How v0 authenticates to Snowflake without exposing the user's OAuth token

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 20 Aug, 04:00 UTC

AI-generated applications often need to authenticate to external services on behalf of their users. That creates a problem: generated code shouldn't have access to the user's credentials. Snowflake integration prompt injection can steer it into exfiltrating whatever it can read We faced that…