Expose token verification method in public API

I use express-jwt with most of projects. Its awesome.

Would it be possible / acceptable to expose token verification method to public API. This process is sometime required to arbitrarily check if a request has valid session or not.

Use case All request passed by unless are ignored by express-jwt, I think that is good. But even these requests have session attached ( Authorization header set) sometime. There is no way to tell what user this request have. If express-jwt expose token verification process it can be done easily. Otherwise I’ll have to rewrite (copy) same logic which will extract token from headers and check if session is valid.

I’ll be able to help with a PR if this suggestion is accepted.

[sushantdhiman]

@jfromaniello I will think about the API and will post soon

[sushantdhiman]

@laxman-spidey I don’t remember, neither I have access to source code anymore, but if I have to guess I must have copied this method as there is no API exposed