在 Authorize.Net 上自动测试客户 API 凭据的好方法是什么？
在我们的应用程序中，客户为 Authorize.Net 输入自己独特的 API 凭据。因此基本上，每个客户帐户都有不同的登录 ID 和交易密钥，由 Authorize.Net 提供。我们是购物车类型的产品。
我们遇到了客户输入错误或未正确复制/粘贴登录 ID 或交易密钥的问题。
我们想给他们一个“测试我的设置”按钮，以确认他们输入的所有内容是否正确。这样做的最佳方法是什么？
显然，我们不想实际通过信用卡计费。我们无法使用测试 API，因为它们的凭据仅在实时系统中有效。
我们是否应该尝试作废一个随机交易 ID（一些明显错误的东西，如“abc123”）并检查他们是否收到正确的“交易 ID 不存在”消息？基本上，如果我们这样做，我们将寻找一条身份验证消息，以查看凭证是否在尝试作废虚假交易之前被退回。
有更好的方法吗？尽管我们向他们提供了非常具体的指示，告诉他们在哪里可以找到错误的内容，但我们的输入错误率相当高（大约 5-10%）。
我还担心，如果我们确实尝试作废虚假交易以验证凭据，Authorize.Net 可能会将我们的 IP 地址标记为恶意地址。
我也在 Authorize.Net 论坛上问过这个问题，但没有收到答案。
In our app, customers put in their own unique API credentials for Authorize.Net. So basically, each customer account has a different Login ID and Transaction Key, as supplied by Authorize.Net. We're a shopping cart type product.
We have problems with customers entering the wrong thing or not copy/pasting the Login Id or Transaction Key correctly.
We'd like to give them a "Test My Settings" button that confirms if they entered everything correctly. What's the best way of doing this?
Obviously, we don't want to actually bill a credit card. And we can't use the Test API since their credentials only work in the live system.
Should we try voiding a random transaction ID (something obviously wrong like "abc123") and check if they get the correct "Transaction ID does not exist" message? Basically, if we did this, we'd be looking for an authentication message to see if the credentials get bounced before it even tries to void the fake transaction.
Is there a better way of doing this? We have a pretty high rate (about 5-10%) where people enter the wrong thing even though we give them very specific instructions on where to find it.
I'm also concerned that if we do attempt to void a fake transaction in order to validate the credentials, Authorize.Net may flag our IP addresses as malicious.
I've asked this question on the Authorize.Net forums as well but received no answer.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
Authorize.Net 的某人推荐了这个，这是一个很好的方法：
“向报告 API 发送请求，看看是否收到无效凭据的错误消息。如果没有收到，那么他们的信息是正确的。 “
Someone at Authorize.Net recommended this which is a great way of doing it:
"Send a request to the reporting API and see if you get an error message for invalid credentials. If you don't then their information is correct."