SCAPI and SLAS
For more detailed release information, see B2C Commerce API Release Notes.
SCAPI:
- With B2C Commerce version 25.10, you can use the Replications API to publish a product, price table, and content asset. Publishing an item is only available from STG to PRD and isn't testable on sandboxes. You will be able to use this API when B2C Commerce version 25.10 is rolled out on PIG instances.
- Improved Hybrid login support for the SameSite cookie parameter:
- Consistently verifies that the SameSite attribute for the dwsid cookie returned during token calls for Hybrid Auth matches the SameSite attribute for dwsid cookies set in Controller calls.
- Added preference-based response timeout settings for Sandbox instances types:
- A new Timeouts API provides customer self-service timeout configuration. This is only available for B2C Commerce Sandbox instances, but will be rolled out to all instance types in the future.
SLAS:
- To enhance security and align with OAuth 2.1 specifications, reuse of the same
refresh_tokenfor public clients is now prohibited. Implement one-time usage for therefresh_token, using the newrefresh_tokenissued by SLAS on each/tokencall. For details, see Access Tokens and Refresh Tokens. - Enhanced validation for passwordless login to ensure the provided login ID matches the one used for time-based one-time password (TOTP).