I'm using scribe for oauth. In authorization url, I'm passing 'state' parameter with a token to identify the user during callback request.
authorizationUrl = EVERNOTE_SERVICE.getAuthorizationUrl(requestTokenObject.getToken()); log.info("Auth url : " + authorizationUrl); redirect(authorizationUrl + "&state=" + token);
But in the callback, I'm not receiving the "state" parameter. I'm only receiving "oauth_token" and "oauth_verifier" in the callback. I'm expecting this has to work and everyone else should be doing this already. What am I missing?
Evernote currently uses OAuth1.0, it looks like the state
parameter was added in OAuth2. OAuth1.0 does not have a state parameter.