REST worst practices
1) Conflating models and resources
2) Hardcoded auth
3) Resource-specific output formats
4) Hardcoded output formats
5) Weak HTTP method support
"Nothing about the REST model says that you have to limit yourself to the Big Four; it simply says that the methods you support need to be supported uniformly. PATCH, in particular, might be a very useful method."
6) Improper use of links
7) Couple the REST API to the application
The take home message is:
Resource != Model.