n8n 1.98.2 → 1.99.1

package/dist/sso.ee/oidc/oidc.service.ee.d.ts

@@ -0,0 +1,31 @@
+import type { OidcConfigDto } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import { GlobalConfig } from '@n8n/config';
+import { AuthIdentityRepository, SettingsRepository, type User, UserRepository } from '@n8n/db';
+import { Cipher } from 'n8n-core';
+import { UrlService } from '../../services/url.service';
+type OidcRuntimeConfig = Pick<OidcConfigDto, 'clientId' | 'clientSecret' | 'loginEnabled'> & {
+    discoveryEndpoint: URL;
+};
+export declare class OidcService {
+    private readonly settingsRepository;
+    private readonly authIdentityRepository;
+    private readonly urlService;
+    private readonly globalConfig;
+    private readonly userRepository;
+    private readonly cipher;
+    private readonly logger;
+    private oidcConfig;
+    constructor(settingsRepository: SettingsRepository, authIdentityRepository: AuthIdentityRepository, urlService: UrlService, globalConfig: GlobalConfig, userRepository: UserRepository, cipher: Cipher, logger: Logger);
+    init(): Promise<void>;
+    getCallbackUrl(): string;
+    getRedactedConfig(): OidcConfigDto;
+    generateLoginUrl(): Promise<URL>;
+    loginUser(callbackUrl: URL): Promise<User>;
+    loadConfig(decryptSecret?: boolean): Promise<OidcRuntimeConfig>;
+    updateConfig(newConfig: OidcConfigDto): Promise<void>;
+    private setOidcLoginEnabled;
+    private cachedOidcConfiguration;
+    private getOidcConfiguration;
+}
+export {};

package/dist/sso.ee/oidc/oidc.service.ee.js

@@ -0,0 +1,235 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const client = __importStar(require("openid-client"));
+const config_2 = __importDefault(require("../../config"));
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
+const internal_server_error_1 = require("../../errors/response-errors/internal-server.error");
+const url_service_1 = require("../../services/url.service");
+const constants_1 = require("./constants");
+const sso_helpers_1 = require("../sso-helpers");
+const DEFAULT_OIDC_CONFIG = {
+    clientId: '',
+    clientSecret: '',
+    discoveryEndpoint: '',
+    loginEnabled: false,
+};
+const DEFAULT_OIDC_RUNTIME_CONFIG = {
+    ...DEFAULT_OIDC_CONFIG,
+    discoveryEndpoint: new URL('http://n8n.io/not-set'),
+};
+let OidcService = class OidcService {
+    constructor(settingsRepository, authIdentityRepository, urlService, globalConfig, userRepository, cipher, logger) {
+        this.settingsRepository = settingsRepository;
+        this.authIdentityRepository = authIdentityRepository;
+        this.urlService = urlService;
+        this.globalConfig = globalConfig;
+        this.userRepository = userRepository;
+        this.cipher = cipher;
+        this.logger = logger;
+        this.oidcConfig = DEFAULT_OIDC_RUNTIME_CONFIG;
+    }
+    async init() {
+        this.oidcConfig = await this.loadConfig(true);
+        console.log(`OIDC login is ${this.oidcConfig.loginEnabled ? 'enabled' : 'disabled'}.`);
+        await this.setOidcLoginEnabled(this.oidcConfig.loginEnabled);
+    }
+    getCallbackUrl() {
+        return `${this.urlService.getInstanceBaseUrl()}/${this.globalConfig.endpoints.rest}/sso/oidc/callback`;
+    }
+    getRedactedConfig() {
+        return {
+            ...this.oidcConfig,
+            discoveryEndpoint: this.oidcConfig.discoveryEndpoint.toString(),
+            clientSecret: constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE,
+        };
+    }
+    async generateLoginUrl() {
+        const configuration = await this.getOidcConfiguration();
+        const authorizationURL = client.buildAuthorizationUrl(configuration, {
+            redirect_uri: this.getCallbackUrl(),
+            response_type: 'code',
+            scope: 'openid email profile',
+            prompt: 'select_account',
+        });
+        return authorizationURL;
+    }
+    async loginUser(callbackUrl) {
+        const configuration = await this.getOidcConfiguration();
+        const tokens = await client.authorizationCodeGrant(configuration, callbackUrl);
+        const claims = tokens.claims();
+        if (!claims) {
+            throw new forbidden_error_1.ForbiddenError('No claims found in the OIDC token');
+        }
+        const userInfo = await client.fetchUserInfo(configuration, tokens.access_token, claims.sub);
+        if (!userInfo.email) {
+            throw new bad_request_error_1.BadRequestError('An email is required');
+        }
+        if (!userInfo.email_verified) {
+            throw new bad_request_error_1.BadRequestError('Email needs to be verified');
+        }
+        const openidUser = await this.authIdentityRepository.findOne({
+            where: { providerId: claims.sub, providerType: 'oidc' },
+            relations: ['user'],
+        });
+        if (openidUser) {
+            return openidUser.user;
+        }
+        const foundUser = await this.userRepository.findOneBy({ email: userInfo.email });
+        if (foundUser) {
+            throw new bad_request_error_1.BadRequestError('User already exist with that email.');
+        }
+        return await this.userRepository.manager.transaction(async (trx) => {
+            const { user } = await this.userRepository.createUserWithProject({
+                firstName: userInfo.given_name,
+                lastName: userInfo.family_name,
+                email: userInfo.email,
+                authIdentities: [],
+                role: 'global:member',
+                password: 'no password set',
+            }, trx);
+            await trx.save(trx.create(db_1.AuthIdentity, {
+                providerId: claims.sub,
+                providerType: 'oidc',
+                userId: user.id,
+            }));
+            return user;
+        });
+    }
+    async loadConfig(decryptSecret = false) {
+        const currentConfig = await this.settingsRepository.findOneBy({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+        });
+        if (currentConfig) {
+            try {
+                const oidcConfig = (0, n8n_workflow_1.jsonParse)(currentConfig.value);
+                const discoveryUrl = new URL(oidcConfig.discoveryEndpoint);
+                if (oidcConfig.clientSecret && decryptSecret) {
+                    oidcConfig.clientSecret = this.cipher.decrypt(oidcConfig.clientSecret);
+                }
+                return {
+                    ...oidcConfig,
+                    discoveryEndpoint: discoveryUrl,
+                };
+            }
+            catch (error) {
+                this.logger.warn('Failed to load OIDC configuration from database, falling back to default configuration.', { error });
+            }
+        }
+        await this.settingsRepository.save({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+            value: JSON.stringify(DEFAULT_OIDC_CONFIG),
+            loadOnStartup: true,
+        });
+        return DEFAULT_OIDC_RUNTIME_CONFIG;
+    }
+    async updateConfig(newConfig) {
+        let discoveryEndpoint;
+        try {
+            discoveryEndpoint = new URL(newConfig.discoveryEndpoint);
+        }
+        catch (error) {
+            throw new bad_request_error_1.BadRequestError('Provided discovery endpoint is not a valid URL');
+        }
+        if (newConfig.clientSecret === constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE) {
+            newConfig.clientSecret = this.oidcConfig.clientSecret;
+        }
+        await this.settingsRepository.update({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+        }, {
+            value: JSON.stringify({
+                ...newConfig,
+                clientSecret: this.cipher.encrypt(newConfig.clientSecret),
+            }),
+        });
+        this.oidcConfig = {
+            ...newConfig,
+            discoveryEndpoint,
+        };
+        await this.setOidcLoginEnabled(this.oidcConfig.loginEnabled);
+    }
+    async setOidcLoginEnabled(enabled) {
+        const currentAuthenticationMethod = (0, sso_helpers_1.getCurrentAuthenticationMethod)();
+        if (enabled && !(0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() && !(0, sso_helpers_1.isOidcCurrentAuthenticationMethod)()) {
+            throw new internal_server_error_1.InternalServerError(`Cannot switch OIDC login enabled state when an authentication method other than email or OIDC is active (current: ${currentAuthenticationMethod})`);
+        }
+        const targetAuthenticationMethod = !enabled && currentAuthenticationMethod === 'oidc' ? 'email' : currentAuthenticationMethod;
+        config_2.default.set(constants_1.OIDC_LOGIN_ENABLED, enabled);
+        await (0, sso_helpers_1.setCurrentAuthenticationMethod)(enabled ? 'oidc' : targetAuthenticationMethod);
+    }
+    async getOidcConfiguration() {
+        const now = Date.now();
+        if (this.cachedOidcConfiguration === undefined ||
+            now >= this.cachedOidcConfiguration.validTill.getTime()) {
+            this.cachedOidcConfiguration = {
+                configuration: client.discovery(this.oidcConfig.discoveryEndpoint, this.oidcConfig.clientId, this.oidcConfig.clientSecret),
+                validTill: new Date(Date.now() + 60 * 60 * 1000),
+            };
+        }
+        return await this.cachedOidcConfiguration.configuration;
+    }
+};
+exports.OidcService = OidcService;
+exports.OidcService = OidcService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.SettingsRepository,
+        db_1.AuthIdentityRepository,
+        url_service_1.UrlService,
+        config_1.GlobalConfig,
+        db_1.UserRepository,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], OidcService);
+//# sourceMappingURL=oidc.service.ee.js.map

package/dist/sso.ee/oidc/oidc.service.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.service.ee.js","sourceRoot":"","sources":["../../../src/sso.ee/oidc/oidc.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAMiB;AACjB,gCAAkC;AAClC,uCAAkC;AAClC,+CAAyC;AACzC,sDAAwC;AAExC,sDAA8B;AAC9B,kFAA6E;AAC7E,8EAA0E;AAC1E,0FAAqF;AACrF,wDAAoD;AAEpD,2CAIqB;AACrB,gDAKwB;AAExB,MAAM,mBAAmB,GAAkB;IAC1C,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,EAAE;IAChB,iBAAiB,EAAE,EAAE;IACrB,YAAY,EAAE,KAAK;CACnB,CAAC;AAMF,MAAM,2BAA2B,GAAsB;IACtD,GAAG,mBAAmB;IACtB,iBAAiB,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC;CACnD,CAAC;AAGK,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGvB,YACkB,kBAAsC,EACtC,sBAA8C,EAC9C,UAAsB,EACtB,YAA0B,EAC1B,cAA8B,EAC9B,MAAc,EACd,MAAc;QANd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QATxB,eAAU,GAAsB,2BAA2B,CAAC;IAUjE,CAAC;IAEJ,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QACvF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAED,cAAc;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC;IACxG,CAAC;IAED,iBAAiB;QAChB,OAAO;YACN,GAAG,IAAI,CAAC,UAAU;YAClB,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,QAAQ,EAAE;YAC/D,YAAY,EAAE,6CAAiC;SAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,gBAAgB,GAAG,MAAM,CAAC,qBAAqB,CAAC,aAAa,EAAE;YACpE,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,gBAAgB;SACxB,CAAC,CAAC;QAEH,OAAO,gBAAgB,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAAgB;QAC/B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE/E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gCAAc,CAAC,mCAAmC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAE5F,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,mCAAe,CAAC,sBAAsB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,IAAI,mCAAe,CAAC,4BAA4B,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;YACvD,SAAS,EAAE,CAAC,MAAM,CAAC;SACnB,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAEjF,IAAI,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,mCAAe,CAAC,qCAAqC,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAC/D;gBACC,SAAS,EAAE,QAAQ,CAAC,UAAU;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,EAAE;gBAClB,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,iBAAiB;aAC3B,EACD,GAAG,CACH,CAAC;YAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;gBACxB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE;aACf,CAAC,CACF,CAAC;YAEF,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAa,GAAG,KAAK;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC7D,GAAG,EAAE,mCAAuB;SAC5B,CAAC,CAAC;QAEH,IAAI,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAgB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAE3D,IAAI,UAAU,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;oBAC9C,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACxE,CAAC;gBACD,OAAO;oBACN,GAAG,UAAU;oBACb,iBAAiB,EAAE,YAAY;iBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,yFAAyF,EAEzF,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;YAC1C,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,2BAA2B,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAwB;QAC1C,IAAI,iBAAsB,CAAC;QAC3B,IAAI,CAAC;YAEJ,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mCAAe,CAAC,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,CAAC,YAAY,KAAK,6CAAiC,EAAE,CAAC;YAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,mCAAuB;SAC5B,EACD;YACC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,SAAS;gBACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;aACzD,CAAC;SACF,CACD,CAAC;QAOF,IAAI,CAAC,UAAU,GAAG;YACjB,GAAG,SAAS;YACZ,iBAAiB;SACjB,CAAC;QAEF,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACjD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;QAErE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;YAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;QACH,CAAC;QAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAE5F,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACrF,CAAC;IASO,KAAK,CAAC,oBAAoB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IACC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC1C,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,EAAE,EACtD,CAAC;YACF,IAAI,CAAC,uBAAuB,GAAG;gBAC9B,aAAa,EAAE,MAAM,CAAC,SAAS,CAC9B,IAAI,CAAC,UAAU,CAAC,iBAAiB,EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAC5B;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;aAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC;IACzD,CAAC;CACD,CAAA;AAxNY,kCAAW;sBAAX,WAAW;IADvB,IAAA,YAAO,GAAE;qCAK6B,uBAAkB;QACd,2BAAsB;QAClC,wBAAU;QACR,qBAAY;QACV,mBAAc;QACtB,iBAAM;QACN,uBAAM;GAVpB,WAAW,CAwNvB"}

package/dist/sso.ee/oidc/routes/oidc.controller.ee.d.ts

@@ -0,0 +1,18 @@
+import { OidcConfigDto } from '@n8n/api-types';
+import { Request, Response } from 'express';
+import { AuthService } from '../../../auth/auth.service';
+import { AuthenticatedRequest } from '../../../requests';
+import { UrlService } from '../../../services/url.service';
+import { OidcService } from '../oidc.service.ee';
+export declare class OidcController {
+    private readonly oidcService;
+    private readonly authService;
+    private readonly urlService;
+    constructor(oidcService: OidcService, authService: AuthService, urlService: UrlService);
+    retrieveConfiguration(_req: AuthenticatedRequest): Promise<Pick<OidcConfigDto, "loginEnabled" | "clientId" | "clientSecret"> & {
+        discoveryEndpoint: URL;
+    }>;
+    saveConfiguration(_req: AuthenticatedRequest, _res: Response, payload: OidcConfigDto): Promise<OidcConfigDto>;
+    redirectToAuthProvider(_req: Request, res: Response): Promise<void>;
+    callbackHandler(req: Request, res: Response): Promise<void>;
+}

package/dist/sso.ee/oidc/routes/oidc.controller.ee.js

@@ -0,0 +1,88 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcController = void 0;
+const api_types_1 = require("@n8n/api-types");
+const decorators_1 = require("@n8n/decorators");
+const auth_service_1 = require("../../../auth/auth.service");
+const url_service_1 = require("../../../services/url.service");
+const constants_1 = require("../constants");
+const oidc_service_ee_1 = require("../oidc.service.ee");
+let OidcController = class OidcController {
+    constructor(oidcService, authService, urlService) {
+        this.oidcService = oidcService;
+        this.authService = authService;
+        this.urlService = urlService;
+    }
+    async retrieveConfiguration(_req) {
+        const config = await this.oidcService.loadConfig();
+        if (config.clientSecret) {
+            config.clientSecret = constants_1.OIDC_CLIENT_SECRET_REDACTED_VALUE;
+        }
+        return config;
+    }
+    async saveConfiguration(_req, _res, payload) {
+        await this.oidcService.updateConfig(payload);
+        const config = this.oidcService.getRedactedConfig();
+        return config;
+    }
+    async redirectToAuthProvider(_req, res) {
+        const authorizationURL = await this.oidcService.generateLoginUrl();
+        res.redirect(authorizationURL.toString());
+    }
+    async callbackHandler(req, res) {
+        const fullUrl = `${this.urlService.getInstanceBaseUrl()}${req.originalUrl}`;
+        const callbackUrl = new URL(fullUrl);
+        const user = await this.oidcService.loginUser(callbackUrl);
+        this.authService.issueCookie(res, user);
+        res.redirect('/');
+    }
+};
+exports.OidcController = OidcController;
+__decorate([
+    (0, decorators_1.Get)('/config'),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    (0, decorators_1.GlobalScope)('oidc:manage'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "retrieveConfiguration", null);
+__decorate([
+    (0, decorators_1.Post)('/config'),
+    (0, decorators_1.Licensed)('feat:oidc'),
+    (0, decorators_1.GlobalScope)('oidc:manage'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, api_types_1.OidcConfigDto]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "saveConfiguration", null);
+__decorate([
+    (0, decorators_1.Get)('/login', { skipAuth: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "redirectToAuthProvider", null);
+__decorate([
+    (0, decorators_1.Get)('/callback', { skipAuth: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], OidcController.prototype, "callbackHandler", null);
+exports.OidcController = OidcController = __decorate([
+    (0, decorators_1.RestController)('/sso/oidc'),
+    __metadata("design:paramtypes", [oidc_service_ee_1.OidcService,
+        auth_service_1.AuthService,
+        url_service_1.UrlService])
+], OidcController);
+//# sourceMappingURL=oidc.controller.ee.js.map

package/dist/sso.ee/oidc/routes/oidc.controller.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.controller.ee.js","sourceRoot":"","sources":["../../../../src/sso.ee/oidc/routes/oidc.controller.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8CAA+C;AAC/C,gDAAyF;AAGzF,sDAAkD;AAElD,wDAAoD;AAEpD,4CAAiE;AACjE,wDAAiD;AAG1C,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YACkB,WAAwB,EACxB,WAAwB,EACxB,UAAsB;QAFtB,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;IACrC,CAAC;IAKE,AAAN,KAAK,CAAC,qBAAqB,CAAC,IAA0B;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,GAAG,6CAAiC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CACtB,IAA0B,EAC1B,IAAc,EACR,OAAsB;QAE5B,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IACf,CAAC;IAGK,AAAN,KAAK,CAAC,sBAAsB,CAAC,IAAa,EAAE,GAAa;QACxD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAEnE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa;QAChD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE3D,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAExC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;CACD,CAAA;AAjDY,wCAAc;AAUpB;IAHL,IAAA,gBAAG,EAAC,SAAS,CAAC;IACd,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;;;;2DAO1B;AAKK;IAHL,IAAA,iBAAI,EAAC,SAAS,CAAC;IACf,IAAA,qBAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,wBAAW,EAAC,aAAa,CAAC;IAIzB,WAAA,iBAAI,CAAA;;qDAAU,yBAAa;;uDAK5B;AAGK;IADL,IAAA,gBAAG,EAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;4DAKjC;AAGK;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;qDAUpC;yBAhDW,cAAc;IAD1B,IAAA,2BAAc,EAAC,WAAW,CAAC;qCAGI,6BAAW;QACX,0BAAW;QACZ,wBAAU;GAJ5B,cAAc,CAiD1B"}

package/dist/sso.ee/saml/saml-helpers.js

@@ -32,19 +32,13 @@ function getSamlLoginLabel() {
     return config_1.default.getEnv(constants_1.SAML_LOGIN_LABEL);
 }
 async function setSamlLoginEnabled(enabled) {
-    if ((0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() || (0, sso_helpers_1.isSamlCurrentAuthenticationMethod)()) {
-        if (enabled) {
-            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, true);
-            await (0, sso_helpers_1.setCurrentAuthenticationMethod)('saml');
-        }
-        else if (!enabled) {
-            config_1.default.set(constants_1.SAML_LOGIN_ENABLED, false);
-            await (0, sso_helpers_1.setCurrentAuthenticationMethod)('email');
-        }
-    }
-    else {
-        throw new internal_server_error_1.InternalServerError(`Cannot switch SAML login enabled state when an authentication method other than email or saml is active (current: ${(0, sso_helpers_1.getCurrentAuthenticationMethod)()})`);
+    const currentAuthenticationMethod = (0, sso_helpers_1.getCurrentAuthenticationMethod)();
+    if (enabled && !(0, sso_helpers_1.isEmailCurrentAuthenticationMethod)() && !(0, sso_helpers_1.isSamlCurrentAuthenticationMethod)()) {
+        throw new internal_server_error_1.InternalServerError(`Cannot switch SAML login enabled state when an authentication method other than email or saml is active (current: ${currentAuthenticationMethod})`);
     }
+    const targetAuthenticationMethod = !enabled && currentAuthenticationMethod === 'saml' ? 'email' : currentAuthenticationMethod;
+    config_1.default.set(constants_1.SAML_LOGIN_ENABLED, enabled);
+    await (0, sso_helpers_1.setCurrentAuthenticationMethod)(enabled ? 'saml' : targetAuthenticationMethod);
 }
 function setSamlLoginLabel(label) {
     config_1.default.set(constants_1.SAML_LOGIN_LABEL, label);

package/dist/sso.ee/saml/saml-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/sso.ee/saml/saml-helpers.ts"],"names":[],"mappings":";;;;;;AA0BA,gDAEC;AAED,8CAEC;AAGD,kDAcC;AAED,8CAEC;AAED,wCAEC;AAED,4DAEC;AAaD,oEA0BC;AAED,oEAsBC;AAOD,sFA8BC;AAED,0DAEC;AAnKD,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,sDAA8B;AAC9B,oEAAgE;AAChE,0FAAqF;AACrF,uCAAoC;AACpC,kEAA8D;AAE9D,2CAAmE;AACnE,+DAA8E;AAE9E,gDAKwB;AAKxB,SAAgB,kBAAkB;IACjC,OAAO,gBAAM,CAAC,MAAM,CAAC,8BAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAAgB,CAAC,CAAC;AACxC,CAAC;AAGM,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,IAAI,IAAA,gDAAkC,GAAE,IAAI,IAAA,+CAAiC,GAAE,EAAE,CAAC;QACjF,IAAI,OAAO,EAAE,CAAC;YACb,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,IAAA,4CAA8B,EAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,IAAA,4CAA8B,GAAE,GAAG,CACxJ,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,gBAAM,CAAC,GAAG,CAAC,4BAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,cAAc;IAC7B,OAAO,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,SAAgB,wBAAwB;IACvC,OAAO,kBAAkB,EAAE,IAAI,cAAc,EAAE,IAAI,IAAA,+CAAiC,GAAE,CAAC;AACxF,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,eAAe;YAErB,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACnB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC;IAEtC,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAuC,CAAC;QAE9E,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"saml-helpers.js","sourceRoot":"","sources":["../../../src/sso.ee/saml/saml-helpers.ts"],"names":[],"mappings":";;;;;;AA0BA,gDAEC;AAED,8CAEC;AAGD,kDAaC;AAED,8CAEC;AAED,wCAEC;AAED,4DAEC;AAaD,oEA0BC;AAED,oEAsBC;AAOD,sFA8BC;AAED,0DAEC;AAlKD,gCAA+E;AAC/E,gCAAoC;AACpC,+CAA4C;AAG5C,sDAA8B;AAC9B,oEAAgE;AAChE,0FAAqF;AACrF,uCAAoC;AACpC,kEAA8D;AAE9D,2CAAmE;AACnE,+DAA8E;AAE9E,gDAKwB;AAKxB,SAAgB,kBAAkB;IACjC,OAAO,gBAAM,CAAC,MAAM,CAAC,8BAAkB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB;IAChC,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAAgB,CAAC,CAAC;AACxC,CAAC;AAGM,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACzD,MAAM,2BAA2B,GAAG,IAAA,4CAA8B,GAAE,CAAC;IACrE,IAAI,OAAO,IAAI,CAAC,IAAA,gDAAkC,GAAE,IAAI,CAAC,IAAA,+CAAiC,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,2CAAmB,CAC5B,qHAAqH,2BAA2B,GAAG,CACnJ,CAAC;IACH,CAAC;IAED,MAAM,0BAA0B,GAC/B,CAAC,OAAO,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAE5F,gBAAM,CAAC,GAAG,CAAC,8BAAkB,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,IAAA,4CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC9C,gBAAM,CAAC,GAAG,CAAC,4BAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,cAAc;IAC7B,OAAO,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,SAAgB,wBAAwB;IACvC,OAAO,kBAAkB,EAAE,IAAI,cAAc,EAAE,IAAI,IAAA,+CAAiC,GAAE,CAAC;AACxF,CAAC;AAEM,MAAM,iBAAiB,GAAG,CAAC,SAAkB,EAAgC,EAAE;IACrF,MAAM,CAAC,GAAG,SAA4B,CAAC;IACvC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,CAAC,YAAY,KAAK,SAAS,CAC5B,CAAC;AACH,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,KAAK,UAAU,4BAA4B,CAAC,UAA8B;IAChF,MAAM,cAAc,GAAG,IAAA,2BAAY,EAAC,EAAE,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC;IACrD,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,CAAC,qBAAqB,CAC1D;YACC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,eAAe;YAErB,QAAQ,EAAE,MAAM,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;SACnE,EACD,GAAG,CACH,CAAC;QAEF,MAAM,GAAG,CAAC,IAAI,CACb,GAAG,CAAC,MAAM,CAAC,iBAAY,EAAE;YACxB,UAAU,EAAE,UAAU,CAAC,iBAAiB;YACxC,YAAY,EAAE,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,4BAA4B,CACjD,IAAU,EACV,UAA8B;IAE9B,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,sBAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,gBAAgB,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,gBAAgB,GAAG,IAAI,iBAAY,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;QAC3D,gBAAgB,CAAC,YAAY,GAAG,MAAM,CAAC;QACvC,gBAAgB,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAC5D,CAAC;IACD,MAAM,cAAS,CAAC,GAAG,CAAC,2BAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mBAAc,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,sBAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,OAAO,UAAU,CAAC;AACnB,CAAC;AAOD,SAAgB,qCAAqC,CACpD,UAAsB,EACtB,gBAAsC;IAEtC,MAAM,MAAM,GAAwB;QACnC,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,EAAc;KACjC,CAAC;IAEF,IAAI,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAuC,CAAC;QAE9E,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAEzE,MAAM,CAAC,UAAU,GAAG;YACnB,KAAK;YACL,SAAS;YACT,QAAQ;YACR,iBAAiB;SACjB,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAmB;IAC1D,OAAO,OAAO,CAAC,UAAU,KAAK,IAAA,2DAAqC,GAAE,CAAC;AACvE,CAAC"}

package/dist/sso.ee/sso-helpers.d.ts

@@ -3,6 +3,7 @@ export declare function setCurrentAuthenticationMethod(authenticationMethod: Aut
 export declare function getCurrentAuthenticationMethod(): AuthProviderType;
 export declare function isSamlCurrentAuthenticationMethod(): boolean;
 export declare function isLdapCurrentAuthenticationMethod(): boolean;
+export declare function isOidcCurrentAuthenticationMethod(): boolean;
 export declare function isEmailCurrentAuthenticationMethod(): boolean;
 export declare function isSsoJustInTimeProvisioningEnabled(): boolean;
 export declare function doRedirectUsersFromLoginToSsoFlow(): boolean;

package/dist/sso.ee/sso-helpers.js

@@ -7,6 +7,7 @@ exports.setCurrentAuthenticationMethod = setCurrentAuthenticationMethod;
 exports.getCurrentAuthenticationMethod = getCurrentAuthenticationMethod;
 exports.isSamlCurrentAuthenticationMethod = isSamlCurrentAuthenticationMethod;
 exports.isLdapCurrentAuthenticationMethod = isLdapCurrentAuthenticationMethod;
+exports.isOidcCurrentAuthenticationMethod = isOidcCurrentAuthenticationMethod;
 exports.isEmailCurrentAuthenticationMethod = isEmailCurrentAuthenticationMethod;
 exports.isSsoJustInTimeProvisioningEnabled = isSsoJustInTimeProvisioningEnabled;
 exports.doRedirectUsersFromLoginToSsoFlow = doRedirectUsersFromLoginToSsoFlow;
@@ -30,6 +31,9 @@ function isSamlCurrentAuthenticationMethod() {
 function isLdapCurrentAuthenticationMethod() {
     return getCurrentAuthenticationMethod() === 'ldap';
 }
+function isOidcCurrentAuthenticationMethod() {
+    return getCurrentAuthenticationMethod() === 'oidc';
+}
 function isEmailCurrentAuthenticationMethod() {
     return getCurrentAuthenticationMethod() === 'email';
 }

package/dist/sso.ee/sso-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"sso-helpers.js","sourceRoot":"","sources":["../../src/sso.ee/sso-helpers.ts"],"names":[],"mappings":";;;;;AAWA,wEAYC;AAED,wEAEC;AAED,8EAEC;AAED,8EAEC;AAED,gFAEC;AAED,gFAEC;AAED,8EAEC;AA/CD,gCAAoE;AACpE,gCAAoC;AAEpC,sDAA8B;AAQvB,KAAK,UAAU,8BAA8B,CACnD,oBAAsC;IAEtC,gBAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,cAAS,CAAC,GAAG,CAAC,uBAAkB,CAAC,CAAC,IAAI,CAC3C;QACC,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,aAAa,EAAE,IAAI;KACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;AACH,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,gBAAM,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,8BAA8B,EAAE,KAAK,OAAO,CAAC;AACrD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,gBAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"sso-helpers.js","sourceRoot":"","sources":["../../src/sso.ee/sso-helpers.ts"],"names":[],"mappings":";;;;;AAWA,wEAYC;AAED,wEAEC;AAED,8EAEC;AAED,8EAEC;AAED,8EAEC;AAED,gFAEC;AAED,gFAEC;AAED,8EAEC;AAnDD,gCAAoE;AACpE,gCAAoC;AAEpC,sDAA8B;AAQvB,KAAK,UAAU,8BAA8B,CACnD,oBAAsC;IAEtC,gBAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,cAAS,CAAC,GAAG,CAAC,uBAAkB,CAAC,CAAC,IAAI,CAC3C;QACC,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,aAAa,EAAE,IAAI;KACnB,EACD,EAAE,WAAW,EAAE,KAAK,EAAE,CACtB,CAAC;AACH,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,gBAAM,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,8BAA8B,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,8BAA8B,EAAE,KAAK,OAAO,CAAC;AACrD,CAAC;AAED,SAAgB,kCAAkC;IACjD,OAAO,gBAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,iCAAiC;IAChD,OAAO,gBAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAChD,CAAC"}

package/dist/task-runners/default-task-runner-disconnect-analyzer.js

@@ -5,23 +5,20 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DefaultTaskRunnerDisconnectAnalyzer = void 0;
+const config_1 = require("@n8n/config");
 const di_1 = require("@n8n/di");
-const config_1 = __importDefault(require("../config"));
 const task_runner_disconnected_error_1 = require("./errors/task-runner-disconnected-error");
 const task_runner_failed_heartbeat_error_1 = require("./errors/task-runner-failed-heartbeat.error");
 let DefaultTaskRunnerDisconnectAnalyzer = class DefaultTaskRunnerDisconnectAnalyzer {
     get isCloudDeployment() {
-        return config_1.default.get('deployment.type') === 'cloud';
+        return di_1.Container.get(config_1.GlobalConfig).deployment.type === 'cloud';
     }
     async toDisconnectError(opts) {
         const { reason, heartbeatInterval } = opts;
         if (reason === 'failed-heartbeat-check' && heartbeatInterval) {
-            return new task_runner_failed_heartbeat_error_1.TaskRunnerFailedHeartbeatError(heartbeatInterval, config_1.default.get('deployment.type') !== 'cloud');
+            return new task_runner_failed_heartbeat_error_1.TaskRunnerFailedHeartbeatError(heartbeatInterval, di_1.Container.get(config_1.GlobalConfig).deployment.type !== 'cloud');
         }
         return new task_runner_disconnected_error_1.TaskRunnerDisconnectedError(opts.runnerId ?? 'Unknown runner ID', this.isCloudDeployment);
     }

package/dist/task-runners/default-task-runner-disconnect-analyzer.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-task-runner-disconnect-analyzer.js","sourceRoot":"","sources":["../../src/task-runners/default-task-runner-disconnect-analyzer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAElC,sDAA8B;AAM9B,4FAAsF;AACtF,oGAA6F;AAOtF,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAC/C,IAAI,iBAAiB;QACpB,OAAO,gBAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,OAAO,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAA4B;QACnD,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;QAE3C,IAAI,MAAM,KAAK,wBAAwB,IAAI,iBAAiB,EAAE,CAAC;YAC9D,OAAO,IAAI,mEAA8B,CACxC,iBAAiB,EACjB,gBAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,OAAO,CACzC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,4DAA2B,CACrC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EACpC,IAAI,CAAC,iBAAiB,CACtB,CAAC;IACH,CAAC;CACD,CAAA;AApBY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,YAAO,GAAE;GACG,mCAAmC,CAoB/C"}
+{"version":3,"file":"default-task-runner-disconnect-analyzer.js","sourceRoot":"","sources":["../../src/task-runners/default-task-runner-disconnect-analyzer.ts"],"names":[],"mappings":";;;;;;;;;AAAA,wCAA2C;AAC3C,gCAA6C;AAO7C,4FAAsF;AACtF,oGAA6F;AAOtF,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAC/C,IAAI,iBAAiB;QACpB,OAAO,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAA4B;QACnD,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;QAE3C,IAAI,MAAM,KAAK,wBAAwB,IAAI,iBAAiB,EAAE,CAAC;YAC9D,OAAO,IAAI,mEAA8B,CACxC,iBAAiB,EACjB,cAAS,CAAC,GAAG,CAAC,qBAAY,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CACvD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,4DAA2B,CACrC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EACpC,IAAI,CAAC,iBAAiB,CACtB,CAAC;IACH,CAAC;CACD,CAAA;AApBY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,YAAO,GAAE;GACG,mCAAmC,CAoB/C"}

package/dist/task-runners/task-broker/task-broker.service.d.ts

@@ -1,5 +1,5 @@
 import { Logger } from '@n8n/backend-common';
-import { TaskRunnersConfig } from '@n8n/config';
+import { GlobalConfig, TaskRunnersConfig } from '@n8n/config';
 import type { BrokerMessage, RequesterMessage, RunnerMessage, TaskResultData } from '@n8n/task-runner';
 import { TaskDeferredError } from '../../task-runners/task-broker/errors/task-deferred.error';
 import { TaskRejectError } from '../../task-runners/task-broker/errors/task-reject.error';
@@ -38,6 +38,7 @@ export declare class TaskBroker {
     private readonly logger;
     private readonly taskRunnersConfig;
     private readonly taskRunnerLifecycleEvents;
+    private readonly globalConfig;
     private knownRunners;
     private requesters;
     private tasks;
@@ -45,7 +46,7 @@ export declare class TaskBroker {
     private requesterAcceptRejects;
     private pendingTaskOffers;
     private pendingTaskRequests;
-    constructor(logger: Logger, taskRunnersConfig: TaskRunnersConfig, taskRunnerLifecycleEvents: TaskRunnerLifecycleEvents);
+    constructor(logger: Logger, taskRunnersConfig: TaskRunnersConfig, taskRunnerLifecycleEvents: TaskRunnerLifecycleEvents, globalConfig: GlobalConfig);
     expireTasks(): void;
     registerRunner(runner: TaskRunner, messageCallback: MessageCallback): void;
     deregisterRunner(runnerId: string, error: Error): void;

package/dist/task-runners/task-broker/task-broker.service.js

@@ -8,9 +8,6 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TaskBroker = void 0;
 const backend_common_1 = require("@n8n/backend-common");
@@ -18,7 +15,6 @@ const config_1 = require("@n8n/config");
 const di_1 = require("@n8n/di");
 const n8n_workflow_1 = require("n8n-workflow");
 const nanoid_1 = require("nanoid");
-const config_2 = __importDefault(require("../../config"));
 const constants_1 = require("../../constants");
 const task_deferred_error_1 = require("../../task-runners/task-broker/errors/task-deferred.error");
 const task_reject_error_1 = require("../../task-runners/task-broker/errors/task-reject.error");
@@ -26,10 +22,11 @@ const task_runner_accept_timeout_error_1 = require("../../task-runners/task-brok
 const task_runner_execution_timeout_error_1 = require("../../task-runners/task-broker/errors/task-runner-execution-timeout.error");
 const task_runner_lifecycle_events_1 = require("../../task-runners/task-runner-lifecycle-events");
 let TaskBroker = class TaskBroker {
-    constructor(logger, taskRunnersConfig, taskRunnerLifecycleEvents) {
+    constructor(logger, taskRunnersConfig, taskRunnerLifecycleEvents, globalConfig) {
         this.logger = logger;
         this.taskRunnersConfig = taskRunnersConfig;
         this.taskRunnerLifecycleEvents = taskRunnerLifecycleEvents;
+        this.globalConfig = globalConfig;
         this.knownRunners = new Map();
         this.requesters = new Map();
         this.tasks = new Map();
@@ -333,7 +330,7 @@ let TaskBroker = class TaskBroker {
         const { taskTimeout, mode } = this.taskRunnersConfig;
         await this.taskErrorHandler(taskId, new task_runner_execution_timeout_error_1.TaskRunnerExecutionTimeoutError({
             taskTimeout,
-            isSelfHosted: config_2.default.getEnv('deployment.type') !== 'cloud',
+            isSelfHosted: this.globalConfig.deployment.type !== 'cloud',
             mode,
         }));
     }
@@ -495,6 +492,7 @@ exports.TaskBroker = TaskBroker = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [backend_common_1.Logger,
         config_1.TaskRunnersConfig,
-        task_runner_lifecycle_events_1.TaskRunnerLifecycleEvents])
+        task_runner_lifecycle_events_1.TaskRunnerLifecycleEvents,
+        config_1.GlobalConfig])
 ], TaskBroker);
 //# sourceMappingURL=task-broker.service.js.map