Skip to content

Glossary: Identity and Access Management

state

A random value the app sends at the start of the OAuth flow and checks when the code comes back, so it accepts only answers to its own requests.

Where the book teaches it

Related terms

PKCE (Proof Key for Code Exchange)authorization code flow