#dev 2021-06-05

2021-06-05 UTC

Zegnat Putting state in the URL is fine in a lot of cases, it is what the state parameter is for in OAuth/IndieAuth :) But you would probably want to sketch it out just to make sure someone cannot use it to trick you into sending out an approve