from flask import Flask
from owsrequest import flask_request
from track import config


def create_app():
    app = Flask("ows-track")

    # verify_access=False — access rules are NOT enforced by middleware.
    # Handlers call verify_rules_access_standalone() directly instead.
    # This is required so that pdp-sdk is_authorized() can be called before
    # the access-rules check, which is not possible in middleware-enforced mode.
    flask_request.setup(
        app,
        config.ENVIRONMENT,
        add_request_context=True,
        verify_access=False,
        rules_file="track/access_rules.yml",
        exclude_paths=["/hello/"],
    )

    return app