Automation library · Data collection

Check JWT security of API endpoints with HTTP

Started by a clock, and works across Google Sheets. 22 steps, 1 branch, 1 loop or waits: large, and worth reading before you trust it with anything live.

Large

22 stepsLarge: read it before trusting it with anything live
1Branch: places the flow splits
1Loop or waits
1Service it connects to

The flow

Starts it 2Logic 14Service 6

The steps in the order they run, from what starts it.

  1. 1When Triggered ManuallyManual triggerStarts it
  2. 2When Daily at 08:00Schedule triggerStarts it
  3. 3Set Sheet VariablesSetLogic
  4. 4Read from SheetsGoogle SheetsService
  5. 5Filter Active EndpointsFilterLogic
  6. 6Loop Over Endpoint BatchesSplit In BatchesLogic
  7. 7Decode JWT and Build TokensCodeLogic
  8. 8Validate Token via HTTPHttp RequestService
  9. 9Extract Valid Token StatusCodeLogic
  10. 10Check Valid Token PassIfLogic
  11. 11HTTP Request No AuthHttp RequestService
  12. 12Tampered Token HTTP RequestHttp RequestService
  13. 13Algorithm None HTTP RequestHttp RequestService
  14. 14Merge Valid and No Auth ResultsMergeLogic
  15. 15Handle Failed Token ValidationCodeLogic
  16. 16Extract No Auth StatusCodeLogic
  17. 17Extract Tampered StatusCodeLogic
  18. 18Extract Alg None StatusCodeLogic
  19. 19Merge All JWT ResultsMergeLogic
  20. 20Append to SheetsGoogle SheetsService
  21. 21Merge Tampered and Alg ResultsMergeLogic
  22. 22Analyze JWT ResultsCodeLogic

How it's built

Starts on
A clock
Steps
22, with 1 branch, 1 loop or waits
Size
Large: read it before trusting it with anything live
Connects to
Google Sheets
Model
None. This is plumbing, not judgement

Questions

What does it need to run?

An n8n account, plus your own Google Sheets account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Take your time. At 22 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 22 steps before you point it at anything that matters.