Vercel OIDC Token

Description

General

• Documentation: https://vercel.com/docs/security/secure-backend-access/oidc
• Summary: Vercel is a cloud platform for deploying frontend apps and serverless functions. A Vercel OIDC token is a short-lived workload-identity token minted for a deployment's serverless functions and CI runs so they can authenticate to backend cloud resources (AWS, GCP, Azure, ...) without long-lived secrets; its claims identify the owning account, project and deployment environment.

Revoke the secret

OIDC tokens are short-lived and expire on their own; they cannot be revoked individually. To cut off issuance, disable OIDC federation for the project in the Vercel dashboard (Project Settings > Security > Secure Backend Access) or rotate/remove the trust configured on the backend cloud provider that accepts them.

Details for Vercel OIDC Token

• Family: token

• Category: collaboration_tool

• Company: Vercel

• High recall: False

• Validity check available: False

• Analyzer available: False

• Revoker available: False

• Occurrences found for one million commits: very rare

• Prefixed: False