@lifeready/core 1.0.2 → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (225) hide show
  1. package/README.md +62 -62
  2. package/bundles/lifeready-core.umd.js +15445 -15445
  3. package/bundles/lifeready-core.umd.js.map +1 -1
  4. package/bundles/lifeready-core.umd.min.js.map +1 -1
  5. package/esm2015/lib/_common/ast.js +40 -40
  6. package/esm2015/lib/_common/deferred-promise.js +24 -24
  7. package/esm2015/lib/_common/exceptions.js +157 -157
  8. package/esm2015/lib/_common/queries.gql.js +190 -190
  9. package/esm2015/lib/_common/run-outside-angular.js +79 -79
  10. package/esm2015/lib/_common/types.js +1 -1
  11. package/esm2015/lib/_common/utils.js +44 -44
  12. package/esm2015/lib/api/contact-card.gql.js +79 -79
  13. package/esm2015/lib/api/contact-card.service.js +154 -154
  14. package/esm2015/lib/api/contact-card2.gql.js +60 -60
  15. package/esm2015/lib/api/contact-card2.service.js +103 -103
  16. package/esm2015/lib/api/file.service.js +74 -74
  17. package/esm2015/lib/api/item2.gql.js +110 -110
  18. package/esm2015/lib/api/item2.service.js +311 -311
  19. package/esm2015/lib/api/key-exchange.gql.js +188 -188
  20. package/esm2015/lib/api/key-exchange.service.js +442 -442
  21. package/esm2015/lib/api/key-exchange.types.js +18 -18
  22. package/esm2015/lib/api/key-exchange2.gql.js +171 -171
  23. package/esm2015/lib/api/key-exchange2.service.js +479 -479
  24. package/esm2015/lib/api/lock.gql.js +40 -40
  25. package/esm2015/lib/api/lock.service.js +64 -64
  26. package/esm2015/lib/api/lr-apollo.service.js +46 -46
  27. package/esm2015/lib/api/lr-graphql/index.js +6 -6
  28. package/esm2015/lib/api/lr-graphql/lr-graphql.service.js +155 -155
  29. package/esm2015/lib/api/lr-graphql/lr-merged-mutation.js +213 -213
  30. package/esm2015/lib/api/lr-graphql/lr-mutation-base.js +51 -51
  31. package/esm2015/lib/api/lr-graphql/lr-mutation.js +48 -48
  32. package/esm2015/lib/api/lr-graphql/lr.service.js +18 -18
  33. package/esm2015/lib/api/message.service.js +138 -138
  34. package/esm2015/lib/api/persist.service.js +181 -181
  35. package/esm2015/lib/api/query-processor/common-processors.service.js +93 -93
  36. package/esm2015/lib/api/query-processor/index.js +3 -3
  37. package/esm2015/lib/api/query-processor/query-processor.service.js +192 -192
  38. package/esm2015/lib/api/query-processor/tp-password-reset-processor.service.js +109 -109
  39. package/esm2015/lib/api/shared-contact-card.service.js +119 -119
  40. package/esm2015/lib/api/shared-contact-card2.gql.js +41 -41
  41. package/esm2015/lib/api/shared-contact-card2.service.js +117 -117
  42. package/esm2015/lib/api/time.service.js +146 -146
  43. package/esm2015/lib/api/types/graphql.types.js +7 -7
  44. package/esm2015/lib/api/types/index.js +3 -3
  45. package/esm2015/lib/api/types/lr-graphql.types.js +71 -71
  46. package/esm2015/lib/auth/auth.config.js +57 -57
  47. package/esm2015/lib/auth/auth.gql.js +48 -48
  48. package/esm2015/lib/auth/auth.types.js +27 -27
  49. package/esm2015/lib/auth/idle.service.js +168 -168
  50. package/esm2015/lib/auth/idle.types.js +7 -7
  51. package/esm2015/lib/auth/lbop.service.js +355 -355
  52. package/esm2015/lib/auth/life-ready-auth.service.js +500 -500
  53. package/esm2015/lib/auth/password.service.js +320 -320
  54. package/esm2015/lib/auth/register.service.js +172 -172
  55. package/esm2015/lib/auth/two-factor.service.js +74 -74
  56. package/esm2015/lib/category/category-meta.service.js +99 -99
  57. package/esm2015/lib/category/category.gql.js +406 -406
  58. package/esm2015/lib/category/category.service.js +390 -390
  59. package/esm2015/lib/category/category.types.js +29 -29
  60. package/esm2015/lib/cryptography/cryptography.types.js +11 -11
  61. package/esm2015/lib/cryptography/encryption.service.js +189 -189
  62. package/esm2015/lib/cryptography/key-factory.service.js +237 -237
  63. package/esm2015/lib/cryptography/key-graph.service.js +280 -280
  64. package/esm2015/lib/cryptography/key-meta.service.js +200 -200
  65. package/esm2015/lib/cryptography/key.service.js +124 -124
  66. package/esm2015/lib/cryptography/slip39.service.js +169 -169
  67. package/esm2015/lib/cryptography/web-crypto.service.js +29 -29
  68. package/esm2015/lib/life-ready.config.js +84 -84
  69. package/esm2015/lib/life-ready.module.js +74 -74
  70. package/esm2015/lib/plan/plan.gql.js +123 -123
  71. package/esm2015/lib/plan/plan.service.js +149 -149
  72. package/esm2015/lib/plan/plan.types.js +11 -11
  73. package/esm2015/lib/record/record-attachment.service.js +101 -101
  74. package/esm2015/lib/record/record.gql.js +179 -179
  75. package/esm2015/lib/record/record.service.js +206 -206
  76. package/esm2015/lib/record/record.types.js +15 -15
  77. package/esm2015/lib/record-type/record-type.service.js +75 -75
  78. package/esm2015/lib/record-type/record-type.types.js +28 -28
  79. package/esm2015/lib/scenario/approvals/scenario-approval.gql.js +105 -105
  80. package/esm2015/lib/scenario/approvals/scenario-approval.types.js +1 -1
  81. package/esm2015/lib/scenario/approvals/scenario-approver.service.js +300 -300
  82. package/esm2015/lib/scenario/claimants/scenario-claimant.gql.js +52 -52
  83. package/esm2015/lib/scenario/claimants/scenario-claimant.service.js +97 -97
  84. package/esm2015/lib/scenario/claimants/scenario-claimant.types.js +1 -1
  85. package/esm2015/lib/scenario/receivers/scenario-receiver.gql.js +150 -150
  86. package/esm2015/lib/scenario/receivers/scenario-receiver.service.js +229 -229
  87. package/esm2015/lib/scenario/receivers/scenario-receiver.types.js +1 -1
  88. package/esm2015/lib/scenario/scenario-setup.service.js +269 -269
  89. package/esm2015/lib/scenario/scenario.gql.js +368 -368
  90. package/esm2015/lib/scenario/scenario.service.js +611 -611
  91. package/esm2015/lib/scenario/scenario.types.js +64 -64
  92. package/esm2015/lib/search/search.gql.js +62 -62
  93. package/esm2015/lib/search/search.service.js +156 -156
  94. package/esm2015/lib/search/search.types.js +6 -6
  95. package/esm2015/lib/trusted-parties/tp-password-reset-request.service.js +112 -112
  96. package/esm2015/lib/trusted-parties/tp-password-reset-user.service.js +129 -129
  97. package/esm2015/lib/trusted-parties/tp-password-reset.constants.js +4 -4
  98. package/esm2015/lib/trusted-parties/tp-password-reset.gql.js +232 -232
  99. package/esm2015/lib/trusted-parties/tp-password-reset.service.js +299 -299
  100. package/esm2015/lib/trusted-parties/trusted-party.gql.js +148 -148
  101. package/esm2015/lib/trusted-parties/trusted-party.service.js +326 -326
  102. package/esm2015/lib/trusted-parties/trusted-party.types.js +41 -41
  103. package/esm2015/lib/trusted-parties/trusted-party2.gql.js +87 -87
  104. package/esm2015/lib/trusted-parties/trusted-party2.service.js +215 -215
  105. package/esm2015/lib/users/profile-details.service.js +214 -214
  106. package/esm2015/lib/users/profile.gql.js +97 -97
  107. package/esm2015/lib/users/profile.service.js +169 -169
  108. package/esm2015/lib/users/profile.types.js +34 -34
  109. package/esm2015/lib/users/user.gql.js +60 -60
  110. package/esm2015/lib/users/user.service.js +79 -79
  111. package/esm2015/lib/users/user.types.js +5 -5
  112. package/esm2015/lifeready-core.js +10 -10
  113. package/esm2015/public-api.js +81 -81
  114. package/fesm2015/lifeready-core.js +13088 -13088
  115. package/fesm2015/lifeready-core.js.map +1 -1
  116. package/lib/_common/ast.d.ts +11 -11
  117. package/lib/_common/deferred-promise.d.ts +12 -12
  118. package/lib/_common/exceptions.d.ts +109 -109
  119. package/lib/_common/queries.gql.d.ts +10 -10
  120. package/lib/_common/run-outside-angular.d.ts +14 -14
  121. package/lib/_common/types.d.ts +10 -10
  122. package/lib/_common/utils.d.ts +3 -3
  123. package/lib/api/contact-card.gql.d.ts +7 -7
  124. package/lib/api/contact-card.service.d.ts +52 -52
  125. package/lib/api/contact-card2.gql.d.ts +34 -34
  126. package/lib/api/contact-card2.service.d.ts +49 -49
  127. package/lib/api/file.service.d.ts +18 -18
  128. package/lib/api/item2.gql.d.ts +96 -96
  129. package/lib/api/item2.service.d.ts +177 -177
  130. package/lib/api/key-exchange.gql.d.ts +9 -9
  131. package/lib/api/key-exchange.service.d.ts +39 -39
  132. package/lib/api/key-exchange.types.d.ts +196 -196
  133. package/lib/api/key-exchange2.gql.d.ts +125 -125
  134. package/lib/api/key-exchange2.service.d.ts +187 -187
  135. package/lib/api/lock.gql.d.ts +27 -27
  136. package/lib/api/lock.service.d.ts +25 -25
  137. package/lib/api/lr-apollo.service.d.ts +15 -15
  138. package/lib/api/lr-graphql/index.d.ts +5 -5
  139. package/lib/api/lr-graphql/lr-graphql.service.d.ts +60 -60
  140. package/lib/api/lr-graphql/lr-merged-mutation.d.ts +27 -27
  141. package/lib/api/lr-graphql/lr-mutation-base.d.ts +28 -28
  142. package/lib/api/lr-graphql/lr-mutation.d.ts +8 -8
  143. package/lib/api/lr-graphql/lr.service.d.ts +9 -9
  144. package/lib/api/message.service.d.ts +58 -58
  145. package/lib/api/persist.service.d.ts +31 -31
  146. package/lib/api/query-processor/common-processors.service.d.ts +36 -36
  147. package/lib/api/query-processor/index.d.ts +2 -2
  148. package/lib/api/query-processor/query-processor.service.d.ts +18 -18
  149. package/lib/api/query-processor/tp-password-reset-processor.service.d.ts +15 -15
  150. package/lib/api/shared-contact-card.service.d.ts +33 -33
  151. package/lib/api/shared-contact-card2.gql.d.ts +36 -36
  152. package/lib/api/shared-contact-card2.service.d.ts +45 -45
  153. package/lib/api/time.service.d.ts +16 -16
  154. package/lib/api/types/graphql.types.d.ts +29 -29
  155. package/lib/api/types/index.d.ts +2 -2
  156. package/lib/api/types/lr-graphql.types.d.ts +385 -385
  157. package/lib/auth/auth.config.d.ts +5 -5
  158. package/lib/auth/auth.gql.d.ts +15 -15
  159. package/lib/auth/auth.types.d.ts +66 -66
  160. package/lib/auth/idle.service.d.ts +40 -40
  161. package/lib/auth/idle.types.d.ts +10 -10
  162. package/lib/auth/lbop.service.d.ts +91 -91
  163. package/lib/auth/life-ready-auth.service.d.ts +59 -59
  164. package/lib/auth/password.service.d.ts +78 -78
  165. package/lib/auth/register.service.d.ts +25 -25
  166. package/lib/auth/two-factor.service.d.ts +15 -15
  167. package/lib/category/category-meta.service.d.ts +23 -23
  168. package/lib/category/category.gql.d.ts +45 -45
  169. package/lib/category/category.service.d.ts +67 -67
  170. package/lib/category/category.types.d.ts +79 -79
  171. package/lib/cryptography/cryptography.types.d.ts +83 -83
  172. package/lib/cryptography/encryption.service.d.ts +41 -41
  173. package/lib/cryptography/key-factory.service.d.ts +38 -38
  174. package/lib/cryptography/key-graph.service.d.ts +33 -33
  175. package/lib/cryptography/key-meta.service.d.ts +44 -44
  176. package/lib/cryptography/key.service.d.ts +36 -36
  177. package/lib/cryptography/slip39.service.d.ts +43 -43
  178. package/lib/cryptography/web-crypto.service.d.ts +5 -5
  179. package/lib/life-ready.config.d.ts +14 -14
  180. package/lib/life-ready.module.d.ts +5 -5
  181. package/lib/plan/plan.gql.d.ts +11 -11
  182. package/lib/plan/plan.service.d.ts +33 -33
  183. package/lib/plan/plan.types.d.ts +31 -31
  184. package/lib/record/record-attachment.service.d.ts +16 -16
  185. package/lib/record/record.gql.d.ts +14 -14
  186. package/lib/record/record.service.d.ts +25 -25
  187. package/lib/record/record.types.d.ts +57 -57
  188. package/lib/record-type/record-type.service.d.ts +11 -11
  189. package/lib/record-type/record-type.types.d.ts +50 -50
  190. package/lib/scenario/approvals/scenario-approval.gql.d.ts +7 -7
  191. package/lib/scenario/approvals/scenario-approval.types.d.ts +63 -63
  192. package/lib/scenario/approvals/scenario-approver.service.d.ts +32 -32
  193. package/lib/scenario/claimants/scenario-claimant.gql.d.ts +5 -5
  194. package/lib/scenario/claimants/scenario-claimant.service.d.ts +17 -17
  195. package/lib/scenario/claimants/scenario-claimant.types.d.ts +18 -18
  196. package/lib/scenario/receivers/scenario-receiver.gql.d.ts +8 -8
  197. package/lib/scenario/receivers/scenario-receiver.service.d.ts +30 -30
  198. package/lib/scenario/receivers/scenario-receiver.types.d.ts +54 -54
  199. package/lib/scenario/scenario-setup.service.d.ts +22 -22
  200. package/lib/scenario/scenario.gql.d.ts +34 -34
  201. package/lib/scenario/scenario.service.d.ts +58 -58
  202. package/lib/scenario/scenario.types.d.ts +217 -217
  203. package/lib/search/search.gql.d.ts +1 -1
  204. package/lib/search/search.service.d.ts +25 -25
  205. package/lib/search/search.types.d.ts +20 -20
  206. package/lib/trusted-parties/tp-password-reset-request.service.d.ts +20 -20
  207. package/lib/trusted-parties/tp-password-reset-user.service.d.ts +35 -35
  208. package/lib/trusted-parties/tp-password-reset.constants.d.ts +3 -3
  209. package/lib/trusted-parties/tp-password-reset.gql.d.ts +218 -218
  210. package/lib/trusted-parties/tp-password-reset.service.d.ts +130 -130
  211. package/lib/trusted-parties/trusted-party.gql.d.ts +9 -9
  212. package/lib/trusted-parties/trusted-party.service.d.ts +44 -44
  213. package/lib/trusted-parties/trusted-party.types.d.ts +102 -102
  214. package/lib/trusted-parties/trusted-party2.gql.d.ts +79 -79
  215. package/lib/trusted-parties/trusted-party2.service.d.ts +114 -114
  216. package/lib/users/profile-details.service.d.ts +21 -21
  217. package/lib/users/profile.gql.d.ts +11 -11
  218. package/lib/users/profile.service.d.ts +35 -35
  219. package/lib/users/profile.types.d.ts +96 -96
  220. package/lib/users/user.gql.d.ts +9 -9
  221. package/lib/users/user.service.d.ts +12 -12
  222. package/lib/users/user.types.d.ts +23 -23
  223. package/lifeready-core.d.ts +9 -9
  224. package/package.json +1 -1
  225. package/public-api.d.ts +77 -77
@@ -1,181 +1,181 @@
1
- import { __awaiter } from "tslib";
2
- import { Injectable, Injector } from '@angular/core';
3
- import { CookieService } from 'ngx-cookie-service';
4
- import { EncryptionService } from '../cryptography/encryption.service';
5
- import { isDevMode } from '@angular/core';
6
- import { LrBadArgumentException } from '../_common/exceptions';
7
- import { KeyFactoryService as KFS } from '../cryptography/key-factory.service';
8
- import * as i0 from "@angular/core";
9
- import * as i1 from "../cryptography/key-factory.service";
10
- import * as i2 from "ngx-cookie-service";
11
- import * as i3 from "../cryptography/encryption.service";
12
- export class PersistService {
13
- constructor(keyFactory, cookieService, encryptionService, injector) {
14
- this.keyFactory = keyFactory;
15
- this.cookieService = cookieService;
16
- this.encryptionService = encryptionService;
17
- this.injector = injector;
18
- this.KEY_PREFIX = 'lrSession-';
19
- this.cookieSecure = true;
20
- this.serverSessionEncryptionKey = null;
21
- if (isDevMode()) {
22
- this.setCookieSecure(false);
23
- }
24
- }
25
- setServerSessionEncryptionKey(key) {
26
- this.serverSessionEncryptionKey = key;
27
- }
28
- clearServerSessionEncryptionKey() {
29
- this.serverSessionEncryptionKey = null;
30
- }
31
- // It's important that set and delete cookie use exactly the same set of parameters.
32
- getCookieParams() {
33
- return {
34
- path: '/',
35
- domain: null,
36
- secure: this.cookieSecure,
37
- sameSite: 'Lax',
38
- };
39
- }
40
- clear() {
41
- // Remove all cookies
42
- Object.keys(this.cookieService.getAll()).forEach((key) => {
43
- if (key.startsWith(this.KEY_PREFIX)) {
44
- this.deletePrefixedName(key);
45
- }
46
- });
47
- // Remove all persisted session variables
48
- Object.keys(localStorage).forEach((key) => {
49
- if (key.startsWith(this.KEY_PREFIX)) {
50
- this.deletePrefixedName(key);
51
- }
52
- });
53
- }
54
- setCookieSecure(value) {
55
- this.cookieSecure = value;
56
- if (!value) {
57
- if (isDevMode()) {
58
- console.warn('The cookie secure flag in persistService has been set to false, set it to true in production mode');
59
- }
60
- else {
61
- throw new LrBadArgumentException('Can not set PersistService cookie secure flag to false in production mode.');
62
- }
63
- }
64
- }
65
- prefixName(name) {
66
- return this.KEY_PREFIX + name;
67
- }
68
- delete(name) {
69
- this.deletePrefixedName(this.prefixName(name));
70
- }
71
- deletePrefixedName(prefixedName) {
72
- const params = this.getCookieParams();
73
- this.cookieService.delete(prefixedName, // name: string,
74
- params.path, // path?: string,
75
- params.domain, // domain ?: string,
76
- params.secure, // secure ?: boolean,
77
- params.sameSite // sameSite ?: 'Lax' | 'None' | 'Strict'): void;
78
- );
79
- localStorage.removeItem(prefixedName);
80
- }
81
- set({ name, value, serverSession, expiry, }) {
82
- return __awaiter(this, void 0, void 0, function* () {
83
- const prefixedName = this.prefixName(name);
84
- let item;
85
- if (serverSession) {
86
- item = {
87
- serverSession: true,
88
- data: yield this.encryptionService.encryptToString(this.serverSessionEncryptionKey, value),
89
- };
90
- }
91
- else {
92
- item = {
93
- data: value,
94
- };
95
- }
96
- if (expiry) {
97
- const key = yield this.keyFactory.createKey();
98
- item.expiry = expiry.toISOString();
99
- item.data = yield this.encryptionService.encryptToString(key, item.data);
100
- const cookieItem = {
101
- key: key.toJSON(true),
102
- };
103
- // If path is set to anything other than "/" then the cookie is only
104
- // accessible by JS if the current URL has the same prefix as the path.
105
- // Ideally we don't want the encryption key cookie to be sent at all, but
106
- // since the encrypted content is held in localstorage, it is not a security
107
- // risk, i.e. it is at least as secure as storing only in localstorage.
108
- const params = this.getCookieParams();
109
- this.cookieService.set(prefixedName, // name: string,
110
- JSON.stringify(cookieItem), // value: string,
111
- expiry, // expires?: number | Date,
112
- params.path, // path?: string,
113
- params.domain, // domain?: string,
114
- params.secure, // secure?: boolean,
115
- params.sameSite // sameSite?: 'Lax' | 'None' | 'Strict'
116
- );
117
- }
118
- localStorage.setItem(prefixedName, JSON.stringify(item));
119
- });
120
- }
121
- get(name) {
122
- return __awaiter(this, void 0, void 0, function* () {
123
- const prefixedName = this.prefixName(name);
124
- try {
125
- const ret = yield this.getImpl(prefixedName);
126
- if (ret == null) {
127
- // Clear any cookies to keep things in sync.
128
- this.deletePrefixedName(prefixedName);
129
- }
130
- return ret;
131
- }
132
- catch (error) {
133
- this.deletePrefixedName(prefixedName);
134
- throw error;
135
- }
136
- });
137
- }
138
- getImpl(name) {
139
- return __awaiter(this, void 0, void 0, function* () {
140
- const itemString = localStorage.getItem(name);
141
- if (!itemString) {
142
- return null;
143
- }
144
- const item = JSON.parse(itemString);
145
- let data;
146
- if (item.expiry) {
147
- const cookieItemString = this.cookieService.get(name);
148
- if (!cookieItemString) {
149
- // Probably expired, but we won't make any interpretations since if we only used
150
- // cookies we can't tell if it's expired or explicitly removed. So we just make
151
- // the behaviour here consistent with that.
152
- console.log('No cookie.');
153
- return null;
154
- }
155
- const cookieItem = JSON.parse(cookieItemString);
156
- const key = yield KFS.asKey(cookieItem.key);
157
- data = yield this.encryptionService.decrypt(key, item.data);
158
- }
159
- else {
160
- data = item.data;
161
- }
162
- if (item.serverSession) {
163
- data = yield this.encryptionService.decrypt(this.serverSessionEncryptionKey, data);
164
- }
165
- return data;
166
- });
167
- }
168
- }
169
- PersistService.ɵprov = i0.ɵɵdefineInjectable({ factory: function PersistService_Factory() { return new PersistService(i0.ɵɵinject(i1.KeyFactoryService), i0.ɵɵinject(i2.CookieService), i0.ɵɵinject(i3.EncryptionService), i0.ɵɵinject(i0.INJECTOR)); }, token: PersistService, providedIn: "root" });
170
- PersistService.decorators = [
171
- { type: Injectable, args: [{
172
- providedIn: 'root',
173
- },] }
174
- ];
175
- PersistService.ctorParameters = () => [
176
- { type: KFS },
177
- { type: CookieService },
178
- { type: EncryptionService },
179
- { type: Injector }
180
- ];
181
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGVyc2lzdC5zZXJ2aWNlLmpzIiwic291cmNlUm9vdCI6Ii9vcHQvYXRsYXNzaWFuL3BpcGVsaW5lcy9hZ2VudC9idWlsZC9wcm9qZWN0cy9jb3JlL3NyYy8iLCJzb3VyY2VzIjpbImxpYi9hcGkvcGVyc2lzdC5zZXJ2aWNlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFDQSxPQUFPLEVBQUUsVUFBVSxFQUFFLFFBQVEsRUFBRSxNQUFNLGVBQWUsQ0FBQztBQUNyRCxPQUFPLEVBQUUsYUFBYSxFQUFFLE1BQU0sb0JBQW9CLENBQUM7QUFDbkQsT0FBTyxFQUFFLGlCQUFpQixFQUFFLE1BQU0sb0NBQW9DLENBQUM7QUFDdkUsT0FBTyxFQUFFLFNBQVMsRUFBRSxNQUFNLGVBQWUsQ0FBQztBQUMxQyxPQUFPLEVBQUUsc0JBQXNCLEVBQUUsTUFBTSx1QkFBdUIsQ0FBQztBQUMvRCxPQUFPLEVBQUUsaUJBQWlCLElBQUksR0FBRyxFQUFFLE1BQU0scUNBQXFDLENBQUM7Ozs7O0FBZS9FLE1BQU0sT0FBTyxjQUFjO0lBTXpCLFlBQ1UsVUFBZSxFQUNmLGFBQTRCLEVBQzVCLGlCQUFvQyxFQUNwQyxRQUFrQjtRQUhsQixlQUFVLEdBQVYsVUFBVSxDQUFLO1FBQ2Ysa0JBQWEsR0FBYixhQUFhLENBQWU7UUFDNUIsc0JBQWlCLEdBQWpCLGlCQUFpQixDQUFtQjtRQUNwQyxhQUFRLEdBQVIsUUFBUSxDQUFVO1FBVFgsZUFBVSxHQUFHLFlBQVksQ0FBQztRQUVuQyxpQkFBWSxHQUFHLElBQUksQ0FBQztRQUNwQiwrQkFBMEIsR0FBWSxJQUFJLENBQUM7UUFRakQsSUFBSSxTQUFTLEVBQUUsRUFBRTtZQUNmLElBQUksQ0FBQyxlQUFlLENBQUMsS0FBSyxDQUFDLENBQUM7U0FDN0I7SUFDSCxDQUFDO0lBRUQsNkJBQTZCLENBQUMsR0FBWTtRQUN4QyxJQUFJLENBQUMsMEJBQTBCLEdBQUcsR0FBRyxDQUFDO0lBQ3hDLENBQUM7SUFFRCwrQkFBK0I7UUFDN0IsSUFBSSxDQUFDLDBCQUEwQixHQUFHLElBQUksQ0FBQztJQUN6QyxDQUFDO0lBRUQsb0ZBQW9GO0lBQzVFLGVBQWU7UUFDckIsT0FBTztZQUNMLElBQUksRUFBRSxHQUFHO1lBQ1QsTUFBTSxFQUFFLElBQUk7WUFDWixNQUFNLEVBQUUsSUFBSSxDQUFDLFlBQVk7WUFDekIsUUFBUSxFQUFFLEtBQWtDO1NBQzdDLENBQUM7SUFDSixDQUFDO0lBRU0sS0FBSztRQUNWLHFCQUFxQjtRQUNyQixNQUFNLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxhQUFhLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxHQUFHLEVBQUUsRUFBRTtZQUN2RCxJQUFJLEdBQUcsQ0FBQyxVQUFVLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxFQUFFO2dCQUNuQyxJQUFJLENBQUMsa0JBQWtCLENBQUMsR0FBRyxDQUFDLENBQUM7YUFDOUI7UUFDSCxDQUFDLENBQUMsQ0FBQztRQUVILHlDQUF5QztRQUN6QyxNQUFNLENBQUMsSUFBSSxDQUFDLFlBQVksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLEdBQUcsRUFBRSxFQUFFO1lBQ3hDLElBQUksR0FBRyxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLEVBQUU7Z0JBQ25DLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxHQUFHLENBQUMsQ0FBQzthQUM5QjtRQUNILENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVNLGVBQWUsQ0FBQyxLQUFjO1FBQ25DLElBQUksQ0FBQyxZQUFZLEdBQUcsS0FBSyxDQUFDO1FBQzFCLElBQUksQ0FBQyxLQUFLLEVBQUU7WUFDVixJQUFJLFNBQVMsRUFBRSxFQUFFO2dCQUNmLE9BQU8sQ0FBQyxJQUFJLENBQ1YsbUdBQW1HLENBQ3BHLENBQUM7YUFDSDtpQkFBTTtnQkFDTCxNQUFNLElBQUksc0JBQXNCLENBQzlCLDRFQUE0RSxDQUM3RSxDQUFDO2FBQ0g7U0FDRjtJQUNILENBQUM7SUFFTyxVQUFVLENBQUMsSUFBWTtRQUM3QixPQUFPLElBQUksQ0FBQyxVQUFVLEdBQUcsSUFBSSxDQUFDO0lBQ2hDLENBQUM7SUFFTSxNQUFNLENBQUMsSUFBWTtRQUN4QixJQUFJLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDO0lBQ2pELENBQUM7SUFFTyxrQkFBa0IsQ0FBQyxZQUFvQjtRQUM3QyxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsZUFBZSxFQUFFLENBQUM7UUFDdEMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxNQUFNLENBQ3ZCLFlBQVksRUFBRSxnQkFBZ0I7UUFDOUIsTUFBTSxDQUFDLElBQUksRUFBRSxpQkFBaUI7UUFDOUIsTUFBTSxDQUFDLE1BQU0sRUFBRSxvQkFBb0I7UUFDbkMsTUFBTSxDQUFDLE1BQU0sRUFBRSxxQkFBcUI7UUFDcEMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxnREFBZ0Q7U0FDakUsQ0FBQztRQUNGLFlBQVksQ0FBQyxVQUFVLENBQUMsWUFBWSxDQUFDLENBQUM7SUFDeEMsQ0FBQztJQUVZLEdBQUcsQ0FBQyxFQUNmLElBQUksRUFDSixLQUFLLEVBQ0wsYUFBYSxFQUNiLE1BQU0sR0FNUDs7WUFDQyxNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDO1lBRTNDLElBQUksSUFBVSxDQUFDO1lBRWYsSUFBSSxhQUFhLEVBQUU7Z0JBQ2pCLElBQUksR0FBRztvQkFDTCxhQUFhLEVBQUUsSUFBSTtvQkFDbkIsSUFBSSxFQUFFLE1BQU0sSUFBSSxDQUFDLGlCQUFpQixDQUFDLGVBQWUsQ0FDaEQsSUFBSSxDQUFDLDBCQUEwQixFQUMvQixLQUFLLENBQ047aUJBQ0YsQ0FBQzthQUNIO2lCQUFNO2dCQUNMLElBQUksR0FBRztvQkFDTCxJQUFJLEVBQUUsS0FBSztpQkFDWixDQUFDO2FBQ0g7WUFFRCxJQUFJLE1BQU0sRUFBRTtnQkFDVixNQUFNLEdBQUcsR0FBRyxNQUFNLElBQUksQ0FBQyxVQUFVLENBQUMsU0FBUyxFQUFFLENBQUM7Z0JBQzlDLElBQUksQ0FBQyxNQUFNLEdBQUcsTUFBTSxDQUFDLFdBQVcsRUFBRSxDQUFDO2dCQUNuQyxJQUFJLENBQUMsSUFBSSxHQUFHLE1BQU0sSUFBSSxDQUFDLGlCQUFpQixDQUFDLGVBQWUsQ0FBQyxHQUFHLEVBQUUsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDO2dCQUV6RSxNQUFNLFVBQVUsR0FBZTtvQkFDN0IsR0FBRyxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDO2lCQUN0QixDQUFDO2dCQUVGLG9FQUFvRTtnQkFDcEUsdUVBQXVFO2dCQUN2RSx5RUFBeUU7Z0JBQ3pFLDRFQUE0RTtnQkFDNUUsdUVBQXVFO2dCQUN2RSxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsZUFBZSxFQUFFLENBQUM7Z0JBQ3RDLElBQUksQ0FBQyxhQUFhLENBQUMsR0FBRyxDQUNwQixZQUFZLEVBQUUsZ0JBQWdCO2dCQUM5QixJQUFJLENBQUMsU0FBUyxDQUFDLFVBQVUsQ0FBQyxFQUFFLGlCQUFpQjtnQkFDN0MsTUFBTSxFQUFFLDJCQUEyQjtnQkFDbkMsTUFBTSxDQUFDLElBQUksRUFBRSxpQkFBaUI7Z0JBQzlCLE1BQU0sQ0FBQyxNQUFNLEVBQUUsbUJBQW1CO2dCQUNsQyxNQUFNLENBQUMsTUFBTSxFQUFFLG9CQUFvQjtnQkFDbkMsTUFBTSxDQUFDLFFBQVEsQ0FBQyx1Q0FBdUM7aUJBQ3hELENBQUM7YUFDSDtZQUVELFlBQVksQ0FBQyxPQUFPLENBQUMsWUFBWSxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQztRQUMzRCxDQUFDO0tBQUE7SUFFWSxHQUFHLENBQUMsSUFBWTs7WUFDM0IsTUFBTSxZQUFZLEdBQUcsSUFBSSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUUzQyxJQUFJO2dCQUNGLE1BQU0sR0FBRyxHQUFHLE1BQU0sSUFBSSxDQUFDLE9BQU8sQ0FBQyxZQUFZLENBQUMsQ0FBQztnQkFDN0MsSUFBSSxHQUFHLElBQUksSUFBSSxFQUFFO29CQUNmLDRDQUE0QztvQkFDNUMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLFlBQVksQ0FBQyxDQUFDO2lCQUN2QztnQkFDRCxPQUFPLEdBQUcsQ0FBQzthQUNaO1lBQUMsT0FBTyxLQUFLLEVBQUU7Z0JBQ2QsSUFBSSxDQUFDLGtCQUFrQixDQUFDLFlBQVksQ0FBQyxDQUFDO2dCQUN0QyxNQUFNLEtBQUssQ0FBQzthQUNiO1FBQ0gsQ0FBQztLQUFBO0lBRWEsT0FBTyxDQUFDLElBQVk7O1lBQ2hDLE1BQU0sVUFBVSxHQUFHLFlBQVksQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLENBQUM7WUFDOUMsSUFBSSxDQUFDLFVBQVUsRUFBRTtnQkFDZixPQUFPLElBQUksQ0FBQzthQUNiO1lBRUQsTUFBTSxJQUFJLEdBQVMsSUFBSSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsQ0FBQztZQUUxQyxJQUFJLElBQVMsQ0FBQztZQUVkLElBQUksSUFBSSxDQUFDLE1BQU0sRUFBRTtnQkFDZixNQUFNLGdCQUFnQixHQUFHLElBQUksQ0FBQyxhQUFhLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxDQUFDO2dCQUN0RCxJQUFJLENBQUMsZ0JBQWdCLEVBQUU7b0JBQ3JCLGdGQUFnRjtvQkFDaEYsK0VBQStFO29CQUMvRSwyQ0FBMkM7b0JBQzNDLE9BQU8sQ0FBQyxHQUFHLENBQUMsWUFBWSxDQUFDLENBQUM7b0JBQzFCLE9BQU8sSUFBSSxDQUFDO2lCQUNiO2dCQUVELE1BQU0sVUFBVSxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsZ0JBQWdCLENBQUMsQ0FBQztnQkFFaEQsTUFBTSxHQUFHLEdBQUcsTUFBTSxHQUFHLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxHQUFHLENBQUMsQ0FBQztnQkFFNUMsSUFBSSxHQUFHLE1BQU0sSUFBSSxDQUFDLGlCQUFpQixDQUFDLE9BQU8sQ0FBQyxHQUFHLEVBQUUsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDO2FBQzdEO2lCQUFNO2dCQUNMLElBQUksR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDO2FBQ2xCO1lBRUQsSUFBSSxJQUFJLENBQUMsYUFBYSxFQUFFO2dCQUN0QixJQUFJLEdBQUcsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsT0FBTyxDQUN6QyxJQUFJLENBQUMsMEJBQTBCLEVBQy9CLElBQUksQ0FDTCxDQUFDO2FBQ0g7WUFFRCxPQUFPLElBQUksQ0FBQztRQUNkLENBQUM7S0FBQTs7OztZQXhNRixVQUFVLFNBQUM7Z0JBQ1YsVUFBVSxFQUFFLE1BQU07YUFDbkI7OztZQWQ2QixHQUFHO1lBSnhCLGFBQWE7WUFDYixpQkFBaUI7WUFGTCxRQUFRIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgSldLIH0gZnJvbSAnbm9kZS1qb3NlJztcbmltcG9ydCB7IEluamVjdGFibGUsIEluamVjdG9yIH0gZnJvbSAnQGFuZ3VsYXIvY29yZSc7XG5pbXBvcnQgeyBDb29raWVTZXJ2aWNlIH0gZnJvbSAnbmd4LWNvb2tpZS1zZXJ2aWNlJztcbmltcG9ydCB7IEVuY3J5cHRpb25TZXJ2aWNlIH0gZnJvbSAnLi4vY3J5cHRvZ3JhcGh5L2VuY3J5cHRpb24uc2VydmljZSc7XG5pbXBvcnQgeyBpc0Rldk1vZGUgfSBmcm9tICdAYW5ndWxhci9jb3JlJztcbmltcG9ydCB7IExyQmFkQXJndW1lbnRFeGNlcHRpb24gfSBmcm9tICcuLi9fY29tbW9uL2V4Y2VwdGlvbnMnO1xuaW1wb3J0IHsgS2V5RmFjdG9yeVNlcnZpY2UgYXMgS0ZTIH0gZnJvbSAnLi4vY3J5cHRvZ3JhcGh5L2tleS1mYWN0b3J5LnNlcnZpY2UnO1xuXG5pbnRlcmZhY2UgSXRlbSB7XG4gIGRhdGE6IHN0cmluZztcbiAgZXhwaXJ5Pzogc3RyaW5nOyAvLyBpc28gZm9ybWF0XG4gIHNlcnZlclNlc3Npb24/OiBib29sZWFuO1xufVxuXG5pbnRlcmZhY2UgQ29va2llSXRlbSB7XG4gIGtleTogYW55O1xufVxuXG5ASW5qZWN0YWJsZSh7XG4gIHByb3ZpZGVkSW46ICdyb290Jyxcbn0pXG5leHBvcnQgY2xhc3MgUGVyc2lzdFNlcnZpY2Uge1xuICBwcml2YXRlIHJlYWRvbmx5IEtFWV9QUkVGSVggPSAnbHJTZXNzaW9uLSc7XG5cbiAgcHJpdmF0ZSBjb29raWVTZWN1cmUgPSB0cnVlO1xuICBwcml2YXRlIHNlcnZlclNlc3Npb25FbmNyeXB0aW9uS2V5OiBKV0suS2V5ID0gbnVsbDtcblxuICBjb25zdHJ1Y3RvcihcbiAgICBwcml2YXRlIGtleUZhY3Rvcnk6IEtGUyxcbiAgICBwcml2YXRlIGNvb2tpZVNlcnZpY2U6IENvb2tpZVNlcnZpY2UsXG4gICAgcHJpdmF0ZSBlbmNyeXB0aW9uU2VydmljZTogRW5jcnlwdGlvblNlcnZpY2UsXG4gICAgcHJpdmF0ZSBpbmplY3RvcjogSW5qZWN0b3JcbiAgKSB7XG4gICAgaWYgKGlzRGV2TW9kZSgpKSB7XG4gICAgICB0aGlzLnNldENvb2tpZVNlY3VyZShmYWxzZSk7XG4gICAgfVxuICB9XG5cbiAgc2V0U2VydmVyU2Vzc2lvbkVuY3J5cHRpb25LZXkoa2V5OiBKV0suS2V5KSB7XG4gICAgdGhpcy5zZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleSA9IGtleTtcbiAgfVxuXG4gIGNsZWFyU2VydmVyU2Vzc2lvbkVuY3J5cHRpb25LZXkoKSB7XG4gICAgdGhpcy5zZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleSA9IG51bGw7XG4gIH1cblxuICAvLyBJdCdzIGltcG9ydGFudCB0aGF0IHNldCBhbmQgZGVsZXRlIGNvb2tpZSB1c2UgZXhhY3RseSB0aGUgc2FtZSBzZXQgb2YgcGFyYW1ldGVycy5cbiAgcHJpdmF0ZSBnZXRDb29raWVQYXJhbXMoKSB7XG4gICAgcmV0dXJuIHtcbiAgICAgIHBhdGg6ICcvJyxcbiAgICAgIGRvbWFpbjogbnVsbCwgLy8gd2hpY2ggbWVhbnMgdGhlIGN1cnJlbnQgZG9tYWluIG9mIHRoZSBmcm9udGVuZCBhcHAuXG4gICAgICBzZWN1cmU6IHRoaXMuY29va2llU2VjdXJlLFxuICAgICAgc2FtZVNpdGU6ICdMYXgnIGFzICdMYXgnIHwgJ05vbmUnIHwgJ1N0cmljdCcsXG4gICAgfTtcbiAgfVxuXG4gIHB1YmxpYyBjbGVhcigpIHtcbiAgICAvLyBSZW1vdmUgYWxsIGNvb2tpZXNcbiAgICBPYmplY3Qua2V5cyh0aGlzLmNvb2tpZVNlcnZpY2UuZ2V0QWxsKCkpLmZvckVhY2goKGtleSkgPT4ge1xuICAgICAgaWYgKGtleS5zdGFydHNXaXRoKHRoaXMuS0VZX1BSRUZJWCkpIHtcbiAgICAgICAgdGhpcy5kZWxldGVQcmVmaXhlZE5hbWUoa2V5KTtcbiAgICAgIH1cbiAgICB9KTtcblxuICAgIC8vIFJlbW92ZSBhbGwgcGVyc2lzdGVkIHNlc3Npb24gdmFyaWFibGVzXG4gICAgT2JqZWN0LmtleXMobG9jYWxTdG9yYWdlKS5mb3JFYWNoKChrZXkpID0+IHtcbiAgICAgIGlmIChrZXkuc3RhcnRzV2l0aCh0aGlzLktFWV9QUkVGSVgpKSB7XG4gICAgICAgIHRoaXMuZGVsZXRlUHJlZml4ZWROYW1lKGtleSk7XG4gICAgICB9XG4gICAgfSk7XG4gIH1cblxuICBwdWJsaWMgc2V0Q29va2llU2VjdXJlKHZhbHVlOiBib29sZWFuKSB7XG4gICAgdGhpcy5jb29raWVTZWN1cmUgPSB2YWx1ZTtcbiAgICBpZiAoIXZhbHVlKSB7XG4gICAgICBpZiAoaXNEZXZNb2RlKCkpIHtcbiAgICAgICAgY29uc29sZS53YXJuKFxuICAgICAgICAgICdUaGUgY29va2llIHNlY3VyZSBmbGFnIGluIHBlcnNpc3RTZXJ2aWNlIGhhcyBiZWVuIHNldCB0byBmYWxzZSwgc2V0IGl0IHRvIHRydWUgaW4gcHJvZHVjdGlvbiBtb2RlJ1xuICAgICAgICApO1xuICAgICAgfSBlbHNlIHtcbiAgICAgICAgdGhyb3cgbmV3IExyQmFkQXJndW1lbnRFeGNlcHRpb24oXG4gICAgICAgICAgJ0NhbiBub3Qgc2V0IFBlcnNpc3RTZXJ2aWNlIGNvb2tpZSBzZWN1cmUgZmxhZyB0byBmYWxzZSBpbiBwcm9kdWN0aW9uIG1vZGUuJ1xuICAgICAgICApO1xuICAgICAgfVxuICAgIH1cbiAgfVxuXG4gIHByaXZhdGUgcHJlZml4TmFtZShuYW1lOiBzdHJpbmcpOiBzdHJpbmcge1xuICAgIHJldHVybiB0aGlzLktFWV9QUkVGSVggKyBuYW1lO1xuICB9XG5cbiAgcHVibGljIGRlbGV0ZShuYW1lOiBzdHJpbmcpOiB2b2lkIHtcbiAgICB0aGlzLmRlbGV0ZVByZWZpeGVkTmFtZSh0aGlzLnByZWZpeE5hbWUobmFtZSkpO1xuICB9XG5cbiAgcHJpdmF0ZSBkZWxldGVQcmVmaXhlZE5hbWUocHJlZml4ZWROYW1lOiBzdHJpbmcpOiB2b2lkIHtcbiAgICBjb25zdCBwYXJhbXMgPSB0aGlzLmdldENvb2tpZVBhcmFtcygpO1xuICAgIHRoaXMuY29va2llU2VydmljZS5kZWxldGUoXG4gICAgICBwcmVmaXhlZE5hbWUsIC8vIG5hbWU6IHN0cmluZyxcbiAgICAgIHBhcmFtcy5wYXRoLCAvLyBwYXRoPzogc3RyaW5nLFxuICAgICAgcGFyYW1zLmRvbWFpbiwgLy8gZG9tYWluID86IHN0cmluZyxcbiAgICAgIHBhcmFtcy5zZWN1cmUsIC8vIHNlY3VyZSA/OiBib29sZWFuLFxuICAgICAgcGFyYW1zLnNhbWVTaXRlIC8vIHNhbWVTaXRlID86ICdMYXgnIHwgJ05vbmUnIHwgJ1N0cmljdCcpOiB2b2lkO1xuICAgICk7XG4gICAgbG9jYWxTdG9yYWdlLnJlbW92ZUl0ZW0ocHJlZml4ZWROYW1lKTtcbiAgfVxuXG4gIHB1YmxpYyBhc3luYyBzZXQoe1xuICAgIG5hbWUsXG4gICAgdmFsdWUsXG4gICAgc2VydmVyU2Vzc2lvbixcbiAgICBleHBpcnksXG4gIH06IHtcbiAgICBuYW1lOiBzdHJpbmc7XG4gICAgdmFsdWU6IGFueTtcbiAgICBzZXJ2ZXJTZXNzaW9uOiBib29sZWFuO1xuICAgIGV4cGlyeT86IERhdGU7XG4gIH0pOiBQcm9taXNlPHZvaWQ+IHtcbiAgICBjb25zdCBwcmVmaXhlZE5hbWUgPSB0aGlzLnByZWZpeE5hbWUobmFtZSk7XG5cbiAgICBsZXQgaXRlbTogSXRlbTtcblxuICAgIGlmIChzZXJ2ZXJTZXNzaW9uKSB7XG4gICAgICBpdGVtID0ge1xuICAgICAgICBzZXJ2ZXJTZXNzaW9uOiB0cnVlLFxuICAgICAgICBkYXRhOiBhd2FpdCB0aGlzLmVuY3J5cHRpb25TZXJ2aWNlLmVuY3J5cHRUb1N0cmluZyhcbiAgICAgICAgICB0aGlzLnNlcnZlclNlc3Npb25FbmNyeXB0aW9uS2V5LFxuICAgICAgICAgIHZhbHVlXG4gICAgICAgICksXG4gICAgICB9O1xuICAgIH0gZWxzZSB7XG4gICAgICBpdGVtID0ge1xuICAgICAgICBkYXRhOiB2YWx1ZSxcbiAgICAgIH07XG4gICAgfVxuXG4gICAgaWYgKGV4cGlyeSkge1xuICAgICAgY29uc3Qga2V5ID0gYXdhaXQgdGhpcy5rZXlGYWN0b3J5LmNyZWF0ZUtleSgpO1xuICAgICAgaXRlbS5leHBpcnkgPSBleHBpcnkudG9JU09TdHJpbmcoKTtcbiAgICAgIGl0ZW0uZGF0YSA9IGF3YWl0IHRoaXMuZW5jcnlwdGlvblNlcnZpY2UuZW5jcnlwdFRvU3RyaW5nKGtleSwgaXRlbS5kYXRhKTtcblxuICAgICAgY29uc3QgY29va2llSXRlbTogQ29va2llSXRlbSA9IHtcbiAgICAgICAga2V5OiBrZXkudG9KU09OKHRydWUpLFxuICAgICAgfTtcblxuICAgICAgLy8gSWYgcGF0aCBpcyBzZXQgdG8gYW55dGhpbmcgb3RoZXIgdGhhbiBcIi9cIiB0aGVuIHRoZSBjb29raWUgaXMgb25seVxuICAgICAgLy8gYWNjZXNzaWJsZSBieSBKUyBpZiB0aGUgY3VycmVudCBVUkwgaGFzIHRoZSBzYW1lIHByZWZpeCBhcyB0aGUgcGF0aC5cbiAgICAgIC8vIElkZWFsbHkgd2UgZG9uJ3Qgd2FudCB0aGUgZW5jcnlwdGlvbiBrZXkgY29va2llIHRvIGJlIHNlbnQgYXQgYWxsLCBidXRcbiAgICAgIC8vIHNpbmNlIHRoZSBlbmNyeXB0ZWQgY29udGVudCBpcyBoZWxkIGluIGxvY2Fsc3RvcmFnZSwgaXQgaXMgbm90IGEgc2VjdXJpdHlcbiAgICAgIC8vIHJpc2ssIGkuZS4gaXQgaXMgYXQgbGVhc3QgYXMgc2VjdXJlIGFzIHN0b3Jpbmcgb25seSBpbiBsb2NhbHN0b3JhZ2UuXG4gICAgICBjb25zdCBwYXJhbXMgPSB0aGlzLmdldENvb2tpZVBhcmFtcygpO1xuICAgICAgdGhpcy5jb29raWVTZXJ2aWNlLnNldChcbiAgICAgICAgcHJlZml4ZWROYW1lLCAvLyBuYW1lOiBzdHJpbmcsXG4gICAgICAgIEpTT04uc3RyaW5naWZ5KGNvb2tpZUl0ZW0pLCAvLyB2YWx1ZTogc3RyaW5nLFxuICAgICAgICBleHBpcnksIC8vIGV4cGlyZXM/OiBudW1iZXIgfCBEYXRlLFxuICAgICAgICBwYXJhbXMucGF0aCwgLy8gcGF0aD86IHN0cmluZyxcbiAgICAgICAgcGFyYW1zLmRvbWFpbiwgLy8gZG9tYWluPzogc3RyaW5nLFxuICAgICAgICBwYXJhbXMuc2VjdXJlLCAvLyBzZWN1cmU/OiBib29sZWFuLFxuICAgICAgICBwYXJhbXMuc2FtZVNpdGUgLy8gc2FtZVNpdGU/OiAnTGF4JyB8ICdOb25lJyB8ICdTdHJpY3QnXG4gICAgICApO1xuICAgIH1cblxuICAgIGxvY2FsU3RvcmFnZS5zZXRJdGVtKHByZWZpeGVkTmFtZSwgSlNPTi5zdHJpbmdpZnkoaXRlbSkpO1xuICB9XG5cbiAgcHVibGljIGFzeW5jIGdldChuYW1lOiBzdHJpbmcpOiBQcm9taXNlPGFueT4ge1xuICAgIGNvbnN0IHByZWZpeGVkTmFtZSA9IHRoaXMucHJlZml4TmFtZShuYW1lKTtcblxuICAgIHRyeSB7XG4gICAgICBjb25zdCByZXQgPSBhd2FpdCB0aGlzLmdldEltcGwocHJlZml4ZWROYW1lKTtcbiAgICAgIGlmIChyZXQgPT0gbnVsbCkge1xuICAgICAgICAvLyBDbGVhciBhbnkgY29va2llcyB0byBrZWVwIHRoaW5ncyBpbiBzeW5jLlxuICAgICAgICB0aGlzLmRlbGV0ZVByZWZpeGVkTmFtZShwcmVmaXhlZE5hbWUpO1xuICAgICAgfVxuICAgICAgcmV0dXJuIHJldDtcbiAgICB9IGNhdGNoIChlcnJvcikge1xuICAgICAgdGhpcy5kZWxldGVQcmVmaXhlZE5hbWUocHJlZml4ZWROYW1lKTtcbiAgICAgIHRocm93IGVycm9yO1xuICAgIH1cbiAgfVxuXG4gIHByaXZhdGUgYXN5bmMgZ2V0SW1wbChuYW1lOiBzdHJpbmcpOiBQcm9taXNlPGFueT4ge1xuICAgIGNvbnN0IGl0ZW1TdHJpbmcgPSBsb2NhbFN0b3JhZ2UuZ2V0SXRlbShuYW1lKTtcbiAgICBpZiAoIWl0ZW1TdHJpbmcpIHtcbiAgICAgIHJldHVybiBudWxsO1xuICAgIH1cblxuICAgIGNvbnN0IGl0ZW06IEl0ZW0gPSBKU09OLnBhcnNlKGl0ZW1TdHJpbmcpO1xuXG4gICAgbGV0IGRhdGE6IGFueTtcblxuICAgIGlmIChpdGVtLmV4cGlyeSkge1xuICAgICAgY29uc3QgY29va2llSXRlbVN0cmluZyA9IHRoaXMuY29va2llU2VydmljZS5nZXQobmFtZSk7XG4gICAgICBpZiAoIWNvb2tpZUl0ZW1TdHJpbmcpIHtcbiAgICAgICAgLy8gUHJvYmFibHkgZXhwaXJlZCwgYnV0IHdlIHdvbid0IG1ha2UgYW55IGludGVycHJldGF0aW9ucyBzaW5jZSBpZiB3ZSBvbmx5IHVzZWRcbiAgICAgICAgLy8gY29va2llcyB3ZSBjYW4ndCB0ZWxsIGlmIGl0J3MgZXhwaXJlZCBvciBleHBsaWNpdGx5IHJlbW92ZWQuIFNvIHdlIGp1c3QgbWFrZVxuICAgICAgICAvLyB0aGUgYmVoYXZpb3VyIGhlcmUgY29uc2lzdGVudCB3aXRoIHRoYXQuXG4gICAgICAgIGNvbnNvbGUubG9nKCdObyBjb29raWUuJyk7XG4gICAgICAgIHJldHVybiBudWxsO1xuICAgICAgfVxuXG4gICAgICBjb25zdCBjb29raWVJdGVtID0gSlNPTi5wYXJzZShjb29raWVJdGVtU3RyaW5nKTtcblxuICAgICAgY29uc3Qga2V5ID0gYXdhaXQgS0ZTLmFzS2V5KGNvb2tpZUl0ZW0ua2V5KTtcblxuICAgICAgZGF0YSA9IGF3YWl0IHRoaXMuZW5jcnlwdGlvblNlcnZpY2UuZGVjcnlwdChrZXksIGl0ZW0uZGF0YSk7XG4gICAgfSBlbHNlIHtcbiAgICAgIGRhdGEgPSBpdGVtLmRhdGE7XG4gICAgfVxuXG4gICAgaWYgKGl0ZW0uc2VydmVyU2Vzc2lvbikge1xuICAgICAgZGF0YSA9IGF3YWl0IHRoaXMuZW5jcnlwdGlvblNlcnZpY2UuZGVjcnlwdChcbiAgICAgICAgdGhpcy5zZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleSxcbiAgICAgICAgZGF0YVxuICAgICAgKTtcbiAgICB9XG5cbiAgICByZXR1cm4gZGF0YTtcbiAgfVxufVxuIl19
1
+ import { __awaiter } from "tslib";
2
+ import { Injectable, Injector } from '@angular/core';
3
+ import { CookieService } from 'ngx-cookie-service';
4
+ import { EncryptionService } from '../cryptography/encryption.service';
5
+ import { isDevMode } from '@angular/core';
6
+ import { LrBadArgumentException } from '../_common/exceptions';
7
+ import { KeyFactoryService as KFS } from '../cryptography/key-factory.service';
8
+ import * as i0 from "@angular/core";
9
+ import * as i1 from "../cryptography/key-factory.service";
10
+ import * as i2 from "ngx-cookie-service";
11
+ import * as i3 from "../cryptography/encryption.service";
12
+ export class PersistService {
13
+ constructor(keyFactory, cookieService, encryptionService, injector) {
14
+ this.keyFactory = keyFactory;
15
+ this.cookieService = cookieService;
16
+ this.encryptionService = encryptionService;
17
+ this.injector = injector;
18
+ this.KEY_PREFIX = 'lrSession-';
19
+ this.cookieSecure = true;
20
+ this.serverSessionEncryptionKey = null;
21
+ if (isDevMode()) {
22
+ this.setCookieSecure(false);
23
+ }
24
+ }
25
+ setServerSessionEncryptionKey(key) {
26
+ this.serverSessionEncryptionKey = key;
27
+ }
28
+ clearServerSessionEncryptionKey() {
29
+ this.serverSessionEncryptionKey = null;
30
+ }
31
+ // It's important that set and delete cookie use exactly the same set of parameters.
32
+ getCookieParams() {
33
+ return {
34
+ path: '/',
35
+ domain: null,
36
+ secure: this.cookieSecure,
37
+ sameSite: 'Lax',
38
+ };
39
+ }
40
+ clear() {
41
+ // Remove all cookies
42
+ Object.keys(this.cookieService.getAll()).forEach((key) => {
43
+ if (key.startsWith(this.KEY_PREFIX)) {
44
+ this.deletePrefixedName(key);
45
+ }
46
+ });
47
+ // Remove all persisted session variables
48
+ Object.keys(localStorage).forEach((key) => {
49
+ if (key.startsWith(this.KEY_PREFIX)) {
50
+ this.deletePrefixedName(key);
51
+ }
52
+ });
53
+ }
54
+ setCookieSecure(value) {
55
+ this.cookieSecure = value;
56
+ if (!value) {
57
+ if (isDevMode()) {
58
+ console.warn('The cookie secure flag in persistService has been set to false, set it to true in production mode');
59
+ }
60
+ else {
61
+ throw new LrBadArgumentException('Can not set PersistService cookie secure flag to false in production mode.');
62
+ }
63
+ }
64
+ }
65
+ prefixName(name) {
66
+ return this.KEY_PREFIX + name;
67
+ }
68
+ delete(name) {
69
+ this.deletePrefixedName(this.prefixName(name));
70
+ }
71
+ deletePrefixedName(prefixedName) {
72
+ const params = this.getCookieParams();
73
+ this.cookieService.delete(prefixedName, // name: string,
74
+ params.path, // path?: string,
75
+ params.domain, // domain ?: string,
76
+ params.secure, // secure ?: boolean,
77
+ params.sameSite // sameSite ?: 'Lax' | 'None' | 'Strict'): void;
78
+ );
79
+ localStorage.removeItem(prefixedName);
80
+ }
81
+ set({ name, value, serverSession, expiry, }) {
82
+ return __awaiter(this, void 0, void 0, function* () {
83
+ const prefixedName = this.prefixName(name);
84
+ let item;
85
+ if (serverSession) {
86
+ item = {
87
+ serverSession: true,
88
+ data: yield this.encryptionService.encryptToString(this.serverSessionEncryptionKey, value),
89
+ };
90
+ }
91
+ else {
92
+ item = {
93
+ data: value,
94
+ };
95
+ }
96
+ if (expiry) {
97
+ const key = yield this.keyFactory.createKey();
98
+ item.expiry = expiry.toISOString();
99
+ item.data = yield this.encryptionService.encryptToString(key, item.data);
100
+ const cookieItem = {
101
+ key: key.toJSON(true),
102
+ };
103
+ // If path is set to anything other than "/" then the cookie is only
104
+ // accessible by JS if the current URL has the same prefix as the path.
105
+ // Ideally we don't want the encryption key cookie to be sent at all, but
106
+ // since the encrypted content is held in localstorage, it is not a security
107
+ // risk, i.e. it is at least as secure as storing only in localstorage.
108
+ const params = this.getCookieParams();
109
+ this.cookieService.set(prefixedName, // name: string,
110
+ JSON.stringify(cookieItem), // value: string,
111
+ expiry, // expires?: number | Date,
112
+ params.path, // path?: string,
113
+ params.domain, // domain?: string,
114
+ params.secure, // secure?: boolean,
115
+ params.sameSite // sameSite?: 'Lax' | 'None' | 'Strict'
116
+ );
117
+ }
118
+ localStorage.setItem(prefixedName, JSON.stringify(item));
119
+ });
120
+ }
121
+ get(name) {
122
+ return __awaiter(this, void 0, void 0, function* () {
123
+ const prefixedName = this.prefixName(name);
124
+ try {
125
+ const ret = yield this.getImpl(prefixedName);
126
+ if (ret == null) {
127
+ // Clear any cookies to keep things in sync.
128
+ this.deletePrefixedName(prefixedName);
129
+ }
130
+ return ret;
131
+ }
132
+ catch (error) {
133
+ this.deletePrefixedName(prefixedName);
134
+ throw error;
135
+ }
136
+ });
137
+ }
138
+ getImpl(name) {
139
+ return __awaiter(this, void 0, void 0, function* () {
140
+ const itemString = localStorage.getItem(name);
141
+ if (!itemString) {
142
+ return null;
143
+ }
144
+ const item = JSON.parse(itemString);
145
+ let data;
146
+ if (item.expiry) {
147
+ const cookieItemString = this.cookieService.get(name);
148
+ if (!cookieItemString) {
149
+ // Probably expired, but we won't make any interpretations since if we only used
150
+ // cookies we can't tell if it's expired or explicitly removed. So we just make
151
+ // the behaviour here consistent with that.
152
+ console.log('No cookie.');
153
+ return null;
154
+ }
155
+ const cookieItem = JSON.parse(cookieItemString);
156
+ const key = yield KFS.asKey(cookieItem.key);
157
+ data = yield this.encryptionService.decrypt(key, item.data);
158
+ }
159
+ else {
160
+ data = item.data;
161
+ }
162
+ if (item.serverSession) {
163
+ data = yield this.encryptionService.decrypt(this.serverSessionEncryptionKey, data);
164
+ }
165
+ return data;
166
+ });
167
+ }
168
+ }
169
+ PersistService.ɵprov = i0.ɵɵdefineInjectable({ factory: function PersistService_Factory() { return new PersistService(i0.ɵɵinject(i1.KeyFactoryService), i0.ɵɵinject(i2.CookieService), i0.ɵɵinject(i3.EncryptionService), i0.ɵɵinject(i0.INJECTOR)); }, token: PersistService, providedIn: "root" });
170
+ PersistService.decorators = [
171
+ { type: Injectable, args: [{
172
+ providedIn: 'root',
173
+ },] }
174
+ ];
175
+ PersistService.ctorParameters = () => [
176
+ { type: KFS },
177
+ { type: CookieService },
178
+ { type: EncryptionService },
179
+ { type: Injector }
180
+ ];
181
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGVyc2lzdC5zZXJ2aWNlLmpzIiwic291cmNlUm9vdCI6IkM6L1Byb2plY3RzL25ld3JlcG8va2MtY2xpZW50L3Byb2plY3RzL2NvcmUvc3JjLyIsInNvdXJjZXMiOlsibGliL2FwaS9wZXJzaXN0LnNlcnZpY2UudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUNBLE9BQU8sRUFBRSxVQUFVLEVBQUUsUUFBUSxFQUFFLE1BQU0sZUFBZSxDQUFDO0FBQ3JELE9BQU8sRUFBRSxhQUFhLEVBQUUsTUFBTSxvQkFBb0IsQ0FBQztBQUNuRCxPQUFPLEVBQUUsaUJBQWlCLEVBQUUsTUFBTSxvQ0FBb0MsQ0FBQztBQUN2RSxPQUFPLEVBQUUsU0FBUyxFQUFFLE1BQU0sZUFBZSxDQUFDO0FBQzFDLE9BQU8sRUFBRSxzQkFBc0IsRUFBRSxNQUFNLHVCQUF1QixDQUFDO0FBQy9ELE9BQU8sRUFBRSxpQkFBaUIsSUFBSSxHQUFHLEVBQUUsTUFBTSxxQ0FBcUMsQ0FBQzs7Ozs7QUFlL0UsTUFBTSxPQUFPLGNBQWM7SUFNekIsWUFDVSxVQUFlLEVBQ2YsYUFBNEIsRUFDNUIsaUJBQW9DLEVBQ3BDLFFBQWtCO1FBSGxCLGVBQVUsR0FBVixVQUFVLENBQUs7UUFDZixrQkFBYSxHQUFiLGFBQWEsQ0FBZTtRQUM1QixzQkFBaUIsR0FBakIsaUJBQWlCLENBQW1CO1FBQ3BDLGFBQVEsR0FBUixRQUFRLENBQVU7UUFUWCxlQUFVLEdBQUcsWUFBWSxDQUFDO1FBRW5DLGlCQUFZLEdBQUcsSUFBSSxDQUFDO1FBQ3BCLCtCQUEwQixHQUFZLElBQUksQ0FBQztRQVFqRCxJQUFJLFNBQVMsRUFBRSxFQUFFO1lBQ2YsSUFBSSxDQUFDLGVBQWUsQ0FBQyxLQUFLLENBQUMsQ0FBQztTQUM3QjtJQUNILENBQUM7SUFFRCw2QkFBNkIsQ0FBQyxHQUFZO1FBQ3hDLElBQUksQ0FBQywwQkFBMEIsR0FBRyxHQUFHLENBQUM7SUFDeEMsQ0FBQztJQUVELCtCQUErQjtRQUM3QixJQUFJLENBQUMsMEJBQTBCLEdBQUcsSUFBSSxDQUFDO0lBQ3pDLENBQUM7SUFFRCxvRkFBb0Y7SUFDNUUsZUFBZTtRQUNyQixPQUFPO1lBQ0wsSUFBSSxFQUFFLEdBQUc7WUFDVCxNQUFNLEVBQUUsSUFBSTtZQUNaLE1BQU0sRUFBRSxJQUFJLENBQUMsWUFBWTtZQUN6QixRQUFRLEVBQUUsS0FBa0M7U0FDN0MsQ0FBQztJQUNKLENBQUM7SUFFTSxLQUFLO1FBQ1YscUJBQXFCO1FBQ3JCLE1BQU0sQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLEdBQUcsRUFBRSxFQUFFO1lBQ3ZELElBQUksR0FBRyxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLEVBQUU7Z0JBQ25DLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxHQUFHLENBQUMsQ0FBQzthQUM5QjtRQUNILENBQUMsQ0FBQyxDQUFDO1FBRUgseUNBQXlDO1FBQ3pDLE1BQU0sQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUMsT0FBTyxDQUFDLENBQUMsR0FBRyxFQUFFLEVBQUU7WUFDeEMsSUFBSSxHQUFHLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsRUFBRTtnQkFDbkMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLEdBQUcsQ0FBQyxDQUFDO2FBQzlCO1FBQ0gsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDO0lBRU0sZUFBZSxDQUFDLEtBQWM7UUFDbkMsSUFBSSxDQUFDLFlBQVksR0FBRyxLQUFLLENBQUM7UUFDMUIsSUFBSSxDQUFDLEtBQUssRUFBRTtZQUNWLElBQUksU0FBUyxFQUFFLEVBQUU7Z0JBQ2YsT0FBTyxDQUFDLElBQUksQ0FDVixtR0FBbUcsQ0FDcEcsQ0FBQzthQUNIO2lCQUFNO2dCQUNMLE1BQU0sSUFBSSxzQkFBc0IsQ0FDOUIsNEVBQTRFLENBQzdFLENBQUM7YUFDSDtTQUNGO0lBQ0gsQ0FBQztJQUVPLFVBQVUsQ0FBQyxJQUFZO1FBQzdCLE9BQU8sSUFBSSxDQUFDLFVBQVUsR0FBRyxJQUFJLENBQUM7SUFDaEMsQ0FBQztJQUVNLE1BQU0sQ0FBQyxJQUFZO1FBQ3hCLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUM7SUFDakQsQ0FBQztJQUVPLGtCQUFrQixDQUFDLFlBQW9CO1FBQzdDLE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxlQUFlLEVBQUUsQ0FBQztRQUN0QyxJQUFJLENBQUMsYUFBYSxDQUFDLE1BQU0sQ0FDdkIsWUFBWSxFQUFFLGdCQUFnQjtRQUM5QixNQUFNLENBQUMsSUFBSSxFQUFFLGlCQUFpQjtRQUM5QixNQUFNLENBQUMsTUFBTSxFQUFFLG9CQUFvQjtRQUNuQyxNQUFNLENBQUMsTUFBTSxFQUFFLHFCQUFxQjtRQUNwQyxNQUFNLENBQUMsUUFBUSxDQUFDLGdEQUFnRDtTQUNqRSxDQUFDO1FBQ0YsWUFBWSxDQUFDLFVBQVUsQ0FBQyxZQUFZLENBQUMsQ0FBQztJQUN4QyxDQUFDO0lBRVksR0FBRyxDQUFDLEVBQ2YsSUFBSSxFQUNKLEtBQUssRUFDTCxhQUFhLEVBQ2IsTUFBTSxHQU1QOztZQUNDLE1BQU0sWUFBWSxHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsSUFBSSxDQUFDLENBQUM7WUFFM0MsSUFBSSxJQUFVLENBQUM7WUFFZixJQUFJLGFBQWEsRUFBRTtnQkFDakIsSUFBSSxHQUFHO29CQUNMLGFBQWEsRUFBRSxJQUFJO29CQUNuQixJQUFJLEVBQUUsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsZUFBZSxDQUNoRCxJQUFJLENBQUMsMEJBQTBCLEVBQy9CLEtBQUssQ0FDTjtpQkFDRixDQUFDO2FBQ0g7aUJBQU07Z0JBQ0wsSUFBSSxHQUFHO29CQUNMLElBQUksRUFBRSxLQUFLO2lCQUNaLENBQUM7YUFDSDtZQUVELElBQUksTUFBTSxFQUFFO2dCQUNWLE1BQU0sR0FBRyxHQUFHLE1BQU0sSUFBSSxDQUFDLFVBQVUsQ0FBQyxTQUFTLEVBQUUsQ0FBQztnQkFDOUMsSUFBSSxDQUFDLE1BQU0sR0FBRyxNQUFNLENBQUMsV0FBVyxFQUFFLENBQUM7Z0JBQ25DLElBQUksQ0FBQyxJQUFJLEdBQUcsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsZUFBZSxDQUFDLEdBQUcsRUFBRSxJQUFJLENBQUMsSUFBSSxDQUFDLENBQUM7Z0JBRXpFLE1BQU0sVUFBVSxHQUFlO29CQUM3QixHQUFHLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUM7aUJBQ3RCLENBQUM7Z0JBRUYsb0VBQW9FO2dCQUNwRSx1RUFBdUU7Z0JBQ3ZFLHlFQUF5RTtnQkFDekUsNEVBQTRFO2dCQUM1RSx1RUFBdUU7Z0JBQ3ZFLE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxlQUFlLEVBQUUsQ0FBQztnQkFDdEMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxHQUFHLENBQ3BCLFlBQVksRUFBRSxnQkFBZ0I7Z0JBQzlCLElBQUksQ0FBQyxTQUFTLENBQUMsVUFBVSxDQUFDLEVBQUUsaUJBQWlCO2dCQUM3QyxNQUFNLEVBQUUsMkJBQTJCO2dCQUNuQyxNQUFNLENBQUMsSUFBSSxFQUFFLGlCQUFpQjtnQkFDOUIsTUFBTSxDQUFDLE1BQU0sRUFBRSxtQkFBbUI7Z0JBQ2xDLE1BQU0sQ0FBQyxNQUFNLEVBQUUsb0JBQW9CO2dCQUNuQyxNQUFNLENBQUMsUUFBUSxDQUFDLHVDQUF1QztpQkFDeEQsQ0FBQzthQUNIO1lBRUQsWUFBWSxDQUFDLE9BQU8sQ0FBQyxZQUFZLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDO1FBQzNELENBQUM7S0FBQTtJQUVZLEdBQUcsQ0FBQyxJQUFZOztZQUMzQixNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDO1lBRTNDLElBQUk7Z0JBQ0YsTUFBTSxHQUFHLEdBQUcsTUFBTSxJQUFJLENBQUMsT0FBTyxDQUFDLFlBQVksQ0FBQyxDQUFDO2dCQUM3QyxJQUFJLEdBQUcsSUFBSSxJQUFJLEVBQUU7b0JBQ2YsNENBQTRDO29CQUM1QyxJQUFJLENBQUMsa0JBQWtCLENBQUMsWUFBWSxDQUFDLENBQUM7aUJBQ3ZDO2dCQUNELE9BQU8sR0FBRyxDQUFDO2FBQ1o7WUFBQyxPQUFPLEtBQUssRUFBRTtnQkFDZCxJQUFJLENBQUMsa0JBQWtCLENBQUMsWUFBWSxDQUFDLENBQUM7Z0JBQ3RDLE1BQU0sS0FBSyxDQUFDO2FBQ2I7UUFDSCxDQUFDO0tBQUE7SUFFYSxPQUFPLENBQUMsSUFBWTs7WUFDaEMsTUFBTSxVQUFVLEdBQUcsWUFBWSxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUM5QyxJQUFJLENBQUMsVUFBVSxFQUFFO2dCQUNmLE9BQU8sSUFBSSxDQUFDO2FBQ2I7WUFFRCxNQUFNLElBQUksR0FBUyxJQUFJLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxDQUFDO1lBRTFDLElBQUksSUFBUyxDQUFDO1lBRWQsSUFBSSxJQUFJLENBQUMsTUFBTSxFQUFFO2dCQUNmLE1BQU0sZ0JBQWdCLEdBQUcsSUFBSSxDQUFDLGFBQWEsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLENBQUM7Z0JBQ3RELElBQUksQ0FBQyxnQkFBZ0IsRUFBRTtvQkFDckIsZ0ZBQWdGO29CQUNoRiwrRUFBK0U7b0JBQy9FLDJDQUEyQztvQkFDM0MsT0FBTyxDQUFDLEdBQUcsQ0FBQyxZQUFZLENBQUMsQ0FBQztvQkFDMUIsT0FBTyxJQUFJLENBQUM7aUJBQ2I7Z0JBRUQsTUFBTSxVQUFVLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxDQUFDO2dCQUVoRCxNQUFNLEdBQUcsR0FBRyxNQUFNLEdBQUcsQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxDQUFDO2dCQUU1QyxJQUFJLEdBQUcsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsT0FBTyxDQUFDLEdBQUcsRUFBRSxJQUFJLENBQUMsSUFBSSxDQUFDLENBQUM7YUFDN0Q7aUJBQU07Z0JBQ0wsSUFBSSxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUM7YUFDbEI7WUFFRCxJQUFJLElBQUksQ0FBQyxhQUFhLEVBQUU7Z0JBQ3RCLElBQUksR0FBRyxNQUFNLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxPQUFPLENBQ3pDLElBQUksQ0FBQywwQkFBMEIsRUFDL0IsSUFBSSxDQUNMLENBQUM7YUFDSDtZQUVELE9BQU8sSUFBSSxDQUFDO1FBQ2QsQ0FBQztLQUFBOzs7O1lBeE1GLFVBQVUsU0FBQztnQkFDVixVQUFVLEVBQUUsTUFBTTthQUNuQjs7O1lBZDZCLEdBQUc7WUFKeEIsYUFBYTtZQUNiLGlCQUFpQjtZQUZMLFFBQVEiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgeyBKV0sgfSBmcm9tICdub2RlLWpvc2UnO1xyXG5pbXBvcnQgeyBJbmplY3RhYmxlLCBJbmplY3RvciB9IGZyb20gJ0Bhbmd1bGFyL2NvcmUnO1xyXG5pbXBvcnQgeyBDb29raWVTZXJ2aWNlIH0gZnJvbSAnbmd4LWNvb2tpZS1zZXJ2aWNlJztcclxuaW1wb3J0IHsgRW5jcnlwdGlvblNlcnZpY2UgfSBmcm9tICcuLi9jcnlwdG9ncmFwaHkvZW5jcnlwdGlvbi5zZXJ2aWNlJztcclxuaW1wb3J0IHsgaXNEZXZNb2RlIH0gZnJvbSAnQGFuZ3VsYXIvY29yZSc7XHJcbmltcG9ydCB7IExyQmFkQXJndW1lbnRFeGNlcHRpb24gfSBmcm9tICcuLi9fY29tbW9uL2V4Y2VwdGlvbnMnO1xyXG5pbXBvcnQgeyBLZXlGYWN0b3J5U2VydmljZSBhcyBLRlMgfSBmcm9tICcuLi9jcnlwdG9ncmFwaHkva2V5LWZhY3Rvcnkuc2VydmljZSc7XHJcblxyXG5pbnRlcmZhY2UgSXRlbSB7XHJcbiAgZGF0YTogc3RyaW5nO1xyXG4gIGV4cGlyeT86IHN0cmluZzsgLy8gaXNvIGZvcm1hdFxyXG4gIHNlcnZlclNlc3Npb24/OiBib29sZWFuO1xyXG59XHJcblxyXG5pbnRlcmZhY2UgQ29va2llSXRlbSB7XHJcbiAga2V5OiBhbnk7XHJcbn1cclxuXHJcbkBJbmplY3RhYmxlKHtcclxuICBwcm92aWRlZEluOiAncm9vdCcsXHJcbn0pXHJcbmV4cG9ydCBjbGFzcyBQZXJzaXN0U2VydmljZSB7XHJcbiAgcHJpdmF0ZSByZWFkb25seSBLRVlfUFJFRklYID0gJ2xyU2Vzc2lvbi0nO1xyXG5cclxuICBwcml2YXRlIGNvb2tpZVNlY3VyZSA9IHRydWU7XHJcbiAgcHJpdmF0ZSBzZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleTogSldLLktleSA9IG51bGw7XHJcblxyXG4gIGNvbnN0cnVjdG9yKFxyXG4gICAgcHJpdmF0ZSBrZXlGYWN0b3J5OiBLRlMsXHJcbiAgICBwcml2YXRlIGNvb2tpZVNlcnZpY2U6IENvb2tpZVNlcnZpY2UsXHJcbiAgICBwcml2YXRlIGVuY3J5cHRpb25TZXJ2aWNlOiBFbmNyeXB0aW9uU2VydmljZSxcclxuICAgIHByaXZhdGUgaW5qZWN0b3I6IEluamVjdG9yXHJcbiAgKSB7XHJcbiAgICBpZiAoaXNEZXZNb2RlKCkpIHtcclxuICAgICAgdGhpcy5zZXRDb29raWVTZWN1cmUoZmFsc2UpO1xyXG4gICAgfVxyXG4gIH1cclxuXHJcbiAgc2V0U2VydmVyU2Vzc2lvbkVuY3J5cHRpb25LZXkoa2V5OiBKV0suS2V5KSB7XHJcbiAgICB0aGlzLnNlcnZlclNlc3Npb25FbmNyeXB0aW9uS2V5ID0ga2V5O1xyXG4gIH1cclxuXHJcbiAgY2xlYXJTZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleSgpIHtcclxuICAgIHRoaXMuc2VydmVyU2Vzc2lvbkVuY3J5cHRpb25LZXkgPSBudWxsO1xyXG4gIH1cclxuXHJcbiAgLy8gSXQncyBpbXBvcnRhbnQgdGhhdCBzZXQgYW5kIGRlbGV0ZSBjb29raWUgdXNlIGV4YWN0bHkgdGhlIHNhbWUgc2V0IG9mIHBhcmFtZXRlcnMuXHJcbiAgcHJpdmF0ZSBnZXRDb29raWVQYXJhbXMoKSB7XHJcbiAgICByZXR1cm4ge1xyXG4gICAgICBwYXRoOiAnLycsXHJcbiAgICAgIGRvbWFpbjogbnVsbCwgLy8gd2hpY2ggbWVhbnMgdGhlIGN1cnJlbnQgZG9tYWluIG9mIHRoZSBmcm9udGVuZCBhcHAuXHJcbiAgICAgIHNlY3VyZTogdGhpcy5jb29raWVTZWN1cmUsXHJcbiAgICAgIHNhbWVTaXRlOiAnTGF4JyBhcyAnTGF4JyB8ICdOb25lJyB8ICdTdHJpY3QnLFxyXG4gICAgfTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyBjbGVhcigpIHtcclxuICAgIC8vIFJlbW92ZSBhbGwgY29va2llc1xyXG4gICAgT2JqZWN0LmtleXModGhpcy5jb29raWVTZXJ2aWNlLmdldEFsbCgpKS5mb3JFYWNoKChrZXkpID0+IHtcclxuICAgICAgaWYgKGtleS5zdGFydHNXaXRoKHRoaXMuS0VZX1BSRUZJWCkpIHtcclxuICAgICAgICB0aGlzLmRlbGV0ZVByZWZpeGVkTmFtZShrZXkpO1xyXG4gICAgICB9XHJcbiAgICB9KTtcclxuXHJcbiAgICAvLyBSZW1vdmUgYWxsIHBlcnNpc3RlZCBzZXNzaW9uIHZhcmlhYmxlc1xyXG4gICAgT2JqZWN0LmtleXMobG9jYWxTdG9yYWdlKS5mb3JFYWNoKChrZXkpID0+IHtcclxuICAgICAgaWYgKGtleS5zdGFydHNXaXRoKHRoaXMuS0VZX1BSRUZJWCkpIHtcclxuICAgICAgICB0aGlzLmRlbGV0ZVByZWZpeGVkTmFtZShrZXkpO1xyXG4gICAgICB9XHJcbiAgICB9KTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyBzZXRDb29raWVTZWN1cmUodmFsdWU6IGJvb2xlYW4pIHtcclxuICAgIHRoaXMuY29va2llU2VjdXJlID0gdmFsdWU7XHJcbiAgICBpZiAoIXZhbHVlKSB7XHJcbiAgICAgIGlmIChpc0Rldk1vZGUoKSkge1xyXG4gICAgICAgIGNvbnNvbGUud2FybihcclxuICAgICAgICAgICdUaGUgY29va2llIHNlY3VyZSBmbGFnIGluIHBlcnNpc3RTZXJ2aWNlIGhhcyBiZWVuIHNldCB0byBmYWxzZSwgc2V0IGl0IHRvIHRydWUgaW4gcHJvZHVjdGlvbiBtb2RlJ1xyXG4gICAgICAgICk7XHJcbiAgICAgIH0gZWxzZSB7XHJcbiAgICAgICAgdGhyb3cgbmV3IExyQmFkQXJndW1lbnRFeGNlcHRpb24oXHJcbiAgICAgICAgICAnQ2FuIG5vdCBzZXQgUGVyc2lzdFNlcnZpY2UgY29va2llIHNlY3VyZSBmbGFnIHRvIGZhbHNlIGluIHByb2R1Y3Rpb24gbW9kZS4nXHJcbiAgICAgICAgKTtcclxuICAgICAgfVxyXG4gICAgfVxyXG4gIH1cclxuXHJcbiAgcHJpdmF0ZSBwcmVmaXhOYW1lKG5hbWU6IHN0cmluZyk6IHN0cmluZyB7XHJcbiAgICByZXR1cm4gdGhpcy5LRVlfUFJFRklYICsgbmFtZTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyBkZWxldGUobmFtZTogc3RyaW5nKTogdm9pZCB7XHJcbiAgICB0aGlzLmRlbGV0ZVByZWZpeGVkTmFtZSh0aGlzLnByZWZpeE5hbWUobmFtZSkpO1xyXG4gIH1cclxuXHJcbiAgcHJpdmF0ZSBkZWxldGVQcmVmaXhlZE5hbWUocHJlZml4ZWROYW1lOiBzdHJpbmcpOiB2b2lkIHtcclxuICAgIGNvbnN0IHBhcmFtcyA9IHRoaXMuZ2V0Q29va2llUGFyYW1zKCk7XHJcbiAgICB0aGlzLmNvb2tpZVNlcnZpY2UuZGVsZXRlKFxyXG4gICAgICBwcmVmaXhlZE5hbWUsIC8vIG5hbWU6IHN0cmluZyxcclxuICAgICAgcGFyYW1zLnBhdGgsIC8vIHBhdGg/OiBzdHJpbmcsXHJcbiAgICAgIHBhcmFtcy5kb21haW4sIC8vIGRvbWFpbiA/OiBzdHJpbmcsXHJcbiAgICAgIHBhcmFtcy5zZWN1cmUsIC8vIHNlY3VyZSA/OiBib29sZWFuLFxyXG4gICAgICBwYXJhbXMuc2FtZVNpdGUgLy8gc2FtZVNpdGUgPzogJ0xheCcgfCAnTm9uZScgfCAnU3RyaWN0Jyk6IHZvaWQ7XHJcbiAgICApO1xyXG4gICAgbG9jYWxTdG9yYWdlLnJlbW92ZUl0ZW0ocHJlZml4ZWROYW1lKTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyBhc3luYyBzZXQoe1xyXG4gICAgbmFtZSxcclxuICAgIHZhbHVlLFxyXG4gICAgc2VydmVyU2Vzc2lvbixcclxuICAgIGV4cGlyeSxcclxuICB9OiB7XHJcbiAgICBuYW1lOiBzdHJpbmc7XHJcbiAgICB2YWx1ZTogYW55O1xyXG4gICAgc2VydmVyU2Vzc2lvbjogYm9vbGVhbjtcclxuICAgIGV4cGlyeT86IERhdGU7XHJcbiAgfSk6IFByb21pc2U8dm9pZD4ge1xyXG4gICAgY29uc3QgcHJlZml4ZWROYW1lID0gdGhpcy5wcmVmaXhOYW1lKG5hbWUpO1xyXG5cclxuICAgIGxldCBpdGVtOiBJdGVtO1xyXG5cclxuICAgIGlmIChzZXJ2ZXJTZXNzaW9uKSB7XHJcbiAgICAgIGl0ZW0gPSB7XHJcbiAgICAgICAgc2VydmVyU2Vzc2lvbjogdHJ1ZSxcclxuICAgICAgICBkYXRhOiBhd2FpdCB0aGlzLmVuY3J5cHRpb25TZXJ2aWNlLmVuY3J5cHRUb1N0cmluZyhcclxuICAgICAgICAgIHRoaXMuc2VydmVyU2Vzc2lvbkVuY3J5cHRpb25LZXksXHJcbiAgICAgICAgICB2YWx1ZVxyXG4gICAgICAgICksXHJcbiAgICAgIH07XHJcbiAgICB9IGVsc2Uge1xyXG4gICAgICBpdGVtID0ge1xyXG4gICAgICAgIGRhdGE6IHZhbHVlLFxyXG4gICAgICB9O1xyXG4gICAgfVxyXG5cclxuICAgIGlmIChleHBpcnkpIHtcclxuICAgICAgY29uc3Qga2V5ID0gYXdhaXQgdGhpcy5rZXlGYWN0b3J5LmNyZWF0ZUtleSgpO1xyXG4gICAgICBpdGVtLmV4cGlyeSA9IGV4cGlyeS50b0lTT1N0cmluZygpO1xyXG4gICAgICBpdGVtLmRhdGEgPSBhd2FpdCB0aGlzLmVuY3J5cHRpb25TZXJ2aWNlLmVuY3J5cHRUb1N0cmluZyhrZXksIGl0ZW0uZGF0YSk7XHJcblxyXG4gICAgICBjb25zdCBjb29raWVJdGVtOiBDb29raWVJdGVtID0ge1xyXG4gICAgICAgIGtleToga2V5LnRvSlNPTih0cnVlKSxcclxuICAgICAgfTtcclxuXHJcbiAgICAgIC8vIElmIHBhdGggaXMgc2V0IHRvIGFueXRoaW5nIG90aGVyIHRoYW4gXCIvXCIgdGhlbiB0aGUgY29va2llIGlzIG9ubHlcclxuICAgICAgLy8gYWNjZXNzaWJsZSBieSBKUyBpZiB0aGUgY3VycmVudCBVUkwgaGFzIHRoZSBzYW1lIHByZWZpeCBhcyB0aGUgcGF0aC5cclxuICAgICAgLy8gSWRlYWxseSB3ZSBkb24ndCB3YW50IHRoZSBlbmNyeXB0aW9uIGtleSBjb29raWUgdG8gYmUgc2VudCBhdCBhbGwsIGJ1dFxyXG4gICAgICAvLyBzaW5jZSB0aGUgZW5jcnlwdGVkIGNvbnRlbnQgaXMgaGVsZCBpbiBsb2NhbHN0b3JhZ2UsIGl0IGlzIG5vdCBhIHNlY3VyaXR5XHJcbiAgICAgIC8vIHJpc2ssIGkuZS4gaXQgaXMgYXQgbGVhc3QgYXMgc2VjdXJlIGFzIHN0b3Jpbmcgb25seSBpbiBsb2NhbHN0b3JhZ2UuXHJcbiAgICAgIGNvbnN0IHBhcmFtcyA9IHRoaXMuZ2V0Q29va2llUGFyYW1zKCk7XHJcbiAgICAgIHRoaXMuY29va2llU2VydmljZS5zZXQoXHJcbiAgICAgICAgcHJlZml4ZWROYW1lLCAvLyBuYW1lOiBzdHJpbmcsXHJcbiAgICAgICAgSlNPTi5zdHJpbmdpZnkoY29va2llSXRlbSksIC8vIHZhbHVlOiBzdHJpbmcsXHJcbiAgICAgICAgZXhwaXJ5LCAvLyBleHBpcmVzPzogbnVtYmVyIHwgRGF0ZSxcclxuICAgICAgICBwYXJhbXMucGF0aCwgLy8gcGF0aD86IHN0cmluZyxcclxuICAgICAgICBwYXJhbXMuZG9tYWluLCAvLyBkb21haW4/OiBzdHJpbmcsXHJcbiAgICAgICAgcGFyYW1zLnNlY3VyZSwgLy8gc2VjdXJlPzogYm9vbGVhbixcclxuICAgICAgICBwYXJhbXMuc2FtZVNpdGUgLy8gc2FtZVNpdGU/OiAnTGF4JyB8ICdOb25lJyB8ICdTdHJpY3QnXHJcbiAgICAgICk7XHJcbiAgICB9XHJcblxyXG4gICAgbG9jYWxTdG9yYWdlLnNldEl0ZW0ocHJlZml4ZWROYW1lLCBKU09OLnN0cmluZ2lmeShpdGVtKSk7XHJcbiAgfVxyXG5cclxuICBwdWJsaWMgYXN5bmMgZ2V0KG5hbWU6IHN0cmluZyk6IFByb21pc2U8YW55PiB7XHJcbiAgICBjb25zdCBwcmVmaXhlZE5hbWUgPSB0aGlzLnByZWZpeE5hbWUobmFtZSk7XHJcblxyXG4gICAgdHJ5IHtcclxuICAgICAgY29uc3QgcmV0ID0gYXdhaXQgdGhpcy5nZXRJbXBsKHByZWZpeGVkTmFtZSk7XHJcbiAgICAgIGlmIChyZXQgPT0gbnVsbCkge1xyXG4gICAgICAgIC8vIENsZWFyIGFueSBjb29raWVzIHRvIGtlZXAgdGhpbmdzIGluIHN5bmMuXHJcbiAgICAgICAgdGhpcy5kZWxldGVQcmVmaXhlZE5hbWUocHJlZml4ZWROYW1lKTtcclxuICAgICAgfVxyXG4gICAgICByZXR1cm4gcmV0O1xyXG4gICAgfSBjYXRjaCAoZXJyb3IpIHtcclxuICAgICAgdGhpcy5kZWxldGVQcmVmaXhlZE5hbWUocHJlZml4ZWROYW1lKTtcclxuICAgICAgdGhyb3cgZXJyb3I7XHJcbiAgICB9XHJcbiAgfVxyXG5cclxuICBwcml2YXRlIGFzeW5jIGdldEltcGwobmFtZTogc3RyaW5nKTogUHJvbWlzZTxhbnk+IHtcclxuICAgIGNvbnN0IGl0ZW1TdHJpbmcgPSBsb2NhbFN0b3JhZ2UuZ2V0SXRlbShuYW1lKTtcclxuICAgIGlmICghaXRlbVN0cmluZykge1xyXG4gICAgICByZXR1cm4gbnVsbDtcclxuICAgIH1cclxuXHJcbiAgICBjb25zdCBpdGVtOiBJdGVtID0gSlNPTi5wYXJzZShpdGVtU3RyaW5nKTtcclxuXHJcbiAgICBsZXQgZGF0YTogYW55O1xyXG5cclxuICAgIGlmIChpdGVtLmV4cGlyeSkge1xyXG4gICAgICBjb25zdCBjb29raWVJdGVtU3RyaW5nID0gdGhpcy5jb29raWVTZXJ2aWNlLmdldChuYW1lKTtcclxuICAgICAgaWYgKCFjb29raWVJdGVtU3RyaW5nKSB7XHJcbiAgICAgICAgLy8gUHJvYmFibHkgZXhwaXJlZCwgYnV0IHdlIHdvbid0IG1ha2UgYW55IGludGVycHJldGF0aW9ucyBzaW5jZSBpZiB3ZSBvbmx5IHVzZWRcclxuICAgICAgICAvLyBjb29raWVzIHdlIGNhbid0IHRlbGwgaWYgaXQncyBleHBpcmVkIG9yIGV4cGxpY2l0bHkgcmVtb3ZlZC4gU28gd2UganVzdCBtYWtlXHJcbiAgICAgICAgLy8gdGhlIGJlaGF2aW91ciBoZXJlIGNvbnNpc3RlbnQgd2l0aCB0aGF0LlxyXG4gICAgICAgIGNvbnNvbGUubG9nKCdObyBjb29raWUuJyk7XHJcbiAgICAgICAgcmV0dXJuIG51bGw7XHJcbiAgICAgIH1cclxuXHJcbiAgICAgIGNvbnN0IGNvb2tpZUl0ZW0gPSBKU09OLnBhcnNlKGNvb2tpZUl0ZW1TdHJpbmcpO1xyXG5cclxuICAgICAgY29uc3Qga2V5ID0gYXdhaXQgS0ZTLmFzS2V5KGNvb2tpZUl0ZW0ua2V5KTtcclxuXHJcbiAgICAgIGRhdGEgPSBhd2FpdCB0aGlzLmVuY3J5cHRpb25TZXJ2aWNlLmRlY3J5cHQoa2V5LCBpdGVtLmRhdGEpO1xyXG4gICAgfSBlbHNlIHtcclxuICAgICAgZGF0YSA9IGl0ZW0uZGF0YTtcclxuICAgIH1cclxuXHJcbiAgICBpZiAoaXRlbS5zZXJ2ZXJTZXNzaW9uKSB7XHJcbiAgICAgIGRhdGEgPSBhd2FpdCB0aGlzLmVuY3J5cHRpb25TZXJ2aWNlLmRlY3J5cHQoXHJcbiAgICAgICAgdGhpcy5zZXJ2ZXJTZXNzaW9uRW5jcnlwdGlvbktleSxcclxuICAgICAgICBkYXRhXHJcbiAgICAgICk7XHJcbiAgICB9XHJcblxyXG4gICAgcmV0dXJuIGRhdGE7XHJcbiAgfVxyXG59XHJcbiJdfQ==