This doesn't depend on BouncyCastle AFAICT, by default it uses javax.crypto but you can change it for a BouncyCastle security provider.

https://github.com/FusionAuth/fusionauth-jwt/blob/main/src/m...