chore: update base64url encoding

halvaradop · halvaradop · commit f0a74caea38f · 2025-12-31T14:26:05.000-05:00
diff --git a/packages/jose/src/encrypt.ts b/packages/jose/src/encrypt.ts
@@ -33,7 +33,7 @@ export const encryptJWE = async (payload: string, secret: SecretInput, options?:
             throw new InvalidPayloadError("The payload must be a non-empty string")
         }
         const secretKey = createSecret(secret)
-        const jti = crypto.randomBytes(32).toString("base64")
+        const jti = crypto.randomBytes(32).toString("base64url")
 
         return new EncryptJWT({ payload })
             .setProtectedHeader({ alg: "dir", enc: "A256GCM", typ: "JWT", cty: "JWT" })
diff --git a/packages/jose/src/sign.ts b/packages/jose/src/sign.ts
@@ -26,7 +26,7 @@ export const signJWS = async (payload: JWTPayload, secret: SecretInput): Promise
             throw new InvalidPayloadError("The payload must be a non-empty object")
         }
         const secretKey = createSecret(secret)
-        const jti = crypto.randomBytes(32).toString("base64")
+        const jti = crypto.randomBytes(32).toString("base64url")
 
         return new SignJWT(payload)
             .setProtectedHeader({ alg: "HS256", typ: "JWT" })

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@ export const encryptJWE = async (payload: string, secret: SecretInput, options?:`
`33`	`33`	`throw new InvalidPayloadError("The payload must be a non-empty string")`
`34`	`34`	`}`
`35`	`35`	`const secretKey = createSecret(secret)`
`36`		`- const jti = crypto.randomBytes(32).toString("base64")`
	`36`	`+ const jti = crypto.randomBytes(32).toString("base64url")`
`37`	`37`
`38`	`38`	`return new EncryptJWT({ payload })`
`39`	`39`	`.setProtectedHeader({ alg: "dir", enc: "A256GCM", typ: "JWT", cty: "JWT" })`
Original file line number	Diff line number	Diff line change
`@@ -26,7 +26,7 @@ export const signJWS = async (payload: JWTPayload, secret: SecretInput): Promise`
`26`	`26`	`throw new InvalidPayloadError("The payload must be a non-empty object")`
`27`	`27`	`}`
`28`	`28`	`const secretKey = createSecret(secret)`
`29`		`- const jti = crypto.randomBytes(32).toString("base64")`
	`29`	`+ const jti = crypto.randomBytes(32).toString("base64url")`
`30`	`30`
`31`	`31`	`return new SignJWT(payload)`
`32`	`32`	`.setProtectedHeader({ alg: "HS256", typ: "JWT" })`