Sign method should return object instead of string

[auth0]

Sign method should return object instead of string

[flyingsky]

it doesn't make sense. You can use jwt.verify first, if it's correct, then you can query you db to find if this token exists in your db. All the properties generated by jwt in token are not necessary for you.

[jtwebman]

We are doing it to make sure nothing funny happens. We don't have to query for everything but we still store a token id and expire in the DB that gets cleaned up once it expires. This also allows use to invalidate the token if the users permissions change.

Actually maybe you are right if I set the timeout then I could just infer it....hmmm

[ziluvatar]

I will close some old issues, let me know if you are still interested in discussing your approach.