Check JWT security of API endpoints with HTTP requests and Google Sheets

by Arminas B ✓ · 23 views · created 2026-06-15 · SecOps, AI Summarization

What this workflow does

This workflow has 22 nodes and runs manually, when you click “Execute workflow” (plus 1 other trigger). Along the way it connects Google Sheets.

How it runs

Trigger: Manually, when you click “Execute workflow” (plus 1 other trigger).

1. Set Sheet Variables (Edit Fields (Set)): sets 3 fields: sheet_id, endpoints_sheet, results_sheet
2. Read from Sheets (Google Sheets): uses Google Sheets
3. Filter: keeps only the items that match a condition
4. Loop Over Endpoint Batches (Loop Over Items (Split in Batches)): loops over the items in batches
5. Decode JWT and Build Tokens (Code): runs custom JavaScript code
6. Validate Token via HTTP (HTTP Request): calls an HTTP API
7. Extract Valid Token Status (Code): runs custom JavaScript code
8. Check Valid Token Pass (If): checks a condition and branches into true / false
9. HTTP Request: calls an HTTP API
10. Tampered Token HTTP Request (HTTP Request): calls an HTTP API

…plus 10 more steps. See the full node list below.

Services it uses

Google Sheets

Before you upgrade to n8n 3.0

Nodes used (10)

• Manual Triggern8n-nodes-base.manualTrigger
• Schedule Triggern8n-nodes-base.scheduleTrigger
• Google Sheetsn8n-nodes-base.googleSheets
• Loop Over Items (Split in Batches)n8n-nodes-base.splitInBatches
• Coden8n-nodes-base.code
• HTTP Requestn8n-nodes-base.httpRequest
• Mergen8n-nodes-base.merge
• Ifn8n-nodes-base.if
• Edit Fields (Set)n8n-nodes-base.set
• Filtern8n-nodes-base.filter

From the author

Quick Overview This workflow reads API endpoints and JWTs from Google Sheets, tests each endpoint with multiple token scenarios using HTTP requests, and writes a risk-scored security summary back to Google Sheets. How it works 1. Triggers manually (or on an…

View the original on n8n.io → Check your own copy