1 /*
2  *  Make.org Core API
3  *  Copyright (C) 2018 Make.org
4  *
5  * This program is free software: you can redistribute it and/or modify
6  *  it under the terms of the GNU Affero General Public License as
7  *  published by the Free Software Foundation, either version 3 of the
8  *  License, or (at your option) any later version.
9  *
10  *  This program is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13  *  GNU Affero General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Affero General Public License
16  *  along with this program.  If not, see <https://www.gnu.org/licenses/>.
17  *
18  */
19 
20 package org.make.api
21 
22 import akka.actor.typed.scaladsl.AskPattern.schedulerFromActorSystem
23 import akka.actor.typed.{ActorRef, SpawnProtocol}
24 import akka.http.scaladsl.model._
25 import akka.http.scaladsl.server._
26 import akka.util.Timeout
27 import buildinfo.BuildInfo
28 import com.typesafe.config.Config
29 import de.heikoseeberger.akkahttpcirce.ErrorAccumulatingCirceSupport
30 import de.heikoseeberger.akkahttpcirce.ErrorAccumulatingCirceSupport.DecodingFailures
31 import enumeratum.NoSuchMember
32 import grizzled.slf4j.Logging
33 import io.circe.CursorOp.DownField
34 import io.circe.syntax._
35 import org.make.api.crmTemplates._
36 import org.make.api.demographics._
37 import org.make.api.extensions._
38 import org.make.api.feature._
39 import org.make.api.idea._
40 import org.make.api.keyword.{DefaultKeywordServiceComponent, DefaultPersistentKeywordServiceComponent}
41 import org.make.api.operation._
42 import org.make.api.organisation._
43 import org.make.api.partner.{
44   AdminPartnerApi,
45   DefaultAdminPartnerApiComponent,
46   DefaultPartnerServiceComponent,
47   DefaultPersistentPartnerServiceComponent
48 }
49 import org.make.api.personality._
50 import org.make.api.post.{DefaultPostSearchEngineComponent, DefaultPostServiceComponent}
51 import org.make.api.proposal._
52 import org.make.api.question._
53 import org.make.api.segment.DefaultSegmentServiceComponent
54 import org.make.api.sequence.SequenceConfigurationActor.SequenceConfigurationActorProtocol
55 import org.make.api.sequence._
56 import org.make.api.sessionhistory.{
57   ConcurrentModification,
58   DefaultSessionHistoryCoordinatorServiceComponent,
59   SessionHistoryCommand,
60   SessionHistoryCoordinator,
61   SessionHistoryCoordinatorComponent
62 }
63 import org.make.api.tag._
64 import org.make.api.tagtype.{
65   DefaultModerationTagTypeApiComponent,
66   DefaultPersistentTagTypeServiceComponent,
67   DefaultTagTypeServiceComponent,
68   ModerationTagTypeApi
69 }
70 import org.make.api.technical.ActorSystemHelper._
71 import org.make.api.technical._
72 import org.make.api.technical.auth._
73 import org.make.api.technical.businessconfig.{ConfigurationsApi, DefaultConfigurationsApiComponent}
74 import org.make.api.technical.crm._
75 import org.make.api.technical.directives.ClientDirectives
76 import org.make.api.technical.elasticsearch.{
77   DefaultElasticSearchApiComponent,
78   DefaultElasticsearchClientComponent,
79   DefaultElasticsearchConfigurationComponent,
80   DefaultIndexationComponent,
81   ElasticSearchApi
82 }
83 import org.make.api.technical.generator.fixtures.{
84   DefaultFixturesApiComponent,
85   DefaultFixturesServiceComponent,
86   FixturesApi
87 }
88 import org.make.api.technical.graphql._
89 import org.make.api.technical.healthcheck._
90 import org.make.api.technical.job._
91 import org.make.api.technical.monitoring.DefaultMonitoringService
92 import org.make.api.technical.security.{
93   DefaultAESEncryptionComponent,
94   DefaultSecurityApiComponent,
95   DefaultSecurityConfigurationComponent,
96   SecurityApi
97 }
98 import org.make.api.technical.storage._
99 import org.make.api.technical.tracking.{DefaultTrackingApiComponent, TrackingApi}
100 import org.make.api.technical.webflow.{DefaultWebflowClientComponent, DefaultWebflowConfigurationComponent}
101 import org.make.api.user.UserExceptions.{EmailAlreadyRegisteredException, EmailNotAllowed}
102 import org.make.api.user._
103 import org.make.api.user.social._
104 import org.make.api.user.validation.DefaultUserRegistrationValidatorComponent
105 import org.make.api.userhistory.{
106   DefaultUserHistoryCoordinatorServiceComponent,
107   UserHistoryCommand,
108   UserHistoryCoordinator,
109   UserHistoryCoordinatorComponent
110 }
111 import org.make.api.views._
112 import org.make.api.widget._
113 import org.make.core.{AvroSerializers, DefaultDateHelperComponent, ValidationError, ValidationFailedError}
114 import scalaoauth2.provider._
115 
116 import scala.concurrent.Await
117 import scala.concurrent.duration.DurationInt
118 
119 trait MakeApi
120     extends ActorSystemComponent
121     with AvroSerializers
122     with BuildInfoRoutes
123     with ClientDirectives
124     with DefaultActiveFeatureServiceComponent
125     with DefaultAdminActiveFeatureApiComponent
126     with DefaultAdminClientApiComponent
127     with DefaultAdminCrmLanguageTemplatesApiComponent
128     with DefaultAdminCrmQuestionTemplatesApiComponent
129     with DefaultAdminDemographicsCardApiComponent
130     with DefaultAdminFeatureApiComponent
131     with DefaultAdminModeratorApiComponent
132     with DefaultAdminDialogueModeratorApiComponent
133     with DefaultAdminOperationApiComponent
134     with DefaultAdminOperationOfQuestionApiComponent
135     with DefaultAdminPartnerApiComponent
136     with DefaultAdminPersonalityApiComponent
137     with DefaultAdminPersonalityRoleApiComponent
138     with DefaultAdminProposalApiComponent
139     with DefaultAdminQuestionPersonalityApiComponent
140     with DefaultAdminSourceApiComponent
141     with DefaultAdminUserApiComponent
142     with DefaultModerationUserApiComponent
143     with DefaultAdminWidgetApiComponent
144     with DefaultAESEncryptionComponent
145     with DefaultAuthenticationApiComponent
146     with DefaultClientServiceComponent
147     with DefaultConfigComponent
148     with DefaultMaxPropositionsThresholdsComponent
149     with DefaultConfigurationsApiComponent
150     with DefaultCrmApiComponent
151     with DefaultCrmClientComponent
152     with DefaultCrmServiceComponent
153     with DefaultCrmTemplatesServiceComponent
154     with DefaultDateHelperComponent
155     with DefaultDemographicsCardServiceComponent
156     with DefaultDownloadServiceComponent
157     with DefaultElasticSearchApiComponent
158     with DefaultElasticsearchClientComponent
159     with DefaultElasticsearchConfigurationComponent
160     with DefaultEventBusServiceComponent
161     with DefaultFacebookApiComponent
162     with DefaultFeatureServiceComponent
163     with DefaultFixturesApiComponent
164     with DefaultFixturesServiceComponent
165     with DefaultGoogleApiComponent
166     with DefaultGraphQLApiComponent
167     with DefaultGraphQLRuntimeComponent
168     with DefaultGraphQLAuthorServiceComponent
169     with DefaultGraphQLIdeaServiceComponent
170     with DefaultGraphQLOrganisationServiceComponent
171     with DefaultGraphQLQuestionServiceComponent
172     with DefaultGraphQLTagServiceComponent
173     with DefaultHomeViewServiceComponent
174     with DefaultHealthCheckApiComponent
175     with DefaultHealthCheckServiceComponent
176     with DefaultIdGeneratorComponent
177     with DefaultIdeaSearchEngineComponent
178     with DefaultIdeaServiceComponent
179     with DefaultIndexationComponent
180     with DefaultJobApiComponent
181     with DefaultJobCoordinatorServiceComponent
182     with DefaultKafkaConfigurationComponent
183     with DefaultKeywordServiceComponent
184     with DefaultMailJetConfigurationComponent
185     with DefaultMailJetTemplateConfigurationComponent
186     with DefaultMakeDataHandlerComponent
187     with DefaultMakeSettingsComponent
188     with DefaultMigrationApiComponent
189     with DefaultModerationIdeaApiComponent
190     with DefaultModerationOperationOfQuestionApiComponent
191     with DefaultModerationOrganisationApiComponent
192     with DefaultModerationProposalApiComponent
193     with DefaultModerationQuestionComponent
194     with DefaultAdminSequenceApiComponent
195     with DefaultModerationTagApiComponent
196     with DefaultModerationTagTypeApiComponent
197     with DefaultMonitoringService
198     with DefaultOauthTokenGeneratorComponent
199     with DefaultOpenIDConnectApiComponent
200     with DefaultOperationOfQuestionSearchEngineComponent
201     with DefaultOperationOfQuestionServiceComponent
202     with DefaultOperationServiceComponent
203     with DefaultOrganisationApiComponent
204     with DefaultOrganisationSearchEngineComponent
205     with DefaultOrganisationServiceComponent
206     with DefaultPartnerServiceComponent
207     with DefaultPersistentActiveFeatureServiceComponent
208     with DefaultPersistentAuthCodeServiceComponent
209     with DefaultPersistentClientServiceComponent
210     with DefaultPersistentCrmLanguageTemplateServiceComponent
211     with DefaultPersistentCrmQuestionTemplateServiceComponent
212     with DefaultPersistentCrmSynchroUserServiceComponent
213     with DefaultPersistentCrmUserServiceComponent
214     with DefaultPersistentDemographicsCardServiceComponent
215     with DefaultPersistentFeatureServiceComponent
216     with DefaultPersistentIdeaServiceComponent
217     with DefaultPersistentKeywordServiceComponent
218     with DefaultPersistentOperationOfQuestionServiceComponent
219     with DefaultPersistentOperationServiceComponent
220     with DefaultPersistentPartnerServiceComponent
221     with DefaultPersistentPersonalityRoleServiceComponent
222     with DefaultPersistentPersonalityRoleFieldServiceComponent
223     with DefaultPersistentQuestionPersonalityServiceComponent
224     with DefaultPersistentQuestionServiceComponent
225     with DefaultPersistentSequenceConfigurationServiceComponent
226     with DefaultPersistentSourceServiceComponent
227     with DefaultPersistentTagServiceComponent
228     with DefaultPersistentTagTypeServiceComponent
229     with DefaultPersistentTokenServiceComponent
230     with DefaultPersistentUserServiceComponent
231     with DefaultPersistentUserProposalsServiceComponent
232     with DefaultPersistentWidgetServiceComponent
233     with DefaultPostSearchEngineComponent
234     with DefaultPostServiceComponent
235     with DefaultQuestionPersonalityServiceComponent
236     with DefaultPersonalityApiComponent
237     with DefaultPersonalityRoleServiceComponent
238     with DefaultPersonalityRoleFieldServiceComponent
239     with DefaultProposalApiComponent
240     with DefaultProposalCoordinatorServiceComponent
241     with DefaultProposalIndexerServiceComponent
242     with DefaultProposalSearchEngineComponent
243     with DefaultProposalServiceComponent
244     with DefaultQuestionApiComponent
245     with DefaultQuestionServiceComponent
246     with DefaultReadJournalComponent
247     with DefaultSecurityApiComponent
248     with DefaultSecurityConfigurationComponent
249     with DefaultSegmentServiceComponent
250     with DefaultSendMailPublisherServiceComponent
251     with DefaultSequenceApiComponent
252     with DefaultSequenceCacheConfigurationComponent
253     with DefaultSequenceCacheManagerServiceComponent
254     with DefaultSequenceConfigurationComponent
255     with DefaultSequenceServiceComponent
256     with DefaultSessionHistoryCoordinatorServiceComponent
257     with DefaultSocialProvidersConfigurationComponent
258     with DefaultSocialServiceComponent
259     with DefaultSourceServiceComponent
260     with DefaultSpawnActorServiceComponent
261     with DefaultStorageConfigurationComponent
262     with DefaultStorageServiceComponent
263     with DefaultSwiftClientComponent
264     with DefaultTagApiComponent
265     with DefaultTagServiceComponent
266     with DefaultTagTypeServiceComponent
267     with DefaultTokenGeneratorComponent
268     with DefaultTrackingApiComponent
269     with DefaultUserProposalsServiceComponent
270     with DefaultUserApiComponent
271     with DefaultUserHistoryCoordinatorServiceComponent
272     with DefaultUserRegistrationValidatorComponent
273     with DefaultUserServiceComponent
274     with DefaultUserTokenGeneratorComponent
275     with DefaultViewApiComponent
276     with DefaultWidgetServiceComponent
277     with DefaultWebflowClientComponent
278     with DefaultWebflowConfigurationComponent
279     with JobCoordinatorComponent
280     with MakeAuthentication
281     with MakeDBExecutionContextComponent
282     with ProposalCoordinatorComponent
283     with SequenceCacheManagerComponent
284     with SequenceConfigurationActorComponent
285     with SessionHistoryCoordinatorComponent
286     with SpawnActorRefComponent
287     with UserHistoryCoordinatorComponent
288     with Logging {
289 
290   implicit val timeout: Timeout = TimeSettings.defaultTimeout
291 
292   override lazy val proposalCoordinator: ActorRef[ProposalCommand] =
293     Await.result(actorSystem.findRefByKey(ProposalCoordinator.Key), atMost = 10.seconds)
294 
295   override lazy val userHistoryCoordinator: ActorRef[UserHistoryCommand] =
296     Await.result(actorSystem.findRefByKey(UserHistoryCoordinator.Key), atMost = 10.seconds)
297 
298   override lazy val sessionHistoryCoordinator: ActorRef[SessionHistoryCommand] =
299     Await.result(actorSystem.findRefByKey(SessionHistoryCoordinator.Key), atMost = 10.seconds)
300 
301   override lazy val jobCoordinator: ActorRef[JobActor.Protocol.Command] = Await.result({
302     actorSystem.findRefByKey(JobCoordinator.Key)
303   }, atMost = 5.seconds)
304 
305   override lazy val spawnActorRef: ActorRef[SpawnProtocol.Command] = Await.result({
306     actorSystem.findRefByKey(MakeGuardian.SpawnActorKey)
307   }, atMost = 5.seconds)
308 
309   override lazy val sequenceCacheManager: ActorRef[SequenceCacheManager.Protocol] = Await.result({
310     actorSystem.findRefByKey(SequenceCacheManager.SequenceCacheActorKey)
311   }, atMost = 5.seconds)
312 
313   override lazy val sequenceConfigurationActor: ActorRef[SequenceConfigurationActorProtocol] = Await.result({
314     actorSystem.findRefByKey(SequenceConfigurationActor.SequenceConfigurationCacheActorKey)
315   }, atMost = 5.seconds)
316 
317   override lazy val readExecutionContext: EC = DatabaseConfigurationExtension(actorSystem).readThreadPool
318   override lazy val writeExecutionContext: EC = DatabaseConfigurationExtension(actorSystem).writeThreadPool
319 
320   override lazy val tokenEndpoint: TokenEndpoint = new TokenEndpoint {
321 
322     private val password: Password = new Password {
323       override val clientCredentialRequired = false
324     }
325 
326     private val reconnect: Reconnect = new Reconnect {
327       override val clientCredentialRequired = false
328     }
329 
330     override val handlers: Map[String, GrantHandler] =
331       Map[String, GrantHandler](
332         OAuthGrantType.AUTHORIZATION_CODE -> new AuthorizationCode,
333         OAuthGrantType.CLIENT_CREDENTIALS -> new ClientCredentials,
334         OAuthGrantType.PASSWORD -> password,
335         OAuthGrantType.REFRESH_TOKEN -> new RefreshToken,
336         Reconnect.RECONNECT_TOKEN -> reconnect
337       )
338   }
339   private lazy val swagger: Route =
340     path("api") {
341       host(s".*${makeSettings.techSwaggerAllowedHost}.*".r) { _ =>
342         parameters("url".?) {
343           case None => redirect(Uri("/api?url=/api-docs/swagger.json"), StatusCodes.PermanentRedirect)
344           case _    => getFromResource(s"META-INF/resources/webjars/swagger-ui/${BuildInfo.swaggerUiVersion}/index.html")
345         }
346       }
347     } ~ getFromResourceDirectory(s"META-INF/resources/webjars/swagger-ui/${BuildInfo.swaggerUiVersion}")
348 
349   private lazy val envDependentApiClasses: Set[Class[_]] =
350     makeSettings.environment match {
351       case "production" => Set.empty[Class[_]]
352       case _            => Set[Class[_]](classOf[FixturesApi])
353     }
354 
355   private lazy val apiClasses: Set[Class[_]] =
356     Set(
357       classOf[AdminActiveFeatureApi],
358       classOf[AdminClientApi],
359       classOf[AdminCrmLanguageTemplatesApi],
360       classOf[AdminCrmQuestionTemplatesApi],
361       classOf[AdminDemographicsCardApi],
362       classOf[AdminFeatureApi],
363       classOf[AdminModeratorApi],
364       classOf[AdminDialogueModeratorApi],
365       classOf[AdminOperationApi],
366       classOf[AdminOperationOfQuestionApi],
367       classOf[AdminPartnerApi],
368       classOf[AdminPersonalityApi],
369       classOf[AdminPersonalityRoleApi],
370       classOf[AdminQuestionPersonalityApi],
371       classOf[AdminProposalApi],
372       classOf[AdminSourceApi],
373       classOf[ModerationUserApi],
374       classOf[AdminUserApi],
375       classOf[AdminWidgetApi],
376       classOf[AuthenticationApi],
377       classOf[ConfigurationsApi],
378       classOf[CrmApi],
379       classOf[ElasticSearchApi],
380       classOf[HealthCheckApi],
381       classOf[JobApi],
382       classOf[MigrationApi],
383       classOf[ModerationIdeaApi],
384       classOf[ModerationOperationOfQuestionApi],
385       classOf[ModerationOrganisationApi],
386       classOf[ModerationProposalApi],
387       classOf[ModerationQuestionApi],
388       classOf[AdminSequenceApi],
389       classOf[ModerationTagApi],
390       classOf[ModerationTagTypeApi],
391       classOf[OrganisationApi],
392       classOf[PersonalityApi],
393       classOf[ProposalApi],
394       classOf[QuestionApi],
395       classOf[SecurityApi],
396       classOf[SequenceApi],
397       classOf[TagApi],
398       classOf[TrackingApi],
399       classOf[UserApi],
400       classOf[ViewApi]
401     ) ++ envDependentApiClasses
402 
403   private lazy val optionsCors: Route = options {
404     corsHeaders() {
405       complete(StatusCodes.OK)
406     }
407   }
408   private lazy val optionsAuthorized: Route =
409     options {
410       corsHeaders() {
411         complete(StatusCodes.OK)
412       }
413     }
414 
415   private lazy val documentation = new MakeDocumentation(apiClasses, makeSettings.Http.ssl).routes
416 
417   lazy val envDependantRoutes: Route =
418     makeSettings.environment match {
419       case "production" => swagger
420       case _            => swagger ~ fixturesApi.routes
421     }
422 
423   lazy val makeRoutes: Route =
424     documentation ~
425       optionsCors ~
426       optionsAuthorized ~
427       buildRoutes ~
428       envDependantRoutes ~
429       adminActiveFeatureApi.routes ~
430       adminClientApi.routes ~
431       adminCrmLanguageTemplatesApi.routes ~
432       adminCrmQuestionTemplatesApi.routes ~
433       adminDemographicsCardApi.routes ~
434       adminFeatureApi.routes ~
435       adminModeratorApi.routes ~
436       adminDialogueModeratorApi.routes ~
437       adminOperationApi.routes ~
438       adminOperationOfQuestionApi.routes ~
439       adminPartnerApi.routes ~
440       adminPersonalityApi.routes ~
441       adminPersonalityRoleApi.routes ~
442       adminProposalApi.routes ~
443       adminQuestionPersonalityApi.routes ~
444       adminSourceApi.routes ~
445       moderationUserApi.routes ~
446       adminUserApi.routes ~
447       adminWidgetApi.routes ~
448       authenticationApi.routes ~
449       configurationsApi.routes ~
450       crmApi.routes ~
451       elasticSearchApi.routes ~
452       graphQLApi.routes ~
453       healthCheckApi.routes ~
454       jobApi.routes ~
455       migrationApi.routes ~
456       moderationIdeaApi.routes ~
457       moderationOperationOfQuestionApi.routes ~
458       moderationOrganisationApi.routes ~
459       moderationProposalApi.routes ~
460       moderationQuestionApi.routes ~
461       adminSequenceApi.routes ~
462       moderationTagApi.routes ~
463       moderationTagTypeApi.routes ~
464       organisationApi.routes ~
465       personalityApi.routes ~
466       proposalApi.routes ~
467       questionApi.routes ~
468       securityApi.routes ~
469       sequenceApi.routes ~
470       tagApi.routes ~
471       trackingApi.routes ~
472       userApi.routes ~
473       viewApi.routes
474 }
475 
476 object MakeApi extends Logging with Directives with ErrorAccumulatingCirceSupport {
477 
478   def defaultError(id: String): String =
479     s"""
480       |{
481       |  "error": "an error occurred, it has been logged with id $id"
482       |}
483     """.stripMargin
484 
485   def exceptionHandler(routeName: String, requestId: String): ExceptionHandler = ExceptionHandler {
486     case e: EmailAlreadyRegisteredException =>
487       complete(StatusCodes.BadRequest -> Seq(ValidationError("email", "already_registered", Option(e.getMessage))))
488     case e: EmailNotAllowed =>
489       complete(StatusCodes.Forbidden -> Seq(ValidationError("email", "not_allowed_to_register", Option(e.getMessage))))
490     case e: SocialProviderException =>
491       complete(StatusCodes.BadRequest -> Seq(ValidationError("token", "invalid_token", Option(e.getMessage))))
492     case ValueNotFoundException(message) => complete(StatusCodes.NotFound -> message)
493     case ValidationFailedError(messages) =>
494       complete(
495         HttpResponse(
496           status = StatusCodes.BadRequest,
497           entity = HttpEntity(ContentTypes.`application/json`, messages.asJson.toString)
498         )
499       )
500     case e: OAuthError =>
501       complete(
502         StatusCodes.getForKey(e.statusCode).getOrElse(StatusCodes.Unauthorized) ->
503           ValidationError("authentication", e.errorType, Some(e.description))
504       )
505     case ConcurrentModification(message) => complete(StatusCodes.Conflict -> message)
506     case TokenAlreadyRefreshed(message)  => complete(StatusCodes.PreconditionFailed -> message)
507     case _: EntityStreamSizeException    => complete(StatusCodes.PayloadTooLarge)
508     case e =>
509       logger.error(s"Error on request $routeName with id $requestId", e)
510       complete(
511         HttpResponse(
512           status = StatusCodes.InternalServerError,
513           entity = HttpEntity(ContentTypes.`application/json`, MakeApi.defaultError(requestId))
514         )
515       )
516   }
517 
518   val rejectionHandler: RejectionHandler = RejectionHandler
519     .newBuilder()
520     .handle {
521       case MalformedRequestContentRejection(_, ValidationFailedError(messages)) =>
522         complete(StatusCodes.BadRequest -> messages)
523       case MalformedRequestContentRejection(_, DecodingFailures(failures)) =>
524         val errors: Seq[ValidationError] = failures.toList.map { failure =>
525           val path = failure.history.collect { case DownField(field) => field }.reverse.mkString(".")
526           failure.message match {
527             case "Missing required field" => ValidationError(path, "mandatory", Some(s"The field [.$path] is missing."))
528             case "Malformed email"        => ValidationError(path, "invalid_email", Some(failure.message))
529             case _                        => ValidationError(path, "malformed", Some(failure.message))
530           }
531         }
532         complete(StatusCodes.BadRequest -> errors)
533       case MalformedRequestContentRejection(_, e) =>
534         complete(StatusCodes.BadRequest -> Seq(ValidationError("unknown", "malformed", Option(e.getMessage))))
535       case MalformedQueryParamRejection(name, _, Some(e: NoSuchMember[_])) =>
536         complete(StatusCodes.BadRequest -> Seq(ValidationError(name, "malformed", Some(e.getMessage))))
537       case MalformedQueryParamRejection(name, msg, _) =>
538         complete(StatusCodes.BadRequest -> Seq(ValidationError(name, "invalid_value", Some(msg))))
539       case EmailNotVerifiedRejection =>
540         complete(
541           StatusCodes.Forbidden ->
542             Seq(ValidationError("unknown", "email_not_verified", Some("Your email must be verified first")))
543         )
544       case OidcAuthenticationNeededRejection(statusCode, config) => complete(statusCode -> config)
545       case GetParametersRejection =>
546         complete(
547           StatusCodes.BadRequest ->
548             Seq(ValidationError("x-get-parameters", "malformed", Some("x-get-parameters contains unwanted values")))
549         )
550     }
551     .result()
552     .withFallback(RejectionHandler.default)
553     .mapRejectionResponse { res =>
554       //TODO: change Content-Type to `application/json`
555       res
556     }
557 
558 }
559 
560 trait DefaultConfigComponent extends ConfigComponent {
561   self: ActorSystemComponent =>
562 
563   override def config: Config = actorSystem.settings.config
564 }