Change8

@vercel/oidc@3.8.0

📦 vercel-functionsView on GitHub →
2 features🔧 1 symbols

Summary

This release introduces in-memory caching for OIDC token exchanges to improve performance and adds an option to skip this new cache.

Migration Steps

  1. If you rely on repeated OIDC token exchanges returning a fresh token every time without caching, use the new `skipTokenCache=True` option on `awsCredentialsProvider`.
  2. The `jti` and cache-skip flags for token exchange are now only accepted when an `audience` is also provided.

✨ New Features

  • OIDC tokens are now cached in memory during exchange, keyed by token hash, audience, and jti, to reuse results and reduce calls to the token-exchange endpoint.
  • Added a `skipTokenCache` option to `awsCredentialsProvider` to bypass the token exchange cache.

Affected Symbols