What is a common mistake with dependency injection in APIs in Web API?

Putting all business logic in controllers or using a service locator creates tight coupling. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.