supabase / auth / 10493998780

69%

push

github

fix: use signing jwk to sign oauth state (#1728)

## What kind of change does this PR introduce?
* OAuth state is now signed with the same JWK that is used to sign the
access tokens

## What is the current behavior?
* currently, it's weird for the `GOTRUE_JWT_SECRET` to be set (other
than it being a fallback option) just for the sake of signing the oauth
state

## What is the new behavior?

Feel free to include screenshots if it includes visual changes.

## Additional context

Add any other context or screenshots.

23 of 37 new or added lines in 3 files covered. (62.16%)

9210 of 15888 relevant lines covered (57.97%)

55.32 hits per line