nextjs-server-action-validation

What problem does it solve?

Prevents untrusted user input from reaching Next.js Server Actions and databases by enforcing authentication, schema validation, and tenant/org authorization in a safe order.

Core Features & Use Cases

• Enforces validation order: authenticate first, then validate with Zod, then apply org-scoping checks before any database access.
• Uses safe parsing and controlled error surfaces: returns structured errors via safeParse to avoid leaking stack traces or query details.
• Supports secure multi-tenant writes: requires database calls to go through an org-scoped query helper (e.g., orgQuery) after input is validated.

Quick Start

Use the nextjs-server-action-validation skill when implementing a Next.js Server Action endpoint that receives user-submitted form data, and structure it to run getServerSession authentication and Schema.safeParse validation before any database call.