Base64UrlSafe doesn't strip trailing =

[kelunik]

Base64Url doesn't have tailing = at the end, but Base64UrlSafe::encode produces those padding chars.

[paragonie-scott]

Base64Url doesn't have trailing = at the end

Yes it does.

[paragonie-scott]

I've added an encodeUnpadded() method to the base32 and base64 classes, for requirements that don't conform strictly to RFC 4648, so developers don't feel tempted to just rtrim($output, '='); since it's unknown if rtrim() is cache-timing-safe.

[paragonie-scott]

New API methods are exposed in v2.2.0.