diff --git a/plugins/wasm-go/extensions/jwt-auth/handler/claims.go b/plugins/wasm-go/extensions/jwt-auth/handler/claims.go
index c1333ad56..1945d34a5 100644
--- a/plugins/wasm-go/extensions/jwt-auth/handler/claims.go
+++ b/plugins/wasm-go/extensions/jwt-auth/handler/claims.go
@@ -26,8 +26,9 @@ func claimsToHeader(claims map[string]any, cth []cfg.ClaimsToHeader) {
 		if v, ok := claims[cth[i].Claim]; ok {
 			if *cth[i].Override {
 				proxywasm.ReplaceHttpRequestHeader(cth[i].Header, fmt.Sprint(v))
+			} else {
+				proxywasm.AddHttpRequestHeader(cth[i].Header, fmt.Sprint(v))
 			}
-			proxywasm.AddHttpRequestHeader(cth[i].Header, fmt.Sprint(v))
 		}
 	}
 }