Opaque value used to maintain state between the request and response.
This property optionally holds a string value which will be returned by the authorization server with the response.
Any value may be specified here and it will be returned exactly as it was sent. This can be used to maintain state within the application, and also may be used for security purposes (for instance to prevent Cross-Site Request Forgery). The contents of this property are treated as an opaque value.