All Flowlet applications run in its own workspace. The owner is charged for resources used above the resources included in the subscription.

Accounts and billing

Flowlet is a low-code platform that allows you to integrate with APIs and build your own API. Supports JSON-based techniques like OAuth, JWT, and REST APIs.

Introduction to Flowlet

Each Flowlet workspace comes with a built-in database. Each table is defined using a schema. Supports indices and filtering.

Data

Flows are the building blocks of your application. A flow defines the logic that executes when, for example, an HTTP request comes in.

Flows

Each workspace is shipped with a simple built-in logging facility. You can use it to keep track of important notifications and for debugging flows.

Logging

In Flowlet, schemas are used, for example, when defining input for REST endpoints and validating request bodies, among many other use cases

Schemas

You can use JavaScript or TypeScript for added flexibility in both the mapping dialog and custom Script blocks in flows.

Custom scripts

Secrets provide an intuitive way to store your security tokens. Supported secrets are passwords, basic auth, OAuth2, key pairs, and database servers.

Secrets

The flow debugger lets you inspect input and output for each block in the flow. This allows you to see where an error occurs.

Debugging flows

A REST API call is an HTTP request. You can execute such requests with the "HTTP request" block. Several options are available to control HTTP requests.

Make an HTTP request

Some special blocks are available to control the application flow. These are if-statements blocks and loop/aggregate blocks.

Logic in flows

The mapping defines how two blocks are connected in a flow. Use source data and custom scripts to compose input data.

Mapping

Guide on writing secure APIs in Flowlet. Describes security protections against CORS and CSRF attacks vectors.

Security settings

Two methods are provided for (de)compression. Supported algorithms are deflate, deflate-raw, gzip, and brotli.

Compression

Several low-level methods are available to handle encryption, including hashing (md5, sha1, sha256, sha512), pbkdf2, hmac, Ed25519, RSA, and X509.

Cryptography

Methods for parsing, converting, and display (formatting) of dates and times. Includes the full Luxon library. Supports timezones.

Date and time

The script library provides methods for all CRUD actions on the internal database (as defined in the data section

Internal database

A global dns function is provided to retrieve DNS records. It can retrieve all common DNS records, optionally from a selected nameserver.

The html namespace contains methods for converting plaintext to HTML (sanitizing) and converting HTML to plaintext.

HTML

A global method ip2country is available to look up a country based on the user's IP-address. The returned country is a 2-letter ISO code.

IP to country

The global jose variable provides support for the Javascript Object Signing and Encryption (JOSE) standard, including JWT, JWS, and JWE.

JOSE

Documentation for script functions to read data from the logs, write new log messages, and retrieve meta information about the logs stored.

The mail library provides a method for sending mail through an external smtp server and reading mail attachments in an incoming mail flow.

Mail

Documentation for the script functions used for validating JSON input objects using JSON Schema specifications.

JSON Schema

Secrets allow you to store security tokens outside flows or scripts. Functions are available for each type of secret.

The global SQL function allows you to query external databases. Supported databases are MySQL and PostgreSQL. Secrets may be used to store server credentials.

Learn how to read and write XML data with Flowlet. Flowlet follows to OpenAPI conventions to use XML properties in the JSON Schema to read and write XML.