cURL Converter: Convert cURL to Python, JavaScript & More

curl -X POST 'https://api.example.com/v1/orders'   -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiJ9...'   -H 'Content-Type: application/json'   -H 'Accept: application/json'   --data-raw '{"item_id": 42, "quantity": 3, "coupon": "SAVE10"}'   --compressed   -L   --max-redirs 3

curl -X POST https://api.stripe.com/v1/payment_intents   -H 'Authorization: Bearer sk_test_abc123'   -H 'Content-Type: application/x-www-form-urlencoded'   -d 'amount=2000&currency=usd&payment_method_types[]=card'

import os
import requests

# NEVER hardcode secrets — use environment variables
api_key = os.environ["STRIPE_SECRET_KEY"]

response = requests.post(
    "https://api.stripe.com/v1/payment_intents",
    headers={"Authorization": f"Bearer {api_key}"},
    # Content-Type: application/x-www-form-urlencoded is set automatically by data=
    data={
        "amount": "2000",
        "currency": "usd",
        "payment_method_types[]": "card",
    },
    timeout=30,
)

response.raise_for_status()  # Raises HTTPError for 4xx/5xx
result = response.json()
print(result["id"])  # pi_abc123...

curl -X POST https://api.example.com/v1/users   -H 'Authorization: Bearer TOKEN'   -H 'Content-Type: application/json'   --data-raw '{"name":"Alice","email":"[email protected]","role":"admin"}'

const token = process.env.API_TOKEN  // Never hardcode

async function createUser(name: string, email: string, role: string) {
  const response = await fetch('https://api.example.com/v1/users', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ name, email, role }),
  })

  if (!response.ok) {
    // Consume the body to avoid memory leaks, even on error
    const errorBody = await response.text()
    throw new Error(`API error ${response.status}: ${errorBody}`)
  }

  return response.json() as Promise<{ id: string; name: string }>
}

// Usage
const user = await createUser('Alice', '[email protected]', 'admin')
console.log(user.id)

curl 'https://api.github.com/search/repositories?q=jsonpath&sort=stars&per_page=5'   -H 'Accept: application/vnd.github+json'   -H 'Authorization: Bearer ghp_abc123'   -H 'X-GitHub-Api-Version: 2022-11-28'

package main

import (
    "context"
    "encoding/json"
    "fmt"
    "net/http"
    "net/url"
    "os"
    "time"
)

type SearchResult struct {
    TotalCount int `json:"total_count"`
    Items []struct {
        FullName string `json:"full_name"`
        Stars    int    `json:"stargazers_count"`
    } `json:"items"`
}

func searchRepos(query string) (*SearchResult, error) {
    params := url.Values{}
    params.Set("q", query)
    params.Set("sort", "stars")
    params.Set("per_page", "5")

    reqURL := "https://api.github.com/search/repositories?" + params.Encode()

    ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
    defer cancel()

    req, _ := http.NewRequestWithContext(ctx, "GET", reqURL, nil)
    req.Header.Set("Accept", "application/vnd.github+json")
    req.Header.Set("Authorization", "Bearer "+os.Getenv("GITHUB_TOKEN"))
    req.Header.Set("X-GitHub-Api-Version", "2022-11-28")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        return nil, err
    }
    defer resp.Body.Close()

    if resp.StatusCode != http.StatusOK {
        return nil, fmt.Errorf("API error: %d", resp.StatusCode)
    }

    var result SearchResult
    if err := json.NewDecoder(resp.Body).Decode(&result); err != nil {
        return nil, err
    }
    return &result, nil
}

# ── 1. HTTP Basic Auth ──────────────────────────────────────────────────────
# curl
curl -u myuser:mypassword https://api.example.com/resource

# Python requests (recommended — HTTPBasicAuth handles base64 encoding)
requests.get(url, auth=("myuser", os.environ["API_PASSWORD"]))

# JavaScript fetch (manual — no native Basic auth helper)
const credentials = btoa('myuser:' + password)
fetch(url, { headers: { 'Authorization': 'Basic ' + credentials } })

# ── 2. Bearer Token (OAuth 2.0 / API Key as Bearer) ─────────────────────────
# curl
curl -H 'Authorization: Bearer eyJhbGci...' https://api.example.com

# Python requests
requests.get(url, headers={"Authorization": f"Bearer {os.environ['TOKEN']}"})

# JavaScript fetch
fetch(url, { headers: { 'Authorization': `Bearer ${process.env.TOKEN}` } })

# ── 3. API Key in Header ─────────────────────────────────────────────────────
# curl
curl -H 'X-API-Key: abc123def456' https://api.example.com

# Python requests
requests.get(url, headers={"X-API-Key": os.environ["API_KEY"]})

# ── 4. API Key in Query Parameter ────────────────────────────────────────────
# curl
curl 'https://api.example.com/data?api_key=abc123'

# Python requests (use params= not raw string — handles encoding)
requests.get(url, params={"api_key": os.environ["API_KEY"]})

# JavaScript fetch (use URLSearchParams)
const params = new URLSearchParams({ api_key: process.env.API_KEY })
fetch(`https://api.example.com/data?${params}`)

# curl -F sends multipart/form-data
curl -X POST https://api.example.com/upload   -H 'Authorization: Bearer TOKEN'   -F 'file=@/path/to/report.pdf;type=application/pdf'   -F 'title=Q1 Report'   -F 'category=financial'

# ── Python requests ──────────────────────────────────────────────────────────
import requests

with open('/path/to/report.pdf', 'rb') as f:
    response = requests.post(
        'https://api.example.com/upload',
        headers={'Authorization': 'Bearer ' + token},
        # Do NOT set Content-Type manually — requests generates the boundary
        files={
            'file': ('report.pdf', f, 'application/pdf'),
        },
        data={
            'title': 'Q1 Report',
            'category': 'financial',
        },
    )

# ── JavaScript (fetch + FormData) ────────────────────────────────────────────
const form = new FormData()
form.append('file', fileBlob, 'report.pdf')   // fileBlob = File or Blob object
form.append('title', 'Q1 Report')
form.append('category', 'financial')

// Do NOT set Content-Type: multipart/form-data manually —
// the browser/Node sets it with the correct boundary
const response = await fetch('https://api.example.com/upload', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${token}` },
  body: form,
})

# ── Node.js: reading a file for upload ──────────────────────────────────────
import { readFileSync } from 'fs'
import FormData from 'form-data'  // npm install form-data

const form = new FormData()
form.append('file', readFileSync('./report.pdf'), {
  filename: 'report.pdf',
  contentType: 'application/pdf',
})
form.append('title', 'Q1 Report')

await fetch('https://api.example.com/upload', {
  method: 'POST',
  headers: { ...form.getHeaders(), Authorization: `Bearer ${token}` },
  body: form,
})

# -d and --data-raw behave differently:

# -d '@filename'  → reads the CONTENTS of the file as the body
# -d '@variable'  → if the string literally starts with @, reads from that path
# -d 'data'       → also strips embedded newlines from the value

# --data-raw '@value' → sends the literal string "@value" — no file reading
# --data-raw 'data'   → sends exactly as given, newlines preserved

# Problem: -d with a JSON body that has @ in it (email addresses)
curl -d '{"email":"[email protected]","name":"Alice"}' https://api.example.com/users
# curl will NOT try to read from "example.com" — @ must be the FIRST character
# for file reading. But --data-raw is unambiguous and always safer for JSON.

# Safe pattern:
curl --data-raw '{"email":"[email protected]"}'   -H 'Content-Type: application/json'   https://api.example.com/users

# curl --compressed adds: Accept-Encoding: gzip, deflate, br
# AND automatically decompresses the response body

# Python requests: urllib3 decompresses gzip automatically when header is set
# No extra code needed — just set the header if the server requires it:
requests.get(url, headers={"Accept-Encoding": "gzip, deflate, br"})

# JavaScript fetch: the browser/Node.js automatically decompresses
# Content-Encoding: gzip responses. Setting Accept-Encoding is fine.

# Go: net/http does NOT automatically decompress unless you set:
transport := &http.Transport{ DisableCompression: false }  // default
// Or explicitly: go get golang.org/x/net/http2
// In practice, Go's http.Client decompresses gzip transparently
// UNLESS you set DisableCompression: true

# Gotcha: AWS Lambda, Vercel edge functions
# Some runtimes strip Accept-Encoding and handle compression at infra level
# If you get double-decompressed garbage, remove the Accept-Encoding header

# Method 1: npx (no installation required)
npx curlconverter --language python   "curl -X POST https://api.example.com/data -H 'Authorization: Bearer TOKEN' -d '{"key":"value"}'"

# Method 2: Global install
npm install -g curlconverter
echo "curl https://api.example.com" | curlconverter --language go

# Method 3: Supported --language values (29 options):
# python, javascript, node, go, java, csharp, php, ruby, rust, swift,
# dart, kotlin, perl, r, matlab, elixir, powershell, wget, httpie,
# ansible, har, json, cfml, clojure, lua, objc, ocaml, julia, brainfuck

# Method 4: In code (convert programmatically)
import { toPython } from 'curlconverter'

const pythonCode = toPython(`curl -X POST https://api.example.com \
  -H 'Content-Type: application/json' \
  --data-raw '{"key":"value"}'`)

console.log(pythonCode)