Base64URL is not Base64 — and the difference breaks a JWT every time it travels through a URL. Here is the alphabet, the two-line fix, and the three workflows that catch the wrong encoding.
Most JSON diff tools are lying about what changed. Here is the walk-the-tree workflow that surfaces every changed leaf, classifies it correctly, and catches the four traps shallow comparisons hide.