CodeVerifier should be Serializable

[Emond Papegaaij]

The CodeVerifier must be stored by a client between the redirect to the authorization endpoint and the call to the token endpoint, upon receipt of the authorization code. This spans at least 2 requests, and it therefore makes sense to store the CodeVerifier in the HTTP session. For this to work, it must be serializable.

‌

[Vladimir Dzhuvinov]

Thanks, makes sense. We can do this on the new 8.x.

[Yavor Vasilev]

Addressed for CodeVerifier and parent Secret class: a65dd49

[Yavor Vasilev]

Out in v8.11