El documento RFC 6749 (The OAuth 2.0 Authorization Framework), apartado 4.1.1 (Authorization Request) indica que es recomendado utilizar el parámetro state.

  state
         RECOMMENDED.  An opaque value used by the client to maintain
         state between the request and callback.  The authorization
         server includes this value when redirecting the user-agent back
         to the client.  The parameter SHOULD be used for preventing
         cross-site request forgery as described in Section 10.12.

https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1

https://datatracker.ietf.org/doc/html/rfc6749#section-10.12