Yes, thatβs perfectly acceptable. Each action (POST for the collection, PUT for the resource) when executed without data should create a new "empty" resource. The definition of βemptyβ here will depend on what is presented.
In the specific case of resetting the user's password, however, I would not say that the above model is applied. If there really is a password resource, a PUT without data seems to suggest setting the password as empty, rather than resetting it. For this scenario, I would go with the accepted answer to this question.
cmbuckley
source share