How deeply does Building Web APIs with ASP.NET Core cover server validation?

Distinguishes client-side checks from security-relevant server validation, but does not provide server-validation implementation steps.

Server validation

As explained in Building Web APIs with ASP.NET Core

Server-side validation is the checking of request input by the server before accepting or processing that input.

Server validation checks request input before the server accepts or processes it. Unlike SwaggerUI’s client-side checks, it protects the request boundary because client checks can be bypassed. section 6.1.4

Use the generated API description to understand the input rules that clients should follow:

Inspect swagger.json to find parameter types, formats, defaults, minimums, maximums, and patterns. section 6.1.4
Treat SwaggerUI feedback as user-experience assistance, not as a security control; invalid values may be rejected before any request is sent. section 6.1.4

GET /BoardGames parameters

A PageSize query parameter can be documented as an integer with a default of 10 and limits from 1 through 100. SwaggerUI uses that metadata to flag clearly invalid input, such as text supplied where an integer is expected, before executing the call. section 6.1.4

How Building Web APIs with ASP.NET Core covers it

Cover of Building Web APIs with ASP.NET Core

liveBook manning.com

Read Building Web APIs with ASP.NET Core on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Build AI-Enhanced Web AppsServer validation is input checking performed on a server after client-submitted data arrives and before the data is processed.
liveBook manning.com

Rust Servers, Services, and AppsServer-side validation is validation of request data performed by a server before the requested operation is completed.

Compare how 3 books explain server validation →

Related concepts

client-side validationcontrasts with · Client-side validation is checking user-supplied data in software running on the user's device before it is sent to a server or other remote system.
remote validationcontrasts with · Remote validation is a validation technique that sends a value to a server endpoint for asynchronous checking and returns the validation result to the client.
validationkind of · The process of checking data, behavior, systems, models, or results against defined criteria to assess their correctness, suitability, or acceptability.

This explainer was generated by Manning's knowledge graph from the text of Building Web APIs with ASP.NET Core. The section links point to the parts of the book it draws on.