node-openid-client，如何解决“未定义的状态”和"callbackParams不匹配“等错误

const { Issuer, custom } = require('openid-client');

(async () => {
  const issuer = await Issuer.discover('https://your-oidc-provider.com');
  const client = new issuer.Client({
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    redirect_uris: ['https://your-app.com/callback'],
  });

  const params = {
    scope: 'openid profile',
    response_type: 'code',
    redirect_uri: 'https://your-app.com/callback',
    state: 'random-state-value', // 生成一个随机状态值
  };

  const authorizationUrl = client.authorizationUrl(params);
  console.log('Authorization URL:', authorizationUrl);

  // 处理回调
  app.get('/callback', async (req, res) => {
    const { code, state } = req.query;
    if (state !== 'random-state-value') {
      return res.status(400).send('Invalid state parameter');
    }

    try {
      const tokenSet = await client.callback('https://your-app.com/callback', { code, state });
      console.log('Token Set:', tokenSet);
      res.send('Authentication successful');
    } catch (err) {
      console.error(err);
      res.status(500).send('Authentication failed');
    }
  });
})();

const { Issuer, custom } = require('openid-client');

(async () => {
  const issuer = await Issuer.discover('https://your-oidc-provider.com');
  const client = new issuer.Client({
    client_id: 'your-client-id',
    client_secret: 'your-client-secret',
    redirect_uris: ['https://your-app.com/callback'], // 确保回调 URL 完全匹配
  });

  const params = {
    scope: 'openid profile',
    response_type: 'code',
    redirect_uri: 'https://your-app.com/callback', // 确保重定向 URI 完全匹配
    state: 'random-state-value',
  };

  const authorizationUrl = client.authorizationUrl(params);
  console.log('Authorization URL:', authorizationUrl);

  // 处理回调
  app.get('/callback', async (req, res) => {
    const { code, state } = req.query;
    if (state !== 'random-state-value') {
      return res.status(400).send('Invalid state parameter');
    }

    try {
      const tokenSet = await client.callback('https://your-app.com/callback', { code, state });
      console.log('Token Set:', tokenSet);
      res.send('Authentication successful');
    } catch (err) {
      console.error(err);
      res.status(500).send('Authentication failed');
    }
  });
})();