Add complete option in jwt.verify

README.md

@@ -138,6 +138,7 @@ As mentioned in [this comment](https://github.com/auth0/node-jsonwebtoken/issues
 * `algorithms`: List of strings with the names of the allowed algorithms. For instance, `["HS256", "HS384"]`.
 * `audience`: if you want to check audience (`aud`), provide a value here. The audience can be checked against a string, a regular expression or a list of strings and/or regular expressions. 
   > Eg: `"urn:foo"`, `/urn:f[o]{2}/`, `[/urn:f[o]{2}/, "urn:bar"]`
+* `complete`: return an object with the decoded payload and header
 * `issuer` (optional): string or array of strings of valid values for the `iss` field.
 * `ignoreExpiration`: if `true` do not validate the expiration of the token.
 * `ignoreNotBefore`...

test/verify.tests.js

@@ -69,6 +69,30 @@ describe('verify', function() {
     });
   });
 
+  describe('option: complete', function() {
+    it('should return header, payload and signature', function (done) {
+      var header = { alg: 'RS256' };
+      var payload = { iat: Math.floor(Date.now() / 1000 ) };
+
+      var signed = jws.sign({
+        header: header,
+        payload: payload,
+        secret: priv,
+        encoding: 'utf8'
+      });
+
+      var signature = jws.decode(signed).signature;
+
+      jwt.verify(signed, pub, {typ: 'JWT', complete: true}, function(err, p) {
+        assert.isNull(err);
+        assert.deepEqual(p.header, header);
+        assert.deepEqual(p.payload, payload);
+        assert.deepEqual(p.signature, signature);
+        done();
+      });
+    });
+  });
+
   describe('secret or token as callback', function () {
     var token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE0MzcwMTg1ODIsImV4cCI6MTQzNzAxODU5Mn0.3aR3vocmgRpG05rsI9MpR6z2T_BGtMQaPq2YR6QaroU';
     var key = 'key';

verify.js

@@ -203,6 +203,16 @@ module.exports = function (jwtString, secretOrPublicKey, options, callback) {
       }
     }
 
+    if (options.complete === true) {
+      var signature = decodedToken.signature;
+
+      return done(null, {
+        header: header,
+        payload: payload,
+        signature: signature
+      });
+    }
+
     return done(null, payload);
   });
 };