title: Authentication-Info header for Bearer (JWT) Auth Scheme
body: <p>I am using JWT Bearer authentication scheme in a REST api. For returning jwt token to client after successful authentication, currently i am using access token response in body as described in <a href="https://www.rfc-editor.org/rfc/rfc6750#page-10" rel="nofollow noreferrer">https://www.rfc-editor.org/rfc/rfc6750#page-10</a></p>
  <pre><code>{
     &quot;access_token&quot;:&quot;mF_9.B5f-4.1JqM&quot;,
     &quot;token_type&quot;:&quot;Bearer&quot;,
     &quot;expires_in&quot;:3600,
     &quot;refresh_token&quot;:&quot;tGzv3JOkF0XG5Qx2TlKWIA&quot;
   }
  </code></pre>
  <p>But need to return token in other HTTP request too like signup where body is already present.
  So, was thinking of using <a href="https://www.rfc-editor.org/rfc/rfc7615#page-3" rel="nofollow noreferrer">&quot;Authentication-Info&quot;</a> header for it. But <a href="https://www.rfc-editor.org/rfc/rfc6750" rel="nofollow noreferrer">Bearer Scheme</a> does not specify &quot;Authentication-Info&quot; header anywhere. Should i use Authentication-Info header for returning jwt token?</p>
  <p>Not using OAuth 2.0, just JWT.</p>