fix: validate provider existence before looking for protection property (#1687 )

* Fix validation of provider existence before looking for protection property * Use optional chaining
2026-05-01 10:55:20 +00:00 · 2021-04-11 15:20:01 +02:00
1 changed files with 1 additions and 1 deletions
--- a/src/server/index.js
+++ b/src/server/index.js
@@ -79,7 +79,7 @@ async function NextAuthHandler (req, res, userOptions) {
      provider.protection = 'state' // Default to state, as we did in 3.1 REVIEW: should we use "pkce" or "none" as default?
    }

-    if (typeof provider.protection === 'string') {
+    if (typeof provider?.protection === 'string') {
      provider.protection = [provider.protection]
    }