Auth.js (NextAuth.js) is a set of open-source packages for authentication in modern web applications, designed to work with standard Web APIs and integrate with many OAuth 2.0 and OIDC providers. It helps you add sign-in flows like email/passwordless, passkeys (WebAuthn), and JWT-based sessions with configurable security defaults and options for using a database or running stateless authentication.
Project status
- Actively maintained: The repo shows ongoing activity, with the upstream project pushed on 2026-04-14 and a same-day set of adapter/framework updates across the @auth ecosystem.
- Update cadence (limited evidence): The latest observed activity cluster is on 2026-04-14, including a core next-auth 4.24.14 update plus multiple adapter updates, suggesting a steady stream of maintenance updates (exact cadence over time is not evidenced here).
AI summary generated
Recent updates
next-auth@4.24.14
next-auth@4.24.14 includes a focused fix for GitHub OAuth where GitHub now returns an `iss` claim, and openid-client was validating it in a way that could break sign-in for apps that did not set a GitHub `issuer`. The change documents setting the default GitHub provider issuer to `https://github.com/login/oauth` for RFC 9207 compliance.
@auth/sequelize-adapter@2.11.2
This release is a maintenance update for @auth/sequelize-adapter@2.11.2. The only change mentioned in the release notes is an update to its @auth/core dependency.
@auth/supabase-adapter@1.11.2
Release @auth/supabase-adapter@1.11.2 includes a single change, updating the @auth/core dependency. No API, behavior, or other functional changes are described in the release notes.
@auth/surrealdb-adapter@2.2.2
This release updates the adapter's dependency on @auth/core. No other user-facing changes, fixes, or breaking changes are described in the release notes.
@auth/typeorm-adapter@2.11.2
@auth/typeorm-adapter 2.11.2 primarily updates its dependency on @auth/core. No other functional changes, bug fixes, or breaking changes are described in the provided release notes.
@auth/unstorage-adapter@2.11.2
This release updates the internal dependency on @auth/core. No other user-facing changes, fixes, or breaking changes are described in the provided release notes.
@auth/upstash-redis-adapter@2.11.2
This release of @auth/upstash-redis-adapter is primarily a dependency update. No user-facing features, fixes, or breaking changes are described in the release notes.
@auth/xata-adapter@1.11.2
This is a patch release of @auth/xata-adapter that updates its dependency on @auth/core. No other user-facing changes are described in the release notes.
@auth/solid-start@0.19.2
This release of @auth/solid-start mainly updates its underlying dependency on @auth/core. No functional or API changes are described in the release notes for this version.
@auth/sveltekit@1.11.2
Release @auth/sveltekit 1.11.2 primarily updates its dependency on @auth/core. No functional or breaking changes are described in the release notes.