# Sandbox: source\_id of type CNON is not supported for client

**URL:** <https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416>\
**Category:** Questions\
**Tags:** payments-api, sandbox, web-payments-sdk\
**Created:** [June 25, 2024, 3:35pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416 "2024-06-25T15:35:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![kent](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kent](https://developer.squareup.com/forums/u/kent)\
**Post date:** [June 25, 2024, 3:35pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/1 "2024-06-25T15:35:30Z")

</div>

I’m following the [Web Payments SDK Quickstart](https://developer.squareup.com/docs/web-payments/quickstart) guide and card-payment.html in particular. I must be missing something obvious, but I don’t know what it is.

I’ve put my access token into .env.sandbox and included my appId and locationId in the example html.

Any time I enter a test credit card number ([Sandbox Payments](https://developer.squareup.com/docs/devtools/sandbox/payments#card-not-present-success-state-values)) I get the error ‘source\_id of type CNON is not supported for client’.

I see the requests (and failures) in the Developer API logs. Using the API explorer, I tried submitting the source id created by the web client and get the same error.

Using the API explorer, ‘cnon:card-nonce-ok’ also fails. However ‘ccof:customer-card-id-ok’ succeeds.

How do I test credit cards like the guide shows?

---

<div class="post-metadata">

**Author:** ![Square-Dev-AI](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/square-dev-ai/32/2513_2.png) [@Square-Dev-AI](https://developer.squareup.com/forums/u/Square-Dev-AI)\
**Post date:** [June 25, 2024, 3:35pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/2 "2024-06-25T15:35:51Z")

</div>

👋 I’m Square Dev AI, here to help answer your question!  
Based on the information you’ve provided, the following documentation will help answer your question:

> **[Sandbox Payments](https://developer.squareup.com/docs/devtools/sandbox/payments)**
>
> A quick reference of test credit card numbers and payment tokens you can use to make test payments with the Square Sandbox.

> **[Postman](https://developer.squareup.com/docs/devtools/postman)**
>
> You can use Postman to test API calls multiple times without having to write code or install Square SDKs.

> **Additional Documentation**
>
> [In-App Payments SDK Quickstart](https://developer.squareup.com/docs/in-app-payments-sdk/quick-start/start)  
> [In-App Payments SDK Quickstart](https://developer.squareup.com/docs/in-app-payments-sdk/quick-start)  
> [Test in the Sandbox](https://developer.squareup.com/docs/devtools/sandbox/testing)

If this documentation helped you find a solution, please check the box indicating that this reply solves the problem.  
Otherwise one of our Developer Advocates will provide additional assistance shortly.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [June 25, 2024, 6:45pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/3 "2024-06-25T18:45:03Z")

</div>

What value are you passing in on the `CreatePayment` request? Does it look like `cnon:CBASEF667Xdo69NiVEeuHo_Hj3Q`. 🙂

---

<div class="post-metadata">

**Author:** ![kent](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kent](https://developer.squareup.com/forums/u/kent)\
**Post date:** [June 25, 2024, 7:39pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/4 "2024-06-25T19:39:36Z")

</div>

Yes. They all look like that. It’s what the web payments sdk creates which tracing the example code back comes from paymentMethod.tokenize().

> <https://github.com/square/web-payments-quickstart/blob/37ef6c0a972b727e7b71ceb606ec11bdf50b94e4/public/examples/card-payment.html#L45>

---

<div class="post-metadata">

**Author:** ![kent](https://avatars.discourse-cdn.com/v4/letter/k/b782af/32.png) [@kent](https://developer.squareup.com/forums/u/kent)\
**Post date:** [June 25, 2024, 7:50pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/5 "2024-06-25T19:50:05Z")

</div>

Oh, I think I just found it. Your docs say to use any zip code. However it needs to match the postal code in verificationDetails. It seems like the docs need to be updated to reflect that. I had previously tried removing the verfiedBuyer part like in the docs, but that also failed.

---

<div class="post-metadata">

**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\
**Post date:** [June 25, 2024, 8:13pm UTC](https://developer.squareup.com/forums/t/sandbox-source-id-of-type-cnon-is-not-supported-for-client/17416/6 "2024-06-25T20:13:12Z")

</div>

Ah, that is confusing. You can use any zip code but you do have to use the same one that you used when calling `verifyBuyer`. We’re constantly working to improve our features based on feedback like this, so I’ll be sure to share your request to the API product team. 🙂
