Error handling
next-safe-action has three categories of errors, each handled differently:
Validation errors
Validation errors occur when the client sends data that doesn't match the input schema. They're returned in the result object (not thrown) and are always safe to show to the user:
const result = await createUser({ name: "", email: "bad" });
result.validationErrors;
// → { name: { _errors: ["Too short"] }, email: { _errors: ["Invalid email"] } }Validation errors are produced in two ways:
- Automatically: when Standard Schema validation fails on input or bind args
- Manually: when you call
returnValidationErrors()in your server code (e.g., "email already taken")
import { returnValidationErrors } from "next-safe-action";
export const signUp = actionClient
.inputSchema(schema)
.action(async ({ parsedInput }) => {
const exists = await db.user.findByEmail(parsedInput.email);
if (exists) {
return returnValidationErrors(schema, {
email: { _errors: ["Already registered"] },
});
}
// ...
});returnValidationErrors actually throws internally (it never returns), which ensures the remaining server code doesn't execute.
See Input Validation for error shapes and Custom Validation Errors for advanced formatting.
Server errors
Server errors are unexpected failures, such as database timeouts, API failures, or bugs in your server code. By default, next-safe-action:
- Catches the thrown error
- Passes it to
handleServerError(which you define in client options) - Returns the handler's return value as
result.serverError
const actionClient = createSafeActionClient({
handleServerError(e) {
// This runs when any action throws an unexpected error
console.error("Action error:", e.message);
// What you return here becomes result.serverError on the client
// Default: "Something went wrong"
return e.message;
},
});Security: The default handleServerError returns a generic "Something went wrong" message. If you return e.message, make sure your errors don't contain sensitive information (stack traces, database queries, etc.).
Throwing errors instead of returning them
By default, validation and server errors are returned in the result object. You can opt into throwing them instead using boolean flags, which is useful when you want errors to propagate to an error boundary or a try/catch block.
throwServerError: action-level only. When enabled, server errors are re-thrown instead of being returned in result.serverError:
export const myAction = actionClient
.inputSchema(schema)
.action(
async ({ parsedInput }) => {
// ...
},
{
throwServerError: true,
}
);throwValidationErrors: available at both client and action level. When set at both levels, the action-level setting takes priority:
// Client-level: applies to all actions created from this client
const actionClient = createSafeActionClient({
throwValidationErrors: true,
});
// Action-level: overrides the client setting for this specific action
export const myAction = actionClient
.inputSchema(schema)
.action(
async ({ parsedInput }) => {
// ...
},
{
throwValidationErrors: true,
}
);These flags control whether the final error is returned in the result object or thrown. They don't replace handleServerError (which still processes server errors before the throw/return decision) or returnValidationErrors() (which is a function for manually producing validation errors in your server code).
Framework navigation/errors
Framework navigation/errors are navigation events triggered by Next.js functions like redirect(), notFound(), forbidden(), and unauthorized(). These are special because they're not really "errors", but control flow mechanisms that Next.js uses to trigger navigation.
next-safe-action detects and handles these automatically:
import { redirect } from "next/navigation";
export const loginAction = actionClient
.inputSchema(loginSchema)
.action(async ({ parsedInput }) => {
const user = await authenticate(parsedInput);
// This triggers a redirect, not a normal return
redirect("/dashboard");
});What happens with framework errors
- On the server: The error is caught, identified as a framework error, and re-thrown so Next.js can handle the navigation
- On the client: If using
useAction, the hook detects the navigation and setsstatusto"hasNavigated"(instead of"hasSucceeded"or"hasErrored") - Callbacks: The
onNavigationcallback fires (instead ofonSuccessoronError)
Navigation kinds
The navigationKind property tells you what type of navigation occurred:
| Function | navigationKind |
|---|---|
redirect() | "redirect" |
notFound() | "notFound" |
forbidden() | "forbidden" |
unauthorized() | "unauthorized" |
const { execute } = useAction(myAction, {
onNavigation: ({ navigationKind }) => {
if (navigationKind === "redirect") {
// Action triggered a redirect
}
},
});See Framework Errors for advanced configuration.
Error precedence
The action result is a discriminated union: at most one of data, serverError, and validationErrors is populated at a time. In most executions only one field is ever set, but a few compound scenarios can reach the final result-building step with multiple candidates:
- Invalid bind args (wrapped as a server error) combined with invalid main input (validation errors).
- Middleware that calls
await next(), receives a result that already containsvalidationErrors, then throws afterwards (for example, a post-validation audit/cleanup step that fails).
In these cases next-safe-action applies a fixed precedence when assembling the returned result:
validationErrors > serverError > dataThe winning field fully describes the outcome; the lower-priority field is dropped from the returned object. For the example above where middleware throws after receiving validation errors, the client receives only the validation errors, and the thrown server-side error is not present in the result.
What still runs for dropped server errors
The precedence rule only affects what appears in the returned result, not whether handleServerError executes:
- When middleware or server code throws,
handleServerErroris invoked immediately with the thrown error, regardless of any pre-existingvalidationErrors. - Only after
handleServerErrorhas run does the result-building step apply precedence and decide which field to keep.
This means logging, telemetry, Sentry integrations, and any other side effects you configure inside handleServerError always fire for thrown errors, even when the eventual result carries validationErrors instead of serverError. Treat handleServerError as the authoritative place for server-side observability; the returned result is the client-facing summary, not a full event log.
Interaction with throwServerError
The throwServerError action-level flag is only consulted when no validationErrors are present. If the compound case produces both, the validation errors take precedence and throwServerError does not fire:
export const myAction = actionClient
.inputSchema(schema)
.use(async ({ next }) => {
const result = await next();
if (result.validationErrors) {
// This throw is caught, passed to `handleServerError`,
// and its return value is assigned to `middlewareResult.serverError`
// but the returned result still surfaces `validationErrors`.
throw new Error("audit cleanup failed");
}
return result;
})
.action(
async () => {
// ...
},
{ throwServerError: true } // NOT re-thrown in the compound case above
);If you need to guarantee that an operational failure propagates even in compound cases, raise it from handleServerError yourself (for example by logging and then rethrowing in paths you want to hard-fail), or gate the post-next() side effects on result.validationErrors === undefined so they don't run when validation has already failed.
Error handling summary
| Error type | How it's produced | Where it appears | Safe for users? |
|---|---|---|---|
| Validation | Schema parse failure or returnValidationErrors() | result.validationErrors | Yes |
| Server | Thrown error in server code/middleware | result.serverError | Depends on handleServerError |
| Framework | redirect(), notFound(), etc. | Navigation occurs | N/A (handled by Next.js) |