ed_1.jwt`) into the Authorization header as a Bearer Token.
We get a `HTTP 200` response because this JWT's sub claim is `xample@example.com`

```bash
$ curl -k -H "Authorization: Bearer `cat valid_token_nested_1.jwt`" https://localhost/products/

Thank you for requesting /products/
```
**Step 3:** Run a curl command inserting another valid JWT (`valid_token_nested_2.jwt`) into the Authorization header as a Bearer Token.
This time we get a `HTTP 403` because this JWT's sub claim is `bobby@example.com` which