session_state

if the "state" parameter was present in the client authorization request. The exact value received from the client.