title: Flask-JWT-Extended - Bad Authorization Header
body: <p>I'm using the following code to test out Flask JWT. </p>
  
  <pre><code>from flask import Flask, jsonify, request
  from flask_jwt_extended import (
      JWTManager, jwt_required, create_access_token,
      get_jwt_identity
  )
  
  app = Flask(__name__)
  
  # Setup the Flask-JWT-Extended extension
  app.config['JWT_SECRET_KEY'] = 'super-secret'  # Change this!
  jwt = JWTManager(app)
  
  
  # Provide a method to create access tokens. The create_access_token()
  # function is used to actually generate the token, and you can return
  # it to the caller however you choose.
  @app.route('/login', methods=['POST'])
  def login():
      if not request.is_json:
          return jsonify({"msg": "Missing JSON in request"}), 400
  
      username = request.json.get('username', None)
      password = request.json.get('password', None)
      if not username:
          return jsonify({"msg": "Missing username parameter"}), 400
      if not password:
          return jsonify({"msg": "Missing password parameter"}), 400
  
      if username != 'test' or password != 'test':
          return jsonify({"msg": "Bad username or password"}), 401
  
      # Identity can be any data that is json serializable
      access_token = create_access_token(identity=username)
      return jsonify(access_token=access_token), 200
  
  
  # Protect a view with jwt_required, which requires a valid access token
  # in the request to access.
  @app.route('/protected', methods=['GET'])
  @jwt_required
  def protected():
      # Access the identity of the current user with get_jwt_identity
      current_user = get_jwt_identity()
      return jsonify(logged_in_as=current_user), 200
  
  
  if __name__ == '__main__':
      app.run()
  </code></pre>
  
  <p>By using POSTMAN, I am able to get the following access_token</p>
  
  <pre><code>{
      "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE1ODkxMTg0MTcsIm5iZiI6MTU4OTExODQxNywianRpIjoiNDEwNzFlZjItZTE3OC00YzhkLThjN2ItNWIwN2MxNGNkYzI2IiwiZXhwIjoxNTg5MTE5MzE3LCJpZGVudGl0eSI6InRlc3QiLCJmcmVzaCI6ZmFsc2UsInR5cGUiOiJhY2Nlc3MifQ.A1C1vMXnXt4IWO8j4H4LH6caxCqBg19lOEoVHhYnIyU"
  }
  </code></pre>
  
  <p>But when I want to access the /protected page using GET with the Header </p>
  
  <pre><code>Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE1ODkxMTg0MTcsIm5iZiI6MTU4OTExODQxNywianRpIjoiNDEwNzFlZjItZTE3OC00YzhkLThjN2ItNWIwN2MxNGNkYzI2IiwiZXhwIjoxNTg5MTE5MzE3LCJpZGVudGl0eSI6InRlc3QiLCJmcmVzaCI6ZmFsc2UsInR5cGUiOiJhY2Nlc3MifQ.A1C1vMXnXt4IWO8j4H4LH6caxCqBg19lOEoVHhYnIyU
  </code></pre>
  
  <p>I get this error in POSTMAN. Any recommendation on how to fix the issue will be very much appreciated. </p>
  
  <pre><code>{
      "msg": "Bad Authorization header. Expected value 'Bearer &lt;JWT&gt;'"
  }
  </code></pre>