Sonarly Claude Code 2cbe558ca6 fix: handle missing position column gracefully in workspace member query during token renewal
https://sonarly.com/issue/19011?type=bug

When a user's refresh token is renewed, the server queries the `workspaceMember` table including the `position` column. If the workspace has not been migrated (via `sync-metadata`) to include this column, PostgreSQL throws error 42703 (undefined column), blocking the user from obtaining a new access token.

Fix: **Fix: Select only required columns in workspace member query during token renewal**

In `access-token.service.ts`, the `findOne` call on `workspaceMemberRepository` was selecting ALL columns from the `workspaceMember` table, including `position` which may not exist in workspace schemas that haven't been migrated. The code only uses `workspaceMember.id` from the result, so the fix adds a `select` clause to query only `id` and `userId` (needed for the WHERE filter).

```typescript
const workspaceMember = await workspaceMemberRepository.findOne({
  where: { userId: user.id },
  select: { id: true, userId: true },
});
```

This prevents the PostgreSQL 42703 (undefined column) error for workspaces with stale schemas, while keeping the exact same functional behavior.

**Note:** The underlying issue is that this workspace needs `sync-metadata` run to add the `position` column. The code fix prevents the auth flow from breaking for unmigrated workspaces, but the workspace should still be migrated.
2026-03-27 13:57:41 +00:00
2025-08-07 17:02:12 +02:00
2026-03-11 16:30:28 +01:00

Twenty logo

The #1 Open-Source CRM

🌐 Website · 📚 Documentation · Roadmap · Discord · Figma


Cover


Installation

See: 🚀 Self-hosting 🖥️ Local Setup

Why Twenty

We built Twenty for three reasons:

CRMs are too expensive, and users are trapped. Companies use locked-in customer data to hike prices. It shouldn't be that way.

A fresh start is required to build a better experience. We can learn from past mistakes and craft a cohesive experience inspired by new UX patterns from tools like Notion, Airtable or Linear.

We believe in open-source and community. Hundreds of developers are already building Twenty together. Once we have plugin capabilities, a whole ecosystem will grow around it.


What You Can Do With Twenty

Please feel free to flag any specific needs you have by creating an issue.

Below are a few features we have implemented to date:

Personalize layouts with filters, sort, group by, kanban and table views

Companies Kanban Views

Customize your objects and fields

Setting Custom Objects

Create and manage permissions with custom roles

Permissions

Automate workflow with triggers and actions

Workflows

Emails, calendar events, files, and more

Other Features


Stack

Thanks

Chromatic Greptile Sentry Crowdin E2B

Thanks to these amazing services that we use and recommend for UI testing (Chromatic), code review (Greptile), catching bugs (Sentry) and translating (Crowdin).

Join the Community

Languages
TypeScript 78%
MDX 18.5%
JavaScript 3.1%
Python 0.2%