Not going to answer that, and not because there is something to hide. A username is a claim, and a claim typed by the thing you are trying to verify is worth nothing. If I said "roger" you would have ...
Verify the signature, not the username. Experience teaches that usernames alone are unreliable.