Etienne 70f48ba445 Security - Add complexity max on gql queries (#16069) ...

closes https://github.com/twentyhq/private-issues/issues/348
closes https://github.com/twentyhq/private-issues/issues/352
closes https://github.com/twentyhq/private-issues/issues/353
closes https://github.com/twentyhq/private-issues/issues/354

2025-11-26 18:36:21 +01:00

..

__mocks__

Improve FieldMetadataEntity defaultValue, settings and options typing (#13320)

2025-07-23 13:43:27 +02:00

actor

[fix] User have no firstName nor lastName (#16057)

2025-11-25 17:23:43 +00:00

admin-panel

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

api-key

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

app-token

Explicitly set workspaceId column as uuid type to ease pg LEFT JOIN (#15430)

2025-10-29 19:08:44 +01:00

application

Timelineactivites-views-seeder (#16103)

2025-11-26 18:00:06 +01:00

applicationVariable

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

approved-access-domain

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

audit

Enhance role-check system with stricter checks (#15392)

2025-11-07 15:37:17 +01:00

auth

Metadata api create entity in workspace custom app (#15911)

2025-11-23 22:35:17 +01:00

billing

Refactor upgrade devx to allow configuring workspaces status to pass over (#16066)

2025-11-26 12:53:33 +01:00

billing-webhook

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

cache-lock

Update lock parameters (#15901)

2025-11-18 15:40:42 +00:00

cache-storage

Implement workspace cache storage (#15962)

2025-11-21 12:44:24 +01:00

calendar

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

captcha

Update user friendly errors for translations (#15000)

2025-10-09 18:17:32 +02:00

client-config

Replace agent handoff system with planning-based router (#16003)

2025-11-25 12:10:14 +01:00

cloudflare

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

cron

Fix assert unreachable, remove unused variables (#13753)

2025-08-08 09:04:45 +02:00

dns-manager

[BREAKING CHANGE] refactor: Add Entity suffix to TypeORM entity classes (#15239)

2025-10-22 09:55:20 +02:00

domain

(breaking change) Allow users with a single workspace to update their email. (#15736)

2025-11-13 15:00:02 +01:00

email

Add queue management dashboard (#15202)

2025-10-21 16:02:50 +02:00

email-verification

(breaking change) Allow users with a single workspace to update their email. (#15736)

2025-11-13 15:00:02 +01:00

emailing-domain

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

event-emitter

Fix ORM event mixing records in batch updates (#15985)

2025-11-22 13:16:04 +01:00

exception-handler

refactor messaging error handling (#15416)

2025-11-01 20:03:41 +01:00

feature-flag

common api - null equivalence (#15926)

2025-11-24 18:57:47 +01:00

file

fix: crash in HeaderParser in dicer. (#15963)

2025-11-21 11:09:47 +01:00

file-storage

Add queue management dashboard (#15202)

2025-10-21 16:02:50 +02:00

geo-map

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

graphql

Security - Add complexity max on gql queries (#16069)

2025-11-26 18:36:21 +01:00

guard-redirect

fix: Add reserved subdomains constant and update validation on generateSubdomain (#15217)

2025-10-21 16:53:48 +02:00

health

Add comprehensive permission guard coverage across GraphQL and REST endpoints (#15739)

2025-11-10 12:17:38 +01:00

i18n

i18n - translations (#16052)

2025-11-25 12:46:03 +01:00

imap-smtp-caldav-connection

expose imap username field (#15866)

2025-11-18 17:12:02 +01:00

impersonation

Enhance role-check system with stricter checks (#15392)

2025-11-07 15:37:17 +01:00

jwt

Reuse OAuth access tokens (#15089)

2025-10-21 11:38:49 +02:00

key-value-pair

Twenty standard and workspace custom applications 1/3 (#15625)

2025-11-10 16:13:12 +01:00

lab

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

logger

Extract field metadata build out of object metadata build (#14763)

2025-10-02 16:07:34 +00:00

message-queue

(breaking change) Allow users with a single workspace to update their email. (#15736)

2025-11-13 15:00:02 +01:00

messaging

Add ability to discard Information Banner (#16019)

2025-11-24 17:34:10 +01:00

metrics

Common - Throttle update + Metrics (#15413)

2025-10-28 19:15:18 +01:00

onboarding

Twenty standard and workspace custom applications 1/3 (#15625)

2025-11-10 16:13:12 +01:00

open-api

Revert x2 - Common - Field validation (#15491) (#15879)

2025-11-18 12:04:00 +01:00

page-layout

[DASHBOARDS] Create display legend setting + animations (#16089)

2025-11-26 17:03:23 +00:00

postgres-credentials

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

public-domain

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

record-crud

Replace agent handoff system with planning-based router (#16003)

2025-11-25 12:10:14 +01:00

record-position

[GroupBy] Allow sorting in bar chart (#15097)

2025-10-15 17:41:14 +05:30

record-transformer

common api - null equivalence (#15926)

2025-11-24 18:57:47 +01:00

redis-client

feat(redis): add support for dedicated queue client configuration (#14840)

2025-10-02 19:14:12 +02:00

search

Replace agent handoff system with planning-based router (#16003)

2025-11-25 12:10:14 +01:00

serverless

Set lambda timeout in service (#15632)

2025-11-05 12:43:23 +00:00

session-storage

Fix workspace logo, cookie security, and improve workspace impersonation (#14838)

2025-10-02 18:36:52 +02:00

sso

fix: rename SettingsPermissionsGuard to SettingsPermissionGuard for consistency (#15712)

2025-11-07 18:22:28 +01:00

telemetry

rename core-module environment to twenty-config (#11445)

2025-04-09 14:11:26 +02:00

throttler

Edit workflow and serverless throttling (#15648)

2025-11-06 17:47:27 +01:00

tool

Move http node to backend (#15424)

2025-10-31 17:46:58 +01:00

twenty-config

Security - Add complexity max on gql queries (#16069)

2025-11-26 18:36:21 +01:00

two-factor-authentication

Enhance role-check system with stricter checks (#15392)

2025-11-07 15:37:17 +01:00

user

fix: crash in HeaderParser in dicer. (#15963)

2025-11-21 11:09:47 +01:00

user-workspace

[fix] User have no firstName nor lastName (#16057)

2025-11-25 17:23:43 +00:00

webhook

Fix workspace-member-id missing from database events (#15819)

2025-11-14 14:03:49 +00:00

workflow

feat: add configurable response format for AI agents (text/JSON) (#15953)

2025-11-20 18:32:44 +01:00

workspace

Replace agent handoff system with planning-based router (#16003)

2025-11-25 12:10:14 +01:00

workspace-invitation

Twenty standard and workspace custom applications 1/3 (#15625)

2025-11-10 16:13:12 +01:00

core-engine.module.ts

Replace agent handoff system with planning-based router (#16003)

2025-11-25 12:10:14 +01:00