From 717ea26b94a0c816fd51ada6e3d316b3d2f5b522 Mon Sep 17 00:00:00 2001
From: chiloute <35150997+Chiloute@users.noreply.github.com>
Date: Tue, 28 Jul 2026 11:17:47 +0200
Subject: [PATCH] copilot fix

---
 plugins/jwt_decoder.lua | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/plugins/jwt_decoder.lua b/plugins/jwt_decoder.lua
index eb9bbd5..ce67c57 100644
--- a/plugins/jwt_decoder.lua
+++ b/plugins/jwt_decoder.lua
@@ -54,7 +54,7 @@ end
 local function decode_jwt_payload(value)
 	-- Three dot-separated base64url segments; the signature may be empty (alg:none).
 	local payload = value:match("^[A-Za-z0-9_-]+%.([A-Za-z0-9_-]+)%.[A-Za-z0-9_-]*$")
-	if not payload then
+	if not payload or #payload > 8192 then
 		return nil
 	end
 	local decoded = b64url_decode(payload)
@@ -65,7 +65,7 @@ local function decode_jwt_payload(value)
 	if decoded:match("^%s*{") == nil then
 		return nil
 	end
-	decoded = decoded:gsub("[\r\n]+", " ")
+	decoded = decoded:gsub("[%c]+", " ")
 	return decoded
 end