Account Manager 1.43.0

The B2C Commerce Account Manager 1.43.0 is available on September 24, 2024. This release delivers:

Upgrade to Introspect Endpoint for Secure Token Management
Salesforce strongly recommends that you replace the /tokeninfo endpoint with the /dwsso/oauth2/introspect endpoint. The /tokeninfo endpoint requires that the token is passed as a URL parameter. Sensitive information within URLs can be logged in various locations, including the user’s browser, the web server, and any forward or reverse proxy servers between the two endpoints. The /dwsso/oauth2/introspect endpoint includes the UUID access token in the request body which isn’t logged or recorded. In addition, only authenticated clients can use this endpoint. As an added level of security, an API client can only introspect its own tokens and can’t share information outside of your organizations.