n8n 2.0.2 → 2.1.0

package/dist/modules/dynamic-credentials.ee/services/credential-resolver-workflow.service.js

@@ -0,0 +1,150 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialResolverWorkflowService = void 0;
+const db_1 = require("@n8n/db");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const di_1 = require("@n8n/di");
+function isCredentialStatus(obj) {
+    if (typeof obj !== 'object' || obj === null) {
+        return false;
+    }
+    return ('credentialId' in obj &&
+        typeof obj.credentialId === 'string' &&
+        'resolverId' in obj &&
+        typeof obj.resolverId === 'string' &&
+        'credentialType' in obj &&
+        typeof obj.credentialType === 'string' &&
+        'status' in obj &&
+        (obj.status === 'missing' || obj.status === 'configured'));
+}
+let CredentialResolverWorkflowService = class CredentialResolverWorkflowService {
+    constructor(workflowRepository, credentialRepository, resolverRegistry, resolverRepository, cipher) {
+        this.workflowRepository = workflowRepository;
+        this.credentialRepository = credentialRepository;
+        this.resolverRegistry = resolverRegistry;
+        this.resolverRepository = resolverRepository;
+        this.cipher = cipher;
+    }
+    async getResolver(resolverId) {
+        const resolver = await this.resolverRepository.findOneBy({ id: resolverId });
+        if (!resolver) {
+            throw new Error('Credential resolver not found');
+        }
+        const resolverInstance = this.resolverRegistry.getResolverByTypename(resolver.type);
+        if (!resolverInstance) {
+            throw new Error('Credential resolver implementation not found');
+        }
+        try {
+            const decryptedConfig = this.cipher.decrypt(resolver.config);
+            const resolverConfig = (0, n8n_workflow_1.jsonParse)(decryptedConfig);
+            return {
+                resolverInstance,
+                resolverConfig,
+            };
+        }
+        catch (error) {
+            throw new Error('Failed to decrypt or parse resolver configuration');
+        }
+    }
+    async getWorkflowStatus(workflowId, identityToken) {
+        const workflow = await this.workflowRepository.get({
+            id: workflowId,
+        });
+        if (!workflow) {
+            throw new Error('Workflow not found');
+        }
+        const resolverId = workflow.settings?.credentialResolverId;
+        let workflowResolverInstance = null;
+        let workflowResolverConfig = null;
+        if (resolverId) {
+            const { resolverInstance, resolverConfig } = await this.getResolver(resolverId);
+            workflowResolverInstance = resolverInstance;
+            workflowResolverConfig = resolverConfig;
+        }
+        const credentialsToCheck = [];
+        for (const node of workflow.nodes ?? []) {
+            for (const credentialName in node.credentials ?? {}) {
+                const credentialData = node.credentials?.[credentialName];
+                if (credentialData?.id) {
+                    credentialsToCheck.push(credentialData.id);
+                }
+            }
+        }
+        if (credentialsToCheck.length === 0) {
+            return [];
+        }
+        const credentials = await this.credentialRepository.find({
+            where: {
+                id: (0, db_1.In)(credentialsToCheck),
+                isResolvable: true,
+            },
+        });
+        const credentialStatusPromises = credentials.map(async (credential) => {
+            return await this.checkCredentialStatus(credential, {
+                workflowResolverInstance,
+                workflowResolverConfig,
+                resolverId,
+                identityToken,
+            });
+        });
+        return (await Promise.all(credentialStatusPromises)).filter(isCredentialStatus);
+    }
+    async checkCredentialStatus(credential, options) {
+        let resolverInstance = options.workflowResolverInstance;
+        let resolverConfig = options.workflowResolverConfig;
+        const credentialResolverId = credential.resolverId ?? options.resolverId;
+        if (credentialResolverId) {
+            if (credentialResolverId !== options.resolverId) {
+                const { resolverInstance: credentialResolverInstance, resolverConfig: credentialResolverConfig, } = await this.getResolver(credentialResolverId);
+                resolverInstance = credentialResolverInstance;
+                resolverConfig = credentialResolverConfig;
+            }
+            if (resolverConfig && resolverInstance) {
+                try {
+                    await resolverInstance.getSecret(credential.id, { identity: options.identityToken, version: 1 }, {
+                        configuration: resolverConfig,
+                        resolverName: resolverInstance.metadata.name,
+                        resolverId: credentialResolverId,
+                    });
+                    return {
+                        credentialId: credential.id,
+                        resolverId: credentialResolverId,
+                        status: 'configured',
+                        credentialType: credential.type,
+                    };
+                }
+                catch (error) {
+                    return {
+                        credentialId: credential.id,
+                        resolverId: credentialResolverId,
+                        status: 'missing',
+                        credentialType: credential.type,
+                    };
+                }
+            }
+        }
+        return null;
+    }
+};
+exports.CredentialResolverWorkflowService = CredentialResolverWorkflowService;
+exports.CredentialResolverWorkflowService = CredentialResolverWorkflowService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.WorkflowRepository,
+        db_1.CredentialsRepository,
+        credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        n8n_core_1.Cipher])
+], CredentialResolverWorkflowService);
+//# sourceMappingURL=credential-resolver-workflow.service.js.map

package/dist/modules/dynamic-credentials.ee/services/credential-resolver-workflow.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-resolver-workflow.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/credential-resolver-workflow.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA2F;AAC3F,iGAA2F;AAC3F,4GAA8G;AAC9G,uCAAkC;AAClC,+CAAyC;AAEzC,gCAAkC;AASlC,SAAS,kBAAkB,CAAC,GAAY;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CACN,cAAc,IAAI,GAAG;QACrB,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACpC,YAAY,IAAI,GAAG;QACnB,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,gBAAgB,IAAI,GAAG;QACvB,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;QACtC,QAAQ,IAAI,GAAG;QACf,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CACzD,CAAC;AACH,CAAC;AAGM,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAC7C,YACkB,kBAAsC,EACtC,oBAA2C,EAC3C,gBAAmD,EACnD,kBAAuD,EACvD,MAAc;QAJd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,yBAAoB,GAApB,oBAAoB,CAAuB;QAC3C,qBAAgB,GAAhB,gBAAgB,CAAmC;QACnD,uBAAkB,GAAlB,kBAAkB,CAAqC;QACvD,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEI,KAAK,CAAC,WAAW,CAAC,UAAkB;QAI3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,cAAc,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAE3E,OAAO;gBACN,gBAAgB;gBAChB,cAAc;aACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAWD,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,aAAqB;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAClD,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QAE3D,IAAI,wBAAwB,GAA+B,IAAI,CAAC;QAChE,IAAI,sBAAsB,GAAmC,IAAI,CAAC;QAElE,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAChF,wBAAwB,GAAG,gBAAgB,CAAC;YAC5C,sBAAsB,GAAG,cAAc,CAAC;QACzC,CAAC;QAED,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACzC,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACrD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,CAAC;gBAE1D,IAAI,cAAc,EAAE,EAAE,EAAE,CAAC;oBACxB,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBAC5C,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACxD,KAAK,EAAE;gBACN,EAAE,EAAE,IAAA,OAAE,EAAC,kBAAkB,CAAC;gBAC1B,YAAY,EAAE,IAAI;aAClB;SACD,CAAC,CAAC;QAGH,MAAM,wBAAwB,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACrE,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE;gBACnD,wBAAwB;gBACxB,sBAAsB;gBACtB,UAAU;gBACV,aAAa;aACb,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjF,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,UAA6B,EAC7B,OAKC;QAED,IAAI,gBAAgB,GAA+B,OAAO,CAAC,wBAAwB,CAAC;QACpF,IAAI,cAAc,GAAmC,OAAO,CAAC,sBAAsB,CAAC;QACpF,MAAM,oBAAoB,GAAG,UAAU,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;QACzE,IAAI,oBAAoB,EAAE,CAAC;YAC1B,IAAI,oBAAoB,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;gBACjD,MAAM,EACL,gBAAgB,EAAE,0BAA0B,EAC5C,cAAc,EAAE,wBAAwB,GACxC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;gBACjD,gBAAgB,GAAG,0BAA0B,CAAC;gBAC9C,cAAc,GAAG,wBAAwB,CAAC;YAC3C,CAAC;YAED,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACJ,MAAM,gBAAgB,CAAC,SAAS,CAC/B,UAAU,CAAC,EAAE,EACb,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,EAC/C;wBACC,aAAa,EAAE,cAAc;wBAC7B,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI;wBAC5C,UAAU,EAAE,oBAAoB;qBAChC,CACD,CAAC;oBACF,OAAO;wBACN,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,UAAU,EAAE,oBAAoB;wBAChC,MAAM,EAAE,YAAY;wBACpB,cAAc,EAAE,UAAU,CAAC,IAAI;qBAC/B,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAEhB,OAAO;wBACN,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,UAAU,EAAE,oBAAoB;wBAChC,MAAM,EAAE,SAAS;wBACjB,cAAc,EAAE,UAAU,CAAC,IAAI;qBAC/B,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AAvJY,8EAAiC;4CAAjC,iCAAiC;IAD7C,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QAChB,0BAAqB;QACzB,wEAAiC;QAC/B,oEAAmC;QAC/C,iBAAM;GANpB,iCAAiC,CAuJ7C"}

package/dist/modules/dynamic-credentials.ee/services/credential-resolver.service.d.ts

@@ -0,0 +1,33 @@
+import { Logger } from '@n8n/backend-common';
+import { CredentialResolverConfiguration, ICredentialResolver } from '@n8n/decorators';
+import { Cipher } from 'n8n-core';
+import { DynamicCredentialResolverRegistry } from './credential-resolver-registry.service';
+import { DynamicCredentialResolver } from '../database/entities/credential-resolver';
+import { DynamicCredentialResolverRepository } from '../database/repositories/credential-resolver.repository';
+export interface CreateResolverParams {
+    name: string;
+    type: string;
+    config: CredentialResolverConfiguration;
+}
+export interface UpdateResolverParams {
+    name?: string;
+    type?: string;
+    config?: CredentialResolverConfiguration;
+}
+export declare class DynamicCredentialResolverService {
+    private readonly logger;
+    private readonly repository;
+    private readonly registry;
+    private readonly cipher;
+    constructor(logger: Logger, repository: DynamicCredentialResolverRepository, registry: DynamicCredentialResolverRegistry, cipher: Cipher);
+    create(params: CreateResolverParams): Promise<DynamicCredentialResolver>;
+    findAll(): Promise<DynamicCredentialResolver[]>;
+    getAvailableTypes(): ICredentialResolver[];
+    findById(id: string): Promise<DynamicCredentialResolver>;
+    update(id: string, params: UpdateResolverParams): Promise<DynamicCredentialResolver>;
+    delete(id: string): Promise<void>;
+    private validateConfig;
+    private encryptConfig;
+    private decryptConfig;
+    private withDecryptedConfig;
+}

package/dist/modules/dynamic-credentials.ee/services/credential-resolver.service.js

@@ -0,0 +1,118 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamicCredentialResolverService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const credential_resolver_not_found_error_1 = require("../errors/credential-resolver-not-found.error");
+let DynamicCredentialResolverService = class DynamicCredentialResolverService {
+    constructor(logger, repository, registry, cipher) {
+        this.logger = logger;
+        this.repository = repository;
+        this.registry = registry;
+        this.cipher = cipher;
+        this.logger = this.logger.scoped('dynamic-credentials');
+    }
+    async create(params) {
+        await this.validateConfig(params.type, params.config);
+        const encryptedConfig = this.encryptConfig(params.config);
+        const resolver = this.repository.create({
+            name: params.name,
+            type: params.type,
+            config: encryptedConfig,
+        });
+        const saved = await this.repository.save(resolver);
+        this.logger.debug(`Created credential resolver "${saved.name}" (${saved.id})`);
+        return this.withDecryptedConfig(saved);
+    }
+    async findAll() {
+        const resolvers = await this.repository.find();
+        return resolvers.map((resolver) => this.withDecryptedConfig(resolver));
+    }
+    getAvailableTypes() {
+        return this.registry.getAllResolvers();
+    }
+    async findById(id) {
+        const resolver = await this.repository.findOneBy({ id });
+        if (!resolver) {
+            throw new credential_resolver_not_found_error_1.DynamicCredentialResolverNotFoundError(id);
+        }
+        return this.withDecryptedConfig(resolver);
+    }
+    async update(id, params) {
+        const existing = await this.repository.findOneBy({ id });
+        if (!existing) {
+            throw new credential_resolver_not_found_error_1.DynamicCredentialResolverNotFoundError(id);
+        }
+        if (params.type !== undefined) {
+            existing.type = params.type;
+            if (params.config === undefined) {
+                const existingConfig = this.decryptConfig(existing.config);
+                await this.validateConfig(existing.type, existingConfig);
+            }
+        }
+        if (params.config !== undefined) {
+            await this.validateConfig(existing.type, params.config);
+            existing.config = this.encryptConfig(params.config);
+        }
+        if (params.name !== undefined) {
+            existing.name = params.name;
+        }
+        const saved = await this.repository.save(existing);
+        this.logger.debug(`Updated credential resolver "${saved.name}" (${saved.id})`);
+        return this.withDecryptedConfig(saved);
+    }
+    async delete(id) {
+        const existing = await this.repository.findOneBy({ id });
+        if (!existing) {
+            throw new credential_resolver_not_found_error_1.DynamicCredentialResolverNotFoundError(id);
+        }
+        await this.repository.remove(existing);
+        this.logger.debug(`Deleted credential resolver "${existing.name}" (${id})`);
+    }
+    async validateConfig(type, config) {
+        const resolverImplementation = this.registry.getResolverByTypename(type);
+        if (!resolverImplementation) {
+            throw new decorators_1.CredentialResolverValidationError(`Unknown resolver type: ${type}`);
+        }
+        await resolverImplementation.validateOptions(config);
+    }
+    encryptConfig(config) {
+        return this.cipher.encrypt(config);
+    }
+    decryptConfig(encryptedConfig) {
+        const decryptedData = this.cipher.decrypt(encryptedConfig);
+        try {
+            return (0, n8n_workflow_1.jsonParse)(decryptedData);
+        }
+        catch {
+            throw new n8n_workflow_1.UnexpectedError('Credential resolver config could not be decrypted. The likely reason is that a different "encryptionKey" was used to encrypt the data.');
+        }
+    }
+    withDecryptedConfig(resolver) {
+        resolver.decryptedConfig = this.decryptConfig(resolver.config);
+        return resolver;
+    }
+};
+exports.DynamicCredentialResolverService = DynamicCredentialResolverService;
+exports.DynamicCredentialResolverService = DynamicCredentialResolverService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        n8n_core_1.Cipher])
+], DynamicCredentialResolverService);
+//# sourceMappingURL=credential-resolver.service.js.map

package/dist/modules/dynamic-credentials.ee/services/credential-resolver.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-resolver.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/credential-resolver.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAIyB;AACzB,gCAAkC;AAClC,uCAAkC;AAClC,+CAA0D;AAE1D,iGAA2F;AAE3F,4GAA8G;AAC9G,uGAAuG;AAqBhG,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IAC5C,YACkB,MAAc,EACd,UAA+C,EAC/C,QAA2C,EAC3C,MAAc;QAHd,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAqC;QAC/C,aAAQ,GAAR,QAAQ,CAAmC;QAC3C,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAMD,KAAK,CAAC,MAAM,CAAC,MAA4B;QACxC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAEtD,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACvC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,eAAe;SACvB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/E,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAMD,KAAK,CAAC,OAAO;QACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAKD,iBAAiB;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;IACxC,CAAC;IAOD,KAAK,CAAC,QAAQ,CAAC,EAAU;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,4EAAsC,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAOD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,MAA4B;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,4EAAsC,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAE5B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC1D,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACxD,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/E,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAMD,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,4EAAsC,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,CAAC,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC;IAMO,KAAK,CAAC,cAAc,CAC3B,IAAY,EACZ,MAAuC;QAEvC,MAAM,sBAAsB,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC7B,MAAM,IAAI,8CAAiC,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,sBAAsB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAKO,aAAa,CAAC,MAAuC;QAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAKO,aAAa,CAAC,eAAuB;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,CAAC;YACJ,OAAO,IAAA,wBAAS,EAAkC,aAAa,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,8BAAe,CACxB,wIAAwI,CACxI,CAAC;QACH,CAAC;IACF,CAAC;IAKO,mBAAmB,CAAC,QAAmC;QAC9D,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;AAzJY,4EAAgC;2CAAhC,gCAAgC;IAD5C,IAAA,YAAO,GAAE;qCAGiB,uBAAM;QACF,oEAAmC;QACrC,wEAAiC;QACnC,iBAAM;GALpB,gCAAgC,CAyJ5C"}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.d.ts

@@ -0,0 +1,18 @@
+import type { CredentialStoreMetadata, IDynamicCredentialStorageProvider } from '../../../credentials/dynamic-credential-storage.interface';
+import { type ICredentialContext, type ICredentialDataDecryptedObject, type IWorkflowSettings } from 'n8n-workflow';
+import { DynamicCredentialResolverRegistry } from './credential-resolver-registry.service';
+import { DynamicCredentialResolverRepository } from '../database/repositories/credential-resolver.repository';
+import { Cipher } from 'n8n-core';
+import { LoadNodesAndCredentials } from '../../../load-nodes-and-credentials';
+import { Logger } from '@n8n/backend-common';
+export declare class DynamicCredentialStorageService implements IDynamicCredentialStorageProvider {
+    private readonly resolverRegistry;
+    private readonly resolverRepository;
+    private readonly loadNodesAndCredentials;
+    private readonly cipher;
+    private readonly logger;
+    constructor(resolverRegistry: DynamicCredentialResolverRegistry, resolverRepository: DynamicCredentialResolverRepository, loadNodesAndCredentials: LoadNodesAndCredentials, cipher: Cipher, logger: Logger);
+    storeIfNeeded(credentialStoreMetadata: CredentialStoreMetadata, dynamicData: ICredentialDataDecryptedObject, credentialContext: ICredentialContext, staticData?: ICredentialDataDecryptedObject, workflowSettings?: IWorkflowSettings): Promise<void>;
+    private handleNoResolver;
+    private handleMissingResolver;
+}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.js

@@ -0,0 +1,94 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamicCredentialStorageService = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const n8n_core_1 = require("n8n-core");
+const credential_storage_error_1 = require("../errors/credential-storage.error");
+const load_nodes_and_credentials_1 = require("../../../load-nodes-and-credentials");
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const shared_fields_1 = require("./shared-fields");
+let DynamicCredentialStorageService = class DynamicCredentialStorageService {
+    constructor(resolverRegistry, resolverRepository, loadNodesAndCredentials, cipher, logger) {
+        this.resolverRegistry = resolverRegistry;
+        this.resolverRepository = resolverRepository;
+        this.loadNodesAndCredentials = loadNodesAndCredentials;
+        this.cipher = cipher;
+        this.logger = logger;
+    }
+    async storeIfNeeded(credentialStoreMetadata, dynamicData, credentialContext, staticData, workflowSettings) {
+        try {
+            if (!credentialStoreMetadata.isResolvable) {
+                return;
+            }
+            const resolverId = credentialStoreMetadata.resolverId ?? workflowSettings?.credentialResolverId;
+            if (!resolverId) {
+                return this.handleNoResolver(credentialStoreMetadata);
+            }
+            const resolverEntity = await this.resolverRepository.findOneBy({
+                id: resolverId,
+            });
+            if (!resolverEntity) {
+                return this.handleMissingResolver(credentialStoreMetadata, resolverId);
+            }
+            const resolver = this.resolverRegistry.getResolverByTypename(resolverEntity.type);
+            if (!resolver) {
+                return this.handleMissingResolver(credentialStoreMetadata, resolverId);
+            }
+            const decryptedConfig = this.cipher.decrypt(resolverEntity.config);
+            const resolverConfig = (0, n8n_workflow_1.jsonParse)(decryptedConfig);
+            const credentialType = this.loadNodesAndCredentials.getCredential(credentialStoreMetadata.type);
+            const sharedFields = (0, shared_fields_1.extractSharedFields)(credentialType.type);
+            const mergedDynamicData = {
+                ...(staticData ?? {}),
+                ...dynamicData,
+            };
+            for (const field of sharedFields) {
+                if (field in mergedDynamicData) {
+                    delete mergedDynamicData[field];
+                }
+            }
+            await resolver.setSecret(credentialStoreMetadata.id, credentialContext, mergedDynamicData, {
+                configuration: resolverConfig,
+                resolverName: resolverEntity.name,
+                resolverId: resolverEntity.id,
+            });
+            this.logger.debug('Successfully stored dynamic credentials', {
+                credentialId: credentialStoreMetadata.id,
+                resolverId,
+                resolverSource: credentialStoreMetadata.resolverId ? 'credential' : 'workflow',
+                identity: credentialContext.identity,
+            });
+        }
+        catch (error) {
+            throw new credential_storage_error_1.CredentialStorageError(`Failed to store dynamic credentials data for "${credentialStoreMetadata.name}"`, { cause: error });
+        }
+    }
+    handleNoResolver(credentialStoreMetadata) {
+        throw new credential_storage_error_1.CredentialStorageError(`No resolver found for credential "${credentialStoreMetadata.name}"`);
+    }
+    handleMissingResolver(credentialStoreMetadata, resolverId) {
+        throw new credential_storage_error_1.CredentialStorageError(`Resolver "${resolverId}" not found for credential "${credentialStoreMetadata.name}"`);
+    }
+};
+exports.DynamicCredentialStorageService = DynamicCredentialStorageService;
+exports.DynamicCredentialStorageService = DynamicCredentialStorageService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        load_nodes_and_credentials_1.LoadNodesAndCredentials,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], DynamicCredentialStorageService);
+//# sourceMappingURL=dynamic-credential-storage.service.js.map

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-credential-storage.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,+CAKsB;AACtB,iGAA2F;AAC3F,4GAA8G;AAC9G,uCAAkC;AAClC,iFAA4E;AAC5E,6EAAuE;AACvE,wDAA6C;AAC7C,gCAAkC;AAClC,mDAAsD;AAG/C,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAC3C,YACkB,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc;QAJd,qBAAgB,GAAhB,gBAAgB,CAAmC;QACnD,uBAAkB,GAAlB,kBAAkB,CAAqC;QACvD,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,aAAa,CAClB,uBAAgD,EAChD,WAA2C,EAC3C,iBAAqC,EACrC,UAA2C,EAC3C,gBAAoC;QAEpC,IAAI,CAAC;YACJ,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,CAAC;gBAE3C,OAAO;YACR,CAAC;YAGD,MAAM,UAAU,GACf,uBAAuB,CAAC,UAAU,IAAI,gBAAgB,EAAE,oBAAoB,CAAC;YAG9E,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;YACvD,CAAC;YAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;gBAC9D,EAAE,EAAE,UAAU;aACd,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAE3E,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,uBAAuB,CAAC,IAAI,CAC5B,CAAC;YAGF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE9D,MAAM,iBAAiB,GAAG;gBACzB,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACrB,GAAG,WAAW;aACd,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;oBAChC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACF,CAAC;YAED,MAAM,QAAQ,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE;gBAC1F,aAAa,EAAE,cAAc;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,UAAU,EAAE,cAAc,CAAC,EAAE;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBAC5D,YAAY,EAAE,uBAAuB,CAAC,EAAE;gBACxC,UAAU;gBACV,cAAc,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBAC9E,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,iDAAsB,CAC/B,iDAAiD,uBAAuB,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;IACF,CAAC;IAEO,gBAAgB,CAAC,uBAAgD;QACxE,MAAM,IAAI,iDAAsB,CAC/B,qCAAqC,uBAAuB,CAAC,IAAI,GAAG,CACpE,CAAC;IACH,CAAC;IAEO,qBAAqB,CAC5B,uBAAgD,EAChD,UAAkB;QAElB,MAAM,IAAI,iDAAsB,CAC/B,aAAa,UAAU,+BAA+B,uBAAuB,CAAC,IAAI,GAAG,CACrF,CAAC;IACH,CAAC;CACD,CAAA;AAtGY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,YAAO,GAAE;qCAG2B,wEAAiC;QAC/B,oEAAmC;QAC9B,oDAAuB;QACxC,iBAAM;QACN,uBAAM;GANpB,+BAA+B,CAsG3C"}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.d.ts

@@ -0,0 +1,20 @@
+import { Logger } from '@n8n/backend-common';
+import { Cipher } from 'n8n-core';
+import type { ICredentialDataDecryptedObject, IExecutionContext, IWorkflowSettings } from 'n8n-workflow';
+import { LoadNodesAndCredentials } from '../../../load-nodes-and-credentials';
+import { DynamicCredentialResolverRegistry } from './credential-resolver-registry.service';
+import type { CredentialResolveMetadata, ICredentialResolutionProvider } from '../../../credentials/credential-resolution-provider.interface';
+import { DynamicCredentialResolverRepository } from '../database/repositories/credential-resolver.repository';
+export declare class DynamicCredentialService implements ICredentialResolutionProvider {
+    private readonly resolverRegistry;
+    private readonly resolverRepository;
+    private readonly loadNodesAndCredentials;
+    private readonly cipher;
+    private readonly logger;
+    constructor(resolverRegistry: DynamicCredentialResolverRegistry, resolverRepository: DynamicCredentialResolverRepository, loadNodesAndCredentials: LoadNodesAndCredentials, cipher: Cipher, logger: Logger);
+    resolveIfNeeded(credentialsResolveMetadata: CredentialResolveMetadata, staticData: ICredentialDataDecryptedObject, executionContext?: IExecutionContext, workflowSettings?: IWorkflowSettings): Promise<ICredentialDataDecryptedObject>;
+    private buildCredentialContext;
+    private handleResolutionError;
+    private handleMissingResolver;
+    private handleMissingContext;
+}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamicCredentialService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const load_nodes_and_credentials_1 = require("../../../load-nodes-and-credentials");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const shared_fields_1 = require("./shared-fields");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const credential_resolution_error_1 = require("../errors/credential-resolution.error");
+let DynamicCredentialService = class DynamicCredentialService {
+    constructor(resolverRegistry, resolverRepository, loadNodesAndCredentials, cipher, logger) {
+        this.resolverRegistry = resolverRegistry;
+        this.resolverRepository = resolverRepository;
+        this.loadNodesAndCredentials = loadNodesAndCredentials;
+        this.cipher = cipher;
+        this.logger = logger;
+    }
+    async resolveIfNeeded(credentialsResolveMetadata, staticData, executionContext, workflowSettings) {
+        const resolverId = credentialsResolveMetadata.resolverId ?? workflowSettings?.credentialResolverId;
+        if (!credentialsResolveMetadata.isResolvable || !resolverId) {
+            return staticData;
+        }
+        const resolverEntity = await this.resolverRepository.findOneBy({
+            id: resolverId,
+        });
+        if (!resolverEntity) {
+            return this.handleMissingResolver(credentialsResolveMetadata, staticData, resolverId);
+        }
+        const resolver = this.resolverRegistry.getResolverByTypename(resolverEntity.type);
+        if (!resolver) {
+            return this.handleMissingResolver(credentialsResolveMetadata, staticData, resolverId);
+        }
+        const credentialContext = this.buildCredentialContext(executionContext);
+        if (!credentialContext) {
+            return this.handleMissingContext(credentialsResolveMetadata, staticData);
+        }
+        try {
+            const credentialType = this.loadNodesAndCredentials.getCredential(credentialsResolveMetadata.type);
+            const sharedFields = (0, shared_fields_1.extractSharedFields)(credentialType.type);
+            const decryptedConfig = this.cipher.decrypt(resolverEntity.config);
+            const resolverConfig = (0, n8n_workflow_1.jsonParse)(decryptedConfig);
+            const dynamicData = await resolver.getSecret(credentialsResolveMetadata.id, credentialContext, {
+                resolverId: resolverEntity.id,
+                resolverName: resolverEntity.type,
+                configuration: resolverConfig,
+            });
+            this.logger.debug('Successfully resolved dynamic credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+                identity: credentialContext.identity,
+            });
+            for (const field of sharedFields) {
+                if (field in dynamicData) {
+                    delete dynamicData[field];
+                }
+            }
+            return { ...staticData, ...dynamicData };
+        }
+        catch (error) {
+            return this.handleResolutionError(credentialsResolveMetadata, staticData, error, resolverId);
+        }
+    }
+    buildCredentialContext(executionContext) {
+        if (!executionContext?.credentials) {
+            return undefined;
+        }
+        try {
+            const decrypted = this.cipher.decrypt(executionContext.credentials);
+            return (0, n8n_workflow_1.toCredentialContext)(decrypted);
+        }
+        catch (error) {
+            this.logger.error('Failed to decrypt credential context from execution context', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return undefined;
+        }
+    }
+    handleResolutionError(credentialsResolveMetadata, staticData, error, resolverId) {
+        const isDataNotFound = error instanceof decorators_1.CredentialResolverDataNotFoundError;
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('Dynamic credential resolution failed, falling back to static', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+                error: error instanceof Error ? error.message : String(error),
+                isDataNotFound,
+            });
+            return staticData;
+        }
+        this.logger.debug('Dynamic credential resolution failed without fallback', {
+            credentialId: credentialsResolveMetadata.id,
+            credentialName: credentialsResolveMetadata.name,
+            resolverId,
+            resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+            error,
+        });
+        throw new credential_resolution_error_1.CredentialResolutionError(`Failed to resolve dynamic credentials for "${credentialsResolveMetadata.name}"`, { cause: error });
+    }
+    handleMissingResolver(credentialsResolveMetadata, staticData, resolverId) {
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('Resolver not found, falling back to static credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+            });
+            return staticData;
+        }
+        throw new credential_resolution_error_1.CredentialResolutionError(`Resolver "${resolverId}" not found for credential "${credentialsResolveMetadata.name}"`);
+    }
+    handleMissingContext(credentialsResolveMetadata, staticData) {
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('No execution context available, falling back to static credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+            });
+            return staticData;
+        }
+        throw new credential_resolution_error_1.CredentialResolutionError(`Cannot resolve dynamic credentials without execution context for "${credentialsResolveMetadata.name}"`);
+    }
+};
+exports.DynamicCredentialService = DynamicCredentialService;
+exports.DynamicCredentialService = DynamicCredentialService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        load_nodes_and_credentials_1.LoadNodesAndCredentials,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], DynamicCredentialService);
+//# sourceMappingURL=dynamic-credential.service.js.map

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-credential.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAAsE;AACtE,gCAAkC;AAClC,uCAAkC;AAMlC,+CAA8D;AAE9D,6EAAuE;AAEvE,iGAA2F;AAC3F,mDAAsD;AAKtD,4GAA8G;AAC9G,uFAAkF;AAO3E,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc;QAJd,qBAAgB,GAAhB,gBAAgB,CAAmC;QACnD,uBAAkB,GAAlB,kBAAkB,CAAqC;QACvD,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAaJ,KAAK,CAAC,eAAe,CACpB,0BAAqD,EACrD,UAA0C,EAC1C,gBAAoC,EACpC,gBAAoC;QAGpC,MAAM,UAAU,GACf,0BAA0B,CAAC,UAAU,IAAI,gBAAgB,EAAE,oBAAoB,CAAC;QAGjF,IAAI,CAAC,0BAA0B,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACnB,CAAC;QAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC9D,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAExE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,0BAA0B,CAAC,IAAI,CAC/B,CAAC;YAEF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAG9D,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAG3E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC3C,0BAA0B,CAAC,EAAE,EAC7B,iBAAiB,EACjB;gBACC,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CACD,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;YAGH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;oBAC1B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACF,CAAC;YAGD,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9F,CAAC;IACF,CAAC;IAKO,sBAAsB,CAAC,gBAA+C;QAC7E,IAAI,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YAEJ,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpE,OAAO,IAAA,kCAAmB,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAChF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAKO,qBAAqB,CAC5B,0BAAqD,EACrD,UAA0C,EAC1C,KAAc,EACd,UAAkB;QAElB,MAAM,cAAc,GAAG,KAAK,YAAY,gDAAmC,CAAC;QAE5E,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBACjF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,cAAc;aACd,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;YAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YACjF,KAAK;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;IAKO,qBAAqB,CAC5B,0BAAqD,EACrD,UAA0C,EAC1C,UAAkB;QAElB,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;gBAC3E,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;aACjF,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,uDAAyB,CAClC,aAAa,UAAU,+BAA+B,0BAA0B,CAAC,IAAI,GAAG,CACxF,CAAC;IACH,CAAC;IAKO,oBAAoB,CAC3B,0BAAqD,EACrD,UAA0C;QAE1C,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,EAAE;gBACvF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;aAC/C,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,uDAAyB,CAClC,qEAAqE,0BAA0B,CAAC,IAAI,GAAG,CACvG,CAAC;IACH,CAAC;CACD,CAAA;AAxMY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAG2B,wEAAiC;QAC/B,oEAAmC;QAC9B,oDAAuB;QACxC,iBAAM;QACN,uBAAM;GANpB,wBAAwB,CAwMpC"}

package/dist/modules/dynamic-credentials.ee/services/index.d.ts

@@ -0,0 +1,5 @@
+export * from './credential-resolver-registry.service';
+export * from './credential-resolver.service';
+export * from './dynamic-credential.service';
+export * from './dynamic-credential-storage.service';
+export * from './credential-resolver-workflow.service';