Step 3

Quick Start

The Quick Start connects the pieces. It creates a canonical request, signs it with a test credential, sends it to a configured test endpoint, and records the correlation and evidence identifiers returned by B5.

Run the reference client

.NET 10 sample projectDependency-free console client with canonicalization and HMAC signing.Open →Bash first callShell request template.Open →PowerShell first callPowerShell request template.Open →Configuration templateNon-secret settings for the test tenant.Open →

Choose the next guide

.NET APIServer-to-server and protected ASP.NET Core APIs.Open →Apple iOSNative iOS client pattern.Open →Google AndroidNative Android client pattern.Open →Chrome extensionEnterprise browser-extension pattern.Open →On-premises APIOutbound connector and hybrid pattern.Open →Partner APIDelegated partner and channel integration.Open →

Implementation steps

Copy `b5-test-settings.json` and enter Test Mode identifiers only.

Set the secret through an environment variable, not in the JSON file.

Run the .NET, Bash, or PowerShell client against the assigned Test Mode base URL.

Verify the response correlation identifier, decision result, and evidence reference.

Run the replay and wrong-audience tests before moving to a platform-specific guide.

Runnable quick start

Make the first protected request

Download the .NET sample or command-line client.
Set the five Test Mode environment variables.
Run the client against the assigned Test Mode base URL.
Record the returned correlation and evidence identifiers.
Repeat the nonce to confirm replay denial.

.NET 10 signed-request excerpt

var signed = B5RequestSigner.Sign(
    HttpMethod.Post,
    new Uri($"{baseUrl}/v1/trust/decisions"),
    body,
    tenantId,
    applicationId,
    keyId,
    secret,
    DateTimeOffset.UtcNow);

request.Headers.Add("X-B5-Timestamp", signed.Timestamp);
request.Headers.Add("X-B5-Nonce", signed.Nonce);
request.Headers.Add("X-B5-Content-SHA256", signed.ContentSha256);
request.Headers.Authorization =
    new AuthenticationHeaderValue("B5-HMAC-SHA256", signed.SignatureBase64);

C#.NET 10 quick startSDK-style .NET 10 project.Download ↓C#Request signerCanonical HMAC-SHA-256 request signing.Download ↓C#First protected callRunnable console client.Download ↓C#Webhook verifierFreshness and constant-time signature verification.Download ↓JSONPostman collectionHealth, decision, evidence, and webhook requests.Download ↓JSONPostman environmentTest-only variables.Download ↓PS1PowerShell clientWindows and LocalWP-friendly signed request.Download ↓SHBash clientmacOS, Linux, and WSL signed request.Download ↓

Developer Relations

Talk to a human.

Get architecture guidance, Test Mode access, integration review, or help choosing the right B5 identity and authorization pattern.

Contact Developer Relations Request a demo