News for hackers. Stuff that matters.
Re:Open Heart Protocol by raldi on Saturday January 25, 2025 @02:00PM (#42823699)
> If reaction counts are write-only, the server should respond with a 403 or a 404.

Wouldn't HTTP 204 be more appropriate here? A 4xx would make it seem like the request failed, when in fact it succeeded.

Re:Open Heart Protocol by Kwpolska on Saturday January 25, 2025 @02:12PM (#42823806)
403/404 seems to be the response to GET, not POST. In which case 405 Method Not Allowed would be better.
Re:Open Heart Protocol by whenlambo on Saturday January 25, 2025 @02:37PM (#42824064)
And 405 response must include `Allow: POST` header.
Re:Open Heart Protocol by raldi on Saturday January 25, 2025 @02:14PM (#42823827)
Oh, I misread. Indeed, 4xx makes sense for a GET.