[elvisroy27]

Summary

• Validate state in OAuth error responses.
• Reject error responses with mismatched state.
• Add tests for state validation.

Testing

• Added tests for matching and mismatched state.

[elvisroy27]

Hi maintainers, I've completed the changes and all commits are verified. Could someone please review PR #1755 and approve the pending workflows? Thank you!

[elvisroy27]

Hi maintainers,

Could someone please review PR #1755 and approve the pending GitHub Actions workflows (Snyk, Build and Test, CodeQL, and BrowserStack)?

The workflows are currently awaiting maintainer approval. I'd appreciate it if they could be approved so CI checks can run and the PR can move forward.

Thank you!

[elvisroy27]

Hi maintainers,

I investigated the Claude Code PR Review #350 startup failure.

The workflow calls "auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main", but the repository Actions policy blocks "auth0/auth0-ai-pr-analyzer-gh-action@*".

Could a repository administrator allow this reusable workflow in the Actions policy, or update/disable the caller workflow if it is no longer needed?

This is a repository Actions policy issue, not a code failure in PR #1755.

Thank you.