Branca in .NET

Branca is a simple token format for private systems. Tokens are protected using XChaCha20-Poly1305 for authenticated encryption and serialized using base62.

This library offers two ways to create Branca tokens in .NET, either by using basic, string-based payloads or by using JWT-style payloads and validation using Microsoft.IdentityModel.

Keys must be 32-bytes in length.

To read more about Branca tokens, check out:

• branca.io
• Alternatives to JWTs
• Replacing JWTs with Branca and PASETO in .NET Core

Basic Usage

The simplest way to create a Branca token is to use the basic usage style. This allows you to use any payload and decrypt the token without any other validation.

Token Creation

var key = Convert.FromBase64String("SOtPXZGVht/Lhl13HDa7tIzWAUg7QaHEgz6XE/6f0ME=");
var handler = new BrancaTokenHandler();

string token = handler.CreateToken("Hello, world!", key);

Overloads exist for passing in the timestamp as a uint or a DateTimeOffset.

Token Creation

var key = Convert.FromBase64String("SOtPXZGVht/Lhl13HDa7tIzWAUg7QaHEgz6XE/6f0ME=");
var handler = new BrancaTokenHandler();

BrancaToken decryptToken = handler.DecryptToken(token, key);

JWT Style Usage

TODO