Agent Credential Management
Enhancing security of backend connectivity with OpenID Connect (OIDC)

Enhancing security of backend connectivity with OpenID Connect (OIDC)

8/28/2024

What this post added

Vercel now supports OpenID Connect (OIDC) Federation, allowing developers to replace long-lived credentials with short-lived, RSA-signed JSON Web Tokens (JWTs) for external requests in builds and Vercel Functions. This enhances security by minimizing the risk of compromised static credentials and automates token issuance and rotation. The implementation leverages Vercel as an Identity Provider (IdP) to issue verifiable JWTs that can be used to authenticate with third-party services like AWS, Azure, Firebase, and GCP.

Read the original post ↗