fix: ensure each individual resource indicator is a valid URI

[charIeszhao]

Fix a bug in checkResource util function.

When checking if the resource identifier is a valid URL, we should iterate the resource array with a for-loop, and check if each identifier in the resource array is valid, by utilizing the new URL() constructor.

However, the origin code seems to mistakenly pass the entire resource array into the URL constructor, resulting unexpected behavior.

Fixes: logto-io/logto#5779

[panva]

You're absolutely right. This only works when there's a single element due to how new URL calling toString() on non-string inputs.

Let me just add a regression test.

[charIeszhao]

Thanks! Glad I can help.