Zoho Security Komunitas

OAuth redirects and service state
Is it possible for a redirect URI to convey some additional state that my service is waiting on? I wish to use this state to convey a request id so that my service only accepts the grant tokens that it expects. Here is a sample request made to my browser - note the state parameter: https://accounts.zoho.com/oauth/v2/auth?scope=ZohoCRM.modules.leads.create&client_id=<my-client-id>&response_type=code&access_type=offline&redirect_uri=https://<my-service>/api/auth/zoho-crm?state%3D1423b1df-e024-4dc6-bf06-83f4083b7dd4
How Zoho protects you from breached passwords?
Cyber attacks, password breaches, and hacked online accounts have been recurring news for quite some time now. In the last decade alone, dozens of companies ranging from social media giants like Facebook and LinkedIn to software tycoons like Adobe became major victims of cyber attacks. Zoho is constantly monitoring these security-related incidents closely and have added an extra layer of security to protect your data. One such feature is the Breached Passwords Check. What are breached passwords?

OAuth redirects and service state