Validate creator param

src/modules/creator/creator.middleware.ts

@@ -0,0 +1,38 @@
+import { NextFunction, Request, Response } from 'express';
+import { z, ZodError } from 'zod';
+import { sendValidationError } from '../../utils/api-response.utils';
+
+export const CreatorIdParamsSchema = z.object({
+   id: z.string().trim().min(1, 'Creator ID is required'),
+});
+
+export type CreatorIdParams = z.infer<typeof CreatorIdParamsSchema>;
+
+export const validateCreatorIdParam = (
+   req: Request,
+   res: Response,
+   next: NextFunction
+): void => {
+   try {
+      const validatedParams = CreatorIdParamsSchema.parse(req.params);
+      req.params = {
+         ...req.params,
+         ...validatedParams,
+      };
+      next();
+   } catch (error) {
+      if (error instanceof ZodError) {
+         const details = error.errors.map(err => ({
+            field: err.path.join('.'),
+            message: err.message,
+         }));
+         return sendValidationError(
+            res,
+            'Invalid creator route parameters',
+            details
+         );
+      }
+
+      next(error);
+   }
+};

src/modules/creator/creator.routes.ts

@@ -70,4 +70,11 @@ router.all('/:creatorId/profile', (_req, res) => {
    res.set('Allow', 'GET, PUT').sendStatus(405);
 });
 
+/**
+ * @route GET /api/v1/creators/:id/stats
+ * @desc Get stats for a creator by id
+ * @access Public
+ */
+router.get('/:id/stats', validateCreatorIdParam, getCreatorStats);
+
 export default router;

src/modules/creators/creators.controllers.ts

@@ -101,15 +101,8 @@
  */
 export const httpGetCreatorStats: AsyncController = async (req, res, next) => {
    try {
       const { id } = req.params;
 
-      // Validate creator ID format (basic validation)
-      if (!id || typeof id !== 'string') {
-         return sendValidationError(res, 'Invalid creator ID', [
-            { field: 'id', message: 'Creator ID must be a valid string' },
-         ]);
-      }
-
       // TODO: Fetch actual creator metrics from database/service
       // For now, return placeholder data
       const placeholderMetrics = {

src/modules/creators/creators.middleware.ts

@@ -0,0 +1,52 @@
+import { NextFunction, Request, Response } from 'express';
+import { z, ZodError } from 'zod';
+import { sendValidationError } from '../../utils/api-response.utils';
+
+/**
+ * Zod schema for creator route parameters.
+ * Validates that 'id' is a non-empty string.
+ */
+export const CreatorIdParamsSchema = z.object({
+   id: z.string().trim().min(1, 'Creator ID is required'),
+});
+
+export type CreatorIdParams = z.infer<typeof CreatorIdParamsSchema>;
+
+/**
+ * Middleware to validate creator route parameters (e.g., :id).
+ *
+ * Uses Zod to parse and validate 'req.params'.
+ * If validation fails, returns a 400 Bad Request with details.
+ * If successful, attaches validated params back to 'req.params' and proceeds.
+ *
+ * @example
+ * router.get('/:id/stats', validateCreatorIdParam, httpGetCreatorStats);
+ */
+export const validateCreatorIdParam = (
+   req: Request,
+   res: Response,
+   next: NextFunction
+): void => {
+   try {
+      const validatedParams = CreatorIdParamsSchema.parse(req.params);
+      req.params = {
+         ...req.params,
+         ...validatedParams,
+      };
+      next();
+   } catch (error) {
+      if (error instanceof ZodError) {
+         const details = error.errors.map(err => ({
+            field: err.path.join('.'),
+            message: err.message,
+         }));
+         return sendValidationError(
+            res,
+            'Invalid creator route parameters',
+            details
+         );
+      }
+
+      next(error);
+   }
+};

src/modules/creators/creators.routes.ts

@@ -47,4 +47,4 @@ creatorsRouter.all('/:id/stats', (_req, res) => {
    res.set('Allow', 'GET').sendStatus(405);
 });
 
-export default creatorsRouter;
+export default creatorsRouter;