Keycloak.js createLoginUrl state parameter

Securing applications
1

Hi,

I want to use the state parameter as per specs as we are not allowed to use query parameters in redirect URL’s. The suggestion is to store state based on the state parameter as per

There is no real mention of this in the keycloak documentation, but looking at the source keycloak.js line 995, I found

	    kc.createLoginUrl = function(options) {
	        var state = createUUID();
	        var nonce = createUUID();

the adapter is using the state parameter…

I guess that is ok - however how can I get this parameter before I call

keycloak.init(params)

So that I can associate some state with the value?..

Or any other suggestion how to restore state after keycloak returns back to the client?

Thank you