@sunbird-cb/utils 1.0.8 → 1.0.9

package/esm5/lib/services/auth-keycloak.service.js

@@ -1,293 +1,310 @@
-import * as tslib_1 from "tslib";
-import { Injectable } from '@angular/core';
-import { KeycloakEventType, KeycloakService } from 'keycloak-angular';
-import { fromEvent, ReplaySubject } from 'rxjs';
-import { filter } from 'rxjs/operators';
-import { AuthMicrosoftService } from './auth-microsoft.service';
-import { ConfigurationsService } from './configurations.service';
-import * as i0 from "@angular/core";
-import * as i1 from "./configurations.service";
-import * as i2 from "keycloak-angular";
-import * as i3 from "./auth-microsoft.service";
-function IParsedToken() { }
-if (false) {
-    IParsedToken.prototype.email;
-    IParsedToken.prototype.encEmail;
-    IParsedToken.prototype.name;
-    IParsedToken.prototype.preferred_username;
-}
-var storage = localStorage;
-var storageKey = 'kc';
-var AuthKeycloakService = (function () {
-    function AuthKeycloakService(configSvc, keycloakSvc, msAuthSvc) {
-        var _this = this;
-        this.configSvc = configSvc;
-        this.keycloakSvc = keycloakSvc;
-        this.msAuthSvc = msAuthSvc;
-        this.loginChangeSubject = new ReplaySubject(1);
-        this.loginChangeSubject.subscribe((function (isLoggedIn) {
-            _this.configSvc.isAuthenticated = isLoggedIn;
-            if (isLoggedIn &&
-                _this.configSvc.instanceConfig &&
-                Boolean(_this.configSvc.instanceConfig.disablePidCheck)) {
-                _this.configSvc.userProfile = {
-                    email: _this.userEmail,
-                    userName: _this.userName,
-                    userId: _this.userId || '',
-                };
-            }
-        }));
-    }
-    Object.defineProperty(AuthKeycloakService.prototype, "isLoggedIn$", {
-        get: function () {
-            return this.loginChangeSubject.asObservable();
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "isLoggedIn", {
-        get: function () {
-            return this.keycloakSvc.isLoggedIn();
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "isAuthenticated", {
-        get: function () {
-            return this.keycloakSvc.getKeycloakInstance().authenticated;
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "token", {
-        get: function () {
-            return this.keycloakSvc.getKeycloakInstance().token;
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "sessionId", {
-        get: function () {
-            return this.keycloakSvc.getKeycloakInstance().sessionId;
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "userId", {
-        get: function () {
-            var kc = this.keycloakSvc.getKeycloakInstance();
-            if (!kc) {
-                return;
-            }
-            return (kc.tokenParsed && kc.tokenParsed.sub) || (kc.idTokenParsed && kc.idTokenParsed.sub);
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "userEmail", {
-        get: function () {
-            var kc = this.keycloakSvc.getKeycloakInstance();
-            var tokenParsed = ((kc.tokenParsed));
-            var idTokenParsed = ((kc.idTokenParsed));
-            return ((tokenParsed && tokenParsed.email) ||
-                (idTokenParsed && idTokenParsed.email) ||
-                (idTokenParsed && idTokenParsed.encEmail) ||
-                (tokenParsed && tokenParsed.preferred_username) ||
-                (idTokenParsed && idTokenParsed.preferred_username));
-        },
-        enumerable: true,
-        configurable: true
-    });
-    Object.defineProperty(AuthKeycloakService.prototype, "userName", {
-        get: function () {
-            var kc = this.keycloakSvc.getKeycloakInstance();
-            return ((kc.tokenParsed && (((kc.tokenParsed))).name) ||
-                (kc.idTokenParsed && (((kc.idTokenParsed))).name));
-        },
-        enumerable: true,
-        configurable: true
-    });
-    AuthKeycloakService.prototype.initAuth = function () {
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var instanceConfig, err_1;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this.configSvc.instanceConfig) {
-                            return [2, false];
-                        }
-                        instanceConfig = this.configSvc.instanceConfig;
-                        if (instanceConfig.microsoft.isConfigured) {
-                            this.msAuthSvc.init({ microsoft: instanceConfig.microsoft });
-                        }
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        this.setupGlobalAuthResponder();
-                        this.addKeycloakEventListener();
-                        return [4, this.keycloakSvc.init({
-                                config: {
-                                    url: instanceConfig.keycloak.url,
-                                    realm: instanceConfig.keycloak.realm,
-                                    clientId: instanceConfig.keycloak.clientId,
-                                },
-                                initOptions: tslib_1.__assign({}, this.getSavedKcConfig(), { onLoad: instanceConfig.keycloak.onLoad || 'check-sso', checkLoginIframe: false }),
-                                enableBearerInterceptor: true,
-                                loadUserProfileAtStartUp: false,
-                                bearerExcludedUrls: instanceConfig.keycloak.bearerExcludedUrls,
-                            })];
-                    case 2: return [2, _a.sent()];
-                    case 3:
-                        err_1 = _a.sent();
-                        return [2, false];
-                    case 4: return [2];
-                }
-            });
-        });
-    };
-    AuthKeycloakService.prototype.login = function (idpHint, redirectUrl) {
-        if (idpHint === void 0) { idpHint = 'E'; }
-        if (redirectUrl === void 0) { redirectUrl = this.defaultRedirectUrl; }
-        return this.keycloakSvc.login({
-            idpHint: idpHint,
-            redirectUri: redirectUrl,
-        });
-    };
-    AuthKeycloakService.prototype.register = function (redirectUrl) {
-        if (redirectUrl === void 0) { redirectUrl = this.defaultRedirectUrl; }
-        return this.keycloakSvc.register({
-            redirectUri: redirectUrl,
-        });
-    };
-    AuthKeycloakService.prototype.logout = function (_redirectUrl) {
-        if (_redirectUrl === void 0) { _redirectUrl = this.defaultRedirectUrl; }
-        return tslib_1.__awaiter(this, void 0, void 0, function () {
-            return tslib_1.__generator(this, function (_a) {
-                window.location.href = _redirectUrl + "apis/reset";
-                return [2];
-            });
-        });
-    };
-    AuthKeycloakService.prototype.addKeycloakEventListener = function () {
-        var _this = this;
-        this.keycloakSvc.keycloakEvents$.subscribe((function (event) {
-            switch (event.type) {
-                case KeycloakEventType.OnAuthError:
-                    _this.loginChangeSubject.next(false);
-                    break;
-                case KeycloakEventType.OnAuthLogout:
-                    _this.loginChangeSubject.next(false);
-                    storage.removeItem(storageKey);
-                    break;
-                case KeycloakEventType.OnAuthRefreshError:
-                    break;
-                case KeycloakEventType.OnAuthRefreshSuccess:
-                    break;
-                case KeycloakEventType.OnAuthSuccess:
-                    break;
-                case KeycloakEventType.OnReady:
-                    _this.loginChangeSubject.next(event.args);
-                    if (event.args) {
-                        _this.saveKeycloakConfig();
-                    }
-                    break;
-                case KeycloakEventType.OnTokenExpired:
-                    _this.keycloakSvc.updateToken(60);
-                    break;
-            }
-        }));
-    };
-    AuthKeycloakService.prototype.setupGlobalAuthResponder = function () {
-        var _this = this;
-        fromEvent(window, 'message')
-            .pipe(filter((function (event) {
-            return Boolean(event) &&
-                Boolean(event.data) &&
-                event.data.type === 'AUTH_REQUEST' &&
-                Boolean(event.source && typeof event.source.postMessage === 'function');
-        })))
-            .subscribe((function (event) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
-            var contentWindow, token, response;
-            return tslib_1.__generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        contentWindow = ((event.source));
-                        return [4, this.keycloakSvc.getToken()];
-                    case 1:
-                        token = _a.sent();
-                        response = {
-                            app: 'WEB_PORTAL',
-                            type: 'AUTH_RESPONSE',
-                            state: 'NONE',
-                            plugin: 'NONE',
-                            data: {
-                                token: token,
-                                id: event.data && event.data.data && event.data.data.id,
-                            },
-                        };
-                        contentWindow.postMessage(response, '*');
-                        return [2];
-                }
-            });
-        }); }));
-    };
-    AuthKeycloakService.prototype.saveKeycloakConfig = function () {
-        var kc = this.keycloakSvc.getKeycloakInstance();
-        var kcInitOptions = {
-            idToken: kc.idToken,
-            refreshToken: kc.refreshToken,
-            timeSkew: kc.timeSkew,
-            token: kc.token,
-        };
-        storage.setItem(storageKey, JSON.stringify(kcInitOptions));
-    };
-    AuthKeycloakService.prototype.getSavedKcConfig = function () {
-        try {
-            var lastSaved = storage.getItem(storageKey);
-            if (lastSaved) {
-                var processed = JSON.parse(lastSaved);
-                if ('idToken' in processed &&
-                    'refreshToken' in processed &&
-                    'timeSkew' in processed &&
-                    'token' in processed) {
-                    return processed;
-                }
-            }
-        }
-        catch (e) { }
-        return {};
-    };
-    Object.defineProperty(AuthKeycloakService.prototype, "defaultRedirectUrl", {
-        get: function () {
-            try {
-                var baseUrl = document.baseURI;
-                return baseUrl || location.origin;
-            }
-            catch (error) {
-                return location.origin;
-            }
-        },
-        enumerable: true,
-        configurable: true
-    });
-    AuthKeycloakService.decorators = [
-        { type: Injectable, args: [{
-                    providedIn: 'root',
-                },] }
-    ];
-    AuthKeycloakService.ctorParameters = function () { return [
-        { type: ConfigurationsService },
-        { type: KeycloakService },
-        { type: AuthMicrosoftService }
-    ]; };
-    /** @nocollapse */ AuthKeycloakService.ngInjectableDef = i0.ɵɵdefineInjectable({ factory: function AuthKeycloakService_Factory() { return new AuthKeycloakService(i0.ɵɵinject(i1.ConfigurationsService), i0.ɵɵinject(i2.KeycloakService), i0.ɵɵinject(i3.AuthMicrosoftService)); }, token: AuthKeycloakService, providedIn: "root" });
-    return AuthKeycloakService;
-}());
-export { AuthKeycloakService };
-if (false) {
-    AuthKeycloakService.prototype.loginChangeSubject;
-    AuthKeycloakService.prototype.configSvc;
-    AuthKeycloakService.prototype.keycloakSvc;
-    AuthKeycloakService.prototype.msAuthSvc;
-}
-//# sourceMappingURL=data:application/json;base64,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
+import * as tslib_1 from "tslib";
+import { HttpClient } from '@angular/common/http';
+import { Injectable } from '@angular/core';
+import { KeycloakEventType, KeycloakService } from 'keycloak-angular';
+import { fromEvent, ReplaySubject } from 'rxjs';
+import { filter } from 'rxjs/operators';
+import { AuthMicrosoftService } from './auth-microsoft.service';
+import { ConfigurationsService } from './configurations.service';
+import * as i0 from "@angular/core";
+import * as i1 from "@angular/common/http";
+import * as i2 from "./configurations.service";
+import * as i3 from "keycloak-angular";
+import * as i4 from "./auth-microsoft.service";
+function IParsedToken() { }
+if (false) {
+    IParsedToken.prototype.email;
+    IParsedToken.prototype.encEmail;
+    IParsedToken.prototype.name;
+    IParsedToken.prototype.preferred_username;
+}
+var storage = localStorage;
+var storageKey = 'kc';
+var AuthKeycloakService = (function () {
+    function AuthKeycloakService(http, configSvc, keycloakSvc, msAuthSvc) {
+        var _this = this;
+        this.http = http;
+        this.configSvc = configSvc;
+        this.keycloakSvc = keycloakSvc;
+        this.msAuthSvc = msAuthSvc;
+        this.loginChangeSubject = new ReplaySubject(1);
+        this.loginChangeSubject.subscribe((function (isLoggedIn) {
+            _this.configSvc.isAuthenticated = isLoggedIn;
+            if (isLoggedIn &&
+                _this.configSvc.instanceConfig &&
+                Boolean(_this.configSvc.instanceConfig.disablePidCheck)) {
+                _this.configSvc.userProfile = {
+                    email: _this.userEmail,
+                    userName: _this.userName,
+                    userId: _this.userId || '',
+                };
+            }
+        }));
+    }
+    Object.defineProperty(AuthKeycloakService.prototype, "isLoggedIn$", {
+        get: function () {
+            return this.loginChangeSubject.asObservable();
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "isLoggedIn", {
+        get: function () {
+            return this.keycloakSvc.isLoggedIn();
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "isAuthenticated", {
+        get: function () {
+            return this.keycloakSvc.getKeycloakInstance().authenticated;
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "token", {
+        get: function () {
+            return this.keycloakSvc.getKeycloakInstance().token;
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "sessionId", {
+        get: function () {
+            return this.keycloakSvc.getKeycloakInstance().sessionId;
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "userId", {
+        get: function () {
+            var kc = this.keycloakSvc.getKeycloakInstance();
+            if (!kc) {
+                return;
+            }
+            return (kc.tokenParsed && kc.tokenParsed.sub) || (kc.idTokenParsed && kc.idTokenParsed.sub);
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "userEmail", {
+        get: function () {
+            var kc = this.keycloakSvc.getKeycloakInstance();
+            var tokenParsed = ((kc.tokenParsed));
+            var idTokenParsed = ((kc.idTokenParsed));
+            return ((tokenParsed && tokenParsed.email) ||
+                (idTokenParsed && idTokenParsed.email) ||
+                (idTokenParsed && idTokenParsed.encEmail) ||
+                (tokenParsed && tokenParsed.preferred_username) ||
+                (idTokenParsed && idTokenParsed.preferred_username));
+        },
+        enumerable: true,
+        configurable: true
+    });
+    Object.defineProperty(AuthKeycloakService.prototype, "userName", {
+        get: function () {
+            var kc = this.keycloakSvc.getKeycloakInstance();
+            return ((kc.tokenParsed && (((kc.tokenParsed))).name) ||
+                (kc.idTokenParsed && (((kc.idTokenParsed))).name));
+        },
+        enumerable: true,
+        configurable: true
+    });
+    AuthKeycloakService.prototype.initAuth = function () {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var instanceConfig, err_1;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!this.configSvc.instanceConfig) {
+                            return [2, false];
+                        }
+                        instanceConfig = this.configSvc.instanceConfig;
+                        if (instanceConfig.microsoft.isConfigured) {
+                            this.msAuthSvc.init({ microsoft: instanceConfig.microsoft });
+                        }
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        this.setupGlobalAuthResponder();
+                        this.addKeycloakEventListener();
+                        return [4, this.keycloakSvc.init({
+                                config: {
+                                    url: instanceConfig.keycloak.url,
+                                    realm: instanceConfig.keycloak.realm,
+                                    clientId: instanceConfig.keycloak.clientId,
+                                },
+                                initOptions: tslib_1.__assign({}, this.getSavedKcConfig(), { onLoad: instanceConfig.keycloak.onLoad || 'check-sso', checkLoginIframe: false }),
+                                enableBearerInterceptor: true,
+                                loadUserProfileAtStartUp: false,
+                                bearerExcludedUrls: instanceConfig.keycloak.bearerExcludedUrls,
+                            })];
+                    case 2: return [2, _a.sent()];
+                    case 3:
+                        err_1 = _a.sent();
+                        return [2, false];
+                    case 4: return [2];
+                }
+            });
+        });
+    };
+    AuthKeycloakService.prototype.login = function (idpHint, redirectUrl) {
+        if (idpHint === void 0) { idpHint = 'E'; }
+        if (redirectUrl === void 0) { redirectUrl = this.defaultRedirectUrl; }
+        return this.keycloakSvc.login({
+            idpHint: idpHint,
+            redirectUri: redirectUrl,
+        });
+    };
+    AuthKeycloakService.prototype.register = function (redirectUrl) {
+        if (redirectUrl === void 0) { redirectUrl = this.defaultRedirectUrl; }
+        return this.keycloakSvc.register({
+            redirectUri: redirectUrl,
+        });
+    };
+    AuthKeycloakService.prototype.logout = function (_redirectUrl) {
+        if (_redirectUrl === void 0) { _redirectUrl = this.defaultRedirectUrl; }
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            return tslib_1.__generator(this, function (_a) {
+                window.location.href = _redirectUrl + "apis/reset";
+                return [2];
+            });
+        });
+    };
+    AuthKeycloakService.prototype.force_logout = function () {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4, this.http.get('/apis/reset').toPromise()];
+                    case 1:
+                        _a.sent();
+                        return [2];
+                }
+            });
+        });
+    };
+    AuthKeycloakService.prototype.addKeycloakEventListener = function () {
+        var _this = this;
+        this.keycloakSvc.keycloakEvents$.subscribe((function (event) {
+            switch (event.type) {
+                case KeycloakEventType.OnAuthError:
+                    _this.loginChangeSubject.next(false);
+                    break;
+                case KeycloakEventType.OnAuthLogout:
+                    _this.loginChangeSubject.next(false);
+                    storage.removeItem(storageKey);
+                    break;
+                case KeycloakEventType.OnAuthRefreshError:
+                    break;
+                case KeycloakEventType.OnAuthRefreshSuccess:
+                    break;
+                case KeycloakEventType.OnAuthSuccess:
+                    break;
+                case KeycloakEventType.OnReady:
+                    _this.loginChangeSubject.next(event.args);
+                    if (event.args) {
+                        _this.saveKeycloakConfig();
+                    }
+                    break;
+                case KeycloakEventType.OnTokenExpired:
+                    _this.keycloakSvc.updateToken(60);
+                    break;
+            }
+        }));
+    };
+    AuthKeycloakService.prototype.setupGlobalAuthResponder = function () {
+        var _this = this;
+        fromEvent(window, 'message')
+            .pipe(filter((function (event) {
+            return Boolean(event) &&
+                Boolean(event.data) &&
+                event.data.type === 'AUTH_REQUEST' &&
+                Boolean(event.source && typeof event.source.postMessage === 'function');
+        })))
+            .subscribe((function (event) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+            var contentWindow, token, response;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        contentWindow = ((event.source));
+                        return [4, this.keycloakSvc.getToken()];
+                    case 1:
+                        token = _a.sent();
+                        response = {
+                            app: 'WEB_PORTAL',
+                            type: 'AUTH_RESPONSE',
+                            state: 'NONE',
+                            plugin: 'NONE',
+                            data: {
+                                token: token,
+                                id: event.data && event.data.data && event.data.data.id,
+                            },
+                        };
+                        contentWindow.postMessage(response, '*');
+                        return [2];
+                }
+            });
+        }); }));
+    };
+    AuthKeycloakService.prototype.saveKeycloakConfig = function () {
+        var kc = this.keycloakSvc.getKeycloakInstance();
+        var kcInitOptions = {
+            idToken: kc.idToken,
+            refreshToken: kc.refreshToken,
+            timeSkew: kc.timeSkew,
+            token: kc.token,
+        };
+        storage.setItem(storageKey, JSON.stringify(kcInitOptions));
+    };
+    AuthKeycloakService.prototype.getSavedKcConfig = function () {
+        try {
+            var lastSaved = storage.getItem(storageKey);
+            if (lastSaved) {
+                var processed = JSON.parse(lastSaved);
+                if ('idToken' in processed &&
+                    'refreshToken' in processed &&
+                    'timeSkew' in processed &&
+                    'token' in processed) {
+                    return processed;
+                }
+            }
+        }
+        catch (e) { }
+        return {};
+    };
+    Object.defineProperty(AuthKeycloakService.prototype, "defaultRedirectUrl", {
+        get: function () {
+            try {
+                var baseUrl = document.baseURI;
+                return baseUrl || location.origin;
+            }
+            catch (error) {
+                return location.origin;
+            }
+        },
+        enumerable: true,
+        configurable: true
+    });
+    AuthKeycloakService.decorators = [
+        { type: Injectable, args: [{
+                    providedIn: 'root',
+                },] }
+    ];
+    AuthKeycloakService.ctorParameters = function () { return [
+        { type: HttpClient },
+        { type: ConfigurationsService },
+        { type: KeycloakService },
+        { type: AuthMicrosoftService }
+    ]; };
+    /** @nocollapse */ AuthKeycloakService.ngInjectableDef = i0.ɵɵdefineInjectable({ factory: function AuthKeycloakService_Factory() { return new AuthKeycloakService(i0.ɵɵinject(i1.HttpClient), i0.ɵɵinject(i2.ConfigurationsService), i0.ɵɵinject(i3.KeycloakService), i0.ɵɵinject(i4.AuthMicrosoftService)); }, token: AuthKeycloakService, providedIn: "root" });
+    return AuthKeycloakService;
+}());
+export { AuthKeycloakService };
+if (false) {
+    AuthKeycloakService.prototype.loginChangeSubject;
+    AuthKeycloakService.prototype.http;
+    AuthKeycloakService.prototype.configSvc;
+    AuthKeycloakService.prototype.keycloakSvc;
+    AuthKeycloakService.prototype.msAuthSvc;
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXV0aC1rZXljbG9hay5zZXJ2aWNlLmpzIiwic291cmNlUm9vdCI6Im5nOi8vQHN1bmJpcmQtY2IvdXRpbHMvIiwic291cmNlcyI6WyJsaWIvc2VydmljZXMvYXV0aC1rZXljbG9hay5zZXJ2aWNlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQSxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sc0JBQXNCLENBQUE7QUFDakQsT0FBTyxFQUFFLFVBQVUsRUFBRSxNQUFNLGVBQWUsQ0FBQTtBQUMxQyxPQUFPLEVBQWlCLGlCQUFpQixFQUF1QixlQUFlLEVBQUUsTUFBTSxrQkFBa0IsQ0FBQTtBQUN6RyxPQUFPLEVBQUUsU0FBUyxFQUFFLGFBQWEsRUFBRSxNQUFNLE1BQU0sQ0FBQTtBQUMvQyxPQUFPLEVBQUUsTUFBTSxFQUFFLE1BQU0sZ0JBQWdCLENBQUE7QUFDdkMsT0FBTyxFQUFFLG9CQUFvQixFQUFFLE1BQU0sMEJBQTBCLENBQUE7QUFDL0QsT0FBTyxFQUFFLHFCQUFxQixFQUFFLE1BQU0sMEJBQTBCLENBQUE7Ozs7OztBQUVoRSwyQkFLQzs7SUFKQyw2QkFBYztJQUNkLGdDQUFpQjtJQUNqQiw0QkFBYTtJQUNiLDBDQUEyQjs7SUFHdkIsT0FBTyxHQUFHLFlBQVk7SUFDdEIsVUFBVSxHQUFHLElBQUk7QUFFdkI7SUFLRSw2QkFDVSxJQUFnQixFQUNoQixTQUFnQyxFQUNoQyxXQUE0QixFQUM1QixTQUErQjtRQUp6QyxpQkFvQkM7UUFuQlMsU0FBSSxHQUFKLElBQUksQ0FBWTtRQUNoQixjQUFTLEdBQVQsU0FBUyxDQUF1QjtRQUNoQyxnQkFBVyxHQUFYLFdBQVcsQ0FBaUI7UUFDNUIsY0FBUyxHQUFULFNBQVMsQ0FBc0I7UUFMakMsdUJBQWtCLEdBQUcsSUFBSSxhQUFhLENBQVUsQ0FBQyxDQUFDLENBQUE7UUFPeEQsSUFBSSxDQUFDLGtCQUFrQixDQUFDLFNBQVMsRUFBQyxVQUFDLFVBQW1CO1lBQ3BELEtBQUksQ0FBQyxTQUFTLENBQUMsZUFBZSxHQUFHLFVBQVUsQ0FBQTtZQUMzQyxJQUNFLFVBQVU7Z0JBQ1YsS0FBSSxDQUFDLFNBQVMsQ0FBQyxjQUFjO2dCQUM3QixPQUFPLENBQUMsS0FBSSxDQUFDLFNBQVMsQ0FBQyxjQUFjLENBQUMsZUFBZSxDQUFDLEVBQ3REO2dCQUNBLEtBQUksQ0FBQyxTQUFTLENBQUMsV0FBVyxHQUFHO29CQUMzQixLQUFLLEVBQUUsS0FBSSxDQUFDLFNBQVM7b0JBQ3JCLFFBQVEsRUFBRSxLQUFJLENBQUMsUUFBUTtvQkFDdkIsTUFBTSxFQUFFLEtBQUksQ0FBQyxNQUFNLElBQUksRUFBRTtpQkFDMUIsQ0FBQTthQUNGO1FBQ0gsQ0FBQyxFQUFDLENBQUE7SUFDSixDQUFDO0lBR0Qsc0JBQUksNENBQVc7YUFBZjtZQUNFLE9BQU8sSUFBSSxDQUFDLGtCQUFrQixDQUFDLFlBQVksRUFBRSxDQUFBO1FBQy9DLENBQUM7OztPQUFBO0lBQ0Qsc0JBQUksMkNBQVU7YUFBZDtZQUNFLE9BQU8sSUFBSSxDQUFDLFdBQVcsQ0FBQyxVQUFVLEVBQUUsQ0FBQTtRQUN0QyxDQUFDOzs7T0FBQTtJQUNELHNCQUFJLGdEQUFlO2FBQW5CO1lBQ0UsT0FBTyxJQUFJLENBQUMsV0FBVyxDQUFDLG1CQUFtQixFQUFFLENBQUMsYUFBYSxDQUFBO1FBQzdELENBQUM7OztPQUFBO0lBQ0Qsc0JBQUksc0NBQUs7YUFBVDtZQUNFLE9BQU8sSUFBSSxDQUFDLFdBQVcsQ0FBQyxtQkFBbUIsRUFBRSxDQUFDLEtBQUssQ0FBQTtRQUNyRCxDQUFDOzs7T0FBQTtJQUNELHNCQUFJLDBDQUFTO2FBQWI7WUFDRSxPQUFPLElBQUksQ0FBQyxXQUFXLENBQUMsbUJBQW1CLEVBQUUsQ0FBQyxTQUFTLENBQUE7UUFDekQsQ0FBQzs7O09BQUE7SUFDRCxzQkFBSSx1Q0FBTTthQUFWO2dCQUNRLEVBQUUsR0FBRyxJQUFJLENBQUMsV0FBVyxDQUFDLG1CQUFtQixFQUFFO1lBQ2pELElBQUksQ0FBQyxFQUFFLEVBQUU7Z0JBQ1AsT0FBTTthQUNQO1lBQ0QsT0FBTyxDQUFDLEVBQUUsQ0FBQyxXQUFXLElBQUksRUFBRSxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxhQUFhLElBQUksRUFBRSxDQUFDLGFBQWEsQ0FBQyxHQUFHLENBQUMsQ0FBQTtRQUM3RixDQUFDOzs7T0FBQTtJQUVELHNCQUFJLDBDQUFTO2FBQWI7Z0JBQ1EsRUFBRSxHQUFHLElBQUksQ0FBQyxXQUFXLENBQUMsbUJBQW1CLEVBQUU7Z0JBRTNDLFdBQVcsR0FBRyxFQUFBLEVBQUUsQ0FBQyxXQUFXLEVBQWdCO2dCQUM1QyxhQUFhLEdBQUcsRUFBQSxFQUFFLENBQUMsYUFBYSxFQUFnQjtZQUN0RCxPQUFPLENBQ0wsQ0FBQyxXQUFXLElBQUksV0FBVyxDQUFDLEtBQUssQ0FBQztnQkFDbEMsQ0FBQyxhQUFhLElBQUksYUFBYSxDQUFDLEtBQUssQ0FBQztnQkFDdEMsQ0FBQyxhQUFhLElBQUksYUFBYSxDQUFDLFFBQVEsQ0FBQztnQkFDekMsQ0FBQyxXQUFXLElBQUksV0FBVyxDQUFDLGtCQUFrQixDQUFDO2dCQUMvQyxDQUFDLGFBQWEsSUFBSSxhQUFhLENBQUMsa0JBQWtCLENBQUMsQ0FDcEQsQ0FBQTtRQUNILENBQUM7OztPQUFBO0lBRUQsc0JBQUkseUNBQVE7YUFBWjtnQkFDUSxFQUFFLEdBQUcsSUFBSSxDQUFDLFdBQVcsQ0FBQyxtQkFBbUIsRUFBRTtZQUNqRCxPQUFPLENBQ0wsQ0FBQyxFQUFFLENBQUMsV0FBVyxJQUFJLENBQUMsRUFBQSxFQUFFLENBQUMsV0FBVyxFQUFnQixDQUFDLENBQUMsSUFBSSxDQUFDO2dCQUN6RCxDQUFDLEVBQUUsQ0FBQyxhQUFhLElBQUksQ0FBQyxFQUFBLEVBQUUsQ0FBQyxhQUFhLEVBQWdCLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FDOUQsQ0FBQTtRQUNILENBQUM7OztPQUFBO0lBRUssc0NBQVEsR0FBZDs7Ozs7O3dCQUNFLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLGNBQWMsRUFBRTs0QkFDbEMsV0FBTyxLQUFLLEVBQUE7eUJBQ2I7d0JBQ0ssY0FBYyxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsY0FBYzt3QkFDcEQsSUFBSSxjQUFjLENBQUMsU0FBUyxDQUFDLFlBQVksRUFBRTs0QkFDekMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsRUFBRSxTQUFTLEVBQUUsY0FBYyxDQUFDLFNBQVMsRUFBRSxDQUFDLENBQUE7eUJBQzdEOzs7O3dCQUVDLElBQUksQ0FBQyx3QkFBd0IsRUFBRSxDQUFBO3dCQUMvQixJQUFJLENBQUMsd0JBQXdCLEVBQUUsQ0FBQTt3QkFDeEIsV0FBTSxJQUFJLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQztnQ0FDakMsTUFBTSxFQUFFO29DQUNOLEdBQUcsRUFBRSxjQUFjLENBQUMsUUFBUSxDQUFDLEdBQUc7b0NBQ2hDLEtBQUssRUFBRSxjQUFjLENBQUMsUUFBUSxDQUFDLEtBQUs7b0NBQ3BDLFFBQVEsRUFBRSxjQUFjLENBQUMsUUFBUSxDQUFDLFFBQVE7aUNBQzNDO2dDQUNELFdBQVcsdUJBQ04sSUFBSSxDQUFDLGdCQUFnQixFQUFFLElBQzFCLE1BQU0sRUFBRSxjQUFjLENBQUMsUUFBUSxDQUFDLE1BQU0sSUFBSSxXQUFXLEVBQ3JELGdCQUFnQixFQUFFLEtBQUssR0FDeEI7Z0NBQ0QsdUJBQXVCLEVBQUUsSUFBSTtnQ0FDN0Isd0JBQXdCLEVBQUUsS0FBSztnQ0FDL0Isa0JBQWtCLEVBQUUsY0FBYyxDQUFDLFFBQVEsQ0FBQyxrQkFBa0I7NkJBQy9ELENBQUMsRUFBQTs0QkFkRixXQUFPLFNBY0wsRUFBQTs7O3dCQUVGLFdBQU8sS0FBSyxFQUFBOzs7OztLQUVmO0lBRUQsbUNBQUssR0FBTCxVQUNFLE9BQThCLEVBQzlCLFdBQTZDO1FBRDdDLHdCQUFBLEVBQUEsYUFBOEI7UUFDOUIsNEJBQUEsRUFBQSxjQUFzQixJQUFJLENBQUMsa0JBQWtCO1FBRTdDLE9BQU8sSUFBSSxDQUFDLFdBQVcsQ0FBQyxLQUFLLENBQUM7WUFDNUIsT0FBTyxTQUFBO1lBQ1AsV0FBVyxFQUFFLFdBQVc7U0FDekIsQ0FBQyxDQUFBO0lBQ0osQ0FBQztJQUVELHNDQUFRLEdBQVIsVUFDRSxXQUE2QztRQUE3Qyw0QkFBQSxFQUFBLGNBQXNCLElBQUksQ0FBQyxrQkFBa0I7UUFFN0MsT0FBTyxJQUFJLENBQUMsV0FBVyxDQUFDLFFBQVEsQ0FBQztZQUMvQixXQUFXLEVBQUUsV0FBVztTQUN6QixDQUFDLENBQUE7SUFDSixDQUFDO0lBRUssb0NBQU0sR0FBWixVQUFhLFlBQXNDO1FBQXRDLDZCQUFBLEVBQUEsZUFBZSxJQUFJLENBQUMsa0JBQWtCOzs7Z0JBQ2pELE1BQU0sQ0FBQyxRQUFRLENBQUMsSUFBSSxHQUFNLFlBQVksZUFBWSxDQUFBOzs7O0tBU25EO0lBQ0ssMENBQVksR0FBbEI7Ozs7NEJBQ0UsV0FBTSxJQUFJLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxhQUFhLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBQTs7d0JBQTlDLFNBQThDLENBQUE7Ozs7O0tBQy9DO0lBQ08sc0RBQXdCLEdBQWhDO1FBQUEsaUJBMkJDO1FBMUJDLElBQUksQ0FBQyxXQUFXLENBQUMsZUFBZSxDQUFDLFNBQVMsRUFBQyxVQUFDLEtBQW9CO1lBQzlELFFBQVEsS0FBSyxDQUFDLElBQUksRUFBRTtnQkFDbEIsS0FBSyxpQkFBaUIsQ0FBQyxXQUFXO29CQUNoQyxLQUFJLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFBO29CQUNuQyxNQUFLO2dCQUNQLEtBQUssaUJBQWlCLENBQUMsWUFBWTtvQkFDakMsS0FBSSxDQUFDLGtCQUFrQixDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQTtvQkFDbkMsT0FBTyxDQUFDLFVBQVUsQ0FBQyxVQUFVLENBQUMsQ0FBQTtvQkFDOUIsTUFBSztnQkFDUCxLQUFLLGlCQUFpQixDQUFDLGtCQUFrQjtvQkFDdkMsTUFBSztnQkFDUCxLQUFLLGlCQUFpQixDQUFDLG9CQUFvQjtvQkFDekMsTUFBSztnQkFDUCxLQUFLLGlCQUFpQixDQUFDLGFBQWE7b0JBQ2xDLE1BQUs7Z0JBQ1AsS0FBSyxpQkFBaUIsQ0FBQyxPQUFPO29CQUM1QixLQUFJLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQTtvQkFDeEMsSUFBSSxLQUFLLENBQUMsSUFBSSxFQUFFO3dCQUNkLEtBQUksQ0FBQyxrQkFBa0IsRUFBRSxDQUFBO3FCQUMxQjtvQkFDRCxNQUFLO2dCQUNQLEtBQUssaUJBQWlCLENBQUMsY0FBYztvQkFDbkMsS0FBSSxDQUFDLFdBQVcsQ0FBQyxXQUFXLENBQUMsRUFBRSxDQUFDLENBQUE7b0JBQ2hDLE1BQUs7YUFDUjtRQUNILENBQUMsRUFBQyxDQUFBO0lBQ0osQ0FBQztJQUVPLHNEQUF3QixHQUFoQztRQUFBLGlCQTBCQztRQXpCQyxTQUFTLENBQWUsTUFBTSxFQUFFLFNBQVMsQ0FBQzthQUN2QyxJQUFJLENBQ0gsTUFBTSxFQUNKLFVBQUMsS0FBbUI7WUFDbEIsT0FBQSxPQUFPLENBQUMsS0FBSyxDQUFDO2dCQUNkLE9BQU8sQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDO2dCQUNuQixLQUFLLENBQUMsSUFBSSxDQUFDLElBQUksS0FBSyxjQUFjO2dCQUNsQyxPQUFPLENBQUMsS0FBSyxDQUFDLE1BQU0sSUFBSSxPQUFPLEtBQUssQ0FBQyxNQUFNLENBQUMsV0FBVyxLQUFLLFVBQVUsQ0FBQztRQUh2RSxDQUd1RSxFQUMxRSxDQUNGO2FBQ0EsU0FBUyxFQUFDLFVBQU8sS0FBbUI7Ozs7O3dCQUM3QixhQUFhLEdBQUcsRUFBQSxLQUFLLENBQUMsTUFBTSxFQUFVO3dCQUM5QixXQUFNLElBQUksQ0FBQyxXQUFXLENBQUMsUUFBUSxFQUFFLEVBQUE7O3dCQUF6QyxLQUFLLEdBQUcsU0FBaUM7d0JBQ3pDLFFBQVEsR0FBRzs0QkFDZixHQUFHLEVBQUUsWUFBWTs0QkFDakIsSUFBSSxFQUFFLGVBQWU7NEJBQ3JCLEtBQUssRUFBRSxNQUFNOzRCQUNiLE1BQU0sRUFBRSxNQUFNOzRCQUNkLElBQUksRUFBRTtnQ0FDSixLQUFLLE9BQUE7Z0NBQ0wsRUFBRSxFQUFFLEtBQUssQ0FBQyxJQUFJLElBQUksS0FBSyxDQUFDLElBQUksQ0FBQyxJQUFJLElBQUksS0FBSyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsRUFBRTs2QkFDeEQ7eUJBQ0Y7d0JBQ0QsYUFBYSxDQUFDLFdBQVcsQ0FBQyxRQUFRLEVBQUUsR0FBRyxDQUFDLENBQUE7Ozs7YUFDekMsRUFBQyxDQUFBO0lBQ04sQ0FBQztJQUdPLGdEQUFrQixHQUExQjtZQUNRLEVBQUUsR0FBRyxJQUFJLENBQUMsV0FBVyxDQUFDLG1CQUFtQixFQUFFO1lBQzNDLGFBQWEsR0FBd0I7WUFDekMsT0FBTyxFQUFFLEVBQUUsQ0FBQyxPQUFPO1lBQ25CLFlBQVksRUFBRSxFQUFFLENBQUMsWUFBWTtZQUM3QixRQUFRLEVBQUUsRUFBRSxDQUFDLFFBQVE7WUFDckIsS0FBSyxFQUFFLEVBQUUsQ0FBQyxLQUFLO1NBQ2hCO1FBQ0QsT0FBTyxDQUFDLE9BQU8sQ0FBQyxVQUFVLEVBQUUsSUFBSSxDQUFDLFNBQVMsQ0FBQyxhQUFhLENBQUMsQ0FBQyxDQUFBO0lBQzVELENBQUM7SUFDTyw4Q0FBZ0IsR0FBeEI7UUFDRSxJQUFJO2dCQUVJLFNBQVMsR0FBRyxPQUFPLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQztZQUM3QyxJQUFJLFNBQVMsRUFBRTtvQkFDUCxTQUFTLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUM7Z0JBQ3ZDLElBQ0UsU0FBUyxJQUFJLFNBQVM7b0JBQ3RCLGNBQWMsSUFBSSxTQUFTO29CQUMzQixVQUFVLElBQUksU0FBUztvQkFDdkIsT0FBTyxJQUFJLFNBQVMsRUFDcEI7b0JBQ0EsT0FBTyxTQUFTLENBQUE7aUJBQ2pCO2FBQ0Y7U0FDRjtRQUFDLE9BQU8sQ0FBQyxFQUFFLEdBQUc7UUFDZixPQUFPLEVBQUUsQ0FBQTtJQUNYLENBQUM7SUFFRCxzQkFBWSxtREFBa0I7YUFBOUI7WUFDRSxJQUFJO29CQUNJLE9BQU8sR0FBRyxRQUFRLENBQUMsT0FBTztnQkFDaEMsT0FBTyxPQUFPLElBQUksUUFBUSxDQUFDLE1BQU0sQ0FBQTthQUNsQztZQUFDLE9BQU8sS0FBSyxFQUFFO2dCQUNkLE9BQU8sUUFBUSxDQUFDLE1BQU0sQ0FBQTthQUN2QjtRQUNILENBQUM7OztPQUFBOztnQkF0T0YsVUFBVSxTQUFDO29CQUNWLFVBQVUsRUFBRSxNQUFNO2lCQUNuQjs7O2dCQXBCUSxVQUFVO2dCQU1WLHFCQUFxQjtnQkFKa0MsZUFBZTtnQkFHdEUsb0JBQW9COzs7OEJBTDdCO0NBeVBDLEFBdk9ELElBdU9DO1NBcE9ZLG1CQUFtQjs7SUFDOUIsaURBQTBEO0lBRXhELG1DQUF3QjtJQUN4Qix3Q0FBd0M7SUFDeEMsMENBQW9DO0lBQ3BDLHdDQUF1QyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IEh0dHBDbGllbnQgfSBmcm9tICdAYW5ndWxhci9jb21tb24vaHR0cCdcbmltcG9ydCB7IEluamVjdGFibGUgfSBmcm9tICdAYW5ndWxhci9jb3JlJ1xuaW1wb3J0IHsgS2V5Y2xvYWtFdmVudCwgS2V5Y2xvYWtFdmVudFR5cGUsIEtleWNsb2FrSW5pdE9wdGlvbnMsIEtleWNsb2FrU2VydmljZSB9IGZyb20gJ2tleWNsb2FrLWFuZ3VsYXInXG5pbXBvcnQgeyBmcm9tRXZlbnQsIFJlcGxheVN1YmplY3QgfSBmcm9tICdyeGpzJ1xuaW1wb3J0IHsgZmlsdGVyIH0gZnJvbSAncnhqcy9vcGVyYXRvcnMnXG5pbXBvcnQgeyBBdXRoTWljcm9zb2Z0U2VydmljZSB9IGZyb20gJy4vYXV0aC1taWNyb3NvZnQuc2VydmljZSdcbmltcG9ydCB7IENvbmZpZ3VyYXRpb25zU2VydmljZSB9IGZyb20gJy4vY29uZmlndXJhdGlvbnMuc2VydmljZSdcblxuaW50ZXJmYWNlIElQYXJzZWRUb2tlbiB7XG4gIGVtYWlsPzogc3RyaW5nXG4gIGVuY0VtYWlsPzogc3RyaW5nXG4gIG5hbWU/OiBzdHJpbmdcbiAgcHJlZmVycmVkX3VzZXJuYW1lPzogc3RyaW5nXG59XG5cbmNvbnN0IHN0b3JhZ2UgPSBsb2NhbFN0b3JhZ2VcbmNvbnN0IHN0b3JhZ2VLZXkgPSAna2MnXG5cbkBJbmplY3RhYmxlKHtcbiAgcHJvdmlkZWRJbjogJ3Jvb3QnLFxufSlcbmV4cG9ydCBjbGFzcyBBdXRoS2V5Y2xvYWtTZXJ2aWNlIHtcbiAgcHJpdmF0ZSBsb2dpbkNoYW5nZVN1YmplY3QgPSBuZXcgUmVwbGF5U3ViamVjdDxib29sZWFuPigxKVxuICBjb25zdHJ1Y3RvcihcbiAgICBwcml2YXRlIGh0dHA6IEh0dHBDbGllbnQsXG4gICAgcHJpdmF0ZSBjb25maWdTdmM6IENvbmZpZ3VyYXRpb25zU2VydmljZSxcbiAgICBwcml2YXRlIGtleWNsb2FrU3ZjOiBLZXljbG9ha1NlcnZpY2UsXG4gICAgcHJpdmF0ZSBtc0F1dGhTdmM6IEF1dGhNaWNyb3NvZnRTZXJ2aWNlLFxuICApIHtcbiAgICB0aGlzLmxvZ2luQ2hhbmdlU3ViamVjdC5zdWJzY3JpYmUoKGlzTG9nZ2VkSW46IGJvb2xlYW4pID0+IHtcbiAgICAgIHRoaXMuY29uZmlnU3ZjLmlzQXV0aGVudGljYXRlZCA9IGlzTG9nZ2VkSW5cbiAgICAgIGlmIChcbiAgICAgICAgaXNMb2dnZWRJbiAmJlxuICAgICAgICB0aGlzLmNvbmZpZ1N2Yy5pbnN0YW5jZUNvbmZpZyAmJlxuICAgICAgICBCb29sZWFuKHRoaXMuY29uZmlnU3ZjLmluc3RhbmNlQ29uZmlnLmRpc2FibGVQaWRDaGVjaylcbiAgICAgICkge1xuICAgICAgICB0aGlzLmNvbmZpZ1N2Yy51c2VyUHJvZmlsZSA9IHtcbiAgICAgICAgICBlbWFpbDogdGhpcy51c2VyRW1haWwsXG4gICAgICAgICAgdXNlck5hbWU6IHRoaXMudXNlck5hbWUsXG4gICAgICAgICAgdXNlcklkOiB0aGlzLnVzZXJJZCB8fCAnJyxcbiAgICAgICAgfVxuICAgICAgfVxuICAgIH0pXG4gIH1cblxuICAvLyBHZXR0ZXJzXG4gIGdldCBpc0xvZ2dlZEluJCgpIHtcbiAgICByZXR1cm4gdGhpcy5sb2dpbkNoYW5nZVN1YmplY3QuYXNPYnNlcnZhYmxlKClcbiAgfVxuICBnZXQgaXNMb2dnZWRJbigpOiBQcm9taXNlPGJvb2xlYW4+IHtcbiAgICByZXR1cm4gdGhpcy5rZXljbG9ha1N2Yy5pc0xvZ2dlZEluKClcbiAgfVxuICBnZXQgaXNBdXRoZW50aWNhdGVkKCk6IGJvb2xlYW4gfCB1bmRlZmluZWQge1xuICAgIHJldHVybiB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKS5hdXRoZW50aWNhdGVkXG4gIH1cbiAgZ2V0IHRva2VuKCk6IHN0cmluZyB8IHVuZGVmaW5lZCB7XG4gICAgcmV0dXJuIHRoaXMua2V5Y2xvYWtTdmMuZ2V0S2V5Y2xvYWtJbnN0YW5jZSgpLnRva2VuXG4gIH1cbiAgZ2V0IHNlc3Npb25JZCgpOiBzdHJpbmcgfCB1bmRlZmluZWQge1xuICAgIHJldHVybiB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKS5zZXNzaW9uSWRcbiAgfVxuICBnZXQgdXNlcklkKCk6IHN0cmluZyB8IHVuZGVmaW5lZCB7XG4gICAgY29uc3Qga2MgPSB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKVxuICAgIGlmICgha2MpIHtcbiAgICAgIHJldHVyblxuICAgIH1cbiAgICByZXR1cm4gKGtjLnRva2VuUGFyc2VkICYmIGtjLnRva2VuUGFyc2VkLnN1YikgfHwgKGtjLmlkVG9rZW5QYXJzZWQgJiYga2MuaWRUb2tlblBhcnNlZC5zdWIpXG4gIH1cblxuICBnZXQgdXNlckVtYWlsKCk6IHN0cmluZyB8IHVuZGVmaW5lZCB7XG4gICAgY29uc3Qga2MgPSB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKVxuXG4gICAgY29uc3QgdG9rZW5QYXJzZWQgPSBrYy50b2tlblBhcnNlZCBhcyBJUGFyc2VkVG9rZW5cbiAgICBjb25zdCBpZFRva2VuUGFyc2VkID0ga2MuaWRUb2tlblBhcnNlZCBhcyBJUGFyc2VkVG9rZW5cbiAgICByZXR1cm4gKFxuICAgICAgKHRva2VuUGFyc2VkICYmIHRva2VuUGFyc2VkLmVtYWlsKSB8fFxuICAgICAgKGlkVG9rZW5QYXJzZWQgJiYgaWRUb2tlblBhcnNlZC5lbWFpbCkgfHxcbiAgICAgIChpZFRva2VuUGFyc2VkICYmIGlkVG9rZW5QYXJzZWQuZW5jRW1haWwpIHx8XG4gICAgICAodG9rZW5QYXJzZWQgJiYgdG9rZW5QYXJzZWQucHJlZmVycmVkX3VzZXJuYW1lKSB8fFxuICAgICAgKGlkVG9rZW5QYXJzZWQgJiYgaWRUb2tlblBhcnNlZC5wcmVmZXJyZWRfdXNlcm5hbWUpXG4gICAgKVxuICB9XG5cbiAgZ2V0IHVzZXJOYW1lKCk6IHN0cmluZyB8IHVuZGVmaW5lZCB7XG4gICAgY29uc3Qga2MgPSB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKVxuICAgIHJldHVybiAoXG4gICAgICAoa2MudG9rZW5QYXJzZWQgJiYgKGtjLnRva2VuUGFyc2VkIGFzIElQYXJzZWRUb2tlbikubmFtZSkgfHxcbiAgICAgIChrYy5pZFRva2VuUGFyc2VkICYmIChrYy5pZFRva2VuUGFyc2VkIGFzIElQYXJzZWRUb2tlbikubmFtZSlcbiAgICApXG4gIH1cblxuICBhc3luYyBpbml0QXV0aCgpOiBQcm9taXNlPGJvb2xlYW4+IHtcbiAgICBpZiAoIXRoaXMuY29uZmlnU3ZjLmluc3RhbmNlQ29uZmlnKSB7XG4gICAgICByZXR1cm4gZmFsc2VcbiAgICB9XG4gICAgY29uc3QgaW5zdGFuY2VDb25maWcgPSB0aGlzLmNvbmZpZ1N2Yy5pbnN0YW5jZUNvbmZpZ1xuICAgIGlmIChpbnN0YW5jZUNvbmZpZy5taWNyb3NvZnQuaXNDb25maWd1cmVkKSB7XG4gICAgICB0aGlzLm1zQXV0aFN2Yy5pbml0KHsgbWljcm9zb2Z0OiBpbnN0YW5jZUNvbmZpZy5taWNyb3NvZnQgfSlcbiAgICB9XG4gICAgdHJ5IHtcbiAgICAgIHRoaXMuc2V0dXBHbG9iYWxBdXRoUmVzcG9uZGVyKClcbiAgICAgIHRoaXMuYWRkS2V5Y2xvYWtFdmVudExpc3RlbmVyKClcbiAgICAgIHJldHVybiBhd2FpdCB0aGlzLmtleWNsb2FrU3ZjLmluaXQoe1xuICAgICAgICBjb25maWc6IHtcbiAgICAgICAgICB1cmw6IGluc3RhbmNlQ29uZmlnLmtleWNsb2FrLnVybCxcbiAgICAgICAgICByZWFsbTogaW5zdGFuY2VDb25maWcua2V5Y2xvYWsucmVhbG0sXG4gICAgICAgICAgY2xpZW50SWQ6IGluc3RhbmNlQ29uZmlnLmtleWNsb2FrLmNsaWVudElkLFxuICAgICAgICB9LFxuICAgICAgICBpbml0T3B0aW9uczoge1xuICAgICAgICAgIC4uLnRoaXMuZ2V0U2F2ZWRLY0NvbmZpZygpLFxuICAgICAgICAgIG9uTG9hZDogaW5zdGFuY2VDb25maWcua2V5Y2xvYWsub25Mb2FkIHx8ICdjaGVjay1zc28nLFxuICAgICAgICAgIGNoZWNrTG9naW5JZnJhbWU6IGZhbHNlLFxuICAgICAgICB9LFxuICAgICAgICBlbmFibGVCZWFyZXJJbnRlcmNlcHRvcjogdHJ1ZSxcbiAgICAgICAgbG9hZFVzZXJQcm9maWxlQXRTdGFydFVwOiBmYWxzZSxcbiAgICAgICAgYmVhcmVyRXhjbHVkZWRVcmxzOiBpbnN0YW5jZUNvbmZpZy5rZXljbG9hay5iZWFyZXJFeGNsdWRlZFVybHMsXG4gICAgICB9KVxuICAgIH0gY2F0Y2ggKGVycikge1xuICAgICAgcmV0dXJuIGZhbHNlXG4gICAgfVxuICB9XG5cbiAgbG9naW4oXG4gICAgaWRwSGludDogJ0UnIHwgJ04nIHwgJ1MnID0gJ0UnLFxuICAgIHJlZGlyZWN0VXJsOiBzdHJpbmcgPSB0aGlzLmRlZmF1bHRSZWRpcmVjdFVybCxcbiAgKTogUHJvbWlzZTx2b2lkPiB7XG4gICAgcmV0dXJuIHRoaXMua2V5Y2xvYWtTdmMubG9naW4oe1xuICAgICAgaWRwSGludCxcbiAgICAgIHJlZGlyZWN0VXJpOiByZWRpcmVjdFVybCxcbiAgICB9KVxuICB9XG5cbiAgcmVnaXN0ZXIoXG4gICAgcmVkaXJlY3RVcmw6IHN0cmluZyA9IHRoaXMuZGVmYXVsdFJlZGlyZWN0VXJsLFxuICApOiBQcm9taXNlPHZvaWQ+IHtcbiAgICByZXR1cm4gdGhpcy5rZXljbG9ha1N2Yy5yZWdpc3Rlcih7XG4gICAgICByZWRpcmVjdFVyaTogcmVkaXJlY3RVcmwsXG4gICAgfSlcbiAgfVxuXG4gIGFzeW5jIGxvZ291dChfcmVkaXJlY3RVcmwgPSB0aGlzLmRlZmF1bHRSZWRpcmVjdFVybCkge1xuICAgIHdpbmRvdy5sb2NhdGlvbi5ocmVmID0gYCR7X3JlZGlyZWN0VXJsfWFwaXMvcmVzZXRgXG5cbiAgICAvLyBzdG9yYWdlLnJlbW92ZUl0ZW0oc3RvcmFnZUtleSlcbiAgICAvLyBhd2FpdCB0aGlzLmh0dHAuZ2V0KCcvYXBpcy9yZXNldCcpLnRvUHJvbWlzZSgpXG4gICAgLy8gaWYgKHRoaXMubXNBdXRoU3ZjLmlzTG9nb3V0UmVxdWlyZWQpIHtcbiAgICAvLyAgIHRoaXMua2V5Y2xvYWtTdmMubG9nb3V0KHRoaXMubXNBdXRoU3ZjLmxvZ291dFVybChyZWRpcmVjdFVybCkpXG4gICAgLy8gfSBlbHNlIHtcbiAgICAvLyAgIHRoaXMua2V5Y2xvYWtTdmMubG9nb3V0KHJlZGlyZWN0VXJsKVxuICAgIC8vIH1cbiAgfVxuICBhc3luYyBmb3JjZV9sb2dvdXQoKSB7XG4gICAgYXdhaXQgdGhpcy5odHRwLmdldCgnL2FwaXMvcmVzZXQnKS50b1Byb21pc2UoKVxuICB9XG4gIHByaXZhdGUgYWRkS2V5Y2xvYWtFdmVudExpc3RlbmVyKCkge1xuICAgIHRoaXMua2V5Y2xvYWtTdmMua2V5Y2xvYWtFdmVudHMkLnN1YnNjcmliZSgoZXZlbnQ6IEtleWNsb2FrRXZlbnQpID0+IHtcbiAgICAgIHN3aXRjaCAoZXZlbnQudHlwZSkge1xuICAgICAgICBjYXNlIEtleWNsb2FrRXZlbnRUeXBlLk9uQXV0aEVycm9yOlxuICAgICAgICAgIHRoaXMubG9naW5DaGFuZ2VTdWJqZWN0Lm5leHQoZmFsc2UpXG4gICAgICAgICAgYnJlYWtcbiAgICAgICAgY2FzZSBLZXljbG9ha0V2ZW50VHlwZS5PbkF1dGhMb2dvdXQ6XG4gICAgICAgICAgdGhpcy5sb2dpbkNoYW5nZVN1YmplY3QubmV4dChmYWxzZSlcbiAgICAgICAgICBzdG9yYWdlLnJlbW92ZUl0ZW0oc3RvcmFnZUtleSlcbiAgICAgICAgICBicmVha1xuICAgICAgICBjYXNlIEtleWNsb2FrRXZlbnRUeXBlLk9uQXV0aFJlZnJlc2hFcnJvcjpcbiAgICAgICAgICBicmVha1xuICAgICAgICBjYXNlIEtleWNsb2FrRXZlbnRUeXBlLk9uQXV0aFJlZnJlc2hTdWNjZXNzOlxuICAgICAgICAgIGJyZWFrXG4gICAgICAgIGNhc2UgS2V5Y2xvYWtFdmVudFR5cGUuT25BdXRoU3VjY2VzczpcbiAgICAgICAgICBicmVha1xuICAgICAgICBjYXNlIEtleWNsb2FrRXZlbnRUeXBlLk9uUmVhZHk6XG4gICAgICAgICAgdGhpcy5sb2dpbkNoYW5nZVN1YmplY3QubmV4dChldmVudC5hcmdzKVxuICAgICAgICAgIGlmIChldmVudC5hcmdzKSB7XG4gICAgICAgICAgICB0aGlzLnNhdmVLZXljbG9ha0NvbmZpZygpXG4gICAgICAgICAgfVxuICAgICAgICAgIGJyZWFrXG4gICAgICAgIGNhc2UgS2V5Y2xvYWtFdmVudFR5cGUuT25Ub2tlbkV4cGlyZWQ6XG4gICAgICAgICAgdGhpcy5rZXljbG9ha1N2Yy51cGRhdGVUb2tlbig2MClcbiAgICAgICAgICBicmVha1xuICAgICAgfVxuICAgIH0pXG4gIH1cblxuICBwcml2YXRlIHNldHVwR2xvYmFsQXV0aFJlc3BvbmRlcigpIHtcbiAgICBmcm9tRXZlbnQ8TWVzc2FnZUV2ZW50Pih3aW5kb3csICdtZXNzYWdlJylcbiAgICAgIC5waXBlKFxuICAgICAgICBmaWx0ZXIoXG4gICAgICAgICAgKGV2ZW50OiBNZXNzYWdlRXZlbnQpID0+XG4gICAgICAgICAgICBCb29sZWFuKGV2ZW50KSAmJlxuICAgICAgICAgICAgQm9vbGVhbihldmVudC5kYXRhKSAmJlxuICAgICAgICAgICAgZXZlbnQuZGF0YS50eXBlID09PSAnQVVUSF9SRVFVRVNUJyAmJlxuICAgICAgICAgICAgQm9vbGVhbihldmVudC5zb3VyY2UgJiYgdHlwZW9mIGV2ZW50LnNvdXJjZS5wb3N0TWVzc2FnZSA9PT0gJ2Z1bmN0aW9uJyksXG4gICAgICAgICksXG4gICAgICApXG4gICAgICAuc3Vic2NyaWJlKGFzeW5jIChldmVudDogTWVzc2FnZUV2ZW50KSA9PiB7XG4gICAgICAgIGNvbnN0IGNvbnRlbnRXaW5kb3cgPSBldmVudC5zb3VyY2UgYXMgV2luZG93XG4gICAgICAgIGNvbnN0IHRva2VuID0gYXdhaXQgdGhpcy5rZXljbG9ha1N2Yy5nZXRUb2tlbigpXG4gICAgICAgIGNvbnN0IHJlc3BvbnNlID0ge1xuICAgICAgICAgIGFwcDogJ1dFQl9QT1JUQUwnLFxuICAgICAgICAgIHR5cGU6ICdBVVRIX1JFU1BPTlNFJyxcbiAgICAgICAgICBzdGF0ZTogJ05PTkUnLFxuICAgICAgICAgIHBsdWdpbjogJ05PTkUnLFxuICAgICAgICAgIGRhdGE6IHtcbiAgICAgICAgICAgIHRva2VuLFxuICAgICAgICAgICAgaWQ6IGV2ZW50LmRhdGEgJiYgZXZlbnQuZGF0YS5kYXRhICYmIGV2ZW50LmRhdGEuZGF0YS5pZCxcbiAgICAgICAgICB9LFxuICAgICAgICB9XG4gICAgICAgIGNvbnRlbnRXaW5kb3cucG9zdE1lc3NhZ2UocmVzcG9uc2UsICcqJylcbiAgICAgIH0pXG4gIH1cblxuICAvLyBVdGlsaXR5IE1ldGhvZHNcbiAgcHJpdmF0ZSBzYXZlS2V5Y2xvYWtDb25maWcoKSB7XG4gICAgY29uc3Qga2MgPSB0aGlzLmtleWNsb2FrU3ZjLmdldEtleWNsb2FrSW5zdGFuY2UoKVxuICAgIGNvbnN0IGtjSW5pdE9wdGlvbnM6IEtleWNsb2FrSW5pdE9wdGlvbnMgPSB7XG4gICAgICBpZFRva2VuOiBrYy5pZFRva2VuLFxuICAgICAgcmVmcmVzaFRva2VuOiBrYy5yZWZyZXNoVG9rZW4sXG4gICAgICB0aW1lU2tldzoga2MudGltZVNrZXcsXG4gICAgICB0b2tlbjoga2MudG9rZW4sXG4gICAgfVxuICAgIHN0b3JhZ2Uuc2V0SXRlbShzdG9yYWdlS2V5LCBKU09OLnN0cmluZ2lmeShrY0luaXRPcHRpb25zKSlcbiAgfVxuICBwcml2YXRlIGdldFNhdmVkS2NDb25maWcoKTogS2V5Y2xvYWtJbml0T3B0aW9ucyB7XG4gICAgdHJ5IHtcbiAgICAgIC8vIGNvbnN0IGxhc3RTYXZlZCA9IEtFWUNMT0FLX1NUT1JBR0UuZ2V0SXRlbShrZXkpO1xuICAgICAgY29uc3QgbGFzdFNhdmVkID0gc3RvcmFnZS5nZXRJdGVtKHN0b3JhZ2VLZXkpXG4gICAgICBpZiAobGFzdFNhdmVkKSB7XG4gICAgICAgIGNvbnN0IHByb2Nlc3NlZCA9IEpTT04ucGFyc2UobGFzdFNhdmVkKVxuICAgICAgICBpZiAoXG4gICAgICAgICAgJ2lkVG9rZW4nIGluIHByb2Nlc3NlZCAmJlxuICAgICAgICAgICdyZWZyZXNoVG9rZW4nIGluIHByb2Nlc3NlZCAmJlxuICAgICAgICAgICd0aW1lU2tldycgaW4gcHJvY2Vzc2VkICYmXG4gICAgICAgICAgJ3Rva2VuJyBpbiBwcm9jZXNzZWRcbiAgICAgICAgKSB7XG4gICAgICAgICAgcmV0dXJuIHByb2Nlc3NlZFxuICAgICAgICB9XG4gICAgICB9XG4gICAgfSBjYXRjaCAoZSkgeyB9XG4gICAgcmV0dXJuIHt9XG4gIH1cblxuICBwcml2YXRlIGdldCBkZWZhdWx0UmVkaXJlY3RVcmwoKTogc3RyaW5nIHtcbiAgICB0cnkge1xuICAgICAgY29uc3QgYmFzZVVybCA9IGRvY3VtZW50LmJhc2VVUklcbiAgICAgIHJldHVybiBiYXNlVXJsIHx8IGxvY2F0aW9uLm9yaWdpblxuICAgIH0gY2F0Y2ggKGVycm9yKSB7XG4gICAgICByZXR1cm4gbG9jYXRpb24ub3JpZ2luXG4gICAgfVxuICB9XG59XG4iXX0=