How to validate if the callback is sent from Xendit?
Every callback from Xendit will have a verification token in the header of the callback, with the parameter X-CALLBACK-TOKEN.
Every Xendit account will have its own unique token associated with the account. You can find the token on the Xendit
