Three input places
Express gives you request data from three different places. Use req.params for path values, req.query for URL filters, and req.body for data sent in the request body.
Do not use old req.param(name). Express 5 removed it. Being explicit makes your API easier to review in a recruiter repo.
Params are path values
A param is part of the route path. Use it for required identity values, like a student ID, project ID, or internship application ID.
Example: GET /projects/42 should read 42 from req.params.projectId. Query strings do not decide which route matches.