Joi as validation alternative in Express - Mini Project: Build & Apply

Joi as validation alternative

📖 Scenario: You are building a simple Express server that accepts user data through a POST request. Instead of manually checking each field, you want to use Joi to validate the incoming data easily and clearly.

🎯 Goal: Create an Express route that uses Joi to validate a user object with name and age fields before processing it.

📋 What You'll Learn

Create a Joi schema for user data with name as a required string and age as a required number

Create an Express POST route /user that validates the request body using the Joi schema

Send a 400 response with the validation error message if validation fails

Send a 200 response with a success message if validation passes

💡 Why This Matters

🌍 Real World

Validating user input is essential in web apps to avoid errors and security issues. Joi makes this easy and clear.

💼 Career

Backend developers often use Joi or similar libraries to ensure data integrity and improve code readability in APIs.

1

Set up Express app and import Joi

Write code to import express and joi, create an Express app with express(), and add middleware to parse JSON bodies using express.json().

Express

const express = require('express');
const Joi = require('joi');

const app = express();

// Add JSON body parsing middleware
// Your code here

Hint

Use require to import both express and joi. Then create the app with express(). Finally, add app.use(express.json()) to parse JSON request bodies.

2

Create Joi schema for user data

Create a Joi schema called userSchema that requires a name string and an age number.

Express

const express = require('express');
const Joi = require('joi');

const app = express();

app.use(express.json());

// Create Joi schema called userSchema
// Your code here

Hint

Use Joi.object() to create a schema. Inside, define name as Joi.string().required() and age as Joi.number().required().

3

Add POST /user route with Joi validation

Add a POST route /user that validates req.body against userSchema using userSchema.validate(req.body). If there is an error, respond with status 400 and the error message. Otherwise, respond with status 200 and a success message.

Express

const express = require('express');
const Joi = require('joi');

const app = express();

app.use(express.json());

const userSchema = Joi.object({
  name: Joi.string().required(),
  age: Joi.number().required()
});

// Add POST /user route with Joi validation
// Your code here

Hint

Use app.post('/user', (req, res) => { ... }). Inside, validate with userSchema.validate(req.body). If error exists, send 400 with the message. Otherwise, send 200 with success.

4

Start the Express server

Add code to start the Express server on port 3000 using app.listen(3000) and log a message 'Server running on port 3000'.

Express

const express = require('express');
const Joi = require('joi');

const app = express();

app.use(express.json());

const userSchema = Joi.object({
  name: Joi.string().required(),
  age: Joi.number().required()
});

app.post('/user', (req, res) => {
  const { error } = userSchema.validate(req.body);
  if (error) {
    return res.status(400).send(error.details[0].message);
  }
  res.status(200).send('User data is valid');
});

// Start server on port 3000
// Your code here

Hint

Use app.listen(3000, () => { console.log('Server running on port 3000') }) to start the server and show a message.

Practice

1. What is the main purpose of using Joi in an Express application?

easy

A. To serve static files like images and CSS

B. To handle routing between different pages

C. To connect to a database

D. To validate incoming data and ensure it meets expected rules

Solution

1. Step 1: Understand Joi's role

   Joi is a library designed to check if data matches certain rules before using it.

2. Step 2: Compare with other Express tasks

   Routing, database connection, and serving files are handled by other parts of Express or middleware, not Joi.

3. Final Answer:

   To validate incoming data and ensure it meets expected rules -> Option D

4. Quick Check:

   Joi validates data = A [OK]

Hint: Joi is all about checking data rules fast [OK]

Common Mistakes:

• Confusing Joi with routing or database tools
• Thinking Joi serves files
• Assuming Joi manages app navigation

2. Which of the following is the correct way to define a Joi schema for a required string named username?

easy

A. const schema = Joi.string().required();

B. const schema = Joi.required().string();

C. const schema = Joi.string.required();

D. const schema = Joi.string().isRequired();

Solution

1. Step 1: Recall Joi syntax for strings

   Joi.string() creates a string schema, and .required() marks it as mandatory.

2. Step 2: Check method chaining order

   The correct chaining is Joi.string().required(), not Joi.required().string() or others.

3. Final Answer:

   const schema = Joi.string().required(); -> Option A

4. Quick Check:

   Joi.string().required() syntax = B [OK]

Hint: Use Joi.string().required() to make a string mandatory [OK]

Common Mistakes:

• Placing .required() before .string()
• Using .isRequired() which is not a Joi method
• Missing parentheses after string()

3. Given this Joi schema and data:

const schema = Joi.object({ age: Joi.number().min(18).required() });
const data = { age: 16 };
const result = schema.validate(data);

What will result.error contain?

medium

A. Null because Joi does not check numbers

B. Null because age is valid

C. An error object because age is less than 18

D. An error object because age is missing

Solution

1. Step 1: Understand the schema rules

   The schema requires age to be a number, at least 18, and present.

2. Step 2: Check the data against rules

   Data has age = 16, which is less than the minimum 18, so validation fails.

3. Final Answer:

   An error object because age is less than 18 -> Option C

4. Quick Check:

   Age 16 < 18 causes error = D [OK]

Hint: Min 18 means below 18 triggers error [OK]

Common Mistakes:

• Thinking 16 passes min(18)
• Assuming missing age error instead
• Believing Joi ignores number checks

4. You wrote this code to validate an email:

const schema = Joi.object({ email: Joi.string().email() });
const data = { email: 12345 };
const result = schema.validate(data);

What is the main problem here?

medium

A. The email method is missing parentheses

B. The email field is not a string, so validation fails

C. Joi.string() cannot be used with email validation

D. The schema object is missing .required()

Solution

1. Step 1: Check data type for email

   Email expects a string, but data has a number (12345), which is invalid.

2. Step 2: Confirm Joi email method usage

   Joi.string().email() is correct syntax; parentheses are present.

3. Final Answer:

   The email field is not a string, so validation fails -> Option B

4. Quick Check:

   Email must be string, got number = A [OK]

Hint: Email must be string, numbers cause validation error [OK]

Common Mistakes:

• Ignoring data type mismatch
• Thinking .email() needs no parentheses
• Assuming .required() is always needed

5. You want to validate a user object with name (string, required), age (optional number, min 0), and email (required valid email). Which Joi schema correctly enforces these rules?

hard

A. Joi.object({ name: Joi.string().required(), age: Joi.number().min(0), email: Joi.string().email().required() })

B. Joi.object({ name: Joi.string(), age: Joi.number().min(0).required(), email: Joi.string().email() })

C. Joi.object({ name: Joi.string().required(), age: Joi.number().min(0).required(), email: Joi.string().email() })

D. Joi.object({ name: Joi.string(), age: Joi.number(), email: Joi.string().email().required() })

Solution

1. Step 1: Check required fields

   Name and email must be required, so .required() must be on both.

2. Step 2: Check optional age with min 0

   Age is optional, so no .required(), but min(0) applies.

3. Step 3: Validate each option

   Joi.object({ name: Joi.string().required(), age: Joi.number().min(0), email: Joi.string().email().required() }) matches all rules exactly; others miss required or optional correctly.

4. Final Answer:

   Joi.object({ name: Joi.string().required(), age: Joi.number().min(0), email: Joi.string().email().required() }) -> Option A

5. Quick Check:

   Required name/email, optional age min 0 = C [OK]

Hint: Required fields get .required(), optional just rules [OK]

Common Mistakes:

• Marking optional age as required
• Missing .required() on name or email
• Confusing order of chaining methods