"""
Security initialization module

Handles OIDC configuration and authentication setup
"""
from src.shared.config import Settings
from src.shared.logging import get_logger

logger = get_logger(__name__)


def initialize_oidc(settings: Settings) -> None:
    """
    Initialize OIDC authentication configuration

    Args:
        settings: Application settings containing OIDC configuration
    """
    # Import here to avoid circular imports
    from src.auth.oidc import oidc_config

    oidc_config.configure(
        enabled=settings.oidc_enabled,
        issuer=settings.oidc_issuer,
        audience=settings.oidc_audience
    )

    if settings.oidc_enabled:
        logger.info(f"OIDC authentication enabled (issuer: {settings.oidc_issuer})")
    else:
        logger.info("OIDC authentication disabled - API is publicly accessible")