Technical update 2024-11
This update was sent in November 2024.
User age verification in the ePayment API
It is now possible to specify the user's minimum age required to complete the payment:
"minimumUserAge": 20.
See Minimum user age.
Swedish users can now use Vipps
Swedish users can now use the Vipps app and pay Norwegian merchants. For details, see:
Landing page: More robust handling of retries
We have made some changes to prevent double payments when the user navigates from the Vipps MobilePay landing page back (using the Back button in the browser, or with a keyboard shortcut) to the merchant's website.
If the user navigates back from the landing page, we will cancel the payment. This is to prevent the user from navigating forward to the landing page again and attempting to pay the same payment twice.
See "What happens if the user navigates back to my checkout from the landing page?" in the FAQs for the ePayment API, PSP API and MobilePay Online API.
If you always initiate a new payment each time the user attempts to pay, you don't need to take action. If you however reuse the same payment request (which will result in the same redirect URL), or reuse the redirect URL, you will need to change this setup. You must instead ensure to initiate a new payment to get a new redirect URL.
Management API: More details about product orders
The new v2 version of GET:/management/v2/product-orders that will return all product orders where you have been specified as the partner:
- Product orders made with
POST:/management/v1/product-orders. - Product orders made with Product order templates (the links we create for you).
- Product orders made by a merchant on portal.vippsmobilepay.com without prefill or template.
There is also a v2 endpoint to retrieve details for one specific product order:
GET:/management/v2/product-orders/{productOrderId}/details.
More information:
Recurring API: Changes to List Agreements API
We observe that many integrations don't use the recommended way of using the pageNumber and pageSize filters while calling the List Agreements endpoint. This will result in increased response times when the number of agreements is more. The chances of causing instabilities to other endpoints cannot be ruled out either.
So, we have decided to enforce the default values when merchants don't use these filters. The default value for pageNumber is 1 and pageSize is 500 agreements. This change will be rolled out from 1 Feb 2025.
Recurring API: App changes
This is a repetition from the 2024-09 technical update, because it's important:
Please read Recurring api November change log
Recurring API: Webhooks improvements
We have expanded Agreement and Charge webhooks with the msn (Merchant Serial Number) property. See Recurring API event types
Recurring API: V2 turned off February 1st
The Recurring API version 2 will be shut down February 1, 2025, so please make sure you're using version 3. Our migration guide will take you through all the details, if you haven't already switched.
HTTPS and TLS
Due to security risks, we will no longer support very old cipher suites for TLS. The accepted cipher suites are documented on the Server page.
Questions or comments?
We're always happy to help with code or other questions you might have! Please contact us.