麻烦问一下各位，沙箱测试时使用的openId和sessionKey必须是在测试地址下，登录验证过的吗？ 因为现在测试支付时，一直在报这个问题：{"errcode":90009,"errmsg":"mp_sig error hint: [r0xSkA06148952]"}，参数检查过多遍，没有问题，后来看到有人说session过期也会报这个问题，那这个session必须是测试地址（测试环境下需要绑定域名: 10.191.2.162）登录验证过过吗？正式地址（ http://h5sdk.game.qq.com/api2/H5SDKApi.php ）登录验证过不可以吗？求解 请求的日志： https://api.weixin.qq.com/cgi-bin/midas/sandbox/getbalance?access_token=11_so6FHbY1pbN9f5ez7pW-rQY-8-zCieftQh7UHhZm7pAVVBw60ozQhScoqa9GWkSeauNUcYpHqPhwXie1zyCfG18A3JwMWHPCA7N3uNo3XRSJ-txRXkHhO0MonyAYSYhAFARLR;   Post params :  {"appid":"XXX", "mp_sig":"a8e2903a01f3f97d1c82676061435ce0cafe9defd1e883e98676e94523bb2fb1", "offer_id":"XXX", "openid":"XXX", "pf":"android", "sig":"3fcd241795b4ef0b82bb29f1019fb9da0f06be06b0690abcbdbcaaf799decb46", "ts":1530415614, "zone_id":"1"} Data For SIG (Key =  secret )>>>: appid=XXX& offer_id=XXX& openid=XXX& pf=android& ts=1530415614& zone_id=1& org_loc=/cgi-bin/midas/sandbox/getbalance& method=POST& secret=XXX Data For SIG (Key =  session_key )>>>: access_token=11_so6FHbY1pbN9f5ez7pW-rQY-8-zCieftQh7UHhZm7pAVVBw60ozQhScoqa9GWkSeauNUcYpHqPhwXie1zyCfG18A3JwMWHPCA7N3uNo3XRSJ-txRXkHhO0MonyAYSYhAFARLR& appid=XXX& offer_id=XXX& openid=XXX& pf=android& sig=3fcd241795b4ef0b82bb29f1019fb9da0f06be06b0690abcbdbcaaf799decb46& ts=1530415614& zone_id=1& org_loc=/cgi-bin/midas/sandbox/getbalance& method=POST& session_key=XXX