June 2024

SCAPI release, SCAPI fixes, and SLAS Release with the B2C Commerce 24.7 release:

For more detailed release information, see B2C Commerce API Release Notes.

SCAPI Release

With B2C Commerce version 24.7.0

  • Collect Request Details for SCAPI requests by using the HTTP request header sfdc_verbose: true.
  • Merchants and developers can update the status of redeemed coupons using the new Coupons API redeemCoupon endpoint.
  • Use the SEO API to upload a custom sitemap and trigger the sitemap generation process. You can now combine your external routes with those in B2C Commerce in a single sitemap.
  • Shopper Context API
  • Checkout APIs
    • For Shopper Baskets v1 and v2 createBasket and updateBasket endpoints, the product line item quantity limit is now set to the API quota api.basket.productLineItemQuantity of 1000, and the API no longer returns a 400 Bad Request for values greater than 999.
    • In addition, the 999 product line item quantity limit on createOrders is removed, and the quantity set by this endpoint is now unlimited.

    With B2C Commerce version 24.7.1

    • Shopper Context API
    • The Shopper Customers API updateCustomer endpoint allows the loginId to be updated if a valid current password is provided for the shopper.
    • Preferences API
      • When retrieving site and global preferences, the Preferences API first checks for custom settings, and if no custom settings exist, now instead returns the default settings in Business Manager.
  • The following Script API methods are available to support SCAPI external taxation APIs with hooks:
  • The Shopper endpoint constraint for supporting trusted agent tokens on a specific subset of Shopper endpoints has been removed. For details, see Trusted Agent
  • The siteId query parameter is no longer mandatory for custom API calls. For details, see Custom APIs.
  • Server-Side Web-Tier Caching is enabled for:
    • All SCAPI customers who aren’t currently using the cached APIs and haven’t made production requests to any cached APIs in the last 7 days. For the list of cached APIs and other details, see Server-Side Web-Tier Caching.
    • All instances that don't use Shopper Search API productSearch and getSearchSuggestions endpoints on their PRD instances. For details, see Server-Side Web-Tier Caching

SCAPI Fixes

With B2C Commerce version 24.6, the mergeBasket endpoint now merges the guest shopper’s shippingAddress and shippingMethod into the registered basket when the registered basket does not contain shippingAddress or shippingMethod.

SLAS Release

  • To enhance security for our customers using the Shopper Login API Access Service (SLAS), a channel_id (site) parameter is now required when requesting a guest access token with a grant_type of client_credentials . This change prevents unauthorized access across different storefronts. Existing customers must update their implementation to include the channel_id parameter in the client credential call in guest flows by 7/31/2024. For details, see Guest Tokens.
  • SLAS Admin: Added validation for SLAS Client callback URLs to prevent the use of localhost or loopback addresses as host names in production environments.