Hi there, great question! I don't know if there are plans to add this capability in the future, but there are a few good reasons why we don't have it today:

First, the structure of an HTTP request is important to how most firewalls work (in general, not just Vercel's). The headers come before the body so they can be quickly parsed and the request can be dropped as early as possible if needed. The body, on the other hand, can be of arbitrary length and usually requires more resources to analyze.

It's possible for a firewall to filter on the body, but consider the common case and the effects of filtering on the body. When unwanted requests come through, they first check the headers and drop matches there. Next, every request that has not been dropped will need to have its body analyzed - the most expensive part of the process - meaning that every good request fundamentally incurs that overhead.

I'm simplifying a lot here, but most firewalls work similar to this. There are ways to make filtering on the body more efficient like only inspecting requests below a certain size threshold, but broadly speaking, inspecting the request body is not something you want to do unless there's a specific reason that you can't do it another way.

Your best alternative is probably to use middleware for this - it runs before the serverless function, is cheaper, and as a nice bonus, it will keep the logs for your function itself a bit cleaner by filtering out those requests in advance. Keep in mind that the overhead I mentioned earlier still applies - inspecting every request body is going to be expensive. A way to mitigate this would be storing the id in your query params, that way you can read it from the headers

I don't have an example for exactly what you're asking, but check out our templates - one of these should give you enough info to get started: https://vercel.com/templates?framework=next.js&type=edge-middleware

Great answer by @pbzona

I wanted to add that we just released this WAF template in case it may be helpful to you @stefanbuck https://vercel.com/templates/vercel-firewall/emergency-redirect-firewall-rule

Vercel

Emergency Redirect Firewall Rule

Use this template to quickly implement an emergency redirect rule with the Vercel Web Application Firewall (WAF).