kayx23 commented on issue #9131:
URL: https://github.com/apache/apisix/issues/9131#issuecomment-1823863118

   Not sure what exactly went wrong with your configuration, but the error 
message suggests your OP did not return **the same state** that APISIX 
generated. It is expected to receive the same state to ensure the response 
integrity; or else there could be a CSRF. Some relevant code: 
https://github.com/zmartzone/lua-resty-openidc/blob/master/lib/resty/openidc.lua#L1090-L1096


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to