I am creating a script that a user would provide a configuration file, that haves a list of: -dependencies settings ( for updating settings.js) -flows -subflows -configurations (for nodes) -nodes What i want to do also is for a user to be able to provide different credentials for different nodes (that are saved in flow_cred.json file). So that the program can encrypt the plaintext credentials to the cred file. Tried looking what dependency node-red uses for this from GitHub repository, but without luck!

[image] What encryption method is used to encrypt Flow Credentials in order to trigger flows via HTTP API? General bcrypt is a password-hashing algorthm, not an encryption scheme. If we used bcrypt for the credentials, we'd never be able to decrypt them. The code Node-RED uses to encrypt/decrypt credentials is here:

The encrypt/decrypt functions are here: node-red/credentials.js at 67dd7e30faf1a6fca07f5b745de75f4ad3036ce4 · node-red/node-red · GitHub We don't expose these in any api, but you can just copy/paste them into your own code. const crypto = require('crypto') // To encrypt const originalKey = 'secret' const credentials = { "a": "myPassword" } const hashedKey = crypto.createHash('sha256').update(originalKey).digest(); const encryptedKeys = encryptCredentials(hashedKey, credentials)

Hi Nick I am trying to reverse engineer this logic in python. Would there be a way where I can somehow test the decryption logic of a resultant flows_cred.json file i.e. create flows_cred.json file, mount it into a directory (via docker volumes) and see the logs of nodered whether the decryption of the file was successful or not?

Node-RED

Node-RED Forum

Flows-cred.json decrypt/encrypt dependency

General

Shan 16 May 2023 09:44 2

Topic		Replies	Views
What encryption method is used to encrypt Flow Credentials in order to trigger flows via HTTP API? General	2	377	12 January 2023
Decrypting node-red credentials file General	1	370	31 January 2023
Flow credentials cannot be decrypted General	8	2726	31 May 2022
How to find out the credentialSecret General security	6	324	24 April 2025
Unexpected Debug message: Your flow credentials file is encrypted using a system-generated key General	7	1580	25 April 2024

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Flows-cred.json decrypt/encrypt dependency

Related topics