Server-side integration FAQ
This topic answers frequently asked questions about server-side integration.
What should I do if my PHP (version 5.2) call returns the error code 'parse error: syntax error'?
In which regions is the Slide CAPTCHA server jaq.aliyuncs.com accessible?
What does signature verification mean?
Why does a server-side API call return "errorCode":400,"errorMsg":"NOT_AUTHORITY with sdkToken"?
Why does a service invocation to the risk control service return "Message":"Specified signature is not matched with our calculation.""Code":"SignatureDoesNotMatch"?
This error occurs because the AccessKey ID and AccessKey secret do not match. To resolve this issue, use your correct AccessKey ID and AccessKey secret.
What should I do if my PHP (version 5.2) call returns the error code 'parse error: syntax error'?
The risk control PHP software development kit (SDK) uses the namespace feature. You must upgrade to PHP 5.3 or later.
Do I need to change the value of script data-app in the frontend source code when I change the AccessKey for a different account?
Yes, you do. This code is linked to the account. Ensure that the frontend and backend configurations are consistent.
In which regions is the Slide CAPTCHA server jaq.aliyuncs.com accessible?
Currently, this server is accessible only in the China (Shanghai) region.
What is the validity period of a Slide CAPTCHA server-side signature string, and is it related to the time zone?
Yes, it is. The server-side signature string for Slide CAPTCHA is valid for 10 minutes. After this period, the signature string is discarded and signature verification fails. The server time must match the standard time of its time zone.
What does signature verification mean?
Signature verification is a process that authenticates user requests. After a user completes a slide action, the frontend obtains a token, sig, and sessionId. These parameters are submitted with the business request to your business backend. The business backend then calls the risk control service to authenticate the token, sig, and sessionId. If the service returns a valid response, the business backend continues the business flow. If the service returns an invalid response, the request is considered forged.
What should I do if a call to the risk control API returns "ErrorCode:500 ErrorMsg:collinadataQueryService error:user no event"?
To use the service for the first time, you must publish the service edition for data risk control.
Why does a server-side API call return "errorCode":400,"errorMsg":"NOT_AUTHORITY with sdkToken"?
This error occurs because Advanced Features are not enabled for your account. You must enable Advanced Features to use the Android server-side API.