StripeAuthenticationError error on stripeAPI.paymentMethods.list

Hi there,

when I try to list specific customer as stated here:

stripe.paymentMethods.list({customer: 'customerid', type: 'card'});

I got 400 with following result

type: 'StripeInvalidRequestError',
  raw: {
    message: 'Invalid string: {:customer=>"cus_HngFprv2g3XFJQ"}',   
    param: 'customer',
    type: 'invalid_request_error',
    headers: {
      server: 'nginx',
      date: 'Sun, 09 Aug 2020 03:17:53 GMT',
      'content-type': 'application/json',
      'content-length': '157',
      connection: 'keep-alive',
      'access-control-allow-credentials': 'true',
      'access-control-allow-methods': 'GET, POST, HEAD, OPTIONS, DELETE',
      'access-control-allow-origin': '*',
      'access-control-expose-headers': 'Request-Id, Stripe-Manage-Version, X-Stripe-External-Auth-Required, X-Stripe-Privileged-Session-Required',
      'access-control-max-age': '300',
      'cache-control': 'no-cache, no-store',
      'request-id': 'req_SzhsHOVznnqQRd',
      'stripe-version': '2020-03-02',
      'strict-transport-security': 'max-age=31556926; includeSubDomains; preload'
    },

but why?

And I fixed this issue but using

stripe.paymentMethods.list(customer, 'card'});

and result became

 type: 'StripeAuthenticationError',
  raw: {
    message: 'Invalid API Key provided: card',
    type: 'invalid_request_error',
    headers: {
      server: 'nginx',
      date: 'Sun, 09 Aug 2020 03:14:35 GMT',
      'content-type': 'application/json',
      'content-length': '106',
      connection: 'keep-alive',
      'access-control-allow-credentials': 'true',
      'access-control-allow-methods': 'GET, POST, HEAD, OPTIONS, DELETE',
      'access-control-allow-origin': '*',
      'access-control-expose-headers': 'Request-Id, Stripe-Manage-Version, X-Stripe-External-Auth-Required, X-Stripe-Privileged-Session-Required',
      'access-control-max-age': '300',
      'cache-control': 'no-cache, no-store',
      'www-authenticate': 'Bearer realm="Stripe"',
      'strict-transport-security': 'max-age=31556926; includeSubDomains; preload'
    },
    statusCode: 401,
    requestId: undefined
  },
  rawType: 'invalid_request_error',
  code: undefined,
  doc_url: undefined,
  param: undefined,
  detail: undefined,
  headers: {
    server: 'nginx',
    date: 'Sun, 09 Aug 2020 03:14:35 GMT',
    'content-type': 'application/json',
    'content-length': '106',
    connection: 'keep-alive',
    'access-control-allow-credentials': 'true',
    'access-control-allow-methods': 'GET, POST, HEAD, OPTIONS, DELETE',
    'access-control-allow-origin': '*',
    'access-control-expose-headers': 'Request-Id, Stripe-Manage-Version, X-Stripe-External-Auth-Required, X-Stripe-Privileged-Session-Required',
    'access-control-max-age': '300',
    'cache-control': 'no-cache, no-store',
    'www-authenticate': 'Bearer realm="Stripe"',
    'strict-transport-security': 'max-age=31556926; includeSubDomains; preload'
  },
  requestId: undefined,
  statusCode: 401,
  charge: undefined,
  decline_code: undefined,
  payment_intent: undefined,
  payment_method: undefined,
  setup_intent: undefined,
  source: undefined
}

Weird thing is, it works with curl

https://api.stripe.com/v1/payment_methods?customer=cus_id&type=card

My Stripe SDK Version: stripe": "^8.84.0 but I also tried with “stripe”: “^8.79.0”, before update

My node version is => v12.18.2

OS Windows 10

Thanks

[remi-stripe]

It uses 'card' as your API key, which is invalid, so that’s why you get a 401.

[BerkanCetinkayaOSF]

401 just means you’re passing an invalid API key or an empty API key when making the call.

I know what it means. Can you please check this?

var stripe = require('stripe')('sk_test_4eC39HqLyjWDarjtT1zdp7dc');

(async () => {
    var pms = await stripe.paymentMethods.list(
        {
            customer: 'cus_HngizKHWPRaujW'
        },
        'card'
    ).catch(console.log);
})();

IMO, 400 makes sense here