Author: DigitalOcean - Bewertung: 3x - Views:14
PROMO CODE 🚀
The first 50 people to redeem the promo code DOCODEYT will get $20 in free credits!
https://cloud.digitalocean.com/registrations/new?utm_source=youtube&utm_medium=organic_video&utm_campaign=digitalocean&utm_content=mvnA-kwO-YA
Here's how you can redeem it: https://docs.digitalocean.com/platform/billing/promo-codes/
Are magic links *actually* secure? In this video, we build a production-ready magic link authentication workflow in n8n. You'll learn how to securely pass a token in a URL, validate it against a Postgres database, and use a separate, secured webhook to resume your main workflow. This is a critical pattern for any app that needs to verify a user's identity.
This is a deep dive into secure automation design. We'll cover the 3-point security model (HTTPS, Ephemeral, Single-Use) that makes URL tokens safe, and show you how to build a two-workflow system to manage the authentication process. You'll also learn how to secure your "resume" webhook with header authentication—a pro-level technique to ensure your main workflow can't be spoofed.
👇 WHAT YOU'LL LEARN IN THIS VIDEO 👇
🤔 Are URL Tokens Secure? The 3-point model that makes it safe.
🏗️ Two-Workflow Architecture: Using a main flow (Wait node) and a sub-workflow (Webhook trigger).
🔎 Postgres Token Validation: How to query your database for the incoming token.
🚦 The 3-Part Validation Check: Use an IF node to check: 1. Token exists, 2. Not expired, 3. Not used.
🚫 How to Consume a Token: Update the DB to mark the token as 'used' and prevent replay attacks.
▶️ Resuming a Paused Workflow: Using the Wait node and a dynamic resume URL.
🔒 **CRITICAL:** How to Secure Your Resume Webhook with Header Auth.
🔁 Full End-to-End Demo: A complete test of the entire user click-to-authentication flow.
🔗 Get the full lesson's code from GitHub: https://github.com/do-community/n8n-crash-course/tree/main/lessons/lesson_9
►► New to n8n? Watch our "Getting Started" video first: https://www.youtube.com/watch?v=uCe0IzejSBU
►► FULL N8N CRASH COURSE PLAYLIST: https://www.youtube.com/watch?v=BLG9kpUCnww&list=PLseEp7p6EwibcvBe7cOWqDmN99zAY_FL2
🚀 Join the Developer Cloud (use promo code DOCODEYT for $20 in credits for the first 50 devs who join):
https://cloud.digitalocean.com/registrations/new?utm_source=youtube&utm_medium=organic_video&utm_campaign=digitalocean&utm_content=mvnA-kwO-YA
// STAY CONNECTED
🌏 Follow our blog for the latest updates: https://www.digitalocean.com/blog
🦈 Join our Developer Community on Discord: https://discord.com/invite/digitalocean
🐥 Follow us on X/Twitter: https://x.com/digitalocean
👩💻 We're Hiring! See open roles: http://grnh.se/aicoph1
--------------------
TIMESTAMPS
0:00 - How to Build Secure Magic Links in n8n
0:34 - Are Magic Links in URLs Secure?
1:13 - Create trigger & validate token
2:10 - 3-point validation
3:13 - Consume the token
4:00 - Resume the main workflow
4:18 - CRITICAL: Secure your resume webhook
5:46 - Demo: Authentication test
7:22 - n8n Crash Course: Full Series Recap
SOCIAL SHARE CARD GENERATOR