From dcfeb4f4dec08af75419aa9b8d517cc83a6c012b Mon Sep 17 00:00:00 2001 From: EchoCow Date: Tue, 7 Jan 2020 16:17:56 +0800 Subject: [PATCH 01/16] :sparkles: Add spring-boot-demo-oauth-authorization-server. --- pom.xml | 14 + spring-boot-demo-oauth/pom.xml | 52 +++- .../README.adoc | 273 ++++++++++++++++++ .../image/Code.png | Bin 0 -> 29672 bytes .../image/Confirm.png | Bin 0 -> 22681 bytes .../image/Login.png | Bin 0 -> 22048 bytes .../image/Logout.png | Bin 0 -> 24467 bytes .../pom.xml | 15 + .../oauth/SpringBootDemoOauthApplication.java | 3 +- .../config/ClientLoginFailureHandler.java | 31 ++ .../config/ClientLogoutSuccessHandler.java | 30 ++ .../Oauth2AuthorizationServerConfig.java | 54 ++++ .../Oauth2AuthorizationTokenConfig.java | 74 +++++ .../oauth/config/WebSecurityConfig.java | 54 ++++ .../xkcoding/oauth/config/package-info.java | 22 ++ .../controller/AuthorizationController.java | 43 +++ .../oauth/controller/Oauth2Controller.java | 55 ++++ .../oauth/controller/package-info.java | 14 + .../oauth/entity/SysClientDetails.java | 191 ++++++++++++ .../com/xkcoding/oauth/entity/SysRole.java | 49 ++++ .../com/xkcoding/oauth/entity/SysUser.java | 55 ++++ .../SysClientDetailsRepository.java | 33 +++ .../oauth/repostiory/SysUserRepository.java | 24 ++ .../service/SysClientDetailsService.java | 67 +++++ .../oauth/service/SysUserService.java | 59 ++++ .../impl/SysClientDetailsServiceImpl.java | 73 +++++ .../service/impl/SysUserServiceImpl.java | 76 +++++ .../xkcoding/oauth/service/package-info.java | 7 + .../src/main/resources/application.yml | 22 ++ .../src/main/resources/oauth2.jks | Bin 0 -> 2559 bytes .../src/main/resources/public.txt | 9 + .../resources/templates/authorization.html | 55 ++++ .../resources/templates/common/common.html | 33 +++ .../src/main/resources/templates/error.html | 45 +++ .../src/main/resources/templates/login.html | 110 +++++++ .../src/main/resources/templates/logout.html | 44 +++ .../resources/templates/registerTemplate.html | 155 ++++++++++ .../xkcoding/oauth/PasswordEncodeTest.java | 22 ++ .../oauth/AuthorizationCodeGrantTests.java | 125 ++++++++ .../oauth/oauth/AuthorizationServerInfo.java | 94 ++++++ .../ResourceOwnerPasswordGrantTests.java | 39 +++ .../repostiory/SysClientDetailsTest.java | 26 ++ .../repostiory/SysUserRepositoryTest.java | 40 +++ .../src/test/resources/application.yml | 21 ++ .../src/test/resources/import.sql | 10 + .../src/test/resources/schema.sql | 40 +++ .../src/main/resources/application.yml | 4 - .../SpringBootDemoOauthApplicationTests.java | 17 -- 48 files changed, 2256 insertions(+), 23 deletions(-) create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Confirm.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml rename spring-boot-demo-oauth/{ => spring-boot-demo-oauth-authorization-server}/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java (90%) create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/public.txt create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/authorization.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql delete mode 100644 spring-boot-demo-oauth/src/main/resources/application.yml delete mode 100644 spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java diff --git a/pom.xml b/pom.xml index 64089db87..8311573dd 100644 --- a/pom.xml +++ b/pom.xml @@ -86,6 +86,20 @@ 1.20 + + + aliyun + aliyun + https://maven.aliyun.com/repository/public + + true + + + false + + + + diff --git a/spring-boot-demo-oauth/pom.xml b/spring-boot-demo-oauth/pom.xml index 8ad7b24a6..724e86acc 100644 --- a/spring-boot-demo-oauth/pom.xml +++ b/spring-boot-demo-oauth/pom.xml @@ -5,7 +5,10 @@ spring-boot-demo-oauth 1.0.0-SNAPSHOT - jar + + spring-boot-demo-oauth-authorization-server + + pom spring-boot-demo-oauth Demo project for Spring Boot @@ -28,10 +31,49 @@ spring-boot-starter-web + + org.springframework.boot + spring-boot-starter-security + + + + org.springframework.boot + spring-boot-starter-thymeleaf + + + + org.springframework.boot + spring-boot-starter-data-jpa + + + + org.springframework.security.oauth.boot + spring-security-oauth2-autoconfigure + ${spring.boot.version} + + + + mysql + mysql-connector-java + runtime + + + + com.h2database + h2 + test + + org.springframework.boot spring-boot-starter-test test + + + junit + junit + + @@ -44,6 +86,14 @@ lombok true + + + org.junit.jupiter + junit-jupiter + 5.5.2 + test + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc new file mode 100644 index 000000000..1fee06026 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc @@ -0,0 +1,273 @@ += spring-boot-demo-oauth-authorization-server +Doc Writer +v1.0, 2019-01-07 +:toc: + +spring boot oauth2 授权服务器， + +- 授权码模式、密码模式、刷新令牌 +- 自定义 UserDetailService +- 自定义 ClientDetailService +- jwt 非对称加密 +- 自定义登录授权页面 + +> SQL 语句 +> +> - DDL： `src/test/resources/schema.sql` +> - DML： `src/test/resources/import.sql` + +测试用例使用 h2 数据库，测试数据如下： + +.测试客户端 +|=== +|客户端 id |客户端密钥 |资源服务器名称 |授权类型 | scopes| 回调地址 + +|oauth2 +|oauth2 +|oauth2 +|authorization_code,password,refresh_token +|READ,WRITE +|http://example.com + +|test +|oauth2 +|oauth2 +|authorization_code,password,refresh_token +|READ +|http://example.com + + +|error +|oauth2 +|test +|authorization_code,password,refresh_token +|READ +|http://example.com +|=== + +.测试用户 +|=== +|用户名 |密码 |角色 + +|admin +|123456 +|ROLE_ADMIN + +|test +|123456 +|ROLE_TEST + +|=== + +== 授权码模式 + +> 测试用例：`com.xkcoding.oauth.oauth.AuthorizationCodeGrantTests` + +=== 获取授权码 + +- 请求地址： http://localhost:8080/oauth/authorize?response_type=code&client_id=oauth2&redirect_uri=http://example.com&scope=READ +- 用户名：admin +- 密码：123456 + +image::image/Login.png[login] + +=== 确认授权 + +登录成功以后，进入确认授权页面。已经确认过的用户，不会再次要求确认。 + +image::image/Confirm.png[confirm] + +确认授权后，获取授权码 + +image::image/Code.png[code] + +=== 请求 token + +使用以下代码可以直接请求 token + +[shell] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'grant_type=authorization_code' \ +--data-urlencode 'code=GgX6QD' \ +--data-urlencode 'redirect_uri=http://example.com' \ +--data-urlencode 'client_id=oauth2' \ +--data-urlencode 'scope=READ WRITE' +---- + +得到 token + +[token] +---- +{ + "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiZjAyMDhiNTUtYTJjYS00NjI4LTg5YjEtNzI5MzY4MzAxOWNhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.RqJpsin6bMnwI57cGpODTplLeW_gtNWHo_l4SimyRLsnxpCWm5oY1EOb4qVHpXvCbhNsUj69D462P7le13OOmexysZIQhaoGZ_CbIlEp63XsCnr5nSKeX3dgQlyTUDjOUL0WUtY2lKqLCGMeX_rpVhfmSh3b7MC0Ntxq5ao-943QMXGRIeRvJgSkvfY2HBN6-zx1H6rE0wxnUfBC1M08kUkFYlSmsFchiz-E_oTzJvE2D8lA9g-eEFU6cZ_els4Q77Vvc_O6SXUZ7o65vFyLyUjLvh9QF1825SGIUUdXTUYSZjnSAXChhRIAT5pLRHK-gthIzpOaWrgj6ebUoG02Eg", + "token_type": "bearer", + "refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJhdGkiOiJmMDIwOGI1NS1hMmNhLTQ2MjgtODliMS03MjkzNjgzMDE5Y2EiLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiMGViNTU2MTQtYjgxYS00MTFmLTg1MTAtZThkMjZmODJmMjJhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.CBGcjirkf-3187SgbZr0ikauiCS8U9YLaoR4sNlRQjd-gaIeF5PChnIs_yAmG_VpqPFlPRdSl8DA05S2QnFpT3TkRjyP-LPDZgsVAPfczMAdVywU1zOKYZeq-gM6p9bmGEabbZoBlIxOImsjeyFSCui6UtRTZjNlj3AhGIzvs52T8bDqC796iHPDZvJ97MMgsEiRyu-mxDm1o1LMuBX9RHCx9rAkBVf52q36bqWMcYAlDOu1wYjpmhalSLZyWcmraQvClEitXGJI4eTFapTnuXQuWFIL-973V_5Shw98-bk65zZQOEheazHrUf-n4h-sYT4akehnYSVxX2UIg9XsCw", + "expires_in": 5999, + "scope": "READ", + "jti": "f0208b55-a2ca-4628-89b1-7293683019ca" +} +---- + +== 密码模式 + +> 测试用例：`com.xkcoding.oauth.oauth.ResourceOwnerPasswordGrantTests` + +`test` 用户进行授权 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'password=123456' \ +--data-urlencode 'username=test' \ +--data-urlencode 'grant_type=password' \ +--data-urlencode 'scope=READ WRITE' +---- + +== 刷新令牌 + +携带 `refresh_token` 去请求 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'grant_type=refresh_token' \ +--data-urlencode 'refresh_token=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJhdGkiOiJmMDIwOGI1NS1hMmNhLTQ2MjgtODliMS03MjkzNjgzMDE5Y2EiLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiMGViNTU2MTQtYjgxYS00MTFmLTg1MTAtZThkMjZmODJmMjJhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.CBGcjirkf-3187SgbZr0ikauiCS8U9YLaoR4sNlRQjd-gaIeF5PChnIs_yAmG_VpqPFlPRdSl8DA05S2QnFpT3TkRjyP-LPDZgsVAPfczMAdVywU1zOKYZeq-gM6p9bmGEabbZoBlIxOImsjeyFSCui6UtRTZjNlj3AhGIzvs52T8bDqC796iHPDZvJ97MMgsEiRyu-mxDm1o1LMuBX9RHCx9rAkBVf52q36bqWMcYAlDOu1wYjpmhalSLZyWcmraQvClEitXGJI4eTFapTnuXQuWFIL-973V_5Shw98-bk65zZQOEheazHrUf-n4h-sYT4akehnYSVxX2UIg9XsCw' +---- + +== 解析令牌 + +携带令牌解析 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/check_token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'token=' +---- + +解析结果 + +[source] +---- +{ + "aud": [ + "oauth2" + ], + "user_name": "admin", + "scope": [ + "READ", + "WRITE" + ], + "active": true, + "exp": 1578389936, + "authorities": [ + "ROLE_ADMIN" + ], + "jti": "fe59fce9-6764-435e-8fa7-7320e11af811", + "client_id": "oauth2" +} +---- + +== 退出登录 + +授权码模式登陆是在授权服务器上登录的，所以退出也要在授权服务器上退出。 + +携带回调地址进行退出，退出完成后跳转到回调地址： + +image::image/Logout.png[logout] + +退出以后自动跳转到回调地址（要加 `http` 或 `https`） + +== 获取公钥 + +通过访问 '/oauth/token_key' 获取 JWT 公钥 + +[source] +---- +curl --location --request GET 'http://127.0.0.1:8080/oauth/token_key' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' +---- + +获取后 + +[source] +---- +{ + "alg": "SHA256withRSA", + "value": "-----BEGIN PUBLIC KEY-----\n......\n-----END PUBLIC KEY-----" +} +---- + +== 核心配置 + +=== 授权服务器配置 + +[Oauth2AuthorizationServerConfig] +---- +@Override +public void configure(AuthorizationServerEndpointsConfigurer endpoints) { + endpoints.authenticationManager(authenticationManager) + // 自定义用户 + .userDetailsService(sysUserService) + // 内存存储 + .tokenStore(tokenStore) + // jwt 令牌转换 + .accessTokenConverter(jwtAccessTokenConverter); +} + +@Override +public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + // 从数据库读取我们自定义的客户端信息 + clients.withClientDetails(sysClientDetailsService); +} + +@Override +public void configure(AuthorizationServerSecurityConfigurer security) { + security + // 获取 token key 需要进行 basic 认证客户端信息 + .tokenKeyAccess("isAuthenticated()") + // 获取 token 信息同样需要 basic 认证客户端信息 + .checkTokenAccess("isAuthenticated()"); +} +---- + +=== 安全配置 + +[WebSecurityConfig] +---- +@Override +protected void configure(HttpSecurity http) throws Exception { + http + // 开启表单登录，授权码模式的时候进行登录 + .formLogin() + // 路径等 + .loginPage("/oauth/login") + .loginProcessingUrl("/authorization/form") + // 失败以后携带错误信息进行再次跳转登录页面 + .failureHandler(clientLoginFailureHandler) + .and() + // 退出登录相关 + .logout() + .logoutUrl("/oauth/logout") + .logoutSuccessHandler(clientLogoutSuccessHandler) + .and() + // 授权服务器安全配置 + .authorizeRequests() + .antMatchers("/oauth/**").permitAll() + .anyRequest() + .authenticated(); +} +---- + +== 参考 + +- https://echocow.cn/articles/2019/07/14/1563096109754.html[Spring Security Oauth2 从零到一完整实践（三）授权服务器 ] diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png new file mode 100644 index 0000000000000000000000000000000000000000..f9de1c61140fa508fd5257bb4b0740ac945e7bcd GIT binary patch literal 29672 zcmeFZXIK+m+ct`NV*v#f0R;goRlo))T@ewHCWKz4_udJJiUoSp%)QC=t&?U@GZQb=l%BnxBu?rc=L~OGMQPku5y;kXdNxJ6D&L|OiWBC)E_-~ z%EZKM$Ha6X;pky-L^;J%fr;q?llp^u`hn?7V@E!5K)8RbsjTp^^64&EWs5zMeAar< zU$yDQ<5MCA-z~~)==#cKFTQ>;djHi|_2e0yQ=B;(r~b)Fkz8qu?p(G{Sh9C8-q{OW zUlRO$MdnsQS&+}~QCE)nU9amN5|#C}>?V!pBlIR6kgkU>ycIUd`NApoRJbzgz=dXM z51hRz(!F=d8r&8W(@o_b1$w11#r4QRp-S+To~G^5yX^Lq8m0&DFNgSdCCTN_^(1w% z{O)xLTA%G%x_F?2sV#=9B6NFwWJ1m#m)Q{F)|(0SpKOZw#m}{W#R~_#xx@@cS!O%A z?tJF_<+4nD5hRkt%ygl0t~-H{v40AaTJll|RiFwg%Xd8hFK|cq&7r@CnV8O9u48@1 zF8W5nkxmt$sSC3H&vE)a<_cL{b}}=IE&Iox2md{;{JNu12h;MK{FCcWNFU?fk2KF& zt4Xc;gt{nK+{X;hSpqs7O&Y77pa_hth?X`m4%|6E>oF!;8TI@)(q=m67yrK(y3zSL znOEf9u*lOtTs(a-_i;CN;^_bV) z3OTFBkG=a!S^AsTC;Eq%$TR!jd0s4>XM6ipgsU*znag;v5lTO1dy6IL+TZInosx7G zCL;JBRaI5pQ~s^@snG^o`ip;mdx6h;JJl0*w=TUW&ou76wKyl;V!#%R`|^%e^Iz6w*r8K5Vu_u`^Fs;Z zhNWi5YI_|w>y@%LBcXEP5hX^oKg|sq&5Vmoax47qP_K1mDWU70L@Xf8OMA+^{_HyR z&_n|pO;d_a@16yV$Lb2-f~6tC^0d?JS-B-DhKmgAx_%~#*dUyTs{|d=Pnjuww(k6R z6&bqi?Lt7hjaHjiyO;1mH*ah{{P($(N58(VC|^B@ODZxj#of%E;ZeS%VvIvV>$>Uw z5t7YIo1ZI5q=0b*pIpFe^HNWP{BsdR$%dS7jH+1&?oamm!bIkZxu3~i^A5jKNnwJr zpT-)58Wk&i8Z&Kd+T#!z5oEned(D8;k(F6c>E=AG40}FV-!j^X#rDuFjg;MI2|}9Q z32mxAlamLEjIv)K+^`aDM2$pY>y-wXAM5jyR+_1|qbf&TOMVw3rUdCuk}WdJt&ogA^7p;4g`ZNv85P+k z9Ijx{Hs8501s~6-xN7xdTQ)!4b>p{WnH%Az;wQ)jIp3{pg9G_lm_9tx*?O)k#b@5I z*vN@PP}A#PVfB-T$4=OKtW30(8IfmSdYC~RFRV??KdDxXAnKcZzoX}#ckGg_S z9d=pT=oPYkBwQDY^EO=_J7`)>VJB3FXK_jz{Bp*?oDeQ*;R+(3b|)F^#SCN8A^Pf# z=B||8`rE6!cY9_1m(K32tH4W~^z!i)b6unr5}`!D@F@o7m)0b`Co__%6y7Ml?G){H zw7B=()6bm#LXI6{a<`Sh0jS~iWBhBHS29R=I8TX2-N|Ks?Y@#0XbOaME z&_ZC}RZCKK(I!f;_mB(VVbGIv)tilNjL^k}e6vSIME-EsvIYi5&VOf2=zG=58R7R6 z8TT0ozanV$q#Tj3f+_P9+4dQ6Q3xR)UuK`^p<^B=UvruhOJp~7rx;ec&BZ`O#@nk3 z2f=pfUJk?Ttwo*SrKS2U58xj2(I?pKD|rx^TmIvratpHw#X8ydDFiqgFSk-}6UoAj zoQa1g;#%K!ZmrF@t$l67%)S$pcr~0N$SYG?t+Y3KevkwaG5czJjCW)FEHTU`fXZL* zf|UqaX`n6@SN5{J&Z!GnDNos>KDAQdME=MZfC=xBswaMtW6D)lCOjI~@>r{fKjwtB z(vbdS6MEoIyL)JgrB~1@13L3M*57I`%w@DDn)QPW^Y~@*+>gzLLDHg&tZDSLvCzoh z0J)%WiE`o%26aIua{k?TH@kjja!N z@fo-t#8AP>k+^Qtsxt4nE?jCjjbC87ac?(-zSb^KLKSZyRSjxYK28#?y(a{Y@T7EZBO5PVOjLRW=due)JDBOaz-GOgu+R2q!o6#HGe z_dCtQl|du>4|dBKXUOK86l&X2ihSXmf z#pgGqOKJW@MeUhGH2 z__rJr`p%HQgsXIjZ`d5zbN#(}E?LG>v2JrfV>CE8VDnEC(Ibhx;8S4NCJ?@3O=Ux2 z50CrA%jJZQ^i4^-P_6~M3C@j4DprH@M|knABsUOy>PE9^!CJi1u2sQgBL0NTs1>|{ zk_uIzyL9mx1(>7!%YS#LF{gNNZ9#v9tPoIs#LJuH1@h=K35nx}l^5;qws-_y4Z-)>96z#v6u zs2h*slP+IZbgM(SVDORLe9qn3ez?LJRcZOMOrNsMI_!H}c2NqEBuk7rd{ZWRL8hCcoEwT*7)Y z_^G7F`NGI4R1dF9@Jn1EvVT#^rP#j2q*H?3&GIDd$>*ERiV15*jiI%%{0exKKhe2Y ziCWLvW#9eDDM2yI(H!L`H>5-nkbMyR1MCT6ma+%Y()3zDshPBGhtKj(1cMHu;e@|y z;nU@v%&|Js*Enw6A|y3&>6Tofznf{fcVxrP&!XjEzSkwrOY%V*hxr50Nx~K_|<@Ka&Wi`C2JPv8hrennaAW=cEFr z%vwc`GGa3t+>szu?Y9#4lC#6IY5bhj&tU4Z+e~}-?6OaPOIxX$XO<~_Bw0KhH`&f# z8OQBkH4b$z-{@Vj0-Z#87?h5S5`a49YNU8~?QPFz`On14)R3vO9NKudL++K_7NHkQ zZ(xfIWpEWQ1$bT2a3kx0QLiXMJEqi}qkg&h2!EB5j2rUa%fmQJ)9R7S>yHG+YQO>^t8bZZ8WQB220&RZ0J64?K>OTiDB>e6U$MeF` zPRy*F-btm*tY?lNu2Odj=Ww%xP(CaY&4of$-~J?ISOz1U3{zvMf0VNM~#rKwVc^K8a&iw2Y& zT%{QOnI7x6GOn=X^)pf2#cvU#iD{=KrC65#(Bu&+syYFEw~4QEN`TTj9Vob0+N3|< z;{BVS6&Z-Tt>>sqOoq-*MVXDjI+OI*Mrt>Po5^2TbmQ5&JjRP7>(HmKKCbENk)xW) zoJuhB?rftpk9hg_+;yni7%MHAJ&00$%XPT*msn{{i!;OL5nUys-EFu6QDRDsVvU$N z=OYZshh;5%SI??b!K-oEUdz*qGx!2W8$zff z0TWOGf5NTQ%qcRvq`@-sHn}c+)k4IvAQ6QKqY*JTtLmF-_KbQ4ARZirN1JV z*e3t%`%y#PBK~?F4aZX@w1F6t(Alm8nctM#w2xQh5}*h6-}3HdkbG#*`9&T<>JGw9 z3^>c69t$5zDa>nH>%-TRRIC*iFBdHuK{{bA#aag)AXpy*X4t`jN5d8T%<^zHfpayQ z#&Uc0m4l2CDm$u+u{2r|l6bYXFzH@!4pQk#?y*LL_Wm@zu4Iu6?_BezJgq~8dZa;Z zMZYL3Y@wb|u|rw#4}VlnLQ=ZffJNXGv*EU3NpPSiOof&rxi=Okw_G!6SLx7=3_h_a z6jEO=D=*)h%}^&c5ey*;h2={V;f@DyGlr&!EDtzTlbXEEtBEgDNTZ0>9>?GU2S-wZ zbKQm2*bi{RJcrP$hPdB7X`oOQ8#6rS7M92A^g_>*r^nDT^0RWZPd2VAnTa7cT)b~b z)`b_Frd&&mmHu63mm(fuUCiAf*pT%tPEod4^?s5l#B8hB8UHvbPMf;1xWa$;3{zb%cFCm>UyXW*U_40M(Es}A-Ku0N&;-R zGJbh0L~Rm!bxu%@}HcC3DIubL`ga6$Ci%!yMQU~j1w#oVl~BF$s#mtDc#WQdMWoz zhafDgIGv|PNnzz!Lf!*6z181xEBNXSG^+u{4k9}m9R4o5*o6DZr|ZpRH%+{uw21gO z3^T0dZQFbVJwwU`=|{qJiyA84nD!PoL3&z$z;j(WVJB5S;?)kRIJ#=s?u5F{p-e!uAj*ZV_1vO1?D2%8J(-E>Ie>M?kiC#zna|} z?SkxmUt{m;kMC@oDVNeWXy1eN@1eX}4|87$f$I6aX-tll&Ni*@ku8E6c@~ua={f^> z9t?e^z#>8(CG*cTVX8VOqYOdP6XI6d61hE@>KPc9%4(r=`ADuF{=; zLt%9*>D%(Hzc2B;$fabmYSGrl3uDdAIq)iP4%~k8j{?*%b8)9Nz7B%#Jj2OWCi zYSK$LXz0vvcUqC{Exow&25?5E+6sU4=~2LHCj0rsr;Qdqi;Rir>N%Ea$Q$wC zaK%^Tq14>nwdVLbE6p=Z!RVrZB0@?=F|kBfl1#SNBj>Cb-kBoBcGmfc!xP=aq3#nne(TQDW2Har_?9*uUEpQAKQtCAWO|kgi%SHBLmY@uCc`8= zPXa8L%=}8QNH5S#-g8X%ss;+fI!^A|E#&7ihwm269HOUVUtFl-ix9PxL{G1u(aybp z-xC^L?$GNVLQXO?Z!0!zYqak+As~DVSIcjYKeG7{{{#9*uxR6;AtF_01=o2oAy&$L z^t*j`x>J!siT6BbU#UgIPf^3WYgy%0Y_8R@6ay=Qs4X{h<)TxW^PFfAO*^tgZKf}9 zGhOOl1|}D;TEKq&@2lP8Tv!xID~Q1b61X2st6dNa4ofi~=zPs4u%M-pd<`L8l6u7S z+zw!3(r#=NP0pH_!)t#=Y8!tRJxslF_qP1$k}Nhp*%81^kXmY8P`+NAmDwDjBB6SY zMe5Bc-v+_o(BC?85v%9s2M6FroS%HqpJxO;7YFCL=)3et%J-T0I%gb`gy-W*>JBzP z&cE|%EMx_WL28;BMxyqb!s=EU>8?{PsuEX1wx*&+6&0jimn4jTKHKG$xCnP)-jNBq<4av;%af} z5%ZAt!)*0pnllqsUf*)7qD0Q7->`XTH8F0J6jwAWG1wTkkeh-l=>O(AK3eN;=8W?k zBV%jbym50WcsY;w3i`ob-I-$j!jI;j&D+aJ)b7VF3BLn#4KJ5Z$hVsrl$ekwXKD$S z{-23{^i>u1I?8btVLAULN4u`1*zIk{y`}!5l(ZU`k-ltqdO^2x_Wj5bO@g#Ri8DgQ zrgrn=q)}DYdEN?vg8R^gfn4`J>Yv(x`kI7>&6c;NhVc9TB#m%4Mi+Baa3k$So?gCI zvp+LzoHSgQ0==`W67u`A!&pub-U5|DyTL9XJ?g&fRY{*#8A>n^Qb@i(^SIrxBC~pv z&E?qN`rhOCJ}WiYJj1p`>AMjtaAD z$d!?E8#xMJ7pu!{+EI_y`S45Ku4vh^tOA%`^FVHj`7}&oP=y-aP6`;A(UxC+QJ7f3 zqk9YEVT5iDvp@}n(bkU0k%we4D7Q3~dvGW3!fxr{Az{;M{}Mmc?DXUnE0s(>?}B{S zN2*jyQ)JCa5yMBy^-5(=2JO3xEfO=^zp2F{wYURfhlL* zZ?lK+az5Zm`k5Vb8-3;UffSY05sd>jkK;>r;kDlLFdSikJhW zNZ;R$?Ix<%y`Cd1SIvTqA5HRR%J>Lq)Vj}e`I;H_Z@DCn^IO2x8+^AACR|sZF@!gr zhf#j8E=MK0Q|IY4YPVUDMMEn253VbQTapX;uE#RGl`QRs-?S3YTj;M;L$!ah2pT;3 zm`mK?8tuN9&Kv&17k6^8rjKpnHqXa!$B%~G$&GHBPQuggWnM|bX4mtVibP9C7&upx zeYe{VlPXd{OB`wri^}XUw^Kz4V=p9)BUF3~z6@H1s6>Q?df1>h-apU+H&!{-H)2 zIWb=K9M3wXKUdJ1`t%!1i-EW)O3%4UTROHJEnX3qpshaoz`-~g&rvT&GZ!JImv6jh-aq|9QH+Sw-P<$%(=Uw2xFcLKNn#FKU0HGJDeq&pOm6QPT8!xMG)9O{S4ahL=|IzwGt%;;W^;L#&XQ5?`{(g}#c(j<22# zRuMbNGTQt|mrLame}kSW&e6&FX2EqWAx~-R zWzgML8X3sFrrjn*uj@5R`}YbyTZSn6u(gAR_*2UICo)bYv>b>olbogQl$hG#@4WY7 z;lB3%KMKbM!JNW>zr!?n`CrTk{#?~X;klWV4LE$YbZlg8QMVsKr1GQS1a)I0jB;(z{qGx6_og1-e$ z{a2NG9)HyC-zR2jQv08C|DShrD*Ina2RzstoxiFXxIpLw;s45AikJTPvP}QG2w+qE z|6vglZ&mK+f#=`v2CiD!v+r;HsBBkUg&pPO$rteZ=Y^uNcL{vNZv(qbI`H=NG@IBEl~Hz@=T*!C{%U;2XGKl|a=acxID zwY*?IPVOAfCC6Ls1_H%U`SHNhZ5Ud-@Kg8MzmaEr{@#A5eLcoV`|w3-?1%{ID}qdwU8*^VLU>({;QIx2tusvq zE;r!Z9>?cDI@s+39^e_mEKfTxzQ!G_S8sGR{A;f>b!AcU=ZDHY-SeogmXmo*->|3MQeb6on zjoZIXF@=L|pXEhCXbAt!6mPmfDky={{hd%GoI{q|%nxYdfKr z46^Uv4OuEzGaq>~OIaQx;<;bpD;=~2V?oZc{pa5{r4e5rR5=z#cLP*EFP#WS-we4E zl>y8H%oxo;=54&k{kkrl>jee%b`_n?&T9PtEj_KOs; zPf#FWErHW0E}x9=XUYdH;a%We`xc|;$M4hsnrF^QST=@I`c&8nhL+u4=%}YU^!coC z`+*MdC_8GoAQv%($~X;N0WJ11>lE_hFah{PfW8Re8@|~1*2{U;Gs0E@<3TBNzk>c~ z8DmRy?_o8|X;gSM?JVtSQHlb-|cNxa( zf>rD^sdD^WEL5O26UrceSf=J_rs0eoGUi0pqSyuO1)!VR;+Bo03ggj22L6zIZZpq& z?_8v05$u6864 zsvF_x-Pdob^;Ah)YXZ0z%o}b%@J*KSun;pv7Mn)#gaGq}Uj0}cpPXyomyppFydsF4 zEIZ()2xE{9s~Zuq;k!Z6bvOy~gx&h)Jd~qgTX6w9zSkT=fzZ~yvyi}dam&yilSGCCmDFO?ob91Wa|ptoY| z3IO$k2i~_gA@xRA$GEGO0sIyq`{OMD59v$54rZ%FHKDdI;3`-I>--x8S4SJ;0>h(z z?3!6E@gzBLN{`vpY%Pgu_L;N}-AW8BB#_3Pd-D?%)-6M-}0 z)L>?&rf-)ao7C6`w9ooEU8e*@_Y>252^bdyVsTs6w!wSu=W+mZ63d%ZX}8l$k}#%4 za5Gh15_O{)hL9;KtQjBIrSZTSO^Ns9J#tq@-ga%MBs;N~;*yNB>*6NGaP z?bF75FMILE#v%A{WV5IbScITIBKy6Iuddw}nDMs^kOJ1r2%zZn@jd2;1*}*!vkbQj z2)I@{^s-qPqQjtukU#x7PfGv+geJcCMjYsSWm7#m&<+U^EV+i6TDknNo@--cAbZVk zamXtvL0!amM6ppN=NE+ zN$W+G%oCZ|i%YPh{0cM$?z1u;#3c;hZ zG`nD^vTB2tT5Pb4aiFwgA5_`}V~BJf=Ao~)u2H7nO5#8?S+CUJ`e{&XWCxP4*2wxd zwfGoW!AM7?-J0)Vd(hnO&$nc*=XJZMs}C3Gwkpz>d;%KqhaHcz$g0r&VHN%ZInjlR zKaaqGL~q+wnEQiWX~$N~u+*Or*!o(tlfq2C zY+#AkIahA^P_NAD9@=OTWzrG#s=UXLMGwz6dv}kZY zhBST;;-iMY0%m(6H#(_4=283$ElpX@UK^y-ptSKL!|eOaA;gk^QJavVD48nnJ6yNy ze;suZ&t9DM=~a+%Jy%k9;E+3eohzswUJ6;y! z>|~`A=IF&i9;bsh5jSfX6haH-Gg$bah^ueZKHs!63m>rz+rAoT{Fq>5d3p#w(S$g- zT5NU>%Iokw?A%+FU+YU(z+tcCln8*R_!p>x9C{P9i-xFWm8fXypZ;6L)I#BR4aCwq zy@rw&3FZ{Ad#yn3sF(<&i{A+{dMaBCr7n*-v7kRv4#w7-m6vVwv*l`Q4#S39?&AW* zM2BN83>E0E)ac#r7sNb%mBX2~c#5c-HLW9*?s@pcCU#;X zZZ>F2SJgWy1^N}R&5r-wX6LzXpBmWcRpL%p)&O}g!&!CW1vBeXjF^N*$J9jBx15O7 z7j=P4qqVm*V-eZa@`S?iu_wYz!CLE~Eba-CW4aH^DxU|lTi;&6yRXu_MjKpk0R^MUK-m&%>D zNQwulv@gS`@)DmjzvxreH;?XzkRO8_WWL3xS?k?NrwR^$O74!{rMaxu(~2{Fde9B- zKo~xa4E<9fVqAL@N)-99%Sylcf8z*6UqScgJ^B1`$(xL;-&xntyfq=DP(?>zUq>-p z?pt?n*eE{o7ZA}zCUX8cxpD4RUX-~(wfk7j@@1z_46rswFoWC8#}GGL_bYpL6#wzM zVng`2HK@P&ypQkA11i_7Abkjw@>aoH39nD^UiJLGc6WfP0cyrs-v9v7mGe^NgDMnO zn;6X-sb2~~4sG55y=29KLo}hfjDtUPATWK+wOw}V?q|KcC&;$93EIU{&%V1@bG$7~ z)hC_5q+ZDGNu51N~6Ml$cy9aszA1;Gchq^j4=(H}BH+~2UCB~*I|)VoEpaJDSd!}mfu zL1p5+gYb<=X(^95v?9C2ehN#|(Vx`5z-wXhdrPcS_<%2Kx%Ra|bf(us8*We0zNK--!vNgnczNf+JWT{} zcpXj|qztGtG&NEr+`@Oa^I4-fJ1`)Rb!Qi|5e(5IM(M$eh0?*BAQN9c3<(KM$HhyCeF4eZwqW1%=jYDz>u&vIK&xB@A>JR4tVv4m6%r-26 z8s5;EY?$`E+-9$YUmRGTH8Xc2fjLaIGkI9n9QZubbe=>M3vZcK*s8zCYD4Q!(Sh{| zx4CfZGLYY~mf?dvz##r8G6FlO5%Iy|TSj+3VWz-r*%cfxFBh>z(<<528<7Q{jC@#+CNKuMiqCpV8kb zcuX$ccWI>aFngFh?&1zJE0^!oc)*1CaRYXt;YtU|kj29M6370p)+rwNDv@G{GDzsI zLj?hDEw7?6prDrd@jM$Hszij83RX@mT6Ki-|Q$&h83B48}q%rU`i zAmJ5>n<9Tfs+}ufIm6{29QTZBy>sRCEl5X)iln5R?`DtZv3PKXiR}!LJ|1q3N&`;+ zI#Tg5^yYa)2K)RChg`7JS0{3~9xl#Fd zy=gPyuADFb`h1daR*$kH?LdkyQo8V$Q%PD(p01dukWU z$AjkG2Nr5rA1+2{((2YzrIu&%l7gK-tFE0&>a zkqB4Z=#O_nlGZb(^?~JX1SD`Gr|=tELUaB8c)F*0z~ASqCk&E6U3fG|ng}Lp0uMnx z2^63IaI*Z_=B#kM(jo2o=^m? zDheP4jItD~^A;!xLfS~s4VZ%RTmlTbAjH~k$Ip4b#}RLp=%4d%=c{)3!{A$h=eC|B zDtZA}Y{$$pTZ!J=mAgnyxva((veveT`yS2VHd^Clja8tGd`ngcp)|QH^t_ViYT=YH z>)Xe;H6GX!0z%q##1pVWu7}^T+>!qeuX@1+Sd-)Bg7l+v%8HaD4thKcgz`))a4uJC2ocQFBhoCdL?JIzyII6W8;_qv?_fPY_4k1 z)Q-D1kh!SLNxNtoU{c&xC)<}u)oR9#q1&fvfp;FLb)5&0f0?k*)f&SoClsdKWc}`M zJ7W8$GeM|Ur3bK&3v3r58i(T9IF$gNA3I{(3mUC`a>t+Hm?q=l42Xr8t&8T+gOD46 zc&8I3y5A0$uB!_yCIkZ#Z7JQSry@bS)Gfu_-)ZFRgZO;d0N~O5yV3y>BJH=RPpERz zn|v86;4)Iym;uT$*5memH*M4&$BiO59zS$soDWl{Q*wwu_)qiXcDy33gCDwiDr6y- zyTp%}yzDPC=KC!q{SnHaH0{p4LaW{Won~g)c#K2QhiD|Ua%g>jNMHum3tSA{OKa^% z>J*!@XF>r9L@I(eRuq+@272TxOWej#QcJs#&OG|gLVi|@1bVe)!wsbV8}R{PBVls8 zq?WHw12E70L+;`<3T*6i-2g%)AfEJ1RR=F;6CcoDVDtc2GS)}|xW2ZFPA0kl+9Dtd zNtEV+J7%G`rsI(QBoiX8G71cAwUl^_<+~HdQrO-K+?Ym8&OAV&`>-D^4lSy}c4M=v zN)hkaE>e2hQOn=N!@I;A#uPag_gk@E%^6*0ThPUixu{oT{f$5&@HCD!g`?MI+Uu}c zloT;|eG8yUoj@b*OV38aVXqu|($D$J#i|pvRwTz=9sK)8)h~+!0Tf zO2bf9g0|=OjQ1NZ_c6T^?JUz4i_85Ma8|BsN0%m|U?Y+>UtaPS1stuTwNU}J79jeOHW`(RKH-74FVbi zUf}S0T3R6@0$m-f0L(rA)&<;P#*g?tVPoa&FI65BriTQAdyj<*H?%|I7gh2VPlhyZ zJ&PIhZ1r0{xpzb$bmVcOuoDT7C?C}JumyPBx7r0)kz^j?CKIy9puVh5yY2K*%E|lT z^f5ndhC~7AX9bB^IGR-x)QI&rM2{cu7MA_j zO0y`WUT?Q6`|3;65wh5*I;5M$Z}Xm!0Br^3^2Jn=MV6E8Rh$p#?abM+Ht`A=1?qk; zKZaH`av=l}Zu({fa?C&Ag}*ok-NM>|rOJ`=7;lNZ@j=k`@h0tEq#*NPc5imo^5!U~ zZ*)r?ug8)*s2-L1Sz#Di-#Zg=iZsUnb0WrVRJIr}X@tZ1S>q$-rO;i#bNe)KkY)R1 z4I)3$%oexz`$qo2$&1xHepquCz(hSJ@7}l6!1p+deLX3c7<^pJNW`K(aFnQsUkAK4 zf)HQ-#o%IA3rxZsg*V`{nV>ntOg3EQCrNQ-ni-g$emXp*{u#%jOqWM%_eXSZG}vD)S&5>xC^L-V=*Bui7%(RKSvm$QEMuFC`{@p6Fbenx)ATb@~Ts(U@qNcgIH zs|Wy4f;~9x1${vCz*h&#k}(pXpE5#s)?Nt%bSWZ=?j}^Cc`t- zdBOa|kh(NmWYI*Joa9o)M7ZU$Mat>F@g!lqo)E$YlQ&o~)V%UJ(PCwMPX^412B5P7 zr=y#R3k$I+OI!d~%1n;_&R zZp$Z#hp{}hT@p2u2W4=BVC&d`Sw@d9U)uG{L}6cOlP{@bQJn-2rQ0HjKj=UXM16Tc zy$IsKdE}Gt*-F?4Fcr}DW~LOlF^MVjx{valuWH`Uu@aVAD+b{~AiO!%YED165)`fY zAj|uw2!OWv!DOD&)WYz+1N#V+Su#rzYXAL$_;H?;|9SyLx%z(;l?$H#z3Vahbm_Z%l%+#<5ip==&rr)*@H6BihMbrn___kghiA&1!KBr zP~-onuNguRd9XCJFkL{M*R^~ISpjPxDe);qW+JrJy^f?Ki4Vj=tL6~e3n=$7)ISyz zm1bYy7K30HRG2n;OoUle1Mp7y1kfj~yr6?l|A?f(-Srbe z8SG@TZ9ZqlXf$2LmYepzZyrW1W9iMICdA2 z==2cx9gbad@6KEb-lf&t4uOOY@Drf4O(Yn672D$JxA_Cr;5YP? zB!KG0u|GvG_g(KmkyiFaYhehplpFqbvB~3MtL%80fMql4fniqLhBdR`1-s?4iAO`X z0G);Ew0AK?41nx;(*Lt)l0LaIj3H23p?)i`U8UC;@)+j%mg~}w%CJkixmX0&g4^G? z&Yv`TBoq=FM9n9sW-3c3uZ59^UBM{JjG5=MF~T_)5ThOo!M}{K4qwv)ERF;?RC5p0~Y-CXfz>wdR&84>W zu!7cI#0kY6&vdzEa{E*rLJ%f=aX5pAcwq@aCU6(FqUK!tb&! z@)k@`VLpAe%8boDAAapHc#GT@w}4#7afOwFhP6}bxx6B z3`3yZ8T449d4Y zarsnhRISeKWNgf`WbUMRvRgWyL9Bfvx_Lh<{=RNx?Z*x`9=FkP;zc~&_!`_Ca_a~0 zWcwvNeJYMGyza)IGJ2mM?2Co9jXX8&G{g~x*C#GkbV-zpLbQD0@qr@0jx!c?YlPLY zaB8mQr3qde9NZ>Ipf80VR&U_(8+brQp$8Tq<9VviL?ifTfOTHEnKCa^M{fyh?yW?| zAlctnthSU@4hhUIa2-DS)lX??q z0P}jtK2J<^f9p;tKxPXM{*=ox(C;?^0pJ^}7Zq8QKR(^2ba=&7;n*G(oigBu?*EPo zyVM^%`0D<+HQ{SxA?%+bh#1B1t6!xRr}7FW|~qYJIpYtvUhiWjNKK>EL(`%1QkRO@Q1FdyRQiz{q(hocr* zxPLi66YRcIa;*0DF|FW0fy9ZB6?5tcOh-@Z*~1tI#slw-ZiTTUVVWJ^E@;dcSSmwn z;)R~*KF?P9DD@$Y%?1*g&X$A?e8vaREMx4u%HqpHw{Lyg1obE!U6sKHoDk}sTwWQ5 zOhq?b5h$2SxV6?%12rOZoiZl15&TPO=730NeV<0|IN_B2aeJZ=^|(r?b6 z^L>L@)@Iy+MDvMa=!4l!i%P(YAcF_8B&YNNo%;QTkw-0Gi@R36{>-T8bzMY8i{VO; z(=YrH-x2?>==wjS+oIgh7S^h?wbG=;SL;LmfwPbGun2PgfCVf7AH$eWzt2;RGamKe zjb0KtKKRNk^(>e_RPu|@$FMAN^N1#6m!+`2UKca8f=gjFL#X#g7L`um|JYE#n%1~r zT}J&+D){F-zjK;-=xb+9mALN!O$Skd<@q6JYvIOg3*0mArz>*cU4f1S|CO+BX=k58 z@`HbEZ_L+OpciitAwC$Oa*?sa-z`|qLkeM%mrsi)QxE7$)zfBy9b`*i<#DWO_7WJM zAyQZwr3RNX9f?NtBnz2EPLifX9=4G(_^3*p%$z>XTfcW`;Mvkhd1>rRi+q%1Y(Foz zXU<=@q;lTikv4t>_X^Pbn>4@J9(!fBm@=fusx$D6ck9nD1m7}#x`Fla0pB=69Gsa3E9AA6_ zk={)HBla}sz1+1rlh?6Ygy$2S*?TFpE?H~X(1BG$ZN6>}b@Rm?VM)-L3?UBshBknDHnt$?Im&xbj zi)kV?(kGE|vXmP`wts4$Ch(c!STsXg-Apakfu-U{(`_ek*}$S{!C& z@0zJqf?VlMlaVy$H2=G0Kq|@Ll(dk)b7}~9JL<}`#T9LV)H?>;D#`xzF0fAKxt3oG zVC2~ZmpZqcuzoOAJ`EF4P_M3hfdmq+kLAc8auI_HUuomvD8 zgBQUv=|}dnAd>UVDN{l2p!f~5@ceL)#4K?kWw8zQ9UWF_Ht33*< zQM}0yi&-SN^PU{Zib1W3bO_v>HKr=UNkyHl`iRmP*Z%&Ki%vz({hNKWmbB9v>bP3?SW}K%RQyN(2u6rTnz!rkCH5*J6|1VMTfl-V3d*Y?uM^EHb!w zGh%R8|6Sb30cZEVYC!%od=R7}7N4F+@vT;&${8CwER9IGH$@sRw{sXz3To&*(j=OT z-&l%&gj#tr{N>G;HhrCEtnLQIPGFu@&YQBJT+eR(m{IG{ugsQ(bR&g8Xm82#V9=_4 zFfzAcRY=p>P2S+nOwD`qd4EHH+e~IE0Gp?ZQE0r^U<^?S;ORNYu0urjNQMR zPhG9LhKicJD&yNS+m+%9{6VcPv2xFG51>P}=u0PxJKOUFt|}VD`(N7yz}_NI-gSNI zB;6rIKpq6$d^{`LyBSNjC&BPVI&8fke5u&J^&$}vouZUB7XZ)|BdO#e0F+#lUv?yg zPzO!@#{AvU+6e}JYfT(gaGsS9{+7)FRwv)>AMw(>%An}Ixcy<<-Gt+N!ac|6l#pQA zB=Ln#U(sohDpOkS-i_f2-u|1^-or5qqGb5t2?80wfi{m9N$F2s0ez{(DY7Bdbd`h^ z6{0C?kAJhKSoHX_TY&(f&3^mWQ^c1-A=x32jux~t6aV;xK8|d)p9w&QPF-1aUeIcT zW%W`yQP^{A8W4o`+=R7Mj$`&A&4=$ovI3~656onkFLpSy&c=ANrz9_%RN8&ekMTfT;|f3(%CZU8 zzl~7G^!B~I^=|j=RSVJ~GDXmHo*#|<#|$<=!To9*D=#-0E) z$6=hFMpM>J3RP`u1R%AqRzgZZ?pQ_l!hPwLnsN~95&~DWgS1E5)0KL_LsWz;{MvU+ z^_SWH^rF2tlgF3#7_8QpW|Ja@%iW0v4;0Y;8B3W{OQLy~mhORr6VD327`zurR+>u& zmOvZV`Xte$aGmFHyE>qAWD73uKN%i!nkNP`?iBKv6t3yY^9c3ey?s`f(n94tXh0E4 zBCn1G941eF>N_VVQ%E)&sM3W6ffAc9?h!4fEq&jj&u}XhxT<)O%FneF9<%m9;ODsQ zZO<8Y=B#(V`b_zi$ z8$^Q1Y(NBb1DjI#;2x`AP|1K~sFrZWH@f#1+oky^4D9W%g!rsn03ft4>B%CgTB@>U zby^1PP6Z>+>2YODw1r2N^tQ6qynpYdZs}{8D|QSYegi^JlVsp|S3b=wmbwnj_nxx= zu(A8EpA`lj>tN8tiiU##z>3G2YQ)Qq$qO$|vYeS6F0!rN-|60}eC|EpV;d?Op-hS& zcNy$D6WGh`8gD%&w7MM>Dmr6bsZU_`U>DhI$ur7*@;zeQwqgvK6kusRRV$jt1ZS&X z9;+pi2-b{Z;ACh_FeCL$Q>{bx2N}=oUTOXDR)Lr-9r9;icFCAe_n9qz|CV=GPEhLP zRyiFZ0PUPAsOW*k37LwlW^W(g!a>N?g?<7(bZc4Yr2c)7!WdB>PsW*p%N-50Mv*&f zR^4EHUD&-b;3{{xw^_g#_kxL$A?&oZBcHmw4G?(!(whKazLJ_lb*{x)no;Nid{Tj8 zG+1E8X5=$f8AZ5UAlDw;wM+Hg|I6hvB&Q9Er!ZNtes-!J_35rH*kiJ1t^0z>_u_QYP;>(V!cxO&9&h+3 zaO}1|Mc-YzhwV7rr9_;JZclOpa`E!%^P-lKj;T(xuNAnCL~1G^FYX}vy_Lc;SEo&l zIKoar-GRXE4Ldtt4k?W8OqCNw#JDE?$sLH^pHnEzsTvR5o;+@fc(cgo94la{M!r1? z9J3R|6-z`7)E~yf5tvuQ&4^&~D6HG%L>%bHp9BJ?cca)sGn$ckme?sZ{$Ux*fj+FG zEo11KzD$2`o{jljme@ZH8}qti8NO^)?v{&jMOaPT&yRKC62vL_ zhvS-~s{`EI<2pqi4i;ZuORo0)^V}850mjc@tIsA!STN>{dwoAIyO8zqIE?%9P&o(V z=1lr>Ed?YRu++qp>J( z)%U$ycNtpMx9FW6uZdiUKP#%2v9hb#J5~rBXtrNwUIw_@i}k(nL(&sIwb4u4O32&K z$)i=JG_l+`W$Xh$wAw8l*Hzf}4LI0YYnWSz%B~yLOAw={v`v3m_yEBa4LJ2XCO=i1 z(4wuf&N%mGz*gH=fo9Hz85OPFhy?IJ@4hvNHmFBqgFsq>Un_rnBNc0m|KrjD2mmoL zQGR8)BGP2+m3SuH0rWVeyAFTVmn_pW$9(3JAS-V1Tgv#(+W`HzgAxDz73pg7%CKWI zU2}P{C5oNDhFJFn`AYh;{gw=VOPDYa5Lq9TYx*_gj)2?%k0a2-!nOt>+QPKiP752b zPDS)bvI{$yTFdpQMQdN~a3LXunO3Xelvz+gNlFwckQTn3XS@ZBi>Ljp&p^M7?BFh2 zJ{Vla89U!weFp~0loI#CP_dnjLgFGmr$`x%9u)NHO7_Rs`1?qK0rmMWfasJ;jqiC{ z!ry7g<=qaU5ywe~GN+6XE(u?zuWj@#ts+@+K7R#1e!-z(%(t5uv6}r&Sf2mN zyLYESbeIs>T1viP+j3@HbVYR7ck@|zueLg zw%pG8IhsN4h*fi`l-Y$53=1|Qmwc-HQ0aAzP1F=l#lRCSb3t$?$f-h(y!#$Qb%CR*{q zi(>*SxWiDJ^H;QL=3d*^#T?T(dxQZss-h2k|L~gYiqHOJ1v;iC4zbrw= z#%Q$Lhc3zjW#fhTLUs@ANuzitq+&Kf=8>=}TU#WzX%r5y2gBfWkCp*cs_{>lva>v+ zDQ>SsqF{&5c`y&dEVY6BNQIdcDq8K*SsY>U;}!gSc{ zzh>v&TrjX_%*FbSX2una=z*#}RdDe!L;4+!$?)78tLq#Sa?%T^DmY**Nn zbF)X^W(9Kx3<(L$O11UPNjSuc5D8Y7&_J_o$ULu!z61{xcg1(;L>U!M4j@e%kT)4u zU3PL!YOE$c;7eF*=<~D4c9aU52hbo%8R719(AX?%UvSL-0f6X0?r1)^k{ceH`~qm# zljY1%YO<#44icpLIADsP7bTQ!hhJnLliE8e#s{u*Feuw*f zP$A8fFgOliinme=@kuK<1=&@k0(?e8W!rV|Aj=2C(SlSOzclq;gVY?5dQR@3EG;*@ zfPfVr^D!OF%gJG~=j#oK57uW&`%*8HXhzgr5#6Xd#$DNeS`g={q?-D z=V+ZaH3ePf;g$^ViyzTgf2OECpWQZD!(LYWW#QsDaEL~52NDh87j~bdaKFdT%&qgS zsr8#s_!+y$bpEbHw0eqTlQEzVO7ck~RAkZUOuB`Gf&ZYXgOfR1&nRNNqY*| z#j$K+?>9}f0AhK7a?5HjhT3>fPh2LXQ3i4SnlF+3!JR6AlFuCEiVPm=&7OJF)*^qA z68P@D40BF!1=~O_V@)(}b$YSkv^r3Jw9tV&Ov`y;g2sZ`^QFcE=zo-q;fx=-(+lCC z8S!a&ob%fB_Md2!N;lN`&0MXJWxjhhdy|Vf+N6M-rwE09i#i7vp!h-dl69%YG_WoutYbQdbyGd*rB^6sCI#SO7Yf|_I!jtZdY-jUSHaH zp2J};4pJ$xv@35JVvLG)*$y@bHqu1U zU^8I2`z);5Oy@b_z_Vil)gmhzuV>lt;=2gx9#}W4pt3Q59N-JB4=1L{-;L1o60e^CS{cAO z_=RBiynC2CgU>B{$1Y7lbxSDnd)tOVgn}S9oZiN0toajnp<0fw)jTBM-~z*(IEsLD zjcWdN%GG1_A$#ILmVRCdil&DWoag`mcNC~5ieL!Ob-2T?DZd(>IOX13ubZfzIfxR4 zP_q+yhwr|HVq9R6y*0|WCfHdtGT&)RVKR*VLe)7)FvN)n z4Q3x;7cF9%GmyR6L?#K=gPQd&*#guXeE`1u!E@?ZYa0T6%~3C|h07sRkF!(vFQ20> zeHC-{y5)ItB`tWjb?H*?O|NGZ^dYt=8zh8#Bx1kn-^q}V=x53`^5ooh1f4s#PF>fG z+Qk`7pe~FXtLG6OeY{Z>`a%4Bd=7{qEePZs()v4fm+LIgF?jYwmxo8UoLQnlaHsP7{h%Pe)AbRj zVCw#jv7qaZFXxu(TTSc%qoEQuzXMbu?@0d}dZ~-pr#)55g@&e=<}Yq~xm?H#Qbb2l zA^lo3YYuT9QrD5@Yj8~Jod(!Z!;Z|* zJn{Nyh=NNhXc;+K=XTC3{)xlDr@MO9@|;4(c{X(URWXV{aP!L`%-)AEUs*sXqosjGY5`UABRsb$iUWS4k`2W6TLn?6FXOY>{mGY%XxW>>?w?$+1d6M6Nj<7 z42N^|CeV`-#UEW(X(}CWtd6-Z2qrVlpr@2Q6py>FN00mrCV2BJyvEdT3E{#e<1xDZ zx;(O>A)YF)fUTs6tD_e@xxi6mA_56UKiwbCJs_62iA^yeIeeqfGS( zj`KiV8G%cVzDC3VRHaG_nYjT5$u81V0QFQH(6yxECy3DX+Djb|`#|188luVd=RHNcl7OU@`4ttp%Ij&l0X zbNj#lSBL5FdVoh^ln7fOh`pJ`b2J#uv)r-!SO^oF!`$-z=1#oAjlG%`{QeW=mB8;Z zo4YytgnKUrP*qAz0zMftQ9%j3(lr~u5Lip%#Ufy)ocV57eZLrRiXQtel2{AyE-?pS;6vY2AZYiVa4Y+LD@Eqb)s z*HsiJ3adAV^Zmz%!k1jKp1F07pf}fYDEUfNQ|3l8^sQtbb-A&TEEf<1$LMG2A9UO_ z@aB?`^;-4HYlXWSx4ig9-$=QmsF`=~fKqRUOVx4vCKQF>HeGF-qS(qrP4?Wnwaq4GgC^Dz;uOFGBgSXlD9;Xx>vw9a#w&@l z!qtmqg4u2l3myD^IA_10(AK|u5V+>6pjeA z8urpL66f$jPFy*MmGu;)X0|=4S!7wiUk0i#TUj%_ZaR|8h;sj~M?^mi4J?q~wH_N_ zVsCLp)sddq{pd!llO$XqpO<}xxxUL(nlu#Z9dv9i$vT}VaN@MY6Ht;>%UA2hi#pMV zef7wZvip47+suVQZfruV=l=DK3c~K4mPKxS#kfE2L?RCDs_Exp$J<1mULCivW34O+ zn@bAz_r|O*ByV<-J3XGGg|L#^61d~T2U2xzxFuoiht{WbWqmKu zbPR<|vjfYnGFOiTr||+3r)3=;zW(}A`4g&|t65lvnYf{}Az9aHOEEmLmOh(%AiMiKXr%)z%}Qp01DDWoxpR zd|`+kdOjqX4 z;jf==?MVVL%t>q|dY>v=Zsn>(vHC0PH zrtFZFg17k^lgD#sO;IDIT{rEvSa3J*>rBqLZ|RiR$z8F)^tYePQJ|TL%2uhQE2PRk zEtc@`%7ZEtWmk`91+x*cOHxVV`#!FgIB&}tv{^yr+wFeF1{!UXt3*8wIlj3lJpoA& z^bOh^=P^%WcZ4L2(=v>~qdBg$FD~FV%48(ks-4||k3;bcApOv@v_JQDp4D;Bn!D9p}h0rMe z2gGFz4{>metftRZ+hEPV8$xS^9sH^x zu|h44LPHerMM=&RD4K62o(N>?BJ z^hmv@E3^dp=Zk5<{ar0mZ9vH9j$GoMt3vDVebG{gf&mJPXuIJw$54PzU9rhrvPW!N z{Oe&($wX*qNi{WG*a8-B2Itlz(eH1&-{Y(YM~Zd771Ayj4aIdH$dqUe?C7G6`dF@K z*Ez`%K_toBBtPtPiMYI+I5All5r)l=5M16roYyI3ZTw;VIIF7Gu6)RiANTrKBGUYZ zP>1`CR{rH7UMb`&e!pbf4Lh$0nF%8_?-ImJPsC*3rm1oKGP!B`U?-g3sXO}Hs#}N? zK!^mm*>hZ3_c|wJ#=E<+FDEltagIH|L@FnE`P3Q1w4%(zgH(xpi(wZNQ4Sw2m(Xgb z;VloFBIStaq2A2d7k$FGy|~5rk4hSI7u%*yu2Q1Z@Rc;_M60FKimC;M8^#HxFp7ti8JO#Y!q!LSkcn?EODRkeKq`Y*M#fQAj#!pK z_(kWgOszG~>a_<~Xy4Q~V~Tx*^-@PY^wC6*`=Xt5l3xv5)nY0KQjx)RZ__G=!f{M& zo;)LCU9M2!%c6f@ql$lSsNp_nzD<$+sVarm&b{WhvKnntXcDe%o&zaz=|TT-DSl|% zl-)f2<1dRXElT#h!Dq|i49Ut6<^YFp#}U;uJr1)7$w5P5t@WElwRQtWvcB_0u74A& zE%+!&6AV`1cJkfd%@ZA+0#6Go=L#6Lu>o_@6dqNC+%Z*vAvMl|9eU6zF*6NSkNPPk zWZ9z))n*g%8W6YfICx+V6$iD&rHE4 zx69UIdxOn48_;4&|oNRpyj32_E3mV(0Z)yPHoZ)rvcT_rVH9AV{bLG z)mbp~(qdeGz8))QCqvh;xOD3kEi z)cypDon?cb2Kao#z`BHvt`L0waQ%1`M#vknvs6J^IN$|s%Fi#wLt2(cFzx#*jQJ3zK+_q~69<&qC-xpk1`3*p6BdP zOJv`jOn6Sehtj9qFKh8qc#aN_+cksLM10`b>A9Y{HCy`k^}Y--`Dd$?FYWHfD0=P$ zZ^Uc1A8JgFU}j^`gV^3qNBt)*@_iYk{gnduf;@QPyjDi&ZSaXBBbqnj4PFzk>`JdM zUq-U$T`YIt`u$}$-q*qS`xtD%3lGKL1X}$ph0Xp>cbrsGxY@5s-@Nzd3mim$@0orL z8pbC_r(QHp$y+$2j+#Tk{~1(%MA(3T?Ahd_97G^=`qkd9clRyby%RfOo3C(m_PiOs z(ZApR#y7LyX_h~EUzUPDXx#WVlz$Yc`0hm0?y9y8{nY87EF3=4uwY|{WQeP&3#{Sp1-rm8 z2D^CYFB0$*X$kBn80;QQ;qfE1d+O>WytdfnRN|~%G{NItM;xw0`+kg4k`(=QbEyxe z9f|KdHm?SE#P!_Abg906_t*V9L8i(F=As|Y&wUI>DoR~`=y(Yej5C}(8%wMWy*8>w zJbzTASLwSn_v3ePOjLYU-&3xGKMFH38;lme0KV{tC%wD`UNZy#^YWh|_|Gc%&qnx9 zE%;A4{GWG(*7*lMM6he?3kimH>3(O2i&Y~A)>H0t;nCuEVTr$$gqL!9=VMi-lq61f zd%vrzhz;glR5A);gU#WH+4{u@`n*F*yqNO}fl<@g@LiS*EsybgBZi#kDaSp${c+Qm zkS#C&(t>?;!fGdZEGDH`=B2sjs9b_E>K?X-E`3NTNivO5=#sGdOUr+T%juGlC}Fv< zlpkEOS3ZLTcA_GmA9KETiSowGl@|B)UV&-k`8yI=!ybvb#1bZ46(3w4n} z=O=iH-onx*;l2pBonC>25n`BqUZ>mM#5B#3*u%Hf(pX^@5Eu-XpTnpn*@prL&t)TFy&=GjO!7?r}ol%t#beJ*`ILgU#uRtv*u{r9W+n(SfrZU zfGcR~TIQNBCRy0o)y}*&-|h_A_iHA7=L2rXMpMtWYVoqf!KX|@|MC9j=bHjIMK>jP z2+ik>4f_I9?%6^+J-nB_Cp_?JBl=Fge7&rNMT0$DpRY*^*UZREI{!2d;iI;1aDev; ziyi!W)oUSfJZipx(Xwkg?6udF7>QL8A6*4Ev@o_%AxM~T(xM}Sy_Tvaf{{hZ(R$<@ zfk+QWGJv?<2m zS4r*k9oooykrh2Wzf86p4wIb+v&h?g7uXD00=`JLhXxU^6jdlg#UtDyqoEHiswB4e z9r0!<{@#PDt1`ErRc37QO;a}DM_lCMNvc$U(um7zn=s{kW)l2M-!94Dd@@JmI|Hp$LFWb=K^D8)jywy zs@)%Czq*_qDPHH@|DK>|c%-IdgC~4)=J<9wM)Dpx#qnCrbkzE^BE<+?;7FvD|MB5g zq~FACw6m^FSsSXYH_~@EJ3UgRezH-QWmMr5pm8*6S$(Nt6w;$*cWr9t4jQB0M|I;Mpa51G+2dt6HV&?OnOgV}zLz?;X&7ryR zx&_`%q*8k^t~Doau?6>Flv<#La9uduPH5I|q7OYH*VN8JzVzF#$k=N*cWXYLBo)tD zqpx764_!xoBSY?9(W1XPQtGp2o$L8vjZr6T-)&l1XX1uTAInS!*zyuN$C2S@tq~4O ztyejb{T03Z1_Sta(uvikaz10+<=2Di)=1N!nazH^w!+(!{25?}txle`O@YEp4B@;S^~8F49U2U&+hx^|WMJ z*1&yZsSu;b{3Si0X)^E7C>4Y(P&ZcP<((_m6`gkMX72@C!f?@ZUQFA4Cb)Yw%3G#D zHvXCG=(bZ}!1U?5+k$@er0aNkyP|wdS9liclG;>40|Cy!b09!Y(|*@YKdF?=GP2WY zqhY5nTWo)|qMsu`r^HWhYe@44jZ+UdVpsm^ka>#j4*_eYVYbN`)Kmts^C8W31`X*l zu;eitV5lv34(1{WUgzsc$YKqxXI1#s#4JseOBe3uz6Xi_3~33hg_w1iRp%bTszyGz z<I<5%jzHy+tsL`F{+FeXyHW{3@0qIz!H)i<`idXA z*5Ui9N#`+>&W^U@_YkFs_1d|JCIU~E!dL+P4626M5bnkk`#}Qhj!KN3%W-5?<-fOuirE`ibo4&B;vbqB%yO66+@|974>3enI{L%cF>0hf*t08^8K+v&BtJ2RP zQx?oZC(Pej*ud&5$P7LlQc^F7BaO-_E);1IoPF~^_E_w~WJ&$Hu5Vw7Qj*~yONIAX zSG=-^;rrrmONjeuacbOIaX@QgS#-a0ftA|dyy)A8-VX32n34XUCBdx6#zgabm^5zx zZ4d6vHAdTUjq-0#-b7o)?N^_K`mvIcmP`ORY9^~lv2R;16Bw}msCJT6>T&(&e$~qM zev|e3jVAL9pM4gQhD!2#DfUes@Ed9Y18n*VdP=UxOR4<>#n&meJ-sx<=QmD!x8IDV znewbK*y>;zmu_et4UPK7R;SCi#Bwn?HadE->ZlFJ-hH?2#j3rHK}Dk9&I{sHyu!{{ zB}zcgztGR5!Gv{QivN)xBpQk=m+x;kTlt*)SQs0GZD0szdBLbPH<8Qn=J(S-eHi6t+!5fh&$YeYSrlGa zQdiJJIQX6?u3^`0CuTb?SD$Dr9V~IS73oufCW)blmQU&K=4=+t$*Q&;SB%JTIvt-r z(;VX)+>cqtTw@VC+5Fr+d!G5~#+|jq(cHzGeh1Pz=$mGm3a@j`>!@dIa%Ok&^r{%9JT3pny)+N+3}`BsV^`Dd zA{ye*u3%QyldTU$k&IXGsOVyk1h+dLbocALk#!C3L`J=+u_%dtm#E2#dQDnVnI*6H z=p!h=n3tfG%%JA?81y@BV)^wIFiI3hqgfWOuJcoF3dyqSD~v0&z9WF$YF58;&E*MK z^e<)%^79^E;vBcS8t1`=MWeXBiBacDBz+pp05!iEeaj4H@A@#=ZOWsYe-gKtgeS$Z zJDI9A4!&kfFz~db`YUC#@K}_02!T&X;-XTTP%JPwJM8znfn{gT7zO%b-t%iwwREkmaXL?!$9-fKGW9qbhz|#s9;r58Vb6pgRQaF0^in^s9x7kICf)Llh;+59?AEy zX(-!vqjf#h!egA2*mOjg%(KJ!S?@oaN93qSEEjr>Y##|}wq^vhV#)@5&p@U68(O;zxZ;uj^e;NGFjvIW1hPd{cS274QIcqFl3h zoewk;pVR_heKIwsJ$;sk{HXpY+8^8Oq|~j(ne-^eX$6thp6<0iO7PMR9IT6Z7q$08 z&%W|Uq4KD>$c(J6onu(FE|Z3^?TS`lA-dGmYwcQP?{pnoFsbr_He80ZWWG>uoHfq4 zK0)76;ZSHs-h6BR4&EvL?i+gY$8aZ}&xrfl;&S8m%|87jQL2_)mucON4)5G1En%Qh zDjZZrWYUbQlE980=wI-MKh}L-eoI;Ak?wu4lubX#QWsPP$V!FmSI?|&#-`b;;i7Kk z4p%ee$}nL5Iuw(38n2Eyn?EGGH_u&+7Rga#V5hd^w7mE_h|OcY=daH9f*49^%R>)9 zsZf%!!EU7#am1J4?4*plJl`b8^+T?5)Eb42@7$?Fw4nIp14DzZz%SOheS3?;r`OxW zHhv*hj2lUWA&b=-BNCpaIc5;Eq>YQ_u_NnAauL|;-|BL0Sw1PX7N9Rz&7e$cKCDW9 z7g9mslU126D2_F4-|@P{Z(oCcavcqi>qq%jXjr)g68YOf3tloumwt^B%SBl&JIH&W<;xi*Sp{W?K3DrX8^HN?u!lYQ^Ycxz@f(-(;7l z;YACZjV}X;XBIZDp5%P8)t=zAyhoUke;Kb?oYhex1rPM>teSEjdeVJs0Ybu+HxY?l zc+n9CJr9eiULy@OjEmz>E!)bv>67n$U8cUHe{-zb2f-_~?bI6ISDYxqcKax{-PCvz z_d-SF3B`)#-<>-PY<~R|U$Ej-%*3513Fs%zikFmHF+J1@wJ|1)L7n@9(XJ_3=;9n< zrvB*VxGkCEJ0v`*&ukV`o%%>Wn$n^c8yMVCE6Toh7R$~eb78z)4H%oUhNI=en}@jV z^lA-dEJFbVG!zQ*k5Yn%x=N%^uebFoD_PoydadK~QVpfDgV^9rjwPVrS&SC5U=*ZB zX=z|UK!O?3$KjX;Mq7ESd0HMC>RhXlRvJ2s&B{q44B(3Gq*Bm^G%nwt=KADRtmR=S zGAb`2uKkX0H|GWG9>p zXRC(YK}EBypO}Hx)=K!)!A4N4I%W+n7>M zf(}?bk^b$$j$s|*je?7`d8sLd;$nWK8h4cKTV5N!3*Ulo8wmc2ZvcQ}y36jdN7{&i zm+j$l+(`1Rd-qY*WybEl)}?A4@6)4F(hV8>>b%iNh$jecm{BX|Sh3uH!fKlCz1^vH zX~*^Yo8FJ}BI~u;m0`J6EMxad>UEhi3U~TMN_+H|PV@>49GecoQ*7zS^0!>{FGE1J z5q-8NUjHSBkAW1;a7&&~;dSq#;kwA}#x?)%eUGp@nFK=VzD|xsfahvid;Gg#WI@GW zPc}aST`BI}TLZ@iWJ5*v0FZ^A_OXpK$p!iYCOvKTDCHZ&4v*t%00o|{r1tsYly&_i zSo5BwG?hGDeEkkU&)Kt4v_ix!O~eRDFvZD>43MdaK9x#dof={%D2Dc`DY6f5l!eS< z^U_(TkF6)I^yE-D2Y+g^PSKAWpQbL?Wti?dF(&e*)qu16Ip3gn|b zFWNQy{SE7>Sag2QC1fe@#ju@pw{^R?`xWp~aRRO%^KAj}VzvsOx{PcwJBv`QN3cU<8uLAO15rqivv0^2_&Rj*c@UQa`UDel<02rWVFk4Ke?KF8VsB zk<2u=DO^ux$G5?24|}=#mDk?$&paA)DNjKa$Q`99I_?h03EUJvFdAiH4&4o+#=_)b z+}a}Yi&%z<&X2>Xauh4r_X^`(-aEZoO?hMV_j_xdw>y~CgoOc$bB$usGEJchrE8|P7Y8!| zK<@WpVvsUbQ0gWUpX8q_qHkGhODK_Bt5Q+r`KBy>=tYFlBv}#%U@><)=lTkLDQ7vm z3u~?;`&dB^v50N3YExbtOMgaMFpmWDhOz7S0^5v>Fi1Yith0zOYTO?)n@MMVb&Yz> zF1ABTJaiE`QE^KdBc*FuUb~t*nZ_)wN>*h0ZFMGuZfeArHxd0k$95iQ>Kvi7LBv?D zr6L}x5uo+eZwr%Mx%N=*!PPUH&v(WA5Yf<&MumYt-pWL$|3dI8qVlhOO2+J9=sqL&c(bgS&jm7H+4 z3$lKnP?g4VttFKM0G_A-W%bn!={{?PU(r$dT7m)ul1$RX=c{2)QE{+Amt&s9u z2e0YM6b2+!{$QqrPQ%Ub={wDgYaDQnqk2YAqkYOZ?eVD%n87p5GY<;g7g-KR;<==Z z7Yqu#k5ZoTa+s;wwl;h+A7x;mVYUhE__!Gms0QHy|1F5BPZ_k58`Vyw53B>90Y=6G z<^cwiy!5~NlB8(-e`f*y*FW|D`Oe^fN!D+t0SBDW2U<}tkOHSBd*s~UIaYIW;_n4b}0~-z%3UP zcC~r|Ez0@_P*j>^JScuEB^m%li8N|q1*q+I5DSLLw&jm!ZjFSr-3v!)&peX2R?VWkXU7*#Y7WSTi2A=hHciV1Vg}BSv##>U_}r+ zq}Ix3kX{>y6viGg!UXt03-RMxBCd3@60R&Epb;lS*k#nJus9j?W7`~+kiQ)#T}JpM zjs_x=H8gc{M?F`H<&K<*6CiPi>QNB1(ixT>;!<3XjeQeSG zGbzB>77W4;Km} z_ePq}s&FeM^+!#NY0iU-K+b;w$oh1ct5=h3_#M9ATOZOrmlqS7Pt2TvTXDm^If!$m zwAptD{3LgydM-kw1h-Z_-qr8n1LXMTu703Y8&3C2Z+)eTK21mJBh?qs_=1*q@ULR(+Ry8Dy5 z9e^elH$GMh7JiclXc3piAe1}ey`neGT0eO0pRd5FVCWTIDH@^yoYki$S8V~n3T6ov z?zVp*FVn!c>HO?CyUtT*skSyq+==J2x-Z z51Vti-`<7)3&uzi8@USy6(k){u0|dE#=WnjTaY5Vcz45H4$GipU0jt63?;A1W=>Fb z5k^ZY1-fd_21l>NZJL6f!dz2j2%J-0UI?)LHy?u!xLKZ9bmuxB)?Hy(sX*DlV*%rM zPRx2JRD*ZFs1P~;`qtzG=y<(&(7DY6E>XPjJ=@7hxa+9aR(`x*AGwv-4CbVly=Fqq zw+X<_6tJsZ!b}(?J%G(4S1*Q<#x?phb|Wj43_~?b+RPH3{Q!;zBjTU83-Nj-8)fjw z?c_QzQi>+%JnyYgL*&TfuU9wi%+p+cEK*M&$ihFDG@l(oqB!1v#DvSEbVmr)atTHz z4C)S-&1fJ_1V*K&Q^ce#wApe|@eTJvoO-+mlf$P=x8r{O0(w2mg&tra4en6FuYE`| zPhKpl=v%(}sID3BJ+3+fIvj@{5#FAy=%W-iGZDDUiVI&|MxJRkk_hCXFTn&cfutMh^N z>5f%XNaWUjGo&aL$1kt&F{bp|owF}Y;@qnyRf8mZ?Gk5Y#4_-3`hf3QA+)+g3FKP( z4n>i7aZ~U>n9=ilf0lA5Q-%$Y&8xvu4!W6Cwhd4|A8@2Bc&EL0FccVI6V{_+Ay%^B z3+Ew;F=AwYbh>nnokGVndJ#AoHaCRkqXv&+`BMO5EJ||tO4WVntf)8$ApR8L7=Wiy z8o!gRg)(>ueSnfp)8V2I0kWKu!v&^lg@AmM0!jb9;7+%inh`~iN2D(mRoSr$B-36< z_$J*CySbQbT~eOi4^=ofy;e-eG1@vpXpuSN0W6UckSc%UZh9~MU^eU(h2SpWFlx0% z2azXn$2_X}Q-Q&(Sjx966sizxVwBU^Ik6N9Kcm-j$mmVo?Fvw8E-^Z6aPh&Ta?n}g z{TWDiz4rxY)xA}PAaX{uahRZyh?*}vc6QB~wC1;$jT9`F;N|FoCNd@Ng z2_d61vzylnD;izK$_H67wj~$*2S6Y4H&z@*6>wNd`xBF5e|OkK8lKGFMksYQ#DMKq zj#l#qioIn7P|z1Y)1AE>U4WcmmMqCqeD5@*J@{r69@|^CkNTaTcK5RtSE?QQ4k|EV zbRHyCYzN%*&b*fOginrS-29uJg`P?c`uV&IL);S0{+MPF1A~dR^_Od zE>NM*Lo8tXbU?G$IfT|WDpvA^jpO06!s9O47*XW zypgqwotYDme`VI5T>WlN#qUTxDXAPX!A9BO0{mkyvdzJe+WyfX-5VARnZ; z9kfy}lpr^H)b(IMj*gw28_vozp6f+D8^A!>ae@hw1mMbh+Jn(wp6zLYsH3>Y6DqZo z<+y9zwg|~in|Kgas37Jn23Wk1m{TaPhfe_(SB(YPn5rNaY@dS0lj@g!9OCv>HXGhU zPXsWNfwUg;(c9!$K^>sh6h@@=tBA`1Fh=LtuseJOgn1s=*Q@eB0A~7L zXeNlPOIb9n{Guww{v?JC>)2@$0SGiy@mQQ5SuIeG7BkPtnwK-^Yg=J+QIs)1vWlz6 z3O1Uc+(7dy*P#z_%b1=ImiQ0fyH;!?N2jAE;0n57+lN$LAD_F|=Xw@RE?qTZJ}IRF z?IP*#7|k>rvxeDsY!R_0ABN|7GY*w@f;qj7E62$gbBJ>ESY^t?omf>h4Sn_;9B*Ky z6ps7oLy?0$Jl#k$xy&GDC<{QTL2)sd2rJlW@-??%>aCfqf^N8@*d;cY5)xek3&W#J zxSG0<(IC(90rxBLs_YRuvBeuoVcZbiY+1&!Z)!fp5nW4|421cY#jr;9oY#V-4ZX|X z^qze|AThYmzX060MTSq8vIrOYu)*{;JuER1DyC)eNeqQW<*3nK5|Y@oBnahPs2L{l zherdlkzWopUIF{2L-U=<4PUn$mEf(PZ<*4yN$&d{4Q0^&fsD!!AUy^k_D2J75PLy? z5gp8Hb!Yz6l@qHxM&sCVA3#)q>7lhX_XXH;W1^tI_CC6N_aXE?hGIz-iBso_ZjO3@ zi~kL9!+1mJeBG1s$^dZVhY}?688;p<*Ap!`ef+Mbh}FJe^j@Gd|7rFV%~C8Z(=Sr| z=mpfj!gnoOK28A9yO+D2W=IqSM|uIU94-PB;eijT;fXKMaQLUs_G`LbyGO}8Hgy>v z-xS+b-(6AtD6V*a@yH|DEmPb|Fs6b zdfhFl_kVoO?5iS#E1iH2aP9C6szj7EjR1M~o}W&iUtijS;!`PL;A%ZUcq-&1_46Je z7JTPG0hFsRJ|<*!R8bW`Gy=dd3)%X$F1Avev*YRW2#4uEa|Yr@Uk|$0>>IYeMx}F> z;t%l|oD%rG8+)FMjmuCXYOle*&+Mc1%aLbpd<2lBh)Va$cVu4&c?1VfC797H7nm9t ztkM85Uh{V>ADAUT9&rdHGW3UvKDJ(2ARxb2bU-G!(APQAA{w9FfnLB!7R*ayjO z_KW~f4Ma#B&c_M>kL1^j8bGnsd!dBNB1mF!HZvU@0-j^g2gGSS?I0i6sAu0(J(sb6 zHU*SvGC2`5mIZ}}9DHOW84<7jymG~LE?gjfMR?MAXitn057DA#9H1oK5Xw1_;{}bD z4+Nv0Q~>VI2Sv#;@q|}&Cz((zCmE2XMjV9IL6oxkPu9k}2V&2uK*j6@4qI>2`1To{ z^S4L6;Az&jPtqLkMv88CEP`+bXS18Hoi5ZBy5}gKIS(|oPk;=M$wa9HjuH1d*_6LB)fzY2V}Ut)D@3 zV0;ze9AoY0v$va>+b2NP^b|LwXaWP#eoXWl`K5U?m@~|w8CfoJdtRrbUv#Gj%FzwD z=>?`ino=*(Rivt~-&Wi0l#4e6GdDKiHy1$&U^`j(_MEM})8Rrw!Zg`E#I=K;?czUn zQpu9_9Xk;V;FY1}cYNCk1XP-=3Bdo&69R>)o2VIckLCWO^`WLFPM;;kKUq0a^HmW3 zSn$QAL--FR=?FM&!mmusNF8Vp5&IKhnC-i*4PAyc6uJI5=0Q9j8^Va3B#U&9Bj5hA zX|PKoT{D72g?!yUlBQ*ZqdRFFzWm(_jy7xbZ6KwpUXZkBnHSv(8A76c+OlAQMy zy}}=4yb9ukwFH3**y4U4Lyaxz2;|F>)ARUS=gMa@`MvZW*xYz4=(5{h1uAOn+}bX(c#rEceW#!nb6j1mzQQyZ7`OZm`9-}g zitGL`HOMDwG`Alusrc#kZR}*6d&3`rY=rgi-F3I-dO)|D1_@pT5{^9+Q>a{}z#M~8 zzLA-&b~;Xp8jKj+X}bx8ET-U!j_e|zF;HE{ZMI%j{2jNsxI3i68K7m+rc}~)>9+p2 zqN*Rd2>nB#P-qlHs6E{ti1e*I1mIcKPDMMuAgUn*LN?QLU|+A91Khh-Ncpaz9d5qu z4XCcYA?*99crS>5iG9v*z3 zVYlHC?RdJhRG$84Z<2MO+o+W}gFxc$WNE$aRaoLCXz7&pHg!uMau?{&$EKGcSw!c1 zDd>PcHH|CJHdwD7B9-dThnwr$7_W{ZTh+w|yPgX@k{Uk)E*UbJOt!N8KxLsFgcHTa zwjA|ZUu#kf*Gzd@@3dUJ88=<=m;J&|kYTm9JXctF%)p=^Sh-r>%`b5>b29~EctIC4 z4tp$68cLj&3!T@JPYKh_$W^BvK(DXLj{#)!Vqv4Jc?*W1oh98!&m)6%t!jGJKjEX)YHs0 z7LvB(5i!A@x=z9i+Byg6FI(Yeo0hDS<=<2?2aiVkeKphT)hWhxjF^7CXx{dc3f?EI zYsLq$CLIrQyeH#;Qn0z#nfjA}+jVWSm^(U?(N-MpGtV2eq=;@p?U1QYl-&!xz}vUm(zyY)G|YZXnqZ(hOVUQvLc^ zMxdkz^L=^qe1?XuD&@^MA%V#q`$2=SMdd909{t(_>!Px+FCq;= zT=%#@aqL}8k6x$L!>e;AihhK9L&zAi64S2=w6PmFdm?`{<9w>xmLqVW!X28hv%ibp zE67J1=cMs!K|W99eqztAe3jI?2#`=P{`BNRa3;0UXxsxG|C)N=>>*vMcGFhHEh0gPA16lWZJ7i#bI6BX6ePD*lagWy4j?tYUUNi0A{rp` zx^?k%y)-6o9Llu~y#BI(hi4+g`vbkPYKb9H(|Yy$RK*gDk{KXLkN;68+Ewl)Qhc~3 z+UJ#MJ!TbIHs!g3G09_Rt~mvLnsY--s+Q)#n#$zx(@CIeN01sVh`_kcKtP0RRxRtB zwW@6mF-0RQ*&m^8`Blez;qn)28cTy#x0{lxqT87cv@LTnU19M(S31KI(CVg|a)h}- z-65T=Xo?i%$MLlQ-h}LgeHz}DhZhait3HAtYh3323PIt1fzk(|dzGl%?X2s>1Fza(Ys^ZL6-LEpS$!c9TcXhN zPg;c}DJ?|w7lcSjovjKj9gBd^H_TEjOtqVgw<^@C27Ou0ELKMdZa|M8dM$)2!8Kuj zD+E8$4S-PEK-8qkVyr@OTRlyqTTUx9ilFoFH43KfP}<(edt%IKx4=1-%9j z{K??!xF4CK_G3wP5}eVu5EyYGyAtWZa&#d>KI*FeR0^@>q_m4j?pSVp@KqS4A1J7a zzj6mNPZQ1o2K14SRDi`8(SMSp7`9|V4NDQdLB^ADnMTOfpg9@R1 z8@Ot?wy;GQ1F_Y`vYxEYKfnsUM#5?SiGKPyrpnSS+|q4`r1R9+Jqq5 zBwQ?^xp@97RXFkR;YBz?CVb@}gNlDk^AIFjj~I ztE+&Jsv&-$bFXGiAX+mX880#(2=bDw&(*F+UkR>^FlDwHdrta3re-VvhW#wvxyb#IBeiyIb!BvGB(E=lS* zf2tC!sAn0||FlG|#HI9ZAW4jgb4^C7v-RHYO zXeA+Mfu&vfueh#zFr!w$$BY`Hei?uKk-09!Sd7l7d?a7*-aA`Y{N{Ij5-t3%v3pG9 zbZ}|4r_luw=vY&?3u1V^9k(ck2<*EPl(NgwYeHSPS^1d zs)vY!uB!E6)OYrb(VilOP2TS-mthS)s}#g7?#4E*9+tUnxwcG}w@b0~ol!#uq{Qk1{u_yr^Dpc3=EkYPe>B z1J6~)fF7XWXxdrV#P|LBxt7pl93#4c#8wszB*D;m{ub!!E8F z05HSPSmCbfFNf)xnW9<|8CSB<-KHta#OByrT~4l=>({hOX2g$Id1YZSPEX9f-4N0B0oqKVEUgD#Ri#-s)=M&1>^)W>6zZt?7RpIyM|$dh1DWu zEABerQ$r0rt1c~+*#@I1PHnpt#yHf>qGfDaU!&C@v+An(#HfbK>V#PsXZ)i7B+Y6u_<;FD_4+m!%d*X4jXS z+yfCr-yHh)dJ)suOY#1*37CNgjhFnjU>L zZ0*X-n3r<^Vy{xAGa$S7R_qn=4J84tnB_Qpx5Ku9nLy6E5Q|VLG18;h!w249SCiUj z!6CxyQmwJzxp<-;ei5dW$OxUi|2blOaWh_V{HtnB+$GqunfdpZi`EwsaYR5ZQhfxZ zy8rIwje+I4?Ex-TuC724^`-*OKj@2CO@GXhX(Yx)!d!~(!6*vV|K z|NTBR8Dt=`|D5`0r}Jw-*EpvD5S9WdW*b7_fmEuf18v99xy@e zQ8^g0gew>ju{Qo0=?8?SWW&>Ctp&=8K4EJoAjI5Q5|Y?S>VF71Qz>(i5>1tC7ho;W zA>FVVMsUD(8$*Ts?9xWA^-x`jTLwDZ!bffM@sSe{O>Q2R!L=dZc#ww}275ICH4_$g z;pu~~0$s>BAg?)9Hk4THjUrz`dPi47 z0uYmH&w^nvt^pvVa!nmT=L1p!5kshYfDjyNxa+ChT@7$D!+G4c22&8HoHo-1(kml> zA}qegYg)dB&I2;tT0{w1AoQk5+6Cnx=YDB`lc8mQF4$2buE>EiJv;=WjI}1XcXJSo zrJnNzKJK>vMO(7>(9y?UC=oCL+~9?3;96JPbbEs+$U|TSpZepsfFM)jadwCgdHC=) z3nHx?-KgQM2wK!&h^&bgWcvm9AtR?<~mGd1?d6OcGR>|cbGnpZacV1<^A<^Bcp zKNka8l&^Xq*kL!iz$9&}1vHzc@gdgl?9%pNjelQ!O>Os^+H{cS{{Qdg@V_s5o99(-8=sO#TrRXr^gE^F_4kRoTLW9V-uoNHFk{}ozaVs7 zK`3*`J*nu6o*7>_V{UvRujW|X6JE2}52L2$Q#_b^GLn>vs>-z3lpP z@yA~KAN$j(KW6N%uJ3qq_ow1h@#Th1eyc*q;?o<1gnPgwfx#Hwut6{I*+1E?z&|$@ z^`Bq;|BZ%}N$zDZY{%JlHT8qif=0tuRTx^LmdH40053kqG~k5((eXFF55`y$NvlE9 z%vguC<$8Z@>h`~X%C)-~5{v8aZvS+QwBtxe-qsi59*v$KY`2ay|R9EV5vv~O?J1;W0_XeqVDM&!3YEwnDH z(e(C6d*z`$tW!!77 zet}j?l}P&?Gc90|oo9>Y?rfD< zTNG@GuKkvsa3{>#qYb9V#6CRG8kxP>PqT6ASLr#o?pH>fJQ!-=cG!AwQ8MGt?btV2 z)#)PCX1naq@TN*tM}~d_WGP$4wrf^0@;X%8`2tH`L1vE{&bgTw;LS`pB6KDXmHfo z2?U08y;c>SXFyE!tkPX@^R;?t*HnMk@WhU-WMbl7w*bMUXGg^f&1MMGPHskAfZf9q zzv;HK7W+rDYd=*$%n2#(<;9l1^E0~kcUalM$)cvH^_+aF^UqegPtC_hHDjKPmmysIRS!=!V;UvzRN(71Xvp%~CS3@Rc-DZ4d0;yqB)nxoV{{?6KGyV&Mh*AHV?c2CpNtk?!4?>;RJRCp`ow)Xog zXU16A=dZ^bRaFA<-DfrAhINH^nRaQL{pzSkyur6?V&`mnV_Rf$8*kYbl;Y11KYd<( zLPY5Z?I4C!SJOsa?DkP!WZQh{5xSohMDzQ{ z^$zPHZf%^t&$X)9Et(v2GaV6`O!n@H-Iw+rda4{Al2LChT7_6kYP@X^l}_9vu1c>vxTp#KE~w4Q;Upy9SH_Rp?!;xw&Za+` zbYCV-P~gyFVJ$?VC`X-Nh>7p4X?o97S8V;P+M`S&#OT$y&Bko>XtJS68fPm94t9%+ z1wEgzrytkKp6G3yRk>9a+CE17pc(QiRhb;~jN>KZ@-6~l8GoP3r6}Fh3hdu>$6s5A zUWiQEo$P2?6plL=`kh~O<7jR)fBs7=1E2OYUo(wH{Ar}g2*<>oT|7Rly;K}W=i1be zdsmAvbP+%=_YiZ!SnS!@>8)qzxOgS-X*!7 z7d)0|GVb3{lGv>pUH&z}Q(gXiA*xJQpO14H%&OmKs_d+*L-$Pd#kv z$hQXUkxdJEL7Ai)>E845E(iu#JQK7y)Uqjtt)gqh@|x9hix_aHO>#}M+4^l3j@8s! z69W-7=eyc2Z)}AAsY$$w^mF{-{{43I%Wp(^MRZur?l1z0W}g{Vnj7Q#WxMpZ(`T!u zJ#;g5Q=8L1>+Yh)K4KgvJ*ExIF`cysJ!OLDaH6X%j!^TGALAbmkMwckKl@d%^s~B< zdPCGg^z7(pDTLNO;`?me=M|0LKZWeKy0kaSs5jQXfQyF{G6V*^lpjFlQR!xpk_Tar zx6H0cGdMwLER~E=C)Rr9eTSp z+eP|lOJ@}v&YjP#WKPRu$ZZW=t#~s}B#X1a7nQXnA zOo$>ex(~ktgT-`VJQo`lma)qx7&d;wioA}^cCd(UnS-s^jk|?y^(84&D^+?-^$wrf zT{YNbU3*;Tg6XEI2y3TtiEEFmV&<<~gtg6(RsHS7aDy69+fd|ENQy+A zIjh~lr*t35(t2;!2$39$e!=RpUp}Gbjrqh`E7g^ATH<^V-d;IOm4cOy3Dj60F1V8aTG1?Wbf556QIsjp?DK zy^3pn@|LLAocC*c`&>~t@79;a#h=x-dP*uPa(Qz!@rPaB;o;$JAlyp}ncRH#W@n4D z?^^zKOa57!XIs;2u7sn8F98~bni?4bcfx;uG?uQ^Ee=T+I5;upb1y+9We*GtSoL)k z_e`JU)0e|8^FmMKnles-jvJ;l^XmTc<#FZs8f*R=)~mh6$}CPA^olr)P$m0cl#Ed0 zxCVBW6P+TGIS7+`-42@^%HDc~O9>j;*Hh2+UM)89*Tl%^>x>!6>mUpMVsH7R3>DI! zWUxiK__p<(jzr#n4K0^ZSx0O3g96xRS?CQie-Xn()%Gy7&_uNaDE$xf2J$Riu4yGGCd`@&0eu zdTws+zxV1mZotl`0n#Veg!r={kZ=C4g;!Y|U|eQqYyx!!bT#Xy z5(|Sp%hT!Ny>5$tEj{+*#}6-lc8dd`_6o4od2JdqkQ(jgf!e$bqdi-U-qmQ@a2Or+ f7+PaMhyF7Lubs5Q=}MpqsEG4)^>bP0l+XkK@xQ01 literal 0 HcmV?d00001 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png new file mode 100644 index 0000000000000000000000000000000000000000..b830990ebdfc95c2c5c870a1258e13a448499b39 GIT binary patch literal 22048 zcmeIaXIN8j-z^x5A_}4)`UeG6nlwRr2SufW(tAJ%NS7|53Mv)^DWO+shLX@iZ#IyC zw9u z%6%OejM5MWqhLOB8vKuv0{ROKb{(dA|E}Kil%+AM1atj*@m0n%7tUO;zj#kbgOIPqS=*Ke1{y?{`Nb!{syabCwv}eFGz+lW5{{2BP4F4XSf3KW> z?+&mL{+C0?ix&ZMFc@;CsB)aQQ*PVLck+V-KH0TlXy6-JaAHScS%-;jvU7#-g#QML zjNk z+I8<7%Gmbt9NlL4vr`#tDnIZUcS9WjU~0ex>sIgW4$Ni?+x-04zBWtDYN=!W5dW`n@XU7{$?S5kQl$kcD&Ql)*(YQOAFW%Cbgme} zN2}j9#?-FVtmg;@psxiTtRb3$$x^qfr{hfVnPIFZD-HWA>jxX1@u76`RRh-hbIJ-P zX~+e%@M2+^*5>g3#PQMkAu*`&w4A9^$%7%U0rNI)h22(R+xCR@dF`N@*YdMzelCeY zN4wm<2QTFd3QN`MkB02h>suz7r9GcY&8B!D!LDmMrUzs|Tt!7QXEJ4OsNj5Bqq zcJI1N)n|#=9`h00Xcy_U!CJ)`+wx58G)v%{UQjG%ans-Xz#>zjyiX1rgZPff2P!uI z;=t6TXPhWjYGxht^{E(bZ>PrNqkYHX(mn&zzWfA6L$eYW?FXu?@Pofs96v`1u`>$B zoa22>d)0t#*`?~w>pibfTJgET3NS)(BAv2jftp4!&+ImSNno+&UVZwAtPkP~TRZ5A z-N6?5{(?pM=~!L7x?p{8!8Qz*N^J-WW-`g`_MZ_+PjnJ%Zskrl3w<@>+E_0S2OrK` zFaxmjy!v3htu5r-ZOLv&D%R(g#$ae=oYhaM<*t;cfaNm{7L#&iix#TQrFPk%VI75y zmD?K3vi8f}aCv->4Bz`s4}p}jlFc5KuV)4=EJn*XF>BbC^DBm`>;zYE~2 zy-SBNTAsZ~{^oN1BbU0h=HcUPoIt1bH(H65g$=JOg&OD3xvi55#~TW50MFXCMqJ^c zF`Lg?_0lk<0{Wuy7D)RcPlD!RZ{}uz>RjoNZL;Q;+5ANG>#D>jqMV8DqSf-ZVNJ3B z{h5DU^IIwzYp59W9`T~&OB{}VUA`8|c93x}#jTJyb*D`DQOJ9h^teq4)eGIM4{egP zl18=os14lH^iuqH+u#^|Nri(ybZxa0hbt}xj|_~gUX`}puI=Tj1l!F<`Bdku!tpN8 zmaeKo!kp>^D*bTDZhAT%o>udo9L5XyY?o_J3to+{NUu?W)T_Iw(>gEJv!LChe=pvT zSYL^0CaeSWN5Kyl3~{_%fAD{N-KuroS_27g}q;qWc1Rv=Lny zcgI%J1B5ksbU#GMtW=e@awTuh$%21bN49K&4Q2sGm==2Uz(0S&*lt6WLOCH?-`m1} z?MG?5a9i&(HQQ?%CY^>Y9Ja6PrtV8H87QB>xydg1U+~P1g^#ZiDmWCugCF&*9eh0} z$WL|cS(9gN#6|Xpz4%17!#QQIp(#pvGw$04s;UV^v_R!(>1#e}n)3<=tIYD(ya%lUkOJuF-L=RdvrrTz z*L+s=yF|cHMUFja(JLpPX5Ax z4y9*n!`nfnu=8cOEn6^~TjO5Frghc+a)H$|MDf7(P?^H%+n9=~bb^gX>q zj}9rvtPyjcF`SlwnxeF#*KGN6Byk6O_ZU9u~OWYy$V2l4HoNMP4j18PU(u(pMj0H0v)E<_%V=| znp1waRXeUTV8sJhdb5qG#mwWEKAQlw=uKMJyc`WdHKk!NX1Erjs%4ZV=j1QELXmA5 znxh(&8t$`qYw+di{UjUYqkJFw;OwNFg2LOe_yo~O%~x7J>NyG^UA&js&xsy%g1aQI&sr~hZ=rd=5yixsJ+;gB@;7sTt0lT<9}sSR}Oql?-3cFNTi0fJ8&JC*$4l746)uuy~V+*zCS z^E}dPE9W&t-Xvs~GV8>}Xfdkqi`_?-b65@`7mF6FM1JtsadP zmM=m7k3XpZUQ|GZLl%^m8_=tL8`ylRifik2I33Hm+W@%}czM;9k`0&## zw6q=XU3ZLLAq|^+oweWBR0C2gy*mG6Ejdze&DlrVq3^<_0azGPL}Gfba`Mq2P}!|aGTu(hr#wI< z>uuse$<;1bm^wQptD&mqbCad(xv`B~!;YkD^X4%DhQJ8Me>qWLFi7 z3{>@13@Ta&M6G^ZO40jRo=cVr0Bzc^aZjICn*L3BQYBZ$&$CKJLN+?|iX4S+DcPWU zdD!4sOpi86>{-j@AXBzMrC~sgt#AjR)%PyhtR>r~al7&OaQZ#`;0diEz3lX2e8Xl= zge5|!bX_OTwL|z9I!%>RJp>Gv4;ZW_8UaFZ4;u%;q+x%I7zc5SNt_-kdsfY$Me6uq zV{tS7)n${52CC@TcfJ|OQyJ>3WYnuGQ_Zh;?zoEwU=CU2Q3Iuc3xex6D zVuwlN&cf!T2q6#y`HEsRFv=9q0max^rao@f3NSZ}rYQqWwhlWZH?`4l&X+}kwu1To zCnsE=f!En~s3O7Db%*GJcD{+ps(Q7*pkg%&g}^n>e^zFK$1Xj~M zj#p!2e;7WuXw^gmSe^Z8KRi!fZ+@KEfLR$PBnIVI6Z7bAf^`I%V7VTUJC%)gy!V#v zXf@1B^)Ig9#PQR%+`;NM9J~#XbRz)M`byCleSUKRz*eW<@nPo5munU=d=Q&(L}(P` z+d9}7&upr-;vgm%Gqw%*Tj4;WV|#D9XzeeYkvCH=|Chz=z;u`=ry1EC)k{915{TRx zAhV-62!Rz~LU{~a@8>IO$*z4LhTAysiqgAqw6_lQ@2=wxqZU4X38mWJ8zd+t?dAHk z`%UbRN9C69hww+KhmI?-2^+tjvhKGQLZC5_>an?f;sW=z^ zGm5yfc%u6=5fTO?aj+ehmSFw zf4ZzA-ecd1xJ31R1{jUy!gzJc`ndUa<2=Cyz#@dK+|4b4^YLLlKb8NM26icK4{43Xfw8bo!Uol2!zd0TpsAvD2F8O{ zE`A9tooPUS1i+qQ8+ZGnHkIVD>@((NSbwFO8`iXW0|G1FB1;6oa={i>za^QPFOHbQ zUR~{??R!n+FhV5I#0lsnpigjC%K(dq2b2=6rYxq?rp93~LK^h0{WbTWHxOyQGZzaz z*|%-JzNGega06yJd?L(V6`u8k$P3%SZ>j*fSSEv9RfJgPC?9zLA|!`i0j8q=V!Tz( zAeUpCYx~yrSy+Pi3C71ego90c#8S=s$aR`^+G0A53`TejE;zTXB|V>Q5_Pw8$|BWw zCNV&c2HXU2Hi82M+Rgz6G=?bqCBC?rso?=;fe#Dzwy1*3N*|bb2YXvs!o!naA2%;x zZ2R0q<=en^Ju!e(g6A!WEvgvKcku(}jr6iln?R-K(f|o4MIXE@g7`Fqw5 z+XNfU#{D;bx$n*A#RIS`A_PLSF89zTJq}`cOJMPm%-}m;uRx{{-ZgL|xpaHnFFrA741=4rEb94C>0=kAZ$Q=dp1ObX|(FpzD6ma(>98_*ow>s72fuw#S1=v6vP%CDY z&h?~z1eoo@yPZIvi)do*Y`2#KgG*fF967iye~S{PD41ZR}Y-20l`oz zIt+?ez|g`M0VdQAf7#UOPWO?ozzq#PqqisJiI3X8=Jg$2zHR>P^RTB{5I1qmdiWu~ zUNtu!sJKYQOc}|b2tq~HHFyzNdUNsPt$?j)~lA_(J5CM&Zf}d(xxV-E`ZZB z4&0rVSx$Zz2g!^yY=PCc*L_&)mWb5L@%lvL6&6@m3Rq~CXX!s`BnVl3T7EB3VFYOa zX;z?(ckb`o;L=mQhtaRO=EtJnq5L(mF&I8FFQ165J77t3$(=04J~l!blCzI1Qf|u# zqFmfaXQ0b@ftvnpGm#EM0Ma9EYH$ysow!j?hrnDet%Z4YESs zMr;7h*Ne3;ml2ps^D0UqgXKox8DSZ4b>heQp#(896$8>dMnO&629c?fg9qjP@zqJL zSYtrhWh@*kzns1r3pj6{yoq~&Aw0m#*zE_SVXr$9uS6%O2T6X7^--uQwf(pP zH;cEB{~b($2c^K+kYBCIWAzJ_L}S&l;I;;ss()?U0r4?Ug8O_{1nO7a8<>r+i4ovC zBT(E#PB<8(c60C4!zyk+jAR`vQM=L@C~B&n1QKwz<{|K?u9&}AIAxLJ@SylV z9$~wOZu%#Cxc3?4b!*^ zY24grkWKV1e7>6BBPiZ42E2I+rXh3kR&j^)Vz2zouxsura5}_m9B_gL{>S&Da^3?N z+;!ji6ShryWGh+C4Q#48qj9Ex0cDfM^q_U502m_c-TumkzW*aWqiuZuK`c_+vxFS3Hh@Cr9pEt{yvO&8%CT4A{w0{`nAaGQGT=3pTe!xVc90w_ z>3#KM^rlYz1&SBOSEvHbGPG=?WNSbl)`yNMsByGt2uwr@iqo;u>(wlX;uDUnuvdZ@3FMfA%QlUuL*Kow_xw&bk`C3+f&=y}4OaA5sGxD$9h?1)7H zf?A>7LIES*r`Sh={@t-#_k$}ah$RBMk(_13rD1nwkL>sx;D$C6e#^LlxXN*4f$}V5 zg0}60it)Ch@n~;x8h8(PcfWJXKfY}4+3gMr9x5*lnO_LZSUKqxx$RNi2~ht=Jck2+ zFdD{!g^}e1esPRH5hCR)fDoMQHtP{=(BWd~;FI^LNMI6>d@)2jg?;0pr&%BHfOSfC z-&v`ej9BkdqSN#aua1NuDbE?Ir{G!+Cu|3-5yCv~+j*Hn|7Axw-?uP2Y)fb7+*M$H zazqA!dVzw>lfvS!XJc5D4M9nAJv65KM<~O31Y(t?VA;oRbjV;KIWIQVDhXK0z&ggK z-tm+5iNgq-vlY*9%=)ZjA|h_SZxEJ&g}f|Q)d$}}anS|Dxkzh-p-^`HC%dlyF)?tv zwzQeq(eow6Zg2p^I5^{sKJnMBer4I8Hu5d1eKrjotil^AUtjni{&Ecz>3+^N+ZlA^ z;R|fj+OhGm-C@p4&q0ZmaZdK?H(ty-WEMHvuA7w`V`cxMWdR2^GB;9SAZFDH)PjUL z+zSe-eh)UEQMYMeDEosuJm!<{*tG-8G~&=?!iW1$8))Yk18D2?l2D!^1t)wCwFJl1tGsYK;G)>%RMiEn#-F<{u$#oF`5oJ z%59$?XW_vLG&eAH#zi$ESW7cNtsPC=^goMj>vJa#z z9s}B}^DXj*(rZt@LcMH`=dA&AyoC4k7G6arZ&R$nk`;j5tTxgB9IllA(tIeb1OiSk z8pxw$SyVV$i|PfAGwEtTHGnm?iF>|kHv#JjiU4aO_BOFsb8$~PRq5_is?GQ zsfxZlTKRIgJpn&4jfP)ebunrHPC`7yH6RXzRrm(TZ6T!nQzN3(;#-+ypRd}$se+kM z5TT6HleAe-4haRurlNoN*4N;>p{M)i`5F(GUE6?rI=nUx3VU{zgerNetj?X7jO%?IQ9SYj)Mmn` z>_FMaw%|Q8z#1;ISd0uhm}J&FIG9zy?#~R1R9xf!()stjpnU6MLQnbU*0EZ>gDE6K zf-De-)8J>Vi*B}xnFBx;i){^1nTyWgzM-D0KFzHAI2y*Q(D>4V$%EHS$G0b6J~8@W z)FTxbwu-)>6u0T93+P`qd78Or5_pS7hL3*4vQe zI0%#T4PbNekb7`x4DbQm6HZ1hYW<%5Y(`2B&!1HL{!K2v+qDyN-FI}Xq8d1|W&kNIx_N|mussZ>R; z-axUT^WRX4NV$ZBflqaW=Tlg78dTnTUSqp#q& zr24rOB1DUrT8tSWNH|0F6+3Ojp8m=ZSW3D7LLm{i1aM*~Q}bHP5Uq`^kk?bvtH3D}v@4ZnWJ>X@bcgp5g3kg|Dw&d))vMZEsi%I+x!y5rinUGHb zNskw0A?nq#0hnUO=~L*r9mvXu>{cz(q3YZ!FueUsHBC(E|JwM+5WGwtH76=Bj^~Bs zaL+oZ{@$24KAgbmaH2Tp&y@kS&{xc_>sPa7YOgvN6U@$^94@#VR6515B@kCpxYiKZJUO5@x8m@3aYuX|#r zJEL#5p1n&=qazSSw_Fr>3#}ow_MKs|VoNAThWe$J{O%Mpxs95(kESg*=NBbp14p6C zU=&x0IlMDAQR7>yXyRx(CO|WnvC4))m^QopIAzWQFz zRE;~lOsLpGm5qGZvLNvR;p3E60quU&ADBS2aBNTVRJH($C) z@uoiaP@aB$chXACOyy7>Bc^U|p+Kxo^_BW~d~lAwZ_lv87d74>6Lni|#ra`2E`3?_ z1^i}aoZcBu75rwAULD6ZRk6oD1@wrC1LM~63_Y2gFRpPp9dat2$=A38>`emndy+X{ zXys?nQ|8{F5$eRKk14om5En%7b?uMdV ztN>bAHA4jbuvE&MFCj73plrPVP~}1t9`({{*BECJX+V0+>r}J&N`$jo0pN(4`Az8n zFM1AyDYD)ZwPB;dq|Q81q5eGDE$3L>;IacLQuR#ib*?X($XQ53B4$&4R!EX$8G;bm zXkEY1*g4rsP3eEyIB09fJ<&R)o`1j8(_?XG zo+5^a7ya_7D_8P7=Q922gZ;*1zm|>gYTOeoo27|^841VLZX8^_c^t=_w@BhNYc0>w zXt5Xjl^Uxtrut9pLL{)pqc3ov*yN(d?@;p$CsX>Miuv@#jK!yU@dv>IDU>v$IahR7IHpd6?g@K-4(LeX|AEf!Ow+j33 zthR1lQq57}ph+}I#6;Ux0|AVrJxkw|E#-JGhNq~9Vfj!=_yPB%tNkhFu~(Po#Rv-$ zF~6^WFpD?$9@5(9piyy6c&SA#%w>3^ry*L~Fy?GrO-wQG_DxM2)0%VQHOWVW`}u}( zX6~))c?ySUU6N*gJiWW-ie1Wn!f!q~oAvS0meJb!?eSXwEOqPW{x&P#KIKzcvr=F)_a-tk2!Y zTrY-Rh}1x|#wMs-_}E-;o>!Nh#6A#j{}8QW4>zfi&>`y`qi;4xkWx3fRJ*#FP0Mq& zG_~ieqtmVTYO<}I7o*(rcykBiA%C9&k8oxjFH{kp7sh}GX;#5mNS$Bhf^ z8dE3+-2|HfDWHEHsA{{S@}HvVJft(#U?(p2CZ?%8Q1xSMhuEn?dtOf_ZpwWs)EAjj z2xvUZi?2|Z1o9Mz>9}gh(VUg9Y28`M0|B~H-SQu9 zxu;+(-8P35wp}VVGM@;O?J8l z@`a~)bG1IH=eF((`qzc!J!+{Hb~QSV#xp#sLhgV>4XjN`I%2AA^9FR8VxN7|kBS}_ zqE3an1ficP8LRuv{Pv2cBzNVv7k~~qxP-kSjN<*GXJGFzwvQ=YcpUh;=r?~o!el*Q z0ByCq(KFU5yFPpC#p8&?`Mc)0IET~0M^Bm>kH}Zd>v>_WwFd>qBaav8VxsA$jQ?=y zO3**ma1e{vQ?SWb0m~sHA&HewH`-%rXH2tN^-T}%Z?=SqKFgTctY&c3?@y|_+4eLjNH3TZ0ox)NOdfg$f240*4Lyo(O7s1vUp`Ay*p zB+CDt1O|ZpKPm0}T-k52sB#Z^1_s;oII$aqaLtiya7aD2u519EUBC|-Ok)k+zzISD z5?8TQIT5HUI{+dqo$drp36!S9Sh=C~0nmvC7C`+<_Yc5>>gzx(Xc`#lypT|nn}Pas z=jC^P3p))KM{JKipZwr8K`Sv@EZ^zJt&#AkF&#+hHvTftqspjj$G~l#-#P$xw!g9E zi&IF^{sL@64GpvC=R(j0V;SM{S_wbNsX?l*rNL(+z=!G1llzHa^&>syfkE}^*{R?_ zzRa&ob}5fRcB@R-vMG2SbShAw8%ms}VB1j)ko)rk?1EX<*WA>spkZCdoK#rS%p4;( z0A%)~*XLP=v)trXn<&Jd8@W_ZR?vI4yrL2cQ!`%t$R*cRpsj*#2I;y18} z1ZqttEeJ$lZu1ou-}BuXvTN&67c`d#HmLXTF)%*)B}Shq4FQ=g?X0aL0{SpsS1}x; z)j;UuK^K3Z1h_aB$+xPcfJ*@-m=>!IK|-ta$7R#rWr+!Yk80rdwLQG*toJQGWwM;0 zRiN-55{4@=8C)Q%WoZix`waM1VH=ep%TU^dZP1NpE+-FFW(z0}2iW{+n}hPHDndOU zPXFe9NXT-<2<9}K0G<4frQ8-sm*PQk&8U*oNacDNaA`C=4=C?QJ>)NI7bbN_+pAC; z&46ySs)g>?xUDA6z8k>g_t^#Ah~Z@t%{9qlix!81qJDe7W;rm_UVagfXqv=<)ZX@V z^=w*!zNnM|FH*RHQW4yfRw@YgiJ94(EAa+Gi^Uxn7V*xNV-=@WfU4J~wW5Ez4B~*P zD>q79kc@GO)I52b=gVgen7f__n1%v~C;32eS zmgg{H0x1S49KnqY>PWO#Ao_OtEo@NofHqN}vQbac`B>|RUsJ$<*Pdo%^2?n8X(~C~ z0(&1H2m<=Hl$a7cYSiXp)($`lXr=rRG_#UyrhmeZ*5jpFc<2kWnYnZmbi7J?b<|N{ z{%Z-oy3QLbK8>|n4AQ$(F>OhX7-Oh8gRBRcFDEcd9(X8@mS;J=M^6cc-eoN9Dwr{L zGcwE9QSz+l3KhvH9$xbzVA+i|U>RT9ywltZDOVtBZP^pudNB1p>{h?DfrC>DoQd9r zIB4A>00lz-`3gDWE_@;w@W}{!)exg<0l-GlZShMyQU04Mo~1n$?ZYPlLEUY5y8G zqYR`ptHFmCx6y^FB(>(43qTXCd$i-cQf)m!S8H=Fr74`d(Q$oZ9|Sovg=sU+0sSNL zl9JCJpY-~3{Vv<~ORA!Ip~RXPy6vLb#LKaCyXHA)r~TdxZ*Yls-bmxCJsy zhC`>y(hr@CZK57N!EZLzWSp`5yUGx7f7k6Urq*oZ~NW_gzm+ia|>Pk~PbL zmD>+z7Rx{V5BgR$=#jK76kz4M1F5Ah0}X$Yn4F~!?gwN|Yf|fn#@Fod%EjKS0}Tx5 zxiLRS9H1Li#k4{`)p4U_(OarsTKAIuf0buyge?pc5jtc{LX&O8`2&gciN0MqK1;G4 z1pvXeXV4Kp!**2lV>Q$YYB+SHqAWj=WUUl^`k1KC3}3CTP@n70zdU50m%1?Uk^v%R zw1VqsKQCodUKT*(TPH!lRkfw!nu0zb`eXG% zeu2Zs7_}%U12eJ^8K?29mE8rHA2qH81M2F{{mj~nX&lcS=$z>>Qz=Y#E1J2YIKzag zK>s-e(wWsk=Hdu?O`tc*oQs;)&{+33ys-$}> zXMFFwIE^9I&t3UTKTGI9@-9Ls*YSZ0GJ2}}b{|*en73)=p^EUh-Ybr}pSYZ}oL1da zNfQ+l?=^hz3#tOtrmUc;xDMRbGHX*_$92IDbBbiWifjc9BxY(KL%#(Dc1innm3_)w zePTttDSAa5*WYg`QYBPpAM1oT!;V1r8T4}U?+)|HB5ztLYR4 zy?3|}HB*TewJ%cZjYf+Kpp$&3qLdf%<#qW6V(e9x3GTw0pBbfbhM^pr_UYuYin;Xz z>e-K%sku|S>`lotwEh1wFr><45&%FLvyF*$XwJnHbM??jY`dj;^`ouycs!mUwX{p{2(w0_P}93D3HB(1af7l&(>&ZtKwRLAuaa9n)~z5-b}sF`{ZF; zf&4|2l^oAhJO;Q3Rwk1UulROX-GL|XS?JUoxTK-GfN4~#eaUB>U&HxFle}<+99?)G zQ2(ffq%Dt}{9Au??j^odLDzxMbHGA!|*X(jKw;W-x=iH#H(IuF3teVeZ zVCMEC!WkWCe~J~rrfn)Y!QpQb{Z?6rbiwO$%ep>XIRPl3qLL|@mrH3p+d$ox>%NqM z(GiROeUo6v#Xa!Ra{6;tM1H;23>b?Vxqy>ww>xNlYg9ymAZ)IkS}qfgipLlu)v~za zpSa$eL{9>SWR^A0%qW3U6tc=%^gaO#yE0IdQ@tRGvqfbPEBOY=h-PEhWk8@{iqN?U@by1G!4m9~!XCJuRr<}F&E7v{5mTQ#ifsEu zu)Gh`wObl2nTEV)!N!C2OWVKXhqlq6_j2{&>D3M(LW9ws>#f`

^Fm7jE^u_qgvY z3UtA+AT!>W;M5d7P^!HJY*vqn=8NQYBH#fmd09vVYkXzHVg1P`DnK2JeRaj63Iu@| zVrYy^zNl?M$h_bOPM@6KB0&L$Ft)(YW^TI(Q1g$BUkg?k4Y{{P#sUIROOOXVL$P}5 z@42=`Y@g^Qs^fRoT;o71 zD$Cz;j3hno1L6j;)iX&2Kqa4MX)(4PLbMf@wVT{-Jm?Vy+%cBaKT*s|Wr_Sp_W83R z*TzFUF!4t&7BAHj8@&8HX$^+q6qdtGCkG4z4lq(ky>ds?DVuIRMH+7H2NdVobQMLf%q z!Pc#-NzEHJ3J{S4wfL*9b&tKr?f03x&KL&IqifH`Q8RFPo;B4gglQ-s0V=s3{;i5} zC_Xuh0xYKd@E~h{D9n9KvikdWZx0+=Fkfl#(;ISYNp&cu_h`SP>^rezn260C`0Q_z`L&)U0_FKzIqJ; z3vSWMZ8yJNE+PcG)ROwOh%DPR#itUgJu7)1?O(bw>7;89G zPh;eaDEUwFTfu?${l<0z$6h-=cRI91K{&1!bHny`-jNCt_(OhO6k5&kHSU@EX})EQZy|oesY$f$>S*g*_knz$B9U zub{;pb90cBMF5wWNZK#e=^8AtZi5c9vBgB&-=A!*e>@JXEeR&BCYlpa186XDDc)2o zBN~yU`=t_`Mu>&Ny4}8cTRz@F!pO}z;X>yhlEJNytASh)2SCsp6qRaLOb^<%jh3ep z=D`vW7voRtac?U+8@H6a4HI%Ue#ZoZ?V&T3!nUf;a+0YN-Z8>z^4$O5JWt$2WA(e~ z1>#_54N9fu{ss^z7))}jkF_KFGmH_&4q^D_5!5hPa2R=MszJ9<=pM6 z3@H3nFRkU;N!ApL25xFF(|6#m!=d`Vo=F$*^xZx6J2`LJ^z>#RZ#a z{({;AozuDn(pUy3!3Yp&FojN6x@^~ja6}uG{OSt}wmgYhScV-GI|IKR()rMt7h%wL zkAo8CQ21!YyYVHvZ$J^Qe}UwNM4pEswE%3u+OLC1H#UL@%#K4KO~PVJtXty1it-*N zrunV#fRF9#ETN-e zP%qouLJCAJOQZwrq8?nHFQ0%;`mlltF9q((_MW617{GdK;Lw7*kzaeO9m}9CTXGwl zq8|XA?|2)hb_BK8q2L~5fuNxv-P?OF5I^3jCFZ|jl#S*Um`uHO$KgR%$={1l9^AWdA)E&%h00yU?++Hcv&f3-!)ZBpq&mEH2_ zaCL&iz98nuMZdnuvCjGT6qiSMUJPZk=rVukuW&K{K4d61nH!eu5m;+jVH&33!au&& zju{N<-f>=TB0ssX#(R1Li@iRQTR&d@izRm~$!q)kY0#PhMhm-FE4DX}U1-gf_5+a(|$b=Pn`1{J0VmVc_r+pnC=!V7OBd$!A> z6F9na^hUwEicq2C>5bsuNd5dD6LrH4ky7;^-(0+7<=9Ux#P;UoFQrgJzXPTi0;a=- zXxhm7Vf*;$(>!9(#y4GwfiDOjvA-#c%DGFsFxyZGRszGxUBPT4R}w8?u)(NF!`{hB zL)srb4JLI61ksx))8n*!$=^@NV)OgT^MSIKZJLfc8*9;)n+`YuqG=lO8@J22-=HM3 z+wq>j?CH;ytQ)P4uk%~dJy+w{lIuxt7~eOiZ?531-F^jp_^hypdyx3VGW`{|7R>6}Hx4N5WMoSeJ+xS2?-iD<;o1{_{5Mbe_xYm~rJwOIaPP*ZugaATPwaNn#;210%{I+Y)- z1i38wC=*32#E>Qm4eslTbqfcyYq4^*f6Koi|Nd$rJ@i@J!bHp-C^_b3-;eKi!RL-( z?CV$d1=-%k%lmG$SP%L7_GQZTEe1~Z|6(^14-fxAM|AqmiDmtKBsV z&%zNEKl(@4Q-KbL`mI+*EU}?+-aj7u`QXyH|7Lp(oa1Za+Qv8=PYvI3dY7Zgnm;>7#D|lkF;w|o?r=x$xvIm3wcoGl4NptR zt^CfxNj|mLJ|IMf{p~A4xI{kXY4BQ9NkKl>W;9$eBNTo;r#NyYsG5`+)+tlWs$5aQ zG&?RN7seT(A?!5MZnxRoHMc{e|9nhZ__OoNAur){LO8T2r>WH)i`sUIBec!0u5AV^ z7PVQY-(31A$F^^+_T9HNre<l@HM%;=o)Zu z%lku+>3-Ce&6dP?n&!v*y^}?Jeg&@43disN?98AkOl6P$jwlzn`gT@5_rKpZ!7^d^ zA*tGR%xG!*>9cCbUq-TlZ>z|c1_@g$?}&BC>*IdAk8lBGmfM^dSh1qE=+GtkGsMr<6P6`Yz{ftm)VRIF2k$c zByY<*TaDr>j5S>zab*V#(1rco{N|TmW;fb{OgrBH^|Wr4dTcFMUA#G{(f=-^C4S>j zd$9zokS{Ur>EwDqs-&9y^QFXr^;O^1mVDQ=w&~okt8S}3n5qD;GHECKChj}Mva2OU|&3R|@m6LFa&FlxYNw z@z|bUVB~TNb9oY_&sCNgDJoAxw`_tbcZ%;*>3-eJ z&$OL&Y_nqrYXFY7qVCV9FV8!v58Zn1+E$#ZSguP}HXZpyTI*I=#(s5`x@s~zKOYX-XDbj^VS(F8>B=kb5e+OaBjo+SswTp*1K3Sz8wkUK$TGo%oj;% zoUyzLiiWr8bm67EAZsPFXLv=ky^-#nIn+0|qk_{N(NAlz z<_t<#f?_FLIDZ9q<$N=obx2n;e+(UNlei?*;+%ZY5ai+H>UDNMKFIl7_Vz9I^|TUr zy~%l41s7O|1%|Gl!aPRqU~sKD}WTh2$;AU5@#U%&Wd zv1-R@Jz3#PYp>sn>v`mW3zFxw$LMGg{GA-RpX_FZT}|~kd?q%uT(-p)lqMY1CV#Fr z|5=a0%u}X>3jqy&El(M37jVD6+2flImsw^giv{4r5A4oMudR_JC+Eg_Z7aX2F-_|P zdFpz7B_ll_BOoVHR|+RMv2;RLKv`SzmiHTbcCFr34q4ND+$4wxK}d@rufiay2kuOl zgMN&C(DcaO)ZV$zN1#k0jeU9EhHt1kz_fCQ9E>HE?9BFW;J6#W`Fr2P2cdVmbl*?E zZ?;yGvR3v{ZrlxHJFov|Hj%F)LL3noPao#;yqGEP+OTeYWXC39+|74ldWIinYmunE zu-vlUd{vOOa3g0+B7z7Z>Ze=ef$;V7BYdjcca)76tvB~^dZ9*SwV-iMe^ z-ce!Wo;Z#&Av8XY!0Pj(1v4zI7n}N0iETjtSA3~JWsyVkBkRS~SL+9IBTP#@11!m0 zK}&k4Kc~1GY5T7s&i$R=_xizlh;t|%n`Vh;d|x52FVduOD~lKbe~jg-s-HP(zTD_H zk`vl@r}x&y+>5hj@P|3!23YflIig9Xa{L{#-Wzp%>3(Y=suS?H$`T5r zZ)yj`Q+dt|<_f!GYbzX;mTIEtAB#7K^jFMfaN;DNsTy7@bCpXw-dS-dw~*pk{|b*> zdG^T+2JIjbyP~D{U!r~m;TtE71J-7UG|fL>Cb)gKAUW7&?0B|V$^FpXUU`Q-_z|MX zeV#YV5>J|tFP*-9FY!I1^rG-|Z|<}xexIf{pW3;tc!%ESa^-CV_f*UPP0Od&S?pM5 zRI`!SOvXBMi?+MbMa8wS50e*t4HuT*J)gW&-)D9A+b{Q|>9t+V(UD)Msk0#2pgdH7 z)tGV{KHF_n;;;b@+Frhe(v3s`nF~Rr^3P3s zb3oKi=z&A+&Sq;_loxqB)xYREJp<*bMY06=2|xWi{zj~JtMHRY&zNJ&lj8^8T9y?& zkFD0&g8H|Nu}+mQ87<{6g7SB{1v?jUTo?E}_lkAD6mcd>(jU90A$Yo&VVGSEpHoo4 z7ct^<)ci^*?g8$+^Z<2}82}3*fpL#}@D#Ag{r@KYaS%N{V%Y!K*btG5@}g=#zg(nBQ%<3}4tTWH748qd^O@ z8{nn+7S9jX<0$UQU_5<%S_03#{yP!jcfH|Ri-p?=ySdxM>*~Yf_4OAe&)0iwQ`TOF znGow6ap(6wSdh)of~m0Az4^rsKB_=?PgdOK*^FvvXpnr?`YeUCGh*GBuYX5W^wKX| zkKs6klhfW!?|KXDII$Gb_GBm;(MKvhA8tlAa}KfzausE6#&&fP2)aK$xSQ^7e|qr# ziH%Kmjk9!Ci|5lwH6CJhW23_5+h+gN*Vp$ow)sgooJybr!wyThw;aWnI-qXGlVvdD zZpK5zeUDua9Eo?o+T;&SUehI>sLby%-g-O=ZD%6r4W#L)llWfbc-&W;rL0(9WFS%q z8J_5?SHpKQS^gQ$(w|X#G!*xiVc;EalmE?sDK(}mGrCU`w26!vnvfVUS8;+R?6(U+ z{>J~fLSV4}B>(?~-YQe{@$nI5{*Y(^PWxWL+qvv6ofi=;s7=s$gp5v ztFaodK0Cpt4thhF?TZ}s_-6JY#=oB}~TP6Fy(R;EAVa?~Qw~;&Z)=q`CR|w}`g52SocmO? pFFDd+(fs?l{u6QkzdjnrbXU@(GF@ZZfV79fR3B*F$K10F`ERx(126yp literal 0 HcmV?d00001 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png new file mode 100644 index 0000000000000000000000000000000000000000..001dd8a5d02eded699f271d3f87fd677d0d02276 GIT binary patch literal 24467 zcmeFZS6I{C);$`1Ehqva0!n>_SCB5!lxhQ{OGjE1M4Eu~8e*qJK&46xMSAa@sFWy3 z3nh>MQCjFoNq|7eSz+(}JBV`W`9dh5?=a(7OEx?zZ9xUJOpmglol`R8wm96fqe;KlvhYZ5oPc#j@CTJTv< zXct-2b|&^w*QX!49H-V&h|1n`sW7r_FcQ}L#iN8;68XC=Oe&hiI*>#fNb1Oev**CS zMCPoCw%ErTkh&($JiMrflvc{^Ns4c}2tMS^lZ!)B=h)d_23Z{OUBRi}XAz4qrEH19 za*Mna{sIro-|Pt^iDW~Y>&Mie#~{xyGcBSlSD!#uobJK_fBAH3iT*3d-&MU5 zQb*m)jg8rc8C|oU80v{zR$u3kvQ2H$qW}KOwfy}2aQ!sVtV&}C6W`KzU0q${dX^## zOABWi3pqRYk2AjBq(4~xQR@>_Pp?rT^7!zudH|tDCvo2Bvb!xuG~Y^L(C=?aYVcd) zmVB3BIE@7a{Xal}5+DPEMam3&0iUNzvfIS2Nb zaGjFRjDMTKM}I*xRqwf_@=_i za4GU(&a`*mgg<(;qOX1CM=Sz8V(r~?LH_CHr~}ppzyJFr{gdPRWbBb5q0EHPfD~J# zsMqKHa-HEW=_etW&sys;990dG&g!*QMq0Ppd{BzGA{vA22Iv*W7}gF2Zs( zKhbo{6|Z{I7menFdo>&*Z;x-^wDz1GmUdhn&*3vbUz%8zP=W6}3Txjv#fJF1CHor% zm(fZdB?Qy{>gXdgFB7GlY|9U~`rw?wwx&!i@M8g<)) z#Q7zusk5EKiW$)gGj|(avMl=Tx7x6mKKgi2&yF-~zSh4|${?f{q&i|@PjXmPd0MnS zjppQ4Z3*6X_iLcI@obORU#KKo4pcdo%?@>S&R)564QyM$Qcs;-Ta>)@Dt`5f8%(WR z#UE$qpxj#%=XDf>-s1~$iwXCR|G{&O2yb$V&%ZAZU7zYOG_3IPJfNR;UXyZK>)xuE z#*ji@V`C%3=3xFFtDr`85I66+5rs30@cp(m|Mn+cl`A7w9rgyw7ptE5hCD>Rq%cag zR@bZ9|Js9jtt8A zA*g2ud&OMFt#uOr{@-R+ZVL~o6aEAQLaMpkA~!h3UHa)LheO%kPnq6#w1Zi=e}Dzy znG$Uq<%nj1`xqsZtCDn8cfPz@|0&bg-W=#{-y?StO(gG(8$H@p%8`28wAv^(8RV*c zhUfZK@~C%APP#{o?>`IO>l@vYh_%o)C0^8Y)DBTk0o}S6DiY)|<&-R zeCB}nMDrt z#Wy5qClBvHy-`h~iWA43wRO-Xzdb=df6o5nGZ7iHJ(*(W4}V3%dJF~`3B`J~7xs3a zRmVPgPx9Ik$oKdYz&fN*xm>9&xM+2HaY?5;7hCQ38rEdK?IE7u_h96oHXwcJaCcNLNyA50?NDHHRR*gtLofp*OoHYiH zU%$PPbC61jHsCS@JI25N=W}DmK|7nixVu)6xJqI|!_NQPAE7>iNR+NNJY&^BMk{vI@+6GG0j=OY^(wcyrr} zQq6zt!kz|CWZtnS$tmWx6_l)DBQpeJxWT!eA%AaU;k;qfn6uZNm7BZIQ;~U|90Rwv z)(!B!JtSVZ`>P`S!RC_=dnpwzkDidFSH~0g10Hp4uK!%Jw|~_0jpfyz!}~>yf;g-y z1I;Dv+FvUTOY7^b&I~@kUDQOfarxwkgw>Yj!WwXL#kBh4q?!cHhiZ$pN|6`^=etx% zLBFRypU!_aNV;BNQ-^;>WqL)iZObTFAJLb*Sri%N%bzFR+GvD%;_{Sev>#BNHRruIl|C&`e+v6Y8)~Bu}3jEyR=C zw_9TUds|F6A@fu4$3u z9KsedE#r&+(RUR}fIV3r6$p50L77YS?%Vx-xWJ-4ACGp|TGT&#w7)y0hEDUJV3*6; zL+<``oKEuK;k9Y>+09r%Oks3r=jsTd!JhEFmAaVe=)D+Fj6*x*+D|gmxjR~%zl17)O+Y2j^SY|%u`uR*9hwB&$ zCP(hh+cOdF6OHVBF>rTlo@f0pd{=Z6Pq+>0} z7PVKD*LT=*w(TrgEeQT=u=Oc~RObw4olDI&T&YD>z z2YJ1^Cbd*j7y4B7>5q`uC6(q-Yxsn(jtVrcQFSgUW(F4ZU_26>5T=uE=l49kAKuOD z@a!a^-kImMa!m`VapIXLBwMS;S}T5J=-F+JT4lqL2RUeTN5M&&c$VVS_<$o?rYtIo zSKcY)p>G4Gy@J%UHt16;UAESrAGBE^1jT>!V_Y(Z?Bh$r2*neOb#{Y6py&kK<+4E|h{-%b)ru(9x{wu!g2g}>jzh1FK-tZ>2Ghqp5tF)IC z|784yxLQ$I=)K&4<{QXy#RmL(aT4SQsi;_eMdu%lwjm;goZ|Ub*y@ErZS>P0oK}>- zq}>6)y87(q)2g1@ip4^HvRSJVX(G$p@fPW2{Vq}g-J?LTwif9(;pTQJ?fFrIwQZW& zz0-P*v8ZS|0X}gK;CqQZ64Q23>m1qj)`DC?n`5Glp9oCy1ba*id2wmIOU%5pGzV>j zHltY6N_)dz?8RbKzG%wl+{*^u38UjaOXr&HHS9(@rtv6csN9qqeqxJ^zb2{P-pj&7?4C zf(jht%ifX3pds+txn|K5lWIU zcl|cWJRr^Xmz2Nr2F`>LRdd-7<7)JWqS%qYrdgD2(=1XG)9W@>BN5Hqr|sO zedbRyd5wgl=GHv%^Hxh5UpyKYggW|62KVRfqf4#KMO7;Cj{Z^_Yo)a~mniqO_hmdr zagkcliW}c|+!hceseZaT{3960zoRg`S0DZ;8OaNRi&9Dkq~vi<*^TIE3D}Vlovq1Kg;CD0=%Ky) zGhXPZ)KQu7oaU$hX!&ZnrT{S>kV=OO{y0Ru&RkJGbV?WaRNaRh1+0rNvsY!oq?qYRbKeOU0ueG%3x# z^p-AF^T8Ya3De_oJ~fuc=$i3OH@sV|1n>4`UgZVta7{j#Z0(p|%G7pf(;6R(+Wx&} zGNtGny|s<(SLwMNxI3GOmZ*CtDwLoSGV@zUA~s!T_L-{6{-Cti%=cMbtND}WbF_f1 z#vP3OUZ?29Ug!9(ceZg?v8a(Gq2PNtCZnc{r3>?UaUwoVG+S}F1p1=d$^vR-dpQcH zFF0qQy3jsrdBQR5w?xc)gUd`9CyH#L>T!tzas6PeSw~E3-mm6@0aA?-gZI~t!~|QJ z>&&BTI^E4HNF;f1iimU}|tZRqZ-MK%=G z_*_{l)BkiihJo@x#*y<945`ue;hz{)veP~_*%e_}Rbv#G>h<|oi{H#sot06iHm2zv zHiK~F{!E;}1;TdsUMH*OyLYDMZu^)_$}JdWV|RKN9zLO37tAUvRFK*eZ*F~YLI>F- ztK@%L%dsb!-L-iAkw`SaksYEiN;O{bqpW3psKky>purkO75g?^>$J<@m06Pw!Q*pM zty^}iclCqU+9o^RFycM-7tGuIEQ<0f~Q}$nNo*yp48aen{Zc-dR4aw_?Hg%UO z!DrTcdczU=X$t_9W8{?OtW+Xf|>Bd^0 zh+;Zd)yVs=>SqZ_!)DNuYBd!^kuK)iY`n#rP$!7|l`$3|o7&PQ=$AP04xB-Cnf4Oya6 z^@t6F$vigD8}JcLTRhha#|XA8EPZh#k3#BJD)-R0zXb~(E;6VUDUo_Z%GMwZ*fped zmo_W%!KVrY7;HY|usqQF^av*UB3AN)mRz}Ip?!RU*5zkpoNJkUjabyVG)oF3=Xr}O zwzR`uzh4WH=gB|rYKP(sP%jQ z`-d=ez324w{$^hcGJRukhZ>0T@SGUT(~DVk8+Z_6U?23f7j?S3!)~F5# z|F~>M3tiq`oa4?Xtqv9R)VA>Sl+ZwV6hC;F2P-K_Y%Ru3^CZayn<&b)fOSg&3MaQvN$R#h4~bDkQPDlP015oja* zI6j@e8g=!&+AtF5#BSb&8&gFU8f&5JlgAwKIt~FE z%hkrs+qd)}$7fxY^ch zSz8Ll%N4>7auT7E!AR~^bNggmna@u`&|b-tZK)cM{^VCvx!fLwR`AnNgVd~*qO!@y z`0jym%3y2W+OX1UeUXxAG=I%QBj%w1+6Id{JqkQ$MSimaQ5qs_w0!;MRaC>v)_CRin(?y@pXE91x%KK(r-& zpPILCoh%YSyA>^qt6)rf%P1x7iUo4iHMhhd)HLY%Z$}e8#!MoMD?PK8*BAjs= z#p!`_pVniI^&{Z>)BNiFHRSh~Jin@Q#wFk-YbT#9?d+!qvp*Wu;Px;XnsIkg>d_*t zrMRMt%33&t)BjMD6n$Mh#W^I4MO<*gP?e1$&v8#QdbMfA7T2qQVBKL+-nnULt~C5x zf9ZgNrAd?m9`5>d>mK5!Y!r^V?B3KN#6LtZAT!%MM2j!u^6O(qymEzWl{p!%R%q=)-HYUW38)3UWo-{o}#k|y9sfNf{p$-EI&BR%#A%{!g!S{jk2 zQ${GMPM^c2k{8O`SP_eV&*hy-%O?@(&t2S52*s7ODczJd{2-b)6L zarY~z9|WgyD5w<=_Pk`?+3ojtm?OTrGDWv(@Y!O?=UqH1wFYY@@s$T{Ec_SYO^Y7u zquDVW#2)~@@ewHGy5#Y)glZpV+1%fIV_e3$x)Fo=DiVsOW}O+By`Xyw-sy+Etj523 z*#k#q7)svPy88wJM0JJ)=F3uCPmWdB3l}lyIB1)FU(H~ymGlG^72^2rAR7q_6(;Oy zEMBy-)qtUone)ye4?8~M=U#<%%(;f%SGV(2Z~FNlx$?P5lt2%^x!7^?!bs{?vh4j@ zInlQ){I&|?>zQGEE)K>i36s?nxn+PI&*VOoFb!y5c;o!XtWIBh z%>3T@#kFg8Xg`9VTMtDI`pmXT+&p^BdyXU1rom{1xKxH}-Fe2sEiVrEdMz8uk61!@ zg*}=BdNeFXxp-@wqr_c@`tfYd6I~>qO_T55y@hB?=X0Zlg_8WA#Jwoh&I1kArLx~z zQdg=!H~4-2Kq-*bI6WoGHMCZUD)B*8R#r01Ev6`V*sfc zqmoKl(Hp+DvO>d5Ws63`^Xti*2Yc$*aih{&c%93yjBesAfhoM2*FVE{oS?<0jEQuFEk` zT!QP|C%P5g-E82CaW2a$B`7FLl{g;YxHuFe?mhEClY{rM)(zrKZ@g2^`v_Dz~>{g49RiconSXti=P3VQk`D zXsU9cm-NEZ73KFLQrg}>bG#Z$Bw)tSCTy`VayrIs;yZrQEmJ(E=R|w;GBXKqh<{A2i2qnv;UjiS#RGKY;o&<)Imt~ zgVRJM-@ja-28O+3-ti?D;(O($SgPA>i2gv{Es4|ZZg-XcdT9Y1% zmQ?e{BHqI%|3uW7SfF~}-)g}9>wh3Ex_%x0=H`>b<_;*_y8ovr`#&!xRD7uCJ^%Uo za6KXKKb0R!laOm{|59}ScfE)T#K`kMUI6+UKK}3e{67QmziaZ}HTmC_7XF(G4hzbE z!~VZv|Gym}{5KW+|0xv|d#?h^&=+)1bKs^Od3mhj+3#-_)lP=1bHFZ{XPl=$(BMr3 zyu7*3(ujn=H$;_#j+5^joL+SNnZyd)BTIaHb!b>T`aE7=Pfu@M!5>%c+_82v7($2Z z;+LcHp}xbW*_ttY4Jk(ZR~u4}K#&X~ zpAF!_N6sGp0@x(2-);N_QM4_zK^~Bg{{3&XzWiUb{@)Jf|E;Tg?k5X;ib?WrbQ>^4 zEUCAFPS^hNOn8X}?ilq%Nt>?F9%BO)b}EI0c=6ZC+Th^1J|sVIaoC0I;R(?ab>ka? zeKZOdCF!a{pp4XIffy~BJQy~I^3sia18?1G$8v|uq|j@j+f4zp@#a&BsC@?$Q&Wk- z#>t?ilBwEZGb_2KaXJ+qB{vcd{^j5_ocn61VHETA2?{-5I0%4%*4x@LS85c#a z9-!3@SQRD%?2Cb^Q$msk_!f>^0l*S5T?VJRp1FAKa|iZm>+YO-eK4BWzunTcWO%tU zMtS4jICw)(VE9B|PPE?m0Q3Y>LG0fpRnl~-BM};UBU*XmyZjqc8R{Tt+@ApR{3(sD zrqs+f64QetsmjyuWD=ZJ7LxebiwGCRx+3BP0_sx$tc$=7+ z$u}(nvnRKpX0&yJ&`}790eGXI8@&4wD~uj0Fh=}cnUysq*oPe&YM<&r*druruY^K@ z>1x~$?>5lnzh>dlLh8bGiWU{0Yg(?PZLu`IVD!Q8gqW)w}mbRI945s`az4#~oI5>|OpE_c@a|oE@Xe z1?cJtO};XwNNz?1?O+?liI(9FOTfKd<<{hf`8>Eq zjS1b#4p^>0Cx@uEB>vd!Q{xX_Yw_P&!EXz8f8HzxmezU~!Q*>OIn0Qmz$!rRVAD7k zQcF}kkTCKX@H=as;Z>|2kk?JRdTHc=V_MEPiea`!hezmUibkRu5U&umxndVFyK&KO zjf7F+%t{?0nr<;w-EQcU3p@jPK5|G;ATNNe4Yc+fb5OsTe6;`kc-~FbsGItjd&}pa z=Vr(@P|0`%ZdxSYR{N4HBfCRp5=~>-UL?rWMwIrI~z--O{McbPEN6U@*<__^;3~zTrk+; zRTn2fkaajwfz4A=mA2c*856~)qS&jlJsto&7?Fg*-64|1RkiV zEQDmFVD$AY$EsxdHZB&9uF&fIg&%sEI!t~s@NcZDEIaot>r7?R zRcWWu#PTajr?XClGo1NeDD&Fw7|;#j&dg)R0vZ-{F!%AWLS0N4Mq7gry2eeu)Wif0( zLBf#*xkMgiY-RS?g22jJh-Mc$$?J0;LCj*(pZ|W$B)rJj?%F>>B?9|EHp})t4j11K zrjoG4Q?b_%mWr$NaX>*yBw``Y-PP%Fx20{U$N$x%`j?YCz)Q~iJL@;@zw3}^9N-fY ztw%?3V>A2a@6k2`PzbU-FVNt0z@?a}3MRc+#V(mig2BsF!G|o|?)8rl#9RYpx`&eG1AcR> zyZ8AK1D))`Z!AI@oK(*5wF5FNL*XzPwdhw@HvqS`7jk0`R+rs@CW36WH5t4%+e#Q9 zs)7^6Qq!24ji zR*o0u_PU1dxAh`WoEpx>uMf8$EoL3j6ia5sl!#EI7W0Yix!fanDh*6IAgym$au~>e|}5Y@}ttkO6vuHYt(sHG|DBiTs0Ii z9PJolyM>JTfp8JvfhLH_MG{PFY5bahTOnO+-t zMl=n!oCeR`avu=7e6)wmvGne~+}%I;bOt%GiIB}6iEk7J#cWF$sOM!AK6S=eI0x%H zf>*c10x+-_Q1-q1R1)v(Gkmf45{PyVo?3hblIV?+2H=(AaEuxeGwgt`cW@F>(>tiW z)uzC6pX&ww?)5NPugkrT^6bq@rfm%x7z8g@XfhM-G{aw$D!x3cDObe_cHoYvuWh?T zeo+kd7#2D|wR=I+HCDO%+Ss|s3RA1Q@}YOq9$1q>7U^12zMGQbGS&6*EJ5==%T13% zN;D{q!BFsgs!FgQWvnlBWGlc#0DZKYbwi^mY2F+vUV0JHF$t>l0+2C(4FCEKl1=X; zSop#0fKd*Emf%&%pn4xF zScjQGVWdKdD1l;v9YR8J-*zP}j~=MIegLv9kNoe4t=S+M;s>S#B};}k42wmkzM7DUk#)q6C>O?dGq%{v zZ!AXZj9yQz@Did;5;;vb;xm1e&6FocT5J`N;b! z(T?uZ317K?4BIUrN@g_lY*GG3IcqvQaPlBr zF#0=UR^toL@E&U%`twa)?WZ-vW~NYX#<5zV)?o4b!QV~^e+Gc4b#OYe?;VFUYpuU8 zE8a^I7egt`U))b{yDR4IVFbIVmr zv%=p*DG)+7l|Nw;;BU)Sh03P|mg6)`ysCvrZxa%G4N9ldQ zM$lPEe+qrR@42m@WxXz#@p5aJP0(wZDiV2#u{c}hBz*4ojG-oPe6$LA)LM&Iptu=e zmPY0D`4@0-q=~2J7!dI7Cc^ACl%r!b+qCbqR;(A|L({&x67mjY#=ho~4mL^5%eT zeQfsl6Z__YT;cZNi#;9xnCseh+`YT+FN)jp5h{+MF(07e`6r5j+%#WLN&P&@MXY*6@ zi`t-)S+lw(Fmsp5s#dWqcHQvuhO-jEAjL7>Q#$+^rH%jKnJP-!aHv_% zP_6>v<+S3@l?g9a>Tlj?@p?Cql_xd@1~T^XY^Z`M?U%h*gzD`!>;U3h-C8=5k!M*u z`x}UejS)__yf%9ji0U$UtI;ZkCHt>fh6Q`Eqc{db1X^HcEnkhgV4$~Vc*XM1UHB%0 z-}G+u>(46@k<_!9uDbW{lDuA{4cBeO!|}=a&q~ca35M!5fx&Br?<$lcz4-}Mm0Tg) z6aIbi%ivS{8_&W94upDPx*zY#Q4(9Xa+qx{o`wCMPF3ed&i4>P5I@qAd zIu`v5bSJawZqv1vVhIcxcuVUV6?F^3$W+0lpaspCgPr2u>Wov;1p||NVfh;|TFJ8# zqBwh2f;MaV8gQL0aH4k9OUq+w?|>mMH}_X;uG}FTu}IxJVa$5`d!uN@t&0_*x2=Eo ze^?uPupTTv;&>&r%~M^o`f=nY!BQuAC#v)H9UfX~vHAUQt*9M$hwa&u&*AcPSvSM{ zie;70T~+}NIUkeeu=zc{ZNcW4&_9P|Wtg%OfxTNpk_MwvTNc$)5ncQ9SY9Njl`^fS z3?^aj=r21|B2-8dl#TA9<}XJ7p)EmaL5-kI+qBCk>`iWO%&3bmjy0DBnt$8W<}E3X z@oZ;jW-%OegaJC9Q zg6V49rR`|pE`QzdGQm2vsy;Ha{5ae8T*epB`ycoZ7Vu(Oe-}eE-NJUKFXuEw{leZ zBZq8YzmB?23KR^9c~ER{cEt?G7JH4piG{o6fbKAZA)Q_roAhbs!@g62YlRgq3^4Wu}YQ{xO)pYn6HZL`e-(@-+u- z3JB|Dxa0P?x51=n$BlOh3ankARh|T+^^d;2K5S|BzM=h{-9AiSClAD`s@54*-*IW> zyIn2d;=vQkwFiOl-=^OS@YMnMYUrFSq{Zl1r(qy3W7=B=TftxN&MI-hqat^@&emFb zY|d{_;OvSk7@Uta(5M7j+N%X87~2upu>$(g4wuXm-C=CU9&DPM@cqalinfO$deZCW zZUaNSy}%`0*xf7ic@rW!`;C^#5~t}nn2)lZ%;JZI_=UvSiBYCG;poS=2aHuxLpFZs zxjk zbss<(T;BV-qvnrVE5`)*hZg1u;y(DP^PTk#`Ms5Zi&#nsI zMU0J2U?AwS=)O`@{nPN{+V)=wBj+#qr51ey`<;SjN1D5>Pda(9F`h=d0(d&SRbT)s z>`*m~Zv_)lGx!7Q9#JcCR-_dRNP{@w(3_kKyb_9t2N}Zlu2>3vgl%_ir{x{5l3zo# zRJ#Y|yI{;uq6e7I+pV}D1t~vdEKyF8-MG{2e%Gng`n>*t`RHe!Cv)C?QqE ztZOL6cc~IVr$m|K>@#=ouh`wGrA32m%YD(t&aG)Cgj+h;WaOo{$)`oCG^40D7VG$cE4f8sDJSwq#s{E z7cu5P_g1?{z_PoVie96|G*gAqjrMjb#~=@Pmv%(yPBK8foWAsLx#Q!%?~=%P{BJ|k zmH)VuwEyEp`Ty>b;rK%zR+obR>bR`uRQnc4+Bw3=kZUaml%<6zg~@wB;E@b=QtAEj z;;%u#BBzXiadlar`F>fu_V8-pP|pdaQsPx)AsKh+U+1~)(~X%Q3t%$V09={i$oy`b z0H;;=sqW2Oy-|DX)rokOc0NbY&IAhlQ+rY7$!B^emKI7`pts>V;1KBZQ|C3i`2-;M zkJ7>DO{w$4n~AnT&ZYVM0H`)DS9W*t8I`fJ{axWk@7mUqcuq-so+JK~j`$M_GK{2W z9GLq!T*i5aQZV4W1>z(ZH0p{gwRm?2mM|26E-M&7D!docOO9(Lm3ZXX_>EoW4V?Ml zz`_Wz&=SAO2rw|>9k+s{UYepD3;=ufAzCcGTB@o6*R2+)IqqX^M<8a0X!)iT>o9I0 zXco|)V!>B@zU&f_$P+Alsin;uU6o-+A;ri3wJLv$E}mrONs3lG*r^P=Eu0!K6;V)H zDjCJE*1DWY*E0?!gD?ai3FsGWL;l9Xsn2e=wyZWTY4e?elnWfjOi(#}XQYIRNP62G z5}vCd7i@tW4B}MILmnPKY(lpl(ick+n7O<7PIP|-G~veXF-VZm;aalD1#Zm9f{m^Q zix97JKH(K0TV+}Rsjx7h$uALn1qA7#CO4l+zl1{8Z+WybY~b6wi!vAhNt3v^xx4wa z>%4K!d9$0RAzRA64)n`Wz@;&wi)-Nf`+!kDiNtLsz+Mej^{J+~xVRX(xw$dpI3=x< z7MGS%$j(kq-w~OiV5-h#vxTy~hFk?Y0=;heYz=5iC9ab=l$OiyC@$t_W7Iiqs)s60 zLK@ZL=~h0Kevm~5Z9zXVKIs8?;{`CCtd9cx^B@?3j^`|%aLSI_czv@%y(tYvUGZ3H z#b(@kg#qHpN4kex7JjfV8RNV)Kj56=R;x9bt5-zX|MRMJgM z-fCwvs2*LTpZ&d#9s8qM4M0(nQ{!i2jn9(kxpk6vXi7%#eoWCx(T-!CK+Ku^;bCEu zioK44-0TxLOaw3Z025P9JJ^$|+eSoE99S;}zH_8gOn9JX4DYA2`q7>926VWL0c2WQ zu6`OWa~m*!L=2!0QbFhT$sJVD!o8o#a$+T57aDwj9y!VLJ{@rMKBJGqa@He41uZ1U*bG#N*dr^SIom0z$t@6WnlgqfYUs1i^Gk&g#!7^`(rM` zjexbMY))LO_*ao5fUqs_<3Vijg}k5l8_g%83Kbd7>zc&Gc0 zwZvH>CuIJC2^~sp-SlW)@AP6?y0c|X`>v__aZS^K0#uT!A-hWW!6p(PLRDI8jadUWKeaG+GF@p}K1UZCS>$5c;^Fesjt4z%2B{(@|YAJ!Kf zyXhJLJ!{_g_|kz|Wt|xccq`czHulw$ny;q@pa0-{6k zq%e%&8OxMJaSbMB-Ucc15>m-ruvtdK8-xUg4LUczxap>1 z9?l^*P$-0(qvyrl3VKh`ARMa8V`4@zHx_@`^!qJ$ZGdE}f%wh694VN{_Uo9_dknbj z76WtK*xe4e_3>xDH;5)_JoAN4FW5?+L7t}{^78$EsTajDEFo&8xXNo z?5;VzV#{0yIJ|O5wIrfkNpv>RRD4_!B#CNJCFENOPg2|x=()!F6anB-H$NfWr1wR$ z{^0m=^hsG(U#Xjj=y;s%+XKSLD*&pDeIWhl9AZqvf}fr0TGry1N61c2l8xA8{Pz|- z=X09x&%E)}mXEF@Z-Mig%OpRV(Y?lsXxGS}yvU-mb)WK^1)e0?IG>f9p>%ZD$($_) zi^VFe1k;o4-)ffYPb+^2>BXR5-)k!YFhcT*P+LP@R8xON}xRzWFMWH=T`1cS2=5r+$Eyt@Ztd(SJdjG@W?61K6icBzF! z+~U29tJOi@Plm2CP&Q?s{7lk^xo>r#Kq~Y8#b;N6%|nJNu7FgdbDVVPDA`Gljj_j! z-jyhB{*>`v+W}DFI&}xFrVlR7fTke#fOe=z;4mctMsSgS$%OK$^5*uyC^1H`IXO=N z2Gfh$}-2xOckqT76lxBnKqKMWtFem>&aW2Uo1GozOLZ63|lav3)jJh#E z!EXloTF;A2MJ9cHbuv-q%yZ0cA}?SaPDaX08QxL_WwCm~5AVARGqdp>9)FvAEuUoo z3mYwev>RGocY`!!yh(_EVPz7F+L=NuykwNT2lCeYnMPORMfa`BCkHUBpfQCtkSNVq{cs?@>115`--9c*gnfv6JD{bEyr}7Wv z;pIZH!+0(Z0f)h%5#${VU5=sS7M~$Q%^VQJV)WL{xuj-98%z_0S_0Pr27rPtK9?97 zVA|LM5H)XMFpns&K)>vzG*=Cjs6imL#eyVnNIrYy`MIHYJU1#UcBWsP%Ay1x)1obGfwmOiad?hi@@<`a3nx4;n~>(;bV8<_RE zR9}U+We`yMaR3=wldnRwi8MB_!G8~9v3WpARPca6ibI0vMFb$;ABW2f-t8KF`@o;L z|I9mF{?8D@|L#XB8!Hc|Jo-mREy!mZOOlh5E5jgPybhr&L|gDP)UQMOJnkPieqHA{4}EavC&m&B1` zBSO-FLsVS!9=5R>-C0urXa~K%Q_Dvh%W(ht*js$VmcQ=ahhrHTF+bQibJ2u+)}cDV zXak$aZbQ#&;ymJH8V?;O5Su}{34hrrX;xd?R!mIABDX%2Lm6aPP-PtLa$Xf#;6y|;wv zy+iStZ{lgugK?Qa2Qy(u=64Ul8)Tw0P-$DIMowgQSK(yLM^K{_cp=l-RZ8Sa-_I7oYtF)8MzSikNl`s`0q&X-+@!5PKqMSA->J>lfm`iwl|i3Q zV*tz*KRo#TZmFC2KxgVLxf{i5v#U4sBs^5BOkotb3`efi_zi`XP4FT!{S=duCo13m z!1snzt&bC|d!}eV-SaX0juox&vR^TOw|FJ8t}Vq}p@+cafUgEcd^@LM;#0aWY%H0U#5JtHnCUbGK z=?j#lH=*tm6k+l{s?`JFlb64NXsEJ5A4+{hZv7a^ZE9gMi7c{4Q$~IP_*ax|?m&$! zhrOvm%@SXB0Gzna{5>DYWb%VbHx}xM}(yAYekn^)E z^y{@nLwF@?qCnajm1uk^pTj(_AHBw^k%n`suTyR-%5kpzwURXk=1NXUN{WBm%+|L8 zxTbTNU+E)Vq)yEB*WaZOtc@!4)SR5eiIy|9IF2#xCi95G*_C+>dJK}R_Yn~$nrW73 zw2&;4J+tz~rQM7;xcns%gW2xU^~reO28N=+@oK}Dnhp?Wf9~WxH+~{uOY)krz4}!r zq8^rP@Rf0?p($>}@z~L&y4dPMx}5$-c`q?}t@x~H<=A!w-FyI(8xg(Ligt{R9KR}- z;tRaa>xV{%K{iZxGZ!|bf`oC@+)om1jvQi>vZy}3KLX=Aq^0HZ}=7EvzW5YTGoUC!r19m)ricLN>%jZ z&Qzzht-jrIh}EF|EH7lGRk22wwnKWFhlJEndK$*@>P^5AP_SBWsK`T>7c2x0763kg zT>*P^;574jl@5~#%IgQkdTv8AuTN^H6Z^Eri$F62I9o5JeQAfV3|kC9o7sOSb0r>T zQ|X07`WmhBkaaKQ5)#@GjSk);H4;yu0kzZt(~%VLb6O1ez1a0_8!$B`h)h)@$Dbj5 zEhbTRF3w^&kz|f!rL|+|Be$%v*%q*lV*j70uJwPhkMa~cw_aML%j2VM>hu=#b_)sP z3_b?mwl%g_RMc%$UYy0P&|=eSOZBR9VOhZ~NAT-0$L$t#ucJ=YOBnK2G>dg2T=8Ru zK=(#Zb(4tBE-0Q4Y%J6aYKo~bu3twU{GeH%`dpIoe*Sin!T8XWtrL5J)?C{M?TcxV zYfZT@JF>&O9}v|ucmu(a)q-4@+9d&gMwONQhhjxVlOA_AT27%7d$7~AA)8s^DC>(l>*wa1lCMSr^x;ve{w*@b z9r$j4Mz;NGa6CuZ%;?aLa&dD;GUUWRcj_$!^8W32`wyPTlwe_Yu#ANA*UHb4{8_hl@uiGCa zJHRf;Ii4+HSS-brE~;(F;vl->9?V#PG(x@9yW@}@b~1DasICB~%8X3tQ1UsM3kn(^ zrtiIeS=f*z^Q*xXQEjWJd2jwySdCqYOkCmfO`T%-H2?Q0S^k&BIM5Ko^w141n=IpaD@i8 zhrml$HQ~X*`8-hD;|>oGH{#~h%)o27ZToYeM`57bve`a$;LGGP7dP4Q9ZlWazp-P# zKf+WTrmO$g92h7!>Li;1K4&-YnbhnP;~(Iw4jgooS?s?1)gEaVF>}cMlCZ58=5h8e zvI?Aqoi)(z9av|0aV^B3fUE_{;@@$IawCDxM=ljvaq3TV^JPGjBHfLm%0vMXYWqqh`0)26g0#oyiAR`tL#O|GmXh>H&I8LP3AZSSPq|V5S}*|IaD{ z%Ecq#Ve>vyUC73t*GMtS38s)`9fle81(7j?R^` + + + spring-boot-demo-oauth + com.xkcoding + 1.0.0-SNAPSHOT + + 4.0.0 + + spring-boot-demo-oauth-authorization-server + + + diff --git a/spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java similarity index 90% rename from spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java rename to spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java index 382a8b1f6..ed73b619c 100644 --- a/spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java @@ -2,7 +2,6 @@ import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; -import org.springframework.web.bind.annotation.GetMapping; /** *

@@ -16,6 +15,8 @@ * @copyright: Copyright (c) 2019 * @version: V1.0 * @modified: yangkai.shen + * @modified: EchoCow + * @date: Modified in 2020-01-6 21:12 */ @SpringBootApplication public class SpringBootDemoOauthApplication { diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java new file mode 100644 index 000000000..816ab0718 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java @@ -0,0 +1,31 @@ +package com.xkcoding.oauth.config; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.web.authentication.AuthenticationFailureHandler; +import org.springframework.stereotype.Component; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; +import java.net.URLEncoder; + +/** + * 登录失败处理器，失败后携带失败信息重定向到登录地址重新登录. + * + * @author EchoCow + * @date 2020/1/7 下午1:01 + */ +@Slf4j +@Component +public class ClientLoginFailureHandler implements AuthenticationFailureHandler { + @Override + public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, + AuthenticationException exception) throws IOException { + log.debug("Login failed!"); + response.setStatus(HttpStatus.UNAUTHORIZED.value()); + response.sendRedirect("/oauth/login?error=" + + URLEncoder.encode(exception.getLocalizedMessage(), "UTF-8")); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java new file mode 100644 index 000000000..1737a6304 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java @@ -0,0 +1,30 @@ +package com.xkcoding.oauth.config; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.authentication.logout.LogoutSuccessHandler; +import org.springframework.stereotype.Component; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; + +/** + * 客户团退出登录成功处理器. + * + * @author EchoCow + * @date 2020/1/6 下午22:11 + */ +@Slf4j +@Component +public class ClientLogoutSuccessHandler implements LogoutSuccessHandler { + + @Override + public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException { + response.setStatus(HttpStatus.FOUND.value()); + // 跳转到客户端的回调地址 + response.sendRedirect(request.getParameter("redirectUrl")); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java new file mode 100644 index 000000000..787c9f36d --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java @@ -0,0 +1,54 @@ +package com.xkcoding.oauth.config; + +import com.xkcoding.oauth.service.SysClientDetailsService; +import com.xkcoding.oauth.service.SysUserService; +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:32 + */ +@Configuration +@RequiredArgsConstructor +@EnableAuthorizationServer +public class Oauth2AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { + private final SysClientDetailsService sysClientDetailsService; + private final SysUserService sysUserService; + private final TokenStore tokenStore; + private final AuthenticationManager authenticationManager; + private final JwtAccessTokenConverter jwtAccessTokenConverter; + + @Override + public void configure(AuthorizationServerEndpointsConfigurer endpoints) { + endpoints.authenticationManager(authenticationManager) + .userDetailsService(sysUserService) + .tokenStore(tokenStore) + .accessTokenConverter(jwtAccessTokenConverter); + } + + @Override + public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + // 从数据库读取我们自定义的客户端信息 + clients.withClientDetails(sysClientDetailsService); + } + + @Override + public void configure(AuthorizationServerSecurityConfigurer security) { + security + // 获取 token key 需要进行 basic 认证客户端信息 + .tokenKeyAccess("isAuthenticated()") + // 获取 token 信息同样需要 basic 认证客户端信息 + .checkTokenAccess("isAuthenticated()"); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java new file mode 100644 index 000000000..39ac77951 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java @@ -0,0 +1,74 @@ +package com.xkcoding.oauth.config; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.context.annotation.Primary; +import org.springframework.core.io.ClassPathResource; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; +import org.springframework.security.oauth2.provider.token.store.KeyStoreKeyFactory; + +import java.security.KeyPair; + +/** + * token 相关配置. + * + * @author EchoCow + * @date 2020/1/6 下午1:33 + */ +@Configuration +@RequiredArgsConstructor +public class Oauth2AuthorizationTokenConfig { + + /** + * 声明 内存 TokenStore 实现，用来存储 token 相关. + * 默认实现有 mysql、redis + * + * @return InMemoryTokenStore + */ + @Bean + @Primary + public TokenStore tokenStore() { + return new InMemoryTokenStore(); + } + + /** + * jwt 令牌 配置，非对称加密 + * + * @return 转换器 + */ + @Bean + public JwtAccessTokenConverter jwtAccessTokenConverter() { + final JwtAccessTokenConverter accessTokenConverter = new JwtAccessTokenConverter(); + accessTokenConverter.setKeyPair(keyPair()); + return accessTokenConverter; + } + + /** + * 密钥 keyPair. + * 可用于生成 jwt / jwk. + * + * @return keyPair + */ + @Bean + public KeyPair keyPair() { + KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(new ClassPathResource("oauth2.jks"), "123456".toCharArray()); + return keyStoreKeyFactory.getKeyPair("oauth2"); + } + + /** + * 加密方式，使用 BCrypt. + * 参数越大加密次数越多，时间越久. + * 默认为 10. + * + * @return PasswordEncoder + */ + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java new file mode 100644 index 000000000..d6071cb53 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java @@ -0,0 +1,54 @@ +package com.xkcoding.oauth.config; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Bean; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; + +/** + * 安全配置. + * + * @author EchoCow + * @date 2020/1/6 下午1:27 + */ +@EnableWebSecurity +@RequiredArgsConstructor +@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true) +public class WebSecurityConfig extends WebSecurityConfigurerAdapter { + + private final ClientLogoutSuccessHandler clientLogoutSuccessHandler; + private final ClientLoginFailureHandler clientLoginFailureHandler; + + @Override + protected void configure(HttpSecurity http) throws Exception { + http + .formLogin() + .loginPage("/oauth/login") + .failureHandler(clientLoginFailureHandler) + .loginProcessingUrl("/authorization/form") + .and() + .logout() + .logoutUrl("/oauth/logout") + .logoutSuccessHandler(clientLogoutSuccessHandler) + .and() + .authorizeRequests() + .antMatchers("/oauth/**").permitAll() + .anyRequest() + .authenticated(); + } + + /** + * 授权管理. + * + * @return 认证管理对象 + * @throws Exception 认证异常信息 + */ + @Override + @Bean + public AuthenticationManager authenticationManagerBean() throws Exception { + return super.authenticationManagerBean(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java new file mode 100644 index 000000000..11cfadbd2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java @@ -0,0 +1,22 @@ +/** + * spring security oauth2 的相关配置。 + * 使用 spring boot oauth2 自动配置。 + * {@link com.xkcoding.oauth.config.Oauth2AuthorizationServerConfig} + * 授权服务器相关的配置，主要设置授权服务器如何读取客户端、用户信息和一些端点配置 + * 可以在这里配置更多的东西，例如端点映射，token 增强等 + * + * {@link com.xkcoding.oauth.config.Oauth2AuthorizationTokenConfig} + * 授权服务器 token 相关的配置，主要设置 jwt、加密方式等信息 + * + * {@link com.xkcoding.oauth.config.ClientLogoutSuccessHandler} + * 资源服务器退出以后的处理。在授权码模式中，所有的客户端都需要跳转到授权服务器进行登录 + * 当登录成功以后跳转到回调地址，如果用户需要登出，也要跳转到授权服务器这里进行登出 + * 但是 spring security oauth2 似乎并没有这个逻辑。 + * 所以自己给登出端点加了一个 redirect_url 参数，表示登出成功以后要跳转的地址 + * 这个处理器就是来完成登出成功以后的跳转操作的。 + * + * + * @author EchoCow + * @date 2020/1/7 上午9:16 + */ +package com.xkcoding.oauth.config; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java new file mode 100644 index 000000000..81754677e --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java @@ -0,0 +1,43 @@ +package com.xkcoding.oauth.controller; + +import org.springframework.security.oauth2.provider.AuthorizationRequest; +import org.springframework.security.oauth2.provider.endpoint.AuthorizationEndpoint; +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.SessionAttributes; +import org.springframework.web.servlet.ModelAndView; + +import java.util.Map; + +/** + * 自定义确认授权页面. + * 需要注意的是： 不能在代码中 setComplete，因为整个授权流程并没有结束 + * 我们只是在中途修改了它确认的一些信息而已。 + * + * @author EchoCow + * @date 2020/1/6 下午4:42 + */ +@Controller +@SessionAttributes("authorizationRequest") +public class AuthorizationController { + + /** + * 自定义确认授权页面 + * 当然你也可以使用 {@link AuthorizationEndpoint#setUserApprovalPage(String)} 方法 + * 进行设置，但是 model 就没有那么灵活了 + * + * @param model model + * @return ModelAndView + */ + @GetMapping("/oauth/confirm_access") + public ModelAndView getAccessConfirmation(Map model) { + AuthorizationRequest authorizationRequest = (AuthorizationRequest) model.get("authorizationRequest"); + ModelAndView view = new ModelAndView(); + view.setViewName("authorization"); + view.addObject("clientId", authorizationRequest.getClientId()); + // 传递 scope 过去,Set 集合 + view.addObject("scopes", authorizationRequest.getScope()); + return view; + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java new file mode 100644 index 000000000..5d7aa5d7b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java @@ -0,0 +1,55 @@ +package com.xkcoding.oauth.controller; + +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.client.ResourceAccessException; +import org.springframework.web.servlet.ModelAndView; + +import java.security.Principal; +import java.util.Objects; + +/** + * 页面控制器. + * + * @author EchoCow + * @date 2020/1/6 下午4:30 + */ +@Controller +@RequestMapping("/oauth") +@RequiredArgsConstructor +public class Oauth2Controller { + + /** + * 授权码模式跳转到登录页面 + * + * @return view + */ + @GetMapping("/login") + public String loginView() { + return "login"; + } + + /** + * 退出登录 + * + * @param redirectUrl 退出完成后的回调地址 + * @param principal 用户信息 + * @return 结果 + */ + @GetMapping("/logout") + public ModelAndView logoutView( + @RequestParam("redirect_url") String redirectUrl, Principal principal) { + if (Objects.isNull(principal)) { + throw new ResourceAccessException("请求错误，用户尚未登录"); + } + ModelAndView view = new ModelAndView(); + view.setViewName("logout"); + view.addObject("user", principal.getName()); + view.addObject("redirectUrl", redirectUrl); + return view; + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java new file mode 100644 index 000000000..453b76cd4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java @@ -0,0 +1,14 @@ +/** + * 控制器。除了业务逻辑的以外,提供两个控制器来帮助完成自定义： + * {@link com.xkcoding.oauth.controller.AuthorizationController} + * 自定义的授权控制器，重新设置到我们的界面中去，不使用他的默认实现 + * + * {@link com.xkcoding.oauth.controller.Oauth2Controller} + * 页面跳转的控制器，这里拿出来是因为真的可以做很多事。比如登录的时候携带点什么 + * 或者退出的时候携带什么标识，都可以。 + * + * @author EchoCow + * @date 2020/1/7 上午11:25 + * @see org.springframework.security.oauth2.provider.endpoint.AuthorizationEndpoint + */ +package com.xkcoding.oauth.controller; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java new file mode 100644 index 000000000..535e36614 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java @@ -0,0 +1,191 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.oauth2.provider.ClientDetails; +import org.springframework.security.oauth2.provider.client.BaseClientDetails; + +import javax.persistence.*; +import java.util.*; +import java.util.stream.Collectors; + +/** + * 客户端信息. + * 这里实现了 ClientDetails 接口 + * 个人建议不应该在实体类里面写任何逻辑代码 + * 而为了避免实体类耦合严重不应该去实现这个接口的 + * 但是这里为了演示和 {@link SysUser} 不同的方式，所以就选择实现这个接口了 + * 另一种方式是写一个方法将它转化为默认实现 {@link BaseClientDetails} 比较好一点并且简单很多 + * + * @author EchoCow + * @date 2020/1/6 下午12:54 + */ +@Data +@Table +@Entity +public class SysClientDetails implements ClientDetails { + + /** + * 主键 + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * client id + */ + private String clientId; + + /** + * client 密钥 + */ + private String clientSecret; + + /** + * 资源服务器名称 + */ + private String resourceIds; + + /** + * 授权域 + */ + private String scopes; + + /** + * 授权类型 + */ + private String grantTypes; + + /** + * 重定向地址，授权码时必填 + */ + private String redirectUrl; + + /** + * 授权信息 + */ + private String authorizations; + + /** + * 授权令牌有效时间 + */ + private Integer accessTokenValiditySeconds; + + /** + * 刷新令牌有效时间 + */ + private Integer refreshTokenValiditySeconds; + + /** + * 自动授权请求域 + */ + private String autoApproveScopes; + + /** + * 是否安全 + * + * @return 结果 + */ + @Override + public boolean isSecretRequired() { + return this.clientSecret != null; + } + + /** + * 是否有 scopes + * + * @return 结果 + */ + @Override + public boolean isScoped() { + return this.scopes != null && !this.scopes.isEmpty(); + } + + /** + * scopes + * + * @return scopes + */ + @Override + public Set getScope() { + return stringToSet(scopes); + } + + /** + * 授权类型 + * + * @return 结果 + */ + @Override + public Set getAuthorizedGrantTypes() { + return stringToSet(grantTypes); + } + + @Override + public Set getResourceIds() { + return stringToSet(resourceIds); + } + + + /** + * 获取回调地址 + * + * @return redirectUrl + */ + @Override + public Set getRegisteredRedirectUri() { + return stringToSet(redirectUrl); + } + + /** + * 这里需要提一下 + * 个人觉得这里应该是客户端所有的权限 + * 但是已经有 scope 的存在可以很好的对客户端的权限进行认证了 + * 那么在 oauth2 的四个角色中，这里就有可能是资源服务器的权限 + * 但是一般资源服务器都有自己的权限管理机制，比如拿到用户信息后做 RBAC + * 所以在 spring security 的默认实现中直接给的是空的一个集合 + * 这里我们也给他一个空的把 + * + * @return GrantedAuthority + */ + @Override + public Collection getAuthorities() { + return Collections.emptyList(); + } + + /** + * 判断是否自动授权 + * + * @param scope scope + * @return 结果 + */ + @Override + public boolean isAutoApprove(String scope) { + if (autoApproveScopes == null || autoApproveScopes.isEmpty()) { + return false; + } + Set authorizationSet = stringToSet(authorizations); + for (String auto : authorizationSet) { + if ("true".equalsIgnoreCase(auto) || scope.matches(auto)) { + return true; + } + } + return false; + } + + /** + * additional information 是 spring security 的保留字段 + * 暂时用不到，直接给个空的即可 + * + * @return map + */ + @Override + public Map getAdditionalInformation() { + return Collections.emptyMap(); + } + + private Set stringToSet(String s) { + return Arrays.stream(s.split(",")).collect(Collectors.toSet()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java new file mode 100644 index 000000000..e6e4f699a --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java @@ -0,0 +1,49 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.codehaus.jackson.annotate.JsonIgnore; + +import javax.persistence.*; +import java.util.Set; + +/** + * 这里完全可以只用一个字段代替的 + * 但是想了想还是模拟实际的情况来把 + * 角色信息. + * + * @author EchoCow + * @date 2020/1/6 下午12:44 + */ +@Data +@Table +@Entity +@EqualsAndHashCode(exclude = {"users"}) +@ToString(exclude = "users") +public class SysRole { + + /** + * 主键. + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * 角色名称，按照 spring security 规范 + * 需要以 ROLE_ 开头. + */ + private String name; + + /** + * 角色描述. + */ + private String description; + + /** + * 当前角色所有用户. + */ + @ManyToMany(mappedBy = "roles", fetch = FetchType.EAGER) + private Set users; +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java new file mode 100644 index 000000000..84a96411b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java @@ -0,0 +1,55 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; + +import javax.persistence.*; +import java.util.Set; + +/** + * 用户实体. + * 避免实体类耦合，所以不去实现 {@link UserDetails} 接口 + * 因为有且只有登录加载用户的时候才会需要这个接口 + * 我们就手动构建一个 {@link User} 的默认实现就可以了 + * 实现接口的方式可以参考 {@link SysClientDetails} + * + * @author EchoCow + * @date 2020/1/6 下午12:41 + */ +@Data +@Table +@Entity +@EqualsAndHashCode(exclude = "roles") +@ToString(exclude = "roles") +public class SysUser { + + /** + * 主键. + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * 用户名. + */ + private String username; + + /** + * 密码. + */ + private String password; + + /** + * 当前用户所有角色. + */ + @ManyToMany(fetch = FetchType.EAGER) + @JoinTable(name = "sys_user_role", + joinColumns = @JoinColumn(name = "user_id"), + inverseJoinColumns = @JoinColumn(name = "role_id") + ) + private Set roles; +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java new file mode 100644 index 000000000..1184acaf3 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java @@ -0,0 +1,33 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysClientDetails; +import org.springframework.data.jpa.repository.JpaRepository; +import org.springframework.data.jpa.repository.Modifying; + +import java.util.Optional; + +/** + * 客户端信息. + * + * @author EchoCow + * @date 2020/1/6 下午1:09 + */ +public interface SysClientDetailsRepository extends JpaRepository { + + /** + * 通过 clientId 查找客户端信息. + * + * @param clientId clientId + * @return 结果 + */ + Optional findFirstByClientId(String clientId); + + /** + * 根据客户端 id 删除客户端 + * + * @param clientId 客户端id + */ + @Modifying + void deleteByClientId(String clientId); + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java new file mode 100644 index 000000000..a5aaff9cf --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java @@ -0,0 +1,24 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysUser; +import org.springframework.data.jpa.repository.JpaRepository; + +import java.util.Optional; + +/** + * 用户信息仓库. + * + * @author EchoCow + * @date 2020/1/6 下午1:08 + */ +public interface SysUserRepository extends JpaRepository { + + /** + * 通过用户名查找用户. + * + * @param username 用户名 + * @return 结果 + */ + Optional findFirstByUsername(String username); + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java new file mode 100644 index 000000000..408414a45 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java @@ -0,0 +1,67 @@ +package com.xkcoding.oauth.service; + +import com.xkcoding.oauth.entity.SysClientDetails; +import org.springframework.security.oauth2.provider.ClientAlreadyExistsException; +import org.springframework.security.oauth2.provider.ClientDetailsService; +import org.springframework.security.oauth2.provider.ClientRegistrationService; +import org.springframework.security.oauth2.provider.NoSuchClientException; + +import java.util.List; + +/** + * 声明自己的实现. + * 参见 {@link ClientRegistrationService} + * + * @author EchoCow + * @date 2020/1/6 下午1:39 + */ +public interface SysClientDetailsService extends ClientDetailsService { + + /** + * 通过客户端 id 查询 + * + * @param clientId 客户端 id + * @return 结果 + */ + SysClientDetails findByClientId(String clientId); + + /** + * 添加客户端信息. + * + * @param clientDetails 客户端信息 + * @throws ClientAlreadyExistsException 客户端已存在 + */ + void addClientDetails(SysClientDetails clientDetails) throws ClientAlreadyExistsException; + + /** + * 更新客户端信息，不包括 clientSecret. + * + * @param clientDetails 客户端信息 + * @throws NoSuchClientException 找不到客户端异常 + */ + void updateClientDetails(SysClientDetails clientDetails) throws NoSuchClientException; + + /** + * 更新客户端密钥. + * + * @param clientId 客户端 id + * @param clientSecret 客户端密钥 + * @throws NoSuchClientException 找不到客户端异常 + */ + void updateClientSecret(String clientId, String clientSecret) throws NoSuchClientException; + + /** + * 删除客户端信息. + * + * @param clientId 客户端 id + * @throws NoSuchClientException 找不到客户端异常 + */ + void removeClientDetails(String clientId) throws NoSuchClientException; + + /** + * 查询所有 + * + * @return 结果 + */ + List findAll(); +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java new file mode 100644 index 000000000..6604a54a4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java @@ -0,0 +1,59 @@ +package com.xkcoding.oauth.service; + +import com.xkcoding.oauth.entity.SysUser; +import org.springframework.security.core.userdetails.UserDetailsService; + +import java.util.List; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午3:44 + */ +public interface SysUserService extends UserDetailsService { + /** + * 查询所有用户 + * + * @return 用户 + */ + List findAll(); + + /** + * 通过 id 查询用户 + * + * @param id id + * @return 用户 + */ + SysUser findById(Long id); + + /** + * 创建用户 + * + * @param sysUser 用户 + */ + void createUser(SysUser sysUser); + + /** + * 更新用户 + * + * @param sysUser 用户 + */ + void updateUser(SysUser sysUser); + + /** + * 更新用户 密码 + * + * @param id 用户 id + * @param password 用户密码 + */ + void updatePassword(Long id, String password); + + /** + * 删除用户. + * + * @param id id + */ + void deleteUser(Long id); +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java new file mode 100644 index 000000000..00e36629e --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java @@ -0,0 +1,73 @@ +package com.xkcoding.oauth.service.impl; + +import com.xkcoding.oauth.entity.SysClientDetails; +import com.xkcoding.oauth.repostiory.SysClientDetailsRepository; +import com.xkcoding.oauth.service.SysClientDetailsService; +import lombok.RequiredArgsConstructor; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.provider.*; +import org.springframework.stereotype.Service; + +import java.util.List; + +/** + * 客户端 相关操作. + * + * @author EchoCow + * @date 2020/1/6 下午1:37 + */ +@Service +@RequiredArgsConstructor +public class SysClientDetailsServiceImpl implements SysClientDetailsService { + + private final SysClientDetailsRepository sysClientDetailsRepository; + private final PasswordEncoder passwordEncoder; + + @Override + public ClientDetails loadClientByClientId(String id) throws ClientRegistrationException { + return sysClientDetailsRepository.findFirstByClientId(id) + .orElseThrow(() -> new ClientRegistrationException("Loading client exception.")); + } + + @Override + public SysClientDetails findByClientId(String clientId) { + return sysClientDetailsRepository.findFirstByClientId(clientId) + .orElseThrow(() -> new ClientRegistrationException("Loading client exception.")); + } + + @Override + public void addClientDetails(SysClientDetails clientDetails) throws ClientAlreadyExistsException { + clientDetails.setId(null); + if (sysClientDetailsRepository.findFirstByClientId(clientDetails.getClientId()).isPresent()) { + throw new ClientAlreadyExistsException(String.format("Client id %s already exist.", clientDetails.getClientId())); + } + sysClientDetailsRepository.save(clientDetails); + } + + @Override + public void updateClientDetails(SysClientDetails clientDetails) throws NoSuchClientException { + SysClientDetails exist = sysClientDetailsRepository.findFirstByClientId(clientDetails.getClientId()) + .orElseThrow(() -> new NoSuchClientException("No such client!")); + clientDetails.setClientSecret(exist.getClientSecret()); + sysClientDetailsRepository.save(clientDetails); + } + + @Override + public void updateClientSecret(String clientId, String clientSecret) throws NoSuchClientException { + SysClientDetails exist = sysClientDetailsRepository.findFirstByClientId(clientId) + .orElseThrow(() -> new NoSuchClientException("No such client!")); + exist.setClientSecret(passwordEncoder.encode(clientSecret)); + sysClientDetailsRepository.save(exist); + } + + @Override + public void removeClientDetails(String clientId) throws NoSuchClientException { + sysClientDetailsRepository.deleteByClientId(clientId); + } + + @Override + public List findAll() { + return sysClientDetailsRepository.findAll(); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java new file mode 100644 index 000000000..307af4d6d --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java @@ -0,0 +1,76 @@ +package com.xkcoding.oauth.service.impl; + +import com.xkcoding.oauth.entity.SysUser; +import com.xkcoding.oauth.repostiory.SysUserRepository; +import com.xkcoding.oauth.service.SysUserService; +import lombok.RequiredArgsConstructor; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; + +import java.util.List; +import java.util.stream.Collectors; + +/** + * 用户相关操作. + * + * @author EchoCow + * @date 2020/1/6 下午3:06 + */ +@Service +@RequiredArgsConstructor +public class SysUserServiceImpl implements SysUserService { + + private final SysUserRepository sysUserRepository; + private final PasswordEncoder passwordEncoder; + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + SysUser sysUser = sysUserRepository.findFirstByUsername(username) + .orElseThrow(() -> new UsernameNotFoundException("User not found!")); + List roles = sysUser.getRoles().stream() + .map(sysRole -> new SimpleGrantedAuthority(sysRole.getName())) + .collect(Collectors.toList()); + // 在这里手动构建 UserDetails 的默认实现 + return new User(sysUser.getUsername(), sysUser.getPassword(), roles); + } + + @Override + public List findAll() { + return sysUserRepository.findAll(); + } + + @Override + public SysUser findById(Long id) { + return sysUserRepository.findById(id) + .orElseThrow(() -> new RuntimeException("找不到用户")); + } + + @Override + public void createUser(SysUser sysUser) { + sysUser.setId(null); + sysUserRepository.save(sysUser); + } + + @Override + public void updateUser(SysUser sysUser) { + sysUser.setPassword(null); + sysUserRepository.save(sysUser); + } + + @Override + public void updatePassword(Long id, String password) { + SysUser exist = findById(id); + exist.setPassword(passwordEncoder.encode(password)); + sysUserRepository.save(exist); + } + + @Override + public void deleteUser(Long id) { + sysUserRepository.deleteById(id); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java new file mode 100644 index 000000000..45f57f553 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java @@ -0,0 +1,7 @@ +/** + * service 层，继承并实现 spring 接口. + * + * @author EchoCow + * @date 2020/1/7 上午9:16 + */ +package com.xkcoding.oauth.service; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml new file mode 100644 index 000000000..d68c1b23c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml @@ -0,0 +1,22 @@ +server: + port: 8080 + +spring: + datasource: + url: jdbc:mysql://localhost:3306/oauth + username: root + password: 123456 + hikari: + data-source-properties: + useSSL: false + serverTimezone: GMT+8 + useUnicode: true + characterEncoding: utf8 + jpa: + hibernate: + ddl-auto: update + show-sql: true + +logging: + level: + org.springframework.security: debug diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks new file mode 100644 index 0000000000000000000000000000000000000000..af97322428bc077838fc24774dafc3a40db84e1f GIT binary patch literal 2559 zcmY+Gc{CJ?7sm%<#xlw>cEZ@V3^N|tDlui>jU@(U>6K`VHS5Tdhq25UG&B-r36W}{2^ZUJb-XHheb3WgD@1LJ@;dss;tSoGBJm(7#r%Ljbwi3AR5eYY_MUwjf+AtW-Sk2OJOl23H1g{U4tk z7Y9P2fVnXafy2y3?fKFll92tTVhu1W8=%`3hzIslNw+x0+qxudjU?7OLNVdko&2Xe zBO~^uB8XP$zu(26F}YTs^MT|#qY?Ekn_2R{0wiOLqyu`czu`P!cgT(DXo-*87+#Z zzhKCr49v|Nrj}8YFJ!doex2cok%)Wlt97K;Iugq+a4l`s@(arN-7fR%owt_*Nl9^; z{&wr1zf_Jg0us#2LwJpfP0@KuN*eZY-X53-nty)F9~AlVdkbwBvS%W@6k+rQxT~7W zA4I6BRqP0+6giSG+XdgJb1iJ6wD%R!@$%Tf&Dbv{jH~%&4_dO`=OWd%b`bJz*~mwu%0XlVD_VT7SKpkg-?3_o^{lz-NN)FX#UsB|pll&`gT)%z{nXv!qz?569YB?LFH=XT7+|d6au^&#^Yxc9D*FB3y zE!^MMiyk0nmkMRSwCOYc<%!(6M)3K-fz~rKz~H<)Or>qEyQU)pd$Q8ZV6Gfs38tng zX#2b3Y%MnxH}omP=|qVO1rzHJM4Kx+ z>$%FD3ZcJf)EkG{6;XS`!0d^F$ptOe#?O!O9{t>nj552FkHYaKoa>4{jn76C=Pa|q zK+c%qH*J+`B8niBRy2j3U#(I7slxQ$kUcpoagWBu zHxH6oB(0xnqaOPAG^ulF%uA9-Nn;MTV!CdANh{FWk1c*8J&6%E@^kzei~NMfGsCMx z0;_J{X}Sz+0CE8Wv}4g`kv4_BdX8gevTNK!Yp1Rw1o>)2!&&~|+8F`_3KEjv^$m+k zP(3zO_hXmMo$N>ZTj7~1zL&^DHH3=ynJ%l-<=XSyUd@zzkEPF-BtqG*==+LW_JO_) zO>lJH1HZgIGukmn-s7RuU-?pYKfUm6B-l%rViW0kqamIn={;G(ZRY%J{EhFydECt97 zCJEgsgyND&(knE<>+@wFHl<>XgbCe1wWl*C^LnD3h%uD82>xa{QM8aIndJ_tw?B@+ zWBX)ajOR_!A(W(XV)O%tg;8;~FO7Sh2E3YA?t%pQt}rh%7l#9K>J$nl&~+IaB0%cb zEOm*h^FRzySgPT5y?vLP1R^kl*n}ps%#1wvMjWIV~-OE>atD zB2Tryhrpl{pGuw}QC1efN#p+~VfmL~LH{vq-_)e%{^Z>D8;8q}8cf%h;W1gi{nxPZ zc(y6p4H|&CT2b*1GwChm6#4UlbJ(n=x_K$Xyt zu%7`BQQD!Sz}g%sEG&HR-LMh#^>d4L`NhSCW#3`HrK9L_!E1&&zDB23>aJO+*(#NX zPOA9cm)PKmQgId`M#r4OZ+JB&><8kPrYT|~O6U)nvXw$=<}wQ-+5-wWmXA_z&411P z5FUy{N;cXmEb5~|<%(R~8Xk7(WR__EidGn!HAS)?8?V?DN2YqJit{sMdUI|;FloFo z%i~XH^Vi5a(x1Ot`+pB^&?wYnoVx zoWPdBtP262DCaJErD#3ZX7H&%TBjJ3CRLXQ89a{bYaFJz1mUr%=C|QHoO$CqP#XT7 zkS-Wm(Z8|HnwiT&vCDPQNg1pE>e^i;6kXQyxykiyuG!q@$Oj^p-&je@m z@*OZOi4fj$9{|dS*9_0noGCHcVBr-90udbI=@hGOCvLa0 z6HL^&E^?7U!C>S9h6!nQiEU>T_18)T_*BW#`I$#vfnGU1p3jjw-Z$od>Fo(?e(RGo z%LK_^RdJMxlOHxP4#tAeHq)2--CpWH+#sorz=VWtJ&W@?BGVl@wu7iP<>Les8QCLS z&E4r0NjC4DR|62q*pw;oqh>6-i>ri{<2f)*V>SWUu7DJXkoZc^?mGDepq>X=;i)+K z%;*`dPw8=FH6dx<13((=}Er{ z=}kJgk*tka31Z0bt0?IS6f|h{*Ch#+Q2VV#W3Z-bVLQF9#q#V;Ki? + + + 确认您的授权信息 + + +

+ + + + + + + + + 确认应用的授权信息 + +
+ +
+ + + 当前应用将会获取您的以下权限： + + + + + + + + + + + + + + 确认授权 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html new file mode 100644 index 000000000..7cc71dee6 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html @@ -0,0 +1,33 @@ + + + + + + + + + + + + + +
+ + +
+ + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html new file mode 100644 index 000000000..df4c1bc7f --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html @@ -0,0 +1,45 @@ + + + + 发送了点小错误 + + +
+ + + + + + + + +

404 找不到页面

+

~~~

+ 点击返回 + + + + + + +
+ + +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html new file mode 100644 index 000000000..5355e7ea2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html @@ -0,0 +1,110 @@ + + + + 欢迎登录 + + +
+ + + + + + + + + 欢迎登录 + + + + +

{{infoText}}

+

+ + + + + + + + + + + + + + + + + {{previousText}} + + 下一步 + 登录 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html new file mode 100644 index 000000000..1ea0a0c33 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html @@ -0,0 +1,44 @@ + + + + 确认退出吗？ + + +
+ + + + + + + + + 确认退出当前应用吗？ + +
+ +
+ + + + + + 确认退出 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html new file mode 100644 index 000000000..3fae0b9ae --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html @@ -0,0 +1,155 @@ + + + + + + + + + +
+
+
云课程考试平台
+
+

亲爱的用户，你好！

+ +
+
+

+ 欢迎您注册 云课程考试平台 +

+

+ 你的邮件的验证码： + 验证码
(请输入该验证码完成 验证，验证码 + + 10 分钟内有效！)

+
如果您未申请云课程学习平台 + $(type) 服务，请忽略该邮件。 +
+
+
+ +

如果仍有问题，请联系我们的管理员: 000-00000000 +

+
+
+
+ + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java new file mode 100644 index 000000000..3dc8233a4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java @@ -0,0 +1,22 @@ +package com.xkcoding.oauth; + +import org.junit.jupiter.api.Test; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午3:51 + */ +public class PasswordEncodeTest { + + private PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + + @Test + public void getPasswordWhenPassed() { + System.out.println(passwordEncoder.encode("oauth2")); + System.out.println(passwordEncoder.encode("123456")); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java new file mode 100644 index 000000000..01e0d447b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java @@ -0,0 +1,125 @@ +package com.xkcoding.oauth.oauth; + +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import org.springframework.http.HttpHeaders; +import org.springframework.http.MediaType; +import org.springframework.http.ResponseEntity; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.resource.UserRedirectRequiredException; +import org.springframework.security.oauth2.client.token.DefaultAccessTokenRequest; +import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeAccessTokenProvider; +import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeResourceDetails; +import org.springframework.util.LinkedMultiValueMap; +import org.springframework.util.MultiValueMap; + +import java.net.URI; +import java.util.Arrays; +import java.util.Collections; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + +import static com.xkcoding.oauth.oauth.AuthorizationServerInfo.getUrl; +import static org.junit.jupiter.api.Assertions.*; + +/** + * 授权码模式测试. + * + * @author EchoCow + * @date 2020/1/6 下午8:43 + */ +public class AuthorizationCodeGrantTests { + + private AuthorizationCodeResourceDetails resource = new AuthorizationCodeResourceDetails(); + private AuthorizationServerInfo authorizationServerInfo = new AuthorizationServerInfo(); + + @BeforeEach + void setUp() { + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setClientId("oauth2"); + resource.setId("oauth2"); + resource.setScope(Arrays.asList("READ", "WRITE")); + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setUserAuthorizationUri(getUrl("/oauth/authorize")); + } + + @Test + void testCannotConnectWithoutToken() { + OAuth2RestTemplate template = new OAuth2RestTemplate(resource); + assertThrows(UserRedirectRequiredException.class, + () -> template.getForObject(getUrl("/oauth/me"), String.class)); + } + + @Test + void testAttemptedTokenAcquisitionWithNoRedirect() { + AuthorizationCodeAccessTokenProvider provider = new AuthorizationCodeAccessTokenProvider(); + assertThrows(UserRedirectRequiredException.class, + () -> provider.obtainAccessToken(resource, new DefaultAccessTokenRequest())); + } + + /** + * 这里不使用他提供的是因为很多地方不符合我们的需要 + * 比如 csrf，比如许多有些是自己自定义的端点这些 + * 所以只有我们一步一步的来进行测试拿到授权码 + */ + @Test + void testCodeAcquisitionWithCorrectContext() { + // 1. 请求登录页面获取 _csrf 的 value 以及 cookie + ResponseEntity page = authorizationServerInfo.getForString("/oauth/login"); + assertNotNull(page.getBody()); + String cookie = page.getHeaders().getFirst("Set-Cookie"); + HttpHeaders headers = new HttpHeaders(); + headers.set("Cookie", cookie); + Matcher matcher = Pattern.compile("(?s).*name=\"_csrf\".*?value=\"([^\"]+).*").matcher(page.getBody()); + assertTrue(matcher.find()); + + // 2. 添加表单数据 + MultiValueMap form = new LinkedMultiValueMap<>(); + form.add("username", "admin"); + form.add("password", "123456"); + form.add("_csrf", matcher.group(1)); + + // 3. 登录授权并获取登录成功的 cookie + ResponseEntity response = authorizationServerInfo + .postForStatus("/authorization/form", headers, form); + assertNotNull(response); + cookie = response.getHeaders().getFirst("Set-Cookie"); + headers = new HttpHeaders(); + headers.set("Cookie", cookie); + headers.setAccept(Collections.singletonList(MediaType.ALL)); + + // 4. 请求到 确认授权页面 ，获取确认授权页面的 _csrf 的 value + ResponseEntity confirm = authorizationServerInfo + .getForString("/oauth/authorize?response_type=code&client_id=oauth2&redirect_uri=http://example.com&scope=READ", headers); + + headers = confirm.getHeaders(); + // 确认过一次后，后面都会自动确认了，这里判断下是不是重定向请求 + // 如果不是，就表示是第一次，需要确认授权 + if (!confirm.getStatusCode().is3xxRedirection()) { + assertNotNull(confirm.getBody()); + Matcher matcherConfirm = Pattern.compile("(?s).*name=\"_csrf\".*?value=\"([^\"]+).*").matcher(confirm.getBody()); + assertTrue(matcherConfirm.find()); + headers = new HttpHeaders(); + headers.set("Cookie", cookie); + headers.setAccept(Collections.singletonList(MediaType.ALL)); + + // 5. 构建 同意授权 的表单 + form = new LinkedMultiValueMap<>(); + form.add("user_oauth_approval", "true"); + form.add("scope.READ", "true"); + form.add("_csrf", matcherConfirm.group(1)); + + // 6. 请求授权，获取 授权码 + headers = authorizationServerInfo.postForHeaders("/oauth/authorize", form, headers); + } + + URI location = headers.getLocation(); + assertNotNull(location); + String query = location.getQuery(); + assertNotNull(query); + String[] result = query.split("="); + assertEquals(2, result.length); + System.out.println(result[1]); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java new file mode 100644 index 000000000..0c229199c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java @@ -0,0 +1,94 @@ +package com.xkcoding.oauth.oauth; + +import org.springframework.http.*; +import org.springframework.http.client.ClientHttpRequest; +import org.springframework.http.client.ClientHttpResponse; +import org.springframework.http.client.SimpleClientHttpRequestFactory; +import org.springframework.util.MultiValueMap; +import org.springframework.web.client.RequestCallback; +import org.springframework.web.client.ResponseErrorHandler; +import org.springframework.web.client.RestTemplate; + +import java.io.IOException; +import java.net.HttpURLConnection; + +/** + * 授权服务器工具类. + * + * @author EchoCow + * @date 2020/1/6 下午8:44 + */ +@SuppressWarnings("all") +public class AuthorizationServerInfo { + public static final String HOST = "http://127.0.0.1:8080"; + + private RestTemplate client; + + public AuthorizationServerInfo() { + client = new RestTemplate(); + client.setRequestFactory(new SimpleClientHttpRequestFactory() { + @Override + protected void prepareConnection(HttpURLConnection connection, String httpMethod) throws IOException { + super.prepareConnection(connection, httpMethod); + connection.setInstanceFollowRedirects(false); + } + }); + client.setErrorHandler(new ResponseErrorHandler() { + public boolean hasError(ClientHttpResponse response) { + return false; + } + + public void handleError(ClientHttpResponse response) { + } + }); + } + + public ResponseEntity getForString(String path, final HttpHeaders headers) { + return client.exchange(getUrl(path), HttpMethod.GET, new HttpEntity<>(null, headers), String.class); + } + + public ResponseEntity getForString(String path) { + return getForString(path, new HttpHeaders()); + } + + public ResponseEntity postForStatus(String path, HttpHeaders headers, MultiValueMap formData) { + HttpHeaders actualHeaders = new HttpHeaders(); + actualHeaders.putAll(headers); + actualHeaders.setContentType(MediaType.APPLICATION_FORM_URLENCODED); + return client.exchange(getUrl(path), HttpMethod.POST, + new HttpEntity<>(formData, actualHeaders), (Class) null); + } + + + public static String getUrl(String path) { + return HOST + path; + } + + public HttpHeaders postForHeaders(String path, MultiValueMap formData, final HttpHeaders headers) { + RequestCallback requestCallback = new NullRequestCallback(); + if (headers != null) { + requestCallback = request -> request.getHeaders().putAll(headers); + } + StringBuilder builder = new StringBuilder(getUrl(path)); + if (!path.contains("?")) { + builder.append("?"); + } else { + builder.append("&"); + } + for (String key : formData.keySet()) { + for (String value : formData.get(key)) { + builder.append(key).append("=").append(value); + builder.append("&"); + } + } + builder.deleteCharAt(builder.length() - 1); + + return client.execute(builder.toString(), HttpMethod.POST, requestCallback, + HttpMessage::getHeaders); + } + + private static final class NullRequestCallback implements RequestCallback { + public void doWithRequest(ClientHttpRequest request) { + } + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java new file mode 100644 index 000000000..38d8d1ddc --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java @@ -0,0 +1,39 @@ +package com.xkcoding.oauth.oauth; + +import org.junit.jupiter.api.Test; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.token.grant.password.ResourceOwnerPasswordResourceDetails; +import org.springframework.security.oauth2.common.OAuth2AccessToken; + +import java.util.Arrays; + +import static com.xkcoding.oauth.oauth.AuthorizationServerInfo.getUrl; +import static org.junit.jupiter.api.Assertions.*; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午9:14 + */ +public class ResourceOwnerPasswordGrantTests { + + @Test + void testConnectDirectlyToResourceServer() { + assertNotNull(accessToken()); + } + + public static String accessToken() { + ResourceOwnerPasswordResourceDetails resource = new ResourceOwnerPasswordResourceDetails(); + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setClientId("oauth2"); + resource.setClientSecret("oauth2"); + resource.setId("oauth2"); + resource.setScope(Arrays.asList("READ", "WRITE")); + resource.setUsername("admin"); + resource.setPassword("123456"); + OAuth2RestTemplate template = new OAuth2RestTemplate(resource); + OAuth2AccessToken accessToken = template.getAccessToken(); + return accessToken.getValue(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java new file mode 100644 index 000000000..c0126bc09 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java @@ -0,0 +1,26 @@ +package com.xkcoding.oauth.repostiory; + +import org.junit.jupiter.api.Test; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest; + +import static org.junit.jupiter.api.Assertions.assertNotNull; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:10 + */ +@DataJpaTest +public class SysClientDetailsTest { + @Autowired + private SysClientDetailsRepository sysClientDetailsRepository; + + @Test + public void autowiredSuccessWhenPassed() { + assertNotNull(sysClientDetailsRepository); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java new file mode 100644 index 000000000..7df067973 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java @@ -0,0 +1,40 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysUser; +import org.junit.jupiter.api.DisplayName; +import org.junit.jupiter.api.Test; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest; + +import java.util.Optional; + +import static org.junit.jupiter.api.Assertions.*; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:25 + */ +@DataJpaTest +public class SysUserRepositoryTest { + + @Autowired + private SysUserRepository sysUserRepository; + + @Test + public void autowiredSuccessWhenPassed() { + assertNotNull(sysUserRepository); + } + + @Test + @DisplayName("测试关联查询") + public void queryUserAndRoleWhenPassed() { + Optional admin = sysUserRepository.findFirstByUsername("admin"); + assertTrue(admin.isPresent()); + SysUser sysUser = admin.orElseGet(SysUser::new); + assertNotNull(sysUser.getRoles()); + assertEquals(1, sysUser.getRoles().size()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml new file mode 100644 index 000000000..0324e2521 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml @@ -0,0 +1,21 @@ +server: + port: 8080 + servlet: + context-path: /demo + +spring: + datasource: + url: jdbc:h2:mem:oauth2?options=DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE + username: root + password: 123456 + jpa: + hibernate: + ddl-auto: create-drop + show-sql: true + properties: + hibernate: + format_sql: true + +logging: + level: + org.springframework.security: debug diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql new file mode 100644 index 000000000..4dee7e7f2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql @@ -0,0 +1,10 @@ +-- 测试数据 +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (1, 6000, null, null, 'oauth2', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'oauth2', 'READ,WRITE'); +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (2, 6000, null, null, 'test', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'test', 'READ'); +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (3, 6000, null, null, 'test', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'error', 'READ'); +INSERT INTO sys_role (id, name, description) VALUES (1, 'ROLE_ADMIN', '管理员'); +INSERT INTO sys_role (id, name, description) VALUES (2, 'ROLE_TEST', '测试'); +INSERT INTO sys_user (id, username, password) VALUES (1, 'admin', '$2a$10$xLH.pDNz3d2frOBQ6Gc.wuHY4ghwlSyFDgy0Ta.psXmm1YJjNaV1G'); +INSERT INTO sys_user (id, username, password) VALUES (2, 'test', '$2a$10$xLH.pDNz3d2frOBQ6Gc.wuHY4ghwlSyFDgy0Ta.psXmm1YJjNaV1G'); +INSERT INTO sys_user_role (user_id, role_id) VALUES (1, 1); +INSERT INTO sys_user_role (user_id, role_id) VALUES (2, 2); diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql new file mode 100644 index 000000000..1bb215607 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql @@ -0,0 +1,40 @@ +create table sys_client_details +( + id bigint auto_increment primary key, + access_token_validity_seconds int null, + authorizations varchar(255) null, + auto_approve_scopes varchar(255) null, + client_id varchar(255) null, + client_secret varchar(255) null, + grant_types varchar(255) null, + redirect_url varchar(255) null, + refresh_token_validity_seconds int null, + resource_ids varchar(255) null, + scopes varchar(255) null +); + +create table sys_role +( + id bigint auto_increment primary key, + name varchar(55) not null, + description varchar(55) null +); + +create table sys_user +( + id bigint auto_increment primary key, + username varchar(55) not null, + password varchar(128) not null +); + +create table sys_user_role +( + id bigint auto_increment primary key, + user_id bigint not null, + role_id bigint not null, + constraint sys_user_role_sys_role_id_fk + foreign key (role_id) references sys_role (id), + constraint sys_user_role_sys_user_id_fk + foreign key (user_id) references sys_user (id) +); + diff --git a/spring-boot-demo-oauth/src/main/resources/application.yml b/spring-boot-demo-oauth/src/main/resources/application.yml deleted file mode 100644 index a02fbde11..000000000 --- a/spring-boot-demo-oauth/src/main/resources/application.yml +++ /dev/null @@ -1,4 +0,0 @@ -server: - port: 8080 - servlet: - context-path: /demo \ No newline at end of file diff --git a/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java b/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java deleted file mode 100644 index 9b53df26e..000000000 --- a/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java +++ /dev/null @@ -1,17 +0,0 @@ -package com.xkcoding.oauth; - -import org.junit.Test; -import org.junit.runner.RunWith; -import org.springframework.boot.test.context.SpringBootTest; -import org.springframework.test.context.junit4.SpringRunner; - -@RunWith(SpringRunner.class) -@SpringBootTest -public class SpringBootDemoOauthApplicationTests { - - @Test - public void contextLoads() { - } - -} - From 93a9b8b0d94e206fd8eaa5fcfadc4c88b2abd9f9 Mon Sep 17 00:00:00 2001 From: EchoCow Date: Tue, 7 Jan 2020 16:17:56 +0800 Subject: [PATCH 02/16] :sparkles: Add spring-boot-demo-oauth-authorization-server. --- pom.xml | 14 + spring-boot-demo-oauth/pom.xml | 52 +++- .../README.adoc | 273 ++++++++++++++++++ .../image/Code.png | Bin 0 -> 29672 bytes .../image/Confirm.png | Bin 0 -> 22681 bytes .../image/Login.png | Bin 0 -> 22048 bytes .../image/Logout.png | Bin 0 -> 24467 bytes .../pom.xml | 15 + .../oauth/SpringBootDemoOauthApplication.java | 3 +- .../config/ClientLoginFailureHandler.java | 31 ++ .../config/ClientLogoutSuccessHandler.java | 30 ++ .../Oauth2AuthorizationServerConfig.java | 54 ++++ .../Oauth2AuthorizationTokenConfig.java | 74 +++++ .../oauth/config/WebSecurityConfig.java | 54 ++++ .../xkcoding/oauth/config/package-info.java | 22 ++ .../controller/AuthorizationController.java | 43 +++ .../oauth/controller/Oauth2Controller.java | 55 ++++ .../oauth/controller/package-info.java | 14 + .../oauth/entity/SysClientDetails.java | 191 ++++++++++++ .../com/xkcoding/oauth/entity/SysRole.java | 49 ++++ .../com/xkcoding/oauth/entity/SysUser.java | 55 ++++ .../SysClientDetailsRepository.java | 33 +++ .../oauth/repostiory/SysUserRepository.java | 24 ++ .../service/SysClientDetailsService.java | 67 +++++ .../oauth/service/SysUserService.java | 59 ++++ .../impl/SysClientDetailsServiceImpl.java | 73 +++++ .../service/impl/SysUserServiceImpl.java | 76 +++++ .../xkcoding/oauth/service/package-info.java | 7 + .../src/main/resources/application.yml | 22 ++ .../src/main/resources/oauth2.jks | Bin 0 -> 2559 bytes .../src/main/resources/public.txt | 9 + .../resources/templates/authorization.html | 55 ++++ .../resources/templates/common/common.html | 33 +++ .../src/main/resources/templates/error.html | 45 +++ .../src/main/resources/templates/login.html | 110 +++++++ .../src/main/resources/templates/logout.html | 44 +++ .../resources/templates/registerTemplate.html | 155 ++++++++++ .../xkcoding/oauth/PasswordEncodeTest.java | 22 ++ .../oauth/AuthorizationCodeGrantTests.java | 125 ++++++++ .../oauth/oauth/AuthorizationServerInfo.java | 94 ++++++ .../ResourceOwnerPasswordGrantTests.java | 39 +++ .../repostiory/SysClientDetailsTest.java | 26 ++ .../repostiory/SysUserRepositoryTest.java | 40 +++ .../src/test/resources/application.yml | 21 ++ .../src/test/resources/import.sql | 10 + .../src/test/resources/schema.sql | 40 +++ .../src/main/resources/application.yml | 4 - .../SpringBootDemoOauthApplicationTests.java | 17 -- 48 files changed, 2256 insertions(+), 23 deletions(-) create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Confirm.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml rename spring-boot-demo-oauth/{ => spring-boot-demo-oauth-authorization-server}/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java (90%) create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/public.txt create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/authorization.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql delete mode 100644 spring-boot-demo-oauth/src/main/resources/application.yml delete mode 100644 spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java diff --git a/pom.xml b/pom.xml index 64089db87..8311573dd 100644 --- a/pom.xml +++ b/pom.xml @@ -86,6 +86,20 @@ 1.20 + + + aliyun + aliyun + https://maven.aliyun.com/repository/public + + true + + + false + + + + diff --git a/spring-boot-demo-oauth/pom.xml b/spring-boot-demo-oauth/pom.xml index 8ad7b24a6..724e86acc 100644 --- a/spring-boot-demo-oauth/pom.xml +++ b/spring-boot-demo-oauth/pom.xml @@ -5,7 +5,10 @@ spring-boot-demo-oauth 1.0.0-SNAPSHOT - jar + + spring-boot-demo-oauth-authorization-server + + pom spring-boot-demo-oauth Demo project for Spring Boot @@ -28,10 +31,49 @@ spring-boot-starter-web + + org.springframework.boot + spring-boot-starter-security + + + + org.springframework.boot + spring-boot-starter-thymeleaf + + + + org.springframework.boot + spring-boot-starter-data-jpa + + + + org.springframework.security.oauth.boot + spring-security-oauth2-autoconfigure + ${spring.boot.version} + + + + mysql + mysql-connector-java + runtime + + + + com.h2database + h2 + test + + org.springframework.boot spring-boot-starter-test test + + + junit + junit + + @@ -44,6 +86,14 @@ lombok true + + + org.junit.jupiter + junit-jupiter + 5.5.2 + test + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc new file mode 100644 index 000000000..1fee06026 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/README.adoc @@ -0,0 +1,273 @@ += spring-boot-demo-oauth-authorization-server +Doc Writer +v1.0, 2019-01-07 +:toc: + +spring boot oauth2 授权服务器， + +- 授权码模式、密码模式、刷新令牌 +- 自定义 UserDetailService +- 自定义 ClientDetailService +- jwt 非对称加密 +- 自定义登录授权页面 + +> SQL 语句 +> +> - DDL： `src/test/resources/schema.sql` +> - DML： `src/test/resources/import.sql` + +测试用例使用 h2 数据库，测试数据如下： + +.测试客户端 +|=== +|客户端 id |客户端密钥 |资源服务器名称 |授权类型 | scopes| 回调地址 + +|oauth2 +|oauth2 +|oauth2 +|authorization_code,password,refresh_token +|READ,WRITE +|http://example.com + +|test +|oauth2 +|oauth2 +|authorization_code,password,refresh_token +|READ +|http://example.com + + +|error +|oauth2 +|test +|authorization_code,password,refresh_token +|READ +|http://example.com +|=== + +.测试用户 +|=== +|用户名 |密码 |角色 + +|admin +|123456 +|ROLE_ADMIN + +|test +|123456 +|ROLE_TEST + +|=== + +== 授权码模式 + +> 测试用例：`com.xkcoding.oauth.oauth.AuthorizationCodeGrantTests` + +=== 获取授权码 + +- 请求地址： http://localhost:8080/oauth/authorize?response_type=code&client_id=oauth2&redirect_uri=http://example.com&scope=READ +- 用户名：admin +- 密码：123456 + +image::image/Login.png[login] + +=== 确认授权 + +登录成功以后，进入确认授权页面。已经确认过的用户，不会再次要求确认。 + +image::image/Confirm.png[confirm] + +确认授权后，获取授权码 + +image::image/Code.png[code] + +=== 请求 token + +使用以下代码可以直接请求 token + +[shell] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'grant_type=authorization_code' \ +--data-urlencode 'code=GgX6QD' \ +--data-urlencode 'redirect_uri=http://example.com' \ +--data-urlencode 'client_id=oauth2' \ +--data-urlencode 'scope=READ WRITE' +---- + +得到 token + +[token] +---- +{ + "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiZjAyMDhiNTUtYTJjYS00NjI4LTg5YjEtNzI5MzY4MzAxOWNhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.RqJpsin6bMnwI57cGpODTplLeW_gtNWHo_l4SimyRLsnxpCWm5oY1EOb4qVHpXvCbhNsUj69D462P7le13OOmexysZIQhaoGZ_CbIlEp63XsCnr5nSKeX3dgQlyTUDjOUL0WUtY2lKqLCGMeX_rpVhfmSh3b7MC0Ntxq5ao-943QMXGRIeRvJgSkvfY2HBN6-zx1H6rE0wxnUfBC1M08kUkFYlSmsFchiz-E_oTzJvE2D8lA9g-eEFU6cZ_els4Q77Vvc_O6SXUZ7o65vFyLyUjLvh9QF1825SGIUUdXTUYSZjnSAXChhRIAT5pLRHK-gthIzpOaWrgj6ebUoG02Eg", + "token_type": "bearer", + "refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJhdGkiOiJmMDIwOGI1NS1hMmNhLTQ2MjgtODliMS03MjkzNjgzMDE5Y2EiLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiMGViNTU2MTQtYjgxYS00MTFmLTg1MTAtZThkMjZmODJmMjJhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.CBGcjirkf-3187SgbZr0ikauiCS8U9YLaoR4sNlRQjd-gaIeF5PChnIs_yAmG_VpqPFlPRdSl8DA05S2QnFpT3TkRjyP-LPDZgsVAPfczMAdVywU1zOKYZeq-gM6p9bmGEabbZoBlIxOImsjeyFSCui6UtRTZjNlj3AhGIzvs52T8bDqC796iHPDZvJ97MMgsEiRyu-mxDm1o1LMuBX9RHCx9rAkBVf52q36bqWMcYAlDOu1wYjpmhalSLZyWcmraQvClEitXGJI4eTFapTnuXQuWFIL-973V_5Shw98-bk65zZQOEheazHrUf-n4h-sYT4akehnYSVxX2UIg9XsCw", + "expires_in": 5999, + "scope": "READ", + "jti": "f0208b55-a2ca-4628-89b1-7293683019ca" +} +---- + +== 密码模式 + +> 测试用例：`com.xkcoding.oauth.oauth.ResourceOwnerPasswordGrantTests` + +`test` 用户进行授权 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'password=123456' \ +--data-urlencode 'username=test' \ +--data-urlencode 'grant_type=password' \ +--data-urlencode 'scope=READ WRITE' +---- + +== 刷新令牌 + +携带 `refresh_token` 去请求 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'grant_type=refresh_token' \ +--data-urlencode 'refresh_token=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsib2F1dGgyIl0sInVzZXJfbmFtZSI6ImFkbWluIiwic2NvcGUiOlsiUkVBRCJdLCJhdGkiOiJmMDIwOGI1NS1hMmNhLTQ2MjgtODliMS03MjkzNjgzMDE5Y2EiLCJleHAiOjE1NzgzODY4MTYsImF1dGhvcml0aWVzIjpbIlJPTEVfQURNSU4iXSwianRpIjoiMGViNTU2MTQtYjgxYS00MTFmLTg1MTAtZThkMjZmODJmMjJhIiwiY2xpZW50X2lkIjoib2F1dGgyIn0.CBGcjirkf-3187SgbZr0ikauiCS8U9YLaoR4sNlRQjd-gaIeF5PChnIs_yAmG_VpqPFlPRdSl8DA05S2QnFpT3TkRjyP-LPDZgsVAPfczMAdVywU1zOKYZeq-gM6p9bmGEabbZoBlIxOImsjeyFSCui6UtRTZjNlj3AhGIzvs52T8bDqC796iHPDZvJ97MMgsEiRyu-mxDm1o1LMuBX9RHCx9rAkBVf52q36bqWMcYAlDOu1wYjpmhalSLZyWcmraQvClEitXGJI4eTFapTnuXQuWFIL-973V_5Shw98-bk65zZQOEheazHrUf-n4h-sYT4akehnYSVxX2UIg9XsCw' +---- + +== 解析令牌 + +携带令牌解析 + +[source] +---- +curl --location --request POST 'http://127.0.0.1:8080/oauth/check_token' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' \ +--data-urlencode 'token=' +---- + +解析结果 + +[source] +---- +{ + "aud": [ + "oauth2" + ], + "user_name": "admin", + "scope": [ + "READ", + "WRITE" + ], + "active": true, + "exp": 1578389936, + "authorities": [ + "ROLE_ADMIN" + ], + "jti": "fe59fce9-6764-435e-8fa7-7320e11af811", + "client_id": "oauth2" +} +---- + +== 退出登录 + +授权码模式登陆是在授权服务器上登录的，所以退出也要在授权服务器上退出。 + +携带回调地址进行退出，退出完成后跳转到回调地址： + +image::image/Logout.png[logout] + +退出以后自动跳转到回调地址（要加 `http` 或 `https`） + +== 获取公钥 + +通过访问 '/oauth/token_key' 获取 JWT 公钥 + +[source] +---- +curl --location --request GET 'http://127.0.0.1:8080/oauth/token_key' \ +--header 'Content-Type: application/x-www-form-urlencoded' \ +--header 'Authorization: Basic b2F1dGgyOm9hdXRoMg==' +---- + +获取后 + +[source] +---- +{ + "alg": "SHA256withRSA", + "value": "-----BEGIN PUBLIC KEY-----\n......\n-----END PUBLIC KEY-----" +} +---- + +== 核心配置 + +=== 授权服务器配置 + +[Oauth2AuthorizationServerConfig] +---- +@Override +public void configure(AuthorizationServerEndpointsConfigurer endpoints) { + endpoints.authenticationManager(authenticationManager) + // 自定义用户 + .userDetailsService(sysUserService) + // 内存存储 + .tokenStore(tokenStore) + // jwt 令牌转换 + .accessTokenConverter(jwtAccessTokenConverter); +} + +@Override +public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + // 从数据库读取我们自定义的客户端信息 + clients.withClientDetails(sysClientDetailsService); +} + +@Override +public void configure(AuthorizationServerSecurityConfigurer security) { + security + // 获取 token key 需要进行 basic 认证客户端信息 + .tokenKeyAccess("isAuthenticated()") + // 获取 token 信息同样需要 basic 认证客户端信息 + .checkTokenAccess("isAuthenticated()"); +} +---- + +=== 安全配置 + +[WebSecurityConfig] +---- +@Override +protected void configure(HttpSecurity http) throws Exception { + http + // 开启表单登录，授权码模式的时候进行登录 + .formLogin() + // 路径等 + .loginPage("/oauth/login") + .loginProcessingUrl("/authorization/form") + // 失败以后携带错误信息进行再次跳转登录页面 + .failureHandler(clientLoginFailureHandler) + .and() + // 退出登录相关 + .logout() + .logoutUrl("/oauth/logout") + .logoutSuccessHandler(clientLogoutSuccessHandler) + .and() + // 授权服务器安全配置 + .authorizeRequests() + .antMatchers("/oauth/**").permitAll() + .anyRequest() + .authenticated(); +} +---- + +== 参考 + +- https://echocow.cn/articles/2019/07/14/1563096109754.html[Spring Security Oauth2 从零到一完整实践（三）授权服务器 ] diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Code.png new file mode 100644 index 0000000000000000000000000000000000000000..f9de1c61140fa508fd5257bb4b0740ac945e7bcd GIT binary patch literal 29672 zcmeFZXIK+m+ct`NV*v#f0R;goRlo))T@ewHCWKz4_udJJiUoSp%)QC=t&?U@GZQb=l%BnxBu?rc=L~OGMQPku5y;kXdNxJ6D&L|OiWBC)E_-~ z%EZKM$Ha6X;pky-L^;J%fr;q?llp^u`hn?7V@E!5K)8RbsjTp^^64&EWs5zMeAar< zU$yDQ<5MCA-z~~)==#cKFTQ>;djHi|_2e0yQ=B;(r~b)Fkz8qu?p(G{Sh9C8-q{OW zUlRO$MdnsQS&+}~QCE)nU9amN5|#C}>?V!pBlIR6kgkU>ycIUd`NApoRJbzgz=dXM z51hRz(!F=d8r&8W(@o_b1$w11#r4QRp-S+To~G^5yX^Lq8m0&DFNgSdCCTN_^(1w% z{O)xLTA%G%x_F?2sV#=9B6NFwWJ1m#m)Q{F)|(0SpKOZw#m}{W#R~_#xx@@cS!O%A z?tJF_<+4nD5hRkt%ygl0t~-H{v40AaTJll|RiFwg%Xd8hFK|cq&7r@CnV8O9u48@1 zF8W5nkxmt$sSC3H&vE)a<_cL{b}}=IE&Iox2md{;{JNu12h;MK{FCcWNFU?fk2KF& zt4Xc;gt{nK+{X;hSpqs7O&Y77pa_hth?X`m4%|6E>oF!;8TI@)(q=m67yrK(y3zSL znOEf9u*lOtTs(a-_i;CN;^_bV) z3OTFBkG=a!S^AsTC;Eq%$TR!jd0s4>XM6ipgsU*znag;v5lTO1dy6IL+TZInosx7G zCL;JBRaI5pQ~s^@snG^o`ip;mdx6h;JJl0*w=TUW&ou76wKyl;V!#%R`|^%e^Iz6w*r8K5Vu_u`^Fs;Z zhNWi5YI_|w>y@%LBcXEP5hX^oKg|sq&5Vmoax47qP_K1mDWU70L@Xf8OMA+^{_HyR z&_n|pO;d_a@16yV$Lb2-f~6tC^0d?JS-B-DhKmgAx_%~#*dUyTs{|d=Pnjuww(k6R z6&bqi?Lt7hjaHjiyO;1mH*ah{{P($(N58(VC|^B@ODZxj#of%E;ZeS%VvIvV>$>Uw z5t7YIo1ZI5q=0b*pIpFe^HNWP{BsdR$%dS7jH+1&?oamm!bIkZxu3~i^A5jKNnwJr zpT-)58Wk&i8Z&Kd+T#!z5oEned(D8;k(F6c>E=AG40}FV-!j^X#rDuFjg;MI2|}9Q z32mxAlamLEjIv)K+^`aDM2$pY>y-wXAM5jyR+_1|qbf&TOMVw3rUdCuk}WdJt&ogA^7p;4g`ZNv85P+k z9Ijx{Hs8501s~6-xN7xdTQ)!4b>p{WnH%Az;wQ)jIp3{pg9G_lm_9tx*?O)k#b@5I z*vN@PP}A#PVfB-T$4=OKtW30(8IfmSdYC~RFRV??KdDxXAnKcZzoX}#ckGg_S z9d=pT=oPYkBwQDY^EO=_J7`)>VJB3FXK_jz{Bp*?oDeQ*;R+(3b|)F^#SCN8A^Pf# z=B||8`rE6!cY9_1m(K32tH4W~^z!i)b6unr5}`!D@F@o7m)0b`Co__%6y7Ml?G){H zw7B=()6bm#LXI6{a<`Sh0jS~iWBhBHS29R=I8TX2-N|Ks?Y@#0XbOaME z&_ZC}RZCKK(I!f;_mB(VVbGIv)tilNjL^k}e6vSIME-EsvIYi5&VOf2=zG=58R7R6 z8TT0ozanV$q#Tj3f+_P9+4dQ6Q3xR)UuK`^p<^B=UvruhOJp~7rx;ec&BZ`O#@nk3 z2f=pfUJk?Ttwo*SrKS2U58xj2(I?pKD|rx^TmIvratpHw#X8ydDFiqgFSk-}6UoAj zoQa1g;#%K!ZmrF@t$l67%)S$pcr~0N$SYG?t+Y3KevkwaG5czJjCW)FEHTU`fXZL* zf|UqaX`n6@SN5{J&Z!GnDNos>KDAQdME=MZfC=xBswaMtW6D)lCOjI~@>r{fKjwtB z(vbdS6MEoIyL)JgrB~1@13L3M*57I`%w@DDn)QPW^Y~@*+>gzLLDHg&tZDSLvCzoh z0J)%WiE`o%26aIua{k?TH@kjja!N z@fo-t#8AP>k+^Qtsxt4nE?jCjjbC87ac?(-zSb^KLKSZyRSjxYK28#?y(a{Y@T7EZBO5PVOjLRW=due)JDBOaz-GOgu+R2q!o6#HGe z_dCtQl|du>4|dBKXUOK86l&X2ihSXmf z#pgGqOKJW@MeUhGH2 z__rJr`p%HQgsXIjZ`d5zbN#(}E?LG>v2JrfV>CE8VDnEC(Ibhx;8S4NCJ?@3O=Ux2 z50CrA%jJZQ^i4^-P_6~M3C@j4DprH@M|knABsUOy>PE9^!CJi1u2sQgBL0NTs1>|{ zk_uIzyL9mx1(>7!%YS#LF{gNNZ9#v9tPoIs#LJuH1@h=K35nx}l^5;qws-_y4Z-)>96z#v6u zs2h*slP+IZbgM(SVDORLe9qn3ez?LJRcZOMOrNsMI_!H}c2NqEBuk7rd{ZWRL8hCcoEwT*7)Y z_^G7F`NGI4R1dF9@Jn1EvVT#^rP#j2q*H?3&GIDd$>*ERiV15*jiI%%{0exKKhe2Y ziCWLvW#9eDDM2yI(H!L`H>5-nkbMyR1MCT6ma+%Y()3zDshPBGhtKj(1cMHu;e@|y z;nU@v%&|Js*Enw6A|y3&>6Tofznf{fcVxrP&!XjEzSkwrOY%V*hxr50Nx~K_|<@Ka&Wi`C2JPv8hrennaAW=cEFr z%vwc`GGa3t+>szu?Y9#4lC#6IY5bhj&tU4Z+e~}-?6OaPOIxX$XO<~_Bw0KhH`&f# z8OQBkH4b$z-{@Vj0-Z#87?h5S5`a49YNU8~?QPFz`On14)R3vO9NKudL++K_7NHkQ zZ(xfIWpEWQ1$bT2a3kx0QLiXMJEqi}qkg&h2!EB5j2rUa%fmQJ)9R7S>yHG+YQO>^t8bZZ8WQB220&RZ0J64?K>OTiDB>e6U$MeF` zPRy*F-btm*tY?lNu2Odj=Ww%xP(CaY&4of$-~J?ISOz1U3{zvMf0VNM~#rKwVc^K8a&iw2Y& zT%{QOnI7x6GOn=X^)pf2#cvU#iD{=KrC65#(Bu&+syYFEw~4QEN`TTj9Vob0+N3|< z;{BVS6&Z-Tt>>sqOoq-*MVXDjI+OI*Mrt>Po5^2TbmQ5&JjRP7>(HmKKCbENk)xW) zoJuhB?rftpk9hg_+;yni7%MHAJ&00$%XPT*msn{{i!;OL5nUys-EFu6QDRDsVvU$N z=OYZshh;5%SI??b!K-oEUdz*qGx!2W8$zff z0TWOGf5NTQ%qcRvq`@-sHn}c+)k4IvAQ6QKqY*JTtLmF-_KbQ4ARZirN1JV z*e3t%`%y#PBK~?F4aZX@w1F6t(Alm8nctM#w2xQh5}*h6-}3HdkbG#*`9&T<>JGw9 z3^>c69t$5zDa>nH>%-TRRIC*iFBdHuK{{bA#aag)AXpy*X4t`jN5d8T%<^zHfpayQ z#&Uc0m4l2CDm$u+u{2r|l6bYXFzH@!4pQk#?y*LL_Wm@zu4Iu6?_BezJgq~8dZa;Z zMZYL3Y@wb|u|rw#4}VlnLQ=ZffJNXGv*EU3NpPSiOof&rxi=Okw_G!6SLx7=3_h_a z6jEO=D=*)h%}^&c5ey*;h2={V;f@DyGlr&!EDtzTlbXEEtBEgDNTZ0>9>?GU2S-wZ zbKQm2*bi{RJcrP$hPdB7X`oOQ8#6rS7M92A^g_>*r^nDT^0RWZPd2VAnTa7cT)b~b z)`b_Frd&&mmHu63mm(fuUCiAf*pT%tPEod4^?s5l#B8hB8UHvbPMf;1xWa$;3{zb%cFCm>UyXW*U_40M(Es}A-Ku0N&;-R zGJbh0L~Rm!bxu%@}HcC3DIubL`ga6$Ci%!yMQU~j1w#oVl~BF$s#mtDc#WQdMWoz zhafDgIGv|PNnzz!Lf!*6z181xEBNXSG^+u{4k9}m9R4o5*o6DZr|ZpRH%+{uw21gO z3^T0dZQFbVJwwU`=|{qJiyA84nD!PoL3&z$z;j(WVJB5S;?)kRIJ#=s?u5F{p-e!uAj*ZV_1vO1?D2%8J(-E>Ie>M?kiC#zna|} z?SkxmUt{m;kMC@oDVNeWXy1eN@1eX}4|87$f$I6aX-tll&Ni*@ku8E6c@~ua={f^> z9t?e^z#>8(CG*cTVX8VOqYOdP6XI6d61hE@>KPc9%4(r=`ADuF{=; zLt%9*>D%(Hzc2B;$fabmYSGrl3uDdAIq)iP4%~k8j{?*%b8)9Nz7B%#Jj2OWCi zYSK$LXz0vvcUqC{Exow&25?5E+6sU4=~2LHCj0rsr;Qdqi;Rir>N%Ea$Q$wC zaK%^Tq14>nwdVLbE6p=Z!RVrZB0@?=F|kBfl1#SNBj>Cb-kBoBcGmfc!xP=aq3#nne(TQDW2Har_?9*uUEpQAKQtCAWO|kgi%SHBLmY@uCc`8= zPXa8L%=}8QNH5S#-g8X%ss;+fI!^A|E#&7ihwm269HOUVUtFl-ix9PxL{G1u(aybp z-xC^L?$GNVLQXO?Z!0!zYqak+As~DVSIcjYKeG7{{{#9*uxR6;AtF_01=o2oAy&$L z^t*j`x>J!siT6BbU#UgIPf^3WYgy%0Y_8R@6ay=Qs4X{h<)TxW^PFfAO*^tgZKf}9 zGhOOl1|}D;TEKq&@2lP8Tv!xID~Q1b61X2st6dNa4ofi~=zPs4u%M-pd<`L8l6u7S z+zw!3(r#=NP0pH_!)t#=Y8!tRJxslF_qP1$k}Nhp*%81^kXmY8P`+NAmDwDjBB6SY zMe5Bc-v+_o(BC?85v%9s2M6FroS%HqpJxO;7YFCL=)3et%J-T0I%gb`gy-W*>JBzP z&cE|%EMx_WL28;BMxyqb!s=EU>8?{PsuEX1wx*&+6&0jimn4jTKHKG$xCnP)-jNBq<4av;%af} z5%ZAt!)*0pnllqsUf*)7qD0Q7->`XTH8F0J6jwAWG1wTkkeh-l=>O(AK3eN;=8W?k zBV%jbym50WcsY;w3i`ob-I-$j!jI;j&D+aJ)b7VF3BLn#4KJ5Z$hVsrl$ekwXKD$S z{-23{^i>u1I?8btVLAULN4u`1*zIk{y`}!5l(ZU`k-ltqdO^2x_Wj5bO@g#Ri8DgQ zrgrn=q)}DYdEN?vg8R^gfn4`J>Yv(x`kI7>&6c;NhVc9TB#m%4Mi+Baa3k$So?gCI zvp+LzoHSgQ0==`W67u`A!&pub-U5|DyTL9XJ?g&fRY{*#8A>n^Qb@i(^SIrxBC~pv z&E?qN`rhOCJ}WiYJj1p`>AMjtaAD z$d!?E8#xMJ7pu!{+EI_y`S45Ku4vh^tOA%`^FVHj`7}&oP=y-aP6`;A(UxC+QJ7f3 zqk9YEVT5iDvp@}n(bkU0k%we4D7Q3~dvGW3!fxr{Az{;M{}Mmc?DXUnE0s(>?}B{S zN2*jyQ)JCa5yMBy^-5(=2JO3xEfO=^zp2F{wYURfhlL* zZ?lK+az5Zm`k5Vb8-3;UffSY05sd>jkK;>r;kDlLFdSikJhW zNZ;R$?Ix<%y`Cd1SIvTqA5HRR%J>Lq)Vj}e`I;H_Z@DCn^IO2x8+^AACR|sZF@!gr zhf#j8E=MK0Q|IY4YPVUDMMEn253VbQTapX;uE#RGl`QRs-?S3YTj;M;L$!ah2pT;3 zm`mK?8tuN9&Kv&17k6^8rjKpnHqXa!$B%~G$&GHBPQuggWnM|bX4mtVibP9C7&upx zeYe{VlPXd{OB`wri^}XUw^Kz4V=p9)BUF3~z6@H1s6>Q?df1>h-apU+H&!{-H)2 zIWb=K9M3wXKUdJ1`t%!1i-EW)O3%4UTROHJEnX3qpshaoz`-~g&rvT&GZ!JImv6jh-aq|9QH+Sw-P<$%(=Uw2xFcLKNn#FKU0HGJDeq&pOm6QPT8!xMG)9O{S4ahL=|IzwGt%;;W^;L#&XQ5?`{(g}#c(j<22# zRuMbNGTQt|mrLame}kSW&e6&FX2EqWAx~-R zWzgML8X3sFrrjn*uj@5R`}YbyTZSn6u(gAR_*2UICo)bYv>b>olbogQl$hG#@4WY7 z;lB3%KMKbM!JNW>zr!?n`CrTk{#?~X;klWV4LE$YbZlg8QMVsKr1GQS1a)I0jB;(z{qGx6_og1-e$ z{a2NG9)HyC-zR2jQv08C|DShrD*Ina2RzstoxiFXxIpLw;s45AikJTPvP}QG2w+qE z|6vglZ&mK+f#=`v2CiD!v+r;HsBBkUg&pPO$rteZ=Y^uNcL{vNZv(qbI`H=NG@IBEl~Hz@=T*!C{%U;2XGKl|a=acxID zwY*?IPVOAfCC6Ls1_H%U`SHNhZ5Ud-@Kg8MzmaEr{@#A5eLcoV`|w3-?1%{ID}qdwU8*^VLU>({;QIx2tusvq zE;r!Z9>?cDI@s+39^e_mEKfTxzQ!G_S8sGR{A;f>b!AcU=ZDHY-SeogmXmo*->|3MQeb6on zjoZIXF@=L|pXEhCXbAt!6mPmfDky={{hd%GoI{q|%nxYdfKr z46^Uv4OuEzGaq>~OIaQx;<;bpD;=~2V?oZc{pa5{r4e5rR5=z#cLP*EFP#WS-we4E zl>y8H%oxo;=54&k{kkrl>jee%b`_n?&T9PtEj_KOs; zPf#FWErHW0E}x9=XUYdH;a%We`xc|;$M4hsnrF^QST=@I`c&8nhL+u4=%}YU^!coC z`+*MdC_8GoAQv%($~X;N0WJ11>lE_hFah{PfW8Re8@|~1*2{U;Gs0E@<3TBNzk>c~ z8DmRy?_o8|X;gSM?JVtSQHlb-|cNxa( zf>rD^sdD^WEL5O26UrceSf=J_rs0eoGUi0pqSyuO1)!VR;+Bo03ggj22L6zIZZpq& z?_8v05$u6864 zsvF_x-Pdob^;Ah)YXZ0z%o}b%@J*KSun;pv7Mn)#gaGq}Uj0}cpPXyomyppFydsF4 zEIZ()2xE{9s~Zuq;k!Z6bvOy~gx&h)Jd~qgTX6w9zSkT=fzZ~yvyi}dam&yilSGCCmDFO?ob91Wa|ptoY| z3IO$k2i~_gA@xRA$GEGO0sIyq`{OMD59v$54rZ%FHKDdI;3`-I>--x8S4SJ;0>h(z z?3!6E@gzBLN{`vpY%Pgu_L;N}-AW8BB#_3Pd-D?%)-6M-}0 z)L>?&rf-)ao7C6`w9ooEU8e*@_Y>252^bdyVsTs6w!wSu=W+mZ63d%ZX}8l$k}#%4 za5Gh15_O{)hL9;KtQjBIrSZTSO^Ns9J#tq@-ga%MBs;N~;*yNB>*6NGaP z?bF75FMILE#v%A{WV5IbScITIBKy6Iuddw}nDMs^kOJ1r2%zZn@jd2;1*}*!vkbQj z2)I@{^s-qPqQjtukU#x7PfGv+geJcCMjYsSWm7#m&<+U^EV+i6TDknNo@--cAbZVk zamXtvL0!amM6ppN=NE+ zN$W+G%oCZ|i%YPh{0cM$?z1u;#3c;hZ zG`nD^vTB2tT5Pb4aiFwgA5_`}V~BJf=Ao~)u2H7nO5#8?S+CUJ`e{&XWCxP4*2wxd zwfGoW!AM7?-J0)Vd(hnO&$nc*=XJZMs}C3Gwkpz>d;%KqhaHcz$g0r&VHN%ZInjlR zKaaqGL~q+wnEQiWX~$N~u+*Or*!o(tlfq2C zY+#AkIahA^P_NAD9@=OTWzrG#s=UXLMGwz6dv}kZY zhBST;;-iMY0%m(6H#(_4=283$ElpX@UK^y-ptSKL!|eOaA;gk^QJavVD48nnJ6yNy ze;suZ&t9DM=~a+%Jy%k9;E+3eohzswUJ6;y! z>|~`A=IF&i9;bsh5jSfX6haH-Gg$bah^ueZKHs!63m>rz+rAoT{Fq>5d3p#w(S$g- zT5NU>%Iokw?A%+FU+YU(z+tcCln8*R_!p>x9C{P9i-xFWm8fXypZ;6L)I#BR4aCwq zy@rw&3FZ{Ad#yn3sF(<&i{A+{dMaBCr7n*-v7kRv4#w7-m6vVwv*l`Q4#S39?&AW* zM2BN83>E0E)ac#r7sNb%mBX2~c#5c-HLW9*?s@pcCU#;X zZZ>F2SJgWy1^N}R&5r-wX6LzXpBmWcRpL%p)&O}g!&!CW1vBeXjF^N*$J9jBx15O7 z7j=P4qqVm*V-eZa@`S?iu_wYz!CLE~Eba-CW4aH^DxU|lTi;&6yRXu_MjKpk0R^MUK-m&%>D zNQwulv@gS`@)DmjzvxreH;?XzkRO8_WWL3xS?k?NrwR^$O74!{rMaxu(~2{Fde9B- zKo~xa4E<9fVqAL@N)-99%Sylcf8z*6UqScgJ^B1`$(xL;-&xntyfq=DP(?>zUq>-p z?pt?n*eE{o7ZA}zCUX8cxpD4RUX-~(wfk7j@@1z_46rswFoWC8#}GGL_bYpL6#wzM zVng`2HK@P&ypQkA11i_7Abkjw@>aoH39nD^UiJLGc6WfP0cyrs-v9v7mGe^NgDMnO zn;6X-sb2~~4sG55y=29KLo}hfjDtUPATWK+wOw}V?q|KcC&;$93EIU{&%V1@bG$7~ z)hC_5q+ZDGNu51N~6Ml$cy9aszA1;Gchq^j4=(H}BH+~2UCB~*I|)VoEpaJDSd!}mfu zL1p5+gYb<=X(^95v?9C2ehN#|(Vx`5z-wXhdrPcS_<%2Kx%Ra|bf(us8*We0zNK--!vNgnczNf+JWT{} zcpXj|qztGtG&NEr+`@Oa^I4-fJ1`)Rb!Qi|5e(5IM(M$eh0?*BAQN9c3<(KM$HhyCeF4eZwqW1%=jYDz>u&vIK&xB@A>JR4tVv4m6%r-26 z8s5;EY?$`E+-9$YUmRGTH8Xc2fjLaIGkI9n9QZubbe=>M3vZcK*s8zCYD4Q!(Sh{| zx4CfZGLYY~mf?dvz##r8G6FlO5%Iy|TSj+3VWz-r*%cfxFBh>z(<<528<7Q{jC@#+CNKuMiqCpV8kb zcuX$ccWI>aFngFh?&1zJE0^!oc)*1CaRYXt;YtU|kj29M6370p)+rwNDv@G{GDzsI zLj?hDEw7?6prDrd@jM$Hszij83RX@mT6Ki-|Q$&h83B48}q%rU`i zAmJ5>n<9Tfs+}ufIm6{29QTZBy>sRCEl5X)iln5R?`DtZv3PKXiR}!LJ|1q3N&`;+ zI#Tg5^yYa)2K)RChg`7JS0{3~9xl#Fd zy=gPyuADFb`h1daR*$kH?LdkyQo8V$Q%PD(p01dukWU z$AjkG2Nr5rA1+2{((2YzrIu&%l7gK-tFE0&>a zkqB4Z=#O_nlGZb(^?~JX1SD`Gr|=tELUaB8c)F*0z~ASqCk&E6U3fG|ng}Lp0uMnx z2^63IaI*Z_=B#kM(jo2o=^m? zDheP4jItD~^A;!xLfS~s4VZ%RTmlTbAjH~k$Ip4b#}RLp=%4d%=c{)3!{A$h=eC|B zDtZA}Y{$$pTZ!J=mAgnyxva((veveT`yS2VHd^Clja8tGd`ngcp)|QH^t_ViYT=YH z>)Xe;H6GX!0z%q##1pVWu7}^T+>!qeuX@1+Sd-)Bg7l+v%8HaD4thKcgz`))a4uJC2ocQFBhoCdL?JIzyII6W8;_qv?_fPY_4k1 z)Q-D1kh!SLNxNtoU{c&xC)<}u)oR9#q1&fvfp;FLb)5&0f0?k*)f&SoClsdKWc}`M zJ7W8$GeM|Ur3bK&3v3r58i(T9IF$gNA3I{(3mUC`a>t+Hm?q=l42Xr8t&8T+gOD46 zc&8I3y5A0$uB!_yCIkZ#Z7JQSry@bS)Gfu_-)ZFRgZO;d0N~O5yV3y>BJH=RPpERz zn|v86;4)Iym;uT$*5memH*M4&$BiO59zS$soDWl{Q*wwu_)qiXcDy33gCDwiDr6y- zyTp%}yzDPC=KC!q{SnHaH0{p4LaW{Won~g)c#K2QhiD|Ua%g>jNMHum3tSA{OKa^% z>J*!@XF>r9L@I(eRuq+@272TxOWej#QcJs#&OG|gLVi|@1bVe)!wsbV8}R{PBVls8 zq?WHw12E70L+;`<3T*6i-2g%)AfEJ1RR=F;6CcoDVDtc2GS)}|xW2ZFPA0kl+9Dtd zNtEV+J7%G`rsI(QBoiX8G71cAwUl^_<+~HdQrO-K+?Ym8&OAV&`>-D^4lSy}c4M=v zN)hkaE>e2hQOn=N!@I;A#uPag_gk@E%^6*0ThPUixu{oT{f$5&@HCD!g`?MI+Uu}c zloT;|eG8yUoj@b*OV38aVXqu|($D$J#i|pvRwTz=9sK)8)h~+!0Tf zO2bf9g0|=OjQ1NZ_c6T^?JUz4i_85Ma8|BsN0%m|U?Y+>UtaPS1stuTwNU}J79jeOHW`(RKH-74FVbi zUf}S0T3R6@0$m-f0L(rA)&<;P#*g?tVPoa&FI65BriTQAdyj<*H?%|I7gh2VPlhyZ zJ&PIhZ1r0{xpzb$bmVcOuoDT7C?C}JumyPBx7r0)kz^j?CKIy9puVh5yY2K*%E|lT z^f5ndhC~7AX9bB^IGR-x)QI&rM2{cu7MA_j zO0y`WUT?Q6`|3;65wh5*I;5M$Z}Xm!0Br^3^2Jn=MV6E8Rh$p#?abM+Ht`A=1?qk; zKZaH`av=l}Zu({fa?C&Ag}*ok-NM>|rOJ`=7;lNZ@j=k`@h0tEq#*NPc5imo^5!U~ zZ*)r?ug8)*s2-L1Sz#Di-#Zg=iZsUnb0WrVRJIr}X@tZ1S>q$-rO;i#bNe)KkY)R1 z4I)3$%oexz`$qo2$&1xHepquCz(hSJ@7}l6!1p+deLX3c7<^pJNW`K(aFnQsUkAK4 zf)HQ-#o%IA3rxZsg*V`{nV>ntOg3EQCrNQ-ni-g$emXp*{u#%jOqWM%_eXSZG}vD)S&5>xC^L-V=*Bui7%(RKSvm$QEMuFC`{@p6Fbenx)ATb@~Ts(U@qNcgIH zs|Wy4f;~9x1${vCz*h&#k}(pXpE5#s)?Nt%bSWZ=?j}^Cc`t- zdBOa|kh(NmWYI*Joa9o)M7ZU$Mat>F@g!lqo)E$YlQ&o~)V%UJ(PCwMPX^412B5P7 zr=y#R3k$I+OI!d~%1n;_&R zZp$Z#hp{}hT@p2u2W4=BVC&d`Sw@d9U)uG{L}6cOlP{@bQJn-2rQ0HjKj=UXM16Tc zy$IsKdE}Gt*-F?4Fcr}DW~LOlF^MVjx{valuWH`Uu@aVAD+b{~AiO!%YED165)`fY zAj|uw2!OWv!DOD&)WYz+1N#V+Su#rzYXAL$_;H?;|9SyLx%z(;l?$H#z3Vahbm_Z%l%+#<5ip==&rr)*@H6BihMbrn___kghiA&1!KBr zP~-onuNguRd9XCJFkL{M*R^~ISpjPxDe);qW+JrJy^f?Ki4Vj=tL6~e3n=$7)ISyz zm1bYy7K30HRG2n;OoUle1Mp7y1kfj~yr6?l|A?f(-Srbe z8SG@TZ9ZqlXf$2LmYepzZyrW1W9iMICdA2 z==2cx9gbad@6KEb-lf&t4uOOY@Drf4O(Yn672D$JxA_Cr;5YP? zB!KG0u|GvG_g(KmkyiFaYhehplpFqbvB~3MtL%80fMql4fniqLhBdR`1-s?4iAO`X z0G);Ew0AK?41nx;(*Lt)l0LaIj3H23p?)i`U8UC;@)+j%mg~}w%CJkixmX0&g4^G? z&Yv`TBoq=FM9n9sW-3c3uZ59^UBM{JjG5=MF~T_)5ThOo!M}{K4qwv)ERF;?RC5p0~Y-CXfz>wdR&84>W zu!7cI#0kY6&vdzEa{E*rLJ%f=aX5pAcwq@aCU6(FqUK!tb&! z@)k@`VLpAe%8boDAAapHc#GT@w}4#7afOwFhP6}bxx6B z3`3yZ8T449d4Y zarsnhRISeKWNgf`WbUMRvRgWyL9Bfvx_Lh<{=RNx?Z*x`9=FkP;zc~&_!`_Ca_a~0 zWcwvNeJYMGyza)IGJ2mM?2Co9jXX8&G{g~x*C#GkbV-zpLbQD0@qr@0jx!c?YlPLY zaB8mQr3qde9NZ>Ipf80VR&U_(8+brQp$8Tq<9VviL?ifTfOTHEnKCa^M{fyh?yW?| zAlctnthSU@4hhUIa2-DS)lX??q z0P}jtK2J<^f9p;tKxPXM{*=ox(C;?^0pJ^}7Zq8QKR(^2ba=&7;n*G(oigBu?*EPo zyVM^%`0D<+HQ{SxA?%+bh#1B1t6!xRr}7FW|~qYJIpYtvUhiWjNKK>EL(`%1QkRO@Q1FdyRQiz{q(hocr* zxPLi66YRcIa;*0DF|FW0fy9ZB6?5tcOh-@Z*~1tI#slw-ZiTTUVVWJ^E@;dcSSmwn z;)R~*KF?P9DD@$Y%?1*g&X$A?e8vaREMx4u%HqpHw{Lyg1obE!U6sKHoDk}sTwWQ5 zOhq?b5h$2SxV6?%12rOZoiZl15&TPO=730NeV<0|IN_B2aeJZ=^|(r?b6 z^L>L@)@Iy+MDvMa=!4l!i%P(YAcF_8B&YNNo%;QTkw-0Gi@R36{>-T8bzMY8i{VO; z(=YrH-x2?>==wjS+oIgh7S^h?wbG=;SL;LmfwPbGun2PgfCVf7AH$eWzt2;RGamKe zjb0KtKKRNk^(>e_RPu|@$FMAN^N1#6m!+`2UKca8f=gjFL#X#g7L`um|JYE#n%1~r zT}J&+D){F-zjK;-=xb+9mALN!O$Skd<@q6JYvIOg3*0mArz>*cU4f1S|CO+BX=k58 z@`HbEZ_L+OpciitAwC$Oa*?sa-z`|qLkeM%mrsi)QxE7$)zfBy9b`*i<#DWO_7WJM zAyQZwr3RNX9f?NtBnz2EPLifX9=4G(_^3*p%$z>XTfcW`;Mvkhd1>rRi+q%1Y(Foz zXU<=@q;lTikv4t>_X^Pbn>4@J9(!fBm@=fusx$D6ck9nD1m7}#x`Fla0pB=69Gsa3E9AA6_ zk={)HBla}sz1+1rlh?6Ygy$2S*?TFpE?H~X(1BG$ZN6>}b@Rm?VM)-L3?UBshBknDHnt$?Im&xbj zi)kV?(kGE|vXmP`wts4$Ch(c!STsXg-Apakfu-U{(`_ek*}$S{!C& z@0zJqf?VlMlaVy$H2=G0Kq|@Ll(dk)b7}~9JL<}`#T9LV)H?>;D#`xzF0fAKxt3oG zVC2~ZmpZqcuzoOAJ`EF4P_M3hfdmq+kLAc8auI_HUuomvD8 zgBQUv=|}dnAd>UVDN{l2p!f~5@ceL)#4K?kWw8zQ9UWF_Ht33*< zQM}0yi&-SN^PU{Zib1W3bO_v>HKr=UNkyHl`iRmP*Z%&Ki%vz({hNKWmbB9v>bP3?SW}K%RQyN(2u6rTnz!rkCH5*J6|1VMTfl-V3d*Y?uM^EHb!w zGh%R8|6Sb30cZEVYC!%od=R7}7N4F+@vT;&${8CwER9IGH$@sRw{sXz3To&*(j=OT z-&l%&gj#tr{N>G;HhrCEtnLQIPGFu@&YQBJT+eR(m{IG{ugsQ(bR&g8Xm82#V9=_4 zFfzAcRY=p>P2S+nOwD`qd4EHH+e~IE0Gp?ZQE0r^U<^?S;ORNYu0urjNQMR zPhG9LhKicJD&yNS+m+%9{6VcPv2xFG51>P}=u0PxJKOUFt|}VD`(N7yz}_NI-gSNI zB;6rIKpq6$d^{`LyBSNjC&BPVI&8fke5u&J^&$}vouZUB7XZ)|BdO#e0F+#lUv?yg zPzO!@#{AvU+6e}JYfT(gaGsS9{+7)FRwv)>AMw(>%An}Ixcy<<-Gt+N!ac|6l#pQA zB=Ln#U(sohDpOkS-i_f2-u|1^-or5qqGb5t2?80wfi{m9N$F2s0ez{(DY7Bdbd`h^ z6{0C?kAJhKSoHX_TY&(f&3^mWQ^c1-A=x32jux~t6aV;xK8|d)p9w&QPF-1aUeIcT zW%W`yQP^{A8W4o`+=R7Mj$`&A&4=$ovI3~656onkFLpSy&c=ANrz9_%RN8&ekMTfT;|f3(%CZU8 zzl~7G^!B~I^=|j=RSVJ~GDXmHo*#|<#|$<=!To9*D=#-0E) z$6=hFMpM>J3RP`u1R%AqRzgZZ?pQ_l!hPwLnsN~95&~DWgS1E5)0KL_LsWz;{MvU+ z^_SWH^rF2tlgF3#7_8QpW|Ja@%iW0v4;0Y;8B3W{OQLy~mhORr6VD327`zurR+>u& zmOvZV`Xte$aGmFHyE>qAWD73uKN%i!nkNP`?iBKv6t3yY^9c3ey?s`f(n94tXh0E4 zBCn1G941eF>N_VVQ%E)&sM3W6ffAc9?h!4fEq&jj&u}XhxT<)O%FneF9<%m9;ODsQ zZO<8Y=B#(V`b_zi$ z8$^Q1Y(NBb1DjI#;2x`AP|1K~sFrZWH@f#1+oky^4D9W%g!rsn03ft4>B%CgTB@>U zby^1PP6Z>+>2YODw1r2N^tQ6qynpYdZs}{8D|QSYegi^JlVsp|S3b=wmbwnj_nxx= zu(A8EpA`lj>tN8tiiU##z>3G2YQ)Qq$qO$|vYeS6F0!rN-|60}eC|EpV;d?Op-hS& zcNy$D6WGh`8gD%&w7MM>Dmr6bsZU_`U>DhI$ur7*@;zeQwqgvK6kusRRV$jt1ZS&X z9;+pi2-b{Z;ACh_FeCL$Q>{bx2N}=oUTOXDR)Lr-9r9;icFCAe_n9qz|CV=GPEhLP zRyiFZ0PUPAsOW*k37LwlW^W(g!a>N?g?<7(bZc4Yr2c)7!WdB>PsW*p%N-50Mv*&f zR^4EHUD&-b;3{{xw^_g#_kxL$A?&oZBcHmw4G?(!(whKazLJ_lb*{x)no;Nid{Tj8 zG+1E8X5=$f8AZ5UAlDw;wM+Hg|I6hvB&Q9Er!ZNtes-!J_35rH*kiJ1t^0z>_u_QYP;>(V!cxO&9&h+3 zaO}1|Mc-YzhwV7rr9_;JZclOpa`E!%^P-lKj;T(xuNAnCL~1G^FYX}vy_Lc;SEo&l zIKoar-GRXE4Ldtt4k?W8OqCNw#JDE?$sLH^pHnEzsTvR5o;+@fc(cgo94la{M!r1? z9J3R|6-z`7)E~yf5tvuQ&4^&~D6HG%L>%bHp9BJ?cca)sGn$ckme?sZ{$Ux*fj+FG zEo11KzD$2`o{jljme@ZH8}qti8NO^)?v{&jMOaPT&yRKC62vL_ zhvS-~s{`EI<2pqi4i;ZuORo0)^V}850mjc@tIsA!STN>{dwoAIyO8zqIE?%9P&o(V z=1lr>Ed?YRu++qp>J( z)%U$ycNtpMx9FW6uZdiUKP#%2v9hb#J5~rBXtrNwUIw_@i}k(nL(&sIwb4u4O32&K z$)i=JG_l+`W$Xh$wAw8l*Hzf}4LI0YYnWSz%B~yLOAw={v`v3m_yEBa4LJ2XCO=i1 z(4wuf&N%mGz*gH=fo9Hz85OPFhy?IJ@4hvNHmFBqgFsq>Un_rnBNc0m|KrjD2mmoL zQGR8)BGP2+m3SuH0rWVeyAFTVmn_pW$9(3JAS-V1Tgv#(+W`HzgAxDz73pg7%CKWI zU2}P{C5oNDhFJFn`AYh;{gw=VOPDYa5Lq9TYx*_gj)2?%k0a2-!nOt>+QPKiP752b zPDS)bvI{$yTFdpQMQdN~a3LXunO3Xelvz+gNlFwckQTn3XS@ZBi>Ljp&p^M7?BFh2 zJ{Vla89U!weFp~0loI#CP_dnjLgFGmr$`x%9u)NHO7_Rs`1?qK0rmMWfasJ;jqiC{ z!ry7g<=qaU5ywe~GN+6XE(u?zuWj@#ts+@+K7R#1e!-z(%(t5uv6}r&Sf2mN zyLYESbeIs>T1viP+j3@HbVYR7ck@|zueLg zw%pG8IhsN4h*fi`l-Y$53=1|Qmwc-HQ0aAzP1F=l#lRCSb3t$?$f-h(y!#$Qb%CR*{q zi(>*SxWiDJ^H;QL=3d*^#T?T(dxQZss-h2k|L~gYiqHOJ1v;iC4zbrw= z#%Q$Lhc3zjW#fhTLUs@ANuzitq+&Kf=8>=}TU#WzX%r5y2gBfWkCp*cs_{>lva>v+ zDQ>SsqF{&5c`y&dEVY6BNQIdcDq8K*SsY>U;}!gSc{ zzh>v&TrjX_%*FbSX2una=z*#}RdDe!L;4+!$?)78tLq#Sa?%T^DmY**Nn zbF)X^W(9Kx3<(L$O11UPNjSuc5D8Y7&_J_o$ULu!z61{xcg1(;L>U!M4j@e%kT)4u zU3PL!YOE$c;7eF*=<~D4c9aU52hbo%8R719(AX?%UvSL-0f6X0?r1)^k{ceH`~qm# zljY1%YO<#44icpLIADsP7bTQ!hhJnLliE8e#s{u*Feuw*f zP$A8fFgOliinme=@kuK<1=&@k0(?e8W!rV|Aj=2C(SlSOzclq;gVY?5dQR@3EG;*@ zfPfVr^D!OF%gJG~=j#oK57uW&`%*8HXhzgr5#6Xd#$DNeS`g={q?-D z=V+ZaH3ePf;g$^ViyzTgf2OECpWQZD!(LYWW#QsDaEL~52NDh87j~bdaKFdT%&qgS zsr8#s_!+y$bpEbHw0eqTlQEzVO7ck~RAkZUOuB`Gf&ZYXgOfR1&nRNNqY*| z#j$K+?>9}f0AhK7a?5HjhT3>fPh2LXQ3i4SnlF+3!JR6AlFuCEiVPm=&7OJF)*^qA z68P@D40BF!1=~O_V@)(}b$YSkv^r3Jw9tV&Ov`y;g2sZ`^QFcE=zo-q;fx=-(+lCC z8S!a&ob%fB_Md2!N;lN`&0MXJWxjhhdy|Vf+N6M-rwE09i#i7vp!h-dl69%YG_WoutYbQdbyGd*rB^6sCI#SO7Yf|_I!jtZdY-jUSHaH zp2J};4pJ$xv@35JVvLG)*$y@bHqu1U zU^8I2`z);5Oy@b_z_Vil)gmhzuV>lt;=2gx9#}W4pt3Q59N-JB4=1L{-;L1o60e^CS{cAO z_=RBiynC2CgU>B{$1Y7lbxSDnd)tOVgn}S9oZiN0toajnp<0fw)jTBM-~z*(IEsLD zjcWdN%GG1_A$#ILmVRCdil&DWoag`mcNC~5ieL!Ob-2T?DZd(>IOX13ubZfzIfxR4 zP_q+yhwr|HVq9R6y*0|WCfHdtGT&)RVKR*VLe)7)FvN)n z4Q3x;7cF9%GmyR6L?#K=gPQd&*#guXeE`1u!E@?ZYa0T6%~3C|h07sRkF!(vFQ20> zeHC-{y5)ItB`tWjb?H*?O|NGZ^dYt=8zh8#Bx1kn-^q}V=x53`^5ooh1f4s#PF>fG z+Qk`7pe~FXtLG6OeY{Z>`a%4Bd=7{qEePZs()v4fm+LIgF?jYwmxo8UoLQnlaHsP7{h%Pe)AbRj zVCw#jv7qaZFXxu(TTSc%qoEQuzXMbu?@0d}dZ~-pr#)55g@&e=<}Yq~xm?H#Qbb2l zA^lo3YYuT9QrD5@Yj8~Jod(!Z!;Z|* zJn{Nyh=NNhXc;+K=XTC3{)xlDr@MO9@|;4(c{X(URWXV{aP!L`%-)AEUs*sXqosjGY5`UABRsb$iUWS4k`2W6TLn?6FXOY>{mGY%XxW>>?w?$+1d6M6Nj<7 z42N^|CeV`-#UEW(X(}CWtd6-Z2qrVlpr@2Q6py>FN00mrCV2BJyvEdT3E{#e<1xDZ zx;(O>A)YF)fUTs6tD_e@xxi6mA_56UKiwbCJs_62iA^yeIeeqfGS( zj`KiV8G%cVzDC3VRHaG_nYjT5$u81V0QFQH(6yxECy3DX+Djb|`#|188luVd=RHNcl7OU@`4ttp%Ij&l0X zbNj#lSBL5FdVoh^ln7fOh`pJ`b2J#uv)r-!SO^oF!`$-z=1#oAjlG%`{QeW=mB8;Z zo4YytgnKUrP*qAz0zMftQ9%j3(lr~u5Lip%#Ufy)ocV57eZLrRiXQtel2{AyE-?pS;6vY2AZYiVa4Y+LD@Eqb)s z*HsiJ3adAV^Zmz%!k1jKp1F07pf}fYDEUfNQ|3l8^sQtbb-A&TEEf<1$LMG2A9UO_ z@aB?`^;-4HYlXWSx4ig9-$=QmsF`=~fKqRUOVx4vCKQF>HeGF-qS(qrP4?Wnwaq4GgC^Dz;uOFGBgSXlD9;Xx>vw9a#w&@l z!qtmqg4u2l3myD^IA_10(AK|u5V+>6pjeA z8urpL66f$jPFy*MmGu;)X0|=4S!7wiUk0i#TUj%_ZaR|8h;sj~M?^mi4J?q~wH_N_ zVsCLp)sddq{pd!llO$XqpO<}xxxUL(nlu#Z9dv9i$vT}VaN@MY6Ht;>%UA2hi#pMV zef7wZvip47+suVQZfruV=l=DK3c~K4mPKxS#kfE2L?RCDs_Exp$J<1mULCivW34O+ zn@bAz_r|O*ByV<-J3XGGg|L#^61d~T2U2xzxFuoiht{WbWqmKu zbPR<|vjfYnGFOiTr||+3r)3=;zW(}A`4g&|t65lvnYf{}Az9aHOEEmLmOh(%AiMiKXr%)z%}Qp01DDWoxpR zd|`+kdOjqX4 z;jf==?MVVL%t>q|dY>v=Zsn>(vHC0PH zrtFZFg17k^lgD#sO;IDIT{rEvSa3J*>rBqLZ|RiR$z8F)^tYePQJ|TL%2uhQE2PRk zEtc@`%7ZEtWmk`91+x*cOHxVV`#!FgIB&}tv{^yr+wFeF1{!UXt3*8wIlj3lJpoA& z^bOh^=P^%WcZ4L2(=v>~qdBg$FD~FV%48(ks-4||k3;bcApOv@v_JQDp4D;Bn!D9p}h0rMe z2gGFz4{>metftRZ+hEPV8$xS^9sH^x zu|h44LPHerMM=&RD4K62o(N>?BJ z^hmv@E3^dp=Zk5<{ar0mZ9vH9j$GoMt3vDVebG{gf&mJPXuIJw$54PzU9rhrvPW!N z{Oe&($wX*qNi{WG*a8-B2Itlz(eH1&-{Y(YM~Zd771Ayj4aIdH$dqUe?C7G6`dF@K z*Ez`%K_toBBtPtPiMYI+I5All5r)l=5M16roYyI3ZTw;VIIF7Gu6)RiANTrKBGUYZ zP>1`CR{rH7UMb`&e!pbf4Lh$0nF%8_?-ImJPsC*3rm1oKGP!B`U?-g3sXO}Hs#}N? zK!^mm*>hZ3_c|wJ#=E<+FDEltagIH|L@FnE`P3Q1w4%(zgH(xpi(wZNQ4Sw2m(Xgb z;VloFBIStaq2A2d7k$FGy|~5rk4hSI7u%*yu2Q1Z@Rc;_M60FKimC;M8^#HxFp7ti8JO#Y!q!LSkcn?EODRkeKq`Y*M#fQAj#!pK z_(kWgOszG~>a_<~Xy4Q~V~Tx*^-@PY^wC6*`=Xt5l3xv5)nY0KQjx)RZ__G=!f{M& zo;)LCU9M2!%c6f@ql$lSsNp_nzD<$+sVarm&b{WhvKnntXcDe%o&zaz=|TT-DSl|% zl-)f2<1dRXElT#h!Dq|i49Ut6<^YFp#}U;uJr1)7$w5P5t@WElwRQtWvcB_0u74A& zE%+!&6AV`1cJkfd%@ZA+0#6Go=L#6Lu>o_@6dqNC+%Z*vAvMl|9eU6zF*6NSkNPPk zWZ9z))n*g%8W6YfICx+V6$iD&rHE4 zx69UIdxOn48_;4&|oNRpyj32_E3mV(0Z)yPHoZ)rvcT_rVH9AV{bLG z)mbp~(qdeGz8))QCqvh;xOD3kEi z)cypDon?cb2Kao#z`BHvt`L0waQ%1`M#vknvs6J^IN$|s%Fi#wLt2(cFzx#*jQJ3zK+_q~69<&qC-xpk1`3*p6BdP zOJv`jOn6Sehtj9qFKh8qc#aN_+cksLM10`b>A9Y{HCy`k^}Y--`Dd$?FYWHfD0=P$ zZ^Uc1A8JgFU}j^`gV^3qNBt)*@_iYk{gnduf;@QPyjDi&ZSaXBBbqnj4PFzk>`JdM zUq-U$T`YIt`u$}$-q*qS`xtD%3lGKL1X}$ph0Xp>cbrsGxY@5s-@Nzd3mim$@0orL z8pbC_r(QHp$y+$2j+#Tk{~1(%MA(3T?Ahd_97G^=`qkd9clRyby%RfOo3C(m_PiOs z(ZApR#y7LyX_h~EUzUPDXx#WVlz$Yc`0hm0?y9y8{nY87EF3=4uwY|{WQeP&3#{Sp1-rm8 z2D^CYFB0$*X$kBn80;QQ;qfE1d+O>WytdfnRN|~%G{NItM;xw0`+kg4k`(=QbEyxe z9f|KdHm?SE#P!_Abg906_t*V9L8i(F=As|Y&wUI>DoR~`=y(Yej5C}(8%wMWy*8>w zJbzTASLwSn_v3ePOjLYU-&3xGKMFH38;lme0KV{tC%wD`UNZy#^YWh|_|Gc%&qnx9 zE%;A4{GWG(*7*lMM6he?3kimH>3(O2i&Y~A)>H0t;nCuEVTr$$gqL!9=VMi-lq61f zd%vrzhz;glR5A);gU#WH+4{u@`n*F*yqNO}fl<@g@LiS*EsybgBZi#kDaSp${c+Qm zkS#C&(t>?;!fGdZEGDH`=B2sjs9b_E>K?X-E`3NTNivO5=#sGdOUr+T%juGlC}Fv< zlpkEOS3ZLTcA_GmA9KETiSowGl@|B)UV&-k`8yI=!ybvb#1bZ46(3w4n} z=O=iH-onx*;l2pBonC>25n`BqUZ>mM#5B#3*u%Hf(pX^@5Eu-XpTnpn*@prL&t)TFy&=GjO!7?r}ol%t#beJ*`ILgU#uRtv*u{r9W+n(SfrZU zfGcR~TIQNBCRy0o)y}*&-|h_A_iHA7=L2rXMpMtWYVoqf!KX|@|MC9j=bHjIMK>jP z2+ik>4f_I9?%6^+J-nB_Cp_?JBl=Fge7&rNMT0$DpRY*^*UZREI{!2d;iI;1aDev; ziyi!W)oUSfJZipx(Xwkg?6udF7>QL8A6*4Ev@o_%AxM~T(xM}Sy_Tvaf{{hZ(R$<@ zfk+QWGJv?<2m zS4r*k9oooykrh2Wzf86p4wIb+v&h?g7uXD00=`JLhXxU^6jdlg#UtDyqoEHiswB4e z9r0!<{@#PDt1`ErRc37QO;a}DM_lCMNvc$U(um7zn=s{kW)l2M-!94Dd@@JmI|Hp$LFWb=K^D8)jywy zs@)%Czq*_qDPHH@|DK>|c%-IdgC~4)=J<9wM)Dpx#qnCrbkzE^BE<+?;7FvD|MB5g zq~FACw6m^FSsSXYH_~@EJ3UgRezH-QWmMr5pm8*6S$(Nt6w;$*cWr9t4jQB0M|I;Mpa51G+2dt6HV&?OnOgV}zLz?;X&7ryR zx&_`%q*8k^t~Doau?6>Flv<#La9uduPH5I|q7OYH*VN8JzVzF#$k=N*cWXYLBo)tD zqpx764_!xoBSY?9(W1XPQtGp2o$L8vjZr6T-)&l1XX1uTAInS!*zyuN$C2S@tq~4O ztyejb{T03Z1_Sta(uvikaz10+<=2Di)=1N!nazH^w!+(!{25?}txle`O@YEp4B@;S^~8F49U2U&+hx^|WMJ z*1&yZsSu;b{3Si0X)^E7C>4Y(P&ZcP<((_m6`gkMX72@C!f?@ZUQFA4Cb)Yw%3G#D zHvXCG=(bZ}!1U?5+k$@er0aNkyP|wdS9liclG;>40|Cy!b09!Y(|*@YKdF?=GP2WY zqhY5nTWo)|qMsu`r^HWhYe@44jZ+UdVpsm^ka>#j4*_eYVYbN`)Kmts^C8W31`X*l zu;eitV5lv34(1{WUgzsc$YKqxXI1#s#4JseOBe3uz6Xi_3~33hg_w1iRp%bTszyGz z<I<5%jzHy+tsL`F{+FeXyHW{3@0qIz!H)i<`idXA z*5Ui9N#`+>&W^U@_YkFs_1d|JCIU~E!dL+P4626M5bnkk`#}Qhj!KN3%W-5?<-fOuirE`ibo4&B;vbqB%yO66+@|974>3enI{L%cF>0hf*t08^8K+v&BtJ2RP zQx?oZC(Pej*ud&5$P7LlQc^F7BaO-_E);1IoPF~^_E_w~WJ&$Hu5Vw7Qj*~yONIAX zSG=-^;rrrmONjeuacbOIaX@QgS#-a0ftA|dyy)A8-VX32n34XUCBdx6#zgabm^5zx zZ4d6vHAdTUjq-0#-b7o)?N^_K`mvIcmP`ORY9^~lv2R;16Bw}msCJT6>T&(&e$~qM zev|e3jVAL9pM4gQhD!2#DfUes@Ed9Y18n*VdP=UxOR4<>#n&meJ-sx<=QmD!x8IDV znewbK*y>;zmu_et4UPK7R;SCi#Bwn?HadE->ZlFJ-hH?2#j3rHK}Dk9&I{sHyu!{{ zB}zcgztGR5!Gv{QivN)xBpQk=m+x;kTlt*)SQs0GZD0szdBLbPH<8Qn=J(S-eHi6t+!5fh&$YeYSrlGa zQdiJJIQX6?u3^`0CuTb?SD$Dr9V~IS73oufCW)blmQU&K=4=+t$*Q&;SB%JTIvt-r z(;VX)+>cqtTw@VC+5Fr+d!G5~#+|jq(cHzGeh1Pz=$mGm3a@j`>!@dIa%Ok&^r{%9JT3pny)+N+3}`BsV^`Dd zA{ye*u3%QyldTU$k&IXGsOVyk1h+dLbocALk#!C3L`J=+u_%dtm#E2#dQDnVnI*6H z=p!h=n3tfG%%JA?81y@BV)^wIFiI3hqgfWOuJcoF3dyqSD~v0&z9WF$YF58;&E*MK z^e<)%^79^E;vBcS8t1`=MWeXBiBacDBz+pp05!iEeaj4H@A@#=ZOWsYe-gKtgeS$Z zJDI9A4!&kfFz~db`YUC#@K}_02!T&X;-XTTP%JPwJM8znfn{gT7zO%b-t%iwwREkmaXL?!$9-fKGW9qbhz|#s9;r58Vb6pgRQaF0^in^s9x7kICf)Llh;+59?AEy zX(-!vqjf#h!egA2*mOjg%(KJ!S?@oaN93qSEEjr>Y##|}wq^vhV#)@5&p@U68(O;zxZ;uj^e;NGFjvIW1hPd{cS274QIcqFl3h zoewk;pVR_heKIwsJ$;sk{HXpY+8^8Oq|~j(ne-^eX$6thp6<0iO7PMR9IT6Z7q$08 z&%W|Uq4KD>$c(J6onu(FE|Z3^?TS`lA-dGmYwcQP?{pnoFsbr_He80ZWWG>uoHfq4 zK0)76;ZSHs-h6BR4&EvL?i+gY$8aZ}&xrfl;&S8m%|87jQL2_)mucON4)5G1En%Qh zDjZZrWYUbQlE980=wI-MKh}L-eoI;Ak?wu4lubX#QWsPP$V!FmSI?|&#-`b;;i7Kk z4p%ee$}nL5Iuw(38n2Eyn?EGGH_u&+7Rga#V5hd^w7mE_h|OcY=daH9f*49^%R>)9 zsZf%!!EU7#am1J4?4*plJl`b8^+T?5)Eb42@7$?Fw4nIp14DzZz%SOheS3?;r`OxW zHhv*hj2lUWA&b=-BNCpaIc5;Eq>YQ_u_NnAauL|;-|BL0Sw1PX7N9Rz&7e$cKCDW9 z7g9mslU126D2_F4-|@P{Z(oCcavcqi>qq%jXjr)g68YOf3tloumwt^B%SBl&JIH&W<;xi*Sp{W?K3DrX8^HN?u!lYQ^Ycxz@f(-(;7l z;YACZjV}X;XBIZDp5%P8)t=zAyhoUke;Kb?oYhex1rPM>teSEjdeVJs0Ybu+HxY?l zc+n9CJr9eiULy@OjEmz>E!)bv>67n$U8cUHe{-zb2f-_~?bI6ISDYxqcKax{-PCvz z_d-SF3B`)#-<>-PY<~R|U$Ej-%*3513Fs%zikFmHF+J1@wJ|1)L7n@9(XJ_3=;9n< zrvB*VxGkCEJ0v`*&ukV`o%%>Wn$n^c8yMVCE6Toh7R$~eb78z)4H%oUhNI=en}@jV z^lA-dEJFbVG!zQ*k5Yn%x=N%^uebFoD_PoydadK~QVpfDgV^9rjwPVrS&SC5U=*ZB zX=z|UK!O?3$KjX;Mq7ESd0HMC>RhXlRvJ2s&B{q44B(3Gq*Bm^G%nwt=KADRtmR=S zGAb`2uKkX0H|GWG9>p zXRC(YK}EBypO}Hx)=K!)!A4N4I%W+n7>M zf(}?bk^b$$j$s|*je?7`d8sLd;$nWK8h4cKTV5N!3*Ulo8wmc2ZvcQ}y36jdN7{&i zm+j$l+(`1Rd-qY*WybEl)}?A4@6)4F(hV8>>b%iNh$jecm{BX|Sh3uH!fKlCz1^vH zX~*^Yo8FJ}BI~u;m0`J6EMxad>UEhi3U~TMN_+H|PV@>49GecoQ*7zS^0!>{FGE1J z5q-8NUjHSBkAW1;a7&&~;dSq#;kwA}#x?)%eUGp@nFK=VzD|xsfahvid;Gg#WI@GW zPc}aST`BI}TLZ@iWJ5*v0FZ^A_OXpK$p!iYCOvKTDCHZ&4v*t%00o|{r1tsYly&_i zSo5BwG?hGDeEkkU&)Kt4v_ix!O~eRDFvZD>43MdaK9x#dof={%D2Dc`DY6f5l!eS< z^U_(TkF6)I^yE-D2Y+g^PSKAWpQbL?Wti?dF(&e*)qu16Ip3gn|b zFWNQy{SE7>Sag2QC1fe@#ju@pw{^R?`xWp~aRRO%^KAj}VzvsOx{PcwJBv`QN3cU<8uLAO15rqivv0^2_&Rj*c@UQa`UDel<02rWVFk4Ke?KF8VsB zk<2u=DO^ux$G5?24|}=#mDk?$&paA)DNjKa$Q`99I_?h03EUJvFdAiH4&4o+#=_)b z+}a}Yi&%z<&X2>Xauh4r_X^`(-aEZoO?hMV_j_xdw>y~CgoOc$bB$usGEJchrE8|P7Y8!| zK<@WpVvsUbQ0gWUpX8q_qHkGhODK_Bt5Q+r`KBy>=tYFlBv}#%U@><)=lTkLDQ7vm z3u~?;`&dB^v50N3YExbtOMgaMFpmWDhOz7S0^5v>Fi1Yith0zOYTO?)n@MMVb&Yz> zF1ABTJaiE`QE^KdBc*FuUb~t*nZ_)wN>*h0ZFMGuZfeArHxd0k$95iQ>Kvi7LBv?D zr6L}x5uo+eZwr%Mx%N=*!PPUH&v(WA5Yf<&MumYt-pWL$|3dI8qVlhOO2+J9=sqL&c(bgS&jm7H+4 z3$lKnP?g4VttFKM0G_A-W%bn!={{?PU(r$dT7m)ul1$RX=c{2)QE{+Amt&s9u z2e0YM6b2+!{$QqrPQ%Ub={wDgYaDQnqk2YAqkYOZ?eVD%n87p5GY<;g7g-KR;<==Z z7Yqu#k5ZoTa+s;wwl;h+A7x;mVYUhE__!Gms0QHy|1F5BPZ_k58`Vyw53B>90Y=6G z<^cwiy!5~NlB8(-e`f*y*FW|D`Oe^fN!D+t0SBDW2U<}tkOHSBd*s~UIaYIW;_n4b}0~-z%3UP zcC~r|Ez0@_P*j>^JScuEB^m%li8N|q1*q+I5DSLLw&jm!ZjFSr-3v!)&peX2R?VWkXU7*#Y7WSTi2A=hHciV1Vg}BSv##>U_}r+ zq}Ix3kX{>y6viGg!UXt03-RMxBCd3@60R&Epb;lS*k#nJus9j?W7`~+kiQ)#T}JpM zjs_x=H8gc{M?F`H<&K<*6CiPi>QNB1(ixT>;!<3XjeQeSG zGbzB>77W4;Km} z_ePq}s&FeM^+!#NY0iU-K+b;w$oh1ct5=h3_#M9ATOZOrmlqS7Pt2TvTXDm^If!$m zwAptD{3LgydM-kw1h-Z_-qr8n1LXMTu703Y8&3C2Z+)eTK21mJBh?qs_=1*q@ULR(+Ry8Dy5 z9e^elH$GMh7JiclXc3piAe1}ey`neGT0eO0pRd5FVCWTIDH@^yoYki$S8V~n3T6ov z?zVp*FVn!c>HO?CyUtT*skSyq+==J2x-Z z51Vti-`<7)3&uzi8@USy6(k){u0|dE#=WnjTaY5Vcz45H4$GipU0jt63?;A1W=>Fb z5k^ZY1-fd_21l>NZJL6f!dz2j2%J-0UI?)LHy?u!xLKZ9bmuxB)?Hy(sX*DlV*%rM zPRx2JRD*ZFs1P~;`qtzG=y<(&(7DY6E>XPjJ=@7hxa+9aR(`x*AGwv-4CbVly=Fqq zw+X<_6tJsZ!b}(?J%G(4S1*Q<#x?phb|Wj43_~?b+RPH3{Q!;zBjTU83-Nj-8)fjw z?c_QzQi>+%JnyYgL*&TfuU9wi%+p+cEK*M&$ihFDG@l(oqB!1v#DvSEbVmr)atTHz z4C)S-&1fJ_1V*K&Q^ce#wApe|@eTJvoO-+mlf$P=x8r{O0(w2mg&tra4en6FuYE`| zPhKpl=v%(}sID3BJ+3+fIvj@{5#FAy=%W-iGZDDUiVI&|MxJRkk_hCXFTn&cfutMh^N z>5f%XNaWUjGo&aL$1kt&F{bp|owF}Y;@qnyRf8mZ?Gk5Y#4_-3`hf3QA+)+g3FKP( z4n>i7aZ~U>n9=ilf0lA5Q-%$Y&8xvu4!W6Cwhd4|A8@2Bc&EL0FccVI6V{_+Ay%^B z3+Ew;F=AwYbh>nnokGVndJ#AoHaCRkqXv&+`BMO5EJ||tO4WVntf)8$ApR8L7=Wiy z8o!gRg)(>ueSnfp)8V2I0kWKu!v&^lg@AmM0!jb9;7+%inh`~iN2D(mRoSr$B-36< z_$J*CySbQbT~eOi4^=ofy;e-eG1@vpXpuSN0W6UckSc%UZh9~MU^eU(h2SpWFlx0% z2azXn$2_X}Q-Q&(Sjx966sizxVwBU^Ik6N9Kcm-j$mmVo?Fvw8E-^Z6aPh&Ta?n}g z{TWDiz4rxY)xA}PAaX{uahRZyh?*}vc6QB~wC1;$jT9`F;N|FoCNd@Ng z2_d61vzylnD;izK$_H67wj~$*2S6Y4H&z@*6>wNd`xBF5e|OkK8lKGFMksYQ#DMKq zj#l#qioIn7P|z1Y)1AE>U4WcmmMqCqeD5@*J@{r69@|^CkNTaTcK5RtSE?QQ4k|EV zbRHyCYzN%*&b*fOginrS-29uJg`P?c`uV&IL);S0{+MPF1A~dR^_Od zE>NM*Lo8tXbU?G$IfT|WDpvA^jpO06!s9O47*XW zypgqwotYDme`VI5T>WlN#qUTxDXAPX!A9BO0{mkyvdzJe+WyfX-5VARnZ; z9kfy}lpr^H)b(IMj*gw28_vozp6f+D8^A!>ae@hw1mMbh+Jn(wp6zLYsH3>Y6DqZo z<+y9zwg|~in|Kgas37Jn23Wk1m{TaPhfe_(SB(YPn5rNaY@dS0lj@g!9OCv>HXGhU zPXsWNfwUg;(c9!$K^>sh6h@@=tBA`1Fh=LtuseJOgn1s=*Q@eB0A~7L zXeNlPOIb9n{Guww{v?JC>)2@$0SGiy@mQQ5SuIeG7BkPtnwK-^Yg=J+QIs)1vWlz6 z3O1Uc+(7dy*P#z_%b1=ImiQ0fyH;!?N2jAE;0n57+lN$LAD_F|=Xw@RE?qTZJ}IRF z?IP*#7|k>rvxeDsY!R_0ABN|7GY*w@f;qj7E62$gbBJ>ESY^t?omf>h4Sn_;9B*Ky z6ps7oLy?0$Jl#k$xy&GDC<{QTL2)sd2rJlW@-??%>aCfqf^N8@*d;cY5)xek3&W#J zxSG0<(IC(90rxBLs_YRuvBeuoVcZbiY+1&!Z)!fp5nW4|421cY#jr;9oY#V-4ZX|X z^qze|AThYmzX060MTSq8vIrOYu)*{;JuER1DyC)eNeqQW<*3nK5|Y@oBnahPs2L{l zherdlkzWopUIF{2L-U=<4PUn$mEf(PZ<*4yN$&d{4Q0^&fsD!!AUy^k_D2J75PLy? z5gp8Hb!Yz6l@qHxM&sCVA3#)q>7lhX_XXH;W1^tI_CC6N_aXE?hGIz-iBso_ZjO3@ zi~kL9!+1mJeBG1s$^dZVhY}?688;p<*Ap!`ef+Mbh}FJe^j@Gd|7rFV%~C8Z(=Sr| z=mpfj!gnoOK28A9yO+D2W=IqSM|uIU94-PB;eijT;fXKMaQLUs_G`LbyGO}8Hgy>v z-xS+b-(6AtD6V*a@yH|DEmPb|Fs6b zdfhFl_kVoO?5iS#E1iH2aP9C6szj7EjR1M~o}W&iUtijS;!`PL;A%ZUcq-&1_46Je z7JTPG0hFsRJ|<*!R8bW`Gy=dd3)%X$F1Avev*YRW2#4uEa|Yr@Uk|$0>>IYeMx}F> z;t%l|oD%rG8+)FMjmuCXYOle*&+Mc1%aLbpd<2lBh)Va$cVu4&c?1VfC797H7nm9t ztkM85Uh{V>ADAUT9&rdHGW3UvKDJ(2ARxb2bU-G!(APQAA{w9FfnLB!7R*ayjO z_KW~f4Ma#B&c_M>kL1^j8bGnsd!dBNB1mF!HZvU@0-j^g2gGSS?I0i6sAu0(J(sb6 zHU*SvGC2`5mIZ}}9DHOW84<7jymG~LE?gjfMR?MAXitn057DA#9H1oK5Xw1_;{}bD z4+Nv0Q~>VI2Sv#;@q|}&Cz((zCmE2XMjV9IL6oxkPu9k}2V&2uK*j6@4qI>2`1To{ z^S4L6;Az&jPtqLkMv88CEP`+bXS18Hoi5ZBy5}gKIS(|oPk;=M$wa9HjuH1d*_6LB)fzY2V}Ut)D@3 zV0;ze9AoY0v$va>+b2NP^b|LwXaWP#eoXWl`K5U?m@~|w8CfoJdtRrbUv#Gj%FzwD z=>?`ino=*(Rivt~-&Wi0l#4e6GdDKiHy1$&U^`j(_MEM})8Rrw!Zg`E#I=K;?czUn zQpu9_9Xk;V;FY1}cYNCk1XP-=3Bdo&69R>)o2VIckLCWO^`WLFPM;;kKUq0a^HmW3 zSn$QAL--FR=?FM&!mmusNF8Vp5&IKhnC-i*4PAyc6uJI5=0Q9j8^Va3B#U&9Bj5hA zX|PKoT{D72g?!yUlBQ*ZqdRFFzWm(_jy7xbZ6KwpUXZkBnHSv(8A76c+OlAQMy zy}}=4yb9ukwFH3**y4U4Lyaxz2;|F>)ARUS=gMa@`MvZW*xYz4=(5{h1uAOn+}bX(c#rEceW#!nb6j1mzQQyZ7`OZm`9-}g zitGL`HOMDwG`Alusrc#kZR}*6d&3`rY=rgi-F3I-dO)|D1_@pT5{^9+Q>a{}z#M~8 zzLA-&b~;Xp8jKj+X}bx8ET-U!j_e|zF;HE{ZMI%j{2jNsxI3i68K7m+rc}~)>9+p2 zqN*Rd2>nB#P-qlHs6E{ti1e*I1mIcKPDMMuAgUn*LN?QLU|+A91Khh-Ncpaz9d5qu z4XCcYA?*99crS>5iG9v*z3 zVYlHC?RdJhRG$84Z<2MO+o+W}gFxc$WNE$aRaoLCXz7&pHg!uMau?{&$EKGcSw!c1 zDd>PcHH|CJHdwD7B9-dThnwr$7_W{ZTh+w|yPgX@k{Uk)E*UbJOt!N8KxLsFgcHTa zwjA|ZUu#kf*Gzd@@3dUJ88=<=m;J&|kYTm9JXctF%)p=^Sh-r>%`b5>b29~EctIC4 z4tp$68cLj&3!T@JPYKh_$W^BvK(DXLj{#)!Vqv4Jc?*W1oh98!&m)6%t!jGJKjEX)YHs0 z7LvB(5i!A@x=z9i+Byg6FI(Yeo0hDS<=<2?2aiVkeKphT)hWhxjF^7CXx{dc3f?EI zYsLq$CLIrQyeH#;Qn0z#nfjA}+jVWSm^(U?(N-MpGtV2eq=;@p?U1QYl-&!xz}vUm(zyY)G|YZXnqZ(hOVUQvLc^ zMxdkz^L=^qe1?XuD&@^MA%V#q`$2=SMdd909{t(_>!Px+FCq;= zT=%#@aqL}8k6x$L!>e;AihhK9L&zAi64S2=w6PmFdm?`{<9w>xmLqVW!X28hv%ibp zE67J1=cMs!K|W99eqztAe3jI?2#`=P{`BNRa3;0UXxsxG|C)N=>>*vMcGFhHEh0gPA16lWZJ7i#bI6BX6ePD*lagWy4j?tYUUNi0A{rp` zx^?k%y)-6o9Llu~y#BI(hi4+g`vbkPYKb9H(|Yy$RK*gDk{KXLkN;68+Ewl)Qhc~3 z+UJ#MJ!TbIHs!g3G09_Rt~mvLnsY--s+Q)#n#$zx(@CIeN01sVh`_kcKtP0RRxRtB zwW@6mF-0RQ*&m^8`Blez;qn)28cTy#x0{lxqT87cv@LTnU19M(S31KI(CVg|a)h}- z-65T=Xo?i%$MLlQ-h}LgeHz}DhZhait3HAtYh3323PIt1fzk(|dzGl%?X2s>1Fza(Ys^ZL6-LEpS$!c9TcXhN zPg;c}DJ?|w7lcSjovjKj9gBd^H_TEjOtqVgw<^@C27Ou0ELKMdZa|M8dM$)2!8Kuj zD+E8$4S-PEK-8qkVyr@OTRlyqTTUx9ilFoFH43KfP}<(edt%IKx4=1-%9j z{K??!xF4CK_G3wP5}eVu5EyYGyAtWZa&#d>KI*FeR0^@>q_m4j?pSVp@KqS4A1J7a zzj6mNPZQ1o2K14SRDi`8(SMSp7`9|V4NDQdLB^ADnMTOfpg9@R1 z8@Ot?wy;GQ1F_Y`vYxEYKfnsUM#5?SiGKPyrpnSS+|q4`r1R9+Jqq5 zBwQ?^xp@97RXFkR;YBz?CVb@}gNlDk^AIFjj~I ztE+&Jsv&-$bFXGiAX+mX880#(2=bDw&(*F+UkR>^FlDwHdrta3re-VvhW#wvxyb#IBeiyIb!BvGB(E=lS* zf2tC!sAn0||FlG|#HI9ZAW4jgb4^C7v-RHYO zXeA+Mfu&vfueh#zFr!w$$BY`Hei?uKk-09!Sd7l7d?a7*-aA`Y{N{Ij5-t3%v3pG9 zbZ}|4r_luw=vY&?3u1V^9k(ck2<*EPl(NgwYeHSPS^1d zs)vY!uB!E6)OYrb(VilOP2TS-mthS)s}#g7?#4E*9+tUnxwcG}w@b0~ol!#uq{Qk1{u_yr^Dpc3=EkYPe>B z1J6~)fF7XWXxdrV#P|LBxt7pl93#4c#8wszB*D;m{ub!!E8F z05HSPSmCbfFNf)xnW9<|8CSB<-KHta#OByrT~4l=>({hOX2g$Id1YZSPEX9f-4N0B0oqKVEUgD#Ri#-s)=M&1>^)W>6zZt?7RpIyM|$dh1DWu zEABerQ$r0rt1c~+*#@I1PHnpt#yHf>qGfDaU!&C@v+An(#HfbK>V#PsXZ)i7B+Y6u_<;FD_4+m!%d*X4jXS z+yfCr-yHh)dJ)suOY#1*37CNgjhFnjU>L zZ0*X-n3r<^Vy{xAGa$S7R_qn=4J84tnB_Qpx5Ku9nLy6E5Q|VLG18;h!w249SCiUj z!6CxyQmwJzxp<-;ei5dW$OxUi|2blOaWh_V{HtnB+$GqunfdpZi`EwsaYR5ZQhfxZ zy8rIwje+I4?Ex-TuC724^`-*OKj@2CO@GXhX(Yx)!d!~(!6*vV|K z|NTBR8Dt=`|D5`0r}Jw-*EpvD5S9WdW*b7_fmEuf18v99xy@e zQ8^g0gew>ju{Qo0=?8?SWW&>Ctp&=8K4EJoAjI5Q5|Y?S>VF71Qz>(i5>1tC7ho;W zA>FVVMsUD(8$*Ts?9xWA^-x`jTLwDZ!bffM@sSe{O>Q2R!L=dZc#ww}275ICH4_$g z;pu~~0$s>BAg?)9Hk4THjUrz`dPi47 z0uYmH&w^nvt^pvVa!nmT=L1p!5kshYfDjyNxa+ChT@7$D!+G4c22&8HoHo-1(kml> zA}qegYg)dB&I2;tT0{w1AoQk5+6Cnx=YDB`lc8mQF4$2buE>EiJv;=WjI}1XcXJSo zrJnNzKJK>vMO(7>(9y?UC=oCL+~9?3;96JPbbEs+$U|TSpZepsfFM)jadwCgdHC=) z3nHx?-KgQM2wK!&h^&bgWcvm9AtR?<~mGd1?d6OcGR>|cbGnpZacV1<^A<^Bcp zKNka8l&^Xq*kL!iz$9&}1vHzc@gdgl?9%pNjelQ!O>Os^+H{cS{{Qdg@V_s5o99(-8=sO#TrRXr^gE^F_4kRoTLW9V-uoNHFk{}ozaVs7 zK`3*`J*nu6o*7>_V{UvRujW|X6JE2}52L2$Q#_b^GLn>vs>-z3lpP z@yA~KAN$j(KW6N%uJ3qq_ow1h@#Th1eyc*q;?o<1gnPgwfx#Hwut6{I*+1E?z&|$@ z^`Bq;|BZ%}N$zDZY{%JlHT8qif=0tuRTx^LmdH40053kqG~k5((eXFF55`y$NvlE9 z%vguC<$8Z@>h`~X%C)-~5{v8aZvS+QwBtxe-qsi59*v$KY`2ay|R9EV5vv~O?J1;W0_XeqVDM&!3YEwnDH z(e(C6d*z`$tW!!77 zet}j?l}P&?Gc90|oo9>Y?rfD< zTNG@GuKkvsa3{>#qYb9V#6CRG8kxP>PqT6ASLr#o?pH>fJQ!-=cG!AwQ8MGt?btV2 z)#)PCX1naq@TN*tM}~d_WGP$4wrf^0@;X%8`2tH`L1vE{&bgTw;LS`pB6KDXmHfo z2?U08y;c>SXFyE!tkPX@^R;?t*HnMk@WhU-WMbl7w*bMUXGg^f&1MMGPHskAfZf9q zzv;HK7W+rDYd=*$%n2#(<;9l1^E0~kcUalM$)cvH^_+aF^UqegPtC_hHDjKPmmysIRS!=!V;UvzRN(71Xvp%~CS3@Rc-DZ4d0;yqB)nxoV{{?6KGyV&Mh*AHV?c2CpNtk?!4?>;RJRCp`ow)Xog zXU16A=dZ^bRaFA<-DfrAhINH^nRaQL{pzSkyur6?V&`mnV_Rf$8*kYbl;Y11KYd<( zLPY5Z?I4C!SJOsa?DkP!WZQh{5xSohMDzQ{ z^$zPHZf%^t&$X)9Et(v2GaV6`O!n@H-Iw+rda4{Al2LChT7_6kYP@X^l}_9vu1c>vxTp#KE~w4Q;Upy9SH_Rp?!;xw&Za+` zbYCV-P~gyFVJ$?VC`X-Nh>7p4X?o97S8V;P+M`S&#OT$y&Bko>XtJS68fPm94t9%+ z1wEgzrytkKp6G3yRk>9a+CE17pc(QiRhb;~jN>KZ@-6~l8GoP3r6}Fh3hdu>$6s5A zUWiQEo$P2?6plL=`kh~O<7jR)fBs7=1E2OYUo(wH{Ar}g2*<>oT|7Rly;K}W=i1be zdsmAvbP+%=_YiZ!SnS!@>8)qzxOgS-X*!7 z7d)0|GVb3{lGv>pUH&z}Q(gXiA*xJQpO14H%&OmKs_d+*L-$Pd#kv z$hQXUkxdJEL7Ai)>E845E(iu#JQK7y)Uqjtt)gqh@|x9hix_aHO>#}M+4^l3j@8s! z69W-7=eyc2Z)}AAsY$$w^mF{-{{43I%Wp(^MRZur?l1z0W}g{Vnj7Q#WxMpZ(`T!u zJ#;g5Q=8L1>+Yh)K4KgvJ*ExIF`cysJ!OLDaH6X%j!^TGALAbmkMwckKl@d%^s~B< zdPCGg^z7(pDTLNO;`?me=M|0LKZWeKy0kaSs5jQXfQyF{G6V*^lpjFlQR!xpk_Tar zx6H0cGdMwLER~E=C)Rr9eTSp z+eP|lOJ@}v&YjP#WKPRu$ZZW=t#~s}B#X1a7nQXnA zOo$>ex(~ktgT-`VJQo`lma)qx7&d;wioA}^cCd(UnS-s^jk|?y^(84&D^+?-^$wrf zT{YNbU3*;Tg6XEI2y3TtiEEFmV&<<~gtg6(RsHS7aDy69+fd|ENQy+A zIjh~lr*t35(t2;!2$39$e!=RpUp}Gbjrqh`E7g^ATH<^V-d;IOm4cOy3Dj60F1V8aTG1?Wbf556QIsjp?DK zy^3pn@|LLAocC*c`&>~t@79;a#h=x-dP*uPa(Qz!@rPaB;o;$JAlyp}ncRH#W@n4D z?^^zKOa57!XIs;2u7sn8F98~bni?4bcfx;uG?uQ^Ee=T+I5;upb1y+9We*GtSoL)k z_e`JU)0e|8^FmMKnles-jvJ;l^XmTc<#FZs8f*R=)~mh6$}CPA^olr)P$m0cl#Ed0 zxCVBW6P+TGIS7+`-42@^%HDc~O9>j;*Hh2+UM)89*Tl%^>x>!6>mUpMVsH7R3>DI! zWUxiK__p<(jzr#n4K0^ZSx0O3g96xRS?CQie-Xn()%Gy7&_uNaDE$xf2J$Riu4yGGCd`@&0eu zdTws+zxV1mZotl`0n#Veg!r={kZ=C4g;!Y|U|eQqYyx!!bT#Xy z5(|Sp%hT!Ny>5$tEj{+*#}6-lc8dd`_6o4od2JdqkQ(jgf!e$bqdi-U-qmQ@a2Or+ f7+PaMhyF7Lubs5Q=}MpqsEG4)^>bP0l+XkK@xQ01 literal 0 HcmV?d00001 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Login.png new file mode 100644 index 0000000000000000000000000000000000000000..b830990ebdfc95c2c5c870a1258e13a448499b39 GIT binary patch literal 22048 zcmeIaXIN8j-z^x5A_}4)`UeG6nlwRr2SufW(tAJ%NS7|53Mv)^DWO+shLX@iZ#IyC zw9u z%6%OejM5MWqhLOB8vKuv0{ROKb{(dA|E}Kil%+AM1atj*@m0n%7tUO;zj#kbgOIPqS=*Ke1{y?{`Nb!{syabCwv}eFGz+lW5{{2BP4F4XSf3KW> z?+&mL{+C0?ix&ZMFc@;CsB)aQQ*PVLck+V-KH0TlXy6-JaAHScS%-;jvU7#-g#QML zjNk z+I8<7%Gmbt9NlL4vr`#tDnIZUcS9WjU~0ex>sIgW4$Ni?+x-04zBWtDYN=!W5dW`n@XU7{$?S5kQl$kcD&Ql)*(YQOAFW%Cbgme} zN2}j9#?-FVtmg;@psxiTtRb3$$x^qfr{hfVnPIFZD-HWA>jxX1@u76`RRh-hbIJ-P zX~+e%@M2+^*5>g3#PQMkAu*`&w4A9^$%7%U0rNI)h22(R+xCR@dF`N@*YdMzelCeY zN4wm<2QTFd3QN`MkB02h>suz7r9GcY&8B!D!LDmMrUzs|Tt!7QXEJ4OsNj5Bqq zcJI1N)n|#=9`h00Xcy_U!CJ)`+wx58G)v%{UQjG%ans-Xz#>zjyiX1rgZPff2P!uI z;=t6TXPhWjYGxht^{E(bZ>PrNqkYHX(mn&zzWfA6L$eYW?FXu?@Pofs96v`1u`>$B zoa22>d)0t#*`?~w>pibfTJgET3NS)(BAv2jftp4!&+ImSNno+&UVZwAtPkP~TRZ5A z-N6?5{(?pM=~!L7x?p{8!8Qz*N^J-WW-`g`_MZ_+PjnJ%Zskrl3w<@>+E_0S2OrK` zFaxmjy!v3htu5r-ZOLv&D%R(g#$ae=oYhaM<*t;cfaNm{7L#&iix#TQrFPk%VI75y zmD?K3vi8f}aCv->4Bz`s4}p}jlFc5KuV)4=EJn*XF>BbC^DBm`>;zYE~2 zy-SBNTAsZ~{^oN1BbU0h=HcUPoIt1bH(H65g$=JOg&OD3xvi55#~TW50MFXCMqJ^c zF`Lg?_0lk<0{Wuy7D)RcPlD!RZ{}uz>RjoNZL;Q;+5ANG>#D>jqMV8DqSf-ZVNJ3B z{h5DU^IIwzYp59W9`T~&OB{}VUA`8|c93x}#jTJyb*D`DQOJ9h^teq4)eGIM4{egP zl18=os14lH^iuqH+u#^|Nri(ybZxa0hbt}xj|_~gUX`}puI=Tj1l!F<`Bdku!tpN8 zmaeKo!kp>^D*bTDZhAT%o>udo9L5XyY?o_J3to+{NUu?W)T_Iw(>gEJv!LChe=pvT zSYL^0CaeSWN5Kyl3~{_%fAD{N-KuroS_27g}q;qWc1Rv=Lny zcgI%J1B5ksbU#GMtW=e@awTuh$%21bN49K&4Q2sGm==2Uz(0S&*lt6WLOCH?-`m1} z?MG?5a9i&(HQQ?%CY^>Y9Ja6PrtV8H87QB>xydg1U+~P1g^#ZiDmWCugCF&*9eh0} z$WL|cS(9gN#6|Xpz4%17!#QQIp(#pvGw$04s;UV^v_R!(>1#e}n)3<=tIYD(ya%lUkOJuF-L=RdvrrTz z*L+s=yF|cHMUFja(JLpPX5Ax z4y9*n!`nfnu=8cOEn6^~TjO5Frghc+a)H$|MDf7(P?^H%+n9=~bb^gX>q zj}9rvtPyjcF`SlwnxeF#*KGN6Byk6O_ZU9u~OWYy$V2l4HoNMP4j18PU(u(pMj0H0v)E<_%V=| znp1waRXeUTV8sJhdb5qG#mwWEKAQlw=uKMJyc`WdHKk!NX1Erjs%4ZV=j1QELXmA5 znxh(&8t$`qYw+di{UjUYqkJFw;OwNFg2LOe_yo~O%~x7J>NyG^UA&js&xsy%g1aQI&sr~hZ=rd=5yixsJ+;gB@;7sTt0lT<9}sSR}Oql?-3cFNTi0fJ8&JC*$4l746)uuy~V+*zCS z^E}dPE9W&t-Xvs~GV8>}Xfdkqi`_?-b65@`7mF6FM1JtsadP zmM=m7k3XpZUQ|GZLl%^m8_=tL8`ylRifik2I33Hm+W@%}czM;9k`0&## zw6q=XU3ZLLAq|^+oweWBR0C2gy*mG6Ejdze&DlrVq3^<_0azGPL}Gfba`Mq2P}!|aGTu(hr#wI< z>uuse$<;1bm^wQptD&mqbCad(xv`B~!;YkD^X4%DhQJ8Me>qWLFi7 z3{>@13@Ta&M6G^ZO40jRo=cVr0Bzc^aZjICn*L3BQYBZ$&$CKJLN+?|iX4S+DcPWU zdD!4sOpi86>{-j@AXBzMrC~sgt#AjR)%PyhtR>r~al7&OaQZ#`;0diEz3lX2e8Xl= zge5|!bX_OTwL|z9I!%>RJp>Gv4;ZW_8UaFZ4;u%;q+x%I7zc5SNt_-kdsfY$Me6uq zV{tS7)n${52CC@TcfJ|OQyJ>3WYnuGQ_Zh;?zoEwU=CU2Q3Iuc3xex6D zVuwlN&cf!T2q6#y`HEsRFv=9q0max^rao@f3NSZ}rYQqWwhlWZH?`4l&X+}kwu1To zCnsE=f!En~s3O7Db%*GJcD{+ps(Q7*pkg%&g}^n>e^zFK$1Xj~M zj#p!2e;7WuXw^gmSe^Z8KRi!fZ+@KEfLR$PBnIVI6Z7bAf^`I%V7VTUJC%)gy!V#v zXf@1B^)Ig9#PQR%+`;NM9J~#XbRz)M`byCleSUKRz*eW<@nPo5munU=d=Q&(L}(P` z+d9}7&upr-;vgm%Gqw%*Tj4;WV|#D9XzeeYkvCH=|Chz=z;u`=ry1EC)k{915{TRx zAhV-62!Rz~LU{~a@8>IO$*z4LhTAysiqgAqw6_lQ@2=wxqZU4X38mWJ8zd+t?dAHk z`%UbRN9C69hww+KhmI?-2^+tjvhKGQLZC5_>an?f;sW=z^ zGm5yfc%u6=5fTO?aj+ehmSFw zf4ZzA-ecd1xJ31R1{jUy!gzJc`ndUa<2=Cyz#@dK+|4b4^YLLlKb8NM26icK4{43Xfw8bo!Uol2!zd0TpsAvD2F8O{ zE`A9tooPUS1i+qQ8+ZGnHkIVD>@((NSbwFO8`iXW0|G1FB1;6oa={i>za^QPFOHbQ zUR~{??R!n+FhV5I#0lsnpigjC%K(dq2b2=6rYxq?rp93~LK^h0{WbTWHxOyQGZzaz z*|%-JzNGega06yJd?L(V6`u8k$P3%SZ>j*fSSEv9RfJgPC?9zLA|!`i0j8q=V!Tz( zAeUpCYx~yrSy+Pi3C71ego90c#8S=s$aR`^+G0A53`TejE;zTXB|V>Q5_Pw8$|BWw zCNV&c2HXU2Hi82M+Rgz6G=?bqCBC?rso?=;fe#Dzwy1*3N*|bb2YXvs!o!naA2%;x zZ2R0q<=en^Ju!e(g6A!WEvgvKcku(}jr6iln?R-K(f|o4MIXE@g7`Fqw5 z+XNfU#{D;bx$n*A#RIS`A_PLSF89zTJq}`cOJMPm%-}m;uRx{{-ZgL|xpaHnFFrA741=4rEb94C>0=kAZ$Q=dp1ObX|(FpzD6ma(>98_*ow>s72fuw#S1=v6vP%CDY z&h?~z1eoo@yPZIvi)do*Y`2#KgG*fF967iye~S{PD41ZR}Y-20l`oz zIt+?ez|g`M0VdQAf7#UOPWO?ozzq#PqqisJiI3X8=Jg$2zHR>P^RTB{5I1qmdiWu~ zUNtu!sJKYQOc}|b2tq~HHFyzNdUNsPt$?j)~lA_(J5CM&Zf}d(xxV-E`ZZB z4&0rVSx$Zz2g!^yY=PCc*L_&)mWb5L@%lvL6&6@m3Rq~CXX!s`BnVl3T7EB3VFYOa zX;z?(ckb`o;L=mQhtaRO=EtJnq5L(mF&I8FFQ165J77t3$(=04J~l!blCzI1Qf|u# zqFmfaXQ0b@ftvnpGm#EM0Ma9EYH$ysow!j?hrnDet%Z4YESs zMr;7h*Ne3;ml2ps^D0UqgXKox8DSZ4b>heQp#(896$8>dMnO&629c?fg9qjP@zqJL zSYtrhWh@*kzns1r3pj6{yoq~&Aw0m#*zE_SVXr$9uS6%O2T6X7^--uQwf(pP zH;cEB{~b($2c^K+kYBCIWAzJ_L}S&l;I;;ss()?U0r4?Ug8O_{1nO7a8<>r+i4ovC zBT(E#PB<8(c60C4!zyk+jAR`vQM=L@C~B&n1QKwz<{|K?u9&}AIAxLJ@SylV z9$~wOZu%#Cxc3?4b!*^ zY24grkWKV1e7>6BBPiZ42E2I+rXh3kR&j^)Vz2zouxsura5}_m9B_gL{>S&Da^3?N z+;!ji6ShryWGh+C4Q#48qj9Ex0cDfM^q_U502m_c-TumkzW*aWqiuZuK`c_+vxFS3Hh@Cr9pEt{yvO&8%CT4A{w0{`nAaGQGT=3pTe!xVc90w_ z>3#KM^rlYz1&SBOSEvHbGPG=?WNSbl)`yNMsByGt2uwr@iqo;u>(wlX;uDUnuvdZ@3FMfA%QlUuL*Kow_xw&bk`C3+f&=y}4OaA5sGxD$9h?1)7H zf?A>7LIES*r`Sh={@t-#_k$}ah$RBMk(_13rD1nwkL>sx;D$C6e#^LlxXN*4f$}V5 zg0}60it)Ch@n~;x8h8(PcfWJXKfY}4+3gMr9x5*lnO_LZSUKqxx$RNi2~ht=Jck2+ zFdD{!g^}e1esPRH5hCR)fDoMQHtP{=(BWd~;FI^LNMI6>d@)2jg?;0pr&%BHfOSfC z-&v`ej9BkdqSN#aua1NuDbE?Ir{G!+Cu|3-5yCv~+j*Hn|7Axw-?uP2Y)fb7+*M$H zazqA!dVzw>lfvS!XJc5D4M9nAJv65KM<~O31Y(t?VA;oRbjV;KIWIQVDhXK0z&ggK z-tm+5iNgq-vlY*9%=)ZjA|h_SZxEJ&g}f|Q)d$}}anS|Dxkzh-p-^`HC%dlyF)?tv zwzQeq(eow6Zg2p^I5^{sKJnMBer4I8Hu5d1eKrjotil^AUtjni{&Ecz>3+^N+ZlA^ z;R|fj+OhGm-C@p4&q0ZmaZdK?H(ty-WEMHvuA7w`V`cxMWdR2^GB;9SAZFDH)PjUL z+zSe-eh)UEQMYMeDEosuJm!<{*tG-8G~&=?!iW1$8))Yk18D2?l2D!^1t)wCwFJl1tGsYK;G)>%RMiEn#-F<{u$#oF`5oJ z%59$?XW_vLG&eAH#zi$ESW7cNtsPC=^goMj>vJa#z z9s}B}^DXj*(rZt@LcMH`=dA&AyoC4k7G6arZ&R$nk`;j5tTxgB9IllA(tIeb1OiSk z8pxw$SyVV$i|PfAGwEtTHGnm?iF>|kHv#JjiU4aO_BOFsb8$~PRq5_is?GQ zsfxZlTKRIgJpn&4jfP)ebunrHPC`7yH6RXzRrm(TZ6T!nQzN3(;#-+ypRd}$se+kM z5TT6HleAe-4haRurlNoN*4N;>p{M)i`5F(GUE6?rI=nUx3VU{zgerNetj?X7jO%?IQ9SYj)Mmn` z>_FMaw%|Q8z#1;ISd0uhm}J&FIG9zy?#~R1R9xf!()stjpnU6MLQnbU*0EZ>gDE6K zf-De-)8J>Vi*B}xnFBx;i){^1nTyWgzM-D0KFzHAI2y*Q(D>4V$%EHS$G0b6J~8@W z)FTxbwu-)>6u0T93+P`qd78Or5_pS7hL3*4vQe zI0%#T4PbNekb7`x4DbQm6HZ1hYW<%5Y(`2B&!1HL{!K2v+qDyN-FI}Xq8d1|W&kNIx_N|mussZ>R; z-axUT^WRX4NV$ZBflqaW=Tlg78dTnTUSqp#q& zr24rOB1DUrT8tSWNH|0F6+3Ojp8m=ZSW3D7LLm{i1aM*~Q}bHP5Uq`^kk?bvtH3D}v@4ZnWJ>X@bcgp5g3kg|Dw&d))vMZEsi%I+x!y5rinUGHb zNskw0A?nq#0hnUO=~L*r9mvXu>{cz(q3YZ!FueUsHBC(E|JwM+5WGwtH76=Bj^~Bs zaL+oZ{@$24KAgbmaH2Tp&y@kS&{xc_>sPa7YOgvN6U@$^94@#VR6515B@kCpxYiKZJUO5@x8m@3aYuX|#r zJEL#5p1n&=qazSSw_Fr>3#}ow_MKs|VoNAThWe$J{O%Mpxs95(kESg*=NBbp14p6C zU=&x0IlMDAQR7>yXyRx(CO|WnvC4))m^QopIAzWQFz zRE;~lOsLpGm5qGZvLNvR;p3E60quU&ADBS2aBNTVRJH($C) z@uoiaP@aB$chXACOyy7>Bc^U|p+Kxo^_BW~d~lAwZ_lv87d74>6Lni|#ra`2E`3?_ z1^i}aoZcBu75rwAULD6ZRk6oD1@wrC1LM~63_Y2gFRpPp9dat2$=A38>`emndy+X{ zXys?nQ|8{F5$eRKk14om5En%7b?uMdV ztN>bAHA4jbuvE&MFCj73plrPVP~}1t9`({{*BECJX+V0+>r}J&N`$jo0pN(4`Az8n zFM1AyDYD)ZwPB;dq|Q81q5eGDE$3L>;IacLQuR#ib*?X($XQ53B4$&4R!EX$8G;bm zXkEY1*g4rsP3eEyIB09fJ<&R)o`1j8(_?XG zo+5^a7ya_7D_8P7=Q922gZ;*1zm|>gYTOeoo27|^841VLZX8^_c^t=_w@BhNYc0>w zXt5Xjl^Uxtrut9pLL{)pqc3ov*yN(d?@;p$CsX>Miuv@#jK!yU@dv>IDU>v$IahR7IHpd6?g@K-4(LeX|AEf!Ow+j33 zthR1lQq57}ph+}I#6;Ux0|AVrJxkw|E#-JGhNq~9Vfj!=_yPB%tNkhFu~(Po#Rv-$ zF~6^WFpD?$9@5(9piyy6c&SA#%w>3^ry*L~Fy?GrO-wQG_DxM2)0%VQHOWVW`}u}( zX6~))c?ySUU6N*gJiWW-ie1Wn!f!q~oAvS0meJb!?eSXwEOqPW{x&P#KIKzcvr=F)_a-tk2!Y zTrY-Rh}1x|#wMs-_}E-;o>!Nh#6A#j{}8QW4>zfi&>`y`qi;4xkWx3fRJ*#FP0Mq& zG_~ieqtmVTYO<}I7o*(rcykBiA%C9&k8oxjFH{kp7sh}GX;#5mNS$Bhf^ z8dE3+-2|HfDWHEHsA{{S@}HvVJft(#U?(p2CZ?%8Q1xSMhuEn?dtOf_ZpwWs)EAjj z2xvUZi?2|Z1o9Mz>9}gh(VUg9Y28`M0|B~H-SQu9 zxu;+(-8P35wp}VVGM@;O?J8l z@`a~)bG1IH=eF((`qzc!J!+{Hb~QSV#xp#sLhgV>4XjN`I%2AA^9FR8VxN7|kBS}_ zqE3an1ficP8LRuv{Pv2cBzNVv7k~~qxP-kSjN<*GXJGFzwvQ=YcpUh;=r?~o!el*Q z0ByCq(KFU5yFPpC#p8&?`Mc)0IET~0M^Bm>kH}Zd>v>_WwFd>qBaav8VxsA$jQ?=y zO3**ma1e{vQ?SWb0m~sHA&HewH`-%rXH2tN^-T}%Z?=SqKFgTctY&c3?@y|_+4eLjNH3TZ0ox)NOdfg$f240*4Lyo(O7s1vUp`Ay*p zB+CDt1O|ZpKPm0}T-k52sB#Z^1_s;oII$aqaLtiya7aD2u519EUBC|-Ok)k+zzISD z5?8TQIT5HUI{+dqo$drp36!S9Sh=C~0nmvC7C`+<_Yc5>>gzx(Xc`#lypT|nn}Pas z=jC^P3p))KM{JKipZwr8K`Sv@EZ^zJt&#AkF&#+hHvTftqspjj$G~l#-#P$xw!g9E zi&IF^{sL@64GpvC=R(j0V;SM{S_wbNsX?l*rNL(+z=!G1llzHa^&>syfkE}^*{R?_ zzRa&ob}5fRcB@R-vMG2SbShAw8%ms}VB1j)ko)rk?1EX<*WA>spkZCdoK#rS%p4;( z0A%)~*XLP=v)trXn<&Jd8@W_ZR?vI4yrL2cQ!`%t$R*cRpsj*#2I;y18} z1ZqttEeJ$lZu1ou-}BuXvTN&67c`d#HmLXTF)%*)B}Shq4FQ=g?X0aL0{SpsS1}x; z)j;UuK^K3Z1h_aB$+xPcfJ*@-m=>!IK|-ta$7R#rWr+!Yk80rdwLQG*toJQGWwM;0 zRiN-55{4@=8C)Q%WoZix`waM1VH=ep%TU^dZP1NpE+-FFW(z0}2iW{+n}hPHDndOU zPXFe9NXT-<2<9}K0G<4frQ8-sm*PQk&8U*oNacDNaA`C=4=C?QJ>)NI7bbN_+pAC; z&46ySs)g>?xUDA6z8k>g_t^#Ah~Z@t%{9qlix!81qJDe7W;rm_UVagfXqv=<)ZX@V z^=w*!zNnM|FH*RHQW4yfRw@YgiJ94(EAa+Gi^Uxn7V*xNV-=@WfU4J~wW5Ez4B~*P zD>q79kc@GO)I52b=gVgen7f__n1%v~C;32eS zmgg{H0x1S49KnqY>PWO#Ao_OtEo@NofHqN}vQbac`B>|RUsJ$<*Pdo%^2?n8X(~C~ z0(&1H2m<=Hl$a7cYSiXp)($`lXr=rRG_#UyrhmeZ*5jpFc<2kWnYnZmbi7J?b<|N{ z{%Z-oy3QLbK8>|n4AQ$(F>OhX7-Oh8gRBRcFDEcd9(X8@mS;J=M^6cc-eoN9Dwr{L zGcwE9QSz+l3KhvH9$xbzVA+i|U>RT9ywltZDOVtBZP^pudNB1p>{h?DfrC>DoQd9r zIB4A>00lz-`3gDWE_@;w@W}{!)exg<0l-GlZShMyQU04Mo~1n$?ZYPlLEUY5y8G zqYR`ptHFmCx6y^FB(>(43qTXCd$i-cQf)m!S8H=Fr74`d(Q$oZ9|Sovg=sU+0sSNL zl9JCJpY-~3{Vv<~ORA!Ip~RXPy6vLb#LKaCyXHA)r~TdxZ*Yls-bmxCJsy zhC`>y(hr@CZK57N!EZLzWSp`5yUGx7f7k6Urq*oZ~NW_gzm+ia|>Pk~PbL zmD>+z7Rx{V5BgR$=#jK76kz4M1F5Ah0}X$Yn4F~!?gwN|Yf|fn#@Fod%EjKS0}Tx5 zxiLRS9H1Li#k4{`)p4U_(OarsTKAIuf0buyge?pc5jtc{LX&O8`2&gciN0MqK1;G4 z1pvXeXV4Kp!**2lV>Q$YYB+SHqAWj=WUUl^`k1KC3}3CTP@n70zdU50m%1?Uk^v%R zw1VqsKQCodUKT*(TPH!lRkfw!nu0zb`eXG% zeu2Zs7_}%U12eJ^8K?29mE8rHA2qH81M2F{{mj~nX&lcS=$z>>Qz=Y#E1J2YIKzag zK>s-e(wWsk=Hdu?O`tc*oQs;)&{+33ys-$}> zXMFFwIE^9I&t3UTKTGI9@-9Ls*YSZ0GJ2}}b{|*en73)=p^EUh-Ybr}pSYZ}oL1da zNfQ+l?=^hz3#tOtrmUc;xDMRbGHX*_$92IDbBbiWifjc9BxY(KL%#(Dc1innm3_)w zePTttDSAa5*WYg`QYBPpAM1oT!;V1r8T4}U?+)|HB5ztLYR4 zy?3|}HB*TewJ%cZjYf+Kpp$&3qLdf%<#qW6V(e9x3GTw0pBbfbhM^pr_UYuYin;Xz z>e-K%sku|S>`lotwEh1wFr><45&%FLvyF*$XwJnHbM??jY`dj;^`ouycs!mUwX{p{2(w0_P}93D3HB(1af7l&(>&ZtKwRLAuaa9n)~z5-b}sF`{ZF; zf&4|2l^oAhJO;Q3Rwk1UulROX-GL|XS?JUoxTK-GfN4~#eaUB>U&HxFle}<+99?)G zQ2(ffq%Dt}{9Au??j^odLDzxMbHGA!|*X(jKw;W-x=iH#H(IuF3teVeZ zVCMEC!WkWCe~J~rrfn)Y!QpQb{Z?6rbiwO$%ep>XIRPl3qLL|@mrH3p+d$ox>%NqM z(GiROeUo6v#Xa!Ra{6;tM1H;23>b?Vxqy>ww>xNlYg9ymAZ)IkS}qfgipLlu)v~za zpSa$eL{9>SWR^A0%qW3U6tc=%^gaO#yE0IdQ@tRGvqfbPEBOY=h-PEhWk8@{iqN?U@by1G!4m9~!XCJuRr<}F&E7v{5mTQ#ifsEu zu)Gh`wObl2nTEV)!N!C2OWVKXhqlq6_j2{&>D3M(LW9ws>#f`

^Fm7jE^u_qgvY z3UtA+AT!>W;M5d7P^!HJY*vqn=8NQYBH#fmd09vVYkXzHVg1P`DnK2JeRaj63Iu@| zVrYy^zNl?M$h_bOPM@6KB0&L$Ft)(YW^TI(Q1g$BUkg?k4Y{{P#sUIROOOXVL$P}5 z@42=`Y@g^Qs^fRoT;o71 zD$Cz;j3hno1L6j;)iX&2Kqa4MX)(4PLbMf@wVT{-Jm?Vy+%cBaKT*s|Wr_Sp_W83R z*TzFUF!4t&7BAHj8@&8HX$^+q6qdtGCkG4z4lq(ky>ds?DVuIRMH+7H2NdVobQMLf%q z!Pc#-NzEHJ3J{S4wfL*9b&tKr?f03x&KL&IqifH`Q8RFPo;B4gglQ-s0V=s3{;i5} zC_Xuh0xYKd@E~h{D9n9KvikdWZx0+=Fkfl#(;ISYNp&cu_h`SP>^rezn260C`0Q_z`L&)U0_FKzIqJ; z3vSWMZ8yJNE+PcG)ROwOh%DPR#itUgJu7)1?O(bw>7;89G zPh;eaDEUwFTfu?${l<0z$6h-=cRI91K{&1!bHny`-jNCt_(OhO6k5&kHSU@EX})EQZy|oesY$f$>S*g*_knz$B9U zub{;pb90cBMF5wWNZK#e=^8AtZi5c9vBgB&-=A!*e>@JXEeR&BCYlpa186XDDc)2o zBN~yU`=t_`Mu>&Ny4}8cTRz@F!pO}z;X>yhlEJNytASh)2SCsp6qRaLOb^<%jh3ep z=D`vW7voRtac?U+8@H6a4HI%Ue#ZoZ?V&T3!nUf;a+0YN-Z8>z^4$O5JWt$2WA(e~ z1>#_54N9fu{ss^z7))}jkF_KFGmH_&4q^D_5!5hPa2R=MszJ9<=pM6 z3@H3nFRkU;N!ApL25xFF(|6#m!=d`Vo=F$*^xZx6J2`LJ^z>#RZ#a z{({;AozuDn(pUy3!3Yp&FojN6x@^~ja6}uG{OSt}wmgYhScV-GI|IKR()rMt7h%wL zkAo8CQ21!YyYVHvZ$J^Qe}UwNM4pEswE%3u+OLC1H#UL@%#K4KO~PVJtXty1it-*N zrunV#fRF9#ETN-e zP%qouLJCAJOQZwrq8?nHFQ0%;`mlltF9q((_MW617{GdK;Lw7*kzaeO9m}9CTXGwl zq8|XA?|2)hb_BK8q2L~5fuNxv-P?OF5I^3jCFZ|jl#S*Um`uHO$KgR%$={1l9^AWdA)E&%h00yU?++Hcv&f3-!)ZBpq&mEH2_ zaCL&iz98nuMZdnuvCjGT6qiSMUJPZk=rVukuW&K{K4d61nH!eu5m;+jVH&33!au&& zju{N<-f>=TB0ssX#(R1Li@iRQTR&d@izRm~$!q)kY0#PhMhm-FE4DX}U1-gf_5+a(|$b=Pn`1{J0VmVc_r+pnC=!V7OBd$!A> z6F9na^hUwEicq2C>5bsuNd5dD6LrH4ky7;^-(0+7<=9Ux#P;UoFQrgJzXPTi0;a=- zXxhm7Vf*;$(>!9(#y4GwfiDOjvA-#c%DGFsFxyZGRszGxUBPT4R}w8?u)(NF!`{hB zL)srb4JLI61ksx))8n*!$=^@NV)OgT^MSIKZJLfc8*9;)n+`YuqG=lO8@J22-=HM3 z+wq>j?CH;ytQ)P4uk%~dJy+w{lIuxt7~eOiZ?531-F^jp_^hypdyx3VGW`{|7R>6}Hx4N5WMoSeJ+xS2?-iD<;o1{_{5Mbe_xYm~rJwOIaPP*ZugaATPwaNn#;210%{I+Y)- z1i38wC=*32#E>Qm4eslTbqfcyYq4^*f6Koi|Nd$rJ@i@J!bHp-C^_b3-;eKi!RL-( z?CV$d1=-%k%lmG$SP%L7_GQZTEe1~Z|6(^14-fxAM|AqmiDmtKBsV z&%zNEKl(@4Q-KbL`mI+*EU}?+-aj7u`QXyH|7Lp(oa1Za+Qv8=PYvI3dY7Zgnm;>7#D|lkF;w|o?r=x$xvIm3wcoGl4NptR zt^CfxNj|mLJ|IMf{p~A4xI{kXY4BQ9NkKl>W;9$eBNTo;r#NyYsG5`+)+tlWs$5aQ zG&?RN7seT(A?!5MZnxRoHMc{e|9nhZ__OoNAur){LO8T2r>WH)i`sUIBec!0u5AV^ z7PVQY-(31A$F^^+_T9HNre<l@HM%;=o)Zu z%lku+>3-Ce&6dP?n&!v*y^}?Jeg&@43disN?98AkOl6P$jwlzn`gT@5_rKpZ!7^d^ zA*tGR%xG!*>9cCbUq-TlZ>z|c1_@g$?}&BC>*IdAk8lBGmfM^dSh1qE=+GtkGsMr<6P6`Yz{ftm)VRIF2k$c zByY<*TaDr>j5S>zab*V#(1rco{N|TmW;fb{OgrBH^|Wr4dTcFMUA#G{(f=-^C4S>j zd$9zokS{Ur>EwDqs-&9y^QFXr^;O^1mVDQ=w&~okt8S}3n5qD;GHECKChj}Mva2OU|&3R|@m6LFa&FlxYNw z@z|bUVB~TNb9oY_&sCNgDJoAxw`_tbcZ%;*>3-eJ z&$OL&Y_nqrYXFY7qVCV9FV8!v58Zn1+E$#ZSguP}HXZpyTI*I=#(s5`x@s~zKOYX-XDbj^VS(F8>B=kb5e+OaBjo+SswTp*1K3Sz8wkUK$TGo%oj;% zoUyzLiiWr8bm67EAZsPFXLv=ky^-#nIn+0|qk_{N(NAlz z<_t<#f?_FLIDZ9q<$N=obx2n;e+(UNlei?*;+%ZY5ai+H>UDNMKFIl7_Vz9I^|TUr zy~%l41s7O|1%|Gl!aPRqU~sKD}WTh2$;AU5@#U%&Wd zv1-R@Jz3#PYp>sn>v`mW3zFxw$LMGg{GA-RpX_FZT}|~kd?q%uT(-p)lqMY1CV#Fr z|5=a0%u}X>3jqy&El(M37jVD6+2flImsw^giv{4r5A4oMudR_JC+Eg_Z7aX2F-_|P zdFpz7B_ll_BOoVHR|+RMv2;RLKv`SzmiHTbcCFr34q4ND+$4wxK}d@rufiay2kuOl zgMN&C(DcaO)ZV$zN1#k0jeU9EhHt1kz_fCQ9E>HE?9BFW;J6#W`Fr2P2cdVmbl*?E zZ?;yGvR3v{ZrlxHJFov|Hj%F)LL3noPao#;yqGEP+OTeYWXC39+|74ldWIinYmunE zu-vlUd{vOOa3g0+B7z7Z>Ze=ef$;V7BYdjcca)76tvB~^dZ9*SwV-iMe^ z-ce!Wo;Z#&Av8XY!0Pj(1v4zI7n}N0iETjtSA3~JWsyVkBkRS~SL+9IBTP#@11!m0 zK}&k4Kc~1GY5T7s&i$R=_xizlh;t|%n`Vh;d|x52FVduOD~lKbe~jg-s-HP(zTD_H zk`vl@r}x&y+>5hj@P|3!23YflIig9Xa{L{#-Wzp%>3(Y=suS?H$`T5r zZ)yj`Q+dt|<_f!GYbzX;mTIEtAB#7K^jFMfaN;DNsTy7@bCpXw-dS-dw~*pk{|b*> zdG^T+2JIjbyP~D{U!r~m;TtE71J-7UG|fL>Cb)gKAUW7&?0B|V$^FpXUU`Q-_z|MX zeV#YV5>J|tFP*-9FY!I1^rG-|Z|<}xexIf{pW3;tc!%ESa^-CV_f*UPP0Od&S?pM5 zRI`!SOvXBMi?+MbMa8wS50e*t4HuT*J)gW&-)D9A+b{Q|>9t+V(UD)Msk0#2pgdH7 z)tGV{KHF_n;;;b@+Frhe(v3s`nF~Rr^3P3s zb3oKi=z&A+&Sq;_loxqB)xYREJp<*bMY06=2|xWi{zj~JtMHRY&zNJ&lj8^8T9y?& zkFD0&g8H|Nu}+mQ87<{6g7SB{1v?jUTo?E}_lkAD6mcd>(jU90A$Yo&VVGSEpHoo4 z7ct^<)ci^*?g8$+^Z<2}82}3*fpL#}@D#Ag{r@KYaS%N{V%Y!K*btG5@}g=#zg(nBQ%<3}4tTWH748qd^O@ z8{nn+7S9jX<0$UQU_5<%S_03#{yP!jcfH|Ri-p?=ySdxM>*~Yf_4OAe&)0iwQ`TOF znGow6ap(6wSdh)of~m0Az4^rsKB_=?PgdOK*^FvvXpnr?`YeUCGh*GBuYX5W^wKX| zkKs6klhfW!?|KXDII$Gb_GBm;(MKvhA8tlAa}KfzausE6#&&fP2)aK$xSQ^7e|qr# ziH%Kmjk9!Ci|5lwH6CJhW23_5+h+gN*Vp$ow)sgooJybr!wyThw;aWnI-qXGlVvdD zZpK5zeUDua9Eo?o+T;&SUehI>sLby%-g-O=ZD%6r4W#L)llWfbc-&W;rL0(9WFS%q z8J_5?SHpKQS^gQ$(w|X#G!*xiVc;EalmE?sDK(}mGrCU`w26!vnvfVUS8;+R?6(U+ z{>J~fLSV4}B>(?~-YQe{@$nI5{*Y(^PWxWL+qvv6ofi=;s7=s$gp5v ztFaodK0Cpt4thhF?TZ}s_-6JY#=oB}~TP6Fy(R;EAVa?~Qw~;&Z)=q`CR|w}`g52SocmO? pFFDd+(fs?l{u6QkzdjnrbXU@(GF@ZZfV79fR3B*F$K10F`ERx(126yp literal 0 HcmV?d00001 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/image/Logout.png new file mode 100644 index 0000000000000000000000000000000000000000..001dd8a5d02eded699f271d3f87fd677d0d02276 GIT binary patch literal 24467 zcmeFZS6I{C);$`1Ehqva0!n>_SCB5!lxhQ{OGjE1M4Eu~8e*qJK&46xMSAa@sFWy3 z3nh>MQCjFoNq|7eSz+(}JBV`W`9dh5?=a(7OEx?zZ9xUJOpmglol`R8wm96fqe;KlvhYZ5oPc#j@CTJTv< zXct-2b|&^w*QX!49H-V&h|1n`sW7r_FcQ}L#iN8;68XC=Oe&hiI*>#fNb1Oev**CS zMCPoCw%ErTkh&($JiMrflvc{^Ns4c}2tMS^lZ!)B=h)d_23Z{OUBRi}XAz4qrEH19 za*Mna{sIro-|Pt^iDW~Y>&Mie#~{xyGcBSlSD!#uobJK_fBAH3iT*3d-&MU5 zQb*m)jg8rc8C|oU80v{zR$u3kvQ2H$qW}KOwfy}2aQ!sVtV&}C6W`KzU0q${dX^## zOABWi3pqRYk2AjBq(4~xQR@>_Pp?rT^7!zudH|tDCvo2Bvb!xuG~Y^L(C=?aYVcd) zmVB3BIE@7a{Xal}5+DPEMam3&0iUNzvfIS2Nb zaGjFRjDMTKM}I*xRqwf_@=_i za4GU(&a`*mgg<(;qOX1CM=Sz8V(r~?LH_CHr~}ppzyJFr{gdPRWbBb5q0EHPfD~J# zsMqKHa-HEW=_etW&sys;990dG&g!*QMq0Ppd{BzGA{vA22Iv*W7}gF2Zs( zKhbo{6|Z{I7menFdo>&*Z;x-^wDz1GmUdhn&*3vbUz%8zP=W6}3Txjv#fJF1CHor% zm(fZdB?Qy{>gXdgFB7GlY|9U~`rw?wwx&!i@M8g<)) z#Q7zusk5EKiW$)gGj|(avMl=Tx7x6mKKgi2&yF-~zSh4|${?f{q&i|@PjXmPd0MnS zjppQ4Z3*6X_iLcI@obORU#KKo4pcdo%?@>S&R)564QyM$Qcs;-Ta>)@Dt`5f8%(WR z#UE$qpxj#%=XDf>-s1~$iwXCR|G{&O2yb$V&%ZAZU7zYOG_3IPJfNR;UXyZK>)xuE z#*ji@V`C%3=3xFFtDr`85I66+5rs30@cp(m|Mn+cl`A7w9rgyw7ptE5hCD>Rq%cag zR@bZ9|Js9jtt8A zA*g2ud&OMFt#uOr{@-R+ZVL~o6aEAQLaMpkA~!h3UHa)LheO%kPnq6#w1Zi=e}Dzy znG$Uq<%nj1`xqsZtCDn8cfPz@|0&bg-W=#{-y?StO(gG(8$H@p%8`28wAv^(8RV*c zhUfZK@~C%APP#{o?>`IO>l@vYh_%o)C0^8Y)DBTk0o}S6DiY)|<&-R zeCB}nMDrt z#Wy5qClBvHy-`h~iWA43wRO-Xzdb=df6o5nGZ7iHJ(*(W4}V3%dJF~`3B`J~7xs3a zRmVPgPx9Ik$oKdYz&fN*xm>9&xM+2HaY?5;7hCQ38rEdK?IE7u_h96oHXwcJaCcNLNyA50?NDHHRR*gtLofp*OoHYiH zU%$PPbC61jHsCS@JI25N=W}DmK|7nixVu)6xJqI|!_NQPAE7>iNR+NNJY&^BMk{vI@+6GG0j=OY^(wcyrr} zQq6zt!kz|CWZtnS$tmWx6_l)DBQpeJxWT!eA%AaU;k;qfn6uZNm7BZIQ;~U|90Rwv z)(!B!JtSVZ`>P`S!RC_=dnpwzkDidFSH~0g10Hp4uK!%Jw|~_0jpfyz!}~>yf;g-y z1I;Dv+FvUTOY7^b&I~@kUDQOfarxwkgw>Yj!WwXL#kBh4q?!cHhiZ$pN|6`^=etx% zLBFRypU!_aNV;BNQ-^;>WqL)iZObTFAJLb*Sri%N%bzFR+GvD%;_{Sev>#BNHRruIl|C&`e+v6Y8)~Bu}3jEyR=C zw_9TUds|F6A@fu4$3u z9KsedE#r&+(RUR}fIV3r6$p50L77YS?%Vx-xWJ-4ACGp|TGT&#w7)y0hEDUJV3*6; zL+<``oKEuK;k9Y>+09r%Oks3r=jsTd!JhEFmAaVe=)D+Fj6*x*+D|gmxjR~%zl17)O+Y2j^SY|%u`uR*9hwB&$ zCP(hh+cOdF6OHVBF>rTlo@f0pd{=Z6Pq+>0} z7PVKD*LT=*w(TrgEeQT=u=Oc~RObw4olDI&T&YD>z z2YJ1^Cbd*j7y4B7>5q`uC6(q-Yxsn(jtVrcQFSgUW(F4ZU_26>5T=uE=l49kAKuOD z@a!a^-kImMa!m`VapIXLBwMS;S}T5J=-F+JT4lqL2RUeTN5M&&c$VVS_<$o?rYtIo zSKcY)p>G4Gy@J%UHt16;UAESrAGBE^1jT>!V_Y(Z?Bh$r2*neOb#{Y6py&kK<+4E|h{-%b)ru(9x{wu!g2g}>jzh1FK-tZ>2Ghqp5tF)IC z|784yxLQ$I=)K&4<{QXy#RmL(aT4SQsi;_eMdu%lwjm;goZ|Ub*y@ErZS>P0oK}>- zq}>6)y87(q)2g1@ip4^HvRSJVX(G$p@fPW2{Vq}g-J?LTwif9(;pTQJ?fFrIwQZW& zz0-P*v8ZS|0X}gK;CqQZ64Q23>m1qj)`DC?n`5Glp9oCy1ba*id2wmIOU%5pGzV>j zHltY6N_)dz?8RbKzG%wl+{*^u38UjaOXr&HHS9(@rtv6csN9qqeqxJ^zb2{P-pj&7?4C zf(jht%ifX3pds+txn|K5lWIU zcl|cWJRr^Xmz2Nr2F`>LRdd-7<7)JWqS%qYrdgD2(=1XG)9W@>BN5Hqr|sO zedbRyd5wgl=GHv%^Hxh5UpyKYggW|62KVRfqf4#KMO7;Cj{Z^_Yo)a~mniqO_hmdr zagkcliW}c|+!hceseZaT{3960zoRg`S0DZ;8OaNRi&9Dkq~vi<*^TIE3D}Vlovq1Kg;CD0=%Ky) zGhXPZ)KQu7oaU$hX!&ZnrT{S>kV=OO{y0Ru&RkJGbV?WaRNaRh1+0rNvsY!oq?qYRbKeOU0ueG%3x# z^p-AF^T8Ya3De_oJ~fuc=$i3OH@sV|1n>4`UgZVta7{j#Z0(p|%G7pf(;6R(+Wx&} zGNtGny|s<(SLwMNxI3GOmZ*CtDwLoSGV@zUA~s!T_L-{6{-Cti%=cMbtND}WbF_f1 z#vP3OUZ?29Ug!9(ceZg?v8a(Gq2PNtCZnc{r3>?UaUwoVG+S}F1p1=d$^vR-dpQcH zFF0qQy3jsrdBQR5w?xc)gUd`9CyH#L>T!tzas6PeSw~E3-mm6@0aA?-gZI~t!~|QJ z>&&BTI^E4HNF;f1iimU}|tZRqZ-MK%=G z_*_{l)BkiihJo@x#*y<945`ue;hz{)veP~_*%e_}Rbv#G>h<|oi{H#sot06iHm2zv zHiK~F{!E;}1;TdsUMH*OyLYDMZu^)_$}JdWV|RKN9zLO37tAUvRFK*eZ*F~YLI>F- ztK@%L%dsb!-L-iAkw`SaksYEiN;O{bqpW3psKky>purkO75g?^>$J<@m06Pw!Q*pM zty^}iclCqU+9o^RFycM-7tGuIEQ<0f~Q}$nNo*yp48aen{Zc-dR4aw_?Hg%UO z!DrTcdczU=X$t_9W8{?OtW+Xf|>Bd^0 zh+;Zd)yVs=>SqZ_!)DNuYBd!^kuK)iY`n#rP$!7|l`$3|o7&PQ=$AP04xB-Cnf4Oya6 z^@t6F$vigD8}JcLTRhha#|XA8EPZh#k3#BJD)-R0zXb~(E;6VUDUo_Z%GMwZ*fped zmo_W%!KVrY7;HY|usqQF^av*UB3AN)mRz}Ip?!RU*5zkpoNJkUjabyVG)oF3=Xr}O zwzR`uzh4WH=gB|rYKP(sP%jQ z`-d=ez324w{$^hcGJRukhZ>0T@SGUT(~DVk8+Z_6U?23f7j?S3!)~F5# z|F~>M3tiq`oa4?Xtqv9R)VA>Sl+ZwV6hC;F2P-K_Y%Ru3^CZayn<&b)fOSg&3MaQvN$R#h4~bDkQPDlP015oja* zI6j@e8g=!&+AtF5#BSb&8&gFU8f&5JlgAwKIt~FE z%hkrs+qd)}$7fxY^ch zSz8Ll%N4>7auT7E!AR~^bNggmna@u`&|b-tZK)cM{^VCvx!fLwR`AnNgVd~*qO!@y z`0jym%3y2W+OX1UeUXxAG=I%QBj%w1+6Id{JqkQ$MSimaQ5qs_w0!;MRaC>v)_CRin(?y@pXE91x%KK(r-& zpPILCoh%YSyA>^qt6)rf%P1x7iUo4iHMhhd)HLY%Z$}e8#!MoMD?PK8*BAjs= z#p!`_pVniI^&{Z>)BNiFHRSh~Jin@Q#wFk-YbT#9?d+!qvp*Wu;Px;XnsIkg>d_*t zrMRMt%33&t)BjMD6n$Mh#W^I4MO<*gP?e1$&v8#QdbMfA7T2qQVBKL+-nnULt~C5x zf9ZgNrAd?m9`5>d>mK5!Y!r^V?B3KN#6LtZAT!%MM2j!u^6O(qymEzWl{p!%R%q=)-HYUW38)3UWo-{o}#k|y9sfNf{p$-EI&BR%#A%{!g!S{jk2 zQ${GMPM^c2k{8O`SP_eV&*hy-%O?@(&t2S52*s7ODczJd{2-b)6L zarY~z9|WgyD5w<=_Pk`?+3ojtm?OTrGDWv(@Y!O?=UqH1wFYY@@s$T{Ec_SYO^Y7u zquDVW#2)~@@ewHGy5#Y)glZpV+1%fIV_e3$x)Fo=DiVsOW}O+By`Xyw-sy+Etj523 z*#k#q7)svPy88wJM0JJ)=F3uCPmWdB3l}lyIB1)FU(H~ymGlG^72^2rAR7q_6(;Oy zEMBy-)qtUone)ye4?8~M=U#<%%(;f%SGV(2Z~FNlx$?P5lt2%^x!7^?!bs{?vh4j@ zInlQ){I&|?>zQGEE)K>i36s?nxn+PI&*VOoFb!y5c;o!XtWIBh z%>3T@#kFg8Xg`9VTMtDI`pmXT+&p^BdyXU1rom{1xKxH}-Fe2sEiVrEdMz8uk61!@ zg*}=BdNeFXxp-@wqr_c@`tfYd6I~>qO_T55y@hB?=X0Zlg_8WA#Jwoh&I1kArLx~z zQdg=!H~4-2Kq-*bI6WoGHMCZUD)B*8R#r01Ev6`V*sfc zqmoKl(Hp+DvO>d5Ws63`^Xti*2Yc$*aih{&c%93yjBesAfhoM2*FVE{oS?<0jEQuFEk` zT!QP|C%P5g-E82CaW2a$B`7FLl{g;YxHuFe?mhEClY{rM)(zrKZ@g2^`v_Dz~>{g49RiconSXti=P3VQk`D zXsU9cm-NEZ73KFLQrg}>bG#Z$Bw)tSCTy`VayrIs;yZrQEmJ(E=R|w;GBXKqh<{A2i2qnv;UjiS#RGKY;o&<)Imt~ zgVRJM-@ja-28O+3-ti?D;(O($SgPA>i2gv{Es4|ZZg-XcdT9Y1% zmQ?e{BHqI%|3uW7SfF~}-)g}9>wh3Ex_%x0=H`>b<_;*_y8ovr`#&!xRD7uCJ^%Uo za6KXKKb0R!laOm{|59}ScfE)T#K`kMUI6+UKK}3e{67QmziaZ}HTmC_7XF(G4hzbE z!~VZv|Gym}{5KW+|0xv|d#?h^&=+)1bKs^Od3mhj+3#-_)lP=1bHFZ{XPl=$(BMr3 zyu7*3(ujn=H$;_#j+5^joL+SNnZyd)BTIaHb!b>T`aE7=Pfu@M!5>%c+_82v7($2Z z;+LcHp}xbW*_ttY4Jk(ZR~u4}K#&X~ zpAF!_N6sGp0@x(2-);N_QM4_zK^~Bg{{3&XzWiUb{@)Jf|E;Tg?k5X;ib?WrbQ>^4 zEUCAFPS^hNOn8X}?ilq%Nt>?F9%BO)b}EI0c=6ZC+Th^1J|sVIaoC0I;R(?ab>ka? zeKZOdCF!a{pp4XIffy~BJQy~I^3sia18?1G$8v|uq|j@j+f4zp@#a&BsC@?$Q&Wk- z#>t?ilBwEZGb_2KaXJ+qB{vcd{^j5_ocn61VHETA2?{-5I0%4%*4x@LS85c#a z9-!3@SQRD%?2Cb^Q$msk_!f>^0l*S5T?VJRp1FAKa|iZm>+YO-eK4BWzunTcWO%tU zMtS4jICw)(VE9B|PPE?m0Q3Y>LG0fpRnl~-BM};UBU*XmyZjqc8R{Tt+@ApR{3(sD zrqs+f64QetsmjyuWD=ZJ7LxebiwGCRx+3BP0_sx$tc$=7+ z$u}(nvnRKpX0&yJ&`}790eGXI8@&4wD~uj0Fh=}cnUysq*oPe&YM<&r*druruY^K@ z>1x~$?>5lnzh>dlLh8bGiWU{0Yg(?PZLu`IVD!Q8gqW)w}mbRI945s`az4#~oI5>|OpE_c@a|oE@Xe z1?cJtO};XwNNz?1?O+?liI(9FOTfKd<<{hf`8>Eq zjS1b#4p^>0Cx@uEB>vd!Q{xX_Yw_P&!EXz8f8HzxmezU~!Q*>OIn0Qmz$!rRVAD7k zQcF}kkTCKX@H=as;Z>|2kk?JRdTHc=V_MEPiea`!hezmUibkRu5U&umxndVFyK&KO zjf7F+%t{?0nr<;w-EQcU3p@jPK5|G;ATNNe4Yc+fb5OsTe6;`kc-~FbsGItjd&}pa z=Vr(@P|0`%ZdxSYR{N4HBfCRp5=~>-UL?rWMwIrI~z--O{McbPEN6U@*<__^;3~zTrk+; zRTn2fkaajwfz4A=mA2c*856~)qS&jlJsto&7?Fg*-64|1RkiV zEQDmFVD$AY$EsxdHZB&9uF&fIg&%sEI!t~s@NcZDEIaot>r7?R zRcWWu#PTajr?XClGo1NeDD&Fw7|;#j&dg)R0vZ-{F!%AWLS0N4Mq7gry2eeu)Wif0( zLBf#*xkMgiY-RS?g22jJh-Mc$$?J0;LCj*(pZ|W$B)rJj?%F>>B?9|EHp})t4j11K zrjoG4Q?b_%mWr$NaX>*yBw``Y-PP%Fx20{U$N$x%`j?YCz)Q~iJL@;@zw3}^9N-fY ztw%?3V>A2a@6k2`PzbU-FVNt0z@?a}3MRc+#V(mig2BsF!G|o|?)8rl#9RYpx`&eG1AcR> zyZ8AK1D))`Z!AI@oK(*5wF5FNL*XzPwdhw@HvqS`7jk0`R+rs@CW36WH5t4%+e#Q9 zs)7^6Qq!24ji zR*o0u_PU1dxAh`WoEpx>uMf8$EoL3j6ia5sl!#EI7W0Yix!fanDh*6IAgym$au~>e|}5Y@}ttkO6vuHYt(sHG|DBiTs0Ii z9PJolyM>JTfp8JvfhLH_MG{PFY5bahTOnO+-t zMl=n!oCeR`avu=7e6)wmvGne~+}%I;bOt%GiIB}6iEk7J#cWF$sOM!AK6S=eI0x%H zf>*c10x+-_Q1-q1R1)v(Gkmf45{PyVo?3hblIV?+2H=(AaEuxeGwgt`cW@F>(>tiW z)uzC6pX&ww?)5NPugkrT^6bq@rfm%x7z8g@XfhM-G{aw$D!x3cDObe_cHoYvuWh?T zeo+kd7#2D|wR=I+HCDO%+Ss|s3RA1Q@}YOq9$1q>7U^12zMGQbGS&6*EJ5==%T13% zN;D{q!BFsgs!FgQWvnlBWGlc#0DZKYbwi^mY2F+vUV0JHF$t>l0+2C(4FCEKl1=X; zSop#0fKd*Emf%&%pn4xF zScjQGVWdKdD1l;v9YR8J-*zP}j~=MIegLv9kNoe4t=S+M;s>S#B};}k42wmkzM7DUk#)q6C>O?dGq%{v zZ!AXZj9yQz@Did;5;;vb;xm1e&6FocT5J`N;b! z(T?uZ317K?4BIUrN@g_lY*GG3IcqvQaPlBr zF#0=UR^toL@E&U%`twa)?WZ-vW~NYX#<5zV)?o4b!QV~^e+Gc4b#OYe?;VFUYpuU8 zE8a^I7egt`U))b{yDR4IVFbIVmr zv%=p*DG)+7l|Nw;;BU)Sh03P|mg6)`ysCvrZxa%G4N9ldQ zM$lPEe+qrR@42m@WxXz#@p5aJP0(wZDiV2#u{c}hBz*4ojG-oPe6$LA)LM&Iptu=e zmPY0D`4@0-q=~2J7!dI7Cc^ACl%r!b+qCbqR;(A|L({&x67mjY#=ho~4mL^5%eT zeQfsl6Z__YT;cZNi#;9xnCseh+`YT+FN)jp5h{+MF(07e`6r5j+%#WLN&P&@MXY*6@ zi`t-)S+lw(Fmsp5s#dWqcHQvuhO-jEAjL7>Q#$+^rH%jKnJP-!aHv_% zP_6>v<+S3@l?g9a>Tlj?@p?Cql_xd@1~T^XY^Z`M?U%h*gzD`!>;U3h-C8=5k!M*u z`x}UejS)__yf%9ji0U$UtI;ZkCHt>fh6Q`Eqc{db1X^HcEnkhgV4$~Vc*XM1UHB%0 z-}G+u>(46@k<_!9uDbW{lDuA{4cBeO!|}=a&q~ca35M!5fx&Br?<$lcz4-}Mm0Tg) z6aIbi%ivS{8_&W94upDPx*zY#Q4(9Xa+qx{o`wCMPF3ed&i4>P5I@qAd zIu`v5bSJawZqv1vVhIcxcuVUV6?F^3$W+0lpaspCgPr2u>Wov;1p||NVfh;|TFJ8# zqBwh2f;MaV8gQL0aH4k9OUq+w?|>mMH}_X;uG}FTu}IxJVa$5`d!uN@t&0_*x2=Eo ze^?uPupTTv;&>&r%~M^o`f=nY!BQuAC#v)H9UfX~vHAUQt*9M$hwa&u&*AcPSvSM{ zie;70T~+}NIUkeeu=zc{ZNcW4&_9P|Wtg%OfxTNpk_MwvTNc$)5ncQ9SY9Njl`^fS z3?^aj=r21|B2-8dl#TA9<}XJ7p)EmaL5-kI+qBCk>`iWO%&3bmjy0DBnt$8W<}E3X z@oZ;jW-%OegaJC9Q zg6V49rR`|pE`QzdGQm2vsy;Ha{5ae8T*epB`ycoZ7Vu(Oe-}eE-NJUKFXuEw{leZ zBZq8YzmB?23KR^9c~ER{cEt?G7JH4piG{o6fbKAZA)Q_roAhbs!@g62YlRgq3^4Wu}YQ{xO)pYn6HZL`e-(@-+u- z3JB|Dxa0P?x51=n$BlOh3ankARh|T+^^d;2K5S|BzM=h{-9AiSClAD`s@54*-*IW> zyIn2d;=vQkwFiOl-=^OS@YMnMYUrFSq{Zl1r(qy3W7=B=TftxN&MI-hqat^@&emFb zY|d{_;OvSk7@Uta(5M7j+N%X87~2upu>$(g4wuXm-C=CU9&DPM@cqalinfO$deZCW zZUaNSy}%`0*xf7ic@rW!`;C^#5~t}nn2)lZ%;JZI_=UvSiBYCG;poS=2aHuxLpFZs zxjk zbss<(T;BV-qvnrVE5`)*hZg1u;y(DP^PTk#`Ms5Zi&#nsI zMU0J2U?AwS=)O`@{nPN{+V)=wBj+#qr51ey`<;SjN1D5>Pda(9F`h=d0(d&SRbT)s z>`*m~Zv_)lGx!7Q9#JcCR-_dRNP{@w(3_kKyb_9t2N}Zlu2>3vgl%_ir{x{5l3zo# zRJ#Y|yI{;uq6e7I+pV}D1t~vdEKyF8-MG{2e%Gng`n>*t`RHe!Cv)C?QqE ztZOL6cc~IVr$m|K>@#=ouh`wGrA32m%YD(t&aG)Cgj+h;WaOo{$)`oCG^40D7VG$cE4f8sDJSwq#s{E z7cu5P_g1?{z_PoVie96|G*gAqjrMjb#~=@Pmv%(yPBK8foWAsLx#Q!%?~=%P{BJ|k zmH)VuwEyEp`Ty>b;rK%zR+obR>bR`uRQnc4+Bw3=kZUaml%<6zg~@wB;E@b=QtAEj z;;%u#BBzXiadlar`F>fu_V8-pP|pdaQsPx)AsKh+U+1~)(~X%Q3t%$V09={i$oy`b z0H;;=sqW2Oy-|DX)rokOc0NbY&IAhlQ+rY7$!B^emKI7`pts>V;1KBZQ|C3i`2-;M zkJ7>DO{w$4n~AnT&ZYVM0H`)DS9W*t8I`fJ{axWk@7mUqcuq-so+JK~j`$M_GK{2W z9GLq!T*i5aQZV4W1>z(ZH0p{gwRm?2mM|26E-M&7D!docOO9(Lm3ZXX_>EoW4V?Ml zz`_Wz&=SAO2rw|>9k+s{UYepD3;=ufAzCcGTB@o6*R2+)IqqX^M<8a0X!)iT>o9I0 zXco|)V!>B@zU&f_$P+Alsin;uU6o-+A;ri3wJLv$E}mrONs3lG*r^P=Eu0!K6;V)H zDjCJE*1DWY*E0?!gD?ai3FsGWL;l9Xsn2e=wyZWTY4e?elnWfjOi(#}XQYIRNP62G z5}vCd7i@tW4B}MILmnPKY(lpl(ick+n7O<7PIP|-G~veXF-VZm;aalD1#Zm9f{m^Q zix97JKH(K0TV+}Rsjx7h$uALn1qA7#CO4l+zl1{8Z+WybY~b6wi!vAhNt3v^xx4wa z>%4K!d9$0RAzRA64)n`Wz@;&wi)-Nf`+!kDiNtLsz+Mej^{J+~xVRX(xw$dpI3=x< z7MGS%$j(kq-w~OiV5-h#vxTy~hFk?Y0=;heYz=5iC9ab=l$OiyC@$t_W7Iiqs)s60 zLK@ZL=~h0Kevm~5Z9zXVKIs8?;{`CCtd9cx^B@?3j^`|%aLSI_czv@%y(tYvUGZ3H z#b(@kg#qHpN4kex7JjfV8RNV)Kj56=R;x9bt5-zX|MRMJgM z-fCwvs2*LTpZ&d#9s8qM4M0(nQ{!i2jn9(kxpk6vXi7%#eoWCx(T-!CK+Ku^;bCEu zioK44-0TxLOaw3Z025P9JJ^$|+eSoE99S;}zH_8gOn9JX4DYA2`q7>926VWL0c2WQ zu6`OWa~m*!L=2!0QbFhT$sJVD!o8o#a$+T57aDwj9y!VLJ{@rMKBJGqa@He41uZ1U*bG#N*dr^SIom0z$t@6WnlgqfYUs1i^Gk&g#!7^`(rM` zjexbMY))LO_*ao5fUqs_<3Vijg}k5l8_g%83Kbd7>zc&Gc0 zwZvH>CuIJC2^~sp-SlW)@AP6?y0c|X`>v__aZS^K0#uT!A-hWW!6p(PLRDI8jadUWKeaG+GF@p}K1UZCS>$5c;^Fesjt4z%2B{(@|YAJ!Kf zyXhJLJ!{_g_|kz|Wt|xccq`czHulw$ny;q@pa0-{6k zq%e%&8OxMJaSbMB-Ucc15>m-ruvtdK8-xUg4LUczxap>1 z9?l^*P$-0(qvyrl3VKh`ARMa8V`4@zHx_@`^!qJ$ZGdE}f%wh694VN{_Uo9_dknbj z76WtK*xe4e_3>xDH;5)_JoAN4FW5?+L7t}{^78$EsTajDEFo&8xXNo z?5;VzV#{0yIJ|O5wIrfkNpv>RRD4_!B#CNJCFENOPg2|x=()!F6anB-H$NfWr1wR$ z{^0m=^hsG(U#Xjj=y;s%+XKSLD*&pDeIWhl9AZqvf}fr0TGry1N61c2l8xA8{Pz|- z=X09x&%E)}mXEF@Z-Mig%OpRV(Y?lsXxGS}yvU-mb)WK^1)e0?IG>f9p>%ZD$($_) zi^VFe1k;o4-)ffYPb+^2>BXR5-)k!YFhcT*P+LP@R8xON}xRzWFMWH=T`1cS2=5r+$Eyt@Ztd(SJdjG@W?61K6icBzF! z+~U29tJOi@Plm2CP&Q?s{7lk^xo>r#Kq~Y8#b;N6%|nJNu7FgdbDVVPDA`Gljj_j! z-jyhB{*>`v+W}DFI&}xFrVlR7fTke#fOe=z;4mctMsSgS$%OK$^5*uyC^1H`IXO=N z2Gfh$}-2xOckqT76lxBnKqKMWtFem>&aW2Uo1GozOLZ63|lav3)jJh#E z!EXloTF;A2MJ9cHbuv-q%yZ0cA}?SaPDaX08QxL_WwCm~5AVARGqdp>9)FvAEuUoo z3mYwev>RGocY`!!yh(_EVPz7F+L=NuykwNT2lCeYnMPORMfa`BCkHUBpfQCtkSNVq{cs?@>115`--9c*gnfv6JD{bEyr}7Wv z;pIZH!+0(Z0f)h%5#${VU5=sS7M~$Q%^VQJV)WL{xuj-98%z_0S_0Pr27rPtK9?97 zVA|LM5H)XMFpns&K)>vzG*=Cjs6imL#eyVnNIrYy`MIHYJU1#UcBWsP%Ay1x)1obGfwmOiad?hi@@<`a3nx4;n~>(;bV8<_RE zR9}U+We`yMaR3=wldnRwi8MB_!G8~9v3WpARPca6ibI0vMFb$;ABW2f-t8KF`@o;L z|I9mF{?8D@|L#XB8!Hc|Jo-mREy!mZOOlh5E5jgPybhr&L|gDP)UQMOJnkPieqHA{4}EavC&m&B1` zBSO-FLsVS!9=5R>-C0urXa~K%Q_Dvh%W(ht*js$VmcQ=ahhrHTF+bQibJ2u+)}cDV zXak$aZbQ#&;ymJH8V?;O5Su}{34hrrX;xd?R!mIABDX%2Lm6aPP-PtLa$Xf#;6y|;wv zy+iStZ{lgugK?Qa2Qy(u=64Ul8)Tw0P-$DIMowgQSK(yLM^K{_cp=l-RZ8Sa-_I7oYtF)8MzSikNl`s`0q&X-+@!5PKqMSA->J>lfm`iwl|i3Q zV*tz*KRo#TZmFC2KxgVLxf{i5v#U4sBs^5BOkotb3`efi_zi`XP4FT!{S=duCo13m z!1snzt&bC|d!}eV-SaX0juox&vR^TOw|FJ8t}Vq}p@+cafUgEcd^@LM;#0aWY%H0U#5JtHnCUbGK z=?j#lH=*tm6k+l{s?`JFlb64NXsEJ5A4+{hZv7a^ZE9gMi7c{4Q$~IP_*ax|?m&$! zhrOvm%@SXB0Gzna{5>DYWb%VbHx}xM}(yAYekn^)E z^y{@nLwF@?qCnajm1uk^pTj(_AHBw^k%n`suTyR-%5kpzwURXk=1NXUN{WBm%+|L8 zxTbTNU+E)Vq)yEB*WaZOtc@!4)SR5eiIy|9IF2#xCi95G*_C+>dJK}R_Yn~$nrW73 zw2&;4J+tz~rQM7;xcns%gW2xU^~reO28N=+@oK}Dnhp?Wf9~WxH+~{uOY)krz4}!r zq8^rP@Rf0?p($>}@z~L&y4dPMx}5$-c`q?}t@x~H<=A!w-FyI(8xg(Ligt{R9KR}- z;tRaa>xV{%K{iZxGZ!|bf`oC@+)om1jvQi>vZy}3KLX=Aq^0HZ}=7EvzW5YTGoUC!r19m)ricLN>%jZ z&Qzzht-jrIh}EF|EH7lGRk22wwnKWFhlJEndK$*@>P^5AP_SBWsK`T>7c2x0763kg zT>*P^;574jl@5~#%IgQkdTv8AuTN^H6Z^Eri$F62I9o5JeQAfV3|kC9o7sOSb0r>T zQ|X07`WmhBkaaKQ5)#@GjSk);H4;yu0kzZt(~%VLb6O1ez1a0_8!$B`h)h)@$Dbj5 zEhbTRF3w^&kz|f!rL|+|Be$%v*%q*lV*j70uJwPhkMa~cw_aML%j2VM>hu=#b_)sP z3_b?mwl%g_RMc%$UYy0P&|=eSOZBR9VOhZ~NAT-0$L$t#ucJ=YOBnK2G>dg2T=8Ru zK=(#Zb(4tBE-0Q4Y%J6aYKo~bu3twU{GeH%`dpIoe*Sin!T8XWtrL5J)?C{M?TcxV zYfZT@JF>&O9}v|ucmu(a)q-4@+9d&gMwONQhhjxVlOA_AT27%7d$7~AA)8s^DC>(l>*wa1lCMSr^x;ve{w*@b z9r$j4Mz;NGa6CuZ%;?aLa&dD;GUUWRcj_$!^8W32`wyPTlwe_Yu#ANA*UHb4{8_hl@uiGCa zJHRf;Ii4+HSS-brE~;(F;vl->9?V#PG(x@9yW@}@b~1DasICB~%8X3tQ1UsM3kn(^ zrtiIeS=f*z^Q*xXQEjWJd2jwySdCqYOkCmfO`T%-H2?Q0S^k&BIM5Ko^w141n=IpaD@i8 zhrml$HQ~X*`8-hD;|>oGH{#~h%)o27ZToYeM`57bve`a$;LGGP7dP4Q9ZlWazp-P# zKf+WTrmO$g92h7!>Li;1K4&-YnbhnP;~(Iw4jgooS?s?1)gEaVF>}cMlCZ58=5h8e zvI?Aqoi)(z9av|0aV^B3fUE_{;@@$IawCDxM=ljvaq3TV^JPGjBHfLm%0vMXYWqqh`0)26g0#oyiAR`tL#O|GmXh>H&I8LP3AZSSPq|V5S}*|IaD{ z%Ecq#Ve>vyUC73t*GMtS38s)`9fle81(7j?R^` + + + spring-boot-demo-oauth + com.xkcoding + 1.0.0-SNAPSHOT + + 4.0.0 + + spring-boot-demo-oauth-authorization-server + + + diff --git a/spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java similarity index 90% rename from spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java rename to spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java index 382a8b1f6..ed73b619c 100644 --- a/spring-boot-demo-oauth/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/SpringBootDemoOauthApplication.java @@ -2,7 +2,6 @@ import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; -import org.springframework.web.bind.annotation.GetMapping; /** *

@@ -16,6 +15,8 @@ * @copyright: Copyright (c) 2019 * @version: V1.0 * @modified: yangkai.shen + * @modified: EchoCow + * @date: Modified in 2020-01-6 21:12 */ @SpringBootApplication public class SpringBootDemoOauthApplication { diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java new file mode 100644 index 000000000..816ab0718 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLoginFailureHandler.java @@ -0,0 +1,31 @@ +package com.xkcoding.oauth.config; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.web.authentication.AuthenticationFailureHandler; +import org.springframework.stereotype.Component; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; +import java.net.URLEncoder; + +/** + * 登录失败处理器，失败后携带失败信息重定向到登录地址重新登录. + * + * @author EchoCow + * @date 2020/1/7 下午1:01 + */ +@Slf4j +@Component +public class ClientLoginFailureHandler implements AuthenticationFailureHandler { + @Override + public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, + AuthenticationException exception) throws IOException { + log.debug("Login failed!"); + response.setStatus(HttpStatus.UNAUTHORIZED.value()); + response.sendRedirect("/oauth/login?error=" + + URLEncoder.encode(exception.getLocalizedMessage(), "UTF-8")); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java new file mode 100644 index 000000000..1737a6304 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/ClientLogoutSuccessHandler.java @@ -0,0 +1,30 @@ +package com.xkcoding.oauth.config; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.authentication.logout.LogoutSuccessHandler; +import org.springframework.stereotype.Component; + +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; + +/** + * 客户团退出登录成功处理器. + * + * @author EchoCow + * @date 2020/1/6 下午22:11 + */ +@Slf4j +@Component +public class ClientLogoutSuccessHandler implements LogoutSuccessHandler { + + @Override + public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException { + response.setStatus(HttpStatus.FOUND.value()); + // 跳转到客户端的回调地址 + response.sendRedirect(request.getParameter("redirectUrl")); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java new file mode 100644 index 000000000..787c9f36d --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationServerConfig.java @@ -0,0 +1,54 @@ +package com.xkcoding.oauth.config; + +import com.xkcoding.oauth.service.SysClientDetailsService; +import com.xkcoding.oauth.service.SysUserService; +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:32 + */ +@Configuration +@RequiredArgsConstructor +@EnableAuthorizationServer +public class Oauth2AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { + private final SysClientDetailsService sysClientDetailsService; + private final SysUserService sysUserService; + private final TokenStore tokenStore; + private final AuthenticationManager authenticationManager; + private final JwtAccessTokenConverter jwtAccessTokenConverter; + + @Override + public void configure(AuthorizationServerEndpointsConfigurer endpoints) { + endpoints.authenticationManager(authenticationManager) + .userDetailsService(sysUserService) + .tokenStore(tokenStore) + .accessTokenConverter(jwtAccessTokenConverter); + } + + @Override + public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + // 从数据库读取我们自定义的客户端信息 + clients.withClientDetails(sysClientDetailsService); + } + + @Override + public void configure(AuthorizationServerSecurityConfigurer security) { + security + // 获取 token key 需要进行 basic 认证客户端信息 + .tokenKeyAccess("isAuthenticated()") + // 获取 token 信息同样需要 basic 认证客户端信息 + .checkTokenAccess("isAuthenticated()"); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java new file mode 100644 index 000000000..39ac77951 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/Oauth2AuthorizationTokenConfig.java @@ -0,0 +1,74 @@ +package com.xkcoding.oauth.config; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.context.annotation.Primary; +import org.springframework.core.io.ClassPathResource; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; +import org.springframework.security.oauth2.provider.token.store.KeyStoreKeyFactory; + +import java.security.KeyPair; + +/** + * token 相关配置. + * + * @author EchoCow + * @date 2020/1/6 下午1:33 + */ +@Configuration +@RequiredArgsConstructor +public class Oauth2AuthorizationTokenConfig { + + /** + * 声明 内存 TokenStore 实现，用来存储 token 相关. + * 默认实现有 mysql、redis + * + * @return InMemoryTokenStore + */ + @Bean + @Primary + public TokenStore tokenStore() { + return new InMemoryTokenStore(); + } + + /** + * jwt 令牌 配置，非对称加密 + * + * @return 转换器 + */ + @Bean + public JwtAccessTokenConverter jwtAccessTokenConverter() { + final JwtAccessTokenConverter accessTokenConverter = new JwtAccessTokenConverter(); + accessTokenConverter.setKeyPair(keyPair()); + return accessTokenConverter; + } + + /** + * 密钥 keyPair. + * 可用于生成 jwt / jwk. + * + * @return keyPair + */ + @Bean + public KeyPair keyPair() { + KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(new ClassPathResource("oauth2.jks"), "123456".toCharArray()); + return keyStoreKeyFactory.getKeyPair("oauth2"); + } + + /** + * 加密方式，使用 BCrypt. + * 参数越大加密次数越多，时间越久. + * 默认为 10. + * + * @return PasswordEncoder + */ + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java new file mode 100644 index 000000000..d6071cb53 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/WebSecurityConfig.java @@ -0,0 +1,54 @@ +package com.xkcoding.oauth.config; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Bean; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; + +/** + * 安全配置. + * + * @author EchoCow + * @date 2020/1/6 下午1:27 + */ +@EnableWebSecurity +@RequiredArgsConstructor +@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true) +public class WebSecurityConfig extends WebSecurityConfigurerAdapter { + + private final ClientLogoutSuccessHandler clientLogoutSuccessHandler; + private final ClientLoginFailureHandler clientLoginFailureHandler; + + @Override + protected void configure(HttpSecurity http) throws Exception { + http + .formLogin() + .loginPage("/oauth/login") + .failureHandler(clientLoginFailureHandler) + .loginProcessingUrl("/authorization/form") + .and() + .logout() + .logoutUrl("/oauth/logout") + .logoutSuccessHandler(clientLogoutSuccessHandler) + .and() + .authorizeRequests() + .antMatchers("/oauth/**").permitAll() + .anyRequest() + .authenticated(); + } + + /** + * 授权管理. + * + * @return 认证管理对象 + * @throws Exception 认证异常信息 + */ + @Override + @Bean + public AuthenticationManager authenticationManagerBean() throws Exception { + return super.authenticationManagerBean(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java new file mode 100644 index 000000000..11cfadbd2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/config/package-info.java @@ -0,0 +1,22 @@ +/** + * spring security oauth2 的相关配置。 + * 使用 spring boot oauth2 自动配置。 + * {@link com.xkcoding.oauth.config.Oauth2AuthorizationServerConfig} + * 授权服务器相关的配置，主要设置授权服务器如何读取客户端、用户信息和一些端点配置 + * 可以在这里配置更多的东西，例如端点映射，token 增强等 + * + * {@link com.xkcoding.oauth.config.Oauth2AuthorizationTokenConfig} + * 授权服务器 token 相关的配置，主要设置 jwt、加密方式等信息 + * + * {@link com.xkcoding.oauth.config.ClientLogoutSuccessHandler} + * 资源服务器退出以后的处理。在授权码模式中，所有的客户端都需要跳转到授权服务器进行登录 + * 当登录成功以后跳转到回调地址，如果用户需要登出，也要跳转到授权服务器这里进行登出 + * 但是 spring security oauth2 似乎并没有这个逻辑。 + * 所以自己给登出端点加了一个 redirect_url 参数，表示登出成功以后要跳转的地址 + * 这个处理器就是来完成登出成功以后的跳转操作的。 + * + * + * @author EchoCow + * @date 2020/1/7 上午9:16 + */ +package com.xkcoding.oauth.config; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java new file mode 100644 index 000000000..81754677e --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/AuthorizationController.java @@ -0,0 +1,43 @@ +package com.xkcoding.oauth.controller; + +import org.springframework.security.oauth2.provider.AuthorizationRequest; +import org.springframework.security.oauth2.provider.endpoint.AuthorizationEndpoint; +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.SessionAttributes; +import org.springframework.web.servlet.ModelAndView; + +import java.util.Map; + +/** + * 自定义确认授权页面. + * 需要注意的是： 不能在代码中 setComplete，因为整个授权流程并没有结束 + * 我们只是在中途修改了它确认的一些信息而已。 + * + * @author EchoCow + * @date 2020/1/6 下午4:42 + */ +@Controller +@SessionAttributes("authorizationRequest") +public class AuthorizationController { + + /** + * 自定义确认授权页面 + * 当然你也可以使用 {@link AuthorizationEndpoint#setUserApprovalPage(String)} 方法 + * 进行设置，但是 model 就没有那么灵活了 + * + * @param model model + * @return ModelAndView + */ + @GetMapping("/oauth/confirm_access") + public ModelAndView getAccessConfirmation(Map model) { + AuthorizationRequest authorizationRequest = (AuthorizationRequest) model.get("authorizationRequest"); + ModelAndView view = new ModelAndView(); + view.setViewName("authorization"); + view.addObject("clientId", authorizationRequest.getClientId()); + // 传递 scope 过去,Set 集合 + view.addObject("scopes", authorizationRequest.getScope()); + return view; + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java new file mode 100644 index 000000000..5d7aa5d7b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/Oauth2Controller.java @@ -0,0 +1,55 @@ +package com.xkcoding.oauth.controller; + +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.client.ResourceAccessException; +import org.springframework.web.servlet.ModelAndView; + +import java.security.Principal; +import java.util.Objects; + +/** + * 页面控制器. + * + * @author EchoCow + * @date 2020/1/6 下午4:30 + */ +@Controller +@RequestMapping("/oauth") +@RequiredArgsConstructor +public class Oauth2Controller { + + /** + * 授权码模式跳转到登录页面 + * + * @return view + */ + @GetMapping("/login") + public String loginView() { + return "login"; + } + + /** + * 退出登录 + * + * @param redirectUrl 退出完成后的回调地址 + * @param principal 用户信息 + * @return 结果 + */ + @GetMapping("/logout") + public ModelAndView logoutView( + @RequestParam("redirect_url") String redirectUrl, Principal principal) { + if (Objects.isNull(principal)) { + throw new ResourceAccessException("请求错误，用户尚未登录"); + } + ModelAndView view = new ModelAndView(); + view.setViewName("logout"); + view.addObject("user", principal.getName()); + view.addObject("redirectUrl", redirectUrl); + return view; + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java new file mode 100644 index 000000000..453b76cd4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/controller/package-info.java @@ -0,0 +1,14 @@ +/** + * 控制器。除了业务逻辑的以外,提供两个控制器来帮助完成自定义： + * {@link com.xkcoding.oauth.controller.AuthorizationController} + * 自定义的授权控制器，重新设置到我们的界面中去，不使用他的默认实现 + * + * {@link com.xkcoding.oauth.controller.Oauth2Controller} + * 页面跳转的控制器，这里拿出来是因为真的可以做很多事。比如登录的时候携带点什么 + * 或者退出的时候携带什么标识，都可以。 + * + * @author EchoCow + * @date 2020/1/7 上午11:25 + * @see org.springframework.security.oauth2.provider.endpoint.AuthorizationEndpoint + */ +package com.xkcoding.oauth.controller; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java new file mode 100644 index 000000000..535e36614 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysClientDetails.java @@ -0,0 +1,191 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.oauth2.provider.ClientDetails; +import org.springframework.security.oauth2.provider.client.BaseClientDetails; + +import javax.persistence.*; +import java.util.*; +import java.util.stream.Collectors; + +/** + * 客户端信息. + * 这里实现了 ClientDetails 接口 + * 个人建议不应该在实体类里面写任何逻辑代码 + * 而为了避免实体类耦合严重不应该去实现这个接口的 + * 但是这里为了演示和 {@link SysUser} 不同的方式，所以就选择实现这个接口了 + * 另一种方式是写一个方法将它转化为默认实现 {@link BaseClientDetails} 比较好一点并且简单很多 + * + * @author EchoCow + * @date 2020/1/6 下午12:54 + */ +@Data +@Table +@Entity +public class SysClientDetails implements ClientDetails { + + /** + * 主键 + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * client id + */ + private String clientId; + + /** + * client 密钥 + */ + private String clientSecret; + + /** + * 资源服务器名称 + */ + private String resourceIds; + + /** + * 授权域 + */ + private String scopes; + + /** + * 授权类型 + */ + private String grantTypes; + + /** + * 重定向地址，授权码时必填 + */ + private String redirectUrl; + + /** + * 授权信息 + */ + private String authorizations; + + /** + * 授权令牌有效时间 + */ + private Integer accessTokenValiditySeconds; + + /** + * 刷新令牌有效时间 + */ + private Integer refreshTokenValiditySeconds; + + /** + * 自动授权请求域 + */ + private String autoApproveScopes; + + /** + * 是否安全 + * + * @return 结果 + */ + @Override + public boolean isSecretRequired() { + return this.clientSecret != null; + } + + /** + * 是否有 scopes + * + * @return 结果 + */ + @Override + public boolean isScoped() { + return this.scopes != null && !this.scopes.isEmpty(); + } + + /** + * scopes + * + * @return scopes + */ + @Override + public Set getScope() { + return stringToSet(scopes); + } + + /** + * 授权类型 + * + * @return 结果 + */ + @Override + public Set getAuthorizedGrantTypes() { + return stringToSet(grantTypes); + } + + @Override + public Set getResourceIds() { + return stringToSet(resourceIds); + } + + + /** + * 获取回调地址 + * + * @return redirectUrl + */ + @Override + public Set getRegisteredRedirectUri() { + return stringToSet(redirectUrl); + } + + /** + * 这里需要提一下 + * 个人觉得这里应该是客户端所有的权限 + * 但是已经有 scope 的存在可以很好的对客户端的权限进行认证了 + * 那么在 oauth2 的四个角色中，这里就有可能是资源服务器的权限 + * 但是一般资源服务器都有自己的权限管理机制，比如拿到用户信息后做 RBAC + * 所以在 spring security 的默认实现中直接给的是空的一个集合 + * 这里我们也给他一个空的把 + * + * @return GrantedAuthority + */ + @Override + public Collection getAuthorities() { + return Collections.emptyList(); + } + + /** + * 判断是否自动授权 + * + * @param scope scope + * @return 结果 + */ + @Override + public boolean isAutoApprove(String scope) { + if (autoApproveScopes == null || autoApproveScopes.isEmpty()) { + return false; + } + Set authorizationSet = stringToSet(authorizations); + for (String auto : authorizationSet) { + if ("true".equalsIgnoreCase(auto) || scope.matches(auto)) { + return true; + } + } + return false; + } + + /** + * additional information 是 spring security 的保留字段 + * 暂时用不到，直接给个空的即可 + * + * @return map + */ + @Override + public Map getAdditionalInformation() { + return Collections.emptyMap(); + } + + private Set stringToSet(String s) { + return Arrays.stream(s.split(",")).collect(Collectors.toSet()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java new file mode 100644 index 000000000..e6e4f699a --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysRole.java @@ -0,0 +1,49 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.codehaus.jackson.annotate.JsonIgnore; + +import javax.persistence.*; +import java.util.Set; + +/** + * 这里完全可以只用一个字段代替的 + * 但是想了想还是模拟实际的情况来把 + * 角色信息. + * + * @author EchoCow + * @date 2020/1/6 下午12:44 + */ +@Data +@Table +@Entity +@EqualsAndHashCode(exclude = {"users"}) +@ToString(exclude = "users") +public class SysRole { + + /** + * 主键. + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * 角色名称，按照 spring security 规范 + * 需要以 ROLE_ 开头. + */ + private String name; + + /** + * 角色描述. + */ + private String description; + + /** + * 当前角色所有用户. + */ + @ManyToMany(mappedBy = "roles", fetch = FetchType.EAGER) + private Set users; +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java new file mode 100644 index 000000000..84a96411b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/entity/SysUser.java @@ -0,0 +1,55 @@ +package com.xkcoding.oauth.entity; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; + +import javax.persistence.*; +import java.util.Set; + +/** + * 用户实体. + * 避免实体类耦合，所以不去实现 {@link UserDetails} 接口 + * 因为有且只有登录加载用户的时候才会需要这个接口 + * 我们就手动构建一个 {@link User} 的默认实现就可以了 + * 实现接口的方式可以参考 {@link SysClientDetails} + * + * @author EchoCow + * @date 2020/1/6 下午12:41 + */ +@Data +@Table +@Entity +@EqualsAndHashCode(exclude = "roles") +@ToString(exclude = "roles") +public class SysUser { + + /** + * 主键. + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + /** + * 用户名. + */ + private String username; + + /** + * 密码. + */ + private String password; + + /** + * 当前用户所有角色. + */ + @ManyToMany(fetch = FetchType.EAGER) + @JoinTable(name = "sys_user_role", + joinColumns = @JoinColumn(name = "user_id"), + inverseJoinColumns = @JoinColumn(name = "role_id") + ) + private Set roles; +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java new file mode 100644 index 000000000..1184acaf3 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysClientDetailsRepository.java @@ -0,0 +1,33 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysClientDetails; +import org.springframework.data.jpa.repository.JpaRepository; +import org.springframework.data.jpa.repository.Modifying; + +import java.util.Optional; + +/** + * 客户端信息. + * + * @author EchoCow + * @date 2020/1/6 下午1:09 + */ +public interface SysClientDetailsRepository extends JpaRepository { + + /** + * 通过 clientId 查找客户端信息. + * + * @param clientId clientId + * @return 结果 + */ + Optional findFirstByClientId(String clientId); + + /** + * 根据客户端 id 删除客户端 + * + * @param clientId 客户端id + */ + @Modifying + void deleteByClientId(String clientId); + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java new file mode 100644 index 000000000..a5aaff9cf --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/repostiory/SysUserRepository.java @@ -0,0 +1,24 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysUser; +import org.springframework.data.jpa.repository.JpaRepository; + +import java.util.Optional; + +/** + * 用户信息仓库. + * + * @author EchoCow + * @date 2020/1/6 下午1:08 + */ +public interface SysUserRepository extends JpaRepository { + + /** + * 通过用户名查找用户. + * + * @param username 用户名 + * @return 结果 + */ + Optional findFirstByUsername(String username); + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java new file mode 100644 index 000000000..408414a45 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysClientDetailsService.java @@ -0,0 +1,67 @@ +package com.xkcoding.oauth.service; + +import com.xkcoding.oauth.entity.SysClientDetails; +import org.springframework.security.oauth2.provider.ClientAlreadyExistsException; +import org.springframework.security.oauth2.provider.ClientDetailsService; +import org.springframework.security.oauth2.provider.ClientRegistrationService; +import org.springframework.security.oauth2.provider.NoSuchClientException; + +import java.util.List; + +/** + * 声明自己的实现. + * 参见 {@link ClientRegistrationService} + * + * @author EchoCow + * @date 2020/1/6 下午1:39 + */ +public interface SysClientDetailsService extends ClientDetailsService { + + /** + * 通过客户端 id 查询 + * + * @param clientId 客户端 id + * @return 结果 + */ + SysClientDetails findByClientId(String clientId); + + /** + * 添加客户端信息. + * + * @param clientDetails 客户端信息 + * @throws ClientAlreadyExistsException 客户端已存在 + */ + void addClientDetails(SysClientDetails clientDetails) throws ClientAlreadyExistsException; + + /** + * 更新客户端信息，不包括 clientSecret. + * + * @param clientDetails 客户端信息 + * @throws NoSuchClientException 找不到客户端异常 + */ + void updateClientDetails(SysClientDetails clientDetails) throws NoSuchClientException; + + /** + * 更新客户端密钥. + * + * @param clientId 客户端 id + * @param clientSecret 客户端密钥 + * @throws NoSuchClientException 找不到客户端异常 + */ + void updateClientSecret(String clientId, String clientSecret) throws NoSuchClientException; + + /** + * 删除客户端信息. + * + * @param clientId 客户端 id + * @throws NoSuchClientException 找不到客户端异常 + */ + void removeClientDetails(String clientId) throws NoSuchClientException; + + /** + * 查询所有 + * + * @return 结果 + */ + List findAll(); +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java new file mode 100644 index 000000000..6604a54a4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/SysUserService.java @@ -0,0 +1,59 @@ +package com.xkcoding.oauth.service; + +import com.xkcoding.oauth.entity.SysUser; +import org.springframework.security.core.userdetails.UserDetailsService; + +import java.util.List; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午3:44 + */ +public interface SysUserService extends UserDetailsService { + /** + * 查询所有用户 + * + * @return 用户 + */ + List findAll(); + + /** + * 通过 id 查询用户 + * + * @param id id + * @return 用户 + */ + SysUser findById(Long id); + + /** + * 创建用户 + * + * @param sysUser 用户 + */ + void createUser(SysUser sysUser); + + /** + * 更新用户 + * + * @param sysUser 用户 + */ + void updateUser(SysUser sysUser); + + /** + * 更新用户 密码 + * + * @param id 用户 id + * @param password 用户密码 + */ + void updatePassword(Long id, String password); + + /** + * 删除用户. + * + * @param id id + */ + void deleteUser(Long id); +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java new file mode 100644 index 000000000..00e36629e --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysClientDetailsServiceImpl.java @@ -0,0 +1,73 @@ +package com.xkcoding.oauth.service.impl; + +import com.xkcoding.oauth.entity.SysClientDetails; +import com.xkcoding.oauth.repostiory.SysClientDetailsRepository; +import com.xkcoding.oauth.service.SysClientDetailsService; +import lombok.RequiredArgsConstructor; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.provider.*; +import org.springframework.stereotype.Service; + +import java.util.List; + +/** + * 客户端 相关操作. + * + * @author EchoCow + * @date 2020/1/6 下午1:37 + */ +@Service +@RequiredArgsConstructor +public class SysClientDetailsServiceImpl implements SysClientDetailsService { + + private final SysClientDetailsRepository sysClientDetailsRepository; + private final PasswordEncoder passwordEncoder; + + @Override + public ClientDetails loadClientByClientId(String id) throws ClientRegistrationException { + return sysClientDetailsRepository.findFirstByClientId(id) + .orElseThrow(() -> new ClientRegistrationException("Loading client exception.")); + } + + @Override + public SysClientDetails findByClientId(String clientId) { + return sysClientDetailsRepository.findFirstByClientId(clientId) + .orElseThrow(() -> new ClientRegistrationException("Loading client exception.")); + } + + @Override + public void addClientDetails(SysClientDetails clientDetails) throws ClientAlreadyExistsException { + clientDetails.setId(null); + if (sysClientDetailsRepository.findFirstByClientId(clientDetails.getClientId()).isPresent()) { + throw new ClientAlreadyExistsException(String.format("Client id %s already exist.", clientDetails.getClientId())); + } + sysClientDetailsRepository.save(clientDetails); + } + + @Override + public void updateClientDetails(SysClientDetails clientDetails) throws NoSuchClientException { + SysClientDetails exist = sysClientDetailsRepository.findFirstByClientId(clientDetails.getClientId()) + .orElseThrow(() -> new NoSuchClientException("No such client!")); + clientDetails.setClientSecret(exist.getClientSecret()); + sysClientDetailsRepository.save(clientDetails); + } + + @Override + public void updateClientSecret(String clientId, String clientSecret) throws NoSuchClientException { + SysClientDetails exist = sysClientDetailsRepository.findFirstByClientId(clientId) + .orElseThrow(() -> new NoSuchClientException("No such client!")); + exist.setClientSecret(passwordEncoder.encode(clientSecret)); + sysClientDetailsRepository.save(exist); + } + + @Override + public void removeClientDetails(String clientId) throws NoSuchClientException { + sysClientDetailsRepository.deleteByClientId(clientId); + } + + @Override + public List findAll() { + return sysClientDetailsRepository.findAll(); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java new file mode 100644 index 000000000..307af4d6d --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/impl/SysUserServiceImpl.java @@ -0,0 +1,76 @@ +package com.xkcoding.oauth.service.impl; + +import com.xkcoding.oauth.entity.SysUser; +import com.xkcoding.oauth.repostiory.SysUserRepository; +import com.xkcoding.oauth.service.SysUserService; +import lombok.RequiredArgsConstructor; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; + +import java.util.List; +import java.util.stream.Collectors; + +/** + * 用户相关操作. + * + * @author EchoCow + * @date 2020/1/6 下午3:06 + */ +@Service +@RequiredArgsConstructor +public class SysUserServiceImpl implements SysUserService { + + private final SysUserRepository sysUserRepository; + private final PasswordEncoder passwordEncoder; + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + SysUser sysUser = sysUserRepository.findFirstByUsername(username) + .orElseThrow(() -> new UsernameNotFoundException("User not found!")); + List roles = sysUser.getRoles().stream() + .map(sysRole -> new SimpleGrantedAuthority(sysRole.getName())) + .collect(Collectors.toList()); + // 在这里手动构建 UserDetails 的默认实现 + return new User(sysUser.getUsername(), sysUser.getPassword(), roles); + } + + @Override + public List findAll() { + return sysUserRepository.findAll(); + } + + @Override + public SysUser findById(Long id) { + return sysUserRepository.findById(id) + .orElseThrow(() -> new RuntimeException("找不到用户")); + } + + @Override + public void createUser(SysUser sysUser) { + sysUser.setId(null); + sysUserRepository.save(sysUser); + } + + @Override + public void updateUser(SysUser sysUser) { + sysUser.setPassword(null); + sysUserRepository.save(sysUser); + } + + @Override + public void updatePassword(Long id, String password) { + SysUser exist = findById(id); + exist.setPassword(passwordEncoder.encode(password)); + sysUserRepository.save(exist); + } + + @Override + public void deleteUser(Long id) { + sysUserRepository.deleteById(id); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java new file mode 100644 index 000000000..45f57f553 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/java/com/xkcoding/oauth/service/package-info.java @@ -0,0 +1,7 @@ +/** + * service 层，继承并实现 spring 接口. + * + * @author EchoCow + * @date 2020/1/7 上午9:16 + */ +package com.xkcoding.oauth.service; diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml new file mode 100644 index 000000000..d68c1b23c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml @@ -0,0 +1,22 @@ +server: + port: 8080 + +spring: + datasource: + url: jdbc:mysql://localhost:3306/oauth + username: root + password: 123456 + hikari: + data-source-properties: + useSSL: false + serverTimezone: GMT+8 + useUnicode: true + characterEncoding: utf8 + jpa: + hibernate: + ddl-auto: update + show-sql: true + +logging: + level: + org.springframework.security: debug diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/oauth2.jks new file mode 100644 index 0000000000000000000000000000000000000000..af97322428bc077838fc24774dafc3a40db84e1f GIT binary patch literal 2559 zcmY+Gc{CJ?7sm%<#xlw>cEZ@V3^N|tDlui>jU@(U>6K`VHS5Tdhq25UG&B-r36W}{2^ZUJb-XHheb3WgD@1LJ@;dss;tSoGBJm(7#r%Ljbwi3AR5eYY_MUwjf+AtW-Sk2OJOl23H1g{U4tk z7Y9P2fVnXafy2y3?fKFll92tTVhu1W8=%`3hzIslNw+x0+qxudjU?7OLNVdko&2Xe zBO~^uB8XP$zu(26F}YTs^MT|#qY?Ekn_2R{0wiOLqyu`czu`P!cgT(DXo-*87+#Z zzhKCr49v|Nrj}8YFJ!doex2cok%)Wlt97K;Iugq+a4l`s@(arN-7fR%owt_*Nl9^; z{&wr1zf_Jg0us#2LwJpfP0@KuN*eZY-X53-nty)F9~AlVdkbwBvS%W@6k+rQxT~7W zA4I6BRqP0+6giSG+XdgJb1iJ6wD%R!@$%Tf&Dbv{jH~%&4_dO`=OWd%b`bJz*~mwu%0XlVD_VT7SKpkg-?3_o^{lz-NN)FX#UsB|pll&`gT)%z{nXv!qz?569YB?LFH=XT7+|d6au^&#^Yxc9D*FB3y zE!^MMiyk0nmkMRSwCOYc<%!(6M)3K-fz~rKz~H<)Or>qEyQU)pd$Q8ZV6Gfs38tng zX#2b3Y%MnxH}omP=|qVO1rzHJM4Kx+ z>$%FD3ZcJf)EkG{6;XS`!0d^F$ptOe#?O!O9{t>nj552FkHYaKoa>4{jn76C=Pa|q zK+c%qH*J+`B8niBRy2j3U#(I7slxQ$kUcpoagWBu zHxH6oB(0xnqaOPAG^ulF%uA9-Nn;MTV!CdANh{FWk1c*8J&6%E@^kzei~NMfGsCMx z0;_J{X}Sz+0CE8Wv}4g`kv4_BdX8gevTNK!Yp1Rw1o>)2!&&~|+8F`_3KEjv^$m+k zP(3zO_hXmMo$N>ZTj7~1zL&^DHH3=ynJ%l-<=XSyUd@zzkEPF-BtqG*==+LW_JO_) zO>lJH1HZgIGukmn-s7RuU-?pYKfUm6B-l%rViW0kqamIn={;G(ZRY%J{EhFydECt97 zCJEgsgyND&(knE<>+@wFHl<>XgbCe1wWl*C^LnD3h%uD82>xa{QM8aIndJ_tw?B@+ zWBX)ajOR_!A(W(XV)O%tg;8;~FO7Sh2E3YA?t%pQt}rh%7l#9K>J$nl&~+IaB0%cb zEOm*h^FRzySgPT5y?vLP1R^kl*n}ps%#1wvMjWIV~-OE>atD zB2Tryhrpl{pGuw}QC1efN#p+~VfmL~LH{vq-_)e%{^Z>D8;8q}8cf%h;W1gi{nxPZ zc(y6p4H|&CT2b*1GwChm6#4UlbJ(n=x_K$Xyt zu%7`BQQD!Sz}g%sEG&HR-LMh#^>d4L`NhSCW#3`HrK9L_!E1&&zDB23>aJO+*(#NX zPOA9cm)PKmQgId`M#r4OZ+JB&><8kPrYT|~O6U)nvXw$=<}wQ-+5-wWmXA_z&411P z5FUy{N;cXmEb5~|<%(R~8Xk7(WR__EidGn!HAS)?8?V?DN2YqJit{sMdUI|;FloFo z%i~XH^Vi5a(x1Ot`+pB^&?wYnoVx zoWPdBtP262DCaJErD#3ZX7H&%TBjJ3CRLXQ89a{bYaFJz1mUr%=C|QHoO$CqP#XT7 zkS-Wm(Z8|HnwiT&vCDPQNg1pE>e^i;6kXQyxykiyuG!q@$Oj^p-&je@m z@*OZOi4fj$9{|dS*9_0noGCHcVBr-90udbI=@hGOCvLa0 z6HL^&E^?7U!C>S9h6!nQiEU>T_18)T_*BW#`I$#vfnGU1p3jjw-Z$od>Fo(?e(RGo z%LK_^RdJMxlOHxP4#tAeHq)2--CpWH+#sorz=VWtJ&W@?BGVl@wu7iP<>Les8QCLS z&E4r0NjC4DR|62q*pw;oqh>6-i>ri{<2f)*V>SWUu7DJXkoZc^?mGDepq>X=;i)+K z%;*`dPw8=FH6dx<13((=}Er{ z=}kJgk*tka31Z0bt0?IS6f|h{*Ch#+Q2VV#W3Z-bVLQF9#q#V;Ki? + + + 确认您的授权信息 + + +

+ + + + + + + + + 确认应用的授权信息 + +
+ +
+ + + 当前应用将会获取您的以下权限： + + + + + + + + + + + + + + 确认授权 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html new file mode 100644 index 000000000..7cc71dee6 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/common/common.html @@ -0,0 +1,33 @@ + + + + + + + + + + + + + +
+ + +
+ + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html new file mode 100644 index 000000000..df4c1bc7f --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/error.html @@ -0,0 +1,45 @@ + + + + 发送了点小错误 + + +
+ + + + + + + + +

404 找不到页面

+

~~~

+ 点击返回 + + + + + + +
+ + +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html new file mode 100644 index 000000000..5355e7ea2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html @@ -0,0 +1,110 @@ + + + + 欢迎登录 + + +
+ + + + + + + + + 欢迎登录 + + + + +

{{infoText}}

+

+ + + + + + + + + + + + + + + + + {{previousText}} + + 下一步 + 登录 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html new file mode 100644 index 000000000..1ea0a0c33 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/logout.html @@ -0,0 +1,44 @@ + + + + 确认退出吗？ + + +
+ + + + + + + + + 确认退出当前应用吗？ + +
+ +
+ + + + + + 确认退出 + + + + + + + +
+ +
+ + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html new file mode 100644 index 000000000..3fae0b9ae --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/registerTemplate.html @@ -0,0 +1,155 @@ + + + + + + + + + +
+
+
云课程考试平台
+
+

亲爱的用户，你好！

+ +
+
+

+ 欢迎您注册 云课程考试平台 +

+

+ 你的邮件的验证码： + 验证码
(请输入该验证码完成 验证，验证码 + + 10 分钟内有效！)

+
如果您未申请云课程学习平台 + $(type) 服务，请忽略该邮件。 +
+
+
+ +

如果仍有问题，请联系我们的管理员: 000-00000000 +

+
+
+
+ + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java new file mode 100644 index 000000000..3dc8233a4 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/PasswordEncodeTest.java @@ -0,0 +1,22 @@ +package com.xkcoding.oauth; + +import org.junit.jupiter.api.Test; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午3:51 + */ +public class PasswordEncodeTest { + + private PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + + @Test + public void getPasswordWhenPassed() { + System.out.println(passwordEncoder.encode("oauth2")); + System.out.println(passwordEncoder.encode("123456")); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java new file mode 100644 index 000000000..01e0d447b --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationCodeGrantTests.java @@ -0,0 +1,125 @@ +package com.xkcoding.oauth.oauth; + +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import org.springframework.http.HttpHeaders; +import org.springframework.http.MediaType; +import org.springframework.http.ResponseEntity; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.resource.UserRedirectRequiredException; +import org.springframework.security.oauth2.client.token.DefaultAccessTokenRequest; +import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeAccessTokenProvider; +import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeResourceDetails; +import org.springframework.util.LinkedMultiValueMap; +import org.springframework.util.MultiValueMap; + +import java.net.URI; +import java.util.Arrays; +import java.util.Collections; +import java.util.regex.Matcher; +import java.util.regex.Pattern; + +import static com.xkcoding.oauth.oauth.AuthorizationServerInfo.getUrl; +import static org.junit.jupiter.api.Assertions.*; + +/** + * 授权码模式测试. + * + * @author EchoCow + * @date 2020/1/6 下午8:43 + */ +public class AuthorizationCodeGrantTests { + + private AuthorizationCodeResourceDetails resource = new AuthorizationCodeResourceDetails(); + private AuthorizationServerInfo authorizationServerInfo = new AuthorizationServerInfo(); + + @BeforeEach + void setUp() { + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setClientId("oauth2"); + resource.setId("oauth2"); + resource.setScope(Arrays.asList("READ", "WRITE")); + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setUserAuthorizationUri(getUrl("/oauth/authorize")); + } + + @Test + void testCannotConnectWithoutToken() { + OAuth2RestTemplate template = new OAuth2RestTemplate(resource); + assertThrows(UserRedirectRequiredException.class, + () -> template.getForObject(getUrl("/oauth/me"), String.class)); + } + + @Test + void testAttemptedTokenAcquisitionWithNoRedirect() { + AuthorizationCodeAccessTokenProvider provider = new AuthorizationCodeAccessTokenProvider(); + assertThrows(UserRedirectRequiredException.class, + () -> provider.obtainAccessToken(resource, new DefaultAccessTokenRequest())); + } + + /** + * 这里不使用他提供的是因为很多地方不符合我们的需要 + * 比如 csrf，比如许多有些是自己自定义的端点这些 + * 所以只有我们一步一步的来进行测试拿到授权码 + */ + @Test + void testCodeAcquisitionWithCorrectContext() { + // 1. 请求登录页面获取 _csrf 的 value 以及 cookie + ResponseEntity page = authorizationServerInfo.getForString("/oauth/login"); + assertNotNull(page.getBody()); + String cookie = page.getHeaders().getFirst("Set-Cookie"); + HttpHeaders headers = new HttpHeaders(); + headers.set("Cookie", cookie); + Matcher matcher = Pattern.compile("(?s).*name=\"_csrf\".*?value=\"([^\"]+).*").matcher(page.getBody()); + assertTrue(matcher.find()); + + // 2. 添加表单数据 + MultiValueMap form = new LinkedMultiValueMap<>(); + form.add("username", "admin"); + form.add("password", "123456"); + form.add("_csrf", matcher.group(1)); + + // 3. 登录授权并获取登录成功的 cookie + ResponseEntity response = authorizationServerInfo + .postForStatus("/authorization/form", headers, form); + assertNotNull(response); + cookie = response.getHeaders().getFirst("Set-Cookie"); + headers = new HttpHeaders(); + headers.set("Cookie", cookie); + headers.setAccept(Collections.singletonList(MediaType.ALL)); + + // 4. 请求到 确认授权页面 ，获取确认授权页面的 _csrf 的 value + ResponseEntity confirm = authorizationServerInfo + .getForString("/oauth/authorize?response_type=code&client_id=oauth2&redirect_uri=http://example.com&scope=READ", headers); + + headers = confirm.getHeaders(); + // 确认过一次后，后面都会自动确认了，这里判断下是不是重定向请求 + // 如果不是，就表示是第一次，需要确认授权 + if (!confirm.getStatusCode().is3xxRedirection()) { + assertNotNull(confirm.getBody()); + Matcher matcherConfirm = Pattern.compile("(?s).*name=\"_csrf\".*?value=\"([^\"]+).*").matcher(confirm.getBody()); + assertTrue(matcherConfirm.find()); + headers = new HttpHeaders(); + headers.set("Cookie", cookie); + headers.setAccept(Collections.singletonList(MediaType.ALL)); + + // 5. 构建 同意授权 的表单 + form = new LinkedMultiValueMap<>(); + form.add("user_oauth_approval", "true"); + form.add("scope.READ", "true"); + form.add("_csrf", matcherConfirm.group(1)); + + // 6. 请求授权，获取 授权码 + headers = authorizationServerInfo.postForHeaders("/oauth/authorize", form, headers); + } + + URI location = headers.getLocation(); + assertNotNull(location); + String query = location.getQuery(); + assertNotNull(query); + String[] result = query.split("="); + assertEquals(2, result.length); + System.out.println(result[1]); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java new file mode 100644 index 000000000..0c229199c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/AuthorizationServerInfo.java @@ -0,0 +1,94 @@ +package com.xkcoding.oauth.oauth; + +import org.springframework.http.*; +import org.springframework.http.client.ClientHttpRequest; +import org.springframework.http.client.ClientHttpResponse; +import org.springframework.http.client.SimpleClientHttpRequestFactory; +import org.springframework.util.MultiValueMap; +import org.springframework.web.client.RequestCallback; +import org.springframework.web.client.ResponseErrorHandler; +import org.springframework.web.client.RestTemplate; + +import java.io.IOException; +import java.net.HttpURLConnection; + +/** + * 授权服务器工具类. + * + * @author EchoCow + * @date 2020/1/6 下午8:44 + */ +@SuppressWarnings("all") +public class AuthorizationServerInfo { + public static final String HOST = "http://127.0.0.1:8080"; + + private RestTemplate client; + + public AuthorizationServerInfo() { + client = new RestTemplate(); + client.setRequestFactory(new SimpleClientHttpRequestFactory() { + @Override + protected void prepareConnection(HttpURLConnection connection, String httpMethod) throws IOException { + super.prepareConnection(connection, httpMethod); + connection.setInstanceFollowRedirects(false); + } + }); + client.setErrorHandler(new ResponseErrorHandler() { + public boolean hasError(ClientHttpResponse response) { + return false; + } + + public void handleError(ClientHttpResponse response) { + } + }); + } + + public ResponseEntity getForString(String path, final HttpHeaders headers) { + return client.exchange(getUrl(path), HttpMethod.GET, new HttpEntity<>(null, headers), String.class); + } + + public ResponseEntity getForString(String path) { + return getForString(path, new HttpHeaders()); + } + + public ResponseEntity postForStatus(String path, HttpHeaders headers, MultiValueMap formData) { + HttpHeaders actualHeaders = new HttpHeaders(); + actualHeaders.putAll(headers); + actualHeaders.setContentType(MediaType.APPLICATION_FORM_URLENCODED); + return client.exchange(getUrl(path), HttpMethod.POST, + new HttpEntity<>(formData, actualHeaders), (Class) null); + } + + + public static String getUrl(String path) { + return HOST + path; + } + + public HttpHeaders postForHeaders(String path, MultiValueMap formData, final HttpHeaders headers) { + RequestCallback requestCallback = new NullRequestCallback(); + if (headers != null) { + requestCallback = request -> request.getHeaders().putAll(headers); + } + StringBuilder builder = new StringBuilder(getUrl(path)); + if (!path.contains("?")) { + builder.append("?"); + } else { + builder.append("&"); + } + for (String key : formData.keySet()) { + for (String value : formData.get(key)) { + builder.append(key).append("=").append(value); + builder.append("&"); + } + } + builder.deleteCharAt(builder.length() - 1); + + return client.execute(builder.toString(), HttpMethod.POST, requestCallback, + HttpMessage::getHeaders); + } + + private static final class NullRequestCallback implements RequestCallback { + public void doWithRequest(ClientHttpRequest request) { + } + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java new file mode 100644 index 000000000..38d8d1ddc --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/oauth/ResourceOwnerPasswordGrantTests.java @@ -0,0 +1,39 @@ +package com.xkcoding.oauth.oauth; + +import org.junit.jupiter.api.Test; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.token.grant.password.ResourceOwnerPasswordResourceDetails; +import org.springframework.security.oauth2.common.OAuth2AccessToken; + +import java.util.Arrays; + +import static com.xkcoding.oauth.oauth.AuthorizationServerInfo.getUrl; +import static org.junit.jupiter.api.Assertions.*; + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午9:14 + */ +public class ResourceOwnerPasswordGrantTests { + + @Test + void testConnectDirectlyToResourceServer() { + assertNotNull(accessToken()); + } + + public static String accessToken() { + ResourceOwnerPasswordResourceDetails resource = new ResourceOwnerPasswordResourceDetails(); + resource.setAccessTokenUri(getUrl("/oauth/token")); + resource.setClientId("oauth2"); + resource.setClientSecret("oauth2"); + resource.setId("oauth2"); + resource.setScope(Arrays.asList("READ", "WRITE")); + resource.setUsername("admin"); + resource.setPassword("123456"); + OAuth2RestTemplate template = new OAuth2RestTemplate(resource); + OAuth2AccessToken accessToken = template.getAccessToken(); + return accessToken.getValue(); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java new file mode 100644 index 000000000..c0126bc09 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysClientDetailsTest.java @@ -0,0 +1,26 @@ +package com.xkcoding.oauth.repostiory; + +import org.junit.jupiter.api.Test; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest; + +import static org.junit.jupiter.api.Assertions.assertNotNull; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:10 + */ +@DataJpaTest +public class SysClientDetailsTest { + @Autowired + private SysClientDetailsRepository sysClientDetailsRepository; + + @Test + public void autowiredSuccessWhenPassed() { + assertNotNull(sysClientDetailsRepository); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java new file mode 100644 index 000000000..7df067973 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/java/com/xkcoding/oauth/repostiory/SysUserRepositoryTest.java @@ -0,0 +1,40 @@ +package com.xkcoding.oauth.repostiory; + +import com.xkcoding.oauth.entity.SysUser; +import org.junit.jupiter.api.DisplayName; +import org.junit.jupiter.api.Test; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.test.autoconfigure.orm.jpa.DataJpaTest; + +import java.util.Optional; + +import static org.junit.jupiter.api.Assertions.*; + + +/** + * . + * + * @author EchoCow + * @date 2020/1/6 下午1:25 + */ +@DataJpaTest +public class SysUserRepositoryTest { + + @Autowired + private SysUserRepository sysUserRepository; + + @Test + public void autowiredSuccessWhenPassed() { + assertNotNull(sysUserRepository); + } + + @Test + @DisplayName("测试关联查询") + public void queryUserAndRoleWhenPassed() { + Optional admin = sysUserRepository.findFirstByUsername("admin"); + assertTrue(admin.isPresent()); + SysUser sysUser = admin.orElseGet(SysUser::new); + assertNotNull(sysUser.getRoles()); + assertEquals(1, sysUser.getRoles().size()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml new file mode 100644 index 000000000..0324e2521 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/application.yml @@ -0,0 +1,21 @@ +server: + port: 8080 + servlet: + context-path: /demo + +spring: + datasource: + url: jdbc:h2:mem:oauth2?options=DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE + username: root + password: 123456 + jpa: + hibernate: + ddl-auto: create-drop + show-sql: true + properties: + hibernate: + format_sql: true + +logging: + level: + org.springframework.security: debug diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql new file mode 100644 index 000000000..4dee7e7f2 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/import.sql @@ -0,0 +1,10 @@ +-- 测试数据 +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (1, 6000, null, null, 'oauth2', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'oauth2', 'READ,WRITE'); +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (2, 6000, null, null, 'test', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'test', 'READ'); +INSERT INTO sys_client_details (id, access_token_validity_seconds, authorizations, auto_approve_scopes, client_id, client_secret, grant_types, redirect_url, refresh_token_validity_seconds, resource_ids, scopes) VALUES (3, 6000, null, null, 'test', '$2a$10$O8uM8kd5SbsuoITG3tBifOcarqqI8GP19vzbqDzVHP5ZV9yOfvpYS', 'authorization_code,password', 'http://example.com', 6000, 'error', 'READ'); +INSERT INTO sys_role (id, name, description) VALUES (1, 'ROLE_ADMIN', '管理员'); +INSERT INTO sys_role (id, name, description) VALUES (2, 'ROLE_TEST', '测试'); +INSERT INTO sys_user (id, username, password) VALUES (1, 'admin', '$2a$10$xLH.pDNz3d2frOBQ6Gc.wuHY4ghwlSyFDgy0Ta.psXmm1YJjNaV1G'); +INSERT INTO sys_user (id, username, password) VALUES (2, 'test', '$2a$10$xLH.pDNz3d2frOBQ6Gc.wuHY4ghwlSyFDgy0Ta.psXmm1YJjNaV1G'); +INSERT INTO sys_user_role (user_id, role_id) VALUES (1, 1); +INSERT INTO sys_user_role (user_id, role_id) VALUES (2, 2); diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql new file mode 100644 index 000000000..1bb215607 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/test/resources/schema.sql @@ -0,0 +1,40 @@ +create table sys_client_details +( + id bigint auto_increment primary key, + access_token_validity_seconds int null, + authorizations varchar(255) null, + auto_approve_scopes varchar(255) null, + client_id varchar(255) null, + client_secret varchar(255) null, + grant_types varchar(255) null, + redirect_url varchar(255) null, + refresh_token_validity_seconds int null, + resource_ids varchar(255) null, + scopes varchar(255) null +); + +create table sys_role +( + id bigint auto_increment primary key, + name varchar(55) not null, + description varchar(55) null +); + +create table sys_user +( + id bigint auto_increment primary key, + username varchar(55) not null, + password varchar(128) not null +); + +create table sys_user_role +( + id bigint auto_increment primary key, + user_id bigint not null, + role_id bigint not null, + constraint sys_user_role_sys_role_id_fk + foreign key (role_id) references sys_role (id), + constraint sys_user_role_sys_user_id_fk + foreign key (user_id) references sys_user (id) +); + diff --git a/spring-boot-demo-oauth/src/main/resources/application.yml b/spring-boot-demo-oauth/src/main/resources/application.yml deleted file mode 100644 index a02fbde11..000000000 --- a/spring-boot-demo-oauth/src/main/resources/application.yml +++ /dev/null @@ -1,4 +0,0 @@ -server: - port: 8080 - servlet: - context-path: /demo \ No newline at end of file diff --git a/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java b/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java deleted file mode 100644 index 9b53df26e..000000000 --- a/spring-boot-demo-oauth/src/test/java/com/xkcoding/oauth/SpringBootDemoOauthApplicationTests.java +++ /dev/null @@ -1,17 +0,0 @@ -package com.xkcoding.oauth; - -import org.junit.Test; -import org.junit.runner.RunWith; -import org.springframework.boot.test.context.SpringBootTest; -import org.springframework.test.context.junit4.SpringRunner; - -@RunWith(SpringRunner.class) -@SpringBootTest -public class SpringBootDemoOauthApplicationTests { - - @Test - public void contextLoads() { - } - -} - From 75c7236ad5945167662cbfb053a0cd44b023849f Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Thu, 9 Jan 2020 10:15:52 +0800 Subject: [PATCH 03/16] =?UTF-8?q?:green=5Fheart:=20CI=20=E6=B5=8B=E8=AF=95?= =?UTF-8?q?=20master=20=E5=88=86=E6=94=AF?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .travis.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.travis.yml b/.travis.yml index e7bb9d0bf..243b9d12f 100644 --- a/.travis.yml +++ b/.travis.yml @@ -13,3 +13,7 @@ notifications: cache: directories: - '$HOME/.m2/repository' + +branches: + only: + - master From a989d01e45887c5debf1f797bc6fed56fed939e6 Mon Sep 17 00:00:00 2001 From: EchoCow Date: Thu, 9 Jan 2020 17:07:14 +0800 Subject: [PATCH 04/16] :sparkles: Add spring-boot-demo-oauth-resource-server. --- spring-boot-demo-oauth/pom.xml | 26 +---- .../pom.xml | 29 +++++ .../src/main/resources/application.yml | 2 +- .../src/main/resources/templates/login.html | 2 +- .../README.adoc | 59 ++++++++++ .../pom.xml | 31 ++++++ .../SpringBootDemoResourceApplication.java | 21 ++++ .../config/OauthResourceServerConfig.java | 43 ++++++++ .../config/OauthResourceTokenConfig.java | 102 ++++++++++++++++++ .../oauth/controller/TestController.java | 60 +++++++++++ .../src/main/resources/application.yml | 30 ++++++ .../com/xkcoding/oauth/AuthorizationTest.java | 38 +++++++ .../oauth/controller/TestControllerTest.java | 83 ++++++++++++++ 13 files changed, 499 insertions(+), 27 deletions(-) create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/README.adoc create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/pom.xml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/SpringBootDemoResourceApplication.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceServerConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceTokenConfig.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/controller/TestController.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/resources/application.yml create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/AuthorizationTest.java create mode 100644 spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/controller/TestControllerTest.java diff --git a/spring-boot-demo-oauth/pom.xml b/spring-boot-demo-oauth/pom.xml index 724e86acc..a403df23e 100644 --- a/spring-boot-demo-oauth/pom.xml +++ b/spring-boot-demo-oauth/pom.xml @@ -7,6 +7,7 @@ 1.0.0-SNAPSHOT spring-boot-demo-oauth-authorization-server + spring-boot-demo-oauth-resource-server pom @@ -26,31 +27,6 @@ - - org.springframework.boot - spring-boot-starter-web - - - - org.springframework.boot - spring-boot-starter-security - - - - org.springframework.boot - spring-boot-starter-thymeleaf - - - - org.springframework.boot - spring-boot-starter-data-jpa - - - - org.springframework.security.oauth.boot - spring-security-oauth2-autoconfigure - ${spring.boot.version} - mysql diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml index cfc942f33..d4fff86e9 100644 --- a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/pom.xml @@ -11,5 +11,34 @@ spring-boot-demo-oauth-authorization-server + + + + org.springframework.boot + spring-boot-starter-web + + + + org.springframework.boot + spring-boot-starter-security + + + + org.springframework.security.oauth.boot + spring-security-oauth2-autoconfigure + ${spring.boot.version} + + + + org.springframework.boot + spring-boot-starter-thymeleaf + + + + org.springframework.boot + spring-boot-starter-data-jpa + + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml index d68c1b23c..edbe40584 100644 --- a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/application.yml @@ -3,7 +3,7 @@ server: spring: datasource: - url: jdbc:mysql://localhost:3306/oauth + url: jdbc:mysql://localhost:3306/oauth?allowPublicKeyRetrieval=true username: root password: 123456 hikari: diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html index 5355e7ea2..896327e18 100644 --- a/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-authorization-server/src/main/resources/templates/login.html @@ -43,7 +43,7 @@ {{previousText}} 下一步 - 登录 + 登录 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/README.adoc b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/README.adoc new file mode 100644 index 000000000..4083136e9 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/README.adoc @@ -0,0 +1,59 @@ += spring-boot-demo-oauth-resource-server +Doc Writer +v1.0, 2019-01-09 +:toc: + +spring boot oauth2 资源服务器，同 授权服务器 一起使用。 + +> 使用 `spring security oauth` + +- JWT 解密，远程公钥获取 +- 基于角色访问控制 +- 基于应用授权域访问控制 + +== jwt 解密 + +要先获取 jwt 公钥 + +[source,java] +.OauthResourceTokenConfig +---- +public class OauthResourceTokenConfig { + // ...... + private String getPubKey() { + // 如果本地没有密钥，就从授权服务器中获取 + return StringUtils.isEmpty(resourceServerProperties.getJwt().getKeyValue()) + ? getKeyFromAuthorizationServer() + : resourceServerProperties.getJwt().getKeyValue(); + } + // ...... +} +---- + +然后配置进去 + +[source, java] +.OauthResourceServerConfig +---- +public class OauthResourceServerConfig extends ResourceServerConfigurerAdapter { + @Override + public void configure(ResourceServerSecurityConfigurer resources) { + resources + .tokenStore(tokenStore) + .resourceId(resourceServerProperties.getResourceId()); + } +} +---- + +== 访问控制 + +通过 `@EnableGlobalMethodSecurity(prePostEnabled = true)` 注解开启 `spring security` 的全局方法安全控制 + +- `@PreAuthorize("hasRole('ADMIN')")` 校验角色 +- `@PreAuthorize("#oauth2.hasScope('READ')")` 校验令牌授权域 + +== 测试 + +测试用例： `com.xkcoding.oauth.controller.TestControllerTest` + +先获取 `token`，携带 `token` 去访问资源即可。 diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/pom.xml b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/pom.xml new file mode 100644 index 000000000..b19d74cd7 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/pom.xml @@ -0,0 +1,31 @@ + + + + spring-boot-demo-oauth + com.xkcoding + 1.0.0-SNAPSHOT + + 4.0.0 + + spring-boot-demo-oauth-resource-server + + + + org.springframework.boot + spring-boot-starter-web + + + + org.springframework.boot + spring-boot-starter-security + + + + org.springframework.security.oauth.boot + spring-security-oauth2-autoconfigure + ${spring.boot.version} + + + diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/SpringBootDemoResourceApplication.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/SpringBootDemoResourceApplication.java new file mode 100644 index 000000000..33b7bd90c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/SpringBootDemoResourceApplication.java @@ -0,0 +1,21 @@ +package com.xkcoding.oauth; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer; + +/** + * 启动器. + * + * @author EchoCow + * @date 2020/1/9 上午11:38 + * @version V1.0 + */ +@EnableResourceServer +@SpringBootApplication +public class SpringBootDemoResourceApplication { + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoResourceApplication.class, args); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceServerConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceServerConfig.java new file mode 100644 index 000000000..2d3243e17 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceServerConfig.java @@ -0,0 +1,43 @@ +package com.xkcoding.oauth.config; + +import lombok.AllArgsConstructor; +import org.springframework.boot.autoconfigure.security.oauth2.resource.ResourceServerProperties; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer; +import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter; +import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer; +import org.springframework.security.oauth2.provider.token.TokenStore; + +/** + * 资源服务器配置. + * 我们自己实现了它的配置，所以它的自动装配不会生效 + * + * @author EchoCow + * @date 2020/1/9 下午2:20 + */ +@Configuration +@AllArgsConstructor +@EnableResourceServer +@EnableGlobalMethodSecurity(prePostEnabled = true) +public class OauthResourceServerConfig extends ResourceServerConfigurerAdapter { + + private final ResourceServerProperties resourceServerProperties; + private final TokenStore tokenStore; + + @Override + public void configure(ResourceServerSecurityConfigurer resources) { + resources + .tokenStore(tokenStore) + .resourceId(resourceServerProperties.getResourceId()); + } + + @Override + public void configure(HttpSecurity http) throws Exception { + super.configure(http); + // 前后端分离下，可以关闭 csrf + http.csrf().disable(); + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceTokenConfig.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceTokenConfig.java new file mode 100644 index 000000000..c28c72cc3 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/config/OauthResourceTokenConfig.java @@ -0,0 +1,102 @@ +package com.xkcoding.oauth.config; + +import cn.hutool.json.JSONObject; +import com.fasterxml.jackson.databind.ObjectMapper; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.autoconfigure.security.oauth2.resource.ResourceServerProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpEntity; +import org.springframework.http.HttpHeaders; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; +import org.springframework.security.oauth2.provider.token.store.JwtTokenStore; +import org.springframework.util.StringUtils; +import org.springframework.web.client.RestTemplate; + +import java.io.IOException; +import java.util.Base64; + +/** + * token 相关配置，jwt 相关. + * + * @author EchoCow + * @date 2020/1/9 下午2:39 + */ +@Slf4j +@Configuration +@AllArgsConstructor +public class OauthResourceTokenConfig { + + private final ResourceServerProperties resourceServerProperties; + + /** + * 这里并不是对令牌的存储,他将访问令牌与身份验证进行转换 + * 在需要 {@link TokenStore} 的任何地方可以使用此方法 + * + * @return TokenStore + */ + @Bean + public TokenStore tokenStore() { + return new JwtTokenStore(jwtAccessTokenConverter()); + } + + /** + * jwt 令牌转换 + * + * @return jwt + */ + @Bean + public JwtAccessTokenConverter jwtAccessTokenConverter() { + JwtAccessTokenConverter converter = new JwtAccessTokenConverter(); + converter.setVerifierKey(getPubKey()); + return converter; + } + + /** + * 非对称密钥加密，获取 public key。 + * 自动选择加载方式。 + * + * @return public key + */ + private String getPubKey() { + // 如果本地没有密钥，就从授权服务器中获取 + return StringUtils.isEmpty(resourceServerProperties.getJwt().getKeyValue()) + ? getKeyFromAuthorizationServer() + : resourceServerProperties.getJwt().getKeyValue(); + } + + /** + * 本地没有公钥的时候，从服务器上获取 + * 需要进行 Basic 认证 + * + * @return public key + */ + private String getKeyFromAuthorizationServer() { + ObjectMapper objectMapper = new ObjectMapper(); + HttpHeaders httpHeaders = new HttpHeaders(); + httpHeaders.add(HttpHeaders.AUTHORIZATION, encodeClient()); + HttpEntity requestEntity = new HttpEntity<>(null, httpHeaders); + String pubKey = new RestTemplate() + .getForObject(resourceServerProperties.getJwt().getKeyUri(), String.class, requestEntity); + try { + JSONObject body = objectMapper.readValue(pubKey, JSONObject.class); + log.info("Get Key From Authorization Server."); + return body.getStr("value"); + } catch (IOException e) { + log.error("Get public key error: {}", e.getMessage()); + } + return null; + } + + /** + * 客户端信息 + * + * @return basic + */ + private String encodeClient() { + return "Basic " + Base64.getEncoder().encodeToString((resourceServerProperties.getClientId() + + ":" + resourceServerProperties.getClientSecret()).getBytes()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/controller/TestController.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/controller/TestController.java new file mode 100644 index 000000000..9c6ed628c --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/java/com/xkcoding/oauth/controller/TestController.java @@ -0,0 +1,60 @@ +package com.xkcoding.oauth.controller; + +import org.springframework.security.access.prepost.PreAuthorize; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RestController; + +/** + * 测试接口. + * + * @author EchoCow + * @date 2020/1/9 下午2:37 + */ +@RestController +public class TestController { + + /** + * 拥有 ROLE_ADMIN 的用户才能访问的资源 + * + * @return ADMIN + */ + @PreAuthorize("hasRole('ADMIN')") + @GetMapping("/admin") + public String admin() { + return "ADMIN"; + } + + /** + * 拥有 ROLE_TEST 的用户才能访问的资源 + * + * @return TEST + */ + @PreAuthorize("hasRole('TEST')") + @GetMapping("/test") + public String test() { + return "TEST"; + } + + /** + * scope 有 READ 的用户资源才能访问 + * + * @return READ + */ + @PreAuthorize("#oauth2.hasScope('READ')") + @GetMapping("/read") + public String read() { + return "READ"; + } + + /** + * scope 有 WRITE 的用户资源才能访问 + * + * @return WRITE + */ + @PreAuthorize("#oauth2.hasScope('WRITE')") + @GetMapping("/write") + public String write() { + return "WRITE"; + } + +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/resources/application.yml b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/resources/application.yml new file mode 100644 index 000000000..9d6558a64 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/main/resources/application.yml @@ -0,0 +1,30 @@ +server: + port: 8081 +security: + oauth2: + resource: + token-info-uri: http://localhost:8080/oauth/check_token + jwt: + key-alias: oauth2 + # 如果没有此项会去请求授权服务器获取 + key-value: | + -----BEGIN PUBLIC KEY----- + MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF9SyMHeGAsLMwbPsKj/ + xpEtS0iCe8vTSBnIGBDZKmB3ma20Ry0Uzn3m+f40RwCXlxnUcvTw7ipoz0tMQERQ + b3X4DkYCJXPK6pAD+R9/J5odEwrO2eysByWfcbMjsZw2u5pH5hleMS0YqkrGQOxJ + pzlEcKxMePU5KYTbKUJkhOYPY+gQr61g6lF97WggSPtuQn1srT+Ptvfw6yRC4bdI + 0zV5emfXjmoLUwaQTRoGYhOFrm97vpoKiltSNIDFW01J1Lr+l77ddDFC6cdiAC0H + 5/eENWBBBTFWya8RlBTzHuikfFS1gP49PZ6MYJIVRs8p9YnnKTy7TVcGKY3XZMCA + mwIDAQAB + -----END PUBLIC KEY----- + key-uri: http://localhost:8080/oauth/token_key + id: oauth2 + client: + client-id: oauth2 + client-secret: oauth2 + access-token-uri: http://localhost:8080/oauth/token + scope: READ + +logging: + level: + org.springframework.security: debug diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/AuthorizationTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/AuthorizationTest.java new file mode 100644 index 000000000..774a4ec02 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/AuthorizationTest.java @@ -0,0 +1,38 @@ +package com.xkcoding.oauth; + +import org.junit.jupiter.api.Test; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.token.grant.password.ResourceOwnerPasswordResourceDetails; + +import java.util.Collections; +import java.util.List; + +import static org.junit.jupiter.api.Assertions.assertNotNull; + +/** + * . + * + * @author EchoCow + * @date 2020/1/9 下午3:44 + */ +public class AuthorizationTest { + public static final String AUTHORIZATION_SERVER = "http://127.0.0.1:8080"; + + protected OAuth2RestTemplate oauth2RestTemplate(String username, String password, List scope) { + ResourceOwnerPasswordResourceDetails resource = new ResourceOwnerPasswordResourceDetails(); + resource.setAccessTokenUri(AUTHORIZATION_SERVER + "/oauth/token"); + resource.setClientId("oauth2"); + resource.setClientSecret("oauth2"); + resource.setId("oauth2"); + resource.setScope(scope); + resource.setUsername(username); + resource.setPassword(password); + return new OAuth2RestTemplate(resource); + } + + @Test + void testAccessTokenWhenPassed() { + assertNotNull(oauth2RestTemplate("admin", "123456", Collections.singletonList("READ")) + .getAccessToken()); + } +} diff --git a/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/controller/TestControllerTest.java b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/controller/TestControllerTest.java new file mode 100644 index 000000000..ea0a43268 --- /dev/null +++ b/spring-boot-demo-oauth/spring-boot-demo-oauth-resource-server/src/test/java/com/xkcoding/oauth/controller/TestControllerTest.java @@ -0,0 +1,83 @@ +package com.xkcoding.oauth.controller; + +import com.xkcoding.oauth.AuthorizationTest; +import org.junit.jupiter.api.DisplayName; +import org.junit.jupiter.api.Test; +import org.springframework.http.HttpStatus; +import org.springframework.http.ResponseEntity; +import org.springframework.security.oauth2.client.OAuth2RestTemplate; +import org.springframework.security.oauth2.client.resource.OAuth2AccessDeniedException; + +import java.util.Arrays; +import java.util.Collections; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertThrows; +import static org.springframework.http.HttpMethod.GET; + +/** + * . + * + * @author EchoCow + * @date 2020/1/9 下午3:46 + */ +public class TestControllerTest extends AuthorizationTest { + + private static final String URL = "http://127.0.0.1:8081"; + + @Test + @DisplayName("ROLE_ADMIN 角色测试") + void testAdminRoleSucceedAndTestRoleFailedWhenPassed() { + OAuth2RestTemplate template = oauth2RestTemplate("admin", "123456", Collections.singletonList("READ")); + ResponseEntity response = template.exchange(URL + "/admin", GET, null, String.class); + assertEquals(HttpStatus.OK, response.getStatusCode()); + assertEquals("ADMIN", response.getBody()); + assertThrows(OAuth2AccessDeniedException.class, + () -> template.exchange(URL + "/test", GET, null, String.class)); + } + + @Test + @DisplayName("ROLE_Test 角色测试") + void testTestRoleSucceedWhenPassed() { + OAuth2RestTemplate template = oauth2RestTemplate("test", "123456", Collections.singletonList("READ")); + ResponseEntity response = template.exchange(URL + "/test", GET, null, String.class); + assertEquals(HttpStatus.OK, response.getStatusCode()); + assertEquals("TEST", response.getBody()); + assertThrows(OAuth2AccessDeniedException.class, + () -> template.exchange(URL + "/admin", GET, null, String.class)); + } + + @Test + @DisplayName("SCOPE_READ 授权域测试") + void testScopeReadWhenPassed() { + OAuth2RestTemplate template = oauth2RestTemplate("admin", "123456", Collections.singletonList("READ")); + ResponseEntity response = template.exchange(URL + "/read", GET, null, String.class); + assertEquals(HttpStatus.OK, response.getStatusCode()); + assertEquals("READ", response.getBody()); + assertThrows(OAuth2AccessDeniedException.class, + () -> template.exchange(URL + "/write", GET, null, String.class)); + } + + @Test + @DisplayName("SCOPE_WRITE 授权域测试") + void testScopeWriteWhenPassed() { + OAuth2RestTemplate template = oauth2RestTemplate("admin", "123456", Collections.singletonList("WRITE")); + ResponseEntity response = template.exchange(URL + "/write", GET, null, String.class); + assertEquals(HttpStatus.OK, response.getStatusCode()); + assertEquals("WRITE", response.getBody()); + assertThrows(OAuth2AccessDeniedException.class, + () -> template.exchange(URL + "/read", GET, null, String.class)); + } + + @Test + @DisplayName("SCOPE 测试") + void testScopeWhenPassed() { + OAuth2RestTemplate template = oauth2RestTemplate("admin", "123456", Arrays.asList("READ", "WRITE")); + ResponseEntity writeResponse = template.exchange(URL + "/write", GET, null, String.class); + assertEquals(HttpStatus.OK, writeResponse.getStatusCode()); + assertEquals("WRITE", writeResponse.getBody()); + ResponseEntity readResponse = template.exchange(URL + "/read", GET, null, String.class); + assertEquals(HttpStatus.OK, readResponse.getStatusCode()); + assertEquals("READ", readResponse.getBody()); + } +} From 72ffe33136fa6fffab0a19afa77c028f45cbc92c Mon Sep 17 00:00:00 2001 From: geek <1163518793@qq.com> Date: Sun, 12 Jan 2020 12:22:42 +0800 Subject: [PATCH 05/16] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20https=20=E9=9B=86?= =?UTF-8?q?=E6=88=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pom.xml | 1 + spring-boot-demo-https/.gitignore | 31 +++++ .../.mvn/wrapper/MavenWrapperDownloader.java | 118 ++++++++++++++++++ .../.mvn/wrapper/maven-wrapper.jar | Bin 0 -> 50710 bytes .../.mvn/wrapper/maven-wrapper.properties | 2 + spring-boot-demo-https/README.md | 68 ++++++++++ spring-boot-demo-https/pom.xml | 56 +++++++++ .../SpringBootDemoHttpsApplication.java | 62 +++++++++ .../src/main/resources/application.yml | 12 ++ .../src/main/resources/server.keystore | Bin 0 -> 2255 bytes .../src/main/resources/static/index.html | 13 ++ .../SpringBootDemoHttpsApplicationTests.java | 13 ++ spring-boot-demo-https/ssl.png | Bin 0 -> 78633 bytes 13 files changed, 376 insertions(+) create mode 100644 spring-boot-demo-https/.gitignore create mode 100644 spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java create mode 100644 spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar create mode 100644 spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties create mode 100644 spring-boot-demo-https/README.md create mode 100644 spring-boot-demo-https/pom.xml create mode 100644 spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java create mode 100644 spring-boot-demo-https/src/main/resources/application.yml create mode 100644 spring-boot-demo-https/src/main/resources/server.keystore create mode 100644 spring-boot-demo-https/src/main/resources/static/index.html create mode 100644 spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java create mode 100644 spring-boot-demo-https/ssl.png diff --git a/pom.xml b/pom.xml index 64089db87..b68fabbf3 100644 --- a/pom.xml +++ b/pom.xml @@ -67,6 +67,7 @@ spring-boot-demo-ratelimit-guava spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client + spring-boot-demo-https pom diff --git a/spring-boot-demo-https/.gitignore b/spring-boot-demo-https/.gitignore new file mode 100644 index 000000000..a2a3040aa --- /dev/null +++ b/spring-boot-demo-https/.gitignore @@ -0,0 +1,31 @@ +HELP.md +target/ +!.mvn/wrapper/maven-wrapper.jar +!**/src/main/** +!**/src/test/** + +### STS ### +.apt_generated +.classpath +.factorypath +.project +.settings +.springBeans +.sts4-cache + +### IntelliJ IDEA ### +.idea +*.iws +*.iml +*.ipr + +### NetBeans ### +/nbproject/private/ +/nbbuild/ +/dist/ +/nbdist/ +/.nb-gradle/ +build/ + +### VS Code ### +.vscode/ diff --git a/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java b/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java new file mode 100644 index 000000000..f6e782ce1 --- /dev/null +++ b/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java @@ -0,0 +1,118 @@ +/* + * Copyright 2007-present the original author or authors. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * https://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +import java.net.*; +import java.io.*; +import java.nio.channels.*; +import java.util.Properties; + +public class MavenWrapperDownloader { + + private static final String WRAPPER_VERSION = "0.5.6"; + /** + * Default URL to download the maven-wrapper.jar from, if no 'downloadUrl' is provided. + */ + private static final String DEFAULT_DOWNLOAD_URL = "https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/" + + WRAPPER_VERSION + "/maven-wrapper-" + WRAPPER_VERSION + ".jar"; + + /** + * Path to the maven-wrapper.properties file, which might contain a downloadUrl property to + * use instead of the default one. + */ + private static final String MAVEN_WRAPPER_PROPERTIES_PATH = + ".mvn/wrapper/maven-wrapper.properties"; + + /** + * Path where the maven-wrapper.jar will be saved to. + */ + private static final String MAVEN_WRAPPER_JAR_PATH = + ".mvn/wrapper/maven-wrapper.jar"; + + /** + * Name of the property which should be used to override the default download url for the wrapper. + */ + private static final String PROPERTY_NAME_WRAPPER_URL = "wrapperUrl"; + + public static void main(String args[]) { + System.out.println("- Downloader started"); + File baseDirectory = new File(args[0]); + System.out.println("- Using base directory: " + baseDirectory.getAbsolutePath()); + + // If the maven-wrapper.properties exists, read it and check if it contains a custom + // wrapperUrl parameter. + File mavenWrapperPropertyFile = new File(baseDirectory, MAVEN_WRAPPER_PROPERTIES_PATH); + String url = DEFAULT_DOWNLOAD_URL; + if (mavenWrapperPropertyFile.exists()) { + FileInputStream mavenWrapperPropertyFileInputStream = null; + try { + mavenWrapperPropertyFileInputStream = new FileInputStream(mavenWrapperPropertyFile); + Properties mavenWrapperProperties = new Properties(); + mavenWrapperProperties.load(mavenWrapperPropertyFileInputStream); + url = mavenWrapperProperties.getProperty(PROPERTY_NAME_WRAPPER_URL, url); + } catch (IOException e) { + System.out.println("- ERROR loading '" + MAVEN_WRAPPER_PROPERTIES_PATH + "'"); + } finally { + try { + if (mavenWrapperPropertyFileInputStream != null) { + mavenWrapperPropertyFileInputStream.close(); + } + } catch (IOException e) { + // Ignore ... + } + } + } + System.out.println("- Downloading from: " + url); + + File outputFile = new File(baseDirectory.getAbsolutePath(), MAVEN_WRAPPER_JAR_PATH); + if (!outputFile.getParentFile().exists()) { + if (!outputFile.getParentFile().mkdirs()) { + System.out.println( + "- ERROR creating output directory '" + outputFile.getParentFile().getAbsolutePath() + "'"); + } + } + System.out.println("- Downloading to: " + outputFile.getAbsolutePath()); + try { + downloadFileFromURL(url, outputFile); + System.out.println("Done"); + System.exit(0); + } catch (Throwable e) { + System.out.println("- Error downloading"); + e.printStackTrace(); + System.exit(1); + } + } + + private static void downloadFileFromURL(String urlString, File destination) throws Exception { + if (System.getenv("MVNW_USERNAME") != null && System.getenv("MVNW_PASSWORD") != null) { + String username = System.getenv("MVNW_USERNAME"); + char[] password = System.getenv("MVNW_PASSWORD").toCharArray(); + Authenticator.setDefault(new Authenticator() { + @Override + protected PasswordAuthentication getPasswordAuthentication() { + return new PasswordAuthentication(username, password); + } + }); + } + URL website = new URL(urlString); + ReadableByteChannel rbc; + rbc = Channels.newChannel(website.openStream()); + FileOutputStream fos = new FileOutputStream(destination); + fos.getChannel().transferFrom(rbc, 0, Long.MAX_VALUE); + fos.close(); + rbc.close(); + } + +} diff --git a/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar b/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..2cc7d4a55c0cd0092912bf49ae38b3a9e3fd0054 GIT binary patch literal 50710 zcmbTd1CVCTmM+|7+wQV$+qP}n>auOywyU~q+qUhh+uxis_~*a##hm*_WW?9E7Pb7N%LRFiwbEGCJ0XP=%-6oeT$XZcYgtzC2~q zk(K08IQL8oTl}>>+hE5YRgXTB@fZ4TH9>7=79e`%%tw*SQUa9~$xKD5rS!;ZG@ocK zQdcH}JX?W|0_Afv?y`-NgLum62B&WSD$-w;O6G0Sm;SMX65z)l%m1e-g8Q$QTI;(Q z+x$xth4KFvH@Bs6(zn!iF#nenk^Y^ce;XIItAoCsow38eq?Y-Auh!1in#Rt-_D>H^ z=EjbclGGGa6VnaMGmMLj`x3NcwA43Jb(0gzl;RUIRAUDcR1~99l2SAPkVhoRMMtN} zXvC<tOmX83grD8GSo_Lo?%lNfhD#EBgPo z*nf@ppMC#B!T)Ae0RG$mlJWmGl7CkuU~B8-==5i;rS;8i6rJ=PoQxf446XDX9g|c> zU64ePyMlsI^V5Jq5A+BPe#e73+kpc_r1tv#B)~EZ;7^67F0*QiYfrk0uVW;Qb=NsG zN>gsuCwvb?s-KQIppEaeXtEMdc9dy6Dfduz-tMTms+i01{eD9JE&h?Kht*$eOl#&L zJdM_-vXs(V#$Ed;5wyNWJdPNh+Z$+;$|%qR(t`4W@kDhd*{(7-33BOS6L$UPDeE_53j${QfKN-0v-HG z(QfyvFNbwPK%^!eIo4ac1;b>c0vyf9}Xby@YY!lkz-UvNp zwj#Gg|4B~?n?G^{;(W;|{SNoJbHTMpQJ*Wq5b{l9c8(%?Kd^1?H1om1de0Da9M;Q=n zUfn{f87iVb^>Exl*nZ0hs(Yt>&V9$Pg`zX`AI%`+0SWQ4Zc(8lUDcTluS z5a_KerZWe}a-MF9#Cd^fi!y3%@RFmg&~YnYZ6<=L`UJ0v={zr)>$A;x#MCHZy1st7 ztT+N07NR+vOwSV2pvWuN1%lO!K#Pj0Fr>Q~R40{bwdL%u9i`DSM4RdtEH#cW)6}+I-eE< z&tZs+(Ogu(H_;$a$!7w`MH0r%h&@KM+<>gJL@O~2K2?VrSYUBbhCn#yy?P)uF3qWU z0o09mIik+kvzV6w>vEZy@&Mr)SgxPzUiDA&%07m17udz9usD82afQEps3$pe!7fUf z0eiidkJ)m3qhOjVHC_M(RYCBO%CZKZXFb8}s0-+}@CIn&EF(rRWUX2g^yZCvl0bI} zbP;1S)iXnRC&}5-Tl(hASKqdSnO?ASGJ*MIhOXIblmEudj(M|W!+I3eDc}7t`^mtg z)PKlaXe(OH+q-)qcQ8a@!llRrpGI8DsjhoKvw9T;TEH&?s=LH0w$EzI>%u;oD@x83 zJL7+ncjI9nn!TlS_KYu5vn%f*@qa5F;| zEFxY&B?g=IVlaF3XNm_03PA)=3|{n-UCgJoTr;|;1AU9|kPE_if8!Zvb}0q$5okF$ zHaJdmO&gg!9oN|M{!qGE=tb|3pVQ8PbL$}e;NgXz<6ZEggI}wO@aBP**2Wo=yN#ZC z4G$m^yaM9g=|&!^ft8jOLuzc3Psca*;7`;gnHm}tS0%f4{|VGEwu45KptfNmwxlE~ z^=r30gi@?cOm8kAz!EylA4G~7kbEiRlRIzwrb~{_2(x^$-?|#e6Bi_**(vyr_~9Of z!n>Gqf+Qwiu!xhi9f53=PM3`3tNF}pCOiPU|H4;pzjcsqbwg*{{kyrTxk<;mx~(;; z1NMrpaQ`57yn34>Jo3b|HROE(UNcQash!0p2-!Cz;{IRv#Vp5!3o$P8!%SgV~k&Hnqhp`5eLjTcy93cK!3Hm-$`@yGnaE=?;*2uSpiZTs_dDd51U%i z{|Zd9ou-;laGS_x=O}a+ zB||za<795A?_~Q=r=coQ+ZK@@ zId~hWQL<%)fI_WDIX#=(WNl!Dm$a&ROfLTd&B$vatq!M-2Jcs;N2vps$b6P1(N}=oI3<3luMTmC|0*{ zm1w8bt7vgX($!0@V0A}XIK)w!AzUn7vH=pZEp0RU0p?}ch2XC-7r#LK&vyc2=-#Q2 z^L%8)JbbcZ%g0Du;|8=q8B>X=mIQirpE=&Ox{TiuNDnOPd-FLI^KfEF729!!0x#Es z@>3ursjFSpu%C-8WL^Zw!7a0O-#cnf`HjI+AjVCFitK}GXO`ME&on|^=~Zc}^LBp9 zj=-vlN;Uc;IDjtK38l7}5xxQF&sRtfn4^TNtnzXv4M{r&ek*(eNbIu!u$>Ed%` z5x7+&)2P&4>0J`N&ZP8$vcR+@FS0126s6+Jx_{{`3ZrIMwaJo6jdrRwE$>IU_JTZ} z(||hyyQ)4Z1@wSlT94(-QKqkAatMmkT7pCycEB1U8KQbFX&?%|4$yyxCtm3=W`$4fiG0WU3yI@c zx{wfmkZAYE_5M%4{J-ygbpH|(|GD$2f$3o_Vti#&zfSGZMQ5_f3xt6~+{RX=$H8at z?GFG1Tmp}}lmm-R->ve*Iv+XJ@58p|1_jRvfEgz$XozU8#iJS})UM6VNI!3RUU!{5 zXB(+Eqd-E;cHQ>)`h0(HO_zLmzR3Tu-UGp;08YntWwMY-9i^w_u#wR?JxR2bky5j9 z3Sl-dQQU$xrO0xa&>vsiK`QN<$Yd%YXXM7*WOhnRdSFt5$aJux8QceC?lA0_if|s> ze{ad*opH_kb%M&~(~&UcX0nFGq^MqjxW?HJIP462v9XG>j(5Gat_)#SiNfahq2Mz2 zU`4uV8m$S~o9(W>mu*=h%Gs(Wz+%>h;R9Sg)jZ$q8vT1HxX3iQnh6&2rJ1u|j>^Qf`A76K%_ubL`Zu?h4`b=IyL>1!=*%!_K)=XC z6d}4R5L+sI50Q4P3upXQ3Z!~1ZXLlh!^UNcK6#QpYt-YC=^H=EPg3)z*wXo*024Q4b2sBCG4I# zlTFFY=kQ>xvR+LsuDUAk)q%5pEcqr(O_|^spjhtpb1#aC& zghXzGkGDC_XDa%t(X`E+kvKQ4zrQ*uuQoj>7@@ykWvF332)RO?%AA&Fsn&MNzmFa$ zWk&&^=NNjxLjrli_8ESU)}U|N{%j&TQmvY~lk!~Jh}*=^INA~&QB9em!in_X%Rl1&Kd~Z(u z9mra#<@vZQlOY+JYUwCrgoea4C8^(xv4ceCXcejq84TQ#sF~IU2V}LKc~Xlr_P=ry zl&Hh0exdCbVd^NPCqNNlxM3vA13EI8XvZ1H9#bT7y*U8Y{H8nwGpOR!e!!}*g;mJ#}T{ekSb}5zIPmye*If(}}_=PcuAW#yidAa^9-`<8Gr0 z)Fz=NiZ{)HAvw{Pl5uu)?)&i&Us$Cx4gE}cIJ}B4Xz~-q7)R_%owbP!z_V2=Aq%Rj z{V;7#kV1dNT9-6R+H}}(ED*_!F=~uz>&nR3gb^Ce%+0s#u|vWl<~JD3MvS0T9thdF zioIG3c#Sdsv;LdtRv3ml7%o$6LTVL>(H`^@TNg`2KPIk*8-IB}X!MT0`hN9Ddf7yN z?J=GxPL!uJ7lqwowsl?iRrh@#5C$%E&h~Z>XQcvFC*5%0RN-Opq|=IwX(dq(*sjs+ zqy99+v~m|6T#zR*e1AVxZ8djd5>eIeCi(b8sUk)OGjAsKSOg^-ugwl2WSL@d#?mdl zib0v*{u-?cq}dDGyZ%$XRY=UkQwt2oGu`zQneZh$=^! zj;!pCBWQNtvAcwcWIBM2y9!*W|8LmQy$H~5BEx)78J`4Z0(FJO2P^!YyQU{*Al+fs z){!4JvT1iLrJ8aU3k0t|P}{RN)_^v%$$r;+p0DY7N8CXzmS*HB*=?qaaF9D@#_$SN zSz{moAK<*RH->%r7xX~9gVW$l7?b|_SYI)gcjf0VAUJ%FcQP(TpBs; zg$25D!Ry_`8xpS_OJdeo$qh#7U+cepZ??TII7_%AXsT$B z=e)Bx#v%J0j``00Zk5hsvv6%T^*xGNx%KN-=pocSoqE5_R)OK%-Pbu^1MNzfds)mL zxz^F4lDKV9D&lEY;I+A)ui{TznB*CE$=9(wgE{m}`^<--OzV-5V4X2w9j(_!+jpTr zJvD*y6;39&T+==$F&tsRKM_lqa1HC}aGL0o`%c9mO=fts?36@8MGm7Vi{Y z^<7m$(EtdSr#22<(rm_(l_(`j!*Pu~Y>>xc>I9M#DJYDJNHO&4=HM%YLIp?;iR&$m z#_$ZWYLfGLt5FJZhr3jpYb`*%9S!zCG6ivNHYzNHcI%khtgHBliM^Ou}ZVD7ehU9 zS+W@AV=?Ro!=%AJ>Kcy9aU3%VX3|XM_K0A+ZaknKDyIS3S-Hw1C7&BSW5)sqj5Ye_ z4OSW7Yu-;bCyYKHFUk}<*<(@TH?YZPHr~~Iy%9@GR2Yd}J2!N9K&CN7Eq{Ka!jdu; zQNB*Y;i(7)OxZK%IHGt#Rt?z`I|A{q_BmoF!f^G}XVeTbe1Wnzh%1g>j}>DqFf;Rp zz7>xIs12@Ke0gr+4-!pmFP84vCIaTjqFNg{V`5}Rdt~xE^I;Bxp4)|cs8=f)1YwHz zqI`G~s2~qqDV+h02b`PQpUE#^^Aq8l%y2|ByQeXSADg5*qMprEAE3WFg0Q39`O+i1 z!J@iV!`Y~C$wJ!5Z+j5$i<1`+@)tBG$JL=!*uk=2k;T<@{|s1$YL079FvK%mPhyHV zP8^KGZnp`(hVMZ;s=n~3r2y;LTwcJwoBW-(ndU-$03{RD zh+Qn$ja_Z^OuMf3Ub|JTY74s&Am*(n{J3~@#OJNYuEVVJd9*H%)oFoRBkySGm`hx! zT3tG|+aAkXcx-2Apy)h^BkOyFTWQVeZ%e2@;*0DtlG9I3Et=PKaPt&K zw?WI7S;P)TWED7aSH$3hL@Qde?H#tzo^<(o_sv_2ci<7M?F$|oCFWc?7@KBj-;N$P zB;q!8@bW-WJY9do&y|6~mEruZAVe$!?{)N9rZZxD-|oltkhW9~nR8bLBGXw<632!l z*TYQn^NnUy%Ds}$f^=yQ+BM-a5X4^GHF=%PDrRfm_uqC zh{sKwIu|O0&jWb27;wzg4w5uA@TO_j(1X?8E>5Zfma|Ly7Bklq|s z9)H`zoAGY3n-+&JPrT!>u^qg9Evx4y@GI4$n-Uk_5wttU1_t?6><>}cZ-U+&+~JE) zPlDbO_j;MoxdLzMd~Ew|1o^a5q_1R*JZ=#XXMzg?6Zy!^hop}qoLQlJ{(%!KYt`MK z8umEN@Z4w!2=q_oe=;QttPCQy3Nm4F@x>@v4sz_jo{4m*0r%J(w1cSo;D_hQtJs7W z><$QrmG^+<$4{d2bgGo&3-FV}avg9zI|Rr(k{wTyl3!M1q+a zD9W{pCd%il*j&Ft z5H$nENf>>k$;SONGW`qo6`&qKs*T z2^RS)pXk9b@(_Fw1bkb)-oqK|v}r$L!W&aXA>IpcdNZ_vWE#XO8X`#Yp1+?RshVcd zknG%rPd*4ECEI0wD#@d+3NbHKxl}n^Sgkx==Iu%}HvNliOqVBqG?P2va zQ;kRJ$J6j;+wP9cS za#m;#GUT!qAV%+rdWolk+)6kkz4@Yh5LXP+LSvo9_T+MmiaP-eq6_k;)i6_@WSJ zlT@wK$zqHu<83U2V*yJ|XJU4farT#pAA&@qu)(PO^8PxEmPD4;Txpio+2)#!9 z>&=i7*#tc0`?!==vk>s7V+PL#S1;PwSY?NIXN2=Gu89x(cToFm))7L;< z+bhAbVD*bD=}iU`+PU+SBobTQ%S!=VL!>q$rfWsaaV}Smz>lO9JXT#`CcH_mRCSf4%YQAw`$^yY z3Y*^Nzk_g$xn7a_NO(2Eb*I=^;4f!Ra#Oo~LLjlcjke*k*o$~U#0ZXOQ5@HQ&T46l z7504MUgZkz2gNP1QFN8Y?nSEnEai^Rgyvl}xZfMUV6QrJcXp;jKGqB=D*tj{8(_pV zqyB*DK$2lgYGejmJUW)*s_Cv65sFf&pb(Yz8oWgDtQ0~k^0-wdF|tj}MOXaN@ydF8 zNr={U?=;&Z?wr^VC+`)S2xl}QFagy;$mG=TUs7Vi2wws5zEke4hTa2)>O0U?$WYsZ z<8bN2bB_N4AWd%+kncgknZ&}bM~eDtj#C5uRkp21hWW5gxWvc6b*4+dn<{c?w9Rmf zIVZKsPl{W2vQAlYO3yh}-{Os=YBnL8?uN5(RqfQ=-1cOiUnJu>KcLA*tQK3FU`_bM zM^T28w;nAj5EdAXFi&Kk1Nnl2)D!M{@+D-}bIEe+Lc4{s;YJc-{F#``iS2uk;2!Zp zF9#myUmO!wCeJIoi^A+T^e~20c+c2C}XltaR!|U-HfDA=^xF97ev}$l6#oY z&-&T{egB)&aV$3_aVA51XGiU07$s9vubh_kQG?F$FycvS6|IO!6q zq^>9|3U^*!X_C~SxX&pqUkUjz%!j=VlXDo$!2VLH!rKj@61mDpSr~7B2yy{>X~_nc zRI+7g2V&k zd**H++P9dg!-AOs3;GM`(g<+GRV$+&DdMVpUxY9I1@uK28$az=6oaa+PutlO9?6#? zf-OsgT>^@8KK>ggkUQRPPgC7zjKFR5spqQb3ojCHzj^(UH~v+!y*`Smv)VpVoPwa6 zWG18WJaPKMi*F6Zdk*kU^`i~NNTfn3BkJniC`yN98L-Awd)Z&mY? zprBW$!qL-OL7h@O#kvYnLsfff@kDIegt~?{-*5A7JrA;#TmTe?jICJqhub-G@e??D zqiV#g{)M!kW1-4SDel7TO{;@*h2=_76g3NUD@|c*WO#>MfYq6_YVUP+&8e4|%4T`w zXzhmVNziAHazWO2qXcaOu@R1MrPP{t)`N)}-1&~mq=ZH=w=;-E$IOk=y$dOls{6sRR`I5>|X zpq~XYW4sd;J^6OwOf**J>a7u$S>WTFPRkjY;BfVgQst)u4aMLR1|6%)CB^18XCz+r ztkYQ}G43j~Q&1em(_EkMv0|WEiKu;z2zhb(L%$F&xWwzOmk;VLBYAZ8lOCziNoPw1 zv2BOyXA`A8z^WH!nXhKXM`t0;6D*-uGds3TYGrm8SPnJJOQ^fJU#}@aIy@MYWz**H zvkp?7I5PE{$$|~{-ZaFxr6ZolP^nL##mHOErB^AqJqn^hFA=)HWj!m3WDaHW$C)i^ z9@6G$SzB=>jbe>4kqr#sF7#K}W*Cg-5y6kun3u&0L7BpXF9=#7IN8FOjWrWwUBZiU zT_se3ih-GBKx+Uw0N|CwP3D@-C=5(9T#BH@M`F2!Goiqx+Js5xC92|Sy0%WWWp={$(am!#l~f^W_oz78HX<0X#7 zp)p1u~M*o9W@O8P{0Qkg@Wa# z2{Heb&oX^CQSZWSFBXKOfE|tsAm#^U-WkDnU;IowZ`Ok4!mwHwH=s|AqZ^YD4!5!@ zPxJj+Bd-q6w_YG`z_+r;S86zwXb+EO&qogOq8h-Ect5(M2+>(O7n7)^dP*ws_3U6v zVsh)sk^@*c>)3EML|0<-YROho{lz@Nd4;R9gL{9|64xVL`n!m$-Jjrx?-Bacp!=^5 z1^T^eB{_)Y<9)y{-4Rz@9_>;_7h;5D+@QcbF4Wv7hu)s0&==&6u)33 zHRj+&Woq-vDvjwJCYES@$C4{$?f$Ibi4G()UeN11rgjF+^;YE^5nYprYoJNoudNj= zm1pXSeG64dcWHObUetodRn1Fw|1nI$D9z}dVEYT0lQnsf_E1x2vBLql7NrHH!n&Sq z6lc*mvU=WS6=v9Lrl}&zRiu_6u;6g%_DU{9b+R z#YHqX7`m9eydf?KlKu6Sb%j$%_jmydig`B*TN`cZL-g!R)iE?+Q5oOqBFKhx z%MW>BC^(F_JuG(ayE(MT{S3eI{cKiwOtPwLc0XO*{*|(JOx;uQOfq@lp_^cZo=FZj z4#}@e@dJ>Bn%2`2_WPeSN7si^{U#H=7N4o%Dq3NdGybrZgEU$oSm$hC)uNDC_M9xc zGzwh5Sg?mpBIE8lT2XsqTt3j3?We8}3bzLBTQd639vyg^$0#1epq8snlDJP2(BF)K zSx30RM+{f+b$g{9usIL8H!hCO117Xgv}ttPJm9wVRjPk;ePH@zxv%j9k5`TzdXLeT zFgFX`V7cYIcBls5WN0Pf6SMBN+;CrQ(|EsFd*xtwr#$R{Z9FP`OWtyNsq#mCgZ7+P z^Yn$haBJ)r96{ZJd8vlMl?IBxrgh=fdq_NF!1{jARCVz>jNdC)H^wfy?R94#MPdUjcYX>#wEx+LB#P-#4S-%YH>t-j+w zOFTI8gX$ard6fAh&g=u&56%3^-6E2tpk*wx3HSCQ+t7+*iOs zPk5ysqE}i*cQocFvA68xHfL|iX(C4h*67@3|5Qwle(8wT&!&{8*{f%0(5gH+m>$tq zp;AqrP7?XTEooYG1Dzfxc>W%*CyL16q|fQ0_jp%%Bk^k!i#Nbi(N9&T>#M{gez_Ws zYK=l}adalV(nH}I_!hNeb;tQFk3BHX7N}}R8%pek^E`X}%ou=cx8InPU1EE0|Hen- zyw8MoJqB5=)Z%JXlrdTXAE)eqLAdVE-=>wGHrkRet}>3Yu^lt$Kzu%$3#(ioY}@Gu zjk3BZuQH&~7H+C*uX^4}F*|P89JX;Hg2U!pt>rDi(n(Qe-c}tzb0#6_ItoR0->LSt zR~UT<-|@TO%O`M+_e_J4wx7^)5_%%u+J=yF_S#2Xd?C;Ss3N7KY^#-vx+|;bJX&8r zD?|MetfhdC;^2WG`7MCgs>TKKN=^=!x&Q~BzmQio_^l~LboTNT=I zC5pme^P@ER``p$2md9>4!K#vV-Fc1an7pl>_|&>aqP}+zqR?+~Z;f2^`a+-!Te%V? z;H2SbF>jP^GE(R1@%C==XQ@J=G9lKX+Z<@5}PO(EYkJh=GCv#)Nj{DkWJM2}F&oAZ6xu8&g7pn1ps2U5srwQ7CAK zN&*~@t{`31lUf`O;2w^)M3B@o)_mbRu{-`PrfNpF!R^q>yTR&ETS7^-b2*{-tZAZz zw@q5x9B5V8Qd7dZ!Ai$9hk%Q!wqbE1F1c96&zwBBaRW}(^axoPpN^4Aw}&a5dMe+*Gomky_l^54*rzXro$ z>LL)U5Ry>~FJi=*{JDc)_**c)-&faPz`6v`YU3HQa}pLtb5K)u%K+BOqXP0)rj5Au$zB zW1?vr?mDv7Fsxtsr+S6ucp2l#(4dnr9sD*v+@*>g#M4b|U?~s93>Pg{{a5|rm2xfI z`>E}?9S@|IoUX{Q1zjm5YJT|3S>&09D}|2~BiMo=z4YEjXlWh)V&qs;*C{`UMxp$9 zX)QB?G$fPD6z5_pNs>Jeh{^&U^)Wbr?2D6-q?)`*1k@!UvwQgl8eG$r+)NnFoT)L6 zg7lEh+E6J17krfYJCSjWzm67hEth24pomhz71|Qodn#oAILN)*Vwu2qpJirG)4Wnv}9GWOFrQg%Je+gNrPl8mw7ykE8{ z=|B4+uwC&bpp%eFcRU6{mxRV32VeH8XxX>v$du<$(DfinaaWxP<+Y97Z#n#U~V zVEu-GoPD=9$}P;xv+S~Ob#mmi$JQmE;Iz4(){y*9pFyW-jjgdk#oG$fl4o9E8bo|L zWjo4l%n51@Kz-n%zeSCD`uB?T%FVk+KBI}=ve zvlcS#wt`U6wrJo}6I6Rwb=1GzZfwE=I&Ne@p7*pH84XShXYJRgvK)UjQL%R9Zbm(m zxzTQsLTON$WO7vM)*vl%Pc0JH7WhP;$z@j=y#avW4X8iqy6mEYr@-}PW?H)xfP6fQ z&tI$F{NNct4rRMSHhaelo<5kTYq+(?pY)Ieh8*sa83EQfMrFupMM@nfEV@EmdHUv9 z35uzIrIuo4#WnF^_jcpC@uNNaYTQ~uZWOE6P@LFT^1@$o&q+9Qr8YR+ObBkpP9=F+$s5+B!mX2~T zAuQ6RenX?O{IlLMl1%)OK{S7oL}X%;!XUxU~xJN8xk z`xywS*naF(J#?vOpB(K=o~lE;m$zhgPWDB@=p#dQIW>xe_p1OLoWInJRKbEuoncf; zmS1!u-ycc1qWnDg5Nk2D)BY%jmOwCLC+Ny>`f&UxFowIsHnOXfR^S;&F(KXd{ODlm z$6#1ccqt-HIH9)|@fHnrKudu!6B$_R{fbCIkSIb#aUN|3RM>zuO>dpMbROZ`^hvS@ z$FU-;e4W}!ubzKrU@R*dW*($tFZ>}dd*4_mv)#O>X{U@zSzQt*83l9mI zI$8O<5AIDx`wo0}f2fsPC_l>ONx_`E7kdXu{YIZbp1$(^oBAH({T~&oQ&1{X951QW zmhHUxd)t%GQ9#ak5fTjk-cahWC;>^Rg7(`TVlvy0W@Y!Jc%QL3Ozu# zDPIqBCy&T2PWBj+d-JA-pxZlM=9ja2ce|3B(^VCF+a*MMp`(rH>Rt6W1$;r{n1(VK zLs>UtkT43LR2G$AOYHVailiqk7naz2yZGLo*xQs!T9VN5Q>eE(w zw$4&)&6xIV$IO^>1N-jrEUg>O8G4^@y+-hQv6@OmF@gy^nL_n1P1-Rtyy$Bl;|VcV zF=p*&41-qI5gG9UhKmmnjs932!6hceXa#-qfK;3d*a{)BrwNFeKU|ge?N!;zk+kB! zMD_uHJR#%b54c2tr~uGPLTRLg$`fupo}cRJeTwK;~}A>(Acy4k-Xk&Aa1&eWYS1ULWUj@fhBiWY$pdfy+F z@G{OG{*v*mYtH3OdUjwEr6%_ZPZ3P{@rfbNPQG!BZ7lRyC^xlMpWH`@YRar`tr}d> z#wz87t?#2FsH-jM6m{U=gp6WPrZ%*w0bFm(T#7m#v^;f%Z!kCeB5oiF`W33W5Srdt zdU?YeOdPG@98H7NpI{(uN{FJdu14r(URPH^F6tOpXuhU7T9a{3G3_#Ldfx_nT(Hec zo<1dyhsVsTw;ZkVcJ_0-h-T3G1W@q)_Q30LNv)W?FbMH+XJ* zy=$@39Op|kZv`Rt>X`zg&at(?PO^I=X8d9&myFEx#S`dYTg1W+iE?vt#b47QwoHI9 zNP+|3WjtXo{u}VG(lLUaW0&@yD|O?4TS4dfJI`HC-^q;M(b3r2;7|FONXphw-%7~* z&;2!X17|05+kZOpQ3~3!Nb>O94b&ZSs%p)TK)n3m=4eiblVtSx@KNFgBY_xV6ts;NF;GcGxMP8OKV^h6LmSb2E#Qnw ze!6Mnz7>lE9u{AgQ~8u2zM8CYD5US8dMDX-5iMlgpE9m*s+Lh~A#P1er*rF}GHV3h z=`STo?kIXw8I<`W0^*@mB1$}pj60R{aJ7>C2m=oghKyxMbFNq#EVLgP0cH3q7H z%0?L93-z6|+jiN|@v>ix?tRBU(v-4RV`}cQH*fp|)vd3)8i9hJ3hkuh^8dz{F5-~_ zUUr1T3cP%cCaTooM8dj|4*M=e6flH0&8ve32Q)0dyisl))XkZ7Wg~N}6y`+Qi2l+e zUd#F!nJp{#KIjbQdI`%oZ`?h=5G^kZ_uN`<(`3;a!~EMsWV|j-o>c?x#;zR2ktiB! z);5rrHl?GPtr6-o!tYd|uK;Vbsp4P{v_4??=^a>>U4_aUXPWQ$FPLE4PK$T^3Gkf$ zHo&9$U&G`d(Os6xt1r?sg14n)G8HNyWa^q8#nf0lbr4A-Fi;q6t-`pAx1T*$eKM*$ z|CX|gDrk#&1}>5H+`EjV$9Bm)Njw&7-ZR{1!CJTaXuP!$Pcg69`{w5BRHysB$(tWUes@@6aM69kb|Lx$%BRY^-o6bjH#0!7b;5~{6J+jKxU!Kmi# zndh@+?}WKSRY2gZ?Q`{(Uj|kb1%VWmRryOH0T)f3cKtG4oIF=F7RaRnH0Rc_&372={_3lRNsr95%ZO{IX{p@YJ^EI%+gvvKes5cY+PE@unghjdY5#9A!G z70u6}?zmd?v+{`vCu-53_v5@z)X{oPC@P)iA3jK$`r zSA2a7&!^zmUiZ82R2=1cumBQwOJUPz5Ay`RLfY(EiwKkrx%@YN^^XuET;tE zmr-6~I7j!R!KrHu5CWGSChO6deaLWa*9LLJbcAJsFd%Dy>a!>J`N)Z&oiU4OEP-!Ti^_!p}O?7`}i7Lsf$-gBkuY*`Zb z7=!nTT;5z$_5$=J=Ko+Cp|Q0J=%oFr>hBgnL3!tvFoLNhf#D0O=X^h+x08iB;@8pXdRHxX}6R4k@i6%vmsQwu^5z zk1ip`#^N)^#Lg#HOW3sPI33xqFB4#bOPVnY%d6prwxf;Y-w9{ky4{O6&94Ra8VN@K zb-lY;&`HtxW@sF!doT5T$2&lIvJpbKGMuDAFM#!QPXW87>}=Q4J3JeXlwHys?!1^#37q_k?N@+u&Ns20pEoBeZC*np;i;M{2C0Z4_br2gsh6eL z#8`#sn41+$iD?^GL%5?cbRcaa-Nx0vE(D=*WY%rXy3B%gNz0l?#noGJGP728RMY#q z=2&aJf@DcR?QbMmN)ItUe+VM_U!ryqA@1VVt$^*xYt~-qvW!J4Tp<-3>jT=7Zow5M z8mSKp0v4b%a8bxFr>3MwZHSWD73D@+$5?nZAqGM#>H@`)mIeC#->B)P8T$zh-Pxnc z8)~Zx?TWF4(YfKuF3WN_ckpCe5;x4V4AA3(i$pm|78{%!q?|~*eH0f=?j6i)n~Hso zmTo>vqEtB)`%hP55INf7HM@taH)v`Fw40Ayc*R!T?O{ziUpYmP)AH`euTK!zg9*6Z z!>M=$3pd0!&TzU=hc_@@^Yd3eUQpX4-33}b{?~5t5lgW=ldJ@dUAH%`l5US1y_`40 zs(X`Qk}vvMDYYq+@Rm+~IyCX;iD~pMgq^KY)T*aBz@DYEB={PxA>)mI6tM*sx-DmGQHEaHwRrAmNjO!ZLHO4b;;5mf@zzlPhkP($JeZGE7 z?^XN}Gf_feGoG~BjUgVa*)O`>lX=$BSR2)uD<9 z>o^|nb1^oVDhQbfW>>!;8-7<}nL6L^V*4pB=>wwW+RXAeRvKED(n1;R`A6v$6gy0I(;Vf?!4;&sgn7F%LpM}6PQ?0%2Z@b{It<(G1CZ|>913E0nR2r^Pa*Bp z@tFGi*CQ~@Yc-?{cwu1 zsilf=k^+Qs>&WZG(3WDixisHpR>`+ihiRwkL(3T|=xsoNP*@XX3BU8hr57l3k;pni zI``=3Nl4xh4oDj<%>Q1zYXHr%Xg_xrK3Nq?vKX3|^Hb(Bj+lONTz>4yhU-UdXt2>j z<>S4NB&!iE+ao{0Tx^N*^|EZU;0kJkx@zh}S^P{ieQjGl468CbC`SWnwLRYYiStXm zOxt~Rb3D{dz=nHMcY)#r^kF8|q8KZHVb9FCX2m^X*(|L9FZg!5a7((!J8%MjT$#Fs)M1Pb zq6hBGp%O1A+&%2>l0mpaIzbo&jc^!oN^3zxap3V2dNj3x<=TwZ&0eKX5PIso9j1;e zwUg+C&}FJ`k(M|%%}p=6RPUq4sT3-Y;k-<68ciZ~_j|bt>&9ZLHNVrp#+pk}XvM{8 z`?k}o-!if>hVlCP9j%&WI2V`5SW)BCeR5>MQhF)po=p~AYN%cNa_BbV6EEh_kk^@a zD>4&>uCGCUmyA-c)%DIcF4R6!>?6T~Mj_m{Hpq`*(wj>foHL;;%;?(((YOxGt)Bhx zuS+K{{CUsaC++%}S6~CJ=|vr(iIs-je)e9uJEU8ZJAz)w166q)R^2XI?@E2vUQ!R% zn@dxS!JcOimXkWJBz8Y?2JKQr>`~SmE2F2SL38$SyR1^yqj8_mkBp)o$@+3BQ~Mid z9U$XVqxX3P=XCKj0*W>}L0~Em`(vG<>srF8+*kPrw z20{z(=^w+ybdGe~Oo_i|hYJ@kZl*(9sHw#Chi&OIc?w`nBODp?ia$uF%Hs(X>xm?j zqZQ`Ybf@g#wli`!-al~3GWiE$K+LCe=Ndi!#CVjzUZ z!sD2O*;d28zkl))m)YN7HDi^z5IuNo3^w(zy8 zszJG#mp#Cj)Q@E@r-=NP2FVxxEAeOI2e=|KshybNB6HgE^(r>HD{*}S}mO>LuRGJT{*tfTzw_#+er-0${}%YPe@CMJ1Ng#j#)i)SnY@ss3gL;g zg2D~#Kpdfu#G;q1qz_TwSz1VJT(b3zby$Vk&;Y#1(A)|xj`_?i5YQ;TR%jice5E;0 zYHg;`zS5{S*9xI6o^j>rE8Ua*XhIw{_-*&@(R|C(am8__>+Ws&Q^ymy*X4~hR2b5r zm^p3sw}yv=tdyncy_Ui7{BQS732et~Z_@{-IhHDXAV`(Wlay<#hb>%H%WDi+K$862nA@BDtM#UCKMu+kM`!JHyWSi?&)A7_ z3{cyNG%a~nnH_!+;g&JxEMAmh-Z}rC!o7>OVzW&PoMyTA_g{hqXG)SLraA^OP**<7 zjWbr7z!o2n3hnx7A=2O=WL;`@9N{vQIM@&|G-ljrPvIuJHYtss0Er0fT5cMXNUf1B z7FAwBDixt0X7C3S)mPe5g`YtME23wAnbU)+AtV}z+e8G;0BP=bI;?(#|Ep!vVfDbK zvx+|CKF>yt0hWQ3drchU#XBU+HiuG*V^snFAPUp-5<#R&BUAzoB!aZ+e*KIxa26V}s6?nBK(U-7REa573wg-jqCg>H8~>O{ z*C0JL-?X-k_y%hpUFL?I>0WV{oV`Nb)nZbJG01R~AG>flIJf)3O*oB2i8~;!P?Wo_ z0|QEB*fifiL6E6%>tlAYHm2cjTFE@*<);#>689Z6S#BySQ@VTMhf9vYQyLeDg1*F} zjq>i1*x>5|CGKN{l9br3kB0EHY|k4{%^t7-uhjd#NVipUZa=EUuE5kS1_~qYX?>hJ z$}!jc9$O$>J&wnu0SgfYods^z?J4X;X7c77Me0kS-dO_VUQ39T(Kv(Y#s}Qqz-0AH z^?WRL(4RzpkD+T5FG_0NyPq-a-B7A5LHOCqwObRJi&oRi(<;OuIN7SV5PeHU$<@Zh zPozEV`dYmu0Z&Tqd>t>8JVde9#Pt+l95iHe$4Xwfy1AhI zDM4XJ;bBTTvRFtW>E+GzkN)9k!hA5z;xUOL2 zq4}zn-DP{qc^i|Y%rvi|^5k-*8;JZ~9a;>-+q_EOX+p1Wz;>i7c}M6Nv`^NY&{J-> z`(mzDJDM}QPu5i44**2Qbo(XzZ-ZDu%6vm8w@DUarqXj41VqP~ zs&4Y8F^Waik3y1fQo`bVUH;b=!^QrWb)3Gl=QVKr+6sxc=ygauUG|cm?|X=;Q)kQ8 zM(xrICifa2p``I7>g2R~?a{hmw@{!NS5`VhH8+;cV(F>B94M*S;5#O`YzZH1Z%yD? zZ61w(M`#aS-*~Fj;x|J!KM|^o;MI#Xkh0ULJcA?o4u~f%Z^16ViA27FxU5GM*rKq( z7cS~MrZ=f>_OWx8j#-Q3%!aEU2hVuTu(7`TQk-Bi6*!<}0WQi;_FpO;fhpL4`DcWp zGOw9vx0N~6#}lz(r+dxIGZM3ah-8qrqMmeRh%{z@dbUD2w15*_4P?I~UZr^anP}DB zU9CCrNiy9I3~d#&!$DX9e?A});BjBtQ7oGAyoI$8YQrkLBIH@2;lt4E^)|d6Jwj}z z&2_E}Y;H#6I4<10d_&P0{4|EUacwFHauvrjAnAm6yeR#}f}Rk27CN)vhgRqEyPMMS7zvunj2?`f;%?alsJ+-K+IzjJx>h8 zu~m_y$!J5RWAh|C<6+uiCNsOKu)E72M3xKK(a9Okw3e_*O&}7llNV!=P87VM2DkAk zci!YXS2&=P0}Hx|wwSc9JP%m8dMJA*q&VFB0yMI@5vWoAGraygwn){R+Cj6B1a2Px z5)u(K5{+;z2n*_XD!+Auv#LJEM)(~Hx{$Yb^ldQmcYF2zNH1V30*)CN_|1$v2|`LnFUT$%-tO0Eg|c5$BB~yDfzS zcOXJ$wpzVK0MfTjBJ0b$r#_OvAJ3WRt+YOLlJPYMx~qp>^$$$h#bc|`g0pF-Ao43? z>*A+8lx>}L{p(Tni2Vvk)dtzg$hUKjSjXRagj)$h#8=KV>5s)J4vGtRn5kP|AXIz! zPgbbVxW{2o4s-UM;c#We8P&mPN|DW7_uLF!a|^0S=wr6Esx9Z$2|c1?GaupU6$tb| zY_KU`(_29O_%k(;>^|6*pZURH3`@%EuKS;Ns z1lujmf;r{qAN&Q0&m{wJSZ8MeE7RM5+Sq;ul_ z`+ADrd_Um+G37js6tKsArNB}n{p*zTUxQr>3@wA;{EUbjNjlNd6$Mx zg0|MyU)v`sa~tEY5$en7^PkC=S<2@!nEdG6L=h(vT__0F=S8Y&eM=hal#7eM(o^Lu z2?^;05&|CNliYrq6gUv;|i!(W{0N)LWd*@{2q*u)}u*> z7MQgk6t9OqqXMln?zoMAJcc zMKaof_Up})q#DzdF?w^%tTI7STI^@8=Wk#enR*)&%8yje>+tKvUYbW8UAPg55xb70 zEn5&Ba~NmOJlgI#iS8W3-@N%>V!#z-ZRwfPO1)dQdQkaHsiqG|~we2ALqG7Ruup(DqSOft2RFg_X%3w?6VqvV1uzX_@F(diNVp z4{I|}35=11u$;?|JFBEE*gb;T`dy+8gWJ9~pNsecrO`t#V9jW-6mnfO@ff9od}b(3s4>p0i30gbGIv~1@a^F2kl7YO;DxmF3? zWi-RoXhzRJV0&XE@ACc?+@6?)LQ2XNm4KfalMtsc%4!Fn0rl zpHTrHwR>t>7W?t!Yc{*-^xN%9P0cs0kr=`?bQ5T*oOo&VRRu+1chM!qj%2I!@+1XF z4GWJ=7ix9;Wa@xoZ0RP`NCWw0*8247Y4jIZ>GEW7zuoCFXl6xIvz$ezsWgKdVMBH> z{o!A7f;R-@eK9Vj7R40xx)T<2$?F2E<>Jy3F;;=Yt}WE59J!1WN367 zA^6pu_zLoZIf*x031CcwotS{L8bJE(<_F%j_KJ2P_IusaZXwN$&^t716W{M6X2r_~ zaiMwdISX7Y&Qi&Uh0upS3TyEIXNDICQlT5fHXC`aji-c{U(J@qh-mWl-uMN|T&435 z5)a1dvB|oe%b2mefc=Vpm0C%IUYYh7HI*;3UdgNIz}R##(#{(_>82|zB0L*1i4B5j-xi9O4x10rs_J6*gdRBX=@VJ+==sWb&_Qc6tSOowM{BX@(zawtjl zdU!F4OYw2@Tk1L^%~JCwb|e#3CC>srRHQ*(N%!7$Mu_sKh@|*XtR>)BmWw!;8-mq7 zBBnbjwx8Kyv|hd*`5}84flTHR1Y@@uqjG`UG+jN_YK&RYTt7DVwfEDXDW4U+iO{>K zw1hr{_XE*S*K9TzzUlJH2rh^hUm2v7_XjwTuYap|>zeEDY$HOq3X4Tz^X}E9z)x4F zs+T?Ed+Hj<#jY-`Va~fT2C$=qFT-5q$@p9~0{G&eeL~tiIAHXA!f6C(rAlS^)&k<- zXU|ZVs}XQ>s5iONo~t!XXZgtaP$Iau;JT%h)>}v54yut~pykaNye4axEK#5@?TSsQ zE;Jvf9I$GVb|S`7$pG)4vgo9NXsKr?u=F!GnA%VS2z$@Z(!MR9?EPcAqi5ft)Iz6sNl`%kj+_H-X`R<>BFrBW=fSlD|{`D%@Rcbu2?%>t7i34k?Ujb)2@J-`j#4 zLK<69qcUuniIan-$A1+fR=?@+thwDIXtF1Tks@Br-xY zfB+zblrR(ke`U;6U~-;p1Kg8Lh6v~LjW@9l2P6s+?$2!ZRPX`(ZkRGe7~q(4&gEi<$ch`5kQ?*1=GSqkeV z{SA1EaW_A!t{@^UY2D^YO0(H@+kFVzZaAh0_`A`f(}G~EP~?B|%gtxu&g%^x{EYSz zk+T;_c@d;+n@$<>V%P=nk36?L!}?*=vK4>nJSm+1%a}9UlmTJTrfX4{Lb7smNQn@T zw9p2%(Zjl^bWGo1;DuMHN(djsEm)P8mEC2sL@KyPjwD@d%QnZ$ zMJ3cnn!_!iP{MzWk%PI&D?m?C(y2d|2VChluN^yHya(b`h>~GkI1y;}O_E57zOs!{ zt2C@M$^PR2U#(dZmA-sNreB@z-yb0Bf7j*yONhZG=onhx>t4)RB`r6&TP$n zgmN*)eCqvgriBO-abHQ8ECN0bw?z5Bxpx z=jF@?zFdVn?@gD5egM4o$m`}lV(CWrOKKq(sv*`mNcHcvw&Xryfw<{ch{O&qc#WCTXX6=#{MV@q#iHYba!OUY+MGeNTjP%Fj!WgM&`&RlI^=AWTOqy-o zHo9YFt!gQ*p7{Fl86>#-JLZo(b^O`LdFK~OsZBRR@6P?ad^Ujbqm_j^XycM4ZHFyg ziUbIFW#2tj`65~#2V!4z7DM8Z;fG0|APaQ{a2VNYpNotB7eZ5kp+tPDz&Lqs0j%Y4tA*URpcfi z_M(FD=fRGdqf430j}1z`O0I=;tLu81bwJXdYiN7_&a-?ly|-j*+=--XGvCq#32Gh(=|qj5F?kmihk{%M&$}udW5)DHK zF_>}5R8&&API}o0osZJRL3n~>76nUZ&L&iy^s>PMnNcYZ|9*1$v-bzbT3rpWsJ+y{ zPrg>5Zlery96Um?lc6L|)}&{992{_$J&=4%nRp9BAC6!IB=A&=tF>r8S*O-=!G(_( zwXbX_rGZgeiK*&n5E;f=k{ktyA1(;x_kiMEt0*gpp_4&(twlS2e5C?NoD{n>X2AT# zY@Zp?#!b1zNq96MQqeO*M1MMBin5v#RH52&Xd~DO6-BZLnA6xO1$sou(YJ1Dlc{WF zVa%2DyYm`V#81jP@70IJ;DX@y*iUt$MLm)ByAD$eUuji|5{ptFYq(q)mE(5bOpxjM z^Q`AHWq44SG3`_LxC9fwR)XRVIp=B%<(-lOC3jI#bb@dK(*vjom!=t|#<@dZql%>O z15y^{4tQoeW9Lu%G&V$90x6F)xN6y_oIn;!Q zs)8jT$;&;u%Y>=T3hg34A-+Y*na=|glcStr5D;&5*t5*DmD~x;zQAV5{}Ya`?RRGa zT*t9@$a~!co;pD^!J5bo?lDOWFx%)Y=-fJ+PDGc0>;=q=s?P4aHForSB+)v0WY2JH z?*`O;RHum6j%#LG)Vu#ciO#+jRC3!>T(9fr+XE7T2B7Z|0nR5jw@WG)kDDzTJ=o4~ zUpeyt7}_nd`t}j9BKqryOha{34erm)RmST)_9Aw)@ zHbiyg5n&E{_CQR@h<}34d7WM{s{%5wdty1l+KX8*?+-YkNK2Be*6&jc>@{Fd;Ps|| z26LqdI3#9le?;}risDq$K5G3yoqK}C^@-8z^wj%tdgw-6@F#Ju{Sg7+y)L?)U$ez> zoOaP$UFZ?y5BiFycir*pnaAaY+|%1%8&|(@VB)zweR%?IidwJyK5J!STzw&2RFx zZV@qeaCB01Hu#U9|1#=Msc8Pgz5P*4Lrp!Q+~(G!OiNR{qa7|r^H?FC6gVhkk3y7=uW#Sh;&>78bZ}aK*C#NH$9rX@M3f{nckYI+5QG?Aj1DM)@~z_ zw!UAD@gedTlePB*%4+55naJ8ak_;))#S;4ji!LOqY5VRI){GMwHR~}6t4g>5C_#U# ztYC!tjKjrKvRy=GAsJVK++~$|+s!w9z3H4G^mACv=EErXNSmH7qN}%PKcN|8%9=i)qS5+$L zu&ya~HW%RMVJi4T^pv?>mw*Gf<)-7gf#Qj|e#w2|v4#t!%Jk{&xlf;$_?jW*n!Pyx zkG$<18kiLOAUPuFfyu-EfWX%4jYnjBYc~~*9JEz6oa)_R|8wjZA|RNrAp%}14L7fW zi7A5Wym*K+V8pkqqO-X#3ft{0qs?KVt^)?kS>AicmeO&q+~J~ zp0YJ_P~_a8j= zsAs~G=8F=M{4GZL{|B__UorX@MRNQLn?*_gym4aW(~+i13knnk1P=khoC-ViMZk+x zLW(l}oAg1H`dU+Fv**;qw|ANDSRs>cGqL!Yw^`; zv;{E&8CNJcc)GHzTYM}f&NPw<6j{C3gaeelU#y!M)w-utYEHOCCJo|Vgp7K6C_$14 zqIrLUB0bsgz^D%V%fbo2f9#yb#CntTX?55Xy|Kps&Xek*4_r=KDZ z+`TQuv|$l}MWLzA5Ay6Cvsa^7xvwXpy?`w(6vx4XJ zWuf1bVSb#U8{xlY4+wlZ$9jjPk)X_;NFMqdgq>m&W=!KtP+6NL57`AMljW+es zzqjUjgz;V*kktJI?!NOg^s_)ph45>4UDA!Vo0hn>KZ+h-3=?Y3*R=#!fOX zP$Y~+14$f66ix?UWB_6r#fMcC^~X4R-<&OD1CSDNuX~y^YwJ>sW0j`T<2+3F9>cLo z#!j57$ll2K9(%$4>eA7(>FJX5e)pR5&EZK!IMQzOfik#FU*o*LGz~7u(8}XzIQRy- z!U7AlMTIe|DgQFmc%cHy_9^{o`eD%ja_L>ckU6$O4*U**o5uR7`FzqkU8k4gxtI=o z^P^oGFPm5jwZMI{;nH}$?p@uV8FT4r=|#GziKXK07bHJLtK}X%I0TON$uj(iJ`SY^ zc$b2CoxCQ>7LH@nxcdW&_C#fMYBtTxcg46dL{vf%EFCZ~eErMvZq&Z%Lhumnkn^4A zsx$ay(FnN7kYah}tZ@0?-0Niroa~13`?hVi6`ndno`G+E8;$<6^gsE-K3)TxyoJ4M zb6pj5=I8^FD5H@`^V#Qb2^0cx7wUz&cruA5g>6>qR5)O^t1(-qqP&1g=qvY#s&{bx zq8Hc%LsbK1*%n|Y=FfojpE;w~)G0-X4i*K3{o|J7`krhIOd*c*$y{WIKz2n2*EXEH zT{oml3Th5k*vkswuFXdGDlcLj15Nec5pFfZ*0?XHaF_lVuiB%Pv&p7z)%38}%$Gup zVTa~C8=cw%6BKn_|4E?bPNW4PT7}jZQLhDJhvf4z;~L)506IE0 zX!tWXX(QOQPRj-p80QG79t8T2^az4Zp2hOHziQlvT!|H)jv{Ixodabzv6lBj)6WRB z{)Kg@$~~(7$-az?lw$4@L%I&DI0Lo)PEJJziWP33a3azb?jyXt1v0N>2kxwA6b%l> zZqRpAo)Npi&loWbjFWtEV)783BbeIAhqyuc+~>i7aQ8shIXt)bjCWT6$~ro^>99G} z2XfmT0(|l!)XJb^E!#3z4oEGIsL(xd; zYX1`1I(cG|u#4R4T&C|m*9KB1`UzKvho5R@1eYtUL9B72{i(ir&ls8g!pD ztR|25xGaF!4z5M+U@@lQf(12?xGy`!|3E}7pI$k`jOIFjiDr{tqf0va&3pOn6Pu)% z@xtG2zjYuJXrV)DUrIF*y<1O1<$#54kZ#2;=X51J^F#0nZ0(;S$OZDt_U2bx{RZ=Q zMMdd$fH|!s{ zXq#l;{`xfV`gp&C>A`WrQU?d{!Ey5(1u*VLJt>i27aZ-^&2IIk=zP5p+{$q(K?2(b z8?9h)kvj9SF!Dr zoyF}?V|9;6abHxWk2cEvGs$-}Pg}D+ZzgkaN&$Snp%;5m%zh1E#?Wac-}x?BYlGN#U#Mek*}kek#I9XaHt?mz3*fDrRTQ#&#~xyeqJk1QJ~E$7qsw6 z?sV;|?*=-{M<1+hXoj?@-$y+(^BJ1H~wQ9G8C0#^aEAyhDduNX@haoa=PuPp zYsGv8UBfQaRHgBgLjmP^eh>fLMeh{8ic)?xz?#3kX-D#Z{;W#cd_`9OMFIaJg-=t`_3*!YDgtNQ2+QUEAJB9M{~AvT$H`E)IKmCR21H532+ata8_i_MR@ z2Xj<3w<`isF~Ah$W{|9;51ub*f4#9ziKrOR&jM{x7I_7()O@`F*5o$KtZ?fxU~g`t zUovNEVKYn$U~VX8eR)qb`7;D8pn*Pp$(otYTqL)5KH$lUS-jf}PGBjy$weoceAcPp z&5ZYB$r&P$MN{0H0AxCe4Qmd3T%M*5d4i%#!nmBCN-WU-4m4Tjxn-%j3HagwTxCZ9 z)j5vO-C7%s%D!&UfO>bi2oXiCw<-w{vVTK^rVbv#W=WjdADJy8$khnU!`ZWCIU`># zyjc^1W~pcu>@lDZ{zr6gv%)2X4n27~Ve+cQqcND%0?IFSP4sH#yIaXXYAq^z3|cg` z`I3$m%jra>e2W-=DiD@84T!cb%||k)nPmEE09NC%@PS_OLhkrX*U!cgD*;;&gIaA(DyVT4QD+q_xu z>r`tg{hiGY&DvD-)B*h+YEd+Zn)WylQl}<4>(_NlsKXCRV;a)Rcw!wtelM2_rWX`j zTh5A|i6=2BA(iMCnj_fob@*eA;V?oa4Z1kRBGaU07O70fb6-qmA$Hg$ps@^ka1=RO zTbE_2#)1bndC3VuK@e!Sftxq4=Uux}fDxXE#Q5_x=E1h>T5`DPHz zbH<_OjWx$wy7=%0!mo*qH*7N4tySm+R0~(rbus`7;+wGh;C0O%x~fEMkt!eV>U$`i z5>Q(o z=t$gPjgGh0&I7KY#k50V7DJRX<%^X z>6+ebc9efB3@eE2Tr){;?_w`vhgF>`-GDY(YkR{9RH(MiCnyRtd!LxXJ75z+?2 zGi@m^+2hKJ5sB1@Xi@s_@p_Kwbc<*LQ_`mr^Y%j}(sV_$`J(?_FWP)4NW*BIL~sR>t6 zM;qTJZ~GoY36&{h-Pf}L#y2UtR}>ZaI%A6VkU>vG4~}9^i$5WP2Tj?Cc}5oQxe2=q z8BeLa$hwCg_psjZyC2+?yX4*hJ58Wu^w9}}7X*+i5Rjqu5^@GzXiw#SUir1G1`jY% zOL=GE_ENYxhcyUrEt9XlMNP6kx6h&%6^u3@zB8KUCAa18T(R2J`%JjWZ z!{7cXaEW+Qu*iJPu+m>QqW}Lo$4Z+!I)0JNzZ&_M%=|B1yejFRM04bGAvu{=lNPd+ zJRI^DRQ(?FcVUD+bgEcAi@o(msqys9RTCG#)TjI!9~3-dc`>gW;HSJuQvH~d`MQs86R$|SKXHh zqS9Qy)u;T`>>a!$LuaE2keJV%;8g)tr&Nnc;EkvA-RanHXsy)D@XN0a>h}z2j81R; zsUNJf&g&rKpuD0WD@=dDrPHdBoK42WoBU|nMo17o(5^;M|dB4?|FsAGVrSyWcI`+FVw^vTVC`y}f(BwJl zrw3Sp151^9=}B})6@H*i4-dIN_o^br+BkcLa^H56|^2XsT0dESw2 zMX>(KqNl=x2K5=zIKg}2JpGAZu{I_IO}0$EQ5P{4zol**PCt3F4`GX}2@vr8#Y)~J zKb)gJeHcFnR@4SSh%b;c%J`l=W*40UPjF#q{<}ywv-=vHRFmDjv)NtmC zQx9qm)d%0zH&qG7AFa3VAU1S^(n8VFTC~Hb+HjYMjX8r#&_0MzlNR*mnLH5hi}`@{ zK$8qiDDvS_(L9_2vHgzEQ${DYSE;DqB!g*jhJghE&=LTnbgl&Xepo<*uRtV{2wDHN z)l;Kg$TA>Y|K8Lc&LjWGj<+bp4Hiye_@BfU(y#nF{fpR&|Ltbye?e^j0}8JC4#xi% zv29ZR%8%hk=3ZDvO-@1u8KmQ@6p%E|dlHuy#H1&MiC<*$YdLkHmR#F3ae;bKd;@*i z2_VfELG=B}JMLCO-6UQy^>RDE%K4b>c%9ki`f~Z2Qu8hO7C#t%Aeg8E%+}6P7Twtg z-)dj(w}_zFK&86KR@q9MHicUAucLVshUdmz_2@32(V`y3`&Kf8Q2I)+!n0mR=rrDU zXvv^$ho;yh*kNqJ#r1}b0|i|xRUF6;lhx$M*uG3SNLUTC@|htC z-=fsw^F%$qqz4%QdjBrS+ov}Qv!z00E+JWas>p?z@=t!WWU3K*?Z(0meTuTOC7OTx zU|kFLE0bLZ+WGcL$u4E}5dB0g`h|uwv3=H6f+{5z9oLv-=Q45+n~V4WwgO=CabjM% zBAN+RjM65(-}>Q2V#i1Na@a0`08g&y;W#@sBiX6Tpy8r}*+{RnyGUT`?XeHSqo#|J z^ww~c;ou|iyzpErDtlVU=`8N7JSu>4M z_pr9=tX0edVn9B}YFO2y(88j#S{w%E8vVOpAboK*27a7e4Ekjt0)hIX99*1oE;vex z7#%jhY=bPijA=Ce@9rRO(Vl_vnd00!^TAc<+wVvRM9{;hP*rqEL_(RzfK$er_^SN; z)1a8vo8~Dr5?;0X0J62Cusw$A*c^Sx1)dom`-)Pl7hsW4i(r*^Mw`z5K>!2ixB_mu z*Ddqjh}zceRFdmuX1akM1$3>G=#~|y?eYv(e-`Qy?bRHIq=fMaN~fB zUa6I8Rt=)jnplP>yuS+P&PxeWpJ#1$F`iqRl|jF$WL_aZFZl@kLo&d$VJtu&w?Q0O zzuXK>6gmygq(yXJy0C1SL}T8AplK|AGNUOhzlGeK_oo|haD@)5PxF}rV+5`-w{Aag zus45t=FU*{LguJ11Sr-28EZkq;!mJO7AQGih1L4rEyUmp>B!%X0YemsrV3QFvlgt* z5kwlPzaiJ+kZ^PMd-RRbl(Y?F*m`4*UIhIuf#8q>H_M=fM*L_Op-<_r zBZagV=4B|EW+KTja?srADTZXCd3Yv%^Chfpi)cg{ED${SI>InNpRj5!euKv?=Xn92 zsS&FH(*w`qLIy$doc>RE&A5R?u zzkl1sxX|{*fLpXvIW>9d<$ePROttn3oc6R!sN{&Y+>Jr@yeQN$sFR z;w6A<2-0%UA?c8Qf;sX7>>uKRBv3Ni)E9pI{uVzX|6Bb0U)`lhLE3hK58ivfRs1}d zNjlGK0hdq0qjV@q1qI%ZFMLgcpWSY~mB^LK)4GZ^h_@H+3?dAe_a~k*;9P_d7%NEFP6+ zgV(oGr*?W(ql?6SQ~`lUsjLb%MbfC4V$)1E0Y_b|OIYxz4?O|!kRb?BGrgiH5+(>s zoqM}v*;OBfg-D1l`M6T6{K`LG+0dJ1)!??G5g(2*vlNkm%Q(MPABT$r13q?|+kL4- zf)Mi5r$sn;u41aK(K#!m+goyd$c!KPl~-&-({j#D4^7hQkV3W|&>l_b!}!z?4($OA z5IrkfuT#F&S1(`?modY&I40%gtroig{YMvF{K{>5u^I51k8RriGd${z)=5k2tG zM|&Bp5kDTfb#vfuTTd?)a=>bX=lokw^y9+2LS?kwHQIWI~pYgy7 zb?A-RKVm_vM5!9?C%qYdfRAw& zAU7`up~%g=p@}pg#b7E)BFYx3g%(J36Nw(Dij!b>cMl@CSNbrW!DBDbTD4OXk!G4x zi}JBKc8HBYx$J~31PXH+4^x|UxK~(<@I;^3pWN$E=sYma@JP|8YL`L(zI6Y#c%Q{6 z*APf`DU$S4pr#_!60BH$FGViP14iJmbrzSrOkR;f3YZa{#E7Wpd@^4E-zH8EgPc-# zKWFPvh%WbqU_%ZEt`=Q?odKHc7@SUmY{GK`?40VuL~o)bS|is$Hn=<=KGHOsEC5tB zFb|q}gGlL97NUf$G$>^1b^3E18PZ~Pm9kX%*ftnolljiEt@2#F2R5ah$zbXd%V_Ev zyDd{1o_uuoBga$fB@Fw!V5F3jIr=a-ykqrK?WWZ#a(bglI_-8pq74RK*KfQ z0~Dzus7_l;pMJYf>Bk`)`S8gF!To-BdMnVw5M-pyu+aCiC5dwNH|6fgRsIKZcF&)g zr}1|?VOp}I3)IR@m1&HX1~#wsS!4iYqES zK}4J{Ei>;e3>LB#Oly>EZkW14^@YmpbgxCDi#0RgdM${&wxR+LiX}B+iRioOB0(pDKpVEI;ND?wNx>%e|m{RsqR_{(nmQ z3ZS}@t!p4a(BKx_-CYwrcyJ5u1TO9bcXti$8sy>xcLKqKCc#~UOZYD{llKTSFEjJ~ zyNWt>tLU}*>^`TvPxtP%F`ZJQw@W0^>x;!^@?k_)9#bF$j0)S3;mH-IR5y82l|%=F z2lR8zhP?XNP-ucZZ6A+o$xOyF!w;RaLHGh57GZ|TCXhJqY~GCh)aXEV$1O&$c}La1 zjuJxkY9SM4av^Hb;i7efiYaMwI%jGy`3NdY)+mcJhF(3XEiSlU3c|jMBi|;m-c?~T z+x0_@;SxcoY=(6xNgO$bBt~Pj8`-<1S|;Bsjrzw3@zSjt^JC3X3*$HI79i~!$RmTz zsblZsLYs7L$|=1CB$8qS!tXrWs!F@BVuh?kN(PvE5Av-*r^iYu+L^j^m9JG^#=m>@ z=1soa)H*w6KzoR$B8mBCXoU;f5^bVuwQ3~2LKg!yxomG1#XPmn(?YH@E~_ED+W6mxs%x{%Z<$pW`~ON1~2XjP5v(0{C{+6Dm$00tsd3w=f=ZENy zOgb-=f}|Hb*LQ$YdWg<(u7x3`PKF)B7ZfZ6;1FrNM63 z?O6tE%EiU@6%rVuwIQjvGtOofZBGZT1Sh(xLIYt9c4VI8`!=UJd2BfLjdRI#SbVAX ziT(f*RI^T!IL5Ac>ql7uduF#nuCRJ1)2bdvAyMxp-5^Ww5p#X{rb5)(X|fEhDHHW{ zw(Lfc$g;+Q`B0AiPGtmK%*aWfQQ$d!*U<|-@n2HZvCWSiw^I>#vh+LyC;aaVWGbmkENr z&kl*8o^_FW$T?rDYLO1Pyi%>@&kJKQoH2E0F`HjcN}Zlnx1ddoDA>G4Xu_jyp6vuT zPvC}pT&Owx+qB`zUeR|4G;OH(<<^_bzkjln0k40t`PQxc$7h(T8Ya~X+9gDc8Z9{Z z&y0RAU}#_kQGrM;__MK9vwIwK^aoqFhk~dK!ARf1zJqHMxF2?7-8|~yoO@_~Ed;_wvT%Vs{9RK$6uUQ|&@#6vyBsFK9eZW1Ft#D2)VpQRwpR(;x^ zdoTgMqfF9iBl%{`QDv7B0~8{8`8k`C4@cbZAXBu00v#kYl!#_Wug{)2PwD5cNp?K^ z9+|d-4z|gZ!L{57>!Ogfbzchm>J1)Y%?NThxIS8frAw@z>Zb9v%3_3~F@<=LG%r*U zaTov}{{^z~SeX!qgSYow`_5)ij*QtGp4lvF`aIGQ>@3ZTkDmsl#@^5*NGjOuu82}o zzLF~Q9SW+mP=>88%eSA1W4_W7-Q>rdq^?t=m6}^tDPaBRGFLg%ak93W!kOp#EO{6& zP%}Iff5HZQ9VW$~+9r=|Quj#z*=YwcnssS~9|ub2>v|u1JXP47vZ1&L1O%Z1DsOrDfSIMHU{VT>&>H=9}G3i@2rP+rx@eU@uE8rJNec zij~#FmuEBj03F1~ct@C@$>y)zB+tVyjV3*n`mtAhIM0$58vM9jOQC}JJOem|EpwqeMuYPxu3sv}oMS?S#o6GGK@8PN59)m&K4Dc&X% z(;XL_kKeYkafzS3Wn5DD>Yiw{LACy_#jY4op(>9q>>-*9@C0M+=b#bknAWZ37^(Ij zq>H%<@>o4a#6NydoF{_M4i4zB_KG)#PSye9bk0Ou8h%1Dtl7Q_y#7*n%g)?m>xF~( zjqvOwC;*qvN_3(*a+w2|ao0D?@okOvg8JskUw(l7n`0fncglavwKd?~l_ryKJ^Ky! zKCHkIC-o7%fFvPa$)YNh022lakMar^dgL=t#@XLyNHHw!b?%WlM)R@^!)I!smZL@k zBi=6wE5)2v&!UNV(&)oOYW(6Qa!nUjDKKBf-~Da=#^HE4(@mWk)LPvhyN3i4goB$3K8iV7uh zsv+a?#c4&NWeK(3AH;ETrMOIFgu{_@%XRwCZ;L=^8Ts)hix4Pf3yJRQ<8xb^CkdmC z?c_gB)XmRsk`9ch#tx4*hO=#qS7={~Vb4*tTf<5P%*-XMfUUYkI9T1cEF;ObfxxI-yNuA=I$dCtz3ey znVkctYD*`fUuZ(57+^B*R=Q}~{1z#2!ca?)+YsRQb+lt^LmEvZt_`=j^wqig+wz@n@ z`LIMQJT3bxMzuKg8EGBU+Q-6cs5(@5W?N>JpZL{$9VF)veF`L5%DSYTNQEypW%6$u zm_~}T{HeHj1bAlKl8ii92l9~$dm=UM21kLemA&b$;^!wB7#IKWGnF$TVq!!lBlG4 z{?Rjz?P(uvid+|i$VH?`-C&Gcb3{(~Vpg`w+O);Wk1|Mrjxrht0GfRUnZqz2MhrXa zqgVC9nemD5)H$to=~hp)c=l9?#~Z_7i~=U-`FZxb-|TR9@YCxx;Zjo-WpMNOn2)z) zFPGGVl%3N$f`gp$gPnWC+f4(rmts%fidpo^BJx72zAd7|*Xi{2VXmbOm)1`w^tm9% znM=0Fg4bDxH5PxPEm{P3#A(mxqlM7SIARP?|2&+c7qmU8kP&iApzL|F>Dz)Ixp_`O zP%xrP1M6@oYhgo$ZWwrAsYLa4 z|I;DAvJxno9HkQrhLPQk-8}=De{9U3U%)dJ$955?_AOms!9gia%)0E$Mp}$+0er@< zq7J&_SzvShM?e%V?_zUu{niL@gt5UFOjFJUJ}L?$f%eU%jUSoujr{^O=?=^{19`ON zlRIy8Uo_nqcPa6@yyz`CM?pMJ^^SN^Fqtt`GQ8Q#W4kE7`V9^LT}j#pMChl!j#g#J zr-=CCaV%xyFeQ9SK+mG(cTwW*)xa(eK;_Z(jy)woZp~> zA(4}-&VH+TEeLzPTqw&FOoK(ZjD~m{KW05fiGLe@E3Z2`rLukIDahE*`u!ubU)9`o zn^-lyht#E#-dt~S>}4y$-mSbR8{T@}22cn^refuQ08NjLOv?JiEWjyOnzk<^R5%gO zhUH_B{oz~u#IYwVnUg8?3P*#DqD8#X;%q%HY**=I>>-S|!X*-!x1{^l#OnR56O>iD zc;i;KS+t$koh)E3)w0OjWJl_aW2;xF=9D9Kr>)(5}4FqUbk# zI#$N8o0w;IChL49m9CJTzoC!|u{Ljd%ECgBOf$}&jA^$(V#P#~)`&g`H8E{uv52pp zwto`xUL-L&WTAVREEm$0g_gYPL(^vHq(*t1WCH_6alhkeW&GCZ3hL)|{O-jiFOBrF z!EW=Jej|dqQitT6!B-7&io2K)WIm~Q)v@yq%U|VpV+I?{y0@Yd%n8~-NuuM*pM~KA z85YB};IS~M(c<}4Hxx>qRK0cdl&e?t253N%vefkgds>Ubn8X}j6Vpgs>a#nFq$osY z1ZRwLqFv=+BTb=i%D2Wv>_yE0z}+niZ4?rE|*a3d7^kndWGwnFqt+iZ(7+aln<}jzbAQ(#Z2SS}3S$%Bd}^ zc9ghB%O)Z_mTZMRC&H#)I#fiLuIkGa^`4e~9oM5zKPx?zjkC&Xy0~r{;S?FS%c7w< zWbMpzc(xSw?9tGxG~_l}Acq}zjt5ClaB7-!vzqnlrX;}$#+PyQ9oU)_DfePh2E1<7 ztok6g6K^k^DuHR*iJ?jw?bs_whk|bx`dxu^nC6#e{1*m~z1eq7m}Cf$*^Eua(oi_I zAL+3opNhJteu&mWQ@kQWPucmiP)4|nFG`b2tpC;h{-PI@`+h?9v=9mn|0R-n8#t=+Z*FD(c5 zjj79Jxkgck*DV=wpFgRZuwr%}KTm+dx?RT@aUHJdaX-ODh~gByS?WGx&czAkvkg;x zrf92l8$Or_zOwJVwh>5rB`Q5_5}ef6DjS*$x30nZbuO3dijS*wvNEqTY5p1_A0gWr znH<(Qvb!os14|R)n2Ost>jS2;d1zyLHu`Svm|&dZD+PpP{Bh>U&`Md;gRl64q;>{8MJJM$?UNUd`aC>BiLe>*{ zJY15->yW+<3rLgYeTruFDtk1ovU<$(_y7#HgUq>)r0{^}Xbth}V#6?%5jeFYt;SG^ z3qF)=uWRU;Jj)Q}cpY8-H+l_n$2$6{ZR?&*IGr{>ek!69ZH0ZoJ*Ji+ezzlJ^%qL3 zO5a`6gwFw(moEzqxh=yJ9M1FTn!eo&qD#y5AZXErHs%22?A+JmS&GIolml!)rZTnUDM3YgzYfT#;OXn)`PWv3Ta z!-i|-Wojv*k&bC}_JJDjiAK(Ba|YZgUI{f}TdEOFT2+}nPmttytw7j%@bQZDV1vvj z^rp{gRkCDmYJHGrE1~e~AE!-&6B6`7UxVQuvRrfdFkGX8H~SNP_X4EodVd;lXd^>eV1jN+Tt4}Rsn)R0LxBz0c=NXU|pUe!MQQFkGBWbR3&(jLm z%RSLc#p}5_dO{GD=DEFr=Fc% z85CBF>*t!6ugI?soX(*JNxBp+-DdZ4X0LldiK}+WWGvXV(C(Ht|!3$psR=&c*HIM=BmX;pRIpz@Ale{9dhGe(U2|Giv;# zOc|;?p67J=Q(kamB*aus=|XP|m{jN^6@V*Bpm?ye56Njh#vyJqE=DweC;?Rv7faX~ zde03n^I~0B2vUmr;w^X37tVxUK?4}ifsSH5_kpKZIzpYu0;Kv}SBGfI2AKNp+VN#z`nI{UNDRbo-wqa4NEls zICRJpu)??cj^*WcZ^MAv+;bDbh~gpN$1Cor<{Y2oyIDws^JsfW^5AL$azE(T0p&pP z1Mv~6Q44R&RHoH95&OuGx2srIr<@zYJTOMKiVs;Bx3py89I87LOb@%mr`0)#;7_~Z zzcZj8?w=)>%5@HoCHE_&hnu(n_yQ-L(~VjpjjkbT7e)Dk5??fApg(d>vwLRJ-x{um z*Nt?DqTSxh_MIyogY!vf1mU1`Gld-&L)*43f6dilz`Q@HEz;+>MDDYv9u!s;WXeao zUq=TaL$P*IFgJzrGc>j1dDOd zed+=ZBo?w4mr$2)Ya}?vedDopomhW1`#P<%YOJ_j=WwClX0xJH-f@s?^tmzs_j7t!k zK@j^zS0Q|mM4tVP5Ram$VbS6|YDY&y?Q1r1joe9dj08#CM{RSMTU}(RCh`hp_Rkl- zGd|Cv~G@F{DLhCizAm9AN!^{rNs8hu!G@8RpnGx7e`-+K$ffN<0qjR zGq^$dj_Tv!n*?zOSyk5skI7JVKJ)3jysnjIu-@VSzQiP8r6MzudCU=~?v-U8yzo^7 zGf~SUTvEp+S*!X9uX!sq=o}lH;r{pzk~M*VA(uyQ`3C8!{C;)&6)95fv(cK!%Cuz$ z_Zal57H6kPN>25KNiI6z6F)jzEkh#%OqU#-__Xzy)KyH};81#N6OfX$$IXWzOn`Q& z4f$Z1t>)8&8PcYfEwY5UadU1yg+U*(1m2ZlHoC-!2?gB!!fLhmTl))D@dhvkx#+Yj z1O=LV{(T%{^IeCuFK>%QR!VZ4GnO5tK8a+thWE zg4VytZrwcS?7^ zuZfhYnB8dwd%VLO?DK7pV5Wi<(`~DYqOXn8#jUIL^)12*Dbhk4GmL_E2`WX&iT16o zk(t|hok(Y|v-wzn?4x34T)|+SfZP>fiq!><*%vnxGN~ypST-FtC+@TPv*vYv@iU!_ z@2gf|PrgQ?Ktf*9^CnJ(x*CtZVB8!OBfg0%!wL;Z8(tYYre0vcnPGlyCc$V(Ipl*P z_(J!a=o@vp^%Efme!K74(Ke7A>Y}|sxV+JL^aYa{~m%5#$$+R1? zGaQhZTTX!#s#=Xtpegqero$RNt&`4xn3g$)=y*;=N=Qai)}~`xtxI_N*#MMCIq#HFifT zz(-*m;pVH&+4bixL&Bbg)W5FN^bH87pAHp)zPkWNMfTFqS=l~AC$3FX3kQUSh_C?-ZftyClgM)o_D7cX$RGlEYblux0jv5 zTr|i-I3@ZPCGheCl~BGhImF)K4!9@?pC(gi3ozX=a!|r1)LFxy_8c&wY0<^{2cm|P zv6Y`QktY*;I)IUd5y3ne1CqpVanlY45z8hf4&$EUBnucDj16pDa4&GI&TArYhf*xh zdj>*%APH8(h~c>o@l#%T>R$e>rwVx_WUB|~V`p^JHsg*y12lzj&zF}w6W09HwB2yb z%Q~`es&(;7#*DUC_w-Dmt7|$*?TA_m;zB+-u{2;Bg{O}nV7G_@7~<)Bv8fH^G$XG8$(&{A zwXJK5LRK%M34(t$&NI~MHT{UQ9qN-V_yn|%PqC81EIiSzmMM=2zb`mIwiP_b)x+2M z7Gd`83h79j#SItpQ}luuf2uOU`my_rY5T{6P#BNlb%h%<#MZb=m@y5aW;#o1^2Z)SWo+b`y0gV^iRcZtz5!-05vF z7wNo=hc6h4hc&s@uL^jqRvD6thVYtbErDK9k!;+a0xoE0WL7zLixjn5;$fXvT=O3I zT6jI&^A7k6R{&5#lVjz#8%_RiAa2{di{`kx79K+j72$H(!ass|B%@l%KeeKchYLe_ z>!(JC2fxsv>XVen+Y42GeYPxMWqm`6F$(E<6^s|g(slNk!lL*6v^W2>f6hh^mE$s= z3D$)}{V5(Qm&A6bp%2Q}*GZ5Qrf}n7*Hr51?bJOyA-?B4vg6y_EX<*-e20h{=0Mxs zbuQGZ$fLyO5v$nQ&^kuH+mNq9O#MWSfThtH|0q1i!NrWj^S}_P;Q1OkYLW6U^?_7G zx2wg?CULj7))QU(n{$0JE%1t2dWrMi2g-Os{v|8^wK{@qlj%+1b^?NI z$}l2tjp0g>K3O+p%yK<9!XqmQ?E9>z&(|^Pi~aSRwI5x$jaA62GFz9%fmO3t3a>cq zK8Xbv=5Ps~4mKN5+Eqw12(!PEyedFXv~VLxMB~HwT1Vfo51pQ#D8e$e4pFZ{&RC2P z5gTIzl{3!&(tor^BwZfR8j4k{7Rq#`riKXP2O-Bh66#WWK2w=z;iD9GLl+3 zpHIaI4#lQ&S-xBK8PiQ%dwOh?%BO~DCo06pN7<^dnZCN@NzY{_Z1>rrB0U|nC&+!2 z2y!oBcTd2;@lzyk(B=TkyZ)zy0deK05*Q0zk+o$@nun`VI1Er7pjq>8V zNmlW{p7S^Btgb(TA}jL(uR>`0w8gHP^T~Sh5Tkip^spk4SBAhC{TZU}_Z)UJw-}zm zPq{KBm!k)?P{`-(9?LFt&YN4s%SIZ-9lJ!Ws~B%exHOeVFk3~}HewnnH(d)qkLQ_d z6h>O)pEE{vbOVw}E+jdYC^wM+AAhaI(YAibUc@B#_mDss0Ji&BK{WG`4 zOk>vSNq(Bq2IB@s>>Rxm6Wv?h;ZXkpb1l8u|+_qXWdC*jjcPCixq;!%BVPSp#hP zqo`%cNf&YoQXHC$D=D45RiT|5ngPlh?0T~?lUf*O)){K@*Kbh?3RW1j9-T?%lDk@y z4+~?wKI%Y!-=O|_IuKz|=)F;V7ps=5@g)RrE;;tvM$gUhG>jHcw2Hr@fS+k^Zr~>G z^JvPrZc}_&d_kEsqAEMTMJw!!CBw)u&ZVzmq+ZworuaE&TT>$pYsd9|g9O^0orAe8 z221?Va!l1|Y5X1Y?{G7rt1sX#qFA^?RLG^VjoxPf63;AS=_mVDfGJKg73L zsGdnTUD40y(>S##2l|W2Cy!H(@@5KBa(#gs`vlz}Y~$ot5VsqPQ{{YtjYFvIumZzt zA{CcxZLJR|4#{j7k~Tu*jkwz8QA|5G1$Cl895R`Zyp;irp1{KN){kB30O8P1W5;@bG znvX74roeMmQlUi=v9Y%(wl$ZC#9tKNFpvi3!C}f1m6Ct|l2g%psc{TJp)@yu)*e2> z((p0Fg*8gJ!|3WZke9;Z{8}&NRkv7iP=#_y-F}x^y?2m%-D_aj^)f04%mneyjo_;) z6qc_Zu$q37d~X``*eP~Q>I2gg%rrV8v=kDfpp$=%Vj}hF)^dsSWygoN(A$g*E=Do6FX?&(@F#7pbiJ`;c0c@Ul zDqW_90Wm#5f2L<(Lf3)3TeXtI7nhYwRm(F;*r_G6K@OPW4H(Y3O5SjUzBC}u3d|eQ8*8d@?;zUPE+i#QNMn=r(ap?2SH@vo*m z3HJ%XuG_S6;QbWy-l%qU;8x;>z>4pMW7>R}J%QLf%@1BY(4f_1iixd-6GlO7Vp*yU zp{VU^3?s?90i=!#>H`lxT!q8rk>W_$2~kbpz7eV{3wR|8E=8**5?qn8#n`*(bt1xRQrdGxyx2y%B$qmw#>ZV$c7%cO#%JM1lY$Y0q?Yuo> ze9KdJoiM)RH*SB%^;TAdX-zEjA7@%y=!0=Zg%iWK7jVI9b&Dk}0$Af&08KHo+ zOwDhFvA(E|ER%a^cdh@^wLUlmIv6?_3=BvX8jKk92L=Y}7Jf5OGMfh` zBdR1wFCi-i5@`9km{isRb0O%TX+f~)KNaEz{rXQa89`YIF;EN&gN)cigu6mNh>?Cm zAO&Im2flv6D{jwm+y<%WsPe4!89n~KN|7}Cb{Z;XweER73r}Qp2 zz}WP4j}U0&(uD&9yGy6`!+_v-S(yG*iytsTR#x_Rc>=6u^vnRDnf1gP{#2>`ffrAC% zTZ5WQ@hAK;P;>kX{D)mIXe4%a5p=LO1xXH@8T?mz7Q@d)$3pL{{B!2{-v70L*o1AO+|n5beiw~ zk@(>m?T3{2k2c;NWc^`4@P&Z?BjxXJ@;x1qhn)9Mn*IFdt_J-dIqx5#d`NfyfX~m( zIS~5)MfZ2Uy?_4W`47i}u0ZgPh<{D|w_d#;D}Q&U$Q-G}xM1A@1f{#%A$jh6Qp&0hQ<0bPOM z-{1Wm&p%%#eb_?x7i;bol EfAhh=DF6Tf literal 0 HcmV?d00001 diff --git a/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties b/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties new file mode 100644 index 000000000..642d572ce --- /dev/null +++ b/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties @@ -0,0 +1,2 @@ +distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.6.3/apache-maven-3.6.3-bin.zip +wrapperUrl=https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar diff --git a/spring-boot-demo-https/README.md b/spring-boot-demo-https/README.md new file mode 100644 index 000000000..aab869f6d --- /dev/null +++ b/spring-boot-demo-https/README.md @@ -0,0 +1,68 @@ +# Getting Started + +### Reference Documentation +For further reference, please consider the following sections: + +* [Official Apache Maven documentation](https://maven.apache.org/guides/index.html) +* [Spring Boot Maven Plugin Reference Guide](https://docs.spring.io/spring-boot/docs/2.2.2.RELEASE/maven-plugin/) + + + +1. 首先使用jdk 自带的keytool 命令生成证书(一般在用户目录下C:\Users\Administrator\server.keystore) 复制到项目中 +> 自己生成的证书浏览器会有危险提示,去ssl网站上使用金钱申请则不会 + +![ssl 命令截图](ssl.png) + + +2. 然后添加配置 +```yml +server: + ssl: + # 证书路径 + key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-alias: tomcat + enabled: true + key-store-type: JKS + #与申请时输入一致 + key-store-password: 123456 + # 浏览器默认端口 和 80 类似 + port: 443 +#debug: true + + +``` + +3. 需要与http 自动跳转再添加bean + +```java + + @Bean + public Connector connector(){ + Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + connector.setScheme("http"); + connector.setPort(80); + connector.setSecure(false); + connector.setRedirectPort(443); + return connector; + } + + @Bean + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ + TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + @Override + protected void postProcessContext(Context context) { + SecurityConstraint securityConstraint=new SecurityConstraint(); + securityConstraint.setUserConstraint("CONFIDENTIAL"); + SecurityCollection collection=new SecurityCollection(); + collection.addPattern("/*"); + securityConstraint.addCollection(collection); + context.addConstraint(securityConstraint); + } + }; + tomcat.addAdditionalTomcatConnectors(connector); + return tomcat; + } + +``` + + diff --git a/spring-boot-demo-https/pom.xml b/spring-boot-demo-https/pom.xml new file mode 100644 index 000000000..d90ec5eff --- /dev/null +++ b/spring-boot-demo-https/pom.xml @@ -0,0 +1,56 @@ + + + 4.0.0 + + com.xkcoding + spring-boot-demo-https + 0.0.1-SNAPSHOT + spring-boot-demo-https + Demo project for Spring Boot + + + + com.xkcoding + spring-boot-demo + 1.0.0-SNAPSHOT + + + + UTF-8 + UTF-8 + 1.8 + + + + + org.springframework.boot + spring-boot-starter + + + org.springframework.boot + spring-boot-starter-web + + + org.springframework.boot + spring-boot-starter-test + test + + + org.junit.vintage + junit-vintage-engine + + + + + + + + + org.springframework.boot + spring-boot-maven-plugin + + + + + diff --git a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java b/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java new file mode 100644 index 000000000..be323c3e5 --- /dev/null +++ b/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java @@ -0,0 +1,62 @@ +package com.xkcoding.springbootdemohttps; + +import org.apache.catalina.Context; +import org.apache.catalina.connector.Connector; +import org.apache.tomcat.util.descriptor.web.SecurityCollection; +import org.apache.tomcat.util.descriptor.web.SecurityConstraint; +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory; +import org.springframework.context.annotation.Bean; + + +/** + *

+ * SpringBoot启动类 + *

+ * + * @package: com.xkcoding.https + * @description: SpringBoot启动类 + * @author: Chen.Chao + * @date 2020.01.12 10:31 am + * @copyright: Copyright (c) + * @version: V1.0 + * @modified: Chen.Chao + */ +@SpringBootApplication +public class SpringBootDemoHttpsApplication { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoHttpsApplication.class, args); + } + + + @Bean + public Connector connector(){ + Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + connector.setScheme("http"); + connector.setPort(80); + connector.setSecure(false); + connector.setRedirectPort(443); + return connector; + } + + @Bean + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ + TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + @Override + protected void postProcessContext(Context context) { + SecurityConstraint securityConstraint=new SecurityConstraint(); + securityConstraint.setUserConstraint("CONFIDENTIAL"); + SecurityCollection collection=new SecurityCollection(); + collection.addPattern("/*"); + securityConstraint.addCollection(collection); + context.addConstraint(securityConstraint); + } + }; + tomcat.addAdditionalTomcatConnectors(connector); + return tomcat; + } + + +} diff --git a/spring-boot-demo-https/src/main/resources/application.yml b/spring-boot-demo-https/src/main/resources/application.yml new file mode 100644 index 000000000..d6d2def4b --- /dev/null +++ b/spring-boot-demo-https/src/main/resources/application.yml @@ -0,0 +1,12 @@ +server: + ssl: + # 证书路径 + key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-alias: tomcat + enabled: true + key-store-type: JKS + #与申请时输入一致 + key-store-password: 123456 + # 浏览器默认端口 和 80 类似 + port: 443 +#debug: true diff --git a/spring-boot-demo-https/src/main/resources/server.keystore b/spring-boot-demo-https/src/main/resources/server.keystore new file mode 100644 index 0000000000000000000000000000000000000000..a6b59ffd9cdb35963cb3374ffdfd1e42fe3c151e GIT binary patch literal 2255 zcmc(g`8U*y8^>p}&Dck_NtDPIpBZZ=SBy*9WeG*2vCYWX#!YBwgs!dZ`!=#=Eo7NN zMMYobibh16WH;7G4OgA}J?DP^g6|K{5AWAG?{l8>exCC@yGy%EAP@+$U*KQGO$qQP zcu@9bKz2f190!R9C_b3%%C^VL@h1bx(oI^4NR z9rYR*2XaqpiSs&d$m*rUSRZ7GzCd)ueGgM=?dk=1ki|J8e2L+WKWuSJBG=r&24yK^(zPGNd-| zkHuTDuHW*h;6Hs@CoVFoizoYP?lKB^c84{fqfAQ;^{(8qFa?L$s$;<@dv$KH=~w-O z{?9cxsD2cr!4F8wTYI+(B49RV)mtSf>tw}1jgst0-pSIwJBI0-z`gDji9n~B%O8Z0 z?|O`caB?X4QRWx2k^?tUEfNoM8#kNme@ zLkT+U3mKD#lgAtB4)62J>2{e@wK)l}T<=3NRmjDc^?$%u)~>1J@Ry?Md}I%JhUA3A zq7Z(Qaw&z~quIo1B@29)b1s6kpD!Bt8?aGIMd3Kf$d7xnpFGb9VT5bhnd})T53^_e?`wdp{wHiRZTv@XrVURWBkWBDfB%ukp4mx9R$X=!tTZ4SSQ32S(E6R8kERXuQy!@=1>?~xajDcV z3m~g=`q&&s#A<&bYmIZ2-#C_W?i8+5%`hPK{h63d(*@qjwpQ6`LsMqaIQ7JA0?J&e z#8*JJy(%Ye<}cV3zd7+hKTX{+1WwLr?5e)tm(DlSoTQlOLrk=KzEFWkJs$>Z}JUw*xo2}*WYs@;2fX8Pq$| zoc(c1h!TKTe>_c6t2(`?5(0(0T6_$iaB=SnwCqNVTE`bIq|d3%(ecth1&>HT8# zojGUkcGh(YQP@8#bpg)f|Mbs;og|8psjis#yC@lP25;T~ZZBVjwsjgYW~m2HNM5oBnc%w*(MUk#CxRp4A%Vd}vX7^if53ks;(y>j zW+;-E;Oq6%9RM7X5WoNc8jS%kXk84(^_SE_qyLfrm!4?gBma(O|8YQRU?C7d1H&OS zFc=h9#=0_VAlJK@8nmaBpviYlnp-yzyVKGnBuSMUJH9t*-RBj*YK?f&u(o|^{U)2a z@m(Tl^%*8SwTwfPK6iaA^~TXfAWOPWK+H?PC_+Sh;*sk6LW5Grc?e1ezdTbJMQ zKTO1#YTi$!gnq&(_0xgUaJdDNxd)3r!M!b=Zyx=$`oycXF;&M*Rc&Fp!L^7;=}ia} z3<8%O24n%5{lUu!!o*=>pjBlGg(IY>&&JH-9{+7A&7k`8hBB;)u3 zixM$E8E!-IwwTTIfnc|CUOk;fxOk07n1>9(f%M$_!DgMDgUwvW7H5CthnfsB(}|s& zogx&Qciq}fyh+OQww7#ULG!$H!bNQz2a#K5gQcn4;TJoiKABl8OgA^B)}PwFjSB6# zSRIjG+^?ycQAP1rNC8R4StOQEMMf&Ox&wj18_nm~QJ=r-{NAZ)1-OuPz6zumwXeS~ z)OBS@i$Hc<65R!{M6GYktlyOeqZ{W?2X`Kvmub7gK1P_hC@%pRnWApox@4P><#C_=mf@d3?)TyYgWkXWe9U#8l}Q Nj`MeRGRGtI{|050*qQ(U literal 0 HcmV?d00001 diff --git a/spring-boot-demo-https/src/main/resources/static/index.html b/spring-boot-demo-https/src/main/resources/static/index.html new file mode 100644 index 000000000..067bc5399 --- /dev/null +++ b/spring-boot-demo-https/src/main/resources/static/index.html @@ -0,0 +1,13 @@ + + + + + spring boot demo https + + +

+ spring boot demo https +

+ + + diff --git a/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java b/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java new file mode 100644 index 000000000..ce62f8353 --- /dev/null +++ b/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java @@ -0,0 +1,13 @@ +package com.xkcoding.springbootdemohttps; + +import org.junit.Test; +import org.springframework.boot.test.context.SpringBootTest; + +@SpringBootTest +class SpringBootDemoHttpsApplicationTests { + + @Test + void contextLoads() { + } + +} diff --git a/spring-boot-demo-https/ssl.png b/spring-boot-demo-https/ssl.png new file mode 100644 index 0000000000000000000000000000000000000000..6961426c908a8ddd10c49bf394a8e7354b1a9b26 GIT binary patch literal 78633 zcmeFZ1#eu-wk>RoA!cS~J9f+zQ_RfF5HmA7wqs^yW@s}rGcz+YGd%CT&w08xJKrC8 z`lQm5x?Ad1RkLcYF~%IVf@GwGVWF|0fq;NuMMVVUfPlcmfq;OgAwfRAfiK7Y2?Rs{ zBr3qC;0%1y+8#o+o^sy&r627l zMZ!P*ab}UvJrGpnzgq`75wCnNdJ~3%ADGC`f46+-HPAowgcn3R5J(bL`#?_y^$+79 z08XZIhX2FufS}w7L6{WXvqJb3|8%>*2FUgQ5AZ)z`almRS1U#6aIL?$Me~27P)>TG zCEqKVbv;Ab;y5>c`p$Ut(%8es`JeE$w$c`&tY@1O`WnPQo zpPtaYQ`_H|pOUdWx6-bsTZh-|zXmUn>F2ap+w8HIc8z$>@EkMzB=Y=*iysZ1&`A#t!GC;%%*|~EKCb-` z!Y!}mM9Lj=ea!Ug+A5h4yhe8{*Xg!>ylOWS`1d~8xCMjDhh9MVgvngCvbwgmwp!aq zl{VHR`P`+NRPsoqRQ$v#jc-LA)2ilZb$;o=>rSJcAK?@?SmhSrU#-Ve(@mL%8$*_D z+8*J@=j@Vxhy8`-QZXVSVgJ#&Dix+6c@Q3(T052#B4x6KjBEMPmqZ%>929^`H{RN3 zeJOTiguZ!nfk@ruaLzTfJ?j)IUW;=vBHdy~ z+xTQfVCZQ(7_gY;F0dtwX*GT8Z6WUWB`1kl?dfDy^G7MetsZ6ijfBG+V=p7Y%PzSs z3u^OI8gkp(ar&#DCKXWdeV@ZQni%olDdd3$M6dYgJ1MN@4xW1JrX4jd$bIYuoB!%;y*>fqk^|mx^3GVpo)A zy(O`3^7|2LlPR&Ana9Y^{m%znL++!`M`otCcw_k7cP>v0n#DDBlluKyUwYBH7dwgI zvG2CI#$567ACtDyjv-p#RL^lvXI34QYtcvCRc|zyhCI z#b1Jb*`FSl=}cUfRYHgAj}OJkoPT6Q#F$fEZ39s8TeFox4DaCyFY4|m-4tA|JsdW* z%NV3}BmdqPuEcM@)x#invDl?wOyv6+(p7Ko&hmqb~P@jv= z!!po0naMw9*IPTf1D~qs3#z`AZBc?rxzl5CRH3Z`?G3h+TR&-zF0cu!_+j8%cD*)j zJ!j5jz25B2erw$l2|GcN^yGmc`V3QZO6Iy%iZ29v0Y6OjH@hGTbrwK8Yrz9ZiQe3SW_UKO}3MLjqYG1^u0|DWm z1nmGZL$BBL(0v-R5~pfmE@i7Vzv|8RLn15lEeVfjgOgf=eXRu9s}!4ll7uSUk#+?) z1AOmcdwz+q?Auj*XB)LO4{P0lPDZ-mDMf`=Wt#2YW+G7JboU9DI4z;ePuk$@w*kj{ zDsg{a?(_j&w;b@g4(^&aE8q2nyP0KOr?8dp8iuNmY$O`Nc;kj{JWgHGN~o53nzOBsCB`R*do{ z#m>31$ajLg9JY2Qb;&1dRmVEF&T8)q(Kc-dH&3y{*h_gg+ONEiV_TomYWH>SDc1c~ z+jIZ*WUuXS^; zQ~954#{=u#PVv}PyABvPrr`zzPSjROIlB_e=AnQ+;73OBqo(Y#g=fa23W6wyueFBT!3|i^ zvpQCa(5P7^%*y;+aX_!sLvAFcvEc6;(jxtp+h&Wq`&RYTw$1 z$4V(QsK=2~>BhB)jrNb%*f-|~*vsG9UedPCy^6tYp^=yyGgNMgNepa5+O5{@>m-$% zMtvivGbjrT`JTyb;o6tG&r|PTc3IE&ku#nN3$^U1B9QX55`r&o{Y_EtFin53caqO+ z2H-R*?jY|Q7dT(vrw-4%uiophm1I1xHKbCyMgNVXUJyXMG|b``t>viPa1q9!gp=t7 z9`HbfbYY5mIN9AK+B6hm#NH8rXev7w&+|-egTL%uU*9}p^2o;pC&_WHnI4qmjz`oB zp9jbc&Y=|8$6Li2Vo=MeounW^>a+8bl#sgf)z-MC->P4ZbjSi5SP9V#JIw-sCFx49 zyirGymR)5r2Qc*Vms3a4^Fs3u7xzQvjuUKwMPDS$N&$&lo3gQq7$E`LJC%apr6Lt- zjkHinAR3e>&u<+)p-Va*shwkyZGW9hR45c}ZknxU?H_VN;M$*zU!|PV#Do$Lt=!B( zB@KK-ts=6AnVZR|}9diL@A5mSnnQf?P{2wf>CpNgEUqc{GAAjEKP?Qkh zp464QTP=uP{eyHjjuF_1NebFq2=5x+&fU@PN9G{UHW3ipC^)uSM^M*c7d+6t;JY+-h`oCw zE_Vv?YV5SrXjN-a~Uk}1scIW1J3NvFy3xe5ZcprP5K@|l@IBhSe+s;Yr z(qeDBfUVWm*?nWE}_6hAS(8dM!YWOfE2x0Dl-NK_Jz~P2|wUt z(Uq!Cp=t*?O=PBK@JMCcTKQL8!s4DIqDpP25@mF;OBCI&#+*mLoH;EPEv`H7r@n^V z*px~EdM4ipoyMA#?9bA+WZrfN-&_ZtVQYD4`bjnX3~X=BlL8QE7Mn9HBby3S&$)u7 zG3~i;lWc91l~W%O#uDFgot{bWuLs*-&Y#^-KS{m2z}Oc>%5EOF@|MIW8l(XQEdgVOLb zDq zJg`EuwQ(}jv7UEhQRU%*WIn4sttC7K8V|u;(q}&=L~=e>~kCq*B1{CRPwuziT!S$*6@~gJ%*a*QP42M^Qt$C zPZv^kJ>w5~BOW^(Bz)}0F7@tL33H79oMh`Ub~m-|THk)@$+GXUzD})vp9yMHWcvw5W^Mk1&O}UR_ z@y2Z?ru$Vub9SjQF=@itTUk#6!w)B)h+En(=mbY=mb*aH3nwaCTKTsBS=m1B_Q|L{ z7yK^A(0<;OOGHQ}x6RMaFX>DGzAdm1eA=C9|Fgn`rk0nqmiU#~`Ug7Fa@O|y+^O2w zw${Gprv@MZ)gB+3J347eaBBGAL{F&fw=iA>Y;OMeDOQfldD^r-bPuv`bGS#o&K_@R z8I+sItw$%!?A^#DH`9ydi5~kc*L0h;Z(86c6zirdghBmUo5vpQN>6SA9+8W#D9-IW z+gMWgmuqaJ{zm^0`ZgxuK}AB*y-nYRu@n|?cSB`iN$Fs7CdbH@O{mR!xMp7~6AChX zI~0&8ceyA%cCQ5?B8w+T9;$`I&q%5$&eZ_aL=aB>5n5ji_A0aPZg2~)q=%E!TQLrk#ck2G=!Q3cg&ar^0t2&tSB#Ubr|@GT0_7FFI#rEy$~V~ z7m1&s9DI6?GAXSf?xt(ByYO&jTNIuN`i5$yHpw~f_DOiaM6^*3=ir2DJ>%kFVNm<) z0TLEr)u}vw*J8ZqW2fK!&MwGlx)G`N6>W7MI9|(P8+5Dz>yS1H#;S%_tGH>|`VS*z z12OijIIdn!_%fG$jfQM_tbjIoDOhN8VTzzPko#J!(JhMNCcP92rjmuu^9V2e=GXgh1nvhpyoSNz13~aDl7yZ`cQRrn!ZKa za|y|i|6xm%NQPr!kFFx0a-o%r*(W^lTZde$ubQU;mxhehtF)n;WS@BvLPsu|qtQSC zeX=E&aBlYMZOrYx)0IR?uKuP-bI_MqsEjqy`Ic*y&K{etm5)3J7B-F}ZV1={Q*Crj zfIbfLKmn_L+^q!j;F#rnRWae6wxz$h(MXb)UDxEWaTFWw>dxEOzC!Y4ZwyL+c z)Rz*UXW@~C-Dp7lb-5E8wR*3-+9Ix&!$xy?*&`gR_GD7Yx$`i@N3_38S7vu-v~7pw z@}OVbQ`OTe%(Q?!;Bv#9=Ua1hbQhg8gRjHa!lfN~>RG4ci+%HS9lJ z1;X36Xe)SVYa6*PxZ@mJId!)w+fyj5TzrEy)_+wn+Y4O0b3c39jWEFm;c3IHo&^JM z)F-2Gr@ZqK8ThSEUi*IR@##EvylG;7_eHe?GDDdLvGI|z+x}r;{qf}7+UjL&KEdp7 zqFXM#;o2((sO=(jISx;&8*^XX&yd|O7r!<$^UrujX!X(7j?y`O#e>agoAbSPsWuHD zSk0B2wMESOG8T%;qcyG_dL04rusrs_=QNh!QQ$u3_eL<5QJZ?|bTqzD~PRO?cjB^O_50JFkVjSZhEN9r{O5bteDNG}oXayZ^b% zZ{lT{=mrK*w&ok$E=ww7hhkgKu{9euXar#v@ht?%FR(j!a}>ffMhBr2?}xb3{A1jO zFX!wXJ#w6cH9doFI~iEi?mYTy@=q0M|5jkZxT88I6}-0$di7W~r%6=>!2?uQyt?ME zcU_*Gz1A73Mkfp9Axlh5;r#%FakjU=5coxR6`G|N_>gubr)8bsca*(~Q8nO;bjci) zR&iU)4Pi$#td!vM6i25$VOzV`?y>sNE_$)JS*tsq(K;vpSt9@IYRwGdwGe%!N-1bc zhV|=l#E1s`U~!bJ#jdTLfX? zzQh8dd=;v@m^t%2MM=`xp{0xR0(s%d>F;%I>!W$|o4}v~4hl;8`ueqrPTmsa6$%f=U!-uqn9?GCGw5<`?v;728{yRoMRCLf%uE^oJOG zdV+ZILDe7HbEuajs=+)n;@sn%TUp^(LJ3C)BfVf?G16S`{#e2gPRXg$M5ebttspEM zXpGK_)RsPXI?f@XV3gk_51NhCfmNY3<*))rQrS^B#-oK^n(xNRynh_F$$?LUS6lC< z+tj&bgKj;6wA)Pv9dTE^4{^0%g%gHbha6F{K%31a6>I-?A7*^rRe_#C!Sbh>rQ_d- zECGo^F{M`?Y)NAW@&D;)!fKgC59I{Bt!)srvvaq&_-{%O{C>>D#y`&-EJ&3nW4`~k3;+7KA&eBMfx0CVxfqVG zRO0@qPDx9T@@UH5hRHp0;l^`!6!dGyask6%?l>TL(lUN4sF4GAIqM7R>So!@2&vn6 z!87F`DdiaWtUx)d;-r0%`3RPoew9jj^la40PS%Lnu36fO;X($7CRL;W=v>?-VfioI zHye@riWE0HMFWr`vIrB(stN@f1@7~q$fz%~)6rreXIS3b>nnjnqz;2Ell|X0B}r;A zy7Ud^jC+NB3ykY$5w1KpFKA8RH-d;jK{+1+D*jZ9@uUUe0FW^VnTM&Xz-Ds#phZ8v zxV8<)+qsaEL7UIdV(1d=tzkrAb_WDRdN4591WOA#)v5K*W@;Q{i1!68=JXK~_E>(Q zC%6`HV+yorp39wnt6;$jty+cX$xC$q5b?|MSf6tE?A`AloT>5z26lN*2BANJ+#uMA zihjeb7JuABu#wqaqf{l z{12YHLLN>%VP zJ4_4wR|xvCO61_~?(XL3?@mHb{#1nGLHFh%(KZw(Ro-F(_6l^J`5EBjjQK!Bwv}fH zOUhf(2GBJMyeOTcvUG)%PQ)B`xnaIY0j+JaIkB)W0jbm9sHOX*-d50CB0`3Apa7Bx{ zE7LmM35dn=cukYo`;`7$@x|@55gR!b&W_d>caKaeajf{ zoi(hEhkYSb_Pfg+P)0s}98pb};aO)Kp&nm4%~nvr1}kpK)S_$(QWrL8pHL+~k=^>T zrOMBMS3Q(l_5?V?5vA^F0Re2q^O6)-)K&?$J_1pgzr)}_3{46l=a0Y`bPN5fuioo^ zKT)V#`BM3df0iPgM(-5!x`O42I|eHYW<|z8hF-%Dx)3%JwTd!r!cHciOy45fO0ne~ z5Wvm6CU#X2GK&EM%(ruH4cV=jdAW>jPIT%a@H;-~x_W_S)Ttr9SFYl8i{jJ@mf{5% zVbDd=c1=GZ()CX0?=QUsLQ%y0VXJw50`U@=;Hyqrr0whW)JJ}eXO?jW31j~yp>d)} z_+5yU*%MO20jeI{SqTM#SYcD3Oaeb%!z7X~NMT=vQ~lQ&4&AKyWo?PCbf5~;m1*7B z51GMj1u9s#*h2+EejHt*Jq;y+phe~WIDtF7+Z*_FkgEPd;_kBV z=>u(P2|F3$YB)Ca<%zXAQboKzP~e#>2ed(R(&%?{qPI+BbxoXsnbv+xBnuYd^(f0~ zHNyXT0VwrLW+sj!w@$3^y6dL!GWDQ+1zyY-zW=Kre-VNZ2^1-gr#I>RYuz`FZW@c& zG1$>%nq&Klz(EL)DyB7JSzBw6R$DJQZo^9jJe;IAEj)SjdJcQ?Yc2 zec~vAq_76XSw_V|LOs6TDGDXiyRL|r+0H%1l4nBi*8{ zLOwla_Kf@CG7K?G=(H0!U@|y;F$P&`Rz{OpL|Idl1;=;;<~D4x$yrvO9!onfL#9-+ zv6~7hU-2K)m@^^1cY7=~ClC_Y5%r~?^}M$k{}tAba*>W7#T_6KZ6M3NhIQY^hD}Y{ zF~mf`zX4%Ye|O6z<7XP?PX$>4MlpOYdD9;C*Yq>RhT}WS{2VlRF>_u)Hn9g^iMfJe zs>u9nIlw_E-66EMCZjkkdD3P(lTm|8N7H7n*BUNr`*aEt#{TlIdCx47;7q|Nwl!a3 z=#MEds$(?6>+O;8NHXn@7~WG9Bw?@kffRjQFzVk%i4W%jGsyd{)!UvGh{Jch;4z-} zZqK*!cSPr<)j+WL+5)e)=l7NOa1UL_-^UmA2Phs0&+m6W=7w+>1YkO=DA6g8?VQ`STo+2*#{wT z-rqQ05qqZ}t={*&{Ov9!zhuh2&wIV}dwo>z-=EvTx!yK2-h}Tn-rnAy%^D0!Pqp6= z=P%aj8vMCQx%2rz(et{P;ZrrVi(hv^cbCxK$GomXQrq8uvFdMRFZ`nj{NJbDMG6Aj zPH{&*MUn;=XK@(Oq;FPRhUATNN9@SQQU+jg6rpmgi#MM+ZySds90~e~rRWwB#U?X{ zp47X_1I}?9$zQNIcCTsz*8rDs#LZu3;_Z z;&PA~bu=6bu$-MFs6Ji#;<&%f*Y>Tje<$B|htr$g7y(zEU2L^c`euM%XyHwlXcY}P zPr3SY*{01^1XovUba>&aIvL-Va?bUuTb&sn8!?GCZN5ITbe-x&z^BUIi&a<|?;i6T0(}r}v&y$%Aj|=Fp};PA%rbUx}l& z4UeDGs(lL9LgHr^tg)B~4C+_<6|!Y2P=k%cdztpEQ`mL1d51>)tQzEXLqo9&VQdW{ zf&s~atXs7+k`1K2lq)vw5+X;&H+V;_+6L_0mbV#|S@3ce9It$F+>yyME@7FKZ4|y+ zbM?cp3s-LF&hD*l;+9j2?X?)NpDY{}bdIsjCT+1$!WjdL8-T^unh{S6sj8Xaf)q4C zOVL&Ac_uN#szQ{uog3@VzvzCxl%o(nQ^Yw-h>0hkEn$8a9JiIGZPrwzT}iE1>1^ET z^&lS&{n48KWo0BE?l|T7)J2AW`7ra8%%(!EQwD9>5g+SVL+A@S_H!D=ry7gO z?7Rx(-}6F?Pe-SMw`3H+P-m$kF%79 z7AzC4VpuveGgx<)7f0)PV*y*EWO(7|NG+yag#6bCgROLyb8)*8mZBTw5`!{LN#^i; zFspf|w)ob2+pH_S_emjq1+`aG>~{BNDB(}jDnHFGPu76ik$E?)>BDPM@&$`{w9t<8 z)J#8p_Q_}FPDWbs-Nf|f+n(#5(Pge~`lU{lJO4plP`$92O6*Qah?woxUwKI;GRvCc znuRsFoD}fwS*%tT_!YQd>yt5QXips-JkHWb5{7NM^{*Jokn^rw3ILN$hZ=Pe?wIHr zXZ$@IHQU$1Y=sh%A&Q2R910+Ky#e=4ud9(1|5T*@$8`(=LEdi-<&-@90QO~yTRyFz zKvVpD>qd%!)#^rh&|Rwb3}4d{$Tg!KXZ>~*-^wDz=M>RK2>jk;B+d*jIV70zse5&I zw!99TdWFciu(XWQhSF91WrcMp$MNlL(kc%M3unncOxttS$uhU{zAwF^d}&>*d5C|z z?jDJ116hj5K0CMX?n;?j@z_3_Q~w}14pK%!kCx$cVj)cc)*&(Nr_0gB$|>eg;@)i% z6k6EQKv)bvjmv#>_90gsPOGrEnZDxUKu1&C?C^z$p1^UlT$V0j-l5^@3Um1PxDXl$ zjm%p)>@y(T^M1>}3jvZwXs`ESpL^#)u{@TE?G`vrTPk5?Pw0>UlGQ7mI4?5kKG;Zy z3G(54H#cWZ9ZkLPWkwO-o;Wn}Hb+^+T?xMdu%(;}eJxkm@QW>t&)J4p&=43ihqOvy zP0@Tw{x_xi4jEVk!b7KQ$a+TxF$g=0(~PIDPPZFv%_Q=HA@t14uk3z7vrP%(^yobU z$iBE;`8^uPt;XzFA$#h)jKp1qI2}^8Nru zmNFMF%OGd8&+?5g^g7^l@I|-`Hq^#~cWaZE`ta?V%U3%<`Porxy7=n8+2-L!JSQSn zx0?AB7y#FZ2tEG?C1@xk1W;r->j%8?X)RECteiz|P#tr9Tai3a6IO%c zxVyPGc|?@N4`20+R~reOyw1-Z+60xDkW%_zZv@*hvE@&Jrf_;Cr?a#L@cdzSnOL5h zMZ~M1bAD0F!<3pdj!wWtM7u0Ejy5o40Cb>y2nX)&I|Y*>nyC)dz{Y!&eupd05Z?Si zfsfs`waEv!`BcfYabc?Z77~%K^g%8D9H?YA8Ze5c}$crd;| zfgRWjv<9uPbY*3@Q@3ptN;5ri5(Uo!+x!tra`Z})D|8`Mf;#C6Auo%Qh z|BG9*aCXjPSj+%!;(fTTF;*+Q*92ryF4fw4jloc4KDVKVruj?KlH*R)0)lz1@5$!{ zhjPQC$KHKRu!7*nkve1JFFnn`322=pb%f*Q_wVq2y(-nKsi%kd$0qck)^PQ%Oqz82 z^C}|eo;V&@q1iE)75h>xK1FepfKnrCS6j?s99wuBeC{`qA4}EEn?yvl`Sj@3#54+M zgpFv)hT~D!U3fj9zsI71<3s)ZzN43e#0>Wwzlz1#wD@fj4>nS3{7KYh34cz=S9UH+ ztMesIiRFnnR-?hqJr&Q1JAo?XS1h&NdpT>N^(2B>;4tU5ezZiF)MSl5TDn^pni4C8 ziLc0eR`!Kn?Cm+s>#$gIC#YH6DCz9s2;3NK9VOVYAoSF%YyJJ_SMM(kb5v`wPvm*| zOO{U2S2|&%7KZbJu0Fm*t?3U+0-!Tf%91z)IEGlt^$7_k+i-kzw?tG!Y^KRNI^T*x zd}zO_RTbc9P#GRS6h-2&<>HiQnvFTrqz#f9c`NhJ9lMCs#rZLAmTbQWLdiQ&Nkb7v z4aDZhDOJ01XO!p@iNXVO3YyH@ChvT0HF@JbOJt@6Hs{VGH5aQJgc+`c@tM9oI>7rO zF0{HSXCB14s2^C#xd9}E$+**##JsmaNM_0Joal7&JW8L>^d|i~FYx}$HF#1k#Z5nQ~sx z<33c|(`PP59T|r06fHzJJCsr4-&e6SDe!X1hqxjZ+Qj}%&ODx+0${xWsoRYlF=Pqu zHnM0PJvs{SCi2KW&q>I^864+2{-hC=uauxi>oUJZKmPJx1!M0JF9ghMIZ>Yis^@n zU7=(M725D(9bcS~0!t82!urhx2$3?I<7Vi)MQXeUP&?g~ zx}3@BIeidkzd>Ro&Sa_dQD|b-*eP~9m!3?S(O%Z;wIcQYN}`9oZzFqyJ4cC#eKvD0 z6k1=SduunLRzy(c0`+WfV@-)E%8ISnhxxnD2&}xoAPx^OtYl(VgCPEw*8jl-thqoS zkyiw`ZWAg`5fsGToWCmo~y zEdtT)1@5!ed&Qna1Q-N=7;ERgHKgK9fO8#Y9C495+9{Vo&s4B2_s*JK(cN4dLi10(JQEDka1(8ymLz7X7?tU! z-JbXa^?R+HXmOsl-#z}`_lOUm>S^xW=*lUhYAhFy2tR8+1SMlij*0&?C-|1Ii8{6VObUGJ^0&WLshFUG zGeaHe0}~@J0SG9?1y6XJ(yx9Z9f3o0(8v6qJ&P4p-2P!en#?6I&CvoIJ<1j+WR82F z;#C^dMoKf8B|zFgU5FQ?5GNhMMXlI>^6Bv$*6Hk38KjJ-^x865HLTEA-0`MBFbso^E=CideU#XL zt~nduxXf6^az2&F8@bPA9SwQr5Mx$l7I@rL7_AZ?viO#^pPrt+L4zDgep{_P^7tG3 z^7H`l>QsVAK?ft&!B&~b!yggM(G)xmG^)VVSyrVGu?P&o+hVu&-v3q?t27BV+0&fD zB?X?tOSl`3%$DA=7lk=#9hCOnaCQ+tU=9rn7BVtuR=9S$I2e`8AO8|N#r(R6>|5o9 zz#=^f=6EinP1M^geuGV_6j)soq^S3`U!6PwD72VI7k{T2Dw4F1@VGUJ(HF`F#s*8@ z!rc1EV*CcqZ+&nk=*RvGlro?@80va!9^S7%Lbq)oS-e60Zaa1l>dD+Z)IUA8tGu?1 zN8>1B8?TVJ)#dR65X*O3nN&K8dDeu2!=2jQWZeaSf1corc8n={i`wS#k%epK>E{?5 zg-meth~LV&pB`<@!(z|0Bm?X)6|N$S1G3WvkI6jrYK?>nMDcq8Y6*2Y7qAL8jtBwO#$O5b608 zF)_o2v!soll=!ce{shlv^|n@L^#PhYT^)ibzdrBy2*!_K+6tu(?IPlsXSeE~;s1cM z8LN;mnM>^)|7tyg{;XH2AU=BH6qy9LMhX$Fn250A+GX@(DwJZ4k5K-__0yw+h^KT(4bjsRM2?f%@$}v1j=Psla1zR9U@r>t_Hb zrxj~;g$B@v5V)_C)O63rZ|!M!qiI2|p65?40W+q%7xCC6MRu3R8b)YZ>nWThZ(+up z@>7SSH?>i$!T?MG9vpYrp7!0++q1%ol~3@fvqC{rdbpz; zSG_DbIM0{=9OU>Pq*{a^_M?~{g<|BS{M8RGZ6c0S5)mn;lJg5JC*xvMcM)ESa{{*4 z|I|U>E(T5Ajn0>(hhf=?cSX+l$A&4{BvTJ{)BITlKD1Ds{*^VhV-1yk`0?l~3}=EFGIH%MXD1oxRi5gtG&v{*vICH>e#FljvRUC+#_d0Ut}ZYI4Nzm% z$cGroIYkfrotu7iQ9-Z|Ct2(UFo7{pgtpcZxq_jx7zvauvf+C zEAH7q`t23fczpe6Ue}IVECap5Wl*N&SRO5*=V6z;Ue1mLO*Yyap84;G$h;#6t*`ep zypp4T7)AHLF?GCdPVjjKDvfz$YUibV2NdslTfV2SS8j640Mcm!A%DoQJNT-=2yel> z+v87y$PZJPt*9@n?W1HXGS?^F)6GD?#ykYA*gk#h#%#4Puc3Qqr!WlR` zYS7|^b$w9FXR*MS20>or86rN^l*S)OS0iC=<;iR-@n54hkUp(t-%&J9dG{6={y6rwX&3@|IP+o(b{F8}dRhbu03C0uLqrat!S|jYa>%QN#^ z^Ty}>I7lTEWL}vl`LHMPLE1%V&UiMDgE+80JiK3smvO>4{6b1mE0}Xvgb*O_@sw~_^8vkJ|tPP<0b?K&w3xcytV zbd`*~noGSHl*dS6%5e?am2Fh8%#&;pK2+UG(Ont*nQx@=&_$C3wIaIm);kp%oY%hD z6s8{S)x~xLGWKQRL#F2D5`1&-|8;>xs-`3BXj~^#en)THjK^^48z}S^qadG-O-{Ss z_;!glzvB3VF3CI$%gvFe)%KpTU2-gQ2+6!w^XRU$P2Rx<;S`M$nN zx`V2LiN$4RdgJTcZ+`?}aw+~+5L`HFZm8x6vj5YC1R4IDo%swc>Q{yTij%Z}d25u; ze=(Vlct6xazU+b{qE8>11N2PkPsXiR+*;aOJ$lG+M5)9s^o>Utt0bXL|5>2tFc&w+(8TRC!pDtYiN!6ds zNFPR(01ec@T$zwYvAxp~#IImA;>|Xn!$cdfH)KbPFID0`t=l6FOnl+;5uLGZ9Np0{ z!EdS2%8!U^*4Git^503L{5XR6)t01JD$45r%m0CsL|6FESuc#cR27-w&{oj3mLTC<}#mA^p&*_?rS&S5iudkVTkX zB*dfq^7OK`4PiMjzvqhMkzbn^WA@>_oT>*IwT;)Drv6uq9=N|!0nDq>CK$o~AbW?kwqHNC7( zb6FoGDE)n3;0Olyw_hhQx&jCp!Dr^R;U#>H6Fdo_$koDO=|L9t@feXV*<4sXb(&^V zCSEGoutJMxpj&by;e)1*^HbQblLQ=Xewc`#-^61#I^ngQ zVb+I00Y@e&(9obkO^a?fpv$2~NX&t>jb{hI$N&qH;PDiM^w8 zr#RI4anh5cFFh>^_ctu{cmMZ^E&_Ij&5L%#Qps`)js72SfSe)zKk5K!Ni+GrR1$RS zzE>)KlyQ!^7iV@mdBaaty2QU%xFS2wzw-vitr3h7 zD)K4?I*QsV5^(uUk#hEyWXlYEc+ejMc3L7eqSi=~FZ_)q?+%|J*~wGo>=7W2JSB7& zBC+!3`0FkwU8_^;u`=;$*c>aCec^R{zqa!DNUH+^-xn;yH%Y>mh?F9_8AH)U&^Jw9 z0u%HOD(x&hd%$8vf2WThnS%$^o2LS`oFygcRPWmfE6b#nDySd%L?Zt{Pp=j#k%5BT zc0h+hg0=cjBSD+5-%+J@hHi8R<33@=ia3PVRtp}CUCOnhXg6~_{0bB#E;l^Z_!Rd| zDsQSnI7teXp$CynZ|sL)Y@&yQhN!{0taJwdN>FoE(U(;euxe?XHOjZ!Arl0Cz6Eo8 zqXVK+kO~}J9wv$7Aax||KY*47AE|_rSixCpw}xfPGAKv(!$Fb?PM`5 zmOvsYlSPk#q{ipg^AsG9K2!jEg}FE9Hub~u*ndU|R*5U+Q0*bH4s5qE%WJyG;HWu? z-QQod+_9YNQ3TkHEf08`i;#Zq;tq<`1AFA)8Ku`r?je)k4X z&f3hMEVv>Y2_)7gWx?9Eml`Pl+SGp`3uWR94telwa*nhmKT-P6wFMss*y}F;oex&h%m2o42|8sQof8mynd2;Ik#V9J2 zuFrAF)IkYHhk;_v)jav8X;pO6zZ70a1g6w)52&%W{GtcYLQJPK8m}ZM;!5Mc&cm6y zNICb5O9l5oQ-(s1%9?O`TK|~4ad2eGq#bm>XTm5N;>Qu2>3Hp&@@ ztW<2ibj}%(AFG__XcL{S7z=CynyJmt#re~$b%Ax+Dxz?#SNE-wa(dmA_LJ@TuWQga zZhY`AS$6pzlr;Lfnv#{{(8M}Hpf|WvD~DMC#$uHz&T)i)%uG(^Rni-4kpj1_s^Qk6 zoINWGi!*J0Tq&QTu;lDiUx@tl;8F4<%%YlT5Z0r?i@ zpZXLB=}i5z#loU`Gna`X{`$4ADN?!m@LHT9A&92`t+l=zBWh@0moCsq|M`>_xE#)c zX2G#Gi*UWHAYpa+@OpH_IHLGirrVo;|JG8QPBCWFPgE;C!-(2%alU%-dKjgb2hof{ zE@UX}L1`ry=juBgu_rVnXOt%MfR*kJe<*}VD2M(mROr-ZqeY7g zX)-X_z_#d(%6&Xy(dale&;tQI)SU(3*nL5`Rz&OEx+)SiFAopAM$;9=k8Pj+EaWmX z_VK0w+b)PdEc2H(u<(3nU4#${eU>yl8pMmwftKNP@|V$aLO;{K!$6O>_8awRE6n0> zdQ~bELct*9ANz2Df!q)GF7aWHp;ssr8gS($`O(U?AoRbl0Fl*!d-W_WPeg+^B#e=nH2LIUwF_!GJ`L$Y>L>?rR- zyxfEW3KH&)2TBOGwfA+!M{27yTgCSkfYU`7{AJ2alE3{hkPxE2jmAImOKZ^Glk5Mm z_0HjScHQ=HV>PyIJB@AIR%6???KHOS#OvKgs~E@&oa zP@I5^oWZ2+3MN_MFgZfO8DAl3$lQ~;~G1P{m@rOWWq^n0w9s8HRT_+ z3(9u;!^INCV{|uhvk5KTU}qKr4vL>GmkMw$;U$1xaK_~U9Y6C8i_q@#!-8iW0n^_K=rsmcTjr#A#b6%6v9zEp z)Wq@SfLX2)tnI4N4&e|U7S^Y=VEPOA!_w7bF}tRK}+IGaoNj3Qpsg0 z=j-7)Er>9PiDq``E)!)^m`WD7DkjH|(R{a&2$Ry}w0hu;U{<4+7hSUk{}$c}BAf!q zjO1}-+v&>WZfQurd1jG5yZi`6T{#IS$jZ1pyPrHt=M4IgT?-SAPL@KOU5t*qh; zF{en~xKUBjsp3A6-)I8y0mezjKNR>d;oUeEME|!0^anQi>SX$)P>eCfKZ@~aQ&5Oh zLgt6qJd36jxkq!E5IVg^g3Z4f8>_R;AbmPx^J}9b?VFHk0Fq4HzHaY=!|FTlq$){K(b@ zPDA*Qj5~(4wkFhT6r&m`hrVdkTJ!KfGHw_a;qv-FxIN5CBRUB)umt}Uu;A7y;x=1M z65L$eI}6j(n_np^ve_@hckdJkhRl^HneA@sPJvT4$}_iRcQN8T0-vI;bBKTBL!`ZP z>`OXG?kf0~Fh8=0rrpxZO3F~JmPBR#?AduPU0yb#mH_hn4fP068Za=X`|}Gaut-cw z+W?i?CpS#2=-e|Tsd+b-uXbtOvZ)WbnAr2PcRdQdE2( zWstQ_UpU&@q(o>S-0AKtSfSrj79b4s6Tml_1%34F5)?01#po9wmzFI_Q@9xr+CtDj zZSG=TW2Mt1pq;~7fQ6T*F`9v&V@vca(SI4jKphEq-CfVMnZnN?@k;|*$LnqN3W)m*SJr_|DPh$3A{}@MWaNoNqEfJ)$48H6ndf`7mO|x@BB0}6=ch!@%p6; zC0pz`26CcE?S#)Wst9i2nLeXN&$%4+8LGgQxX%Hf0jLZ#GrE~QI045L5?=4O`C$W7 zj`?&?_-nScIkS^D$y3z%jKO=~foAq&NBM1LX`idi1<Z(Hnopk$gN0LZ^^#0`i`{DiIqib4(YU%y$ zht6B){l@zJysHKG{Zi(Ar;GIc`8}u>MbP`b>BXC?QU&S!ckjm8`yKNV%tMg(6RGlm z@n6tybAk`0icqb(xJY9V&4<-4_dQM|NqVFUWz2gR3HZObMN9H@>=jwu9S_PB+>A}uaMo;GQ97(}62}&!7*|f6(jO_YY^y!n{B2U$9WO)F0-iFq7B1tEPzB1O+*p z64;MZ+^nmcX7ycEu*tysPPRsoYH(uhh&&HyH`K-=pR`n#thq1Tl?d8Dc!N8RHhCv# zOL;IwGGXK(lc3%cL^$O}!+f#*Iq;FY+`~9ZkZHRFI&SEv;E!_*n43VIl=^a(%QTxO z!CypE2)~{T&8f}{fEf`2PNkz_5M3=x*vj;azqYXU$$og_0&n|4u$l8d)XsSQ#Vq88 z2Aq1;RC9on@{${MqJpJ)pk9u{+yhpKKh)DFA)Y9!@A4gFUid3!gzM-}z-|L|^bO1+ zq3D8+lmcf8e&kkGSb6a0wm)(E=8vFh8)*!J$-e;LrOy5cuo0u;_QjHpw$Fse&vV1b zqMh}(2bTPXGl*jE)0s0})5{s)SH5=o;8v2Brgdzzla~IMm*@rij~WWG?TSb_8TTPp zl8?D>%IDyy$EG^{1Q=zKD;uAWu3z8m_0c6nr#lEe-5a80D4B8f-17o$F-L}4QjTHb zDkjCx@?n7#hn&dB!~?auWxT2XoZbN(f>Tntu1(p;c6aHU>8f>hrnLM0)#&JrSz(q= z7S!@H!Z3E>5Gw#HqM%E$ODF7L!f+cAAQJ7w5(p<6imAIBv#PvNepJv&b94L2x^0HbM+)=N?(SepZmx(g|F|Wc@MJPK0%FRKgjXg1`d}z5ds*q5y2&&s|;`$b@pFQ z{Vs}+0&#(Zm1d3f)iLUhZ<92z+dXdUw6*`lzJ+n0g+Akltg}H~e;sy|*q7RYncmxj z6BzjLtU__tl$Ce`1Q7Z+4cZ&!))CO_jb;8S*7` z2GYO+pnk2`HN<Y$gs`S{Eh&D_SP&oI-NIf#(+=PBw{x-uUVc@=P zDs@Qx}vTcPh^XTy*<5T^s5-IxFfHi}b^$b5CwF}$pmbn04=i<@+aVO@lt&G&;mxI~4U98RZ)l$rj#vStnIqk{=*(>S7R|-+ zT{thUp_mYQl;Q;W^^Ad7dMo<6#y*jK3VNLa1o$Nc9OVG*9H3gg)fzuwYi;P~HQGc9 zr(2qG-)H$QTygLSz`21l_b_@seTHlG8trA))`A?BYv@e70Qs8IQ%i5EeDKDeryRY* z=+s3<1HVj5x^^Yp4rD*U?77I*6WJR_XicC38`6Xv6@nHSLX>x^A zkGPaAzXwSRW0JB)DZ#8nEoZp*)biO@_v~AyP+ubB zPs)o&3`muo-of=J(Tp9m6L9+;tAc&#x|QO2DwecHB7#^)dIou70lvT1JB^af;{v+6jmv(B)|TKFAqX5& z+tx)L0+&%0AMoR)3UD=QXiPvO)HB=#RA334vV!a2Pui#Aw$B#G4<|~49xbv#5G!$J z3pR@Gg#i2Vix-W-X#^!I-&}v+(qj1V2JLxFCXdbJrB{~wvW3O(!z#jZkyVNOv=>az z^3bO-{bEuEJXX`RL@vzEElNtj7cF>D0#pTE=5bVWa%F1rcvFTmdHq?1rth3S0L0qg;08 z>o-EB)YZ$+ogP&1v*pHF35Xub1y~stdVZ%iUW6l%Q0++4D#052ZXhLd)YzEz6YBi1 zH~*1M(I#&T9KfiOcet}Ckab_>s!QFvMGGIiD993zE&?+8Lv5QeX0x7O^xFc(LRTSQ zH@-E3^@VPUn1mqteQONb00r<5w3w8jP=3Ep$gIa8^~92v#2;sOC)*}dkLI!*b3Jb$ zN#(P>%!grCz9u`|>cm3>k?8ko8Ed>T=Qt=X!w6xO6AA&W;v#NPPn*v1D4P{#eW~!O zWsji6A2v5J_Wn!YAs>D-{C=w0RomVMyT|vu_1zkB44JiGDLik^kae=b?>jjPBECH! zMeI5qYu29N89#B~^_&oUrNkU@W0V*+aPY12yeX`D5uQ-kKAnUEI|+9^4DrDYKGU1Ztz1T1luj?f`S&tV$7OtV3uF+R30XUC~+ z>C9==lU>VVVIMZj0aHH~eQuVN-yN`~?r#S$$;Sa~;UnU&Z^)w-94jg~+i&Of#wMg3 zDEVu4UIT!LH-^Yov{z&cjUImLh?4nx8*lYbR~OU>T(`J#y%p0EGa4PTrP9^!%!zh= zaZ3a65St;zDKK<3m}foJ%D=|OpnB;RP8y1a&c;ceE3#l{Tb}7xI3 z1yCjgmAUoKG)xGgWQu^(snoF*J+9(WGD=_IIYcRRtdjJXj`#yOhW%6^wMFco+Vif1 z=LH(ygZ)aB<4@2X$wmqyz73VI}_QD3cCG}ili zh6gXJAhu*~b>@_#rV`RD)FcY-InF_TM1> z>4Z6{4ioy#68^(~Q4)vdl%0K(GxZcTgT3$p)y(Ove*WnBTbG7rK;M%T3c*;NMb520 zi=vRZC#sPN1x}LBl{f$d7are}REqVgZ~?yw#MIHG9|J&ZC|H_)FxK*c9)Re~^K@i{ z-={)O>OB|Q7pJr2KZCSR3SZbUC12Ih-kp-9))oMOxkoyUDH|A3n)LB}!UMOfc6qTS za`AqqQm@}jgC^rI1}ekLpZ~^-$rqMM2~YV4!?J`f_=xc_e+upFVA}{V1kP_qCa#kY z9Tam=__2c_?f+;2I*Jl${lPh9+#|0T4#x%?KO)3!qY(f6upcb|aZO9v8tT_d5G_7` z{YUO~2I1jXvYl)aMFfLzs2|wz`}$-L@NaUNFko)#3XnR=LGLyld+OpJyf&LLI7s)%y2G76k>=jJCXZwZmO|Y;J z1%UI>)ao3UD^6=s&G!~>1T ztxl*?7qi;WRvVLo4mL(*Nd$j4W7f)FTXN{M`geS7Hug8y43@tflg)U(-(?p?8&gCM z9*vg!B4NO7q?9nmy|zASXyaj=)G#K7ltJt z94s4`5sa8_s<@qr(Wirv%*=Hi_hww_a=>R`r&}-1j-GqMRsy-;z3+HBr&c!IH2Daom^yRL5-Q)ORs&ZzcsU^$_nT??iJ09sg&5E1|gaB)3YbSmIEXE&C=*Oe_St{J7}Ut|7A@v0%j+bZ8J>N$hUE_kd$hFv@=&Q&-3b0z1Y`q zI-oFvNyvUkw<#nuG#K4upl%F{V0cCqea)x2qzoNQa1%L75VgJRI9%|eJtt~B>-9Xp zJkGok4;ch+VZI;T`$-qku)=&2ERjPB-X`q({MVEf@3LPCdDT{c3hCr=R##Dr=eDKcP(6KqIdq9GYQ#%;}eVAa)BVy7Hs~6 zONGzFSXsR0-0Z5=-WHsTA5xYT2!B;<8|7a_E5Escxw*geNrLJjN(pB2l&_9&fyF5+ zAg8l;@Vm%l%rBF1hGHoqSV2hi-j34EDj|g*RnX5uAQ6lp2H819;jZ)XvoL()ASK=p zp5(7kZWe^MZVrx+D)5_0elFtg28 zhITha74`01Zy3#NoI1VV-++yPN>kgVPD^>Tg~P_3))UB$xP9%sH0456>2LdvWx8|k zVr$OqXbgRJ=2j1ot79dfa%{xS294_tBsxD%Zo7MoZ}pq_pW%VE;O71$&%4LF-Mjbw z#F|hh?f83jKJeh%JOa3@`+&@{+K-yUni z@r5^FVo;8&oH4ZGlrv#OskyEP`(u42HSOp7SIy1~$Q6a6i95$q|AUePz|}Xs@BV0E zg92M}ZEB+C_>Ns@O&E=cgHmr-ElCS!sMx~@Y3A-1i5FI-afx~xVIyP}{xY7Pu^vdh z{CL)^;YT5o?Hkb|6YYR3`69d|u>^^-98oN#jd*$k_NANp|CGP~qrB-pKzKw`>OZKA z&HJpy`S|^BeQ*z}@-UsR!d3~Nw!ROC#HInbtkM-d);GvcA^p+51j9WB>%2cNp7RcQ zKRw>QZ2We;PkxVWRlK|6@oL+6zw^G!T%~CD>5gn|SzEMBsN#M*x2}8V<_MU-=_*%S z%UVPRH1DjO%|+H%Qigi}-Nf@c-^OdPcf|9yH(AHyN(t-fAa?N({eGX$(>6LF`u+^- z?KV$xix=3HnMp=h5C*{q@Cr;_b&pg@L^a!b<bk#)-XG6 zON&k~OR^V&j-rYc+x91h6wan<+0|;cM$(IN#?u&5)Xlcg{R%DDZWc0zW@cbLC!?@J zf~ujG7nKx1iD!(_?o(%U<27Y<>YON!z-;h4PUvmzq9X0++qtoymXh$jZ;|IKnb3Q? zM7R$Rg`HHMl{#`obDq(_!pR^f?rDzsZvC@q{{oz0Sd+!vFb3GLOUL4XBT=$+58)XQ z7tp(Er!8bflB7qIy2PahPAcC@89yKsf7fSrBtwdewEV}BVQ1B9x4RGQJ{-1W5)}=)INBrNs+~U56R0 zW-n{c32<)=CC(AF{T8)lLN=;NXl>Qd&nVEILHI|aMZvF~?UG|c6$_k2$q-R;6h4o( zjR}g!#x1wsL*$>)7EYEWg`muKN1@ECi0JOitS9k)s;cArC6GctX#Rq5GH-He!Mi}d z_Ym4gvTju?xcQ|{E=@bx^Ou{GHW+>VOZhDz@C2ldSYsq4QeB^hkN~sbg&MNmzv95S z%Lq2*3G-s(rG@nmQR?A9ZMDc7bGY#irYlmED3|%4dZWDdeu@Oeg z5=>lqQigBu3Cb;*suH=Jo`1O39+q&DrOrGy%bX~_lWl@weP6oZ5#eyY3zhM=FXcG- z{Hi;302@mI84NM)>eN*^h8v)7dKNgkM>bo)>w-abGw3oa}S;He1JpY z<4JQ5eAjGiHvb+EdEoxykXSyHl3Zn2fP~H5%AOD;xa{-wmsVkEGDl}u;GyoleWD_` zV~zG&voX?JY&0Q1R#rG}pE8O^@eDEWEzAC77A>T06d0wKo^luN#bP(BAgP)3|rs0u(eiAXBlmS7lD!`0g4gU z6ksr3_m}a=2)OZm zPJD(w4tyKF{0oygf|UU{Gbkg7Q?{rBNC)=L$bS28gD?EXJ+D2OI{^v-sy2oM6mg-H zdOKEw9PBZT0A;A>uK)sx#>VUD=rS?`9uB-=DLLCswn&3pAdO(s_3||>OIEFSR;Xaf zrH#(iqe6h(SpDksodd4KEdFpDQN7pN7hec$g&$t(V?`?vqel8LV8aj#e)Za&ihATS zIS6DhH=fRlhxEe#()18VH;J8+5QOZvFmt0BE1FH|`i!7>kbHH9QC}QkC$L#ddI##6 zV06BQ<{pBIq}+qr#JYsN=#ybRKT2rFgT2T1Wj~!Ltt8T7XsfO=ZOmo0rJtz?l78Gif&fQGVS*j{^!b&@Tr?db;IGf1xm*U(7O$#J#Lie!Hfhy@flsBM1HWhL)#qZ#qDosx7+GJm_}$VqQQ zS`^BVbJuEvD<`MXEf_puMNFv>iE#FA5z;HC&`6P+uiJ?P7$MFgwOMHvvr!GMKcfT{ z8TGmBc>|&>ExG(qC$*9_e9Q{ny`i)s+_$I$@x#?4)^~ijqXqy!pN>tEn=04+>(=tL zNlyflVD?-&Mi;q=p65JPG{US*yQ6PRY850@mi%OZ`RmP#^2|hPXu9p!^gmMMurP+d2V>@A0#Ax8EcSEI` z6IO%GM7Q_YkT{4ce`cjU+JHIHc{7CeDVCx2m5A);MSyBPScI7x>O%oOIy6)X>CxUQ z5ssV=W=YBsUTXz69R5=-4{06;Tk*$T7@63YlYHf(_*bZ5+%SK4k!ulZKdj=lG0dGW ziI2C|sb7IxyS7+V=*NVC*nxC5N?JT=_S_p+1C0Qy(E^9&r=);?D&UcQuY*g^9$DB* z6;>1t8LCmupD$cos?QEqYIZNrK@RQH6dE&2G;KnJ&ISr$%@L+ZRFRfPfJiY*c~dOm zYXh(63s8DY$*;{S(9}wZDNFZ#@R?GIpz1>>3Yfg=t~DQ?n`ynvxVB|n_zWn2(*g4< zA}6){j8vbzgy&d1CrlMQ$T9c%?)B>OfOGam-vmX|I+C0T^VQgBzk%)Y9>pKfU~xug zR42V$@i_@8f)#I^;MkA_XJgDQ{+aqKv!*X+;1J@_RW4=64g20=e`$Aw8HxHA%A6oZ za4&cbfFtraX(V|vNtAtJF)V}^S@{5}fz0Uv>BQr&4DA-|9yms2IyA$AuapE4b7eSAv&6d*0bf^y6 z-FpEu)tF%?!NByfd-y))${e_v7{GTc@rS(Y)Z0Z%Ab&W=-~1PH}m?9Jpot=;C}}Us#hWCky~@ z0;cHT7FeKCElP`ed4Epn>1AD+OzV5pfks0HB;KANSul(g_dBf{<{iqD5A0Wzi0jJP zsjV|Ui45oBuOOBw=1EsM*ssVQDGA9v}`D6 z@kS?cdB2tt;jyI8qCksFv950GABg#GU2_VWA>oH;{vzY-=}{WqbD3&F@;@$zQ<;wey%v&12kcg zt^}UW9VH!2aeA~)Rz#G_wfBwi)%1E)*;66@huZTN(8a^BZu<*^*4|13TE69CvEID- zcx-cit5c?|F6I_25yh+qB)l~!oVi@jCNybMtKVIS0exIZkSPTnHx|JMW0KDN!I;Q` ztfP^FLMaOjEk>dBD4E|0^`0E+J!p>ayQ8@hwY`OuOevnCLgi&@th!+d9{zG+IV1;7 zzFc=VRazN0RV`l-%QN6ylr~QK26=w9o>81(J(d=4AH zo=*jSXel?^g}&8X(*A5~3QY}w{}*?*@)Ua-$#wSx2Vr6bXVNcTk{VUXo-324RqFdA zhmX952n)i)Rl0fDVi*g)U{t)X?dslDO+ipQ<-0e<)MIHHk^D6RNRDMn< z(v%>?vmNevmckU{V~u%{QY3f5%+kMGnl}h9j!bm${F8})5CrPm`i2k{wrE!YLD*Td zOdqJTLpEi^V?Li6*?D~CuB-!n8cS8j)iYCPgaP1CuJ}52+`TByJIo_YBl$%{+yYjE z9%2(@jK0)Z;EInE?3$zNPuprr;`KjY&!JFp)X_sn4y141S@>IJzKsw#s9MyLjQDkB)SGEn_BTa11;L$gH zWzAsUpe_GK!T#`_4ym9j(UTCKVD*ZxHyMtpe5-|>&XvV!ubM9gv*3quCBh(wc!&e`UqX8 z>tRbQU%Q0S->gLIyqiFZ$kr)|TAwqJKc9Rwp?HU=Fe3gm=6^~#9>{>fh6NX?>o8+S zFg1t2ywtx)ILB4Ve{g&33bgFb(9hg#Opkw45`Q!bFi=FUjlosn+Uh?Ia!pu5>5Y4U zAN`DWKR&r2y^Lh{!CNrEna0b;xnX6!*dP*lJO<8L9zH>=*mup*d1Y$;^6y#sSP0?q zqZF_c;r>ohC`neAcLJ&m6gj!r5SlPPO4F?W09Wu!X}~ce%)zXKz_8#iGL#v3F~*>4~2`|pf*a}e(`v@}e?$EgUX`mGE>Rl4=As`ZPs z^rwV~7x3ekFnC?6o#3N*Q8ZDjqYpm;xbaHnnh-?!tM)Y1#vbhaG)e#co_?bNcls#> zg22?kuN0X6xhzwyaZL~jsNg=_wrpJsCte6E(2EbOaw&QgwnM4bu7>s&Bry(Hq}%l6 zRe#P*GKrRz_37T8np$b+nrvlJ$PkMey3A>s{34=E#j$-trlKcmWn7nJHc>x0eDvxNuNx5`wBp3(WwRgz}Ob2rbVN7_@jr>uc-I_*#^X zxmCqP&kbW%ik-bmIO7HlUYNsz+S(+MZ4-cDVanFuN|FcNcU1#rxhxX~p}uaUXk$FN zSPn9WjLHsrofhEmcuPc*A*J=NiSlkyL@TmqhLRc;&$}5=NYxsqRB&+iM=4cAgQvO` zriPk#&SOMrwjqgN>cNGQ+!_d$9Il_x^AWme?M5ig&lOX}uP54iq5pDV_b>Un%M+MX z5|-3DoYp5Ft1H1q=wKcBV*!2Zs2=}h6fM1{SIe~=a$FvZn2J4a_?Y@dggc{(nc@8} zdBGxZXIkmDQA>tZBgKy~;XHHC;p~b1!JoCF?T_~`jsrmTNGK=ap7v+zZqqFn+k{*+ zzcPJaNtBd9O;8-^hS}y4?8rjmZ{cY<95RVy&!2pDl(z^r)#t4X_n*+0CiAQpG2a> zs%lCVsb}WLCF-ju@Y{tKDIBJ^AC$eQ%hbT1f}1Fon<@oZSn%L3?G#rW;dC_YF&>yR zZ|eMeiR1ZRBzLPQC@l@$w>7|K-Bi5GLPQ68*|LIzmtFrB)bX%moiWoprhS=UQ?SpS z0sTrTTeE&P8&phfXIjKFC!mna(ul(AmVu^*<5?iVM71huzf`#oFU#*#bNW+dAkX}= z$`zzx5`Oe4$AlbSy9wfbXry7VnMs@gV|h{t0BHs85=h3DMnnSU$nDBQ;JG^N)8?`H zf`8edgp4ZM1DBI8`S>M)in=#&KX{PuO8pjbLIHlKKZU@$4+ZK>F=m{s%eeRZGxe+V z@k7Nljk?8sc6N3a&W&CcgUMpsoteQzWBc=#1D;7dq5`<>;iW0A4Q8|!8mast;qPL1 zvF@*+SR%L3=yqlTU4OuJ?Du)U9ADNlk=A^~p?o&{4Yn@4X1yt);zY|5uDc)}3}5i3Pl6F@jWhk4gX<&F^xZMOnWO&j3Y)Jd43~|oFFcdKZ)Miv+&Br+qx`%atYf!-0t7qU^aA zrn7=!ys3EMsNejG7sk2@g9aXX$=C@S$?0IG-DLVDzXRDcw3(IFLR&xIE>9Ol#P9hD zxKTy9Jf`vjY7vxbs+Wbj>?Y8wnM<{-QGr#~zU5e|_WR!v_TbH0AqaY8dIY!g@A6aB z^;MCx4@4%3ltKr48fSd~;oym)hLK(yhj?w^!uHa9*>5-#_(1a!MhWmT3TDc5WmtL&AK)4i ziUPm15g^z~XQWf}8qoG*O5%^T#wI)fZudq4nHQT?AEg{A_ZE-cnD){aHuzSb+GEtk<7n zs5#)2C!oY(D@Jmp3vy>)@*J`gnJ$K)BhrY$5LZN%0946&_MwTzn zI#ha8HqG{5V#=Ya&Ta)dhp9)qXno(BJX@z!IRvj?ymxPBqDG^we-tG1^{(_Q32Vtm z=XvZTX%mVkZTdVJVqhMS$;WSeWU($`-Gmo_Q%ANQDG z066-XQlR8jimdRUyxA9wIo1gp`!O*I_;XxY5TX& z04b*19b%~za;VaB=)_DfGT9t+-@n3{_jlLfBE^$Z9rFAXBYxa6q8=5k`BwxVqtjKV#H_wN;6vkmlV0{sfqhst+K z%>J+@zy|tiY6WdnLA*$FuD+80^J#)diDDQu#QGY}Mp1^`izPIqUb<-LuK?Sn7}Z>o|_zk6t+BftC=EGME}=;1A+e*rvh2vVsrkL57QgU142bG zg3vY%JwkT|P0{h>WPwAtfPN{J%EWY545i&uO_%eSha$uSd6$caye9UQYd1Mp3fUb3#vJo+TVzO> zn~mewQ1_=1uHqz(fl0{Z-sCr8Fs>1#N|q?$xrdnIT3o;vu;fh)AollavmZ+-;Gc+# zof0V0YjYbS%;O8y%U}4MR=$7uoL}4?1OMe`ek_HBTiL*j6$STcKY|j{5aumD9BiX1#Efx6W($YZpYv zltRjtL!CILFTeS;Q<0v`NAA7HiSNyee`Tku2Bu+_^e&yt(E?t(@YgJGj?scmpLRW25O_I$TK+6#^Z~9UzVwd5{He)@$yRO>InW(JaM+{o zFvZ+Wj7KC_Uz8`ji=Ejaz#$Ol5nbltkF97<7yg7;u23%&6Zs4p;?j#1;ffk)E z@#s{q*jHfvpm6NMw{a@b5B=PbWYM!|6k#E$yJwSWLp*$okuhsbFEy`s;RPOz7q|E^ z3+MQp4QLX8Q|qs5@B2#nTMPZQY*lNLw&ut+KHO|!#ueVTbCxJ%-BNi7xBy><`rDL-RG(am0PmkJ7&n~ASI7`I@LJr0Rv zJuSKO%^lF8`ZjyNFVUARl#uvX?m*&$|By3l1Q`c#xf~BK`*d|{6XQLS{062C-Tl>R z)kVCLp&=`SQ>gg#?h2I1;KD(0QGEqRfquAyW~D1<8R?mQX^XE=^xP`n7dGX5tK;+v zaasS%zUXVpMvQAHB+`}JQqd;;&fA^x2^*X@>$Wkdf1N2G%VD=Qae&nSU2}+q#4FwL z3biI-=NMvm&0>pg6{hhJaFe^b~Z8!bg)H%Z{h5CWAl=$ymj*= zEIdI&uTZ-xc))xBK@M}&Pt`9g&`rr&F}w%}GJNTDlAvuxMIy*qPyz@s_2uX z!!Mc;(r`9?HhGah3Xm^r=h;#eRoCIB*$+*Qp3wTCy7q5H%);VZemwN#hk zV%;L)I4FEOJrGgyn%~mqBE|e0I%oiffx&B$r^h)2k;6=-x0i=92V_&FYIB@D&wL?c(Ah>UNK4NBw$f!0Y|4j?05b8tA*Wk}QKA{f!7FR(=!WDS(4wFvaa&?Po+ z<%ociqMf~&gzt)hm)nBc=G0MI+#?53t(uGCDNEh@a~h4QzxFqW5kvjeGgCSrvPkj1 z!-&ZK;~s25gyaa6z%xMR327H%DI$G$J@y;v?L4q!c+Q%b-LPNs9=(^>{;=CHv7 zLy&V@_fPeHduQ@gqM|T=h!RbXL{+N7O`p2eGn5yHRyci70zJM>1^b^;`?E=7zMqeB zuh5T^9AHaroBMRoBoR2&v{iOw{5byHG&U404V2L*ASXZ!5R0*~@QgT@_&}Z>F&uBR zPk#>M_Hteu#XlwZT{etBF1!S;hpd{KHgU$fv%|6S_~%}X-R$reuIntXdyozY80!B}B13rp zP$Hpb|4<_8KLWCTO_|Wf?|jxV{+@v_Eeo43pHD3*K^~O*3h>-;P_(^1O7epl5*u3& z!3uL-ME-skOzH_pBIHbnQw2G0~MP-2xX+CY9Y)@V(3C`4%pq6)I_Y7CpC{-9sI`aIJe zRo$lGRq<_ly$Bm638x8Ry)%MZ83{*b{zx)l$|(kDy;ncRaS~7-17i zA*(`jTzZH=s3?zR0=)$qF6~Bg2)+p&>Tfg63y_uP^>&s+gfAteul2wTItG`i<`4D3 zeTp3<8o3M^?)NltI37p4A(2EEFpPxZM!&{2cLX6VZ`byb`>;oqDf zkAZO2j6Uu5O-{Pf&Iv*X_d9^9t$AKhAe0$Jb#X!m=P}6hCA+kr3J-t8sH+ej5vBb5 z@3!-Z+O1YDV#9m%RIa!+lAnV7<81K)+$aVD*O%Of54=92_qM-zld=n_lKzsG+0H#} zmId}aFXIpO@Ai7W)@j|Or4*Z#dO9*nh7cg2yDQaZvbLe(3v>)eLj}qnZ+yTx;>Fxs zHr!II36g!0`uNzfw}%?P4KVNY0z0uMUdey^{jA0C2te%Np8`lRdwvG>^ zv5!h1U-oO=s6!sKzD6GXnVsWJ@S{VyqNt*Sh((|oHLOsxn0~k}IZ!WS8c_3^X&%i;pJNZVBfrrbB)SsSXC5 zpicJ7=%scSm2jkNA3(^(3~e)9+qur$cSEm>O1|to?^1#8@|ix|JAVa65C#5$EqPJ` zVa$YI>%vA-qH65B62WQb?xkWfyqZvL)LI^S1$cOIQ{JuG^*y3>5iet22%(mCPW>lzvX_8?`O)?dj&FC)ymdT-s~2SfTc~g|H!~hN0~5C9_r}i37vK zIW}{ue6kaVpD1oFog;9I5sUJ}E}gwMaHb?k2+B_yAZ)M>=ObFDxAv?Gk^BUz8*rc~ zHFl!J^BFI4U~AQ^By+#S!B#s2DPhLg<f&h`}+Wl(K3d>aV3sukJ&8w5!D4FOtc;-^NHgnurW*q72hOf5XC zsGtX7tgU8_IeW!*>A6>0m1#=QaolOT<@Eaz!rr9{H_eV^a@L^jcA-xxtMJj#E_{hz z*taAPE7zL&<#8BPkn}5$+Dxm|c!7h7Tz-oDn<|-3|BnkE%@Q56`3VDt#4$%#H0ru7 zP)t3Y^ehSQ;9WiIDGB4B)M(Sr8Oq>}trNt^A;kv@#W4z1a*`o(VwM;7(C#sJZVuW< zA6b0xHbR5ZN`oWAPWC`uach}Zvg_;IcHK%Lp5Fu0^B3fM(;{e`1&{jMPP?`n0;-M5 zak^6oU|q$u^!*U&QxUaKk}rm9SjMKb3X5L4;8e5C?u&@E!tf{80WKy~(|xlbVi71L z!`bEbLH>rx-{6;KxIn}QXyY{Rhn(%j2vi$yG2=zP0F;|X zN-qH%5RdhbV>>2;M4EJIR$>H7@8eM2c){B0iZ($$VuJkq2}R%)oom=I{(R0xsTJbU z^_@zu1yg=IY+f%j6}k#*XU?2Wsy%n@%S#*cqHxIQ>($lNls?ah{O++!y_UtuLYy*h z3jDUYtsXQHJRbfDsO45A%$5+eyDxzQ9aMrYR-?v#K>yy@ovl^fpW7jzgzpdKR$GxY zN52q`4R`;sWJ~%**YL%^+k|w6w*T3<;JAC%t)FShy&}(h#c79JinS{ z5pryh)9*3z&{8|0m1QY&>UR}5#f20);C7bJwfC^(z5!Zuk!AJeJ|J-p7|aI)xQpv6 zy@MFiWaz0{=?AFcAigXyj!hG{8g!EN@eTQO+-6rka675G>5#oAde<$=_dnd)K^=QV zR5ipMj))x)QA&0yZXw0s+gcK;NJ#|Sn0Rtx<}hO3QC0Z4mk}>rbw8f*$8uNr?b%?U zN`n%h$}7OF``8{}YP$ek(rFd*k>=zS&8eP|pG`;Wic33C7bJW3CXfc1me|ciTD75^ zzIzNHI0u7?COH})iAT@Y zXbx%B=Y{OKu6#CsH)n?Q{1fuM#s|dhPB+S8$LhCS^5iwTzS02yn~fLpw|fl<>ey32 zpLsMH)7}z*yirHxD}_e=^$ky2bD~m;ouoybefEP+@D(O zW;e)4stje=460Sz{G@VQ5-*5u*or#` zH3Vo&kBMH;c}}g7;nX3K2zVsntWd6k%vBXmrBBM=juf?EJbgu*wbfNGACScq({bP6 z?j7&Vae1uc#xr$PqKbb8gD-s)KDi6|UW^|%O;W>2{g*SrdIFFlTEC>q`?KBeW77=e zb9cGti<#3UP7jy!X5epzvYZQt%b+1{muFABFE`o*1fJ>7qp$6297%8nEHEW__g8QC zbK|mjzHjH{fSj!WiT=`ly62N)B7aM??_XZ;1KytQ-fA$6T21HpVy5o@22WBdZ{XjC zt-NNqjWYU*FP2`?1!R58aAVJSH|0sH)7~8q2>CiNiiuS}=8>q|ky#K%88IFtU~2%1 zP;reZNs@6g!aqYLY3f$SoRWnuMaXPTIW);)8cWKQ)d80^G4l9fLmj+R3u0(1kg3+z zEHC_n5nA?(&>*s2#sh&o22PAMdi7)D%}jh0K(0%W0{-s;Umtew2TorGe#Gi4Z>4B2ji~@;(!8K%bbC8nyqKa-qti z*m^~z+77#8X9#J~T^2wtQVTm^K7;tmYi6)c0&<4ff=QJq^oXzz1IupwQiK=hT!ku| zJV=U3N{U8@o)t7bdN{(cy(30#$8ytx_b;58V`JA`_r7V5r0pp>N}p*buYg_s^P1m5 z=i9-rn7LCqkaeY#TN8PlVY<9PdimfRAiP|FMmYSKYXaFROtOl7?Q%0n)UYenW}x^h zug&F`NoQ7^4w5yI5JcPHp54?pv8FHst~!Ex7mrMgO?$8{jS)c`F?nna=u_pXz5!>E zp%IC1JdvDspJ{Kifp$u^;O^BQDm_aU!{^dfpJm@)w;27lxI_3tg zaux$grTi>cm6RBlX+&GSYD8J4vJT2~i@`DOxze~U!75zF2o>~BA_S_kaEfJ5wP=EFI$EDlUIh@`C&!en4INvK5Q=Lh|_O?bd}aF zTasI!it-fJ`(kdW=wrU8u5}IpjbuW#nvWRu1}-}`Pt~%Hn&#Sp#gd&pE2!D-Z0&q- zm!6IHbj=N?`sZ~67@18J(4oqQZzc$#2vclPW|4qU_l(f~V=t?!4S}NC)ZR(eh?6yQ zZy|(w_)t7bCt&(L6)WY(svWd*ja@U z?#&uNLRP5u4>E%>gfX;>gnhX6xh$4uleY(~^yyCyptCJnD_~3{Dl&jxP$T8jM?5}| z5S|%~l}c@A#)47%%_JQ#j-}){0;Vy=sw1s9CgZdJ_5zF>kt!F>Ou7m-j&r$l^&*A^ zLB3F#eT3f>$&?uu;^ZNLT+xIVmb4h^XXp8cQ!Q;KPE##HlcYqn$nabtI{QxFhD<#A z&h)b^1C!b@`Kc2X`w19mz*qLz;Am0}5O%9!E0K;h0%jJ{X&ECMgTYa7Toz2m#klm} z%TX)IO|5@nPyI_fAfmwU50kYLCrrNrh!3pOO_5n>z5lEyu2mP8C^a5fb(v9z=_pAc zaEwoqflGRYn6xPex*jkU?JN9OV0x8_bVQAl4ZZV#0!~Zt$eW8O&0}EO+>tuFHSPxf zebKtJA2fvVk-whn@C2Wru){CV-HpSo{Mg{98P03R!$J8|J1f(=R#tku9@;9M8P)}m zIS4mZC0(hMzZn~Ucmpx{nGxRE?3Dt2>OW-eIxlV2zauEB5S&JuopSQw?g*aj zL(R$Z;|#rXa78@v=-LC=Wp|57CNu9$KZQykpKgtJ@7E(>N)1LtrZP-u)4aO^v}K1y z@Ds2axN0Ei8p$2`VU#@TTh5?22=_sbWcP_#-yS}|;k(j=_8=iz?8C+37lH?HRsDi8{Zi^#*2COc>71fbHU3_t_{oEy9;l1a3|E1I9~oA{V2F)Q<%&32 z2wo7~X4~a>?B}^pfOIFLTSQ>@%`(QToA%^b0dpB<7dDp1H5F5kfrsKkwKf_&PJe$) zn-2T6J8vxm$s=SNwFPy%IU*6tSHyV4zRVBjJvZYl_*+UHKpO?w7SJGDQKL$Y5|NNe zy_!dX(ak`|dXuFjL48|a^CES1Wq@5j>}|EzlWkiIwTvIeuar#e2Zv`o-WNy;?T6yX z$c3tLqE(U|Do~+eU!zKx8ttY=U0fTChz867nIX1^Wn1H`WHQq!5wl<{N!72O1gqsN z_9a=Y;oc9RZke^{2aT?mq;1~769yJ$-nt6GNR^_fG4Bvpjtxze1ocW8Sox|%b^HKT zzill>E&xpsT$5{Ij1r(vPVzU~Ts}~Jf0oai867{zLpu@ z->hV?{C6AKAa4VRj-xG#2&=B`Y?M6;)&w-*v=AezN3pXUIFQXNfKSU|S)xjQW|2ho z3Hnko(|MPcOOGhbA!=~?hc8HH>8cY8x*XGx5A z3evv{5uwe5YO9l;Rn*~M^zqqX1jZM+p1C%H8L9>0BMgdU-S5` zQnD=k8E#jKZ+KOZ;&It?8H^ab>w1M?O=fs`FO^jzC(ar6mrrvVMU(GVnyz1BO(=bM zE6y^1iVu6E>)HtYXxAC>i!S#sB*>^C) z`_py;gzzgRTm(*wn#e^3o}2n`xG&+!+C>vzQS9Di5TB@nR9h|E$<#>WBMU4{;)PNj zf~tG!6ilhxDE{%dI?x3tJI1bEq6bmke7NXkWQ*MeQ)VnhQgsI8UQG0pps`HF^)NEs z4oUBUI{OX65-_crdeXXNM;kx^@j=q#(DghuUV@;51j5O^?L)TXdA>pyZMZ1GIJbdTbz|Qdn6cixsgGXcRg$GVL$y zQC|Q}J)bMZ2G?p*;}_D|LFf5d66=%!-$fY_vGB&0 zc2_H;WJBJoq%U4$C*NLGKszDK+x8IC&siJRiq|X!`Tqj$!SP{=9U`$Q*=YyW4>0b& z&KHMU6wZLl>gp1ph`piNIn44kTY){rn+cuyb?NyrfDPR*l)71jHWGjedBw!!|59MU zMS_%7lqAjZYLY#|;(^>-bSE|1$4$A?-PPj721hFsZdGCkWCh-yXoa`Knq4mI-aC?8 z#yy*w+<=Sk-xILMIi(b1P&;O&X0$pTvFq-3)H4&$=*Q7iD^%3O@m2+=0YT4ZwEVc& z$Mqm-8^ZQQN|$#7Y$_!wM2$ZAn4i-p;$qGju4AYDBlN@tde_=N#S zhuxnO?9@PF$6|qitU7=TCPIU)^L!;jBE3LT8_35i*_vr(fTJRJRD;(BuQfl}53>Q84BZ zpuC8O1;n@ALYnD*fLd|9^TZD^?~t8A0-8@KPb<6$?Q@JeBsHoG{C+ zp#y&^9R^(b19l`0IBiY4$pg}eiy^|&sTbi|Qnwy2Q1;)aBB_CrTQxndc9uspLv3mqDGnl}3PC?BJt8(_aUP`Wx zA{oaJfkrm6H4E;Rkn2S;Qy6j#k@_-jqi6J~k2MMdyzFD98fefM($e>sFw>aegoYSW zShG>cGVcV`-)b1J=17=gF&wMN5*>wt1RHmOrJEXTe){ujj@;nP(2NZqQI?{`D*0U8 z#Uk5BD|k&IX`&2^Y=jy>`0vLOmT=+({6|91Q>f517Med#{6J8?DEGXphhbzUeUU7> z;8ErDaopw^Q1Ycw?%f0w-HH1z?J*oJU|q2^ zgfi4f7Y#8>Ch8kJk4$_Gd77 zCA8njQ|6NiD>O-dWEy{4q%!h~<%-+$CF;QOzO%HmD7sW{%MSG9s;JTfWzwEajC5hA zNaPerHC{wYL#AAeH>d=I!;b)UuCrlFo+d<3S&*ss-{Muo^`DFcVLMH@}}{{F%m`9H!qkYVKdC z@2dWbXi8Vtv^E-CVH^w&`|d6a1(@m=$S*XaZ8Oo(_08JHETl_4KGqsKgQ~$Y7%>C{ zsa}uD&x?(B1?OgG`!c-BT2lT0Y2LNC9!?WBk^r$J>`!ho50WT$V@TEk|${a@P2C z4wKS3zr;9fC~IrM84~8HKrP4#C&+I@WX;BZ2!CkmQh|72!^aM~tv<%krK=XfZR6W_ zJx1J+bl6~>MglEQ)P)C$A}sL+D5q%Np?HtA8lk7y@+qU^UXBMfiDP~@Er*pn{p6cX z|FPbzvu6FW<(E#}{;}SeM)32O$&t(n`Uz9NL8p3Rqte0>(OF2?HoB zzbHAEuvp`VC8u6>-H8u!g$dNE&7mIK{rU}Tjl z$O>zLU{j_my4#(`gWDzk^gsoQj%g+r6XrT#;({e_q-;xV^VZ!CSc_R{EvM_rPDN6O zkFxKSThS*salsKEY%AxrqEG!%!}p|rc52@)m`(JVPDmj~hK9DzZi;E{=%y22MB1gg zlRh^)@X^LrFuj^BT>MWU$jbq2p;(zz%fV;}^Xt;4`L|E^=!4t=4aDFm`k|W7S_ng; zO79q=ts};=NUVO;!B4SciYOtS$+=vVI~G`|*?e1Es>fKS%05Bdw;W^;`zH!L63C(W z&JrZZLK*a;?>w&B(rWF9A=&wvN=nm-BMSIbx29K|MBOjdb?)0Lz)rqBhpP+?C-_2 z04p`txH$K%B1QJ5d>*54bi&o)@Y>z|`}^vjb&^*B6=4<~w{5+%`#tYY`XT%e@SOAW zKB*S|dl58b5nz&I^z6hnqRr38j=E{J`)oDWaV%F+tQ$Q>q)?J661NKN>BRU3HcK`? zk;Vj{lzn(cuumU#o6_Z{TvqbMfx<2!Y-`!t8{#0nZLUu|aH2(f<`4x+K2-a@MT#LN ztG@8uYrYc38E-*MotO!*i*M!207G#36$?H7d{OR36*&p-` zMYh02K&xcM02NihKWj2zyyDHFy8Pq?Z}t_4kTHvuqoZ}6`%{>QemZ3AsW$Y~ zW)VWiysN;!1XKWCz>4Ucz6d(;peDk&Jw&V%xok;a!>eHza?8a?1u>*^(1P z4SMrM!D8Ls$l1G=APL6`Qo8ifh*;KGKwRGwr^pVo{|SBu!%YMFrZX9vlLFQLQC~!9 zYd5cckw*SQyThKb{|dVS^D%>ppzp81|d24fcODia*2sCrvc-{Q<<7{^Z(dJjY=w=iR{9t2m zv#jND|6=>&FaH(LxWhvWIzWx#_Y5#SnDQJ;`)HOd(Mf50|K-?QQF1f+?|eOEkWXUe zFCO%!%;dxI$;oa{suVcAY}qE-7#op#*h(i^@~c?N<%iCx=?Zpm)CHnRz4kr9rZWR5SUv5wXwbFV4tR-C=pNoko*~T=P?lVaH(lWz)fo?#lg~-oImB zrvD$`4x;U_whzVx<20oL1LHARJWG4{SY(G&V`qX(>8L(Ra(l;cvf+qk+G802p&h7y zLV#_310`bm?51Bt8|v0lx0Qqe8}`D6#1W3u(ze@GBor$zpFNA0*Q?m)k&H%R(eKyB zaa42-L4Cj}2R=GfEykWbx(+OT_PJ&+bd}ReJ}*}Hrr}?y&e#b3Jy-Df{{Q%K5N#V~ z62S*FOp$r7y9f?_Kb{KT^wu<*!DCIaCue&9Wu#FG@& z6DyL~+O0+DSBi~BicfxxS_>g+z&WkL4wY8_-2#}Iac_Ii=#+Ar94K;YCp)ErBXAn~v{Ytgm;cme zthI*P^4^ys1Pt}e1hw|-?+@^uYlSMoz%W*uX_;e`vH6AuMHmY@Oc`Nwbz5hjh1 zGGZLM{>GA$w>C&u!x$m0otB>LpD8(I9u`S@TLiNh=6qZfml?LoRUXQMH_*7-;~|(L z6I!FJkIaGh7cS%h1z^sKz2JRIve`tAh!^><6;&SlfSDz9*YcvXSfBB&pE}-gUJfI0 z%i^)oW}ek|BOy_rZ_L|F(37=IZ5fcEYWC>O zFMjoM{^dJ?{|$C4eE1uLP$ml0+nNYK9 z0~`Viyr>5UE87P@e1;A>M!MNBer8m=d_4OqzLUcx9?qg+B-FyG^e%gReoZ5KdbX3zQoOj zvJed_7PELW3YL*(7-lZiHA_S*<4zuT92%_MjZ!0V==*uRVHLD-ZMc-|%JZUB#;9+C zzW=DorT=4LQJwp_sVuH{-(Sc$Pg|lR?jp?rHaBK-3V0!9=dxUfCt=Yl-`&Mk*PZ6% zA_K#Dx_$l}hx5X6y66Z!mB8f_BYM1vG4LmV8eDCsvj1@fJOl%j!N!yo<-oyFadyB3 z2u};x)dTSjwYcwv`ghbJsj|CYfAA7#jQY5LB^Y$^`%99C3n!;N00nY+WU7Qw%$y(J`ChT6B{8tkgU5`DyB$abG4WQ3rSV@1RkTk zPR)T&_^bN?n7&X;pyKIc7bc56$B19z*Bg#9gyWZn&P42z4nN1`5w$g&7iQ)?Q4u*= z(lIv1S|?~{6=$oJOV_wPcpo2kMB|vWeHIKYptA%^EOteM{IT^}vqK(kc`>L=)7Skj zb${4T#vGebk^D-?#&XkQ*vgs?ZTjm6qDb(t!|H!7se4(d=b`3G1MrW4UeK@0P=yS? zB{7}vKR3FTzzu6gcBT!ge5tYw4D>2b9NU&iqgkn<kt{QCxXPU#f%*XgN!9S?{RB)++IjPAhUpAt8I28wKSWEk^r|nO@*o0cxRY`tKlb*wO zO5{d=snyUM^=~0jw#3PAN|f|z{3dsyN0cPClCsPkM?|NjmRMc5H!3$_Pi{)w=HEO5 z1Ag>IsTrs^*M^ye(R4xo=Yi|l2MSjKO)W2&h66!KJj5VZRc339Jn9z(m)oWoB^J(y zoKs&}YV3>IjJaazCQE&>PNf_3!(t~KT#OpjVANzH+hZx7^yIIClNO{~l`jo5S1@IW zL1c=1ej3Qc1^S#Jqb2mUk5<IKh~<38#AJPDu|*(pq-^T8<^NHFPT4^HJ&DW zR1^x1_h;=dW$w0o2~OO8gLJ)R;GIynUFJA&C~axe%AE}QTJooy>`f2};KI7YQEDKl zSUik$1VNqFbpX+g>-g!>68+H|dnWV72f0dhtQdk{u_a;E$|)#Cnw$7$JTgadLIy!} zkRN5@qyQBk62=WUZ#cwY+j#US>}Sm+OMu_R4e?x+WofNAtO%-F&Sou2A)rfl zXe4$aS%vw-cE+m%q0$N2qs+1y$$uGX>bcX_2%FnG1&tR7SX~h~u?UV`?o-L9okjl# zo#D5NH&5E4N=IBVqnZ8Fs$~bVcnoFy8N3=?c(`s*Sh$>JOA#sM?KI~R=Hm?{kc^xW zO@)(@6iQ&ivOXQd@dT>U!UR_#y-yv2YwLgMBIgn070@1p| z7)&cyI_i)v>?eEU4ePbyy!T1d{;Og~mu{0?}@@HK6pao?IH+{*~>e3?lhnjBuA2lUBk(jz<|MNk1yZfKs z=Wq2KNS;t$Q;GoPwC;DgD6bD8()`#;Sv3YhbxG_Tum3NVw>)iU1BF0f4CM>ISTpYsSwM z2NFjlk6ESc3`)@zm{BTB@%EBma=KmWl@CbDiOgtT$^Pi`_9pmUNr;>!v}AEP3cg9j z(w@^DN-ttD14k3p5I24k^FUmKZK43HUNJX?>JBtfT{fHXA4nS4afZ98CHc^%MDWFo zI3)yg4@EUKvHVTA1gZzZue76b7tdv;(j4(@=;ip>&>+nm`g1 zC>i%%ed6XNmIwloH|yk7rKb@rfEg_Dk}*|KQnA_Xu`sBWr&Jy9pKE$|doYOt<})ug zDu8g3CbzPeIE{J*SAK_2RVF35e3Drf8CQ~Qa`@6w8Phxb6@XgRq1uPKEv(RlK1C-w ziS$jy_>7*w{I?f?o&ZmaD3rtlN7M%QGt9Qk?W-rYX+VA_s=^_;03~ z{{Jx5|7BP%20KKDD}60-Aa*4Yss=@Xr(e8i+XFz=0)aK_eKJ6R)UBlT6p-Beh8u+6 zDUIOj`5g@xIhLrsz%(dB#P!XcAbG9)hL}l%0z5$J4H=z?7b*sedz)p?GVOi?SS@me z3UwcKNpL?h%>&)_cajTW2dxQx4M3iBpG;n0ROJ?8HBSb8;C`8_;ObV|ip~l2A35d@Qmm|uu z{|o_2`le-;a)43&#o1p0j@fKPf&PaW#;$qTH9C(HD=Q+J7sMIi9Y2|na1P3{N;s^ zT-dBQf3xUi@2-D+NyH;qL$iev{Qn_Vks|E!eh4jn_vo)rC{aSf%<{{%TrSWO`9D_D zooVH0gaaT z1`To$-^VNK^9buFOy+JbZZUXSIzdUQ4eak`{Y8+8{2`M>H=BKOY5detMIxER zor!B}0Zf8uUmINy6Z89PCIny+=uu4Ya4K*Y`H#yfJ zh)fjLK*gvLqBKxFr6SB6;U~e?Sf}dkn(J45Jw-8F@V!O+W!jXYbt^g8t&11uN8+`9 zi$wHEwH6iYO;K^MK}3DnP*iSb#r2h^UtRt6?HJt`1!glYl4gh*1yJc!}^0a*MX)58Q;MC1QqvO^?$AL?LM zggUlCWCfD^=ARYn;H5qJfq@C^3Z%*_zwsgzTi>Y=v0IStVu$}v+I0SroG16awhE2- zv!gT1|8&hPniALl=$Zv{qwA}(qbe^nZx~>vtwxv&H;7-f)aqaP%MJj__P^!8|NTAJ zNBjrF()^2I55)yweXZFBp6_Y35SE(gl!W}zHaf}$M*fqmH`uu}n@o)MPcSR$( zw9vAatVI*y`+7a98DON0h*a6POc~9V*GM=>CUw9-Oy{fjE5Jk<)zIQ$3BKAlXFXnt zpr0k^na@>)N+~5<^zh9qq+j`>8Et2!fsFfy{{W3no*px$Ugj3mizlsk^4s~g6||gL zT`yK8+fEb#AMu|I&V-OGV0FCQtMS`)c)cU!ydNvpD&EN5W?I(WS%n z-in2yf@*TM0_RwArDd641CD%f(qX7baUF{8&IE%_R{E?a&PP0XZaV{I+L8k$x|LKV zMu17^GFO+4C{S4E1>#Kb_#Xla$9C2B>sj-&znajuss0cZRuNJh(b-YCS*(K$)-#7c zi}uz11PsiOp)|-Vey&Ir$lDi$dr0!@tN4DD>pWhzktYw49ci%+WJF#(L?!eiqC|Um*(|7=KQkwsMC6C1C5{!{X6k zy)@HTG?C&jRPhq-p1*u`W`wl>-?Foggd|64h|3;zn{E=sk2VtfaZZ(y zAW?3{i}hd(EYGol1@Aiqe+7LqotG(Ft!e2h#*N-wL=d-}GR zMFPlzI59&UI-*Q6HYrZezeIy4?BbXE>G9mfV`cEt+1{ok{j$F^PGrmi@#fdlWMhs5 z)a;M0r~HTpsm7c2VqTLC=kLebm)O}FLHHYDW_&K6!O+c=RIYw#iyS0xeub?3Z=`1P z1*iK0pN}_HiR`dkWvBnM*Yu4CLjTY>6TIwFjNp`d$H+R9YjZ37;C&uQFt{ z-r9PI@Rj;2(jv*heFZFYpmlKiJuGui$0yT-7cUCPVxntsRbfKCfVSMd?&3$%Ic(Ta z-K!s6-}V(PJ1CAz7!?+5o43`FdiCgQwSKWAkGds)#lU_tB}B%_RhA<79K+5Zw(xFs zm=O_XL7N|zG{g++SBw7xG}Um{;Pw(5{%ga zaO9jj1Zgt%fyB$#o|ps{3D#Kxf4V5}M3s44D3_Q}|D46)czMz?VgH2E#|@%IIc@C{ z#!XQLaeA4TD?QlTptICSr~6C+QgnM;Ej^CAw~>eD#Q{O9vuR*Rf@<0I1Gu6$WN{?M zPn<-DJrTkPGggV^4TRnkbQ|flrw*#EbdrB0*0!|7yhaULP+)I5rHKGjHR4D7lyO&t zn3F#x){Z%{j9M!6DI?<|@;Fca@BAypJj)pMtFofRNPc33i&sRrxJ{~q+z2t24WjiU z-zh@8`h-67d^=aGccBCc9MG0)l*;X6VRtI&s_u4^lfgbjPSoYvo%jRKCjo z9{Vlo2O<1`R_`Y6#%A}EXMyr!?8Zj#7>#1!+BCC%SF-6JmSuU347iR8o&%|^S|1G2 zjn4(F+AlHgkTNt6VkbT)Ar z@)vKwHmHJ+!clxW2d~{N1s(UAI*d>;=^a~YG1?$_=YyDk?$zLu>z+&Q%Sdl=24!sE zCk%aE-_9Yf+)ZgtXQ+EoV10T!HO_6YK`33O0- z@#1x~R$ES|uqO1Z29`R?D=u7Rvjg>m00JcQsn1bTV9|K8ZFMTUx8XAU4~k0!H1l7| z5a94V&o^jW?^5F2q(Ly+pD%~+QrL~9{)P_E!J(daVZwt1-^(b!$A#5_9YYe9r?j6W zOj#JNHkN!Zg6LYurOSLWL2J#6av ziHY(fnl)ta&oAbm(?~hRxiB0bVmk@KS>WBtb8qhv#UT1$U)BR1q57_1X0|OtBtQFD=JhYXYi7}#M#=g2L(4wCwjEOP#Uj%Hm>`vea>SPtfkj2ov;M%OSo6Q4Ess0cFzWcgr%hK{pIqPv(1H z^W7k{Jtt*9>OdZcziZf9cl-Sg*_Z-HGhy=p)A4NFlwqjdD7j0H`*Yn#W!;yb7f}BE zp^faYgKWtL9m~SibdwS!OGrb|}1Pwl*|{I&Qw%jUx^t(rm%9t<=GV1{zDER`(k zuXL+O1QyVMKI?F zW!-^j9pBFmJfA|k7b*=dYzz|Cn~*Ecc?47whl|H(luSB6_jr1Q>)Dg^Ke#!3ch6_t zqc{u}%Tfk34b>~NSq4^xsc`0I4UXrbTVk=t-uM4b%?#GIGJTVF1JwkEF z+Iguw$>+-aHqwuO=YU*tbZ{n48tV}epW{Oe5N zLvTZ;_fUNSWVA{qEGTRgwqQSIfO!TU`W4;1L!e2bVU$44<$^ltNgJl?^U{ zjXEd<6Pm*xMO-M5oq~E1SqZHeT*XXw#;nHPki?(*0Gt}M5T@?4XZ`3jktZhD_Cjxb7pMUk9W@mU^@_9uNFq55Fwxz zNbl+~dx|DAWRrD^$6Iy_aqAjHs|AtG8^Ec2aHFjXHWzsy!}&U)-AiG>dh$eofB@Gm zllP4!Kv#)4z=-1j=0yYfK@V0hr=C%k_X0iO;KR>Pla*f6gX+G2+gz+^y`}Anzpnz# zb-TDfU)O}L-9hZ^NU>IY;aLux9XscUmlXPx9xVs%|2r%bH>`AYmwa}ZiQ#A?)$_@{ zVJDqN^r@~SZ!UESXUP<_jOkZ8=uh&z>hIa}_p)dnn^DzAvb+;;{K$Id9C+XenDT7< zZ0$C2@4+6Sw>!vLxuP!n4{O)2LfNMe3lwF7zILW2R;cIvM8QC(QK9`hC?JI&Lya<1rcTuIqsN2}JF zS$43>5kj>>e5rB60m)6FZgjF-zpet$!Lm6{+>hBQDpN>Vtg%7Ga@TAwclSaz(-5KQ z7msGS2Ka|h4EyY>46eM;I^0b&w+z_AEi(nT_y%x2KG~}ZKeTR${E_qblBtD_>*E(o zNMgkcg^10rT}1Y(SR4{xb?@ z1E(PqYkcYPQSyt=Cq8WfFq&KXfXH5IV4KOc7e>X#GvR&tZpyx{JAH%se_;@KI2Nztx|uOsX^-%Qnyj5`f-QPjY@61BUh<&S5mk1 zP@<}z5OKFVcKc_y#X1g3M!_Zy9Z&w>vaPivI(VN?o!Yw#&M&!QAGP1Ec;BjdyA*O? z&fXec%HQAzp;1M)L&P`IUjeh+_C7(I`8|2Q?X`b>+mwP;63V>wd_FpRJG}LYd)*;; zwG~Ncu;uRfmSNpC`P#jf=gBi^rh{1Cz(o)>6U4l-z2^BA@rLU7ybmQXdC3KKF<+^(_64`Ow!{=2Reww z+``Ut*Wa83(0w^*{mXANVPI7)9%G;cocV;V_p#Vbb&h)l$nlj}(d8vHscELZ#x!D( zOte0FhvWCxdOWwy$qauM5?%TgpJg7Do`6s64uS#6<0|f^Lm0kzpdJAX+U*p{JF2AoKANASfYpjJi zu|}3zN3j-RScKNR1L5AR?K)_o>n@tAAZv~ z!sHEJ*iNPOYAvt{hv`d+S`D|PXy*RJ!MrzPN}@5lejrl_P(bmRo12@WLtf0lKKY9l zcC5GB!lCw;m23DC1cEal#|~AQDfcv6wyH}}?JV)1q9hDhhduZ9;2?sHl27D$79Znq zHA((F#lcDUr9=uV(0rcedmxFQ)U>Uv5No(lb^u?PjT2X8Bt%oOQe=u6eyBUO$ySSG z%PXt+IIdr1ZvJ?~m$hiA5d^lrJ*_8gj#Q$nDLRJOR^a~KYbs$xqP)hlMgU>5{)=+# z2Lx`goNuQ+lp%wc7Y9g9n4mo}{6HAeTMy#GQWhVw_JN(^)ROz-e_;ilp?nUXj!vcu zqd)QAR$6s_9bWDcq~P#4Q>8b__%>;ZI)!v{AVdr?_tF4=(_#N^<>G>H%7QBJi+uE_%xwhRWEGNaF_e$pbmU2SB;&OtGOzwYg=U%N8cnGf zfO@gLhlnJiH@5-@OrBso;%ugax$==FxCga0GB6W&DmObqE@#X8G zSWpD#9f zv4T%#jU$GI^>k?sFxjh#p4O6({By7OMj&2CQ4DPIzJ6**pltbG=kH}5E9^HnS(ZR( z;7LuE3CCOM08MyIdE_)(n^fvbCjylywGV-*Ua057Q$ly$HhnntXa=twHvk$hg0w+b z=kK(HAovo^z$#lyZ&#%&6g7_xPOg@($0Oftku&XYZ-SMrx3oSLrfP~{3a#-gcv^C$f zG9}6P2p8}0=fR(s&~sfdw=C#-<)=}`+sFr&+u(}PifQz(`{WHb>307gdv6t1$F^;a z26uONcL?t8?ydoXLvWwCThL$ug1fr~4esvl?)uN{z4kf#tgP4jcHipbt65ZyQPoEu zt@YM=t}VMcZSlsDNplnQfg~4$$IMM8dD~3Ltx&l+FPuL!cxA0P4vFSa8LtEX2Ih=5 zTjh7Lr;<9lp}C-YJ3XvY%U>vX?z2QIb50ELUN@`9U{p1w_Gdw402Kic=sN9WUS5>O zX*B_ez(gT&y_VA2Y>aQ9(^t$oko_>KgaNOU|rha;mS82v|;rKpkH$6^%h3KAmEa?Qg~EtQ?Ba z;kCG_tLV$0ZzvgYZbYK3vJu{Az4gUq(?w7WH#@isr;bUwGTufg1IK|a-fO7IfPq^D z-Zy`pwi91A6bt~Cv|}VTZK04&kcRi{`gJUJKePaB!Y=8H(V4yIE`MhuthX`c(y2`6 zn!Y;)26G^by7mbavyZLhmNjhn(8&rTRpbv-lx}6LX-`EdD2dT5Y(bz-Huw)vq zLDnhlVst~@V0j?R}|p*7Ef0w z*@!ZqhRY2|DEAm!0>&T&>ovYEtzz>_z$w#@=YUN`T zF$XV=wxLZLOop#t6wAYDO3^BnDw{#I#T#ZHuyW_UU7i*)@OK7gj+aow3YD&xMPVy#rCx{8MUMM3VOOZkIU<5_*=VI^A`pqm7A@puOjyDIGEDrC&UrsbUW$Tams2!+Tkto(&7G_{o8fCuN+L`War;n*+Fd7Oqo- zu|-}M7oJXYPgeW`;i_EgYAY|c&yR%N)Cini`~Z773oVz4J5+pInLYn#~m z^ewDsxTI@h(!#zW8JYsNKK3jAeI0bi0^NipUKroe;cuH=>xaa#v6?^NO-@c(vH!dt zqn|v8(NdzmI%-=JfjA_69-<9T`Xa#UmLF&#VKQ5(n2;o6;u(SoxfL}N+8?O(dag!Q z)v8-8!Lg`MUe~B78G?FZr3fV^islDDKM%$Es|BU4;{GJO79l9?c5FVoeVu{+6FmyR zOj{*jSH+fb((FIA0Kx$#kAuC;B1Z@0IL6ItQFa?~{%|Fn%KlmTX-4c|oDA5s!LCsLX!PMbl@;jdYA*QDuz!xuM4PtNZJ1C6 zH7b6CJ#vna&2b}2JR~tYnl&mXA*{1u18jr{Mo{VM0v!1i6gHIhfYpMw$4d^^FRM@A za#>YT&uL2z5SrkIe~6m8S`%@j_`vq`PI=r0nk^6(Vn~*d$=dm2MoA+3?hr3;Gcc$8 z9Xt^57iua3UA~p>%zL`yHCV(!#4RDq!n)wVBZP=)s}b;Vk4pr%} zmK+tDf7ZZmy_zgTWG96&;mnbf-OXvG<%h45=3~%8;f6-PdNqJ#2@%pKa=h{(2Q>EYOpd1c=bU!xNC?VDOl?i2vp*b|DMLDEe$m++%z6tbVmWIi zDt!V0Ha8$)P+5%IE5jx(j&$gxVm4(-uQegla-6hvEm*@YZ8(7XNj&e+cdP(mt~vxG z4c3T@6ml4Qg*Ou!*VVq)%>pG^>&Bp9ruphWpjuZPEj*UMtM%SDseOG_wLH^qm-asd z?|%-mg^2ak0D!QZKsLg*@V?`XE`Ue|GL)a#t{{dx1ho|=UgN-YiU`9i`f8@Md}HTSpzk?k5bMc3dfmF* zRabtHwq&+sDdt6h{5E9$mZsVo%0fq}1_nmso5sMayil!ZzfM&?+X3j$uV?@&Z~oz6 zjLW*E$db~y`CTD>1^V+1Sdq%2`cFv^<@^zol5Kvfiiw+9J=Sr^2U~SA;@^M5F;$a- z4RnFH;?FXFhA8-|e;fNyr4%|#>#Top*_ADQ;qT5k5=s-{p=N}yj>|m4Q3BzT%mptm zl$3`bDjzYfE8_qTRWXV6GjAiiFM{JJ8Fd=TahUX~Nv$K`18t58L1P=kx}#0aigVWA zfz~cfG6yBKO+@roZJV$%{!T=G;w-ct_|@3w5+!I*kogbHqfOHa*loGUjZ7I~uYEcg ztcz-zyr4mdKUd(7$8>4j?bx?E;E~vi;|N+gNRb_XIT#dS(iMl-F7}vf=Ff}nPuUTT zp2;!2_$(n(x^59<65!6e*niB0*jPqcbTiud*y~Jxl%v_VOR)O|`4uv4KO0V66`K~dUKfpg+p5vW9q&TwUr4eQZ@R!3bn3t&mg^rKDlqGlDxb7^L+<;S? z57oGHdo+^qYeQp?O|H$2$}U$oR0Y6hn<5>0pBbX$I6Mm3;p)U7%}HimeVv@o_pL8R z;M(tRC6g~8=#u!E5dlo;r`vW+u0B8gOs+Yyg$_^$>daCK$Bn9#XmRicl0puc!hQ`| z>SN46d$C&X_Iq7Y{y6%gMq4G0bW@uA^~?;$5F7e}=U39^M|R>5HA6ipqBLi04qce- z%lMx>)0%osVH!Mla52O+HaU;DRS11)_1H)oQ_tU z-Y7MOrevS&pcBrQqdB%-O=yII-n6yx&ix%P1RzmXQI$xMo=M`P@LfLXw{lc*USIXM z(gI|`U=i*3;Ln??M-jz7R67OkJ+JX(eW^?qCVgU+4lZo2Qq_8k-2SkSQFjs%`o%hh zi35cPdxv!1vj~w^_HqJcu3vUaNMehLSgrWDW74i4L7!%fZSGR9Sv@#Ey1MiF21<`{^9MbP$(iP{{~GhBfI{;UH)o42+0*c?6`pw2lnQ!6T!q_vOffMoKJ&bgps{p4?bAIG77Q)U5 z@9O+s8de;O@F3+A`rERKcdzRPS%aG&ao6egYL;Dpntl!T-ys2SdVqfsss3p=p9!!U zXzoX=OPy;&?eZS&atZkp^w~v6U{G?mSmJ)QauAu6BKBnCA%}Xg***PxwPt8Y2SuT! z&KuW2eGJJNYHp_aX>@_jXV@aKd4z4;R8)>!hdlr9Np2H|NITjoa8z0OE{D}Dj;`~? z{#1~aAb>E23~b_W7Zpf!HxlPLVM?V1cTM+d!0BV{7L<<}Ju;!_sm1v}+2neF^U< zTW)rUb7xAB{!Mk`vdMe30l^Gel{3g4?k$BSR(1z^v;Sv_v6>IX>nC#xBg!@$q!P`| z`r+iF44EK1#B?RRSZ^G`sZGiFE_Q+T53dkzn%rc`G4)qymFMAK%*_^6Gmd+vj?OR7 zTF_==xOqoE^P#~-(Edm)^3scJ3BB)XOMsTi3;qNi-OOLDZ`Tcetk#JCK%!ut4bad&xkSQf6(j8C=21V zVt^Od$DK*q#!>KZqt@fDgP!+m)J*NVPmS1$tVu|a^I<)B+muis!T63n4Pg%IXYuYp zZoQq&9(@yy1r-GUDAnB&>R4vF8}x`d&buk&s`D@3z+|N3EAbi)S&W zD&BjO1Z)C9I}kx@(H$2<|HJv%;@3~vCWWWb!2xRUtazGM?3r`6H~>Od^wwi7dV(~! zl{02TDuu8*$XgK8X~7?}qz>O2liiS7?T<}O#v*5l1WP)^_Dy(+T2@Ka2E5x_mhXKJ z(Om@$EfqohC}hFo%kN;Jw^^KUzmCt^H1P$YT zKT^K5u0E#D7gTJ}yB6q}Fn@x*I=rgTMw#DK{cQUee17nfZI!jgMwt@BMtaaYICs@v zNh8@dQ~V_!PdKmf`oO?d=)Ug#DSLcCd{lwM;S<{*U=*EK6y7l()!v(CRdf>C@+-MNnM&iX)k+?ENv7(dy^eoXO&(~(NR0(&%)A7b1S8A8=f##JvB0TNy zxQq}ekU&3$7rHYC)eZl&+kr*U;!Bs+UtjtuKj~l&5sIh&n}=sx>HRD*gEEl^KGg+R zM``JS=%qW&?ad7rK}_x?O^&>(=hL8Vgj8sr-X3`1e#ZYjSp>S0AU}YY!&;+XWK7VC zn_5kmDb|)t2*0S#Gu54%P!1cR=X(l68K8M=v>zB@%L%ssw`0;{k%r zFB%{LDH1FM)h{77`vme+>r9n@pP}DY>7&rzxf*>lE4`%Emc{BSuY0?@yXqF0bRRbW zU;LaR?Y?{rb>2L>!d?DyGOjp-5ieHxZ4utS(qRSBqS~r5*oah7ar;T#qM{+s{N7Qo zmB1Fo6eEU>@^*O=e{`OzP-l&3*>?!-Tfg^7&e?t^c^@jLTG9x#?K+~m@c7_#a-80+ zeb7#MEP0#Siayz+${rq{LL52?il?ni;S{J8#}GU_>W@L|KV}5bNOti#H==N0;Fnc7 z=}?&{uTbZHww%SY?&thE4v=0P&I;7-UoFiV?EL3?>%#G%PvrSmuS2VPo632bE@r|_?p%7jhvERI?^E_ zYwGTh`x@B6WA`T`6T`KOo3@tm$KCP`#HE8(4ULgXC?v4^;!Y@j3l^l&RS9}~OojZ<)?)`8} zGhQ^~h}p`yugLY$tIP&$dp#~Wv5xw9Olqvzm37Of!g*aEYIyhf{`9$bhXT!JDB)ts z*FxDN*^|PMNlx4pyVQ4exMsM5q0&?X6H5d3socA69;5{tIH%ZfiFfu>-NdtaP6F)n#KwB}hoc4g1s%o3XFK-s?PkKc@Qw`vNL7 zMHEdgMh_@7=EIWRMyOdL`kOGyHQLJKqzOWK+}QJimY2 zt;ki9svHe>?LbxrVM`3O_0xe&6#4$Pd20dV6DmXT-T@ZSB5lTdwCogde;WD6QVyI* zf69xFTv!HZ>O`l8Fp|FrbAKHGMHzH7QcY*#S5FK5gZgV4I=D>^uV5FbOa2Ve^gv5D z%q<->17f}y+6-2vH?fSFyI3N@GnR!oOG+kd*GYmgvS0~1i+Y+IEr3%?`sDC8er4GW zF;BL^YQOn&#y?m2e{z=fNMAa8x@B1`i8p%-}Xj z+;(v(%ws2QKT^P>U@zyC)TKxHL2gg8;vuVI^JlB&4JxX?Sa8?{I3%%}4gBk|Pqrs| zFC_vwOdurTUq*N}1z^Iyj{O0x{aynBSg605Za7{G_CF%PzXU%QXzqq!$bN=x|5&_6 z3_t@1R$+mJ{Za4vFHnR?8rVYdzIENl%f`6Fne|wfgT4gp8Q6Jl|5?T#LO0HroZ92{}s+>tq@=2nQCRlahur zRhOwXrlB?F4D@IFQO9iFo22ry2#MkmW4HV2zTM(5TN9zG{uR_WKK_n6dOxn3#a5Wr zI@ebHHn{jNQj#Cad<}UF=2Yj<%vPvrulLTn@<>>G7(pr~c`x_xXL$jiY9*n)Ut8^3 zwL=6r_+kb~NiOgotZ0!u(-u!}GdV5zID3KbQf>o1Q3nUDHL%L#Dxu;5`8Rf@fT zQf(n?hu})b0y*BA%yLw224P`Oo7H9*XfC1FS?U5Zo}eXH0js%k=AG`#%Wr?BcpXH5 z%py|t&z!LCn*OG(nU(W+wXU2EreEwN8#x<QBTM>?C{4-Cn4fY+X@Q2=>lsiM!vyT@?iF_4++A>BZI3@QsM;a9@ zAB!hxDAsF|@U+#<3DIZ=19PXY+#tH|Stn-*a2uayoVg z(SA%E_jBJ=JjWU(Tx>)Ae0as0Iezxi5S+#Z*}yRSlho3BGt;6!hG}ibt9l4gq9ek( zIbwntev31JfGpz1f;P)}DC4#G{OCIq*v#8Ex99ZOqZ#}AMSMe@i&2Z4DL~K+nq#Mi zmDZ6QSFBcv9-gE?63+`WSei(Ff}jfV52{RXT_pDO7F5y$2Mkk|yo^8%=oqKrg;bd_ z+Ed`_LPvA_8P=pVHU4__ei+y>W2LZCw4EjMKc5=}V126^buMv2)_M0Sm6MRMwMQOD z@cR?Rdlb&p0tQ?$=a0qZP4$G_MlaV-wG?lz{v2(&JF6WAy33w(zlffHKw>= zx&6yk$U3(@FPVjZ);Jc9zmXbulV8|kKNd|Pzn0aEl_`t7r&JGQ*a;S_T5H70fx#AOlvU6*nO03{*jwExlMD*(qEq zCskfv;0cP3`IEt4JEX38@(W!G-)!RI3p}NWnw!jl)0rQFw0E%i-fo4(VUI#NPpmt^ z$@T?vqJg%x_-CxNhwi`PY|e*0?DZ?pAyeHNWF}LWJ|0h(ovv(Z>9ZsuI;y)=8G0l- zw&~?CW?8nKf7qq@0nUkM5{ytuDC$>Xf3?> z^qN<+_d92Ipf02j^JvaeMaq(eqK6Z|oZqBu=K=>&-_@8tc6JD{oE#{w2yl zMd89A*SxK1v#}WMN~jJR2i4sV~&M8 zm9v}Ap~pl(rc~GiO&ufJf7WAOy`2nB|62HKe(q-+k2?untT~54lzrJYwM(!vLHjJHnOqW%IQZzst=>p7LcA*tKQ zyT22~ZZ(K1UFdmw>F&0CsAVwll966Os{@KsdP#QQ|ATRR7`v&k!l+NpGI5Km=Q~+i zS%=3fgI^NH4z5oxE_dTzq=4eexMU}%!c6_yzS~0wPu_aZdmvM;nI-ke>lGb_nST?fuJI&}K?W1e3HFK2z!JGUy=oY#v7 zzh`7}3+?J`&22v+BGGag6?rY?^>VxS4AV3J`cQchP^f~Yj6JDvGB4&{7-Soy4#Ae1 z${~Hc2uGu3=^x?@nQ^(no;Fm1q3alwl=OKR6J(9g2g&LgjH_8frqbRp7M7d@HnMli z%7n?SMo(_|OQ#;G+m!875DBmllpmFgvvyh8`g-hL?onMc&bqEOT);Wnb(N5p*GG`( zZH-I&KC`1z;m+&D?*cnU)uSee$~)6cdeL6ONG-#Y-43SX za&??$m^nseAJ+J8uW?nfrT@x(FRaO{;50m)T(78;4~45urs{{Y>gf7)i7MZN`E4cn zYQb-~>(qog5r5%)KH+K~$2XaySu4nBqzFCkC@|#f)Qjx2Yg_q+%N!HdJ=Nn2-HjGb zQj*=lNoe7j$Q91{;{#s=9Y!7OBAuHPh8U5T&pNi4MUMbDrci`!5STJhJU}y*7JyZk zn09Np6SuNnQ**=O?Q=dVNd>OKtaNbGj#9Lt=Q{`M6kP?{{cdQX44O^UE}?KwH7^BA z*pVIUZNI>eUxC-OoPEpx_{}%7xO2X+39^ZByR>d4u5tZxc^aTOrW2eJbFZ(xX|4V) z!l5(CzH`n*u$?~3D}BZ8wtA>c*s-iw5pbIqo4rB5)la>`zW;V3BxCa0u)+I-otZ;a zH9efV{wGWw^Th>mXpnSld0*@Uo-}yEr=GI(eqy`&_nOXMHN9{iXp_H&A-i<`Gq6DY zjs^!ZEx}4^NVFPZUvIm4-jLCj^?zys_y}|!smfY61z~kh{bK=D$w>L)u+ zT415yOwL_6P)9L&gLq?CfR(!&aG@1{7NprNP|8ojk|F#x!%gRYuy&!19g4JxrV(dt z#uWVa{#wTl+evgX^JVTp3aqe$6H$YI-%e0VyW^~ij`zyPl2z*36_#Rpn~LBgk1 zm9b54B*715T41_HwgX?#uB6MA&ff?ICb$FYUPGCpcLYHKDUw>HKpkbEEAeJprLWrZ z7x$;19poh|4+^d*%_`ducw?Mtlf}j+Y5%Jw7-6Gl?8-4mT*V6woM>k7Sp`OK?#LSf z>zz8nhhB5C6#uNpVfF6uhc)P%=2q|h^HP1uXN$@gq80lIY3W26m>?Yo#$DCA@rXi* z(KT9oueWdPKc&WuA;cj~rw^%7_B%IHju)?e=Ik3gZ|7HB-jcK2Zll!w&-8?XC$SKE zsU!Rm3DuE?ShF~5Qj$Z+5$#w+{M;@?TR2)DOuEZZ?nJvk^u~O+ni|uJ{ZE3416a4T zKfMr5b>Wu`@aI#+9ttn47Y*3QJ2hbQDfl3w))B}cJ8`8S89M%>La>QTBG~;P)cVB9 zV6D=9U@1mV5vrAPcf@4Zts$pZ#?-De7hrl##ADvlxpqkRijQxWPc+NN+n_)0q2F>r=R0DT+5C)AB1KP%Qx%5V<4v8PeJB~-j1aE$Yx20a!`nKMOUS74@ zb(UYNju}8yU!~LKB`v=m9a<8{)WV(?{dCmx^nE|qM)hUub1a~CSz5}xzQ&+HCfP4X z=U@90W0U^ZND3tSH_aw~hnXmJ%Yv!0rbWV4zU~@^rPgrIG$bS_??nhl$L&atbZ>O1 zOUR_DU@=iYjgi0GXD!j7@lue_2aac3VT75?-L|sKR)Trmlvsrdis0Q9wvLcL{Bj|G z7OPiq{c$DUw^JjuxUmdQvncJh8tu{#IdUCNOo)60iW^I<7CDKvWL3moN^1K8kQDIX zh|c*KmUvg#+2WGq+ZFLy@c~tPBgUO=*ahfxH=anyXD`2n9>i+?WRdY0a+(Zdq+HfG zEDv`do#yBbzSw)u!DfBvW54>~*~xz8Y?3X*7Z3m&1hdBEO1e99-+y^@e(&SbX6OQ3 z$MVj4r1eb6>bX4M|Aw6nvvu@6pPdaK`5wQFBfIcn-f#(S5^>i0JCwZAE z4SJ4N_Fwz9zHYle>hIg{duZ;LgMy3p-FRzN_CSc4Ry|*O8W^5y==f%z5^JvsWIz)q zPg_BMn#J5Z%3WkA zc`w`-Dd%supIkpc=YFoJmmUe1cKtPMW3Tu5xf_9VTM+*4m^lcU497B6Ehs?Q~$ z|5B^wHcnkKS6#0BVl4#%rc2 zV!e~4XNWGOgkp_7k*pjph6!@44kfTyUhvTZK{QJA=~99W*hFYV;H7nVLCm*Wm+Cl1 zoG0tyCJyD^S9OMysh=~v{3)kaJ`W<&r@IL&VQgQX-yp(Jm zZ#C$?^|Z@vmDk%a^W^^KeM7c$R3*t3(=l$dbK;TGbAah#s|t*`V_}YA{f2+D#9>&!d|2`FOP`n&Bb?? zv-3QZ{sc<{vwHI>wayNsepO;l)Ga4gLDss74}Es%l)}Ne~ z27i$@K(5;;lD1=aW&P9C<6XP)o1AZ(;dSDRNx+k|X4ZTe6?bXoghdmU+vQe-p#wy- z1Yq_hz#1KUbH0;r-|yo13ub<*rNi>$-o?1_?Kg!^f&KZBvt}3Jyr$2d>%snhW1id9 zt9G-VwgXG9cpT5S;qwhrQI2&d1JBP}$pX&fLWSeYVY+V_UxAzI!kL8_A<#wDe2na~ zHK?$n+#ez4Gt{I%7Bn5I9mjrX{ii#CK&C&o|Ajjp=%dUsb9%+oFJ1QMW9tD8l=}mz zZRJWm+M>mqKBP!{k#M>LlO5b?uzM4*lg3ZSnMxT1RSmKv1Lg%#K z#l%V64dKfm6Dd_>fa0oHQ56bdM7^Kk+R63TFWowTm#b&X^yP4*{jWl(Ji^`w$x_ru z7Eae$QFL9n9qs#SBx@;9sF2CNI`d7a%Ji|_BY2meBrAGW~PB-BX0@)2iA?Orz+o^F$GNw8;X9L^0nLI_sq z>*NrB_n>1ecK?(21OCMu4Ah>ggzLkxW0|R}r&IkwPDNz>J`ys*|{NooUNB!|G~!oyRaLY>Owdd_MvdF@f=S_ z;qu{TCuaB3QLl9Nsbt38y(zSJD~*z5>gYGIK{sB0fap*4Klk?E2Zj+{l3}#ON|p$? zA&YGxWb&~YKOsOo`bKRn2ukk=bsjBb=vE}wcEFW2&q!`&H8?SH5E-9lH zq5pwf!za7wKoR;b7f+W0|LM-&P9zxpY$A(r;5Pk}#{`>`l??=q%QY}UC!IOOc_ z@bRy$>dCW29b7<~VC47T(#_%uji?X}Qy~50Slv_n=6sUWhV6XX3Z>(fj^jUbmo3Pj z!#D*T53k-*Wg26zZoYJ5qye20wX>Zf6m<|>|Dm_*DKt=O2^zyj#6A@Xx8RSRp3__d zUFnc8xQ{lczCw*@ay%v@sWL2 z{FOV>aebsEOev?OSiVkf2CmLTAbwGT=t(I&}*Bll3 zsT5P+zr=b z@~_9eim!{*PHq4FCH!@KAp#U!wjtw}{__Q)0NK2tgI>tS>HqLsU=@Uve{O_g(0Ii^ zFoXW!0YIh;8g-NXALb~oiwYGe)kNE@{gX!rh8_ShNCa(wnEOAwLxcmb`ylpk@*nc% z|4b0^?^_~9G5C8W)W3LeZ&KiO1yBT9|2JI!E71Kr(m(@miBu|R{{Mf}|F32hNV08_ zCRM6k6-P!2#YaYZKX*h&2|c}0=vc0=AJ-JZooiYQaf3550u#7FryaV}Asp)+SCU8y z_Awor!<&xi)}Hb=Z7L_Gkk$NbcEY=V2y}bkuE21~3=2V4JueDGu_R3{U!&R+et(O% zF4G@z1BH40<_O&@5hydr0-59*!PToJRV zYSW~6j>g9t{Z=%uI`W*}!9Ksmyd)X8KmcIQ#G|$^4-eH5s{d>`(1k^Lq3dSDP1a7Z z8gomDyu36ZxriW=pQ{!&!rKVki)GK0>ov+8!0cdfe)T@yT)E1L4x$uk&%-#MKO+?V z(&k6coV!o{g+jo%4bRD@Moo#+yRN*j&+?8K0j}V>Pu%@+BgR7oA z9nI_jDWfla+!Nyoo*^s7RFE9LbZ^AR^2lphm3tKp^fsOd8w=SRnvXswwL{M{uig7R zlya)Kq#Le14JP{SSp%FSyVzn7re9h`I|+D9aU`;obrOA5)U{Gre#l(tkNe z3}0^d_1Yi|4X5{{8xuwEn(Hzof8B0GqZ3kKVIDbNvNJt7zOZO=Z!1l!GF0NMOwb_D zJvLsAM_-u6RQ~CGu-e}Gld=??<8i1BmsbU~{Q#DSd7Ix(NpE2+RMpRu6nC*gUBnLE z$BjCSwdIXevXaz_Jq(r{$6QBY_7?4de>YsID3wn=eZH~UZ5L|9TirE z0|+A5Y@Hxb*g~skAS6waWPJ-;T|OjFQol4G81H2| zW)`Hh>o8)#oR8q8wPYsL$x#65UKjJJU0L7HaN!vkV*YXuyO$}6sZL17i zr3`~UaHr_umVL&&M4jP8@ayc7U`S)L$PEhrPe#bnz{#)!8x{L8R{oH554>KR;J;@T z9jGAX>L7}c*4L=5+EMTk55M&6xL2|BZ4`dteaX{O7fl6d=^CC~K67%e**X~UEUZK* zh+EWX^{ZDVo@ebwu}y@zc!((gF3@5Ub0@s0r92*3E}EwN8AO}G3-M5X0q%p%eafP7 zo%>FU*rwBpruC9=)zPoj=C>d-sgr=Ue5?DAr0aIX$iW}!n+Xa(>1E<4Rgn1^&w>!Y9+|HWZTX?^px| z!i7C{-JB6_ZT=a#@o9^6&+eM`CPD362bfRjtLeJIkpK{i>{eAq?sdm7n?D!k4SARs z$b?|b6^tV(WNzw9agepO{p%%Ua?PV|(>~*Ja2UH5f?KMi z!%I6Z#h&K9VMuS_a6k^!%i?QhHiuzXRP6lR780hMEj8y5HPhE${ayMuPI&zzh9^D> zBs0ErIiB{TjAKR)Nz>c}S#X93Is$R#!;=h(%3`m!wl?wMEaaR4NsNsP z%odD)>)(`8xGJbXqay(8hT^bxGI)^C;T92vh2G*X8V3}SMx%N}nBhr^a%ibPTMbM| zzV|5yoWqX~9iiAU3}D7J$faja@@N#@A(N|H2eqZtjI@p=M*o?LxC8O=mrp;X`$Q5c z$rsFKdegrwR#>$4?eH1cs3C)bTUbxu>LF8;-+`j8%*2c_v+U0vm7>#uo@RS|hGMK< z<>ZSwuTZ~{tWUyQjv;KQ?HJJ%W3ooWMKkD@Re82|Mn{+d?UqxcM5GDX#xUmPBx$aW z>2q#i5X z%*;0{;eddZZ;PlyuBV45GFMT5|2m{LsK|+d62-WXv%0)Re2(xMiZv~^X{OrO<^HZj z@qCehbe>I;s!N7DKGp!COVbpGO!vH3#jX1HY9}v`3Wx|!NjUkamp-wdY54r)%=;s2 zrFp~#+lGc`QG^aI<@a}w-gC^k)!1^9dy>n%so}_kAss}_|(jAKQj+(o}f=A2Fk`n#|*kn$${8VxXp0aWG<7 zA30J~XakZiGXhEe7KrxLe>C$boPRZ`_V$KNOO%?1RFCrHP>;pFzCJ^-UV8b5^aKND z0YwN@RMtv0Y}6Ta`GZaPJvu#T->Iw?&PUkeu~`LNVn>SfJh{rHF-7FJk8MkvGgz{8 z8=^n)(p5c?ccI-Z{HkOpnYeKKMC4?RWKb5z_SvRCrdUlEW!brQcBTx{-03>1bm0&( zt|RexZsL1(ENdQ=-iV4)-Rx2#lF zshEPbVRQ=5FRgbpA(akuo+~hg{*rs4YZ0k5a$Em67hTK$$4(0{PVu4fTd`9f$bN#= zQaRH6R;%%g<*AT(sR>`!(j3u1fARfASQ-vvl$KDf2_DT2r0p=ves!|Qm6(n(F0?F8 z!oGAsS+COz%sJj3{v50hTQ3bU@A0EB7M=plW6%=>pN(g`TJ9&_5ewGz@UUT};iSOE zxtuRCWZT{JhW7wd*hp%SNBk`tI)nzktS{{^r9D#Y(31$8K;Im4oF^^eT+ zrJh-0p}iP49Hzl7@lfUc{t>{~!kI~ZLRr%Oyv1l&)R|_g3FSg3R)H)}zFGdkm^Zp9 z9|3ed?l$If!n)E9Wfk<4bV+>NKF#Szt+*Q(lNw&RdMzU<%;ot4wTY|BClIzsk%GkZ zBl;p5GugB-9lE4awPd%7>@cuA5wL8k!YXr{;IXQ)p0}T}11#dOGG) zXRCAH=H^R(?S$!VH*JPdhpfy})*uHGS@DCOzYUXZJVEu-{W)(;lEf>TeQ(U-xjCy0 zPXrC^hj_xNI#9XzOd7V|e2#6hxbGl*U8R@p4gjz?* zvf`iBY4ePAb;UUG?Ae_|6Q)0tdcu;X3-n4f>Llk3z^dis$*3=l-{lqKt-QiWd|2FV zvY6Oro;o*4kFVh1Xe9kz$5--YJA#n7^yld&qS3qAspr_jc&!S@^`Ckiw!KXc?uX2APe-F|ydO){Crn3pv1t^Ko6pgAWVNry1x+Ed7!I3@89E$J3 zhOD`?$sx6niNXw%T!TLyc5on3>e4Z<6J z0TFRW{Jy&J(BfvCbRSJ?G(A#CuXJ&d|#@$LWdb^U(I-`j_tb6{<5B}YLl5t28H z+EQ?*{QH$)R>x*`jn8}GZ;z+9c|WhO{1k{8GS>I+mzD3&=bi5Zez1aX7XyN?x>uF& z^Yg2|rj}IeZ%9!ag73$j_g@qXq)z?bd*%d-MeA=;-(R!eJ6^BZsPLAII#%CIukM#S zUpn^zaJI+X;aXLKl<&Ugot~4x)BN7sXofQbWS~;!YB&5|rn3|LUdIJHaRNobl3m^k zPrsZ`?K`X{&Ay}iJ-iyeJH2pBiXyy;p6YDk{2hz;{*WBP9c^|~zB6OAqRbRf}bh&yr3vR@{+Gs!v;bV9=`BxyTL&!Ld(u=KKX@Qpn zw8$ZZ20zxA$G}=Mxga+wA%b>sO3ofO<3N+HRA0A6rh2@K-Rj?V3nmj?{O|!aNLox- z4NcmiPg@Dv&B@J~?`z9vJ~ce6Lmm+E*;f?LXU|veAZYQ^rP{rFD$lZAE&39^Gr<^) z)!n`+W%Wj|p%az+v5hA%fU_#rIHGIqd_pGieUc2;_A9R+j62C9yyv~+rO)wrb)}HG zl8WfGOA)S)3~ICq%9wLGa_45SlLSwKM))E2B>;&C+p00!w%&>T)bHLwc<=83x)3xF zH&UxviNnr)_Bt2)m^)W$ac(9`9ZKHqSKRq&@z*{oOnsth$s7dxjo4+}1<~Z9UE^o; zQs~|-n(qm}H|vz3`nHXyXY#bJjkaR(&^j)79N4S9QF{p4iIXOLcpx4q#)MYE^< zc$(Y!)6@+8*>?K*mnHQiqj(5Tc-#!OYOX z$EzwSRYyTV?5JC%KT-zbOx79FYD7s(IANA}2 z0>C+ANtZ@*d>VTzFX0tz zofcGRs9Kd6xuIlJlA4p_)<7JTGnjqmh|l!|%>>-Pa$}T(F_BGnJbCq<(`$wESZ`ta zTwUD%5Ya(Fd%Gz^xIP?jCb{XR%k1VX`;*12w&o=mb?SE(m(F$FZ>>%#9jv%>9$_BU z&wmheZ6g%!*{u5hJRDTc6ombJxQ6aNTU5|U7JCZ`PJ}kw(YgN7-fWt&1*!a`ZcU&3 zi}q|=#Ut*_^ULGK5Qmk+C)ieolEzxq{R6t?19o$$QxpYu2{Ha=hDaiFq7j_ z*wBrnJz?-%4TWw&uyU;S*OyW*57n1d6gGoP7g&4QR|hY-IXjbY2u>Sy-m>2OgtfpB z`5NjonDsGhcsFPJdpY|z1&M?G=_Xg+W(NqyM;TrD=da<-6_~Zs)VN(Zl9kBIB`fH7 z<36E~Rc}gp1*P*FU!qY)d6vyq+4}1Xkx=myu)mIk>Ua7?YSdrgLW5hkZ|Rsr2?tM; zS;9vL7C;fA1X4E^*)V1!KZ4?NA#(q}GOjxs4rPsRT%8p?TJ#b^1hGnFt!0V0h-G6% z3#+WQ%OXUJ7G^fU1L^LlDMob%TQO_w#_aE6LW>UoYQ za!Ol0CjwnfQ&CNE3>t8zy&j#G8OKO*$wi^zAZRkP6LltZDxIf~O@|>>nTmU&r(M59 z<7PK8rTHti-B}~4i?mi6&lf_byU7o(=9JV_mjsO+gDuu+<()w_CwI`PthT2%&Hm$m zS~fCj{|rWy&lAzz6y>27J4sdMe zjFUXcX*7(9$ATq{_RTktH~j{{yj3vaB%fQRk2ZTtLgE8k`+gyEJc^0oYfN9pW=7l= zMT*kU%r`5e-1ihXC>uS(VDnn2aA_ z?`n451gCt(<(X`ib(XywAE$!s2Y9)%dB(B28&0+-+a;%FBOeaXy@2 zHjfcDxuL}~JN#+fi8p-YvBxuC-u}Mz*v&c1mgtFn{C&ZpmPSMa7gvGJ*{52Y?LE;R zffstmBeEGGM-UAY*$?r7K&rC*Z!r>tA>Nm-c9Kh1Ngy2?RcY`Jc0fqW#4VBL3$f4} z>E#i_O3ke_<6I{HeO@j#2P+4yJ4c7Q?IOHg2IH93lh-PSj+%mk*YZR>!Z5i3%8wb%3#6zu)J?Ny^ePKu;li_WUTOr7^ch@ zczDNtVgn4G1};7M#Vl&WOCW;U4<%)I$>J9M7@#sX9QL52KVOGC7Cq z4kpLCd`u374=8edQizBn3CFQ!Tt-N7zG;Da-;8X}Zyv5pnE45C^2*e1qG$&man64e ztkJt$!AzYGq`d8c$vm0GCOo@V*XIzJQJG!W84I-o@2pg!JyRNWc=mg&JVc^biC;&o zObe@mGm&!eJ0-Ir=;FI2kb%*=MpS$@BiD!{GFB?K=UM;%>ZS{DG3rRH-A#Y&dqXLO^!*UuP zC5$1LqUd%a;-nrZ1LQj1Sa0>lO?hwUHOoi78k*my=BcBqcevN%H_r|?urp$&Ee7&* zGx^2t>~OOfmZ}6UTURBc*}ap1G6;sE4Xi_0m?NTqUJtJPz+dnywxL_|1} z$8NUw+TNwFM|sE1c4oG(r=?kCESdP}R0joMgE{IRki`MSA+BU3*r?a<>A}e_ghP__ zML02v^r=@@`Ahg}h!P-b&SA*UI8MKHt;|*meB+A>MsWjhnJYk}Oov$@YOl?0fc~*m zmB@6v(UX*y(q*}y0jDr`Hei$jIGg8+EGzdd6j6#8{6)U`QGgxXmaQ}+-T z$YS}U1C1+O7b6_&+)pxITy)vg7duj}4r)k_c%7kyxi+eM?{NIWqtU5W*-?~Yz#|>6 z)PM!wb0-8s!4!g(d6Sm5`^IN!36f~K8Ff12dKkdNiAmoz5LKqKfc4>9mj6t?e|S`t zOGhFW(n=+foam8KJ3<&m)c27mS|@FFYN@@QUz}@`fP~{9^P%481+SfDj6Jc_wJ}}G z=H!(HBV3vr)X@hH%Jv-!(jQI>R5|0i~Xt6F?>Zrg6;Ce+e8HMZl?couUjOs7Qo zTd5JBbEiZ95o>SE9G#G+vw_0r?+77pipd~!xog&|=}k}gJB03q%!9AxZy~cQxYtBm zT`7aioKhbTPdV*qsU2-i*jV?t)(_%-ggALN*+yp|XXLI}d~d3ihw=VuusNmcYL5(Y#6~=4K?Ta|(G_=j zQQ{|hg2P7ZO?2w`$3DZgz}lh&Q^#TVZ^?=Et}J)o5~oy&bAfZ~HY`J$K2Uo4y$j4I zn>y+t^~c5>kS>jI_E7rvg8qmFux$UkjYxuyp8AWi&hDYS2hUYR>MXIW-6OU_tXI3N zb8S7^b_*wAa5vSHY_C67o}X?AIbLDDwQlEtVT=3lCx0m2R$dt4il*gJ64FX!dAIJo z;}C+?`sFv&TjXpr zI>R{c6*o~cZLUF->ZR68f92P{J39iKuiMXJvW%vh)?}d89Z$d52CPsD??2p9xfC6d z5!Lg)NCnIR9fH3ZfHE7h;hGcxgWRNY(YHWGLq{PbUj1#cf%n;i@+zW`s1^mqM~=bR z;;>45`)l^g&e8Fcp$C-aem_Hy2HUIWHKsWqF6mWQ@3|e@RC>1b{>YyABuVa~r`9Km zE$ky1f_oO=)OZ#r#jPxh3Y|2-VJDUK%aCwO5MO%uB2^#)sYp15WrJMVl8t>5jk9vj z-G!opl&!Tz6uXfh+iZzUkt{eJ(dv$Ig6E{^c1Up{;41r0lS0DDU#(q`=qw8C<^dz~ z184U_Qke6Wl`ZK*V@sn@W#nc$x8G5`o;SI-Z>efE-oNYp zQMp6E0gKdIMgE$jsr$HHiUl2C4B53ubSAWG1$c6-se!GI4e$w z{c(WxTg|^R@*FXFAAIS zaIYiCUKNrY#GiHw(0u2~z^*;gh=A<_B|qJq7<~LWm z>tDgTx-1siy~L&;6vDJte!#=7d!oWia%RLQdJQ#YdsofsfP#&iAQh8L7dZ%d2dDo&Dc3n*UqrC;*WGtdApPHp)`POm_vRqIwt+HHSkufo$c zSM>rNhbL&reEFI+fz;cN4(^xnP3KpeO0a6J9Es36vJ*D=Y~?DxAvuu%7~WnLJ8ZxC zKf0k6+`a}Wg7zAMe{8i>`LNu=kGT^M-0QeFz`#$8WqUTQ$!@vEEO;F&?3z8#z+J!o z$uamJg%ulqOMmCq%$z~X?GGY zI0y*REp7lY_^1)oxu-}D*GMNn&H`BPW!pZFy^`!zH|6{@V#+xyJ(<_y`pl|LV)i?C zWuRy|PWbThvqV&+zv`(d{!g9IoDb~TB8O!Xp5 zP`#UsOS`dbmXdCg&&_73(DdfFM~J*#T3OPTHmHZf|1pSvOoKb*`S9>?-!<^>)&I14 z(*=~2ppIaG3zW=|-?ANwaH$>fb&cODfA$F>QPLttv<*N0*X;gXO1LCwlBi^J@i(Ra zn#qVbq$nTcr>gybV-Wy(cmkdOInm6JT+jt5NA2LS-2aU=PeqHE*B=l2U$g&5ek~pI mo1)kkaV) Date: Sun, 12 Jan 2020 11:50:01 +0800 Subject: [PATCH 06/16] =?UTF-8?q?:see=5Fno=5Fevil:=20=E6=9B=B4=E6=96=B0=20?= =?UTF-8?q?.gitignore=20=E6=96=87=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitignore | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index eba0c2ba6..75ba006c4 100644 --- a/.gitignore +++ b/.gitignore @@ -1,7 +1,7 @@ # Created by .ignore support plugin (hsz.mobi) ### xkcoding-后端 template ### Spring Boot ### -/target/ +target/ !.mvn/wrapper/maven-wrapper.jar ### STS ### @@ -37,4 +37,4 @@ logs/ .DS_Store ### VS CODE ### -.vscode/ \ No newline at end of file +.vscode/ From 7abae61f049d1ecfa3fdad796cc535173f7f2a92 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Sun, 19 Jan 2020 10:01:16 +0800 Subject: [PATCH 07/16] =?UTF-8?q?:bug:=20=E4=BF=AE=E5=A4=8D=20[BUG#96](htt?= =?UTF-8?q?ps://github.com/xkcoding/spring-boot-demo/issues/96)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit moment.js 格式化问题 --- .../src/main/resources/static/index.html | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/spring-boot-demo-websocket-socketio/src/main/resources/static/index.html b/spring-boot-demo-websocket-socketio/src/main/resources/static/index.html index 1e6db315a..a2d449280 100644 --- a/spring-boot-demo-websocket-socketio/src/main/resources/static/index.html +++ b/spring-boot-demo-websocket-socketio/src/main/resources/static/index.html @@ -84,7 +84,7 @@ function sendBroadcast() { axios.post('/demo/send/broadcast', { - message: '系统广播通知: 当前时间 ' + moment().format('YYYY-MM-dd HH:mm:ss.SSS') + message: '系统广播通知: 当前时间 ' + moment().format('YYYY-MM-DD HH:mm:ss.SSS') }).then((response) => { const {flag, message} = response.data; if (flag) { @@ -156,7 +156,7 @@ } function output(message) { - let currentTime = "" + moment().format('YYYY-MM-dd HH:mm:ss.SSS') + ""; + let currentTime = "" + moment().format('YYYY-MM-DD HH:mm:ss.SSS') + ""; let element = $("
" + currentTime + " " + message + "
"); $('#console').prepend(element); } @@ -179,4 +179,4 @@

spring-boot-demo-websocket-socketio

- \ No newline at end of file + From 86fb3db7ef763dde9f2ea071b97856a0fc33fc1e Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Sun, 19 Jan 2020 10:38:43 +0800 Subject: [PATCH 08/16] =?UTF-8?q?:sparkles:=20spring-boot-demo-https=20?= =?UTF-8?q?=E5=AE=8C=E6=88=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../.mvn/wrapper/MavenWrapperDownloader.java | 118 ------------------ .../.mvn/wrapper/maven-wrapper.jar | Bin 50710 -> 0 bytes .../.mvn/wrapper/maven-wrapper.properties | 2 - spring-boot-demo-https/README.md | 86 +++++++++---- spring-boot-demo-https/pom.xml | 12 -- .../https/SpringBootDemoHttpsApplication.java | 21 ++++ .../config/HttpsConfig.java} | 44 +++---- .../src/main/resources/application.yml | 3 +- .../SpringBootDemoHttpsApplicationTests.java | 2 +- 9 files changed, 103 insertions(+), 185 deletions(-) delete mode 100644 spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java delete mode 100644 spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar delete mode 100644 spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties create mode 100644 spring-boot-demo-https/src/main/java/com/xkcoding/https/SpringBootDemoHttpsApplication.java rename spring-boot-demo-https/src/main/java/com/xkcoding/{springbootdemohttps/SpringBootDemoHttpsApplication.java => https/config/HttpsConfig.java} (52%) rename spring-boot-demo-https/src/test/java/com/xkcoding/{springbootdemohttps => https}/SpringBootDemoHttpsApplicationTests.java (82%) diff --git a/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java b/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java deleted file mode 100644 index f6e782ce1..000000000 --- a/spring-boot-demo-https/.mvn/wrapper/MavenWrapperDownloader.java +++ /dev/null @@ -1,118 +0,0 @@ -/* - * Copyright 2007-present the original author or authors. - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * https://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ - -import java.net.*; -import java.io.*; -import java.nio.channels.*; -import java.util.Properties; - -public class MavenWrapperDownloader { - - private static final String WRAPPER_VERSION = "0.5.6"; - /** - * Default URL to download the maven-wrapper.jar from, if no 'downloadUrl' is provided. - */ - private static final String DEFAULT_DOWNLOAD_URL = "https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/" - + WRAPPER_VERSION + "/maven-wrapper-" + WRAPPER_VERSION + ".jar"; - - /** - * Path to the maven-wrapper.properties file, which might contain a downloadUrl property to - * use instead of the default one. - */ - private static final String MAVEN_WRAPPER_PROPERTIES_PATH = - ".mvn/wrapper/maven-wrapper.properties"; - - /** - * Path where the maven-wrapper.jar will be saved to. - */ - private static final String MAVEN_WRAPPER_JAR_PATH = - ".mvn/wrapper/maven-wrapper.jar"; - - /** - * Name of the property which should be used to override the default download url for the wrapper. - */ - private static final String PROPERTY_NAME_WRAPPER_URL = "wrapperUrl"; - - public static void main(String args[]) { - System.out.println("- Downloader started"); - File baseDirectory = new File(args[0]); - System.out.println("- Using base directory: " + baseDirectory.getAbsolutePath()); - - // If the maven-wrapper.properties exists, read it and check if it contains a custom - // wrapperUrl parameter. - File mavenWrapperPropertyFile = new File(baseDirectory, MAVEN_WRAPPER_PROPERTIES_PATH); - String url = DEFAULT_DOWNLOAD_URL; - if (mavenWrapperPropertyFile.exists()) { - FileInputStream mavenWrapperPropertyFileInputStream = null; - try { - mavenWrapperPropertyFileInputStream = new FileInputStream(mavenWrapperPropertyFile); - Properties mavenWrapperProperties = new Properties(); - mavenWrapperProperties.load(mavenWrapperPropertyFileInputStream); - url = mavenWrapperProperties.getProperty(PROPERTY_NAME_WRAPPER_URL, url); - } catch (IOException e) { - System.out.println("- ERROR loading '" + MAVEN_WRAPPER_PROPERTIES_PATH + "'"); - } finally { - try { - if (mavenWrapperPropertyFileInputStream != null) { - mavenWrapperPropertyFileInputStream.close(); - } - } catch (IOException e) { - // Ignore ... - } - } - } - System.out.println("- Downloading from: " + url); - - File outputFile = new File(baseDirectory.getAbsolutePath(), MAVEN_WRAPPER_JAR_PATH); - if (!outputFile.getParentFile().exists()) { - if (!outputFile.getParentFile().mkdirs()) { - System.out.println( - "- ERROR creating output directory '" + outputFile.getParentFile().getAbsolutePath() + "'"); - } - } - System.out.println("- Downloading to: " + outputFile.getAbsolutePath()); - try { - downloadFileFromURL(url, outputFile); - System.out.println("Done"); - System.exit(0); - } catch (Throwable e) { - System.out.println("- Error downloading"); - e.printStackTrace(); - System.exit(1); - } - } - - private static void downloadFileFromURL(String urlString, File destination) throws Exception { - if (System.getenv("MVNW_USERNAME") != null && System.getenv("MVNW_PASSWORD") != null) { - String username = System.getenv("MVNW_USERNAME"); - char[] password = System.getenv("MVNW_PASSWORD").toCharArray(); - Authenticator.setDefault(new Authenticator() { - @Override - protected PasswordAuthentication getPasswordAuthentication() { - return new PasswordAuthentication(username, password); - } - }); - } - URL website = new URL(urlString); - ReadableByteChannel rbc; - rbc = Channels.newChannel(website.openStream()); - FileOutputStream fos = new FileOutputStream(destination); - fos.getChannel().transferFrom(rbc, 0, Long.MAX_VALUE); - fos.close(); - rbc.close(); - } - -} diff --git a/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar b/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.jar deleted file mode 100644 index 2cc7d4a55c0cd0092912bf49ae38b3a9e3fd0054..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 50710 zcmbTd1CVCTmM+|7+wQV$+qP}n>auOywyU~q+qUhh+uxis_~*a##hm*_WW?9E7Pb7N%LRFiwbEGCJ0XP=%-6oeT$XZcYgtzC2~q zk(K08IQL8oTl}>>+hE5YRgXTB@fZ4TH9>7=79e`%%tw*SQUa9~$xKD5rS!;ZG@ocK zQdcH}JX?W|0_Afv?y`-NgLum62B&WSD$-w;O6G0Sm;SMX65z)l%m1e-g8Q$QTI;(Q z+x$xth4KFvH@Bs6(zn!iF#nenk^Y^ce;XIItAoCsow38eq?Y-Auh!1in#Rt-_D>H^ z=EjbclGGGa6VnaMGmMLj`x3NcwA43Jb(0gzl;RUIRAUDcR1~99l2SAPkVhoRMMtN} zXvC<tOmX83grD8GSo_Lo?%lNfhD#EBgPo z*nf@ppMC#B!T)Ae0RG$mlJWmGl7CkuU~B8-==5i;rS;8i6rJ=PoQxf446XDX9g|c> zU64ePyMlsI^V5Jq5A+BPe#e73+kpc_r1tv#B)~EZ;7^67F0*QiYfrk0uVW;Qb=NsG zN>gsuCwvb?s-KQIppEaeXtEMdc9dy6Dfduz-tMTms+i01{eD9JE&h?Kht*$eOl#&L zJdM_-vXs(V#$Ed;5wyNWJdPNh+Z$+;$|%qR(t`4W@kDhd*{(7-33BOS6L$UPDeE_53j${QfKN-0v-HG z(QfyvFNbwPK%^!eIo4ac1;b>c0vyf9}Xby@YY!lkz-UvNp zwj#Gg|4B~?n?G^{;(W;|{SNoJbHTMpQJ*Wq5b{l9c8(%?Kd^1?H1om1de0Da9M;Q=n zUfn{f87iVb^>Exl*nZ0hs(Yt>&V9$Pg`zX`AI%`+0SWQ4Zc(8lUDcTluS z5a_KerZWe}a-MF9#Cd^fi!y3%@RFmg&~YnYZ6<=L`UJ0v={zr)>$A;x#MCHZy1st7 ztT+N07NR+vOwSV2pvWuN1%lO!K#Pj0Fr>Q~R40{bwdL%u9i`DSM4RdtEH#cW)6}+I-eE< z&tZs+(Ogu(H_;$a$!7w`MH0r%h&@KM+<>gJL@O~2K2?VrSYUBbhCn#yy?P)uF3qWU z0o09mIik+kvzV6w>vEZy@&Mr)SgxPzUiDA&%07m17udz9usD82afQEps3$pe!7fUf z0eiidkJ)m3qhOjVHC_M(RYCBO%CZKZXFb8}s0-+}@CIn&EF(rRWUX2g^yZCvl0bI} zbP;1S)iXnRC&}5-Tl(hASKqdSnO?ASGJ*MIhOXIblmEudj(M|W!+I3eDc}7t`^mtg z)PKlaXe(OH+q-)qcQ8a@!llRrpGI8DsjhoKvw9T;TEH&?s=LH0w$EzI>%u;oD@x83 zJL7+ncjI9nn!TlS_KYu5vn%f*@qa5F;| zEFxY&B?g=IVlaF3XNm_03PA)=3|{n-UCgJoTr;|;1AU9|kPE_if8!Zvb}0q$5okF$ zHaJdmO&gg!9oN|M{!qGE=tb|3pVQ8PbL$}e;NgXz<6ZEggI}wO@aBP**2Wo=yN#ZC z4G$m^yaM9g=|&!^ft8jOLuzc3Psca*;7`;gnHm}tS0%f4{|VGEwu45KptfNmwxlE~ z^=r30gi@?cOm8kAz!EylA4G~7kbEiRlRIzwrb~{_2(x^$-?|#e6Bi_**(vyr_~9Of z!n>Gqf+Qwiu!xhi9f53=PM3`3tNF}pCOiPU|H4;pzjcsqbwg*{{kyrTxk<;mx~(;; z1NMrpaQ`57yn34>Jo3b|HROE(UNcQash!0p2-!Cz;{IRv#Vp5!3o$P8!%SgV~k&Hnqhp`5eLjTcy93cK!3Hm-$`@yGnaE=?;*2uSpiZTs_dDd51U%i z{|Zd9ou-;laGS_x=O}a+ zB||za<795A?_~Q=r=coQ+ZK@@ zId~hWQL<%)fI_WDIX#=(WNl!Dm$a&ROfLTd&B$vatq!M-2Jcs;N2vps$b6P1(N}=oI3<3luMTmC|0*{ zm1w8bt7vgX($!0@V0A}XIK)w!AzUn7vH=pZEp0RU0p?}ch2XC-7r#LK&vyc2=-#Q2 z^L%8)JbbcZ%g0Du;|8=q8B>X=mIQirpE=&Ox{TiuNDnOPd-FLI^KfEF729!!0x#Es z@>3ursjFSpu%C-8WL^Zw!7a0O-#cnf`HjI+AjVCFitK}GXO`ME&on|^=~Zc}^LBp9 zj=-vlN;Uc;IDjtK38l7}5xxQF&sRtfn4^TNtnzXv4M{r&ek*(eNbIu!u$>Ed%` z5x7+&)2P&4>0J`N&ZP8$vcR+@FS0126s6+Jx_{{`3ZrIMwaJo6jdrRwE$>IU_JTZ} z(||hyyQ)4Z1@wSlT94(-QKqkAatMmkT7pCycEB1U8KQbFX&?%|4$yyxCtm3=W`$4fiG0WU3yI@c zx{wfmkZAYE_5M%4{J-ygbpH|(|GD$2f$3o_Vti#&zfSGZMQ5_f3xt6~+{RX=$H8at z?GFG1Tmp}}lmm-R->ve*Iv+XJ@58p|1_jRvfEgz$XozU8#iJS})UM6VNI!3RUU!{5 zXB(+Eqd-E;cHQ>)`h0(HO_zLmzR3Tu-UGp;08YntWwMY-9i^w_u#wR?JxR2bky5j9 z3Sl-dQQU$xrO0xa&>vsiK`QN<$Yd%YXXM7*WOhnRdSFt5$aJux8QceC?lA0_if|s> ze{ad*opH_kb%M&~(~&UcX0nFGq^MqjxW?HJIP462v9XG>j(5Gat_)#SiNfahq2Mz2 zU`4uV8m$S~o9(W>mu*=h%Gs(Wz+%>h;R9Sg)jZ$q8vT1HxX3iQnh6&2rJ1u|j>^Qf`A76K%_ubL`Zu?h4`b=IyL>1!=*%!_K)=XC z6d}4R5L+sI50Q4P3upXQ3Z!~1ZXLlh!^UNcK6#QpYt-YC=^H=EPg3)z*wXo*024Q4b2sBCG4I# zlTFFY=kQ>xvR+LsuDUAk)q%5pEcqr(O_|^spjhtpb1#aC& zghXzGkGDC_XDa%t(X`E+kvKQ4zrQ*uuQoj>7@@ykWvF332)RO?%AA&Fsn&MNzmFa$ zWk&&^=NNjxLjrli_8ESU)}U|N{%j&TQmvY~lk!~Jh}*=^INA~&QB9em!in_X%Rl1&Kd~Z(u z9mra#<@vZQlOY+JYUwCrgoea4C8^(xv4ceCXcejq84TQ#sF~IU2V}LKc~Xlr_P=ry zl&Hh0exdCbVd^NPCqNNlxM3vA13EI8XvZ1H9#bT7y*U8Y{H8nwGpOR!e!!}*g;mJ#}T{ekSb}5zIPmye*If(}}_=PcuAW#yidAa^9-`<8Gr0 z)Fz=NiZ{)HAvw{Pl5uu)?)&i&Us$Cx4gE}cIJ}B4Xz~-q7)R_%owbP!z_V2=Aq%Rj z{V;7#kV1dNT9-6R+H}}(ED*_!F=~uz>&nR3gb^Ce%+0s#u|vWl<~JD3MvS0T9thdF zioIG3c#Sdsv;LdtRv3ml7%o$6LTVL>(H`^@TNg`2KPIk*8-IB}X!MT0`hN9Ddf7yN z?J=GxPL!uJ7lqwowsl?iRrh@#5C$%E&h~Z>XQcvFC*5%0RN-Opq|=IwX(dq(*sjs+ zqy99+v~m|6T#zR*e1AVxZ8djd5>eIeCi(b8sUk)OGjAsKSOg^-ugwl2WSL@d#?mdl zib0v*{u-?cq}dDGyZ%$XRY=UkQwt2oGu`zQneZh$=^! zj;!pCBWQNtvAcwcWIBM2y9!*W|8LmQy$H~5BEx)78J`4Z0(FJO2P^!YyQU{*Al+fs z){!4JvT1iLrJ8aU3k0t|P}{RN)_^v%$$r;+p0DY7N8CXzmS*HB*=?qaaF9D@#_$SN zSz{moAK<*RH->%r7xX~9gVW$l7?b|_SYI)gcjf0VAUJ%FcQP(TpBs; zg$25D!Ry_`8xpS_OJdeo$qh#7U+cepZ??TII7_%AXsT$B z=e)Bx#v%J0j``00Zk5hsvv6%T^*xGNx%KN-=pocSoqE5_R)OK%-Pbu^1MNzfds)mL zxz^F4lDKV9D&lEY;I+A)ui{TznB*CE$=9(wgE{m}`^<--OzV-5V4X2w9j(_!+jpTr zJvD*y6;39&T+==$F&tsRKM_lqa1HC}aGL0o`%c9mO=fts?36@8MGm7Vi{Y z^<7m$(EtdSr#22<(rm_(l_(`j!*Pu~Y>>xc>I9M#DJYDJNHO&4=HM%YLIp?;iR&$m z#_$ZWYLfGLt5FJZhr3jpYb`*%9S!zCG6ivNHYzNHcI%khtgHBliM^Ou}ZVD7ehU9 zS+W@AV=?Ro!=%AJ>Kcy9aU3%VX3|XM_K0A+ZaknKDyIS3S-Hw1C7&BSW5)sqj5Ye_ z4OSW7Yu-;bCyYKHFUk}<*<(@TH?YZPHr~~Iy%9@GR2Yd}J2!N9K&CN7Eq{Ka!jdu; zQNB*Y;i(7)OxZK%IHGt#Rt?z`I|A{q_BmoF!f^G}XVeTbe1Wnzh%1g>j}>DqFf;Rp zz7>xIs12@Ke0gr+4-!pmFP84vCIaTjqFNg{V`5}Rdt~xE^I;Bxp4)|cs8=f)1YwHz zqI`G~s2~qqDV+h02b`PQpUE#^^Aq8l%y2|ByQeXSADg5*qMprEAE3WFg0Q39`O+i1 z!J@iV!`Y~C$wJ!5Z+j5$i<1`+@)tBG$JL=!*uk=2k;T<@{|s1$YL079FvK%mPhyHV zP8^KGZnp`(hVMZ;s=n~3r2y;LTwcJwoBW-(ndU-$03{RD zh+Qn$ja_Z^OuMf3Ub|JTY74s&Am*(n{J3~@#OJNYuEVVJd9*H%)oFoRBkySGm`hx! zT3tG|+aAkXcx-2Apy)h^BkOyFTWQVeZ%e2@;*0DtlG9I3Et=PKaPt&K zw?WI7S;P)TWED7aSH$3hL@Qde?H#tzo^<(o_sv_2ci<7M?F$|oCFWc?7@KBj-;N$P zB;q!8@bW-WJY9do&y|6~mEruZAVe$!?{)N9rZZxD-|oltkhW9~nR8bLBGXw<632!l z*TYQn^NnUy%Ds}$f^=yQ+BM-a5X4^GHF=%PDrRfm_uqC zh{sKwIu|O0&jWb27;wzg4w5uA@TO_j(1X?8E>5Zfma|Ly7Bklq|s z9)H`zoAGY3n-+&JPrT!>u^qg9Evx4y@GI4$n-Uk_5wttU1_t?6><>}cZ-U+&+~JE) zPlDbO_j;MoxdLzMd~Ew|1o^a5q_1R*JZ=#XXMzg?6Zy!^hop}qoLQlJ{(%!KYt`MK z8umEN@Z4w!2=q_oe=;QttPCQy3Nm4F@x>@v4sz_jo{4m*0r%J(w1cSo;D_hQtJs7W z><$QrmG^+<$4{d2bgGo&3-FV}avg9zI|Rr(k{wTyl3!M1q+a zD9W{pCd%il*j&Ft z5H$nENf>>k$;SONGW`qo6`&qKs*T z2^RS)pXk9b@(_Fw1bkb)-oqK|v}r$L!W&aXA>IpcdNZ_vWE#XO8X`#Yp1+?RshVcd zknG%rPd*4ECEI0wD#@d+3NbHKxl}n^Sgkx==Iu%}HvNliOqVBqG?P2va zQ;kRJ$J6j;+wP9cS za#m;#GUT!qAV%+rdWolk+)6kkz4@Yh5LXP+LSvo9_T+MmiaP-eq6_k;)i6_@WSJ zlT@wK$zqHu<83U2V*yJ|XJU4farT#pAA&@qu)(PO^8PxEmPD4;Txpio+2)#!9 z>&=i7*#tc0`?!==vk>s7V+PL#S1;PwSY?NIXN2=Gu89x(cToFm))7L;< z+bhAbVD*bD=}iU`+PU+SBobTQ%S!=VL!>q$rfWsaaV}Smz>lO9JXT#`CcH_mRCSf4%YQAw`$^yY z3Y*^Nzk_g$xn7a_NO(2Eb*I=^;4f!Ra#Oo~LLjlcjke*k*o$~U#0ZXOQ5@HQ&T46l z7504MUgZkz2gNP1QFN8Y?nSEnEai^Rgyvl}xZfMUV6QrJcXp;jKGqB=D*tj{8(_pV zqyB*DK$2lgYGejmJUW)*s_Cv65sFf&pb(Yz8oWgDtQ0~k^0-wdF|tj}MOXaN@ydF8 zNr={U?=;&Z?wr^VC+`)S2xl}QFagy;$mG=TUs7Vi2wws5zEke4hTa2)>O0U?$WYsZ z<8bN2bB_N4AWd%+kncgknZ&}bM~eDtj#C5uRkp21hWW5gxWvc6b*4+dn<{c?w9Rmf zIVZKsPl{W2vQAlYO3yh}-{Os=YBnL8?uN5(RqfQ=-1cOiUnJu>KcLA*tQK3FU`_bM zM^T28w;nAj5EdAXFi&Kk1Nnl2)D!M{@+D-}bIEe+Lc4{s;YJc-{F#``iS2uk;2!Zp zF9#myUmO!wCeJIoi^A+T^e~20c+c2C}XltaR!|U-HfDA=^xF97ev}$l6#oY z&-&T{egB)&aV$3_aVA51XGiU07$s9vubh_kQG?F$FycvS6|IO!6q zq^>9|3U^*!X_C~SxX&pqUkUjz%!j=VlXDo$!2VLH!rKj@61mDpSr~7B2yy{>X~_nc zRI+7g2V&k zd**H++P9dg!-AOs3;GM`(g<+GRV$+&DdMVpUxY9I1@uK28$az=6oaa+PutlO9?6#? zf-OsgT>^@8KK>ggkUQRPPgC7zjKFR5spqQb3ojCHzj^(UH~v+!y*`Smv)VpVoPwa6 zWG18WJaPKMi*F6Zdk*kU^`i~NNTfn3BkJniC`yN98L-Awd)Z&mY? zprBW$!qL-OL7h@O#kvYnLsfff@kDIegt~?{-*5A7JrA;#TmTe?jICJqhub-G@e??D zqiV#g{)M!kW1-4SDel7TO{;@*h2=_76g3NUD@|c*WO#>MfYq6_YVUP+&8e4|%4T`w zXzhmVNziAHazWO2qXcaOu@R1MrPP{t)`N)}-1&~mq=ZH=w=;-E$IOk=y$dOls{6sRR`I5>|X zpq~XYW4sd;J^6OwOf**J>a7u$S>WTFPRkjY;BfVgQst)u4aMLR1|6%)CB^18XCz+r ztkYQ}G43j~Q&1em(_EkMv0|WEiKu;z2zhb(L%$F&xWwzOmk;VLBYAZ8lOCziNoPw1 zv2BOyXA`A8z^WH!nXhKXM`t0;6D*-uGds3TYGrm8SPnJJOQ^fJU#}@aIy@MYWz**H zvkp?7I5PE{$$|~{-ZaFxr6ZolP^nL##mHOErB^AqJqn^hFA=)HWj!m3WDaHW$C)i^ z9@6G$SzB=>jbe>4kqr#sF7#K}W*Cg-5y6kun3u&0L7BpXF9=#7IN8FOjWrWwUBZiU zT_se3ih-GBKx+Uw0N|CwP3D@-C=5(9T#BH@M`F2!Goiqx+Js5xC92|Sy0%WWWp={$(am!#l~f^W_oz78HX<0X#7 zp)p1u~M*o9W@O8P{0Qkg@Wa# z2{Heb&oX^CQSZWSFBXKOfE|tsAm#^U-WkDnU;IowZ`Ok4!mwHwH=s|AqZ^YD4!5!@ zPxJj+Bd-q6w_YG`z_+r;S86zwXb+EO&qogOq8h-Ect5(M2+>(O7n7)^dP*ws_3U6v zVsh)sk^@*c>)3EML|0<-YROho{lz@Nd4;R9gL{9|64xVL`n!m$-Jjrx?-Bacp!=^5 z1^T^eB{_)Y<9)y{-4Rz@9_>;_7h;5D+@QcbF4Wv7hu)s0&==&6u)33 zHRj+&Woq-vDvjwJCYES@$C4{$?f$Ibi4G()UeN11rgjF+^;YE^5nYprYoJNoudNj= zm1pXSeG64dcWHObUetodRn1Fw|1nI$D9z}dVEYT0lQnsf_E1x2vBLql7NrHH!n&Sq z6lc*mvU=WS6=v9Lrl}&zRiu_6u;6g%_DU{9b+R z#YHqX7`m9eydf?KlKu6Sb%j$%_jmydig`B*TN`cZL-g!R)iE?+Q5oOqBFKhx z%MW>BC^(F_JuG(ayE(MT{S3eI{cKiwOtPwLc0XO*{*|(JOx;uQOfq@lp_^cZo=FZj z4#}@e@dJ>Bn%2`2_WPeSN7si^{U#H=7N4o%Dq3NdGybrZgEU$oSm$hC)uNDC_M9xc zGzwh5Sg?mpBIE8lT2XsqTt3j3?We8}3bzLBTQd639vyg^$0#1epq8snlDJP2(BF)K zSx30RM+{f+b$g{9usIL8H!hCO117Xgv}ttPJm9wVRjPk;ePH@zxv%j9k5`TzdXLeT zFgFX`V7cYIcBls5WN0Pf6SMBN+;CrQ(|EsFd*xtwr#$R{Z9FP`OWtyNsq#mCgZ7+P z^Yn$haBJ)r96{ZJd8vlMl?IBxrgh=fdq_NF!1{jARCVz>jNdC)H^wfy?R94#MPdUjcYX>#wEx+LB#P-#4S-%YH>t-j+w zOFTI8gX$ard6fAh&g=u&56%3^-6E2tpk*wx3HSCQ+t7+*iOs zPk5ysqE}i*cQocFvA68xHfL|iX(C4h*67@3|5Qwle(8wT&!&{8*{f%0(5gH+m>$tq zp;AqrP7?XTEooYG1Dzfxc>W%*CyL16q|fQ0_jp%%Bk^k!i#Nbi(N9&T>#M{gez_Ws zYK=l}adalV(nH}I_!hNeb;tQFk3BHX7N}}R8%pek^E`X}%ou=cx8InPU1EE0|Hen- zyw8MoJqB5=)Z%JXlrdTXAE)eqLAdVE-=>wGHrkRet}>3Yu^lt$Kzu%$3#(ioY}@Gu zjk3BZuQH&~7H+C*uX^4}F*|P89JX;Hg2U!pt>rDi(n(Qe-c}tzb0#6_ItoR0->LSt zR~UT<-|@TO%O`M+_e_J4wx7^)5_%%u+J=yF_S#2Xd?C;Ss3N7KY^#-vx+|;bJX&8r zD?|MetfhdC;^2WG`7MCgs>TKKN=^=!x&Q~BzmQio_^l~LboTNT=I zC5pme^P@ER``p$2md9>4!K#vV-Fc1an7pl>_|&>aqP}+zqR?+~Z;f2^`a+-!Te%V? z;H2SbF>jP^GE(R1@%C==XQ@J=G9lKX+Z<@5}PO(EYkJh=GCv#)Nj{DkWJM2}F&oAZ6xu8&g7pn1ps2U5srwQ7CAK zN&*~@t{`31lUf`O;2w^)M3B@o)_mbRu{-`PrfNpF!R^q>yTR&ETS7^-b2*{-tZAZz zw@q5x9B5V8Qd7dZ!Ai$9hk%Q!wqbE1F1c96&zwBBaRW}(^axoPpN^4Aw}&a5dMe+*Gomky_l^54*rzXro$ z>LL)U5Ry>~FJi=*{JDc)_**c)-&faPz`6v`YU3HQa}pLtb5K)u%K+BOqXP0)rj5Au$zB zW1?vr?mDv7Fsxtsr+S6ucp2l#(4dnr9sD*v+@*>g#M4b|U?~s93>Pg{{a5|rm2xfI z`>E}?9S@|IoUX{Q1zjm5YJT|3S>&09D}|2~BiMo=z4YEjXlWh)V&qs;*C{`UMxp$9 zX)QB?G$fPD6z5_pNs>Jeh{^&U^)Wbr?2D6-q?)`*1k@!UvwQgl8eG$r+)NnFoT)L6 zg7lEh+E6J17krfYJCSjWzm67hEth24pomhz71|Qodn#oAILN)*Vwu2qpJirG)4Wnv}9GWOFrQg%Je+gNrPl8mw7ykE8{ z=|B4+uwC&bpp%eFcRU6{mxRV32VeH8XxX>v$du<$(DfinaaWxP<+Y97Z#n#U~V zVEu-GoPD=9$}P;xv+S~Ob#mmi$JQmE;Iz4(){y*9pFyW-jjgdk#oG$fl4o9E8bo|L zWjo4l%n51@Kz-n%zeSCD`uB?T%FVk+KBI}=ve zvlcS#wt`U6wrJo}6I6Rwb=1GzZfwE=I&Ne@p7*pH84XShXYJRgvK)UjQL%R9Zbm(m zxzTQsLTON$WO7vM)*vl%Pc0JH7WhP;$z@j=y#avW4X8iqy6mEYr@-}PW?H)xfP6fQ z&tI$F{NNct4rRMSHhaelo<5kTYq+(?pY)Ieh8*sa83EQfMrFupMM@nfEV@EmdHUv9 z35uzIrIuo4#WnF^_jcpC@uNNaYTQ~uZWOE6P@LFT^1@$o&q+9Qr8YR+ObBkpP9=F+$s5+B!mX2~T zAuQ6RenX?O{IlLMl1%)OK{S7oL}X%;!XUxU~xJN8xk z`xywS*naF(J#?vOpB(K=o~lE;m$zhgPWDB@=p#dQIW>xe_p1OLoWInJRKbEuoncf; zmS1!u-ycc1qWnDg5Nk2D)BY%jmOwCLC+Ny>`f&UxFowIsHnOXfR^S;&F(KXd{ODlm z$6#1ccqt-HIH9)|@fHnrKudu!6B$_R{fbCIkSIb#aUN|3RM>zuO>dpMbROZ`^hvS@ z$FU-;e4W}!ubzKrU@R*dW*($tFZ>}dd*4_mv)#O>X{U@zSzQt*83l9mI zI$8O<5AIDx`wo0}f2fsPC_l>ONx_`E7kdXu{YIZbp1$(^oBAH({T~&oQ&1{X951QW zmhHUxd)t%GQ9#ak5fTjk-cahWC;>^Rg7(`TVlvy0W@Y!Jc%QL3Ozu# zDPIqBCy&T2PWBj+d-JA-pxZlM=9ja2ce|3B(^VCF+a*MMp`(rH>Rt6W1$;r{n1(VK zLs>UtkT43LR2G$AOYHVailiqk7naz2yZGLo*xQs!T9VN5Q>eE(w zw$4&)&6xIV$IO^>1N-jrEUg>O8G4^@y+-hQv6@OmF@gy^nL_n1P1-Rtyy$Bl;|VcV zF=p*&41-qI5gG9UhKmmnjs932!6hceXa#-qfK;3d*a{)BrwNFeKU|ge?N!;zk+kB! zMD_uHJR#%b54c2tr~uGPLTRLg$`fupo}cRJeTwK;~}A>(Acy4k-Xk&Aa1&eWYS1ULWUj@fhBiWY$pdfy+F z@G{OG{*v*mYtH3OdUjwEr6%_ZPZ3P{@rfbNPQG!BZ7lRyC^xlMpWH`@YRar`tr}d> z#wz87t?#2FsH-jM6m{U=gp6WPrZ%*w0bFm(T#7m#v^;f%Z!kCeB5oiF`W33W5Srdt zdU?YeOdPG@98H7NpI{(uN{FJdu14r(URPH^F6tOpXuhU7T9a{3G3_#Ldfx_nT(Hec zo<1dyhsVsTw;ZkVcJ_0-h-T3G1W@q)_Q30LNv)W?FbMH+XJ* zy=$@39Op|kZv`Rt>X`zg&at(?PO^I=X8d9&myFEx#S`dYTg1W+iE?vt#b47QwoHI9 zNP+|3WjtXo{u}VG(lLUaW0&@yD|O?4TS4dfJI`HC-^q;M(b3r2;7|FONXphw-%7~* z&;2!X17|05+kZOpQ3~3!Nb>O94b&ZSs%p)TK)n3m=4eiblVtSx@KNFgBY_xV6ts;NF;GcGxMP8OKV^h6LmSb2E#Qnw ze!6Mnz7>lE9u{AgQ~8u2zM8CYD5US8dMDX-5iMlgpE9m*s+Lh~A#P1er*rF}GHV3h z=`STo?kIXw8I<`W0^*@mB1$}pj60R{aJ7>C2m=oghKyxMbFNq#EVLgP0cH3q7H z%0?L93-z6|+jiN|@v>ix?tRBU(v-4RV`}cQH*fp|)vd3)8i9hJ3hkuh^8dz{F5-~_ zUUr1T3cP%cCaTooM8dj|4*M=e6flH0&8ve32Q)0dyisl))XkZ7Wg~N}6y`+Qi2l+e zUd#F!nJp{#KIjbQdI`%oZ`?h=5G^kZ_uN`<(`3;a!~EMsWV|j-o>c?x#;zR2ktiB! z);5rrHl?GPtr6-o!tYd|uK;Vbsp4P{v_4??=^a>>U4_aUXPWQ$FPLE4PK$T^3Gkf$ zHo&9$U&G`d(Os6xt1r?sg14n)G8HNyWa^q8#nf0lbr4A-Fi;q6t-`pAx1T*$eKM*$ z|CX|gDrk#&1}>5H+`EjV$9Bm)Njw&7-ZR{1!CJTaXuP!$Pcg69`{w5BRHysB$(tWUes@@6aM69kb|Lx$%BRY^-o6bjH#0!7b;5~{6J+jKxU!Kmi# zndh@+?}WKSRY2gZ?Q`{(Uj|kb1%VWmRryOH0T)f3cKtG4oIF=F7RaRnH0Rc_&372={_3lRNsr95%ZO{IX{p@YJ^EI%+gvvKes5cY+PE@unghjdY5#9A!G z70u6}?zmd?v+{`vCu-53_v5@z)X{oPC@P)iA3jK$`r zSA2a7&!^zmUiZ82R2=1cumBQwOJUPz5Ay`RLfY(EiwKkrx%@YN^^XuET;tE zmr-6~I7j!R!KrHu5CWGSChO6deaLWa*9LLJbcAJsFd%Dy>a!>J`N)Z&oiU4OEP-!Ti^_!p}O?7`}i7Lsf$-gBkuY*`Zb z7=!nTT;5z$_5$=J=Ko+Cp|Q0J=%oFr>hBgnL3!tvFoLNhf#D0O=X^h+x08iB;@8pXdRHxX}6R4k@i6%vmsQwu^5z zk1ip`#^N)^#Lg#HOW3sPI33xqFB4#bOPVnY%d6prwxf;Y-w9{ky4{O6&94Ra8VN@K zb-lY;&`HtxW@sF!doT5T$2&lIvJpbKGMuDAFM#!QPXW87>}=Q4J3JeXlwHys?!1^#37q_k?N@+u&Ns20pEoBeZC*np;i;M{2C0Z4_br2gsh6eL z#8`#sn41+$iD?^GL%5?cbRcaa-Nx0vE(D=*WY%rXy3B%gNz0l?#noGJGP728RMY#q z=2&aJf@DcR?QbMmN)ItUe+VM_U!ryqA@1VVt$^*xYt~-qvW!J4Tp<-3>jT=7Zow5M z8mSKp0v4b%a8bxFr>3MwZHSWD73D@+$5?nZAqGM#>H@`)mIeC#->B)P8T$zh-Pxnc z8)~Zx?TWF4(YfKuF3WN_ckpCe5;x4V4AA3(i$pm|78{%!q?|~*eH0f=?j6i)n~Hso zmTo>vqEtB)`%hP55INf7HM@taH)v`Fw40Ayc*R!T?O{ziUpYmP)AH`euTK!zg9*6Z z!>M=$3pd0!&TzU=hc_@@^Yd3eUQpX4-33}b{?~5t5lgW=ldJ@dUAH%`l5US1y_`40 zs(X`Qk}vvMDYYq+@Rm+~IyCX;iD~pMgq^KY)T*aBz@DYEB={PxA>)mI6tM*sx-DmGQHEaHwRrAmNjO!ZLHO4b;;5mf@zzlPhkP($JeZGE7 z?^XN}Gf_feGoG~BjUgVa*)O`>lX=$BSR2)uD<9 z>o^|nb1^oVDhQbfW>>!;8-7<}nL6L^V*4pB=>wwW+RXAeRvKED(n1;R`A6v$6gy0I(;Vf?!4;&sgn7F%LpM}6PQ?0%2Z@b{It<(G1CZ|>913E0nR2r^Pa*Bp z@tFGi*CQ~@Yc-?{cwu1 zsilf=k^+Qs>&WZG(3WDixisHpR>`+ihiRwkL(3T|=xsoNP*@XX3BU8hr57l3k;pni zI``=3Nl4xh4oDj<%>Q1zYXHr%Xg_xrK3Nq?vKX3|^Hb(Bj+lONTz>4yhU-UdXt2>j z<>S4NB&!iE+ao{0Tx^N*^|EZU;0kJkx@zh}S^P{ieQjGl468CbC`SWnwLRYYiStXm zOxt~Rb3D{dz=nHMcY)#r^kF8|q8KZHVb9FCX2m^X*(|L9FZg!5a7((!J8%MjT$#Fs)M1Pb zq6hBGp%O1A+&%2>l0mpaIzbo&jc^!oN^3zxap3V2dNj3x<=TwZ&0eKX5PIso9j1;e zwUg+C&}FJ`k(M|%%}p=6RPUq4sT3-Y;k-<68ciZ~_j|bt>&9ZLHNVrp#+pk}XvM{8 z`?k}o-!if>hVlCP9j%&WI2V`5SW)BCeR5>MQhF)po=p~AYN%cNa_BbV6EEh_kk^@a zD>4&>uCGCUmyA-c)%DIcF4R6!>?6T~Mj_m{Hpq`*(wj>foHL;;%;?(((YOxGt)Bhx zuS+K{{CUsaC++%}S6~CJ=|vr(iIs-je)e9uJEU8ZJAz)w166q)R^2XI?@E2vUQ!R% zn@dxS!JcOimXkWJBz8Y?2JKQr>`~SmE2F2SL38$SyR1^yqj8_mkBp)o$@+3BQ~Mid z9U$XVqxX3P=XCKj0*W>}L0~Em`(vG<>srF8+*kPrw z20{z(=^w+ybdGe~Oo_i|hYJ@kZl*(9sHw#Chi&OIc?w`nBODp?ia$uF%Hs(X>xm?j zqZQ`Ybf@g#wli`!-al~3GWiE$K+LCe=Ndi!#CVjzUZ z!sD2O*;d28zkl))m)YN7HDi^z5IuNo3^w(zy8 zszJG#mp#Cj)Q@E@r-=NP2FVxxEAeOI2e=|KshybNB6HgE^(r>HD{*}S}mO>LuRGJT{*tfTzw_#+er-0${}%YPe@CMJ1Ng#j#)i)SnY@ss3gL;g zg2D~#Kpdfu#G;q1qz_TwSz1VJT(b3zby$Vk&;Y#1(A)|xj`_?i5YQ;TR%jice5E;0 zYHg;`zS5{S*9xI6o^j>rE8Ua*XhIw{_-*&@(R|C(am8__>+Ws&Q^ymy*X4~hR2b5r zm^p3sw}yv=tdyncy_Ui7{BQS732et~Z_@{-IhHDXAV`(Wlay<#hb>%H%WDi+K$862nA@BDtM#UCKMu+kM`!JHyWSi?&)A7_ z3{cyNG%a~nnH_!+;g&JxEMAmh-Z}rC!o7>OVzW&PoMyTA_g{hqXG)SLraA^OP**<7 zjWbr7z!o2n3hnx7A=2O=WL;`@9N{vQIM@&|G-ljrPvIuJHYtss0Er0fT5cMXNUf1B z7FAwBDixt0X7C3S)mPe5g`YtME23wAnbU)+AtV}z+e8G;0BP=bI;?(#|Ep!vVfDbK zvx+|CKF>yt0hWQ3drchU#XBU+HiuG*V^snFAPUp-5<#R&BUAzoB!aZ+e*KIxa26V}s6?nBK(U-7REa573wg-jqCg>H8~>O{ z*C0JL-?X-k_y%hpUFL?I>0WV{oV`Nb)nZbJG01R~AG>flIJf)3O*oB2i8~;!P?Wo_ z0|QEB*fifiL6E6%>tlAYHm2cjTFE@*<);#>689Z6S#BySQ@VTMhf9vYQyLeDg1*F} zjq>i1*x>5|CGKN{l9br3kB0EHY|k4{%^t7-uhjd#NVipUZa=EUuE5kS1_~qYX?>hJ z$}!jc9$O$>J&wnu0SgfYods^z?J4X;X7c77Me0kS-dO_VUQ39T(Kv(Y#s}Qqz-0AH z^?WRL(4RzpkD+T5FG_0NyPq-a-B7A5LHOCqwObRJi&oRi(<;OuIN7SV5PeHU$<@Zh zPozEV`dYmu0Z&Tqd>t>8JVde9#Pt+l95iHe$4Xwfy1AhI zDM4XJ;bBTTvRFtW>E+GzkN)9k!hA5z;xUOL2 zq4}zn-DP{qc^i|Y%rvi|^5k-*8;JZ~9a;>-+q_EOX+p1Wz;>i7c}M6Nv`^NY&{J-> z`(mzDJDM}QPu5i44**2Qbo(XzZ-ZDu%6vm8w@DUarqXj41VqP~ zs&4Y8F^Waik3y1fQo`bVUH;b=!^QrWb)3Gl=QVKr+6sxc=ygauUG|cm?|X=;Q)kQ8 zM(xrICifa2p``I7>g2R~?a{hmw@{!NS5`VhH8+;cV(F>B94M*S;5#O`YzZH1Z%yD? zZ61w(M`#aS-*~Fj;x|J!KM|^o;MI#Xkh0ULJcA?o4u~f%Z^16ViA27FxU5GM*rKq( z7cS~MrZ=f>_OWx8j#-Q3%!aEU2hVuTu(7`TQk-Bi6*!<}0WQi;_FpO;fhpL4`DcWp zGOw9vx0N~6#}lz(r+dxIGZM3ah-8qrqMmeRh%{z@dbUD2w15*_4P?I~UZr^anP}DB zU9CCrNiy9I3~d#&!$DX9e?A});BjBtQ7oGAyoI$8YQrkLBIH@2;lt4E^)|d6Jwj}z z&2_E}Y;H#6I4<10d_&P0{4|EUacwFHauvrjAnAm6yeR#}f}Rk27CN)vhgRqEyPMMS7zvunj2?`f;%?alsJ+-K+IzjJx>h8 zu~m_y$!J5RWAh|C<6+uiCNsOKu)E72M3xKK(a9Okw3e_*O&}7llNV!=P87VM2DkAk zci!YXS2&=P0}Hx|wwSc9JP%m8dMJA*q&VFB0yMI@5vWoAGraygwn){R+Cj6B1a2Px z5)u(K5{+;z2n*_XD!+Auv#LJEM)(~Hx{$Yb^ldQmcYF2zNH1V30*)CN_|1$v2|`LnFUT$%-tO0Eg|c5$BB~yDfzS zcOXJ$wpzVK0MfTjBJ0b$r#_OvAJ3WRt+YOLlJPYMx~qp>^$$$h#bc|`g0pF-Ao43? z>*A+8lx>}L{p(Tni2Vvk)dtzg$hUKjSjXRagj)$h#8=KV>5s)J4vGtRn5kP|AXIz! zPgbbVxW{2o4s-UM;c#We8P&mPN|DW7_uLF!a|^0S=wr6Esx9Z$2|c1?GaupU6$tb| zY_KU`(_29O_%k(;>^|6*pZURH3`@%EuKS;Ns z1lujmf;r{qAN&Q0&m{wJSZ8MeE7RM5+Sq;ul_ z`+ADrd_Um+G37js6tKsArNB}n{p*zTUxQr>3@wA;{EUbjNjlNd6$Mx zg0|MyU)v`sa~tEY5$en7^PkC=S<2@!nEdG6L=h(vT__0F=S8Y&eM=hal#7eM(o^Lu z2?^;05&|CNliYrq6gUv;|i!(W{0N)LWd*@{2q*u)}u*> z7MQgk6t9OqqXMln?zoMAJcc zMKaof_Up})q#DzdF?w^%tTI7STI^@8=Wk#enR*)&%8yje>+tKvUYbW8UAPg55xb70 zEn5&Ba~NmOJlgI#iS8W3-@N%>V!#z-ZRwfPO1)dQdQkaHsiqG|~we2ALqG7Ruup(DqSOft2RFg_X%3w?6VqvV1uzX_@F(diNVp z4{I|}35=11u$;?|JFBEE*gb;T`dy+8gWJ9~pNsecrO`t#V9jW-6mnfO@ff9od}b(3s4>p0i30gbGIv~1@a^F2kl7YO;DxmF3? zWi-RoXhzRJV0&XE@ACc?+@6?)LQ2XNm4KfalMtsc%4!Fn0rl zpHTrHwR>t>7W?t!Yc{*-^xN%9P0cs0kr=`?bQ5T*oOo&VRRu+1chM!qj%2I!@+1XF z4GWJ=7ix9;Wa@xoZ0RP`NCWw0*8247Y4jIZ>GEW7zuoCFXl6xIvz$ezsWgKdVMBH> z{o!A7f;R-@eK9Vj7R40xx)T<2$?F2E<>Jy3F;;=Yt}WE59J!1WN367 zA^6pu_zLoZIf*x031CcwotS{L8bJE(<_F%j_KJ2P_IusaZXwN$&^t716W{M6X2r_~ zaiMwdISX7Y&Qi&Uh0upS3TyEIXNDICQlT5fHXC`aji-c{U(J@qh-mWl-uMN|T&435 z5)a1dvB|oe%b2mefc=Vpm0C%IUYYh7HI*;3UdgNIz}R##(#{(_>82|zB0L*1i4B5j-xi9O4x10rs_J6*gdRBX=@VJ+==sWb&_Qc6tSOowM{BX@(zawtjl zdU!F4OYw2@Tk1L^%~JCwb|e#3CC>srRHQ*(N%!7$Mu_sKh@|*XtR>)BmWw!;8-mq7 zBBnbjwx8Kyv|hd*`5}84flTHR1Y@@uqjG`UG+jN_YK&RYTt7DVwfEDXDW4U+iO{>K zw1hr{_XE*S*K9TzzUlJH2rh^hUm2v7_XjwTuYap|>zeEDY$HOq3X4Tz^X}E9z)x4F zs+T?Ed+Hj<#jY-`Va~fT2C$=qFT-5q$@p9~0{G&eeL~tiIAHXA!f6C(rAlS^)&k<- zXU|ZVs}XQ>s5iONo~t!XXZgtaP$Iau;JT%h)>}v54yut~pykaNye4axEK#5@?TSsQ zE;Jvf9I$GVb|S`7$pG)4vgo9NXsKr?u=F!GnA%VS2z$@Z(!MR9?EPcAqi5ft)Iz6sNl`%kj+_H-X`R<>BFrBW=fSlD|{`D%@Rcbu2?%>t7i34k?Ujb)2@J-`j#4 zLK<69qcUuniIan-$A1+fR=?@+thwDIXtF1Tks@Br-xY zfB+zblrR(ke`U;6U~-;p1Kg8Lh6v~LjW@9l2P6s+?$2!ZRPX`(ZkRGe7~q(4&gEi<$ch`5kQ?*1=GSqkeV z{SA1EaW_A!t{@^UY2D^YO0(H@+kFVzZaAh0_`A`f(}G~EP~?B|%gtxu&g%^x{EYSz zk+T;_c@d;+n@$<>V%P=nk36?L!}?*=vK4>nJSm+1%a}9UlmTJTrfX4{Lb7smNQn@T zw9p2%(Zjl^bWGo1;DuMHN(djsEm)P8mEC2sL@KyPjwD@d%QnZ$ zMJ3cnn!_!iP{MzWk%PI&D?m?C(y2d|2VChluN^yHya(b`h>~GkI1y;}O_E57zOs!{ zt2C@M$^PR2U#(dZmA-sNreB@z-yb0Bf7j*yONhZG=onhx>t4)RB`r6&TP$n zgmN*)eCqvgriBO-abHQ8ECN0bw?z5Bxpx z=jF@?zFdVn?@gD5egM4o$m`}lV(CWrOKKq(sv*`mNcHcvw&Xryfw<{ch{O&qc#WCTXX6=#{MV@q#iHYba!OUY+MGeNTjP%Fj!WgM&`&RlI^=AWTOqy-o zHo9YFt!gQ*p7{Fl86>#-JLZo(b^O`LdFK~OsZBRR@6P?ad^Ujbqm_j^XycM4ZHFyg ziUbIFW#2tj`65~#2V!4z7DM8Z;fG0|APaQ{a2VNYpNotB7eZ5kp+tPDz&Lqs0j%Y4tA*URpcfi z_M(FD=fRGdqf430j}1z`O0I=;tLu81bwJXdYiN7_&a-?ly|-j*+=--XGvCq#32Gh(=|qj5F?kmihk{%M&$}udW5)DHK zF_>}5R8&&API}o0osZJRL3n~>76nUZ&L&iy^s>PMnNcYZ|9*1$v-bzbT3rpWsJ+y{ zPrg>5Zlery96Um?lc6L|)}&{992{_$J&=4%nRp9BAC6!IB=A&=tF>r8S*O-=!G(_( zwXbX_rGZgeiK*&n5E;f=k{ktyA1(;x_kiMEt0*gpp_4&(twlS2e5C?NoD{n>X2AT# zY@Zp?#!b1zNq96MQqeO*M1MMBin5v#RH52&Xd~DO6-BZLnA6xO1$sou(YJ1Dlc{WF zVa%2DyYm`V#81jP@70IJ;DX@y*iUt$MLm)ByAD$eUuji|5{ptFYq(q)mE(5bOpxjM z^Q`AHWq44SG3`_LxC9fwR)XRVIp=B%<(-lOC3jI#bb@dK(*vjom!=t|#<@dZql%>O z15y^{4tQoeW9Lu%G&V$90x6F)xN6y_oIn;!Q zs)8jT$;&;u%Y>=T3hg34A-+Y*na=|glcStr5D;&5*t5*DmD~x;zQAV5{}Ya`?RRGa zT*t9@$a~!co;pD^!J5bo?lDOWFx%)Y=-fJ+PDGc0>;=q=s?P4aHForSB+)v0WY2JH z?*`O;RHum6j%#LG)Vu#ciO#+jRC3!>T(9fr+XE7T2B7Z|0nR5jw@WG)kDDzTJ=o4~ zUpeyt7}_nd`t}j9BKqryOha{34erm)RmST)_9Aw)@ zHbiyg5n&E{_CQR@h<}34d7WM{s{%5wdty1l+KX8*?+-YkNK2Be*6&jc>@{Fd;Ps|| z26LqdI3#9le?;}risDq$K5G3yoqK}C^@-8z^wj%tdgw-6@F#Ju{Sg7+y)L?)U$ez> zoOaP$UFZ?y5BiFycir*pnaAaY+|%1%8&|(@VB)zweR%?IidwJyK5J!STzw&2RFx zZV@qeaCB01Hu#U9|1#=Msc8Pgz5P*4Lrp!Q+~(G!OiNR{qa7|r^H?FC6gVhkk3y7=uW#Sh;&>78bZ}aK*C#NH$9rX@M3f{nckYI+5QG?Aj1DM)@~z_ zw!UAD@gedTlePB*%4+55naJ8ak_;))#S;4ji!LOqY5VRI){GMwHR~}6t4g>5C_#U# ztYC!tjKjrKvRy=GAsJVK++~$|+s!w9z3H4G^mACv=EErXNSmH7qN}%PKcN|8%9=i)qS5+$L zu&ya~HW%RMVJi4T^pv?>mw*Gf<)-7gf#Qj|e#w2|v4#t!%Jk{&xlf;$_?jW*n!Pyx zkG$<18kiLOAUPuFfyu-EfWX%4jYnjBYc~~*9JEz6oa)_R|8wjZA|RNrAp%}14L7fW zi7A5Wym*K+V8pkqqO-X#3ft{0qs?KVt^)?kS>AicmeO&q+~J~ zp0YJ_P~_a8j= zsAs~G=8F=M{4GZL{|B__UorX@MRNQLn?*_gym4aW(~+i13knnk1P=khoC-ViMZk+x zLW(l}oAg1H`dU+Fv**;qw|ANDSRs>cGqL!Yw^`; zv;{E&8CNJcc)GHzTYM}f&NPw<6j{C3gaeelU#y!M)w-utYEHOCCJo|Vgp7K6C_$14 zqIrLUB0bsgz^D%V%fbo2f9#yb#CntTX?55Xy|Kps&Xek*4_r=KDZ z+`TQuv|$l}MWLzA5Ay6Cvsa^7xvwXpy?`w(6vx4XJ zWuf1bVSb#U8{xlY4+wlZ$9jjPk)X_;NFMqdgq>m&W=!KtP+6NL57`AMljW+es zzqjUjgz;V*kktJI?!NOg^s_)ph45>4UDA!Vo0hn>KZ+h-3=?Y3*R=#!fOX zP$Y~+14$f66ix?UWB_6r#fMcC^~X4R-<&OD1CSDNuX~y^YwJ>sW0j`T<2+3F9>cLo z#!j57$ll2K9(%$4>eA7(>FJX5e)pR5&EZK!IMQzOfik#FU*o*LGz~7u(8}XzIQRy- z!U7AlMTIe|DgQFmc%cHy_9^{o`eD%ja_L>ckU6$O4*U**o5uR7`FzqkU8k4gxtI=o z^P^oGFPm5jwZMI{;nH}$?p@uV8FT4r=|#GziKXK07bHJLtK}X%I0TON$uj(iJ`SY^ zc$b2CoxCQ>7LH@nxcdW&_C#fMYBtTxcg46dL{vf%EFCZ~eErMvZq&Z%Lhumnkn^4A zsx$ay(FnN7kYah}tZ@0?-0Niroa~13`?hVi6`ndno`G+E8;$<6^gsE-K3)TxyoJ4M zb6pj5=I8^FD5H@`^V#Qb2^0cx7wUz&cruA5g>6>qR5)O^t1(-qqP&1g=qvY#s&{bx zq8Hc%LsbK1*%n|Y=FfojpE;w~)G0-X4i*K3{o|J7`krhIOd*c*$y{WIKz2n2*EXEH zT{oml3Th5k*vkswuFXdGDlcLj15Nec5pFfZ*0?XHaF_lVuiB%Pv&p7z)%38}%$Gup zVTa~C8=cw%6BKn_|4E?bPNW4PT7}jZQLhDJhvf4z;~L)506IE0 zX!tWXX(QOQPRj-p80QG79t8T2^az4Zp2hOHziQlvT!|H)jv{Ixodabzv6lBj)6WRB z{)Kg@$~~(7$-az?lw$4@L%I&DI0Lo)PEJJziWP33a3azb?jyXt1v0N>2kxwA6b%l> zZqRpAo)Npi&loWbjFWtEV)783BbeIAhqyuc+~>i7aQ8shIXt)bjCWT6$~ro^>99G} z2XfmT0(|l!)XJb^E!#3z4oEGIsL(xd; zYX1`1I(cG|u#4R4T&C|m*9KB1`UzKvho5R@1eYtUL9B72{i(ir&ls8g!pD ztR|25xGaF!4z5M+U@@lQf(12?xGy`!|3E}7pI$k`jOIFjiDr{tqf0va&3pOn6Pu)% z@xtG2zjYuJXrV)DUrIF*y<1O1<$#54kZ#2;=X51J^F#0nZ0(;S$OZDt_U2bx{RZ=Q zMMdd$fH|!s{ zXq#l;{`xfV`gp&C>A`WrQU?d{!Ey5(1u*VLJt>i27aZ-^&2IIk=zP5p+{$q(K?2(b z8?9h)kvj9SF!Dr zoyF}?V|9;6abHxWk2cEvGs$-}Pg}D+ZzgkaN&$Snp%;5m%zh1E#?Wac-}x?BYlGN#U#Mek*}kek#I9XaHt?mz3*fDrRTQ#&#~xyeqJk1QJ~E$7qsw6 z?sV;|?*=-{M<1+hXoj?@-$y+(^BJ1H~wQ9G8C0#^aEAyhDduNX@haoa=PuPp zYsGv8UBfQaRHgBgLjmP^eh>fLMeh{8ic)?xz?#3kX-D#Z{;W#cd_`9OMFIaJg-=t`_3*!YDgtNQ2+QUEAJB9M{~AvT$H`E)IKmCR21H532+ata8_i_MR@ z2Xj<3w<`isF~Ah$W{|9;51ub*f4#9ziKrOR&jM{x7I_7()O@`F*5o$KtZ?fxU~g`t zUovNEVKYn$U~VX8eR)qb`7;D8pn*Pp$(otYTqL)5KH$lUS-jf}PGBjy$weoceAcPp z&5ZYB$r&P$MN{0H0AxCe4Qmd3T%M*5d4i%#!nmBCN-WU-4m4Tjxn-%j3HagwTxCZ9 z)j5vO-C7%s%D!&UfO>bi2oXiCw<-w{vVTK^rVbv#W=WjdADJy8$khnU!`ZWCIU`># zyjc^1W~pcu>@lDZ{zr6gv%)2X4n27~Ve+cQqcND%0?IFSP4sH#yIaXXYAq^z3|cg` z`I3$m%jra>e2W-=DiD@84T!cb%||k)nPmEE09NC%@PS_OLhkrX*U!cgD*;;&gIaA(DyVT4QD+q_xu z>r`tg{hiGY&DvD-)B*h+YEd+Zn)WylQl}<4>(_NlsKXCRV;a)Rcw!wtelM2_rWX`j zTh5A|i6=2BA(iMCnj_fob@*eA;V?oa4Z1kRBGaU07O70fb6-qmA$Hg$ps@^ka1=RO zTbE_2#)1bndC3VuK@e!Sftxq4=Uux}fDxXE#Q5_x=E1h>T5`DPHz zbH<_OjWx$wy7=%0!mo*qH*7N4tySm+R0~(rbus`7;+wGh;C0O%x~fEMkt!eV>U$`i z5>Q(o z=t$gPjgGh0&I7KY#k50V7DJRX<%^X z>6+ebc9efB3@eE2Tr){;?_w`vhgF>`-GDY(YkR{9RH(MiCnyRtd!LxXJ75z+?2 zGi@m^+2hKJ5sB1@Xi@s_@p_Kwbc<*LQ_`mr^Y%j}(sV_$`J(?_FWP)4NW*BIL~sR>t6 zM;qTJZ~GoY36&{h-Pf}L#y2UtR}>ZaI%A6VkU>vG4~}9^i$5WP2Tj?Cc}5oQxe2=q z8BeLa$hwCg_psjZyC2+?yX4*hJ58Wu^w9}}7X*+i5Rjqu5^@GzXiw#SUir1G1`jY% zOL=GE_ENYxhcyUrEt9XlMNP6kx6h&%6^u3@zB8KUCAa18T(R2J`%JjWZ z!{7cXaEW+Qu*iJPu+m>QqW}Lo$4Z+!I)0JNzZ&_M%=|B1yejFRM04bGAvu{=lNPd+ zJRI^DRQ(?FcVUD+bgEcAi@o(msqys9RTCG#)TjI!9~3-dc`>gW;HSJuQvH~d`MQs86R$|SKXHh zqS9Qy)u;T`>>a!$LuaE2keJV%;8g)tr&Nnc;EkvA-RanHXsy)D@XN0a>h}z2j81R; zsUNJf&g&rKpuD0WD@=dDrPHdBoK42WoBU|nMo17o(5^;M|dB4?|FsAGVrSyWcI`+FVw^vTVC`y}f(BwJl zrw3Sp151^9=}B})6@H*i4-dIN_o^br+BkcLa^H56|^2XsT0dESw2 zMX>(KqNl=x2K5=zIKg}2JpGAZu{I_IO}0$EQ5P{4zol**PCt3F4`GX}2@vr8#Y)~J zKb)gJeHcFnR@4SSh%b;c%J`l=W*40UPjF#q{<}ywv-=vHRFmDjv)NtmC zQx9qm)d%0zH&qG7AFa3VAU1S^(n8VFTC~Hb+HjYMjX8r#&_0MzlNR*mnLH5hi}`@{ zK$8qiDDvS_(L9_2vHgzEQ${DYSE;DqB!g*jhJghE&=LTnbgl&Xepo<*uRtV{2wDHN z)l;Kg$TA>Y|K8Lc&LjWGj<+bp4Hiye_@BfU(y#nF{fpR&|Ltbye?e^j0}8JC4#xi% zv29ZR%8%hk=3ZDvO-@1u8KmQ@6p%E|dlHuy#H1&MiC<*$YdLkHmR#F3ae;bKd;@*i z2_VfELG=B}JMLCO-6UQy^>RDE%K4b>c%9ki`f~Z2Qu8hO7C#t%Aeg8E%+}6P7Twtg z-)dj(w}_zFK&86KR@q9MHicUAucLVshUdmz_2@32(V`y3`&Kf8Q2I)+!n0mR=rrDU zXvv^$ho;yh*kNqJ#r1}b0|i|xRUF6;lhx$M*uG3SNLUTC@|htC z-=fsw^F%$qqz4%QdjBrS+ov}Qv!z00E+JWas>p?z@=t!WWU3K*?Z(0meTuTOC7OTx zU|kFLE0bLZ+WGcL$u4E}5dB0g`h|uwv3=H6f+{5z9oLv-=Q45+n~V4WwgO=CabjM% zBAN+RjM65(-}>Q2V#i1Na@a0`08g&y;W#@sBiX6Tpy8r}*+{RnyGUT`?XeHSqo#|J z^ww~c;ou|iyzpErDtlVU=`8N7JSu>4M z_pr9=tX0edVn9B}YFO2y(88j#S{w%E8vVOpAboK*27a7e4Ekjt0)hIX99*1oE;vex z7#%jhY=bPijA=Ce@9rRO(Vl_vnd00!^TAc<+wVvRM9{;hP*rqEL_(RzfK$er_^SN; z)1a8vo8~Dr5?;0X0J62Cusw$A*c^Sx1)dom`-)Pl7hsW4i(r*^Mw`z5K>!2ixB_mu z*Ddqjh}zceRFdmuX1akM1$3>G=#~|y?eYv(e-`Qy?bRHIq=fMaN~fB zUa6I8Rt=)jnplP>yuS+P&PxeWpJ#1$F`iqRl|jF$WL_aZFZl@kLo&d$VJtu&w?Q0O zzuXK>6gmygq(yXJy0C1SL}T8AplK|AGNUOhzlGeK_oo|haD@)5PxF}rV+5`-w{Aag zus45t=FU*{LguJ11Sr-28EZkq;!mJO7AQGih1L4rEyUmp>B!%X0YemsrV3QFvlgt* z5kwlPzaiJ+kZ^PMd-RRbl(Y?F*m`4*UIhIuf#8q>H_M=fM*L_Op-<_r zBZagV=4B|EW+KTja?srADTZXCd3Yv%^Chfpi)cg{ED${SI>InNpRj5!euKv?=Xn92 zsS&FH(*w`qLIy$doc>RE&A5R?u zzkl1sxX|{*fLpXvIW>9d<$ePROttn3oc6R!sN{&Y+>Jr@yeQN$sFR z;w6A<2-0%UA?c8Qf;sX7>>uKRBv3Ni)E9pI{uVzX|6Bb0U)`lhLE3hK58ivfRs1}d zNjlGK0hdq0qjV@q1qI%ZFMLgcpWSY~mB^LK)4GZ^h_@H+3?dAe_a~k*;9P_d7%NEFP6+ zgV(oGr*?W(ql?6SQ~`lUsjLb%MbfC4V$)1E0Y_b|OIYxz4?O|!kRb?BGrgiH5+(>s zoqM}v*;OBfg-D1l`M6T6{K`LG+0dJ1)!??G5g(2*vlNkm%Q(MPABT$r13q?|+kL4- zf)Mi5r$sn;u41aK(K#!m+goyd$c!KPl~-&-({j#D4^7hQkV3W|&>l_b!}!z?4($OA z5IrkfuT#F&S1(`?modY&I40%gtroig{YMvF{K{>5u^I51k8RriGd${z)=5k2tG zM|&Bp5kDTfb#vfuTTd?)a=>bX=lokw^y9+2LS?kwHQIWI~pYgy7 zb?A-RKVm_vM5!9?C%qYdfRAw& zAU7`up~%g=p@}pg#b7E)BFYx3g%(J36Nw(Dij!b>cMl@CSNbrW!DBDbTD4OXk!G4x zi}JBKc8HBYx$J~31PXH+4^x|UxK~(<@I;^3pWN$E=sYma@JP|8YL`L(zI6Y#c%Q{6 z*APf`DU$S4pr#_!60BH$FGViP14iJmbrzSrOkR;f3YZa{#E7Wpd@^4E-zH8EgPc-# zKWFPvh%WbqU_%ZEt`=Q?odKHc7@SUmY{GK`?40VuL~o)bS|is$Hn=<=KGHOsEC5tB zFb|q}gGlL97NUf$G$>^1b^3E18PZ~Pm9kX%*ftnolljiEt@2#F2R5ah$zbXd%V_Ev zyDd{1o_uuoBga$fB@Fw!V5F3jIr=a-ykqrK?WWZ#a(bglI_-8pq74RK*KfQ z0~Dzus7_l;pMJYf>Bk`)`S8gF!To-BdMnVw5M-pyu+aCiC5dwNH|6fgRsIKZcF&)g zr}1|?VOp}I3)IR@m1&HX1~#wsS!4iYqES zK}4J{Ei>;e3>LB#Oly>EZkW14^@YmpbgxCDi#0RgdM${&wxR+LiX}B+iRioOB0(pDKpVEI;ND?wNx>%e|m{RsqR_{(nmQ z3ZS}@t!p4a(BKx_-CYwrcyJ5u1TO9bcXti$8sy>xcLKqKCc#~UOZYD{llKTSFEjJ~ zyNWt>tLU}*>^`TvPxtP%F`ZJQw@W0^>x;!^@?k_)9#bF$j0)S3;mH-IR5y82l|%=F z2lR8zhP?XNP-ucZZ6A+o$xOyF!w;RaLHGh57GZ|TCXhJqY~GCh)aXEV$1O&$c}La1 zjuJxkY9SM4av^Hb;i7efiYaMwI%jGy`3NdY)+mcJhF(3XEiSlU3c|jMBi|;m-c?~T z+x0_@;SxcoY=(6xNgO$bBt~Pj8`-<1S|;Bsjrzw3@zSjt^JC3X3*$HI79i~!$RmTz zsblZsLYs7L$|=1CB$8qS!tXrWs!F@BVuh?kN(PvE5Av-*r^iYu+L^j^m9JG^#=m>@ z=1soa)H*w6KzoR$B8mBCXoU;f5^bVuwQ3~2LKg!yxomG1#XPmn(?YH@E~_ED+W6mxs%x{%Z<$pW`~ON1~2XjP5v(0{C{+6Dm$00tsd3w=f=ZENy zOgb-=f}|Hb*LQ$YdWg<(u7x3`PKF)B7ZfZ6;1FrNM63 z?O6tE%EiU@6%rVuwIQjvGtOofZBGZT1Sh(xLIYt9c4VI8`!=UJd2BfLjdRI#SbVAX ziT(f*RI^T!IL5Ac>ql7uduF#nuCRJ1)2bdvAyMxp-5^Ww5p#X{rb5)(X|fEhDHHW{ zw(Lfc$g;+Q`B0AiPGtmK%*aWfQQ$d!*U<|-@n2HZvCWSiw^I>#vh+LyC;aaVWGbmkENr z&kl*8o^_FW$T?rDYLO1Pyi%>@&kJKQoH2E0F`HjcN}Zlnx1ddoDA>G4Xu_jyp6vuT zPvC}pT&Owx+qB`zUeR|4G;OH(<<^_bzkjln0k40t`PQxc$7h(T8Ya~X+9gDc8Z9{Z z&y0RAU}#_kQGrM;__MK9vwIwK^aoqFhk~dK!ARf1zJqHMxF2?7-8|~yoO@_~Ed;_wvT%Vs{9RK$6uUQ|&@#6vyBsFK9eZW1Ft#D2)VpQRwpR(;x^ zdoTgMqfF9iBl%{`QDv7B0~8{8`8k`C4@cbZAXBu00v#kYl!#_Wug{)2PwD5cNp?K^ z9+|d-4z|gZ!L{57>!Ogfbzchm>J1)Y%?NThxIS8frAw@z>Zb9v%3_3~F@<=LG%r*U zaTov}{{^z~SeX!qgSYow`_5)ij*QtGp4lvF`aIGQ>@3ZTkDmsl#@^5*NGjOuu82}o zzLF~Q9SW+mP=>88%eSA1W4_W7-Q>rdq^?t=m6}^tDPaBRGFLg%ak93W!kOp#EO{6& zP%}Iff5HZQ9VW$~+9r=|Quj#z*=YwcnssS~9|ub2>v|u1JXP47vZ1&L1O%Z1DsOrDfSIMHU{VT>&>H=9}G3i@2rP+rx@eU@uE8rJNec zij~#FmuEBj03F1~ct@C@$>y)zB+tVyjV3*n`mtAhIM0$58vM9jOQC}JJOem|EpwqeMuYPxu3sv}oMS?S#o6GGK@8PN59)m&K4Dc&X% z(;XL_kKeYkafzS3Wn5DD>Yiw{LACy_#jY4op(>9q>>-*9@C0M+=b#bknAWZ37^(Ij zq>H%<@>o4a#6NydoF{_M4i4zB_KG)#PSye9bk0Ou8h%1Dtl7Q_y#7*n%g)?m>xF~( zjqvOwC;*qvN_3(*a+w2|ao0D?@okOvg8JskUw(l7n`0fncglavwKd?~l_ryKJ^Ky! zKCHkIC-o7%fFvPa$)YNh022lakMar^dgL=t#@XLyNHHw!b?%WlM)R@^!)I!smZL@k zBi=6wE5)2v&!UNV(&)oOYW(6Qa!nUjDKKBf-~Da=#^HE4(@mWk)LPvhyN3i4goB$3K8iV7uh zsv+a?#c4&NWeK(3AH;ETrMOIFgu{_@%XRwCZ;L=^8Ts)hix4Pf3yJRQ<8xb^CkdmC z?c_gB)XmRsk`9ch#tx4*hO=#qS7={~Vb4*tTf<5P%*-XMfUUYkI9T1cEF;ObfxxI-yNuA=I$dCtz3ey znVkctYD*`fUuZ(57+^B*R=Q}~{1z#2!ca?)+YsRQb+lt^LmEvZt_`=j^wqig+wz@n@ z`LIMQJT3bxMzuKg8EGBU+Q-6cs5(@5W?N>JpZL{$9VF)veF`L5%DSYTNQEypW%6$u zm_~}T{HeHj1bAlKl8ii92l9~$dm=UM21kLemA&b$;^!wB7#IKWGnF$TVq!!lBlG4 z{?Rjz?P(uvid+|i$VH?`-C&Gcb3{(~Vpg`w+O);Wk1|Mrjxrht0GfRUnZqz2MhrXa zqgVC9nemD5)H$to=~hp)c=l9?#~Z_7i~=U-`FZxb-|TR9@YCxx;Zjo-WpMNOn2)z) zFPGGVl%3N$f`gp$gPnWC+f4(rmts%fidpo^BJx72zAd7|*Xi{2VXmbOm)1`w^tm9% znM=0Fg4bDxH5PxPEm{P3#A(mxqlM7SIARP?|2&+c7qmU8kP&iApzL|F>Dz)Ixp_`O zP%xrP1M6@oYhgo$ZWwrAsYLa4 z|I;DAvJxno9HkQrhLPQk-8}=De{9U3U%)dJ$955?_AOms!9gia%)0E$Mp}$+0er@< zq7J&_SzvShM?e%V?_zUu{niL@gt5UFOjFJUJ}L?$f%eU%jUSoujr{^O=?=^{19`ON zlRIy8Uo_nqcPa6@yyz`CM?pMJ^^SN^Fqtt`GQ8Q#W4kE7`V9^LT}j#pMChl!j#g#J zr-=CCaV%xyFeQ9SK+mG(cTwW*)xa(eK;_Z(jy)woZp~> zA(4}-&VH+TEeLzPTqw&FOoK(ZjD~m{KW05fiGLe@E3Z2`rLukIDahE*`u!ubU)9`o zn^-lyht#E#-dt~S>}4y$-mSbR8{T@}22cn^refuQ08NjLOv?JiEWjyOnzk<^R5%gO zhUH_B{oz~u#IYwVnUg8?3P*#DqD8#X;%q%HY**=I>>-S|!X*-!x1{^l#OnR56O>iD zc;i;KS+t$koh)E3)w0OjWJl_aW2;xF=9D9Kr>)(5}4FqUbk# zI#$N8o0w;IChL49m9CJTzoC!|u{Ljd%ECgBOf$}&jA^$(V#P#~)`&g`H8E{uv52pp zwto`xUL-L&WTAVREEm$0g_gYPL(^vHq(*t1WCH_6alhkeW&GCZ3hL)|{O-jiFOBrF z!EW=Jej|dqQitT6!B-7&io2K)WIm~Q)v@yq%U|VpV+I?{y0@Yd%n8~-NuuM*pM~KA z85YB};IS~M(c<}4Hxx>qRK0cdl&e?t253N%vefkgds>Ubn8X}j6Vpgs>a#nFq$osY z1ZRwLqFv=+BTb=i%D2Wv>_yE0z}+niZ4?rE|*a3d7^kndWGwnFqt+iZ(7+aln<}jzbAQ(#Z2SS}3S$%Bd}^ zc9ghB%O)Z_mTZMRC&H#)I#fiLuIkGa^`4e~9oM5zKPx?zjkC&Xy0~r{;S?FS%c7w< zWbMpzc(xSw?9tGxG~_l}Acq}zjt5ClaB7-!vzqnlrX;}$#+PyQ9oU)_DfePh2E1<7 ztok6g6K^k^DuHR*iJ?jw?bs_whk|bx`dxu^nC6#e{1*m~z1eq7m}Cf$*^Eua(oi_I zAL+3opNhJteu&mWQ@kQWPucmiP)4|nFG`b2tpC;h{-PI@`+h?9v=9mn|0R-n8#t=+Z*FD(c5 zjj79Jxkgck*DV=wpFgRZuwr%}KTm+dx?RT@aUHJdaX-ODh~gByS?WGx&czAkvkg;x zrf92l8$Or_zOwJVwh>5rB`Q5_5}ef6DjS*$x30nZbuO3dijS*wvNEqTY5p1_A0gWr znH<(Qvb!os14|R)n2Ost>jS2;d1zyLHu`Svm|&dZD+PpP{Bh>U&`Md;gRl64q;>{8MJJM$?UNUd`aC>BiLe>*{ zJY15->yW+<3rLgYeTruFDtk1ovU<$(_y7#HgUq>)r0{^}Xbth}V#6?%5jeFYt;SG^ z3qF)=uWRU;Jj)Q}cpY8-H+l_n$2$6{ZR?&*IGr{>ek!69ZH0ZoJ*Ji+ezzlJ^%qL3 zO5a`6gwFw(moEzqxh=yJ9M1FTn!eo&qD#y5AZXErHs%22?A+JmS&GIolml!)rZTnUDM3YgzYfT#;OXn)`PWv3Ta z!-i|-Wojv*k&bC}_JJDjiAK(Ba|YZgUI{f}TdEOFT2+}nPmttytw7j%@bQZDV1vvj z^rp{gRkCDmYJHGrE1~e~AE!-&6B6`7UxVQuvRrfdFkGX8H~SNP_X4EodVd;lXd^>eV1jN+Tt4}Rsn)R0LxBz0c=NXU|pUe!MQQFkGBWbR3&(jLm z%RSLc#p}5_dO{GD=DEFr=Fc% z85CBF>*t!6ugI?soX(*JNxBp+-DdZ4X0LldiK}+WWGvXV(C(Ht|!3$psR=&c*HIM=BmX;pRIpz@Ale{9dhGe(U2|Giv;# zOc|;?p67J=Q(kamB*aus=|XP|m{jN^6@V*Bpm?ye56Njh#vyJqE=DweC;?Rv7faX~ zde03n^I~0B2vUmr;w^X37tVxUK?4}ifsSH5_kpKZIzpYu0;Kv}SBGfI2AKNp+VN#z`nI{UNDRbo-wqa4NEls zICRJpu)??cj^*WcZ^MAv+;bDbh~gpN$1Cor<{Y2oyIDws^JsfW^5AL$azE(T0p&pP z1Mv~6Q44R&RHoH95&OuGx2srIr<@zYJTOMKiVs;Bx3py89I87LOb@%mr`0)#;7_~Z zzcZj8?w=)>%5@HoCHE_&hnu(n_yQ-L(~VjpjjkbT7e)Dk5??fApg(d>vwLRJ-x{um z*Nt?DqTSxh_MIyogY!vf1mU1`Gld-&L)*43f6dilz`Q@HEz;+>MDDYv9u!s;WXeao zUq=TaL$P*IFgJzrGc>j1dDOd zed+=ZBo?w4mr$2)Ya}?vedDopomhW1`#P<%YOJ_j=WwClX0xJH-f@s?^tmzs_j7t!k zK@j^zS0Q|mM4tVP5Ram$VbS6|YDY&y?Q1r1joe9dj08#CM{RSMTU}(RCh`hp_Rkl- zGd|Cv~G@F{DLhCizAm9AN!^{rNs8hu!G@8RpnGx7e`-+K$ffN<0qjR zGq^$dj_Tv!n*?zOSyk5skI7JVKJ)3jysnjIu-@VSzQiP8r6MzudCU=~?v-U8yzo^7 zGf~SUTvEp+S*!X9uX!sq=o}lH;r{pzk~M*VA(uyQ`3C8!{C;)&6)95fv(cK!%Cuz$ z_Zal57H6kPN>25KNiI6z6F)jzEkh#%OqU#-__Xzy)KyH};81#N6OfX$$IXWzOn`Q& z4f$Z1t>)8&8PcYfEwY5UadU1yg+U*(1m2ZlHoC-!2?gB!!fLhmTl))D@dhvkx#+Yj z1O=LV{(T%{^IeCuFK>%QR!VZ4GnO5tK8a+thWE zg4VytZrwcS?7^ zuZfhYnB8dwd%VLO?DK7pV5Wi<(`~DYqOXn8#jUIL^)12*Dbhk4GmL_E2`WX&iT16o zk(t|hok(Y|v-wzn?4x34T)|+SfZP>fiq!><*%vnxGN~ypST-FtC+@TPv*vYv@iU!_ z@2gf|PrgQ?Ktf*9^CnJ(x*CtZVB8!OBfg0%!wL;Z8(tYYre0vcnPGlyCc$V(Ipl*P z_(J!a=o@vp^%Efme!K74(Ke7A>Y}|sxV+JL^aYa{~m%5#$$+R1? zGaQhZTTX!#s#=Xtpegqero$RNt&`4xn3g$)=y*;=N=Qai)}~`xtxI_N*#MMCIq#HFifT zz(-*m;pVH&+4bixL&Bbg)W5FN^bH87pAHp)zPkWNMfTFqS=l~AC$3FX3kQUSh_C?-ZftyClgM)o_D7cX$RGlEYblux0jv5 zTr|i-I3@ZPCGheCl~BGhImF)K4!9@?pC(gi3ozX=a!|r1)LFxy_8c&wY0<^{2cm|P zv6Y`QktY*;I)IUd5y3ne1CqpVanlY45z8hf4&$EUBnucDj16pDa4&GI&TArYhf*xh zdj>*%APH8(h~c>o@l#%T>R$e>rwVx_WUB|~V`p^JHsg*y12lzj&zF}w6W09HwB2yb z%Q~`es&(;7#*DUC_w-Dmt7|$*?TA_m;zB+-u{2;Bg{O}nV7G_@7~<)Bv8fH^G$XG8$(&{A zwXJK5LRK%M34(t$&NI~MHT{UQ9qN-V_yn|%PqC81EIiSzmMM=2zb`mIwiP_b)x+2M z7Gd`83h79j#SItpQ}luuf2uOU`my_rY5T{6P#BNlb%h%<#MZb=m@y5aW;#o1^2Z)SWo+b`y0gV^iRcZtz5!-05vF z7wNo=hc6h4hc&s@uL^jqRvD6thVYtbErDK9k!;+a0xoE0WL7zLixjn5;$fXvT=O3I zT6jI&^A7k6R{&5#lVjz#8%_RiAa2{di{`kx79K+j72$H(!ass|B%@l%KeeKchYLe_ z>!(JC2fxsv>XVen+Y42GeYPxMWqm`6F$(E<6^s|g(slNk!lL*6v^W2>f6hh^mE$s= z3D$)}{V5(Qm&A6bp%2Q}*GZ5Qrf}n7*Hr51?bJOyA-?B4vg6y_EX<*-e20h{=0Mxs zbuQGZ$fLyO5v$nQ&^kuH+mNq9O#MWSfThtH|0q1i!NrWj^S}_P;Q1OkYLW6U^?_7G zx2wg?CULj7))QU(n{$0JE%1t2dWrMi2g-Os{v|8^wK{@qlj%+1b^?NI z$}l2tjp0g>K3O+p%yK<9!XqmQ?E9>z&(|^Pi~aSRwI5x$jaA62GFz9%fmO3t3a>cq zK8Xbv=5Ps~4mKN5+Eqw12(!PEyedFXv~VLxMB~HwT1Vfo51pQ#D8e$e4pFZ{&RC2P z5gTIzl{3!&(tor^BwZfR8j4k{7Rq#`riKXP2O-Bh66#WWK2w=z;iD9GLl+3 zpHIaI4#lQ&S-xBK8PiQ%dwOh?%BO~DCo06pN7<^dnZCN@NzY{_Z1>rrB0U|nC&+!2 z2y!oBcTd2;@lzyk(B=TkyZ)zy0deK05*Q0zk+o$@nun`VI1Er7pjq>8V zNmlW{p7S^Btgb(TA}jL(uR>`0w8gHP^T~Sh5Tkip^spk4SBAhC{TZU}_Z)UJw-}zm zPq{KBm!k)?P{`-(9?LFt&YN4s%SIZ-9lJ!Ws~B%exHOeVFk3~}HewnnH(d)qkLQ_d z6h>O)pEE{vbOVw}E+jdYC^wM+AAhaI(YAibUc@B#_mDss0Ji&BK{WG`4 zOk>vSNq(Bq2IB@s>>Rxm6Wv?h;ZXkpb1l8u|+_qXWdC*jjcPCixq;!%BVPSp#hP zqo`%cNf&YoQXHC$D=D45RiT|5ngPlh?0T~?lUf*O)){K@*Kbh?3RW1j9-T?%lDk@y z4+~?wKI%Y!-=O|_IuKz|=)F;V7ps=5@g)RrE;;tvM$gUhG>jHcw2Hr@fS+k^Zr~>G z^JvPrZc}_&d_kEsqAEMTMJw!!CBw)u&ZVzmq+ZworuaE&TT>$pYsd9|g9O^0orAe8 z221?Va!l1|Y5X1Y?{G7rt1sX#qFA^?RLG^VjoxPf63;AS=_mVDfGJKg73L zsGdnTUD40y(>S##2l|W2Cy!H(@@5KBa(#gs`vlz}Y~$ot5VsqPQ{{YtjYFvIumZzt zA{CcxZLJR|4#{j7k~Tu*jkwz8QA|5G1$Cl895R`Zyp;irp1{KN){kB30O8P1W5;@bG znvX74roeMmQlUi=v9Y%(wl$ZC#9tKNFpvi3!C}f1m6Ct|l2g%psc{TJp)@yu)*e2> z((p0Fg*8gJ!|3WZke9;Z{8}&NRkv7iP=#_y-F}x^y?2m%-D_aj^)f04%mneyjo_;) z6qc_Zu$q37d~X``*eP~Q>I2gg%rrV8v=kDfpp$=%Vj}hF)^dsSWygoN(A$g*E=Do6FX?&(@F#7pbiJ`;c0c@Ul zDqW_90Wm#5f2L<(Lf3)3TeXtI7nhYwRm(F;*r_G6K@OPW4H(Y3O5SjUzBC}u3d|eQ8*8d@?;zUPE+i#QNMn=r(ap?2SH@vo*m z3HJ%XuG_S6;QbWy-l%qU;8x;>z>4pMW7>R}J%QLf%@1BY(4f_1iixd-6GlO7Vp*yU zp{VU^3?s?90i=!#>H`lxT!q8rk>W_$2~kbpz7eV{3wR|8E=8**5?qn8#n`*(bt1xRQrdGxyx2y%B$qmw#>ZV$c7%cO#%JM1lY$Y0q?Yuo> ze9KdJoiM)RH*SB%^;TAdX-zEjA7@%y=!0=Zg%iWK7jVI9b&Dk}0$Af&08KHo+ zOwDhFvA(E|ER%a^cdh@^wLUlmIv6?_3=BvX8jKk92L=Y}7Jf5OGMfh` zBdR1wFCi-i5@`9km{isRb0O%TX+f~)KNaEz{rXQa89`YIF;EN&gN)cigu6mNh>?Cm zAO&Im2flv6D{jwm+y<%WsPe4!89n~KN|7}Cb{Z;XweER73r}Qp2 zz}WP4j}U0&(uD&9yGy6`!+_v-S(yG*iytsTR#x_Rc>=6u^vnRDnf1gP{#2>`ffrAC% zTZ5WQ@hAK;P;>kX{D)mIXe4%a5p=LO1xXH@8T?mz7Q@d)$3pL{{B!2{-v70L*o1AO+|n5beiw~ zk@(>m?T3{2k2c;NWc^`4@P&Z?BjxXJ@;x1qhn)9Mn*IFdt_J-dIqx5#d`NfyfX~m( zIS~5)MfZ2Uy?_4W`47i}u0ZgPh<{D|w_d#;D}Q&U$Q-G}xM1A@1f{#%A$jh6Qp&0hQ<0bPOM z-{1Wm&p%%#eb_?x7i;bol EfAhh=DF6Tf diff --git a/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties b/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties deleted file mode 100644 index 642d572ce..000000000 --- a/spring-boot-demo-https/.mvn/wrapper/maven-wrapper.properties +++ /dev/null @@ -1,2 +0,0 @@ -distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.6.3/apache-maven-3.6.3-bin.zip -wrapperUrl=https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar diff --git a/spring-boot-demo-https/README.md b/spring-boot-demo-https/README.md index aab869f6d..c2078b05a 100644 --- a/spring-boot-demo-https/README.md +++ b/spring-boot-demo-https/README.md @@ -1,25 +1,24 @@ -# Getting Started +# spring-boot-demo-https -### Reference Documentation -For further reference, please consider the following sections: +> 此 demo 主要演示了 Spring Boot 如何集成 https -* [Official Apache Maven documentation](https://maven.apache.org/guides/index.html) -* [Spring Boot Maven Plugin Reference Guide](https://docs.spring.io/spring-boot/docs/2.2.2.RELEASE/maven-plugin/) +## 1. 生成证书 +首先使用 jdk 自带的 keytool 命令生成证书复制到项目的 `resources` 目录下（生成的证书一般在用户目录下 C:\Users\Administrator\server.keystore） - -1. 首先使用jdk 自带的keytool 命令生成证书(一般在用户目录下C:\Users\Administrator\server.keystore) 复制到项目中 > 自己生成的证书浏览器会有危险提示,去ssl网站上使用金钱申请则不会 ![ssl 命令截图](ssl.png) +## 2. 添加配置 + +1. 在配置文件配置生成的证书 -2. 然后添加配置 -```yml +```yaml server: ssl: # 证书路径 - key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-store: classpath:server.keystore key-alias: tomcat enabled: true key-store-type: JKS @@ -27,18 +26,27 @@ server: key-store-password: 123456 # 浏览器默认端口 和 80 类似 port: 443 -#debug: true - - ``` -3. 需要与http 自动跳转再添加bean +2. 配置 Tomcat ```java - +/** + *

+ * HTTPS 配置类 + *

+ * + * @author yangkai.shen + * @date Created in 2020/1/19 10:31 + */ +@Configuration +public class HttpsConfig { + /** + * 配置 http(80) -> 强制跳转到 https(443) + */ @Bean - public Connector connector(){ - Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + public Connector connector() { + Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol"); connector.setScheme("http"); connector.setPort(80); connector.setSecure(false); @@ -47,13 +55,13 @@ server: } @Bean - public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ - TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector) { + TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() { @Override protected void postProcessContext(Context context) { - SecurityConstraint securityConstraint=new SecurityConstraint(); + SecurityConstraint securityConstraint = new SecurityConstraint(); securityConstraint.setUserConstraint("CONFIDENTIAL"); - SecurityCollection collection=new SecurityCollection(); + SecurityCollection collection = new SecurityCollection(); collection.addPattern("/*"); securityConstraint.addCollection(collection); context.addConstraint(securityConstraint); @@ -62,7 +70,41 @@ server: tomcat.addAdditionalTomcatConnectors(connector); return tomcat; } - +} ``` +## 3. 测试 + +启动项目，浏览器访问 http://localhost 将自动跳转到 https://localhost + +## 4. 参考 + +- `keytool`命令参考 + +```bash +$ keytool --help +密钥和证书管理工具 + +命令: + + -certreq 生成证书请求 + -changealias 更改条目的别名 + -delete 删除条目 + -exportcert 导出证书 + -genkeypair 生成密钥对 + -genseckey 生成密钥 + -gencert 根据证书请求生成证书 + -importcert 导入证书或证书链 + -importpass 导入口令 + -importkeystore 从其他密钥库导入一个或所有条目 + -keypasswd 更改条目的密钥口令 + -list 列出密钥库中的条目 + -printcert 打印证书内容 + -printcertreq 打印证书请求的内容 + -printcrl 打印 CRL 文件的内容 + -storepasswd 更改密钥库的存储口令 + +使用 "keytool -command_name -help" 获取 command_name 的用法 +``` +- [Java Keytool工具简介](https://blog.csdn.net/liumiaocn/article/details/61921014) \ No newline at end of file diff --git a/spring-boot-demo-https/pom.xml b/spring-boot-demo-https/pom.xml index d90ec5eff..bfd1b354a 100644 --- a/spring-boot-demo-https/pom.xml +++ b/spring-boot-demo-https/pom.xml @@ -3,13 +3,11 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"> 4.0.0 - com.xkcoding spring-boot-demo-https 0.0.1-SNAPSHOT spring-boot-demo-https Demo project for Spring Boot - com.xkcoding spring-boot-demo @@ -23,10 +21,6 @@ - - org.springframework.boot - spring-boot-starter - org.springframework.boot spring-boot-starter-web @@ -35,12 +29,6 @@ org.springframework.boot spring-boot-starter-test test - - - org.junit.vintage - junit-vintage-engine - - diff --git a/spring-boot-demo-https/src/main/java/com/xkcoding/https/SpringBootDemoHttpsApplication.java b/spring-boot-demo-https/src/main/java/com/xkcoding/https/SpringBootDemoHttpsApplication.java new file mode 100644 index 000000000..8a960690e --- /dev/null +++ b/spring-boot-demo-https/src/main/java/com/xkcoding/https/SpringBootDemoHttpsApplication.java @@ -0,0 +1,21 @@ +package com.xkcoding.https; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; + +/** + *

+ * 启动类 + *

+ * + * @author Chen.Chao + * @date Created in 2020/1/12 10:31 + */ +@SpringBootApplication +public class SpringBootDemoHttpsApplication { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoHttpsApplication.class, args); + } + +} diff --git a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java b/spring-boot-demo-https/src/main/java/com/xkcoding/https/config/HttpsConfig.java similarity index 52% rename from spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java rename to spring-boot-demo-https/src/main/java/com/xkcoding/https/config/HttpsConfig.java index be323c3e5..3d8b9a39a 100644 --- a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java +++ b/spring-boot-demo-https/src/main/java/com/xkcoding/https/config/HttpsConfig.java @@ -1,39 +1,29 @@ -package com.xkcoding.springbootdemohttps; +package com.xkcoding.https.config; import org.apache.catalina.Context; import org.apache.catalina.connector.Connector; import org.apache.tomcat.util.descriptor.web.SecurityCollection; import org.apache.tomcat.util.descriptor.web.SecurityConstraint; -import org.springframework.boot.SpringApplication; -import org.springframework.boot.autoconfigure.SpringBootApplication; import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory; import org.springframework.context.annotation.Bean; - +import org.springframework.context.annotation.Configuration; /** *

- * SpringBoot启动类 + * HTTPS 配置类 *

* - * @package: com.xkcoding.https - * @description: SpringBoot启动类 - * @author: Chen.Chao - * @date 2020.01.12 10:31 am - * @copyright: Copyright (c) - * @version: V1.0 - * @modified: Chen.Chao + * @author Chen.Chao + * @date Created in 2020/1/12 10:31 */ -@SpringBootApplication -public class SpringBootDemoHttpsApplication { - - public static void main(String[] args) { - SpringApplication.run(SpringBootDemoHttpsApplication.class, args); - } - - +@Configuration +public class HttpsConfig { + /** + * 配置 http(80) -> 强制跳转到 https(443) + */ @Bean - public Connector connector(){ - Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + public Connector connector() { + Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol"); connector.setScheme("http"); connector.setPort(80); connector.setSecure(false); @@ -42,13 +32,13 @@ public Connector connector(){ } @Bean - public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ - TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector) { + TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() { @Override protected void postProcessContext(Context context) { - SecurityConstraint securityConstraint=new SecurityConstraint(); + SecurityConstraint securityConstraint = new SecurityConstraint(); securityConstraint.setUserConstraint("CONFIDENTIAL"); - SecurityCollection collection=new SecurityCollection(); + SecurityCollection collection = new SecurityCollection(); collection.addPattern("/*"); securityConstraint.addCollection(collection); context.addConstraint(securityConstraint); @@ -57,6 +47,4 @@ protected void postProcessContext(Context context) { tomcat.addAdditionalTomcatConnectors(connector); return tomcat; } - - } diff --git a/spring-boot-demo-https/src/main/resources/application.yml b/spring-boot-demo-https/src/main/resources/application.yml index d6d2def4b..21ad6fc14 100644 --- a/spring-boot-demo-https/src/main/resources/application.yml +++ b/spring-boot-demo-https/src/main/resources/application.yml @@ -1,7 +1,7 @@ server: ssl: # 证书路径 - key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-store: classpath:server.keystore key-alias: tomcat enabled: true key-store-type: JKS @@ -9,4 +9,3 @@ server: key-store-password: 123456 # 浏览器默认端口 和 80 类似 port: 443 -#debug: true diff --git a/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java b/spring-boot-demo-https/src/test/java/com/xkcoding/https/SpringBootDemoHttpsApplicationTests.java similarity index 82% rename from spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java rename to spring-boot-demo-https/src/test/java/com/xkcoding/https/SpringBootDemoHttpsApplicationTests.java index ce62f8353..b8b343ef2 100644 --- a/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java +++ b/spring-boot-demo-https/src/test/java/com/xkcoding/https/SpringBootDemoHttpsApplicationTests.java @@ -1,4 +1,4 @@ -package com.xkcoding.springbootdemohttps; +package com.xkcoding.https; import org.junit.Test; import org.springframework.boot.test.context.SpringBootTest; From c93b47d57abccce518097fe4f2f1c41f9b52ca62 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Sun, 19 Jan 2020 10:45:24 +0800 Subject: [PATCH 09/16] =?UTF-8?q?:memo:=20=E6=9B=B4=E6=96=B0TODO.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- TODO.en.md | 4 ++-- TODO.md | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/TODO.en.md b/TODO.en.md index 6ec589134..65c4a796d 100644 --- a/TODO.en.md +++ b/TODO.en.md @@ -1,6 +1,6 @@ # spring-boot-demo Project TODO List -## Module plan (completed: 52 / 65) +## Module plan (completed: 53 / 65) - [x] ~~spring-boot-demo-helloworld(helloworld example)~~ - [x] ~~spring-boot-demo-properties (read configuration file information)~~ @@ -63,7 +63,7 @@ - [x] ~~spring-boot-demo-dynamic-datasource（add datasource dynamically, switch datasource dynamically）~~ - [x] ~~spring-boot-demo-ratelimit-guava（use Guava RateLimiter to protect API by standalone rate limiting）~~ - [x] ~~spring-boot-demo-ratelimit-redis（use Redis and Lua script implementation to protect API by distributed rate limiting）~~ -- [ ] spring-boot-demo-https（integrated HTTPS） +- [x] ~~spring-boot-demo-https（integrated HTTPS）~~ - [x] ~~spring-boot-demo-elasticsearch-rest-high-level-client（integrated Elasticsearch 7.x version，use official Rest High Level Client to operate ES data）~~ - [ ] spring-boot-demo-springbatch（data process） - [ ] spring-boot-demo-security-justauth（use JustAuth to login GitHub，and use Spring-Security to manage login state） diff --git a/TODO.md b/TODO.md index 633aacba8..1e7371ad7 100644 --- a/TODO.md +++ b/TODO.md @@ -1,6 +1,6 @@ # spring-boot-demo 项目待办列表 -## 模块计划(已完成：52 / 65) +## 模块计划(已完成：53 / 65) - [x] ~~spring-boot-demo-helloworld（Helloworld 示例）~~ - [x] ~~spring-boot-demo-properties（读取配置文件信息）~~ @@ -63,7 +63,7 @@ - [x] ~~spring-boot-demo-dynamic-datasource（动态添加数据源，切换数据源）~~ - [x] ~~spring-boot-demo-ratelimit-guava（单机限流保护API，集成 Guava 的 RateLimiter）~~ - [x] ~~spring-boot-demo-ratelimit-redis（分布式限流保护API，使用 Redis + lua 脚本实现）~~ -- [ ] spring-boot-demo-https（集成 HTTPS） +- [x] ~~spring-boot-demo-https（集成 HTTPS）~~ - [x] ~~spring-boot-demo-elasticsearch-rest-high-level-client（集成 Elasticsearch 7.x 版本，使用官方 rest high level client操作 ES 数据）~~ - [ ] spring-boot-demo-springbatch（数据处理） - [ ] spring-boot-demo-security-justauth（使用 JustAuth 登录 GitHub，使用 Security 管理登录状态） From 6ae8d6163c123ae1dba05ecadc53eede52691aea Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Sun, 19 Jan 2020 10:45:50 +0800 Subject: [PATCH 10/16] =?UTF-8?q?:memo:=20=E6=9B=B4=E6=96=B0README.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.en.md | 23 +++++++++++++++++++---- README.md | 23 +++++++++++++++++++---- 2 files changed, 38 insertions(+), 8 deletions(-) diff --git a/README.en.md b/README.en.md index bdf66d93d..ba930c6c3 100644 --- a/README.en.md +++ b/README.en.md @@ -20,9 +20,9 @@ ## Introduction -`spring boot demo` is a project for learning and practicing `spring boot`, including `65` demos, and `52` of them have been done. +`spring boot demo` is a project for learning and practicing `spring boot`, including `65` demos, and `53` of them have been done. -This project has integrated actuator (`monitoring`), admin (`visual monitoring`), logback (`log`), aopLog (`recording web request logs through AOP`), global exception handling (`json level and page level` ), freemarker (`template engine`), thymeleaf (`template engine`), Beetl (`template engine`), Enjoy (`template engine`), JdbcTemplate (`general JDBC operate database`), JPA (`powerful ORM framework `), mybatis (`powerful ORM framework`), Generic Mapper (`mybatis quick operation `), PageHelper (`powerful mybatis pagination plugin`), mybatis-plus (`mybatis quick operation`), BeetlSQL (`powerful ORM framework `), upload (`local file upload and qiniu cloud file upload`), redis (`cache`), ehcache (`cache`), email (`send various types of mail`), task (`basic scheduled tasks`), quartz (`dynamic management scheduled tasks`), xxl-job (`distributed scheduled tasks`), swagger (`API interface management and tests`), security (`RBAC-based Dynamic Rights Authentication`), SpringSession (`session sharing`), Zookeeper (`implement distributed locks by AOP`), RabbitMQ (`message queue`), Kafka (`message queue`), websocket (` server pushes the monitoring server status to front end `), socket.io (`chat room`), ureport2 (`Chinese-style report`), packaged into a `war` file, integrate ElasticSearch (`basic operations and advanced queries`), Async ( `asynchronous tasks`), integrated Dubbo (`with official starter`), MongoDB (`document database`), neo4j (`graph database`), docker (`container`), `JPA Multi-Datasource`, `Mybatis Multi-Datasource`, `code generator`', GrayLog (`log collection`), JustAuth (`third-party login`), LDAP(`CURD`), `Dynamically add/switch datasources`, Standalone RateLimiting(`AOP + Guava RateLimiter`), Distributed Ratelimiting(`AOP + Redis + Lua`), ElasticSearch 7.x(`use official Rest High Level Client`). +This project has integrated actuator (`monitoring`), admin (`visual monitoring`), logback (`log`), aopLog (`recording web request logs through AOP`), global exception handling (`json level and page level` ), freemarker (`template engine`), thymeleaf (`template engine`), Beetl (`template engine`), Enjoy (`template engine`), JdbcTemplate (`general JDBC operate database`), JPA (`powerful ORM framework `), mybatis (`powerful ORM framework`), Generic Mapper (`mybatis quick operation `), PageHelper (`powerful mybatis pagination plugin`), mybatis-plus (`mybatis quick operation`), BeetlSQL (`powerful ORM framework `), upload (`local file upload and qiniu cloud file upload`), redis (`cache`), ehcache (`cache`), email (`send various types of mail`), task (`basic scheduled tasks`), quartz (`dynamic management scheduled tasks`), xxl-job (`distributed scheduled tasks`), swagger (`API interface management and tests`), security (`RBAC-based Dynamic Rights Authentication`), SpringSession (`session sharing`), Zookeeper (`implement distributed locks by AOP`), RabbitMQ (`message queue`), Kafka (`message queue`), websocket (` server pushes the monitoring server status to front end `), socket.io (`chat room`), ureport2 (`Chinese-style report`), packaged into a `war` file, integrate ElasticSearch (`basic operations and advanced queries`), Async ( `asynchronous tasks`), integrated Dubbo (`with official starter`), MongoDB (`document database`), neo4j (`graph database`), docker (`container`), `JPA Multi-Datasource`, `Mybatis Multi-Datasource`, `code generator`', GrayLog (`log collection`), JustAuth (`third-party login`), LDAP(`CURD`), `Dynamically add/switch datasources`, Standalone RateLimiting(`AOP + Guava RateLimiter`), Distributed Ratelimiting(`AOP + Redis + Lua`), ElasticSearch 7.x(`use official Rest High Level Client`), HTTPS. > If you have demos to contribute or needs to meet, it is very welcome to submit a [issue](https://github.com/xkcoding/spring-boot-demo/issues/new) and I will add it to my [TODO](./TODO.en.md) list. @@ -123,7 +123,7 @@ View the [TODO](./TODO.en.md) file | [spring-boot-demo-dynamic-datasource](./spring-boot-demo-dynamic-datasource) | a demo to add datasource dynamically, switch datasource dynamically. | | [spring-boot-demo-ratelimit-guava](./spring-boot-demo-ratelimit-guava) | a demo to use use Guava RateLimiter to protect API by standalone rate limiting. | | [spring-boot-demo-ratelimit-redis](./spring-boot-demo-ratelimit-redis) | a demo to use Redis and Lua script implementation to protect API by distributed rate limiting. | -| spring-boot-demo-https | NOT FINISHED YET!
a demo to integrate HTTPS. | +| [spring-boot-demo-https](./spring-boot-demo-https) | a demo to integrate HTTPS. | | [spring-boot-demo-elasticsearch-rest-high-level-client](./spring-boot-demo-elasticsearch-rest-high-level-client) | a demo to integrate ElasticSearch 7.x version by using official Rest High Level Client to operate ES data. | ## License @@ -210,6 +210,7 @@ Copyright (c) 2018 Yangkai.Shen spring-boot-demo-ratelimit-guava spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client + spring-boot-demo-https pom @@ -224,11 +225,25 @@ Copyright (c) 2018 Yangkai.Shen 1.8 2.1.0.RELEASE 8.0.12 - 4.6.6 + 5.0.0 28.1-jre 1.20 + + + aliyun + aliyun + https://maven.aliyun.com/repository/public + + true + + + false + + + + diff --git a/README.md b/README.md index 8fc47d039..db24aafac 100644 --- a/README.md +++ b/README.md @@ -20,9 +20,9 @@ ## 项目简介 -`spring boot demo` 是一个用来深度学习并实战 `spring boot` 的项目，目前总共包含 **`65`** 个集成demo，已经完成 **`52`** 个。 +`spring boot demo` 是一个用来深度学习并实战 `spring boot` 的项目，目前总共包含 **`65`** 个集成demo，已经完成 **`53`** 个。 -该项目已成功集成 actuator(`监控`)、admin(`可视化监控`)、logback(`日志`)、aopLog(`通过AOP记录web请求日志`)、统一异常处理(`json级别和页面级别`)、freemarker(`模板引擎`)、thymeleaf(`模板引擎`)、Beetl(`模板引擎`)、Enjoy(`模板引擎`)、JdbcTemplate(`通用JDBC操作数据库`)、JPA(`强大的ORM框架`)、mybatis(`强大的ORM框架`)、通用Mapper(`快速操作Mybatis`)、PageHelper(`通用的Mybatis分页插件`)、mybatis-plus(`快速操作Mybatis`)、BeetlSQL(`强大的ORM框架`)、upload(`本地文件上传和七牛云文件上传`)、redis(`缓存`)、ehcache(`缓存`)、email(`发送各种类型邮件`)、task(`基础定时任务`)、quartz(`动态管理定时任务`)、xxl-job(`分布式定时任务`)、swagger(`API接口管理测试`)、security(`基于RBAC的动态权限认证`)、SpringSession(`Session共享`)、Zookeeper(`结合AOP实现分布式锁`)、RabbitMQ(`消息队列`)、Kafka(`消息队列`)、websocket(`服务端推送监控服务器运行信息`)、socket.io(`聊天室`)、ureport2(`中国式报表`)、打包成`war`文件、集成 ElasticSearch(`基本操作和高级查询`)、Async(`异步任务`)、集成Dubbo(`采用官方的starter`)、MongoDB(`文档数据库`)、neo4j(`图数据库`)、docker(`容器化`)、`JPA多数据源`、`Mybatis多数据源`、`代码生成器`、GrayLog(`日志收集`)、JustAuth(`第三方登录`)、LDAP(`增删改查`)、`动态添加/切换数据源`、单机限流(`AOP + Guava RateLimiter`)、分布式限流(`AOP + Redis + Lua`)、ElasticSearch 7.x(`使用官方 Rest High Level Client`)。 +该项目已成功集成 actuator(`监控`)、admin(`可视化监控`)、logback(`日志`)、aopLog(`通过AOP记录web请求日志`)、统一异常处理(`json级别和页面级别`)、freemarker(`模板引擎`)、thymeleaf(`模板引擎`)、Beetl(`模板引擎`)、Enjoy(`模板引擎`)、JdbcTemplate(`通用JDBC操作数据库`)、JPA(`强大的ORM框架`)、mybatis(`强大的ORM框架`)、通用Mapper(`快速操作Mybatis`)、PageHelper(`通用的Mybatis分页插件`)、mybatis-plus(`快速操作Mybatis`)、BeetlSQL(`强大的ORM框架`)、upload(`本地文件上传和七牛云文件上传`)、redis(`缓存`)、ehcache(`缓存`)、email(`发送各种类型邮件`)、task(`基础定时任务`)、quartz(`动态管理定时任务`)、xxl-job(`分布式定时任务`)、swagger(`API接口管理测试`)、security(`基于RBAC的动态权限认证`)、SpringSession(`Session共享`)、Zookeeper(`结合AOP实现分布式锁`)、RabbitMQ(`消息队列`)、Kafka(`消息队列`)、websocket(`服务端推送监控服务器运行信息`)、socket.io(`聊天室`)、ureport2(`中国式报表`)、打包成`war`文件、集成 ElasticSearch(`基本操作和高级查询`)、Async(`异步任务`)、集成Dubbo(`采用官方的starter`)、MongoDB(`文档数据库`)、neo4j(`图数据库`)、docker(`容器化`)、`JPA多数据源`、`Mybatis多数据源`、`代码生成器`、GrayLog(`日志收集`)、JustAuth(`第三方登录`)、LDAP(`增删改查`)、`动态添加/切换数据源`、单机限流(`AOP + Guava RateLimiter`)、分布式限流(`AOP + Redis + Lua`)、ElasticSearch 7.x(`使用官方 Rest High Level Client`)、HTTPS。 > 如果大家还有想要集成的demo，也可在 [issue](https://github.com/xkcoding/spring-boot-demo/issues/new) 里提需求。我会额外添加在 [TODO](./TODO.md) 列表里。✊ @@ -123,7 +123,7 @@ | [spring-boot-demo-dynamic-datasource](./spring-boot-demo-dynamic-datasource) | spring-boot 动态添加数据源、动态切换数据源 | | [spring-boot-demo-ratelimit-guava](./spring-boot-demo-ratelimit-guava) | spring-boot 使用 Guava RateLimiter 实现单机版限流，保护 API | | [spring-boot-demo-ratelimit-redis](./spring-boot-demo-ratelimit-redis) | spring-boot 使用 Redis + Lua 脚本实现分布式限流，保护 API | -| spring-boot-demo-https | spring-boot 集成 HTTPS
待完成 | +| [spring-boot-demo-https](./spring-boot-demo-https) | spring-boot 集成 HTTPS | | [spring-boot-demo-elasticsearch-rest-high-level-client](./spring-boot-demo-elasticsearch-rest-high-level-client) | spring boot 集成 ElasticSearch 7.x 版本，使用官方 Rest High Level Client 操作 ES 数据 | ## License @@ -210,6 +210,7 @@ Copyright (c) 2018 Yangkai.Shen spring-boot-demo-ratelimit-guava spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client + spring-boot-demo-https pom @@ -224,11 +225,25 @@ Copyright (c) 2018 Yangkai.Shen 1.8 2.1.0.RELEASE 8.0.12 - 4.6.6 + 5.0.0 28.1-jre 1.20 + + + aliyun + aliyun + https://maven.aliyun.com/repository/public + + true + + + false + + + + From a682832cad474faaab57fe2a3048b399ec88dcc3 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Mon, 10 Feb 2020 16:50:55 +0800 Subject: [PATCH 11/16] =?UTF-8?q?:memo:=20=E4=BF=AE=E5=A4=8D=20[ISSUE#99](?= =?UTF-8?q?https://github.com/xkcoding/spring-boot-demo/issues/99)?= =?UTF-8?q?=EF=BC=8C=E6=96=87=E6=A1=A3=E9=94=99=E8=AF=AF?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- spring-boot-demo-template-enjoy/README.md | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/spring-boot-demo-template-enjoy/README.md b/spring-boot-demo-template-enjoy/README.md index 3a91829e1..4994129ca 100644 --- a/spring-boot-demo-template-enjoy/README.md +++ b/spring-boot-demo-template-enjoy/README.md @@ -10,11 +10,11 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> 4.0.0 - spring-boot-demo-template-beetl + spring-boot-demo-template-enjoy 1.0.0-SNAPSHOT jar - spring-boot-demo-template-beetl + spring-boot-demo-template-enjoy Demo project for Spring Boot @@ -27,16 +27,10 @@ UTF-8 UTF-8 1.8 - 1.1.63.RELEASE + 3.5 - - com.ibeetl - beetl-framework-starter - ${ibeetl.version} - - org.springframework.boot spring-boot-starter-web @@ -48,6 +42,12 @@ test + + com.jfinal + enjoy + ${enjoy.version} + + org.projectlombok lombok @@ -61,7 +61,7 @@ - spring-boot-demo-template-beetl + spring-boot-demo-template-enjoy org.springframework.boot From f02ac795daf32a072a6fc8117a51b9a376471da9 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Thu, 5 Mar 2020 11:03:20 +0800 Subject: [PATCH 12/16] =?UTF-8?q?:sparkles:=20spring-boot-demo-flyway=20?= =?UTF-8?q?=E5=AE=8C=E6=88=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pom.xml | 1 + spring-boot-demo-flyway/.gitignore | 29 +++++++++ spring-boot-demo-flyway/pom.xml | 65 +++++++++++++++++++ .../SpringBootDemoFlywayApplication.java | 21 ++++++ .../src/main/resources/application.yml | 14 ++++ .../resources/db/migration/V1_0__INIT.sql | 17 +++++ .../resources/db/migration/V1_1__ALTER.sql | 1 + .../src/test/java/com/xkcoding/AppTest.java | 20 ++++++ 8 files changed, 168 insertions(+) create mode 100644 spring-boot-demo-flyway/.gitignore create mode 100644 spring-boot-demo-flyway/pom.xml create mode 100644 spring-boot-demo-flyway/src/main/java/com/xkcoding/flyway/SpringBootDemoFlywayApplication.java create mode 100644 spring-boot-demo-flyway/src/main/resources/application.yml create mode 100644 spring-boot-demo-flyway/src/main/resources/db/migration/V1_0__INIT.sql create mode 100644 spring-boot-demo-flyway/src/main/resources/db/migration/V1_1__ALTER.sql create mode 100644 spring-boot-demo-flyway/src/test/java/com/xkcoding/AppTest.java diff --git a/pom.xml b/pom.xml index d8ca386a0..532d379df 100644 --- a/pom.xml +++ b/pom.xml @@ -68,6 +68,7 @@ spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client spring-boot-demo-https + spring-boot-demo-flyway pom diff --git a/spring-boot-demo-flyway/.gitignore b/spring-boot-demo-flyway/.gitignore new file mode 100644 index 000000000..153c9335e --- /dev/null +++ b/spring-boot-demo-flyway/.gitignore @@ -0,0 +1,29 @@ +HELP.md +/target/ +!.mvn/wrapper/maven-wrapper.jar + +### STS ### +.apt_generated +.classpath +.factorypath +.project +.settings +.springBeans +.sts4-cache + +### IntelliJ IDEA ### +.idea +*.iws +*.iml +*.ipr + +### NetBeans ### +/nbproject/private/ +/nbbuild/ +/dist/ +/nbdist/ +/.nb-gradle/ +/build/ + +### VS Code ### +.vscode/ diff --git a/spring-boot-demo-flyway/pom.xml b/spring-boot-demo-flyway/pom.xml new file mode 100644 index 000000000..802f67b1b --- /dev/null +++ b/spring-boot-demo-flyway/pom.xml @@ -0,0 +1,65 @@ + + + 4.0.0 + + spring-boot-demo-flyway + 1.0.0-SNAPSHOT + jar + + spring-boot-demo-flyway + Demo project for Spring Boot + + + com.xkcoding + spring-boot-demo + 1.0.0-SNAPSHOT + + + + UTF-8 + UTF-8 + 1.8 + + + + + org.springframework.boot + spring-boot-starter-web + + + + org.springframework.boot + spring-boot-starter-test + test + + + + + org.flywaydb + flyway-core + + + + org.springframework.boot + spring-boot-starter-data-jdbc + + + + mysql + mysql-connector-java + runtime + + + + + spring-boot-demo-flyway + + + org.springframework.boot + spring-boot-maven-plugin + + + + + diff --git a/spring-boot-demo-flyway/src/main/java/com/xkcoding/flyway/SpringBootDemoFlywayApplication.java b/spring-boot-demo-flyway/src/main/java/com/xkcoding/flyway/SpringBootDemoFlywayApplication.java new file mode 100644 index 000000000..7a300bc45 --- /dev/null +++ b/spring-boot-demo-flyway/src/main/java/com/xkcoding/flyway/SpringBootDemoFlywayApplication.java @@ -0,0 +1,21 @@ +package com.xkcoding.flyway; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; + +/** + *

+ * 启动器 + *

+ * + * @author yangkai.shen + * @date Created in 2020/3/4 18:30 + */ +@SpringBootApplication +public class SpringBootDemoFlywayApplication { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoFlywayApplication.class, args); + } + +} diff --git a/spring-boot-demo-flyway/src/main/resources/application.yml b/spring-boot-demo-flyway/src/main/resources/application.yml new file mode 100644 index 000000000..7c32fe96b --- /dev/null +++ b/spring-boot-demo-flyway/src/main/resources/application.yml @@ -0,0 +1,14 @@ +spring: + flyway: + enabled: true + # 迁移前校验 SQL 文件是否存在问题 + validate-on-migrate: true + # 生产环境一定要关闭 + clean-disabled: true + # 校验路径下是否存在 SQL 文件 + check-location: false + datasource: + url: jdbc:mysql://127.0.0.1:3306/flyway-test?useSSL=false + username: root + password: root + type: com.zaxxer.hikari.HikariDataSource diff --git a/spring-boot-demo-flyway/src/main/resources/db/migration/V1_0__INIT.sql b/spring-boot-demo-flyway/src/main/resources/db/migration/V1_0__INIT.sql new file mode 100644 index 000000000..6d8cd6fc9 --- /dev/null +++ b/spring-boot-demo-flyway/src/main/resources/db/migration/V1_0__INIT.sql @@ -0,0 +1,17 @@ +DROP TABLE IF EXISTS `t_user`; +CREATE TABLE `t_user` ( + `id` int(11) NOT NULL AUTO_INCREMENT COMMENT '主键', + `username` varchar(32) NOT NULL COMMENT '用户名', + `password` varchar(32) NOT NULL COMMENT '加密后的密码', + `salt` varchar(32) NOT NULL COMMENT '加密使用的盐', + `email` varchar(32) NOT NULL COMMENT '邮箱', + `phone_number` varchar(15) NOT NULL COMMENT '手机号码', + `status` int(2) NOT NULL DEFAULT '1' COMMENT '状态，-1：逻辑删除，0：禁用，1：启用', + `create_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + `last_login_time` datetime DEFAULT NULL COMMENT '上次登录时间', + `last_update_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '上次更新时间', + PRIMARY KEY (`id`), + UNIQUE KEY `username` (`username`), + UNIQUE KEY `email` (`email`), + UNIQUE KEY `phone_number` (`phone_number`) +) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COMMENT='1.0-用户表'; diff --git a/spring-boot-demo-flyway/src/main/resources/db/migration/V1_1__ALTER.sql b/spring-boot-demo-flyway/src/main/resources/db/migration/V1_1__ALTER.sql new file mode 100644 index 000000000..4cfbafb69 --- /dev/null +++ b/spring-boot-demo-flyway/src/main/resources/db/migration/V1_1__ALTER.sql @@ -0,0 +1 @@ +ALTER TABLE t_user COMMENT = '用户 v1.1'; \ No newline at end of file diff --git a/spring-boot-demo-flyway/src/test/java/com/xkcoding/AppTest.java b/spring-boot-demo-flyway/src/test/java/com/xkcoding/AppTest.java new file mode 100644 index 000000000..16a8ef2c9 --- /dev/null +++ b/spring-boot-demo-flyway/src/test/java/com/xkcoding/AppTest.java @@ -0,0 +1,20 @@ +package com.xkcoding; + +import static org.junit.Assert.assertTrue; + +import org.junit.Test; + +/** + * Unit test for simple App. + */ +public class AppTest +{ + /** + * Rigorous Test :-) + */ + @Test + public void shouldAnswerWithTrue() + { + assertTrue( true ); + } +} From 16878d17a630e8f03a97e5204255e28016a00f16 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Thu, 5 Mar 2020 11:03:42 +0800 Subject: [PATCH 13/16] =?UTF-8?q?:sparkles:=20spring-boot-demo-flyway=20?= =?UTF-8?q?=E5=AE=8C=E6=88=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- spring-boot-demo-flyway/README.md | 148 ++++++++++++++++++ .../assets/image-20200305105632047.png | Bin 0 -> 17411 bytes .../assets/image-20200305105958181.png | Bin 0 -> 17041 bytes .../assets/image-20200305110057768.png | Bin 0 -> 33384 bytes .../assets/image-20200305110147176.png | Bin 0 -> 23440 bytes 5 files changed, 148 insertions(+) create mode 100644 spring-boot-demo-flyway/README.md create mode 100644 spring-boot-demo-flyway/assets/image-20200305105632047.png create mode 100644 spring-boot-demo-flyway/assets/image-20200305105958181.png create mode 100644 spring-boot-demo-flyway/assets/image-20200305110057768.png create mode 100644 spring-boot-demo-flyway/assets/image-20200305110147176.png diff --git a/spring-boot-demo-flyway/README.md b/spring-boot-demo-flyway/README.md new file mode 100644 index 000000000..2186aaec0 --- /dev/null +++ b/spring-boot-demo-flyway/README.md @@ -0,0 +1,148 @@ +# spring-boot-demo-flyway + +> 本 demo 演示了 Spring Boot 如何使用 Flyway 去初始化项目数据库，同时支持数据库脚本的版本控制。 + +## 1. 添加依赖 + +- Flyway 依赖 + +```xml + + + org.flywaydb + flyway-core + +``` + +- 初始化表结构，需要操作数据库，因此引入数据库驱动以及数据源依赖（这里用 spring-boot-starter-data-jdbc） + +```xml + + org.springframework.boot + spring-boot-starter-data-jdbc + + + + mysql + mysql-connector-java + runtime + +``` + +## 2. Flyway 知识补充 + +1. Flyway 默认会去读取 `classpath:db/migration`，可以通过 `spring.flyway.locations` 去指定自定义路径，多个路径使用半角英文逗号分隔，内部资源使用 `classpath:`，外部资源使用 `file:` + +2. 如果项目初期没有数据库文件，但是又引用了 Flyway，那么在项目启动的时候，Flyway 会去检查是否存在 SQL 文件，此时你需要将这个检查关闭，`spring.flyway.check-location = false` + +3. Flyway 会在项目初次启动的时候创建一张名为 `flyway_schema_history` 的表，在这张表里记录数据库脚本执行的历史记录，当然，你可以通过 `spring.flyway.table` 去修改这个值 + +4. Flyway 执行的 SQL 脚本必须遵循一种命名规则，`V__.sql` 首先是 `V` ，然后是版本号，如果版本号有多个数字，使用`_`分隔，比如`1_0`、`1_1`，版本号的后面是 2 个下划线，最后是 SQL 脚本的名称。 + + **这里需要注意：V 开头的只会执行一次，下次项目启动不会执行，也不可以修改原始文件，否则项目启动会报错，如果需要对 V 开头的脚本做修改，需要清空`flyway_schema_history`表，如果有个 SQL 脚本需要在每次启动的时候都执行，那么将 V 改为 `R` 开头即可** + +5. Flyway 默认情况下会去清空原始库，再重新执行 SQL 脚本，这在生产环境下是不可取的，因此需要将这个配置关闭，`spring.flyway.clean-disabled = true` + +## 3. application.yml 配置 + +> 贴出我的 application.yml 配置 + +```yaml +spring: + flyway: + enabled: true + # 迁移前校验 SQL 文件是否存在问题 + validate-on-migrate: true + # 生产环境一定要关闭 + clean-disabled: true + # 校验路径下是否存在 SQL 文件 + check-location: false + datasource: + url: jdbc:mysql://127.0.0.1:3306/flyway-test?useSSL=false + username: root + password: root + type: com.zaxxer.hikari.HikariDataSource +``` + +## 4. 测试 + +### 4.1. 测试 1.0 版本的 SQL 脚本 + +创建 `V1_0__INIT.sql` + +```mysql +DROP TABLE IF EXISTS `t_user`; +CREATE TABLE `t_user` ( + `id` int(11) NOT NULL AUTO_INCREMENT COMMENT '主键', + `username` varchar(32) NOT NULL COMMENT '用户名', + `password` varchar(32) NOT NULL COMMENT '加密后的密码', + `salt` varchar(32) NOT NULL COMMENT '加密使用的盐', + `email` varchar(32) NOT NULL COMMENT '邮箱', + `phone_number` varchar(15) NOT NULL COMMENT '手机号码', + `status` int(2) NOT NULL DEFAULT '1' COMMENT '状态，-1：逻辑删除，0：禁用，1：启用', + `create_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + `last_login_time` datetime DEFAULT NULL COMMENT '上次登录时间', + `last_update_time` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '上次更新时间', + PRIMARY KEY (`id`), + UNIQUE KEY `username` (`username`), + UNIQUE KEY `email` (`email`), + UNIQUE KEY `phone_number` (`phone_number`) +) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COMMENT='1.0-用户表'; +``` + +启动项目，可以看到日志输出： + +```java +2020-03-05 10:48:37.799 INFO 3351 --- [ main] o.f.c.internal.license.VersionPrinter : Flyway Community Edition 5.2.1 by Boxfuse +2020-03-05 10:48:37.802 INFO 3351 --- [ main] com.zaxxer.hikari.HikariDataSource : HikariPool-1 - Starting... +2020-03-05 10:48:37.971 INFO 3351 --- [ main] com.zaxxer.hikari.HikariDataSource : HikariPool-1 - Start completed. +2020-03-05 10:48:37.974 INFO 3351 --- [ main] o.f.c.internal.database.DatabaseFactory : Database: jdbc:mysql://127.0.0.1:3306/flyway-test (MySQL 5.7) +2020-03-05 10:48:38.039 INFO 3351 --- [ main] o.f.core.internal.command.DbValidate : Successfully validated 1 migration (execution time 00:00.015s) +2020-03-05 10:48:38.083 INFO 3351 --- [ main] o.f.c.i.s.JdbcTableSchemaHistory : Creating Schema History table: `flyway-test`.`flyway_schema_history` +2020-03-05 10:48:38.143 INFO 3351 --- [ main] o.f.core.internal.command.DbMigrate : Current version of schema `flyway-test`: << Empty Schema >> +2020-03-05 10:48:38.144 INFO 3351 --- [ main] o.f.core.internal.command.DbMigrate : Migrating schema `flyway-test` to version 1.0 - INIT +2020-03-05 10:48:38.156 WARN 3351 --- [ main] o.f.c.i.s.DefaultSqlScriptExecutor : DB: Unknown table 'flyway-test.t_user' (SQL State: 42S02 - Error Code: 1051) +2020-03-05 10:48:38.183 INFO 3351 --- [ main] o.f.core.internal.command.DbMigrate : Successfully applied 1 migration to schema `flyway-test` (execution time 00:00.100s) +``` + +检查数据库，发现创建了 2 张表，一张是 Flyway 依赖的历史表，另一张就是我们的 `t_user` 表 + +image-20200305105632047 + +查看下 `flyway-schema-history` 表 + +image-20200305110147176 + +### 4.2. 测试 1.1 版本的 SQL 脚本 + +创建 `V1_1__ALTER.sql` + +```mysql +ALTER TABLE t_user COMMENT = '用户 v1.1'; +``` + +启动项目，可以看到日志输出： + +```java +2020-03-05 10:59:02.279 INFO 3536 --- [ main] o.f.c.internal.license.VersionPrinter : Flyway Community Edition 5.2.1 by Boxfuse +2020-03-05 10:59:02.282 INFO 3536 --- [ main] com.zaxxer.hikari.HikariDataSource : HikariPool-1 - Starting... +2020-03-05 10:59:02.442 INFO 3536 --- [ main] com.zaxxer.hikari.HikariDataSource : HikariPool-1 - Start completed. +2020-03-05 10:59:02.445 INFO 3536 --- [ main] o.f.c.internal.database.DatabaseFactory : Database: jdbc:mysql://127.0.0.1:3306/flyway-test (MySQL 5.7) +2020-03-05 10:59:02.530 INFO 3536 --- [ main] o.f.core.internal.command.DbValidate : Successfully validated 2 migrations (execution time 00:00.018s) +2020-03-05 10:59:02.538 INFO 3536 --- [ main] o.f.core.internal.command.DbMigrate : Current version of schema `flyway-test`: 1.0 +2020-03-05 10:59:02.538 INFO 3536 --- [ main] o.f.core.internal.command.DbMigrate : Migrating schema `flyway-test` to version 1.1 - ALTER +2020-03-05 10:59:02.564 INFO 3536 --- [ main] o.f.core.internal.command.DbMigrate : Successfully applied 1 migration to schema `flyway-test` (execution time 00:00.029s) +``` + +检查数据库，可以发现 `t_user` 表的注释已经更新 + +image-20200305105958181 + +查看下 `flyway-schema-history` 表 + +image-20200305110057768 + +## 参考 + +1. [Spring Boot 官方文档 - Migration 章节](https://docs.spring.io/spring-boot/docs/2.1.0.RELEASE/reference/htmlsingle/#howto-execute-flyway-database-migrations-on-startup) +2. [Flyway 官方文档](https://flywaydb.org/documentation/) \ No newline at end of file diff --git a/spring-boot-demo-flyway/assets/image-20200305105632047.png b/spring-boot-demo-flyway/assets/image-20200305105632047.png new file mode 100644 index 0000000000000000000000000000000000000000..1dcdf41a96edd999f09856e9ccfc22583b05ec41 GIT binary patch literal 17411 zcmch8WmsIx5-ku&kl^kPgS)#23l`ix3GNVlkl^kfBm{SNf_n%W+}+*Z=G=2~Z_fMs zzL#%L=x@(V@9ygAu2rkn1S`IkLWIYIhk$@Ulzt11hk`IUjqNH1t>T|K)ja! zASR|LEha{yXm4Zo!O|20;!SXT;wv2$b?o*d{A7w^VQ3To7HCvxs6JRj36vVe?D)85?q>)XDj)dQ5Ixu+leFt=90=3xM;A9w zM3TZgQ?B?j@5?837L*VSD2OQ6K26bpEQr%ch~+$}McK8qL82-IE|3RI ziz`As`cOcHtk`|o)k6gZ-bQ}c8lFTnDRK{;BtLB@?}H)1TmQZ!a{<~pwxn4mop|%e z(ge|yf}C1-l*x-U(e<8VfV7Rig;dsvn~rET!`ypkVRo;!f8rx|zxd*^jcdMY){aPwu(h(> zVQXgdZR6vb+Q!H&mm8A#vF31%GX^re46X>=7j91;&3l%j6I^Wl!U?tv->x_7F%euyLnG;YjMbu*X(e zuQEX@25^?X=tF(z*FF#^P@NsFD6e9K@si;8=mYmOk<5H}3`jw*;thB-UQGGP8_> zT8uTCKs*E#&C{p;hO!b(GtyFIH<~!gug`9semrhDC*bfl? zM%It_XuL4PA_zaws$c7dsO30qTUWygL}W;nW$SLMR1?2QLh9)%X5k78x2xc$Cmifq zpW!ctD(c)Vmn_D7{Fzw6Sd8ud8Qt#XNaw;bUPNcC9i(2+==a3sy_0lTbT72Fu%+*J z#|qHA9cjxl$JEELv9LV;xc>H{n1*~S5GxoSDUEPt!Qy1G+i%VT6pZm$61h|B{p)?} z6J5h*q&8GHkLr-EwyZa-a73m z<0z_{SN z$cu=G2#?4d5hn~DflB|Fe&jT=J^#~9iY>QctiJknN=$8Bt)Fw4bL?fz+kCz;vF)96 zvRma(0uRs+j1MJ@V$-^b`E(QMW!gD&x$e?e$wU&PdXYI?s%7G3GB$0C5-ob3A+3Ib z>X~Ii3T={4S&vQ+UM~VWaQwLap!_IbHoYFf<7c73<;4lahesTIU5A&!?9twiQ~R1x zto=HqBHS+Ihm|mm}m;K`3gIcjZHVVVSLf<-A#F_Y$2)`X@d)r&?8)&d4=?_(`hK2}X{ zMleh!SfyGu{i+?V9UU341}_jay=>Aypt-bkuXxb9`*~?YKtQNW*lPFQ*>&~(YM%qW zouzH_fw&92Gp%ExL*uHPqZ!{8kB#l2t%z>3ZWkj5Bet%RIN$FBhpt)jjJ0~3 zj~!1iT&G<1PO{x4T!*hdo_rFVaw>km-&4WWjJt^5+;(Dp_PD*aM}GC;eCMR*Z1}w7 zqGg2BsJAMyeDoUiUi4w}j_}ld>u61Xy>0Yq6r#?j*+&;rp@$~|J$#PyP$Wy9M95aw zKplk+#P;4nQN7%WS*V`z+AGK^h}p!w&p3jOIx}ouveQ3~r6OIK`H4N>B}Nj^Nd*t6kCRVHaNycFz-gG&hTv(Qua(oH5!a zMcP{vinp@!@z=aG>>o78OHA@jOzpKp^kgJuJO@%I$|vFrbYmqIQuuZ}QZ!R2N+{Fg zGGbZ>ex}-bJ^Cv4BwsAnly&BvQ(HpSNx2Y;ZZSPtD`YQ)K_Ct7DbcuFRiKlgTXuKfa0P zN?uQAF`~KSe&W6bW*s~P_EQ%7ka525IJm=>?=qlcx=~pw`qar0;CcG~#u+9%Df>MQ zD;WP0L56x`dceI~q?@DL#yoduM(C%(SI5l&O~xv$(N8*PN~a5!9<>I}a|C-l2wU^1 zgUL;%M665}dUGCgH>PJz*y4;c4N;BEHY-edM0s?w`kwK(susx-v*5~C`chsCily3& zOl^DYse)&#W%${A8;VYnje8YwdXK z8XRwGFgxg+OW8FvD^EKL;fhk!s?^kry=u&UrBtaJ7jc&4m8zB=6h;(SYnsq^NKbl>Z_)_=kV%gX+m|vh~FA=ZOzMSqU-*L ze8SJg$dd$|g3bG|7jI^xJ8~$c?jrjmE{H~X9 zeHhuvF^3u@;NA1ST;{oK*gO;5N@aA_=ROX-VtVz<^H(b4t)Au1@!tCbf@!yP<>S1y z#P5tx9sw>J_meY4>C-V~3-uXxEqj5-J+Y}bT$xW=_j~OnFm-TsbcfqZ1&tP7b%$JA zOP9_!j)bk)&PSaOU3YavutfZx-(0W1H0`54C`}p{^VjC$6(Q z(2-XTmX~D_Al{Tfc*G$iAz9)O+}9(%bVv6w4oEr6lL<_(ASC|pwj?A7;>BP0p&%eWe}I7g`!jEW zzt8`ofY!ehijHsz3U}L4Iq<=7A2R5AAW)7pUaL+OEdg|=v(OD=BHZdU>>nGT~oS84874O>?pf?J24mwN6cHEkBeQ&pLUswrGH zi?p#pKCpjW!qBkAn7)GF5XeZN{4Boo}nQ`|Ht$wkW$OxT#MyOIg*+SjZRjv@|yxzyQ@A>i2b27C z=aiow4NgSaCdkTz2@D56q=<)YWOiHrSuo)d*r8Oe(bCr2kLuoSUJu1@(|N5kxek^* zuXJS&SRoTkKDWQ+J1|k;Kk>iVpZzHrNo3V_e;SHN#6R;9Fjuj!%3Gdp8c?LbrG_$0 zo^qZ{?RO+T4Pcb%rY~g&ekurA^%6LQRV5iJ&AP6ITNRbmR>B})&E#i#eaz4JRLEho z$Un6?D)eMox8R&=)wuJOM$^Iw`y=%cY;IoGG06h(rCQq+(K*vZ-C~JQEI1pSVfV}Z z+1ekH_>}ZH=)WB@K;EZ8G?GYQKT_z?Hdd9Nt(pIPOw3Dtj+Lr>m~)OhbPCrz&5+pp zzT#m^=!qpR8d>l6z0`H=B#H$wu-1pzM%gilq`N7jV!+_LDZtmP z(W&HYDax~!S23SZKFRTW0A9&9-^AFo&+4tA{oh?0gxbyvwig}hC~Z3Y*z)NjB>m^x z8}#-7gv6p$o7UM8o-Kl=r^h?1>*EzTK2DRqD5I^*CGV#sFc`*UzTS>e&(sf*GbsMy z_&aj?q)DddrCo1%iY=kFH%QX+_S|mnYRP-4n?Gmh4K1gyOwn*5oK<%7@G>z11`>3p zB1UX~EH&T83q;OEYE*3IA*Zvg(YnWnySZp7BFzf8-9vF<=>J?s(6)o3z)6C_hgB=q zFp|!P?>qIG*vplE#IW55a-`)miIou=MFVM+Wtwf>Ct&v;fDsr$tfO};pNTDd!f?BJ z#g$*s8@epI<*ODbpD%D_uzL~MVe)Nf`B}C-Tvk<$3eIUtzvbPbFc-n)vCkE_ns*4? zczLsx>75peoq!8IzIi()SZdN${Dzha@<|8FGi3D;^8kxjg#G=Zt>fO*u&I`CtfZS8 zaCoE-CXQC0Y^K`$idWa$(P@YM7Gsb0>YcvCKa(MV+{B@nGejFQ!E`%nx!MQD=zJF8 zG_5-=c(>2y!apfgpD8P&08vM4By9V=@$Rr`!Bvs&gw$g-pdJOfNU9l(MlZYnW^bw_ z9VS4oT(1ve>YGwdl6~jNho4^?G|(|H;?PY78R{I*6lg$5QUQ;#6X4GD*w~czsw|p_ zI>LI7F9${<9qLi%w$EQGNZDTrk`&%Cg+i(5(Z$GbgHu6=*c4zPc!&qnx0X@Y>mumq8im%U&TET;!_>2x1U z0~(@vz+up?9clGmg zUEJ-es4BkkX-7B^uLNemGYA*bm*IZ6gOSKkJJacQ6a~4z;Iic8d!eCjd-dsNBQaLX z60Ig@?FZ#@=3p+PUU1_mFGxY)BJNHx@bzn8N;`(>PE*p3$q}KyL$WX`R97+3X~Shd zb!Poqu_ricH$fo@s=383s&({`-%!{zI z?MVvRK3N_l8j_5S+hmDmc!^B@a{AB%YtB77vB;(7bn2yX_N%a}Lqarkp!e+jawhsD zQ~s)wEomO7{fsUbNi4?qU&yqH_JPBwxR1pX^`B4yvV^L?Kv^5Ww`1BXsmoZJtWASk z7UXz8mPOXmeh_iJo^>6+R8bF&J!q2YWL0iW3c`b(!i~c;IUDA3(d?X0ob=W}-|C$V z6$3WqG~wyq@^LY=aZHeT^gA6WI7|$76*+SdrAKEarz`z66&1RNbY2z(d9K6XC#RwY zbkcgv1-c875ps|SDf%}GE$HTHxkN@?9W&1P<7P~X*8Hx>E(G{+b;Wz0X4_`v@3J=I zu(5Dq_2f{SeioV67Ls8&h91o*PxCGAE>Eg+@RB57z@1{Ef_pY?4^s>F54RWL_Y?H( zZ^rnOn`L6u_1wDkTvq~OLUx*eM-v?Kbtv4{dU~*h)JTC7U4XZr zf7ZQM+7ET6CGgFKhkr6a$qh6T{m8WrfQicPQ0ylDDas!tIey~*>^EWPPS|DN4w z_h=+7N3jZmJ8?+Gx^E7C)r2}t^%BQEa_Nb{VM+EILfTBpksbzN^mL(A_^fUJ$k9zh z=uglvA4OmRfk4p1ck$~FJXUm!zW(s=b#j7s8yIEver0@rg9G1F3X+Xn{+-16OW@2% z+taRhgEGjxV?eZ4ot_K?0>V+PwoS{V<~Sag^*+B7EZcD>?O7k!l7}&{ z+na^7%GT-&GpV*uzPq4b8qJ6!Z@(F-T3tWv0`OyCHPM{xDl4Z}$q2wOX z@M10%Ez)%6P_HGot@IH*^fn@RiyhQV(W$bmC@;J#reaEe0%%IXYeCnycQ^7RR{sMaS1-ZzrSBvhU496--Nlw$hkw!9_f!+4g|3BzXyxFpDNajp6n|K<6s37;R0xIqB%P*Qt9j3y8$!f zM7G2<09>nhl$TPVVI5O2u+W5kS0pJc0So6#t(N{2Qy=={l^F zlkyQxA^C1jG$>tv=~tLVjIc-m=u{}7PN^7&6w}B)t{Ec0E`g4`t6&- zpO(yew&ZsEUhSXVhd>vKSE#fqI6Uc@UA5f!c^*Fyb9$fHdvjCIY3-F--Eowd=hrQc zPwBTX{d>gjP|=7nQan87*S(zPk1?!y5mxiK`R}s1mn34=bs-n{#acyVUkLC8R(h+D?v7uBN^9h9!Qc%X0NlHWi0|QL~?bW zq&NvYG!}!F$@AF=fHf}o1tsFYoJt2)E|qgQ>BU5$>fr8lnLeYZVh&jp)3fpYqHi}6 z^^46%Gim`CH}{;&SpBLFuKDyGk!yy?ec!Of{VIa+=i6DdYXG#*<1ix$Jzg8na%NDM zm=0`zM;5B~yqxX5TyW99yPUH*TeqH+f3`&*kuMNLv@-=gi-9Z=NY6gwJ{`#dgNZ>8 zYKAfOD0>mJ*l`j$>bNCEG|f!6@e2tju{y(1p;V)y6M*z-GwYTmHB+=kA}a@{`rZ$w zmXsS}%K)r*G8W$3mkmMhi~G@Z)M_D{P%MoZQCWFVJBL-qA5Q)=U!iVeFj3p@C1SDJ zaLNarg6zNc;3ahHwCcM}D0s{lO;hSEt5H~xM#l*wp7y3TrG|2Y9x*Z1Ve zX>^Q+UB~w&kKpcfo;Aguv#MJt2GZWVL&3H$0En2IsW6t+O{9G$5`1;gT!937|2f?m zfMa^cx#+s4!Zj z{9Ua~uVvd&?yqykmjLY=K<4|v%Nc8Fb2xPlKt{y?Z0504QVkXEer6PU*BXG}Gz}F3 z=WBNZs?R#1vFWHWA4%g0oYN`nnG`Af>LRRt&wm~1=G(bRC?s-D~;k0 zT`;zf_ct`^p|V(4=}1L!bjTP({z}WIGuBkb_)XmXNDtcewuUii!3rHV9blMXgzd2B zut7oUBYUN3p1z?s&Tg4Bk0>C`!Al7RBTaJ30=nU){r(xb4sf7R*a)#C4IpP&wD!I` zsB_txPmB`6*0J^VJng4u%zAu!JbDt9Nz(PY*|=PEKk6Pxdq$jqjkEzowLdP)#9%+H zq99-jEMO(AYT?WvQ=1M&DjNDM5b|)*_x4JgMv%A-_a11ZQ`_b)t^IL;U zfbuB*bg^5z;5^qr(v7ab&vK6EeGIS-bw6^X@LRvjrE$#|yx`kRGTv`K8>s^5hdFGz z$~^vqXYS^ZyZBAWSb+-l9DwCQ;vRO3%5;`?ej+e68vwA*q12n79N-+P{E&G2DCNKD zHq{CMS%vecz}3u9vV~E}GjsvdSM+ovT=i>2;;?jjU9Y^#-;ZLkPPMAFJ5&W&fKT_7 zxZVo!KPC!P4%TB8oDXcv%3sSA8qWckJU{CJu-xG( z0~|NH7ur@e@!|MfBZ~n1F@hh!w`oS*L+~Bwpf{2m0e0iYuEBVu0f&Kdzc>@fV~fph zRUDt!@tX=7cc!$r-v!m2)U1(FXjan1H>L0OPtvhe4eKwa0T%J>1aYc^B0Y>o#E@U{ z_8JAdi-KKl*1+hlk315ZsmASWb2f@p>~$WZ1e0D;F@TWk`V6_B^W#fkZ}YX3e^ITO?yQ)hdq@U~M^y}~ZVJ0Gpg%;&a zlFNxdZGSnmAFn6Vzy-sjU_r#8F@cyxZm!oN7p4Ie&x_UW(v7LkEnx!WdUiIEZmIXc zp@KI6;p-(ga|A4$21oKam$O|AAyu3n4=MUD^GwgpYnGE<_<(umIjfO@l_HUXvjM1% zSq);>*a!{;SyV6+b0)K)B@+L!u={>RZ<<6%tyZn&PKc3bHnIrmP6v=DA0gQ-JmYpK ze@x?ELKjCywP!*QKXKVLwU7-d9<{oX`^URPGLwGj9uDG3&%vCcz^lrMgJrl(b6l=-}s9;v>6;z=I76c zX><3m>iBpd)N8vYO;vw+&2?xv8rXy!YMyK703VF`iE=}6LEPsRG;}~i0hnoIcIjrc5 zDech`@-^)GE>k!au5WiU;O(wm?r5=4erIi2=xVrwj#qrY44SY{7dmE=Qe{15Jn5twt~+ zB5ntE?J3vli=$a}^GS9u|01lnXjMU*MEydF$xwtLAd7dtpnbQ*Y$30Fx^cq72D~VeYe`j zYAB1lY%JZsI-zl0sOcf($`utAwG)#;@F85?z(BdYP3_c|NdkXpmv%Ndeqc@)35ykJj%waO!^{IYv0?U!|ZL;)YKKW&#^2$VdqSEe?lPS3{eUi(D~!Bgjp-k&kvI|o(N&G*lwIhIud|ffdRynRs`Y0g{C^2%0AA8N2~_!jzosK`EjC8+oagl zksF@{(G??1;jpOF9b=-Ean#wAk3V&UhgWwt#ATuR&&AhO`qu=5U$p7;1LXP#1;Lx# zA|g770eq3$;uf(c6Ap4K`#6g93i-UHuvepAWOT$%*I`awdAT`h*Ov|_VRwx+nE&J$ z8e+omGX9y+P^HquVU@za40T#(> zh&+3!{`uCylWGo&#zk|e9DqQQ9#9r>*XOlTgiaXUvJClY_8~w~Z%{L@wE0vf5h?k+ z8uY1aVEHz{2)pf@Q2~BLk&m7Esr;?ZYU~?_uuk!2)Q8X%6V}@K7o%jM2HDk>X0MY+ znxpa%im>d|>#I8m_eeu1PSm=#4RpzW_~;Au>8FlxrjEMu9uyY;%_?EQ`}Wa+0$5Rk z4`bnQWnP9r#?n!lgyV6@yql+?mQ!mXTUltjhw1uez(M*32jJ9PUqq&&_@0`4UG=j_ zs#9Jj+tmH;k=|j|_<*Q~-=0FYgH?rYs?{3uzH=1YYqX}eH$6osm8G%-Tbk(T)Jc0vr?F) znle5AwT*jAXY|k~QBCN)?}=B8x)vkFH=*OA&h%7=%}x>6Q?jIdSUVd1F9Yp6yO2zM zS{=8?I&@>UGsX{WJnkO(LU7bz7d_CqzBdwkB*n3=m`&Oi!<>i;RTP&y5A4rY84tjT zOn{iNbsd!~JA_Ivj8WQ%i>DJ$=9U{W1l)PM;SgS0gu8C|2h+2#(P!bj?n9bF?HS9w znlsRj+xni%=bCY$7Wf)>73))1H=HS!A*4bK9`jcXEbuh+9>WJAS6y2n*L0!7x-{A9 z%$=F+Z}vwfbl*!5=}?0So7?X@UJ*M6W4f9d_@Zoqolv^j7hC9Nddp92F}oi6r`U+p zOIkyKqPqc9J<)USuS~A^;Q|mWySF6$;xJV%Jn*qAO+RTtdh<)~5;Jb%m;A2+`b+{r zk9tHL=Jpm$sgpia&Tj_OZtQ)5-Oy3}EiNnw32<`?6Z*TF4fdupl-&_O)b359>sGts z4PfBkUWe-5FTFT_0xEhg#JBob^X1QYD87*X7ebQ@PBe*c|EFwm2$4`_4Z=qpCqItU6m@2f)2RQ8ArVxrASxMggX&B>4zC8v|2(c z`f(;rVd6?I;6MweETkVt2M!hu0W=!@j=O>G8EW?)KPwCUf7l-&H&9k&T}wDC>g$y7 zVJnJ7_v=VqB@+0w-n<}(|0b_3Sd9eP0v*Ahf(u&F-mf1erUncq(-b3#H`gitJ!%;R zAOh^*ZsxvJqv{QZCS7juetNW)xK3kF2#`_PvB9X4HeH!ID}`Tm36hS^l>)xa--4&A z^?MXyKuBb!Mdj`(JOWW&kHoT0mDQp8mIgSJF5TjPLgxiRNyBdADnLo)|NTsoP-rrI z3h#+!mxECW*(%qf0`(e^@WM;EQBRdNVah*fJ7MTbQ3HA9!{T@G3o?ucV-p|M%Tg9( zRKAs14}Wxa>ouc^dx!cjTFnwYs2GNFj;rwY_ay(*$W|b!#ERR_Q9=IqGvomq)CLy{ z{;Q`jfMM*%NoU0PCtUtV71GBENduat`oH>Tr9#jb|LScRTzT!&K?3@i@bJm4nTNKwl@;V=&@@f9O z-3wSAC;ivFbkKr|lb3(M{T$TcfjqZCNSHA`k{_jXm}K~qd5!WBHo=S=H5-y0+n6VQ zbgZ#R{+~(@VAOHSa{G+|M<%5kZm4KgMJy(5)al8}yW7!9@4-@*8jAnvF6s(;(d*92 zVxh67#%gX#t+;QP|CwZ|i6G=_M83mR1$;tZ$#<{ye;3VOY#ETCRE`SX6;H(L1Nqie ztLI(y?kqqgSj|?Na=IMq;B#50)mTh3mh7p}G=H3=P33heq#N*(z@!0TI+-}>|0ahw zM3*zYA1eT^VEC(is#)`f^?ZE=A;8PkcD%%oll88g+|HH=wFHVZrH#*MY)a4lpt_I| zf${vLtnE>zNZ&AEYc!MCnR}<=xyIe-a%5e%_^BuyhlPwBW+Q^{keQw(nBrR;f#>-T zwFdhQafyRvKjd1r5pMF88&GCYGkDy?X<*5O^`%WDI82yFvLBrQ6TEAEX?W z|JhJkooK==4Y#{R3)<()@&Hp94$zBXl>~*Xc8AKS@Z3vu=gOB3ax8eBmMC!?BB-t>Gffoom6nf*8K8YyWh8 zi;|e{RmpQ-*5fGp2ZmCyGos+8EA?7FQ5NH2R|3r5U^?*4t5~gy@fur7%W8tR;(8)9 zuc$Pw?DuCXrt%et=KvcX09?nw$Av<Si9_A%BveDAAsl zKd&f7AwB_CK@*^u$tIu5N0t);n@|%1Wtmzgw5s150)XwE#t;AAfzUy~89#cgc5D0E z=ABN(86*S52;Viwju!yr!WDQcM|k(*H0}Y(5C`}{Hb&rb<~y3EM<6n>H9%17N~?-r zHeg#BW<%-xsh2|M< zJ+~Ko=GSSD0Nu%`&h=C;{r3r!m5sJs!qxdy(#7QuhXsof7mQ9Fm>w}-VI0BJb2;yz zAiGiGojsC>jSbcHz4EI(Ab~Pfn*&I(bUHncwhHh{jC#g+u_haNpP*dQ(McF7sIh;( zqqB50(HPiF9+xFCK4wii(g*R58Sg%wAlE--(7&fuY60=;5T6UYPLRlv#1-~<3Fl2z zwGU9m%dOc-%U2#txVLEZio{RUvp(H0AZq@p;U^wGpnObt6a#%0{>46UmG zxt|OCUs4kAZ4|eBH51J?N5K@j39&w0f?~3$qinc_3o^iQZ zQE{a7xWd`DIrjXg@B>aZ#mSC|(DZW~G9Sxw&z=blLc1>1K*|6gZk<9sw+&1eO=)Bm zX{US#uYoukmJMiA=uAnXcl0zS!OQX^Kq+POcK1%=@c_t`7dgZhol8mMNrVc4T&O?U z6)puRiI`Mi_}$l!Z6ot;lc-aFUGca#%>AzM47-8VgHMGh3e0gNF)XkUNC#H;PM1qM zq7jU?XBo(c86T=o`4~){(HA9mZ3;bxOu)^2Z_=l9l#Fgq>l{>{|87;&2wU8Q`V@c! zQ(Pxl2{F5=0s?&GYYdq0OM{*=(toLx!I(m>5O)CBxrb4Fg~TfB$?gQXh%4Y!(ubJX zY(d2DrDi;>1yL;EytAHH3tJe-P@}fEO{*bvMozcsKyfJlpmVcq5+Kz78t!Sh@NtRD z!LQ(H8-$GSKeMxCKQtIH!1m~Loyn}rVCyrcF71p0qPvyCu3xKLZacN8wShxasg_0z z+JQ`EzBTKBgv@r>5;$^LuI|J)JiWiM5mN%IFnMPa7gwbJic)){=X29N<$+k7!Ywh< zSCdugM&|>(vv8}K@-Mpf{ge`okw)N27@m_ZbmM_wCVw=sVgwe3C6BXkAsrL^jrJ-s z!b$AEF+?8}J$0Xn1W zt>BG`#Zs$hwCo%6;g-BTFSXnl`$sf4n7p)`b4S6CM7+`P()aPn&{GNp~gtEC=D6Uk07j%6^Nqy`){o`?diqnOCCri3a$mMz- zI!pjlvVZzjSTKt;RWVLxF!PPnz{hxJEaT>7Fv2{4#2Dle*!!?yix(z1SGJk^^6;F3 zlKXDIsstz`U5<$%Z&$$_ z#s^eQXBJvcdhjbA$_W?c6!phU2-V*HlS5=>qc6(~+NFDe37p#=2^L{*?w$Ge7tsjm z5V7Y6V)F*O(J4S0oEnP|q&EsU#;g1&^r(hv^sBZlbn$dJSNX*l7{yi~oaYjcX0L4~ z_19U1qJBVBJx|F`=E)%gXMGp9BEg0gCteWZNvO0aBNBYN?SIa&Zw1-i+|Rm>My{Ct zIZY04o&4#!JWzOfwmHn^74%F)2|V4O9eyTYkFOL~sjN{@w5@KH#ovuqmaeFyc%F6ip8`^b0T_5)-01Wc31qdgLNo;Kt&`O z&<%ePub6ld{JA-52K4CFH~wjWCci$+ggz+P96?6<>Tn_4$zXNxuJP2cNlnmE*|S;$ zj|V*KN3+R~UuhptQEY6#9xa6z(hI0}56*uoxFi}xTy~t-o8M%)f=9>3&^=+ZN6inK zDfD>%p(6{>-v9g>P8Z?=S#Z4;aQ?t%He~zRbM~6`=8+J)&L9o(YVD|oz8w;cSb zlxi!MTEW@MWUd<_Z|AwRheXIb^DJxH{Iq|kv08pdYRXzcqammGR)ZMk$^#82Al`*= zG*$>W;rm+S_t$u+>DJg>l{hEuTNlTzA6|4KbH-jMc-(1-pwNR1=^6sNLliT-QH~n- z7|EmPLG+F5m>3aNjPPLOH8pLkjY}5HKut4^S1_4Uav^BHVZ1{!(*s$5z1rHBWtc&D zTvpU#C_~?|R?AjvxS1ZSv}?6ZI6c>7O*I{$$VNE54}jC{)X`mMKvpA(Z(=s=jNiq4 z(wXG8M*5jxH6e&3mbN#xA1D$YVg2~}S|%b=LfTngFfFt>RK0eZOS-1j5;4Oinv4%i zvzocd6b)`2;8@*#i1iYMFyxu=@ zI~g!`#a#m&01nOh8-?bZ%~X6d1tazH_AJmzPSkH6yqI*XOkXHbH#pb`&>t5Ab-j_F zK9l{)ubAD|pA_2;H6&I!0l==&49g^+Y~oIXz}O5+#PKoCB4#E`j#Bg1+{h^D$#Hk0 z|5&E~>vD8w^K0xHlPO$1=c-bovkG13*=~)*h&@2Kz@B&#HiNh64hp@Y|A�vH)> zfRXtOg_uf0uT%BRbyU8Owt_5@vWJ`ol2> z&Wt{6vvnFRYaH}l1_Zo9#>M)zDPa$Y%R?uUne@rZvP>*IW8Y27_FwXXOm>9}+9^Y_ z=oYj5yQ6YX+fl~4#e%z`2jTAS75ltBCsoxO>M%i|4sZ51Y@ZY4%W<%xpMQhk8N?>i zpEYuQKYI>S1Q+tUf)<_nZ5RzTh`XzzoYwOgQL$Y9Xewbqpx`f=0I=-uD4@E8P{f2~ zyy&T$?Wk2Y0bz*#`qP$2v-x2M69>wY_aS~A=OGuj(D8#>p+;<5PVvsAh&?g1Fbe`(x&yf&bb2F;a*3Hs^*mh3eT#5xDA7z0I){=h zS@OmrcC!9X^4}>!HAAnfyjhLir)b*Ju`SSRX>@lBx$tvr?)UE|cIy~KF!ATnVm1pD zb};h)#s*sa*b%x=8Pn*r*ZB1fZkPmgo(b@~fH&OU-{%6cr|6ReY?p=W5(s5X1!eLk zQ>;%_Z3lKr0cFgV7SR%2L-L5Wq$H6#JGQe&oeD$Z$EK5u{JZpcA#@sy6Q?gxaT~~F zt)Blaa-#TtLvK%Cpd)J7rmNrp!I@HO1oq)g0f}%}v5o8Db(fUso3EM* zfVxh(mCTDYJC5m{$nVn#6@&uS@b0a!M#2Ex!AdQlWuS9ri}6r>Tdzq2!bNo3VIq@F z_>(vg&jR`O(SlTI)hoT#iz}ts9%+BA)!Pgv&^rU0F=BvL%F8K<8}^p=e;5Q3C`^B0 z6JtfjPmbB1JZDVW6_u7^CW>LTOVzcAycH5KxJC8)?V1^o|JjRg3!PJD-jia$CLPXKQB zA%*i&{b7LsDS)Y332!+3mj+B0xNY)T@_&Cj1IUg#$w^@Hj(c=m=>O;>ni9}$REp(9 z1pg-|_&YOL0klZUuEwQ&e=5-W&;SYI>=&hfK+0dE7SB2cbc{63EYpO4GEpYaqP+dF zZ^nOE3Xr)2qP)eVy@=oBz_W=-DxVdI&hIB!{;(8?|5-Zu|JmH_PcLxgZ;IQs(fWZO P!9hq%ycI7MH30t~FnSW) literal 0 HcmV?d00001 diff --git a/spring-boot-demo-flyway/assets/image-20200305105958181.png b/spring-boot-demo-flyway/assets/image-20200305105958181.png new file mode 100644 index 0000000000000000000000000000000000000000..9de741878cc7590fd1660d13a927e31a97bdbf16 GIT binary patch literal 17041 zcmch;WmFv7^8XD4mmq_?OK=G81a}A;Tm}g4?iSqL6G8~??(UG_?(PyS*uS~=oO4fp zub=g>dYE1_J>7fn-n**4pQ;X1QjkPJ#7BgHfIyL!5>tVIcts2Bhrq)E|2YxME+8O~ zq7&OO2cXEK0p?NYRAYMO7pmt3a2(Yf`?q$b7y=uZ?aZT+iu1i zce6dm2E9+0k^J-+^{Iy?uOMk-u?Ioq@3ayoCbYhOf`Fm+Lqvw?!=W|FyuHPR0Pj7y zx_hIL7TtrnlFEIrpEX#~!ZD#BV%-L`M1yl7E@B|o@}bgN;33Ef4y?^E2URm6=cQi1 z3SxL~A00BRnwh_DQ7f+kg>zv8G4NJUKl_!R4boI~I1JB^m=lx%VwKNgh}|=SU!1X{n7v^OmA4J#4Wt}T=eSzR zUh&il{Ol=0f_flSJ!B&YoFGVSrLJU{Z-F|bA5X1Mg4^E;p!=b2k-~-gWvH{iC0ARf z2%Z&Ff_n0!gbH7`|9qf_P8;$&ru)O_G>S>FXT&tcMF+(I3@QFr_o~bl?f#h+-5S}H z)DvqnL|-~;M$u^w@9U`^bB-ahc7|3mStD-NNL=wqQr=BdH#B0u{tioct88w98-nm_ zX3s7PQJQtZ^*5g*>>Sg-sy>M`fP`^=k$fKIKD>;yhufPZK<$0?*>w-kY{Rqzg#>AL zeXY~Z)b{(f#isi9*l#ZP*Jfv0qqQ!WsE9InA_$+ky?In-#b-U|B8tA`%u0eRXYAA( zy9M;e#ve<@MBQSZCNQ*vj{6mi`zx#G$V%`kD)KauTp;;MHr6?QDYb@#n93^kC%`=d zy&=)(D=3ObjDd|IjzL`zRH95T^bmqNahhjnq?FX@+34VE5A97rT#~Hh7vL9wQ1X_1 zTV9wVcXb14n0+s+;f4&+j`)4#PPV@uW^IiE0=N8mV!q8Urr!bLwJUt$g;CUN4PE#% z>s+`T+V=(sR{o%o0nn`<1R7LVryCkvyfA($;vqxGq1J0tKOO@zTDT+w9?e%Xf$|3Q za|qXd-nn>$Q2m|bYy5i<8l8*{K24qPf57PlLPCp3!4nyhehbAiifJIvh9^J}?TW*t zgp_{A7Dp%+P8-KFpdm$7g`pK=C2|l)5*s*Rzr`>Swj_2!CNO}sB@q7k?G${iFwu{n zv;^C^Kg}_CVMaxeeqz)h>xQf6Iq%ujAP7WfOO}7p-Fsg{@+$RpUrz}uS7elZB{u`n zaNpJ(e+g7^*Fl9u3D(nON+nYXj^`(kJ?vQ5@)~}0SAspHUg&st%G%+1mK(?iqdju9 z`~FN3nzu7^P3DZ|3_by#CkQXdK@`i7ZyjPC(<{9Rp*&2CJYi4jSFoZnK5GhhMnh18 ze?y8}9xi#-Oq+vQC}H_Le5yCE33={%EK{PLHoktP6CBbV<05S1927@osPb z7x`}$4}nMMN2bS8rgyWtDFyUXS>@V!i(fsZZ_!8Rk0;q$Xn;_>2!5FnxqBiG|+vv_rM;MO5C zz3aFQuZ*$}|7k7u*5U02-Zs7({xPcs*8w}{TVl&hBmT*TzS|0W9FQ?Di~ESz4%?34 z4#&m!T5ZuRjO;;sWBZC~l%2rU^M*Sru7wtlOp^0^Hk!^Todgj~He3B1GuPeglVs z%eF0sDUt=$k&8*`!=^2Y^VHj`Bee+C1&h<2a+i0+tDzVVm`j>8`CjD<41HPhQ&+5)!Epwb`4yxNVqk3^+2_ zTiLZ7i@74Yym2aWY}$}>GUeOlv9&v~6VYwa?P20z!qHXMAkhdrgqaq8;^yP8{qx$((O;!k ztz(=<{naTIHdBrkm5cPg7e!7r~eLT^is71~bkz9FFAv;+E z4K#XMc5_E1jS6QLp$4W~pHS;i78B0_<7jr8l4+WeeuRg4__Zn-}BozZdM*G7>W0Lm5*QQ%Qxo2@;CweEVMMTIrOfR9T7H z@ofUFz7Drr90|?rE$l<=W%Bl!Y>q?og{JQ>3y8D7aYYGP`%;s!b2w`3!1)liN3Z7e z4i}9cfb3u_VHAVOx~98`m2=JW_v~E^u7{3jc>H;a9XxtEH{RHn2hnRWyJr(5HPhY5 z>*=gSw{$*CJ+#7X1&jm)s=WJ{{cFo>ePMp*0`n#Hi#Z)z z0Kqkq49)iJkY}$*FGsJf+1HUdp-F>pPCLO`Ox4)q9y%Dx7t2;&bp|ergoivxyGt3v zY0Y3_HfBq`MX$v>@MSZO7}H#1Y!i#^I&(g8KE15IchYY)%QW%%fGRkBNuOnrj`vehYd%$Hhq_B{5D zPIt9fo%AkcZ#A{5E;@@4iqqAr)ip|dYE2i?tJRE)IZN}))XI*Fq6=-b%<66KnotjW z56fqQW{yfZ%5`<_O#|(^^P|WJ2)MMYik5!)RGVBzF~(`99}pfC)nU|Q+j`e9f*1Es z=T@g}xfb;rA2(m`N0((G@F~vR&&-~(t=5)6S}Sq>IvSf>uB5S2l+DxLOl}=%O?nn)N2sSi*;_4avh=Ax;o4oj zcDZvRYQu3k?RxCFuP25l=J)>YcKf;c2>nrc+PJv?N|8T@@E~k&|JM8BbXgIs2wOKe_tEb32V@LF0>>_Y zEopjnVS0zJ(WsUZqaef)JS3?*Bm}EnOcgq(=fGPx4eRLyQHX0_4g64Xmelvy$=!cawvzcqY&_hU?-*J2mygj_40z0R-rrtzH*Qj z6H#@8JkCOBQG0*ipOYvP97L;(_f8B?uNqmJmdsengt|p+Ks8JbT`$NaJZLDE4xCKJ zX8I;R@$=gsI?rvz&%D1b{`^qb1YSxcY@}4_otQB6zqcX;|NkAi72fe{ ze^OTsg@AKJEvcx05PnZE>6NNl8VBUF&QL%+hm6{vZ6J@Ohf+~;5LdbSvkCAf^1_HR zGw^EvI{C{H!eu}+2C<~4DgNjRc`S#231*^n0`s<&ALHseqeS<$~6np*+?aJ^`I zeYcxqwrqZIcUazDRVImr3FpsdcK&-Kg88UnGrAg!UVW~5T+mY6s#4q@O_}+hj=l-% zNYc>zDCeW+y6jvx%DJd2Mc|}d4IWOOpVrW~j>6}tVjt&cCyT$k++Bo(BQ&VBn6Bbl z^_ncwD9^4a5vs6T7o~VVS@UtyYABKJdcPp2X|}xm$s&u-wXV*3abYBl-TORfF%VU7 zPFy_uY2NM|7hq)mJk$O8E@XmpFQEo!AVT20~A_ zc~>XPi|YE`S1P;Hh41@c^K7AUDGPY~GC%zB`CTEK4;*OW{-oLV`-O75k9R?;RsFKd zb;m2zxw%T?$Bzj0v=ST^Q&Mg^aEKYgeTYMfLXRc|*&aocUi-YL%2jZMYQ^f;bH*`P zoK&@Xe@~j+CHRqSfyJ_>gEtz!IfC9LdaWKO0_?}DKKIriX2B2)gDC#T^{Xq{UKi4Q z&kvW@J)!8=!_4h-9saLMZI+wznd~kGY4~8a&-+Ofi*i*9ReIC8Y;8u5 z#HVbF7%eP;h=@9Y!nI^@xieZ#9)vUgdAs*2`-A403s@RDhO`u??aw}i$p*S< z-1c9VT^6m?fjNTFfBuE%sG@tRt@V0gc*Wz8Q3J=GK9asNfI+uuDw=x(e%C(GXev(< zm2W52IJ0>*KSd9}7&RD%XETx=IapGq1$sh7$!@jjYDW8b*>%;KvLbhF1M3;hLyq4o z5Dt}dshO#93!`0I`+pN96upBtz(I7RbByoQO2G3vl4vp`oW>6che_k{{-z$7|BEL; zQwi8iq`E?uJx^Qnqk$XZ!wLg~G?2<_tkW{YdsqUZ=ks}RGvkbEq%O1Z$tpv{3;`l6|IFH=Mpu~;lC8{jf_VnAbz$>@2@1Al4Dx}e7 zER$!Z-d3OQVt^tdBiDoG?{$qv;iru~QDN9U*H*!mXt~9R|{4&i_X|~%2!r@A*XPEuU&8n~M`vL{VY0`Ln1BB+yXugsUwegOtZWFin zp~Z9laKz?7pX#%mXSBv-95%vec#(#H*={}cT{&bM7O)S#nGrb2cmZd3az6yiOnOSB z!V~;_nPdgU?Y+gDdnM6O(($61bekIFkjy7&naf))!X57}(m4B~2+UG+UD6yODRO0o zqzRS0G5@zTagAfGK8dgds%>Stu2g;^@tKR_o6$4|SWbfC(v#Eknh(=pHiV5@kKbB| z^Q^9Gf!uJYuLhctPIF$C?#(u}mfGBc;3vti`zM_kq}g6kq+VDv>Mx&?060>_RcxRZdn zTJycL(D5IqkdJVS_d^vMbF8O#csvz^D_;V2qNk}G%4#sdu4`zJNt zpJtXFMkPsVmwlvP-g=$>lPM_dTp^3MQKRZm?c2Q;gZI@qSO$hl>(e<(56w>`CId|c z_<;C-+=8kgl#gFrbil^Gfi#&hrj`hBpMAM3pXbeT8j)4nz_3Ay{8-1<0QCON>?><$^t~8ps8y>gG|jw8w@nGChJq*R0Xs{hs=(HWY?)%$j$Y-@nk@z?awl97spGaD%ryFzNgqC~4L-5| zII@zOS!X<%S)XaU2mQ^M&_{Y&^SAtRCiQ9F9nIsxauX!wI80v@11G}p+BBjZ*#Q|G{@rKs?Tk4pS zj9W0+`b_goUXJ=UUPeS(LaP5SSDNd9ZV)RwqqyWADnJSwESDQ^j((=cPQ>Tpls0eI zeW@OMn~WiZ!A$#BPvpG+tm|9`C1K?&IyDH_UJ`l)ZdUMom;d)(Uf(d%`M7Sg%N0p2 zBO4R~7A7&qg_iH-C|B7q3jSM`i}%$K6e5=<7cx}L?GIG~fFCIg-*5OkP!Xo0@RQ|E zYl4q&+ex=Ps+m+s2*Btx^DD6^@$H(6>2U9Jfo_27g=++55R%jow;KR+?b-Tf*;W6{ z35U&3ZTt6OxhsAbW8h!g>FG;W9p8QXAsiNGoV3An-aD>9;SgsYf zZou2FU1%135s`ok`@0Q(@ImMuuL6_$sD4rkd#oCEhw$XTvcyrTw^>$+x;pRw`W&U9 z6cDWJpxKeZ@jjG~JeZYLjA4!2s0SWrSG0<1X8uwX84(dt)`qVE@l!>MF%3w}?3ZRHp6`^Zb`QG`D z=>T@LK*G`;tw{SzjgB){pAFD>{f0GG+q`AJ66gW3sIJ!_;C7F4179PyVh>5T1O&u) zH^y%OfoA^gNudYj-$oxe4?5|Z_d?CbKGCQWu7uK9g;eqO(}vC0W>I1KsKK?rLKVpl zHI$@;qV92KFhpMmV32r`@PE4rmd}+#9BOgDoN#y~R~P?RtlLN_Y!&p?3jvv!e@?ff zoc-NQZ3TlaX1b7X8$F-J)b}5_iJaC84bB&Kc(TdF4KBwEE>p^qjZF_E@tmJ?Ys`Os znPSzKSlpmcqJ{}>nHeNzi3uZ|5sax_Ehzopy)+T^BmKDK>BYiXXdWl0UOc|#k<`i% zVW5!7{ZljHoA>?oYq-K->EjH!2l9+_uqGKXk~FVz|E=RyqXWiEloyhr@O#bkq_JQM zN+=0b?ZNo>kSM7`F}x0q@s~e-@+s*p$`j!;g^<`L)@&u z><=58eCncH%NdTuO6)o+`|wYbV^LpBbzwk!Ox-^IGsX|^-zmW>;-3H~su7`(Fop5I zP~^ob`41@op+49bYRdPIFGA5E>1ffL@GQdrH_U)HP;~(W!<&0h?$iHl?Tau7deJ98 zMwQm;|p?$+@bI! zj7rWzo`0`FU_U9*kAXJnS6}hsA77w}1B3R(O=F7s&+dMO{+g>gK~Qe<=U8GQs74s& zd1aVBw$7ap+_bhnFOzVZbz-zP>(p76S2i6lm$YTojhoiZ4BhYD?2HoSg|4|3l-kfkI0H*nHO~5Sy7V-<&OA&3x3= z{Nrlm!lYG*GSGA15&jq-QYd$7w0#CWchk6(VMe`{xfj`%V!2OFjs^pDxjSB8q*lCu zZ&`vKyz?F9<(IKIP}OGRbqFBpxt=hP^(e<|O){hQ0-!K$i_6O>`P~~Ko1{d5xflOw z@#aOn0B+cPvp=Su$8l#aguuppvoFd~1BitWU*b-e4oEmnKnq>`z}F?u?yzltG(BFd zcWurAqFTTnOMAu1JU5m^y6uc}Zz30~m!=Bzc1! z=G@NuoShixI-JZ{{UQL`?sfC-P5-?VML+Wk9s_ zc`rc{Hj_@$8$vLZHVhb0wsj_h7?yJtp8+*l;PkFm@@4Sf#6qkp0;2PC>+gf&GOP@n zrb25#NOF4rb~2M*ziE?AVY+UAejImM^}a#0Dr91W`biD6m1^NurTzqHOavW`7ab7R zeXIlYQNExul~^u3JfVFL`b%WRlM({xXVYbhr%$G1nIBs{Z|VT+1=h`Z^Pd%}gJGc3 zM^Cex<(i!ZSl7w}`x_(VGr*lMzCz^(*0h9#tyu0`z|iEUZ8?pP3q2nlbi+NDRF75F z&g$_MTotpShqCztT6+PI2zg6lwel}La*$Yi(OS;vmKdrEbJEB%yJK0$E1svds6r1v zuo*v?0J3;szE&*`9uou!K7X^@Jcxr9F#T022_!es^5z3e7Q1KkqE1s64~u z+@Ye6Kf`?h#BIh|!|Ru2BFyg(i282Mc@xm0@AKm(YUB8#Rdv+jg|>)Skr=cXX(nJD z)^(~@_)G@SnoryAtvUl>%9vnhJdY|rdA1+dEjAg4F-^33y6$3kBP0718BPGo(-Rmy z9SO9d%$HymAQvC{qlu0IV!~vP=HrL9xUSi>P8islcveqVv^N2#7lHKwQhDf&J4H)gk;m?Js?%HKMKACA6GwTho2V` z6a_y5AfV0r>28;)EOZX%1dhq<+@7WL9?~{mjRooV{b@VFY%3t=OIvd6S6!?D3x}A| z0W6s0npb*s>&(#8DXDN~62rE^QLF`Jg zMmffP14)nQ897s^h@5QQoQuZ_cbpy1_Ib8lBW;sUa$sDjT%>+)HtAvSw8C{}t==7#_ zS~Av4pi$(k>I2iKv26T)YK&17jvWLzMJ`O({UFjhz8>vlt)<30R>YyN(g~3`;gn2f z&}AOyH?L%eVQ_TTFnxVTY=?7k_r^&jKq0_1Xzn=7 zRkl=~cV#s6o9u4NoXZYvD^)hl&WENiEQ!@zOo{Dwgx&{&&^PMcYn~qP@2=%t01}1? zSsC|7JHOI`J^DoClFHWxj8h|{dPpu*&>^x+7!GD??iyT#Rb?-BUx|>zetrtC_*Y=@ z+gzv4Z`spNlIJ1E@`OR&Ki;gK4qX&597knkZlS!ADbLJ}^a99NG|4O95~Tsg`lXE$ z!Z!Rw-g1W6KJ>#^?E9M46_{iclF?4gz6y53tz_Gmn=wKs3@SRs0Ea7spP^Ym!(1Fh3h5k{JFruy ztvA{4neaJ2B$Y;2iFA5|Bq4M{b$cdq`yk&%8W4q&G&H}$dm2ns*1Sqv(asi1bpvNT z(?36NVOe5gZM5uB4ACUF;plt)6lew_VdohFOk4(OP05Ym%SxFpq+-fv&nf@JS$5)8 zSZ{1dbXq+qxlC5~-kV8qimrMKk=nQzDI7F;dG1zj43-Map&-lRDNey<_4AP|7Un0* zm>hc&0S~9bYj!0GDdh&hr8eL29aRLrC$_sZT-$-MgkvAoyCdzEQWCsfdv)`Zp4+SA zO`xb9Kv{TjQar8>8f&#HRBx|DE5zLBWIZ1n2kVfr(XktN0nuo@pJuPs74C;2mC=HP z4_1~^LX>(pObWtbS@@KJ^~y&mRUWh9G3WWAUrQR^R7_;^gQmP&OfEb$jD$|iJj;-> z(6@WQa}Cmo1FF<68KayZdVJeEg-LfQH~l`4JP6#cA7KV}LxstxlV_($-hm;4aD{+- zEBD*t1aD{zK$lk9wym|EV|JG0Btqj98(1ngpCf(Qz?d#+a;J<8x2x;V@aH-6yD;LJ zyF?;`eenVLLC&9|`7fkgeYr^@$Yd;1&%96xxqkow!SNC^Hx6C78Gi}N0zlc6yrAu{ zdcQ=+hH#trGPbQ0Ns`A3_zyI@ZCiMQY{jM3^bdWCXXpostz9?>0kXrSMm8kzV-yM8 ztt}ENe%1w%=)Y-M-fBuqBq%(d(hEKWK&Ok146+p%Lin>v?+Dh848c&b1|aS51tk`_<=UZWJ7H(;ajp2V7Oy;7&Ru z6ZtG&j;Yp&s-DQ(&K4mYDl{a}IdbM9OmB~VOhfYRrP3Rv*a{b~t7(m=8VqgIoxlJ# zi4u$x4?R`{;@!3tyKWR49FeOf$sji>JwwrZp1w6Au39T9kVIHn(tfMFs-m5cjTQWO zh{jexzw(ToZBQvQ0sq*&af|?`kH(RsJO5_o(3J#WBFqua2>dcwx?Cp<3$j1dc&qh` zk!t*BP8Q__tD|CL!ZtL#U$=00IPY&}a=T&DDQ!87J|$2`!%SRbXw*=uAVq5z_JUPU z1aRaSN_wRri{`INhBl@;=u5*=!#+GJf1FBmLzU#~kZI78c>YG^^tgZjkenN!^XY8rn_1Ty)+Kj>+F>Qb%G;r~SA4?Harrfop+a?qoR;X%`!y z!<}{etw1Dkj@}V9+YEWxDhY)N$VOocKtQOl7sXwfft8Hj)-_I`R8g2)m@ z|D@q`ZAMHEzWj|^5ia6?5-9}MHF3p=Fe4H547cO^Hk)a`FB|k)(40Y>H3>^h}QwqJ_u_K`(wFF5dr-^%vGOk83g)rx9J%*}Pt}U z-24E8_nn<$ydw=4y*=cUqN8jk^eZ;ld*rc}{9by_sczvE2ouw_$_cdHt_aQW+L;f- zFr+l;kV7@CZOemo8P;`a0>6H|W2!(KMzyBSB^<_JP~bloqsV6|GyS@D6+nez8uv65J=yxFzD`^Zbi!ZadGAKav4G!E>& z4ys`tja#I*NHJtiATUK?#}%)$NgbfF+~Xb(fEafjUt=a|t4?0~Xavl|)IHhH8Md$mfWnua35pANj^fhUn9dFv47& z^Q^SK^5>ja)ky9F(X3buL^e{%WUnn&Wl&Gf?H0{X%hC^&P(LYi8T5X(FjuOx8b`1| zTm>rSNYks+p7qgVYD!C?j`(G*xidGolYK>?=7a>(n7hNjHra%`O)c!M3cqWbH(gj+ zYdk;I(uWogYDmvL6DQGeiZ$?t2K(2vz;~X}lAk;5q?z%GcQudnl8kS$TPc&G&%h$| z72J9ZECe*`urO8&B@dVCTlN&_zn+mNhqmQ`KPex$Nn2UGtqaMQy_SJ1^Pych7mY+@ z)d^)L(5KECZ}jS$Y|I`4`h@u!vg8K3^YUJ%Ws@pJX9Ifyyg~VdrL$OQ=kYx`T-XO* zY$af$+BUx{?$DvIETw#tmf|Z-&q5~zA%f%S#c^j^g008Ol0@R?CEGw+qApv&leZYNt?%nQQ)dHA0VA;8 zqiAJ>zAEb>QomY~>i1ftml?k|P@fmdCkKj>UQ<~P;e57LR z>Xe3>PNGAyaLRM_o;?Fyil2V^LIXJ&gPbYjZq&1CS^xps1Fd=Xl~;?^4VxqwntYK< z=3xKbs)i(<`v5PdCqma=h9fbGJfOs;gp8}hN@}^(VBgi3m&u}e6&~bzdO?Gh7cd<} zYDlRkVhBsjMFzD!DA$WL%VL|~AwJR^a>pCED7Q$!&-Em*k2~nsWk50v=L~x9f3aR| z=B(8i4PR!fhg(wx3mXoJO{sVLxUsMeBY0jses7#+!{>6eH$&0co?3T7z7sgl&WxO{ zm5|4u59F5=@W@!9WI%xquzSBUG|7eRn8!IyR9v-A7_Tndg`3Q>^)Uo;YZ7k#M~rAU z0%1`c3Ii%}D+kCch3w8m@vx77g<(BB$<+aKgT1kAC>)sYIl^c4)M}RY9Lc~;2?B+- z1jJh`W7zTxsx|7A2X3_cVSrDhoHG~utjaaGKNbUu5Nquf&=%0eN&gna08W~4Oam!Z~O ziQR*A+*8%HKnKXtP&yiD<-CpxDeV5%ThET&HBVpu2B9Nvbr2>E11_|L$99lE11md2 zE-rF3@(g<450aZj13udE2ocva?!(fx-4W542JX)zC5oLJO zt%i0(qcQHLQ~R41h+5X5Ly+-Q)&!I;#Yyp@i%K3UpItpz@vR+7&6jN>7o(3GeJ9kn z^+cpko1_VnHUquZuMTI&N5k{n63sZj8%(;tJu3i146Lm*r@{;ewJJ{O9cZ5V_Q11sW9w=7-$md^$4$x0d zn{6L#tp<2IQ)dSwmQ=cvnNsaW{rVCdse;xpbyC!3YHWDvJ2c@z6zX?UE=jrcI#muy z>zcgdZs4_CL11S72Q9e2fYgj+3&>qDv(VeWbs7OB7`&RyIZtmF zvmf2ky|0FKGTP0h8z&0i=cU)qnGo@{s8K8$CN!y+79}P+z?2RB!A41ggiR)q^Adk~ z?67Af?e^jyma9#c2^e`=&KQiM=`2wF!Mn+ovVjqzb~{?8bJtLScwAfxzP{yqKa|jT z00^}Ij`)B7OT7TqA)5DQH0BO>r%!JAmT3TJ`e(3#H42bP;;4}CSngzKS}@?w4X`^T znoFE7HZ#g%srSE!$DQ(p$}9j(z_?Vqz79P6#>OhOpXpGA9zl##O3(E_F!8Tb=WZZm zy6>c257OkAEXM*mWacHWr7XaA+EV?(ZvjCKHtvh81X4RDPHl)d)BxfOc3+*c_`C7` zp%}LSp*aGocWMU{Xci~(WlMqbp%)T6_fp>Q6Pw0%=Hc%07^u>b(W8yZbKDt`&Ql#E zw=Ag)aXw!7PqxhS*H1}`f?T^8<=h!PPixB`xqt>MxTC{y{_0*BK!@!Plixd(*gm** zxQgA_tvy>FSCX2qZL=|T^bDE6DF*k?9STo|2p?3_(A_qD2+V2$N_URpWtl2pWJp7E z?urnQvkwuc&;y_^Y6hQcS?jL}*}9(+1id76^yMuR648WO7QS|p0I#z8{cFEdxAGh}qD)Bii=GyL0ET@Y#xHf1jh;_WLrbER2I^D<+jq!einAM6@?VI-;=gz0q zWr;3E+z_Z}k|^ofJzad_315ibHBfRn`%R9{b7od&DlS}&j3lNdKxM%0EQfv6-m?%QgeZPp5>nfIX(+E ztyk(45Qv8A{-kU{jQDQU7Ymlf$qfx|LT2Xp-69cnF5 zPt@E)r|)$hTpXblW0vjS2h4Kg+l{BE`_sM@HU`SSJ6{4V_;hPL%i*IP)(a1UZK9Z&jhO_LQ^+qyQ%(Kg}~KACE1=?i6~nV!!b*z@sfRyU-o$yt^f zY-E&NiK8_~8^Q7#pUounxN4XQd?LeiKzrGXwAV90Pb+w@{^naFQ_6uyVRV8K%Tvxz zUj^*7r0;r|L}QZZ2p~*QB4m$Q^Vv32+pUo&Fv!c2n4kwL*7}QJ(K;kA)AJ~lA&?@! z;jE6Myj{xsDv2n3FmuaUz_RzvvducBzMtiP`2PG0t2F)e!1@A#UkqRF9KtPk5TFaG zkBWpOgt^;O0HA8xRi(_|;YMa8l@-J+Qd%NOh(@d?gF4) zR#ms_@e`p#Xq;9QW@p2$^TAZ1m{xgaEUsUe7PN+d-n0!&kC080hDDDTq6VvD=K|S^%u>iPuNKSRGu$-FFG`emi_&@Y9X+rWwJe zzu>d;{+Y}J(3xZ6qd8q zSp%gFeN0xB2`_NyKlcVP($97G+x&T%XlEI8%=$+%EpZ6u*q3aKcgMm;ze3uDp;bcI z3rJHCaescik!^7Q%-;s2Cd%FnNnI$CULX#s-IwMhhU>#oX>9jJD|$2r@a;VhvQmK* zCmJ1hQ*EvCB%*YPPYnu`vr{XaBAU9SDM8 zk}iR%GU^RaZFZi!^FbS9RYAuIzh%&s^I*#k#o2g^7Cl?6!TeMqTdreaW&oFv-B7`v zHe?iWhcQ$5xs?*NEC29&UbI6BF_1K{L^USIU+p z1Uh1#O^_W2@?0<^*x*J(&pjVA*0$}g?^yP0E*d4xU#WBdAyJ6!piU0fZ(-{1KEb@Q zXQphW!#qEx?xRerF!It0x-vuyIJ=~C3q^|nY64@pxtPmy0iqV|eskkhCp*iQ5TLT9 z*a_HITOd8q5J870o!94X+LWA_>k_7rfMe zg*d%32EaUYvCr~hA(>J1jZC|fd)3)}Fx)T5K)`_K7pp{5vdoYeN(fYueoiJc(r$l# z^3k&?`7a{dZ3%*OF@YN?` zj{)#HxgsA=tJbs+P=MW+(icXPZ9Xn=lX*X}jx>Wb&$z+J@Pw=V6js|N9UHpxUmv5Y z4&_FDi`iwE;QF9&U#p_&nWqH34T-~y3952CUnF6sgf_DCozXH2Ha$0LL05wTFIv~v zGS9o@PJQ2Oz)X zjzIktc<9l&Xi-DT9t8lr36__fi&mhb%)~ttJRvW@mY$4wHM`yI7}0g25YIA|`)v<- zuz`m#U$WUHdcN}32`~B*n|_tl1>m&~bcz8BIX?HL@4+;l35Q8xjhZ|JGHUrN5xXMxfy zHZFE88E`VQfn29isGEms5R3XE5ME|}>A7;xvDQw#?ad-4Yed^*rS_xRNB;volm>2` zvl9rv5z(nWX}!@)5s!G=3bdtwIerG4DgXvFI3SL{29!-TGV@|fh^5vV3YBS#kd?9& z4{SaU-aUZ6kQ$m^&o?zW?PF-a3U)-m?cT)%aqM1nT?E1mAe9-=YX4J0;;#lB3ho#^ zOt&nn1bj9AiGW_J>d|y@inj5{X~gg3LB&2q2HA?|r~86s9oXHLRKi~INJ;@IFBKx4 z5j$xrAq zQ_UXc#umQH|Kj`n#3USvhiN1=L=K(vIo5!+)1k}rsc^B*`p`>P`qQTX46hCXE}J7Z z7xcLh@hu=L>BziPr^NO>;c^qE7$JNFD2cc33PNDrhKBj%%dMV|ItBq#zQ4S%aX4l6 z*FB?kf$Fh91|E$VO*iK014o}|3%7r^SYr!*_q2i>{)plU5yiN|ec5N1S6 zZ}J)iF`KHVh3$3W_gl~^F#~rCTarm(3ZT6$zv^9EPEZx`X#r1a(p^8sX()xS!y3Hl zxk1~8riX5va6iQnl$n-HL=f6L1p>Qsay2r4w+6j)#TWnx!F^VXvzXJiN-bUEZ-ZCy zo?koYjhF|?C5+@!hJT*7?!Xrpx4GrOcb{ubTH+*6n~imSqXNw4c0qZlTF?QV|U% zZ#MZw1{m&*q#AJeiojPz5{|5fb!8cHtmB_lj0zN8pWec&ELEFeQ@G~w`T z?jRXqDcoCVGW{J6zQ|@4`&Biyt!)qE; zCQ=@{ME{pL2>8FDua+$t@UESobz3(E9bJC(ov+%yvnCGzSw}Ek3rUlx1J8O-TnPKO zTKWrZs6vw$=gQrAx3&J7FRwEgtWxzJ*gs#GF4oF8=B)X4I6L^Uwdl_}DKS!xmkOxD zj53UWi)LWIS3>wFcCU-%G|3-Vp)~+T2Jv>MaQ~0vm8<|_fw@Se=KE*={Sc%?=+-g{ zzWq<@yi}A_z7QlUSJlTqE8n1~fznMs+w63vKez$V6hxWIW#y}XYjvQ2Ar+t@P;KrO mO@BZVOaefa|Nq|bGha;LX+rC!_LoP&Af&|=#L7es0{$O{I&&ld literal 0 HcmV?d00001 diff --git a/spring-boot-demo-flyway/assets/image-20200305110057768.png b/spring-boot-demo-flyway/assets/image-20200305110057768.png new file mode 100644 index 0000000000000000000000000000000000000000..61d6d8085d585eefc07f37a9a65ddca9bf15a19b GIT binary patch literal 33384 zcmeFYWl&sQ_qT~8I3Y-I4I#J_+yViD1q<#FAPMg78l2z`!QI^wJh(eF?$BsA&@{~9 ze&+dqnR?&5W~!#<%TVXgr>M>8(`&E2*IK`I^$+DwGT0cT7zhXm*s>o#s3IVs04G8a z8Vd0H=%Mit0Rc<#o1~<&tfVBhvV*PpH!Cv)gpWTGlTr25G>LwL$x`2xi$D7k)bR}W z8PXt{vDC|0#xS{$Na(a7K{=a+2~1i|VF8#G;S7yBh$Z+9W3QVl^7xfYW;TBZ54m#Z z%=v6VGeO`^=y=Osmgm@CZ}2Lnp8>1k+hLh&M21+xzxb~uwd1FzwDUs|p1<|Oz(VLJ zV)&AAb3=?^w*TPj?u|`d3NzzNtn!6CYI42|CqP1obsN-{2+l#ch(TB{KuT>#LwHSg zXl+68_j3l~;>Q=rK`d(a(ILa1GYU4oHz=wi5nb3I4DyH?W+D68V9wNqKNpyYImI5N zRL%W>;YUg05Gy`HBoQ4TT$*Fl8lFpGH*`0mGzRiA$A)cRI)-S+N9YV1;{~&1iyb|( z3_Ka9Fl_YM3uj!o-=wm z>)mOHZ@=Ksh_R5?3T&f&^RbH5$WCPavHm`U`B^3-<0jp=0X96wZu|yO%bjWb%@BUw zv7N62ycau%?&=WwMEAes6^~>lxVD3jWq9_gOkbD~h#Rzi;$dnN)yBPM=hQI`TucaS zsgdM$FbiPv5gN3LdB9sXTEB{hh63NCl+?u$WN#&w1)p*z5yH$vMBHWQFz2c1>CFuLH zRCCk(x|#aj!#T0Gir3G#pM<%S#Y7G8aSX6b5Qu^h36;B(o)-q{QGWwlp9XjFh~WC+ zY*V9#`K4=c^SoAHr463{pp5k3_Xa6^!#?-W0GA=;E~ZCkbQb$dnP!2nU4>gZ3z8oIO(O}Y{3^ZyPX;9mhp>Bg(@M~9h;A_DM%X!~<$r#VV!;Ao0vrrElK1Gj{N4hp^HTGk z3lXKivgc*+E$8giTY5wc$Hw91V-jvL4^w!$K_>&BOb2S}7HG;zs;l#~FkKLZ$~QOO zT`6~jgqX`K55%LwflotaC{$GX6C(yChB5|cNmThwT8W1k(y7xTOUoM>z242=d|hFE z@fa&IHNqmoA_&UfGCWl!$qLs{MB^-&yrvr#LKjBy$gTW9)ARLpS_I;%$En3mznB3B zgcq)82^S_&FEsVh&a87#vl-Nk(5?LOM+Wh4{19Fub^mdDiTYEVGzH^`CFDr^g}I-A z5e)-sqLF|W@?4;z5%U5%#Lqj2gdAz$&-l9VK7!^S)@Gm9KWY=G27!pr-hV`+Fs3dH zdu0;S{5lJb3|*o-j`$6ttRz<)`G;_ZIDtXUk94(o+A&t|596p}0|)K5S*Cuhd^n{M z8N}Qc3D4!3L2D4Fn3!ZB+sT>yiYNGd^gZSzUOkq6xJI7yzD+&4NOYD=)i3>hwR$S# zlo$QI<(zzxQT8?bEEL22+Y7?wNM+rJ)zam!9;TCP*vg4KL-FlV#=2M6Nu#^t?GX*a z#(R?2kIpmQ@O|*QB0)W{Go@#Oe=^qP&gjq3;?V?xNP-+BUKtB*AZ!qLrM040{rK=Y ze*fcDu#zb$XEJ|!b5OH?bFy3Hf~=SLF@4;}!Z(_#)Qr)+^snNEWRE_!$;!wke_YLP z`a)6rYB8St{U>_)zXjV&7i<@}7jze<7YI_>CQ9c;y(&Qo+6iU})(ILzQgVD|e&5BN z^HEgei(6)bXTE=@y(YNky)KB3j*g1X9{WJ?V+<+tdnVXmS$cgW4lLur{|B0SyP ze^YHwgl{Uy;XdNE%e5=I`)(J8OGwL4`+=4)<}11Vw_dXNxVJQKU&mv_cf8e9TuZN2 z=ux~>&`jY?U*qf<)f;)6Hp;R5)n%yMHGgu@FD@YN6)iOCewO^5E2k1iwsq(1eSmvc zaDh~Q@Q6ufA9{p=e4$yGS>?|6VcH}S4XiS1<{z`)%knh3>LRttHAKtOoPW+*SldvT zRn)JUtlEeeZGDZmQu|&vzZ=aun`E7C-L}*?+BiNoWD~GT-iFdKa55L#6R@>AwR^AMuHVb{j*UoP zMUzVN#}Uf>m`ad}PhNiBp|rkhUW@%o_$ukjX$$wN>5BYn`f7GmBUz@XN8kQ*o|wCv z=eDQSW%Ij!yOA5t0#luV_A{q*0=GFggY#dWQf{Nr@8=$(bI#>okNa!*+DX>%+q=$f zE+6){j%cCZt`5!{E=R8_t~H8c-YB4)`Bh8o04BTHGl{KrKImDXTZhXS5!#KWp4w^=D({CJxF55K>5}%!B!i$fD zF|+(M$B)RsLO!QA@ssuYz5CabP*XjVZO#h(3G^-c@-#c4IZ+MLWpdO_H~X^9(_W!| zqW(voIDSqalhIxobW^~4{=v2+GlV%4lS0Lt6dgRW)<>9 ziCO!;rQv?(sJV;kL*5k)%I+I39X-Uidv5t$DVU~vwwqEV=WD^fy^9fK=$Kx>U!csv zqxa7ylYLbXvo^bX7Fl8&BUI5qZ!Nn0&;87O$Mfxgk$^x|$!}R#+fKs=+(oWKdS*Md zl@gEL?}EKAzTUb#|CRFVD~erJBjv+sT1yFOcs{E-E*X`@1?-C%9DI>K=e zJv^0*RV%MXBbR0JBLU34mGt4%HZw{tc1we0ujN~_%Qm79Yzr;1tsJ%+>;;qs%<_ib ziFfLjsZxspwWx+NKC8-=x@_!S4~oC}(g`;r-b5@Bd9oTb-KYguZ|W7un5plC(go1% zby8efUpEEH*CjWyUurkn3)r_f-8Q`X!|YPYqorMY@uw8MEKQ?ML$lnc!F(yLPTjPO zx1yj@z4D|qy2M7?qRHmA73Zk$sA?`~?zrMzmA)R#JkYMEAc}^Jj8EIDbmhvY?#pEq zYn*P{A^BlxBVH4st#>`E+42E+0W@pNw`|Y?-+FNnU73k4q%;Scn+J1&8p;u^m3gm@ z#}-y==&h9G^K`e8Iz~DYL4n{z(Bp&TF3vne3T(MNz6QF|^eN8zo@Q`Dzvs{56 z|4C0k;QR}$WM9p~C;H~L_uJS(o(0l4x!{p6WL*H#vU@4Im(J#9$bS|AWk+4|UP@=X zGq5^1JNkM;KJUJ*dRDNN+{5ba<0#~;KR*4IFZ)sF{^)nb z^Ct8r=F@#pNvow#(<$E`2;y?85r*cXcx6dhA*RD(dtV=Ga0$ki3@Ji>b)|CALb*LQI};zTbQG{bOL~3_L1Wvn{T3lYwK^`|v>)Ch- zgu|V8EA_tyAr~_@zy9FkY@DpG%VQ#ZtU&Nez~JW8^W{ybId2;_30-TIG_IKKd(qRNdFyyqMC#J-)n@Rr=jpi<)6R{y4^=@ zM+5{yx~CISR`typ0)jY#?1%TC-4IVQQJddL&4yrVC6d#niT~PuBXEhY`2jtGC1*P$ zDKg)gZja>;U7g<>V>-E{H`Hh!V{?A0f5BB&#=3{HLL!}EF5^zK+o@pT@eYwyef^D- z!^1SaS?G}{@aoA(MUD!Uq=B02I;9KvvbcCi0uqPdis7?0uS>;&?0hKt zz5(<>3bzmuy;Fl+Qv5zabqdN3hIeBI?;^+qUyc z#_>#X@$paeE5Tz!fmn>0&SD8<|7J=57q0>Ppsr$>Nj>`@{=YqP>d*#br?jDxE&n<} z`_xEW`A!p~${PQ2Pw{7h5rCEcUwBl7#$}tfsJHUd3f!Zy86D^SWT%nbV|G+NH@WE+ zS?(bj;3Q<<`z@-~>v==4fiK*d59D>JUaRlaj+gUZY~8H~o3FWP&7-VLV9jOO`ZPC` z(joites8sY`qMJCU?%P;DwWqd_fIIflk|(>yFMCi4cK6>Y$K zt|DQwtQTfD4DpA><*L(%B9#?UzKBwkS(3_`2AeWxU%IR!7c2`SMU{gp4jqdo_IDnv zF=8|f)he>C#f440CfbjvK*5t%i?x^EQo( z=8lFp-9$Rshy_~V;#I;;1sKbl;vE+()477%v68|a#yue|aL961$s2Y0^l;6%2yr%l z4Y9qJ)QR`FDIasxy-x|&4?%^>mZR@FrhFMnAEgG!6r0u_EXyty_Z^yOMQ0cLm8+V@ zc;6C*7i6Pf$%(aUF6H}FMlgBq;T9h*S>^^4I>ak*{eTT=c5W7?eJ@SgeE_x(C(unl z--?pYMSN0WS?`COW%T;XmJ=5j_|L~wi>$>_QP{D~lq|h7CR?+SWVn9Cs77X_j9!$5 zmsRU8Ds-MZfou-r0C2MRkuK;^CWEOCElivYt-kIt2Wm%V_WgP$XAy$|O6u{qhrY zyt>ZoiR))ew<|6p?V^moEyQ5juCS9Pp~8|e{;f!CM&|}zU1u&z`*&IAH3#87ZzlHl z?zdvZAaE|MYP_d){PnrN3xw*5(x#8%w1elfg(o-hj6bWJHS-|9=v21)_>12JbS`!NS%`ADT}Q9O z>60@=O<(F*#M(Sl(OVkU63th4%xGVvhp&rTw=wL)UbM@4-D)LjdBXQgF?`h0>PE+G zKk2f9!BtL|B)w|EN5<+t>Nv0=&jy$whetTH%``@2uBLH-bAVj!F9_Htjvns!#M%JI z_|2~61zmM*v&ixcGJV%(Vn#TxCpda*QTWp zzDd+&=L@XPmG;ZABbOEXf!0fhy-e3uwNClC$aJt&mq;4}&0omhHfkfSiGZ{PQ76|!s#UUgcOGCL$VIW4Q|JY2pBCNfwsBsGxf z5WSvJTkU|Z9j*C3dN%>LYE#$H?(^Og0+G}kXruybXzEnq#F{m$3-~}@>AiJw=?UKR zDphVt2N`D%yK99jn#13$IvS7a;R(S0wby)kch-aBox88K5kJH_B z+sgLg&ifs97&zplak+AeerW3U$nf#-lj!XiP%<12_65VrEUP*imp#E9tK0EPS=f}b zMYR!X7iRNIjm5rXmwI($+Xcx6hw~p-yrHYCheIx*6fSnQ9oI>iuvp{t4q#Vqy&Mx7 z_l>ZdL=qn5+EB|Sf3}-kL%ZDfpUlmw(gu>2s zdCGaOFo7{V(Dgu^JMHi*sgj~Ak()-DV;Ey$6<*=wXqURhBeY`b6CB++tTByO3)Hcb z%`n%qllkx)8K)VT-acO$mah8?o8BNqa4 z2hv2PbjzWDSf0#M#-zC3hLG9pJ9D)=o)_a|fFSJ_$yz4p&>pIXiEO6nrcszd zqnmN?DR?843Szw>d^xgp9eh;Ll;umM%ip-+nfWjVDB4Fb@vG2%zH{%6Sq)t&Pei86 z&eGYpQ4~UR`aZWirPb!?fXdr2`-{a>9@;t z-|T2dckDIK{HnXUzZ~~ma~$Ce^$po~qI6j>UaP(UJiIF)@<#h5rK=tqG}?598^*s* z(i8*Zaz4cIy$J-fXnRVuyHMQbUIxW2O>O3-h)qeBNT$ame5+HZ7b#VJ{Cra#$^J473Gz37t0gFtg6-IgY;f;}|>vHb8@13Ad$GAZwe(iT+gu+oF1OQ@%-X zVW2Y%#G_bXJOuTN&Nnj@>iOPHXV=Q!cu#HIa!JymR*de#FarfZnpni9^;F?6610f9 zwZ#ejX?@lN2AWX4rSA$lsHNbc2@l^EJDn<^9C{_m@GI8u&IiDTdNIx(E{P9&*iA<> zBL|f+dcTUOT5c+>bG_4Duz~;R^xVqMr_XZh?wVGKe!aiomVFUw69b)enpWJ~&GNJn zGa@z>y%RwZS>|Kd_-aW);J?wGZ?!_0WqsUs4{UH})|Xum*Hs*(k7Svz!JB8RT7|aq zz9CS>n+}Db7_o=u`3@51Lm@$$hxOjydvwWqwLft@tF~0hMEA$sT=RO~JOIzQ1m9uz zJ#S4LlA`lTa5tR&9{-f(Rhi~w|8eXQAD+yUfpww<@*m{IY2H!qGu_aF+Ky|7bI1!< zw%+499elEST2BGNqB4Zw zXqK$Mn<(Wp!;xb2ff{Fk%C}wf^gNw}ti%BbYPapi#p{95(*FFZ2LTfcISM?v=ca@& z5^Z-9HC^TneLJ#qC27NF)1%F3gJNhSmA&|LXF{pEhXY{Zf&FQ`3{ziM+*>%eQ1b{f zF5c`?npfe7an+P_TZTwCCI`jwBw**7#=a8jN39@vYjPCRr|sk`UMLGukjrTZ|HSo&xV7Y!;Cd8J?F5H{QjSLxI>mVRs-1HtMW(nP)w?E!0g0Q7f?{5fme20Wc%-gHnc{vw;*BHJj^wnu(*Do}jt^)mH zSSYr|f*4C>U+p*LHf<6jfo3?STi6 zzrQ!kYFrBPY2|vFW^ZK_b&OzmC_AM+l`MP1$0U{SCqhlG!s58VWjg1R1L8&E*~k54 zwpVuwl^dQ^$S=X45-w(*lYNd<6;4R-BsTz!cIi&CN6tPk5EiR}pDZ{ep9DI~>!;Lb zMLv}^kUZ6D1@1fNVb-QA-`*cTCxTQ|h4s+p7e1O77F^QwF}UeTB)*D7-pg=|&My72 zfwc1)8_#}y36rx)%51CNPRqEa{WT9I44R(1=p*TG`#q08!k>U-hi-s!i zQQwhu4Agm%+@18Z5+puSU1{i_bYU7VeoiUex55Z@BU}+;V_&~qL{79cXp27l?)5bT z8@pk5)r{GSaA4pP*>-&YP{YN2g8ygY<=w+p)+J)ZZ(P|Dv4?JdUnyu4?l{h^#9#lM zg&ayXUk<{HbW=2T=WcVlhO94J2Ul<)OW(=jwtQinKa_#LN<9@lNn%pUUMJ6CL(@B6 zuOD>&8zlv~wc=VtAY0U9|6Y-py8dXsW9zzDvaE|0olm;8L9B6=zfN zU_Ih!z4LMP0{%W5fsQcz+nr^h-G&f?E18$+?`U3-bl21#n22#%%=&|&;Fl%9MLERZ z->iat=Bw&tR!uob)h;IRpv;W6bhk0oP19;RxYEkhdU-lhq3*IjmyQ$3G^ zf)07#Y5LrG6LB_B0@k)^5?yy)j6?F)$OluqQCa%TZPd*T46KeES*sO2i~0O3PL@@3 zYffQ~p5O;eGwD4P)W&1SjLW7~7hM}d;^HWnx0745R?&E`P*x*8vT50Kc9Pvq3LIuP z4o+igfi;}{7-gc70;1McJB`-Ws@m&;O>nSv9W1!sqNbI)jmj)LJK@1ap@nP}^(e?g zEtw`5_p5fUinwxhI!Ewm^raEk-BN;BWWC7=j=4?3t3vz>8e<#z=IHd8=kqJf=l033 zc?=Y)=*OLY)^(FIqS1CJ9_QHxV)GV{q}4cjt(Ui*wl?a{C-p~!(lC29cL#P&H1Xs; zV-?2c&U;p?3ZV>{Kacw%#4g>ziHx#^>%Oo4hkqap^N@f74WA&1fvtsI1FU)&)2Hd= zOLl(0juJ4L%fM>Ym|QUIk{88$u~!UpXFp5u!0QLGcBy6UBzQ(6691u&c-@ONO5QWh zWBnTCd(gMR6(THFCx_bF=}$tpW0o#o&^Df2F8WyX1g+Dq&V&s+)nmj^r2NU}cd7ZjeOvr8RW(Z4*yu3Q{x^jW zJaq~ck!_3cZUTMf`v$pTvcsOsBUu$MzGX;D$0nWS&fvS z?#ROLo8MuH#{=SS)@!z+^;%!EoaIwmdpA#`URpk@P74l6vs$?k%a7E`uAnsH9f(_0jyNZREGKUxL%?RV;feTCh|`nGVT;54 z=5&iz1l@%*RPuRC@CxW{jTdJhFWBe&{@i45E3}#=iBL{X1icEJ1Y#Vot%>@^&5>jz z+;2^N6m=G=LPCdTNwN6(YqR#flTpQ%YLZ2RpgL=``(EaJll3A;`?K4;^6FZmue^Gx z-pt8|Ur2N$dxETgR>YfF_ymJZuqh#Lw8|0ExWDo8I_3S#HlO7R!yjKa9@)rjQ zFwc#nby2ZIrML`M{um{?Wt{Gca<8m2i(IvslZ^{PE@Fus{n7yUSjO{P# zBD-cCGP!WS#_MB-f4&R3Uo?tN=p33@fzIL1F76&F9gF1HMqZ3ZbM_4XVC~Oxb%wxV z8h#PaTyI9O->r{)N(U-l6#X>3CjIyeHmU?Sd>0m5FU_4F6is%<#M~)C12_6tYeONH z{h}ayW*4L3%o4{k8+Go`;by>wa zJb-R6OYP2xP?p2^L69C$w)+@sHQv1GqaLXXT4pg1tahU^Io-YxWL>;}_g$A>2_+Z|2?(K%d%RGT0nYD@;{FSclALk=N7SKOhMKee3Zm`>w ztV^FxScjpDC*KbCSh0o&jK7Mof2^QhvgEdw$MV|NG|MtVZF!7Z+15~yMXJjuLgPqg zp~a5cP|lEUdj$;Cz|-ITuFWcJ(}^NxH8InP3bUgZVT82eSthGmU&jC7_WU4Gy>OCX zw4aBuHQn=?S~?dN`&^r@%C!uPHuIf?)h)s$JPA#l-n%F+ingwH5mUHXwUFJ4S`K)R z6)ti~VxV&i-uWTFIP<;H{KAVailjmvO~PGR%PY$pzvxYfV~WzxR93zTXX0L+2r3D> zCRRN=k2H#G2BZttrBYqt`8j>><}?eGap$cQMY$#d*ZL0T!=X z#VTSgMmI4&-f}1o##>+Qh53;z&77NmloR@_)M;|pWR`Uli|*ZDe#Y9fFD840HZz_4 z!f_FZ;I^H&g^!IRYDr739~Q(E4$6Wuu66I?69kRGFMyC;GyoL~{6I32yw_R9@D>H( zSEvMH1oL4Jj@U}od~k$Pd_wb)dvdz!!j#4G$7Jmp_A6VdRvp;OMyTI^9HQ*l0fpN#h5 zZ;h+P8kDLg*H;piurZWa!&)SvZcK34cepm>?V6B;?2qNj9|xuj;#|TrU!H?;X5SRr zTDtczi)%m!L@5qzLjc~RvKCh!@&+x3RaniJEmbV!u|!P+?H}08dYz`ZE@ZT zOj-3%$<2EWoUlhvhNGrbVL;`!?jJ}Pp0{R)Wh|{e$unz}(b1fJ!BVv1D40_JBb3r( zpZYn$$^4VRGijprp5wR@Fxms3k3~=P`sKJ7cq@k@(=18bD@7Wf_bFvEjbC!x+J;msScjE#P@71T+$?QCh% zxUA;J!)!8GX+9>9FxR9erqR&(M%U%H+HAjdU;qBTOYIymq+lpriqvw-q{LR=FOytO zn&&U6{AgvOukvKicce3jOU+*uL|W#SFjKXtHTwybGYkMEI&0e-PNu2^20nme`5< zRHuK=i9sdR7IkkP=Prn;4XAsIM|Cj9aV6dtkQkv;{((>-l*TCDrD86*DZO{bEuxSG z(@VCKbkmY?hhq_o_wIt)BX5i_VSs8m{D9kygI~oQ%qlk!lVR8iNEd#ado5pv5R<5&pf+yY^AlVnaP7E*<|KszWfG- z`3uo=EYs+xwvV8Kd{-vmSsAT;0e!??2g2E|Ywn$^i$M3(xeXSJ;Ow9J*Yl(yxed_z zR&UO?ynXK*<_*fQUjA0s*k7Z4u4W}PQ|$E$@V0Er3sVpxOE(7h+J;@X2p+daIaN}( z%zOfE>{N0kgz|LWR)w&wAiH(dW!XJ>mBFq2;bK%4J|<^nNayL@by_yY7I#FEZ{={fqK$8dQfk`qZcCVa5<-sC@q<&e>WS`>{$V0?Vtv z3v9CWwlcx>7LXc_vEO>><{eR2HIILg3G*3h7kSwwD+fvfyO?is5C-!zL0)&0~roqF6(G5 zH&syJ^q7xtTv7o+A6o(Q!+A7bYz(HkYxSBeLuBdBRwNFVpcS!kigSQb?>ad)-;j*7 z`(#`mE?=NRb4tMuov^g9)BuTW4`vYV7SC^DbB-CijNrZ+4GS6H>D+wIK2`)aY>w6m zj(8=a#< zE$1K$N{?tx&*hMaD1x<=3y#>xbR`?$luprtWkbhkB7wx+MPE*cAfA1yhR53S+ulDu zsponj8jK76v{L-bDi<_jkF^q(D0ZJYinDi|Vl7~9V!xeP$FbVjP`fa9VGC<)*s?lF zu|CmLFif*71^P87x-(j1Ko9z~c9_kPLF(poi^4BAsFMLGISSnIrZxYzb*4v?FfZ$@ zS%Vr~GAbzQDl*kFDOPw%leu((Y$%t9AFCDH{4-0_ii5#pNOaU<;XcMEk?YUkieTn7 zw=L|)=siB})gDCrcBnmKOavnq_gk~A#xpBZ(2gY*mK&WSH-rNXw}X7`3uMuPipm*6 zvSrlJS<#_seMC!g!{>ElCk9JG1ntutJXRN2f1nw?RX)CJze3kM@*>t;1AhlI%TG7D zbet^DMb|Z$HnKXh?NElEyBvZ4>)?O5Ah$nGYzLBrAl`Ea*Tz2)n?$o?Wse4%UiUEU zrl5SJ)wSICV(w=oRcOBvobpO~!PLl@Kw&K~3p=}Zd^n)_KsX7v&Z~!qU8$MJwBD8E zFR9gc{T@_O1@kO-bG}iY=^2d5OMLX4mlA2`K|#dZ4x?;a}t=|Y>Ng_O#W&X7z<@S`IvXajFKw(LZFw~>!~Z6{d|c@u!mt|_+tfc zn+`erGyU*fkB;z3*11o2U$S$rpxVC-n` z>OuruRGU}<;&`v^FQg}Jwo9^1*2mgN@!h=BB-^r6lQ^SKFb*r=rlUHzl^ z(~#Ax=<-35_(R;Q(^tM;@!Rg;;#aP`q7YzSS8T7Mh}ADHVw0u6gOb{f>vJCiISUL* ziYn(l3}@4uYUhhqwrcI0X!RB?=o<}FRFxQg%h?zpw=_{HyuytuoZcK4Q$JK6s45^?6;NV*ltcq%R`;G;J>S0Lk$;!f|@sbCh zxBh;ecLNe zqXG(EMVh!lEEiHbof@DV_jlL22^N-P{&9y5Pr`IXGwh)K(8~J`-`liTg!SsYw4>?* ziy;XKxu6U?sq$4*AHL0##lQ=mSxZfHwvO0tkzW&L@|er7JHLOXwCsy_h_UQj#NIQ7 z1v6d~yr_998bWzY?v`tIqTRFOl0PLh5~~X0eqg@rWw^+6St>FA$rI#WXZPKp7~wyB zmx#O{iNejAH_(8;|H>?AOe-C^zj#q<^gr}h6zxQ~t;)4JscRR(bddpVzL<*QJ}Oeh z*KC-7-Vg)Q=o?*e2?S|{;E@56z``z(Q8*Y{u*8p{SfuL&`!BDiJVu?ymW@G($7d0 z#hp7QKfKCDMxh34!``oE7hhC34QZ$&l{TrL@8_ct z;7!!2g%#Q=eU+92t$DoC`-d#cAwype{cLIMyp^ezCG{WLEJqBjxN3?Ds$D?vA41RH zhnC}8*DI}^e<$|*YoC4j$S5zj@voHGT{J+MdAkm)8~rN~_kZJ_zu$}loo)IA4**-- zZ|g4m{XbLvzr0Y6@-xr>oR{bLzZ~&jT+mw)paMHP;Y{uS!Xt)>zXNEy{}1nJl#=)W zbo1-7m%{%YiA2MCIT1;qj{I-)fQZXLt(+QHdw(%Z^lZ}j--qujA*IDlWkdA~2>%WB zWOxsl7B80I!~d3d1pG5c3>`oo|Nndbi}n8>*z*(t>G5{l_aBx)^maS`#b8wJ(_V-D zO!VQ#6sT0dbY|B8ahMFd%zivxko$muG*i&^2nPpDzJCU^u6SJ!3X)s-*4**}9cGuc zZvliSJ}YqMNJonMoo@+z`iZ*w3og>&R1thV@d*halME@wH6!yoi`1s%ydkDw zt2G@JNUb{~8C!!*LX_dgha5HZ{CZp9U3^#Dz@5t_QmUP;k-w|ihO26sk=~(C;0gko z$jTF0^)}s#%XLzUXtw<=@9(G5{FC6p8)%I0eUCLD(b)j>C<{d&zLN096Du^36f*`e zAaynci5d>D)3&N~&(jw9fjqxaTEE&<80X(N@y#`+1Fho#SSQLUG&c6sizC!B^6ys2 z0LYcj7f;ybDH#Ab<{b679iRabhBEkkJCh$kH~+zoT;&ElVt)f5nT(A0-Kee4mJhTI zbnCK(X?PQ$>$VZR3SdIpgnD*=x>eOI2BOIJY}(JIWrUqx(`P!V@&SAZ%*7IbyiNgI z-^U(RRE9b`f25`;mi@itxh4g0YL&2+JyA`!QLyi$r|Zo|DD1KbU|MrvQ-e@aFzZq* zb7gb4VhYEfA{p-m^K|Q#Bwd?>BN^kjN5U$ftB(06i|Q-%pm|jAL6MvFKpUVxWd{Vu z^;p|3aLXR$W7|j<0O5kHJ8yT*0(e!yjqm-82v|(026|(7qLmYu5#Cu0DGC>I3?r7Gv6!S!!Q~)CqsZq)8{5%0JhzYhx zC1vfX@K9^7hWqAyN%Bs9}m`?#3?CvGy;#EC65?tKRXBhwmw-{O1@>#~!f?WQF=vereH7s^g71;-^Pjw+P= z29VXnp<10KL3*TBaq0%|EzeL}e?$18W+#=vFiTxCU6NM!IeA(3DzyW%oN#3yrBqrSrthy8%00cQYOG+l?6sJM0r(l zl6?dCNP8TStJv{@YU3U+ve0hGeqM}Ay{-&}^JinqBN4!>y0;junQtXZu)6@}w*04} zXlprZ6?yqZUYbhnkeT4@7o@8eHy?#^k$UgtBySB4ozv=`7X~GN8;He}KXsgSV?N;Y zEdlG*ln)@pwP$?f+gi4wh3;DW{YlJI{@^s{WSv8Y4Iid50Tts#4~E2Jr4?M)BGdW) z9VF($=j;z^V|v?;d!s+)v#?P^;%{<~39jh4?7`_rEJb^}WuhR7YM;dHh>}soF1po>HGZb-z?f zu6JF4Wd}jwiTnx~V9>^wu35Hk9AWz^4R5@vKVd1T2M z_yB(N`m!|;Q$>34#MAjc=z{Jv==AbHmJIJWf1Ppuf$ak>48{1awyg)~Oa||@{)&_N z@RVB99nHY1;oHz5=Bi`)2FQ{njzFl%=PB)H`}F6yk&{(RZS1?+#&h_zJ$u={KCS>8 z;uici!~%<#xHQ}IR6xvv{(TI>*WSo zI&@%!BXa8_KNDWw3vUV0o6E{AV(Bw0F&^~v56!yKiqHF{oM?S?lq54O#cP_-3 z7t=S*pb~6u81nxjb*0%5fT#q>d1NEx*>bGE9trAE$G~9LbL5=%zvBY}=^e>)KA^gw zrjEqxAC!O#p43m1SK1W|F`$D3zb67OGHyDlpWz8?iv7dD|Y*yrMIVCI9)_SSN1UuksD3A zzkCHirynN#Q7QMux=-#UFj==>2pw~D4LdiZiMwUpYO&vKwa~NJNN5^*JNsfk+Bt`w zSrO`|XG(p%S-7{y{<$RfPI{!izkm`H{#oL+M zqQ>zgo8~BY*MeHC>1kWseQBhU6Ebd@IIuU^^Fb(u#2*bbf%PR7kk7oyM%M{sA92IJ z`Cjf1#{QI%8fcA1z>t*Q-AH@3L!Ea+%9`(g{)`#&y{v+eqN9au8Ib3hsZI(10*aL` z30*{&jqD!2(P!=%2hfZ6jXcu}0Y(_Ww z1U~ib?g7gJb4cPhu>*ZU`RC7+nKomH_{0?G#_`jmx;wbcM_;uHY~lsSDUhiTlysc8O(SUhWQH|EL9_-D`7SZ!eO&g!jpX zTq5J5%(AF9`FeIw+rXj>qTD%q4X{8Y6rt;F_6A=$(JlZy*0`&B?{Yt42_cDk1n7S{ z;lwN0m=O4C91|ItcygRO>^ymoiNM^7OA9@a=SUgoL~Kc^LecpMG5wr)MdhCY;foooZVwcEi?k|j1jOd+BXuKf zo1`2&togPuMbw?Q-B+i=#{Oyvsm_*nLstM*3<*rRWYFzqWc2@7h=ZAoSZ|+yU zi-Z!d$h-JOxx9Ly<7I%ST)cGG{PAjlNoep$UAF>%BnyN8tr0!kQ$z8K~encZA!;?fs}OWW?5!&sQ|iy}oxR1u3o zn0v%7=hH;iD_P*aSOjyKOg}wQ<}xL^Q*)0U!71-Y>h6FP)@#r`nx=lh?DXI%lSDQ4 zIMi%u~t>-K^0a+Oc?%b{u|m5M*4FNg2oa1 zgxAf}zmADH+}K|?7xNe^CIOH~|9Jm4v2%!X_RZE}kN`KgB* z)NkS8qM>uhM|8cevFJ7L!)3b`$^1!pP#_8bn9{1l@k^hQ|HcQ)vUY)<;UUBAB8oLA*7WOCz5zG+>rv6n^JapGk9^7)kK_-GmETS+xUYc7QyGh%} z`0q_f;#^m1*$)Vsj}U_;;$qH#ZbG?^23#N#i5NLn1hUX$+v8hUY+6swoieBIs!#Qz z$+Vql&>{=-|0wLd!{O@MHI9g=L9`Jqh(tGfbRs5#L`kBHKI$kDEf^$P7=-Aewos30z(b8~OYi}3I zB2x9(H)EZ>c7^Glved}Np~h`=A=NE4CzQTof`kS8h=xZ=l~@=`c()_q6y`h8 z$!|3?Wun3!MS_qAJ4A-=Q?AIl=Wq*=!F_ra*WtFtJN}J$IZ~&X@&<|&8i4o|OAALO zqy#90*E=t?9lMh2PUNBHa1=>H6^6AlimY0xU90d~j@smzV-CyNA@Lozi;hamZfNa{ zpf0!^+_r5ZoEr@Z;9Ut{dR_in&;tv`U@1#)J8}3kI3t&z!puOjBP!Pc4em7Ebly$wDw_rjELe4-}yb^RSDminACAy5>?f zZ(?@5sYmJhr$LmhaN30fxf&S9%+TCPW(5J4n-tGt{Wg#hZKNN!a^fixLa+5?TL)C> zb(e%Lhl`Z2R)8WFSUro~7n`m~)^o7+DdTbaL%tz9x$-<(qrzY2?1l(k&6yf4F~7p` zfZgzzcYvLJAXR! z8~OPD$>3%a4MWxd^f_xmd?Q;nTx9pk?F)0nRl{9DYdj7am=N`zp(+bbR<8_|(d)pG zzpJ1e{a*yc?8p>x2^hv-P9}%5$W1dn?_j;qH$+(us(eeUAh~DTTd#iOh;C5M zQhOMS>0^bC`XC*Qq<}(npd9^;hV#zQLaw%#9AnGj=fF04s+!Pm7X3WjD8G;}o1)=H zJ$4nP0EHk9CtZ3K`bT$l_js?3_I!V-9{-RB<)Q&6a0^ZKAs{Y>TTipVh~L3tZs(@J zZ&^P}y+ezRj}zFjk>=|~^KpCGp4xBcI`H)>9dk_EE^7^bcV+8)gKt~m_#;v8gLHfC zVIm*K?>0d*lrze87*cE5ZUC}Yi2FWs4{Ork^Nvk3c$3<2G6#sbrZaSDH;z045ClJ&yk zMGe<4M79)it}EpDO)9{aI`MT9?%{DBS@WcVwe03I0(T8is()tTXhpST?w4JA$M8I{ zaLRNui4~XNY64yhAl+=fmprmJ(DcigTxKqnzq2aJ`}JskTDNJp-D|pqlncYwK{a_* zIp~_nj~fmH34x868aQ#$ntc$S%`|WlO?Nb+5>7YkXFdm;v5cU!Ef6%Mw+dpL%Itk4 zV3KCD4V2H*7s4}S^jbY77ZafZOHDq#c9#aJf9b98EP1kLKtDNxQLha*~} zlImdx>YCcj?vu`6J3tp!*Yvnl&FoSnE@NzXYW<1#S!vN>?c~_o{xL9+~Is^h)UU z+=vZe4U$zdRIUZWF`t^zgMBJoQ~~N``+ZqDKiV4 zn_tquC!r}q-*DB|gr9{*OdKO8L4&t!x{%h=YAKkH+QGmuhqdY@t3CS^rO>H4mY6Qn zgr?4ZZH0$LR2C;*obD?tDw_(D?8j1HQW+S#dc;5-n99Il0G=QSTrXh|Ci=K_RvX~owgOuF| zh_`1&t}#t6CsW7xNAhMdoMo4>mYNZ3ciI$nc?o+FT+>EN{<2`Zt*@0H^V zB)eGh2OA>td-j{OF?|r6gol*GWtty^L&CjDdn;Gn!4!-NkpmXkGZu%Ws(8*;Y#2cO zN);blq=9Uz!1TIzhhLyaw$%0nG{j@KSl9QI% zh+p5{_+r15(2C&CfSOU$%jnq!o+3=w^(Run3hZLcz#>YCn>}mYu*wqG73L)Xdim9M zKNG^}gtJ`=a}uNLU!LY+<;r?v%on(V8_XB2uj@!)e)SA7Zt<45w?i(bwQ3fe?H`&EY3Ro-^lsn~jIP1q3RkNU;xC#qtr zPD366%bxaPUaGXF5cx{V5X4M@_uxbE6!*Xsqvi;IO+p{pH-s(M`cN^tX2b$`Z}2fn zIAKvqrJb2~abK(A2T+DbZ?HG0;pVk-lYlcLV4XdgG|F* z>s*9(z~qPMCJV|@uY_w;xL3NY*Zjb{=0GY3(K_3KqH+nmLXP5wv_MnY=j`v1auM2n z1oV*={IZJiHxsI2WKlq7T)5kTe>+GbfjR=$@`i%U?f(GDHhvDabvpt0#Cd5dqysJF~G zfAYOLpE_93-BPE$Rk6mkUY4WRD;8ua^K(U?a^(qL$@&CX;GCTVu1uHSHQxM{|M?)e z8JBjv=^u}LRImTn{Wsl^FW7ezB?V*q^7T(ZA2pVB{|W&i_5EiAfBe|s>o7TodoAs`Bw}z6Z-_%9Y~EJ zh^DA+v3Ci2!jrwlzU})EnBE8Gl47LQe0^E3?8M-*!K4xfH<82q*!OXYy-aF`HLtI+wZWv%zsX$ZvDT zA7X*>DyMA)&!oj>-KI_+#sq(5<{xvej8qjUL`-nGSJ&(a7SxpHPln0^C52jozxD`A zGM&F9_>mO2zQy1(Zj)Dy)!Kk6_7G{o$l|k~S zF|ZETsawH>B7j@^bl9pyEk*&AAQo@fB~b5eX{z2OMa*XSApM1+X;0EsOq|&gap
oZdJ}DwXO@aN@p}WhI3^-bt26wJe{xne*?K|OZJ=KEOegv zQgY$DX5P?8=jql@Cqlz+PWKYF@f$9(f|gI_YjXB2%?9W$Ng#JGU71RC{E@MkDH^AY z*-25U-mgM%iwVex9MZj|-QLA^JqhE*hy%ST+olGOkK9W_RfOElA z8n_`;6+dtVv|)ZZ^(##%r+9+pnD>&NRiJCZ-3;WYq_*X_>e+E5C|VC$osD62$slRN zN3x*o)mr5Y(gAcCKHq%&*J8f>Hu@16yA-1BA;)7XUq;sT3qlVgONqt;eGP+POfw3b1GayC`l*WSIFxd zfsn;dXjud@^+BhXq-f!g)y$4QJXtGs$nA?7l2;8Y%Uh|IO(TfAUJefJv-LS(l{la0 zC%b#SEA{?cst$!3DdZ9slm zrs1wyA)Z=)dj%FGJnjr?sDq8C%*Z3t-`f#VB(OWQuBFLQzO8y{4I5mCqZ`5*VG&m5 zcWoM|FSe4l+{LEX_T#R$H}93rmCsDzC)D}XaEz1Ej%E+GD|^7cr>`wQvit>0`*JNT z^HSV)!q}3vHnHaB5g{{)g4ek?q@T%GZ?w}_q#V*c%bHmvOh0>%)elWzxf3f(`Z^Ob zC5XZ;&*kmj2(xxWypoVgdQIJs*e^qBmg$Q!1-?JZRy@$8N(ehhaBFPc@WHyb=0xb- z>#d?elngX>BW5_w*!4G7APijAwBJRUatdaJ1uh@ABs59hhZmb6u9Lo1+DPH`MORdn zpBu}3Y;EhA5bKIi;K68_@Cn0i?nL#h;l-qIwkDRuicbXUc@HVj-fFdE+py9tjuDHo zBGGx%lKe3KNLLR3viF@Xj%0xeD@t3G;~tSG`Bs1LOO+wfm?DgKj)NtKsBg==0lDt$ zi@Vd5bEq_Xr1`D>+`P!Wphb)*kT1&_*`xa#^Y)(wbj{Aq`I96ZTb4 z;>J9%g3mqB;%k2d`~0=@D_=-OargwDsO4_29E>~QPt8ga*#YG;lNTQ8uxHGlB&%!yJug2 zDo9_+y7VUVZT}s}OTBm-ARE zhrMJZ9jDzDg0L1Q>$BV`g4R7qANTsw&*9KomZp!rv3RrolDI8*pYj=UciB4sdQZ5= zjXV9_TX7*`@ayZY1G1N~Z#ti{;L>aTTFA@)8!56QDt>!TB2YVf-_-m`)C)R);4q&I zXOt*?lADP8Chb5-OYGShX_g+_`ecCfvXxhRon@_E`}*wQ?|?Q$_O;d)dm98^A65ezFZvAitku!>gDK-heb~F*hsfiAd4{@!A>H$MwD(-dn(v|)snae|9tHXAVZ(M zK%^7T=?NLbu_`rKT{W-b+pXj(GV#gc7uR15^+>Mr9s;J}3wRL|p*X9z z5-qOXH_Ay>o+pytZlT%$5l9D!b8NDY>|u2;4QvMt%QO@6Xzt<+z%W89Uqyb^^?&dn zCefU~H-;{^XR>!Sus!bN`2}L?eoYK4#u@Z<102UwVccyE#3nrlyhlv3@5S-d)?D*M zT%Pf3yR5}#-JzQ*U&Rv#36uNAOFH!@vE*`pV>y~`(~qxFuDIjvP4q}CGadpDRSgI# znR+O(7~=pSvHcmsz4hIj6=cc}!uAS3H^s>=VbkA!Ka`hq+NfUc=`tHC!2%xZf{ChJ zUbYh;;otJq>LYJ{PN54MNO$bqYvznU;hOSrH%MMCU3X02q1U>5{bb4&UxPT)JYOP6={Zwnj<8BSGoh1mM4*Vq_WW)tXt!DpP&93#XcOd z0f~28g*r)47LZ$?h*+cocz7UEYP@6<0^>>70(QR_HEzA$G7Z+U!4eLqCnHEa&K7`A z2pobA=n=-md-2j?xcKyzFK2NZivFD)W^o*}Y0Nt~O~)S=VLP)^U=8-O5`Y0m=}kgA zy}xeHaoFGk|D7y0lFTdX6ljs_pp`S#6asZ?Jj(~H(+zf&tZ9bu(7a+Cjz=x!IhLy? z`4awcl*;^qDlM!b*b5~OdX){0;2Xk6oaZKWZyU9?2bG4?mp zL#7g&=!vycd97pwpKXI!LQh5Epvb=xasb}6AC#v+_i&PHg8WC~Z=eD1WPV^|XUWKr z6g4jY3DSnLd`GB`Nrf@9WTMh6XXl`4`~p~TQ=5ymR96HBM70uIYIWc2@VWIr( zT0c^UQl2P;GB8p@)*F0T1Tn$eU?TY`$9#N4dM<$K7eC$O6mrRx8;4j{qza-La5tyG z(D!^lqK$Ec66AF}z5nGcr$HQvtmPeL&wwvv4y`^;@ox04)RVPD=4d(Cgzay{kc z{KfR)SMileuwWIlPGf?VB7j9*F=7H2_5&W6C}e=Bc)AG9a@Qo>!kEl1yxsuc&Z74t zkq6gIoaJAo_d!cpdX)XY-bxCv(PJRM#n zNPTn8FDMO7Ykg(*8_Y=gs3vS&C)Qsk`m*ZoXJX98Z5Z zgk{Ztj8_w=$SJP+5v@82rmc+<@4f!}U~RqW${D3;yK9&^WQ?fze&%_e|L8`AoO=gr zum?M_FhXO}oYUmq{(9xi#;HB9`n_klA^)3?nqX{ex*4ZoZ4ulMqy5k3FG!oafV*u~ z8${?S^xCV*QJ7zaQKLv8(4BztpQ=I8(E>$zzZ?9B;E+_1$A#1;Y)=EN%1Xe*Nud%L z^VAI=LZwX^GX%P4v)SCOFep)W;&XZwG3Oh>XISoL+OO660L+wSJE$kBmB~GVHSgS= zqWnK5cV^a#MdECfB#5FYEfX!{wr4Ui`ah&z(J$2Qs!MO*s~pz1JC;pdyqQC${4i|U z3vdyKFzSoeN*zbjE%N00#&wo*BADp> z9oQ)b$yb+=DwR_sZj0i8BU;k5%eHu9U7t@l>HGU!wjPzOpny^cB!3(e`ht|QNu+6n zCx~7$4z;uJ+7*0-54Yow+g&-Iu9Rn-<(kI7Aos^+-pQ5?@w6PAKbo%>@cF4a{ghxs zXswre4wGJLj_!7e0&$Hlq(oM8V@a~nmGk#aDl z=?}6EVw(l0?$(tCES2OeNB=Fw=+H0mCFf<$AYk3FnHD8sX-A12t zjio%o#~AZ$N}u-$dr6dHIdX@2a_8T8*1nMoui2w7uQU7b!6VsdD`)7B+CMxSfAS-F z<}8;yxIgTGI*S;=7cJ`7vUkZDH<;pfQPIvtsW9&2T_s6Kd(0+~croPy`Q_!G+ z$jJoTx`yp(KHGU@s&Sd%jLj5>pedc)(AV^yf`_;jI0J!|EBDFZ!U&cRDEt$EQ%1`$)kSJuTOiud(GFuY?W{ma zS`3qRs=_!`zP!dk)^FRO3@Bi4O+P4_nhx&OWKmbRRD)Xu6x2nCdvv4 z-``e75V3sqMwyG4ilB)$D40EeP}YZOkzIC7ExvVi^~w$JjxN8r`yVgNA!NGZI6Cwg z?T&u}N7yIKZGjoV_LCgGRtUU|Y+Zu4`ORs|nqE=P@1_}mzOFaXzv5hhGTVcennRQl z?e_UKYSYd7-(Ss{k{rDk7^drN63eAn)l_`1vO~*Q6A;njqYb3EP@>BtpE=0|dCi~n z5Vuj||DITCi}l&i97CqlH|~x*%y+&U@-|h2>ZBT9?8FD(L$pI4FvZk$E~_&mMuphAl#{c9h($acNg+n z1oj9mO~)t@T{;3ah?h=y9z<`mwo50hSjWjCIc$+WmpoIz5Ced)UBJ@c@ zHX0YO$hp-?(^$qU$hwQ4`R@DoW_FZWso?fpFgVzUr70v zo)^3AJ^qq{s9%%=H@!Lg$g_V8^%EC`fE|Xp*FCV4k;hQ#2u|k50ZLY%foEFouE63; zqd{3bwPQt4amjrCFxSkq2pODow(M6mLykLZvfIevJ|-1W^i^ilo z-K|Qi+WT~?DyX@ttK(S_$<)`UHIJ4%spL(YKDbX_HieE^yn9GsM0$#iMrBcSb{P0; zUM~T<&i6Rlcjmd*dYMDLevy=sX%0g>6UOj4$G-xyUx!VeJ_6UDK7f!tgubzhS9G|k zLEdjQBa>buHbipezKU-IJ!b*y)0>B+1+0MtZhbYtnFrlsU%F2EJZ1`|S!FGBiFm#09{ycC50%-^%4<^J z;RBTX|0p*h9bmyaaD%)4ozh+umbEOy231m|c<|Fv2f> zGSQ(3V`M{<`J7kgKT+F-2iQ!rESm+4ksqDIAmQ9#h*562*-bj4K~gaa74V4BcG|;| zBq7wb%qPNubfK~jTnH0t_)*1TN&Q-Px4Q+Y3&cW`UBX{Fif}V`Id-Dc#G$0f6 zAm}z55z~b_pg1{`0mlyaJqKyN+RmDt`qZX%^dPrZJTraGik8Hc@bD=HBX48Rj!@;8 zp7S?5ap4>hWG?Bs!t3EHoN!BOwPjq{&Ulw1!N0ZX+O1p`>rSy>AlT7yV?=)pyk#we z;JDjPysM0*P3uxvttoZ;2S338`Ukw!-7KykVFx0VQ1|2}#=b?~Z<|Tn;(Gx7+aZ~3 z>+CN~c>-oWVYbe3GVMtMm|wDgu}9*7JvtoWuUVT9=gcR=TyGD*(Ti(vP)+{cN>lUQ zsGSqd{c2tHD|5)wUY30|HattB*@GytG%R|QohsHa-{An*qxbu#(CKB6E9AWx_|Xkh zq-rzR=Ece6AOt#9)qe8^S!%un`~x6f?Bxnl&SM;`CIyZo0ri;x%y`T+ zOsg;Ps`|`s-ewV7%FI|L$-ygskHfN3)g@nTSu_tqPnkC7!y-Ll_m}uqraz&CP7>;+ z^#HAW&ii3aqSKrO_r2mrztT6NVh~Xk&rn#d<-!2cg{ZiVtdlLqZ>gxu@Um$_t1^nk z%lkCgtcbM!pyG32Fo~}K$o-5U7pWV|=;+SET! zi#DjN8;yG|pg}P~=nLAl!U;5frkCg?o@dVtpI8a2>b7?f7^RyiI;$qDP3Bg?K%|ZL za9J^B@1A=?MO%l@u=6Sn*F@TaQJXL|@u~uo=Z`2w!{LOxoiPD(q6f(?EjFEEQqSD% zHuWZt1-n8beJ2kxCavJa#K@RaV1|j7Q?K3s5f-(84RD_T?Z3Z5VSn>}F8J1PcUK9R z{?*K@%nwLOR7bA;Vk>**bg2^sGqeumxARmFTy--&vs$l&5fWs8`Cy14srg8QR#-6r z7a!WnajWSx+{chka5d<(1j|jhaE%<1fL7D58x1ZIbJsEiOc1iC`{lTXX|c98+ZSdx zXtjoD$6b=guZm?#3nIMGXG*77XaWrKeato_PH>yM0Lz-W9Xx&+mDec}14K8)#1-Xu zsw!&}Tuqqc{I6I0m(0!{yLo)b_(bwrwj$v?NC?&1Y@U{_u=tm`5}8P?|1Ua0{p z;ak$e*N?iW;J4lb(A+ccMZrUS4ZI8yCCcz7rptV7P}vUfBLSqoZSztXpkn)0T%qO92$nsKrxxPqvuN6^EM6Ye90z1SGvq{#Fl z)qJlq7rbdArJa0GV!2L2D{ECpzVM(H0)1;Me6VKtDPJ{NL8O^f80(>WsrX6##Vkt@ z&ZL#;i)M

%_`3$7WL$lkZK{8bW$$;6qz)hK?g~@lb4-(C@-Hx)|EUy*C# zFHn$lYpoMc~yw~|s6Aar8hw~9!ewsbzA_}^4xPhXtG8sAa z^crCKU{4Z3ZD#ZTh=dEeNRVrbX zStXYAg1N|24RJxW*=gcMjpg-^C^G8G#G2<#>=2YN zE#XWj#;p8qxT##sV|AH|fjE)B?%^@_M>5z2yQ1vJdUM^}+>F(G>G6c+`Dp{Hq)+3_ z@D%GCLYse~2w#Z!1A}0@`Bm^G`81;}aeP1|%Q>CC%;zy)Cj zJLgE#Wo$1dm`7}HG-~wh&czTv8rBqB53)OkBTJPu+d_PWvqzO1upA9F zQ;bOnDOZjY$CbO)A!f1UKI3#TD0@oUEXQ~Sv1)k^fwk}Gn0aCD_}0&qlRi+zK+Pj^ z=`Hyf*1+W?daeSS#<Zc*TTc`G(a2=$Lk3@^ zS3LZrT$6TGs$B!8zfFz%QXU_;zUM+c03%u7RlF`glF&mPh{=^%tvV`2N> z)1Vj(g3KUTU8(B>TK9GCbTM4ILBMM0EocCCpM()@RMTfx^MmFapFqANF$^73n$vSDbO z&?QM8B^$waJ#b}<&#aHAy0Ti$+nWmkIyG0lwyBTs`g@Se7L~`uW!rcJB5ap;npOcA zEb0H~SKglFDv~FSlStMyQK(4;5Y*Qpv4)*%?`TK* zzM3kV&W3lR%Bn`kUCfV5U8;z9+1-rn4U)&v?X@miU8w`;c+;mmYNTEI&OgDVOXdIQ zXWkywE|POK?}G3oBb(d2_nODW@$&g~T<_x2jwRqPn<=w=+NiJSCu!*r1ys+4tFlM4 ztiJGq8Zb52mez<$*m-kfk;6~47Cs|h}P{*42P&(5zE8ZgF5NX$xQNIce* z!C7Z-0bM@s_`$vv^Z3y=|1*qJ&}yQzQg-V{ggIgQhjhhW-W#wtS!%5xXugcwsHvn- zs>)U5P~`Dhw(y=)PA13DOp901Hxa%9cjq!>Fb6KO(#;YAt$mu*Gd}Zb~Ujvk(W;h#jvEmOgmGRo7NI)5Wf+ zQa|FyFCeEf14Oy$(}WqYq-A32aO+Yem-*q-T`iQxD`bsb-0*D@<+orK zWEJ@V(7rtsh51*i>Z_Q?fyv@rVqA4{u*3mJWhOHU6PJqKr;_)?W?Y?ysNvdd1pSJv z+cjIMM8{aY(L)jnJF9sj+;czpLa_;(H7Kj-<)Hx0CUkLOVYN^z_2VPGs{s21ejC>@TnjjSgN}B6`j!tp z+T{57qJNmJe6XPZ8u2=xu;W{&HWS;g_BSPj)gpj8&+4O&LSvln^77XIY@d}aTIogc zJKa=U5sFU~!vskG%znph$@-`YY*^ES)TZXIgTAP^n-JLK15e4o3gcZ`v z(+wuW-vgUBHw(7o{zGPvxn-s2$aT3fbLoYs&Y)^_`OD| zi0JU{_$Kk72B1uDfGr0e%0)+gX+g2law^fcaN4qHXF`hK4a`d)|~4qONY<>YP;^BfR;8uCc8mZRH0jT*|e?{Y-1yhiBtVX z=V=8KD>DW`@Ef{-TlKDa_|ma6-N)&;3Rek;uygNqERWhPMJI)^P<&_}u;t@7n&t+MCB@IM^ zn9#;_dzc?Y(>sX|`$de5VUrij89)F_c545Z}dhrPVWukl@D4-Kv<>DR+Yn^Nt9cm<&5i59u&|uN5 z4zZU~`J~1`Y^r^ZvgymHNr95Pg(I2)jQk7_y9tjDY)(HX?$sd7y5w0X{a%w-k`CRv z?lZ1+{d@yY(>w6FBg8fhg6Q?ADEfSF<@bd-VQJKJkZZW}`_YQd1ffYmb1P|6b*6a_yewxge@2pa1ShN=soq4o5)3sFtV{NlOFKXPf z(F`63wByFE6W+O3vu;KSj#9%9CWbB;Rb=6e8gNooPU=K1zxinQ>#$O%TY<5O6~r3P z$J22q^AjmAUlLpACirM;w%;`xWLhl%>Cs5lx($UE-@0~4*ZNc83e%5?&8_Rmyrr-) zHPY*5&hC>ETEV&jsRt={oEHf5YHQ)UCa1K+AnJ^d;2MFQ$=0%TkmAYR+C1o|zQ~TN zP@>O~=SJZbt*x{1U=yrq261S*v)ou|1XKGiL3_4g^KPebgej@w?Xo7Qh047fH#N`? z7nrD2R2beS(f$+)i$>l$SDy6Ro^A?xwJHa%qM`R|lGZs*(PExgMSzYOhZjExUO;$> zt=Ib4*&&k2-gOEwL>?%m>kvL!WhnoWHo&8HTERHHF^;AUen0@@KCX06)aojwJMtfB*BkRBov4Ej*CJw-k!HcEKQ6J=NAorAzO%|fI}mUyo$QXxb&L`#ghNz=Gfxni%=a3cAxxCWHOH|j`K$?)vDW^sOBvO`(l6b z1T$r_sf+KS`4hc^Ftg$Yr$!Vh^)t%=dL*v{=86P@J;)D6tl~y03b|ul(_8`jl=Cj> zGZED-kE<=+_B6j>!j}*AYLlH@EH~*$A?wuejIADXZI!XwmS?Z=-j_ahw56XK|902L zUBDkS0&-d)no!~aWFNdwThP2N>aQMSo&EG*{h#=5oeC$=k#7A6I@0<0k|k*a`30vr zhCGnt(jLIi)lU8V&9sB9k}P29`+6wba%2`uB^NAxjk3 z_W_<*)5|Ki`aTE6SeShIFIq%}!g|vw;~M=FiocN)|0RkBCRDZ;5ww(v&Y>cEIOJ#P zb}Q z5AK{|`zzIdSJ=A&gr*x$~T!8eP%-+fm`6JR}1L&Iv3%U9K zx+?#DGJm~t;@1G>SpYPSybO>yL_sY1&d UJ$Z){yW{EurAPOQ?wY*%AFQ;;o&W#< literal 0 HcmV?d00001 diff --git a/spring-boot-demo-flyway/assets/image-20200305110147176.png b/spring-boot-demo-flyway/assets/image-20200305110147176.png new file mode 100644 index 0000000000000000000000000000000000000000..3a345d31d7b476c9809388bb30396a5969a4d529 GIT binary patch literal 23440 zcmcG#WmFtd)2@vLmmq<`Ap{HVE(yUM5+u00yOUtSLm+5y3-0dj4DN%wyAAR+&pFTg z@0^@JU)BuMD{IemckSA{s_wcvR7pV+1CBdo4~+Gh5k-J(pFU`Xg?uNdRHupU>w+jfQ!t=Y#@A_Gt?R6L)9L!Jme$9_T88GM3Fsr$6NzKSGZ;AJ9%g`JaHk3`8n7CNMP05@@ zJdU_DZb(LpKxgOq7KRpUMaK5+McrEy==5?w=!gJ)sK~xAkx9DY%}_ zK$^7Gfd#Bd) ztCUkxPi##vy~$W9g(vC!m{Z;6T!WNtj4hP1hP-SMAn^za{tZ+2*JS>E?N-RvX}rWY z#9`MgUY%4QY1f3;-e-o}J0<6QeiCQI6(zVN&m7@BxQK8-+MOiE>VeO6+a)wxH*Lot zN84Fj?XWks`@3bip|&-8&*Onlhp2BZ|7TK_ zgM4a}fs{_Cs*hs*4R^R7_tqcgHC$(h`)j0MqC|6@u%4INAwWC5q~db%53V0q#mzJvd8s$MwZ& zi&*J`o+={ncl=qEIi)>Cjz#7RBn))?_{KnB4Q36`JGl|1EcDac*j=g1AVni0wgldk z`oQ{c^$G3~bJE_ThqN(LdGFL!DCncQY2U;QN*_oyNlQv6NI`Pyj7cls%*T>^P@t6^ z$lZK@&U}u2PJM244kMm!sCbs&tsEGq8D|n_6Q?#PF2iHuZz<}MgQybww_z%1%F>eR z3h#>hDmN-BDl#g4^b=|5C|s&#>WRzf?$V@(Bu7reSba5m@~_&s+5p!G*VyY{3i$$K zV!L~nZ|_w+g&q+enIB7-#b$L9@)@R5%e1l=bG)Q)lE}oty3yG@U&=m}$=J0mi?`_d zgtZ0;tEZQVD7HyFXFRz)`oafyfC6{}-~y--o6tvz1lisZ@`HkjQ89+l>xj}=z1!PC zwdl-Z?YChSkq%+wHlH{hIoAodh`taVv03u$b8vH#S^Y5-oUHG?Eq5TmHR5OW81~*~ z-xl8H+J<7|Q}I%LqQZ|hCvmXoCXS7vp`>{miyGTPqb|RkQYqIZe<7!y$epsx)-|F% zOp`pqx@hh?SnQTF-tQmtJ?0J7P2|Hg36~q2B5S%$>-58SkG7y(@tmMx!_*#>a9!Cv zlOHCfTb4sq@j`0oMHCF7)0RcqYHd{!nj~t%MaeF|rp;_@Nli+smklAdLi!u#vDT`V zRkPbsOw;i;DKo@T;j+~&43+l!~&jRUG1i_5*Unv0Rk zlBn;)#kUj0T<9JC2lDHn`WRG-N_DK0T)(*+W|7}3$f z(Tk9+uz1iFG4;rOc{*v{(q>U+u}la!x^7m`ef;b^754W)5G~DL9ehB1BH(*`8#`XT z+r4`=eq*F9NwyxruAZQ^L=8009Gclg8ZG&o;is(O)6mX^m8DPrSCL&?GAq`r;hOVSp# zlHM~^II@px|H|r>Vi0BLbSIf|hI#I;gRB1a;2|yFH@+fA&+d-(_YP%&44Nz+X~e&q z=x^k8wU?usJ07MUT3&5_AO0SoB4&|xx#>K#$C2+gsBN-US^Dw0lPk#Q-2BeLj9e3riE%s4XoN4#A>qJ zfyaE(kYcQ95^mwCe#3&a;Iojze6MT0cY0ucL^A8KsdAdT zk>cE`^)NkGlsfyX3{s!w&~gxb+8dj4$CLj2_2Hnsh&p44F*O=db&1X44_|qw=&-QQwuKU^>Zu=N(L@o+ zbLg4%Hv2khvWol}{qEx9N>1zX&iPINOMEk@Ps7IaoVv~9*`u2tK{J`V>es%#3T%Jhzv{N0Sm)sA6<#f?bXleu5L3O`w?b;i)*PmtN;3Z>Ncwb z7i;ZkbyXG(MydqHI}QsI(;7tbP>+G=h3jt=lzfpZ^W)UId|pSK6asEfIA_^~_+IG1 zCEfw`g|&%>w5hy2%zNM%83qBC2<8=V1Pi={VTu3eSOS&~2L3<)4+jGiVgZBjzsD#5 zpD+J@0`Hga{I5^A47mS}KvckE0tetC2a}~Lz=usNB;=zq@DZuwRzoGrzH90wVlLi>iS$w z*QI_!_$2zTm;UQ-1_7nJ-;sa#|MNvlAr^-7|1c8o^-s!NmcGR;}ZdX)vmI~}= z!T8Rckj6Ow3AY3Z?Sxlad&NU<u#Qlfjc#76Q4#|UtP0;#XjQr{rT;wHyT zXr5(_{nJR!uVD#Q`03d3@UUOQ{$F3;M&DA1$(Z$oe5Cr3bB7a)VQ%K!U^Lz5B+x#Uv)2ZX!axE$@vg&>{t=^QN>se65w`|{qaeUl# z;!6IoiUe750_$L>j@oZW@+_aiCRvp>@KcG(2WF|C+u$Paw=T$O-^l19j(t(r*(z<= zCaSxfkZqbbOK)MWGPQdzk4ZBp$4_#YT#EkYn?iJ->-I%v82sHLKirqR6W5vsRr51cj#{m&M-w?X9(MwD_P@wrN82*{Cn->M|IM{P=ps?>YY0=VWVo zT|Q>G284xFuoHY{_*>Rk(WZqZ`u6Eo`OKL#xBt0C`MUXQtENuPD>tklFPW-oB|GjB zHC)t&2{3|ZE-8e;L`5WD+{bGNr(b8`05|Y@r|Xmrt0hNBYDb$j zTX|-aqkK*U>v?RwSz(5*6SU1m^InYrYglf1rtt+6VYJ@?pMIlpZ~ z*8bi=j!?xwX|7MqlX=vF6(pV9%2g||3%>LRb}hFoj#RZ#EROlhR~p+_OZ&NiM{qd5 zsc={rXzhE=+jH}mWyytMSRGzOwq|M_*KIVZ z4i3)Q_tXj)Ldq&JxZ^CS+$07`-Ims(gswIEmdOCukz?{+v}?*)txJ7RT5cL|T5noxYo^tl4od3M7M&;Mol;w`X0#yDeh)@B zRq2nzk4JWXPO^*@fr}nHsVSI4@;s1D1>rm6x(-C*+Y=+E9q38hiXVpoN5e@gbO}%m z56C<=v2XT^%I%2)oL|9H2n^EuW=%QO2RHw~>XN54Us_njh~uB_ zSrnDj5(S20bHsg9qf!3G{^f=v{VrnBp^x;DUFTXQiBr4*dRPU%XMc)Kf5`FU@{V@) z8KlpzU$ku+X?eOoumv_YH>KzchV=_T)Dv+ zmmG$3_DI})yLE1AU8bChy@lmT2gGl>13Qd6SKBFe_t9AfBNIi)v-E!N9%Wb8Ldacb zb=-7Hn4!CpBKuGbfx~jK68X5?i`llP=~U+l=~gCa)5_y$ojT8wy;$ANvRBi*X$lk6 z{d3Bot^!Izi&bCNwT)b>Y5D*V)#pxPZb$5VC;ya^x-D4H-b~1{G?Zfy#?Ple9-2Xb zEqMd_wz+!nebKGZ=v>ihh{!|ci8}TuFnf!$lhu6}_xfB|O^1@oP|6yguX#+6zhuXK zt>%f=<^+E{_Y00on~u+`@GQcADOh-o)kzjV<4vleJnn9<$W)zNehF6b`$&{koQJN~ zR_7gMD5AZ8DR9y}DReQ+(Mn!%zhBg(oGo$JNR*J~dv8$&UAxisI@*GUJaF?}j)_5x zqJ_2(iUKhC`BitAKg!|fRQz${LLRW{V48^OhfOA5%OcrWA z9!;DG)OMea8+OR_@R?h0*LC&k2WV1m@8{AsKr;u`Zll6b>lMT-p-)YrPgm-|OznR0 zADmK;9Lx#DrEQdsrD*_S_566+EntkptB}CZYm_6dB~fz!);BtIHVK0CvA*Za2iI0? zN1b!dmez*OAFdVTp4L+5eEo*qHhhz~L135IO(KGV%L75x*Z99_XiH^tC@8cg-QKvz~hzYOoHQJjTUeW+ygMcsu&V|1c zN%uPDll=GruuctZs#|HM=#p8w&x6+=jw8%mY?L4obQBO?B`QrC6IFfNiZApIE_%ly zVs^W((+C%m zH<`pI?k*z?`S>coZLiGGbq~6E>j6|rm?D|=sAbob&16B$K6RKv1?gOWWT>E!v>ejWhoQK zAGnM9$TVibR{+_Nmx${6Zvvyqnj5)iO9W5)bdl$W3tdVBa!COUN*n3>1Q^n7n>xr$ zT}&pc_pQAoq;o~l?_Ra6TEp-03JIo@q7E>dXAmk_b+q|*J>1tG&jxbh_Y8$kQ=|`3 z>Evpk+@lpgTAcG9!RhgyB?tD_VuB|UzkWT_znfXV=P%n>6DQjY+dlmLgpM3%tx>2Ek$yw6^CkbiKn~lsdcVZ^`<5!wCq~8E?C0Ea1Z<@X+IK5 z`f=r!7#_Pol`XDm$b-a6M3mcjglUCtR|8rVB>BQJjIxEdupnetjSr!;X{RO^KqNjHBYY-Kee2?&!4q$>IFXjw ziUJ+ty={lba)+c;ylu(GUB^;D_ttgjd1JL!?wLwmvleh1(MU{6b4>1YIerZGd#ak9 zp3;4PmM!Nq{a21i#J72tZETccg>}qvsotTLsgpus!94IcH*zED6Y`C1(-AjCAiaZN z`!{BxP#c2YJk|2C?H}W>&J?VlLT&8&eBI``K?Wx@^x6wW%aZz^3@$;D^u;q8={tX% z6xxo3gCyxzpvyPj+g*j>?3e*)gIbK`&aashg_{rz5EjL-gf?sE4AJ~r`^da*ol4iZ z9S5ir+)c1CxX@`p*vMUHedH&gpzuGkMhrGzPsq%wkoAnc0-FejKu^d7o z@y$0A8IYVEE-`2G1-mOrzZ@8Pt|hp3Omv@kJ_zUpZH zP}zcAHphWfqgIZH&v7&3oR>xyMbo;G?1AgiCpY1oZwq%NKxuZIW+PgnB}W7$!#@Le zM3l-@Lf2*bi?F<0n&3PZ|A#f1Hj1LLcH}-fb<>(jwOq_@`)H-Ipd+i&o_Mi>wN92; z&zCh|W1B}Z;8u1+_+b#=v&cpg$O`lEN#D!&1_z?d89%#?rKa4RuLzEBrg;ke`-QYf}(l@!W2i z>N0c2&!ds)weja*DZhCb)lUQlm}z+t(Dkh&XiQvdA-|G{OYoGKt*UW10oeiM{_64i--rc)vS!v?RxhU z2@ikq7$+lqA*Lxd59GF)?>G(O@RHEhNQnoAtDX5(BEFkR|E>J)uv%O-dalaFrk$ak zBie}(fBn&VKC9Ap!AZlQqWLWz86G|eiB(^zVHIgcLp9@q1mkV-)bQWTw|7A9b}Ycb z7}PZ(l)06%qx#AguQuX1fXCqDE-#xnHjT0W-A?+7o*5^*frR`e$8_}`&&i{go7 zkugc`M!n=ibce0b<5qatxhkNCSqa`sjV2YCVObR8H~7q0by_S~Q5|=qJ8vZuYa)%| zJ39DIf;>bV(T`q^|;PhIgs)*bsuo==X0*0na;>1P*(fo*O?2OK9 zd?fc{o{((d;xy>;EXtBPgM49zY{vThNljWKeRD@vSX63#zKUz{8!wdkD1$O69u{U> zw{PaDj@S~>bKiINJ0IA66?m6hvQBz1?gu#OTkc%INu~eeqyk_~NW=Lc1C;tvK0Q!3 z9Jb+-p0K}+pJ^=f z=%4u3(k#wRYsJptWtDq>V8tbIg zD5_TuMZ_g{g~G~?$n)JoF=3M=lG#QiPwix06rQeeaPgQ!5R%{8!bAj4^$vX^A@$GS zFMcOU8@tsEy6Qy-MMwr_s=wMGp<%ml~8llL4HM2)Ds zFSU3>b4g9};$*uCzD)~1N_|InWRO~9+xe9uv}?WzUDtqCk|HAwshg?^1_}5VGL_mi zQv|f(7;;HuFbLM@CtD*6+PduI?&L*6xb^9{^&^DntE$=~4RpOkoU;>r6KvAe#^W&? zuB`O%5a}S5A4R@v(icayS5iw^YEd7!mZdU`jQ$vp6IP$E&JdQ+R5=keLv+8s5$zyH z4G3bxq&N(>?o87GR;@-jS=9XdLrF0&iY2WiGu0*AJm$L7ntk(?0PG}gdAdJU?_qHE z(T)famDm#n@el)3MwzEFgTdA3ZnbhB{q&C-t-T_h7ObV_W>{(1_VRzPOexf9L73&n zU-fLK$6dP)yQxDEt;`;{&lxO)Xe6Xedg50MlZuq)oKr2@KfO<3nwT@}MeIeAC^i;= zUu*Jc+cU2i7lg*Mx`d8Eie57ylqUxTCl@ak`}Ok}`qT#d(@$1`@pZt$v%7*zPBc)) zH=v=SiXHSp-{Mu%;z42Jw7%}lmXKUX;P`2a^{0xHPs;7ioOp(6^K-@TQX)I6==b^_ z{t~o}Y?GrAs9ImFhd)U6DC~ro%`-B^#W~}&t}wN!o>x{x(sQuJ>kFFBi(V72VP&(+ zyuRkIEEu!rxUp#e+Lg-)_OvKWBYvq~Sr#k7N+{=jb)AFn#}1uLMvt1}Xokj!9^^D= z=7s6iXdGC8C_cSTOQW-MHxHhT14H?)y`C3KA~Y-uava$|VSR8#tA+(^AHpXf4mG}tk-3ZI(d*|qhOiGhio$m}et+gI z(3tC2{nb^MYTZ=!&tcQ*R=YbT+TJT3HVP348zIJ?619czmmE5k@aEg4zp=_^Q>DSX zl+qLk_w&eACS z*#!+mPlt1<-5E*0j~}m;P^WTJ7Pf76z#Wt$v+tndZbRvKg9g<9dxv!dDf^;+_&Z^_~_TrE7TpohIVrE zvOQZ{8x5jw45)m2P@b;{U3@jklVr5P9KoP%)*C{Y7)qYTphcNXPT!ZsjCSKbld6TkdjwHUhXODP_t&SGuu-Rjc1M*9svmOGU6?R2U z%f}z(K8Y{Wbx?OnOK;J>k9oy5IGOznrcg$_*kW2y-^78385hg+H=zeIe37M-*&dv9 z8hTqE)r1t4xrZH%tzVisESGlTjUuH~k2$K+p+;B*Ax}NEXhV6EcsfefPZjJOxhv#A zn5_ZA>^!e@3iaLbJppWoKujkF+sRa!q%Zg{$Xe5@zl#Q)gE5>!qKdn7M+*U>? zH4_Iq7~wmI&9jT`AD6vOO62u6TDd^V{>fM1Wg|V*nNZu@xmMERgyG&3(@!1XrsKvU z$Fc!)dov?O#%ynL;*je`)*S6yoNe@Q0ILs1~KglfKnFLwY zhMDIW4FwW}mRQ~^H(B-%C!#p&JXWZ6{IsX=n) z6sA27X4iVIKI&fFTBeIv|0yWmJvWmnGWg9YmHw4O)rkz9jdLcw&s`a1Nc3V$&wemb zB4-;`YaV6~mmzMTeRc{>~l;^nu8puJ~}x379) zbFL7QEo99O)_hOGD>J>-Kw}-NLWox}c4DD6MS&;R7r;t$ehj?_o$>YUk2XJ%muC8j zA>qe|fYfY6;y6ZmyKYS8#bT!gK1w?*E{9qe&55$B{T)Cp5}ArktSt$O`~q9qC^D+q zfl#rtf2VcT!s=V-+LY#XT>=EeG%tuVORWwlMM2g113tOQg`$j?z;;tg0hnKise0;X zXWr*wT~X}E(=M!84W%*GMsm%UqImYsfSAc>4O8IIdbL|cx8G$}N1dU0ZYe6)K1^ci zou1waaGz8IGJkhwTixtEvX8Fc-k-$!ESD6b30#a-gIrr!uqKN~{~ z_6u?k0L9F_UBV%UxRi4E@B8GuWS1%eu|6Zfx4&KDy*UIEUsFqfgJ9nn(Q~Yi3#=gqGUzD7fmMx2 z!BJ=B9;Y|~UW%W}!Xn#Bs!Dnd|8k*YTdu5E1s@Mpi-oz*7K7f|j3v7ORfWb(_>Un4 zN@Leo-?0rxxMnYj=j4IPT9MfJ(G6!gj$V}{UZ2~>NCGX0ASEoQHxN(M8Ky6Sa6>Y- zGM?DhkdBg(@mn{Im)CKF*@#7iDDXB6jjNX&PerpHNh%M)&#b1zz}dbQ4z z16_-9qdRe;5sf4saFjD%niC=2|@;~W1N1BnH{yyC$U-ikD zMJBvhx^Y0V#mT(?b~tlmf5m%Le!ArkFJhdXwShmA#P2U^nmw~_6}B5{GCHk2_*(7( zC_Yxsq=CP;IL5KF(krLQ>{s69+5oqj#ETxR?~ma1r!us;#xF6c&nM-LzHiOBMp>(6 zZrir249Q{>#5cl*ATMW9Lq|#GKiZkMn~cv4)1IM*uBh@9rE9g>;Zl^VkT1;l3wrNv%#{%}CmN9O=p){pkCYZO&ww^=BuBvvxQ$P(#0XX?}ZsohkV@#|EQ zI21y&yC%Kf^{0GA2QHr{_)V7my}W&~KjYK~YST9+-()J;WVYj4eL%NT@F#H}Pzai4 z`Nv$_5~4tga@K{7sf%pfkDOt8OOXR2_#&>=_H18MorQq@PG545v-j-=&+LniZ}+!) zhcB7fmC=jEyL8bv|D{!!?``Ca^_ygiVvBO?t;vFdz|rPO&=TlMHXDx$HS%i&QFGq~ zNKrF=CNK0{H;K~(JjZq!9ek>3mbyjUeH-9M=PUILsxV8jsXcXgZqiM%+3SnCuAIn; z0eKhqad`7DX$Ui>cbXl#SvU9QSzSo>5h8f9rE};Tr|wZ5_75@c>7#P?c=+MyyS}AT zCmid_AYEt$Ef*}-N3nHw4?Z{ZhnN8=yV*%@oEY0$C;7!>)V7=Mi$_*D(_Ya>{1woY zcw>TgWLj#pDsc$yTA4q!2ba#rSkY`tEDL$%Ek<24xmKSpHjp0iOTJimwS|CUe6kPKZjNFS!d$FwR0&wW>wJwzQlU^~s}cqiOM>xj~(iz=BJZ>qwNV zqJ^veyt(!u$#fr`n8hl`E_b4G#e!v#$0IR6w`oci1MgOx>VqXy^I0bv%PoJ}%CIvQ zlAO{>6@s9woIxTR{Xwk|n5~vs&+gt|{eja6E8z9`P(|`EFr5dfquXrEGggaVTP!6{ z`Y-*cB%>~?>$Lp(YSC0DEQ*ABwmwc#)OiVFS`K&w2KFGd zH->5;gXnKT%B&uQLQwBPzTdBGC*2vTOz-lX;s|KsIgP5_2nUF)iCV;vFld12m7W3s z6+}X%P!5!g*B^_;1TGw@L*_0g`zI40RKZMIAH%9A6mf88BhMYN>k@hUlp@w*-I0m2 z#BH5YqZqcNruW_i49`^$-IMDP_o39S z#gt@@wPs42xxEa>Jvj$s&$>@K++00C z?bm!M3|n-q&*ofAbhOrl`~^=JKjoy~gTyOvV{I*Vgn;H|kPH76c_&3!@oV*maoPc` zmh6~C%^Tk6lA%z$%Sh0d^Uj|;l9r3{RCS6g$(N zZ^m6@mXpr+_A6$l<9=S1lp`dALfC9rJ10U7Ewb)N$j@9rNP|SkbpCsP38XbQB*vj8 zr35yG+Lz3!*`B2Du2l?-JqQg3jWxI4AG4taTg?6%rF@;@OB5tX^E~BLw1Q4|rGW>r zic1Jz4i9xA%CLTmPgUz-Gb~U5&N^KyEB=p>vpM+^6@=0v5QUDaCm&?x%C_b!afr+6 ziDOHLg0uC~fS@tjPxtihtv-U%=k6JkYujPAS`tf>dczAY)Oc6cu(kOzaBp?)!F1Q@ z!E7s?hgJ7w%zk7}QmqVC9dxgC!rJK`_lj-Z5zVIA^Xf|)Y>&5ohI32DMC1~;Tc?q= zj)Hezug8n6nAm-KeiY^q>KJ6-7Z$Q|JJM1|5jV_Z+!!qe(eL45Ry1bJJp_=my-3DU z1z==ZT3Ia&`c(8RQUfErJLaati7^J$&Sp(s485uU&3XyR`V-0(w|G52-ayCII6EaG ziKeSoim-71OCtS^5*4`5vMl;cpyz1OTZlc8PDgzS|IIZH{MfF%LI-z50kBg7bl}T? z7W8WX3*x?~D|=z1GT30_;f=pK9@2&MG9QG#M=5{k08o(!PL+SeLF z3qz_Xy4SRk{g)Q*uk#GAtN06Pv%b4 z?FIa5T9?gy^WQK3pHMY(Du8BNKnC>EfBmX60Wh+Wp%w4z{}p-zPWX)*Cvj_9UC*Z} z@@atKU!wu|j0g^Z@3@q6{lors5!ERG{B}gc{QOT$t}z%Gse}6k_3uA1xh9nUpA)w0 z=ZgO#DKo5)fsy}@7utRbbn=QJzJntF4;DauvA~=09MOMT0R7cB&E+&^v9*ea|M86f z)8xMX2DBdt=~KzXP}Bcqh4!C-&zSU&4H^CGa)BQOmS%q6&raI^I_v)l?_@Owutq}m z%X5u?ns)MK686|~PXFnM=!AeH2BWtK;{VIJcb(zbbDTZV>An9!p91`v1i+tCim^nC z|BI*PPkrGp|Nk=StP{c$bmh4*LC<%-xjGyjv3uzpH^KsCV=d{i;Cl{>A+N3`L z4G`(l^o5>JPe0m~aBdIup7;Cp*nWLg%)kAee6x5aRIsHvUtY7ZI24?F=u}{lT@3Y9 zK;Zu^Dsy)YwB5li00WbHFO906fCF02T~jL;*MAL5^wI2(LvYgzLc7T$j zV&ZtWV+LDvUe0@%eTdO^y*u<+=fpGNX1LUe-Str8g%c$}T(6!~xUjIl+#Nr5N{24_ z--x+cAOi&+S-n>t{OJ@)(i7mDe7Ag|i!1kz8vvF06S_$& zvIj6*1a-h^@O-%}T+cTLj+3oQ9qPrX9OudnUNFe>t(inNqa`Gf+l~(>T3@jy_cKDA zGbv#iP71U4ZUE(b6ZTBSq(!1doX~MEH=z-zD|?`lo^t>| zumseR8h#l-}wMU+x?2klTG7Z z-Z6vTolKIX*7YzTah&+x4e2$$BG4X-0aK6G)c~Q9{HCt$ab#o8>!bxD!%z|zo@cE~ zc@zsK^W3GpnNn5sr~@cohdQ9zZUO+8*%zp_;TRWj!S7}TAjjLLU$1eSnW!78}5}G4|i|~9a{2C8T zvvviK$=fcU#GY$vTw!*2o3irI+w?7F_?`F4(#s@S`p!E=MuAq}J$`^OfxHy*0KeLH zizPv+*wA6_@?;JobD2_Z=+$2CkxC%-5nI@RaDW9TbpXeEs(&~i!h%UoP(u>Th*d$L z1Cs;rVVQRGR=n0yFR`8WEm<$~V5&HQjlu^^(+7ctk2CiEbsO|*OG%Hscy^j`CQD+ zCq5?^@XS(X503!F=muadQC;QV$66Uup12pxsh*=AH@sHdH!uW7gnp$1PlRH12eUYH z=K9F!d_TJxWGK5-Fre#&xfls*0$_(WTjU`Xydg9y=0ok z)`vkiiLB{betx=vt^kWUdgG*rK+jp=xPAi$OZ8w6ukDnV`UDHvJ|K4LM4Bm|7{RRl zXv$8JJ{`&Z40k5M)T%1* zQOhLEx~$@@1|tl{w~1p~Sd_hGZ(Qa=cu`|oFLPP$upOL+*(A5tObJU#UFSMTy$&l{ zorZs8feeh_qP`{iK*yxn7%w^OwP0e*#t_5L6PgI-wBsnfyXs}f;R6iAo`%M^DzZ#lz7HGZUO_a$X6W3YLUOM| zHW4cZ+3(6*pu@zTK4i&roT`j|9uQg@0RHh9bOtV10mx*uUzFL!QzBuo0||#@H4cEfI~eal3Hl3GoremhY;OoJ zJ&(Muge(v=8k1`AkIG-9CXyq`U5mSJgEy+0eVl4QcEAl)AlwMU{vPKE%?t zL@-AOAH}x~YCD7_-L09`T_knr#$IN^lNwftaYp*~LOMsAn$uM0AmOdA>G5VIZ+-0a z`jd_D`%)NIVnx4QJQ1Z&g`TchBRM#{xPA4J_1(jjrtr*M?o+u?9kz1ZBR>2d)Se|oR z;F}O}kh5MJD2>J@HlG8rdmPKKgVc0u{t$amW+56q@dGQn>DKk4-Aw`}|1QM}N*y%) zwwrdzAcS;V(Ic7~?)5oG>Q$D=xe&NgZnyEE^k8L;ToyvPIg;g8RfX&!%sS@ijUV*=kpI3(QGd2?}x@j z9`V1~zWe#LmCXt74tPr77}_z6{ApK=Baawh07VfdNkLN0csYzlfX!F9T?FsCR&q!Z*gjxycq^{rl%V7JYK zRBwiO+3e`o9?&7p@sdK~jAHrScGX;4y(SU4NOqFgc)kPsVcJnYwgP<~Z(jp_7^?e$ z0Fd8+dM2w;Y=;aeXFdezMQF49syxvKI#0srd4C#qv%(+vs?em=aj=n5SiK@2DwaJD zFcxNCQ!zl7DABVxq)YNuA3DKP&30=x&T@}wQ;v-GJ8zb696wq+;8-*o_)62b<`fft%$r3`M! zu?Qi^sD4GfScHxTJI`$gh4@d_u(33m^bW2*Ijlr-Rb6|GB-vhK8VmNf_b7?KqLW-1 zrK^u>7cm{ldc0~JWdxfBs$O<1Q zM8KN((w2tT4iXwdqhwUHP;qH7bwLXwY-m!TE5z-wBe0f)=u;PY_VixSEu*4RS*nAH>6JR{%Q%V`vXR>|?q+vG! ztin%c(X;W-7npL-W>jfx?Y~_6qv^B=SwCsTv`AG>$la`! z{aXSLhSTWNnh$?xKOp}eM$h}XLWpGMq5LO|aMmA(5KWN>#{nq1v?A6+VAimvv~z4xx`$#)3zN^Y0SE0^UUx5}}OQlv!Q-5!I`B5eu<9?RAlOWdF0{T<95r%N4T? z_4LUigwrpdaWdgBSa{;mi8}4#-=>HDL;!?*C}cqdoj1GntS;(cSP!s{3(3$gEkM7N zphNWiB2M^-wzo~62>L{=T2*SE=+?aS(Rb*iH(c@nlH1)2&6M>y`=R{7e4YH#H%a2p zhVSin=!pL3ow8+l>O`><_C#$!!8~kjF)iGqMpbqdjJhsmbGft5?qE#MqvFx)jEm$2 zRjAnqHx3UHJ;W=1w5=i(=+g)JpWJOuuBtM49FPj&Dz_$(D@*O`Tq>@Gwr{u^?3{)j zB@bNT&-Q7iiIXJ7suMp40w-Za4wuj^O0@pzEMXUTT(@(Qg$~%-@Lx_WgZND8BOa~9dtQGii z%n8hT$#pUm6El7`6^E15+N!+qzFh%dXbr>y^U6^v?JAD`D1{3qBF! zn(FI6D(3HX{LFZDyr&))8Up8N&DZN#I|4}>R7BDKFeEZJDth*e#E#f80v&iFmspb5 z#b!Tej+yvdCU{M70xO+{Q>DD?l1w3X% zA=x;?7y1K$v(CRZC-Ie5+0A?u|CDGYFYBH=lsn78o2ZZxZ1S=yi)gc|3-^K;1=!qQ z0hHV|>d|?km4XYcRKOG5ZCA+BIl_PY4*7XgWO&e4PfXxWY1nYQewQA0)U5vjPo2hJ=Ig3A4oGXm)r2kqz4$rQgiYNgC~TPE?%(9Rg#ZOU^Tx$wu$njETB^R|1&4lPRF1aQtrL zGfbj)p_;-H&?foUj_#ecPeN{c|FH+JExxNT#+V8&YfmFzz0_BFPX>k9{ zs4a&bm-{0+P}uIB0^^#28h()tt*Co!-bkW3H2M3t`iQvON4Y2)>Ba3-J$5E&aJR<< zVfSXMH)EK>F?d*TynF3Kx6%3J@;Dmah+c42C%3J_`0zd3`@StR9hW0F3%L9xqu}#m z2-Gq8?d*_3S~uvvhYBc0fQC+He<(u>jBy>eBKtb=%2*8wW+R#n zwE8Qj`X_E3L>Q`^urUqd({mn-r+fC{e1oO~vfN(8NM}n)+6c3YM&)AaAN=VVAaNn# zqs8u?>z)~S+-(h`j%0td>n}BrB}3&`U(%2g{0)^u zNgex9nE7@3$v9@^Xyq+VZI!)fIXwog9X%OPEl73{a))j`Fi_`06XWNz+-Ahg2O>w- zWl$!FW0wkQ8CWkBcKFeH3(*FZ?BH=Tgq&t>5w;Le5FTpysX!L+n#(_Ti<}l8zfWRR zM|Z_`*bR`!2%e=7&ZD?uust-_M+Tw(o7J!yu#@1!!40znM@$dp6=`6D2m1qCL;lF?}0Z7&?fPgy zVwyih$4%qQ^Zd-J881GEdXT(HcVWFQ_ZeLGT;SC?tS(jwG$`)rq&}B21B9PtZOX#t z#KxRFkKEBhh*;sOD4ZIIyF%uTu*&QxRY-JB6cdM+w28-}N;8T|(T1l|*+|0hDoG>z zzpCF?MQib|@pbl%ymt+n9!PZ>K@Y?aRmmU}urdA<=CdS0mCA=y?R(;9-Qjq6v-GpnIY z+T}0+?AU_wgHMwrG#FW39X7K!#q7|+$iAAdt(psq0<^T&l|^pxiZK6VLPeY2P5N}J!k z&)H?ke5J3_E6goc3`>{0Wmvc9+{ffBSZ$K~mdW*$E2z8|+&uCH5hO1Hr8%?m) zP(*r!LgON8wfIPV>r`Dj5Rtvt%InG$!2Hm)Iv$C4dmW5YZ^@#VMIj3viJ&xJk*xy~*T76S>OWg~-fo_Z2L#Zsh zro;0S5Vh*fO4R<2j39lDO&1OlpS#Q|a0AUvc{WZt?VqW!OmG<-8&-{&b-Ow9huK0L zTsk7X8EQxN=B%8+X2PS)_m~-LuWX%2A5##{ecHgPOv6t#hc&F^0-)7zy9t^$0}PIP zw~(HwC(k};Vk%t@sF70aE|S$`Q+-oVE;kZNXla-XMMif^-fvkUTKR z_mb7?aKXzYjz91zNYEdM4QTNhzMFw-z9zW!&HV$n7gd;0ShvX(+0HA!d{!f%DxMAQ zFS6_tg5V-dn11?K?2))(zDF`s#% zVN*m4x!9-NJ#8^_XJh)K_1|5cMK&YnZ|QE3io&ZZ=B^sABH;> zJQ?D6%{Pt+j6xjHDZj^m!w@iQ;IaO09A*M90XcL};3Vc0Sl&9@Y~Zp-hAQ-`kYQ{^qwlZ?Yr7=Sz9pD_J1>DpY}i-P@ncM2bsC*rQ+wNS)ucGVu!@Fjt} zbHSfRQ(Z++{Wrt79OZUzCy$#M=-AT{+Go-a{K_BX26C#Yy!kD>!qD45g zgFQ53l)`qYn-;%-HehMY-o*H*ut$+J=;3 zJy_q=5cOy~B5Q}#&Am`okLk1SP&kmU547r@4$2DZwT#xL++PxtA&PH@{B{+;J?-$( zlqR&n#CzIc6Ff~^{u1o))P~sOk-XX)kLXmaO?};oC3qn#z`aIR4q|ncCq<0QsRVDm zSNaB~A38YTDH1=jmfqi(TTbq=;@)PdPUHS4skz<Dssc|6Oe|>6V zxEmjx_*BZKwMYeR{TIqy_1+<)+fcBp#U+vJEp&#xt(O;q_O!^U?@jkuva!%AYrqNb zMPKju%)qe2ocpXyc#SEZJ%N7z>O#P6PV&6l6tvFVryi~_ zAr;DR{UWn{4+lBlw>xAR$}#t`gJhfcXWZ|A#_;7nSb>6e4D2N1#0eK`Y%{naG0_Di z2j&w=Hqpe17-v+1LJ-81T5b4sMBkwXLz~3wK)M$%-3k>mg#j_-XkM+|s@jw*&{E#1 z{^u6KZ$tKn%PiM@ObE)5X(a$uo;k^MzQn>(TL8OZyxm(Stm20~NpPw>J~dx`uI$*e z9NoT@lPg<=Z?D&^<>knL%%aJF7t&sooMR5Ph0Z0)E~C+{-}xao z->^+%sKy~1BEE<7gKq-byqJ&Qm_4ofWUuwsj0P8VnH z*&Q%9^_gf!_%+Y7fbvSpsAANU&qUaJ*?$L~X_tLhxMG6$J0a}sE<*In#ggXr{qCTR zHgWchLI@o9lNY8o4cE{Jnfly|PcERgQFj>7K#b`r^;LBUk62wA;c5k_u{Pmb%3UB` z6k%XX6KzG@M$((^wYgnxE`9{}O-A&>-%PfFU#k>9qAz!BT_>(;CHbs@;{{-?6YF2B zadM1%UYrWdvMx5~#`g3$Dt>{0Unxz8V;G$$8W`ZlZpA}PHBUpye1FvOCk#WmAzXDk z?F{8JZ;%+lEE`B`L$_&+1@Bo_(Y%{sk0j%Ihz0L24!6D=kz@+ayvn4YolrA(apz?(NjpJY+vf#MjJ5eBF3>#t+H#(`^=j8xQj9Ney>ebSM*CgQwR7B;;KaSYV{R}sO>w?pS^bt zUbzLjWsm&aG}{&Gkq(e(up798lwzJ}9a2027nw9W=$})&lrtk`Q&aF_=iyZ9mOW9n zDenv!%JMfB>t~;DU6Ut=-2Ps`wIR>`{pQX)#eVO-PxU@A*OA35&si+Y=-mv3e_;^s z&T&i(?6acuCAF&0OucwKfl)xhKwTvwzqaQ1Z>Y$V8m^DPbd%))NXo`;9WalfsHW5Pq{2V3lW7Z} z9=MIyj&uFD&;D1AXp6bY)%i3|{Nd|GsDwK)HA;xxM Date: Thu, 5 Mar 2020 11:13:19 +0800 Subject: [PATCH 14/16] =?UTF-8?q?:memo:=20=E6=9B=B4=E6=96=B0README.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.en.md | 6 ++++-- README.md | 6 ++++-- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/README.en.md b/README.en.md index ba930c6c3..bab2db9f3 100644 --- a/README.en.md +++ b/README.en.md @@ -20,9 +20,9 @@ ## Introduction -`spring boot demo` is a project for learning and practicing `spring boot`, including `65` demos, and `53` of them have been done. +`spring boot demo` is a project for learning and practicing `spring boot`, including `66` demos, and `54` of them have been done. -This project has integrated actuator (`monitoring`), admin (`visual monitoring`), logback (`log`), aopLog (`recording web request logs through AOP`), global exception handling (`json level and page level` ), freemarker (`template engine`), thymeleaf (`template engine`), Beetl (`template engine`), Enjoy (`template engine`), JdbcTemplate (`general JDBC operate database`), JPA (`powerful ORM framework `), mybatis (`powerful ORM framework`), Generic Mapper (`mybatis quick operation `), PageHelper (`powerful mybatis pagination plugin`), mybatis-plus (`mybatis quick operation`), BeetlSQL (`powerful ORM framework `), upload (`local file upload and qiniu cloud file upload`), redis (`cache`), ehcache (`cache`), email (`send various types of mail`), task (`basic scheduled tasks`), quartz (`dynamic management scheduled tasks`), xxl-job (`distributed scheduled tasks`), swagger (`API interface management and tests`), security (`RBAC-based Dynamic Rights Authentication`), SpringSession (`session sharing`), Zookeeper (`implement distributed locks by AOP`), RabbitMQ (`message queue`), Kafka (`message queue`), websocket (` server pushes the monitoring server status to front end `), socket.io (`chat room`), ureport2 (`Chinese-style report`), packaged into a `war` file, integrate ElasticSearch (`basic operations and advanced queries`), Async ( `asynchronous tasks`), integrated Dubbo (`with official starter`), MongoDB (`document database`), neo4j (`graph database`), docker (`container`), `JPA Multi-Datasource`, `Mybatis Multi-Datasource`, `code generator`', GrayLog (`log collection`), JustAuth (`third-party login`), LDAP(`CURD`), `Dynamically add/switch datasources`, Standalone RateLimiting(`AOP + Guava RateLimiter`), Distributed Ratelimiting(`AOP + Redis + Lua`), ElasticSearch 7.x(`use official Rest High Level Client`), HTTPS. +This project has integrated actuator (`monitoring`), admin (`visual monitoring`), logback (`log`), aopLog (`recording web request logs through AOP`), global exception handling (`json level and page level` ), freemarker (`template engine`), thymeleaf (`template engine`), Beetl (`template engine`), Enjoy (`template engine`), JdbcTemplate (`general JDBC operate database`), JPA (`powerful ORM framework `), mybatis (`powerful ORM framework`), Generic Mapper (`mybatis quick operation `), PageHelper (`powerful mybatis pagination plugin`), mybatis-plus (`mybatis quick operation`), BeetlSQL (`powerful ORM framework `), upload (`local file upload and qiniu cloud file upload`), redis (`cache`), ehcache (`cache`), email (`send various types of mail`), task (`basic scheduled tasks`), quartz (`dynamic management scheduled tasks`), xxl-job (`distributed scheduled tasks`), swagger (`API interface management and tests`), security (`RBAC-based Dynamic Rights Authentication`), SpringSession (`session sharing`), Zookeeper (`implement distributed locks by AOP`), RabbitMQ (`message queue`), Kafka (`message queue`), websocket (` server pushes the monitoring server status to front end `), socket.io (`chat room`), ureport2 (`Chinese-style report`), packaged into a `war` file, integrate ElasticSearch (`basic operations and advanced queries`), Async ( `asynchronous tasks`), integrated Dubbo (`with official starter`), MongoDB (`document database`), neo4j (`graph database`), docker (`container`), `JPA Multi-Datasource`, `Mybatis Multi-Datasource`, `code generator`', GrayLog (`log collection`), JustAuth (`third-party login`), LDAP(`CURD`), `Dynamically add/switch datasources`, Standalone RateLimiting(`AOP + Guava RateLimiter`), Distributed Ratelimiting(`AOP + Redis + Lua`), ElasticSearch 7.x(`use official Rest High Level Client`), HTTPS, Flyway(`initialize databases`). > If you have demos to contribute or needs to meet, it is very welcome to submit a [issue](https://github.com/xkcoding/spring-boot-demo/issues/new) and I will add it to my [TODO](./TODO.en.md) list. @@ -125,6 +125,7 @@ View the [TODO](./TODO.en.md) file | [spring-boot-demo-ratelimit-redis](./spring-boot-demo-ratelimit-redis) | a demo to use Redis and Lua script implementation to protect API by distributed rate limiting. | | [spring-boot-demo-https](./spring-boot-demo-https) | a demo to integrate HTTPS. | | [spring-boot-demo-elasticsearch-rest-high-level-client](./spring-boot-demo-elasticsearch-rest-high-level-client) | a demo to integrate ElasticSearch 7.x version by using official Rest High Level Client to operate ES data. | +| [spring-boot-demo-flyway](./spring-boot-flyway) | a demo to integrate Flyway to initialize tables and data in database, Flyway also support the sql script version control. | ## License @@ -211,6 +212,7 @@ Copyright (c) 2018 Yangkai.Shen spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client spring-boot-demo-https + spring-boot-demo-flyway pom diff --git a/README.md b/README.md index db24aafac..f31588b45 100644 --- a/README.md +++ b/README.md @@ -20,9 +20,9 @@ ## 项目简介 -`spring boot demo` 是一个用来深度学习并实战 `spring boot` 的项目，目前总共包含 **`65`** 个集成demo，已经完成 **`53`** 个。 +`spring boot demo` 是一个用来深度学习并实战 `spring boot` 的项目，目前总共包含 **`66`** 个集成demo，已经完成 **`54`** 个。 -该项目已成功集成 actuator(`监控`)、admin(`可视化监控`)、logback(`日志`)、aopLog(`通过AOP记录web请求日志`)、统一异常处理(`json级别和页面级别`)、freemarker(`模板引擎`)、thymeleaf(`模板引擎`)、Beetl(`模板引擎`)、Enjoy(`模板引擎`)、JdbcTemplate(`通用JDBC操作数据库`)、JPA(`强大的ORM框架`)、mybatis(`强大的ORM框架`)、通用Mapper(`快速操作Mybatis`)、PageHelper(`通用的Mybatis分页插件`)、mybatis-plus(`快速操作Mybatis`)、BeetlSQL(`强大的ORM框架`)、upload(`本地文件上传和七牛云文件上传`)、redis(`缓存`)、ehcache(`缓存`)、email(`发送各种类型邮件`)、task(`基础定时任务`)、quartz(`动态管理定时任务`)、xxl-job(`分布式定时任务`)、swagger(`API接口管理测试`)、security(`基于RBAC的动态权限认证`)、SpringSession(`Session共享`)、Zookeeper(`结合AOP实现分布式锁`)、RabbitMQ(`消息队列`)、Kafka(`消息队列`)、websocket(`服务端推送监控服务器运行信息`)、socket.io(`聊天室`)、ureport2(`中国式报表`)、打包成`war`文件、集成 ElasticSearch(`基本操作和高级查询`)、Async(`异步任务`)、集成Dubbo(`采用官方的starter`)、MongoDB(`文档数据库`)、neo4j(`图数据库`)、docker(`容器化`)、`JPA多数据源`、`Mybatis多数据源`、`代码生成器`、GrayLog(`日志收集`)、JustAuth(`第三方登录`)、LDAP(`增删改查`)、`动态添加/切换数据源`、单机限流(`AOP + Guava RateLimiter`)、分布式限流(`AOP + Redis + Lua`)、ElasticSearch 7.x(`使用官方 Rest High Level Client`)、HTTPS。 +该项目已成功集成 actuator(`监控`)、admin(`可视化监控`)、logback(`日志`)、aopLog(`通过AOP记录web请求日志`)、统一异常处理(`json级别和页面级别`)、freemarker(`模板引擎`)、thymeleaf(`模板引擎`)、Beetl(`模板引擎`)、Enjoy(`模板引擎`)、JdbcTemplate(`通用JDBC操作数据库`)、JPA(`强大的ORM框架`)、mybatis(`强大的ORM框架`)、通用Mapper(`快速操作Mybatis`)、PageHelper(`通用的Mybatis分页插件`)、mybatis-plus(`快速操作Mybatis`)、BeetlSQL(`强大的ORM框架`)、upload(`本地文件上传和七牛云文件上传`)、redis(`缓存`)、ehcache(`缓存`)、email(`发送各种类型邮件`)、task(`基础定时任务`)、quartz(`动态管理定时任务`)、xxl-job(`分布式定时任务`)、swagger(`API接口管理测试`)、security(`基于RBAC的动态权限认证`)、SpringSession(`Session共享`)、Zookeeper(`结合AOP实现分布式锁`)、RabbitMQ(`消息队列`)、Kafka(`消息队列`)、websocket(`服务端推送监控服务器运行信息`)、socket.io(`聊天室`)、ureport2(`中国式报表`)、打包成`war`文件、集成 ElasticSearch(`基本操作和高级查询`)、Async(`异步任务`)、集成Dubbo(`采用官方的starter`)、MongoDB(`文档数据库`)、neo4j(`图数据库`)、docker(`容器化`)、`JPA多数据源`、`Mybatis多数据源`、`代码生成器`、GrayLog(`日志收集`)、JustAuth(`第三方登录`)、LDAP(`增删改查`)、`动态添加/切换数据源`、单机限流(`AOP + Guava RateLimiter`)、分布式限流(`AOP + Redis + Lua`)、ElasticSearch 7.x(`使用官方 Rest High Level Client`)、HTTPS、Flyway(`数据库初始化`)。 > 如果大家还有想要集成的demo，也可在 [issue](https://github.com/xkcoding/spring-boot-demo/issues/new) 里提需求。我会额外添加在 [TODO](./TODO.md) 列表里。✊ @@ -125,6 +125,7 @@ | [spring-boot-demo-ratelimit-redis](./spring-boot-demo-ratelimit-redis) | spring-boot 使用 Redis + Lua 脚本实现分布式限流，保护 API | | [spring-boot-demo-https](./spring-boot-demo-https) | spring-boot 集成 HTTPS | | [spring-boot-demo-elasticsearch-rest-high-level-client](./spring-boot-demo-elasticsearch-rest-high-level-client) | spring boot 集成 ElasticSearch 7.x 版本，使用官方 Rest High Level Client 操作 ES 数据 | +| [spring-boot-demo-flyway](./spring-boot-demo-flyway) | spring boot 集成 Flyway，项目启动时初始化数据库表结构，同时支持数据库脚本版本控制 | ## License @@ -211,6 +212,7 @@ Copyright (c) 2018 Yangkai.Shen spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client spring-boot-demo-https + spring-boot-demo-flyway pom From 15977cbe68e9d6945fb83d22e4e08c694038f914 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Thu, 5 Mar 2020 11:13:27 +0800 Subject: [PATCH 15/16] =?UTF-8?q?:memo:=20=E6=9B=B4=E6=96=B0TODO.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- TODO.en.md | 3 ++- TODO.md | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/TODO.en.md b/TODO.en.md index 65c4a796d..bc9341610 100644 --- a/TODO.en.md +++ b/TODO.en.md @@ -1,6 +1,6 @@ # spring-boot-demo Project TODO List -## Module plan (completed: 53 / 65) +## Module plan (completed: 54 / 66) - [x] ~~spring-boot-demo-helloworld(helloworld example)~~ - [x] ~~spring-boot-demo-properties (read configuration file information)~~ @@ -67,6 +67,7 @@ - [x] ~~spring-boot-demo-elasticsearch-rest-high-level-client（integrated Elasticsearch 7.x version，use official Rest High Level Client to operate ES data）~~ - [ ] spring-boot-demo-springbatch（data process） - [ ] spring-boot-demo-security-justauth（use JustAuth to login GitHub，and use Spring-Security to manage login state） +- [x] ~~spring-boot-demo-flyway（integrated Flyway to initialize tables and data in database, Flyway also support the sql script version control）~~ ## Remarks diff --git a/TODO.md b/TODO.md index 1e7371ad7..9f907358b 100644 --- a/TODO.md +++ b/TODO.md @@ -1,6 +1,6 @@ # spring-boot-demo 项目待办列表 -## 模块计划(已完成：53 / 65) +## 模块计划(已完成：54 / 66) - [x] ~~spring-boot-demo-helloworld（Helloworld 示例）~~ - [x] ~~spring-boot-demo-properties（读取配置文件信息）~~ @@ -67,6 +67,7 @@ - [x] ~~spring-boot-demo-elasticsearch-rest-high-level-client（集成 Elasticsearch 7.x 版本，使用官方 rest high level client操作 ES 数据）~~ - [ ] spring-boot-demo-springbatch（数据处理） - [ ] spring-boot-demo-security-justauth（使用 JustAuth 登录 GitHub，使用 Security 管理登录状态） +- [x] ~~spring-boot-demo-flyway（集成 Flyway，项目启动时初始化数据库表结构，同时支持数据库脚本版本控制）~~ ## 备注 From 9b9a24d7dcc37dbfc97cd845ab35409ec8b3c347 Mon Sep 17 00:00:00 2001 From: "Yangkai.Shen" <237497819@qq.com> Date: Tue, 10 Mar 2020 13:27:06 +0800 Subject: [PATCH 16/16] =?UTF-8?q?:sparkles:=20spring-boot-demo-flyway=20?= =?UTF-8?q?=E5=AE=8C=E6=88=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- spring-boot-demo-flyway/README.md | 4 ++++ spring-boot-demo-flyway/src/main/resources/application.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/spring-boot-demo-flyway/README.md b/spring-boot-demo-flyway/README.md index 2186aaec0..016ad45a7 100644 --- a/spring-boot-demo-flyway/README.md +++ b/spring-boot-demo-flyway/README.md @@ -57,6 +57,10 @@ spring: clean-disabled: true # 校验路径下是否存在 SQL 文件 check-location: false + # 最开始已经存在表结构，且不存在 flyway_schema_history 表时，需要设置为 true + baseline-on-migrate: true + # 基础版本 0 + baseline-version: 0 datasource: url: jdbc:mysql://127.0.0.1:3306/flyway-test?useSSL=false username: root diff --git a/spring-boot-demo-flyway/src/main/resources/application.yml b/spring-boot-demo-flyway/src/main/resources/application.yml index 7c32fe96b..e95f0fcbe 100644 --- a/spring-boot-demo-flyway/src/main/resources/application.yml +++ b/spring-boot-demo-flyway/src/main/resources/application.yml @@ -7,6 +7,10 @@ spring: clean-disabled: true # 校验路径下是否存在 SQL 文件 check-location: false + # 最开始已经存在表结构，且不存在 flyway_schema_history 表时，需要设置为 true + baseline-on-migrate: true + # 基础版本 0 + baseline-version: 0 datasource: url: jdbc:mysql://127.0.0.1:3306/flyway-test?useSSL=false username: root