SCAPI Release
For more detailed release information, see B2C Commerce API Release Notes.
- Completed rollout of stricter realm validation for SCAPI requests. Make sure you validate your used short codes in Business Manager, select .
- Added Hybrid Auth support for passwordless login.
- Fully removed the deprecated x-correlation-id response header from all instance types. The header is replaced by the sfdc_correlation_id response header. More details see Match Request and Response Codes with Correlation IDs.
- SLAS now supports LINE as a 3rd party IDP.
- SLAS /password/action endpoint now returns locale in the response.
- For public clients, reuse of the same refresh_token is now prohibited. You must rotate the refresh
token following the process outlined in Access Tokens and Refresh Tokens. To give SLAS customers
time to make the necessary changes, we are strictly enforcing this restriction according to the
following schedule:
- For customers using the plugin-slas cartridge, upgrade to Plugin SLAS v7.4.1.
- Beginning 05/20/2025, Sandbox, Staging (STG) and Development (DEV) tenant_ids that reuse old refresh tokens will receive a 400 invalid refresh token error.
- Beginning 06/24/2025, all Production (PRD) tenant_ids that reuse old refresh tokens will receive a 400 invalid refresh token error.