The Alma sandbox url for jwts authentication needs env=sandbox (#45)

* The Alma sandbox url for jwts authentication needs env=sandbox

* fixed typo in .env.sample and ordered alphabetically

Author: davezuckerman

.env.sample

@@ -1,5 +1,7 @@
-FRAMEWORK_ALMA_API_URL=https://api-na.hosted.exlibrisgroup.com/almaws/v1/
+# If pointing to the sandbox the env=sandbox is required in the url
+ALMA_JWT_JWKS_URL=https://api-na.hosted.exlibrisgroup.com/auth/our institution code/jwks.json?env=sandbox
 # Keys can be found in LastPass
 FRAMEWORK_ALMA_API_KEY=KEY_GOES_HERE
+FRAMEWORK_ALMA_API_URL=https://api-na.hosted.exlibrisgroup.com/almaws/v1/
 FRAMEWORK_ALMA_SANDBOX_KEY=KEY_GOES_HERE
-LIT_TIND_API_KEY=KEY_GOES_HERE
+LIT_TIND_API_KEY=KEY_GOES_HERE

app/controllers/concerns/alma_jwt_validator.rb

@@ -3,7 +3,11 @@
 require 'json'
 
 module AlmaJwtValidator
-  JWKS_URL = 'https://api-na.hosted.exlibrisgroup.com/auth/01UCS_BER/jwks.json'.freeze
+  # https://developers.exlibrisgroup.com/alma/integrations/token/
+  # If running against the Alma sandbox the JWKS_URL needs env=sandbox appended to the end of the url
+  # e.g. https://api-na.hosted.exlibrisgroup.com/auth/01UCS_BER/jwks.json?env=sandbox.
+  # set ALMA_JWT_JWKS_URL in your .env when running locally against the Alma sandbox
+  JWKS_URL = ENV.fetch('ALMA_JWT_JWKS_URL', 'https://api-na.hosted.exlibrisgroup.com/auth/01UCS_BER/jwks.json').freeze
   EXPECTED_ISS = 'Prima'.freeze
 
   module_function

spec/controllers/concerns/alma_jwt_validator_spec.rb

@@ -5,7 +5,7 @@
 
 describe AlmaJwtValidator do
   let(:alma_institution_code) { '01UCS_BER' }
-  let(:jwks_url) { "https://api-na.hosted.exlibrisgroup.com/auth/#{alma_institution_code}/jwks.json" }
+  let(:jwks_url) { ENV.fetch('ALMA_JWT_JWKS_URL', "https://api-na.hosted.exlibrisgroup.com/auth/#{alma_institution_code}/jwks.json") }
   let(:expected_iss) { 'Prima' }
 
   # Generate an EC key pair for testing