📘

Buy with Prime API is now available for early access

Sign up for early access to the Buy with Prime API using the 'Sign Up' button below. The API may change as Amazon receives feedback and iterates on it.

Sign Up

Version 0.15.0 of the Buy with Prime cartridge for Salesforce Commerce Cloud uses Buy with Prime API version 2024-11-01.

The prerequisites for using the cartridge remain the same as for earlier versions. For details, see Install the Buy with Prime Cartridge.

📘

Important

If you currently use Amazon Pay as your payment service provider, you must upgrade to version 0.15.0. If you are setting up Amazon Pay for the first time, use version 0.15.0 or later.

Checkout security improvements

Version 0.15.0 strengthens checkout request security by moving checkout payload construction to the server. Previously, the cartridge built the payload on the client and sent it to a backend endpoint for signing. The new BuyWithPrime-GetButtonConfig controller constructs and signs the payload using trusted data rather than client-supplied parameters.

Upgrade requirements

Use the standard cartridge upgrade process. You don't need to change your existing configuration or import new metadata.

Technical changes

The cartridge replaces the previous signing endpoint with a new server-side configuration endpoint:

• The cartridge replaces paymentProviderConfig.signUrl with paymentProviderConfig.buttonConfigUrl, which points to the BuyWithPrime-GetButtonConfig controller.
• The static/default/js/bwpCheckout.js webpack bundle now includes the updated checkout SDK and consumes the response from BuyWithPrime-GetButtonConfig.
• The cartridge no longer constructs or signs the Amazon Pay checkout payload on the client side.

Related topics

Buy with Prime Cartridge for Salesforce Commerce Cloud