refactor: single refusal shape with openapi contract test

crates/adapters/http-axum/src/api/import/profiles.rs

@@ -1,3 +1,4 @@
+use crate::extractors::{Body, PathId};
 use crate::{errors::ApiError, extractors::AuthenticatedUser, state::AppState};
 use api_types::SaveProfileRequest;
 use application::import::{
@@ -5,11 +6,7 @@ use application::import::{
     delete_profile as delete_import_profile, list_profiles as list_import_profiles,
     save_profile as save_import_profile,
 };
-use axum::{
-    extract::{Path, State},
-    http::StatusCode,
-    response::IntoResponse,
-};
+use axum::{extract::State, http::StatusCode, response::IntoResponse};
 use domain::errors::DomainError;
 use domain::value_objects::ImportSessionId;
 
@@ -17,7 +14,7 @@ use domain::value_objects::ImportSessionId;
     get, path = "/api/v1/import/profiles",
     responses(
         (status = 200, description = "List of saved import profiles", body = inline(Vec<serde_json::Value>)),
-        (status = 401, description = "Unauthorized"),
+        (status = 401, description = "Unauthorized", body = api_types::ErrorResponse),
     ),
     security(("bearer_auth" = []))
 )]
@@ -46,15 +43,15 @@ pub async fn api_get_profiles(
     request_body = SaveProfileRequest,
     responses(
         (status = 200, description = "Profile saved", body = inline(serde_json::Value)),
-        (status = 401, description = "Unauthorized"),
-        (status = 422, description = "Session has no mapping yet"),
+        (status = 401, description = "Unauthorized", body = api_types::ErrorResponse),
+        (status = 422, description = "Session has no mapping yet", body = api_types::ErrorResponse),
     ),
     security(("bearer_auth" = []))
 )]
 pub async fn api_post_profile(
     State(state): State<AppState>,
     AuthenticatedUser(user_id): AuthenticatedUser,
-    axum::Json(body): axum::Json<SaveProfileRequest>,
+    Body(body): Body<SaveProfileRequest>,
 ) -> Result<impl IntoResponse, ApiError> {
     let session_id = body
         .session_id
@@ -80,15 +77,15 @@ pub async fn api_post_profile(
     params(("id" = String, Path, description = "Import profile UUID")),
     responses(
         (status = 204, description = "Deleted"),
-        (status = 401, description = "Unauthorized"),
-        (status = 404, description = "Profile not found"),
+        (status = 401, description = "Unauthorized", body = api_types::ErrorResponse),
+        (status = 404, description = "Profile not found", body = api_types::ErrorResponse),
     ),
     security(("bearer_auth" = []))
 )]
 pub async fn api_delete_profile(
     State(state): State<AppState>,
     AuthenticatedUser(user_id): AuthenticatedUser,
-    Path(profile_id_str): Path<String>,
+    PathId(profile_id_str): PathId<String>,
 ) -> Result<impl IntoResponse, ApiError> {
     let profile_id = profile_id_str
         .parse::<uuid::Uuid>()