无后端测试场景下能否用Axios从前端发送Stripe扣款请求？

Great question—since you’re only doing this for local testing with no deployment, let’s break this down clearly:

Can you send Stripe charge requests directly from the frontend with Axios? #

Absolutely, you can! Normally this is a massive security red flag (exposing your secret key in frontend code would let anyone misuse it), but for a purely local, non-deployed test scenario, it’s totally acceptable.

Looking at your Axios example, there are a couple small tweaks to make it match curl’s behavior perfectly:

• header should be headers (plural)
• Stripe requires the Authorization header to include the Bearer prefix
• Stripe’s API expects application/x-www-form-urlencoded data, not JSON (curl uses this by default, but Axios needs a little help here)

Here’s the corrected code snippet:

axios({
  method: 'post',
  url: 'https://api.stripe.com/v1/charges',
  headers: {
    Authorization: 'Bearer sk_test_IvnLvlpEpskxJA8u7eEsAOBr00e7fmPyMZ',
    'Content-Type': 'application/x-www-form-urlencoded'
  },
  data: new URLSearchParams({
    amount: '999', // Correct—999 cents = $9.99 CAD
    currency: 'cad',
    description: 'Test charge for local testing',
    source: 'tok_visa'
  })
});

This will behave exactly like a curl request to the Stripe API.

Do you need other keys besides the secret key? #

You’re spot-on—you don’t need the publishable key here. The publishable key is meant for frontend use to generate payment tokens (like tok_visa) via Stripe’s Elements or JS SDK, but since you’re directly using the pre-made test token tok_visa, only your test secret key (sk_test_...) is required.

Do you need an activated Stripe account for testing? #

Nope! You just need a free Stripe account—you don’t have to complete full activation steps like verifying business details or linking a bank account. As soon as you sign up, you’ll get access to test mode and your test secret/publishable keys. All actions in test mode are fully simulated, so no real money will ever change hands.

Just a quick reminder: even for testing, don’t share your test secret key publicly. Since you’re not deploying this, you’re safe using it locally.

内容的提问来源于stack exchange，提问作者user11092881