Vipps MobilePay Payments changelog
All notable changes to Vipps MobilePay Payments (kv_vipps_mobilepay) are documented here.
The format follows Keep a Changelog and the project uses Semantic Versioning.
[Unreleased]
Section titled “[Unreleased]”[1.0.0] - 2026-11-07
Section titled “[1.0.0] - 2026-11-07”- Initial release, a port of our OpenCart extension to CS-Cart, CS-Cart Ultimate, Multi-Vendor and Multi-Vendor Ultimate 4.17.2 to 4.21.x (PHP 7.4 to 8.3).
- Vipps MobilePay ePayment API, wallet payments with WEB_REDIRECT (app on phones, landing page on computers); NOK, DKK and EUR sales units, other shop currencies converted once at payment start.
- Connection page per mode (test and production): MSN, sales unit currency, client id, client secret and subscription key sealed with AES-256-GCM, Save and test, Test connection, one-click webhook registration (seven events, HMAC-SHA256 verified, 503 when the read-back fails).
- An order is approved only after a read-back (AUTHORIZED, amount created, order total stored); webhook, the customer’s return (three reads) and the cron trigger it; a pending payment is never shown as cancelled and the cart and saved cart rows are emptied on return.
- Capture at the capture status, at once after approval or by hand; partial captures; refunds (partial or all captured money) and release of the reservation from the Vipps MobilePay order tab or by order status; read back; capture deadline highlighted and warned 3 days ahead.
- Money safety: idempotency key stored before every create, capture, refund and release; unanswered operations read back before any resend (same key within 24 hours); per-order and per-payment locks; flags for amount mismatch, duplicate and late approvals (released, never booked).
- Local brand name (Vipps for NOK, MobilePay for DKK and EUR until 12 January 2027, then Vipps) with the unchanged paymark, the brand book line and a TEST MODE line.
- Multi-Vendor: owner mode (one payment per cart on the parent order, per-vendor capture and refund shares, vendors view only) or direct payments to each vendor’s own sales unit.
- Payments list, log with filters and CSV export, jobs page with retries and back-off, cron (command line and secret address), Upgrade Synchronizer and Kavio Labs license client.
Tested
Section titled “Tested”- Unit tests on PHP 8.1 and 8.3; HTTP and Multi-Vendor end-to-end tests against a local stand-in built from the published API specifications. See
tests/test-plan.md. Not yet run against the real Vipps MobilePay test environment. Tested on CS-Cart 4.17.2 (cs417: e2e 55/55, licence 43/43, lifecycle 12/12) and Multi-Vendor 4.17.2 (mv417c: e2e 40/40 after the audit fixes, vendor e2e 38/38), PHP 8.1 and 8.3 (unit 90), Smarty 5.4.3 offline compile of every template against the 4.21.2 engine; all against a stand-in built from the official specs. Not run: the Vipps MobilePay test environment, a live 4.21 store, CS-Cart Ultimate with several storefronts.