n8n-nodes-secure-form-login

An n8n community node + credential to submit a website login form while keeping the username and password out of the workflow. The credentials are stored in n8n's encrypted credential store and injected into the request only at execution time — they never appear in the node or in the exported workflow JSON.

This is a generalised version of the standard HTTP Request node, tailored to login forms: the field names for the username and password are configurable, so it works with sites that use email/pass, login/pwd, etc.

What's included

• Credential Form Login API — securely stores the Username and Password.
• Node Form Login HTTP Request — posts the credentials (plus any extra static fields and headers) to a login URL and returns the response.

Node parameters

| Parameter | Notes | | --- | --- | | Method | POST (default) or GET | | URL | The form's action URL, e.g. https://www.example.com/login | | Body Content Type | Form-Urlencoded (default, normal HTML forms) or JSON | | Username Field Name | Defaults to username; set to email, login, … as needed | | Password Field Name | Defaults to password | | Extra Body Fields | Static fields like submit=Login or a CSRF token | | Extra Headers | e.g. User-Agent, Origin, Referer | | Options › Follow Redirects | On by default | | Options › Ignore SSL Issues | For self-signed certs | | Options › Include Response Headers and Status | Returns Set-Cookie headers — enable to capture the login session cookie | | Options › Never Error | Treat any status code as success |

Example

For a form that curl would submit as curl --data-raw 'username=...&password=...&submit=Login' https://www.example.com/login:

• URL: https://www.example.com/login
• Username Field Name: username
• Password Field Name: password
• Extra Body Field: submit = Login
• (optional) Extra Header: User-Agent = Mozilla/5.0 …
• Enable Include Response Headers and Status to read the session cookie from Set-Cookie.

A successful login typically returns a 3xx redirect with a Set-Cookie session cookie (e.g. PHPSESSID); enable Include Response Headers and Status (and disable Follow Redirects) to capture it.

Build & test locally

cd /Users/werk/n8n/custom_nodes/form_login
npm install
npm run dev          # starts a local n8n with this node hot-linked
# or, to build + link manually:
npm run build
npm link
cd ~/.n8n/custom && npm link n8n-nodes-secure-form-login   # then restart n8n

Then in n8n: add the Form Login API credential, drop in the Form Login HTTP Request node, set the URL and field names, and run.

Security notes

• The password is a password-type field and is encrypted by n8n's credential store.
• Do not commit real secrets.
• Because the secrets live in a credential, the same login can be reused across workflows without ever pasting the password into a node.