{ "name": "WF5 \u2014 SecureVault Password Reset OTP", "nodes": [ { "parameters": { "httpMethod": "POST", "path": "securevault/send-otp", "responseMode": "responseNode", "options": {} }, "id": "webhook-otp", "name": "OTP Webhook", "type": "n8n-nodes-base.webhook", "typeVersion": 2, "position": [ 220, 300 ] }, { "parameters": { "conditions": { "combinator": "and", "conditions": [ { "leftValue": "={{ $json.headers['x-api-key'] }}", "rightValue": "={{ $env.SV_API_KEY }}", "operator": { "type": "string", "operation": "equals" } } ] } }, "id": "api-key-otp", "name": "Validate API Key", "type": "n8n-nodes-base.if", "typeVersion": 2, "position": [ 440, 300 ] }, { "parameters": { "respondWith": "json", "responseBody": "={ \"status\": \"error\", \"message\": \"Unauthorized\" }", "options": { "responseCode": 401 } }, "id": "reject-otp", "name": "Reject", "type": "n8n-nodes-base.respondToWebhook", "typeVersion": 1, "position": [ 600, 500 ] }, { "parameters": { "jsCode": "const body = $input.first().json.body;\nconst { email, userId, name, otp, expiresIn } = body;\n\nif (!email || !otp) {\n throw new Error('Missing required: email, otp');\n}\n\n// Validate email format\nif (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) {\n throw new Error('Invalid email format');\n}\n\n// Validate OTP is 6 digits\nif (!/^\\d{6}$/.test(otp)) {\n throw new Error('OTP must be 6 digits');\n}\n\nreturn [{\n json: {\n email: email.toLowerCase().trim(),\n userId: userId || 'unknown',\n name: name || 'User',\n otp,\n expiresIn: expiresIn || '5 minutes',\n timestamp: new Date().toISOString(),\n executionId: $execution.id\n }\n}];" }, "id": "validate-otp", "name": "Validate OTP Request", "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 660, 300 ] }, { "parameters": { "operation": "executeQuery", "query": "INSERT INTO sv_otp_log (user_id, email, action, ip_address, expires_at, created_at)\nVALUES ($1, $2, 'requested', $3, NOW() + INTERVAL '5 minutes', NOW());", "options": { "queryReplacement": "={{ [$json.userId, $json.email, 'n8n-server'] }}" } }, "id": "rds-otp-log", "name": "RDS: Log OTP Request", "type": "n8n-nodes-base.postgres", "typeVersion": 2.5, "position": [ 900, 200 ], "credentials": { "postgres": { "name": "" } } }, { "parameters": { "sendTo": "={{ $json.email }}", "subject": "\ud83d\udd10 SecureVault \u2014 Your Reset Code: {{ $json.otp }}", "emailType": "html", "message": "

\ud83d\udd10 SecureVault

Password Reset

Hello {{ $json.name }},

You requested a password reset. Use the code below to verify your identity:

{{ $json.otp }}

\u23f1 Expires in {{ $json.expiresIn }}. Never share this code with anyone.

Maximum 3 verification attempts allowed.

If you didn't request this, your account is safe \u2014 just ignore this email.

\ud83d\udd12 Protected by AES-256 encryption | SecureVault

", "options": { "replyTo": "noreply@securevault.io" } }, "id": "gmail-otp", "name": "Gmail: Send OTP Email", "type": "n8n-nodes-base.gmail", "typeVersion": 2.1, "position": [ 900, 400 ], "credentials": { "gmailOAuth2": { "name": "" } } }, { "parameters": { "documentId": { "__rl": true, "mode": "list", "value": "" }, "sheetName": { "__rl": true, "value": "OTP Requests" }, "columns": { "mappingMode": "defineBelow", "value": { "Timestamp": "={{ $json.timestamp }}", "Email": "={{ $json.email }}", "UserId": "={{ $json.userId }}", "Status": "sent", "ExecutionId": "={{ $json.executionId }}" } }, "options": {} }, "id": "sheets-otp-log", "name": "Sheets: Log OTP Request", "type": "n8n-nodes-base.googleSheets", "typeVersion": 4.5, "position": [ 900, 600 ], "credentials": { "googleSheetsOAuth2Api": { "name": "" } } }, { "parameters": { "respondWith": "json", "responseBody": "={ \"status\": \"success\", \"message\": \"OTP sent successfully.\" }", "options": { "responseCode": 200 } }, "id": "respond-otp", "name": "Respond: OTP Sent", "type": "n8n-nodes-base.respondToWebhook", "typeVersion": 1, "position": [ 1160, 400 ] } ], "connections": { "OTP Webhook": { "main": [ [ { "node": "Validate API Key", "type": "main", "index": 0 } ] ] }, "Validate API Key": { "main": [ [ { "node": "Validate OTP Request", "type": "main", "index": 0 } ], [ { "node": "Reject", "type": "main", "index": 0 } ] ] }, "Validate OTP Request": { "main": [ [ { "node": "RDS: Log OTP Request", "type": "main", "index": 0 }, { "node": "Gmail: Send OTP Email", "type": "main", "index": 0 }, { "node": "Sheets: Log OTP Request", "type": "main", "index": 0 } ] ] }, "Gmail: Send OTP Email": { "main": [ [ { "node": "Respond: OTP Sent", "type": "main", "index": 0 } ] ] } }, "settings": { "executionOrder": "v1", "saveManualExecutions": true, "errorWorkflow": "WF8-error-monitor" }, "tags": [ { "name": "SecureVault" }, { "name": "OTP" }, { "name": "Security" } ], "triggerCount": 1 }