---
schema_version: "1"
id: bd3b69d702eee6916201a4f60bfe2d65e8eeb65c03fbe83a7c0d754aa69f16b3
title: May 2025
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_com_api_may_2025.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_com_api_may_2025.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 2ef47a8d544f8d23249447cd1479d342b9337dc1e39c854d286bee0d79f02652
description: SCAPI Release
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# May 2025

SCAPI Release

For more detailed release information, see [B2C Commerce API Release Notes](https://developer.salesforce.com/docs/commerce/commerce-api/references/about-commerce-api/about.html).

- Completed rollout of stricter realm validation for SCAPI requests. Make sure you validate your used short codes in Business Manager, select **App Selector** | **Administration** | **Site Development** | **Salesforce Commerce** | **API Settings**.
- Added [Hybrid Auth](https://developer.salesforce.com/docs/commerce/commerce-api/guide/hybrid-authentication.html) support for passwordless login.
- Fully removed the deprecated x-correlation-id response header from all instance types. The header is replaced by the sfdc\_correlation\_id response header. More details see [Match Request and Response Codes with Correlation IDs](https://developer.salesforce.com/docs/commerce/commerce-api/guide/identifying-requests-and-responses.html).
- SLAS now supports LINE as a 3rd party IDP.
- SLAS /password/action endpoint now returns locale in the response.
- For public clients, reuse of the same refresh\_token is now prohibited. You must rotate the refresh token following the process outlined in [Access Tokens and Refresh Tokens](https://developer.salesforce.com/docs/commerce/commerce-api/guide/slas.html#access-tokens-and-refresh-tokens). To give SLAS customers time to make the necessary changes, we are strictly enforcing this restriction according to the following schedule:
    - For customers using the plugin-slas cartridge, upgrade to [Plugin SLAS v7.4.1](https://github.com/SalesforceCommerceCloud/plugin_slas/releases/tag/v7.4.1).
    - Beginning 05/20/2025, Sandbox, Staging (STG) and Development (DEV) tenant\_ids that reuse old refresh tokens will receive a 400 invalid refresh token error.
    - Beginning 06/24/2025, all Production (PRD) tenant\_ids that reuse old refresh tokens will receive a 400 invalid refresh token error.