Tag

#authorization articles

Articles related to this tag. If you’re new, start with the newest posts.

September 20, 2026·11 min read

Next.js Server Actions security checklist: auth, validation, and CSRF (2026)

A practical checklist for securing Next.js Server Actions: treat each action as a public POST endpoint, re-check auth and ownership, validate input, limit return values, and configure allowedOrigins correctly.

Multi-tenant RAG access control checklist: prevent cross-tenant data leaks (2026)

A practical access-control checklist for multi-tenant RAG. Derive tenant scope from the verified session, enforce it inside retrieval, preserve chunk-level ACLs, isolate caches, and test forbidden retrieval.