Is this a secure process to handle JWT authentication?

Question

Recently I needed to build a simple REST API and I read different articles on best practices to reduce as far as possible the vulnerabilities of my web app. Searching online I f