Remove unnecessary state parameter when exchanging code for token in OAuth2 (#9496)

This commit is contained in:
yaoweiprc
2025-12-19 09:48:16 +08:00
committed by GitHub
parent 2899e840dc
commit 9f7bd0c4a4

View File

@@ -195,7 +195,6 @@ export const getOAuth2Token = async (
{ name: 'grant_type', value: GRANT_TYPE_AUTHORIZATION_CODE },
{ name: 'code', value: redirectParams.code },
...insertAuthKeyIf('redirect_uri', redirectUrl),
...insertAuthKeyIf('state', authentication.state),
...insertAuthKeyIf('audience', authentication.audience),
...insertAuthKeyIf('resource', authentication.resource),
...insertAuthKeyIf('code_verifier', codeVerifier),