Adding a security flag to mark the collection as revealed

.do/deploy.template.yaml

@@ -10,6 +10,9 @@ spec:
         - key: APP_ENV
           scope: RUN_AND_BUILD_TIME
           value: prod
+        - key: COLLECTION_IS_REVEALED
+          scope: RUN_TIME
+          value: false
         - key: COLLECTION_WEBSITE
           scope: RUN_TIME
           value: https://www.example.com

.env

@@ -14,6 +14,7 @@
 # https://symfony.com/doc/current/best_practices.html#use-environment-variables-for-infrastructure-configuration
 
 # General collection settings
+COLLECTION_IS_REVEALED=true
 COLLECTION_WEBSITE=https://www.example.com/
 COLLECTION_MAX_SUPPLY=10000
 COLLECTION_ASSETS_EXTENSION=png

config/services.yaml

@@ -5,6 +5,7 @@
 # https://symfony.com/doc/current/best_practices.html#use-parameters-for-application-configuration
 parameters:
     app.cache_expiration: '%env(int:CACHE_EXPIRATION)%'
+    app.collection_is_revealed: '%env(bool:COLLECTION_IS_REVEALED)%'
     app.collection_website: '%env(COLLECTION_WEBSITE)%'
     app.collection_max_supply: '%env(int:COLLECTION_MAX_SUPPLY)%'
     app.collection_assets_extension: '%env(COLLECTION_ASSETS_EXTENSION)%'

src/Contract/AbstractNftController.php

@@ -34,7 +34,9 @@ public function __construct(
 
     protected function isValidTokenId(int $tokenId): bool
     {
-        return $tokenId > 0 && $tokenId <= $this->cachedTotalSupplyProvider->getTotalSupply();
+        $isRevealed = $this->getParameter('app.collection_is_revealed');
+
+        return $isRevealed && $tokenId > 0 && $tokenId <= $this->cachedTotalSupplyProvider->getTotalSupply();
     }
 
     protected function getDefaultCacheExpiration(): int