convex-security-check

To run a security audit on your Convex application, apply a checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling across APIs and functions.

Row-level access control in Convex ensures proper ownership checks and data isolation. Verify it by reviewing your data handling logic to confirm users can only access their own authorized records.

Prevent sensitive operations from being publicly exposed in Convex by promoting internal function usage for those operations and enforcing strict argument validators to ensure type-safe inputs.

Strict argument validation for Convex APIs is needed to enforce type-safe inputs and prevent insecure patterns. Applying strict validators across your functions reduces risk from misconfigurations.

The best way to handle environment variables in Convex is to audit secure handling and isolation of secrets, ensuring secure management of environment keys and origin validation where applicable.

Yes, this security checklist covers authentication for Convex APIs by verifying identity validation and reviewing session handling across your deployment to identify and remediate common gaps.