Antonin Messinger

Hi! Thanks for looking into this. In the mean time, I've gone ahead and made a working though naive implementation of a solution introducing an additional `send_state` config parameter. I...

Thank you @stanhu for this! The fix you're proposing allows me to complete my scenario of a stateless user agent which is not able to forward the `state` parameter for...

I think your interpretation of the specs is correct. Maybe `require_state` could then be renamed `send_state` since, as I understand, the action of checking the `state` parameter would become a...

hi @syakovyn, that's fine by me since I've been doing it on [my fork](https://github.com/amessinger/omniauth_openid_connect/compare/master...amessinger:omniauth_openid_connect:add-option-to-prevent-sending-state-parameter?expand=1) :wink: specifically I do agree that sending the state should done by default.

Just tested the changes shipped in #182. Works like a charm on my local environment (didn't have to change a thing appart from the `Gemfile` since the API is the...