Source-derived reference
API Reference
Open the actual B5SecurityKit reference pages already included in this website. New trust-platform contracts must be generated from build-certified endpoints before they are presented as generally available.
Production endpoints, credentials, native attestation, cloud integrations, and release certification are environment-specific.
Current package references
B5SecurityKit.AuthorizationAuthorization contracts and protected-action patterns.Open →B5SecurityKit.AuthProvidersAuthentication provider integrations.Open →B5SecurityKit.NetShared networking and request-protection APIs.Open →B5SecurityKit.NetCore.NET Core integration surface.Open →B5SecurityKit.NetCore.MiddlewareASP.NET Core middleware surface.Open →B5SecurityKit.NetFramework.MvcASP.NET MVC integration surface.Open →B5SecurityKit.NetFramework.WebApiASP.NET Web API integration surface.Open →B5SecurityKit.ServiceStackServiceStack integration surface.Open →B5SecurityKit.ServiceStack.ValidatorsServiceStack validation extensions.Open →B5SecurityKit.XssCross-site scripting detection and protection APIs.Open →
Build workflows
Request protection and response evidence
| Operation | Method and path | Purpose |
|---|---|---|
| Health | GET /health | Confirm assigned Test Mode endpoint availability. |
| Evaluate trust | POST /v1/trust/decisions | Evaluate action, resource, identity, entitlement, and context. |
| Get evidence | GET /v1/evidence/{evidenceId} | Retrieve permitted evidence for an authorized caller. |
| Simulate webhook | POST /v1/test/webhooks/simulate | Exercise signed-event delivery in Test Mode. |
Signed HTTP request
curl -X POST "$B5_TEST_BASE_URL/v1/trust/decisions"
-H "Content-Type: application/json"
-H "X-B5-Tenant-Id: $B5_TENANT_ID"
-H "X-B5-Application-Id: $B5_APPLICATION_ID"
-H "X-B5-Key-Id: $B5_KEY_ID"
-H "X-B5-Timestamp: $timestamp"
-H "X-B5-Nonce: $nonce"
-H "X-B5-Content-SHA256: $digest"
-H "Authorization: B5-HMAC-SHA256 $signature"
--data "$body"Truth-in-labeling: this is a reference starter. The authoritative API contract must be generated and published from build-certified B5 endpoints.
Release boundary: Production endpoints, credentials, native attestation, cloud integrations, and release certification are environment-specific.
Developer Relations
Talk to a human.
Get architecture guidance, Test Mode access, integration review, or help choosing the right B5 identity and authorization pattern.