Match `acl:origin` with OIDC `azp`

[michielbdejong]

Reviving solid/webid-oidc-spec#34
Use PoP token issuer for app origin to determine the meaning of acl:origin triples in WAC.
The client can prove its origin by showing that it is explicitly list as in the audience array of the OIDC token.

[michielbdejong]

See also solid/webid-oidc-spec#12

[michielbdejong]

Actually thanks to @jaxoncreed for pointing me to https://solidproject.org/TR/oidc#tokens-id which mentions azp

[michielbdejong]

Closing this in the light of solid/web-access-control-spec#34 (comment)