来源：https://stackoverflow.com/questions/35165793/what-prevents-the-state-parameter-in-openid-connect-server-flow 标签 security authentication csrf openid-connect oauth2
