Title: Bug: Static `state` parameter
Last modified: February 2, 2022

---

# Bug: Static `state` parameter

 *  Resolved [oliverrahner](https://wordpress.org/support/users/oliverrahner/)
 * (@oliverrahner)
 * [4 years, 4 months ago](https://wordpress.org/support/topic/bug-static-state-parameter/)
 * The OAuth state parameter is being set to a static value.
    According to the [OAuth2 RFC](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1)
   this should really be a dynamic, nonce-style value.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fbug-static-state-parameter%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [unsolvedcontriver](https://wordpress.org/support/users/unsolvedcontriver/)
 * (@unsolvedcontriver)
 * [4 years, 4 months ago](https://wordpress.org/support/topic/bug-static-state-parameter/#post-15323517)
 * Hi,
 * Thank you for reaching out to us.
 * Can you please let me know which application you are referring to?
 * Please let us know if you have any other questions, you can also contact us by
   e-mail from the plugin support form or by e-mail at the e-mail address provided
   on our website. This way we will be able to help you much more efficiently.
 * Thanks
 *  Thread Starter [oliverrahner](https://wordpress.org/support/users/oliverrahner/)
 * (@oliverrahner)
 * [4 years, 4 months ago](https://wordpress.org/support/topic/bug-static-state-parameter/#post-15323665)
 * Hi,
 * I have linked the relevant source code line above, this one: [https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/trunk/class-mo-oauth-widget.php#L210](https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/trunk/class-mo-oauth-widget.php#L210)
 * I just noticed that this post is in the wrong plugin’s support forum, but it 
   is really hard to differentiate between the three different OAuth clients that
   you provide 😉

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Bug: Static `state` parameter’ is closed to new replies.

 * ![](https://ps.w.org/miniorange-login-openid/assets/icon-128x128.gif?rev=2655719)
 * [miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)](https://wordpress.org/plugins/miniorange-login-openid/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/miniorange-login-openid/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/miniorange-login-openid/)
 * [Active Topics](https://wordpress.org/support/plugin/miniorange-login-openid/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/miniorange-login-openid/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/miniorange-login-openid/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [oliverrahner](https://wordpress.org/support/users/oliverrahner/)
 * Last activity: [4 years, 4 months ago](https://wordpress.org/support/topic/bug-static-state-parameter/#post-15323665)
 * Status: resolved