Closed bonnieli closed 3 years ago
Should CREATE be authenticated? Will non-logged-in users be able to create appointments? If yes they need to be authenticated that makes the "email" and "timezone" fields obsolete as we can just link a user to the appointments table with a foreign key. So, should it be unauthenticated instead?