Most RESTful APIs Aren't RESTful

Re:Most RESTful APIs Aren't RESTful by bornfreddy on Wednesday July 09, 2025 @04:21PM (#44514359)

Agree with most of what you said, except about HTTP Basic auth. That is used everywhere - take a look at any random API and there is roughly 90% chance that this is the authentication mechanism used. For backends which serve a single frontend maybe not so much, but still in places.

[ Parent | on HN ]

Re:Most RESTful APIs Aren't RESTful by fiedzia on Wednesday July 09, 2025 @05:42PM (#44515004)

I've found recently that CORS doesn't work with it, which kills it for a lot of usecases.

[ Parent | on HN ]

Re:Most RESTful APIs Aren't RESTful by motorest on Thursday July 10, 2025 @01:16AM (#44517500)

> That is used everywhere - take a look at any random API and there is roughly 90% chance that this is the authentication mechanism used.

I have no idea where you got that idea from. I'm yet to work in a project where any service doesn't employ a mix of bearer token authentication schemes and API keys.

[ Parent | on HN ]