What are the best practices for designing RESTful APIs?

• Use resource-based URLs (/users/1/orders) not action-based

(/getUserOrders).

• Return proper status codes (200, 201, 400, 404, 500).
• Support pagination & filtering for large data.
• Implement authentication & authorization (JWT, OAuth2).
• Ensure statelessness.
• Provide versioning (v1, v2).
• Secure API with HTTPS only.