From 8d2c24da337bd1f858c1e04aba83b5174b32965b Mon Sep 17 00:00:00 2001 From: geek <1163518793@qq.com> Date: Fri, 17 Jan 2020 11:13:19 +0800 Subject: [PATCH 1/4] =?UTF-8?q?=E6=8F=90=E4=BA=A4dev=20=E5=88=86=E6=94=AF?= =?UTF-8?q?=20https=20=E6=94=AF=E6=8C=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- spring-boot-demo-https/.gitignore | 31 ++++++++ spring-boot-demo-https/README.md | 68 ++++++++++++++++++ spring-boot-demo-https/pom.xml | 56 +++++++++++++++ .../SpringBootDemoHttpsApplication.java | 62 ++++++++++++++++ .../src/main/resources/application.yml | 12 ++++ .../src/main/resources/server.keystore | Bin 0 -> 2255 bytes .../src/main/resources/static/index.html | 13 ++++ .../SpringBootDemoHttpsApplicationTests.java | 13 ++++ spring-boot-demo-https/ssl.png | Bin 0 -> 78633 bytes 9 files changed, 255 insertions(+) create mode 100644 spring-boot-demo-https/.gitignore create mode 100644 spring-boot-demo-https/README.md create mode 100644 spring-boot-demo-https/pom.xml create mode 100644 spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java create mode 100644 spring-boot-demo-https/src/main/resources/application.yml create mode 100644 spring-boot-demo-https/src/main/resources/server.keystore create mode 100644 spring-boot-demo-https/src/main/resources/static/index.html create mode 100644 spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java create mode 100644 spring-boot-demo-https/ssl.png diff --git a/spring-boot-demo-https/.gitignore b/spring-boot-demo-https/.gitignore new file mode 100644 index 000000000..a2a3040aa --- /dev/null +++ b/spring-boot-demo-https/.gitignore @@ -0,0 +1,31 @@ +HELP.md +target/ +!.mvn/wrapper/maven-wrapper.jar +!**/src/main/** +!**/src/test/** + +### STS ### +.apt_generated +.classpath +.factorypath +.project +.settings +.springBeans +.sts4-cache + +### IntelliJ IDEA ### +.idea +*.iws +*.iml +*.ipr + +### NetBeans ### +/nbproject/private/ +/nbbuild/ +/dist/ +/nbdist/ +/.nb-gradle/ +build/ + +### VS Code ### +.vscode/ diff --git a/spring-boot-demo-https/README.md b/spring-boot-demo-https/README.md new file mode 100644 index 000000000..aab869f6d --- /dev/null +++ b/spring-boot-demo-https/README.md @@ -0,0 +1,68 @@ +# Getting Started + +### Reference Documentation +For further reference, please consider the following sections: + +* [Official Apache Maven documentation](https://maven.apache.org/guides/index.html) +* [Spring Boot Maven Plugin Reference Guide](https://docs.spring.io/spring-boot/docs/2.2.2.RELEASE/maven-plugin/) + + + +1. 首先使用jdk 自带的keytool 命令生成证书(一般在用户目录下C:\Users\Administrator\server.keystore) 复制到项目中 +> 自己生成的证书浏览器会有危险提示,去ssl网站上使用金钱申请则不会 + +![ssl 命令截图](ssl.png) + + +2. 然后添加配置 +```yml +server: + ssl: + # 证书路径 + key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-alias: tomcat + enabled: true + key-store-type: JKS + #与申请时输入一致 + key-store-password: 123456 + # 浏览器默认端口 和 80 类似 + port: 443 +#debug: true + + +``` + +3. 需要与http 自动跳转再添加bean + +```java + + @Bean + public Connector connector(){ + Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + connector.setScheme("http"); + connector.setPort(80); + connector.setSecure(false); + connector.setRedirectPort(443); + return connector; + } + + @Bean + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ + TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + @Override + protected void postProcessContext(Context context) { + SecurityConstraint securityConstraint=new SecurityConstraint(); + securityConstraint.setUserConstraint("CONFIDENTIAL"); + SecurityCollection collection=new SecurityCollection(); + collection.addPattern("/*"); + securityConstraint.addCollection(collection); + context.addConstraint(securityConstraint); + } + }; + tomcat.addAdditionalTomcatConnectors(connector); + return tomcat; + } + +``` + + diff --git a/spring-boot-demo-https/pom.xml b/spring-boot-demo-https/pom.xml new file mode 100644 index 000000000..d90ec5eff --- /dev/null +++ b/spring-boot-demo-https/pom.xml @@ -0,0 +1,56 @@ + + + 4.0.0 + + com.xkcoding + spring-boot-demo-https + 0.0.1-SNAPSHOT + spring-boot-demo-https + Demo project for Spring Boot + + + + com.xkcoding + spring-boot-demo + 1.0.0-SNAPSHOT + + + + UTF-8 + UTF-8 + 1.8 + + + + + org.springframework.boot + spring-boot-starter + + + org.springframework.boot + spring-boot-starter-web + + + org.springframework.boot + spring-boot-starter-test + test + + + org.junit.vintage + junit-vintage-engine + + + + + + + + + org.springframework.boot + spring-boot-maven-plugin + + + + + diff --git a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java b/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java new file mode 100644 index 000000000..be323c3e5 --- /dev/null +++ b/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java @@ -0,0 +1,62 @@ +package com.xkcoding.springbootdemohttps; + +import org.apache.catalina.Context; +import org.apache.catalina.connector.Connector; +import org.apache.tomcat.util.descriptor.web.SecurityCollection; +import org.apache.tomcat.util.descriptor.web.SecurityConstraint; +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory; +import org.springframework.context.annotation.Bean; + + +/** + *

+ * SpringBoot启动类 + *

+ * + * @package: com.xkcoding.https + * @description: SpringBoot启动类 + * @author: Chen.Chao + * @date 2020.01.12 10:31 am + * @copyright: Copyright (c) + * @version: V1.0 + * @modified: Chen.Chao + */ +@SpringBootApplication +public class SpringBootDemoHttpsApplication { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoHttpsApplication.class, args); + } + + + @Bean + public Connector connector(){ + Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); + connector.setScheme("http"); + connector.setPort(80); + connector.setSecure(false); + connector.setRedirectPort(443); + return connector; + } + + @Bean + public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ + TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ + @Override + protected void postProcessContext(Context context) { + SecurityConstraint securityConstraint=new SecurityConstraint(); + securityConstraint.setUserConstraint("CONFIDENTIAL"); + SecurityCollection collection=new SecurityCollection(); + collection.addPattern("/*"); + securityConstraint.addCollection(collection); + context.addConstraint(securityConstraint); + } + }; + tomcat.addAdditionalTomcatConnectors(connector); + return tomcat; + } + + +} diff --git a/spring-boot-demo-https/src/main/resources/application.yml b/spring-boot-demo-https/src/main/resources/application.yml new file mode 100644 index 000000000..d6d2def4b --- /dev/null +++ b/spring-boot-demo-https/src/main/resources/application.yml @@ -0,0 +1,12 @@ +server: + ssl: + # 证书路径 + key-store: spring-boot-demo-https\src\main\resources\server.keystore + key-alias: tomcat + enabled: true + key-store-type: JKS + #与申请时输入一致 + key-store-password: 123456 + # 浏览器默认端口 和 80 类似 + port: 443 +#debug: true diff --git a/spring-boot-demo-https/src/main/resources/server.keystore b/spring-boot-demo-https/src/main/resources/server.keystore new file mode 100644 index 0000000000000000000000000000000000000000..a6b59ffd9cdb35963cb3374ffdfd1e42fe3c151e GIT binary patch literal 2255 zcmc(g`8U*y8^>p}&Dck_NtDPIpBZZ=SBy*9WeG*2vCYWX#!YBwgs!dZ`!=#=Eo7NN zMMYobibh16WH;7G4OgA}J?DP^g6|K{5AWAG?{l8>exCC@yGy%EAP@+$U*KQGO$qQP zcu@9bKz2f190!R9C_b3%%C^VL@h1bx(oI^4NR z9rYR*2XaqpiSs&d$m*rUSRZ7GzCd)ueGgM=?dk=1ki|J8e2L+WKWuSJBG=r&24yK^(zPGNd-| zkHuTDuHW*h;6Hs@CoVFoizoYP?lKB^c84{fqfAQ;^{(8qFa?L$s$;<@dv$KH=~w-O z{?9cxsD2cr!4F8wTYI+(B49RV)mtSf>tw}1jgst0-pSIwJBI0-z`gDji9n~B%O8Z0 z?|O`caB?X4QRWx2k^?tUEfNoM8#kNme@ zLkT+U3mKD#lgAtB4)62J>2{e@wK)l}T<=3NRmjDc^?$%u)~>1J@Ry?Md}I%JhUA3A zq7Z(Qaw&z~quIo1B@29)b1s6kpD!Bt8?aGIMd3Kf$d7xnpFGb9VT5bhnd})T53^_e?`wdp{wHiRZTv@XrVURWBkWBDfB%ukp4mx9R$X=!tTZ4SSQ32S(E6R8kERXuQy!@=1>?~xajDcV z3m~g=`q&&s#A<&bYmIZ2-#C_W?i8+5%`hPK{h63d(*@qjwpQ6`LsMqaIQ7JA0?J&e z#8*JJy(%Ye<}cV3zd7+hKTX{+1WwLr?5e)tm(DlSoTQlOLrk=KzEFWkJs$>Z}JUw*xo2}*WYs@;2fX8Pq$| zoc(c1h!TKTe>_c6t2(`?5(0(0T6_$iaB=SnwCqNVTE`bIq|d3%(ecth1&>HT8# zojGUkcGh(YQP@8#bpg)f|Mbs;og|8psjis#yC@lP25;T~ZZBVjwsjgYW~m2HNM5oBnc%w*(MUk#CxRp4A%Vd}vX7^if53ks;(y>j zW+;-E;Oq6%9RM7X5WoNc8jS%kXk84(^_SE_qyLfrm!4?gBma(O|8YQRU?C7d1H&OS zFc=h9#=0_VAlJK@8nmaBpviYlnp-yzyVKGnBuSMUJH9t*-RBj*YK?f&u(o|^{U)2a z@m(Tl^%*8SwTwfPK6iaA^~TXfAWOPWK+H?PC_+Sh;*sk6LW5Grc?e1ezdTbJMQ zKTO1#YTi$!gnq&(_0xgUaJdDNxd)3r!M!b=Zyx=$`oycXF;&M*Rc&Fp!L^7;=}ia} z3<8%O24n%5{lUu!!o*=>pjBlGg(IY>&&JH-9{+7A&7k`8hBB;)u3 zixM$E8E!-IwwTTIfnc|CUOk;fxOk07n1>9(f%M$_!DgMDgUwvW7H5CthnfsB(}|s& zogx&Qciq}fyh+OQww7#ULG!$H!bNQz2a#K5gQcn4;TJoiKABl8OgA^B)}PwFjSB6# zSRIjG+^?ycQAP1rNC8R4StOQEMMf&Ox&wj18_nm~QJ=r-{NAZ)1-OuPz6zumwXeS~ z)OBS@i$Hc<65R!{M6GYktlyOeqZ{W?2X`Kvmub7gK1P_hC@%pRnWApox@4P><#C_=mf@d3?)TyYgWkXWe9U#8l}Q Nj`MeRGRGtI{|050*qQ(U literal 0 HcmV?d00001 diff --git a/spring-boot-demo-https/src/main/resources/static/index.html b/spring-boot-demo-https/src/main/resources/static/index.html new file mode 100644 index 000000000..067bc5399 --- /dev/null +++ b/spring-boot-demo-https/src/main/resources/static/index.html @@ -0,0 +1,13 @@ + + + + + spring boot demo https + + +

+ spring boot demo https +

+ + + diff --git a/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java b/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java new file mode 100644 index 000000000..ce62f8353 --- /dev/null +++ b/spring-boot-demo-https/src/test/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplicationTests.java @@ -0,0 +1,13 @@ +package com.xkcoding.springbootdemohttps; + +import org.junit.Test; +import org.springframework.boot.test.context.SpringBootTest; + +@SpringBootTest +class SpringBootDemoHttpsApplicationTests { + + @Test + void contextLoads() { + } + +} diff --git a/spring-boot-demo-https/ssl.png b/spring-boot-demo-https/ssl.png new file mode 100644 index 0000000000000000000000000000000000000000..6961426c908a8ddd10c49bf394a8e7354b1a9b26 GIT binary patch literal 78633 zcmeFZ1#eu-wk>RoA!cS~J9f+zQ_RfF5HmA7wqs^yW@s}rGcz+YGd%CT&w08xJKrC8 z`lQm5x?Ad1RkLcYF~%IVf@GwGVWF|0fq;NuMMVVUfPlcmfq;OgAwfRAfiK7Y2?Rs{ zBr3qC;0%1y+8#o+o^sy&r627l zMZ!P*ab}UvJrGpnzgq`75wCnNdJ~3%ADGC`f46+-HPAowgcn3R5J(bL`#?_y^$+79 z08XZIhX2FufS}w7L6{WXvqJb3|8%>*2FUgQ5AZ)z`almRS1U#6aIL?$Me~27P)>TG zCEqKVbv;Ab;y5>c`p$Ut(%8es`JeE$w$c`&tY@1O`WnPQo zpPtaYQ`_H|pOUdWx6-bsTZh-|zXmUn>F2ap+w8HIc8z$>@EkMzB=Y=*iysZ1&`A#t!GC;%%*|~EKCb-` z!Y!}mM9Lj=ea!Ug+A5h4yhe8{*Xg!>ylOWS`1d~8xCMjDhh9MVgvngCvbwgmwp!aq zl{VHR`P`+NRPsoqRQ$v#jc-LA)2ilZb$;o=>rSJcAK?@?SmhSrU#-Ve(@mL%8$*_D z+8*J@=j@Vxhy8`-QZXVSVgJ#&Dix+6c@Q3(T052#B4x6KjBEMPmqZ%>929^`H{RN3 zeJOTiguZ!nfk@ruaLzTfJ?j)IUW;=vBHdy~ z+xTQfVCZQ(7_gY;F0dtwX*GT8Z6WUWB`1kl?dfDy^G7MetsZ6ijfBG+V=p7Y%PzSs z3u^OI8gkp(ar&#DCKXWdeV@ZQni%olDdd3$M6dYgJ1MN@4xW1JrX4jd$bIYuoB!%;y*>fqk^|mx^3GVpo)A zy(O`3^7|2LlPR&Ana9Y^{m%znL++!`M`otCcw_k7cP>v0n#DDBlluKyUwYBH7dwgI zvG2CI#$567ACtDyjv-p#RL^lvXI34QYtcvCRc|zyhCI z#b1Jb*`FSl=}cUfRYHgAj}OJkoPT6Q#F$fEZ39s8TeFox4DaCyFY4|m-4tA|JsdW* z%NV3}BmdqPuEcM@)x#invDl?wOyv6+(p7Ko&hmqb~P@jv= z!!po0naMw9*IPTf1D~qs3#z`AZBc?rxzl5CRH3Z`?G3h+TR&-zF0cu!_+j8%cD*)j zJ!j5jz25B2erw$l2|GcN^yGmc`V3QZO6Iy%iZ29v0Y6OjH@hGTbrwK8Yrz9ZiQe3SW_UKO}3MLjqYG1^u0|DWm z1nmGZL$BBL(0v-R5~pfmE@i7Vzv|8RLn15lEeVfjgOgf=eXRu9s}!4ll7uSUk#+?) z1AOmcdwz+q?Auj*XB)LO4{P0lPDZ-mDMf`=Wt#2YW+G7JboU9DI4z;ePuk$@w*kj{ zDsg{a?(_j&w;b@g4(^&aE8q2nyP0KOr?8dp8iuNmY$O`Nc;kj{JWgHGN~o53nzOBsCB`R*do{ z#m>31$ajLg9JY2Qb;&1dRmVEF&T8)q(Kc-dH&3y{*h_gg+ONEiV_TomYWH>SDc1c~ z+jIZ*WUuXS^; zQ~954#{=u#PVv}PyABvPrr`zzPSjROIlB_e=AnQ+;73OBqo(Y#g=fa23W6wyueFBT!3|i^ zvpQCa(5P7^%*y;+aX_!sLvAFcvEc6;(jxtp+h&Wq`&RYTw$1 z$4V(QsK=2~>BhB)jrNb%*f-|~*vsG9UedPCy^6tYp^=yyGgNMgNepa5+O5{@>m-$% zMtvivGbjrT`JTyb;o6tG&r|PTc3IE&ku#nN3$^U1B9QX55`r&o{Y_EtFin53caqO+ z2H-R*?jY|Q7dT(vrw-4%uiophm1I1xHKbCyMgNVXUJyXMG|b``t>viPa1q9!gp=t7 z9`HbfbYY5mIN9AK+B6hm#NH8rXev7w&+|-egTL%uU*9}p^2o;pC&_WHnI4qmjz`oB zp9jbc&Y=|8$6Li2Vo=MeounW^>a+8bl#sgf)z-MC->P4ZbjSi5SP9V#JIw-sCFx49 zyirGymR)5r2Qc*Vms3a4^Fs3u7xzQvjuUKwMPDS$N&$&lo3gQq7$E`LJC%apr6Lt- zjkHinAR3e>&u<+)p-Va*shwkyZGW9hR45c}ZknxU?H_VN;M$*zU!|PV#Do$Lt=!B( zB@KK-ts=6AnVZR|}9diL@A5mSnnQf?P{2wf>CpNgEUqc{GAAjEKP?Qkh zp464QTP=uP{eyHjjuF_1NebFq2=5x+&fU@PN9G{UHW3ipC^)uSM^M*c7d+6t;JY+-h`oCw zE_Vv?YV5SrXjN-a~Uk}1scIW1J3NvFy3xe5ZcprP5K@|l@IBhSe+s;Yr z(qeDBfUVWm*?nWE}_6hAS(8dM!YWOfE2x0Dl-NK_Jz~P2|wUt z(Uq!Cp=t*?O=PBK@JMCcTKQL8!s4DIqDpP25@mF;OBCI&#+*mLoH;EPEv`H7r@n^V z*px~EdM4ipoyMA#?9bA+WZrfN-&_ZtVQYD4`bjnX3~X=BlL8QE7Mn9HBby3S&$)u7 zG3~i;lWc91l~W%O#uDFgot{bWuLs*-&Y#^-KS{m2z}Oc>%5EOF@|MIW8l(XQEdgVOLb zDq zJg`EuwQ(}jv7UEhQRU%*WIn4sttC7K8V|u;(q}&=L~=e>~kCq*B1{CRPwuziT!S$*6@~gJ%*a*QP42M^Qt$C zPZv^kJ>w5~BOW^(Bz)}0F7@tL33H79oMh`Ub~m-|THk)@$+GXUzD})vp9yMHWcvw5W^Mk1&O}UR_ z@y2Z?ru$Vub9SjQF=@itTUk#6!w)B)h+En(=mbY=mb*aH3nwaCTKTsBS=m1B_Q|L{ z7yK^A(0<;OOGHQ}x6RMaFX>DGzAdm1eA=C9|Fgn`rk0nqmiU#~`Ug7Fa@O|y+^O2w zw${Gprv@MZ)gB+3J347eaBBGAL{F&fw=iA>Y;OMeDOQfldD^r-bPuv`bGS#o&K_@R z8I+sItw$%!?A^#DH`9ydi5~kc*L0h;Z(86c6zirdghBmUo5vpQN>6SA9+8W#D9-IW z+gMWgmuqaJ{zm^0`ZgxuK}AB*y-nYRu@n|?cSB`iN$Fs7CdbH@O{mR!xMp7~6AChX zI~0&8ceyA%cCQ5?B8w+T9;$`I&q%5$&eZ_aL=aB>5n5ji_A0aPZg2~)q=%E!TQLrk#ck2G=!Q3cg&ar^0t2&tSB#Ubr|@GT0_7FFI#rEy$~V~ z7m1&s9DI6?GAXSf?xt(ByYO&jTNIuN`i5$yHpw~f_DOiaM6^*3=ir2DJ>%kFVNm<) z0TLEr)u}vw*J8ZqW2fK!&MwGlx)G`N6>W7MI9|(P8+5Dz>yS1H#;S%_tGH>|`VS*z z12OijIIdn!_%fG$jfQM_tbjIoDOhN8VTzzPko#J!(JhMNCcP92rjmuu^9V2e=GXgh1nvhpyoSNz13~aDl7yZ`cQRrn!ZKa za|y|i|6xm%NQPr!kFFx0a-o%r*(W^lTZde$ubQU;mxhehtF)n;WS@BvLPsu|qtQSC zeX=E&aBlYMZOrYx)0IR?uKuP-bI_MqsEjqy`Ic*y&K{etm5)3J7B-F}ZV1={Q*Crj zfIbfLKmn_L+^q!j;F#rnRWae6wxz$h(MXb)UDxEWaTFWw>dxEOzC!Y4ZwyL+c z)Rz*UXW@~C-Dp7lb-5E8wR*3-+9Ix&!$xy?*&`gR_GD7Yx$`i@N3_38S7vu-v~7pw z@}OVbQ`OTe%(Q?!;Bv#9=Ua1hbQhg8gRjHa!lfN~>RG4ci+%HS9lJ z1;X36Xe)SVYa6*PxZ@mJId!)w+fyj5TzrEy)_+wn+Y4O0b3c39jWEFm;c3IHo&^JM z)F-2Gr@ZqK8ThSEUi*IR@##EvylG;7_eHe?GDDdLvGI|z+x}r;{qf}7+UjL&KEdp7 zqFXM#;o2((sO=(jISx;&8*^XX&yd|O7r!<$^UrujX!X(7j?y`O#e>agoAbSPsWuHD zSk0B2wMESOG8T%;qcyG_dL04rusrs_=QNh!QQ$u3_eL<5QJZ?|bTqzD~PRO?cjB^O_50JFkVjSZhEN9r{O5bteDNG}oXayZ^b% zZ{lT{=mrK*w&ok$E=ww7hhkgKu{9euXar#v@ht?%FR(j!a}>ffMhBr2?}xb3{A1jO zFX!wXJ#w6cH9doFI~iEi?mYTy@=q0M|5jkZxT88I6}-0$di7W~r%6=>!2?uQyt?ME zcU_*Gz1A73Mkfp9Axlh5;r#%FakjU=5coxR6`G|N_>gubr)8bsca*(~Q8nO;bjci) zR&iU)4Pi$#td!vM6i25$VOzV`?y>sNE_$)JS*tsq(K;vpSt9@IYRwGdwGe%!N-1bc zhV|=l#E1s`U~!bJ#jdTLfX? zzQh8dd=;v@m^t%2MM=`xp{0xR0(s%d>F;%I>!W$|o4}v~4hl;8`ueqrPTmsa6$%f=U!-uqn9?GCGw5<`?v;728{yRoMRCLf%uE^oJOG zdV+ZILDe7HbEuajs=+)n;@sn%TUp^(LJ3C)BfVf?G16S`{#e2gPRXg$M5ebttspEM zXpGK_)RsPXI?f@XV3gk_51NhCfmNY3<*))rQrS^B#-oK^n(xNRynh_F$$?LUS6lC< z+tj&bgKj;6wA)Pv9dTE^4{^0%g%gHbha6F{K%31a6>I-?A7*^rRe_#C!Sbh>rQ_d- zECGo^F{M`?Y)NAW@&D;)!fKgC59I{Bt!)srvvaq&_-{%O{C>>D#y`&-EJ&3nW4`~k3;+7KA&eBMfx0CVxfqVG zRO0@qPDx9T@@UH5hRHp0;l^`!6!dGyask6%?l>TL(lUN4sF4GAIqM7R>So!@2&vn6 z!87F`DdiaWtUx)d;-r0%`3RPoew9jj^la40PS%Lnu36fO;X($7CRL;W=v>?-VfioI zHye@riWE0HMFWr`vIrB(stN@f1@7~q$fz%~)6rreXIS3b>nnjnqz;2Ell|X0B}r;A zy7Ud^jC+NB3ykY$5w1KpFKA8RH-d;jK{+1+D*jZ9@uUUe0FW^VnTM&Xz-Ds#phZ8v zxV8<)+qsaEL7UIdV(1d=tzkrAb_WDRdN4591WOA#)v5K*W@;Q{i1!68=JXK~_E>(Q zC%6`HV+yorp39wnt6;$jty+cX$xC$q5b?|MSf6tE?A`AloT>5z26lN*2BANJ+#uMA zihjeb7JuABu#wqaqf{l z{12YHLLN>%VP zJ4_4wR|xvCO61_~?(XL3?@mHb{#1nGLHFh%(KZw(Ro-F(_6l^J`5EBjjQK!Bwv}fH zOUhf(2GBJMyeOTcvUG)%PQ)B`xnaIY0j+JaIkB)W0jbm9sHOX*-d50CB0`3Apa7Bx{ zE7LmM35dn=cukYo`;`7$@x|@55gR!b&W_d>caKaeajf{ zoi(hEhkYSb_Pfg+P)0s}98pb};aO)Kp&nm4%~nvr1}kpK)S_$(QWrL8pHL+~k=^>T zrOMBMS3Q(l_5?V?5vA^F0Re2q^O6)-)K&?$J_1pgzr)}_3{46l=a0Y`bPN5fuioo^ zKT)V#`BM3df0iPgM(-5!x`O42I|eHYW<|z8hF-%Dx)3%JwTd!r!cHciOy45fO0ne~ z5Wvm6CU#X2GK&EM%(ruH4cV=jdAW>jPIT%a@H;-~x_W_S)Ttr9SFYl8i{jJ@mf{5% zVbDd=c1=GZ()CX0?=QUsLQ%y0VXJw50`U@=;Hyqrr0whW)JJ}eXO?jW31j~yp>d)} z_+5yU*%MO20jeI{SqTM#SYcD3Oaeb%!z7X~NMT=vQ~lQ&4&AKyWo?PCbf5~;m1*7B z51GMj1u9s#*h2+EejHt*Jq;y+phe~WIDtF7+Z*_FkgEPd;_kBV z=>u(P2|F3$YB)Ca<%zXAQboKzP~e#>2ed(R(&%?{qPI+BbxoXsnbv+xBnuYd^(f0~ zHNyXT0VwrLW+sj!w@$3^y6dL!GWDQ+1zyY-zW=Kre-VNZ2^1-gr#I>RYuz`FZW@c& zG1$>%nq&Klz(EL)DyB7JSzBw6R$DJQZo^9jJe;IAEj)SjdJcQ?Yc2 zec~vAq_76XSw_V|LOs6TDGDXiyRL|r+0H%1l4nBi*8{ zLOwla_Kf@CG7K?G=(H0!U@|y;F$P&`Rz{OpL|Idl1;=;;<~D4x$yrvO9!onfL#9-+ zv6~7hU-2K)m@^^1cY7=~ClC_Y5%r~?^}M$k{}tAba*>W7#T_6KZ6M3NhIQY^hD}Y{ zF~mf`zX4%Ye|O6z<7XP?PX$>4MlpOYdD9;C*Yq>RhT}WS{2VlRF>_u)Hn9g^iMfJe zs>u9nIlw_E-66EMCZjkkdD3P(lTm|8N7H7n*BUNr`*aEt#{TlIdCx47;7q|Nwl!a3 z=#MEds$(?6>+O;8NHXn@7~WG9Bw?@kffRjQFzVk%i4W%jGsyd{)!UvGh{Jch;4z-} zZqK*!cSPr<)j+WL+5)e)=l7NOa1UL_-^UmA2Phs0&+m6W=7w+>1YkO=DA6g8?VQ`STo+2*#{wT z-rqQ05qqZ}t={*&{Ov9!zhuh2&wIV}dwo>z-=EvTx!yK2-h}Tn-rnAy%^D0!Pqp6= z=P%aj8vMCQx%2rz(et{P;ZrrVi(hv^cbCxK$GomXQrq8uvFdMRFZ`nj{NJbDMG6Aj zPH{&*MUn;=XK@(Oq;FPRhUATNN9@SQQU+jg6rpmgi#MM+ZySds90~e~rRWwB#U?X{ zp47X_1I}?9$zQNIcCTsz*8rDs#LZu3;_Z z;&PA~bu=6bu$-MFs6Ji#;<&%f*Y>Tje<$B|htr$g7y(zEU2L^c`euM%XyHwlXcY}P zPr3SY*{01^1XovUba>&aIvL-Va?bUuTb&sn8!?GCZN5ITbe-x&z^BUIi&a<|?;i6T0(}r}v&y$%Aj|=Fp};PA%rbUx}l& z4UeDGs(lL9LgHr^tg)B~4C+_<6|!Y2P=k%cdztpEQ`mL1d51>)tQzEXLqo9&VQdW{ zf&s~atXs7+k`1K2lq)vw5+X;&H+V;_+6L_0mbV#|S@3ce9It$F+>yyME@7FKZ4|y+ zbM?cp3s-LF&hD*l;+9j2?X?)NpDY{}bdIsjCT+1$!WjdL8-T^unh{S6sj8Xaf)q4C zOVL&Ac_uN#szQ{uog3@VzvzCxl%o(nQ^Yw-h>0hkEn$8a9JiIGZPrwzT}iE1>1^ET z^&lS&{n48KWo0BE?l|T7)J2AW`7ra8%%(!EQwD9>5g+SVL+A@S_H!D=ry7gO z?7Rx(-}6F?Pe-SMw`3H+P-m$kF%79 z7AzC4VpuveGgx<)7f0)PV*y*EWO(7|NG+yag#6bCgROLyb8)*8mZBTw5`!{LN#^i; zFspf|w)ob2+pH_S_emjq1+`aG>~{BNDB(}jDnHFGPu76ik$E?)>BDPM@&$`{w9t<8 z)J#8p_Q_}FPDWbs-Nf|f+n(#5(Pge~`lU{lJO4plP`$92O6*Qah?woxUwKI;GRvCc znuRsFoD}fwS*%tT_!YQd>yt5QXips-JkHWb5{7NM^{*Jokn^rw3ILN$hZ=Pe?wIHr zXZ$@IHQU$1Y=sh%A&Q2R910+Ky#e=4ud9(1|5T*@$8`(=LEdi-<&-@90QO~yTRyFz zKvVpD>qd%!)#^rh&|Rwb3}4d{$Tg!KXZ>~*-^wDz=M>RK2>jk;B+d*jIV70zse5&I zw!99TdWFciu(XWQhSF91WrcMp$MNlL(kc%M3unncOxttS$uhU{zAwF^d}&>*d5C|z z?jDJ116hj5K0CMX?n;?j@z_3_Q~w}14pK%!kCx$cVj)cc)*&(Nr_0gB$|>eg;@)i% z6k6EQKv)bvjmv#>_90gsPOGrEnZDxUKu1&C?C^z$p1^UlT$V0j-l5^@3Um1PxDXl$ zjm%p)>@y(T^M1>}3jvZwXs`ESpL^#)u{@TE?G`vrTPk5?Pw0>UlGQ7mI4?5kKG;Zy z3G(54H#cWZ9ZkLPWkwO-o;Wn}Hb+^+T?xMdu%(;}eJxkm@QW>t&)J4p&=43ihqOvy zP0@Tw{x_xi4jEVk!b7KQ$a+TxF$g=0(~PIDPPZFv%_Q=HA@t14uk3z7vrP%(^yobU z$iBE;`8^uPt;XzFA$#h)jKp1qI2}^8Nru zmNFMF%OGd8&+?5g^g7^l@I|-`Hq^#~cWaZE`ta?V%U3%<`Porxy7=n8+2-L!JSQSn zx0?AB7y#FZ2tEG?C1@xk1W;r->j%8?X)RECteiz|P#tr9Tai3a6IO%c zxVyPGc|?@N4`20+R~reOyw1-Z+60xDkW%_zZv@*hvE@&Jrf_;Cr?a#L@cdzSnOL5h zMZ~M1bAD0F!<3pdj!wWtM7u0Ejy5o40Cb>y2nX)&I|Y*>nyC)dz{Y!&eupd05Z?Si zfsfs`waEv!`BcfYabc?Z77~%K^g%8D9H?YA8Ze5c}$crd;| zfgRWjv<9uPbY*3@Q@3ptN;5ri5(Uo!+x!tra`Z})D|8`Mf;#C6Auo%Qh z|BG9*aCXjPSj+%!;(fTTF;*+Q*92ryF4fw4jloc4KDVKVruj?KlH*R)0)lz1@5$!{ zhjPQC$KHKRu!7*nkve1JFFnn`322=pb%f*Q_wVq2y(-nKsi%kd$0qck)^PQ%Oqz82 z^C}|eo;V&@q1iE)75h>xK1FepfKnrCS6j?s99wuBeC{`qA4}EEn?yvl`Sj@3#54+M zgpFv)hT~D!U3fj9zsI71<3s)ZzN43e#0>Wwzlz1#wD@fj4>nS3{7KYh34cz=S9UH+ ztMesIiRFnnR-?hqJr&Q1JAo?XS1h&NdpT>N^(2B>;4tU5ezZiF)MSl5TDn^pni4C8 ziLc0eR`!Kn?Cm+s>#$gIC#YH6DCz9s2;3NK9VOVYAoSF%YyJJ_SMM(kb5v`wPvm*| zOO{U2S2|&%7KZbJu0Fm*t?3U+0-!Tf%91z)IEGlt^$7_k+i-kzw?tG!Y^KRNI^T*x zd}zO_RTbc9P#GRS6h-2&<>HiQnvFTrqz#f9c`NhJ9lMCs#rZLAmTbQWLdiQ&Nkb7v z4aDZhDOJ01XO!p@iNXVO3YyH@ChvT0HF@JbOJt@6Hs{VGH5aQJgc+`c@tM9oI>7rO zF0{HSXCB14s2^C#xd9}E$+**##JsmaNM_0Joal7&JW8L>^d|i~FYx}$HF#1k#Z5nQ~sx z<33c|(`PP59T|r06fHzJJCsr4-&e6SDe!X1hqxjZ+Qj}%&ODx+0${xWsoRYlF=Pqu zHnM0PJvs{SCi2KW&q>I^864+2{-hC=uauxi>oUJZKmPJx1!M0JF9ghMIZ>Yis^@n zU7=(M725D(9bcS~0!t82!urhx2$3?I<7Vi)MQXeUP&?g~ zx}3@BIeidkzd>Ro&Sa_dQD|b-*eP~9m!3?S(O%Z;wIcQYN}`9oZzFqyJ4cC#eKvD0 z6k1=SduunLRzy(c0`+WfV@-)E%8ISnhxxnD2&}xoAPx^OtYl(VgCPEw*8jl-thqoS zkyiw`ZWAg`5fsGToWCmo~y zEdtT)1@5!ed&Qna1Q-N=7;ERgHKgK9fO8#Y9C495+9{Vo&s4B2_s*JK(cN4dLi10(JQEDka1(8ymLz7X7?tU! z-JbXa^?R+HXmOsl-#z}`_lOUm>S^xW=*lUhYAhFy2tR8+1SMlij*0&?C-|1Ii8{6VObUGJ^0&WLshFUG zGeaHe0}~@J0SG9?1y6XJ(yx9Z9f3o0(8v6qJ&P4p-2P!en#?6I&CvoIJ<1j+WR82F z;#C^dMoKf8B|zFgU5FQ?5GNhMMXlI>^6Bv$*6Hk38KjJ-^x865HLTEA-0`MBFbso^E=CideU#XL zt~nduxXf6^az2&F8@bPA9SwQr5Mx$l7I@rL7_AZ?viO#^pPrt+L4zDgep{_P^7tG3 z^7H`l>QsVAK?ft&!B&~b!yggM(G)xmG^)VVSyrVGu?P&o+hVu&-v3q?t27BV+0&fD zB?X?tOSl`3%$DA=7lk=#9hCOnaCQ+tU=9rn7BVtuR=9S$I2e`8AO8|N#r(R6>|5o9 zz#=^f=6EinP1M^geuGV_6j)soq^S3`U!6PwD72VI7k{T2Dw4F1@VGUJ(HF`F#s*8@ z!rc1EV*CcqZ+&nk=*RvGlro?@80va!9^S7%Lbq)oS-e60Zaa1l>dD+Z)IUA8tGu?1 zN8>1B8?TVJ)#dR65X*O3nN&K8dDeu2!=2jQWZeaSf1corc8n={i`wS#k%epK>E{?5 zg-meth~LV&pB`<@!(z|0Bm?X)6|N$S1G3WvkI6jrYK?>nMDcq8Y6*2Y7qAL8jtBwO#$O5b608 zF)_o2v!soll=!ce{shlv^|n@L^#PhYT^)ibzdrBy2*!_K+6tu(?IPlsXSeE~;s1cM z8LN;mnM>^)|7tyg{;XH2AU=BH6qy9LMhX$Fn250A+GX@(DwJZ4k5K-__0yw+h^KT(4bjsRM2?f%@$}v1j=Psla1zR9U@r>t_Hb zrxj~;g$B@v5V)_C)O63rZ|!M!qiI2|p65?40W+q%7xCC6MRu3R8b)YZ>nWThZ(+up z@>7SSH?>i$!T?MG9vpYrp7!0++q1%ol~3@fvqC{rdbpz; zSG_DbIM0{=9OU>Pq*{a^_M?~{g<|BS{M8RGZ6c0S5)mn;lJg5JC*xvMcM)ESa{{*4 z|I|U>E(T5Ajn0>(hhf=?cSX+l$A&4{BvTJ{)BITlKD1Ds{*^VhV-1yk`0?l~3}=EFGIH%MXD1oxRi5gtG&v{*vICH>e#FljvRUC+#_d0Ut}ZYI4Nzm% z$cGroIYkfrotu7iQ9-Z|Ct2(UFo7{pgtpcZxq_jx7zvauvf+C zEAH7q`t23fczpe6Ue}IVECap5Wl*N&SRO5*=V6z;Ue1mLO*Yyap84;G$h;#6t*`ep zypp4T7)AHLF?GCdPVjjKDvfz$YUibV2NdslTfV2SS8j640Mcm!A%DoQJNT-=2yel> z+v87y$PZJPt*9@n?W1HXGS?^F)6GD?#ykYA*gk#h#%#4Puc3Qqr!WlR` zYS7|^b$w9FXR*MS20>or86rN^l*S)OS0iC=<;iR-@n54hkUp(t-%&J9dG{6={y6rwX&3@|IP+o(b{F8}dRhbu03C0uLqrat!S|jYa>%QN#^ z^Ty}>I7lTEWL}vl`LHMPLE1%V&UiMDgE+80JiK3smvO>4{6b1mE0}Xvgb*O_@sw~_^8vkJ|tPP<0b?K&w3xcytV zbd`*~noGSHl*dS6%5e?am2Fh8%#&;pK2+UG(Ont*nQx@=&_$C3wIaIm);kp%oY%hD z6s8{S)x~xLGWKQRL#F2D5`1&-|8;>xs-`3BXj~^#en)THjK^^48z}S^qadG-O-{Ss z_;!glzvB3VF3CI$%gvFe)%KpTU2-gQ2+6!w^XRU$P2Rx<;S`M$nN zx`V2LiN$4RdgJTcZ+`?}aw+~+5L`HFZm8x6vj5YC1R4IDo%swc>Q{yTij%Z}d25u; ze=(Vlct6xazU+b{qE8>11N2PkPsXiR+*;aOJ$lG+M5)9s^o>Utt0bXL|5>2tFc&w+(8TRC!pDtYiN!6ds zNFPR(01ec@T$zwYvAxp~#IImA;>|Xn!$cdfH)KbPFID0`t=l6FOnl+;5uLGZ9Np0{ z!EdS2%8!U^*4Git^503L{5XR6)t01JD$45r%m0CsL|6FESuc#cR27-w&{oj3mLTC<}#mA^p&*_?rS&S5iudkVTkX zB*dfq^7OK`4PiMjzvqhMkzbn^WA@>_oT>*IwT;)Drv6uq9=N|!0nDq>CK$o~AbW?kwqHNC7( zb6FoGDE)n3;0Olyw_hhQx&jCp!Dr^R;U#>H6Fdo_$koDO=|L9t@feXV*<4sXb(&^V zCSEGoutJMxpj&by;e)1*^HbQblLQ=Xewc`#-^61#I^ngQ zVb+I00Y@e&(9obkO^a?fpv$2~NX&t>jb{hI$N&qH;PDiM^w8 zr#RI4anh5cFFh>^_ctu{cmMZ^E&_Ij&5L%#Qps`)js72SfSe)zKk5K!Ni+GrR1$RS zzE>)KlyQ!^7iV@mdBaaty2QU%xFS2wzw-vitr3h7 zD)K4?I*QsV5^(uUk#hEyWXlYEc+ejMc3L7eqSi=~FZ_)q?+%|J*~wGo>=7W2JSB7& zBC+!3`0FkwU8_^;u`=;$*c>aCec^R{zqa!DNUH+^-xn;yH%Y>mh?F9_8AH)U&^Jw9 z0u%HOD(x&hd%$8vf2WThnS%$^o2LS`oFygcRPWmfE6b#nDySd%L?Zt{Pp=j#k%5BT zc0h+hg0=cjBSD+5-%+J@hHi8R<33@=ia3PVRtp}CUCOnhXg6~_{0bB#E;l^Z_!Rd| zDsQSnI7teXp$CynZ|sL)Y@&yQhN!{0taJwdN>FoE(U(;euxe?XHOjZ!Arl0Cz6Eo8 zqXVK+kO~}J9wv$7Aax||KY*47AE|_rSixCpw}xfPGAKv(!$Fb?PM`5 zmOvsYlSPk#q{ipg^AsG9K2!jEg}FE9Hub~u*ndU|R*5U+Q0*bH4s5qE%WJyG;HWu? z-QQod+_9YNQ3TkHEf08`i;#Zq;tq<`1AFA)8Ku`r?je)k4X z&f3hMEVv>Y2_)7gWx?9Eml`Pl+SGp`3uWR94telwa*nhmKT-P6wFMss*y}F;oex&h%m2o42|8sQof8mynd2;Ik#V9J2 zuFrAF)IkYHhk;_v)jav8X;pO6zZ70a1g6w)52&%W{GtcYLQJPK8m}ZM;!5Mc&cm6y zNICb5O9l5oQ-(s1%9?O`TK|~4ad2eGq#bm>XTm5N;>Qu2>3Hp&@@ ztW<2ibj}%(AFG__XcL{S7z=CynyJmt#re~$b%Ax+Dxz?#SNE-wa(dmA_LJ@TuWQga zZhY`AS$6pzlr;Lfnv#{{(8M}Hpf|WvD~DMC#$uHz&T)i)%uG(^Rni-4kpj1_s^Qk6 zoINWGi!*J0Tq&QTu;lDiUx@tl;8F4<%%YlT5Z0r?i@ zpZXLB=}i5z#loU`Gna`X{`$4ADN?!m@LHT9A&92`t+l=zBWh@0moCsq|M`>_xE#)c zX2G#Gi*UWHAYpa+@OpH_IHLGirrVo;|JG8QPBCWFPgE;C!-(2%alU%-dKjgb2hof{ zE@UX}L1`ry=juBgu_rVnXOt%MfR*kJe<*}VD2M(mROr-ZqeY7g zX)-X_z_#d(%6&Xy(dale&;tQI)SU(3*nL5`Rz&OEx+)SiFAopAM$;9=k8Pj+EaWmX z_VK0w+b)PdEc2H(u<(3nU4#${eU>yl8pMmwftKNP@|V$aLO;{K!$6O>_8awRE6n0> zdQ~bELct*9ANz2Df!q)GF7aWHp;ssr8gS($`O(U?AoRbl0Fl*!d-W_WPeg+^B#e=nH2LIUwF_!GJ`L$Y>L>?rR- zyxfEW3KH&)2TBOGwfA+!M{27yTgCSkfYU`7{AJ2alE3{hkPxE2jmAImOKZ^Glk5Mm z_0HjScHQ=HV>PyIJB@AIR%6???KHOS#OvKgs~E@&oa zP@I5^oWZ2+3MN_MFgZfO8DAl3$lQ~;~G1P{m@rOWWq^n0w9s8HRT_+ z3(9u;!^INCV{|uhvk5KTU}qKr4vL>GmkMw$;U$1xaK_~U9Y6C8i_q@#!-8iW0n^_K=rsmcTjr#A#b6%6v9zEp z)Wq@SfLX2)tnI4N4&e|U7S^Y=VEPOA!_w7bF}tRK}+IGaoNj3Qpsg0 z=j-7)Er>9PiDq``E)!)^m`WD7DkjH|(R{a&2$Ry}w0hu;U{<4+7hSUk{}$c}BAf!q zjO1}-+v&>WZfQurd1jG5yZi`6T{#IS$jZ1pyPrHt=M4IgT?-SAPL@KOU5t*qh; zF{en~xKUBjsp3A6-)I8y0mezjKNR>d;oUeEME|!0^anQi>SX$)P>eCfKZ@~aQ&5Oh zLgt6qJd36jxkq!E5IVg^g3Z4f8>_R;AbmPx^J}9b?VFHk0Fq4HzHaY=!|FTlq$){K(b@ zPDA*Qj5~(4wkFhT6r&m`hrVdkTJ!KfGHw_a;qv-FxIN5CBRUB)umt}Uu;A7y;x=1M z65L$eI}6j(n_np^ve_@hckdJkhRl^HneA@sPJvT4$}_iRcQN8T0-vI;bBKTBL!`ZP z>`OXG?kf0~Fh8=0rrpxZO3F~JmPBR#?AduPU0yb#mH_hn4fP068Za=X`|}Gaut-cw z+W?i?CpS#2=-e|Tsd+b-uXbtOvZ)WbnAr2PcRdQdE2( zWstQ_UpU&@q(o>S-0AKtSfSrj79b4s6Tml_1%34F5)?01#po9wmzFI_Q@9xr+CtDj zZSG=TW2Mt1pq;~7fQ6T*F`9v&V@vca(SI4jKphEq-CfVMnZnN?@k;|*$LnqN3W)m*SJr_|DPh$3A{}@MWaNoNqEfJ)$48H6ndf`7mO|x@BB0}6=ch!@%p6; zC0pz`26CcE?S#)Wst9i2nLeXN&$%4+8LGgQxX%Hf0jLZ#GrE~QI045L5?=4O`C$W7 zj`?&?_-nScIkS^D$y3z%jKO=~foAq&NBM1LX`idi1<Z(Hnopk$gN0LZ^^#0`i`{DiIqib4(YU%y$ zht6B){l@zJysHKG{Zi(Ar;GIc`8}u>MbP`b>BXC?QU&S!ckjm8`yKNV%tMg(6RGlm z@n6tybAk`0icqb(xJY9V&4<-4_dQM|NqVFUWz2gR3HZObMN9H@>=jwu9S_PB+>A}uaMo;GQ97(}62}&!7*|f6(jO_YY^y!n{B2U$9WO)F0-iFq7B1tEPzB1O+*p z64;MZ+^nmcX7ycEu*tysPPRsoYH(uhh&&HyH`K-=pR`n#thq1Tl?d8Dc!N8RHhCv# zOL;IwGGXK(lc3%cL^$O}!+f#*Iq;FY+`~9ZkZHRFI&SEv;E!_*n43VIl=^a(%QTxO z!CypE2)~{T&8f}{fEf`2PNkz_5M3=x*vj;azqYXU$$og_0&n|4u$l8d)XsSQ#Vq88 z2Aq1;RC9on@{${MqJpJ)pk9u{+yhpKKh)DFA)Y9!@A4gFUid3!gzM-}z-|L|^bO1+ zq3D8+lmcf8e&kkGSb6a0wm)(E=8vFh8)*!J$-e;LrOy5cuo0u;_QjHpw$Fse&vV1b zqMh}(2bTPXGl*jE)0s0})5{s)SH5=o;8v2Brgdzzla~IMm*@rij~WWG?TSb_8TTPp zl8?D>%IDyy$EG^{1Q=zKD;uAWu3z8m_0c6nr#lEe-5a80D4B8f-17o$F-L}4QjTHb zDkjCx@?n7#hn&dB!~?auWxT2XoZbN(f>Tntu1(p;c6aHU>8f>hrnLM0)#&JrSz(q= z7S!@H!Z3E>5Gw#HqM%E$ODF7L!f+cAAQJ7w5(p<6imAIBv#PvNepJv&b94L2x^0HbM+)=N?(SepZmx(g|F|Wc@MJPK0%FRKgjXg1`d}z5ds*q5y2&&s|;`$b@pFQ z{Vs}+0&#(Zm1d3f)iLUhZ<92z+dXdUw6*`lzJ+n0g+Akltg}H~e;sy|*q7RYncmxj z6BzjLtU__tl$Ce`1Q7Z+4cZ&!))CO_jb;8S*7` z2GYO+pnk2`HN<Y$gs`S{Eh&D_SP&oI-NIf#(+=PBw{x-uUVc@=P zDs@Qx}vTcPh^XTy*<5T^s5-IxFfHi}b^$b5CwF}$pmbn04=i<@+aVO@lt&G&;mxI~4U98RZ)l$rj#vStnIqk{=*(>S7R|-+ zT{thUp_mYQl;Q;W^^Ad7dMo<6#y*jK3VNLa1o$Nc9OVG*9H3gg)fzuwYi;P~HQGc9 zr(2qG-)H$QTygLSz`21l_b_@seTHlG8trA))`A?BYv@e70Qs8IQ%i5EeDKDeryRY* z=+s3<1HVj5x^^Yp4rD*U?77I*6WJR_XicC38`6Xv6@nHSLX>x^A zkGPaAzXwSRW0JB)DZ#8nEoZp*)biO@_v~AyP+ubB zPs)o&3`muo-of=J(Tp9m6L9+;tAc&#x|QO2DwecHB7#^)dIou70lvT1JB^af;{v+6jmv(B)|TKFAqX5& z+tx)L0+&%0AMoR)3UD=QXiPvO)HB=#RA334vV!a2Pui#Aw$B#G4<|~49xbv#5G!$J z3pR@Gg#i2Vix-W-X#^!I-&}v+(qj1V2JLxFCXdbJrB{~wvW3O(!z#jZkyVNOv=>az z^3bO-{bEuEJXX`RL@vzEElNtj7cF>D0#pTE=5bVWa%F1rcvFTmdHq?1rth3S0L0qg;08 z>o-EB)YZ$+ogP&1v*pHF35Xub1y~stdVZ%iUW6l%Q0++4D#052ZXhLd)YzEz6YBi1 zH~*1M(I#&T9KfiOcet}Ckab_>s!QFvMGGIiD993zE&?+8Lv5QeX0x7O^xFc(LRTSQ zH@-E3^@VPUn1mqteQONb00r<5w3w8jP=3Ep$gIa8^~92v#2;sOC)*}dkLI!*b3Jb$ zN#(P>%!grCz9u`|>cm3>k?8ko8Ed>T=Qt=X!w6xO6AA&W;v#NPPn*v1D4P{#eW~!O zWsji6A2v5J_Wn!YAs>D-{C=w0RomVMyT|vu_1zkB44JiGDLik^kae=b?>jjPBECH! zMeI5qYu29N89#B~^_&oUrNkU@W0V*+aPY12yeX`D5uQ-kKAnUEI|+9^4DrDYKGU1Ztz1T1luj?f`S&tV$7OtV3uF+R30XUC~+ z>C9==lU>VVVIMZj0aHH~eQuVN-yN`~?r#S$$;Sa~;UnU&Z^)w-94jg~+i&Of#wMg3 zDEVu4UIT!LH-^Yov{z&cjUImLh?4nx8*lYbR~OU>T(`J#y%p0EGa4PTrP9^!%!zh= zaZ3a65St;zDKK<3m}foJ%D=|OpnB;RP8y1a&c;ceE3#l{Tb}7xI3 z1yCjgmAUoKG)xGgWQu^(snoF*J+9(WGD=_IIYcRRtdjJXj`#yOhW%6^wMFco+Vif1 z=LH(ygZ)aB<4@2X$wmqyz73VI}_QD3cCG}ili zh6gXJAhu*~b>@_#rV`RD)FcY-InF_TM1> z>4Z6{4ioy#68^(~Q4)vdl%0K(GxZcTgT3$p)y(Ove*WnBTbG7rK;M%T3c*;NMb520 zi=vRZC#sPN1x}LBl{f$d7are}REqVgZ~?yw#MIHG9|J&ZC|H_)FxK*c9)Re~^K@i{ z-={)O>OB|Q7pJr2KZCSR3SZbUC12Ih-kp-9))oMOxkoyUDH|A3n)LB}!UMOfc6qTS za`AqqQm@}jgC^rI1}ekLpZ~^-$rqMM2~YV4!?J`f_=xc_e+upFVA}{V1kP_qCa#kY z9Tam=__2c_?f+;2I*Jl${lPh9+#|0T4#x%?KO)3!qY(f6upcb|aZO9v8tT_d5G_7` z{YUO~2I1jXvYl)aMFfLzs2|wz`}$-L@NaUNFko)#3XnR=LGLyld+OpJyf&LLI7s)%y2G76k>=jJCXZwZmO|Y;J z1%UI>)ao3UD^6=s&G!~>1T ztxl*?7qi;WRvVLo4mL(*Nd$j4W7f)FTXN{M`geS7Hug8y43@tflg)U(-(?p?8&gCM z9*vg!B4NO7q?9nmy|zASXyaj=)G#K7ltJt z94s4`5sa8_s<@qr(Wirv%*=Hi_hww_a=>R`r&}-1j-GqMRsy-;z3+HBr&c!IH2Daom^yRL5-Q)ORs&ZzcsU^$_nT??iJ09sg&5E1|gaB)3YbSmIEXE&C=*Oe_St{J7}Ut|7A@v0%j+bZ8J>N$hUE_kd$hFv@=&Q&-3b0z1Y`q zI-oFvNyvUkw<#nuG#K4upl%F{V0cCqea)x2qzoNQa1%L75VgJRI9%|eJtt~B>-9Xp zJkGok4;ch+VZI;T`$-qku)=&2ERjPB-X`q({MVEf@3LPCdDT{c3hCr=R##Dr=eDKcP(6KqIdq9GYQ#%;}eVAa)BVy7Hs~6 zONGzFSXsR0-0Z5=-WHsTA5xYT2!B;<8|7a_E5Escxw*geNrLJjN(pB2l&_9&fyF5+ zAg8l;@Vm%l%rBF1hGHoqSV2hi-j34EDj|g*RnX5uAQ6lp2H819;jZ)XvoL()ASK=p zp5(7kZWe^MZVrx+D)5_0elFtg28 zhITha74`01Zy3#NoI1VV-++yPN>kgVPD^>Tg~P_3))UB$xP9%sH0456>2LdvWx8|k zVr$OqXbgRJ=2j1ot79dfa%{xS294_tBsxD%Zo7MoZ}pq_pW%VE;O71$&%4LF-Mjbw z#F|hh?f83jKJeh%JOa3@`+&@{+K-yUni z@r5^FVo;8&oH4ZGlrv#OskyEP`(u42HSOp7SIy1~$Q6a6i95$q|AUePz|}Xs@BV0E zg92M}ZEB+C_>Ns@O&E=cgHmr-ElCS!sMx~@Y3A-1i5FI-afx~xVIyP}{xY7Pu^vdh z{CL)^;YT5o?Hkb|6YYR3`69d|u>^^-98oN#jd*$k_NANp|CGP~qrB-pKzKw`>OZKA z&HJpy`S|^BeQ*z}@-UsR!d3~Nw!ROC#HInbtkM-d);GvcA^p+51j9WB>%2cNp7RcQ zKRw>QZ2We;PkxVWRlK|6@oL+6zw^G!T%~CD>5gn|SzEMBsN#M*x2}8V<_MU-=_*%S z%UVPRH1DjO%|+H%Qigi}-Nf@c-^OdPcf|9yH(AHyN(t-fAa?N({eGX$(>6LF`u+^- z?KV$xix=3HnMp=h5C*{q@Cr;_b&pg@L^a!b<bk#)-XG6 zON&k~OR^V&j-rYc+x91h6wan<+0|;cM$(IN#?u&5)Xlcg{R%DDZWc0zW@cbLC!?@J zf~ujG7nKx1iD!(_?o(%U<27Y<>YON!z-;h4PUvmzq9X0++qtoymXh$jZ;|IKnb3Q? zM7R$Rg`HHMl{#`obDq(_!pR^f?rDzsZvC@q{{oz0Sd+!vFb3GLOUL4XBT=$+58)XQ z7tp(Er!8bflB7qIy2PahPAcC@89yKsf7fSrBtwdewEV}BVQ1B9x4RGQJ{-1W5)}=)INBrNs+~U56R0 zW-n{c32<)=CC(AF{T8)lLN=;NXl>Qd&nVEILHI|aMZvF~?UG|c6$_k2$q-R;6h4o( zjR}g!#x1wsL*$>)7EYEWg`muKN1@ECi0JOitS9k)s;cArC6GctX#Rq5GH-He!Mi}d z_Ym4gvTju?xcQ|{E=@bx^Ou{GHW+>VOZhDz@C2ldSYsq4QeB^hkN~sbg&MNmzv95S z%Lq2*3G-s(rG@nmQR?A9ZMDc7bGY#irYlmED3|%4dZWDdeu@Oeg z5=>lqQigBu3Cb;*suH=Jo`1O39+q&DrOrGy%bX~_lWl@weP6oZ5#eyY3zhM=FXcG- z{Hi;302@mI84NM)>eN*^h8v)7dKNgkM>bo)>w-abGw3oa}S;He1JpY z<4JQ5eAjGiHvb+EdEoxykXSyHl3Zn2fP~H5%AOD;xa{-wmsVkEGDl}u;GyoleWD_` zV~zG&voX?JY&0Q1R#rG}pE8O^@eDEWEzAC77A>T06d0wKo^luN#bP(BAgP)3|rs0u(eiAXBlmS7lD!`0g4gU z6ksr3_m}a=2)OZm zPJD(w4tyKF{0oygf|UU{Gbkg7Q?{rBNC)=L$bS28gD?EXJ+D2OI{^v-sy2oM6mg-H zdOKEw9PBZT0A;A>uK)sx#>VUD=rS?`9uB-=DLLCswn&3pAdO(s_3||>OIEFSR;Xaf zrH#(iqe6h(SpDksodd4KEdFpDQN7pN7hec$g&$t(V?`?vqel8LV8aj#e)Za&ihATS zIS6DhH=fRlhxEe#()18VH;J8+5QOZvFmt0BE1FH|`i!7>kbHH9QC}QkC$L#ddI##6 zV06BQ<{pBIq}+qr#JYsN=#ybRKT2rFgT2T1Wj~!Ltt8T7XsfO=ZOmo0rJtz?l78Gif&fQGVS*j{^!b&@Tr?db;IGf1xm*U(7O$#J#Lie!Hfhy@flsBM1HWhL)#qZ#qDosx7+GJm_}$VqQQ zS`^BVbJuEvD<`MXEf_puMNFv>iE#FA5z;HC&`6P+uiJ?P7$MFgwOMHvvr!GMKcfT{ z8TGmBc>|&>ExG(qC$*9_e9Q{ny`i)s+_$I$@x#?4)^~ijqXqy!pN>tEn=04+>(=tL zNlyflVD?-&Mi;q=p65JPG{US*yQ6PRY850@mi%OZ`RmP#^2|hPXu9p!^gmMMurP+d2V>@A0#Ax8EcSEI` z6IO%GM7Q_YkT{4ce`cjU+JHIHc{7CeDVCx2m5A);MSyBPScI7x>O%oOIy6)X>CxUQ z5ssV=W=YBsUTXz69R5=-4{06;Tk*$T7@63YlYHf(_*bZ5+%SK4k!ulZKdj=lG0dGW ziI2C|sb7IxyS7+V=*NVC*nxC5N?JT=_S_p+1C0Qy(E^9&r=);?D&UcQuY*g^9$DB* z6;>1t8LCmupD$cos?QEqYIZNrK@RQH6dE&2G;KnJ&ISr$%@L+ZRFRfPfJiY*c~dOm zYXh(63s8DY$*;{S(9}wZDNFZ#@R?GIpz1>>3Yfg=t~DQ?n`ynvxVB|n_zWn2(*g4< zA}6){j8vbzgy&d1CrlMQ$T9c%?)B>OfOGam-vmX|I+C0T^VQgBzk%)Y9>pKfU~xug zR42V$@i_@8f)#I^;MkA_XJgDQ{+aqKv!*X+;1J@_RW4=64g20=e`$Aw8HxHA%A6oZ za4&cbfFtraX(V|vNtAtJF)V}^S@{5}fz0Uv>BQr&4DA-|9yms2IyA$AuapE4b7eSAv&6d*0bf^y6 z-FpEu)tF%?!NByfd-y))${e_v7{GTc@rS(Y)Z0Z%Ab&W=-~1PH}m?9Jpot=;C}}Us#hWCky~@ z0;cHT7FeKCElP`ed4Epn>1AD+OzV5pfks0HB;KANSul(g_dBf{<{iqD5A0Wzi0jJP zsjV|Ui45oBuOOBw=1EsM*ssVQDGA9v}`D6 z@kS?cdB2tt;jyI8qCksFv950GABg#GU2_VWA>oH;{vzY-=}{WqbD3&F@;@$zQ<;wey%v&12kcg zt^}UW9VH!2aeA~)Rz#G_wfBwi)%1E)*;66@huZTN(8a^BZu<*^*4|13TE69CvEID- zcx-cit5c?|F6I_25yh+qB)l~!oVi@jCNybMtKVIS0exIZkSPTnHx|JMW0KDN!I;Q` ztfP^FLMaOjEk>dBD4E|0^`0E+J!p>ayQ8@hwY`OuOevnCLgi&@th!+d9{zG+IV1;7 zzFc=VRazN0RV`l-%QN6ylr~QK26=w9o>81(J(d=4AH zo=*jSXel?^g}&8X(*A5~3QY}w{}*?*@)Ua-$#wSx2Vr6bXVNcTk{VUXo-324RqFdA zhmX952n)i)Rl0fDVi*g)U{t)X?dslDO+ipQ<-0e<)MIHHk^D6RNRDMn< z(v%>?vmNevmckU{V~u%{QY3f5%+kMGnl}h9j!bm${F8})5CrPm`i2k{wrE!YLD*Td zOdqJTLpEi^V?Li6*?D~CuB-!n8cS8j)iYCPgaP1CuJ}52+`TByJIo_YBl$%{+yYjE z9%2(@jK0)Z;EInE?3$zNPuprr;`KjY&!JFp)X_sn4y141S@>IJzKsw#s9MyLjQDkB)SGEn_BTa11;L$gH zWzAsUpe_GK!T#`_4ym9j(UTCKVD*ZxHyMtpe5-|>&XvV!ubM9gv*3quCBh(wc!&e`UqX8 z>tRbQU%Q0S->gLIyqiFZ$kr)|TAwqJKc9Rwp?HU=Fe3gm=6^~#9>{>fh6NX?>o8+S zFg1t2ywtx)ILB4Ve{g&33bgFb(9hg#Opkw45`Q!bFi=FUjlosn+Uh?Ia!pu5>5Y4U zAN`DWKR&r2y^Lh{!CNrEna0b;xnX6!*dP*lJO<8L9zH>=*mup*d1Y$;^6y#sSP0?q zqZF_c;r>ohC`neAcLJ&m6gj!r5SlPPO4F?W09Wu!X}~ce%)zXKz_8#iGL#v3F~*>4~2`|pf*a}e(`v@}e?$EgUX`mGE>Rl4=As`ZPs z^rwV~7x3ekFnC?6o#3N*Q8ZDjqYpm;xbaHnnh-?!tM)Y1#vbhaG)e#co_?bNcls#> zg22?kuN0X6xhzwyaZL~jsNg=_wrpJsCte6E(2EbOaw&QgwnM4bu7>s&Bry(Hq}%l6 zRe#P*GKrRz_37T8np$b+nrvlJ$PkMey3A>s{34=E#j$-trlKcmWn7nJHc>x0eDvxNuNx5`wBp3(WwRgz}Ob2rbVN7_@jr>uc-I_*#^X zxmCqP&kbW%ik-bmIO7HlUYNsz+S(+MZ4-cDVanFuN|FcNcU1#rxhxX~p}uaUXk$FN zSPn9WjLHsrofhEmcuPc*A*J=NiSlkyL@TmqhLRc;&$}5=NYxsqRB&+iM=4cAgQvO` zriPk#&SOMrwjqgN>cNGQ+!_d$9Il_x^AWme?M5ig&lOX}uP54iq5pDV_b>Un%M+MX z5|-3DoYp5Ft1H1q=wKcBV*!2Zs2=}h6fM1{SIe~=a$FvZn2J4a_?Y@dggc{(nc@8} zdBGxZXIkmDQA>tZBgKy~;XHHC;p~b1!JoCF?T_~`jsrmTNGK=ap7v+zZqqFn+k{*+ zzcPJaNtBd9O;8-^hS}y4?8rjmZ{cY<95RVy&!2pDl(z^r)#t4X_n*+0CiAQpG2a> zs%lCVsb}WLCF-ju@Y{tKDIBJ^AC$eQ%hbT1f}1Fon<@oZSn%L3?G#rW;dC_YF&>yR zZ|eMeiR1ZRBzLPQC@l@$w>7|K-Bi5GLPQ68*|LIzmtFrB)bX%moiWoprhS=UQ?SpS z0sTrTTeE&P8&phfXIjKFC!mna(ul(AmVu^*<5?iVM71huzf`#oFU#*#bNW+dAkX}= z$`zzx5`Oe4$AlbSy9wfbXry7VnMs@gV|h{t0BHs85=h3DMnnSU$nDBQ;JG^N)8?`H zf`8edgp4ZM1DBI8`S>M)in=#&KX{PuO8pjbLIHlKKZU@$4+ZK>F=m{s%eeRZGxe+V z@k7Nljk?8sc6N3a&W&CcgUMpsoteQzWBc=#1D;7dq5`<>;iW0A4Q8|!8mast;qPL1 zvF@*+SR%L3=yqlTU4OuJ?Du)U9ADNlk=A^~p?o&{4Yn@4X1yt);zY|5uDc)}3}5i3Pl6F@jWhk4gX<&F^xZMOnWO&j3Y)Jd43~|oFFcdKZ)Miv+&Br+qx`%atYf!-0t7qU^aA zrn7=!ys3EMsNejG7sk2@g9aXX$=C@S$?0IG-DLVDzXRDcw3(IFLR&xIE>9Ol#P9hD zxKTy9Jf`vjY7vxbs+Wbj>?Y8wnM<{-QGr#~zU5e|_WR!v_TbH0AqaY8dIY!g@A6aB z^;MCx4@4%3ltKr48fSd~;oym)hLK(yhj?w^!uHa9*>5-#_(1a!MhWmT3TDc5WmtL&AK)4i ziUPm15g^z~XQWf}8qoG*O5%^T#wI)fZudq4nHQT?AEg{A_ZE-cnD){aHuzSb+GEtk<7n zs5#)2C!oY(D@Jmp3vy>)@*J`gnJ$K)BhrY$5LZN%0946&_MwTzn zI#ha8HqG{5V#=Ya&Ta)dhp9)qXno(BJX@z!IRvj?ymxPBqDG^we-tG1^{(_Q32Vtm z=XvZTX%mVkZTdVJVqhMS$;WSeWU($`-Gmo_Q%ANQDG z066-XQlR8jimdRUyxA9wIo1gp`!O*I_;XxY5TX& z04b*19b%~za;VaB=)_DfGT9t+-@n3{_jlLfBE^$Z9rFAXBYxa6q8=5k`BwxVqtjKV#H_wN;6vkmlV0{sfqhst+K z%>J+@zy|tiY6WdnLA*$FuD+80^J#)diDDQu#QGY}Mp1^`izPIqUb<-LuK?Sn7}Z>o|_zk6t+BftC=EGME}=;1A+e*rvh2vVsrkL57QgU142bG zg3vY%JwkT|P0{h>WPwAtfPN{J%EWY545i&uO_%eSha$uSd6$caye9UQYd1Mp3fUb3#vJo+TVzO> zn~mewQ1_=1uHqz(fl0{Z-sCr8Fs>1#N|q?$xrdnIT3o;vu;fh)AollavmZ+-;Gc+# zof0V0YjYbS%;O8y%U}4MR=$7uoL}4?1OMe`ek_HBTiL*j6$STcKY|j{5aumD9BiX1#Efx6W($YZpYv zltRjtL!CILFTeS;Q<0v`NAA7HiSNyee`Tku2Bu+_^e&yt(E?t(@YgJGj?scmpLRW25O_I$TK+6#^Z~9UzVwd5{He)@$yRO>InW(JaM+{o zFvZ+Wj7KC_Uz8`ji=Ejaz#$Ol5nbltkF97<7yg7;u23%&6Zs4p;?j#1;ffk)E z@#s{q*jHfvpm6NMw{a@b5B=PbWYM!|6k#E$yJwSWLp*$okuhsbFEy`s;RPOz7q|E^ z3+MQp4QLX8Q|qs5@B2#nTMPZQY*lNLw&ut+KHO|!#ueVTbCxJ%-BNi7xBy><`rDL-RG(am0PmkJ7&n~ASI7`I@LJr0Rv zJuSKO%^lF8`ZjyNFVUARl#uvX?m*&$|By3l1Q`c#xf~BK`*d|{6XQLS{062C-Tl>R z)kVCLp&=`SQ>gg#?h2I1;KD(0QGEqRfquAyW~D1<8R?mQX^XE=^xP`n7dGX5tK;+v zaasS%zUXVpMvQAHB+`}JQqd;;&fA^x2^*X@>$Wkdf1N2G%VD=Qae&nSU2}+q#4FwL z3biI-=NMvm&0>pg6{hhJaFe^b~Z8!bg)H%Z{h5CWAl=$ymj*= zEIdI&uTZ-xc))xBK@M}&Pt`9g&`rr&F}w%}GJNTDlAvuxMIy*qPyz@s_2uX z!!Mc;(r`9?HhGah3Xm^r=h;#eRoCIB*$+*Qp3wTCy7q5H%);VZemwN#hk zV%;L)I4FEOJrGgyn%~mqBE|e0I%oiffx&B$r^h)2k;6=-x0i=92V_&FYIB@D&wL?c(Ah>UNK4NBw$f!0Y|4j?05b8tA*Wk}QKA{f!7FR(=!WDS(4wFvaa&?Po+ z<%ociqMf~&gzt)hm)nBc=G0MI+#?53t(uGCDNEh@a~h4QzxFqW5kvjeGgCSrvPkj1 z!-&ZK;~s25gyaa6z%xMR327H%DI$G$J@y;v?L4q!c+Q%b-LPNs9=(^>{;=CHv7 zLy&V@_fPeHduQ@gqM|T=h!RbXL{+N7O`p2eGn5yHRyci70zJM>1^b^;`?E=7zMqeB zuh5T^9AHaroBMRoBoR2&v{iOw{5byHG&U404V2L*ASXZ!5R0*~@QgT@_&}Z>F&uBR zPk#>M_Hteu#XlwZT{etBF1!S;hpd{KHgU$fv%|6S_~%}X-R$reuIntXdyozY80!B}B13rp zP$Hpb|4<_8KLWCTO_|Wf?|jxV{+@v_Eeo43pHD3*K^~O*3h>-;P_(^1O7epl5*u3& z!3uL-ME-skOzH_pBIHbnQw2G0~MP-2xX+CY9Y)@V(3C`4%pq6)I_Y7CpC{-9sI`aIJe zRo$lGRq<_ly$Bm638x8Ry)%MZ83{*b{zx)l$|(kDy;ncRaS~7-17i zA*(`jTzZH=s3?zR0=)$qF6~Bg2)+p&>Tfg63y_uP^>&s+gfAteul2wTItG`i<`4D3 zeTp3<8o3M^?)NltI37p4A(2EEFpPxZM!&{2cLX6VZ`byb`>;oqDf zkAZO2j6Uu5O-{Pf&Iv*X_d9^9t$AKhAe0$Jb#X!m=P}6hCA+kr3J-t8sH+ej5vBb5 z@3!-Z+O1YDV#9m%RIa!+lAnV7<81K)+$aVD*O%Of54=92_qM-zld=n_lKzsG+0H#} zmId}aFXIpO@Ai7W)@j|Or4*Z#dO9*nh7cg2yDQaZvbLe(3v>)eLj}qnZ+yTx;>Fxs zHr!II36g!0`uNzfw}%?P4KVNY0z0uMUdey^{jA0C2te%Np8`lRdwvG>^ zv5!h1U-oO=s6!sKzD6GXnVsWJ@S{VyqNt*Sh((|oHLOsxn0~k}IZ!WS8c_3^X&%i;pJNZVBfrrbB)SsSXC5 zpicJ7=%scSm2jkNA3(^(3~e)9+qur$cSEm>O1|to?^1#8@|ix|JAVa65C#5$EqPJ` zVa$YI>%vA-qH65B62WQb?xkWfyqZvL)LI^S1$cOIQ{JuG^*y3>5iet22%(mCPW>lzvX_8?`O)?dj&FC)ymdT-s~2SfTc~g|H!~hN0~5C9_r}i37vK zIW}{ue6kaVpD1oFog;9I5sUJ}E}gwMaHb?k2+B_yAZ)M>=ObFDxAv?Gk^BUz8*rc~ zHFl!J^BFI4U~AQ^By+#S!B#s2DPhLg<f&h`}+Wl(K3d>aV3sukJ&8w5!D4FOtc;-^NHgnurW*q72hOf5XC zsGtX7tgU8_IeW!*>A6>0m1#=QaolOT<@Eaz!rr9{H_eV^a@L^jcA-xxtMJj#E_{hz z*taAPE7zL&<#8BPkn}5$+Dxm|c!7h7Tz-oDn<|-3|BnkE%@Q56`3VDt#4$%#H0ru7 zP)t3Y^ehSQ;9WiIDGB4B)M(Sr8Oq>}trNt^A;kv@#W4z1a*`o(VwM;7(C#sJZVuW< zA6b0xHbR5ZN`oWAPWC`uach}Zvg_;IcHK%Lp5Fu0^B3fM(;{e`1&{jMPP?`n0;-M5 zak^6oU|q$u^!*U&QxUaKk}rm9SjMKb3X5L4;8e5C?u&@E!tf{80WKy~(|xlbVi71L z!`bEbLH>rx-{6;KxIn}QXyY{Rhn(%j2vi$yG2=zP0F;|X zN-qH%5RdhbV>>2;M4EJIR$>H7@8eM2c){B0iZ($$VuJkq2}R%)oom=I{(R0xsTJbU z^_@zu1yg=IY+f%j6}k#*XU?2Wsy%n@%S#*cqHxIQ>($lNls?ah{O++!y_UtuLYy*h z3jDUYtsXQHJRbfDsO45A%$5+eyDxzQ9aMrYR-?v#K>yy@ovl^fpW7jzgzpdKR$GxY zN52q`4R`;sWJ~%**YL%^+k|w6w*T3<;JAC%t)FShy&}(h#c79JinS{ z5pryh)9*3z&{8|0m1QY&>UR}5#f20);C7bJwfC^(z5!Zuk!AJeJ|J-p7|aI)xQpv6 zy@MFiWaz0{=?AFcAigXyj!hG{8g!EN@eTQO+-6rka675G>5#oAde<$=_dnd)K^=QV zR5ipMj))x)QA&0yZXw0s+gcK;NJ#|Sn0Rtx<}hO3QC0Z4mk}>rbw8f*$8uNr?b%?U zN`n%h$}7OF``8{}YP$ek(rFd*k>=zS&8eP|pG`;Wic33C7bJW3CXfc1me|ciTD75^ zzIzNHI0u7?COH})iAT@Y zXbx%B=Y{OKu6#CsH)n?Q{1fuM#s|dhPB+S8$LhCS^5iwTzS02yn~fLpw|fl<>ey32 zpLsMH)7}z*yirHxD}_e=^$ky2bD~m;ouoybefEP+@D(O zW;e)4stje=460Sz{G@VQ5-*5u*or#` zH3Vo&kBMH;c}}g7;nX3K2zVsntWd6k%vBXmrBBM=juf?EJbgu*wbfNGACScq({bP6 z?j7&Vae1uc#xr$PqKbb8gD-s)KDi6|UW^|%O;W>2{g*SrdIFFlTEC>q`?KBeW77=e zb9cGti<#3UP7jy!X5epzvYZQt%b+1{muFABFE`o*1fJ>7qp$6297%8nEHEW__g8QC zbK|mjzHjH{fSj!WiT=`ly62N)B7aM??_XZ;1KytQ-fA$6T21HpVy5o@22WBdZ{XjC zt-NNqjWYU*FP2`?1!R58aAVJSH|0sH)7~8q2>CiNiiuS}=8>q|ky#K%88IFtU~2%1 zP;reZNs@6g!aqYLY3f$SoRWnuMaXPTIW);)8cWKQ)d80^G4l9fLmj+R3u0(1kg3+z zEHC_n5nA?(&>*s2#sh&o22PAMdi7)D%}jh0K(0%W0{-s;Umtew2TorGe#Gi4Z>4B2ji~@;(!8K%bbC8nyqKa-qti z*m^~z+77#8X9#J~T^2wtQVTm^K7;tmYi6)c0&<4ff=QJq^oXzz1IupwQiK=hT!ku| zJV=U3N{U8@o)t7bdN{(cy(30#$8ytx_b;58V`JA`_r7V5r0pp>N}p*buYg_s^P1m5 z=i9-rn7LCqkaeY#TN8PlVY<9PdimfRAiP|FMmYSKYXaFROtOl7?Q%0n)UYenW}x^h zug&F`NoQ7^4w5yI5JcPHp54?pv8FHst~!Ex7mrMgO?$8{jS)c`F?nna=u_pXz5!>E zp%IC1JdvDspJ{Kifp$u^;O^BQDm_aU!{^dfpJm@)w;27lxI_3tg zaux$grTi>cm6RBlX+&GSYD8J4vJT2~i@`DOxze~U!75zF2o>~BA_S_kaEfJ5wP=EFI$EDlUIh@`C&!en4INvK5Q=Lh|_O?bd}aF zTasI!it-fJ`(kdW=wrU8u5}IpjbuW#nvWRu1}-}`Pt~%Hn&#Sp#gd&pE2!D-Z0&q- zm!6IHbj=N?`sZ~67@18J(4oqQZzc$#2vclPW|4qU_l(f~V=t?!4S}NC)ZR(eh?6yQ zZy|(w_)t7bCt&(L6)WY(svWd*ja@U z?#&uNLRP5u4>E%>gfX;>gnhX6xh$4uleY(~^yyCyptCJnD_~3{Dl&jxP$T8jM?5}| z5S|%~l}c@A#)47%%_JQ#j-}){0;Vy=sw1s9CgZdJ_5zF>kt!F>Ou7m-j&r$l^&*A^ zLB3F#eT3f>$&?uu;^ZNLT+xIVmb4h^XXp8cQ!Q;KPE##HlcYqn$nabtI{QxFhD<#A z&h)b^1C!b@`Kc2X`w19mz*qLz;Am0}5O%9!E0K;h0%jJ{X&ECMgTYa7Toz2m#klm} z%TX)IO|5@nPyI_fAfmwU50kYLCrrNrh!3pOO_5n>z5lEyu2mP8C^a5fb(v9z=_pAc zaEwoqflGRYn6xPex*jkU?JN9OV0x8_bVQAl4ZZV#0!~Zt$eW8O&0}EO+>tuFHSPxf zebKtJA2fvVk-whn@C2Wru){CV-HpSo{Mg{98P03R!$J8|J1f(=R#tku9@;9M8P)}m zIS4mZC0(hMzZn~Ucmpx{nGxRE?3Dt2>OW-eIxlV2zauEB5S&JuopSQw?g*aj zL(R$Z;|#rXa78@v=-LC=Wp|57CNu9$KZQykpKgtJ@7E(>N)1LtrZP-u)4aO^v}K1y z@Ds2axN0Ei8p$2`VU#@TTh5?22=_sbWcP_#-yS}|;k(j=_8=iz?8C+37lH?HRsDi8{Zi^#*2COc>71fbHU3_t_{oEy9;l1a3|E1I9~oA{V2F)Q<%&32 z2wo7~X4~a>?B}^pfOIFLTSQ>@%`(QToA%^b0dpB<7dDp1H5F5kfrsKkwKf_&PJe$) zn-2T6J8vxm$s=SNwFPy%IU*6tSHyV4zRVBjJvZYl_*+UHKpO?w7SJGDQKL$Y5|NNe zy_!dX(ak`|dXuFjL48|a^CES1Wq@5j>}|EzlWkiIwTvIeuar#e2Zv`o-WNy;?T6yX z$c3tLqE(U|Do~+eU!zKx8ttY=U0fTChz867nIX1^Wn1H`WHQq!5wl<{N!72O1gqsN z_9a=Y;oc9RZke^{2aT?mq;1~769yJ$-nt6GNR^_fG4Bvpjtxze1ocW8Sox|%b^HKT zzill>E&xpsT$5{Ij1r(vPVzU~Ts}~Jf0oai867{zLpu@ z->hV?{C6AKAa4VRj-xG#2&=B`Y?M6;)&w-*v=AezN3pXUIFQXNfKSU|S)xjQW|2ho z3Hnko(|MPcOOGhbA!=~?hc8HH>8cY8x*XGx5A z3evv{5uwe5YO9l;Rn*~M^zqqX1jZM+p1C%H8L9>0BMgdU-S5` zQnD=k8E#jKZ+KOZ;&It?8H^ab>w1M?O=fs`FO^jzC(ar6mrrvVMU(GVnyz1BO(=bM zE6y^1iVu6E>)HtYXxAC>i!S#sB*>^C) z`_py;gzzgRTm(*wn#e^3o}2n`xG&+!+C>vzQS9Di5TB@nR9h|E$<#>WBMU4{;)PNj zf~tG!6ilhxDE{%dI?x3tJI1bEq6bmke7NXkWQ*MeQ)VnhQgsI8UQG0pps`HF^)NEs z4oUBUI{OX65-_crdeXXNM;kx^@j=q#(DghuUV@;51j5O^?L)TXdA>pyZMZ1GIJbdTbz|Qdn6cixsgGXcRg$GVL$y zQC|Q}J)bMZ2G?p*;}_D|LFf5d66=%!-$fY_vGB&0 zc2_H;WJBJoq%U4$C*NLGKszDK+x8IC&siJRiq|X!`Tqj$!SP{=9U`$Q*=YyW4>0b& z&KHMU6wZLl>gp1ph`piNIn44kTY){rn+cuyb?NyrfDPR*l)71jHWGjedBw!!|59MU zMS_%7lqAjZYLY#|;(^>-bSE|1$4$A?-PPj721hFsZdGCkWCh-yXoa`Knq4mI-aC?8 z#yy*w+<=Sk-xILMIi(b1P&;O&X0$pTvFq-3)H4&$=*Q7iD^%3O@m2+=0YT4ZwEVc& z$Mqm-8^ZQQN|$#7Y$_!wM2$ZAn4i-p;$qGju4AYDBlN@tde_=N#S zhuxnO?9@PF$6|qitU7=TCPIU)^L!;jBE3LT8_35i*_vr(fTJRJRD;(BuQfl}53>Q84BZ zpuC8O1;n@ALYnD*fLd|9^TZD^?~t8A0-8@KPb<6$?Q@JeBsHoG{C+ zp#y&^9R^(b19l`0IBiY4$pg}eiy^|&sTbi|Qnwy2Q1;)aBB_CrTQxndc9uspLv3mqDGnl}3PC?BJt8(_aUP`Wx zA{oaJfkrm6H4E;Rkn2S;Qy6j#k@_-jqi6J~k2MMdyzFD98fefM($e>sFw>aegoYSW zShG>cGVcV`-)b1J=17=gF&wMN5*>wt1RHmOrJEXTe){ujj@;nP(2NZqQI?{`D*0U8 z#Uk5BD|k&IX`&2^Y=jy>`0vLOmT=+({6|91Q>f517Med#{6J8?DEGXphhbzUeUU7> z;8ErDaopw^Q1Ycw?%f0w-HH1z?J*oJU|q2^ zgfi4f7Y#8>Ch8kJk4$_Gd77 zCA8njQ|6NiD>O-dWEy{4q%!h~<%-+$CF;QOzO%HmD7sW{%MSG9s;JTfWzwEajC5hA zNaPerHC{wYL#AAeH>d=I!;b)UuCrlFo+d<3S&*ss-{Muo^`DFcVLMH@}}{{F%m`9H!qkYVKdC z@2dWbXi8Vtv^E-CVH^w&`|d6a1(@m=$S*XaZ8Oo(_08JHETl_4KGqsKgQ~$Y7%>C{ zsa}uD&x?(B1?OgG`!c-BT2lT0Y2LNC9!?WBk^r$J>`!ho50WT$V@TEk|${a@P2C z4wKS3zr;9fC~IrM84~8HKrP4#C&+I@WX;BZ2!CkmQh|72!^aM~tv<%krK=XfZR6W_ zJx1J+bl6~>MglEQ)P)C$A}sL+D5q%Np?HtA8lk7y@+qU^UXBMfiDP~@Er*pn{p6cX z|FPbzvu6FW<(E#}{;}SeM)32O$&t(n`Uz9NL8p3Rqte0>(OF2?HoB zzbHAEuvp`VC8u6>-H8u!g$dNE&7mIK{rU}Tjl z$O>zLU{j_my4#(`gWDzk^gsoQj%g+r6XrT#;({e_q-;xV^VZ!CSc_R{EvM_rPDN6O zkFxKSThS*salsKEY%AxrqEG!%!}p|rc52@)m`(JVPDmj~hK9DzZi;E{=%y22MB1gg zlRh^)@X^LrFuj^BT>MWU$jbq2p;(zz%fV;}^Xt;4`L|E^=!4t=4aDFm`k|W7S_ng; zO79q=ts};=NUVO;!B4SciYOtS$+=vVI~G`|*?e1Es>fKS%05Bdw;W^;`zH!L63C(W z&JrZZLK*a;?>w&B(rWF9A=&wvN=nm-BMSIbx29K|MBOjdb?)0Lz)rqBhpP+?C-_2 z04p`txH$K%B1QJ5d>*54bi&o)@Y>z|`}^vjb&^*B6=4<~w{5+%`#tYY`XT%e@SOAW zKB*S|dl58b5nz&I^z6hnqRr38j=E{J`)oDWaV%F+tQ$Q>q)?J661NKN>BRU3HcK`? zk;Vj{lzn(cuumU#o6_Z{TvqbMfx<2!Y-`!t8{#0nZLUu|aH2(f<`4x+K2-a@MT#LN ztG@8uYrYc38E-*MotO!*i*M!207G#36$?H7d{OR36*&p-` zMYh02K&xcM02NihKWj2zyyDHFy8Pq?Z}t_4kTHvuqoZ}6`%{>QemZ3AsW$Y~ zW)VWiysN;!1XKWCz>4Ucz6d(;peDk&Jw&V%xok;a!>eHza?8a?1u>*^(1P z4SMrM!D8Ls$l1G=APL6`Qo8ifh*;KGKwRGwr^pVo{|SBu!%YMFrZX9vlLFQLQC~!9 zYd5cckw*SQyThKb{|dVS^D%>ppzp81|d24fcODia*2sCrvc-{Q<<7{^Z(dJjY=w=iR{9t2m zv#jND|6=>&FaH(LxWhvWIzWx#_Y5#SnDQJ;`)HOd(Mf50|K-?QQF1f+?|eOEkWXUe zFCO%!%;dxI$;oa{suVcAY}qE-7#op#*h(i^@~c?N<%iCx=?Zpm)CHnRz4kr9rZWR5SUv5wXwbFV4tR-C=pNoko*~T=P?lVaH(lWz)fo?#lg~-oImB zrvD$`4x;U_whzVx<20oL1LHARJWG4{SY(G&V`qX(>8L(Ra(l;cvf+qk+G802p&h7y zLV#_310`bm?51Bt8|v0lx0Qqe8}`D6#1W3u(ze@GBor$zpFNA0*Q?m)k&H%R(eKyB zaa42-L4Cj}2R=GfEykWbx(+OT_PJ&+bd}ReJ}*}Hrr}?y&e#b3Jy-Df{{Q%K5N#V~ z62S*FOp$r7y9f?_Kb{KT^wu<*!DCIaCue&9Wu#FG@& z6DyL~+O0+DSBi~BicfxxS_>g+z&WkL4wY8_-2#}Iac_Ii=#+Ar94K;YCp)ErBXAn~v{Ytgm;cme zthI*P^4^ys1Pt}e1hw|-?+@^uYlSMoz%W*uX_;e`vH6AuMHmY@Oc`Nwbz5hjh1 zGGZLM{>GA$w>C&u!x$m0otB>LpD8(I9u`S@TLiNh=6qZfml?LoRUXQMH_*7-;~|(L z6I!FJkIaGh7cS%h1z^sKz2JRIve`tAh!^><6;&SlfSDz9*YcvXSfBB&pE}-gUJfI0 z%i^)oW}ek|BOy_rZ_L|F(37=IZ5fcEYWC>O zFMjoM{^dJ?{|$C4eE1uLP$ml0+nNYK9 z0~`Viyr>5UE87P@e1;A>M!MNBer8m=d_4OqzLUcx9?qg+B-FyG^e%gReoZ5KdbX3zQoOj zvJed_7PELW3YL*(7-lZiHA_S*<4zuT92%_MjZ!0V==*uRVHLD-ZMc-|%JZUB#;9+C zzW=DorT=4LQJwp_sVuH{-(Sc$Pg|lR?jp?rHaBK-3V0!9=dxUfCt=Yl-`&Mk*PZ6% zA_K#Dx_$l}hx5X6y66Z!mB8f_BYM1vG4LmV8eDCsvj1@fJOl%j!N!yo<-oyFadyB3 z2u};x)dTSjwYcwv`ghbJsj|CYfAA7#jQY5LB^Y$^`%99C3n!;N00nY+WU7Qw%$y(J`ChT6B{8tkgU5`DyB$abG4WQ3rSV@1RkTk zPR)T&_^bN?n7&X;pyKIc7bc56$B19z*Bg#9gyWZn&P42z4nN1`5w$g&7iQ)?Q4u*= z(lIv1S|?~{6=$oJOV_wPcpo2kMB|vWeHIKYptA%^EOteM{IT^}vqK(kc`>L=)7Skj zb${4T#vGebk^D-?#&XkQ*vgs?ZTjm6qDb(t!|H!7se4(d=b`3G1MrW4UeK@0P=yS? zB{7}vKR3FTzzu6gcBT!ge5tYw4D>2b9NU&iqgkn<kt{QCxXPU#f%*XgN!9S?{RB)++IjPAhUpAt8I28wKSWEk^r|nO@*o0cxRY`tKlb*wO zO5{d=snyUM^=~0jw#3PAN|f|z{3dsyN0cPClCsPkM?|NjmRMc5H!3$_Pi{)w=HEO5 z1Ag>IsTrs^*M^ye(R4xo=Yi|l2MSjKO)W2&h66!KJj5VZRc339Jn9z(m)oWoB^J(y zoKs&}YV3>IjJaazCQE&>PNf_3!(t~KT#OpjVANzH+hZx7^yIIClNO{~l`jo5S1@IW zL1c=1ej3Qc1^S#Jqb2mUk5<IKh~<38#AJPDu|*(pq-^T8<^NHFPT4^HJ&DW zR1^x1_h;=dW$w0o2~OO8gLJ)R;GIynUFJA&C~axe%AE}QTJooy>`f2};KI7YQEDKl zSUik$1VNqFbpX+g>-g!>68+H|dnWV72f0dhtQdk{u_a;E$|)#Cnw$7$JTgadLIy!} zkRN5@qyQBk62=WUZ#cwY+j#US>}Sm+OMu_R4e?x+WofNAtO%-F&Sou2A)rfl zXe4$aS%vw-cE+m%q0$N2qs+1y$$uGX>bcX_2%FnG1&tR7SX~h~u?UV`?o-L9okjl# zo#D5NH&5E4N=IBVqnZ8Fs$~bVcnoFy8N3=?c(`s*Sh$>JOA#sM?KI~R=Hm?{kc^xW zO@)(@6iQ&ivOXQd@dT>U!UR_#y-yv2YwLgMBIgn070@1p| z7)&cyI_i)v>?eEU4ePbyy!T1d{;Og~mu{0?}@@HK6pao?IH+{*~>e3?lhnjBuA2lUBk(jz<|MNk1yZfKs z=Wq2KNS;t$Q;GoPwC;DgD6bD8()`#;Sv3YhbxG_Tum3NVw>)iU1BF0f4CM>ISTpYsSwM z2NFjlk6ESc3`)@zm{BTB@%EBma=KmWl@CbDiOgtT$^Pi`_9pmUNr;>!v}AEP3cg9j z(w@^DN-ttD14k3p5I24k^FUmKZK43HUNJX?>JBtfT{fHXA4nS4afZ98CHc^%MDWFo zI3)yg4@EUKvHVTA1gZzZue76b7tdv;(j4(@=;ip>&>+nm`g1 zC>i%%ed6XNmIwloH|yk7rKb@rfEg_Dk}*|KQnA_Xu`sBWr&Jy9pKE$|doYOt<})ug zDu8g3CbzPeIE{J*SAK_2RVF35e3Drf8CQ~Qa`@6w8Phxb6@XgRq1uPKEv(RlK1C-w ziS$jy_>7*w{I?f?o&ZmaD3rtlN7M%QGt9Qk?W-rYX+VA_s=^_;03~ z{{Jx5|7BP%20KKDD}60-Aa*4Yss=@Xr(e8i+XFz=0)aK_eKJ6R)UBlT6p-Beh8u+6 zDUIOj`5g@xIhLrsz%(dB#P!XcAbG9)hL}l%0z5$J4H=z?7b*sedz)p?GVOi?SS@me z3UwcKNpL?h%>&)_cajTW2dxQx4M3iBpG;n0ROJ?8HBSb8;C`8_;ObV|ip~l2A35d@Qmm|uu z{|o_2`le-;a)43&#o1p0j@fKPf&PaW#;$qTH9C(HD=Q+J7sMIi9Y2|na1P3{N;s^ zT-dBQf3xUi@2-D+NyH;qL$iev{Qn_Vks|E!eh4jn_vo)rC{aSf%<{{%TrSWO`9D_D zooVH0gaaT z1`To$-^VNK^9buFOy+JbZZUXSIzdUQ4eak`{Y8+8{2`M>H=BKOY5detMIxER zor!B}0Zf8uUmINy6Z89PCIny+=uu4Ya4K*Y`H#yfJ zh)fjLK*gvLqBKxFr6SB6;U~e?Sf}dkn(J45Jw-8F@V!O+W!jXYbt^g8t&11uN8+`9 zi$wHEwH6iYO;K^MK}3DnP*iSb#r2h^UtRt6?HJt`1!glYl4gh*1yJc!}^0a*MX)58Q;MC1QqvO^?$AL?LM zggUlCWCfD^=ARYn;H5qJfq@C^3Z%*_zwsgzTi>Y=v0IStVu$}v+I0SroG16awhE2- zv!gT1|8&hPniALl=$Zv{qwA}(qbe^nZx~>vtwxv&H;7-f)aqaP%MJj__P^!8|NTAJ zNBjrF()^2I55)yweXZFBp6_Y35SE(gl!W}zHaf}$M*fqmH`uu}n@o)MPcSR$( zw9vAatVI*y`+7a98DON0h*a6POc~9V*GM=>CUw9-Oy{fjE5Jk<)zIQ$3BKAlXFXnt zpr0k^na@>)N+~5<^zh9qq+j`>8Et2!fsFfy{{W3no*px$Ugj3mizlsk^4s~g6||gL zT`yK8+fEb#AMu|I&V-OGV0FCQtMS`)c)cU!ydNvpD&EN5W?I(WS%n z-in2yf@*TM0_RwArDd641CD%f(qX7baUF{8&IE%_R{E?a&PP0XZaV{I+L8k$x|LKV zMu17^GFO+4C{S4E1>#Kb_#Xla$9C2B>sj-&znajuss0cZRuNJh(b-YCS*(K$)-#7c zi}uz11PsiOp)|-Vey&Ir$lDi$dr0!@tN4DD>pWhzktYw49ci%+WJF#(L?!eiqC|Um*(|7=KQkwsMC6C1C5{!{X6k zy)@HTG?C&jRPhq-p1*u`W`wl>-?Foggd|64h|3;zn{E=sk2VtfaZZ(y zAW?3{i}hd(EYGol1@Aiqe+7LqotG(Ft!e2h#*N-wL=d-}GR zMFPlzI59&UI-*Q6HYrZezeIy4?BbXE>G9mfV`cEt+1{ok{j$F^PGrmi@#fdlWMhs5 z)a;M0r~HTpsm7c2VqTLC=kLebm)O}FLHHYDW_&K6!O+c=RIYw#iyS0xeub?3Z=`1P z1*iK0pN}_HiR`dkWvBnM*Yu4CLjTY>6TIwFjNp`d$H+R9YjZ37;C&uQFt{ z-r9PI@Rj;2(jv*heFZFYpmlKiJuGui$0yT-7cUCPVxntsRbfKCfVSMd?&3$%Ic(Ta z-K!s6-}V(PJ1CAz7!?+5o43`FdiCgQwSKWAkGds)#lU_tB}B%_RhA<79K+5Zw(xFs zm=O_XL7N|zG{g++SBw7xG}Um{;Pw(5{%ga zaO9jj1Zgt%fyB$#o|ps{3D#Kxf4V5}M3s44D3_Q}|D46)czMz?VgH2E#|@%IIc@C{ z#!XQLaeA4TD?QlTptICSr~6C+QgnM;Ej^CAw~>eD#Q{O9vuR*Rf@<0I1Gu6$WN{?M zPn<-DJrTkPGggV^4TRnkbQ|flrw*#EbdrB0*0!|7yhaULP+)I5rHKGjHR4D7lyO&t zn3F#x){Z%{j9M!6DI?<|@;Fca@BAypJj)pMtFofRNPc33i&sRrxJ{~q+z2t24WjiU z-zh@8`h-67d^=aGccBCc9MG0)l*;X6VRtI&s_u4^lfgbjPSoYvo%jRKCjo z9{Vlo2O<1`R_`Y6#%A}EXMyr!?8Zj#7>#1!+BCC%SF-6JmSuU347iR8o&%|^S|1G2 zjn4(F+AlHgkTNt6VkbT)Ar z@)vKwHmHJ+!clxW2d~{N1s(UAI*d>;=^a~YG1?$_=YyDk?$zLu>z+&Q%Sdl=24!sE zCk%aE-_9Yf+)ZgtXQ+EoV10T!HO_6YK`33O0- z@#1x~R$ES|uqO1Z29`R?D=u7Rvjg>m00JcQsn1bTV9|K8ZFMTUx8XAU4~k0!H1l7| z5a94V&o^jW?^5F2q(Ly+pD%~+QrL~9{)P_E!J(daVZwt1-^(b!$A#5_9YYe9r?j6W zOj#JNHkN!Zg6LYurOSLWL2J#6av ziHY(fnl)ta&oAbm(?~hRxiB0bVmk@KS>WBtb8qhv#UT1$U)BR1q57_1X0|OtBtQFD=JhYXYi7}#M#=g2L(4wCwjEOP#Uj%Hm>`vea>SPtfkj2ov;M%OSo6Q4Ess0cFzWcgr%hK{pIqPv(1H z^W7k{Jtt*9>OdZcziZf9cl-Sg*_Z-HGhy=p)A4NFlwqjdD7j0H`*Yn#W!;yb7f}BE zp^faYgKWtL9m~SibdwS!OGrb|}1Pwl*|{I&Qw%jUx^t(rm%9t<=GV1{zDER`(k zuXL+O1QyVMKI?F zW!-^j9pBFmJfA|k7b*=dYzz|Cn~*Ecc?47whl|H(luSB6_jr1Q>)Dg^Ke#!3ch6_t zqc{u}%Tfk34b>~NSq4^xsc`0I4UXrbTVk=t-uM4b%?#GIGJTVF1JwkEF z+Iguw$>+-aHqwuO=YU*tbZ{n48tV}epW{Oe5N zLvTZ;_fUNSWVA{qEGTRgwqQSIfO!TU`W4;1L!e2bVU$44<$^ltNgJl?^U{ zjXEd<6Pm*xMO-M5oq~E1SqZHeT*XXw#;nHPki?(*0Gt}M5T@?4XZ`3jktZhD_Cjxb7pMUk9W@mU^@_9uNFq55Fwxz zNbl+~dx|DAWRrD^$6Iy_aqAjHs|AtG8^Ec2aHFjXHWzsy!}&U)-AiG>dh$eofB@Gm zllP4!Kv#)4z=-1j=0yYfK@V0hr=C%k_X0iO;KR>Pla*f6gX+G2+gz+^y`}Anzpnz# zb-TDfU)O}L-9hZ^NU>IY;aLux9XscUmlXPx9xVs%|2r%bH>`AYmwa}ZiQ#A?)$_@{ zVJDqN^r@~SZ!UESXUP<_jOkZ8=uh&z>hIa}_p)dnn^DzAvb+;;{K$Id9C+XenDT7< zZ0$C2@4+6Sw>!vLxuP!n4{O)2LfNMe3lwF7zILW2R;cIvM8QC(QK9`hC?JI&Lya<1rcTuIqsN2}JF zS$43>5kj>>e5rB60m)6FZgjF-zpet$!Lm6{+>hBQDpN>Vtg%7Ga@TAwclSaz(-5KQ z7msGS2Ka|h4EyY>46eM;I^0b&w+z_AEi(nT_y%x2KG~}ZKeTR${E_qblBtD_>*E(o zNMgkcg^10rT}1Y(SR4{xb?@ z1E(PqYkcYPQSyt=Cq8WfFq&KXfXH5IV4KOc7e>X#GvR&tZpyx{JAH%se_;@KI2Nztx|uOsX^-%Qnyj5`f-QPjY@61BUh<&S5mk1 zP@<}z5OKFVcKc_y#X1g3M!_Zy9Z&w>vaPivI(VN?o!Yw#&M&!QAGP1Ec;BjdyA*O? z&fXec%HQAzp;1M)L&P`IUjeh+_C7(I`8|2Q?X`b>+mwP;63V>wd_FpRJG}LYd)*;; zwG~Ncu;uRfmSNpC`P#jf=gBi^rh{1Cz(o)>6U4l-z2^BA@rLU7ybmQXdC3KKF<+^(_64`Ow!{=2Reww z+``Ut*Wa83(0w^*{mXANVPI7)9%G;cocV;V_p#Vbb&h)l$nlj}(d8vHscELZ#x!D( zOte0FhvWCxdOWwy$qauM5?%TgpJg7Do`6s64uS#6<0|f^Lm0kzpdJAX+U*p{JF2AoKANASfYpjJi zu|}3zN3j-RScKNR1L5AR?K)_o>n@tAAZv~ z!sHEJ*iNPOYAvt{hv`d+S`D|PXy*RJ!MrzPN}@5lejrl_P(bmRo12@WLtf0lKKY9l zcC5GB!lCw;m23DC1cEal#|~AQDfcv6wyH}}?JV)1q9hDhhduZ9;2?sHl27D$79Znq zHA((F#lcDUr9=uV(0rcedmxFQ)U>Uv5No(lb^u?PjT2X8Bt%oOQe=u6eyBUO$ySSG z%PXt+IIdr1ZvJ?~m$hiA5d^lrJ*_8gj#Q$nDLRJOR^a~KYbs$xqP)hlMgU>5{)=+# z2Lx`goNuQ+lp%wc7Y9g9n4mo}{6HAeTMy#GQWhVw_JN(^)ROz-e_;ilp?nUXj!vcu zqd)QAR$6s_9bWDcq~P#4Q>8b__%>;ZI)!v{AVdr?_tF4=(_#N^<>G>H%7QBJi+uE_%xwhRWEGNaF_e$pbmU2SB;&OtGOzwYg=U%N8cnGf zfO@gLhlnJiH@5-@OrBso;%ugax$==FxCga0GB6W&DmObqE@#X8G zSWpD#9f zv4T%#jU$GI^>k?sFxjh#p4O6({By7OMj&2CQ4DPIzJ6**pltbG=kH}5E9^HnS(ZR( z;7LuE3CCOM08MyIdE_)(n^fvbCjylywGV-*Ua057Q$ly$HhnntXa=twHvk$hg0w+b z=kK(HAovo^z$#lyZ&#%&6g7_xPOg@($0Oftku&XYZ-SMrx3oSLrfP~{3a#-gcv^C$f zG9}6P2p8}0=fR(s&~sfdw=C#-<)=}`+sFr&+u(}PifQz(`{WHb>307gdv6t1$F^;a z26uONcL?t8?ydoXLvWwCThL$ug1fr~4esvl?)uN{z4kf#tgP4jcHipbt65ZyQPoEu zt@YM=t}VMcZSlsDNplnQfg~4$$IMM8dD~3Ltx&l+FPuL!cxA0P4vFSa8LtEX2Ih=5 zTjh7Lr;<9lp}C-YJ3XvY%U>vX?z2QIb50ELUN@`9U{p1w_Gdw402Kic=sN9WUS5>O zX*B_ez(gT&y_VA2Y>aQ9(^t$oko_>KgaNOU|rha;mS82v|;rKpkH$6^%h3KAmEa?Qg~EtQ?Ba z;kCG_tLV$0ZzvgYZbYK3vJu{Az4gUq(?w7WH#@isr;bUwGTufg1IK|a-fO7IfPq^D z-Zy`pwi91A6bt~Cv|}VTZK04&kcRi{`gJUJKePaB!Y=8H(V4yIE`MhuthX`c(y2`6 zn!Y;)26G^by7mbavyZLhmNjhn(8&rTRpbv-lx}6LX-`EdD2dT5Y(bz-Huw)vq zLDnhlVst~@V0j?R}|p*7Ef0w z*@!ZqhRY2|DEAm!0>&T&>ovYEtzz>_z$w#@=YUN`T zF$XV=wxLZLOop#t6wAYDO3^BnDw{#I#T#ZHuyW_UU7i*)@OK7gj+aow3YD&xMPVy#rCx{8MUMM3VOOZkIU<5_*=VI^A`pqm7A@puOjyDIGEDrC&UrsbUW$Tams2!+Tkto(&7G_{o8fCuN+L`War;n*+Fd7Oqo- zu|-}M7oJXYPgeW`;i_EgYAY|c&yR%N)Cini`~Z773oVz4J5+pInLYn#~m z^ewDsxTI@h(!#zW8JYsNKK3jAeI0bi0^NipUKroe;cuH=>xaa#v6?^NO-@c(vH!dt zqn|v8(NdzmI%-=JfjA_69-<9T`Xa#UmLF&#VKQ5(n2;o6;u(SoxfL}N+8?O(dag!Q z)v8-8!Lg`MUe~B78G?FZr3fV^islDDKM%$Es|BU4;{GJO79l9?c5FVoeVu{+6FmyR zOj{*jSH+fb((FIA0Kx$#kAuC;B1Z@0IL6ItQFa?~{%|Fn%KlmTX-4c|oDA5s!LCsLX!PMbl@;jdYA*QDuz!xuM4PtNZJ1C6 zH7b6CJ#vna&2b}2JR~tYnl&mXA*{1u18jr{Mo{VM0v!1i6gHIhfYpMw$4d^^FRM@A za#>YT&uL2z5SrkIe~6m8S`%@j_`vq`PI=r0nk^6(Vn~*d$=dm2MoA+3?hr3;Gcc$8 z9Xt^57iua3UA~p>%zL`yHCV(!#4RDq!n)wVBZP=)s}b;Vk4pr%} zmK+tDf7ZZmy_zgTWG96&;mnbf-OXvG<%h45=3~%8;f6-PdNqJ#2@%pKa=h{(2Q>EYOpd1c=bU!xNC?VDOl?i2vp*b|DMLDEe$m++%z6tbVmWIi zDt!V0Ha8$)P+5%IE5jx(j&$gxVm4(-uQegla-6hvEm*@YZ8(7XNj&e+cdP(mt~vxG z4c3T@6ml4Qg*Ou!*VVq)%>pG^>&Bp9ruphWpjuZPEj*UMtM%SDseOG_wLH^qm-asd z?|%-mg^2ak0D!QZKsLg*@V?`XE`Ue|GL)a#t{{dx1ho|=UgN-YiU`9i`f8@Md}HTSpzk?k5bMc3dfmF* zRabtHwq&+sDdt6h{5E9$mZsVo%0fq}1_nmso5sMayil!ZzfM&?+X3j$uV?@&Z~oz6 zjLW*E$db~y`CTD>1^V+1Sdq%2`cFv^<@^zol5Kvfiiw+9J=Sr^2U~SA;@^M5F;$a- z4RnFH;?FXFhA8-|e;fNyr4%|#>#Top*_ADQ;qT5k5=s-{p=N}yj>|m4Q3BzT%mptm zl$3`bDjzYfE8_qTRWXV6GjAiiFM{JJ8Fd=TahUX~Nv$K`18t58L1P=kx}#0aigVWA zfz~cfG6yBKO+@roZJV$%{!T=G;w-ct_|@3w5+!I*kogbHqfOHa*loGUjZ7I~uYEcg ztcz-zyr4mdKUd(7$8>4j?bx?E;E~vi;|N+gNRb_XIT#dS(iMl-F7}vf=Ff}nPuUTT zp2;!2_$(n(x^59<65!6e*niB0*jPqcbTiud*y~Jxl%v_VOR)O|`4uv4KO0V66`K~dUKfpg+p5vW9q&TwUr4eQZ@R!3bn3t&mg^rKDlqGlDxb7^L+<;S? z57oGHdo+^qYeQp?O|H$2$}U$oR0Y6hn<5>0pBbX$I6Mm3;p)U7%}HimeVv@o_pL8R z;M(tRC6g~8=#u!E5dlo;r`vW+u0B8gOs+Yyg$_^$>daCK$Bn9#XmRicl0puc!hQ`| z>SN46d$C&X_Iq7Y{y6%gMq4G0bW@uA^~?;$5F7e}=U39^M|R>5HA6ipqBLi04qce- z%lMx>)0%osVH!Mla52O+HaU;DRS11)_1H)oQ_tU z-Y7MOrevS&pcBrQqdB%-O=yII-n6yx&ix%P1RzmXQI$xMo=M`P@LfLXw{lc*USIXM z(gI|`U=i*3;Ln??M-jz7R67OkJ+JX(eW^?qCVgU+4lZo2Qq_8k-2SkSQFjs%`o%hh zi35cPdxv!1vj~w^_HqJcu3vUaNMehLSgrWDW74i4L7!%fZSGR9Sv@#Ey1MiF21<`{^9MbP$(iP{{~GhBfI{;UH)o42+0*c?6`pw2lnQ!6T!q_vOffMoKJ&bgps{p4?bAIG77Q)U5 z@9O+s8de;O@F3+A`rERKcdzRPS%aG&ao6egYL;Dpntl!T-ys2SdVqfsss3p=p9!!U zXzoX=OPy;&?eZS&atZkp^w~v6U{G?mSmJ)QauAu6BKBnCA%}Xg***PxwPt8Y2SuT! z&KuW2eGJJNYHp_aX>@_jXV@aKd4z4;R8)>!hdlr9Np2H|NITjoa8z0OE{D}Dj;`~? z{#1~aAb>E23~b_W7Zpf!HxlPLVM?V1cTM+d!0BV{7L<<}Ju;!_sm1v}+2neF^U< zTW)rUb7xAB{!Mk`vdMe30l^Gel{3g4?k$BSR(1z^v;Sv_v6>IX>nC#xBg!@$q!P`| z`r+iF44EK1#B?RRSZ^G`sZGiFE_Q+T53dkzn%rc`G4)qymFMAK%*_^6Gmd+vj?OR7 zTF_==xOqoE^P#~-(Edm)^3scJ3BB)XOMsTi3;qNi-OOLDZ`Tcetk#JCK%!ut4bad&xkSQf6(j8C=21V zVt^Od$DK*q#!>KZqt@fDgP!+m)J*NVPmS1$tVu|a^I<)B+muis!T63n4Pg%IXYuYp zZoQq&9(@yy1r-GUDAnB&>R4vF8}x`d&buk&s`D@3z+|N3EAbi)S&W zD&BjO1Z)C9I}kx@(H$2<|HJv%;@3~vCWWWb!2xRUtazGM?3r`6H~>Od^wwi7dV(~! zl{02TDuu8*$XgK8X~7?}qz>O2liiS7?T<}O#v*5l1WP)^_Dy(+T2@Ka2E5x_mhXKJ z(Om@$EfqohC}hFo%kN;Jw^^KUzmCt^H1P$YT zKT^K5u0E#D7gTJ}yB6q}Fn@x*I=rgTMw#DK{cQUee17nfZI!jgMwt@BMtaaYICs@v zNh8@dQ~V_!PdKmf`oO?d=)Ug#DSLcCd{lwM;S<{*U=*EK6y7l()!v(CRdf>C@+-MNnM&iX)k+?ENv7(dy^eoXO&(~(NR0(&%)A7b1S8A8=f##JvB0TNy zxQq}ekU&3$7rHYC)eZl&+kr*U;!Bs+UtjtuKj~l&5sIh&n}=sx>HRD*gEEl^KGg+R zM``JS=%qW&?ad7rK}_x?O^&>(=hL8Vgj8sr-X3`1e#ZYjSp>S0AU}YY!&;+XWK7VC zn_5kmDb|)t2*0S#Gu54%P!1cR=X(l68K8M=v>zB@%L%ssw`0;{k%r zFB%{LDH1FM)h{77`vme+>r9n@pP}DY>7&rzxf*>lE4`%Emc{BSuY0?@yXqF0bRRbW zU;LaR?Y?{rb>2L>!d?DyGOjp-5ieHxZ4utS(qRSBqS~r5*oah7ar;T#qM{+s{N7Qo zmB1Fo6eEU>@^*O=e{`OzP-l&3*>?!-Tfg^7&e?t^c^@jLTG9x#?K+~m@c7_#a-80+ zeb7#MEP0#Siayz+${rq{LL52?il?ni;S{J8#}GU_>W@L|KV}5bNOti#H==N0;Fnc7 z=}?&{uTbZHww%SY?&thE4v=0P&I;7-UoFiV?EL3?>%#G%PvrSmuS2VPo632bE@r|_?p%7jhvERI?^E_ zYwGTh`x@B6WA`T`6T`KOo3@tm$KCP`#HE8(4ULgXC?v4^;!Y@j3l^l&RS9}~OojZ<)?)`8} zGhQ^~h}p`yugLY$tIP&$dp#~Wv5xw9Olqvzm37Of!g*aEYIyhf{`9$bhXT!JDB)ts z*FxDN*^|PMNlx4pyVQ4exMsM5q0&?X6H5d3socA69;5{tIH%ZfiFfu>-NdtaP6F)n#KwB}hoc4g1s%o3XFK-s?PkKc@Qw`vNL7 zMHEdgMh_@7=EIWRMyOdL`kOGyHQLJKqzOWK+}QJimY2 zt;ki9svHe>?LbxrVM`3O_0xe&6#4$Pd20dV6DmXT-T@ZSB5lTdwCogde;WD6QVyI* zf69xFTv!HZ>O`l8Fp|FrbAKHGMHzH7QcY*#S5FK5gZgV4I=D>^uV5FbOa2Ve^gv5D z%q<->17f}y+6-2vH?fSFyI3N@GnR!oOG+kd*GYmgvS0~1i+Y+IEr3%?`sDC8er4GW zF;BL^YQOn&#y?m2e{z=fNMAa8x@B1`i8p%-}Xj z+;(v(%ws2QKT^P>U@zyC)TKxHL2gg8;vuVI^JlB&4JxX?Sa8?{I3%%}4gBk|Pqrs| zFC_vwOdurTUq*N}1z^Iyj{O0x{aynBSg605Za7{G_CF%PzXU%QXzqq!$bN=x|5&_6 z3_t@1R$+mJ{Za4vFHnR?8rVYdzIENl%f`6Fne|wfgT4gp8Q6Jl|5?T#LO0HroZ92{}s+>tq@=2nQCRlahur zRhOwXrlB?F4D@IFQO9iFo22ry2#MkmW4HV2zTM(5TN9zG{uR_WKK_n6dOxn3#a5Wr zI@ebHHn{jNQj#Cad<}UF=2Yj<%vPvrulLTn@<>>G7(pr~c`x_xXL$jiY9*n)Ut8^3 zwL=6r_+kb~NiOgotZ0!u(-u!}GdV5zID3KbQf>o1Q3nUDHL%L#Dxu;5`8Rf@fT zQf(n?hu})b0y*BA%yLw224P`Oo7H9*XfC1FS?U5Zo}eXH0js%k=AG`#%Wr?BcpXH5 z%py|t&z!LCn*OG(nU(W+wXU2EreEwN8#x<QBTM>?C{4-Cn4fY+X@Q2=>lsiM!vyT@?iF_4++A>BZI3@QsM;a9@ zAB!hxDAsF|@U+#<3DIZ=19PXY+#tH|Stn-*a2uayoVg z(SA%E_jBJ=JjWU(Tx>)Ae0as0Iezxi5S+#Z*}yRSlho3BGt;6!hG}ibt9l4gq9ek( zIbwntev31JfGpz1f;P)}DC4#G{OCIq*v#8Ex99ZOqZ#}AMSMe@i&2Z4DL~K+nq#Mi zmDZ6QSFBcv9-gE?63+`WSei(Ff}jfV52{RXT_pDO7F5y$2Mkk|yo^8%=oqKrg;bd_ z+Ed`_LPvA_8P=pVHU4__ei+y>W2LZCw4EjMKc5=}V126^buMv2)_M0Sm6MRMwMQOD z@cR?Rdlb&p0tQ?$=a0qZP4$G_MlaV-wG?lz{v2(&JF6WAy33w(zlffHKw>= zx&6yk$U3(@FPVjZ);Jc9zmXbulV8|kKNd|Pzn0aEl_`t7r&JGQ*a;S_T5H70fx#AOlvU6*nO03{*jwExlMD*(qEq zCskfv;0cP3`IEt4JEX38@(W!G-)!RI3p}NWnw!jl)0rQFw0E%i-fo4(VUI#NPpmt^ z$@T?vqJg%x_-CxNhwi`PY|e*0?DZ?pAyeHNWF}LWJ|0h(ovv(Z>9ZsuI;y)=8G0l- zw&~?CW?8nKf7qq@0nUkM5{ytuDC$>Xf3?> z^qN<+_d92Ipf02j^JvaeMaq(eqK6Z|oZqBu=K=>&-_@8tc6JD{oE#{w2yl zMd89A*SxK1v#}WMN~jJR2i4sV~&M8 zm9v}Ap~pl(rc~GiO&ufJf7WAOy`2nB|62HKe(q-+k2?untT~54lzrJYwM(!vLHjJHnOqW%IQZzst=>p7LcA*tKQ zyT22~ZZ(K1UFdmw>F&0CsAVwll966Os{@KsdP#QQ|ATRR7`v&k!l+NpGI5Km=Q~+i zS%=3fgI^NH4z5oxE_dTzq=4eexMU}%!c6_yzS~0wPu_aZdmvM;nI-ke>lGb_nST?fuJI&}K?W1e3HFK2z!JGUy=oY#v7 zzh`7}3+?J`&22v+BGGag6?rY?^>VxS4AV3J`cQchP^f~Yj6JDvGB4&{7-Soy4#Ae1 z${~Hc2uGu3=^x?@nQ^(no;Fm1q3alwl=OKR6J(9g2g&LgjH_8frqbRp7M7d@HnMli z%7n?SMo(_|OQ#;G+m!875DBmllpmFgvvyh8`g-hL?onMc&bqEOT);Wnb(N5p*GG`( zZH-I&KC`1z;m+&D?*cnU)uSee$~)6cdeL6ONG-#Y-43SX za&??$m^nseAJ+J8uW?nfrT@x(FRaO{;50m)T(78;4~45urs{{Y>gf7)i7MZN`E4cn zYQb-~>(qog5r5%)KH+K~$2XaySu4nBqzFCkC@|#f)Qjx2Yg_q+%N!HdJ=Nn2-HjGb zQj*=lNoe7j$Q91{;{#s=9Y!7OBAuHPh8U5T&pNi4MUMbDrci`!5STJhJU}y*7JyZk zn09Np6SuNnQ**=O?Q=dVNd>OKtaNbGj#9Lt=Q{`M6kP?{{cdQX44O^UE}?KwH7^BA z*pVIUZNI>eUxC-OoPEpx_{}%7xO2X+39^ZByR>d4u5tZxc^aTOrW2eJbFZ(xX|4V) z!l5(CzH`n*u$?~3D}BZ8wtA>c*s-iw5pbIqo4rB5)la>`zW;V3BxCa0u)+I-otZ;a zH9efV{wGWw^Th>mXpnSld0*@Uo-}yEr=GI(eqy`&_nOXMHN9{iXp_H&A-i<`Gq6DY zjs^!ZEx}4^NVFPZUvIm4-jLCj^?zys_y}|!smfY61z~kh{bK=D$w>L)u+ zT415yOwL_6P)9L&gLq?CfR(!&aG@1{7NprNP|8ojk|F#x!%gRYuy&!19g4JxrV(dt z#uWVa{#wTl+evgX^JVTp3aqe$6H$YI-%e0VyW^~ij`zyPl2z*36_#Rpn~LBgk1 zm9b54B*715T41_HwgX?#uB6MA&ff?ICb$FYUPGCpcLYHKDUw>HKpkbEEAeJprLWrZ z7x$;19poh|4+^d*%_`ducw?Mtlf}j+Y5%Jw7-6Gl?8-4mT*V6woM>k7Sp`OK?#LSf z>zz8nhhB5C6#uNpVfF6uhc)P%=2q|h^HP1uXN$@gq80lIY3W26m>?Yo#$DCA@rXi* z(KT9oueWdPKc&WuA;cj~rw^%7_B%IHju)?e=Ik3gZ|7HB-jcK2Zll!w&-8?XC$SKE zsU!Rm3DuE?ShF~5Qj$Z+5$#w+{M;@?TR2)DOuEZZ?nJvk^u~O+ni|uJ{ZE3416a4T zKfMr5b>Wu`@aI#+9ttn47Y*3QJ2hbQDfl3w))B}cJ8`8S89M%>La>QTBG~;P)cVB9 zV6D=9U@1mV5vrAPcf@4Zts$pZ#?-De7hrl##ADvlxpqkRijQxWPc+NN+n_)0q2F>r=R0DT+5C)AB1KP%Qx%5V<4v8PeJB~-j1aE$Yx20a!`nKMOUS74@ zb(UYNju}8yU!~LKB`v=m9a<8{)WV(?{dCmx^nE|qM)hUub1a~CSz5}xzQ&+HCfP4X z=U@90W0U^ZND3tSH_aw~hnXmJ%Yv!0rbWV4zU~@^rPgrIG$bS_??nhl$L&atbZ>O1 zOUR_DU@=iYjgi0GXD!j7@lue_2aac3VT75?-L|sKR)Trmlvsrdis0Q9wvLcL{Bj|G z7OPiq{c$DUw^JjuxUmdQvncJh8tu{#IdUCNOo)60iW^I<7CDKvWL3moN^1K8kQDIX zh|c*KmUvg#+2WGq+ZFLy@c~tPBgUO=*ahfxH=anyXD`2n9>i+?WRdY0a+(Zdq+HfG zEDv`do#yBbzSw)u!DfBvW54>~*~xz8Y?3X*7Z3m&1hdBEO1e99-+y^@e(&SbX6OQ3 z$MVj4r1eb6>bX4M|Aw6nvvu@6pPdaK`5wQFBfIcn-f#(S5^>i0JCwZAE z4SJ4N_Fwz9zHYle>hIg{duZ;LgMy3p-FRzN_CSc4Ry|*O8W^5y==f%z5^JvsWIz)q zPg_BMn#J5Z%3WkA zc`w`-Dd%supIkpc=YFoJmmUe1cKtPMW3Tu5xf_9VTM+*4m^lcU497B6Ehs?Q~$ z|5B^wHcnkKS6#0BVl4#%rc2 zV!e~4XNWGOgkp_7k*pjph6!@44kfTyUhvTZK{QJA=~99W*hFYV;H7nVLCm*Wm+Cl1 zoG0tyCJyD^S9OMysh=~v{3)kaJ`W<&r@IL&VQgQX-yp(Jm zZ#C$?^|Z@vmDk%a^W^^KeM7c$R3*t3(=l$dbK;TGbAah#s|t*`V_}YA{f2+D#9>&!d|2`FOP`n&Bb?? zv-3QZ{sc<{vwHI>wayNsepO;l)Ga4gLDss74}Es%l)}Ne~ z27i$@K(5;;lD1=aW&P9C<6XP)o1AZ(;dSDRNx+k|X4ZTe6?bXoghdmU+vQe-p#wy- z1Yq_hz#1KUbH0;r-|yo13ub<*rNi>$-o?1_?Kg!^f&KZBvt}3Jyr$2d>%snhW1id9 zt9G-VwgXG9cpT5S;qwhrQI2&d1JBP}$pX&fLWSeYVY+V_UxAzI!kL8_A<#wDe2na~ zHK?$n+#ez4Gt{I%7Bn5I9mjrX{ii#CK&C&o|Ajjp=%dUsb9%+oFJ1QMW9tD8l=}mz zZRJWm+M>mqKBP!{k#M>LlO5b?uzM4*lg3ZSnMxT1RSmKv1Lg%#K z#l%V64dKfm6Dd_>fa0oHQ56bdM7^Kk+R63TFWowTm#b&X^yP4*{jWl(Ji^`w$x_ru z7Eae$QFL9n9qs#SBx@;9sF2CNI`d7a%Ji|_BY2meBrAGW~PB-BX0@)2iA?Orz+o^F$GNw8;X9L^0nLI_sq z>*NrB_n>1ecK?(21OCMu4Ah>ggzLkxW0|R}r&IkwPDNz>J`ys*|{NooUNB!|G~!oyRaLY>Owdd_MvdF@f=S_ z;qu{TCuaB3QLl9Nsbt38y(zSJD~*z5>gYGIK{sB0fap*4Klk?E2Zj+{l3}#ON|p$? zA&YGxWb&~YKOsOo`bKRn2ukk=bsjBb=vE}wcEFW2&q!`&H8?SH5E-9lH zq5pwf!za7wKoR;b7f+W0|LM-&P9zxpY$A(r;5Pk}#{`>`l??=q%QY}UC!IOOc_ z@bRy$>dCW29b7<~VC47T(#_%uji?X}Qy~50Slv_n=6sUWhV6XX3Z>(fj^jUbmo3Pj z!#D*T53k-*Wg26zZoYJ5qye20wX>Zf6m<|>|Dm_*DKt=O2^zyj#6A@Xx8RSRp3__d zUFnc8xQ{lczCw*@ay%v@sWL2 z{FOV>aebsEOev?OSiVkf2CmLTAbwGT=t(I&}*Bll3 zsT5P+zr=b z@~_9eim!{*PHq4FCH!@KAp#U!wjtw}{__Q)0NK2tgI>tS>HqLsU=@Uve{O_g(0Ii^ zFoXW!0YIh;8g-NXALb~oiwYGe)kNE@{gX!rh8_ShNCa(wnEOAwLxcmb`ylpk@*nc% z|4b0^?^_~9G5C8W)W3LeZ&KiO1yBT9|2JI!E71Kr(m(@miBu|R{{Mf}|F32hNV08_ zCRM6k6-P!2#YaYZKX*h&2|c}0=vc0=AJ-JZooiYQaf3550u#7FryaV}Asp)+SCU8y z_Awor!<&xi)}Hb=Z7L_Gkk$NbcEY=V2y}bkuE21~3=2V4JueDGu_R3{U!&R+et(O% zF4G@z1BH40<_O&@5hydr0-59*!PToJRV zYSW~6j>g9t{Z=%uI`W*}!9Ksmyd)X8KmcIQ#G|$^4-eH5s{d>`(1k^Lq3dSDP1a7Z z8gomDyu36ZxriW=pQ{!&!rKVki)GK0>ov+8!0cdfe)T@yT)E1L4x$uk&%-#MKO+?V z(&k6coV!o{g+jo%4bRD@Moo#+yRN*j&+?8K0j}V>Pu%@+BgR7oA z9nI_jDWfla+!Nyoo*^s7RFE9LbZ^AR^2lphm3tKp^fsOd8w=SRnvXswwL{M{uig7R zlya)Kq#Le14JP{SSp%FSyVzn7re9h`I|+D9aU`;obrOA5)U{Gre#l(tkNe z3}0^d_1Yi|4X5{{8xuwEn(Hzof8B0GqZ3kKVIDbNvNJt7zOZO=Z!1l!GF0NMOwb_D zJvLsAM_-u6RQ~CGu-e}Gld=??<8i1BmsbU~{Q#DSd7Ix(NpE2+RMpRu6nC*gUBnLE z$BjCSwdIXevXaz_Jq(r{$6QBY_7?4de>YsID3wn=eZH~UZ5L|9TirE z0|+A5Y@Hxb*g~skAS6waWPJ-;T|OjFQol4G81H2| zW)`Hh>o8)#oR8q8wPYsL$x#65UKjJJU0L7HaN!vkV*YXuyO$}6sZL17i zr3`~UaHr_umVL&&M4jP8@ayc7U`S)L$PEhrPe#bnz{#)!8x{L8R{oH554>KR;J;@T z9jGAX>L7}c*4L=5+EMTk55M&6xL2|BZ4`dteaX{O7fl6d=^CC~K67%e**X~UEUZK* zh+EWX^{ZDVo@ebwu}y@zc!((gF3@5Ub0@s0r92*3E}EwN8AO}G3-M5X0q%p%eafP7 zo%>FU*rwBpruC9=)zPoj=C>d-sgr=Ue5?DAr0aIX$iW}!n+Xa(>1E<4Rgn1^&w>!Y9+|HWZTX?^px| z!i7C{-JB6_ZT=a#@o9^6&+eM`CPD362bfRjtLeJIkpK{i>{eAq?sdm7n?D!k4SARs z$b?|b6^tV(WNzw9agepO{p%%Ua?PV|(>~*Ja2UH5f?KMi z!%I6Z#h&K9VMuS_a6k^!%i?QhHiuzXRP6lR780hMEj8y5HPhE${ayMuPI&zzh9^D> zBs0ErIiB{TjAKR)Nz>c}S#X93Is$R#!;=h(%3`m!wl?wMEaaR4NsNsP z%odD)>)(`8xGJbXqay(8hT^bxGI)^C;T92vh2G*X8V3}SMx%N}nBhr^a%ibPTMbM| zzV|5yoWqX~9iiAU3}D7J$faja@@N#@A(N|H2eqZtjI@p=M*o?LxC8O=mrp;X`$Q5c z$rsFKdegrwR#>$4?eH1cs3C)bTUbxu>LF8;-+`j8%*2c_v+U0vm7>#uo@RS|hGMK< z<>ZSwuTZ~{tWUyQjv;KQ?HJJ%W3ooWMKkD@Re82|Mn{+d?UqxcM5GDX#xUmPBx$aW z>2q#i5X z%*;0{;eddZZ;PlyuBV45GFMT5|2m{LsK|+d62-WXv%0)Re2(xMiZv~^X{OrO<^HZj z@qCehbe>I;s!N7DKGp!COVbpGO!vH3#jX1HY9}v`3Wx|!NjUkamp-wdY54r)%=;s2 zrFp~#+lGc`QG^aI<@a}w-gC^k)!1^9dy>n%so}_kAss}_|(jAKQj+(o}f=A2Fk`n#|*kn$${8VxXp0aWG<7 zA30J~XakZiGXhEe7KrxLe>C$boPRZ`_V$KNOO%?1RFCrHP>;pFzCJ^-UV8b5^aKND z0YwN@RMtv0Y}6Ta`GZaPJvu#T->Iw?&PUkeu~`LNVn>SfJh{rHF-7FJk8MkvGgz{8 z8=^n)(p5c?ccI-Z{HkOpnYeKKMC4?RWKb5z_SvRCrdUlEW!brQcBTx{-03>1bm0&( zt|RexZsL1(ENdQ=-iV4)-Rx2#lF zshEPbVRQ=5FRgbpA(akuo+~hg{*rs4YZ0k5a$Em67hTK$$4(0{PVu4fTd`9f$bN#= zQaRH6R;%%g<*AT(sR>`!(j3u1fARfASQ-vvl$KDf2_DT2r0p=ves!|Qm6(n(F0?F8 z!oGAsS+COz%sJj3{v50hTQ3bU@A0EB7M=plW6%=>pN(g`TJ9&_5ewGz@UUT};iSOE zxtuRCWZT{JhW7wd*hp%SNBk`tI)nzktS{{^r9D#Y(31$8K;Im4oF^^eT+ zrJh-0p}iP49Hzl7@lfUc{t>{~!kI~ZLRr%Oyv1l&)R|_g3FSg3R)H)}zFGdkm^Zp9 z9|3ed?l$If!n)E9Wfk<4bV+>NKF#Szt+*Q(lNw&RdMzU<%;ot4wTY|BClIzsk%GkZ zBl;p5GugB-9lE4awPd%7>@cuA5wL8k!YXr{;IXQ)p0}T}11#dOGG) zXRCAH=H^R(?S$!VH*JPdhpfy})*uHGS@DCOzYUXZJVEu-{W)(;lEf>TeQ(U-xjCy0 zPXrC^hj_xNI#9XzOd7V|e2#6hxbGl*U8R@p4gjz?* zvf`iBY4ePAb;UUG?Ae_|6Q)0tdcu;X3-n4f>Llk3z^dis$*3=l-{lqKt-QiWd|2FV zvY6Oro;o*4kFVh1Xe9kz$5--YJA#n7^yld&qS3qAspr_jc&!S@^`Ckiw!KXc?uX2APe-F|ydO){Crn3pv1t^Ko6pgAWVNry1x+Ed7!I3@89E$J3 zhOD`?$sx6niNXw%T!TLyc5on3>e4Z<6J z0TFRW{Jy&J(BfvCbRSJ?G(A#CuXJ&d|#@$LWdb^U(I-`j_tb6{<5B}YLl5t28H z+EQ?*{QH$)R>x*`jn8}GZ;z+9c|WhO{1k{8GS>I+mzD3&=bi5Zez1aX7XyN?x>uF& z^Yg2|rj}IeZ%9!ag73$j_g@qXq)z?bd*%d-MeA=;-(R!eJ6^BZsPLAII#%CIukM#S zUpn^zaJI+X;aXLKl<&Ugot~4x)BN7sXofQbWS~;!YB&5|rn3|LUdIJHaRNobl3m^k zPrsZ`?K`X{&Ay}iJ-iyeJH2pBiXyy;p6YDk{2hz;{*WBP9c^|~zB6OAqRbRf}bh&yr3vR@{+Gs!v;bV9=`BxyTL&!Ld(u=KKX@Qpn zw8$ZZ20zxA$G}=Mxga+wA%b>sO3ofO<3N+HRA0A6rh2@K-Rj?V3nmj?{O|!aNLox- z4NcmiPg@Dv&B@J~?`z9vJ~ce6Lmm+E*;f?LXU|veAZYQ^rP{rFD$lZAE&39^Gr<^) z)!n`+W%Wj|p%az+v5hA%fU_#rIHGIqd_pGieUc2;_A9R+j62C9yyv~+rO)wrb)}HG zl8WfGOA)S)3~ICq%9wLGa_45SlLSwKM))E2B>;&C+p00!w%&>T)bHLwc<=83x)3xF zH&UxviNnr)_Bt2)m^)W$ac(9`9ZKHqSKRq&@z*{oOnsth$s7dxjo4+}1<~Z9UE^o; zQs~|-n(qm}H|vz3`nHXyXY#bJjkaR(&^j)79N4S9QF{p4iIXOLcpx4q#)MYE^< zc$(Y!)6@+8*>?K*mnHQiqj(5Tc-#!OYOX z$EzwSRYyTV?5JC%KT-zbOx79FYD7s(IANA}2 z0>C+ANtZ@*d>VTzFX0tz zofcGRs9Kd6xuIlJlA4p_)<7JTGnjqmh|l!|%>>-Pa$}T(F_BGnJbCq<(`$wESZ`ta zTwUD%5Ya(Fd%Gz^xIP?jCb{XR%k1VX`;*12w&o=mb?SE(m(F$FZ>>%#9jv%>9$_BU z&wmheZ6g%!*{u5hJRDTc6ombJxQ6aNTU5|U7JCZ`PJ}kw(YgN7-fWt&1*!a`ZcU&3 zi}q|=#Ut*_^ULGK5Qmk+C)ieolEzxq{R6t?19o$$QxpYu2{Ha=hDaiFq7j_ z*wBrnJz?-%4TWw&uyU;S*OyW*57n1d6gGoP7g&4QR|hY-IXjbY2u>Sy-m>2OgtfpB z`5NjonDsGhcsFPJdpY|z1&M?G=_Xg+W(NqyM;TrD=da<-6_~Zs)VN(Zl9kBIB`fH7 z<36E~Rc}gp1*P*FU!qY)d6vyq+4}1Xkx=myu)mIk>Ua7?YSdrgLW5hkZ|Rsr2?tM; zS;9vL7C;fA1X4E^*)V1!KZ4?NA#(q}GOjxs4rPsRT%8p?TJ#b^1hGnFt!0V0h-G6% z3#+WQ%OXUJ7G^fU1L^LlDMob%TQO_w#_aE6LW>UoYQ za!Ol0CjwnfQ&CNE3>t8zy&j#G8OKO*$wi^zAZRkP6LltZDxIf~O@|>>nTmU&r(M59 z<7PK8rTHti-B}~4i?mi6&lf_byU7o(=9JV_mjsO+gDuu+<()w_CwI`PthT2%&Hm$m zS~fCj{|rWy&lAzz6y>27J4sdMe zjFUXcX*7(9$ATq{_RTktH~j{{yj3vaB%fQRk2ZTtLgE8k`+gyEJc^0oYfN9pW=7l= zMT*kU%r`5e-1ihXC>uS(VDnn2aA_ z?`n451gCt(<(X`ib(XywAE$!s2Y9)%dB(B28&0+-+a;%FBOeaXy@2 zHjfcDxuL}~JN#+fi8p-YvBxuC-u}Mz*v&c1mgtFn{C&ZpmPSMa7gvGJ*{52Y?LE;R zffstmBeEGGM-UAY*$?r7K&rC*Z!r>tA>Nm-c9Kh1Ngy2?RcY`Jc0fqW#4VBL3$f4} z>E#i_O3ke_<6I{HeO@j#2P+4yJ4c7Q?IOHg2IH93lh-PSj+%mk*YZR>!Z5i3%8wb%3#6zu)J?Ny^ePKu;li_WUTOr7^ch@ zczDNtVgn4G1};7M#Vl&WOCW;U4<%)I$>J9M7@#sX9QL52KVOGC7Cq z4kpLCd`u374=8edQizBn3CFQ!Tt-N7zG;Da-;8X}Zyv5pnE45C^2*e1qG$&man64e ztkJt$!AzYGq`d8c$vm0GCOo@V*XIzJQJG!W84I-o@2pg!JyRNWc=mg&JVc^biC;&o zObe@mGm&!eJ0-Ir=;FI2kb%*=MpS$@BiD!{GFB?K=UM;%>ZS{DG3rRH-A#Y&dqXLO^!*UuP zC5$1LqUd%a;-nrZ1LQj1Sa0>lO?hwUHOoi78k*my=BcBqcevN%H_r|?urp$&Ee7&* zGx^2t>~OOfmZ}6UTURBc*}ap1G6;sE4Xi_0m?NTqUJtJPz+dnywxL_|1} z$8NUw+TNwFM|sE1c4oG(r=?kCESdP}R0joMgE{IRki`MSA+BU3*r?a<>A}e_ghP__ zML02v^r=@@`Ahg}h!P-b&SA*UI8MKHt;|*meB+A>MsWjhnJYk}Oov$@YOl?0fc~*m zmB@6v(UX*y(q*}y0jDr`Hei$jIGg8+EGzdd6j6#8{6)U`QGgxXmaQ}+-T z$YS}U1C1+O7b6_&+)pxITy)vg7duj}4r)k_c%7kyxi+eM?{NIWqtU5W*-?~Yz#|>6 z)PM!wb0-8s!4!g(d6Sm5`^IN!36f~K8Ff12dKkdNiAmoz5LKqKfc4>9mj6t?e|S`t zOGhFW(n=+foam8KJ3<&m)c27mS|@FFYN@@QUz}@`fP~{9^P%481+SfDj6Jc_wJ}}G z=H!(HBV3vr)X@hH%Jv-!(jQI>R5|0i~Xt6F?>Zrg6;Ce+e8HMZl?couUjOs7Qo zTd5JBbEiZ95o>SE9G#G+vw_0r?+77pipd~!xog&|=}k}gJB03q%!9AxZy~cQxYtBm zT`7aioKhbTPdV*qsU2-i*jV?t)(_%-ggALN*+yp|XXLI}d~d3ihw=VuusNmcYL5(Y#6~=4K?Ta|(G_=j zQQ{|hg2P7ZO?2w`$3DZgz}lh&Q^#TVZ^?=Et}J)o5~oy&bAfZ~HY`J$K2Uo4y$j4I zn>y+t^~c5>kS>jI_E7rvg8qmFux$UkjYxuyp8AWi&hDYS2hUYR>MXIW-6OU_tXI3N zb8S7^b_*wAa5vSHY_C67o}X?AIbLDDwQlEtVT=3lCx0m2R$dt4il*gJ64FX!dAIJo z;}C+?`sFv&TjXpr zI>R{c6*o~cZLUF->ZR68f92P{J39iKuiMXJvW%vh)?}d89Z$d52CPsD??2p9xfC6d z5!Lg)NCnIR9fH3ZfHE7h;hGcxgWRNY(YHWGLq{PbUj1#cf%n;i@+zW`s1^mqM~=bR z;;>45`)l^g&e8Fcp$C-aem_Hy2HUIWHKsWqF6mWQ@3|e@RC>1b{>YyABuVa~r`9Km zE$ky1f_oO=)OZ#r#jPxh3Y|2-VJDUK%aCwO5MO%uB2^#)sYp15WrJMVl8t>5jk9vj z-G!opl&!Tz6uXfh+iZzUkt{eJ(dv$Ig6E{^c1Up{;41r0lS0DDU#(q`=qw8C<^dz~ z184U_Qke6Wl`ZK*V@sn@W#nc$x8G5`o;SI-Z>efE-oNYp zQMp6E0gKdIMgE$jsr$HHiUl2C4B53ubSAWG1$c6-se!GI4e$w z{c(WxTg|^R@*FXFAAIS zaIYiCUKNrY#GiHw(0u2~z^*;gh=A<_B|qJq7<~LWm z>tDgTx-1siy~L&;6vDJte!#=7d!oWia%RLQdJQ#YdsofsfP#&iAQh8L7dZ%d2dDo&Dc3n*UqrC;*WGtdApPHp)`POm_vRqIwt+HHSkufo$c zSM>rNhbL&reEFI+fz;cN4(^xnP3KpeO0a6J9Es36vJ*D=Y~?DxAvuu%7~WnLJ8ZxC zKf0k6+`a}Wg7zAMe{8i>`LNu=kGT^M-0QeFz`#$8WqUTQ$!@vEEO;F&?3z8#z+J!o z$uamJg%ulqOMmCq%$z~X?GGY zI0y*REp7lY_^1)oxu-}D*GMNn&H`BPW!pZFy^`!zH|6{@V#+xyJ(<_y`pl|LV)i?C zWuRy|PWbThvqV&+zv`(d{!g9IoDb~TB8O!Xp5 zP`#UsOS`dbmXdCg&&_73(DdfFM~J*#T3OPTHmHZf|1pSvOoKb*`S9>?-!<^>)&I14 z(*=~2ppIaG3zW=|-?ANwaH$>fb&cODfA$F>QPLttv<*N0*X;gXO1LCwlBi^J@i(Ra zn#qVbq$nTcr>gybV-Wy(cmkdOInm6JT+jt5NA2LS-2aU=PeqHE*B=l2U$g&5ek~pI mo1)kkaV) Date: Fri, 17 Jan 2020 11:13:49 +0800 Subject: [PATCH 2/4] =?UTF-8?q?=E6=8F=90=E4=BA=A4dev=20=E5=88=86=E6=94=AF?= =?UTF-8?q?=20https=20=E6=94=AF=E6=8C=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index 8311573dd..d8ca386a0 100644 --- a/pom.xml +++ b/pom.xml @@ -67,6 +67,7 @@ spring-boot-demo-ratelimit-guava spring-boot-demo-ratelimit-redis spring-boot-demo-elasticsearch-rest-high-level-client + spring-boot-demo-https pom From 64973002f23f98697c70b76eb6426f3c138180d3 Mon Sep 17 00:00:00 2001 From: geek <1163518793@qq.com> Date: Sun, 26 Apr 2020 16:16:13 +0800 Subject: [PATCH 3/4] =?UTF-8?q?=E6=8F=90=E4=BA=A4dev=20=E5=88=86=E6=94=AF?= =?UTF-8?q?=20sso=20=E6=94=AF=E6=8C=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pom.xml | 10 + spring-boot-demo-sso-client1/README.md | 6 + spring-boot-demo-sso-client1/pom.xml | 43 ++ .../SpringBootDemoSsoClient1Application.java | 18 + .../config/ClientWebSecurityConfigurer.java | 31 ++ .../sso/controller/IndexController.java | 33 ++ .../src/main/resources/application.yml | 23 + spring-boot-demo-sso-client2/README.md | 6 + spring-boot-demo-sso-client2/pom.xml | 34 ++ .../SpringBootDemoSsoClient2Application.java | 18 + .../config/ClientWebSecurityConfigurer.java | 28 ++ .../sso/controller/IndexController.java | 33 ++ .../src/main/resources/application.yml | 23 + spring-boot-demo-sso-server/README.md | 419 ++++++++++++++++++ spring-boot-demo-sso-server/pom.xml | 65 +++ .../SpringBootDemoSsoServerApplication.java | 17 + .../config/SsoAuthorizationServerConfig.java | 97 ++++ .../sso/config/SsoClientProperties.java | 33 ++ .../sso/config/SsoSecurityConfig.java | 66 +++ .../sso/service/UserDetailsServiceImpl.java | 51 +++ .../src/main/resources/application.yml | 17 + .../sso/SsoApplicationTests.java | 13 + 22 files changed, 1084 insertions(+) create mode 100644 spring-boot-demo-sso-client1/README.md create mode 100644 spring-boot-demo-sso-client1/pom.xml create mode 100644 spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient1Application.java create mode 100644 spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java create mode 100644 spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/controller/IndexController.java create mode 100644 spring-boot-demo-sso-client1/src/main/resources/application.yml create mode 100644 spring-boot-demo-sso-client2/README.md create mode 100644 spring-boot-demo-sso-client2/pom.xml create mode 100644 spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient2Application.java create mode 100644 spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java create mode 100644 spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/controller/IndexController.java create mode 100644 spring-boot-demo-sso-client2/src/main/resources/application.yml create mode 100644 spring-boot-demo-sso-server/README.md create mode 100644 spring-boot-demo-sso-server/pom.xml create mode 100644 spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/SpringBootDemoSsoServerApplication.java create mode 100644 spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoAuthorizationServerConfig.java create mode 100644 spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoClientProperties.java create mode 100644 spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoSecurityConfig.java create mode 100644 spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/service/UserDetailsServiceImpl.java create mode 100644 spring-boot-demo-sso-server/src/main/resources/application.yml create mode 100644 spring-boot-demo-sso-server/src/test/java/springbootdemosso/sso/SsoApplicationTests.java diff --git a/pom.xml b/pom.xml index 532d379df..7b4589f5f 100644 --- a/pom.xml +++ b/pom.xml @@ -69,6 +69,9 @@ spring-boot-demo-elasticsearch-rest-high-level-client spring-boot-demo-https spring-boot-demo-flyway + spring-boot-demo-sso-server + spring-boot-demo-sso-client1 + spring-boot-demo-sso-client2 pom @@ -134,6 +137,13 @@ UserAgentUtils ${user.agent.version} + + org.springframework.cloud + spring-cloud-dependencies + Greenwich.SR1 + pom + import + diff --git a/spring-boot-demo-sso-client1/README.md b/spring-boot-demo-sso-client1/README.md new file mode 100644 index 000000000..df57fc726 --- /dev/null +++ b/spring-boot-demo-sso-client1/README.md @@ -0,0 +1,6 @@ + + +## sso 单点登录系统 客户端 + + +全流程详见 服务端`spring-boot-demo-sso-server` diff --git a/spring-boot-demo-sso-client1/pom.xml b/spring-boot-demo-sso-client1/pom.xml new file mode 100644 index 000000000..db0d57869 --- /dev/null +++ b/spring-boot-demo-sso-client1/pom.xml @@ -0,0 +1,43 @@ + + + 4.0.0 + + + com.xkcoding + spring-boot-demo + 1.0.0-SNAPSHOT + + + spring-boot-demo-sso-client1 + spring-boot-demo-sso-client1 + 0.0.1-SNAPSHOT + spring-boot-demo-sso-client1 + Demo project for Spring Boot + + + 1.8 + + + + + org.springframework.cloud + spring-cloud-starter-oauth2 + 2.0.1.RELEASE + + + org.springframework.boot + spring-boot-starter-web + + + + + + + org.springframework.boot + spring-boot-maven-plugin + + + + + diff --git a/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient1Application.java b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient1Application.java new file mode 100644 index 000000000..2b46ffbc2 --- /dev/null +++ b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient1Application.java @@ -0,0 +1,18 @@ +package com.xcoding.sso; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; + + +/** + * @author Administrator + */ +@SpringBootApplication +public class SpringBootDemoSsoClient1Application { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoSsoClient1Application.class, args); + } + + +} diff --git a/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java new file mode 100644 index 000000000..84cafc5ae --- /dev/null +++ b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java @@ -0,0 +1,31 @@ +package com.xcoding.sso.config; + +import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/16 9:41 + * @description + */ + +@Configuration +@EnableWebSecurity +@EnableGlobalMethodSecurity(prePostEnabled = true) +@EnableOAuth2Sso +public class ClientWebSecurityConfigurer extends WebSecurityConfigurerAdapter { + + @Override + public void configure(HttpSecurity http) throws Exception { + // 需要先于需授权地址 + http.antMatcher("/**").authorizeRequests().antMatchers("/free").permitAll() + .anyRequest().authenticated(); +/* http.antMatcher("/**").authorizeRequests() + .anyRequest().authenticated().antMatchers("/free").permitAll();*/ + } +} diff --git a/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/controller/IndexController.java b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/controller/IndexController.java new file mode 100644 index 000000000..663119b9d --- /dev/null +++ b/spring-boot-demo-sso-client1/src/main/java/com/xcoding/sso/controller/IndexController.java @@ -0,0 +1,33 @@ +package com.xcoding.sso.controller; + +import org.springframework.security.access.prepost.PreAuthorize; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RestController; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/14 17:25 + * @description + */ +@RestController +public class IndexController { + + + @GetMapping("/free") + public String normal( ) { + return "不需要授权路径!"; + } + + @GetMapping("/user") + @PreAuthorize("hasAuthority('ROLE_USER')") + public String medium() { + return "用户权限路径"; + } + + @GetMapping("/admin") + @PreAuthorize("hasAuthority('ROLE_ADMIN')") + public String admin() { + return "管理员权限路径"; + } +} diff --git a/spring-boot-demo-sso-client1/src/main/resources/application.yml b/spring-boot-demo-sso-client1/src/main/resources/application.yml new file mode 100644 index 000000000..a408a8d19 --- /dev/null +++ b/spring-boot-demo-sso-client1/src/main/resources/application.yml @@ -0,0 +1,23 @@ + + +# sso-server地址 +auth-server: http://localhost:9900/uac + +server: + port: 9901 +security: + oauth2: + client: + client-id: client1 + client-secret: client1 + #请求认证的地址 + user-authorization-uri: ${auth-server}/oauth/authorize + #请求令牌的地址 + access-token-uri: ${auth-server}/oauth/token + resource: + jwt: + #解析jwt令牌所需要密钥的地址 + key-uri: ${auth-server}/oauth/token_key + +debug: true + diff --git a/spring-boot-demo-sso-client2/README.md b/spring-boot-demo-sso-client2/README.md new file mode 100644 index 000000000..df57fc726 --- /dev/null +++ b/spring-boot-demo-sso-client2/README.md @@ -0,0 +1,6 @@ + + +## sso 单点登录系统 客户端 + + +全流程详见 服务端`spring-boot-demo-sso-server` diff --git a/spring-boot-demo-sso-client2/pom.xml b/spring-boot-demo-sso-client2/pom.xml new file mode 100644 index 000000000..7efeb9fd0 --- /dev/null +++ b/spring-boot-demo-sso-client2/pom.xml @@ -0,0 +1,34 @@ + + + + spring-boot-demo + com.xkcoding + 1.0.0-SNAPSHOT + + 4.0.0 + + spring-boot-demo-client2 + + + + org.springframework.cloud + spring-cloud-starter-oauth2 + 2.0.1.RELEASE + + + org.springframework.boot + spring-boot-starter-web + + + + + + + org.springframework.boot + spring-boot-maven-plugin + + + + diff --git a/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient2Application.java b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient2Application.java new file mode 100644 index 000000000..8265bc283 --- /dev/null +++ b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/SpringBootDemoSsoClient2Application.java @@ -0,0 +1,18 @@ +package com.xcoding.sso; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; + + +/** + * @author Administrator + */ +@SpringBootApplication +public class SpringBootDemoSsoClient2Application { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoSsoClient2Application.class, args); + } + + +} diff --git a/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java new file mode 100644 index 000000000..19df996f5 --- /dev/null +++ b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/config/ClientWebSecurityConfigurer.java @@ -0,0 +1,28 @@ +package com.xcoding.sso.config; + +import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/16 9:41 + * @description + */ + +@Configuration +@EnableWebSecurity +@EnableGlobalMethodSecurity(prePostEnabled = true) +@EnableOAuth2Sso +public class ClientWebSecurityConfigurer extends WebSecurityConfigurerAdapter { + + @Override + public void configure(HttpSecurity http) throws Exception { + http.antMatcher("/**").authorizeRequests().antMatchers("/free").permitAll() + .anyRequest().authenticated(); + } +} diff --git a/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/controller/IndexController.java b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/controller/IndexController.java new file mode 100644 index 000000000..663119b9d --- /dev/null +++ b/spring-boot-demo-sso-client2/src/main/java/com/xcoding/sso/controller/IndexController.java @@ -0,0 +1,33 @@ +package com.xcoding.sso.controller; + +import org.springframework.security.access.prepost.PreAuthorize; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RestController; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/14 17:25 + * @description + */ +@RestController +public class IndexController { + + + @GetMapping("/free") + public String normal( ) { + return "不需要授权路径!"; + } + + @GetMapping("/user") + @PreAuthorize("hasAuthority('ROLE_USER')") + public String medium() { + return "用户权限路径"; + } + + @GetMapping("/admin") + @PreAuthorize("hasAuthority('ROLE_ADMIN')") + public String admin() { + return "管理员权限路径"; + } +} diff --git a/spring-boot-demo-sso-client2/src/main/resources/application.yml b/spring-boot-demo-sso-client2/src/main/resources/application.yml new file mode 100644 index 000000000..27d2a38ae --- /dev/null +++ b/spring-boot-demo-sso-client2/src/main/resources/application.yml @@ -0,0 +1,23 @@ + + +# sso-server地址 +auth-server: http://localhost:9900/uac + +server: + port: 9902 +security: + oauth2: + client: + client-id: client2 + client-secret: client2 + #请求认证的地址 + user-authorization-uri: ${auth-server}/oauth/authorize + #请求令牌的地址 + access-token-uri: ${auth-server}/oauth/token + resource: + jwt: + #解析jwt令牌所需要密钥的地址 + key-uri: ${auth-server}/oauth/token_key + +debug: true + diff --git a/spring-boot-demo-sso-server/README.md b/spring-boot-demo-sso-server/README.md new file mode 100644 index 000000000..c6e3b3944 --- /dev/null +++ b/spring-boot-demo-sso-server/README.md @@ -0,0 +1,419 @@ + + + +## 单点登录系统示例(sso) + +> 使用 `oauth2` `spring security` 一个授权服务器 + 两个 客户端 + +流程: +1. 客户端1 , 客户端2 不同权限路径 + - `/free` 无需授权 + - `/user` 用户权限 + - `/admin` 管理员权限 +2. 访问客户端1`/free` 正常访问 +3. 访问客户端1`/user` 获取授权信息 + 1. 未登录跳转授权服务器登录 + 2. 登录有权限 正常访问 , 无权限 拒绝 +4. 访问客户端2`/user` 如有权限自动登录 +5. `/admin` 同理 , 客户端1 客户端2 访问顺序可随意调换 , 实现 一处登录处处访问 + + +### 服务端 + +服务器端关键pom如下 + +```xml + + + org.springframework.cloud + spring-cloud-starter-oauth2 + 2.0.1.RELEASE + + + org.springframework.boot + spring-boot-starter-web + + +``` + +**注意** 不同版本spring boot 对 `spring-cloud-starter-oauth2` 有不兼容情况 可以使用`spring-cloud-dependencies` 管理 + + +1. 配置授权服务器 客户端 + + +```java + +package com.xkcoding.sso.config; + +import jdk.internal.dynalink.support.NameCodec; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.context.properties.EnableConfigurationProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.config.annotation.builders.ClientDetailsServiceBuilder; +import org.springframework.security.oauth2.config.annotation.builders.InMemoryClientDetailsServiceBuilder; +import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer; +import org.springframework.security.oauth2.provider.token.DefaultTokenServices; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; +import org.springframework.security.oauth2.provider.token.store.JwtTokenStore; + +import java.util.List; +import java.util.concurrent.TimeUnit; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description 配置授权认证 + */ + +@Configuration +@EnableAuthorizationServer +@EnableConfigurationProperties(SsoClientProperties.class) +public class SsoAuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { + + // 引入 配置文件 也可以写死 正常应该是写在数据库中 + @Autowired + private SsoClientProperties ssoClientProperties; + + /** + * 客户端一些配置 + * + * @param clients + * @throws Exception + */ + @Override + public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + // 从配置文件中读取 客户端授权信息 相当于把要接入单点系统的客户端id和密钥等信息存进来并设定权限 + ClientDetailsServiceBuilder memory = clients.inMemory(); + List client = ssoClientProperties.getClient(); + for (SsoClientProperties.SsoClient c : client) { + try { + memory = memory.withClient(c.getClientName()) + .secret(passwordEncoder.encode(c.getClientPassword())) + .authorizedGrantTypes("authorization_code", "refresh_token") + .scopes("all") + .redirectUris(c.getUri()) + .autoApprove(false).and(); + } catch (Exception e) { + e.printStackTrace(); + } + } + // 也可以使用数据库动态配置 , 如userDetail 一样 + // clients.withClientDetails() + } + + @Override + public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { + endpoints.tokenStore(jwtTokenStore()).accessTokenConverter(jwtAccessTokenConverter()); + DefaultTokenServices tokenServices = (DefaultTokenServices) endpoints.getDefaultAuthorizationServerTokenServices(); + tokenServices.setTokenStore(endpoints.getTokenStore()); + tokenServices.setSupportRefreshToken(true); + tokenServices.setClientDetailsService(endpoints.getClientDetailsService()); + tokenServices.setTokenEnhancer(endpoints.getTokenEnhancer()); + tokenServices.setAccessTokenValiditySeconds((int) TimeUnit.MINUTES.toSeconds(1)); + endpoints.tokenServices(tokenServices); + } + + @Override + public void configure(AuthorizationServerSecurityConfigurer security) throws Exception { + security.tokenKeyAccess("isAuthenticated()"); + } + + @Bean + public TokenStore jwtTokenStore() { + return new JwtTokenStore(jwtAccessTokenConverter()); + } + + @Bean + public JwtAccessTokenConverter jwtAccessTokenConverter() { + JwtAccessTokenConverter converter = new JwtAccessTokenConverter(); + converter.setSigningKey("setSigningKey"); + return converter; + } + +} + + + +``` + + +2. 然后配置一下spring security + +```java + +package com.xkcoding.sso.config; + +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.authentication.dao.DaoAuthenticationProvider; +import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; + + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description 配置 spring security + */ +@Configuration +public class SsoSecurityConfig extends WebSecurityConfigurerAdapter { + + + @Autowired + private UserDetailsService userDetailsService; + + + @Override + @Bean + public AuthenticationManager authenticationManager() throws Exception { + return super.authenticationManager(); + } + + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } + + @Bean + public DaoAuthenticationProvider authenticationProvider() { + DaoAuthenticationProvider authenticationProvider = new DaoAuthenticationProvider(); + authenticationProvider.setUserDetailsService(userDetailsService); + authenticationProvider.setPasswordEncoder(passwordEncoder()); + authenticationProvider.setHideUserNotFoundExceptions(false); + return authenticationProvider; + } + + @Override + protected void configure(HttpSecurity http) throws Exception { + + http + .requestMatchers().antMatchers("/oauth/**", "/login/**", "/logout/**") + .and() + .authorizeRequests() + .antMatchers("/oauth/**").authenticated() + .and() + .formLogin().permitAll(); + } + + @Override + protected void configure(AuthenticationManagerBuilder auth) throws Exception { + auth.authenticationProvider(authenticationProvider()); + } +} + + +``` + + +3. 配置`userDetail` + +```java + +package com.xkcoding.sso.service; + +import org.springframework.security.core.authority.AuthorityUtils; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; + +import java.util.HashMap; +import java.util.Map; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description + */ +@Service +public class UserDetailsServiceImpl implements UserDetailsService { + + + private static Map USER_DB = new HashMap<>(); + + + static { + PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + USER_DB.put("user", new User("user", passwordEncoder.encode("111"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER"))); + USER_DB.put("admin", new User("admin", passwordEncoder.encode("222"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_ADMIN"))); + USER_DB.put("super", new User("super", passwordEncoder.encode("333"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_ADMIN,ROLE_USER"))); + + } + + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + // 从数据库中查询 + User user = USER_DB.get(username); + if (user == null) { + throw new UsernameNotFoundException(String.format("用户%s不存在", username)); + } + return user; + } + + +} + + +``` + +这样 授权服务器就配置完成 + +### 客户端1和客户端2 + +> 客户端1,2 相同 只是换了个端口 只讲一遍 + + +1. 首先依赖 + +```xml + + + org.springframework.cloud + spring-cloud-starter-oauth2 + 2.0.1.RELEASE + + + org.springframework.boot + spring-boot-starter-web + + +``` + +2.yml 中自动配置项 +```yaml + + + +# sso-server地址 +auth-server: http://localhost:9900/uac + +# 这个客户端的端口 +server: + port: 9902 + + +security: + oauth2: + client: +#客户端id +#客户端密码 +# 这两项务必要与授权服务器相同 + client-id: client2 + client-secret: client2 + #请求认证的地址 + user-authorization-uri: ${auth-server}/oauth/authorize + #请求令牌的地址 + access-token-uri: ${auth-server}/oauth/token + resource: + jwt: + #解析jwt令牌所需要密钥的地址 + key-uri: ${auth-server}/oauth/token_key + +``` + + +3. 客户端配置 + +```java + +package com.xcoding.sso.config; + +import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/16 9:41 + * @description + */ + +@Configuration +@EnableOAuth2Sso +@EnableWebSecurity +@EnableGlobalMethodSecurity(prePostEnabled = true) +public class ClientWebSecurityConfigurer extends WebSecurityConfigurerAdapter { + + @Override + public void configure(HttpSecurity http) throws Exception { + // 这里把/free 放行 + http.antMatcher("/**").authorizeRequests().antMatchers("/free").permitAll() + .anyRequest().authenticated(); + } +} + +``` + +3. 写几个访问方法测试路径 + +```java + +package com.xcoding.sso.controller; + +import org.springframework.security.access.prepost.PreAuthorize; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.RestController; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/14 17:25 + * @description + */ +@RestController +public class IndexController { + + + @GetMapping("/free") + public String normal( ) { + return "不需要授权路径!"; + } + + @GetMapping("/user") + @PreAuthorize("hasAuthority('ROLE_USER')") + public String medium() { + return "用户权限路径"; + } + + @GetMapping("/admin") + @PreAuthorize("hasAuthority('ROLE_ADMIN')") + public String admin() { + return "管理员权限路径"; + } +} + + +``` + +最后启动,先启动授权服务器,然后启动客户端 + diff --git a/spring-boot-demo-sso-server/pom.xml b/spring-boot-demo-sso-server/pom.xml new file mode 100644 index 000000000..c761081d1 --- /dev/null +++ b/spring-boot-demo-sso-server/pom.xml @@ -0,0 +1,65 @@ + + + 4.0.0 + + + com.xkcoding + spring-boot-demo + 1.0.0-SNAPSHOT + + + spring-boot-demo-sso + spring-boot-demo-sso-server + 0.0.1-SNAPSHOT + spring-boot-demo-sso-server + Demo project for Spring Boot + + + 1.8 + + + + + org.springframework.cloud + spring-cloud-starter-oauth2 + 2.0.1.RELEASE + + + org.springframework.boot + spring-boot-starter-web + + + + org.springframework.boot + spring-boot-devtools + runtime + true + + + org.springframework.boot + spring-boot-configuration-processor + true + + + org.projectlombok + lombok + true + + + org.springframework.boot + spring-boot-starter-test + test + + + + + + + org.springframework.boot + spring-boot-maven-plugin + + + + + diff --git a/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/SpringBootDemoSsoServerApplication.java b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/SpringBootDemoSsoServerApplication.java new file mode 100644 index 000000000..bee3cabd7 --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/SpringBootDemoSsoServerApplication.java @@ -0,0 +1,17 @@ +package com.xkcoding.sso; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration; + +/** + * @author chen.chao + */ +@SpringBootApplication(exclude = {DataSourceAutoConfiguration.class}) +public class SpringBootDemoSsoServerApplication { + + public static void main(String[] args) { + SpringApplication.run(SpringBootDemoSsoServerApplication.class, args); + } + +} diff --git a/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoAuthorizationServerConfig.java b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoAuthorizationServerConfig.java new file mode 100644 index 000000000..4f50b0d07 --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoAuthorizationServerConfig.java @@ -0,0 +1,97 @@ +package com.xkcoding.sso.config; + +import jdk.internal.dynalink.support.NameCodec; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.boot.context.properties.EnableConfigurationProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.config.annotation.builders.ClientDetailsServiceBuilder; +import org.springframework.security.oauth2.config.annotation.builders.InMemoryClientDetailsServiceBuilder; +import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter; +import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer; +import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer; +import org.springframework.security.oauth2.provider.token.DefaultTokenServices; +import org.springframework.security.oauth2.provider.token.TokenStore; +import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; +import org.springframework.security.oauth2.provider.token.store.JwtTokenStore; + +import java.util.List; +import java.util.concurrent.TimeUnit; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description 配置授权认证 + */ + +@Configuration +@EnableAuthorizationServer +@EnableConfigurationProperties(SsoClientProperties.class) +public class SsoAuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { + + @Autowired + private SsoClientProperties ssoClientProperties; + + /** + * 客户端一些配置 + * + * @param clients + * @throws Exception + */ + @Override + public void configure(ClientDetailsServiceConfigurer clients) throws Exception { + PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + // 从配置文件中读取 客户端授权信息 相当于把要接入单点系统的客户端id和密钥等信息存进来并设定权限 + ClientDetailsServiceBuilder memory = clients.inMemory(); + List client = ssoClientProperties.getClient(); + for (SsoClientProperties.SsoClient c : client) { + try { + memory = memory.withClient(c.getClientName()) + .secret(passwordEncoder.encode(c.getClientPassword())) + .authorizedGrantTypes("authorization_code", "refresh_token") + .scopes("all") + .redirectUris(c.getUri()) + .autoApprove(false).and(); + } catch (Exception e) { + e.printStackTrace(); + } + } + // 也可以使用数据库动态配置 + // clients.withClientDetails() + } + + @Override + public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { + endpoints.tokenStore(jwtTokenStore()).accessTokenConverter(jwtAccessTokenConverter()); + DefaultTokenServices tokenServices = (DefaultTokenServices) endpoints.getDefaultAuthorizationServerTokenServices(); + tokenServices.setTokenStore(endpoints.getTokenStore()); + tokenServices.setSupportRefreshToken(true); + tokenServices.setClientDetailsService(endpoints.getClientDetailsService()); + tokenServices.setTokenEnhancer(endpoints.getTokenEnhancer()); + tokenServices.setAccessTokenValiditySeconds((int) TimeUnit.MINUTES.toSeconds(1)); + endpoints.tokenServices(tokenServices); + } + + @Override + public void configure(AuthorizationServerSecurityConfigurer security) throws Exception { + security.tokenKeyAccess("isAuthenticated()"); + } + + @Bean + public TokenStore jwtTokenStore() { + return new JwtTokenStore(jwtAccessTokenConverter()); + } + + @Bean + public JwtAccessTokenConverter jwtAccessTokenConverter() { + JwtAccessTokenConverter converter = new JwtAccessTokenConverter(); + converter.setSigningKey("setSigningKey"); + return converter; + } + +} diff --git a/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoClientProperties.java b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoClientProperties.java new file mode 100644 index 000000000..510308945 --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoClientProperties.java @@ -0,0 +1,33 @@ +package com.xkcoding.sso.config; + +import lombok.Data; +import org.springframework.boot.context.properties.ConfigurationProperties; +import org.springframework.context.annotation.Configuration; + +import java.util.ArrayList; +import java.util.List; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/14 17:47 + * @description + */ +@Data +@Configuration +@ConfigurationProperties(prefix = "sso") +public class SsoClientProperties { + + private List client; + + @Data + static class SsoClient{ + + private String clientName; + + private String clientPassword; + + private String uri; + + } +} diff --git a/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoSecurityConfig.java b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoSecurityConfig.java new file mode 100644 index 000000000..52145dac7 --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/config/SsoSecurityConfig.java @@ -0,0 +1,66 @@ +package com.xkcoding.sso.config; + +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.authentication.AuthenticationManager; +import org.springframework.security.authentication.dao.DaoAuthenticationProvider; +import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; + + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description 配置 spring security + */ +@Configuration +public class SsoSecurityConfig extends WebSecurityConfigurerAdapter { + + + @Autowired + private UserDetailsService userDetailsService; + + + @Override + @Bean + public AuthenticationManager authenticationManager() throws Exception { + return super.authenticationManager(); + } + + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } + + @Bean + public DaoAuthenticationProvider authenticationProvider() { + DaoAuthenticationProvider authenticationProvider = new DaoAuthenticationProvider(); + authenticationProvider.setUserDetailsService(userDetailsService); + authenticationProvider.setPasswordEncoder(passwordEncoder()); + authenticationProvider.setHideUserNotFoundExceptions(false); + return authenticationProvider; + } + + @Override + protected void configure(HttpSecurity http) throws Exception { + + http + .requestMatchers().antMatchers("/oauth/**", "/login/**", "/logout/**") + .and() + .authorizeRequests() + .antMatchers("/oauth/**").authenticated() + .and() + .formLogin().permitAll(); + } + + @Override + protected void configure(AuthenticationManagerBuilder auth) throws Exception { + auth.authenticationProvider(authenticationProvider()); + } +} diff --git a/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/service/UserDetailsServiceImpl.java b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/service/UserDetailsServiceImpl.java new file mode 100644 index 000000000..84433725e --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/java/com/xkcoding/sso/service/UserDetailsServiceImpl.java @@ -0,0 +1,51 @@ +package com.xkcoding.sso.service; + +import org.springframework.security.core.authority.AuthorityUtils; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; + +import java.util.HashMap; +import java.util.Map; + +/** + * @author chen.chao + * @version 1.0 + * @date 2020/4/13 17:50 + * @description + */ +@Service +public class UserDetailsServiceImpl implements UserDetailsService { + + + private static Map USER_DB = new HashMap<>(); + + + static { + PasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); + USER_DB.put("user", new User("user", passwordEncoder.encode("111"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER"))); + USER_DB.put("admin", new User("admin", passwordEncoder.encode("222"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_ADMIN"))); + USER_DB.put("super", new User("super", passwordEncoder.encode("333"), + AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_ADMIN,ROLE_USER"))); + + } + + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + // 从数据库中查询 + User user = USER_DB.get(username); + if (user == null) { + throw new UsernameNotFoundException(String.format("用户%s不存在", username)); + } + return user; + } + + +} diff --git a/spring-boot-demo-sso-server/src/main/resources/application.yml b/spring-boot-demo-sso-server/src/main/resources/application.yml new file mode 100644 index 000000000..d6414e461 --- /dev/null +++ b/spring-boot-demo-sso-server/src/main/resources/application.yml @@ -0,0 +1,17 @@ + +server: + port: 9900 + servlet: + context-path: /uac + + + +sso.client: + # 以下信息需要与客户端对应 同时uri 版本默认是附带login,有些版本不填将出现无效请求 有些版本则可以不填uri + - client-name: client1 + client-password: client1 + uri: http://localhost:9901/login + - client-name: client2 + client-password: client2 + uri: http://localhost:9902/login + diff --git a/spring-boot-demo-sso-server/src/test/java/springbootdemosso/sso/SsoApplicationTests.java b/spring-boot-demo-sso-server/src/test/java/springbootdemosso/sso/SsoApplicationTests.java new file mode 100644 index 000000000..6d60220fb --- /dev/null +++ b/spring-boot-demo-sso-server/src/test/java/springbootdemosso/sso/SsoApplicationTests.java @@ -0,0 +1,13 @@ +package springbootdemosso.sso; + +import org.junit.Test; +import org.springframework.boot.test.context.SpringBootTest; + +@SpringBootTest +class SsoApplicationTests { + + @Test + void contextLoads() { + } + +} From d9cd4a2a391276d5b23215952a39cd597e2497f8 Mon Sep 17 00:00:00 2001 From: geek <1163518793@qq.com> Date: Sun, 26 Apr 2020 17:39:25 +0800 Subject: [PATCH 4/4] fixed maven package [ERROR] Failed to execute goal org.springframework.boot:spring-boot-maven-plugin:2.1.0.RELEASE:repackage (default) on project spring-boot-demo-https: Execution default of goal org.springframework.boot:spring-boot-maven-plugin:2.1.0.RELEASE:repackage failed: Unable to find a single main class from the following candidates [com.xkcoding.https.SpringBootDemoHttpsApplication, com.xkcoding.springbootdemohttps.SpringBootDemoHttpsApplication] -> [Help 1] --- spring-boot-demo-https/pom.xml | 1 + .../SpringBootDemoHttpsApplication.java | 62 ------------------- 2 files changed, 1 insertion(+), 62 deletions(-) delete mode 100644 spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java diff --git a/spring-boot-demo-https/pom.xml b/spring-boot-demo-https/pom.xml index bfd1b354a..a5b072ccd 100644 --- a/spring-boot-demo-https/pom.xml +++ b/spring-boot-demo-https/pom.xml @@ -33,6 +33,7 @@ + spring-boot-demo-https org.springframework.boot diff --git a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java b/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java deleted file mode 100644 index be323c3e5..000000000 --- a/spring-boot-demo-https/src/main/java/com/xkcoding/springbootdemohttps/SpringBootDemoHttpsApplication.java +++ /dev/null @@ -1,62 +0,0 @@ -package com.xkcoding.springbootdemohttps; - -import org.apache.catalina.Context; -import org.apache.catalina.connector.Connector; -import org.apache.tomcat.util.descriptor.web.SecurityCollection; -import org.apache.tomcat.util.descriptor.web.SecurityConstraint; -import org.springframework.boot.SpringApplication; -import org.springframework.boot.autoconfigure.SpringBootApplication; -import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory; -import org.springframework.context.annotation.Bean; - - -/** - *

- * SpringBoot启动类 - *

- * - * @package: com.xkcoding.https - * @description: SpringBoot启动类 - * @author: Chen.Chao - * @date 2020.01.12 10:31 am - * @copyright: Copyright (c) - * @version: V1.0 - * @modified: Chen.Chao - */ -@SpringBootApplication -public class SpringBootDemoHttpsApplication { - - public static void main(String[] args) { - SpringApplication.run(SpringBootDemoHttpsApplication.class, args); - } - - - @Bean - public Connector connector(){ - Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol"); - connector.setScheme("http"); - connector.setPort(80); - connector.setSecure(false); - connector.setRedirectPort(443); - return connector; - } - - @Bean - public TomcatServletWebServerFactory tomcatServletWebServerFactory(Connector connector){ - TomcatServletWebServerFactory tomcat=new TomcatServletWebServerFactory(){ - @Override - protected void postProcessContext(Context context) { - SecurityConstraint securityConstraint=new SecurityConstraint(); - securityConstraint.setUserConstraint("CONFIDENTIAL"); - SecurityCollection collection=new SecurityCollection(); - collection.addPattern("/*"); - securityConstraint.addCollection(collection); - context.addConstraint(securityConstraint); - } - }; - tomcat.addAdditionalTomcatConnectors(connector); - return tomcat; - } - - -}