Request validation in Node.js - Step-by-Step Execution

Concept Flow - Request validation

Receive HTTP Request

↓

Extract Request Data

↓

Validate Data Against Rules

↓

Process Request

↓

Send Response

The server receives a request, extracts data, checks if it meets rules, then either processes it or returns an error.

Execution Sample

Node.js

import express from 'express';
import { body, validationResult } from 'express-validator';

const app = express();
app.use(express.json());

app.post('/user', [
  body('email').isEmail(),
  body('age').isInt({ min: 18 })
], (req, res) => {
  const errors = validationResult(req);
  if (!errors.isEmpty()) {
    return res.status(400).json({ errors: errors.array() });
  }
  res.send('User data is valid');
});

This code checks if the email is valid and age is at least 18 before accepting user data.

Execution Table

Step	Action	Input Data	Validation Result	Response
1	Receive POST /user	{ email: '[e-mail]', age: 20 }	Pending	Pending
2	Check email is valid	[e-mail]	Valid	Pending
3	Check age >= 18	20	Valid	Pending
4	All validations passed?	Yes	Pass	Send 200 OK with 'User data is valid'
5	End	-	-	Response sent, request complete
6	Receive POST /user	{ email: 'bademail', age: 16 }	Pending	Pending
7	Check email is valid	bademail	Invalid	Pending
8	Check age >= 18	16	Invalid	Pending
9	All validations passed?	No	Fail	Send 400 Bad Request with errors
10	End	-	-	Response sent, request complete

💡 Execution stops after sending response based on validation success or failure.

Variable Tracker

Variable	Start	After Step 2	After Step 3	After Step 4
req.body	{}	{ email: '[e-mail]', age: 20 }	{ email: '[e-mail]', age: 20 }	{ email: '[e-mail]', age: 20 }
errors	empty	empty	empty	empty (no errors)
response.status	unset	unset	unset	200
response.body	unset	unset	unset	'User data is valid'

Key Moments - 2 Insights

Why does the server return an error if one validation fails even if others pass?

Because the validationResult checks all rules and if any fail, it returns errors immediately, as shown in steps 7-9 where both email and age fail and the response is 400.

What happens if the request body is missing a field like 'age'?

The validation for 'age' will fail because isInt requires a number, so validationResult will catch this and return an error response, similar to the failure path in the execution table.

Visual Quiz - 3 Questions

Look at the execution table, what is the validation result for age at step 3 when age is 20?

A Invalid

B Pending

C Valid

D Not checked

💡 Hint

Check the 'Validation Result' column at step 3 in the execution_table.

At which step does the server decide to send a 400 Bad Request response?

A Step 9

B Step 4

C Step 5

D Step 2

💡 Hint

Look for the step where 'Response' shows 'Send 400 Bad Request' in the execution_table.

If the email field is missing, how would the validation result change at step 2?

A It would be Valid

B It would be Invalid

C It would be Pending

D It would be Skipped

💡 Hint

Missing required fields cause validation to fail, similar to step 7 in the execution_table.

Concept Snapshot

Request validation in Node.js:
- Extract data from request (req.body)
- Use validation rules (e.g., isEmail, isInt)
- Check results with validationResult()
- If errors exist, send 400 response with details
- Else, process request normally

Full Transcript

Request validation in Node.js means checking incoming data before using it. The server gets a request, takes the data, and checks if it meets rules like 'email must be valid' or 'age must be at least 18'. If all checks pass, the server processes the request and sends a success message. If any check fails, it sends back an error message explaining what is wrong. This helps keep the app safe and working well by not accepting bad data.