Refactor TwitterIdentityProvider.java to deserialize the Base64-decoded data using JSON instead of Java object streams If ObjectInputStream must be retained, implement HMAC signature verification on ...