The HTTP QUERY Method: A GET That's Allowed to Have a Body
Every search endpoint you've built quietly cheats with POST and loses caching, idempotency, and honesty. QUERY is the proposed method that fixes the thirty-year-old workaround

Every search endpoint you've built quietly cheats with POST and loses caching, idempotency, and honesty. QUERY is the proposed method that fixes the thirty-year-old workaround

Both ship wide open by default. The layered way to lock them down in Spring Boot — expose less, authenticate, role-gate, isolate.

The response headers worth sending on everything, the request headers you must never trust, and the CORS line that quietly opens the door.
