Delay throwing validation error (#223)

* Delay throwing validation error

* Fix TypeError

* Add validate decorator and ability to delegated validation to that

* cleanup

* cleanup

* add another test

* Ruff + enforce decorator

* More cleaning

* fix bandit and unused imports

* Revert "Delay throwing validation error"

* Use `__delay_validate_request__` for  backward compatibility

* Update Request.md

---------

Co-authored-by: Peter Uittenbroek <peter.uittenbroek@xs2event.com>

Author: luolingchun

docs/Usage/Request.md

@@ -103,6 +103,30 @@ def get_book(raw: BookRaw):
     return "ok"
 ```
 
+## @validate_request
+
+Sometimes you want to delay the verification request parameters, such as after login verification:
+
+```python
+from flask_openapi3 import validate_request
+
+
+def login_required(func):
+    @wraps(func)
+    def wrapper(*args, **kwargs):
+        print("login_required ...")
+        return func(*args, **kwargs)
+
+    return wrapper
+
+
+@app.get("/book")
+@login_required
+@validate_request()
+def get_book(query: BookQuery):
+    ...
+```
+
 ## Request model
 
 First, you need to define a [pydantic](https://github.com/pydantic/pydantic) model:
@@ -113,9 +137,11 @@ class BookQuery(BaseModel):
     author: str = Field(None, description='Author')
 ```
 
-More information to see [BaseModel](https://docs.pydantic.dev/latest/usage/models/), and you can [Customize the Field](https://docs.pydantic.dev/latest/usage/fields/).
+More information to see [BaseModel](https://docs.pydantic.dev/latest/usage/models/), and you
+can [Customize the Field](https://docs.pydantic.dev/latest/usage/fields/).
 
-However, you can also use **Field** to extend [Parameter Object](https://spec.openapis.org/oas/v3.1.0#parameter-object). Here is an example:
+However, you can also use **Field** to extend [Parameter Object](https://spec.openapis.org/oas/v3.1.0#parameter-object).
+Here is an example:
 
 `age` with **`example`** and `author` with **`deprecated`**.
 

flask_openapi3/__init__.py

@@ -38,4 +38,5 @@
 from .models import ValidationErrorModel
 from .models import XML
 from .openapi import OpenAPI
+from .request import validate_request
 from .view import APIView

flask_openapi3/request.py

@@ -1,7 +1,9 @@
 # -*- coding: utf-8 -*-
 # @Author  : llc
 # @Time    : 2022/4/1 16:54
+import inspect
 import json
+from functools import wraps
 from json import JSONDecodeError
 from typing import Any, Type, Optional
 
@@ -10,6 +12,8 @@
 from pydantic.fields import FieldInfo
 from werkzeug.datastructures.structures import MultiDict
 
+from .utils import parse_parameters
+
 
 def _get_list_value(model: Type[BaseModel], args: MultiDict, model_field_key: str, model_field_value: FieldInfo):
     if model_field_value.alias and model.model_config.get("populate_by_name"):
@@ -200,3 +204,38 @@ def _validate_request(
         abort(validation_error_callback(e))
 
     return func_kwargs
+
+
+def validate_request():
+    """
+    Decorator to validate the annotated parts of the function and throw and error if applicable.
+    """
+
+    def decorator(func):
+
+        setattr(func, "__delay_validate_request__", True)
+
+        is_coroutine_function = inspect.iscoroutinefunction(func)
+
+        if is_coroutine_function:
+
+            @wraps(func)
+            async def wrapper(*args, **kwargs):
+                header, cookie, path, query, form, body, raw = parse_parameters(func)
+                func_kwargs = _validate_request(header, cookie, path, query, form, body, raw, path_kwargs=kwargs)
+
+                return await func(*args, **func_kwargs)
+
+            return wrapper
+        else:
+
+            @wraps(func)
+            def wrapper(*args, **kwargs):
+                header, cookie, path, query, form, body, raw = parse_parameters(func)
+                func_kwargs = _validate_request(header, cookie, path, query, form, body, raw, path_kwargs=kwargs)
+
+                return func(*args, **func_kwargs)
+
+            return wrapper
+
+    return decorator

flask_openapi3/scaffold.py

@@ -35,10 +35,10 @@ def _collect_openapi_info(
             doc_ui: bool = True,
             method: str = HTTPMethod.GET
     ) -> ParametersTuple:
-        raise NotImplementedError   # pragma: no cover
+        raise NotImplementedError  # pragma: no cover
 
     def register_api(self, api) -> None:
-        raise NotImplementedError   # pragma: no cover
+        raise NotImplementedError  # pragma: no cover
 
     def _add_url_rule(
             self,
@@ -48,7 +48,7 @@ def _add_url_rule(
             provide_automatic_options=None,
             **options,
     ) -> None:
-        raise NotImplementedError   # pragma: no cover
+        raise NotImplementedError  # pragma: no cover
 
     @staticmethod
     def create_view_func(
@@ -67,16 +67,19 @@ def create_view_func(
         if is_coroutine_function:
             @wraps(func)
             async def view_func(**kwargs) -> FlaskResponse:
-                func_kwargs = _validate_request(
-                    header=header,
-                    cookie=cookie,
-                    path=path,
-                    query=query,
-                    form=form,
-                    body=body,
-                    raw=raw,
-                    path_kwargs=kwargs
-                )
+                if hasattr(func, "__delay_validate_request__") and func.__delay_validate_request__ is True:
+                    func_kwargs = kwargs
+                else:
+                    func_kwargs = _validate_request(
+                        header=header,
+                        cookie=cookie,
+                        path=path,
+                        query=query,
+                        form=form,
+                        body=body,
+                        raw=raw,
+                        path_kwargs=kwargs
+                    )
 
                 # handle async request
                 if view_class:
@@ -93,16 +96,19 @@ async def view_func(**kwargs) -> FlaskResponse:
         else:
             @wraps(func)
             def view_func(**kwargs) -> FlaskResponse:
-                func_kwargs = _validate_request(
-                    header=header,
-                    cookie=cookie,
-                    path=path,
-                    query=query,
-                    form=form,
-                    body=body,
-                    raw=raw,
-                    path_kwargs=kwargs
-                )
+                if hasattr(func, "__delay_validate_request__") and func.__delay_validate_request__ is True:
+                    func_kwargs = kwargs
+                else:
+                    func_kwargs = _validate_request(
+                        header=header,
+                        cookie=cookie,
+                        path=path,
+                        query=query,
+                        form=form,
+                        body=body,
+                        raw=raw,
+                        path_kwargs=kwargs
+                    )
 
                 # handle request
                 if view_class: