Verify signatures

Reqtap detects Stripe, GitHub, Shopify, and Clerk signatures from request headers.

valuemeaning

verifiedProvider signature is valid for the configured secret.

invalidProvider signature was present but failed verification.

missing_secretProvider was detected but the endpoint has no signing secret.

not_detectedNo supported signature header was found.

Set the signing secret on the endpoint settings page. Raw body preservation is required, so Reqtap avoids global JSON body mutation on ingest routes.