fix: meeting ended page server component dto (calcom#25318)

* fix: meeting ended page server component dto

* fix: repository function fetching too much

Author: ThyMinimalDev

apps/web/lib/video/meeting-ended/[uid]/getServerSideProps.ts

@@ -23,10 +23,15 @@ export async function getServerSideProps(context: GetServerSidePropsContext) {
     return redirect;
   }
 
-  const bookingObj = Object.assign({}, booking, {
-    startTime: booking.startTime.toString(),
-    endTime: booking.endTime.toString(),
-  });
+  // Booking Object DTO, we should not expose any sensitive data through getServerSideProps + server components
+  const bookingObj = Object.assign(
+    {},
+    {
+      title: booking.title,
+      startTime: booking.startTime.toString(),
+      endTime: booking.endTime.toString(),
+    }
+  );
 
   return {
     props: {

packages/features/bookings/repositories/BookingRepository.ts

@@ -640,18 +640,6 @@ export class BookingRepository {
       select: {
         ...bookingMinimalSelect,
         uid: true,
-        user: {
-          select: {
-            credentials: true,
-          },
-        },
-        references: {
-          select: {
-            uid: true,
-            type: true,
-            meetingUrl: true,
-          },
-        },
       },
     });
   }