Application platform with flexible permissioning
Systems and methods are provided for an application platform with flexible permissioning according to one or more embodiments. In one embodiment, an application platform with flexible permissioning comprises: a service provider server adapted to interact with an application development server and a client device over a network, wherein the service provider server is adapted to implement at least one application programming interface (API); one or more processors; and one or more memories adapted to store a plurality of machine-readable instructions which when executed by the one or more processors are adapted to cause the application platform with flexible permissioning to: maintain, at the service provider server, a profile associated with at least one application developer using the application development server; receive an API call from the application developer; authenticate the application developer and authorize the API call; assign an access level to the application developer based on the profile associated with the application developer; and control permissions given to the application developer to perform operations available based on the assigned access level.
1. A method, comprising:
receiving, by an application programming interface (API) server system through a network, an API call associated with an API;
identifying, by the API server system, an application developer that is associated with the API call;
accessing, by the API server system in a database, an application developer profile of the application developer that defines a first access level of a plurality of different access levels that are provided for the API, wherein the plurality of different access levels control access to different functionality that is available using the API; and
providing, by the API server system through the network, access to first functionality that is available using the API and that is defined by the first access level.
2. The method of claim 1 , further comprising storing information related to processing of the API call in the application developer profile.
3. The method of claim 2 , further comprising updating the application developer profile to include a second access level of the plurality of different access levels when the information included in the application developer profile establishes a predefined level of interaction.
4. The method of claim 1 , further comprising:
when the API call is included in the functionality accessible by the first access level, processing, by the API server system, the API call; and
returning, through the network, a data value indicating that the API call was processed.
5. The method of claim 1 , further comprising:
when the API call is not included in the functionality accessible by the first access level, returning, through the network, a data value indicating that the API call was not processed.
6. The method of claim 1 , wherein the API call is a request for functionality accessible via the first access level.
7. The method of claim 6 , further comprising returning, though the network, a data set defining the functionality that is accessible via the first access level.
8. The method of claim 1 , wherein the API call includes a request for verification by the API server system.
9. The method of claim 8 , further comprising:
verifying, by the API server system, the application developer based at least on information included in the application developer profile;
upon successful verification, updating the access level associated with the application developer profile to a second access level; and
returning, through the network, a data value indicating that the application developer profile was updated with the second access level.
10. A server system, comprising:
a network interface configured to receive API calls;
a non-transitory memory having stored thereon a database that defines a plurality of application developer profiles, wherein each application developer profile is assigned a first access level of a plurality of different access levels that are provided for the API, wherein the plurality of different access levels control access to different functionality that is available using the API; and
one or more hardware processors coupled to the network interface and the non-transitory memory, and configured to execute store instructions to cause the server system to perform operations comprising:
receiving, through the network interface, an API call associated with the API;
identifying an application developer that is associated with the API call;
accessing the application developer profile of the application developer; and
providing access to first functionality that is available using the API and that is defined by the first access level.
11. The system of claim 10 , wherein the operations further comprise:
storing information related to processing of the API call in the application developer profile.
12. The system of claim 11 , wherein the operations further comprise:
updating the application developer profile to include a second access level of the plurality of different access levels when the information included in the application developer profile establishes a predefined level of interaction.
13. The system of claim 10 , wherein the operations further comprise:
when the API call is included in the functionality accessible by the first access level, processing the API call; and
returning, through the network, a data value indicating that the API call was processed.
14. The system of claim 10 , wherein the operations further comprise:
when the API call is not included in the functionality accessible by the first access level, returning, through the network, a data value indicating that the API call was not processed.
15. The system of claim 10 , wherein the API call is a request for functionality accessible via the first access level.
16. The system of claim 15 , wherein the operations further comprise:
returning, though the network, a data set defining the functionality that is accessible via the first access level.
17. The system of claim 10 , wherein the API call includes a request for verification by the API server system.
18. The system of claim 17 , wherein the operations further comprise:
verifying the application developer based at least on information included in the application developer profile;
upon successful verification, updating the access level associated with the application developer profile to a second access level; and
returning, through the network, a data value indicating that the application developer profile was updated with the second access level.
19. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause an application programming interface (API) server system to perform operations comprising:
receiving, through a network, an API call associated with an API;
identifying an application developer that is associated with the API call;
accessing an application developer profile of the application developer that defines a first access level of a plurality of different access levels that are provided for the API, wherein the plurality of different access levels control access to different functionality that is available using the API; and
providing access to first functionality that is available using the API and that is defined by the first access level;
when the API call is included in the functionality accessible by the first access level, returning, through the network, a data value indicating that the API call was processed; and
when the API call is not included in the functionality accessible by the first access level, returning, through the network, a data value indicating that the API call was not processed.
20. The medium of claim 19 , wherein the operations further comprise:
verifying the application developer based at least on information included in the application developer profile;
upon successful verification, updating the access level associated with the application developer profile to a second access level; and
returning, through the network, a data value indicating that the application developer profile was updated with the second access level.