In-app confirmation

View as Markdown (opens in a new tab)

Install AI tools

Our plugin gives your assistant up-to-date guidance for payments and login. Full instructions

Claude Code

Run both commands, in order.

claude plugin marketplace add vippsas/agent-toolkit
claude plugin install vipps@agent-toolkit

Cursor

Open Settings, then Plugins.

Add vippsas/agent-toolkit as a plugin marketplace, then install the "vipps" plugin.

Codex

See the Codex plugin docs at developers.openai.com/codex.

Add vippsas/agent-toolkit as a plugin marketplace, then install the "vipps" plugin.

Any editor

No plugin needed. Paste this into your assistant.

Read https://developer.vippsmobilepay.com/llms.txt for the Vipps MobilePay developer documentation.

In-app confirmation is a standard Login flow where the "remember me in browser" functionality is disabled. The user will always be required to confirm the login in their Vipps or MobilePay app.

Note

In-app confirmation is only available to merchants on the advanced pricing tier.

Making the authorization request

Add acr_values=urn:vipps:acr:app_auth to the standard OAuth 2.0 authorize request:

GET {authorization_endpoint}
  ?client_id={client_id}
  &response_type=code
  &scope=openid
  &state={state}
  &redirect_uri={redirect_uri}
  &acr_values=urn:vipps:acr:app_auth

The acr claim

The returned ID token will include an acr claim confirming that in-app confirmation was used:

{
  "sub": "c06c4afe-d9e1-4c5d-939a-177d752a0944",
  "acr": "urn:vipps:acr:app_auth",
  ...
}

You can use this claim to verify that the user went through the in-app confirmation flow.