The GitHub provider can now derive the local user id from the immutable numeric account id instead of the mutable login. This is opt-in and off by default, since enabling it changes the id of every existing GitHub user. Separately, the OAuth1 and OAuth2 callbacks no longer skip the user info HTTP status check, which previously let an error response map every failed login onto one shared user id.
Changes since v2.1.5
- #301 opt-in github numeric user id, reject non-2xx user info
- #299 bump golang.org/x/crypto from 0.48.0 to 0.52.0 in /v2
- #297 bump golang.org/x/image from 0.36.0 to 0.41.0 in /v2
Full Changelog: v2.1.5...v2.1.6