next-auth@4.24.14

vladmandic/humannext-auth@4.24.14Apr 14, 2026by gustavovalverde

AI Summary

Fixes GitHub OAuth provider compliance with RFC 9207 by adding the issuer parameter to resolve authentication failures for apps without a configured issuer.

Key Highlights

GitHub provider issuer fix for RFC 9207 compliance
Sets default issuer to https://github.com/login/oauth
Resolves `openid-client` validation errors

Full Release Notes

## Bugfixes

  - **providers**: add issuer to GitHub provider for [RFC 9207](https://datatracker.ietf.org/doc/html/rfc9207) compliance (#13412)

GitHub now returns an `iss` parameter in OAuth callbacks. `openid-client` validates it unconditionally, which was breaking authentication for apps that didn't configure an issuer. This sets the default GitHub provider issuer to `https://github.com/login/oauth`.