Basic - 3.2.4.1 state validation not specified

Issue #74 resolved
jbufu
created an issue

The validation for the state parameter is underspecified: - it should be made clear who is supposed to perform it (the client) - and how (exact string match with the string sent in the authorization request?)