Data Validation

Just like in web controllers, you can validate incoming data in Socket.IO events using the validator crate.

For the full reference of try_data and try_validated_data, see Event handling and SocketContext reference.

Enabling validation-validator

To use validation in SocketContext, you must enable the validation-validator feature.

[dependencies]
sword = { version = "x.y.z", features = ["validation-validator"] }
serde = { version = "x.y.z", features = ["derive"] }
validator = { version = "x.y.z", features = ["derive"] }

Example

dtos.rs

use serde::Deserialize;
use validator::Validate;

#[derive(Debug, Deserialize, Validate)]
struct IncomingDataDto {
    #[validate(length(min = 1, max = 200))]
    pub content: String,
}

controller.rs

use sword::prelude::*;
use sword::socketio::*;

#[controller(kind = Controller::SocketIo, namespace = "/chat")]
pub struct ChatController;

impl ChatController {
    #[on("message")]
    async fn handle_message(&self, socket: SocketContext) {
        let Ok(data) = socket.try_validated_data::<IncomingDataDto>() else {
            eprintln!("Failed to validate message data");
            return;
        };

        socket.emit("message", &data.content).ok();
    }
}

Difference with try_data

• try_data::<T>() only deserializes the payload.
• try_validated_data::<T>() deserializes and then runs Validate.

If validation fails, the method returns an error, and you can decide how to handle it within the handler.