Home Moving cURL to the Cloud to Lower the Bar for Developers

Moving cURL to the Cloud to Lower the Bar for Developers

To develop a Twitter application, the developer must clear a significant hurdle and it requires going beyond the authentication process. That can be a chore for the uninitiated.

Part of the problem comes with cURL, the standard for making HTTP requests through an API. cURL was first developed in 1997. It is built into every command tool created but it does not know the steps that come with authentication, particularly with OAuth, the standard for authorization with Twitter and a host of other applications.

The answer: move cURL to the cloud and into application developer platforms. That’s what Apigee is now providing with the latest version of its free, API development platform.

“cURL doesn’t know the OAuth dance,” said Marsh Gardiner, product manager at Apigee.”The best way to solve it is cURL in the cloud.”

Much of the issue is the user interface. The way to use cURL is via command tools. Apigee has automated that process and built it into its platform.

The move is illustrative of the larger efforts to automate manual processes to make it easier for development. By doing this, Apigee has the ability to give more developers access to its API platform, which today they have expanded to include consoles for Soundcloud, Twilio, Foursquare, Linkedin and also Paypal.

Clay Loveless is chief technology officer for Mashery. He says lowering the bar has always been a hallmark for the company:

“Since our very first release, Mashery has offered several off-the-shelf authentication options which enable API providers to simply whitelist our IPs and let us handle 100% of the authentication for them.

That system has offered 3 “stock” Auth schemes ranging from:

– “known key”: not too secure, only requires that the caller know the API key

– HTTP Basic Auth: Also not secure, unless used over SSL (which we have long offered)

– “shared secret”: requests must pass a key and a signature, created with the key and a secret the developer and Mashery share (which Mashery issues)

This system is pluggable, and we’ve been doing custom auth implementations (Define Your Own Algorithm) for some of our customers since mid-2007.

We were also active very early in the OAuth community, with the first version of our OAuth Accelerator in production in mid-2008. Our OAuth Accelerator has allowed companies like Netflix and Best Buy to implement a fraction of the entire OAuth provider requirements, while Mashery carries the brunt of the burden of fulfilling the spec.

These features have been in Mashery’s service for a long time, and they have helped dozens of companies get their APIs to market faster. Since the real challenge is in enforcing authentication, not making authenticated requests, we feel like this has helped developers-providing and developers-using APIs.”

The move to lower the bar for developers is an overall trend that we are seeing in the market. Developers are being offered new tools that automate the processes that once had to be done manually. That’s a trend that we don’t see slowing down any time soon.

About ReadWrite’s Editorial Process

The ReadWrite Editorial policy involves closely monitoring the tech industry for major developments, new product launches, AI breakthroughs, video game releases and other newsworthy events. Editors assign relevant stories to staff writers or freelance contributors with expertise in each particular topic area. Before publication, articles go through a rigorous round of editing for accuracy, clarity, and to ensure adherence to ReadWrite's style guidelines.

Get the biggest tech headlines of the day delivered to your inbox

    By signing up, you agree to our Terms and Privacy Policy. Unsubscribe anytime.

    Tech News

    Explore the latest in tech with our Tech News. We cut through the noise for concise, relevant updates, keeping you informed about the rapidly evolving tech landscape with curated content that separates signal from noise.

    In-Depth Tech Stories

    Explore tech impact in In-Depth Stories. Narrative data journalism offers comprehensive analyses, revealing stories behind data. Understand industry trends for a deeper perspective on tech's intricate relationships with society.

    Expert Reviews

    Empower decisions with Expert Reviews, merging industry expertise and insightful analysis. Delve into tech intricacies, get the best deals, and stay ahead with our trustworthy guide to navigating the ever-changing tech market.