namespace System.IdentityModel.Tokens.Jwt { public class JwtSecurityTokenHandler { private delegate bool CertMatcher (X509Certificate2 cert); public static IDictionary<string, string> DefaultInboundClaimTypeMap; public static bool DefaultMapInboundClaims; public static IDictionary<string, string> DefaultOutboundClaimTypeMap; public static ISet<string> DefaultInboundClaimFilter; public static IDictionary<string, string> DefaultOutboundAlgorithmMap; public bool MapInboundClaims { get; set; } public IDictionary<string, string> InboundClaimTypeMap { get; set; } public IDictionary<string, string> OutboundClaimTypeMap { get; set; } public IDictionary<string, string> OutboundAlgorithmMap { get; } public ISet<string> InboundClaimFilter { get; set; } public static string ShortClaimTypeProperty { get; set; } public static string JsonClaimTypeProperty { get; set; } public JwtSecurityTokenHandler(); public virtual string CreateEncodedJwt(SecurityTokenDescriptor tokenDescriptor); public virtual string CreateEncodedJwt(string issuer, string audience, ClaimsIdentity subject, DateTime? notBefore, DateTime? expires, DateTime? issuedAt, SigningCredentials signingCredentials); public virtual string CreateEncodedJwt(string issuer, string audience, ClaimsIdentity subject, DateTime? notBefore, DateTime? expires, DateTime? issuedAt, SigningCredentials signingCredentials, EncryptingCredentials encryptingCredentials); public virtual string CreateEncodedJwt(string issuer, string audience, ClaimsIdentity subject, DateTime? notBefore, DateTime? expires, DateTime? issuedAt, SigningCredentials signingCredentials, EncryptingCredentials encryptingCredentials, IDictionary<string, object> claimCollection); public virtual JwtSecurityToken CreateJwtSecurityToken(SecurityTokenDescriptor tokenDescriptor); public virtual JwtSecurityToken CreateJwtSecurityToken(string issuer, string audience, ClaimsIdentity subject, DateTime? notBefore, DateTime? expires, DateTime? issuedAt, SigningCredentials signingCredentials, EncryptingCredentials encryptingCredentials); public virtual JwtSecurityToken CreateJwtSecurityToken(string issuer, string audience, ClaimsIdentity subject, DateTime? notBefore, DateTime? expires, DateTime? issuedAt, SigningCredentials signingCredentials, EncryptingCredentials encryptingCredentials, IDictionary<string, object> claimCollection); public virtual JwtSecurityToken CreateJwtSecurityToken(string issuer = null, string audience = null, ClaimsIdentity subject = null, DateTime? notBefore = default(DateTime?), DateTime? expires = default(DateTime?), DateTime? issuedAt = default(DateTime?), SigningCredentials signingCredentials = null); public JwtSecurityToken ReadJwtToken(string token); protected ClaimsPrincipal ValidateTokenPayload(JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual JwtSecurityToken ValidateSignature(string token, TokenValidationParameters validationParameters); protected virtual ClaimsIdentity CreateClaimsIdentity(JwtSecurityToken jwtToken, string issuer, TokenValidationParameters validationParameters); protected virtual string CreateActorValue(ClaimsIdentity actor); protected virtual void ValidateAudience(IEnumerable<string> audiences, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual void ValidateLifetime(DateTime? notBefore, DateTime? expires, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual string ValidateIssuer(string issuer, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual void ValidateTokenReplay(DateTime? expires, string securityToken, TokenValidationParameters validationParameters); protected virtual SecurityKey ResolveIssuerSigningKey(string token, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual SecurityKey ResolveTokenDecryptionKey(string token, JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected string DecryptToken(JwtSecurityToken jwtToken, TokenValidationParameters validationParameters); protected virtual void ValidateIssuerSecurityKey(SecurityKey key, JwtSecurityToken securityToken, TokenValidationParameters validationParameters); } }