For me, this issue goes away if I don’t set the state, so it seems like that “state” property is used by Lock.js~11, so it can no longer be used for a callback URL (for example). As long as I don’t set the “state” property on initializing lock, authentication works.