Authenticate Next.js Server Actions before mutations
Server Actions that mutate state must validate sessions locally before reaching privileged sinks.
#Metadata
#Why it matters
Server Actions behave like public POST endpoints and inherit the same authentication obligations as route handlers.
#Remediation
Call your auth/session helper before mutations and enforce ownership inside database predicates.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.next.server-action-missing-local-auth.rule.yaml.