Why Custom middleware creation in Flask? - Purpose & Use Cases

The Big Idea

What if you could add security checks once and have them work everywhere automatically?

The Scenario

Imagine you want to check every web request to your Flask app for a special token before processing it.

You try adding this check inside every route function manually.

The Problem

Manually adding checks in every route is tiring and easy to forget.

This leads to inconsistent security and duplicated code everywhere.

The Solution

Custom middleware lets you write one piece of code that runs before every request automatically.

This keeps your app clean and secure without repeating yourself.

Before vs After

✗ Before

def route():
    if not check_token():
        return 'Unauthorized'
    # route logic

✓ After

@app.before_request
def check_token_middleware():
    if not check_token():
        return 'Unauthorized'

What It Enables

You can add features like logging, authentication, or error handling globally with one simple middleware.

Real Life Example

A website that blocks users without a valid login token from accessing any page by checking the token once in middleware.

Key Takeaways

Manual checks in every route cause repeated code and mistakes.

Middleware runs code automatically before requests.

Custom middleware keeps your app organized and secure.

Practice

1. What is the main purpose of creating custom middleware in a Flask application?

easy

A. To run code before and after each request is processed by Flask

B. To define new routes and views in the Flask app

C. To replace Flask's built-in request handling completely

D. To create database models for the application

Solution

1. Step 1: Understand middleware role

   Middleware runs code around request processing, before and after Flask handles requests.

2. Step 2: Compare options

   Only To run code before and after each request is processed by Flask describes this behavior. Other options describe unrelated tasks.

3. Final Answer:

   To run code before and after each request is processed by Flask -> Option A

4. Quick Check:

   Middleware purpose = run code around requests [OK]

Hint: Middleware wraps requests to add extra processing [OK]

Common Mistakes:

• Confusing middleware with route creation
• Thinking middleware replaces Flask core
• Mixing middleware with database models

2. Which of the following is the correct way to define a custom middleware class in Flask?

easy

A. class MyMiddleware:
def __init__(self, app):
self.app = app
def __call__(self, environ, start_response):
return self.app(environ, start_response)

B. def MyMiddleware(app):
return app

C. class MyMiddleware:
def handle_request(self):
pass

D. class MyMiddleware:
def __init__(self):
pass

Solution

1. Step 1: Check middleware class structure

   Middleware must accept the app in __init__ and implement __call__ with environ and start_response.

2. Step 2: Validate options

   Only class MyMiddleware: def __init__(self, app): self.app = app def __call__(self, environ, start_response): return self.app(environ, start_response) matches this pattern correctly. Others miss __call__ or parameters.

3. Final Answer:

   Correct middleware class with __init__ and __call__ methods -> Option A

4. Quick Check:

   Middleware class needs __call__ method [OK]

Hint: Middleware class must implement __call__(environ, start_response) [OK]

Common Mistakes:

• Omitting __call__ method
• Not passing app to __init__
• Using function instead of class

3. Given this middleware code, what will be printed when a request is made?

class LoggerMiddleware:
    def __init__(self, app):
        self.app = app
    def __call__(self, environ, start_response):
        print('Before request')
        response = self.app(environ, start_response)
        print('After request')
        return response

app.wsgi_app = LoggerMiddleware(app.wsgi_app)

medium

A. Only After request printed

B. Only Before request printed

C. No output printed

D. Before request printed, then After request printed

Solution

1. Step 1: Analyze __call__ method

   Prints 'Before request', calls app, then prints 'After request'.

2. Step 2: Understand call order

   Both prints happen on each request, before and after app call.

3. Final Answer:

   Before request printed, then After request printed -> Option D

4. Quick Check:

   Prints before and after app call [OK]

Hint: Middleware __call__ runs code before and after app call [OK]

Common Mistakes:

• Thinking only one print runs
• Confusing order of prints
• Assuming prints happen outside __call__

4. Identify the error in this middleware code snippet:

class BadMiddleware:
    def __init__(self, app):
        self.app = app
    def __call__(self, request):
        print('Middleware active')
        return self.app(request)

medium

A. Missing __init__ method to accept app

B. __call__ method has wrong parameters; should be (environ, start_response)

C. Middleware class should not print anything

D. The return statement should be outside __call__

Solution

1. Step 1: Check __call__ method signature

   WSGI middleware __call__ must accept (environ, start_response), not (request).

2. Step 2: Validate other parts

   __init__ is correct, printing is allowed, return inside __call__ is correct.

3. Final Answer:

   __call__ method has wrong parameters; should be (environ, start_response) -> Option B

4. Quick Check:

   Middleware __call__ signature = (environ, start_response) [OK]

Hint: Middleware __call__ needs environ and start_response params [OK]

Common Mistakes:

• Using Flask request object instead of WSGI params
• Omitting start_response parameter
• Misplacing return statement

5. You want to create middleware that adds a custom header 'X-Hello: World' to every response. Which code snippet correctly implements this?

hard

A. class HeaderMiddleware:
def __init__(self, app):
self.app = app
def __call__(self, environ, start_response):
response = self.app(environ, start_response)
response.headers['X-Hello'] = 'World'
return response

B. class HeaderMiddleware:
def __init__(self, app):
self.app = app
def __call__(self, environ, start_response):
start_response('200 OK', [('X-Hello', 'World')])
return self.app(environ, start_response)

C. class HeaderMiddleware:
def __init__(self, app):
self.app = app
def __call__(self, environ, start_response):
def custom_start_response(status, headers, exc_info=None):
headers.append(('X-Hello', 'World'))
return start_response(status, headers, exc_info)
return self.app(environ, custom_start_response)

D. class HeaderMiddleware:
def __init__(self, app):
self.app = app
def __call__(self, environ, start_response):
environ['X-Hello'] = 'World'
return self.app(environ, start_response)

Solution

1. Step 1: Understand WSGI header modification

   Headers are set by calling start_response with status and headers. To add headers, wrap start_response.

2. Step 2: Check options for correct header addition

   class HeaderMiddleware: def __init__(self, app): self.app = app def __call__(self, environ, start_response): def custom_start_response(status, headers, exc_info=None): headers.append(('X-Hello', 'World')) return start_response(status, headers, exc_info) return self.app(environ, custom_start_response) wraps start_response to append header before calling original start_response. Others misuse start_response or response object.

3. Final Answer:

   Wrap start_response to add header before calling original -> Option C

4. Quick Check:

   Add headers by wrapping start_response [OK]

Hint: Wrap start_response to add headers in middleware [OK]

Common Mistakes:

• Calling start_response twice incorrectly
• Trying to modify response object directly in WSGI
• Adding headers to environ instead of response