IsWebhookTrusted

    private function IsWebhookTrusted($tallyKeyFromSettings, $receivedSignature, $payLoadBody) : bool {
        // Obliczamy oczekiwany podpis HMAC na podstawie klucza Tally i payloadu

        $payLoadBodyString = json_encode($payLoadBody);

        $expectedSignature = hash_hmac('sha256', $payLoadBodyString, $tallyKeyFromSettings);
    
        error_log("Hash coming from request: " . $receivedSignature);
        error_log("Hash saved in settings: " . $tallyKeyFromSettings);

        error_log("Result of cryptographic count: " . $expectedSignature);

        // Result of comparison of the received hash with the desired one
        $result = hash_equals($receivedSignature, $expectedSignature);

        if( $result == true ) {
            // Consistent comparison OK
            error_log("Hash OK");

            return true;
        } else {
            // The comparison is inconsistent NOT OK
            error_log("Hash Invalid");

            return false;
        }
    }