Auth.js (NextAuth.js) is a set of open-source packages for authentication in modern web applications, designed to work with standard Web APIs and integrate with many OAuth 2.0 and OIDC providers. It helps you add sign-in flows like email/passwordless, passkeys (WebAuthn), and JWT-based sessions with configurable security defaults and options for using a database or running stateless authentication.
Project status
- Actively maintained: the repository has a very recent upstream push (2026-04-14), and there were multiple closely timed package updates for next-auth and its adapters the same day.
- Apparent cadence: based on the provided “last upstream push” and the recent batch of updates on 2026-04-14, it looks like the project ships frequent incremental updates, though the exact interval cannot be inferred from this limited sample.
AI summary generated Today
Recent updates
next-auth@4.24.14
1 month agonext-auth@4.24.14 includes a focused fix for GitHub OAuth where GitHub now returns an `iss` claim, and openid-client was validating it in a way that could break sign-in for apps that did not set a GitHub `issuer`. The change documents setting the default GitHub provider issuer to `https://github.com/login/oauth` for RFC 9207 compliance.
@auth/upstash-redis-adapter@2.11.2
1 month agoThis release of @auth/upstash-redis-adapter is primarily a dependency update. No user-facing features, fixes, or breaking changes are described in the release notes.
@auth/xata-adapter@1.11.2
1 month agoThis is a patch release of @auth/xata-adapter that updates its dependency on @auth/core. No other user-facing changes are described in the release notes.