fix: template, post creation validation

.changeset/ninety-oranges-glow.md

@@ -0,0 +1,8 @@
+---
+"create-t3-app": patch
+---
+
+fix: prevent empty input submission in post creation form
+
+- Disable submit button on frontend when input is empty
+- Add `.trim()` validation on backend to reject empty/whitespace-only submissions

cli/template/extras/src/app/_components/post-tw.tsx

@@ -40,7 +40,7 @@ export function LatestPost() {
         <button
           type="submit"
           className="rounded-full bg-white/10 px-10 py-3 font-semibold transition hover:bg-white/20"
-          disabled={createPost.isPending}
+          disabled={createPost.isPending || name.length === 0}
         >
           {createPost.isPending ? "Submitting..." : "Submit"}
         </button>

cli/template/extras/src/app/_components/post.tsx

@@ -44,7 +44,7 @@ export function LatestPost() {
         <button
           type="submit"
           className={styles.submitButton}
-          disabled={createPost.isPending}
+          disabled={createPost.isPending || name.length === 0}
         >
           {createPost.isPending ? "Submitting..." : "Submit"}
         </button>

cli/template/extras/src/server/api/routers/post/base.ts

@@ -24,7 +24,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: publicProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ input }) => {
       const post: Post = {
         id: posts.length + 1,

cli/template/extras/src/server/api/routers/post/with-auth-drizzle.ts

@@ -17,7 +17,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: protectedProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ ctx, input }) => {
       await ctx.db.insert(posts).values({
         name: input.name,

cli/template/extras/src/server/api/routers/post/with-auth-prisma.ts

@@ -16,7 +16,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: protectedProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ ctx, input }) => {
       return ctx.db.post.create({
         data: {

cli/template/extras/src/server/api/routers/post/with-auth.ts

@@ -21,7 +21,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: protectedProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ input }) => {
       post = { id: post.id + 1, name: input.name };
       return post;

cli/template/extras/src/server/api/routers/post/with-drizzle.ts

@@ -13,7 +13,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: publicProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ ctx, input }) => {
       await ctx.db.insert(posts).values({
         name: input.name,

cli/template/extras/src/server/api/routers/post/with-prisma.ts

@@ -12,7 +12,7 @@ export const postRouter = createTRPCRouter({
     }),
 
   create: publicProcedure
-    .input(z.object({ name: z.string().min(1) }))
+    .input(z.object({ name: z.string().trim().min(1) }))
     .mutation(async ({ ctx, input }) => {
       return ctx.db.post.create({
         data: {