PayU POST confirmation validation

I have an API service that should be requested only by Payu. I need ideas about how to validate this.

For example: Edit allowedOrigins

I don't know if there is a Payu service that confirm that the request has been made from their servers.

via Chebli Mohamed