---
schema_version: "1"
id: 8b86ff842d2425233f45035f9e5235b82fb1499c547c63d40abece40c96a0ed2
title: June 2025
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_com_api_june_2025.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_com_api_june_2025.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 8b74315b45a3add0dc4177254207c1c9d988da237106c2db965b8348f1576c29
description: SCAPI and SLAS
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# June 2025

SCAPI and SLAS

For more detailed release information, see [B2C Commerce API Release Notes](https://developer.salesforce.com/docs/commerce/commerce-api/references/about-commerce-api/about.html).

SCAPI:

- Enabled on ODS instances only: Custom OnRequest and OnSession hooks are no longer executed for the SCAPI `/shopper-experience` APIs. Make sure you validate your SCAPI `/shopper-experience` API calls.
- Enabled on Sandbox instances only: API contract validation based on OAS standard.
- On selected sandboxes, OAS-based SCAPI request validation for parameters, authN / authZ, and request path is enabled.

SLAS:

- [Hybrid Auth](https://developer.salesforce.com/docs/commerce/commerce-api/guide/hybrid-authentication.html): Support added for SLAS public clients and SFRA Storefront Protection.
- To enhance security and align with OAuth 2.1 specifications, reuse of the same `refresh_token` for public clients is now prohibited. Implement one-time usage for the `refresh_token`, using the new `refresh_token` issued by SLAS on each `/token` call. For details, see [Access Tokens and Refresh Tokens](https://developer.salesforce.com/docs/commerce/commerce-api/guide/slas.html#access-tokens-and-refresh-tokens).

SLAS - EU and US-East Regions

- SLAS now supports LINE as 3rd party IDP.
- SLAS `/password/action` endpoint now returns `locale` in the response.