Use better type safety when creating URLs

[acoburn]

Improve type safety of URLs generated for a client ID document

Description of changes

At present, the URLs used in a rendered client ID document use string concatenation based on a client-supplied header, which could open the door to malicious behavior, especially if the redirect URLs are manipulated.

User testing instructions

Commit checklist

• All acceptance criteria are met.
• Includes tests to ensure functionality, accessibility and prevent regressions, including E2E tests for supported browsers.
• Relevant documentation, if any, has been written/updated.
• The changelog has been updated, if applicable.
• A changeset version has been created, if applicable.
• Meets Inrupt coding standards and adheres to commit conventions.

Design requirements checklist

• Meets Inrupt API Design and UX standards
• Is responsive to our documented minimum supported screen size + resolution
• Code is extensible by external contributors or anyone forking

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
authorization-management-component	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 16, 2024 0:52am

[NSeydoux]

Looks good. The preview fails on login, but that is because of Vercel. More things happen in the preview than I realized: if you curl https://authorization-management-component-jzsxmwmmk-inrupt.vercel.app/api/app, you get a result very different from what I anticipated.