I'm wondering what is the best appropriate Authorization HTTP header type for JWT tokens. One of the probably most popular type is Basic. For instance: Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ== It handle two parameters such as a login and a password. So it is not relevant for JWT tokens. Also, I heard about Bearer type, for instance: Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVC