Skip to content

Commit 67f2b16

Browse files
authored
fix(providers): add issuer to GitHub provider for RFC 9207 compliance (#13410)
GitHub recently implemented RFC 9207 by returning an 'iss' parameter in OAuth callbacks. The openid-client library validates this parameter unconditionally, breaking authentication for apps that don't configure an issuer. This fix adds issuer configuration to both standard GitHub and GitHub Enterprise Server, ensuring RFC 9207 compatibility. Fixes: langfuse/langfuse#13091 Co-authored-by: Vinay152003 <vinay152003@users.noreply.github.com>
1 parent f457068 commit 67f2b16

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

‎packages/core/src/providers/github.ts‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -139,6 +139,7 @@ export default function GitHub(
139139
id: "github",
140140
name: "GitHub",
141141
type: "oauth",
142+
issuer: `${baseUrl}/login/oauth`,
142143
authorization: {
143144
url: `${baseUrl}/login/oauth/authorize`,
144145
params: { scope: "read:user user:email" },

0 commit comments

Comments
 (0)