Skip to content

Support legacy auth env config in HTTP server #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Tejasvp24 wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Support legacy auth env config in HTTP server #691

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a519a79
docs: document auth env compatibility flags
Tejasvp24 Apr 1, 2026
8185572
fix: support legacy auth env config in HTTP server
Tejasvp24 Apr 1, 2026
4758e45
test: cover auth env compatibility aliases
Tejasvp24 Apr 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion .env.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77,11 +77,17 @@ AUTH_TOKEN=your-secure-token-here

# Rate Limiting Configuration
# Protects authentication endpoint from brute force attacks
# Set RATE_LIMIT_ENABLED=false to disable auth rate limiting entirely
# Window: Time period in milliseconds (default: 900000 = 15 minutes)
# Max: Maximum authentication attempts per IP within window (default: 20)
# Legacy alias supported: AUTH_MAX_ATTEMPTS
# AUTH_RATE_LIMIT_WINDOW=900000
# AUTH_RATE_LIMIT_MAX=20

# Authentication Configuration
# Set AUTH_ENABLED=false to disable bearer-token auth for HTTP mode
# AUTH_ENABLED=true

# SSRF Protection Mode
# Prevents webhooks from accessing internal networks and cloud metadata
#
Expand Down Expand Up @@ -217,4 +223,4 @@ ENABLE_MULTI_TENANT=false
# Test Configuration
N8N_TEST_CLEANUP_ENABLED=true # Enable automatic cleanup of test workflows
N8N_TEST_TAG=mcp-integration-test # Tag applied to all test workflows
N8N_TEST_NAME_PREFIX=[MCP-TEST] # Name prefix for test workflows
N8N_TEST_NAME_PREFIX=[MCP-TEST] # Name prefix for test workflows
Loading