</> realdeveloper

REST APIs and resource design

REST is an architectural approach. Consistent resource addresses, HTTP semantics and self-contained requests make an API understandable. Using JSON alone does not establish REST compliance.

A concrete example

Represent an order collection as /orders and one order as /orders/42. Authorize access to each resource separately.

GET /orders/42

Explain it yourself

What must be checked if a user knows someone else’s order ID?

How to study this

Write your reasoning first. Check the original documentation, identify an assumption, then try a different example. Reading this page does not count as verified skill evidence.

Source and review

Microsoft API design ↗

Original RealDeveloper explanation; last source check: .

Put it into practice

Public pages are open to everyone. Sign in to save answers and follow a personal practice route.

Open practice topics →