Should i check for auth in my server actions?

[unique vale]

Well, let's say i have a server action which somehow touches DB, should i perform authentication check inside of it? the action is only intended to be ran from protected page, which has already pass the auth check.
(the question basically is: can anyone run server actions?)

[keen lodge]

Post created!

🔎 This post has been indexed in our web forum and will be seen by search engines so other users can find it outside Discord

🕵️ Your user profile is private by default and won't be visible to users outside Discord, if you want to be visible in the web forum you can add the "Public Profile" role in id:customize

✅ You can mark a message as the answer for your post with Right click -> Apps -> Mark Solution
(if you don't see the option, try refreshing Discord with Ctrl + R)

[vapid trout]

yes, should should check. Server actions are the same as an REST API Endpoint, just with better developer experience (DX). So secure them as you would do with REST APIs

[unique vale]

got it, thanks

[keen lodge]

✅ Success!

This question has been marked as answered! If you have any other questions, feel free to create another post

Jump to answer

[Click here](#1429563373695012884 message)