Zoom isn't sending a state query parameter in the oauth flow. This breaks the check for the state parameter. My workaround is to comment out the check [here](https://github.com/zoom/zoomapps-sample-js/blob/main/server/routes/auth.js#L22-L27), since this is just an example.