Why input validation is critical in Spring Boot - See It in Action

Why Input Validation is Critical in Spring Boot

📖 Scenario: You are building a simple Spring Boot web application that accepts user data through a form. To keep the app safe and reliable, you need to check the user input carefully.

🎯 Goal: Learn how to add input validation in a Spring Boot controller to protect your app from bad or harmful data.

📋 What You'll Learn

Create a simple data class to hold user input

Add a validation configuration variable

Use Spring Boot validation annotations in the controller

Complete the controller method to handle validation results

💡 Why This Matters

🌍 Real World

Web applications often receive data from users. Validating this data prevents errors and security problems.

💼 Career

Understanding input validation is essential for backend developers to build secure and robust applications.

1

Create a User Data Class

Create a class called User with two fields: String name and String email. Use standard Java syntax for the class and fields.

Spring Boot

// Create the User class with name and email fields
// Your code here

Need a hint?

Define a simple Java class with private fields and public getter and setter methods.

2

Add Validation Annotations

Add validation annotations to the name and email fields in the User class. Use @NotBlank for name and @Email and @NotBlank for email. Import the annotations from jakarta.validation.constraints.

Spring Boot

import jakarta.validation.constraints.Email;
import jakarta.validation.constraints.NotBlank;

public class User {
    // Add @NotBlank to name
    private String name;
    // Add @Email and @NotBlank to email
    private String email;

    public User() {}

    public String getName() {
        return name;
    }

    public void setName(String name) {
        this.name = name;
    }

    public String getEmail() {
        return email;
    }

    public void setEmail(String email) {
        this.email = email;
    }
}

Need a hint?

Use @NotBlank to ensure the field is not empty and @Email to check email format.

3

Create a Controller with Validation

Create a Spring Boot controller class called UserController. Add a method createUser that accepts a @Valid @RequestBody User user and a BindingResult result. Use @PostMapping("/users") on the method.

Spring Boot

import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
import jakarta.validation.Valid;
import org.springframework.validation.BindingResult;

@RestController
public class UserController {
    // Create createUser method with @PostMapping("/users")
    // Accept @Valid @RequestBody User user and BindingResult result
    // Your code here
}

Need a hint?

Use @RestController on the class and @PostMapping on the method. Add @Valid and BindingResult parameters.

4

Handle Validation Results in Controller

In the createUser method, check if result.hasErrors() is true. If yes, return the string "Invalid input". Otherwise, return "User created".

Spring Boot

import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
import jakarta.validation.Valid;
import org.springframework.validation.BindingResult;

@RestController
public class UserController {
    @PostMapping("/users")
    public String createUser(@Valid @RequestBody User user, BindingResult result) {
        // Check if result has errors
        // Return "Invalid input" if errors exist
        // Otherwise return "User created"
        // Your code here
    }
}

Need a hint?

Use result.hasErrors() to check validation and return the correct message.