feat: MailJet list handling with DOI, webhook receiver and API endpoint

addresses #869cut134

config/packages/security.yaml

@@ -8,6 +8,12 @@ security:
             entity:
                 class: App\Entity\User
                 property: email
+        mailjet_webhook_provider:
+            memory:
+                users:
+                    mailjet:
+                        password: '%env(MAILJET_WEBHOOK_BASIC_PASSWORD_HASH)%'
+                        roles: ['ROLE_MAILJET_WEBHOOK']
     firewalls:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
@@ -19,7 +25,15 @@ security:
             pattern: ^/api
             security: true
             stateless: true
+            provider: app_user_provider
             oauth2: true
+        mailjet_webhook:
+            pattern: ^/webhooks/mailjet/newsletter$
+            security: true
+            stateless: true
+            provider: mailjet_webhook_provider
+            http_basic:
+                realm: 'Mailjet Webhook'
         main:
             lazy: true
             provider: app_user_provider
@@ -32,6 +46,7 @@ security:
     # Easy way to control access for large sections of your site
     # Note: Only the *first* access control that matches will be used
     access_control:
+        - { path: ^/webhooks/mailjet/newsletter$, roles: ROLE_MAILJET_WEBHOOK, requires_channel: https }
         - { path: ^/authorize, roles: IS_AUTHENTICATED_REMEMBERED, requires_channel: https }
         - { path: ^/admin, roles: ROLE_ADMIN, requires_channel: https }
         - { path: ^/, roles: PUBLIC_ACCESS, requires_channel: https }