---
title: "Comment by Prafful Javare on \"Sample JWT Authentication in Node.js\" | Hashnode"
description: "Great introduction! However I'd like to point out one thing - the standard practice is to send the JWT in the Authorization header as a Bearer token, that i"
url: "https://hashnode.com/posts/sample-jwt-auth-in-nodejs/61d1d55c0cfc5655c18469eb/comment/61d22f7c0413645f5c7be8fe"
---

[Discussion](https://hashnode.com/posts/sample-jwt-auth-in-nodejs/61d1d55c0cfc5655c18469eb)

Comment [Sample JWT Authentication in Node.js](https://hashnode.com/posts/sample-jwt-auth-in-nodejs/61d1d55c0cfc5655c18469eb)

[Prafful Javare](https://hashnode.com/@profgrammer)

[Jan 2, 2022](https://hashnode.com/posts/sample-jwt-auth-in-nodejs/61d1d55c0cfc5655c18469eb/comment/61d22f7c0413645f5c7be8fe)

Great introduction! However I'd like to point out one thing - the standard practice is to send the JWT in the `Authorization` header as a Bearer token, that is, the value of this header should be `Bearer <jwt_here>`. Then we can modify the `/verify` endpoint to check the Authorization header and extract the token by splitting it by space and getting the second value.

[Emmanuel Allison](https://hashnode.com/@Hallixon)

[Jan 2, 2022](https://hashnode.com/posts/sample-jwt-auth-in-nodejs/61d1d55c0cfc5655c18469eb/comment/61d22f7c0413645f5c7be8fe#reply-61d238d80413645f5c7be9b7)

Hi [Prafful Javare](https://hashnode.com/@profgrammer). I know of that, and I made the sample primarily for anyone to understand how to create and verify a JWT using Node.js. Still, I should probably edit and drop this somewhere in the article. Thanks for pointing this out!