My application has a resource at /foo
. Normally, it is represented by an HTTP response payload like this:
{\"a\": \"some text\", \"b\": \"some t
I would suggest the querystring solution (your first). Your arguments against the other alternatives are good arguments (and ones that I've run into in practise when trying to solve the same problem). In particular, the "loosen the constraints/respond to foo/a
" solution can work in limited cases, but introduces a lot of complexity into an API from both implementation and consumption and hasn't, in my experience, been worth the effort.
I'll weakly counter your "seems to mean" argument with a common example: consider the resource that is a large list of objects (GET /Customers
). It's perfectly reasonable to page these objects, and it's commonplace to use the querystring to do that: GET /Customers?offset=100&take=50
as an example. In this case, the querystring isn't filtering on any property of the listed object, it's providing parameters for a sub-view of the object.
More concretely, I'd say that you can maintain consistency and HATEOAS through these criteria for use of the querystring:
However, what to return for these Uris can sometimes pose more complex questions:
/foo
is an entity but foo/a
is a string); the alternative is to return a partially-populated entity/foo
doesn't have an a
, a 404
status is misleading (/foo
does exist!), but an empty response may be equally confusinga
is mandatory but the client requests only b
, you are forced to return either a junk value for a
, or an invalid object)In the past, I have tried to resolve this by defining specific named "views" of required entities, and allowing a querystring like ?view=summary
or ?view=totalsOnly
- limiting the number of permutations. This also allows for definition of a subset of the entity that "makes sense" to the consumer of the service, and can be documented.
Ultimately, I think that this comes down to an issue of consistency more than anything: you can meet HATEOAS guidance using the querystring relatively easily, but the choices you make need to be consistent across your API and, I'd say, well documented.