From CGI scripts and HTML forms to early JavaScript and server callbacks, 1995–1998 quietly introduced the integration patterns that later evolved into modern webhooks.
In the mid-to-late 1990s, “web APIs” often looked like CGI scripts and HTML form endpoints—yet operators still needed quotas and throttles. This chapter examines how rate limiting quietly became a business and security tool as browsers gained scripting and HTTP traffic scaled.
From CGI scripts to browser scripting and form-driven endpoints, 1995–1998 shaped early developer access control patterns that foreshadowed modern API keys—often implemented with shared secrets, IP allowlists, and basic auth.
In 1995–1998, “web APIs” weren’t polished JSON endpoints—they were CGI scripts and form posts stitched together with early JavaScript. Those patterns exposed hard authorization problems that OAuth 2.0 would later solve.
OAuth 1.0 arrived much later, but the core problems it solved—third-party access without password sharing—were already visible in 1995–1998 web development patterns like CGI, cookies, and early browser scripting.
Long before Facebook exposed a social graph to developers, the web learned how to pass identity, state, and structured inputs through HTML forms, CGI scripts, cookies, and early JavaScript. This chapter traces the 1995–1998 API-shaped habits that later became essential to Facebook Platform APIs.
Long before the Twitter API existed, the mid-1990s web taught developers how to integrate services using forms, CGI endpoints, and early browser scripting—patterns that later matured into modern social platform APIs.
Flickr’s API arrived years after the web learned to stitch systems together. This chapter traces the 1995–1998 building blocks—forms, CGI, early JavaScript, and pragmatic “API-like” endpoints—that made media-sharing integrations possible.
Google Maps API arrived much later, but its core ideas—request/response patterns, parameterized URLs, and scripted UI behavior—were forged in 1995–1998 through CGI, HTML forms, and early JavaScript.
Before XMLHttpRequest and the term AJAX existed, developers in 1995–1998 used browser scripting, CGI, forms, and clever page-integration tricks to simulate “dynamic” web apps. This chapter shows the web APIs and constraints that made XHR feel inevitable.