Open Ajax Alliance Offers New IDE and Mashup Tools
- By John K. Waters
The OpenAjax Alliance
wants to make it easier -- and safer -- to build applications using the Ajax
Web development technique. The group unveiled two standards initiatives at this
year's AjaxWorld RIA Conference & Expo,
underway this week in San Jose, Calif., including a new metadata specification
and a new version of its mashup runtime
"There are 10 to 20 Ajax IDEs on the market today, and a couple hundred Ajax toolkits (libraries)," said David Boloker, CTO of Emerging Internet Technology at sponsoring company IBM. "Different Ajax toolkits -- such as Dojo, JQuery and Prototype -- each documents their APIs in a different manner. So you have this problem of trying to get the IDEs to do a good job of supporting the toolkits."
To "do good things" with Ajax toolkits, the leading IDEs, such as
Eclipse, NetBeans, Dreamweaver and Visual Studio, have had to do "one-off
development work," Boloker said; it has been a largely library-by-library,
manual process for the tool vendors. Adobe Systems, for example, has supported
its own Adobe Spry toolkit in Dreamweaver. Visual Studio has supported Microsoft's
Atlas Framework (ASP.NET Ajax). "You've got hundreds of toolkits and tens
of IDEs, and there's very little coverage," he said.
The newly launched OpenAjax Metadata Integration initiative aims to solve this
APIs and any widgets included in an Ajax toolkit. With that standard in place,
the IDEs need to support only the OpenAjax format to support the toolkits. The
standard will make it possible for the dev tools to work with any library, the
Alliance asserted, and provide intelligent code assist, interactive help and
drag-and-drop visual editing using Ajax widgets.
Adobe was among the companies onboard at the show with the new standard. Its
Dreamweaver Creative Suite 4 is using the OpenAjax widget format as its native
widget format, allowing it to interoperate with different widgets from other
project. Aptana, a San Mateo, Calif.-based development tools maker, actually
provided a set of standards that served as a starting point for the work in
OpenAjax on this initiative, Boloker said.
The Alliance also addressed an issue near and dear to its heart -- mashup security
-- with the latest version of its OpenAjax Hub technology. The Hub has been
a cornerstone project since the Alliance was founded in 2006. Version 1.0 was
released in 2007. The Alliance billed it as "an industry-standard, secure
mashup runtime" designed to isolate third-party widgets in secure sandboxes
and mediate messaging among those widgets with a security manager, explained
Jon Ferraiolo, director of the OpenAjax Alliance.
"Mashups can represent a real security risk, because they utilize potentially malicious third-party components," Ferraiolo said. "We're trying to provide a secure environment for enterprise mashups -- for any kind of mashups -- but particularly those developed in an enterprise."
Version 1.1 of the Hub, unveiled at the show, is designed to isolate third-party
widgets in security sandboxes in the browsers and mediate the messaging among
the widgets with a security manager. Ferraiolo said the new version of the Hub
will be delivered as both an open specification and a commercial-grade, open
source reference implementation.
"In the mashup scenario, you want the end user to be his own developer,"
Ferraiolo said. "You want the technology to support fast-moving enterprises
where the users are empowered to innovate. So you want to get the IT department
out of the loop and allow the user to go out and get the information he needs
today by visual assembly -- drag-and-drop assembly -- of pre-packaged components.
Unfortunately, the early mashup technologies that are shipping today have to
restrict the kinds of widgets an end user can put into his mashup, because of
security considerations. Companies do not allow third-party widgets to be placed
in the mashup; all third-party widgets must go through IT to get approved. And
that slows things down and just kind of defeats the purpose."
Included within the OpenAjax Metadata standard is the Widget Interoperability Standard, which makes it possible to define "mashable widgets." These are widgets that can identify the properties they share with other widgets and the messages they can publish and receive from other widgets, Ferraiolo said.
This is a model that IBM has is already employing with its own QEDwiki drag-and-drop mashup tool, launched in late 2006.
Systems like the Hub are going to be necessary for enterprises to feel secure
enough to take advantage of the speed and flexibility offered by the mashup
model, said Gartner analyst David Cearley. "Enterprises are showing a lot
of interest in the capability, but there are still significant security, privacy,
scalability and quality-of-service concerns that are limiting the scope of mashups
that people are willing to do today," he said.
Hordes of Web application developers are now using Ajax to improve the responsiveness
of Web pages by automating the exchange of information between browsers and
servers. Although it's typically thought of as shorthand for "Asynchronous
presentation, the Document Object Model for dynamic display and interaction,
XML and XSLT for data interchange and manipulation, the XMLHttpRequest object
The OpenAjax Alliance has not yet finalized these offerings, but Ferraiolo
said it's close.
was formed in February 2006 to promote interoperability standards around the
use of Ajax. Among the 15 founding companies were IBM, Google, Oracle and the
Eclipse Foundation. Since its founding, the group has adding considerably to
its membership, which today includes 111 companies and open source projects.
John K. Waters is a freelance writer based in Silicon Valley. He can be reached