Where JWT token reside in the request?

You'll pass the token as part of the authorization header on the client-side after the client logged in, like Authorization:Bearer
In REQUEST HEADER. 

KEY - Authorization
VALUE - Token