this change makes our tangled appview a "confidential" client.
this change includes breaking changes to the appview service, it now requires two different environment variables:
- TANGLED_OAUTH_CLIENT_SECRET: the secret component of the old JWKs object
- TANGLED_OAUTH_CLIENT_KID: the key ID the old JWKs object
both of these can be extracted from the old JWKs object: obj.d and
obj.kid respectively.
Signed-off-by: oppiliappan me@oppi.li
lgtm! tested with #684 and can confirm it works fine.