Added endpoint to verify entire set of configurations

This includes an extra random string for enhanced security

Author: tommy-lettieri

src/configurations.ts

@@ -1,6 +1,7 @@
 import * as dotenv from 'dotenv';
 import * as dotenvExpand from 'dotenv-expand';
 import * as _ from 'lodash';
+import * as crypto from 'crypto';
 dotenv.config();
 dotenvExpand(dotenv.config({ path: './prisma/.env' }));
 import { LoggingLevelType, LOGGING_LEVEL } from './utilities/logger-logging-levels';
@@ -113,6 +114,7 @@ const configurations = {
         isProduction: isProduction,
         logMissingConfigurations: readBooleanValue('LOG_MISSING_CONFIGURATIONS', true),
         failOnMissingConfigurations: readBooleanValue('FAIL_ON_MISSING_CONFIGURATIONS', isProduction),
+        configSalt: readStringValue('CONFIG_SALT', ''),
     },
     server: {
         port: readStringValue('SERVER_PORT', '3004'),
@@ -168,7 +170,14 @@ const configurations = {
             // After we log the warnings we can drop the logs, figured it would cause cleanup
             logs = null;
         });
-    })
+    }),
+    hash: ''
 };
 
+configurations.loadPromise
+.then(() => {
+    configurations.hash = crypto.createHash('sha256').update(JSON.stringify(configurations)).digest('hex');
+})
+.catch(() => null);
+
 export default configurations;

src/routes/index.ts

@@ -7,6 +7,7 @@ const router = express.Router();
 import { PrismaClient } from '@prisma/client';
 import _ = require('lodash');
 import logger from '../utilities/logger';
+import configurations from '../configurations';
 const prisma = new PrismaClient({
     // log: ['query', 'warn', 'error']
 });
@@ -71,6 +72,12 @@ async (_req: Request, _res: Response, next: NextFunction) => {
     }
 });
 
+router.use('/secret-to-everyone',
+// No validation
+(_req: Request, _res: Response, next: NextFunction) => {
+    next(httpResponse.Ok(null, configurations.hash));
+});
+
 router.get('/subjects', async (_req: Request, _res: Response, next: NextFunction) => {
     try {
         const subjects = await prisma.opl_dbsubject.findMany();