Sort query string parameters before comparing them, to allow for systems that parse URI query-strings in different orders.
If a request fails verification, raise an error that indicates specifically what failed and why.
WARNING Client systems should be careful not to expose these exception messages to untrusted systems.