Add option to avoid redirect_state parameter. Refs #386

social_auth/backends/__init__.py

@@ -660,14 +660,18 @@ class BaseOAuth2(BaseOAuth):
     RESPONSE_TYPE = 'code'
     SCOPE_VAR_NAME = None
     DEFAULT_SCOPE = None
+    REDIRECT_STATE = True
 
     def state_token(self):
         """Generate csrf token to include as state parameter."""
         return get_random_string(32)
 
     def get_redirect_uri(self, state):
         """Build redirect_uri with redirect_state parameter."""
-        return url_add_parameters(self.redirect_uri, {'redirect_state': state})
+        uri = self.redirect_uri
+        if self.REDIRECT_STATE:
+            uri = url_add_parameters(uri, {'redirect_state': state})
+        return uri
 
     def auth_url(self):
         """Return redirect url"""

social_auth/backends/google.py

@@ -195,6 +195,7 @@ class GoogleOAuth2(BaseOAuth2):
     SETTINGS_SECRET_NAME = 'GOOGLE_OAUTH2_CLIENT_SECRET'
     SCOPE_VAR_NAME = 'GOOGLE_OAUTH_EXTRA_SCOPE'
     DEFAULT_SCOPE = GOOGLE_OAUTH2_SCOPE
+    REDIRECT_STATE = False
 
     def user_data(self, access_token, *args, **kwargs):
         """Return user data from Google API"""