Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

In our app, customers put in their own unique API credentials for Authorize.Net. So basically, each customer account has a different Login ID and Transaction Key, as supplied by Authorize.Net. We're a shopping cart type product.

We have problems with customers entering the wrong thing or not copy/pasting the Login Id or Transaction Key correctly.

We'd like to give them a "Test My Settings" button that confirms if they entered everything correctly. What's the best way of doing this?

Obviously, we don't want to actually bill a credit card. And we can't use the Test API since their credentials only work in the live system.

Should we try voiding a random transaction ID (something obviously wrong like "abc123") and check if they get the correct "Transaction ID does not exist" message? Basically, if we did this, we'd be looking for an authentication message to see if the credentials get bounced before it even tries to void the fake transaction.

Is there a better way of doing this? We have a pretty high rate (about 5-10%) where people enter the wrong thing even though we give them very specific instructions on where to find it.

I'm also concerned that if we do attempt to void a fake transaction in order to validate the credentials, Authorize.Net may flag our IP addresses as malicious.

I've asked this question on the Authorize.Net forums as well but received no answer.

share|improve this question

closed as off-topic by Al E., pnuts, jonsca Nov 18 at 5:33

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "It is a question about creating/developing a web application." – Al E., pnuts, jonsca
If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

I emailed their support about this and they recommended the solution below, which is a great way of doing it:

"Send a request to the reporting API and see if you get an error message for invalid credentials. If you don't then their information is correct."

share|improve this answer
    
Can you state the source, please? –  Alex Oct 31 '11 at 9:42
    
"Someone at Authorize.Net" is the source. I asked their support team, and that response was emailed back. –  wahtimswa1970 Nov 1 '11 at 13:14

Not the answer you're looking for? Browse other questions tagged or ask your own question.