From the source
From the source
Vercel's proxy keeps OAuth tokens out of generated code
Vercel describes how its v0 Snowflake integration authenticates to Snowflake without exposing the user's OAuth token to generated code.
A request proxy outside the sandbox resolves the real credential at request time, while a fixed placeholder string inside the sandbox preserves compatibility with Snowflake clients.
From the source
We solved this with a Snowflake request proxy for v0 sandboxes, built on the Vercel Sandbox firewall. The sandbox can run normal Snowflake clients, but the real credential is resolved at request time in a server proxy outside the sandbox runtime.
vercel.com
