What is the signature in that case? Does it require having access to the non-query URL or request body?