using Virgil.SDK;

// Get generated token from server-side
Func<TokenContext, Task<string>> obtainTokenCallback = async (ctx) =>
{
     var jwtFromServer = await AuthenticatedQueryToServerSide(tokenContext);
     return jwtFromServer;
};

// Setup AccessTokenProvider
var accessTokenProvider = new CallbackJwtProvider(obtainTokenCallback);

using Virgil.Crypto;
using Virgil.SDK;

// App Key (you got this Key at Virgil Dashboard)
var appKeyBase64 = "MIGhMF0GCSqGSIb3DQEFDTBQMC8GCSqGSIb3DQEFDDAiBBC7Sg/DbNzhJ/uakTvafUMoAgIUtzAKBggqhkiG9w0CCjAdBglghkgBZQMEASoEEDunQ1yhWZoKaLaDFgjpxRwEQAFdbC8e6103lJrUhY9ahyUA8+4rTJKZCmdTlCDPvoWH/5N5kxbOvTtbxtxevI421z3gRbjAtoWkfWraSLD6gj0=";
var privateKeyData = Bytes.FromString(appKeyBase64, StringEncoding.BASE64);

// Crypto library imports a private key into a necessary format
var crypto = new VirgilCrypto();
var appKey = crypto.ImportPrivateKey(privateKeyData, appKeyPassword);

//  initialize accessTokenSigner that signs users JWTs
var accessTokenSigner = new VirgilAccessTokenSigner();

// use your App Credentials you got at Virgil Dashboard:
var appId = "be00e10e4e1f4bf58f9b4dc85d79c77a"; // App ID
var appKeyId = "70b447e321f3a0fd"; // App Key ID
var ttl = TimeSpan.FromHours(1); // 1 hour (JWT's lifetime)

// setup JWT generator with necessary parameters:
var jwtGenerator = new JwtGenerator(appId, appKey, appKeyId, ttl, accessTokenSigner);

// generate JWT for a user
// remember that you must provide each user with his unique JWT
// each JWT contains unique user's identity (in this case - Alice)
// identity can be any value: name, email, some id etc.
var identity = "Alice";
var aliceJwt = jwtGenerator.GenerateToken(identity);

// as result you get users JWT, it looks like this: "eyJraWQiOiI3MGI0NDdlMzIxZjNhMGZkIiwidHlwIjoiSldUIiwiYWxnIjoiVkVEUzUxMiIsImN0eSI6InZpcmdpbC1qd3Q7dj0xIn0.eyJleHAiOjE1MTg2OTg5MTcsImlzcyI6InZpcmdpbC1iZTAwZTEwZTRlMWY0YmY1OGY5YjRkYzg1ZDc5Yzc3YSIsInN1YiI6ImlkZW50aXR5LUFsaWNlIiwiaWF0IjoxNTE4NjEyNTE3fQ.MFEwDQYJYIZIAWUDBAIDBQAEQP4Yo3yjmt8WWJ5mqs3Yrqc_VzG6nBtrW2KIjP-kxiIJL_7Wv0pqty7PDbDoGhkX8CJa6UOdyn3rBWRvMK7p7Ak"
// you can provide users with JWT at registration or authorization steps
// Send a JWT to client-side
var jwtString = aliceJwt.ToString();

using Virgil.Crypto;
using Virgil.SDK;

// initialize Crypto library
var cardCrypto = new VirgilCardCrypto();

var yourBackendVerifierCredentials = new VerifierCredentials()
{
	Signer = "YOUR_BACKEND",
	PublicKeyBase64 = publicKeyStr
};

 var yourBackendWhitelist = new Whitelist()
{
    VerifiersCredentials = new List<VerifierCredentials>()
    {
        yourBackendVerifierCredentials
    }
};

var verifier = new VirgilCardVerifier(cardCrypto)
            {
                Whitelists = new List<Whitelist>() { yourBackendWhitelist }
            };

// initialize cardManager and specify accessTokenProvider, cardVerifier
var cardManagerParams = new CardManagerParams()
{
    CardCrypto = cardCrypto,
    AccessTokenProvider = accessTokenProvider,
    Verifier = verifier
};

   var cardManager = new CardManager(cardManagerParams);

using Virgil.Crypto;
using Virgil.SDK;

var crypto = new VirgilCrypto();

// generate a key pair
var keyPair = crypto.GenerateKeys();

// save Alice private key into key storage
privateKeyStorage.Store(keyPair.PrivateKey, "Alice");

// create and publish user's card with identity Alice on the Cards Service
var card = await cardManager.PublishCardAsync(
    new CardParams()
    {
        PublicKey = keyPair.PublicKey,
        PrivateKey = keyPair.PrivateKey,
    });

using Virgil.Crypto;
using Virgil.SDK;

// prepare a message
var messageToEncrypt = "Hello, Bob!";
var dataToEncrypt = Encoding.UTF8.GetBytes(messageToEncrypt);

// load a private key from a device storage
var (alicePrivateKey, alicePrivateKeyAdditionalData) = privateKeyStorage.Load("Alice");

// using cardManager search for Bob's cards on Cards Service
var cards = await cardManager.SearchCardsAsync("Bob");
var bobRelevantCardsPublicKeys = cards.Select(x => x.PublicKey).ToArray();

// sign a message with a private key then encrypt using Bob's public keys
var encryptedData = crypto.SignThenEncrypt(dataToEncrypt, alicePrivateKey, bobRelevantCardsPublicKeys);

using Virgil.Crypto;
using Virgil.SDK;

// load a private key from a device storage
var (bobPrivateKey, bobPrivateKeyAdditionalData) = privateKeyStorage.Load("Bob");

// using cardManager search for Alice's cards on Cards Service
var cards = await cardManager.SearchCardsAsync("Alice");
var aliceRelevantCardsPublicKeys = cards.Select(x => x.PublicKey).ToArray();

// decrypt with a private key and verify using one of Alice's public keys
var decryptedData = crypto.DecryptThenVerify(encryptedData, bobPrivateKey, aliceRelevantCardsPublicKeys);

using Virgil.SDK;

// using cardManager get a user's card from the Cards Service
var card = await cardManager.GetCardAsync("f4bf9f7fcbedaba0392f108c59d8f4a38b3838efb64877380171b54475c2ade8");

using Virgil.SDK;

// using cardManager search for user's cards on Cards Service
var cards = await cardManager.SearchCardsAsync("Bob");