Express middleware functions are the backbone of request processing in Express applications. They sit between the incoming request and the final route handler, allowing you to intercept, modify, or validate data before it reaches your business logic.
Middleware functions have access to three key objects: the request object (req), the response object (res), and the next function. The next function is crucial—it passes control to the next middleware in the chain. If you don't call next(), the request will hang indefinitely.
Validation middleware is particularly important for API security and data integrity. Instead of repeating validation logic in every route handler, you can create reusable middleware that validates request data against predefined schemas. This follows the DRY (Don't Repeat Yourself) principle and ensures consistent validation across your application.
The key to effective validation middleware is failing fast and providing clear error messages. When validation fails, you should immediately return an HTTP 400 (Bad Request) status with a descriptive error message. This prevents invalid data from reaching your route handlers and gives clients clear feedback about what went wrong.
Schema-based validation allows you to define rules declaratively rather than writing imperative validation code in each route. You can specify data types, required fields, length constraints, and other rules in a simple object format. The middleware then applies these rules systematically to incoming request bodies.
Middleware composition is powerful—you can chain multiple middleware functions together, each handling a specific concern like authentication, validation, logging, or rate limiting. This creates a pipeline where each piece of middleware has a single responsibility.
1import express from 'express';
2
3// Simple logging middleware
4function logger(req: express.Request, res: express.Response, next: express.NextFunction) {
5 console.log(`${req.method} ${req.path} - ${new Date().toISOString()}`);
6 next(); // Pass control to next middleware
7}
8
9// Authentication middleware
10function requireAuth(req: express.Request, res: express.Response, next: express.NextFunction) {
11 const token = req.headers.authorization;
12
13 if (!token) {
14 return res.status(401).json({ error: 'Authorization required' });
15 }
16
17 // If validation passes, continue to next middleware
18 next();
19}
20
21const app = express();
22app.use(express.json());
23
24// Chain multiple middleware functions
25app.get('/protected', logger, requireAuth, (req, res) => {
26 res.json({ message: 'Access granted!' });
27});