Function parseUUIDOrBadRequest

server/internal/handler/handler.go:317–324

parseUUIDOrBadRequest validates a UUID string sourced from user input (URL params, request body, headers). On invalid input it writes a 400 response and returns ok=false; callers must return immediately. Use this anywhere a malformed UUID would otherwise reach a write query (DELETE / UPDATE) — the

(w http.ResponseWriter, s, fieldName string)

// (DELETE / UPDATE) — the silent zero-UUID behavior of the old ParseUUID
// caused real silent-data-loss bugs (#1661).
func parseUUIDOrBadRequest(w http.ResponseWriter, s, fieldName string) (pgtype.UUID, bool) {
	u, err := util.ParseUUID(s)
	if err != nil {
		writeError(w, http.StatusBadRequest, "invalid "+fieldName)
		return pgtype.UUID{}, false
	}
	return u, true
}

func parseUUIDSliceOrBadRequest(w http.ResponseWriter, ids []string, fieldName string) ([]pgtype.UUID, bool) {
	uuids := make([]pgtype.UUID, len(ids))