At least when I implemented it, it was the full message, as a complete valid json object. The signature would get added as another field, and then the object reserialized.