auth0/java-jwt — pull request #2 by celkins (2014-06-14 20:44:03+00:00)
Title: Don't assume secrets are Base64 encoded

The JOSE/JWT specs make no assumption that shared secrets are Base64 encoded. If a particular caller's secret needs to be decoded prior to verification, then it should be its responsibility to take care of that.