n8n #1 n8n email, hooks 자동 로그인

const { dirname, resolve } = require('path')
const { issueCookie } = require(resolve(dirname(require.resolve('n8n')), 'auth/jwt'))
const ignoreAuthRegexp = /^\/(assets|healthz|webhook|rest\/oauth2-credential)/

module.exports = {
  n8n: {
    ready: [
      async function ({ app }, config) {
        const router = app._router || app.router;
        const routerStack = router?.stack || app.stack;
        const cookieParserIndex = routerStack.findIndex(layer => 
          layer.handle?.name === 'cookieParser'
        );
        if (cookieParserIndex === -1) {
          const middlewareList = routerStack.map(l => l.handle?.name || l.name);
          throw new Error('cookieParser 미들웨어 누락');
        }
        const authMiddleware = async (req, res, next) => {
          try {
            if (ignoreAuthRegexp.test(req.path)) return next();
            if (!config.get('userManagement.isInstanceOwnerSetUp', false)) return next();
            if (req.cookies?.['n8n-auth']) return next();
            if (!process.env.N8N_FORWARD_AUTH_HEADER) return next();

            const email = req.headers[process.env.N8N_FORWARD_AUTH_HEADER.toLowerCase()];
            if (!email) return next();

            const user = await this.dbCollections.User.findOneBy({ email });
            if (!user) {
              console.error(`사용자 미등록: ${email}`);
              return res.status(401).json({ 
                code: 'AUTH_USER_NOT_FOUND',
                message: 'Authelia 인증 성공했으나 n8n 사용자 없음'
              });
            }
            issueCookie(res, user);
            next();
          } catch (error) {
            console.error('인증 미들웨어 오류:', error);
            next(error);
          }
        };
        router.insertMiddleware = router.insertMiddleware || function(index,middleware){
          routerStack.splice(index,0,{
            handle: middleware,
            name: middleware.name || 'anonymous',
            params: {},
            path: '/',
            keys: [],
            regexp: /^\/.*$/,
            match: function(path) {
              return this.regexp.test(path);
            },
            handleRequest: function(req,res,next) {
              this.handle(req,res,next);
            }
          })
        }

        router.insertMiddleware(cookieParserIndex + 1,authMiddleware)
      },
    ],
  },
}

containers:
- name: n8n
  image: n8nio/n8n:latest
  ports:
  - containerPort: 5678
  env:
  - name: EXTERNAL_HOOK_FILES
    value: "/home/node/.n8n/hooks.js"
  - name: N8N_FORWARD_AUTH_HEADER
    value: "Remote-Email"
  - name: N8N_EXPRESS_TRUST_PROXY
    value: "true"
  - name: N8N_PROXY_HOPS
    value: "2"
    value: "true"
  - name: N8N_SESSION_COOKIE_SAME_SITE
    value: "Lax"
    # ...
  volumeMounts:
  - name: hooks
    mountPath: /home/node/.n8n/hooks.js
    subPath: hooks.js
  - name: data
    mountPath: /home/node/.n8n
volumes:
- name: hooks
  configMap:
    name: n8n-hooks
- name: data
  persistentVolumeClaim:
    claimName: n8n-data-pvc

metadata:
  name: n8n
  namespace: n8n
  annotations:
    nginx.ingress.kubernetes.io/proxy-buffering: "off"
    kubernetes.io/tls-acme: "true"
    nginx.ingress.kubernetes.io/auth-url: "http://authelia.authelia.svc.cluster.local:9091/api/verify"
    nginx.ingress.kubernetes.io/auth-signin: "https://authelia.dogring.kr/"
    nginx.ingress.kubernetes.io/proxy-set-headers: |
      'X-Real-IP $remote_addr'
      'X-Forwarded-For $proxy_add_x_forwarded_for'
      'X-Forwarded-Proto $scheme'
      'X-Forwarded-Host $host'
    nginx.ingress.kubernetes.io/auth-response-headers: "Remote-Email"