How is payment request authenticated after Payments app installation

[tabassumbano]

When shopify sends payment request to payment provider, header contains shopify_domain, request_id etc. But nothing as such that can help authenticate the request from shopify. How should it be authenticated?