feat: add support for authorization parameters and ensure state param is included from query when present in Facebook & Microsoft OAuth (#386)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

Author: mendrinos

src/runtime/server/lib/oauth/facebook.ts

@@ -51,7 +51,7 @@ export interface OAuthFacebookConfig {
    */
   authorizationParams?: Record<string, string>
   /**
-   * Redirect URL to to allow overriding for situations like prod failing to determine public hostname
+   * Redirect URL to allow overriding for situations like prod failing to determine public hostname
    * @default process.env.NUXT_OAUTH_FACEBOOK_REDIRECT_URL or current URL
    */
   redirectURL?: string
@@ -96,6 +96,8 @@ export function defineOAuthFacebookEventHandler({
           client_id: config.clientId,
           redirect_uri: redirectURL,
           scope: config.scope.join(' '),
+          state: query.state || '',
+          ...config.authorizationParams,
         }),
       )
     }

src/runtime/server/lib/oauth/microsoft.ts

@@ -88,6 +88,7 @@ export function defineOAuthMicrosoftEventHandler({ config, onSuccess, onError }:
           response_type: 'code',
           redirect_uri: redirectURL,
           scope: config.scope.join(' '),
+          state: query.state || '',
           ...config.authorizationParams,
         }),
       )