[security] add http request verifier interface.