origin

The caller's origin, as the platform vouches for it: a web origin for a browser on the privileged-browsers list, else android:apk-key-hash: and the calling app's signing certificate's SHA-256, base64url.