Never miss a release that matters
AI-powered summaries of every GitHub release.
AI Summaries
Changelogs condensed into clear, actionable insights.
Always Free
Track up to 5 packages at no cost, forever.
Weekly Digest
A curated summary of every release, delivered weekly.
TL;DR
GitHub authentication now works reliably due to an update to handle new security standards (OAuth 2.0) enforced by GitHub.
Fixes Worth Knowing
- GitHub login now functions correctly even without explicit issuer configuration, resolving authentication failures for many users.
TL;DR
Auth.js adapters have been updated with a core dependency update, ensuring compatibility and benefiting from internal improvements to the core authentication library.
Before You Upgrade
Update all your Auth.js adapters to version 1.11.2 to benefit from the latest core improvements and maintain compatibility.
TL;DR
All Auth.js adapters have been updated with a dependency update to @auth/core, improving overall stability and security.
Before You Upgrade
Update all your Auth.js adapters to version 2.11.2 (or 2.2.2 for SurrealDB) to benefit from the latest @auth/core improvements.
TL;DR
This release updates core dependencies, ensuring compatibility and stability for Fauna and MongoDB adapters.
Fixes Worth Knowing
Updated core dependencies to resolve potential security vulnerabilities and improve overall performance.
TL;DR
Auth.js now supports RFC 9207 compliance for GitHub providers, improving security and interoperability with modern authentication standards.
Fixes Worth Knowing
GitHub provider now includes the issuer claim, resolving compatibility issues with recent GitHub updates and ensuring continued functionality for users authenticating with GitHub.
TL;DR
NextAuth.js now supports OpenID Connect (OIDC) capabilities for Keycloak, enhancing integration with this popular identity provider.
Fixes Worth Knowing
Several fixes improve reliability and correct typos across documentation and code. Specifically, fixes were made for:
- BroadcastChannel checks
- Provider ID handling
- SurrealDB adapter compatibility (database tool)
- Mailgun region selection
- Microsoft Entra ID integration
- Prisma adapter error handling (database tool)
TL;DR
Auth.js now supports PouchDB, enabling offline authentication capabilities for your applications.
New
- Added support for PouchDB as a new adapter, allowing users to store authentication data locally for offline access (local database).
Fixes Worth Knowing
- Fixed a TypeScript configuration issue affecting Firebase and PouchDB integrations, improving developer experience.
TL;DR
Auth.js now requires a secret for production environments and refines session management with a new session.strategy option (JWT or database) for improved clarity and control.
Breaking
- Secret Required: A
secretmust now be configured for production deployments. (Security key) - Session Strategy Renamed: The
session.jwtoption is replaced bysession.strategywith values of"jwt"or"database". (Session persistence method)
New
- Relative Redirects: You can now use relative URLs for redirects after authentication. (URL paths)
- Large Session Handling: Sessions exceeding cookie size limits are now automatically chunked. (Session data size)
Fixes Worth Knowing
getServerSessionHost: Correctly respects thehostsetting ingetServerSession. (Server-side session retrieval)- Error Query Param: Uses the
errorquery parameter for displaying authentication errors. (Error handling) - OAuth Clock Tolerance: Increased clock tolerance for OAuth providers to 10 seconds. (Provider compatibility)
TL;DR
Auth.js now fully supports TypeScript (TS) with improved type definitions and module augmentation, enabling better developer experience and code completion in TS projects.
New
- TypeScript Support: Exposes types from the package for improved type safety.
- Module Augmentation: Allows extending existing types with custom configurations.
Fixes Worth Knowing
- Resolved several TypeScript-related issues including missing types, typos, and incorrect exports.
- Corrected package.json formatting and build processes.
- Relative imports are now used consistently.
Before You Upgrade
If you are using TypeScript, ensure your IDE or editor is configured to recognize the new type definitions for optimal experience.