Also, this would be done for all requests passing through that guard, which might not be necessary. If you just want to get the data inside your controller you could just move your code into a parameter decorator, that's a bit cleaner than modifying the request obj.