Build the URL a request reached from the deployment's configured origin
(scheme + host + port, e.g. new URL(issuer).origin) and the raw request
target (Express req.originalUrl).
Express reports an origin-form target, which always starts with /. An
absolute-form target (GET http://x/ HTTP/1.1, legal per RFC 9112 §3.2)
would not, and must not be spliced into the authority position — it is
prefixed with / so it stays a path.
Build the URL a request reached from the deployment's configured
origin(scheme + host + port, e.g.new URL(issuer).origin) and the raw requesttarget(Expressreq.originalUrl).Express reports an origin-form target, which always starts with
/. An absolute-form target (GET http://x/ HTTP/1.1, legal per RFC 9112 §3.2) would not, and must not be spliced into the authority position — it is prefixed with/so it stays a path.