3 ms·
It's idempotent. Your account won't get un-verified if you open the verification link twice. Idempotent != side-effect free
by aaaaaaaaaaab 4y ago
It's idempotent. Your account won't get un-verified if you open the verification link twice.
Idempotent != side-effect free
- capableweb 4y agoIt's not though. Loading the page twice creates two different outcomes. Idempotent endpoints can't. !Idempotent != Reversal of changes
- aaaaaaaaaaab 4y agoWhat are the two different outcomes? 1. You open the link once = your account is verified 2. You open the link twice = your account is still verified ???
- adamckay 4y agoIf it's a magic link for logging in: 1. You open the link once = you're logged in 2. You open the link twice = you're presented with an error that the magic link has already been used.
- dragonwriter 4y agoGET is supposed to be safe as well as idempotent though. Request methods are considered "safe" if their defined semantics are essentially read-only; i.e., the client does not request, and does not expect, any state change on the origin server as a result of applying a safe method to a target resource. (RFC 7231, § 4.2.1)