Two origins
Examples
App A and App B use the same gate while receiving different private IDs for the same local credential.
App A
A holder-only dashboard shows standard wallet login beside VeilPass login and exposes the received payload for comparison.
App B
A private feedback form runs on a distinct origin and demonstrates origin separation.
Cookie session adapter
The Next.js example creates a one-time challenge, verifies server-side, stores only an opaque external ID, and sets a Secure, HttpOnly, SameSite=Lax cookie.