feat(auth): exclude adsUrl from startup ad in login response

apps/box-app-api/src/feature/auth/auth.service.ts

@@ -79,7 +79,13 @@ export class AuthService {
     } catch (err) {
       this.logger.error('Failed to get startup ad for login', err);
     }
+    let startupAdWithoutUrl: Omit<AdPayload, 'adsUrl'> | null = null;
 
-    return { accessToken, startupAd };
+    if (startupAd) {
+      const { adsUrl, ...rest } = startupAd;
+      startupAdWithoutUrl = rest;
+    }
+
+    return { accessToken, startupAd: startupAdWithoutUrl };
   }
 }