Authorization transactions (state, nonce, PKCE verifier) between the redirect to the OP and the
callback. Keyed by state; take() removes the entry as it reads it, so each transaction — and
therefore each authorization response — can be used exactly once.
Uses sessionStorage when present (per tab, cleared when the tab closes, survives the round trip to
the OP) and memory otherwise.
Authorization transactions (state, nonce, PKCE verifier) between the redirect to the OP and the callback. Keyed by
state;take()removes the entry as it reads it, so each transaction — and therefore each authorization response — can be used exactly once.Uses sessionStorage when present (per tab, cleared when the tab closes, survives the round trip to the OP) and memory otherwise.