Following the example here: – going to use this for impersonation, useful for testing and helping users.

The first line creates a new JwtAuthProvider, but since I already have one (from Configure.Auth.cs), couldn’t I just use that one?

Then I found AuthenticateService.GetJwtAuthProvider() only returns the reader version. Is there any reason for this, or could I just cast it to the full JwtAuthProvider?

Yep you can just cast it if your App is configured with the full version.