---
schema_version: "1"
id: b04949490cdf114cc24d81179d02e46235bc423481c4c7c7ea05fad8dd272d16
title: July 2025
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_com_api_july_2025.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_com_api_july_2025.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e81a63cf84264303fab706e6b7082254fc72b7f5abf27a4ec37c2675cd034fcb
description: SCAPI and SLAS
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# July 2025

SCAPI and SLAS

For more detailed release information, see [B2C Commerce API Release Notes](https://developer.salesforce.com/docs/commerce/commerce-api/references/about-commerce-api/about.html).

SCAPI:

- Enabled on all instances, including Production (PRD): API path and parameter validation based on the OAS standard.
- You can now more conveniently grant client applications access to multiple sandboxes. This speeds up the provisioning of development environments.

SLAS:

- [Hybrid Auth](https://developer.salesforce.com/docs/commerce/commerce-api/guide/hybrid-authentication.html): Support added for SLAS public clients and SFRA Storefront Protection.
- To enhance security and align with OAuth 2.1 specifications, reuse of the same `refresh_token` for public clients is now prohibited. Implement one-time usage for the `refresh_token`, using the new `refresh_token` issued by SLAS on each `/token` call. For details, see [Access Tokens and Refresh Tokens](https://developer.salesforce.com/docs/commerce/commerce-api/guide/slas.html#access-tokens-and-refresh-tokens).