next-auth@4.24.14

langgenius/dify-sandboxnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

Fixes GitHub OAuth provider to comply with RFC 9207 by adding an issuer parameter.

Key Highlights

GitHub provider issuer added for RFC 9207 compliance

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.