github MicahParks/keyfunc v1.1.0
Support non-RFC compliant base64url padding

latest releases: v3.8.0, v3.7.0, v3.6.2...
3 years ago

Trailing padding is required to be removed from base64url encoded keys. This is because RFC 7517 defines base64url the same as RFC 7515 Section 2:

with all trailing '=' characters omitted

However, not all JWKS are perfectly RFC compliant and some include trailing = characters for their base64url encoding. These non-RFC compliant JWKS implementations will be supported since it's trivial to support the removal of trailing = client side and will not impact performance in any noticeable way.

Don't miss a new keyfunc release

NewReleases is sending notifications on new releases.