I wasn't comfortable with just commenting out code that signalled an error (as in @Dipesh Shihora's answer), so I dug a little further. I discovered that the error is caused (in my case at least) by a problem with sessions.
My dev server is set up according to the instructions given in this answer. Basically, I am "spoofing" Google by using a callback URL which looks like a publicly-accessible address.
The InvalidStateException
problem was appearing for me because I was visiting my login page at http://localhost/login
and redirecting to Google's login page, which then returned me to http://myapp.example.com/callback
. The problem is that the session key is stored in a cookie - it was originally a cookie for http://localhost
, but when I redirected to a different URL, the cookie (and hence the session key) was inaccessible. Thus, the session state
value was non-existent after the update and the exception was thrown.
The solution? Ensure that all my browsing on the dev machine was done at http://myapp.example.com
and not at http://localhost
.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…