const { securityHeaders, enforceHttps, createCorsMiddleware, requireWriteApiKey } = require("./security");

function configureSecurityHeaders(app, _isDevelopment = false) {
  if (!app || typeof app.use !== "function") return;
  app.use(securityHeaders);
  app.use(enforceHttps);
}

module.exports = {
  configureSecurityHeaders,
  securityHeaders,
  enforceHttps,
  createCorsMiddleware,
  requireWriteApiKey,
};