title: Generating a JWT in an Active Directory environment
body: <p>I have an ASP.NET Core 2.0 Web API which will run in a very-high security corporate AD environment (no Azure, no Azure AD, which makes Googling for a solution useless).</p>
  
  <p>The API uses JWT auth, and the client will be an Angular 2+ SPA.</p>
  
  <p>What is the easiest way to issue a token?</p>
  
  <p>My initial thought was to set up an authentication endpoint with Windows Authentication that issues the token and populates the claims appropriately.</p>
  
  <p>Is this the best solution?</p>
  
  <p>Or is there another way I can get the JWT token issued without connecting to any external (internet) services?</p>