Optional
The bare anti-CSRF token, compared against the decoded state query parameter on callback - not the full value sent to the provider, which additionally carries an encrypted returnTo (see encodeOAuthState/decodeOAuthState in utils.ts).
state
returnTo
The bare anti-CSRF token, compared against the decoded
statequery parameter on callback - not the full value sent to the provider, which additionally carries an encryptedreturnTo(see encodeOAuthState/decodeOAuthState in utils.ts).