---
schema_version: "1"
id: ea9c92d19b1580bbdd9e1281918fb2c362f34a88d7d312ed443831f174d636ab
title: Account Manager 1.43.0
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/account_manager_rn_1_43_0_release.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.account_manager_rn_1_43_0_release.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5a21d2c54160a99af9a0f4cea35a9b1e9718944d8e89c91c84d1fe0d62bc4f05
description: "The B2C Commerce Account Manager 1.43.0 is available on September 24, 2024. This release delivers:"
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Account Manager 1.43.0

The B2C Commerce Account Manager 1.43.0 is available on September 24, 2024. This release delivers:

- Security Fixes
- Bug Fixes

- **[Upgrade to Introspect Endpoint for Secure Token Management](https://help.salesforce.com/s/articleView?id=commerce.account_manager_rn_upgrade_to_introspect_endpoint.htm&release=264.0.0&type=5)**  
    Salesforce strongly recommends that you replace the `/tokeninfo` endpoint with the `/dwsso/oauth2/introspect` endpoint. The `/tokeninfo` endpoint requires that the token is passed as a URL parameter. Sensitive information within URLs can be logged in various locations, including the user’s browser, the web server, and any forward or reverse proxy servers between the two endpoints. The `/dwsso/oauth2/introspect` endpoint includes the UUID access token in the request body which isn’t logged or recorded. In addition, only authenticated clients can use this endpoint. As an added level of security, an API client can only introspect its own tokens and can’t share information outside of your organizations.