Add XML documentation across gateway, worker, and .NET client

src/MxGateway.Tests/Security/Authorization/GatewayGrpcAuthorizationInterceptorTests.cs

@@ -9,6 +9,7 @@ namespace MxGateway.Tests.Security.Authorization;
 
 public sealed class GatewayGrpcAuthorizationInterceptorTests
 {
+    /// <summary>Verifies that missing API key returns unauthenticated status.</summary>
     [Fact]
     public async Task UnaryServerHandler_MissingApiKey_ReturnsUnauthenticated()
     {
@@ -27,6 +28,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.DoesNotContain("secret", exception.Status.Detail, StringComparison.OrdinalIgnoreCase);
     }
 
+    /// <summary>Verifies that invalid API key error does not expose raw credentials.</summary>
     [Fact]
     public async Task UnaryServerHandler_InvalidApiKey_DoesNotExposeRawCredentialInStatus()
     {
@@ -44,6 +46,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.DoesNotContain("super-secret", exception.Status.Detail, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that valid key without required scope returns permission denied.</summary>
     [Fact]
     public async Task UnaryServerHandler_ValidApiKeyMissingScope_ReturnsPermissionDenied()
     {
@@ -61,6 +64,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.Contains(GatewayScopes.SessionOpen, exception.Status.Detail, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that valid key with scope sets request identity for the handler.</summary>
     [Fact]
     public async Task UnaryServerHandler_ValidApiKeyWithScope_SetsRequestIdentity()
     {
@@ -86,6 +90,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.Null(identityAccessor.Current);
     }
 
+    /// <summary>Verifies that server stream handler requires proper scope.</summary>
     [Fact]
     public async Task ServerStreamingServerHandler_ValidApiKeyMissingScope_ReturnsPermissionDenied()
     {
@@ -104,6 +109,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.Contains(GatewayScopes.EventsRead, exception.Status.Detail, StringComparison.Ordinal);
     }
 
+    /// <summary>Verifies that server stream handler allows streams with proper scope.</summary>
     [Fact]
     public async Task ServerStreamingServerHandler_ValidApiKeyWithScope_AllowsStream()
     {
@@ -128,6 +134,7 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         Assert.Null(identityAccessor.Current);
     }
 
+    /// <summary>Verifies that disabled authentication skips API key verification.</summary>
     [Fact]
     public async Task UnaryServerHandler_AuthenticationDisabled_SkipsApiKeyVerification()
     {
@@ -183,10 +190,16 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
 
     private sealed class FakeApiKeyVerifier(ApiKeyVerificationResult result) : IApiKeyVerifier
     {
+        /// <summary>Gets whether the verifier was called.</summary>
         public bool WasCalled { get; private set; }
 
+        /// <summary>Gets the last authorization header seen by the verifier.</summary>
         public string? LastAuthorizationHeader { get; private set; }
 
+        /// <summary>Verifies the authorization header against stored result.</summary>
+        /// <param name="authorizationHeader">The authorization header to verify.</param>
+        /// <param name="cancellationToken">Cancellation token.</param>
+        /// <returns>Configured verification result.</returns>
         public Task<ApiKeyVerificationResult> VerifyAsync(
             string? authorizationHeader,
             CancellationToken cancellationToken)
@@ -200,10 +213,15 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
 
     private sealed class TestServerStreamWriter<T> : IServerStreamWriter<T>
     {
+        /// <summary>Gets messages written to the stream.</summary>
         public List<T> Messages { get; } = [];
 
+        /// <summary>Gets or sets write options for the stream.</summary>
         public WriteOptions? WriteOptions { get; set; }
 
+        /// <summary>Writes a message to the stream.</summary>
+        /// <param name="message">The message to write.</param>
+        /// <returns>Task representing the write operation.</returns>
         public Task WriteAsync(T message)
         {
             Messages.Add(message);
@@ -221,43 +239,56 @@ public sealed class GatewayGrpcAuthorizationInterceptorTests
         private Status status;
         private WriteOptions? writeOptions;
 
+        /// <inheritdoc />
         protected override string MethodCore => "/mxaccess_gateway.v1.MxAccessGateway/Test";
 
+        /// <inheritdoc />
         protected override string HostCore => "localhost";
 
+        /// <inheritdoc />
         protected override string PeerCore => "ipv4:127.0.0.1:5000";
 
+        /// <inheritdoc />
         protected override DateTime DeadlineCore => DateTime.UtcNow.AddMinutes(1);
 
+        /// <inheritdoc />
         protected override Metadata RequestHeadersCore => requestHeaders;
 
+        /// <inheritdoc />
         protected override CancellationToken CancellationTokenCore => cancellationToken;
 
+        /// <inheritdoc />
         protected override Metadata ResponseTrailersCore => responseTrailers;
 
+        /// <inheritdoc />
         protected override Status StatusCore
         {
             get => status;
             set => status = value;
         }
 
+        /// <inheritdoc />
         protected override WriteOptions? WriteOptionsCore
         {
             get => writeOptions;
             set => writeOptions = value;
         }
 
+        /// <inheritdoc />
         protected override AuthContext AuthContextCore { get; } = new(
             string.Empty,
             new Dictionary<string, List<AuthProperty>>(StringComparer.Ordinal));
 
+        /// <inheritdoc />
         protected override IDictionary<object, object> UserStateCore => userState;
 
+        /// <inheritdoc />
         protected override Task WriteResponseHeadersAsyncCore(Metadata responseHeaders)
         {
             return Task.CompletedTask;
         }
 
+        /// <inheritdoc />
         protected override ContextPropagationToken CreatePropagationTokenCore(
             ContextPropagationOptions? options)
         {