If is possible to validate req.params.whatever fields?
These are special tokens, like:
The username would be req.params.username => 'chovy'
This should work out of the box.
req.assert('username', 'Invalid username').isAlpha();
Can you confirm that?
Closing since there was no reply and since this should definitely work.