from flask import Flask
from owsrequest import flask_request
from pdp_sdk import PdpAuthorizationBackend
from media import config


def create_app():
    app = Flask("ows-media")

    # No verify_access, no rules_file — legacy access_rules middleware is not used.
    flask_request.setup(
        app,
        config.ENVIRONMENT,
        add_request_context=True,
    )

    return app


def setup_authorization_backend(app):
    """PP authorization backend — already wired, but endpoint-level checks are incomplete."""
    return PdpAuthorizationBackend(
        service_name="ows-media",
        environment=config.ENVIRONMENT,
    )