Ability to customize state param (for redirecting a user to the original URL after login)

[aaronshaf]

At let state = this.generateState(); one could store some custom state or the current pathname.

[shamsup]

According to Google and auth0, the best practice for the state param in OAuth2 is using a CSRF token instead of guessable parameters. You can store any other custom information in the session itself.