In the mentionned method we have: stateString = JwsUtils.verify(jws, stateString).getUnsignedEncodedSequence();
should we get: stateString = JwsUtils.verify(jws, stateString).getDecodedJwsPayload(); ? Otherwise i don't see how the round trip can work Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <https://blog-rmannibucau.rhcloud.com> | Old Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | JavaEE Factory <https://javaeefactory-rmannibucau.rhcloud.com>
