austp/jwt-express

Climb aboard the JWT Express and use JWTs in your Express app with ease!

jwt-express's Issues

Required fields with no specified value are not evaluated on truthyness

The documentation says If only this value is passed to jwt.require(), then the middleware function will check that the value is truthy but if I require for example id and the token has id=3, the truthiness check will fail eg true == 3 evaluates to false

No asynchronous support for secret callback

The secret callback does not support asynchronous functions. Often times the secret has to be retrieved from a database.

Support for both cookie and Authorization.

Currently you can only chose between using a cookie or Authorization header for transmitting the token. I would be nice if it supports both.

res.sign() does not request for a new secret.

When a request is made and the token is validated with a certain secret, this secret is reused when signing with res.sign(), I would prefer that it request a new secret i.e. call the secret function again.