Concept签名验证 / Stripe-Signature 校验
HMAC Signature Verification
A security mechanism that computes an HMAC digest over the request body and timestamp using a shared secret key to verify the authenticity of a webhook source; verification must be performed against the raw request body.