intridea/omniauth-oauth2 — pull request #23 by jekhor (2012-08-10 12:29:18+00:00)
Title: Add option for disabling CSRF protection for defective providers.

Some OAuth2 providers ignore 'state' parameter, and don't return it back
to the client. CSRF protection with this parameter is impossible for such
services.

Add a boolean option :provider_ignores_state for disable CSRF protection
for individual strategies.

Signed-off-by: Yauhen Kharuzhy