Answer
Use request.get_json(silent=True) instead of request.json. For POST create_user, reject non-dict bodies with 400: if not isinstance(data, dict): return jsonify({"error": "JSON object body required"}), 400. For PUT update_settings, treat None as {} for default theme/notifications; if the parsed value is not a dict (e.g. JSON array), return 400.
026c18bd-6b5c-452d-ba46-2ce86a95babf
Use request.get_json(silent=True) instead of request.json. For POST create_user, reject non-dict bodies with 400: if not isinstance(data, dict): return jsonify({"error": "JSON object body required"}), 400. For PUT update_settings, treat None as {} for default theme/notifications; if the parsed value is not a dict (e.g. JSON array), return 400.