With express + bodyParser.json, it's not straight forward to get the raw payload. (which is needed to validate sha). It's possible to [store the raw body](https://flaviocopes.com/express-get-raw-body/) with bodyParser's validate function. It'd be great if the SDK included this helper.