Why input validation is critical in Express - See It in Action

Why input validation is critical

📖 Scenario: You are building a simple Express server that accepts user data through a POST request. To keep the server safe and working correctly, you need to check the data users send before using it.

🎯 Goal: Learn how to add input validation in an Express app to protect the server from bad or harmful data.

📋 What You'll Learn

Create an Express app with a POST route at /submit

Add a variable to define the required minimum length for the username

Use input validation to check if the username meets the minimum length

Send a proper response if the input is valid or invalid

💡 Why This Matters

🌍 Real World

Input validation is critical in real web servers to prevent bad data from causing errors or security problems. It helps keep the app stable and safe.

💼 Career

Backend developers must validate user input to build secure and reliable APIs. This skill is essential for roles working with Express or other web frameworks.

1

Set up Express app and POST route

Create an Express app by requiring express and calling express(). Then create a POST route at /submit that accepts JSON data.

Express

const express = require('express');
const app = express();
app.use(express.json());

// Create POST route at /submit
// Your code here

Need a hint?

Use app.post('/submit', (req, res) => { }) to create the route.

2

Add minimum username length variable

Add a variable called minUsernameLength and set it to 5 to define the minimum length for usernames.

Express

const express = require('express');
const app = express();
app.use(express.json());

const minUsernameLength = 5;

app.post('/submit', (req, res) => {
  // Your code here
});

Need a hint?

Define const minUsernameLength = 5 before the route.

3

Validate username length in POST route

Inside the /submit route, get the username from req.body. Use an if statement to check if username.length is less than minUsernameLength. If so, send a 400 status with message 'Username too short'. Otherwise, send a 200 status with message 'Username accepted'.

Express

const express = require('express');
const app = express();
app.use(express.json());

const minUsernameLength = 5;

app.post('/submit', (req, res) => {
  // Get username from req.body
  // Check if username length is less than minUsernameLength
  // Send appropriate response
  // Your code here
});

Need a hint?

Remember to check if username exists before checking length.

4

Start the Express server

Add code to start the Express server listening on port 3000 using app.listen. Log 'Server running on port 3000' when it starts.

Express

const express = require('express');
const app = express();
app.use(express.json());

const minUsernameLength = 5;

app.post('/submit', (req, res) => {
  const username = req.body.username;
  if (!username || username.length < minUsernameLength) {
    return res.status(400).send('Username too short');
  }
  res.status(200).send('Username accepted');
});

// Start server on port 3000
// Your code here

Need a hint?

Use app.listen(3000, () => { console.log('Server running on port 3000') }).