In-app confirmation

View as Markdown (opens in a new tab)

Install AI tools

Give your assistant up-to-date guidance for our APIs, with our plugin or without it.

The plugin is still under development. See the AI tools page for details.

Claude Code

Run both commands, in order.

claude plugin marketplace add vippsas/agent-toolkit
claude plugin install vipps-developer@agent-toolkit

Cursor

Open Settings, then Plugins.

Add vippsas/agent-toolkit as a plugin marketplace, then install the "vipps-developer" plugin.

Codex

For the app, add the marketplace "vippsas/agent-toolkit" and then install "vipps-developer". For the CLI, run the following commands.

codex plugin marketplace add vippsas/agent-toolkit
codex plugin add vipps-developer@agent-toolkit

Without installing

Paste this into any assistant.

Read https://github.com/vippsas/agent-toolkit/blob/main/plugins/vipps-developer/README.md for Vipps MobilePay integration guidance.

For troubleshooting, see the full instructions.

In-app confirmation is a standard Login flow where the "remember me in browser" functionality is disabled. The user will always be required to confirm the login in their Vipps or MobilePay app.

Note

In-app confirmation is only available to merchants on the advanced pricing tier.

Making the authorization request

Add acr_values=urn:vipps:acr:app_auth to the standard OAuth 2.0 authorize request:

GET {authorization_endpoint}
  ?client_id={client_id}
  &response_type=code
  &scope=openid
  &state={state}
  &redirect_uri={redirect_uri}
  &acr_values=urn:vipps:acr:app_auth

The acr claim

The returned ID token will include an acr claim confirming that in-app confirmation was used:

{
  "sub": "c06c4afe-d9e1-4c5d-939a-177d752a0944",
  "acr": "urn:vipps:acr:app_auth",
  ...
}

You can use this claim to verify that the user went through the in-app confirmation flow.