create_permission_url does not accept state parameter

[drewish]

The readme mentions that we should be providing and checking the state parameter:

• state – Optional – A randomly selected value provided by your application, which is unique for each authorization request. During the OAuth callback phase, your application must check that this value matches the one you provided during authorization. This mechanism is important for the security of your application.

• Ensure the provided state is the same one that your application provided to Shopify during Step 3.

But surprisingly the create_permission_url method does not accept a state parameter.

[JamesDullaghan]

Is this going to be merged anytime soon?

[juliantrueflynn]

Following up on this, it would be really nice to add for security reasons and have it from official API gem. For now, I just rolled my own create_permission_url method

[drewish]

I’m no longer using the gem so someone else would need to take over any changes.