Setup environment variables for auth work non-locally

[chouinar]

Summary

There are a lot of env vars we need to set, some secret, some not, for the auth code to work non-locally.

Overall:

• ENABLE_AUTH_ENDPOINT - false for now, will enable later

For interacting with login.gov

• LOGIN_GOV_CLIENT_ID - urn:gov:gsa:openidconnect.profiles:sp:sso:hhs-{ENVIRONMENT}-simpler-grants-gov
• LOGIN_GOV_ENDPOINT - will be https://idp.int.identitysandbox.gov/ in lower envs, and https://secure.login.gov/ in prod - The trailing slash is important
• LOGIN_GOV_JWK_ENDPOINT - will be https://idp.int.identitysandbox.gov/api/openid_connect/certs in lower envs, and https://secure.login.gov/api/openid_connect/certs in prod
• LOGIN_GOV_AUTH_ENDPOINT - will be https://idp.int.identitysandbox.gov/openid_connect/authorize in lower envs, and https://secure.login.gov/openid_connect/authorize in prod (unlike the other paths, /api is not in this one, not sure why).
• LOGIN_GOV_TOKEN_ENDPOINT - will be https://idp.int.identitysandbox.gov/api/openid_connect/token in lower envs, and https://secure.login.gov/api/openid_connect/token in prod
• LOGIN_FINAL_DESTINATION - TODO - will depend on frontend work, but differ by env
• LOGIN_GOV_CLIENT_ASSERTION_PRIVATE_KEY - a private key we setup per environment

For the key/tokens that the API manages:

• API_JWT_PRIVATE_KEY - an RSA256 private key (secret)
• API_JWT_PUBLIC_KEY - an RSA256 public key (secret as well - we are currently the only user)
• API_JWT_ISSUER - should be something like simpler-grants-api-{env}
• API_JWT_AUDIENCE - should be something like simpler-grants-api-{env}

Acceptance criteria

• All env vars and secrets set up for all 3 environments