I get your problem, you want to "match per URI" and then "validate the request" - the second is not a routing problem IMO