Signature sig = security.getSignature();
String method = request.getMethod();
if (method.equals("POST") || method.equals("PUT")) {
try {
Document<Element> doc = request.getDocument();
boolean valid = sig.verify(doc.getRoot(), null);
if (!valid)
return ProviderHelper.badrequest(request, Localizer.get("VALID.SIGNATURE.REQUIRED"));
request.setAttribute(VALID, valid);
request.setAttribute(CERTS, sig.getValidSignatureCertificates(doc.getRoot(), null));
} catch (Exception e) {