ModelState.IsValid even when it should not be?

by

The ModelState.IsValid internally checks the Values.All(modelState => modelState.Errors.Count == 0) expression.

Because there was no input the Values collection will be empty so ModelState.IsValid will be true.

So you need to explicitly handle this case with:

if (user != null && ModelState.IsValid)
{

}

Whether this is a good or bad design decision that if you validate nothing it will true is a different question…

More Related Contents:

  1. How to use (get and set) httpcontext.current.Session in the class library, within MVC web api application? [duplicate]
  2. WCF vs ASP.NET Web API [closed]
  3. Handle ModelState Validation in ASP.NET Web API
  4. Multiple actions were found that match the request in Web Api
  5. Entity Framework Core: A second operation started on this context before a previous operation completed
  6. How to implement real time data for a web page
  7. Swagger UI Web Api documentation Present enums as strings?
  8. Set default global json serializer settings
  9. WebAPI StreamContent vs PushStreamContent
  10. Routing with multiple Get methods in ASP.NET Web API
  11. ASP.NET WebApi: how to perform a multipart post with file upload using WebApi HttpClient
  12. Self referencing loop detected – Getting back data from WebApi to the browser
  13. Query string not working while using attribute routing
  14. How to Get byte array properly from an Web Api Method in C#?
  15. Return content with IHttpActionResult for non-OK response
  16. How to throttle requests in a Web Api?
  17. Where is HttpContent.ReadAsAsync?
  18. Why is my ClaimsIdentity IsAuthenticated always false (for web api Authorize filter)?
  19. Returning http status code from Web Api controller
  20. ASP.NET Core API only returning first result of list
  21. Application_Error in global.asax not catching errors in WebAPI
  22. Effectively use async/await with ASP.NET Web API
  23. swagger-ui returns 500 after deployment
  24. Read HttpContent in WebApi controller
  25. WebAPI and ODataController return 406 Not Acceptable
  26. Web API – 405 – The requested resource does not support http method ‘PUT’
  27. ASP.NET Web API and [Serializable] class
  28. How to use DI container when OwinStartup
  29. Running self-hosted OWIN Web API under non-admin account
  30. Disable *all* exception handling in ASP.NET Web API 2 (to make room for my own)?

Leave a Comment