Authelia | v4.39.23

Authelia v4.39.23 released on 08-09-2026

Authelia v4.39.23 is out now. Operators using Authelia’s OpenID Connect features and the web interface will benefit from fixes to client authentication, resource handling and frontend stability.

See the project’s GitHub release for the full changelog, links to the individual fixes and the published Docker image tags.

What’s in this release

• OpenID Connect fixes: corrected client authentication configuration, resolved a client-credentials subject foreign-key violation, added support for resource-indicators grants and improved resource matching strategy.
• Configuration and storage patches: removed an obsolete website attribute from configuration and fixed an unbound storage query that could affect performance or correctness.
• Web UI and packaging fixes: prevented cancellation while dialogs are closing, re-enabled the reset-password form after failures, ensured WebAuthn description errors show correctly, and added a missing pnpm-workspace.yaml to the duo-api Dockerfile; Docker images published for this release.

Upgrade notes

• Configuration change: the obsolete website attribute has been removed. Check your configuration and remove that attribute before or when upgrading.
• Docker images for this release are available as authelia/authelia:4.39.23 and ghcr.io/authelia/authelia:4.39.23; keep your previous image tag if you need to revert.

Share any comments or experiences with the upgrade on the project’s GitHub issue tracker so maintainers and the community can follow up.