While implementing openidconnect authentication it was found that the jwk response of the route /oauth/jwk was giving an invalid url encoded base64 keys. the "=" padding is not needed in url encoded base64 still was being added to the response. This can be fixed by updating oauth2_server_base64url_decode() function in .module file as below.
While trying to authenticate against any open id connect client you would see below error
"unmarshal json invalid base 64"
Update oauth2_server_base64url_decode()
function oauth2_server_base64url_decode($data) {
return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
}
Needs review
1.0
Code