What the host remembers between the redirect out and the callback back.
The verifier and the nonce never leave the object; the browser carries state only, so a reader of the redirect gets the one value that is useless without the other two.
state
where to send the browser once the login lands
What the host remembers between the redirect out and the callback back.
The verifier and the nonce never leave the object; the browser carries
stateonly, so a reader of the redirect gets the one value that is useless without the other two.