Add REST API Demo Tests (#2)

* Update test config files.

* Add REST API test methods.

* Clean up formatting in files.

* Update README.md file contents

---------

Co-authored-by: QualityOwl <josh@qualityowl.llc>

Author: QualityOwl

README.md

@@ -1 +1,29 @@
-# demo-rest-api-tests-csharp
+# My REST API Tests Project (C#)
+
+A C# test project demonstrating REST API testing against the [Restful Booker](https://restful-booker.herokuapp.com) public API.
+
+## What is tested
+
+Tests cover three areas of the Restful Booker API:
+
+- **Auth** - token generation via `POST /auth`
+- **Booking** - create, read, update, and delete bookings via `/booking`
+- **Health check** - service availability via `GET /ping`
+
+## Tech stack
+
+- .NET 10 / xUnit
+- FluentAssertions
+- Newtonsoft.Json
+- `HttpClient` via `Microsoft.Extensions.Http`
+- `Microsoft.Extensions.Configuration` for settings and secrets
+
+## Configuration
+
+API credentials are read from `Config/appsettings.json` and can be overridden with environment variables (used in CI).
+
+## Running the tests
+
+```bash
+dotnet test
+```

…Tests/test-cases/AuthController_Tests.cs …ests/Controllers/AuthController_Tests.csRestful.Booker.Api/Restful.Booker.Api.Tests/test-cases/AuthController_Tests.cs renamed to Restful.Booker.Api/Restful.Booker.Api.Tests/Controllers/AuthController_Tests.cs Restful.Booker.Api/Restful.Booker.Api.Tests/test-cases/AuthController_Tests.cs renamed to Restful.Booker.Api/Restful.Booker.Api.Tests/Controllers/AuthController_Tests.cs

@@ -42,7 +42,7 @@ public async Task POST_auth_ValidCredentials_ReturnsToken()
     }
 
     [Fact]
-    public async Task POST_auth_InvalidCredentials_Returns400BadRequest()
+    public async Task POST_auth_InvalidCredentials_Returns200WithReasonMessage()
     {
         // Arrange
         var authRequest = new
@@ -60,8 +60,27 @@ public async Task POST_auth_InvalidCredentials_Returns400BadRequest()
         var response = await _fixture.HttpClient.PostAsync("/auth", content);
         var responseBody = await response.Content.ReadAsStringAsync();
 
-        // Assert
-        response.IsSuccessStatusCode.Should().BeTrue(); // API returns 200 even for bad credentials
+        // Assert - API returns 200 with a reason field instead of a token
+        response.IsSuccessStatusCode.Should().BeTrue();
+        responseBody.Should().Contain("reason");
+        responseBody.Should().Contain("Bad credentials");
+    }
+
+    [Fact]
+    public async Task POST_auth_MissingCredentials_Returns200WithReasonMessage()
+    {
+        // Arrange - send empty body
+        var content = new StringContent(
+            "{}",
+            Encoding.UTF8,
+            "application/json");
+
+        // Act
+        var response = await _fixture.HttpClient.PostAsync("/auth", content);
+        var responseBody = await response.Content.ReadAsStringAsync();
+
+        // Assert - API returns 200 with a reason field instead of a token
+        response.IsSuccessStatusCode.Should().BeTrue();
         responseBody.Should().Contain("reason");
     }
-}
+}