EAN Barcode Validation in Node.js — GS1 Checksum and Prefix Lookup

1. What is an EAN barcode?

EAN stands for European Article Number, now officially called GTIN (Global Trade Item Number) by GS1 — the standards body that manages product identification globally. Despite the rebrand, "EAN" and "barcode" remain the common terms in practice.

Every EAN encodes a product identifier as a sequence of digits with a trailing check digit. When a barcode scanner reads the stripes, it decodes the digits and validates the checksum — ensuring the scan was not corrupted by a dirty or damaged label.

In e-commerce and inventory systems, EAN codes are used to identify products across suppliers and marketplaces, match catalog entries, and feed product databases.

2. EAN-13 vs EAN-8 — when each is used

3. GS1 checksum — alternating weights 1 and 3

The checksum algorithm is simpler than Luhn — instead of doubling, it alternates fixed weights of 1 and 3, then computes the complement to 10.

Let's walk through 5901234123457:

// eanChecksum.js — validate EAN-8 or EAN-13
function validateEan(raw) {
  const digits = raw.replace(/[\s-]/g, '');
  if (!/^\d+$/.test(digits)) return false;
  if (digits.length !== 8 && digits.length !== 13) return false;

  const len = digits.length;
  let sum = 0;
  for (let i = 0; i < len - 1; i++) {
    // EAN-13: weight 1 for even positions (0,2,4...), 3 for odd (1,3,5...)
    // EAN-8:  weight 3 for even positions, 1 for odd (reversed)
    const weight = len === 13
      ? (i % 2 === 0 ? 1 : 3)
      : (i % 2 === 0 ? 3 : 1);
    sum += parseInt(digits[i], 10) * weight;
  }

  const checkDigit = (10 - (sum % 10)) % 10;
  return checkDigit === parseInt(digits[len - 1], 10);
}

console.log(validateEan('5901234123457')); // true  ✓  EAN-13
console.log(validateEan('96385074'));       // true  ✓  EAN-8
console.log(validateEan('5901234123458')); // false ✗  bad check digit

4. The GS1 prefix — what it actually means

The first 2–3 digits of an EAN-13 are the GS1 prefix, assigned to a GS1 Member Organisation by country. A common misconception is that it indicates the country of origin of the product — it does not. It indicates which GS1 national organisation issued the company number.

5. Special prefixes — ISBN, ISSN, and coupons

// Check if an EAN-13 encodes a book (ISBN)
function isBookEan(ean13) {
  return ean13.startsWith('978') || ean13.startsWith('979');
}

6. The production-ready solution

The IsValid EAN API validates the format (8 or 13 digits), computes the GS1 checksum, and for EAN-13 returns the GS1 prefix and the associated member organisation country.

Full parameter reference and response schema: EAN Validation API docs →

7. Node.js code example

import { createClient } from '@isvalid-dev/sdk';

const iv = createClient({ apiKey: process.env.ISVALID_API_KEY });

// ── Example usage ────────────────────────────────────────────────────────────

const result = await iv.ean('5901234123457');

if (!result.valid) {
  console.log('Invalid EAN barcode');
} else {
  console.log('Format:', result.format);           // → 'EAN-13'
  console.log('Prefix:', result.prefix);           // → '590'
  console.log('Issued by:', result.prefixCountry); // → 'Poland'

  // Detect books
  if (result.prefix === '978' || result.prefix === '979') {
    console.log('This EAN encodes an ISBN (book)');
  }
}

// Validate barcodes before inserting into a product catalog
async function importProducts(rows) {
  const results = [];

  for (const row of rows) {
    if (!row.ean) {
      results.push({ ...row, eanStatus: 'missing' });
      continue;
    }

    const check = await validateEan(row.ean);

    if (!check.valid) {
      results.push({ ...row, eanStatus: 'invalid' });
      continue;
    }

    results.push({
      ...row,
      ean: row.ean.replace(/[\s-]/g, ''), // store normalised
      eanFormat: check.format,
      eanPrefix: check.prefix,
      eanCountry: check.prefixCountry,
      eanStatus: 'valid',
    });
  }

  return results;
}

8. cURL example

Validate an EAN-13:

curl -H "Authorization: Bearer YOUR_API_KEY" \
  "https://api.isvalid.dev/v0/ean?value=5901234123457"

Validate an EAN-8:

curl -H "Authorization: Bearer YOUR_API_KEY" \
  "https://api.isvalid.dev/v0/ean?value=96385074"

Book barcode (ISBN-encoded EAN-13):

curl -H "Authorization: Bearer YOUR_API_KEY" \
  "https://api.isvalid.dev/v0/ean?value=9780141036144"

9. Understanding the response

Valid EAN-13:

{
  "valid": true,
  "format": "EAN-13",
  "prefix": "590",
  "prefixCountry": "Poland"
}

Valid EAN-8 (no prefix lookup for 8-digit codes):

{
  "valid": true,
  "format": "EAN-8"
}

Invalid barcode:

{
  "valid": false
}

10. Edge cases

function upcAtoEan13(upc) {
  if (upc.length === 12) return '0' + upc;
  return upc; // already 13 digits or EAN-8
}

const ean = upcAtoEan13('012345678905');
console.log(ean); // → '0012345678905'

Node.js integration notes

In a TypeScript project, represent a validated EAN barcode as a branded type so the compiler enforces that only checked values flow through your pipeline: type EanBarcode = string & { readonly __brand: 'EanBarcode' }. The IsValid SDK ships with complete TypeScript definitions for all response fields, which means your editor provides autocomplete on the parsed result — country codes, category names, registry data — without writing manual type declarations.

EAN barcode validation often appears inside data ingestion pipelines: EDI feeds, supply-chain APIs, catalog imports, or financial data streams. In these contexts, validation happens at the boundary where external data enters your system. Model this as a transformation step: raw string in, validated branded type out. Use Promise.allSettled() to process batches and collect both valid and invalid results — invalid items can be quarantined for manual review without blocking the rest of the batch.

When EAN barcode values arrive from user input or partner systems, normalise them before validation: trim surrounding whitespace, remove optional hyphens or spaces that some sources include for readability, and convert to the canonical case used by the relevant standard. Apply the same normalisation logic consistently across your codebase to prevent cache misses caused by formatting differences rather than value differences.

• Read process.env.ISVALID_API_KEY once at startup and store it in a module-level constant
• Use jest.mock() to stub the IsValid client in unit tests; CI pipelines should never make real API calls
• Log the full validation response at debug level — it often contains fields useful for debugging data quality issues
• For very high throughput, consider a local pre-filter that checks format with a regex before calling the API, reducing calls for obviously malformed inputs

When making HTTP calls to the IsValid API directly (without the SDK), the choice between fetch and axios is largely a matter of preference. The native fetch API is available in Node.js 18+ without any additional dependency and is sufficient for simple request/response flows. axios adds automatic JSON parsing, request/response interceptors, and a cleaner timeout API (axios.create({ timeout: 5000 })), which makes it easier to centralise the Authorization header and retry logic in one place. For high-throughput services that make many concurrent API calls, consider undici — the HTTP client underlying Node.js fetch — used directly for its connection pooling and lower overhead.