feat: /internal/renewal/pending

core/secrets.py

@@ -37,7 +37,11 @@ def generate_jwt(payload: dict[str, Any]) -> str:
 
 
 def get_kid_from_token(token: str) -> str | None:
-    return jwt.get_unverified_header(token).get("kid")
+    try:
+        header = jwt.get_unverified_header(token)
+        return header.get("kid")
+    except jwt.exceptions.PyJWTError:
+        return
 
 
 def decode_jwt(