2 ms·
It's my understanding that the OAuth "state" parameter nonce is generated and stored and validated on the client, not the server.
by modeless 2y ago
It's my understanding that the OAuth "state" parameter nonce is generated and stored and validated on the client, not the server.
- loa_in_ 2y agoYou're right. sorry. There goes me not refreshing my memory about the flow.