Do you use Fluent Validation?

Client-side validation provides a great user experience but this must always be backed up by server-side validation.

.NET and .NET Core Web APIs provide built-in support for validation using Data Annotations:

1. Decorate your model classes with validation attributes, e.g. [Required], [MaxLength(60)]
2. The MVC data binding system will automatically validate all entities sent to a controller and set ModelState.IsValid and ModelState.Values / Errors
3. As per Do you apply the ValidateModel attribute to all controllers? you can create an attribute to apply this validation to all your Web API endpoints

Fluent Validation improves the built-in capabilities in a number of ways:

1. It is outside of your ApiController, so can be shared with other API protocols (like GraphQL or gRPC).
2. It plugs directly into the existing data binding and validation engine (as above) so you can adopt Fluent Validation without changing the client-side
3. It is also easy to apply Fluent Validation to inner layers of your application
4. You can specify multiple rulesets for a model without modifying the model itself
5. Fluent validation uses a powerful Fluent API with LINQ expressions

using FluentValidation;

public class CustomerValidator: AbstractValidator<Customer> {
  public CustomerValidator() {
    RuleFor(x => x.Surname).NotEmpty();
    RuleFor(x => x.Forename).NotEmpty().WithMessage("Please specify a first name");
    RuleFor(x => x.Discount).NotEqual(0).When(x => x.HasDiscount);
    RuleFor(x => x.Address).Length(20, 250);
    RuleFor(x => x.Postcode).Must(BeAValidPostcode).WithMessage("Please specify a valid postcode");
  }

  private bool BeAValidPostcode(string postcode) {
    // custom postcode validating logic goes here
  }
}

6. You can write conditional rules with the .When clause. This is great for complex form validation.

RuleFor(x => x.Discount).NotEqual(0).When(x => x.HasDiscount);

7. Fluent Validation provides a great entry-point for writing your own custom, complex rules. For most modern Web APIs the response type is usually JSON. The validation errors raised by Fluent Validation serialize easily to JSON making it fairly trivial to handle these errors from whatever client-side framework you are using.

{
  "CompanyName": [
    "The CompanyName field is required."
  ]
}