Verifies a parsed assertion against the request and the sender's registered public key. Checks clock skew, then the audience, then the signature over the canonical string (which covers the body hash, method and path).
Verifies a parsed assertion against the request and the sender's registered public key. Checks clock skew, then the audience, then the signature over the canonical string (which covers the body hash, method and path).