jaredhanson / jaredhanson/oauth2orize
Use of state parameter in authorisation code flow
Open
- Dominant language
- JavaScript
- Stars
- 3.5k
- Forks
- 472
- PR merge metrics
- No merged PRs in 30d
Description
It seems like the state parameter is supported in the implementation, but not sure how it is used in the AS side. Could you give an example when granting code, how the server can callback also the state value?
Contributor guide
Research direction
Start by reviewing the authorization-code flow in the authorization-server implementation and trace how the state parameter is handled when granting a code. Document an example showing how the server returns the state value in its callback; the issue does not name a file or test to run.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, authentication
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100