Feature to modify body and query_parameters in `PiccoloCRUD` about piccolo_api

[dantownsend]

Hi @sarvesh4396

My initial thoughts was using middleware to modify the body. I looked around a bit and found this issue:

encode/starlette#495 (comment)

It's definitely not easy to do, but I think it's possible.

We have a couple of ways of modifying the behaviour of PiccoloCRUD. One is hooks, but probably not useful in this situation.

The other is validators. The intended purpose is to add extra validation to endpoints, but you may be able to use these to modify the request.

async def my_validator(piccolo_crud: PiccoloCRUD, request: Request):
    json = await request.json()
    request._json = {**json, 'custom_field': 'hello world'}

It might be worth giving that a go.

[sarvesh4396]

hey @dantownsend ,
I tried the above solution but it doesn't work cause the data is extracted before the validators run.

[dantownsend]

@sarvesh4396 OK, interesting. When you do await request.json() does it just hang?

[sarvesh4396]

@dantownsend Yes, It does, query params can be changed through middleware but not the body.
For now, I have passed the modify_body arg for a quick patch it is working fine.

[dantownsend]

@sarvesh4396 OK, cool. Do you think this is something we could write a custom hook for?

[sarvesh4396]

@dantownsend I didn't get it, Do you mean by Hooks which are there in piccolo-api? or something else.
Though I believe we could write a function for it. and we can run it wherever we are doing await request.json() such that we do not have to await again and again which may hamper performance.
accessing the request body in middleware has been an issue I couldn't find anything yet which can resolve it.

[dantownsend]

@sarvesh4396 Yeah, we have hooks for PiccoloAPI like pre_save. Could add a new one maybe? 🤔

In our CSRFMiddleware we access the request body, but then add it to the ASGI scope. This works OK, but the downstream app needs to know to look in the scope for the data.

piccolo_api/piccolo_api/csrf/middleware.py

Lines 136 to 139 in 16704dd

	if self.allow_form_param and not header_token:
	form_data = await request.form()
	form_token = form_data.get(self.cookie_name, None)
	request.scope.update({"form": form_data})

[sarvesh4396]

@dantownsend, It should work ideally, as we can receive the request Object in hooks.