Add ability to pass custom state param

lib/omniauth/amazon/version.rb

@@ -1,5 +1,5 @@
 module OmniAuth
   module Amazon
-    VERSION = "1.0.1"
+    VERSION = "1.1.0"
   end
 end

lib/omniauth/strategies/amazon.rb

@@ -30,6 +30,21 @@ def build_access_token
         client.auth_code.get_token(verifier, token_params)
       end
 
+      def query_string
+        super.gsub(/\?state=[^&]*&?/, '')
+      end
+
+      def authorize_params
+        options.authorize_params[:state] = state
+        params = options.authorize_params.merge(options_for("authorize"))
+        if OmniAuth.config.test_mode
+          @env ||= {}
+          @env["rack.session"] ||= {}
+        end
+        session["omniauth.state"] = params[:state]
+        params
+      end
+
       uid { raw_info['Profile']['CustomerId'] }
 
       info do
@@ -57,6 +72,12 @@ def raw_info
         params = {:params => { :access_token => access_token.token}}
         @raw_info ||= access_token.client.request(:get, url, params).parsed
       end
+
+      private
+
+      def state
+        request.params["state"] || SecureRandom.hex(24)
+      end
     end
   end
 end

omniauth-amazon.gemspec

@@ -6,8 +6,8 @@ require 'omniauth/amazon/version'
 Gem::Specification.new do |spec|
   spec.name          = "omniauth-amazon"
   spec.version       = OmniAuth::Amazon::VERSION
-  spec.authors       = ["Stafford Brunk"]
-  spec.email         = ["[email protected]"]
+  spec.authors       = ["Stafford Brunk", "Lenart Rudel"]
+  spec.email         = ["[email protected]", "[email protected]"]
   spec.description   = %q{Login with Amazon OAuth2 strategy for OmniAuth 1.0}
   spec.summary       = %q{Login with Amazon OAuth2 strategy for OmniAuth 1.0}
   spec.homepage      = "https://github.com/wingrunr21/omniauth-amazon"
@@ -21,9 +21,9 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'omniauth', '~> 1.0'
   spec.add_dependency 'omniauth-oauth2', '~> 1.1'
 
-  spec.add_development_dependency "bundler", "~> 1.3"
+  spec.add_development_dependency "bundler"
   spec.add_development_dependency "rake"
-  spec.add_development_dependency 'rspec', '~> 2.13'
+  spec.add_development_dependency 'rspec', '>= 2.13'
   spec.add_development_dependency 'rack-test'
   spec.add_development_dependency 'simplecov'
   spec.add_development_dependency 'webmock'

spec/omniauth/strategies/amazon_spec.rb

@@ -26,4 +26,10 @@
       expect(subject.callback_path).to eq('/auth/amazon/callback')
     end
   end
+
+  describe '#scope' do
+    it 'passes custom state to Amazon site'
+    it 'generates random state value when one is not explicitly provided'
+    it 'strips state from callback_url query params'
+  end
 end