Salesforce Docs Portal

July 2025

SCAPI and SLAS

For more detailed release information, see B2C Commerce API Release Notes.

SCAPI:

  • Enabled on all instances, including Production (PRD): API path and parameter validation based on the OAS standard.
  • You can now more conveniently grant client applications access to multiple sandboxes. This speeds up the provisioning of development environments.

SLAS:

  • Hybrid Auth: Support added for SLAS public clients and SFRA Storefront Protection.
  • To enhance security and align with OAuth 2.1 specifications, reuse of the same refresh_token for public clients is now prohibited. Implement one-time usage for the refresh_token, using the new refresh_token issued by SLAS on each /token call. For details, see Access Tokens and Refresh Tokens.