I got Token Validation Failed error 9201 trying to use VISA Direct. I've set all the variables below accordingly (I took the values from project on developer portal):
VISA_API_KEY= # User ID from VDP Credentials
VISA_SHARED_SECRET= # Shared Secret for X-Pay Token
VISA_PASSWORD= # Password associated with User ID for Basic Auth
# --- MTLS Configuration (Commented out) ---
VISA_CERT_PATH=certs/cert.pem # Path to your client certificate
VISA_KEY_PATH=certs/key_d7b90698-b008-402e-b2a1-1a2d5c8cfe6f.pem # Path to your private key
I have the error below:
Error calling Visa Direct API: HTTPError: 401 Client Error: for url: https://sandbox.api.visa.com/visadirect/fundstransfer/v1/pushfundstransactions?apikey=FV3DBXSD69J44P...
Response Status: 401
Response Headers: {'Server': 'nginx', 'Date': 'Mon, 05 May 2025 20:30:04 GMT', 'Content-Type': 'application/json', 'Content-Length': '112', 'Connection': 'keep-alive', 'X-SERVED-BY': '-9967d4f57q42', 'X-CORRELATION-ID': '1746477004_659_2132179411_-9967d4f57q42_VDP_WS', 'x-vdp-normalized-url': '/visadirect/fundstransfer/v1/pushfundstransactions', 'X-APP-STATUS': '401', 'x-vdp-authn-api-visa-id': 'FT.100', 'X-ERROR-ORIGIN': '9100', 'X-Frame-Options': 'SAMEORIGIN', 'X-XSS-Protection': '0', 'X-Content-Type-Options': 'nosniff', 'Strict-Transport-Security': 'max-age=31536000;includeSubdomains', 'Cache-Control': 'no-cache, no-store, must-revalidate', 'Pragma': 'no-cache', 'Expires': '-1', 'Content-Security-Policy-Report-Only': "default-src 'self' https://*.v.me https://*.visa.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.visa.com https://*.v.me;img-src 'self' https://*.v.me https://*.visa.com https://*.unica.com https://ad.doubleclick.net;style-src 'self' 'unsafe-inline' https://*.visa.com;object-src https://*.v.me https://*.visa.com data:;report-uri /logging/logCSPReport;", 'X-Content-Security-Policy-Report-Only': "default-src 'self' https://*.v.me https://*.visa.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.visa.com https://*.v.me;img-src 'self' https://*.v.me https://*.visa.com https://*.unica.com https://ad.doubleclick.net;style-src 'self' 'unsafe-inline' https://*.visa.com;object-src https://*.v.me https://*.visa.com data:;report-uri /logging/logCSPReport;", 'X-WebKit-CSP-Report-Only': "default-src 'self' https://*.v.me https://*.visa.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.visa.com https://*.v.me;img-src 'self' https://*.v.me https://*.visa.com https://*.unica.com https://ad.doubleclick.net;style-src 'self' 'unsafe-inline' https://*.visa.com;object-src https://*.v.me https://*.visa.com data:;report-uri /logging/logCSPReport;"}
Error Response (JSON): {
"responseStatus": {
"status": 401,
"code": "9201",
"severity": "ERROR",
"message": "Token Validation Failed",
"info": ""
}
}
127.0.0.1 - - [05/May/2025 22:30:04] "POST /send_payment HTTP/1.1" 401 -
