next-auth@4.24.14

badges/shieldsnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This release fixes an authentication issue in the GitHub OAuth provider caused by the `openid-client` library requiring an issuer parameter, ensuring compliance with RFC 9207.

Key Highlights

GitHub OAuth provider now includes issuer for RFC 9207 compliance.
Bugfix for `openid-client` validation breaking authentication.
Default GitHub provider issuer set to `https://github.com/login/oauth`.

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.