Identifier should implement Serializable

[Pétur Runólfsson]

Can com.nimbusds.oauth2.sdk.id.Identifer implement java.io.Serializable?

This would allow these types to be used in contexts that require serializable values, for example EJB parameters or replicated caches.

[Vladimir Dzhuvinov]

Thanks for suggesting this. We were just preparing a new release of the SDK.

[Vladimir Dzhuvinov]

Done in commit faf5399.

If you think other classes have need for that let us know. We use external serialisers in our Connect2id server code, so never had this need.

[Pétur Runólfsson]

Thanks for the quick response! Most of the types that need to be stored between requests (State, Nonce, ClientID, AccessToken etc.) seem to extend Identifier, so they should be covered by this change.

[Vladimir Dzhuvinov]

BTW, the OAuth WG has just produced a useful draft for encoding the state using JWTs:

http://tools.ietf.org/html/draft-bradley-oauth-jwt-encoded-state-01

[Pétur Runólfsson]

Any news on this? It is marked as resolved, but the change doesn't seem to be present in version 3.4.1 or the latest source from git.

[Connect2id OSS]

Let me check if the serialisable change was indeed merged.

[Connect2id OSS]

Serializable is now merged into master. We'll push a new fix release later today. Thank you for following up on this!

[Connect2id OSS]

The fix is in the new 4.1 release, pushed to Central a minute ago.