Exchanged OIDC tokens cached in memory; skipTokenCache bypass added
@vercel/oidc-aws-credentials-provider@3.3.0
3 featuresThis release3 featuresNew capabilitiesAI-tallied from the release notes
Minor Changes
- d29a8f9: Cache exchanged OIDC tokens in memory, keyed by a hash of the source token, audience, and jti, so repeated exchanges reuse the result instead of calling the token-exchange endpoint every time. Cached tokens are evicted when the API-provided expiry passes, and the cache is bounded with least-recently-used eviction to avoid unbounded growth. Add a
skipCacheoption (surfaced asskipTokenCacheonawsCredentialsProvider) to bypass the cache.jtiand the cache-skip flags are now only accepted alongside anaudience, since they only take effect during a token exchange.
Patch Changes
- Updated dependencies [d29a8f9]
- @vercel/oidc@3.8.0
Fetched July 1, 2026


