Variable: skipStateCheck

August 29, 2025 · View on GitHub

💗 Help the project

Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.

• const skipStateCheck: typeof oauth.skipStateCheck = oauth.skipStateCheck

Warning


This option has security implications that must be understood, assessed for applicability, and accepted before use.

Use this as a value for state check state parameter options to skip the state value check. This should only be done if the state parameter value used is integrity protected (and its integrity and expiration is checked) and bound to the browsing session. One such mechanism to do so is described in an I-D draft-bradley-oauth-jwt-encoded-state-09.

Deprecated

Marked as deprecated only to make it stand out as something you shouldn't use unless you've assessed the implications.