Remove suggestion in gql error for un-authenticated users (#16328)

Closes https://github.com/twentyhq/private-issues/issues/357
Closes https://github.com/twentyhq/private-issues/issues/358

packages/twenty-server/src/engine/api/graphql/graphql-config/graphql-config.service.ts

@@ -34,7 +34,7 @@ import { CoreEngineModule } from 'src/engine/core-modules/core-engine.module';
 import { ExceptionHandlerService } from 'src/engine/core-modules/exception-handler/exception-handler.service';
 import { useSentryTracing } from 'src/engine/core-modules/exception-handler/hooks/use-sentry-tracing';
 import { useComputeComplexity } from 'src/engine/core-modules/graphql/hooks/use-compute-complexity.hook';
-import { useDisableIntrospectionForUnauthenticatedUsers } from 'src/engine/core-modules/graphql/hooks/use-disable-introspection-for-unauthenticated-users.hook';
+import { useDisableIntrospectionAndSuggestionsForUnauthenticatedUsers } from 'src/engine/core-modules/graphql/hooks/use-disable-introspection-and-suggestions-for-unauthenticated-users.hook';
 import { useGraphQLErrorHandlerHook } from 'src/engine/core-modules/graphql/hooks/use-graphql-error-handler.hook';
 import { I18nService } from 'src/engine/core-modules/i18n/i18n.service';
 import { MetricsService } from 'src/engine/core-modules/metrics/metrics.service';
@@ -73,7 +73,7 @@ export class GraphQLConfigService
         i18nService: this.i18nService,
         twentyConfigService: this.twentyConfigService,
       }),
-      useDisableIntrospectionForUnauthenticatedUsers(
+      useDisableIntrospectionAndSuggestionsForUnauthenticatedUsers(
         this.twentyConfigService.get('NODE_ENV') === NodeEnvironment.PRODUCTION,
       ),
       useComputeComplexity(

packages/twenty-server/src/engine/api/graphql/metadata.module-factory.ts

@@ -8,7 +8,7 @@ import { MetadataGraphQLApiModule } from 'src/engine/api/graphql/metadata-graphq
 import { type CacheStorageService } from 'src/engine/core-modules/cache-storage/services/cache-storage.service';
 import { type ExceptionHandlerService } from 'src/engine/core-modules/exception-handler/exception-handler.service';
 import { useComputeComplexity } from 'src/engine/core-modules/graphql/hooks/use-compute-complexity.hook';
-import { useDisableIntrospectionForUnauthenticatedUsers } from 'src/engine/core-modules/graphql/hooks/use-disable-introspection-for-unauthenticated-users.hook';
+import { useDisableIntrospectionAndSuggestionsForUnauthenticatedUsers } from 'src/engine/core-modules/graphql/hooks/use-disable-introspection-and-suggestions-for-unauthenticated-users.hook';
 import { useGraphQLErrorHandlerHook } from 'src/engine/core-modules/graphql/hooks/use-graphql-error-handler.hook';
 import { type I18nService } from 'src/engine/core-modules/i18n/i18n.service';
 import { type MetricsService } from 'src/engine/core-modules/metrics/metrics.service';
@@ -43,7 +43,7 @@ export const metadataModuleFactory = async (
         cacheSetter: cacheStorageService.set.bind(cacheStorageService),
         operationsToCache: ['ObjectMetadataItems', 'FindAllCoreViews'],
       }),
-      useDisableIntrospectionForUnauthenticatedUsers(
+      useDisableIntrospectionAndSuggestionsForUnauthenticatedUsers(
         twentyConfigService.get('NODE_ENV') === NodeEnvironment.PRODUCTION,
       ),
       useComputeComplexity(twentyConfigService.get('GRAPHQL_MAX_COMPLEXITY')),

packages/twenty-server/src/engine/core-modules/graphql/hooks/use-disable-introspection-and-suggestions-for-unauthenticated-users.hook.ts

@@ -3,8 +3,9 @@ import { NoSchemaIntrospectionCustomRule } from 'graphql/validation/rules/custom
 import { isDefined } from 'twenty-shared/utils';
 
 import { type GraphQLContext } from 'src/engine/api/graphql/graphql-config/graphql-config.service';
+import { removeSuggestionInErrorsRule } from 'src/engine/core-modules/graphql/rules/remove-suggestion-in-errors.rule';
 
-export const useDisableIntrospectionForUnauthenticatedUsers = (
+export const useDisableIntrospectionAndSuggestionsForUnauthenticatedUsers = (
   isProductionEnvironment: boolean,
 ): Plugin<GraphQLContext> => ({
   onValidate: ({ context, addValidationRule }) => {
@@ -12,6 +13,7 @@ export const useDisableIntrospectionForUnauthenticatedUsers = (
 
     if (!isAuthenticated && isProductionEnvironment) {
       addValidationRule(NoSchemaIntrospectionCustomRule);
+      addValidationRule(removeSuggestionInErrorsRule);
     }
   },
 });

packages/twenty-server/src/engine/core-modules/graphql/rules/remove-suggestion-in-errors.rule.ts

@@ -0,0 +1,14 @@
+import { type ASTVisitor, type ValidationContext } from 'graphql';
+
+export const removeSuggestionInErrorsRule = (
+  context: ValidationContext,
+): ASTVisitor => {
+  const originalReportError = context.reportError.bind(context);
+
+  context.reportError = (error) => {
+    error.message = error.message.replace(/ Did you mean[^?]*\?/g, '');
+    originalReportError(error);
+  };
+
+  return {};
+};