next-auth@4.24.14

frappe/ganttnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This is a bugfix release that adds the issuer parameter to the GitHub provider to ensure compliance with RFC 9207, resolving authentication issues caused by strict validation in the `openid-client` library.

Key Highlights

GitHub provider issuer configuration added
RFC 9207 compliance fix
Fixes authentication for apps without custom issuer configuration

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.