Fix unset issuer overriding environment variable

nextauthjs · Feb 6, 2025 · 3b65a1b · 3b65a1b
1 parent a98c436
commit 3b65a1b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/packages/core/src/providers/microsoft-entra-id.ts b/packages/core/src/providers/microsoft-entra-id.ts
@@ -442,7 +442,11 @@ export default function MicrosoftEntraID(
 ): OIDCConfig<MicrosoftEntraIDProfile> {
   const { profilePhotoSize = 48 } = config
 
-  config.issuer ??= "https://login.microsoftonline.com/common/v2.0"
+  // If issuer is not set, first fallback to environment variable, then
+  // fallback to /common/ uri.
+  config.issuer ??=
+    process.env.AUTH_MICROSOFT_ENTRA_ID_ISSUER ||
+    "https://login.microsoftonline.com/common/v2.0"
 
   return {
     id: "microsoft-entra-id",