I don't see why not, but it may be more difficult determining what info is required to validate the request.