Using Tyk to inject additional auth details

You can expose the request variables to python plugins so yes you can easily alter the request in any way you want in the middleware.