<html><body><div>Hi,</div><div><br></div><div>I have a strange behaviour with an invalid state param.</div><div><br></div><div>The server writes the following log, which is correct:</div><div>WARN [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-17) No state cookie</div><div><br></div><div>After that I receive a 400 error in my browser with the following URL:</div><div><a href="https://pcc811.hrms.ch:9443/index.html?code=Q-NK1wwTdqja5XU8lUkNkZnEy40ZdCx2FjC6qslukdc.9ef6b6f7-b888-4a59-b34c-7af6d490614b&state=dc-4d82-b0c9-d434b917dfce">https://pcc811.hrms.ch:9443/index.html?code=Q-NK1wwTdqja5XU8lUkNkZnEy40ZdCx2FjC6qslukdc.9ef6b6f7-b888-4a59-b34c-7af6d490614b&state=dc-4d82-b0c9-d434b917dfce</a></div><div><br></div><div>I can load this URL again and than I am successfully logged in.</div><div><br></div><div>Is this the correct behaviour?</div><div><br></div><div>Best</div><div>Michael</div></body></html>