What is the difference between "express-jwt" and "express-oauth2-jwt-bearer"?

[kunalvirk]

Hi,

My application consists of a simple SPA + Node.js/Express.js API (backend). While following documentation I got confused at a point where there are two libraries "express-jwt" and "express-oauth2-jwt-bearer" to resolve I guess the same issue which is decoding the JWT token and matching it with the Auth0 domain.

Here are the links to the respective documentations:

• Documentation that is using "express-jwt" to secure the API Node.js API Implementation (SPAs + API)
• Documentation that is using "express-oauth2-jwt-bearer" to secure the API Add authorization to an Express.js API application

What is the fundamental difference between the above two? And which library is recommended to use in which case?

Thanks,