next-auth@4.24.14

nextauthjs/next-authnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This release fixes a bug in the GitHub OAuth provider to comply with RFC 9207 by adding the required issuer parameter, resolving authentication failures for applications that did not manually configure an issuer.

Key Highlights

Adds issuer to GitHub provider for RFC 9207 compliance
Fixes authentication issues caused by `openid-client` validation
Sets default issuer to `https://github.com/login/oauth`

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.