The state parameter points to a record in an internal database where we track the status of the authorization transaction. Whenever the transaction completes, or after a set time passes, the record is deleted from the internal database.
Is the value for “set time passes” documented anywhere, or do we know what it is? And is it configurable?
I found an internal reference saying it is tied to the Inactivity timeout settings. I tested it and had some success limiting the length of state’s ttl. I think the issue would be that this settings has greater effect than just the state’s ttl.