Disable write api when not in development mode

.env.example

@@ -5,4 +5,6 @@ POSTGRES_PASSWORD=badgehub
 PGADMIN_DEFAULT_PASSWORD=badgehub
 PGADMIN_DEFAULT_EMAIL=[email protected]
 
-JWT_SIGNING_KEY="!!HackThePlanet!!"
+NODE_ENV=development
+
+JWT_SIGNING_KEY="!!HackThePlanet!!"

src/disableWriteWhenNotDev.ts

@@ -0,0 +1,18 @@
+import { Express, NextFunction, Request, Response } from "express";
+import { NODE_ENV } from "@config";
+
+export function disableWriteWhenNotDev(app: Express) {
+  app.use((req: Request, res: Response, next: NextFunction) => {
+    if (req.method !== "GET") {
+      if (NODE_ENV !== "development") {
+        res
+          .status(403)
+          .send(
+            "Write API is disabled in non-development environments for now"
+          );
+        return;
+      }
+    }
+    next();
+  });
+}

src/index.ts

@@ -2,8 +2,11 @@ import app from "./app";
 import { RegisterRoutes } from "./generated/routes";
 import { addTsoaValidationFailureLogging } from "@util/logging";
 import { EXPRESS_PORT } from "@config";
+import { disableWriteWhenNotDev } from "@disableWriteWhenNotDev";
 
 async function startServer() {
+  disableWriteWhenNotDev(app);
+
   RegisterRoutes(app);
 
   addTsoaValidationFailureLogging(app);