Faulty JWT decoding

[msuret]

The ID site sometimes displays this message:

The JWT claims section is malfomed and could not be decoded as JSON.

After some digging, it turns out that the funcion base64.atob in utils.js uses window.atob, which perform base64 decoding, whereas JWTs are encoded with base64url which use a slighty different alphabet.