patch: NoSQL vulnerability introduced by GraphQL resolvers

[petruki]

This pull request improves type safety and consistency in the resolver functions and GraphQL type definitions for configuration-related queries. The main changes ensure that IDs and enum values are properly converted to the expected types before being used in MongoDB queries, reducing the risk of runtime errors and improving code reliability.

Type handling and consistency improvements:

• All _id arguments are now explicitly converted to strings and then to Types.ObjectId before being used in queries, ensuring correct MongoDB ID handling. [1] [2] [3] [4] [5] [6]
• strategy, operation, key, and name arguments are now converted to strings and validated against their respective enum types (StrategiesType, OperationsType) where applicable, ensuring only valid values are used in queries. [1] [2] [3] [4] [5] [6]

Codebase maintenance:

• Added missing imports for Types, OperationsType, and StrategiesType in src/aggregator/resolvers.js to support the new type handling logic.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
70.8% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud