Paul Rastoin
57f13c9b92
# Introduction Prevent any cross user `connectedAccount` `connectionParamaters` leak Also encrypt in db all `connectionParameters` password Never return any password through `DTO` anymore The settings now allow update mutation without providing the password in edition mode Verified all `connectionParameters.password` interaction ## Integration tests - Added more coverage for both failing and successful paths - Introduced a new env var that allow bypass the provider connection test ## Legacy connected Account decryption support Stop allowing non encrypted decryption on `accessToken` and `refreshToken`, only allow legacy decryption on refactored `connectionParameters` ## Upsert ownership Completely got rid of the connected workspace schema context which is legacy Also now a user can only upsert a connected account for him only.. ## New UI <img width="1770" height="1852" alt="image" src="https://github.com/user-attachments/assets/55c1dc89-42ff-4084-95e2-cc5f9e23753b" /> If in edition the password is by default disabled It needs to be selected as being edited to be enabled ## Next - Refactor tool permissions flag not to include connected accounts - Remove the legacy connected standard object - Refactor and improve connected account resolver auth
37 lines
1.9 KiB
Bash
37 lines
1.9 KiB
Bash
PG_DATABASE_URL=postgres://postgres:postgres@localhost:5432/test
|
|
REDIS_URL=redis://localhost:6379
|
|
|
|
APP_SECRET=replace_me_with_a_random_string
|
|
ACCESS_TOKEN_SECRET=replace_me_with_a_random_string
|
|
SIGN_IN_PREFILLED=true
|
|
EXCEPTION_HANDLER_DRIVER=CONSOLE
|
|
TELEMETRY_ENABLED=false
|
|
SENTRY_DSN=https://ba869cb8fd72d5faeb6643560939cee0@o4505516959793152.ingest.sentry.io/4506660900306944
|
|
MUTATION_MAXIMUM_RECORD_AFFECTED=100
|
|
IS_MULTIWORKSPACE_ENABLED=true
|
|
FRONTEND_URL=http://localhost:3001
|
|
IS_WORKSPACE_CREATION_LIMITED_TO_SERVER_ADMINS=false
|
|
|
|
ENTERPRISE_VALIDITY_TOKEN=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJkZXYtc3Vic2NyaXB0aW9uLWlkIiwic3RhdHVzIjoidmFsaWQiLCJpYXQiOjE3NzMzMDg4MzMsImV4cCI6NDg5NzUxMTIzM30.qhfrW_SV2Y86fWtWXsALlAVhxmMxylUUIefN0fki10Q2NTGGqFVXZrNn2WacJY37yq3m5y4WgwZw34ua6E0ff_YUXsrlY5OHJWHT9DMqKCRn-JujHJnnYp3VHLncy5CvxH5r9mfPFp-5AWe1pYeR1T63sTiejH3sfDrNE357SB7KVti8LCcnsJxEtXB2tRnvyvdun7A-GKoKYEIam-16ZRKKFs6GaWo8ObHdfm8yBt6uK4DZSGPWb644QyWh9FtDxbzJ0ti54DuHSlErLgIp1NNEsMA0MK7zFY7StRaOdt72rxE1ZHwN7e6HhweTU4ORVUPfYkjDFLB2fF7Pa7Kvdg
|
|
|
|
AUTH_GOOGLE_ENABLED=false
|
|
MESSAGING_PROVIDER_GMAIL_ENABLED=false
|
|
IS_IMAP_SMTP_CALDAV_ENABLED=true
|
|
IS_IMAP_SMTP_CALDAV_CONNECTION_TEST_ENABLED=false
|
|
CALENDAR_PROVIDER_GOOGLE_ENABLED=false
|
|
MESSAGING_PROVIDER_MICROSOFT_ENABLED=false
|
|
CALENDAR_PROVIDER_MICROSOFT_ENABLED=false
|
|
|
|
AUTH_GOOGLE_CALLBACK_URL=http://localhost:3000/auth/google/redirect
|
|
AUTH_GOOGLE_APIS_CALLBACK_URL=http://localhost:3000/auth/google-apis/get-access-token
|
|
MESSAGING_PROVIDER_GMAIL_CALLBACK_URL=http://localhost:3000/auth/google-gmail/get-access-token
|
|
|
|
AUTH_MICROSOFT_CALLBACK_URL=http://localhost:3000/auth/microsoft/redirect
|
|
AUTH_MICROSOFT_APIS_CALLBACK_URL=http://localhost:3000/auth/microsoft-apis/get-access-token
|
|
|
|
CLICKHOUSE_URL=http://default:clickhousePassword@localhost:8123/twenty
|
|
IS_WORKSPACE_CREATION_V2_ENABLED=true
|
|
SHOULD_SEED_STANDARD_RECORD_PAGE_LAYOUTS=true
|
|
|
|
LOGIC_FUNCTION_TYPE=LOCAL
|