Paste the exact X-Ureh-Timestamp, raw request body, and X-Ureh-Signature header your endpoint received, and we will check them against your own signing secret, the same check your own verification code should perform.