jaredhanson / jaredhanson/oauth2orize

Use of state parameter in authorisation code flow

Open
#190 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.5k
Forks
472
PR merge metrics
No merged PRs in 30d

Description

It seems like the state parameter is supported in the implementation, but not sure how it is used in the AS side. Could you give an example when granting code, how the server can callback also the state value?

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the authorization-code flow in the authorization-server implementation and trace how the state parameter is handled when granting a code. Document an example showing how the server returns the state value in its callback; the issue does not name a file or test to run.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
api, authentication
Issue type
Documentation
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.