Glossary: Web App Security and Authentication

State

A random OAuth value saved in a cookie before sign-in and compared at the callback, tying it to the browser that started it.