omsmith
commented
8 years ago The JWS spec requires url-safe base64, and trying to interoperate outside of that will just cause a bunch of headaches.
If you're using a Java JWA/JWS/JWT implementation that is not using url-safe base64, it is broken and you should file a bug there
'=' is a valid character in base64 which java web signatures use.