...
| Name | Required | Description |
| response_type | Yes | Always set to code. |
| redirect_uri | Yes | URI where the system sends the response. Must be URL encoded if it's sent in the query parameters. |
| client_id | Yes | App Key as generated by the system at registration time. |
| state | No, but recommendedYes | Parameter to be used by the App to verify if the response received from the system is valid. Server-wise, it does not matter how the state parameter is generated. |
...
| Note |
|---|
| We strongly advise you to send the state parameter in the request and validate/invalidate the response received from the system, if the state does not correspond to the one initially sent. |
...
Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 4.0 International.