New issue 969: Need clarity on session state variable https://bitbucket.org/openid/connect/issue/969/need-clarity-on-session-state-variable Anonymous: Is there any specific purpose for including client-id in session_state variable generation? Responsible: justinricher