Change8

@vercel/oidc-aws-credentials-provider@3.3.0

📦 vercel-cliView on GitHub →
2 features🔧 1 symbols

Summary

This release introduces in-memory caching for OIDC token exchanges to improve performance and adds an option to skip this cache. Dependencies were also updated.

Migration Steps

  1. If you rely on repeated OIDC token exchanges returning a fresh result every time without caching, use the new `skipTokenCache` option on `awsCredentialsProvider`.
  2. Note that `jti` and cache-skip flags are now only accepted when an `audience` is also provided during token exchange.

✨ New Features

  • Cached OIDC tokens in memory, keyed by source token hash, audience, and jti, to reuse results from repeated token exchanges.
  • Added a `skipTokenCache` option on `awsCredentialsProvider` to bypass the token exchange cache.

Affected Symbols