Removing "Bearer" from token header without implementing a custom authentication scheme or parsing the token? Removing "Bearer" from token header without implementing a custom authentication scheme or parsing the token? mongoose mongoose

Removing "Bearer" from token header without implementing a custom authentication scheme or parsing the token?


There is no programmatic difference from removing Bearer token in formatting the request header. If you do choose to do so, you are violating RFC and HTTP standards. It would be like sending a payload in a GET response and saving data to the database.

Use of bearer tokens derived from the Oauth design so have a look at here for standards.