How do I sent a state parameter in the authorization request?

[blake-mealey]

I'm struggling to find a built-in way to send a state parameter in the authorization request. My provider (Okta) requires it for the implicit flow.

I am able to workaround this by manually adding the query parameter to the URL:

...

const nonce = generators.nonce()
const state = generators.state()

const loginUrl =
  client.authorizationUrl({
    scope: 'openid email profile',
    response_mode: 'form_post',
    nonce
  }) + `&state=${state}`

...

const params = client.callbackParams(ctx.req)
const tokenSet = await client.callback(ctx.url, params, {
  nonce,
  state
})

This feels pretty hacky and I know I must be missing something but I haven't found any related properties in the docs.

[panva]

[blake-mealey]

🤦‍♂️ Thank you.

Would you consider adding state as an optional parameter in the options object for TS users? I can open a PR if you'd like

[panva]

sure, seems like it was omitted by mistake.