How to return more than 25 subs

Ok, instead with OAuth Authorization Code Flow I can get a permanent token.
That’s clear now, thanks.

One last question: I cannot see how to use state.
In the example it is set to

c3ab8aa609ea11e793ae92361f002671

But how to get this value?