The payment flow begins with an HTTP request sent from Shopify to the provider's payment session URL

[adiputra22]

Hi,

I right now on payment app. 

I check this link have notes:

The payment flow begins with an HTTP request sent from Shopify to the provider's payment session URL provided during the payments app extension configuration. This request contains information about the customer and the order.

That notes is from here link: https://shopify.dev/apps/payments/processing-a-payment#how-a-payment-flow-works

My Question is, is shopify send session URL with key or unique key for sign us Shopify is requested our App link?

Because I fear there is other person use this URL to misuse. So I want prevent request come from other person requested.

Thank you