我想使用Express-Validator验证请求对象。假设我有两条路由,GET /users/:id (fetchUserById)和POST /users (createUser)路由
this.router = express.Router();
this.router.route('/').post(this.userRequestValidator.createUser, this.userController.createUser);
this.router.route('/:id').get(this.userRequestValidator.fetchUserById, this.userController.fetchUserById);如您所见,在调用控制器逻辑之前,我直接调用验证中间件。首先,我创建了一个处理验证错误的基本验证器,并在发生故障时返回HTTP 400。
export abstract class RequestValidator {
    protected validate = async (request: Request, response: Response, next: NextFunction): Promise<void> => {
        const errors: Result<ValidationError> = validationResult(request);
        if (!errors.isEmpty()) {
            return res.status(422).json({ errors: errors.array() });
        } else {
            next();
        }
    };
}我的验证器函数userRequestValidator.createUser和userRequestValidator.fetchUserById只需扩展RequestValidator并实现验证
export class UserRequestValidator extends RequestValidator {
    public createUser = [
        body('username')
            .isString()
            .exists(),
        body('password')
            .isString()
            .exists(),
        this.validate,
    ];
    public fetchUserById = [
        param('id')
            .isString()
            .isUUID()
            .exists(),
        this.validate,
    ];
}当我打电话给GET localhost:3000/users/abc时,我会得到这样的响应
{
    "errors": [
        {
            "value": "abc",
            "msg": "Invalid value",
            "param": "id",
            "location": "params"
        }
    ]
}这是我期待的回应。但是当我用一个空的身体调用POST localhost:3000/users时,我会得到这样的响应
{
    "errors": [
        {
            "msg": "Invalid value",
            "param": "username",
            "location": "body"
        },
        {
            "msg": "Invalid value",
            "param": "username",
            "location": "body"
        },
        {
            "msg": "Invalid value",
            "param": "password",
            "location": "body"
        },
        {
            "msg": "Invalid value",
            "param": "password",
            "location": "body"
        }
    ]
}有人知道我怎样才能纠正这种行为吗?或者我的设置有什么问题?
发布于 2019-09-26 07:12:30
我不知道为什么当req.body是一个空对象- {}时,验证器将运行于验证链的所有节点。您可以再次检查,为每个条件添加每个消息,如下所示:
class UserRequestValidator extends RequestValidator {
  public createUser = [
    body('username')
      .isString().withMessage('username must be a string') // you can see both error messages in the response
      .exists().withMessage('username must be exist'),
    body('password') // the same for this field
      .isString()
      .exists(),
    this.validate,
  ];
  public fetchUserById = [
    param('id') // because id is exist in `req.params`, then only one test has been executed.
      .isString().withMessage('id must be a string')
      .isUUID()
      .exists(),
    this.validate,
  ];
}我在https://github.com/express-validator/express-validator/issues/638中为您的情况找到了一个解决方案,使用.bail()函数在第一个错误中停止链。
然后,您的验证器类将类似于:
class UserRequestValidator extends RequestValidator {
  public createUser = [
    body('username')
       // always check exists() first
      .exists().withMessage('username must be exist').bail()
      .isString().withMessage('username must be a string').bail(),
    body('password')
      .exists().bail()
      .isString().bail(),
    this.validate,
  ];
  public fetchUserById = [
    param('id')
      .isString()
      .isUUID()
      .exists(),
    this.validate,
  ];
}发布于 2021-05-09 15:30:21
在检索错误数组时,还可以将onlyFirstError设置为true。来自文档
如果选项onlyFirstError设置为true,则只包含每个字段的第一个错误。
示例用法:
function validateRequestParams (req, res, next) {
    const errors = validationResult(req)
    if (errors.isEmpty()) {
        return next()
    } else {
        return res.status(400).json({
            bodyValidationErrors: errors.array({ onlyFirstError: true })
        })
    }
}https://stackoverflow.com/questions/58069250
复制相似问题