From 7c702e5df910075d945bc924e58e74eb569e28d5 Mon Sep 17 00:00:00 2001 From: Andrew Svetlov Date: Wed, 8 Jul 2015 20:30:24 +0300 Subject: [PATCH] Initial commit --- .coveragerc | 7 + .gitignore | 58 +++++ .travis.yml | 25 ++ CHANGES.txt | 2 + LICENSE | 202 +++++++++++++++ Makefile | 43 ++++ README.rst | 17 ++ aiohttp_security/__init__.py | 10 + aiohttp_security/abc.py | 50 ++++ aiohttp_security/api.py | 46 ++++ aiohttp_security/cookies_identity.py | 40 +++ aiohttp_security/examples/__init__.py | 1 + aiohttp_security/examples/dict_auth.py | 21 ++ docs/Makefile | 192 ++++++++++++++ docs/_static/aiohttp-icon-128x128.png | Bin 0 -> 61108 bytes docs/aiohttp-icon.ico | Bin 0 -> 3262 bytes docs/conf.py | 332 +++++++++++++++++++++++++ docs/example.rst | 71 ++++++ docs/glossary.rst | 16 ++ docs/index.rst | 30 +++ docs/make.bat | 263 ++++++++++++++++++++ docs/reference.rst | 16 ++ requirements-dev.txt | 8 + setup.py | 43 ++++ tests/test_cookies_identity.py | 148 +++++++++++ tests/test_dict_autz.py | 161 ++++++++++++ 26 files changed, 1802 insertions(+) create mode 100644 .coveragerc create mode 100644 .gitignore create mode 100644 .travis.yml create mode 100644 CHANGES.txt create mode 100644 LICENSE create mode 100644 Makefile create mode 100644 README.rst create mode 100644 aiohttp_security/__init__.py create mode 100644 aiohttp_security/abc.py create mode 100644 aiohttp_security/api.py create mode 100644 aiohttp_security/cookies_identity.py create mode 100644 aiohttp_security/examples/__init__.py create mode 100644 aiohttp_security/examples/dict_auth.py create mode 100644 docs/Makefile create mode 100644 docs/_static/aiohttp-icon-128x128.png create mode 100644 docs/aiohttp-icon.ico create mode 100644 docs/conf.py create mode 100644 docs/example.rst create mode 100644 docs/glossary.rst create mode 100644 docs/index.rst create mode 100644 docs/make.bat create mode 100644 docs/reference.rst create mode 100644 requirements-dev.txt create mode 100644 setup.py create mode 100644 tests/test_cookies_identity.py create mode 100644 tests/test_dict_autz.py diff --git a/.coveragerc b/.coveragerc new file mode 100644 index 0000000..5c2d373 --- /dev/null +++ b/.coveragerc @@ -0,0 +1,7 @@ +[run] +branch = True +source = aiohttp_security, tests +omit = site-packages + +[html] +directory = coverage \ No newline at end of file diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..8af43e7 --- /dev/null +++ b/.gitignore @@ -0,0 +1,58 @@ +# Byte-compiled / optimized / DLL files +__pycache__/ +*.py[cod] + +# C extensions +*.so + +# Distribution / packaging +.Python +env/ +bin/ +build/ +develop-eggs/ +dist/ +downloads/ +eggs/ +include/ +lib/ +lib64/ +parts/ +sdist/ +var/ +*.egg-info/ +.installed.cfg +*.egg + +# PyInstaller +# Usually these files are written by a python script from a template +# before PyInstaller builds the exe, so as to inject date/other infos into it. +*.manifest +*.spec + +# Installer logs +pip-log.txt +pip-delete-this-directory.txt + +# Unit test / coverage reports +htmlcov/ +.tox/ +.coverage +.cache +nosetests.xml +coverage.xml + +# Translations +*.mo +*.pot + +# Django stuff: +*.log + +# Sphinx documentation +docs/_build/ + +# PyBuilder +target/ + +coverage \ No newline at end of file diff --git a/.travis.yml b/.travis.yml new file mode 100644 index 0000000..b75ea72 --- /dev/null +++ b/.travis.yml @@ -0,0 +1,25 @@ +language: python +python: + - 3.3 + - 3.4 + +install: +- pip install --upgrade setuptools +- pip install pyflakes +- pip install pep8 +- pip install coveralls --use-mirrors +- pip install aiohttp +- python setup.py develop + +script: +- pyflakes aiohttp_security tests +- pep8 aiohttp_security tests +- coverage run --source=aiohttp_security setup.py test + +after_success: +- coveralls + +env: + matrix: + - PYTHONASYNCIODEBUG=1 + - PYTHONASYNCIODEBUG=0 diff --git a/CHANGES.txt b/CHANGES.txt new file mode 100644 index 0000000..9f43a99 --- /dev/null +++ b/CHANGES.txt @@ -0,0 +1,2 @@ +Changes +======= diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..e06d208 --- /dev/null +++ b/LICENSE @@ -0,0 +1,202 @@ +Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "{}" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright {yyyy} {name of copyright owner} + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. + diff --git a/Makefile b/Makefile new file mode 100644 index 0000000..a782364 --- /dev/null +++ b/Makefile @@ -0,0 +1,43 @@ +# Some simple testing tasks (sorry, UNIX only). + +FLAGS= + + +flake: + flake8 aiohttp_security tests + + +test: flake + py.test -s $(FLAGS) ./tests/ + +vtest: flake develop + py.test -s -v $(FLAGS) ./tests/ + +cov cover coverage: flake + @coverage erase + @coverage run -m py.test -s $(FLAGS) tests + @coverage report + @coverage html + @echo "open file://`pwd`/coverage/index.html" + +clean: + rm -rf `find . -name __pycache__` + rm -f `find . -type f -name '*.py[co]' ` + rm -f `find . -type f -name '*~' ` + rm -f `find . -type f -name '.*~' ` + rm -f `find . -type f -name '@*' ` + rm -f `find . -type f -name '#*#' ` + rm -f `find . -type f -name '*.orig' ` + rm -f `find . -type f -name '*.rej' ` + rm -f .coverage + rm -rf coverage + rm -rf build + rm -rf cover + # make -C docs clean + python setup.py clean + +doc: + make -C docs html + @echo "open file://`pwd`/docs/_build/html/index.html" + +.PHONY: all build venv flake test vtest testloop cov clean doc diff --git a/README.rst b/README.rst new file mode 100644 index 0000000..fa83e86 --- /dev/null +++ b/README.rst @@ -0,0 +1,17 @@ +aiohttp_security +================ + +The library provides identity and autorization for `aiohttp.web`__. + +.. _aiohttp_web: http://aiohttp.readthedocs.org/en/latest/web.html + +__ aiohttp_web_ + +Usage +----- + + +License +------- + +``aiohttp_security`` is offered under the Apache 2 license. diff --git a/aiohttp_security/__init__.py b/aiohttp_security/__init__.py new file mode 100644 index 0000000..5218b0d --- /dev/null +++ b/aiohttp_security/__init__.py @@ -0,0 +1,10 @@ +__version__ = '0.1.0' + + +from .abc import AbstractIdentityPolicy, AbstractAuthorizationPolicy +from .api import remember, forget, setup, authorized_userid, permits + + +__all__ = ('AbstractIdentityPolicy', 'AbstractAuthorizationPolicy', + 'remember', 'forget', 'authorized_userid', + 'permits', 'setup') diff --git a/aiohttp_security/abc.py b/aiohttp_security/abc.py new file mode 100644 index 0000000..df064b8 --- /dev/null +++ b/aiohttp_security/abc.py @@ -0,0 +1,50 @@ +import abc +import asyncio + +# see http://plope.com/pyramid_auth_design_api_postmortem + + +class AbstractIdentityPolicy(metaclass=abc.ABCMeta): + + @asyncio.coroutine + @abc.abstractmethod + def identify(self, request): + """ Return the claimed identity of the user associated request or + ``None`` if no identity can be found associated with the request.""" + pass + + @asyncio.coroutine + @abc.abstractmethod + def remember(self, request, identity, **kwargs): + """Remember identity. + + Return MultiDict with headers on this request's response. + + An individual identity policy and its consumers can decide on + the composition and meaning of **kw. + """ + pass + + @asyncio.coroutine + @abc.abstractmethod + def forget(self, request): + """ Modify request.response which can be used to 'forget' the + current identity on subsequent requests.""" + pass + + +class AbstractAuthorizationPolicy(metaclass=abc.ABCMeta): + + @asyncio.coroutine + @abc.abstractmethod + def permits(self, identity, permission, context=None): + """ Return True if the identity is allowed the permission in the + current context, else return False""" + pass + + @asyncio.coroutine + @abc.abstractmethod + def authorized_userid(self, identity): + """ Return the user_id of the user identified by the identity + or 'None' if no user exists related to the identity """ + pass diff --git a/aiohttp_security/api.py b/aiohttp_security/api.py new file mode 100644 index 0000000..b7b8e49 --- /dev/null +++ b/aiohttp_security/api.py @@ -0,0 +1,46 @@ +import asyncio +from aiohttp_security.abc import (AbstractIdentityPolicy, + AbstractAuthorizationPolicy) + +IDENTITY_KEY = 'aiohttp_security_identity_policy' +AUTZ_KEY = 'aiohttp_security_autz_policy' + + +@asyncio.coroutine +def remember(request, identity, **kwargs): + identity_policy = request.app[IDENTITY_KEY] + headers = yield from identity_policy.remember(request, identity, **kwargs) + return headers + + +@asyncio.coroutine +def forget(request): + identity_policy = request.app[IDENTITY_KEY] + headers = yield from identity_policy.forget(request) + return headers + + +@asyncio.coroutine +def authorized_userid(request): + identity_policy = request.app[IDENTITY_KEY] + autz_policy = request.app[AUTZ_KEY] + identity = yield from identity_policy.identify(request) + user_id = yield from autz_policy.authorized_userid(identity) + return user_id + + +@asyncio.coroutine +def permits(request, permission, context=None): + identity_policy = request.app[IDENTITY_KEY] + autz_policy = request.app[AUTZ_KEY] + identity = yield from identity_policy.identify(request) + access = yield from autz_policy.permits(identity, permission, context) + return access + + +def setup(app, identity_policy, auth_policy): + assert isinstance(identity_policy, AbstractIdentityPolicy), identity_policy + assert isinstance(auth_policy, AbstractAuthorizationPolicy), auth_policy + + app[IDENTITY_KEY] = identity_policy + app[AUTZ_KEY] = auth_policy diff --git a/aiohttp_security/cookies_identity.py b/aiohttp_security/cookies_identity.py new file mode 100644 index 0000000..cf829f6 --- /dev/null +++ b/aiohttp_security/cookies_identity.py @@ -0,0 +1,40 @@ +import asyncio +import http.cookies + +from aiohttp import hdrs, CIMultiDict + +from .abc import AbstractIdentityPolicy + + +class CookiesIdentityPolicy(AbstractIdentityPolicy): + + def __init__(self): + self._cookie_name = 'AIOHTTP_SECURITY' + self._max_age = 30 * 24 * 3600 + + @asyncio.coroutine + def identify(self, request): + identity = request.cookies.get(self._cookie_name) + return identity + + @asyncio.coroutine + def remember(self, request, identity, **kwargs): + cookies = http.cookies.SimpleCookie() + max_age = kwargs.pop('max_age', self._max_age) + cookies[self._cookie_name] = identity + cookie = cookies[self._cookie_name] + cookie['max-age'] = max_age + cookie.update(kwargs) + + value = cookie.output(header='')[1:] + result = CIMultiDict({hdrs.SET_COOKIE: value}) + return result + + @asyncio.coroutine + def forget(self, request): + cookies = http.cookies.SimpleCookie() + cookies[self._cookie_name] = '' + cookie = cookies[self._cookie_name] + value = cookie.output(header='')[1:] + result = CIMultiDict({hdrs.SET_COOKIE: value}) + return result diff --git a/aiohttp_security/examples/__init__.py b/aiohttp_security/examples/__init__.py new file mode 100644 index 0000000..792d600 --- /dev/null +++ b/aiohttp_security/examples/__init__.py @@ -0,0 +1 @@ +# diff --git a/aiohttp_security/examples/dict_auth.py b/aiohttp_security/examples/dict_auth.py new file mode 100644 index 0000000..b28dacd --- /dev/null +++ b/aiohttp_security/examples/dict_auth.py @@ -0,0 +1,21 @@ +import asyncio + +from aiohttp_security.authorization import AbstractAuthorizationPolicy + + +class DictionaryAuthorizationPolicy(AbstractAuthorizationPolicy): + def __init__(self, data): + self.data = data + + @asyncio.coroutine + def permits(self, identity, permission, context=None): + record = self.data.get(identity) + if record is not None: + # TODO: implement actual permission checker + if permission in record: + return True + return False + + @asyncio.coroutine + def authorized_user_id(self, identity): + return identity if identity in self.data else None diff --git a/docs/Makefile b/docs/Makefile new file mode 100644 index 0000000..c7a36b9 --- /dev/null +++ b/docs/Makefile @@ -0,0 +1,192 @@ +# Makefile for Sphinx documentation +# + +# You can set these variables from the command line. +SPHINXOPTS = +SPHINXBUILD = sphinx-build +PAPER = +BUILDDIR = _build + +# User-friendly check for sphinx-build +ifeq ($(shell which $(SPHINXBUILD) >/dev/null 2>&1; echo $$?), 1) +$(error The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed, then set the SPHINXBUILD environment variable to point to the full path of the '$(SPHINXBUILD)' executable. Alternatively you can add the directory with the executable to your PATH. If you don't have Sphinx installed, grab it from http://sphinx-doc.org/) +endif + +# Internal variables. +PAPEROPT_a4 = -D latex_paper_size=a4 +PAPEROPT_letter = -D latex_paper_size=letter +ALLSPHINXOPTS = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) . +# the i18n builder cannot share the environment and doctrees with the others +I18NSPHINXOPTS = $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) . + +.PHONY: help clean html dirhtml singlehtml pickle json htmlhelp qthelp devhelp epub latex latexpdf text man changes linkcheck doctest coverage gettext + +help: + @echo "Please use \`make ' where is one of" + @echo " html to make standalone HTML files" + @echo " dirhtml to make HTML files named index.html in directories" + @echo " singlehtml to make a single large HTML file" + @echo " pickle to make pickle files" + @echo " json to make JSON files" + @echo " htmlhelp to make HTML files and a HTML help project" + @echo " qthelp to make HTML files and a qthelp project" + @echo " applehelp to make an Apple Help Book" + @echo " devhelp to make HTML files and a Devhelp project" + @echo " epub to make an epub" + @echo " latex to make LaTeX files, you can set PAPER=a4 or PAPER=letter" + @echo " latexpdf to make LaTeX files and run them through pdflatex" + @echo " latexpdfja to make LaTeX files and run them through platex/dvipdfmx" + @echo " text to make text files" + @echo " man to make manual pages" + @echo " texinfo to make Texinfo files" + @echo " info to make Texinfo files and run them through makeinfo" + @echo " gettext to make PO message catalogs" + @echo " changes to make an overview of all changed/added/deprecated items" + @echo " xml to make Docutils-native XML files" + @echo " pseudoxml to make pseudoxml-XML files for display purposes" + @echo " linkcheck to check all external links for integrity" + @echo " doctest to run all doctests embedded in the documentation (if enabled)" + @echo " coverage to run coverage check of the documentation (if enabled)" + +clean: + rm -rf $(BUILDDIR)/* + +html: + $(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/html." + +dirhtml: + $(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml + @echo + @echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml." + +singlehtml: + $(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml + @echo + @echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml." + +pickle: + $(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle + @echo + @echo "Build finished; now you can process the pickle files." + +json: + $(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json + @echo + @echo "Build finished; now you can process the JSON files." + +htmlhelp: + $(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp + @echo + @echo "Build finished; now you can run HTML Help Workshop with the" \ + ".hhp project file in $(BUILDDIR)/htmlhelp." + +qthelp: + $(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp + @echo + @echo "Build finished; now you can run "qcollectiongenerator" with the" \ + ".qhcp project file in $(BUILDDIR)/qthelp, like this:" + @echo "# qcollectiongenerator $(BUILDDIR)/qthelp/aiohttp_security.qhcp" + @echo "To view the help file:" + @echo "# assistant -collectionFile $(BUILDDIR)/qthelp/aiohttp_security.qhc" + +applehelp: + $(SPHINXBUILD) -b applehelp $(ALLSPHINXOPTS) $(BUILDDIR)/applehelp + @echo + @echo "Build finished. The help book is in $(BUILDDIR)/applehelp." + @echo "N.B. You won't be able to view it unless you put it in" \ + "~/Library/Documentation/Help or install it in your application" \ + "bundle." + +devhelp: + $(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp + @echo + @echo "Build finished." + @echo "To view the help file:" + @echo "# mkdir -p $$HOME/.local/share/devhelp/aiohttp_security" + @echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/aiohttp_security" + @echo "# devhelp" + +epub: + $(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub + @echo + @echo "Build finished. The epub file is in $(BUILDDIR)/epub." + +latex: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo + @echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex." + @echo "Run \`make' in that directory to run these through (pdf)latex" \ + "(use \`make latexpdf' here to do that automatically)." + +latexpdf: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo "Running LaTeX files through pdflatex..." + $(MAKE) -C $(BUILDDIR)/latex all-pdf + @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex." + +latexpdfja: + $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex + @echo "Running LaTeX files through platex and dvipdfmx..." + $(MAKE) -C $(BUILDDIR)/latex all-pdf-ja + @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex." + +text: + $(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text + @echo + @echo "Build finished. The text files are in $(BUILDDIR)/text." + +man: + $(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man + @echo + @echo "Build finished. The manual pages are in $(BUILDDIR)/man." + +texinfo: + $(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo + @echo + @echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo." + @echo "Run \`make' in that directory to run these through makeinfo" \ + "(use \`make info' here to do that automatically)." + +info: + $(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo + @echo "Running Texinfo files through makeinfo..." + make -C $(BUILDDIR)/texinfo info + @echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo." + +gettext: + $(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale + @echo + @echo "Build finished. The message catalogs are in $(BUILDDIR)/locale." + +changes: + $(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes + @echo + @echo "The overview file is in $(BUILDDIR)/changes." + +linkcheck: + $(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck + @echo + @echo "Link check complete; look for any errors in the above output " \ + "or in $(BUILDDIR)/linkcheck/output.txt." + +doctest: + $(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest + @echo "Testing of doctests in the sources finished, look at the " \ + "results in $(BUILDDIR)/doctest/output.txt." + +coverage: + $(SPHINXBUILD) -b coverage $(ALLSPHINXOPTS) $(BUILDDIR)/coverage + @echo "Testing of coverage in the sources finished, look at the " \ + "results in $(BUILDDIR)/coverage/python.txt." + +xml: + $(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml + @echo + @echo "Build finished. The XML files are in $(BUILDDIR)/xml." + +pseudoxml: + $(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml + @echo + @echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml." diff --git a/docs/_static/aiohttp-icon-128x128.png b/docs/_static/aiohttp-icon-128x128.png new file mode 100644 index 0000000000000000000000000000000000000000..1a3c949811911fd678010ea5cfab79f661f3880f GIT binary patch literal 61108 zcmW*SWmFVj8vyX_r9rw`1f;urSNv1b-5?Uu-L(rUC@F$~)Cwxy4N@v0jdY6AjimIu zyz@J=_sq=h*$;EioVicD($P{OCZHz(006{ls*m(=Bl>P9gW*2kmbb>>28bg{69oWN zB@$jef#QyVK6)w-0p&xCo45nSQ&l}p03i4Q?nlo7fD7Cy^acRnCjPzY zXI8VW9PR?l_OZ&N+y8I)CTH`wGx(mWrarh)_5Zu_4;O{I|5tm2G6z2zVStn}T=$K7uv|Xp4CTjfugdR?omwjTY0ppB?E-!u0KUfQobSvPT?m zF|wg8Kz{ggv0YIv{NI4-)S}CN-OwU$>I&xePXsk1BjXZzS|fyUO(+^u=4#Jd`F^4l z_O2?<9uaF_#RoI0PEPI6dsj^<)r%sDEKNJ9W|kTb8Uh1B5C9Vs)4_5NsX;#d1X5gw z*Z_=WJ}HFH5ADvA)aEnoBI^v@4Cl6QTImL#!NxyJ)M4~e@+iq3^HtqCIo!}lM*YoY z?znAeAotV6DvP5k~{@*K%w}T!ZT}`as550P~ET?lv<==uftMEIu6Gs z8&<2sQmt2w&r#f;Qb2pUwUJ|;AuRiA45V7kWggFN5h{ymJ~XRtCowc zT0*&NPC0GvS##6f_1lyxikqC*9r&_OIEj*ZijoQREM7nMN(xxD3`(=6N;fMqDo({d zD1PO9e?#_|>4IdW*kz(_3oAL!utkiz)Wx}Hz-p*U1*${2=`bKQjmIXAx4Zoa8$1cg zG{r`5H@mJPXtvso(GlbV-fv<%d_RjaeXQ|)H-vEaie<2?)_C`0X~5e-x~Ah|7KeUk z(%+>;d|G~o*`G9t`KMAa`t&&tWaG2@)`Jbhlj2~*5pXb)6zyMv!~5*0?tC^>C+`uy z5NK^zSwnjls%9eK9Y-JeM!4CzmG#YWaU^&~w(?O|@GvZ6}^GTK_Be z?-W2tz5HAb@tTQGsWf$I5>@p>gh&6}p~SQ1&n_~wt8w1S(n5K0TxhW)Dm{R`=Rkm+i}qn|;b_fTCGKgml(s~dCu35UbvmpM*U z(7c>GGu$!1W^@K`*3+#~f^nYrPRB$q4&Jfm#e*=418R@IlM%tmx2ToDUu``&@BxTu zrv|{MTzV>taERJ5wgy^zd8dOz!0U&27uImJ_?aQn1uH&64-n1xp@9VwKkJBaBaDFG z8Ui9>`Ko*WycZTol+|J=h#!OPfKP#!fb{)4=$WssPwD}F%GtV(9hOr#H1oR)I4JE2 z{SyN$znjygAnm@XUN2}bB}WUD#5Q?2BJBBYM)Vu3m+|t|K`Y{&<>WlU&vCW-Loh{F z-Ra!aXpn|WQ9HpFXIaV{kor_&6MbZ}G0S=mc$P^ypaH))Z}F=oz@)fsLJ;sDm-1*t z=a+XiS*tcv^)7RDtQH6yz(9h7N)1~tf{s0^qwYHn#6sK>2cIy|#!}RS zi8V6}6Hoe->dyhPtdxd0f8O)fhD}UmW(AVh1~2Y>9I}yPo~!MRwh@bUF|K8x4O{l7 za)NZ9Z-hdIrC1%#Sy%?NZk2yd+*<^Hqc_>AjrL;MA@?-QopkZ zaC&ryELh^$b;GpM$c(ovb?N;d9MB?7t6;D-BtKHOv#>*4@t<{9^rL=J8;?Huj76%i zsXx=QfldkRXs;MkOTlBll9f!cm2hV01u)8(G5CXJ9Ht#8FL~>el%oGF$P>jPoIy-uEIRJ8;T zD^+puOceSZ&pRf@a46>M?jS4jj7Lk*5(W&##8B$0nE#MY>iQRottUKK-1-h~EJ{ z_c*jMsW}S>dnklAE5zBu3-3X8adRE1Nr3?MVgvqofP??qu1%@X`@*vh+D{YjSZz!$ zjCP-l3_Ck9!gi~9^7i0{6B)E3$Uy=@gZAkr>_qNMEn=CZxDBp+REFe>mY4 zaLN4v*!}s~RJ>?ho)o|*h!XF`{tpdc)3falVIBArCj1ZyT_s|0cYo#Z}LaMSav~lT$U9X}rH(3V5*U<2FsK$)nj*LGO9uXl9`2SBVygl7JOZ5x& zbFi>x1S-TEK2R?Y>Ee1O_g1xP)p8bX|I!c2bzMpE0_^$;H zr9r1Mw=~BfXGg)tRAA-zCGDetTIV)W+wCZxk4zJ%U=I;(lE~s-t)P3VDKFkki2Tx| z1KF8`iRJ<|UKie=?T78ZC2s7UAS0bHTx&ha!*585;B0cai5isUI>B ztTh2^21q+;e!w()1rYVayBp)Y+{QQtHmLf#_?a|{$D&bX+12Kur^T#|=YuS>n`KeN z+|Od>3c~8>1T$&Rgi9WdDo)Oo8t;mV6vQA4!h^4W|RkyD8ngcpi~3F}p` zV*y$F+&K_9!GZc$#ac%E2^jKa=!V)BJI9(bU8>R~MT^`0qyU;d}&a7fjH^CS#R-4Q+u?;EH3|kpxZxMos?Ti5Zn*p7CQ!BT`AKdlBH&ZK zssMPU&uLv#=iK0489~yptVl38X>)c(5wAM(=ay)adT~)OWtLr#c?-OBRZDRb@By{< zj1zASny>MNr8eO_)>sqdfgx9vct&zV)zv*d3%fA=)$n&0b3X<9GuNcyOH0H?AdVEo zABGe8HxK82;A{{MX7RuMya3=X|DEz6m-$Ao+XBgRMbg`SE;N+S2G}c?!FkjXeh2XN z(>EMe0|^}JIA>+?eELT(@*e84j@-QseT#^^fhNzuC-Y}Q1ozQ9Z+Zl;#3;YE4(%nPG+o5&iP;UI7#A5MX4FtK8iUQi?y9QPz=>adq{Y8nHX3 zq(Tq+JZ73n`j34v7d9<|Mqw?w({i}T=33ZJA&9NGQ)(_6Zbnd^CmULe&K+u+zh{(& zOwdsZBl6cY+TiSvDg8w^Mf?!{eN_#3=`);t?i?AS{QIBt8S2<&HLYHTwEJT^>x)^? z3vRW#_V!XOO+8G%Oii7^|5ps0Ks{>lTndQ=s`-hI;4;RKCe2|fe7#GW7uL$}QR zWNk+O;|Jg`U&Tj`dVwXzK0*thxnW!64kFuKJI}GrX^riE3Of7Wcld(?>mQa&9BD1384e?}2;tFrs%R5gTsMM_#L0c^1*lGb_IeCD^mZS#>~Q(5MjXf53= zQTeLfm7ovr&Au++2m4zhZ>^yp(w@Pxt=WrH3IBldSh%kzjSo&#p@gnm-YmLVd!bdRbm-0V?@ziOU;^}fo1ROJbWaB_i6y-|`MN2M z2>8e(Q_UEt;CW*K>ZQDN0sQP*^#z4Gm!DED8L=5UA>Skt0Pu#0yYrurfq9fkRDF_| z|2$WK2>bEQLR@cMUbF$48`~4;Nycj(UQz?Pz#djPAZOQquXYMBoz6|<9lx#WAieJb zIjIf)d-`(yvCc4+<-~@Pjvt}CX$x)dR!T030NB)PZI_q=^)9-{zK!5fN#3kETG{Xf z4?wa;EbXKZ8ZlHU;O0tPQ1Fyh6&mmTLgSgvcLX^2bN-muW1YMD>i{6Nu)%W?$afYa zrHCzYFaL=U6hYG~=@I2zC5v48VgE9cJr;8FcQO#l zf<6|ypo%r275CwVoED~mKMr0sQvVc=!!|C-EY!-`jepkd^p@PqZ}j|qG4=YpBKY>G z1{ksC7!J$e^|2S2wvFW{+hWEc=`_2u)Noz@3zqv^G!!=SLcq64+O){63#RzIRQXc> z-6>{1xkXUh62A8h^J(2YGNQUfmbZf|@Ha^+LGeqMn0B~o*T%A11^PXmVzV#fvy<1K zBzB-;rzXPt;8A~g2#IP<99)|p+QbnySB2>aY3kRnM`!s{XI7!L2dAt6^KnM0z$l11 zFe8)~+^JW|2zZG~*h>2QwIFoIvn2f3fnCB<{=lZNA0zm~NJ zFHKn;`@%XL9y5k>~nq(emP?0q%0sx!jD9df;&N|OQLzx>aR19rl{eYN(GjW z4?fNN7b^biF_fSGME<>$-@5#SKqoUEnDeCl)@wq&POl8X!;3>0ITwY)8eqBCJny%Z zy^TY-w{>Ug4^jEvob@)}6=~P)JVl4HMD<^@*&^}&_x6L4Iu=|4l<*JIcgV&BKU-@k zdgglJoL|}vdS&nq#bb^y>*Wu+{_|Yf_`<@BDSXpy&=1cMJgz)UVUT|Iu(2387oOpsLdg`#MXEaOcb^Hb- zAGI#FdmtYlZ52d|pzk%kN~=JBlqD{sUYak{i$BA>q3ZU_A>30ioLmgRm$D%`zJ8U@ zo4F!iz$mq=ZF%9vq}nh(&9)!)jxN*USRA|cN%qVYcH*!W{UZeV(EDo!NJK2_ojhKa z@k187M7UV!3b+wd_NSq;2-v4>9>QZ&WZJ}pd?@zz8#eTmya3Mz{^x5AQbR3Ob;I+! zgtyQ07|?27I}yO*La;L#(d691f&M_fHHx*^3x1Ic!hcrwMG*Y@?H4c)3{1F!cUBmN zFf@R>fu3KOT+a|nE0wm?ea3Q7UN=1nin+}js<&e6I5F8#`cL8d(v@WR&daPhZ}$CQ1ks z37pgSyMm{-J6+SUOESwc%NJ~&*59AnJ}lqYIAbD4)GQ^;Q0zmEA5QA`gk#cM!Z=q% zg~+q%hoCwrEB`|bWs1d6l-=(<1mJpH0HNHHNrknzAX%qMs@!^#3oKo_bmGTkA?Me? z2t)m+30VNYX<3dU!2``W%N=>0w8K{YP3DmYhN?TEfI?TRfpgf-y5R0&2!58JoXcSa z*y9_IdCM)4g%~V2`UZNlkOy;7LCG2=zeB$r-q!j@mi2EJs<1;aD_@)vOha~ESVF*+ z$WsUd)mSWFzd&kMCcH>SG1q!XHUJe2-;e~=MqFl)zHv ze$ZZ(Ho2|~MbNE}7QnduAL$RJLoyRma~vgv3>i}lY+L?L%r4WMY`r9{Qv8Q*7QB~? z{_et>y<2{si^(oe1<1=`f4;Uh~E57U>2;lZK2h*pbsc3|O-! zdgWB0QJ17(>%CIH^HO@l&JEp*g1KC%Jgp)3Ez69+4ZEE_b~)9tldjEgIo)n#4F={W z1d#d|enhC+1&0@p(q;KLRCV+q>?8dz43c6smIaXCE;9w|zkYteRS`UHflqF0yY!@^ zb8tQAD(2D8RK&fMo}vfRXh=AbCJ0|vakWb@62zp-EkF9g z-1#LC{+1G1z^#G`npYwy1^k%E9gYo@8|-Pfhr$Y_D94Z_CCnd8JQY4S>cc_9(T=Jv zcw)vLJ#~Z+uClqZjK0SNJFNSeTF8}b zxsR1g34np#o28gDvm^av@d4(Bt({VotK9f~E?U(JKzulhxHZI8;_-KL+a;jy>p$qj z&59T6=#|2$uO|T3sPEQJmbY>}>^jVDQR^zmd3i!}#1q4g7_I{YqqXZWO&whuOBjTA zgw(UJQ_u5rNy7=4ta&UazZj_{Sd-+!*7)*W?no2w_w73W<16}F=W^rF)4>_Hp4lpY zKD*D3I8m2R&c5wMcZPJ~tTu}s;PNY!w_XgL5n8|%VPso!#R_kwRRd1+(g=FuJ%$DjK*-*eE#*e9U?+(XfYRWI z75r0EKNSy@e3JRd5RjT{V1yZ)q+^x={&t2sOi4p@A7^qBiDGia(%N1`(C;)Pu!pt7 zYZDWGoQWf$6B^gjNv@!FvlD1aZm}=a$&m#=7rt(b)HVlI>zzu60F2p1bc4n>Mp%=C z1fPF-6iRO_c^H3wFPcW^V^t_nopAB#J1D++>TYjZC8Zmx$w0eBAZBAZQXdd|=*=Sn zJ^YnaZgWri0~2`FOP)@Vj@@oRD~lq7;y(bfia?Y%3PFC0mS-5Ls<*SF5f{Ih~iM#4u8*i zC4a;TX;;BT90gPtTD^8The3nMB?2r&RRKYcM@)^5F0!RhvGu+ALy3q@i$9<@r5!Pu zYc$EIuNUEN;#`USKNaDWPLG_ooN!-w7uyP(!Nj{;Pik|jFnH=Mh0wAJ-*XR3x*+FkNp)#Gl~X|E?~z01^@s?Vl}Yo6F{8p5r1o zAGmt?lgtqffbZ;GI2gzGII}EC4CJM0bl{?OiR|-ZxX$2EwrMtG)UdTcnppYWdxu2O zM8a9NG(sAC-}-$fUH0pHq zkyX-u(}L@$*3UEDdPzcCQ>6{t{upoltd|ID8U9_WB@2>9y#>UujG;&f=-rmbyBNL~ z#n)-dD-Xe9Gb(@-$>WR}hLJKEi~^#`Y+_^?9nY$NsJwdpHid2b{Xh%$OK{i5AN23G z^jmO;K?T$Uh=0$!yqh(pk(KI)EIx|5*A`ZMYSXj|+36hu;XviA1KSQly?jKpQa!t}%9Fy~*Q3TBN3K~&HLXg-Ty#iw zTuaeLPk=(C3uRX++yqt8!`vxnhrb9jh%xDApjA{?2#Hh+n(=(G88^YG&JWGA)+q(t?3EdD7;Rx^v->d^Up>T-Na)|!F+9ML z;IAi8&vED;$dh+h4iVhrsnqeLXkP)jOz`-~hy#j7(7oYa{rk80zU1NL#ADDsed{M= zv3YuU2DPh0J9x=#Y=41~Llg6faf-CI?p7o(_|tYSmds2l4dX4zLdw6-%5Et+L`U&E zvZF4RQsUdQFwculV5eKaS?05wLWa=BdE+}B;XiQjaS2?sg(yk0f_K=;1)hPXq5i~* zS;UJ7;hPfzL`Cge{kfvuaoBc>U!M#Vqi|=*eHjOQ6O5x+Xv_Pe?865*;(AhE*QW(A zoZVD?6BOgj`$L+lQ;P5C%YR7mKMJj)s!3vI|5;tXWsA>e#Xc4eAx_%XAZ`TOr|+2o z%q#=G_xkb2pANqWRleHb87{NWNb{+Ww2SVyOMv=io;qBa9_(=4dKNJD$|qGVUGR*^hVB&@)1&?R7n}9TJFiPia&_qf8@`vnlSRqDz3zMw-Z4(- z)35;aW=%;7q7@ovcB9~;X%MEjD-xY8h9&379;sU+$HFC?0kqtE_JAGx-_|QC-=`a* zYtT>6`nlocpE(!M22)iVB*>S+meNRxC<8V`R8I==a|1(hBF|+{U`*=CPiV|KSPht$ z!M}=uwD@lT5oCI%nYeIkOU{3Y2P`GMGRkj`;M=Jjm%F6M-Tqsj)E=a)j;-gM2l{ig z%78pTmm`X)JmqDUE)9vpRP?c1$m{cM)WagPT;C9;akZ!Db(j^8HTRv$+!~yyjs;8$ zI3Oz6xV2;v`ZTesXBu1_$CKX&@cMr5Y-;Lu_>Xk~K)@42h&Zxu8-QO{ht0GRb!Oi| zk_L}}ZK=EY;!Jxh7SX>x#8Fm}BD>MxGl4LstZ1#NnPdA^lXdIKx=%p{hS9_BPZ`tP;>7%33f(4X1NxomXz)LVq-)IkB9%`0<1{u3eMG?G z2fA}bc!*uAt~MiJzv`!W<^@tyB>Zo}mrjp5U)K;sdYRs${4{Z?G@M~r7P{Bh^i4Yr zSCz7u&vx)=t?%s&^6YEbwggo9UC4F0K32xc?C+7fO;_qPxC{6u{8S_f+{9K+1m0xv zc9aM9xrv=J!WqNLwiU?qyGqIdA8&vEQ0469xc@@sJvc3E?L$4{h!I}{r0m2IzuUpR za6AbPA0-XS!-#Hy4OtpHr2X*7{46X%l++o>FBZunNK=g>kO57DC7^IWtI8pgZG zF7D8KMLp8=A3tc-zajRVmc3B$NZIz!aPX=~28MHjyvXksliD6!G^e z5&dOphae5enG}98t*67OFLJ5?-ebvnFU{5&DB`S%;l?UECpK@PSA-0z0Z;D9BMlP; zbU!{g@O)F=umk3E{Im&sr8sjMJ=J0AE8$lHJ* ze?0vUT1m8y`d=9J``Aawr$zsOe5u0s*!kK`asfITLBQyEc8rOU1(pR}KOcr)X}~LQ zOVP*|5}{gEOzz3=MZFHwI)hld zRryc07>KtNC}lY)13$&jEZrV0Vstq_g#lGty~ObJ^*A%CGSz8>Fsgc{iYueHN?SJ> zK*x29c=3RfrmBIr5VKY1Zy})s-hT&r7_Jaa>t}mc_%Wxuv2$Q@qhGY&fYUu9I_^&E zrQl`r79W4wygeU7A5P>c7_JrCPGkYMHKRO62N-wyQ8D~N0<1-?M6JNT=drOEeH!7sY&M*G;(no@nJLK`v@&mVn+Npo2bQD^Q_LLA$M1OU~+}_H+ zS_!y3q}NonveBmR!6olR+K7^pw$*)oI#>mUHK|4eNgPd}8`b^c3!=o-GJ_BJ$jV;3SR#Wq9od1lX-ED*{QkE*kUkZ;P2{~iPxK?_5faa! z%dRh^5X-SpB@8d4ji@Ka7ldf~=tE)v6;~Dq@%Plo|0XZASpE_KP$jv1WimshoO9dG zA0s#|UiLuhmrUy>$!zSZq@M=Nlw$Ec75s4Ich-3g>N8|dL!PKOsV8m|mb}W%m<=8< zysS0qfOl){(-AgMn0moJqdi6yr%Y(Y(x9 zl|sjh2iQ6v^FsE*;uIYe_Cw8&BVr*d-rp?57wLUb`|%(FhwuPrdZ{tei40s;|K)BD zl>AgPK9hJ_!|2VhgMW_K&rZlH+kje<=3c>5<%gA`hEJK%^BIc`vAn7leveOj4l%;) zJQ9DGh*voG)w6^}p4xS*>b$E?f!_4ru{jnCrkBU$Gp=qZY6Gv1{s3l2UP{=sJK(^6 zbKJ2htC}=%L9Ce!RHZ+aqzN@$7prGR4?r(D1+AdvvrVm9#&D02V>E25s$(_A>CtBrdgj0hGAa1U0(T9Xd1XPD z$9>Mw3?pfm$^Ty4j{h0sEuA)~`pA~s3@E{1kKjtAFTKLH8hq(13qx^GF)wz2wXOu^ zIjJB{$r5KaFtYrJy;XYIBbWzRuv|>ra=&vXXox%@qYo0o&_f)(|C(-*})y z<5>ZEL`gE6vI(RR&akO$3Kmcso{4c^lu_krQ@A54yZ2Yk)>A~mS7L81fQRgV*?mas zDbdj?#KOtsVggduR0WkJSeiAUjdGTa|Eh#)4!MTz!`A~b0w*m|M~|wQ8cqNq*2xox ztd-1ajRs+iCT?NZue&2Bx@GG|ByA>qex>dER5~{+^60=zO|*L+lA<|uwbS}Y{WGuP zw>$uI*2nSYQ<3_mChO*NnCIlNMlFOZUdFEDc1fo1?N`x#+}9m$B)vf{RtJ`z_1W%K zD6m5_yju*ac2*jz0FfHdyXT>VCTyQ!5uj8hVU5HxORB7DKs;nyOD7mC?0v|!!-z8; zp9z|T(%HTBDe$X{96RaV-letVY}WE+s$_1!f%`Ny&0COYu@$@-!!zmqY8_vG3%Oc0 zMvIp|A(m>8#fh>v`)vPk>7-*DGu7GNk3$$2a>rfkfuqwQr+H80^}_jF13#wGV?k+x z6Z_u5w`~Nt!c_3Fj&j66o63uH_lD_BuXMM88}i}MV~3|Y%@gwf_*AE_quOb)z4uwT z>=)9mrD8a~MScS67Hx$A>KDf?O<!C#Hv(jM-y}AX)8~9{Lz0Y3^qCVLX$$AmgvQoYF>w~Np#S%Ua>-Uoi7f4R`HFo2-$HP|#WL_Tdgq9${blwg6G^8L4Ki;gwYfEj9Oid=x*&muv_ z$Pm6?TUYrgURv3Y8uZTumQll!=)-tES_tQPTK$+Jkf2YeMcA{Y!Xh+ChlO6dX%gI8 zI_EQ+} zsx|8|em`ZLvY*fY*A(kbgOTpavem+bMja6kNz#sAZe7a(FNp_4=v;=WqQ@IgD%uo@ zZRwqTBKbQm%O<$%xMCES*H_#Sjw^0`K>AV28+|r8ZgW(VSX>Wqb(@hT{v8O2flOs!!iMc4hdJ{s5X*S+pmdDd-x^}YW1D>;H zWd{)*6cf)*_NI9J32%NaB@OE1-L~9ByjvK53+wX~KUM^jpK2valSqmE0WJ+2P2+pL zBgVp<$BxyohKFVS0ry6B%8Xn*PYb9O74TQsLXd?bOCPF&AAGI+atmt&StRf8!qNGo zi}&ME;$?bUH?~MN7qtU6Pg|{FGf5b`O1;_JPNzScEEAMjY0LW+LPQ@wT>3sFQ7yMq zqwGbUTQq}M{g0qRT6;8t2h8+7K+BNDK&C(qmTh_BT1l(JdE%8caeqgfk_qufDwDk( z$$qecsZ%bXSr7dQsr0gh5S@5(h+;H;ryO>&m;o($9Vz4M{JmSRL#V{R z99aCO!f4*SBVe}m0*q~IFpr)BC7L#@`9cVOxKuw^)w27seHyQn&ZpD$?7Kd;x>cK# z@}-To+L2*&>2fFC&WrEIlbTjJMCD9>=VBB8U3>pfIeZfe*%ZFBRJ@Ht*v1m7_%FP% ze0kjSrRbIRk8i|(BPsw7gkP!INY*pV#k0;U;4oM34L2)phsU&vo(@gRcFujp`2*Wu z_eq#u`2D(u+b7i8W}=8faVM&=O4v#Gi4Jj%Ol~IpFlpj`CFy}DJpXX|%29>kyhWc8 zK($N1QG(CK&&Ui(wh!o!gQTpi7cbpbv6%NjO%7AXA%+GXYXnhdhNE*nu)@i5$EWWi z_3duAhMywq)7^Z^0n8_5)PLdT5!ICMl&P`(CG)35BZ8zQX`G>FMEE zF8!Iuy%n)-WXZnSmIra+!En=lR1N>xRcZy0bdWAZ<)pz^UkWcyC$?4=72N2oObS%+ zn}~0N6bBXklc2%qj*2G>pjX?HJ(onJdcOFPn@9N+Q2Tm-=`=acnJZU?eu0U(S!H^q z%IdeDj(lD8J2%5Da%~-fPEahruch{c3Zvsf7ss#)Q!@1bp@}vHG7zLPAp;8tic+u6 zxy~D@^o($VEN5vpK}|@3%1HJk<;JHlmt%ODaa;I=dX(H7!wUmN9f!i(R0%8%iSdsM z`daCtTqX@b_j^HyFyi8jVDoI4(O=@+sEfsLHm;7Swc?HiBvH@GkaYJ<3 zqV#$7DsG9hBztoU4J{t~<$N#pC(Tv``z$W&z74m70-DH0?yi-z~ z_DSTomJuAXXDC80QmtHP?t?)T)dWvV8?df% zK8Yk7MeOVMdIqMq|L>w}5W_Ow^4AjBP+84Xv`3LW!TuHaliM)(wA`#^jhCvf~C`3wU`v1OhMz=XFMIqUMRJvnmpt%`R{v0 zXrO7t_e_FNRVPOpsodPh^CS1NjMcT;pK|o7*sBL@;SU|rjV1SBvS0V7C?K= zMusE9?>8HDYIv3M$n(u8w=8vGjpH#o99 zFa~W=KU*Gzm0dR7H-C+B?F&QLQx>*NJWC~FTr%B+7)V(6?Lup-6-niZpS>B`wEoSS zW@1Cewi<@$6910{cq357wmkc=`}@&yz0r&LnRSvKEr?>*yNT9L@1SJ)A2};7R<)ij zII={~78tYtFJb@Y!vEhkCt5h}3DNZV?v;NyUKu_Pru2#Fx9XRuhi{)h zz}M`^-qG^syuI;r{G$Jr8Om*4<|%%N?2XxHgnh^_Jd?6ieT~kG#q@FzN z%oP@p6&jDD@9tQKuBN_JV1f1N9^oL$A>9yUx>TN8@uaDINj;9vbO{$>8fP*i_k4Li z50p|L_ex527Gyw!_17xc8g@6a3l9@qVb?|T0fN5>XJ6OUNzM~% zh*%Hpft{234F6(>R252Og?Ntj*3__(uGJo3#zS3VosD94t_mZbE19LK08`7(nN?|v zTB4Q3Cokl3Q3tADbi=@uv_HLn#^Sm$0@99uA(Os^e8oX*_mr~Kgg@VK8=cE*z=YfZ z7Fv%BZqZ@e!r9z{R~ywx^C!M%`AyPpD#w2&8L}oBmpBkFj#Wnzy0|l-r9-D!`DJxbc#M ziZ!tgB|GfEB)~zQICWQqO#XszR4 ze}Adxpt~O{c9i{5B1T1C-G8I{s9l&WrH6j+3!L1SUiwY%4|Pd3=O$&zue`CZ(JCP` zuB6E&O}l)^tT`|hs%e+pR2u_{OI)S~%M@gggsPhwvec zAq^fUIpLS^WPzMM=jiSt9bj-P+)~S5qlUjy_;;&wZ0FpZBBES`R%t#lND)5dmGly^ zK5@^F+OBzFikU#`S3l`T4S=kC)3+jV#G(&{;4vh4T`oOR*5YD)Bo#Hkg{h zVw~_|N$*pv2fPgRwehm9@pCC^Aw7g_uzsDU4!O6EO5E3 zk8)fUdP7m@{0KXLs9OF@Q3|m{L%BMhK;kKRwG-AA?XaL*l3uzL#`bfu?>ae?k|vMN z1n!LN|HO$L+5Ir5)DR`SknXMlzqY?)L!f^+-*RgQO$zw#NiRd3{nEy*3fDG>kh|L$ z|7dsT#wp?x+3GAZ9ZFU@LK5u1EA5q-=Q6Yd^O(7>!e0b>^7GGqu48zlSbe;mkJf}6 z-us@yyQZhZe3=v10@MuQiC~XEW2X8+DB0xwt;{MW1fZ!PtO$NM$&kSbh<;Tqp-uS} z?Zh--0_q!~{zr;QFV5%HYxS?22lf@n%>s0+Q-lAW_G4v&tzKW#Wfe!q4zx0j^Raaw z5f+M=dE`rzEeUymIO9P%mq7JLt;5C_?8WWhFP5>*V9febuDl(l&Iw zmM)pTn=Tv~Bqttsh^E#cX#g_@@o2MNxF?IJX_8}$z(Zq5RaqMnAY%^u*F?J+VEU0 z@Wt9Q0#(=9_03Ua>2;huF&7)f3d#KdcgYc>uo5#+QF&!Qu*9LW@7x308v5;BJWu5I zsd<9r28px&z`~6KmYgHjz|-)Rm5vSgfZwvzjm#?G{Ab%K@<~CAG{MTfi3A0kTS_05 zzk(>m+=Z+8>yE`zBV4KANtYhX(=?**EuL5dGk4x&WO z=xyl(oA`!q^JNr6e*9=RTHUaShf0{$l);$PXUH?8^n@!MPy(Q@=5@>DFzvytWVXO~rk~K1Cmi;^VByuV1Ja=5`ykqi zJ+QF7RwLn3b&vfDoYLiEa1Qw^u=vM+)9;+H%F3-~2j-pxEX<-6T$M>>B1{I;;#0=7 zc-}FF2$GqPQR;t8{a^+GXWfOxSmsFukv|xrg6Z?jzgA%{xe5CI^I8``2HvlwtsD&$ z-`~H#*{mW3wxz?rNW;oqcwI9B;EjP4&GcB^R9V6KfZZNr1jSy1R)f%?pToA9z4HnA8 zYOo)hV7-c#->MB;V@(1VW7GjZGd77}`KaTVhp8PK^pdp(yf%pFbiC?}s*NR!QKj;H z#8Zkr?tQ4TbI*J`fWbaS4t)5gZ&VQ~vBf*z3jFkbmIkF^IB$W6R}>Uks0(0!JL63- z?(Je=Mjkl1xq!=t>jX0vBEd0HwwNsG5jf&;r{jbM*-5zU;rx}3`X{2^oJ1R=DfQ}=1C z)7&zmKL_uEw&wa%Ho`h5*!M5rNRHs@b|r&>TYg!)lueD=OJF^bKM4Jl>2U;pN-WI( zqog^J_+dD^-sorA#K=Qwm#7LrLMyB6&*kA;mz(g9k%@heNe*=w+3g-1-CvqcT>Bg~ zS=HNRUK}->I#TB<>-n06S;|A4%rTAh7`&@?#ye__>v|*dgU4u+I980N0aQ$gw!pjM zQ{g&;77gbmKxP7cDl%MYRB>s{r{8i*y2I&VNIqwovZKP(%XrmwGJtE_2ezd~K{_w2 z#TGLaA+AyRc5T0g3*1+*^*@TvGAgRCi^J1HgCJdlf*_sJFr$(xA>E^NBhop5e?g=q z1&NW6Zjgonr5kC9p}RYMdDpYn{cykB`{ACu&N_Slo;}$FP^zx+S-xqwVGM}rB$v-Y zjqDsul>*Fq)K`6R{EjV!QZX+XGJ=ZYKiTm~Xl3~+T!oBkbmkE+cHN%>xMuw6^ro+p z8omhEhM%=f<~@K1z2{B*g@3smaK%QjGC%7zL0_h*?rYaUhuxnNS{nf8RDYR9BlTYC zSoptKOR%~!-;2&9jKt{gFgo&Tge`3Y*Zu=1k(&hXFKMM;@Y8RvSkFoL@+cQ<7MTKd zK2VN=^uE+Cw69@&TCY^v-lB!bRrobtSRQdmRQs(Rwg*=os|$D$SR^$%e8XK0bPmAK z=`^F4Ah?d|`YXgMD}61D+eMclB)eC9Tpd}@2vyU+G~wy&^hs zpWZK~N(iofecvaEHPsa;Olp;$yW@7X6t0#bS+!)2pVD3%^2O8RA9o-$BvS?p;FFga2uJ*P^x?c_*1UAQ{-n?jTTt6`X$Cndt`<6eqHHZ~c5aJP zhnj+O{`9Fq5$#1uHT_B}nyU3|FUS>q2shvG-Nnmvh9^n$%HEuUJ|KiJit=+%2gls} zps%A})BqN)StX-!xm!Utq?c z%P*vm@as8LE}EgfYV7n$APk#|#NY;&ep~+_liE0)O4+=q64F~IEE&DCw;b@lgJf5X z7w4lbAq{5bI5OmqqA$I7mkKd_@R5m^bk`euuYJ+|2(30hkc_;@0}m$1$CbIjd~t}B zvDf=RlINPim*QWum1Gw0b?tonD_*l#9cJ{<;zI;Q9(O@_0jTQ7327vecWoUlB7{U3 z$*sbX4_VM_EB#;=R774W*LO)_JZ5qSo0I8GW36`!C$CakLop}YN)9zEX&Olhe9+M} zj%?V(|MN4};E@d$Kj3n(b`lUP7d2)2fTb!fVb3p*OCsNQkMWG7OT6`$9vRRn9gpBj zs{iZGFeF1x%}-4E+RTeP_;AwwVYkde&SN2rOUx~RE>J6Q4o7bBqW%V!$4A)D6Ag8I z)jlrk5v+A))7zeeOtJJ-wguY7&JEnq*>K#PP~NS`=l-Shq?D^9fi5c-39SJI?*%04 z#xY33n5V57!qXwCaq4Nd*cm(1GE(KQPFBD3Y&Eyk9gj1=5GfvF?}Msl92fEtY-^-z zG#V^?(}pCJh_`S*4HsIK$cfG>=)8;lw~-x)n~rIp*mzJ>-`S_ z2S|}wgUd4%w(K%A0xrmB*0jMYK$0dF?*(vL{VE<)i~M+$Wx!nv%~Ou zF760I0$&E680*EnOt$5NoPc(;`G#2E?Gg?GvkVjm4n}a6y$LtKyzbu+qu|TobZRfs z^`#=RzerK?ePW72)eS9-pJCA!BCq1o=S%||70@mMW^b9}wj;9$yjQX;MY7PH-u>S+ zvN^Pu*?yE!8zrV@e|TkU={~TTI(A`b+q7;n+>q%R^oH)^8vv(dclWo-l~qp6MW3~t z#7)|*T40%>AzyJKI>*3Pm*MyB=ULi@z10uD%>U@7c|o>aA1|HC5D$Nz4b5h9`7fzW z0d>ubB|{gUY-+{;4RT`tpb~S=WU4^gy5)w&-$K4B?S4Ig;dQO6dl89^mIJVrYF80? z$cngWI1h}g(C;JYLldQBEbXe@h{E$G`W`qWJ6sDgYNUA;zK;Emr*X(1EK$nbBDhBy zvp#CuqL1yVZ{hO*jXpXH&+|pn|cWhp^e9F`59apqLiP*W<-H7D)b9l>nAX)ghC|u?=^pv5j*NLa9 zkfY0yG)hzuC3d>z)f+54^_?Nu=htqM2uZ5Ah-zvh^Vc?gYf%Z7HR4L9$x?P!(@H9B zE>H7A3k}X{o>gD0TcM7V3ARG)fiIZi1(7vS!CUO!kj<|o7mt%7iJ**pT#0 z*@f?@imx2#y4C&PZw`uEiG|PCQ+WDB`O>Tz=Xce`{vCz%rB;nT#d<$j?sPE#?Rr(c z4W!J0xZQ78Ehyrwr^!`7f>rX4pt=EL>k{zJyZ_^|QtxUKNHLXowVI4ORl{@tC?+X_ zKJ3=-mB#)sZ%_)(-bc=TG5!vO2}tmuXfg(C7R-k-3rc)O0o7}5ao-w3A_#a}z7l$Q z-IaOtBScu?nf=Sh{fLcIK4Dr4vW6&t%Lio|GK;l9XM<{2NoA(P7;0ZP(&Y7w zM{lsi%+9<`MZ_AqR>SZgS`NX#DZ!H^@W?rgdb7wLOvO6do)6*nF0%XTuY8^q&!flJ zcONpVy%C06(Q*C=Sz?$;gJCzYtT+pf7%Qxg!zj8cN)xz7K{fz~V*E`c>&1=IOU)1u z!K5?<>jBZ5GPTrmNpHfu3wohs`5=ozpG`H~1+mz_TcPK6uOHtrYzWwfpOC=Yc@ZoHA z`YG_i9?^494Tm^6B$MRvqmk5`g14*y97#`*#XSp|JUKxqeLcFXkIyA>w_;Z7RX7!0|5+ zR*fH;QBz3yo9anVAi;8un4)OQH>-Hi1?~w*1o^`%z%P>`?*pZ@6C?0#`ua~CP-YW5 z$AHU6`vlFza9ZETN~(LG0-g}-{FdKk14uZ;k)u}h;3r-h-76x#I)JIvi=Os&e3f*y z{SpDrDr1iaz+k(DA>ZR*;~W9!&`o}dd44B06*qIu|& zQ)8KN1}k)CfXBPvg)#t-pgO!=eBX6~dT^@6Ri)f6DvI(AGbFcaR)QpWJalOoZm(F(7n(t=6MbwrX@#e1WE} z3^!;;j5BXV-Gn%!ZCngH<4%Hnl9{7sp(PD<@nV2ctyTI;5rpA0b8<{d{KV8+oAd4n z%Sob#K-b)7lb?RXDFz2KU@(erA9myq5*G6c+)Tqby&~=d588aJu}4q8xczO0r#1((sF!De3?iJqtV3p}^!W7! z+RDM;#6^F$H}qVQZwlzbo;jso?O26rC!OSbG?E?`8Az7hxA5QPdmM^#T{dc<;wnA( zY6K^=i>BMaog}#5>bH7v5z+OWC7> zYxuAZM@*ck-Ua6SZys`tfjyr5}i>b7zz|gUTXx(*fcS}go&QnP24Rg!@OpwutDa7oJLoU zw{BuiBgEx`q`)to#ow{8>C)w9l9IECKRzmGtB+ErBp;%({oXsk&bbZ?kG90Wy-BuC zwx<6OKypKOc`tQkz|~q(S+1M&0%=+3kU;vJ%D?HsWfSARj_Hbyii41l}m-V)1AZH+pf9U3ShdEIRI6Em z3|vP|q1?Inj+8i*C5^Ghk)%rsbCuN-n50b;r5}x8twIxV&k)i2FTmfE@_(ARXU<}b zTy~^n9>7oKJ0d?rbOfwTdgv%Ox1HiV` ztav~~n`67Eez`nnFg4>UgVmKTDr zQ=0A8n*ROGW!@l0QiMQod<{EFfL@=662M7;3>6VP*Q>N&7^UI_@*pJp@2`U^B8tFJ zOHQ6J(RvqPrA4j-{KB}Y?a%Yq1-G14{WRekbQZ-a1#s$u|1WAQlQLv3j>0>5Jdyr(F_v~G z0Q>r>KIIWd5It!!LoIgD{!}UpBwq|KgcFF~0FBU%vqh zfVQrTF_8~o>=qehO~k66azskIKU72q&0k7Hzj2M!blo1ga5O=gyj0FV=FOX)DM+9F(?CLTf=;M zGtiR^X;wgZX2C<{N$+7N2v?yR_AyqXN8LD@K=#vprdFl<0ayvG94WNnAhZP}deM4& zZ@sypO(-vZeZxHnCWC>@QFSPTOXJh1*!Nl*mgX;sC1y%0JwU!6}awQAYEq}2_IP`_Hm zkVkx-h_7HIk3R>+ooZGl#+ZGY zKpHv{WRtVe3!GG9(_mR56-PwbXVgfdwNk>$IfCpk(S~;X%JK~%-o#ykBJsXt@hkky zRF9=i9|#chzGmprSQ*_xY^9ayFr^-E?<8fwZMo+sr2%QaIwJVZ*@-WpLs@Kc5~%v*jcd%s;1P zEWS1$vc$-cGldoGnh_WHj(mSg8}yOHoT@CW?LL%qf&_Mrv|VF+{}9_tQVAJKIH{oP zDqD2T!U%8Dq(c`|KkM?xpe-Q}PT*~>5DJD>_qX*01eq$Jl|_^Rz(%(j_YU_(lM+Ix z`7#o8-#q(4t?2~o5_Q)NqH_96CoZBlmRJ-2C@A(OKwkDtZ?|;D424#>11b@c);fTu zDD`S*9Il_(nziS|6gt*<_NYw}de}BpnJ_HN)v51-C*J%Yr||vTcqlv&RNQo-+9QH> z9@{*m$a~rt4R;xhwtIw;Do_jgIzUlLgs+$<5`${|9fbj^b^XCy?gsRTe2-hSNsJ%u z{EQUsXmYSelRxfZd>eEmPE9QUEyAkes8O2egEjGuDb`JLknalrQ#g?TxSp2S5d)kw zF@Wi&Ns5WEbxBIa5Ql21Sn9mh!g~{u;FGKrn7&=P58NVDVRsf0-NUS_q#@^SXadyO z8r4RcliMR>!6C2pf~!QxSKPpU+=})9?08=3;d&q`mOt-3;)iTc5ww<<`kD;6qspGfb? zoj%~x_*;-(3Ex*Kx}nFv4jqGP0LQzTF*HuG_dth*=_4R*1+h+Bf=#vRNfz?)$r-~9 zcc3QEC?{5SVRNq-GF?_t+%pKzecLt;q0NhRMLuwx{b#}n1cS>gKfDCI{@i4Ef5?pc z*#CPCax4~ej(ViZV=X;N*cu;UiIq!y^}Xx-V;C7plKD70{@vE6B7JP^NVNpE$`A_! ztLRqGBqQ0ToW;Swm~!V-Ce>B4!u5WGJ43$DgW{LUz=WC5b+ct9EZO<<5z2f&JVQJVu2 z8k~Sz03Z9x{{Zt)?~&!oPT+)jIYuUOHH77_K@OY&W17Ac)T^pv-I_a?Xl(t=Ay8wM zJIdFE#YObirdicDN1du2edT&6Dt2+wYW zk+0BE8)j@wT6CoMK zQ=qSEsTUM6DnjMRt&)i);jeos>K|J`pGN9yNj2=VLtcWD+%gvVlG}< z$>0}f%yz4eCnz)poi3C+z;PyjjL(8M#}K)@RzrzbEr%t*#qF1{y2=s2h{VtxdU1|{YjINEM zY-z_!n&mg2(>t*5RIj^EQJ@asuu(=}FvJhR+670;I^02WIs1RG-lEZ~7dPZRou|k9 zDrNjRj?#zJwFMh{8YH8JWL^3QWsLHLGf(OL@iA*T9qO_b@Rp9oM;#de_WdUd4d^z@ zf}6{!k!|aHG-EjsEt5RU5(80qw=N zt%-=b!$(k5^WcHmPn6uxU2+Z(%VvHjK=8=WF!_ViIj<@y&cnf8hU?e%mn&{;<>$Lz z3y(o#Dwpjx$uE(yU-hUjoG&hG)D!gHyQFKw%RoWm$hzfCF%w3jq+2IPHS1!RqZ0?|63g41l7>(ov#K5Jee;}V1ed49UqN`?vp3i zqz^*KBwO^&TXP!7=FH`W8SOGRerV9VG>LJ6-vV5ZgHYPA?EK=L%oN$f}K<%@JMFQvW@< z1!*&z<$}a}WV;H>^27zoH-1i`qhyDduHZor9>4cs0*@hIRItJX>wlX9yT{cSUIE{v zG69e_XPiHEvd00g%G^CKU38Owxo!qYnak2&-eadrO}VAQuXQelJBm=mxv+JAn}MV~7Rn3pk;^Hu(_#8^D(TdDpcXQcP`qt++SM?=UcT>~m~ z0m-R4NJ&+|<5d4{pk%>K zc0cT?b`GVB*w2514_!ykx*>9K{+_4SY+Y2;Z+n>mS*lkXo=m_jOiNfPu}16|dx-3S zF~ua|YWVS$`ZmNd#HTl%OjIxB^hw^YfpeF4_~!$$BEvYAO+k9EFGiyV*!uW#DS$!6 zs0yHbs+&fmUPpF_Ha@9c8(6-L=A!HxS5|nSlQp$}r4p7ralw^MTjc$y4&l(d#tD zww1N@GJb zeQiO0`#2c!__~i5dHCQkfE>;kADTG|8=#B6Bm?R2>J0_s)qVOWX>rm8cYbbn)IX`8 zYUP(ROmNA5OTm_DIlq@i8m-Gli34CU)4$)F2=sN~_9V(f$?W%D=^sz*)&@eK^0R0N zMXV@be+X$Zf)3;C);@vmf0{`YZ`n7?E?y}=<;~+N4nMlDtUQ;*k7<_@6LQXi-%^fs z(F%152s4k0`xp$GJnzXMP!_ndS@+c_*VZ`;c8gch26wO7;RC5A9Yzm1K<|m>bk^>F z{cq_^&y0K^ZguCo8#+;kvqrGXOHuh5fjqNX)n-V8;cZ`!JA%6!IVDVp6c$-#6XY?V z+L?+u+WDfTq!cVwojuS4L#N6JZ7qjl<=hUX`-994jfx4CAI;V>Qpgww-o4fXM(rY! zIM1Nx^gL!EGb`M?^^k#QVuhnzgdN{c=VzK(WgLkj`Sd|mx*r}B3Wvd5$v`&(3G!78 z+tkU{>T0m!YN;Q5z>@;0e1C%JoSA9s7a_YXG6BApL(RW;8~`8Vg1~kK1|nZa>S+6zUB3z46J`-Q zy7-8^o-?vJIqaJK`95AuE>GN;Vfh_B;~p0>YeE@J@Nme5nZ4(mW3|+Y_biq zWsl6hC$W}xG~gXWyA1UPM(8T?WR3NECNRfU?)7kD2P%wY!PCAS$bW>$B$07Jq)jh= z>j~bO^R89DoPaJ@z+DXB*tA#o!6wFVfp6*)vRK2hfo0MtW418#3h;@G694F>#fWzrbu)M1*?_%D7vh! z?p-Nqd|XRzYeznvR#le=NOESFiOx6RM9r4RfudN%}XY4|wXYGm7CRT1P#n4TOscse@|g)QcqZMb2_mNpnW z2n|W4bG1~7Pj;H@aoh*!u+9H2n8K!OI=^`5QtkQ5a~xH+wZa{$h`FusE!!jU`r9F^ zdCum-Cmvg+#O9;=U!Us~g>t_hU%A9r`E9Q^gJ)RT`og*0Q|zqwMP>XC?D)s6|K=en zJyw!LkjF3C(8*8Ct{|z^&74iBm}Z4b&J(yW15@b)*$nNL%FQc$Go@JH9(-&h-JV=yiNct1F{_gq$L)3ybR=AkMi@o{M$5 zSt6yH(XEE#6*SoiRk6Bw2hX3DPj&@yhgt8m<^x$Lb(QWW`#*7DLC z3w`?5vkOhIoLS5dU~V#du*1+d^M26DmuNl4=M?R(VKn9-{n~J=_5y*YGdfwo&UD!L zvnmhCIO~Bv^aNJ0dOlIX%52hFb7HHAS9vgeS39~GtKx1ih9MJywLtQ+se%V4Zh>a4 z>&^>oi(hY8Tu`+n%1=_7pz+^+F0f%|&Lgf+Pp^v<7P;Kiu0LspPIby?eAN7X1ug6J z`gQZ@OW6aU&R?#DG+->lBWr=YFX{Z{HNjR1)w>nQ@M*qZ9Ic<^bl0z5VL1#nTW_${ z1kSzrWNL{5`gk6V!p!u3ak8qZ=^evIweKT`b0p`q8nS56ngP3Rz12y0?{yq%}FeQvC$8pO()N zbqsoD+rG1dR2a`Y3z~I!=L9^_UG0uLLfX^$h!+F$oHjqGLO%*VI}EY2WhL(i{Okq~ zP$QBed4VS>G(%@Wc56PrTUbV^4DFjp^8Pr<+EHjoNr>IZ#=Jk|r~xxHGb$2Iv&WJ4 z=nlT1IF4#uK86;WsdeQ11#-pHDjhMdzc}W&qzou#MYQMC-iLdurpM+YO|)sp6a@8q zUMB{VB(@6ErCM-KslZMmd=zEh7mp70qmu~ye1`$W9~0**kWGCA6I?j$LD%ZOgL!U1 z`@e-9*`*?`pQk(aI-Yx?$r8({?_<~r@-PGh!9az3(EHTj@Nmh@MNJ`W9>H71d+#5F zV3f682a@T(Hfn|X$ZwMd2QSF1{VO4_lFvQc+$_);)8UyBe|{`=^RR5%3lkvdH7^U-<(S>@J?kR2QQ4>BmD=*`sA8vo&ak1_I#b* zJh?lmvmV?8G#fPyaByI<3_DAqOa+|fM|SVz@Rv?PN5EeuJ0?(xIWZq8jJ6bUW5s76 zfezI>@00kQpr~&3IaTCQb|0A8llAc}tjMvQBsf~{d zV~LdkwZq~Z$8=qW_U}~rxoQ%})*cP55RvabhB@P!ztJ{9{G5Igo&BEx8wM;z2?)X``v=SwWD;@w*$UuncG;!D}5$x=ti% z%u$3os=n;Q6GTR36clOhAL>MQ*Ip7vf?1DlSLoaYu%d1s z+FOVy|Jl#=Wd-YeUmsz%MAfTM^Mj|mnBBma4fB6zfq$+9Z^blp9=*ZPiJ}2rp3R@N ztT4wS>FN)jR-5xG2YGuUL*}g2h)F;XPBC54$Z*jwg|X%ycNJAwCW3W8IN;uB*5<=C zl*?>a=EF~E`_k6J96H(I+V_TnX{rFFEfe!wMn9_m^lq#i z2QPYlp63go&3u@32b;9W9aI+8MTuj%GH--Ehws!Se7ncnvim^}+lb(~}Tm_Q)}BY!9Tk=mn}-ocrqK(3>awl3{Pln~9I#y|>$U!mk#n zAJ;+_4Wwa#X3X24+G*GNpi7xPwt6$lvt}4xsCd{L zx@NL7dFOP&2s_p!Ij|4Qr#&D;lgpf(9UIn_pv{o;71bI-o4;N>m;885r8RciFo^Dg z>5Yss(uCof(&dJ=7%TGhu&owqUFmvnW$1oi*i00L1*$!18P|&_Y7ux z;sN6E{?$6-F^t7G`Hzw1;-iItIrmeRHLkHNj_#-OVwzfMmF3`@y&D;zfM=-it;b~R&K z8+V-v8}oX7=@I5TF5Of(zng?O?Ay;9CWw|~@;kK*HG#t*5vD5cX*G3K+;SqxNEi?+ z@Q%FQ9M2s2{ID5z6EcUtf#}D-l9HziNe_;M`^3LY)X{j&Irqd5JXzSAF>yh~^G(NX}WxJrzY&=pckPN_;07HaMA0X|@@u!upF4S48mLVs%^@ zr_H$i55V#&wg~r5m2*$MXlBY)WWBcLu_5T|!17`%d*cqFHdUj$RKPm=LG7GBu zyd~A$G9mq{^qDP=O{WxG6%noud#U>WySW*e;%$$b!O2d%WhF3Ms{}Gf$o+sGFblZJ z8fkZ)!9PanRbr?aEgmF%AyzXFtl#_6)5{1_D4O_#`PBH(8L-z7X}%NW>ZG~ti)EqS z5l5L6#E9d1%I14EAdM+;Er<3)58wJ9=7Lwo812aOqWcFUzTnNwADhd5jZCIe4_&v0 zo{-NGLqmQ>o60Z~ePh-y{{j5a%k*z>mxhApaf$n}Y?v8?X{;V}akj0LDTA<_RDmjL zG}NWZT*Ol?G&3_qYdkVIQ_PpVn2yBbDpmdGF=&Y;S7o>cz5Kj^)e#&UJ0j5_(q&C_ zWEZo+L48&Y%!v}yPXm2ivQ!!mGVb`Rri7Pk_G|(A)ahiA14_44)E*-eT;t)AO5+8d z$XOfeY&n=~dUnCfA+oydbAMwuQQNgY5wgwXC3!*h}iM}^;9qTJiq^fUDYHL(@Q!BiBbGMUm*|K%t<%$W>x+>vtl2P^hl8n z@kf;&r${AZ%|3Z_89{~FtFT3^ZgPs-_CxQu*L~x(nj9+nbAMT}aIjYKCG|2PFQUGk z0619L+3HleRBxLp(FJ;`_1G-eA$lU@u!?HlpOZ(2P#KR+IB>$&Xdf1q&l<(~8q=Gx zOqd6H8+=BEes=w3IcaA!Z9Lar`+PHLSl8+ky_pJ_+#LhWOXa*!b8h%`d>*HEeF{NQl<$Q-W^Ly6 za5vUzJZ`B0CHt;uW>Xh!TqF>Fj@-3Q6a{`%p)Gwd)H$nD3$dubGA;txDB1Ub?~#=; z{C1wB^t-Qb+l)7YO0^}%IgIW;Udp9nWk1kLIzmZZ-VNYjScbY6U*PtRmX{kfMb82t zcHNN&dng}OA!ekWI}2$p*shT?1+=yBdV}mXIrxED z-vYr=6?LZfyHw|6<988!7T>>MUd^RmAF^_g{^lhA8W+S_>1=l-xj$AeFg_2n@paWy zin(oG(@MfbxUfWzf{7mJt=vLpXfGuyr74y)bNTU|I%2VrH}-qCPhJiQy>AgB|LttW zNQG3|cHbq!#sBglU9X)sF9jR3JXp9NdHre*Y2Z!hW*oTGNKEP0L;VvFfAS(3f>znF z(2Sr8WN;&i9m5EIXrZMIIl=UHc@c$0U#_|gUA)w5KpyrX(TrvDRiI9!9zMW?kiEZ% z-jCd?vEcmz3;Io~dV?ACMspy3o(M%E)kB1jsS_Du&93(r)FqH|a1O76<_}WOY2he0 zsAdU$!rt?MG2;CN#{k=+fs-`i4*qJ*ewaa~b>a-!z_Ix&y<&Kc=J~-dB~(YQ;G?rKKmYD z1Z3;*Z1))^c0iaikDoQ)1Lru`y1s(cJg)}(qDuN(oK5cOS96cso89vouMzR$biuLc zj*`)-$fl7UyUm3a0h2dNKARE?>#`7$fc%qL?C(7E3VcE(pt|2{Kdu3dxK4R0>DYK{d_=K&T=T=Z&rs-lv@?+9+IxLwj@Zu4sv-$dCf z;6Q$v8UKme4rBNFw(b$bOe0_Ak6rkOmn!UV`hOJfe#lXyu1$INxG~D?w~x`Th)eqQ zvXp!3+Jn^Tqi2K2v0o0rm)@ocU?Knf6(C9VANl)k5$0c>VZfJ=Rih61k#71pew!mfB9D#8Q{OBX$jLD+rxc$83=8xV)nW9 z*51Y-NY}wWG2a}cfdZV|ot?n>4XXtXOlM_zC-PsPg9pZgApaijremq~8|G{IOdzl< z?eLIyUBFvmo?wo5&v8%Kg*e2V+Y@^8a)r6c6=~*`y|h^xbOm~$)d5OMSqXlkOkMYD z9ei$CyA6}6*Z}BvXQh=z+9HwBBYyyYdaDEgM6)Do?ugmu!fZz6cM|TN>Kf*Y{qMg8 zA29r<#;75n*YI<~ADMoIUgjU-IaN=Ypj=-wVY-1>{O}EQ;1f*wDMP$y-ZV^DcFgfT z4WV`Ye#APsen9WByYRYKTPO4%$)p0wNIroN5A9ZTE3ty&3LhkG$Jlg)>^J9&J6ru) zkH-DqWYY3E5=MAl_(ao*A-DwzJGwJ>(eepCS^wknOW(D6IGG z1evXMAvwQUD^Gr1d!aLMS?3;~3iDFaP#M4lvFor-HX zyBO8+5)F_`&SH1LP~aE+A0~(0a23m%KKR&B#WP=_s#0JzcidO55a6TJ+c*Tp%@ zBpZPD8*|z@FetF%O;))wK$5_Dy&U;fNwpq4efYEqFq&kQX|u8~j{?huSXAB%lTLbW z4Ww-N!3DrW`+wi#`uainYAtrs(CG~eb}Yooa)`>`v%V80pWRTGhV)6IpRRrAqS=#9 zlmQ^$E4VSS9MUXJq5^*~J*3;0c2Rg*oyl8`+8cv6l45(68ffnFfEOK&6ci_ACsOz_ zlYbEH94aEN?}Q2na^F&6CO7v%k7-TtH+a-y;Nd)2aa%f0BY_&hL5 z`}L;>6>nVupOu#1p#yBbP5>s0Nn`php&IWcqI?Jk6%wmBxsW_Q4cBT_Txx# zzXm2aSc3w(nHEZ6i&}$pBu8V`KnQV)ZRp))?j{&QgkOTw||1tct3(gNeM>E$JIDnvMe_@aFXJ zsVi!-&AncF|GTgK@}r@+h>d0iTxo}C<>Phb){0lZkW$`8nG9iHNpG@{9oeVM1eb;=-0;?NN zqb?-7cw#TRVIYbDVoAC_sF=u(rQ7%}n{t&2KAof6z)UA2iUK?c6 zIUrC%z(io2LJ!kCPU0P6DYuZg5ZF<>u394-qMGSAn8vmc%)1}I7?PaxSYwO9c$Yd0 zt>0Aq;w8OwultNbezCJRCUA`#)!}d%j~>aA>B&OAvU?r(Jm&);=W3G*pPlAby!=f6 z>97j<+M#}{gj5=nZT>wKc-CD|AX0ivsLacj!3z9C&s0b4rXPsc1;uQBl7UdW zq<|MqmkJ4Oq8|B^Y!+E}{XQDsU`6@;xMxEyW%cvq70lLxj06%CMID;q%fGKY@Taf= zGe=|U#tuTXDsCk0(Tsw&;qLvWN&OX>k`!sjN(h$MIi^ZRj+ zN~>i7VHbrtocLMdh+*VQmP98E%G&#``EKhWrZp)Q96v1JeH28r8#lay)ZN}_WI&Ra zX50{W-OTNbLJaGo;ZJc+a)~53&f>8xtZ(9|lrhb5VkY-hI?VfF!>Z(9FxlQfS~4M} z@Tx%u=trrCjXb(XsvF{1`z(tbGwPn$ehNZ~2*hyRPP6@5Q(p%1bG$;nE4)XRn9eIC}L4fd?LzKSOHyCtm}+E*YI(ZmO^! zUnf)W2%(6njGWJYWHul>8|%xT3#pTO)43c+&i%q{Z4;RR>D(sB!GwMtA{(;FUOn&QC*F6t_sv%TmP2?_3lK zoR)H3>#F|JW{}I>b=uC&5YLkZPu&lIFV3Uz?lWEMQ62~|l=&Ls<1G>3Ah-U;1C`B6 z@fPC;kf{H3Mv3pxYLf;&Tk|1|=!&q=KXz+kdBQ*-^6Cs=5cj0S6^0G}e8vk9IvG2- zMI>$bpOPYIf9u?qB9h-#qPe;htu2QCAS!p-+B9*}r?G9SxZKmt%#VoPZQ=hakz{v~ z7BLXvbLlnim>*8;6|~u@P8*HnhjrWT^RPN(LIo`tR&DbfL?j@@a-|RQIcYUZYKFKr zZZp1O2y*-Re-Y?(^$d<0o3#n86d*iZF2;(l^EB$UezTJ|HD*5MZR-C<@b-&Jh{$PW z2%Iwhvn9wyv+?OcC)QJ8PC9+^Q!a;mRen6sp}}4B&3wa72-f_PMmM_U<6 z$-sxS#Y-vwv}Q6l^4Vt@z-VKd z!s%5q3QH4uL-?HU{Q@c6BeQol2n3}TD=?5-9zE z?;J8lJ$0+iIcWQBOFHoFpHO?Gux%#v`S9~x%(gXPFu2ddUTF_bza&5kwPg@19FGUFs|a(OLYtf9$g-Swro`8h^cJL$oeA zXS@c-Wk<0WC|6Pv2hD9IK%Y!ix9Nq5kJ&G{gYVgE+VFKfO|YN)w|3$EpnMNfm65F+ zo{b^-!Y2G7ZoBo7|N1jlwM^iPFZWgMd9|CC>-DLG3EFb*WY0cU|H@W5=Al6g9T+?Z zG`_P+ZvnY9)y@Bpqq_`ix^2S%zJLuFB`J-xv>+h8sYppkHz-I-cW+=IEg>KRL%O9K zhIDtQbax~0?s<>jr+wXVZ2RxNuj@P)2?S3`Oh8{6=+98k2DhF^54XgP=%Nz0UuPCM%LowuVa;oRy=G(`Gq4t(3b+lqHD0wHa{VK){vF_tzx@R$yT=Z7It3X&;5t|O zdCnZa%B_tjL0>{$jQ_C3)BhHbz>~#gbBMs0VN0(P2ljBWH;$S=U-}mGgse)YhHB@C z_fR9T(ShN>BN|q}B(%9p*tf2~GS6A6n+T{;m-7Urv}lHlE3ZFB-#J_0MY8G*c-n|g zIq_DwpKXvhvD=iL4Tm353tLdH2Nmja+-wxEr}u41DB4FSc}YoqoTqtm&E!x#{c6CMs|)dFg<~g#;&L8e*`tH;xc=`};3sAA+ANx-N;%*j<*#2>7p24snkN z1PZE)ty4DQ(69I?zC?|v?O4UCy08j%+Ppo09JpVxPvDNdxbwD&0-1J`xgXGApJr1^ zP7r|^&BKexvH$jBtQD0FTtdlzb4qXF3#nvxKUFszqpHL`CAo&)g1uH6oEK^q{XcTD z>j&q)%AC{RH#nR~(heerH#7UMJ&$(OXTFWe)}Rg9xsxEtRJj^7)Wx-@THg;KcdPxi z;H!(O6Ml;R5EzZD&=5loWMu~syX72yo=ZYg*Y>Z(1De~kT>$|~UTR70AJ8H6(iB~B zOxQ<{w&{mV*wH@f=_2^-`rE)?{kUV0Hx3?`?}v)3IgMb47UdS;--cAqmc!_kYl907 z(llQ|9}?yXyS%UEj>{h`H<{*((dPR>)|!}aH!(}el<)fweD2s75%bu`T4`&}<2kz| zR-mpa%U9NJIYNlh{fkFPKlj)k=vI<+gE8OGMLW~rAUGw)^Je`EP`5~=3M}D0@!B(D z3d&45M^M@U$IQ{a#zb-Yajj+e6GS5UnP#qkOIsNTm&+Z)KLFXB z)ND=RuEigK^d;^MFsGt}J&e+l^lhCnSdYx{$32DMn^3mzegj{nLS7Q=5@L^G>z~aq z4Ruf~LNM{%9d7W%0S4@oK$r<=W+HeFXX5WVTg|TJfK+5C%g~!{S4$+9Z8G+Ue!=X- zhFPvjWC27=EnT|dfo>9ENhFZ^ac$eq4$sW(Xc|OC`(>HP%Gr@+z?<`VYR(XzE*)`3 z#H-gl78XG`H7W+E)MeH1W)dHR%O5{K3_n{nd`zv*|I%zKBLkgE`H=B&Bv1YOwq z`JURSS6_N&T>xxT-dppJCT#V>qb4%WtfSL~v_6B}^OTL39;Yrp7F27)T@$TUaR8qc zTx;JFT$A~KZNixwaImUAIgt4y8#*j?J4&F*d>0vB-T{C;CquqJW$9BD!_PO2rQqLi3^Y^N@4kZ z0bA*=sser%K!s5p83SA6#$FduES8UsfKi zWlP&56csy7)c$mBLVkC(=#~6RcgB!4!tf?siS2PGvdG_Y7JkM9f6je1GGR+SQY56! z61JvLiG7`8Y5aFd!hTtZFa14Db_hnodEE&>sj`a0C9&6_L!i~Qg&A+umM#(?ps4l? zSeaEVBo_!-s6O9a4nT9$P+vL%Uk;v7A*-7$x`*GOeRpV0mboTOv)PD_OKvjCD!_XZ zgRhuCrE`0C)bP#-c|UEy9zFjvkW1kDh?2}ubGy>93?yZ(i6#vc!mH`seJ6e^9%~J( z^kF-EO!7Wxlbp8VdP|C;E|o8AHHa$=E9^~!Ow$#Qxje6f_A}~?2qkv=LZl!rk@}>C z#9SG_0;x8${+@My4!(=>x3a)Bd!tPzBf6q?{>`k9K%I8;IbAp4Kc6rj|5uME6?BRCW2b*9co8E3PlUE9yd58-X<5 zmC&58trcC{aw&gQr^qN~h`cDci;|?(V&^U;4cRPcG(_Zo-x}(}kw(}2LFJ>9<#*Pf z;=DG|okT8ts3!6R8Y8ZXZdz_?EHnnL&~`o>HPj#ojRrX~D3(H(Rxp=s1DGdd*a5z( z`!z{IifyH+*ki1o493|l8!iF7QEQ{L?hI@50sSasYuCSIvLwuJ8+hS)rUafzVrZgm zv#KK6$Jwj#eA$dc&%OQfpN`^uVCF@eHe$^9dEXf&pV=U4*JrrG+5Ij@Ppfp+u7KBe3|Dn~O?+ZIR4r}V%+)>mFLkEt1Z_Yj> zn&PTs8XKBfkST$VN^11$M|_Fgn?GgF9kh$slO$i2vvX6j8uKiJdzMs`|m21G>AJ95SR`6LuQ{5ek*NbGcbxT0ydI&Dp0 z3;FiSGO{GrjC`7>%x1$1MSxq@_BtuA$qrvCMnIiH{t;a?xn7bC9+Gv=X(odl;;^}M z#?3tH^DGWuV$x{67vjdu=TC`#|K$hXGrzqi61QKA_r>`__EhjH9JsCE zs}1&gK7OVRmJ;qynCfA)ay$0vZXS~cIX&YnrJP9E@j=6OBfjavWk^z!Z^2#k_fv(H zOZL+qEz}}Nv~)S!TS5Od!nOyTgZZLRw+EXf%brx@ke8KDQgJ>*Alb(FiJAAxxuxV9 z-?Gs5EIxb+L&zt7nF6Mt~?=$rw%TXVfYfE;=cCDFzgdffu} zw-vx6Z)weJWMpoqCfP9R*64l%bs5_x-o+hFH}1uX=aN*SziA$g9dolJil%8INOwdP zZcctmMtqrm8T6-5!aUN8?C~2vMKHnJ?GI@B`DK3ulSPCkY&C3zdO`_ELsh6($L=Lx zEhX5Rq6>Zw zBI^C9ObM;a8@~}O3)9hg2J^cSxRDPPo$Sy5AlZ&oTJ(4bBqLt6&;j1c^_dFd3)1{F zde#~TI_kBUCl}PRxiP|wo7OFYKbIF^pjfp_pzU zUSH2;r3XRuBN8RN%^w$2=TRt%>5_)km&HWyldjn?YXO098@#^U(k)Rr1QP9QCg8XC8A_zjuoZ22|cy z@_^Jb_>Ln_KA>5NmIFlL8Z5?edUpNj0(eMp*>?4?!GG?rAIzvwb{!Gzbd_#zh!k~| z)sKbwq~CfRIU-wd@js`RSI~tjLJ7UKCZR_9l+AQbxhlV8_m6r&Gt+4pq0HK3=1Ri5 z_kqX+`Y%#Cpq|F;T*=MENvQ?k?=vG4F#l8A0y@--{ohmkW{vgymVi(nmwEkD7^!9B z9VF3F^g;x;Tc{ak32gVFIY2h#?pLn|yZz=T5`p?zj2_21OZe841Nb3przObV+$kQm z5!ZYWf9yj->%~XHn&}dKd%=O!$cJcbje|SCxvn=O4%r50e z>}Fls*Z3IW)Zg_%RqVQ*0JldGK$X-~k{OQyfqxI$o?d_P2#(D6zx$5NksWJA8QA8O zJj7GfqXgK^Ntfy%2a9xmLL}BJzgB^sp2gxYETJN|Mur`j13cY^)rTIOl=X!oCpy)h z+od@DN`X&ZF|P7tbX@~7Q{9!VpCa9I$iL>-pD{nO$u>acFV_pYb9vRc?+&9Uw~DVx z6&^qRg5en|Z@7W05vLkD2zRlrNmSXAY=0~KVmk)%9*|nT0i8yjudyp*+bthtHG@kg z(;M3Rk&PW*FO)zsLv>XQbmj22Uz#!Rgv!T%y5IsSrsR{RPO3hnA5a+jS^9>Q(O+nthN$p@J zDy&UsXHI)2KD>draMs-2QJ}}aPMKh0Bkz^cKoHh0V&C<3@r(Xd=?FmE5@0j&Z|*d6 zz+!vH1)4>ZwXg*U-F{%hUzS;1bu zhju+Tr?*VF6zgCYcwEt4Bjs7r_WcdW>6asR31KyFu?0uX>~putG>`A2Iv%VY0V?Es zeb$0;oK!AX<>0a<;^X-=cgfsEm+E3We2ZMMaSeEgIxbtTgk(R$S7@yE%gbM@oq*%B zufSM-WUI-B9Q>yz!2*PE(eOR?BA_-c1#Y<0vs8^yB4~VSmZn*3%^C7nhr19o^Ig{+ zG@Kj$bNjA)G}3_MVq)kP6BMaha0@boCQ5`wK7<<|BGaqlz5&d@Zt44WR)1ubNxjn^Vs z+{ns`s6x`dFI*rM;=Lf~tM6&Cz5c(H&R|c`??nil{IbOv6+DS0$l+FQG ztyut{*p>l0Vaba7nfpA#L2gL)nz2U#cQLdN%54f6V;i8!2blN&r^VW_LTn~@xX;@1 zDfqF#T9%ZP%!cdT!Nq;*tSjH73tv~3OP&!yhwy*QQp~Zy!z90$UdjU2h3~ZvTVi>- zp)D)=D;Pb!oxKHkgZ9Fl@hzg${3xgc+bYfT1^!yUkP{e*tpLGwQdE{GDztbw;2EkP zgb=AE!}IA^vJHxJEl79@1zl4e*qi-67(La%Pb98uMZRm(S)<*w2Rox!V zG3HSS9IC<=P2&)5dUi_;~fJICP!!Za>835jUG3X zXjp$g9|W`PPP)ckuwSzV3jo-+ z8%)#%U;J~L44<*O-kAViEFAMls6vFbcIK5kg0J2lPHR{#Zz(K$v{C&BsXxGL^&K3a zC#21x@HI{WUp;xI+aOk!7oe#0=>IVmxjf_X+e*J9_2dg#Ne9ENI)q!qJF&=x2j7i% z{)F9aW${chK#%BLXB`vq7f5^Z@S>lGy$t$nU^xk4Si=`6J(kZ)8vB;ZMvlVd7Ym9c!phiAE z{=fv~20OU?*7g|=|F`0NNw3jh>2fGiyLo>CD2ALn2+LgT3*;-~FgH#)L8#<r=86xTu;`#!2Mg0R3n5q{M=Zc*DqE zc%5Fx3o(>b_Vo|3pvW@T+M(3a`5EQ?q5NZP-yhAUWb_Q!0zK#8M>0i^!F{r|&eoCD zoU)|krZ$qh-Q2MMUUoClJ>nZoLf&|#k-$g&?P8-cV*S00@s1ob?__5un0UGZD&?^` z4cDtaltRNxoJ17lv}bhbR#Pe>#x>zY1yXlG)rhP~edjB5et{)LLNHNqW@8432EEL8h9xeLlMZg$ny&9^lDpenL6l(No3*_&J^ck;*N=~ z@(AKIvm?{K0MrB8-<~5c6LaKIp3MWpi>M1@%XSV;_=HHZ(*czr_fN?{KS1B$?4m>! zMee|vn5ip1TG`$DALS7Hj@QZoVzK4rJLZ6@ogAP_Tm-UTQi6eN0&$_ttQNRO4sojRVasP-%w;48=z+l zqCN6twa$XwRBEe6c!%sjo(TbjHO+IMiUM#~8v5Rf7~Wlw-$(uGv2e7met0UkC8oVi zAkiZu07*Pn`6q#4U1h)aX6lT+ZCnv3@zz5Y40TAkJ1=lW#-bxC5tu0e{cJ5%|9dnW2`xn4yQg=5ZOq}GhTFl`adc|#N z6q)g1!la)IAWGbbAhC&mLTM<0>KvOmx_axT?F@_lC0YjVnl!D;LgeS)H4!nF3!hKm zqpp8^XLFF(={lD^BN&mp1SLlt$HnxZtJ{{@(%Q>LD5fc3H1whl<$93r znox{$zgdwr9oX`OCaiP0^cm-q`#$saCnpcP2$LQOtK#3^BJSemc}%;gk8yKt^MB++ z)-7Di#A*6ME#=Bt;^wqmG`m%zpZCy^w-=u05%q|HS6T{hXy?F3FqZ+zCZfVH?a56K z%&$@F)qQ*rlS8^20{H5k~dq{(}+*FoSA>+QSmr-o)`|_{AmhOg%k9!fRYPC7XgBWl+ z6Hg!X@m@iUH*pYE7cZW+i8h|F>}6M%@%S(Z0lul;FD3ns?j?* z7(ed^TK0k^9H$s&tX(N|7@BXTvlhrv#yKQX@K{jx_G?c&rX%K+?>4e(TqTA%o!5T; zdxQ9mX`Y7{@89;S$zTg{FpLo0_LzL1z?y?om{{4>r!rUN0qMKKBN~PGD=l#1&Afrj zDefhDf{0{z=PCalG;f7pV1YPauwC~^Ji5lfObR&jmWC5ueD}DF7^x^{5L8jckx7qp zTXtf2#5~m62t6wRXtZ-FF4V7^ZsNweBkermOOU?rRwCV?GloT)2|>G$ z-@b2TpKHke(` zz9k3f6SNTDb+-taU51xD*8~pt=0Y`o5NcrRhkIQ{TVV0YV|mnY760{BE?@EHJ|F2a@}448k(K1+S4`$KJ& zuW%fDw`@X71DkPAro8|}-i;}}&ZXc;Ip!&XovKD_ouRKF>bet99gyK3eGhgyB|aS= zd6*rJ8yd0RB!RA0%6Guih-XlI7cOF@>?&Qr78%V@L;ft&SHc$w_PCfT0IaXId~9-D z6NHnsY!Y(B89A}6f*$N2%7Be-!MfP3-sH3@#!R-ACR>iKbq(@uQ`mO3`mInATvtlR zT*d0}Gozo|-3`W`UGh8!bvI{BnF77Es2+nr^vZ+90G~ykoJuIrh$nbrD03RBN#41x zT-22yoZiMO*M~zNmoz=0yRR)Z>4JGb3TdSC6+7q0;l#y4Ie)^!RZ!b{ERDJzlZ|&; z{rHb&QdE(hjk@QP%cI;Z+dKn;i5LG_vOgB}PG&A+En_{V7N2Z+F@2K!0dOE`XFB6* zRvoGmI)`^H>66C;2a#zOO;v3n9NhbRMB!7+=X#NFJ4-?qC(?|Hsg!IVZ87QpeQG=r16QV01d@v;Q|Em%HVZ=_OC%BkA=7a zzH=r6zQ~cZu1aQ^@ewKFYxEk)8YwvTv`qz}7BVgzANKn;%D?DZfI#CfF;k zARO}?KfjoRWq=a8^^H=Yv4t+WG zm;?%Gn-}nr#vEW{Wfbe2sYBFQ@*iyqY!+Xm=ASn47=RW89-H?V6SoA%f3KE^2cM9T zU5OvNu3D*r0`;EoShm9}wfMA^qZe1jt|ElvPB>NvC6N{;Ncw273m_cW0Wb$7I{pXg z{sjw4G02;$FGa2~s3^^OMvsPwjKL#usQubCX0){<3+@{5G{HiZK+HX)= zg0B9~Lk|vU9N9OkN5#f>@jKX)NXAv^AFSWmMfVAZRGf+pase2|FT6Ppz5EPX@G!B+ zX_BtE$c`tZ%Ej6;m}5s3K3E-mCXX0>Azse17;N;R3V#*F`(*oCmqYlUjLcE=C=))M zUvvx2vdwuW=yfmtZ?>cvIh%K#x=#}9Y;POGwRz9s&~aoXR;Y-hmU4?W7;pB}^BhWR z50FR&ei-aE*nmn<>MT^!o(8COQUmhJI=XN^_H>6!rMyNcW`RQFB>i#CrhWg=0py$4 zMIiRQPi_DqkI%xNpfj$K-!Mk6tzhV{+wt%paZh}}KySSOoX8z|D`vFC*PkSpMPb3M zK+XBL{;=y;Vv`Fv*Z7jMexz+jYuQA|SPZR1()F#?u;RxQ86lus=ajEpIh^|CIz0(6 z)nUUQkCfz-CrYp5Z2`w-B1P^M{A=+pWw6#8<3biQn^##ga?EEvBhQ0*PbQU3A$6(& zUONvDxj!^{jL;9gI?6Q8Kr{(xmXE)VjtkAG&jkE3NX`I;39ywe9Sc;WNet z$wTru8y5nfDiBS%q=w^qPbSea5acWF7cY7|&m5j;F^z&aOv-xQGt@aPKbq{g*Bqnz zIgmV(QwXg4Fnc(_v$Qu;68Ynk7VS(`)D z3wL~y6<*?#xo@VwOzcWx@TYZaGyKpD!kZQ%b=u5r1{qb(2hd;>=T-nAoUJwO^f*Cf zatwgipL;maUCB#~fY+5hMi7a2r!|b>QpD`TiS;Ku^0Pl4Vc6DGs>KqpxwmkkvEJ#bIzW*&+DPGl4 z3aoYJlT!QxcRM>Yc)%ZItuAO^4_m0>y9hXy@w(VIxpv1LB1tHmpM~LdtB!-c9vzQ= zBZ2daNM=njM}#xo0x>IxNj+|Ap^Eyn!PtE^cSB@(C*uQu@UG3P{=&3JYpt~J1^fUp zkpr?{Z=0}W+REPPm+~GqZu^d3a6iO-g?a;UDKg@j1npVN*O!Z}?7}c#e=j-F@VB;f z36+KO9`YSyffVDl6hAF*w~vPvq}>7oN?xzjO`E9>?hoHFzx>kPAvuak-ir&f2WD?E z&9$I;G;fg$wggumx76jrI!t$?YJQ-7*#+Ref9pRi8OlH<{plqNMf= zG(haG&xutPK|EhpXd~)Lv-`*{QDEC)kZq_^&a3!kK!N1Ufc)UccRN%IGR=gbcq z$IMFbH_3XG9Wkr6(=ZDqk_^gCOhRa!*RY;MdI~0FU z;rKY)eGW=pE)3fPNHl!1&!pXEI$!LOVaCVEOOJrRQ++v;&-XLYMq& zFN&{NTO@zGw|5Ezdqg=-d%-rrCgK}3=(ycCb_meG(jOMgkx5uH6fRB!;M(r0M2kJs z{51#)+uf4`ntc>!JEH^~*m8bz)|J2~{xQ{(7?(r2*}Cv92lrX~fcrU1h)B$fEfRPS zyZiA?1*odqVTDk;#w0&sJL|b(1)BjGZs2Fx)->Sy#edM}`Hi*$f}fv+U)@|CU99SK z&%K@Iys=$F3rwIoxOm}G$k0Ae`yN8{Dy1BD#%u>2%=|9(;!hvX{eiDNDOj>IVs*)HU3P!BGOpEcl*>wKE_Bi>!PaV_**QLr=aRQEg8D zWvuN-EYh1&E)WU{uO!f(A@n13NNixXUgHUa&A1JwBu(X7sOrGm#A=ct(WuuZ+LUhT zCpvCK(fpL-8OUE?SwE$RD^2m539WQ$DKWKTkHq4R@dvO*MP~(*1rRcFSsX^H`%H z(@XJ)Y)JT&P#XO2;_BdJ5&HSP-e+7+K!EC>+xv*bKwtTom+Iqh+_e}4mFTh}MwaR^ zo~Q%R;r;4;_dPkq2mUFe-!vl}St?4&IJPyk#i}hau@c)gA}|dmy9Pfeb}qdJp-UIz z->K7vTd`kSj5yM~wn*p8?dNg|FcM;#lM2AfQPb$FgY7Nyi37Q6rhEL|xPF1=izkVD za}jdNfKjfBY`|rznm(i^CZ6qq|6dE$Yt!}=kluI#%Kq2RD=ZAbIUL?Lm@x97aQ69`a1;2xA#Ou+AIH=1Xo{~Sn32c4 zK@72QJgHm+KK?90uRK&?%7ooNVo5rFgs*WZaGxzqHuV*HTFoqD^~#OSdT>KI3c0Yk zA0`8qsInRoqYes}_PHoiM)ViS#TQO%OWqjiaRaiAh$0sQ-b+`VbvB=UYi;>tXHz;5DuN;TukMF^fruy`XE3z2SWGmWP^a87DH($eqQ8el%05DRDhIheBZ9 z6t`hOUbHwQIFc#g?UofYY&mKz0a$!NIE#B5-yri8Z%z}(M zY-b^0T8$Yt!Z~RTshj?*_MI|#!DAIgc?M5-#=tU;loBbV!XR1ZInkCgaP^hE-A9Lj%eG zBbfG|XY9Kdd4Ak!E-|3pgO_d^cjp7zh3_c6MjLDvo`%#ri|s$}?uz-w&YF&PMQj8O zsQbLz`kKZ0{MAAD0*#d!<+`Qxye}m3>|fRhj1M(muNxrBG!nj~u)_cQraKv>y+qF^ zo!d&Upg&T0tU}b%z-woWn08>%yKb#yoRlVwoB1F@`W&SHxbph?b^o`l2JyWrjB5G8wl%g6u$XBQs@MoZJ zB?XaC;~GltG%>E~aC8@N3ZPd4$boCg+sf*)nqVP`dgzs-r1oI!k!|lSC7U6o;T7{d z_rhW&kHVe{c-9!aFyt=~Z~*mOJsL^21uRZj`+H014NjzpTZ?wRK#jlW_`}3pdT$~+ z{OST{o^7$(p1bC(no7+M=qB4_X{;RWe_Z23uVvumHqC*ViQCrR21S&y5J?2d$ToXn z2ip%0>aAM*(XtWtU8eY%p*h&t?K9(}|dgm@{^8(Rw`%YLQsl}0!g8^%Darp)B6S~Z z9d-2`YvQpavK-}gHyn3=1akT_5#uT8t(qDO9hUo#y4UYRv%d(ZR8OogJ+9n?c~a1D z+E+vw9cgD%A~4H6JG{W-2y* zll?DRK9K39h~kft9|zHb7x;ZW6sc-fBIBn|AA7wZ4o@4UDP;XS=%I^~5&T3^1-ILx znN7o}yng`A`r+G0PyLj(hyTQu-#mY!ppwMOgQC+`r$IA0VP{#6BQH(=HDPA=7I5-i zYTxjgf;}wXkJ$lCdM19_6k$jAi`G$@c~R^nZXb7+836LKMdYds_tR2sR!sI};~r^2 zMtO{7uVNK^htWCSYBK@=Dx!xtULVHDk+}{#z+>%Kht#2y9~Y%JI9`(njc+He z&`_$f4Q|Xbtv*=KC7F%Pf3BGxdW!I;XG3S_!2s-)Kl9P8KJm$zG_LqQ`DZ83>DENC zm3P!HWVLAlwyF^+{)-^T(d-mQE0B%Pr(~E<>M+j~{jcC()Sc&WXXwiM?m_zLMauoj zs=;qji?O2PU79}L-rnP~rKJ;Sn(U?2<@f)(WU?+yj+hnQO zz~8U_wS1=PX3@v#cxwLR2@$Wojq(d81Qu|WvrF~yW!_RwP#Rh*LPJC;gNr0_!iXWK-@925|J{3kp@me&pWn%|}pST8ID zl*2CpFfy3q<5eAXxFbhAp=7XhSE1&1nT*IBYcTKoj{@Xff{ZHScw?uI#fNNyDzck8 z!1>|pN4Mg5YT@6xYlxonY|Hw(Pp`HG9_^~|e$bf8{EhE*+jwUZi04Oj$$LnXXxLx0 zuA^=@Zcs_}u#FjVdlPUs2?K06Gj5=^f7Rvkn?d@JGyqfK|KRNtVtxGAfF-3+kf`&d zh~@tQ*e$XJ$_yqM`Zq{6V5a)5lv_kFNx~W61@g%*9NzvVN)*|L)5OHQG_URI zpiMjJSRImw*;WDGHqwZ&2~$VRRF0oV`LgwfKvItLOm$$dDA*Zo zh>?Y9z9o|OhjfODw!&@ct8!J{pN%%>!v9g%%lQ53EfHQZ3=3RPK0duoxGi_~%jbbb zR$*NH&(}*g)yD_aNb<6n_(GgYguOZ)rfw9A9OQ|+PcVl&4Ec{!VQVRIrv&`GZTIUm zIV!m}NwddnTwJGfNjti#s^z0{&+``6g8ihYRD~Lr-*pL5cS%u`3t*F0`xmnI#BSf8 zV#nIT{W$yKzI_?gOG2F9pC>HeRBg855+iOVMMWhH=uwkK88(Cn; z`M^R*L2`xeK9Wb1N>E#NgLCMONS_EG>V-ANSs3Ps`y@gny&t`@9TErt+$1HAWuO2h zd3H$EiP3bfO(p_IUVhxmHQ5CvX8z`>tL_{fus!R(7OCtbUp@fSwdynP$ouq9Isbi< zb%YFMK<}@zGZ%nmhK)t3GVkg0v9BT_gJ+*t{Q+^K;M12*U%dUTA+}EKgOVR0m7JH( zTg~hEmw_y=!dxT=u{$?2g(DG?NE4TTv*Q^EgZlZf8F1pLkQke9tHOE5bi1G39VV>_&c)pl$lsA&Jy#evHuRlRdgfij^KdG$9V(Z zv9nKZWFemBZd>sp!~2PPOkMD_9^0u8d48^HY*TK)@os4_Ga=QY8-G=a!h~ZH3YPbO z5T+Y@;Qo>U2oZ`#-TOD+UBKWm?-U}mSjQCvv*|`7ww7l9Vgb_`|D*o2+S*~*h--ik z>ywtoVB*$F$v5$$?N6j1G*9{+9G@#*Ue-&V2OW8ITh-EGYDAlI%<$0`kspBet_&)Q z%=js`mqE(xr0mtx_6W(>?!+;8>+FA?$zX@QfADC5Nz;<-On?%$YEFNU+57rbNEU8z zHvLguP-NcOc?!~(OzA2AJbc!tBArt->Do9mc8Rg4{N9VjnG7kBZ5iDl<6ooL3`%O>gU&@DXK%Gc z0eRe5S3Otr6P&by$vj{4!-O8cs_i6>01YLNgkAn=qQ7_liI(B>H@JTKTS7mjP}S_; ze*hx}2FiArKi8AQlbWjsCxAOuOTl0ovv8qTG#QxdX)GEL&wntBqgdoFoU5u`DS!bb ztE}?l-E9rwf{24dkzCQWnTk{x`wnr5VIZZKnBKjj{{yxcsoyM->Tzxh*kQ`{T*z{U z4#*Q}xJ(C#IJ7)&YNN{gh;ydHln+cjc;QMOk|(MdWZ?{zR~@Bm2N2T!e$ZADQ0WRx zXh}^P)8+FHeD{c(T{ozzF`u0pski^>??(YN;R}EY@C%9%5dkV2ug_+h+M2-UO!V6p z501IEz59D>3*etNkwLG1_X>J7zsj@ZDfC9t`$9DUNR#!QmL$k%|AxCAs_~iUl58kW z{q#n=$BD)iWwe!?N`^y#i;V}G^lufWLvoY<&^#~EFuV^W`WGAaUJ`8X-OJ8V-jI8 zs3R>`qW+p+fq>EmXJKtX`P^H*Okm-8JN%62-g#$`8QbhyHvg-slLw`y`Eod%g;I8a9?s9XbOn&2DwBSu}&hLGq6}MJ#MgGbm7rF z0yh|#@Rd-lI&{y+)PIT%XAh)ZvKzM)hS2CHFc|EaI5mkTSOh@7_3S6#X)M`4nStm; zPc7MC--EBVf?+Di$DZxUL6O5<%1hg|fy^sXk0iT+47z)(E|{`ZA!R^1EXo4OGQP<6NqWBxwiVaig<{2ojb_O+TVK}z~KZB!ZB9x{`s$RrOUp38VsX8H~ua&1H~(qAX?ly+6o{hRnt zoIe8%vK58__xHzz+g6bPeH#WMKH&V|Lz+V3vax4__tcPo_sMgcH{!R7OU`-k|Gf;7 z6u_JDxcFWHIP#8V{aUu$^OK8Jx7%|boM;vZl7KA4tu7A!6kO4ucKi7mo8iIk*+~Zu zit7L8;Q2N1NR-Z|rT&o%SN6{zORJgZ#jcVTuS+~DCf_sb=I>>De$HVd-;4Bj-Ay)M zL^c^N79D(Eif`cw)(vv+ldxm}uZaA|3}0FA&;9GW0~iLsHdeBhT#H>>Q5$6UQRENp zQN1HemV?rKT%CHH2^KM~C-t1M)5Y{S%@>f$2o!O>LZo~VNdL<;sj058Mq;XT^jfseYD2__6#@2 zp{frdi_n?uRG9}R5{3`=aXJSBXEnmntmckPJ&xl6V`Gay)8S7rZYv;Gx$zMo zQxG7CDI%00I6qo_nBvrvYEPwrO=)!tFW9?)|8sK>#KkuoB0Lqf`5^jvie-Rg|5F#w zQ9=r1^ppQpb>Go&ykXzKx7b~s5Ybsd^iFgZQ9^V=^hES1(Q8;GM30u}t0X$nJ1Zhu zgs4%X2hn>k@Ay6MdCqzE^T(b&XYZLmc4p_yeb4p13RhMR&O<6?PmRXQtJ^hxjpi09 z>gME|K5kC%jIWZi^67Kk)xUL0pRTLar$UXVS8)EAf8qvxc_I@etGdta3h~$4(!Cg! z*{$6NKu)-BeL0!F*t&{0maTu|6tKH`>UJqkiVF`$3t@>aMuc_>)9{N1g}rNU{Io8y zO>D9m1pD;UmVQ{uloGXbbTO8vay&?R^`&&ZR|12?4xjOxXen&+=Y2AaKkbkALDZ(C zH+0|l;>2WwV|yT?dtEMxDC)GU8;rT|#bJ2RY7JKl?iam-c`{^(&E+#xP>dNP#?Whg z5c+kUCFS|J-J?4;388U$1tT=y;%PTYwUYO*!%-Ax_MdQ7-nr|p2Gu=FM{zG!2+?=a zS(EqZ)OJ&Wip!dZ{Xp)Ne*V4T*e7$*H;%RA?c_U0F1-u%$W@=rP1PVS@Z)&2b*`M` zw(@&p6nBC3ud5)-w?e!)PcHWsFwC}BIy%or0#Ap8v3W_?bUjH1FAlJh-=a7ukTTI6 z=z69M9_w)<720QiyXv|-4DPN`tOt4~R|?#6dG)mtuloV2&=SCmqXR8MkIuy%uL~We zo<}E&(cd_n0n^uP`CuYj(E8(}eBXVqg0S{_fM`Q|6Cl{F0>DQ{?fr88Jz7h=!qx1r z6#pARz)m#s_&R zU3J#agn}ikHH7AH9s?~DPN3ypitfVmy=srAb`6IMcHZazbofAWqodoZoPXC!L0zg-YY-nk%fQTjPx`GK%vtJNphd5>ud- zAx5*z^to3?Ypm5RmshNULS0t)E};(l&A`oX>+5$d%KCq(Tj1TD8*xFEsaX>5hcBvC zy^pl;`18-vwYSLMb$hD6SMi1HBa zF(ctbk604F6>sVKBo_Sa<<-Wwioku}n}_7Pj8Rch1TPaFKM-TQg}UrG4cS95(cy=G zWnyPH*J{H^;S6A?g>&Q!0l5FA>_~;oPW=09ApdJI^An{E@xr3WasEPl+M@G6f7rFv ziqe%t&z-A`dayfFx46;^rc(#!qWd_w7d}KRYolC+V2SdqaW#-~jVjiV^2>$!u_D>q zj1^>xUr8oOMqW1V52${5N0=z*?r`0cODs&9b?U}j0sEqm?p%3_q>4DAgm#PqbDl3w z!4uC2HBWg%{Urg#NTYl+qGy9zSEDb&J9a*nK5iuS+Vj*iU3zgWU6S4^|RhiQhNj(M-N7-2}d+PM8GB4vIHu8ugPtA>X!@cj`n7$*YGn6g>>p)R`T zwD0&<7*qAhKI_K(0>X)!Z5eDQ{+J$8M{r2E@U4A(ZBxjEd6yvt@xCN~{OP`hYw|T| zOxV zqFkPLUl#rPmc7iL^sCqW`snBVJ+tm_DPmOFK8|^mAtztA9}9J(HmCQWm6?HLlW*{C z76aKxHsV^wN#|N@hP>3|%IYZT(&59Mh1(b4LpgXB{DwEQ5cWbm@#`6e{tvSt)wh@S z7}~W$GYfwllu|<0g}ZjcBRQQS6#edTfB!mbL~@mEe0oj;ibPYKFh@rH4fP>?epiX} zdJ;4mGm`p1X2MN+qO%geo0F~t^gi-dyoSWTOS4f+Q)>VmXiHLc8Yr`;*>lqjn-9&1 zAUjN%9j1-0QhJuheVVl^z2FCtYF|CMoKN0Y_4$MhRJ%^Ot`Q_Lwd7^Xj+gbF)^iWEA59 zd>qQl(Hokr>JGtM^VGPzn-O<^3>4ll0V7SepF@1yK3Z4DE)YDvdv+QDc|fd)l%WyC zZLwMAU}nsHU65H5mQc}p#36}ve;wr&PO0FV*Azzi2}J%Wk<;VtF`p%MKax)pK#Sjh zH-&>6Y6rVTDkkdUG;i|dNq@}~t)($<5r#tL*5%;io2bj3Tu>kzn@)sHajN};k3QB} zsfcUMtL$^xFs(Q2vPmQywL12nMuTTG8Z%ub<*vuh3|7sF=vGgAqw975s{3dU1Rsif z%vZM>J{8WX9H z6gZi9PYbgB^f~0W>(BsPsym7oa(73?O4h42@|XK}lG7EDOm0*n$F@fN$3*G@Xee}_ z!NsVq34tcB`b7+0-4H#K!I7HmiJJ47bJc*Vs_WjHKP3)}L~)Dg(Bk7fo|gi`fweaY zNC!Eh&6KQkM~;Cn_LXSX8Ze_We)qFxqp2$UI}5P>WpDa7B}jWp>_p$(<8+!8`*)^m zp~>|u&74E_daz?l@P{e>UP9+;g*QV6mzRjQ9TU~jvU|Q{;k{_Ri=w-(2W|TdccYex zv9A|@g&|Wmy|_&8njV4QmFN^mva6>rKfTv)C=C7Eol8|XZ$At1N~dxB@pdh0Txwmu z>(S?Yr{HhQTg`vS!ZS&ATQ^NV3oMQW4`h{2*<)GHd*;meQ4dqIa zPeFeN`qGm{Lwfq(e_-ZQ*m_E|-c+Xjb zc{k8*ORVmm{9;7`5b+~fI~PEt$GAgsY>Y}3*?2_w?YQat4j8GR?{r873;L{7(uDC} zXUX|XsdphChmm_yfbrIY%s9T}280YZsiy?(rw<~YqJIM&hhRb7-ul%3ky?;PlY`-y z&kmHdl5!4r{c~3W(KN-MH|m28>6Q|UC9|}DQxgkzUky)z&7AhKPht?YnDJ&x6Zm>l z^tb*vv_a*CsPhk4iP~vfr>KIz@_xdB41A8!IC|qo7$^UFPi-6S7;`g8(;xKEq@!%E zlGy13(1=QmzSHu+9Mmi&n7bxpu{FC_aVh$-B=_t>L@Q#G)Yn~6>xE{i*WcBM_j*>L4m#02)4HK}Wa9AA1hU5! zOhH7B`Tp^EL`j*cq2WzpsRvd(<3>cY#`h2X3V*1ZiQ2l(9Em!<3r(Qj((15JSTo@5ssA@X}Uc~ta87~W{_jD|U<4>^v=81mYKMiX( z5Ns3tcclCmFQmpoHKqe8ApI%@(xV}BK6UWab-_`ilAuPQP4V58+*Plr#2GS~X|OLQ z#}dK-^9Q>s+f8W`cuT&v%QMBmN3(xb3V0KFnIEmDB2SXz#Kx)hBB$~x&=(kAT~Xwl z>Yb$|`gz|RJ{k?gRdQNI-4y6NiROZqBG|L%q$E^LPMt`-#ErT^lj8c{K|OZExWUPd zDc*m5YoNcQUf_stV9BDz*l#QBO0Haz-=+XD&Oj{nwZGyXojvEav?R;hAaymS_81_e<&TgfJg?trt3I9R23;TbBnQLvZCG3D%#16DGCIXGpj8IPeP$MLp^qJt$A4k0 zx8?_qt^KNVR=%Z?J7_GITJ(x8_;GydZ5+U?M5~c)7vU`sNfz)Lfj$ut%e1<~Lbu=l zp;$%VxL!#x!)iM7o0a86Y~F>+^}WW^I!oS!kbSt{EW(~GDK!hjp0XHDdP>E@Y~2%2 zK;0h9P+;=Rj16=YCNXkH1r+|tm0`Cnll&Me3O6hL1^sgLJOvM@<()N8d8(MAzf$Q>yj2ATX@6U!3ZG^s*R1Fd}|JKqlpT`6W(VcWZ)*mP^v|_ZJ=cyw|7v%ikZ0?_s~8AV>@id^kOE8`kW5%H6NyHBi_W+rXPe*2E!{U7xU|k_PC`Pg#&9m~Dxvb-w@I|IB zg~)L1KT3^umvfkk*hd%s1!U;)TR?DoEkJ}SGv=p~%}`|Ri!!QHk@o8i={MJ{r+ZRC z&bg{8D3jM+u!_uypALv|L5I{@!o|!bK+gRl0A3$kk|ujLh+{9wTb0gUR_`KbiUfUo zZ8>x%VWybvb}}t&K(?PQ#b~|RIDXF;fZryuH`-Z`vMt`>IU=LNn{uh=C^Si3;>oEh zToH*E>#Abp*JI0LVjl>!i4i1KYyH%Y=-a7_B!X6!QdqUaL#2O!u%|S&^^at{NJ2bc zXA02Mf}B~CUzUR^9?xF;c*uR~rR<T(WGFAOGqFf(Z$)%)0}9rJx(^LW84`#?#p&xEfTL3@kU zonUM--Ktn2$c~eo->#z!$usIWRXd;LCv+rD+BmV!<%QN?(6n{IC7ZK9`ku*$`nvvu zvWX>Fb@bX+>X3eeO;?bWJTh1DS1x{~!2-!5>JD`f&qbl68Z=NDvpuS}h zSKB>hnX|pzl(?Y*w+t4@Sy$T=Da0v@dIKRl5&ld&KbPX~6-34S+drLx^9>uw-Cdb+XS@OUhDw36hO&klf zX;DD8gG-|JiA%U$0S(yW57XWt%5yp@_l9UaO6#=}RO{>?ls5~1mdGd2@Gi{Gyh%)! zkfnIc_tVf@ue#aGbdS|cRIb@KQ#?-F$A>(ap={0yPJk(_0{`i4Ugcp3-YpzNu#Lqu6mtqaAjf z@LQKx3ol#zbo~)}%XHl4ZmdZ+J_ggGt08+ED&Y!@D3|z(vMIbaZQo)ke0%Dq6I!jS zvGih!__FqSNwDCckKj{k$z8FfcbB!oIRj5BQ89$2<+YHSuMeDwW{79s|EU;EgID$1 z-DxDz!#@~+q4YfPS`aUUi~{gb83}>5N?g+MBd+BJ#Hy_JN3!6umVYhRJXkd;!=*f5 zr0=gv9%@v=aE)pe|=tlF`iTX8U{Sd(OwF z^PlE3fB&&~O5CH`{LIH{%!*Bf0Jk3uv;nkSM>J7Dn6Iq+pvXb`spjQ4><2UE0>YO$ zGxwY2%D)ePM~nR7(IIDQ8k%CI3^{mVd(wEKusDCP??eN``|yyvasQcC;-Sy=PL2a< ze}vUH!TJ1*q(q3Bb4C3GEg2iDhH3^*$4STzVh&-hc8mX*`XV|26IT1>-U{2&`puT& zo~~j9DHAf=e_yU$6@cIH!LN~Wv|wHLh{Lv|Mt_QPsL9r}hF7aR+2Jn@-K>ju=K@hY zgJxVocZuR%eMf!cvFl@(b?PhiKrWShfj?15{`&2fC>_kJ<+dscnAY)e4uyjf+GnV> zSqvP!Pyv;^V)}EJemgq2Ql9dDdVsg0*@>*pH!kHRjUIrCi>xWx3&NxDZ zC(dC`U?Xdz~)S^=^8m_F=` zsPtCX1mEisDwd94xO&C|zsJhxXi6LLc6u|Nn5B4N$`1KWbrMX*tu9lAS2Lh4VRDXN zsLm0`m_SZ(x3b1@6M}1-%fZuZw3a8kWD=1`R{5TLOaT+W z7=TJ+)_;E`QM9wtsk@1O1AcsPD=^T|Qe|zthD@b)%70WAVz)T3C6+g4U_a+#)ewQ60^#ge%Sor8omy4F&={xlPf;QZCbme}$^lWEJ z5cd~}Bs2W=A}solIOzNJDH*A8t=k}UH&a*=)WliHiQvg0oHr)Cv3J&hn#d$fqpa-P zPtH)rb2W-{koY%$4R*v~vr~CXA4G8U74WzEs1z+3K%CEZlMUJqjJjHuz!g;d^b|70 zWL_63feb=e!*MX6Zkx@^<9)uZO{y!Z$U3IK!M0?lfKyow)ilh4#3PHS+c2 zfQN0Z9YB~z(2{Yivv?aU(wbs`GY!@eX`%Q9lEB>iei=9P{8rG-og3zBWvrMzok(nO zo#J$^BiQNh_|6l*>u*zt{|hs?)8$*4|hiwE{>ty`GD;-e26axg7HYCX|2lb;BV_jIB-Q}jnE9u0(R zj=+_kQMQ_;p3UP%@R(vR10W}bN97W{_ec3UyqR#=&h z0lAfQKb}Y-SfndXxU}OT6=81R!bbr*2|?cis)wgR4AR9?tWo51;>@f35WOCH<6}aV znY3qO1TKcajl*Se@-xJczw^X2p-#@Muy61=%jLh>)3w?M;!(JL}RB22*i0mY-_a$iTOC;5&A++FLqncdvm!B(Y z{ixdBHD7IF?*cE%0V+_{k8||~y4|9ST2me=nKg*H{hE?Zi=h%WYB9M; zM(O44>}6@V1e23GQvhIL|Gh}*sR4K$wYNyCVPk*ak%WvJI+Tjsdy#Gl$a#SR zo=*hNn{5CHICyl7@@s<9CPk_ptV6WzlW0EOVBPfIJ@JnFeWIj++RV*;;O899-aRZM ziGSRv7~uH|q|Z0oxO-wzZg8=cJfFTfw-LzTPXvSjN|Jwk?cF&Yj_O*h$Tq^WPo-fB z!}6Rq!bZ=YhPC2oRkr_*gE08K0(~7GtwxI`D2tfjPHkJS&W$p(oL|USfCLNu578kQ zdHd>Fe6hrFUAh!IlvWA37(Ajv?N3-xVTdmRi~MS%_m<2-x7Ujhl;vi*myDF$G-ZXN zMMo=Ye37lV#awb`DXGOw4dg7({BY?s)l_asH@#YquIoE8&Apx%cwzmtII{7+3mhd) zkOf;`d2I0oV?Wd$3kSk#*aiwh7;aoT@38gvx>jMlpYD||J|q1}X!BO6qoEsskk?fJ zFntjMko&(K+@-dN73og1lp7p5IF!=TEMyxc$KopSLxzUlz!7WhQ8#o@7dQh01OJD{ zAFyZa1Xj;I?saf@^<}z#VXOnZJ=NbUSu~KV@dAiG@>K!^du9UY^NBU-vn1$r1aDz` z9#+L{GVYpGxMeP*CB={JPLbcX7L%^JnI5)Vc$MRMCXU28Yr;i%cyb0PFyF%%r+~S* zyVu!{1RY{dPlj%Ae7PJG?D5ab)}exO1F?UcYC#n4YMJGj$N>U!`w*G!OJ)UgM3MP# zzExtVojdv(@ck$EYRY}EY39Q{uZ77fshp@xL${z$LrK8MNSfo)-Nl<$( zm7pmpd)Qvuj?7h=4Pt~>_(|mqT;sEsYSF7iuXqqqm3Fy;=iCn6AdV#$N+rIF1|uVcvzrpxJF=g#)91Zh@3)#IS( z4|{?P^0c>*yB6~u*pT`5j=+!`IKSzLi0Kg9zr@4G7?EKbyO_4GT;g#DVmsYtGdKR1 ztJFcxi@3^SUngb$nK@L{PSDIW(0VOd3|6lGcEd8*lGGsNTO0sfkD8SM3Y+hKlUK5# z{8RwAI$t>!lKAue)AsH93M^tDDyQe2E$FC+Pj>n4x-==Th8&@z}o5FldQqXSF6FyyUpjVp&!3 z*4EUL(Vz1p9xbttZlW5+ZPMcK+FC%j^w^IF&+rcRJs?#k63#^i3P;&HBX*4LowK36 z%99ch!<{~5H8?LBkN)1lperoxO|?qodDdIu-#>_$^$2&I7)@=ih;(>yTKOe9U_T}# zJ>4N1;-y!55u{dwO%w7+|ZqDHIgguNzF@nB0_yn3bX4rqM;{jP=4Lu*VR)mmx`!QuAxyLZyq2HC?$0|=D!J*t$4pc-_W){A?E zFSk6GIFM*;{UPNW(9676Nin49i~y2_85bup%D#IaczBHoH?8>mn11sDh#}PIXcYXk zeAjfL8S>+SHF-7O|HPlnYh6pP;6^UjC*waaY%s;Dqrll!qa@#$q}GU#Ks*zKA-8Y|l^bk?{;3Ei!C`Hs}<&Fo*@Z}cZNv#h9` zpqkO%X7{?=5H+K?ecvTmV+b!;x-;wfAc$?G*Ilq<{iR2hgq*(-faZ7B)+B>X3EjYd zF*!K8Aw?Z}xMlc&V3ZS5G@f8Zc9`{dBzO@!HTNer$(|LA}cg*L{tVefZ+c! zQQ^|hG{+O=7%?P6h@iAG>yk;#ea_tbSkkxrq4x5Ve5W*Tfa8-=UzP94b9`M?0?XqB z6hmV7vVaT0ANhLH7UNbx$DgI`*C#=F2s`InVlA1warte9cGRdbp|1s z&uxBF&pW-YZ!iv80;b*8?nvhhimg__ZU834Ld>vKTxiOY{{+pV~>lb zfDWQYCQ%%xtn}3tbn~A-+fE3Z%Ie?GOv;j$-CZQa=&}E{4n2Jhy4hR)&bm5__dJ+n zNiR$~s0*TV?E!B=ZfV_4N8Hns9n(C5dYI4~bQhHu?Q&%Aqknuj6J*Q}tBJpd?6+#< zMgXN&91w91w!bVr7S!A!;_3G!6M4tBM*%oj@LT-jR1VQ17Mp^e)XmtBmOlhmg5Kl- znAge-g{0RMeJ?ozl`LZ zn|9x~H*<@?X)^eoTJ!mxC_^0Af*GLfTP_%QMvr%!h*x7cRbTu|;o4^I48mC@4> z7S&vqV8VE?An4=3D{I|>mwq3^eW*t9Yvs!d9}?PQXbR!M57p8?4M6@oFG^0*Q}S8u z9%HO*sg2;aJhdrCYC{sX^fkm|2CZeYPn`*j6v}eONoycwC@#=Ztgmvb?v<4R5GFDP z8P%xO-NIo2ic}Cl^UHMepW8PtFJFMJO~sh)jgG>sB}P(-1-0OPsQ8s(leEs%`qvNC zIUKCYN@33)^uMI`CTM}pLgKrs4DW>ibrDr$FAIPM<46h}CJLm-r}9zQKkm#=LOo*C zY)e4~KFJ2?Ji5Q^V|`C3U*Dkw=TQ&XYPpS>h*17dU*E!p$P%$a_vG?nIjbV>WLR;* zdXaDNxWPur(N*7vb9;~4CYl;<9<_eR?KQWy&Gq3;sOD+Dgo^KR>1^6~&5Eqd&2=LB zGMJIFykRl2=e0O*x8gGN3?)PQenHUWZ4_`EtA6tv2Izd_d95}>cE{_Bres>#yfZW||YhxwtypTUolh@jbV5 owsm)R;d|+9`M)1{>@1y~c!6y&+4k=Mn*=>p)Ob`bZxQ_e0E*3^$p8QV literal 0 HcmV?d00001 diff --git a/docs/aiohttp-icon.ico b/docs/aiohttp-icon.ico new file mode 100644 index 0000000000000000000000000000000000000000..56b6e563e1364e1c0ded8b87f83578010fd6028c GIT binary patch literal 3262 zcma)8S#T7`8D7c{yre2`sl3IHc}S%Q26IY67g`Bv1?WIR2q7U50okIkO_8JsAW|kc z#PN%(99IPj0op@*-&(D-y3gVg;SiKSh|7Sk-JR|3>Az=`f3yyTIo&%w+tdB`_kaJ@ zGdkTO{C)VL4)4F#nSPDFP_=HJ%l-`5mHk!4wuq-Zocx6p8qNF;C) zm)^JgUF)24gqoS2o|~PC$D)!HM=c92F2zvU?CcEA$58BDC~sN=0AxBlGo6s6=W%vp zO16))v)Ad#OSEx>{`(qj9%Ca<aA z=Jcxx|D_~YA7uGpp zot-yC2yRCeuR98J0NoNL{L~07@N<0-GF`|DmN}p}1l66O4?t-v?CVyM|JCQ>1w-F` zCBp-TAmA2*pMQIqMk$ZQqA!OV$zUEzgj#RWgWdAhAlD;vE2LT>%>@-9*xf1eF|2;5 zY!ll;!ae?Ds-UCKj)_7)Z1zKbK)dhn;^vz)K^dm;3l3N*n8uf%$|r^scjv^wV^I<0 z29E|<;upDgXozrwkFT&prUy#fL`?*Yx5f2o)qGp|q8Gy($J-z7#6o?l)lGGp$nE;V3i#;vZtNrIbnC3QXf$fsy0NQ z#W`J2FeSXVvTU%#1gosD*2Z^+59S{luxh!LTVtvVsgzmC67KSJMX1`c%f~{_mYlZ5dvNx=5 zbcj3~Ah9(qfCRFfe1CglU_$!#JE^KFhAOJ7WA&fJF5YDSxhfTSXeLLFNdNpgF+9pT?j;Vi(F_x;G4l)8C~*Gbh(;5z($IuD zKglpcrV-N38rw~7u_GwfS+sGw5wc9M-VE7h*kpsh^)l0crGZIuWs+TbK)WUqC;Lb- z(lY^qJc=S^mV5{O-vrHwfl1k5W^0=uw*@}JKywjB;d zpKQNDWsdM~_##4cFj0vNr>_vb zjjd^hB~9?VbC6~N%T4Wtg>S1fqe_iWEwqaa1UJL-1pz!gvRYuhm7&`ig3I#Do=N&A zd0+SxWK;&%7%j4p^b5SeA$A4C$pN@Gr{0`W|308pc|^VivMsRs9IQA4e`vz$;5*#J zeVbB^`CGx0Dl{u(&4G8P`I$?k#?8{2cxn?E@CdR%W($;iMWIuqHbeS($ZqCkHuhBy zxih6X9NqFZ<}X`;V@xfy6OFy~jDI&o_XkLsovt{~QcNt(#Pls}ua6#XC+DuvJI^^f zT!2=muYkP!5t%G#(TGV59?tR0Pvn6I+I8``-J7MI?SJh6Cw{^+84Ri`_`bh@-To$i+t$-cN#r~BY&vM<8_MY^Bg7UZ=(ow$EO Xr(3Lb4I6d*M$\d+)" + r"\.(?P\d+)" + r"\.(?P\d+)" + r"(?P.*)?'$", + fp.read(), re.M).groupdict() + except IndexError: + raise RuntimeError('Unable to determine version.') + + +# If extensions (or modules to document with autodoc) are in another directory, +# add these directories to sys.path here. If the directory is relative to the +# documentation root, use os.path.abspath to make it absolute, like shown here. +sys.path.insert(0, os.path.abspath('..')) + +import alabaster + +# -- General configuration ------------------------------------------------ + +# If your documentation needs a minimal Sphinx version, state it here. +# needs_sphinx = '1.0' + +# Add any Sphinx extension module names here, as strings. They can be +# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom +# ones. +extensions = [ + 'sphinx.ext.intersphinx', + 'sphinx.ext.viewcode', + 'alabaster', +] + +# Add any paths that contain templates here, relative to this directory. +templates_path = ['_templates'] + +# The suffix(es) of source filenames. +# You can specify multiple suffix as a list of string: +# source_suffix = ['.rst', '.md'] +source_suffix = '.rst' + +# The encoding of source files. +# source_encoding = 'utf-8-sig' + +# The master toctree document. +master_doc = 'index' + +# General information about the project. +project = 'aiohttp_security' +copyright = '' +author = 'eleddy' + +# The version info for the project you're documenting, acts as replacement for +# |version| and |release|, also used in various other places throughout the +# built documents. +# +# The short X.Y version. +version = '{major}.{minor}'.format(**_version_info) +# The full version, including alpha/beta/rc tags. +release = '{major}.{minor}.{patch}-{tag}'.format(**_version_info) + +# The language for content autogenerated by Sphinx. Refer to documentation +# for a list of supported languages. +# +# This is also used if you do content translation via gettext catalogs. +# Usually you set "language" from the command line for these cases. +language = None + +# There are two options for replacing |today|: either, you set today to some +# non-false value, then it is used: +# today = '' +# Else, today_fmt is used as the format for a strftime call. +# today_fmt = '%B %d, %Y' + +# List of patterns, relative to source directory, that match files and +# directories to ignore when looking for source files. +exclude_patterns = ['_build'] + +# The reST default role (used for this markup: `text`) to use for all +# documents. +# default_role = None + +# If true, '()' will be appended to :func: etc. cross-reference text. +# add_function_parentheses = True + +# If true, the current module name will be prepended to all description +# unit titles (such as .. function::). +# add_module_names = True + +# If true, sectionauthor and moduleauthor directives will be shown in the +# output. They are ignored by default. +# show_authors = False + +# The name of the Pygments (syntax highlighting) style to use. +pygments_style = 'sphinx' + +# A list of ignored prefixes for module index sorting. +# modindex_common_prefix = [] + +# If true, keep warnings as "system message" paragraphs in the built documents. +# keep_warnings = False + +# If true, `todo` and `todoList` produce output, else they produce nothing. +todo_include_todos = False + + +# -- Options for HTML output ---------------------------------------------- + +# The theme to use for HTML and HTML Help pages. See the documentation for +# a list of builtin themes. +html_theme = 'alabaster' + +# Theme options are theme-specific and customize the look and feel of a theme +# further. For a list of options available for each theme, see the +# documentation. +html_theme_options = { + 'logo': 'aiohttp-icon-128x128.png', + 'description': 'Authorization and identity for aoihttp', + 'github_user': 'aio-libs', + 'github_repo': 'aiohttp_security', + 'github_button': True, + 'github_banner': True, + 'travis_button': True, + 'pre_bg': '#FFF6E5', + 'note_bg': '#E5ECD1', + 'note_border': '#BFCF8C', + 'body_text': '#482C0A', + 'sidebar_text': '#49443E', + 'sidebar_header': '#4B4032', +} + +# Add any paths that contain custom themes here, relative to this directory. +html_theme_path = [alabaster.get_path()] + +# The name for this set of Sphinx documents. If None, it defaults to +# " v documentation". +# html_title = None + +# A shorter title for the navigation bar. Default is the same as html_title. +# html_short_title = None + +# The name of an image file (relative to this directory) to place at the top +# of the sidebar. +# html_logo = None + +# The name of an image file (within the static path) to use as favicon of the +# docs. This file should be a Windows icon file (.ico) being 16x16 or 32x32 +# pixels large. +html_favicon = 'aiohttp-icon.ico' + +# Add any paths that contain custom static files (such as style sheets) here, +# relative to this directory. They are copied after the builtin static files, +# so a file named "default.css" will overwrite the builtin "default.css". +html_static_path = ['_static'] + +# Add any extra paths that contain custom files (such as robots.txt or +# .htaccess) here, relative to this directory. These files are copied +# directly to the root of the documentation. +# html_extra_path = [] + +# If not '', a 'Last updated on:' timestamp is inserted at every page bottom, +# using the given strftime format. +# html_last_updated_fmt = '%b %d, %Y' + +# If true, SmartyPants will be used to convert quotes and dashes to +# typographically correct entities. +# html_use_smartypants = True + +# Custom sidebar templates, maps document names to template names. +html_sidebars = { + '**': [ + 'about.html', 'navigation.html', 'searchbox.html', + ] +} + +# Additional templates that should be rendered to pages, maps page names to +# template names. +# html_additional_pages = {} + +# If false, no module index is generated. +# html_domain_indices = True + +# If false, no index is generated. +# html_use_index = True + +# If true, the index is split into individual pages for each letter. +# html_split_index = False + +# If true, links to the reST sources are added to the pages. +# html_show_sourcelink = True + +# If true, "Created using Sphinx" is shown in the HTML footer. Default is True. +# html_show_sphinx = True + +# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True. +# html_show_copyright = True + +# If true, an OpenSearch description file will be output, and all pages will +# contain a tag referring to it. The value of this option must be the +# base URL from which the finished HTML is served. +# html_use_opensearch = '' + +# This is the file name suffix for HTML files (e.g. ".xhtml"). +# html_file_suffix = None + +# Language to be used for generating the HTML full-text search index. +# Sphinx supports the following languages: +# 'da', 'de', 'en', 'es', 'fi', 'fr', 'h', 'it', 'ja' +# 'nl', 'no', 'pt', 'ro', 'r', 'sv', 'tr' +# html_search_language = 'en' + +# A dictionary with options for the search language support, empty by default. +# Now only 'ja' uses this config value +# html_search_options = {'type': 'default'} + +# The name of a javascript file (relative to the configuration directory) that +# implements a search results scorer. If empty, the default will be used. +# html_search_scorer = 'scorer.js' + +# Output file base name for HTML help builder. +htmlhelp_basename = 'aiohttp_securitydoc' + +# -- Options for LaTeX output --------------------------------------------- + +# The paper size ('letterpaper' or 'a4paper'). +# 'papersize': 'letterpaper', + +# The font size ('10pt', '11pt' or '12pt'). +# 'pointsize': '10pt', + +# Additional stuff for the LaTeX preamble. +# 'preamble': '', + +# Latex figure (float) alignment +# 'figure_align': 'htbp', +latex_elements = { +} + +# Grouping the document tree into LaTeX files. List of tuples +# (source start file, target name, title, +# author, documentclass [howto, manual, or own class]). +latex_documents = [ + (master_doc, 'aiohttp_security.tex', 'aiohttp\\_security Documentation', + 'Andrew Svetlov', 'manual'), +] + +# The name of an image file (relative to this directory) to place at the top of +# the title page. +# latex_logo = None + +# For "manual" documents, if this is true, then toplevel headings are parts, +# not chapters. +# latex_use_parts = False + +# If true, show page references after internal links. +# latex_show_pagerefs = False + +# If true, show URL addresses after external links. +# latex_show_urls = False + +# Documents to append as an appendix to all manuals. +# latex_appendices = [] + +# If false, no module index is generated. +# latex_domain_indices = True + + +# -- Options for manual page output --------------------------------------- + +# One entry per manual page. List of tuples +# (source start file, name, description, authors, manual section). +man_pages = [ + (master_doc, 'aiohttp_security', 'aiohttp_security Documentation', + [author], 1) +] + +# If true, show URL addresses after external links. +# man_show_urls = False + + +# -- Options for Texinfo output ------------------------------------------- + +# Grouping the document tree into Texinfo files. List of tuples +# (source start file, target name, title, author, +# dir menu entry, description, category) +texinfo_documents = [ + (master_doc, 'aiohttp_security', 'aiohttp_security Documentation', + author, 'aiohttp_security', 'One line description of project.', + 'Miscellaneous'), +] + +# Documents to append as an appendix to all manuals. +# texinfo_appendices = [] + +# If false, no module index is generated. +# texinfo_domain_indices = True + +# How to display URL addresses: 'footnote', 'no', or 'inline'. +# texinfo_show_urls = 'footnote' + +# If true, do not generate a @detailmenu in the "Top" node's menu. +# texinfo_no_detailmenu = False + + +# Example configuration for intersphinx: refer to the Python standard library. +intersphinx_mapping = {'https://docs.python.org/3': None, + 'http://aiohttp.readthedocs.org/en/stable': None} diff --git a/docs/example.rst b/docs/example.rst new file mode 100644 index 0000000..eb88231 --- /dev/null +++ b/docs/example.rst @@ -0,0 +1,71 @@ +How to Make a Simple Server With Authorization +============================================== + + +.. code::python + + import asyncio + from aiohttp import web + + @asyncio.coroutine + def root_handler(request): + text = "Alive and kicking!" + return web.Response(body=text.encode('utf-8')) + + # option 2: auth at a higher level? + # set user_id and allowed in the wsgo handler + @protect('view_user') + @asyncio.coroutine + def user_handler(request): + name = request.match_info.get('name', "Anonymous") + text = "Hello, " + name + return web.Response(body=text.encode('utf-8')) + + + # option 3: super low + # wsgi doesn't do anything + @asyncio.coroutine + def user_update_handler(request): + # identity, asked_permission + user_id = yield from identity_policy.identify(request) + identity = yield from auth_policy.authorized_user_id(user_id) + allowed = yield from request.auth_policy.permits( + identity, asked_permission + ) + if not allowed: + # how is this pluggable as well? + # ? return NotAllowedStream() + raise NotAllowedResponse() + + update_user() + + @asyncio.coroutine + def init(loop): + # set up identity and auth + auth_policy = DictionaryAuthorizationPolicy({'me': ('view_user',), + 'you': ('view_user', + 'edit_user',)}) + identity_policy = CookieIdentityPolicy() + auth = authorization_middleware(auth_policy, identity_policy) + + # wsgi app + app = web.Application(loop=loop, middlewares=*auth) + + # add the routes + app.router.add_route('GET', '/', root_handler) + app.router.add_route('GET', '/{user}', user_handler) + app.router.add_route('GET', '/{user}/edit', user_update_handler) + + # get it started + srv = yield from loop.create_server(app.make_handler(), + '127.0.0.1', 8080) + print("Server started at http://127.0.0.1:8080") + return srv + + + loop = asyncio.get_event_loop() + loop.run_until_complete(init(loop)) + try: + loop.run_forever() + except KeyboardInterrupt: + pass # TODO put handler cleanup here diff --git a/docs/glossary.rst b/docs/glossary.rst new file mode 100644 index 0000000..0019f90 --- /dev/null +++ b/docs/glossary.rst @@ -0,0 +1,16 @@ +.. _aiohttp-security-glossary: + +========== + Glossary +========== + +.. if you add new entries, keep the alphabetical sorting! + +.. glossary:: + + + session + + A namespace that is valid for some period of continual activity + that can be used to represent a user's interaction with a web + application. diff --git a/docs/index.rst b/docs/index.rst new file mode 100644 index 0000000..a008f6c --- /dev/null +++ b/docs/index.rst @@ -0,0 +1,30 @@ +aiohttp_security +================ + +The library provides security for :ref:`aiohttp.web`. + +Usage +----- + + +License +------- + +``aiohttp_security`` is offered under the Apache 2 license. + +Contents: + +.. toctree:: + :maxdepth: 2 + + reference + glossary + + + +Indices and tables +================== + +* :ref:`genindex` +* :ref:`modindex` +* :ref:`search` diff --git a/docs/make.bat b/docs/make.bat new file mode 100644 index 0000000..ea08229 --- /dev/null +++ b/docs/make.bat @@ -0,0 +1,263 @@ +@ECHO OFF + +REM Command file for Sphinx documentation + +if "%SPHINXBUILD%" == "" ( + set SPHINXBUILD=sphinx-build +) +set BUILDDIR=_build +set ALLSPHINXOPTS=-d %BUILDDIR%/doctrees %SPHINXOPTS% . +set I18NSPHINXOPTS=%SPHINXOPTS% . +if NOT "%PAPER%" == "" ( + set ALLSPHINXOPTS=-D latex_paper_size=%PAPER% %ALLSPHINXOPTS% + set I18NSPHINXOPTS=-D latex_paper_size=%PAPER% %I18NSPHINXOPTS% +) + +if "%1" == "" goto help + +if "%1" == "help" ( + :help + echo.Please use `make ^` where ^ is one of + echo. html to make standalone HTML files + echo. dirhtml to make HTML files named index.html in directories + echo. singlehtml to make a single large HTML file + echo. pickle to make pickle files + echo. json to make JSON files + echo. htmlhelp to make HTML files and a HTML help project + echo. qthelp to make HTML files and a qthelp project + echo. devhelp to make HTML files and a Devhelp project + echo. epub to make an epub + echo. latex to make LaTeX files, you can set PAPER=a4 or PAPER=letter + echo. text to make text files + echo. man to make manual pages + echo. texinfo to make Texinfo files + echo. gettext to make PO message catalogs + echo. changes to make an overview over all changed/added/deprecated items + echo. xml to make Docutils-native XML files + echo. pseudoxml to make pseudoxml-XML files for display purposes + echo. linkcheck to check all external links for integrity + echo. doctest to run all doctests embedded in the documentation if enabled + echo. coverage to run coverage check of the documentation if enabled + goto end +) + +if "%1" == "clean" ( + for /d %%i in (%BUILDDIR%\*) do rmdir /q /s %%i + del /q /s %BUILDDIR%\* + goto end +) + + +REM Check if sphinx-build is available and fallback to Python version if any +%SPHINXBUILD% 2> nul +if errorlevel 9009 goto sphinx_python +goto sphinx_ok + +:sphinx_python + +set SPHINXBUILD=python -m sphinx.__init__ +%SPHINXBUILD% 2> nul +if errorlevel 9009 ( + echo. + echo.The 'sphinx-build' command was not found. Make sure you have Sphinx + echo.installed, then set the SPHINXBUILD environment variable to point + echo.to the full path of the 'sphinx-build' executable. Alternatively you + echo.may add the Sphinx directory to PATH. + echo. + echo.If you don't have Sphinx installed, grab it from + echo.http://sphinx-doc.org/ + exit /b 1 +) + +:sphinx_ok + + +if "%1" == "html" ( + %SPHINXBUILD% -b html %ALLSPHINXOPTS% %BUILDDIR%/html + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The HTML pages are in %BUILDDIR%/html. + goto end +) + +if "%1" == "dirhtml" ( + %SPHINXBUILD% -b dirhtml %ALLSPHINXOPTS% %BUILDDIR%/dirhtml + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The HTML pages are in %BUILDDIR%/dirhtml. + goto end +) + +if "%1" == "singlehtml" ( + %SPHINXBUILD% -b singlehtml %ALLSPHINXOPTS% %BUILDDIR%/singlehtml + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The HTML pages are in %BUILDDIR%/singlehtml. + goto end +) + +if "%1" == "pickle" ( + %SPHINXBUILD% -b pickle %ALLSPHINXOPTS% %BUILDDIR%/pickle + if errorlevel 1 exit /b 1 + echo. + echo.Build finished; now you can process the pickle files. + goto end +) + +if "%1" == "json" ( + %SPHINXBUILD% -b json %ALLSPHINXOPTS% %BUILDDIR%/json + if errorlevel 1 exit /b 1 + echo. + echo.Build finished; now you can process the JSON files. + goto end +) + +if "%1" == "htmlhelp" ( + %SPHINXBUILD% -b htmlhelp %ALLSPHINXOPTS% %BUILDDIR%/htmlhelp + if errorlevel 1 exit /b 1 + echo. + echo.Build finished; now you can run HTML Help Workshop with the ^ +.hhp project file in %BUILDDIR%/htmlhelp. + goto end +) + +if "%1" == "qthelp" ( + %SPHINXBUILD% -b qthelp %ALLSPHINXOPTS% %BUILDDIR%/qthelp + if errorlevel 1 exit /b 1 + echo. + echo.Build finished; now you can run "qcollectiongenerator" with the ^ +.qhcp project file in %BUILDDIR%/qthelp, like this: + echo.^> qcollectiongenerator %BUILDDIR%\qthelp\aiohttp_security.qhcp + echo.To view the help file: + echo.^> assistant -collectionFile %BUILDDIR%\qthelp\aiohttp_security.ghc + goto end +) + +if "%1" == "devhelp" ( + %SPHINXBUILD% -b devhelp %ALLSPHINXOPTS% %BUILDDIR%/devhelp + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. + goto end +) + +if "%1" == "epub" ( + %SPHINXBUILD% -b epub %ALLSPHINXOPTS% %BUILDDIR%/epub + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The epub file is in %BUILDDIR%/epub. + goto end +) + +if "%1" == "latex" ( + %SPHINXBUILD% -b latex %ALLSPHINXOPTS% %BUILDDIR%/latex + if errorlevel 1 exit /b 1 + echo. + echo.Build finished; the LaTeX files are in %BUILDDIR%/latex. + goto end +) + +if "%1" == "latexpdf" ( + %SPHINXBUILD% -b latex %ALLSPHINXOPTS% %BUILDDIR%/latex + cd %BUILDDIR%/latex + make all-pdf + cd %~dp0 + echo. + echo.Build finished; the PDF files are in %BUILDDIR%/latex. + goto end +) + +if "%1" == "latexpdfja" ( + %SPHINXBUILD% -b latex %ALLSPHINXOPTS% %BUILDDIR%/latex + cd %BUILDDIR%/latex + make all-pdf-ja + cd %~dp0 + echo. + echo.Build finished; the PDF files are in %BUILDDIR%/latex. + goto end +) + +if "%1" == "text" ( + %SPHINXBUILD% -b text %ALLSPHINXOPTS% %BUILDDIR%/text + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The text files are in %BUILDDIR%/text. + goto end +) + +if "%1" == "man" ( + %SPHINXBUILD% -b man %ALLSPHINXOPTS% %BUILDDIR%/man + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The manual pages are in %BUILDDIR%/man. + goto end +) + +if "%1" == "texinfo" ( + %SPHINXBUILD% -b texinfo %ALLSPHINXOPTS% %BUILDDIR%/texinfo + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The Texinfo files are in %BUILDDIR%/texinfo. + goto end +) + +if "%1" == "gettext" ( + %SPHINXBUILD% -b gettext %I18NSPHINXOPTS% %BUILDDIR%/locale + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The message catalogs are in %BUILDDIR%/locale. + goto end +) + +if "%1" == "changes" ( + %SPHINXBUILD% -b changes %ALLSPHINXOPTS% %BUILDDIR%/changes + if errorlevel 1 exit /b 1 + echo. + echo.The overview file is in %BUILDDIR%/changes. + goto end +) + +if "%1" == "linkcheck" ( + %SPHINXBUILD% -b linkcheck %ALLSPHINXOPTS% %BUILDDIR%/linkcheck + if errorlevel 1 exit /b 1 + echo. + echo.Link check complete; look for any errors in the above output ^ +or in %BUILDDIR%/linkcheck/output.txt. + goto end +) + +if "%1" == "doctest" ( + %SPHINXBUILD% -b doctest %ALLSPHINXOPTS% %BUILDDIR%/doctest + if errorlevel 1 exit /b 1 + echo. + echo.Testing of doctests in the sources finished, look at the ^ +results in %BUILDDIR%/doctest/output.txt. + goto end +) + +if "%1" == "coverage" ( + %SPHINXBUILD% -b coverage %ALLSPHINXOPTS% %BUILDDIR%/coverage + if errorlevel 1 exit /b 1 + echo. + echo.Testing of coverage in the sources finished, look at the ^ +results in %BUILDDIR%/coverage/python.txt. + goto end +) + +if "%1" == "xml" ( + %SPHINXBUILD% -b xml %ALLSPHINXOPTS% %BUILDDIR%/xml + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The XML files are in %BUILDDIR%/xml. + goto end +) + +if "%1" == "pseudoxml" ( + %SPHINXBUILD% -b pseudoxml %ALLSPHINXOPTS% %BUILDDIR%/pseudoxml + if errorlevel 1 exit /b 1 + echo. + echo.Build finished. The pseudo-XML files are in %BUILDDIR%/pseudoxml. + goto end +) + +:end diff --git a/docs/reference.rst b/docs/reference.rst new file mode 100644 index 0000000..4e0cc7f --- /dev/null +++ b/docs/reference.rst @@ -0,0 +1,16 @@ +.. _aiohttp-security-reference: + + +=========== + Reference +=========== + +.. module:: aiohttp_security +.. currentmodule:: aiohttp_security +.. highlight:: python + + +Public functions +================ + + diff --git a/requirements-dev.txt b/requirements-dev.txt new file mode 100644 index 0000000..de46db5 --- /dev/null +++ b/requirements-dev.txt @@ -0,0 +1,8 @@ +. +flake8 +pytest +coverage +sphinx +alabaster>=0.6.2 +pep257 + diff --git a/setup.py b/setup.py new file mode 100644 index 0000000..735c2a1 --- /dev/null +++ b/setup.py @@ -0,0 +1,43 @@ +import codecs +from setuptools import setup, find_packages +import os +import re + + +with codecs.open(os.path.join(os.path.abspath(os.path.dirname( + __file__)), 'aiohttp_security', '__init__.py'), 'r', 'latin1') as fp: + try: + version = re.findall(r"^__version__ = '([^']+)'$", fp.read(), re.M)[0] + except IndexError: + raise RuntimeError('Unable to determine version.') + + +def read(f): + return open(os.path.join(os.path.dirname(__file__), f)).read().strip() + +install_requires = ['aiohttp>=0.14'] +tests_require = install_requires + ['nose'] +extras_require = {} + +setup(name='aiohttp_security', + version=version, + description=("security for aiohttp.web"), + long_description='\n\n'.join((read('README.rst'), read('CHANGES.txt'))), + classifiers=[ + 'License :: OSI Approved :: Apache Software License', + 'Intended Audience :: Developers', + 'Programming Language :: Python', + 'Programming Language :: Python :: 3', + 'Programming Language :: Python :: 3.3', + 'Programming Language :: Python :: 3.4', + 'Topic :: Internet :: WWW/HTTP'], + author='eleddy', + author_email='', + url='https://github.com/aio-libs/aiohttp_security/', + license='Apache 2', + packages=find_packages(), + install_requires=install_requires, + tests_require=tests_require, + test_suite='nose.collector', + include_package_data=True, + extras_require=extras_require) diff --git a/tests/test_cookies_identity.py b/tests/test_cookies_identity.py new file mode 100644 index 0000000..6845760 --- /dev/null +++ b/tests/test_cookies_identity.py @@ -0,0 +1,148 @@ +import asyncio +import socket +import unittest + +import aiohttp +from aiohttp import web +from aiohttp_security import (remember, setup, forget, + AbstractAuthorizationPolicy) +from aiohttp_security.cookies_identity import CookiesIdentityPolicy +from aiohttp_security.api import IDENTITY_KEY + + +class Autz(AbstractAuthorizationPolicy): + + @asyncio.coroutine + def permits(self, identity, permission, context=None): + pass + + @asyncio.coroutine + def authorized_userid(self, identity): + pass + + +class TestCookiesIdentity(unittest.TestCase): + + def setUp(self): + self.loop = asyncio.new_event_loop() + asyncio.set_event_loop(None) + self.client = aiohttp.ClientSession(loop=self.loop) + + def tearDown(self): + self.client.close() + self.loop.run_until_complete(self.handler.finish_connections()) + self.srv.close() + self.loop.run_until_complete(self.srv.wait_closed()) + self.loop.close() + + def find_unused_port(self): + s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) + s.bind(('127.0.0.1', 0)) + port = s.getsockname()[1] + s.close() + return port + + @asyncio.coroutine + def create_server(self): + app = web.Application(loop=self.loop) + setup(app, CookiesIdentityPolicy(), Autz()) + + port = self.find_unused_port() + self.handler = app.make_handler( + debug=True, keep_alive_on=False) + srv = yield from self.loop.create_server( + self.handler, '127.0.0.1', port) + url = "http://127.0.0.1:{}".format(port) + self.srv = srv + return app, srv, url + + def test_remember(self): + + @asyncio.coroutine + def handler(request): + response = web.Response() + hdrs = yield from remember(request, 'Andrew') + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', handler) + resp = yield from self.client.get(url+'/') + self.assertEqual(200, resp.status) + self.assertEqual('Andrew', + self.client.cookies['AIOHTTP_SECURITY'].value) + yield from resp.release() + + self.loop.run_until_complete(go()) + + def test_identify(self): + + @asyncio.coroutine + def create(request): + response = web.Response() + hdrs = yield from remember(request, 'Andrew') + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def check(request): + policy = request.app[IDENTITY_KEY] + user_id = yield from policy.identify(request) + self.assertEqual('Andrew', user_id) + return web.Response() + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', check) + app.router.add_route('POST', '/', create) + resp = yield from self.client.post(url+'/') + self.assertEqual(200, resp.status) + yield from resp.release() + resp = yield from self.client.get(url+'/') + self.assertEqual(200, resp.status) + yield from resp.release() + + self.loop.run_until_complete(go()) + + def test_forget(self): + + @asyncio.coroutine + def index(request): + return web.Response() + + @asyncio.coroutine + def login(request): + response = web.HTTPFound(location='/') + hdrs = yield from remember(request, 'Andrew') + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def logout(request): + response = web.HTTPFound(location='/') + hdrs = yield from forget(request) + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', index) + app.router.add_route('POST', '/login', login) + app.router.add_route('POST', '/logout', logout) + resp = yield from self.client.post(url+'/login') + self.assertEqual(200, resp.status) + self.assertEqual(url+'/', resp.url) + self.assertEqual('Andrew', + self.client.cookies['AIOHTTP_SECURITY'].value) + yield from resp.release() + resp = yield from self.client.post(url+'/logout') + self.assertEqual(200, resp.status) + self.assertEqual(url+'/', resp.url) + self.assertEqual('', self.client.cookies['AIOHTTP_SECURITY'].value) + yield from resp.release() + + self.loop.run_until_complete(go()) diff --git a/tests/test_dict_autz.py b/tests/test_dict_autz.py new file mode 100644 index 0000000..6c689ca --- /dev/null +++ b/tests/test_dict_autz.py @@ -0,0 +1,161 @@ +import asyncio +import socket +import unittest + +import aiohttp +from aiohttp import web +from aiohttp_security import (remember, setup, + authorized_userid, permits, + AbstractAuthorizationPolicy) +from aiohttp_security.cookies_identity import CookiesIdentityPolicy + + +class Autz(AbstractAuthorizationPolicy): + + @asyncio.coroutine + def permits(self, identity, permission, context=None): + if identity == 'UserID': + return permission in {'read', 'write'} + else: + return False + + @asyncio.coroutine + def authorized_userid(self, identity): + if identity == 'UserID': + return 'Andrew' + else: + return None + + +class TestCookiesIdentity(unittest.TestCase): + + def setUp(self): + self.loop = asyncio.new_event_loop() + asyncio.set_event_loop(None) + self.client = aiohttp.ClientSession(loop=self.loop) + + def tearDown(self): + self.client.close() + self.loop.run_until_complete(self.handler.finish_connections()) + self.srv.close() + self.loop.run_until_complete(self.srv.wait_closed()) + self.loop.close() + + def find_unused_port(self): + s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) + s.bind(('127.0.0.1', 0)) + port = s.getsockname()[1] + s.close() + return port + + @asyncio.coroutine + def create_server(self): + app = web.Application(loop=self.loop) + setup(app, CookiesIdentityPolicy(), Autz()) + + port = self.find_unused_port() + self.handler = app.make_handler( + debug=True, keep_alive_on=False) + srv = yield from self.loop.create_server( + self.handler, '127.0.0.1', port) + url = "http://127.0.0.1:{}".format(port) + self.srv = srv + return app, srv, url + + def test_authorized_userid(self): + + @asyncio.coroutine + def login(request): + response = web.HTTPFound(location='/') + hdrs = yield from remember(request, 'UserID') + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def check(request): + userid = yield from authorized_userid(request) + self.assertEqual('Andrew', userid) + return web.Response(text=userid) + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', check) + app.router.add_route('POST', '/login', login) + resp = yield from self.client.post(url+'/login') + self.assertEqual(200, resp.status) + txt = yield from resp.text() + self.assertEqual('Andrew', txt) + yield from resp.release() + + self.loop.run_until_complete(go()) + + def test_authorized_userid_not_authorized(self): + + @asyncio.coroutine + def check(request): + userid = yield from authorized_userid(request) + self.assertIsNone(userid) + return web.Response() + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', check) + resp = yield from self.client.get(url+'/') + self.assertEqual(200, resp.status) + yield from resp.release() + + self.loop.run_until_complete(go()) + + def test_permits(self): + + @asyncio.coroutine + def login(request): + response = web.HTTPFound(location='/') + hdrs = yield from remember(request, 'UserID') + response.headers.extend(hdrs) + return response + + @asyncio.coroutine + def check(request): + ret = yield from permits(request, 'read') + self.assertTrue(ret) + ret = yield from permits(request, 'write') + self.assertTrue(ret) + ret = yield from permits(request, 'unknown') + self.assertFalse(ret) + return web.Response() + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', check) + app.router.add_route('POST', '/login', login) + resp = yield from self.client.post(url+'/login') + self.assertEqual(200, resp.status) + yield from resp.release() + + self.loop.run_until_complete(go()) + + def test_permits_unauthorized(self): + + @asyncio.coroutine + def check(request): + ret = yield from permits(request, 'read') + self.assertFalse(ret) + ret = yield from permits(request, 'write') + self.assertFalse(ret) + ret = yield from permits(request, 'unknown') + self.assertFalse(ret) + return web.Response() + + @asyncio.coroutine + def go(): + app, srv, url = yield from self.create_server() + app.router.add_route('GET', '/', check) + resp = yield from self.client.get(url+'/') + self.assertEqual(200, resp.status) + yield from resp.release() + + self.loop.run_until_complete(go())