decode invalid jwt token returns null

index.js

@@ -1,7 +1,8 @@
 var jws = require('jws');
 
 module.exports.decode = function (jwt) {
-  return jws.decode(jwt).payload;
+  var decoded = jws.decode(jwt);
+  return decoded && decoded.payload;
 };
 
 module.exports.sign = function(payload, secretOrPrivateKey, options) {

test/jwt.rs.tests.js

@@ -135,5 +135,21 @@ describe('RS256', function() {
     });
   });
 
+  describe('when decoding a invalid jwt token', function() {
+    it('should return null', function(done) {
+      var payload = jwt.decode('whatever.token');
+      assert.isNull(payload);
+      done();
+    });
+  });
 
+  describe('when decoding a valid jwt token', function() {
+    it('should return the payload', function(done) {
+      var obj     = { foo: 'bar' };
+      var token   = jwt.sign(obj, priv, { algorithm: 'RS256' });
+      var payload = jwt.decode(token);
+      assert.deepEqual(payload, obj);
+      done();
+    });
+  });
 });