...
Body: none (GET)
Returns:
- 200 OK OK -> IEnumerable<BrightInvoice>
- 400 BadRequest -> DECLARED, never produced (catch commented out)
- 401 Unauthorized -> produced by [Authorize] framework, not by code
- 404 NotFound -> DECLARED, never produced (catch commented out)
- 500 500 -> any thrown exception (validation, SQL, mapping)
...