From dcf634d805a928e073b09b9df3b4d4547fcc9fbd Mon Sep 17 00:00:00 2001 From: panxiao81 Date: Fri, 25 Sep 2026 19:44:39 +0000 Subject: [PATCH] =?UTF-8?q?=E8=AF=95=E9=AA=8C=20React=20=E5=86=85=E8=81=94?= =?UTF-8?q?=E4=B8=8A=E4=B8=8B=E6=96=87=E4=B8=8E=E5=8E=9F=E7=94=9F=E8=A1=A8?= =?UTF-8?q?=E5=8D=95=E7=99=BB=E5=BD=95=E6=B5=81=E7=A8=8B?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitignore | 6 + README.md | 10 +- build.gradle | 12 + docs/bootstrap.md | 3 + docs/browser-preview.md | 79 + docs/images/browser-preview.png | Bin 0 -> 38248 bytes frontend/index.html | 17 + frontend/package-lock.json | 1280 +++++++++++++++++ frontend/package.json | 22 + frontend/playwright.config.ts | 8 + frontend/src/main.tsx | 159 ++ frontend/src/style.css | 240 ++++ frontend/src/vite-env.d.ts | 1 + frontend/tests/preview.spec.ts | 95 ++ frontend/tsconfig.json | 13 + frontend/vite.config.ts | 6 + scripts/frontend-in-docker | 16 + scripts/gradle-in-docker | 2 + scripts/native-smoke.py | 1 + .../login/preview/PreviewConfiguration.java | 44 + .../iam/login/preview/PreviewController.java | 146 ++ .../reachability-metadata.json | 0 .../iam/login/IamLoginApplicationTests.java | 115 +- 23 files changed, 2253 insertions(+), 22 deletions(-) create mode 100644 docs/browser-preview.md create mode 100644 docs/images/browser-preview.png create mode 100644 frontend/index.html create mode 100644 frontend/package-lock.json create mode 100644 frontend/package.json create mode 100644 frontend/playwright.config.ts create mode 100644 frontend/src/main.tsx create mode 100644 frontend/src/style.css create mode 100644 frontend/src/vite-env.d.ts create mode 100644 frontend/tests/preview.spec.ts create mode 100644 frontend/tsconfig.json create mode 100644 frontend/vite.config.ts create mode 100755 scripts/frontend-in-docker create mode 100644 src/main/java/top/ddupan/iam/login/preview/PreviewConfiguration.java create mode 100644 src/main/java/top/ddupan/iam/login/preview/PreviewController.java rename src/main/resources/META-INF/native-image/top.ddupan.iam/{iam-login => iam-login-manual}/reachability-metadata.json (100%) diff --git a/.gitignore b/.gitignore index 5539fbd..5916b60 100644 --- a/.gitignore +++ b/.gitignore @@ -42,3 +42,9 @@ out/ *.log __pycache__/ + +frontend/node_modules/ +frontend/dist/ +frontend/test-results/ +frontend/playwright-report/ +.playwright-cli/ diff --git a/README.md b/README.md index ea94c8f..6c61f1d 100644 --- a/README.md +++ b/README.md @@ -46,12 +46,14 @@ Native 构建与原生二进制上的认证测试是交付要求；JVM 测试通 [项目初始化](docs/bootstrap.md)。使用 JDK 25 执行： ```sh +npm --prefix frontend ci +npm --prefix frontend run build ./gradlew test testAot ./gradlew bootRun ``` 测试需要可用的 Docker，生成器配置了 Grafana LGTM Testcontainer。 -当前只有默认应用和上下文测试，默认 Spring Security 登录页不是可用的 IAM 登录流程。 +当前有隔离的浏览器交互原型与上下文测试，默认 Spring Security 登录页不是可用的 IAM 登录流程。 使用 GraalVM 25 验证原生测试与编译： ```sh @@ -64,3 +66,9 @@ Docker 开发使用 `scripts/gradle-in-docker`，默认持久挂载 Gradle 缓 JVM、AOT、Native 测试及原生应用 HTTP 检查已通过，实测范围与资源数据见 [本地验证结果](docs/bootstrap.md#2026-09-25-本地验证结果)。 AD、MFA 与 Hydra 认证链路仍待实现与验收。 + +## 浏览器流程预览 + +人类登录界面采用 React + Vite，参考 Keycloakify 的内联上下文与原生表单提交方式。 +原型默认关闭，仅测试页面切换与局部交互，不执行真实认证。启动、浏览器测试和边界见 +[浏览器流程原型](docs/browser-preview.md)。 diff --git a/build.gradle b/build.gradle index 5680496..2eace16 100644 --- a/build.gradle +++ b/build.gradle @@ -71,3 +71,15 @@ graalvmNative { } } } + +// Vite owns the HTML and hashed assets; only the controller can serve the page shell. +// Build it with `npm ci && npm run build` in frontend/ before invoking Gradle. +tasks.named('processResources') { + inputs.files(fileTree('frontend/dist')) + doFirst { + if (!file('frontend/dist/index.html').exists()) { + throw new GradleException('Missing UI build: run npm ci && npm run build in frontend/') + } + } + from('frontend/dist') { into 'ui' } +} diff --git a/docs/bootstrap.md b/docs/bootstrap.md index ad12073..fdc51b9 100644 --- a/docs/bootstrap.md +++ b/docs/bootstrap.md @@ -126,3 +126,6 @@ Prometheus 注册器中的 CPU 时间计数器并断言数值有效，避免后 这是一次本地 smoke 测量，启动耗时含检查器轮询，RSS 不是峰值或负载预算，ELF 大小不等于 运行镜像大小。未验证 AD、MFA、Hydra、目录就绪或 OTLP 后端数据查询，也尚未接入 CI。 运行报告生成在 `build/reports/native-smoke/result.json`，不提交运行日志或构建产物。 + +手写 Native 补丁位于 `META-INF/native-image/top.ddupan.iam/iam-login-manual/`， +与 Spring AOT 生成的 `iam-login/` 目录分开，避免 `bootJar` 中同名元数据冲突。 diff --git a/docs/browser-preview.md b/docs/browser-preview.md new file mode 100644 index 0000000..8c8468a --- /dev/null +++ b/docs/browser-preview.md @@ -0,0 +1,79 @@ +# 浏览器登录流程原型 + +参考 Keycloakify：Spring 返回 HTML 时内联当前页面上下文，React 用 `createRoot` 渲染， +表单原生 POST 到 Spring，后端按 session 中的步骤校验并返回 303 重定向。 +每次导航重新挂载 React，带 hash 的 JS/CSS 可长期缓存。局部帮助展开不发请求。 + +这是浏览器交互实验，不是身份验证实现：没有 AD 查询、真实密码、TOTP、WebAuthn 或 +Hydra accept；不会创建 Spring Security 登录身份。演示码 **123456** 仅用于切换页面， +不得作为 MFA 实现复用。默认关闭，显式设置 `iam.ui-preview.enabled=true` 才开放 `/preview`。 +所有其他受保护入口仍需认证，Prometheus 权限保持不变。 + +![浏览器交互原型首页](images/browser-preview.png) + +## 本地体验 + +有 Node 24 和 JDK 25 时： + +```sh +cd frontend +npm ci +npm run build +cd .. +./gradlew bootRun --args='--server.address=127.0.0.1 --server.port=18081 --iam.ui-preview.enabled=true' +``` + +访问 。填写称呼，尝试错误演示码，再用 123456 完成。 +后退链接、刷新、重新体验都走服务端流程。启用 DevTools 的 Network 面板观察 document +POST、303、GET；不要勾选 Disable cache，否则无法观察正常的静态资源缓存。 + +Docker 开发： + +```sh +IAM_DOCKER_USE_SUDO=1 scripts/gradle-in-docker bootRun \ + --args='--server.address=127.0.0.1 --server.port=18081 --iam.ui-preview.enabled=true' +``` + +`gradle-in-docker` 先用固定 Node 镜像构建前端，再运行 GraalVM 容器。 +Gradle 缓存默认 `$HOME/.cache/iam-login/gradle`，npm 缓存默认 `$HOME/.cache/iam-login/npm`； +可用 `IAM_GRADLE_CACHE` / `IAM_NPM_CACHE` 指定持久目录。Node 仅参与构建，部署无 Node 服务。 +直接调用 Gradle 时先构建前端；缺少 `frontend/dist/index.html` 会明确失败。 +前端 watch 可用 `npm run watch`，修改后仍需让后端重新复制资源并重启；本轮不实现 HMR 桥接。 + +## 验证 + +```sh +IAM_DOCKER_USE_SUDO=1 scripts/gradle-in-docker test testAot nativeTest nativeCompile +python3 scripts/native-smoke.py +build/native/nativeCompile/iam-login --server.address=127.0.0.1 --server.port=18081 \ + --iam.ui-preview.enabled=true +# 另一个终端，应用保持运行 +cd frontend +npm ci +npx playwright install chromium +npm run test:browser +``` + +浏览器测试覆盖原生页面导航、错误重试、局部交互零请求、无 fetch/XHR、静态 JS 缓存、 +移动端布局、脚本结束标记转义，以及完成预览仍不能访问受保护应用。 +额外计时使用 Chromium 模拟 60ms 网络延迟、1.5Mbps 下载和四倍 CPU slowdown， +用于比较首屏和缓存后的页面切换，不代表真实 LAN、Tailscale 或手机性能。 + +## 实现边界 + +- 页面壳在 `frontend/index.html`，Vite 构建后作为私有 classpath 资源 `ui/index.html` 打包， + 不提供静态 index 入口；控制器仅替换一个固定 JSON 数据位置。 +- Java 使用 JSON 序列化后转义 `<`、`>`、`&` 和 Unicode 行分隔符，避免 `` 逃逸； + React 按文本输出动态内容，不通过 HTML 字符串插入用户名。 +- session 持有演示步骤。表单带 Spring Security CSRF token，缺失被拒绝； + 非当前步骤的提交拒绝，未知/过期 session 的后续页面回到初始步骤。 +- 页面与重定向 `no-store`，静态 hash 资源 public/immutable。CSP 不允许内联可执行脚本。 +- 单 session 仅有一个演示流程，多标签页会共享步骤。正式认证需要独立事务、过期策略、 + 主体与因素绑定；本原型不提供这些保证。 +- 当前采取整页切换，不提前实现 fetch 优化。后续根据测量选择需要局部更新的步骤。 +- 首屏依赖 JavaScript，没有 React SSR、Flight、客户端路由、FreeMarker 或模板引擎。 + 关闭 JavaScript 时显示明确提示，不宣称无 JS 可用。 + +来源：[Keycloakify 入口](https://github.com/keycloakify/keycloakify-starter/blob/main/src/main.tsx)、 +[登录表单](https://github.com/keycloakify/keycloakify/blob/main/src/login/pages/Login.tsx)、 +[Vite 构建](https://vite.dev/guide/build)。 diff --git a/docs/images/browser-preview.png b/docs/images/browser-preview.png new file mode 100644 index 0000000000000000000000000000000000000000..29f6957d378d7ff241d95ce513449c65b1b7a55d GIT binary patch literal 38248 zcmeFYRa9JE(=OVC1d7`nVqVsB_}uy2|Fm8=6R0h26G#`7rkEt2RYN`E4?u)?tn;O#XYmjVBogYO66#lsI(&;HL8{~LRe`w}o(@XZNr zdO+5K$H`Y5Dt>X=0yKOujW2Ah?GHQp-}XF20=pgGl9@#;DJjmRI6;Zgg`I`uIlq+y zrISfgU_R#FDpAb#D@U5Q=kBf=?~VueC>)E4*^Yf9A)$<6Wb!<5T7V?M1Jzj|V0C$} zL{eHYmsYz40#+s_j1o=F56-2ZJOVh=_d-|bnbvPTpOehYK+JJlo_J~ss^el5Umpy3 zksDTGN4hh9ut5*%L=lmY{s0t8~3VZBVx7~rV13iur$F{ zi-&`j7YTI=<&uP`;?OA4+QYe&Y|52-a3d8`y4kbhuFIpyQ*)E#?2rkw!Gf3#9ttbq zPb@M4>+}FPX~}e=BIY|{bKL5nsPt?74bHP=?uG}Zk0{H<8*ipk&(7JLXvXvM zn|Va({hh)EnJo{l*QNl+BRFJ3zGxUN_n@fXqh@zJYrXU=Pi785S;r4lX${uO4JnL4 z#ww4Kl?v^EOO;w@3C8=+8ZgVIpnLQoVCyrrfGJAR{5ERmNXJ9d#b#?uE2oVj=?iO( zzafbr>&B|B{8SacWyTk;G(q$3>!W2dg-&VQ8UO3aQu<&?q1Q;HoAB9{WwCDz@Ft2# z6v!FrHO=%{jNhxvIFMNx>Co2^M@!&N!mnVXR$p*#?>$Ffjjw5j{z3NjCVMbpdpymJ)hn5oA5 zY@o_13ted};XbouJryI5s@u7zNe;X}JpE z820rd3on;)(PLOL&~AD)OZRQ#I@b1LA-Rno-&$B4jA}NuNI9i%){ICYpvFBvXyiaP zz7%9R6_mac;XIZ!-4|&QN9lRd)!h4SMl3aiNJoDEM>3}hHC0^CDe6*N3B6}vq1=}3 zrqQt!y_;u6JUzrBgnumkbCGR`2LR-{&;zioAqp4LIKWT-(Rsz^s6?&!Hi_Q6hA%3m zb9z2Rx(ooX7l&)+7S~mQ-4g?P?=rTtE_cUe*9bzY|kSyP<_D~8&bGp!W7_lWg`L-+j1WLH*?#n?ZO^{HVOM0X_n z9G|4T4c|KcIr8lEa#PC(D4FIn7+x!;bv0?Csq2OPKCe|o#F(sdKS6ltd>o=$UlzCv^%R=AtBl4YpYOeh5wSNiz#4ysraJL z&YU3T`60R7DjDW+%gaZAblg9EqU4+0Uz*M-XBPBtNWi-+HXhN@j+#`7%hXcB*Y)lv zCoX-0Z_0Ec)>*(}VjLubGh^IU`T860j)WZLj6Zm-*1ugXCOFv1XMBnY$(j$kR7!mF z!e`*cpsh~SxPHv|IsB3@Y;}apsIfqIH*a`8b4|#$Y9KE)ss|kYegCC^^Ka&qKZ?I< zd_pe}%%GX{VS1}zOLoJ?d)+vUbx2se_<@;HfORU`^-&_X^C$g~PeIx(#CyVEM{T}!G>_f|++-x}ZR8wFhc_j<3GY(#_? zxmKGpL{vEaRMqHW>+!16*=iH z9d!_wLDzfAdXH+A0!4r=!OJ3MC+rRN4kfDBG1f|n&!tP=2{I?G-Nff;`rH05F_lVH zbgqBuPnRA&q!J}*Wa;lHi5!c>{2K zCslpw?COUL_q3HQvJ)k3){K9_(0x6*;dm%iOqKN*BViQgG+=PSdltc@q->r4h6~7= zF84S7GGpelC;TrU*NF4~6GZo~Bml5iQC_YDkT5s1vckmX3n>7O>3(k=AiZut=x1Cq z)~ojDb0QR_;;N>Q>_9Q?^OHeaD6pP3FA)MpqkpUnwoB7ONF`*4J z$*5ASFIH}c7L~sIZ_F9S_<_QxMLfU^mi!wD1O@?*zKiq4`Wy1kGi>Ye2Qy0DCk8&7 z1*A9IQGa3YkvGHK{{WQwtWUlu^gkJmoO1nX*FLH60%x=i1DAQQ@RKy(P;L!>ZXp6_ZDcoq2N9Szon<*fQ6te(xcZ+A2 z`WwbIJOPE^j>==$zd-fpIHT4N{#HmQR@RbY3^+IVUAdSUr5N4c&A6Ptmn3YBi zSagkbYcS&kFs|BiT*3bR_X9a*zK13MG;BFn+<6kP$4X0CsaDQ_jcu)oSsO*fjn$;j zrTz6S4xTzsKzFYSkHqiR@(+G`fxr4N|0aBpJ?|^`AqhbgL$`5_f%Sb8VTw+k$^dK#aHZ#K2e1jX~YnG3eH@yt`^=OP;aBu?lBLOe| zHkTr@WjyLB6~mW!BK>dzCw?i6)?w zr=Kti%)ly}gaK=hY-OR_2_MN4F0#&h2?&tM4+cimZV!jy z;qLWw@M9ClU>V|KWR5cGl24)v*yLu%0$B5G95ak0;hKJB$HxB8v2p%0X}7hlP^58I zBPx}P5jT!-K#O29X@=`1g@pN^l6L`i`!y==0&I^0EJHv~06eS@Qq@zfJ_8NVK})c zJiw3=Ht7$nzw-}Tjx44DNF;QBrIJ|x48U=&Fg$Izy=aQS0pwPfY>Ij6)Y1a1B_5PO zS(}GR`KJQhXdksh|64vEKv|v_GKdABpyaT@8lA;>Dnnv?*JKTErc6F8iTtU*p?1+o z0E7smqWy3;3V_6udo{p+3}aCa8VM@I$fGQ$jO!rt>3_HmOxXEvx$DDIMVE0-ksyro zsmRXHwVQhmfbe2|4(XYD0r<;$s`@Oz4#Oh+4O!j50ocF91p)Y9KA6;>Yb${DFM$AT z>x~D86g*$~5*xr{L$!g$^9r*b{PMy|RAtR;2?mVl6?X1H+r5Oj9T;=XZF`pwk>EnZ zJD9`DtVDn(qj3izv&0yw_N3?le`ShCu5S2mT0l!37m7O66VJYKZDjYUdD6~Jeg7~b zDj}3sOd+zKx9}*DtcCOdy|?K^_@?YYf=J;0cqH;fd%6l_Zg{@;W`djB$F`z8QAHMr zybMpI;3G-TpalYLe>VH^_oVotcDGv7g)Y6%(pX>vIiLEMU>gfl!s?N>oP=>+-MP=H zoOQmBuJ(4eY2YwHBF|{}*9)h4VcLLVCgiAtm6g{85b#$YW7iVOb)SrUgPvMg`x;Hg zEChzcMDKiit=JZ>c8*UdXLND6SLG{n7D4zmnjp3Nr|GjZ#U+>Dxm+w-A8z!~Ke8PzR8ZbNO`xUxx;z@& z=&x6IoLV9(TJG+4EbLJen@mOiK~NI8p!4yQMxiIk$52eh6%d6H&)TqD8|d_fMVBje zWBe$5gaEov{jyjkMlXruofBweYo>zB zQ!V2$z)-YI+K3f~vGe~p8<$}M*3E9&V{u~l5k!J8G@eWK+s@FccF6(v8V4bZh1cLJ zz3+tZV{6gGWK-`QrKt#SWx=_oBCpRC!

H*M&c@O7RZ6CwFL*Wzuj|4t@PMYSqCc zJ;`mXRqURLw#9aRNmBT1krSM)PLBf*9gEbE^a81IHT0j62wuz}gzJ3{}fqd|rn z*0R@!JurTc@NEV?Ew0y!3QW-Pf`|q9c4Ez+A)`B~TW!kFa^aedeG>AlZgF0L(W1An z*y{4=3m+dC!%#gHVhK)VhPcV+OzYo;J$%z0k#EW!|+DWF$`k)&du; zS>~IeNud%tbtdC^eu8j0+Km}wL!IWp72rwNM{tCU8W915Ii$n)+%6$hvjkw(BP|PN zGfaHzi>4WCknOlUB#*DZ64mGq(M{XXQ&?!;S+JIBh{HZtE8`L#P8I3a=lm)ct$z+* znj>-1;v(7D6_FLY8jp>b;2q#y9Z9Bo=IgHDq@`lkeBv^o2YuJS-O=-#C;p4pv&r~( zEF(RJEKELqIxaw~p&eGPaaFRX4iXE~n4BVo{UduH6f9$0?APSfb;c0&TLHI>aNiy` zfbAh+u+77V9V3f8kNMmwT<`Y`mrje9nqxC=e6(4nEW3|qsaw{oI804bi(cBU{8;^? z3c7?(9<)*k8Z>JzRE|6K2Hm=CapjpKRRlqCq*<=uGRPNBXQCE;#^%{+R`$?BX7pV zy#?pv5218k%IPoF|LkL&ur=v}H*cZz<2MDzjyK2_HV`zyBlP9SL-T({d%Pfbl~4J% z5$wb%n0vtU{cPorZ%dY5gLTX&W|0)}q+_3{MVgGS_=oNf#U*8F@3onq4|3u6qCaS|I;-Sg~OpXmGBO7K8}eiSe_ zU%wzdL+k!4p>qHAS=kku9>xP*OYWLqz7n6fMR}63wu?T)I1C&&F>Gtpn@9M$Kc*03 zG8eRujH;cpLM0TNT2eq{NxJXf-K9BL-xo#{mw#Kr9T0g7F^T!e}Q)^@v$FZ$r1)5CNDjj~u3Y}p|E7Z=(o;$v~e z7jgS$6Oq5~w)#d?4=tPc$B!fY7qg8JqTz-@(n{2GUD7)Q5EI}B(+z-z-w&spfb%3L zP>bv~-`_dCgpFSIU3KD%`Iq8~ol}Q*$1UjSsToxCoy@S0zr6v+V;pC1)({CiJNle` z!N>ZOALi3OT$Rw&Pi32L1^?fnbY}RE*D1_L<)DDk2f*S$pq!_=+_`tkU#8HaO zBZa<{8YS{V&fJ+$kE|Wvkm2X5Rg+@J>wEEy4T{>lHa3;!)V@@Gnp zK$5o*{EH5-B1499wEwCHG+0|(OI(E?Rw93Sc^OXnT+6!`1Dx@@aHPDi;}S-iYTPhS zKei8H2hqHmh&SYXhwATX58qUz2u>oQQ=aJ$-h846|XHzlFL@G)_-4siveP`m5h}HrpCLPUjUP#Go+crw{O#V8Gu9F_oTl zae(Sl9au6lq^0n0kl003pY1XC;t zhv`mxpW}tfa7D%aIk+zCT~9pcwBy42QK~*@TRAF|0ITC-_kBu*5RQ9qJVK2wup*sF zj1VxofkCRdGTXyhx3^Zuq$!Dp)7o8N2362my@Xq0s^>5ByK$9Z0*8NJX(T*Or~kj7 zAZ)#_YkX^=Q_W7nF4#~9M|nqXG@JOYNC>h#Oj>x`)p8x1-@;%p;6)if z_;-Or2LExmaGdeM2KDS_{lf9VioO;&CS#f%UL|2tFf;j`lL~0KQIplN&g9`nTzIa` zHWO|@OTOp#ZEmmN)A|v<3&*kgcfYCrH}Icffg(v;p^W(jUs$B63(R0@)^#dLCeA*t zd5n#`UYkvHvR1U;0W#(aYJaFDx+WJ~f;>`1ujhXp zCsYNV{Aoi;q76(?_L8Y^Ii#mf`1()pPh8Y=zjw_Rt7>Po9Qa{Le(tfvS5 z^oL2D3l(ilEeF4_c>j@AUl%E>!IFvcSr)cV%wSepx!UjdfYUs^UjSU$QX9-Rd`Kpp zA^+~q1iEqW8y4|qIlb`MWDngsa^L4ZY*IU9Q%_6;`K`$Jy=h?K_`aB!ZMM)aclS3e z|B;ru=fPgD_;|Q-w;9ayZygiPEvs_cf;PwEn$YF$&xq5$?>@2{G84rvUaV$fXg}3^ zaAnQVPRWF$jgeKkOjHi;>W14wBiU~wtzRFwU3@o6p`be8^{_-yDa`g(E@b| zbW#TC$ei2PYK!CDm>5xXmK@khtG`lub*jRuN9v59Uh+@nOMopVK?LmA(=IzfVLbaI zUScSXiOn$D7M#aZ&7p9D!wmnCK&Yn+jlgO?G*D$f{1q7|`qSb~Cp~p0wE>R%GxwLs z-(xK+!m3K1k*eo=WYb^^a8&pu{O(9Wu+bK~2W@q~1bXjx7s`d6xS4*&^)SZ4V(#P5pFo1OG!^kgS#k>V2!{8Oc(Z8 zNlaP1(ELv2Vf=krWb6r!GY6{H;>}JOMwDo|7j1K`xWPzdVz$vyqmjkAJ-vfTeV5+w zfcpFq)F2$Tr~%T4`L1=gwIzQkz;6X=j_CGnyyn{LijhfM(feH)!7m`IM0=oUTMDNT zCzJ$3HG{KwRaAJht)?!$KR7Kop0Ci9+$#sU3t4{p7UJEP*xa;fy%{6CTnX!BN@{E z2lE%zpw~;VwWOB2q)+)FY%nxdqZzP4gESV0P4VCg=TtMh#7Ogm( zm5=vMb9y-CHwbUHV1P!mwL~|o-9B< zFIiiSJBgBqM=d)VLob+B=AfeTyW(w02}wz|Oj?%4+C!8X;StKe=cw%KD-2s0Ou%6% zvmBJ%PKv*tfahMPv1k#B?HcuR#~5k1d2CsC&rj%T+{8^cvQ+Rz@BSk{38Vc=<}&}= z;xEhwifJu6{F_&{y`&7vx!c<|UZf9kG1Knxl zqw4ov_wS}ZP3FQPk&Bh1?M6`?d3=d_i{$DO;_~Dtq+&3K*bR177)nDlVs;k6A7#5z60!+SKDxGDy1Xwrd~J1x*tM1Ht>G!=)(`C0$3%@mSb82l)_cub#MSSS(ZL(~C z)NYGO>Xto(Qiq_Oy=8Gl+RuAKNtNy#SuLv|th%$q@kJaH=wr(~c_DljM}{pv858Up zj!sU{Ge#%23XGkut0~jCPuD+a9$! zb|H+h^|&cQW-N819Rk`n%MKB_C)AhMzETm0_^ZmO$i)r5;r^F9^J0XOo6ABH>jh7} zlHjkKQUgdN^Umzow{0s_D!*7~l63neB+|C{IH)(M&$ppFh`rEMOVDX7;*4mKC zZa%*tW9oUI(P9F&6*V>N4A9P`n3QtJ33XLqYWN$=k$xx~j{vvZ2Bz7eMN;{_F7Q1` zpdU964Q{1tB=5NfX8FwK9fsdtxoa1$Nl3Q2i8GCJVuB!O6VToqpeF^yZiMS8t80|=&d8`scSuGDsqUOm$zX4sQ*l)ur-iU z$Km4=Cj3H0Q@)5G)$2bKHzerh?^j6ns9JvV|FW?%V%DOvh^1oNU1{Q_IcvluO2^;$72Nf&y&=xQgyITJ)%Pd%lm zVqPltKPoXS$4A%grQo?gVo?a zaauVCULKyW!C@c{{md1_5u~Y^V10#rBeQXjA#3LDp51LT1$==&>Zl^e{yYKOxv#Id zXC?BLF+F1>@Gv-ZQ?$qr(ZR$(2otA|UGyc#BmshTPg6=UB+^ivu*yal@v-jKuE(w@ z(Dp*!N1A;~a=lNSKg$!(f!)2rcai8lII9h)`BTghF)uJ7TQ2c3GK+w&YrUP zvq#O!6g)11i2Hc>Magv^k}lQ5-4z^@rqNyn7aeEgmD2J1He{K{qJm@_F3agv6w8Y9 zp5Ndbjna#w_@bPH+n0Dc(+>hAYZ!m`vgdXmJnWcWvv!y=M_vgWg?-&3>{dn0q{}E% zQzklP-`dWuumU0B7foG~>+f>9$fFn$JJwMk*#=ZEdm&%`vHc%T3V`jW2Xu1dzPD94 zhFO=^ykhMy8t-?d!$U^A>1|ofdIlPecMB=m`Z>Q2Utae1X3Oty(+;t+H+{! zSM|E^Et2|uwyAhUqBS?&0k=y9#RaC61qyE71jA0;tt!REke^tnz(LSkyq3trJS`bK zHx);4Qgi`nnDH+^(jBHFjxf#_zuLV>G^0!33Z7^>5w>1I`Hw2x+$QE~S#kF}KCdqN zk5&waOT}&JRo29y@AsDn*IEbvHH#x{;+Yy)>g#K<3R;mcsra>aWi`%V|C0xwa-XV& z<CGWlIBI=gyK**uh0(7{#`Wx!;I&zc@oLFv5zR0U^2J#tk7zuL6Z&Y@ z5%NfZ0PWr`hzi@t@8T%jB5HW#JkRU&0Y&8(Lph zR#_f?4o=8u`CV{IJ36582Jhmz)ltx6z%(XRZ*R_MzIc9qIx;~^r1NgJ!2zEi%kzlj zbh^9xD4ESyQK){e^=O-&{g3gRIgJLpzO{ra&`X->flMa@ICoFKCXB>>L`5ObxQ7 z5UVpI-2L;n`2B|l;ravQy!cjR{;ADpYK1m77Z5?o-MQ+NBC(@bZ@o?N?`tcM>MNo|CLLx! z6u~If7ZzQ%hqfzm`N-KPOiCU((V`nNU|9&h^5t9#R6}(|3}+OI8&avt$+Vr@X6}Pi zuftF-wsCN{+`LYWExqtJW8uiSzT8=2w5!pM%aT@JYzby!_k+#zP>k@mU)gqn0~|6R zOa0;UD*`{0^Zv@VUomp7s>?$uNW(sRA8@=Tx`N{8nsb|U?df8j7Z3sKI9;E zk*6av_xVUj3ed$AMgu7BPKMzN;vbX@#e{`hj#uvM3Zc>LOYCkMyU~^34-oj#M#mt( z@2Z@*xDKKIqU$MQ7pRb)?N)T`3V1z1Q9~Paf3wh{vMXJ-N_>Az>STB8!5nq-H@nD- z#KuQtz0&i_3(EJ$ZFjdA-HNdAhmRPNqy6UoMa>_EEzB6K>;FM5PiF~x9etB=JysFj zAJY+Xv!2?!dt0!b8b;^Z*I>6W;mcQU)X4o!DQJ6mBn6eWJGNqYuF?1eS14!kKD6Yx z@l+I+B*|TF;BQ&|64I6@%8RQ5I!DS^=6UVSu2|>f6;FaDQw~TGfidh!Wg7^t?wpXR{%@Ql^T^k)E*&o)kZ8O2M2t? z76z*Q!0<0$LS(CO*NvMXrSyN`deo&66m-c;o z-IX1aDYrcm(f-mJ!^U6=XHvG^ShHq5akJQAJ@+D2{9?RK(s;L+>bu8@lds#=vgp53 zH(o~^rsn53uN*JKu2y+xrMI($uQ0>lZEwq}eZ1RNb~0d%NiGI2{JV{RPb=ztuOso$okyF#K+k zQ98u%EJK?E#lfNbqNx@R^)ia5xLfLmx!eS$#;Ha>6jW!Pl9&RlzeE#6^Hxq$FL~=m zCxcz^aw1c!H>~lW7*|&5)yn$z<1xL3FQl=gx5bwSHNK;x`q%fmN!P$6v(A541@Y<6bQKlGE@C;;T;VAJvfm|Ir-B;E0?AIFKiy5K!Z;5kUQ1=lohZUNi??MLC zC&j-eFqXqjV2IppY&?IYdoRQ0n#O)kBk+>ZsP|w+Tjf~WTb4l& zzrErR>DRydeqC#KerQ=yY#cG|kU{K%_Oj_96PE|D>T-e`xq- zza`06G1$BpmT=>%XKeBV(kX4Avr7p8{N;M6HUCKbdG^>)*34tqZ$&&s=s7}S=Mp9* zvUzUc=iU|J1W_s`&7s~5YB~oyD3#3uP$rj zZ6abI=qpv5t<%|r?u)n?tHbM_1n%vI9Z=POaRJm0=&gQ>31JNa3~i1dh9TeZ^9wYs zhQp&hn53EDCm;@Ys>DfucW-6r=bSozK8{b5DdyTX)vd%XMv2-YWsORDa1qLnn<)x2 zudFI_xZLl8ap@|{buSB0mx}SzgXk-hv)Z6VVFz9B(kok9(ltR&KF=dr@sJ_Pl^;(r zXP<%qlXz2nmY1(*K-*I9$IWHVuiTs7A_h3<65zV7zRDU_N$>8?Z!*Lge#Y7y54TN- z{4=k%Fg&7vGj#7UjJ-OqnBDTO#ZLy(_=LN=qNVOq-<4Hmas--|IQMDa%)f-8Xc}}K zqwGV6qDd8mjUZEYc&)eG2<@|wz`@0){ZK#GO0-A#4dx33oCo^1O+lfb6ESsTQ}KE6 zRh9~Y>+i7%L=ASvG~5795z0gM^Q^SQ>b9yw3fFt8p3>+h47RI1vqQYLm*G{$#xZh{ zV)FB%c|TvATP)sW`W~d@?`)iDdA?}UMzyPzS@-QX?D&4O_;mc|T0Wb}cPEYHmmNfv ztv`{a9H>4W@0WE3GFT zUFMUU+(=0y{SXztoN1(rDan@EPv<8_%A%KS9f6m3Oup8v@Pa{QM7AD;T*D=gpfaOqAU0u@Wvdio`%ma^KnbQ6EqUA3+ruoJRlj9c`#XrgtT(^Zzzjc%^ zf%rYGV|X_s;bn^+(;(5AdM;b(nI)V#0xf|L1HFxv>VJ|01&-D^b6|Ip##340yoBbL zXZr_6vUHPU!UgEu`;_5FS+H@DVcmr$J2V#NuZksluX0%cDOq8?XY+467e$pWN0ImN z#!D$5-*hjv_$Hec_ccz++_j{FNy3|-%x!ke~&RQI1+LUi&ZPq;-3j}RNMPYZSh3`H--ZxO26|q@W-!?!tbTimxBDw3X?t`Ua zPTcDsSO5v^hi(ngT@`TJHjn3No#(SEF_vXakvptnVLbc5yduJR636Rk%)mfh40kH5 zoYf9`NWXk5)`+I$HrC5|$$fS2ax0#8WvM&g-%EVf99wnoKjX(y96xznxO6cHQMcPS zGkI}*Z-&3X;K$Fh(bA8fbR?Haa%ETU9bG0S^?tp%_LbR?_i{^Zj`luiW*}#U!FG$+ zbiUk%gW-<$jnWOKX9GVF<1#Mt6@@duWpC{{Z?uB{h@~$h;=}Df&5voqEIuC1q!!p@ z2^;j4&1X++1I3L}IXjF#AR+u_73Vvi$31pZA+2J!o5!m5K3i?GrplhBRGGd(q0maV zr>>V*6SqJo59P(hRnhHm%DjIZ*J%*c0k@&h+Ktr$2iYN=JDku-tI`iW1Xp5Lr5J~A z{o%n9Q`QdheK`zkZ@RB>3E;O#an50Ft$1&q%gNwu-|2+ks3B{RRBuIAEq_n;^?eeqJHtTR8y(|a_P+U+K0k2T%wKt; zIX1HH3KL>s*hp+yqxFp1`sU8x@0d*BAgH3cCmv-}N)q{Fm{D0!I;+S%&49|2ca~iI@2`^u&Y;i;!*ahAuh>-4)cBR%W zIE;+s4qb=P_lSRab+wcsOb=fWs6Yc9Ak2*2BzAWrui`UUBfU*9CloDSsE; zpJ@XW;RHI(8HoFNubN;wwsYwoLMF|)r$1anr667GkI#3zJD7=aUE{a4pktNtxWJ<- z7Y1?mk1HeE+Zw3a4&u_Zin7qoG2jZ`DjD1{e;-{L@6>EkXzPxh5vy3#bx&T}IDxuv~ zzALZR|KkX(^X_yV5xzA+GJkW!$uLlb zM+zz)P!Ik?)ysob5PDJMu=R5R@@y5;*Sc`eM>_{R=$E%`j)x)TEt#GH77rz z5jfuK4fppl+m+p?(G_SD<6Zc-AWD&pL$B6mdo{f5EA_nShwb%-qr-!@pELSs**UU= zR`X{kQ@xIJv}*j0&c#wJrHvNH;A<+AH!p628U@POsHki46oMKq$kLz=o86C*6_>Pv zy~m{rBg+l&n(vN%z*>+3uk2CT5(cQWlRVh3k^3zf$C7Q^YtPxn4{*Gw`C-CgZxfZU zF-~|3qd|1}U6FE)(qk~pX1-i_29DZ?G#%gb{Kep{{mi4;vFZ)y!Qk_KaxR~Z4V#4D zw}wh#^I{WQpfu47jBzy^DJCCLc<(B^P`9YuT!((uRs=JoWo(Jo^3->FZ7{iY>ruxX z7TcIi2ps;KrMPu(mfa!v-b{|tCCUAn@KEj7v=p=C_e+8sQ*=u97&qkz!1QlVLf+jM zc`FW)OnVX$Ub>ew??n~S54lNQW%Jm%ZzI&k`;IU5CXzpcUSI9|aE|9v_9wr$5^{FKT1n3ty zWVTpaAzzG4FnK_zEH(|Vx)XKyEc%)tD{SaYZKRk4hJSApWbgcx*xh!!p%|xCIl>;c z(!4g4eZupTewz0Ym!qdHf1QDQ+wHCk@I5u>D@G$6`V4Q0b`jEZq|0dmxywcts!>W z)kX8^+6Em8c6*4e7}sslW5Ki#r5Y~&r26dxFB3r?@8PWjWo}Ct-4={|Y`N71gHVFq zjQ#n$Me44Hah=EvbU6GN%vRZ4Z6+(DOm6>r`Y-E8(>TUzwF^*#3Out1119jubY8sAq#&rtY8s+_i{W0v@GB^!gLvmnp zHkfdHUz!4^Prci0Sr@jJ&Jc8xiShLu3Zq3+dppf^Y-ZJf(m$Lt?Jo#Fq&qkdc~p90 zC;I#>VvA^)0A>X{``g7_EL?X6mR(*3Ah^*4sKFt|cPXA!HyGkrRl&Zbf zcz)NyBade_!lR?Td4Ai?h1l$9c8S9ydv63ktvs*$GiMWOzJJyHxtC3x14G*`U5$xW zcFR`{D+=f2;YCBfyIf}SZjJT(=dYxqN8;{v)SNj4p{G%@*{I#Bmqy1v#|eU0dTsR1 zXLukx2*k^C1XtG6Q>mu)D=ymeuuP>>D;{|L*)!}R;>kTkyfE|7ueFx=D*DWYK(5{R zGLVPOoZjZHmpA_I%x~Xbw}|azv9tbez68b;Rp6rcchZ zC@o!1sPufjx+syAdq15dV8d2Flcg|jvvAw;Q>LsSw{tA`St(%Bz)U~hPBF@2Zg?2- z3ucClm-z|~oC@`*$8INiXfKr;`iSZ8v3>YZA?O1h4`v7dzxnC0^N?J#eb%Q}_@9?E zs%eB1T-PoSqbGPfCn(%%IOk%%^*Xd)nHv-=(yM_wEp<@m@1#B*?ItGl5FRZwbGYtW zt(4EYY&{3ngmBAxc4qOVl9}aSfv4-q5V$oRAdvcH-z80vFKqu{)TDazQ`xGj zC_mkoBQ~%-a_`Q8Mk6PC+<*-dkeHGFR{u$pLAIR2;)mmiIyz2e^0kt34{nX&Xeb-8 zuXih7sSz|<{gb|J$Qbi(%x8!w5f7_~X8xBl5kuD*V0GEjWSEp6$DD-1+~w5mZS!C@ zIZ;7P>kz#nX}OxL2*2QGc2=~XHtcEy?rP^NpDw04oW0YuAILuq4x49r)FXa3_!Mbn zCsJ+OVawvT6=aHVBcVcVZFc!aCi(ghg4{em2Oys)k}qtHEX@Ef&lmbl;H!U2k#TQP zCDlfTol_q=EAA|_-h4FIY&lTQ@k@S>-oW+IKQ0k&+{<9T8siRuCJ^`|E^)5NNyMxB zTLu=Xp+|DRra>~CguCB17IN-975rONSfTw(6D=MRRjA$g{AJ_{^ivVr==L|O>@dZj zBc#;7Wj*BeZaRdnPKi-#>zaY|K2Qj1HDaOatvat5PXTnar>8uMuNbGOT(?!jNpGM3 ztYo_fN57f!6~Etw^j2&NBSHB(z5Az*4secxo#@x`pLL@4W1{-Fki8frIzik z?Zq>@WfK>l&Ow$>E_hpxcy%|3$AG{64{4QlbHc}G>Jp#XJlKJCqL!_f*`KV9I!_t! zrdyZ?%=PA{Hw}iFgE?$x!eYN3POiD`5;$J(t=ww`H=y&^0^8=p$JAk<^CVwO1; zn@LX&?hK;G8L)gFtiMjHc|Yg!jDm>fHEmX=`HsbM(Rj=4x~d3Ydp|$D`el9Pa&%)*QNd!7?Nm+7_+lUNZl*~{UL76`I1tHMhm^zV(|u1d|GC!GXa+fQjk&DWllX!V@% z-wwarI<{!jed*x>Z<3vM5KhzZJ42GCXo0k)M;osSO>UMjUl|~7e>^&F%bo^(>OSDf zA2(tc_fZ1=Lb1`X@N%3+ej=hICkOfSr?+We9Z=?!?cJg*cN<{wc-~?bveoWHTJbFvbR*Y&9>|2AU3RWiLpYz z)jsTYFuYUUX?}TiJ+ugTu@Fvz<=Xz?NH7&54%>q5+HqW30~g$!^!i($U)@ibWD}XO zTMV%5OiYo{6i=;PM`xATCNVSfDLkuY@gW-LWMa@0_PcR2hpBSty(Ia-x|k{FVRd=$ z(K+gAnySsRNfRTleNLcuwB-5^lLiVgm5LBX5ZuCxdUO@s;*Z=F3WrU(p6$B3|EorB z&r@WFz|&yXst82YO)a<3t>=}yuB2Pl1KH&RN+-d&! z7<3~Qk0c{T_b)D5(Z4Qhn}f6-?jrMr!h@!cD~HKPFT=x+U6EcBH$ZQn>a&YoHgG*DH??q2|l-a;qOns&a%IJM2~ke{8Ow}Zxh787@HCI)1U$^K0Auqt{T=IK=Psq(D$7I%nX@d>HXi=3hhTjG@ za=NFNwl=?s6C^9{<-nORyBVt>k+Tl!LWT%0!c;N4s+QuU#A-IKJ*BdfkJN_mmO9ws zR=7)~q`JGICAMUI^;sx{YM8M1y=-zTP!{6*h5rKSib$KKzIFZg<^unN*CnMGqv3qj zyoi#1u}Di4m5ZY6X5W;Xjv{vR6NQ#Gq*7$6&#L0De;Yl@)-gu z)i|8mXyZ}m(w^YPs2Ac!c5u6Qs7#hq_>arbBFU+(mzUeMP7~WiJ%o$UlaKsd5a)QT zGK)5|eBpG+z=Wn$B(_PR-UWUUmcoQvR!ayme%*ATn=PLyILcCY`}3oe4{pDc9v3=8 zYZq77SoToZ+h;!!7&kzC#}tW&H=a%YLGJLCy+Y&y(D~2hqXwe>L1Gsn2MN>tfztK? ziw%YrcML~=sfnIe5d1bR@_0VBUX)Q|_z!mvPBv|+(ZtK0GoAACmh8+HUu1ak=ls~n zrXoaS9AYIxn`KbEZ;)Hitn0Q<-z~|w(=vlmg?dtd<0xz~+0y;kV8+-3mmaPkPb1*r zLr7LF+b?=^A|)-9ym%HT&fcsD!YSnT<+mqs$a&WA zf3f$TQB8JhyJ!#<3&N{Nk*d<93kXODY0`UdDk2@EO9@dC5fG3ry-9CULkB@>klsUw z0HFj3C4@k-pS)|WJ@y*sJLfxVj6KHwv!6c>hw;hGocFx@eO*#9$bnyA&Kv$*0(WbC z1x#C5d%*A9Fmp_>Iy)Q%#PiLk=!54PX?I5}B7|JK=DfRqJum}Wa+bo0i3X0(^@~%< zp{|bnQd*MVa-0#%uXP-UcD}&wJuY0))9A|*;}TJOIjZ`Mf?QX(?^%&VRp75C1d~Rr zn(Y^OT;bmGYLH(6N)5vdblE=oVt(fH(Xl;VCZn4)lW%$?`)g!c`0Ktd$N<=^UwC)8vP&do$<*a{L9<=%I`8wp-XWB#ytL-j5g8@ zs*QJB9NP=`hi|gCZ;5EsE`BM3O^YkB#FM9u*)SFUrd70GmK`0; zKKebW+s6QQWosz+5{C>`d6@MP7OPe}+XVYk`9X#uCxNz{L{v7nkB#6A)Zltdbz`JRQNVxs(z^Z^Kf!Dsfq6umIhFUw@R;s?>8*RBK_`zPhsSFT=+NTB z+*;%Jkwv;C#yt+72U>G;&HBS;YT$oKah#84?>V-?GyMIZugp>|EasC#){-CF?$9o7 zDw8L`x>S6eXSP=6?VNvmu`KKEzIqYT=wk8?J|APgLPp6=7%{lvZs2`(30F*x5! znp7Xnd#kbDrAG-)k#U_fu+i_gON8o<$a=?dN%y5(owMRkx}2dlnO3=rTNN-Z7}w9= zy5i-9X1My2aSx4ALkmh%RwX!Y(SN0`zxGwFdGvlI^wziB7b#l&PfA2QGLoMvjG2AM}Vr~(gwA*xfu+jPBnFC_+FD{#@aDmwEG>5+UO1Bw!A2*gK*g0LLJr8J2Z#>`c-i(s&8edvpflk;L{Enghl+vGNFjl{} zBitmb3P-6MsHZ@wPDpbz>Elnf&jgYgk$+^Z`;hf!d2y@YLS>1hY>FXv}deldL~U?R`S16jp(;?0pP& zdN^hts=fCT0dJZ$La}F(zDQ06F)BI>`vv^ zudTl9YVBTKoGgbT)IZFfw&e5M>G52+re5eReht=zVQ!H_14(T)BC$@stsW3kyQ(6vblJHXZ~sFgpt|8uo#Hf2KfCx7-9p?6z&ZL7>n!tqyVOt(y24-|g8LDK#k zWTjl1OtT=VBAl|`W}P!T-y7D7-Mk>}ERYiZWqb{M9^Noi`g5n<_Z?PSG5Izvb?(;b z=uacGxoDD2nNYO5(YVO8@$#t8(zN+`g2$`{gTU5d+;CDT;gHq#k3jx;gPzS~dDI+r z1yxY2Z#3wS5v+n$68rTBa>c`z@Vn@oY*CP-#)M)g96OTuU|&}LZP2!F|bmboLN>E|K_(8vn2Y9x-3v>-4YPAu^y*5 zM1VeI7f-Xte9*p?Ku#z^@v)pzjgZe(ua-E7mo}d@`*Z5wJ+qJbCHmO%ISc@ zo@16X6aB*~KGt`LtXkIq`TbLp1-&$jobgi(^SD`*)yMw4A_s&X=Hl@83eRBBSr%>^8!k^bBNl=aT zmv7&hRZ91LF;64D>4QYfKj3}tL{XVSv05-xV?lb}ns>L@QS6m{69%%F^3?uoM4!~P z88eC)a^+k-eT-p>Bc}b^wpu`(Oo@|<#Xbm1!<-YSBwCDFvKb)!QbKp*l zbj+_TFvzGe|AQg%M2AKr8Nv$odMQmA3U766TI3YuAoGCp;BCgjjAKd-dZ zeplx4O4J9^XHw(J5Edl^gEe|pk#|0XL!0VtcTM*M&dIzrM_{h@!OBD9qN_%8TB<@; zr>^osZ&J-dv{Qs0DwY6)*%f9j#v*U){QSA+7Yr8_lNPu7(6yoQ3{8%mszVuI#YVcn znEAu!Z}pAL6f?^t4yE=>|JL?0*!Qsam(=dMCC&<|joni7YnRT6(?dA@ShQZy*b)313Ly_IJnwb5e<@R2l9* zGq;qVP@~06O*&&_;`sFMZLiqeNw{!h_*Utn`MSc$xi0srrnSXxbF*mSp&WbF zpW6m52)=tmJDQ^P6p0*(*}4_6dg;kBZBpW*DQgaM)2%ekSp~HA6~116 zivHTUZ}Me1#!UAfgVhRU-l(prX)h+fEQ{AO8^_(OBhw5V3~Z=9r|$cCfH2>rQ06zu z*tsnTevN$!Ic(pFH!R5we)BnLaaBT+pF?-d4t+nmaH2@f7psua=&BHEq1*-xPwOGHFm<6ci}YBYNIH@H&$t(=_d@Fm3MEq9iN8k%GSHjanzLLn!Iw92Yw$NNXFd7>Gj^%%N2%~U$yS@s{=?TApC&c59k z+*gu|t5*vLqeHZgn8bZd6cr1nD;AQoILs=t8?3T;2P?deyYaw^FCJ0g1%2{IQm@^M~xwXXvP1xcq{Qc zL_B_Si%OU>&B9`pBCq&2^g4rAxIArzJfb&6QAJ_7;8<2#7jdf>4%#>{3g^~xv24Dl z!YuaXY?x{8j<=52wVP$4)QJa*&*_0^w&|BMBPIOFi9Dz^%e3wwwk0;zlY0NRg}y; zv-_~W~`AQ!Ey&gb8n*5FEY`o}^2U)m237MsHslM8Q= z_1n=KpB=>s6E<}wLTI_#*b01t0}KOAvvgoAKUUH%sUH~4IPRaC3O`gP-!J#InCMa2 z9lb(MZ-JF%#E$Wh?ZitV(U4RkY8x=jy_Iw0E1ejBdqr)8$5-*~!DxyUw8lHEVa(?x zRID;jJQFLkpG$EXc_gP1;`-2w7|R_NQG;@D5owLeLt#YoOAT>9vxQFE_>v#vnu8eEjNYNPnQSLoLEUmB0yVL*Gyj+%w!Gl7`F+?mXC;!sL!0sInC%Artvr*Wh2 z9>VPnI9S9BCG_uyMJO30sMxnXcqaMSV$fg|x#{+*$~=;8hqG#E?NNewSaPiTH}*pH ztGQ|2h-bNeJI=r`dJ?ZWRl%(Q?wpEfqXD|iGrU-)473FI<%{G;O6Ip=?=Hrc(hSve zG3#{<7I2LYJ^9&~@0v~zF$~XoG`3tCjEstCIJnF?Rk@ic9+RXI zW9uNY{)XX#%;H?N#KM3hxLBng9^>s#xGiSL&0As?5}7GvgcnRCpvWCmRy+`AhxZix z{No3ID=U{rsTtj(JNyDGPl(|$W($v-kuDf$&5Kfh$sRW%wPnHuA-&V`I(0nYl`l(| zkEgD*rrk9cCQ-yaRbMGbQ-hi}=R5LXskRyBbg6e$euFMth-kNU*WT+lGVh=`ZPTPO z(v#^qA)jKk*=+kOCAqoFaG&Hn%cgrQ@n*{%aSlxy?@EIo7~3(^-yh(l<$thhbyGJL zvRBM3Y_+Ak(AT!bQ;L{yYSaiivsD#(v#}M=(IO-CkMaIssriNB>zsujNc=mjL7#`9&qP6{>!3jmCB`^a zOVRBM*EQxtz2ASS&kVD_K35-;PAr9|yBHi9g?+83x`*m^j(hlAce_GfqM8+*IuSOD zw|S$<ZJ2YZa5G{>Ye7Z**3>FrL5twiw~s;F(CtXdynRul}IDz%%b z`QxwPjDFu@60Gn4_AUgylEm5#j3TITA~nP7a)S*XO1f(2a66x^1nqKY zZ!LS^l~uaGt{LR2LhR>1LLtU|R~)sWlQKa}%8FmFy^T95xA?0T@%&xZ#LePJcPH6X zOi&A!e+KPlQdEjvfUV>1Kq?VGuF)IA6m8WK%+#zd@E@5Zu--oO8xHt%Zp(qpx5170 zHcb$S|Gz0QcC6D0-5GoYuPgCqq37Zh)I?X3KTo^~E@q%6{qZqQ<&Gvk`xo=1^@js5 zi;_YhoAg=*ZAM#^28*;Bv3ke@<8Jw(68`+JEDnu@LzUB%cZLc zVcfzNGT8;F3wBR!?er>vkIIeZ{sjV+c&WlgUCzC?CtaFO>>NK!J>70d^>?J297<1p z(xOc`(GqbpPOBqSO#jeGml5VWHZYqlqEfx?FtflaYbIq^NW{c#zeOC@NQr0rohR<^ z@M--7!jC=W7id`CtkYDzLcy@n0__|b?W*3`B2`TR9~!zAqQQm|5T#&5m$;W#kW6uUk)IM>%+pmEP;!ZR5LoY-30ylnUyt-Iqv952EBfe2N z=Mpe1Pt9V99!Qnt*sP+`+PuRNZM8Yo5E)X4h;swn z7C87VHg+(MtaU|hj*FCO2No}9Pdb48T_qIpOT z7)RSqV3qY0!2Fz!@H~DG5MuQ95#E2VEEm$ia(Q-$kbM zN!jK=m&v-lM7F0CH=Cviu`X3&tuii%3}?^BR>bB+{wk}P3h%p450kvoPZrEsFN#P3 zkdL`X#KM96Yy^7fBgn}A{S$o)Muc_b*YJJoQs;fp=^0 z2F_{22|#Pg32Je%QVNvxdUs$vqWl5}jVWoPu=>>+^~0LDjl_N~qlDjX7Y@-U3y{b| z>-~iwl{OMzhiLxOM}19;JE9a4hyG-d5K2O$vVg)mbxVi@hS2 zKO6&j_sCKfIb%%bK-3AYL=Z|7#Psq4CXv$JSsy)iNj;dK2Ugt^jPdcgEy>GdAte&! z50($Jw+R{#8innJ+U^M~n-N#k9S*EW5(v|Bi?SPDyU{#orK#|F6v)mq5ec|EURA#r`Wz2nZkW{3lTG#9jm*aODFL zfx{a9DIGHl-h?!1UoBuQ!yOA&d0qyRPisdT$?Bnw$ih3I_bJ3IzOu*Be3Hj`4ZjKi z`^N@hH#T_{Pk6m`NRiKeR{!qk#^&ZuAq@!R^!ME7hw)GKV|@SsZ`9Y1XBVX%RgnPpiu8+pJBh?73*X*@h|k3dLv*g4D1Bm(zBWHy`+aCNEPeheN?SZ5KApd!Uu1KQbT%tXhXhm) z*dY*Y-nwl+gctTpelMW=U%3D)d<)zsmR4&cElfR%5`EKob(b^KUP9ZXU=uCxhoTC5QEjm;I*@(S~CKS8b|yUKGTP|6(RJSLcXzekAXOvnEYkS^n% z2EZU2b~-MBD}PlI{bZgu5_=Ww z8Ut({9g;?piG1%857@fFbw^#DC zo&*G(|641inBSc-9MwGAYIw|&2S6ErBCm}o-N{KOT#81ngE+& zGs$oRab+lxnxtOwpDUFDa6%KWsD$X@o5tDPdsso5QGrWUbLAF@C3}aM!4x3CX9Qq! zh_~gxG?K)B_%8vB-hXCAdLHXZA^jUWD8-_7GZgE#- zBxdGY&R@Fvt7R;_ZZIx*w*2G3WxMQ-@!uCFDH&P}}!FWQz)lua}w}KW^;{ zjwImDHrV2T=b5gBN#VXD%iX12#CGoOb@MOWe=mc0&#pd1>PKz(-Aa?f=3nsSm=QTgeEFsE^s6E;sVzRJUSRs( zj4wf$2HR<(xG2Cl#2Zc}FhzGP-eiE_6VZwxN4;)Q%> z;qB~<6f}S6t5@htS1HLoVBz@FIBTH+a4Y_8Kpw#yk6)&P{d57uYq*)%&O`DX*#v>7 zvww$;eyiF8(@ddlG9PUsWkFpH)iolD$@%5j2EI!I@xM1~g9aj-Gf3~^yvyG7J zcD7vB=A!M6HezEM4Zu3CEs&C7cDxLeSOAm##0)Um_8`B$9u0Z0#G5zQZPxMM6-V&D zS}j|mx^8faLAPG&#RhDPq|Y{TA!^cM3f}tq>W#C4N@gh_N6D=nf1sb=6>EoS(vVP| z88vvBOa#5K-cy1@IgY_U-K2fx7CvBa`AJp?d-dtt6fS)LW z3o;TD)IzXoOXV01qr7dzen#xWxqy==)(xe!t-*T%28dmC;ta;0+eC5ssJB`!#G)s% z09MvQt+M5@u`?}{U-Q2&r!Nh1x^#AxE9m^7r;VBJyRXUKqyoxw!goQ0qwDt%r$#M` zQIh}{dFen1mQPd=TF_9=gTU7Ys_I4eVeEYfZhfwCsj1I4536oayILXC{V~hYvg-kS zZ?b@qvHD*-S3p@LMS+suj&RXO&wp$*++w7AQTD3j2!(CWrS$5*z?M{q+4%#wqCOL2 znyL*rD6`PjPq*sM0-qr{IA7?aQEZ+xNoa~5j+t==}8Yht~Dv_<6UKvvW-keJ=#F8b*s0cXfv#u9_XMk?8XE zEdI9*cfvQJ!*ERwr+_j)8vDF_crRH?`fStGUwMdL@Q}hnILP-fJ=SM$aNMi0$CzF3 z6PJK3PGI|w_hQF0r2&D4b@to!;N@t-}l35_1$LSn0oLj`QaVDQdnnhbe#1n*VzdPg`;?a7xZi|J9LzDsj}o z4*;f<3ywucxo96WI(3Ac@+i8m5Z3wT<2LR-KFvm}I~|9%;ykc|f0jb?qsT{}&(EF+ zHa6T7PO!4%l#*#EP=4OGy#aP}(c5f%^FdU2eHZVl>J@9DK%=$0=j~bCXq6fGRDbL+ zBV)lsG?DaY-ld(_tv)kcz8JS{O%9+99F%qMpO}~TZEbCj9V*U$YQ!75wf*P}L7YDX zf3ps7{}b325NEsmp|x|Z4YF8`sFP9X61k7yu)A(;jVWn8q6L)}Jq+N5(6t+Sk;G6$+OAgcGqY^^`gRSsz(_IVuM|S}xoy}Vz z^tIK^-;9GEQLP8327^HHz|2FtAN9tU#A@X-Gn+@E0QRR|_}8nN>XG&PmKhq}%W!EB z2)K!ZhxW)73Hvx`;&ord z%4+|>eqwf>$A52fO}GGX#FA+NcTVqN!fV>KA8F#pxD39sdBkdh9~%s>-{ak-lt=;Q zXPg9qghBx5@+IWX=r6dejIg1VOwf9~*NJn*`zQ~kF4%;yI4e7!u%_E1UJ*cQ>B-1K zf|YkmU5c)6OaC4m9P~o%w8pP;R*msFN!HzXn+HHWCjcg9>5eq11cCRi*y>=23Grf1b zJbYdPXao7}V>5aB+jT)ir1lrLfa7;$%T(-#9CdvjZ`Np_w=no$LX!Is^8!7IVx}~+ zrgx`Je&UkFfbM)lJelBb)%h7t9Xu-_=EL#s?!bJ)e-;M;jtcQf{a;YHiGTl3LaG19 zD}aL@w}o_!Oh6Rb^E1_+s}Bl{-vrq+TBM8o3UUd)xP)SnXtsN62Ow4^q_-Bz0TYW{ zJUk`Z0fPsbNV^ZtyUb%9K_!fyzNdKuBeGE>2VsA}qwoI3@@Hfk(e| z{55NcX*u~3xC8`t^h7^JS=J4Ap{QI8c-7Ce+Rz`=0XT-g`z%hnSS;&ZYl+^r%v;^d zKz0ZCczYuY6mK-f{s%N{-$z#NCWhw)fhLJF0Vcjr#C1V(RPpgaY9LT4fQkOzJ1k8e z;3Rk&Nb(OnAj|BL`=G4r{UeB*p!XvGn@|ko6wdZa2>y?E%C~j{Xi8hF2}|6OgWTTZ zWD)+}n-&ct6Q)#zMe7n@!0;NYJ^-8#Qsg~Gp)5~Kv@u_$)EsobXDG;IeQoo!D3dV4SJoFHvhz&##n$q z05W4735dE}@I6`HK*+PXjMdOR0Iefm8jhd=f)eco3^cROwZ`kaSC4(ef|F`n)&2*l z^FrG;5O$)>k^qcG8(-NM0&xmI#Tgcbegs(iy&QzB0|pdiPt-vmdgbSGO}D{r87Irz zV!qqQ6+IaYk{f#-Hp*I)sCtE5H)ak2Np7Y+CZY2N0lY0zASnVD@+r!1HMwWcZyzQ9 z5-KH){2=xxwO+!>2i&l=YDmC(+kFMr{db44T<5#(m;$YhH<6pZhu?-5obYosvde{e z7kO7$@-|*;wFNkb8F);f5%2t#RbZl} z4y*HLxrPyARYNB9p2t{WnIKQQIe9<7 zv+_pf#nuSm?J*}zLm84{>ywf3y)lZr`YXGKijf5+a_wa?%S4U*9IU* z_2;d^adWR{`X)&O)PCpzUSBy8nBe{A+Xs+p-ka&OHBENIE{PxhSd}w-w3dCp?GH$` zpS>mGiuiC8_;Bx_KugU|bCA0>wfZDCS-^2(5M8W-YMvTxfNY==L$bBC2YUPN0M5+T zKeou@OM0M+A|^{~9`1YOW+ATPj271kAmUwZ5(!;L}sf$j85v-6nQIMsVamkOb$1Uz?n((f9!sYH61 zN7tNNLXv>PT_Xt-u!)@{$by9EhCcbqjWnKgng!P$$$AK7znam}JO6XWBDy)+p;8-b0Me!5%kHO_{%KSOUEqL`{P;gD#XRXtUoP`UL?;m7T_Wp50aEaHYS9vI z)T$kw{0Nk#>i1@6?Y&X!zdVR1z}orqNQXapQP|63qkw)v9a3WVPw&DY9w*MC%_3rC z1<*Zy=?mq;N;Vm~1$7+U06D(=|4hCz2v@@Z^jukIEZ+k@_6L08Z8`$P)S&m|WnAqo zw2Sb1;%(_*$q0rAe}lqzS2_O|emOAa3mVsyDQniXO9XDC{Uh>NKt}#kv~A-5c=7*_ z2NZ~VKy}2#B=Gzn!UzIRu07>whnxhY8COvNC?R6v7qtBpOw{0S00{U0gKHz|65#pI zQh>z&@o(_xOG0V=*$As{XHAVQTVGTpH&Eul6_(g0p3KM$w5)gvyx1SlZ3phD#b zfQxjOhPoApopV@acAd&E%j@!*eBy@us0*DJ{IQtDooBMAtf0G@sp-t}X)bl-y=1%A$aDN&^q}*|$_ggI@}t7e?(SkT zM&4rOAiP_J<@@P;W9C``&i2slHmmY27Dl5=$4Q1E#P*HiwmQfVw*61nL>2FzT97aL zV@^m%L*Ah}Au!it$oCDwItv2lPTjt7oGfnY5_rzU#0VUkoc`ZF;Tq$+?e+(I1GuRI zw{!J^sSTR7{z!l?gN=>T)FU^ITH&LF(NUXi`%QM(_xXW?WumWOZvd$UKIjX#jE$gNVKiire3*B1y5h`)#nKJF)PaD*&aFLErEzBY`TnZgIuw1B zNIUr2F6cN~n}9p$2saeA&fJCf7kJn;kmL8*t=HEObtjGq$>|d0@ceE7@^px@qi z6P-8_dcn226Os>uTZtnOml_vk|YD}`O-{IWH^AFNEBdK`b zT4A3dI|8;UM`^GzF@&sRuVv#TCec=0wG}_E9`ZRSk-L`NaL~GLANA7r$|(Sj5SJM+ zH>x?fA$hX5Ku5K^yL^nM8j^U#l>ZeAM-B+H@Sc_?6inTWzGzu7T}#=AIvGp+zLoZnE45 z`Lf;!D_Cv;)iVpyBpI*>fCRU?}YgUprJ2kzs|(V7e5{4K-=`4b{g{ zU={?6Jz$AU5F=h5>i#5VF}o>S*)k0c8Nq`EvH&j%&8Nw)g_3!htlsV1Q^`|MUUz7C z!z0Vc5af0q_FKg|&DNBsVED`J+@Kl8W7Ih%0l!I==nnIpm$1O=BWwXa4`X+3R>L4G zzXx219~SFnRYv?^${oMf$=&5Geu(^i+H$}?%jFV@3AXW2_Y2H+&>h{jEjn6J(PHhs*s}4QR!Gn96{Mi1c zaB2UybA>oDd;?ZimKS2%y#rve)!DlTZCFZv>V*WnAXfF;2SLuJ~Lie z=DTo{NqJXVW-YgcJmNM!G&)&hJfuTTW%^gzG%azLXyp~mLpG$*&(zMiG95|ks}^77 zq^G5=t<(VJ7m?Gp^Wrd$grQU5L)FP_I2_C-gC1?rbGJ*rH)v`iLut}+Q zpAxYD*N7>-)=L+c{JoK_tUlW3eTp`!mBmu={e4Ch$=$D3KT;EtMf@5WuM{*t*5{{( z8kCfwepe)D^C@KU|?9Q7S870PMa6{iUHkr@E)1l-Hg0D>wiQ2Rf-Mpc` z@%V~F0ep{VMHqT5@X5g`aQW`&Yn|8nPDxf1hUSk0OQn4tTH%{C;OJ%Jld!+3fZ8=c@RlCLD{ZYFl_ex!~d93war ziwby|Uir8svDzv__1|Aq1Gp3z6;D5=#HJDYO7RS)THSl>afC`-=Xe1^f#kFVlIe7l7~mE zBxl}mn_FcrTyUD&tk_)U?g0o%%+5X_W-;I=;HD@5B1r}xqqQs9OPTro>2a>oVceLO z>6?~Vs+}$Chu{`4o&h_rkjwJTy!EW7z>vG$WB!=sPzDH~x|NK5&J|aH`{D0Bd6*t7 zVKn#gxp5)x3}@Tb)itEy_sVW314wwiBn>rK*jg5(^lJ?0Pi|hRQ`I#Wb1-u}!))r0 za9SJxg@sEr^zs(01WBKj;=sY7CAb|2?N&)bC!ZvNylpose3*a3G4I(y7j%(P!e?zr z8e+Kf@^lFHlSk+^tK zngKxZXO>r7zw6?z+Q*RD%tK}@9@XC`da{}QDNa>D>cs24HG`)5#uiTM-Ok&A@?A(1 zM&55XdsSr(fqG!6pwMW9O7oYn)G9Fdab*~;9$Le3OvB-v=@Jd^CLp_?=2>kBljWN5 z@Qfx(lzAn8HxpJ; zFTHnB*HHIxDXQc(Ze@S>?{qT9Q@?}i+ zCXgMV2ICLrw)3kw{B{=$25K}S4E4+!H-_=`pKLhw_0e8fi54pqp?gfAuXcqc$n+4# z(&pC?upso}?X;!>BNJmJdzZ@U>Iq|b0?)wh&d$Bo3w}RJz^-B4)-WEKO|C7LC<`q6 zMdj*{wW!J;zx9N#17j87Bdy&E!mb@bJF5RI=b3s9-gQ1&*Icx(Yq^I*qtfdenQ zadW;_MKizzd$?8G=Jt&?BlW}}0a>L8biuItcCr5kITOh;sepPt@GDKPOq)2ztGDKS z0Q{hSh@?5sO;{y%$286?uZ}m9N3y53_8&x?9K={POZnFKAf;O)Qyn9}JU4(^_Q*F%SiBF={04lxm@>Hk zlHnO3?CAg;DPZ$&jhV&;zAc~gxDx6Ms&@qpQ3`p0WB^tJNbk|#!Um{fmxxL8rT13= zGNq#yykXFyfSVT3^Gu%#n8jI`%0`JyhqVz9Jpv;X0L7?G(zn{5ZrNgYZxC4@#Wu~S zr@%6O-W~toj8rZ_8{-p_68P?Zeg$OxpU{84lM8(NJCiXI#(#W*LqR6V!$5*g{VUMV za;?`|tv}Q@00)!IWTPXk{{SqH-bz~Al^?_S997{w^045(3b4)(jFzqlv|HyxPSScJ zT~&GJ?9dx->jy?-_a&5Wb~RL0J-qsiv^~=3HSZl;+i)5_ZZk&-uc;uC$MUr8#{g2z zaQt@_d7k(yAy)uyP6Y%lbuZcL6`p_4!-mC_-15oc6&3(?#P!?2oJPRQsT@5lEhyzO zk(jPX4VfjAn}x6?3#l^T?gNH60V2>O^Ka&k+}=8m9L064En2U%?1n3;K^nsdTIVtVEn?q}Fh}5F)9GI`! z^*S==;f)j{#$hkWm*^|UXa$qV-#g`$mX>Dh8k+ShCQld|C8_@y1=P4JJv6a65%@JO zcke}@kFX~`9YB`G!QtD%kjNEFVBt=m01ihphkX#QV{bbE^v{>5w!6D4UBk@H2~F)KtVV+)nk26@}8|5wo9_ zr(!*>17~)dxTr$;@b(;L(rf`|Th|!v`N4#Q^aSmd!9GZW;S4n>i^k)1Ei{QxWB-6) z>&6L*v^VDaI(fKd-QNbHe-HvV<|;BS#a#9MoXXSm@59#j% z}LQ zRt@v6S*R>S&we^O<-O4L?1T23(spK$Jh43f8Z$}uY-*ycyyCv?OA73N51X-ua6XZeX^j9+&E~i5HI6$x-!f=&gnQi5dep2w*AB9v+z7_3)9t%thFY$(2w{@V_QZMUXH(1 zT1WMjul*>H;WQCR_m~h`RY%BzhR?@0tz5)+WLbn)5|nDDDg@~KEp+`y$@b52}X}m_vG~58y=uN$k?WYFZA$N{w89!;Pj~- z#LoS^XEIJ5%(vyIDNx`HN=cT;4=#7;9S~7(du;=n0t!z6V=jT5m%nW*;L1xnP)ecy zpKF$Tn>_rS7nkH#flAlg3k!Kb79>d{N*K>Ac7H?ya)WG~yYFv0Vr=o|45-9q9ROOn zzP#M~YB`vb8g_ggnifZ5zp&L>eH%$DR}G{+hU+a{uhOim7CSZ%C;b`%>C8-!f1=6h zzMfgZdvU4#7>IG+woF)Erbz-0?~kB~#mJH!`tkeqwW^1k)QZ;b)W{?vyDm^kttTnx zAdR3Ga@1taQIfvVVI(;fl}5hQ?bv=~;;ToU#N-a}8q;$EBBWfL_$}~C-ctB2p2P~F zUmjamvs6nq@_FkFDIow@XeT}#L5ov^4fm1Ep%U`{AAklSn_p=C|ibX4g zZ8zwxCSb?_7Us+kN@c%l2S2_&ZZTAO46tZh*w!_tZ1Mp3;q=nLmoXr@g?|?MlGhd5 z(UrGCK=$2Rl;rG-A@G&dz;;xYd#VpBE0(8SIsLMuBS= zMO;sb_SJH2C@giiVYZJY24D*JHg(6W7~P@=3ML?WAejf)Av|!R1*7I|u7=R!?aMKr z$g|uVs{+m86buq$u|SE7NJ$&11bkWjK#lXreNR)7Q!WnB6Xv8;UEn1t4~Z{Xs}lNI zpJoDIBCg{DPegu_uL?V`if%x4X1NzZuF@p=jkq0`mA^0t*^icUL|Of+13FYA|CSfe zE5`d)GfHg<(6Z|XbaG=Jd_tTfz(E7TGW^`qh^zh;73>*lzR}<^Xu6a~2IR4JdDwmi zNN$#vug}4rWr>Gd5ZZ)iOeIfHQg7G3#vx5YvE$%e_RNrQ4KJ`R5}HoLck&Om@CE zl^NO9MJamj2-ro8k@Ps}Gs?PmXwn?(*UAaLJC(-ZxOMk*pBg zx2My(eh&l$Dzu}mOvS~|9)fjsM`o(+YRwKAn%&lFg+%#1MfGL{ks@r}~z-ql$`(;zAY#g^3#1c}t|93$5IVhQVAe z;N&RTLhy?KEY~xMPo<{^lC}M+u8Z}yp15|OwjO79PjAf0QLMSY&n^&NwATM%Lnmbh zgr4vYZ?CSb>Wz(=)%?UbAXbqmT|{kPj;I^G=$fc33kxSFC+f!J50Q6z#I4~bZq3)v z;lB)h?5St!M`B6g;Vf-#Q*|yrR(0pY3kz0S2@q%a*2>C5&c-gDM6*Wk8(Y(Yg~1kZ zFJI4!X6ynfPC?SwFp>7Lll$8A$S}X9c0L~I*%;CCi?d^imn zmq6(Ka1P~bgSj7-zhs>~Ju~)NXy#Lw4kVmN7UOxRilIJWY>Fi%(7$DQv@*rS}cQuX-hErI$40TcvS8SUKC^=8GeN=vqSo7*}=>(hCCOWkxT90Adxae;7zlKz(3zB*^_iPW-kugBvO!7fI+q8s6>XeM*D7zNMecMB{ z*5!LCqM{0_g}}|`Oj7>uI>40QN#E9%uv0RMv(dW2$u1iO&`65^(#m|QWHtEIbGCDS zULN^YN^p7epgtTkItvRJ4Ti+AmY-|kjy79t_V~q%`YV=G5$e3!HDJtO^+rFCIFfbP z8Bt)Gz0wzBRsN3bw6;=;c#q8EeIKWbba8gGNcjIyFZd?wi)XKhZM$uPfma9@NYyzJ zn2~d)*n*?&JzcAegV`*+y0iuH~-t65ccC8#LlYXElzNm32-%e>KSPLiWvyCq&rg z#E0w9C*{oVdElo#`Awhak;r9T{ZLJFF&JbmK$`CJfyJ-iG3bYa!1R!+yWYu+nA zuT=8qtE^F$z}u1f-rcLY^3yW_L8k?GLSuuUl+a5(EBRJiPl&Z_rjZO9BJbgx2n`p! zTkAsgf|tLpluz2JSf~&_(S@j1$~3=$44_QZZZb5=7vOEaNQ7T@zSBSpkh=2@gHl8} z0_)_>>w50qT?+{Cr@j}lwzb)|4zBTBL>2yFK!ohfrS(fUg?J@ymrzpzsgO(Dx9*gO zHCWA#NSzty>D3-nKE3N(KiXf#pWgVpi$zjT2H%h`Ek!4|J}IxDRHnwJs=NJs=cR%x z_$2@rN=~nrXE}H{Nb5M;<~B1|=1F@vQSaj;-T0||u|8Yld)uAZHYS~t36DNwe%8H( zHeXDubeU8$a1SSd{6-m^FfcF}k9$`iP;+o>%*}-MZp^T3GWW5M{jp^%g2SF(?Bd;7 zL+82N_ysiT_vA_7oxf=04&?w>RajngTDiCOPp7*|&%C719|2kDPqz`M-5yB`uFu=d zn05*z3$e^z_|sLJu;IHI``Xh$7YhRG@h@- z#+Ih-aC;gpQj1zdop~Iae0Q4ak(!$?Yt5LO+j*!kl3c1GK&efVD!+1NcmSvZJrPUL zp1RigC)zA8L+E8}Zg4K66T(*f!l+azUF71VXAdwN&y^x92I4y%NBh_s%mN;=n+}#I zmY6uXKSsT6s@v^e0PkVJDH?!9<$l0bX`>SwE(2W@8nAy9i{appOPe+iNbcO2WPTT>K+d~E-t^D9 zF0oc8!AlDtAKallm3hPJu-B{hPWn0j$%>on)8ETqUu!wHGVKzx@RM7c=BPhaxwAfe zewW?OpFjWqO`uifVVlXtS* zuJ?}B)z$1vi(VXXoZDo*_Sb!W+g+v8>zPz1nXI^fVE*E|mv=rs;$K*_<=n~BH@D`W zZ;1OFr6E%P=WF`;yyxt$?5x|uwWgd7)4gt$y?5^(f3^8jzS}>3m{}xP{jgr#U(){M zr1=+@OsrtM!3VzohC$j*E3e2buhXvN%ZCZG^U4COa&AfKhFgRJ*Ct#$dit`rU+Scj zCOIe8uCDvHa>1lzcgvbpG7Z|lvtBCg^svi$ zk^4V(>z<C$J3&WDW7&57Io@w#K}@A7w7Zu;4oYg}1>bHlrR zyWd$BJh^c3NAf(md2_8xc=E(mwy*#3vAWdzv*-y{R#v;UQTN5|q84~6zGm7`2y7bf z;8~Iyv(YGU+SIvk-@Z&u4UL=`vwPi+SmA=m6I&Pp>VZmtpuzWnnFokL-KBA$O=%Ra zuER9q&;K{q8$sqaDAd1p)awSaA_NkEq!^0?P>_`oxa=#z5i}q-DojC`C;~(D|9|sX h-lsqY8>sMNX0Z4rwfwMQBWS9N!PC{xWt~$(699}KvUmUh literal 0 HcmV?d00001 diff --git a/frontend/index.html b/frontend/index.html new file mode 100644 index 0000000..5e16d5b --- /dev/null +++ b/frontend/index.html @@ -0,0 +1,17 @@ + + + + + + + 登录体验预览 · IAM + + +

+ + + + + diff --git a/frontend/package-lock.json b/frontend/package-lock.json new file mode 100644 index 0000000..57bc869 --- /dev/null +++ b/frontend/package-lock.json @@ -0,0 +1,1280 @@ +{ + "name": "iam-login-ui", + "version": "0.0.1", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "iam-login-ui", + "version": "0.0.1", + "dependencies": { + "react": "19.3.0", + "react-dom": "19.3.0" + }, + "devDependencies": { + "@playwright/test": "1.63.0", + "@types/react": "^19.2.0", + "@types/react-dom": "^19.2.0", + "typescript": "7.0.2", + "vite": "8.3.1" + } + }, + "node_modules/@oxc-project/types": { + "version": "0.151.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.151.0.tgz", + "integrity": "sha512-J1yXrIlNDZVzE3ada310xeAw7nH8yCAyLPuUIsjKatFPmfn5bS1oW+cM+QsGOtVWd5nhSpbwZWx/rue+r5Z+PA==", + "dev": true, + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/oxc-project" + } + }, + "node_modules/@playwright/test": { + "version": "1.63.0", + "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.63.0.tgz", + "integrity": "sha512-oxMK4vllB9RK5NQ2l1pq1IfOf2AvnEuj/vYGDj0H2nMtmtZpKtCwt/l00GEO6xjGfpBNAvjovvYdCm50dRQkpQ==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright": "1.63.0" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=20" + } + }, + "node_modules/@rolldown/binding-android-arm-eabi": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.11.tgz", + "integrity": "sha512-A5kXfGKvKWWZE0TtPrfsvT+q4Y5d1QG8gGUzpYjGydM+fARM9MuX90PrXYXe0XbsDVgyxxNzHo6giCj90bsFNw==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-android-arm64": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.11.tgz", + "integrity": "sha512-z6cTycz+iJ4PVkuL4HHW4DfTfoeU/2nqYYuSOrTmH7yHK5Y0LCOnA03V4ZNxavyVaU1oOqUgIg2klN/s+USGOA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-arm64": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.11.tgz", + "integrity": "sha512-jShvqNtP6vDC6/A5JOAzbVV+DkgHqhl/ScVCJEbt+TUY6QYz7YnXcrg3sLtFBniro0f/Ld50ZwCWA6f7KYD1nQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-darwin-x64": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.11.tgz", + "integrity": "sha512-f2i2xiNWq1Z1l2++q2fuhZRdLAT3aqxD6vRNm1RAxpUoBcdqNB3C0s1Bt+K+PbEx2F5F4gQp6hqKkphCY/xF9w==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-freebsd-x64": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.11.tgz", + "integrity": "sha512-4Ir5FSOKIAMr4r0kExpt1s3bMgzJU3rA45AYOHtQpls0oNeqcYBKrWMlckrYH4KCfGLfkfn1tN1dmZPMVsdXow==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm-gnueabihf": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.11.tgz", + "integrity": "sha512-/gnRDM+39BROzAN/k1OZjDPnDMcZxB/0EUxKjONO5yVkNEvlsoMDrxGNKgZi/ttFriS2gwlDNzB65pvNbFOXIQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-gnu": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.11.tgz", + "integrity": "sha512-PFaK8HwvAHbaKbBcDNQihjMKYvFnA5hiENx/l5tphTDz1E0WFp32l0A7aq7lyUwGsRw/xSrNIy/gIK4thrSCrw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-arm64-musl": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.11.tgz", + "integrity": "sha512-AskzJUIKRLPxkruR1wLKewGbOw+EYfU/9lOrBFj4AFrEA8hPpKFnODWNu2WLaNs0QNkEb9QIJufmVZZIL/bJlg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-ppc64-gnu": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.11.tgz", + "integrity": "sha512-qlUGAheh2yh8afH7QBgx0PrRHN85hKnNd78x8MeMhXivuevgd8vgf6/CstOzmNKY/lLTHvNTrPy98cLnAugzJw==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-s390x-gnu": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.11.tgz", + "integrity": "sha512-secpEad+0vCbSfn8upFySkDskv+bGPk3THSDS9Y89yc4rb4kzqHp8Dmyd9BkQW4SnhNXBZCl/6CrO//hZahNJQ==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-gnu": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.11.tgz", + "integrity": "sha512-mOVBT3dPpkWm8XBWPmU4bf+U6dYDLeMo/9ojUmis4N0L5uu10qra5vOyngZ7/PSdoE4G9KvRt4bloRxNjLas7A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-linux-x64-musl": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.11.tgz", + "integrity": "sha512-Is78i9A8Ui4SqcxUwFJ9uMmjDn58IbVTjFWYdQestFEgeuEmHMLGNriXnVJKkwG2YiZjw8cP0zCTyDMdDGtOOg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-openharmony-arm64": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.11.tgz", + "integrity": "sha512-dUCXneZ87INUMyQ0D+C0HrEBNUPNXHaPmU5GTjyKTJEiussw9Kaj5Ln8UztPe4epV/ffvgNBEadksdYhmW6xJA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "openharmony" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-arm64-msvc": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.11.tgz", + "integrity": "sha512-jByxb6qfd+bH1xUd0qnfFnb17i9sWBPY2tOavJ0l3tdr3OTu+Kvtm8cd/JV5nFt657b1VqGltxg9olOEfofXWw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/binding-win32-x64-msvc": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.11.tgz", + "integrity": "sha512-/PzKqzAJ03i19oy2ItPvyvaVjOjBCNnfaJs8yvUdGBKmiESgnrJSQ2awd81QzFbbnAmu7YO9ZnJrDCb9VSJPRA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^20.19.0 || >=22.12.0" + } + }, + "node_modules/@rolldown/pluginutils": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", + "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==", + "dev": true, + "license": "MIT" + }, + "node_modules/@types/react": { + "version": "19.3.0", + "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz", + "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==", + "dev": true, + "license": "MIT", + "dependencies": { + "csstype": "^3.2.2" + } + }, + "node_modules/@types/react-dom": { + "version": "19.3.0", + "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.3.0.tgz", + "integrity": "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q==", + "dev": true, + "license": "MIT", + "peerDependencies": { + "@types/react": "^19.3.0" + } + }, + "node_modules/@typescript/typescript-aix-ppc64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-aix-ppc64/-/typescript-aix-ppc64-7.0.2.tgz", + "integrity": "sha512-MTKKkWB7p/0E9xi1d1tHtZ5PiLkGEMIq88pK2CubZjOsLtYTLqhgIgi6zepFa+9GHZ6h05NMCkQxGKiPXMxXtQ==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "aix" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-darwin-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-darwin-arm64/-/typescript-darwin-arm64-7.0.2.tgz", + "integrity": "sha512-gowzar9MwS/aRWp6f3a4KUqzRjAZjOsmGNCM6LcTgXum+dBfgsBVMN+AgvOCCbguXyick6LJhpBszxMebJ8syA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-darwin-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-darwin-x64/-/typescript-darwin-x64-7.0.2.tgz", + "integrity": "sha512-SZ9xZInqApNlNGc9s0W1VSsktYSOe9cFqNOIqmN1Gs8SmkjKZYFt017G4VwPxASInODuAdbTW7sXiFUf893RgA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-freebsd-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-freebsd-arm64/-/typescript-freebsd-arm64-7.0.2.tgz", + "integrity": "sha512-W5NH4y/J0plIIS5b2xvTEkU7JFxyqdMAOgf+Ilhl0vHQXKO5dZoxd+C/jEtq56c4F3wk71RB4BMRQ2XdI+bwYQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-freebsd-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-freebsd-x64/-/typescript-freebsd-x64-7.0.2.tgz", + "integrity": "sha512-UMGDx5sTpzNw3WiPebH7l90IWfJggEd+egHt/q6p7/Cm3zqoV7VxkGXt+3DxPIw8CcmvAB0j3sVVfbhX+M4Tpw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-arm": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-arm/-/typescript-linux-arm-7.0.2.tgz", + "integrity": "sha512-gffT3xPz9sR7j/YJExkyPntrI0P2EP9XbOyWzth2/Gs0RstK+90RBcO0ncXoXy/beYll1SXw846Nf2zdnEz0QQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-arm64/-/typescript-linux-arm64-7.0.2.tgz", + "integrity": "sha512-Qh4eU4/y3yDjnfjjyPYihMj5/ODIlmt+Bzu17OI+fiSRDW57QmU5SiN63exPRNJPKUzcc1INa1NXdrJ+MqHjUQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-loong64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-loong64/-/typescript-linux-loong64-7.0.2.tgz", + "integrity": "sha512-uEHck9i8hoAzXPiYRib1O7miOnz23SxIeVl6F4LXox+qov1K35jHcEW6VHKvZI+pyvl7fZEP4MCU5LYvIq1GuQ==", + "cpu": [ + "loong64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-mips64el": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-mips64el/-/typescript-linux-mips64el-7.0.2.tgz", + "integrity": "sha512-R4KvAMnE43W5Qeqb0Ly56O3mWMWIAgsMyz36DCaycd5nbg/9kzm0liw3JocfRqyJY0KPmzFjbswozXyW0DnIYA==", + "cpu": [ + "mips64el" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-ppc64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-ppc64/-/typescript-linux-ppc64-7.0.2.tgz", + "integrity": "sha512-DORx5b3sd/4S7eayxm4FQv+A7CrkUIGRaHiwI8oiHTAI1fAPWhF4J0vAlkC8biAlHSVVwxMQ3tjZ2/DVbnQiiA==", + "cpu": [ + "ppc64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-riscv64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-riscv64/-/typescript-linux-riscv64-7.0.2.tgz", + "integrity": "sha512-wf0jqEDOjrPRnKwYRyyJDRo11KMbvMFrU+q4zqKyChODBzvlkbhNQfKvLxQCcwTpdDaXSHZTVuh0JoCrKCUMHQ==", + "cpu": [ + "riscv64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-s390x": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-s390x/-/typescript-linux-s390x-7.0.2.tgz", + "integrity": "sha512-IkwJc3L7yhytWd/ewjyxNDfOmswCm9GWMJT/ue/dU4aZNbwZeYAetq42VyLmsmSjvoX7z74X6ZaYCtzAr0EuGw==", + "cpu": [ + "s390x" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-linux-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-x64/-/typescript-linux-x64-7.0.2.tgz", + "integrity": "sha512-EYdf2cNg7rgCWJnxCdJ+F3V39O8ihb37eHAu1LK8oAFizgTQbPOK7zHHXbPt8rX24COqODXeI3sIf0fCXG7H/A==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-netbsd-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-netbsd-arm64/-/typescript-netbsd-arm64-7.0.2.tgz", + "integrity": "sha512-+polYF4MF04aPpO5FTkHran9yUQDSXqy5GiSDKpsll5jy3l3+g9QLhpf39T+ePtefhXLOGrLl0QIjkQP6VnelA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-netbsd-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-netbsd-x64/-/typescript-netbsd-x64-7.0.2.tgz", + "integrity": "sha512-8YIT0EHM/3dq10ZOVF/A7pc/YSMtbcecct4rWtexrnSCHOPcpC2KTLXfTCR6vDpnSiY12heNb1GiN/wu+T/FyA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "netbsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-openbsd-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-openbsd-arm64/-/typescript-openbsd-arm64-7.0.2.tgz", + "integrity": "sha512-APT8+ClYnuYm1u9+kgGXoMj2VzWzcymwh2gNSQVySHfkRDGOTVkoWLjCmOQSaO+PoqQ57B0flRp9SA+7GnnkzQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-openbsd-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-openbsd-x64/-/typescript-openbsd-x64-7.0.2.tgz", + "integrity": "sha512-yX7s+Q0Dln0Dt9tEzZsAjXXR/+ytBM7AlglaqyeMPxQszJ1JhlJdZ6jLA+IzldHtflX81em7lDao1xXu+aRRkg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "openbsd" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-sunos-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-sunos-x64/-/typescript-sunos-x64-7.0.2.tgz", + "integrity": "sha512-dLJDGaLZ1D4HPQn62u1n8mBDkJREwMsAkCdkwd4Ieqw+x3TUyTsqY0YiBCtE6H6OzzgGk3iuZ3vFWRS+E8/d1g==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "sunos" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-win32-arm64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-win32-arm64/-/typescript-win32-arm64-7.0.2.tgz", + "integrity": "sha512-Gyl1Vy6OsWesLzmq+EP0Fb7b4Nid5232AvcA2SFcdYreldpNtYFFofPjnt62y9hQy7VTaZp65ICJjuAQRaVcIQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/@typescript/typescript-win32-x64": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/@typescript/typescript-win32-x64/-/typescript-win32-x64-7.0.2.tgz", + "integrity": "sha512-0BQ3HkAHHlKLSp1qRvf3SUhGpGsDuhB/jgFw75guyqbxJqEaS0Cw/VFO8i2nHglJUzQCRtMMR/IBAKE3ETMC4g==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "Apache-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=16.20.0" + } + }, + "node_modules/csstype": { + "version": "3.2.3", + "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz", + "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==", + "dev": true, + "license": "MIT" + }, + "node_modules/detect-libc": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", + "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", + "dev": true, + "license": "Apache-2.0", + "engines": { + "node": ">=8" + } + }, + "node_modules/fdir": { + "version": "6.5.0", + "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", + "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12.0.0" + }, + "peerDependencies": { + "picomatch": "^3 || ^4" + }, + "peerDependenciesMeta": { + "picomatch": { + "optional": true + } + } + }, + "node_modules/fsevents": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", + "dev": true, + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, + "node_modules/lightningcss": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz", + "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==", + "dev": true, + "license": "MPL-2.0", + "dependencies": { + "detect-libc": "^2.0.3" + }, + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + }, + "optionalDependencies": { + "lightningcss-android-arm64": "1.33.0", + "lightningcss-darwin-arm64": "1.33.0", + "lightningcss-darwin-x64": "1.33.0", + "lightningcss-freebsd-x64": "1.33.0", + "lightningcss-linux-arm-gnueabihf": "1.33.0", + "lightningcss-linux-arm64-gnu": "1.33.0", + "lightningcss-linux-arm64-musl": "1.33.0", + "lightningcss-linux-x64-gnu": "1.33.0", + "lightningcss-linux-x64-musl": "1.33.0", + "lightningcss-win32-arm64-msvc": "1.33.0", + "lightningcss-win32-x64-msvc": "1.33.0" + } + }, + "node_modules/lightningcss-android-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz", + "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-darwin-arm64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz", + "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-darwin-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz", + "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-freebsd-x64": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz", + "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm-gnueabihf": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz", + "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==", + "cpu": [ + "arm" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz", + "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-arm64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz", + "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-x64-gnu": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz", + "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-linux-x64-musl": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz", + "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-win32-arm64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz", + "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/lightningcss-win32-x64-msvc": { + "version": "1.33.0", + "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz", + "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MPL-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 12.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/parcel" + } + }, + "node_modules/nanoid": { + "version": "3.3.19", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.19.tgz", + "integrity": "sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==", + "dev": true, + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "bin": { + "nanoid": "bin/nanoid.cjs" + }, + "engines": { + "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" + } + }, + "node_modules/picocolors": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", + "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", + "dev": true, + "license": "ISC" + }, + "node_modules/picomatch": { + "version": "4.0.7", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz", + "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/playwright": { + "version": "1.63.0", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.63.0.tgz", + "integrity": "sha512-+7ziBLidS4NaNCdt57SUDT+wYmmd5fmiQejUic/kb+YsYSCPyOOE9sebzMjNmQrsnNpDJqd4WHvV/8lfKfUDUg==", + "dev": true, + "license": "Apache-2.0", + "dependencies": { + "playwright-core": "1.63.0" + }, + "bin": { + "playwright": "cli.js" + }, + "engines": { + "node": ">=20" + } + }, + "node_modules/playwright-core": { + "version": "1.63.0", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.63.0.tgz", + "integrity": "sha512-rYCsBF/M5HjUch52bbtVONEFjv6Xu8sm8h72dNlR5bzIE1fvC/bxgspzkjSfU+MweEMmPM8KJebG6nnyxo5mCg==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "playwright-core": "cli.js" + }, + "engines": { + "node": ">=20" + } + }, + "node_modules/postcss": { + "version": "8.5.28", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz", + "integrity": "sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==", + "dev": true, + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/postcss" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "nanoid": "^3.3.18", + "picocolors": "^1.1.1", + "source-map-js": "^1.2.1" + }, + "engines": { + "node": "^10 || ^12 || >=14" + } + }, + "node_modules/react": { + "version": "19.3.0", + "resolved": "https://registry.npmjs.org/react/-/react-19.3.0.tgz", + "integrity": "sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/react-dom": { + "version": "19.3.0", + "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz", + "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==", + "license": "MIT", + "dependencies": { + "scheduler": "^0.28.0" + }, + "peerDependencies": { + "react": "^19.3.0" + } + }, + "node_modules/rolldown": { + "version": "1.2.11", + "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.11.tgz", + "integrity": "sha512-qpSwIyz0jHQq5qXBTNxFmE6664rJ7O+4TvPFOiOaBSrz8IOHc1koKKSqTM2H6u1UG1+TveuC6vaDHKXFOvb1Kw==", + "dev": true, + "license": "MIT", + "dependencies": { + "@oxc-project/types": "=0.151.0", + "@rolldown/pluginutils": "^1.0.0" + }, + "bin": { + "rolldown": "bin/cli.mjs" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + }, + "optionalDependencies": { + "@rolldown/binding-android-arm-eabi": "1.2.11", + "@rolldown/binding-android-arm64": "1.2.11", + "@rolldown/binding-darwin-arm64": "1.2.11", + "@rolldown/binding-darwin-x64": "1.2.11", + "@rolldown/binding-freebsd-x64": "1.2.11", + "@rolldown/binding-linux-arm-gnueabihf": "1.2.11", + "@rolldown/binding-linux-arm64-gnu": "1.2.11", + "@rolldown/binding-linux-arm64-musl": "1.2.11", + "@rolldown/binding-linux-ppc64-gnu": "1.2.11", + "@rolldown/binding-linux-s390x-gnu": "1.2.11", + "@rolldown/binding-linux-x64-gnu": "1.2.11", + "@rolldown/binding-linux-x64-musl": "1.2.11", + "@rolldown/binding-openharmony-arm64": "1.2.11", + "@rolldown/binding-win32-arm64-msvc": "1.2.11", + "@rolldown/binding-win32-x64-msvc": "1.2.11" + } + }, + "node_modules/scheduler": { + "version": "0.28.0", + "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz", + "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==", + "license": "MIT" + }, + "node_modules/source-map-js": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", + "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", + "dev": true, + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/tinyglobby": { + "version": "0.2.17", + "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz", + "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==", + "dev": true, + "license": "MIT", + "dependencies": { + "fdir": "^6.5.0", + "picomatch": "^4.0.4" + }, + "engines": { + "node": ">=12.0.0" + }, + "funding": { + "url": "https://github.com/sponsors/SuperchupuDev" + } + }, + "node_modules/typescript": { + "version": "7.0.2", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-7.0.2.tgz", + "integrity": "sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==", + "dev": true, + "license": "Apache-2.0", + "bin": { + "tsc": "bin/tsc" + }, + "engines": { + "node": ">=16.20.0" + }, + "optionalDependencies": { + "@typescript/typescript-aix-ppc64": "7.0.2", + "@typescript/typescript-darwin-arm64": "7.0.2", + "@typescript/typescript-darwin-x64": "7.0.2", + "@typescript/typescript-freebsd-arm64": "7.0.2", + "@typescript/typescript-freebsd-x64": "7.0.2", + "@typescript/typescript-linux-arm": "7.0.2", + "@typescript/typescript-linux-arm64": "7.0.2", + "@typescript/typescript-linux-loong64": "7.0.2", + "@typescript/typescript-linux-mips64el": "7.0.2", + "@typescript/typescript-linux-ppc64": "7.0.2", + "@typescript/typescript-linux-riscv64": "7.0.2", + "@typescript/typescript-linux-s390x": "7.0.2", + "@typescript/typescript-linux-x64": "7.0.2", + "@typescript/typescript-netbsd-arm64": "7.0.2", + "@typescript/typescript-netbsd-x64": "7.0.2", + "@typescript/typescript-openbsd-arm64": "7.0.2", + "@typescript/typescript-openbsd-x64": "7.0.2", + "@typescript/typescript-sunos-x64": "7.0.2", + "@typescript/typescript-win32-arm64": "7.0.2", + "@typescript/typescript-win32-x64": "7.0.2" + } + }, + "node_modules/vite": { + "version": "8.3.1", + "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.1.tgz", + "integrity": "sha512-/bvH9E9tmCXRGp2uXY3WbOldqpTwFkbha/8ANaEQ6VkxhH60KyqLwgZq6lG2y+4uT55x9+9eUHMpQ7uGnOCKjA==", + "dev": true, + "license": "MIT", + "dependencies": { + "lightningcss": "^1.33.0", + "picomatch": "^4.0.7", + "postcss": "^8.5.28", + "rolldown": "~1.2.9", + "tinyglobby": "^0.2.17" + }, + "bin": { + "vite": "bin/vite.js" + }, + "engines": { + "node": "^20.19.0 || >=22.12.0" + }, + "funding": { + "url": "https://github.com/vitejs/vite?sponsor=1" + }, + "optionalDependencies": { + "fsevents": "~2.3.3" + }, + "peerDependencies": { + "@types/node": "^20.19.0 || >=22.12.0", + "@vitejs/devtools": "^0.7.1", + "esbuild": "^0.27.0 || ^0.28.0", + "jiti": ">=1.21.0", + "less": "^4.0.0", + "sass": "^1.70.0", + "sass-embedded": "^1.70.0", + "stylus": ">=0.54.8", + "sugarss": "^5.0.0", + "terser": "^5.16.0", + "tsx": "^4.8.1", + "yaml": "^2.4.2" + }, + "peerDependenciesMeta": { + "@types/node": { + "optional": true + }, + "@vitejs/devtools": { + "optional": true + }, + "esbuild": { + "optional": true + }, + "jiti": { + "optional": true + }, + "less": { + "optional": true + }, + "sass": { + "optional": true + }, + "sass-embedded": { + "optional": true + }, + "stylus": { + "optional": true + }, + "sugarss": { + "optional": true + }, + "terser": { + "optional": true + }, + "tsx": { + "optional": true + }, + "yaml": { + "optional": true + } + } + } + } +} diff --git a/frontend/package.json b/frontend/package.json new file mode 100644 index 0000000..ebb6bf4 --- /dev/null +++ b/frontend/package.json @@ -0,0 +1,22 @@ +{ + "name": "iam-login-ui", + "private": true, + "version": "0.0.1", + "type": "module", + "scripts": { + "build": "tsc --noEmit && vite build", + "watch": "vite build --watch", + "test:browser": "playwright test" + }, + "dependencies": { + "react": "19.3.0", + "react-dom": "19.3.0" + }, + "devDependencies": { + "vite": "8.3.1", + "typescript": "7.0.2", + "@types/react": "^19.2.0", + "@types/react-dom": "^19.2.0", + "@playwright/test": "1.63.0" + } +} diff --git a/frontend/playwright.config.ts b/frontend/playwright.config.ts new file mode 100644 index 0000000..58ec8c4 --- /dev/null +++ b/frontend/playwright.config.ts @@ -0,0 +1,8 @@ +import { defineConfig } from "@playwright/test"; +export default defineConfig({ + testDir: "./tests", + use: { + baseURL: process.env.IAM_PREVIEW_URL ?? "http://127.0.0.1:18081", + headless: true, + }, +}); diff --git a/frontend/src/main.tsx b/frontend/src/main.tsx new file mode 100644 index 0000000..deb662b --- /dev/null +++ b/frontend/src/main.tsx @@ -0,0 +1,159 @@ +import { createRoot } from "react-dom/client"; +import { useState, useLayoutEffect, type ReactNode } from "react"; +import "./style.css"; + +type PageContext = { + step: "identity" | "verification" | "complete"; + name: string; + error: string; + action: string; + csrf: { name: string; value: string }; +}; + +const context: PageContext = JSON.parse( + document.getElementById("login-context")!.textContent!, +); + +function Form({ children }: { children: ReactNode }) { + const [pending, setPending] = useState(false); + return ( +
setPending(true)} + aria-busy={pending} + > + + {children} + +
+ ); +} + +function App() { + useLayoutEffect(() => { performance.mark("iam-page-ready"); }, []); + const [showHelp, setShowHelp] = useState(false); + return ( +
+
+ + iam + 预览 + +
+
+
登录交互原型
+
    + {(["identity", "verification", "complete"] as const).map( + (step, i) => ( +
  1. + {i + 1} + {["填写称呼", "模拟验证", "完成"][i]} +
    2. + ), + )} +
+ {context.step === "identity" && ( + <> +

从这里开始

+

+ 体验一次完整的页面切换。先告诉我们怎么称呼你。 +

+ + )} + {context.step === "verification" && ( + <> +

你好，{context.name}

+

+ 这是第二步页面。输入演示码 123456{" "} + 继续，也可以试试输入错误的演示码。 +

+ + )} + {context.step === "complete" && ( + <> + +

体验完成

+

+ {context.name} + ，你已走完页面预览。这没有建立登录身份，也没有向任何应用授权。 +

+ + )} + {context.error && ( +

+ {context.error} +

+ )} +
+ {context.step === "identity" && ( + + )} + {context.step === "verification" && ( + + )} +
+ {context.step === "verification" && ( + + 返回上一步 + + )} +
+ + {showHelp && ( +

不是。这里仅演示页面交互，请勿输入真实密码或 MFA 验证码。

+ )} +
+
+
独立 IAM · 页面体验预览
+
+ ); +} + +createRoot(document.getElementById("root")!).render(); diff --git a/frontend/src/style.css b/frontend/src/style.css new file mode 100644 index 0000000..9df008c --- /dev/null +++ b/frontend/src/style.css @@ -0,0 +1,240 @@ +:root { + font-family: Inter, "Noto Sans SC", system-ui, sans-serif; + color: #182826; + background: #f3f5f1; + font-synthesis: none; + font-size: 16px; +} +* { + box-sizing: border-box; +} +body { + margin: 0; +} +main { + max-width: 520px; + margin: 0 auto; + padding: 40px 20px 28px; +} +header { + margin-bottom: 40px; +} +.brand { + font-size: 32px; + font-weight: 750; + letter-spacing: -2px; + color: #285448; + text-decoration: none; +} +.brand > span:first-child { + font-weight: 400; +} +.badge { + font-size: 11px; + letter-spacing: 1px; + vertical-align: middle; + margin-left: 14px; + padding: 5px 8px; + border: 1px solid #b7c9be; + border-radius: 5px; +} +.card { + background: #fff; + border: 1px solid #dce4dd; + border-radius: 18px; + padding: 36px; + box-shadow: 0 12px 40px #173f2510; +} +.eyebrow { + font-size: 12px; + color: #60746a; + letter-spacing: 2px; +} +.steps { + display: flex; + justify-content: space-between; + padding: 0; + list-style: none; + margin: 25px 0 32px; + gap: 8px; +} +.steps li { + font-size: 12px; + color: #718078; + display: flex; + align-items: center; + gap: 7px; +} +.steps li span { + display: inline-grid; + place-items: center; + width: 23px; + height: 23px; + border: 1px solid #ccd7ce; + border-radius: 50%; + font-size: 11px; +} +.steps [aria-current] { + color: #215542; + font-weight: 650; +} +.steps [aria-current] span { + background: #215542; + color: white; + border-color: #215542; +} +h1 { + font-size: 27px; + letter-spacing: -0.5px; + line-height: 1.35; + margin: 0 0 12px; + overflow-wrap: anywhere; +} +.intro { + font-size: 14px; + color: #60716a; + line-height: 1.8; + margin: 0 0 25px; +} +label { + display: block; + font-size: 14px; + font-weight: 600; +} +input:not([type="hidden"]) { + display: block; + width: 100%; + border: 1px solid #bdccc1; + border-radius: 8px; + padding: 13px 14px; + margin: 9px 0 22px; + font: inherit; + color: inherit; + background: #fff; +} +input:focus { + outline: 3px solid #a9cbbc; + outline-offset: 2px; +} +button { + font: inherit; + cursor: pointer; +} +.primary { + width: 100%; + border: 0; + background: #245b47; + color: #fff; + font-weight: 600; + border-radius: 8px; + padding: 13px; +} +.primary:hover { + background: #194734; +} +.primary:disabled { + opacity: 0.65; + cursor: wait; +} +.error { + color: #9e302b; + background: #fff0ed; + padding: 12px; + border-radius: 8px; + font-size: 14px; + line-height: 1.6; +} +.back { + display: block; + text-align: center; + font-size: 13px; + margin-top: 18px; + color: #476a58; +} +.help { + border-top: 1px solid #e5ebe6; + margin-top: 28px; + padding-top: 20px; +} +.link { + background: none; + border: 0; + color: #5b7064; + padding: 0; + font-size: 13px; +} +.help p { + font-size: 13px; + line-height: 1.8; + color: #6a756e; + margin-bottom: 0; +} +footer { + text-align: center; + color: #7c887e; + font-size: 12px; + margin-top: 28px; +} +.success { + color: #245b47; + font-size: 30px; + margin-bottom: 12px; +} +a:focus-visible, +button:focus-visible { + outline: 3px solid #a9cbbc; + outline-offset: 3px; +} +@media (max-width: 480px) { + main { + padding-top: 24px; + } + header { + margin-bottom: 24px; + } + .card { + padding: 26px 22px; + } + .steps { + gap: 5px; + } + .steps li { + font-size: 11px; + } +} +@media (prefers-color-scheme: dark) { + :root { + background: #14221c; + color: #edf4ee; + } + .card { + background: #1e3027; + border-color: #344b3d; + } + .brand, + .steps [aria-current], + .success { + color: #b9ddc8; + } + .intro, + .eyebrow, + .help p, + .link, + .back { + color: #acbfb2; + } + .steps li { + color: #98aa9e; + } + input:not([type="hidden"]) { + background: #18271f; + border-color: #526657; + } + .help { + border-color: #3a4d40; + } + .error { + background: #492b29; + color: #ffc3b9; + } +} diff --git a/frontend/src/vite-env.d.ts b/frontend/src/vite-env.d.ts new file mode 100644 index 0000000..11f02fe --- /dev/null +++ b/frontend/src/vite-env.d.ts @@ -0,0 +1 @@ +/// diff --git a/frontend/tests/preview.spec.ts b/frontend/tests/preview.spec.ts new file mode 100644 index 0000000..7295140 --- /dev/null +++ b/frontend/tests/preview.spec.ts @@ -0,0 +1,95 @@ +import { test, expect } from "@playwright/test"; + +test("原生 POST 逐页导航，内联上下文，浏览器缓存静态资源", async ({ page }) => { + const xhr: string[] = []; + const posts: string[] = []; + const errors: string[] = []; + page.on("pageerror", (e) => errors.push(e.message)); + page.on("request", (req) => { + if (["fetch", "xhr"].includes(req.resourceType())) xhr.push(req.url()); + if (req.method() === "POST" && req.isNavigationRequest()) + posts.push(req.url()); + }); + await page.goto("/preview"); + await expect(page.getByRole("heading", { name: "从这里开始" })).toBeVisible(); + const scriptUrl = await page.locator("script[src]").getAttribute("src"); + await page.getByRole("button", { name: "这是真实登录吗？" }).click(); + await expect(page.getByText("不是。这里仅演示页面交互")).toBeVisible(); + await page.getByLabel("称呼").fill("预览用户"); + await page.getByRole("button", { name: "继续", exact: true }).click(); + await expect(page).toHaveURL(/\/preview\/verify$/); + await expect( + page.getByRole("heading", { name: "你好，预览用户" }), + ).toBeVisible(); + await page.getByLabel("演示码").fill("000000"); + await page.getByRole("button", { name: "继续", exact: true }).click(); + await expect(page.getByRole("alert")).toContainText("演示码不正确"); + await page.getByLabel("演示码").fill("123456"); + await page.getByRole("button", { name: "继续", exact: true }).click(); + await expect(page.getByRole("heading", { name: "体验完成" })).toBeVisible(); + expect(posts).toHaveLength(3); + expect(xhr).toEqual([]); + expect(errors).toEqual([]); + const timing = await page.evaluate(() => ({ + navigation: performance + .getEntriesByType("navigation") + .map((e) => e.toJSON()), + resources: performance.getEntriesByType("resource").map((e) => e.toJSON()), + })); + const script = timing.resources.find((r) => r.name.endsWith(scriptUrl!)); + expect(script?.transferSize).toBe(0); + await test + .info() + .attach("navigation-and-cache.json", { + body: JSON.stringify(timing, null, 2), + contentType: "application/json", + }); + expect( + ( + await page.request.get("/", { headers: { Accept: "application/json" } }) + ).status(), + ).toBe(401); + await page.getByRole("button", { name: "重新体验" }).click(); + await expect(page.getByRole("heading", { name: "从这里开始" })).toBeVisible(); +}); + +test("移动端与脚本结束标记作为纯文本显示", async ({ page }) => { + await page.setViewportSize({ width: 390, height: 844 }); + await page.goto("/preview"); + const name = ""; + await page.getByLabel("称呼").fill(name); + await page.getByRole("button", { name: "继续", exact: true }).click(); + await expect(page.getByRole("heading")).toHaveText(`你好，${name}`); + expect( + await page.evaluate(() => Reflect.get(window, "__injected")), + ).toBeUndefined(); + expect( + await page.evaluate( + () => document.documentElement.scrollWidth <= innerWidth, + ), + ).toBe(true); + await page.screenshot({ path: "test-results/mobile.png", fullPage: true }); +}); + + +test("受限网络下首屏和缓存后页面切换计时", async ({ page, context }) => { + const cdp = await context.newCDPSession(page); + await cdp.send("Network.enable"); + await cdp.send("Network.emulateNetworkConditions", { + offline: false, latency: 60, downloadThroughput: 1_500_000 / 8, + uploadThroughput: 750_000 / 8, + }); + await cdp.send("Emulation.setCPUThrottlingRate", { rate: 4 }); + await page.goto("/preview"); + await expect(page.getByRole("heading", { name: "从这里开始" })).toBeVisible(); + const cold = await page.evaluate(() => performance.getEntriesByName("iam-page-ready")[0].startTime); + await page.getByLabel("称呼").fill("计时体验"); + const start = performance.now(); + await page.getByRole("button", { name: "继续", exact: true }).click(); + await expect(page.getByRole("heading", { name: "你好，计时体验" })).toBeVisible(); + const warm = performance.now() - start; + const result = { network_latency_ms: 60, download_mbps: 1.5, cpu_slowdown: 4, + cold_navigation_to_react_commit_ms: Math.round(cold), warm_click_to_visible_ms: Math.round(warm) }; + console.log(JSON.stringify(result)); + await test.info().attach("timing.json", { body: JSON.stringify(result, null, 2), contentType: "application/json" }); +}); diff --git a/frontend/tsconfig.json b/frontend/tsconfig.json new file mode 100644 index 0000000..3164401 --- /dev/null +++ b/frontend/tsconfig.json @@ -0,0 +1,13 @@ +{ + "compilerOptions": { + "target": "ES2022", + "lib": ["ES2022", "DOM", "DOM.Iterable"], + "module": "ESNext", + "moduleResolution": "Bundler", + "jsx": "react-jsx", + "strict": true, + "noEmit": true, + "skipLibCheck": true + }, + "include": ["src"] +} diff --git a/frontend/vite.config.ts b/frontend/vite.config.ts new file mode 100644 index 0000000..bd6b3a0 --- /dev/null +++ b/frontend/vite.config.ts @@ -0,0 +1,6 @@ +import { defineConfig } from "vite"; + +export default defineConfig({ + base: "/", + build: { outDir: "dist", emptyOutDir: true }, +}); diff --git a/scripts/frontend-in-docker b/scripts/frontend-in-docker new file mode 100755 index 0000000..c3358a7 --- /dev/null +++ b/scripts/frontend-in-docker @@ -0,0 +1,16 @@ +#!/usr/bin/env bash +set -euo pipefail +repo_root=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd) +cache_dir=${IAM_NPM_CACHE:-${XDG_CACHE_HOME:-$HOME/.cache}/iam-login/npm} +mkdir -p -- "$cache_dir" +cache_dir=$(cd -- "$cache_dir" && pwd) +docker_cmd=(docker) +if [[ ${IAM_DOCKER_USE_SUDO:-0} == 1 ]]; then + docker_cmd=(sudo -n docker) +fi +exec "${docker_cmd[@]}" run --rm --network host \ + --cpus 2 --memory 1g --user "$(id -u):$(id -g)" \ + -e HOME=/npm -e npm_config_cache=/npm \ + -v "$cache_dir:/npm" -v "$repo_root:/workspace" \ + -w /workspace/frontend node@sha256:d8e448a56fc63242f70026718378bd4b00f8c82e78d20eefb199224a4d8e33d8 \ + sh -c 'npm ci --no-audit --no-fund && npm run build' diff --git a/scripts/gradle-in-docker b/scripts/gradle-in-docker index d681d2f..2f882da 100755 --- a/scripts/gradle-in-docker +++ b/scripts/gradle-in-docker @@ -13,6 +13,8 @@ if (($# == 0)); then set -- test fi +"$repo_root/scripts/frontend-in-docker" + # Linux host networking is needed for Testcontainers' published ports. exec "${docker_cmd[@]}" run --rm --network host \ --cpus "${IAM_BUILD_CPUS:-4}" --memory "${IAM_BUILD_MEMORY:-8g}" \ diff --git a/scripts/native-smoke.py b/scripts/native-smoke.py index f5ef364..05d51fe 100755 --- a/scripts/native-smoke.py +++ b/scripts/native-smoke.py @@ -78,6 +78,7 @@ def main(): ready_seconds = time.monotonic() - started assert request('/actuator/prometheus')[0] == 401, 'Anonymous metrics must be rejected' assert request('/')[0] == 401, 'Anonymous application access must be rejected' + assert request('/preview')[0] == 404, 'UI preview must be disabled by default' status, before = request('/actuator/prometheus', authenticated=True) assert status == 200, 'Authenticated Prometheus scrape failed' for _ in range(3): diff --git a/src/main/java/top/ddupan/iam/login/preview/PreviewConfiguration.java b/src/main/java/top/ddupan/iam/login/preview/PreviewConfiguration.java new file mode 100644 index 0000000..04babb3 --- /dev/null +++ b/src/main/java/top/ddupan/iam/login/preview/PreviewConfiguration.java @@ -0,0 +1,44 @@ +package top.ddupan.iam.login.preview; + +import java.time.Duration; +import org.springframework.aot.hint.RuntimeHints; +import org.springframework.aot.hint.RuntimeHintsRegistrar; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.context.annotation.ImportRuntimeHints; +import org.springframework.http.CacheControl; +import org.springframework.security.config.Customizer; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.web.SecurityFilterChain; +import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry; +import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; + +@Configuration(proxyBeanMethods = false) +@ImportRuntimeHints(PreviewConfiguration.Resources.class) +class PreviewConfiguration implements WebMvcConfigurer { + @Bean + SecurityFilterChain security(HttpSecurity http) throws Exception { + return http.authorizeHttpRequests(auth -> auth + .requestMatchers("/error", "/preview", "/preview/**", "/assets/**", "/actuator/health/**").permitAll() + .anyRequest().authenticated()) + .formLogin(Customizer.withDefaults()) + .httpBasic(Customizer.withDefaults()) + .headers(headers -> headers.contentSecurityPolicy(csp -> csp.policyDirectives( + "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; " + + "object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'"))) + .build(); + } + + @Override + public void addResourceHandlers(ResourceHandlerRegistry registry) { + registry.addResourceHandler("/assets/**").addResourceLocations("classpath:/ui/assets/") + .setCacheControl(CacheControl.maxAge(Duration.ofDays(365)).cachePublic().immutable()); + } + + static class Resources implements RuntimeHintsRegistrar { + @Override + public void registerHints(RuntimeHints hints, ClassLoader classLoader) { + hints.resources().registerPattern("ui/**"); + } + } +} diff --git a/src/main/java/top/ddupan/iam/login/preview/PreviewController.java b/src/main/java/top/ddupan/iam/login/preview/PreviewController.java new file mode 100644 index 0000000..423f243 --- /dev/null +++ b/src/main/java/top/ddupan/iam/login/preview/PreviewController.java @@ -0,0 +1,146 @@ +package top.ddupan.iam.login.preview; + +import jakarta.servlet.http.HttpServletRequest; +import jakarta.servlet.http.HttpSession; +import java.io.IOException; +import java.nio.charset.StandardCharsets; +import java.util.Map; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.core.io.ClassPathResource; +import org.springframework.http.HttpStatus; +import org.springframework.http.MediaType; +import org.springframework.http.ResponseEntity; +import org.springframework.security.web.csrf.CsrfToken; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.PostMapping; +import org.springframework.web.bind.annotation.RequestParam; +import org.springframework.web.bind.annotation.RestController; +import org.springframework.web.server.ResponseStatusException; +import tools.jackson.databind.json.JsonMapper; + +/** An isolated UI experiment. It never creates an authenticated SecurityContext. */ +@RestController +class PreviewController { + private static final String STATE = PreviewController.class.getName() + ".state"; + private static final String SLOT = "__IAM_PAGE_CONTEXT__"; + private final boolean enabled; + private final String shell; + private final JsonMapper json = JsonMapper.builder().build(); + + PreviewController(@Value("${iam.ui-preview.enabled:false}") boolean enabled) throws IOException { + this.enabled = enabled; + this.shell = new ClassPathResource("ui/index.html").getContentAsString(StandardCharsets.UTF_8); + if (shell.indexOf(SLOT) < 0 || shell.indexOf(SLOT) != shell.lastIndexOf(SLOT)) { + throw new IllegalStateException("Expected exactly one UI context slot"); + } + } + + @GetMapping(value = {"/preview", "/preview/verify", "/preview/complete"}, produces = MediaType.TEXT_HTML_VALUE) + ResponseEntity page(HttpServletRequest request, CsrfToken csrf) { + requireEnabled(); + var session = request.getSession(); + synchronized (session) { + var state = state(session); + var path = request.getRequestURI().substring(request.getContextPath().length()); + if (path.equals("/preview")) { + if (!state.step.equals("identity")) state.error = ""; + state.step = "identity"; + } else if (!path.equals(pathFor(state.step))) { + return redirect(pathFor(state.step)); + } + var context = Map.of("step", state.step, "name", state.name, "error", state.error, + "action", switch (state.step) { + case "identity" -> "/preview/identify"; + case "verification" -> "/preview/verify"; + default -> "/preview/restart"; + }, "csrf", Map.of("name", csrf.getParameterName(), "value", csrf.getToken())); + return ResponseEntity.ok().header("Cache-Control", "no-store") + .contentType(MediaType.TEXT_HTML).body(shell.replace(SLOT, htmlSafeJson(context))); + } + } + + @PostMapping("/preview/identify") + ResponseEntity identify(@RequestParam(defaultValue = "") String name, HttpSession session) { + requireEnabled(); + synchronized (session) { + var state = state(session); + requireStep(state, "identity"); + if (name.isBlank() || name.length() > 64) { + state.error = "称呼须为 1 到 64 个字符。"; + return redirect("/preview"); + } + state.name = name.strip(); + state.error = ""; + state.step = "verification"; + return redirect("/preview/verify"); + } + } + + @PostMapping("/preview/verify") + ResponseEntity verify(@RequestParam(defaultValue = "") String code, HttpSession session) { + requireEnabled(); + synchronized (session) { + var state = state(session); + requireStep(state, "verification"); + if (!code.equals("123456")) { + state.error = "演示码不正确，请输入 123456。"; + return redirect("/preview/verify"); + } + state.error = ""; + state.step = "complete"; + return redirect("/preview/complete"); + } + } + + @PostMapping("/preview/restart") + ResponseEntity restart(HttpSession session) { + requireEnabled(); + synchronized (session) { + session.removeAttribute(STATE); + return redirect("/preview"); + } + } + + private void requireEnabled() { + if (!enabled) throw new ResponseStatusException(HttpStatus.NOT_FOUND); + } + + private static void requireStep(State state, String step) { + if (!state.step.equals(step)) throw new ResponseStatusException(HttpStatus.CONFLICT, "页面已过期，请重新打开预览"); + } + + private static State state(HttpSession session) { + var state = (State) session.getAttribute(STATE); + if (state == null) { + state = new State(); + session.setAttribute(STATE, state); + } + return state; + } + + private static String pathFor(String step) { + return switch (step) { + case "verification" -> "/preview/verify"; + case "complete" -> "/preview/complete"; + default -> "/preview"; + }; + } + + private static ResponseEntity redirect(String path) { + return ResponseEntity.status(HttpStatus.SEE_OTHER).header("Location", path) + .header("Cache-Control", "no-store").build(); + } + + String htmlSafeJson(Object value) { + // JSON in a script data block still participates in HTML parsing. + return json.writeValueAsString(value).replace("<", "\\u003c") + .replace(">", "\\u003e").replace("&", "\\u0026") + .replace("\u2028", "\\u2028").replace("\u2029", "\\u2029"); + } + + private static class State { + String step = "identity"; + String name = ""; + String error = ""; + } +} diff --git a/src/main/resources/META-INF/native-image/top.ddupan.iam/iam-login/reachability-metadata.json b/src/main/resources/META-INF/native-image/top.ddupan.iam/iam-login-manual/reachability-metadata.json similarity index 100% rename from src/main/resources/META-INF/native-image/top.ddupan.iam/iam-login/reachability-metadata.json rename to src/main/resources/META-INF/native-image/top.ddupan.iam/iam-login-manual/reachability-metadata.json diff --git a/src/test/java/top/ddupan/iam/login/IamLoginApplicationTests.java b/src/test/java/top/ddupan/iam/login/IamLoginApplicationTests.java index 1619289..abfb7d5 100644 --- a/src/test/java/top/ddupan/iam/login/IamLoginApplicationTests.java +++ b/src/test/java/top/ddupan/iam/login/IamLoginApplicationTests.java @@ -1,6 +1,7 @@ package top.ddupan.iam.login; import io.micrometer.core.instrument.MeterRegistry; +import java.nio.charset.StandardCharsets; import org.junit.jupiter.api.Test; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Qualifier; @@ -10,42 +11,114 @@ import org.springframework.boot.opentelemetry.autoconfigure.logging.otlp.OtlpLog import org.springframework.boot.opentelemetry.autoconfigure.logging.otlp.Transport; import org.springframework.boot.test.context.SpringBootTest; import org.springframework.boot.testcontainers.service.connection.ServiceConnection; +import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc; +import org.springframework.http.MediaType; +import org.springframework.mock.web.MockHttpSession; +import org.springframework.test.web.servlet.MockMvc; import org.testcontainers.grafana.LgtmStackContainer; import org.testcontainers.junit.jupiter.Container; import org.testcontainers.junit.jupiter.Testcontainers; import org.testcontainers.utility.DockerImageName; import static org.assertj.core.api.Assertions.assertThat; +import static org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.csrf; +import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get; +import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post; +import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.header; +import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.redirectedUrl; +import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status; -@SpringBootTest +@SpringBootTest(properties = "iam.ui-preview.enabled=true") +@AutoConfigureMockMvc @AutoConfigureMetrics @AutoConfigureTracing @Testcontainers class IamLoginApplicationTests { - // Field-based service connections are recreated by the test context in AOT mode. - @Container - @ServiceConnection - static final LgtmStackContainer grafanaLgtm = new LgtmStackContainer( - DockerImageName.parse(TestcontainersConfiguration.LGTM_IMAGE)); + // Field-based service connections are recreated by the test context in AOT mode. + @Container + @ServiceConnection + static final LgtmStackContainer grafanaLgtm = new LgtmStackContainer( + DockerImageName.parse(TestcontainersConfiguration.LGTM_IMAGE)); - @Autowired - OtlpLoggingConnectionDetails loggingConnectionDetails; + @Autowired + OtlpLoggingConnectionDetails loggingConnectionDetails; - @Autowired - @Qualifier("prometheusMeterRegistry") - MeterRegistry prometheus; + @Autowired + @Qualifier("prometheusMeterRegistry") + MeterRegistry prometheus; - @Test - void processCpuTimeCanBeRead() { - assertThat(prometheus.get("process.cpu.time").functionCounter().count()).isFinite().isNotNegative(); - } + @Autowired + MockMvc mvc; - @Test - void loggingConnectionUsesRunningContainer() { - assertThat(grafanaLgtm.isRunning()).isTrue(); - assertThat(loggingConnectionDetails.getUrl(Transport.HTTP)) - .isEqualTo(grafanaLgtm.getOtlpHttpUrl() + "/v1/logs"); - } + @Test + void previewHasInlineContextAndNoCache() throws Exception { + var result = mvc.perform(get("/preview")) + .andExpect(status().isOk()) + .andExpect(header().string("Cache-Control", "no-store")) + .andReturn(); + assertThat(result.getResponse().getContentAsString()).contains("login-context", "identity", "_csrf") + .doesNotContain("__IAM_PAGE_CONTEXT__"); + } + + @Test + void previewRejectsMissingCsrf() throws Exception { + mvc.perform(post("/preview/identify").param("name", "测试")) + .andExpect(status().isForbidden()); + } + + @Test + void previewChecksStepsAndEscapesScriptEndTags() throws Exception { + var session = new MockHttpSession(); + mvc.perform(post("/preview/verify") + .session(session).with(csrf()) + .param("code", "123456")) + .andExpect(status().isConflict()); + mvc.perform(post("/preview/identify") + .session(session).with(csrf()) + .param("name", "")) + .andExpect(status().isSeeOther()); + var html = mvc.perform(get("/preview/verify").session(session)) + .andExpect(status().isOk()).andReturn() + .getResponse().getContentAsString(); + assertThat(html).doesNotContain("") + .contains("\\u003c/script\\u003e"); + } + + @Test + void previewRetriesAndCompletesWithoutAuthenticating() throws Exception { + var session = new MockHttpSession(); + mvc.perform(post("/preview/identify") + .session(session).with(csrf()) + .param("name", "测试")) + .andExpect(redirectedUrl("/preview/verify")); + mvc.perform(post("/preview/verify") + .session(session).with(csrf()) + .param("code", "000000")) + .andExpect(redirectedUrl("/preview/verify")); + var retry = mvc.perform(get("/preview/verify").session(session)) + .andReturn().getResponse(); + assertThat(retry.getContentAsString(StandardCharsets.UTF_8)).contains("演示码不正确"); + mvc.perform(post("/preview/verify") + .session(session).with(csrf()) + .param("code", "123456")) + .andExpect(redirectedUrl("/preview/complete")); + mvc.perform(get("/").session(session) + .accept(MediaType.APPLICATION_JSON)) + .andExpect(status().isUnauthorized()); + assertThat(session.getAttribute("SPRING_SECURITY_CONTEXT")).isNull(); + } + + @Test + void processCpuTimeCanBeRead() { + assertThat(prometheus.get("process.cpu.time").functionCounter().count()).isFinite().isNotNegative(); + } + + @Test + void loggingConnectionUsesRunningContainer() { + assertThat(grafanaLgtm.isRunning()).isTrue(); + assertThat(loggingConnectionDetails.getUrl(Transport.HTTP)) + .isEqualTo(grafanaLgtm.getOtlpHttpUrl() + "/v1/logs"); + } }