<path class="st2" d="M71.7,34.3v34c0,18.2,14.3,33.1,32.3,34V34.3h-32.3Z"/>
+		<polygon class="st1" points="107.4 34.3 107.4 102.4 139.8 102.4 139.8 68.3 139.8 34.3 107.4 34.3"/>
+	</g>
+	<g>
+		<rect class="st0" x="18.7" y=".3" width="4.3" height="17"/>
+		<path class="st0"
+				d="M44.4,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6-5.2,0-9,3.7-9,8.8Z"/>
+		<path class="st0"
+				d="M0,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6C3.8,0,0,3.7,0,8.8Z"/>
+		<path class="st0"
+				d="M70.6,0c-5.2,0-8.9,3.9-8.9,8.8s3.7,8.8,8.9,8.8,8.9-3.9,8.9-8.8S75.8,0,70.6,0ZM70.6,13.3c-2.5,0-4.4-2-4.4-4.5s1.9-4.5,4.4-4.5,4.4,2,4.4,4.5-1.9,4.5-4.4,4.5Z"/>
+		<path class="st0"
+				d="M36.2,7l-1.2-.4c-.7-.2-1.9-.6-1.9-1.6s.9-1.4,2.6-1.4,3.3.5,3.3.5V.5c-.1,0-2.1-.5-4.1-.5-3.9,0-6.3,2.1-6.3,5.3s2,4.2,4.3,5c.3,0,.7.2.9.3,1.1.3,1.9.8,1.9,1.7s-1,1.6-3.1,1.6-3.6-.5-4-.6v3.9c.2,0,2.3.5,4.6.5,3.3,0,7-1.4,7-5.7s-1.3-4-4-4.9Z"/>
+	</g>
+</svg>

package/dist/nodes/DuoSecurity/duo.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" version="1.1"
+     viewBox="0 0 211.1 211.1"><!--Generator: Adobe Illustrator 29.3.1, SVG Export Plug-In . SVG Version: 2.1.0 Build 151)-->
+	<defs>
+		<style>.st0 {
+			fill: #4d4d4f;
+			}
+
+			.st1 {
+			opacity: .8;
+			}
+
+			.st1, .st2 {
+			fill: #74bf4b;
+			}
+		</style>
+	</defs>
+	<g transform="translate(0 54.35)">
+		<path class="st1" d="M.3,102.4h34c18.2,0,33.1-14.3,34-32.3H.3v32.3h0Z"/>
+		<path class="st2" d="M34.3,34.3H.3v32.3h68c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st2" d="M177.2,34.3c-18.2,0-33.1,14.3-34,32.3h67.9c-.9-18-15.8-32.3-34-32.3"/>
+		<path class="st1" d="M177.2,102.4c18.2,0,33.1-14.3,34-32.3h-67.9c.9,18,15.8,32.3,34,32.3"/>
+		<path class="st2" d="M71.7,34.3v34c0,18.2,14.3,33.1,32.3,34V34.3h-32.3Z"/>
+		<polygon class="st1" points="107.4 34.3 107.4 102.4 139.8 102.4 139.8 68.3 139.8 34.3 107.4 34.3"/>
+	</g>
+	<g>
+		<rect class="st0" x="18.7" y=".3" width="4.3" height="17"/>
+		<path class="st0"
+		      d="M44.4,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6-5.2,0-9,3.7-9,8.8Z"/>
+		<path class="st0"
+		      d="M0,8.8c0,5.5,4.2,8.8,9,8.8s3.3-.5,3.9-.6v-4.6c-.2,0-1.6.9-3.6.9-2.8,0-4.7-2-4.7-4.5s1.9-4.5,4.7-4.5,3.4.8,3.6.9V.6c-.4-.1-1.9-.6-3.9-.6C3.8,0,0,3.7,0,8.8Z"/>
+		<path class="st0"
+		      d="M70.6,0c-5.2,0-8.9,3.9-8.9,8.8s3.7,8.8,8.9,8.8,8.9-3.9,8.9-8.8S75.8,0,70.6,0ZM70.6,13.3c-2.5,0-4.4-2-4.4-4.5s1.9-4.5,4.4-4.5,4.4,2,4.4,4.5-1.9,4.5-4.4,4.5Z"/>
+		<path class="st0"
+		      d="M36.2,7l-1.2-.4c-.7-.2-1.9-.6-1.9-1.6s.9-1.4,2.6-1.4,3.3.5,3.3.5V.5c-.1,0-2.1-.5-4.1-.5-3.9,0-6.3,2.1-6.3,5.3s2,4.2,4.3,5c.3,0,.7.2.9.3,1.1.3,1.9.8,1.9,1.7s-1,1.6-3.1,1.6-3.6-.5-4-.6v3.9c.2,0,2.3.5,4.6.5,3.3,0,7-1.4,7-5.7s-1.3-4-4-4.9Z"/>
+	</g>
+</svg>

package/examples/workflows/check-api-health.json

@@ -0,0 +1,81 @@
+{
+	"id": "wetomate-example-duo-authentication-flow",
+	"name": "[Wetomate Example] Duo Authentication Flow",
+	"nodes": [
+		{
+			"parameters": {},
+			"id": "wetomate-example-duo-manual-trigger",
+			"name": "Start Duo Check",
+			"type": "n8n-nodes-base.manualTrigger",
+			"typeVersion": 1,
+			"position": [0, 0]
+		},
+		{
+			"parameters": { "endpoint": "ping" },
+			"id": "wetomate-example-duo-ping",
+			"name": "1. Check Duo Availability",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [240, 0]
+		},
+		{
+			"parameters": {
+				"endpoint": "preauth",
+				"userIdentifier": { "mode": "username", "value": "alice@example.com" },
+				"preAuthOptionalFields": {
+					"clientSupportsVerifiedPush": true,
+					"ipaddr": "192.0.2.10"
+				}
+			},
+			"id": "wetomate-example-duo-preauth",
+			"name": "2. Check User Access",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [480, 0]
+		},
+		{
+			"parameters": {
+				"endpoint": "auth",
+				"userIdentifier": { "mode": "username", "value": "alice@example.com" },
+				"factor": "push",
+				"device": "auto",
+				"pushinfo": {
+					"pairs": [{ "key": "source", "value": "Wetomate n8n workflow" }]
+				},
+				"authOptionalFields": { "async": true, "type": "Workflow sign-in" }
+			},
+			"id": "wetomate-example-duo-auth",
+			"name": "3. Send Duo Push",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [720, 0]
+		},
+		{
+			"parameters": {
+				"endpoint": "auth_status",
+				"txid": "={{ $json.result.response.txid }}"
+			},
+			"id": "wetomate-example-duo-auth-status",
+			"name": "4. Read Authentication Status",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [960, 0]
+		}
+	],
+	"connections": {
+		"Start Duo Check": {
+			"main": [[{ "node": "1. Check Duo Availability", "type": "main", "index": 0 }]]
+		},
+		"1. Check Duo Availability": {
+			"main": [[{ "node": "2. Check User Access", "type": "main", "index": 0 }]]
+		},
+		"2. Check User Access": {
+			"main": [[{ "node": "3. Send Duo Push", "type": "main", "index": 0 }]]
+		},
+		"3. Send Duo Push": {
+			"main": [[{ "node": "4. Read Authentication Status", "type": "main", "index": 0 }]]
+		}
+	},
+	"active": false,
+	"settings": { "executionOrder": "v1" }
+}

package/examples/workflows/duo-human-in-the-loop-approval.json

@@ -0,0 +1,154 @@
+{
+	"id": "wetomate-example-duo-human-in-the-loop-approval",
+	"name": "[Wetomate Example] Duo Human-in-the-Loop Approval",
+	"nodes": [
+		{
+			"parameters": {
+				"httpMethod": "POST",
+				"path": "wetomate/duo/approval",
+				"responseMode": "onReceived",
+				"options": {}
+			},
+			"id": "wetomate-example-duo-approval-webhook",
+			"name": "Event Trigger",
+			"type": "n8n-nodes-base.webhook",
+			"typeVersion": 2,
+			"position": [0, 0]
+		},
+		{
+			"parameters": {
+				"endpoint": "preauth",
+				"userIdentifier": {
+					"mode": "username",
+					"value": "={{ $json.body.adminUsername }}"
+				},
+				"preAuthOptionalFields": {
+					"clientSupportsVerifiedPush": true,
+					"ipaddr": "={{ $json.body.sourceIp }}"
+				}
+			},
+			"id": "wetomate-example-duo-approval-preauth",
+			"name": "Check Administrator Access",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [240, 0]
+		},
+		{
+			"parameters": {
+				"endpoint": "auth",
+				"userIdentifier": {
+					"mode": "username",
+					"value": "={{ $('Event Trigger').item.json.body.adminUsername }}"
+				},
+				"factor": "push",
+				"device": "auto",
+				"pushinfo": {
+					"pairs": [
+						{
+							"key": "event",
+							"value": "={{ $('Event Trigger').item.json.body.eventId }}"
+						},
+						{
+							"key": "action",
+							"value": "={{ $('Event Trigger').item.json.body.action }}"
+						},
+						{
+							"key": "target",
+							"value": "={{ $('Event Trigger').item.json.body.target }}"
+						}
+					]
+				},
+				"authOptionalFields": {
+					"async": false,
+					"display_username": "={{ $('Event Trigger').item.json.body.requestedBy }}",
+					"type": "Approval required"
+				}
+			},
+			"id": "wetomate-example-duo-approval-auth",
+			"name": "Request Administrator Approval",
+			"type": "n8n-nodes-duo.duoSecurity",
+			"typeVersion": 1,
+			"position": [480, 0]
+		},
+		{
+			"parameters": {
+				"conditions": {
+					"options": {
+						"caseSensitive": true,
+						"leftValue": "",
+						"typeValidation": "strict",
+						"version": 2
+					},
+					"conditions": [
+						{
+							"id": "wetomate-example-duo-approval-allow",
+							"leftValue": "={{ $json.result.response.result }}",
+							"rightValue": "allow",
+							"operator": { "type": "string", "operation": "equals" }
+						}
+					],
+					"combinator": "and"
+				}
+			},
+			"id": "wetomate-example-duo-approval-if",
+			"name": "Approved?",
+			"type": "n8n-nodes-base.if",
+			"typeVersion": 2.2,
+			"position": [720, 0]
+		},
+		{
+			"parameters": {
+				"method": "POST",
+				"url": "={{ $('Event Trigger').item.json.body.actionUrl }}",
+				"sendBody": true,
+				"specifyBody": "json",
+				"jsonBody": "={{ JSON.stringify({ eventId: $('Event Trigger').item.json.body.eventId, action: $('Event Trigger').item.json.body.action, target: $('Event Trigger').item.json.body.target, approvedBy: $('Event Trigger').item.json.body.adminUsername }) }}",
+				"options": {}
+			},
+			"id": "wetomate-example-duo-approval-action",
+			"name": "Execute Approved Action",
+			"type": "n8n-nodes-base.httpRequest",
+			"typeVersion": 4.2,
+			"position": [960, -80]
+		},
+		{
+			"parameters": {
+				"assignments": {
+					"assignments": [
+						{
+							"id": "wetomate-example-duo-approval-denied-message",
+							"name": "status",
+							"type": "string",
+							"value": "Approval denied; action was not executed."
+						}
+					]
+				},
+				"options": {}
+			},
+			"id": "wetomate-example-duo-approval-denied",
+			"name": "Record Denied Approval",
+			"type": "n8n-nodes-base.set",
+			"typeVersion": 3.4,
+			"position": [960, 120]
+		}
+	],
+	"connections": {
+		"Event Trigger": {
+			"main": [[{ "node": "Check Administrator Access", "type": "main", "index": 0 }]]
+		},
+		"Check Administrator Access": {
+			"main": [[{ "node": "Request Administrator Approval", "type": "main", "index": 0 }]]
+		},
+		"Request Administrator Approval": {
+			"main": [[{ "node": "Approved?", "type": "main", "index": 0 }]]
+		},
+		"Approved?": {
+			"main": [
+				[{ "node": "Execute Approved Action", "type": "main", "index": 0 }],
+				[{ "node": "Record Denied Approval", "type": "main", "index": 0 }]
+			]
+		}
+	},
+	"active": false,
+	"settings": { "executionOrder": "v1" }
+}

package/examples/workflows/duo-human-in-the-loop-approval.md

@@ -0,0 +1,49 @@
+# Duo human-in-the-loop approval board
+
+## Core idea
+
+An event asks for a sensitive action. n8n sends the administrator a synchronous Duo Push with enough context to make a decision. The action endpoint is called only after Duo immediately reports `allow`.
+
+```text
+Event Trigger
+      |
+      v
+Check administrator access
+      |
+      v
+Request synchronous Duo Push
+  (event, action, target in pushinfo)
+      |
+      v
+    Approved?
+   /         \
+ allow       deny / timeout
+  /                 \
+Execute action      Record rejection
+```
+
+## Event contract
+
+The webhook expects a JSON body containing:
+
+```json
+{
+	"eventId": "change-123",
+	"action": "restart-service",
+	"target": "payments-api",
+	"actionUrl": "https://automation.example.test/actions/restart",
+	"requestedBy": "release-bot",
+	"adminUsername": "admin@example.com",
+	"sourceIp": "192.0.2.20"
+}
+```
+
+## Questions for the next iteration
+
+- Should a denied or expired request notify the requester?
+- Should the workflow persist the approval decision and Duo transaction ID for audit?
+- Should the action URL be selected from an allowlisted action map instead of accepted from the event?
+- Should approvals require two administrators for high impact actions?
+- Should high impact actions use async authentication and poll `auth_status` instead?
+
+The imported workflow is inactive and intentionally has no credential references. Create a Duo credential, replace the administrator username, and point `actionUrl` at a safe test endpoint before enabling it. The approved branch performs a real HTTP POST.

package/package.json

@@ -0,0 +1,73 @@
+{
+	"name": "n8n-nodes-duo",
+	"version": "1.0.0",
+	"description": "Duo Security multi-factor authentication community node for n8n",
+	"keywords": [
+		"n8n-community-node-package",
+		"n8n",
+		"duo",
+		"duo-security",
+		"mfa",
+		"authentication"
+	],
+	"license": "MIT",
+	"homepage": "https://github.com/wetomate/nodes/tree/main/n8n-nodes-duo#readme",
+	"author": {
+		"name": "Wetomate",
+		"email": "dev@wetomate.de"
+	},
+	"bugs": {
+		"url": "https://github.com/wetomate/nodes/issues"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/wetomate/nodes.git",
+		"directory": "n8n-nodes-duo"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"scripts": {
+		"build": "n8n-node build && node ../configs/build-community-node.mjs",
+		"dev": "tsc --watch",
+		"test": "jest",
+		"format": "prettier --write .",
+		"lint": "n8n-node lint",
+		"lintfix": "n8n-node lint --fix",
+		"prepack": "node ../scripts/validate-community-node-packages.js",
+		"prepublishOnly": "npm run build && npm run lint && npm test"
+	},
+	"files": [
+		"dist",
+		"examples"
+	],
+	"n8n": {
+		"strict": true,
+		"n8nNodesApiVersion": 1,
+		"credentials": [
+			"dist/credentials/DuoSecurityApi.credentials.js"
+		],
+		"nodes": [
+			"dist/nodes/DuoSecurity/DuoSecurity.node.js"
+		]
+	},
+	"devDependencies": {
+		"@n8n/node-cli": "^0.46.4",
+		"@types/jest": "^30.0.0",
+		"@types/node": "^24.0.12",
+		"@wetomate/n8n-node-toolkit": "^1.0.2",
+		"@n8n/di": "^0.10.0",
+		"eslint": "^9.32.0",
+		"jest": "^30.0.5",
+		"jest-mock-extended": "^4.0.0",
+		"n8n-core": "^2.16.0",
+		"n8n-workflow": "^2.16.0",
+		"nock": "^14.0.10",
+		"prettier": "^3.6.2",
+		"ts-jest": "^29.4.1",
+		"typescript": "^5.9.3"
+	},
+	"peerDependencies": {
+		"n8n-workflow": "*"
+	}
+}