code: private boolean verify(String key, BoxSignatureAlgorithm actualAlgorithm, String actualSignature,
              String webHookPayload, String deliveryTimestamp) {
          if (actualSignature == null) {
              return false;
          }
  
          byte[] actual = Base64.decode(actualSignature);
          byte[] expected = this.signRaw(actualAlgorithm, key, webHookPayload, deliveryTimestamp);
  
          return Arrays.equals(expected, actual);
      }
docs: Verifies a provided signature.
  
  @param key
  for which signature key
  @param actualAlgorithm
  current signature algorithm
  @param actualSignature
  current signature
  @param webHookPayload
  for signing
  @param deliveryTimestamp
  for signing
  @return true if verification passed