http-extensions
http-extensions copied to clipboard
httpwg
Content-Location with QUERY
Content-Location doesn't indicate whether the resource on the other end will return these results in perpetuity, or whether it'll return the results to the query (which may change over time).
So it might be better to be explicit -- if the server wants to create a resource for these results, use 201 Created with Location that explicitly points to a resource that represents this query, and which can change over time. The server can choose whether to include the query results on the 201, of course.
Given that we're defining this method, it seems like we can specify which is the intended behavior, or provide mechanisms for each.
Could perhaps a Link header be used to disambiguate the two use-cases?
Link: </updated-results>; rel="latest-version", </these-results>; rel="memento"
The chosen link relations are probably not appropriate, I just picked some that exists to provide a complete example.
Per discussion in Brisbane side-meeting:
- Need to add text indicating what it means if the C-L target errors
- Add text clarifying that the resource can be cached despite the different URI (this is cautioned against in SEMANTICS)
- Security Considerations? Suggest that the URI SHOULD NOT expose the plaintext of the query contents (for #1909)
@martinthomson, I've added language restricting it to same-origin; is there a stronger statement you were expecting to see here?