feat: also send credentials when returning workflow via API (#4458) (no-changelog)

packages/cli/src/credentials/credentials.service.ee.ts

@@ -1,7 +1,7 @@
 /* eslint-disable import/no-cycle */
 /* eslint-disable no-param-reassign */
-import { DeleteResult, EntityManager, In, Not } from 'typeorm';
-import { Db } from '..';
+import { DeleteResult, EntityManager, FindManyOptions, In, Not } from 'typeorm';
+import { Db, ICredentialsDb } from '..';
 import { RoleService } from '../role/role.service';
 import { CredentialsService } from './credentials.service';
 

packages/cli/src/credentials/credentials.service.ts

@@ -7,7 +7,7 @@ import {
 	INodeCredentialTestResult,
 	LoggerProxy,
 } from 'n8n-workflow';
-import { FindOneOptions, In } from 'typeorm';
+import { FindManyOptions, FindOneOptions, In } from 'typeorm';
 
 import {
 	createCredentialsFromCredentialsEntity,
@@ -71,6 +71,10 @@ export class CredentialsService {
 		});
 	}
 
+	static async getMany(filter: FindManyOptions<ICredentialsDb>): Promise<ICredentialsDb[]> {
+		return Db.collections.Credentials.find(filter);
+	}
+
 	/**
 	 * Retrieve the sharing that matches a user and a credential.
 	 */

packages/cli/src/workflows/workflows.controller.ee.ts

@@ -89,9 +89,11 @@ EEWorkflowController.get(
 		if (!userSharing && req.user.globalRole.name !== 'owner') {
 			throw new ResponseHelper.ResponseError(`Forbidden.`, undefined, 403);
 		}
-		// @TODO: also return the credentials used by the workflow
 
-		return EEWorkflows.addOwnerAndSharings(workflow);
+		return EEWorkflows.addCredentialsToWorkflow(
+			EEWorkflows.addOwnerAndSharings(workflow),
+			req.user,
+		);
 	}),
 );
 

packages/cli/src/workflows/workflows.services.ee.ts

@@ -6,7 +6,7 @@ import { WorkflowEntity } from '../databases/entities/WorkflowEntity';
 import { RoleService } from '../role/role.service';
 import { UserService } from '../user/user.service';
 import { WorkflowsService } from './workflows.services';
-import { WorkflowWithSharings } from './workflows.types';
+import type { WorkflowWithSharingsAndCredentials } from './workflows.types';
 import { EECredentialsService as EECredentials } from '../credentials/credentials.service.ee';
 
 export class EEWorkflowsService extends WorkflowsService {
@@ -74,10 +74,11 @@ export class EEWorkflowsService extends WorkflowsService {
 	}
 
 	static addOwnerAndSharings(
-		workflow: WorkflowEntity & WorkflowWithSharings,
-	): WorkflowEntity & WorkflowWithSharings {
+		workflow: WorkflowWithSharingsAndCredentials,
+	): WorkflowWithSharingsAndCredentials {
 		workflow.ownedBy = null;
 		workflow.sharedWith = [];
+		workflow.usedCredentials = [];
 
 		workflow.shared?.forEach(({ user, role }) => {
 			const { id, email, firstName, lastName } = user;
@@ -90,12 +91,49 @@ export class EEWorkflowsService extends WorkflowsService {
 			workflow.sharedWith?.push({ id, email, firstName, lastName });
 		});
 
-		// @ts-ignore
 		delete workflow.shared;
 
 		return workflow;
 	}
 
+	static async addCredentialsToWorkflow(
+		workflow: WorkflowWithSharingsAndCredentials,
+		currentUser: User,
+	): Promise<WorkflowWithSharingsAndCredentials> {
+		workflow.usedCredentials = [];
+		const userCredentials = await EECredentials.getAll(currentUser);
+		const credentialIdsUsedByWorkflow = new Set<number>();
+		workflow.nodes.forEach((node) => {
+			if (!node.credentials) {
+				return;
+			}
+			Object.keys(node.credentials).forEach((credentialType) => {
+				const credential = node.credentials?.[credentialType];
+				if (!credential?.id) {
+					return;
+				}
+				const credentialId = parseInt(credential.id, 10);
+				credentialIdsUsedByWorkflow.add(credentialId);
+			});
+		});
+		const workflowCredentials = await EECredentials.getMany({
+			where: {
+				id: In(Array.from(credentialIdsUsedByWorkflow)),
+			},
+		});
+		const userCredentialIds = userCredentials.map((credential) => credential.id.toString());
+		workflowCredentials.forEach((credential) => {
+			const credentialId = credential.id.toString();
+			workflow.usedCredentials?.push({
+				id: credential.id.toString(),
+				name: credential.name,
+				currentUserHasAccess: userCredentialIds.includes(credentialId),
+			});
+		});
+
+		return workflow;
+	}
+
 	static validateCredentialPermissionsToUser(
 		workflow: WorkflowEntity,
 		allowedCredentials: ICredentialsDb[],

packages/cli/src/workflows/workflows.types.ts

@@ -1,7 +1,16 @@
 import type { IUser } from 'n8n-workflow';
+import { SharedWorkflow } from '../databases/entities/SharedWorkflow';
 import { WorkflowEntity } from '../databases/entities/WorkflowEntity';
 
-export interface WorkflowWithSharings extends WorkflowEntity {
+export interface WorkflowWithSharingsAndCredentials extends Omit<WorkflowEntity, 'shared'> {
 	ownedBy?: IUser | null;
 	sharedWith?: IUser[];
+	usedCredentials?: CredentialUsedByWorkflow[];
+	shared?: SharedWorkflow[];
+}
+
+export interface CredentialUsedByWorkflow {
+	id: string;
+	name: string;
+	currentUserHasAccess: boolean;
 }