next-auth@4.24.14

EmilTholin/image-trace-loadernext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This release fixes a bug in the GitHub OAuth provider by adding an issuer configuration to ensure compliance with RFC 9207 standards.

Key Highlights

GitHub provider issuer fix
RFC 9207 compliance

New Features

GitHub provider issuer configuration

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.