1 /*
2  *  Make.org Core API
3  *  Copyright (C) 2018 Make.org
4  *
5  * This program is free software: you can redistribute it and/or modify
6  *  it under the terms of the GNU Affero General Public License as
7  *  published by the Free Software Foundation, either version 3 of the
8  *  License, or (at your option) any later version.
9  *
10  *  This program is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13  *  GNU Affero General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Affero General Public License
16  *  along with this program.  If not, see <https://www.gnu.org/licenses/>.
17  *
18  */
19 
20 package org.make.api
21 
22 import akka.actor.typed.scaladsl.AskPattern.schedulerFromActorSystem
23 import akka.actor.typed.{ActorRef, SpawnProtocol}
24 import akka.http.scaladsl.model._
25 import akka.http.scaladsl.server._
26 import akka.util.Timeout
27 import buildinfo.BuildInfo
28 import com.typesafe.config.Config
29 import de.heikoseeberger.akkahttpcirce.ErrorAccumulatingCirceSupport
30 import de.heikoseeberger.akkahttpcirce.ErrorAccumulatingCirceSupport.DecodingFailures
31 import enumeratum.NoSuchMember
32 import grizzled.slf4j.Logging
33 import io.circe.CursorOp.DownField
34 import io.circe.syntax._
35 import org.make.api.crmTemplates._
36 import org.make.api.demographics._
37 import org.make.api.extensions._
38 import org.make.api.feature._
39 import org.make.api.idea._
40 import org.make.api.keyword.{DefaultKeywordServiceComponent, DefaultPersistentKeywordServiceComponent}
41 import org.make.api.operation._
42 import org.make.api.organisation._
43 import org.make.api.partner.{
44   AdminPartnerApi,
45   DefaultAdminPartnerApiComponent,
46   DefaultPartnerServiceComponent,
47   DefaultPersistentPartnerServiceComponent
48 }
49 import org.make.api.personality._
50 import org.make.api.post.{DefaultPostSearchEngineComponent, DefaultPostServiceComponent}
51 import org.make.api.proposal._
52 import org.make.api.question._
53 import org.make.api.segment.DefaultSegmentServiceComponent
54 import org.make.api.sequence.SequenceConfigurationActor.SequenceConfigurationActorProtocol
55 import org.make.api.sequence._
56 import org.make.api.sessionhistory.{
57   ConcurrentModification,
58   DefaultSessionHistoryCoordinatorServiceComponent,
59   SessionHistoryCommand,
60   SessionHistoryCoordinator,
61   SessionHistoryCoordinatorComponent
62 }
63 import org.make.api.tag._
64 import org.make.api.tagtype.{
65   DefaultModerationTagTypeApiComponent,
66   DefaultPersistentTagTypeServiceComponent,
67   DefaultTagTypeServiceComponent,
68   ModerationTagTypeApi
69 }
70 import org.make.api.technical.ActorSystemHelper._
71 import org.make.api.technical._
72 import org.make.api.technical.auth._
73 import org.make.api.technical.businessconfig.{ConfigurationsApi, DefaultConfigurationsApiComponent}
74 import org.make.api.technical.crm._
75 import org.make.api.technical.directives.ClientDirectives
76 import org.make.api.technical.elasticsearch.{
77   DefaultElasticSearchApiComponent,
78   DefaultElasticsearchClientComponent,
79   DefaultElasticsearchConfigurationComponent,
80   DefaultIndexationComponent,
81   ElasticSearchApi
82 }
83 import org.make.api.technical.generator.fixtures.{
84   DefaultFixturesApiComponent,
85   DefaultFixturesServiceComponent,
86   FixturesApi
87 }
88 import org.make.api.technical.graphql._
89 import org.make.api.technical.healthcheck._
90 import org.make.api.technical.job._
91 import org.make.api.technical.monitoring.DefaultMonitoringService
92 import org.make.api.technical.security.{
93   DefaultAESEncryptionComponent,
94   DefaultSecurityApiComponent,
95   DefaultSecurityConfigurationComponent,
96   SecurityApi
97 }
98 import org.make.api.technical.storage._
99 import org.make.api.technical.tracking.{DefaultTrackingApiComponent, TrackingApi}
100 import org.make.api.technical.webflow.{DefaultWebflowClientComponent, DefaultWebflowConfigurationComponent}
101 import org.make.api.user.UserExceptions.{EmailAlreadyRegisteredException, EmailNotAllowed}
102 import org.make.api.user._
103 import org.make.api.user.social._
104 import org.make.api.user.validation.DefaultUserRegistrationValidatorComponent
105 import org.make.api.userhistory.{
106   DefaultUserHistoryCoordinatorServiceComponent,
107   UserHistoryCommand,
108   UserHistoryCoordinator,
109   UserHistoryCoordinatorComponent
110 }
111 import org.make.api.views._
112 import org.make.api.widget._
113 import org.make.core.{AvroSerializers, DefaultDateHelperComponent, ValidationError, ValidationFailedError}
114 import scalaoauth2.provider._
115 
116 import scala.concurrent.Await
117 import scala.concurrent.duration.DurationInt
118 
119 trait MakeApi
120     extends ActorSystemComponent
121     with AvroSerializers
122     with BuildInfoRoutes
123     with ClientDirectives
124     with DefaultActiveFeatureServiceComponent
125     with DefaultAdminActiveFeatureApiComponent
126     with DefaultAdminClientApiComponent
127     with DefaultAdminCrmLanguageTemplatesApiComponent
128     with DefaultAdminCrmQuestionTemplatesApiComponent
129     with DefaultAdminDemographicsCardApiComponent
130     with DefaultAdminFeatureApiComponent
131     with DefaultAdminModeratorApiComponent
132     with DefaultAdminDialogueModeratorApiComponent
133     with DefaultAdminConsultationModeratorApiComponent
134     with DefaultAdminOperationApiComponent
135     with DefaultAdminOperationOfQuestionApiComponent
136     with DefaultAdminPartnerApiComponent
137     with DefaultAdminPersonalityApiComponent
138     with DefaultAdminPersonalityRoleApiComponent
139     with DefaultAdminProposalApiComponent
140     with DefaultAdminQuestionPersonalityApiComponent
141     with DefaultAdminSourceApiComponent
142     with DefaultAdminUserApiComponent
143     with DefaultModerationUserApiComponent
144     with DefaultAdminWidgetApiComponent
145     with DefaultAESEncryptionComponent
146     with DefaultAuthenticationApiComponent
147     with DefaultClientServiceComponent
148     with DefaultConfigComponent
149     with DefaultMaxPropositionsThresholdsComponent
150     with DefaultConfigurationsApiComponent
151     with DefaultCrmApiComponent
152     with DefaultCrmClientComponent
153     with DefaultCrmServiceComponent
154     with DefaultCrmTemplatesServiceComponent
155     with DefaultDateHelperComponent
156     with DefaultDemographicsCardServiceComponent
157     with DefaultDownloadServiceComponent
158     with DefaultElasticSearchApiComponent
159     with DefaultElasticsearchClientComponent
160     with DefaultElasticsearchConfigurationComponent
161     with DefaultEventBusServiceComponent
162     with DefaultFacebookApiComponent
163     with DefaultFeatureServiceComponent
164     with DefaultFixturesApiComponent
165     with DefaultFixturesServiceComponent
166     with DefaultGoogleApiComponent
167     with DefaultGraphQLApiComponent
168     with DefaultGraphQLRuntimeComponent
169     with DefaultGraphQLAuthorServiceComponent
170     with DefaultGraphQLIdeaServiceComponent
171     with DefaultGraphQLOrganisationServiceComponent
172     with DefaultGraphQLQuestionServiceComponent
173     with DefaultGraphQLTagServiceComponent
174     with DefaultHomeViewServiceComponent
175     with DefaultHealthCheckApiComponent
176     with DefaultHealthCheckServiceComponent
177     with DefaultIdGeneratorComponent
178     with DefaultIdeaSearchEngineComponent
179     with DefaultIdeaServiceComponent
180     with DefaultIndexationComponent
181     with DefaultJobApiComponent
182     with DefaultJobCoordinatorServiceComponent
183     with DefaultKafkaConfigurationComponent
184     with DefaultKeywordServiceComponent
185     with DefaultMailJetConfigurationComponent
186     with DefaultMailJetTemplateConfigurationComponent
187     with DefaultMakeDataHandlerComponent
188     with DefaultMakeSettingsComponent
189     with DefaultMigrationApiComponent
190     with DefaultModerationIdeaApiComponent
191     with DefaultModerationOperationOfQuestionApiComponent
192     with DefaultModerationOrganisationApiComponent
193     with DefaultModerationProposalApiComponent
194     with DefaultModerationQuestionComponent
195     with DefaultAdminSequenceApiComponent
196     with DefaultModerationTagApiComponent
197     with DefaultModerationTagTypeApiComponent
198     with DefaultMonitoringService
199     with DefaultOauthTokenGeneratorComponent
200     with DefaultOpenIDConnectApiComponent
201     with DefaultOperationOfQuestionSearchEngineComponent
202     with DefaultOperationOfQuestionServiceComponent
203     with DefaultOperationServiceComponent
204     with DefaultOrganisationApiComponent
205     with DefaultOrganisationSearchEngineComponent
206     with DefaultOrganisationServiceComponent
207     with DefaultPartnerServiceComponent
208     with DefaultPersistentActiveFeatureServiceComponent
209     with DefaultPersistentAuthCodeServiceComponent
210     with DefaultPersistentClientServiceComponent
211     with DefaultPersistentCrmLanguageTemplateServiceComponent
212     with DefaultPersistentCrmQuestionTemplateServiceComponent
213     with DefaultPersistentCrmSynchroUserServiceComponent
214     with DefaultPersistentCrmUserServiceComponent
215     with DefaultPersistentDemographicsCardServiceComponent
216     with DefaultPersistentFeatureServiceComponent
217     with DefaultPersistentIdeaServiceComponent
218     with DefaultPersistentKeywordServiceComponent
219     with DefaultPersistentOperationOfQuestionServiceComponent
220     with DefaultPersistentOperationServiceComponent
221     with DefaultPersistentPartnerServiceComponent
222     with DefaultPersistentPersonalityRoleServiceComponent
223     with DefaultPersistentPersonalityRoleFieldServiceComponent
224     with DefaultPersistentQuestionPersonalityServiceComponent
225     with DefaultPersistentQuestionServiceComponent
226     with DefaultPersistentSequenceConfigurationServiceComponent
227     with DefaultPersistentSourceServiceComponent
228     with DefaultPersistentTagServiceComponent
229     with DefaultPersistentTagTypeServiceComponent
230     with DefaultPersistentTokenServiceComponent
231     with DefaultPersistentUserServiceComponent
232     with DefaultPersistentUserProposalsServiceComponent
233     with DefaultPersistentWidgetServiceComponent
234     with DefaultPostSearchEngineComponent
235     with DefaultPostServiceComponent
236     with DefaultQuestionPersonalityServiceComponent
237     with DefaultPersonalityApiComponent
238     with DefaultPersonalityRoleServiceComponent
239     with DefaultPersonalityRoleFieldServiceComponent
240     with DefaultProposalApiComponent
241     with DefaultProposalCoordinatorServiceComponent
242     with DefaultProposalIndexerServiceComponent
243     with DefaultProposalSearchEngineComponent
244     with DefaultProposalServiceComponent
245     with DefaultQuestionApiComponent
246     with DefaultQuestionServiceComponent
247     with DefaultReadJournalComponent
248     with DefaultSecurityApiComponent
249     with DefaultSecurityConfigurationComponent
250     with DefaultSegmentServiceComponent
251     with DefaultSendMailPublisherServiceComponent
252     with DefaultSequenceApiComponent
253     with DefaultSequenceCacheConfigurationComponent
254     with DefaultSequenceCacheManagerServiceComponent
255     with DefaultSequenceConfigurationComponent
256     with DefaultSequenceServiceComponent
257     with DefaultSessionHistoryCoordinatorServiceComponent
258     with DefaultSocialProvidersConfigurationComponent
259     with DefaultSocialServiceComponent
260     with DefaultSourceServiceComponent
261     with DefaultSpawnActorServiceComponent
262     with DefaultStorageConfigurationComponent
263     with DefaultStorageServiceComponent
264     with DefaultSwiftClientComponent
265     with DefaultTagApiComponent
266     with DefaultTagServiceComponent
267     with DefaultTagTypeServiceComponent
268     with DefaultTokenGeneratorComponent
269     with DefaultTrackingApiComponent
270     with DefaultUserProposalsServiceComponent
271     with DefaultUserApiComponent
272     with DefaultUserHistoryCoordinatorServiceComponent
273     with DefaultUserRegistrationValidatorComponent
274     with DefaultUserServiceComponent
275     with DefaultUserTokenGeneratorComponent
276     with DefaultViewApiComponent
277     with DefaultWidgetServiceComponent
278     with DefaultWebflowClientComponent
279     with DefaultWebflowConfigurationComponent
280     with JobCoordinatorComponent
281     with MakeAuthentication
282     with MakeDBExecutionContextComponent
283     with ProposalCoordinatorComponent
284     with SequenceCacheManagerComponent
285     with SequenceConfigurationActorComponent
286     with SessionHistoryCoordinatorComponent
287     with SpawnActorRefComponent
288     with UserHistoryCoordinatorComponent
289     with Logging {
290 
291   implicit val timeout: Timeout = TimeSettings.defaultTimeout
292 
293   override lazy val proposalCoordinator: ActorRef[ProposalCommand] =
294     Await.result(actorSystem.findRefByKey(ProposalCoordinator.Key), atMost = 10.seconds)
295 
296   override lazy val userHistoryCoordinator: ActorRef[UserHistoryCommand] =
297     Await.result(actorSystem.findRefByKey(UserHistoryCoordinator.Key), atMost = 10.seconds)
298 
299   override lazy val sessionHistoryCoordinator: ActorRef[SessionHistoryCommand] =
300     Await.result(actorSystem.findRefByKey(SessionHistoryCoordinator.Key), atMost = 10.seconds)
301 
302   override lazy val jobCoordinator: ActorRef[JobActor.Protocol.Command] = Await.result({
303     actorSystem.findRefByKey(JobCoordinator.Key)
304   }, atMost = 5.seconds)
305 
306   override lazy val spawnActorRef: ActorRef[SpawnProtocol.Command] = Await.result({
307     actorSystem.findRefByKey(MakeGuardian.SpawnActorKey)
308   }, atMost = 5.seconds)
309 
310   override lazy val sequenceCacheManager: ActorRef[SequenceCacheManager.Protocol] = Await.result({
311     actorSystem.findRefByKey(SequenceCacheManager.SequenceCacheActorKey)
312   }, atMost = 5.seconds)
313 
314   override lazy val sequenceConfigurationActor: ActorRef[SequenceConfigurationActorProtocol] = Await.result({
315     actorSystem.findRefByKey(SequenceConfigurationActor.SequenceConfigurationCacheActorKey)
316   }, atMost = 5.seconds)
317 
318   override lazy val readExecutionContext: EC = DatabaseConfigurationExtension(actorSystem).readThreadPool
319   override lazy val writeExecutionContext: EC = DatabaseConfigurationExtension(actorSystem).writeThreadPool
320 
321   override lazy val tokenEndpoint: TokenEndpoint = new TokenEndpoint {
322 
323     private val password: Password = new Password {
324       override val clientCredentialRequired = false
325     }
326 
327     private val reconnect: Reconnect = new Reconnect {
328       override val clientCredentialRequired = false
329     }
330 
331     override val handlers: Map[String, GrantHandler] =
332       Map[String, GrantHandler](
333         OAuthGrantType.AUTHORIZATION_CODE -> new AuthorizationCode,
334         OAuthGrantType.CLIENT_CREDENTIALS -> new ClientCredentials,
335         OAuthGrantType.PASSWORD -> password,
336         OAuthGrantType.REFRESH_TOKEN -> new RefreshToken,
337         Reconnect.RECONNECT_TOKEN -> reconnect
338       )
339   }
340   private lazy val swagger: Route =
341     path("api") {
342       host(s".*${makeSettings.techSwaggerAllowedHost}.*".r) { _ =>
343         parameters("url".?) {
344           case None => redirect(Uri("/api?url=/api-docs/swagger.json"), StatusCodes.PermanentRedirect)
345           case _    => getFromResource(s"META-INF/resources/webjars/swagger-ui/${BuildInfo.swaggerUiVersion}/index.html")
346         }
347       }
348     } ~ getFromResourceDirectory(s"META-INF/resources/webjars/swagger-ui/${BuildInfo.swaggerUiVersion}")
349 
350   private lazy val envDependentApiClasses: Set[Class[_]] =
351     makeSettings.environment match {
352       case "production" => Set.empty[Class[_]]
353       case _            => Set[Class[_]](classOf[FixturesApi])
354     }
355 
356   private lazy val apiClasses: Set[Class[_]] =
357     Set(
358       classOf[AdminActiveFeatureApi],
359       classOf[AdminClientApi],
360       classOf[AdminCrmLanguageTemplatesApi],
361       classOf[AdminCrmQuestionTemplatesApi],
362       classOf[AdminDemographicsCardApi],
363       classOf[AdminFeatureApi],
364       classOf[AdminModeratorApi],
365       classOf[AdminDialogueModeratorApi],
366       classOf[AdminConsultationModeratorApi],
367       classOf[AdminOperationApi],
368       classOf[AdminOperationOfQuestionApi],
369       classOf[AdminPartnerApi],
370       classOf[AdminPersonalityApi],
371       classOf[AdminPersonalityRoleApi],
372       classOf[AdminQuestionPersonalityApi],
373       classOf[AdminProposalApi],
374       classOf[AdminSourceApi],
375       classOf[ModerationUserApi],
376       classOf[AdminUserApi],
377       classOf[AdminWidgetApi],
378       classOf[AuthenticationApi],
379       classOf[ConfigurationsApi],
380       classOf[CrmApi],
381       classOf[ElasticSearchApi],
382       classOf[HealthCheckApi],
383       classOf[JobApi],
384       classOf[MigrationApi],
385       classOf[ModerationIdeaApi],
386       classOf[ModerationOperationOfQuestionApi],
387       classOf[ModerationOrganisationApi],
388       classOf[ModerationProposalApi],
389       classOf[ModerationQuestionApi],
390       classOf[AdminSequenceApi],
391       classOf[ModerationTagApi],
392       classOf[ModerationTagTypeApi],
393       classOf[OrganisationApi],
394       classOf[PersonalityApi],
395       classOf[ProposalApi],
396       classOf[QuestionApi],
397       classOf[SecurityApi],
398       classOf[SequenceApi],
399       classOf[TagApi],
400       classOf[TrackingApi],
401       classOf[UserApi],
402       classOf[ViewApi]
403     ) ++ envDependentApiClasses
404 
405   private lazy val optionsCors: Route = options {
406     corsHeaders() {
407       complete(StatusCodes.OK)
408     }
409   }
410   private lazy val optionsAuthorized: Route =
411     options {
412       corsHeaders() {
413         complete(StatusCodes.OK)
414       }
415     }
416 
417   private lazy val documentation = new MakeDocumentation(apiClasses, makeSettings.Http.ssl).routes
418 
419   lazy val envDependantRoutes: Route =
420     makeSettings.environment match {
421       case "production" => swagger
422       case _            => swagger ~ fixturesApi.routes
423     }
424 
425   lazy val makeRoutes: Route =
426     documentation ~
427       optionsCors ~
428       optionsAuthorized ~
429       buildRoutes ~
430       envDependantRoutes ~
431       adminActiveFeatureApi.routes ~
432       adminClientApi.routes ~
433       adminCrmLanguageTemplatesApi.routes ~
434       adminCrmQuestionTemplatesApi.routes ~
435       adminDemographicsCardApi.routes ~
436       adminFeatureApi.routes ~
437       adminModeratorApi.routes ~
438       adminDialogueModeratorApi.routes ~
439       adminConsultationModeratorApi.routes ~
440       adminOperationApi.routes ~
441       adminOperationOfQuestionApi.routes ~
442       adminPartnerApi.routes ~
443       adminPersonalityApi.routes ~
444       adminPersonalityRoleApi.routes ~
445       adminProposalApi.routes ~
446       adminQuestionPersonalityApi.routes ~
447       adminSourceApi.routes ~
448       moderationUserApi.routes ~
449       adminUserApi.routes ~
450       adminWidgetApi.routes ~
451       authenticationApi.routes ~
452       configurationsApi.routes ~
453       crmApi.routes ~
454       elasticSearchApi.routes ~
455       graphQLApi.routes ~
456       healthCheckApi.routes ~
457       jobApi.routes ~
458       migrationApi.routes ~
459       moderationIdeaApi.routes ~
460       moderationOperationOfQuestionApi.routes ~
461       moderationOrganisationApi.routes ~
462       moderationProposalApi.routes ~
463       moderationQuestionApi.routes ~
464       adminSequenceApi.routes ~
465       moderationTagApi.routes ~
466       moderationTagTypeApi.routes ~
467       organisationApi.routes ~
468       personalityApi.routes ~
469       proposalApi.routes ~
470       questionApi.routes ~
471       securityApi.routes ~
472       sequenceApi.routes ~
473       tagApi.routes ~
474       trackingApi.routes ~
475       userApi.routes ~
476       viewApi.routes
477 }
478 
479 object MakeApi extends Logging with Directives with ErrorAccumulatingCirceSupport {
480 
481   def defaultError(id: String): String =
482     s"""
483       |{
484       |  "error": "an error occurred, it has been logged with id $id"
485       |}
486     """.stripMargin
487 
488   def exceptionHandler(routeName: String, requestId: String): ExceptionHandler = ExceptionHandler {
489     case e: EmailAlreadyRegisteredException =>
490       complete(StatusCodes.BadRequest -> Seq(ValidationError("email", "already_registered", Option(e.getMessage))))
491     case e: EmailNotAllowed =>
492       complete(StatusCodes.Forbidden -> Seq(ValidationError("email", "not_allowed_to_register", Option(e.getMessage))))
493     case e: SocialProviderException =>
494       complete(StatusCodes.BadRequest -> Seq(ValidationError("token", "invalid_token", Option(e.getMessage))))
495     case ValueNotFoundException(message) => complete(StatusCodes.NotFound -> message)
496     case ValidationFailedError(messages) =>
497       complete(
498         HttpResponse(
499           status = StatusCodes.BadRequest,
500           entity = HttpEntity(ContentTypes.`application/json`, messages.asJson.toString)
501         )
502       )
503     case e: OAuthError =>
504       complete(
505         StatusCodes.getForKey(e.statusCode).getOrElse(StatusCodes.Unauthorized) ->
506           ValidationError("authentication", e.errorType, Some(e.description))
507       )
508     case ConcurrentModification(message) => complete(StatusCodes.Conflict -> message)
509     case TokenAlreadyRefreshed(message)  => complete(StatusCodes.PreconditionFailed -> message)
510     case _: EntityStreamSizeException    => complete(StatusCodes.PayloadTooLarge)
511     case e =>
512       logger.error(s"Error on request $routeName with id $requestId", e)
513       complete(
514         HttpResponse(
515           status = StatusCodes.InternalServerError,
516           entity = HttpEntity(ContentTypes.`application/json`, MakeApi.defaultError(requestId))
517         )
518       )
519   }
520 
521   val rejectionHandler: RejectionHandler = RejectionHandler
522     .newBuilder()
523     .handle {
524       case MalformedRequestContentRejection(_, ValidationFailedError(messages)) =>
525         complete(StatusCodes.BadRequest -> messages)
526       case MalformedRequestContentRejection(_, DecodingFailures(failures)) =>
527         val errors: Seq[ValidationError] = failures.toList.map { failure =>
528           val path = failure.history.collect { case DownField(field) => field }.reverse.mkString(".")
529           failure.message match {
530             case "Missing required field" => ValidationError(path, "mandatory", Some(s"The field [.$path] is missing."))
531             case "Malformed email"        => ValidationError(path, "invalid_email", Some(failure.message))
532             case _                        => ValidationError(path, "malformed", Some(failure.message))
533           }
534         }
535         complete(StatusCodes.BadRequest -> errors)
536       case MalformedRequestContentRejection(_, e) =>
537         complete(StatusCodes.BadRequest -> Seq(ValidationError("unknown", "malformed", Option(e.getMessage))))
538       case MalformedQueryParamRejection(name, _, Some(e: NoSuchMember[_])) =>
539         complete(StatusCodes.BadRequest -> Seq(ValidationError(name, "malformed", Some(e.getMessage))))
540       case MalformedQueryParamRejection(name, msg, _) =>
541         complete(StatusCodes.BadRequest -> Seq(ValidationError(name, "invalid_value", Some(msg))))
542       case EmailNotVerifiedRejection =>
543         complete(
544           StatusCodes.Forbidden ->
545             Seq(ValidationError("unknown", "email_not_verified", Some("Your email must be verified first")))
546         )
547       case OidcAuthenticationNeededRejection(statusCode, config) => complete(statusCode -> config)
548       case GetParametersRejection =>
549         complete(
550           StatusCodes.BadRequest ->
551             Seq(ValidationError("x-get-parameters", "malformed", Some("x-get-parameters contains unwanted values")))
552         )
553     }
554     .result()
555     .withFallback(RejectionHandler.default)
556     .mapRejectionResponse { res =>
557       //TODO: change Content-Type to `application/json`
558       res
559     }
560 
561 }
562 
563 trait DefaultConfigComponent extends ConfigComponent {
564   self: ActorSystemComponent =>
565 
566   override def config: Config = actorSystem.settings.config
567 }