GET request POST request Request target Host header User-Agent Accept header Content-Type header Authorization header

200 OK 201 Created 204 No Content 301 redirect 304 Not Modified 400 Bad Request 401 Unauthorized 404 Not Found

PUT PATCH DELETE HEAD OPTIONS Safe methods Idempotent methods Conditional requests

Cache-Control max-age no-store ETag If-None-Match Last-Modified If-Modified-Since Vary Shared cache concept

Set-Cookie Secure cookie HttpOnly cookie SameSite cookie CORS preflight Content-Security-Policy Strict-Transport-Security CSRF token transport

HTTP/2 multiplexing HTTP/2 header compression concept HTTP/3 over QUIC concept Content-Encoding gzip Transfer-Encoding chunked Range requests Server-Sent Events WebSocket upgrade