麻烦问一下各位，沙箱测试时使用的openId和sessionKey必须是在测试地址下，登录验证过的吗？

因为现在测试支付时，一直在报这个问题：{"errcode":90009,"errmsg":"mp_sig error hint: [r0xSkA06148952]"}，参数检查过多遍，没有问题，后来看到有人说session过期也会报这个问题，那这个session必须是测试地址（测试环境下需要绑定域名: 10.191.2.162）登录验证过过吗？正式地址（

http://h5sdk.game.qq.com/api2/H5SDKApi.php

）登录验证过不可以吗？求解

请求的日志：

https://api.weixin.qq.com/cgi-bin/midas/sandbox/getbalance?access_token=11_so6FHbY1pbN9f5ez7pW-rQY-8-zCieftQh7UHhZm7pAVVBw60ozQhScoqa9GWkSeauNUcYpHqPhwXie1zyCfG18A3JwMWHPCA7N3uNo3XRSJ-txRXkHhO0MonyAYSYhAFARLR;  

Post params : 

{"appid":"XXX",

"mp_sig":"a8e2903a01f3f97d1c82676061435ce0cafe9defd1e883e98676e94523bb2fb1",

"offer_id":"XXX",

"openid":"XXX",

"pf":"android",

"sig":"3fcd241795b4ef0b82bb29f1019fb9da0f06be06b0690abcbdbcaaf799decb46",

"ts":1530415614,

"zone_id":"1"}

Data For SIG (Key =  secret )>>>:

appid=XXX&

offer_id=XXX&

openid=XXX&

pf=android&

ts=1530415614&

zone_id=1&

org_loc=/cgi-bin/midas/sandbox/getbalance&

method=POST&

secret=XXX

Data For SIG (Key =  session_key )>>>:

access_token=11_so6FHbY1pbN9f5ez7pW-rQY-8-zCieftQh7UHhZm7pAVVBw60ozQhScoqa9GWkSeauNUcYpHqPhwXie1zyCfG18A3JwMWHPCA7N3uNo3XRSJ-txRXkHhO0MonyAYSYhAFARLR&

appid=XXX&

offer_id=XXX&

openid=XXX&

pf=android&

sig=3fcd241795b4ef0b82bb29f1019fb9da0f06be06b0690abcbdbcaaf799decb46&

ts=1530415614&

zone_id=1&

org_loc=/cgi-bin/midas/sandbox/getbalance&

method=POST&

session_key=XXX