fix(next-auth): harden getToken parsing and bind OAuth check cookies to provider - #13469

Merged

gustavovalverde merged 2 commits into

v4from

fix/v4-jwt-and-oauth-check-hardening

Jul 20, 2026

Commits on Jul 20, 2026

fix(next-auth): return null from getToken on malformed authorization headers
gustavovalverde
committed
fix(next-auth): bind OAuth check cookies to their issuing provider
gustavovalverde
committed