diff --git a/paskia/fastapi/ws.py b/paskia/fastapi/ws.py
index aa1d06d..575d9de 100644
--- a/paskia/fastapi/ws.py
+++ b/paskia/fastapi/ws.py
@@ -3,6 +3,7 @@ from datetime import UTC, datetime
 from urllib.parse import urlencode
 from uuid import UUID
 
+import base64url
 from fastapi import FastAPI, WebSocket
 
 from paskia import authcode, db
@@ -217,7 +218,7 @@ async def websocket_authenticate(
         session = Session.create(
             user=cred.user_uuid,
             credential=cred.uuid,
-            key=hash_secret("oidc", token),
+            key=base64url.enc(hash_secret("oidc", token)),
             host=normalized_host,
             ip=metadata["ip"],
             user_agent=metadata["user_agent"],