protected function hasInvalidState() { if ($this->isStateless()) { return false; } $state = $this->request->getSession()->get('state'); return !(strlen($state) > 0 && $this->request->get('state') === $state); }