I find myself working with JOSE (not my choice, protocol dictates :<) at the moment and I’m slowly going insane at the levels of recursive base64 involved :floofWoozy:
e.g. if you end up doing signed-and-encrypted JWTs you end up with base64(encrypt(base64(json)))