REST was never about CRUD

Re:REST was never about CRUD by mwcampbell on Thursday July 19, 2018 @10:36AM (#17566660)

> But end-to-end cacheability at the HTTP layer, part of the original rationale behind the REST API design style, does not make sense for most APIs anymore in 2018.

Why not? What were the relevant changes between the 90s and 2018?

[ Parent | on HN ]

Re:REST was never about CRUD by xyzzy123 on Thursday July 19, 2018 @06:04PM (#17570742)

* Most APIs are authenticated.

* HTTPS has broken intermediate caches.

* Most responses are personalised or highly dynamic.

* Many responses contain PII or sensitive information and should not be cached.

* Many requests are rate-limited, billed or metered.

Observation: people go out of their way to cache static resources but tend to disable caching entirely on their JSON APIs.

I do have some bias; recovering pentester who rarely worked with APIs that served the same response to all users.

[ Parent | on HN ]

Re:REST was never about CRUD by organsnyder on Friday July 20, 2018 @09:25AM (#17574762)

There are still many use-cases for HTTP caches within internal infrastructure—such as between microservices.

[ Parent | on HN ]