resource-oriented URLs GET collection GET single resource POST create resource PUT full replacement PATCH partial update DELETE resource HEAD request

200 OK 201 Created with Location 204 No Content 400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 409 Conflict

Content-Type Accept negotiation Authorization Bearer token ETag If-None-Match Cache-Control Location header Link header pagination

filter query parameters sorting offset pagination cursor pagination field selection search parameter date-range filtering multi-value filters

idempotency keys rate limiting CORS CSRF distinction for APIs input validation mass-assignment protection request correlation IDs timeouts and retries

URI versioning header versioning OpenAPI schema operationId request body schema response schema examples in OpenAPI deprecation headers