Add a note about OAuth2 bearer tokens

auth0 · Apr 7, 2020 · c5d8419 · c5d8419
1 parent 888f0e9
commit c5d8419
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -25,6 +25,8 @@ app.get('/protected',
   });
 ```
 
+> The default behavior of the module is to extract the JWT from the `Authorization` header as an [OAuth2 Bearer token](https://oauth.net/2/bearer-tokens/).
+
 You can specify audience and/or issuer as well:
 
 ```javascript