Skip to main content

Audit

VO platform creates audit entries for various operations and events. All audit events include a stable Event Type ID (e.g., VO0011) and Event Type (e.g., api.graphql.query) for easy filtering and alerting in SIEM systems.

For a complete reference of all available event types, see the Audit Event Types documentation.

Integration with SIEM​

The platform audit log is available in Azure Event Hubs for integration with a System Information and Event Management (SIEM) tool of choice, e.g. splunk, sumo logic, or etc.

Generally, an administrator of VO platform would create a dedicated Shared Access Policy (SAS) and provide the access keys and connection string for each integration of a SIEM tool.

Sample Audit Entries​

The following examples demonstrate the structure of audit entries for common scenarios:

GraphQL query​

Sample audit entry for a GraphQL query
{
  "log": {
    "AppRoleInstance": "dd1e06f6d167",
    "AppRoleName": "verifiable-orchestration-api.VerifiableOrchestration",
    "ClientBrowser": "Other",
    "ClientCity": "Sydney",
    "ClientCountryOrRegion": "Australia",
    "ClientIP": "0.0.0.0",
    "ClientModel": "Other",
    "ClientOS": "Linux 5.15.116.1-1.cm2",
    "ClientStateOrProvince": "New South Wales",
    "ClientType": "PC",
    "IKey": "edcfb4d0-521b-4b97-965e-af732a986b84",
    "ItemCount": 1,
    "Message": "API GRAPHQL Query",
    "EventTypeId": "VO0011",
    "EventType": "api.graphql.query",
    "OperationId": "8f61f14e7c7bedbb63acdf2187b59b30",
    "ParentId": "06d8b7642ef19196",
    "Properties": {
      "logLevel": "audit",
      "request": "{\"origin\":\"https://green-sky-0f070b000.2.azurestaticapps.net\",\"requestId\":\"2de26a6c-a297-4f2d-bcaa-13d67ac0894d\"}",
      "user": "{\"oid\":\"84ea005a-58fe-4195-86a8-8a0a1b707dae\",\"aud\":\"api://verified-orchestration-api-dev\",\"tid\":\"a4577872-4a36-4a93-9846-b29a1220ca89\",\"iss\":\"https://sts.windows.net/a4577872-4a36-4a93-9846-b29a1220ca89/\",\"scp\":\"VerifiedOrchestration\",\"roles\":[\"VerifiableCredential.Reader\",\"VerifiableCredential.Issuer\",\"VerifiableCredential.CredentialAdmin\",\"VerifiableCredential.PartnerAdmin\"]}",
      "service": "verified-orchestration-api",
      "type": "query",
      "eventTypeId": "VO0011",
      "eventType": "api.graphql.query",
      "operationName": "FindIssuancesTotal",
      "query": "query FindIssuancesTotal($issuancesWhere: ContractIssuanceWhere, $orderBy: ContractOrderBy, $orderDirection: OrderDirection, $contractIssuanceWeeklyAverageWhere: ContractIssuanceWeeklyAverageWhere!) {\n  findContracts(orderBy: $orderBy, orderDirection: $orderDirection) {\n    id\n    name\n    issuanceWeeklyAverage(where: $contractIssuanceWeeklyAverageWhere)\n    issuances(where: $issuancesWhere) {\n      issuedBy {\n        id\n        name\n        __typename\n      }\n      __typename\n    }\n    __typename\n  }\n}",
      "variables": "{\"issuancesWhere\":{\"from\":\"2023-10-24T00:00:00+11:00\"},\"contractIssuanceWeeklyAverageWhere\":{\"to\":\"2023-10-31T23:59:59+11:00\",\"numberOfWeeks\":12},\"orderBy\":\"contractName\",\"orderDirection\":\"ASC\"}",
      "duration": "756",
      "trace_id": "8f61f14e7c7bedbb63acdf2187b59b30",
      "span_id": "06d8b7642ef19196",
      "trace_flags": "01"
    },
    "ResourceGUID": "bf680fa7-1510-4f4f-b0cd-dfff4d505db3",
    "SDKVersion": "node18:otel1.15.2:dst1.0.0",
    "SeverityLevel": 1,
    "SourceSystem": "Azure",
    "TenantId": "129c3f1e-ba9b-45e5-b7f4-6df8048e3e90",
    "TimeGenerated": "2026-02-10T01:55:56.9220000Z",
    "Type": "AppTraces",
    "_BilledSize": 2256,
    "_Internal_WorkspaceResourceId": "/subscriptions/de5e410a-fa03-4be4-bcda-b068b4be7f52/resourcegroups/vo-dev-verified-orchestration/providers/microsoft.operationalinsights/workspaces/vo-dev-verified-orchestration-la",
    "_ResourceId": "/SUBSCRIPTIONS/DE5E410A-FA03-4BE4-BCDA-B068B4BE7F52/RESOURCEGROUPS/VO-DEV-VERIFIED-ORCHESTRATION/PROVIDERS/MICROSOFT.INSIGHTS/COMPONENTS/VO-DEV-VERIFIED-ORCHESTRATION-API-AI"
  },
  "EventProcessedUtcTime": "2026-02-10T01:57:01.6774564Z",
  "PartitionId": 0,
  "EventEnqueuedUtcTime": "2026-02-10T01:56:34.4670000Z"
}

GraphQL mutation​

Sample audit entry for a GraphQL mutation
{
  "log": {
    "AppRoleInstance": "dd1e06f6d167",
    "AppRoleName": "verifiable-orchestration-api.VerifiableOrchestration",
    "ClientBrowser": "Other",
    "ClientCity": "Sydney",
    "ClientCountryOrRegion": "Australia",
    "ClientIP": "0.0.0.0",
    "ClientModel": "Other",
    "ClientOS": "Linux 5.15.116.1-1.cm2",
    "ClientStateOrProvince": "New South Wales",
    "ClientType": "PC",
    "IKey": "edcfb4d0-521b-4b97-965e-af732a986b84",
    "ItemCount": 1,
    "Message": "API GRAPHQL Mutation",
    "EventTypeId": "VO0012",
    "EventType": "api.graphql.mutation",
    "OperationId": "ba0dbfb7a4918b6621950c7e4d3e0d90",
    "ParentId": "cc78db47ada505f7",
    "Properties": {
      "logLevel": "audit",
      "request": "{\"origin\":\"https://green-sky-0f070b000.2.azurestaticapps.net\",\"requestId\":\"820daab3-8baa-4a9a-a872-bcf5c1dd1bae\"}",
      "user": "{\"oid\":\"eafa1892-3c05-4e76-b62f-0643bbe1363a\",\"aud\":\"api://verified-orchestration-api-dev\",\"tid\":\"a4577872-4a36-4a93-9846-b29a1220ca89\",\"iss\":\"https://sts.windows.net/a4577872-4a36-4a93-9846-b29a1220ca89/\",\"scp\":\"VerifiedOrchestration\",\"roles\":[\"VerifiableCredential.Reader\",\"VerifiableCredential.Issuer\",\"VerifiableCredential.CredentialAdmin\",\"VerifiableCredential.PartnerAdmin\"]}",
      "service": "verified-orchestration-api",
      "type": "mutation",
      "eventTypeId": "VO0012",
      "eventType": "api.graphql.mutation",
      "operationName": "RevokeIssuances",
      "query": "mutation RevokeIssuances($ids: [ID!]!) {\n  revokeIssuances(ids: $ids)\n}",
      "variables": "{\"ids\":[\"35E435EB-FEE6-4B13-8658-8EE05AD32AE1\",\"5A04FB47-A254-49C7-AA81-101B80332D08\"]}",
      "duration": "9",
      "result": "{\"data\":{\"revokeIssuances\":\"b966c5c5-caf8-40a8-aa51-578f57ba5c23\"}}",
      "trace_id": "ba0dbfb7a4918b6621950c7e4d3e0d90",
      "span_id": "cc78db47ada505f7",
      "trace_flags": "01"
    },
    "ResourceGUID": "bf680fa7-1510-4f4f-b0cd-dfff4d505db3",
    "SDKVersion": "node18:otel1.15.2:dst1.0.0",
    "SeverityLevel": 1,
    "SourceSystem": "Azure",
    "TenantId": "129c3f1e-ba9b-45e5-b7f4-6df8048e3e90",
    "TimeGenerated": "2026-02-10T02:20:08.0980000Z",
    "Type": "AppTraces",
    "_BilledSize": 1766,
    "_Internal_WorkspaceResourceId": "/subscriptions/de5e410a-fa03-4be4-bcda-b068b4be7f52/resourcegroups/vo-dev-verified-orchestration/providers/microsoft.operationalinsights/workspaces/vo-dev-verified-orchestration-la",
    "_ResourceId": "/SUBSCRIPTIONS/DE5E410A-FA03-4BE4-BCDA-B068B4BE7F52/RESOURCEGROUPS/VO-DEV-VERIFIED-ORCHESTRATION/PROVIDERS/MICROSOFT.INSIGHTS/COMPONENTS/VO-DEV-VERIFIED-ORCHESTRATION-API-AI"
  },
  "EventProcessedUtcTime": "2026-02-10T02:21:26.1868933Z",
  "PartitionId": 0,
  "EventEnqueuedUtcTime": "2026-02-10T02:20:44.6800000Z"
}

GraphQL subscription​

Sample audit entry for a GraphQL subscription
{
  "log": {
    "AppRoleInstance": "dd1e06f6d167",
    "AppRoleName": "verifiable-orchestration-api.VerifiableOrchestration",
    "ClientBrowser": "Other",
    "ClientCity": "Sydney",
    "ClientCountryOrRegion": "Australia",
    "ClientIP": "0.0.0.0",
    "ClientModel": "Other",
    "ClientOS": "Linux 5.15.116.1-1.cm2",
    "ClientStateOrProvince": "New South Wales",
    "ClientType": "PC",
    "IKey": "edcfb4d0-521b-4b97-965e-af732a986b84",
    "ItemCount": 1,
    "Message": "API GRAPHQL Subscription",
    "EventTypeId": "VO0013",
    "EventType": "api.graphql.subscription",
    "Properties": {
      "logLevel": "audit",
      "request": "{\"origin\":\"https://green-sky-0f070b000.2.azurestaticapps.net\",\"requestId\":\"64a95a3c-287f-434d-876e-5f0ee81caa19\"}",
      "user": "{\"oid\":\"eafa1892-3c05-4e76-b62f-0643bbe1363a\",\"aud\":\"api://verified-orchestration-api-dev\",\"tid\":\"a4577872-4a36-4a93-9846-b29a1220ca89\",\"iss\":\"https://sts.windows.net/a4577872-4a36-4a93-9846-b29a1220ca89/\",\"scp\":\"VerifiedOrchestration\",\"roles\":[\"VerifiableCredential.Reader\",\"VerifiableCredential.Issuer\",\"VerifiableCredential.CredentialAdmin\",\"VerifiableCredential.PartnerAdmin\"]}",
      "service": "verified-orchestration-api",
      "type": "subscription",
      "eventTypeId": "VO0013",
      "eventType": "api.graphql.subscription",
      "operationName": "BackgroundJobEvent",
      "query": "subscription BackgroundJobEvent($where: BackgroundJobEventWhere) {\n  backgroundJobEvent(where: $where) {\n    jobId\n    jobName\n    event {\n      ... on BackgroundJobActiveEvent {\n        status\n        __typename\n      }\n      ... on BackgroundJobProgressEvent {\n        status\n        progress\n        __typename\n      }\n      ... on BackgroundJobErrorEvent {\n        status\n        error\n        __typename\n      }\n      ... on BackgroundJobCompletedEvent {\n        status\n        result\n        __typename\n      }\n      __typename\n    }\n    __typename\n  }\n}",
      "variables": "{\"where\":{\"jobId\":\"b966c5c5-caf8-40a8-aa51-578f57ba5c23\"}}",
      "result": "{}"
    },
    "ResourceGUID": "bf680fa7-1510-4f4f-b0cd-dfff4d505db3",
    "SDKVersion": "node18:otel1.15.2:dst1.0.0",
    "SeverityLevel": 1,
    "SourceSystem": "Azure",
    "TenantId": "129c3f1e-ba9b-45e5-b7f4-6df8048e3e90",
    "TimeGenerated": "2026-02-10T02:20:13.7520000Z",
    "Type": "AppTraces",
    "_BilledSize": 1985,
    "_Internal_WorkspaceResourceId": "/subscriptions/de5e410a-fa03-4be4-bcda-b068b4be7f52/resourcegroups/vo-dev-verified-orchestration/providers/microsoft.operationalinsights/workspaces/vo-dev-verified-orchestration-la",
    "_ResourceId": "/SUBSCRIPTIONS/DE5E410A-FA03-4BE4-BCDA-B068B4BE7F52/RESOURCEGROUPS/VO-DEV-VERIFIED-ORCHESTRATION/PROVIDERS/MICROSOFT.INSIGHTS/COMPONENTS/VO-DEV-VERIFIED-ORCHESTRATION-API-AI"
  },
  "EventProcessedUtcTime": "2026-02-10T02:21:26.1868933Z",
  "PartitionId": 1,
  "EventEnqueuedUtcTime": "2026-02-10T02:20:44.4510000Z"
}

Revocation of credentials​

Sample audit entry for revocation of credentials
{
  "log": {
    "AppRoleInstance": "dcc84c70813f",
    "AppRoleName": "verifiable-orchestration-api.VerifiableOrchestration",
    "ClientBrowser": "Other",
    "ClientCity": "Sydney",
    "ClientCountryOrRegion": "Australia",
    "ClientIP": "0.0.0.0",
    "ClientModel": "Other",
    "ClientOS": "Linux 5.15.116.1-1.cm2",
    "ClientStateOrProvince": "New South Wales",
    "ClientType": "PC",
    "IKey": "edcfb4d0-521b-4b97-965e-af732a986b84",
    "ItemCount": 1,
    "Message": "Issuance Credential Revoked",
    "EventTypeId": "VO0083",
    "EventType": "issuance.credential.revoked",
    "OperationId": "857b0fc01edfd449a1916c7414c44b57",
    "ParentId": "d998a046d4dcc4f5",
    "Properties": {
      "logLevel": "audit",
      "service": "verified-orchestration-api",
      "eventTypeId": "VO0083",
      "eventType": "issuance.credential.revoked",
      "issuance": "{\"id\":\"5CE8C5FF-AA39-44E9-B35A-63064E198F51\",\"createdAt\":\"2023-10-12T08:16:48.970Z\",\"updatedAt\":\"2023-11-03T03:38:58.198Z\",\"createdById\":\"545AA50F-CE56-4514-9479-1D6280A164D7\",\"updatedById\":\"80E40BEA-99EE-4BE0-B1B0-1729ADED782F\",\"requestId\":\"d972ec4e-241f-4770-b244-7edb3e65cd27\",\"contractId\":\"86F06732-096B-4B76-AF1C-5849310B8ACC\",\"identityId\":\"55AADFA5-A90C-49E4-BFEB-78C03933AE93\",\"issuedById\":\"545AA50F-CE56-4514-9479-1D6280A164D7\",\"issuedAt\":\"2023-10-12T08:16:48.970Z\",\"expiresAt\":\"2023-10-13T08:16:48.949Z\",\"isRevoked\":true,\"revokedAt\":\"2023-11-03T03:38:58.188Z\",\"revokedById\":\"80E40BEA-99EE-4BE0-B1B0-1729ADED782F\",\"__has_contract__\":true,\"__revokedBy__\":{\"id\":\"80E40BEA-99EE-4BE0-B1B0-1729ADED782F\",\"oid\":\"EAFA1892-3C05-4E76-B62F-0643BBE1363A\",\"tenantId\":\"A4577872-4A36-4A93-9846-B29A1220CA89\",\"email\":\"bobby.lat@makerx.com.au\",\"name\":\"Bobby Lat\",\"isApp\":false},\"__has_revokedBy__\":true}",
      "jobId": "795806a8-eb90-48e4-940d-453856b34bce",
      "jobData": "{\"userId\":\"80E40BEA-99EE-4BE0-B1B0-1729ADED782F\",\"issuanceIds\":[\"5CE8C5FF-AA39-44E9-B35A-63064E198F51\",\"ECD02E9A-0822-4A6F-9418-FC339D5072A6\"],\"requestId\":\"a8479c7a-9222-48fd-8da4-ed67427f3d71\"}",
      "trace_id": "857b0fc01edfd449a1916c7414c44b57",
      "span_id": "d998a046d4dcc4f5",
      "trace_flags": "01"
    },
    "ResourceGUID": "bf680fa7-1510-4f4f-b0cd-dfff4d505db3",
    "SDKVersion": "node18:otel1.15.2:dst1.0.0",
    "SeverityLevel": 1,
    "SourceSystem": "Azure",
    "TenantId": "129c3f1e-ba9b-45e5-b7f4-6df8048e3e90",
    "TimeGenerated": "2026-02-10T03:38:58.2200000Z",
    "Type": "AppTraces",
    "_BilledSize": 48851,
    "_Internal_WorkspaceResourceId": "/subscriptions/de5e410a-fa03-4be4-bcda-b068b4be7f52/resourcegroups/vo-dev-verified-orchestration/providers/microsoft.operationalinsights/workspaces/vo-dev-verified-orchestration-la",
    "_ResourceId": "/SUBSCRIPTIONS/DE5E410A-FA03-4BE4-BCDA-B068B4BE7F52/RESOURCEGROUPS/VO-DEV-VERIFIED-ORCHESTRATION/PROVIDERS/MICROSOFT.INSIGHTS/COMPONENTS/VO-DEV-VERIFIED-ORCHESTRATION-API-AI"
  },
  "EventProcessedUtcTime": "2026-02-10T03:39:38.2530839Z",
  "PartitionId": 1,
  "EventEnqueuedUtcTime": "2026-02-10T03:39:22.6580000Z"
}

Callback from Microsoft Entra ID Verified ID​

Sample audit entry for an issuance or presentation callback from Microsoft Entra ID Verified ID
{
  "log": {
    "AppRoleInstance": "dd1e06f6d167",
    "AppRoleName": "verifiable-orchestration-api.VerifiableOrchestration",
    "ClientBrowser": "Other",
    "ClientCity": "Sydney",
    "ClientCountryOrRegion": "Australia",
    "ClientIP": "0.0.0.0",
    "ClientModel": "Other",
    "ClientOS": "Linux 5.15.116.1-1.cm2",
    "ClientStateOrProvince": "New South Wales",
    "ClientType": "PC",
    "IKey": "edcfb4d0-521b-4b97-965e-af732a986b84",
    "ItemCount": 1,
    "Message": "Presentation Request Completed",
    "EventTypeId": "VO0062",
    "EventType": "presentation.request.completed",
    "OperationId": "8acb64a6fc6a4ee48a69517fa1c4b3be",
    "ParentId": "a108d3fa13056b76",
    "Properties": {
      "logLevel": "audit",
      "service": "verified-orchestration-api",
      "eventTypeId": "VO0062",
      "eventType": "presentation.request.completed",
      "presentation": "{\"id\":\"6fde5d9c-6c2f-4eb3-af5a-046f503427f7\",\"requestId\":\"b5d442c4-ec83-44a4-8de8-7490cb7e3f39\",\"requestedById\":\"1B07992D-5A18-419E-A007-2A77161B6F95\",\"identityId\":\"02EA0AA7-4AB3-496A-B0CD-7C4B186A5B0E\",\"requestedCredentialsJson\":\"[{\\\"type\\\":\\\"VerifiedContractor\\\",\\\"acceptedIssuers\\\":[\\\"did:ion:EiDKU...\\\"]},{\\\"type\\\":\\\"MediumRigidLicense\\\",\\\"acceptedIssuers\\\":[\\\"did:ion:EiD...\\\"]},{\\\"type\\\":\\\"LightRigidLicense\\\",\\\"acceptedIssuers\\\":[\\\"did:ion:EiDK...\\\"]}]\",\"presentedCredentialsJson\":\"[{\\\"issuer\\\":\\\"did:ion:EiDK...\\\",\\\"type\\\":[\\\"VerifiableCredential\\\",\\\"VerifiedContractor\\\"],\\\"credentialState\\\":{\\\"revocationStatus\\\":\\\"VALID\\\"},\\\"expirationDate\\\":\\\"2024-09-26T07:16:06.000Z\\\",\\\"issuanceDate\\\":\\\"2023-09-27T07:16:06.000Z\\\"},{\\\"issuer\\\":\\\"did:ion:EiDK...\\\",\\\"type\\\":[\\\"VerifiableCredential\\\",\\\"MediumRigidLicense\\\"],\\\"credentialState\\\":{\\\"revocationStatus\\\":\\\"VALID\\\"},\\\"expirationDate\\\":\\\"2024-09-26T07:10:49.000Z\\\",\\\"issuanceDate\\\":\\\"2023-09-27T07:10:49.000Z\\\"},{\\\"issuer\\\":\\\"did:ion:EiDK...\\\",\\\"type\\\":[\\\"VerifiableCredential\\\",\\\"LightRigidLicense\\\"],\\\"credentialState\\\":{\\\"revocationStatus\\\":\\\"VALID\\\"},\\\"expirationDate\\\":\\\"2024-09-26T07:11:03.000Z\\\",\\\"issuanceDate\\\":\\\"2023-09-27T07:11:03.000Z\\\"}]\",\"__issuances__\":[{\"id\":\"E36EABFA-E684-42F8-BA35-BD05C33119B0\"},{\"id\":\"0160883C-A574-4189-9D4A-B4FDE76FB8D6\"},{\"id\":\"D26B8A73-B20E-43A9-B820-288695F1548E\"}],\"__has_issuances__\":true,\"__partners__\":[],\"__has_partners__\":true,\"presentedAt\":\"2023-10-31T02:53:16.630Z\",\"issuanceIds\":[\"E36EABFA-E684-42F8-BA35-BD05C33119B0\",\"0160883C-A574-4189-9D4A-B4FDE76FB8D6\",\"D26B8A73-B20E-43A9-B820-288695F1548E\"],\"partnerIds\":[]}",
      "trace_id": "8acb64a6fc6a4ee48a69517fa1c4b3be",
      "span_id": "a108d3fa13056b76",
      "trace_flags": "01"
    },
    "ResourceGUID": "bf680fa7-1510-4f4f-b0cd-dfff4d505db3",
    "SDKVersion": "node18:otel1.15.2:dst1.0.0",
    "SeverityLevel": 1,
    "SourceSystem": "Azure",
    "TenantId": "129c3f1e-ba9b-45e5-b7f4-6df8048e3e90",
    "TimeGenerated": "2026-02-10T02:53:16.6520000Z",
    "Type": "AppTraces",
    "_BilledSize": 9866,
    "_Internal_WorkspaceResourceId": "/subscriptions/de5e410a-fa03-4be4-bcda-b068b4be7f52/resourcegroups/vo-dev-verified-orchestration/providers/microsoft.operationalinsights/workspaces/vo-dev-verified-orchestration-la",
    "_ResourceId": "/SUBSCRIPTIONS/DE5E410A-FA03-4BE4-BCDA-B068B4BE7F52/RESOURCEGROUPS/VO-DEV-VERIFIED-ORCHESTRATION/PROVIDERS/MICROSOFT.INSIGHTS/COMPONENTS/VO-DEV-VERIFIED-ORCHESTRATION-API-AI"
  },
  "EventProcessedUtcTime": "2026-02-10T02:54:22.8799487Z",
  "PartitionId": 0,
  "EventEnqueuedUtcTime": "2026-02-10T02:53:55.1120000Z"
}

OIDC Authentication Flow​

The following sample demonstrates a complete OIDC authentication flow with verifiable credential presentation. The entries are simplified to show only the key correlation identifiers and event information.

Events in an OIDC flow can be traced using various correlation IDs:

  • requestId - Links the initial request across early flow events
  • interactionId - Tracks the OIDC interaction from start to authorization
  • grantId - Identifies the granted session and token operations
  • presentationRequestId - Correlates the credential presentation within the flow
Simplified OIDC flow showing correlation IDs and event types
// 1. OIDC Interaction Started
{
  "TimeGenerated": "2026-02-10T05:06:57.089Z",
  "EventTypeId": "VO0030",
  "EventType": "oidc.interaction.started",
  "Message": "OIDC Interaction Started",
  "Properties": {
    "requestInfo": {
      "requestId": "73c7b14d-72cc-4d17-8f2b-e42aeb093225"
    },
    "oidc": {
      "interactionId": "eBLoSAFJ30BU_SB1FmY64xw1uzWxO2RiTIC3bfj5UQ7"
    }
  }
}

// 2. OIDC Presentation Created
{
  "TimeGenerated": "2026-02-10T05:06:58.362Z",
  "EventTypeId": "VO0040",
  "EventType": "oidc.presentation.created",
  "Message": "OIDC Presentation Created",
  "Properties": {
    "oidc": {
      "interactionId": "eBLoSAFJ30BU_SB1FmY64xw1uzWxO2RiTIC3bfj5UQ7"
    },
    "presentationRequestId": "24c77d8f-1f3a-448f-a7e8-eef3ad4f08ac"
  }
}

// 3. Presentation Request Created
{
  "TimeGenerated": "2026-02-10T05:06:58.362Z",
  "EventTypeId": "VO0060",
  "EventType": "presentation.request.created",
  "Message": "Presentation Request Created",
  "Properties": {
    "oidc": {
      "interactionId": "eBLoSAFJ30BU_SB1FmY64xw1uzWxO2RiTIC3bfj5UQ7"
    },
    "presentationRequestId": "24c77d8f-1f3a-448f-a7e8-eef3ad4f08ac"
  }
}

// 4. Presentation Request Retrieved (when user scans QR code)
{
  "TimeGenerated": "2026-02-10T05:07:22.607Z",
  "EventTypeId": "VO0061",
  "EventType": "presentation.request.retrieved",
  "Message": "Presentation Request Retrieved",
  "Properties": {
    "presentationRequestId": "24c77d8f-1f3a-448f-a7e8-eef3ad4f08ac"
  }
}

// 5. OIDC Interaction Ended
{
  "TimeGenerated": "2026-02-10T05:07:34.356Z",
  "EventTypeId": "VO0031",
  "EventType": "oidc.interaction.ended",
  "Message": "OIDC Interaction Ended",
  "Properties": {
    "oidc": {
      "interactionId": "eBLoSAFJ30BU_SB1FmY64xw1uzWxO2RiTIC3bfj5UQ7"
    }
  }
}

// 6. OIDC Authorization Succeeded
{
  "TimeGenerated": "2026-02-10T05:07:34.418Z",
  "EventTypeId": "VO0033",
  "EventType": "oidc.authorization.succeeded",
  "Message": "OIDC Authorization Succeeded",
  "Properties": {
    "oidc": {
      "interactionId": "eBLoSAFJ30BU_SB1FmY64xw1uzWxO2RiTIC3bfj5UQ7",
      "grantId": "KEu1P0GqQIj_aH1rbX7U6XTNIbY04RUSxu2btLVMDFw"
    }
  }
}

// 7. OIDC Grant Succeeded (token exchange)
{
  "TimeGenerated": "2026-02-10T05:07:35.222Z",
  "EventTypeId": "VO0035",
  "EventType": "oidc.grant.succeeded",
  "Message": "OIDC Grant Succeeded",
  "Properties": {
    "oidc": {
      "grantId": "KEu1P0GqQIj_aH1rbX7U6XTNIbY04RUSxu2btLVMDFw"
    }
  }
}