From 677581b76e8bef2fa8c42450016ce58a32b6fcd1 Mon Sep 17 00:00:00 2001
From: Ulf Gebhardt <ulf.gebhardt@webcraft-media.de>
Date: Fri, 18 Mar 2022 03:13:00 +0100
Subject: [PATCH] enforce config on backend

---
 backend/.env.dist           |  2 ++
 backend/.env.template       |  2 ++
 backend/src/config/index.ts | 17 +++++++++++++++++
 3 files changed, 21 insertions(+)

diff --git a/backend/.env.dist b/backend/.env.dist
index b1b16972f..85ad886f1 100644
--- a/backend/.env.dist
+++ b/backend/.env.dist
@@ -1,3 +1,5 @@
+CONFIG_VERSION=v1.2022-03-18
+
 # Server
 PORT=4000
 JWT_SECRET=secret123
diff --git a/backend/.env.template b/backend/.env.template
index b3a5eb4c6..454b25d3c 100644
--- a/backend/.env.template
+++ b/backend/.env.template
@@ -1,3 +1,5 @@
+CONFIG_VERSION=$BACKEND_CONFIG_VERSION
+
 # Server
 JWT_SECRET=$JWT_SECRET
 JWT_EXPIRES_IN=10m
diff --git a/backend/src/config/index.ts b/backend/src/config/index.ts
index 79101856c..2a2bd6008 100644
--- a/backend/src/config/index.ts
+++ b/backend/src/config/index.ts
@@ -12,6 +12,11 @@ Decimal.set({
 const constants = {
   DB_VERSION: '0032-add-transaction-link-to-transaction',
   DECAY_START_TIME: new Date('2021-05-13 17:46:31'), // GMT+0
+  CONFIG_VERSION: {
+    DEFAULT: 'DEFAULT',
+    EXPECTED: 'v1.2022-03-18',
+    CURRENT: '',
+  },
 }
 
 const server = {
@@ -78,6 +83,18 @@ const webhook = {
 // This is needed by graphql-directive-auth
 process.env.APP_SECRET = server.JWT_SECRET
 
+// Check config version
+constants.CONFIG_VERSION.CURRENT = process.env.CONFIG_VERSION || constants.CONFIG_VERSION.DEFAULT
+if (
+  ![constants.CONFIG_VERSION.EXPECTED, constants.CONFIG_VERSION.DEFAULT].includes(
+    constants.CONFIG_VERSION.CURRENT,
+  )
+) {
+  throw new Error(
+    `Fatal: Config Version incorrect - expected "${constants.CONFIG_VERSION.EXPECTED}" or "${constants.CONFIG_VERSION.DEFAULT}", but found "${constants.CONFIG_VERSION.CURRENT}"`,
+  )
+}
+
 const CONFIG = {
   ...constants,
   ...server,