Spring Boot用户注册API的DTO验证失效问题求助

我正在为用户注册API实现数据验证功能，已创建RegisterRequest.java作为DTO，但控制器中的@Valid注解与BindingResult均未生效。

控制器代码 #

@PostMapping("/register")
public ResponseEntity<AuthenticationResponse> register(
        @RequestBody @Valid RegisterRequest request,
     BindingResult bindingResult
) {
    request.setRole(Role.USER);
    if(bindingResult.hasErrors()){
        throw new DataValidationException();
    }
    return ResponseEntity.ok(authenticationService.register(request));
}

RegisterRequest.java代码 #

import javax.validation.constraints.Email;
import javax.validation.constraints.NotBlank;
import javax.validation.constraints.Size;
import com.jobposting.entity.Role;
import lombok.AllArgsConstructor;
import lombok.Builder;
import lombok.Data;
import lombok.NoArgsConstructor;

@Data
@Builder
@AllArgsConstructor
@NoArgsConstructor
public class RegisterRequest {
    @NotBlank(message = "First name is required")
    private String firstname;
    private String lastname;
    @NotBlank(message = "Email is required")
    @Email(message = "Email should be valid")
    private String email;
    @NotBlank(message = "Password is required")
    @Size(min = 8, message = "Password must be at least 8 characters long")
    private String password;
    @Size(min = 10, max = 10, message = "Contact number must be 10 digits long")
    @NotBlank(message = "Contact is required")
    private String contact;
    private boolean whatsappConsent;
    private Role role;
}

测试请求体 #

{
    "firstname":"john",
    "lastname":"doe",
    "email":"",
    "password":"1234",
    "contact":"81808880",
    "whatsappConsent":true
}

预期与实际结果 #

• 预期：触发DataValidationException，不会进入服务层
• 实际：代码走到服务层，返回响应：

{
    "dateTime": "2024-05-25T18:24:01.0826414",
    "message": "User already present in database",
    "details": "uri=/api/v1/auth/register"
}

解决方法 #

1. 确认验证依赖是否存在

Spring Boot 2.3及以上版本需要单独引入验证依赖，添加到你的构建文件中：
Maven

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-validation</artifactId>
</dependency>

Gradle

implementation 'org.springframework.boot:spring-boot-starter-validation'

旧版本（2.3之前）的spring-boot-starter-web已包含验证模块，无需额外引入。

2. 调整参数修改时机

验证逻辑在控制器方法参数绑定阶段完成，当前先设置role再判断错误不影响验证，但建议将request.setRole(Role.USER)移到错误判断之后，避免无效操作：

@PostMapping("/register")
public ResponseEntity<AuthenticationResponse> register(
        @RequestBody @Valid RegisterRequest request,
        BindingResult bindingResult
) {
    if(bindingResult.hasErrors()){
        throw new DataValidationException();
    }
    request.setRole(Role.USER); // 移至错误判断后
    return ResponseEntity.ok(authenticationService.register(request));
}

3. 检查全局异常处理器

如果项目中有@ControllerAdvice标注的全局异常处理器，确认它没有提前捕获MethodArgumentNotValidException。若需保留全局处理器，可在其中处理验证错误，或确保控制器的BindingResult优先处理。

4. 验证注解与配置

• 确认DTO中使用的是javax.validation包下的注解（当前代码已符合要求）
• 检查配置文件中是否禁用了验证：

  # 确保没有这行配置
  # spring.mvc.validation.enabled=false
  

内容的提问来源于stack exchange，提问作者Tushar Kawade