Login after state parameter expires

Hi @scollins,

Welcome to the Auth0 Community,

If the end-user makes no contact with the Authorization server the state parameter will get automatically invalidated by Auth0 after a maximum of 1 hour of inactivity, so you are correct with that. Unfortunately the value of the state can not be changed since it is an internal artifact set this way for security reasons, as mentioned in our Knowledge article.
More information can be found under this article as well.

Thank you for your post and i hope this helped.
Best regards,
Remus