This is how to create a private and public pem key. And also an example no how to take use of the key in .NET.<\/p>\n\n\n\n
And if you would want to Create a Token or Validate a token you have methods like these in .NET (C#):<\/p>\n\n\n
\n public string CreateToken(List<Claim> claimList)\n {\n string privateKeyBytes = File.ReadAllText(".\/Secrets\/private.pem");\n\n using RSA rsa = RSA.Create();\n rsa.ImportFromPem(privateKeyBytes);\n var signingCredentials = new SigningCredentials(new RsaSecurityKey(rsa), SecurityAlgorithms.RsaSha256)\n {\n CryptoProviderFactory = new CryptoProviderFactory { CacheSignatureProviders = false }\n };\n\n var now = DateTime.Now;\n var unixTimeSeconds = new DateTimeOffset(now).ToUnixTimeSeconds();\n\n var jwt = new JwtSecurityToken(\n issuer: "my-key",\n claims: claimList,\n notBefore: now,\n expires: now.AddMinutes(30),\n signingCredentials: signingCredentials\n );\n\n return new JwtSecurityTokenHandler().WriteToken(jwt);\n }\n\n public bool ValidateToken(string token)\n {\n var publicKey = File.ReadAllText(".\/Secrets\/private.pem");\n\n using RSA rsa = RSA.Create();\n rsa.ImportFromPem(publicKey);\n\n var validationParameters = new TokenValidationParameters\n {\n ValidateIssuer = true,\n ValidateAudience = false,\n ValidateLifetime = true,\n ValidateIssuerSigningKey = true,\n ValidIssuer = "my-key",\n IssuerSigningKey = new RsaSecurityKey(rsa),\n CryptoProviderFactory = new CryptoProviderFactory()\n {\n CacheSignatureProviders = false\n }\n };\n\n try\n {\n var handler = new JwtSecurityTokenHandler();\n var principal = handler.ValidateToken(token, validationParameters, out var validatedSecurityToken);\n principal.Claims.ToList().ForEach(claim => Debug.WriteLine(claim.Value));\n }\n catch (Exception ex)\n {\n Console.WriteLine("an error... log it some way " + ex.Message);\n return false;\n }\n\n return true;\n }\n<\/pre><\/div>\n\n\nIn the above example we use the key to set a JwtSecurityToken. This would assume you have your file in a folder called Secrets where you have your public and private key. With .NET we have the System.Security.Cryptography library where we can utulize these RSA algorithm methods which makes it easy, such method is ImportFromPem<\/strong> which does actually what it sounds like, it will read our private key from the pem file and put it into the rsa object, which we then can get retrive a SigningCredentinals object which we then can put into a jwt property for example. The audiance property can be set with an list of Claims coming from an authentication response with claims such as firstname lastname and so forth.<\/p>\n\n\n\nFor the validation part, we get to use our public key to match the incoming token with the method ValidateToken<\/strong> from our JwtSecurityTokenHandler <\/strong>object. All we need to validate it is to set some TokenValidationParameters and the most important being the actual public rsa key from our pem file.<\/p>\n","protected":false},"excerpt":{"rendered":"This is how to create a private and public pem key. And also an example no how to take use of the key in .NET. Open up git bash, cd into a folder of your preference. Enter command to create a private key:winpty openssl genrsa -out private.pem 2048 Note that if you want to create … <\/p>\n