Signed Requests

[jankapunkt]

A resource server may decide to accept signed requests only, either
to replace transport-level security measures or to complement such
measures. Every signed request should be uniquely identifiable and
should not be processed twice by the resource server. This
countermeasure helps to mitigate:

o modifications of the message and

o replay attempts