Topic
HTTP method guarantees, status codes, representations, caching, conditional requests, CORS, streaming, and retry signaling for APIs.
Practice items tagged with HTTP API Semantics.
Compares server-controlled output caching with HTTP cache semantics and defines safe keys, variation, invalidation, identity, and multi-instance behavior.
Maps creation, updates, asynchronous work, validation, authorization, conflicts, and failures to useful HTTP outcomes.
Distinguishes request and response media types and designs predictable negotiation, rejection, documentation, and caching behavior.
Explains browser same-origin enforcement, preflight requests, credentials, middleware behavior, and why CORS is not authorization.
Chooses response cache directives for public, private, sensitive, and revalidated API data without leaking user-specific content.
Implements representation-aware ETags and conditional GETs correctly, including validators, 304 metadata, authorization, cache variation, generation cost, and tests.