Where is the JWT typically sent in HTTP authentication requests?
In the URL query string
In the Authorization header as Bearer <token>
In cookies only
Inside HTML forms
This question is part of this quiz :