next-auth@4.24.14

tursodatabase/tursonext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

This release updates the GitHub provider to comply with RFC 9207 by adding the issuer parameter, resolving OAuth callback validation issues for apps that did not configure an issuer.

Key Highlights

GitHub provider now includes the `iss` parameter for RFC 9207 compliance
Fixes authentication failures caused by `openid-client` validation
Sets default issuer to `https://github.com/login/oauth`

New Features

RFC 9207 compliant GitHub OAuth provider

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.