Michael Davis

It appears you are passing a bytes object to `base64url_decode` instead of a string. Try this: ```python decoded_sig = base64url_decode(encoded_sig.decode('utf-8')) ```

Hey @cloudspeak, It looks like you are passing in a private key to the `verify` function and we aren't properly extracting the public key information from that JWK in some...

I definitely think that python-jose should be able to handle private keys in the JWK format, that work just hasn't been an issue up to this point. I would welcome...


@umang-gramener A token not expiring immediately is a different issue than a token not expiring after 10 minutes. I would check that you haven't inadvertently bypasses expiration checking and that...