Testing in sandbox

Validate your integration end-to-end against the sandbox base URL (https://voting-dev.eventista.vn/voting/api) before going live. Sandbox EP has no real value.

1. Sign and award successfully

   Use the signing examples with your sandbox credentials; confirm a fresh award returns 202 with the expected points. A 401 means your signing string or byte-handling is off.

2. Test idempotency

   Resend the same request — the second call must return 200 DUPLICATE, and the user balance must increase only once. Then send the same orderId with a changed body and confirm 409 IDEMPOTENCY_CONFLICT.

3. Test conversion & caps

   Send amount < 1000 (expect 422 AMOUNT_BELOW_MIN) and an over-cap amount (expect 422 PER_TX_CAP_EXCEEDED).

4. Test auth & tenant failures

   Send a bad signature (expect 401), a stale timestamp (expect 401 TIMESTAMP_OUT_OF_RANGE), and a tenant you’re not allowed (expect 403 TENANT_NOT_ALLOWED).

5. Reconcile

   Confirm the award via status lookup and list it via award history, paging until nextCursor is null.