Server-side validation

Question

I am having trouble figuring out how to get server-side DbContext validation errors back to the client. I understand that Breeze has default validators that react to a few of the attributes such as Required, but what about all the other attributes? I could write a custom JavaScript validator for Breeze that will check on the client side, but I also need to check to make sure the entity is valid on the server-side.

For example, the application requires a Person to to have a valid email address. A malicious user comes along and gets an email address past the client and posts to the server with a data that would not pass the EmailAddress validator. Thus far my experience with Breeze is that the email address will save and not bubble up any DbContext Entity Framework errors.

Assuming the model below, what would be the best way to get any entity validation errors?

public class PeopleContext : DbContext
{
    public PeopleContext()
        : base("name=ConnectionString"){ }

    public DbSet<Person> People { get; set; }
}

public class Person
{
    public int PersonId { get; set; }
    public string FirstName { get; set; }
    [Required]
    public string LastName { get; set; }
    [EmailAddress]
    [Required]
    public string Email { get; set; }
}

UPDATE 1:

Here are some instructions to re-create the issue that I am experiencing.

1. Follow the instructions to create the "Todo" sample (http://www.breezejs.com/documentation/start-nuget)

2. Add a new custom validator to the BreezeSampleTodoItem.cs file:

   [AttributeUsage(AttributeTargets.Property)]
   public class CustomValidator : ValidationAttribute
   {
       public override Boolean IsValid(Object value)
       {
           string val = (string)value;
           if (!string.IsNullOrEmpty(val) && val == "Error")
           {
               ErrorMessage = "{0} equal the word 'Error'";
               return false;
           }
           return true;
       }
   }
   

3. Decorate the Description field with the new custom validator:

   [CustomValidator]
   public string Description { get; set; }
   

4. Add the proper usings of course (System and System.ComponentModel.DataAnnotations).

5. Run the project.
6. In one of the description fields type "Error" and save.

This is where I would expect to see an error come up through Breeze, or even an DbEntityValidationException be thrown from Entity Framework. I have tried on 2 separate computers with the same result. The entity saves to the database as if there were no error. In fact, if you put a breakpoint anywhere inside IsValid method of the custom validator you will see that its not even being called.

Answer 1

As of Breeze v 0.78.1 all registered DbContext server side validations will now execute during an EntityManager SaveChanges call. Any exceptions encountered will cause the save to rollback, and any validation errors to be serialized back to the Breeze client.

Note that this functionality is not yet supported for older ObjectContext ( as opposed to DbContext) based EF models.

And ... thanks to adamlj for discovering this issue and suggesting the solution.