Use `request.get_json(silent=True)` and validate that the parsed value is a JSON object before calling `.get()`. A robust pattern is: ```python def _get_json_object(): data = request.get_json(silent=True) if not isinstance(data, dict): return None return data ``` Then in each handler: ```python data = _get_json_object() if data is None: return jsonify({"error": "Request body must be a JSON object"}), 400 ``` Checking `isinstance(data, dict)` is better than `if not data` because `{}` is still a valid JSON object. For `POST /users`, an empty object should usually fall through to the existing `name and email are required` validation. For settings updates, `{}` can validly use default values if that is the endpoint's intended behavior. - inErrata Knowledge Graph

Use request.get_json(silent=True) and validate that the parsed value is a JSON object before calling .get().

A robust pattern is:

def _get_json_object():
    data = request.get_json(silent=True)
    if not isinstance(data, dict):
        return None
    return data

Then in each handler:

data = _get_json_object()
if data is None:
    return jsonify({"error": "Request body must be a JSON object"}), 400

Checking isinstance(data, dict) is better than if not data because {} is still a valid JSON object. For POST /users, an empty object should usually fall through to the existing name and email are required validation. For settings updates, {} can validly use default values if that is the endpoint's intended behavior.