Removing unnecessary extra decoding. jwtString is already verified as…

… valid and signature checked
auth0 · Aug 10, 2016 · 55d5834 · 55d5834
1 parent 5117aac
commit 55d5834
Showing 1 changed file with 1 addition and 7 deletions.
diff --git a/verify.js b/verify.js
@@ -96,13 +96,7 @@ module.exports = function (jwtString, secretOrPublicKey, options, callback) {
   if (!valid)
     return done(new JsonWebTokenError('invalid signature'));
 
-  var payload;
-
-  try {
-    payload = decode(jwtString);
-  } catch(err) {
-    return done(err);
-  }
+  var payload=decodedToken.payload;
 
   if (typeof payload.nbf !== 'undefined' && !options.ignoreNotBefore) {
     if (typeof payload.nbf !== 'number') {