Fix session swapping vulnerability: upgrade OAuth state parameter to MUST#1

Closed

Copilot wants to merge 2 commits intomainfrom

copilot/review-authz-security-issues

Commits on Feb 28, 2026

Initial plan
Copilot
committed
Fix session swapping/fixation vulnerability: upgrade state parameter to MUST and add Session Integrity section

Copilot
and
tnorimat
committed