11744 emails broken image in emails (#12265)

- refactor file tokens
- update file token management
  - generate one token per file per workspaceId
  - move token from query params to url path

packages/twenty-server/src/engine/core-modules/search/services/search.service.ts

@@ -2,7 +2,7 @@ import { Injectable } from '@nestjs/common';
 
 import { isNonEmptyString } from '@sniptt/guards';
 import { FieldMetadataType } from 'twenty-shared/types';
-import { getLogoUrlFromDomainName } from 'twenty-shared/utils';
+import { buildSignedPath, getLogoUrlFromDomainName } from 'twenty-shared/utils';
 import { Brackets, ObjectLiteral } from 'typeorm';
 import chunk from 'lodash.chunk';
 
@@ -43,6 +43,7 @@ import { formatSearchTerms } from 'src/engine/core-modules/search/utils/format-s
 import { SearchArgs } from 'src/engine/core-modules/search/dtos/search-args';
 import { SearchResultConnectionDTO } from 'src/engine/core-modules/search/dtos/search-result-connection.dto';
 import { SearchResultEdgeDTO } from 'src/engine/core-modules/search/dtos/search-result-edge.dto';
+import { extractFilenameFromPath } from 'src/engine/core-modules/file/utils/extract-file-id-from-path.utils';
 import { SearchRecordDTO } from 'src/engine/core-modules/search/dtos/search-record.dto';
 
 type LastRanks = { tsRankCD: number; tsRank: number };
@@ -365,11 +366,15 @@ export class SearchService {
   }
 
   private getImageUrlWithToken(avatarUrl: string, workspaceId: string): string {
-    const avatarUrlToken = this.fileService.encodeFileToken({
+    const signedPayload = this.fileService.encodeFileToken({
+      filename: extractFilenameFromPath(avatarUrl),
       workspaceId,
     });
 
-    return `${avatarUrl}?token=${avatarUrlToken}`;
+    return buildSignedPath({
+      path: avatarUrl,
+      token: signedPayload,
+    });
   }
 
   getImageIdentifierValue(
@@ -384,7 +389,8 @@ export class SearchService {
       return getLogoUrlFromDomainName(record.domainNamePrimaryLinkUrl) || '';
     }
 
-    return imageIdentifierField
+    return imageIdentifierField &&
+      isNonEmptyString(record[imageIdentifierField])
       ? this.getImageUrlWithToken(record[imageIdentifierField], workspaceId)
       : '';
   }