I have an API service that should be requested only by Payu. I need ideas about how to validate this.
For example: Edit allowedOrigins
I don't know if there is a Payu service that confirm that the request has been made from their servers.