From 8a6f7ec40367e62471902f5f5b31341edfecffae Mon Sep 17 00:00:00 2001 From: buildmaster Date: Fri, 29 May 2020 18:56:51 +0000 Subject: [PATCH] Sync docs from v3.0.0-M2 to gh-pages --- .../3.0.0-M2/reference/html/README.html | 670 ++++++++++++++++++ .../reference/html/config-security.html | 334 +++++++++ .../3.0.0-M2/reference/html/css/spring.css | 1 + .../3.0.0-M2/reference/html/favicon.ico | Bin 0 -> 111804 bytes .../3.0.0-M2/reference/html/index.html | 612 ++++++++++++++++ .../3.0.0-M2/reference/html/intro.html | 138 ++++ .../html/js/highlight/highlight.min.js | 2 + .../highlight/styles/atom-one-light.min.css | 96 +++ .../html/js/highlight/styles/github-gist.css | 79 +++ .../html/js/highlight/styles/github.min.css | 99 +++ .../html/js/highlight/styles/googlecode.css | 89 +++ .../highlight/styles/solarized-light.min.css | 84 +++ .../3.0.0-M2/reference/html/js/toc.js | 80 +++ .../reference/html/js/tocbot/tocbot.css | 1 + .../reference/html/js/tocbot/tocbot.min.js | 1 + .../3.0.0-M2/reference/html/quickstart.html | 264 +++++++ .../reference/html/spring-cloud-security.html | 612 ++++++++++++++++ .../reference/htmlsingle/css/spring.css | 1 + .../3.0.0-M2/reference/htmlsingle/favicon.ico | Bin 0 -> 111804 bytes .../htmlsingle/js/highlight/highlight.min.js | 2 + .../highlight/styles/atom-one-light.min.css | 96 +++ .../js/highlight/styles/github-gist.css | 79 +++ .../js/highlight/styles/github.min.css | 99 +++ .../js/highlight/styles/googlecode.css | 89 +++ .../highlight/styles/solarized-light.min.css | 84 +++ .../3.0.0-M2/reference/htmlsingle/js/toc.js | 80 +++ .../reference/htmlsingle/js/tocbot/tocbot.css | 1 + .../htmlsingle/js/tocbot/tocbot.min.js | 1 + 28 files changed, 3694 insertions(+) create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/README.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/config-security.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/css/spring.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/favicon.ico create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/index.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/intro.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/highlight.min.js create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/atom-one-light.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github-gist.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/googlecode.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/solarized-light.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/toc.js create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.min.js create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/quickstart.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/html/spring-cloud-security.html create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/css/spring.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/favicon.ico create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/highlight.min.js create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/atom-one-light.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github-gist.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/googlecode.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/solarized-light.min.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/toc.js create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.css create mode 100644 spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.min.js diff --git a/spring-cloud-security/3.0.0-M2/reference/html/README.html b/spring-cloud-security/3.0.0-M2/reference/html/README.html new file mode 100644 index 00000000..5e980ec1 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/README.html @@ -0,0 +1,670 @@ + + + + + + + +Upgrading to 1.1.0 + + + + + + + + + + +
+
+
+
+
+Gitter +
+
+
+

Spring Cloud Security offers a set of primitives for building secure +applications and services with minimum fuss. A declarative model which +can be heavily configured externally (or centrally) lends itself to +the implementation of large systems of co-operating, remote components, +usually with a central indentity management service. It is also extremely +easy to use in a service platform like Cloud Foundry. Building on +Spring Boot and Spring Security OAuth2 we can quickly create systems that +implement common patterns like single sign on, token relay and token +exchange.

+
+
+
+
+

Upgrading to 1.1.0

+
+
+

Most of the OAuth2 features moved from this project to Spring Boot 1.3, so from version 1.1 things are a little different here. Here +is a guide to the available features as they were in 1.0, but with new names and slightly new APIs.

+
+
+

As in 1.0, an app will activate @EnableOAuth2Sso if you bind provide some +following properties in the Environment.

+
+
+

You can still customize the access rules in an SSO application, but instead +of a specific callback (the old OAuth2SsoConfigurer) all you do now is +add @EnableOAuth2Sso to a WebSecurityConfigurerAdapter. +For example if you want the resources under "/ui/**" to be protected with OAuth2:

+
+
+
+
@Configuration
+@EnableOAuth2Sso
+@EnableAutoConfiguration
+protected static class TestConfiguration extends WebSecurityConfigurerAdapter {
+	@Override
+	public void match(RequestMatchers matchers) {
+		matchers.antMatchers("/ui/**")
+               .authorizeRequests().anyRequest().authenticated();
+	}
+}
+
+
+
+

In this case the rest of the application will default to the normal +Spring Boot access control for other paths (Basic authentication, or +whatever custom filters you put in place).

+
+
+

There is no @EnableOAuth2Resource annotation in Spring Cloud 1.1. +You just use the regular @EnableResourceServer from Spring OAuth.

+
+
+
+
+

Building

+
+
+

Basic Compile and Test

+
+

To build the source you will need to install JDK 1.7.

+
+
+

Spring Cloud uses Maven for most build-related activities, and you +should be able to get off the ground quite quickly by cloning the +project you are interested in and typing

+
+
+
+
$ ./mvnw install
+
+
+
+ + + + + +
+ + +You can also install Maven (>=3.3.3) yourself and run the mvn command +in place of ./mvnw in the examples below. If you do that you also +might need to add -P spring if your local Maven settings do not +contain repository declarations for spring pre-release artifacts. +
+
+
+ + + + + +
+ + +Be aware that you might need to increase the amount of memory +available to Maven by setting a MAVEN_OPTS environment variable with +a value like -Xmx512m -XX:MaxPermSize=128m. We try to cover this in +the .mvn configuration, so if you find you have to do it to make a +build succeed, please raise a ticket to get the settings added to +source control. +
+
+
+

For hints on how to build the project look in .travis.yml if there +is one. There should be a "script" and maybe "install" command. Also +look at the "services" section to see if any services need to be +running locally (e.g. mongo or rabbit). Ignore the git-related bits +that you might find in "before_install" since they’re related to setting git +credentials and you already have those.

+
+
+

The projects that require middleware generally include a +docker-compose.yml, so consider using +Docker Compose to run the middeware servers +in Docker containers. See the README in the +scripts demo +repository for specific instructions about the common cases of mongo, +rabbit and redis.

+
+
+ + + + + +
+ + +If all else fails, build with the command from .travis.yml (usually +./mvnw install). +
+
+
+
+

Documentation

+
+

The spring-cloud-build module has a "docs" profile, and if you switch +that on it will try to build asciidoc sources from +src/main/asciidoc. As part of that process it will look for a +README.adoc and process it by loading all the includes, but not +parsing or rendering it, just copying it to ${main.basedir} +(defaults to ${basedir}, i.e. the root of the project). If there are +any changes in the README it will then show up after a Maven build as +a modified file in the correct place. Just commit it and push the change.

+
+
+
+

Working with the code

+
+

If you don’t have an IDE preference we would recommend that you use +Spring Tools Suite or +Eclipse when working with the code. We use the +m2eclipse eclipse plugin for maven support. Other IDEs and tools +should also work without issue as long as they use Maven 3.3.3 or better.

+
+
+

Activate the Spring Maven profile

+
+

Spring Cloud projects require the 'spring' Maven profile to be activated to resolve +the spring milestone and snapshot repositories. Use your preferred IDE to set this +profile to be active, or you may experience build errors.

+
+
+
+

Importing into eclipse with m2eclipse

+
+

We recommend the m2eclipse eclipse plugin when working with +eclipse. If you don’t already have m2eclipse installed it is available from the "eclipse +marketplace".

+
+
+ + + + + +
+ + +Older versions of m2e do not support Maven 3.3, so once the +projects are imported into Eclipse you will also need to tell +m2eclipse to use the right profile for the projects. If you +see many different errors related to the POMs in the projects, check +that you have an up to date installation. If you can’t upgrade m2e, +add the "spring" profile to your settings.xml. Alternatively you can +copy the repository settings from the "spring" profile of the parent +pom into your settings.xml. +
+
+
+
+

Importing into eclipse without m2eclipse

+
+

If you prefer not to use m2eclipse you can generate eclipse project metadata using the +following command:

+
+
+
+
$ ./mvnw eclipse:eclipse
+
+
+
+

The generated eclipse projects can be imported by selecting import existing projects +from the file menu.

+
+
+
+
+
+
+

Contributing

+
+
+

Spring Cloud is released under the non-restrictive Apache 2.0 license, +and follows a very standard Github development process, using Github +tracker for issues and merging pull requests into master. If you want +to contribute even something trivial please do not hesitate, but +follow the guidelines below.

+
+
+

Sign the Contributor License Agreement

+
+

Before we accept a non-trivial patch or pull request we will need you to sign the +Contributor License Agreement. +Signing the contributor’s agreement does not grant anyone commit rights to the main +repository, but it does mean that we can accept your contributions, and you will get an +author credit if we do. Active contributors might be asked to join the core team, and +given the ability to merge pull requests.

+
+
+
+

Code of Conduct

+
+

This project adheres to the Contributor Covenant code of +conduct. By participating, you are expected to uphold this code. Please report +unacceptable behavior to spring-code-of-conduct@pivotal.io.

+
+
+
+

Code Conventions and Housekeeping

+
+

None of these is essential for a pull request, but they will all help. They can also be +added after the original pull request but before a merge.

+
+
+
    +
  • +

    Use the Spring Framework code format conventions. If you use Eclipse +you can import formatter settings using the +eclipse-code-formatter.xml file from the +Spring +Cloud Build project. If using IntelliJ, you can use the +Eclipse Code Formatter +Plugin to import the same file.

    +
    • +
  • +

    Make sure all new .java files to have a simple Javadoc class comment with at least an +@author tag identifying you, and preferably at least a paragraph on what the class is +for.

    +
    • +
  • +

    Add the ASF license header comment to all new .java files (copy from existing files +in the project)

    +
    • +
  • +

    Add yourself as an @author to the .java files that you modify substantially (more +than cosmetic changes).

    +
    • +
  • +

    Add some Javadocs and, if you change the namespace, some XSD doc elements.

    +
    • +
  • +

    A few unit tests would help a lot as well — someone has to do it.

    +
    • +
  • +

    If no-one else is using your branch, please rebase it against the current master (or +other target branch in the main project).

    +
    • +
  • +

    When writing a commit message please follow these conventions, +if you are fixing an existing issue please add Fixes gh-XXXX at the end of the commit +message (where XXXX is the issue number).

    +
    • +
+
+
+
+

Checkstyle

+
+

Spring Cloud Build comes with a set of checkstyle rules. You can find them in the spring-cloud-build-tools module. The most notable files under the module are:

+
+
+
spring-cloud-build-tools/
+
+
└── src
+    ├── checkstyle
+    │   └── checkstyle-suppressions.xml (3)
+    └── main
+        └── resources
+            ├── checkstyle-header.txt (2)
+            └── checkstyle.xml (1)
+
+
+
+ + + + + + + + + + + + + +
1Default Checkstyle rules
2File header setup
3Default suppression rules
+
+
+

Checkstyle configuration

+
+

Checkstyle rules are disabled by default. To add checkstyle to your project just define the following properties and plugins.

+
+
+
pom.xml
+
+
<properties>
+<maven-checkstyle-plugin.failsOnError>true</maven-checkstyle-plugin.failsOnError> (1)
+        <maven-checkstyle-plugin.failsOnViolation>true
+        </maven-checkstyle-plugin.failsOnViolation> (2)
+        <maven-checkstyle-plugin.includeTestSourceDirectory>true
+        </maven-checkstyle-plugin.includeTestSourceDirectory> (3)
+</properties>
+
+<build>
+        <plugins>
+            <plugin> (4)
+                <groupId>io.spring.javaformat</groupId>
+                <artifactId>spring-javaformat-maven-plugin</artifactId>
+            </plugin>
+            <plugin> (5)
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-checkstyle-plugin</artifactId>
+            </plugin>
+        </plugins>
+
+    <reporting>
+        <plugins>
+            <plugin> (5)
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-checkstyle-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </reporting>
+</build>
+
+
+
+ + + + + + + + + + + + + + + + + + + + + +
1Fails the build upon Checkstyle errors
2Fails the build upon Checkstyle violations
3Checkstyle analyzes also the test sources
4Add the Spring Java Format plugin that will reformat your code to pass most of the Checkstyle formatting rules
5Add checkstyle plugin to your build and reporting phases
+
+
+

If you need to suppress some rules (e.g. line length needs to be longer), then it’s enough for you to define a file under ${project.root}/src/checkstyle/checkstyle-suppressions.xml with your suppressions. Example:

+
+
+
projectRoot/src/checkstyle/checkstyle-suppresions.xml
+
+
<?xml version="1.0"?>
+<!DOCTYPE suppressions PUBLIC
+		"-//Puppy Crawl//DTD Suppressions 1.1//EN"
+		"https://www.puppycrawl.com/dtds/suppressions_1_1.dtd">
+<suppressions>
+	<suppress files=".*ConfigServerApplication\.java" checks="HideUtilityClassConstructor"/>
+	<suppress files=".*ConfigClientWatch\.java" checks="LineLengthCheck"/>
+</suppressions>
+
+
+
+

It’s advisable to copy the ${spring-cloud-build.rootFolder}/.editorconfig and ${spring-cloud-build.rootFolder}/.springformat to your project. That way, some default formatting rules will be applied. You can do so by running this script:

+
+
+
+
$ curl https://raw.githubusercontent.com/spring-cloud/spring-cloud-build/master/.editorconfig -o .editorconfig
+$ touch .springformat
+
+
+
+
+
+

IDE setup

+
+

Intellij IDEA

+
+

In order to setup Intellij you should import our coding conventions, inspection profiles and set up the checkstyle plugin. +The following files can be found in the Spring Cloud Build project.

+
+
+
spring-cloud-build-tools/
+
+
└── src
+    ├── checkstyle
+    │   └── checkstyle-suppressions.xml (3)
+    └── main
+        └── resources
+            ├── checkstyle-header.txt (2)
+            ├── checkstyle.xml (1)
+            └── intellij
+                ├── Intellij_Project_Defaults.xml (4)
+                └── Intellij_Spring_Boot_Java_Conventions.xml (5)
+
+
+
+ + + + + + + + + + + + + + + + + + + + + +
1Default Checkstyle rules
2File header setup
3Default suppression rules
4Project defaults for Intellij that apply most of Checkstyle rules
5Project style conventions for Intellij that apply most of Checkstyle rules
+
+
+
+Code style +
+
Figure 1. Code style
+
+
+

Go to File → Settings → Editor → Code style. There click on the icon next to the Scheme section. There, click on the Import Scheme value and pick the Intellij IDEA code style XML option. Import the spring-cloud-build-tools/src/main/resources/intellij/Intellij_Spring_Boot_Java_Conventions.xml file.

+
+
+
+Code style +
+
Figure 2. Inspection profiles
+
+
+

Go to File → Settings → Editor → Inspections. There click on the icon next to the Profile section. There, click on the Import Profile and import the spring-cloud-build-tools/src/main/resources/intellij/Intellij_Project_Defaults.xml file.

+
+
+
Checkstyle
+

To have Intellij work with Checkstyle, you have to install the Checkstyle plugin. It’s advisable to also install the Assertions2Assertj to automatically convert the JUnit assertions

+
+
+
+Checkstyle +
+
+
+

Go to File → Settings → Other settings → Checkstyle. There click on the + icon in the Configuration file section. There, you’ll have to define where the checkstyle rules should be picked from. In the image above, we’ve picked the rules from the cloned Spring Cloud Build repository. However, you can point to the Spring Cloud Build’s GitHub repository (e.g. for the checkstyle.xml : https://raw.githubusercontent.com/spring-cloud/spring-cloud-build/master/spring-cloud-build-tools/src/main/resources/checkstyle.xml). We need to provide the following variables:

+
+
+ +
+
+ + + + + +
+ + +Remember to set the Scan Scope to All sources since we apply checkstyle rules for production and test sources. +
+
+
+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/config-security.html b/spring-cloud-security/3.0.0-M2/reference/html/config-security.html new file mode 100644 index 00000000..38bbde8d --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/config-security.html @@ -0,0 +1,334 @@ + + + + + + + +Certificate Based Security (X509) + + + + + + + + + + +
+
+
+
+

In a real system (not a demo) the Config Server should be able to +authenticate clients that want to use the property source resources.

+
+
+
+
+

Certificate Based Security (X509)

+
+

If clients can communicate with the Config Server directly over HTTPS, +then they can authenticate through a certificate. This requires the +certificate to be installed in the client (could be a shared keystore +file), and to be readable (usually requires a password). If the Config +Server only accepts HTTP connections (like in Cloud Foundry) it’s a +challenge because then the front-end router has to have the +certificate processing and header population, and you probably want it +to be different in different environments (e.g. production vs. test).

+
+
+
+

Kerberos

+
+

If the client apps can be kerberized (the user they run as is trusted +by a Kerberos server), then they might be able to authenticate with +the server with minimal changes to the clients. That should be a +winning strategy in a lot of environments, but currently not really +very convenient in Cloud Foundry. The server has to be kerberized as +well, which is a tightly controlled process, but could be arranged +given that it can be given network access to a Kerberos installation +somewhere. The hardest thing to achieve (e.g. in a PaaS) might be a +reverse-resolvable hostname (but if you control the Kerberos +installation you can switch off that requirement).

+
+
+

TBD: Kerberos client (how do you do RestTemplate for the current +UN*X user?). Theoretically it’s possible, but not supported yet in +Spring Kerberos.

+
+
+
+

OAuth2 Bearer Token

+
+

OAuth2 bearer tokens are a standard way for computers to authenticate +with one another. This is a valuable option for the Spring Cloud +Config Client if it happens to be running in an environment where +OAuth2 tokens are relatively easy to come by (e.g. if we had an OAuth2 +service for client credentials in Cloud Foundry).

+
+
+
+

HTTP Basic Security

+
+

The simplest thing that could possibly work would be HTTP Basic +security, and Spring Boot already does that for free with almost no +hassle on the server (really just a question of setting +security.user.password). The problem then becomes how to keep the +password safe and have it distributed to clients. So what are the +options? The password is stored in a client via +ConfigSecurityProperties with a property "password". The password +can be set using an external config property +config.security.password, or it can be set using a more elaborate +scheme if that turns out to be desirable.

+
+
+

Desirable features of whatever scheme we choose to protect the +password:

+
+
+
    +
  • +

    Apps can still be developed and deployed in a non-production +environment without jumping through too many hoops or repeating +configuration too much.

    +
    • +
  • +

    Deploying into production should not require a lot of extra steps or +repetitive tasks for operations people or automation agents.

    +
    • +
  • +

    Whatever scheme or schemes we provide there has to be something that +works well in a PaaS environment (Cloud Foundry in particular).

    +
    • +
  • +

    Secrets can be changed if compromised. Ideally all client apps would +be able to refresh without a restart, e.g. using a Spring Cloud Bus +signal, assuming they might need the Config Server in between +restarts.

    +
    • +
+
+
+

Configuration File

+
+

A configuration file can have the password in plain text as long as +only apps (or config admin users) can read it. The problem is reduced +to how to protect the configuration file, and there are several +options.

+
+
+
    +
  • +

    UN*X file permissions. Client apps all have access to a filesystem +resource that is protected by UN*X permissions. E.g. apps run as the +"app" user, and the config file belongs to the "config" user (in the +same group as the app user), with group read permissions (640). This +is pretty robust and if there is a shared file system with proper then +the password can be changed easily in a single place. Doesn’t work +very well in a PaaS unless you can fabricate a shared filesystem from +somewhere, and that isn’t easy if you fold in the requirement for file +permissions.

    +
    • +
  • +

    HTTP(S) server (or any URL resource). Doesn’t really solve the +problem on its own since you need to secure access to the file server +for the same reasons you need to secure the Config Server. At best you +might have a generic solution already in place in a given production +environment (e.g. kerberized authentication) that cannot be easily +duplicated in the Config Server. In that case it works pretty well.

    +
    • +
+
+
+
+

Environment Variables

+
+

Every client app has to be started with an environment variable for +the password (e.g. CONFIG_SECURITY_PASSWORD). This can be made +relatively secure since presumably only a privileged user can start an +app. It can be a pain to set up, unless there is a platform for +deploying apps that can be configured to set the environment +variable. You could do that (for instance) with a CI system deploying +to a PaaS, and then the security is all in the CI server. Also, if you +want to change the password, you have to restart all the app instances +(since an environment variable is baked into the process).

+
+
+
+

Cloud Foundry Service Binding

+
+

A special case of environment variables is credentials from a Cloud +Foundry service, since they are embedded in a JSON object that is an +environment variable. Apps in Cloud Foundry already benefit (a bit) +from binding to a Config Server service (they get the base URL), but +if the credentials also (optionally) contained a password, that would +be more valuable. Using a Spring Cloud Connector we might even be able +to reduce the level of involvement for both users and operators. It +would really be a sweet spot if the Config Server itself didn’t have +to configure its own password (say it was generated randomly), but +it was still transmitted to client apps as credentials.

+
+
+
+

Config Server

+
+

The Config Server itself could be enhanced to be able to reveal its +own secret to trusted parties. How is this any better than just being +insecure (trust everyone)? It’s a question of who you trust, and how +flexible you want to be about changing the secret. For instance you +might be prepared to trust anyone who can prove that they own an IP +address in the same subnet as the Config Server, or an app deployed in +a particular space ID in a Cloud Foundry instance.

+
+
+

Example flow:

+
+
+
    +
  • +

    Config Server exposes a /password endpoint

    +
    • +
  • +

    Client POSTs to /password with a body containing data (or hashes +of data) that it can derive from its environment (like a space ID, an +IP address, or a hostname, or some combination of those)

    +
    • +
  • +

    Server verifies the data (e.g. by pinging an endpoint on the Client +and getting a successful response, or looking up a space ID in a +database)

    +
    • +
  • +

    Server returns password in body of response (or 403 if the request +cannot be validated)

    +
    • +
+
+
+

(There is an assumption that doing this once in return for a password, +is better than having to do it for all the endpoints in the Config +Server.)

+
+
+

To make it (optionally) more secure the server could XOR the password +with the value of a shared secret (e.g. shared by environment +variables amongst all apps). This is actually better than just +sharing the password using an environment variable because the server +gets to do the extra computations on the data provided by the client.

+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/css/spring.css b/spring-cloud-security/3.0.0-M2/reference/html/css/spring.css new file mode 100644 index 00000000..7fead00e --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/css/spring.css @@ -0,0 +1 @@ +@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,700&display=swap");/*! normalize.css v2.1.2 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}script{display:none !important}html,body{font-size:100%}html{font-family:'Open Sans', sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}*,*:before,*:after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}body{background:white;color:#000;padding:0;margin:0;font-size:16px;font-family:'Open Sans', sans-serif;font-weight:normal;font-style:normal;line-height:1.6em;position:relative;cursor:auto}a:hover{cursor:pointer}img,object,embed{max-width:100%;height:auto}object,embed{height:100%}img{-ms-interpolation-mode:bicubic}#map_canvas img,#map_canvas embed,#map_canvas object,.map_canvas img,.map_canvas embed,.map_canvas object{max-width:none !important}.left{float:left !important}.right{float:right !important}.text-left{text-align:left !important}.text-right{text-align:right !important}.text-center{text-align:center !important}.text-justify{text-align:justify !important}.hide{display:none}.antialiased{-webkit-font-smoothing:antialiased}img{display:inline-block;vertical-align:middle}textarea{height:auto;min-height:50px}select{width:100%}object,svg{display:inline-block;vertical-align:middle}.center{margin-left:auto;margin-right:auto}.spread,.stretch{width:100%}p.lead,.paragraph.lead>p,#preamble>.sectionbody>.paragraph:first-of-type p{line-height:1.6}.subheader,.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{line-height:1.45;color:#0b0a0a;font-weight:bold;margin-top:0;margin-bottom:0.8em}div,dl,dt,dd,ul,ol,li,h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6,pre,form,p,blockquote,th,td{margin:0;padding:0;direction:ltr}a{color:#086dc3;line-height:inherit;text-decoration:none}a:hover,a:focus{color:#086dc3;text-decoration:underline}a img{border:none}p{font-family:inherit;font-weight:normal;font-size:1em;line-height:1.6;margin-bottom:1.25em;text-rendering:optimizeLegibility}p aside{font-size:0.875em;line-height:1.35;font-style:italic}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{font-family:Montserrat, sans-serif;font-weight:400;font-style:normal;color:#000;text-rendering:optimizeLegibility;margin-top:1em;margin-bottom:0.5em;line-height:1.0125em}h1 small,h2 small,h3 small,#toctitle small,.sidebarblock>.content>.title small,h4 small,h5 small,h6 small{font-size:60%;color:#867c74;line-height:0}h1{font-size:2.125em}h2{font-size:1.6875em}h3,#toctitle,.sidebarblock>.content>.title{font-size:1.375em}h4{font-size:1.125em}h5{font-size:1.125em}h6{font-size:1em}hr{border:solid #dce6e6;border-width:1px 0 0;clear:both;margin:1.25em 0 1.1875em;height:0}em,i{font-style:italic;line-height:inherit}strong,b{font-weight:bold;line-height:inherit}small{font-size:60%;line-height:inherit}code{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-weight:normal;color:#3d3d3c;word-break:break-word}a:not(pre)>code{border:1px solid #086dc3;color:#086dc3}ul,ol,dl{font-size:1em;line-height:1.6;margin-bottom:1.25em;list-style-position:outside;font-family:inherit}ul,ol{margin-left:1.5em}ul.no-bullet,ol.no-bullet{margin-left:1.5em}ul li ul,ul li ol{margin-left:1.25em;margin-bottom:0;font-size:1em}ul.square li ul,ul.circle li ul,ul.disc li ul{list-style:inherit}ul.square{list-style-type:square}ul.circle{list-style-type:circle}ul.disc{list-style-type:disc}ul.no-bullet{list-style:none}ol li ul,ol li ol{margin-left:1.25em;margin-bottom:0}dl dt{margin-bottom:0.3125em;font-weight:bold}dl dd{margin-bottom:1.25em}abbr,acronym{text-transform:uppercase;font-size:90%;color:#000;border-bottom:1px dotted #dddddd;cursor:help}abbr{text-transform:none}blockquote{margin:0 0 1.25em;padding:0.5625em 1.25em 0 1.1875em;border-left:1px solid #dddddd}blockquote cite{display:block;font-size:0.9375em;color:rgba(0,0,0,0.6)}blockquote cite:before{content:"\2014 \0020"}blockquote cite a,blockquote cite a:visited{color:rgba(0,0,0,0.6)}blockquote,blockquote p{line-height:1.6;color:rgba(0,0,0,0.85)}.vcard{display:inline-block;margin:0 0 1.25em 0;border:1px solid #dddddd;padding:0.625em 0.75em}.vcard li{margin:0;display:block}.vcard .fn{font-weight:bold;font-size:0.9375em}.vevent .summary{font-weight:bold}.vevent abbr{cursor:auto;text-decoration:none;font-weight:bold;border:none;padding:0 0.0625em}#tocbot{padding:0 0 0.5rem 0;line-height:1.5rem;padding-left:10px}.mobile-toc{padding:0 0 1rem 0;line-height:1.5rem}.mobile-toc li a{display:block;padding:.3rem 0}#tocbot ol li{list-style:none;padding:0;margin:0}#tocbot ol{margin:0;padding:0}#tocbot ol ol{padding-left:0.6rem}#tocbot .toc-link{display:block;padding-top:.6rem;padding-bottom:.6rem;outline:none;border-radius:4px;font-size:15px;transition:all .15s}#tocbot .toc-link:hover{background:#ebf2f2;color:#06c;text-decoration:none}table{background:white;margin-bottom:1.25em;border:solid 1px #d4dfdf;border-spacing:0}table thead,table tfoot{background:#ebf2f2;font-weight:bold}table thead tr th,table thead tr td,table tfoot tr th,table tfoot tr td{padding:0.5em 0.625em 0.625em;font-size:inherit;color:#000;text-align:left}table tr th,table tr td{padding:0.5625em 0.625em;font-size:inherit;color:#000}table tr.even,table tr.alt,table tr:nth-child(even){background:#f5f9f9}table thead tr th,table tfoot tr th,table tbody tr td,table tr td,table tfoot tr td{display:table-cell;line-height:1.6}body{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;tab-size:4}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2;word-spacing:-0.05em}.clearfix:before,.clearfix:after,.float-group:before,.float-group:after{content:" ";display:table}.clearfix:after,.float-group:after{clear:both}*:not(pre)>code{white-space:nowrap;background-color:#fff;border:1px solid #e1e1e8;color:#009;padding:2px 6px;font-size:.875rem;font-family:Monaco, Menlo, Consolas, "Courier New", monospace}pre,pre>code{line-height:1.85;color:rgba(0,0,0,0.9);font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-weight:normal;text-rendering:optimizeSpeed;word-break:normal}pre{overflow:auto}em em{font-style:normal}strong strong{font-weight:normal}.keyseq{color:#6b625c}kbd{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;display:inline-block;color:#000;font-size:0.65em;line-height:1.45;background-color:#f7f7f7;border:1px solid #ccc;-webkit-border-radius:3px;border-radius:3px;-webkit-box-shadow:0 1px 0 rgba(0,0,0,0.2),0 0 0 0.1em white inset;box-shadow:0 1px 0 rgba(0,0,0,0.2),0 0 0 0.1em white inset;margin:0 0.15em;padding:0.2em 0.5em;vertical-align:middle;position:relative;top:-0.1em;white-space:nowrap}.keyseq kbd:first-child{margin-left:0}.keyseq kbd:last-child{margin-right:0}.menuseq,.menu{color:#191715}b.button:before,b.button:after{position:relative;top:-1px;font-weight:normal}b.button:before{content:"[";padding:0 3px 0 2px}b.button:after{content:"]";padding:0 2px 0 3px}p a>code:hover{color:rgba(0,0,0,0.9)}#toc{border-bottom:1px solid #dce6e6;padding-bottom:0.5em}#toc>ul{margin-left:0.125em}#toc ul.sectlevel0>li>a{font-style:italic}#toc ul.sectlevel0 ul.sectlevel1{margin:0.5em 0}#toc ul{list-style-type:none}#toc li{line-height:1.3334}#toc a{text-decoration:none}#toc a:active{text-decoration:underline}#toctitle{color:#0b0a0a;font-size:1.2em;display:none}body.toc2{padding-top:80px;text-rendering:optimizeLegibility}#content #toc{border-style:solid;border-width:1px;border-color:#dce6e6;margin-bottom:1.25em;padding:1.25em;background:#f1f1f1;-webkit-border-radius:4px;border-radius:4px}#content #toc>:first-child{margin-top:0}#content #toc>:last-child{margin-bottom:0}#footer{padding-bottom:2rem}#footer #footer-text{padding:2rem 0;border-top:1px solid #efefed}#footer-text{color:rgba(0,0,0,0.6);line-height:1.44}.sect1{padding-bottom:0.625em}.sect1+.sect1{border-top:1px solid #efefed}#content h1>a.anchor,h2>a.anchor,h3>a.anchor,#toctitle>a.anchor,.sidebarblock>.content>.title>a.anchor,h4>a.anchor,h5>a.anchor,h6>a.anchor{position:absolute;z-index:1001;width:1.5ex;margin-left:-1.5ex;margin-top:0.1rem;display:block;visibility:hidden;text-align:center;font-weight:normal;color:rgba(0,0,0,0.2)}#content h1>a.anchor:hover,h2>a.anchor:hover,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4>a.anchor:hover,h5>a.anchor:hover,h6>a.anchor:hover{color:#097dff;text-decoration:none}#content h1>a.anchor:before,h2>a.anchor:before,h3>a.anchor:before,#toctitle>a.anchor:before,.sidebarblock>.content>.title>a.anchor:before,h4>a.anchor:before,h5>a.anchor:before,h6>a.anchor:before{content:"\0023";font-size:0.85em;display:block;padding-top:0.1em}#content h1:hover>a.anchor,#content h1>a.anchor:hover,h2:hover>a.anchor,h2>a.anchor:hover,h3:hover>a.anchor,#toctitle:hover>a.anchor,.sidebarblock>.content>.title:hover>a.anchor,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4:hover>a.anchor,h4>a.anchor:hover,h5:hover>a.anchor,h5>a.anchor:hover,h6:hover>a.anchor,h6>a.anchor:hover{visibility:visible}#content h1>a.link,h2>a.link,h3>a.link,#toctitle>a.link,.sidebarblock>.content>.title>a.link,h4>a.link,h5>a.link,h6>a.link{color:#000;text-decoration:none}#content h1>a.link:hover,h2>a.link:hover,h3>a.link:hover,#toctitle>a.link:hover,.sidebarblock>.content>.title>a.link:hover,h4>a.link:hover,h5>a.link:hover,h6>a.link:hover{color:#262321}.audioblock,.imageblock,.literalblock,.listingblock,.stemblock,.videoblock{margin-bottom:1.25em}.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{text-rendering:optimizeLegibility;text-align:left;font-family:'Open Sans', sans-serif;font-size:1rem}table.tableblock>caption.title{white-space:nowrap;overflow:visible;max-width:0;padding:0.6rem 0}table.tableblock #preamble>.sectionbody>.paragraph:first-of-type p{font-size:inherit}.admonitionblock>table{border-collapse:separate;border:0;background:none;width:100%}.admonitionblock>table td.icon{text-align:center;vertical-align:top;padding-top:0.8em;width:80px}.admonitionblock>table td.icon img{max-width:initial}.admonitionblock>table td.icon .title{font-weight:bold;font-family:Montserrat, sans-serif;text-transform:uppercase}.admonitionblock>table td.content{padding-left:0em;padding-right:1.25em;border-left:1px solid #dce6e6}.admonitionblock>table td.content>:last-child>:last-child{margin-bottom:0}.exampleblock>.content{border-style:solid;border-width:0;border-color:#e6e6e6;margin-bottom:1.25em;padding:1.25em;background:#f1f1f1;border-radius:4px}.exampleblock>.content>:first-child{margin-top:0}.exampleblock>.content>:last-child{margin-bottom:0}.sidebarblock{border-style:solid;border-width:0;border-color:#dce6e6;margin-bottom:1.25em;padding:1.25em;background:#ebf2f2;border-radius:4px;overflow:scroll}.sidebarblock>:first-child{margin-top:0}.sidebarblock>:last-child{margin-bottom:0}.sidebarblock>.content>.title{color:#0b0a0a;margin-top:0;text-align:center}.exampleblock>.content>:last-child>:last-child,.exampleblock>.content .olist>ol>li:last-child>:last-child,.exampleblock>.content .ulist>ul>li:last-child>:last-child,.exampleblock>.content .qlist>ol>li:last-child>:last-child,.sidebarblock>.content>:last-child>:last-child,.sidebarblock>.content .olist>ol>li:last-child>:last-child,.sidebarblock>.content .ulist>ul>li:last-child>:last-child,.sidebarblock>.content .qlist>ol>li:last-child>:last-child{margin-bottom:0}.literalblock pre,.listingblock pre:not(.highlight),.listingblock pre[class="highlight"],.listingblock pre[class^="highlight "],.listingblock pre.CodeRay,.listingblock pre.prettyprint{background:#fff;border:1px solid #d9d9d9;border-radius:4px}.sidebarblock .literalblock pre,.sidebarblock .listingblock pre:not(.highlight),.sidebarblock .listingblock pre[class="highlight"],.sidebarblock .listingblock pre[class^="highlight "],.sidebarblock .listingblock pre.CodeRay,.sidebarblock .listingblock pre.prettyprint{background:#fff;border:1px solid #d9d9d9;color:#222}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class],.listingblock pre:not(.highlight){padding:1em 1.5rem;font-size:0.8125em}.literalblock pre.nowrap,.literalblock pre[class].nowrap,.listingblock pre.nowrap,.listingblock pre[class].nowrap{overflow-x:auto}.literalblock.output pre{color:whitesmoke;background-color:rgba(0,0,0,0.9)}.listingblock{white-space:nowrap}.listingblock pre.highlightjs>code{padding:1em 1.5rem;border-radius:4px}.listingblock>.content{position:relative}.listingblock code[data-lang]:before{display:none;content:attr(data-lang);position:absolute;font-size:0.8em;font-weight:bold;top:0.425rem;right:0.5rem;line-height:1;text-transform:uppercase;color:#999}.listingblock code[data-lang]:before{display:block}.listingblock.terminal pre .command:before{content:attr(data-prompt);padding-right:0.5em;color:#999}.listingblock.terminal pre .command:not([data-prompt]):before{content:"$"}table.pyhltable{border-collapse:separate;border:0;margin-bottom:0;background:none}table.pyhltable td{vertical-align:top;padding-top:0;padding-bottom:0;line-height:1.45}table.pyhltable td.code{padding-left:.75em;padding-right:0}pre.pygments .lineno,table.pyhltable td:not(.code){color:#999;padding-left:0;padding-right:.5em;border-right:1px solid #dce6e6}pre.pygments .lineno{display:block;margin-right:.25em}table.pyhltable .linenodiv{background:none !important;padding-right:0 !important}.quoteblock{margin:0 1em 1.25em 1.5em;display:block;text-align:left;padding-left:20px}.quoteblock blockquote,.quoteblock blockquote p{color:rgba(0,0,0,0.85);line-height:1.75;letter-spacing:0}.quoteblock blockquote{margin:0;padding:0;border:0;position:relative}.quoteblock blockquote:before{content:"\201c";font-size:2.75em;font-weight:bold;line-height:0.6em;margin-left:0em;margin-right:1rem;margin-top:0.8rem;color:rgba(0,0,0,0.1);position:absolute;top:0;left:-30px}.quoteblock blockquote>.paragraph:last-child p{margin-bottom:0}.quoteblock .attribution{margin-right:0.5ex}.quoteblock .quoteblock{margin-left:0;margin-right:0;padding:0.5em 0;border-left:3px solid rgba(0,0,0,0.6)}.quoteblock .quoteblock blockquote{padding:0 0 0 0.75em}.quoteblock .quoteblock blockquote:before{display:none}.verseblock{margin:0 1em 1.25em 0;background-color:#f1f1f1;padding:1rem 1.4rem;border-radius:4px}.verseblock pre{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:0.9rem;color:rgba(0,0,0,0.85);font-weight:300;text-rendering:optimizeLegibility}.verseblock pre strong{font-weight:400}.verseblock .attribution{margin-top:1.25rem;margin-left:0.5ex}.quoteblock .attribution,.verseblock .attribution{font-size:0.9375em;line-height:1.45;font-style:italic}.quoteblock .attribution br,.verseblock .attribution br{display:none}.quoteblock .attribution cite,.verseblock .attribution cite{display:block;letter-spacing:-0.025em;color:rgba(0,0,0,0.6)}.quoteblock.abstract{margin:0 0 1.25em 0;display:block}.quoteblock.abstract blockquote,.quoteblock.abstract blockquote p{text-align:left;word-spacing:0}.quoteblock.abstract blockquote:before,.quoteblock.abstract blockquote p:first-of-type:before{display:none}table.tableblock{max-width:100%;border-collapse:separate;overflow-x:scroll;display:block}table.tableblock td>.paragraph:last-child p>p:last-child,table.tableblock th>p:last-child,table.tableblock td>p:last-child{margin-bottom:0}table.tableblock,th.tableblock,td.tableblock{border:0 solid #d4dfdf}table.grid-all th.tableblock,table.grid-all td.tableblock{border-width:0 1px 1px 0}table.grid-all tfoot>tr>th.tableblock,table.grid-all tfoot>tr>td.tableblock{border-width:1px 1px 0 0}table.grid-cols th.tableblock,table.grid-cols td.tableblock{border-width:0 1px 0 0}table.grid-all *>tr>.tableblock:last-child,table.grid-cols *>tr>.tableblock:last-child{border-right-width:0}table.grid-rows th.tableblock,table.grid-rows td.tableblock{border-width:0 0 1px 0}table.grid-all tbody>tr:last-child>th.tableblock,table.grid-all tbody>tr:last-child>td.tableblock,table.grid-all thead:last-child>tr>th.tableblock,table.grid-rows tbody>tr:last-child>th.tableblock,table.grid-rows tbody>tr:last-child>td.tableblock,table.grid-rows thead:last-child>tr>th.tableblock{border-bottom-width:0}table.grid-rows tfoot>tr>th.tableblock,table.grid-rows tfoot>tr>td.tableblock{border-width:1px 0 0 0}table.frame-all{border-width:1px}table.frame-sides{border-width:0 1px}table.frame-topbot{border-width:1px 0}th.halign-left,td.halign-left{text-align:left}th.halign-right,td.halign-right{text-align:right}th.halign-center,td.halign-center{text-align:center}th.valign-top,td.valign-top{vertical-align:top}th.valign-bottom,td.valign-bottom{vertical-align:bottom}th.valign-middle,td.valign-middle{vertical-align:middle}table thead th,table tfoot th{font-weight:bold}tbody tr th{display:table-cell;line-height:1.6;background:#f7f8f7}tbody tr th,tbody tr th p,tfoot tr th,tfoot tr th p{color:#34302d;font-weight:bold}p.tableblock{font-size:1em}td>div.verse{white-space:pre}ol{margin-left:1.75em}ul li ol{margin-left:1.5em}dl dd{margin-left:1.125em}dl dd:last-child,dl dd:last-child>:last-child{margin-bottom:0}ol>li p,ul>li p,ul dd,ol dd,.olist .olist,.ulist .ulist,.ulist .olist,.olist .ulist{margin-bottom:0.625em}ul.unstyled,ol.unnumbered,ul.checklist,ul.none{list-style-type:none}ul.unstyled,ol.unnumbered,ul.checklist{margin-left:0.625em}ul.checklist li>p:first-child>.fa-square-o:first-child,ul.checklist li>p:first-child>.fa-check-square-o:first-child{width:1em;font-size:0.85em}ul.checklist li>p:first-child>input[type="checkbox"]:first-child{width:1em;position:relative;top:1px}ul.inline{margin:0 auto 0.625em auto;margin-left:-1.375em;margin-right:0;padding:0;list-style:none;overflow:hidden}ul.inline>li{list-style:none;float:left;margin-left:1.375em;display:block}ul.inline>li>*{display:block}.unstyled dl dt{font-weight:normal;font-style:normal}ol.arabic{list-style-type:decimal}ol.decimal{list-style-type:decimal-leading-zero}ol.loweralpha{list-style-type:lower-alpha}ol.upperalpha{list-style-type:upper-alpha}ol.lowerroman{list-style-type:lower-roman}ol.upperroman{list-style-type:upper-roman}ol.lowergreek{list-style-type:lower-greek}.hdlist>table,.colist>table{border:0;background:none}.hdlist>table>tbody>tr,.colist>table>tbody>tr{background:none}td.hdlist1,td.hdlist2{vertical-align:top;padding:0 0.625em}td.hdlist1{font-weight:bold;padding-bottom:1.25em}.literalblock+.colist,.listingblock+.colist{margin-top:-0.5em}.colist>table tr>td:first-of-type{padding:0 0.75em;line-height:1}.colist>table tr>td:first-of-type img{max-width:initial}.colist>table tr>td:last-of-type{padding:0.25em 0}.colist>table tr>td{white-space:pre-wrap}.thumb,.th{line-height:0;display:inline-block;border:solid 4px white;-webkit-box-shadow:0 0 0 1px #dddddd;box-shadow:0 0 0 1px #dddddd}.imageblock.left,.imageblock[style*="float: left"]{margin:0.25em 0.625em 1.25em 0}.imageblock.right,.imageblock[style*="float: right"]{margin:0.25em 0 1.25em 0.625em}.imageblock>.title{margin-bottom:0}.imageblock.thumb,.imageblock.th{border-width:6px}.imageblock.thumb>.title,.imageblock.th>.title{padding:0 0.125em}.image.left,.image.right{margin-top:0.25em;margin-bottom:0.25em;display:inline-block;line-height:0}.image.left{margin-right:0.625em}.image.right{margin-left:0.625em}a.image{text-decoration:none;display:inline-block}a.image object{pointer-events:none}sup.footnote,sup.footnoteref{font-size:0.875em;position:static;vertical-align:super}sup.footnote a,sup.footnoteref a{text-decoration:none}sup.footnote a:active,sup.footnoteref a:active{text-decoration:underline}#footnotes{padding-top:0.75em;padding-bottom:0.75em;margin-bottom:0.625em}#footnotes hr{width:20%;min-width:6.25em;margin:-0.25em 0 0.75em 0;border-width:1px 0 0 0}#footnotes .footnote{padding:0 0.375em 0 0.225em;line-height:1.3334;font-size:0.875em;margin-left:1.2em;text-indent:-1.05em;margin-bottom:0.2em}#footnotes .footnote a:first-of-type{font-weight:bold;text-decoration:none}#footnotes .footnote:last-of-type{margin-bottom:0}#content #footnotes{margin-top:-0.625em;margin-bottom:0;padding:0.75em 0}.gist .file-data>table{border:0;background:#fff;width:100%;margin-bottom:0}.gist .file-data>table td.line-data{width:99%}div.unbreakable{page-break-inside:avoid}.big{font-size:larger}.small{font-size:smaller}.underline{text-decoration:underline}.overline{text-decoration:overline}.line-through{text-decoration:line-through}.aqua{color:#00bfbf}.aqua-background{background-color:#00fafa}.black{color:black}.black-background{background-color:black}.blue{color:#0000bf}.blue-background{background-color:#0000fa}.fuchsia{color:#bf00bf}.fuchsia-background{background-color:#fa00fa}.gray{color:#606060}.gray-background{background-color:#7d7d7d}.green{color:#006000}.green-background{background-color:#007d00}.lime{color:#00bf00}.lime-background{background-color:#00fa00}.maroon{color:#600000}.maroon-background{background-color:#7d0000}.navy{color:#000060}.navy-background{background-color:#00007d}.olive{color:#606000}.olive-background{background-color:#7d7d00}.purple{color:#600060}.purple-background{background-color:#7d007d}.red{color:#bf0000}.red-background{background-color:#fa0000}.silver{color:#909090}.silver-background{background-color:#bcbcbc}.teal{color:#006060}.teal-background{background-color:#007d7d}.white{color:#bfbfbf}.white-background{background-color:#f5f9f9}.yellow{color:#bfbf00}.yellow-background{background-color:#fafa00}span.icon>.fa{cursor:default}.admonitionblock td.icon [class^="fa icon-"]{font-size:2.5em;cursor:default}.admonitionblock td.icon .icon-note:before{content:"\f05a";color:#3f6a22}.admonitionblock td.icon .icon-tip:before{content:"\f0eb";color:#0077b9}.admonitionblock td.icon .icon-warning:before{content:"\f071";color:#d88400}.admonitionblock td.icon .icon-caution:before{content:"\f06d";color:#bf3400}.admonitionblock td.icon .icon-important:before{content:"\f06a";color:#bf0000}.conum[data-value]{display:inline-block;color:#000 !important;background-color:#ffe157;-webkit-border-radius:100px;border-radius:100px;text-align:center;font-size:0.75em;width:1.67em;height:1.67em;line-height:1.67em;font-family:"Open Sans", "DejaVu Sans", sans-serif;font-style:normal;font-weight:bold}.conum[data-value] *{color:#fff !important}.conum[data-value]+b{display:none}.conum[data-value]:after{content:attr(data-value)}pre .conum[data-value]{position:relative;top:0;color:#000 !important;background-color:#ffe157;font-size:12px}b.conum *{color:inherit !important}.conum:not([data-value]):empty{display:none}.admonitionblock{background-color:#ecf1e8;padding:0.8em 0;margin:30px 0;width:auto;border-radius:4px;overflow-x:auto}.admonitionblock.important{border-left:0px solid #e20000;background-color:#f9ebeb}.admonitionblock.warning{border-left:0px solid #d88400;background-color:#fff9e4}.admonitionblock.tip{border-left:0px solid #0077b9;background-color:#e9f1f6}.admonitionblock.caution{border-left:0px solid #e20000;background-color:#f9ebeb}.admonitionblock .exampleblock>.content{border:0 none;background-color:#fff}#toc a:hover{text-decoration:underline}.admonitionblock>table{margin-bottom:0}.admonitionblock>table td.content{border-left:none}@media print{#tocbot a.toc-link.node-name--H4{display:none}}.is-collapsible{max-height:1000px;overflow:hidden;transition:all 200ms ease-in-out}.is-collapsed{max-height:0}#index-link{display:none}ul li>p>a>code{color:#086dc3}ul li>p>a:hover>code{color:#086dc3}#content .listingblock .switch{border-style:none;display:inline-block;position:relative;bottom:0;margin-bottom:4px}#content .listingblock .switch--item:not(:first-child){border:2px solid #000}#content .listingblock .switch--item{padding:6px 12px;background-color:#fff;color:#000;display:inline-block;cursor:pointer;border:2px solid #000;margin-right:2px;border-radius:0}#content .listingblock .switch--item:hover{color:#086dc3}#content .listingblock .switch--item.selected{background-color:#000;color:#fff;border-color:#000}#content .listingblock .switch--item.selected:hover{color:#fff}#content .listingblock pre.highlightjs{padding:0}div.back-action,#toc.toc2 div.back-action{padding:0.8rem 0 0 5px}div.back-action a,#toc.toc2 div.back-action a{position:relative;display:inline-block;padding:0.6rem 1.2rem;padding-left:35px}div.back-action a span,#toc.toc2 div.back-action a span{position:absolute;left:5px;top:5px;display:block;color:#333;height:26px;width:26px;border-radius:13px}div.back-action a i,#toc.toc2 div.back-action a i{position:absolute;top:10px;left:5px}div.back-action a:hover span,#toc.toc2 div.back-action a:hover span{color:#000}#tocbot.desktop-toc{padding:.5rem}#header-spring{position:absolute;text-rendering:optimizeLegibility;top:0;left:0;right:0;height:80px;margin:0 1rem;padding:0 1rem;border-bottom:1px solid #dce6e6}#header-spring h1{margin:0;padding:0;font-size:22px;text-align:left;line-height:76px;padding-left:0.6rem}#header-spring h1 svg{width:240px}#header-spring h1 svg .st0{fill:#6bb536}#header-spring h1 svg .st2{fill:#444}body.book #header-spring{position:relative;top:auto;left:auto;right:auto;margin:0}body.book #header>h1:only-child{border:0 none;padding-bottom:1.2rem;font-size:1.8rem}body.book #header,body.book #content,body.book #footnotes,body.book #footer{margin:0 auto}body.toc2 #header-spring{position:absolute;left:0;right:0;top:0}body.toc2 #header>h1:only-child{font-size:2.2rem}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{margin:0 auto}body.toc2 #content{padding-top:2rem}#header,#content,#footnotes,#footer{width:100%;margin-right:auto;margin-top:0;margin-bottom:0;max-width:62.5em;*zoom:1;position:relative;padding-left:0.9375em;padding-right:0.9375em}#header:before,#header:after,#content:before,#content:after,#footnotes:before,#footnotes:after,#footer:before,#footer:after{content:" ";display:table}#header:after,#content:after,#footnotes:after,#footer:after{clear:both}#content{margin-top:1.25em}#content:before{content:none}#header{position:relative}#header>h1:first-child{margin-top:2.55rem;margin-bottom:0.5em;margin-bottom:0.7em;font-size:2rem}#header>h1:first-child+#toc{margin-top:8px;border-top:0 none}#header>h1:only-child,body.toc2 #header>h1:nth-last-child(2){border-bottom:1px solid #ebf2f2;padding-bottom:8px}#header .details{line-height:1.45;color:#222;display:-ms-flexbox;display:-webkit-flex;display:flex;-ms-flex-flow:row wrap;-webkit-flex-flow:row wrap;flex-flow:row wrap;background-color:#ebf2f2;padding:2rem 2.5rem}#header .details span:first-child{margin-left:-0.125em}#header .details span.email a{color:rgba(0,0,0,0.85)}#header .details br{display:none}#header .details br+span:before{content:"\00a0\2013\00a0"}#header .details br+span.author:before{content:"\00a0\22c5\00a0";color:rgba(0,0,0,0.85)}#header .details br+span#revremark:before{content:"\00a0|\00a0"}#header #revnumber{text-transform:capitalize}#header #revnumber:after{content:"\00a0"}#content>h1:first-child:not([class]){color:rgba(0,0,0,0.85);border-bottom:1px solid #ebf2f2;padding-bottom:8px;margin-top:0;padding-top:1.5rem;margin-bottom:1.25rem}h1{font-size:2.2rem}h1,h2,h3,h4,h5,h6{font-weight:bold;font-family:Montserrat, Arial, Helvetica, sans-serif}h1:focus,h2:focus,h3:focus,h4:focus,h5:focus,h6:focus{box-shadow:none;outline:none}h2,h3,h4,h5,h6{padding:.8rem 0 .4rem}h1{font-size:1.75em}h2{font-size:1.6rem}h3{font-size:1.5rem}h4{font-size:1.4rem}h5{font-size:1.3rem}h6{font-size:1.2rem}pre.highlight{padding:20px;border:1px solid #d9d9d9;overflow-x:scroll;color:#222}pre.highlight code{color:#222}pre.highlight a,#toc.toc2 a{color:#000}pre.highlight ul.sectlevel1,#toc.toc2 ul.sectlevel1{padding-left:0.2rem}pre.highlight ul.sectlevel1 li,#toc.toc2 ul.sectlevel1 li{line-height:1.4rem}::selection{background-color:#d1ff79}.literalblock pre::selection,.listingblock pre[class="highlight"]::selection,.highlight::selection,pre::selection,.highlight code::selection,.highlight code span::selection{background:rgba(0,0,0,0.2) !important}body.book #header{margin-bottom:2rem}body.toc2 #header{margin-bottom:0}.desktop-toc{display:none}.admonitionblock td.icon{display:none}.admonitionblock>table td.content{padding-left:1.25em}@media only screen and (min-width: 768px){#toctitle{font-size:1.375em}.sect1{padding-bottom:1.25em}.mobile-toc{display:none}.desktop-toc{display:block}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class]{font-size:0.90625em}.admonitionblock td.icon{display:table-cell}.admonitionblock>table td.content{padding-left:0}#header{position:relative;min-height:98px;padding-right:210px}#header::after{position:absolute;right:0;top:0;display:block;content:'';height:95px;width:203px;z-index:-1;background-image:url("data:image/png;base64,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");background-repeat:no-repeat;background-size:203px 95px;background-position:right -10px}body.toc2{padding-right:0}body.toc2 #toc.toc2{position:absolute;margin-top:0 !important;width:15em;top:0;border-top-width:0 !important;border-bottom-width:0 !important;margin-left:-15.9375em;z-index:1000;padding:0 1em 1.25em 0em;overflow:auto}body.toc2 #toc.toc2 #toctitle{margin-top:0;margin-bottom:0.8rem;font-size:1.2em}body.toc2 #toc.toc2>ul{font-size:0.9em;margin-bottom:0}body.toc2 #toc.toc2 ul ul{margin-left:0;padding-left:1em}body.toc2 #toc.toc2 ul.sectlevel0 ul.sectlevel1{padding-left:0;margin-top:0.5em;margin-bottom:0.5em}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{padding-left:15.9375em;max-width:none}body.book #header-spring h1{max-width:1400px;margin:0 auto}body.book #header,body.book #content,body.book #footnotes,body.book #footer{max-width:1400px}body.is-position-fixed #toc.toc2{position:fixed;height:100%}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2}h1{font-size:1.75em}h2{font-size:1.6em}h3,#toctitle,.sidebarblock>.content>.title{font-size:1.5em}h4{font-size:1.4em}h5{font-size:1.2em}h6{font-size:1.2em}#tocbot a.toc-link.node-name--H1{font-style:italic}#tocbot ol{margin:0;padding:0}#tocbot ol li{list-style:none;padding:0 0;margin:0;display:block}#tocbot{z-index:999}#tocbot .toc-link{position:relative;display:block;z-index:999;padding:.4rem .6rem}#tocbot a.is-active-link{padding-right:3px;background:black;color:white}}@media only screen and (min-width: 768px){#tocbot>ul.toc-list{margin-bottom:0.5em;margin-left:0.125em}#tocbot ul.sectlevel0,#tocbot a.toc-link.node-name--H1+ul{padding-left:0}#tocbot a.toc-link{height:100%}.is-collapsible{max-height:3000px;overflow:hidden}.is-collapsed{max-height:0}}@media only screen and (min-width: 768px){body.toc2 #header,body.toc2 #content,body.toc2 #footer{background-repeat:repeat-y;background-position:14em 0;background-image:url(data:image/png;base64,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);background-image:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyVpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuNi1jMTQ4IDc5LjE2NDAzNiwgMjAxOS8wOC8xMy0wMTowNjo1NyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIDIxLjEgKE1hY2ludG9zaCkiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6NDMyRDZERkQ1MEE4MTFFQTlCNTJBOEQwQTM2ODZEQjgiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6NDMyRDZERkU1MEE4MTFFQTlCNTJBOEQwQTM2ODZEQjgiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDo0MzJENkRGQjUwQTgxMUVBOUI1MkE4RDBBMzY4NkRCOCIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo0MzJENkRGQzUwQTgxMUVBOUI1MkE4RDBBMzY4NkRCOCIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/PjdyLKIAAAAPSURBVHjaYnj16RNAgAEABZgCz/xXiToAAAAASUVORK5CYII=");background-image:url("data:image/png;base64,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")}}@media only screen and (min-width: 1280px){body.toc2{padding-right:0}body.toc2 #toc.toc2{width:25em;left:auto;margin-left:-26.9375em}body.toc2 #toc.toc2 #toctitle{font-size:1.375em}body.toc2 #toc.toc2>ul{font-size:0.95em}body.toc2 #toc.toc2 ul ul{padding-left:1.25em}body.toc2 body.toc2.toc-right{padding-left:0;padding-right:20em}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{padding-left:26.9375em;max-width:1400px}body.toc2 #header-spring h1{margin:0 auto;max-width:1400px}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class]{font-size:0.8125em}body.toc2 #header,body.toc2 #content,body.toc2 #footer{background-repeat:repeat-y;background-position:24em 0;background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAMAAAAoyzS7AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyhpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuNi1jMTQwIDc5LjE2MDQ1MSwgMjAxNy8wNS8wNi0wMTowODoyMSAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENDIDIwMTggKE1hY2ludG9zaCkiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6RDE0NUNENzNGMTVGMTFFODk5RjI5ODk3QURGRjcxMkEiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6RDE0NUNENzRGMTVGMTFFODk5RjI5ODk3QURGRjcxMkEiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDpEMTQ1Q0Q3MUYxNUYxMUU4OTlGMjk4OTdBREZGNzEyQSIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpEMTQ1Q0Q3MkYxNUYxMUU4OTlGMjk4OTdBREZGNzEyQSIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/PjmGxxYAAAAGUExURd3d2AAAAJlCnKAAAAAMSURBVHjaYmAACDAAAAIAAU9tWeEAAAAASUVORK5CYII=);background-image:url("data:image/png;base64,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");background-image:url("data:image/png;base64,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")}#header{min-height:150px;padding-right:310px}#header::after{height:147px;width:305px;background-size:305px 147px}} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/favicon.ico b/spring-cloud-security/3.0.0-M2/reference/html/favicon.ico new file mode 100644 index 0000000000000000000000000000000000000000..1a4956e64705230122da8c19d762a7f8e6971533 GIT binary patch literal 111804 zcmeDk2Rzl^_Zg*0(k?VKlp+nIjEXXol|<2^RLG9-q(Z|kLP(+_DLdq8$xf0aqs++2 z-rxVZqW??wO8vSY$NS#zU1!|y9p|2VFAhh78;?Vd1h){klNpCof@eJbyMM(55?mm> z&B-@@0PYjbEofk6lC?XakG`%^LnA8Hb2|y)UbNjo23;MJ1*|O=arAUO_;NA_N!B^ z*SU%*7Sg^ZvB00+CB7O@R;<-pgVW|+t^TxD`9`Vt`1cf28NPLtDQ+hDJU2veHezY^ zQi`lBX|+X1xgXRpo_)4ylGG=m2?Qm@CH^r=LG=?YMdw`*!BKBdvlmh1W}$HW+%(s; z+If?c7ETT?%1-liUaq8bTJ{o7mM@yDBon+;;^rvcELEmvu_*TWnq7k1O-dhTwEMkp z-R_hvFVq$BG5nt-ZXm){7iQGqL2u2 zEfMMx_N2p=<14Qvs;Et;-Q{aHaUq|S=-kQjB=YC03vc8*s}d+9a1qOxXKvlL48Krf z!x4t0N!U_FuVTG}0u+^Ex%|1JfZtM1_dSbfc=1xAYjaP0FixxW-mfLH){mrNNu_@NQC~j3lb#Rmmsu$Iy6l<6KGGR?3ZQvzbWPanFm1yd1Y?nGStAzcXj< zvD{P6Y5SKzvc)v`*;1k@WDcKw8#MW2mYjZTT3wYZ?ws~yn-)t7?=t+NJ5C3mW;~Cg zQC8c`$XP>%;fz!RKJZY}iZIwsButf-oQ`+K8(36Waz4zZ&D{?Pg|rsh2rR?fg|2K1 zB2eKUdgR%hEum+piQb)J(y%qnezW@;DKek@C97sjORkCLP%n@@TwujNo6K2Sw9(GT zZg*hAMt=sW^D%~#ftNzLr*fH69ts>tC2Jwod#w}{Vov#zMq1Jq|BMj7(Wmv@t_4d} zY4Gb!0CgJ$mCw3b=mnN5%RE^F^{zPs~f6+wZlmkxQsz#NAIX+gSWE#TgIqY>eaEku zRCk0oAp|ESdY#IbqI}10qhorvOmwA1PfMiPucs!tip6TS=0xDzeD&;n;hD6TW=L)%Q01$y(3(9l zm#+)sq$Qc|d9{pd;CfUg94%u}Ef`(9X!FYrQ+NzNE{)!-C=v*GGd{~WVVmA0!M=I& znJlFs-SIxWAaau%1a;At)f;^xS@**&s?`@BwBTmm z^SV6w-IiM$fzX4yHWYXheDM50*T?G5p*AS*GU4eNnXM@$+n6sa_LbA67lO$ zs9;Q(_49iEn8h!GmMytHCf`j^AT)irYRXnbTCL7Kt6und5Du!s!CmtdDcUY;?n+^Nd0RBs z_mR&9CPj(p%~Lo-gvIxgO=R+z4qt8kqE%5doZqNd7q5v`{4AVWzWu@c$5i4MIZVGD zv&$-b%wp}nco~SRYPHL{S|N##p%GsEJ;C{!`|bIxJO42;*Vh^;D$*EC`|p-lfEKHk|v zyds#%Eo#rRYas5qR4r@eW9&QycG>QYOVq^X+bvpq^vE(Ni8)12WZaYMNuJuGk1d)* z%~+q^a=D<5J4+Z|u8>>rLqnV5isb8`RI9K1)sBmpY*r}e+ZY>90qT-CDr+}xCwa}_@O|8g(`URP&vkm* zY_W@Oo9$vjK^4ZFJ(cm+yW2<#GE|pOw75*3tDlW+)<~mc+<94eRbFr-PmHbO%xih4 z^%k)2OS4~~7C+(0Pb4nKuT|E_yG$?c!X>V?!ajeu^--2L8R_fv(x)pXt5;C%g^p|n zZRMtqBBz-IA09lYKMo5jwlKfbg4-Tx@vuC69P_ur*60ZGhL!&8xe^SFTMcjKOQ`N^ z(0pV2h>V%Z{AE}amH%_+`teKQOR$~TB2`1NNbshjpg`gA)beM0Py6^g8*cliPOs?6 zR!?$Pdm|O@)0ftTf(OdWo+g9mNez2o|Fq0weZ&It0QSmbypv7Y{rqGeuo`>vYA%`kwczw`n5_NMwr@Q7t#Or?7G7NXFFIzM0br}}GK+<1?v%-!S^JS95_rTcEuC=%iTq@~?J_F_tHg~Ct_j&`jGteGu`8|QArv!(I4~F7 z^U^!RSD`tXP+P{_+$=1=sV!Lf4j=Y(_M?#AlT67xQx%x}^FLK;Co4@s5rVmBMUOtxT_~V4+8y;d(wh;$j ze{sBOFuv$&4sY=7U0Uo1)^Zx!hLh)>@={a){BZV-4RnH&R+;XMIolEtR)1MJR3|C& zlw>2xcIC&0ENq$DUySA{Fq7nmM9p|Og_Blu2h$PRj1BpFFY=i!IcG+>#e#iyUKWd< zSvu)Zr5MTERD^iV}rW zW?kEJT`Ck8x%2s?dYk*~CtZLNote~XayYg{%8gga9wT8Q6G9Q`Sufv}DqQ2qYP^W1N}0bFM=M_S=Az(6$72uOWFB<-=Eit=i6z4b1aJqz|NE5m3R13$cg6MBb zEW=VyYe(zLrxgvhP8WPRLqg;j!`#&j*O@#WQw3OW9}rBiXUq4H@?gArLUUQrzNx0V zq8yF0uj4$wODt}!(>!Yh~^ zmp4BWe(JgOh`~G>mIJxWoyt4Y^G%rQ*7QA}lcqP^Y`YI_IF@rsraXv$# zrhgeBH_=UW!3r8)ob8llg)>($&C^_a`q)yF*(+W|l)U7+oOENl-j@Awf@`!Ka39+n z*YPh;i>u1VufH7-n9o{h?@FIqogf@tP+XC>r@F0j8J;1;&Rb;Hh8IwQn#YIW4yWfV z%6AHo-Pk0gbcI`n+t2PyaHRgyyM>k66OshtG($2b%phxq0pixjYiB|`l`!AH#<#&X z=N+AqS%IYL~`pVkiIB_+qSM`D%0vGjsfw0i((H`(^}4W;l!zO_gLoax)d8( zR~p`lE?QL3U`TxwnKSLd$^fND5uZ!*Z_m6$$$yc==iYwr_tV?>gC0q2_Onx0Ati*J zJ^E31V=~L$(1;ctFU!3vIcG3#XK!k5$baR$;?R>Bb%&NaN%%7`q`t}I){|j$al#c& zXg;_2xl6>l(8FAVfDqI`~T&oTJ9)U5W3 zRWoEH&%UpJp4uYp>6+!Kmu02gxOw(4z9J`t22PY`%iI4*VltoE;ur3bG4BE%9HCO4 z;kt@x{H5j{R{XiBrDD*KsBqUiwL4{;JbS^$%ldZ3yFBOACS^O|R>a?6WV*24E|XkQ zYQs_k_i-%O*&mY}eLFu?UzhNu$&_)G^U9dpQ(+UQX3n`H5-p@HlNK6o9T~!J=XZO zzHw>MCCV@BEXIf2$a+)5`^4%9|9aZWg1GRxSNE-fx??HD_O-Be$p_^qD4(=Ry8&8C|uIrFMc@jzH_dTe$#p` z>!L%l)IO}om&M0LF>y{|O!9r-tXsFfqUCG-Vbkl^Z_P+KaAR>wuFgsg;e*ZN~ zPDW<(ypofAF1))Hq4VYn4?b*M5nud?l$VYIIL_RXxJ?4W7n>w)JQ7wp8)?VIZPKS@ zqBFQ#>>uGp;qk=aqb&byiT&&fT5}{^WP`*GNw$8F3>Hmv685_-pmo&y+iTXHmzrh~ z%sn@+xf8*UV%6PmvSF5IK6%8Z4NtrvmzQU>qVRsj1%MbJ%4`ow8t~+&k36{vFDavtG!S17|0(s zY9_0xt$&OD>q9IUsL$&u*svB=UDHBf9_|2wuRjA>8n`nMrRixnZDH(IhZ5NkV z8c{I&8aUGI)AlY~m3-&$)+eDHSVT&CPLZnS4ypa5D{eiQ&Kcu0!#F$Z+vfSD??SV5 zjWT5T%-DQY%`%1Y<#&W}9EBoZMUFS@g z!@Gz_EVvcDKyQm}{&||!W{r6--9EFoK5`?!L09VO%x6}7)zVIXm8<6tDy^nH*I0mF z%^mS!Ew?L+zp55w1W~>Im|3WUeYPpGaoD|>GvPojhyE9xP{S$j?@>HH!zAX|I8G>V z$|GwJms>f}lij!zZU%2tt(Ti_yKC9@m{+NFCh?msdSNotpe;#`Vt;LD6hn~x z`MhhFC{vH0+;_!Qht|r;86U9Sbu}kBBjpL7{n5gkjPp)KQHE+&l@)7`Pr0do|8_uh zsvnKM`))1#GeK5I$Gw4kQ1<0byTY#)ZESmcQY?yO^5i6o$J$Gsv$XbW+)X9Z=C)t@ z+}>pzbWbL;83gGToV@q>ZV(Uq$#XfetRlzuta`GNQ_5|s?!;-|R^u;HYdm+G!8!H* zj?*f&Ty*sHQ$qv4?v_YM3AwN{pom;ugvwt|e4-1u=Z4~dAtgM}&fE8$BUAEdpZDqOl=B5VJ;{8FZgg7VyDavslW z`3P+$mf1B~-4@k)~ba`KnO3Ae}@;ENqp^ z<7Rygk6LT*eQ7v-(5T|pU!;6{!?uPMVd-%K8G4k>C z$DM@V_y;d&vsPx~%0ISjL5RJr@ZC9K0uWy_H2P3bISJ*{qKS%j#flWdYz5|&TP{kh zs%yF7pwp)GO5D&?G|A;<+Co+f>NR#VB{{B+?p)oT-ZtFFN3 za@^VISrk?4Gw=F>rG@Hc2^BFPmlTm**~C@$fu(Xb7d}y?0;fZ%aJa#9`S#X(1rl?# zbwaAX#x)!IwOEW_!j_=7u*9uCT+{uCnfJa@iZ+cZ{<`rny>qA7BQh6pif^CrhA4$* z97QH&Lk%~r`o0(YW*m93-`FlMk>Xg%H}=`N-ekrcr-l5ddYE!w7hlu3`t*V1huSR~ zFUq)OjPRFU?vJtmypG>(tH4*Themg@=8tc)%~d_bAix@TJIeE>VPKK;{)|RBH`ThS zj&4!*M+(v{xX)W>$cDp*w-Qv~JeBdW6BRckEjr7Y5>2L2OCNj7&sArCcI6x&%gBoK z=J<79>IIi!wzT~fdlT(f)%Ur_>L1$~H-4Q?PzqwB-eN^YGv#3ljqoHtKv=J3Nm@l5 z&&u15^9wgmOEnasOe>qCq90(jv+YQwcO}U*YO>1aW?G86ufdzy=9g*x!uZ=PtDY1OcAyKVIIbR{l6 zm_ej?(`eM*-|+Q#M%l6Y9iTq9_o`)FMFvYMG<*VP?ygTL;d3D6XrgUVP8V)Tp0vR| zPVLS7&?8M&j7hF5n(Ut*%==V7_w)5v&8BRj;WSli7Dg!ZY07NNJue`B_hu`*u`ISi zjw>g&?xLVtZs9R17H;DU#gdbpMPqp8s?-}mB4OMEvJeYyn~llB^Mu!)C~FJR(~hAD ztQr4~bbYbbNA_9@``Is(Jy@a9%ErUryP4S+&`#9y34N}$ERG4diC{Nu@p)++#Q%JGh-BR{> zdW$5a_DI%_r!rR8+_f?aP`nTqejP@|#i^54?T9i>+s3mr<>SekxAQ-5Agru9r?ROf z>e~{2GZ5|RBdK{O)IKh-uNv>yn0GgWN3s5)7{|LWr)(am=AP8uw0S8$o!@QOHeH&1 zTxA;4xpUs;6&JSB8W$=wW1mwmb8Qn`KPT)|iQy^PMv~q1XO7>=!r+@zeQ>w7eB%e- zx+N~_5AQl>l)EROVo8MOtKeHo8>}L9*I^&)&%9n4wRDk1rc&#A)m6rlJ66wE;h`&8 zYFr(7=niEHGs)K3g`3{{-w@9zSiH^ptf${?r}W@fOEIxC3-k^wk7c?2El8H?Wxk`4 znqfq}n%1VK&1E{c2YMekq(~dqRjwnqq}=>IbW`P4hMSz>nR?1alOqg@)wVRhq_=i+ zj9;xux0rdgk+N0!SJk{*&$jJ<7gO$ODyY+$3l!E9<+m=-2Q=T^RV&rGvVNCB+ zcdVtR^+DwWGG>a%DyxT=^PDf8IJK{l2&Cp}X3JX+<)DJCoqc|seUBk0=0<`aY z@>}rYN8&$GoiAA)PMFLsB4)%~I?`;s5}95Z-jc}gecy!`sw(zR@+4|sN$85rK# zVT^M+?n-4Ap1Ps!D5^ypPR<>hNJZgcPr?s;#*lNU#b`AN%~}y-@`33z3Xg{`CdF=WqFhKj+Id3 zPNuEWQ?5{WpSqyQChwNS#W15ns#xJwvkXh9Z$X!+TNlOpG2V#HzbScF&9g|t1`~oB zziZ`(XBFm~BhCfHh8;}i(QAmD-&oc}Z+5#XId0#%$CWaVs;H{!EP1AGD57VVY1IGV z{3zn23=dh$glVkO6@`zl!r0I5#7>%14WaK|>)X$i#`5h-jHd>@=Gz52Kqh)!GUaRg z7@KOABzN9 z->u`ar+5!ZX041W%&M0O=CCXE&WbPo$mqdy!8{KJx+T}J+QOVXw(M(P;%@{kpJtE4 zac{1n0u|r+2(krRp=t8vsAS%q9+CJh>4QJLu}a+uKbN+B85Pe=gQV5`!%x5WW|G4_ zP!>z8ZMM#W^};!O7M75OKCD`UhAP?(j&HNm61<+#`}-9d>TEpulKKgAbFyR2_-j^C z7BBLcXSbf>^DVUGG-`8mK2~yUe);Y6Oy4>leL24e$?xd+6r=FQ6$UnUZ(Z|9pK4Gc zF>kA`!tzW@U&Sn&`iwXJ7wBUA*)DDKf(3-*-iB^AvU&W*Ow?rsQ=@9Us^||m`bC*G zI^nXPhh4~BPfh5Pp>s*n)31IAcgir*S~~wY_d$ba-dc6F6RzxdV0z?* zgL--X`~p_>XV5TR2nkrq1&gcUhK!ls!Z=u;^Lxr6vCAAZHuX%cWXr-pRv1j zt(@ikg9dr}H*;#1$BQKt2uoHR6j9}4+B!4El8rt$#Y)ZlmfCy$EOPrP>9x8n#*fn@ z$y?@3d!yu2s*+oF()jb)I61xr+@ERva$?^(%{<|=PgFX7Ke_xHgTt@Cu!rk$C^()m z70KOS3_XrjDIL&9wz=?l0R_)q989x6ng^)ir%mMK%DG;@=Oa@ci+xi0ZXH^=cuSh& z8M{L+Jf5&m?0}TeM46q9mM*z3D430!CeWuxlqCw!H%ak(xQY8)h-oW5ESo-D%}xIa|i3%N?4 zd%$=lPeTSN4i*(vT&l-S&_r{7&N8{h+a_H4aBay~?kCr>w4L8)`J234A-nE?PWHhy z_d>5;&X-TQ$#<1@gU@M=EW>Oa!aXvfle@zeveuK$Jy^fElFOa7h2AFBz)ZoL{T5SU z;pC%bCs0G5u`k3VtG1Mbv&ON)eBB4uYXx?ySJ@g{)B)GzlPwm^k<7-Q)e6jT?d);6 zRGs3^qGU)~;Oc@U7(UlFV0pGarIMPX5agM!~)FwyCT zEx0=u-}G*ttGqVbh9|4d>Tf2h@GNFRnN|M>6clJJYB18#V;e z-M*)~uDK-GKjak6jt^FRN9?j`lwT+$eLm$7dy(G#!?kCdA6D&Dh-z#$k%dL;8_a4N z%lAxNNb`PN{<#vtnfFPDf?K615oZdp_8Z2A3<;%p`_U)`oBvhPjrfxhfLCAO!&k*FU~t1Zxu-@0Oup%8Kf2FC2~BbF38 zRl9=na>Ma8lXoca$+n$H`Sjc#`>Jmtqsx<5!MBPHdVFQmnZmE9<6vRZPTg|W`tkQ) zYz_v8BoL;esnIZSRQuBn#TSi(2D0w6AfhueO-w8 zPWLxTK@}5~Ug_X1Ttw_gGgT8ab`$ zXtGa>VS1|8xM1$j^(S{XC!eL2drgB#PBlp*f0wprl8HFui-Z;Im%i{T$1gK7PYaT& zuJTfNw4w667f$pf+b;J~+=k8V7{9X3amMMi5(%ZJ zw5mV(IW)?oxtV@DcZb#y8c^Nyi{I@s+QvifLX|N2(^>{LEkZ+$#>(o#bw~2AS2=TE zM#4=yDc118M{PyUMCk&vX~C#2&ov8hR#$mNxtJu$*@b4EG7E>=M!U(gZLZm`=JX8J z2)uidEto65>G9QQrrppb&c47}Zr#piKavakUP@K%yO8oU-z7|hZmrd$vm6==Epa=X z@97y7Rr_*%b5pdcV7ILHGv3A7qBp&&y>eEV%-8SyXhqafx(Pc9%vgdDE3V^w$1$1MuUi{=Hs0%uX-m!8XHSB|Zds-W zZ=NZTylN3>z~cgxBy89m1kX_I1_wB>-+)Q8gmhCKR<)^DS)eo>3G*4Z6 zqFsW*c$rp1Y_`yvyq1e{XH@I_GB9S>oThmHH5y-hplP!UD3Xx%w|>-;q497^w0_g$ z_d5B9-Yq!oaKHBWvkeD?XR@R!1)1F!R@u{Dhj>WK>uU{*uE|rs-iw=0^(20sv(YT^ zdJ2ui45|DiZ&qXKLpwyS?o%IET5?QzN8-wj^v&n)Yx^86t2OXiZLEcx3^lSzolc5R zERz27*JWoOhN#_n6 zv#*@N7igD*!tNQTP5ouR$+`s;B&*T)CSgML?ckLyx3URbm)w@cu(Ian>C|giRT{9V zN2GdZ$dGOX>3&&~ba-!yEa-@*mOi{KnHKWSKT36S_;EIWp97KBM_y-55acmdn;?k# z+RM*5_PeX!NngE^-E5U|_T0ccBbd{+J<5x66wK#Dy$|k)5XJ z0V=cky8cnemQy%|NT#Q);Pj1lh040ffRB5@0aNW0yPK)O?h40^+f2#tEFH*nC+3ED z#O0{+GbCW zUFsY09fz7v&D&&|@>*Q@kn-v)`(o~v-SK)DQ=z?67(mu6q8 zzJ|j{=t#0K6TzLz$ow?pEm9#IC>A6i6|DGkDE1tk3ONUbsc=`5m^K>2q1;Pv1geF)`LJec7$lFKg!}%+cCj!%16sZU#d-QBiJ5t{e56 zIE!_(QqwZGD2r{PjXbGU7nqWgx!pi*)k&@^fpzOsKV;I0i>aPH%;C>{QVojZTvWWBNzk+g7Xq`F91F_l^k6jyZFUMtJqZt(oy`cbBy)hEJBEQX zf+i|LhdcX|ydHyl#)YM^J4#K2L3ku7Cgh7t9$bM&kmr;iPpGIClf*~8@q1>JU8O$= zt7FjP9?q5FRSYl_vQ<7wxWCbdOX=FuCm;@J#W&mLc*em+r!DoIL$dT|Le z$#`gGm~rdW{kAd)Mps4=BKG*SOfy}LCxL~zTo<`qqs2!*(=gs!K&lEOG@TTab3zHr zP@o8z>$9*q77V9LkL89#L0&PIF=x=w{>9~hrRuXEZCE(<{=5b-)imCxweZul+3ghB znJhQq2Xnl|JL!{-w>BSamBS97x{AvUpgX5PLPzolOj-HQT_v1^;iYLY@6*-g(+SW# zKQb{>ubXck=Do;PrbIn^h0zD4pqL~4=9%qu3FR8&HThx|pBH6QB%=dm0Vo}*8Ov!< z%A^;kWp^#&oW*#!$z(R39_&P0JxndgSxH=;r|IVI&7~mhN%jcvw%(zAG+&67WXhJb88qrklG?~vsrhD4g^@8Mr?tScc1zr~ zI0szL3yzvS7eyio@q{ISe`K+uhlvP|8;pY&RVol}zhVT#$cZjXc-;WS9efltqK8Q< z?d~xyB_tB25(HAdJ-@3>cwmAoV0X>3vS4E+A%CTPTAjO6I^FG&r1;S^(qyt^7=m5_ z0(2nI<{smD!c~GaVF4ty-k&R)TTdtj)6N}Qybrf7!%q|6aD+*HL((}GS*^|DcW4^e zDyJt2f!VD49tIlTIia@E=l$H)S#PuDI!5{x3_O(rKFIM?%qTrfI$<5G=$kO(Ci$Oh zC_nYyOp_ry)6Y#hCHT?KK)Z>&EYgw})t8;U%`Qjr&}AB@dQw`$#LBgmMw_ohTJf=x z@XY~v;bjRY6qm8gUNM8#fnHzTFU@~kQAmrBqA4hzXVN;>aDW8^)bH!O94yq1EwmebdlVc<8aS z2d9Zi()ugxF$w8;F6(d6Df2(jYz?DlpYYYn>$d;x)K;DlNs39|Xk9eGP97)7zmv~z ztK!)e@Qg<^0G9wH0cQVU z?E2%;1)fg?K;NSyKsLZ|%XlF9wL$r>0Z@I|0zmf1Gk6RV0DPqY5CgaafZFMS$Y?a< zqQ1om0M&(meZ>CY}_0QJFN0Y+1f!%-G$n~VYG4UrB1spP;f5`Y~5VF1G+hu@t? z6VTxWu<<`7$N>@y{6TUT2S@?<-7*`g@*e|jTmxjyUmqQKA^?#57t6hCeF_I!*Z%c_ z?Snwz!76~irJe68wY2djQdY*2LN|6;b3j^V}wgJdM_Q?Bn;I};_p!17JN3f$U;jVw?*Oe~{}F3TS5qD?{#y4fn^^9|&n>O3 zm~q^V|Jrvv9P}c4gb8E0Edc!JZoUtFPb}~5o@<)wF{v>9;o!-CEsrSR@#L{s2axOm zatms{b|>;*-Z`Z``mf1uxadW;Nt9!$4s^&qOFTrc`4>U=@ZxEH%5d@HznISp;Q5$n z2LO**02u(7OqgL?590pibxdJek8;}{sER2QE@9TmKA7i+FwE-p9n2u+I;IkR8Iun; z!NfyPW1_*@m_X1e$m8TM`RoW(!vupgu$>_~m}ICvw&$@Cwm;%5cIe3k>}b?Q?8H+` z?9_8xOy}jb_IyoXJaQr7CU!B&6T6b^h1sOs#q8erw8OQx_pz&~zU|Leuf5yD%@c27 zrtxl=!K>?-2IQj*c_O@a2J8HS3*yTNK`7)q{&%(mQ2rDEq_=FR5y`EpvF;aHclY8> zW@NwkvOm%kb4w4#vMLL^%Vx~IYiw!43aY#luHH>*eUzY-}_n7eafV@tqnUIW!5kGcjk+J4?H>FUKet{757=jSd4(? zJ|8OzvB2CI>{8NgOb*%%V)_R8eBpPr0f6h}?(mfe)y4W61A1jd44Li&k>{}+?*g&( zvQJpQJDo9DDe|jJF~6**nC5dk4E0;x@w6ZB6h^ZS06u$r!)b505tjP(R~0~0YYXNM zZFzTnc5nIh6($S)yWJaK40KLdGnDbCy0ZEz%;#g&VA@8spMiBW>Hw63)^hq`gL@Lj zST@+r_rch`tSHR(%{@%!vEg9rcfZr^f-&DY=x-zQlCbKg{*6V(Vtq*}`GB2)@#O%% zm28j;^+?tM$RDlY{xR!#0)gt7_6vLLLH1LusHSWzin&jm-j{#IPRBU*xBmN%u>6r8 zy1%%Lxp+qj7qQzJkFifxU;5=f${0u1gx>8-|EXAWi%QAi7+;h z?tT3v71-J9@9{!&+Y?q5iqN z3&2Y2D!ZaJ=KLjqqjL1c-sqPdjtT&>WCR$Joh}-Og?@@16c5o_VO;Th%pK+tXe=iZ ztl1mQ!xAPKqz<~^+gKjV&BwBF`!xsdLyKr17mLAsZz%ZnmKNz_ETA5Y<+%guv-F_v?17FU=>{QBv=6VRy!-V& z2y~qz=~~-bv3H;Y^!o4^`f+>Ev1{}TuYu4d2zqrtV3AcZuwHn)!@ z(L7|R_GhS{LArXhmN}Ljs_WgzJ-R0ZuJ7lLZ)*X^t(w9u^GT3|U3eoMB zj{fjK19S&yE;g22H}j1<>`h!99Bq~37EU}|cT+kRAtrsCZ&;Zt3e(*;k zR1bSm^tR7(Mk@l?Ut?k+zvx%Z`Xhgk`x1cG!OCAc%%EMjH(Im~cR9IWTVe(FUjx-M zpmC;iS^(Ap^O3RO?tdiwsGl9OEQMc+zUlzPxinbWqjXnO{l)_ML&l-9p$2S?f-vy` z_6^9U5RJuuw?q1M#mIAA>p-tML69FhJMqg<tp7CaS2(+jD*E1=? zJZvoJ4pBecMV3!``~D%WV3+t^)A#B}ZRVeBf74sVLG1x*+mLR!KRiNXf;ZjRK=oF} zaEG;lrlO0TC0f5-&{G|NFwg$b)>9nyXV$|_!kEi157ws)W1ad{2hbex*)Zz92g3}c zuj(Q%&FrdCyGNHzu(XP+0TC$nZKo6q-#cF{=V#Xk&Qt>&dc9|BP!G>?IE!YQ6Dg;YaM`h z=xi3^cmsZZ3440}i!P%guWLWs4ew53kFsC<7WN=}w=S|h*p2)%yTs|5rcZy`*H6EN zzOhg!YG=_JVQ;osC@duR)o(!;t%VWE_b##g;r%?KFyeRvdd{va`Yp7Lr9u-+GQiIL zr~dXQ9wK|D=z^3{M;Y0@63H0N@qe684bOXs!ieJy=sB-yY}?C>7SqeYuCW)poc4Wy z$)%&KCqersyT}+_5z_A9y?vLku5tV2&#C+~_vMX5y+C#;uCPC?r}YGJ&?lkw+R=0} zVP}Ztc!)^;FNZ_^@BYL6e@}8G2Wy}IT<;t}I>R%u&cE;&*(Q$0nxPWxdn1xJ zFFe~2`H8~@{EYT*jV)`q-evK-LQ#K@k8}Nnzba2JkN8*s?Tsgr_W^kJBk~i64eI$% zJ)32;>jG+v&&Ip`!eewk#z;E1_d&#E>Vxdjd2+<>hV<+Uc1QnQ|2Tl!0mCkR0a{B! z>j@*}x~vDI{ru^}DSvd1%|F+F4j|i8P1v_YECVHi#fbF-XfGvES@+->*##268`3k< zZ;v&5=>ALN_ryf=0_A9npZI>~L&S(6lUY$fTuv0ozIr(2kMct2D*ST;;{ehRpmVc2 zWr6nbl++FX*%Zh&yt54WeG4$`_a*NQH~yn-zy~I|;fsy*gv55|=ip4z;dW@9nn?ad zM9;+Uhy0B8Q~YxS=fHQH-S21GqCExa<->1NL8JphcaIHO*4^cS&gvX1dm#och2NXP zG1dQvOwgXB;dWyG-_wBF{vn<1(Vgr&-;MO%|KaA#Sji9R22MV+`cVhac|XJH(3#ks zGJ@Y>S^Fc(??>KJpbz{u2KK@XC+|ipFLdSzI?EFARRh)thtuu(c`dS}JJ}7_yNj^D z_MaOZ2f~QUZaJ=GFJLB7B_7u%SZK{-b^2 z&%2Y^aK1xlf{*1hl!lG5Baji&rJ=ptNH08GJlqwc*V#v-{XP$dQ`SA@bp&i5`a1h> z1ladiWa;}cx?NtbupfCi9MKtB`5-Uro@6%M?{#9XVMzb*&kc+NXg+}UaiVeCP|uq| z>51g}4xZJC{KR1+@@xeC*l5|i4UEfUJ9b=gdb>Ol;f{l$I5Zz4l6MR|ixK&W!$$1+ zG@NT+-`qG9GX9fk(fOxCJyQ?u(IArdLwH_FMDl9CTO9mD-uq3ICvpD$envJg z@5*uqOV)oT9kQ>zlz4a0^rHI+iDb2-|NcbpQ*seKP9_-TpW5r_YlXLL`db;>=g@DIJSX{75QI*SV3BRLp{>@z!L zjm`m?h`xX1;CaaBKMZ#rLbim)pf5mkU$me0pZh-t2D`2*7mn|ge{Q?rJN|*}kS%a$ z*qHm>4SSc-`BKSnzTm&H;{WTxK%UV3n?z?7g?5qukk0-a&ANlmVnlZ%qB}s)J0{+wW<31$T>~ zGl|fhQmD@ys_y(xuM^SvDa8CfN-Tf$3^E$h`Hv$j$oU>!^b>>tqm(JF+? z?e{LDyCG1$aY=uO-T4^Venu0jJIGcZ-LdqyxLX-v#Pa9tM*bpWU538{KeVq^^{EwR z1@}hyXFqGdZ|F}PgP8t*zabj?Pw7Vfqgg!a5#gY%)&#;6VxojX7@_W$YpzfResUyvI*4+gal zopt5k?*Msm@W}=2Zf0crm~*U*9a6!5lt`x9#4_*t4DmvU;u5F(_dI~QAPjv3TCdNB zv-f_tdyxHC$N|KV)^PGUx|&mWz?^t&9<*>C7>pI+~Ug>cjlB>k%c z!&wJVUf=5hI*)m@9no3!Z-~G3o}NMWL%RR*U)|}s?w~u7ty6qPZG2D$c2-34aOg?q z#P1?Pg|DFdh4(N%8l5j^%5S#~&?r9lG_Y}^XCc;6USkApYLmC01bi{f5 zdmaY)ck&jU0h&L8cg;J#eLyU)MZL+qYZ&18Z!R#5vhI|5*I#tr$3wV3Wh7dH>eEaePo+|**9m1V?{QDh2Ug*QRCR(c+E{Dz*BGUVK^d;}^!a?@`bb=!&^RC|( zItOUDY$3bY`~Gt8OLy|_`VR1$1d!Dg&wu`rYZK8KE$FPip}MPY?-RGzi@VCUzkZN4 z(h2?33y)$ufW9x6w7?z~|)lTU_V2Rl%kZ{qVq02k^0%DK0AkPj2Uh@BZUoILy6 z@-l#XX9rRTi0nO(&Yz|?xeg=@@{;}Ac>AZ&gU$@^j~yf0BPtI1#SXfVG+4%z6npWlnVd31k> z#&cU@{x0mAX0-f(7t#-m+S#H|7BSs_%QLdOIo6xZAeMh-9 zg#li20KesYImDAc7|`83T>X&~#B=P1PNV*$9gR4E+ZuqhZgBjQ6;nhQj{?QwtaXvn&^G62Wz0NF&i z{^>FsF8tA1%qx52U2kEKb~*q$&mZAq-do(?9R~PK2Dk!%#y7*ozdtpfO5lMyz%S$b zfyxQ;xZJ_d^#e`&JK_Vbs{kH%;QXh`Z?JeHTS`}e*~7(q$ZG+>M*x!H%5yaG0epo4 z{!2QeV4#+_7eH4% zM_0c8PCv4>aRA^381Nkack}sAC?EKW_M(XbTmu*jdW1KChdBU}Ir*Q!!@mhf;5o86 zKx+)BKEwmm0gO}|fadB?0Z^ZW+M}6&6EFV;T0kab0LuZy0W<(?0sH~bI_Y}=)JCH| z1dYo&>j~1kBHbCXt9lDS0PqDs`jq1ULICstf7HCXKk{rh8o(-XII8bY-~XeOM1BbV zDFPn(Nq$6VLtY%txbsDObR3Sp(@$s*#!+ zB5tCby87w6gwy{-9uU~opZhaDR9*ZOUHt^yPmZFCpR6xG{-@+Pl7aevPLBKQ+J`Rm zjX7@@dEo}?C;Uti$w2+NUDEgAC+kw*fAM$uUda0JQ*`-0fAM$uo+-L~?^M6|@jnqn z^>h0Hy#(Q>aC$7a5C6{u(_=pq#Pf6ei2K$5GXceet*@TfVe|PEcg){9w0(T@Cpdw1;7K4;12RE_@(%L31i%I`3>c0~7J%Dy06l<_oV%w({;B}Io^v`f6n390;DYEzdV(5& z&Uwd3|CU2pMgYH@_1`^~!~Yh_M)R=~0A&CpO>a;67eU$k0Y-Iv2IZl7=qrGp@EYy+ z$gYfT_@(@7j!+Kb_h{Dj{_+xi6Joz&JUnmSmgbI+%1^cp`yAWi{ywO6SBQ3h@fyu| zZNLN6E)47U0QphCT^K)IPMcYoj|swFRR|l4-~xCJ+3p6_97MZdka{q>XQ8V*{mNl1 z(%y;F?V<7jr3dgs_jb0l{(4WNQJhm}S@3%jQ;al)bMd|4E}f^C&&MZlhe{ackrDg@ zkpCXM_s@>T0&`zr@GW6a@)NOVg(+A}Q7RVuB@K)F@(z1d{1$sr^ahK{Pr`z8UqYHl z%qh(uJD=c=op^Q`6YKxC=LGlO4KXm^gszcf@f82pej2k*5M_?d4fcU6?AND>D zo!NE#>81AX;!{=ei16ZVS$6w3(nSs>;GfeU9zZ83>&SLM%bNiQRAF)td)j=E5GmY|(MfCh-5gjz91)O>i6X_wcglZD)Qjy3oI=H`>KR zb%%6T>rX`X!-K{K2CM(`Roc-3GK*G9BPX@Xl3Z+0r-E6bGze%)=S%=6glX$ zsQ-|QFzUp&{r6DR`5}!L9)FJO%ukPq{><*^?tEu4gm!<>#CIe__taXY-08%*{Z|pb z51;n_twDwvET}8zG8^(PQ0{WzB8EfgF`;WbmqYgdG$KxL1mf1Tz0IuI`|&W5Vegq zgQ%ORpXuPC8vH)!cCF3-Khk5B zH+(;fso#Z+Qbg1yB3%m7!}RxFd!&~Iy3zR^{h}Z7=o;KPF;-oEO=-Jc_~!ecmMMBf z_fBR6q94)TulkSZNAvRRZ@>S}*Pe)qfPMh!I?&xfeL18bLo@;OtNrVUiz!E&V~s7% zeP#dK!i`}bjcDu3b;uvt3isLnb<*DXi*$8JhcOo2m%55}{bOIa-2xpZ(1X@Y`yBst z(oOtpnd05A^UC|eV$A)5-cHh|XihUz-z zzV|z6N54P=TK^i$dyqTpEOz?UH7vdS)1cWP_uY0wmze$z9t?UcG#Yh)xD2#bd;x4< z25M7MT36Z0$6wCtfc*Ph|0c#^EIgz6Ug!Yy9)yA3n6wL_NqVi`#sT)-UFV<7S4Y(@EwUVPCUH~_X@VOvjDC8qA?VdbGSE} zyM{sh2>@Xuf!_${iS$|(&hH+z)Bh6ei@}fdy>q+L*q0yDARhcl_235Ji|Xz^WJ`ne z5*L%(^*wQY(b`jZM}Btj+u4SW#a|>}BY^h(5Ach=;c%T8drTbe(tu}!p6KiEd&olp zU@Z2H-R^$@T$un`01*AF`b%eT@gSe&0Ap$Y(__G=$Nf(b<^k}&H<|_-2Kk}y>m&f; z`|tV|ilA&XPU&^O4}`A-I5$ul`x77Xr2#;Ddq;EbjCg(qpx^r+AueTq=oxGr$REue zM|%G&+6$}-&~Lg2OV41_0dBNa87QGJIO;e;p!4hi0uD!phD<0Y_-Q{jfv4j* z1^SLt5a5sjh}IqvkAC5d0`vn3+P?o9cm8&qy1>(MSVHGHF`ehbQ00D)Pto~H`0npK z--Qg{;qUnEJjdn7@Au%}_rC+L_Hz~x7G3;vhF&p`Z;9~x^X0SpwM!Nz|HWev;M3VV~JVUJ9u z%F~PJTO2GtgGpBo8nwgzND~a{d(mD)L@$b?3-esGHlz=r z2hW=DP6hUR?2E(`?}7V~cV`(Lzo?zsKM?#Oz9c{kTD$GEheG?Ay6(f3gmp}$e?T_0 zgRvb$mR60Rze4&vv_Bl#E~-7Z>~6mlvgzmR4-F6xeXFP)Xy*sADfi2cYUf?&yY7CG zt?}6ev?d!jo(+kX zZ(!?z_Pr9_QAYs$$a|sz!chB8Omq7);w|DUvgt*6CW2j&=ZDaCnV`E+yGzsg4(T?L zU0%iz_NhHBeBG%dMP+q+KOekD{pv4$6XGS>8{d;d-v!#=dp|3xeg8sld-jo@`hUfp z*^d=P6ogs2bV4rtUD9{|M{jSvTe0+C@4;2>a7NKgVQ zQ5IP)APmShGQz;H%%H5!03%_EfLwoHO;^)Xx4LilojaFG&aJNQT2AeCPMvdZsruo_ znGBJvvT#I?*T^?S`$6w!3kuru>%(i}Q1`xPKGwG$kq+m|JbIdLp5VYbcKyHXvZ9Q~ zAiqx>-23Q#0iOXmi8ObA-iqiYy4(jZH0NvTmqz>F;4n&S>zOOrbPHGu1Nk!a?n7Hu zdgjbw>lXS`>X*c!miaw8y66rwmuy+AFZ)`XGUe5L>9n2CZ_o$Ii}U*~n`hL=9z?m_ zxvLk9Z42)CDU0#M-E|g+EU?nT8wCHpf}4V{UF>s1Tl~DuQl2j^vPQ22I?jWC8lB&8 za2WW$T6ZYuSS6acBH7F5(&XJYYh+yAFPo6VXoNK+- z&OQcB8#{h%pP(CFX?I>aW$%cFW3BYLwhsJh``Gzw@y9OKk@l|3NBZzcdWZbkrkK5% zeO!AuJgC_9)8dbh{7zGa>j1s+Rij^T3^^L%#r%!kzoPi_{9HiC6kFSp+BEC8UFRCT zGQynugcIks*z<#nKVi;Y@DiH3Ku=|<1AH5w>>Bi-@L4YCEAXD*z&8oTY@426CHrHi zb&jX6yUTILa9yBhIZ^nV* zO)VS@Ur7G@QGB}V89u`El3|0Ng{(UI`lUMTlnKvA0vg6kKXz9=Y`*jx{3^~pS#&?p z;}YEi&%G!3K+mwZ zCOPqC!GBVSeDI)mW8FOOM0lv^dg#kI_rVUMLb2O~H*_ZEh9qj$lFz#~TVXHq*fLj#T zq-VutEQR+Odal$S5#HaaOy=cU?B&RxnS`(Jo62o{YXv z`>b@Vt>Xj*cLaJ@u6l7Mcu#PTiw@IpjC$l+Q>(#pE~KI;w2eseXbHg4u#if@T4H4c1?P`F~8XUNA%Os^C6B>UG2| z*M>X9#3bM)!KB9#9Wr7>@^eUm$*)EVOg;(p(;+r?+c)xG{i>>zO#e|+Rn>y85o-M$ zVOeaqel=lXZGD1w(p3kATR#_sjW0Y~2uFNVPu0iNTfS+Jh;Q0yV$g1N@|Dru__XUq z`L>-Ek+w%ptH0n0K`5uyTY(at#zb$yFu?)=cgfrrGKM&hv+6OT>l#>Yt`9 zWCMGk>_eUBTo=$YZkfc$h`E1- zciD33jOhJy`IDFbHqVV0Tg-hEvKh#bpw~qn0f0kaUpweM{rv~=Mu^A#>7GUQUfiZN zJ~R~hVn6=c&EhuhI9u+~9XmWF@)j^p3gpQ2jd1HUzQv{<<9_=h)aCQ#H)FrCh4`$>{4!cT zHb}bau*bpJoS-=r$J5^1YUthRDtk|~eEuh*9FDQUIA+c8Ir>a}y;)_mkC`^ZhpsJ` z-E!6?)}I5C74bREX=pa~(6D@-SL**x%H?PWWKw+mU9Cxs`-1YZv7TmaON%2sd7sP& z{92XYsr_wRu;!K1Vb9%l((_|~?lk^v`S`PB^U>FCZa!(kr(|!?)v;E;oKrcRr#kh2 zG>okq?u5(X-1`#kbJV@l`V%cX`aJ5_n*6e(znHz3`-0NsGH-K%xxWnD7mG>srn3g4&^_VeNcX<{ij&D#lCarvQ+HSe_X*^@aBe&4*A^1X7$djFW9J8w0=&slM?^j8mCj`A2J zc*%x~`HK6HV3D8{`tyEY{>m#>*4Y=IcS;kbzgf4>3z)+``a6^%jmyuz&*!A%6|fJ) zdqCf=SBp3;Ik6XjYOxQ1s*Fx)3@;|9v_OkMdEccn&{Z3xGH*~edC#Hd|~4%L$gAIxp$OHn$|Ezxcj253{CGlOCXD|UgtFQMvne-`+ucw z+`5^Uj?YY`rJeK8kV)>MXvFcdZF%;pVIi2P!hyAf{xR*7l%8*#&8d?;Ev){t4t|bF zPrE|%7jw|6_S~)WC;e&g2M5mN^=-xFn>pv;barK~nf4>S1=}_$gxPm>9x>~k;y`b1apT5? zb$&R!`ownDmynOGXY!aYNSZ&4IWvEr`FV`jhK9b!&0p>i!uhLbv-Y%$2b>c>v|1sc Pn5$L + + + + + + +Spring Cloud Security + + + + + + + + + + +
+
+
+
+

Spring Cloud Security offers a set of primitives for building secure +applications and services with minimum fuss. A declarative model which +can be heavily configured externally (or centrally) lends itself to +the implementation of large systems of co-operating, remote components, +usually with a central indentity management service. It is also extremely +easy to use in a service platform like Cloud Foundry. Building on +Spring Boot and Spring Security OAuth2 we can quickly create systems that +implement common patterns like single sign on, token relay and token +exchange.

+
+
+ + + + + +
+ + +Spring Cloud is released under the non-restrictive Apache 2.0 license. If you would like to contribute to this section of the documentation or if you find an error, please find the source code and issue trackers in the project at github. +
+
+
+
+
+

Quickstart

+
+
+

OAuth2 Single Sign On

+
+

Here’s a Spring Cloud "Hello World" app with HTTP Basic +authentication and a single user account:

+
+
+
app.groovy
+
+
@Grab('spring-boot-starter-security')
+@Controller
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

You can run it with spring run app.groovy and watch the logs for the password (username is "user"). So far this is just the default for a Spring Boot app.

+
+
+

Here’s a Spring Cloud app with OAuth2 SSO:

+
+
+
app.groovy
+
+
@Controller
+@EnableOAuth2Sso
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

Spot the difference? This app will actually behave exactly the same as +the previous one, because it doesn’t know it’s OAuth2 credentals +yet.

+
+
+

You can register an app in github quite easily, so try that if you +want a production app on your own domain. If you are happy to test on +localhost:8080, then set up these properties in your application +configuration:

+
+
+
application.yml
+
+
security:
+  oauth2:
+    client:
+      clientId: bd1c0a783ccdd1c9b9e4
+      clientSecret: 1a9030fbca47a5b2c28e92f19050bb77824b5ad1
+      accessTokenUri: https://github.com/login/oauth/access_token
+      userAuthorizationUri: https://github.com/login/oauth/authorize
+      clientAuthenticationScheme: form
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+

run the app above and it will redirect to github for authorization. If +you are already signed into github you won’t even notice that it has +authenticated. These credentials will only work if your app is +running on port 8080.

+
+
+

To limit the scope that the client asks for when it obtains an access token +you can set security.oauth2.client.scope (comma separated or an array in YAML). By +default the scope is empty and it is up to to Authorization Server to +decide what the defaults should be, usually depending on the settings in +the client registration that it holds.

+
+
+ + + + + +
+ + +The examples above are all Groovy scripts. If you want to write the +same code in Java (or Groovy) you need to add Spring Security OAuth2 +to the classpath (e.g. see the +sample here). +
+
+
+
+

OAuth2 Protected Resource

+
+

You want to protect an API resource with an OAuth2 token? Here’s a +simple example (paired with the client above):

+
+
+
app.groovy
+
+
@Grab('spring-cloud-starter-security')
+@RestController
+@EnableResourceServer
+class Application {
+
+  @RequestMapping('/')
+  def home() {
+    [message: 'Hello World']
+  }
+
+}
+
+
+
+

and

+
+
+
application.yml
+
+
security:
+  oauth2:
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+
+
+
+

More Detail

+
+
+

Single Sign On

+
+ + + + + +
+ + +All of the OAuth2 SSO and resource server features moved to Spring Boot +in version 1.3. You can find documentation in the +Spring Boot user guide. +
+
+
+
+

Token Relay

+
+

A Token Relay is where an OAuth2 consumer acts as a Client and +forwards the incoming token to outgoing resource requests. The +consumer can be a pure Client (like an SSO application) or a Resource +Server.

+
+
+

Client Token Relay in Spring Cloud Gateway

+
+

If your app also has a +Spring +Cloud Gateway embedded reverse proxy then you +can ask it to forward OAuth2 access tokens downstream to the services +it is proxying. Thus the SSO app above can be enhanced simply like +this:

+
+
+
App.java
+
+
@Autowired
+private TokenRelayGatewayFilterFactory filterFactory;
+
+@Bean
+public RouteLocator customRouteLocator(RouteLocatorBuilder builder) {
+    return builder.routes()
+            .route("resource", r -> r.path("/resource")
+                    .filters(f -> f.filter(filterFactory.apply()))
+                    .uri("http://localhost:9000"))
+            .build();
+}
+
+
+
+

or this

+
+
+
application.yaml
+
+
spring:
+  cloud:
+    gateway:
+      routes:
+      - id: resource
+        uri: http://localhost:9000
+        predicates:
+        - Path=/resource
+        filters:
+        - TokenRelay=
+
+
+
+

and it will (in addition to logging the user in and grabbing a token) +pass the authentication token downstream to the services (in this case +/resource).

+
+
+

To enable this for Spring Cloud Gateway add the following dependencies

+
+
+
    +
  • +

    org.springframework.boot:spring-boot-starter-oauth2-client

    +
    • +
  • +

    org.springframework.cloud:spring-cloud-starter-security

    +
    • +
+
+
+

How does it work? The +filter +extracts an access token from the currently authenticated user, +and puts it in a request header for the downstream requests.

+
+
+

For a full working sample see this project.

+
+
+ + + + + +
+ + +The default implementation of ReactiveOAuth2AuthorizedClientService used by TokenRelayGatewayFilterFactory +uses an in-memory data store. You will need to provide your own implementation ReactiveOAuth2AuthorizedClientService +if you need a more robust solution. +
+
+
+
+

Client Token Relay

+
+

If your app is a user facing OAuth2 client (i.e. has declared +@EnableOAuth2Sso or @EnableOAuth2Client) then it has an +OAuth2ClientContext in request scope from Spring Boot. You can +create your own OAuth2RestTemplate from this context and an +autowired OAuth2ProtectedResourceDetails, and then the context will +always forward the access token downstream, also refreshing the access +token automatically if it expires. (These are features of Spring +Security and Spring Boot.)

+
+
+ + + + + +
+ + +Spring Boot (1.4.1) does not create an +OAuth2ProtectedResourceDetails automatically if you are using +client_credentials tokens. In that case you need to create your own +ClientCredentialsResourceDetails and configure it with +@ConfigurationProperties("security.oauth2.client"). +
+
+
+
+

Client Token Relay in Zuul Proxy

+
+

If your app also has a +Spring +Cloud Zuul embedded reverse proxy (using @EnableZuulProxy) then you +can ask it to forward OAuth2 access tokens downstream to the services +it is proxying. Thus the SSO app above can be enhanced simply like +this:

+
+
+
app.groovy
+
+
@Controller
+@EnableOAuth2Sso
+@EnableZuulProxy
+class Application {
+
+}
+
+
+
+

and it will (in addition to logging the user in and grabbing a token) +pass the authentication token downstream to the /proxy/* +services. If those services are implemented with +@EnableResourceServer then they will get a valid token in the +correct header.

+
+
+

How does it work? The @EnableOAuth2Sso annotation pulls in +spring-cloud-starter-security (which you could do manually in a +traditional app), and that in turn triggers some autoconfiguration for +a ZuulFilter, which itself is activated because Zuul is on the +classpath (via @EnableZuulProxy). The +filter +just extracts an access token from the currently authenticated user, +and puts it in a request header for the downstream requests.

+
+
+ + + + + +
+ + +Spring Boot does not create an OAuth2RestOperations automatically which is needed for refresh_token. In that case you need to create your own +OAuth2RestOperations so OAuth2TokenRelayFilter can refresh the token if needed. +
+
+
+
+

Resource Server Token Relay

+
+

If your app has @EnableResourceServer you might want to relay the +incoming token downstream to other services. If you use a +RestTemplate to contact the downstream services then this is just a +matter of how to create the template with the right context.

+
+
+

If your service uses UserInfoTokenServices to authenticate incoming +tokens (i.e. it is using the security.oauth2.user-info-uri +configuration), then you can simply create an OAuth2RestTemplate +using an autowired OAuth2ClientContext (it will be populated by the +authentication process before it hits the backend code). Equivalently +(with Spring Boot 1.4), you could inject a +UserInfoRestTemplateFactory and grab its OAuth2RestTemplate in +your configuration. For example:

+
+
+
MyConfiguration.java
+
+
@Bean
+public OAuth2RestTemplate restTemplate(UserInfoRestTemplateFactory factory) {
+    return factory.getUserInfoRestTemplate();
+}
+
+
+
+

This rest template will then have the same OAuth2ClientContext +(request-scoped) that is used by the authentication filter, so you can +use it to send requests with the same access token.

+
+
+

If your app is not using UserInfoTokenServices but is still a client +(i.e. it declares @EnableOAuth2Client or @EnableOAuth2Sso), then +with Spring Security Cloud any OAuth2RestOperations that the user +creates from an @Autowired OAuth2Context will also forward +tokens. This feature is implemented by default as an MVC handler +interceptor, so it only works in Spring MVC. If you are not using MVC +you could use a custom filter or AOP interceptor wrapping an +AccessTokenContextRelay to provide the same feature.

+
+
+

Here’s a basic +example showing the use of an autowired rest template created +elsewhere ("foo.com" is a Resource Server accepting the same tokens as +the surrounding app):

+
+
+
MyController.java
+
+
@Autowired
+private OAuth2RestOperations restTemplate;
+
+@RequestMapping("/relay")
+public String relay() {
+    ResponseEntity<String> response =
+      restTemplate.getForEntity("https://foo.com/bar", String.class);
+    return "Success! (" + response.getBody() + ")";
+}
+
+
+
+

If you don’t want to forward tokens (and that is a valid +choice, since you might want to act as yourself, rather than the +client that sent you the token), then you only need to create your own +OAuth2Context instead of autowiring the default one.

+
+
+

Feign clients will also pick up an interceptor that uses the +OAuth2ClientContext if it is available, so they should also do a +token relay anywhere where a RestTemplate would.

+
+
+
+
+
+
+

Configuring Authentication Downstream of a Zuul Proxy

+
+
+

You can control the authorization behaviour downstream of an +@EnableZuulProxy through the proxy.auth.* settings. Example:

+
+
+
application.yml
+
+
proxy:
+  auth:
+    routes:
+      customers: oauth2
+      stores: passthru
+      recommendations: none
+
+
+
+

In this example the "customers" service gets an OAuth2 token relay, +the "stores" service gets a passthrough (the authorization header is +just passed downstream), and the "recommendations" service has its +authorization header removed. The default behaviour is to do a token +relay if there is a token available, and passthru otherwise.

+
+
+

See + +ProxyAuthenticationProperties for full details.

+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/intro.html b/spring-cloud-security/3.0.0-M2/reference/html/intro.html new file mode 100644 index 00000000..2595d3bd --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/intro.html @@ -0,0 +1,138 @@ + + + + + + + +Untitled + + + + + + + + + + +
+
+
+
+

Spring Cloud Security offers a set of primitives for building secure +applications and services with minimum fuss. A declarative model which +can be heavily configured externally (or centrally) lends itself to +the implementation of large systems of co-operating, remote components, +usually with a central indentity management service. It is also extremely +easy to use in a service platform like Cloud Foundry. Building on +Spring Boot and Spring Security OAuth2 we can quickly create systems that +implement common patterns like single sign on, token relay and token +exchange.

+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/highlight.min.js b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/highlight.min.js new file mode 100644 index 00000000..dcbbb4c7 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/highlight.min.js @@ -0,0 +1,2 @@ +/*! highlight.js v9.13.1 | BSD3 License | git.io/hljslicense */ +!function(e){var n="object"==typeof window&&window||"object"==typeof self&&self;"undefined"!=typeof exports?e(exports):n&&(n.hljs=e({}),"function"==typeof define&&define.amd&&define([],function(){return n.hljs}))}(function(e){function n(e){return e.replace(/&/g,"&").replace(//g,">")}function t(e){return e.nodeName.toLowerCase()}function r(e,n){var t=e&&e.exec(n);return t&&0===t.index}function a(e){return k.test(e)}function i(e){var n,t,r,i,o=e.className+" ";if(o+=e.parentNode?e.parentNode.className:"",t=M.exec(o))return w(t[1])?t[1]:"no-highlight";for(o=o.split(/\s+/),n=0,r=o.length;r>n;n++)if(i=o[n],a(i)||w(i))return i}function o(e){var n,t={},r=Array.prototype.slice.call(arguments,1);for(n in e)t[n]=e[n];return r.forEach(function(e){for(n in e)t[n]=e[n]}),t}function c(e){var n=[];return function r(e,a){for(var i=e.firstChild;i;i=i.nextSibling)3===i.nodeType?a+=i.nodeValue.length:1===i.nodeType&&(n.push({event:"start",offset:a,node:i}),a=r(i,a),t(i).match(/br|hr|img|input/)||n.push({event:"stop",offset:a,node:i}));return a}(e,0),n}function u(e,r,a){function i(){return e.length&&r.length?e[0].offset!==r[0].offset?e[0].offset"}function c(e){l+=""}function u(e){("start"===e.event?o:c)(e.node)}for(var s=0,l="",f=[];e.length||r.length;){var g=i();if(l+=n(a.substring(s,g[0].offset)),s=g[0].offset,g===e){f.reverse().forEach(c);do u(g.splice(0,1)[0]),g=i();while(g===e&&g.length&&g[0].offset===s);f.reverse().forEach(o)}else"start"===g[0].event?f.push(g[0].node):f.pop(),u(g.splice(0,1)[0])}return l+n(a.substr(s))}function s(e){return e.v&&!e.cached_variants&&(e.cached_variants=e.v.map(function(n){return o(e,{v:null},n)})),e.cached_variants||e.eW&&[o(e)]||[e]}function l(e){function n(e){return e&&e.source||e}function t(t,r){return new RegExp(n(t),"m"+(e.cI?"i":"")+(r?"g":""))}function r(a,i){if(!a.compiled){if(a.compiled=!0,a.k=a.k||a.bK,a.k){var o={},c=function(n,t){e.cI&&(t=t.toLowerCase()),t.split(" ").forEach(function(e){var t=e.split("|");o[t[0]]=[n,t[1]?Number(t[1]):1]})};"string"==typeof a.k?c("keyword",a.k):B(a.k).forEach(function(e){c(e,a.k[e])}),a.k=o}a.lR=t(a.l||/\w+/,!0),i&&(a.bK&&(a.b="\\b("+a.bK.split(" ").join("|")+")\\b"),a.b||(a.b=/\B|\b/),a.bR=t(a.b),a.endSameAsBegin&&(a.e=a.b),a.e||a.eW||(a.e=/\B|\b/),a.e&&(a.eR=t(a.e)),a.tE=n(a.e)||"",a.eW&&i.tE&&(a.tE+=(a.e?"|":"")+i.tE)),a.i&&(a.iR=t(a.i)),null==a.r&&(a.r=1),a.c||(a.c=[]),a.c=Array.prototype.concat.apply([],a.c.map(function(e){return s("self"===e?a:e)})),a.c.forEach(function(e){r(e,a)}),a.starts&&r(a.starts,i);var u=a.c.map(function(e){return e.bK?"\\.?("+e.b+")\\.?":e.b}).concat([a.tE,a.i]).map(n).filter(Boolean);a.t=u.length?t(u.join("|"),!0):{exec:function(){return null}}}}r(e)}function f(e,t,a,i){function o(e){return new RegExp(e.replace(/[-\/\\^$*+?.()|[\]{}]/g,"\\$&"),"m")}function c(e,n){var t,a;for(t=0,a=n.c.length;a>t;t++)if(r(n.c[t].bR,e))return n.c[t].endSameAsBegin&&(n.c[t].eR=o(n.c[t].bR.exec(e)[0])),n.c[t]}function u(e,n){if(r(e.eR,n)){for(;e.endsParent&&e.parent;)e=e.parent;return e}return e.eW?u(e.parent,n):void 0}function s(e,n){return!a&&r(n.iR,e)}function p(e,n){var t=R.cI?n[0].toLowerCase():n[0];return e.k.hasOwnProperty(t)&&e.k[t]}function d(e,n,t,r){var a=r?"":j.classPrefix,i='',i+n+o}function h(){var e,t,r,a;if(!E.k)return n(k);for(a="",t=0,E.lR.lastIndex=0,r=E.lR.exec(k);r;)a+=n(k.substring(t,r.index)),e=p(E,r),e?(M+=e[1],a+=d(e[0],n(r[0]))):a+=n(r[0]),t=E.lR.lastIndex,r=E.lR.exec(k);return a+n(k.substr(t))}function b(){var e="string"==typeof E.sL;if(e&&!L[E.sL])return n(k);var t=e?f(E.sL,k,!0,B[E.sL]):g(k,E.sL.length?E.sL:void 0);return E.r>0&&(M+=t.r),e&&(B[E.sL]=t.top),d(t.language,t.value,!1,!0)}function v(){y+=null!=E.sL?b():h(),k=""}function m(e){y+=e.cN?d(e.cN,"",!0):"",E=Object.create(e,{parent:{value:E}})}function N(e,n){if(k+=e,null==n)return v(),0;var t=c(n,E);if(t)return t.skip?k+=n:(t.eB&&(k+=n),v(),t.rB||t.eB||(k=n)),m(t,n),t.rB?0:n.length;var r=u(E,n);if(r){var a=E;a.skip?k+=n:(a.rE||a.eE||(k+=n),v(),a.eE&&(k=n));do E.cN&&(y+=I),E.skip||E.sL||(M+=E.r),E=E.parent;while(E!==r.parent);return r.starts&&(r.endSameAsBegin&&(r.starts.eR=r.eR),m(r.starts,"")),a.rE?0:n.length}if(s(n,E))throw new Error('Illegal lexeme "'+n+'" for mode "'+(E.cN||"")+'"');return k+=n,n.length||1}var R=w(e);if(!R)throw new Error('Unknown language: "'+e+'"');l(R);var x,E=i||R,B={},y="";for(x=E;x!==R;x=x.parent)x.cN&&(y=d(x.cN,"",!0)+y);var k="",M=0;try{for(var C,A,S=0;;){if(E.t.lastIndex=S,C=E.t.exec(t),!C)break;A=N(t.substring(S,C.index),C[0]),S=C.index+A}for(N(t.substr(S)),x=E;x.parent;x=x.parent)x.cN&&(y+=I);return{r:M,value:y,language:e,top:E}}catch(O){if(O.message&&-1!==O.message.indexOf("Illegal"))return{r:0,value:n(t)};throw O}}function g(e,t){t=t||j.languages||B(L);var r={r:0,value:n(e)},a=r;return t.filter(w).filter(x).forEach(function(n){var t=f(n,e,!1);t.language=n,t.r>a.r&&(a=t),t.r>r.r&&(a=r,r=t)}),a.language&&(r.second_best=a),r}function p(e){return j.tabReplace||j.useBR?e.replace(C,function(e,n){return j.useBR&&"\n"===e?"
":j.tabReplace?n.replace(/\t/g,j.tabReplace):""}):e}function d(e,n,t){var r=n?y[n]:t,a=[e.trim()];return e.match(/\bhljs\b/)||a.push("hljs"),-1===e.indexOf(r)&&a.push(r),a.join(" ").trim()}function h(e){var n,t,r,o,s,l=i(e);a(l)||(j.useBR?(n=document.createElementNS("http://www.w3.org/1999/xhtml","div"),n.innerHTML=e.innerHTML.replace(/\n/g,"").replace(//g,"\n")):n=e,s=n.textContent,r=l?f(l,s,!0):g(s),t=c(n),t.length&&(o=document.createElementNS("http://www.w3.org/1999/xhtml","div"),o.innerHTML=r.value,r.value=u(t,c(o),s)),r.value=p(r.value),e.innerHTML=r.value,e.className=d(e.className,l,r.language),e.result={language:r.language,re:r.r},r.second_best&&(e.second_best={language:r.second_best.language,re:r.second_best.r}))}function b(e){j=o(j,e)}function v(){if(!v.called){v.called=!0;var e=document.querySelectorAll("pre code");E.forEach.call(e,h)}}function m(){addEventListener("DOMContentLoaded",v,!1),addEventListener("load",v,!1)}function N(n,t){var r=L[n]=t(e);r.aliases&&r.aliases.forEach(function(e){y[e]=n})}function R(){return B(L)}function w(e){return e=(e||"").toLowerCase(),L[e]||L[y[e]]}function x(e){var n=w(e);return n&&!n.disableAutodetect}var E=[],B=Object.keys,L={},y={},k=/^(no-?highlight|plain|text)$/i,M=/\blang(?:uage)?-([\w-]+)\b/i,C=/((^(<[^>]+>|\t|)+|(?:\n)))/gm,I="",j={classPrefix:"hljs-",tabReplace:null,useBR:!1,languages:void 0};return e.highlight=f,e.highlightAuto=g,e.fixMarkup=p,e.highlightBlock=h,e.configure=b,e.initHighlighting=v,e.initHighlightingOnLoad=m,e.registerLanguage=N,e.listLanguages=R,e.getLanguage=w,e.autoDetection=x,e.inherit=o,e.IR="[a-zA-Z]\\w*",e.UIR="[a-zA-Z_]\\w*",e.NR="\\b\\d+(\\.\\d+)?",e.CNR="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",e.BNR="\\b(0b[01]+)",e.RSR="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",e.BE={b:"\\\\[\\s\\S]",r:0},e.ASM={cN:"string",b:"'",e:"'",i:"\\n",c:[e.BE]},e.QSM={cN:"string",b:'"',e:'"',i:"\\n",c:[e.BE]},e.PWM={b:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},e.C=function(n,t,r){var a=e.inherit({cN:"comment",b:n,e:t,c:[]},r||{});return a.c.push(e.PWM),a.c.push({cN:"doctag",b:"(?:TODO|FIXME|NOTE|BUG|XXX):",r:0}),a},e.CLCM=e.C("//","$"),e.CBCM=e.C("/\\*","\\*/"),e.HCM=e.C("#","$"),e.NM={cN:"number",b:e.NR,r:0},e.CNM={cN:"number",b:e.CNR,r:0},e.BNM={cN:"number",b:e.BNR,r:0},e.CSSNM={cN:"number",b:e.NR+"(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?",r:0},e.RM={cN:"regexp",b:/\//,e:/\/[gimuy]*/,i:/\n/,c:[e.BE,{b:/\[/,e:/\]/,r:0,c:[e.BE]}]},e.TM={cN:"title",b:e.IR,r:0},e.UTM={cN:"title",b:e.UIR,r:0},e.METHOD_GUARD={b:"\\.\\s*"+e.UIR,r:0},e});hljs.registerLanguage("bash",function(e){var t={cN:"variable",v:[{b:/\$[\w\d#@][\w\d_]*/},{b:/\$\{(.*?)}/}]},s={cN:"string",b:/"/,e:/"/,c:[e.BE,t,{cN:"variable",b:/\$\(/,e:/\)/,c:[e.BE]}]},a={cN:"string",b:/'/,e:/'/};return{aliases:["sh","zsh"],l:/\b-?[a-z\._]+\b/,k:{keyword:"if then else elif fi for while in do done case esac function",literal:"true false",built_in:"break cd continue eval exec exit export getopts hash pwd readonly return shift test times trap umask unset alias bind builtin caller command declare echo enable help let local logout mapfile printf read readarray source type typeset ulimit unalias set shopt autoload bg bindkey bye cap chdir clone comparguments compcall compctl compdescribe compfiles compgroups compquote comptags comptry compvalues dirs disable disown echotc echoti emulate fc fg float functions getcap getln history integer jobs kill limit log noglob popd print pushd pushln rehash sched setcap setopt stat suspend ttyctl unfunction unhash unlimit unsetopt vared wait whence where which zcompile zformat zftp zle zmodload zparseopts zprof zpty zregexparse zsocket zstyle ztcp",_:"-ne -eq -lt -gt -f -d -e -s -l -a"},c:[{cN:"meta",b:/^#![^\n]+sh\s*$/,r:10},{cN:"function",b:/\w[\w\d_]*\s*\(\s*\)\s*\{/,rB:!0,c:[e.inherit(e.TM,{b:/\w[\w\d_]*/})],r:0},e.HCM,s,a,t]}});hljs.registerLanguage("dockerfile",function(e){return{aliases:["docker"],cI:!0,k:"from maintainer expose env arg user onbuild stopsignal",c:[e.HCM,e.ASM,e.QSM,e.NM,{bK:"run cmd entrypoint volume add copy workdir label healthcheck shell",starts:{e:/[^\\]\n/,sL:"bash"}}],i:")?[^\s\(]+(\s+[^\s\(]+)\s*=/,r:5,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"type",b://,k:"reified",r:0},{cN:"params",b:/\(/,e:/\)/,endsParent:!0,k:t,r:0,c:[{b:/:/,e:/[=,\/]/,eW:!0,c:[{cN:"type",b:e.UIR},e.CLCM,e.CBCM],r:0},e.CLCM,e.CBCM,s,l,c,e.CNM]},e.CBCM]},{cN:"class",bK:"class interface trait",e:/[:\{(]|$/,eE:!0,i:"extends implements",c:[{bK:"public protected internal private constructor"},e.UTM,{cN:"type",b://,eB:!0,eE:!0,r:0},{cN:"type",b:/[,:]\s*/,e:/[<\(,]|$/,eB:!0,rE:!0},s,l]},c,{cN:"meta",b:"^#!/usr/bin/env",e:"$",i:"\n"},o]}});hljs.registerLanguage("java",function(e){var a="[À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*",t=a+"(<"+a+"(\\s*,\\s*"+a+")*>)?",r="false synchronized int abstract float private char boolean var static null if const for true while long strictfp finally protected import native final void enum else break transient catch instanceof byte super volatile case assert short package default double public try this switch continue throws protected public private module requires exports do",s="\\b(0[bB]([01]+[01_]+[01]+|[01]+)|0[xX]([a-fA-F0-9]+[a-fA-F0-9_]+[a-fA-F0-9]+|[a-fA-F0-9]+)|(([\\d]+[\\d_]+[\\d]+|[\\d]+)(\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))?|\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))([eE][-+]?\\d+)?)[lLfF]?",c={cN:"number",b:s,r:0};return{aliases:["jsp"],k:r,i:/<\/|#/,c:[e.C("/\\*\\*","\\*/",{r:0,c:[{b:/\w+@/,r:0},{cN:"doctag",b:"@[A-Za-z]+"}]}),e.CLCM,e.CBCM,e.ASM,e.QSM,{cN:"class",bK:"class interface",e:/[{;=]/,eE:!0,k:"class interface",i:/[:"\[\]]/,c:[{bK:"extends implements"},e.UTM]},{bK:"new throw return else",r:0},{cN:"function",b:"("+t+"\\s+)+"+e.UIR+"\\s*\\(",rB:!0,e:/[{;=]/,eE:!0,k:r,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"params",b:/\(/,e:/\)/,k:r,r:0,c:[e.ASM,e.QSM,e.CNM,e.CBCM]},e.CLCM,e.CBCM]},c,{cN:"meta",b:"@[A-Za-z]+"}]}});hljs.registerLanguage("xml",function(s){var e="[A-Za-z0-9\\._:-]+",t={eW:!0,i:/`]+/}]}]}]};return{aliases:["html","xhtml","rss","atom","xjb","xsd","xsl","plist"],cI:!0,c:[{cN:"meta",b:"",r:10,c:[{b:"\\[",e:"\\]"}]},s.C("",{r:10}),{b:"<\\!\\[CDATA\\[",e:"\\]\\]>",r:10},{cN:"meta",b:/<\?xml/,e:/\?>/,r:10},{b:/<\?(php)?/,e:/\?>/,sL:"php",c:[{b:"/\\*",e:"\\*/",skip:!0},{b:'b"',e:'"',skip:!0},{b:"b'",e:"'",skip:!0},s.inherit(s.ASM,{i:null,cN:null,c:null,skip:!0}),s.inherit(s.QSM,{i:null,cN:null,c:null,skip:!0})]},{cN:"tag",b:"|$)",e:">",k:{name:"style"},c:[t],starts:{e:"",rE:!0,sL:["css","xml"]}},{cN:"tag",b:"|$)",e:">",k:{name:"script"},c:[t],starts:{e:"",rE:!0,sL:["actionscript","javascript","handlebars","xml"]}},{cN:"tag",b:"",c:[{cN:"name",b:/[^\/><\s]+/,r:0},t]}]}});hljs.registerLanguage("properties",function(r){var t="[ \\t\\f]*",e="[ \\t\\f]+",s="("+t+"[:=]"+t+"|"+e+")",n="([^\\\\\\W:= \\t\\f\\n]|\\\\.)+",a="([^\\\\:= \\t\\f\\n]|\\\\.)+",c={e:s,r:0,starts:{cN:"string",e:/$/,r:0,c:[{b:"\\\\\\n"}]}};return{cI:!0,i:/\S/,c:[r.C("^\\s*[!#]","$"),{b:n+s,rB:!0,c:[{cN:"attr",b:n,endsParent:!0,r:0}],starts:c},{b:a+s,rB:!0,r:0,c:[{cN:"meta",b:a,endsParent:!0,r:0}],starts:c},{cN:"attr",r:0,b:a+t+"$"}]}});hljs.registerLanguage("diff",function(e){return{aliases:["patch"],c:[{cN:"meta",r:10,v:[{b:/^@@ +\-\d+,\d+ +\+\d+,\d+ +@@$/},{b:/^\*\*\* +\d+,\d+ +\*\*\*\*$/},{b:/^\-\-\- +\d+,\d+ +\-\-\-\-$/}]},{cN:"comment",v:[{b:/Index: /,e:/$/},{b:/={3,}/,e:/$/},{b:/^\-{3}/,e:/$/},{b:/^\*{3} /,e:/$/},{b:/^\+{3}/,e:/$/},{b:/\*{5}/,e:/\*{5}$/}]},{cN:"addition",b:"^\\+",e:"$"},{cN:"deletion",b:"^\\-",e:"$"},{cN:"addition",b:"^\\!",e:"$"}]}});hljs.registerLanguage("shell",function(s){return{aliases:["console"],c:[{cN:"meta",b:"^\\s{0,3}[\\w\\d\\[\\]()@-]*[>%$#]",starts:{e:"$",sL:"bash"}}]}});hljs.registerLanguage("asciidoc",function(e){return{aliases:["adoc"],c:[e.C("^/{4,}\\n","\\n/{4,}$",{r:10}),e.C("^//","$",{r:0}),{cN:"title",b:"^\\.\\w.*$"},{b:"^[=\\*]{4,}\\n",e:"\\n^[=\\*]{4,}$",r:10},{cN:"section",r:10,v:[{b:"^(={1,5}) .+?( \\1)?$"},{b:"^[^\\[\\]\\n]+?\\n[=\\-~\\^\\+]{2,}$"}]},{cN:"meta",b:"^:.+?:",e:"\\s",eE:!0,r:10},{cN:"meta",b:"^\\[.+?\\]$",r:0},{cN:"quote",b:"^_{4,}\\n",e:"\\n_{4,}$",r:10},{cN:"code",b:"^[\\-\\.]{4,}\\n",e:"\\n[\\-\\.]{4,}$",r:10},{b:"^\\+{4,}\\n",e:"\\n\\+{4,}$",c:[{b:"<",e:">",sL:"xml",r:0}],r:10},{cN:"bullet",b:"^(\\*+|\\-+|\\.+|[^\\n]+?::)\\s+"},{cN:"symbol",b:"^(NOTE|TIP|IMPORTANT|WARNING|CAUTION):\\s+",r:10},{cN:"strong",b:"\\B\\*(?![\\*\\s])",e:"(\\n{2}|\\*)",c:[{b:"\\\\*\\w",r:0}]},{cN:"emphasis",b:"\\B'(?!['\\s])",e:"(\\n{2}|')",c:[{b:"\\\\'\\w",r:0}],r:0},{cN:"emphasis",b:"_(?![_\\s])",e:"(\\n{2}|_)",r:0},{cN:"string",v:[{b:"``.+?''"},{b:"`.+?'"}]},{cN:"code",b:"(`.+?`|\\+.+?\\+)",r:0},{cN:"code",b:"^[ \\t]",e:"$",r:0},{b:"^'{3,}[ \\t]*$",r:10},{b:"(link:)?(http|https|ftp|file|irc|image:?):\\S+\\[.*?\\]",rB:!0,c:[{b:"(link|image:?):",r:0},{cN:"link",b:"\\w",e:"[^\\[]+",r:0},{cN:"string",b:"\\[",e:"\\]",eB:!0,eE:!0,r:0}],r:10}]}});hljs.registerLanguage("aspectj",function(e){var t="false synchronized int abstract float private char boolean static null if const for true while long throw strictfp finally protected import native final return void enum else extends implements break transient new catch instanceof byte super volatile case assert short package default double public try this switch continue throws privileged aspectOf adviceexecution proceed cflowbelow cflow initialization preinitialization staticinitialization withincode target within execution getWithinTypeName handler thisJoinPoint thisJoinPointStaticPart thisEnclosingJoinPointStaticPart declare parents warning error soft precedence thisAspectInstance",i="get set args call";return{k:t,i:/<\/|#/,c:[e.C("/\\*\\*","\\*/",{r:0,c:[{b:/\w+@/,r:0},{cN:"doctag",b:"@[A-Za-z]+"}]}),e.CLCM,e.CBCM,e.ASM,e.QSM,{cN:"class",bK:"aspect",e:/[{;=]/,eE:!0,i:/[:;"\[\]]/,c:[{bK:"extends implements pertypewithin perthis pertarget percflowbelow percflow issingleton"},e.UTM,{b:/\([^\)]*/,e:/[)]+/,k:t+" "+i,eE:!1}]},{cN:"class",bK:"class interface",e:/[{;=]/,eE:!0,r:0,k:"class interface",i:/[:"\[\]]/,c:[{bK:"extends implements"},e.UTM]},{bK:"pointcut after before around throwing returning",e:/[)]/,eE:!1,i:/["\[\]]/,c:[{b:e.UIR+"\\s*\\(",rB:!0,c:[e.UTM]}]},{b:/[:]/,rB:!0,e:/[{;]/,r:0,eE:!1,k:t,i:/["\[\]]/,c:[{b:e.UIR+"\\s*\\(",k:t+" "+i,r:0},e.QSM]},{bK:"new throw",r:0},{cN:"function",b:/\w+ +\w+(\.)?\w+\s*\([^\)]*\)\s*((throws)[\w\s,]+)?[\{;]/,rB:!0,e:/[{;=]/,k:t,eE:!0,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"params",b:/\(/,e:/\)/,r:0,k:t,c:[e.ASM,e.QSM,e.CNM,e.CBCM]},e.CLCM,e.CBCM]},e.CNM,{cN:"meta",b:"@[A-Za-z]+"}]}});hljs.registerLanguage("gradle",function(e){return{cI:!0,k:{keyword:"task project allprojects subprojects artifacts buildscript configurations dependencies repositories sourceSets description delete from into include exclude source classpath destinationDir includes options sourceCompatibility targetCompatibility group flatDir doLast doFirst flatten todir fromdir ant def abstract break case catch continue default do else extends final finally for if implements instanceof native new private protected public return static switch synchronized throw throws transient try volatile while strictfp package import false null super this true antlrtask checkstyle codenarc copy boolean byte char class double float int interface long short void compile runTime file fileTree abs any append asList asWritable call collect compareTo count div dump each eachByte eachFile eachLine every find findAll flatten getAt getErr getIn getOut getText grep immutable inject inspect intersect invokeMethods isCase join leftShift minus multiply newInputStream newOutputStream newPrintWriter newReader newWriter next plus pop power previous print println push putAt read readBytes readLines reverse reverseEach round size sort splitEachLine step subMap times toInteger toList tokenize upto waitForOrKill withPrintWriter withReader withStream withWriter withWriterAppend write writeLine"},c:[e.CLCM,e.CBCM,e.ASM,e.QSM,e.NM,e.RM]}});hljs.registerLanguage("json",function(e){var i={literal:"true false null"},n=[e.QSM,e.CNM],r={e:",",eW:!0,eE:!0,c:n,k:i},t={b:"{",e:"}",c:[{cN:"attr",b:/"/,e:/"/,c:[e.BE],i:"\\n"},e.inherit(r,{b:/:/})],i:"\\S"},c={b:"\\[",e:"\\]",c:[e.inherit(r)],i:"\\S"};return n.splice(n.length,0,t,c),{c:n,k:i,i:"\\S"}});hljs.registerLanguage("sql",function(e){var t=e.C("--","$");return{cI:!0,i:/[<>{}*]/,c:[{bK:"begin end start commit rollback savepoint lock alter create drop rename call delete do handler insert load replace select truncate update set show pragma grant merge describe use explain help declare prepare execute deallocate release unlock purge reset change stop analyze cache flush optimize repair kill install uninstall checksum restore check backup revoke comment with",e:/;/,eW:!0,l:/[\w\.]+/,k:{keyword:"as abort abs absolute acc acce accep accept access accessed accessible account acos action activate add addtime admin administer advanced advise aes_decrypt aes_encrypt after agent aggregate ali alia alias allocate allow alter always analyze ancillary and any anydata anydataset anyschema anytype apply archive archived archivelog are as asc ascii asin assembly assertion associate asynchronous at atan atn2 attr attri attrib attribu attribut attribute attributes audit authenticated authentication authid authors auto autoallocate autodblink autoextend automatic availability avg backup badfile basicfile before begin beginning benchmark between bfile bfile_base big bigfile bin binary_double binary_float binlog bit_and bit_count bit_length bit_or bit_xor bitmap blob_base block blocksize body both bound buffer_cache buffer_pool build bulk by byte byteordermark bytes cache caching call calling cancel capacity cascade cascaded case cast catalog category ceil ceiling chain change changed char_base char_length character_length characters characterset charindex charset charsetform charsetid check checksum checksum_agg child choose chr chunk class cleanup clear client clob clob_base clone close cluster_id cluster_probability cluster_set clustering coalesce coercibility col collate collation collect colu colum column column_value columns columns_updated comment commit compact compatibility compiled complete composite_limit compound compress compute concat concat_ws concurrent confirm conn connec connect connect_by_iscycle connect_by_isleaf connect_by_root connect_time connection consider consistent constant constraint constraints constructor container content contents context contributors controlfile conv convert convert_tz corr corr_k corr_s corresponding corruption cos cost count count_big counted covar_pop covar_samp cpu_per_call cpu_per_session crc32 create creation critical cross cube cume_dist curdate current current_date current_time current_timestamp current_user cursor curtime customdatum cycle data database databases datafile datafiles datalength date_add date_cache date_format date_sub dateadd datediff datefromparts datename datepart datetime2fromparts day day_to_second dayname dayofmonth dayofweek dayofyear days db_role_change dbtimezone ddl deallocate declare decode decompose decrement decrypt deduplicate def defa defau defaul default defaults deferred defi defin define degrees delayed delegate delete delete_all delimited demand dense_rank depth dequeue des_decrypt des_encrypt des_key_file desc descr descri describ describe descriptor deterministic diagnostics difference dimension direct_load directory disable disable_all disallow disassociate discardfile disconnect diskgroup distinct distinctrow distribute distributed div do document domain dotnet double downgrade drop dumpfile duplicate duration each edition editionable editions element ellipsis else elsif elt empty enable enable_all enclosed encode encoding encrypt end end-exec endian enforced engine engines enqueue enterprise entityescaping eomonth error errors escaped evalname evaluate event eventdata events except exception exceptions exchange exclude excluding execu execut execute exempt exists exit exp expire explain export export_set extended extent external external_1 external_2 externally extract failed failed_login_attempts failover failure far fast feature_set feature_value fetch field fields file file_name_convert filesystem_like_logging final finish first first_value fixed flash_cache flashback floor flush following follows for forall force foreign form forma format found found_rows freelist freelists freepools fresh from from_base64 from_days ftp full function general generated get get_format get_lock getdate getutcdate global global_name globally go goto grant grants greatest group group_concat group_id grouping grouping_id groups gtid_subtract guarantee guard handler hash hashkeys having hea head headi headin heading heap help hex hierarchy high high_priority hosts hour http id ident_current ident_incr ident_seed identified identity idle_time if ifnull ignore iif ilike ilm immediate import in include including increment index indexes indexing indextype indicator indices inet6_aton inet6_ntoa inet_aton inet_ntoa infile initial initialized initially initrans inmemory inner innodb input insert install instance instantiable instr interface interleaved intersect into invalidate invisible is is_free_lock is_ipv4 is_ipv4_compat is_not is_not_null is_used_lock isdate isnull isolation iterate java join json json_exists keep keep_duplicates key keys kill language large last last_day last_insert_id last_value lax lcase lead leading least leaves left len lenght length less level levels library like like2 like4 likec limit lines link list listagg little ln load load_file lob lobs local localtime localtimestamp locate locator lock locked log log10 log2 logfile logfiles logging logical logical_reads_per_call logoff logon logs long loop low low_priority lower lpad lrtrim ltrim main make_set makedate maketime managed management manual map mapping mask master master_pos_wait match matched materialized max maxextents maximize maxinstances maxlen maxlogfiles maxloghistory maxlogmembers maxsize maxtrans md5 measures median medium member memcompress memory merge microsecond mid migration min minextents minimum mining minus minute minvalue missing mod mode model modification modify module monitoring month months mount move movement multiset mutex name name_const names nan national native natural nav nchar nclob nested never new newline next nextval no no_write_to_binlog noarchivelog noaudit nobadfile nocheck nocompress nocopy nocycle nodelay nodiscardfile noentityescaping noguarantee nokeep nologfile nomapping nomaxvalue nominimize nominvalue nomonitoring none noneditionable nonschema noorder nopr nopro noprom nopromp noprompt norely noresetlogs noreverse normal norowdependencies noschemacheck noswitch not nothing notice notnull notrim novalidate now nowait nth_value nullif nulls num numb numbe nvarchar nvarchar2 object ocicoll ocidate ocidatetime ociduration ociinterval ociloblocator ocinumber ociref ocirefcursor ocirowid ocistring ocitype oct octet_length of off offline offset oid oidindex old on online only opaque open operations operator optimal optimize option optionally or oracle oracle_date oradata ord ordaudio orddicom orddoc order ordimage ordinality ordvideo organization orlany orlvary out outer outfile outline output over overflow overriding package pad parallel parallel_enable parameters parent parse partial partition partitions pascal passing password password_grace_time password_lock_time password_reuse_max password_reuse_time password_verify_function patch path patindex pctincrease pctthreshold pctused pctversion percent percent_rank percentile_cont percentile_disc performance period period_add period_diff permanent physical pi pipe pipelined pivot pluggable plugin policy position post_transaction pow power pragma prebuilt precedes preceding precision prediction prediction_cost prediction_details prediction_probability prediction_set prepare present preserve prior priority private private_sga privileges procedural procedure procedure_analyze processlist profiles project prompt protection public publishingservername purge quarter query quick quiesce quota quotename radians raise rand range rank raw read reads readsize rebuild record records recover recovery recursive recycle redo reduced ref reference referenced references referencing refresh regexp_like register regr_avgx regr_avgy regr_count regr_intercept regr_r2 regr_slope regr_sxx regr_sxy reject rekey relational relative relaylog release release_lock relies_on relocate rely rem remainder rename repair repeat replace replicate replication required reset resetlogs resize resource respect restore restricted result result_cache resumable resume retention return returning returns reuse reverse revoke right rlike role roles rollback rolling rollup round row row_count rowdependencies rowid rownum rows rtrim rules safe salt sample save savepoint sb1 sb2 sb4 scan schema schemacheck scn scope scroll sdo_georaster sdo_topo_geometry search sec_to_time second section securefile security seed segment select self sequence sequential serializable server servererror session session_user sessions_per_user set sets settings sha sha1 sha2 share shared shared_pool short show shrink shutdown si_averagecolor si_colorhistogram si_featurelist si_positionalcolor si_stillimage si_texture siblings sid sign sin size size_t sizes skip slave sleep smalldatetimefromparts smallfile snapshot some soname sort soundex source space sparse spfile split sql sql_big_result sql_buffer_result sql_cache sql_calc_found_rows sql_small_result sql_variant_property sqlcode sqldata sqlerror sqlname sqlstate sqrt square standalone standby start starting startup statement static statistics stats_binomial_test stats_crosstab stats_ks_test stats_mode stats_mw_test stats_one_way_anova stats_t_test_ stats_t_test_indep stats_t_test_one stats_t_test_paired stats_wsr_test status std stddev stddev_pop stddev_samp stdev stop storage store stored str str_to_date straight_join strcmp strict string struct stuff style subdate subpartition subpartitions substitutable substr substring subtime subtring_index subtype success sum suspend switch switchoffset switchover sync synchronous synonym sys sys_xmlagg sysasm sysaux sysdate sysdatetimeoffset sysdba sysoper system system_user sysutcdatetime table tables tablespace tan tdo template temporary terminated tertiary_weights test than then thread through tier ties time time_format time_zone timediff timefromparts timeout timestamp timestampadd timestampdiff timezone_abbr timezone_minute timezone_region to to_base64 to_date to_days to_seconds todatetimeoffset trace tracking transaction transactional translate translation treat trigger trigger_nestlevel triggers trim truncate try_cast try_convert try_parse type ub1 ub2 ub4 ucase unarchived unbounded uncompress under undo unhex unicode uniform uninstall union unique unix_timestamp unknown unlimited unlock unnest unpivot unrecoverable unsafe unsigned until untrusted unusable unused update updated upgrade upped upper upsert url urowid usable usage use use_stored_outlines user user_data user_resources users using utc_date utc_timestamp uuid uuid_short validate validate_password_strength validation valist value values var var_samp varcharc vari varia variab variabl variable variables variance varp varraw varrawc varray verify version versions view virtual visible void wait wallet warning warnings week weekday weekofyear wellformed when whene whenev wheneve whenever where while whitespace with within without work wrapped xdb xml xmlagg xmlattributes xmlcast xmlcolattval xmlelement xmlexists xmlforest xmlindex xmlnamespaces xmlpi xmlquery xmlroot xmlschema xmlserialize xmltable xmltype xor year year_to_month years yearweek",literal:"true false null unknown",built_in:"array bigint binary bit blob bool boolean char character date dec decimal float int int8 integer interval number numeric real record serial serial8 smallint text time timestamp varchar varying void"},c:[{cN:"string",b:"'",e:"'",c:[e.BE,{b:"''"}]},{cN:"string",b:'"',e:'"',c:[e.BE,{b:'""'}]},{cN:"string",b:"`",e:"`",c:[e.BE]},e.CNM,e.CBCM,t,e.HCM]},e.CBCM,t,e.HCM]}});hljs.registerLanguage("go",function(e){var t={keyword:"break default func interface select case map struct chan else goto package switch const fallthrough if range type continue for import return var go defer bool byte complex64 complex128 float32 float64 int8 int16 int32 int64 string uint8 uint16 uint32 uint64 int uint uintptr rune",literal:"true false iota nil",built_in:"append cap close complex copy imag len make new panic print println real recover delete"};return{aliases:["golang"],k:t,i:"",rB:!0,e:"\\s*=>",c:[{cN:"params",v:[{b:r},{b:/\(\s*\)/},{b:/\(/,e:/\)/,eB:!0,eE:!0,k:t,c:s}]}]},{b://,sL:"xml",c:[{b:/<\w+\s*\/>/,skip:!0},{b:/<\w+/,e:/(\/\w+|\w+\/)>/,skip:!0,c:[{b:/<\w+\s*\/>/,skip:!0},"self"]}]}],r:0},{cN:"function",bK:"function",e:/\{/,eE:!0,c:[e.inherit(e.TM,{b:r}),{cN:"params",b:/\(/,e:/\)/,eB:!0,eE:!0,c:s}],i:/\[|%/},{b:/\$[(.]/},e.METHOD_GUARD,{cN:"class",bK:"class",e:/[{;=]/,eE:!0,i:/[:"\[\]]/,c:[{bK:"extends"},e.UTM]},{bK:"constructor",e:/\{/,eE:!0}],i:/#(?!!)/}}); \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/atom-one-light.min.css b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/atom-one-light.min.css new file mode 100644 index 00000000..d5bd1d2a --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/atom-one-light.min.css @@ -0,0 +1,96 @@ +/* + +Atom One Light by Daniel Gamage +Original One Light Syntax theme from https://github.com/atom/one-light-syntax + +base: #fafafa +mono-1: #383a42 +mono-2: #686b77 +mono-3: #a0a1a7 +hue-1: #0184bb +hue-2: #4078f2 +hue-3: #a626a4 +hue-4: #50a14f +hue-5: #e45649 +hue-5-2: #c91243 +hue-6: #986801 +hue-6-2: #c18401 + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + color: #383a42; + background: #fafafa; +} + +.hljs-comment, +.hljs-quote { + color: #a0a1a7; + font-style: italic; +} + +.hljs-doctag, +.hljs-keyword, +.hljs-formula { + color: #a626a4; +} + +.hljs-section, +.hljs-name, +.hljs-selector-tag, +.hljs-deletion, +.hljs-subst { + color: #e45649; +} + +.hljs-literal { + color: #0184bb; +} + +.hljs-string, +.hljs-regexp, +.hljs-addition, +.hljs-attribute, +.hljs-meta-string { + color: #50a14f; +} + +.hljs-built_in, +.hljs-class .hljs-title { + color: #c18401; +} + +.hljs-attr, +.hljs-variable, +.hljs-template-variable, +.hljs-type, +.hljs-selector-class, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-number { + color: #986801; +} + +.hljs-symbol, +.hljs-bullet, +.hljs-link, +.hljs-meta, +.hljs-selector-id, +.hljs-title { + color: #4078f2; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} + +.hljs-link { + text-decoration: underline; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github-gist.css b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github-gist.css new file mode 100644 index 00000000..2706084a --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github-gist.css @@ -0,0 +1,79 @@ +/** + * GitHub Gist Theme + * Author : Anthony Attard - https://github.com/AnthonyAttard + * Author : Louis Barranqueiro - https://github.com/LouisBarranqueiro + */ + +.hljs { + display: block; + background: white; + padding: 0.5em; + color: #333333; + overflow-x: auto; +} + +.hljs-comment, +.hljs-meta { + color: #969896; +} + +.hljs-variable, +.hljs-template-variable, +.hljs-strong, +.hljs-emphasis, +.hljs-quote { + color: #df5000; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-type { + color: #d73a49; +} + +.hljs-literal, +.hljs-symbol, +.hljs-bullet, +.hljs-attribute { + color: #0086b3; +} + +.hljs-section, +.hljs-name { + color: #63a35c; +} + +.hljs-tag { + color: #333333; +} + +.hljs-title, +.hljs-attr, +.hljs-selector-id, +.hljs-selector-class, +.hljs-selector-attr, +.hljs-selector-pseudo { + color: #6f42c1; +} + +.hljs-addition { + color: #55a532; + background-color: #eaffea; +} + +.hljs-deletion { + color: #bd2c00; + background-color: #ffecec; +} + +.hljs-link { + text-decoration: underline; +} + +.hljs-number { + color: #005cc5; +} + +.hljs-string { + color: #032f62; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github.min.css b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github.min.css new file mode 100644 index 00000000..791932b8 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/github.min.css @@ -0,0 +1,99 @@ +/* + +github.com style (c) Vasily Polovnyov + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + color: #333; + background: #f8f8f8; +} + +.hljs-comment, +.hljs-quote { + color: #998; + font-style: italic; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-subst { + color: #333; + font-weight: bold; +} + +.hljs-number, +.hljs-literal, +.hljs-variable, +.hljs-template-variable, +.hljs-tag .hljs-attr { + color: #008080; +} + +.hljs-string, +.hljs-doctag { + color: #d14; +} + +.hljs-title, +.hljs-section, +.hljs-selector-id { + color: #900; + font-weight: bold; +} + +.hljs-subst { + font-weight: normal; +} + +.hljs-type, +.hljs-class .hljs-title { + color: #458; + font-weight: bold; +} + +.hljs-tag, +.hljs-name, +.hljs-attribute { + color: #000080; + font-weight: normal; +} + +.hljs-regexp, +.hljs-link { + color: #009926; +} + +.hljs-symbol, +.hljs-bullet { + color: #990073; +} + +.hljs-built_in, +.hljs-builtin-name { + color: #0086b3; +} + +.hljs-meta { + color: #999; + font-weight: bold; +} + +.hljs-deletion { + background: #fdd; +} + +.hljs-addition { + background: #dfd; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/googlecode.css b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/googlecode.css new file mode 100644 index 00000000..0cf18a04 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/googlecode.css @@ -0,0 +1,89 @@ +/* + +Google Code style (c) Aahan Krish + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + background: white; + color: black; +} + +.hljs-comment, +.hljs-quote { + color: #800; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-section, +.hljs-title, +.hljs-name { + color: #008; +} + +.hljs-variable, +.hljs-template-variable { + color: #660; +} + +.hljs-string, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-regexp { + color: #080; +} + +.hljs-literal, +.hljs-symbol, +.hljs-bullet, +.hljs-meta, +.hljs-number, +.hljs-link { + color: #066; +} + +.hljs-title, +.hljs-doctag, +.hljs-type, +.hljs-attr, +.hljs-built_in, +.hljs-builtin-name, +.hljs-params { + color: #606; +} + +.hljs-attribute, +.hljs-subst { + color: #000; +} + +.hljs-formula { + background-color: #eee; + font-style: italic; +} + +.hljs-selector-id, +.hljs-selector-class { + color: #9B703F +} + +.hljs-addition { + background-color: #baeeba; +} + +.hljs-deletion { + background-color: #ffc8bd; +} + +.hljs-doctag, +.hljs-strong { + font-weight: bold; +} + +.hljs-emphasis { + font-style: italic; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/solarized-light.min.css b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/solarized-light.min.css new file mode 100644 index 00000000..fdcfcc72 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/highlight/styles/solarized-light.min.css @@ -0,0 +1,84 @@ +/* + +Orginal Style from ethanschoonover.com/solarized (c) Jeremy Hull + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + background: #fdf6e3; + color: #657b83; +} + +.hljs-comment, +.hljs-quote { + color: #93a1a1; +} + +/* Solarized Green */ +.hljs-keyword, +.hljs-selector-tag, +.hljs-addition { + color: #859900; +} + +/* Solarized Cyan */ +.hljs-number, +.hljs-string, +.hljs-meta .hljs-meta-string, +.hljs-literal, +.hljs-doctag, +.hljs-regexp { + color: #2aa198; +} + +/* Solarized Blue */ +.hljs-title, +.hljs-section, +.hljs-name, +.hljs-selector-id, +.hljs-selector-class { + color: #268bd2; +} + +/* Solarized Yellow */ +.hljs-attribute, +.hljs-attr, +.hljs-variable, +.hljs-template-variable, +.hljs-class .hljs-title, +.hljs-type { + color: #b58900; +} + +/* Solarized Orange */ +.hljs-symbol, +.hljs-bullet, +.hljs-subst, +.hljs-meta, +.hljs-meta .hljs-keyword, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-link { + color: #cb4b16; +} + +/* Solarized Red */ +.hljs-built_in, +.hljs-deletion { + color: #dc322f; +} + +.hljs-formula { + background: #eee8d5; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/toc.js b/spring-cloud-security/3.0.0-M2/reference/html/js/toc.js new file mode 100644 index 00000000..0b6fcd65 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/toc.js @@ -0,0 +1,80 @@ +var toctitle = document.getElementById('toctitle'); +var path = window.location.pathname; +if (toctitle != null) { + var oldtoc = toctitle.nextElementSibling; + var newtoc = document.createElement('div'); + newtoc.setAttribute('id', 'tocbot'); + newtoc.setAttribute('class', 'js-toc desktop-toc'); + oldtoc.setAttribute('class', 'mobile-toc'); + oldtoc.parentNode.appendChild(newtoc); + tocbot.init({ + contentSelector: '#content', + headingSelector: 'h1, h2, h3, h4, h5', + positionFixedSelector: 'body', + fixedSidebarOffset: 90, + smoothScroll: false + }); + if (!path.endsWith("index.html") && !path.endsWith("/")) { + var link = document.createElement("a"); + if (document.getElementById('index-link')) { + indexLinkElement = document.querySelector('#index-link > p > a'); + linkHref = indexLinkElement.getAttribute("href"); + link.setAttribute("href", linkHref); + } else { + link.setAttribute("href", "index.html"); + } + link.innerHTML = " Back to index"; + var block = document.createElement("div"); + block.setAttribute('class', 'back-action'); + block.appendChild(link); + var toc = document.getElementById('toc'); + var next = document.getElementById('toctitle').nextElementSibling; + toc.insertBefore(block, next); + } +} + +var headerHtml = '
\n' + + '

\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '

\n' + + '
'; + +var header = document.createElement("div"); +header.innerHTML = headerHtml; +document.body.insertBefore(header, document.body.firstChild); diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.css b/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.css new file mode 100644 index 00000000..0632de23 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.css @@ -0,0 +1 @@ +.toc{overflow-y:auto}.toc>.toc-list{overflow:hidden;position:relative}.toc>.toc-list li{list-style:none}.toc-list{margin:0;padding-left:10px}a.toc-link{color:currentColor;height:100%}.is-collapsible{max-height:1000px;overflow:hidden;transition:all 300ms ease-in-out}.is-collapsed{max-height:0}.is-position-fixed{position:fixed !important;top:0}.is-active-link{font-weight:700}.toc-link::before{background-color:#EEE;content:' ';display:inline-block;height:inherit;left:0;margin-top:-1px;position:absolute;width:2px}.is-active-link::before{background-color:#54BC4B} diff --git a/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.min.js b/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.min.js new file mode 100644 index 00000000..943d8fdb --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/js/tocbot/tocbot.min.js @@ -0,0 +1 @@ +!function(e){function t(o){if(n[o])return n[o].exports;var l=n[o]={i:o,l:!1,exports:{}};return e[o].call(l.exports,l,l.exports,t),l.l=!0,l.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)||Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=0)}([function(e,t,n){(function(o){var l,i,s;!function(n,o){i=[],l=o(n),void 0!==(s="function"==typeof l?l.apply(t,i):l)&&(e.exports=s)}(void 0!==o?o:this.window||this.global,function(e){"use strict";function t(){for(var e={},t=0;te.fixedSidebarOffset?-1===n.className.indexOf(e.positionFixedClass)&&(n.className+=h+e.positionFixedClass):n.className=n.className.split(h+e.positionFixedClass).join("")}function s(t){var n=document.documentElement.scrollTop||f.scrollTop;e.positionFixedSelector&&i();var o,l=t;if(m&&null!==document.querySelector(e.tocSelector)&&l.length>0){d.call(l,function(t,i){if(t.offsetTop>n+e.headingsOffset+10){return o=l[0===i?i:i-1],!0}if(i===l.length-1)return o=l[l.length-1],!0});var s=document.querySelector(e.tocSelector).querySelectorAll("."+e.linkClass);u.call(s,function(t){t.className=t.className.split(h+e.activeLinkClass).join("")});var c=document.querySelector(e.tocSelector).querySelectorAll("."+e.listItemClass);u.call(c,function(t){t.className=t.className.split(h+e.activeListItemClass).join("")});var a=document.querySelector(e.tocSelector).querySelector("."+e.linkClass+".node-name--"+o.nodeName+'[href="#'+o.id+'"]');-1===a.className.indexOf(e.activeLinkClass)&&(a.className+=h+e.activeLinkClass);var p=a.parentNode;p&&-1===p.className.indexOf(e.activeListItemClass)&&(p.className+=h+e.activeListItemClass);var C=document.querySelector(e.tocSelector).querySelectorAll("."+e.listClass+"."+e.collapsibleClass);u.call(C,function(t){-1===t.className.indexOf(e.isCollapsedClass)&&(t.className+=h+e.isCollapsedClass)}),a.nextSibling&&-1!==a.nextSibling.className.indexOf(e.isCollapsedClass)&&(a.nextSibling.className=a.nextSibling.className.split(h+e.isCollapsedClass).join("")),r(a.parentNode.parentNode)}}function r(t){return-1!==t.className.indexOf(e.collapsibleClass)&&-1!==t.className.indexOf(e.isCollapsedClass)?(t.className=t.className.split(h+e.isCollapsedClass).join(""),r(t.parentNode.parentNode)):t}function c(t){var n=t.target||t.srcElement;"string"==typeof n.className&&-1!==n.className.indexOf(e.linkClass)&&(m=!1)}function a(){m=!0}var u=[].forEach,d=[].some,f=document.body,m=!0,h=" ";return{enableTocAnimation:a,disableTocAnimation:c,render:n,updateToc:s}}},function(e,t){e.exports=function(e){function t(e){return e[e.length-1]}function n(e){return+e.nodeName.split("H").join("")}function o(t){var o={id:t.id,children:[],nodeName:t.nodeName,headingLevel:n(t),textContent:t.textContent.trim()};return e.includeHtml&&(o.childNodes=t.childNodes),o}function l(l,i){for(var s=o(l),r=n(l),c=i,a=t(c),u=a?a.headingLevel:0,d=r-u;d>0;)a=t(c),a&&void 0!==a.children&&(c=a.children),d--;return r>=e.collapseDepth&&(s.isCollapsed=!0),c.push(s),c}function i(t,n){var o=n;e.ignoreSelector&&(o=n.split(",").map(function(t){return t.trim()+":not("+e.ignoreSelector+")"}));try{return document.querySelector(t).querySelectorAll(o)}catch(e){return console.warn("Element not found: "+t),null}}function s(e){return r.call(e,function(e,t){return l(o(t),e.nest),e},{nest:[]})}var r=[].reduce;return{nestHeadingsArray:s,selectHeadings:i}}},function(e,t){function n(e){function t(e){return"a"===e.tagName.toLowerCase()&&(e.hash.length>0||"#"===e.href.charAt(e.href.length-1))&&(n(e.href)===s||n(e.href)+"#"===s)}function n(e){return e.slice(0,e.lastIndexOf("#"))}function l(e){var t=document.getElementById(e.substring(1));t&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())}!function(){document.documentElement.style}();var i=e.duration,s=location.hash?n(location.href):location.href;!function(){function n(n){!t(n.target)||n.target.className.indexOf("no-smooth-scroll")>-1||"#"===n.target.href.charAt(n.target.href.length-2)&&"!"===n.target.href.charAt(n.target.href.length-1)||-1===n.target.className.indexOf(e.linkClass)||o(n.target.hash,{duration:i,callback:function(){l(n.target.hash)}})}document.body.addEventListener("click",n,!1)}()}function o(e,t){function n(e){s=e-i,window.scrollTo(0,c.easing(s,r,u,d)),s + + + + + + +OAuth2 Single Sign On + + + + + + + + + + +
+
+

OAuth2 Single Sign On

+
+

Here’s a Spring Cloud "Hello World" app with HTTP Basic +authentication and a single user account:

+
+
+
app.groovy
+
+
@Grab('spring-boot-starter-security')
+@Controller
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

You can run it with spring run app.groovy and watch the logs for the password (username is "user"). So far this is just the default for a Spring Boot app.

+
+
+

Here’s a Spring Cloud app with OAuth2 SSO:

+
+
+
app.groovy
+
+
@Controller
+@EnableOAuth2Sso
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

Spot the difference? This app will actually behave exactly the same as +the previous one, because it doesn’t know it’s OAuth2 credentals +yet.

+
+
+

You can register an app in github quite easily, so try that if you +want a production app on your own domain. If you are happy to test on +localhost:8080, then set up these properties in your application +configuration:

+
+
+
application.yml
+
+
security:
+  oauth2:
+    client:
+      clientId: bd1c0a783ccdd1c9b9e4
+      clientSecret: 1a9030fbca47a5b2c28e92f19050bb77824b5ad1
+      accessTokenUri: https://github.com/login/oauth/access_token
+      userAuthorizationUri: https://github.com/login/oauth/authorize
+      clientAuthenticationScheme: form
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+

run the app above and it will redirect to github for authorization. If +you are already signed into github you won’t even notice that it has +authenticated. These credentials will only work if your app is +running on port 8080.

+
+
+

To limit the scope that the client asks for when it obtains an access token +you can set security.oauth2.client.scope (comma separated or an array in YAML). By +default the scope is empty and it is up to to Authorization Server to +decide what the defaults should be, usually depending on the settings in +the client registration that it holds.

+
+
+ + + + + +
+ + +The examples above are all Groovy scripts. If you want to write the +same code in Java (or Groovy) you need to add Spring Security OAuth2 +to the classpath (e.g. see the +sample here). +
+
+
+
+

OAuth2 Protected Resource

+
+

You want to protect an API resource with an OAuth2 token? Here’s a +simple example (paired with the client above):

+
+
+
app.groovy
+
+
@Grab('spring-cloud-starter-security')
+@RestController
+@EnableResourceServer
+class Application {
+
+  @RequestMapping('/')
+  def home() {
+    [message: 'Hello World']
+  }
+
+}
+
+
+
+

and

+
+
+
application.yml
+
+
security:
+  oauth2:
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/html/spring-cloud-security.html b/spring-cloud-security/3.0.0-M2/reference/html/spring-cloud-security.html new file mode 100644 index 00000000..c55c0156 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/html/spring-cloud-security.html @@ -0,0 +1,612 @@ + + + + + + + +Spring Cloud Security + + + + + + + + + + +
+
+
+
+

Spring Cloud Security offers a set of primitives for building secure +applications and services with minimum fuss. A declarative model which +can be heavily configured externally (or centrally) lends itself to +the implementation of large systems of co-operating, remote components, +usually with a central indentity management service. It is also extremely +easy to use in a service platform like Cloud Foundry. Building on +Spring Boot and Spring Security OAuth2 we can quickly create systems that +implement common patterns like single sign on, token relay and token +exchange.

+
+
+ + + + + +
+ + +Spring Cloud is released under the non-restrictive Apache 2.0 license. If you would like to contribute to this section of the documentation or if you find an error, please find the source code and issue trackers in the project at github. +
+
+
+
+
+

Quickstart

+
+
+

OAuth2 Single Sign On

+
+

Here’s a Spring Cloud "Hello World" app with HTTP Basic +authentication and a single user account:

+
+
+
app.groovy
+
+
@Grab('spring-boot-starter-security')
+@Controller
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

You can run it with spring run app.groovy and watch the logs for the password (username is "user"). So far this is just the default for a Spring Boot app.

+
+
+

Here’s a Spring Cloud app with OAuth2 SSO:

+
+
+
app.groovy
+
+
@Controller
+@EnableOAuth2Sso
+class Application {
+
+  @RequestMapping('/')
+  String home() {
+    'Hello World'
+  }
+
+}
+
+
+
+

Spot the difference? This app will actually behave exactly the same as +the previous one, because it doesn’t know it’s OAuth2 credentals +yet.

+
+
+

You can register an app in github quite easily, so try that if you +want a production app on your own domain. If you are happy to test on +localhost:8080, then set up these properties in your application +configuration:

+
+
+
application.yml
+
+
security:
+  oauth2:
+    client:
+      clientId: bd1c0a783ccdd1c9b9e4
+      clientSecret: 1a9030fbca47a5b2c28e92f19050bb77824b5ad1
+      accessTokenUri: https://github.com/login/oauth/access_token
+      userAuthorizationUri: https://github.com/login/oauth/authorize
+      clientAuthenticationScheme: form
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+

run the app above and it will redirect to github for authorization. If +you are already signed into github you won’t even notice that it has +authenticated. These credentials will only work if your app is +running on port 8080.

+
+
+

To limit the scope that the client asks for when it obtains an access token +you can set security.oauth2.client.scope (comma separated or an array in YAML). By +default the scope is empty and it is up to to Authorization Server to +decide what the defaults should be, usually depending on the settings in +the client registration that it holds.

+
+
+ + + + + +
+ + +The examples above are all Groovy scripts. If you want to write the +same code in Java (or Groovy) you need to add Spring Security OAuth2 +to the classpath (e.g. see the +sample here). +
+
+
+
+

OAuth2 Protected Resource

+
+

You want to protect an API resource with an OAuth2 token? Here’s a +simple example (paired with the client above):

+
+
+
app.groovy
+
+
@Grab('spring-cloud-starter-security')
+@RestController
+@EnableResourceServer
+class Application {
+
+  @RequestMapping('/')
+  def home() {
+    [message: 'Hello World']
+  }
+
+}
+
+
+
+

and

+
+
+
application.yml
+
+
security:
+  oauth2:
+    resource:
+      userInfoUri: https://api.github.com/user
+      preferTokenInfo: false
+
+
+
+
+
+
+

More Detail

+
+
+

Single Sign On

+
+ + + + + +
+ + +All of the OAuth2 SSO and resource server features moved to Spring Boot +in version 1.3. You can find documentation in the +Spring Boot user guide. +
+
+
+
+

Token Relay

+
+

A Token Relay is where an OAuth2 consumer acts as a Client and +forwards the incoming token to outgoing resource requests. The +consumer can be a pure Client (like an SSO application) or a Resource +Server.

+
+
+

Client Token Relay in Spring Cloud Gateway

+
+

If your app also has a +Spring +Cloud Gateway embedded reverse proxy then you +can ask it to forward OAuth2 access tokens downstream to the services +it is proxying. Thus the SSO app above can be enhanced simply like +this:

+
+
+
App.java
+
+
@Autowired
+private TokenRelayGatewayFilterFactory filterFactory;
+
+@Bean
+public RouteLocator customRouteLocator(RouteLocatorBuilder builder) {
+    return builder.routes()
+            .route("resource", r -> r.path("/resource")
+                    .filters(f -> f.filter(filterFactory.apply()))
+                    .uri("http://localhost:9000"))
+            .build();
+}
+
+
+
+

or this

+
+
+
application.yaml
+
+
spring:
+  cloud:
+    gateway:
+      routes:
+      - id: resource
+        uri: http://localhost:9000
+        predicates:
+        - Path=/resource
+        filters:
+        - TokenRelay=
+
+
+
+

and it will (in addition to logging the user in and grabbing a token) +pass the authentication token downstream to the services (in this case +/resource).

+
+
+

To enable this for Spring Cloud Gateway add the following dependencies

+
+
+
    +
  • +

    org.springframework.boot:spring-boot-starter-oauth2-client

    +
    • +
  • +

    org.springframework.cloud:spring-cloud-starter-security

    +
    • +
+
+
+

How does it work? The +filter +extracts an access token from the currently authenticated user, +and puts it in a request header for the downstream requests.

+
+
+

For a full working sample see this project.

+
+
+ + + + + +
+ + +The default implementation of ReactiveOAuth2AuthorizedClientService used by TokenRelayGatewayFilterFactory +uses an in-memory data store. You will need to provide your own implementation ReactiveOAuth2AuthorizedClientService +if you need a more robust solution. +
+
+
+
+

Client Token Relay

+
+

If your app is a user facing OAuth2 client (i.e. has declared +@EnableOAuth2Sso or @EnableOAuth2Client) then it has an +OAuth2ClientContext in request scope from Spring Boot. You can +create your own OAuth2RestTemplate from this context and an +autowired OAuth2ProtectedResourceDetails, and then the context will +always forward the access token downstream, also refreshing the access +token automatically if it expires. (These are features of Spring +Security and Spring Boot.)

+
+
+ + + + + +
+ + +Spring Boot (1.4.1) does not create an +OAuth2ProtectedResourceDetails automatically if you are using +client_credentials tokens. In that case you need to create your own +ClientCredentialsResourceDetails and configure it with +@ConfigurationProperties("security.oauth2.client"). +
+
+
+
+

Client Token Relay in Zuul Proxy

+
+

If your app also has a +Spring +Cloud Zuul embedded reverse proxy (using @EnableZuulProxy) then you +can ask it to forward OAuth2 access tokens downstream to the services +it is proxying. Thus the SSO app above can be enhanced simply like +this:

+
+
+
app.groovy
+
+
@Controller
+@EnableOAuth2Sso
+@EnableZuulProxy
+class Application {
+
+}
+
+
+
+

and it will (in addition to logging the user in and grabbing a token) +pass the authentication token downstream to the /proxy/* +services. If those services are implemented with +@EnableResourceServer then they will get a valid token in the +correct header.

+
+
+

How does it work? The @EnableOAuth2Sso annotation pulls in +spring-cloud-starter-security (which you could do manually in a +traditional app), and that in turn triggers some autoconfiguration for +a ZuulFilter, which itself is activated because Zuul is on the +classpath (via @EnableZuulProxy). The +filter +just extracts an access token from the currently authenticated user, +and puts it in a request header for the downstream requests.

+
+
+ + + + + +
+ + +Spring Boot does not create an OAuth2RestOperations automatically which is needed for refresh_token. In that case you need to create your own +OAuth2RestOperations so OAuth2TokenRelayFilter can refresh the token if needed. +
+
+
+
+

Resource Server Token Relay

+
+

If your app has @EnableResourceServer you might want to relay the +incoming token downstream to other services. If you use a +RestTemplate to contact the downstream services then this is just a +matter of how to create the template with the right context.

+
+
+

If your service uses UserInfoTokenServices to authenticate incoming +tokens (i.e. it is using the security.oauth2.user-info-uri +configuration), then you can simply create an OAuth2RestTemplate +using an autowired OAuth2ClientContext (it will be populated by the +authentication process before it hits the backend code). Equivalently +(with Spring Boot 1.4), you could inject a +UserInfoRestTemplateFactory and grab its OAuth2RestTemplate in +your configuration. For example:

+
+
+
MyConfiguration.java
+
+
@Bean
+public OAuth2RestTemplate restTemplate(UserInfoRestTemplateFactory factory) {
+    return factory.getUserInfoRestTemplate();
+}
+
+
+
+

This rest template will then have the same OAuth2ClientContext +(request-scoped) that is used by the authentication filter, so you can +use it to send requests with the same access token.

+
+
+

If your app is not using UserInfoTokenServices but is still a client +(i.e. it declares @EnableOAuth2Client or @EnableOAuth2Sso), then +with Spring Security Cloud any OAuth2RestOperations that the user +creates from an @Autowired OAuth2Context will also forward +tokens. This feature is implemented by default as an MVC handler +interceptor, so it only works in Spring MVC. If you are not using MVC +you could use a custom filter or AOP interceptor wrapping an +AccessTokenContextRelay to provide the same feature.

+
+
+

Here’s a basic +example showing the use of an autowired rest template created +elsewhere ("foo.com" is a Resource Server accepting the same tokens as +the surrounding app):

+
+
+
MyController.java
+
+
@Autowired
+private OAuth2RestOperations restTemplate;
+
+@RequestMapping("/relay")
+public String relay() {
+    ResponseEntity<String> response =
+      restTemplate.getForEntity("https://foo.com/bar", String.class);
+    return "Success! (" + response.getBody() + ")";
+}
+
+
+
+

If you don’t want to forward tokens (and that is a valid +choice, since you might want to act as yourself, rather than the +client that sent you the token), then you only need to create your own +OAuth2Context instead of autowiring the default one.

+
+
+

Feign clients will also pick up an interceptor that uses the +OAuth2ClientContext if it is available, so they should also do a +token relay anywhere where a RestTemplate would.

+
+
+
+
+
+
+

Configuring Authentication Downstream of a Zuul Proxy

+
+
+

You can control the authorization behaviour downstream of an +@EnableZuulProxy through the proxy.auth.* settings. Example:

+
+
+
application.yml
+
+
proxy:
+  auth:
+    routes:
+      customers: oauth2
+      stores: passthru
+      recommendations: none
+
+
+
+

In this example the "customers" service gets an OAuth2 token relay, +the "stores" service gets a passthrough (the authorization header is +just passed downstream), and the "recommendations" service has its +authorization header removed. The default behaviour is to do a token +relay if there is a token available, and passthru otherwise.

+
+
+

See + +ProxyAuthenticationProperties for full details.

+
+
+
+
+ + + + + + + \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/css/spring.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/css/spring.css new file mode 100644 index 00000000..7fead00e --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/css/spring.css @@ -0,0 +1 @@ +@import url("https://fonts.googleapis.com/css?family=Open+Sans:400,700&display=swap");/*! normalize.css v2.1.2 | MIT License | git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}script{display:none !important}html,body{font-size:100%}html{font-family:'Open Sans', sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}*,*:before,*:after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}body{background:white;color:#000;padding:0;margin:0;font-size:16px;font-family:'Open Sans', sans-serif;font-weight:normal;font-style:normal;line-height:1.6em;position:relative;cursor:auto}a:hover{cursor:pointer}img,object,embed{max-width:100%;height:auto}object,embed{height:100%}img{-ms-interpolation-mode:bicubic}#map_canvas img,#map_canvas embed,#map_canvas object,.map_canvas img,.map_canvas embed,.map_canvas object{max-width:none !important}.left{float:left !important}.right{float:right !important}.text-left{text-align:left !important}.text-right{text-align:right !important}.text-center{text-align:center !important}.text-justify{text-align:justify !important}.hide{display:none}.antialiased{-webkit-font-smoothing:antialiased}img{display:inline-block;vertical-align:middle}textarea{height:auto;min-height:50px}select{width:100%}object,svg{display:inline-block;vertical-align:middle}.center{margin-left:auto;margin-right:auto}.spread,.stretch{width:100%}p.lead,.paragraph.lead>p,#preamble>.sectionbody>.paragraph:first-of-type p{line-height:1.6}.subheader,.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{line-height:1.45;color:#0b0a0a;font-weight:bold;margin-top:0;margin-bottom:0.8em}div,dl,dt,dd,ul,ol,li,h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6,pre,form,p,blockquote,th,td{margin:0;padding:0;direction:ltr}a{color:#086dc3;line-height:inherit;text-decoration:none}a:hover,a:focus{color:#086dc3;text-decoration:underline}a img{border:none}p{font-family:inherit;font-weight:normal;font-size:1em;line-height:1.6;margin-bottom:1.25em;text-rendering:optimizeLegibility}p aside{font-size:0.875em;line-height:1.35;font-style:italic}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{font-family:Montserrat, sans-serif;font-weight:400;font-style:normal;color:#000;text-rendering:optimizeLegibility;margin-top:1em;margin-bottom:0.5em;line-height:1.0125em}h1 small,h2 small,h3 small,#toctitle small,.sidebarblock>.content>.title small,h4 small,h5 small,h6 small{font-size:60%;color:#867c74;line-height:0}h1{font-size:2.125em}h2{font-size:1.6875em}h3,#toctitle,.sidebarblock>.content>.title{font-size:1.375em}h4{font-size:1.125em}h5{font-size:1.125em}h6{font-size:1em}hr{border:solid #dce6e6;border-width:1px 0 0;clear:both;margin:1.25em 0 1.1875em;height:0}em,i{font-style:italic;line-height:inherit}strong,b{font-weight:bold;line-height:inherit}small{font-size:60%;line-height:inherit}code{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-weight:normal;color:#3d3d3c;word-break:break-word}a:not(pre)>code{border:1px solid #086dc3;color:#086dc3}ul,ol,dl{font-size:1em;line-height:1.6;margin-bottom:1.25em;list-style-position:outside;font-family:inherit}ul,ol{margin-left:1.5em}ul.no-bullet,ol.no-bullet{margin-left:1.5em}ul li ul,ul li ol{margin-left:1.25em;margin-bottom:0;font-size:1em}ul.square li ul,ul.circle li ul,ul.disc li ul{list-style:inherit}ul.square{list-style-type:square}ul.circle{list-style-type:circle}ul.disc{list-style-type:disc}ul.no-bullet{list-style:none}ol li ul,ol li ol{margin-left:1.25em;margin-bottom:0}dl dt{margin-bottom:0.3125em;font-weight:bold}dl dd{margin-bottom:1.25em}abbr,acronym{text-transform:uppercase;font-size:90%;color:#000;border-bottom:1px dotted #dddddd;cursor:help}abbr{text-transform:none}blockquote{margin:0 0 1.25em;padding:0.5625em 1.25em 0 1.1875em;border-left:1px solid #dddddd}blockquote cite{display:block;font-size:0.9375em;color:rgba(0,0,0,0.6)}blockquote cite:before{content:"\2014 \0020"}blockquote cite a,blockquote cite a:visited{color:rgba(0,0,0,0.6)}blockquote,blockquote p{line-height:1.6;color:rgba(0,0,0,0.85)}.vcard{display:inline-block;margin:0 0 1.25em 0;border:1px solid #dddddd;padding:0.625em 0.75em}.vcard li{margin:0;display:block}.vcard .fn{font-weight:bold;font-size:0.9375em}.vevent .summary{font-weight:bold}.vevent abbr{cursor:auto;text-decoration:none;font-weight:bold;border:none;padding:0 0.0625em}#tocbot{padding:0 0 0.5rem 0;line-height:1.5rem;padding-left:10px}.mobile-toc{padding:0 0 1rem 0;line-height:1.5rem}.mobile-toc li a{display:block;padding:.3rem 0}#tocbot ol li{list-style:none;padding:0;margin:0}#tocbot ol{margin:0;padding:0}#tocbot ol ol{padding-left:0.6rem}#tocbot .toc-link{display:block;padding-top:.6rem;padding-bottom:.6rem;outline:none;border-radius:4px;font-size:15px;transition:all .15s}#tocbot .toc-link:hover{background:#ebf2f2;color:#06c;text-decoration:none}table{background:white;margin-bottom:1.25em;border:solid 1px #d4dfdf;border-spacing:0}table thead,table tfoot{background:#ebf2f2;font-weight:bold}table thead tr th,table thead tr td,table tfoot tr th,table tfoot tr td{padding:0.5em 0.625em 0.625em;font-size:inherit;color:#000;text-align:left}table tr th,table tr td{padding:0.5625em 0.625em;font-size:inherit;color:#000}table tr.even,table tr.alt,table tr:nth-child(even){background:#f5f9f9}table thead tr th,table tfoot tr th,table tbody tr td,table tr td,table tfoot tr td{display:table-cell;line-height:1.6}body{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;tab-size:4}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2;word-spacing:-0.05em}.clearfix:before,.clearfix:after,.float-group:before,.float-group:after{content:" ";display:table}.clearfix:after,.float-group:after{clear:both}*:not(pre)>code{white-space:nowrap;background-color:#fff;border:1px solid #e1e1e8;color:#009;padding:2px 6px;font-size:.875rem;font-family:Monaco, Menlo, Consolas, "Courier New", monospace}pre,pre>code{line-height:1.85;color:rgba(0,0,0,0.9);font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-weight:normal;text-rendering:optimizeSpeed;word-break:normal}pre{overflow:auto}em em{font-style:normal}strong strong{font-weight:normal}.keyseq{color:#6b625c}kbd{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;display:inline-block;color:#000;font-size:0.65em;line-height:1.45;background-color:#f7f7f7;border:1px solid #ccc;-webkit-border-radius:3px;border-radius:3px;-webkit-box-shadow:0 1px 0 rgba(0,0,0,0.2),0 0 0 0.1em white inset;box-shadow:0 1px 0 rgba(0,0,0,0.2),0 0 0 0.1em white inset;margin:0 0.15em;padding:0.2em 0.5em;vertical-align:middle;position:relative;top:-0.1em;white-space:nowrap}.keyseq kbd:first-child{margin-left:0}.keyseq kbd:last-child{margin-right:0}.menuseq,.menu{color:#191715}b.button:before,b.button:after{position:relative;top:-1px;font-weight:normal}b.button:before{content:"[";padding:0 3px 0 2px}b.button:after{content:"]";padding:0 2px 0 3px}p a>code:hover{color:rgba(0,0,0,0.9)}#toc{border-bottom:1px solid #dce6e6;padding-bottom:0.5em}#toc>ul{margin-left:0.125em}#toc ul.sectlevel0>li>a{font-style:italic}#toc ul.sectlevel0 ul.sectlevel1{margin:0.5em 0}#toc ul{list-style-type:none}#toc li{line-height:1.3334}#toc a{text-decoration:none}#toc a:active{text-decoration:underline}#toctitle{color:#0b0a0a;font-size:1.2em;display:none}body.toc2{padding-top:80px;text-rendering:optimizeLegibility}#content #toc{border-style:solid;border-width:1px;border-color:#dce6e6;margin-bottom:1.25em;padding:1.25em;background:#f1f1f1;-webkit-border-radius:4px;border-radius:4px}#content #toc>:first-child{margin-top:0}#content #toc>:last-child{margin-bottom:0}#footer{padding-bottom:2rem}#footer #footer-text{padding:2rem 0;border-top:1px solid #efefed}#footer-text{color:rgba(0,0,0,0.6);line-height:1.44}.sect1{padding-bottom:0.625em}.sect1+.sect1{border-top:1px solid #efefed}#content h1>a.anchor,h2>a.anchor,h3>a.anchor,#toctitle>a.anchor,.sidebarblock>.content>.title>a.anchor,h4>a.anchor,h5>a.anchor,h6>a.anchor{position:absolute;z-index:1001;width:1.5ex;margin-left:-1.5ex;margin-top:0.1rem;display:block;visibility:hidden;text-align:center;font-weight:normal;color:rgba(0,0,0,0.2)}#content h1>a.anchor:hover,h2>a.anchor:hover,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4>a.anchor:hover,h5>a.anchor:hover,h6>a.anchor:hover{color:#097dff;text-decoration:none}#content h1>a.anchor:before,h2>a.anchor:before,h3>a.anchor:before,#toctitle>a.anchor:before,.sidebarblock>.content>.title>a.anchor:before,h4>a.anchor:before,h5>a.anchor:before,h6>a.anchor:before{content:"\0023";font-size:0.85em;display:block;padding-top:0.1em}#content h1:hover>a.anchor,#content h1>a.anchor:hover,h2:hover>a.anchor,h2>a.anchor:hover,h3:hover>a.anchor,#toctitle:hover>a.anchor,.sidebarblock>.content>.title:hover>a.anchor,h3>a.anchor:hover,#toctitle>a.anchor:hover,.sidebarblock>.content>.title>a.anchor:hover,h4:hover>a.anchor,h4>a.anchor:hover,h5:hover>a.anchor,h5>a.anchor:hover,h6:hover>a.anchor,h6>a.anchor:hover{visibility:visible}#content h1>a.link,h2>a.link,h3>a.link,#toctitle>a.link,.sidebarblock>.content>.title>a.link,h4>a.link,h5>a.link,h6>a.link{color:#000;text-decoration:none}#content h1>a.link:hover,h2>a.link:hover,h3>a.link:hover,#toctitle>a.link:hover,.sidebarblock>.content>.title>a.link:hover,h4>a.link:hover,h5>a.link:hover,h6>a.link:hover{color:#262321}.audioblock,.imageblock,.literalblock,.listingblock,.stemblock,.videoblock{margin-bottom:1.25em}.admonitionblock td.content>.title,.audioblock>.title,.exampleblock>.title,.imageblock>.title,.listingblock>.title,.literalblock>.title,.stemblock>.title,.openblock>.title,.paragraph>.title,.quoteblock>.title,table.tableblock>.title,.verseblock>.title,.videoblock>.title,.dlist>.title,.olist>.title,.ulist>.title,.qlist>.title,.hdlist>.title{text-rendering:optimizeLegibility;text-align:left;font-family:'Open Sans', sans-serif;font-size:1rem}table.tableblock>caption.title{white-space:nowrap;overflow:visible;max-width:0;padding:0.6rem 0}table.tableblock #preamble>.sectionbody>.paragraph:first-of-type p{font-size:inherit}.admonitionblock>table{border-collapse:separate;border:0;background:none;width:100%}.admonitionblock>table td.icon{text-align:center;vertical-align:top;padding-top:0.8em;width:80px}.admonitionblock>table td.icon img{max-width:initial}.admonitionblock>table td.icon .title{font-weight:bold;font-family:Montserrat, sans-serif;text-transform:uppercase}.admonitionblock>table td.content{padding-left:0em;padding-right:1.25em;border-left:1px solid #dce6e6}.admonitionblock>table td.content>:last-child>:last-child{margin-bottom:0}.exampleblock>.content{border-style:solid;border-width:0;border-color:#e6e6e6;margin-bottom:1.25em;padding:1.25em;background:#f1f1f1;border-radius:4px}.exampleblock>.content>:first-child{margin-top:0}.exampleblock>.content>:last-child{margin-bottom:0}.sidebarblock{border-style:solid;border-width:0;border-color:#dce6e6;margin-bottom:1.25em;padding:1.25em;background:#ebf2f2;border-radius:4px;overflow:scroll}.sidebarblock>:first-child{margin-top:0}.sidebarblock>:last-child{margin-bottom:0}.sidebarblock>.content>.title{color:#0b0a0a;margin-top:0;text-align:center}.exampleblock>.content>:last-child>:last-child,.exampleblock>.content .olist>ol>li:last-child>:last-child,.exampleblock>.content .ulist>ul>li:last-child>:last-child,.exampleblock>.content .qlist>ol>li:last-child>:last-child,.sidebarblock>.content>:last-child>:last-child,.sidebarblock>.content .olist>ol>li:last-child>:last-child,.sidebarblock>.content .ulist>ul>li:last-child>:last-child,.sidebarblock>.content .qlist>ol>li:last-child>:last-child{margin-bottom:0}.literalblock pre,.listingblock pre:not(.highlight),.listingblock pre[class="highlight"],.listingblock pre[class^="highlight "],.listingblock pre.CodeRay,.listingblock pre.prettyprint{background:#fff;border:1px solid #d9d9d9;border-radius:4px}.sidebarblock .literalblock pre,.sidebarblock .listingblock pre:not(.highlight),.sidebarblock .listingblock pre[class="highlight"],.sidebarblock .listingblock pre[class^="highlight "],.sidebarblock .listingblock pre.CodeRay,.sidebarblock .listingblock pre.prettyprint{background:#fff;border:1px solid #d9d9d9;color:#222}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class],.listingblock pre:not(.highlight){padding:1em 1.5rem;font-size:0.8125em}.literalblock pre.nowrap,.literalblock pre[class].nowrap,.listingblock pre.nowrap,.listingblock pre[class].nowrap{overflow-x:auto}.literalblock.output pre{color:whitesmoke;background-color:rgba(0,0,0,0.9)}.listingblock{white-space:nowrap}.listingblock pre.highlightjs>code{padding:1em 1.5rem;border-radius:4px}.listingblock>.content{position:relative}.listingblock code[data-lang]:before{display:none;content:attr(data-lang);position:absolute;font-size:0.8em;font-weight:bold;top:0.425rem;right:0.5rem;line-height:1;text-transform:uppercase;color:#999}.listingblock code[data-lang]:before{display:block}.listingblock.terminal pre .command:before{content:attr(data-prompt);padding-right:0.5em;color:#999}.listingblock.terminal pre .command:not([data-prompt]):before{content:"$"}table.pyhltable{border-collapse:separate;border:0;margin-bottom:0;background:none}table.pyhltable td{vertical-align:top;padding-top:0;padding-bottom:0;line-height:1.45}table.pyhltable td.code{padding-left:.75em;padding-right:0}pre.pygments .lineno,table.pyhltable td:not(.code){color:#999;padding-left:0;padding-right:.5em;border-right:1px solid #dce6e6}pre.pygments .lineno{display:block;margin-right:.25em}table.pyhltable .linenodiv{background:none !important;padding-right:0 !important}.quoteblock{margin:0 1em 1.25em 1.5em;display:block;text-align:left;padding-left:20px}.quoteblock blockquote,.quoteblock blockquote p{color:rgba(0,0,0,0.85);line-height:1.75;letter-spacing:0}.quoteblock blockquote{margin:0;padding:0;border:0;position:relative}.quoteblock blockquote:before{content:"\201c";font-size:2.75em;font-weight:bold;line-height:0.6em;margin-left:0em;margin-right:1rem;margin-top:0.8rem;color:rgba(0,0,0,0.1);position:absolute;top:0;left:-30px}.quoteblock blockquote>.paragraph:last-child p{margin-bottom:0}.quoteblock .attribution{margin-right:0.5ex}.quoteblock .quoteblock{margin-left:0;margin-right:0;padding:0.5em 0;border-left:3px solid rgba(0,0,0,0.6)}.quoteblock .quoteblock blockquote{padding:0 0 0 0.75em}.quoteblock .quoteblock blockquote:before{display:none}.verseblock{margin:0 1em 1.25em 0;background-color:#f1f1f1;padding:1rem 1.4rem;border-radius:4px}.verseblock pre{font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:0.9rem;color:rgba(0,0,0,0.85);font-weight:300;text-rendering:optimizeLegibility}.verseblock pre strong{font-weight:400}.verseblock .attribution{margin-top:1.25rem;margin-left:0.5ex}.quoteblock .attribution,.verseblock .attribution{font-size:0.9375em;line-height:1.45;font-style:italic}.quoteblock .attribution br,.verseblock .attribution br{display:none}.quoteblock .attribution cite,.verseblock .attribution cite{display:block;letter-spacing:-0.025em;color:rgba(0,0,0,0.6)}.quoteblock.abstract{margin:0 0 1.25em 0;display:block}.quoteblock.abstract blockquote,.quoteblock.abstract blockquote p{text-align:left;word-spacing:0}.quoteblock.abstract blockquote:before,.quoteblock.abstract blockquote p:first-of-type:before{display:none}table.tableblock{max-width:100%;border-collapse:separate;overflow-x:scroll;display:block}table.tableblock td>.paragraph:last-child p>p:last-child,table.tableblock th>p:last-child,table.tableblock td>p:last-child{margin-bottom:0}table.tableblock,th.tableblock,td.tableblock{border:0 solid #d4dfdf}table.grid-all th.tableblock,table.grid-all td.tableblock{border-width:0 1px 1px 0}table.grid-all tfoot>tr>th.tableblock,table.grid-all tfoot>tr>td.tableblock{border-width:1px 1px 0 0}table.grid-cols th.tableblock,table.grid-cols td.tableblock{border-width:0 1px 0 0}table.grid-all *>tr>.tableblock:last-child,table.grid-cols *>tr>.tableblock:last-child{border-right-width:0}table.grid-rows th.tableblock,table.grid-rows td.tableblock{border-width:0 0 1px 0}table.grid-all tbody>tr:last-child>th.tableblock,table.grid-all tbody>tr:last-child>td.tableblock,table.grid-all thead:last-child>tr>th.tableblock,table.grid-rows tbody>tr:last-child>th.tableblock,table.grid-rows tbody>tr:last-child>td.tableblock,table.grid-rows thead:last-child>tr>th.tableblock{border-bottom-width:0}table.grid-rows tfoot>tr>th.tableblock,table.grid-rows tfoot>tr>td.tableblock{border-width:1px 0 0 0}table.frame-all{border-width:1px}table.frame-sides{border-width:0 1px}table.frame-topbot{border-width:1px 0}th.halign-left,td.halign-left{text-align:left}th.halign-right,td.halign-right{text-align:right}th.halign-center,td.halign-center{text-align:center}th.valign-top,td.valign-top{vertical-align:top}th.valign-bottom,td.valign-bottom{vertical-align:bottom}th.valign-middle,td.valign-middle{vertical-align:middle}table thead th,table tfoot th{font-weight:bold}tbody tr th{display:table-cell;line-height:1.6;background:#f7f8f7}tbody tr th,tbody tr th p,tfoot tr th,tfoot tr th p{color:#34302d;font-weight:bold}p.tableblock{font-size:1em}td>div.verse{white-space:pre}ol{margin-left:1.75em}ul li ol{margin-left:1.5em}dl dd{margin-left:1.125em}dl dd:last-child,dl dd:last-child>:last-child{margin-bottom:0}ol>li p,ul>li p,ul dd,ol dd,.olist .olist,.ulist .ulist,.ulist .olist,.olist .ulist{margin-bottom:0.625em}ul.unstyled,ol.unnumbered,ul.checklist,ul.none{list-style-type:none}ul.unstyled,ol.unnumbered,ul.checklist{margin-left:0.625em}ul.checklist li>p:first-child>.fa-square-o:first-child,ul.checklist li>p:first-child>.fa-check-square-o:first-child{width:1em;font-size:0.85em}ul.checklist li>p:first-child>input[type="checkbox"]:first-child{width:1em;position:relative;top:1px}ul.inline{margin:0 auto 0.625em auto;margin-left:-1.375em;margin-right:0;padding:0;list-style:none;overflow:hidden}ul.inline>li{list-style:none;float:left;margin-left:1.375em;display:block}ul.inline>li>*{display:block}.unstyled dl dt{font-weight:normal;font-style:normal}ol.arabic{list-style-type:decimal}ol.decimal{list-style-type:decimal-leading-zero}ol.loweralpha{list-style-type:lower-alpha}ol.upperalpha{list-style-type:upper-alpha}ol.lowerroman{list-style-type:lower-roman}ol.upperroman{list-style-type:upper-roman}ol.lowergreek{list-style-type:lower-greek}.hdlist>table,.colist>table{border:0;background:none}.hdlist>table>tbody>tr,.colist>table>tbody>tr{background:none}td.hdlist1,td.hdlist2{vertical-align:top;padding:0 0.625em}td.hdlist1{font-weight:bold;padding-bottom:1.25em}.literalblock+.colist,.listingblock+.colist{margin-top:-0.5em}.colist>table tr>td:first-of-type{padding:0 0.75em;line-height:1}.colist>table tr>td:first-of-type img{max-width:initial}.colist>table tr>td:last-of-type{padding:0.25em 0}.colist>table tr>td{white-space:pre-wrap}.thumb,.th{line-height:0;display:inline-block;border:solid 4px white;-webkit-box-shadow:0 0 0 1px #dddddd;box-shadow:0 0 0 1px #dddddd}.imageblock.left,.imageblock[style*="float: left"]{margin:0.25em 0.625em 1.25em 0}.imageblock.right,.imageblock[style*="float: right"]{margin:0.25em 0 1.25em 0.625em}.imageblock>.title{margin-bottom:0}.imageblock.thumb,.imageblock.th{border-width:6px}.imageblock.thumb>.title,.imageblock.th>.title{padding:0 0.125em}.image.left,.image.right{margin-top:0.25em;margin-bottom:0.25em;display:inline-block;line-height:0}.image.left{margin-right:0.625em}.image.right{margin-left:0.625em}a.image{text-decoration:none;display:inline-block}a.image object{pointer-events:none}sup.footnote,sup.footnoteref{font-size:0.875em;position:static;vertical-align:super}sup.footnote a,sup.footnoteref a{text-decoration:none}sup.footnote a:active,sup.footnoteref a:active{text-decoration:underline}#footnotes{padding-top:0.75em;padding-bottom:0.75em;margin-bottom:0.625em}#footnotes hr{width:20%;min-width:6.25em;margin:-0.25em 0 0.75em 0;border-width:1px 0 0 0}#footnotes .footnote{padding:0 0.375em 0 0.225em;line-height:1.3334;font-size:0.875em;margin-left:1.2em;text-indent:-1.05em;margin-bottom:0.2em}#footnotes .footnote a:first-of-type{font-weight:bold;text-decoration:none}#footnotes .footnote:last-of-type{margin-bottom:0}#content #footnotes{margin-top:-0.625em;margin-bottom:0;padding:0.75em 0}.gist .file-data>table{border:0;background:#fff;width:100%;margin-bottom:0}.gist .file-data>table td.line-data{width:99%}div.unbreakable{page-break-inside:avoid}.big{font-size:larger}.small{font-size:smaller}.underline{text-decoration:underline}.overline{text-decoration:overline}.line-through{text-decoration:line-through}.aqua{color:#00bfbf}.aqua-background{background-color:#00fafa}.black{color:black}.black-background{background-color:black}.blue{color:#0000bf}.blue-background{background-color:#0000fa}.fuchsia{color:#bf00bf}.fuchsia-background{background-color:#fa00fa}.gray{color:#606060}.gray-background{background-color:#7d7d7d}.green{color:#006000}.green-background{background-color:#007d00}.lime{color:#00bf00}.lime-background{background-color:#00fa00}.maroon{color:#600000}.maroon-background{background-color:#7d0000}.navy{color:#000060}.navy-background{background-color:#00007d}.olive{color:#606000}.olive-background{background-color:#7d7d00}.purple{color:#600060}.purple-background{background-color:#7d007d}.red{color:#bf0000}.red-background{background-color:#fa0000}.silver{color:#909090}.silver-background{background-color:#bcbcbc}.teal{color:#006060}.teal-background{background-color:#007d7d}.white{color:#bfbfbf}.white-background{background-color:#f5f9f9}.yellow{color:#bfbf00}.yellow-background{background-color:#fafa00}span.icon>.fa{cursor:default}.admonitionblock td.icon [class^="fa icon-"]{font-size:2.5em;cursor:default}.admonitionblock td.icon .icon-note:before{content:"\f05a";color:#3f6a22}.admonitionblock td.icon .icon-tip:before{content:"\f0eb";color:#0077b9}.admonitionblock td.icon .icon-warning:before{content:"\f071";color:#d88400}.admonitionblock td.icon .icon-caution:before{content:"\f06d";color:#bf3400}.admonitionblock td.icon .icon-important:before{content:"\f06a";color:#bf0000}.conum[data-value]{display:inline-block;color:#000 !important;background-color:#ffe157;-webkit-border-radius:100px;border-radius:100px;text-align:center;font-size:0.75em;width:1.67em;height:1.67em;line-height:1.67em;font-family:"Open Sans", "DejaVu Sans", sans-serif;font-style:normal;font-weight:bold}.conum[data-value] *{color:#fff !important}.conum[data-value]+b{display:none}.conum[data-value]:after{content:attr(data-value)}pre .conum[data-value]{position:relative;top:0;color:#000 !important;background-color:#ffe157;font-size:12px}b.conum *{color:inherit !important}.conum:not([data-value]):empty{display:none}.admonitionblock{background-color:#ecf1e8;padding:0.8em 0;margin:30px 0;width:auto;border-radius:4px;overflow-x:auto}.admonitionblock.important{border-left:0px solid #e20000;background-color:#f9ebeb}.admonitionblock.warning{border-left:0px solid #d88400;background-color:#fff9e4}.admonitionblock.tip{border-left:0px solid #0077b9;background-color:#e9f1f6}.admonitionblock.caution{border-left:0px solid #e20000;background-color:#f9ebeb}.admonitionblock .exampleblock>.content{border:0 none;background-color:#fff}#toc a:hover{text-decoration:underline}.admonitionblock>table{margin-bottom:0}.admonitionblock>table td.content{border-left:none}@media print{#tocbot a.toc-link.node-name--H4{display:none}}.is-collapsible{max-height:1000px;overflow:hidden;transition:all 200ms ease-in-out}.is-collapsed{max-height:0}#index-link{display:none}ul li>p>a>code{color:#086dc3}ul li>p>a:hover>code{color:#086dc3}#content .listingblock .switch{border-style:none;display:inline-block;position:relative;bottom:0;margin-bottom:4px}#content .listingblock .switch--item:not(:first-child){border:2px solid #000}#content .listingblock .switch--item{padding:6px 12px;background-color:#fff;color:#000;display:inline-block;cursor:pointer;border:2px solid #000;margin-right:2px;border-radius:0}#content .listingblock .switch--item:hover{color:#086dc3}#content .listingblock .switch--item.selected{background-color:#000;color:#fff;border-color:#000}#content .listingblock .switch--item.selected:hover{color:#fff}#content .listingblock pre.highlightjs{padding:0}div.back-action,#toc.toc2 div.back-action{padding:0.8rem 0 0 5px}div.back-action a,#toc.toc2 div.back-action a{position:relative;display:inline-block;padding:0.6rem 1.2rem;padding-left:35px}div.back-action a span,#toc.toc2 div.back-action a span{position:absolute;left:5px;top:5px;display:block;color:#333;height:26px;width:26px;border-radius:13px}div.back-action a i,#toc.toc2 div.back-action a i{position:absolute;top:10px;left:5px}div.back-action a:hover span,#toc.toc2 div.back-action a:hover span{color:#000}#tocbot.desktop-toc{padding:.5rem}#header-spring{position:absolute;text-rendering:optimizeLegibility;top:0;left:0;right:0;height:80px;margin:0 1rem;padding:0 1rem;border-bottom:1px solid #dce6e6}#header-spring h1{margin:0;padding:0;font-size:22px;text-align:left;line-height:76px;padding-left:0.6rem}#header-spring h1 svg{width:240px}#header-spring h1 svg .st0{fill:#6bb536}#header-spring h1 svg .st2{fill:#444}body.book #header-spring{position:relative;top:auto;left:auto;right:auto;margin:0}body.book #header>h1:only-child{border:0 none;padding-bottom:1.2rem;font-size:1.8rem}body.book #header,body.book #content,body.book #footnotes,body.book #footer{margin:0 auto}body.toc2 #header-spring{position:absolute;left:0;right:0;top:0}body.toc2 #header>h1:only-child{font-size:2.2rem}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{margin:0 auto}body.toc2 #content{padding-top:2rem}#header,#content,#footnotes,#footer{width:100%;margin-right:auto;margin-top:0;margin-bottom:0;max-width:62.5em;*zoom:1;position:relative;padding-left:0.9375em;padding-right:0.9375em}#header:before,#header:after,#content:before,#content:after,#footnotes:before,#footnotes:after,#footer:before,#footer:after{content:" ";display:table}#header:after,#content:after,#footnotes:after,#footer:after{clear:both}#content{margin-top:1.25em}#content:before{content:none}#header{position:relative}#header>h1:first-child{margin-top:2.55rem;margin-bottom:0.5em;margin-bottom:0.7em;font-size:2rem}#header>h1:first-child+#toc{margin-top:8px;border-top:0 none}#header>h1:only-child,body.toc2 #header>h1:nth-last-child(2){border-bottom:1px solid #ebf2f2;padding-bottom:8px}#header .details{line-height:1.45;color:#222;display:-ms-flexbox;display:-webkit-flex;display:flex;-ms-flex-flow:row wrap;-webkit-flex-flow:row wrap;flex-flow:row wrap;background-color:#ebf2f2;padding:2rem 2.5rem}#header .details span:first-child{margin-left:-0.125em}#header .details span.email a{color:rgba(0,0,0,0.85)}#header .details br{display:none}#header .details br+span:before{content:"\00a0\2013\00a0"}#header .details br+span.author:before{content:"\00a0\22c5\00a0";color:rgba(0,0,0,0.85)}#header .details br+span#revremark:before{content:"\00a0|\00a0"}#header #revnumber{text-transform:capitalize}#header #revnumber:after{content:"\00a0"}#content>h1:first-child:not([class]){color:rgba(0,0,0,0.85);border-bottom:1px solid #ebf2f2;padding-bottom:8px;margin-top:0;padding-top:1.5rem;margin-bottom:1.25rem}h1{font-size:2.2rem}h1,h2,h3,h4,h5,h6{font-weight:bold;font-family:Montserrat, Arial, Helvetica, sans-serif}h1:focus,h2:focus,h3:focus,h4:focus,h5:focus,h6:focus{box-shadow:none;outline:none}h2,h3,h4,h5,h6{padding:.8rem 0 .4rem}h1{font-size:1.75em}h2{font-size:1.6rem}h3{font-size:1.5rem}h4{font-size:1.4rem}h5{font-size:1.3rem}h6{font-size:1.2rem}pre.highlight{padding:20px;border:1px solid #d9d9d9;overflow-x:scroll;color:#222}pre.highlight code{color:#222}pre.highlight a,#toc.toc2 a{color:#000}pre.highlight ul.sectlevel1,#toc.toc2 ul.sectlevel1{padding-left:0.2rem}pre.highlight ul.sectlevel1 li,#toc.toc2 ul.sectlevel1 li{line-height:1.4rem}::selection{background-color:#d1ff79}.literalblock pre::selection,.listingblock pre[class="highlight"]::selection,.highlight::selection,pre::selection,.highlight code::selection,.highlight code span::selection{background:rgba(0,0,0,0.2) !important}body.book #header{margin-bottom:2rem}body.toc2 #header{margin-bottom:0}.desktop-toc{display:none}.admonitionblock td.icon{display:none}.admonitionblock>table td.content{padding-left:1.25em}@media only screen and (min-width: 768px){#toctitle{font-size:1.375em}.sect1{padding-bottom:1.25em}.mobile-toc{display:none}.desktop-toc{display:block}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class]{font-size:0.90625em}.admonitionblock td.icon{display:table-cell}.admonitionblock>table td.content{padding-left:0}#header{position:relative;min-height:98px;padding-right:210px}#header::after{position:absolute;right:0;top:0;display:block;content:'';height:95px;width:203px;z-index:-1;background-image:url("data:image/png;base64,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");background-repeat:no-repeat;background-size:203px 95px;background-position:right -10px}body.toc2{padding-right:0}body.toc2 #toc.toc2{position:absolute;margin-top:0 !important;width:15em;top:0;border-top-width:0 !important;border-bottom-width:0 !important;margin-left:-15.9375em;z-index:1000;padding:0 1em 1.25em 0em;overflow:auto}body.toc2 #toc.toc2 #toctitle{margin-top:0;margin-bottom:0.8rem;font-size:1.2em}body.toc2 #toc.toc2>ul{font-size:0.9em;margin-bottom:0}body.toc2 #toc.toc2 ul ul{margin-left:0;padding-left:1em}body.toc2 #toc.toc2 ul.sectlevel0 ul.sectlevel1{padding-left:0;margin-top:0.5em;margin-bottom:0.5em}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{padding-left:15.9375em;max-width:none}body.book #header-spring h1{max-width:1400px;margin:0 auto}body.book #header,body.book #content,body.book #footnotes,body.book #footer{max-width:1400px}body.is-position-fixed #toc.toc2{position:fixed;height:100%}h1,h2,h3,#toctitle,.sidebarblock>.content>.title,h4,h5,h6{line-height:1.2}h1{font-size:1.75em}h2{font-size:1.6em}h3,#toctitle,.sidebarblock>.content>.title{font-size:1.5em}h4{font-size:1.4em}h5{font-size:1.2em}h6{font-size:1.2em}#tocbot a.toc-link.node-name--H1{font-style:italic}#tocbot ol{margin:0;padding:0}#tocbot ol li{list-style:none;padding:0 0;margin:0;display:block}#tocbot{z-index:999}#tocbot .toc-link{position:relative;display:block;z-index:999;padding:.4rem .6rem}#tocbot a.is-active-link{padding-right:3px;background:black;color:white}}@media only screen and (min-width: 768px){#tocbot>ul.toc-list{margin-bottom:0.5em;margin-left:0.125em}#tocbot ul.sectlevel0,#tocbot a.toc-link.node-name--H1+ul{padding-left:0}#tocbot a.toc-link{height:100%}.is-collapsible{max-height:3000px;overflow:hidden}.is-collapsed{max-height:0}}@media only screen and (min-width: 768px){body.toc2 #header,body.toc2 #content,body.toc2 #footer{background-repeat:repeat-y;background-position:14em 0;background-image:url(data:image/png;base64,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);background-image:url("data:image/png;base64,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");background-image:url("data:image/png;base64,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")}}@media only screen and (min-width: 1280px){body.toc2{padding-right:0}body.toc2 #toc.toc2{width:25em;left:auto;margin-left:-26.9375em}body.toc2 #toc.toc2 #toctitle{font-size:1.375em}body.toc2 #toc.toc2>ul{font-size:0.95em}body.toc2 #toc.toc2 ul ul{padding-left:1.25em}body.toc2 body.toc2.toc-right{padding-left:0;padding-right:20em}body.toc2 #header,body.toc2 #content,body.toc2 #footnotes,body.toc2 #footer{padding-left:26.9375em;max-width:1400px}body.toc2 #header-spring h1{margin:0 auto;max-width:1400px}.literalblock pre,.literalblock pre[class],.listingblock pre,.listingblock pre[class]{font-size:0.8125em}body.toc2 #header,body.toc2 #content,body.toc2 #footer{background-repeat:repeat-y;background-position:24em 0;background-image:url(data:image/png;base64,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);background-image:url("data:image/png;base64,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");background-image:url("data:image/png;base64,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")}#header{min-height:150px;padding-right:310px}#header::after{height:147px;width:305px;background-size:305px 147px}} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/favicon.ico b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/favicon.ico new file mode 100644 index 0000000000000000000000000000000000000000..1a4956e64705230122da8c19d762a7f8e6971533 GIT binary patch literal 111804 zcmeDk2Rzl^_Zg*0(k?VKlp+nIjEXXol|<2^RLG9-q(Z|kLP(+_DLdq8$xf0aqs++2 z-rxVZqW??wO8vSY$NS#zU1!|y9p|2VFAhh78;?Vd1h){klNpCof@eJbyMM(55?mm> z&B-@@0PYjbEofk6lC?XakG`%^LnA8Hb2|y)UbNjo23;MJ1*|O=arAUO_;NA_N!B^ z*SU%*7Sg^ZvB00+CB7O@R;<-pgVW|+t^TxD`9`Vt`1cf28NPLtDQ+hDJU2veHezY^ zQi`lBX|+X1xgXRpo_)4ylGG=m2?Qm@CH^r=LG=?YMdw`*!BKBdvlmh1W}$HW+%(s; z+If?c7ETT?%1-liUaq8bTJ{o7mM@yDBon+;;^rvcELEmvu_*TWnq7k1O-dhTwEMkp z-R_hvFVq$BG5nt-ZXm){7iQGqL2u2 zEfMMx_N2p=<14Qvs;Et;-Q{aHaUq|S=-kQjB=YC03vc8*s}d+9a1qOxXKvlL48Krf z!x4t0N!U_FuVTG}0u+^Ex%|1JfZtM1_dSbfc=1xAYjaP0FixxW-mfLH){mrNNu_@NQC~j3lb#Rmmsu$Iy6l<6KGGR?3ZQvzbWPanFm1yd1Y?nGStAzcXj< zvD{P6Y5SKzvc)v`*;1k@WDcKw8#MW2mYjZTT3wYZ?ws~yn-)t7?=t+NJ5C3mW;~Cg zQC8c`$XP>%;fz!RKJZY}iZIwsButf-oQ`+K8(36Waz4zZ&D{?Pg|rsh2rR?fg|2K1 zB2eKUdgR%hEum+piQb)J(y%qnezW@;DKek@C97sjORkCLP%n@@TwujNo6K2Sw9(GT zZg*hAMt=sW^D%~#ftNzLr*fH69ts>tC2Jwod#w}{Vov#zMq1Jq|BMj7(Wmv@t_4d} zY4Gb!0CgJ$mCw3b=mnN5%RE^F^{zPs~f6+wZlmkxQsz#NAIX+gSWE#TgIqY>eaEku zRCk0oAp|ESdY#IbqI}10qhorvOmwA1PfMiPucs!tip6TS=0xDzeD&;n;hD6TW=L)%Q01$y(3(9l zm#+)sq$Qc|d9{pd;CfUg94%u}Ef`(9X!FYrQ+NzNE{)!-C=v*GGd{~WVVmA0!M=I& znJlFs-SIxWAaau%1a;At)f;^xS@**&s?`@BwBTmm z^SV6w-IiM$fzX4yHWYXheDM50*T?G5p*AS*GU4eNnXM@$+n6sa_LbA67lO$ zs9;Q(_49iEn8h!GmMytHCf`j^AT)irYRXnbTCL7Kt6und5Du!s!CmtdDcUY;?n+^Nd0RBs z_mR&9CPj(p%~Lo-gvIxgO=R+z4qt8kqE%5doZqNd7q5v`{4AVWzWu@c$5i4MIZVGD zv&$-b%wp}nco~SRYPHL{S|N##p%GsEJ;C{!`|bIxJO42;*Vh^;D$*EC`|p-lfEKHk|v zyds#%Eo#rRYas5qR4r@eW9&QycG>QYOVq^X+bvpq^vE(Ni8)12WZaYMNuJuGk1d)* z%~+q^a=D<5J4+Z|u8>>rLqnV5isb8`RI9K1)sBmpY*r}e+ZY>90qT-CDr+}xCwa}_@O|8g(`URP&vkm* zY_W@Oo9$vjK^4ZFJ(cm+yW2<#GE|pOw75*3tDlW+)<~mc+<94eRbFr-PmHbO%xih4 z^%k)2OS4~~7C+(0Pb4nKuT|E_yG$?c!X>V?!ajeu^--2L8R_fv(x)pXt5;C%g^p|n zZRMtqBBz-IA09lYKMo5jwlKfbg4-Tx@vuC69P_ur*60ZGhL!&8xe^SFTMcjKOQ`N^ z(0pV2h>V%Z{AE}amH%_+`teKQOR$~TB2`1NNbshjpg`gA)beM0Py6^g8*cliPOs?6 zR!?$Pdm|O@)0ftTf(OdWo+g9mNez2o|Fq0weZ&It0QSmbypv7Y{rqGeuo`>vYA%`kwczw`n5_NMwr@Q7t#Or?7G7NXFFIzM0br}}GK+<1?v%-!S^JS95_rTcEuC=%iTq@~?J_F_tHg~Ct_j&`jGteGu`8|QArv!(I4~F7 z^U^!RSD`tXP+P{_+$=1=sV!Lf4j=Y(_M?#AlT67xQx%x}^FLK;Co4@s5rVmBMUOtxT_~V4+8y;d(wh;$j ze{sBOFuv$&4sY=7U0Uo1)^Zx!hLh)>@={a){BZV-4RnH&R+;XMIolEtR)1MJR3|C& zlw>2xcIC&0ENq$DUySA{Fq7nmM9p|Og_Blu2h$PRj1BpFFY=i!IcG+>#e#iyUKWd< zSvu)Zr5MTERD^iV}rW zW?kEJT`Ck8x%2s?dYk*~CtZLNote~XayYg{%8gga9wT8Q6G9Q`Sufv}DqQ2qYP^W1N}0bFM=M_S=Az(6$72uOWFB<-=Eit=i6z4b1aJqz|NE5m3R13$cg6MBb zEW=VyYe(zLrxgvhP8WPRLqg;j!`#&j*O@#WQw3OW9}rBiXUq4H@?gArLUUQrzNx0V zq8yF0uj4$wODt}!(>!Yh~^ zmp4BWe(JgOh`~G>mIJxWoyt4Y^G%rQ*7QA}lcqP^Y`YI_IF@rsraXv$# zrhgeBH_=UW!3r8)ob8llg)>($&C^_a`q)yF*(+W|l)U7+oOENl-j@Awf@`!Ka39+n z*YPh;i>u1VufH7-n9o{h?@FIqogf@tP+XC>r@F0j8J;1;&Rb;Hh8IwQn#YIW4yWfV z%6AHo-Pk0gbcI`n+t2PyaHRgyyM>k66OshtG($2b%phxq0pixjYiB|`l`!AH#<#&X z=N+AqS%IYL~`pVkiIB_+qSM`D%0vGjsfw0i((H`(^}4W;l!zO_gLoax)d8( zR~p`lE?QL3U`TxwnKSLd$^fND5uZ!*Z_m6$$$yc==iYwr_tV?>gC0q2_Onx0Ati*J zJ^E31V=~L$(1;ctFU!3vIcG3#XK!k5$baR$;?R>Bb%&NaN%%7`q`t}I){|j$al#c& zXg;_2xl6>l(8FAVfDqI`~T&oTJ9)U5W3 zRWoEH&%UpJp4uYp>6+!Kmu02gxOw(4z9J`t22PY`%iI4*VltoE;ur3bG4BE%9HCO4 z;kt@x{H5j{R{XiBrDD*KsBqUiwL4{;JbS^$%ldZ3yFBOACS^O|R>a?6WV*24E|XkQ zYQs_k_i-%O*&mY}eLFu?UzhNu$&_)G^U9dpQ(+UQX3n`H5-p@HlNK6o9T~!J=XZO zzHw>MCCV@BEXIf2$a+)5`^4%9|9aZWg1GRxSNE-fx??HD_O-Be$p_^qD4(=Ry8&8C|uIrFMc@jzH_dTe$#p` z>!L%l)IO}om&M0LF>y{|O!9r-tXsFfqUCG-Vbkl^Z_P+KaAR>wuFgsg;e*ZN~ zPDW<(ypofAF1))Hq4VYn4?b*M5nud?l$VYIIL_RXxJ?4W7n>w)JQ7wp8)?VIZPKS@ zqBFQ#>>uGp;qk=aqb&byiT&&fT5}{^WP`*GNw$8F3>Hmv685_-pmo&y+iTXHmzrh~ z%sn@+xf8*UV%6PmvSF5IK6%8Z4NtrvmzQU>qVRsj1%MbJ%4`ow8t~+&k36{vFDavtG!S17|0(s zY9_0xt$&OD>q9IUsL$&u*svB=UDHBf9_|2wuRjA>8n`nMrRixnZDH(IhZ5NkV z8c{I&8aUGI)AlY~m3-&$)+eDHSVT&CPLZnS4ypa5D{eiQ&Kcu0!#F$Z+vfSD??SV5 zjWT5T%-DQY%`%1Y<#&W}9EBoZMUFS@g z!@Gz_EVvcDKyQm}{&||!W{r6--9EFoK5`?!L09VO%x6}7)zVIXm8<6tDy^nH*I0mF z%^mS!Ew?L+zp55w1W~>Im|3WUeYPpGaoD|>GvPojhyE9xP{S$j?@>HH!zAX|I8G>V z$|GwJms>f}lij!zZU%2tt(Ti_yKC9@m{+NFCh?msdSNotpe;#`Vt;LD6hn~x z`MhhFC{vH0+;_!Qht|r;86U9Sbu}kBBjpL7{n5gkjPp)KQHE+&l@)7`Pr0do|8_uh zsvnKM`))1#GeK5I$Gw4kQ1<0byTY#)ZESmcQY?yO^5i6o$J$Gsv$XbW+)X9Z=C)t@ z+}>pzbWbL;83gGToV@q>ZV(Uq$#XfetRlzuta`GNQ_5|s?!;-|R^u;HYdm+G!8!H* zj?*f&Ty*sHQ$qv4?v_YM3AwN{pom;ugvwt|e4-1u=Z4~dAtgM}&fE8$BUAEdpZDqOl=B5VJ;{8FZgg7VyDavslW z`3P+$mf1B~-4@k)~ba`KnO3Ae}@;ENqp^ z<7Rygk6LT*eQ7v-(5T|pU!;6{!?uPMVd-%K8G4k>C z$DM@V_y;d&vsPx~%0ISjL5RJr@ZC9K0uWy_H2P3bISJ*{qKS%j#flWdYz5|&TP{kh zs%yF7pwp)GO5D&?G|A;<+Co+f>NR#VB{{B+?p)oT-ZtFFN3 za@^VISrk?4Gw=F>rG@Hc2^BFPmlTm**~C@$fu(Xb7d}y?0;fZ%aJa#9`S#X(1rl?# zbwaAX#x)!IwOEW_!j_=7u*9uCT+{uCnfJa@iZ+cZ{<`rny>qA7BQh6pif^CrhA4$* z97QH&Lk%~r`o0(YW*m93-`FlMk>Xg%H}=`N-ekrcr-l5ddYE!w7hlu3`t*V1huSR~ zFUq)OjPRFU?vJtmypG>(tH4*Themg@=8tc)%~d_bAix@TJIeE>VPKK;{)|RBH`ThS zj&4!*M+(v{xX)W>$cDp*w-Qv~JeBdW6BRckEjr7Y5>2L2OCNj7&sArCcI6x&%gBoK z=J<79>IIi!wzT~fdlT(f)%Ur_>L1$~H-4Q?PzqwB-eN^YGv#3ljqoHtKv=J3Nm@l5 z&&u15^9wgmOEnasOe>qCq90(jv+YQwcO}U*YO>1aW?G86ufdzy=9g*x!uZ=PtDY1OcAyKVIIbR{l6 zm_ej?(`eM*-|+Q#M%l6Y9iTq9_o`)FMFvYMG<*VP?ygTL;d3D6XrgUVP8V)Tp0vR| zPVLS7&?8M&j7hF5n(Ut*%==V7_w)5v&8BRj;WSli7Dg!ZY07NNJue`B_hu`*u`ISi zjw>g&?xLVtZs9R17H;DU#gdbpMPqp8s?-}mB4OMEvJeYyn~llB^Mu!)C~FJR(~hAD ztQr4~bbYbbNA_9@``Is(Jy@a9%ErUryP4S+&`#9y34N}$ERG4diC{Nu@p)++#Q%JGh-BR{> zdW$5a_DI%_r!rR8+_f?aP`nTqejP@|#i^54?T9i>+s3mr<>SekxAQ-5Agru9r?ROf z>e~{2GZ5|RBdK{O)IKh-uNv>yn0GgWN3s5)7{|LWr)(am=AP8uw0S8$o!@QOHeH&1 zTxA;4xpUs;6&JSB8W$=wW1mwmb8Qn`KPT)|iQy^PMv~q1XO7>=!r+@zeQ>w7eB%e- zx+N~_5AQl>l)EROVo8MOtKeHo8>}L9*I^&)&%9n4wRDk1rc&#A)m6rlJ66wE;h`&8 zYFr(7=niEHGs)K3g`3{{-w@9zSiH^ptf${?r}W@fOEIxC3-k^wk7c?2El8H?Wxk`4 znqfq}n%1VK&1E{c2YMekq(~dqRjwnqq}=>IbW`P4hMSz>nR?1alOqg@)wVRhq_=i+ zj9;xux0rdgk+N0!SJk{*&$jJ<7gO$ODyY+$3l!E9<+m=-2Q=T^RV&rGvVNCB+ zcdVtR^+DwWGG>a%DyxT=^PDf8IJK{l2&Cp}X3JX+<)DJCoqc|seUBk0=0<`aY z@>}rYN8&$GoiAA)PMFLsB4)%~I?`;s5}95Z-jc}gecy!`sw(zR@+4|sN$85rK# zVT^M+?n-4Ap1Ps!D5^ypPR<>hNJZgcPr?s;#*lNU#b`AN%~}y-@`33z3Xg{`CdF=WqFhKj+Id3 zPNuEWQ?5{WpSqyQChwNS#W15ns#xJwvkXh9Z$X!+TNlOpG2V#HzbScF&9g|t1`~oB zziZ`(XBFm~BhCfHh8;}i(QAmD-&oc}Z+5#XId0#%$CWaVs;H{!EP1AGD57VVY1IGV z{3zn23=dh$glVkO6@`zl!r0I5#7>%14WaK|>)X$i#`5h-jHd>@=Gz52Kqh)!GUaRg z7@KOABzN9 z->u`ar+5!ZX041W%&M0O=CCXE&WbPo$mqdy!8{KJx+T}J+QOVXw(M(P;%@{kpJtE4 zac{1n0u|r+2(krRp=t8vsAS%q9+CJh>4QJLu}a+uKbN+B85Pe=gQV5`!%x5WW|G4_ zP!>z8ZMM#W^};!O7M75OKCD`UhAP?(j&HNm61<+#`}-9d>TEpulKKgAbFyR2_-j^C z7BBLcXSbf>^DVUGG-`8mK2~yUe);Y6Oy4>leL24e$?xd+6r=FQ6$UnUZ(Z|9pK4Gc zF>kA`!tzW@U&Sn&`iwXJ7wBUA*)DDKf(3-*-iB^AvU&W*Ow?rsQ=@9Us^||m`bC*G zI^nXPhh4~BPfh5Pp>s*n)31IAcgir*S~~wY_d$ba-dc6F6RzxdV0z?* zgL--X`~p_>XV5TR2nkrq1&gcUhK!ls!Z=u;^Lxr6vCAAZHuX%cWXr-pRv1j zt(@ikg9dr}H*;#1$BQKt2uoHR6j9}4+B!4El8rt$#Y)ZlmfCy$EOPrP>9x8n#*fn@ z$y?@3d!yu2s*+oF()jb)I61xr+@ERva$?^(%{<|=PgFX7Ke_xHgTt@Cu!rk$C^()m z70KOS3_XrjDIL&9wz=?l0R_)q989x6ng^)ir%mMK%DG;@=Oa@ci+xi0ZXH^=cuSh& z8M{L+Jf5&m?0}TeM46q9mM*z3D430!CeWuxlqCw!H%ak(xQY8)h-oW5ESo-D%}xIa|i3%N?4 zd%$=lPeTSN4i*(vT&l-S&_r{7&N8{h+a_H4aBay~?kCr>w4L8)`J234A-nE?PWHhy z_d>5;&X-TQ$#<1@gU@M=EW>Oa!aXvfle@zeveuK$Jy^fElFOa7h2AFBz)ZoL{T5SU z;pC%bCs0G5u`k3VtG1Mbv&ON)eBB4uYXx?ySJ@g{)B)GzlPwm^k<7-Q)e6jT?d);6 zRGs3^qGU)~;Oc@U7(UlFV0pGarIMPX5agM!~)FwyCT zEx0=u-}G*ttGqVbh9|4d>Tf2h@GNFRnN|M>6clJJYB18#V;e z-M*)~uDK-GKjak6jt^FRN9?j`lwT+$eLm$7dy(G#!?kCdA6D&Dh-z#$k%dL;8_a4N z%lAxNNb`PN{<#vtnfFPDf?K615oZdp_8Z2A3<;%p`_U)`oBvhPjrfxhfLCAO!&k*FU~t1Zxu-@0Oup%8Kf2FC2~BbF38 zRl9=na>Ma8lXoca$+n$H`Sjc#`>Jmtqsx<5!MBPHdVFQmnZmE9<6vRZPTg|W`tkQ) zYz_v8BoL;esnIZSRQuBn#TSi(2D0w6AfhueO-w8 zPWLxTK@}5~Ug_X1Ttw_gGgT8ab`$ zXtGa>VS1|8xM1$j^(S{XC!eL2drgB#PBlp*f0wprl8HFui-Z;Im%i{T$1gK7PYaT& zuJTfNw4w667f$pf+b;J~+=k8V7{9X3amMMi5(%ZJ zw5mV(IW)?oxtV@DcZb#y8c^Nyi{I@s+QvifLX|N2(^>{LEkZ+$#>(o#bw~2AS2=TE zM#4=yDc118M{PyUMCk&vX~C#2&ov8hR#$mNxtJu$*@b4EG7E>=M!U(gZLZm`=JX8J z2)uidEto65>G9QQrrppb&c47}Zr#piKavakUP@K%yO8oU-z7|hZmrd$vm6==Epa=X z@97y7Rr_*%b5pdcV7ILHGv3A7qBp&&y>eEV%-8SyXhqafx(Pc9%vgdDE3V^w$1$1MuUi{=Hs0%uX-m!8XHSB|Zds-W zZ=NZTylN3>z~cgxBy89m1kX_I1_wB>-+)Q8gmhCKR<)^DS)eo>3G*4Z6 zqFsW*c$rp1Y_`yvyq1e{XH@I_GB9S>oThmHH5y-hplP!UD3Xx%w|>-;q497^w0_g$ z_d5B9-Yq!oaKHBWvkeD?XR@R!1)1F!R@u{Dhj>WK>uU{*uE|rs-iw=0^(20sv(YT^ zdJ2ui45|DiZ&qXKLpwyS?o%IET5?QzN8-wj^v&n)Yx^86t2OXiZLEcx3^lSzolc5R zERz27*JWoOhN#_n6 zv#*@N7igD*!tNQTP5ouR$+`s;B&*T)CSgML?ckLyx3URbm)w@cu(Ian>C|giRT{9V zN2GdZ$dGOX>3&&~ba-!yEa-@*mOi{KnHKWSKT36S_;EIWp97KBM_y-55acmdn;?k# z+RM*5_PeX!NngE^-E5U|_T0ccBbd{+J<5x66wK#Dy$|k)5XJ z0V=cky8cnemQy%|NT#Q);Pj1lh040ffRB5@0aNW0yPK)O?h40^+f2#tEFH*nC+3ED z#O0{+GbCW zUFsY09fz7v&D&&|@>*Q@kn-v)`(o~v-SK)DQ=z?67(mu6q8 zzJ|j{=t#0K6TzLz$ow?pEm9#IC>A6i6|DGkDE1tk3ONUbsc=`5m^K>2q1;Pv1geF)`LJec7$lFKg!}%+cCj!%16sZU#d-QBiJ5t{e56 zIE!_(QqwZGD2r{PjXbGU7nqWgx!pi*)k&@^fpzOsKV;I0i>aPH%;C>{QVojZTvWWBNzk+g7Xq`F91F_l^k6jyZFUMtJqZt(oy`cbBy)hEJBEQX zf+i|LhdcX|ydHyl#)YM^J4#K2L3ku7Cgh7t9$bM&kmr;iPpGIClf*~8@q1>JU8O$= zt7FjP9?q5FRSYl_vQ<7wxWCbdOX=FuCm;@J#W&mLc*em+r!DoIL$dT|Le z$#`gGm~rdW{kAd)Mps4=BKG*SOfy}LCxL~zTo<`qqs2!*(=gs!K&lEOG@TTab3zHr zP@o8z>$9*q77V9LkL89#L0&PIF=x=w{>9~hrRuXEZCE(<{=5b-)imCxweZul+3ghB znJhQq2Xnl|JL!{-w>BSamBS97x{AvUpgX5PLPzolOj-HQT_v1^;iYLY@6*-g(+SW# zKQb{>ubXck=Do;PrbIn^h0zD4pqL~4=9%qu3FR8&HThx|pBH6QB%=dm0Vo}*8Ov!< z%A^;kWp^#&oW*#!$z(R39_&P0JxndgSxH=;r|IVI&7~mhN%jcvw%(zAG+&67WXhJb88qrklG?~vsrhD4g^@8Mr?tScc1zr~ zI0szL3yzvS7eyio@q{ISe`K+uhlvP|8;pY&RVol}zhVT#$cZjXc-;WS9efltqK8Q< z?d~xyB_tB25(HAdJ-@3>cwmAoV0X>3vS4E+A%CTPTAjO6I^FG&r1;S^(qyt^7=m5_ z0(2nI<{smD!c~GaVF4ty-k&R)TTdtj)6N}Qybrf7!%q|6aD+*HL((}GS*^|DcW4^e zDyJt2f!VD49tIlTIia@E=l$H)S#PuDI!5{x3_O(rKFIM?%qTrfI$<5G=$kO(Ci$Oh zC_nYyOp_ry)6Y#hCHT?KK)Z>&EYgw})t8;U%`Qjr&}AB@dQw`$#LBgmMw_ohTJf=x z@XY~v;bjRY6qm8gUNM8#fnHzTFU@~kQAmrBqA4hzXVN;>aDW8^)bH!O94yq1EwmebdlVc<8aS z2d9Zi()ugxF$w8;F6(d6Df2(jYz?DlpYYYn>$d;x)K;DlNs39|Xk9eGP97)7zmv~z ztK!)e@Qg<^0G9wH0cQVU z?E2%;1)fg?K;NSyKsLZ|%XlF9wL$r>0Z@I|0zmf1Gk6RV0DPqY5CgaafZFMS$Y?a< zqQ1om0M&(meZ>CY}_0QJFN0Y+1f!%-G$n~VYG4UrB1spP;f5`Y~5VF1G+hu@t? z6VTxWu<<`7$N>@y{6TUT2S@?<-7*`g@*e|jTmxjyUmqQKA^?#57t6hCeF_I!*Z%c_ z?Snwz!76~irJe68wY2djQdY*2LN|6;b3j^V}wgJdM_Q?Bn;I};_p!17JN3f$U;jVw?*Oe~{}F3TS5qD?{#y4fn^^9|&n>O3 zm~q^V|Jrvv9P}c4gb8E0Edc!JZoUtFPb}~5o@<)wF{v>9;o!-CEsrSR@#L{s2axOm zatms{b|>;*-Z`Z``mf1uxadW;Nt9!$4s^&qOFTrc`4>U=@ZxEH%5d@HznISp;Q5$n z2LO**02u(7OqgL?590pibxdJek8;}{sER2QE@9TmKA7i+FwE-p9n2u+I;IkR8Iun; z!NfyPW1_*@m_X1e$m8TM`RoW(!vupgu$>_~m}ICvw&$@Cwm;%5cIe3k>}b?Q?8H+` z?9_8xOy}jb_IyoXJaQr7CU!B&6T6b^h1sOs#q8erw8OQx_pz&~zU|Leuf5yD%@c27 zrtxl=!K>?-2IQj*c_O@a2J8HS3*yTNK`7)q{&%(mQ2rDEq_=FR5y`EpvF;aHclY8> zW@NwkvOm%kb4w4#vMLL^%Vx~IYiw!43aY#luHH>*eUzY-}_n7eafV@tqnUIW!5kGcjk+J4?H>FUKet{757=jSd4(? zJ|8OzvB2CI>{8NgOb*%%V)_R8eBpPr0f6h}?(mfe)y4W61A1jd44Li&k>{}+?*g&( zvQJpQJDo9DDe|jJF~6**nC5dk4E0;x@w6ZB6h^ZS06u$r!)b505tjP(R~0~0YYXNM zZFzTnc5nIh6($S)yWJaK40KLdGnDbCy0ZEz%;#g&VA@8spMiBW>Hw63)^hq`gL@Lj zST@+r_rch`tSHR(%{@%!vEg9rcfZr^f-&DY=x-zQlCbKg{*6V(Vtq*}`GB2)@#O%% zm28j;^+?tM$RDlY{xR!#0)gt7_6vLLLH1LusHSWzin&jm-j{#IPRBU*xBmN%u>6r8 zy1%%Lxp+qj7qQzJkFifxU;5=f${0u1gx>8-|EXAWi%QAi7+;h z?tT3v71-J9@9{!&+Y?q5iqN z3&2Y2D!ZaJ=KLjqqjL1c-sqPdjtT&>WCR$Joh}-Og?@@16c5o_VO;Th%pK+tXe=iZ ztl1mQ!xAPKqz<~^+gKjV&BwBF`!xsdLyKr17mLAsZz%ZnmKNz_ETA5Y<+%guv-F_v?17FU=>{QBv=6VRy!-V& z2y~qz=~~-bv3H;Y^!o4^`f+>Ev1{}TuYu4d2zqrtV3AcZuwHn)!@ z(L7|R_GhS{LArXhmN}Ljs_WgzJ-R0ZuJ7lLZ)*X^t(w9u^GT3|U3eoMB zj{fjK19S&yE;g22H}j1<>`h!99Bq~37EU}|cT+kRAtrsCZ&;Zt3e(*;k zR1bSm^tR7(Mk@l?Ut?k+zvx%Z`Xhgk`x1cG!OCAc%%EMjH(Im~cR9IWTVe(FUjx-M zpmC;iS^(Ap^O3RO?tdiwsGl9OEQMc+zUlzPxinbWqjXnO{l)_ML&l-9p$2S?f-vy` z_6^9U5RJuuw?q1M#mIAA>p-tML69FhJMqg<tp7CaS2(+jD*E1=? zJZvoJ4pBecMV3!``~D%WV3+t^)A#B}ZRVeBf74sVLG1x*+mLR!KRiNXf;ZjRK=oF} zaEG;lrlO0TC0f5-&{G|NFwg$b)>9nyXV$|_!kEi157ws)W1ad{2hbex*)Zz92g3}c zuj(Q%&FrdCyGNHzu(XP+0TC$nZKo6q-#cF{=V#Xk&Qt>&dc9|BP!G>?IE!YQ6Dg;YaM`h z=xi3^cmsZZ3440}i!P%guWLWs4ew53kFsC<7WN=}w=S|h*p2)%yTs|5rcZy`*H6EN zzOhg!YG=_JVQ;osC@duR)o(!;t%VWE_b##g;r%?KFyeRvdd{va`Yp7Lr9u-+GQiIL zr~dXQ9wK|D=z^3{M;Y0@63H0N@qe684bOXs!ieJy=sB-yY}?C>7SqeYuCW)poc4Wy z$)%&KCqersyT}+_5z_A9y?vLku5tV2&#C+~_vMX5y+C#;uCPC?r}YGJ&?lkw+R=0} zVP}Ztc!)^;FNZ_^@BYL6e@}8G2Wy}IT<;t}I>R%u&cE;&*(Q$0nxPWxdn1xJ zFFe~2`H8~@{EYT*jV)`q-evK-LQ#K@k8}Nnzba2JkN8*s?Tsgr_W^kJBk~i64eI$% zJ)32;>jG+v&&Ip`!eewk#z;E1_d&#E>Vxdjd2+<>hV<+Uc1QnQ|2Tl!0mCkR0a{B! z>j@*}x~vDI{ru^}DSvd1%|F+F4j|i8P1v_YECVHi#fbF-XfGvES@+->*##268`3k< zZ;v&5=>ALN_ryf=0_A9npZI>~L&S(6lUY$fTuv0ozIr(2kMct2D*ST;;{ehRpmVc2 zWr6nbl++FX*%Zh&yt54WeG4$`_a*NQH~yn-zy~I|;fsy*gv55|=ip4z;dW@9nn?ad zM9;+Uhy0B8Q~YxS=fHQH-S21GqCExa<->1NL8JphcaIHO*4^cS&gvX1dm#och2NXP zG1dQvOwgXB;dWyG-_wBF{vn<1(Vgr&-;MO%|KaA#Sji9R22MV+`cVhac|XJH(3#ks zGJ@Y>S^Fc(??>KJpbz{u2KK@XC+|ipFLdSzI?EFARRh)thtuu(c`dS}JJ}7_yNj^D z_MaOZ2f~QUZaJ=GFJLB7B_7u%SZK{-b^2 z&%2Y^aK1xlf{*1hl!lG5Baji&rJ=ptNH08GJlqwc*V#v-{XP$dQ`SA@bp&i5`a1h> z1ladiWa;}cx?NtbupfCi9MKtB`5-Uro@6%M?{#9XVMzb*&kc+NXg+}UaiVeCP|uq| z>51g}4xZJC{KR1+@@xeC*l5|i4UEfUJ9b=gdb>Ol;f{l$I5Zz4l6MR|ixK&W!$$1+ zG@NT+-`qG9GX9fk(fOxCJyQ?u(IArdLwH_FMDl9CTO9mD-uq3ICvpD$envJg z@5*uqOV)oT9kQ>zlz4a0^rHI+iDb2-|NcbpQ*seKP9_-TpW5r_YlXLL`db;>=g@DIJSX{75QI*SV3BRLp{>@z!L zjm`m?h`xX1;CaaBKMZ#rLbim)pf5mkU$me0pZh-t2D`2*7mn|ge{Q?rJN|*}kS%a$ z*qHm>4SSc-`BKSnzTm&H;{WTxK%UV3n?z?7g?5qukk0-a&ANlmVnlZ%qB}s)J0{+wW<31$T>~ zGl|fhQmD@ys_y(xuM^SvDa8CfN-Tf$3^E$h`Hv$j$oU>!^b>>tqm(JF+? z?e{LDyCG1$aY=uO-T4^Venu0jJIGcZ-LdqyxLX-v#Pa9tM*bpWU538{KeVq^^{EwR z1@}hyXFqGdZ|F}PgP8t*zabj?Pw7Vfqgg!a5#gY%)&#;6VxojX7@_W$YpzfResUyvI*4+gal zopt5k?*Msm@W}=2Zf0crm~*U*9a6!5lt`x9#4_*t4DmvU;u5F(_dI~QAPjv3TCdNB zv-f_tdyxHC$N|KV)^PGUx|&mWz?^t&9<*>C7>pI+~Ug>cjlB>k%c z!&wJVUf=5hI*)m@9no3!Z-~G3o}NMWL%RR*U)|}s?w~u7ty6qPZG2D$c2-34aOg?q z#P1?Pg|DFdh4(N%8l5j^%5S#~&?r9lG_Y}^XCc;6USkApYLmC01bi{f5 zdmaY)ck&jU0h&L8cg;J#eLyU)MZL+qYZ&18Z!R#5vhI|5*I#tr$3wV3Wh7dH>eEaePo+|**9m1V?{QDh2Ug*QRCR(c+E{Dz*BGUVK^d;}^!a?@`bb=!&^RC|( zItOUDY$3bY`~Gt8OLy|_`VR1$1d!Dg&wu`rYZK8KE$FPip}MPY?-RGzi@VCUzkZN4 z(h2?33y)$ufW9x6w7?z~|)lTU_V2Rl%kZ{qVq02k^0%DK0AkPj2Uh@BZUoILy6 z@-l#XX9rRTi0nO(&Yz|?xeg=@@{;}Ac>AZ&gU$@^j~yf0BPtI1#SXfVG+4%z6npWlnVd31k> z#&cU@{x0mAX0-f(7t#-m+S#H|7BSs_%QLdOIo6xZAeMh-9 zg#li20KesYImDAc7|`83T>X&~#B=P1PNV*$9gR4E+ZuqhZgBjQ6;nhQj{?QwtaXvn&^G62Wz0NF&i z{^>FsF8tA1%qx52U2kEKb~*q$&mZAq-do(?9R~PK2Dk!%#y7*ozdtpfO5lMyz%S$b zfyxQ;xZJ_d^#e`&JK_Vbs{kH%;QXh`Z?JeHTS`}e*~7(q$ZG+>M*x!H%5yaG0epo4 z{!2QeV4#+_7eH4% zM_0c8PCv4>aRA^381Nkack}sAC?EKW_M(XbTmu*jdW1KChdBU}Ir*Q!!@mhf;5o86 zKx+)BKEwmm0gO}|fadB?0Z^ZW+M}6&6EFV;T0kab0LuZy0W<(?0sH~bI_Y}=)JCH| z1dYo&>j~1kBHbCXt9lDS0PqDs`jq1ULICstf7HCXKk{rh8o(-XII8bY-~XeOM1BbV zDFPn(Nq$6VLtY%txbsDObR3Sp(@$s*#!+ zB5tCby87w6gwy{-9uU~opZhaDR9*ZOUHt^yPmZFCpR6xG{-@+Pl7aevPLBKQ+J`Rm zjX7@@dEo}?C;Uti$w2+NUDEgAC+kw*fAM$uUda0JQ*`-0fAM$uo+-L~?^M6|@jnqn z^>h0Hy#(Q>aC$7a5C6{u(_=pq#Pf6ei2K$5GXceet*@TfVe|PEcg){9w0(T@Cpdw1;7K4;12RE_@(%L31i%I`3>c0~7J%Dy06l<_oV%w({;B}Io^v`f6n390;DYEzdV(5& z&Uwd3|CU2pMgYH@_1`^~!~Yh_M)R=~0A&CpO>a;67eU$k0Y-Iv2IZl7=qrGp@EYy+ z$gYfT_@(@7j!+Kb_h{Dj{_+xi6Joz&JUnmSmgbI+%1^cp`yAWi{ywO6SBQ3h@fyu| zZNLN6E)47U0QphCT^K)IPMcYoj|swFRR|l4-~xCJ+3p6_97MZdka{q>XQ8V*{mNl1 z(%y;F?V<7jr3dgs_jb0l{(4WNQJhm}S@3%jQ;al)bMd|4E}f^C&&MZlhe{ackrDg@ zkpCXM_s@>T0&`zr@GW6a@)NOVg(+A}Q7RVuB@K)F@(z1d{1$sr^ahK{Pr`z8UqYHl z%qh(uJD=c=op^Q`6YKxC=LGlO4KXm^gszcf@f82pej2k*5M_?d4fcU6?AND>D zo!NE#>81AX;!{=ei16ZVS$6w3(nSs>;GfeU9zZ83>&SLM%bNiQRAF)td)j=E5GmY|(MfCh-5gjz91)O>i6X_wcglZD)Qjy3oI=H`>KR zb%%6T>rX`X!-K{K2CM(`Roc-3GK*G9BPX@Xl3Z+0r-E6bGze%)=S%=6glX$ zsQ-|QFzUp&{r6DR`5}!L9)FJO%ukPq{><*^?tEu4gm!<>#CIe__taXY-08%*{Z|pb z51;n_twDwvET}8zG8^(PQ0{WzB8EfgF`;WbmqYgdG$KxL1mf1Tz0IuI`|&W5Vegq zgQ%ORpXuPC8vH)!cCF3-Khk5B zH+(;fso#Z+Qbg1yB3%m7!}RxFd!&~Iy3zR^{h}Z7=o;KPF;-oEO=-Jc_~!ecmMMBf z_fBR6q94)TulkSZNAvRRZ@>S}*Pe)qfPMh!I?&xfeL18bLo@;OtNrVUiz!E&V~s7% zeP#dK!i`}bjcDu3b;uvt3isLnb<*DXi*$8JhcOo2m%55}{bOIa-2xpZ(1X@Y`yBst z(oOtpnd05A^UC|eV$A)5-cHh|XihUz-z zzV|z6N54P=TK^i$dyqTpEOz?UH7vdS)1cWP_uY0wmze$z9t?UcG#Yh)xD2#bd;x4< z25M7MT36Z0$6wCtfc*Ph|0c#^EIgz6Ug!Yy9)yA3n6wL_NqVi`#sT)-UFV<7S4Y(@EwUVPCUH~_X@VOvjDC8qA?VdbGSE} zyM{sh2>@Xuf!_${iS$|(&hH+z)Bh6ei@}fdy>q+L*q0yDARhcl_235Ji|Xz^WJ`ne z5*L%(^*wQY(b`jZM}Btj+u4SW#a|>}BY^h(5Ach=;c%T8drTbe(tu}!p6KiEd&olp zU@Z2H-R^$@T$un`01*AF`b%eT@gSe&0Ap$Y(__G=$Nf(b<^k}&H<|_-2Kk}y>m&f; z`|tV|ilA&XPU&^O4}`A-I5$ul`x77Xr2#;Ddq;EbjCg(qpx^r+AueTq=oxGr$REue zM|%G&+6$}-&~Lg2OV41_0dBNa87QGJIO;e;p!4hi0uD!phD<0Y_-Q{jfv4j* z1^SLt5a5sjh}IqvkAC5d0`vn3+P?o9cm8&qy1>(MSVHGHF`ehbQ00D)Pto~H`0npK z--Qg{;qUnEJjdn7@Au%}_rC+L_Hz~x7G3;vhF&p`Z;9~x^X0SpwM!Nz|HWev;M3VV~JVUJ9u z%F~PJTO2GtgGpBo8nwgzND~a{d(mD)L@$b?3-esGHlz=r z2hW=DP6hUR?2E(`?}7V~cV`(Lzo?zsKM?#Oz9c{kTD$GEheG?Ay6(f3gmp}$e?T_0 zgRvb$mR60Rze4&vv_Bl#E~-7Z>~6mlvgzmR4-F6xeXFP)Xy*sADfi2cYUf?&yY7CG zt?}6ev?d!jo(+kX zZ(!?z_Pr9_QAYs$$a|sz!chB8Omq7);w|DUvgt*6CW2j&=ZDaCnV`E+yGzsg4(T?L zU0%iz_NhHBeBG%dMP+q+KOekD{pv4$6XGS>8{d;d-v!#=dp|3xeg8sld-jo@`hUfp z*^d=P6ogs2bV4rtUD9{|M{jSvTe0+C@4;2>a7NKgVQ zQ5IP)APmShGQz;H%%H5!03%_EfLwoHO;^)Xx4LilojaFG&aJNQT2AeCPMvdZsruo_ znGBJvvT#I?*T^?S`$6w!3kuru>%(i}Q1`xPKGwG$kq+m|JbIdLp5VYbcKyHXvZ9Q~ zAiqx>-23Q#0iOXmi8ObA-iqiYy4(jZH0NvTmqz>F;4n&S>zOOrbPHGu1Nk!a?n7Hu zdgjbw>lXS`>X*c!miaw8y66rwmuy+AFZ)`XGUe5L>9n2CZ_o$Ii}U*~n`hL=9z?m_ zxvLk9Z42)CDU0#M-E|g+EU?nT8wCHpf}4V{UF>s1Tl~DuQl2j^vPQ22I?jWC8lB&8 za2WW$T6ZYuSS6acBH7F5(&XJYYh+yAFPo6VXoNK+- z&OQcB8#{h%pP(CFX?I>aW$%cFW3BYLwhsJh``Gzw@y9OKk@l|3NBZzcdWZbkrkK5% zeO!AuJgC_9)8dbh{7zGa>j1s+Rij^T3^^L%#r%!kzoPi_{9HiC6kFSp+BEC8UFRCT zGQynugcIks*z<#nKVi;Y@DiH3Ku=|<1AH5w>>Bi-@L4YCEAXD*z&8oTY@426CHrHi zb&jX6yUTILa9yBhIZ^nV* zO)VS@Ur7G@QGB}V89u`El3|0Ng{(UI`lUMTlnKvA0vg6kKXz9=Y`*jx{3^~pS#&?p z;}YEi&%G!3K+mwZ zCOPqC!GBVSeDI)mW8FOOM0lv^dg#kI_rVUMLb2O~H*_ZEh9qj$lFz#~TVXHq*fLj#T zq-VutEQR+Odal$S5#HaaOy=cU?B&RxnS`(Jo62o{YXv z`>b@Vt>Xj*cLaJ@u6l7Mcu#PTiw@IpjC$l+Q>(#pE~KI;w2eseXbHg4u#if@T4H4c1?P`F~8XUNA%Os^C6B>UG2| z*M>X9#3bM)!KB9#9Wr7>@^eUm$*)EVOg;(p(;+r?+c)xG{i>>zO#e|+Rn>y85o-M$ zVOeaqel=lXZGD1w(p3kATR#_sjW0Y~2uFNVPu0iNTfS+Jh;Q0yV$g1N@|Dru__XUq z`L>-Ek+w%ptH0n0K`5uyTY(at#zb$yFu?)=cgfrrGKM&hv+6OT>l#>Yt`9 zWCMGk>_eUBTo=$YZkfc$h`E1- zciD33jOhJy`IDFbHqVV0Tg-hEvKh#bpw~qn0f0kaUpweM{rv~=Mu^A#>7GUQUfiZN zJ~R~hVn6=c&EhuhI9u+~9XmWF@)j^p3gpQ2jd1HUzQv{<<9_=h)aCQ#H)FrCh4`$>{4!cT zHb}bau*bpJoS-=r$J5^1YUthRDtk|~eEuh*9FDQUIA+c8Ir>a}y;)_mkC`^ZhpsJ` z-E!6?)}I5C74bREX=pa~(6D@-SL**x%H?PWWKw+mU9Cxs`-1YZv7TmaON%2sd7sP& z{92XYsr_wRu;!K1Vb9%l((_|~?lk^v`S`PB^U>FCZa!(kr(|!?)v;E;oKrcRr#kh2 zG>okq?u5(X-1`#kbJV@l`V%cX`aJ5_n*6e(znHz3`-0NsGH-K%xxWnD7mG>srn3g4&^_VeNcX<{ij&D#lCarvQ+HSe_X*^@aBe&4*A^1X7$djFW9J8w0=&slM?^j8mCj`A2J zc*%x~`HK6HV3D8{`tyEY{>m#>*4Y=IcS;kbzgf4>3z)+``a6^%jmyuz&*!A%6|fJ) zdqCf=SBp3;Ik6XjYOxQ1s*Fx)3@;|9v_OkMdEccn&{Z3xGH*~edC#Hd|~4%L$gAIxp$OHn$|Ezxcj253{CGlOCXD|UgtFQMvne-`+ucw z+`5^Uj?YY`rJeK8kV)>MXvFcdZF%;pVIi2P!hyAf{xR*7l%8*#&8d?;Ev){t4t|bF zPrE|%7jw|6_S~)WC;e&g2M5mN^=-xFn>pv;barK~nf4>S1=}_$gxPm>9x>~k;y`b1apT5? zb$&R!`ownDmynOGXY!aYNSZ&4IWvEr`FV`jhK9b!&0p>i!uhLbv-Y%$2b>c>v|1sc Pn5$L/g,">")}function t(e){return e.nodeName.toLowerCase()}function r(e,n){var t=e&&e.exec(n);return t&&0===t.index}function a(e){return k.test(e)}function i(e){var n,t,r,i,o=e.className+" ";if(o+=e.parentNode?e.parentNode.className:"",t=M.exec(o))return w(t[1])?t[1]:"no-highlight";for(o=o.split(/\s+/),n=0,r=o.length;r>n;n++)if(i=o[n],a(i)||w(i))return i}function o(e){var n,t={},r=Array.prototype.slice.call(arguments,1);for(n in e)t[n]=e[n];return r.forEach(function(e){for(n in e)t[n]=e[n]}),t}function c(e){var n=[];return function r(e,a){for(var i=e.firstChild;i;i=i.nextSibling)3===i.nodeType?a+=i.nodeValue.length:1===i.nodeType&&(n.push({event:"start",offset:a,node:i}),a=r(i,a),t(i).match(/br|hr|img|input/)||n.push({event:"stop",offset:a,node:i}));return a}(e,0),n}function u(e,r,a){function i(){return e.length&&r.length?e[0].offset!==r[0].offset?e[0].offset"}function c(e){l+=""}function u(e){("start"===e.event?o:c)(e.node)}for(var s=0,l="",f=[];e.length||r.length;){var g=i();if(l+=n(a.substring(s,g[0].offset)),s=g[0].offset,g===e){f.reverse().forEach(c);do u(g.splice(0,1)[0]),g=i();while(g===e&&g.length&&g[0].offset===s);f.reverse().forEach(o)}else"start"===g[0].event?f.push(g[0].node):f.pop(),u(g.splice(0,1)[0])}return l+n(a.substr(s))}function s(e){return e.v&&!e.cached_variants&&(e.cached_variants=e.v.map(function(n){return o(e,{v:null},n)})),e.cached_variants||e.eW&&[o(e)]||[e]}function l(e){function n(e){return e&&e.source||e}function t(t,r){return new RegExp(n(t),"m"+(e.cI?"i":"")+(r?"g":""))}function r(a,i){if(!a.compiled){if(a.compiled=!0,a.k=a.k||a.bK,a.k){var o={},c=function(n,t){e.cI&&(t=t.toLowerCase()),t.split(" ").forEach(function(e){var t=e.split("|");o[t[0]]=[n,t[1]?Number(t[1]):1]})};"string"==typeof a.k?c("keyword",a.k):B(a.k).forEach(function(e){c(e,a.k[e])}),a.k=o}a.lR=t(a.l||/\w+/,!0),i&&(a.bK&&(a.b="\\b("+a.bK.split(" ").join("|")+")\\b"),a.b||(a.b=/\B|\b/),a.bR=t(a.b),a.endSameAsBegin&&(a.e=a.b),a.e||a.eW||(a.e=/\B|\b/),a.e&&(a.eR=t(a.e)),a.tE=n(a.e)||"",a.eW&&i.tE&&(a.tE+=(a.e?"|":"")+i.tE)),a.i&&(a.iR=t(a.i)),null==a.r&&(a.r=1),a.c||(a.c=[]),a.c=Array.prototype.concat.apply([],a.c.map(function(e){return s("self"===e?a:e)})),a.c.forEach(function(e){r(e,a)}),a.starts&&r(a.starts,i);var u=a.c.map(function(e){return e.bK?"\\.?("+e.b+")\\.?":e.b}).concat([a.tE,a.i]).map(n).filter(Boolean);a.t=u.length?t(u.join("|"),!0):{exec:function(){return null}}}}r(e)}function f(e,t,a,i){function o(e){return new RegExp(e.replace(/[-\/\\^$*+?.()|[\]{}]/g,"\\$&"),"m")}function c(e,n){var t,a;for(t=0,a=n.c.length;a>t;t++)if(r(n.c[t].bR,e))return n.c[t].endSameAsBegin&&(n.c[t].eR=o(n.c[t].bR.exec(e)[0])),n.c[t]}function u(e,n){if(r(e.eR,n)){for(;e.endsParent&&e.parent;)e=e.parent;return e}return e.eW?u(e.parent,n):void 0}function s(e,n){return!a&&r(n.iR,e)}function p(e,n){var t=R.cI?n[0].toLowerCase():n[0];return e.k.hasOwnProperty(t)&&e.k[t]}function d(e,n,t,r){var a=r?"":j.classPrefix,i='',i+n+o}function h(){var e,t,r,a;if(!E.k)return n(k);for(a="",t=0,E.lR.lastIndex=0,r=E.lR.exec(k);r;)a+=n(k.substring(t,r.index)),e=p(E,r),e?(M+=e[1],a+=d(e[0],n(r[0]))):a+=n(r[0]),t=E.lR.lastIndex,r=E.lR.exec(k);return a+n(k.substr(t))}function b(){var e="string"==typeof E.sL;if(e&&!L[E.sL])return n(k);var t=e?f(E.sL,k,!0,B[E.sL]):g(k,E.sL.length?E.sL:void 0);return E.r>0&&(M+=t.r),e&&(B[E.sL]=t.top),d(t.language,t.value,!1,!0)}function v(){y+=null!=E.sL?b():h(),k=""}function m(e){y+=e.cN?d(e.cN,"",!0):"",E=Object.create(e,{parent:{value:E}})}function N(e,n){if(k+=e,null==n)return v(),0;var t=c(n,E);if(t)return t.skip?k+=n:(t.eB&&(k+=n),v(),t.rB||t.eB||(k=n)),m(t,n),t.rB?0:n.length;var r=u(E,n);if(r){var a=E;a.skip?k+=n:(a.rE||a.eE||(k+=n),v(),a.eE&&(k=n));do E.cN&&(y+=I),E.skip||E.sL||(M+=E.r),E=E.parent;while(E!==r.parent);return r.starts&&(r.endSameAsBegin&&(r.starts.eR=r.eR),m(r.starts,"")),a.rE?0:n.length}if(s(n,E))throw new Error('Illegal lexeme "'+n+'" for mode "'+(E.cN||"")+'"');return k+=n,n.length||1}var R=w(e);if(!R)throw new Error('Unknown language: "'+e+'"');l(R);var x,E=i||R,B={},y="";for(x=E;x!==R;x=x.parent)x.cN&&(y=d(x.cN,"",!0)+y);var k="",M=0;try{for(var C,A,S=0;;){if(E.t.lastIndex=S,C=E.t.exec(t),!C)break;A=N(t.substring(S,C.index),C[0]),S=C.index+A}for(N(t.substr(S)),x=E;x.parent;x=x.parent)x.cN&&(y+=I);return{r:M,value:y,language:e,top:E}}catch(O){if(O.message&&-1!==O.message.indexOf("Illegal"))return{r:0,value:n(t)};throw O}}function g(e,t){t=t||j.languages||B(L);var r={r:0,value:n(e)},a=r;return t.filter(w).filter(x).forEach(function(n){var t=f(n,e,!1);t.language=n,t.r>a.r&&(a=t),t.r>r.r&&(a=r,r=t)}),a.language&&(r.second_best=a),r}function p(e){return j.tabReplace||j.useBR?e.replace(C,function(e,n){return j.useBR&&"\n"===e?"
":j.tabReplace?n.replace(/\t/g,j.tabReplace):""}):e}function d(e,n,t){var r=n?y[n]:t,a=[e.trim()];return e.match(/\bhljs\b/)||a.push("hljs"),-1===e.indexOf(r)&&a.push(r),a.join(" ").trim()}function h(e){var n,t,r,o,s,l=i(e);a(l)||(j.useBR?(n=document.createElementNS("http://www.w3.org/1999/xhtml","div"),n.innerHTML=e.innerHTML.replace(/\n/g,"").replace(//g,"\n")):n=e,s=n.textContent,r=l?f(l,s,!0):g(s),t=c(n),t.length&&(o=document.createElementNS("http://www.w3.org/1999/xhtml","div"),o.innerHTML=r.value,r.value=u(t,c(o),s)),r.value=p(r.value),e.innerHTML=r.value,e.className=d(e.className,l,r.language),e.result={language:r.language,re:r.r},r.second_best&&(e.second_best={language:r.second_best.language,re:r.second_best.r}))}function b(e){j=o(j,e)}function v(){if(!v.called){v.called=!0;var e=document.querySelectorAll("pre code");E.forEach.call(e,h)}}function m(){addEventListener("DOMContentLoaded",v,!1),addEventListener("load",v,!1)}function N(n,t){var r=L[n]=t(e);r.aliases&&r.aliases.forEach(function(e){y[e]=n})}function R(){return B(L)}function w(e){return e=(e||"").toLowerCase(),L[e]||L[y[e]]}function x(e){var n=w(e);return n&&!n.disableAutodetect}var E=[],B=Object.keys,L={},y={},k=/^(no-?highlight|plain|text)$/i,M=/\blang(?:uage)?-([\w-]+)\b/i,C=/((^(<[^>]+>|\t|)+|(?:\n)))/gm,I="",j={classPrefix:"hljs-",tabReplace:null,useBR:!1,languages:void 0};return e.highlight=f,e.highlightAuto=g,e.fixMarkup=p,e.highlightBlock=h,e.configure=b,e.initHighlighting=v,e.initHighlightingOnLoad=m,e.registerLanguage=N,e.listLanguages=R,e.getLanguage=w,e.autoDetection=x,e.inherit=o,e.IR="[a-zA-Z]\\w*",e.UIR="[a-zA-Z_]\\w*",e.NR="\\b\\d+(\\.\\d+)?",e.CNR="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",e.BNR="\\b(0b[01]+)",e.RSR="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",e.BE={b:"\\\\[\\s\\S]",r:0},e.ASM={cN:"string",b:"'",e:"'",i:"\\n",c:[e.BE]},e.QSM={cN:"string",b:'"',e:'"',i:"\\n",c:[e.BE]},e.PWM={b:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},e.C=function(n,t,r){var a=e.inherit({cN:"comment",b:n,e:t,c:[]},r||{});return a.c.push(e.PWM),a.c.push({cN:"doctag",b:"(?:TODO|FIXME|NOTE|BUG|XXX):",r:0}),a},e.CLCM=e.C("//","$"),e.CBCM=e.C("/\\*","\\*/"),e.HCM=e.C("#","$"),e.NM={cN:"number",b:e.NR,r:0},e.CNM={cN:"number",b:e.CNR,r:0},e.BNM={cN:"number",b:e.BNR,r:0},e.CSSNM={cN:"number",b:e.NR+"(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?",r:0},e.RM={cN:"regexp",b:/\//,e:/\/[gimuy]*/,i:/\n/,c:[e.BE,{b:/\[/,e:/\]/,r:0,c:[e.BE]}]},e.TM={cN:"title",b:e.IR,r:0},e.UTM={cN:"title",b:e.UIR,r:0},e.METHOD_GUARD={b:"\\.\\s*"+e.UIR,r:0},e});hljs.registerLanguage("bash",function(e){var t={cN:"variable",v:[{b:/\$[\w\d#@][\w\d_]*/},{b:/\$\{(.*?)}/}]},s={cN:"string",b:/"/,e:/"/,c:[e.BE,t,{cN:"variable",b:/\$\(/,e:/\)/,c:[e.BE]}]},a={cN:"string",b:/'/,e:/'/};return{aliases:["sh","zsh"],l:/\b-?[a-z\._]+\b/,k:{keyword:"if then else elif fi for while in do done case esac function",literal:"true false",built_in:"break cd continue eval exec exit export getopts hash pwd readonly return shift test times trap umask unset alias bind builtin caller command declare echo enable help let local logout mapfile printf read readarray source type typeset ulimit unalias set shopt autoload bg bindkey bye cap chdir clone comparguments compcall compctl compdescribe compfiles compgroups compquote comptags comptry compvalues dirs disable disown echotc echoti emulate fc fg float functions getcap getln history integer jobs kill limit log noglob popd print pushd pushln rehash sched setcap setopt stat suspend ttyctl unfunction unhash unlimit unsetopt vared wait whence where which zcompile zformat zftp zle zmodload zparseopts zprof zpty zregexparse zsocket zstyle ztcp",_:"-ne -eq -lt -gt -f -d -e -s -l -a"},c:[{cN:"meta",b:/^#![^\n]+sh\s*$/,r:10},{cN:"function",b:/\w[\w\d_]*\s*\(\s*\)\s*\{/,rB:!0,c:[e.inherit(e.TM,{b:/\w[\w\d_]*/})],r:0},e.HCM,s,a,t]}});hljs.registerLanguage("dockerfile",function(e){return{aliases:["docker"],cI:!0,k:"from maintainer expose env arg user onbuild stopsignal",c:[e.HCM,e.ASM,e.QSM,e.NM,{bK:"run cmd entrypoint volume add copy workdir label healthcheck shell",starts:{e:/[^\\]\n/,sL:"bash"}}],i:")?[^\s\(]+(\s+[^\s\(]+)\s*=/,r:5,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"type",b://,k:"reified",r:0},{cN:"params",b:/\(/,e:/\)/,endsParent:!0,k:t,r:0,c:[{b:/:/,e:/[=,\/]/,eW:!0,c:[{cN:"type",b:e.UIR},e.CLCM,e.CBCM],r:0},e.CLCM,e.CBCM,s,l,c,e.CNM]},e.CBCM]},{cN:"class",bK:"class interface trait",e:/[:\{(]|$/,eE:!0,i:"extends implements",c:[{bK:"public protected internal private constructor"},e.UTM,{cN:"type",b://,eB:!0,eE:!0,r:0},{cN:"type",b:/[,:]\s*/,e:/[<\(,]|$/,eB:!0,rE:!0},s,l]},c,{cN:"meta",b:"^#!/usr/bin/env",e:"$",i:"\n"},o]}});hljs.registerLanguage("java",function(e){var a="[À-ʸa-zA-Z_$][À-ʸa-zA-Z_$0-9]*",t=a+"(<"+a+"(\\s*,\\s*"+a+")*>)?",r="false synchronized int abstract float private char boolean var static null if const for true while long strictfp finally protected import native final void enum else break transient catch instanceof byte super volatile case assert short package default double public try this switch continue throws protected public private module requires exports do",s="\\b(0[bB]([01]+[01_]+[01]+|[01]+)|0[xX]([a-fA-F0-9]+[a-fA-F0-9_]+[a-fA-F0-9]+|[a-fA-F0-9]+)|(([\\d]+[\\d_]+[\\d]+|[\\d]+)(\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))?|\\.([\\d]+[\\d_]+[\\d]+|[\\d]+))([eE][-+]?\\d+)?)[lLfF]?",c={cN:"number",b:s,r:0};return{aliases:["jsp"],k:r,i:/<\/|#/,c:[e.C("/\\*\\*","\\*/",{r:0,c:[{b:/\w+@/,r:0},{cN:"doctag",b:"@[A-Za-z]+"}]}),e.CLCM,e.CBCM,e.ASM,e.QSM,{cN:"class",bK:"class interface",e:/[{;=]/,eE:!0,k:"class interface",i:/[:"\[\]]/,c:[{bK:"extends implements"},e.UTM]},{bK:"new throw return else",r:0},{cN:"function",b:"("+t+"\\s+)+"+e.UIR+"\\s*\\(",rB:!0,e:/[{;=]/,eE:!0,k:r,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"params",b:/\(/,e:/\)/,k:r,r:0,c:[e.ASM,e.QSM,e.CNM,e.CBCM]},e.CLCM,e.CBCM]},c,{cN:"meta",b:"@[A-Za-z]+"}]}});hljs.registerLanguage("xml",function(s){var e="[A-Za-z0-9\\._:-]+",t={eW:!0,i:/`]+/}]}]}]};return{aliases:["html","xhtml","rss","atom","xjb","xsd","xsl","plist"],cI:!0,c:[{cN:"meta",b:"",r:10,c:[{b:"\\[",e:"\\]"}]},s.C("",{r:10}),{b:"<\\!\\[CDATA\\[",e:"\\]\\]>",r:10},{cN:"meta",b:/<\?xml/,e:/\?>/,r:10},{b:/<\?(php)?/,e:/\?>/,sL:"php",c:[{b:"/\\*",e:"\\*/",skip:!0},{b:'b"',e:'"',skip:!0},{b:"b'",e:"'",skip:!0},s.inherit(s.ASM,{i:null,cN:null,c:null,skip:!0}),s.inherit(s.QSM,{i:null,cN:null,c:null,skip:!0})]},{cN:"tag",b:"|$)",e:">",k:{name:"style"},c:[t],starts:{e:"",rE:!0,sL:["css","xml"]}},{cN:"tag",b:"|$)",e:">",k:{name:"script"},c:[t],starts:{e:"",rE:!0,sL:["actionscript","javascript","handlebars","xml"]}},{cN:"tag",b:"",c:[{cN:"name",b:/[^\/><\s]+/,r:0},t]}]}});hljs.registerLanguage("properties",function(r){var t="[ \\t\\f]*",e="[ \\t\\f]+",s="("+t+"[:=]"+t+"|"+e+")",n="([^\\\\\\W:= \\t\\f\\n]|\\\\.)+",a="([^\\\\:= \\t\\f\\n]|\\\\.)+",c={e:s,r:0,starts:{cN:"string",e:/$/,r:0,c:[{b:"\\\\\\n"}]}};return{cI:!0,i:/\S/,c:[r.C("^\\s*[!#]","$"),{b:n+s,rB:!0,c:[{cN:"attr",b:n,endsParent:!0,r:0}],starts:c},{b:a+s,rB:!0,r:0,c:[{cN:"meta",b:a,endsParent:!0,r:0}],starts:c},{cN:"attr",r:0,b:a+t+"$"}]}});hljs.registerLanguage("diff",function(e){return{aliases:["patch"],c:[{cN:"meta",r:10,v:[{b:/^@@ +\-\d+,\d+ +\+\d+,\d+ +@@$/},{b:/^\*\*\* +\d+,\d+ +\*\*\*\*$/},{b:/^\-\-\- +\d+,\d+ +\-\-\-\-$/}]},{cN:"comment",v:[{b:/Index: /,e:/$/},{b:/={3,}/,e:/$/},{b:/^\-{3}/,e:/$/},{b:/^\*{3} /,e:/$/},{b:/^\+{3}/,e:/$/},{b:/\*{5}/,e:/\*{5}$/}]},{cN:"addition",b:"^\\+",e:"$"},{cN:"deletion",b:"^\\-",e:"$"},{cN:"addition",b:"^\\!",e:"$"}]}});hljs.registerLanguage("shell",function(s){return{aliases:["console"],c:[{cN:"meta",b:"^\\s{0,3}[\\w\\d\\[\\]()@-]*[>%$#]",starts:{e:"$",sL:"bash"}}]}});hljs.registerLanguage("asciidoc",function(e){return{aliases:["adoc"],c:[e.C("^/{4,}\\n","\\n/{4,}$",{r:10}),e.C("^//","$",{r:0}),{cN:"title",b:"^\\.\\w.*$"},{b:"^[=\\*]{4,}\\n",e:"\\n^[=\\*]{4,}$",r:10},{cN:"section",r:10,v:[{b:"^(={1,5}) .+?( \\1)?$"},{b:"^[^\\[\\]\\n]+?\\n[=\\-~\\^\\+]{2,}$"}]},{cN:"meta",b:"^:.+?:",e:"\\s",eE:!0,r:10},{cN:"meta",b:"^\\[.+?\\]$",r:0},{cN:"quote",b:"^_{4,}\\n",e:"\\n_{4,}$",r:10},{cN:"code",b:"^[\\-\\.]{4,}\\n",e:"\\n[\\-\\.]{4,}$",r:10},{b:"^\\+{4,}\\n",e:"\\n\\+{4,}$",c:[{b:"<",e:">",sL:"xml",r:0}],r:10},{cN:"bullet",b:"^(\\*+|\\-+|\\.+|[^\\n]+?::)\\s+"},{cN:"symbol",b:"^(NOTE|TIP|IMPORTANT|WARNING|CAUTION):\\s+",r:10},{cN:"strong",b:"\\B\\*(?![\\*\\s])",e:"(\\n{2}|\\*)",c:[{b:"\\\\*\\w",r:0}]},{cN:"emphasis",b:"\\B'(?!['\\s])",e:"(\\n{2}|')",c:[{b:"\\\\'\\w",r:0}],r:0},{cN:"emphasis",b:"_(?![_\\s])",e:"(\\n{2}|_)",r:0},{cN:"string",v:[{b:"``.+?''"},{b:"`.+?'"}]},{cN:"code",b:"(`.+?`|\\+.+?\\+)",r:0},{cN:"code",b:"^[ \\t]",e:"$",r:0},{b:"^'{3,}[ \\t]*$",r:10},{b:"(link:)?(http|https|ftp|file|irc|image:?):\\S+\\[.*?\\]",rB:!0,c:[{b:"(link|image:?):",r:0},{cN:"link",b:"\\w",e:"[^\\[]+",r:0},{cN:"string",b:"\\[",e:"\\]",eB:!0,eE:!0,r:0}],r:10}]}});hljs.registerLanguage("aspectj",function(e){var t="false synchronized int abstract float private char boolean static null if const for true while long throw strictfp finally protected import native final return void enum else extends implements break transient new catch instanceof byte super volatile case assert short package default double public try this switch continue throws privileged aspectOf adviceexecution proceed cflowbelow cflow initialization preinitialization staticinitialization withincode target within execution getWithinTypeName handler thisJoinPoint thisJoinPointStaticPart thisEnclosingJoinPointStaticPart declare parents warning error soft precedence thisAspectInstance",i="get set args call";return{k:t,i:/<\/|#/,c:[e.C("/\\*\\*","\\*/",{r:0,c:[{b:/\w+@/,r:0},{cN:"doctag",b:"@[A-Za-z]+"}]}),e.CLCM,e.CBCM,e.ASM,e.QSM,{cN:"class",bK:"aspect",e:/[{;=]/,eE:!0,i:/[:;"\[\]]/,c:[{bK:"extends implements pertypewithin perthis pertarget percflowbelow percflow issingleton"},e.UTM,{b:/\([^\)]*/,e:/[)]+/,k:t+" "+i,eE:!1}]},{cN:"class",bK:"class interface",e:/[{;=]/,eE:!0,r:0,k:"class interface",i:/[:"\[\]]/,c:[{bK:"extends implements"},e.UTM]},{bK:"pointcut after before around throwing returning",e:/[)]/,eE:!1,i:/["\[\]]/,c:[{b:e.UIR+"\\s*\\(",rB:!0,c:[e.UTM]}]},{b:/[:]/,rB:!0,e:/[{;]/,r:0,eE:!1,k:t,i:/["\[\]]/,c:[{b:e.UIR+"\\s*\\(",k:t+" "+i,r:0},e.QSM]},{bK:"new throw",r:0},{cN:"function",b:/\w+ +\w+(\.)?\w+\s*\([^\)]*\)\s*((throws)[\w\s,]+)?[\{;]/,rB:!0,e:/[{;=]/,k:t,eE:!0,c:[{b:e.UIR+"\\s*\\(",rB:!0,r:0,c:[e.UTM]},{cN:"params",b:/\(/,e:/\)/,r:0,k:t,c:[e.ASM,e.QSM,e.CNM,e.CBCM]},e.CLCM,e.CBCM]},e.CNM,{cN:"meta",b:"@[A-Za-z]+"}]}});hljs.registerLanguage("gradle",function(e){return{cI:!0,k:{keyword:"task project allprojects subprojects artifacts buildscript configurations dependencies repositories sourceSets description delete from into include exclude source classpath destinationDir includes options sourceCompatibility targetCompatibility group flatDir doLast doFirst flatten todir fromdir ant def abstract break case catch continue default do else extends final finally for if implements instanceof native new private protected public return static switch synchronized throw throws transient try volatile while strictfp package import false null super this true antlrtask checkstyle codenarc copy boolean byte char class double float int interface long short void compile runTime file fileTree abs any append asList asWritable call collect compareTo count div dump each eachByte eachFile eachLine every find findAll flatten getAt getErr getIn getOut getText grep immutable inject inspect intersect invokeMethods isCase join leftShift minus multiply newInputStream newOutputStream newPrintWriter newReader newWriter next plus pop power previous print println push putAt read readBytes readLines reverse reverseEach round size sort splitEachLine step subMap times toInteger toList tokenize upto waitForOrKill withPrintWriter withReader withStream withWriter withWriterAppend write writeLine"},c:[e.CLCM,e.CBCM,e.ASM,e.QSM,e.NM,e.RM]}});hljs.registerLanguage("json",function(e){var i={literal:"true false null"},n=[e.QSM,e.CNM],r={e:",",eW:!0,eE:!0,c:n,k:i},t={b:"{",e:"}",c:[{cN:"attr",b:/"/,e:/"/,c:[e.BE],i:"\\n"},e.inherit(r,{b:/:/})],i:"\\S"},c={b:"\\[",e:"\\]",c:[e.inherit(r)],i:"\\S"};return n.splice(n.length,0,t,c),{c:n,k:i,i:"\\S"}});hljs.registerLanguage("sql",function(e){var t=e.C("--","$");return{cI:!0,i:/[<>{}*]/,c:[{bK:"begin end start commit rollback savepoint lock alter create drop rename call delete do handler insert load replace select truncate update set show pragma grant merge describe use explain help declare prepare execute deallocate release unlock purge reset change stop analyze cache flush optimize repair kill install uninstall checksum restore check backup revoke comment with",e:/;/,eW:!0,l:/[\w\.]+/,k:{keyword:"as abort abs absolute acc acce accep accept access accessed accessible account acos action activate add addtime admin administer advanced advise aes_decrypt aes_encrypt after agent aggregate ali alia alias allocate allow alter always analyze ancillary and any anydata anydataset anyschema anytype apply archive archived archivelog are as asc ascii asin assembly assertion associate asynchronous at atan atn2 attr attri attrib attribu attribut attribute attributes audit authenticated authentication authid authors auto autoallocate autodblink autoextend automatic availability avg backup badfile basicfile before begin beginning benchmark between bfile bfile_base big bigfile bin binary_double binary_float binlog bit_and bit_count bit_length bit_or bit_xor bitmap blob_base block blocksize body both bound buffer_cache buffer_pool build bulk by byte byteordermark bytes cache caching call calling cancel capacity cascade cascaded case cast catalog category ceil ceiling chain change changed char_base char_length character_length characters characterset charindex charset charsetform charsetid check checksum checksum_agg child choose chr chunk class cleanup clear client clob clob_base clone close cluster_id cluster_probability cluster_set clustering coalesce coercibility col collate collation collect colu colum column column_value columns columns_updated comment commit compact compatibility compiled complete composite_limit compound compress compute concat concat_ws concurrent confirm conn connec connect connect_by_iscycle connect_by_isleaf connect_by_root connect_time connection consider consistent constant constraint constraints constructor container content contents context contributors controlfile conv convert convert_tz corr corr_k corr_s corresponding corruption cos cost count count_big counted covar_pop covar_samp cpu_per_call cpu_per_session crc32 create creation critical cross cube cume_dist curdate current current_date current_time current_timestamp current_user cursor curtime customdatum cycle data database databases datafile datafiles datalength date_add date_cache date_format date_sub dateadd datediff datefromparts datename datepart datetime2fromparts day day_to_second dayname dayofmonth dayofweek dayofyear days db_role_change dbtimezone ddl deallocate declare decode decompose decrement decrypt deduplicate def defa defau defaul default defaults deferred defi defin define degrees delayed delegate delete delete_all delimited demand dense_rank depth dequeue des_decrypt des_encrypt des_key_file desc descr descri describ describe descriptor deterministic diagnostics difference dimension direct_load directory disable disable_all disallow disassociate discardfile disconnect diskgroup distinct distinctrow distribute distributed div do document domain dotnet double downgrade drop dumpfile duplicate duration each edition editionable editions element ellipsis else elsif elt empty enable enable_all enclosed encode encoding encrypt end end-exec endian enforced engine engines enqueue enterprise entityescaping eomonth error errors escaped evalname evaluate event eventdata events except exception exceptions exchange exclude excluding execu execut execute exempt exists exit exp expire explain export export_set extended extent external external_1 external_2 externally extract failed failed_login_attempts failover failure far fast feature_set feature_value fetch field fields file file_name_convert filesystem_like_logging final finish first first_value fixed flash_cache flashback floor flush following follows for forall force foreign form forma format found found_rows freelist freelists freepools fresh from from_base64 from_days ftp full function general generated get get_format get_lock getdate getutcdate global global_name globally go goto grant grants greatest group group_concat group_id grouping grouping_id groups gtid_subtract guarantee guard handler hash hashkeys having hea head headi headin heading heap help hex hierarchy high high_priority hosts hour http id ident_current ident_incr ident_seed identified identity idle_time if ifnull ignore iif ilike ilm immediate import in include including increment index indexes indexing indextype indicator indices inet6_aton inet6_ntoa inet_aton inet_ntoa infile initial initialized initially initrans inmemory inner innodb input insert install instance instantiable instr interface interleaved intersect into invalidate invisible is is_free_lock is_ipv4 is_ipv4_compat is_not is_not_null is_used_lock isdate isnull isolation iterate java join json json_exists keep keep_duplicates key keys kill language large last last_day last_insert_id last_value lax lcase lead leading least leaves left len lenght length less level levels library like like2 like4 likec limit lines link list listagg little ln load load_file lob lobs local localtime localtimestamp locate locator lock locked log log10 log2 logfile logfiles logging logical logical_reads_per_call logoff logon logs long loop low low_priority lower lpad lrtrim ltrim main make_set makedate maketime managed management manual map mapping mask master master_pos_wait match matched materialized max maxextents maximize maxinstances maxlen maxlogfiles maxloghistory maxlogmembers maxsize maxtrans md5 measures median medium member memcompress memory merge microsecond mid migration min minextents minimum mining minus minute minvalue missing mod mode model modification modify module monitoring month months mount move movement multiset mutex name name_const names nan national native natural nav nchar nclob nested never new newline next nextval no no_write_to_binlog noarchivelog noaudit nobadfile nocheck nocompress nocopy nocycle nodelay nodiscardfile noentityescaping noguarantee nokeep nologfile nomapping nomaxvalue nominimize nominvalue nomonitoring none noneditionable nonschema noorder nopr nopro noprom nopromp noprompt norely noresetlogs noreverse normal norowdependencies noschemacheck noswitch not nothing notice notnull notrim novalidate now nowait nth_value nullif nulls num numb numbe nvarchar nvarchar2 object ocicoll ocidate ocidatetime ociduration ociinterval ociloblocator ocinumber ociref ocirefcursor ocirowid ocistring ocitype oct octet_length of off offline offset oid oidindex old on online only opaque open operations operator optimal optimize option optionally or oracle oracle_date oradata ord ordaudio orddicom orddoc order ordimage ordinality ordvideo organization orlany orlvary out outer outfile outline output over overflow overriding package pad parallel parallel_enable parameters parent parse partial partition partitions pascal passing password password_grace_time password_lock_time password_reuse_max password_reuse_time password_verify_function patch path patindex pctincrease pctthreshold pctused pctversion percent percent_rank percentile_cont percentile_disc performance period period_add period_diff permanent physical pi pipe pipelined pivot pluggable plugin policy position post_transaction pow power pragma prebuilt precedes preceding precision prediction prediction_cost prediction_details prediction_probability prediction_set prepare present preserve prior priority private private_sga privileges procedural procedure procedure_analyze processlist profiles project prompt protection public publishingservername purge quarter query quick quiesce quota quotename radians raise rand range rank raw read reads readsize rebuild record records recover recovery recursive recycle redo reduced ref reference referenced references referencing refresh regexp_like register regr_avgx regr_avgy regr_count regr_intercept regr_r2 regr_slope regr_sxx regr_sxy reject rekey relational relative relaylog release release_lock relies_on relocate rely rem remainder rename repair repeat replace replicate replication required reset resetlogs resize resource respect restore restricted result result_cache resumable resume retention return returning returns reuse reverse revoke right rlike role roles rollback rolling rollup round row row_count rowdependencies rowid rownum rows rtrim rules safe salt sample save savepoint sb1 sb2 sb4 scan schema schemacheck scn scope scroll sdo_georaster sdo_topo_geometry search sec_to_time second section securefile security seed segment select self sequence sequential serializable server servererror session session_user sessions_per_user set sets settings sha sha1 sha2 share shared shared_pool short show shrink shutdown si_averagecolor si_colorhistogram si_featurelist si_positionalcolor si_stillimage si_texture siblings sid sign sin size size_t sizes skip slave sleep smalldatetimefromparts smallfile snapshot some soname sort soundex source space sparse spfile split sql sql_big_result sql_buffer_result sql_cache sql_calc_found_rows sql_small_result sql_variant_property sqlcode sqldata sqlerror sqlname sqlstate sqrt square standalone standby start starting startup statement static statistics stats_binomial_test stats_crosstab stats_ks_test stats_mode stats_mw_test stats_one_way_anova stats_t_test_ stats_t_test_indep stats_t_test_one stats_t_test_paired stats_wsr_test status std stddev stddev_pop stddev_samp stdev stop storage store stored str str_to_date straight_join strcmp strict string struct stuff style subdate subpartition subpartitions substitutable substr substring subtime subtring_index subtype success sum suspend switch switchoffset switchover sync synchronous synonym sys sys_xmlagg sysasm sysaux sysdate sysdatetimeoffset sysdba sysoper system system_user sysutcdatetime table tables tablespace tan tdo template temporary terminated tertiary_weights test than then thread through tier ties time time_format time_zone timediff timefromparts timeout timestamp timestampadd timestampdiff timezone_abbr timezone_minute timezone_region to to_base64 to_date to_days to_seconds todatetimeoffset trace tracking transaction transactional translate translation treat trigger trigger_nestlevel triggers trim truncate try_cast try_convert try_parse type ub1 ub2 ub4 ucase unarchived unbounded uncompress under undo unhex unicode uniform uninstall union unique unix_timestamp unknown unlimited unlock unnest unpivot unrecoverable unsafe unsigned until untrusted unusable unused update updated upgrade upped upper upsert url urowid usable usage use use_stored_outlines user user_data user_resources users using utc_date utc_timestamp uuid uuid_short validate validate_password_strength validation valist value values var var_samp varcharc vari varia variab variabl variable variables variance varp varraw varrawc varray verify version versions view virtual visible void wait wallet warning warnings week weekday weekofyear wellformed when whene whenev wheneve whenever where while whitespace with within without work wrapped xdb xml xmlagg xmlattributes xmlcast xmlcolattval xmlelement xmlexists xmlforest xmlindex xmlnamespaces xmlpi xmlquery xmlroot xmlschema xmlserialize xmltable xmltype xor year year_to_month years yearweek",literal:"true false null unknown",built_in:"array bigint binary bit blob bool boolean char character date dec decimal float int int8 integer interval number numeric real record serial serial8 smallint text time timestamp varchar varying void"},c:[{cN:"string",b:"'",e:"'",c:[e.BE,{b:"''"}]},{cN:"string",b:'"',e:'"',c:[e.BE,{b:'""'}]},{cN:"string",b:"`",e:"`",c:[e.BE]},e.CNM,e.CBCM,t,e.HCM]},e.CBCM,t,e.HCM]}});hljs.registerLanguage("go",function(e){var t={keyword:"break default func interface select case map struct chan else goto package switch const fallthrough if range type continue for import return var go defer bool byte complex64 complex128 float32 float64 int8 int16 int32 int64 string uint8 uint16 uint32 uint64 int uint uintptr rune",literal:"true false iota nil",built_in:"append cap close complex copy imag len make new panic print println real recover delete"};return{aliases:["golang"],k:t,i:"",rB:!0,e:"\\s*=>",c:[{cN:"params",v:[{b:r},{b:/\(\s*\)/},{b:/\(/,e:/\)/,eB:!0,eE:!0,k:t,c:s}]}]},{b://,sL:"xml",c:[{b:/<\w+\s*\/>/,skip:!0},{b:/<\w+/,e:/(\/\w+|\w+\/)>/,skip:!0,c:[{b:/<\w+\s*\/>/,skip:!0},"self"]}]}],r:0},{cN:"function",bK:"function",e:/\{/,eE:!0,c:[e.inherit(e.TM,{b:r}),{cN:"params",b:/\(/,e:/\)/,eB:!0,eE:!0,c:s}],i:/\[|%/},{b:/\$[(.]/},e.METHOD_GUARD,{cN:"class",bK:"class",e:/[{;=]/,eE:!0,i:/[:"\[\]]/,c:[{bK:"extends"},e.UTM]},{bK:"constructor",e:/\{/,eE:!0}],i:/#(?!!)/}}); \ No newline at end of file diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/atom-one-light.min.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/atom-one-light.min.css new file mode 100644 index 00000000..d5bd1d2a --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/atom-one-light.min.css @@ -0,0 +1,96 @@ +/* + +Atom One Light by Daniel Gamage +Original One Light Syntax theme from https://github.com/atom/one-light-syntax + +base: #fafafa +mono-1: #383a42 +mono-2: #686b77 +mono-3: #a0a1a7 +hue-1: #0184bb +hue-2: #4078f2 +hue-3: #a626a4 +hue-4: #50a14f +hue-5: #e45649 +hue-5-2: #c91243 +hue-6: #986801 +hue-6-2: #c18401 + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + color: #383a42; + background: #fafafa; +} + +.hljs-comment, +.hljs-quote { + color: #a0a1a7; + font-style: italic; +} + +.hljs-doctag, +.hljs-keyword, +.hljs-formula { + color: #a626a4; +} + +.hljs-section, +.hljs-name, +.hljs-selector-tag, +.hljs-deletion, +.hljs-subst { + color: #e45649; +} + +.hljs-literal { + color: #0184bb; +} + +.hljs-string, +.hljs-regexp, +.hljs-addition, +.hljs-attribute, +.hljs-meta-string { + color: #50a14f; +} + +.hljs-built_in, +.hljs-class .hljs-title { + color: #c18401; +} + +.hljs-attr, +.hljs-variable, +.hljs-template-variable, +.hljs-type, +.hljs-selector-class, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-number { + color: #986801; +} + +.hljs-symbol, +.hljs-bullet, +.hljs-link, +.hljs-meta, +.hljs-selector-id, +.hljs-title { + color: #4078f2; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} + +.hljs-link { + text-decoration: underline; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github-gist.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github-gist.css new file mode 100644 index 00000000..2706084a --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github-gist.css @@ -0,0 +1,79 @@ +/** + * GitHub Gist Theme + * Author : Anthony Attard - https://github.com/AnthonyAttard + * Author : Louis Barranqueiro - https://github.com/LouisBarranqueiro + */ + +.hljs { + display: block; + background: white; + padding: 0.5em; + color: #333333; + overflow-x: auto; +} + +.hljs-comment, +.hljs-meta { + color: #969896; +} + +.hljs-variable, +.hljs-template-variable, +.hljs-strong, +.hljs-emphasis, +.hljs-quote { + color: #df5000; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-type { + color: #d73a49; +} + +.hljs-literal, +.hljs-symbol, +.hljs-bullet, +.hljs-attribute { + color: #0086b3; +} + +.hljs-section, +.hljs-name { + color: #63a35c; +} + +.hljs-tag { + color: #333333; +} + +.hljs-title, +.hljs-attr, +.hljs-selector-id, +.hljs-selector-class, +.hljs-selector-attr, +.hljs-selector-pseudo { + color: #6f42c1; +} + +.hljs-addition { + color: #55a532; + background-color: #eaffea; +} + +.hljs-deletion { + color: #bd2c00; + background-color: #ffecec; +} + +.hljs-link { + text-decoration: underline; +} + +.hljs-number { + color: #005cc5; +} + +.hljs-string { + color: #032f62; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github.min.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github.min.css new file mode 100644 index 00000000..791932b8 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/github.min.css @@ -0,0 +1,99 @@ +/* + +github.com style (c) Vasily Polovnyov + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + color: #333; + background: #f8f8f8; +} + +.hljs-comment, +.hljs-quote { + color: #998; + font-style: italic; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-subst { + color: #333; + font-weight: bold; +} + +.hljs-number, +.hljs-literal, +.hljs-variable, +.hljs-template-variable, +.hljs-tag .hljs-attr { + color: #008080; +} + +.hljs-string, +.hljs-doctag { + color: #d14; +} + +.hljs-title, +.hljs-section, +.hljs-selector-id { + color: #900; + font-weight: bold; +} + +.hljs-subst { + font-weight: normal; +} + +.hljs-type, +.hljs-class .hljs-title { + color: #458; + font-weight: bold; +} + +.hljs-tag, +.hljs-name, +.hljs-attribute { + color: #000080; + font-weight: normal; +} + +.hljs-regexp, +.hljs-link { + color: #009926; +} + +.hljs-symbol, +.hljs-bullet { + color: #990073; +} + +.hljs-built_in, +.hljs-builtin-name { + color: #0086b3; +} + +.hljs-meta { + color: #999; + font-weight: bold; +} + +.hljs-deletion { + background: #fdd; +} + +.hljs-addition { + background: #dfd; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/googlecode.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/googlecode.css new file mode 100644 index 00000000..0cf18a04 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/googlecode.css @@ -0,0 +1,89 @@ +/* + +Google Code style (c) Aahan Krish + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + background: white; + color: black; +} + +.hljs-comment, +.hljs-quote { + color: #800; +} + +.hljs-keyword, +.hljs-selector-tag, +.hljs-section, +.hljs-title, +.hljs-name { + color: #008; +} + +.hljs-variable, +.hljs-template-variable { + color: #660; +} + +.hljs-string, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-regexp { + color: #080; +} + +.hljs-literal, +.hljs-symbol, +.hljs-bullet, +.hljs-meta, +.hljs-number, +.hljs-link { + color: #066; +} + +.hljs-title, +.hljs-doctag, +.hljs-type, +.hljs-attr, +.hljs-built_in, +.hljs-builtin-name, +.hljs-params { + color: #606; +} + +.hljs-attribute, +.hljs-subst { + color: #000; +} + +.hljs-formula { + background-color: #eee; + font-style: italic; +} + +.hljs-selector-id, +.hljs-selector-class { + color: #9B703F +} + +.hljs-addition { + background-color: #baeeba; +} + +.hljs-deletion { + background-color: #ffc8bd; +} + +.hljs-doctag, +.hljs-strong { + font-weight: bold; +} + +.hljs-emphasis { + font-style: italic; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/solarized-light.min.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/solarized-light.min.css new file mode 100644 index 00000000..fdcfcc72 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/highlight/styles/solarized-light.min.css @@ -0,0 +1,84 @@ +/* + +Orginal Style from ethanschoonover.com/solarized (c) Jeremy Hull + +*/ + +.hljs { + display: block; + overflow-x: auto; + padding: 0.5em; + background: #fdf6e3; + color: #657b83; +} + +.hljs-comment, +.hljs-quote { + color: #93a1a1; +} + +/* Solarized Green */ +.hljs-keyword, +.hljs-selector-tag, +.hljs-addition { + color: #859900; +} + +/* Solarized Cyan */ +.hljs-number, +.hljs-string, +.hljs-meta .hljs-meta-string, +.hljs-literal, +.hljs-doctag, +.hljs-regexp { + color: #2aa198; +} + +/* Solarized Blue */ +.hljs-title, +.hljs-section, +.hljs-name, +.hljs-selector-id, +.hljs-selector-class { + color: #268bd2; +} + +/* Solarized Yellow */ +.hljs-attribute, +.hljs-attr, +.hljs-variable, +.hljs-template-variable, +.hljs-class .hljs-title, +.hljs-type { + color: #b58900; +} + +/* Solarized Orange */ +.hljs-symbol, +.hljs-bullet, +.hljs-subst, +.hljs-meta, +.hljs-meta .hljs-keyword, +.hljs-selector-attr, +.hljs-selector-pseudo, +.hljs-link { + color: #cb4b16; +} + +/* Solarized Red */ +.hljs-built_in, +.hljs-deletion { + color: #dc322f; +} + +.hljs-formula { + background: #eee8d5; +} + +.hljs-emphasis { + font-style: italic; +} + +.hljs-strong { + font-weight: bold; +} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/toc.js b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/toc.js new file mode 100644 index 00000000..0b6fcd65 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/toc.js @@ -0,0 +1,80 @@ +var toctitle = document.getElementById('toctitle'); +var path = window.location.pathname; +if (toctitle != null) { + var oldtoc = toctitle.nextElementSibling; + var newtoc = document.createElement('div'); + newtoc.setAttribute('id', 'tocbot'); + newtoc.setAttribute('class', 'js-toc desktop-toc'); + oldtoc.setAttribute('class', 'mobile-toc'); + oldtoc.parentNode.appendChild(newtoc); + tocbot.init({ + contentSelector: '#content', + headingSelector: 'h1, h2, h3, h4, h5', + positionFixedSelector: 'body', + fixedSidebarOffset: 90, + smoothScroll: false + }); + if (!path.endsWith("index.html") && !path.endsWith("/")) { + var link = document.createElement("a"); + if (document.getElementById('index-link')) { + indexLinkElement = document.querySelector('#index-link > p > a'); + linkHref = indexLinkElement.getAttribute("href"); + link.setAttribute("href", linkHref); + } else { + link.setAttribute("href", "index.html"); + } + link.innerHTML = " Back to index"; + var block = document.createElement("div"); + block.setAttribute('class', 'back-action'); + block.appendChild(link); + var toc = document.getElementById('toc'); + var next = document.getElementById('toctitle').nextElementSibling; + toc.insertBefore(block, next); + } +} + +var headerHtml = '
\n' + + '

\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '\n' + + '

\n' + + '
'; + +var header = document.createElement("div"); +header.innerHTML = headerHtml; +document.body.insertBefore(header, document.body.firstChild); diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.css b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.css new file mode 100644 index 00000000..0632de23 --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.css @@ -0,0 +1 @@ +.toc{overflow-y:auto}.toc>.toc-list{overflow:hidden;position:relative}.toc>.toc-list li{list-style:none}.toc-list{margin:0;padding-left:10px}a.toc-link{color:currentColor;height:100%}.is-collapsible{max-height:1000px;overflow:hidden;transition:all 300ms ease-in-out}.is-collapsed{max-height:0}.is-position-fixed{position:fixed !important;top:0}.is-active-link{font-weight:700}.toc-link::before{background-color:#EEE;content:' ';display:inline-block;height:inherit;left:0;margin-top:-1px;position:absolute;width:2px}.is-active-link::before{background-color:#54BC4B} diff --git a/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.min.js b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.min.js new file mode 100644 index 00000000..943d8fdb --- /dev/null +++ b/spring-cloud-security/3.0.0-M2/reference/htmlsingle/js/tocbot/tocbot.min.js @@ -0,0 +1 @@ +!function(e){function t(o){if(n[o])return n[o].exports;var l=n[o]={i:o,l:!1,exports:{}};return e[o].call(l.exports,l,l.exports,t),l.l=!0,l.exports}var n={};t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)||Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=0)}([function(e,t,n){(function(o){var l,i,s;!function(n,o){i=[],l=o(n),void 0!==(s="function"==typeof l?l.apply(t,i):l)&&(e.exports=s)}(void 0!==o?o:this.window||this.global,function(e){"use strict";function t(){for(var e={},t=0;te.fixedSidebarOffset?-1===n.className.indexOf(e.positionFixedClass)&&(n.className+=h+e.positionFixedClass):n.className=n.className.split(h+e.positionFixedClass).join("")}function s(t){var n=document.documentElement.scrollTop||f.scrollTop;e.positionFixedSelector&&i();var o,l=t;if(m&&null!==document.querySelector(e.tocSelector)&&l.length>0){d.call(l,function(t,i){if(t.offsetTop>n+e.headingsOffset+10){return o=l[0===i?i:i-1],!0}if(i===l.length-1)return o=l[l.length-1],!0});var s=document.querySelector(e.tocSelector).querySelectorAll("."+e.linkClass);u.call(s,function(t){t.className=t.className.split(h+e.activeLinkClass).join("")});var c=document.querySelector(e.tocSelector).querySelectorAll("."+e.listItemClass);u.call(c,function(t){t.className=t.className.split(h+e.activeListItemClass).join("")});var a=document.querySelector(e.tocSelector).querySelector("."+e.linkClass+".node-name--"+o.nodeName+'[href="#'+o.id+'"]');-1===a.className.indexOf(e.activeLinkClass)&&(a.className+=h+e.activeLinkClass);var p=a.parentNode;p&&-1===p.className.indexOf(e.activeListItemClass)&&(p.className+=h+e.activeListItemClass);var C=document.querySelector(e.tocSelector).querySelectorAll("."+e.listClass+"."+e.collapsibleClass);u.call(C,function(t){-1===t.className.indexOf(e.isCollapsedClass)&&(t.className+=h+e.isCollapsedClass)}),a.nextSibling&&-1!==a.nextSibling.className.indexOf(e.isCollapsedClass)&&(a.nextSibling.className=a.nextSibling.className.split(h+e.isCollapsedClass).join("")),r(a.parentNode.parentNode)}}function r(t){return-1!==t.className.indexOf(e.collapsibleClass)&&-1!==t.className.indexOf(e.isCollapsedClass)?(t.className=t.className.split(h+e.isCollapsedClass).join(""),r(t.parentNode.parentNode)):t}function c(t){var n=t.target||t.srcElement;"string"==typeof n.className&&-1!==n.className.indexOf(e.linkClass)&&(m=!1)}function a(){m=!0}var u=[].forEach,d=[].some,f=document.body,m=!0,h=" ";return{enableTocAnimation:a,disableTocAnimation:c,render:n,updateToc:s}}},function(e,t){e.exports=function(e){function t(e){return e[e.length-1]}function n(e){return+e.nodeName.split("H").join("")}function o(t){var o={id:t.id,children:[],nodeName:t.nodeName,headingLevel:n(t),textContent:t.textContent.trim()};return e.includeHtml&&(o.childNodes=t.childNodes),o}function l(l,i){for(var s=o(l),r=n(l),c=i,a=t(c),u=a?a.headingLevel:0,d=r-u;d>0;)a=t(c),a&&void 0!==a.children&&(c=a.children),d--;return r>=e.collapseDepth&&(s.isCollapsed=!0),c.push(s),c}function i(t,n){var o=n;e.ignoreSelector&&(o=n.split(",").map(function(t){return t.trim()+":not("+e.ignoreSelector+")"}));try{return document.querySelector(t).querySelectorAll(o)}catch(e){return console.warn("Element not found: "+t),null}}function s(e){return r.call(e,function(e,t){return l(o(t),e.nest),e},{nest:[]})}var r=[].reduce;return{nestHeadingsArray:s,selectHeadings:i}}},function(e,t){function n(e){function t(e){return"a"===e.tagName.toLowerCase()&&(e.hash.length>0||"#"===e.href.charAt(e.href.length-1))&&(n(e.href)===s||n(e.href)+"#"===s)}function n(e){return e.slice(0,e.lastIndexOf("#"))}function l(e){var t=document.getElementById(e.substring(1));t&&(/^(?:a|select|input|button|textarea)$/i.test(t.tagName)||(t.tabIndex=-1),t.focus())}!function(){document.documentElement.style}();var i=e.duration,s=location.hash?n(location.href):location.href;!function(){function n(n){!t(n.target)||n.target.className.indexOf("no-smooth-scroll")>-1||"#"===n.target.href.charAt(n.target.href.length-2)&&"!"===n.target.href.charAt(n.target.href.length-1)||-1===n.target.className.indexOf(e.linkClass)||o(n.target.hash,{duration:i,callback:function(){l(n.target.hash)}})}document.body.addEventListener("click",n,!1)}()}function o(e,t){function n(e){s=e-i,window.scrollTo(0,c.easing(s,r,u,d)),s