Canvas Studio OAuth authorization does not send `state` parameter to callback

Community Member

I am working on an integration that uses the Canvas Studio API. In testing this API I have encountered an issue that the `state` query parameter which is passed to the authorization endpoint (`/api/public/oauth/authorize`), is not returned to the callback after a successful authorization on the Canvas Studio side. This parameter is a standard part of the OAuth spec [1] and is used to prevent CSRF. We also use it to persist information about the origin of the request.