w-web-perm 1.0.6 → 1.0.8

package/docs/WWebPerm.mjs.html

@@ -63,6 +63,7 @@ import strright from 'wsemi/src/strright.mjs'
 import strdelright from 'wsemi/src/strdelright.mjs'
 import pm2resolve from 'wsemi/src/pm2resolve.mjs'
 import fsIsFolder from 'wsemi/src/fsIsFolder.mjs'
+import fsIsFile from 'wsemi/src/fsIsFile.mjs'
 import replace from 'wsemi/src/replace.mjs'
 import WServHapiServer from 'w-serv-hapi/src/WServHapiServer.mjs'
 import WServOrm from 'w-serv-orm/src/WServOrm.mjs'
@@ -78,7 +79,8 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  * @param {String} url 輸入資料庫連線字串，例如'mongodb://sername:password@$127.0.0.1:27017'
  * @param {String} db 輸入資料庫名稱字串
  * @param {Function} getUserByToken 輸入處理函數，函數會傳入使用者token，通過此函數處理後並回傳使用者資訊物件，並至少須提供'id'、'email'、'name'、'isAdmin'欄位，且'isAdmin'限輸入'y'或'n'，且輸入'y'時會複寫權限系統該使用者之'isAdmin'欄位值
- * @param {Function} verifyUser 輸入處理函數，函數會傳入使用者資訊物件，通過此函數識別後回傳布林值，允許使用者回傳true，反之回傳false
+ * @param {Function} verifyBrowserUser 輸入驗證瀏覽使用者身份之處理函數，函數會傳入使用者資訊物件，通過此函數識別後回傳布林值，允許使用者回傳true，反之回傳false
+ * @param {Function} verifyAppUser 輸入驗證應用程序使用者身份之處理函數，函數會傳入使用者資訊物件，通過此函數識別後回傳布林值，允許使用者回傳true，反之回傳false
  * @param {Object} [opt={}] 輸入設定物件，預設{}
  * @param {Integer} [opt.serverPort=11006] 輸入伺服器通訊port，預設11006
  * @param {Boolean} [opt.bCheckUser=false] 輸入是否檢查使用者資訊布林值，預設false
@@ -88,13 +90,16 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  * @param {Object} [opt.webDescription={}] 輸入站台描述物件，至少包含語系eng與cht鍵的名稱，預設{}
  * @param {String} [opt.webLogo=''] 輸入站台logo字串，採base64格式，預設''
  * @param {String} [opt.subfolder=''] 輸入站台所在子目錄字串，提供站台位於內網採反向代理進行服務時，故需支援位於子目錄情形，預設''
+ * @param {String} [opt.urlRedirect=''] 輸入錯誤時自動轉址字串，提供站台例如無法登入或驗證失敗時須自動轉址，預設''
  * @param {String} [opt.mappingBy='email'] 輸入外部系統識別使用者token後所提供之資料物件，與權限系統之使用者資料物件，兩者間查找之對應欄位，可選'id'、'email'、'name'，預設'email'
  * @returns {Object} 回傳物件，其內server為hapi伺服器實體，wsrv為w-converhp的伺服器事件物件，wsds為w-serv-webdata的伺服器事件物件，可監聽error事件
  * @example
+ *
  * import WOrm from 'w-orm-mongodb/src/WOrmMongodb.mjs' //自行選擇引用ORM, 使用Mongodb測試
  * import WWebPerm from './server/WWebPerm.mjs'
  * import getSettings from './g.getSettings.mjs'
  *
+ *
  * //st
  * let st = getSettings()
  *
@@ -108,6 +113,7 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  *
  *     serverPort: 11006,
  *     subfolder: '', //mperm
+ *     urlRedirect: 'https://www.google.com/', //本機測試時得先編譯, 再瀏覽: http://localhost:11006/
  *
  *     webName: {
  *         'eng': 'Permission Service',
@@ -127,7 +133,7 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  *         return {
  *             id: 'id-for-application',
  *             name: 'application',
- *             email: 'admin@example.com',
+ *             email: 'application@example.com',
  *             isAdmin: 'y',
  *         }
  *     }
@@ -135,7 +141,7 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  *         return {
  *             id: 'id-for-admin',
  *             name: 'tester',
- *             email: 'admin@example.com',
+ *             email: 'admin@example.com', //mappingBy為email, 開發階段時會使用email找到所建置之使用者資料
  *             isAdmin: 'y',
  *         }
  *     }
@@ -144,20 +150,29 @@ import { getUserRules } from '../src/plugins/mShare.mjs'
  *     return {}
  * }
  *
- * let verifyUser = (user) => {
- *     console.log('於生產環境時得加入驗證user機制')
+ * let verifyBrowserUser = (user, caller) => {
+ *     console.log('verifyBrowserUser/user', user)
+ *     // return false //測試無法登入
+ *     console.log('於生產環境時得加入限制瀏覽器使用者身份機制')
+ *     return user.isAdmin === 'y' //測試僅系統管理者使用
+ * }
+ *
+ * let verifyAppUser = (user, caller) => {
+ *     console.log('verifyAppUser/user', user)
+ *     // return false //測試無法登入
+ *     console.log('於生產環境時得加入限制應用程式使用者身份機制')
  *     return user.isAdmin === 'y' //測試僅系統管理者使用
  * }
  *
  * //WWebPerm
- * let instWWebPerm = WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt)
+ * let instWWebPerm = WWebPerm(WOrm, url, db, getUserByToken, verifyBrowserUser, verifyAppUser, opt)
  *
  * instWWebPerm.on('error', (err) => {
  *     console.log(err)
  * })
  *
  */
-function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
+function WWebPerm(WOrm, url, db, getUserByToken, verifyBrowserUser, verifyAppUser, opt = {}) {
     let instWServHapiServer = null
 
 
@@ -189,10 +204,17 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
     }
 
 
-    //check verifyUser
-    if (!isfun(verifyUser)) {
-        console.log('invalid verifyUser', verifyUser)
-        throw new Error('invalid verifyUser')
+    //check verifyBrowserUser
+    if (!isfun(verifyBrowserUser)) {
+        console.log('invalid verifyBrowserUser', verifyBrowserUser)
+        throw new Error('invalid verifyBrowserUser')
+    }
+
+
+    //check verifyAppUser
+    if (!isfun(verifyAppUser)) {
+        console.log('invalid verifyAppUser', verifyAppUser)
+        throw new Error('invalid verifyAppUser')
     }
 
 
@@ -240,6 +262,10 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
     }
 
 
+    //urlRedirect
+    let urlRedirect = get(opt, 'urlRedirect', '')
+
+
     //mappingBy
     let mappingBy = get(opt, 'mappingBy', '')
     if (mappingBy !== 'id' && mappingBy !== 'email' && mappingBy !== 'name') {
@@ -306,8 +332,8 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
     }
 
 
-    //getTokenUserForSelf
-    let getTokenUserForSelf = async(token) => {
+    //getTokenUser
+    let getTokenUser = async(token) => {
 
         //userSelf
         let userSelf = null
@@ -321,7 +347,8 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
 
         //check
         if (!iseobj(userSelf)) {
-            console.log(`can not find the user from token`, token)
+            console.log(`token`, token)
+            console.log(`can not find the user from token`)
             return Promise.reject(`can not find the user from token`)
         }
 
@@ -330,22 +357,26 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
             let id = get(userSelf, 'id', '')
             if (!isestr(id)) {
                 console.log('userSelf', userSelf)
+                console.log('can not get the userId')
                 return Promise.reject(`can not get the userId`)
             }
             let email = get(userSelf, 'email', '')
             if (!isestr(email)) {
                 console.log('userSelf', userSelf)
+                console.log('can not get the email of user')
                 return Promise.reject(`can not get the email of user`)
             }
             let name = get(userSelf, 'name', '')
             if (!isestr(name)) {
                 console.log('userSelf', userSelf)
+                console.log('can not get userName')
                 return Promise.reject(`can not get userName`)
             }
             let isAdmin = get(userSelf, 'isAdmin', '')
             if (isAdmin !== 'y' && isAdmin !== 'n') {
                 console.log('userSelf', userSelf)
                 console.log('userSelf.isAdmin is not y or n', userSelf.isAdmin)
+                console.log('can not get the role of user')
                 return Promise.reject(`can not get the role of user`)
             }
         }
@@ -358,6 +389,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!isestr(vSelf)) {
             console.log('userSelf', userSelf)
             console.log('mappingBy', mappingBy)
+            console.log('can not get the prop of user by mappingBy')
             return Promise.reject(`can not get the prop of user by mappingBy`)
         }
 
@@ -370,6 +402,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!iseobj(userFind)) {
             console.log('userSelf', userSelf)
             console.log('mappingBy', mappingBy)
+            console.log('can not get the user from perm')
             return Promise.reject(`can not get the user from perm`)
         }
 
@@ -381,8 +414,18 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         }
         // console.log('userFind(isAdmin)', userFind)
 
-        //verifyUser
-        let b = verifyUser(userFind)
+        return userFind
+    }
+
+
+    //getAndVerifyBrowserTokenUser
+    let getAndVerifyBrowserTokenUser = async (token, caller = '') => {
+
+        //getTokenUser
+        let userSelf = await getTokenUser(token)
+
+        //verifyBrowserUser
+        let b = verifyBrowserUser(userSelf, caller)
         if (ispm(b)) {
             b = await b
         }
@@ -390,16 +433,41 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         //check
         if (!b) {
             console.log('userSelf', userSelf)
-            console.log('verifyUser/userFind', userFind)
+            console.log(`user does not have permission`)
             return Promise.reject(`user does not have permission`)
         }
 
-        return userFind
+        return userSelf
+    }
+
+
+    //getAndVerifyAppTokenUser
+    let getAndVerifyAppTokenUser = async (token, caller = '') => {
+
+        //getTokenUser
+        let userSelf = await getTokenUser(token)
+
+        //verifyAppUser
+        let b = verifyAppUser(userSelf, caller)
+        if (ispm(b)) {
+            b = await b
+        }
+
+        //check
+        if (!b) {
+            console.log('userSelf', userSelf)
+            console.log(`user does not have permission`)
+            return Promise.reject(`user does not have permission`)
+        }
+
+        return userSelf
     }
 
 
     //parsePayload
     let parsePayload = async (req, key) => {
+
+        //inp
         let inp = get(req, 'payload')
 
         //to obj
@@ -410,6 +478,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         //check
         if (!iseobj(inp)) {
             console.log('inp', inp)
+            console.log('invalid inp from req')
             return Promise.reject(`invalid inp from req`)
         }
 
@@ -420,6 +489,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!isestr(from)) {
             console.log('inp', inp)
             console.log('from', from)
+            console.log('invalid from from inp')
             return Promise.reject(`invalid from from inp`)
         }
 
@@ -434,6 +504,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!isearr(vs)) {
             console.log('inp', inp)
             console.log(key, vs)
+            console.log(`invalid ${key} from inp`)
             return Promise.reject(`invalid ${key} from inp`)
         }
 
@@ -458,6 +529,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!isestr(from)) {
             console.log('params', params)
             console.log('from', from)
+            console.log(`invalid from`)
             return Promise.reject(`invalid from`)
         }
 
@@ -469,6 +541,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
         if (!isearr(vs)) {
             console.log('params', params)
             console.log(key, vs)
+            console.log(`invalid ${key}`)
             return Promise.reject(`invalid ${key}`)
         }
 
@@ -539,7 +612,8 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
 
         //check
         if (!iseobj(urs)) {
-            console.log('can not get permrules', userId)
+            console.log('userId', userId)
+            console.log(`can not get permrules`)
             return Promise.reject(`can not get permrules`)
         }
 
@@ -567,9 +641,18 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
     let fnEntryOut = 'index.html'
     try {
         let fpEntryIn = path.resolve(pathStaticFiles, fnEntryIn)
+        if (!fsIsFile(fpEntryIn)) {
+            fpEntryIn = path.resolve(pathStaticFiles, fnEntryOut) //本機開發另使用html替代tmp
+        }
+        if (!fsIsFile(fpEntryIn)) {
+            console.log('fpEntryIn', fpEntryIn)
+            throw new Error(`invalid fpEntryIn`)
+        }
         let fpEntryOut = path.resolve(pathStaticFiles, fnEntryOut)
         let c = fs.readFileSync(fpEntryIn, 'utf8')
+        c = replace(c, '/mperm/', '{sfd}/') //方法同genEntry
         c = replace(c, '{sfd}', subfolder)
+        c = replace(c, '{urlRedirect}', urlRedirect)
         fs.writeFileSync(fpEntryOut, c, 'utf8')
     }
     catch (err) {
@@ -605,28 +688,24 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('getUserByToken', req)
 
                 async function core() {
-                    //提供對象為browser使用者, 且認定權限系統須系統管理員才能使用, 須先檢測token是否為系統管理員, 確認後回傳該使用者(系統管理員)資訊物件
+                    //提供對象為browser使用者, 須先檢測token是否有效, 確認後回傳該使用者之資訊物件
 
                     //token
                     let token = get(req, 'query.token', '')
                     // console.log('token', token)
 
-                    //getGenUserByUserId
-                    let userSelf = await getTokenUserForSelf(token)
+                    //getAndVerifyBrowserTokenUser
+                    let userSelf = await getAndVerifyBrowserTokenUser(token)
                     // console.log('userSelf', userSelf)
 
                     //check
                     if (!iseobj(userSelf)) {
                         console.log('token', token)
                         console.log('[API]getUserByToken/check userSelf: invalid userSelf')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
-                    // //check
-                    // if (get(userSelf, 'isAdmin') !== 'y') { //權限系統須系統管理員才能使用
-                    //     return Promise.reject(`user does not have permission`)
-                    // }
-
                     return userSelf
                 }
 
@@ -644,20 +723,21 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('getPerm', req)
 
                 async function core() {
-                    //提供對象為node與browser使用者, 須先檢測token是否有效, 再依照token取得使用者資訊物件, 再由其userId查詢回傳該使用者權限資訊物件
+                    //提供對象為node與browser使用者, node實際也為轉發之browser使用者, 須先檢測token是否有效, 再依照token取得使用者資訊物件, 再由其userId查詢回傳該使用者之權限資訊物件
 
                     //parseToken
                     let token = parseToken(req)
                     // console.log('token', token)
 
-                    //getGenUserByUserId
-                    let userLogin = await getTokenUserForSelf(token)
+                    //getAndVerifyBrowserTokenUser
+                    let userLogin = await getAndVerifyBrowserTokenUser(token)
                     // console.log('userLogin', userLogin)
 
                     //check
                     if (!iseobj(userLogin)) {
                         console.log('token', token)
                         console.log('[API]getPerm/check userLogin: invalid userLogin')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -669,6 +749,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                     if (!isestr(userId)) {
                         console.log('userLogin', userLogin)
                         console.log('[API]getPerm/check userId: invalid userId')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -680,6 +761,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                     if (!iseobj(r)) {
                         console.log('userLogin', userLogin)
                         console.log('[API]getPerm/getGenUserAndRulesByUserId: user does not have permrules')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -700,28 +782,24 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('getPermById', req)
 
                 async function core() {
-                    //提供對象為node使用者, 且認定權限系統須系統管理員才能使用, 須先檢測token是否為系統管理員, 再由query取得欲查詢的使用者userId, 再由其userId查詢回傳該使用者權限資訊物件
+                    //提供對象為node使用者, 須為系統管理者, 須先檢測token是否有效, 再由query取得欲查詢的使用者userId, 再由其userId查詢回傳該使用者權限資訊物件
 
                     //token
                     let token = get(req, 'query.token', '')
                     // console.log('token', token)
 
-                    //getGenUserByUserId
-                    let userSelf = await getTokenUserForSelf(token)
+                    //getAndVerifyAppTokenUser
+                    let userSelf = await getAndVerifyAppTokenUser(token, 'getPermById')
                     // console.log('userSelf', userSelf)
 
                     //check
                     if (!iseobj(userSelf)) {
                         console.log('token', token)
                         console.log('[API]getPermById/check userSelf: invalid userSelf')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
-                    // //check
-                    // if (get(userSelf, 'isAdmin') !== 'y') { //權限系統須系統管理員才能使用
-                    //     return Promise.reject(`user does not have permission`)
-                    // }
-
                     //userId
                     let userId = get(req, 'query.userId', '')
                     // console.log('userId', userId)
@@ -734,6 +812,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                     if (!iseobj(r)) {
                         console.log('userSelf', userSelf)
                         console.log('[API]getPermById/getGenUserAndRulesByUserId: user does not have permrules')
+                        console.log(`user does not have permrules`)
                         return Promise.reject(`user does not have permrules`)
                     }
 
@@ -755,17 +834,19 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('payload', req.payload)
 
                 async function core() {
+                    //提供對象為node使用者, 須為系統管理者, 須先檢測token是否有效, 再進行數據變更
 
                     //token
                     let token = get(req, 'query.token', '')
 
-                    //getTokenUserForSelf
-                    let user = await getTokenUserForSelf(token)
+                    //getAndVerifyAppTokenUser
+                    let user = await getAndVerifyAppTokenUser(token, 'syncAndReplaceUsers')
 
                     //check
                     if (!iseobj(user)) {
                         console.log('token', token)
                         console.log('[API]syncAndReplaceUsers/check user: invalid user')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -793,17 +874,19 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('payload', req.payload)
 
                 async function core() {
+                    //提供對象為node使用者, 須為系統管理者, 須先檢測token是否有效, 再進行數據變更
 
                     //token
                     let token = get(req, 'query.token', '')
 
-                    //getTokenUserForSelf
-                    let user = await getTokenUserForSelf(token)
+                    //getAndVerifyAppTokenUser
+                    let user = await getAndVerifyAppTokenUser(token, 'syncAndReplaceTargets')
 
                     //check
                     if (!iseobj(user)) {
                         console.log('token', token)
                         console.log('[API]syncAndReplaceTargets/check user: invalid user')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -831,17 +914,19 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyUser, opt = {}) {
                 // console.log('payload', req.payload)
 
                 async function core() {
+                    //提供對象為node使用者, 須為系統管理者, 須先檢測token是否有效, 再進行數據變更
 
                     //token
                     let token = get(req, 'query.token', '')
 
-                    //getTokenUserForSelf
-                    let user = await getTokenUserForSelf(token)
+                    //getAndVerifyAppTokenUser
+                    let user = await getAndVerifyAppTokenUser(token, 'syncAndReplaceRuleGroups')
 
                     //check
                     if (!iseobj(user)) {
                         console.log('token', token)
                         console.log('[API]syncAndReplaceRuleGroups/check user: invalid user')
+                        console.log(`token does not have permission`)
                         return Promise.reject(`token does not have permission`)
                     }
 
@@ -918,7 +1003,7 @@ export default WWebPerm
 <br class="clear">
 
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Thu Nov 02 2023 11:12:12 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Fri Nov 03 2023 12:07:17 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 
 <script>prettyPrint();</script>

package/docs/index.html

@@ -71,7 +71,7 @@
 <br class="clear">
 
 <footer>
-    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Thu Nov 02 2023 11:12:12 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
+    Documentation generated by <a href="https://github.com/jsdoc3/jsdoc">JSDoc 4.0.2</a> on Fri Nov 03 2023 12:07:17 GMT+0800 (台北標準時間) using the <a href="https://github.com/clenemt/docdash">docdash</a> theme.
 </footer>
 
 <script>prettyPrint();</script>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "w-web-perm",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "main": "dist/w-web-perm.umd.js",
   "dependencies": {
     "@mdi/js": "^7.2.96",
@@ -12,7 +12,7 @@
     "w-data-collector": "^1.0.19",
     "w-serv-hapi": "^1.0.11",
     "w-serv-orm": "^1.0.7",
-    "w-ui-loginout": "^1.0.4",
+    "w-ui-loginout": "^1.0.5",
     "wsemi": "^1.7.38"
   },
   "devDependencies": {

package/public/index.html

@@ -12,6 +12,13 @@
         <!-- fontawesome -->
         <link href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.4.2/css/all.min.css" rel="stylesheet">
 
+        <!-- ___pmwperm___ -->
+        <script>
+            window.___pmwperm___={
+                urlRedirect: '{urlRedirect}',
+            }
+        </script>
+
     </head>
     <body style="font-family:'Microsoft JhengHei','Avenir','Helvetica', 'Arial', 'sans-serif'; padding:0px; margin:0px;">
         <noscript>