diff --git a/flask_oidc/__init__.py b/flask_oidc/__init__.py index 5ca54a4..84f1d80 100644 --- a/flask_oidc/__init__.py +++ b/flask_oidc/__init__.py @@ -513,7 +513,7 @@ def wrapper(view_func): @wraps(view_func) def decorated(*args, **kwargs): pre, tkn, post = self.get_access_token().split('.') - access_token = json.loads(b64decode(tkn)) + access_token = json.loads(urlsafe_b64decode(tkn + ('=' * (len(tkn) % 4)))) if role in access_token['resource_access'][client]['roles']: return view_func(*args, **kwargs) else: