---
title: "Custom OIDC Token Audiences"
url: https://daily.dev/posts/custom-oidc-token-audiences-slqdaspob
source_url: https://vercel.com/changelog/custom-oidc-token-audiences
type: article
source: "Vercel"
published: 2026-06-23T14:56:53.143Z
updated: 2026-06-23T14:57:26.751Z
tags: ["authentication", "vercel", "jwt"]
reading_time: 2
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Custom OIDC Token Audiences

**[Vercel](https://daily.dev/sources/vercel)** · 2 min read · 0 upvotes · 0 comments

## Summary

Vercel's OIDC issuer now supports custom audience claims, allowing deployments to request tokens with provider-specific `aud` values. A new token exchange service accepts the default Vercel OIDC token and returns a new one with an updated audience targeting a downstream service (e.g., `sts.amazonaws.com` for AWS). The exchanged token preserves all original claims, adds an `act` (actor) claim for auditable delegation, and is signed with the same key. Public JWKS endpoints are replicated across all Vercel regions for low-latency verification. This improves security by preventing token replay attacks across different providers.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://vercel.com/changelog/custom-oidc-token-audiences>

## Similar posts on daily.dev

- [GitHub Actions needs OIDC audience constraints](https://daily.dev/posts/github-actions-needs-oidc-audience-constraints-bbknn412q) · Lobsters · 0 upvotes · 0 comments
- [Bitbucket Pipelines OIDC now supports multiple audiences](https://daily.dev/posts/bitbucket-pipelines-oidc-now-supports-multiple-audiences-idgqonmwb) · Atlassian · 0 upvotes · 0 comments
- [Trusted Sources for Deployment Protection](https://daily.dev/posts/trusted-sources-for-deployment-protection-jia8ynrzb) · Vercel · 4 upvotes · 0 comments

---

Tags: [#authentication](https://daily.dev/tags/authentication), [#vercel](https://daily.dev/tags/vercel), [#jwt](https://daily.dev/tags/jwt)

[View this post on daily.dev](https://daily.dev/posts/custom-oidc-token-audiences-slqdaspob)