diff --git a/src/LoginProvider.php b/src/LoginProvider.php
index e54e7d1..56b13cb 100644
--- a/src/LoginProvider.php
+++ b/src/LoginProvider.php
@@ -163,7 +163,7 @@ protected function buildAuthUrlFromBase(string $url, string $state, array $scope
      */
     public function user()
     {
-        $state = $this->request->getSession()->pull('state');
+        $state = (string) $this->request->getSession()->pull('state');
 
         if (strlen($state) !== 40 || $this->request->input('state') !== $state) {
             throw new InvalidStateException('We could not verify the request was genuine.');