//go:build !dev

package main

import (
	"net/http"

	"github.com/missionworkforce/missionmatch/internal/modules/auth"
	"github.com/missionworkforce/missionmatch/internal/platform/config"
)

// chooseResolver returns the production tenant middleware: the validated session resolver, always.
// This file compiles into every default (non dev tagged) build, and it contains NO X-Org-ID header
// path, so a release binary has no symbol that could trust a raw client header. The dev resolver
// lives in devresolver_dev.go behind a build tag and is simply absent here.
func chooseResolver(_ config.Config, authH *auth.Handler) (func(http.Handler) http.Handler, string) {
	return authH.SessionMiddleware(), "session"
}