AEM Forms server validation

[royteeuwen]

While client-side validation (e.g., using JavaScript) improves user experience by providing instant feedback, it can be easily bypassed by:

• Disabling JavaScript
• Manipulating form data via browser dev tools
• Sending crafted requests directly to the server

Server-side validation, on the other hand:

• Ensures that all submitted data is properly checked regardless of client behavior
• Protects against malicious inputs
• Enforces business rules that may require access to backend systems

In AEM Forms foundation components I found an option to explicitely enable server-side validation, while I don't find this option in AEM Forms core components? Has this feature been missed / not implemented yet?

[rismehta]

In AEM Forms foundation components I found an option to explicitely enable server-side validation, while I don't find this option in AEM Forms core components? Has this feature been missed / not implemented yet?

This feature wasn’t included in core components as OOTB feature due to deployment-related considerations(for AEM cloud service). However, you can set up a standalone nodejs server or a serverless action, load the form model in a headless manner, and perform validation. This can be implemented through a custom approach using the Forms client-side SDK.

https://opensource.adobe.com/aem-forms-af-runtime/js-docs/interfaces/FormModel.html#validate
https://www.npmjs.com/package/@aemforms/af-core