{
"name": "PhishSim \u2013 Send Campaign Emails",
"nodes": [
{
"parameters": {
"httpMethod": "POST",
"path": "trigger-send",
"responseMode": "responseNode",
"options": {}
},
"id": "webhook-send",
"name": "Webhook \u2013 Receive Send Job",
"type": "n8n-nodes-base.webhook",
"typeVersion": 2,
"position": [
240,
300
]
},
{
"parameters": {
"jsCode": "// Validate shared secret\nconst secret = $input.first().json.headers?.['x-phishsim-secret'];\nconst expected = $env['PHISHSIM_SECRET'];\nif (expected && secret !== expected) {\n throw new Error('Unauthorized: bad secret');\n}\n\nconst body = $input.first().json.body;\n\nif (!body.template || !body.targets || !Array.isArray(body.targets)) {\n throw new Error('Missing template or targets array');\n}\n\nreturn body.targets.map(target => ({\n json: {\n org_id: body.org_id,\n campaign_id: body.campaign_id,\n send_run_id: body.send_run_id,\n target_id: target.id,\n to_email: target.email,\n subject: body.template.subject,\n body_html: body.template.body_html,\n body_text: body.template.body_text,\n open_url: target.tracking.open_url,\n click_url: target.tracking.click_url,\n landing_url: target.tracking.landing_url,\n token: target.tracking.token,\n }\n}));"
},
"id": "split-targets",
"name": "Split Into Individual Emails",
"type": "n8n-nodes-base.code",
"typeVersion": 2,
"position": [
460,
300
]
},
{
"parameters": {
"jsCode": "// Process ALL items (one per target)\nreturn $input.all().map(inputItem => {\n const item = inputItem.json;\n\n let html = item.body_html || '';\n let text = item.body_text || '';\n\n // Fallback: if body_html is empty, build from body_text\n if (!html.trim()) {\n html = `${text}`;\n }\n\n // Replace {{CLICK_URL}} placeholder (from AI-generated HTML)\n const hasClickPlaceholder = html.includes('{{CLICK_URL}}') || html.includes('%7B%7BCLICK_URL%7D%7D');\n html = html.replace(/\\{\\{CLICK_URL\\}\\}/g, item.click_url);\n\n // Replace {{LANDING_URL}} placeholder\n html = html.replace(/\\{\\{LANDING_URL\\}\\}/g, item.landing_url);\n text = text.replace(/\\{\\{LANDING_URL\\}\\}/g, item.landing_url);\n\n // If no {{CLICK_URL}} placeholder existed, inject a fallback CTA button\n const ctaButton = ``;\n\n // Inject fallback CTA before \n const inject = (hasClickPlaceholder ? '' : ctaButton);\n\n if (html.includes('')) {\n html = html.replace('', inject + '');\n } else {\n html = html + inject;\n }\n\n return { json: { ...item, body_html: html, body_text: text } };\n});"
},
"id": "inject-tracking",
"name": "Inject Tracking Links",
"type": "n8n-nodes-base.code",
"typeVersion": 2,
"position": [
680,
300
]
},
{
"parameters": {
"fromEmail": "={{ $env['SMTP_FROM_EMAIL'] || 'phishsim@localhost' }}",
"toEmail": "={{ $json.to_email }}",
"subject": "={{ $json.subject }}",
"html": "={{ $json.body_html }}",
"text": "={{ $json.body_text }}",
"options": {
"allowUnauthorizedCerts": true
}
},
"id": "send-email",
"name": "Send Email via SMTP",
"type": "n8n-nodes-base.emailSend",
"typeVersion": 1,
"position": [
900,
200
],
"continueOnFail": true,
"credentials": {
"smtp": {
"name": "