Hi all. I have an API that should be able to GET and DELETE some products.
I've made API and it looks like

// products/[id]/route.ts
import prismadb from '@/lib/prismadb';
import { auth } from '@clerk/nextjs';
import { NextApiRequest } from 'next';
import { NextResponse } from 'next/server';

const allowedMethods = ['GET'];

const handler = async (req: NextApiRequest) => {
  try {
    if (!allowedMethods.includes(req.method!) || req.method === 'OPTIONS') {
      return NextResponse.json(`Method ${req.method} not allowed`, { status: 405 });
    }

    const { userId } = auth();
    if (!userId) return NextResponse.json('Unauthorized', { status: 401 });

    if (!req.query.id) return NextResponse.json('Product id is missing', { status: 400 });

    if (req.method === 'GET') {
      const product = await prismadb.product.findFirst({
        where: {
          id: req.query.id as string,
        },
      });

      return NextResponse.json(product);
    }
  } catch (error) {
    console.log('Server error', error);
    return NextResponse.json('Server error', { status: 500 });
  }
};

export { handler as GET };

but it's not working, I'm getting 500 server error. What am I doing wrong?