Mobil Express Payment

Checkout MobilExpress Payment

Integrate MobilExpress mobile payment into your checkout. The flow covers payment method selection, saved card listing, installment selection, payment initiation, 3D Secure redirection, OTP verification, and payment completion. Completion variants are available for CVV-only, OTP-only, and combined CVV+OTP scenarios.

Authentication

These endpoints support both authenticated and anonymous sessions.

Authenticated users: Session cookie (sessionid) tracks checkout progress.
Anonymous users: Guest checkout is available when the CAN_GUEST_PURCHASE setting is enabled.

Request Format

Include the following header in all checkout requests:

x-requested-with: XMLHttpRequest

Dynamic Settings

INSTALLMENT_FILTERS

Filters that restrict which installment options are shown during MobilExpress installment selection.

Get MobilExpress Selection Page context

get

Returns the context for the MobilExpress stored-card flow entry point. This page is reached when the user selects a payment option whose type is stored_card (a MobilExpress-backed option). The page has no page context of its own; its role is to trigger a card-list lookup on the MobilExpress gateway.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)

Skip Conditions:

Page is skipped when MobilExpressSelectionPage has already been completed and the order number is assigned (is_already_done).

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

MobilExpress selection page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressSelectionPage

GET /orders/checkout/?page=MobilExpressSelectionPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

MobilExpress selection page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressSelectionPage",
      "page_slug": "mobilexpressselectionpage",
      "page_context": {}
    }
  ],
  "pre_order": {
    "basket": {
      "pk": 201,
      "total_amount": "350.00"
    },
    "payment_option": {
      "pk": 10,
      "name": "MobilExpress",
      "slug": "mobilexpress",
      "payment_type": "stored_card",
      "payment_type_label": "Stored Card"
    }
  },
  "errors": [],
  "template_name": "orders/checkout.html"
}

Confirm MobilExpress card-list lookup

post

Triggers a card-list lookup on the MobilExpress gateway for the current user. Based on the gateway response, the flow proceeds to the OTP phone entry page (if OTP is required) or directly to the card list page.

Required Fields:

clear: Set to true to cancel the MobilExpress flow and clear all stored MobilExpress data from the pre-order. Set to false (default) to proceed.

State Changes (when clear is false):

pre_order.number is assigned
pre_order.data['me_user_checked'] is set to true
pre_order.data['me_needs_otp'] is set based on the gateway's otp_required flag
Forward MobilExpress data (me_otp_sent, me_phone_number, etc.) is cleared

State Changes (when clear is true):

All me_* keys are removed from pre_order.data

Next Page:

MobilExpressCardFoundOtpRequiredPhonePage — when me_needs_otp is true
MobilExpressCardListPage — otherwise

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

clearbooleanOptional

Set to true to cancel the MobilExpress flow and clear all stored MobilExpress data from the pre-order. Set to false (default) to proceed with the card-list lookup.

Default: false

Responses

200

MobilExpress selection processed

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressSelectionPage

POST /orders/checkout/?page=MobilExpressSelectionPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 15

"clear=false"

200

MobilExpress selection processed

{
  "context_list": [
    {
      "page_name": "MobilExpressCardFoundOtpRequiredPhonePage",
      "page_slug": "mobilexpresscardfoundotprequiredphonepage",
      "page_context": {
        "phone_number": "+905551234567"
      }
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Card List Page context

get

Returns the list of stored cards available for the current user from the MobilExpress gateway. The user selects one of these cards to proceed with payment.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
MobilExpressSelectionPage must have been completed and, if OTP was required, OTP verification must also have been completed (check_user_source)

Skip Conditions:

Page is skipped when a card has already been selected (me_card_token, me_masked_card_number, and card_info are all set).

Page Context:

cards: List of stored cards returned by the gateway. Each card contains:
- masked_card_number: Partially masked PAN (e.g., "450803******1234")
- card_token: Opaque token identifying the card
- is_expired: Whether the card is expired (may be null)
- last_year: Card expiry year (may be null)
- last_month: Card expiry month (may be null)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

Card list page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressCardListPage

GET /orders/checkout/?page=MobilExpressCardListPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

Card list page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressCardListPage",
      "page_slug": "mobilexpresscardlistpage",
      "page_context": {
        "cards": [
          {
            "masked_card_number": "450803******1234",
            "card_token": "token-abc",
            "is_expired": false,
            "last_year": 2026,
            "last_month": 12
          },
          {
            "masked_card_number": "554960******5678",
            "card_token": "token-def",
            "is_expired": true,
            "last_year": 2023,
            "last_month": 6
          }
        ]
      }
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Select a MobilExpress stored card

post

Records the card chosen by the user. The card token and masked card number are stored on the pre-order and the corresponding CardInfo (BIN-based card type lookup) is set.

Required Fields:

card_token: Opaque token identifying the selected card.
masked_card_number: Partially masked PAN of the selected card. Used to derive the BIN number for installment/card-type lookup.

State Changes:

pre_order.data['me_card_token'] is set to card_token
pre_order.data['me_masked_card_number'] is set to masked_card_number
pre_order.card_info is set based on BIN lookup
Forward MobilExpress data (me_payment_tried, etc.) is cleared

Next Page: MobilExpressInstallmentSelectionPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

card_tokenstringRequired

Opaque token identifying the selected stored card.

Example: token-abc

masked_card_numberstringRequired

Partially masked PAN of the selected card (e.g., "450803******1234"). Used for BIN-based card type and installment lookup.

Example: 450803******1234

Responses

200

Card selection result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressCardListPage

POST /orders/checkout/?page=MobilExpressCardListPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 66

"card_token='token-abc'&masked_card_number='450803******1234'"

200

Card selection result

{
  "context_list": [
    {
      "page_name": "MobilExpressInstallmentSelectionPage",
      "page_slug": "mobilexpressinstallmentselectionpage",
      "page_context": {
        "installments": [
          {
            "pk": 1,
            "installment_count": 1,
            "label": "Single Payment",
            "price_with_accrued_interest": "350.00",
            "monthly_price_with_accrued_interest": "350.00"
          }
        ],
        "installment_messages": []
      }
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Installment Selection Page context

get

Returns the list of available installment options for the selected MobilExpress card. Installment options are determined by the card type obtained from the BIN lookup.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
A card must have been selected from the card list and BIN lookup must have been completed (check_card_selected)

Skip Conditions:

Page is skipped when pre_order.installment is already set (is_already_done).

Page Context:

installments: List of available installment plans for the selected card
installment_messages: List of informational messages from the installment service

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

Installment selection page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressInstallmentSelectionPage

GET /orders/checkout/?page=MobilExpressInstallmentSelectionPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

Installment selection page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressInstallmentSelectionPage",
      "page_slug": "mobilexpressinstallmentselectionpage",
      "page_context": {
        "installments": [
          {
            "pk": 1,
            "installment_count": 1,
            "label": "Single Payment",
            "price_with_accrued_interest": "350.00",
            "monthly_price_with_accrued_interest": "350.00"
          },
          {
            "pk": 2,
            "installment_count": 3,
            "label": "3 Installments",
            "price_with_accrued_interest": "357.00",
            "monthly_price_with_accrued_interest": "119.00"
          }
        ],
        "installment_messages": [
          "Installments available for this card."
        ]
      }
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Select a MobilExpress installment plan

post

Records the chosen installment plan on the pre-order.

Required Fields:

installment: Primary key of the Installment record to use. Must be an active installment option linked to the selected card.

State Changes:

pre_order.installment is set to the selected Installment instance
pre_order.selected_campaign, pre_order.selected_rewards, and pre_order.payment_choice are reset to null
Forward payment data (me_payment_tried, etc.) is cleared

Next Page: MobilExpressTryPaymentPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

installmentintegerRequired

Primary key of the Installment record to use. Must be an active installment option linked to the selected card type.

Example: 1

Responses

200

Installment selection result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressInstallmentSelectionPage

POST /orders/checkout/?page=MobilExpressInstallmentSelectionPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 17

"installment=1"

200

Installment selection result

{
  "context_list": [
    {
      "page_name": "MobilExpressTryPaymentPage",
      "page_slug": "mobilexpresstrypaymentpage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Try Payment Page context

get

Returns the context for the payment attempt step. This page triggers the actual payment request to the MobilExpress gateway.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
A card must have been selected from the card list and BIN lookup must have been completed (check_card_selected)
An installment plan must have been selected (check_installment_selected)
Basket items must still be available at time of payment (check_available_basketitems)

Skip Conditions:

Page is skipped when the order is already finalized or me_payment_tried is set.

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

Try payment page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressTryPaymentPage

GET /orders/checkout/?page=MobilExpressTryPaymentPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

Try payment page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressTryPaymentPage",
      "page_slug": "mobilexpresstrypaymentpage",
      "page_context": {}
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Attempt MobilExpress payment

post

Submits the payment attempt to the MobilExpress gateway (process_payment). Depending on the gateway's ResultCode, the flow routes to different completion pages.

Required Fields:

agreement: User must accept the terms and conditions. Must be true.

Payment Flow:

The gateway is called with the stored card token, order number, installment count, and total amount. 3D Secure may be requested automatically based on system rules.
If ResultCode is Success and no further action is needed, the order is created and the user is routed to ThankYouPage.
If ResultCode is ThreeDSecureURLCreated, a 3D redirect URL is stored and the user is routed to MobilExpressPaymentThreeDPage.
Other result codes route to the appropriate completion page.

State Changes (on non-success outcome):

pre_order.data['me_payment_tried'] is set to true
pre_order.data['me_payment_succeeded'] is set based on the result
pre_order.data['me_further_action'] is set to the ResultCode
pre_order.data['me_transaction_id'] is set to the MobilExpress transaction ID
pre_order.data['me_three_d_redirect_url'] is set if 3D redirect is needed

Next Page:

ThankYouPage — payment succeeded
MobilExpressPaymentThreeDPage — 3D Secure redirect required
MobilExpressPaymentCompleteOtpPage — ResultCode is OTPRequired
MobilExpressPaymentCompleteCvvPage — ResultCode is CVVRequired
MobilExpressPaymentCompleteCvvAndOtpPage — ResultCode is CVVAndOTPRequired

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

agreementboolean · enumRequired

User must accept the terms and conditions to proceed. Must be true.

Possible values:

Responses

200

Payment attempt result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressTryPaymentPage

POST /orders/checkout/?page=MobilExpressTryPaymentPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 18

"agreement=true"

200

Payment attempt result

{
  "context_list": [
    {
      "page_name": "ThankYouPage",
      "page_slug": "thankyoupage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Payment 3D Secure Page context

get

Returns the 3D Secure redirect URL for the current MobilExpress payment attempt. The client should redirect the user to this URL to complete 3D Secure verification. After the bank redirects back, the POST endpoint finalises the order.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
A 3D Secure redirect URL must have been generated by the MobilExpress gateway (check_redirect_url)

Skip Conditions:

Page is skipped when the order is already finalized (is_already_done).

Page Context:

me_redirect_url: The 3D Secure redirect URL provided by the MobilExpress gateway

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

3D Secure page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressPaymentThreeDPage

GET /orders/checkout/?page=MobilExpressPaymentThreeDPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

3D Secure page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressPaymentThreeDPage",
      "page_slug": "mobilexpresspaymentthreedpage",
      "page_context": {
        "me_redirect_url": "https://3dsecure.example.com/redirect?token=abc123"
      }
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Complete MobilExpress 3D Secure payment

post

Finalises the order after the user completes 3D Secure verification at the bank. This endpoint is called by the browser after the bank redirects back to the checkout URL with page=MobilExpressPaymentThreeDPage&pos_redirect=true as query parameters.

The gateway's hash is validated and finish_payment_process is called with three_d_secure=True.

Required Fields (posted by the bank's redirect):

TransactionId: The internal order transaction ID
MobilexpressTransId: The MobilExpress transaction ID
Result: 3D Secure result. Must be '3DSuccess' to proceed with order creation
TotalAmount: Total payment amount (must match pre_order amount)
InstallmentCount: Number of installments used
Hash: HMAC hash from the MobilExpress gateway for response integrity verification

Validation:

Result must be '3DSuccess'; otherwise a validation error is returned
Hash must be valid (verified by gateway.is_hash_valid)
TotalAmount must match pre_order.get_total_amount_with_interest()

Next Page: ThankYouPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

TransactionIdstringRequired

Internal order transaction ID posted by the bank redirect.

Example: ORDER-20240115-001

MobilexpressTransIdstringRequired

MobilExpress transaction ID posted by the bank redirect.

Example: ME-TXN-987654

Resultstring · enumRequired

3D Secure result code. Must be '3DSuccess' to proceed.

Example: 3DSuccessPossible values:

TotalAmountstring · decimalRequired

Total payment amount posted by the bank redirect (12 digits, 2 decimal places). Must match pre_order.get_total_amount_with_interest().

Example: 350.00

InstallmentCountintegerRequired

Number of installments used in the transaction.

Example: 1

HashstringRequired

HMAC hash from the MobilExpress gateway for response integrity verification. Validated via gateway.is_hash_valid.

Example: a3f5c2d1e8b94f7a...

Responses

200

3D Secure payment completion result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressPaymentThreeDPage

POST /orders/checkout/?page=MobilExpressPaymentThreeDPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 170

"TransactionId='ORDER-20240115-001'&MobilexpressTransId='ME-TXN-987654'&Result='3DSuccess'&TotalAmount='350.00'&InstallmentCount=1&Hash='a3f5c2d1e8b94f7a...'"

200

3D Secure payment completion result

{
  "context_list": [
    {
      "page_name": "ThankYouPage",
      "page_slug": "thankyoupage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Payment Complete CVV Page context

get

Returns the context for the CVV completion step after the initial payment attempt returned ResultCode: CVVRequired.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
Initial payment attempt must have returned CVVRequired as the result code (check_needs_cvv)

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

CVV completion page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressPaymentCompleteCvvPage

GET /orders/checkout/?page=MobilExpressPaymentCompleteCvvPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

CVV completion page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressPaymentCompleteCvvPage",
      "page_slug": "mobilexpresspaymentcompletecvvpage",
      "page_context": {}
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Complete MobilExpress payment with CVV

post

Finalises the payment by submitting the CVV to the MobilExpress gateway (finish_payment_process with cvv set and otp empty). On success, the order is created.

Required Fields:

cvv: The 3-digit card security code.

Next Page: ThankYouPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

cvvstring · min: 3 · max: 3Required

3-digit card security code (CVV/CVC) printed on the back of the card.

Example: 123

Responses

200

CVV payment completion result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressPaymentCompleteCvvPage

POST /orders/checkout/?page=MobilExpressPaymentCompleteCvvPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 13

"cvv='123'"

200

CVV payment completion result

{
  "context_list": [
    {
      "page_name": "ThankYouPage",
      "page_slug": "thankyoupage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Payment Complete OTP Page context

get

Returns the context for the OTP completion step after the initial payment attempt returned ResultCode: OTPRequired.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
Initial payment attempt must have returned OTPRequired as the result code (check_needs_otp)

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

OTP completion page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressPaymentCompleteOtpPage

GET /orders/checkout/?page=MobilExpressPaymentCompleteOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

OTP completion page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressPaymentCompleteOtpPage",
      "page_slug": "mobilexpresspaymentcompleteotppage",
      "page_context": {}
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Complete MobilExpress payment with OTP

post

Finalises the payment by submitting the OTP to the MobilExpress gateway (finish_payment_process with otp set and cvv empty). On success, the order is created.

Required Fields:

otp: The OTP code received by the user. Between 4 and 8 characters.

Next Page: ThankYouPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

otpstring · min: 4 · max: 8Required

OTP code for payment completion. Between 4 and 8 characters.

Example: 483921

Responses

200

OTP payment completion result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressPaymentCompleteOtpPage

POST /orders/checkout/?page=MobilExpressPaymentCompleteOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 16

"otp='483921'"

200

OTP payment completion result

{
  "context_list": [
    {
      "page_name": "ThankYouPage",
      "page_slug": "thankyoupage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress Payment Complete CVV and OTP Page context

get

Returns the context for the combined CVV and OTP completion step after the initial payment attempt returned ResultCode: CVVAndOTPRequired.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
Initial payment attempt must have returned CVVAndOTPRequired as the result code (check_needs_cvv_and_otp)

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

CVV and OTP completion page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressPaymentCompleteCvvAndOtpPage

GET /orders/checkout/?page=MobilExpressPaymentCompleteCvvAndOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

CVV and OTP completion page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressPaymentCompleteCvvAndOtpPage",
      "page_slug": "mobilexpresspaymentcompletecvvandotppage",
      "page_context": {}
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Complete MobilExpress payment with CVV and OTP

post

Finalises the payment by submitting both the CVV and OTP to the MobilExpress gateway (finish_payment_process with both otp and cvv set). On success, the order is created.

Required Fields:

otp: The OTP code received by the user. Between 4 and 8 characters.
cvv: The 3-digit card security code.

Next Page: ThankYouPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

cvvstring · min: 3 · max: 3Required

3-digit card security code (CVV/CVC).

Example: 123

otpstring · min: 4 · max: 8Required

OTP code for payment completion. Between 4 and 8 characters.

Example: 483921

Responses

200

CVV and OTP payment completion result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressPaymentCompleteCvvAndOtpPage

POST /orders/checkout/?page=MobilExpressPaymentCompleteCvvAndOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 28

"cvv='123'&otp='483921'"

200

CVV and OTP payment completion result

{
  "context_list": [
    {
      "page_name": "ThankYouPage",
      "page_slug": "thankyoupage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress OTP Phone Entry Page context

get

Returns the context for the phone number entry step when the MobilExpress gateway requires OTP verification before returning the card list.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
MobilExpressSelectionPage must have been completed and the MobilExpress gateway must have indicated that OTP verification is required to retrieve the card list (check_need_otp)

Page Context:

phone_number: The user's phone number pre-filled from pre_order.user.phone

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

OTP phone entry page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressCardFoundOtpRequiredPhonePage

GET /orders/checkout/?page=MobilExpressCardFoundOtpRequiredPhonePage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

OTP phone entry page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressCardFoundOtpRequiredPhonePage",
      "page_slug": "mobilexpresscardfoundotprequiredphonepage",
      "page_context": {
        "phone_number": "+905551234567"
      }
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Submit phone number to receive MobilExpress OTP

post

Sends an OTP to the provided phone number via the MobilExpress gateway (send_otp_for_card_list). On success, the flow advances to the OTP entry page.

Required Fields:

phone_number: Recipient phone number. Must be exactly 10 characters.

State Changes:

pre_order.data['me_otp_sent'] is set to true
pre_order.data['me_phone_number'] is set to the submitted phone number
Forward MobilExpress data (me_otp_valid, me_card_token, etc.) is cleared

Next Page: MobilExpressCardFoundOtpRequiredOtpPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

phone_numberstring · min: 10 · max: 10Required

Recipient phone number for the OTP SMS. Must be exactly 10 characters.

Example: 5551234567

Responses

200

OTP phone submission result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressCardFoundOtpRequiredPhonePage

POST /orders/checkout/?page=MobilExpressCardFoundOtpRequiredPhonePage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 29

"phone_number='5551234567'"

200

OTP phone submission result

{
  "context_list": [
    {
      "page_name": "MobilExpressCardFoundOtpRequiredOtpPage",
      "page_slug": "mobilexpresscardfoundotprequiredotppage",
      "page_context": {}
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

Get MobilExpress OTP Entry Page context

get

Returns the context for the OTP entry step. The user enters the code that was sent to their phone on MobilExpressCardFoundOtpRequiredPhonePage.

Preconditions:

Basket must not be empty
Payment option must be selected and must be MobilExpress type (check_mobilexpress_payment_selected)
MobilExpressSelectionPage must have been completed and the MobilExpress gateway must have indicated that OTP verification is required to retrieve the card list (check_need_otp)
OTP SMS must have been sent and phone number must have been recorded (check_otp_sent)

Page Context: (empty)

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Responses

200

OTP entry page context retrieved

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

get/orders/checkout/?page=MobilExpressCardFoundOtpRequiredOtpPage

GET /orders/checkout/?page=MobilExpressCardFoundOtpRequiredOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Accept: */*

200

OTP entry page context retrieved

{
  "context_list": [
    {
      "page_name": "MobilExpressCardFoundOtpRequiredOtpPage",
      "page_slug": "mobilexpresscardfoundotprequiredotppage",
      "page_context": {}
    }
  ],
  "errors": [],
  "template_name": "orders/checkout.html"
}

Verify MobilExpress OTP and retrieve card list

post

Submits the OTP code to the MobilExpress gateway (verify_and_get_card_list). On success, the flow advances to the card selection page.

Required Fields:

otp: The OTP code received by the user. Between 4 and 8 characters.

State Changes:

pre_order.data['me_otp_valid'] is set to true
me_otp_sent, me_phone_number, and me_needs_otp are removed from pre_order.data
Forward MobilExpress data (me_card_token, etc.) is cleared

Next Page: MobilExpressCardListPage

Header parameters

x-requested-withstring · enumRequired

Required header for AJAX requests. Must be set to XMLHttpRequest for all checkout requests.

Default: XMLHttpRequestPossible values:

CookiestringOptional

Session cookie header (e.g. sessionid=abc123 or osessionid=<session_id>)

Body

otpstring · min: 4 · max: 8Required

One-time password received by the user via SMS. Between 4 and 8 characters.

Example: 123456

Responses

200

OTP verification result

application/json

errorsone of · nullableOptional

string[]Optional

template_namestringOptional

post/orders/checkout/?page=MobilExpressCardFoundOtpRequiredOtpPage

POST /orders/checkout/?page=MobilExpressCardFoundOtpRequiredOtpPage HTTP/1.1
Host: sandbox.akinon.com
x-requested-with: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Accept: */*
Content-Length: 16

"otp='123456'"

200

OTP verification result

{
  "context_list": [
    {
      "page_name": "MobilExpressCardListPage",
      "page_slug": "mobilexpresscardlistpage",
      "page_context": {
        "cards": [
          {
            "masked_card_number": "450803******1234",
            "card_token": "token-abc",
            "is_expired": false,
            "last_year": 2026,
            "last_month": 12
          }
        ]
      }
    }
  ],
  "errors": {},
  "template_name": "orders/checkout.html"
}

PreviousMasterpass Payment NextWallet & Redirection Payments

Last updated 14 days ago

Was this helpful?