Program.cs

using System.Security.Claims;
using Microsoft.Extensions.DependencyInjection;

using JwtGenerator;
using JwtGenerator.Configuration;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Options;
using Microsoft.IdentityModel.Tokens;

var config = new ConfigurationBuilder()
    .SetBasePath(Directory.GetCurrentDirectory())
    .AddJsonFile("appsettings.json")
    .AddUserSecrets<Program>()
    .Build();

var services = new ServiceCollection();

services.AddSingleton<JwtSecurityTokenService>()
        .AddLogging(builder => builder.AddConsole())
        .Configure<GreenTinOptions>(config.GetSection(nameof(GreenTinOptions)));

var provider = services.BuildServiceProvider();

var jwtSecurity = provider.GetRequiredService<JwtSecurityTokenService>();
var logger = provider.GetRequiredService<ILogger<Program>>();

try
{
    var options = provider.GetRequiredService<IOptions<GreenTinOptions>>().Value.Jwt;
    var emailClaim = new Claim("email", "john.doe@larch.com");    
    var token = jwtSecurity.CreateToken(
        options.Audience, 
        options.Issuer, 
        options.PrivateKey, 
        options.ExpiryInMinutes, 
        emailClaim);
    logger.LogInformation("{Token}", token);
    
    var principal = jwtSecurity.ValidateToken(token, options.Audience, options.Issuer, options.PublicKey);
    logger.LogInformation("Validated {Uid}:", principal.FindFirst(c => c.Type == "uid"));
}
catch (NotSupportedException e)
{
    logger.LogError(e, "Not supported to process token");
}
catch (ArgumentException e)
{
    logger.LogError(e, "Failed to process token");
}
catch (SecurityTokenSignatureKeyNotFoundException e)
{
    logger.LogError(e, "Failed to process token");
}
catch (SecurityTokenExpiredException e)
{
    logger.LogError(e, "Failed to process expired token");
}

// ReSharper disable once ClassNeverInstantiated.Global
public partial class Program;