Account Manager now verifies the Client JSON Web Token (JWT) Bearer Public Key field in API client configurations to prevent authentication failures and improve system security. You can input a PEM-formatted certificate or a Base64-encoded RSA public key (for B2C Commerce only), with or without headers. The system checks for correct formatting and valid cryptographic material. You can still create API clients without JWT public keys if public keys aren’t needed for your use case.
Where: This change applies to Account Manager for B2C Commerce.