I resorted to directly making a request to my app. But in that case, how to verify if that request is legit?

I'm happy to directly post to my app's URL but then the issue is, how to verify that the request legitimately came from a shopify site's page? I'm using the `shopify_app` ruby gem via the shopify Ruby on Rails template and I have `AppProxyVerificatio...