next-auth@4.24.14
FoundationVision/VARnext-auth@4.24.14Apr 14, 2026by gustavovalverde
AI Summary
Fixes GitHub OAuth authentication by adding the issuer parameter required by RFC 9207 to comply with `openid-client` validation.
Key Highlights
- GitHub provider issuer configuration for RFC 9207 compliance
- Fixes authentication errors for apps without a configured issuer
Full Release Notes
## Bugfixes - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412) GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.