Fix issuer, client_id, and client_secret

Author: dvoytenko

app/login/vercel/issuer.ts

@@ -11,9 +11,8 @@ import {
 } from "openid-client";
 import { createRemoteJWKSet, jwtVerify } from "jose";
 
-export const OIDC_ISSUER = "http://localhost:4000";
-const OIDC_CLIENT_ID = "my_web_app1";
-const OIDC_CLIENT_SECRET = "super_secret_client_secret1";
+export const OIDC_ISSUER =
+  process.env.OIDC_ISSUER || "https://marketplace.vercel.com";
 
 let clientPromise: Promise<Configuration> | undefined;
 let jwks: ReturnType<typeof createRemoteJWKSet> | undefined;
@@ -25,12 +24,22 @@ export async function getOidcConfiguration(): Promise<Configuration> {
 
   clientPromise = (async () => {
     try {
+      const oidcClientId = process.env.INTEGRATION_CLIENT_ID;
+      if (!oidcClientId) {
+        throw new Error("Missing INTEGRATION_CLIENT_ID environment variable");
+      }
+      const oidcClientSecret = process.env.INTEGRATION_CLIENT_SECRET;
+      if (!oidcClientSecret) {
+        throw new Error(
+          "Missing INTEGRATION_CLIENT_SECRET environment variable"
+        );
+      }
       const configuration = await discovery(
         new URL(OIDC_ISSUER),
-        OIDC_CLIENT_ID,
+        oidcClientId,
         {
-          client_id: OIDC_CLIENT_ID,
-          client_secret: OIDC_CLIENT_SECRET,
+          client_id: oidcClientId,
+          client_secret: oidcClientSecret,
         },
         undefined,
         {