For any HTTP or web technology stuff, Mozilla docs are the best authoritative source. So, when you do a google search just prepend MDN to your search query, like, MDN http status code.

• Web API Desing

• Your API-Centric Web App Is Probably Not Safe Against XSS and CSRF

• API design by Microsoft