`Webhook::verifySignature($signature, $body, $sharedSecret);` should be `Webhook::verifySignature($body, $signature, $sharedSecret);`