- What are HTTP verbs?
- GET (read), POST (create), PUT (replace), PATCH (partial update), DELETE (remove). Each has semantic meaning and idempotency rules.
- Status codes — which matter?
- 200 (OK), 201 (Created), 204 (No Content), 400 (Bad Request), 401 (Unauthorized), 403 (Forbidden), 404 (Not Found), 409 (Conflict), 500 (Server Error).
- Resource naming?
- Plural nouns, not verbs. /users not /getUsers. /users/123/orders — nest rarely (two levels max).
- Idempotency?
- GET, PUT, DELETE should be safe to retry. POST creates something new each time — use idempotency keys if clients need retry safety.
