snapshot of https://github.com/twentyhq/twenty.git (main, 2026-09-17; blobs > 131072B omitted)

packages/twenty-server/test/integration/graphql/suites/query-complexity/__snapshots__/common-query-complexity-failing.integration-spec.ts.snap

@@ -0,0 +1,7 @@
+// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
+
+exports[`Query Complexity - Failing Scenarios should fail findMany query with too many relation fields 1`] = `"Query complexity is too high. Please, reduce the amount of relation fields requested. Query complexity: 18. Maximum complexity: 10."`;
+
+exports[`Query Complexity - Failing Scenarios should fail findMany query with two nested one to many relations 1`] = `"Query complexity is too high. One-to-Many relation cannot be nested in another One-to-Many relation."`;
+
+exports[`Query Complexity - Failing Scenarios should fail groupBy query with too many relation fields 1`] = `"Query complexity is too high. Please, reduce the amount of relation fields requested. Query complexity: 23. Maximum complexity: 10."`;

packages/twenty-server/test/integration/graphql/suites/query-complexity/__snapshots__/query-complexity.integration-spec.ts.snap

@@ -0,0 +1,3 @@
+// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
+
+exports[`Query Complexity should fail to execute a query with too many root resolvers 1`] = `"Query too complex - Too many root resolvers requested: 23 - Maximum allowed root resolvers: 20"`;

packages/twenty-server/test/integration/graphql/suites/query-complexity/common-query-complexity-failing.integration-spec.ts

@@ -0,0 +1,66 @@
+import { TOO_MANY_RELATION_QUERY_GQL_FIELDS } from 'test/integration/graphql/suites/query-complexity/constants/tooManyRelationQueryGqlFields.constant';
+import { TWO_NESTED_ONE_TO_MANY_QUERY_GQL_FIELDS } from 'test/integration/graphql/suites/query-complexity/constants/twoNestedOneToManyQueryGqlFields.constant';
+import { findManyOperationFactory } from 'test/integration/graphql/utils/find-many-operation-factory.util';
+import { groupByOperationFactory } from 'test/integration/graphql/utils/group-by-operation-factory.util';
+import { makeGraphqlAPIRequest } from 'test/integration/graphql/utils/make-graphql-api-request.util';
+import { createConfigVariable } from 'test/integration/twenty-config/utils/create-config-variable.util';
+import { deleteConfigVariable } from 'test/integration/twenty-config/utils/delete-config-variable.util';
+
+describe('Query Complexity - Failing Scenarios', () => {
+  beforeAll(async () => {
+    await createConfigVariable({
+      input: {
+        key: 'COMMON_QUERY_COMPLEXITY_LIMIT',
+        value: 10,
+      },
+    });
+  });
+
+  afterAll(async () => {
+    await deleteConfigVariable({
+      input: { key: 'COMMON_QUERY_COMPLEXITY_LIMIT' },
+    }).catch(() => {});
+  });
+
+  it('should fail findMany query with two nested one to many relations', async () => {
+    const findManyPeopleOperation = findManyOperationFactory({
+      objectMetadataSingularName: 'person',
+      objectMetadataPluralName: 'people',
+      gqlFields: TWO_NESTED_ONE_TO_MANY_QUERY_GQL_FIELDS,
+      first: 200,
+    });
+
+    const response = await makeGraphqlAPIRequest(findManyPeopleOperation);
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+
+  it('should fail findMany query with too many relation fields', async () => {
+    const findManyPeopleOperation = findManyOperationFactory({
+      objectMetadataSingularName: 'person',
+      objectMetadataPluralName: 'people',
+      gqlFields: TOO_MANY_RELATION_QUERY_GQL_FIELDS,
+    });
+
+    const response = await makeGraphqlAPIRequest(findManyPeopleOperation);
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+
+  it('should fail groupBy query with too many relation fields', async () => {
+    const groupByOperation = groupByOperationFactory({
+      objectMetadataSingularName: 'person',
+      objectMetadataPluralName: 'people',
+      groupBy: [{ jobTitle: true }],
+      gqlFields: `edges { node { id company { id } } }`,
+      limit: 11,
+    });
+
+    const response = await makeGraphqlAPIRequest(groupByOperation);
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+});

packages/twenty-server/test/integration/graphql/suites/query-complexity/constants/tooManyRelationQueryGqlFields.constant.ts

@@ -0,0 +1,90 @@
+export const TOO_MANY_RELATION_QUERY_GQL_FIELDS = `
+    id
+    jobTitle
+    avatarUrl
+    intro
+    searchVector
+    pointOfContactForOpportunities {
+      edges {
+        node {
+          id
+          company {
+            id
+          }
+        }
+      }
+    }
+    noteTargets {
+      edges {
+        node {
+          id
+          targetCompany {
+            id
+          }
+          note {
+            id
+          }
+          targetPerson {
+            id
+            company {
+              id
+            }
+          }
+          targetCompany {
+            id
+          }
+          targetOpportunity {
+            id
+          }
+        }
+      }
+    }
+    taskTargets {
+      edges {
+        node {
+          id
+          targetCompany {
+            id
+          }
+          targetPerson {
+            id
+            company {
+              id
+            }
+          }
+          targetCompany {
+            id
+          }
+          targetOpportunity {
+            id
+          }
+        }
+      }
+    }
+    company {
+      id
+      people {
+        edges {
+          node {
+            id
+            company {
+              id
+            }
+          }
+        }
+      }
+    }
+    attachments {
+      edges {
+        node {
+          id
+          person {
+            id
+            company {
+              id
+            }
+          }
+        }
+      }
+    }
+`;

packages/twenty-server/test/integration/graphql/suites/query-complexity/constants/tooManyRootResolversQueryGqlFields.constant.ts

@@ -0,0 +1,167 @@
+import gql from 'graphql-tag';
+
+export const TOO_MANY_ROOT_RESOLVERS_QUERY_GQL_FIELDS = gql`
+  query {
+    people {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    companies {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    tasks {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    notes {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    attachments {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    noteTargets {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    taskTargets {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    opportunities {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    blocklists {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    calendarEvents {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    calendarEventParticipants {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    calendarChannelEventAssociations {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    messageThreads {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    messageChannelMessageAssociations {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    timelineActivities {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    workflowRuns {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    workflowVersions {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    workflowAutomatedTriggers {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    workflows {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    dashboards {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    messages {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    messageParticipants {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+    workspaceMembers {
+      edges {
+        node {
+          id
+        }
+      }
+    }
+  }
+`;

packages/twenty-server/test/integration/graphql/suites/query-complexity/constants/twoNestedOneToManyQueryGqlFields.constant.ts

@@ -0,0 +1,25 @@
+export const TWO_NESTED_ONE_TO_MANY_QUERY_GQL_FIELDS = `
+  id
+  pointOfContactForOpportunities {
+    edges {
+      node {
+        company {
+            people {
+            edges {
+                node {
+                id
+                pointOfContactForOpportunities {
+                    edges {
+                        node {
+                            id
+                        }
+                    }
+                }
+                }
+            }
+        }
+        }
+      }
+    }
+  }
+`;

packages/twenty-server/test/integration/graphql/suites/query-complexity/generate-gql-fields.util.ts

@@ -0,0 +1,3 @@
+export const generateGqlFields = (count: number): string => {
+  return Array.from({ length: count }, (_) => `id`).join('\n');
+};

packages/twenty-server/test/integration/graphql/suites/query-complexity/query-complexity.integration-spec.ts

@@ -0,0 +1,73 @@
+import gql from 'graphql-tag';
+import { TOO_MANY_ROOT_RESOLVERS_QUERY_GQL_FIELDS } from 'test/integration/graphql/suites/query-complexity/constants/tooManyRootResolversQueryGqlFields.constant';
+import { generateGqlFields } from 'test/integration/graphql/suites/query-complexity/generate-gql-fields.util';
+import { findManyOperationFactory } from 'test/integration/graphql/utils/find-many-operation-factory.util';
+import { makeGraphqlAPIRequest } from 'test/integration/graphql/utils/make-graphql-api-request.util';
+
+describe('Query Complexity', () => {
+  it('should execute a simple query', async () => {
+    const gqlFields = generateGqlFields(100);
+
+    const findManyPeopleOperation = findManyOperationFactory({
+      objectMetadataSingularName: 'person',
+      objectMetadataPluralName: 'people',
+      gqlFields: gqlFields,
+    });
+
+    const response = await makeGraphqlAPIRequest(findManyPeopleOperation);
+
+    expect(response.body.errors).toBeUndefined();
+    expect(response.body.data.people).toBeDefined();
+    expect(response.body.data.people.edges).toBeDefined();
+  });
+
+  it('should fail to execute a query with too many fields', async () => {
+    const gqlFields = generateGqlFields(2001);
+
+    const findManyPeopleOperation = findManyOperationFactory({
+      objectMetadataSingularName: 'person',
+      objectMetadataPluralName: 'people',
+      gqlFields: gqlFields,
+    });
+
+    const response = await makeGraphqlAPIRequest(findManyPeopleOperation);
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+
+  it.only('should fail to execute a query with too many root resolvers', async () => {
+    const response = await makeGraphqlAPIRequest({
+      query: TOO_MANY_ROOT_RESOLVERS_QUERY_GQL_FIELDS,
+    });
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+
+  it('should fail to execute a query with duplicate root resolvers', async () => {
+    const response = await makeGraphqlAPIRequest({
+      query: gql`
+        query {
+          people {
+            edges {
+              node {
+                id
+              }
+            }
+          }
+          people {
+            edges {
+              node {
+                id
+              }
+            }
+          }
+        }
+      `,
+    });
+
+    expect(response.body.errors).toBeDefined();
+    expect(response.body.errors[0].message).toMatchSnapshot();
+  });
+});