Does MSAL.js handle nonce and state validation by default?

[anhhnguyen206]

Hi,

Does MSAL.js handle nonce and state validation? I'm assuming yes because I can see nonce and state values in redirect request and I can also find a matched nonce in the ID token payload.

Thanks,

[sameerag]

Yes we do.