StateMismatchError

What is StateMismatchError

MSAL verifies the state returned by the server with the original state as a security protocol. In case the state is different this exception is thrown.

Known issues

For desktop apps when using a long Facebook Id observed to be 33 characters or more for example somelongemailaddressfortest@gmail.com, this exception is thrown. Embedded web view in desktop apps uses Internet Explorer and it truncates the URL to 2083 characters which causes the value of state parameter in the URL to be truncated. This causes the returned state to be different from the original state. To mitigate please use .WithUseEmbeddedWebView(false) and refer to https://aka.ms/msal-net-os-browser.

References

• https://support.microsoft.com/en-us/help/208427/maximum-url-length-is-2-083-characters-in-internet-explorer