Form Requests

Use Form Requests for HTTP validation and request-bound authorization when rules are complex, reused, sensitive, or likely to grow.

Inline controller validation is acceptable for tiny prototypes or legacy maintenance, but it is not the global standard for new or heavily edited workflows.

Responsibilities

A Form Request may:

• authorize the HTTP operation;
• normalize input in prepareForValidation();
• return validation rules;
• use custom messages and attribute labels;
• expose small helper methods for typed validated data.

It should not: