[Feature Request] Allow `state` parameter to be `null` for AuthorizationTokenRequest

Open weihenglim opened this issue 2 years ago • 1 comments

The Android AppAuth library allows the state parameter to be optional by setting it to null (https://github.com/openid/AppAuth-Android/issues/615). This is useful for authorizing against a server that does not support the state parameter (e.g. Singpass, see: https://github.com/MaikuB/flutter_appauth/issues/436).

Currently this wrapper does not provide the option to set the state parameter and it defaults to a randomly generated value, which causes a Response state param did not match request state error when the server doesn't return a state parameter.

It would be helpful if we can have an option to explicitly set the state parameter to null to make it optional. Any possible workarounds are also welcomed, thank you.

Oct 05 '23 06:10 weihenglim

Don't have a workaround for you and if you're after this feature then you would need to submit a PR for it

Oct 05 '23 06:10 MaikuB