3 ms·
A nonce, kept in an extra query parameter named "state". https://stackoverflow.com/a/77029859 https://stackoverflow.com/a/77029859 has some of the gory details
by chuckadams 2y ago
A nonce, kept in an extra query parameter named "state". https://stackoverflow.com/a/77029859 https://stackoverflow.com/a/77029859 has some of the gory details (myself, I just hash the session's CSRF token to generate a state token)