The backend is Java (Spring Boot), so common validation module is unfortunately not an option.

The #2 looks most promising to me as well, but I didn't find this solution anywhere, so I wanted to check if anyone actually used this approach sucessfully.