server action
A server action exposes a framework-supported server operation to the client.
Use this when A form needs to invoke server work through the framework’s action mechanism.
without the term
“I made a Next.js server action to delete a project. It's only shown on the admin page so it should be safe, right? Can you double check it?”
with the term · How do you ask a model for server action?
Implement this authenticated server action. Test direct signed-out calls, another user’s record, and invalid input before verifying the form.
What is server action?
A server action is a server function the framework exposes as an endpoint so a form or button can call it. Anyone can call it directly, so it must check identity, permission, and input itself.
Why does server action matter when vibe coding?
A server function can look private in code while still being callable remotely.
How do you do server action?
Check identity and permission inside the operation and validate its arguments before mutation.
What goes wrong with server action?
Relying on a protected page or hidden button as the action’s authorization.