n8n 2.14.2 → 2.16.0

package/dist/modules/data-table/data-table-proxy.service.js

@@ -13,7 +13,11 @@ exports.DataTableProxyService = void 0;
 exports.isAllowedNode = isAllowedNode;
 const backend_common_1 = require("@n8n/backend-common");
 const di_1 = require("@n8n/di");
+const data_table_aggregate_service_1 = require("./data-table-aggregate.service");
 const data_table_service_1 = require("./data-table.service");
+const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
+const check_access_1 = require("../../permissions.ee/check-access");
+const source_control_preferences_service_ee_1 = require("../../modules/source-control.ee/source-control-preferences.service.ee");
 const ownership_service_1 = require("../../services/ownership.service");
 const ALLOWED_NODES = [
     'n8n-nodes-base.dataTable',
@@ -25,12 +29,20 @@ function isAllowedNode(s) {
     return ALLOWED_NODES.includes(s);
 }
 let DataTableProxyService = class DataTableProxyService {
-    constructor(dataTableService, ownershipService, logger) {
+    constructor(dataTableService, dataTableAggregateService, ownershipService, logger, sourceControlPreferencesService) {
         this.dataTableService = dataTableService;
+        this.dataTableAggregateService = dataTableAggregateService;
         this.ownershipService = ownershipService;
         this.logger = logger;
+        this.sourceControlPreferencesService = sourceControlPreferencesService;
         this.logger = this.logger.scoped('data-table');
     }
+    checkInstanceWriteAccess() {
+        const preferences = this.sourceControlPreferencesService.getPreferences();
+        if (preferences.branchReadOnly) {
+            throw new forbidden_error_1.ForbiddenError('Cannot modify data tables on a protected instance. This instance is in read-only mode.');
+        }
+    }
     validateRequest(node) {
         if (!isAllowedNode(node.type)) {
             throw new Error('This proxy is only available for Data table nodes');
@@ -50,6 +62,76 @@ let DataTableProxyService = class DataTableProxyService {
         projectId = projectId ?? (await this.getProjectId(workflow));
         return this.makeDataTableOperations(projectId, dataTableId);
     }
+    async requireScope(user, scope, projectId) {
+        const hasScope = await (0, check_access_1.userHasScopes)(user, [scope], false, { projectId });
+        if (!hasScope) {
+            throw new Error(`User does not have '${scope}' access on project '${projectId}'`);
+        }
+    }
+    makeDataTableOperationsForUser(user) {
+        const dataTableService = this.dataTableService;
+        const dataTableAggregateService = this.dataTableAggregateService;
+        const requireScope = async (scope, projectId) => await this.requireScope(user, scope, projectId);
+        const checkInstanceWriteAccess = () => this.checkInstanceWriteAccess();
+        return {
+            async getManyAndCount(options) {
+                return await dataTableAggregateService.getManyAndCount(user, options);
+            },
+            async createDataTable(projectId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:create', projectId);
+                return await dataTableService.createDataTable(projectId, options);
+            },
+            async getColumns(dataTableId, projectId) {
+                await requireScope('dataTable:read', projectId);
+                return await dataTableService.getColumns(dataTableId, projectId);
+            },
+            async updateDataTable(dataTableId, projectId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:update', projectId);
+                return await dataTableService.updateDataTable(dataTableId, projectId, options);
+            },
+            async addColumn(dataTableId, projectId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:update', projectId);
+                return await dataTableService.addColumn(dataTableId, projectId, options);
+            },
+            async deleteColumn(dataTableId, projectId, columnId) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:update', projectId);
+                return await dataTableService.deleteColumn(dataTableId, projectId, columnId);
+            },
+            async renameColumn(dataTableId, projectId, columnId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:update', projectId);
+                return await dataTableService.renameColumn(dataTableId, projectId, columnId, options);
+            },
+            async deleteDataTable(dataTableId, projectId) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:delete', projectId);
+                return await dataTableService.deleteDataTable(dataTableId, projectId);
+            },
+            async getManyRowsAndCount(dataTableId, projectId, options) {
+                await requireScope('dataTable:readRow', projectId);
+                return await dataTableService.getManyRowsAndCount(dataTableId, projectId, options);
+            },
+            async insertRows(dataTableId, projectId, rows, returnType) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:writeRow', projectId);
+                return await dataTableService.insertRows(dataTableId, projectId, rows, returnType);
+            },
+            async updateRows(dataTableId, projectId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:writeRow', projectId);
+                return await dataTableService.updateRows(dataTableId, projectId, { filter: options.filter, data: options.data }, true, options.dryRun);
+            },
+            async deleteRows(dataTableId, projectId, options) {
+                checkInstanceWriteAccess();
+                await requireScope('dataTable:writeRow', projectId);
+                return await dataTableService.deleteRows(dataTableId, projectId, { filter: options.filter }, true, options.dryRun);
+            },
+        };
+    }
     makeAggregateOperations(projectId) {
         const dataTableService = this.dataTableService;
         return {
@@ -114,7 +196,9 @@ exports.DataTableProxyService = DataTableProxyService;
 exports.DataTableProxyService = DataTableProxyService = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [data_table_service_1.DataTableService,
+        data_table_aggregate_service_1.DataTableAggregateService,
         ownership_service_1.OwnershipService,
-        backend_common_1.Logger])
+        backend_common_1.Logger,
+        source_control_preferences_service_ee_1.SourceControlPreferencesService])
 ], DataTableProxyService);
 //# sourceMappingURL=data-table-proxy.service.js.map

package/dist/modules/data-table/data-table-proxy.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-table-proxy.service.js","sourceRoot":"","sources":["../../../src/modules/data-table/data-table-proxy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAqCA,sCAEC;AAtCD,wDAA6C;AAC7C,gCAAkC;AAsBlC,6DAAwD;AAExD,oEAAgE;AAEhE,MAAM,aAAa,GAAG;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,kCAAkC;IAClC,2BAA2B;CAClB,CAAC;AAIX,SAAgB,aAAa,CAAC,CAAS;IACtC,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAgB,CAAC,CAAC;AACjD,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,gBAAkC,EAClC,gBAAkC,EAClC,MAAc;QAFd,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAEO,eAAe,CAAC,IAAW;QAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,WAAW,CAAC,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC/B,QAAkB,EAClB,IAAW,EACX,SAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,QAAkB,EAClB,IAAW,EACX,WAAmB,EACnB,SAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,OAAO;YACN,YAAY;gBACX,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,KAAK,CAAC,eAAe,CAAC,UAAgC,EAAE;gBACvD,MAAM,cAAc,GAAyB;oBAC5C,GAAG,OAAO;oBACV,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;iBAChD,CAAC;gBACF,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,KAAK,CAAC,eAAe,CAAC,OAA+B;gBACpD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;YAED,KAAK,CAAC,kBAAkB;gBACvB,OAAO,MAAM,gBAAgB,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;YACrE,CAAC;SACD,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC9B,SAAiB,EACjB,WAAmB;QAEnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAE/C,OAAO;YAEN,KAAK,CAAC,eAAe,CAAC,OAA+B;gBACpD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAChF,CAAC;YAED,KAAK,CAAC,eAAe;gBACpB,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAGD,KAAK,CAAC,UAAU;gBACf,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,OAAkC;gBACjD,OAAO,MAAM,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAmC;gBACrE,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrF,CAAC;YAED,KAAK,CAAC,YAAY,CAAC,QAAgB;gBAClC,OAAO,MAAM,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9E,CAAC;YAGD,KAAK,CAAC,mBAAmB,CAAC,OAA0C;gBACnE,OAAO,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACpF,CAAC;YAED,KAAK,CAAC,UAAU,CACf,IAAmB,EACnB,UAAa;gBAEb,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACpF,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,OAAkC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAC9C,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,OAAkC;gBACjD,OAAO,MAAM,gBAAgB,CAAC,SAAS,CACtC,WAAW,EACX,SAAS,EACT,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,OAAmC;gBACnD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1B,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;SACD,CAAC;IACH,CAAC;CACD,CAAA;AAhJY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,YAAO,GAAE;qCAG2B,qCAAgB;QAChB,oCAAgB;QAC1B,uBAAM;GAJpB,qBAAqB,CAgJjC"}
+{"version":3,"file":"data-table-proxy.service.js","sourceRoot":"","sources":["../../../src/modules/data-table/data-table-proxy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AA2CA,sCAEC;AA5CD,wDAA6C;AAE7C,gCAAkC;AAuBlC,iFAA2E;AAC3E,6DAAwD;AAExD,8EAA0E;AAC1E,gEAA8D;AAC9D,6HAAoH;AACpH,oEAAgE;AAEhE,MAAM,aAAa,GAAG;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,kCAAkC;IAClC,2BAA2B;CAClB,CAAC;AAIX,SAAgB,aAAa,CAAC,CAAS;IACtC,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAgB,CAAC,CAAC;AACjD,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,gBAAkC,EAClC,yBAAoD,EACpD,gBAAkC,EAClC,MAAc,EACd,+BAAgE;QAJhE,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,WAAM,GAAN,MAAM,CAAQ;QACd,oCAA+B,GAA/B,+BAA+B,CAAiC;QAEjF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAEO,wBAAwB;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,+BAA+B,CAAC,cAAc,EAAE,CAAC;QAC1E,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,gCAAc,CACvB,wFAAwF,CACxF,CAAC;QACH,CAAC;IACF,CAAC;IAEO,eAAe,CAAC,IAAW;QAClC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkB;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,WAAW,CAAC,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC/B,QAAkB,EAClB,IAAW,EACX,SAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,QAAkB,EAClB,IAAW,EACX,WAAmB,EACnB,SAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,SAAS,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAU,EAAE,KAAY,EAAE,SAAiB;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAa,EAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,wBAAwB,SAAS,GAAG,CAAC,CAAC;QACnF,CAAC;IACF,CAAC;IAED,8BAA8B,CAAC,IAAU;QACxC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,MAAM,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QACjE,MAAM,YAAY,GAAG,KAAK,EAAE,KAAY,EAAE,SAAiB,EAAE,EAAE,CAC9D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEvE,OAAO;YAEN,KAAK,CAAC,eAAe,CAAC,OAA8B;gBACnD,OAAO,MAAM,yBAAyB,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC;YAGD,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,OAA+B;gBACvE,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;YAGD,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,SAAiB;gBACtD,MAAM,YAAY,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;gBAChD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YAGD,KAAK,CAAC,eAAe,CACpB,WAAmB,EACnB,SAAiB,EACjB,OAA+B;gBAE/B,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAChF,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,SAAiB,EAAE,OAAkC;gBACzF,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YAED,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,SAAiB,EAAE,QAAgB;gBAC1E,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9E,CAAC;YAED,KAAK,CAAC,YAAY,CACjB,WAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,OAAyB;gBAEzB,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvF,CAAC;YAGD,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,SAAiB;gBAC3D,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAGD,KAAK,CAAC,mBAAmB,CACxB,WAAmB,EACnB,SAAiB,EACjB,OAA0C;gBAE1C,MAAM,YAAY,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACnD,OAAO,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACpF,CAAC;YAGD,KAAK,CAAC,UAAU,CACf,WAAmB,EACnB,SAAiB,EACjB,IAAmB,EACnB,UAAa;gBAEb,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;gBACpD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACpF,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,SAAiB,EAAE,OAAkC;gBAC1F,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;gBACpD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAC9C,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YAED,KAAK,CAAC,UAAU,CACf,WAAmB,EACnB,SAAiB,EACjB,OAAmC;gBAEnC,wBAAwB,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;gBACpD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1B,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;SACD,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,OAAO;YACN,YAAY;gBACX,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,KAAK,CAAC,eAAe,CAAC,UAAgC,EAAE;gBACvD,MAAM,cAAc,GAAyB;oBAC5C,GAAG,OAAO;oBACV,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;iBAChD,CAAC;gBACF,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,KAAK,CAAC,eAAe,CAAC,OAA+B;gBACpD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;YAED,KAAK,CAAC,kBAAkB;gBACvB,OAAO,MAAM,gBAAgB,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;YACrE,CAAC;SACD,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC9B,SAAiB,EACjB,WAAmB;QAEnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAE/C,OAAO;YAEN,KAAK,CAAC,eAAe,CAAC,OAA+B;gBACpD,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAChF,CAAC;YAED,KAAK,CAAC,eAAe;gBACpB,OAAO,MAAM,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAGD,KAAK,CAAC,UAAU;gBACf,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,OAAkC;gBACjD,OAAO,MAAM,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1E,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,OAAmC;gBACrE,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrF,CAAC;YAED,KAAK,CAAC,YAAY,CAAC,QAAgB;gBAClC,OAAO,MAAM,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9E,CAAC;YAGD,KAAK,CAAC,mBAAmB,CAAC,OAA0C;gBACnE,OAAO,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACpF,CAAC;YAED,KAAK,CAAC,UAAU,CACf,IAAmB,EACnB,UAAa;gBAEb,OAAO,MAAM,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACpF,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,OAAkC;gBAClD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAC9C,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YAED,KAAK,CAAC,SAAS,CAAC,OAAkC;gBACjD,OAAO,MAAM,gBAAgB,CAAC,SAAS,CACtC,WAAW,EACX,SAAS,EACT,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,OAAmC;gBACnD,OAAO,MAAM,gBAAgB,CAAC,UAAU,CACvC,WAAW,EACX,SAAS,EACT,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1B,IAAI,EACJ,OAAO,CAAC,MAAM,CACd,CAAC;YACH,CAAC;SACD,CAAC;IACH,CAAC;CACD,CAAA;AAzRY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,YAAO,GAAE;qCAG2B,qCAAgB;QACP,wDAAyB;QAClC,oCAAgB;QAC1B,uBAAM;QACmB,uEAA+B;GANtE,qBAAqB,CAyRjC"}

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/index.d.ts

@@ -1,2 +1,3 @@
 import './http-header-extractor';
 import './bearer-token-extractor';
+import './slack-signature-extractor';

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/index.js

@@ -2,4 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 require("./http-header-extractor");
 require("./bearer-token-extractor");
+require("./slack-signature-extractor");
 //# sourceMappingURL=index.js.map

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/context-establishment-hooks/index.ts"],"names":[],"mappings":";;AAAA,mCAAiC;AACjC,oCAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/context-establishment-hooks/index.ts"],"names":[],"mappings":";;AAAA,mCAAiC;AACjC,oCAAkC;AAClC,uCAAqC"}

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/slack-signature-extractor.d.ts

@@ -0,0 +1,11 @@
+import { Logger } from '@n8n/backend-common';
+import { type ContextEstablishmentOptions, type ContextEstablishmentResult, type HookDescription, type IContextEstablishmentHook } from '@n8n/decorators';
+export declare class SlackSignatureExtractor implements IContextEstablishmentHook {
+    private readonly logger;
+    constructor(logger: Logger);
+    hookDescription: HookDescription;
+    isApplicableToTriggerNode(nodeType: string): boolean;
+    execute(options: ContextEstablishmentOptions): Promise<ContextEstablishmentResult>;
+    private getHeader;
+    private getRawBody;
+}

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/slack-signature-extractor.js

@@ -0,0 +1,88 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SlackSignatureExtractor = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const zod_1 = require("zod");
+const decorators_1 = require("@n8n/decorators");
+function isHeaderObject(obj) {
+    return obj !== null && obj !== undefined && typeof obj === 'object' && !Array.isArray(obj);
+}
+let SlackSignatureExtractor = class SlackSignatureExtractor {
+    constructor(logger) {
+        this.logger = logger;
+        this.hookDescription = {
+            name: 'SlackSignatureExtractor',
+            displayName: 'Slack Identity Extractor',
+            options: [],
+        };
+    }
+    isApplicableToTriggerNode(nodeType) {
+        return nodeType === 'n8n-nodes-base.webhook' || nodeType === 'webhook';
+    }
+    async execute(options) {
+        if (!options.triggerItems || options.triggerItems.length === 0) {
+            this.logger.error('No trigger items found for Slack identity extraction');
+            throw new Error('No trigger items found for Slack identity extraction');
+        }
+        const [triggerItem] = options.triggerItems;
+        const headers = triggerItem.json['headers'];
+        if (!isHeaderObject(headers)) {
+            this.logger.error('No headers found in trigger item for Slack identity extraction');
+            throw new Error('No headers found in trigger item for Slack identity extraction');
+        }
+        const timestamp = this.getHeader(headers, 'x-slack-request-timestamp');
+        const signature = this.getHeader(headers, 'x-slack-signature');
+        if (!timestamp) {
+            this.logger.error('Missing X-Slack-Request-Timestamp header');
+            throw new Error('Missing X-Slack-Request-Timestamp header');
+        }
+        if (!signature) {
+            this.logger.error('Missing X-Slack-Signature header');
+            throw new Error('Missing X-Slack-Signature header');
+        }
+        const rawBody = this.getRawBody(triggerItem);
+        headers['x-slack-signature'] = '**********';
+        headers['x-slack-request-timestamp'] = '**********';
+        return {
+            triggerItems: options.triggerItems,
+            contextUpdate: {
+                credentials: {
+                    identity: rawBody,
+                    version: 1,
+                    metadata: {
+                        source: 'slack-signature',
+                        timestamp,
+                        signature,
+                    },
+                },
+            },
+        };
+    }
+    getHeader(headers, name) {
+        const value = headers[name] ?? headers[name.toLowerCase()];
+        return typeof value === 'string' ? value : undefined;
+    }
+    getRawBody(triggerItem) {
+        const result = zod_1.z.record(zod_1.z.string(), zod_1.z.string()).safeParse(triggerItem.json['body']);
+        if (!result.success) {
+            this.logger.error('Could not retrieve raw body for Slack signature verification');
+            throw new Error('Could not retrieve raw body for Slack signature verification.');
+        }
+        return new URLSearchParams(result.data).toString();
+    }
+};
+exports.SlackSignatureExtractor = SlackSignatureExtractor;
+exports.SlackSignatureExtractor = SlackSignatureExtractor = __decorate([
+    (0, decorators_1.ContextEstablishmentHook)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger])
+], SlackSignatureExtractor);
+//# sourceMappingURL=slack-signature-extractor.js.map

package/dist/modules/dynamic-credentials.ee/context-establishment-hooks/slack-signature-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-signature-extractor.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/context-establishment-hooks/slack-signature-extractor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,6BAAwB;AACxB,gDAMyB;AAEzB,SAAS,cAAc,CAAC,GAAY;IACnC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAiBM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QAE3C,oBAAe,GAAoB;YAClC,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE,0BAA0B;YACvC,OAAO,EAAE,EAAE;SACX,CAAC;IAN4C,CAAC;IAQ/C,yBAAyB,CAAC,QAAgB;QACzC,OAAO,QAAQ,KAAK,wBAAwB,IAAI,QAAQ,KAAK,SAAS,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAoC;QACjD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;QAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACnF,CAAC;QAGD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAE/D,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAG7C,OAAO,CAAC,mBAAmB,CAAC,GAAG,YAAY,CAAC;QAC5C,OAAO,CAAC,2BAA2B,CAAC,GAAG,YAAY,CAAC;QAEpD,OAAO;YACN,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE;gBACd,WAAW,EAAE;oBACZ,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,CAAC;oBACV,QAAQ,EAAE;wBACT,MAAM,EAAE,iBAAiB;wBACzB,SAAS;wBACT,SAAS;qBACT;iBACD;aACD;SACD,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,OAAgC,EAAE,IAAY;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IAQO,UAAU,CAAC,WAA8C;QAChE,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;CACD,CAAA;AApFY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,qCAAwB,GAAE;qCAEW,uBAAM;GAD/B,uBAAuB,CAoFnC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/slack-signature-identifier.d.ts

@@ -0,0 +1,28 @@
+import { Logger } from '@n8n/backend-common';
+import type { ICredentialContext } from 'n8n-workflow';
+import { z } from 'zod';
+import { type ITokenIdentifier } from './identifier-interface';
+export declare const SlackSignatureOptionsSchema: z.ZodObject<{
+    signingSecret: z.ZodString;
+    subjectClaim: z.ZodDefault<z.ZodEnum<["user_id", "team_user"]>>;
+}, "strip", z.ZodTypeAny, {
+    subjectClaim: "user_id" | "team_user";
+    signingSecret: string;
+}, {
+    signingSecret: string;
+    subjectClaim?: "user_id" | "team_user" | undefined;
+}>;
+export declare class SlackSignatureIdentifier implements ITokenIdentifier {
+    private readonly logger;
+    constructor(logger: Logger);
+    validateOptions(identifierOptions: Record<string, unknown>): Promise<void>;
+    resolve(context: ICredentialContext, identifierOptions: Record<string, unknown>): Promise<string>;
+    resolveKey(context: ICredentialContext, identifierOptions: Record<string, unknown>): string;
+    private deriveKey;
+    private parseOptions;
+    private verifySlackSignature;
+    private extractSlackIdentity;
+    private extractFlatFieldBody;
+    private extractInteractivePayloadBody;
+    private extractEventPayloadBody;
+}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/slack-signature-identifier.js

@@ -0,0 +1,158 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SlackSignatureIdentifier = exports.SlackSignatureOptionsSchema = void 0;
+const crypto_1 = require("crypto");
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const zod_1 = require("zod");
+const identifier_interface_1 = require("./identifier-interface");
+const querystring_1 = require("querystring");
+const MAX_TIMESTAMP_AGE_SECONDS = 300;
+const SlackIdentitySchema = zod_1.z.object({
+    identity: zod_1.z.string(),
+    version: zod_1.z.number(),
+    metadata: zod_1.z.object({
+        source: zod_1.z.literal('slack-signature'),
+        timestamp: zod_1.z.string(),
+        signature: zod_1.z.string(),
+    }),
+});
+exports.SlackSignatureOptionsSchema = zod_1.z.object({
+    signingSecret: zod_1.z.string().min(1, 'Slack signing secret is required'),
+    subjectClaim: zod_1.z.enum(['user_id', 'team_user']).default('user_id'),
+});
+const FlatPayloadSchema = zod_1.z.object({
+    user_id: zod_1.z.string(),
+    team_id: zod_1.z.string().optional(),
+    enterprise_id: zod_1.z.string().optional(),
+});
+const InteractivePayloadSchema = zod_1.z.object({
+    user: zod_1.z.object({ id: zod_1.z.string().optional() }),
+    team: zod_1.z.object({ id: zod_1.z.string() }).optional(),
+    enterprise: zod_1.z.object({ id: zod_1.z.string() }).optional(),
+});
+const EventPayloadSchema = zod_1.z.object({
+    event: zod_1.z.object({ user: zod_1.z.string().optional() }),
+    team_id: zod_1.z.string().optional(),
+    enterprise_id: zod_1.z.string().optional(),
+});
+let SlackSignatureIdentifier = class SlackSignatureIdentifier {
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async validateOptions(identifierOptions) {
+        const result = exports.SlackSignatureOptionsSchema.safeParse(identifierOptions);
+        if (!result.success) {
+            throw new identifier_interface_1.IdentifierValidationError(`Invalid Slack identifier options: ${result.error.message}`);
+        }
+    }
+    async resolve(context, identifierOptions) {
+        const options = this.parseOptions(identifierOptions);
+        const result = SlackIdentitySchema.safeParse(context);
+        if (!result.success) {
+            throw new identifier_interface_1.IdentifierValidationError('Missing Slack signature verification data');
+        }
+        this.verifySlackSignature(options.signingSecret, result.data.metadata.timestamp, result.data.identity, result.data.metadata.signature);
+        this.logger.debug('Slack signature verified');
+        return this.deriveKey(result.data.identity, options);
+    }
+    resolveKey(context, identifierOptions) {
+        const options = this.parseOptions(identifierOptions);
+        const result = SlackIdentitySchema.safeParse(context);
+        if (!result.success) {
+            throw new identifier_interface_1.IdentifierValidationError('Missing Slack signature verification data');
+        }
+        return this.deriveKey(result.data.identity, options);
+    }
+    deriveKey(identity, options) {
+        const { userId, teamId } = this.extractSlackIdentity(identity);
+        if (!userId) {
+            throw new identifier_interface_1.IdentifierValidationError('Slack user_id not found in identity');
+        }
+        if (options.subjectClaim === 'team_user') {
+            if (!teamId) {
+                throw new identifier_interface_1.IdentifierValidationError('Slack team_id not found for team_user claim');
+            }
+            return `${teamId}:${userId}`;
+        }
+        return userId;
+    }
+    parseOptions(options) {
+        const result = exports.SlackSignatureOptionsSchema.safeParse(options);
+        if (!result.success) {
+            this.logger.error('Invalid Slack identifier options', { error: result.error });
+            throw new identifier_interface_1.IdentifierValidationError(`Invalid Slack identifier options: ${result.error.message}`);
+        }
+        return result.data;
+    }
+    verifySlackSignature(signingSecret, timestamp, rawBody, providedSignature) {
+        const timestampNum = parseInt(timestamp, 10);
+        if (isNaN(timestampNum)) {
+            throw new identifier_interface_1.IdentifierValidationError('Invalid Slack request timestamp');
+        }
+        const currentTimeSec = Math.floor(Date.now() / 1000);
+        if (Math.abs(currentTimeSec - timestampNum) > MAX_TIMESTAMP_AGE_SECONDS) {
+            throw new identifier_interface_1.IdentifierValidationError('Slack request timestamp is too old');
+        }
+        const hmac = (0, crypto_1.createHmac)('sha256', signingSecret);
+        hmac.update(`v0:${timestamp}:${rawBody}`);
+        const expectedSignature = `v0=${hmac.digest('hex')}`;
+        const expectedBuffer = Buffer.from(expectedSignature);
+        const actualBuffer = Buffer.from(providedSignature);
+        if (expectedBuffer.length !== actualBuffer.length ||
+            !(0, crypto_1.timingSafeEqual)(expectedBuffer, actualBuffer)) {
+            throw new identifier_interface_1.IdentifierValidationError('Slack signature verification failed');
+        }
+    }
+    extractSlackIdentity(body) {
+        const parsedBody = (0, querystring_1.parse)(body);
+        return (this.extractFlatFieldBody(parsedBody) ??
+            this.extractInteractivePayloadBody(parsedBody) ??
+            this.extractEventPayloadBody(parsedBody) ?? {
+            userId: undefined,
+            teamId: undefined,
+        });
+    }
+    extractFlatFieldBody(body) {
+        const result = FlatPayloadSchema.safeParse(body);
+        if (!result.success)
+            return undefined;
+        return {
+            userId: result.data.user_id,
+            teamId: result.data.team_id,
+        };
+    }
+    extractInteractivePayloadBody(body) {
+        const result = InteractivePayloadSchema.safeParse(body);
+        if (!result.success)
+            return undefined;
+        return {
+            userId: result.data.user.id,
+            teamId: result.data.team?.id,
+        };
+    }
+    extractEventPayloadBody(body) {
+        const result = EventPayloadSchema.safeParse(body);
+        if (!result.success)
+            return undefined;
+        return {
+            userId: result.data.event.user,
+            teamId: result.data.team_id,
+        };
+    }
+};
+exports.SlackSignatureIdentifier = SlackSignatureIdentifier;
+exports.SlackSignatureIdentifier = SlackSignatureIdentifier = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger])
+], SlackSignatureIdentifier);
+//# sourceMappingURL=slack-signature-identifier.js.map

package/dist/modules/dynamic-credentials.ee/credential-resolvers/identifiers/slack-signature-identifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-signature-identifier.js","sourceRoot":"","sources":["../../../../../src/modules/dynamic-credentials.ee/credential-resolvers/identifiers/slack-signature-identifier.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mCAAqD;AAErD,wDAA6C;AAC7C,gCAAkC;AAElC,6BAAwB;AACxB,iEAA0F;AAC1F,6CAAwD;AAExD,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACpC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;KACrB,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;IACpE,YAAY,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAaI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,eAAe,CAAC,iBAA0C;QAC/D,MAAM,MAAM,GAAG,mCAA2B,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,gDAAyB,CAClC,qCAAqC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAC3D,CAAC;QACH,CAAC;IACF,CAAC;IAMD,KAAK,CAAC,OAAO,CACZ,OAA2B,EAC3B,iBAA0C;QAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,gDAAyB,CAAC,2CAA2C,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,oBAAoB,CACxB,OAAO,CAAC,aAAa,EACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC9B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAE9C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IASD,UAAU,CAAC,OAA2B,EAAE,iBAA0C;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,gDAAyB,CAAC,2CAA2C,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAEO,SAAS,CAAC,QAAgB,EAAE,OAA8B;QACjE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,gDAAyB,CAAC,qCAAqC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,gDAAyB,CAAC,6CAA6C,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,OAAgC;QACpD,MAAM,MAAM,GAAG,mCAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,MAAM,IAAI,gDAAyB,CAClC,qCAAqC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAC3D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAEO,oBAAoB,CAC3B,aAAqB,EACrB,SAAiB,EACjB,OAAe,EACf,iBAAyB;QAGzB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,gDAAyB,CAAC,iCAAiC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,YAAY,CAAC,GAAG,yBAAyB,EAAE,CAAC;YACzE,MAAM,IAAI,gDAAyB,CAAC,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QAGD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC;QAC1C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAGrD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEpD,IACC,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;YAC7C,CAAC,IAAA,wBAAe,EAAC,cAAc,EAAE,YAAY,CAAC,EAC7C,CAAC;YACF,MAAM,IAAI,gDAAyB,CAAC,qCAAqC,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IASO,oBAAoB,CAAC,IAAY;QAIxC,MAAM,UAAU,GAAG,IAAA,mBAAgB,EAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,CACN,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACrC,IAAI,CAAC,6BAA6B,CAAC,UAAU,CAAC;YAC9C,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI;YAC3C,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;SACjB,CACD,CAAC;IACH,CAAC;IAGO,oBAAoB,CAC3B,IAAa;QAEb,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,OAAO;YACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC3B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;SAC3B,CAAC;IACH,CAAC;IAGO,6BAA6B,CACpC,IAAa;QAEb,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,OAAO;YACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;SAC5B,CAAC;IACH,CAAC;IAGO,uBAAuB,CAC9B,IAAa;QAEb,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,OAAO;YACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;SAC3B,CAAC;IACH,CAAC;CACD,CAAA;AA1KY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAE4B,uBAAM;GAD/B,wBAAwB,CA0KpC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/index.d.ts

@@ -1,2 +1,3 @@
 import './oauth-credential-resolver';
 import './n8n-credential-resolver';
+import './slack-credential-resolver';

package/dist/modules/dynamic-credentials.ee/credential-resolvers/index.js

@@ -2,4 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 require("./oauth-credential-resolver");
 require("./n8n-credential-resolver");
+require("./slack-credential-resolver");
 //# sourceMappingURL=index.js.map

package/dist/modules/dynamic-credentials.ee/credential-resolvers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/index.ts"],"names":[],"mappings":";;AAAA,uCAAqC;AACrC,qCAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/credential-resolvers/index.ts"],"names":[],"mappings":";;AAAA,uCAAqC;AACrC,qCAAmC;AACnC,uCAAqC"}

package/dist/modules/dynamic-credentials.ee/credential-resolvers/slack-credential-resolver.d.ts

@@ -0,0 +1,50 @@
+import { Logger } from '@n8n/backend-common';
+import { type CredentialResolverConfiguration, type CredentialResolverHandle, type ICredentialResolver } from '@n8n/decorators';
+import { Cipher } from 'n8n-core';
+import { type ICredentialContext, type ICredentialDataDecryptedObject } from 'n8n-workflow';
+import { SlackSignatureIdentifier } from './identifiers/slack-signature-identifier';
+import { DynamicCredentialEntryStorage } from './storage/dynamic-credential-entry-storage';
+export declare class SlackCredentialResolver implements ICredentialResolver {
+    private readonly logger;
+    private readonly slackSignatureIdentifier;
+    private readonly storage;
+    private readonly cipher;
+    constructor(logger: Logger, slackSignatureIdentifier: SlackSignatureIdentifier, storage: DynamicCredentialEntryStorage, cipher: Cipher);
+    metadata: {
+        name: string;
+        description: string;
+        displayName: string;
+        options: ({
+            displayName: string;
+            name: string;
+            type: "string";
+            typeOptions: {
+                password: boolean;
+            };
+            required: boolean;
+            default: string;
+            description: string;
+            options?: undefined;
+        } | {
+            displayName: string;
+            name: string;
+            type: "options";
+            options: {
+                name: string;
+                value: string;
+                description: string;
+            }[];
+            default: string;
+            description: string;
+            typeOptions?: undefined;
+            required?: undefined;
+        })[];
+    };
+    getSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<ICredentialDataDecryptedObject>;
+    setSecret(credentialId: string, context: ICredentialContext, data: ICredentialDataDecryptedObject, handle: CredentialResolverHandle): Promise<void>;
+    deleteSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
+    deleteAllSecrets(handle: CredentialResolverHandle): Promise<void>;
+    validateOptions(options: CredentialResolverConfiguration): Promise<void>;
+    validateIdentity(context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
+    private parseOptions;
+}