What should be passed to the token?

Question

Node.js

const result = jwt.verify(token, 'secret');
gives jwt malformed error. The problem seems to be in the token. what should be included in the token? do it via postman

Answer 1

If you use jwt, then it is immediately clear that you need to insert an active session token

Answer 2

For example. Authorization page for example /login/ should return a token

const token = jwt.sign(
          { userId: id },
          config.get('jwtSecret'),
          { expiresIn: '24h' }
        )
        res.json({ token })

You receive it on the client and write it to localStorage. When you need it, take it from there and insert it into the fetch or axios options {headers:{Authorization: token}} - for frontend
For postman you need a token and you can take it if you have implemented authorization with jwt