All requests Plivo makes to your server URLs include X-Plivo-Signature-V3 and X-Plivo-Signature-V3-Nonce HTTP headers. To validate a request and to verify that it originated from Plivo, you must generate a signature at your end and check that it matches the X-Plivo-Signature-V3 parameter in the HTTP header. Read more about signature validation.

Plivo SDKs provide methods to compute and verify X-Plivo-Signature-V3.

​
Arguments

uri
string

The callback that you want to validate. This uri can be answer_url, url (message callback), message_url, callback_url, action_url, or hangup_url.

nonce
string

A randomly generated string used to verify requests. You can get the nonce from the event details posted to your callback.

X-Plivo-Signature-V3 or X-Plivo-Signature-Ma-V3
string

You can get these values from the event details posted to your callback.

auth_token
string

Your account Auth Token, which you can get from the overview screen of the Plivo console.