Delegates to the configured IValidationService so the error
format matches the plugin registration (e.g. 'rfc9457').
The first-party service requires a JSON media type (application/json or
application/*+json), or a form media type when options.forms is true.
Unsupported or absent types answer 415 before the body is read. A replacement
service owns its own media-type handling. Cookie-authenticated routes still
need csrfMiddleware or csrfFormMiddleware, including opted-in form routes.
Validate the request body against a schema.
Delegates to the configured
IValidationServiceso the error format matches the plugin registration (e.g.'rfc9457').The first-party service requires a JSON media type (
application/jsonorapplication/*+json), or a form media type whenoptions.formsistrue. Unsupported or absent types answer 415 before the body is read. A replacement service owns its own media-type handling. Cookie-authenticated routes still needcsrfMiddlewareorcsrfFormMiddleware, including opted-in form routes.