Authorize.Net生产环境认证失败（沙箱正常）求助

沙箱环境下Authorize.Net功能正常，但切换到生产环境后持续抛出**"User authentication failed due to invalid authentication values"**错误（错误码007）。已测试有效信用卡、多次重新生成Transaction Key、反复核对API Login ID和Transaction Key的正确性，但问题仍未解决。错误提示指向三种可能：正式账户凭证提交至测试环境、测试账户凭证提交至正式环境、API Login ID/Transaction Key本身有误。

代码实现 #

创建客户档案方法 #

def create_customer_profile(cls, user: User, merchant_auth):

    if not user.customer_profile_id:
        customer_data = {
            "merchantCustomerId": str(user.id),
            "email": user.email,
        }
        create_customer_profile = apicontractsv1.createCustomerProfileRequest()
        create_customer_profile.merchantAuthentication = merchant_auth
        create_customer_profile.profile = apicontractsv1.customerProfileType(
            **customer_data
        )

        controller = createCustomerProfileController(create_customer_profile)
        controller.execute()
        response = controller.getresponse()
        if response.messages.resultCode == "Ok":
            user.customer_profile_id = response.customerProfileId
            user.save()
            return response.customerProfileId
        else:
            raise TransactionCanceled(
                message=str(response.messages.message[0]["text"].text)
            )
    return user.customer_profile_id

创建客户支付档案方法 #

@classmethod
def create_customer_payment_profile(
    cls, card_details, billing_address, user: User, default: bool
):
    merchant_auth = cls.merchant_auth()
    payment = apicontractsv1.paymentType()
    credit_card = apicontractsv1.creditCardType()
    credit_card.cardNumber = card_details["card_number"]
    credit_card.expirationDate = card_details["mm_yy"]
    credit_card.cardCode = card_details["cvv"]
    payment.creditCard = credit_card

    profile = apicontractsv1.customerPaymentProfileType()
    profile.payment = payment
    profile.billTo = apicontractsv1.customerAddressType()
    profile.billTo.address = billing_address["address_1"]
    profile.billTo.city = billing_address["city"]
    profile.billTo.state = billing_address["state"]
    profile.billTo.zip = billing_address["postal_code"]
    create_payment_profile_request = (
        apicontractsv1.createCustomerPaymentProfileRequest()
    )
    create_payment_profile_request.merchantAuthentication = merchant_auth
    create_payment_profile_request.paymentProfile = profile

    create_payment_profile_request.customerProfileId = str(
        cls.create_customer_profile(user, merchant_auth)
    )
    create_payment_profile_request.defaultPaymentProfile = default
    controller = createCustomerPaymentProfileController(
        create_payment_profile_request
    )

    controller.execute()
    response = controller.getresponse()
    return response.customerPaymentProfileId

请求体示例 #

{
  "payment_method": {
    "card_holder": "name surname",
    "card_number": "valid card numbers",
    "mm_yy": "valid exp",
    "cvv": "valid cvv"
  },
  "billing_address": {
    "address_1": "valid adr1",
    "city": "valid City",
    "state": "valid state",
    "postal_code": "valid postal_code"
  }
}

排查与解决方向 #

• 确认API端点配置：生产环境必须使用https://api.authorize.net/xml/v1/request.api，沙箱端点https://apitest.authorize.net/xml/v1/request.api不可用于生产，检查代码中控制器初始化或merchant_auth相关逻辑是否正确切换端点。
• 凭证环境匹配：再次确认生产环境的API Login ID和Transaction Key是从Authorize.Net生产后台生成的，沙箱凭证无法在生产环境使用，二者完全独立。
• 清除凭证格式问题：复制凭证时避免带入空格、换行或不可见字符，建议用纯文本编辑器中转后再粘贴到配置中，或手动输入关键部分。
• 验证账户状态：登录Authorize.Net生产后台确认账户已完成激活，无审核中、暂停或受限状态，必要时联系官方支持核实。
• 检查凭证注入逻辑：排查merchant_auth()方法是否正确加载生产环境配置，是否误引用了沙箱环境的变量或配置文件，可临时打印（注意保密）凭证值确认正确性。
• 网络连通性验证：确认生产服务器允许出站请求到Authorize.Net生产API地址，部分企业防火墙会拦截未授权的外部API请求，需检查网络规则。

内容的提问来源于stack exchange，提问作者Khachatur Khachatryan