BASE64URL(SHA256(ASCII(verifier))), no padding.
BASE64URL(SHA256(ASCII(verifier)))
static String challengeFor(String verifier) => _base64Url(sha256.convert(ascii.encode(verifier)).bytes);