PM> Install-Package StoneBanking.Jwt

openssl genrsa -out myprivatekey.pem 4096
openssl rsa -in myprivatekey.pem -pubout > mypublickey.pub

{
  "StoneBankingJwt": {
    "PrivateKey": "myprivatekey.pem",
    "PublicKey": "mypublickey.pub",  
    "ClientId": "f7158598-fcbe-4810-98f5-08d512f42977",
    "Environment": "Sandbox",
    "AuthenticationExpiresInSeconds": 900,
    "ConsentExpiresInSeconds": 300,
    "ConsentDefaultRedirectUrl": "https://mysite.com/stonebanking/success"
  }
}

services.AddSingleton(configuration); // register IConfigurationRoot before
services.AddStoneBankingJwt();

services.AddStoneBankingJwt(configuration);

var settings = new StoneBankingSettings
{
    ClientId = "xxxx",
    PrivateKey = "key.pem",
    PublicKey = "key.pub",
    ConsentDefaultRedirectUrl = "https://mysite.com/redirect"
};
services.AddStoneBankingJwt(settings);

var settings = new StoneBankingSettings
{
    ClientId = "xxxx",
    PrivateKey = "key.pem",
    PublicKey = "key.pub",
    ConsentDefaultRedirectUrl = "https://mysite.com/redirect"
};
IStoneBankingJwt stoneBanking = new StoneBankingJwt(settings);

string authenticationToken = stoneBanking.CreateAuthenticationToken();

string authenticationToken = stoneBanking.CreateAuthenticationToken();
string accessToken = stoneBanking.CreateAccessToken(authenticationToken);

// this will create a token and reuse it during token expiration time
// 60 seconds before expiration, next call will generate a new access token

string accessToken = stoneBanking.CreateAccessToken();

string consentUrl = stoneBanking.CreateConsentUrl();

var metadata = new Dictionary<string, string>
{
    { "user_id", "user123" },
    { "other_data", "123" }
};

string consentUrl = stoneBanking.CreateConsentUrl(metadata);

Dictionary<string, object> decodedToken = stoneBankingJwt.DecodeToken(token);