rest - Which HTTP method should Login and Logout Actions use in a "RESTful" setup

Question

Curious how others here would represent these in a REST architecture.

/users/login/
/users/logout/

These endpoints set up the session to login in the user, or clear it, respectively. My gut says POST, but I'm not in fact creating an object.

question from:https://stackoverflow.com/questions/15098392/which-http-method-should-login-and-logout-actions-use-in-a-restful-setup

Answer 1

You should use POST - using GET for these actions can lead to issues with browser prefetching and search engine spidering. See (1, 2)