SCAPI and SLAS
For more detailed release information, see B2C Commerce API Release Notes.
SCAPI:
- Enabled on ODS instances only: Custom OnRequest and OnSession hooks are no longer executed
for the SCAPI
/shopper-experienceAPIs. Make sure you validate your SCAPI/shopper-experienceAPI calls. - Enabled on Sandbox instances only: API contract validation based on OAS standard.
- On selected sandboxes, OAS-based SCAPI request validation for parameters, authN / authZ, and request path is enabled.
SLAS:
- Hybrid Auth: Support added for SLAS public clients and SFRA Storefront Protection.
- To enhance security and align with OAuth 2.1 specifications, reuse of the same
refresh_tokenfor public clients is now prohibited. Implement one-time usage for therefresh_token, using the newrefresh_tokenissued by SLAS on each/tokencall. For details, see Access Tokens and Refresh Tokens.
SLAS - EU and US-East Regions
- SLAS now supports LINE as 3rd party IDP.
- SLAS
/password/actionendpoint now returnslocalein the response.