You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have tokens that appear to have been generated using base64 encoding instead of base64url encoding (3rd party auth system) and line 8 of verify-stream.js defines the pattern which the token must match. That doesn't currently include '=' padding, which is causing these tokens to be rejected as invalid.
I'm reading through the spec, and while it's pretty clear that token issuers should not include padding, it also appears to recommend that validation should allow for padding.
Activity
troystauffer commentedon Jun 24, 2015
I created a PR for this: #25
allow full base64 jws parts as input during decode/verify/isValid. fixes
allow full base64 jws parts during decode/verify/isValid. fixes auth0#22
allow full base64 jws parts during decode/verify/isValid. fixes auth0#22