use JWT_PUBLIC_KEY from environment rather than file

.github/workflows/e2e_test_reusable.yml

@@ -48,6 +48,7 @@ jobs:
         uses: ./.github/actions/run-full-stack
         env:
           JWT_PRIVATE_KEY: ${{ secrets.JWT_PRIVATE_KEY }}
+          JWT_PUBLIC_KEY: ${{ secrets.JWT_PUBLIC_KEY }}
 
       # Install Cypress globally
       - name: Install Cypress globally

.github/workflows/unit_test_reusable.yml

@@ -7,6 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       JWT_PRIVATE_KEY: ${{ secrets.JWT_PRIVATE_KEY }}
+      JWT_PUBLIC_KEY: ${{ secrets.JWT_PUBLIC_KEY }}
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: ./.github/actions/setup-python

backend/ops_api/ops/__init__.py

@@ -51,11 +51,6 @@ def create_app() -> Flask:
         app.config.from_envvar("OPS_CONFIG")
     app.config.from_prefixed_env()  # type: ignore [attr-defined]
 
-    # manually setting the public key path here, until we know where it will live longterm
-    app.config.setdefault(
-        "JWT_PUBLIC_KEY",
-        app.open_resource(app.config.get("JWT_PUBLIC_KEY_PATH")).read(),
-    )
     # fall back for pytest to use
     app.config.setdefault(
         "SQLALCHEMY_DATABASE_URI",

backend/ops_api/ops/environment/default_settings.py

@@ -9,7 +9,7 @@
 FLASK_PORT = 8080
 
 JWT_PRIVATE_KEY = os.getenv("JWT_PRIVATE_KEY")
-JWT_PUBLIC_KEY_PATH = "./static/public.pem"
+JWT_PUBLIC_KEY = os.getenv("JWT_PUBLIC_KEY")
 JWT_ALGORITHM = "RS256"
 JWT_DECODE_ALGORITHMS = "RS256"
 JWT_TOKEN_LOCATION = "headers"  # noqa: S105 "Not a secret"