When you have created a subscription to a webhook event, and that event occurs, you will receive a webhook notification. A signed notification will contain a signature in the Vonage-Signature header that you can use to verify that Vonage sent the notification and has not been tampered with. This guide describes how you should verify a signed webhook notification. You can verify the notification in two parts:
...
When you receive a signed webhook notification, the notification contains the signature in a JWT stored in the Vonage-Signature header. You should verify the signature to ensure the notification originated from Vonage.
...