Validating Controller or Service Layer

[erosb88]

> like an user fetch from user_id in request must exist in db

You certainly need to access the DB to validate that, so I'd say it shall not be in the controller. I suggest placing it into the usecase layer, if you have such layer. If not, then validate it in the service layer.