API Testing · Middle · Question 17 of 75

Why check `Cache-Control` headers on API responses?

1Cache headers make JSON parsing faster in clients
2Wrong caching can show stale or private data to others
3APIs must always set no-store on every response

Show the answer

Correct answer: Wrong caching can show stale or private data to others

Explanation

A public cache on /me could serve one user's profile to another through a CDN. Private data needs private or no-store.

Further reading

Test yourself

Take the API Testing · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.