Couple feature requests

First off thank you so much for this library. You just single handedly shaved nearly 1MB off my build now that I can toss jsonwebtoken.

1. Option for outputting the payload during verify

try {
  await JWT.verify(authToken, JWT_TOKEN)
  jwt = await JWT.decode(authToken)
} catch(err) {
  throw {status: 401, message: `Invalid or expired authorization token`}
}

INTO

try {
  jwt = await JWT.verify(authToken, JWT_TOKEN)
} catch(err) {
  throw {status: 401, message: `Invalid or expired authorization token`}
}

1. Validate exp keys during verify

2. Support for Buffer secrets

JWT.verify(authToken, Buffer.from(JWT_TOKEN, 'base64'))

1. Support for es6 import destructuring syntax

import { verify } from '@tsndr/cloudflare-worker-jwt'

1. If you’re feeling really ambitions support verifying complex JWSs like what is being sent back from the Android safetynet attestation. https://developer.android.com/training/safetynet/attestation 😬

[tsndr]

1. No worries man. This project is only loosely inspired by the jsonwebtoken library and I’m not the biggest fan of using exceptions unless something really breaks to be honest, although this is a personal preference. To me an if is cleaner than a try-catch.

2. Oh you meant expiry, see I’m stupid too 😅. Obviously, this is something I should absolutely add and a huge oversight on my part. This goes right to the top of my TODO list and I’ll try to add it.

3. Maybe I should add it. Options are good, right? 🤔

4. While I’m already in there, I might add it as well.

Thank you for the workaround, even though it shouldn’t be necessary anymore once I finished my work on 2..

[tsndr]

Since we’ve sorted everything out in discord I’m gonna go ahead and close this issue 😃