Lighttpd

There is a issue that happened in our test.

We want to upload a file(40M) to our device,we using post method,we found the web server will read the request and file first,when file read over,then do authorization(mod_auth.c),Why read file prior to authorization check?Does this have some specials reason?

Could we read request header first and then do auth check,if auth successfully,let CGI to read the file data,but if auth failed no need read file?

Thanks.