调取js-api授权时报错，求指教！！！

        var _config;
        $(function() {
            $.post('getconfig.do', {
                'urlString' : window.location.href
            }, function(data) {
                _config = JSON.parse(data);
                console.log(_config.nonceStr);

                dd.config({
                    agentId : 'xxx',
                    corpId : _config.corpId,
                    timeStamp : _config.timeStamp,
                    nonceStr : _config.nonceStr,
                    signature : _config.signature,
                    jsApiList : [ 'runtime.info', 'biz.contact.choose',
                            'device.notification.confirm',
                            'device.notification.alert',
                            'device.notification.prompt', 'biz.ding.post' ]
                });

                dd.ready(function() {

                    // 获取容器信息
                    dd.runtime.info({
                        onSuccess : function(info) {
                            console.log('runtime info: ' + JSON.stringify(info));
                            // 当前容器版本 0.1.2
                        },
                        onFail : function(err) {
                            console.log('fail: ' + JSON.stringify(err));
                        }
                    });

                    // 获取免登授权码
                    dd.runtime.permission.requestAuthCode({
                        corpId : _config.corpId,
                        onSuccess : function(info) {
                            console.log('authcode: ' + info.code);
                            alert('authcode: ' + info.code);
                        },
                        onFail : function(err) {
                            console.log('fail: ' + JSON.stringify(err));
                            alert('fail: ' + JSON.stringify(err));
                        }
                    });
                });

                dd.error(function(err) {
                    console.log('dd error: ' + JSON.stringify(err));
                    alert('dd error: ' + JSON.stringify(err));
                });
            });
        });

上方是参照demo写的方法，如果agentId填写为‘xxx’（应用Id）,调试时报dd error:{"message":"权限校验失败 Code:52019 - Messsage:","errorCode":3}错误（为无效的agentId,那请问有效的agentId应该到哪里取呢？我是在开发者平台-微应用列表-应用ID取的值）
如果agentId填写为‘'（空字符串）,调试时报fail:{"errorMessage":"err msg redirect_uri domain is not secure domain","errorCode":"3"}错误

另外应用配置的主页地址URL为：前缀/ddTalkTest/index.html?corpid=$CORPID$

求大神给指点指点哪里不对啊