26 个仓库
Systems for enforcing data integrity on incoming request payloads.
Distinguishing note: Focuses on schema-driven validation of request data rather than general security.
Explore 26 awesome GitHub repositories matching security & cryptography · Input Validation Schemas. Refine with filters or upvote what's useful.
Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists. The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated
Standardizes the use of strict schemas to validate request bodies for data integrity.
This project is an end-to-end type-safe API framework designed to synchronize data structures between frontend and backend codebases without the need for manual code generation. By leveraging TypeScript’s type inference, it allows developers to invoke server-side functions directly from the client as if they were local methods. This remote procedure call approach abstracts away the complexities of HTTP verbs and URL structures, streamlining the full-stack development workflow into a unified experience. The framework distinguishes itself through a modular router architecture that organizes bac
Enforces data integrity on incoming request payloads by applying defined validation rules before execution reaches the core procedure logic.
Taxonomy is a full-stack application template and reference implementation built with the Next.js app router. It serves as a comprehensive starter for developing web applications using server components and modern React patterns. The project integrates a variety of specialized systems, including an identity management workflow for OAuth and session handling, and a billing system for managing recurring subscriptions and payment events. It also features a content pipeline that transforms Markdown and JSX files into type-safe data collections for rendering blogs and documentation. The architect
Employs runtime schema validation for API payloads and form inputs to ensure data integrity.
Hapi is a configuration-driven web framework for building secure and scalable HTTP servers and APIs on the Node.js runtime. It functions as a REST API development framework and an enterprise server implementation focused on stability, security, and comprehensive input validation. The framework is built around a plugin-based architecture, allowing core functionality and custom logic to be organized into modular, registerable plugins. It serves as an HTTP request lifecycle manager, enabling the interception and modification of requests through pre-handlers and extensions before they reach the f
Enforces data shapes on headers and payloads using schema-based validation before requests reach the handler.
Kratos is a centralized identity and access management server designed to handle user registration, authentication, and profile management. It functions as an identity flow orchestrator, managing the state and security of authentication processes across web, mobile, and command-line interfaces. The system provides a standards-compliant authorization server that issues tokens and manages delegated access for third-party applications and internal services, supporting multi-factor authentication and custom identity schemas to secure user accounts. The project distinguishes itself through a headl
Validates user input against defined identity schemas to handle errors related to password policies or missing required fields.
fp-ts is a TypeScript library that brings pure functional programming patterns to the language through algebraic data types, type class abstractions, and composable combinators. It provides foundational data types like Option for optional values, Either for typed error handling, and Task for lazy asynchronous computations, all designed to make invalid states unrepresentable and side effects explicit. The library is built on category theory concepts, offering type classes such as Functor, Applicative, Monad, Semigroup, and Monoid with lawful instances for common data structures. The library di
Provides runtime schema validation for checking data structures against type definitions.
EmDash is an open-source content management system built on Astro that combines a visual admin panel with a plugin-driven architecture and server-side rendering. It provides a complete content management system with structured content modeling, a rich text editor using Portable Text format, and a TypeScript API for type-safe content queries. The system supports authentication through passkeys, OAuth 2.1, and external providers, with role-based access control and fine-grained permission scopes. What distinguishes EmDash is its plugin development framework, which supports both native plugins ru
Parses and validates request bodies or query strings against a Zod schema, returning a 400 error for invalid data.
Arktype is a TypeScript runtime validation library and schema orchestrator. It synchronizes TypeScript types with runtime data validation, allowing users to define type-safe schemas that ensure unknown data adheres to specific structures during application execution. The project distinguishes itself by using set-theory type analysis to determine intersections and subtype compatibility, alongside JIT-compiled validation functions for optimized performance. It supports advanced type modeling through branded type constraints, recursive alias resolution, and the ability to generate runtime valida
Validates unknown data against schemas at runtime to ensure structural integrity and type safety.
This PHP assertion library is a runtime data validator used to verify method inputs and outputs. It provides a toolkit for validating data types, numeric ranges, and string patterns during program execution to prevent invalid states. The project serves as a static analysis helper by providing type hints and annotations that improve the accuracy of formal verification tools. It includes a collection validation utility for applying rules across arrays or iterable collections, and a filesystem validation tool to verify path existence and read or write permissions. The library covers a broad ran
Verifies data types, numeric ranges, and string patterns during execution to prevent invalid application states.
io-ts is a TypeScript runtime validation library that provides a composable codec system for decoding and encoding data at the boundaries of an application. It defines data schemas using structural types, where the shape of data determines its validity rather than nominal names, and produces runtime type guards from those definitions for efficient validation checks. The library is built around bidirectional codec mappings that combine decoding, encoding, and type checking into single reusable units. It supports a composable decoder pipeline where small validation steps can be chained together
Checks that incoming data matches a declared type schema and throws a clear error when it does not.
TypeBox is a JSON schema generator and TypeScript data validator. It functions as a type builder that creates compliant JSON schema definitions while providing a mechanism for synchronizing runtime validation logic with compile-time types. The project allows for the automatic derivation of static TypeScript interfaces from schema definitions to eliminate redundant type declarations. It converts complex type constructs into schema fragments and resolves static types to maintain consistency between data shapes and code. The system covers runtime type checking and data validation through the us
Validates runtime data against schemas to ensure structural integrity within TypeScript applications.
Hanami is a full-stack Ruby web framework and API platform designed for building maintainable applications. It centers on a modular web architecture that organizes software into independent slices to prevent monolithic growth and isolate functional units. The framework implements a clean architecture by decoupling business logic from persistence and request handling. This is achieved through a central dependency injection container for managing object lifetimes and a repository pattern mapper that separates domain entities from the persistence layer. The project further provides a Rack-compa
Implements schema-based input validation to verify data before it reaches core business logic.
Typia is a compile-time code generator that transforms TypeScript type annotations into runtime validation, serialization, and schema functions without requiring decorators or separate schema files. It generates optimized validation and serialization code during TypeScript compilation, producing dedicated functions for each type that eliminate runtime schema objects for faster execution. The project extends this core capability into several integrated areas. It generates fully typed client SDKs from NestJS controller source code, keeping server and client types synchronized automatically. It
Produces JSON Schema and OpenAPI definitions directly from TypeScript type definitions at compile time.
Implementation of a bulletproof node.js API 🛡️
Defines request body schemas with Joi to reject malformed data before it reaches business logic.
Manta is a local-first financial tracker and PDF invoice generator that utilizes a schema-driven form builder to capture and validate structured user information. It serves as a system for managing billing records and invoice statuses directly on the user device to ensure data privacy and offline access. The project features a drag-and-drop document editor and a PDF template management system, allowing users to arrange fields and apply corporate branding without writing code. These tools enable the creation of professional billing documents by injecting structured data into reusable layout sk
Enforces structural integrity and data correctness of user inputs against predefined validation schemas.
Bosque is an experimental programming language and development platform designed for machine-assisted software construction. It combines functional programming semantics with imperative syntax to enforce logic correctness and runtime safety, providing a type-safe environment that utilizes structured data models to maintain information integrity throughout the application lifecycle. The platform distinguishes itself through deep integration with formal verification tools, including automated theorem provers and symbolic execution engines. By transforming source code into a regularized intermed
Applies strict validation rules to types and strings to ensure information remains consistent and reliable throughout the application lifecycle.
Uploadthing 是一个用于将文件上传集成到 Web 应用中的工具,提供了一个通过无服务器文件处理来接收和存储文件的系统。它管理从创建后端端点到通过内容分发网络(CDN)交付内容的端到端上传过程。 该项目利用预签名 URL 工作流,允许客户端直接将文件上传到云存储,从而减少服务器入口流量。它具有基于路由的验证系统,用于强制执行文件类型和大小限制,以及用于请求授权和安全上传后回调 Webhook 的中间件。 该平台涵盖了广泛的功能,包括用于重命名或删除文件的云存储管理,以及为大文件传输实现可恢复上传。它提供了一套 UI 组件(如上传按钮和拖放区),可以使用可组合的 Hook 进行样式化或替换为自定义界面。 该系统专为跨边缘运行时和无服务器环境部署而设计,配置通过环境变量处理。
Verifies user-provided request data against predefined schemas to ensure integrity before initiating file transfers.
Cerbos is an open-source authorization service that provides a centralized, language-agnostic engine for managing access control. It functions as a policy-as-code platform, allowing teams to define, test, and distribute authorization rules using declarative YAML or JSON configurations. By decoupling access logic from application code, it enables consistent permission enforcement across diverse service stacks. The project distinguishes itself through its ability to translate high-level authorization policies into native database query filters. This capability allows applications to enforce sec
Enforces structural integrity on incoming request payloads using schema-driven validation.
Huma is an OpenAPI REST framework for Go designed for building HTTP services with automatic OpenAPI 3.1 specification generation and JSON Schema validation. It serves as a toolkit for developing REST and RPC APIs with typed inputs and outputs, deriving interactive documentation directly from the source code. The framework distinguishes itself by automating the synchronization between implementation and documentation. It uses a content-negotiation engine to manage multiple serialization formats via client headers and employs a JSON Schema input validator to automatically verify request paramet
Automatically generates JSON Schema validation rules from Go types to verify incoming request data.
jscamp is a full-stack web development and education project focused on mastering JavaScript, TypeScript, and AI integration. It provides a structured curriculum and interactive exercises covering language fundamentals, frontend engineering, and backend API development. The project distinguishes itself through the implementation of autonomous AI agents capable of complex task automation, such as modifying files, managing servers, and executing API calls. It includes advanced AI development tools for conversational querying, real-time code suggestions, and automated repository analysis to gene
Intercepts API requests to verify data integrity and reject invalid payloads using schema-based validation.