I’m prototyping a Vue 3 application that will be deployed to a Kubernetes environment the web traffic that reaches the web app contains the JWT in the request headers. Authn and authz are handled outside of the app, a layer above, as I like to think of it.