{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Retrieves, decodes, and verifies Vercel OIDC tokens for Python applications, with support for both synchronous and asynchronous token lookup and optional JWT signature verification.","skillfed_tags":["vercel-platform","oidc-jwt","async-support"],"use_cases":["Retrieve and decode OIDC tokens in async Vercel Functions to extract project or environment metadata from claims.","Verify incoming bearer tokens in request handlers to authenticate requests from other Vercel workloads.","Generate a stable identity digest from a token for keying client-side state without exposing the token itself.","Validate token signatures and issuer in local development by loading short-lived tokens via the vc CLI.","Enforce project and environment isolation by failing closed when expected context cannot be resolved from configuration."],"what_it_does":"vercel-oidc is a library for working with OpenID Connect tokens issued by Vercel's OIDC service. It provides functions to retrieve tokens from request headers or environment variables, decode their payloads to extract claims like project_id, and optionally verify signatures using Vercel's public key set. The library supports both synchronous and asynchronous code paths and includes a token identity resolver that produces a stable digest safe for logging.\n\nThe package is designed for Vercel Python applications that need to authenticate workloads or validate incoming requests. Token retrieval prefers the x-vercel-oidc-token header (registered via vercel.headers.set_headers) and falls back to the VERCEL_OIDC_TOKEN environment variable. Verification is optional but when enabled enforces RS256 signatures, pins the issuer to Vercel's OIDC endpoints, and fails closed if the expected project or environment cannot be resolved.","worth_installing":"Yes, if you are building Python applications on Vercel and need to work with OIDC tokens. The library is actively maintained, has low install friction, and provides both basic token handling and optional cryptographic verification. No known vulnerabilities. The MIT license poses no restrictions."},"id":"vercel-oidc","links":{"html":"https://skillfed.io/packages/vercel-oidc","md":"https://skillfed.io/packages/vercel-oidc.md","pypi":"https://pypi.org/project/vercel-oidc/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-08","license_spdx":"MIT","license_treatment":"permissive","name":"vercel-oidc","python_support":"supports_current","summary":"OIDC helpers for Vercel Python applications"},"popularity":{"monthly_downloads":1192374,"position":4238,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.8.0"}