The state field validate may be invalid

<img width="1017" alt="image" src="https://github.com/user-attachments/assets/76633dac-8497-4a68-ab1b-35a86b90a542" />

That cannot validate state, because the sess from the req,  right？