Passport-JWT stores User object in request headers. code example

Example: jwt strategy

app.post('/profile', passport.authenticate('jwt', { session: false }),
    function(req, res) {
        res.send(req.user.profile);
    }
);