Skip to content
Discussion options

You must be logged in to vote

The /api/users/register and /api/users/login endpoints are public URL's and do not require a Bearer token, while all other endpoints, except /logout, require a token to access. The public URLs are functioning correctly as expected.

Illegal base64 character: '@'
it means a request was sent without a valid Bearer Token, and the JwtAuthenticationFilter attempted to decode an invalid Authorization header. This happens even for public endpoints since the filter runs globally. Always ensure you pass a proper Authorization: Bearer <JWT_TOKEN> header for protected endpoints.

Correct workflow will be:
Use Postman (or any API client) to hit:
POST http://localhost:8180/api/users/register
with the re…

Replies: 2 comments 1 reply

Comment options

You must be logged in to vote
1 reply
@ManjuVasanth
Comment options

Comment options

You must be logged in to vote
0 replies
Answer selected by AmrElsayyad
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
3 participants