手工构建 JSON 为何会失控

At first you build JSON by hand, copying each field from your model into a dict. It feels simple, and for one endpoint it really is.

Add a few columns and your dict grows line by line. Soon one model means a long, fragile block of key-value pairs you must keep in sync.

List and detail endpoints both rebuild the same dict. That duplication means one rename forces you to edit the very same shape in many places.

A raw datetime is not JSON-friendly, so jsonify chokes or guesses. Manual code rarely formats dates the same way twice across your app.

Dump a whole model and you might ship its password_hash or internal flags. Hand-built JSON makes it far too easy to expose private fields.

One user with many posts means loops inside dicts inside lists. Nested structures turn your serialization code into a tangle that nobody enjoys reading.

Hand-built JSON only thinks about output. Incoming payloads still arrive unchecked, so validation becomes another pile of if-statements you write by hand.

A schema describes your data once: which fields exist, their types, and their rules. Both output and input then flow through that single description.

Marshmallow is the popular library for this in Flask. You declare a Schema class, and it handles serializing out and validating in.

With a schema, the field list lives in one place. Rename or drop a field there, and every endpoint stays consistent automatically.

You trade dozens of fragile dict lines for a tidy class. The result is less code, safer output, and a clear contract for your API.

Hand-built JSON duplicates work, mishandles dates, and leaks secrets. A schema layer like Marshmallow centralizes your data shape for clean, safe output.