A number of the developers here are having a friendly (some would say religious) discussion about whether a GET request from a RESTful API should return the ID of the requested resource. Let’s assume the following GET request:
http://my.api.com/rest/users/23
This currently returns:
{"name": "Jim", "age": 40, "favoriteColor": "blue"}
Note that “id” is missing from the result set.
There are basically 4 camps battling with this issue.
CAMP #1: When callers make the GET request, they already know the ID. Therefore, the result set should not include the ID. If callers need this data to enable UI editing, then callers needs to pass through the ID 23, perhaps adding the member {“id”: 23} to the JSON manually.
Folks in Camp #1 also argue that the presence of the ID in the result set would indicate that this value can be modified, which of course it can’t.
CAMP #2: Without the ID, the JSON result set can’t be used natively for edit/update operations in UI forms. Instead, the AJAX callback mechanism needs to be responsible for passing around ID fields and manually adding these to the result set. This seems klunky and error prone. The UI guys are making the argument that the result set “feels” like it’s missing data that should be present, namely the ID.
CAMP #3: These folks are concerned about consistency. If we ever have a collection of user objects returned by an API, these objects MUST include the ID. Therefore, for consistency, the singleton version of a GET should also include the ID.
CAMP #4: These folks are suggesting that the GET request for a user could return meta data in the form of HyperMedia or SelfLinks that would include the ID.
This isn’t an esoteric “Who’s Right?” argument, either. The approach we take will dictate the shape of our API and affect the work loads of several developers over the new few weeks.
This is a matter of opinion, which is not the kind of Question that Stackoverflow loves to see. in any case, I will offer mine.
You are returning the representation of the state of an object or resource. The ID is part of that representation, and therefore ought to be included in the JSON packet. It is a property of the resource. Whether the caller knows the ID or not is not particularly germane to the discussion. CAMP #1 is on shaky ground.
The point you raise about collections is very relevant. Does it make sense to use one representation for the retrieve-1 operation, and another representation for the retrieve-N operation? I think not.
However, the issue you are confronting is more general – what data should be included in the representation that is transferred to clients, and under what circumstances? In some cases the caller simply does not care about a significant subset of the properties. Especially in scenarios where a large set of objects gets retrieved – where the cost to transmit the data is larger in comparison to the base communication cost – you’d like to optimize what is shipped back.
All sufficiently mature REST protocols have an ability to shape the returned data.
For examples, see
include_docs, which directs the server to include full objects or just metadata. (In some cases you might want only the count of the data, not the actual data.)Facebook allows you to explicitly specify the fields you want.
The stackexchange API is interesting. They’ve defined an entirely new type of object to support the shaping. You can use the API to define a “filter” and save it on the server side. Then in your query you pass a filter param with the ID of the filter, and the returned object representations include all the attributes specified in the filter. With no filter you get a “default” subset of fields. To get “all fields” you need to define an all-inclusive filter.
you can see this in action at https://api.stackexchange.com/docs/answers
…and specifically see the filter specification dialog.
There is no single correct way to do things. You need to balance the complexity of the “shaping” feature you support with the cost to develop and the needs of the apps that will use the API.