Input Validation with Zod and Prisma 6

Overview

Always validate external input with Zod before Prisma operations. Never trust user-provided data, API requests, or form submissions. Use type-safe validation pipelines that match Prisma schema types.

Validation Pipeline

External Input → Zod Validation → Transform → Prisma Operation

Pattern

import { z } from 'zod'
import { PrismaClient } from '@prisma/client'

const prisma = new PrismaClient()