HTTPsec Authentication Protocol

7.3. Continuation Request Validation

A continuation request message MUST meet all the following conditions to be considered valid by the responder that receives it:

1. The header is well-formed according to the Continuation Request section.
2. The token directive references an existing shared secret arrangement.
3. The url directive satisfies its equivalence condition.
4. The count directive satisfies its uniqueness conditions.
5. The mac directive's value equals the result of the re-computation over the message, using the request MAC key indexed by the token directive.
6. If the digest directive is present, its value equals the result of hashing the entity-body according to this specification's Hash Algorithm.

A request that fails validation SHOULD cause the responder to flush all state associated with the shared secret arrangement indexed by the token directive, notably the MAC keys and Cipher keys.