Vercel Blob now supports OIDC authentication
By Steven Van ·
Vercel Blob switches to short-lived, auto-rotating OIDC tokens by default, replacing the long-lived BLOB_READ_WRITE_TOKEN.
Vercel Blob now authenticates with OIDC instead of a long-lived token, and it's the default for new projects connecting a store. Vercel issues a short-lived OpenID Connect token that rotates automatically, so functions running on Vercel no longer need a BLOB_READ_WRITE_TOKEN to read or write.
Existing stores can switch over by updating to the latest @vercel/blob, then choosing Upgrade to OIDC from the project's context menu on the Projects tab under the Blob store. The Vercel CLI picks up the same environment variables once updated, so a terminal or an agent can read and write to a private store without a long-lived token. Details are in the announcement.