convex-security-audit

Security audit patterns for authorization, data access, action isolation, rate limiting, and sensitive operations in Convex applications. Comprehensive security review patterns for Convex applications including authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations. Before implementing, do not assume; fetch the latest documentation: - Covers five core security areas: role-based access control with hierarchical permissions, data access boundaries with ownership verification, action isolation for external API calls, rate limiting with configurable windows, and two-factor confirmation for destructive operations - Includes complete TypeScript examples for RBAC implementation, permission-based checks, shared resource access patterns, and audit logging systems - Provides defense-in-depth patterns including confirmation codes, internal actions, sanitized error responses, and audit trail recording for sensitive operations - Emphasizes server-side validation, environment-based secrets management, and preventing information leakage through error details or API responses - Primary: - Production Security: - For broader context: - Authorization Logic - Who can do what - Data Access Boundaries - What data users can see - Action Isolation - Protecting external API calls - Rate Limiting - Preventing abuse - Sensitive Operations -...