Input validation

For GET, POST, and path parameters.

Accepting strings.
Accepting values in other types (numbers, booleans).
Accepting only IDs that are in the database.
Accepting a limited set of values that can be defined in an enum.