Here you're creating a DB record in a GET request.
Generally requests that modify the server's state should use POST or PATCH and GET requests should be idempotent.
You do this correctly in the other create handlers so I guess this was just an oversight!
Here you're creating a DB record in a GET request.
Generally requests that modify the server's state should use POST or PATCH and GET requests should be idempotent.
You do this correctly in the other create handlers so I guess this was just an oversight!