The state is limited to 128 characters but server errors when exceeded

[SpraxDev]

Describe the bug
Just received an error log about SQL errors happening in production and it seems like somebody is trying to use an JWT token as state.

So this is report is actually two bugs:

1. Exceeding the limit causes an server-side error returning an HTTP status code 500
2. The limit should probably be greater than 128 characters as JWT is a valid use case

Screenshots, Videos, Logs or Errors
Yeah in the error log file, not posting a users redirect URL etc. :p

Additional context