RootCauseunvalidated
verify_token() incorrectly converted the hex-encoded payload back to bytes by using payload_hex.encode() (UTF-8 encoding of the hex string) instead of decoding the hex string into the original payload bytes.
efaa34a4-b33f-4bbf-a3c7-8a05357f789c
verify_token() incorrectly converted the hex-encoded payload back to bytes by using payload_hex.encode() (UTF-8 encoding of the hex string) instead of decoding the hex string into the original payload bytes.