Callback Signature Verifier
Constructs a verifier for callbacks delivered to registeredCallbackUrl.
Parameters
The anchor's SIGNING_KEY from its stellar.toml (G... Ed25519 address).
The HTTPS URL that the consumer previously registered with the anchor as the callback destination. The verifier derives the canonical host from this URL (port stripped). HTTP is allowed only when the host is a loopback authority.
Maximum tolerated |now - signedTimestamp| in seconds. Must be in 1..600. Defaults to 120 to match the SEP-31 specification recommendation. Values above 120 deviate from the spec and should only be used to absorb test-environment clock skew.
Clock used to read the current time. Defaults to Clock.System. Tests can inject a fixed-time clock to verify freshness boundaries deterministically.
Throws
if signingKey is malformed, registeredCallbackUrl is malformed or uses an unsupported scheme, or freshnessSeconds is out of range.