update api docs

web/backend/API/API.Core/Controllers/NotFoundController.cs

@@ -6,7 +6,6 @@ namespace API.Core.Controllers;
 ///     Handles requests that do not match any other route, used as the application's fallback controller.
 /// </summary>
 /// <remarks>
-///     Excluded from API explorer/Swagger output via <c>[ApiExplorerSettings(IgnoreApi = true)]</c>.
 ///     Wired up as the fallback target via <c>app.MapFallbackToController("Handle404", "NotFound")</c> in
 ///     <c>Program.cs</c>.
 /// </remarks>
@@ -15,10 +14,6 @@ namespace API.Core.Controllers;
 [Route("error")] // required
 public class NotFoundController : ControllerBase
 {
-    /// <summary>
-    ///     Returns a generic 404 response for any request that did not match a defined route.
-    /// </summary>
-    /// <returns>A <c>404 Not Found</c> result with a JSON body containing a "Route not found." message.</returns>
     [HttpGet("404")] //required
     public IActionResult Handle404()
     {

web/backend/API/API.Core/Controllers/ProtectedController.cs

@@ -14,13 +14,9 @@ namespace API.Core.Controllers;
 public class ProtectedController : ControllerBase
 {
     /// <summary>
-    ///     Returns the authenticated caller's user ID and username, extracted from the JWT claims.
+    ///     Returns the authenticated caller's user ID and username extracted from the JWT claims.
     /// </summary>
-    /// <returns>
-    ///     A <c>200 OK</c> result wrapping a <see cref="ResponseBody{T}" /> whose payload contains the
-    ///     caller's <c>userId</c> (from <see cref="ClaimTypes.NameIdentifier" />) and <c>username</c>
-    ///     (from <see cref="ClaimTypes.Name" />), either of which may be <c>null</c> if not present in the token.
-    /// </returns>
+    /// <returns><c>userId</c> and <c>username</c> may be <c>null</c> if not present in the token.</returns>
     [HttpGet]
     public ActionResult<ResponseBody<object>> Get()
     {