Add a CSRF token to the state parameter

[robotdan]

If NodeBB supports a CSRF token, we can grab it or generate a new one and pass it along in the state parameter.

[julianlam]

@robotdan Yes, we do send one in:

https://github.com/NodeBB/NodeBB/blob/fb363957d1ff8ac63c0a50aaeeb2dd86975876bc/src/routes/authentication.js#L96-L99

We pass in a csrf token in state and verify that the value is returned in the state param in the query string at the callback URL handler.

[robotdan]

Thanks @julianlam !

[julianlam]

Just a tad late on the reply 🙂