Questions tagged [validation]
Tags for questions related to validating data.
223
questions
1
vote
3answers
46 views
What http error to return in case of validation and business rules in a domain driven design api
I have a .net core api trying to implement it according to domain drive design principles.
In the domain layer there is a public Create method that contains all validation and business rules. If one ...
1
vote
1answer
102 views
Independence axiom and ideal design explained
I am studying a book about software design called: Nonfunctional Requirements in Systems Analysis and Design which talks about the Axiomatic Design Methodology.
This methodology has two axioms. One ...
1
vote
2answers
101 views
How to Validate a Child Object Based on Parent Object's Data
Taking into consideration that I'm making an attempt at Domain-Driven Design and overall good separation of concerns when it comes to business logic, data access logic, etc...
Question: How do you ...
0
votes
1answer
136 views
Domain Driven Design Validation Logic
I am trying to implement DDD along with Hexagonal Architecture. One of the things that I am struggling with is validations. I had explored a lot of articles on where the validation should be but it ...
2
votes
4answers
211 views
Is it a bad practice to query remote resources inside validation?
Watching this talk about Symfony Forms and validation, at 23:06, I got stuck with a doubt
I couldn't find a satisfying answer to:
Is it a bad practice to execute a query (or a web request, or a side ...
2
votes
1answer
46 views
Best practice in synchronized form data validations (Web apps - Client-Server)
Here we go again with topic what was asked many times all over internet, but I not found any good enough answer:
What are best practices in making client and server side validations synced?
I was ...
1
vote
2answers
610 views
REST API Input Validation Strategy
I am implementing a REST API and need to validate the JSON API inputs for the CREATE and UPDATE endpoints.
The goal is to send a 400 error prior to doing any processing if the inputs are not valid.
...
0
votes
1answer
52 views
To And From Date Validation in Model
In my Springboot project I need to perform a validation of the type validFromDate<validToDate.
I was wondering whether would it be a good or bad practice to place a validation in the model itself (...
-1
votes
1answer
102 views
If we write validation in sever side, don't it become two times of writing same code? What is the standard software engineering solution for it? [duplicate]
I am not asking whether to do server-side validation or not.
My question is whether any solution or better practice exist in the software world to address this repetition of code.
0
votes
0answers
42 views
How do you expose the field that caused the error?
Context: field errors
Given an input in the form:
{
"list": [
{ "username": null },
{ "username": "test" },
{ "username": "" }
]
}
Some APIs expose errors in the ...
0
votes
0answers
34 views
Call external API during validation (Rails)
I need to validate a value with data from an external API.
The easiest way would be to add a validation rule in my model, call the external API and do my check.
But it feels very dirty to call an API ...
0
votes
4answers
267 views
Should validation be inside or outside function?
Which one is better?
A
if ( complexDataCheck(...) ) {
doJob(...)
}
vs
B
doJob()
func doJob(...) {
if not(complextDataCheck(...)) return error;
...
}
In A, the function does one and ...
1
vote
0answers
43 views
Javax Validation Annotations in Spring - is it always appropriate? [closed]
I've recently become more fond of javax validation annotations and creating custom ones when I feel they may be appropriate. But... I can't figure if it's design-appropriate to use them for everything....
1
vote
2answers
143 views
Is it a bad practice or uncommon to save “Invalid operation attempted” events in an Event Store when doing Event Sourcing?
I have a simple toy project that deals with Banking operations (cash deposit, withdrawals, wire transfers, open and close accounts).
I am wondering whether there is something wrong about saving ...
0
votes
2answers
129 views
Can a service provider proof it is running a particular open source product? [closed]
Part of our project includes an open source GO server that we have open sourced for transparency. How can we prove that we havent made any alterations to the code before we deployed it?
0
votes
1answer
95 views
How to manage user serial keys for an application
I have an application in C# where several users access it.
Each user will have a serial key associated with his username in a table users in a local MySQL database.
Example of the table users:
User ...
4
votes
2answers
138 views
What is the relationship between IV&V professionals, Testers and QA engineers?
In the context of SDLC, I know that Verification and Validation is about verifying the deliverable input from previous phase and validating the output of the current one.
And that testing is a phase ...
1
vote
1answer
47 views
Form validation or model based verification on client side
I'm actually wondering what are the pros and cons of these two ways to handle client side validations / verifications.
Let's imagine an application where there is a contact form that needs these ...
2
votes
1answer
46 views
What is the purpose of adding a schema validation in responses?
Many of the server scripting packages/tools out there have the option to have a schema validation before the response is sent out to the clients.
E.g. the fastify package for a Node.js has a pretty ...
0
votes
1answer
34 views
Designing Validations Database driven configuration Vs hardcoding validations
So I am debating what approach to follow.
My scenario is :
Will receive a POJO which I need to validate ( REST end point )
Now I can explicitly validate specific fields ( which I know / are stated ...
1
vote
1answer
68 views
Check if object exists before updating/deleting
In an application that doesn't use an ORM, is it good practice to check whether an object exists before attempting to update/delete it?
For example:
@Route(method="DELETE", path="/posts/\d+")
...
0
votes
3answers
237 views
Should a method decide whether to execute or not? [closed]
I couldn't find a question on SE but it has probably been asked elsewhere already (in case, please mark it).
A method containing code to run just with specific external conditions can:
decide ...
6
votes
6answers
1k views
Why is it bad to use exceptions for handling this type of validation? It seems like it makes the code so much cleaner
I'm working on a .NET Core REST API and I'm writing a service class to create new user accounts. I have the following code:
public async Task<UserDto> RegisterNewUserAccount(...
1
vote
2answers
57 views
Where should tests and checks be implemented in a mathematical modelling process?
I have a mathematical model with two main "stages" 1. data loading (only a few KB of data) and 2. running a model on the data. I want to implement some tests and checks to ensure the data being fed ...
-1
votes
4answers
846 views
In a Domain Driven Development DDD, have a validation on a DTO that calls a external service is wrong, if yes, where should it be?
I have this question, is more about pattern and in theory what is wrong or not instead of if is possible or not (because it is).
In a DDD design, I have a DTO that I am validating, to check not nulls,...
1
vote
2answers
1k views
DDD - How to do informative validation (specifically on entity creation)?
For my domain entities currently, all validation errors cause exceptions to be thrown. I don't like this as it doesn't allow me to compile all validation errors before exiting a method. I'd like to ...
-1
votes
1answer
50 views
Should we delegate user input sanitization/validation?
Consider this code:
new FrameworkClass( [ 'query' => $_POST[ 'input' ] ] );
FrameworkClass is supposed to do input sanitization and validation. Should we just trust 3rd party code to do it's job?
...
1
vote
1answer
70 views
Using the objects retrieved at the time of request validation
I hope the question title already answers the subject here. Lets say I have a number of ids that needs to be validated in a request.
Example:
request uri:
[POST] /album/{album_id}/song
Request ...
3
votes
3answers
199 views
What to do when an aggregate is given a bad event?
What is usually done when an aggregate is asked to apply an "impossible" event to its state?
For example, if a ShoppingCart aggregate has already applied a CustomerAckRec (The customer has ...
0
votes
2answers
251 views
Formatting a string by converting to a number then back to a string
I'm not sure whether this qualifies as code smell, or if there may be some better way of performing the same task, but, basically, I want to format a 10 digit string, using C#, and have the following ...
2
votes
2answers
228 views
Should I fix known bad domains in user emails?
Checking my Sendgrid account I've noticed many drops due to "Known bad domain". Those bad domains often seem to have been caused due to user mistake.
***@gmal.com
***@gmail.com.br
***@hotmal.com
I ...
0
votes
4answers
181 views
Prefixing a number with + on html inputs
When asking for positive number inputs on html, is it valid to allow + on the textbox? Like +42? Surely the + sign gets removed during server-side processing. But will allowing + be fine on the html ...
66
votes
7answers
20k views
If functions have to do null checks before doing the intended behaviour is this bad design?
So I don't know if this is good or bad code design so I thought I better ask.
I frequently create methods that do data processing involving classes and I often do a lot of checks in the methods to ...
0
votes
3answers
182 views
How far do you go in server-side validation of POST/GET requests?
Our application had a few vulnerabilities detected by AppScan and we had to add server-side validation to catch SQL injection attempts.
But my question is, how far do you go in server-side ...
2
votes
1answer
52 views
Should the ORM create the related objects (ForeignKey objects) when saving the entity?
This question is coming from a frustration when using the Entity Framework and ASP.NET MVC, but I assume it's a general frustration across more frameworks and languages.
Lets say we have an object ...
24
votes
6answers
4k views
Is it ok to have validation layer before access control layer
I am creating an API strcutured web application and in this application we have different layers which are doing their own job.
First layer is Validation layer which validate user input and if it ...
0
votes
1answer
278 views
JS Captcha in contact form validation to avoid spam bots
I am looking for opinions about how bulletproof could be this captcha system to avoid spam in a contact form.
The form submit goes through ajax.
So I generate 2 random numbers with javascript. The ...
-2
votes
3answers
99 views
How to handle submitted data - sanitization or validation or both?
As I was working on upgrading deprecated ereg_replace() statements in an e-cart sollution I was suddenly puzzled by questions regarding how to handle the submitted data I was working with.
I was ...
1
vote
3answers
1k views
Validate JSON on server side
I'm working on Web Application (ASP.Net MVC) that will allow users to edit a JSON object in the browser and save it to database.
To do so, JSON object will be sent from view to server side (...
2
votes
2answers
128 views
Designing for the validation of phone numbers
Let's say we have a registration system that finalises the creation of an account by SMSing the user their new account details.
This system could be used by people all around the world, so let's say ...
7
votes
5answers
688 views
Message validation in async messaging-based services
I'm looking for information on the best approach to message validation in asynchronous-messaging-based services (i.e. services that pull messages from some sort of message queue or broker, rather than ...
1
vote
0answers
1k views
design pattern/oop for large validation rule set
I'm writing this in node.js
I have some data that needs validating before anything can be done with this. The data is validated in two different ways. I can use JSONSchema to validate the structure ...
2
votes
1answer
81 views
Validation layer of clustered WebApi solution
Currently I have a design problem, which I am not sure how exactly to solve and what would be the best approach.
So what I have is a ASP.NET Core WebApi project which is actually clustered solution. ...
2
votes
4answers
435 views
JavaScript only validation on AJAX form submit
I've been mulling this question over for a few days in my head and I can't come to a solid answer.
We understand that client side validation for forms is not enough, because you can easily turn ...
0
votes
2answers
137 views
How to validate reference use?
I use "reference" term here like in C++ world, not like in C# (for example). I use non-C++ syntax on purpose -- this is general question, not about this particular implementation.
Starting something ...
2
votes
3answers
106 views
The “scope” of knowledge about what the valid parameters are
I have a question which I'm not sure how to generalize and ask properly, so I'll try with an example.
Suppose that I design a parking lot management system. In my system, I have the objects Car and ...
4
votes
5answers
960 views
Should I assert the preconditions of functions in a public API?
I am writing a library for some data structures in C that will be used in embedded systems. I have had issues designing and coming up with a solid error handling plan. This API is only subject to ...
0
votes
2answers
4k views
Overall view validation with a datagrid and keeping to MVVM
I am struggling to find a good architecture for what must be a common problem
Enable/Disable a button in a View that contains a datagrid, and has
validation requirements on the cell, row and ...
4
votes
2answers
3k views
Multi-level validation in C#
I have a Console project reads inputs from CSV file and tries to save them to database.
For that, I created a class Person that maps a CSV row.
The CSV file has two columns Name and Age. Person ...
0
votes
1answer
378 views
Validation Rule or Business Rule
I am in a confusion where I cannot decide whether a rule is validation rule or Business rule. I have simple POJO with JSR 303 bean validation rules.
public class VehicleDto {
@NotNull(message = "...
