Flaw: A secret should not be required for decode

[Disfractal]

This is an issue with this project as a lot of client side apps do not encrypt the entire JWT.

You've stated and closed previous post on people talking about this saying look at the README for the { skipValidation: true }.

I've reviewed the code and skipValidation does nothing for allowing tokens to not need a secret. The error is being thrown by dependent libraries. In RNPureJwtModule.java line 99 the error signing key cannot be null or empty is being thrown from the io.jsonwebtoken.Jwts library.

[utiq]

@Disfractal how did you solve this? It works fine in iOS but it's throwing the same error than you in Android signing key cannot be null or empty

[zaguiini]

Thanks for reporting! PRs are open.