aboutsummaryrefslogtreecommitdiff
path: root/internal
diff options
context:
space:
mode:
authorᴜɴᴋɴᴡᴏɴ <u@gogs.io>2020-09-20 11:19:02 +0800
committerGitHub <noreply@github.com>2020-09-20 11:19:02 +0800
commit3af91d7cfdb334e602d312743a89e64cd2d369ee (patch)
treec04a148917cdd9be878ca0e5fbcd552825c18df7 /internal
parentb836a56e6e823eecbce2dd99121a340418f1d5b7 (diff)
auth: decouple types and functions from db (#6320)
Diffstat (limited to 'internal')
-rw-r--r--internal/assets/conf/conf_gen.go10
-rw-r--r--internal/assets/public/public_gen.go8
-rw-r--r--internal/assets/templates/templates_gen.go26
-rw-r--r--internal/auth/auth.go196
-rw-r--r--internal/auth/github/config.go58
-rw-r--r--internal/auth/github/github.go50
-rw-r--r--internal/auth/github/provider.go57
-rw-r--r--internal/auth/ldap/config.go (renamed from internal/auth/ldap/ldap.go)136
-rw-r--r--internal/auth/ldap/provider.go78
-rw-r--r--internal/auth/pam/config.go13
-rw-r--r--internal/auth/pam/pam.go18
-rw-r--r--internal/auth/pam/pam_stub.go4
-rw-r--r--internal/auth/pam/provider.go54
-rw-r--r--internal/auth/smtp/config.go58
-rw-r--r--internal/auth/smtp/provider.go132
-rw-r--r--internal/context/auth.go142
-rw-r--r--internal/context/context.go3
-rw-r--r--internal/db/backup_test.go15
-rw-r--r--internal/db/errors/login_source.go33
-rw-r--r--internal/db/login_source.go342
-rw-r--r--internal/db/login_source_files.go60
-rw-r--r--internal/db/login_sources.go135
-rw-r--r--internal/db/login_sources_test.go63
-rw-r--r--internal/db/mocks.go6
-rw-r--r--internal/db/testdata/backup/LoginSource.golden.json4
-rw-r--r--internal/db/users.go94
-rw-r--r--internal/db/users_test.go51
-rw-r--r--internal/route/admin/auths.go139
-rw-r--r--internal/route/lfs/route.go5
-rw-r--r--internal/route/lfs/route_test.go5
-rw-r--r--internal/route/org/setting.go3
-rw-r--r--internal/route/repo/http.go3
-rw-r--r--internal/route/user/auth.go3
-rw-r--r--internal/route/user/setting.go3
34 files changed, 1095 insertions, 912 deletions
diff --git a/internal/assets/conf/conf_gen.go b/internal/assets/conf/conf_gen.go
index a5131285..099d82cf 100644
--- a/internal/assets/conf/conf_gen.go
+++ b/internal/assets/conf/conf_gen.go
@@ -384,7 +384,7 @@ func confAuthDLdap_simple_authConfExample() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "conf/auth.d/ldap_simple_auth.conf.example", size: 761, mode: os.FileMode(0644), modTime: time.Unix(1599160112, 0)}
+ info := bindataFileInfo{name: "conf/auth.d/ldap_simple_auth.conf.example", size: 761, mode: os.FileMode(0644), modTime: time.Unix(1600504559, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x79, 0x97, 0x7b, 0x30, 0x8a, 0x94, 0x93, 0xa7, 0x6e, 0xfc, 0x9e, 0x39, 0xc3, 0xd5, 0x90, 0x25, 0xb8, 0xb9, 0xf2, 0x85, 0xb4, 0x1f, 0xcd, 0x71, 0xf, 0xfa, 0x7b, 0x74, 0x8, 0x5c, 0x53, 0x7f}}
return a, nil
}
@@ -4584,7 +4584,7 @@ func confLocaleLocale_enUsIni() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "conf/locale/locale_en-US.ini", size: 69630, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "conf/locale/locale_en-US.ini", size: 69630, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xea, 0x6c, 0x8a, 0xc4, 0x1, 0x79, 0xc1, 0x39, 0xaf, 0x1, 0xfc, 0x47, 0x8e, 0x3c, 0xce, 0x35, 0x7f, 0xfb, 0x24, 0xd3, 0x26, 0xf0, 0xe3, 0x1a, 0x6d, 0xdf, 0x91, 0x92, 0xd8, 0x2a, 0x93, 0x95}}
return a, nil
}
@@ -4604,7 +4604,7 @@ func confLocaleLocale_esEsIni() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "conf/locale/locale_es-ES.ini", size: 74572, mode: os.FileMode(0644), modTime: time.Unix(1600268328, 0)}
+ info := bindataFileInfo{name: "conf/locale/locale_es-ES.ini", size: 74572, mode: os.FileMode(0644), modTime: time.Unix(1600500781, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x10, 0x8e, 0x14, 0x2e, 0xa, 0xdc, 0xf0, 0x4d, 0x11, 0x9e, 0x48, 0xe7, 0x7b, 0x3f, 0x84, 0x2d, 0xab, 0x25, 0x2a, 0x11, 0x4d, 0x20, 0x36, 0x49, 0xa8, 0xe3, 0x75, 0x85, 0x54, 0xac, 0x95, 0xa8}}
return a, nil
}
@@ -4884,7 +4884,7 @@ func confLocaleLocale_ptPtIni() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "conf/locale/locale_pt-PT.ini", size: 73358, mode: os.FileMode(0644), modTime: time.Unix(1600268328, 0)}
+ info := bindataFileInfo{name: "conf/locale/locale_pt-PT.ini", size: 73358, mode: os.FileMode(0644), modTime: time.Unix(1600500781, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x9e, 0x9, 0x9c, 0xec, 0x51, 0x68, 0x0, 0xab, 0xc1, 0xa2, 0xcf, 0x1b, 0x9, 0xca, 0x7b, 0xbb, 0x3a, 0x38, 0x50, 0x3e, 0x29, 0xc4, 0xbe, 0x84, 0xc, 0x43, 0x35, 0xe8, 0x34, 0x20, 0x31, 0x72}}
return a, nil
}
@@ -5004,7 +5004,7 @@ func confLocaleLocale_ukUaIni() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "conf/locale/locale_uk-UA.ini", size: 100902, mode: os.FileMode(0644), modTime: time.Unix(1600268328, 0)}
+ info := bindataFileInfo{name: "conf/locale/locale_uk-UA.ini", size: 100902, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb9, 0x96, 0x2f, 0x7f, 0x77, 0x58, 0xac, 0x25, 0x18, 0xbb, 0xe2, 0x9f, 0x19, 0x24, 0x75, 0x81, 0xf0, 0xb2, 0x61, 0x12, 0xad, 0xf6, 0xa9, 0xe7, 0xdc, 0x78, 0x4b, 0x98, 0x5c, 0x58, 0x24, 0xc1}}
return a, nil
}
diff --git a/internal/assets/public/public_gen.go b/internal/assets/public/public_gen.go
index f5753bdc..11aef277 100644
--- a/internal/assets/public/public_gen.go
+++ b/internal/assets/public/public_gen.go
@@ -924,7 +924,7 @@
// ../../../public/img/favicon.png (40.432kB)
// ../../../public/img/gogs-hero.png (35.001kB)
// ../../../public/img/slack.png (4.35kB)
-// ../../../public/js/gogs.js (47.795kB)
+// ../../../public/js/gogs.js (47.827kB)
// ../../../public/js/jquery-3.4.1.min.js (88.145kB)
// ../../../public/js/libs/clipboard-2.0.4.min.js (10.754kB)
// ../../../public/js/libs/emojify-1.1.0.min.js (13.252kB)
@@ -19886,7 +19886,7 @@ func imgSlackPng() (*asset, error) {
return a, nil
}
-var _jsGogsJs = "\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x7d\x7f\x77\x1b\xb7\xb1\xe8\xff\xfa\x14\xc8\xda\x2f\x26\x2b\x72\x29\x25\x4d\x6f\xaf\x64\xb9\xc7\xf1\x8f\x5b\xb7\x76\x9a\x1b\xdb\x6d\xef\x73\x54\x1f\x70\x17\x24\x11\x2d\x81\x2d\x80\x95\xac\xa4\xfa\xee\xef\x60\xf0\x63\x01\x2c\x96\xa2\x9c\xb4\x37\x79\xa7\x3e\xa7\x8d\x88\x1d\x0c\x80\xc1\x60\x66\x30\x18\x0c\x8a\x4e\x12\x24\x95\xa0\x95\x2a\x4e\x0f\x0e\x2e\xb1\x40\x95\x14\xab\x53\xf8\x4b\x76\xcb\x4e\x34\xa7\x07\x07\xab\x8e\x55\x8a\x72\x86\x28\xa3\xea\x09\xdf\x6e\x09\x53\x5f\x0b\x72\x49\xc9\xd5\x1b\xbc\x9c\xdc\x5f\x71\xb1\x9d\xa2\x1f\x0e\x10\xd2\xd5\xee\x2b\xbc\x7c\x45\x58\x87\xce\x10\x7c\x29\x57\x94\xd5\x93\xa2\x54\x78\xd9\x35\x58\x94\x5b\xc2\xba\x62\x7a\x7a\x80\x3c\xa4\x83\xa0\x8a\x6c\x8b\xa9\x06\x9c\x44\xdf\x0f\x10\x42\xc8\x00\x3d\x00\xa0\x77\x35\x56\x78\xae\xf0\xf2\xac\x78\x80\x0e\x7b\x3c\xba\x78\x52\xb4\xa6\x6b\xc5\x14\x1d\xa2\x07\xc5\xf9\x83\xa9\xa9\x5f\x35\xb4\xba\x98\xb8\xb1\x4c\x4c\x87\xf5\x3f\xd3\xe9\x0d\x95\xba\xc7\x13\xfd\x07\xb4\xae\xff\xdd\x2f\x5b\x2e\xd5\xc4\xfe\x42\x06\xcc\x36\xd3\x89\xa6\x98\xce\xfc\xa7\x1f\xfc\x5f\x08\xbd\xd7\x44\x3c\x01\x52\xce\x82\xe2\x2d\xaf\xc9\x09\x2a\xd6\xab\x6d\x11\x16\x57\x9c\x29\xf2\x41\x9d\x44\xd8\x6d\x61\xd8\x02\x42\x16\x4c\x53\x35\x28\x75\xb4\x89\x8a\x10\x7a\xa0\x09\x59\x4a\xb2\xd6\xd3\xb5\x9b\x62\x57\x82\x2a\xe2\xe8\x05\xad\x60\x41\xf0\x83\x08\xe1\x34\x6e\xf1\x12\x37\x93\xbe\xe8\xa6\xef\xa5\x27\xb0\x46\x3d\x8d\xc8\x02\x84\xb6\xb3\xf3\x35\x66\xa4\x89\x59\xe4\xe0\x23\x7b\x9f\xce\x77\x80\xc7\x4f\x24\x4c\x5e\xd8\x74\xb9\x51\xdb\xc6\xf4\x31\x84\x21\x5b\xfe\x1d\x5d\x5d\x97\xa2\x63\x93\x08\xfe\xdd\xd1\x79\x8c\x0c\xda\x45\x15\xaf\x49\x31\x43\x03\xd0\x92\xe0\x6a\xd3\x33\x1b\x9d\xa1\x65\xc3\xab\x8b\x98\x1e\x08\x6d\x9a\xef\x64\xb9\xa1\xeb\x4d\x43\xd7\x1b\xf5\xa5\x06\x99\x18\xc0\xb0\xad\x9b\xe0\xd7\xcd\x41\x34\x32\xfd\xe9\x00\xa1\x65\xa7\x14\x67\xf2\x89\x66\xf1\x3f\xb1\x67\x4c\x11\xa1\x97\xd0\x8d\x59\xd2\xb6\x73\xcf\x69\x43\x5e\xf1\x9a\xc8\x74\x49\x3f\xab\xe9\xbf\x64\x3d\x87\xf3\xff\x06\x2f\x35\xc2\xa8\xc6\x81\x99\xf8\xbb\xaf\xf0\x03\x4b\x0f\xba\x42\x93\xa0\x81\xb2\x21\x6c\xad\x36\x8e\xe8\x29\x19\x74\xfb\x01\x70\x84\x7a\xbe\xa2\x0d\x99\xeb\x05\x2b\x8b\x69\x29\xdb\x86\xaa\x49\x31\x2b\x2c\xd5\xc3\x6a\xff\xfb\x62\xe5\xdf\xf2\xe3\xdf\xf2\xe3\xc7\xc8\x0f\x5d\x78\x93\x11\x09\x4f\xe9\x6a\xf5\x73\xd4\xef\x35\x5d\xad\x7e\x7e\xca\x1d\x16\x1c\xfb\xc5\x2f\x2f\x4d\xdc\xaf\x7f\xf2\x25\x16\x4d\xd9\xe8\xfa\x4a\xdb\xde\x67\x8d\xa5\x75\xe2\x75\x96\xe1\xf6\x1c\xa7\x3f\xe7\x62\x6b\x79\x06\x54\xc8\xa4\x28\x49\x4d\x55\xa9\x07\x5e\x4c\xad\x1a\x41\x67\x67\xe8\xc8\x51\x4c\x10\xd5\x09\x66\xd6\x8e\xae\x95\xd1\xa2\x31\x12\xa3\x9f\xd2\x95\x35\x80\x49\x7b\x67\xad\xed\x4c\x07\x2b\xf3\xe5\x6e\x7d\xcc\x18\xef\x03\x54\xc6\xa2\x58\x2c\xd0\x4b\xbc\x24\x8d\x74\xab\xbe\xa1\x52\xc1\x1a\x2a\xca\x8e\x96\x0d\x7c\x2b\x75\x61\xd1\xeb\x76\xc6\x5f\x93\x86\x54\x00\xa7\x3f\xb9\x85\xcf\xf8\x5c\xc2\x87\x00\x16\x30\x38\x39\x32\x29\x4a\x03\x30\x87\x62\x14\x08\x11\x0d\xbc\xc1\x12\x3a\xf3\xb6\xad\xb1\x22\x8f\x0d\x79\xce\x02\x1c\x96\xcd\x30\x7c\x29\xa6\x9a\x0c\x45\x07\xc0\x05\x8c\xc6\xd3\xd4\x14\xbe\x90\xb2\x23\xaf\x88\xc2\x93\x4e\x34\x33\x64\xaa\xcd\x10\xad\x1d\xe9\xac\x68\x80\xaf\x6e\x89\x64\xd6\xbd\xa9\x78\xe2\x10\xd8\x52\x5a\x9f\x20\x5a\x47\xe2\xd5\x10\xf4\x71\x5d\xa3\x4f\xd9\x52\xb6\xa7\x48\x71\xa4\x25\x3c\xea\x98\x19\x37\xa9\x91\x19\xb9\xe2\xe8\x82\x90\x16\xbd\x7d\x81\x1a\xce\x2f\x24\x5a\x73\x5e\x97\xa6\xfe\x1b\x2d\xc6\xe4\x86\x77\x4d\x8d\x96\x04\xe1\xba\x26\x35\xaa\xa9\x20\x95\x6a\xae\x75\xcd\xdf\xbf\x79\xf5\x52\xdb\x82\x48\xf2\x2d\xd9\xf0\x2b\xf4\x5d\x27\x15\x5a\x13\x85\xc8\xb6\x55\xd7\xe8\xa1\x6c\x31\x7b\x84\x38\x43\x20\x11\x5b\xbc\x26\x1a\x75\x4f\xc7\x40\x12\x1b\x71\x7d\xc2\xb8\x9a\xf4\xf3\x37\x45\x25\xaf\x14\xad\x38\x33\x1f\xec\x8f\x79\xb5\x21\xd5\xc5\xb4\xb0\xc2\x38\xd6\x5d\xbd\x90\xb1\xf2\xd7\x2c\xeb\xc2\x50\xa2\x88\x14\x51\x30\xa3\x3b\x3a\x51\x4c\xc7\xe4\xbd\x59\x1c\xb6\x15\x2c\x9f\x34\x58\xca\x49\x01\xbd\x23\x75\x31\x1d\x76\x45\x90\x2d\xbf\x24\x29\xdc\x69\x0c\x75\x10\x0b\xf2\xc2\x0d\xbb\x08\xbe\x44\x88\x22\xb2\x84\x50\xb9\x91\x9b\x5e\xe7\x58\x3c\x14\xcf\x29\xe3\x86\x72\x33\x5d\x06\x06\x76\x9e\xe8\x30\x84\x8a\x9a\x28\x5c\x6d\xa2\xcd\xa7\x23\x84\xa9\x49\xeb\xa0\xb7\xbe\x7f\x46\x8a\xde\x20\xd2\x48\x32\xa0\x20\xae\xeb\x9f\x80\x7c\x3d\x96\x5b\x68\xf7\xbf\x40\x35\xac\x7e\x0c\xd5\x0e\xe0\x3f\x5a\x8a\x41\x83\x2f\x6a\x6d\x89\x14\x85\xdd\x48\x44\x14\x2a\x5b\x2c\x08\x53\x5e\x71\xc7\x76\x93\x2b\x1c\x5b\x5d\x77\xe0\x7e\xfd\xcf\xf7\xe6\xf0\x2c\x33\x1c\x74\x88\x8a\x59\x11\x1b\xac\x29\x94\x5d\x8e\x5c\x14\xd3\x64\x21\x6d\x68\x4d\x8a\x50\x0d\xc7\xac\xb3\x07\xba\x9e\x1f\x06\xb8\x1c\x79\x6d\x99\x1e\xb4\x1b\x4b\x4e\x0b\xa2\x5e\x2d\x8d\x77\x32\xe5\x6d\x5f\x23\xdf\x8f\x1b\x3b\x79\x63\x7c\x9e\xcc\x23\x42\x29\xa3\x4c\xc1\x40\x73\xdd\xb6\x58\x8d\xbe\x46\x2b\xdc\x48\x02\x6a\x63\x44\x24\x7a\x41\xe8\x0c\xea\x1d\xc2\x70\xf7\x02\x49\x97\xc7\xee\x35\x81\x8a\xaa\x21\x58\x14\x33\x54\xf4\x84\xf8\x27\xb0\xf1\x7e\xb2\x79\x48\xf6\x5d\x02\x66\x5f\x09\x3d\x2a\xa3\xad\xa3\x05\xc5\x86\x8d\x9d\x80\xdb\x14\xde\x08\x17\x39\x6f\xc2\xed\xfc\xf9\xa3\x59\xcd\xce\x98\x1d\x85\x37\x87\x0c\x1f\xbd\x50\x64\x3b\x31\x7f\xbe\xa7\xf5\x0c\x51\xd6\x76\xfa\x2f\x37\x10\xb0\xd7\xb6\xce\x54\xf3\x80\x5a\x46\x84\x96\x5a\xce\x50\x2c\xd0\x21\x8a\x2a\x04\x26\xa3\xb7\xed\x52\xb3\x6e\xbb\x87\x45\x87\x2c\xd8\x47\x99\x09\x7b\xd1\x31\xc7\xb5\x3b\xf9\x76\x84\x73\xbd\x81\xa7\xc7\x72\x19\xcb\x32\xc7\x54\x39\x56\x19\xad\x67\xd7\xf5\xbe\x3a\x2f\x24\x67\xb2\x9e\x8b\x59\x46\xf4\x27\x0a\x0c\x21\x79\x45\x55\xb5\x41\x93\x94\x2d\xf4\xbf\x0a\x4b\x82\x8a\x7b\x5b\xda\x10\xa9\x38\x23\xef\x69\x5d\x9c\x44\x5a\x96\x4a\x95\xd9\x0c\x3b\x7b\x9f\xd4\x45\xb2\x73\x85\xe5\x97\xee\x95\x1f\x62\x54\x69\xaa\x9c\x15\x30\x1d\x68\x23\xc8\xea\xec\x01\x3a\x4c\xe0\x52\xc5\xac\xc1\xb4\x2e\x1b\x80\x15\x8f\x8a\x1d\x95\xf5\x0e\x7b\x92\xad\xf6\x70\x81\x1f\x15\xf1\xbe\x3b\xd4\x91\x4b\x41\xf0\xc5\x69\x4a\x1c\x2c\x25\x5d\x33\xf2\xcb\xa6\xcd\x83\x87\x74\xbb\x76\x0d\x75\x14\xe1\x4b\xac\xb0\x40\x74\x8b\xd7\xa4\x40\x52\x54\x7b\x34\x69\xea\xfc\xab\x26\xe4\xc6\xaf\xac\x71\x41\x84\xc2\xad\xe9\xa8\xd1\x71\xbf\x67\x7d\x10\xa6\xa3\x6b\xc6\x4b\xf4\xed\x47\xa8\xeb\xbb\x0a\xa5\xa1\xb8\xfb\xa7\x0b\xa9\x9f\x54\xf2\x04\xa6\xfc\x8d\x97\x82\xa1\x72\xed\x57\xc1\xc0\xf6\x1f\xf3\x2e\xec\x32\x43\xd3\x59\x2c\x8a\xc4\x07\x6a\x36\xd9\xaf\x9c\x28\x43\x98\xd5\xc8\xad\xdd\x03\x14\xea\x4a\xef\xad\xf0\x72\x4f\x8f\x27\x96\x82\x80\x34\x57\xc7\xa1\x84\x2a\xa1\x6c\xc8\xb8\x7f\xbe\x21\x2d\x97\x54\x71\x71\x9d\x78\x7f\x84\xff\xb0\x97\xef\x27\x42\xfa\x9c\x36\x8a\x88\xd7\x04\x8b\x6a\xf3\x54\xf0\xb6\xe6\x57\x6c\xe2\x8c\xef\x48\xe7\xd7\xf6\x6b\xa0\xf7\xb9\x70\x3c\xee\x3e\x96\xee\x8f\x89\xe3\x84\x55\xd7\x34\x6f\xc8\x07\x65\x9a\x38\x41\x4a\x74\xc4\xed\x9e\x38\x7b\xb2\xc1\x6c\x4d\x4e\x7a\x4f\xa4\x5e\xdd\x33\x74\x89\x9b\x8e\xcc\xd0\xfd\x6a\xc3\x69\x45\x42\xb6\xba\xa2\xac\xe6\x57\x65\xc3\x2b\xac\xe1\x4b\x2d\xb9\x74\x8f\x0c\x64\xe8\xb0\x0d\x44\x2f\x67\x92\x37\xa4\x6c\xf8\x7a\x92\x01\xec\x39\xcf\xf5\x6b\x4b\xa4\xc4\xba\x5b\x3f\x20\xc6\xbf\x21\xb2\x6b\x94\x3c\x09\x07\x09\x95\x19\x9f\x0b\xf3\xad\x98\xba\x0d\x5e\xc4\x3d\xcf\x69\x43\x10\x48\x16\xcd\x3d\x15\xdf\x6e\xa9\x92\x76\xde\x0e\x9c\x34\xea\x27\xaf\x5c\x51\xdd\x49\x30\x89\xdc\x34\x3e\x42\x47\xe8\x1f\xff\x00\xe0\x08\xd4\x22\x2b\x02\xb8\x03\x84\xbc\xb1\x3f\x36\xb1\x45\x59\x6d\x38\x97\xa4\x14\x64\x45\x04\x61\x15\x41\x7e\xc6\x0a\x6f\xd4\x42\xaf\xec\xf7\xb2\xe2\x4d\xb7\x65\xbb\x25\x55\x0e\xad\xac\x04\x6f\x1a\xca\xd6\xd6\x28\x2c\x2b\xbd\x0a\x6b\x2a\xdb\x06\x5f\x6b\x76\x67\x7a\xa5\x04\x0b\x32\x87\xc4\x9c\x5a\xc5\x0b\x79\xd9\x60\x6d\xa5\xf7\x15\x63\x09\xac\xb0\x58\x13\xa5\xb7\x8d\x69\x83\x70\x16\x72\xbb\x43\xc2\xb4\xd9\x17\xf7\x8a\x20\x69\x39\xdd\xa2\xa5\xd3\xff\x17\x7a\x41\xb3\xab\xb4\xbc\xa2\x17\xb4\x34\xc7\x4c\xc1\x04\xee\x3f\x7b\x2d\x5e\x27\x13\xd7\xb7\xfa\xa7\x56\x4f\x8f\xcc\x37\x2c\x89\x52\x94\xad\x65\xc9\x0d\x54\xb6\xfd\xfb\x93\xe2\x9e\xae\xf3\x9e\xe1\x2d\x29\xa6\xe5\x05\xb9\xee\xda\xd1\xe3\x94\x56\xf0\x6d\x6b\x6d\x7c\xa8\x36\xd7\xd5\xe6\x15\x2c\xec\xb9\xf9\x1a\x9b\xab\xbb\xf6\x6c\xf1\x51\x05\x42\xa5\xe2\xaf\x95\xa0\x6c\x9d\x96\xbe\xe4\x57\x44\x3c\xc1\x92\x4c\xa6\xe8\x93\xb3\x5d\x28\x0d\x5b\xf8\x9e\x15\x77\x45\x6f\x3f\x44\x9b\x52\x33\xac\x52\x6e\xf8\xd5\xa4\x17\x1f\xa9\x63\xc3\x81\x69\xd5\x33\x49\x5d\x41\xd1\xa4\x7d\x29\x30\xab\x36\xe4\xb6\x59\x5b\x5a\xb0\xbb\xb2\x4d\x2b\xb8\x02\xed\x39\x77\x18\x52\xee\x31\x0b\x90\x30\xbc\x6c\x60\xd2\x34\x38\xb8\xc1\x5d\xd9\xd5\x86\x2a\x62\x65\x93\x99\xdb\x1c\x47\xe8\xce\xc3\xc1\x99\xdd\xa1\xc7\x3b\xf9\xb1\x85\x1a\x2d\xef\x9a\x4a\xdd\x60\xb0\xb9\x1f\xd2\x75\x14\x53\xbf\x56\x33\x68\x32\x74\xf7\xa7\x1a\x19\xaa\x9b\x53\x8d\x2c\xa9\x17\x0b\xf4\x44\x10\xac\x88\x71\x9c\xf5\x3a\x92\x91\x2b\x40\xe9\x4f\xcb\xb4\x45\x42\xae\xcc\x41\x86\x3b\x1d\x0b\x29\xde\x7f\x34\x51\x1b\x3b\xe5\x6c\x84\x3d\x62\xbe\x9b\x2c\x4a\xdb\x1e\x2a\x2b\xcc\x2a\xd2\xdc\x01\x77\xc8\xb1\x37\xa1\x5e\xa8\x78\xc3\xc5\xbc\xa5\xd5\x05\x11\x7b\xf8\x3a\xb6\x94\x51\xa8\x22\x73\x3d\x6d\x05\x31\x1f\x91\xc1\xbb\xab\x83\x10\x8d\xa6\x81\xde\x6f\xc8\x07\x94\x7a\x29\x4d\xb7\x36\xe4\x43\xa2\x50\xe2\xde\x6a\xe1\xe2\x71\x44\x80\x7d\x3f\xe7\xf2\x0a\xab\x6a\x33\xf7\x1d\x02\xc1\x8f\xab\x8b\xb5\xe0\x1d\xab\x6d\xf9\x0c\xa5\x78\xc2\x71\x91\x9a\xda\xb3\xab\xf9\x1e\xb3\x3a\x29\xee\x19\xd8\x2d\xaf\x71\x33\xd7\xb6\xdf\xee\x8d\x45\xda\x08\xea\xa7\x7c\x0e\x56\x6d\x16\x81\xa2\xaa\x21\x3b\x70\x64\x68\x95\xa1\x71\x82\x60\x37\xdd\xfc\x82\xcd\x10\x30\x95\xd8\x71\x23\x4e\xe6\xe6\x3b\x5b\x02\xa5\x42\x1d\x0d\x05\x93\x70\x63\xc3\xd9\xe3\xb6\x15\xfc\x32\xb4\x2d\xd3\x80\x89\x04\xab\x3d\x3c\x95\xdd\x72\x4b\xd5\x24\x0e\x9a\x08\x36\x40\x69\xab\x85\x5e\x88\xfb\x5b\x05\x7e\x4b\x31\x22\x76\xfc\xbe\x21\x27\x7a\x6e\xf2\x75\x18\xb9\xea\xeb\x65\x25\x96\xb1\xe0\xb1\x22\x66\x82\xad\x68\xf2\x75\xca\xfe\x93\x97\x4e\x7d\x11\x7c\x55\x74\x6b\x7f\x7a\x3a\x37\x98\xad\x4f\x52\x40\x3c\x29\x74\x79\x7f\x6c\x42\x59\x43\x19\x89\x0d\xff\x1e\xd9\x89\xa1\x94\xfb\x20\x15\x16\xea\x29\x56\x24\x87\x17\x3e\xce\xc1\xed\xe7\xb1\xeb\x49\xc3\xb6\x46\xf1\x3f\xf3\xed\xbc\x2e\xfa\xdd\x85\xf1\xa4\x9a\x8f\x9e\x0b\x2a\x15\x6b\xa5\xe2\x5e\x4d\x70\xad\xfb\xe8\x44\x84\x82\x01\x3f\x07\xcc\x13\x8b\x34\xf5\x84\x05\xeb\xfd\x1e\x78\xc2\x6d\xbf\x76\x2f\xf4\xa4\xa5\x62\x7f\xb6\x81\x8d\xf4\x08\xcb\x68\x4b\xb2\xa4\x1a\x60\x4c\x5b\x3d\xab\xa9\x42\x00\x81\x40\x0e\xf4\x3c\x01\x85\x6f\x74\x99\x35\xe1\xa0\x60\x6e\xa5\x45\xe0\xc9\xd5\x0b\xe5\x85\x96\x2e\x16\x0e\x16\x0e\x80\x79\xa1\x63\x0c\x68\xfb\xab\xaf\xaa\x21\xa1\x85\x37\x7c\xbd\x86\x76\x72\xd4\xe9\x3b\x52\x2a\x80\x9b\x44\xab\x9f\x71\x35\xa7\x6c\xae\x71\x15\xd3\x1c\x44\xae\x43\x39\x44\x3b\x90\xf8\x21\x96\x2b\x5e\x75\x72\xb2\x6b\x72\xfa\xd9\xef\xdb\xf5\xb3\x9f\x8c\x38\x64\x15\xd0\xc4\xf3\x3b\xd5\x91\xf8\x92\x44\x35\x6c\xaf\x46\x2a\xc6\x5f\x47\xcf\x06\x43\x27\x50\x3f\x70\xb0\xbf\x43\x1f\x82\xdb\x7d\xe6\x21\x35\x48\x34\x73\xe0\x9b\xf3\x15\x12\x5f\x53\x5c\x79\x58\x2f\x12\xb9\x43\x9a\xa3\xd0\x39\x34\x8c\xd8\x4a\x55\xc9\xd8\x11\x6e\xac\x03\x46\x02\xb8\x90\x59\x27\x27\x83\x11\x87\x4a\x21\xac\xb0\x23\x94\x6a\x30\x72\x0d\x52\x02\xfe\x68\xc4\x68\x48\xca\x11\xc8\x5e\x1d\x05\xc5\x39\x82\x79\xdb\x2d\x96\x01\x5c\x20\x1b\xe6\xe3\x22\xd5\x62\xdb\xc5\x16\xde\x66\x8f\xdd\x77\x06\xe6\xd9\x3e\xde\xca\x7d\x4a\x18\xf0\xc1\x69\xd8\x86\xee\xd0\x13\xd3\x9f\xff\xcb\x19\x48\x29\xdb\xac\xdb\xb0\x87\x5d\x9e\x7f\x1f\x79\x15\x00\x83\x20\xac\x26\xc2\xe2\xc8\xd4\x37\xdf\xfb\x41\xc7\x95\xf1\xd5\x8e\x9a\xf8\x6a\xa4\x9a\x8b\xcb\xf3\xde\xd2\xc5\x02\xbd\x26\xaa\x6b\x11\x23\x57\x28\x08\x0a\x04\x71\x9e\x8c\xd1\x78\x38\xb3\xae\x3c\xcf\x4d\x03\x70\x2f\x8a\x1c\x25\xac\x39\x63\x70\x85\x27\xa5\xae\x6f\xc3\x01\xb9\x2f\x45\xef\xe5\x85\x9e\xff\x17\xbd\x24\xd0\x71\x08\x3e\x5c\xd8\xf8\x54\xe4\xa2\xfc\x90\xde\x57\x23\xc5\x51\x4d\xa5\xde\xa8\x76\x54\x6e\xd0\x4a\xf0\x2d\xe2\x6a\x43\x84\xf4\xa8\xd2\x09\xd5\x2a\x56\xf7\x22\x1d\x90\x25\x6f\x47\x93\x68\xb4\xd3\x18\x53\x10\x7b\x9a\x20\x1d\x0f\x43\x75\x34\xb0\x11\x89\x58\x29\x31\x29\x60\x20\x26\xb0\x72\x36\xec\x4d\x14\x77\x79\x0b\x12\x17\x3e\x3c\x8a\xc6\xc7\x17\x67\x10\x85\x2e\x08\x3b\x00\x68\x35\x3d\x76\x44\x28\x6c\x52\xe1\xe5\xc7\xf4\x3a\xd3\x98\xed\xdb\x8f\x68\x2e\x3b\xba\x64\x6e\x46\x47\xe9\xb7\xc7\x3f\xd1\x40\x6f\x6f\xd7\x0d\xf8\x47\xb5\x1c\x8e\xb9\xd7\xb0\xf9\xf8\xca\xa4\x4b\x61\x8d\xb1\x45\x60\x2c\x86\x3d\xdc\x03\x80\x24\x92\x75\x89\x7f\x2a\xdb\x4a\xec\x9b\x8a\xc3\xc3\xc7\xba\xa4\x0d\x92\x7f\x7a\x87\x42\x98\x81\xa6\xcf\xd4\xdb\xad\xf4\x53\xb5\xbf\x43\xf1\x87\xd1\xdb\x4e\x20\x1a\xdd\x9f\x85\x83\x4b\x14\xf9\xce\xf8\x6b\x17\x51\xbd\x9b\x18\xcd\x4e\xc3\xc1\xe8\x07\xb0\x02\x46\x94\xc1\x08\xa1\xbd\x4a\x60\x3c\xd0\xe6\x03\x5d\x60\x7b\x34\x8c\xc8\x1a\x47\x0a\x9d\xb1\x28\x07\x98\x92\x78\xec\xa8\x7a\x7a\xe9\xc1\x36\x11\x5f\x7d\x18\xd4\xd8\xf3\xee\x83\xf9\xb7\xdf\x0d\x08\x3b\xe8\x21\x19\x0e\xc6\x7e\x65\xd7\xc7\xd0\x2d\xb9\x9f\x62\x75\xe8\x03\xc3\x60\xc3\x53\xd5\xaa\xb5\xaa\x39\x34\x6a\xaf\x91\xc0\x57\x8e\x27\x11\x96\x88\x11\x52\x93\x3a\xdc\xb4\x84\xac\x17\x2f\xb1\x74\x06\xa3\xd5\x0e\xb6\x47\xcc\xe2\xa3\x36\x47\x04\x16\x58\x45\xa9\xe9\xee\x0f\xda\x7d\x85\xdb\xf7\x52\x81\x91\xfa\x94\x34\x44\x11\x67\x9d\x7a\xab\xb4\x86\xe2\xb9\x2d\xbe\xd5\x2e\xcd\x5f\xf1\xd0\xc3\xad\x38\x5b\x51\xb1\x9d\x84\xd7\x3b\x1a\x5e\x61\x70\x8d\x45\x03\x36\x32\x67\x78\x0d\x64\xec\xfa\x47\xc0\x21\x65\xcd\x59\xd6\x3d\x6e\x87\x73\xaf\x80\x4b\x11\xe1\xfd\x2c\x18\x17\xf8\xfe\x9c\x3b\x3c\x2f\x94\x6f\xf6\xa2\xa2\x39\x55\x45\x52\x61\xd5\xc9\x7e\x0b\x6f\x7e\x7f\x09\x82\xdb\xee\xe2\x4d\x91\x77\x53\x06\x1b\x55\xdb\x25\x6d\x78\x21\x30\xb1\xdf\x1b\x06\x1e\x3f\x0e\x0a\x23\x4e\x77\x33\x53\xd8\x11\xc3\x40\x71\x91\x77\xf7\xa8\x4e\x86\x9e\x97\xc1\x8a\xbb\x0b\xa2\x39\x06\xef\xa3\xe5\xa0\x31\x77\x4e\x54\x7d\xa7\x2f\xc7\x75\xcf\xac\x88\xf1\x66\x2f\x71\x13\x7b\x4d\x23\xda\x0e\x1c\x8e\xb1\xdb\xe7\x29\x5d\xad\xf2\x4e\x1f\x73\x8b\x66\xcc\xd5\x57\xf1\x8e\x29\xef\xe7\xd3\xb0\x73\x5b\x54\x04\xa1\xb2\x0e\xcc\x63\x39\x43\xc7\xc1\x20\xdd\xd7\x81\x08\xd6\x06\x62\x38\xa1\xc6\x93\xa4\x08\x18\xf3\x13\xf8\x1a\x9b\xea\xb8\xae\x5f\x52\xb3\x79\xd3\x5f\xad\x54\x94\x2d\x66\xe6\xaa\x50\x43\x19\x39\x2f\x71\x5d\x17\x6e\xf7\x6e\xbc\x64\x31\x96\x9a\x34\x7b\x60\xa9\xe1\xa4\x63\x1c\x0b\xae\xeb\xaf\x89\xa8\x60\x47\x17\xac\xcb\x49\x8b\x85\x24\xcf\x1b\x8e\xd5\xc4\x76\x77\x8a\x16\xf9\xe2\x43\x14\x94\xda\x5e\x69\xf1\xf1\xab\x00\xdf\xf1\xd1\x51\x60\x49\x05\xfd\x2d\x97\x58\x20\x3b\x56\x38\x5d\xb8\xa2\xb5\xda\x14\xb3\xb0\x63\x87\xa8\xf8\x3f\x71\xb8\x29\x0a\x03\x6c\xed\x8c\xc2\xb5\xd4\x25\xff\x80\x4a\x3d\x4e\x39\x67\xdd\xce\x88\xa2\x70\x7d\x1a\xe3\x96\x26\x81\xe0\x23\xc1\x15\x56\x60\x0d\xaa\x0e\x97\x90\xed\x9f\xc1\xe3\x3d\x51\x9c\x4d\x8a\x0d\x96\x1b\x73\x6e\x58\xcc\x7a\x9b\x87\x24\xae\xd8\xfc\xb8\xb4\x71\x50\xba\x58\xa4\xf8\xb4\x70\x18\xa1\xa4\xa7\x58\xf3\xe1\x60\x2c\x58\x6e\xca\x2d\x56\xd5\x66\xb2\xf8\xdb\x3d\x68\xa7\x3c\xbc\xbf\x08\x6a\x6a\xfa\x6c\x53\x61\xbd\xd5\x46\x48\x64\x18\x94\x92\x2e\x1b\xca\xd6\x72\x52\x04\xfd\x4b\xa3\xf3\xfa\x93\xc8\x4c\x10\x95\x9f\x57\x47\x21\x25\xe8\x7a\x4d\x44\x44\xa6\x48\x0e\xfc\x77\x47\xab\x0b\xe3\x1d\x07\xbb\xa0\x17\x04\x68\xc3\xb7\xe4\xa0\x3f\xb5\x9f\x57\x0d\x67\x64\x2e\xe5\x66\x9c\x17\xe0\x6c\x0c\xc0\x40\xa7\x59\xc9\x19\x79\xcf\x1a\xca\x2e\xbc\xd8\x4a\x70\x9b\x4a\xc3\x13\xa2\xa4\x4e\x1a\xc3\xba\x6c\x3a\x52\xe4\x31\x6e\x94\x6a\xe5\x30\xd0\xa3\x87\x07\x1d\xfd\x5a\x71\x81\xd7\x7a\xa3\x68\xa3\xa8\x02\x0c\xad\xe0\x8a\x57\xbc\x29\x66\xa8\x80\xb1\x9f\xf6\x41\xf3\xf9\xb6\x7e\x29\xb4\x31\x33\xf9\xd3\x50\xc6\x8e\x7d\x94\x36\xa6\xf7\xa3\x94\x31\xbd\x36\xb1\x5f\x13\x8f\xc5\x70\xe8\xd7\x5d\xd3\x20\x41\xfe\xde\x11\x88\x63\xcd\x68\xac\x8a\x6f\x5b\x2c\x48\xd9\x76\x4d\xf3\x91\x81\x2f\x26\x7c\x61\x18\xfa\x32\x7e\x2c\x32\xda\x58\x78\xd7\x71\x4b\xc4\x9a\x94\x5a\xe2\xc0\xc9\xc1\x3b\x86\xb7\xe4\x0c\x0a\xdf\x4b\x75\xdd\x90\xf3\x5b\x83\x1e\x22\xbb\x07\x9d\x9d\x9d\xa1\xa2\x82\x08\x81\xf7\x06\x8d\x89\xd7\x2a\x52\x71\x67\x8a\xcb\x9a\xc8\x4a\x50\x08\xc9\x29\x57\x94\x34\x5a\x35\xdc\x16\x5b\xb2\xbb\xf6\xae\x90\x93\x34\xae\xf0\x2f\xf4\x82\x06\x77\x4a\xbd\x93\xee\xb1\xdd\xca\x0c\x63\x97\xfc\xb5\xe3\x7b\x81\x61\x78\x7a\x10\x78\x33\x75\xdd\x0c\xd1\x19\xb9\x42\xaf\xe9\xb6\x6d\xc8\xab\xa7\xcf\xfc\x39\x22\xee\x14\x7f\xca\xaf\x58\xc3\x71\xfd\x9c\x33\xf5\xf8\x8a\x48\xbe\x25\xc9\xd1\x20\x69\xc8\xd6\xec\xca\x5d\x03\xef\x8e\xce\x83\x63\xc0\x8a\xbc\xbe\x66\x55\x7c\xce\x68\xb7\x53\xdf\xc0\x26\x28\x38\x03\x6c\x1b\x4c\xd9\x1b\x08\x35\xb4\x20\xe1\xcc\x2c\x16\xe8\xb1\xbc\x66\x15\xda\x12\xb5\xe1\xb5\x2f\x97\x44\xbd\xa1\x5b\xc2\x3b\x35\x66\xdc\x2f\x16\xe8\xf9\x8b\xbf\xbe\x7a\x76\x82\xa4\xa2\x4d\x83\x24\x01\x59\xad\x5b\x77\x6b\x03\x5d\x6d\x08\x73\xf6\xfb\x12\x57\x17\x70\xfd\xb3\xa6\x0a\x32\xc2\xec\xe3\xf5\x00\xda\x66\x6f\xa6\xa3\xbb\xf9\x39\x46\x52\xd0\xa0\x81\x6b\x23\x68\x31\x9b\x4a\x02\xf9\x74\x12\x9e\xb0\x3f\xc2\xe5\xe1\xdd\x90\x8c\x11\x01\xb7\x58\xcf\xd0\x83\x87\x35\xbd\x74\x11\xe7\x5b\x2c\x2e\x60\xf5\x3f\x7a\x80\x0e\xc1\x0b\xad\x0d\xa6\x87\x8b\x9a\x5e\x3e\x2a\xd2\x5d\x7d\xe4\x90\xb0\xa7\x05\x5c\x78\x47\xed\x74\xe8\x96\x18\xdb\xf9\xcf\xd0\x51\xe8\x97\xb2\x53\x58\xbc\xe4\xb8\xa6\x6c\x5d\x96\xa5\x6f\xdb\x8f\xd7\x4c\x3d\x65\xeb\x27\x7a\xdf\xb9\x3e\x09\xc6\x2a\x29\x5b\x37\x44\x5b\x8e\x5f\x0a\x82\x2f\xa4\xe5\xf6\x14\x03\x65\x35\x61\xea\x2f\x54\x6d\xde\xe0\xa5\x4c\x96\x84\xc2\xcb\xd7\xf4\x7b\x72\x82\x7e\xed\xcf\xcf\x5b\xd2\x34\x4f\x20\xf8\x2a\x3d\x5a\x57\x9c\x37\x4b\x2c\x4e\xd0\x3b\xdf\x87\x62\xc9\x9b\x3a\x98\xfb\x82\x2a\xdc\xd0\x2a\x2c\x91\x4a\xd0\x0b\xa2\x36\x82\x77\xeb\xf0\xda\x63\xf1\x8f\xf0\xc7\x86\x00\x0d\xe6\xc7\xb9\xc2\xcf\x72\x85\x9f\xe7\x0a\x97\x60\x05\xe5\xbe\xc8\x2d\x6e\x9a\xf8\x53\xd4\x01\xe3\x3f\xea\x7f\xff\xbd\xe3\x8a\x8c\x42\x77\x8c\x8b\x9a\x08\x52\xcf\x21\xa2\x2d\xf8\x32\x56\x1e\x55\x07\x5d\x1e\x52\x0d\xee\x3d\x04\x05\x0a\x2f\x9b\xa8\x60\xc3\x05\xfd\x9e\x33\x85\x9b\xb9\xe8\x9a\xf1\x8e\x55\x0d\xc1\x6c\x6e\x02\x55\x83\x62\x7f\xaa\xd0\x17\xad\xba\xa6\x91\x95\x20\x84\xb9\x1b\x0f\xe7\xa9\x90\x87\xb4\x5d\x4e\xd8\x02\xd7\x9b\x54\x5e\x9a\x56\xaf\xa8\x10\x5c\xb8\xd2\x03\x2d\xb7\xb8\x40\x2f\x9e\x1d\x98\x70\x48\x88\x18\xe4\xea\xba\x25\x25\x61\xb5\xd4\xec\x17\x1e\xdb\xb7\x58\x29\x22\x58\xaf\x2f\x6a\x74\x06\xb7\xc8\x9d\xc8\x9f\x23\x0b\x62\x0b\x74\x9f\xec\x7a\xa9\xf5\x2e\xf3\x08\x7d\xfa\xa9\xad\x80\xa5\x7a\xc1\x6a\xf2\xe1\x4f\xab\x1e\xad\xd6\x9f\xf5\xe9\xc1\x8d\xe9\xd9\xe3\x5a\xb3\x40\x1f\xb6\xae\x38\xdc\x62\x57\x1b\x82\xaa\x4e\x48\x2e\x10\x28\x27\xa3\xce\x10\x06\x49\x84\x40\x11\x6a\xd0\xef\xfe\xbb\x23\xe2\x1a\xf1\xe5\x77\xa4\x52\xe5\x41\x2f\xb9\xef\xcf\x50\xc7\x6a\xb2\xa2\xcc\xc5\x29\xde\x2f\x57\xac\x5c\x13\xf5\x04\xb0\x7e\xed\x90\x66\xe2\x15\x20\xac\xa1\x09\xc2\xd0\xd6\x44\x4d\x8e\x82\x98\x87\x96\x4b\x74\x86\x8e\xfa\xad\xb6\xbd\x54\x41\x39\x7b\xad\x8d\xf8\x42\x77\x95\x34\xbd\xf0\x33\x15\x20\x68\x2f\x84\xb3\x1b\x3f\xa3\xfd\x63\x3c\x80\xa2\xe6\x55\xa7\xb5\x62\x8f\x08\x02\x99\x22\x8f\x9b\xee\xcf\x6b\xe8\xad\x83\xee\x1b\x29\x8d\x95\xf2\x0d\xd8\x36\x69\x8d\x97\xd6\x7d\x73\x6b\x3d\x30\x92\x83\xa9\xd6\xff\x5e\x43\x9c\xd6\x25\x81\x61\x4c\x8a\x6a\x83\x05\xae\x94\x5e\xc2\x68\x4e\x9a\x12\x22\xfc\x5d\x4e\xa6\xd3\x88\x08\xba\x66\x80\x10\xcd\xfb\xbe\xb8\x7d\x30\xea\xe5\x6f\xcb\x25\x70\xfc\xe9\xc1\xcd\x74\x62\x26\x7b\x1a\xe6\xb4\x92\x44\xf5\x16\x87\xd7\x66\xfd\x05\x8a\x74\x35\x38\x4a\xa6\xe5\xa5\xe2\x5a\xaf\xe9\xca\x8e\x50\x29\x08\x3a\x43\xac\x6b\x1a\xbf\x6f\xd3\xe8\xe3\x05\x18\xdf\xc8\x00\x53\xc5\x43\xc7\x90\x1a\x57\xc6\x58\xda\xc7\x54\xda\x61\x28\x65\xcd\xa4\x51\x25\xb5\x4b\x45\x59\x05\xb5\x43\x3d\xa5\xca\x69\x54\x35\x7d\x8c\x91\x96\x37\xd1\x6e\x33\xd0\x7e\x3a\xf3\x2c\x13\x7c\x72\x9b\x69\xb6\x67\xdc\xc9\xa8\x51\x76\x57\x93\x6c\xdc\x20\xdb\x3f\x70\xe5\xa7\x34\xc5\xee\x6a\x88\x65\x82\x5c\x62\x13\x6c\xd4\x00\xb3\xe3\x1b\x18\x3c\xb1\xb9\x93\x1a\x3b\x23\xa6\x4e\xa0\xa0\x33\x66\x4e\xc6\xc8\xc9\x98\x38\x63\x06\xce\xa8\x79\x13\x36\x1a\x99\x36\x89\x61\x13\xc2\x8d\x18\x35\x79\x93\x26\xac\x18\x99\x33\x89\x31\x93\x98\x32\xa3\x86\x4c\xd4\xe1\xc0\x88\x81\xb2\xf3\xde\x51\x10\x09\xbe\x9b\x58\x4c\x3f\xf1\xe2\x34\x27\xa7\xf3\x82\x34\x2e\xcd\xc8\xe8\xa1\x54\x4d\x25\xf4\x98\x02\xc8\xc9\xe8\x8c\xc4\xef\x7b\x5d\xae\x04\xdf\xfa\xf6\x23\xe1\x6b\x51\x36\x94\x91\xaf\xba\xed\x92\x08\x69\x04\xb0\xf7\xc3\x0c\xb4\x0d\x67\xa0\x33\x13\x7f\x69\xb5\x9d\x21\x53\xea\xdd\x18\x5e\x18\x40\xe8\xea\x56\x5b\x22\x7f\xd6\xba\xd5\x9e\xc9\xdd\x46\x77\x97\x85\x8a\x0b\x2b\x29\xf5\xd2\xfc\x4e\xce\xff\xde\xd1\xea\x62\xde\x76\x4d\x33\x37\x37\xe6\xe6\xe6\xca\xd0\x0e\x4f\x48\xce\x0f\x82\x0a\xe3\xa4\x98\x2b\x3e\x67\xe4\xca\xde\x3f\x29\xe2\xcb\x63\x41\x5b\xe6\xbb\xbd\xa8\x93\x9e\x65\x8e\x82\x22\x17\xf0\xd9\x0a\xde\x4e\x0a\x2d\xca\xa9\x20\x75\x31\x83\x01\x4f\x23\x23\x6a\xaf\x86\x63\xf7\xc9\xc7\x34\x0c\xfa\x6d\xda\xdb\x2b\x76\x1e\xbc\x73\xe5\x39\x6d\x08\x60\x30\xe7\x70\xe0\xf2\x36\x8d\x83\x5b\x2e\x04\x01\x1c\xe9\xb1\x1b\x19\x84\xe2\xf9\x8c\x09\x93\xa2\x5c\x0a\x82\xeb\x4a\x74\xdb\x25\x92\x2d\x66\xa5\xfd\x9a\x04\xa9\xd5\xf4\x92\xd6\xfe\x90\x28\xa8\x53\xd3\xcb\xd2\x7e\x8c\xaf\x6e\x11\xdd\x0d\xcd\xf1\x7a\x6a\x7f\x3b\x96\x6e\x66\x60\x42\x1b\x56\x48\xe2\x16\xa0\x86\xed\x58\xc6\x55\xe4\xfe\xe9\x9e\x82\xb1\x68\x4e\xd5\x01\x3c\xd9\xe2\xc3\x26\x62\x32\x4d\x4b\xcd\x71\x0b\x2e\x06\x1f\x54\x14\x65\xe8\xe6\xb8\x67\x5c\xd3\xdc\x61\x54\x96\x46\x4d\xd8\x6f\xef\x8e\xce\x4b\x6d\x61\x3a\xbb\xd8\x18\xc4\xa1\x71\x6b\x2f\xb3\xa6\xa6\xae\xc5\xe2\xc7\x0f\x23\xc8\x1c\xfd\x02\x94\x9d\x8b\x5d\x50\xc1\x0d\x85\x83\xf8\xbf\x83\x79\x3b\xfe\xcf\xe3\xf4\xf0\xae\xc5\x42\xc9\x4c\x18\x67\xee\x46\x9e\xcd\x7f\xba\x08\x4f\x34\x56\x5c\xa0\x89\x46\x44\x61\xd7\x83\x28\x7a\x68\x70\xba\x4d\x01\x3a\x3c\xa4\xc3\x04\x83\x6e\x5e\x01\xf4\x1d\x3d\x3f\x4d\xd8\x23\x45\x83\xe6\xe8\x38\xe5\x0f\x0d\x17\x51\x78\xe0\x4f\xba\x9f\x66\x49\x40\xe8\x01\x24\x3f\x73\x46\x8c\x5b\x1d\x8f\x1e\x62\x93\x30\xa1\xb8\x67\xec\x19\xc7\x08\x90\x59\xe0\xe1\x02\x12\xa6\x15\x09\xb2\x69\x49\x99\x24\x42\x7d\x49\x56\x5c\x10\xb7\x06\x06\xc1\x25\xf7\x27\x91\xdd\xe4\x56\xd7\x23\xb4\x40\xc6\x5a\x7a\xb0\x17\xa2\xd0\x37\x95\x0d\xdb\x19\xf0\xf1\x08\x97\xdc\xc2\xc1\x47\xc6\xd2\x4a\xeb\xdd\x04\xe2\xc3\xf1\xcc\xbb\xf3\x50\x4e\x8e\x4a\x9e\xe1\x29\xb2\xdd\xa7\x84\x13\x66\x8b\x80\x13\xdd\xe7\xf8\x80\xce\x96\xf6\x8b\x3b\x3b\xed\x86\x69\xda\x4e\x6e\x32\x15\x06\xc1\xe6\x19\x42\x66\x10\x0c\xab\x39\xa2\xc4\x01\x35\x91\xd0\x08\x90\x06\x28\xf3\x82\xc5\x87\x04\x69\xea\x2a\x41\xc8\xfb\x16\xc3\xf6\xdb\xd4\xfc\x8e\x53\x16\x2d\x3b\xad\x37\x3c\x98\x3d\x74\xf2\xbf\x23\x28\x97\xc7\x58\xe1\xa5\x3b\x1a\xf7\xdd\xf2\xdb\x87\xf0\x4a\x56\xb6\x4a\x21\x38\xb7\xe1\xc5\x7a\xb7\x11\x65\xe0\xf0\xed\x96\xb2\x5b\x4a\x73\xa5\xf6\x68\x16\x14\x87\x7e\x1e\x3d\x08\x74\x88\x8e\x93\x6b\x5e\xf6\x38\xb4\x3f\x0c\x05\x95\x57\x24\x8a\x33\x7f\x2a\x61\x36\x13\x3b\xcf\x25\x3e\x49\x0f\x26\xa6\x3e\x31\x82\xc5\xef\x36\x33\x5a\xf1\x3e\xfb\x60\x04\x62\xb2\xd7\x72\x20\xe6\x8c\x9a\x7c\x50\xc3\x8c\xd0\x90\xdd\x8d\x32\xf2\x17\x81\xdb\x67\x1f\x14\x61\x92\x72\x96\xc3\xa5\x81\xe6\x57\x02\xb7\x1a\x8f\x05\x4b\xb0\xe5\x4d\x01\x6d\x1b\x1a\xda\xe4\x8f\xd2\xad\x68\x75\x4d\xba\xca\x69\x10\xe3\x36\xf8\x93\xd7\xa4\xff\x25\x5b\x52\xf5\xbf\x7c\xe7\xa2\x22\xbd\xe5\x7f\xca\x55\x5f\x66\x19\xe6\x25\x65\x17\x7d\xa1\x1e\xe8\x5b\xd1\xf4\x05\xb8\xa5\x4f\xb0\x31\xc0\x23\xdc\xe8\x2c\x40\x1a\xe4\xc4\x33\x53\x37\xd9\xa2\x33\xb4\x28\x0f\xbf\x2d\x27\xef\xfe\x56\x9e\x1f\x4e\xef\x2f\x4a\xf2\x81\x54\x5a\xc2\xc5\x61\x5b\x21\xc2\xed\xbb\xe3\xf3\xf8\x2a\xf7\x69\x66\x04\xba\xb1\xb2\x40\x87\x7d\xd5\xec\x7a\xa4\x6c\xc5\x13\x6b\x9f\xb2\xfa\x15\xaf\xc9\x97\xd7\x7e\x96\x27\x1e\x47\xef\xd2\xea\xc9\x62\xb8\x16\xf7\xc9\x71\xed\xb7\xf3\xd8\xc6\xd2\x2d\x85\x43\xda\x82\xda\x86\x0e\x94\xfa\xef\xd3\x68\x9e\xfc\x17\xba\x0d\xbe\x58\x32\x6b\x22\x04\x35\x06\x72\xae\x07\x1b\x1f\x7c\x74\x57\x28\x18\x8d\x53\xc9\x9f\x7e\x3a\x40\x17\x14\x0d\xd2\xac\xef\xf8\x96\xc1\x38\x00\xa1\x56\x84\xd8\xa6\xa6\xe0\x4c\x76\x62\x24\x18\x99\x65\x3c\x2d\x3c\x83\x2e\x67\xb3\x83\xe4\x01\x66\x0e\x85\x96\x32\x0d\xae\xc8\x64\x31\x29\x7f\x35\xfd\x76\x51\xfe\x6a\x41\x67\xa8\xb8\x7f\xbc\xd0\x4c\xa3\xc9\x3b\x1d\x41\x76\xcb\x09\x6e\x08\x9a\x1e\xd7\xda\x3f\x16\x0b\xf4\x62\x65\xd2\xb3\x6a\x79\x83\xa8\x44\x18\xbd\xb2\x22\xa8\x9f\x33\x39\x43\x57\x04\x5d\xd1\xa6\x41\x0d\xc7\x35\x52\x1b\xac\x90\x95\x88\x26\x58\x44\x8b\xb9\x60\x3e\x53\x41\xe7\xc9\xda\x2f\x0b\x43\xd9\xd4\xc2\x1f\x71\xa6\xc6\xca\xb7\x4f\x37\xe3\x86\x33\x1c\xd6\x33\x4d\x8b\x2b\x82\xb0\x20\x68\xcd\x29\x5b\x23\xc5\x51\x27\x49\xb0\xc0\x82\xfe\x7e\x32\xd8\x77\x7f\xfa\x29\xfa\x64\xcc\x65\x10\xf6\x26\xee\x4b\xc4\xd4\x30\x75\x61\xf6\xb2\x74\x0b\x2e\x89\x32\xc9\x34\x26\xc5\xd6\x84\x27\xeb\x05\x17\x4c\x76\x20\x0c\x70\xa7\x05\x0d\x06\x81\x30\xf0\x28\xcc\x0c\x9b\x64\x7b\x31\xd4\x14\x7b\x4d\xc6\xae\xce\x3a\x94\x2d\x65\xeb\x78\x0b\x9c\xe1\xc2\x3b\x20\x0a\xb7\xb4\xf1\x6c\xba\xe3\x98\x95\xdb\xd4\x5e\x51\xb5\xe1\x9d\x42\x98\x5d\xa3\x15\x6f\x6a\x22\x62\xd5\x64\x76\x73\x43\xe5\x14\xca\xc1\xd0\xa8\x87\x13\xa1\xa3\x5d\x13\xeb\xd0\x1b\xd4\xa6\xee\x70\xa7\x12\x7d\x7f\x17\xb5\x30\x47\xc7\xe7\x7d\x02\x3e\xbd\x87\xfd\xc3\xeb\x3f\x7d\x35\x89\x3b\x69\xe4\x03\xa9\xe6\x9d\x68\xe6\xad\x20\x2b\xfa\x01\x4c\x19\x9b\xaf\xc8\x2b\xe3\x5e\xcf\x00\x51\x21\xea\x78\x9d\x11\x53\x60\xd1\x06\x20\xa5\xf1\xa7\x9b\xa8\x13\x13\x46\x02\x06\x58\xb4\xbe\x76\x4d\x59\xec\x8f\x4f\x67\xff\xb6\xda\xe4\x83\x12\xf8\x8f\xe4\x5a\x57\xfc\xe1\x66\xb7\x85\x7c\xa7\x5e\xc4\xac\x63\xb9\xc6\x79\x4b\xd0\x92\x54\x38\x5e\xfb\xa8\xe6\x44\xb2\x07\x0a\x49\x42\xb6\xd2\xc9\x06\xd9\xe2\x8a\x48\x54\x71\x61\xb3\x5c\xeb\x6d\xe7\x0f\x69\x6b\xf6\x6c\xe1\xe6\x24\x6e\x6d\x8e\x20\xf8\xe9\x64\xb1\x58\x53\xb5\xe9\x96\x65\xc5\xb7\x0b\x3d\x88\x2d\xb4\xb8\xe8\x1b\x5f\xc0\x25\x49\xb9\xf8\xcf\xdf\xfe\x76\x0c\x45\x5f\xaf\x64\x44\x2d\x6a\x5e\x2d\xb6\x98\x75\xd8\x64\xa9\xbf\x77\x41\xae\xb7\xb8\x95\x1f\x43\xf5\x68\x33\xf7\x06\x2f\xc3\x8b\xeb\xdb\xe1\xde\x16\xce\x78\x0d\x59\xce\xd0\x63\x21\xf0\xb5\x09\x58\x7d\xc1\x94\x75\x06\xc6\x73\xf2\x96\x51\x55\x4c\x8d\xf5\x6d\x76\x14\x83\xbd\x71\x81\x06\x5b\xdc\x74\x33\x5b\x6d\x9d\x56\xf4\xdb\xc6\x89\xe9\xc5\xae\xed\x6a\x66\xeb\xb4\x0f\x1b\x41\x97\x67\x28\xbb\x4c\xe8\xf7\x04\xfd\xe3\x1f\xe8\xd7\x01\xea\x5d\x08\xed\x91\x54\x8a\x4d\xe1\xe5\x7b\x08\xc2\x8d\x71\xdd\xdc\xba\x2f\x49\x1d\xa9\x7f\x12\x6b\xcc\xe8\xf7\x38\x70\x8b\xba\xb8\x34\x1e\x7c\xda\x2b\x4b\x5b\x36\x95\x53\x88\x65\xff\x64\x4e\x5c\xac\x3f\x22\x97\x13\x17\xeb\x9f\x67\x2a\x27\xd7\xb1\x9f\x59\x26\xa7\x94\x19\x1e\xd7\x5b\x9a\x72\x01\xd6\x65\xfb\x4e\xff\x57\xe4\x4a\x8b\x3d\x91\xd6\x87\x74\x1f\xfa\x43\x9a\x26\x0e\xf5\x20\xf0\x90\xc4\x00\x26\x64\x8a\x86\xaf\x29\x7b\xaf\xae\x5b\x72\x6b\x70\xe3\x9d\x66\x39\xda\xff\x1f\x9b\x33\x80\xa3\x22\x47\x7a\xdf\x09\xcb\x9b\xc6\xad\xf9\x18\xc2\xcb\xbd\x27\x3d\xbc\x8e\x08\x69\x20\xd8\x1c\x22\x5e\x07\x4e\x7a\xf3\xdd\x7d\x4b\x2f\x1a\xea\xc6\x34\x39\x5c\x5b\x3e\x44\x22\x52\xc5\x71\xc8\x6e\x8b\xa5\xbc\xe2\xa2\xb6\x09\x87\xfb\x2e\x0d\xee\xf3\xf4\x90\x36\x3a\x3e\x38\x08\xc8\x0e\xe5\x66\x94\xd1\x52\xa2\xec\x87\x2f\x25\x4d\x66\xf8\xe5\x0e\xb2\xc5\x4d\x0e\x69\x93\x8c\x71\xf7\x44\x0d\xf2\x6c\xf9\x55\xc1\xd9\x6b\x52\x75\x82\xaa\xeb\xaf\x6d\x4c\xb2\xb9\xa8\x94\x9c\x20\x15\xf7\xa4\x05\x7b\xef\x63\x97\xdd\x89\x52\x74\x40\xa0\x47\xb5\xc1\x72\xae\x20\x4d\x57\x94\x0f\x6b\x78\xd6\xd3\x03\x46\xc9\xad\x92\xf5\x86\x3b\xb5\x21\x4c\x51\x73\x69\x20\xbb\xf2\x62\x90\xd1\xf5\xa5\xc1\x6e\x5f\x5e\x30\x31\x35\x6e\xb3\x67\x4e\xf5\xe8\x17\xb9\x55\xf9\x0f\x2d\xde\x66\xcb\x8d\xcd\x93\xfd\x34\x24\x4c\xa0\x12\xf4\x28\xde\x5c\xb7\x24\x08\x75\x8a\x0c\x75\x97\x0e\xda\xc1\x0d\xd3\x41\x7f\x56\x9c\x40\xa6\xb5\xa7\x8f\xbf\x8e\x57\x8d\x1b\xf7\xf0\x4e\x70\x36\x73\xf2\xe7\x06\xcf\xeb\x57\x6f\x52\x3c\x96\x18\x99\xbb\xc5\xa3\xfc\xb1\xa3\x9d\x5f\x9b\x76\xbe\x7e\xfc\x2a\xc1\x64\x48\xbb\x27\x96\x2f\x46\x47\x5d\xdf\x6d\xd8\xbf\x01\x44\xff\xf5\xe2\xcd\xef\xdf\x7e\x99\x60\xf2\x73\x7a\x0b\xaa\x68\xbf\xd9\x4f\xe8\x99\x9e\x1b\xad\x35\xa2\xa2\x2f\x22\xf1\x36\xbe\x62\x73\xab\xdd\xde\x8b\xcb\x2c\x5e\xbb\x00\xc6\xd0\xf9\x28\x7e\x97\xa6\xe4\x96\x65\x08\xda\x6d\x8f\x75\x38\xe0\xe0\x78\x59\x06\x9c\x7c\x57\xd2\xfc\x98\x81\x26\x52\x87\x2b\x5a\x91\xa1\xa4\x81\xe2\xfe\x7a\x96\x39\xb0\x25\x0a\xd3\xe6\x15\xaf\xb1\x4d\x2e\x78\xcf\x94\xcc\x6d\x42\xb4\xfe\x06\xe8\x63\x78\xa6\x04\x99\x34\x1d\x00\x83\x00\x46\xba\x69\x82\xdb\x11\x73\xf3\x69\x67\xd6\xaa\xa0\x4d\x9f\x92\xc0\xde\x45\x6e\xf3\xd7\x63\xfc\x7d\xf3\x5e\xcc\x84\x48\xee\x90\x35\xcd\x8d\xc6\x3e\x24\x65\xf2\xff\x07\x17\x5a\x21\xcb\xe4\x92\x7f\x30\xcf\x37\xfa\xac\xca\x25\x04\xad\x20\xc8\x1f\x62\x21\xc2\x9c\x8b\x16\xc8\xbd\x26\x30\x3e\x76\x27\xdc\x92\xc4\xe5\xb6\xde\x50\xd4\xb9\x9c\xce\x4d\x13\xa7\x76\xef\xbb\xe9\xfb\x63\xdf\xb0\x28\x6e\x17\x00\x35\xb9\x13\xda\x8e\xed\x8b\x98\xb2\x4b\x22\x24\xd9\x03\xa7\x49\x94\xb5\x03\xe5\x50\x08\xd8\x0b\xdb\x7d\xb0\xea\xc7\x5d\xd9\x36\x97\xa4\xfb\x6b\x52\x8d\x09\xf5\x42\xc3\xec\x9e\xe0\xa3\xaf\x93\xf3\xc8\x60\x34\xfb\x3d\x94\xd3\x8f\x99\x4a\x34\xf2\x56\x0e\xad\x93\x53\xbc\x4c\x82\xc6\xdc\xe1\x60\xe6\x46\xb9\xb9\x14\x16\xee\xfa\xb3\x61\x81\xb4\x96\x27\xfa\xff\x3c\xca\x1d\x17\xcc\xc7\xf2\x63\x07\xad\x0a\x62\x9e\x09\xcb\x5c\x30\xcd\x6c\x65\xb2\xaf\xc9\xfa\x48\xa1\x8e\xf6\x89\x40\x2e\xc8\x75\x2b\x88\x94\x99\x20\x95\x61\x0c\xc2\xe7\x5a\xbc\x46\x45\x9f\x7f\xe6\xf6\x11\x8b\x05\x22\x70\x7b\xf9\x82\x5c\x23\x6e\x1d\x1c\x68\x89\x85\x17\xbe\x76\xb6\x80\xa3\x7c\x98\x53\xd8\x6b\x6d\xca\xfc\x65\x43\xd8\x4b\x2e\xd5\x73\xb0\x67\x97\xbc\xbe\x9e\x21\x93\x72\xca\xf5\xdf\x47\x4f\xa7\xcc\x49\x42\xb1\x6b\xd2\xcb\xa2\x33\x44\x4a\xf3\x67\xaf\x32\x6c\x87\x3e\xb9\x3f\x31\x5f\xa6\x25\x35\x2d\x4d\xfb\x53\x8c\xfe\xa3\x9f\x24\x9b\xf9\x4a\x86\xa9\xaf\xa8\x9c\xd8\xce\x41\x59\xa8\x6a\x00\xe1\xd0\x6c\x9d\xa6\x11\x74\x58\x54\x9b\xb7\x92\x08\x19\xec\x3a\x3f\x31\x9a\x4a\x7f\x9a\xeb\x0d\x90\xb9\x57\xeb\xf3\x96\x27\xa7\xe7\xc9\x26\xd4\x46\x16\x39\xbc\x5f\xf2\x0f\x2e\x6d\x40\x8c\x30\x78\xc9\xcf\x62\x36\xc1\x3a\x41\xc5\x3e\xd9\x96\x6d\x19\xc2\x9c\x62\x90\x11\xe7\xc4\xa8\x7c\xd0\x1f\x2e\xc8\xb5\xde\x95\x78\x16\x8f\x72\x10\xa6\x1a\xde\x02\x3b\x4b\xe1\x21\xfa\x2c\x20\xb3\xed\x59\x62\x21\x87\x7e\x66\x77\xff\xba\xc4\xdf\xe1\x0f\xfe\xf6\x5a\x27\x9a\x13\xfb\x3c\x3a\x3a\x44\xc5\x02\xb7\x74\x71\x79\xbc\xd0\xb4\x91\x0b\x33\xc0\xdf\xfd\xfd\xac\x40\x87\xae\xaf\x6e\x61\xeb\xd5\xa8\x8d\x8b\x13\x54\x7c\x27\x39\xf3\x07\xf0\xb2\xab\x2a\x22\x65\xe0\xf9\x13\x44\xb6\x9c\x49\x92\x86\xed\x30\xae\x9e\xc1\x5b\x7e\xc1\x15\x05\xa9\x44\xee\x38\x06\x49\x05\xa7\x26\x52\x89\xc0\x50\x0a\xe4\x55\xb8\xdd\xf3\xa4\xf0\x2f\x2d\x44\xd2\xd2\x75\xa7\xe4\x17\x1a\xa5\xff\x19\xe4\xa9\x19\xc6\xfa\x68\x5c\xd1\xc1\xae\x21\x25\xc8\xe5\x08\x43\xe0\x46\xcf\xa4\x1a\xd0\xff\x00\xd5\xe1\x59\x54\x86\xe2\xb8\x64\x48\x61\xf5\xe8\xd6\x67\x4a\x8a\xe1\x3b\x25\x70\x53\xdf\x40\xbe\x87\x29\x4d\x9b\x29\x1e\x45\xc1\x43\x7a\x9e\x61\xe3\xfc\x68\x04\x97\x03\x18\x7c\x2d\x5c\x44\x51\xec\x33\xd5\x14\x76\x13\x3b\x31\x79\x03\xba\xa6\x81\xcd\xf9\x74\xe8\x00\xb6\xb4\x40\x05\x9a\x68\x16\x8b\xe1\x35\x3f\x4e\x8b\x71\x97\x6c\x50\x3d\x13\xb2\x1d\x67\xc8\x89\x99\x42\xff\x5f\xfc\x39\x58\x7d\x6e\x91\xa3\x5b\x1f\x39\x19\xd6\x0d\x57\x6e\x32\xd4\xa1\xf7\xc9\xfc\xf3\xe9\xe2\xdc\x4c\x64\x40\x92\xc4\x94\x68\xe8\xd5\x1e\x59\xff\x3b\x08\x91\x6e\xbb\x72\x0f\xdb\x8d\x21\xbd\xc9\x58\x4e\x37\x39\x99\x18\x53\xc5\xb8\x66\x86\x37\xb3\x73\x72\x34\xc0\x39\xd4\x86\x3b\x74\xc2\x0c\x65\xe5\xfb\x8d\xb9\x25\x66\xae\x4f\xc0\xa5\x66\xc8\xd2\xc3\x99\x0d\x04\xa3\x0c\xa9\x2b\xee\xd7\xae\x4c\x15\x93\x7f\xbd\x84\x92\x31\xfd\x04\x17\xd1\x3f\x52\x3f\x69\xf4\x03\xfd\xe4\x10\xee\xd2\x4f\xb6\xe2\x2e\xfd\xe4\x40\x7e\xb9\xfa\xc9\xf3\x9d\xd3\x53\xbe\xc0\xeb\x2b\x08\xa6\x8a\xf4\x95\x87\x71\x63\x08\x6a\x7d\xda\xd1\x3a\x82\x49\x48\x65\x03\x29\xb4\x51\xfc\x6f\x75\xd7\x8b\x83\x7f\xb6\xba\x73\xbf\xed\x8b\x86\xc8\xbd\x6c\xa8\x27\xb7\x78\xf4\x70\x41\x1f\xa1\x48\x79\x69\x4d\xb1\x53\x79\x05\xaa\x64\x44\x7b\xfd\x7f\xa0\x38\x3c\x15\xf6\x53\x1c\x28\x8e\x82\x7e\x77\x7c\xfe\x0b\xd2\x2b\xb1\xb8\xdb\x4f\xaf\xc4\xf2\x6f\x3f\xbd\x32\x94\xe5\x81\x5e\x09\xe5\xf2\xf0\x91\xf3\x9a\xfc\x99\x92\xab\xc1\x0b\xe7\x35\x99\x83\x3b\x0b\x92\xee\xb0\x6e\x3b\x76\xde\xd9\x6f\xea\xe0\x0e\x8d\xe6\x20\xdd\x76\x9f\x23\x09\x02\x93\x77\x84\x4e\xde\x97\xfe\xdd\xf2\xd8\x1b\x11\xbd\x68\x69\x80\xd2\x2d\x5d\xb8\xa3\xbb\x2d\x4f\x90\x9d\x03\xde\xf8\x11\xa1\x47\xa8\xa1\xfd\xb6\xdc\x34\x61\x02\xb2\x7b\x69\xa5\x3b\x30\x8b\x7f\x96\x2b\xc8\x9a\x32\x29\xde\x09\xd2\xc0\x56\xe3\xbe\x73\x72\xf9\x64\x4d\xda\x16\x3c\x0f\xef\x08\x92\x52\x6e\xe8\x4a\xfd\x91\x5c\xa3\xdf\x25\x68\xfa\x64\x4b\xe4\xef\x93\xa3\x29\x3a\x81\x5b\x53\x07\x09\x7f\xd7\xf6\xf4\x3f\xf3\x50\xc8\xc7\x25\x80\xda\x2f\x75\xd3\xe4\xe5\xb7\xf5\xe1\xf4\xdb\xb9\xf9\x6f\x94\xc1\x29\x7d\x72\xb4\x67\x9a\x71\x22\xdb\x5a\x2b\x2a\xa4\x3a\x8d\xe4\x7e\x9a\x0b\x0a\x40\x82\xd7\xec\x2d\xad\x20\x0c\xf0\xdd\x71\x7c\x79\x31\x9c\x3a\x33\x63\xb6\xfe\x2c\x5f\xfd\xb3\xf3\x69\x7a\x74\xa1\x25\xe5\x0c\xe9\xbd\x7f\x31\xb5\xaf\x69\xbd\xe1\xed\xc4\xa0\x29\xf9\x6a\x25\x89\x9a\x4c\x4b\xc5\x5b\x34\x47\x9f\x1d\x1d\x45\xf5\xc7\x62\xf0\xd0\xde\x04\xbe\x35\x35\xd6\x4f\x42\x8e\x9f\x70\xd0\x77\xca\xaa\x95\x4a\x1d\x6d\x3a\xbf\xb6\xf1\x14\x56\xf2\x84\xaf\xc6\x15\x29\x4c\xe1\xf3\x1e\x0d\x83\x34\xb4\xd5\xdc\x07\x67\xb4\x82\xaf\x68\x93\x7f\x99\xc1\x9d\x4a\xdf\x3d\x38\xe3\x67\x19\x98\xf1\x0b\x08\xca\xe8\xdf\x50\x7c\xc2\x9b\x06\x2f\xb9\x08\x83\x75\x06\x53\x3e\x02\xde\xcf\xbe\xcd\xb4\x59\xf9\xaf\x5c\x20\x0c\xf6\xac\xbb\x2f\x0e\x47\x3a\x50\x32\xd7\x25\x90\x8a\xfc\x36\xfb\x26\x7e\x63\xd9\x38\x3b\x9d\x7e\xb1\x3e\x76\xeb\x4c\x0e\x1f\xd5\x8c\xd3\x93\x66\x3c\xc9\x1d\xad\x4f\xa2\x07\x95\x23\xfb\xdc\x5c\x3c\x8f\x9d\xda\x10\xd7\x68\xa7\xf4\x26\xeb\x68\x85\x04\x52\x64\xb9\xe1\xfc\x22\x59\x3f\x70\xc7\xfb\x92\x30\xd5\x1f\x25\xf8\xeb\x92\xfb\x5c\x21\xa5\x72\x52\x9c\x64\x7c\xf0\x01\x5e\x48\xf2\x31\x38\xfb\x0f\x93\x9b\x41\x54\xc4\xbf\xaa\x17\x39\x0f\xad\x61\x93\xdf\xbb\x9c\xc4\xa8\xc5\xd7\x10\xa3\xcd\x19\x32\x02\x14\x58\xc0\x76\x56\x53\xb1\xdc\x50\x69\xde\x1f\x83\x27\x69\xcd\xd9\xcb\xad\xd9\xb6\xc7\x9e\x44\x33\xcf\x72\x33\xee\x93\x22\xef\x78\xb4\xeb\xd6\x73\x98\x28\x07\x5d\x84\xb3\xb7\x58\x76\x27\x60\xc8\x25\x68\x06\xdc\xe1\xe5\xff\x9b\x19\xfa\xc2\x4b\xf6\x9e\xeb\x0c\x25\xdf\x18\x99\x8e\x6a\xd2\xd0\x4b\x22\xae\x0f\x7c\x82\x60\xf8\x69\x09\x35\xd3\x66\x67\x52\x76\xcb\x72\xcb\x0d\x7c\xdf\xe3\xa7\x3d\x8e\x76\xd2\x4c\xc1\xee\x10\x67\x4f\xc2\x7d\xdc\xb1\x0e\x10\xf2\xc8\x1e\x28\x04\xab\x37\x34\x92\x05\xc1\xf5\x75\xda\xa8\xee\xa6\xd1\x34\x5b\xa2\xb0\xc9\x87\x07\x23\x38\xf7\x21\x49\xd1\xbb\x17\xd6\xad\x90\xd6\x30\xc5\xd9\x3a\x07\xee\x49\x0c\x97\xc3\x47\x71\x08\x21\x27\xac\x46\x7c\x05\x79\x4e\x60\x53\x62\x16\x2b\x32\x21\x65\x66\xb2\x4d\x8e\x3e\x0f\x71\x3e\xca\xd2\x61\xc4\xca\xf0\xca\x5d\xcf\x53\x90\x7f\x9b\x7c\xc0\x95\x82\x87\xa9\x2c\x4b\xe9\x3f\xe7\x92\xb2\x8a\xdc\xd6\x80\xb3\x37\x7a\x46\x69\x79\xab\xf9\xa4\x6b\xfb\xc7\x7a\x82\xe7\x04\x1c\x19\x66\x49\x4e\x55\xf7\x44\x5b\xa6\xca\x25\x16\xd4\xa8\x9e\x99\x3d\xb9\x55\xa4\x46\x8a\xb2\xeb\xb4\x05\x83\xc4\xbf\xa8\x1c\x8c\x92\x6c\x31\x53\xb4\x42\x6f\x5f\x68\x59\xdf\x35\x44\x96\xfd\x29\x5e\x9f\x51\x31\x7d\xc2\xd7\xe4\x8c\x71\x07\xb9\x7d\x0e\x98\x5e\xc6\x7e\xd7\x6d\xdb\x1d\x08\xb0\xad\x68\xcf\xc7\xad\xe3\x87\x33\x4d\xf6\xec\xeb\x6c\x10\x6d\x03\x14\x2c\x35\x05\xf5\xdf\x5d\x1b\xbf\xe0\x1c\x0b\x79\xd9\xd0\x9a\x94\xdd\xae\x4e\x28\x81\x99\xb9\x8c\xae\x3b\xa2\xe1\xf5\xec\x44\x58\xba\xf6\x0a\x8b\x7a\x07\x0e\xb3\xbe\x0c\x0a\x03\x9c\x20\xa0\x5a\xd3\x73\x51\x9b\x03\x6f\xff\xf7\x24\x84\xe8\x23\x12\xfa\xd3\xe6\xf0\x7b\x2b\xf8\x5a\x10\x29\x4d\x52\x01\xf8\xd3\x36\xaf\x95\xdc\x63\xbd\x31\xa3\xea\x3a\x37\x0d\x43\x92\xf9\x4f\x8a\xb7\xd6\xf0\x18\x02\xfd\x70\xdb\x74\x38\xbb\xb6\x47\x02\x26\x44\x4f\x51\xad\xfa\xb0\xb4\xac\x7f\x49\xf5\xbe\x97\x14\x99\x6b\x38\xc9\xdb\x44\x99\x89\x0c\xdf\x6b\xf1\x46\x92\xc2\xcb\x49\x08\xa1\x45\x6f\x16\xc2\x0f\xf6\x47\xa9\xcc\xa9\x61\x27\xf3\x9a\xd6\xe4\xd8\x6a\xa2\x7e\x1d\x3d\x15\xbc\xfd\x9e\x33\x72\x10\xbc\x8b\xfd\xbd\x7d\x99\x68\x52\xdc\x73\x3f\x83\x84\x98\xae\x68\x24\x42\xc9\xdd\x9a\x79\x4a\xc1\xe9\xf0\x83\x7b\x5b\xcc\x57\x73\x7f\xc4\x47\x8e\xc1\x77\xfb\xf4\x85\x56\x4f\xf1\xd3\x17\x1b\x82\x6b\x48\x36\xf2\x03\x2a\xfe\x3a\x7f\xf2\xfa\x9b\xe7\xf3\x37\xfc\x82\xb0\xc2\x68\xa2\xe0\xc5\x6b\xfc\xe1\x39\x6d\x88\x1c\xa2\xdd\xe2\x0f\x73\xb3\x81\x49\x61\x21\xb9\x53\x0e\x5c\x7f\xe9\xc1\xb5\xf1\xdb\x2a\x52\x1b\xfc\xbd\xf5\x9e\x54\x34\x60\xb2\xb0\xd9\x53\x7f\xb5\xf8\x55\x81\x7e\x07\x7e\x07\x34\x6c\xc5\x03\xfb\x46\xea\xfa\x1b\xb0\x4e\x5e\x52\x76\x21\xe3\x24\xa0\x35\xad\xd4\x53\xb2\xc2\x5d\xa3\x5e\xb9\x87\xbd\x53\x84\xb5\xf9\x3e\xb7\x2f\x7f\x07\x5e\x6b\x5a\xa9\x17\xec\x12\x37\x14\x06\x60\x1c\xd8\x69\x6d\x6a\x00\xcc\xbb\x73\x73\x13\x5d\x16\x22\x80\x9a\x9c\x7f\x49\xd7\xc3\xba\x70\x91\x58\x71\x3e\x5f\xd2\x75\x5c\xcb\x0c\x48\xd7\x1d\xd6\x32\xa6\x58\x32\x31\xda\x16\x1f\x79\xee\x12\xec\x04\xce\x26\x85\xf5\xb6\x87\x3e\x18\x8d\xc4\x5c\x77\x8c\x77\xf8\x21\x5f\xbe\x83\xb7\xc9\xf5\xaf\x73\x74\x06\xb0\x65\xd7\xd1\x3a\xdc\xbd\x9b\x5b\xb2\xee\x81\xc0\xc8\x07\xfa\xe0\xa1\xf9\x40\x6b\x38\x71\xed\xeb\xa3\x43\xf4\xa0\x80\xe7\xa3\xce\x80\x10\xb2\x40\x9a\x7a\x67\x5a\xd6\xd7\x84\x15\x8f\x1e\x04\x78\xa6\xfd\xe3\x69\xba\xee\x20\xd4\xd3\x20\x98\x96\xb8\x6d\x09\xab\xcd\x03\xff\xa1\x7f\x20\xf8\xdb\x93\xc3\xd0\xb1\x06\x3a\x26\x24\x19\x66\x2b\xf1\x34\x40\x94\x45\xd4\x19\xf8\xa5\xed\x1b\x0f\x23\x14\xbc\x2d\x83\x47\x2a\x36\xa2\x29\x87\xf5\x8d\x3e\xfd\x74\xc0\x12\x7a\x41\xa7\xb1\x4a\xbd\x69\xba\x03\x59\x7a\xeb\xc8\xcc\xfc\xc9\x58\xef\xd3\xc4\xaf\xd6\xb2\xcd\x77\x27\x82\xbd\x19\x19\x6f\xfa\xbc\x45\xfc\x04\xc2\x33\x93\x37\xec\xa0\xcf\x20\x06\x17\x3f\xd9\x8a\xae\xad\x40\xa4\xdb\xf5\xfb\x9a\x8a\x28\x0a\x83\x6e\xd7\x0b\x80\xb7\xe6\x06\x5d\x33\x2e\xc8\x7b\xb2\xe5\x70\x22\x92\xe6\x5f\x82\x23\x1b\x2c\xa1\xad\x30\xe1\xe1\x9a\xa8\x67\x26\xff\x83\xfc\xf2\x1a\x34\xdc\x57\x78\x4b\xc0\xa3\x34\x37\xe8\xa1\x7a\x2e\xff\x89\x43\xe7\x53\xa0\xd0\xc3\x43\x37\x3b\x61\x2e\x34\x07\xf7\x8e\x9e\x47\xe3\x7e\xd2\xd0\x76\xc9\xb1\xa8\xd1\x1f\x5e\xdb\x1e\x56\xbe\xc8\x64\x07\xf4\x20\x7f\x78\x0d\x59\xcb\xed\x2f\xd3\x27\xff\x73\x6c\xdd\x7b\x0e\x27\x25\xbc\x60\xda\xdf\xe5\x0a\x5e\x7c\x06\x3e\x26\xce\x95\xa6\xe9\xf1\x58\x29\x41\x97\x9d\x22\x36\xe6\xcd\x99\x67\x35\x91\x4a\xf0\x6b\x67\xa1\xf5\x75\x64\x58\xc7\x4e\x74\x62\x08\xdb\xd2\xb1\x76\x00\xd8\x8d\x20\xd8\xce\xdc\xb1\x87\x61\xc8\xe9\x4f\xde\x3d\x2e\xe8\x9a\x32\xff\x2c\x71\x68\x34\xc4\x33\x41\x84\x80\x17\xa4\x87\xf3\xf0\xb3\x22\xb7\xe9\xe6\x2f\x8f\xd8\x8b\x05\x7a\xdc\x29\xae\x6d\x90\xde\x27\x7b\x2f\xcc\x91\x8e\xed\xe7\xac\x4b\xd6\x7d\x4c\x6b\xf9\xe0\x4e\x3d\x2e\x6b\x46\xbc\xc2\x1f\x4c\x5a\xd2\xc9\x17\xc7\x9f\xcd\x20\x54\xd7\x83\xdb\x9f\xe6\x7b\xfc\x96\xc3\xe3\x3f\x3c\xfe\xab\xb9\xa8\x6f\x63\x2b\x9d\x97\xf0\x3b\xfc\x61\x0e\x36\xdc\x4f\xe6\xb0\x08\x1d\x15\xd6\x53\x31\x8c\x5d\x1b\xbe\x71\x34\xb0\x1e\xbd\xa8\x2e\xfe\x3a\xd7\xdd\x2f\x4e\x50\xa1\xe5\x67\x91\xc8\xed\x24\x30\xd5\x9c\x6f\x9b\x77\x70\x66\x2e\xc3\x66\xb8\xcf\x03\xa3\x23\xc9\x7b\x64\x87\x63\x61\x16\x0b\xf4\x16\xde\x74\x03\x81\xf7\xf6\x9b\x97\x88\x0b\x64\xb4\x17\x92\xa4\x59\xe9\x19\x66\x1c\x6d\xb9\x20\x68\x45\x88\x0f\x92\xd5\x24\x32\x2e\x09\xdb\xac\x66\xa3\x6f\xec\xc1\xfb\xef\x61\x60\x13\x3b\x98\xf9\xdb\x6f\x5e\xc6\xde\xf3\x4e\x34\x91\x3f\x3a\x21\xd0\x4c\x63\x0e\x74\x59\xc6\x3b\x36\x0c\x50\xce\x3c\x17\xd6\xd7\x1a\x71\x5f\xf7\xfe\x43\xd2\xb4\xe6\x21\xcd\xe0\x35\xac\x8f\xe7\x12\x8f\x23\x79\x49\x7d\xf0\x8e\x7a\xd5\x70\x18\x47\x92\x4a\x7c\x9f\xe7\xd5\xcd\xe3\x62\x3d\xe1\x8c\x55\x0c\x17\x29\xcc\xbb\x47\x03\x9b\x29\x84\x36\x20\xf9\xc7\xd8\x87\xa7\x5b\xd1\xbb\xc0\xfb\xbe\xdd\xb5\x23\x07\x2b\xf8\xc9\x83\xda\x5a\xb0\x85\x8d\xe5\xf8\x3c\x1d\xcf\x88\xc7\x0e\xcc\x57\xe7\xaa\x1b\x0b\x06\x18\x1e\x65\x65\x2e\x4d\xa4\x7b\xea\xc0\x1d\xb2\xe1\x57\xf3\x16\xb3\x3d\x9e\x8d\x4c\x37\xc1\x50\x0b\x08\xef\x3d\xea\x09\x5e\xe8\xc9\x9d\xf1\x5a\x3e\x9b\x0e\x07\xd2\xa3\xb7\x6c\xad\xe7\xee\x47\xb8\x6c\x87\x73\x6f\x05\x40\x6a\xec\x8e\x79\x64\x33\xfc\xbc\x87\xf7\xb5\xf6\xcf\xa7\xa4\x7e\x6b\xe3\xb6\xe6\x68\x8b\x2f\x08\xc2\x62\x49\x95\xc0\x02\x72\x17\x6c\x7d\xbe\x33\xc5\xd1\x92\x6c\xf0\x25\x41\x0d\xd5\x50\xc8\xf0\xbd\x55\x10\x8e\xfc\x50\x76\xeb\xb2\x4f\x49\x9f\x5b\x4a\x37\xc1\x01\x16\xa9\x2e\x20\xc8\xde\x04\x3d\x70\x86\xcc\x75\x72\xc8\x7b\xcc\xf4\xe2\x5f\x58\x61\xe6\x02\xe1\x05\x59\x53\xdf\x29\x03\x32\x97\xd7\xd2\x9e\x68\xed\x38\x53\x01\x72\xd9\xb3\x94\x50\x0b\x8c\xf9\x61\x76\x4a\xd4\xc1\x15\xcf\x31\x2c\x79\x6d\x98\xaf\xe5\x6f\xcf\xb8\x8c\x9e\xee\xe4\x27\x9f\xd0\x33\x43\x82\xb9\xc0\x35\xe5\x3b\x08\x91\x36\x69\x6a\xdf\x3a\xdc\xb4\x9a\xfd\xbe\x7b\x80\x1f\x35\xbc\x9b\xc8\x3b\x8f\x59\xb5\xe1\xc2\x39\x8a\x7d\xba\xe7\x31\x8f\x38\xec\xa3\x8c\xd9\x10\xba\xb2\x62\x3f\xb9\x89\x7b\xd9\x1c\xcf\xd0\xe6\xb3\x19\xda\x7c\x3e\x43\x9b\x5f\xcf\xd0\xe6\x8b\x19\xda\xfc\xa6\xd7\x45\xe3\x37\x76\x4c\x2c\x60\x4d\x86\xe7\x54\x61\xee\x33\xc2\x2a\x5e\x93\xb7\xdf\xbc\x78\xc2\xb7\x2d\x67\x84\x45\xe9\xba\x59\xfc\xd8\x4a\x3e\xd2\x2b\x7b\x52\x6d\x3f\xf9\xb4\x50\xef\xfe\xf6\x6d\x77\x74\xf4\xe4\x68\xfe\x6d\x77\xfc\xfc\xf9\xf3\x6f\xbb\xcf\x9e\x1c\xe9\x1f\x4f\xff\xe3\xf9\xf3\x6f\xaf\xbe\x9d\xa3\xf3\xc5\x1a\xdc\xf1\x63\xf5\x2d\xc0\x3c\x80\x48\x06\x64\x13\xc5\x5e\xe2\x26\x0e\xc9\xb0\x94\x7e\x77\x89\x9b\xf3\x61\xee\xd4\xbe\x96\xde\x11\xcf\xb5\xe5\x1e\x56\xc8\x05\x87\x0c\x90\x9e\x9d\xa5\x8f\x24\xb8\x7f\x31\x18\x3a\xde\x19\xaf\x16\x01\x1f\xc6\xd0\x07\xe1\x94\xe8\x8d\x2d\xaf\x49\x79\x25\x70\x6b\x33\x66\x3a\xa7\x91\x0d\x68\x7f\x50\xb8\xe0\x45\xc3\x9a\x90\x41\xaf\x40\x8f\x5c\x16\xcd\xd3\x08\x9f\x73\x06\x05\x7d\x79\xf0\x10\xc7\x18\x0a\x97\xf4\x33\x8d\x81\xcc\xc4\x3d\xa6\xd1\xff\x69\xa0\x25\x1c\xfb\x3d\xf2\xa1\x91\x38\x70\x60\xf5\x26\x5e\xb8\xcc\xb2\xd7\xab\xe0\x48\x2d\xbc\xce\xd3\x17\xc4\x61\xd4\x80\x22\x78\x6b\xda\x3c\xe3\x74\x6a\x0b\xfb\xe8\x85\xbe\xac\x7f\xec\xc9\x95\x3c\xab\xa9\x1a\x96\x70\xd1\xff\x8e\xd3\x9a\xb8\x52\x9b\xdf\xe2\xd4\xf7\xc0\xc5\xed\x39\xf1\xa1\x9b\x47\xf0\xae\x98\xb6\x97\xcb\x60\x37\x36\x78\x71\x6c\xb8\x0f\x73\x77\x2f\xa3\xe7\xcd\xd6\xbb\x9e\x37\x0b\x5c\x5f\xf6\x3a\xa6\xdc\x04\x97\x1b\x33\x6d\x87\x6f\xe4\x4d\x47\x33\x4d\xdd\xf2\x80\x5c\xc6\x6c\x4b\x6e\x47\x5a\xdf\x72\xe0\xfa\xde\x13\x5f\x80\xe5\x26\x0c\x79\x17\xbc\x53\x70\xe5\xd5\x74\xb2\xa8\xe9\x65\x1c\x74\x54\x9c\x0c\x82\x9a\x66\x3d\x68\x90\x36\xd3\x47\x29\x55\x51\x78\xcb\xc9\xae\x58\x99\x00\xd3\x95\x09\xfc\x48\xdb\x4d\xe2\x41\x0e\x5c\xb8\x35\x24\x2b\x02\x33\x83\x0b\xef\x35\x73\x05\x88\x32\x3b\xb0\x38\x0c\xc3\x7d\xcf\x31\x09\xb2\x35\xde\x39\xa0\xf3\x9e\x7c\x03\xe2\xdd\x44\xcf\x82\x18\xf5\xfc\x7b\x2c\x37\x93\x0d\x96\x9b\x3e\xd8\xd4\x85\x5f\xb4\x9d\xdc\xbc\x56\x58\x79\xef\xcc\xe0\xc3\x84\x75\x4d\x33\x43\xe6\xff\x01\x09\xac\xeb\x50\xfa\x45\x11\x76\xe8\x0c\xa0\x86\x81\x49\x7d\x20\xa5\xef\x85\xb5\x38\xd7\x41\x62\x5e\xd7\x8f\xcc\x27\x9f\x13\xfa\x71\xd3\x40\x90\x9d\x15\x19\x51\x5f\x32\x8f\xb8\x10\xb8\x63\x94\x09\x95\xca\xc5\xeb\x99\xb2\x19\xba\xbf\x12\xdc\xc6\x02\x9a\xd0\xbf\xd1\x07\x39\x61\x02\x7b\x68\x7b\x1f\xdf\x24\xb4\x35\x29\xaa\xe2\x30\x55\x01\x2f\xb7\x9a\x04\x32\x93\x63\xe7\x70\xd1\x95\x96\x51\x25\x8d\xf2\xd6\x2a\xd5\xa9\x67\x22\x8c\x3e\x39\x43\xcb\xf8\x40\x13\xa3\x47\x61\x11\x42\x15\x3a\x43\xb8\x5f\x7b\xba\x9b\xcb\x60\x29\xa2\x33\x87\x31\xce\x82\x0c\x7a\x80\xc4\xf7\x8e\x23\x6f\x30\x06\x6f\xb0\x46\x16\x3a\x80\xa1\x45\x53\xd5\x5c\x26\x2e\xca\x97\x70\x7f\x6b\x9a\x36\x12\x85\x57\xba\x2a\x26\x17\xf0\x2c\xb6\xfe\xd2\x87\x46\x03\x16\x2f\xee\x01\x76\xec\x0d\x81\x02\x7e\x2f\x3d\x6c\x7c\x8d\xc4\xfc\xcf\x4f\x4e\xb6\x85\x08\xfb\x30\xe4\x18\x26\xc6\x45\x9b\x24\x56\x5c\x1c\x28\x49\xd7\x8c\xa6\xe9\x1b\xfa\xee\xdc\x77\x1b\x98\x12\x0b\xf2\x3f\xbc\x7b\xdd\x09\xf0\x96\xc0\x6a\x36\xa9\x07\xbf\xbc\x56\xe4\x25\x61\x08\x9e\x2b\x96\x68\x79\xad\x85\x23\xbc\x04\x65\xa2\x46\x1e\x48\xf4\xf6\xcd\xf3\xf9\x6f\x91\x20\xad\x20\x92\x30\x65\xd6\x64\xcf\xee\x3d\x92\x09\xe3\x62\x8b\x9b\x3f\x63\xeb\x00\x32\x0f\x63\x55\xc4\xa2\x82\xd3\xa9\x03\x6d\x5a\x58\x28\x74\x86\x6c\x84\x63\x5f\xd1\xcb\xba\xa5\xed\x98\x7d\x08\x2a\x77\x48\xe0\x6b\xe5\x4e\x09\x80\xbf\xc0\x22\x72\x40\xd5\x06\x0b\xad\x68\x1f\xab\x89\xe3\x14\xd7\x88\xbf\x20\x52\xa1\x87\xe8\x18\x3d\x7c\x88\xfe\xc3\x73\xda\xef\xd0\xb1\xff\xfb\xa4\x07\x38\x3e\x0e\x20\x3e\xcb\x42\xfc\x26\x80\xf8\x3c\x07\xf1\x59\x88\xe3\xd7\x59\x88\x10\xc7\x17\x39\x88\xcf\x43\x1c\xbf\x09\x20\xcc\x5b\x19\xe5\x57\xf8\xab\x53\xcb\x93\xee\x61\x1e\x33\xe8\xe4\x02\x74\xce\x33\xbb\x85\xbf\x66\x90\x19\xfa\x59\x43\xb6\x2f\xea\x19\xb2\xef\x5a\xbf\xb0\x16\xad\x89\xb6\x94\x6b\x7b\x80\xaf\x79\xb9\x87\x76\xbb\x3c\x28\xee\x2b\x9a\xcb\x2c\x06\x39\x9a\x87\x0c\xa4\x31\xd9\x28\xa3\x9e\x13\x38\xb3\x1d\xfb\x23\x89\x6e\x2f\x91\x38\xe2\xd3\xf6\x21\xb9\x42\x06\xef\x99\x9d\xa1\x1e\x71\xff\xa9\x01\xee\x0a\x5a\xd7\xb0\xc1\x77\x41\xb6\x98\x32\xf3\xc6\x83\xef\x6c\x43\x98\x75\xaf\x42\x02\x52\xc2\xd0\x23\xf7\x35\xd8\x95\xbb\xd6\xfa\x66\x9d\x98\x3d\x9a\x39\xe8\x40\x7c\xf4\xed\x1c\x39\x29\xe2\x7c\x8d\x59\xd2\xf9\x1a\x46\xfb\x98\xe0\x0d\xdd\x94\x09\x82\x0e\x09\x06\x81\xd1\x10\x86\x13\x95\xea\xc9\xff\x7f\x01\x00\x00\xff\xff\xfb\xae\x8d\xed\xb3\xba\x00\x00"
+var _jsGogsJs = "\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x7d\x7f\x77\x1b\xb7\xb1\xe8\xff\xfa\x14\xc8\xda\x2f\x26\x2b\x72\x29\x25\x4d\x6f\xaf\x64\xb9\xc7\xf1\x8f\x5b\xb7\x76\x9a\x1b\xdb\x6d\xef\x73\x54\x1f\x70\x17\x24\x11\x2d\x81\x2d\x80\x95\xac\xa4\xfa\xee\xef\x60\xf0\x63\x01\x2c\x96\xa2\x9c\xb4\x37\x79\xa7\x3e\xa7\x8d\x88\x1d\x0c\x80\xc1\x60\x66\x30\x18\x0c\x8a\x4e\x12\x24\x95\xa0\x95\x2a\x4e\x0f\x0e\x2e\xb1\x40\x95\x14\xab\x53\xf8\x4b\x76\xcb\x4e\x34\xa7\x07\x07\xab\x8e\x55\x8a\x72\x86\x28\xa3\xea\x09\xdf\x6e\x09\x53\x5f\x0b\x72\x49\xc9\xd5\x1b\xbc\x9c\xdc\x5f\x71\xb1\x9d\xa2\x1f\x0e\x10\xd2\xd5\xee\x2b\xbc\x7c\x45\x58\x87\xce\x10\x7c\x29\x57\x94\xd5\x93\xa2\x54\x78\xd9\x35\x58\x94\x5b\xc2\xba\x62\x7a\x7a\x80\x3c\xa4\x83\xa0\x8a\x6c\x8b\xa9\x06\x9c\x44\xdf\x0f\x10\x42\xc8\x00\x3d\x00\xa0\x77\x35\x56\x78\xae\xf0\xf2\xac\x78\x80\x0e\x7b\x3c\xba\x78\x52\xb4\xa6\x6b\xc5\x14\x1d\xa2\x07\xc5\xf9\x83\xa9\xa9\x5f\x35\xb4\xba\x98\xb8\xb1\x4c\x4c\x87\xf5\x3f\xd3\xe9\x0d\x95\xba\xc7\x13\xfd\x07\xb4\xae\xff\xdd\x2f\x5b\x2e\xd5\xc4\xfe\x42\x06\xcc\x36\xd3\x89\xa6\x98\xce\xfc\xa7\x1f\xfc\x5f\x08\xbd\xd7\x44\x3c\x01\x52\xce\x82\xe2\x2d\xaf\xc9\x09\x2a\xd6\xab\x6d\x11\x16\x57\x9c\x29\xf2\x41\x9d\x44\xd8\x6d\x61\xd8\x02\x42\x16\x4c\x53\x35\x28\x75\xb4\x89\x8a\x10\x7a\xa0\x09\x59\x4a\xb2\xd6\xd3\xb5\x9b\x62\x57\x82\x2a\xe2\xe8\x05\xad\x60\x41\xf0\x83\x08\xe1\x34\x6e\xf1\x12\x37\x93\xbe\xe8\xa6\xef\xa5\x27\xb0\x46\x3d\x8d\xc8\x02\x84\xb6\xb3\xf3\x35\x66\xa4\x89\x59\xe4\xe0\x23\x7b\x9f\xce\x77\x80\xc7\x4f\x24\x4c\x5e\xd8\x74\xb9\x51\xdb\xc6\xf4\x31\x84\x21\x5b\xfe\x1d\x5d\x5d\x97\xa2\x63\x93\x08\xfe\xdd\xd1\x79\x8c\x0c\xda\x45\x15\xaf\x49\x31\x43\x03\xd0\x92\xe0\x6a\xd3\x33\x1b\x9d\xa1\x65\xc3\xab\x8b\x98\x1e\x08\x6d\x9a\xef\x64\xb9\xa1\xeb\x4d\x43\xd7\x1b\xf5\xa5\x06\x99\x18\xc0\xb0\xad\x9b\xe0\xd7\xcd\x41\x34\x32\xfd\xe9\x00\xa1\x65\xa7\x14\x67\xf2\x89\x66\xf1\x3f\xb1\x67\x4c\x11\xa1\x97\xd0\x8d\x59\xd2\xb6\x73\xcf\x69\x43\x5e\xf1\x9a\xc8\x74\x49\x3f\xab\xe9\xbf\x64\x3d\x87\xf3\xff\x06\x2f\x35\xc2\xa8\xc6\x81\x99\xf8\xbb\xaf\xf0\x03\x4b\x0f\xba\x42\x93\xa0\x81\xb2\x21\x6c\xad\x36\x8e\xe8\x29\x19\x74\xfb\x01\x70\x84\x7a\xbe\xa2\x0d\x99\xeb\x05\x2b\x8b\x69\x29\xdb\x86\xaa\x49\x31\x2b\x2c\xd5\xc3\x6a\xff\xfb\x62\xe5\xdf\xf2\xe3\xdf\xf2\xe3\xc7\xc8\x0f\x5d\x78\x93\x11\x09\x4f\xe9\x6a\xf5\x73\xd4\xef\x35\x5d\xad\x7e\x7e\xca\x1d\x16\x1c\xfb\xc5\x2f\x2f\x4d\xdc\xaf\x7f\xf2\x25\x16\x4d\xd9\xe8\xfa\x4a\xdb\xde\x67\x8d\xa5\x75\xe2\x75\x96\xe1\xf6\x1c\xa7\x3f\xe7\x62\x6b\x79\x06\x54\xc8\xa4\x28\x49\x4d\x55\xa9\x07\x5e\x4c\xad\x1a\x41\x67\x67\xe8\xc8\x51\x4c\x10\xd5\x09\x66\xd6\x8e\xae\x95\xd1\xa2\x31\x12\xa3\x9f\xd2\x95\x35\x80\x49\x7b\x67\xad\xed\x4c\x07\x2b\xf3\xe5\x6e\x7d\xcc\x18\xef\x03\x54\xc6\xa2\x58\x2c\xd0\x4b\xbc\x24\x8d\x74\xab\xbe\xa1\x52\xc1\x1a\x2a\xca\x8e\x96\x0d\x7c\x2b\x75\x61\xd1\xeb\x76\xc6\x5f\x93\x86\x54\x00\xa7\x3f\xb9\x85\xcf\xf8\x5c\xc2\x87\x00\x16\x30\x38\x39\x32\x29\x4a\x03\x30\x87\x62\x14\x08\x11\x0d\xbc\xc1\x12\x3a\xf3\xb6\xad\xb1\x22\x8f\x0d\x79\xce\x02\x1c\x96\xcd\x30\x7c\x29\xa6\x9a\x0c\x45\x07\xc0\x05\x8c\xc6\xd3\xd4\x14\xbe\x90\xb2\x23\xaf\x88\xc2\x93\x4e\x34\x33\x64\xaa\xcd\x10\xad\x1d\xe9\xac\x68\x80\xaf\x6e\x89\x64\xd6\xbd\xa9\x78\xe2\x10\xd8\x52\x5a\x9f\x20\x5a\x47\xe2\xd5\x10\xf4\x71\x5d\xa3\x4f\xd9\x52\xb6\xa7\x48\x71\xa4\x25\x3c\xea\x98\x19\x37\xa9\x91\x19\xb9\xe2\xe8\x82\x90\x16\xbd\x7d\x81\x1a\xce\x2f\x24\x5a\x73\x5e\x97\xa6\xfe\x1b\x2d\xc6\xe4\x86\x77\x4d\x8d\x96\x04\xe1\xba\x26\x35\xaa\xa9\x20\x95\x6a\xae\x75\xcd\xdf\xbf\x79\xf5\x52\xdb\x82\x48\xf2\x2d\xd9\xf0\x2b\xf4\x5d\x27\x15\x5a\x13\x85\xc8\xb6\x55\xd7\xe8\xa1\x6c\x31\x7b\x84\x38\x43\x20\x11\x5b\xbc\x26\x1a\x75\x4f\xc7\x40\x12\x1b\x71\x7d\xc2\xb8\x9a\xf4\xf3\x37\x45\x25\xaf\x14\xad\x38\x33\x1f\xec\x8f\x79\xb5\x21\xd5\xc5\xb4\xb0\xc2\x38\xd6\x5d\xbd\x90\xb1\xf2\xd7\x2c\xeb\xc2\x50\xa2\x88\x14\x51\x30\xa3\x3b\x3a\x51\x4c\xc7\xe4\xbd\x59\x1c\xb6\x15\x2c\x9f\x34\x58\xca\x49\x01\xbd\x23\x75\x31\x1d\x76\x45\x90\x2d\xbf\x24\x29\xdc\x69\x0c\x75\x10\x0b\xf2\xc2\x0d\xbb\x08\xbe\x44\x88\x22\xb2\x84\x50\xb9\x91\x9b\x5e\xe7\x58\x3c\x14\xcf\x29\xe3\x86\x72\x33\x5d\x06\x06\x76\x9e\xe8\x30\x84\x8a\x9a\x28\x5c\x6d\xa2\xcd\xa7\x23\x84\xa9\x49\xeb\xa0\xb7\xbe\x7f\x46\x8a\xde\x20\xd2\x48\x32\xa0\x20\xae\xeb\x9f\x80\x7c\x3d\x96\x5b\x68\xf7\xbf\x40\x35\xac\x7e\x0c\xd5\x0e\xe0\x3f\x5a\x8a\x41\x83\x2f\x6a\x6d\x89\x14\x85\xdd\x48\x44\x14\x2a\x5b\x2c\x08\x53\x5e\x71\xc7\x76\x93\x2b\x1c\x5b\x5d\x77\xe0\x7e\xfd\xcf\xf7\xe6\xf0\x2c\x33\x1c\x74\x88\x8a\x59\x11\x1b\xac\x29\x94\x5d\x8e\x5c\x14\xd3\x64\x21\x6d\x68\x4d\x8a\x50\x0d\xc7\xac\xb3\x07\xba\x9e\x1f\x06\xb8\x1c\x79\x6d\x99\x1e\xb4\x1b\x4b\x4e\x0b\xa2\x5e\x2d\x8d\x77\x32\xe5\x6d\x5f\x23\xdf\x8f\x1b\x3b\x79\x63\x7c\x9e\xcc\x23\x42\x29\xa3\x4c\xc1\x40\x73\xdd\xb6\x58\x8d\xbe\x46\x2b\xdc\x48\x02\x6a\x63\x44\x24\x7a\x41\xe8\x0c\xea\x1d\xc2\x70\xf7\x02\x49\x97\xc7\xee\x35\x81\x8a\xaa\x21\x58\x14\x33\x54\xf4\x84\xf8\x27\xb0\xf1\x7e\xb2\x79\x48\xf6\x5d\x02\x66\x5f\x09\x3d\x2a\xa3\xad\xa3\x05\xc5\x86\x8d\x9d\x80\xdb\x14\xde\x08\x17\x39\x6f\xc2\xed\xfc\xf9\xa3\x59\xcd\xce\x98\x1d\x85\x37\x87\x0c\x1f\xbd\x50\x64\x3b\x31\x7f\xbe\xa7\xf5\x0c\x51\xd6\x76\xfa\x2f\x37\x10\xb0\xd7\xb6\xce\x54\xf3\x80\x5a\x46\x84\x96\x5a\xce\x50\x2c\xd0\x21\x8a\x2a\x04\x26\xa3\xb7\xed\x52\xb3\x6e\xbb\x87\x45\x87\x2c\xd8\x47\x99\x09\x7b\xd1\x31\xc7\xb5\x3b\xf9\x76\x84\x73\xbd\x81\xa7\xc7\x72\x19\xcb\x32\xc7\x54\x39\x56\x19\xad\x67\xd7\xf5\xbe\x3a\x2f\x24\x67\xb2\x9e\x8b\x59\x46\xf4\x27\x0a\x0c\x21\x79\x45\x55\xb5\x41\x93\x94\x2d\xf4\xbf\x0a\x4b\x82\x8a\x7b\x5b\xda\x10\xa9\x38\x23\xef\x69\x5d\x9c\x44\x5a\x96\x4a\x95\xd9\x0c\x3b\x7b\x9f\xd4\x45\xb2\x73\x85\xe5\x97\xee\x95\x1f\x62\x54\x69\xaa\x9c\x15\x30\x1d\x68\x23\xc8\xea\xec\x01\x3a\x4c\xe0\x52\xc5\xac\xc1\xb4\x2e\x1b\x80\x15\x8f\x8a\x1d\x95\xf5\x0e\x7b\x92\xad\xf6\x70\x81\x1f\x15\xf1\xbe\x3b\xd4\x91\x4b\x41\xf0\xc5\x69\x4a\x1c\x2c\x25\x5d\x33\xf2\xcb\xa6\xcd\x83\x87\x74\xbb\x76\x0d\x75\x14\xe1\x4b\xac\xb0\x40\x74\x8b\xd7\xa4\x40\x52\x54\x7b\x34\x69\xea\xfc\xab\x26\xe4\xc6\xaf\xac\x71\x41\x84\xc2\xad\xe9\xa8\xd1\x71\xbf\x67\x7d\x10\xa6\xa3\x6b\xc6\x4b\xf4\xed\x47\xa8\xeb\xbb\x0a\xa5\xa1\xb8\xfb\xa7\x0b\xa9\x9f\x54\xf2\x04\xa6\xfc\x8d\x97\x82\xa1\x72\xed\x57\xc1\xc0\xf6\x1f\xf3\x2e\xec\x32\x43\xd3\x59\x2c\x8a\xc4\x07\x6a\x36\xd9\xaf\x9c\x28\x43\x98\xd5\xc8\xad\xdd\x03\x14\xea\x4a\xef\xad\xf0\x72\x4f\x8f\x27\x96\x82\x80\x34\x57\xc7\xa1\x84\x2a\xa1\x6c\xc8\xb8\x7f\xbe\x21\x2d\x97\x54\x71\x71\x9d\x78\x7f\x84\xff\xb0\x97\xef\x27\x42\xfa\x9c\x36\x8a\x88\xd7\x04\x8b\x6a\xf3\x54\xf0\xb6\xe6\x57\x6c\xe2\x8c\xef\x48\xe7\xd7\xf6\x6b\xa0\xf7\xb9\x70\x3c\xee\x3e\x96\xee\x8f\x89\xe3\x84\x55\xd7\x34\x6f\xc8\x07\x65\x9a\x38\x41\x4a\x74\xc4\xed\x9e\x38\x7b\xb2\xc1\x6c\x4d\x4e\x7a\x4f\xa4\x5e\xdd\x33\x74\x89\x9b\x8e\xcc\xd0\xfd\x6a\xc3\x69\x45\x42\xb6\xba\xa2\xac\xe6\x57\x65\xc3\x2b\xac\xe1\x4b\x2d\xb9\x74\x8f\x0c\x64\xe8\xb0\x0d\x44\x2f\x67\x92\x37\xa4\x6c\xf8\x7a\x92\x01\xec\x39\xcf\xf5\x6b\x4b\xa4\xc4\xba\x5b\x3f\x20\xc6\xbf\x21\xb2\x6b\x94\x3c\x09\x07\x09\x95\x19\x9f\x0b\xf3\xad\x98\xba\x0d\x5e\xc4\x3d\xcf\x69\x43\x10\x48\x16\xcd\x3d\x15\xdf\x6e\xa9\x92\x76\xde\x0e\x9c\x34\xea\x27\xaf\x5c\x51\xdd\x49\x30\x89\xdc\x34\x3e\x42\x47\xe8\x1f\xff\x00\xe0\x08\xd4\x22\x2b\x02\xb8\x03\x84\xbc\xb1\x3f\x36\xb1\x45\x59\x6d\x38\x97\xa4\x14\x64\x45\x04\x61\x15\x41\x7e\xc6\x0a\x6f\xd4\x42\xaf\xec\xf7\xb2\xe2\x4d\xb7\x65\xbb\x25\x55\x0e\xad\xac\x04\x6f\x1a\xca\xd6\xd6\x28\x2c\x2b\xbd\x0a\x6b\x2a\xdb\x06\x5f\x6b\x76\x67\x7a\xa5\x04\x0b\x32\x87\xc4\x9c\x5a\xc5\x0b\x79\xd9\x60\x6d\xa5\xf7\x15\x63\x09\xac\xb0\x58\x13\xa5\xb7\x8d\x69\x83\x70\x16\x72\xbb\x43\xc2\xb4\xd9\x17\xf7\x8a\x20\x69\x39\xdd\xa2\xa5\xd3\xff\x17\x7a\x41\xb3\xab\xb4\xbc\xa2\x17\xb4\x34\xc7\x4c\xc1\x04\xee\x3f\x7b\x2d\x5e\x27\x13\xd7\xb7\xfa\xa7\x56\x4f\x8f\xcc\x37\x2c\x89\x52\x94\xad\x65\xc9\x0d\x54\xb6\xfd\xfb\x93\xe2\x9e\xae\xf3\x9e\xe1\x2d\x29\xa6\xe5\x05\xb9\xee\xda\xd1\xe3\x94\x56\xf0\x6d\x6b\x6d\x7c\xa8\x36\xd7\xd5\xe6\x15\x2c\xec\xb9\xf9\x1a\x9b\xab\xbb\xf6\x6c\xf1\x51\x05\x42\xa5\xe2\xaf\x95\xa0\x6c\x9d\x96\xbe\xe4\x57\x44\x3c\xc1\x92\x4c\xa6\xe8\x93\xb3\x5d\x28\x0d\x5b\xf8\x9e\x15\x77\x45\x6f\x3f\x44\x9b\x52\x33\xac\x52\x6e\xf8\xd5\xa4\x17\x1f\xa9\x63\xc3\x81\x69\xd5\x33\x49\x5d\x41\xd1\xa4\x7d\x29\x30\xab\x36\xe4\xb6\x59\x5b\x5a\xb0\xbb\xb2\x4d\x2b\xb8\x02\xed\x39\x77\x18\x52\xee\x31\x0b\x90\x30\xbc\x6c\x60\xd2\x34\x38\xb8\xc1\x5d\xd9\xd5\x86\x2a\x62\x65\x93\x99\xdb\x1c\x47\xe8\xce\xc3\xc1\x99\xdd\xa1\xc7\x3b\xf9\xb1\x85\x1a\x2d\xef\x9a\x4a\xdd\x60\xb0\xb9\x1f\xd2\x75\x14\x53\xbf\x56\x33\x68\x32\x74\xf7\xa7\x1a\x19\xaa\x9b\x53\x8d\x2c\xa9\x17\x0b\xf4\x44\x10\xac\x88\x71\x9c\xf5\x3a\x92\x91\x2b\x40\xe9\x4f\xcb\xb4\x45\x42\xae\xcc\x41\x86\x3b\x1d\x0b\x29\xde\x7f\x34\x51\x1b\x3b\xe5\x6c\x84\x3d\x62\xbe\x9b\x2c\x4a\xdb\x1e\x2a\x2b\xcc\x2a\xd2\xdc\x01\x77\xc8\xb1\x37\xa1\x5e\xa8\x78\xc3\xc5\xbc\xa5\xd5\x05\x11\x7b\xf8\x3a\xb6\x94\x51\xa8\x22\x73\x3d\x6d\x05\x31\x1f\x91\xc1\xbb\xab\x83\x10\x8d\xa6\x81\xde\x6f\xc8\x07\x94\x7a\x29\x4d\xb7\x36\xe4\x43\xa2\x50\xe2\xde\x6a\xe1\xe2\x71\x44\x80\x7d\x3f\xe7\xf2\x0a\xab\x6a\x33\xf7\x1d\x02\xc1\x8f\xab\x8b\xb5\xe0\x1d\xab\x6d\xf9\x0c\xa5\x78\xc2\x71\x91\x9a\xda\xb3\xab\xf9\x1e\xb3\x3a\x29\xee\x19\xd8\x2d\xaf\x71\x33\xd7\xb6\xdf\xee\x8d\x45\xda\x08\xea\xa7\x7c\x0e\x56\x6d\x16\x81\xa2\xaa\x21\x3b\x70\x64\x68\x95\xa1\x71\x82\x60\x37\xdd\xfc\x82\xcd\x10\x30\x95\xd8\x71\x23\x4e\xe6\xe6\x3b\x5b\x02\xa5\x42\x1d\x0d\x05\x93\x70\x63\xc3\xd9\xe3\xb6\x15\xfc\x32\xb4\x2d\xd3\x80\x89\x04\xab\x3d\x3c\x95\xdd\x72\x4b\xd5\x24\x0e\x9a\x08\x36\x40\x69\xab\x85\x5e\x88\xfb\x5b\x05\x7e\x4b\x31\x22\x76\xfc\xbe\x21\x27\x7a\x6e\xf2\x75\x18\xb9\xea\xeb\x65\x25\x96\xb1\xe0\xb1\x22\x66\x82\xad\x68\xf2\x75\xca\xfe\x93\x97\x4e\x7d\x11\x7c\x55\x74\x6b\x7f\x7a\x3a\x37\x98\xad\x4f\x52\x40\x3c\x29\x74\x79\x7f\x6c\x42\x59\x43\x19\x89\x0d\xff\x1e\xd9\x89\xa1\x94\xfb\x20\x15\x16\xea\x29\x56\x24\x87\x17\x3e\xce\xc1\xed\xe7\xb1\xeb\x49\xc3\xb6\x46\xf1\x3f\xf3\xed\xbc\x2e\xfa\xdd\x85\xf1\xa4\x9a\x8f\x9e\x0b\x2a\x15\x6b\xa5\xe2\x5e\x4d\x70\xad\xfb\xe8\x44\x84\x82\x01\x3f\x07\xcc\x13\x8b\x34\xf5\x84\x05\xeb\xfd\x1e\x78\xc2\x6d\xbf\x76\x2f\xf4\xa4\xa5\x62\x7f\xb6\x81\x8d\xf4\x08\xcb\x68\x4b\xb2\xa4\x1a\x60\x4c\x5b\x3d\xab\xa9\x42\x00\x81\x40\x0e\xf4\x3c\x01\x85\x6f\x74\x99\x35\xe1\xa0\x60\x6e\xa5\x45\xe0\xc9\xd5\x0b\xe5\x85\x96\x2e\x16\x0e\x16\x0e\x80\x79\xa1\x63\x0c\x68\xfb\xab\xaf\xaa\x21\xa1\x85\x37\x7c\xbd\x86\x76\x72\xd4\xe9\x3b\x52\x2a\x80\x9b\x44\xab\x9f\x71\x35\xa7\x6c\xae\x71\x15\xd3\x1c\x44\xae\x43\x39\x44\x3b\x90\xf8\x21\x96\x2b\x5e\x75\x72\xb2\x6b\x72\xfa\xd9\xef\xdb\xf5\xb3\x9f\x8c\x38\x64\x15\xd0\xc4\xf3\x3b\xd5\x91\xf8\x92\x44\x35\x6c\xaf\x46\x2a\xc6\x5f\x47\xcf\x06\x43\x27\x50\x3f\x70\xb0\xbf\x43\x1f\x82\xdb\x7d\xe6\x21\x35\x48\x34\x73\xe0\x9b\xf3\x15\x12\x5f\x53\x5c\x79\x58\x2f\x12\xb9\x43\x9a\xa3\xd0\x39\x34\x8c\xd8\x4a\x55\xc9\xd8\x11\x6e\xac\x03\x46\x02\xb8\x90\x59\x27\x27\x83\x11\x87\x4a\x21\xac\xb0\x23\x94\x6a\x30\x72\x0d\x52\x02\xfe\x68\xc4\x68\x48\xca\x11\xc8\x5e\x1d\x05\xc5\x39\x82\x79\xdb\x2d\x96\x01\x5c\x20\x1b\xe6\xe3\x22\xd5\x62\xdb\xc5\x16\xde\x66\x8f\xdd\x77\x06\xe6\xd9\x3e\xde\xca\x7d\x4a\x18\xf0\xc1\x69\xd8\x86\xee\xd0\x13\xd3\x9f\xff\xcb\x19\x48\x29\xdb\xac\xdb\xb0\x87\x5d\x9e\x7f\x1f\x79\x15\x00\x83\x20\xac\x26\xc2\xe2\xc8\xd4\x37\xdf\xfb\x41\xc7\x95\xf1\xd5\x8e\x9a\xf8\x6a\xa4\x9a\x8b\xcb\xf3\xde\xd2\xc5\x02\xbd\x26\xaa\x6b\x11\x23\x57\x28\x08\x0a\x04\x71\x9e\x8c\xd1\x78\x38\xb3\xae\x3c\xcf\x4d\x03\x70\x2f\x8a\x1c\x25\xac\x39\x63\x70\x85\x27\xa5\xae\x6f\xc3\x01\xb9\x2f\x45\xef\xe5\x85\x9e\xff\x17\xbd\x24\xd0\x71\x08\x3e\x5c\xd8\xf8\x54\xe4\xa2\xfc\x90\xde\x57\x23\xc5\x51\x4d\xa5\xde\xa8\x76\x54\x6e\xd0\x4a\xf0\x2d\xe2\x6a\x43\x84\xf4\xa8\xd2\x09\xd5\x2a\x56\xf7\x22\x1d\x90\x25\x6f\x47\x93\x68\xb4\xd3\x18\x53\x10\x7b\x9a\x20\x1d\x0f\x43\x75\x34\xb0\x11\x89\x58\x29\x31\x29\x60\x20\x26\xb0\x72\x36\xec\x4d\x14\x77\x79\x0b\x12\x17\x3e\x3c\x8a\xc6\xc7\x17\x67\x10\x85\x2e\x08\x3b\x00\x68\x35\x3d\x76\x44\x28\x6c\x52\xe1\xe5\xc7\xf4\x3a\xd3\x98\xed\xdb\x8f\x68\x2e\x3b\xba\x64\x6e\x46\x47\xe9\xb7\xc7\x3f\xd1\x40\x6f\x6f\xd7\x0d\xf8\x47\xb5\x1c\x8e\xb9\xd7\xb0\xf9\xf8\xca\xa4\x4b\x61\x8d\xb1\x45\x60\x2c\x86\x3d\xdc\x03\x80\x24\x92\x75\x89\x7f\x2a\xdb\x4a\xec\x9b\x8a\xc3\xc3\xc7\xba\xa4\x0d\x92\x7f\x7a\x87\x42\x98\x81\xa6\xcf\xd4\xdb\xad\xf4\x53\xb5\xbf\x43\xf1\x87\xd1\xdb\x4e\x20\x1a\xdd\x9f\x85\x83\x4b\x14\xf9\xce\xf8\x6b\x17\x51\xbd\x9b\x18\xcd\x4e\xc3\xc1\xe8\x07\xb0\x02\x46\x94\xc1\x08\xa1\xbd\x4a\x60\x3c\xd0\xe6\x03\x5d\x60\x7b\x34\x8c\xc8\x1a\x47\x0a\x9d\xb1\x28\x07\x98\x92\x78\xec\xa8\x7a\x7a\xe9\xc1\x36\x11\x5f\x7d\x18\xd4\xd8\xf3\xee\x83\xf9\xb7\xdf\x0d\x08\x3b\xe8\x21\x19\x0e\xc6\x7e\x65\xd7\xc7\xd0\x2d\xb9\x9f\x62\x75\xe8\x03\xc3\x60\xc3\x53\xd5\xaa\xb5\xaa\x39\x34\x6a\xaf\x91\xc0\x57\x8e\x27\x11\x96\x88\x11\x52\x93\x3a\xdc\xb4\x84\xac\x17\x2f\xb1\x74\x06\xa3\xd5\x0e\xb6\x47\xcc\xe2\xa3\x36\x47\x04\x16\x58\x45\xa9\xe9\xee\x0f\xda\x7d\x85\xdb\xf7\x52\x81\x91\xfa\x94\x34\x44\x11\x67\x9d\x7a\xab\xb4\x86\xe2\xb9\x2d\xbe\xd5\x2e\xcd\x5f\xf1\xd0\xc3\xad\x38\x5b\x51\xb1\x9d\x84\xd7\x3b\x1a\x5e\x61\x70\x8d\x45\x03\x36\x32\x67\x78\x0d\x64\xec\xfa\x47\xc0\x21\x65\xcd\x59\xd6\x3d\x6e\x87\x73\xaf\x80\x4b\x11\xe1\xfd\x2c\x18\x17\xf8\xfe\x9c\x3b\x3c\x2f\x94\x6f\xf6\xa2\xa2\x39\x55\x45\x52\x61\xd5\xc9\x7e\x0b\x6f\x7e\x7f\x09\x82\xdb\xee\xe2\x4d\x91\x77\x53\x06\x1b\x55\xdb\x25\x6d\x78\x21\x30\xb1\xdf\x1b\x06\x1e\x3f\x0e\x0a\x23\x4e\x77\x33\x53\xd8\x11\xc3\x40\x71\x91\x77\xf7\xa8\x4e\x86\x9e\x97\xc1\x8a\xbb\x0b\xa2\x39\x06\xef\xa3\xe5\xa0\x31\x77\x4e\x54\x7d\xa7\x2f\xc7\x75\xcf\xac\x88\xf1\x66\x2f\x71\x13\x7b\x4d\x23\xda\x0e\x1c\x8e\xb1\xdb\xe7\x29\x5d\xad\xf2\x4e\x1f\x73\x8b\x66\xcc\xd5\x57\xf1\x8e\x29\xef\xe7\xd3\xb0\x73\x5b\x54\x04\xa1\xb2\x0e\xcc\x63\x39\x43\xc7\xc1\x20\xdd\xd7\x81\x08\xd6\x06\x62\x38\xa1\xc6\x93\xa4\x08\x18\xf3\x13\xf8\x1a\x9b\xea\xb8\xae\x5f\x52\xb3\x79\xd3\x5f\xad\x54\x94\x2d\x66\xe6\xaa\x50\x43\x19\x39\x2f\x71\x5d\x17\x6e\xf7\x6e\xbc\x64\x31\x96\x9a\x34\x7b\x60\xa9\xe1\xa4\x63\x1c\x0b\xae\xeb\xaf\x89\xa8\x60\x47\x17\xac\xcb\x49\x8b\x85\x24\xcf\x1b\x8e\xd5\xc4\x76\x77\x8a\x16\xf9\xe2\x43\x14\x94\xda\x5e\x69\xf1\xf1\xab\x00\xdf\xf1\xd1\x51\x60\x49\x05\xfd\x2d\x97\x58\x20\x3b\x56\x38\x5d\xb8\xa2\xb5\xda\x14\xb3\xb0\x63\x87\xa8\xf8\x3f\x71\xb8\x29\x0a\x03\x6c\xed\x8c\xc2\xb5\xd4\x25\xff\x80\x4a\x3d\x4e\x39\x67\xdd\xce\x88\xa2\x70\x7d\x1a\xe3\x96\x26\x81\xe0\x23\xc1\x15\x56\x60\x0d\xaa\x0e\x97\x90\xed\x9f\xc1\xe3\x3d\x51\x9c\x4d\x8a\x0d\x96\x1b\x73\x6e\x58\xcc\x7a\x9b\x87\x24\xae\xd8\xfc\xb8\xb4\x71\x50\xba\x58\xa4\xf8\xb4\x70\x18\xa1\xa4\xa7\x58\xf3\xe1\x60\x2c\x58\x6e\xca\x2d\x56\xd5\x66\xb2\xf8\xdb\x3d\x68\xa7\x3c\xbc\xbf\x08\x6a\x6a\xfa\x6c\x53\x61\xbd\xd5\x46\x48\x64\x18\x94\x92\x2e\x1b\xca\xd6\x72\x52\x04\xfd\x4b\xa3\xf3\xfa\x93\xc8\x4c\x10\x95\x9f\x57\x47\x21\x25\xe8\x7a\x4d\x44\x44\xa6\x48\x0e\xfc\x77\x47\xab\x0b\xe3\x1d\x07\xbb\xa0\x17\x04\x68\xc3\xb7\xe4\xa0\x3f\xb5\x9f\x57\x0d\x67\x64\x2e\xe5\x66\x9c\x17\xe0\x6c\x0c\xc0\x40\xa7\x59\xc9\x19\x79\xcf\x1a\xca\x2e\xbc\xd8\x4a\x70\x9b\x4a\xc3\x13\xa2\xa4\x4e\x1a\xc3\xba\x6c\x3a\x52\xe4\x31\x6e\x94\x6a\xe5\x30\xd0\xa3\x87\x07\x1d\xfd\x5a\x71\x81\xd7\x7a\xa3\x68\xa3\xa8\x02\x0c\xad\xe0\x8a\x57\xbc\x29\x66\xa8\x80\xb1\x9f\xf6\x41\xf3\xf9\xb6\x7e\x29\xb4\x31\x33\xf9\xd3\x50\xc6\x8e\x7d\x94\x36\xa6\xf7\xa3\x94\x31\xbd\x36\xb1\x5f\x13\x8f\xc5\x70\xe8\xd7\x5d\xd3\x20\x41\xfe\xde\x11\x88\x63\xcd\x68\xac\x8a\x6f\x5b\x2c\x48\xd9\x76\x4d\xf3\x91\x81\x2f\x26\x7c\x61\x18\xfa\x32\x7e\x2c\x32\xda\x58\x78\xd7\x71\x4b\xc4\x9a\x94\x5a\xe2\xc0\xc9\xc1\x3b\x86\xb7\xe4\x0c\x0a\xdf\x4b\x75\xdd\x90\xf3\x5b\x83\x1e\x22\xbb\x07\x9d\x9d\x9d\xa1\xa2\x82\x08\x81\xf7\x06\x8d\x89\xd7\x2a\x52\x71\x67\x8a\xcb\x9a\xc8\x4a\x50\x08\xc9\x29\x57\x94\x34\x5a\x35\xdc\x16\x5b\xb2\xbb\xf6\xae\x90\x93\x34\xae\xf0\x2f\xf4\x82\x06\x77\x4a\xbd\x93\xee\xb1\xdd\xca\x0c\x63\x97\xfc\xb5\xe3\x7b\x81\x61\x78\x7a\x10\x78\x33\x75\xdd\x0c\xd1\x19\xb9\x42\xaf\xe9\xb6\x6d\xc8\xab\xa7\xcf\xfc\x39\x22\xee\x14\x7f\xca\xaf\x58\xc3\x71\xfd\x9c\x33\xf5\xf8\x8a\x48\xbe\x25\xc9\xd1\x20\x69\xc8\xd6\xec\xca\x5d\x03\xef\x8e\xce\x83\x63\xc0\x8a\xbc\xbe\x66\x55\x7c\xce\x68\xb7\x53\xdf\xc0\x26\x28\x38\x03\x6c\x1b\x4c\xd9\x1b\x08\x35\xb4\x20\xe1\xcc\x2c\x16\xe8\xb1\xbc\x66\x15\xda\x12\xb5\xe1\xb5\x2f\x97\x44\xbd\xa1\x5b\xc2\x3b\x35\x66\xdc\x2f\x16\xe8\xf9\x8b\xbf\xbe\x7a\x76\x82\xa4\xa2\x4d\x83\x24\x01\x59\xad\x5b\x77\x6b\x03\x5d\x6d\x08\x73\xf6\xfb\x12\x57\x17\x70\xfd\xb3\xa6\x0a\x32\xc2\xec\xe3\xf5\x00\xda\x66\x6f\xa6\xa3\xbb\xf9\x39\x46\x52\xd0\xa0\x81\x6b\x23\x68\x31\x9b\x4a\x02\xf9\x74\x12\x9e\xb0\x3f\xc2\xe5\xe1\xdd\x90\x8c\x11\x01\xb7\x58\xcf\xd0\x83\x87\x35\xbd\x74\x11\xe7\x5b\x2c\x2e\x60\xf5\x3f\x7a\x80\x0e\xc1\x0b\xad\x0d\xa6\x87\x8b\x9a\x5e\x3e\x2a\xd2\x5d\x7d\xe4\x90\xb0\xa7\x05\x5c\x78\x47\xed\x74\xe8\x96\x18\xdb\xf9\xcf\xd0\x51\xe8\x97\xb2\x53\x58\xbc\xe4\xb8\xa6\x6c\x5d\x96\xa5\x6f\xdb\x8f\xd7\x4c\x3d\x65\xeb\x27\x7a\xdf\xb9\x3e\x09\xc6\x2a\x29\x5b\x37\x44\x5b\x8e\x5f\x0a\x82\x2f\xa4\xe5\xf6\x14\x03\x65\x35\x61\xea\x2f\x54\x6d\xde\xe0\xa5\x4c\x96\x84\xc2\xcb\xd7\xf4\x7b\x72\x82\x7e\xed\xcf\xcf\x5b\xd2\x34\x4f\x20\xf8\x2a\x3d\x5a\x57\x9c\x37\x4b\x2c\x4e\xd0\x3b\xdf\x87\x62\xc9\x9b\x3a\x98\xfb\x82\x2a\xdc\xd0\x2a\x2c\x91\x4a\xd0\x0b\xa2\x36\x82\x77\xeb\xf0\xda\x63\xf1\x8f\xf0\xc7\x86\x00\x0d\xe6\xc7\xb9\xc2\xcf\x72\x85\x9f\xe7\x0a\x97\x60\x05\xe5\xbe\xc8\x2d\x6e\x9a\xf8\x53\xd4\x01\xe3\x3f\xea\x7f\xff\xbd\xe3\x8a\x8c\x42\x77\x8c\x8b\x9a\x08\x52\xcf\x21\xa2\x2d\xf8\x32\x56\x1e\x55\x07\x5d\x1e\x52\x0d\xee\x3d\x04\x05\x0a\x2f\x9b\xa8\x60\xc3\x05\xfd\x9e\x33\x85\x9b\xb9\xe8\x9a\xf1\x8e\x55\x0d\xc1\x6c\x6e\x02\x55\x83\x62\x7f\xaa\xd0\x17\xad\xba\xa6\x91\x95\x20\x84\xb9\x1b\x0f\xe7\xa9\x90\x87\xb4\x5d\x4e\xd8\x02\xd7\x9b\x54\x5e\x9a\x56\xaf\xa8\x10\x5c\xb8\xd2\x03\x2d\xb7\xb8\x40\x2f\x9e\x1d\x98\x70\x48\x88\x18\xe4\xea\xba\x25\x25\x61\xb5\xd4\xec\x17\x1e\xdb\xb7\x58\x29\x22\x58\xaf\x2f\x6a\x74\x06\xb7\xc8\x9d\xc8\x9f\x23\x0b\x62\x0b\x74\x9f\xec\x7a\xa9\xf5\x2e\xf3\x08\x7d\xfa\xa9\xad\x80\xa5\x7a\xc1\x6a\xf2\xe1\x4f\xab\x1e\xad\xd6\x9f\xf5\xe9\xc1\x8d\xe9\xd9\xe3\x5a\xb3\x40\x1f\xb6\xae\x38\xdc\x62\x57\x1b\x82\xaa\x4e\x48\x2e\x10\x28\x27\xa3\xce\x10\x06\x49\x84\x40\x11\x6a\xd0\xef\xfe\xbb\x23\xe2\x1a\xf1\xe5\x77\xa4\x52\xe5\x41\x2f\xb9\xef\xcf\x50\xc7\x6a\xb2\xa2\xcc\xc5\x29\xde\x2f\x57\xac\x5c\x13\xf5\x04\xb0\x7e\xed\x90\x66\xe2\x15\x20\xac\xa1\x09\xc2\xd0\xd6\x44\x4d\x8e\x82\x98\x87\x96\x4b\x74\x86\x8e\xfa\xad\xb6\xbd\x54\x41\x39\x7b\xad\x8d\xf8\x42\x77\x95\x34\xbd\xf0\x33\x15\x20\x68\x2f\x84\xb3\x1b\x3f\xa3\xfd\x63\x3c\x80\xa2\xe6\x55\xa7\xb5\x62\x8f\x08\x02\x99\x22\x8f\x9b\xee\xcf\x6b\xe8\xad\x83\xee\x1b\x29\x8d\x95\xf2\x0d\xd8\x36\x69\x8d\x97\xd6\x7d\x73\x6b\x3d\x30\x92\x83\xa9\xd6\xff\x5e\x43\x9c\xd6\x25\x81\x61\x4c\x8a\x6a\x83\x05\xae\x94\x5e\xc2\x68\x4e\x9a\x12\x22\xfc\x5d\x4e\xa6\xd3\x88\x08\xba\x66\x80\x10\xcd\xfb\xbe\xb8\x7d\x30\xea\xe5\x6f\xcb\x25\x70\xfc\xe9\xc1\xcd\x74\x62\x26\x7b\x1a\xe6\xb4\x92\x44\xf5\x16\x87\xd7\x66\xfd\x05\x8a\x74\x35\x38\x4a\xa6\xe5\xa5\xe2\x5a\xaf\xe9\xca\x8e\x50\x29\x08\x3a\x43\xac\x6b\x1a\xbf\x6f\xd3\xe8\xe3\x05\x18\xdf\xc8\x00\x53\xc5\x43\xc7\x90\x1a\x57\xc6\x58\xda\xc7\x54\xda\x61\x28\x65\xcd\xa4\x51\x25\xb5\x4b\x45\x59\x05\xb5\x43\x3d\xa5\xca\x69\x54\x35\x7d\x8c\x91\x96\x37\xd1\x6e\x33\xd0\x7e\x3a\xf3\x2c\x13\x7c\x72\x9b\x69\xb6\x67\xdc\xc9\xa8\x51\x76\x57\x93\x6c\xdc\x20\xdb\x3f\x70\xe5\xa7\x34\xc5\xee\x6a\x88\x65\x82\x5c\x62\x13\x6c\xd4\x00\xb3\xe3\x1b\x18\x3c\xb1\xb9\x93\x1a\x3b\x23\xa6\x4e\xa0\xa0\x33\x66\x4e\xc6\xc8\xc9\x98\x38\x63\x06\xce\xa8\x79\x13\x36\x1a\x99\x36\x89\x61\x13\xc2\x8d\x18\x35\x79\x93\x26\xac\x18\x99\x33\x89\x31\x93\x98\x32\xa3\x86\x4c\xd4\xe1\xc0\x88\x81\xb2\xf3\xde\x51\x10\x09\xbe\x9b\x58\x4c\x3f\xf1\xe2\x34\x27\xa7\xf3\x82\x34\x2e\xcd\xc8\xe8\xa1\x54\x4d\x25\xf4\x98\x02\xc8\xc9\xe8\x8c\xc4\xef\x7b\x5d\xae\x04\xdf\xfa\xf6\x23\xe1\x6b\x51\x36\x94\x91\xaf\xba\xed\x92\x08\x69\x04\xb0\xf7\xc3\x0c\xb4\x0d\x67\xa0\x33\x13\x7f\x69\xb5\x9d\x21\x53\xea\xdd\x18\x5e\x18\x40\xe8\xea\x56\x5b\x22\x7f\xd6\xba\xd5\x9e\xc9\xdd\x46\x77\x97\x85\x8a\x0b\x2b\x29\xf5\xd2\xfc\x4e\xce\xff\xde\xd1\xea\x62\xde\x76\x4d\x33\x37\x37\xe6\xe6\xe6\xca\xd0\x0e\x4f\x48\xce\x0f\x82\x0a\xe3\xa4\x98\x2b\x3e\x67\xe4\xca\xde\x3f\x29\xe2\xcb\x63\x41\x5b\xe6\xbb\xbd\xa8\x93\x9e\x65\x8e\x82\x22\x17\xf0\xd9\x0a\xde\x4e\x0a\x2d\xca\xa9\x20\x75\x31\x83\x01\x4f\x23\x23\x6a\xaf\x86\x63\xf7\xc9\xc7\x34\x0c\xfa\x6d\xda\xdb\x2b\x76\x1e\xbc\x73\xe5\x39\x6d\x08\x60\x30\xe7\x70\xe0\xf2\x36\x8d\x83\x5b\x2e\x04\x01\x1c\xe9\xb1\x1b\x19\x84\xe2\xf9\x8c\x09\x93\xa2\x5c\x0a\x82\xeb\x4a\x74\xdb\x25\x92\x2d\x66\xa5\xfd\x9a\x04\xa9\xd5\xf4\x92\xd6\xfe\x90\x28\xa8\x53\xd3\xcb\xd2\x7e\x8c\xaf\x6e\x11\xdd\x0d\xcd\xf1\x7a\x6a\x7f\x3b\x96\x6e\x66\x60\x42\x1b\x56\x48\xe2\x16\xa0\x86\xed\x58\xc6\x55\xe4\xfe\xe9\x9e\x82\xb1\x68\x4e\xd5\x01\x3c\xd9\xe2\xc3\x26\x62\x32\x4d\x4b\xcd\x71\x0b\x2e\x06\x1f\x54\x14\x65\xe8\xe6\xb8\x67\x5c\xd3\xdc\x61\x54\x96\x46\x4d\xd8\x6f\xef\x8e\xce\x4b\x6d\x61\x3a\xbb\xd8\x18\xc4\xa1\x71\x6b\x2f\xb3\xa6\xa6\xae\xc5\xe2\xc7\x0f\x23\xc8\x1c\xfd\x02\x94\x9d\x8b\x5d\x50\xc1\x0d\x85\x83\xf8\xbf\x83\x79\x3b\xfe\xcf\xe3\xf4\xf0\xae\xc5\x42\xc9\x4c\x18\x67\xee\x46\x9e\xcd\x7f\xba\x08\x4f\x34\x56\x5c\xa0\x89\x46\x44\x61\xd7\x83\x28\x7a\x68\x70\xba\x4d\x01\x3a\x3c\xa4\xc3\x04\x83\x6e\x5e\x01\xf4\x1d\x3d\x3f\x4d\xd8\x23\x45\x83\xe6\xe8\x38\xe5\x0f\x0d\x17\x51\x78\xe0\x4f\xba\x9f\x66\x49\x40\xe8\x01\x24\x3f\x73\x46\x8c\x5b\x1d\x8f\x1e\x62\x93\x30\xa1\xb8\x67\xec\x19\xc7\x08\x90\x59\xe0\xe1\x02\x12\xa6\x15\x09\xb2\x69\x49\x99\x24\x42\x7d\x49\x56\x5c\x10\xb7\x06\x06\xc1\x25\xf7\x27\x91\xdd\xe4\x56\xd7\x23\xb4\x40\xc6\x5a\x7a\xb0\x17\xa2\xd0\x37\x95\x0d\xdb\x19\xf0\xf1\x08\x97\xdc\xc2\xc1\x47\xc6\xd2\x4a\xeb\xdd\x04\xe2\xc3\xf1\xcc\xbb\xf3\x50\x4e\x8e\x4a\x9e\xe1\x29\xb2\xdd\xa7\x84\x13\x66\x8b\x80\x13\xdd\xe7\xf8\x80\xce\x96\xf6\x8b\x3b\x3b\xed\x86\x69\xda\x4e\x6e\x32\x15\x06\xc1\xe6\x19\x42\x66\x10\x0c\xab\x39\xa2\xc4\x01\x35\x91\xd0\x08\x90\x06\x28\xf3\x82\xc5\x87\x04\x69\xea\x2a\x41\xc8\xfb\x16\xc3\xf6\xdb\xd4\xfc\x8e\x53\x16\x2d\x3b\xad\x37\x3c\x98\x3d\x74\xf2\xbf\x23\x28\x97\xc7\x58\xe1\xa5\x3b\x1a\xf7\xdd\xf2\xdb\x87\xf0\x4a\x56\xb6\x4a\x21\x38\xb7\xe1\xc5\x7a\xb7\x11\x65\xe0\xf0\xed\x96\xb2\x5b\x4a\x73\xa5\xf6\x68\x16\x14\x87\x7e\x1e\x3d\x08\x74\x88\x8e\x93\x6b\x5e\xf6\x38\xb4\x3f\x0c\x05\x95\x57\x24\x8a\x33\x7f\x2a\x61\x36\x13\x3b\xcf\x25\x3e\x49\x0f\x26\xa6\x3e\x31\x82\xc5\xef\x36\x33\x5a\xf1\x3e\xfb\x60\x04\x62\xb2\xd7\x72\x20\xe6\x8c\x9a\x7c\x50\xc3\x8c\xd0\x90\xdd\x8d\x32\xf2\x17\x81\xdb\x67\x1f\x14\x61\x92\x72\x96\xc3\xa5\x81\xe6\x57\x02\xb7\x1a\x8f\x05\x4b\xb0\xe5\x4d\x01\x6d\x1b\x1a\xda\xe4\x8f\xd2\xad\x68\x75\x4d\xba\xca\x69\x10\xe3\x36\xf8\x93\xd7\xa4\xff\x25\x5b\x52\xf5\xbf\x7c\xe7\xa2\x22\xbd\xe5\x7f\xca\x55\x5f\x66\x19\xe6\x25\x65\x17\x7d\xa1\x1e\xe8\x5b\xd1\xf4\x05\xb8\xa5\x4f\xb0\x31\xc0\x23\xdc\xe8\x2c\x40\x1a\xe4\xc4\x33\x53\x37\xd9\xa2\x33\xb4\x28\x0f\xbf\x2d\x27\xef\xfe\x56\x9e\x1f\x4e\xef\x2f\x4a\xf2\x81\x54\x5a\xc2\xc5\x61\x5b\x21\xc2\xed\xbb\xe3\xf3\xf8\x2a\xf7\x69\x66\x04\xba\xb1\xb2\x40\x87\x7d\xd5\xec\x7a\xa4\x6c\xc5\x13\x6b\x9f\xb2\xfa\x15\xaf\xc9\x97\xd7\x7e\x96\x27\x1e\x47\xef\xd2\xea\xc9\x62\xb8\x16\xf7\xc9\x71\xed\xb7\xf3\xd8\xc6\xd2\x2d\x85\x43\xda\x82\xda\x86\x0e\x94\xfa\xef\xd3\x68\x9e\xfc\x17\xba\x0d\xbe\x58\x32\x6b\x22\x04\x35\x06\x72\xae\x07\x1b\x1f\x7c\x74\x57\x28\x18\x8d\x53\xc9\x9f\x7e\x3a\x40\x17\x14\x0d\xd2\xac\xef\xf8\x96\xc1\x38\x00\xa1\x56\x84\xd8\xa6\xa6\xe0\x4c\x76\x62\x24\x18\x99\x65\x3c\x2d\x3c\x83\x2e\x67\xb3\x83\xe4\x01\x66\x0e\x85\x96\x32\x0d\xae\xc8\x64\x31\x29\x7f\x35\xfd\x76\x51\xfe\x6a\x41\x67\xa8\xb8\x7f\xbc\xd0\x4c\xa3\xc9\x3b\x1d\x41\x76\xcb\x09\x6e\x08\x9a\x1e\xd7\xda\x3f\x16\x0b\xf4\x62\x65\xd2\xb3\x6a\x79\x83\xa8\x44\x18\xbd\xb2\x22\xa8\x9f\x33\x39\x43\x57\x04\x5d\xd1\xa6\x41\x0d\xc7\x35\x52\x1b\xac\x90\x95\x88\x26\x58\x44\x8b\xb9\x60\x3e\x53\x41\xe7\xc9\xda\x2f\x0b\x43\xd9\xd4\xc2\x1f\x71\xa6\xc6\xca\xb7\x4f\x37\xe3\x86\x33\x1c\xd6\x33\x4d\x8b\x2b\x82\xb0\x20\x68\xcd\x29\x5b\x23\xc5\x51\x27\x49\xb0\xc0\x82\xfe\x7e\x32\xd8\x77\x7f\xfa\x29\xfa\x64\xcc\x65\x10\xf6\x26\xee\x4b\xc4\xd4\x30\x75\x61\xf6\xb2\x74\x0b\x2e\x89\x32\xc9\x34\x26\xc5\xd6\x84\x27\xeb\x05\x17\x4c\x76\x20\x0c\x70\xa7\x05\x0d\x06\x81\x30\xf0\x28\xcc\x0c\x9b\x64\x7b\x31\xd4\x14\x7b\x4d\xc6\xae\xce\x3a\x94\x2d\x65\xeb\x78\x0b\x9c\xe1\xc2\x3b\x20\x0a\xb7\xb4\xf1\x6c\xba\xe3\x98\x95\xdb\xd4\x5e\x51\xb5\xe1\x9d\x42\x98\x5d\xa3\x15\x6f\x6a\x22\x62\xd5\x64\x76\x73\x43\xe5\x14\xca\xc1\xd0\xa8\x87\x13\xa1\xa3\x5d\x13\xeb\xd0\x1b\xd4\xa6\xee\x70\xa7\x12\x7d\x7f\x17\xb5\x30\x47\xc7\xe7\x7d\x02\x3e\xbd\x87\xfd\xc3\xeb\x3f\x7d\x35\x89\x3b\x69\xe4\x03\xa9\xe6\x9d\x68\xe6\xad\x20\x2b\xfa\x01\x4c\x19\x9b\xaf\xc8\x2b\xe3\x5e\xcf\x00\x51\x21\xea\x78\x9d\x11\x53\x60\xd1\x06\x20\xa5\xf1\xa7\x9b\xa8\x13\x13\x46\x02\x06\x58\xb4\xbe\x76\x4d\x59\xec\x8f\x4f\x67\xff\xb6\xda\xe4\x83\x12\xf8\x8f\xe4\x5a\x57\xfc\xe1\x66\xb7\x85\x7c\xa7\x5e\xc4\xac\x63\xb9\xc6\x79\x4b\xd0\x92\x54\x38\x5e\xfb\xa8\xe6\x44\xb2\x07\x0a\x49\x42\xb6\xd2\xc9\x06\xd9\xe2\x8a\x48\x54\x71\x61\xb3\x5c\xeb\x6d\xe7\x0f\x69\x6b\xf6\x6c\xe1\xe6\x24\x6e\x6d\x8e\x20\xf8\xe9\x64\xb1\x58\x53\xb5\xe9\x96\x65\xc5\xb7\x0b\x3d\x88\x2d\xb4\xb8\xe8\x1b\x5f\xc0\x25\x49\xb9\xf8\xcf\xdf\xfe\x76\x0c\x45\x5f\xaf\x64\x44\x2d\x6a\x5e\x2d\xb6\x98\x75\xd8\x64\xa9\xbf\x77\x41\xae\xb7\xb8\x95\x1f\x43\xf5\x68\x33\xf7\x06\x2f\xc3\x8b\xeb\xdb\xe1\xde\x16\xce\x78\x0d\x59\xce\xd0\x63\x21\xf0\xb5\x09\x58\x7d\xc1\x94\x75\x06\xc6\x73\xf2\x96\x51\x55\x4c\x8d\xf5\x6d\x76\x14\x83\xbd\x71\x81\x06\x5b\xdc\x74\x33\x5b\x6d\x9d\x56\xf4\xdb\xc6\x89\xe9\xc5\xae\xed\x6a\x66\xeb\xb4\x0f\x1b\x41\x97\x67\x28\xbb\x4c\xe8\xf7\x04\xfd\xe3\x1f\xe8\xd7\x01\xea\x5d\x08\xed\x91\x54\x8a\x4d\xe1\xe5\x7b\x08\xc2\x8d\x71\xdd\xdc\xba\x2f\x49\x1d\xa9\x7f\x12\x6b\xcc\xe8\xf7\x38\x70\x8b\xba\xb8\x34\x1e\x7c\xda\x2b\x4b\x5b\x36\x95\x53\x88\x65\xff\x64\x4e\x5c\xac\x3f\x22\x97\x13\x17\xeb\x9f\x67\x2a\x27\xd7\xb1\x9f\x59\x26\xa7\x94\x19\x1e\xd7\x5b\x9a\x72\x01\xd6\x65\xfb\x4e\xff\x57\xe4\x4a\x8b\x3d\x91\xd6\x87\x74\x1f\xfa\x43\x9a\x26\x0e\xf5\x20\xf0\x90\xc4\x00\x26\x64\x8a\x86\xaf\x29\x7b\xaf\xae\x5b\x72\x6b\x70\xe3\x9d\x66\x39\xda\xff\x1f\x9b\x33\x80\xa3\x22\x47\x7a\xdf\x09\xcb\x9b\xc6\xad\xf9\x18\xc2\xcb\xbd\x27\x3d\xbc\x8e\x08\x69\x20\xd8\x1c\x22\x5e\x07\x4e\x7a\xf3\xdd\x7d\x4b\x2f\x1a\xea\xc6\x34\x39\x5c\x5b\x3e\x44\x22\x52\xc5\x71\xc8\x6e\x8b\xa5\xbc\xe2\xa2\xb6\x09\x87\xfb\x2e\x0d\xee\xf3\xf4\x90\x36\x3a\x3e\x38\x08\xc8\x0e\xe5\x66\x94\xd1\x52\xa2\xec\x87\x2f\x25\x4d\x66\xf8\xe5\x0e\xb2\xc5\x4d\x0e\x69\x93\x8c\x71\xf7\x44\x0d\xf2\x6c\xf9\x55\xc1\xd9\x6b\x52\x75\x82\xaa\xeb\xaf\x6d\x4c\xb2\xb9\xa8\x94\x9c\x20\x15\xf7\xa4\x05\x7b\xef\x63\x97\xdd\x89\x52\x74\x40\xa0\x47\xb5\xc1\x72\xae\x20\x4d\x57\x94\x0f\x6b\x78\xd6\xd3\x03\x46\xc9\xad\x92\xf5\x86\x3b\xb5\x21\x4c\x51\x73\x69\x20\xbb\xf2\x62\x90\xd1\xf5\xa5\xc1\x6e\x5f\x5e\x30\x31\x35\x6e\xb3\x67\x4e\xf5\xe8\x17\xb9\x55\xf9\x0f\x2d\xde\x66\xcb\x8d\xcd\x93\xfd\x34\x24\x4c\xa0\x12\xf4\x28\xde\x5c\xb7\x24\x08\x75\x8a\x0c\x75\x97\x0e\xda\xc1\x0d\xd3\x41\x7f\x56\x9c\x40\xa6\xb5\xa7\x8f\xbf\x8e\x57\x8d\x1b\xf7\xf0\x4e\x70\x36\x73\xf2\xe7\x06\xcf\xeb\x57\x6f\x52\x3c\x96\x18\x99\xbb\xc5\xa3\xfc\xb1\xa3\x9d\x5f\x9b\x76\xbe\x7e\xfc\x2a\xc1\x64\x48\xbb\x27\x96\x2f\x46\x47\x5d\xdf\x6d\xd8\xbf\x01\x44\xff\xf5\xe2\xcd\xef\xdf\x7e\x99\x60\xf2\x73\xfa\x23\x47\x1e\xed\x47\xfb\x09\x3f\xd3\x73\xa7\xb5\x4a\x54\xf4\x45\x24\xfe\xc6\x57\x74\x4e\x1a\xd8\x7b\x73\x99\xc5\x6d\x17\xc8\x18\x3a\x1f\xe5\xef\xd2\x98\xdc\xb2\x4c\x41\xfb\xed\xb1\x4e\x07\x1c\x1e\x2f\xdb\x80\xd3\xef\x4a\x9a\x1f\x33\xd0\x44\x2a\x71\x45\x2b\x32\x94\x44\x50\xdc\x5f\xdf\x32\x07\xba\x44\x61\xda\xbc\xe2\x35\xb6\xc9\x07\xef\x99\x92\xb9\x4d\x98\xd6\xdf\x10\x7d\x0c\xcf\x98\x20\x93\xc6\x03\x60\x10\xc0\x48\x37\x4d\x70\x7b\x62\x6e\x3e\xed\xcc\x6a\x15\xb4\xe9\x53\x16\xd8\xbb\xca\x6d\xfe\xfa\x8c\xbf\x8f\xde\x8b\xa1\x10\xc9\x1d\xb2\xaa\xb9\xd1\xd8\x87\xa6\xcc\xfb\x00\xc1\x85\x57\xc8\x42\xb9\xe4\x1f\xcc\xf3\x8e\x3e\xeb\x72\x09\x41\x2d\x08\xf2\x8b\x58\x88\x30\x27\xa3\x05\x72\xaf\x0d\x8c\x8f\xdd\x09\xbf\x24\xb1\xb9\xad\x37\x14\x85\x2e\xe7\x73\xd3\xc4\xa9\xdf\xfb\x6e\xfa\xfe\xd8\x37\x2e\x8a\xdb\x05\x44\x4d\xee\x84\xb6\x63\xfb\x22\xa6\xec\x92\x08\x49\xf6\xc0\x69\x12\x69\xed\x40\x39\x14\x02\xf6\x42\x77\x1f\xcc\xfa\x71\x57\xba\xcd\x25\xea\xfe\x1a\x55\x63\x42\xc1\xd0\x30\xfb\x27\xf8\xf0\xeb\xe4\xbc\x32\x18\xcd\x7e\x0f\xe9\xf4\x63\xa6\x12\x8d\xbc\xa5\x43\xeb\xe4\x94\x2f\x93\xc0\x31\x77\x78\x98\xb9\x71\x6e\x2e\x8d\x85\x5e\x81\x6c\xd8\x20\xad\xe5\x89\xfe\x3f\x8f\x72\xc7\x05\xf4\xb1\xfc\xd9\x41\xab\x82\x98\x67\xc4\x32\x17\x50\x33\x5b\x9d\xec\x6b\xb3\x3e\x92\xa8\xa3\x7d\xa2\x90\x0b\x72\xdd\x0a\x22\x65\x26\x88\x65\x18\xa3\xf0\xb9\x16\xaf\x51\xd1\xe7\x9f\xb9\x7d\xc6\x62\x81\x08\xdc\x6e\xbe\x20\xd7\x88\x5b\x07\x08\x5a\x62\xe1\x85\xaf\x9d\x2d\xe0\x28\x1f\x06\x15\xf6\x5a\x9b\x3a\x7f\xd9\x10\xf6\x92\x4b\xf5\x1c\xec\xdd\x25\xaf\xaf\x67\xc8\xa4\xa4\x72\xfd\xf7\xd1\xd5\x29\x73\x92\x50\xec\x9a\xf4\xb3\xe8\x0c\x91\xd2\xfc\xd9\xab\x0c\xdb\xa1\x4f\xee\x4f\xcc\x97\x69\x49\x4d\x4b\xd3\xfe\x94\xa3\xff\xe8\x27\xc9\x66\xc6\x92\x61\x6a\x2c\x2a\x27\xb6\x73\x50\x16\xaa\x1a\x40\x38\x34\x6b\xa7\x69\x84\x1d\x16\xd5\xe6\xad\x24\x42\x06\xbb\xd2\x4f\x8c\xa6\xd2\x9f\xe6\x7a\x83\x64\xee\xdd\xfa\xbc\xe6\xc9\xe9\x7a\xb2\x49\xb5\x91\x47\x0e\xef\x97\xfc\x83\x4b\x2b\x10\x23\x0c\x5e\xfa\xb3\x98\x4d\x30\x4f\x50\xb1\x4f\xc6\x65\x5b\x86\x30\xa8\x18\x64\xc4\x79\x31\x2a\x1f\xf4\x87\x0b\x72\xad\x77\x2d\x9e\xc5\xa3\x1c\x85\xa9\x86\xb7\xc0\xce\x52\x78\x88\x3e\x0b\xc8\x6c\x7b\x96\x58\xd0\xa1\x1f\xda\xdd\xcf\x2e\xf1\x77\xf8\x83\xbf\xdd\xd6\x89\xe6\xc4\x3e\x9f\x8e\x0e\x51\xb1\xc0\x2d\x5d\x5c\x1e\x2f\x34\x6d\xe4\xc2\x0c\xf0\x77\x7f\x3f\x2b\xd0\xa1\xeb\xab\x5b\xd8\x7a\x35\x6a\xe3\xe2\x04\x15\xdf\x49\xce\xfc\x01\xbd\xec\xaa\x8a\x48\x19\x78\x06\x05\x91\x2d\x67\x92\xa4\x61\x3d\x8c\xab\x67\xf0\xd6\x5f\x70\x85\x41\x2a\x91\x3b\xae\x41\x52\xc1\xa9\x8a\x54\x22\x30\x94\x02\x79\x15\x6e\x07\x3d\x29\xfc\x4b\x0c\x91\xb4\x74\xdd\x29\xf9\x85\x46\xe9\x7f\x06\x79\x6c\x86\xb1\x40\x1a\x57\x74\xf0\x6b\x48\x09\x72\x39\xc2\x10\xb8\xd9\x33\xa9\x08\xf4\x3f\x40\x75\x78\x16\x95\xa1\x38\x6e\x19\x52\x5c\x3d\xba\xf5\x19\x93\x62\xf8\x8e\x09\xdc\xe4\x37\x90\xef\x61\x4a\xd3\x66\x8a\x47\x51\x70\x91\x9e\x67\xd8\x58\x3f\x1a\xc1\xe5\x00\x06\x5f\x0b\x17\x71\x14\xfb\x54\x35\x85\xdd\xc4\x4e\x4c\x5e\x81\xae\x69\x60\xf3\x3e\x1d\x3a\x88\x2d\x2d\x50\x81\x26\x9a\xc5\x62\x78\xcd\x8f\xd3\x62\xdc\x65\x1b\x54\xcf\x84\x74\xc7\x19\x74\x62\xa6\xd0\xff\x17\x7f\x0e\x56\x9f\x5b\xe4\xe8\xd6\x47\x50\x86\x75\xc3\x95\x9b\x0c\x75\xe8\x9d\x32\xff\x7c\x3a\x39\x37\x13\x19\x90\x24\x71\x25\x1a\x7a\xbd\x47\xd6\xff\x0e\x42\xa4\xdb\xae\xdc\xc3\x77\x63\x48\x6f\x32\x96\xd3\x4d\x4e\x26\xc6\x54\x31\xae\x9b\xe1\xcd\xed\x9c\x1c\x0d\x70\x0e\xb5\xe1\x0e\x9d\x30\x43\x59\xf9\x7e\x63\x6e\x91\x99\xeb\x15\x70\xe9\x19\xb2\xf8\x70\x66\x03\xc5\x28\x43\xea\x8a\xfb\xb5\x2b\x53\xc5\xe4\x5f\x37\xa1\x64\x4c\x3f\xc1\x45\xf5\x8f\xd4\x4f\x1a\xfd\x40\x3f\x39\x84\xbb\xf4\x93\xad\xb8\x4b\x3f\x39\x90\x5f\xae\x7e\xf2\x7c\xe7\xf4\x94\x2f\xf0\xfa\x0a\x82\xad\x22\x7d\xe5\x61\xdc\x18\x82\x5a\x9f\x76\xb4\x8e\x60\x12\x52\xd9\x40\x0b\x6d\x14\xff\x5b\xdd\xf5\xe2\xe0\x9f\xad\xee\xdc\x6f\xfb\xe2\x21\x72\x2f\x1f\xea\xc9\x2d\x1e\x3d\x5c\xd0\x47\x28\x52\x5e\x5a\x53\xec\x54\x5e\x81\x2a\x19\xd1\x5e\xff\x1f\x28\x0e\x4f\x85\xfd\x14\x07\x8a\xa3\xa4\xdf\x1d\x9f\xff\x82\xf4\x4a\x2c\xee\xf6\xd3\x2b\xb1\xfc\xdb\x4f\xaf\x0c\x65\x79\xa0\x57\x42\xb9\x3c\x7c\x04\xbd\x26\x7f\xa6\xe4\x6a\xf0\x02\x7a\x4d\xe6\xe0\xce\x82\xa4\x3c\xac\xdb\x8e\x9d\x87\xf6\x9b\x3a\xb8\x63\xa3\x39\x48\xb7\xdd\xe7\x50\x82\xc0\xe5\x1d\xa1\x95\xf7\xa5\x7f\xd7\x3c\xf6\x46\x44\x2f\x5e\x1a\xa0\x74\x4b\x17\xee\xe8\x6e\xcb\x23\x64\xe7\x80\x37\x7e\x44\xe8\x11\x6a\x68\xbf\x2d\x37\x4d\x98\x80\xed\x5e\x5a\xe9\x0e\xcc\xe2\x9f\xe5\x0a\xb2\xaa\x4c\x8a\x77\x82\x34\xb0\xd5\xb8\xef\x9c\x5c\x3e\x99\x93\xb6\x05\xcf\xc3\x3b\x84\xa4\x94\x1b\xba\x52\x7f\x24\xd7\xe8\x77\x09\x9a\x3e\x19\x13\xf9\xfb\xe4\x68\x8a\x4e\xe0\x56\xd5\x41\xc2\xdf\xb5\x8d\x0e\xc8\x3c\x24\xf2\x71\x09\xa2\xf6\x4b\xed\x34\x79\xf9\x6d\x7d\x38\xfd\x76\x6e\xfe\x1b\x65\x78\x4a\x9f\x24\xed\x99\x66\x9c\xc8\xb6\xd6\x8a\x0a\xa9\x4e\x23\xb9\x9f\xe6\x8a\x02\x90\xe0\xb5\x7b\x4b\x2b\x08\x13\x7c\x77\x1c\x5f\x6e\x0c\xa7\xce\xcc\x98\xad\x3f\xcb\x57\xff\xec\x7c\x9a\x3a\xf8\xb5\xa4\x9c\x21\xbd\xf7\x2f\xa6\xf6\xb5\xad\x37\xbc\x9d\x18\x34\x25\x5f\xad\x24\x51\x93\x69\xa9\x78\x8b\xe6\xe8\xb3\xa3\xa3\xa8\xfe\x58\x8c\x1e\xda\x9b\xc0\xb7\xa6\xce\xfa\x49\xc8\xf1\x13\x0e\xfa\x4e\x59\xb7\x52\xa9\xa3\x4d\xe7\xd7\x36\xde\xc2\x4a\x9e\xf0\x55\xb9\x22\x85\x29\x7c\x5e\xa4\x61\x10\x87\xb6\x9a\xfb\xe0\x8d\x56\xf0\x15\x6d\xf2\x2f\x37\xb8\x53\xeb\xbb\x07\x6f\xfc\x2c\x03\x37\x7e\x01\x41\x1b\xfd\x1b\x8b\x4f\x78\xd3\xe0\x25\x17\x61\x30\xcf\x60\xca\x47\xc0\xfb\xd9\xb7\x99\x38\x2b\xff\x95\x0b\x84\xc1\x9e\x75\xf7\xc9\xe1\x48\x07\x4a\xe6\xba\x04\x52\x95\xdf\x66\xdf\xc4\x6f\x30\x1b\x67\xa7\xd3\x2f\xd6\xc7\x6e\x9d\xc9\xe1\xa3\x9b\x71\xfa\xd2\x8c\x27\xb9\xa3\xf5\x49\xf4\xe0\x72\x64\x9f\x9b\x8b\xe9\xb1\x53\x1b\xe2\x1e\xed\x94\xde\x64\x1d\xad\x90\x60\x8a\x2c\x37\x9c\x5f\x24\xeb\x07\xee\x80\x5f\x12\xa6\xfa\xa3\x04\x7f\x9d\x72\x9f\x2b\xa6\x54\x4e\x8a\x93\x8c\x0f\x3e\xc0\x0b\x49\x40\x06\xb1\x01\x61\xf2\x33\x88\x9a\xf8\x57\xf5\x22\xe7\xa1\x35\x6c\xf2\x7b\x97\xb3\x18\xb5\xf8\x1a\x62\xb8\x39\x43\x46\x80\x02\x0b\xd8\xce\x6a\x2a\x96\x1b\x2a\xcd\xfb\x64\xf0\x64\xad\x39\x7b\xb9\x35\x1b\xf7\xd8\x93\x69\xe6\xd9\x6e\xc6\x7d\xd2\xe4\x1d\x8f\x7a\xdd\x7a\x0e\x13\xe5\xa8\x8b\x70\xf6\x16\xcb\xee\x04\x0d\xb9\x04\xce\x80\x3b\x4c\x0e\x70\x33\x43\x5f\x78\xc9\xde\x73\x9d\xa1\xe4\x1b\x23\xd3\x51\x4d\x1a\x7a\x49\xc4\xf5\x81\x4f\x20\x0c\x3f\x2d\xa1\x66\xda\xec\x4c\xca\x6e\x59\x6e\xb9\x81\xef\x7b\xfc\xb4\xc7\xd1\x4e\x9a\x49\xd8\x1d\xe2\xec\x49\xb8\x8f\x3b\xd6\x01\x42\x1e\xd9\x03\x85\x60\xf5\x86\x46\xb2\x20\xb8\xbe\x4e\x1b\xd5\xdd\x34\x9a\x66\x4b\x14\x36\xf9\xf2\x60\x04\xe7\x3e\x64\x29\x7a\x17\xc3\xba\x15\xd2\x1a\xa6\x38\x5b\xe7\xc0\x3d\x99\xe1\x72\xfc\x28\x0e\x21\xe6\x84\xd5\x88\xaf\x20\x0f\x0a\x6c\x4a\xcc\x62\x45\x26\xe4\xcc\x4c\xb6\xc9\xe1\xe7\x21\xce\x47\x59\x3a\x8c\x68\x19\x5e\xc9\xeb\x79\x0a\xf2\x73\x93\x0f\xb8\x52\xf0\x70\x95\x65\x29\xfd\xe7\x5c\x52\x56\x91\xdb\x1a\x70\xf6\x46\xcf\x28\x2d\x6f\x35\x9f\x74\x6d\xff\x98\x4f\xf0\xdc\x80\x23\xc3\x2c\xc9\xb9\xea\x9e\x70\xcb\x54\xb9\xc4\x82\x1a\xd5\x33\xb3\x27\xb7\x8a\xd4\x48\x51\x76\x9d\xb6\x60\x90\xf8\x17\x97\x83\x51\x92\x2d\x66\x8a\x56\xe8\xed\x0b\x2d\xeb\xbb\x86\xc8\xb2\x3f\xc5\xeb\x33\x2e\xa6\x4f\xfc\x9a\x9c\x32\xee\x20\xb7\xcf\x11\xd3\xcb\xd8\xef\xba\x6d\xbb\x03\x01\xb6\x15\xed\xf9\xb8\x75\xfc\x70\xa6\xc9\x9e\x7d\xbd\x0d\xa2\x71\x80\x82\xa5\xa6\xa0\xfe\xbb\x6b\xe3\x17\x9e\x63\x21\x2f\x1b\x5a\x93\xb2\xdb\xd5\x09\x25\x30\x33\x97\xd5\x75\x47\x34\xbc\x9e\x9d\x08\x4b\xd7\x5e\x61\x51\xef\xc0\x61\xd6\x97\x41\x61\x80\x13\x04\x54\x6b\x7a\x2e\x6a\x73\xe0\xed\xff\x9e\x84\x10\x7d\x44\x42\x7f\xda\x1c\x7e\x6f\x05\x5f\x0b\x22\xa5\x49\x3a\x00\x7f\xda\xe6\xb5\x92\x7b\xac\x37\x66\x54\x5d\xe7\xa6\x61\x48\x32\xff\x49\xf1\xd6\x1a\x1e\x43\xa0\x1f\x6e\x9b\x0e\x67\xd7\xf6\x48\xc0\x84\xe8\x29\xaa\x55\x1f\x96\x96\xf5\x2f\xa9\xde\xf7\x92\x22\x73\x4d\x27\x79\xbb\x28\x33\x91\xe1\x7b\x2e\xde\x48\x52\x78\x39\x09\x21\xb4\xe8\xcd\x42\xf8\xc1\xfe\x28\x95\x39\x35\xec\x64\x5e\xdb\x9a\x1c\x5b\x4d\xd4\xaf\xa3\xa7\x82\xb7\xdf\x73\x46\x0e\x82\x77\xb3\xbf\xb7\x2f\x17\x4d\x8a\x7b\xee\x67\x90\x30\xd3\x15\x8d\x44\x28\xb9\x5b\x35\x4f\x29\x38\x1d\x7e\x70\x6f\x8f\xf9\x6a\xee\x8f\xf8\xc8\x31\xf8\x6e\x9f\xc6\xd0\xea\x29\x7e\x1a\x63\x43\x70\x0d\xc9\x48\x7e\x40\xc5\x5f\xe7\x4f\x5e\x7f\xf3\x7c\xfe\x86\x5f\x10\x56\x18\x4d\x14\xbc\x88\x8d\x3f\x3c\xa7\x0d\x91\x43\xb4\x5b\xfc\x61\x6e\x36\x30\x29\x2c\x24\x7f\xca\x81\xeb\x2f\x3d\xb8\x36\x7e\x5b\x45\x6a\x83\xbf\xb7\xde\x93\x8a\x06\x4c\x16\x36\xbb\xea\xaf\x16\xbf\x2a\xd0\xef\xc0\xef\x80\x86\xad\x78\x60\xdf\x48\x5d\x7f\x03\xd6\xc9\x4b\xca\x2e\x64\x9c\x24\xb4\xa6\x95\x7a\x4a\x56\xb8\x6b\xd4\x2b\xf7\xf0\x77\x8a\xb0\x36\xdf\xe7\xf6\x65\xf0\xc0\x6b\x4d\x2b\xf5\x82\x5d\xe2\x86\xc2\x00\x8c\x03\x3b\xad\x4d\x0d\x80\x79\x97\x6e\x6e\xa2\xcb\x42\x04\x50\x93\xf3\x2f\xe9\x7a\x58\x17\x2e\x1a\x2b\xce\xe7\x4b\xba\x8e\x6b\x99\x01\xe9\xba\xc3\x5a\xc6\x14\x4b\x26\x46\xdb\xe2\x23\xcf\x61\x82\x9d\xc0\xd9\xa4\xb0\xde\xf6\xd0\x07\xa3\x91\x98\xeb\x90\xf1\x0e\x3f\xe4\xcb\x77\xf0\x76\xb9\xfe\x75\x8e\xce\x00\xb6\xec\x3a\x5a\x87\xbb\x77\x73\x8b\xd6\x3d\x20\x18\xf9\x40\x1f\x3c\x34\x1f\x68\x0d\x27\xae\x7d\x7d\x74\x88\x1e\x14\xf0\xbc\xd4\x19\x10\x42\x16\x48\x53\xef\x4c\xcb\xfa\x9a\xb0\xe2\xd1\x83\x00\xcf\xb4\x7f\x5c\x4d\xd7\x1d\x04\x44\x1a\x04\xd3\x12\xb7\x2d\x61\xf5\x04\x9a\x0c\xfd\x03\xc1\xdf\x9e\x1c\x86\x8e\x35\xd0\x31\x21\xc9\x30\x9b\x89\xa7\x01\xa2\x2c\xa2\xce\xc0\x2f\x6d\xdf\x80\x18\xa1\xe0\x6d\x19\x3e\x52\xb1\x11\x4d\x39\xac\x6f\xf4\xe9\xa7\x03\x96\xd0\x0b\x3a\x8d\x55\xea\x4d\xd3\x1d\xc8\xd2\x5b\x49\x66\xe6\x4f\xc6\x7a\x9f\x26\x86\xb5\x96\x6d\xbe\x3b\x11\xec\xcd\xc8\x78\xd3\xe7\x2f\xe2\x27\x12\x9e\x99\xbc\x62\x07\x7d\x86\x31\xb8\x18\xca\x56\x74\x6d\x05\x22\xdd\xae\xdf\xd7\x54\x44\x51\x18\x74\xbb\x5e\x00\xbc\x35\x37\xe8\x9a\x71\x41\xde\x93\x2d\x87\x13\x91\x34\x3f\x13\x1c\xd9\x60\x09\x6d\x85\x09\x11\xd7\x44\x3d\x33\xf9\x21\xe4\x97\xd7\xa0\xe1\xbe\xc2\x5b\x02\x1e\xa5\xb9\x41\x0f\xd5\x73\xf9\x51\x1c\x3a\x9f\x22\x85\x1e\x1e\xba\xd9\x09\x73\xa5\x39\xb8\x77\xf4\x3c\x1a\xf7\x93\x86\xb6\x4b\x8e\x45\x8d\xfe\xf0\xda\xf6\xb0\xf2\x45\x26\x7b\xa0\x07\xf9\xc3\x6b\xc8\x6a\x6e\x7f\x99\x3e\xf9\x9f\x63\xeb\xde\x73\x38\x29\xe1\x85\xd3\xfe\xae\x57\xf0\x22\x34\xf0\x31\x71\xae\x34\x4d\x8f\xc7\x4a\x09\xba\xec\x14\xb1\x31\x6f\xce\x3c\xab\x89\x54\x82\x5f\x3b\x0b\xad\xaf\x23\xc3\x3a\x76\xa2\x13\x43\xd8\x96\x8e\xb5\x03\xc0\x6e\x04\xc1\x76\xe6\x8e\x3d\x0c\x43\x4e\x7f\xf2\xee\x71\x41\xd7\x94\xf9\x67\x8b\x43\xa3\x21\x9e\x09\x22\x04\xbc\x30\x3d\x9c\x87\x9f\x15\xb9\x4d\x37\x7f\x79\xc4\x5e\x2c\xd0\xe3\x4e\x71\x6d\x83\xf4\x3e\xd9\x7b\x61\x0e\x75\x6c\x3f\x67\x5d\xb2\xee\x63\x5a\xcb\x07\x77\xea\x71\x59\x33\xe2\x15\xfe\x60\xd2\x96\x4e\xbe\x38\xfe\x6c\x06\xa1\xba\x1e\xdc\xfe\x34\xdf\xe3\xb7\x1e\x1e\xff\xe1\xf1\x5f\xcd\x45\x7e\x1b\x5b\xe9\xbc\x84\xdf\xe1\x0f\x73\xb0\xe1\x7e\x32\x87\x45\xe8\xa8\xb0\x9e\x8a\x61\xec\xda\xf0\x0d\xa4\x81\xf5\xe8\x45\x75\xf1\xd7\xb9\xee\x7e\x71\x82\x0a\x2d\x3f\x8b\x44\x6e\x27\x81\xa9\xe6\x7c\xdb\xbc\x93\x33\x73\x19\x38\xc3\x7d\x1e\x18\x1d\x49\x5e\x24\x3b\x1c\x0b\xb3\x58\xa0\xb7\xf0\xe6\x1b\x08\xbc\xb7\xdf\xbc\x44\x5c\x20\xa3\xbd\x90\x24\xcd\x4a\xcf\x30\xe3\x68\xcb\x05\x41\x2b\x42\x7c\x90\xac\x26\x91\x71\x49\xd8\x66\x35\x1b\x7d\x63\x0f\xde\x7f\x0f\x03\x9b\xd8\xc1\xcc\xdf\x7e\xf3\x32\xf6\x9e\x77\xa2\x89\xfc\xd1\x09\x81\x66\x1a\x73\xa0\xcb\x32\xde\xb1\x61\x80\x72\xe6\x39\xb1\xbe\xd6\x88\xfb\xba\xf7\x1f\x92\xa6\x35\x0f\x6d\x06\xaf\x65\x7d\x3c\x97\x78\x1c\xc9\x4b\xeb\x83\x77\xd6\xab\x86\xc3\x38\x92\x54\xe3\xfb\x3c\xbf\x6e\x1e\x1f\xeb\x09\x67\xac\x62\xb8\x48\x61\xde\x45\x1a\xd8\x4c\x21\xb4\x01\xc9\x3f\xd6\x3e\x3c\xdd\x8a\xde\x0d\xde\xf7\x6d\xaf\x1d\x39\x5a\xc1\x4f\x1e\xd4\xd6\x82\x2d\x6c\x2c\xc7\xe7\xe9\x78\x46\x3c\x76\x60\xbe\x3a\x57\xdd\x58\x30\xc0\xf0\x28\x2b\x73\x69\x22\xdd\x53\x07\xee\x90\x0d\xbf\x9a\xb7\x98\xed\xf1\xac\x64\xba\x09\x86\x5a\x40\x78\xef\x51\x4f\xf0\x42\x4f\xee\x8c\xd7\xf2\xd9\x74\x38\x90\x1e\xbd\x65\x6b\x3d\x77\x3f\xc2\x65\x3b\x9c\x7b\x2b\x00\x52\x63\x77\xcc\x23\x9b\xe1\xe7\x3d\xbc\xaf\xb5\x7f\x5e\x25\xf5\x5b\x1b\xb7\x35\x47\x5b\x7c\x41\x10\x16\x4b\xaa\x04\x16\x90\xdb\x60\xeb\xf3\xa1\x29\x8e\x96\x64\x83\x2f\x09\x6a\xa8\x86\x42\x86\xef\xad\x82\x70\xe4\x87\xb2\x5b\x97\x7d\x4a\xfa\xdc\x52\xba\x09\x0e\xb0\x48\x75\x01\x41\xf6\x26\xe8\x81\x33\x64\xae\x9b\x43\x5e\x64\xa6\x17\xff\xc2\x0a\x33\x17\x08\x2f\xc8\x9a\xfa\x4e\x19\x90\xb9\xbc\x96\xf6\x44\x6b\xc7\x99\x0a\x90\xcb\x9e\xa5\x84\x5a\x60\xcc\x0f\xb3\x53\xa2\x0e\xae\x80\x8e\x61\xc9\x6b\xc3\x7c\x2d\x7f\x7b\xc6\x65\xfc\x74\x27\x3f\xf9\x84\x9f\x19\x12\xcc\x05\xae\x29\xdf\x41\x88\xb4\x49\x53\xfb\xd6\xe1\xa6\xd5\xec\xf7\xdd\x03\xfc\xa8\xe1\xdd\x44\xde\x79\xcc\xaa\x0d\x17\xce\x51\xec\xd3\x41\x8f\x79\xc4\x61\x1f\x65\xcc\x86\xd0\x95\x15\xfb\xc9\x4d\xdc\xcb\xe6\x78\x86\x36\x9f\xcd\xd0\xe6\xf3\x19\xda\xfc\x7a\x86\x36\x5f\xcc\xd0\xe6\x37\xbd\x2e\x1a\xbf\xb1\x63\x62\x01\x6b\x32\x3c\xa7\x0a\x73\xa3\x11\x56\xf1\x9a\xbc\xfd\xe6\xc5\x13\xbe\x6d\x39\x23\x2c\x4a\xe7\xcd\xe2\xc7\x58\xf2\x91\x5e\xd9\x93\x6a\xfb\xc9\xa7\x8d\x7a\xf7\xb7\x6f\xbb\xa3\xa3\x27\x47\xf3\x6f\xbb\xe3\xe7\xcf\x9f\x7f\xdb\x7d\xf6\xe4\x48\xff\x78\xfa\x1f\xcf\x9f\x7f\x7b\xf5\xed\x1c\x9d\x2f\xd6\xe0\x8e\x1f\xab\x6f\x01\xe6\x01\x44\x32\x20\x9b\x48\xf6\x12\x37\x71\x48\x86\xa5\xf4\xbb\x4b\xdc\x9c\x0f\x73\xab\xf6\xb5\xf4\x8e\x78\xae\x2d\xf7\xb0\x42\x2e\x38\x64\x80\xf4\xec\x2c\x7d\x44\xc1\xfd\x8b\xc1\xd0\xf1\xce\x78\xb5\x08\xf8\x30\x86\x3e\x08\xa7\x44\x6f\x6c\x79\x4d\xca\x2b\x81\x5b\x9b\x51\xd3\x39\x8d\x6c\x40\xfb\x83\xc2\x05\x2f\x1a\xd6\x84\x0c\x7b\x05\x7a\xe4\xb2\x6c\x9e\x46\xf8\x9c\x33\x28\xe8\xcb\x83\x87\x38\xc6\x50\xb8\xa4\xa0\x69\x0c\x64\x26\xee\x31\x8d\xfe\x4f\x03\x2d\xe1\xd8\xef\x91\x0f\x8d\xc4\x81\x03\xab\x37\xf1\xc2\x65\x96\xbd\x5e\x05\x47\x6a\xe1\x75\x9e\xbe\x20\x0e\xa3\x06\x14\xc1\x5b\xd4\xe6\x99\xa7\x53\x5b\xd8\x47\x2f\xf4\x65\xfd\x63\x50\xae\xe4\x59\x4d\xd5\xb0\x84\x8b\xfe\x77\x9c\xf6\xc4\x95\xda\xfc\x17\xa7\xbe\x07\x2e\x6e\xcf\x89\x0f\xdd\x3c\x82\x77\xc7\xb4\xbd\x5c\x06\xbb\xb1\xc1\x8b\x64\xc3\x7d\x98\xbb\x7b\x19\x3d\x7f\xb6\xde\xf5\xfc\x59\xe0\xfa\xb2\xd7\x31\xe5\x26\xb8\xdc\x98\x69\x3b\x7c\x43\x6f\x3a\x9a\x89\xea\x96\x07\xe6\x32\x66\x5b\x72\x3b\xd2\xfa\x96\x03\xd7\xf7\x9e\xf8\x02\x2c\x37\x61\xc8\xbb\xe0\x9d\x82\x2b\xaf\xa6\x93\x45\x4d\x2f\xe3\xa0\xa3\xe2\x64\x10\xd4\x34\xeb\x41\x83\xb4\x9a\x3e\x4a\xa9\x8a\xc2\x5b\x4e\x76\xc5\xca\x04\x98\xae\x4c\xe0\x47\xda\x6e\x12\x0f\x72\xe0\xc2\xad\x21\x99\x11\x98\x19\x5c\x78\xaf\x99\x2b\x40\x94\xd9\x81\xc5\x61\x18\xee\x7b\x8e\x49\x90\xad\xf1\xce\x01\x9d\xf7\xe4\x1b\x10\xef\x26\x7a\x36\xc4\xa8\xe7\xdf\x63\xb9\x99\x6c\xb0\xdc\xf4\xc1\xa6\x2e\xfc\xa2\xed\xe4\xe6\xb5\xc2\xca\x7b\x67\x06\x1f\x26\xac\x6b\x9a\x19\x32\xff\x0f\x48\x60\x5d\x87\xd2\x2f\x8a\xb0\x43\x67\x00\x35\x0c\x4c\xea\x03\x29\x7d\x2f\xac\xc5\xb9\x0e\x12\xf7\xba\x7e\x64\x3e\xf9\x9c\xd1\x8f\x9b\x06\x82\xec\xac\xc8\x88\xfa\x92\x79\xe4\x85\xc0\x1d\xa3\x4c\xa8\x54\x2e\x5e\xcf\x94\xcd\xd0\xfd\x95\xe0\x36\x16\xd0\x84\xfe\x8d\x3e\xd8\x09\x13\xd8\x43\xdb\xfb\xf8\x26\xe1\xad\x49\x61\x15\x87\xa9\x0a\x78\xd9\xd5\x24\x98\x99\x1c\x3b\x87\x8b\xae\xb4\x8c\x2a\x69\x94\xb7\x56\xa9\x4e\x3d\x13\x61\xf4\xc9\x19\x5a\xc6\x07\x9a\x18\x3d\x0a\x8b\x10\xaa\xd0\x19\xc2\xfd\xda\xd3\xdd\x5c\x06\x4b\x11\x9d\x39\x8c\x71\x96\x64\xd0\x03\x24\xbe\x77\x1c\x79\x83\x31\x78\x83\x35\xb2\xd0\x01\x0c\x2d\x9a\xaa\xe6\x32\x71\x51\xbe\x84\xfb\x5b\xd3\xb4\x91\x28\xbc\xd2\x55\x31\xb9\x82\x67\xb1\xf5\x97\x3e\x44\x1a\xb0\x78\x71\x0f\xb0\x63\x6f\x08\x14\xf0\x7b\xe9\x61\xe3\x6b\x24\xe6\x7f\x7e\x72\xb2\x2d\x44\xd8\x87\x21\xc7\x30\x31\x2e\xda\x24\xb1\xe2\xe2\x40\x49\xba\x66\x34\x4d\xdf\xd0\x77\xe7\xbe\xdb\xc0\x94\x58\x90\xff\xe1\xdd\xeb\x4e\x80\xb7\x04\x56\xb3\x49\x4d\xf8\xe5\xb5\x22\x2f\x09\x43\xf0\x9c\xb1\x44\xcb\x6b\x2d\x1c\xe1\xa5\x28\x13\x35\xf2\x40\xa2\xb7\x6f\x9e\xcf\x7f\x8b\x04\x69\x05\x91\x84\x29\xb3\x26\x7b\x76\xef\x91\x4c\x18\x17\x5b\xdc\xfc\x19\x5b\x07\x90\x79\x38\xab\x22\x16\x15\x9c\x4e\x1d\x68\xd3\xc2\x42\xa1\x33\x64\x23\x1c\xfb\x8a\x5e\xd6\x2d\x6d\xc7\xec\x43\x51\xb9\x43\x02\x5f\x2b\x77\x4a\x00\xfc\x05\x16\x91\x03\xaa\x36\x58\x68\x45\xfb\x58\x4d\x1c\xa7\xb8\x46\xfc\x05\x91\x0a\x3d\x44\xc7\xe8\xe1\x43\xf4\x1f\x9e\xd3\x7e\x87\x8e\xfd\xdf\x27\x3d\xc0\xf1\x71\x00\xf1\x59\x16\xe2\x37\x01\xc4\xe7\x39\x88\xcf\x42\x1c\xbf\xce\x42\x84\x38\xbe\xc8\x41\x7c\x1e\xe2\xf8\x4d\x00\x61\xde\xd2\x28\xbf\xc2\x5f\x9d\x5a\x9e\x74\x0f\xf7\x98\x41\x27\x17\xa0\x73\x9e\xd9\x2d\xfc\x35\x83\xcc\xd1\xcf\x1a\xb2\x7d\x51\xcf\x90\x7d\xf7\xfa\x85\xb5\x68\x4d\xb4\xa5\x5c\xdb\x03\x7c\xcd\xcb\x3d\xb4\xdb\xe5\x41\x71\x5f\xd1\x5c\x66\x31\xc8\xd1\x3c\x64\x20\x8d\xc9\x46\x19\xf5\x9c\xc0\x99\xed\xd8\x1f\x49\x74\x7b\x89\xc4\x11\x9f\xb6\x0f\xc9\x15\x32\x78\xef\xec\x0c\xf5\x88\xfb\x4f\x0d\x70\x57\xd0\xba\x86\x0d\xbe\x0b\xb2\xc5\x94\x99\x37\x20\x7c\x67\x1b\xc2\xac\x7b\x15\x12\x94\x12\x86\x1e\xb9\xaf\xc1\xae\xdc\xb5\xd6\x37\xeb\xc4\xec\xd1\xcc\x41\x07\xe2\xa3\x6f\xe7\xc8\x49\x11\xe7\x6b\xcc\x92\xce\xd7\x30\xda\xc7\x04\x6f\xe8\xa6\x4c\x10\x74\x48\x30\x08\x8c\x86\x30\x9c\xa8\x54\x4f\xfe\xff\x0b\x00\x00\xff\xff\xe9\x5e\xf1\x20\xd3\xba\x00\x00"
func jsGogsJsBytes() ([]byte, error) {
return bindataRead(
@@ -19901,8 +19901,8 @@ func jsGogsJs() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "js/gogs.js", size: 47795, mode: os.FileMode(0644), modTime: time.Unix(1599160113, 0)}
- a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x14, 0xf7, 0xd3, 0x68, 0xb1, 0x2b, 0xe1, 0x5d, 0x32, 0xed, 0x5, 0xe6, 0x9c, 0xf, 0x92, 0x60, 0x19, 0x18, 0x11, 0xdb, 0x3e, 0x26, 0x4f, 0xe7, 0x7f, 0xf5, 0x5f, 0xff, 0xf0, 0x96, 0x1e, 0xf3}}
+ info := bindataFileInfo{name: "js/gogs.js", size: 47827, mode: os.FileMode(0644), modTime: time.Unix(1600524792, 0)}
+ a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xd5, 0x47, 0x7, 0x4a, 0xce, 0xe, 0x74, 0x47, 0x44, 0x13, 0x15, 0xcc, 0x92, 0xdc, 0xee, 0xf8, 0x6, 0x2, 0x8e, 0x58, 0x2b, 0x7d, 0x80, 0x12, 0x4c, 0xd0, 0xde, 0xe8, 0xef, 0x4d, 0xcc, 0x2}}
return a, nil
}
diff --git a/internal/assets/templates/templates_gen.go b/internal/assets/templates/templates_gen.go
index 6762b33c..9ad5fc6f 100644
--- a/internal/assets/templates/templates_gen.go
+++ b/internal/assets/templates/templates_gen.go
@@ -1,6 +1,6 @@
// Code generated by go-bindata. DO NOT EDIT.
// sources:
-// ../../../templates/admin/auth/edit.tmpl (10.533kB)
+// ../../../templates/admin/auth/edit.tmpl (10.554kB)
// ../../../templates/admin/auth/list.tmpl (2.154kB)
// ../../../templates/admin/auth/new.tmpl (10.045kB)
// ../../../templates/admin/base/page.tmpl (1.227kB)
@@ -217,7 +217,7 @@ func (fi bindataFileInfo) Sys() interface{} {
return nil
}
-var _adminAuthEditTmpl = "\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xcc\x5a\x6d\x6f\xe3\xb8\x11\xfe\xec\xfb\x15\xac\x7a\x2d\x76\x81\x8b\x8d\xa2\x87\x43\x71\xb0\x03\xe4\x2e\xbb\xb7\x0b\x6c\x0e\x41\x93\xed\x57\x81\x16\xc7\x16\x1b\x89\x54\x49\x2a\xd9\xc0\xf5\x7f\x2f\xf8\x26\x89\x7a\xa1\xe5\x4d\x16\xbd\x2f\x89\x44\xce\x90\xf3\x3c\x24\x47\x33\x63\x1e\x0e\x0a\xca\xaa\xc0\x0a\x50\xb2\xc5\x12\x56\x39\x60\x92\xa0\xe5\xf1\xf8\xdd\x9a\xd0\x47\x94\x15\x58\xca\x4d\x82\x49\x49\x19\x02\x42\x15\xc2\xb5\xca\x81\x29\x9a\x61\x45\x39\x4b\x2e\xbf\x5b\x74\x05\x6b\x8a\x32\xce\x14\xa6\x0c\x84\xee\xeb\x77\xee\x05\x25\xa6\x7d\xd1\x9d\xd9\x0c\xbf\x62\xf8\x71\x8b\x85\x9d\x7c\x11\x6a\xaa\x27\x28\x1e\x01\x3d\x51\x02\x28\xe3\x45\x5d\x32\x33\x0d\x30\x65\x07\x5b\x0c\x70\xe0\x02\x84\x6a\xc6\x5a\xac\xf3\x1f\x3b\x56\x28\x5e\x21\xac\x14\xce\x72\x20\x48\x23\x76\xc6\x9a\x81\x96\xf4\x6f\xff\x60\xcb\x7b\xe1\xcc\x5a\x6a\xc0\x72\xa9\xb1\x27\x7e\xb0\x55\xfe\xa3\x15\xef\xa1\x6b\xc6\x94\xb0\x2f\x5b\xe3\x16\xeb\x1d\x17\x65\x47\x4e\xbf\x26\x08\x67\x9a\xc1\x4d\x72\x38\x2c\x3f\x51\xf6\x70\x3c\x26\xa8\x04\x95\x73\xb2\x49\x2a\x2e\x1b\x65\x6d\xd2\xaf\x77\xff\x7c\x7f\xcf\x1f\x80\x7d\xb8\xbf\xf9\xe4\xac\x58\x2c\xd6\x94\x55\xb5\x42\xea\xb9\x82\x4d\x92\x53\x42\x80\x25\x88\xe1\x12\x36\x09\x25\x09\x7a\xc4\x45\x0d\x66\xf8\x3b\x5e\x8b\x0c\x96\x1f\xaf\x8f\xc7\x66\xd4\xae\xe9\x94\x15\x94\x01\xda\x51\x28\x48\x23\xb0\x58\x17\x78\x0b\xc5\xe5\xe1\xf0\xfd\x38\x25\xfa\x6f\xaa\x27\x4f\x8e\xc7\xf5\xca\x0a\x37\xba\x63\xa6\x51\xb2\x49\x5a\x25\x67\xa9\x7d\x1e\xd8\x7a\xff\x5c\x41\xc7\xda\xc5\x5a\x56\x98\x5d\x86\xfd\xbf\xe3\x12\xf4\xd4\xa6\xcb\xc3\x5a\x11\xfa\x38\x86\x51\xc0\x7f\x6a\x2a\x80\xa0\x2e\x58\x74\x38\xd0\x1d\x5a\xbe\x13\x22\xb5\x83\x81\x10\x5c\x1c\x0e\xc0\x48\x30\xb9\x01\xa7\x97\x6d\x93\x68\xab\x93\xcb\xa9\x6d\x62\xe0\x19\x91\x49\x4e\x34\x0b\x46\xc2\x11\x60\x9f\x07\x04\x58\x7b\x12\x7d\xde\xf8\x8e\x67\xb5\x44\x1e\x41\x0f\xaa\x7f\xfb\xd3\xc5\x05\xfa\x74\x7d\x75\x8b\x30\x23\xe8\xda\x3c\x5d\x5c\xb4\x7b\x88\xee\x10\x17\xa8\xd9\x0a\xd2\x08\xb4\xaf\x46\xa1\xd9\x59\x8b\xc3\x01\x7d\x9f\xed\xf6\x3f\x6f\xbc\x84\x11\x6f\xfb\x47\x76\x4f\x43\x70\x9f\xd9\x3b\xc8\x6a\x41\xd5\xf3\xad\xe0\x8a\x67\xbc\x98\x62\xb9\xdd\x70\xe3\xdc\x4a\x37\x4e\x5a\xb9\x81\x46\x38\xee\x9f\x48\x09\x05\x98\x63\x86\xbc\xf6\x85\xd7\x46\x44\xf0\x8a\xf0\x27\xd6\xb1\x60\x7a\xdf\x0e\x27\x77\xcb\x37\xd2\xd1\xac\xa5\xa6\x70\x39\x84\x1f\x4c\xd8\xf5\x72\xf0\x45\xe9\xad\x35\xaa\xe6\x37\x7b\x67\x7b\x1b\x7b\xbd\xb2\x47\x83\x68\xa6\xdd\xf2\x7a\x45\x27\x66\x29\x81\xd5\x5d\x0b\x16\x87\x83\xc0\x6c\x0f\x68\x30\xa5\x6c\xd7\x7b\xb0\xe6\x0a\xca\x04\x11\xac\xf0\x45\xbb\x73\xfd\x99\x3d\x1c\x96\xe3\xd6\x2e\xdc\x9a\x77\x0c\x0b\x25\xc2\xd7\xde\xdb\xd8\x61\xee\xb9\xac\xe0\xa4\xe6\xc6\x89\x4e\xed\x26\xd3\x3b\xb6\x81\xda\x53\x6a\x44\xdc\x32\xdb\xe7\x70\x65\x3f\x70\xa9\xf4\x11\xad\x0a\x9c\x41\xce\x0b\x02\x62\x93\xc0\x72\xbf\x44\xe5\x33\xe1\x25\xa6\x6c\x99\xf1\x32\x19\x1c\xdc\x97\x02\xab\xb8\x88\x00\x33\xbd\x71\x60\x46\xc4\x01\xb3\xcf\x21\xb0\x5b\x2e\x0c\xb0\x11\x64\x3f\xfd\xfd\xa7\x93\x80\xec\xd1\x0f\x3c\x4d\x67\xcd\xbb\x70\xfb\x28\x03\x98\x5b\xca\x48\x4a\xd8\x34\x52\x2f\x30\x02\xb6\x8b\xd6\x8b\x39\xc0\xcd\x6b\x88\xf9\x17\xca\xc8\xf5\xef\xe3\xcb\x99\xb1\xcd\x1d\x60\x91\xe5\x3f\x90\x6c\xe3\xd7\x56\x3f\xeb\xe5\xed\x4e\x5a\x79\x60\x39\x14\x15\xd2\xe7\x19\x09\x20\x27\x11\xa4\x5a\x1c\x84\x01\x52\x4d\x9d\x06\x0f\xc9\x53\x87\x1f\x20\x71\x8e\xaa\xc2\x52\x3e\x71\x11\xec\x97\xb3\x58\x6e\x07\x88\x5a\xda\x88\xcd\x61\xbc\x11\xee\xf2\xde\x36\xf6\x2c\x1f\x59\x8d\x5b\xd7\xd7\x73\x98\x5f\xc5\xb1\x9f\x67\x26\xd3\x73\x4e\x64\xc0\x62\x2d\x41\xa4\x3a\xf0\x9c\xb6\xa3\x15\x39\xc1\x5e\x2b\xe8\x98\xeb\x34\x84\x2c\x7d\x96\x20\x7e\xc1\x12\xc6\x77\x2d\xaf\x37\x5a\x40\x8e\x6d\xda\xe1\x11\x1e\x9c\xe1\xc0\x53\xf7\x8e\xf4\x75\xe4\x4c\x9f\x41\x58\xec\x70\x7b\x81\x39\x64\xb5\x87\xbb\x79\x1d\x12\x35\x75\xb8\x6b\x4a\x36\x7f\x91\x3f\xbc\x26\x5b\x67\x7b\xf4\x1d\x2d\x94\xce\x41\xa6\xc8\x70\xfd\x71\xaf\xee\x84\x1c\x13\xfe\x2d\x24\xe2\xbd\x69\x1d\x27\xe2\xcd\x5f\xdf\xf0\xed\xbf\x21\x53\xbf\x1a\xcb\x2b\x2e\xe9\x97\xab\x2c\xe3\x35\x53\x6f\xdf\x58\x96\xde\xbe\x3d\xeb\x6b\x16\x83\x6c\xe0\xa5\xa7\x80\x07\x52\x71\xf8\x81\xa8\x23\x21\x6c\x0b\xa9\xb8\xd2\x7d\x0d\x1f\x2f\x45\xa3\x94\xa0\xdb\x5a\x41\xaa\x77\xe0\x89\x1c\x61\x28\x7b\x02\xd9\x50\xc1\xe3\x1b\xe9\xe9\xa1\xf4\x12\x9f\x9d\xc0\x60\xed\xe7\x9b\x99\x76\xf4\x92\xd7\xe4\x6c\x2e\x5f\x67\x71\x35\xce\x53\x94\x23\x97\x73\xbd\x1a\x2e\x59\xcf\xde\x0a\x5e\x74\x2e\x3a\x2f\x3f\x00\xd8\x74\x4c\x60\xbc\xab\xfd\x36\x78\xad\x70\xb4\x9d\xbb\xc4\xb4\x98\x03\xd6\xc8\xcd\x45\x6a\x84\x07\x30\x6d\xeb\x04\xc6\x1b\x4c\x8b\x89\xc0\xdc\xa8\x4d\xb9\xb0\x48\x76\x3b\x20\xa0\x57\xf4\xca\x21\x7b\xd8\xf2\x2f\xc3\xcf\xdd\xe5\x5a\x2a\xc1\xd9\x7e\x92\x96\x47\x10\x74\xf7\x9c\xee\x05\xaf\xab\xb4\x84\x72\x0b\x42\xe6\xb4\x32\xfc\x38\xd5\xc9\x2f\xa0\x33\x00\x18\xde\x16\x70\x21\x9f\xa5\x49\xcb\x6c\x68\xd5\x98\xe4\xb8\xb3\x13\x58\x51\xe2\x72\x37\x85\xc5\x1e\xd4\x26\xf9\xb3\xed\x34\xd2\xe6\x53\x6f\xf8\xfc\x4d\x37\xbe\xb3\x0a\xc7\xa3\x19\x0f\x88\xfb\xd4\x9d\x9f\xb3\x99\x6c\xdc\x94\xc5\xba\x15\x02\xc6\xd5\xd8\x64\x84\x4a\xf3\xe4\x8b\x04\x66\x4f\xb4\x46\x7e\x45\x9c\x6b\x95\x63\x11\x87\x95\x90\x26\xd0\x37\xe1\xd6\x8c\xf0\xa3\x19\x35\x20\x79\x18\x80\x18\x74\x53\x11\x08\xaf\x37\x46\x2f\x9e\x5d\x44\x62\xd4\x19\xc0\x4f\x7d\x68\x03\xa9\x59\xa0\xc3\x2f\x6d\xd8\x36\x02\x3e\x1a\x79\xfc\xf7\x4d\xc6\x36\x7b\xbe\x97\xe6\x5b\x23\xdf\xea\x57\x63\x9d\x8e\x38\x5e\x8b\x02\x7b\xb6\xd2\x9a\x46\x92\x05\x2b\xd9\xba\x19\x57\xcc\x36\x66\xa5\x05\x1d\x2f\x19\x0c\xb9\xe9\x4c\x15\xf0\xd3\x6d\x1f\xe1\xe8\xc6\x74\x7f\x36\x75\xda\x31\xe7\x65\xbb\x29\x79\x05\x4a\x0c\xa0\x28\x15\x46\xa2\x65\x42\x83\x07\x92\x52\x66\x3d\xd5\xac\xb8\xbc\x83\xbf\x7d\x1f\x46\xe6\x93\x80\xeb\x08\xd4\xaf\x2d\x39\x4c\xf8\xf3\x39\x0e\x7d\xae\x47\x6f\x48\x93\x9a\x2e\x9d\x7f\xc6\x9d\xb9\xe7\xad\xf7\x8d\x6b\xb5\x07\x1e\xbd\xf5\xd1\xcd\x37\x4f\x7e\x64\x3a\x69\x9e\xf6\xd3\xf1\x5a\x5b\x98\xc1\xf8\xb7\x6e\x6d\xf9\xee\xe6\x7e\x50\x51\x6e\x19\xd7\xbd\x91\xf2\xb1\x51\x3e\xa3\x7c\x7c\x46\x55\xb8\x54\x55\xaa\x1f\xcf\xaa\x06\x6b\x42\xcf\x2c\x00\x37\xf3\xf8\xc2\x6f\xdb\xd0\x0b\x43\x6a\x95\xeb\xfd\x3c\x4c\x1a\xa7\xab\xbd\x56\xe7\xdb\x56\x77\x6f\xee\x6f\xf5\x34\xe7\x56\x75\x5d\x45\xf7\xff\x5d\xcd\x35\x74\xc7\x4b\xba\x5a\x64\x46\x59\xb7\x1d\xa9\xbb\x92\xb1\x02\xef\x6b\x17\x70\xcd\x84\xf1\x2a\xae\x16\x99\x51\xc9\x6d\x47\xea\x62\x89\xd5\x74\x5f\x2b\x7d\x2f\x0a\xfe\x04\x24\xb5\xd1\x8a\x8c\x44\xfd\x3d\xc1\x13\x61\x7f\x4f\xda\xfb\xc4\x7e\x73\xef\xc4\xd9\xee\x6b\xdb\x1b\xfe\xa6\x14\x94\x0b\x67\x9b\x39\x5e\x27\x0c\xa8\x1a\xf3\x91\xb7\x57\x37\xd3\x2e\xf2\xf6\xea\x26\xe2\x21\xb5\xea\x0b\x2a\x48\x15\x2e\x53\x09\xe2\x91\x66\xa7\xd2\xe9\x81\xe4\x89\xdf\x0a\xfa\xe2\xfe\x77\x83\x41\x7b\xff\x67\x2f\xd3\xe7\x7f\xc6\x8c\x6f\xbb\x31\x2e\x7f\xa3\xea\x43\xbd\x9d\xa6\xd3\xf6\x47\x18\x75\x03\xbc\x80\xd4\x3d\x55\x79\xbd\x4d\x71\x45\x53\x60\xa4\xe2\x94\x45\x4e\xec\x98\x70\x9c\xda\x31\x0d\x1f\x2e\x8e\x75\xf5\x36\xfd\xed\xc7\x77\xae\x6b\x3c\x7a\xca\x95\xaa\xe4\xcf\xab\x15\xae\xa8\x33\x6e\x99\xf1\x72\x75\xee\x5a\x4c\xc4\x4e\x6d\xfa\xd6\x0f\x02\x72\x4a\x60\xf8\x13\xfa\xc9\xf0\x6a\x66\x70\x65\x13\xd8\x54\x15\x32\x1a\x54\x05\x21\x95\x16\x1e\x8f\xa1\xbc\xed\x9f\x25\xdc\x7f\xba\x9b\x0c\x9e\xc2\x5b\x05\x53\x57\x0c\x72\x2c\x2f\x54\x21\x47\x6e\x18\x18\x9a\x3e\x60\x69\xe6\xf8\xb6\xfc\xc8\x07\x5a\x69\x76\x52\x5b\x57\x98\x4f\x92\x51\x74\x4a\x71\xb2\xee\x1e\x68\xf5\x2f\x23\xf8\x42\xc2\x26\xee\x9d\xbc\x16\x15\x38\x53\xf4\x11\x2b\x88\x87\xdf\x01\x09\x54\xa6\x46\x0b\x4e\x50\xf0\x51\x5e\x19\xb1\xe9\x78\xfb\x0f\xc1\x00\x81\x1d\xae\x0b\xd5\xc6\xc7\x73\x49\x70\x8a\x27\x59\xb8\xb6\x72\x2f\x64\xa1\x0f\x7f\x5b\x2b\xc5\x59\x70\x6d\x0c\x80\x21\xdb\x1c\xc9\x58\x2b\x82\x95\xfd\x9e\x59\xd1\x30\x3d\xec\xfa\xaa\xf7\xb4\x80\x89\x04\xb1\xa6\x48\x7f\x17\x9c\x0d\x04\x0a\x50\x70\xe1\xa6\xb6\xb1\x71\x2d\x0a\xe3\x85\xdd\xb5\xad\x95\x95\x71\x9d\xda\xb1\xf7\xaf\x5c\x4d\x2f\x8f\x51\xec\x87\xd6\x61\x5c\xdd\xed\x5b\xaf\x76\x5c\x94\xf6\xa5\x6d\x6f\x9e\xfc\x83\xfb\xef\xab\x9a\xfd\x2c\xa8\xc4\x45\x81\xb6\x58\xd2\xcc\xc1\x43\x25\x27\xb8\x18\xb9\xcb\xa7\xb3\x8d\xee\x05\xb9\x36\x21\x51\x02\xcb\x3c\xcc\x46\xe2\x28\x53\x7b\xf3\x8b\xaa\x02\xcc\x3d\xba\xc6\xd6\xce\x8c\xdd\x3b\x7d\xeb\xea\x04\x6d\x76\x40\x02\x32\x6b\xa2\x34\x3f\xe6\xe0\x36\xa0\xd3\x30\x30\x53\x7b\xef\x4e\xba\x5b\x8e\x56\x65\xa0\xb1\xe3\xdc\x54\xb2\xb4\xcc\xff\x02\x00\x00\xff\xff\xac\x5c\xb2\x0b\x25\x29\x00\x00"
+var _adminAuthEditTmpl = "\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xcc\x5a\x6d\x6f\xe3\xb8\xf1\x7f\xed\xfb\x14\xfc\xeb\x7f\x2d\x76\x81\xb3\x8d\xa2\x87\x43\x71\xb0\x03\xe4\x2e\xbb\xb7\x0b\x24\x87\xa0\xce\xf6\xad\x40\x8b\x63\x8b\x8d\x44\xaa\x24\xe5\x6c\xe0\xfa\xbb\x17\x7c\x92\x44\x3d\x59\xde\xf8\xd0\xbe\x49\x24\x72\x86\x9c\xdf\x8f\xe4\x68\x66\xcc\xe3\x51\x41\x5e\x64\x58\x01\x8a\xb6\x58\xc2\x32\x05\x4c\x22\xb4\x38\x9d\xbe\x5b\x11\x7a\x40\x49\x86\xa5\x5c\x47\x98\xe4\x94\x21\x20\x54\x21\x5c\xaa\x14\x98\xa2\x09\x56\x94\xb3\xe8\xe6\xbb\x59\x53\xb0\xa4\x28\xe1\x4c\x61\xca\x40\xe8\xbe\x76\xe7\x5e\x50\x62\xda\x67\xcd\x99\xcd\xf0\x4b\x86\x0f\x5b\x2c\xec\xe4\xb3\x50\x53\xbd\x40\x76\x00\xf4\x42\x09\xa0\x84\x67\x65\xce\xcc\x34\xc0\x94\x1d\x6c\xd6\xc1\x81\x33\x10\xaa\x1a\x6b\xb6\x4a\x7f\x6c\x58\xa1\x78\x81\xb0\x52\x38\x49\x81\x20\x8d\xd8\x19\x6b\x06\x5a\xd0\xbf\xfc\x8d\x2d\x9e\x84\x33\x6b\xa1\x01\xcb\x85\xc6\x1e\xf9\xc1\x96\xe9\x8f\x56\xbc\x85\xae\x1a\x53\xc2\x3e\xaf\x8d\x9b\xad\x76\x5c\xe4\x0d\x39\xfd\x1a\x21\x9c\x68\x06\xd7\xd1\xf1\xb8\xb8\xa7\xec\xf9\x74\x8a\x50\x0e\x2a\xe5\x64\x1d\x15\x5c\x56\xca\xda\xa4\x5f\x37\x7f\xff\xf8\xc4\x9f\x81\x7d\x7a\x7a\xb8\x77\x56\xcc\x66\x2b\xca\x8a\x52\x21\xf5\x5a\xc0\x3a\x4a\x29\x21\xc0\x22\xc4\x70\x0e\xeb\x88\x92\x08\x1d\x70\x56\x82\x19\x7e\xc3\x4b\x91\xc0\xe2\xf3\xdd\xe9\x54\x8d\xda\x34\x9d\xb2\x8c\x32\x40\x3b\x0a\x19\xa9\x04\x66\xab\x0c\x6f\x21\xbb\x39\x1e\xbf\xef\xa7\x44\xff\x8d\xf5\xe4\xd1\xe9\xb4\x5a\x5a\xe1\x4a\xb7\xcf\x34\x4a\xd6\x51\xad\xe4\x2c\xb5\xcf\x1d\x5b\x9f\x5e\x0b\x68\x58\x3b\x5b\xc9\x02\xb3\x9b\xb0\xff\x77\x9c\x83\x9e\xda\x74\x79\x58\x4b\x42\x0f\x7d\x18\x05\xfc\xab\xa4\x02\x08\x6a\x82\x45\xc7\x23\xdd\xa1\xc5\x07\x21\x62\x3b\x18\x08\xc1\xc5\xf1\x08\x8c\x04\x93\x1b\x70\x7a\xd9\xd6\x91\xb6\x3a\xba\x19\xda\x26\x06\x9e\x11\x19\xe4\x44\xb3\x60\x24\x1c\x01\xf6\xb9\x43\x80\xb5\x27\xd2\xe7\x8d\xef\x78\x52\x4a\xe4\x11\xb4\xa0\xfa\xb7\xff\x9b\xcf\xd1\xfd\xdd\xed\x23\xc2\x8c\xa0\x3b\xf3\x34\x9f\xd7\x7b\x88\xee\x10\x17\xa8\xda\x0a\xd2\x08\xd4\xaf\x46\xa1\xda\x59\xb3\xe3\x11\x7d\x9f\xec\xf6\x3f\xaf\xbd\x84\x11\xaf\xfb\x7b\x76\x4f\x45\x70\x9b\xd9\x0d\x24\xa5\xa0\xea\xf5\x51\x70\xc5\x13\x9e\x0d\xb1\x5c\x6f\xb8\x7e\x6e\xa5\x1b\x27\x2e\xdc\x40\x3d\x1c\xb7\x4f\xa4\x84\x0c\xcc\x31\x43\x5e\x7b\xee\xb5\x11\x11\xbc\x20\xfc\x85\x35\x2c\x18\xde\xb7\xdd\xc9\xdd\xf2\xf5\x74\x54\x6b\xa9\x29\x5c\x74\xe1\x07\x13\x36\xbd\x1c\x7c\x55\x7a\x6b\xf5\xaa\xf9\xcd\xde\xd8\xde\xc6\x5e\xaf\xec\xd1\x20\x9a\x68\xb7\xbc\x5a\xd2\x81\x59\x72\x60\x65\xd3\x82\xd9\xf1\x28\x30\xdb\x03\xea\x4c\x29\xeb\xf5\xee\xac\xb9\x82\x3c\x42\x04\x2b\x3c\xaf\x77\xae\x3f\xb3\xc7\xe3\xa2\xdf\xda\x99\x5b\xf3\x86\x61\xa1\x44\xf8\xda\x7a\xeb\x3b\xcc\x2d\x97\x15\x9c\xd4\xd4\x38\xd1\xa1\xdd\x64\x7a\xfb\x36\x50\x7d\x4a\x8d\x88\x5b\x66\xfb\x1c\xae\xec\x27\x2e\x95\x3e\xa2\x45\x86\x13\x48\x79\x46\x40\xac\x23\x58\xec\x17\x28\x7f\x25\x3c\xc7\x94\x2d\x12\x9e\x47\x9d\x83\xfb\x56\x60\x05\x17\x23\xc0\x4c\xef\x38\x30\x23\xe2\x80\xd9\xe7\x10\xd8\x23\x17\x06\x58\x0f\xb2\x9f\xfe\xfa\xd3\x59\x40\xf6\xe8\x07\x9e\xa6\xb1\xe6\x4d\xb8\x6d\x94\x01\xcc\x2d\x65\x24\x26\x6c\x18\xa9\x17\xe8\x01\xdb\x44\xeb\xc5\x1c\xe0\xea\x35\xc4\xfc\x0b\x65\xe4\xee\xf7\xfe\xe5\x4c\xd8\x7a\x03\x58\x24\xe9\x0f\x24\x59\xfb\xb5\xd5\xcf\x7a\x79\x9b\x93\x16\x1e\x58\x0a\x59\x81\xf4\x79\x46\x02\xc8\x59\x04\xb1\x16\x07\x61\x80\x14\x43\xa7\xc1\x43\xf2\xd4\xe1\x67\x88\x9c\xa3\x2a\xb0\x94\x2f\x5c\x04\xfb\xe5\x22\x96\xeb\x01\x46\x2d\xad\xc4\xa6\x30\x5e\x09\x37\x79\xaf\x1b\x5b\x96\xf7\xac\xc6\xa3\xeb\x6b\x39\xcc\x6f\xe2\xd8\xcf\x33\x91\xe9\x29\x27\x32\x60\xb1\x94\x20\x62\x1d\x78\x0e\xdb\x51\x8b\x9c\x61\xaf\x16\x74\xcc\x35\x1a\x42\x96\xbe\x48\x10\xbf\x60\x09\xfd\xbb\x96\x97\x6b\x2d\x20\xfb\x36\x6d\xf7\x08\x77\xce\x70\xe0\xa9\x5b\x47\xfa\x6e\xe4\x4c\x5f\x40\xd8\xd8\xe1\xf6\x02\x53\xc8\xaa\x0f\x77\xf5\xda\x25\x6a\xe8\x70\x97\x94\xac\xff\x24\x7f\xb8\x26\x5b\x17\x7b\xf4\x1d\xcd\x94\xce\x41\x86\xc8\x70\xfd\xe3\x5e\xdd\x09\x39\x26\xfc\x5b\x48\xc4\x47\xd3\xda\x4f\xc4\xbb\x3f\xbf\xe3\xdb\x7f\x42\xa2\x7e\x35\x96\x17\x5c\xd2\xaf\xb7\x49\xc2\x4b\xa6\xde\xbf\xb3\x2c\xbd\x7f\x7f\xd1\xd7\x6c\x0c\xb2\x81\x17\x9f\x03\x1e\x48\x8d\xc3\x0f\x44\x1d\x09\x61\x5b\x48\xc5\xad\xee\xab\xf8\x78\x2b\x1a\xa5\x04\xdd\x96\x0a\x62\xbd\x03\xcf\xe4\x08\x5d\xd9\x33\xc8\xba\x0a\x1e\x5f\x4f\x4f\x0b\xa5\x97\xf8\xe2\x04\x3a\x6b\x3f\xdd\xcc\xb8\xa1\x17\x5d\x93\xb3\xa9\x7c\x5d\xc4\x55\x3f\x4f\xa3\x1c\xb9\x9c\xeb\x6a\xb8\x64\x39\x79\x2b\x78\xd1\xa9\xe8\xbc\x7c\x07\x60\xd5\x31\x80\x71\x53\xfa\x6d\x70\xad\x70\xb4\x9e\x3b\xc7\x34\x9b\x02\xd6\xc8\x4d\x45\x6a\x84\x3b\x30\x6d\xeb\x00\xc6\x07\x4c\xb3\x81\xc0\xdc\xa8\x0d\xb9\xb0\x91\xec\xb6\x43\x40\xab\xe8\x95\x42\xf2\xbc\xe5\x5f\xbb\x9f\xbb\x9b\x95\x54\x82\xb3\xfd\x20\x2d\x07\x10\x74\xf7\x1a\xef\x05\x2f\x8b\x38\x87\x7c\x0b\x42\xa6\xb4\x30\xfc\x38\xd5\xc1\x2f\xa0\x33\x00\x18\xde\x66\x30\x97\xaf\xd2\xa4\x65\x36\xb4\xaa\x4c\x72\xdc\xd9\x09\xac\x28\x71\xb9\x9b\xc2\x62\x0f\x6a\x1d\xfd\xbf\xed\x34\xd2\xe6\x53\x6f\xf8\xfc\x4d\x37\x7e\xb0\x0a\xa7\x93\x19\x0f\x88\xfb\xd4\x5d\x9e\xb3\x99\x6c\xdc\x94\xc5\x9a\x15\x02\xc6\x55\xdf\x64\x84\x4a\xf3\xe4\x8b\x04\x66\x4f\xd4\x46\x7e\x43\x9c\x6b\x95\xc7\x22\x0e\x2b\x21\x4d\xa0\x6f\xc2\xad\x09\xe1\x47\x35\x6a\x40\x72\x37\x00\x31\xe8\x86\x22\x10\x5e\xae\x8d\xde\x78\x76\x31\x12\xa3\x4e\x00\x7e\xee\x43\x1b\x48\x4d\x02\x1d\x7e\x69\xc3\xb6\x1e\xf0\xa3\x91\xc7\xbf\xdf\x25\x6c\xbd\xe7\x7b\x69\xbe\x35\xf2\xbd\x7e\x35\xd6\xe9\x88\xe3\x5a\x14\xd8\xb3\x15\x97\x74\x24\x59\xb0\x92\xb5\x9b\x71\xc5\x6c\x63\x56\x9c\xd1\xfe\x92\x41\x97\x9b\xc6\x54\x01\x3f\xcd\xf6\x1e\x8e\x1e\x4c\xf7\x17\x53\xa7\xed\x73\x5e\xb6\x9b\x92\x2b\x50\x62\x00\x8d\x52\x61\x24\x6a\x26\x34\x78\x20\x31\x65\xd6\x53\x4d\x8a\xcb\x1b\xf8\xeb\xf7\x6e\x64\x3e\x08\xb8\x1c\x81\xfa\xad\x25\x87\x01\x7f\x3e\xc5\xa1\x4f\xf5\xe8\x15\x69\x52\xd3\xa5\xf3\xcf\x71\x67\xee\x79\x6b\x7d\xe3\x6a\xed\x8e\x47\xaf\x7d\x74\xf5\xcd\x93\x9f\x99\x4e\x9a\x87\xfd\xf4\x78\xad\x2d\xcc\x60\xfc\x5b\xb3\xb6\xbc\x79\x78\xea\x54\x94\x6b\xc6\x75\xef\x48\xf9\xd8\x28\x5f\x50\x3e\xbe\xa0\x2a\x9c\xab\x22\xd6\x8f\x17\x55\x83\x35\xa1\x17\x16\x80\xab\x79\x7c\xe1\xb7\x6e\x68\x85\x21\xa5\x4a\xf5\x7e\xee\x26\x8d\xc3\xd5\x5e\xab\xf3\xc7\x56\x77\x1f\x9e\x1e\xf5\x34\x97\x56\x75\x5d\x45\xf7\xbf\x5d\xcd\x35\x74\x8f\x97\x74\xb5\xc8\x84\xb2\x6e\x3d\x52\x73\x25\xc7\x0a\xbc\xd7\x2e\xe0\x9a\x09\xc7\xab\xb8\x5a\x64\x42\x25\xb7\x1e\xa9\x89\x65\xac\xa6\x7b\xad\xf4\x3d\xcb\xf8\x0b\x90\xd8\x46\x2b\x72\x24\xea\x6f\x09\x9e\x09\xfb\x5b\xd2\xde\x27\xb6\x9b\x5b\x27\xce\x76\xdf\xd9\xde\xf0\x37\xa5\xa0\x5c\x38\xd9\xcc\xfe\x3a\x61\x40\x55\x9f\x8f\x7c\xbc\x7d\x18\x76\x91\x8f\xb7\x0f\x23\x1e\x52\xab\xbe\xa1\x82\x54\xe0\x3c\x96\x20\x0e\x34\x39\x97\x4e\x77\x24\xcf\xfc\x56\xd0\x16\xf7\xbf\x1b\x74\xda\xdb\x3f\x7b\x99\x3e\xff\x33\xe6\xf8\xb6\xeb\xe3\xf2\x37\xaa\x3e\x95\xdb\x61\x3a\x6d\xff\x08\xa3\x6e\x80\x37\x90\xba\xa7\x2a\x2d\xb7\x31\x2e\x68\x0c\x8c\x14\x9c\xb2\x91\x13\xdb\x27\x3c\x4e\x6d\x9f\x86\x0f\x17\xfb\xba\x5a\x9b\xfe\xf1\xf3\x07\xd7\xd5\x1f\x3d\xa5\x4a\x15\xf2\xe7\xe5\x12\x17\xd4\x19\xb7\x48\x78\xbe\xbc\x74\x2d\x06\x62\xa7\x3a\x7d\x6b\x07\x01\x29\x25\xd0\xfd\x09\xfd\x6c\x78\x35\x31\xb8\xb2\x09\x6c\xac\x32\x39\x1a\x54\x05\x21\x95\x16\xee\x8f\xa1\xaa\xd3\x27\xf8\x81\x12\x10\x3a\x1e\x7d\xba\xdf\x0c\x46\x51\xe1\xf5\x82\xa1\xbb\x06\x29\x96\x73\x95\xc9\x9e\xab\x06\x86\xaf\x4f\x58\x9a\x39\xfe\x58\xa2\xe4\x33\x2d\x34\x4d\xb1\x2d\x30\x4c\x67\xcb\x28\x3a\xa5\x89\xac\x6d\x9e\x69\xf1\x74\xbf\xf9\x87\x51\x7a\x23\x79\x03\x97\x51\xae\x45\x0b\x4e\x14\x3d\x60\x05\xe3\x31\x79\x40\x08\x95\xb1\xd1\x82\x33\x74\x7c\x96\xb7\x46\x6c\x38\x08\xff\x9f\x60\x80\xc0\x0e\x97\x99\xaa\x83\xe6\xa9\x24\x38\xc5\xb3\x2c\xdc\x59\xb9\x37\xb2\xd0\x86\xbf\x2d\x95\xe2\x2c\xb8\x4b\x06\xc0\x90\x6d\x1e\x49\x63\x0b\x82\x95\xfd\xc8\x59\xd1\x30\x67\x6c\x3a\xb0\x8f\x34\x83\x81\xac\xb1\xa4\x48\x7f\x2c\x9c\x0d\x04\x32\x50\x30\x77\x53\xdb\x80\xb9\x14\x99\x71\xcd\xee\x2e\xd7\xd2\xca\xb8\x4e\xed\xed\xdb\xf7\xb0\x86\x97\xc7\x28\xb6\xe3\xed\x30\xd8\x6e\xf6\xad\x96\x3b\x2e\x72\xfb\x52\xb7\x57\x4f\xfe\xc1\xfd\xf7\xa5\xce\x76\x6a\x94\xe3\x2c\x43\x5b\x2c\x69\xe2\xe0\xa1\x9c\x13\x9c\xf5\x5c\xf0\xd3\x29\x48\xf3\xd6\x5c\x9d\xa5\x28\x81\x65\x1a\xa6\x28\xe3\x28\x63\x7b\x1d\x8c\xaa\x0c\xcc\xe5\xba\xca\xd6\xc6\x8c\xcd\x8b\x7e\xab\xe2\x0c\x6d\x76\x40\x02\x32\xa9\x42\x37\x3f\x66\xe7\x8a\xa0\xd3\x30\x30\x63\x7b\x19\x4f\xba\xab\x8f\x56\xa5\xa3\xb1\xe3\xdc\x94\xb7\xb4\xcc\x7f\x02\x00\x00\xff\xff\xd8\xb4\xa9\x7d\x3a\x29\x00\x00"
func adminAuthEditTmplBytes() ([]byte, error) {
return bindataRead(
@@ -232,8 +232,8 @@ func adminAuthEditTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "admin/auth/edit.tmpl", size: 10533, mode: os.FileMode(0644), modTime: time.Unix(1599160113, 0)}
- a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x3a, 0x7e, 0x85, 0x71, 0x56, 0xd, 0x56, 0xd7, 0x5d, 0x60, 0xf4, 0xa5, 0xf, 0xcb, 0xf, 0xe4, 0x61, 0xe5, 0x35, 0xfd, 0x45, 0x44, 0xd7, 0x3b, 0x77, 0xd3, 0x38, 0x53, 0xd8, 0x8b, 0x2c, 0xa6}}
+ info := bindataFileInfo{name: "admin/auth/edit.tmpl", size: 10554, mode: os.FileMode(0644), modTime: time.Unix(1600500291, 0)}
+ a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xd, 0x78, 0xe5, 0xa6, 0xea, 0x88, 0x50, 0x39, 0xc4, 0x4c, 0x45, 0xf3, 0x62, 0xf9, 0x26, 0xa4, 0x3a, 0x4e, 0xf6, 0x29, 0x48, 0xc2, 0x68, 0xe8, 0xf7, 0xf6, 0xa3, 0x54, 0x6b, 0xc2, 0xba, 0x79}}
return a, nil
}
@@ -672,7 +672,7 @@ func exploreRepo_listTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "explore/repo_list.tmpl", size: 1442, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "explore/repo_list.tmpl", size: 1442, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb5, 0x96, 0xf4, 0x9d, 0xb9, 0x48, 0x2d, 0x78, 0xb1, 0xfa, 0x4c, 0x89, 0x51, 0x49, 0xd4, 0x1f, 0x71, 0x64, 0x7c, 0x7f, 0x9, 0x4b, 0xd5, 0x21, 0x40, 0x4a, 0x90, 0xad, 0x61, 0x62, 0x3, 0x38}}
return a, nil
}
@@ -752,7 +752,7 @@ func homeTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "home.tmpl", size: 17579, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "home.tmpl", size: 17579, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x7e, 0x78, 0xa7, 0xb1, 0x1f, 0x5b, 0x45, 0x2a, 0x1e, 0x14, 0x78, 0x6e, 0xc4, 0xa, 0xec, 0x1a, 0x56, 0x7c, 0x73, 0x2c, 0x0, 0x80, 0xd, 0xa5, 0x86, 0x60, 0x41, 0xb4, 0xe8, 0x63, 0x94, 0x31}}
return a, nil
}
@@ -812,7 +812,7 @@ func installTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "install.tmpl", size: 14405, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "install.tmpl", size: 14405, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x59, 0x27, 0xd6, 0x3a, 0x4f, 0xdd, 0x58, 0x3c, 0x47, 0x4a, 0x25, 0x8c, 0xa9, 0xcc, 0x16, 0xde, 0xc, 0x55, 0x5d, 0x7a, 0x55, 0x4d, 0xdc, 0x2e, 0x18, 0x47, 0x54, 0xd5, 0xff, 0xc7, 0x30, 0x3d}}
return a, nil
}
@@ -1412,7 +1412,7 @@ func repoCreateTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/create.tmpl", size: 4849, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "repo/create.tmpl", size: 4849, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2c, 0xe9, 0x35, 0xae, 0xef, 0xd6, 0xa4, 0x22, 0xe6, 0x40, 0xae, 0xba, 0xc9, 0x37, 0x1e, 0x6f, 0x58, 0xaa, 0x6b, 0x38, 0xc5, 0xdc, 0x5b, 0xae, 0x2c, 0xc8, 0x39, 0xa2, 0x3d, 0xb, 0xbf, 0xa7}}
return a, nil
}
@@ -1612,7 +1612,7 @@ func repoHeaderTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/header.tmpl", size: 4695, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "repo/header.tmpl", size: 4695, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb8, 0xed, 0xf4, 0xe7, 0x81, 0x35, 0xe1, 0x80, 0x8c, 0x63, 0xba, 0x30, 0x16, 0x5a, 0x97, 0xc4, 0xa6, 0xd0, 0xf4, 0x22, 0xcc, 0xba, 0xe6, 0x8f, 0x20, 0x8f, 0xd1, 0xcc, 0x47, 0x5d, 0xe7, 0xc0}}
return a, nil
}
@@ -1892,7 +1892,7 @@ func repoMigrateTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/migrate.tmpl", size: 4435, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "repo/migrate.tmpl", size: 4435, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb2, 0x15, 0x78, 0xa, 0x6, 0x31, 0xbc, 0x99, 0xec, 0x67, 0xd3, 0x99, 0x8a, 0x8d, 0x7b, 0x27, 0x11, 0xde, 0x74, 0x10, 0xeb, 0xcb, 0x84, 0x65, 0xfd, 0xda, 0x3f, 0x3c, 0x51, 0x65, 0x8e, 0xf0}}
return a, nil
}
@@ -1972,7 +1972,7 @@ func repoPullsForkTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/pulls/fork.tmpl", size: 2868, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "repo/pulls/fork.tmpl", size: 2868, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xf2, 0x90, 0xd9, 0x47, 0xea, 0xcc, 0xee, 0xf6, 0x80, 0xf9, 0xa1, 0xdb, 0xe, 0x24, 0x59, 0xc6, 0x13, 0x96, 0x73, 0x2b, 0x7f, 0xef, 0x5, 0x60, 0xa1, 0x88, 0xad, 0xf8, 0x4a, 0xb5, 0x1f, 0xf5}}
return a, nil
}
@@ -2172,7 +2172,7 @@ func repoSettingsOptionsTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/settings/options.tmpl", size: 19077, mode: os.FileMode(0644), modTime: time.Unix(1599653855, 0)}
+ info := bindataFileInfo{name: "repo/settings/options.tmpl", size: 19077, mode: os.FileMode(0644), modTime: time.Unix(1600417296, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x58, 0x29, 0x15, 0x6a, 0x9f, 0xf1, 0x59, 0xa1, 0x4, 0xc7, 0x78, 0xd2, 0xbc, 0x92, 0xd9, 0x81, 0x2c, 0x2c, 0xa3, 0x67, 0xb6, 0x31, 0x6f, 0x4e, 0xaf, 0xaa, 0x92, 0x2c, 0x69, 0x78, 0x0, 0x1b}}
return a, nil
}
@@ -2452,7 +2452,7 @@ func repoView_listTmpl() (*asset, error) {
return nil, err
}
- info := bindataFileInfo{name: "repo/view_list.tmpl", size: 2260, mode: os.FileMode(0644), modTime: time.Unix(1600414964, 0)}
+ info := bindataFileInfo{name: "repo/view_list.tmpl", size: 2260, mode: os.FileMode(0644), modTime: time.Unix(1600500781, 0)}
a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x3b, 0x3e, 0x9a, 0x96, 0xf, 0x66, 0x32, 0xcc, 0x6c, 0x6e, 0x49, 0x83, 0x4c, 0x40, 0x73, 0x46, 0x2c, 0xfe, 0xd7, 0xd, 0x15, 0x6f, 0x91, 0x16, 0x9e, 0x6e, 0xda, 0x9a, 0xf1, 0x21, 0x1, 0xd4}}
return a, nil
}
diff --git a/internal/auth/auth.go b/internal/auth/auth.go
index fe4ad679..2ae012d3 100644
--- a/internal/auth/auth.go
+++ b/internal/auth/auth.go
@@ -5,144 +5,86 @@
package auth
import (
- "strings"
+ "fmt"
- "github.com/go-macaron/session"
- gouuid "github.com/satori/go.uuid"
- "gopkg.in/macaron.v1"
- log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/errutil"
+)
- "gogs.io/gogs/internal/conf"
- "gogs.io/gogs/internal/db"
- "gogs.io/gogs/internal/tool"
+type Type int
+
+// Note: New type must append to the end of list to maintain backward compatibility.
+const (
+ None Type = iota
+ Plain // 1
+ LDAP // 2
+ SMTP // 3
+ PAM // 4
+ DLDAP // 5
+ GitHub // 6
)
-func IsAPIPath(url string) bool {
- return strings.HasPrefix(url, "/api/")
+// Name returns the human-readable name for given authentication type.
+func Name(typ Type) string {
+ return map[Type]string{
+ LDAP: "LDAP (via BindDN)",
+ DLDAP: "LDAP (simple auth)", // Via direct bind
+ SMTP: "SMTP",
+ PAM: "PAM",
+ GitHub: "GitHub",
+ }[typ]
}
-// SignedInID returns the id of signed in user, along with one bool value which indicates whether user uses token
-// authentication.
-func SignedInID(c *macaron.Context, sess session.Store) (_ int64, isTokenAuth bool) {
- if !db.HasEngine {
- return 0, false
- }
-
- // Check access token.
- if IsAPIPath(c.Req.URL.Path) {
- tokenSHA := c.Query("token")
- if len(tokenSHA) <= 0 {
- tokenSHA = c.Query("access_token")
- }
- if len(tokenSHA) == 0 {
- // Well, check with header again.
- auHead := c.Req.Header.Get("Authorization")
- if len(auHead) > 0 {
- auths := strings.Fields(auHead)
- if len(auths) == 2 && auths[0] == "token" {
- tokenSHA = auths[1]
- }
- }
- }
-
- // Let's see if token is valid.
- if len(tokenSHA) > 0 {
- t, err := db.AccessTokens.GetBySHA(tokenSHA)
- if err != nil {
- if !db.IsErrAccessTokenNotExist(err) {
- log.Error("GetAccessTokenBySHA: %v", err)
- }
- return 0, false
- }
- if err = db.AccessTokens.Save(t); err != nil {
- log.Error("UpdateAccessToken: %v", err)
- }
- return t.UserID, true
- }
- }
+var _ errutil.NotFound = (*ErrBadCredentials)(nil)
- uid := sess.Get("uid")
- if uid == nil {
- return 0, false
- }
- if id, ok := uid.(int64); ok {
- if _, err := db.GetUserByID(id); err != nil {
- if !db.IsErrUserNotExist(err) {
- log.Error("Failed to get user by ID: %v", err)
- }
- return 0, false
- }
- return id, false
- }
- return 0, false
+type ErrBadCredentials struct {
+ Args errutil.Args
}
-// SignedInUser returns the user object of signed in user, along with two bool values,
-// which indicate whether user uses HTTP Basic Authentication or token authentication respectively.
-func SignedInUser(ctx *macaron.Context, sess session.Store) (_ *db.User, isBasicAuth bool, isTokenAuth bool) {
- if !db.HasEngine {
- return nil, false, false
- }
-
- uid, isTokenAuth := SignedInID(ctx, sess)
-
- if uid <= 0 {
- if conf.Auth.EnableReverseProxyAuthentication {
- webAuthUser := ctx.Req.Header.Get(conf.Auth.ReverseProxyAuthenticationHeader)
- if len(webAuthUser) > 0 {
- u, err := db.GetUserByName(webAuthUser)
- if err != nil {
- if !db.IsErrUserNotExist(err) {
- log.Error("Failed to get user by name: %v", err)
- return nil, false, false
- }
-
- // Check if enabled auto-registration.
- if conf.Auth.EnableReverseProxyAutoRegistration {
- u := &db.User{
- Name: webAuthUser,
- Email: gouuid.NewV4().String() + "@localhost",
- Passwd: webAuthUser,
- IsActive: true,
- }
- if err = db.CreateUser(u); err != nil {
- // FIXME: should I create a system notice?
- log.Error("Failed to create user: %v", err)
- return nil, false, false
- } else {
- return u, false, false
- }
- }
- }
- return u, false, false
- }
- }
+func IsErrBadCredentials(err error) bool {
+ _, ok := err.(ErrBadCredentials)
+ return ok
+}
- // Check with basic auth.
- baHead := ctx.Req.Header.Get("Authorization")
- if len(baHead) > 0 {
- auths := strings.Fields(baHead)
- if len(auths) == 2 && auths[0] == "Basic" {
- uname, passwd, _ := tool.BasicAuthDecode(auths[1])
+func (err ErrBadCredentials) Error() string {
+ return fmt.Sprintf("bad credentials: %v", err.Args)
+}
- u, err := db.Users.Authenticate(uname, passwd, -1)
- if err != nil {
- if !db.IsErrUserNotExist(err) {
- log.Error("Failed to authenticate user: %v", err)
- }
- return nil, false, false
- }
+func (ErrBadCredentials) NotFound() bool {
+ return true
+}
- return u, true, false
- }
- }
- return nil, false, false
- }
+// ExternalAccount contains queried information returned by an authenticate provider
+// for an external account.
+type ExternalAccount struct {
+ // REQUIRED: The login to be used for authenticating against the provider.
+ Login string
+ // REQUIRED: The username of the account.
+ Name string
+ // The full name of the account.
+ FullName string
+ // The email address of the account.
+ Email string
+ // The location of the account.
+ Location string
+ // The website of the account.
+ Website string
+ // Whether the user should be prompted as a site admin.
+ Admin bool
+}
- u, err := db.GetUserByID(uid)
- if err != nil {
- log.Error("GetUserByID: %v", err)
- return nil, false, false
- }
- return u, false, isTokenAuth
+// Provider defines an authenticate provider which provides ability to authentication against
+// an external identity provider and query external account information.
+type Provider interface {
+ // Authenticate performs authentication against an external identity provider
+ // using given credentials and returns queried information of the external account.
+ Authenticate(login, password string) (*ExternalAccount, error)
+
+ // Config returns the underlying configuration of the authenticate provider.
+ Config() interface{}
+ // HasTLS returns true if the authenticate provider supports TLS.
+ HasTLS() bool
+ // UseTLS returns true if the authenticate provider is configured to use TLS.
+ UseTLS() bool
+ // SkipTLSVerify returns true if the authenticate provider is configured to skip TLS verify.
+ SkipTLSVerify() bool
}
diff --git a/internal/auth/github/config.go b/internal/auth/github/config.go
new file mode 100644
index 00000000..e4636743
--- /dev/null
+++ b/internal/auth/github/config.go
@@ -0,0 +1,58 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package github
+
+import (
+ "context"
+ "crypto/tls"
+ "net/http"
+ "strings"
+
+ "github.com/google/go-github/github"
+ "github.com/pkg/errors"
+)
+
+// Config contains configuration for GitHub authentication.
+//
+// ⚠️ WARNING: Change to the field name must preserve the INI key name for backward compatibility.
+type Config struct {
+ // the GitHub service endpoint, e.g. https://api.github.com/.
+ APIEndpoint string
+ SkipVerify bool
+}
+
+func (c *Config) doAuth(login, password string) (fullname, email, location, website string, err error) {
+ tp := github.BasicAuthTransport{
+ Username: strings.TrimSpace(login),
+ Password: strings.TrimSpace(password),
+ Transport: &http.Transport{
+ TLSClientConfig: &tls.Config{InsecureSkipVerify: c.SkipVerify},
+ },
+ }
+ client, err := github.NewEnterpriseClient(c.APIEndpoint, c.APIEndpoint, tp.Client())
+ if err != nil {
+ return "", "", "", "", errors.Wrap(err, "create new client")
+ }
+ user, _, err := client.Users.Get(context.Background(), "")
+ if err != nil {
+ return "", "", "", "", errors.Wrap(err, "get user info")
+ }
+
+ if user.Name != nil {
+ fullname = *user.Name
+ }
+ if user.Email != nil {
+ email = *user.Email
+ } else {
+ email = login + "+github@local"
+ }
+ if user.Location != nil {
+ location = strings.ToUpper(*user.Location)
+ }
+ if user.HTMLURL != nil {
+ website = strings.ToLower(*user.HTMLURL)
+ }
+ return fullname, email, location, website, nil
+}
diff --git a/internal/auth/github/github.go b/internal/auth/github/github.go
deleted file mode 100644
index a06608a3..00000000
--- a/internal/auth/github/github.go
+++ /dev/null
@@ -1,50 +0,0 @@
-// Copyright 2018 The Gogs Authors. All rights reserved.
-// Use of this source code is governed by a MIT-style
-// license that can be found in the LICENSE file.
-
-package github
-
-import (
- "context"
- "crypto/tls"
- "fmt"
- "net/http"
- "strings"
-
- "github.com/google/go-github/github"
-)
-
-func Authenticate(apiEndpoint, login, passwd string) (name string, email string, website string, location string, _ error) {
- tp := github.BasicAuthTransport{
- Username: strings.TrimSpace(login),
- Password: strings.TrimSpace(passwd),
- Transport: &http.Transport{
- TLSClientConfig: &tls.Config{InsecureSkipVerify: true},
- },
- }
- client, err := github.NewEnterpriseClient(apiEndpoint, apiEndpoint, tp.Client())
- if err != nil {
- return "", "", "", "", fmt.Errorf("create new client: %v", err)
- }
- user, _, err := client.Users.Get(context.Background(), "")
- if err != nil {
- return "", "", "", "", fmt.Errorf("get user info: %v", err)
- }
-
- if user.Name != nil {
- name = *user.Name
- }
- if user.Email != nil {
- email = *user.Email
- } else {
- email = login + "+github@local"
- }
- if user.HTMLURL != nil {
- website = strings.ToLower(*user.HTMLURL)
- }
- if user.Location != nil {
- location = strings.ToUpper(*user.Location)
- }
-
- return name, email, website, location, nil
-}
diff --git a/internal/auth/github/provider.go b/internal/auth/github/provider.go
new file mode 100644
index 00000000..4add2e54
--- /dev/null
+++ b/internal/auth/github/provider.go
@@ -0,0 +1,57 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package github
+
+import (
+ "strings"
+
+ "gogs.io/gogs/internal/auth"
+)
+
+// Provider contains configuration of a PAM authentication provider.
+type Provider struct {
+ config *Config
+}
+
+// NewProvider creates a new PAM authentication provider.
+func NewProvider(cfg *Config) auth.Provider {
+ return &Provider{
+ config: cfg,
+ }
+}
+
+func (p *Provider) Authenticate(login, password string) (*auth.ExternalAccount, error) {
+ fullname, email, website, location, err := p.config.doAuth(login, password)
+ if err != nil {
+ if strings.Contains(err.Error(), "401") {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+ return nil, err
+ }
+ return &auth.ExternalAccount{
+ Login: login,
+ Name: login,
+ FullName: fullname,
+ Email: email,
+ Location: location,
+ Website: website,
+ }, nil
+}
+
+func (p *Provider) Config() interface{} {
+ return p.config
+}
+
+func (p *Provider) HasTLS() bool {
+ return true
+}
+
+func (p *Provider) UseTLS() bool {
+ return true
+}
+
+func (p *Provider) SkipTLSVerify() bool {
+ return p.config.SkipVerify
+}
diff --git a/internal/auth/ldap/ldap.go b/internal/auth/ldap/config.go
index d8f8458e..0c33368d 100644
--- a/internal/auth/ldap/ldap.go
+++ b/internal/auth/ldap/config.go
@@ -2,8 +2,8 @@
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
-// Package ldap provide functions & structure to query a LDAP ldap directory
-// For now, it's mainly tested again an MS Active Directory service, see README.md for more information
+// Package ldap provide functions & structure to query a LDAP ldap directory.
+// For now, it's mainly tested again an MS Active Directory service, see README.md for more information.
package ldap
import (
@@ -15,19 +15,31 @@ import (
log "unknwon.dev/clog/v2"
)
+// SecurityProtocol is the security protocol when the authenticate provider talks to LDAP directory.
type SecurityProtocol int
-// Note: new type must be added at the end of list to maintain compatibility.
+// ⚠️ WARNING: new type must be added at the end of list to maintain compatibility.
const (
SecurityProtocolUnencrypted SecurityProtocol = iota
SecurityProtocolLDAPS
SecurityProtocolStartTLS
)
-// Basic LDAP authentication service
-type Source struct {
+// SecurityProtocolName returns the human-readable name for given security protocol.
+func SecurityProtocolName(protocol SecurityProtocol) string {
+ return map[SecurityProtocol]string{
+ SecurityProtocolUnencrypted: "Unencrypted",
+ SecurityProtocolLDAPS: "LDAPS",
+ SecurityProtocolStartTLS: "StartTLS",
+ }[protocol]
+}
+
+// Config contains configuration for LDAP authentication.
+//
+// ⚠️ WARNING: Change to the field name must preserve the INI key name for backward compatibility.
+type Config struct {
Host string // LDAP host
- Port int // port number
+ Port int // Port number
SecurityProtocol SecurityProtocol
SkipVerify bool
BindDN string `ini:"bind_dn,omitempty"` // DN to bind with
@@ -37,18 +49,22 @@ type Source struct {
AttributeUsername string // Username attribute
AttributeName string // First name attribute
AttributeSurname string // Surname attribute
- AttributeMail string // E-mail attribute
- AttributesInBind bool // fetch attributes in bind context (not user)
+ AttributeMail string // Email attribute
+ AttributesInBind bool // Fetch attributes in bind context (not user)
Filter string // Query filter to validate entry
AdminFilter string // Query filter to check if user is admin
- GroupEnabled bool // if the group checking is enabled
- GroupDN string `ini:"group_dn"` // Group Search Base
- GroupFilter string // Group Name Filter
+ GroupEnabled bool // Whether the group checking is enabled
+ GroupDN string `ini:"group_dn"` // Group search base
+ GroupFilter string // Group name filter
GroupMemberUID string `ini:"group_member_uid"` // Group Attribute containing array of UserUID
- UserUID string `ini:"user_uid"` // User Attribute listed in Group
+ UserUID string `ini:"user_uid"` // User Attribute listed in group
+}
+
+func (c *Config) SecurityProtocolName() string {
+ return SecurityProtocolName(c.SecurityProtocol)
}
-func (ls *Source) sanitizedUserQuery(username string) (string, bool) {
+func (c *Config) sanitizedUserQuery(username string) (string, bool) {
// See http://tools.ietf.org/search/rfc4515
badCharacters := "\x00()*\\"
if strings.ContainsAny(username, badCharacters) {
@@ -56,10 +72,10 @@ func (ls *Source) sanitizedUserQuery(username string) (string, bool) {
return "", false
}
- return strings.Replace(ls.Filter, "%s", username, -1), true
+ return strings.Replace(c.Filter, "%s", username, -1), true
}
-func (ls *Source) sanitizedUserDN(username string) (string, bool) {
+func (c *Config) sanitizedUserDN(username string) (string, bool) {
// See http://tools.ietf.org/search/rfc4514: "special characters"
badCharacters := "\x00()*\\,='\"#+;<>"
if strings.ContainsAny(username, badCharacters) || strings.HasPrefix(username, " ") || strings.HasSuffix(username, " ") {
@@ -67,10 +83,10 @@ func (ls *Source) sanitizedUserDN(username string) (string, bool) {
return "", false
}
- return strings.Replace(ls.UserDN, "%s", username, -1), true
+ return strings.Replace(c.UserDN, "%s", username, -1), true
}
-func (ls *Source) sanitizedGroupFilter(group string) (string, bool) {
+func (c *Config) sanitizedGroupFilter(group string) (string, bool) {
// See http://tools.ietf.org/search/rfc4515
badCharacters := "\x00*\\"
if strings.ContainsAny(group, badCharacters) {
@@ -81,7 +97,7 @@ func (ls *Source) sanitizedGroupFilter(group string) (string, bool) {
return group, true
}
-func (ls *Source) sanitizedGroupDN(groupDn string) (string, bool) {
+func (c *Config) sanitizedGroupDN(groupDn string) (string, bool) {
// See http://tools.ietf.org/search/rfc4514: "special characters"
badCharacters := "\x00()*\\'\"#+;<>"
if strings.ContainsAny(groupDn, badCharacters) || strings.HasPrefix(groupDn, " ") || strings.HasSuffix(groupDn, " ") {
@@ -92,12 +108,12 @@ func (ls *Source) sanitizedGroupDN(groupDn string) (string, bool) {
return groupDn, true
}
-func (ls *Source) findUserDN(l *ldap.Conn, name string) (string, bool) {
+func (c *Config) findUserDN(l *ldap.Conn, name string) (string, bool) {
log.Trace("Search for LDAP user: %s", name)
- if len(ls.BindDN) > 0 && len(ls.BindPassword) > 0 {
+ if len(c.BindDN) > 0 && len(c.BindPassword) > 0 {
// Replace placeholders with username
- bindDN := strings.Replace(ls.BindDN, "%s", name, -1)
- err := l.Bind(bindDN, ls.BindPassword)
+ bindDN := strings.Replace(c.BindDN, "%s", name, -1)
+ err := l.Bind(bindDN, c.BindPassword)
if err != nil {
log.Trace("LDAP: Failed to bind as BindDN '%s': %v", bindDN, err)
return "", false
@@ -108,23 +124,23 @@ func (ls *Source) findUserDN(l *ldap.Conn, name string) (string, bool) {
}
// A search for the user.
- userFilter, ok := ls.sanitizedUserQuery(name)
+ userFilter, ok := c.sanitizedUserQuery(name)
if !ok {
return "", false
}
- log.Trace("LDAP: Searching for DN using filter '%s' and base '%s'", userFilter, ls.UserBase)
+ log.Trace("LDAP: Searching for DN using filter %q and base %q", userFilter, c.UserBase)
search := ldap.NewSearchRequest(
- ls.UserBase, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0,
+ c.UserBase, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0,
false, userFilter, []string{}, nil)
// Ensure we found a user
sr, err := l.Search(search)
if err != nil || len(sr.Entries) < 1 {
- log.Trace("LDAP: Failed search using filter '%s': %v", userFilter, err)
+ log.Trace("LDAP: Failed to search using filter %q: %v", userFilter, err)
return "", false
} else if len(sr.Entries) > 1 {
- log.Trace("LDAP: Filter '%s' returned more than one user", userFilter)
+ log.Trace("LDAP: Filter %q returned more than one user", userFilter)
return "", false
}
@@ -137,7 +153,7 @@ func (ls *Source) findUserDN(l *ldap.Conn, name string) (string, bool) {
return userDN, true
}
-func dial(ls *Source) (*ldap.Conn, error) {
+func dial(ls *Config) (*ldap.Conn, error) {
log.Trace("LDAP: Dialing with security protocol '%v' without verifying: %v", ls.SecurityProtocol, ls.SkipVerify)
tlsCfg := &tls.Config{
@@ -174,26 +190,26 @@ func bindUser(l *ldap.Conn, userDN, passwd string) error {
return err
}
-// searchEntry : search an LDAP source if an entry (name, passwd) is valid and in the specific filter
-func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, string, string, string, bool, bool) {
+// searchEntry searches an LDAP source if an entry (name, passwd) is valid and in the specific filter.
+func (c *Config) searchEntry(name, passwd string, directBind bool) (string, string, string, string, bool, bool) {
// See https://tools.ietf.org/search/rfc4513#section-5.1.2
if len(passwd) == 0 {
log.Trace("authentication failed for '%s' with empty password", name)
return "", "", "", "", false, false
}
- l, err := dial(ls)
+ l, err := dial(c)
if err != nil {
- log.Error("LDAP connect failed for '%s': %v", ls.Host, err)
+ log.Error("LDAP connect failed for '%s': %v", c.Host, err)
return "", "", "", "", false, false
}
defer l.Close()
var userDN string
if directBind {
- log.Trace("LDAP will bind directly via UserDN template: %s", ls.UserDN)
+ log.Trace("LDAP will bind directly via UserDN template: %s", c.UserDN)
var ok bool
- userDN, ok = ls.sanitizedUserDN(name)
+ userDN, ok = c.sanitizedUserDN(name)
if !ok {
return "", "", "", "", false, false
}
@@ -201,13 +217,13 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
log.Trace("LDAP will use BindDN")
var found bool
- userDN, found = ls.findUserDN(l, name)
+ userDN, found = c.findUserDN(l, name)
if !found {
return "", "", "", "", false, false
}
}
- if directBind || !ls.AttributesInBind {
+ if directBind || !c.AttributesInBind {
// binds user (checking password) before looking-up attributes in user context
err = bindUser(l, userDN, passwd)
if err != nil {
@@ -215,18 +231,18 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
}
}
- userFilter, ok := ls.sanitizedUserQuery(name)
+ userFilter, ok := c.sanitizedUserQuery(name)
if !ok {
return "", "", "", "", false, false
}
- log.Trace("Fetching attributes '%v', '%v', '%v', '%v', '%v' with filter '%s' and base '%s'",
- ls.AttributeUsername, ls.AttributeName, ls.AttributeSurname, ls.AttributeMail, ls.UserUID, userFilter, userDN)
+ log.Trace("Fetching attributes %q, %q, %q, %q, %q with user filter %q and user DN %q",
+ c.AttributeUsername, c.AttributeName, c.AttributeSurname, c.AttributeMail, c.UserUID, userFilter, userDN)
+
search := ldap.NewSearchRequest(
userDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false, userFilter,
- []string{ls.AttributeUsername, ls.AttributeName, ls.AttributeSurname, ls.AttributeMail, ls.UserUID},
+ []string{c.AttributeUsername, c.AttributeName, c.AttributeSurname, c.AttributeMail, c.UserUID},
nil)
-
sr, err := l.Search(search)
if err != nil {
log.Error("LDAP: User search failed: %v", err)
@@ -241,27 +257,27 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
return "", "", "", "", false, false
}
- username := sr.Entries[0].GetAttributeValue(ls.AttributeUsername)
- firstname := sr.Entries[0].GetAttributeValue(ls.AttributeName)
- surname := sr.Entries[0].GetAttributeValue(ls.AttributeSurname)
- mail := sr.Entries[0].GetAttributeValue(ls.AttributeMail)
- uid := sr.Entries[0].GetAttributeValue(ls.UserUID)
+ username := sr.Entries[0].GetAttributeValue(c.AttributeUsername)
+ firstname := sr.Entries[0].GetAttributeValue(c.AttributeName)
+ surname := sr.Entries[0].GetAttributeValue(c.AttributeSurname)
+ mail := sr.Entries[0].GetAttributeValue(c.AttributeMail)
+ uid := sr.Entries[0].GetAttributeValue(c.UserUID)
// Check group membership
- if ls.GroupEnabled {
- groupFilter, ok := ls.sanitizedGroupFilter(ls.GroupFilter)
+ if c.GroupEnabled {
+ groupFilter, ok := c.sanitizedGroupFilter(c.GroupFilter)
if !ok {
return "", "", "", "", false, false
}
- groupDN, ok := ls.sanitizedGroupDN(ls.GroupDN)
+ groupDN, ok := c.sanitizedGroupDN(c.GroupDN)
if !ok {
return "", "", "", "", false, false
}
- log.Trace("LDAP: Fetching groups '%v' with filter '%s' and base '%s'", ls.GroupMemberUID, groupFilter, groupDN)
+ log.Trace("LDAP: Fetching groups '%v' with filter '%s' and base '%s'", c.GroupMemberUID, groupFilter, groupDN)
groupSearch := ldap.NewSearchRequest(
groupDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false, groupFilter,
- []string{ls.GroupMemberUID},
+ []string{c.GroupMemberUID},
nil)
srg, err := l.Search(groupSearch)
@@ -274,9 +290,9 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
}
isMember := false
- if ls.UserUID == "dn" {
+ if c.UserUID == "dn" {
for _, group := range srg.Entries {
- for _, member := range group.GetAttributeValues(ls.GroupMemberUID) {
+ for _, member := range group.GetAttributeValues(c.GroupMemberUID) {
if member == sr.Entries[0].DN {
isMember = true
}
@@ -284,7 +300,7 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
}
} else {
for _, group := range srg.Entries {
- for _, member := range group.GetAttributeValues(ls.GroupMemberUID) {
+ for _, member := range group.GetAttributeValues(c.GroupMemberUID) {
if member == uid {
isMember = true
}
@@ -293,17 +309,17 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
}
if !isMember {
- log.Trace("LDAP: Group membership test failed [username: %s, group_member_uid: %s, user_uid: %s", username, ls.GroupMemberUID, uid)
+ log.Trace("LDAP: Group membership test failed [username: %s, group_member_uid: %s, user_uid: %s", username, c.GroupMemberUID, uid)
return "", "", "", "", false, false
}
}
isAdmin := false
- if len(ls.AdminFilter) > 0 {
- log.Trace("Checking admin with filter '%s' and base '%s'", ls.AdminFilter, userDN)
+ if len(c.AdminFilter) > 0 {
+ log.Trace("Checking admin with filter '%s' and base '%s'", c.AdminFilter, userDN)
search = ldap.NewSearchRequest(
- userDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false, ls.AdminFilter,
- []string{ls.AttributeName},
+ userDN, ldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false, c.AdminFilter,
+ []string{c.AttributeName},
nil)
sr, err = l.Search(search)
@@ -316,7 +332,7 @@ func (ls *Source) SearchEntry(name, passwd string, directBind bool) (string, str
}
}
- if !directBind && ls.AttributesInBind {
+ if !directBind && c.AttributesInBind {
// binds user (checking password) after looking-up attributes in BindDN context
err = bindUser(l, userDN, passwd)
if err != nil {
diff --git a/internal/auth/ldap/provider.go b/internal/auth/ldap/provider.go
new file mode 100644
index 00000000..a42baa71
--- /dev/null
+++ b/internal/auth/ldap/provider.go
@@ -0,0 +1,78 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package ldap
+
+import (
+ "fmt"
+
+ "gogs.io/gogs/internal/auth"
+)
+
+// Provider contains configuration of an LDAP authentication provider.
+type Provider struct {
+ directBind bool
+ config *Config
+}
+
+// NewProvider creates a new LDAP authentication provider.
+func NewProvider(directBind bool, cfg *Config) auth.Provider {
+ return &Provider{
+ directBind: directBind,
+ config: cfg,
+ }
+}
+
+// Authenticate queries if login/password is valid against the LDAP directory pool,
+// and returns queried information when succeeded.
+func (p *Provider) Authenticate(login, password string) (*auth.ExternalAccount, error) {
+ username, fn, sn, email, isAdmin, succeed := p.config.searchEntry(login, password, p.directBind)
+ if !succeed {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+
+ if len(username) == 0 {
+ username = login
+ }
+ if len(email) == 0 {
+ email = fmt.Sprintf("%s@localhost", username)
+ }
+
+ composeFullName := func(firstname, surname, username string) string {
+ switch {
+ case firstname == "" && surname == "":
+ return username
+ case firstname == "":
+ return surname
+ case surname == "":
+ return firstname
+ default:
+ return firstname + " " + surname
+ }
+ }
+
+ return &auth.ExternalAccount{
+ Login: login,
+ Name: username,
+ FullName: composeFullName(fn, sn, username),
+ Email: email,
+ Admin: isAdmin,
+ }, nil
+}
+
+func (p *Provider) Config() interface{} {
+ return p.config
+}
+
+func (p *Provider) HasTLS() bool {
+ return p.config.SecurityProtocol > SecurityProtocolUnencrypted
+}
+
+func (p *Provider) UseTLS() bool {
+ return p.config.SecurityProtocol > SecurityProtocolUnencrypted
+}
+
+func (p *Provider) SkipTLSVerify() bool {
+ return p.config.SkipVerify
+}
diff --git a/internal/auth/pam/config.go b/internal/auth/pam/config.go
new file mode 100644
index 00000000..7a6bc0cc
--- /dev/null
+++ b/internal/auth/pam/config.go
@@ -0,0 +1,13 @@
+// Copyright 2014 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package pam
+
+// Config contains configuration for PAM authentication.
+//
+// ⚠️ WARNING: Change to the field name must preserve the INI key name for backward compatibility.
+type Config struct {
+ // The name of the PAM service, e.g. system-auth.
+ ServiceName string
+}
diff --git a/internal/auth/pam/pam.go b/internal/auth/pam/pam.go
index 7f326d42..521cd4f0 100644
--- a/internal/auth/pam/pam.go
+++ b/internal/auth/pam/pam.go
@@ -7,29 +7,23 @@
package pam
import (
- "errors"
-
"github.com/msteinert/pam"
+ "github.com/pkg/errors"
)
-func PAMAuth(serviceName, userName, passwd string) error {
- t, err := pam.StartFunc(serviceName, userName, func(s pam.Style, msg string) (string, error) {
+func (c *Config) doAuth(login, password string) error {
+ t, err := pam.StartFunc(c.ServiceName, login, func(s pam.Style, msg string) (string, error) {
switch s {
case pam.PromptEchoOff:
- return passwd, nil
+ return password, nil
case pam.PromptEchoOn, pam.ErrorMsg, pam.TextInfo:
return "", nil
}
- return "", errors.New("Unrecognized PAM message style")
+ return "", errors.Errorf("unrecognized PAM message style: %v - %s", s, msg)
})
-
if err != nil {
return err
}
- if err = t.Authenticate(0); err != nil {
- return err
- }
-
- return nil
+ return t.Authenticate(0)
}
diff --git a/internal/auth/pam/pam_stub.go b/internal/auth/pam/pam_stub.go
index 33ac751a..9392eab5 100644
--- a/internal/auth/pam/pam_stub.go
+++ b/internal/auth/pam/pam_stub.go
@@ -7,9 +7,9 @@
package pam
import (
- "errors"
+ "github.com/pkg/errors"
)
-func PAMAuth(serviceName, userName, passwd string) error {
+func (c *Config) doAuth(login, password string) error {
return errors.New("PAM not supported")
}
diff --git a/internal/auth/pam/provider.go b/internal/auth/pam/provider.go
new file mode 100644
index 00000000..ad1b7a8c
--- /dev/null
+++ b/internal/auth/pam/provider.go
@@ -0,0 +1,54 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package pam
+
+import (
+ "strings"
+
+ "gogs.io/gogs/internal/auth"
+)
+
+// Provider contains configuration of a PAM authentication provider.
+type Provider struct {
+ config *Config
+}
+
+// NewProvider creates a new PAM authentication provider.
+func NewProvider(cfg *Config) auth.Provider {
+ return &Provider{
+ config: cfg,
+ }
+}
+
+func (p *Provider) Authenticate(login, password string) (*auth.ExternalAccount, error) {
+ err := p.config.doAuth(login, password)
+ if err != nil {
+ if strings.Contains(err.Error(), "Authentication failure") {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+ return nil, err
+ }
+
+ return &auth.ExternalAccount{
+ Login: login,
+ Name: login,
+ }, nil
+}
+
+func (p *Provider) Config() interface{} {
+ return p.config
+}
+
+func (p *Provider) HasTLS() bool {
+ return false
+}
+
+func (p *Provider) UseTLS() bool {
+ return false
+}
+
+func (p *Provider) SkipTLSVerify() bool {
+ return false
+}
diff --git a/internal/auth/smtp/config.go b/internal/auth/smtp/config.go
new file mode 100644
index 00000000..33985f45
--- /dev/null
+++ b/internal/auth/smtp/config.go
@@ -0,0 +1,58 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package smtp
+
+import (
+ "crypto/tls"
+ "fmt"
+ "net/smtp"
+
+ "github.com/pkg/errors"
+)
+
+// Config contains configuration for SMTP authentication.
+//
+// ⚠️ WARNING: Change to the field name must preserve the INI key name for backward compatibility.
+type Config struct {
+ Auth string
+ Host string
+ Port int
+ AllowedDomains string
+ TLS bool `ini:"tls"`
+ SkipVerify bool
+}
+
+func (c *Config) doAuth(auth smtp.Auth) error {
+ client, err := smtp.Dial(fmt.Sprintf("%s:%d", c.Host, c.Port))
+ if err != nil {
+ return err
+ }
+ defer client.Close()
+
+ if err = client.Hello("gogs"); err != nil {
+ return err
+ }
+
+ if c.TLS {
+ if ok, _ := client.Extension("STARTTLS"); ok {
+ if err = client.StartTLS(&tls.Config{
+ InsecureSkipVerify: c.SkipVerify,
+ ServerName: c.Host,
+ }); err != nil {
+ return err
+ }
+ } else {
+ return errors.New("SMTP server does not support TLS")
+ }
+ }
+
+ if ok, _ := client.Extension("AUTH"); ok {
+ if err = client.Auth(auth); err != nil {
+ return err
+ }
+ return nil
+ }
+ return errors.New("unsupported SMTP authentication method")
+}
diff --git a/internal/auth/smtp/provider.go b/internal/auth/smtp/provider.go
new file mode 100644
index 00000000..3e39aa22
--- /dev/null
+++ b/internal/auth/smtp/provider.go
@@ -0,0 +1,132 @@
+// Copyright 2020 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package smtp
+
+import (
+ "net/smtp"
+ "net/textproto"
+ "strings"
+
+ "github.com/pkg/errors"
+ log "unknwon.dev/clog/v2"
+
+ "gogs.io/gogs/internal/auth"
+)
+
+// Provider contains configuration of an SMTP authentication provider.
+type Provider struct {
+ config *Config
+}
+
+// NewProvider creates a new SMTP authentication provider.
+func NewProvider(cfg *Config) auth.Provider {
+ return &Provider{
+ config: cfg,
+ }
+}
+
+// Authenticate queries if login/password is valid against the SMTP server,
+// and returns queried information when succeeded.
+func (p *Provider) Authenticate(login, password string) (*auth.ExternalAccount, error) {
+ // Verify allowed domains
+ if p.config.AllowedDomains != "" {
+ fields := strings.SplitN(login, "@", 3)
+ if len(fields) != 2 {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+ domain := fields[1]
+
+ isAllowed := false
+ for _, allowed := range strings.Split(p.config.AllowedDomains, ",") {
+ if domain == allowed {
+ isAllowed = true
+ break
+ }
+ }
+
+ if !isAllowed {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+ }
+
+ var smtpAuth smtp.Auth
+ switch p.config.Auth {
+ case Plain:
+ smtpAuth = smtp.PlainAuth("", login, password, p.config.Host)
+ case Login:
+ smtpAuth = &smtpLoginAuth{login, password}
+ default:
+ return nil, errors.Errorf("unsupported SMTP authentication type %q", p.config.Auth)
+ }
+
+ if err := p.config.doAuth(smtpAuth); err != nil {
+ log.Trace("SMTP: Authentication failed: %v", err)
+
+ // Check standard error format first, then fallback to the worse case.
+ tperr, ok := err.(*textproto.Error)
+ if (ok && tperr.Code == 535) ||
+ strings.Contains(err.Error(), "Username and Password not accepted") {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
+ }
+ return nil, err
+ }
+
+ username := login
+
+ // NOTE: It is not required to have "@" in `login` for a successful SMTP authentication.
+ idx := strings.Index(login, "@")
+ if idx > -1 {
+ username = login[:idx]
+ }
+
+ return &auth.ExternalAccount{
+ Login: login,
+ Name: username,
+ Email: login,
+ }, nil
+}
+
+func (p *Provider) Config() interface{} {
+ return p.config
+}
+
+func (p *Provider) HasTLS() bool {
+ return true
+}
+
+func (p *Provider) UseTLS() bool {
+ return p.config.TLS
+}
+
+func (p *Provider) SkipTLSVerify() bool {
+ return p.config.SkipVerify
+}
+
+const (
+ Plain = "PLAIN"
+ Login = "LOGIN"
+)
+
+var AuthTypes = []string{Plain, Login}
+
+type smtpLoginAuth struct {
+ username, password string
+}
+
+func (auth *smtpLoginAuth) Start(server *smtp.ServerInfo) (string, []byte, error) {
+ return "LOGIN", []byte(auth.username), nil
+}
+
+func (auth *smtpLoginAuth) Next(fromServer []byte, more bool) ([]byte, error) {
+ if more {
+ switch string(fromServer) {
+ case "Username:":
+ return []byte(auth.username), nil
+ case "Password:":
+ return []byte(auth.password), nil
+ }
+ }
+ return nil, nil
+}
diff --git a/internal/context/auth.go b/internal/context/auth.go
index 424a4f4f..cbbe525a 100644
--- a/internal/context/auth.go
+++ b/internal/context/auth.go
@@ -7,12 +7,18 @@ package context
import (
"net/http"
"net/url"
+ "strings"
"github.com/go-macaron/csrf"
+ "github.com/go-macaron/session"
+ gouuid "github.com/satori/go.uuid"
"gopkg.in/macaron.v1"
+ log "unknwon.dev/clog/v2"
"gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
+ "gogs.io/gogs/internal/db"
+ "gogs.io/gogs/internal/tool"
)
type ToggleOptions struct {
@@ -49,7 +55,7 @@ func Toggle(options *ToggleOptions) macaron.Handler {
return
}
- if !options.SignOutRequired && !options.DisableCSRF && c.Req.Method == "POST" && !auth.IsAPIPath(c.Req.URL.Path) {
+ if !options.SignOutRequired && !options.DisableCSRF && c.Req.Method == "POST" && !isAPIPath(c.Req.URL.Path) {
csrf.Validate(c.Context, c.csrf)
if c.Written() {
return
@@ -59,7 +65,7 @@ func Toggle(options *ToggleOptions) macaron.Handler {
if options.SignInRequired {
if !c.IsLogged {
// Restrict API calls with error message.
- if auth.IsAPIPath(c.Req.URL.Path) {
+ if isAPIPath(c.Req.URL.Path) {
c.JSON(http.StatusForbidden, map[string]string{
"message": "Only authenticated user is allowed to call APIs.",
})
@@ -77,7 +83,7 @@ func Toggle(options *ToggleOptions) macaron.Handler {
}
// Redirect to log in page if auto-signin info is provided and has not signed in.
- if !options.SignOutRequired && !c.IsLogged && !auth.IsAPIPath(c.Req.URL.Path) &&
+ if !options.SignOutRequired && !c.IsLogged && !isAPIPath(c.Req.URL.Path) &&
len(c.GetCookie(conf.Security.CookieUsername)) > 0 {
c.SetCookie("redirect_to", url.QueryEscape(conf.Server.Subpath+c.Req.RequestURI), 0, conf.Server.Subpath)
c.RedirectSubpath("/user/login")
@@ -93,3 +99,133 @@ func Toggle(options *ToggleOptions) macaron.Handler {
}
}
}
+
+func isAPIPath(url string) bool {
+ return strings.HasPrefix(url, "/api/")
+}
+
+// authenticatedUserID returns the ID of the authenticated user, along with a bool value
+// which indicates whether the user uses token authentication.
+func authenticatedUserID(c *macaron.Context, sess session.Store) (_ int64, isTokenAuth bool) {
+ if !db.HasEngine {
+ return 0, false
+ }
+
+ // Check access token.
+ if isAPIPath(c.Req.URL.Path) {
+ tokenSHA := c.Query("token")
+ if len(tokenSHA) <= 0 {
+ tokenSHA = c.Query("access_token")
+ }
+ if len(tokenSHA) == 0 {
+ // Well, check with header again.
+ auHead := c.Req.Header.Get("Authorization")
+ if len(auHead) > 0 {
+ auths := strings.Fields(auHead)
+ if len(auths) == 2 && auths[0] == "token" {
+ tokenSHA = auths[1]
+ }
+ }
+ }
+
+ // Let's see if token is valid.
+ if len(tokenSHA) > 0 {
+ t, err := db.AccessTokens.GetBySHA(tokenSHA)
+ if err != nil {
+ if !db.IsErrAccessTokenNotExist(err) {
+ log.Error("GetAccessTokenBySHA: %v", err)
+ }
+ return 0, false
+ }
+ if err = db.AccessTokens.Save(t); err != nil {
+ log.Error("UpdateAccessToken: %v", err)
+ }
+ return t.UserID, true
+ }
+ }
+
+ uid := sess.Get("uid")
+ if uid == nil {
+ return 0, false
+ }
+ if id, ok := uid.(int64); ok {
+ if _, err := db.GetUserByID(id); err != nil {
+ if !db.IsErrUserNotExist(err) {
+ log.Error("Failed to get user by ID: %v", err)
+ }
+ return 0, false
+ }
+ return id, false
+ }
+ return 0, false
+}
+
+// authenticatedUser returns the user object of the authenticated user, along with two bool values
+// which indicate whether the user uses HTTP Basic Authentication or token authentication respectively.
+func authenticatedUser(ctx *macaron.Context, sess session.Store) (_ *db.User, isBasicAuth bool, isTokenAuth bool) {
+ if !db.HasEngine {
+ return nil, false, false
+ }
+
+ uid, isTokenAuth := authenticatedUserID(ctx, sess)
+
+ if uid <= 0 {
+ if conf.Auth.EnableReverseProxyAuthentication {
+ webAuthUser := ctx.Req.Header.Get(conf.Auth.ReverseProxyAuthenticationHeader)
+ if len(webAuthUser) > 0 {
+ u, err := db.GetUserByName(webAuthUser)
+ if err != nil {
+ if !db.IsErrUserNotExist(err) {
+ log.Error("Failed to get user by name: %v", err)
+ return nil, false, false
+ }
+
+ // Check if enabled auto-registration.
+ if conf.Auth.EnableReverseProxyAutoRegistration {
+ u := &db.User{
+ Name: webAuthUser,
+ Email: gouuid.NewV4().String() + "@localhost",
+ Passwd: webAuthUser,
+ IsActive: true,
+ }
+ if err = db.CreateUser(u); err != nil {
+ // FIXME: should I create a system notice?
+ log.Error("Failed to create user: %v", err)
+ return nil, false, false
+ } else {
+ return u, false, false
+ }
+ }
+ }
+ return u, false, false
+ }
+ }
+
+ // Check with basic auth.
+ baHead := ctx.Req.Header.Get("Authorization")
+ if len(baHead) > 0 {
+ auths := strings.Fields(baHead)
+ if len(auths) == 2 && auths[0] == "Basic" {
+ uname, passwd, _ := tool.BasicAuthDecode(auths[1])
+
+ u, err := db.Users.Authenticate(uname, passwd, -1)
+ if err != nil {
+ if !auth.IsErrBadCredentials(err) {
+ log.Error("Failed to authenticate user: %v", err)
+ }
+ return nil, false, false
+ }
+
+ return u, true, false
+ }
+ }
+ return nil, false, false
+ }
+
+ u, err := db.GetUserByID(uid)
+ if err != nil {
+ log.Error("GetUserByID: %v", err)
+ return nil, false, false
+ }
+ return u, false, isTokenAuth
+}
diff --git a/internal/context/context.go b/internal/context/context.go
index 2971700b..ec498eb5 100644
--- a/internal/context/context.go
+++ b/internal/context/context.go
@@ -18,7 +18,6 @@ import (
"gopkg.in/macaron.v1"
log "unknwon.dev/clog/v2"
- "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/db"
"gogs.io/gogs/internal/errutil"
@@ -255,7 +254,7 @@ func Contexter() macaron.Handler {
}
// Get user from session or header when possible
- c.User, c.IsBasicAuth, c.IsTokenAuth = auth.SignedInUser(c.Context, c.Session)
+ c.User, c.IsBasicAuth, c.IsTokenAuth = authenticatedUser(c.Context, c.Session)
if c.User != nil {
c.IsLogged = true
diff --git a/internal/db/backup_test.go b/internal/db/backup_test.go
index a65e6944..27688889 100644
--- a/internal/db/backup_test.go
+++ b/internal/db/backup_test.go
@@ -14,6 +14,9 @@ import (
"github.com/pkg/errors"
"gorm.io/gorm"
+ "gogs.io/gogs/internal/auth"
+ "gogs.io/gogs/internal/auth/github"
+ "gogs.io/gogs/internal/auth/pam"
"gogs.io/gogs/internal/cryptoutil"
"gogs.io/gogs/internal/lfsutil"
"gogs.io/gogs/internal/testutil"
@@ -79,22 +82,22 @@ func setupDBToDump(t *testing.T, db *gorm.DB) {
},
&LoginSource{
- Type: LoginPAM,
+ Type: auth.PAM,
Name: "My PAM",
IsActived: true,
- Config: &PAMConfig{
+ Provider: pam.NewProvider(&pam.Config{
ServiceName: "PAM service",
- },
+ }),
CreatedUnix: 1588568886,
UpdatedUnix: 1588572486, // 1 hour later
},
&LoginSource{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub.com",
IsActived: true,
- Config: &GitHubConfig{
+ Provider: github.NewProvider(&github.Config{
APIEndpoint: "https://api.github.com",
- },
+ }),
CreatedUnix: 1588568886,
},
}
diff --git a/internal/db/errors/login_source.go b/internal/db/errors/login_source.go
deleted file mode 100644
index db0cd1f9..00000000
--- a/internal/db/errors/login_source.go
+++ /dev/null
@@ -1,33 +0,0 @@
-// Copyright 2017 The Gogs Authors. All rights reserved.
-// Use of this source code is governed by a MIT-style
-// license that can be found in the LICENSE file.
-
-package errors
-
-import "fmt"
-
-type LoginSourceNotActivated struct {
- SourceID int64
-}
-
-func IsLoginSourceNotActivated(err error) bool {
- _, ok := err.(LoginSourceNotActivated)
- return ok
-}
-
-func (err LoginSourceNotActivated) Error() string {
- return fmt.Sprintf("login source is not activated [source_id: %d]", err.SourceID)
-}
-
-type InvalidLoginSourceType struct {
- Type interface{}
-}
-
-func IsInvalidLoginSourceType(err error) bool {
- _, ok := err.(InvalidLoginSourceType)
- return ok
-}
-
-func (err InvalidLoginSourceType) Error() string {
- return fmt.Sprintf("invalid login source type [type: %v]", err.Type)
-}
diff --git a/internal/db/login_source.go b/internal/db/login_source.go
deleted file mode 100644
index 125d771a..00000000
--- a/internal/db/login_source.go
+++ /dev/null
@@ -1,342 +0,0 @@
-// Copyright 2014 The Gogs Authors. All rights reserved.
-// Use of this source code is governed by a MIT-style
-// license that can be found in the LICENSE file.
-
-// FIXME: Put this file into its own package and separate into different files based on login sources.
-package db
-
-import (
- "crypto/tls"
- "fmt"
- "net/smtp"
- "net/textproto"
- "strings"
-
- "github.com/go-macaron/binding"
- "github.com/unknwon/com"
-
- "gogs.io/gogs/internal/auth/github"
- "gogs.io/gogs/internal/auth/ldap"
- "gogs.io/gogs/internal/auth/pam"
- "gogs.io/gogs/internal/db/errors"
-)
-
-type LoginType int
-
-// Note: new type must append to the end of list to maintain compatibility.
-// TODO: Move to authutil.
-const (
- LoginNotype LoginType = iota
- LoginPlain // 1
- LoginLDAP // 2
- LoginSMTP // 3
- LoginPAM // 4
- LoginDLDAP // 5
- LoginGitHub // 6
-)
-
-var LoginNames = map[LoginType]string{
- LoginLDAP: "LDAP (via BindDN)",
- LoginDLDAP: "LDAP (simple auth)", // Via direct bind
- LoginSMTP: "SMTP",
- LoginPAM: "PAM",
- LoginGitHub: "GitHub",
-}
-
-// ***********************
-// ----- LDAP config -----
-// ***********************
-
-type LDAPConfig struct {
- ldap.Source `ini:"config"`
-}
-
-var SecurityProtocolNames = map[ldap.SecurityProtocol]string{
- ldap.SecurityProtocolUnencrypted: "Unencrypted",
- ldap.SecurityProtocolLDAPS: "LDAPS",
- ldap.SecurityProtocolStartTLS: "StartTLS",
-}
-
-func (cfg *LDAPConfig) SecurityProtocolName() string {
- return SecurityProtocolNames[cfg.SecurityProtocol]
-}
-
-func composeFullName(firstname, surname, username string) string {
- switch {
- case len(firstname) == 0 && len(surname) == 0:
- return username
- case len(firstname) == 0:
- return surname
- case len(surname) == 0:
- return firstname
- default:
- return firstname + " " + surname
- }
-}
-
-// LoginViaLDAP queries if login/password is valid against the LDAP directory pool,
-// and create a local user if success when enabled.
-func LoginViaLDAP(login, password string, source *LoginSource, autoRegister bool) (*User, error) {
- username, fn, sn, mail, isAdmin, succeed := source.Config.(*LDAPConfig).SearchEntry(login, password, source.Type == LoginDLDAP)
- if !succeed {
- // User not in LDAP, do nothing
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- }
-
- if !autoRegister {
- return nil, nil
- }
-
- // Fallback.
- if len(username) == 0 {
- username = login
- }
- // Validate username make sure it satisfies requirement.
- if binding.AlphaDashDotPattern.MatchString(username) {
- return nil, fmt.Errorf("Invalid pattern for attribute 'username' [%s]: must be valid alpha or numeric or dash(-_) or dot characters", username)
- }
-
- if len(mail) == 0 {
- mail = fmt.Sprintf("%s@localhost", username)
- }
-
- user := &User{
- LowerName: strings.ToLower(username),
- Name: username,
- FullName: composeFullName(fn, sn, username),
- Email: mail,
- LoginSource: source.ID,
- LoginName: login,
- IsActive: true,
- IsAdmin: isAdmin,
- }
-
- ok, err := IsUserExist(0, user.Name)
- if err != nil {
- return user, err
- }
-
- if ok {
- return user, UpdateUser(user)
- }
-
- return user, CreateUser(user)
-}
-
-// ***********************
-// ----- SMTP config -----
-// ***********************
-
-type SMTPConfig struct {
- Auth string
- Host string
- Port int
- AllowedDomains string
- TLS bool `ini:"tls"`
- SkipVerify bool
-}
-
-type smtpLoginAuth struct {
- username, password string
-}
-
-func (auth *smtpLoginAuth) Start(server *smtp.ServerInfo) (string, []byte, error) {
- return "LOGIN", []byte(auth.username), nil
-}
-
-func (auth *smtpLoginAuth) Next(fromServer []byte, more bool) ([]byte, error) {
- if more {
- switch string(fromServer) {
- case "Username:":
- return []byte(auth.username), nil
- case "Password:":
- return []byte(auth.password), nil
- }
- }
- return nil, nil
-}
-
-const (
- SMTPPlain = "PLAIN"
- SMTPLogin = "LOGIN"
-)
-
-var SMTPAuths = []string{SMTPPlain, SMTPLogin}
-
-func SMTPAuth(a smtp.Auth, cfg *SMTPConfig) error {
- c, err := smtp.Dial(fmt.Sprintf("%s:%d", cfg.Host, cfg.Port))
- if err != nil {
- return err
- }
- defer c.Close()
-
- if err = c.Hello("gogs"); err != nil {
- return err
- }
-
- if cfg.TLS {
- if ok, _ := c.Extension("STARTTLS"); ok {
- if err = c.StartTLS(&tls.Config{
- InsecureSkipVerify: cfg.SkipVerify,
- ServerName: cfg.Host,
- }); err != nil {
- return err
- }
- } else {
- return errors.New("SMTP server unsupports TLS")
- }
- }
-
- if ok, _ := c.Extension("AUTH"); ok {
- if err = c.Auth(a); err != nil {
- return err
- }
- return nil
- }
- return errors.New("Unsupported SMTP authentication method")
-}
-
-// LoginViaSMTP queries if login/password is valid against the SMTP,
-// and create a local user if success when enabled.
-func LoginViaSMTP(login, password string, sourceID int64, cfg *SMTPConfig, autoRegister bool) (*User, error) {
- // Verify allowed domains.
- if len(cfg.AllowedDomains) > 0 {
- idx := strings.Index(login, "@")
- if idx == -1 {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- } else if !com.IsSliceContainsStr(strings.Split(cfg.AllowedDomains, ","), login[idx+1:]) {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- }
- }
-
- var auth smtp.Auth
- if cfg.Auth == SMTPPlain {
- auth = smtp.PlainAuth("", login, password, cfg.Host)
- } else if cfg.Auth == SMTPLogin {
- auth = &smtpLoginAuth{login, password}
- } else {
- return nil, errors.New("Unsupported SMTP authentication type")
- }
-
- if err := SMTPAuth(auth, cfg); err != nil {
- // Check standard error format first,
- // then fallback to worse case.
- tperr, ok := err.(*textproto.Error)
- if (ok && tperr.Code == 535) ||
- strings.Contains(err.Error(), "Username and Password not accepted") {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- }
- return nil, err
- }
-
- if !autoRegister {
- return nil, nil
- }
-
- username := login
- idx := strings.Index(login, "@")
- if idx > -1 {
- username = login[:idx]
- }
-
- user := &User{
- LowerName: strings.ToLower(username),
- Name: strings.ToLower(username),
- Email: login,
- Passwd: password,
- LoginSource: sourceID,
- LoginName: login,
- IsActive: true,
- }
- return user, CreateUser(user)
-}
-
-// **********************
-// ----- PAM config -----
-// **********************
-
-type PAMConfig struct {
- // The name of the PAM service, e.g. system-auth.
- ServiceName string
-}
-
-// LoginViaPAM queries if login/password is valid against the PAM,
-// and create a local user if success when enabled.
-func LoginViaPAM(login, password string, sourceID int64, cfg *PAMConfig, autoRegister bool) (*User, error) {
- if err := pam.PAMAuth(cfg.ServiceName, login, password); err != nil {
- if strings.Contains(err.Error(), "Authentication failure") {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- }
- return nil, err
- }
-
- if !autoRegister {
- return nil, nil
- }
-
- user := &User{
- LowerName: strings.ToLower(login),
- Name: login,
- Email: login,
- Passwd: password,
- LoginSource: sourceID,
- LoginName: login,
- IsActive: true,
- }
- return user, CreateUser(user)
-}
-
-// *************************
-// ----- GitHub config -----
-// *************************
-
-type GitHubConfig struct {
- // the GitHub service endpoint, e.g. https://api.github.com/.
- APIEndpoint string
-}
-
-func LoginViaGitHub(login, password string, sourceID int64, cfg *GitHubConfig, autoRegister bool) (*User, error) {
- fullname, email, url, location, err := github.Authenticate(cfg.APIEndpoint, login, password)
- if err != nil {
- if strings.Contains(err.Error(), "401") {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
- }
- return nil, err
- }
-
- if !autoRegister {
- return nil, nil
- }
- user := &User{
- LowerName: strings.ToLower(login),
- Name: login,
- FullName: fullname,
- Email: email,
- Website: url,
- Passwd: password,
- LoginSource: sourceID,
- LoginName: login,
- IsActive: true,
- Location: location,
- }
- return user, CreateUser(user)
-}
-
-func authenticateViaLoginSource(source *LoginSource, login, password string, autoRegister bool) (*User, error) {
- if !source.IsActived {
- return nil, errors.LoginSourceNotActivated{SourceID: source.ID}
- }
-
- switch source.Type {
- case LoginLDAP, LoginDLDAP:
- return LoginViaLDAP(login, password, source, autoRegister)
- case LoginSMTP:
- return LoginViaSMTP(login, password, source.ID, source.Config.(*SMTPConfig), autoRegister)
- case LoginPAM:
- return LoginViaPAM(login, password, source.ID, source.Config.(*PAMConfig), autoRegister)
- case LoginGitHub:
- return LoginViaGitHub(login, password, source.ID, source.Config.(*GitHubConfig), autoRegister)
- }
-
- return nil, errors.InvalidLoginSourceType{Type: source.Type}
-}
diff --git a/internal/db/login_source_files.go b/internal/db/login_source_files.go
index f2a24ad9..ff11b71a 100644
--- a/internal/db/login_source_files.go
+++ b/internal/db/login_source_files.go
@@ -15,6 +15,11 @@ import (
"github.com/pkg/errors"
"gopkg.in/ini.v1"
+ "gogs.io/gogs/internal/auth"
+ "gogs.io/gogs/internal/auth/github"
+ "gogs.io/gogs/internal/auth/ldap"
+ "gogs.io/gogs/internal/auth/pam"
+ "gogs.io/gogs/internal/auth/smtp"
"gogs.io/gogs/internal/errutil"
"gogs.io/gogs/internal/osutil"
)
@@ -154,30 +159,57 @@ func loadLoginSourceFiles(authdPath string, clock func() time.Time) (loginSource
// Parse authentication source file
authType := s.Key("type").String()
+ cfgSection := authSource.Section("config")
switch authType {
case "ldap_bind_dn":
- loginSource.Type = LoginLDAP
- loginSource.Config = &LDAPConfig{}
+ var cfg ldap.Config
+ err = cfgSection.MapTo(&cfg)
+ if err != nil {
+ return errors.Wrap(err, `map "config" section`)
+ }
+ loginSource.Type = auth.LDAP
+ loginSource.Provider = ldap.NewProvider(false, &cfg)
+
case "ldap_simple_auth":
- loginSource.Type = LoginDLDAP
- loginSource.Config = &LDAPConfig{}
+ var cfg ldap.Config
+ err = cfgSection.MapTo(&cfg)
+ if err != nil {
+ return errors.Wrap(err, `map "config" section`)
+ }
+ loginSource.Type = auth.DLDAP
+ loginSource.Provider = ldap.NewProvider(true, &cfg)
+
case "smtp":
- loginSource.Type = LoginSMTP
- loginSource.Config = &SMTPConfig{}
+ var cfg smtp.Config
+ err = cfgSection.MapTo(&cfg)
+ if err != nil {
+ return errors.Wrap(err, `map "config" section`)
+ }
+ loginSource.Type = auth.SMTP
+ loginSource.Provider = smtp.NewProvider(&cfg)
+
case "pam":
- loginSource.Type = LoginPAM
- loginSource.Config = &PAMConfig{}
+ var cfg pam.Config
+ err = cfgSection.MapTo(&cfg)
+ if err != nil {
+ return errors.Wrap(err, `map "config" section`)
+ }
+ loginSource.Type = auth.PAM
+ loginSource.Provider = pam.NewProvider(&cfg)
+
case "github":
- loginSource.Type = LoginGitHub
- loginSource.Config = &GitHubConfig{}
+ var cfg github.Config
+ err = cfgSection.MapTo(&cfg)
+ if err != nil {
+ return errors.Wrap(err, `map "config" section`)
+ }
+ loginSource.Type = auth.GitHub
+ loginSource.Provider = github.NewProvider(&cfg)
+
default:
return fmt.Errorf("unknown type %q", authType)
}
- if err = authSource.Section("config").MapTo(loginSource.Config); err != nil {
- return errors.Wrap(err, `map "config" section`)
- }
-
store.sources = append(store.sources, loginSource)
return nil
})
diff --git a/internal/db/login_sources.go b/internal/db/login_sources.go
index 4bb1f4c2..1cce7829 100644
--- a/internal/db/login_sources.go
+++ b/internal/db/login_sources.go
@@ -13,7 +13,11 @@ import (
"github.com/pkg/errors"
"gorm.io/gorm"
+ "gogs.io/gogs/internal/auth"
+ "gogs.io/gogs/internal/auth/github"
"gogs.io/gogs/internal/auth/ldap"
+ "gogs.io/gogs/internal/auth/pam"
+ "gogs.io/gogs/internal/auth/smtp"
"gogs.io/gogs/internal/errutil"
)
@@ -46,12 +50,12 @@ var LoginSources LoginSourcesStore
// LoginSource represents an external way for authorizing users.
type LoginSource struct {
ID int64
- Type LoginType
- Name string `xorm:"UNIQUE" gorm:"UNIQUE"`
- IsActived bool `xorm:"NOT NULL DEFAULT false" gorm:"NOT NULL"`
- IsDefault bool `xorm:"DEFAULT false"`
- Config interface{} `xorm:"-" gorm:"-"`
- RawConfig string `xorm:"TEXT cfg" gorm:"COLUMN:cfg;TYPE:TEXT"`
+ Type auth.Type
+ Name string `xorm:"UNIQUE" gorm:"UNIQUE"`
+ IsActived bool `xorm:"NOT NULL DEFAULT false" gorm:"NOT NULL"`
+ IsDefault bool `xorm:"DEFAULT false"`
+ Provider auth.Provider `xorm:"-" gorm:"-"`
+ Config string `xorm:"TEXT cfg" gorm:"COLUMN:cfg;TYPE:TEXT" json:"RawConfig"`
Created time.Time `xorm:"-" gorm:"-" json:"-"`
CreatedUnix int64
@@ -63,10 +67,10 @@ type LoginSource struct {
// NOTE: This is a GORM save hook.
func (s *LoginSource) BeforeSave(tx *gorm.DB) (err error) {
- if s.Config == nil {
+ if s.Provider == nil {
return nil
}
- s.RawConfig, err = jsoniter.MarshalToString(s.Config)
+ s.Config, err = jsoniter.MarshalToString(s.Provider.Config())
return err
}
@@ -91,86 +95,90 @@ func (s *LoginSource) AfterFind(tx *gorm.DB) error {
s.Updated = time.Unix(s.UpdatedUnix, 0).Local()
switch s.Type {
- case LoginLDAP, LoginDLDAP:
- s.Config = new(LDAPConfig)
- case LoginSMTP:
- s.Config = new(SMTPConfig)
- case LoginPAM:
- s.Config = new(PAMConfig)
- case LoginGitHub:
- s.Config = new(GitHubConfig)
+ case auth.LDAP:
+ var cfg ldap.Config
+ err := jsoniter.UnmarshalFromString(s.Config, &cfg)
+ if err != nil {
+ return err
+ }
+ s.Provider = ldap.NewProvider(false, &cfg)
+
+ case auth.DLDAP:
+ var cfg ldap.Config
+ err := jsoniter.UnmarshalFromString(s.Config, &cfg)
+ if err != nil {
+ return err
+ }
+ s.Provider = ldap.NewProvider(true, &cfg)
+
+ case auth.SMTP:
+ var cfg smtp.Config
+ err := jsoniter.UnmarshalFromString(s.Config, &cfg)
+ if err != nil {
+ return err
+ }
+ s.Provider = smtp.NewProvider(&cfg)
+
+ case auth.PAM:
+ var cfg pam.Config
+ err := jsoniter.UnmarshalFromString(s.Config, &cfg)
+ if err != nil {
+ return err
+ }
+ s.Provider = pam.NewProvider(&cfg)
+
+ case auth.GitHub:
+ var cfg github.Config
+ err := jsoniter.UnmarshalFromString(s.Config, &cfg)
+ if err != nil {
+ return err
+ }
+ s.Provider = github.NewProvider(&cfg)
+
default:
return fmt.Errorf("unrecognized login source type: %v", s.Type)
}
- return jsoniter.UnmarshalFromString(s.RawConfig, s.Config)
+ return nil
}
func (s *LoginSource) TypeName() string {
- return LoginNames[s.Type]
+ return auth.Name(s.Type)
}
func (s *LoginSource) IsLDAP() bool {
- return s.Type == LoginLDAP
+ return s.Type == auth.LDAP
}
func (s *LoginSource) IsDLDAP() bool {
- return s.Type == LoginDLDAP
+ return s.Type == auth.DLDAP
}
func (s *LoginSource) IsSMTP() bool {
- return s.Type == LoginSMTP
+ return s.Type == auth.SMTP
}
func (s *LoginSource) IsPAM() bool {
- return s.Type == LoginPAM
+ return s.Type == auth.PAM
}
func (s *LoginSource) IsGitHub() bool {
- return s.Type == LoginGitHub
-}
-
-func (s *LoginSource) HasTLS() bool {
- return ((s.IsLDAP() || s.IsDLDAP()) &&
- s.LDAP().SecurityProtocol > ldap.SecurityProtocolUnencrypted) ||
- s.IsSMTP()
+ return s.Type == auth.GitHub
}
-func (s *LoginSource) UseTLS() bool {
- switch s.Type {
- case LoginLDAP, LoginDLDAP:
- return s.LDAP().SecurityProtocol != ldap.SecurityProtocolUnencrypted
- case LoginSMTP:
- return s.SMTP().TLS
- }
-
- return false
+func (s *LoginSource) LDAP() *ldap.Config {
+ return s.Provider.Config().(*ldap.Config)
}
-func (s *LoginSource) SkipVerify() bool {
- switch s.Type {
- case LoginLDAP, LoginDLDAP:
- return s.LDAP().SkipVerify
- case LoginSMTP:
- return s.SMTP().SkipVerify
- }
-
- return false
+func (s *LoginSource) SMTP() *smtp.Config {
+ return s.Provider.Config().(*smtp.Config)
}
-func (s *LoginSource) LDAP() *LDAPConfig {
- return s.Config.(*LDAPConfig)
+func (s *LoginSource) PAM() *pam.Config {
+ return s.Provider.Config().(*pam.Config)
}
-func (s *LoginSource) SMTP() *SMTPConfig {
- return s.Config.(*SMTPConfig)
-}
-
-func (s *LoginSource) PAM() *PAMConfig {
- return s.Config.(*PAMConfig)
-}
-
-func (s *LoginSource) GitHub() *GitHubConfig {
- return s.Config.(*GitHubConfig)
+func (s *LoginSource) GitHub() *github.Config {
+ return s.Provider.Config().(*github.Config)
}
var _ LoginSourcesStore = (*loginSources)(nil)
@@ -181,7 +189,7 @@ type loginSources struct {
}
type CreateLoginSourceOpts struct {
- Type LoginType
+ Type auth.Type
Name string
Activated bool
Default bool
@@ -214,7 +222,10 @@ func (db *loginSources) Create(opts CreateLoginSourceOpts) (*LoginSource, error)
Name: opts.Name,
IsActived: opts.Activated,
IsDefault: opts.Default,
- Config: opts.Config,
+ }
+ source.Config, err = jsoniter.MarshalToString(opts.Config)
+ if err != nil {
+ return nil, err
}
return source, db.DB.Create(source).Error
}
@@ -308,7 +319,7 @@ func (db *loginSources) Save(source *LoginSource) error {
source.File.SetGeneral("name", source.Name)
source.File.SetGeneral("is_activated", strconv.FormatBool(source.IsActived))
source.File.SetGeneral("is_default", strconv.FormatBool(source.IsDefault))
- if err := source.File.SetConfig(source.Config); err != nil {
+ if err := source.File.SetConfig(source.Provider.Config()); err != nil {
return errors.Wrap(err, "set config")
} else if err = source.File.Save(); err != nil {
return errors.Wrap(err, "save file")
diff --git a/internal/db/login_sources_test.go b/internal/db/login_sources_test.go
index cb3a16e7..280a1bca 100644
--- a/internal/db/login_sources_test.go
+++ b/internal/db/login_sources_test.go
@@ -11,6 +11,9 @@ import (
"github.com/stretchr/testify/assert"
"gorm.io/gorm"
+ "gogs.io/gogs/internal/auth"
+ "gogs.io/gogs/internal/auth/github"
+ "gogs.io/gogs/internal/auth/pam"
"gogs.io/gogs/internal/errutil"
)
@@ -30,18 +33,20 @@ func TestLoginSource_BeforeSave(t *testing.T) {
if err != nil {
t.Fatal(err)
}
- assert.Empty(t, s.RawConfig)
+ assert.Empty(t, s.Config)
})
t.Run("Config has been set", func(t *testing.T) {
s := &LoginSource{
- Config: &PAMConfig{ServiceName: "pam_service"},
+ Provider: pam.NewProvider(&pam.Config{
+ ServiceName: "pam_service",
+ }),
}
err := s.BeforeSave(db)
if err != nil {
t.Fatal(err)
}
- assert.Equal(t, `{"ServiceName":"pam_service"}`, s.RawConfig)
+ assert.Equal(t, `{"ServiceName":"pam_service"}`, s.Config)
})
}
@@ -109,11 +114,11 @@ func Test_loginSources(t *testing.T) {
func test_loginSources_Create(t *testing.T, db *loginSources) {
// Create first login source with name "GitHub"
source, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: false,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -138,11 +143,11 @@ func test_loginSources_Create(t *testing.T, db *loginSources) {
func test_loginSources_Count(t *testing.T, db *loginSources) {
// Create two login sources, one in database and one as source file.
_, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: false,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -162,11 +167,11 @@ func test_loginSources_Count(t *testing.T, db *loginSources) {
func test_loginSources_DeleteByID(t *testing.T, db *loginSources) {
t.Run("delete but in used", func(t *testing.T) {
source, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: false,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -175,8 +180,7 @@ func test_loginSources_DeleteByID(t *testing.T, db *loginSources) {
}
// Create a user that uses this login source
- _, err = (&users{DB: db.DB}).Create(CreateUserOpts{
- Name: "alice",
+ _, err = (&users{DB: db.DB}).Create("alice", "", CreateUserOpts{
LoginSource: source.ID,
})
if err != nil {
@@ -197,11 +201,11 @@ func test_loginSources_DeleteByID(t *testing.T, db *loginSources) {
// Create a login source with name "GitHub2"
source, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub2",
Activated: true,
Default: false,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -243,13 +247,13 @@ func test_loginSources_GetByID(t *testing.T, db *loginSources) {
},
})
- expConfig := &GitHubConfig{
+ expConfig := &github.Config{
APIEndpoint: "https://api.github.com",
}
// Create a login source with name "GitHub"
source, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: false,
@@ -264,7 +268,7 @@ func test_loginSources_GetByID(t *testing.T, db *loginSources) {
if err != nil {
t.Fatal(err)
}
- assert.Equal(t, expConfig, source.Config)
+ assert.Equal(t, expConfig, source.Provider.Config())
// Get the one in source file store
_, err = db.GetByID(101)
@@ -290,9 +294,9 @@ func test_loginSources_List(t *testing.T, db *loginSources) {
// Create two login sources in database, one activated and the other one not
_, err := db.Create(CreateLoginSourceOpts{
- Type: LoginPAM,
+ Type: auth.PAM,
Name: "PAM",
- Config: &PAMConfig{
+ Config: &pam.Config{
ServiceName: "PAM",
},
})
@@ -300,10 +304,10 @@ func test_loginSources_List(t *testing.T, db *loginSources) {
t.Fatal(err)
}
_, err = db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -348,10 +352,10 @@ func test_loginSources_ResetNonDefault(t *testing.T, db *loginSources) {
// Create two login sources both have default on
source1, err := db.Create(CreateLoginSourceOpts{
- Type: LoginPAM,
+ Type: auth.PAM,
Name: "PAM",
Default: true,
- Config: &PAMConfig{
+ Config: &pam.Config{
ServiceName: "PAM",
},
})
@@ -359,11 +363,11 @@ func test_loginSources_ResetNonDefault(t *testing.T, db *loginSources) {
t.Fatal(err)
}
source2, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: true,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -395,11 +399,11 @@ func test_loginSources_Save(t *testing.T, db *loginSources) {
t.Run("save to database", func(t *testing.T) {
// Create a login source with name "GitHub"
source, err := db.Create(CreateLoginSourceOpts{
- Type: LoginGitHub,
+ Type: auth.GitHub,
Name: "GitHub",
Activated: true,
Default: false,
- Config: &GitHubConfig{
+ Config: &github.Config{
APIEndpoint: "https://api.github.com",
},
})
@@ -408,9 +412,9 @@ func test_loginSources_Save(t *testing.T, db *loginSources) {
}
source.IsActived = false
- source.Config = &GitHubConfig{
+ source.Provider = github.NewProvider(&github.Config{
APIEndpoint: "https://api2.github.com",
- }
+ })
err = db.Save(source)
if err != nil {
t.Fatal(err)
@@ -427,6 +431,9 @@ func test_loginSources_Save(t *testing.T, db *loginSources) {
t.Run("save to file", func(t *testing.T) {
calledSave := false
source := &LoginSource{
+ Provider: github.NewProvider(&github.Config{
+ APIEndpoint: "https://api.github.com",
+ }),
File: &mockLoginSourceFileStore{
MockSetGeneral: func(name, value string) {},
MockSetConfig: func(cfg interface{}) error { return nil },
diff --git a/internal/db/mocks.go b/internal/db/mocks.go
index 41bb4072..f7f45cab 100644
--- a/internal/db/mocks.go
+++ b/internal/db/mocks.go
@@ -209,7 +209,7 @@ var _ UsersStore = (*MockUsersStore)(nil)
type MockUsersStore struct {
MockAuthenticate func(username, password string, loginSourceID int64) (*User, error)
- MockCreate func(opts CreateUserOpts) (*User, error)
+ MockCreate func(username, email string, opts CreateUserOpts) (*User, error)
MockGetByEmail func(email string) (*User, error)
MockGetByID func(id int64) (*User, error)
MockGetByUsername func(username string) (*User, error)
@@ -219,8 +219,8 @@ func (m *MockUsersStore) Authenticate(username, password string, loginSourceID i
return m.MockAuthenticate(username, password, loginSourceID)
}
-func (m *MockUsersStore) Create(opts CreateUserOpts) (*User, error) {
- return m.MockCreate(opts)
+func (m *MockUsersStore) Create(username, email string, opts CreateUserOpts) (*User, error) {
+ return m.MockCreate(username, email, opts)
}
func (m *MockUsersStore) GetByEmail(email string) (*User, error) {
diff --git a/internal/db/testdata/backup/LoginSource.golden.json b/internal/db/testdata/backup/LoginSource.golden.json
index 08a5d1b6..f7209668 100644
--- a/internal/db/testdata/backup/LoginSource.golden.json
+++ b/internal/db/testdata/backup/LoginSource.golden.json
@@ -1,2 +1,2 @@
-{"ID":1,"Type":4,"Name":"My PAM","IsActived":true,"IsDefault":false,"Config":null,"RawConfig":"{\"ServiceName\":\"PAM service\"}","CreatedUnix":1588568886,"UpdatedUnix":1588572486}
-{"ID":2,"Type":6,"Name":"GitHub.com","IsActived":true,"IsDefault":false,"Config":null,"RawConfig":"{\"APIEndpoint\":\"https://api.github.com\"}","CreatedUnix":1588568886,"UpdatedUnix":0}
+{"ID":1,"Type":4,"Name":"My PAM","IsActived":true,"IsDefault":false,"Provider":null,"RawConfig":"{\"ServiceName\":\"PAM service\"}","CreatedUnix":1588568886,"UpdatedUnix":1588572486}
+{"ID":2,"Type":6,"Name":"GitHub.com","IsActived":true,"IsDefault":false,"Provider":null,"RawConfig":"{\"APIEndpoint\":\"https://api.github.com\",\"SkipVerify\":false}","CreatedUnix":1588568886,"UpdatedUnix":0}
diff --git a/internal/db/users.go b/internal/db/users.go
index 64535ea3..5e1baf01 100644
--- a/internal/db/users.go
+++ b/internal/db/users.go
@@ -9,9 +9,11 @@ import (
"strings"
"time"
+ "github.com/go-macaron/binding"
"github.com/pkg/errors"
"gorm.io/gorm"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/cryptoutil"
"gogs.io/gogs/internal/errutil"
)
@@ -32,10 +34,10 @@ type UsersStore interface {
// When the "loginSourceID" is positive, it tries to authenticate via given
// login source and creates a new user when not yet exists in the database.
Authenticate(username, password string, loginSourceID int64) (*User, error)
- // Create creates a new user and persist to database.
+ // Create creates a new user and persists to database.
// It returns ErrUserAlreadyExist when a user with same name already exists,
// or ErrEmailAlreadyUsed if the email has been used by another user.
- Create(opts CreateUserOpts) (*User, error)
+ Create(username, email string, opts CreateUserOpts) (*User, error)
// GetByEmail returns the user (not organization) with given email.
// It ignores records with unverified emails and returns ErrUserNotExist when not found.
GetByEmail(email string) (*User, error)
@@ -93,6 +95,9 @@ func (db *users) Authenticate(login, password string, loginSourceID int64) (*Use
return nil, errors.Wrap(err, "get user")
}
+ var authSourceID int64 // The login source ID will be used to authenticate the user
+ createNewUser := false // Whether to create a new user after successful authentication
+
// User found in the database
if err == nil {
// Note: This check is unnecessary but to reduce user confusion at login page
@@ -107,44 +112,64 @@ func (db *users) Authenticate(login, password string, loginSourceID int64) (*Use
return user, nil
}
- return nil, ErrUserNotExist{args: map[string]interface{}{"userID": user.ID, "name": user.Name}}
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login, "userID": user.ID}}
}
- source, err := LoginSources.GetByID(user.LoginSource)
- if err != nil {
- return nil, errors.Wrap(err, "get login source")
- }
+ authSourceID = user.LoginSource
- _, err = authenticateViaLoginSource(source, login, password, false)
- if err != nil {
- return nil, errors.Wrap(err, "authenticate via login source")
+ } else {
+ // Non-local login source is always greater than 0.
+ if loginSourceID <= 0 {
+ return nil, auth.ErrBadCredentials{Args: map[string]interface{}{"login": login}}
}
- return user, nil
- }
- // Non-local login source is always greater than 0.
- if loginSourceID <= 0 {
- return nil, ErrUserNotExist{args: map[string]interface{}{"login": login}}
+ authSourceID = loginSourceID
+ createNewUser = true
}
- source, err := LoginSources.GetByID(loginSourceID)
+ source, err := LoginSources.GetByID(authSourceID)
if err != nil {
return nil, errors.Wrap(err, "get login source")
}
- user, err = authenticateViaLoginSource(source, login, password, true)
+ if !source.IsActived {
+ return nil, errors.Errorf("login source %d is not activated", source.ID)
+ }
+
+ extAccount, err := source.Provider.Authenticate(login, password)
if err != nil {
- return nil, errors.Wrap(err, "authenticate via login source")
+ return nil, err
}
- return user, nil
+
+ if !createNewUser {
+ return user, nil
+ }
+
+ // Validate username make sure it satisfies requirement.
+ if binding.AlphaDashDotPattern.MatchString(extAccount.Name) {
+ return nil, fmt.Errorf("invalid pattern for attribute 'username' [%s]: must be valid alpha or numeric or dash(-_) or dot characters", extAccount.Name)
+ }
+
+ return Users.Create(extAccount.Name, extAccount.Email, CreateUserOpts{
+ FullName: extAccount.FullName,
+ LoginSource: authSourceID,
+ LoginName: extAccount.Login,
+ Location: extAccount.Location,
+ Website: extAccount.Website,
+ Activated: true,
+ Admin: extAccount.Admin,
+ })
}
type CreateUserOpts struct {
- Name string
- Email string
+ FullName string
Password string
LoginSource int64
+ LoginName string
+ Location string
+ Website string
Activated bool
+ Admin bool
}
type ErrUserAlreadyExist struct {
@@ -181,36 +206,41 @@ func (err ErrEmailAlreadyUsed) Error() string {
return fmt.Sprintf("email has been used: %v", err.args)
}
-func (db *users) Create(opts CreateUserOpts) (*User, error) {
- err := isUsernameAllowed(opts.Name)
+func (db *users) Create(username, email string, opts CreateUserOpts) (*User, error) {
+ err := isUsernameAllowed(username)
if err != nil {
return nil, err
}
- _, err = db.GetByUsername(opts.Name)
+ _, err = db.GetByUsername(username)
if err == nil {
- return nil, ErrUserAlreadyExist{args: errutil.Args{"name": opts.Name}}
+ return nil, ErrUserAlreadyExist{args: errutil.Args{"name": username}}
} else if !IsErrUserNotExist(err) {
return nil, err
}
- _, err = db.GetByEmail(opts.Email)
+ _, err = db.GetByEmail(email)
if err == nil {
- return nil, ErrEmailAlreadyUsed{args: errutil.Args{"email": opts.Email}}
+ return nil, ErrEmailAlreadyUsed{args: errutil.Args{"email": email}}
} else if !IsErrUserNotExist(err) {
return nil, err
}
user := &User{
- LowerName: strings.ToLower(opts.Name),
- Name: opts.Name,
- Email: opts.Email,
+ LowerName: strings.ToLower(username),
+ Name: username,
+ FullName: opts.FullName,
+ Email: email,
Passwd: opts.Password,
LoginSource: opts.LoginSource,
+ LoginName: opts.LoginName,
+ Location: opts.Location,
+ Website: opts.Website,
MaxRepoCreation: -1,
IsActive: opts.Activated,
- Avatar: cryptoutil.MD5(opts.Email),
- AvatarEmail: opts.Email,
+ IsAdmin: opts.Admin,
+ Avatar: cryptoutil.MD5(email),
+ AvatarEmail: email,
}
user.Rands, err = GetUserSalt()
diff --git a/internal/db/users_test.go b/internal/db/users_test.go
index 7ff3b9f5..cb93b036 100644
--- a/internal/db/users_test.go
+++ b/internal/db/users_test.go
@@ -10,6 +10,7 @@ import (
"github.com/stretchr/testify/assert"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/errutil"
)
@@ -51,9 +52,7 @@ func Test_users(t *testing.T) {
// along with addressing https://github.com/gogs/gogs/issues/6115.
func test_users_Authenticate(t *testing.T, db *users) {
password := "pa$$word"
- alice, err := db.Create(CreateUserOpts{
- Name: "alice",
- Email: "alice@example.com",
+ alice, err := db.Create("alice", "alice@example.com", CreateUserOpts{
Password: password,
})
if err != nil {
@@ -62,13 +61,13 @@ func test_users_Authenticate(t *testing.T, db *users) {
t.Run("user not found", func(t *testing.T) {
_, err := db.Authenticate("bob", password, -1)
- expErr := ErrUserNotExist{args: map[string]interface{}{"login": "bob"}}
+ expErr := auth.ErrBadCredentials{Args: map[string]interface{}{"login": "bob"}}
assert.Equal(t, expErr, err)
})
t.Run("invalid password", func(t *testing.T) {
_, err := db.Authenticate(alice.Name, "bad_password", -1)
- expErr := ErrUserNotExist{args: map[string]interface{}{"userID": alice.ID, "name": alice.Name}}
+ expErr := auth.ErrBadCredentials{Args: map[string]interface{}{"login": alice.Name, "userID": alice.ID}}
assert.Equal(t, expErr, err)
})
@@ -90,9 +89,7 @@ func test_users_Authenticate(t *testing.T, db *users) {
}
func test_users_Create(t *testing.T, db *users) {
- alice, err := db.Create(CreateUserOpts{
- Name: "alice",
- Email: "alice@example.com",
+ alice, err := db.Create("alice", "alice@example.com", CreateUserOpts{
Activated: true,
})
if err != nil {
@@ -100,26 +97,19 @@ func test_users_Create(t *testing.T, db *users) {
}
t.Run("name not allowed", func(t *testing.T) {
- _, err := db.Create(CreateUserOpts{
- Name: "-",
- })
+ _, err := db.Create("-", "", CreateUserOpts{})
expErr := ErrNameNotAllowed{args: errutil.Args{"reason": "reserved", "name": "-"}}
assert.Equal(t, expErr, err)
})
t.Run("name already exists", func(t *testing.T) {
- _, err := db.Create(CreateUserOpts{
- Name: alice.Name,
- })
+ _, err := db.Create(alice.Name, "", CreateUserOpts{})
expErr := ErrUserAlreadyExist{args: errutil.Args{"name": alice.Name}}
assert.Equal(t, expErr, err)
})
t.Run("email already exists", func(t *testing.T) {
- _, err := db.Create(CreateUserOpts{
- Name: "bob",
- Email: alice.Email,
- })
+ _, err := db.Create("bob", alice.Email, CreateUserOpts{})
expErr := ErrEmailAlreadyUsed{args: errutil.Args{"email": alice.Email}}
assert.Equal(t, expErr, err)
})
@@ -141,10 +131,7 @@ func test_users_GetByEmail(t *testing.T, db *users) {
t.Run("ignore organization", func(t *testing.T) {
// TODO: Use Orgs.Create to replace SQL hack when the method is available.
- org, err := db.Create(CreateUserOpts{
- Name: "gogs",
- Email: "gogs@exmaple.com",
- })
+ org, err := db.Create("gogs", "gogs@exmaple.com", CreateUserOpts{})
if err != nil {
t.Fatal(err)
}
@@ -160,10 +147,7 @@ func test_users_GetByEmail(t *testing.T, db *users) {
})
t.Run("by primary email", func(t *testing.T) {
- alice, err := db.Create(CreateUserOpts{
- Name: "alice",
- Email: "alice@exmaple.com",
- })
+ alice, err := db.Create("alice", "alice@exmaple.com", CreateUserOpts{})
if err != nil {
t.Fatal(err)
}
@@ -187,10 +171,7 @@ func test_users_GetByEmail(t *testing.T, db *users) {
})
t.Run("by secondary email", func(t *testing.T) {
- bob, err := db.Create(CreateUserOpts{
- Name: "bob",
- Email: "bob@example.com",
- })
+ bob, err := db.Create("bob", "bob@example.com", CreateUserOpts{})
if err != nil {
t.Fatal(err)
}
@@ -221,10 +202,7 @@ func test_users_GetByEmail(t *testing.T, db *users) {
}
func test_users_GetByID(t *testing.T, db *users) {
- alice, err := db.Create(CreateUserOpts{
- Name: "alice",
- Email: "alice@exmaple.com",
- })
+ alice, err := db.Create("alice", "alice@exmaple.com", CreateUserOpts{})
if err != nil {
t.Fatal(err)
}
@@ -241,10 +219,7 @@ func test_users_GetByID(t *testing.T, db *users) {
}
func test_users_GetByUsername(t *testing.T, db *users) {
- alice, err := db.Create(CreateUserOpts{
- Name: "alice",
- Email: "alice@exmaple.com",
- })
+ alice, err := db.Create("alice", "alice@exmaple.com", CreateUserOpts{})
if err != nil {
t.Fatal(err)
}
diff --git a/internal/route/admin/auths.go b/internal/route/admin/auths.go
index d2967e29..ff8fd656 100644
--- a/internal/route/admin/auths.go
+++ b/internal/route/admin/auths.go
@@ -12,7 +12,11 @@ import (
"github.com/unknwon/com"
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
+ "gogs.io/gogs/internal/auth/github"
"gogs.io/gogs/internal/auth/ldap"
+ "gogs.io/gogs/internal/auth/pam"
+ "gogs.io/gogs/internal/auth/smtp"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/context"
"gogs.io/gogs/internal/db"
@@ -48,16 +52,16 @@ type dropdownItem struct {
var (
authSources = []dropdownItem{
- {db.LoginNames[db.LoginLDAP], db.LoginLDAP},
- {db.LoginNames[db.LoginDLDAP], db.LoginDLDAP},
- {db.LoginNames[db.LoginSMTP], db.LoginSMTP},
- {db.LoginNames[db.LoginPAM], db.LoginPAM},
- {db.LoginNames[db.LoginGitHub], db.LoginGitHub},
+ {auth.Name(auth.LDAP), auth.LDAP},
+ {auth.Name(auth.DLDAP), auth.DLDAP},
+ {auth.Name(auth.SMTP), auth.SMTP},
+ {auth.Name(auth.PAM), auth.PAM},
+ {auth.Name(auth.GitHub), auth.GitHub},
}
securityProtocols = []dropdownItem{
- {db.SecurityProtocolNames[ldap.SecurityProtocolUnencrypted], ldap.SecurityProtocolUnencrypted},
- {db.SecurityProtocolNames[ldap.SecurityProtocolLDAPS], ldap.SecurityProtocolLDAPS},
- {db.SecurityProtocolNames[ldap.SecurityProtocolStartTLS], ldap.SecurityProtocolStartTLS},
+ {ldap.SecurityProtocolName(ldap.SecurityProtocolUnencrypted), ldap.SecurityProtocolUnencrypted},
+ {ldap.SecurityProtocolName(ldap.SecurityProtocolLDAPS), ldap.SecurityProtocolLDAPS},
+ {ldap.SecurityProtocolName(ldap.SecurityProtocolStartTLS), ldap.SecurityProtocolStartTLS},
}
)
@@ -66,47 +70,45 @@ func NewAuthSource(c *context.Context) {
c.PageIs("Admin")
c.PageIs("AdminAuthentications")
- c.Data["type"] = db.LoginLDAP
- c.Data["CurrentTypeName"] = db.LoginNames[db.LoginLDAP]
- c.Data["CurrentSecurityProtocol"] = db.SecurityProtocolNames[ldap.SecurityProtocolUnencrypted]
+ c.Data["type"] = auth.LDAP
+ c.Data["CurrentTypeName"] = auth.Name(auth.LDAP)
+ c.Data["CurrentSecurityProtocol"] = ldap.SecurityProtocolName(ldap.SecurityProtocolUnencrypted)
c.Data["smtp_auth"] = "PLAIN"
c.Data["is_active"] = true
c.Data["is_default"] = true
c.Data["AuthSources"] = authSources
c.Data["SecurityProtocols"] = securityProtocols
- c.Data["SMTPAuths"] = db.SMTPAuths
+ c.Data["SMTPAuths"] = smtp.AuthTypes
c.Success(AUTH_NEW)
}
-func parseLDAPConfig(f form.Authentication) *db.LDAPConfig {
- return &db.LDAPConfig{
- Source: ldap.Source{
- Host: f.Host,
- Port: f.Port,
- SecurityProtocol: ldap.SecurityProtocol(f.SecurityProtocol),
- SkipVerify: f.SkipVerify,
- BindDN: f.BindDN,
- UserDN: f.UserDN,
- BindPassword: f.BindPassword,
- UserBase: f.UserBase,
- AttributeUsername: f.AttributeUsername,
- AttributeName: f.AttributeName,
- AttributeSurname: f.AttributeSurname,
- AttributeMail: f.AttributeMail,
- AttributesInBind: f.AttributesInBind,
- Filter: f.Filter,
- GroupEnabled: f.GroupEnabled,
- GroupDN: f.GroupDN,
- GroupFilter: f.GroupFilter,
- GroupMemberUID: f.GroupMemberUID,
- UserUID: f.UserUID,
- AdminFilter: f.AdminFilter,
- },
+func parseLDAPConfig(f form.Authentication) *ldap.Config {
+ return &ldap.Config{
+ Host: f.Host,
+ Port: f.Port,
+ SecurityProtocol: ldap.SecurityProtocol(f.SecurityProtocol),
+ SkipVerify: f.SkipVerify,
+ BindDN: f.BindDN,
+ UserDN: f.UserDN,
+ BindPassword: f.BindPassword,
+ UserBase: f.UserBase,
+ AttributeUsername: f.AttributeUsername,
+ AttributeName: f.AttributeName,
+ AttributeSurname: f.AttributeSurname,
+ AttributeMail: f.AttributeMail,
+ AttributesInBind: f.AttributesInBind,
+ Filter: f.Filter,
+ GroupEnabled: f.GroupEnabled,
+ GroupDN: f.GroupDN,
+ GroupFilter: f.GroupFilter,
+ GroupMemberUID: f.GroupMemberUID,
+ UserUID: f.UserUID,
+ AdminFilter: f.AdminFilter,
}
}
-func parseSMTPConfig(f form.Authentication) *db.SMTPConfig {
- return &db.SMTPConfig{
+func parseSMTPConfig(f form.Authentication) *smtp.Config {
+ return &smtp.Config{
Auth: f.SMTPAuth,
Host: f.SMTPHost,
Port: f.SMTPPort,
@@ -121,29 +123,31 @@ func NewAuthSourcePost(c *context.Context, f form.Authentication) {
c.PageIs("Admin")
c.PageIs("AdminAuthentications")
- c.Data["CurrentTypeName"] = db.LoginNames[db.LoginType(f.Type)]
- c.Data["CurrentSecurityProtocol"] = db.SecurityProtocolNames[ldap.SecurityProtocol(f.SecurityProtocol)]
+ c.Data["CurrentTypeName"] = auth.Name(auth.Type(f.Type))
+ c.Data["CurrentSecurityProtocol"] = ldap.SecurityProtocolName(ldap.SecurityProtocol(f.SecurityProtocol))
c.Data["AuthSources"] = authSources
c.Data["SecurityProtocols"] = securityProtocols
- c.Data["SMTPAuths"] = db.SMTPAuths
+ c.Data["SMTPAuths"] = smtp.AuthTypes
hasTLS := false
var config interface{}
- switch db.LoginType(f.Type) {
- case db.LoginLDAP, db.LoginDLDAP:
+ switch auth.Type(f.Type) {
+ case auth.LDAP, auth.DLDAP:
config = parseLDAPConfig(f)
hasTLS = ldap.SecurityProtocol(f.SecurityProtocol) > ldap.SecurityProtocolUnencrypted
- case db.LoginSMTP:
+ case auth.SMTP:
config = parseSMTPConfig(f)
hasTLS = true
- case db.LoginPAM:
- config = &db.PAMConfig{
+ case auth.PAM:
+ config = &pam.Config{
ServiceName: f.PAMServiceName,
}
- case db.LoginGitHub:
- config = &db.GitHubConfig{
+ case auth.GitHub:
+ config = &github.Config{
APIEndpoint: strings.TrimSuffix(f.GitHubAPIEndpoint, "/") + "/",
+ SkipVerify: f.SkipVerify,
}
+ hasTLS = true
default:
c.Status(http.StatusBadRequest)
return
@@ -156,7 +160,7 @@ func NewAuthSourcePost(c *context.Context, f form.Authentication) {
}
source, err := db.LoginSources.Create(db.CreateLoginSourceOpts{
- Type: db.LoginType(f.Type),
+ Type: auth.Type(f.Type),
Name: f.Name,
Activated: f.IsActive,
Default: f.IsDefault,
@@ -192,7 +196,7 @@ func EditAuthSource(c *context.Context) {
c.PageIs("AdminAuthentications")
c.Data["SecurityProtocols"] = securityProtocols
- c.Data["SMTPAuths"] = db.SMTPAuths
+ c.Data["SMTPAuths"] = smtp.AuthTypes
source, err := db.LoginSources.GetByID(c.ParamsInt64(":authid"))
if err != nil {
@@ -200,7 +204,7 @@ func EditAuthSource(c *context.Context) {
return
}
c.Data["Source"] = source
- c.Data["HasTLS"] = source.HasTLS()
+ c.Data["HasTLS"] = source.Provider.HasTLS()
c.Success(AUTH_EDIT)
}
@@ -210,7 +214,7 @@ func EditAuthSourcePost(c *context.Context, f form.Authentication) {
c.PageIs("Admin")
c.PageIs("AdminAuthentications")
- c.Data["SMTPAuths"] = db.SMTPAuths
+ c.Data["SMTPAuths"] = smtp.AuthTypes
source, err := db.LoginSources.GetByID(c.ParamsInt64(":authid"))
if err != nil {
@@ -218,27 +222,30 @@ func EditAuthSourcePost(c *context.Context, f form.Authentication) {
return
}
c.Data["Source"] = source
- c.Data["HasTLS"] = source.HasTLS()
+ c.Data["HasTLS"] = source.Provider.HasTLS()
if c.HasError() {
c.Success(AUTH_EDIT)
return
}
- var config interface{}
- switch db.LoginType(f.Type) {
- case db.LoginLDAP, db.LoginDLDAP:
- config = parseLDAPConfig(f)
- case db.LoginSMTP:
- config = parseSMTPConfig(f)
- case db.LoginPAM:
- config = &db.PAMConfig{
+ var provider auth.Provider
+ switch auth.Type(f.Type) {
+ case auth.LDAP:
+ provider = ldap.NewProvider(false, parseLDAPConfig(f))
+ case auth.DLDAP:
+ provider = ldap.NewProvider(true, parseLDAPConfig(f))
+ case auth.SMTP:
+ provider = smtp.NewProvider(parseSMTPConfig(f))
+ case auth.PAM:
+ provider = pam.NewProvider(&pam.Config{
ServiceName: f.PAMServiceName,
- }
- case db.LoginGitHub:
- config = &db.GitHubConfig{
+ })
+ case auth.GitHub:
+ provider = github.NewProvider(&github.Config{
APIEndpoint: strings.TrimSuffix(f.GitHubAPIEndpoint, "/") + "/",
- }
+ SkipVerify: f.SkipVerify,
+ })
default:
c.Status(http.StatusBadRequest)
return
@@ -247,7 +254,7 @@ func EditAuthSourcePost(c *context.Context, f form.Authentication) {
source.Name = f.Name
source.IsActived = f.IsActive
source.IsDefault = f.IsDefault
- source.Config = config
+ source.Provider = provider
if err := db.LoginSources.Save(source); err != nil {
c.Error(err, "update login source")
return
diff --git a/internal/route/lfs/route.go b/internal/route/lfs/route.go
index a5c25303..f254423a 100644
--- a/internal/route/lfs/route.go
+++ b/internal/route/lfs/route.go
@@ -11,6 +11,7 @@ import (
"gopkg.in/macaron.v1"
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/authutil"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/db"
@@ -59,7 +60,7 @@ func authenticate() macaron.Handler {
}
user, err := db.Users.Authenticate(username, password, -1)
- if err != nil && !db.IsErrUserNotExist(err) {
+ if err != nil && !auth.IsErrBadCredentials(err) {
internalServerError(c.Resp)
log.Error("Failed to authenticate user [name: %s]: %v", username, err)
return
@@ -71,7 +72,7 @@ func authenticate() macaron.Handler {
}
// If username and password authentication failed, try again using username as an access token.
- if db.IsErrUserNotExist(err) {
+ if auth.IsErrBadCredentials(err) {
token, err := db.AccessTokens.GetBySHA(username)
if err != nil {
if db.IsErrAccessTokenNotExist(err) {
diff --git a/internal/route/lfs/route_test.go b/internal/route/lfs/route_test.go
index d2a95e36..b6ef1ebc 100644
--- a/internal/route/lfs/route_test.go
+++ b/internal/route/lfs/route_test.go
@@ -14,6 +14,7 @@ import (
"github.com/stretchr/testify/assert"
"gopkg.in/macaron.v1"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/db"
"gogs.io/gogs/internal/lfsutil"
)
@@ -70,7 +71,7 @@ func Test_authenticate(t *testing.T) {
},
mockUsersStore: &db.MockUsersStore{
MockAuthenticate: func(username, password string, loginSourceID int64) (*db.User, error) {
- return nil, db.ErrUserNotExist{}
+ return nil, auth.ErrBadCredentials{}
},
},
mockAccessTokensStore: &db.MockAccessTokensStore{
@@ -112,7 +113,7 @@ func Test_authenticate(t *testing.T) {
},
mockUsersStore: &db.MockUsersStore{
MockAuthenticate: func(username, password string, loginSourceID int64) (*db.User, error) {
- return nil, db.ErrUserNotExist{}
+ return nil, auth.ErrBadCredentials{}
},
MockGetByID: func(id int64) (*db.User, error) {
return &db.User{ID: 1, Name: "unknwon"}, nil
diff --git a/internal/route/org/setting.go b/internal/route/org/setting.go
index e3b2bf3c..94e9b7a6 100644
--- a/internal/route/org/setting.go
+++ b/internal/route/org/setting.go
@@ -9,6 +9,7 @@ import (
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/context"
"gogs.io/gogs/internal/db"
@@ -109,7 +110,7 @@ func SettingsDelete(c *context.Context) {
org := c.Org.Organization
if c.Req.Method == "POST" {
if _, err := db.Users.Authenticate(c.User.Name, c.Query("password"), c.User.LoginSource); err != nil {
- if db.IsErrUserNotExist(err) {
+ if auth.IsErrBadCredentials(err) {
c.RenderWithErr(c.Tr("form.enterred_invalid_password"), SETTINGS_DELETE, nil)
} else {
c.Error(err, "authenticate user")
diff --git a/internal/route/repo/http.go b/internal/route/repo/http.go
index 93a99aef..f4a77a28 100644
--- a/internal/route/repo/http.go
+++ b/internal/route/repo/http.go
@@ -20,6 +20,7 @@ import (
"gopkg.in/macaron.v1"
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/db"
"gogs.io/gogs/internal/lazyregexp"
@@ -122,7 +123,7 @@ func HTTPContexter() macaron.Handler {
}
authUser, err := db.Users.Authenticate(authUsername, authPassword, -1)
- if err != nil && !db.IsErrUserNotExist(err) {
+ if err != nil && !auth.IsErrBadCredentials(err) {
c.Status(http.StatusInternalServerError)
log.Error("Failed to authenticate user [name: %s]: %v", authUsername, err)
return
diff --git a/internal/route/user/auth.go b/internal/route/user/auth.go
index 7c604f2d..26eb7d4b 100644
--- a/internal/route/user/auth.go
+++ b/internal/route/user/auth.go
@@ -12,6 +12,7 @@ import (
"github.com/pkg/errors"
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/context"
"gogs.io/gogs/internal/db"
@@ -163,7 +164,7 @@ func LoginPost(c *context.Context, f form.SignIn) {
u, err := db.Users.Authenticate(f.UserName, f.Password, f.LoginSource)
if err != nil {
switch errors.Cause(err).(type) {
- case db.ErrUserNotExist:
+ case auth.ErrBadCredentials:
c.FormErr("UserName", "Password")
c.RenderWithErr(c.Tr("form.username_password_incorrect"), LOGIN, &f)
case db.ErrLoginSourceMismatch:
diff --git a/internal/route/user/setting.go b/internal/route/user/setting.go
index 2da64f74..5d879f42 100644
--- a/internal/route/user/setting.go
+++ b/internal/route/user/setting.go
@@ -18,6 +18,7 @@ import (
"github.com/unknwon/com"
log "unknwon.dev/clog/v2"
+ "gogs.io/gogs/internal/auth"
"gogs.io/gogs/internal/conf"
"gogs.io/gogs/internal/context"
"gogs.io/gogs/internal/cryptoutil"
@@ -640,7 +641,7 @@ func SettingsDelete(c *context.Context) {
if c.Req.Method == "POST" {
if _, err := db.Users.Authenticate(c.User.Name, c.Query("password"), c.User.LoginSource); err != nil {
- if db.IsErrUserNotExist(err) {
+ if auth.IsErrBadCredentials(err) {
c.RenderWithErr(c.Tr("form.enterred_invalid_password"), SETTINGS_DELETE, nil)
} else {
c.Errorf(err, "authenticate user")
Powered by cgit, Themed by Ted Yin.