It appears that the entire server response should be b64u encoded now.
It appears that the entire server response should be b64u encoded now.