Secure Order Tracking Webhooks with Gmail Alerts & Data Tables

Secure Order Tracking Webhooks with Gmail Alerts & Data Tables

Automate order status tracking with secure webhook intake, safe status transitions, deduplicated milestone alerts, and Gmail notifications—backed by n8n Data Tables for reliable history and stale notification visibility.

What this workflow does

This n8n workflow accepts order events via webhooks, validates them rigorously, and writes only what’s safe to persist:

• Authenticated order intake: The order-intake webhook is verified using the server-side ORDER_INTAKE_TOKEN.
• Strict validation & deduplication: It checks required tenant, order ID, explicit source event ID, initial state, explicit-offset timestamp, and an unpadded 24–256 character per-order lookup secret. Duplicate intake is returned as an accepted replay—without another side effect.
• Controlled persistence: For new orders, it persists a new Order, a Status History row, and a pending `Notification` before sending a controlled Gmail message.
• Exactly-one internal status event: Status events are authenticated with ORDER_STATUS_TOKEN, rejected if provided as arrays, and joined to the matching Order.
• Safe transition enforcement: The workflow reads all matching Status History rows before classification, then holds invalid/older transitions and returns accepted or held replays without additional writes.
• Notification dedupe: Only a new notification key can create another notification and trigger a new Gmail message.
• Operational visibility: It records Gmail success or explicit Pending Send failure in Notifications and Orders, and alerts the operations inbox if notifications remain pending for at least two hours.

Use cases

• SaaS operators needing reliable, idempotent order webhook handling with audit trails.
• E-commerce or logistics teams using Gmail alerts for status milestones while preventing duplicate notifications.
• Automation engineers deploying secure workflows with verifier-protected customer lookup that exposes only safe fields.

Technical details

• n8n nodes: webhook, gmail, data table, if, code, sticky note
• Data Tables: create Orders, Status History, and Notifications with the columns listed in the workflow README.
• Security: ORDER_INTAKE_TOKEN + ORDER_STATUS_TOKEN, strict input validation, verifier-protected customer lookup, and controlled Gmail messaging.