next-auth@4.24.14

stalwartlabs/stalwartnext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

A bugfix release addressing OAuth2 issuer validation compliance for the GitHub provider.

Key Highlights

Added issuer support to the GitHub provider to ensure RFC 9207 compliance

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.