If a token has wrong signature and the payload is also expired, node-jose returns token expiry as reason for failed verification.
I think other errors should have higher priority and should be reported in this case, payload checking should have lesser priority.