Check the entire contract, including extracting the body, before passing it to the underlying HttpHandler.