CODE RUB: GetSessions Controller

[davidhayes03]

CLOSES AB#28809

[Copilot]

Pull request overview

Adds a new authenticated GET api/auth/session endpoint to surface current session/claim details and wires it through the NHS Digital API orchestration layer, with accompanying unit, integration, and acceptance test coverage.

Changes:

• Added Session action to AuthController (authorized route) that validates NHS access token presence and returns selected user claims.
• Exposed GetAccessTokenAsync via INhsDigitalApiOrchestrationService and implemented it in NhsDigitalApiOrchestrationService.
• Added new unit/integration/acceptance tests and broker helpers for calling the new session endpoint.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
LondonDataServices.IDecide.Manage.Server/Controllers/AuthController.cs	Adds the new GET session endpoint and returns claim-based session info.
LondonDataServices.IDecide.Manage.Server.Tests.Unit/Controllers/Auth/AuthControllerTests.Session.Logic.cs	Adds unit tests for OK and Unauthorized scenarios for Session.
LondonDataServices.IDecide.Manage.Server.Tests.Unit/Controllers/Auth/AuthControllerTests.Session.Exceptions.cs	Adds unit tests for exception-to-response mappings for Session.
LondonDataServices.IDecide.Manage.Server.Tests.Integration/Brokers/ApiBroker.Auth.cs	Adds broker helper to call GET api/auth/session in integration tests.
LondonDataServices.IDecide.Manage.Server.Tests.Integration/Apis/Auth/AuthApiTests.Session.cs	Adds a basic integration test for Session status code behavior.
LondonDataServices.IDecide.Manage.Server.Tests.Acceptance/Brokers/ApiBroker.Auth.cs	Adds broker helper to call GET api/auth/session in acceptance tests.
LondonDataServices.IDecide.Manage.Server.Tests.Acceptance/Apis/Auth/AuthTests.Session.cs	Adds acceptance tests for OK vs Unauthorized based on mocked access token.
LondonDataServices.IDecide.Core/Services/Orchestrations/NhsDigitalApis/NhsDigitalApiOrchestrationService.cs	Adds orchestration method GetAccessTokenAsync delegating to foundation service with TryCatch.
LondonDataServices.IDecide.Core/Services/Orchestrations/NhsDigitalApis/INhsDigitalApiOrchestrationService.cs	Extends orchestration interface with GetAccessTokenAsync.

[Copilot]

Pull request overview

Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.