Also since you're using the swagger ui, you'll have to include "Bearer" with your token so "Bearer <your token" when you set the Authorization header