How to implement role-based validation using FluentValidation

Question

We have a number of web api services that currently use FluentValidation and SharpGrip.FluentValidation.AutoValidation for automatic asynchronous validation. It works really well.

At present the services are only used by one type of user but we're about to support users with different roles who, for some requests, will require different validation rules.

Having read the docs for FluentValidation, it seems that Rulesets would be an elegant solution to this problem. We could introduce a ruleset per role, and use the Default Ruleset for common rules. Then, we could evaluate the HttpContext.User to determine which roles/rulesets to use.

Has anyone used this approach before? How can we customize which rulesets are evaluated when using SharpGrip.FluentValidation.AutoValidation?

Thanks

tembojoe · Accepted Answer · 2024-12-02 16:43:15Z

So, after further reading of SharpGrip.FluentValidation.AutoValidation, I came across the IGlobalValidationInterceptor.

As per the docs

validation interceptors is considered to be an advanced feature and is not needed for most use cases

However, for my use case, it appears perfect:

public class ValidationInterceptor : IGlobalValidationInterceptor
{
    public IValidationContext? BeforeValidation(ActionExecutingContext actionExecutingContext, IValidationContext validationContext)
    {
        if (actionExecutingContext.HttpContext.User.IsInRole(Roles.Users))
        {
            return ValidationContext<object>.CreateWithOptions(validationContext.InstanceToValidate, options =>
            {
                options.IncludeRuleSets(Roles.Users).IncludeRulesNotInRuleSet();
            });
        }
        if (actionExecutingContext.HttpContext.User.IsInRole(Roles.Employees))
        {
            return ValidationContext<object>.CreateWithOptions(validationContext.InstanceToValidate, options =>
            {
                options.IncludeRuleSets(Roles.Employees).IncludeRulesNotInRuleSet();
            });
        }
        
        return validationContext;
    }

    public ValidationResult? AfterValidation(ActionExecutingContext actionExecutingContext,
        IValidationContext validationContext)
    {
        return null;
    }
}

Thanks to the contributors at SharpGrip

Collectives™ on Stack Overflow

How to implement role-based validation using FluentValidation

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related