cdimascio/express-openapi-validator
Express Openapi Validator
Express-openapi-validator is an ExpressJS middleware that enforces API contract compliance by validating incoming requests and outgoing responses against OpenAPI 3.0 and 3.1 specifications. It acts as a gatekeeper for web services, ensuring that all traffic adheres to defined schemas before reaching application logic.
The framework distinguishes itself by automating data integrity tasks, including the automatic coercion of request parameters and body content into typed objects. It provides comprehensive security enforcement by validating authentication and authorization headers against defined security schemes, and it supports complex API structures through automatic schema reference resolution and dereferencing.
Beyond core validation, the tool manages the full request lifecycle by handling multipart file uploads, mapping API paths to specific handlers, and providing structured error formatting for schema violations. Developers can extend the framework's capabilities by registering custom validation logic for unique data types or by configuring the strictness of format checks to suit specific project requirements.
Features
- Request Interception Middleware - Acts as an ExpressJS middleware that intercepts incoming HTTP traffic for schema validation and data coercion.
- ExpressJS Request Validators - Provides ExpressJS middleware that enforces API contract compliance by validating request parameters, headers, and bodies against defined schemas.
- Data Type Coercion - Applies automatic type casting and formatting rules defined in the API specification to incoming request inputs.
- Runtime Contract Enforcement - Enforces API contracts by verifying that request and response traffic matches the defined specification.
- Runtime OpenAPI Request Validators - Validates incoming HTTP request data against OpenAPI specifications at runtime to ensure compliance before reaching application logic.
- Parameter Coercion and Validation - Automatically coerces and transforms incoming request parameters and body content into typed objects based on schema definitions.
- Schema-Based Request and Response Validation - Validates outgoing server responses against defined schemas to ensure strict adherence to the API contract.
- API Validation Middlewares - Streamlines ExpressJS API development by automatically mapping routes and validating inputs against API documentation.
- Type-Safe Request Parsing - Parses incoming request parameters and bodies into strongly-typed data structures to simplify application logic.
- Traffic Integrity Auditors - Provides bidirectional traffic validation against OpenAPI schemas to ensure data integrity for incoming requests and outgoing responses.
- API Contract Validation - Enforces API contracts by validating traffic and coercing request data to ensure strict adherence to defined specifications.
- Security Scheme Validators - Verifies authentication and authorization headers against defined security schemes to ensure only authorized traffic reaches protected endpoints.
- Security Scheme Header Validators - Verifies authentication and authorization headers against defined security schemes to protect API endpoints from unauthorized access.
- Schema Reference Resolution - Resolves internal and external schema references to support modular and complex API specifications.
- Security Compliance Automations - Automates the verification of security headers to ensure compliance with defined API security schemes.
- Operation-to-Handler Mappings - Automatically maps API paths defined in specifications to specific application handler functions.
- OpenAPI Specification Validators - Dereferences OpenAPI specifications to unify modular and multi-file API definitions.
- Validation Middleware - Checking uploaded files and form data against schema constraints to ensure that incoming attachments meet your specific application requirements.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
