Verification Token

How to validate if the callback is sent from Xendit?

Every callback from Xendit will have a verification token in the header of the callback, with the parameter X-CALLBACK-TOKEN.

Every Xendit account will have its own unique token associated with the account. You can find the token on the Xendit dashboard.