public ClaimsPrincipal GetPrincipalFromToken(string token, string signingKey)
 {
     return(_jwtTokenHandler.ValidateToken(token, new TokenValidationParameters
     {
         ValidateAudience = false,
         ValidateIssuer = false,
         ValidateIssuerSigningKey = true,
         IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(signingKey)),
         ValidateLifetime = false // we check expired tokens here
     }));
 }