The before_request and after_request hooks of Flask can simulate middleware functions, suitable for in-app logic such as logging, performance monitoring and authentication; 2. Lower-level control can be achieved through WSGI middleware, such as modifying environment and response headers, suitable for cross-frame reuse or plug-in design; 3. The JWT authentication example shows how to perform permission verification before requesting and inject user information, and pass data in combination with g objects. Summary: The Flask hook function is recommended for most scenarios because it is simple and efficient. WSGI middleware is only selected when the underlying WSGI control is needed. The combination of the two can flexibly implement various middleware requirements.
In Flask, although there is not a clear concept of "middleware" like Django, you can implement similar functions through hook functions provided by Flask (such as before_request
, after_request
) or using werkzeug
's middleware mechanism.

Here is a practical Flask middleware example showing how to log request logs, add logic before and after request processing, and how to use WSGI middleware.
? 1. Use Flask hook function to simulate middleware
This is the most common and easiest way to work for most scenarios.

from flask import Flask, request, g import time app = Flask(__name__) # Pre-request processing: record the start time and print the request information @app.before_request def before_request(): g.start_time = time.time() print(f"? Request start: {request.method} {request.url}") # Post-request processing: record the response time @app.after_request def after_request(response): duration = time.time() - g.start_time print(f"? Response complete: {response.status} Time-consuming: {duration:.2f}s") Return response # Error handling (optional) @app.teardown_request def teardown_request(exception=None): if exception: print(f"? Request exception: {exception}") @app.route('/') def index(): return "Hello, Middleware in Flask!"
? Advantages: Simple and direct, suitable for applying internal logic (such as permissions, logs, performance monitoring, etc.).
? 2. Use WSGI middleware (standard middleware)
If you need more underlying control (such as processing flows, modifying environment variables, and reusing across applications), you can use WSGI middleware.

class SimpleMiddleware: def __init__(self, app): self.app = app def __call__(self, environment, start_response): # Before request: you can modify the environment print(f"? WSGI Middleware: request path = {environ['PATH_INFO']}") def custom_start_response(status, headers, *args): # Before responding: headers can be modified headers.append(('X-Processed-By', 'Flask-Middleware')) return start_response(status, headers, *args) # Call Flask application return self.app(environ, custom_start_response) # Use middleware app = Flask(__name__) app.wsgi_app = SimpleMiddleware(app.wsgi_app) @app.route('/') def index(): return "Hello from WSGI Middleware!"
? Advantages: More underlying, can be used across frameworks, suitable for plug-in, performance monitoring agent and other scenarios.
? 3. Practical scenario: JWT authentication middleware (based on before_request)
import jwt from flask import request, jsonify @app.before_request def requires_jwt_auth(): # Whitelist path, no authentication is required if request.path == '/login' or request.path.startswith('/static'): return None token = request.headers.get('Authorization') if not token: return jsonify({"error": "Missing token"}), 401 try: payload = jwt.decode(token, "your-secret-key", algorithms=["HS256"]) g.user = payload # Save the global object, and subsequent views can be used except jwt.ExpiredSignatureError: return jsonify({"error": "Token expired"}), 401 except jwt.InvalidTokenError: return jsonify({"error": "Invalid token"}), 401 return None # Continue to process the request
Summary: How to choose the two methods?
Way | Applicable scenarios | Recommended |
---|---|---|
@before_request / @after_request
|
Logs, authentication, performance monitoring and other in-app logic | ? Recommended, simple and efficient |
WSGI Middleware | Modify environment, cross-application reuse, header operations and other underlying controls | ?Special scenarios require |
In most cases, using Flask's hook function is enough. Use WSGI middleware only if you need to deal with WSGI layer logic.
Basically that's it. Flask's "middleware" is not complicated, but flexible, and the key is to choose the right method according to your needs.
The above is the detailed content of python flask middleware example. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

Polymorphism is a core concept in Python object-oriented programming, referring to "one interface, multiple implementations", allowing for unified processing of different types of objects. 1. Polymorphism is implemented through method rewriting. Subclasses can redefine parent class methods. For example, the spoke() method of Animal class has different implementations in Dog and Cat subclasses. 2. The practical uses of polymorphism include simplifying the code structure and enhancing scalability, such as calling the draw() method uniformly in the graphical drawing program, or handling the common behavior of different characters in game development. 3. Python implementation polymorphism needs to satisfy: the parent class defines a method, and the child class overrides the method, but does not require inheritance of the same parent class. As long as the object implements the same method, this is called the "duck type". 4. Things to note include the maintenance

Parameters are placeholders when defining a function, while arguments are specific values ??passed in when calling. 1. Position parameters need to be passed in order, and incorrect order will lead to errors in the result; 2. Keyword parameters are specified by parameter names, which can change the order and improve readability; 3. Default parameter values ??are assigned when defined to avoid duplicate code, but variable objects should be avoided as default values; 4. args and *kwargs can handle uncertain number of parameters and are suitable for general interfaces or decorators, but should be used with caution to maintain readability.

Iterators are objects that implement __iter__() and __next__() methods. The generator is a simplified version of iterators, which automatically implement these methods through the yield keyword. 1. The iterator returns an element every time he calls next() and throws a StopIteration exception when there are no more elements. 2. The generator uses function definition to generate data on demand, saving memory and supporting infinite sequences. 3. Use iterators when processing existing sets, use a generator when dynamically generating big data or lazy evaluation, such as loading line by line when reading large files. Note: Iterable objects such as lists are not iterators. They need to be recreated after the iterator reaches its end, and the generator can only traverse it once.

A class method is a method defined in Python through the @classmethod decorator. Its first parameter is the class itself (cls), which is used to access or modify the class state. It can be called through a class or instance, which affects the entire class rather than a specific instance; for example, in the Person class, the show_count() method counts the number of objects created; when defining a class method, you need to use the @classmethod decorator and name the first parameter cls, such as the change_var(new_value) method to modify class variables; the class method is different from the instance method (self parameter) and static method (no automatic parameters), and is suitable for factory methods, alternative constructors, and management of class variables. Common uses include:

The key to dealing with API authentication is to understand and use the authentication method correctly. 1. APIKey is the simplest authentication method, usually placed in the request header or URL parameters; 2. BasicAuth uses username and password for Base64 encoding transmission, which is suitable for internal systems; 3. OAuth2 needs to obtain the token first through client_id and client_secret, and then bring the BearerToken in the request header; 4. In order to deal with the token expiration, the token management class can be encapsulated and automatically refreshed the token; in short, selecting the appropriate method according to the document and safely storing the key information is the key.

Python's magicmethods (or dunder methods) are special methods used to define the behavior of objects, which start and end with a double underscore. 1. They enable objects to respond to built-in operations, such as addition, comparison, string representation, etc.; 2. Common use cases include object initialization and representation (__init__, __repr__, __str__), arithmetic operations (__add__, __sub__, __mul__) and comparison operations (__eq__, ___lt__); 3. When using it, make sure that their behavior meets expectations. For example, __repr__ should return expressions of refactorable objects, and arithmetic methods should return new instances; 4. Overuse or confusing things should be avoided.

Pythonmanagesmemoryautomaticallyusingreferencecountingandagarbagecollector.Referencecountingtrackshowmanyvariablesrefertoanobject,andwhenthecountreacheszero,thememoryisfreed.However,itcannothandlecircularreferences,wheretwoobjectsrefertoeachotherbuta

Python's garbage collection mechanism automatically manages memory through reference counting and periodic garbage collection. Its core method is reference counting, which immediately releases memory when the number of references of an object is zero; but it cannot handle circular references, so a garbage collection module (gc) is introduced to detect and clean the loop. Garbage collection is usually triggered when the reference count decreases during program operation, the allocation and release difference exceeds the threshold, or when gc.collect() is called manually. Users can turn off automatic recycling through gc.disable(), manually execute gc.collect(), and adjust thresholds to achieve control through gc.set_threshold(). Not all objects participate in loop recycling. If objects that do not contain references are processed by reference counting, it is built-in
