State string in Url is it secure?

Hello,
Want to figure out is it secure to show state string in url as param? or need to hide it ?

Hi @sargerras,

Welcome to the Community!

You can see in our documentation that state is included in the url as a param when you are calling the authorize endpoint. Here is the example:

https://auth0.com/docs/api/authentication?http#authorization-code-flow

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.