feat(n8n-node): v0.4.2 — self-contained TruseraWebhook with direct HTML serving

Zie619 · claude · Zie619 · commit 03a798458916 · 2026-02-12T17:51:32.000+02:00
TruseraWebhook is now a single-node solution that fetches workflows,
scans them, and serves the HTML dashboard directly via getResponseObject().
Includes webhookId default for clean /webhook/trusera URL path.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/n8n-node/nodes/TruseraWebhook/TruseraWebhook.node.ts b/n8n-node/nodes/TruseraWebhook/TruseraWebhook.node.ts
@@ -5,21 +5,31 @@ import type {
   INodeTypeDescription,
 } from 'n8n-workflow';
 
+import { scanWorkflows } from '../../lib/scanner';
+import { generateDashboardHtml } from '../../lib/dashboardHtml';
+
 export class TruseraWebhook implements INodeType {
   description: INodeTypeDescription = {
     displayName: 'Trusera Webhook',
     name: 'truseraWebhook',
     icon: 'file:trusera.svg',
     group: ['trigger'],
     version: 1,
-    subtitle: 'AI Security Trigger',
+    subtitle: 'AI Security Dashboard',
     description:
-      'Pre-configured webhook trigger for the Trusera AI-BOM dashboard. Connect to a Trusera Dashboard node for a one-click security dashboard.',
+      'One-node security dashboard — add n8n API credentials, activate, and visit /webhook/trusera to see your AI-BOM report.',
     defaults: {
       name: 'Trusera Webhook',
-    },
+      webhookId: 'trusera-ai-bom',
+    } as INodeTypeDescription['defaults'],
     inputs: [],
     outputs: ['main'],
+    credentials: [
+      {
+        name: 'truseraApi',
+        required: true,
+      },
+    ],
     webhooks: [
       {
         name: 'default',
@@ -29,22 +39,79 @@ export class TruseraWebhook implements INodeType {
         isFullPath: true,
       },
     ],
-    properties: [],
+    properties: [
+      {
+        displayName: 'Dashboard Password',
+        name: 'password',
+        type: 'string',
+        typeOptions: { password: true },
+        default: '',
+        description:
+          'Optional. If set, the dashboard is AES-256-GCM encrypted and visitors must enter this password to view it.',
+      },
+    ],
   };
 
   async webhook(this: IWebhookFunctions): Promise<IWebhookResponseData> {
-    const req = this.getRequestObject();
+    const res = this.getResponseObject();
+
+    try {
+      const creds = await this.getCredentials('truseraApi');
+      const baseUrl = ((creds.baseUrl as string) || 'http://localhost:5678').replace(/\/$/, '');
+      const apiKey = creds.apiKey as string;
+      const password = this.getNodeParameter('password', '') as string;
+
+      // Fetch all workflows via n8n REST API (paginated)
+      const allWorkflows: Array<Record<string, unknown>> = [];
+      let cursor: string | null = null;
+      do {
+        const url =
+          `${baseUrl}/api/v1/workflows?limit=100` +
+          (cursor ? `&cursor=${cursor}` : '');
+        const resp = await fetch(url, {
+          headers: {
+            'X-N8N-API-KEY': apiKey,
+            'Accept': 'application/json',
+          },
+        });
+        if (!resp.ok) {
+          throw new Error(`n8n API error: ${resp.status} ${await resp.text()}`);
+        }
+        const data = (await resp.json()) as {
+          data: Array<Record<string, unknown>>;
+          nextCursor?: string;
+        };
+        allWorkflows.push(...data.data);
+        cursor = data.nextCursor ?? null;
+      } while (cursor);
+
+      // Scan all workflows
+      const workflows = allWorkflows.map((wf) => ({
+        data: wf,
+        filePath: (wf.name as string) || (wf.id as string) || 'unknown',
+      }));
+      const scanResult = scanWorkflows(workflows);
+
+      // Generate HTML dashboard
+      const html = generateDashboardHtml(scanResult, password || undefined);
+
+      // Serve HTML directly
+      res.setHeader('Content-Type', 'text/html; charset=utf-8');
+      res.status(200).end(html);
+    } catch (err) {
+      res.setHeader('Content-Type', 'text/html; charset=utf-8');
+      res.status(500).end(
+        `<!DOCTYPE html><html><body style="font-family:sans-serif;padding:40px">` +
+        `<h1>Trusera Dashboard Error</h1>` +
+        `<pre style="color:red">${(err as Error).message}</pre>` +
+        `</body></html>`,
+      );
+    }
+
     return {
+      noWebhookResponse: true,
       workflowData: [
-        [
-          {
-            json: {
-              headers: req.headers as Record<string, unknown>,
-              params: req.query as Record<string, unknown>,
-              timestamp: new Date().toISOString(),
-            },
-          },
-        ],
+        [{ json: { served: true, timestamp: new Date().toISOString() } }],
       ],
     };
   }
diff --git a/n8n-node/package.json b/n8n-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-trusera",
-  "version": "0.3.2",
+  "version": "0.4.2",
   "description": "n8n community node to scan workflows for AI security risks using Trusera AI-BOM",
   "keywords": [
     "n8n-community-node-package",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "n8n-nodes-trusera",`
`3`		`- "version": "0.3.2",`
	`3`	`+ "version": "0.4.2",`
`4`	`4`	`"description": "n8n community node to scan workflows for AI security risks using Trusera AI-BOM",`
`5`	`5`	`"keywords": [`
`6`	`6`	`"n8n-community-node-package",`