refactor(raps): derive MembersController from ApiController

test/RAPS/RapsControllerAuthorizationTests.cs

@@ -1,6 +1,7 @@
 using System.Reflection;
 using Microsoft.AspNetCore.Authorization;
 using Viper.Areas.RAPS.Controllers;
+using Viper.Classes;
 
 namespace Viper.test.RAPS
 {
@@ -38,6 +39,26 @@ public void EveryRapsController_RequiresARapsRole(Type controller)
             Assert.False(string.IsNullOrEmpty(roles), $"{controller.Name} is missing an [Authorize(Roles = ...)] restriction");
         }
 
+        /// <summary>
+        /// MembersController drifted onto ControllerBase and so missed the ApiController filters:
+        /// it returned bare arrays where every sibling returned the { success, result } envelope,
+        /// and its exceptions skipped the standard error shape and correlation id.
+        /// </summary>
+        [Theory]
+        [MemberData(nameof(RapsControllers))]
+        public void EveryRapsApiController_DerivesFromApiController(Type controller)
+        {
+            // The page controller renders views, so it is an AreaController, not an API controller.
+            if (typeof(AreaController).IsAssignableFrom(controller))
+            {
+                return;
+            }
+
+            Assert.True(typeof(ApiController).IsAssignableFrom(controller),
+                $"{controller.Name} does not derive from ApiController, so it misses [ApiResponse], "
+                + "[ApiExceptionFilter] and [ApiSessionUpdateFilter]");
+        }
+
         [Fact]
         public void RapsControllersAreDiscovered()
         {

web/Areas/RAPS/Controllers/MembersController.cs

@@ -3,6 +3,7 @@
 using Microsoft.EntityFrameworkCore;
 using Viper.Areas.RAPS.Models;
 using Viper.Areas.RAPS.Services;
+using Viper.Classes;
 using Viper.Classes.SQLContext;
 using Web.Authorization;
 
@@ -11,9 +12,8 @@
 namespace Viper.Areas.RAPS.Controllers
 {
     [Route("raps/{Instance=VIPER}/[controller]")]
-    [ApiController]
     [Authorize(Roles = "VMDO SVM-IT,RAPS Users", Policy = "2faAuthentication")]
-    public class MembersController : ControllerBase
+    public class MembersController : ApiController
     {
         private readonly RAPSContext _context;
         private readonly RAPSSecurityService _securityService;

web/Areas/RAPS/Views/Permissions/Members.cshtml

@@ -179,10 +179,9 @@
                     }
 
                     update(() => {
-                        fetch("Members?search=" + val)
-                            .then(r => r.json())
+                        viperFetch(this, "Members?search=" + val)
                             .then(data =>
-                                this.memberSearchResults = data
+                                this.memberSearchResults = (data ?? [])
                                     .map(m => ({ label: m.displayLastName + ", " + m.displayFirstName, value: m.memberId }))
                             )
                     })

web/Areas/RAPS/Views/Roles/Members.cshtml

@@ -172,10 +172,9 @@
                     }
 
                     update(() => {
-                        fetch("Members?search=" + val)
-                            .then(r => r.json())
+                        viperFetch(this, "Members?search=" + val)
                             .then(data =>
-                                this.memberSearchResults = data
+                                this.memberSearchResults = (data ?? [])
                                     .map(m => ({ label: m.displayLastName + ", " + m.displayFirstName, value: m.memberId }))
                             )
                     })