Validate Seatable Webhooks with HMAC SHA256 Authentication
工作流概述
这是一个包含7个节点的中等工作流,主要用于自动化处理各种任务。
工作流源代码
{
"id": "W1ugowsjzt1SC4hH",
"meta": {
"instanceId": "04ab549d8bbb435ec33b81e4e29965c46cf6f0f9e7afe631018b5e34c8eead58"
},
"name": "Validate Seatable Webhooks with HMAC SHA256 Authentication",
"tags": [],
"nodes": [
{
"id": "ec4bdb4f-3c3e-4405-af80-2ad7ab3d57fc",
"name": "200",
"type": "n8n-nodes-base.respondToWebhook",
"position": [
420,
-20
],
"parameters": {
"options": {
"responseCode": 200
},
"respondWith": "noData"
},
"typeVersion": 1
},
{
"id": "1b6c9f8c-1b5b-499d-abb5-bb1059b73ce7",
"name": "403",
"type": "n8n-nodes-base.respondToWebhook",
"position": [
420,
180
],
"parameters": {
"options": {
"responseCode": 403
},
"respondWith": "noData"
},
"typeVersion": 1
},
{
"id": "e3976bf3-60e0-4c1c-bfdb-22ad336760a5",
"name": "Calculate sha256",
"type": "n8n-nodes-base.crypto",
"position": [
-20,
-20
],
"parameters": {
"type": "SHA256",
"action": "hmac",
"binaryData": true,
"dataPropertyName": "seatable-signature"
},
"typeVersion": 1
},
{
"id": "5e74ba50-e0fe-41e0-9b84-7078f1d150a3",
"name": "Seatable Webhook",
"type": "n8n-nodes-base.webhook",
"position": [
-240,
-20
],
"webhookId": "8c9d8c0f-d5ea-469d-afc9-d4e8a352f1a4",
"parameters": {
"path": "s0m3-d4nd0m-1d",
"options": {
"rawBody": true
},
"httpMethod": "POST",
"responseMode": "responseNode"
},
"typeVersion": 1
},
{
"id": "dbfcc59f-5411-4d99-8cde-26ae91cdd6af",
"name": "Add nodes for processing",
"type": "n8n-nodes-base.noOp",
"position": [
420,
-220
],
"parameters": {},
"typeVersion": 1
},
{
"id": "a508534f-abb4-4455-b47a-1aaf56ce1124",
"name": "hash matches",
"type": "n8n-nodes-base.if",
"position": [
200,
-20
],
"parameters": {
"conditions": {
"string": [
{
"value1": "={{ String($json['seatable-signature']) }}",
"value2": "={{ String($json.headers['x-seatable-signature'].replace(\"sha256=\", \"\")) }}"
}
]
}
},
"typeVersion": 1
},
{
"id": "1495d5c1-3467-4639-a32d-51a6497aed51",
"name": "Sticky Note",
"type": "n8n-nodes-base.stickyNote",
"position": [
-400,
-660
],
"parameters": {
"width": 720,
"height": 580,
"content": "## 📌 Validate Seatable Webhooks with HMAC SHA256 Authentication
This mini workflow is designed to **securely validate incoming Seatable webhooks** using HMAC SHA256 signature verification.
### 🔐 What it does:
- Listens for incoming Seatable webhook requests.
- Calculates a SHA256 HMAC hash of the raw request body using your shared secret.
- Compares the computed hash with the `x-seatable-signature` header (after removing the `sha256=` prefix).
- If the hashes match: responds with **200 OK** and forwards the request to subsequent nodes.
- If the hashes don’t match: responds with **403 Forbidden**.
### ⚠️ Important Notes:
This workflow is provided as a **template** and is not intended to work standalone. **Please duplicate it** and integrate it with your custom logic at the \"Add nodes for processing\" node.
Configuration steps:
- Set your **secret key** in the “Calculate sha256” crypto node (replace the placeholder).
- Adjust the webhook path to suit your environment (or set it to \"manual\" for testing).
- Connect your actual logic after the verification step.
"
},
"typeVersion": 1
}
],
"active": true,
"pinData": {},
"settings": {
"executionOrder": "v1"
},
"versionId": "8da47cde-25ce-459e-a74d-91ba0d5173e3",
"connections": {
"hash matches": {
"main": [
[
{
"node": "200",
"type": "main",
"index": 0
},
{
"node": "Add nodes for processing",
"type": "main",
"index": 0
}
],
[
{
"node": "403",
"type": "main",
"index": 0
}
]
]
},
"Calculate sha256": {
"main": [
[
{
"node": "hash matches",
"type": "main",
"index": 0
}
]
]
},
"Seatable Webhook": {
"main": [
[
{
"node": "Calculate sha256",
"type": "main",
"index": 0
}
]
]
}
}
}
功能特点
- 自动检测新邮件
- AI智能内容分析
- 自定义分类规则
- 批量处理能力
- 详细的处理日志
技术分析
节点类型及作用
- Respondtowebhook
- Crypto
- Webhook
- Noop
- If
复杂度评估
配置难度:
维护难度:
扩展性:
实施指南
前置条件
- 有效的Gmail账户
- n8n平台访问权限
- Google API凭证
- AI分类服务订阅
配置步骤
- 在n8n中导入工作流JSON文件
- 配置Gmail节点的认证信息
- 设置AI分类器的API密钥
- 自定义分类规则和标签映射
- 测试工作流执行
- 配置定时触发器(可选)
关键参数
| 参数名称 | 默认值 | 说明 |
|---|---|---|
| maxEmails | 50 | 单次处理的最大邮件数量 |
| confidenceThreshold | 0.8 | 分类置信度阈值 |
| autoLabel | true | 是否自动添加标签 |
最佳实践
优化建议
- 定期更新AI分类模型以提高准确性
- 根据邮件量调整处理批次大小
- 设置合理的分类置信度阈值
- 定期清理过期的分类规则
安全注意事项
- 妥善保管API密钥和认证信息
- 限制工作流的访问权限
- 定期审查处理日志
- 启用双因素认证保护Gmail账户
性能优化
- 使用增量处理减少重复工作
- 缓存频繁访问的数据
- 并行处理多个邮件分类任务
- 监控系统资源使用情况
故障排除
常见问题
邮件未被正确分类
检查AI分类器的置信度阈值设置,适当降低阈值或更新训练数据。
Gmail认证失败
确认Google API凭证有效且具有正确的权限范围,重新进行OAuth授权。
调试技巧
- 启用详细日志记录查看每个步骤的执行情况
- 使用测试邮件验证分类逻辑
- 检查网络连接和API服务状态
- 逐步执行工作流定位问题节点
错误处理
工作流包含以下错误处理机制:
- 网络超时自动重试(最多3次)
- API错误记录和告警
- 处理失败邮件的隔离机制
- 异常情况下的回滚操作