Allow anonymous access to Banners/GetGameServers

Co-authored-by: frasermolyneux <34033625+frasermolyneux@users.noreply.github.com>

Author: Copilot

src/XtremeIdiots.Portal.Web.Tests/ApiControllers/BannersControllerTests.cs

@@ -0,0 +1,27 @@
+using Microsoft.AspNetCore.Authorization;
+using XtremeIdiots.Portal.Web.ApiControllers;
+
+namespace XtremeIdiots.Portal.Web.Tests.ApiControllers;
+
+public class BannersControllerTests
+{
+    [Fact]
+    public void BannersController_HasClassLevelAuthorizeAttribute()
+    {
+        var authorizeAttribute = typeof(BannersController).GetCustomAttributes(typeof(AuthorizeAttribute), true).SingleOrDefault();
+
+        Assert.NotNull(authorizeAttribute);
+    }
+
+    [Fact]
+    public void GetGameServers_HasAllowAnonymousAttribute_OnlyAnonymousActionInController()
+    {
+        var methods = typeof(BannersController).GetMethods();
+        var allowAnonymousMethods = methods
+            .Where(method => method.GetCustomAttributes(typeof(AllowAnonymousAttribute), true).Length > 0)
+            .ToList();
+
+        Assert.Single(allowAnonymousMethods);
+        Assert.Equal(nameof(BannersController.GetGameServers), allowAnonymousMethods[0].Name);
+    }
+}

src/XtremeIdiots.Portal.Web/ApiControllers/BannersController.cs

@@ -48,6 +48,7 @@ public class BannersController(
     /// <param name="cancellationToken">Cancellation token for the request</param>
     /// <returns>List of HTML banner content</returns>
     [HttpGet("GetGameServers")]
+    [AllowAnonymous]
     [EnableCors("CorsPolicy")]
     public async Task<IActionResult> GetGameServers(CancellationToken cancellationToken = default)
     {