node.js - About arbitrary data -
what arbitrary data ? found here https://www.dropbox.com/developers/core/docs#oa2-authorize
state 200 bytes of arbitrary data passed redirect uri. parameter should used protect against cross-site request forgery (csrf). see sections 4.4.1.8 , 4.4.2.5 of oauth 2.0 threat model spec.
so types of value send state
? using nodejs .
"arbitrary data" means anything. string, number, binary data, whatever.
since it's used csrf token, needs unpredictable value that's associated user's session. here guidelines on csrf tokens.
Comments
Post a Comment