Using POST and JSON for my API endpoints

Question

I am considering using the POST verb for all my endpoints, in conjunction with sending a JSON formatted body with these requests. I am aware that this goes against the guidelines / conventions of traditional REST API. However, are there any specific technical or security issues in doing it this way?

Sam Upra · Accepted Answer · 2017-06-03 04:39:35Z

1

If you're going to send a JSON, POST is the correct way to go about it. Just send a JSON and have a filter for bad JSON in your API. Before it is passed on to any data storage systems. Another way is, you can add a Basic Authentication header for the endpoint(at the least).

You can view how to do that here :

How to send a correct authorization header for basic authentication

This forces the user to have your token in order to send requests . Keep your token safe and your endpoints will be.

answered Jun 3, 2017 at 4:39

Sam Upra

7375 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

philipheinser · Accepted Answer · 2017-06-03 00:37:38Z

1

I don't think there are any security reasons not to do it. It just about how easy it is to use your API if you choose do something custom people have to learn it first before they can use it. Maybe take a look at graphql from Facebook it is a pretty nice API layer protocol and it also exposes a single post endpoint.

answered Jun 3, 2017 at 0:37

philipheinser

3111 silver badge6 bronze badges

Collectives™ on Stack Overflow

Using POST and JSON for my API endpoints

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related