consentNonce property

String? consentNonce
getter/setter pair

A one-time, randomly generated value that validates the entire consent flow is handled by a single user, avoiding CSRF attacks.

It must be submitted with the FinalizeCredentials request to complete the OAuth exchange. This will always be present. Implemented per RFC 6819 Section 5.3.5.

Output only.

Implementation

core.String? consentNonce;