Auth & access

Request validation

Inputs are validated against JSON Schema at the gateway, before any business logic runs.

Validation errors return 422 Unprocessable Entity with a structured body listing every failed field. Fix all of them in one round-trip.

Example#

422 Unprocessable Entity

json

{
  "error": "VALIDATION_ERROR",
  "message": "Request validation failed",
  "request_id": "req_01HX7K2A3B4C5D",
  "details": [
    { "field": "member.date_of_birth", "message": "Must be a valid ISO 8601 date" },
    { "field": "plan_id", "message": "Required field missing" }
  ]
}

Strict types#

Pierflow rejects unknown fields by default. If you're sending an extra property, you'll see a UNKNOWN_FIELD error — useful for catching typos early.