Standard Base64 uses the + and / characters and pads the end with = (padding). Because +, / and = have meaning in URLs, the URL-safe variant (defined in RFC 4648) replaces them with - and _ and removes the padding, letting you use the result in URLs, file names and tokens such as JWTs without escaping anything. Decoding here accepts both variants automatically.