Custom request body validation

[henrytoone]

Is there a way to make use of the zod Schema.strict in the automatic validation of a request body? Or override/disable the automatic validation?

At the moment if I create a schema

const TestSchema = z.object({
    foo: z.string()
})

class TestPost extends OpenAPIRoute {
    static schema = {
        requestBody: TestSchema,
    }
    ...
}

And then send this payload to the route

{
    "foo": "example",
    "bar": "example"
}

this will be accepted as valid even though "bar" is not a valid property on TestSchema TestSchema.strict(...) is how I would handle this manually but unsure how/if the default validation behaviour would be modified. Or is the only way to handle this to parse the data again in the handler?

[G4brym]

Hey @henrytoone to enable the strict mode, you just need to enable the raiseUnknownParameters flag in the router. Check the router options here.

[henrytoone]

Hi @G4brym , I gave this a go and it doesn't seem to be working. I'm not sure if it's something else I've missed but the option seems to have no effect

const router = OpenAPIRouter({
    raiseUnknownParameters: true,
});

const TestSchema = z.object({
    foo: z.string(),
});

class TestPost extends OpenAPIRoute {
    static schema = {
        requestBody: TestSchema,
    };
    async handle(request: Request, env: any, context: any, data: Record<string, any>) {
        // Create typed object
        const body = TestSchema.parse(data.body);

        return { ok: true };
    }
}

router
    .post('/test', TestPost)

    // 404 for all misses
    .all('*', () => error(404, 'not found'));

Then sending the payload below still returns the ok response

{
    "foo": "example",
    "bar": "example"
}