Both approaches are fine, and doable. As a convention I don't think one method per verb in a controller is inherently bad just because they don't share state.

Both approaches are fine, and doable. As a convention I don't think one method per verb in a controller is inherently bad just because they don't share state. Plenty of long running, maintainable projects follow this practice.