n8n-nodes-signauf 0.1.2 → 0.1.4

package/dist/credentials/SignaufApi.credentials.js

@@ -15,6 +15,14 @@ class SignaufApi {
                 default: '',
                 required: true,
             },
+            {
+                displayName: 'Webhook Secret',
+                name: 'webhookSecret',
+                type: 'string',
+                typeOptions: { password: true },
+                default: '',
+                description: 'Found in Signauf → Settings → Webhooks. Used to verify that callbacks are genuinely from Signauf.',
+            },
             {
                 displayName: 'Base URL',
                 name: 'baseUrl',

package/dist/nodes/Signauf/Signauf.node.d.ts

@@ -1,5 +1,13 @@
-import { IExecuteFunctions, INodeExecutionData, INodeType, INodeTypeDescription } from 'n8n-workflow';
+import { IExecuteFunctions, IHookFunctions, INodeExecutionData, INodeType, INodeTypeDescription, IWebhookFunctions, IWebhookResponseData } from 'n8n-workflow';
 export declare class Signauf implements INodeType {
     description: INodeTypeDescription;
+    webhookMethods: {
+        default: {
+            checkExists(this: IHookFunctions): Promise<boolean>;
+            create(this: IHookFunctions): Promise<boolean>;
+            delete(this: IHookFunctions): Promise<boolean>;
+        };
+    };
+    webhook(this: IWebhookFunctions): Promise<IWebhookResponseData>;
     execute(this: IExecuteFunctions): Promise<INodeExecutionData[][]>;
 }

package/dist/nodes/Signauf/Signauf.node.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Signauf = void 0;
+const crypto_1 = require("crypto");
 const n8n_workflow_1 = require("n8n-workflow");
 class Signauf {
     constructor() {
@@ -14,10 +15,13 @@ class Signauf {
             defaults: { name: 'Signauf' },
             inputs: ['main'],
             outputs: ['main'],
-            credentials: [
+            credentials: [{ name: 'signaufApi', required: true }],
+            webhooks: [
                 {
-                    name: 'signaufApi',
-                    required: true,
+                    name: 'default',
+                    httpMethod: 'POST',
+                    responseMode: 'lastNode',
+                    path: 'webhook',
                 },
             ],
             properties: [
@@ -36,7 +40,6 @@ class Signauf {
                     ],
                     default: 'submitForApproval',
                 },
-                // Submit for Approval fields
                 {
                     displayName: 'Form ID',
                     name: 'templateId',
@@ -57,6 +60,39 @@ class Signauf {
                 },
             ],
         };
+        this.webhookMethods = {
+            default: {
+                async checkExists() {
+                    return false;
+                },
+                async create() {
+                    return true;
+                },
+                async delete() {
+                    return true;
+                },
+            },
+        };
+    }
+    async webhook() {
+        var _a;
+        const req = this.getRequestObject();
+        const body = this.getBodyData();
+        const credentials = await this.getCredentials('signaufApi');
+        const secret = credentials.webhookSecret;
+        if (secret) {
+            const signature = (_a = req.headers['x-signauf-signature']) !== null && _a !== void 0 ? _a : '';
+            const bodyStr = JSON.stringify(body);
+            const expected = `sha256=${(0, crypto_1.createHmac)('sha256', secret).update(bodyStr).digest('hex')}`;
+            if (signature !== expected) {
+                const resp = this.getResponseObject();
+                resp.status(401).json({ error: 'Invalid signature' });
+                return { noWebhookResponse: true };
+            }
+        }
+        return {
+            workflowData: [this.helpers.returnJsonArray([body])],
+        };
     }
     async execute() {
         var _a;
@@ -75,7 +111,6 @@ class Signauf {
             catch {
                 throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Payload must be valid JSON', { itemIndex: i });
             }
-            // Grab n8n's resume URL for this execution — Signauf will POST here on decision
             const resumeUrl = this.evaluateExpression('{{ $execution.resumeUrl }}', i);
             if (!resumeUrl) {
                 throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Could not get execution resume URL. Make sure your n8n instance has a webhook base URL configured.', { itemIndex: i });
@@ -87,23 +122,14 @@ class Signauf {
                     Authorization: `Bearer ${apiKey}`,
                     'Content-Type': 'application/json',
                 },
-                body: {
-                    templateId,
-                    payload,
-                    callbackUrl: resumeUrl,
-                },
+                body: { templateId, payload, callbackUrl: resumeUrl },
                 json: true,
             });
             returnData.push({
-                json: {
-                    ...((_a = response.data) !== null && _a !== void 0 ? _a : response),
-                    _debug: { callbackUrl: resumeUrl },
-                },
+                json: (_a = response.data) !== null && _a !== void 0 ? _a : response,
                 pairedItem: { item: i },
             });
         }
-        // Pause this execution — resumes automatically when Signauf POSTs to the callbackUrl
-        // The resumed execution receives the decision payload (status, comment, requestId, etc.)
         await this.putExecutionToWait(new Date(Date.now() + 365 * 24 * 60 * 60 * 1000));
         return [returnData];
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-signauf",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "n8n community node for Signauf — submit approval requests and wait for human decisions",
   "keywords": [
     "n8n-community-node-package",