joi

That is in no way different than REST: 1. (same) 2. Based on the screen designs and workflows, front end dev team writes the REST contract that they want. They mock the endpoints (i.e. using nock [0] or Angular's MockBackend) for the contracts and come up with the DTO definitions. 3. Backend folks start implementing the REST endpoints by orchestrating microservices (or by creating a REST service facade for an existing REST API). 4. Once the backend REST endpoints are done, switch out the mock endpoints for the real ones There is no need or benefit for using GraphQL here, all this can be done with REST already. Tooling around REST is great, i.e. you could use TypeScript to generate .d.ts files for your REST Dtos based on the swagger API schema [1]. Or with plain JS, use a JS runtime library that validates the DTO schematics/REST contracts

For validating entire objects: https://github.com/hapijs/joi

I really like the error messages that Joi[1] provides. You can easily use the error.message property to give a human friendly message to the end-user and if the default options don't serve your needs you can overwrite them with custom messages. Someone made a Joi playground a few months ago, Joi Tester[2], that makes it really easy to test your Joi schemas. If you're curious, feel free to give it a try (I'm not affiliated with the tool in any regards but I do think it's awesome). [1] https://github.com/hapijs/joi [2] http://framp.me/joi-tester/

You don't. You'd have to use something like https://github.com/hapijs/joi

"NoSQL means Not-injectable, right?" makes no sense for me. It doesnt matter which type of database technology you are using. As any other database there are security roles. No mongodb query should be executed as an admin. You can restrict that up to document level. You can even create read-only views. You should always validate you payload. Use e.g Joi https://github.com/hapijs/joi. Someone who doesn't validate his payload and pass it up to the driver should not be surprised.

Hi I hate to cover my JSON controllers with Type Check System but I have to do it because of security reasons. So, I tried to trick my brain and make this process enjoyable. I would like to share the solution with you (https://github.com/askucher/ftjs). if you have same problem and it helps you that my hence my karmic task of helping people will has a little progress. There are other projects like joi already available (https://github.com/hapijs/joi) but ftjs has own Ocaml/F# like DSL and who likes Discriminated Unions, Syntax Sugar will understand me.