Authelia v4.39.19 released on 12-04-2026

Authelia v4.39.19 is out now. It fixes inconsistent OAuth2 error messages, tightens issuer validation in middlewares with a domain suffix check and clearer issuer error text, and corrects a healthcheck timing bug so healthchecks see the correct environment values.
For full details and the published images, see the project release on GitHub; Docker images are available as authelia/authelia:4.39.19 and ghcr.io/authelia/authelia:4.39.19.
What’s in this release
- handlers: OAuth2 — inconsistent error messages fixed so request handler responses are uniform (issue #11745)
- middlewares: issuer validation — adds/clarifies a domain suffix check and corrects a misleading issuer error message (issues #11758, #11749)
- server: healthcheck — environment variables were written too late; healthchecks now see the correct environment values (issue #11639)
Upgrade notes
- No breaking changes are listed in the release notes; upgrade by pulling the published Docker images (docker pull authelia/authelia:4.39.19 or docker pull ghcr.io/authelia/authelia:4.39.19).
- If you need to roll back, redeploy the previously used image tag from your environment.
Share your experience with the update or report any issues on the project’s issue tracker so others can benefit from your findings.

