czlonkowski 35e4cf0da4 fix: remove hardcoded credentials and add security documentation ...

- Remove hardcoded API key and URL from debug-n8n-auth.ts
- Require environment variables with proper validation
- Add comprehensive SECURITY.md with best practices
- Address security concerns raised in issue #18

The SecureKeyGuard alert was a false positive (mistaking "validate_workflow"
for "VAULT_TOKEN"), but the review uncovered actual hardcoded credentials
that have now been removed.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-07-06 17:46:26 +02:00

..

config

fix: resolve tool count discrepancy in Docker environments (#6)

2025-07-01 10:41:09 +02:00

database

fix: webhook and 4 other nodes incorrectly marked as non-triggers

2025-07-06 17:01:05 +02:00

loaders

chore: update n8n to v1.100.1

2025-07-01 08:54:35 +02:00

mappers

fix: add missing AI/LangChain root-nodes documentation path

2025-06-16 17:45:16 +02:00

mcp

fix: webhook and 4 other nodes incorrectly marked as non-triggers

2025-07-06 17:01:05 +02:00

n8n

feat: implement universal Node.js compatibility with automatic database adapter fallback

2025-06-12 23:51:47 +02:00

parsers

fix: webhook and 4 other nodes incorrectly marked as non-triggers

2025-07-06 11:51:22 +02:00

scripts

fix: remove hardcoded credentials and add security documentation

2025-07-06 17:46:26 +02:00

services

fix: remove unused nodes-v2.db and update database paths

2025-07-06 12:35:31 +02:00

templates

feat: add template sanitization to remove API tokens from workflow templates

2025-07-06 13:11:38 +02:00

tests

fix: implement Single-Session architecture to resolve MCP stream errors

2025-06-14 15:02:49 +02:00

types

refactor: clean up file names and fix version management

2025-06-29 17:43:29 +02:00

utils

feat: add template sanitization to remove API tokens from workflow templates

2025-07-06 13:11:38 +02:00

http-server-single-session.ts

refactor: clean up file names and fix version management

2025-06-29 17:43:29 +02:00

http-server.ts

chore: bump version to 2.7.2 and update HTTP deployment documentation

2025-07-01 11:50:04 +02:00

index.ts

refactor: clean up file names and fix version management

2025-06-29 17:43:29 +02:00

mcp-engine.ts

fix: complete solution for MCP HTTP server stream errors (v2.3.2)

2025-06-14 17:19:42 +02:00