How are other developers ensuring that calls to your server are coming from a Clover POS? I considered generating some JWT for the merchant, but I'm not sure at what point the JWT would even be generated, I certainly wouldn't want to do it every time there is a transaction at the POS. Even then, how would I know an authenticated Clover POS is requesting a JWT and not someone with malicious intent?
I can't imagine I am the first person to ask this question. I haven't had much luck finding anything similar in the forums, and there doesn't seem to be anything regarding this issue in the documentation.
Thank you!
