Function randomState

internal/oauth/oauth.go:96–102

randomState returns a cryptographically random URL-safe string used as the OAuth state parameter (CSRF protection) and elicitation IDs.

()

// randomState returns a cryptographically random URL-safe string used as the
// OAuth state parameter (CSRF protection) and elicitation IDs.
func randomState() (string, error) {
	b := make([]byte, 16)
	if _, err := rand.Read(b); err != nil {
		return "", fmt.Errorf("generating random state: %w", err)
	}
	return base64.RawURLEncoding.EncodeToString(b), nil
}