generateAuthUrl doesn't pass state token

[rodrigogoncalves]

Should the generateAuthUrl method from OAuth2Client accept a state param in order to generate an auth url that provides anti-forgery unique session token validation?

The implementation flow suggested by Google (link) uses an auth url with the state param.

[murgatroid99]

As far as I can tell, that is already supported. If you call generateAuthUrl({state: state}), then that should be propagated to the output. The same is true of any other parameter that can go into the auth library.

[rodrigogoncalves]

It is true, that parameter is sent back in the response. It was just undocumented.

[rodrigogoncalves]

Please @JustinBeckwith, do not assign this to me.