Enforce input type validation before middleware/auth checks

[laytong]

I have a middleware that is checking if a given id is allowed to be read by a user. However this could be a security hole unless I can enforce typechecking on the data in my input.

I want to make use of the @isNumberString class-validator directive on my Args before the security middleware is run. Am I missing something obvious in how to achieve this?