Change nonce and state to length 22

[cweibel]

Changes proposed in this pull request:

• Change the length of nonce from 12 to 22
• Change the length of state from 10 to 22
• Part of issue Extend length of nonce and state request header parameters #3644

Security considerations

Increases the entropy making brute force attacks more difficult

[Copilot]

Pull Request Overview

This PR increases the entropy of security tokens by extending the length of nonce and state parameters from their current values to 22 characters. This security enhancement makes brute force attacks more difficult by increasing the randomness of these critical OAuth/OIDC security parameters.

Key changes:

• Increased nonce length from 12 to 22 characters in OIDC authentication flows
• Increased state parameter length from 10 to 22 characters for OAuth flows

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[cweibel]

Added tests to check for the length of 22 for both state and nonce. Setting the values back to 10 and 12 respectively results in the tests failing.