Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

n8n bot with enabled:false still triggers HTTP calls to webhookUrl

Abierto
  • ¿Algo no está bien?
#2,676 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 8 días

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
3/5
Tiempo estimado
1-2 días
Aptitud para principiantes
62/100
Tipo de issue
Error
Claridad
Bastante claro
Estado de actividad
Tranquilo
Stack tecnológico
postgresql, rabbitmq, typescript
Área
api, backend, distributed-systems

Línea de trabajo

Start with the n8n event-dispatch path used after POST /n8n/create/:instanceName and POST /n8n/changeStatus/:id/:instanceName, then reproduce the listed WhatsApp message flow with RabbitMQ events enabled. Trace how the bot's enabled flag is read before webhook delivery. Done means disabled bots produce no webhook HTTP calls while enabled bots still receive the expected events.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

Summary: An n8n bot (integration) whose config has enabled: false keeps sending HTTP calls to its webhookUrl on incoming WhatsApp message events. On v2.3.7 we observed hundreds of POST requests per day to the bot's webhookUrl while the bot record had enabled = false; traffic only stopped after the bot record was deleted via DELETE /n8n/delete/:id/:instanceName and the module env N8N_ENABLED=false was in place.

Environment: Evolution API v2.3.7 (Docker Swarm, PostgreSQL persistence, RabbitMQ events enabled).

Endpoints involved:

  • POST /n8n/create/:instanceName (bot config with enabled flag)
  • POST /n8n/changeStatus/:id/:instanceName (enable/disable)
  • GET /n8n/find/:instanceName
  • DELETE /n8n/delete/:id/:instanceName

Expected behavior: When a bot's enabled is false, the integration must NOT dispatch any HTTP call to webhookUrl.

Actual behavior: Message events continue to be POSTed to webhookUrl while enabled=false. Payloads look like MESSAGES_UPSERT events (body sizes 13–1845 bytes) and arrive at a steady rate of a few per minute, causing continuous 404 traffic when the target workflow/webhook is removed. Disabling the whole module (N8N_ENABLED=false) correctly makes the /n8n/* API routes return 400 {"message":["N8n is disabled"]}, and the outgoing flood only stops after the bot record itself is deleted.

Repro steps:

  1. Create an instance and connect WhatsApp.
  2. POST /n8n/create with { "name": "bot1", "enabled": true, "url": "https://your-request-bin/webhook", "triggerType": "all", "listeningFromMe": true }.
  3. Receive a message → a POST arrives at the webhook URL.
  4. Disable the bot (POST /n8n/changeStatus/:id/:instanceName or set enabled=false in the record).
  5. Receive another message → a POST still arrives at the webhook URL (bug: enabled=false is ignored in the event-dispatch path).

Notes: The N8N_ENABLED=false module-level guard works for the API routes; the per-bot enabled flag appears not to be honored (or is cached/stale) when dispatching events.

Lenguaje dominante
TypeScript
Estrellas
9.8k
Forks
7.3k
Sin PR fusionados en 30 d

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de evolution-foundation/evolution-api

Todos los issues de evolution-foundation/evolution-api

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.