# How do quickstarts for Angular client and Node.js API fit together?

**URL:** <https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094>\
**Category:** Get Help\
**Tags:** nodejs, auth0-angular, express-jwt, angular\
**Created:** [September 20, 2020, 12:32pm UTC](https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094 "2020-09-20T12:32:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![admin44](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/admin44/32/12951_2.png) [@admin44](https://community.auth0.com/u/admin44)\
**Post date:** [September 20, 2020, 12:32pm UTC](https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094/1 "2020-09-20T12:32:50Z")

</div>

Hi,

I’m trying to secure an Angular application I made as well as the respective backend API written in Node.js/Express.js.

I have implemented auth0-angular according to the quickstart and want to use the included HTTP interceptor to pass the credentials to the API.  
For the backend, I followed the respective quickstart for Node.js that uses express-jwt.

Now, it looks like express-jwt is expecting a JWT(\*) to work with, whereas the interceptor will only provide an access token (format: xxxxx-xxxxxxxxxxx-xxxxxxxxxxxxxx) via the authorization header.

(\*)

```
var jwtCheck = jwt({
  secret: jwks.expressJwtSecret({
      cache: true,
      rateLimit: true,
      jwksRequestsPerMinute: 5,
      jwksUri: 'https://xxx.eu.auth0.com/.well-known/jwks.json'
}),
audience: 'xxx',
issuer: 'https://xxx.eu.auth0.com/',
algorithms: ['RS256']

```

});

When I provide an JWT ID token to the API (via Postman), it’s working.

What’s the most straightforward way to get this working - or am I understanding something wrong?

Thanks,  
DS

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [September 21, 2020, 9:56am UTC](https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094/2 "2020-09-21T09:56:04Z")

</div>

Have you followed the Angular quickstart section specific to calling an API ([Auth0 Angular SDK Quickstarts: Call an API](https://auth0.com/docs/quickstart/spa/angular/02-calling-an-api))?

At this time, if you specify an audience during the login the issued access token will be a JWT suitable to call the API specified as audience.

---

<div class="post-metadata">

**Author:** ![admin44](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/admin44/32/12951_2.png) [@admin44](https://community.auth0.com/u/admin44)\
**Post date:** [September 21, 2020, 4:16pm UTC](https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094/3 "2020-09-21T16:16:32Z")

</div>

That was it! Thank you for the hint.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [October 6, 2020, 4:16pm UTC](https://community.auth0.com/t/how-do-quickstarts-for-angular-client-and-node-js-api-fit-together/50094/4 "2020-10-06T16:16:36Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.