v1, then the base64 HMAC-SHA256 of <id>.<timestamp>.<payload> under the destination's secret.
v1,
<id>.<timestamp>.<payload>
The destination's nonempty secret, used as UTF-8 bytes without base64 decoding.
The delivery's id.
The time the delivery is signed, in milliseconds since the epoch.
The body exactly as it is sent.
Error when the secret is empty.
v1,then the base64 HMAC-SHA256 of<id>.<timestamp>.<payload>under the destination's secret.