1

I'm writing an API in Django Rest Framework.

I have a password reset endpoint that accepts one 'email' parameter. What if there is a key 'email' in the header, but the value was an empty string?

key: 'email'    
value: ''

What status code should I return? 400, or maybe 204?

EDIT: I forgot to mention that this shouldn't be a validation failure. No authorization is needed for this endpoint. This is only serves to send a password reset email.

Laurel
  • 5,965
  • 14
  • 31
  • 57
Saša Kalaba
  • 4,241
  • 6
  • 29
  • 52
  • "400 Bad Request" should fit best, but there is no standard definition of what you have to use actually in what specific situation, so the answer is rather opinion based. – Daniel W. Feb 15 '16 at 17:21
  • Possible duplicate of [What's an appropriate HTTP status code to return by a REST API service for a validation failure?](http://stackoverflow.com/questions/1959947/whats-an-appropriate-http-status-code-to-return-by-a-rest-api-service-for-a-val) – Daniel W. Feb 15 '16 at 17:23

1 Answers1

5

Http statuses are just standards, you can adjust them to suit you. 204 no content is generally used when no response body is returned, so you want be able to respond from server with "no email provided whatever error massege". In DRF, 204 is returned (as default) after successful DELETE request, when entity was deleted at server, so there is no content left.

In your case I would go with 400. http://www.restapitutorial.com/httpstatuscodes.html is specifically mentioning "missing data" as an example of error 400 bad request usage, which might be exactly your case.

Matúš Bartko
  • 2,425
  • 2
  • 30
  • 42