I'm currently doing a pen test and there are these 48 character tokens. I identified the first 22 as base64 encoded values I know.
The second part (26 characters) looks base64-ish but it's not. It sometimes contains a dash or a dot. Here are three examples:
I'm not asking you to tell me what the values mean, just a hint which encoding it could be. It's a Java EE web application.