Add oidc support

.changeset/twelve-shoes-behave.md

@@ -0,0 +1,13 @@
+---
+"@flags-sdk/vercel": minor
+"@vercel/prepare-flags-definitions": minor
+"@vercel/flags-core": minor
+---
+
+Add OIDC authentication support for Vercel Flags clients and generated flag definitions.
+
+`@vercel/flags-core` can now create clients without an SDK key and authenticate with a Vercel OIDC token, while still supporting SDK keys and connection strings. Bundled definitions can be looked up by SDK key hash or OIDC project ID.
+
+`@vercel/prepare-flags-definitions` now collects both SDK keys and `VERCEL_OIDC_TOKEN`, fetches definitions for each auth entry, deduplicates identical definitions across SDK keys and OIDC project IDs, and writes generated maps keyed by SDK key hash or project ID.
+
+`@flags-sdk/vercel` now supports provider data lookup for Vercel flag origins that do not include an SDK key, allowing OIDC-backed clients to resolve project metadata.

packages/adapter-vercel/src/index.ts

@@ -23,10 +23,10 @@ export type VercelAdapterDeclaration<ValueType, EntitiesType> = Omit<
  */
 export function createVercelAdapter(
   // usually a connection string, but can also be a pre-configured FlagsClient
-  sdkKeyOrFlagsClient: string | FlagsClient,
+  sdkKeyOrFlagsClient?: string | FlagsClient,
 ) {
   const flagsClient =
-    typeof sdkKeyOrFlagsClient === 'string'
+    typeof sdkKeyOrFlagsClient === 'string' || sdkKeyOrFlagsClient === undefined
       ? createClient(sdkKeyOrFlagsClient)
       : sdkKeyOrFlagsClient;
 
@@ -86,9 +86,9 @@ export function vercelAdapter<ValueType, EntitiesType>(): Adapter<
   return defaultVercelAdapter<ValueType, EntitiesType>();
 }
 
-const flagsClients = new Map<string, FlagsClient>();
+const flagsClients = new Map<string | undefined, FlagsClient>();
 
-function getOrCreateClient(sdkKey: string): FlagsClient {
+function getOrCreateClient(sdkKey?: string): FlagsClient {
   let client = flagsClients.get(sdkKey);
   if (!client) {
     client = createClient(sdkKey);
@@ -99,14 +99,12 @@ function getOrCreateClient(sdkKey: string): FlagsClient {
 
 function isVercelOrigin(
   origin: unknown,
-): origin is { provider: 'vercel'; sdkKey: string } {
+): origin is { provider: 'vercel'; sdkKey?: string } {
   return (
     typeof origin === 'object' &&
     origin !== null &&
     'provider' in origin &&
-    (origin as Record<string, unknown>).provider === 'vercel' &&
-    'sdkKey' in origin &&
-    typeof (origin as Record<string, unknown>).sdkKey === 'string'
+    (origin as Record<string, unknown>).provider === 'vercel'
   );
 }
 
@@ -122,14 +120,14 @@ export async function getProviderData(
     .filter((i): i is KeyedFlagDefinitionType => !Array.isArray(i));
 
   // Collect unique sdkKeys and resolve their projectIds
-  const sdkKeys = new Set<string>();
+  const sdkKeys = new Set<string | undefined>();
   for (const d of flagDefs) {
     if (isVercelOrigin(d.origin)) {
       sdkKeys.add(d.origin.sdkKey);
     }
   }
 
-  const projectIdBySdkKey = new Map<string, string>();
+  const projectIdBySdkKey = new Map<string | undefined, string>();
   await Promise.all(
     Array.from(sdkKeys).map(async (sdkKey) => {
       const client = getOrCreateClient(sdkKey);

packages/prepare-flags-definitions/README.md

@@ -22,7 +22,7 @@ const result = await prepareFlagsDefinitions({
 });
 
 if (result.created) {
-  console.log(`Bundled definitions for ${result.sdkKeysCount} SDK keys`);
+  console.log(`Bundled definitions for ${result.entryCount} SDK keys`);
 } else {
   console.log(`No definitions created: ${result.reason}`);
 }