ordersCreate = (req, res) => {

    let wxOrderInfo = {

        mchid: mch_id,

        appid: appId,

        notify_url: '/goods_list/goods_list?cat_id=20001',

        out_trade_no: out_trade_no,

        description: req.body.product_name,

        amount: {

            total: req.body.product_cnt, // 单位为分

            currency: "CNY"

        },

        payer: {

            openid: req.body.openid // 用户的openid

        }

    }

    const newsign = createOrderSign(

            'apiclient_key.pem',

            "POST",

            "/v3/pay/transactions/jsapi",

            timestamp,

            nonceStr,

            wxOrderInfo

        )

        // req.body.product_infos[0].sku_id = req.body.sku_id

    console.log('--createOrderSign-- 001')

    axios("https://api.mch.weixin.qq.com/v3/pay/transactions/jsapi", wxOrderInfo, {

            headers: { Authorization: `WECHATPAY2-SHA256-RSA2048 mchid="${mch_id}",nonce_str="${nonceStr}",timestamp="${timestamp}",serial_no="${certPath.cert_id}",signature="${newsign}"` }

        })

        .then(results => {

            console.log('--ordersCreate-- results', results)

            res.send({

                status: 0,

                message: '获取成功！',

                res: results.data,

            })

        })

        .catch(error => {

            console.log('ordersCreate error----', error)

            res.send({

                status: 1,

                message: error.message || '获取失败'

            })

        })

}

这个是发请求的代码，是POST没错，API也没错 难道是我没有权限吗，如果没有权限 需要开通什么呢？