Hi everyone,
I'm developing a chatbot using N8n for the backend logic, which needs to retrieve client-specific information from our Airtable base. My core requirement is to ensure that when a client interacts with the chatbot, they can only access their own data, and absolutely no one else's. This access will be determined by a unique client identifier (similar to a business registration number or SIRET) which will be used to filter all data queries in Airtable.
I'm looking for advice on the most secure and robust strategies or architectural patterns to implement this kind of granular, per-user data segregation.
Specifically, with N8n and Airtable in mind, what are the recommended best practices for:
- Securely authenticating the client via the chatbot interface?
- Ensuring that all N8n workflows making calls to Airtable strictly filter data based on the authenticated client's unique ID?
- Effectively handling authorization within N8n to prevent any unauthorized data access to Airtable records?
Thanks!