You can use Ecto to check any information from the user. Extra, we have another layer of security. Only the supported parameters are passed to the domain layer.

Using Ecto to verify parameters from the user is not difficult and can be part of your API verification pipeline.

Check on: https://bartoszgorka.com/ecto_changeset_for_verifying_parameters_used_in_your_api