Server Actions Security

Secure server actions with authentication, authorization, and validation.

Authentication Pattern

Every server action must verify the session before processing:

'use server'

import { verifySession } from '@/lib/dal'
import { z } from 'zod'

const updateProfileSchema = z.object({
  name: z.string().min(1).max(100),
  email: z.string().email()
})