Actually since your API depends on the req object, this should not store the signature in my. because you call it on one request object and you get it on any subsequent request.