Own every part of your partner program

public function handle(Request $request, Closure $next): mixed
{
    $secret = 'your-subscription-secret'; // Replace with your secret
    $payload = $request->getContent(); // Raw request body
    $receivedSignature = $request->header('X-UpPromote-Signature');

    $calculatedSignature = hash_hmac('sha256', $payload, $secret);

    if (hash_equals($receivedSignature, $calculatedSignature)) {
        logger('Webhook valid');
        return $next($request);
    } else {
        logger('Webhook invalid. Received: ' . $receivedSignature . ', Calculated: ' . $calculatedSignature);
        return response()->json(['error' => 'Invalid signature'], 401);
    }
}