Skip to content

https://jwt.io/ validator validates non-url-safe JWT without warning or error #237

@mrdvt92

Description

@mrdvt92

Can we update the validating logic on https://jwt.io/ to add an error/warning if the token has any non-url-safe characters in the token. The token validator works perfectly using base64 encoding instead of the correct base64url encoding. But, the characters [=/+] are not url safe so https://jwt.io/ should not validate those tokens as correct.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions