varpayload=newDictionary<string,object>{{"claim1",0},{"claim2","claim2-value"}};IJwtAlgorithmalgorithm=newRS256Algorithm(certificate);IJsonSerializerserializer=newJsonNetSerializer();IBase64UrlEncoderurlEncoder=newJwtBase64UrlEncoder();IJwtEncoderencoder=newJwtEncoder(algorithm,serializer,urlEncoder);conststringkey=null;// not needed if algorithm is asymmetricvartoken=encoder.Encode(payload,key);Console.WriteLine(token);

vartoken=JwtBuilder.Create().WithAlgorithm(newRS256Algorithm(certificate)).AddClaim("exp",DateTimeOffset.UtcNow.AddHours(1).ToUnixTimeSeconds()).AddClaim("claim1",0).AddClaim("claim2","claim2-value").Encode();Console.WriteLine(token);

try{IJsonSerializerserializer=newJsonNetSerializer();IDateTimeProviderprovider=newUtcDateTimeProvider();IJwtValidatorvalidator=newJwtValidator(serializer,provider);IBase64UrlEncoderurlEncoder=newJwtBase64UrlEncoder();IJwtAlgorithmalgorithm=newRS256Algorithm(certificate);IJwtDecoderdecoder=newJwtDecoder(serializer,validator,urlEncoder,algorithm);varjson=decoder.Decode(token);Console.WriteLine(json);}catch(TokenNotYetValidException){Console.WriteLine("Token is not valid yet");}catch(TokenExpiredException){Console.WriteLine("Token has expired");}catch(SignatureVerificationException){Console.WriteLine("Token has invalid signature");}

varjson=JwtBuilder.Create().WithAlgorithm(newRS256Algorithm(certificate)).MustVerifySignature().Decode(token);Console.WriteLine(json);

varpayload=decoder.DecodeToObject<IDictionary<string,object>>(token,secret);

varpayload=JwtBuilder.Create().WithAlgorithm(newRS256Algorithm(certificate))         .WithSecret(secret).MustVerifySignature().Decode<IDictionary<string,object>>(token);

IDateTimeProviderprovider=newUtcDateTimeProvider();varnow=provider.GetNow().AddMinutes(-5);// token has expired 5 minutes agodoublesecondsSinceEpoch=UnixEpoch.GetSecondsSince(now);varpayload=newDictionary<string,object>{{"exp",secondsSinceEpoch}};vartoken=encoder.Encode(payload);decoder.Decode(token);// throws TokenExpiredException

IJsonSerializerserializer=newJsonNetSerializer();IBase64UrlEncoderurlEncoder=newJwtBase64UrlEncoder();IJwtDecoderdecoder=newJwtDecoder(serializer,urlEncoder);JwtHeaderheader=decoder.DecodeHeader<JwtHeader>(token);vartyp=header.Type;// JWTvaralg=header.Algorithm;// RS256varkid=header.KeyId;// CFAEAE2D650A6CA9862575DE54371EA980643849

JwtHeaderheader=JwtBuilder.Create().DecodeHeader<JwtHeader>(token);vartyp=header.Type;// JWTvaralg=header.Algorithm;// RS256varkid=header.KeyId;// CFAEAE2D650A6CA9862575DE54371EA980643849

varvalidationParameters=newValidationParameters{ValidateSignature=true,ValidateExpirationTime=false,ValidateIssuedTime=false,TimeMargin=100};IJwtValidatorvalidator=newJwtValidator(serializer,provider,validationParameters);IJwtDecoderdecoder=newJwtDecoder(serializer,validator,urlEncoder,algorithm);varjson=decoder.Decode(expiredToken);// will not throw because of expired token

varjson=JwtBuilder.Create().WithAlgorithm(newRS256Algorirhm(certificate)).WithSecret(secret).WithValidationParameters(newValidationParameters{ValidateSignature=true,ValidateExpirationTime=false,ValidateIssuedTime=false,TimeMargin=100}).Decode(expiredToken);

publicsealedclassCustomJsonSerializer:IJsonSerializer{publicstringSerialize(objectobj){// Implement using favorite JSON serializer}publicTDeserialize<T>(stringjson){// Implement using favorite JSON serializer}}

IJwtAlgorithmalgorithm=newRS256Algorirhm(certificate);IJsonSerializerserializer=newCustomJsonSerializer();IBase64UrlEncoderurlEncoder=newJwtBase64UrlEncoder();IJwtEncoderencoder=newJwtEncoder(algorithm,serializer,urlEncoder);

JsonSerializercustomJsonSerializer=newJsonSerializer{// All keys start with lowercase characters instead of the exact casing of the model/property, e.g. fullNameContractResolver=newCamelCasePropertyNamesContractResolver(),// Nice and easy to read, but you can also use Formatting.None to reduce the payload sizeFormatting=Formatting.Indented,// The most appropriate datetime format.DateFormatHandling=DateFormatHandling.IsoDateFormat,// Don't add keys/values when the value is null.NullValueHandling=NullValueHandling.Ignore,    // Use the enum string value, not the implicit int value, e.g. "red" for enum Color { Red }Converters.Add(newStringEnumConverter())};IJsonSerializerserializer=newJsonNetSerializer(customJsonSerializer);

publicvoidConfigureServices(IServiceCollectionservices){services.AddAuthentication(options =>{options.DefaultAuthenticateScheme=JwtAuthenticationDefaults.AuthenticationScheme;options.DefaultChallengeScheme=JwtAuthenticationDefaults.AuthenticationScheme;}).AddJwt(options =>{// secrets, required only for symmetric algorithms, such as HMACSHA256Algorithm// options.Keys = new[] { "mySecret" };// optionally; disable throwing an exception if JWT signature is invalid// options.VerifySignature = false;});// the non-generic version AddJwt() requires registering an instance of IAlgorithmFactory manuallyservices.AddSingleton<IAlgorithmFactory>(newRSAlgorithmFactory(certificate));// orservices.AddSingleton<IAlgorithmFactory>(newDelegateAlgorithmFactory(algorithm));// or use the generic version AddJwt<TFactory() to use a custom implementation of IAlgorithmFactory.AddJwt<MyCustomAlgorithmFactory>(options => ...);}publicvoidConfigure(IApplicationBuilderapp){app.UseAuthentication();}

services.AddSingleton<IIdentityFactory,CustomIdentityFctory>();services.AddSingleton<ITicketFactory,CustomTicketFactory>();