Identify user based on the JWT attached with request

Are you sure you are sending a JWT authenticated request ?