docs: public boolean isValidCallback(String originAuthorization, String url, byte[] body, String contentType) {
          String authorization = "QBox " + signRequest(url, body, contentType);
          return authorization.equals(originAuthorization);
      }