Secure API endpoint with bearer token authentication and field validation
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 10 nodes and runs when an HTTP POST request hits its webhook URL. It uses only n8n's built-in nodes.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Configuration (Edit Fields (Set)): sets 2 fields: config.bearerToken, config.requiredFields.message
- Check Authorization Header (If): checks a condition and branches into true / false
- Has required fields? (Code): runs custom JavaScript code
- 401 Unauthorized (Respond to Webhook): sends the response back to the webhook caller
- Check Valid Request (If): checks a condition and branches into true / false
- 400 Bad Request (Respond to Webhook): sends the response back to the webhook caller
- Create Response (Edit Fields (Set)): sets 1 field: message
- 200 OK (Respond to Webhook): sends the response back to the webhook caller
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (6)
- If
n8n-nodes-base.if - Respond to Webhook
n8n-nodes-base.respondToWebhook - Edit Fields (Set)
n8n-nodes-base.set - Webhook
n8n-nodes-base.webhook - Code
n8n-nodes-base.code - No Operation, do nothing
n8n-nodes-base.noOp
From the author
A reusable and production-ready n8n workflow that secures public webhooks using Bearer Token authentication and dynamic request validation. --- ✨ What It Does - Verifies Bearer Token Compares the Authorization header with a configured secret token. -…