Is it legal to have REST resource such as /currentUser in terms of RESTful and stateless?
In terms of RESTful and stateless it's pretty legal to have resource like /users/123 But, the question is: is it legal to have resource that omits user id and assumes that it's implicitly resolved on the server from the user session? For example: /loggedUser That resource would point to /users/123 when user with identifier 123 is authorized. cassiomolin Picking a resource locator Using /me , /users/me , /users/myself , /users/current or similar URIs to identify a resource that corresponds to the authenticated user is perfectly fine from a REST perspective. According to Roy Thomas Fielding's