How is a WSSE header validated?

Escape\WSSEAuthenticationBundle\Security\Core\Authentication\Provider\Provider::validateDigest()

See also: