State parameter length issue when working with spring security oauth2

[pragkent]

The default state generator of spring security oauth2 library generates state with length of 6 which is less than the MinParameterEntropy(which is 8). check code here

I wonder that if it's possible to adjust MinParameterEntropy? or make it configurable?

[aeneasr]

Making it configurable would be an option

[pragkent]

Any thought of how to implement it?
My first thought was making MinParameterEntropy a variable instead of a const.

[aeneasr]

Yeah, just add a Fosite.GetMinParameterEntropy() function which returns either MinParameterEntropy, or - if set - the value of e.g. Fosite.MinParameterEntropy which can be set when initializing the struct.

[mitar]

I made #461 to address this.