API design
REST
Resource, not action
URLs name nouns. Actions are verbs.
Good: POST /users/:id/password-reset
Bad: POST /resetUserPassword?id=123
Status codes mean things
200success with body201created (includeLocation)204success, no body400client sent something invalid (bad syntax, bad shape)401not authenticated403authenticated but not authorized404resource doesn't exist (or the caller isn't allowed to know it does)409confl
[Description truncada. Veja o README completo no GitHub.]