extract

Locates the OpenID4VCI create request and derives the origin from authenticated caller data.

A populated privileged origin is rejected unless the caller package and signing certificate match privilegedAppsJson.