3.3.5.1.2.2 Secure Request

The request payload becomes the payload element as defined in section 3.1.6.1.

The client MUST also prepare a fragment element with the name "fragment" in the namespace "urn:groove.net", as defined in section 2.2.3 under the request payload sub-section. The fragment element MUST have one child element named "Event" as the event wrapper element. The event wrapper element MUST have one child element named "SE" in the namespace "urn:groove.net". The "urn:groove.net:SE" element MUST contain no content and is referred to as the security element. This fragment element becomes the header element as defined in section 3.1.6.1.

The client MUST fill in all required attributes for the Event element, as defined in section 2.2.2.2.7. In particular, the GUID and DomainGUID attributes are used to identify the shared key.

With the fragment element, the request payload and the shared key, the client MUST follow the steps in section 3.1.5 to secure the request and restore the serialized secured fragment element.