Is it possible for Ktor Sever and Oauth module to ...

# ktor

[Dejan Lozanovic]

Is it possible for Ktor Sever and Oauth module to use custom states?

[simon.vergauwen]

What do you mean custom state? 🤔

[Aleksei Tirman [JB]]

You can implement the NonceManager interface and pass it to the nonceManager property of the OAuth2ServerSettings to override the nonce generation which is used for the state:

install(Authentication) {
    oauth {
        // ...
        providerLookup = {
            OAuthServerSettings.OAuth2ServerSettings(
                // ...
                nonceManager = object : NonceManager {
                    override suspend fun newNonce(): String {
                        return "my-nonce"
                    }

                    override suspend fun verifyNonce(nonce: String): Boolean {
                        return true
                    }
                },
                // ...
            )
        }
        // ...
    }
}

[Dejan Lozanovic]

@simon.vergauwen https://ktor.io/docs/server-oauth.html#flow I would like to set state parameter and read it in callback