A random string used to mitigate CSRF attacks in OAuth flows. This value is validated when processing the authentication response.