OIDC Provider ↔ SIOP v2 / OpenID4VP bridge. Downstream apps speak authorization-code + PKCE. Upstream login is AldenWallet.
Trust-listed verifier client_id: https://city.aldenburg-id.com
OIDC issuer: https://city.aldenburg-id.com
Citizen portal (Next.js OIDC RP): https://portal.aldenburg-id.com