next-auth@4.24.14

HKUDS/AutoAgentnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This release updates the GitHub provider to comply with RFC 9207 by adding the issuer parameter, resolving authentication issues caused by changes in OAuth callback handling.

Key Highlights

GitHub provider now defaults to `https://github.com/login/oauth` as the issuer
Fixes authentication failures for apps not previously configured with an issuer
Ensures compliance with RFC 9207 OAuth standard

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.