\",\n\t})\n}\n\nfunc printAuthResponse(result int) {\n\tresp, _ := json.Marshal(keyboardAuthHookResponse{\n\t\tAuthResult: result,\n\t})\n\tfmt.Printf(\"%v\\n\", string(resp))\n\tif result == 1 {\n\t\tos.Exit(0)\n\t} else {\n\t\tos.Exit(1)\n\t}\n}\n\nfunc main() {\n\t// get credentials from env vars\n\tusername := os.Getenv(\"SFTPGO_AUTHD_USERNAME\")\n\tvar userMap userMapping\n\tfor _, m := range mapping {\n\t\tif m.SFTPGoUsername == username {\n\t\t\tuserMap = m\n\t\t\tbreak\n\t\t}\n\t}\n\n\tif userMap.SFTPGoUsername != username {\n\t\t// no mapping found\n\t\tos.Exit(1)\n\t}\n\n\tcheckPwdQuestion := keyboardAuthHookResponse{\n\t\tInstruction: \"This is a sample keyboard authentication program that ask for your password + Authy token\",\n\t\tQuestions: []string{\"Your password: \"},\n\t\tEchos: []bool{false},\n\t\tCheckPwd: 1,\n\t\tAuthResult: 0,\n\t}\n\n\tq, _ := json.Marshal(checkPwdQuestion)\n\tfmt.Printf(\"%v\\n\", string(q))\n\n\t// in a real world app you probably want to use a read timeout\n\tscanner := bufio.NewScanner(os.Stdin)\n\tscanner.Scan()\n\tif scanner.Err() != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\tresponse := scanner.Text()\n\tif response != \"OK\" {\n\t\tprintAuthResponse(-1)\n\t}\n\n\tcheckTokenQuestion := keyboardAuthHookResponse{\n\t\tInstruction: \"\",\n\t\tQuestions: []string{\"Authy token: \"},\n\t\tEchos: []bool{false},\n\t\tCheckPwd: 0,\n\t\tAuthResult: 0,\n\t}\n\n\tq, _ = json.Marshal(checkTokenQuestion)\n\tfmt.Printf(\"%v\\n\", string(q))\n\tscanner.Scan()\n\tif scanner.Err() != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\tauthyToken := scanner.Text()\n\n\turl := fmt.Sprintf(\"https://api.authy.com/protected/json/verify/%v/%v\", authyToken, userMap.AuthyID)\n\treq, err := http.NewRequest(http.MethodGet, url, nil)\n\tif err != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\treq.Header.Set(\"X-Authy-API-Key\", userMap.AuthyAPIKey)\n\thttpClient := &http.Client{\n\t\tTimeout: 10 * time.Second,\n\t}\n\tresp, err := httpClient.Do(req)\n\tif err != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\tdefer resp.Body.Close()\n\tif resp.StatusCode != http.StatusOK {\n\t\t// status code 200 is expected\n\t\tprintAuthResponse(-1)\n\t}\n\tvar authyResponse map[string]interface{}\n\trespBody, err := io.ReadAll(resp.Body)\n\tif err != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\terr = json.Unmarshal(respBody, &authyResponse)\n\tif err != nil {\n\t\tprintAuthResponse(-1)\n\t}\n\tif authyResponse[\"success\"].(string) == \"true\" {\n\t\tprintAuthResponse(1)\n\t}\n\tprintAuthResponse(-1)\n}\n"
},
{
"path": "examples/backup/README.md",
"content": "# Data Backup\n\n:warning: Since v2.4.0 you can use the [EventManager](https://docs.sftpgo.com/latest/eventmanager/) to schedule backups.\n\nThe `backup` example script shows how to use the SFTPGo REST API to backup your data.\n\nThe script is written in Python and has the following requirements:\n\n- python3 or python2\n- python [Requests](https://requests.readthedocs.io/en/master/) module\n\nThe provided example tries to connect to an SFTPGo instance running on `127.0.0.1:8080` using the following credentials:\n\n- username: `admin`\n- password: `password`\n\nand, if you execute it daily, it saves a different backup file for each day of the week. The backups will be saved within the configured `backups_path`.\n\nPlease edit the script according to your needs.\n"
},
{
"path": "examples/backup/backup",
"content": "#!/usr/bin/env python\n\nfrom datetime import datetime\nimport sys\n\nimport requests\n\ntry:\n\timport urllib.parse as urlparse\nexcept ImportError:\n\timport urlparse\n\n# change base_url to point to your SFTPGo installation\nbase_url = \"http://127.0.0.1:8080\"\n# set to False if you want to skip TLS certificate validation\nverify_tls_cert = True\n# set the credentials for a valid admin here\nadmin_user = \"admin\"\nadmin_password = \"password\"\n\n# get a JWT token\nauth = requests.auth.HTTPBasicAuth(admin_user, admin_password)\nr = requests.get(urlparse.urljoin(base_url, \"api/v2/token\"), auth=auth, verify=verify_tls_cert, timeout=10)\nif r.status_code != 200:\n\tprint(\"error getting access token: {}\".format(r.text))\n\tsys.exit(1)\naccess_token = r.json()[\"access_token\"]\nauth_header = {\"Authorization\": \"Bearer \" + access_token}\n\nr = requests.get(urlparse.urljoin(base_url, \"api/v2/dumpdata\"),\n\t\t\t\t\tparams={\"output-file\":\"backup_{}.json\".format(datetime.today().strftime('%w'))},\n\t\t\t\t\theaders=auth_header, verify=verify_tls_cert, timeout=10)\nif r.status_code == 200:\n\tprint(\"backup OK\")\nelse:\n\tprint(\"backup error, status {}, response: {}\".format(r.status_code, r.text))\n"
},
{
"path": "examples/bulkupdate/README.md",
"content": "# Bulk user update\n\nThe `bulkuserupdate` example script shows how to use the SFTPGo REST API to easily update some common parameters for multiple users while preserving the others.\n\nThe script is written in Python and has the following requirements:\n\n- python3 or python2\n- python [Requests](https://requests.readthedocs.io/en/master/) module\n\nThe provided example tries to connect to an SFTPGo instance running on `127.0.0.1:8080` using the following credentials:\n\n- username: `admin`\n- password: `password`\n\nand it updates some fields for `user1`, `user2` and `user3`.\n\nPlease edit the script according to your needs.\n"
},
{
"path": "examples/bulkupdate/bulkuserupdate",
"content": "#!/usr/bin/env python\n\nimport posixpath\nimport sys\n\nimport requests\n\ntry:\n\timport urllib.parse as urlparse\nexcept ImportError:\n\timport urlparse\n\n# change base_url to point to your SFTPGo installation\nbase_url = \"http://127.0.0.1:8080\"\n# set to False if you want to skip TLS certificate validation\nverify_tls_cert = True\n# set the credentials for a valid admin here\nadmin_user = \"admin\"\nadmin_password = \"password\"\n# insert here the users you want to update\nusers_to_update = [\"user1\", \"user2\", \"user3\"]\n# set here the fields you need to update\nfields_to_update = {\"status\":0, \"quota_files\": 1000, \"additional_info\":\"updated using the bulkuserupdate example script\"}\n\n# get a JWT token\nauth = requests.auth.HTTPBasicAuth(admin_user, admin_password)\nr = requests.get(urlparse.urljoin(base_url, \"api/v2/token\"), auth=auth, verify=verify_tls_cert, timeout=10)\nif r.status_code != 200:\n\tprint(\"error getting access token: {}\".format(r.text))\n\tsys.exit(1)\naccess_token = r.json()[\"access_token\"]\nauth_header = {\"Authorization\": \"Bearer \" + access_token}\n\nfor username in users_to_update:\n\tr = requests.get(urlparse.urljoin(base_url, posixpath.join(\"api/v2/users\", username)),\n\t\t\t\t\theaders=auth_header, verify=verify_tls_cert, timeout=10)\n\tif r.status_code != 200:\n\t\tprint(\"error getting user {}: {}\".format(username, r.text))\n\t\tcontinue\n\tuser = r.json()\n\tuser.update(fields_to_update)\n\tr = requests.put(urlparse.urljoin(base_url, posixpath.join(\"api/v2/users\", username)),\n\t\t\t\t\theaders=auth_header, verify=verify_tls_cert, json=user, timeout=10)\n\tif r.status_code == 200:\n\t\tprint(\"user {} updated\".format(username))\n\telse:\n\t\tprint(\"error updating user {}, response code: {} response text: {}\".format(username,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tr.status_code,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tr.text))\n"
},
{
"path": "examples/convertusers/README.md",
"content": "# Import users from other stores\n\n`convertusers` is a very simple command line client, written in python, to import users from other stores. It requires `python3` or `python2`.\n\nHere is the usage:\n\n```console\nusage: convertusers [-h] [--min-uid MIN_UID] [--max-uid MAX_UID] [--usernames USERNAMES [USERNAMES ...]]\n [--force-uid FORCE_UID] [--force-gid FORCE_GID]\n input_file {unix-passwd,pure-ftpd,proftpd} output_file\n\nConvert users to a JSON format suitable to use with loadddata\n\npositional arguments:\n input_file\n {unix-passwd,pure-ftpd,proftpd}\n To import from unix-passwd format you need the permission to read /etc/shadow that is typically\n granted to the root user only\n output_file\n\noptional arguments:\n -h, --help show this help message and exit\n --min-uid MIN_UID if >= 0 only import users with UID greater or equal to this value. Default: -1\n --max-uid MAX_UID if >= 0 only import users with UID lesser or equal to this value. Default: -1\n --usernames USERNAMES [USERNAMES ...]\n Only import users with these usernames. Default: []\n --force-uid FORCE_UID\n if >= 0 the imported users will have this UID in SFTPGo. Default: -1\n --force-gid FORCE_GID\n if >= 0 the imported users will have this GID in SFTPGo. Default: -1\n```\n\nLet's see some examples:\n\n```console\npython convertusers \"\" unix-passwd unix_users.json --min-uid 500 --force-uid 1000 --force-gid 1000\n```\n\n```console\npython convertusers pureftpd.passwd pure-ftpd pure_users.json --usernames \"user1\" \"user2\"\n```\n\n```console\npython convertusers proftpd.passwd proftpd pro_users.json\n```\n\nThe generated json file can be used as input for the `loaddata` REST API.\n\nPlease note that when importing Linux/Unix users the input file is not required: `/etc/passwd` and `/etc/shadow` are automatically parsed. `/etc/shadow` read permission is typically granted to the `root` user only, so you need to execute `convertusers` as `root`.\n\n:warning: SFTPGo does not currently support `yescrypt` hashed passwords.\n"
},
{
"path": "examples/convertusers/convertusers",
"content": "#!/usr/bin/env python\n\nimport argparse\nimport json\nimport sys\nimport time\n\ntry:\n\timport pwd\n\timport spwd\nexcept ImportError:\n\tpwd = None\n\n\nclass ConvertUsers:\n\n\tdef __init__(self, input_file, users_format, output_file, min_uid, max_uid, usernames, force_uid, force_gid):\n\t\tself.input_file = input_file\n\t\tself.users_format = users_format\n\t\tself.output_file = output_file\n\t\tself.min_uid = min_uid\n\t\tself.max_uid = max_uid\n\t\tself.usernames = usernames\n\t\tself.force_uid = force_uid\n\t\tself.force_gid = force_gid\n\t\tself.SFTPGoUsers = []\n\n\tdef buildUserObject(self, username, password, home_dir, uid, gid, max_sessions, quota_size, quota_files, upload_bandwidth,\n\t\t\t\t\tdownload_bandwidth, status, expiration_date, allowed_ip=[], denied_ip=[]):\n\t\treturn {'id':0, 'username':username, 'password':password, 'home_dir':home_dir, 'uid':uid, 'gid':gid,\n\t\t\t'max_sessions':max_sessions, 'quota_size':quota_size, 'quota_files':quota_files, 'permissions':{'/':[\"*\"]},\n\t\t\t'upload_bandwidth':upload_bandwidth, 'download_bandwidth':download_bandwidth,\n\t\t\t'status':status, 'expiration_date':expiration_date,\n\t\t\t'filters':{'allowed_ip':allowed_ip, 'denied_ip':denied_ip}}\n\n\tdef addUser(self, user):\n\t\tuser['id'] = len(self.SFTPGoUsers) + 1\n\t\tprint('')\n\t\tprint('New user imported: {}'.format(user))\n\t\tprint('')\n\t\tself.SFTPGoUsers.append(user)\n\n\tdef saveUsers(self):\n\t\tif self.SFTPGoUsers:\n\t\t\tdata = {'users':self.SFTPGoUsers}\n\t\t\tjsonData = json.dumps(data)\n\t\t\twith open(self.output_file, 'w') as f:\n\t\t\t\tf.write(jsonData)\n\t\t\tprint()\n\t\t\tprint('Number of users saved to \"{}\": {}. You can import them using loaddata'.format(self.output_file,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tlen(self.SFTPGoUsers)))\n\t\t\tprint()\n\t\t\tsys.exit(0)\n\t\telse:\n\t\t\tprint('No user imported')\n\t\t\tsys.exit(1)\n\n\tdef convert(self):\n\t\tif self.users_format == 'unix-passwd':\n\t\t\tself.convertFromUnixPasswd()\n\t\telif self.users_format == 'pure-ftpd':\n\t\t\tself.convertFromPureFTPD()\n\t\telse:\n\t\t\tself.convertFromProFTPD()\n\t\tself.saveUsers()\n\n\tdef isUserValid(self, username, uid):\n\t\tif self.usernames and not username in self.usernames:\n\t\t\treturn False\n\t\tif self.min_uid >= 0 and uid < self.min_uid:\n\t\t\treturn False\n\t\tif self.max_uid >= 0 and uid > self.max_uid:\n\t\t\treturn False\n\t\treturn True\n\n\tdef convertFromUnixPasswd(self):\n\t\tdays_from_epoch_time = time.time() / 86400\n\t\tfor user in pwd.getpwall():\n\t\t\tusername = user.pw_name\n\t\t\tpassword = user.pw_passwd\n\t\t\tuid = user.pw_uid\n\t\t\tgid = user.pw_gid\n\t\t\thome_dir = user.pw_dir\n\t\t\tstatus = 1\n\t\t\texpiration_date = 0\n\t\t\tif not self.isUserValid(username, uid):\n\t\t\t\tcontinue\n\t\t\tif self.force_uid >= 0:\n\t\t\t\tuid = self.force_uid\n\t\t\tif self.force_gid >= 0:\n\t\t\t\tgid = self.force_gid\n\t\t\t# FIXME: if the passwords aren't in /etc/shadow they are probably DES encrypted and we don't support them\n\t\t\tif password == 'x' or password == '*':\n\t\t\t\tuser_info = spwd.getspnam(username)\n\t\t\t\tpassword = user_info.sp_pwdp\n\t\t\t\tif not password or password == '!!' or password == '!*':\n\t\t\t\t\tprint('cannot import user \"{}\" without a password'.format(username))\n\t\t\t\t\tcontinue\n\t\t\t\tif user_info.sp_inact > 0:\n\t\t\t\t\tlast_pwd_change_diff = days_from_epoch_time - user_info.sp_lstchg\n\t\t\t\t\tif last_pwd_change_diff > user_info.sp_inact:\n\t\t\t\t\t\tstatus = 0\n\t\t\t\tif user_info.sp_expire > 0:\n\t\t\t\t\texpiration_date = user_info.sp_expire * 86400\n\t\t\tself.addUser(self.buildUserObject(username, password, home_dir, uid, gid, 0, 0, 0, 0, 0, status,\n\t\t\t\t\t\t\t\t\t\t\texpiration_date))\n\n\tdef convertFromProFTPD(self):\n\t\twith open(self.input_file, 'r') as f:\n\t\t\tfor line in f:\n\t\t\t\tfields = line.split(':')\n\t\t\t\tif len(fields) > 6:\n\t\t\t\t\tusername = fields[0]\n\t\t\t\t\tpassword = fields[1]\n\t\t\t\t\tuid = int(fields[2])\n\t\t\t\t\tgid = int(fields[3])\n\t\t\t\t\thome_dir = fields[5]\n\t\t\t\t\tif not self.isUserValid(username, uid):\n\t\t\t\t\t\tcontinue\n\t\t\t\t\tif self.force_uid >= 0:\n\t\t\t\t\t\tuid = self.force_uid\n\t\t\t\t\tif self.force_gid >= 0:\n\t\t\t\t\t\tgid = self.force_gid\n\t\t\t\t\tself.addUser(self.buildUserObject(username, password, home_dir, uid, gid, 0, 0, 0, 0, 0, 1, 0))\n\n\tdef convertPureFTPDIP(self, fields):\n\t\tresult = []\n\t\tif not fields:\n\t\t\treturn result\n\t\tfor v in fields.split(','):\n\t\t\tip_mask = v.strip()\n\t\t\tif not ip_mask:\n\t\t\t\tcontinue\n\t\t\tif ip_mask.count('.') < 3 and ip_mask.count(':') < 3:\n\t\t\t\tprint('cannot import pure-ftpd IP: {}'.format(ip_mask))\n\t\t\t\tcontinue\n\t\t\tif '/' not in ip_mask:\n\t\t\t\tip_mask += '/32'\n\t\t\tresult.append(ip_mask)\n\t\treturn result\n\n\tdef convertFromPureFTPD(self):\n\t\twith open(self.input_file, 'r') as f:\n\t\t\tfor line in f:\n\t\t\t\tfields = line.split(':')\n\t\t\t\tif len(fields) > 16:\n\t\t\t\t\tusername = fields[0]\n\t\t\t\t\tpassword = fields[1]\n\t\t\t\t\tuid = int(fields[2])\n\t\t\t\t\tgid = int(fields[3])\n\t\t\t\t\thome_dir = fields[5]\n\t\t\t\t\tupload_bandwidth = 0\n\t\t\t\t\tif fields[6]:\n\t\t\t\t\t\tupload_bandwidth = int(int(fields[6]) / 1024)\n\t\t\t\t\tdownload_bandwidth = 0\n\t\t\t\t\tif fields[7]:\n\t\t\t\t\t\tdownload_bandwidth = int(int(fields[7]) / 1024)\n\t\t\t\t\tmax_sessions = 0\n\t\t\t\t\tif fields[10]:\n\t\t\t\t\t\tmax_sessions = int(fields[10])\n\t\t\t\t\tquota_files = 0\n\t\t\t\t\tif fields[11]:\n\t\t\t\t\t\tquota_files = int(fields[11])\n\t\t\t\t\tquota_size = 0\n\t\t\t\t\tif fields[12]:\n\t\t\t\t\t\tquota_size = int(fields[12])\n\t\t\t\t\tallowed_ip = self.convertPureFTPDIP(fields[15])\n\t\t\t\t\tdenied_ip = self.convertPureFTPDIP(fields[16])\n\t\t\t\t\tif not self.isUserValid(username, uid):\n\t\t\t\t\t\tcontinue\n\t\t\t\t\tif self.force_uid >= 0:\n\t\t\t\t\t\tuid = self.force_uid\n\t\t\t\t\tif self.force_gid >= 0:\n\t\t\t\t\t\tgid = self.force_gid\n\t\t\t\t\tself.addUser(self.buildUserObject(username, password, home_dir, uid, gid, max_sessions, quota_size,\n\t\t\t\t\t\t\t\t\t\t\t\t\t quota_files, upload_bandwidth, download_bandwidth, 1, 0, allowed_ip,\n\t\t\t\t\t\t\t\t\t\t\t\t\t denied_ip))\n\n\nif __name__ == '__main__':\n\tparser = argparse.ArgumentParser(formatter_class=argparse.ArgumentDefaultsHelpFormatter, description=\n\t\t\t\t\t\t\t\t\t'Convert users to a JSON format suitable to use with loadddata')\n\tsupportedUsersFormats = []\n\thelp_text = ''\n\tif pwd is not None:\n\t\tsupportedUsersFormats.append('unix-passwd')\n\t\thelp_text = 'To import from unix-passwd format you need the permission to read /etc/shadow that is typically granted to the root user only'\n\tsupportedUsersFormats.append('pure-ftpd')\n\tsupportedUsersFormats.append('proftpd')\n\tparser.add_argument('input_file', type=str)\n\tparser.add_argument('users_format', type=str, choices=supportedUsersFormats, help=help_text)\n\tparser.add_argument('output_file', type=str)\n\tparser.add_argument('--min-uid', type=int, default=-1, help='if >= 0 only import users with UID greater or equal ' +\n\t\t\t\t\t\t\t\t'to this value. Default: %(default)s')\n\tparser.add_argument('--max-uid', type=int, default=-1, help='if >= 0 only import users with UID lesser or equal ' +\n\t\t\t\t\t\t\t\t'to this value. Default: %(default)s')\n\tparser.add_argument('--usernames', type=str, nargs='+', default=[], help='Only import users with these usernames. ' +\n\t\t\t\t\t\t\t\t'Default: %(default)s')\n\tparser.add_argument('--force-uid', type=int, default=-1, help='if >= 0 the imported users will have this UID in ' +\n\t\t\t\t\t\t\t\t'SFTPGo. Default: %(default)s')\n\tparser.add_argument('--force-gid', type=int, default=-1, help='if >= 0 the imported users will have this GID in ' +\n\t\t\t\t\t\t\t\t'SFTPGo. Default: %(default)s')\n\n\targs = parser.parse_args()\n\n\tconvertUsers = ConvertUsers(args.input_file, args.users_format, args.output_file, args.min_uid, args.max_uid,\n\t\t\t\t\t\t\t\targs.usernames, args.force_uid, args.force_gid)\n\tconvertUsers.convert()\n"
},
{
"path": "examples/ldapauth/README.md",
"content": "# LDAPAuth\n\nThis is an example for an external authentication program. It performs authentication against an LDAP server.\nIt is tested against [389ds](https://directory.fedoraproject.org/) and can be used as starting point to authenticate using any LDAP server including Active Directory.\n\nYou need to change the LDAP connection parameters and the user search query to match your environment.\nYou can build this example using the following command:\n\n```console\ngo build -ldflags \"-s -w\" -o ldapauth\n```\n\nThis program assumes that the 389ds schema was extended to add support for public keys using the following ldif file placed in `/etc/dirsrv/schema/98openssh-ldap.ldif`:\n\n```console\ndn: cn=schema\nchangetype: modify\nadd: attributetypes\nattributetypes: ( 1.3.6.1.4.1.24552.500.1.1.1.13 NAME 'sshPublicKey' DESC 'MANDATORY: OpenSSH Public key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )\n-\nadd: objectclasses\nobjectClasses: ( 1.3.6.1.4.1.24552.500.1.1.2.0 NAME 'ldapPublicKey' SUP top AUXILIARY DESC 'MANDATORY: OpenSSH LPK objectclass' MUST ( uid ) MAY ( sshPublicKey ) )\n-\n\ndn: cn=sshpublickey,cn=default indexes,cn=config,cn=ldbm database,cn=plugins,cn=config\nchangetype: add\ncn: sshpublickey\nnsIndexType: eq\nnsIndexType: pres\nnsSystemIndex: false\nobjectClass: top\nobjectClass: nsIndex\n\ndn: cn=sshpublickey_self_manage,ou=groups,dc=example,dc=com\nchangetype: add\nobjectClass: top\nobjectClass: groupofuniquenames\ncn: sshpublickey_self_manage\ndescription: Members of this group gain the ability to edit their own sshPublicKey field\n\ndn: dc=example,dc=com\nchangetype: modify\nadd: aci\naci: (targetattr = \"sshPublicKey\") (version 3.0; acl \"Allow members of sshpublickey_self_manage to edit their keys\"; allow(write) (groupdn = \"ldap:///cn=sshpublickey_self_manage,ou=groups,dc=example,dc=com\" and userdn=\"ldap:///self\" ); )\n-\n```\n\n:warning: A plugin for LDAP/Active Directory authentication is also [available](https://github.com/sftpgo/sftpgo-plugin-auth).\n"
},
{
"path": "examples/ldapauth/go.mod",
"content": "module github.com/drakkan/ldapauth\n\ngo 1.25.0\n\nrequire (\n\tgithub.com/go-ldap/ldap/v3 v3.4.13\n\tgolang.org/x/crypto v0.49.0\n)\n\nrequire (\n\tgithub.com/Azure/go-ntlmssp v0.1.0 // indirect\n\tgithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 // indirect\n\tgithub.com/google/uuid v1.6.0 // indirect\n\tgolang.org/x/sys v0.42.0 // indirect\n)\n"
},
{
"path": "examples/ldapauth/go.sum",
"content": "github.com/Azure/go-ntlmssp v0.1.0 h1:DjFo6YtWzNqNvQdrwEyr/e4nhU3vRiwenz5QX7sFz+A=\ngithub.com/Azure/go-ntlmssp v0.1.0/go.mod h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=\ngithub.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e h1:4dAU9FXIyQktpoUAgOJK3OTFc/xug0PCXYCqU0FgDKI=\ngithub.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=\ngithub.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=\ngithub.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 h1:BP4M0CvQ4S3TGls2FvczZtj5Re/2ZzkV9VwqPHH/3Bo=\ngithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=\ngithub.com/go-ldap/ldap/v3 v3.4.13 h1:+x1nG9h+MZN7h/lUi5Q3UZ0fJ1GyDQYbPvbuH38baDQ=\ngithub.com/go-ldap/ldap/v3 v3.4.13/go.mod h1:LxsGZV6vbaK0sIvYfsv47rfh4ca0JXokCoKjZxsszv0=\ngithub.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=\ngithub.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=\ngithub.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=\ngithub.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=\ngithub.com/jcmturner/aescts/v2 v2.0.0 h1:9YKLH6ey7H4eDBXW8khjYslgyqG2xZikXP0EQFKrle8=\ngithub.com/jcmturner/aescts/v2 v2.0.0/go.mod h1:AiaICIRyfYg35RUkr8yESTqvSy7csK90qZ5xfvvsoNs=\ngithub.com/jcmturner/dnsutils/v2 v2.0.0 h1:lltnkeZGL0wILNvrNiVCR6Ro5PGU/SeBvVO/8c/iPbo=\ngithub.com/jcmturner/dnsutils/v2 v2.0.0/go.mod h1:b0TnjGOvI/n42bZa+hmXL+kFJZsFT7G4t3HTlQ184QM=\ngithub.com/jcmturner/gofork v1.7.6 h1:QH0l3hzAU1tfT3rZCnW5zXl+orbkNMMRGJfdJjHVETg=\ngithub.com/jcmturner/gofork v1.7.6/go.mod h1:1622LH6i/EZqLloHfE7IeZ0uEJwMSUyQ/nDd82IeqRo=\ngithub.com/jcmturner/goidentity/v6 v6.0.1 h1:VKnZd2oEIMorCTsFBnJWbExfNN7yZr3EhJAxwOkZg6o=\ngithub.com/jcmturner/goidentity/v6 v6.0.1/go.mod h1:X1YW3bgtvwAXju7V3LCIMpY0Gbxyjn/mY9zx4tFonSg=\ngithub.com/jcmturner/gokrb5/v8 v8.4.4 h1:x1Sv4HaTpepFkXbt2IkL29DXRf8sOfZXo8eRKh687T8=\ngithub.com/jcmturner/gokrb5/v8 v8.4.4/go.mod h1:1btQEpgT6k+unzCwX1KdWMEwPPkkgBtP+F6aCACiMrs=\ngithub.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZY=\ngithub.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=\ngithub.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=\ngithub.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=\ngithub.com/stretchr/testify v1.8.1 h1:w7B6lhMri9wdJUVmEZPGGhZzrYTPvgJArz7wNPgYKsk=\ngithub.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=\ngolang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=\ngolang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=\ngolang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=\ngolang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=\ngolang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=\ngolang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=\ngolang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=\ngolang.org/x/term v0.41.0/go.mod h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=\ngopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=\ngopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\n"
},
{
"path": "examples/ldapauth/main.go",
"content": "package main\n\nimport (\n\t\"bytes\"\n\t\"encoding/json\"\n\t\"fmt\"\n\t\"log\"\n\t\"log/syslog\"\n\t\"os\"\n\t\"strconv\"\n\t\"strings\"\n\n\t\"github.com/go-ldap/ldap/v3\"\n\t\"golang.org/x/crypto/ssh\"\n)\n\nconst (\n\trootDN = \"dc=example,dc=com\"\n\tbindUsername = \"cn=sftpgo,\" + rootDN\n\tbindURL = \"ldap:///\" // That is, the server on the default port of localhost.\n\tpasswordFile = \"/etc/sftpgo/admin-password.txt\" // make this file readable only by the server\n\tpublicDir = \"/var/www/webdav/public\"\n)\n\ntype userFilters struct {\n\tDeniedLoginMethods []string `json:\"denied_login_methods,omitempty\"`\n}\n\ntype minimalSFTPGoUser struct {\n\tStatus int `json:\"status,omitempty\"`\n\tUsername string `json:\"username\"`\n\tHomeDir string `json:\"home_dir,omitempty\"`\n\tUID int `json:\"uid,omitempty\"`\n\tGID int `json:\"gid,omitempty\"`\n\tPermissions map[string][]string `json:\"permissions\"`\n\tFilters userFilters `json:\"filters\"`\n}\n\nfunc exitError() {\n\tlog.Printf(\"exitError\\n\")\n\tu := minimalSFTPGoUser{\n\t\tUsername: \"\",\n\t}\n\tresp, _ := json.Marshal(u)\n\tfmt.Printf(\"%v\\n\", string(resp))\n\tos.Exit(1)\n}\n\nfunc printSuccessResponse(username, homeDir string, uid, gid int, permissions []string) {\n\tu := minimalSFTPGoUser{\n\t\tUsername: username,\n\t\tHomeDir: homeDir,\n\t\tUID: uid,\n\t\tGID: gid,\n\t\tStatus: 1,\n\t}\n\tu.Permissions = make(map[string][]string)\n\tu.Permissions[\"/\"] = permissions\n\t// uncomment the next line to require publickey+password authentication\n\t//u.Filters.DeniedLoginMethods = []string{\"publickey\", \"password\", \"keyboard-interactive\", \"publickey+keyboard-interactive\"}\n\tresp, _ := json.Marshal(u)\n\tlog.Printf(\"%v\\n\", string(resp))\n\tfmt.Printf(\"%v\\n\", string(resp))\n\tos.Exit(0)\n}\n\nfunc main() {\n\tlogWriter, err := syslog.New(syslog.LOG_NOTICE, \"sftpgo\")\n\tif err == nil {\n\t\tlog.SetOutput(logWriter)\n\t}\n\t// get credentials from env vars\n\tusername := os.Getenv(\"SFTPGO_AUTHD_USERNAME\")\n\tpassword := os.Getenv(\"SFTPGO_AUTHD_PASSWORD\")\n\tpublickey := os.Getenv(\"SFTPGO_AUTHD_PUBLIC_KEY\")\n\tif strings.ToLower(username) == \"anonymous\" {\n\t\tprintSuccessResponse(\"anonymous\", publicDir, 0, 0, []string{\"list\", \"download\"})\n\t\treturn\n\t}\n\tl, err := ldap.DialURL(bindURL)\n\tif err != nil {\n\t\tlog.Printf(\"DialURL: %s\\n\", err.Error())\n\t\texitError()\n\t}\n\tdefer l.Close()\n\t// bind to the ldap server with an account that can read users\n\tbindPassword, err := os.ReadFile(passwordFile)\n\tif err != nil {\n\t\tlog.Printf(\"ReadFile(%s): %s\\n\", passwordFile, err.Error())\n\t\texitError()\n\t}\n\terr = l.Bind(bindUsername, string(bindPassword))\n\tif err != nil {\n\t\tlog.Printf(\"Bind(%s): %s\\n\", bindUsername, err.Error())\n\t\texitError()\n\t}\n\n\t// search the user trying to login and fetch some attributes, this search string is tested against 389ds using the default configuration\n\tlog.Printf(\"username=%s\\n\", username)\n\tsearchFilter := fmt.Sprintf(\"(uid=%s)\", ldap.EscapeFilter(username))\n\tsearchRequest := ldap.NewSearchRequest(\n\t\t\"ou=people,\" + rootDN,\n\t\tldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false,\n\t\tsearchFilter,\n\t\t[]string{\"dn\", \"uid\", \"homeDirectory\", \"uidNumber\", \"gidNumber\", \"nsSshPublicKey\"},\n\t\tnil,\n\t)\n\n\tsr, err := l.Search(searchRequest)\n\tif err != nil {\n\t\tlog.Printf(\"Search(%s): %s\\n\", searchFilter, err.Error())\n\t\texitError()\n\t}\n\n\t// we expect exactly one user\n\tif len(sr.Entries) != 1 {\n\t\tlog.Printf(\"Search(%s): %d entries\\n\", searchFilter, len(sr.Entries))\n\t\texitError()\n\t}\n\n\tif len(publickey) > 0 {\n\t\t// check public key\n\t\tuserKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(publickey))\n\t\tif err != nil {\n\t\t\tlog.Printf(\"ParseAuthorizedKey(%s): %s\\n\", publickey, err.Error())\n\t\t\texitError()\n\t\t}\n\t\tauthOk := false\n\t\tfor _, k := range sr.Entries[0].GetAttributeValues(\"nsSshPublicKey\") {\n\t\t\tkey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(k))\n\t\t\t// we skip an invalid public key stored inside the LDAP server\n\t\t\tif err != nil {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif bytes.Equal(key.Marshal(), userKey.Marshal()) {\n\t\t\t\tauthOk = true\n\t\t\t\tbreak\n\t\t\t}\n\t\t}\n\t\tif !authOk {\n\t\t\tlog.Printf(\"publickey %s !authOk\\n\", publickey)\n\t\t\texitError()\n\t\t}\n\t} else {\n\t\t// bind to the LDAP server with the user dn and the given password to check the password\n\t\tuserdn := sr.Entries[0].DN\n\t\t// log.Printf(\"password=%s\\n\", password)\n\t\terr = l.Bind(userdn, password)\n\t\tif err != nil {\n\t\t\tlog.Printf(\"Bind(%s): %s\\n\", userdn, err.Error())\n\t\t\texitError()\n\t\t}\n\t}\n\n\t// People in the LDAP directory aren't necessarily Linux users;\n\t// so they might not have a uidNumber or gidNumber.\n\tuidNumber := sr.Entries[0].GetAttributeValue(\"uidNumber\")\n\tuid, err := strconv.Atoi(uidNumber)\n\tif err != nil {\n\t\t//log.Printf(\"uid Atoi(%s) = %s\\n\", uidNumber, err.Error())\n\t\tuid = 0\n\t}\n\tgidNumber := sr.Entries[0].GetAttributeValue(\"gidNumber\")\n\tgid, err := strconv.Atoi(gidNumber)\n\tif err != nil {\n\t\t//log.Printf(\"gid Atoi(%s) = %s\\n\", gidNumber, err.Error())\n\t\tgid = 0\n\t}\n\thomeDir := sr.Entries[0].GetAttributeValue(\"homeDirectory\")\n\tif (len(homeDir) <= 0) {\n\t\thomeDir = publicDir // homeDir is a required attribute.\n\t}\n\t// return the authenticated user\n\tprintSuccessResponse(sr.Entries[0].GetAttributeValue(\"uid\"), homeDir, uid, gid, []string{\"*\"})\n}\n"
},
{
"path": "examples/ldapauthserver/README.md",
"content": "# LDAPAuthServer\n\nThis is an example for an HTTP server to use as external authentication HTTP hook. It performs authentication against an LDAP server.\nIt is tested against [389ds](https://directory.fedoraproject.org/) and can be used as starting point to authenticate using any LDAP server including Active Directory.\n\nYou can configure the server using the [ldapauth.toml](./ldapauth.toml) configuration file.\nYou can build this example using the following command:\n\n```console\ngo build -ldflags \"-s -w\" -o ldapauthserver\n```\n\n:warning: A plugin for LDAP/Active Directory authentication is also [available](https://github.com/sftpgo/sftpgo-plugin-auth).\n"
},
{
"path": "examples/ldapauthserver/cmd/root.go",
"content": "package cmd\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/config\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/utils\"\n\t\"github.com/spf13/cobra\"\n\t\"github.com/spf13/viper\"\n)\n\nconst (\n\tlogSender = \"cmd\"\n\tconfigDirFlag = \"config-dir\"\n\tconfigDirKey = \"config_dir\"\n\tconfigFileFlag = \"config-file\"\n\tconfigFileKey = \"config_file\"\n\tlogFilePathFlag = \"log-file-path\"\n\tlogFilePathKey = \"log_file_path\"\n\tlogMaxSizeFlag = \"log-max-size\"\n\tlogMaxSizeKey = \"log_max_size\"\n\tlogMaxBackupFlag = \"log-max-backups\"\n\tlogMaxBackupKey = \"log_max_backups\"\n\tlogMaxAgeFlag = \"log-max-age\"\n\tlogMaxAgeKey = \"log_max_age\"\n\tlogCompressFlag = \"log-compress\"\n\tlogCompressKey = \"log_compress\"\n\tlogVerboseFlag = \"log-verbose\"\n\tlogVerboseKey = \"log_verbose\"\n\tprofilerFlag = \"profiler\"\n\tprofilerKey = \"profiler\"\n\tdefaultConfigDir = \".\"\n\tdefaultConfigName = config.DefaultConfigName\n\tdefaultLogFile = \"ldapauth.log\"\n\tdefaultLogMaxSize = 10\n\tdefaultLogMaxBackup = 5\n\tdefaultLogMaxAge = 28\n\tdefaultLogCompress = false\n\tdefaultLogVerbose = true\n)\n\nvar (\n\tconfigDir string\n\tconfigFile string\n\tlogFilePath string\n\tlogMaxSize int\n\tlogMaxBackups int\n\tlogMaxAge int\n\tlogCompress bool\n\tlogVerbose bool\n\n\trootCmd = &cobra.Command{\n\t\tUse: \"ldapauthserver\",\n\t\tShort: \"LDAP Authentication Server for SFTPGo\",\n\t}\n)\n\nfunc init() {\n\tversion := utils.GetAppVersion()\n\trootCmd.Flags().BoolP(\"version\", \"v\", false, \"\")\n\trootCmd.Version = version.GetVersionAsString()\n\trootCmd.SetVersionTemplate(`{{printf \"LDAP Authentication Server version: \"}}{{printf \"%s\" .Version}}\n`)\n}\n\n// Execute adds all child commands to the root command and sets flags appropriately.\n// This is called by main.main(). It only needs to happen once to the rootCmd.\nfunc Execute() {\n\tif err := rootCmd.Execute(); err != nil {\n\t\tfmt.Println(err)\n\t\tos.Exit(1)\n\t}\n}\n\nfunc addConfigFlags(cmd *cobra.Command) {\n\tviper.SetDefault(configDirKey, defaultConfigDir)\n\tviper.BindEnv(configDirKey, \"LDAPAUTH_CONFIG_DIR\")\n\tcmd.Flags().StringVarP(&configDir, configDirFlag, \"c\", viper.GetString(configDirKey),\n\t\t`Location for the config dir. This directory\nshould contain the \"ldapauth\" configuration\nfile or the configured config-file. This flag\ncan be set using LDAPAUTH_CONFIG_DIR env var too.\n`)\n\tviper.BindPFlag(configDirKey, cmd.Flags().Lookup(configDirFlag))\n\n\tviper.SetDefault(configFileKey, defaultConfigName)\n\tviper.BindEnv(configFileKey, \"LDAPAUTH_CONFIG_FILE\")\n\tcmd.Flags().StringVarP(&configFile, configFileFlag, \"f\", viper.GetString(configFileKey),\n\t\t`Name for the configuration file. It must be\nthe name of a file stored in config-dir not\nthe absolute path to the configuration file.\nThe specified file name must have no extension\nwe automatically load JSON, YAML, TOML, HCL and\nJava properties. Therefore if you set \\\"ldapauth\\\"\nthen \\\"ldapauth.toml\\\", \\\"ldapauth.yaml\\\" and\nso on are searched. This flag can be set using\nLDAPAUTH_CONFIG_FILE env var too.\n`)\n\tviper.BindPFlag(configFileKey, cmd.Flags().Lookup(configFileFlag))\n}\n\nfunc addServeFlags(cmd *cobra.Command) {\n\taddConfigFlags(cmd)\n\n\tviper.SetDefault(logFilePathKey, defaultLogFile)\n\tviper.BindEnv(logFilePathKey, \"LDAPAUTH_LOG_FILE_PATH\")\n\tcmd.Flags().StringVarP(&logFilePath, logFilePathFlag, \"l\", viper.GetString(logFilePathKey),\n\t\t`Location for the log file. Leave empty to write\nlogs to the standard output. This flag can be\nset using LDAPAUTH_LOG_FILE_PATH env var too.\n`)\n\tviper.BindPFlag(logFilePathKey, cmd.Flags().Lookup(logFilePathFlag))\n\n\tviper.SetDefault(logMaxSizeKey, defaultLogMaxSize)\n\tviper.BindEnv(logMaxSizeKey, \"LDAPAUTH_LOG_MAX_SIZE\")\n\tcmd.Flags().IntVarP(&logMaxSize, logMaxSizeFlag, \"s\", viper.GetInt(logMaxSizeKey),\n\t\t`Maximum size in megabytes of the log file\nbefore it gets rotated. This flag can be set\nusing LDAPAUTH_LOG_MAX_SIZE env var too. It\nis unused if log-file-path is empty.`)\n\tviper.BindPFlag(logMaxSizeKey, cmd.Flags().Lookup(logMaxSizeFlag))\n\n\tviper.SetDefault(logMaxBackupKey, defaultLogMaxBackup)\n\tviper.BindEnv(logMaxBackupKey, \"LDAPAUTH_LOG_MAX_BACKUPS\")\n\tcmd.Flags().IntVarP(&logMaxBackups, \"log-max-backups\", \"b\", viper.GetInt(logMaxBackupKey),\n\t\t`Maximum number of old log files to retain.\nThis flag can be set using LDAPAUTH_LOG_MAX_BACKUPS\nenv var too. It is unused if log-file-path is\nempty.`)\n\tviper.BindPFlag(logMaxBackupKey, cmd.Flags().Lookup(logMaxBackupFlag))\n\n\tviper.SetDefault(logMaxAgeKey, defaultLogMaxAge)\n\tviper.BindEnv(logMaxAgeKey, \"LDAPAUTH_LOG_MAX_AGE\")\n\tcmd.Flags().IntVarP(&logMaxAge, \"log-max-age\", \"a\", viper.GetInt(logMaxAgeKey),\n\t\t`Maximum number of days to retain old log files.\nThis flag can be set using LDAPAUTH_LOG_MAX_AGE\nenv var too. It is unused if log-file-path is\nempty.`)\n\tviper.BindPFlag(logMaxAgeKey, cmd.Flags().Lookup(logMaxAgeFlag))\n\n\tviper.SetDefault(logCompressKey, defaultLogCompress)\n\tviper.BindEnv(logCompressKey, \"LDAPAUTH_LOG_COMPRESS\")\n\tcmd.Flags().BoolVarP(&logCompress, logCompressFlag, \"z\", viper.GetBool(logCompressKey),\n\t\t`Determine if the rotated log files\nshould be compressed using gzip. This flag can\nbe set using LDAPAUTH_LOG_COMPRESS env var too.\nIt is unused if log-file-path is empty.`)\n\tviper.BindPFlag(logCompressKey, cmd.Flags().Lookup(logCompressFlag))\n\n\tviper.SetDefault(logVerboseKey, defaultLogVerbose)\n\tviper.BindEnv(logVerboseKey, \"LDAPAUTH_LOG_VERBOSE\")\n\tcmd.Flags().BoolVarP(&logVerbose, logVerboseFlag, \"v\", viper.GetBool(logVerboseKey),\n\t\t`Enable verbose logs. This flag can be set\nusing LDAPAUTH_LOG_VERBOSE env var too.\n`)\n\tviper.BindPFlag(logVerboseKey, cmd.Flags().Lookup(logVerboseFlag))\n}\n"
},
{
"path": "examples/ldapauthserver/cmd/serve.go",
"content": "package cmd\n\nimport (\n\t\"path/filepath\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/config\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/httpd\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/utils\"\n\t\"github.com/rs/zerolog\"\n\t\"github.com/spf13/cobra\"\n)\n\nvar (\n\tserveCmd = &cobra.Command{\n\t\tUse: \"serve\",\n\t\tShort: \"Start the LDAP Authentication Server\",\n\t\tLong: `To start the server with the default values for the command line flags simply use:\n\nldapauthserver serve\n\nPlease take a look at the usage below to customize the startup options`,\n\t\tRun: func(cmd *cobra.Command, args []string) {\n\t\t\tstartServer()\n\t\t},\n\t}\n)\n\nfunc init() {\n\trootCmd.AddCommand(serveCmd)\n\taddServeFlags(serveCmd)\n}\n\nfunc startServer() error {\n\tlogLevel := zerolog.DebugLevel\n\tif !logVerbose {\n\t\tlogLevel = zerolog.InfoLevel\n\t}\n\tif !filepath.IsAbs(logFilePath) && utils.IsFileInputValid(logFilePath) {\n\t\tlogFilePath = filepath.Join(configDir, logFilePath)\n\t}\n\tlogger.InitLogger(logFilePath, logMaxSize, logMaxBackups, logMaxAge, logCompress, logLevel)\n\tversion := utils.GetAppVersion()\n\tlogger.Info(logSender, \"\", \"starting LDAP Auth Server %v, config dir: %v, config file: %v, log max size: %v log max backups: %v \"+\n\t\t\"log max age: %v log verbose: %v, log compress: %v\", version.GetVersionAsString(), configDir, configFile, logMaxSize,\n\t\tlogMaxBackups, logMaxAge, logVerbose, logCompress)\n\tconfig.LoadConfig(configDir, configFile)\n\treturn httpd.StartHTTPServer(configDir, config.GetHTTPDConfig())\n}\n"
},
{
"path": "examples/ldapauthserver/config/config.go",
"content": "package config\n\nimport (\n\t\"strings\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n\t\"github.com/spf13/viper\"\n)\n\nconst (\n\tlogSender = \"config\"\n\t// DefaultConfigName defines the name for the default config file.\n\t// This is the file name without extension, we use viper and so we\n\t// support all the config files format supported by viper\n\tDefaultConfigName = \"ldapauth\"\n\t// ConfigEnvPrefix defines a prefix that ENVIRONMENT variables will use\n\tconfigEnvPrefix = \"ldapauth\"\n)\n\n// HTTPDConfig defines configuration for the HTTPD server\ntype HTTPDConfig struct {\n\tBindAddress string `mapstructure:\"bind_address\"`\n\tBindPort int `mapstructure:\"bind_port\"`\n\tAuthUserFile string `mapstructure:\"auth_user_file\"`\n\tCertificateFile string `mapstructure:\"certificate_file\"`\n\tCertificateKeyFile string `mapstructure:\"certificate_key_file\"`\n}\n\n// LDAPConfig defines the configuration parameters for LDAP connections and searches\ntype LDAPConfig struct {\n\tBaseDN string `mapstructure:\"basedn\"`\n\tBindURL string `mapstructure:\"bind_url\"`\n\tBindUsername string `mapstructure:\"bind_username\"`\n\tBindPassword string `mapstructure:\"bind_password\"`\n\tSearchFilter string `mapstructure:\"search_filter\"`\n\tSearchBaseAttrs []string `mapstructure:\"search_base_attrs\"`\n\tDefaultUID int `mapstructure:\"default_uid\"`\n\tDefaultGID int `mapstructure:\"default_gid\"`\n\tForceDefaultUID bool `mapstructure:\"force_default_uid\"`\n\tForceDefaultGID bool `mapstructure:\"force_default_gid\"`\n\tInsecureSkipVerify bool `mapstructure:\"insecure_skip_verify\"`\n\tCACertificates []string `mapstructure:\"ca_certificates\"`\n}\n\ntype appConfig struct {\n\tHTTPD HTTPDConfig `mapstructure:\"httpd\"`\n\tLDAP LDAPConfig `mapstructure:\"ldap\"`\n}\n\nvar conf appConfig\n\nfunc init() {\n\tconf = appConfig{\n\t\tHTTPD: HTTPDConfig{\n\t\t\tBindAddress: \"\",\n\t\t\tBindPort: 9000,\n\t\t\tAuthUserFile: \"\",\n\t\t\tCertificateFile: \"\",\n\t\t\tCertificateKeyFile: \"\",\n\t\t},\n\t\tLDAP: LDAPConfig{\n\t\t\tBaseDN: \"dc=example,dc=com\",\n\t\t\tBindURL: \"ldap://192.168.1.103:389\",\n\t\t\tBindUsername: \"cn=Directory Manager\",\n\t\t\tBindPassword: \"YOUR_ADMIN_PASSWORD_HERE\",\n\t\t\tSearchFilter: \"(&(objectClass=nsPerson)(uid=%s))\",\n\t\t\tSearchBaseAttrs: []string{\n\t\t\t\t\"dn\",\n\t\t\t\t\"homeDirectory\",\n\t\t\t\t\"uidNumber\",\n\t\t\t\t\"gidNumber\",\n\t\t\t\t\"nsSshPublicKey\",\n\t\t\t},\n\t\t\tDefaultUID: 0,\n\t\t\tDefaultGID: 0,\n\t\t\tForceDefaultUID: true,\n\t\t\tForceDefaultGID: true,\n\t\t\tInsecureSkipVerify: false,\n\t\t\tCACertificates: nil,\n\t\t},\n\t}\n\tviper.SetEnvPrefix(configEnvPrefix)\n\treplacer := strings.NewReplacer(\".\", \"__\")\n\tviper.SetEnvKeyReplacer(replacer)\n\tviper.SetConfigName(DefaultConfigName)\n\tviper.AutomaticEnv()\n\tviper.AllowEmptyEnv(true)\n}\n\n// GetHomeDirectory returns the configured name for the LDAP field to use as home directory\nfunc (l *LDAPConfig) GetHomeDirectory() string {\n\tif len(l.SearchBaseAttrs) > 1 {\n\t\treturn l.SearchBaseAttrs[1]\n\t}\n\treturn \"homeDirectory\"\n}\n\n// GetUIDNumber returns the configured name for the LDAP field to use as UID\nfunc (l *LDAPConfig) GetUIDNumber() string {\n\tif len(l.SearchBaseAttrs) > 2 {\n\t\treturn l.SearchBaseAttrs[2]\n\t}\n\treturn \"uidNumber\"\n}\n\n// GetGIDNumber returns the configured name for the LDAP field to use as GID\nfunc (l *LDAPConfig) GetGIDNumber() string {\n\tif len(l.SearchBaseAttrs) > 3 {\n\t\treturn l.SearchBaseAttrs[3]\n\t}\n\treturn \"gidNumber\"\n}\n\n// GetPublicKey returns the configured name for the LDAP field to use as public keys\nfunc (l *LDAPConfig) GetPublicKey() string {\n\tif len(l.SearchBaseAttrs) > 4 {\n\t\treturn l.SearchBaseAttrs[4]\n\t}\n\treturn \"nsSshPublicKey\"\n}\n\n// GetHTTPDConfig returns the configuration for the HTTP server\nfunc GetHTTPDConfig() HTTPDConfig {\n\treturn conf.HTTPD\n}\n\n// GetLDAPConfig returns LDAP related settings\nfunc GetLDAPConfig() LDAPConfig {\n\treturn conf.LDAP\n}\n\nfunc getRedactedConf() appConfig {\n\tc := conf\n\treturn c\n}\n\n// LoadConfig loads the configuration\nfunc LoadConfig(configDir, configName string) error {\n\tvar err error\n\tviper.AddConfigPath(configDir)\n\tviper.AddConfigPath(\".\")\n\tviper.SetConfigName(configName)\n\tif err = viper.ReadInConfig(); err != nil {\n\t\tlogger.Warn(logSender, \"\", \"error loading configuration file: %v. Default configuration will be used: %+v\",\n\t\t\terr, getRedactedConf())\n\t\tlogger.WarnToConsole(\"error loading configuration file: %v. Default configuration will be used.\", err)\n\t\treturn err\n\t}\n\terr = viper.Unmarshal(&conf)\n\tif err != nil {\n\t\tlogger.Warn(logSender, \"\", \"error parsing configuration file: %v. Default configuration will be used: %+v\",\n\t\t\terr, getRedactedConf())\n\t\tlogger.WarnToConsole(\"error parsing configuration file: %v. Default configuration will be used.\", err)\n\t\treturn err\n\t}\n\tlogger.Debug(logSender, \"\", \"config file used: '%q', config loaded: %+v\", viper.ConfigFileUsed(), getRedactedConf())\n\treturn err\n}\n"
},
{
"path": "examples/ldapauthserver/go.mod",
"content": "module github.com/drakkan/sftpgo/ldapauthserver\n\ngo 1.25.0\n\nrequire (\n\tgithub.com/go-chi/chi/v5 v5.2.5\n\tgithub.com/go-chi/render v1.0.3\n\tgithub.com/go-ldap/ldap/v3 v3.4.13\n\tgithub.com/nathanaelle/password/v2 v2.0.1\n\tgithub.com/rs/zerolog v1.34.0\n\tgithub.com/spf13/cobra v1.10.2\n\tgithub.com/spf13/viper v1.21.0\n\tgolang.org/x/crypto v0.49.0\n\tgopkg.in/natefinch/lumberjack.v2 v2.2.1\n)\n\nrequire (\n\tgithub.com/Azure/go-ntlmssp v0.1.0 // indirect\n\tgithub.com/ajg/form v1.7.1 // indirect\n\tgithub.com/fsnotify/fsnotify v1.9.0 // indirect\n\tgithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 // indirect\n\tgithub.com/go-viper/mapstructure/v2 v2.5.0 // indirect\n\tgithub.com/google/uuid v1.6.0 // indirect\n\tgithub.com/inconshreveable/mousetrap v1.1.0 // indirect\n\tgithub.com/mattn/go-colorable v0.1.14 // indirect\n\tgithub.com/mattn/go-isatty v0.0.20 // indirect\n\tgithub.com/pelletier/go-toml/v2 v2.2.4 // indirect\n\tgithub.com/sagikazarmark/locafero v0.12.0 // indirect\n\tgithub.com/spf13/afero v1.15.0 // indirect\n\tgithub.com/spf13/cast v1.10.0 // indirect\n\tgithub.com/spf13/pflag v1.0.10 // indirect\n\tgithub.com/subosito/gotenv v1.6.0 // indirect\n\tgo.yaml.in/yaml/v3 v3.0.4 // indirect\n\tgolang.org/x/sys v0.42.0 // indirect\n\tgolang.org/x/text v0.35.0 // indirect\n\tgopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect\n)\n"
},
{
"path": "examples/ldapauthserver/go.sum",
"content": "github.com/Azure/go-ntlmssp v0.1.0 h1:DjFo6YtWzNqNvQdrwEyr/e4nhU3vRiwenz5QX7sFz+A=\ngithub.com/Azure/go-ntlmssp v0.1.0/go.mod h1:NYqdhxd/8aAct/s4qSYZEerdPuH1liG2/X9DiVTbhpk=\ngithub.com/ajg/form v1.5.1/go.mod h1:uL1WgH+h2mgNtvBq0339dVnzXdBETtL2LeUXaIv25UY=\ngithub.com/ajg/form v1.7.1 h1:OsnBDzTkrWdrxvEnO68I72ZVGJGNaMwPhoAm0V+llgc=\ngithub.com/ajg/form v1.7.1/go.mod h1:HL757PzLyNkj5AIfptT6L+iGNeXTlnrr/oDePGc/y7Q=\ngithub.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e h1:4dAU9FXIyQktpoUAgOJK3OTFc/xug0PCXYCqU0FgDKI=\ngithub.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=\ngithub.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=\ngithub.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=\ngithub.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=\ngithub.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=\ngithub.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=\ngithub.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=\ngithub.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=\ngithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 h1:BP4M0CvQ4S3TGls2FvczZtj5Re/2ZzkV9VwqPHH/3Bo=\ngithub.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=\ngithub.com/go-chi/chi/v5 v5.2.5 h1:Eg4myHZBjyvJmAFjFvWgrqDTXFyOzjj7YIm3L3mu6Ug=\ngithub.com/go-chi/chi/v5 v5.2.5/go.mod h1:X7Gx4mteadT3eDOMTsXzmI4/rwUpOwBHLpAfupzFJP0=\ngithub.com/go-chi/render v1.0.3 h1:AsXqd2a1/INaIfUSKq3G5uA8weYx20FOsM7uSoCyyt4=\ngithub.com/go-chi/render v1.0.3/go.mod h1:/gr3hVkmYR0YlEy3LxCuVRFzEu9Ruok+gFqbIofjao0=\ngithub.com/go-ldap/ldap/v3 v3.4.13 h1:+x1nG9h+MZN7h/lUi5Q3UZ0fJ1GyDQYbPvbuH38baDQ=\ngithub.com/go-ldap/ldap/v3 v3.4.13/go.mod h1:LxsGZV6vbaK0sIvYfsv47rfh4ca0JXokCoKjZxsszv0=\ngithub.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=\ngithub.com/go-viper/mapstructure/v2 v2.5.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=\ngithub.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=\ngithub.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=\ngithub.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=\ngithub.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=\ngithub.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=\ngithub.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8=\ngithub.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro=\ngithub.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=\ngithub.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=\ngithub.com/jcmturner/aescts/v2 v2.0.0 h1:9YKLH6ey7H4eDBXW8khjYslgyqG2xZikXP0EQFKrle8=\ngithub.com/jcmturner/aescts/v2 v2.0.0/go.mod h1:AiaICIRyfYg35RUkr8yESTqvSy7csK90qZ5xfvvsoNs=\ngithub.com/jcmturner/dnsutils/v2 v2.0.0 h1:lltnkeZGL0wILNvrNiVCR6Ro5PGU/SeBvVO/8c/iPbo=\ngithub.com/jcmturner/dnsutils/v2 v2.0.0/go.mod h1:b0TnjGOvI/n42bZa+hmXL+kFJZsFT7G4t3HTlQ184QM=\ngithub.com/jcmturner/gofork v1.7.6 h1:QH0l3hzAU1tfT3rZCnW5zXl+orbkNMMRGJfdJjHVETg=\ngithub.com/jcmturner/gofork v1.7.6/go.mod h1:1622LH6i/EZqLloHfE7IeZ0uEJwMSUyQ/nDd82IeqRo=\ngithub.com/jcmturner/goidentity/v6 v6.0.1 h1:VKnZd2oEIMorCTsFBnJWbExfNN7yZr3EhJAxwOkZg6o=\ngithub.com/jcmturner/goidentity/v6 v6.0.1/go.mod h1:X1YW3bgtvwAXju7V3LCIMpY0Gbxyjn/mY9zx4tFonSg=\ngithub.com/jcmturner/gokrb5/v8 v8.4.4 h1:x1Sv4HaTpepFkXbt2IkL29DXRf8sOfZXo8eRKh687T8=\ngithub.com/jcmturner/gokrb5/v8 v8.4.4/go.mod h1:1btQEpgT6k+unzCwX1KdWMEwPPkkgBtP+F6aCACiMrs=\ngithub.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZY=\ngithub.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=\ngithub.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=\ngithub.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=\ngithub.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=\ngithub.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=\ngithub.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=\ngithub.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=\ngithub.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=\ngithub.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=\ngithub.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=\ngithub.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=\ngithub.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=\ngithub.com/nathanaelle/password/v2 v2.0.1 h1:ItoCTdsuIWzilYmllQPa3DR3YoCXcpfxScWLqr8Ii2s=\ngithub.com/nathanaelle/password/v2 v2.0.1/go.mod h1:eaoT+ICQEPNtikBRIAatN8ThWwMhVG+r1jTw60BvPJk=\ngithub.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=\ngithub.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=\ngithub.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=\ngithub.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=\ngithub.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=\ngithub.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=\ngithub.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=\ngithub.com/rs/xid v1.6.0/go.mod h1:7XoLgs4eV+QndskICGsho+ADou8ySMSjJKDIan90Nz0=\ngithub.com/rs/zerolog v1.34.0 h1:k43nTLIwcTVQAncfCw4KZ2VY6ukYoZaBPNOE8txlOeY=\ngithub.com/rs/zerolog v1.34.0/go.mod h1:bJsvje4Z08ROH4Nhs5iH600c3IkWhwp44iRc54W6wYQ=\ngithub.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=\ngithub.com/sagikazarmark/locafero v0.12.0 h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4=\ngithub.com/sagikazarmark/locafero v0.12.0/go.mod h1:sZh36u/YSZ918v0Io+U9ogLYQJ9tLLBmM4eneO6WwsI=\ngithub.com/spf13/afero v1.15.0 h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I=\ngithub.com/spf13/afero v1.15.0/go.mod h1:NC2ByUVxtQs4b3sIUphxK0NioZnmxgyCrfzeuq8lxMg=\ngithub.com/spf13/cast v1.10.0 h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=\ngithub.com/spf13/cast v1.10.0/go.mod h1:jNfB8QC9IA6ZuY2ZjDp0KtFO2LZZlg4S/7bzP6qqeHo=\ngithub.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=\ngithub.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=\ngithub.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=\ngithub.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=\ngithub.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=\ngithub.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=\ngithub.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=\ngithub.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=\ngithub.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=\ngo.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=\ngo.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=\ngolang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=\ngolang.org/x/crypto v0.0.0-20200311171314-f7b00557c8c4/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=\ngolang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=\ngolang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=\ngolang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=\ngolang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=\ngolang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=\ngolang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=\ngolang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=\ngolang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=\ngolang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=\ngolang.org/x/term v0.41.0/go.mod h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=\ngolang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=\ngolang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=\ngolang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=\ngopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=\ngopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=\ngopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=\ngopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc=\ngopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc=\ngopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=\ngopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\n"
},
{
"path": "examples/ldapauthserver/httpd/auth.go",
"content": "package httpd\n\nimport (\n\t\"encoding/csv\"\n\t\"errors\"\n\t\"fmt\"\n\t\"net/http\"\n\t\"os\"\n\t\"sync\"\n\n\tunixcrypt \"github.com/nathanaelle/password/v2\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/utils\"\n\t\"golang.org/x/crypto/bcrypt\"\n)\n\nconst (\n\tauthenticationHeader = \"WWW-Authenticate\"\n\tauthenticationRealm = \"LDAP Auth Server\"\n\tunauthResponse = \"Unauthorized\"\n)\n\nvar (\n\tmd5CryptPwdPrefixes = []string{\"$1$\", \"$apr1$\"}\n\tbcryptPwdPrefixes = []string{\"$2a$\", \"$2$\", \"$2x$\", \"$2y$\", \"$2b$\"}\n)\n\ntype httpAuthProvider interface {\n\tgetHashedPassword(username string) (string, bool)\n\tisEnabled() bool\n}\n\ntype basicAuthProvider struct {\n\tPath string\n\tsync.RWMutex\n\tInfo os.FileInfo\n\tUsers map[string]string\n}\n\nfunc newBasicAuthProvider(authUserFile string) (httpAuthProvider, error) {\n\tbasicAuthProvider := basicAuthProvider{\n\t\tPath: authUserFile,\n\t\tInfo: nil,\n\t\tUsers: make(map[string]string),\n\t}\n\treturn &basicAuthProvider, basicAuthProvider.loadUsers()\n}\n\nfunc (p *basicAuthProvider) isEnabled() bool {\n\treturn len(p.Path) > 0\n}\n\nfunc (p *basicAuthProvider) isReloadNeeded(info os.FileInfo) bool {\n\tp.RLock()\n\tdefer p.RUnlock()\n\treturn p.Info == nil || p.Info.ModTime() != info.ModTime() || p.Info.Size() != info.Size()\n}\n\nfunc (p *basicAuthProvider) loadUsers() error {\n\tif !p.isEnabled() {\n\t\treturn nil\n\t}\n\tinfo, err := os.Stat(p.Path)\n\tif err != nil {\n\t\tlogger.Debug(logSender, \"\", \"unable to stat basic auth users file: %v\", err)\n\t\treturn err\n\t}\n\tif p.isReloadNeeded(info) {\n\t\tr, err := os.Open(p.Path)\n\t\tif err != nil {\n\t\t\tlogger.Debug(logSender, \"\", \"unable to open basic auth users file: %v\", err)\n\t\t\treturn err\n\t\t}\n\t\tdefer r.Close()\n\t\treader := csv.NewReader(r)\n\t\treader.Comma = ':'\n\t\treader.Comment = '#'\n\t\treader.TrimLeadingSpace = true\n\t\trecords, err := reader.ReadAll()\n\t\tif err != nil {\n\t\t\tlogger.Debug(logSender, \"\", \"unable to parse basic auth users file: %v\", err)\n\t\t\treturn err\n\t\t}\n\t\tp.Lock()\n\t\tdefer p.Unlock()\n\t\tp.Users = make(map[string]string)\n\t\tfor _, record := range records {\n\t\t\tif len(record) == 2 {\n\t\t\t\tp.Users[record[0]] = record[1]\n\t\t\t}\n\t\t}\n\t\tlogger.Debug(logSender, \"\", \"number of users loaded for httpd basic auth: %v\", len(p.Users))\n\t\tp.Info = info\n\t}\n\treturn nil\n}\n\nfunc (p *basicAuthProvider) getHashedPassword(username string) (string, bool) {\n\terr := p.loadUsers()\n\tif err != nil {\n\t\treturn \"\", false\n\t}\n\tp.RLock()\n\tdefer p.RUnlock()\n\tpwd, ok := p.Users[username]\n\treturn pwd, ok\n}\n\nfunc checkAuth(next http.Handler) http.Handler {\n\treturn http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tif !validateCredentials(r) {\n\t\t\tw.Header().Set(authenticationHeader, fmt.Sprintf(\"Basic realm=\\\"%v\\\"\", authenticationRealm))\n\t\t\tsendAPIResponse(w, r, errors.New(unauthResponse), \"\", http.StatusUnauthorized)\n\t\t\treturn\n\t\t}\n\t\tnext.ServeHTTP(w, r)\n\t})\n}\n\nfunc validateCredentials(r *http.Request) bool {\n\tif !httpAuth.isEnabled() {\n\t\treturn true\n\t}\n\tusername, password, ok := r.BasicAuth()\n\tif !ok {\n\t\treturn false\n\t}\n\tif hashedPwd, ok := httpAuth.getHashedPassword(username); ok {\n\t\tif utils.IsStringPrefixInSlice(hashedPwd, bcryptPwdPrefixes) {\n\t\t\terr := bcrypt.CompareHashAndPassword([]byte(hashedPwd), []byte(password))\n\t\t\treturn err == nil\n\t\t}\n\t\tif utils.IsStringPrefixInSlice(hashedPwd, md5CryptPwdPrefixes) {\n\t\t\tcrypter, ok := unixcrypt.MD5.CrypterFound(hashedPwd)\n\t\t\tif !ok {\n\t\t\t\terr := errors.New(\"cannot found matching MD5 crypter\")\n\t\t\t\tlogger.Debug(logSender, \"\", \"error comparing password with MD5 crypt hash: %v\", err)\n\t\t\t\treturn false\n\t\t\t}\n\t\t\treturn crypter.Verify([]byte(password))\n\t\t}\n\t}\n\treturn false\n}\n"
},
{
"path": "examples/ldapauthserver/httpd/httpd.go",
"content": "package httpd\n\nimport (\n\t\"context\"\n\t\"crypto/tls\"\n\t\"crypto/x509\"\n\t\"fmt\"\n\t\"net/http\"\n\t\"os\"\n\t\"path/filepath\"\n\t\"time\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/config\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n\t\"github.com/drakkan/sftpgo/ldapauthserver/utils\"\n\t\"github.com/go-chi/chi/v5\"\n\t\"github.com/go-chi/chi/v5/middleware\"\n\t\"github.com/go-chi/render\"\n)\n\nconst (\n\tlogSender = \"httpd\"\n\tversionPath = \"/api/v1/version\"\n\tcheckAuthPath = \"/api/v1/check_auth\"\n\tmaxRequestSize = 1 << 18 // 256KB\n)\n\nvar (\n\tldapConfig config.LDAPConfig\n\thttpAuth httpAuthProvider\n\tcertMgr *certManager\n\trootCAs *x509.CertPool\n)\n\n// StartHTTPServer initializes and starts the HTTP Server\nfunc StartHTTPServer(configDir string, httpConfig config.HTTPDConfig) error {\n\tvar err error\n\tauthUserFile := getConfigPath(httpConfig.AuthUserFile, configDir)\n\thttpAuth, err = newBasicAuthProvider(authUserFile)\n\tif err != nil {\n\t\treturn err\n\t}\n\n\trouter := chi.NewRouter()\n\trouter.Use(middleware.RequestID)\n\trouter.Use(middleware.RealIP)\n\trouter.Use(logger.NewStructuredLogger(logger.GetLogger()))\n\trouter.Use(middleware.Recoverer)\n\n\trouter.NotFound(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tsendAPIResponse(w, r, nil, \"Not Found\", http.StatusNotFound)\n\t}))\n\n\trouter.MethodNotAllowed(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n\t\tsendAPIResponse(w, r, nil, \"Method not allowed\", http.StatusMethodNotAllowed)\n\t}))\n\n\trouter.Get(versionPath, func(w http.ResponseWriter, r *http.Request) {\n\t\trender.JSON(w, r, utils.GetAppVersion())\n\t})\n\n\trouter.Group(func(router chi.Router) {\n\t\trouter.Use(checkAuth)\n\n\t\trouter.Post(checkAuthPath, checkSFTPGoUserAuth)\n\t})\n\n\tldapConfig = config.GetLDAPConfig()\n\tloadCACerts(configDir)\n\n\tcertificateFile := getConfigPath(httpConfig.CertificateFile, configDir)\n\tcertificateKeyFile := getConfigPath(httpConfig.CertificateKeyFile, configDir)\n\n\thttpServer := &http.Server{\n\t\tAddr: fmt.Sprintf(\"%s:%d\", httpConfig.BindAddress, httpConfig.BindPort),\n\t\tHandler: router,\n\t\tReadTimeout: 70 * time.Second,\n\t\tWriteTimeout: 70 * time.Second,\n\t\tIdleTimeout: 120 * time.Second,\n\t\tMaxHeaderBytes: 1 << 16, // 64KB\n\t}\n\tif len(certificateFile) > 0 && len(certificateKeyFile) > 0 {\n\t\tcertMgr, err = newCertManager(certificateFile, certificateKeyFile)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tconfig := &tls.Config{\n\t\t\tGetCertificate: certMgr.GetCertificateFunc(),\n\t\t\tMinVersion: tls.VersionTLS12,\n\t\t}\n\t\thttpServer.TLSConfig = config\n\t\treturn httpServer.ListenAndServeTLS(\"\", \"\")\n\t}\n\treturn httpServer.ListenAndServe()\n}\n\nfunc sendAPIResponse(w http.ResponseWriter, r *http.Request, err error, message string, code int) {\n\tvar errorString string\n\tif err != nil {\n\t\terrorString = err.Error()\n\t}\n\tresp := apiResponse{\n\t\tError: errorString,\n\t\tMessage: message,\n\t\tHTTPStatus: code,\n\t}\n\tctx := context.WithValue(r.Context(), render.StatusCtxKey, code)\n\trender.JSON(w, r.WithContext(ctx), resp)\n}\n\nfunc loadCACerts(configDir string) error {\n\tvar err error\n\trootCAs, err = x509.SystemCertPool()\n\tif err != nil {\n\t\trootCAs = x509.NewCertPool()\n\t}\n\tfor _, ca := range ldapConfig.CACertificates {\n\t\tcaPath := getConfigPath(ca, configDir)\n\t\tcerts, err := os.ReadFile(caPath)\n\t\tif err != nil {\n\t\t\tlogger.Warn(logSender, \"\", \"error loading ca cert %q: %v\", caPath, err)\n\t\t\treturn err\n\t\t}\n\t\tif !rootCAs.AppendCertsFromPEM(certs) {\n\t\t\tlogger.Warn(logSender, \"\", \"unable to add ca cert %q\", caPath)\n\t\t} else {\n\t\t\tlogger.Debug(logSender, \"\", \"ca cert %q added to the trusted certificates\", caPath)\n\t\t}\n\t}\n\n\treturn nil\n}\n\n// ReloadTLSCertificate reloads the TLS certificate and key from the configured paths\nfunc ReloadTLSCertificate() {\n\tif certMgr != nil {\n\t\tcertMgr.loadCertificate()\n\t}\n}\n\nfunc getConfigPath(name, configDir string) string {\n\tif !utils.IsFileInputValid(name) {\n\t\treturn \"\"\n\t}\n\tif len(name) > 0 && !filepath.IsAbs(name) {\n\t\treturn filepath.Join(configDir, name)\n\t}\n\treturn name\n}\n"
},
{
"path": "examples/ldapauthserver/httpd/ldapauth.go",
"content": "package httpd\n\nimport (\n\t\"bytes\"\n\t\"crypto/tls\"\n\t\"fmt\"\n\t\"net/http\"\n\t\"strconv\"\n\t\"strings\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n\t\"github.com/go-chi/chi/v5/middleware\"\n\t\"github.com/go-chi/render\"\n\t\"github.com/go-ldap/ldap/v3\"\n\t\"golang.org/x/crypto/ssh\"\n)\n\nfunc getSFTPGoUser(entry *ldap.Entry, username string) (SFTPGoUser, error) {\n\tvar err error\n\tvar user SFTPGoUser\n\tuid := ldapConfig.DefaultUID\n\tgid := ldapConfig.DefaultGID\n\tstatus := 1\n\n\tif !ldapConfig.ForceDefaultUID {\n\t\tuid, err = strconv.Atoi(entry.GetAttributeValue(ldapConfig.GetUIDNumber()))\n\t\tif err != nil {\n\t\t\treturn user, err\n\t\t}\n\t}\n\n\tif !ldapConfig.ForceDefaultGID {\n\t\tuid, err = strconv.Atoi(entry.GetAttributeValue(ldapConfig.GetGIDNumber()))\n\t\tif err != nil {\n\t\t\treturn user, err\n\t\t}\n\t}\n\n\tsftpgoUser := SFTPGoUser{\n\t\tUsername: username,\n\t\tHomeDir: entry.GetAttributeValue(ldapConfig.GetHomeDirectory()),\n\t\tUID: uid,\n\t\tGID: gid,\n\t\tStatus: status,\n\t}\n\tsftpgoUser.Permissions = make(map[string][]string)\n\tsftpgoUser.Permissions[\"/\"] = []string{\"*\"}\n\treturn sftpgoUser, nil\n}\n\nfunc checkSFTPGoUserAuth(w http.ResponseWriter, r *http.Request) {\n\tr.Body = http.MaxBytesReader(w, r.Body, maxRequestSize)\n\tvar authReq externalAuthRequest\n\terr := render.DecodeJSON(r.Body, &authReq)\n\tif err != nil {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"error decoding auth request: %v\", err)\n\t\tsendAPIResponse(w, r, err, \"\", http.StatusBadRequest)\n\t\treturn\n\t}\n\tl, err := ldap.DialURL(ldapConfig.BindURL, ldap.DialWithTLSConfig(&tls.Config{\n\t\tInsecureSkipVerify: ldapConfig.InsecureSkipVerify,\n\t\tRootCAs: rootCAs,\n\t}))\n\tif err != nil {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"error connecting to the LDAP server: %v\", err)\n\t\tsendAPIResponse(w, r, err, \"Error connecting to the LDAP server\", http.StatusInternalServerError)\n\t\treturn\n\t}\n\tdefer l.Close()\n\n\terr = l.Bind(ldapConfig.BindUsername, ldapConfig.BindPassword)\n\tif err != nil {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"error binding to the LDAP server: %v\", err)\n\t\tsendAPIResponse(w, r, err, \"Error binding to the LDAP server\", http.StatusInternalServerError)\n\t\treturn\n\t}\n\n\tsearchRequest := ldap.NewSearchRequest(\n\t\tldapConfig.BaseDN,\n\t\tldap.ScopeWholeSubtree, ldap.NeverDerefAliases, 0, 0, false,\n\t\tstrings.Replace(ldapConfig.SearchFilter, \"%s\", ldap.EscapeFilter(authReq.Username), 1),\n\t\tldapConfig.SearchBaseAttrs,\n\t\tnil,\n\t)\n\n\tsr, err := l.Search(searchRequest)\n\tif err != nil {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"error searching LDAP user %q: %v\", authReq.Username, err)\n\t\tsendAPIResponse(w, r, err, \"Error searching LDAP user\", http.StatusInternalServerError)\n\t\treturn\n\t}\n\n\tif len(sr.Entries) != 1 {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"expected one user, found: %v\", len(sr.Entries))\n\t\tsendAPIResponse(w, r, nil, fmt.Sprintf(\"Expected one user, found: %v\", len(sr.Entries)), http.StatusNotFound)\n\t\treturn\n\t}\n\n\tif len(authReq.PublicKey) > 0 {\n\t\tuserKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(authReq.PublicKey))\n\t\tif err != nil {\n\t\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"invalid public key for user %q: %v\", authReq.Username, err)\n\t\t\tsendAPIResponse(w, r, err, \"Invalid public key\", http.StatusBadRequest)\n\t\t\treturn\n\t\t}\n\t\tauthOk := false\n\t\tfor _, k := range sr.Entries[0].GetAttributeValues(ldapConfig.GetPublicKey()) {\n\t\t\tkey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(k))\n\t\t\t// we skip an invalid public key stored inside the LDAP server\n\t\t\tif err != nil {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tif bytes.Equal(key.Marshal(), userKey.Marshal()) {\n\t\t\t\tauthOk = true\n\t\t\t\tbreak\n\t\t\t}\n\t\t}\n\t\tif !authOk {\n\t\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"public key authentication failed for user: %q\", authReq.Username)\n\t\t\tsendAPIResponse(w, r, nil, \"public key authentication failed\", http.StatusForbidden)\n\t\t\treturn\n\t\t}\n\t} else {\n\t\t// bind to the LDAP server with the user dn and the given password to check the password\n\t\tuserdn := sr.Entries[0].DN\n\t\terr = l.Bind(userdn, authReq.Password)\n\t\tif err != nil {\n\t\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"password authentication failed for user: %q\", authReq.Username)\n\t\t\tsendAPIResponse(w, r, nil, \"password authentication failed\", http.StatusForbidden)\n\t\t\treturn\n\t\t}\n\t}\n\n\tuser, err := getSFTPGoUser(sr.Entries[0], authReq.Username)\n\tif err != nil {\n\t\tlogger.Warn(logSender, middleware.GetReqID(r.Context()), \"get user from LDAP entry failed for username %q: %v\",\n\t\t\tauthReq.Username, err)\n\t\tsendAPIResponse(w, r, err, \"mapping LDAP user failed\", http.StatusInternalServerError)\n\t\treturn\n\t}\n\n\trender.JSON(w, r, user)\n}\n"
},
{
"path": "examples/ldapauthserver/httpd/models.go",
"content": "package httpd\n\ntype apiResponse struct {\n\tError string `json:\"error\"`\n\tMessage string `json:\"message\"`\n\tHTTPStatus int `json:\"status\"`\n}\n\ntype externalAuthRequest struct {\n\tUsername string `json:\"username\"`\n\tPassword string `json:\"password\"`\n\tPublicKey string `json:\"public_key\"`\n}\n\n// SFTPGoExtensionsFilter defines filters based on file extensions\ntype SFTPGoExtensionsFilter struct {\n\tPath string `json:\"path\"`\n\tAllowedExtensions []string `json:\"allowed_extensions,omitempty\"`\n\tDeniedExtensions []string `json:\"denied_extensions,omitempty\"`\n}\n\n// SFTPGoUserFilters defines additional restrictions for an SFTPGo user\ntype SFTPGoUserFilters struct {\n\tAllowedIP []string `json:\"allowed_ip,omitempty\"`\n\tDeniedIP []string `json:\"denied_ip,omitempty\"`\n\tDeniedLoginMethods []string `json:\"denied_login_methods,omitempty\"`\n\tFileExtensions []SFTPGoExtensionsFilter `json:\"file_extensions,omitempty\"`\n}\n\n// S3FsConfig defines the configuration for S3 based filesystem\ntype S3FsConfig struct {\n\tBucket string `json:\"bucket,omitempty\"`\n\tKeyPrefix string `json:\"key_prefix,omitempty\"`\n\tRegion string `json:\"region,omitempty\"`\n\tAccessKey string `json:\"access_key,omitempty\"`\n\tAccessSecret string `json:\"access_secret,omitempty\"`\n\tEndpoint string `json:\"endpoint,omitempty\"`\n\tStorageClass string `json:\"storage_class,omitempty\"`\n\tUploadPartSize int64 `json:\"upload_part_size,omitempty\"`\n\tUploadConcurrency int `json:\"upload_concurrency,omitempty\"`\n}\n\n// GCSFsConfig defines the configuration for Google Cloud Storage based filesystem\ntype GCSFsConfig struct {\n\tBucket string `json:\"bucket,omitempty\"`\n\tKeyPrefix string `json:\"key_prefix,omitempty\"`\n\tCredentials string `json:\"credentials,omitempty\"`\n\tAutomaticCredentials int `json:\"automatic_credentials,omitempty\"`\n\tStorageClass string `json:\"storage_class,omitempty\"`\n}\n\n// SFTPGoFilesystem defines cloud storage filesystem details\ntype SFTPGoFilesystem struct {\n\t// 0 local filesystem, 1 AWS S3 compatible, 2 Google Cloud Storage\n\tProvider int `json:\"provider\"`\n\tS3Config S3FsConfig `json:\"s3config,omitempty\"`\n\tGCSConfig GCSFsConfig `json:\"gcsconfig,omitempty\"`\n}\n\ntype virtualFolder struct {\n\tVirtualPath string `json:\"virtual_path\"`\n\tMappedPath string `json:\"mapped_path\"`\n}\n\n// SFTPGoUser defines an SFTPGo user\ntype SFTPGoUser struct {\n\t// Database unique identifier\n\tID int64 `json:\"id\"`\n\t// 1 enabled, 0 disabled (login is not allowed)\n\tStatus int `json:\"status\"`\n\t// Username\n\tUsername string `json:\"username\"`\n\t// Account expiration date as unix timestamp in milliseconds. An expired account cannot login.\n\t// 0 means no expiration\n\tExpirationDate int64 `json:\"expiration_date\"`\n\tPassword string `json:\"password,omitempty\"`\n\tPublicKeys []string `json:\"public_keys,omitempty\"`\n\tHomeDir string `json:\"home_dir\"`\n\t// Mapping between virtual paths and filesystem paths outside the home directory. Supported for local filesystem only\n\tVirtualFolders []virtualFolder `json:\"virtual_folders,omitempty\"`\n\t// If sftpgo runs as root system user then the created files and directories will be assigned to this system UID\n\tUID int `json:\"uid\"`\n\t// If sftpgo runs as root system user then the created files and directories will be assigned to this system GID\n\tGID int `json:\"gid\"`\n\t// Maximum concurrent sessions. 0 means unlimited\n\tMaxSessions int `json:\"max_sessions\"`\n\t// Maximum size allowed as bytes. 0 means unlimited\n\tQuotaSize int64 `json:\"quota_size\"`\n\t// Maximum number of files allowed. 0 means unlimited\n\tQuotaFiles int `json:\"quota_files\"`\n\t// List of the granted permissions\n\tPermissions map[string][]string `json:\"permissions\"`\n\t// Used quota as bytes\n\tUsedQuotaSize int64 `json:\"used_quota_size\"`\n\t// Used quota as number of files\n\tUsedQuotaFiles int `json:\"used_quota_files\"`\n\t// Last quota update as unix timestamp in milliseconds\n\tLastQuotaUpdate int64 `json:\"last_quota_update\"`\n\t// Maximum upload bandwidth as KB/s, 0 means unlimited\n\tUploadBandwidth int64 `json:\"upload_bandwidth\"`\n\t// Maximum download bandwidth as KB/s, 0 means unlimited\n\tDownloadBandwidth int64 `json:\"download_bandwidth\"`\n\t// Last login as unix timestamp in milliseconds\n\tLastLogin int64 `json:\"last_login\"`\n\t// Additional restrictions\n\tFilters SFTPGoUserFilters `json:\"filters\"`\n\t// Filesystem configuration details\n\tFsConfig SFTPGoFilesystem `json:\"filesystem\"`\n}\n"
},
{
"path": "examples/ldapauthserver/httpd/tlsutils.go",
"content": "package httpd\n\nimport (\n\t\"crypto/tls\"\n\t\"sync\"\n\n\t\"github.com/drakkan/sftpgo/ldapauthserver/logger\"\n)\n\ntype certManager struct {\n\tcertPath string\n\tkeyPath string\n\tsync.RWMutex\n\tcert *tls.Certificate\n}\n\nfunc (m *certManager) loadCertificate() error {\n\tnewCert, err := tls.LoadX509KeyPair(m.certPath, m.keyPath)\n\tif err != nil {\n\t\tlogger.Warn(logSender, \"\", \"unable to load https certificate: %v\", err)\n\t\treturn err\n\t}\n\tlogger.Debug(logSender, \"\", \"https certificate successfully loaded\")\n\tm.Lock()\n\tdefer m.Unlock()\n\tm.cert = &newCert\n\treturn nil\n}\n\nfunc (m *certManager) GetCertificateFunc() func(*tls.ClientHelloInfo) (*tls.Certificate, error) {\n\treturn func(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error) {\n\t\tm.RLock()\n\t\tdefer m.RUnlock()\n\t\treturn m.cert, nil\n\t}\n}\n\nfunc newCertManager(certificateFile, certificateKeyFile string) (*certManager, error) {\n\tmanager := &certManager{\n\t\tcert: nil,\n\t\tcertPath: certificateFile,\n\t\tkeyPath: certificateKeyFile,\n\t}\n\terr := manager.loadCertificate()\n\tif err != nil {\n\t\treturn nil, err\n\t}\n\treturn manager, nil\n}\n"
},
{
"path": "examples/ldapauthserver/ldapauth.toml",
"content": "[httpd]\nbind_address = \"\"\nbind_port = 9000\n# Path to a file used to store usernames and passwords for basic authentication. It can be generated using the Apache htpasswd tool\nauth_user_file = \"\"\n# If both the certificate and the private key are provided, the server will expect HTTPS connections\ncertificate_file = \"\"\ncertificate_key_file = \"\"\n\n[ldap]\nbasedn = \"dc=example,dc=com\"\nbind_url = \"ldap://127.0.0.1:389\"\nbind_username = \"cn=Directory Manager\"\nbind_password = \"YOUR_ADMIN_PASSWORD_HERE\"\nsearch_filter = \"(&(objectClass=nsPerson)(uid=%s))\"\n# you can change the name of the search base attributes to adapt them to your schema but the order must remain the same\nsearch_base_attrs = [\n \"dn\",\n \"homeDirectory\",\n \"uidNumber\",\n \"gidNumber\",\n \"nsSshPublicKey\"\n]\ndefault_uid = 0\ndefault_gid = 0\nforce_default_uid = true\nforce_default_gid = true\n# if true, ldaps accepts any certificate presented by the LDAP server and any host name in that certificate.\n# This should be used only for testing\ninsecure_skip_verify = false\n# list of root CA to use for ldaps connections\n# If you use a self signed certificate is better to add the root CA to this list than set insecure_skip_verify to true\nca_certificates = []\n"
},
{
"path": "examples/ldapauthserver/logger/logger.go",
"content": "package logger\n\nimport (\n\t\"fmt\"\n\t\"os\"\n\t\"path/filepath\"\n\t\"runtime\"\n\n\t\"github.com/rs/zerolog\"\n\tlumberjack \"gopkg.in/natefinch/lumberjack.v2\"\n)\n\nconst (\n\tdateFormat = \"2006-01-02T15:04:05.000\" // YYYY-MM-DDTHH:MM:SS.ZZZ\n)\n\nvar (\n\tlogger zerolog.Logger\n\tconsoleLogger zerolog.Logger\n)\n\n// GetLogger get the configured logger instance\nfunc GetLogger() *zerolog.Logger {\n\treturn &logger\n}\n\n// InitLogger initialize loggers\nfunc InitLogger(logFilePath string, logMaxSize, logMaxBackups, logMaxAge int, logCompress bool, level zerolog.Level) {\n\tzerolog.TimeFieldFormat = dateFormat\n\tif isLogFilePathValid(logFilePath) {\n\t\tlogger = zerolog.New(&lumberjack.Logger{\n\t\t\tFilename: logFilePath,\n\t\t\tMaxSize: logMaxSize,\n\t\t\tMaxBackups: logMaxBackups,\n\t\t\tMaxAge: logMaxAge,\n\t\t\tCompress: logCompress,\n\t\t})\n\t\tEnableConsoleLogger(level)\n\t} else {\n\t\tlogger = zerolog.New(&logSyncWrapper{\n\t\t\toutput: os.Stdout,\n\t\t})\n\t\tconsoleLogger = zerolog.Nop()\n\t}\n\tlogger.Level(level)\n}\n\n// DisableLogger disable the main logger.\n// ConsoleLogger will not be affected\nfunc DisableLogger() {\n\tlogger = zerolog.Nop()\n}\n\n// EnableConsoleLogger enables the console logger\nfunc EnableConsoleLogger(level zerolog.Level) {\n\tconsoleOutput := zerolog.ConsoleWriter{\n\t\tOut: os.Stdout,\n\t\tTimeFormat: dateFormat,\n\t\tNoColor: runtime.GOOS == \"windows\",\n\t}\n\tconsoleLogger = zerolog.New(consoleOutput).With().Timestamp().Logger().Level(level)\n}\n\n// Debug logs at debug level for the specified sender\nfunc Debug(prefix, requestID string, format string, v ...interface{}) {\n\tlogger.Debug().\n\t\tTimestamp().\n\t\tStr(\"sender\", prefix).\n\t\tStr(\"request_id\", requestID).\n\t\tMsg(fmt.Sprintf(format, v...))\n}\n\n// Info logs at info level for the specified sender\nfunc Info(prefix, requestID string, format string, v ...interface{}) {\n\tlogger.Info().\n\t\tTimestamp().\n\t\tStr(\"sender\", prefix).\n\t\tStr(\"request_id\", requestID).\n\t\tMsg(fmt.Sprintf(format, v...))\n}\n\n// Warn logs at warn level for the specified sender\nfunc Warn(prefix, requestID string, format string, v ...interface{}) {\n\tlogger.Warn().\n\t\tTimestamp().\n\t\tStr(\"sender\", prefix).\n\t\tStr(\"request_id\", requestID).\n\t\tMsg(fmt.Sprintf(format, v...))\n}\n\n// Error logs at error level for the specified sender\nfunc Error(prefix, requestID string, format string, v ...interface{}) {\n\tlogger.Error().\n\t\tTimestamp().\n\t\tStr(\"sender\", prefix).\n\t\tStr(\"request_id\", requestID).\n\t\tMsg(fmt.Sprintf(format, v...))\n}\n\n// DebugToConsole logs at debug level to stdout\nfunc DebugToConsole(format string, v ...interface{}) {\n\tconsoleLogger.Debug().Msg(fmt.Sprintf(format, v...))\n}\n\n// InfoToConsole logs at info level to stdout\nfunc InfoToConsole(format string, v ...interface{}) {\n\tconsoleLogger.Info().Msg(fmt.Sprintf(format, v...))\n}\n\n// WarnToConsole logs at info level to stdout\nfunc WarnToConsole(format string, v ...interface{}) {\n\tconsoleLogger.Warn().Msg(fmt.Sprintf(format, v...))\n}\n\n// ErrorToConsole logs at error level to stdout\nfunc ErrorToConsole(format string, v ...interface{}) {\n\tconsoleLogger.Error().Msg(fmt.Sprintf(format, v...))\n}\n\nfunc isLogFilePathValid(logFilePath string) bool {\n\tcleanInput := filepath.Clean(logFilePath)\n\tif cleanInput == \".\" || cleanInput == \"..\" {\n\t\treturn false\n\t}\n\treturn true\n}\n"
},
{
"path": "examples/ldapauthserver/logger/request_logger.go",
"content": "package logger\n\nimport (\n\t\"fmt\"\n\t\"net/http\"\n\t\"time\"\n\n\t\"github.com/go-chi/chi/v5/middleware\"\n\t\"github.com/rs/zerolog\"\n)\n\n// StructuredLogger defines a simple wrapper around zerolog logger.\n// It implements chi.middleware.LogFormatter interface\ntype StructuredLogger struct {\n\tLogger *zerolog.Logger\n}\n\n// StructuredLoggerEntry ...\ntype StructuredLoggerEntry struct {\n\tLogger *zerolog.Logger\n\tfields map[string]interface{}\n}\n\n// NewStructuredLogger returns a chi.middleware.RequestLogger using our StructuredLogger.\n// This structured logger is called by the chi.middleware.Logger handler to log each HTTP request\nfunc NewStructuredLogger(logger *zerolog.Logger) func(next http.Handler) http.Handler {\n\treturn middleware.RequestLogger(&StructuredLogger{logger})\n}\n\n// NewLogEntry creates a new log entry for an HTTP request\nfunc (l *StructuredLogger) NewLogEntry(r *http.Request) middleware.LogEntry {\n\tscheme := \"http\"\n\tif r.TLS != nil {\n\t\tscheme = \"https\"\n\t}\n\n\tfields := map[string]interface{}{\n\t\t\"remote_addr\": r.RemoteAddr,\n\t\t\"proto\": r.Proto,\n\t\t\"method\": r.Method,\n\t\t\"user_agent\": r.UserAgent(),\n\t\t\"uri\": fmt.Sprintf(\"%s://%s%s\", scheme, r.Host, r.RequestURI)}\n\n\treqID := middleware.GetReqID(r.Context())\n\tif reqID != \"\" {\n\t\tfields[\"request_id\"] = reqID\n\t}\n\n\treturn &StructuredLoggerEntry{Logger: l.Logger, fields: fields}\n}\n\n// Write logs a new entry at the end of the HTTP request\nfunc (l *StructuredLoggerEntry) Write(status, bytes int, header http.Header, elapsed time.Duration, extra interface{}) {\n\tl.Logger.Info().\n\t\tTimestamp().\n\t\tStr(\"sender\", \"httpd\").\n\t\tFields(l.fields).\n\t\tInt(\"resp_status\", status).\n\t\tInt(\"resp_size\", bytes).\n\t\tInt64(\"elapsed_ms\", elapsed.Nanoseconds()/1000000).\n\t\tSend()\n}\n\n// Panic logs panics\nfunc (l *StructuredLoggerEntry) Panic(v interface{}, stack []byte) {\n\tl.Logger.Error().\n\t\tTimestamp().\n\t\tStr(\"sender\", \"httpd\").\n\t\tFields(l.fields).\n\t\tStr(\"stack\", string(stack)).\n\t\tStr(\"panic\", fmt.Sprintf(\"%+v\", v)).\n\t\tSend()\n}\n"
},
{
"path": "examples/ldapauthserver/logger/sync_wrapper.go",
"content": "package logger\n\nimport (\n\t\"os\"\n\t\"sync\"\n)\n\ntype logSyncWrapper struct {\n\tsync.Mutex\n\toutput *os.File\n}\n\nfunc (l *logSyncWrapper) Write(b []byte) (n int, err error) {\n\tl.Lock()\n\tdefer l.Unlock()\n\treturn l.output.Write(b)\n}\n"
},
{
"path": "examples/ldapauthserver/main.go",
"content": "package main\n\nimport \"github.com/drakkan/sftpgo/ldapauthserver/cmd\"\n\nfunc main() {\n\tcmd.Execute()\n}\n"
},
{
"path": "examples/ldapauthserver/utils/utils.go",
"content": "package utils\n\nimport (\n\t\"path/filepath\"\n\t\"strings\"\n)\n\n// IsFileInputValid returns true this is a valid file name.\n// This method must be used before joining a file name, generally provided as\n// user input, with a directory\nfunc IsFileInputValid(fileInput string) bool {\n\tcleanInput := filepath.Clean(fileInput)\n\tif cleanInput == \".\" || cleanInput == \"..\" {\n\t\treturn false\n\t}\n\treturn true\n}\n\n// IsStringPrefixInSlice searches a string prefix in a slice and returns true\n// if a matching prefix is found\nfunc IsStringPrefixInSlice(obj string, list []string) bool {\n\tfor _, v := range list {\n\t\tif strings.HasPrefix(obj, v) {\n\t\t\treturn true\n\t\t}\n\t}\n\treturn false\n}\n"
},
{
"path": "examples/ldapauthserver/utils/version.go",
"content": "package utils\n\nconst version = \"0.1.0-dev\"\n\nvar (\n\tcommit = \"\"\n\tdate = \"\"\n\tversionInfo VersionInfo\n)\n\n// VersionInfo defines version details\ntype VersionInfo struct {\n\tVersion string `json:\"version\"`\n\tBuildDate string `json:\"build_date\"`\n\tCommitHash string `json:\"commit_hash\"`\n}\n\nfunc init() {\n\tversionInfo = VersionInfo{\n\t\tVersion: version,\n\t\tCommitHash: commit,\n\t\tBuildDate: date,\n\t}\n}\n\n// GetVersionAsString returns the string representation of the VersionInfo struct\nfunc (v *VersionInfo) GetVersionAsString() string {\n\tversionString := v.Version\n\tif len(v.CommitHash) > 0 {\n\t\tversionString += \"-\" + v.CommitHash\n\t}\n\tif len(v.BuildDate) > 0 {\n\t\tversionString += \"-\" + v.BuildDate\n\t}\n\treturn versionString\n}\n\n// GetAppVersion returns VersionInfo struct\nfunc GetAppVersion() VersionInfo {\n\treturn versionInfo\n}\n"
},
{
"path": "examples/php-activedirectory-http-server/README.md",
"content": "# SFTPGo on Windows with Active Directory Integration + Caddy Static File Server Example\n\n[](https://www.youtube.com/watch?v=M5UcJI8t4AI)\n\nThis is similar to the ldapauthserver example, but is more specific to using Active Directory along with using SFTPGo on a Windows Server.\n\nThe Youtube Walkthrough/Tutorial video above goes into considerable more detail, but in short, it walks through setting up SFTPGo on a new Windows Server, and enables the External Authentication feature within SFTPGo, along with my `sftpgo-ldap-http-server` project, to allow for user authentication into SFTPGo to occur through one or more Active Directory connections.\n\nAdditionally, I go through using the Caddy web server, to help enable serving of static files, if this is something that would be of interest for you.\n\nTo get started, you'll want to download the latest release ZIP package from the [sftpgo-ldap-http-server repository](https://github.com/orware/sftpgo-ldap-http-server).\n\nThe ZIP itself contains the `sftpgo-ldap-http-server.exe` file, along with an `OpenLDAP` folder (mainly to help if you want to use TLS for your LDAP connections), and a `Data` which contains a logs folder, a configuration.example.php file, a functions.php file, and the LICENSE and README files.\n\nThe video above goes through the whole process, but to get started you'll want to install SFTPGo on your server, and then extract the `sftpgo-ldap-http-server` ZIP file on the server as well into a separate folder. Then you'll want to copy the configuration.example.php file and name it `configuration.php` and begin customizing the settings (e.g. add in your own LDAP settings, along with how you may want to have your folders be created). At the very minimum you'll want to make sure that the home directories are set correctly to how you want the folders to be created for your environment (you don't have to use the virtual folders or really any of the other functionality if you don't need it).\n\nOnce configured, from a command prompt window, if you are already in the same folder as where you extracted the `sftpgo-ldap-http-server` ZIP, you may simply call the `sftpgo-ldap-http-server.exe` and it should start up a simple HTTP server on Port 9001 running on localhost (the port can be adjusted via the `configuration.php` file as well). Now all you have to do is point SFTPGo's `external_auth_hook` option to point to `http://localhost:9001/` and you should be able to run some authentication tests (assuming you have all of your settings correct and there are no intermediate issues).\n\nThe video above definitely goes through some troubleshooting situations you might find yourself coming across, so while it is long (at about 1 hour, 42 minutes), it may be helpful to review and avoid some issues and just to learn a bit more about SFTPGo and the integration above.\n\n## Example Virtual Folders Configuration (Allowing for Both a Public and Private Folder)\n\nThe following can be utilized if you'd like to assign your users both a Private Virtual Folder and Public Virtual Folder.\n\nBy itself, the Public Virtual Folder isn't necessarily public, so keep that in mind. Only by combining things together with the Caddy web server (and Caddyfile example configuration down below) can you be successful in making the `F:\\files\\public` folder from the example public.\n\n```php\n$virtual_folders['example'] = [\n [\n //\"id\" => 0,\n \"name\" => \"private-#USERNAME#\",\n \"mapped_path\" => 'F:\\files\\private\\#USERNAME#',\n //\"used_quota_size\" => 0,\n //\"used_quota_files\" => 0,\n //\"last_quota_update\" => 0,\n \"virtual_path\" => \"/_private\",\n \"quota_size\" => -1,\n \"quota_files\" => -1\n ],\n\t[\n //\"id\" => 0,\n \"name\" => \"public-#USERNAME#\",\n \"mapped_path\" => 'F:\\files\\public\\#USERNAME#',\n //\"used_quota_size\" => 0,\n //\"used_quota_files\" => 0,\n //\"last_quota_update\" => 0,\n \"virtual_path\" => \"/_public\",\n \"quota_size\" => -1,\n \"quota_files\" => -1\n ]\n];\n```\n\n## Example Connection \"Output Object\" Allowing For No Files in the User's Home Directory (\"Root Directory\") but Allowing for Files in the Public/Private Virtual Folders\n\nThe magic here happens in the \"permissions\" value, by limiting the root/home directory to just the list/download permissions, and then allowing all permissions on the Public/Private virtual folders.\n\n```php\n$connection_output_objects['example'] = [\n 'status' => 1,\n 'username' => '',\n 'expiration_date' => 0,\n 'home_dir' => '',\n 'uid' => 0,\n 'gid' => 0,\n 'max_sessions' => 0,\n 'quota_size' => 0,\n 'quota_files' => 100000,\n 'permissions' => [\n \"/\" => [\"list\", \"download\"],\n \"/_private\" => [\"*\"],\n \"/_public\" => [\"*\"],\n ],\n 'upload_bandwidth' => 0,\n 'download_bandwidth' => 0,\n 'filters' => [\n 'allowed_ip' => [],\n 'denied_ip' => [],\n ],\n 'public_keys' => [],\n];\n```\n\n## Recommended Usage of Automatic Groups Mode (Limiting by Group Prefix)\n\nThe `sftpgo-ldap-http-server` project is able to automatically create virtual folders for any groups your user is a memberof if the automatic mode is turned on. However, by having a specific set of allowed prefixes defined, you can limit things to just those groups that begin with the prefixes you've listed, which can be helpful. The prefix itself will be removed from the group name when added as a virtual folder for the user.\n\n```php\n// If automatic groups mode is disabled, then you have to manually add the allowed groups into $allowed_groups down below:\n// If enabled, then any groups you are a memberof will automatically be added in using the template below.\n$auto_groups_mode = true;\n\n$auto_groups_mode_virtual_folder_template = [\n [\n //\"id\" => 0,\n \"name\" => \"groups-#GROUP#\",\n \"mapped_path\" => 'F:\\files\\groups\\#GROUP#',\n //\"used_quota_size\" => 0,\n //\"used_quota_files\" => 0,\n //\"last_quota_update\" => 0,\n \"virtual_path\" => \"/groups/#GROUP#\",\n \"quota_size\" => 0,\n \"quota_files\" => 100000\n ]\n];\n\n// Used only when auto groups mode is enabled and will help prevent all your groups from being\n// added into SFTPGo since only groups with the prefixes defined here will be automatically added\n// with prefixes automatically removed when listed as a virtual folder (e.g. a group with name\n// \"sftpgo-example\" would simply become \"example\").\n$allowed_group_prefixes = [\n 'sftpgo-'\n];\n```\n\n## Example Caddyfile Configuration You Can Adapt for Your Needs\n\n```shell\n### Re-usable snippets:\n\n(add_static_file_serving_features) {\n\n\t# Allow accessing files without requiring .html:\n\ttry_files {path} {path}.html\n\n\t# Enable Static File Server and Directory Browsing:\n\tfile_server browse\n\n\t# Enable templating functionality:\n\ttemplates\n\n\t# Enable Compression for Output:\n\tencode zstd gzip\n\n\thandle_errors {\n\t\trespond \"{http.error.status_code} {http.error.status_text} \"\n\t}\n}\n\n(add_hsts_headers) {\n\theader {\n\t\t# Enable HTTP Strict Transport Security (HSTS) to force clients to always\n\n\t\t# connect via HTTPS (do not use if only testing)\n\t\tStrict-Transport-Security \"max-age=31536000; includeSubDomains\"\n\n\t\t# Enable cross-site filter (XSS) and tell browser to block detected attacks\n\t\tX-XSS-Protection \"1; mode=block\"\n\n\t\t# Prevent some browsers from MIME-sniffing a response away from the declared Content-Type\n\t\tX-Content-Type-Options \"nosniff\"\n\n\t\t# Disallow the site to be rendered within a frame (clickjacking protection)\n\t\tX-Frame-Options \"DENY\"\n\n\t\t# keep referrer data off of HTTP connections\n\t\tReferrer-Policy no-referrer-when-downgrade\n\t}\n}\n\n(add_logging_with_path) {\n\tlog {\n\t\toutput file \"{args.0}\" {\n\t\t\troll_size 100mb\n\t\t\troll_keep 5\n\t\t\troll_keep_for 720h\n\t\t}\n\n\t\tformat json\n\t\t#format console\n\t\t#format single_field common_log\n\t}\n}\n\n### Site Definitions:\n\npublic.example.com {\n\n\t# Site Root:\n\troot * F:\\files\\public\n\n\timport add_logging_with_path \"F:\\caddy\\logs\\public_example_com_access.log\"\n\timport add_static_file_serving_features\n\timport add_hsts_headers\n}\n\n\n### Reverse Proxy Definitions:\n\nwebdav.example.com {\n\treverse_proxy localhost:9000\n\n\timport add_logging_with_path \"F:\\caddy\\logs\\webdav_example_com_access.log\"\n}\n```\n"
},
{
"path": "examples/quotascan/README.md",
"content": "# Update user quota\n\n:warning: Since v2.4.0 you can use the [EventManager](https://docs.sftpgo.com/latest/eventmanager/) to schedule quota scans.\n\nThe `scanuserquota` example script shows how to use the SFTPGo REST API to update the users' quota.\n\nThe stored quota may be incorrect for several reasons, such as an unexpected shutdown while uploading files, temporary provider failures, files copied outside of SFTPGo, and so on.\n\nA quota scan updates the number of files and their total size for the specified user and the virtual folders, if any, included in his quota.\n\nIf you want to track quotas, a scheduled quota scan is recommended. You can use this example as a starting point.\n\nThe script is written in Python and has the following requirements:\n\n- python3 or python2\n- python [Requests](https://requests.readthedocs.io/en/master/) module\n\nThe provided example tries to connect to an SFTPGo instance running on `127.0.0.1:8080` using the following credentials:\n\n- username: `admin`\n- password: `password`\n\nPlease edit the script according to your needs.\n"
},
{
"path": "examples/quotascan/scanuserquota",
"content": "#!/usr/bin/env python\n\nfrom datetime import datetime\nimport sys\nimport time\n\nimport pytz\nimport requests\n\ntry:\n\timport urllib.parse as urlparse\nexcept ImportError:\n\timport urlparse\n\n# change base_url to point to your SFTPGo installation\nbase_url = \"http://127.0.0.1:8080\"\n# set to False if you want to skip TLS certificate validation\nverify_tls_cert = True\n# set the credentials for a valid admin here\nadmin_user = \"admin\"\nadmin_password = \"password\"\n\n\n# set your update conditions here\ndef needQuotaUpdate(user):\n\tif user[\"status\"] == 0: # inactive user\n\t\treturn False\n\tif user[\"quota_size\"] == 0 and user[\"quota_files\"] == 0: # no quota restrictions\n\t\treturn False\n\treturn True\n\n\nclass UpdateQuota:\n\n\tdef __init__(self):\n\t\tself.limit = 100\n\t\tself.offset = 0\n\t\tself.access_token = \"\"\n\t\tself.access_token_expiration = None\n\n\tdef printLog(self, message):\n\t\tprint(\"{} - {}\".format(datetime.now(), message))\n\n\tdef checkAccessToken(self):\n\t\tif self.access_token != \"\" and self.access_token_expiration:\n\t\t\texpire_diff = self.access_token_expiration - datetime.now(tz=pytz.UTC)\n\t\t\t# we don't use total_seconds to be python 2 compatible\n\t\t\tseconds_to_expire = expire_diff.days * 86400 + expire_diff.seconds\n\t\t\tif seconds_to_expire > 180:\n\t\t\t\treturn\n\n\t\tauth = requests.auth.HTTPBasicAuth(admin_user, admin_password)\n\t\tr = requests.get(urlparse.urljoin(base_url, \"api/v2/token\"), auth=auth, verify=verify_tls_cert, timeout=10)\n\t\tif r.status_code != 200:\n\t\t\tself.printLog(\"error getting access token: {}\".format(r.text))\n\t\t\tsys.exit(1)\n\t\tself.access_token = r.json()[\"access_token\"]\n\t\tself.access_token_expiration = pytz.timezone(\"UTC\").localize(datetime.strptime(r.json()[\"expires_at\"],\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"%Y-%m-%dT%H:%M:%SZ\"))\n\n\tdef getAuthHeader(self):\n\t\tself.checkAccessToken()\n\t\treturn {\"Authorization\": \"Bearer \" + self.access_token}\n\n\tdef waitForQuotaUpdate(self, username):\n\t\twhile True:\n\t\t\tauth_header = self.getAuthHeader()\n\t\t\tr = requests.get(urlparse.urljoin(base_url, \"api/v2/quotas/users/scans\"), headers=auth_header, verify=verify_tls_cert,\n\t\t\t\t\t\t\ttimeout=10)\n\t\t\tif r.status_code != 200:\n\t\t\t\tself.printLog(\"error getting quota scans while waiting for {}: {}\".format(username, r.text))\n\t\t\t\tsys.exit(1)\n\n\t\t\tscanning = False\n\t\t\tfor scan in r.json():\n\t\t\t\tif scan[\"username\"] == username:\n\t\t\t\t\tscanning = True\n\t\t\tif not scanning:\n\t\t\t\tbreak\n\t\t\tself.printLog(\"waiting for the quota scan to complete for user {}\".format(username))\n\t\t\ttime.sleep(2)\n\n\t\tself.printLog(\"quota update for user {} finished\".format(username))\n\n\tdef updateUserQuota(self, username):\n\t\tself.printLog(\"starting quota update for user {}\".format(username))\n\t\tauth_header = self.getAuthHeader()\n\t\tr = requests.post(urlparse.urljoin(base_url, \"api/v2/quotas/users/\" + username + \"/scan\"), headers=auth_header,\n\t\t\t\t\t\t verify=verify_tls_cert, timeout=10)\n\t\tif r.status_code != 202:\n\t\t\tself.printLog(\"error starting quota scan for user {}: {}\".format(username, r.text))\n\t\t\tsys.exit(1)\n\t\tself.waitForQuotaUpdate(username)\n\n\tdef updateUsersQuota(self):\n\t\twhile True:\n\t\t\tself.printLog(\"get users, limit {} offset {}\".format(self.limit, self.offset))\n\t\t\tauth_header = self.getAuthHeader()\n\t\t\tpayload = {\"limit\":self.limit, \"offset\":self.offset}\n\t\t\tr = requests.get(urlparse.urljoin(base_url, \"api/v2/users\"), headers=auth_header, params=payload,\n\t\t\t\t\t\tverify=verify_tls_cert, timeout=10)\n\t\t\tif r.status_code != 200:\n\t\t\t\tself.printLog(\"error getting users: {}\".format(r.text))\n\t\t\t\tsys.exit(1)\n\t\t\tusers = r.json()\n\t\t\tfor user in users:\n\t\t\t\tif needQuotaUpdate(user):\n\t\t\t\t\tself.updateUserQuota(user[\"username\"])\n\t\t\t\telse:\n\t\t\t\t\tself.printLog(\"user {} does not need a quota update\".format(user[\"username\"]))\n\n\t\t\tself.offset += len(users)\n\t\t\tif len(users) < self.limit:\n\t\t\t\tbreak\n\n\nif __name__ == '__main__':\n\tq = UpdateQuota()\n\tq.updateUsersQuota()\n"
},
{
"path": "go.mod",
"content": "module github.com/drakkan/sftpgo/v2\n\ngo 1.25.0\n\nrequire (\n\tcloud.google.com/go/storage v1.60.0\n\tgithub.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0\n\tgithub.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1\n\tgithub.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.4\n\tgithub.com/GehirnInc/crypt v0.0.0-20230320061759-8cc1b52080c5\n\tgithub.com/alexedwards/argon2id v1.0.0\n\tgithub.com/amoghe/go-crypt v0.0.0-20220222110647-20eada5f5964\n\tgithub.com/aws/aws-sdk-go-v2 v1.41.4\n\tgithub.com/aws/aws-sdk-go-v2/config v1.32.12\n\tgithub.com/aws/aws-sdk-go-v2/credentials v1.19.12\n\tgithub.com/aws/aws-sdk-go-v2/service/s3 v1.97.1\n\tgithub.com/aws/aws-sdk-go-v2/service/sts v1.41.9\n\tgithub.com/bmatcuk/doublestar/v4 v4.10.0\n\tgithub.com/cockroachdb/cockroach-go/v2 v2.4.3\n\tgithub.com/coreos/go-oidc/v3 v3.17.0\n\tgithub.com/drakkan/webdav v0.0.0-20241026165615-b8b8f74ae71b\n\tgithub.com/eikenb/pipeat v0.0.0-20251030185646-385cd3c3e07b\n\tgithub.com/fclairamb/ftpserverlib v0.30.0\n\tgithub.com/go-acme/lego/v4 v4.33.0\n\tgithub.com/go-chi/chi/v5 v5.2.5\n\tgithub.com/go-chi/render v1.0.3\n\tgithub.com/go-jose/go-jose/v4 v4.1.3\n\tgithub.com/go-sql-driver/mysql v1.9.3\n\tgithub.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510\n\tgithub.com/google/uuid v1.6.0\n\tgithub.com/hashicorp/go-hclog v1.6.3\n\tgithub.com/hashicorp/go-plugin v1.7.0\n\tgithub.com/hashicorp/go-retryablehttp v0.7.8\n\tgithub.com/jackc/pgx/v5 v5.8.0\n\tgithub.com/jlaffaye/ftp v0.2.0\n\tgithub.com/klauspost/compress v1.18.4\n\tgithub.com/lithammer/shortuuid/v4 v4.2.0\n\tgithub.com/mattn/go-sqlite3 v1.14.37\n\tgithub.com/mhale/smtpd v0.8.3\n\tgithub.com/minio/sio v0.4.3\n\tgithub.com/otiai10/copy v1.14.1\n\tgithub.com/pires/go-proxyproto v0.11.0\n\tgithub.com/pkg/sftp v1.13.10\n\tgithub.com/pquerna/otp v1.5.0\n\tgithub.com/prometheus/client_golang v1.23.2\n\tgithub.com/robfig/cron/v3 v3.0.1\n\tgithub.com/rs/cors v1.11.1\n\tgithub.com/rs/xid v1.6.0\n\tgithub.com/rs/zerolog v1.34.0\n\tgithub.com/sftpgo/sdk v0.1.9\n\tgithub.com/shirou/gopsutil/v3 v3.24.5\n\tgithub.com/spf13/afero v1.15.0\n\tgithub.com/spf13/cobra v1.10.2\n\tgithub.com/spf13/viper v1.21.0\n\tgithub.com/stretchr/testify v1.11.1\n\tgithub.com/studio-b12/gowebdav v0.12.0\n\tgithub.com/subosito/gotenv v1.6.0\n\tgithub.com/unrolled/secure v1.17.0\n\tgithub.com/wagslane/go-password-validator v0.3.0\n\tgithub.com/wneessen/go-mail v0.7.2\n\tgithub.com/yl2chen/cidranger v1.0.3-0.20210928021809-d1cb2c52f37a\n\tgo.etcd.io/bbolt v1.4.3\n\tgocloud.dev v0.45.0\n\tgolang.org/x/crypto v0.49.0\n\tgolang.org/x/net v0.52.0\n\tgolang.org/x/oauth2 v0.36.0\n\tgolang.org/x/sys v0.42.0\n\tgolang.org/x/term v0.41.0\n\tgolang.org/x/time v0.15.0\n\tgoogle.golang.org/api v0.272.0\n\tgopkg.in/natefinch/lumberjack.v2 v2.2.1\n)\n\nrequire (\n\tcel.dev/expr v0.25.1 // indirect\n\tcloud.google.com/go v0.123.0 // indirect\n\tcloud.google.com/go/auth v0.18.2 // indirect\n\tcloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect\n\tcloud.google.com/go/compute/metadata v0.9.0 // indirect\n\tcloud.google.com/go/iam v1.5.3 // indirect\n\tcloud.google.com/go/monitoring v1.24.3 // indirect\n\tfilippo.io/edwards25519 v1.2.0 // indirect\n\tgithub.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect\n\tgithub.com/AzureAD/microsoft-authentication-library-for-go v1.7.0 // indirect\n\tgithub.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect\n\tgithub.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect\n\tgithub.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect\n\tgithub.com/ajg/form v1.7.1 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.7 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/internal/v4a v1.4.21 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.12 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.20 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/signin v1.0.8 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/sso v1.30.13 // indirect\n\tgithub.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 // indirect\n\tgithub.com/aws/smithy-go v1.24.2 // indirect\n\tgithub.com/beorn7/perks v1.0.1 // indirect\n\tgithub.com/boombuler/barcode v1.1.0 // indirect\n\tgithub.com/cenkalti/backoff/v5 v5.0.3 // indirect\n\tgithub.com/cespare/xxhash/v2 v2.3.0 // indirect\n\tgithub.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 // indirect\n\tgithub.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect\n\tgithub.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect\n\tgithub.com/envoyproxy/go-control-plane/envoy v1.37.0 // indirect\n\tgithub.com/envoyproxy/protoc-gen-validate v1.3.3 // indirect\n\tgithub.com/fatih/color v1.18.0 // indirect\n\tgithub.com/felixge/httpsnoop v1.0.4 // indirect\n\tgithub.com/fsnotify/fsnotify v1.9.0 // indirect\n\tgithub.com/go-logr/logr v1.4.3 // indirect\n\tgithub.com/go-logr/stdr v1.2.2 // indirect\n\tgithub.com/go-ole/go-ole v1.3.0 // indirect\n\tgithub.com/go-viper/mapstructure/v2 v2.5.0 // indirect\n\tgithub.com/golang-jwt/jwt/v5 v5.3.1 // indirect\n\tgithub.com/golang/protobuf v1.5.4 // indirect\n\tgithub.com/google/s2a-go v0.1.9 // indirect\n\tgithub.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect\n\tgithub.com/googleapis/gax-go/v2 v2.19.0 // indirect\n\tgithub.com/hashicorp/errwrap v1.1.0 // indirect\n\tgithub.com/hashicorp/go-cleanhttp v0.5.2 // indirect\n\tgithub.com/hashicorp/go-multierror v1.1.1 // indirect\n\tgithub.com/hashicorp/yamux v0.1.2 // indirect\n\tgithub.com/inconshreveable/mousetrap v1.1.0 // indirect\n\tgithub.com/jackc/pgpassfile v1.0.0 // indirect\n\tgithub.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect\n\tgithub.com/jackc/puddle/v2 v2.2.2 // indirect\n\tgithub.com/kr/fs v0.1.0 // indirect\n\tgithub.com/kylelemons/godebug v1.1.0 // indirect\n\tgithub.com/lufia/plan9stats v0.0.0-20260216142805-b3301c5f2a88 // indirect\n\tgithub.com/mattn/go-colorable v0.1.14 // indirect\n\tgithub.com/mattn/go-isatty v0.0.20 // indirect\n\tgithub.com/miekg/dns v1.1.72 // indirect\n\tgithub.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect\n\tgithub.com/oklog/run v1.2.0 // indirect\n\tgithub.com/otiai10/mint v1.6.3 // indirect\n\tgithub.com/pelletier/go-toml/v2 v2.2.4 // indirect\n\tgithub.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect\n\tgithub.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect\n\tgithub.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect\n\tgithub.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect\n\tgithub.com/prometheus/client_model v0.6.2 // indirect\n\tgithub.com/prometheus/common v0.67.5 // indirect\n\tgithub.com/prometheus/procfs v0.20.1 // indirect\n\tgithub.com/russross/blackfriday/v2 v2.1.0 // indirect\n\tgithub.com/sagikazarmark/locafero v0.12.0 // indirect\n\tgithub.com/shoenig/go-m1cpu v0.2.1 // indirect\n\tgithub.com/spf13/cast v1.10.0 // indirect\n\tgithub.com/spf13/pflag v1.0.10 // indirect\n\tgithub.com/spiffe/go-spiffe/v2 v2.6.0 // indirect\n\tgithub.com/tklauser/go-sysconf v0.3.16 // indirect\n\tgithub.com/tklauser/numcpus v0.11.0 // indirect\n\tgithub.com/yusufpapurcu/wmi v1.2.4 // indirect\n\tgo.opentelemetry.io/auto/sdk v1.2.1 // indirect\n\tgo.opentelemetry.io/contrib/detectors/gcp v1.42.0 // indirect\n\tgo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 // indirect\n\tgo.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect\n\tgo.opentelemetry.io/otel v1.42.0 // indirect\n\tgo.opentelemetry.io/otel/metric v1.42.0 // indirect\n\tgo.opentelemetry.io/otel/sdk v1.42.0 // indirect\n\tgo.opentelemetry.io/otel/sdk/metric v1.42.0 // indirect\n\tgo.opentelemetry.io/otel/trace v1.42.0 // indirect\n\tgo.yaml.in/yaml/v2 v2.4.4 // indirect\n\tgo.yaml.in/yaml/v3 v3.0.4 // indirect\n\tgolang.org/x/mod v0.34.0 // indirect\n\tgolang.org/x/sync v0.20.0 // indirect\n\tgolang.org/x/text v0.35.0 // indirect\n\tgolang.org/x/tools v0.43.0 // indirect\n\tgolang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect\n\tgoogle.golang.org/genproto v0.0.0-20260319171110-e3a33c96fb44 // indirect\n\tgoogle.golang.org/genproto/googleapis/api v0.0.0-20260319171110-e3a33c96fb44 // indirect\n\tgoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260319171110-e3a33c96fb44 // indirect\n\tgoogle.golang.org/grpc v1.79.3 // indirect\n\tgoogle.golang.org/protobuf v1.36.11 // indirect\n\tgopkg.in/yaml.v3 v3.0.1 // indirect\n)\n\nreplace (\n\tgithub.com/jlaffaye/ftp => github.com/drakkan/ftp v0.0.0-20240430173938-7ba8270c8e7f\n\tgithub.com/robfig/cron/v3 => github.com/drakkan/cron/v3 v3.0.0-20230222140221-217a1e4d96c0\n)\n"
},
{
"path": "go.sum",
"content": "cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4=\ncel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4=\ncloud.google.com/go v0.123.0 h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE=\ncloud.google.com/go v0.123.0/go.mod h1:xBoMV08QcqUGuPW65Qfm1o9Y4zKZBpGS+7bImXLTAZU=\ncloud.google.com/go/auth v0.18.2 h1:+Nbt5Ev0xEqxlNjd6c+yYUeosQ5TtEUaNcN/3FozlaM=\ncloud.google.com/go/auth v0.18.2/go.mod h1:xD+oY7gcahcu7G2SG2DsBerfFxgPAJz17zz2joOFF3M=\ncloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=\ncloud.google.com/go/auth/oauth2adapt v0.2.8/go.mod h1:XQ9y31RkqZCcwJWNSx2Xvric3RrU88hAYYbjDWYDL+c=\ncloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs=\ncloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10=\ncloud.google.com/go/iam v1.5.3 h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc=\ncloud.google.com/go/iam v1.5.3/go.mod h1:MR3v9oLkZCTlaqljW6Eb2d3HGDGK5/bDv93jhfISFvU=\ncloud.google.com/go/kms v1.26.0 h1:cK9mN2cf+9V63D3H1f6koxTatWy39aTI/hCjz1I+adU=\ncloud.google.com/go/kms v1.26.0/go.mod h1:pHKOdFJm63hxBsiPkYtowZPltu9dW0MWvBa6IA4HM58=\ncloud.google.com/go/logging v1.13.2 h1:qqlHCBvieJT9Cdq4QqYx1KPadCQ2noD4FK02eNqHAjA=\ncloud.google.com/go/logging v1.13.2/go.mod h1:zaybliM3yun1J8mU2dVQ1/qDzjbOqEijZCn6hSBtKak=\ncloud.google.com/go/longrunning v0.8.0 h1:LiKK77J3bx5gDLi4SMViHixjD2ohlkwBi+mKA7EhfW8=\ncloud.google.com/go/longrunning v0.8.0/go.mod h1:UmErU2Onzi+fKDg2gR7dusz11Pe26aknR4kHmJJqIfk=\ncloud.google.com/go/monitoring v1.24.3 h1:dde+gMNc0UhPZD1Azu6at2e79bfdztVDS5lvhOdsgaE=\ncloud.google.com/go/monitoring v1.24.3/go.mod h1:nYP6W0tm3N9H/bOw8am7t62YTzZY+zUeQ+Bi6+2eonI=\ncloud.google.com/go/storage v1.60.0 h1:oBfZrSOCimggVNz9Y/bXY35uUcts7OViubeddTTVzQ8=\ncloud.google.com/go/storage v1.60.0/go.mod h1:q+5196hXfejkctrnx+VYU8RKQr/L3c0cBIlrjmiAKE0=\ncloud.google.com/go/trace v1.11.7 h1:kDNDX8JkaAG3R2nq1lIdkb7FCSi1rCmsEtKVsty7p+U=\ncloud.google.com/go/trace v1.11.7/go.mod h1:TNn9d5V3fQVf6s4SCveVMIBS2LJUqo73GACmq/Tky0s=\nfilippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo=\nfilippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc=\ngithub.com/Azure/azure-sdk-for-go v68.0.0+incompatible h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU=\ngithub.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 h1:fou+2+WFTib47nS+nz/ozhEBnvU96bKHy6LjRsY4E28=\ngithub.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0/go.mod h1:t76Ruy8AHvUAC8GfMWJMa0ElSbuIcO03NLpynfbgsPA=\ngithub.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 h1:Hk5QBxZQC1jb2Fwj6mpzme37xbCDdNTxU7O9eb5+LB4=\ngithub.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1/go.mod h1:IYus9qsFobWIc2YVwe/WPjcnyCkPKtnHAqUYeebc8z0=\ngithub.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2 h1:yz1bePFlP5Vws5+8ez6T3HWXPmwOK7Yvq8QxDBD3SKY=\ngithub.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.3.2/go.mod h1:Pa9ZNPuoNu/GztvBSKk9J1cDJW6vk/n0zLtV4mgd8N8=\ngithub.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 h1:9iefClla7iYpfYWdzPCRDozdmndjTm8DXdpCzPajMgA=\ngithub.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2/go.mod h1:XtLgD3ZD34DAaVIIAyG3objl5DynM3CQ/vMcbBNJZGI=\ngithub.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.8.1 h1:/Zt+cDPnpC3OVDm/JKLOs7M2DKmLRIIp3XIx9pHHiig=\ngithub.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.8.1/go.mod h1:Ng3urmn6dYe8gnbCMoHHVl5APYz2txho3koEkV2o2HA=\ngithub.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.4 h1:jWQK1GI+LeGGUKBADtcH2rRqPxYB1Ljwms5gFA2LqrM=\ngithub.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.6.4/go.mod h1:8mwH4klAm9DUgR2EEHyEEAQlRDvLPyg5fQry3y+cDew=\ngithub.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1 h1:WJTmL004Abzc5wDB5VtZG2PJk5ndYDgVacGqfirKxjM=\ngithub.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1/go.mod h1:tCcJZ0uHAmvjsVYzEFivsRTN00oz5BEsRgQHu5JZ9WE=\ngithub.com/AzureAD/microsoft-authentication-library-for-go v1.7.0 h1:4iB+IesclUXdP0ICgAabvq2FYLXrJWKx1fJQ+GxSo3Y=\ngithub.com/AzureAD/microsoft-authentication-library-for-go v1.7.0/go.mod h1:HKpQxkWaGLJ+D/5H8QRpyQXA1eKjxkFlOMwck5+33Jk=\ngithub.com/GehirnInc/crypt v0.0.0-20230320061759-8cc1b52080c5 h1:IEjq88XO4PuBDcvmjQJcQGg+w+UaafSy8G5Kcb5tBhI=\ngithub.com/GehirnInc/crypt v0.0.0-20230320061759-8cc1b52080c5/go.mod h1:exZ0C/1emQJAw5tHOaUDyY1ycttqBAPcxuzf7QbY6ec=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 h1:DHa2U07rk8syqvCge0QIGMCE1WxGj9njT44GH7zNJLQ=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0/go.mod h1:P4WPRUkOhJC13W//jWpyfJNDAIpvRbAUIYLX/4jtlE0=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 h1:UnDZ/zFfG1JhH/DqxIZYU/1CUAlTUScoXD/LcM2Ykk8=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0/go.mod h1:IA1C1U7jO/ENqm/vhi7V9YYpBsp+IMyqNrEN94N7tVc=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0 h1:7t/qx5Ost0s0wbA/VDrByOooURhp+ikYwv20i9Y07TQ=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0/go.mod h1:vB2GH9GAYYJTO3mEn8oYwzEdhlayZIdQz6zdzgUIRvA=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 h1:0s6TxfCu2KHkkZPnBfsQ2y5qia0jl3MMrmBhu3nCOYk=\ngithub.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0/go.mod h1:Mf6O40IAyB9zR/1J8nGDDPirZQQPbYJni8Yisy7NTMc=\ngithub.com/ajg/form v1.5.1/go.mod h1:uL1WgH+h2mgNtvBq0339dVnzXdBETtL2LeUXaIv25UY=\ngithub.com/ajg/form v1.7.1 h1:OsnBDzTkrWdrxvEnO68I72ZVGJGNaMwPhoAm0V+llgc=\ngithub.com/ajg/form v1.7.1/go.mod h1:HL757PzLyNkj5AIfptT6L+iGNeXTlnrr/oDePGc/y7Q=\ngithub.com/alexedwards/argon2id v1.0.0 h1:wJzDx66hqWX7siL/SRUmgz3F8YMrd/nfX/xHHcQQP0w=\ngithub.com/alexedwards/argon2id v1.0.0/go.mod h1:tYKkqIjzXvZdzPvADMWOEZ+l6+BD6CtBXMj5fnJppiw=\ngithub.com/amoghe/go-crypt v0.0.0-20220222110647-20eada5f5964 h1:I9YN9WMo3SUh7p/4wKeNvD/IQla3U3SUa61U7ul+xM4=\ngithub.com/amoghe/go-crypt v0.0.0-20220222110647-20eada5f5964/go.mod h1:eFiR01PwTcpbzXtdMces7zxg6utvFM5puiWHpWB8D/k=\ngithub.com/aws/aws-sdk-go-v2 v1.41.4 h1:10f50G7WyU02T56ox1wWXq+zTX9I1zxG46HYuG1hH/k=\ngithub.com/aws/aws-sdk-go-v2 v1.41.4/go.mod h1:mwsPRE8ceUUpiTgF7QmQIJ7lgsKUPQOUl3o72QBrE1o=\ngithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.7 h1:3kGOqnh1pPeddVa/E37XNTaWJ8W6vrbYV9lJEkCnhuY=\ngithub.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.7/go.mod h1:lyw7GFp3qENLh7kwzf7iMzAxDn+NzjXEAGjKS2UOKqI=\ngithub.com/aws/aws-sdk-go-v2/config v1.32.12 h1:O3csC7HUGn2895eNrLytOJQdoL2xyJy0iYXhoZ1OmP0=\ngithub.com/aws/aws-sdk-go-v2/config v1.32.12/go.mod h1:96zTvoOFR4FURjI+/5wY1vc1ABceROO4lWgWJuxgy0g=\ngithub.com/aws/aws-sdk-go-v2/credentials v1.19.12 h1:oqtA6v+y5fZg//tcTWahyN9PEn5eDU/Wpvc2+kJ4aY8=\ngithub.com/aws/aws-sdk-go-v2/credentials v1.19.12/go.mod h1:U3R1RtSHx6NB0DvEQFGyf/0sbrpJrluENHdPy1j/3TE=\ngithub.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 h1:zOgq3uezl5nznfoK3ODuqbhVg1JzAGDUhXOsU0IDCAo=\ngithub.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20/go.mod h1:z/MVwUARehy6GAg/yQ1GO2IMl0k++cu1ohP9zo887wE=\ngithub.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20 h1:CNXO7mvgThFGqOFgbNAP2nol2qAWBOGfqR/7tQlvLmc=\ngithub.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20/go.mod h1:oydPDJKcfMhgfcgBUZaG+toBbwy8yPWubJXBVERtI4o=\ngithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20 h1:tN6W/hg+pkM+tf9XDkWUbDEjGLb+raoBMFsTodcoYKw=\ngithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20/go.mod h1:YJ898MhD067hSHA6xYCx5ts/jEd8BSOLtQDL3iZsvbc=\ngithub.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 h1:qYQ4pzQ2Oz6WpQ8T3HvGHnZydA72MnLuFK9tJwmrbHw=\ngithub.com/aws/aws-sdk-go-v2/internal/ini v1.8.6/go.mod h1:O3h0IK87yXci+kg6flUKzJnWeziQUKciKrLjcatSNcY=\ngithub.com/aws/aws-sdk-go-v2/internal/v4a v1.4.21 h1:SwGMTMLIlvDNyhMteQ6r8IJSBPlRdXX5d4idhIGbkXA=\ngithub.com/aws/aws-sdk-go-v2/internal/v4a v1.4.21/go.mod h1:UUxgWxofmOdAMuqEsSppbDtGKLfR04HGsD0HXzvhI1k=\ngithub.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 h1:5EniKhLZe4xzL7a+fU3C2tfUN4nWIqlLesfrjkuPFTY=\ngithub.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7/go.mod h1:x0nZssQ3qZSnIcePWLvcoFisRXJzcTVvYpAAdYX8+GI=\ngithub.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.12 h1:qtJZ70afD3ISKWnoX3xB0J2otEqu3LqicRcDBqsj0hQ=\ngithub.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.12/go.mod h1:v2pNpJbRNl4vEUWEh5ytQok0zACAKfdmKS51Hotc3pQ=\ngithub.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20 h1:2HvVAIq+YqgGotK6EkMf+KIEqTISmTYh5zLpYyeTo1Y=\ngithub.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20/go.mod h1:V4X406Y666khGa8ghKmphma/7C0DAtEQYhkq9z4vpbk=\ngithub.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.20 h1:siU1A6xjUZ2N8zjTHSXFhB9L/2OY8Dqs0xXiLjF30jA=\ngithub.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.20/go.mod h1:4TLZCmVJDM3FOu5P5TJP0zOlu9zWgDWU7aUxWbr+rcw=\ngithub.com/aws/aws-sdk-go-v2/service/s3 v1.97.1 h1:csi9NLpFZXb9fxY7rS1xVzgPRGMt7MSNWeQ6eo247kE=\ngithub.com/aws/aws-sdk-go-v2/service/s3 v1.97.1/go.mod h1:qXVal5H0ChqXP63t6jze5LmFalc7+ZE7wOdLtZ0LCP0=\ngithub.com/aws/aws-sdk-go-v2/service/signin v1.0.8 h1:0GFOLzEbOyZABS3PhYfBIx2rNBACYcKty+XGkTgw1ow=\ngithub.com/aws/aws-sdk-go-v2/service/signin v1.0.8/go.mod h1:LXypKvk85AROkKhOG6/YEcHFPoX+prKTowKnVdcaIxE=\ngithub.com/aws/aws-sdk-go-v2/service/sso v1.30.13 h1:kiIDLZ005EcKomYYITtfsjn7dtOwHDOFy7IbPXKek2o=\ngithub.com/aws/aws-sdk-go-v2/service/sso v1.30.13/go.mod h1:2h/xGEowcW/g38g06g3KpRWDlT+OTfxxI0o1KqayAB8=\ngithub.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 h1:jzKAXIlhZhJbnYwHbvUQZEB8KfgAEuG0dc08Bkda7NU=\ngithub.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17/go.mod h1:Al9fFsXjv4KfbzQHGe6V4NZSZQXecFcvaIF4e70FoRA=\ngithub.com/aws/aws-sdk-go-v2/service/sts v1.41.9 h1:Cng+OOwCHmFljXIxpEVXAGMnBia8MSU6Ch5i9PgBkcU=\ngithub.com/aws/aws-sdk-go-v2/service/sts v1.41.9/go.mod h1:LrlIndBDdjA/EeXeyNBle+gyCwTlizzW5ycgWnvIxkk=\ngithub.com/aws/smithy-go v1.24.2 h1:FzA3bu/nt/vDvmnkg+R8Xl46gmzEDam6mZ1hzmwXFng=\ngithub.com/aws/smithy-go v1.24.2/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=\ngithub.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=\ngithub.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=\ngithub.com/bmatcuk/doublestar/v4 v4.10.0 h1:zU9WiOla1YA122oLM6i4EXvGW62DvKZVxIe6TYWexEs=\ngithub.com/bmatcuk/doublestar/v4 v4.10.0/go.mod h1:xBQ8jztBU6kakFMg+8WGxn0c6z1fTSPVIjEY1Wr7jzc=\ngithub.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=\ngithub.com/boombuler/barcode v1.1.0 h1:ChaYjBR63fr4LFyGn8E8nt7dBSt3MiU3zMOZqFvVkHo=\ngithub.com/boombuler/barcode v1.1.0/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=\ngithub.com/bufbuild/protocompile v0.14.1 h1:iA73zAf/fyljNjQKwYzUHD6AD4R8KMasmwa/FBatYVw=\ngithub.com/bufbuild/protocompile v0.14.1/go.mod h1:ppVdAIhbr2H8asPk6k4pY7t9zB1OU5DoEw9xY/FUi1c=\ngithub.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=\ngithub.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=\ngithub.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=\ngithub.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=\ngithub.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik=\ngithub.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2/go.mod h1:qwXFYgsP6T7XnJtbKlf1HP8AjxZZyzxMmc+Lq5GjlU4=\ngithub.com/cockroachdb/cockroach-go/v2 v2.4.3 h1:LJO3K3jC5WXvMePRQSJE1NsIGoFGcEx1LW83W6RAlhw=\ngithub.com/cockroachdb/cockroach-go/v2 v2.4.3/go.mod h1:9U179XbCx4qFWtNhc7BiWLPfuyMVQ7qdAhfrwLz1vH0=\ngithub.com/coreos/go-oidc/v3 v3.17.0 h1:hWBGaQfbi0iVviX4ibC7bk8OKT5qNr4klBaCHVNvehc=\ngithub.com/coreos/go-oidc/v3 v3.17.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8=\ngithub.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc=\ngithub.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=\ngithub.com/cpuguy83/go-md2man/v2 v2.0.7 h1:zbFlGlXEAKlwXpmvle3d8Oe3YnkKIK4xSRTd3sHPnBo=\ngithub.com/cpuguy83/go-md2man/v2 v2.0.7/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=\ngithub.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=\ngithub.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=\ngithub.com/drakkan/cron/v3 v3.0.0-20230222140221-217a1e4d96c0 h1:EW9gIJRmt9lzk66Fhh4S8VEtURA6QHZqGeSRE9Nb2/U=\ngithub.com/drakkan/cron/v3 v3.0.0-20230222140221-217a1e4d96c0/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro=\ngithub.com/drakkan/ftp v0.0.0-20240430173938-7ba8270c8e7f h1:S9JUlrOzjK58UKoLqqb40YLyVlt0bcIFtYrvnanV3zc=\ngithub.com/drakkan/ftp v0.0.0-20240430173938-7ba8270c8e7f/go.mod h1:4p8lUl4vQ80L598CygL+3IFtm+3nggvvW/palOlViwE=\ngithub.com/drakkan/webdav v0.0.0-20241026165615-b8b8f74ae71b h1:Y1tLiQ8fnxM5f3wiBjAXsHzHNwiY9BR+mXZA75nZwrs=\ngithub.com/drakkan/webdav v0.0.0-20241026165615-b8b8f74ae71b/go.mod h1:zOVb1QDhwwqWn2L2qZ0U3swMSO4GTSNyIwXCGO/UGWE=\ngithub.com/eikenb/pipeat v0.0.0-20251030185646-385cd3c3e07b h1:G2Mm3YhlyjkFrNnvu5E6LtNcPJtggXL1i5ekDV4hDD4=\ngithub.com/eikenb/pipeat v0.0.0-20251030185646-385cd3c3e07b/go.mod h1:XccPiThW83W5pzeOCsJAylEUtWeH+3zQVwiO402FXXc=\ngithub.com/envoyproxy/go-control-plane v0.14.0 h1:hbG2kr4RuFj222B6+7T83thSPqLjwBIfQawTkC++2HA=\ngithub.com/envoyproxy/go-control-plane v0.14.0/go.mod h1:NcS5X47pLl/hfqxU70yPwL9ZMkUlwlKxtAohpi2wBEU=\ngithub.com/envoyproxy/go-control-plane/envoy v1.37.0 h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ=\ngithub.com/envoyproxy/go-control-plane/envoy v1.37.0/go.mod h1:DReE9MMrmecPy+YvQOAOHNYMALuowAnbjjEMkkWOi6A=\ngithub.com/envoyproxy/go-control-plane/ratelimit v0.1.0 h1:/G9QYbddjL25KvtKTv3an9lx6VBE2cnb8wp1vEGNYGI=\ngithub.com/envoyproxy/go-control-plane/ratelimit v0.1.0/go.mod h1:Wk+tMFAFbCXaJPzVVHnPgRKdUdwW/KdbRt94AzgRee4=\ngithub.com/envoyproxy/protoc-gen-validate v1.3.3 h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds=\ngithub.com/envoyproxy/protoc-gen-validate v1.3.3/go.mod h1:TsndJ/ngyIdQRhMcVVGDDHINPLWB7C82oDArY51KfB0=\ngithub.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk=\ngithub.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=\ngithub.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=\ngithub.com/fclairamb/ftpserverlib v0.30.0 h1:caB9sDn1Au//q0j2ev/icPn388qPuk4k1ajSvglDcMQ=\ngithub.com/fclairamb/ftpserverlib v0.30.0/go.mod h1:QmogtltTOgkihyKza0GNo37Mu4AEzbJ+sH6W9Y0MBIQ=\ngithub.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=\ngithub.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=\ngithub.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=\ngithub.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=\ngithub.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=\ngithub.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=\ngithub.com/go-acme/lego/v4 v4.33.0 h1:2KrRKieG+VczT4zvVXKAY7Tp/S3XLvh/QImofBALRAM=\ngithub.com/go-acme/lego/v4 v4.33.0/go.mod h1:lI2fZNdgeM/ymf9xQ9YKbgZm6MeDuf91UrohMQE4DhI=\ngithub.com/go-chi/chi/v5 v5.2.5 h1:Eg4myHZBjyvJmAFjFvWgrqDTXFyOzjj7YIm3L3mu6Ug=\ngithub.com/go-chi/chi/v5 v5.2.5/go.mod h1:X7Gx4mteadT3eDOMTsXzmI4/rwUpOwBHLpAfupzFJP0=\ngithub.com/go-chi/render v1.0.3 h1:AsXqd2a1/INaIfUSKq3G5uA8weYx20FOsM7uSoCyyt4=\ngithub.com/go-chi/render v1.0.3/go.mod h1:/gr3hVkmYR0YlEy3LxCuVRFzEu9Ruok+gFqbIofjao0=\ngithub.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs=\ngithub.com/go-jose/go-jose/v4 v4.1.3/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=\ngithub.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=\ngithub.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=\ngithub.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=\ngithub.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=\ngithub.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=\ngithub.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0=\ngithub.com/go-ole/go-ole v1.3.0 h1:Dt6ye7+vXGIKZ7Xtk4s6/xVdGDQynvom7xCFEdWr6uE=\ngithub.com/go-ole/go-ole v1.3.0/go.mod h1:5LS6F96DhAwUc7C+1HLexzMXY1xGRSryjyPPKW6zv78=\ngithub.com/go-sql-driver/mysql v1.9.3 h1:U/N249h2WzJ3Ukj8SowVFjdtZKfu9vlLZxjPXV1aweo=\ngithub.com/go-sql-driver/mysql v1.9.3/go.mod h1:qn46aNg1333BRMNU69Lq93t8du/dwxI64Gl8i5p1WMU=\ngithub.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=\ngithub.com/go-viper/mapstructure/v2 v2.5.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=\ngithub.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=\ngithub.com/gofrs/flock v0.13.0 h1:95JolYOvGMqeH31+FC7D2+uULf6mG61mEZ/A8dRYMzw=\ngithub.com/gofrs/flock v0.13.0/go.mod h1:jxeyy9R1auM5S6JYDBhDt+E2TCo7DkratH4Pgi8P+Z0=\ngithub.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=\ngithub.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=\ngithub.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=\ngithub.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=\ngithub.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=\ngithub.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=\ngithub.com/google/martian/v3 v3.3.3 h1:DIhPTQrbPkgs2yJYdXU/eNACCG5DVQjySNRNlflZ9Fc=\ngithub.com/google/martian/v3 v3.3.3/go.mod h1:iEPrYcgCF7jA9OtScMFQyAlZZ4YXTKEtJ1E6RWzmBA0=\ngithub.com/google/s2a-go v0.1.9 h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0=\ngithub.com/google/s2a-go v0.1.9/go.mod h1:YA0Ei2ZQL3acow2O62kdp9UlnvMmU7kA6Eutn0dXayM=\ngithub.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=\ngithub.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=\ngithub.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=\ngithub.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=\ngithub.com/google/wire v0.7.0 h1:JxUKI6+CVBgCO2WToKy/nQk0sS+amI9z9EjVmdaocj4=\ngithub.com/google/wire v0.7.0/go.mod h1:n6YbUQD9cPKTnHXEBN2DXlOp/mVADhVErcMFb0v3J18=\ngithub.com/googleapis/enterprise-certificate-proxy v0.3.14 h1:yh8ncqsbUY4shRD5dA6RlzjJaT4hi3kII+zYw8wmLb8=\ngithub.com/googleapis/enterprise-certificate-proxy v0.3.14/go.mod h1:vqVt9yG9480NtzREnTlmGSBmFrA+bzb0yl0TxoBQXOg=\ngithub.com/googleapis/gax-go/v2 v2.19.0 h1:fYQaUOiGwll0cGj7jmHT/0nPlcrZDFPrZRhTsoCr8hE=\ngithub.com/googleapis/gax-go/v2 v2.19.0/go.mod h1:w2ROXVdfGEVFXzmlciUU4EdjHgWvB5h2n6x/8XSTTJA=\ngithub.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=\ngithub.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=\ngithub.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=\ngithub.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=\ngithub.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=\ngithub.com/hashicorp/go-hclog v1.6.3 h1:Qr2kF+eVWjTiYmU7Y31tYlP1h0q/X3Nl3tPGdaB11/k=\ngithub.com/hashicorp/go-hclog v1.6.3/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=\ngithub.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=\ngithub.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=\ngithub.com/hashicorp/go-plugin v1.7.0 h1:YghfQH/0QmPNc/AZMTFE3ac8fipZyZECHdDPshfk+mA=\ngithub.com/hashicorp/go-plugin v1.7.0/go.mod h1:BExt6KEaIYx804z8k4gRzRLEvxKVb+kn0NMcihqOqb8=\ngithub.com/hashicorp/go-retryablehttp v0.7.8 h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48=\ngithub.com/hashicorp/go-retryablehttp v0.7.8/go.mod h1:rjiScheydd+CxvumBsIrFKlx3iS0jrZ7LvzFGFmuKbw=\ngithub.com/hashicorp/yamux v0.1.2 h1:XtB8kyFOyHXYVFnwT5C3+Bdo8gArse7j2AQ0DA0Uey8=\ngithub.com/hashicorp/yamux v0.1.2/go.mod h1:C+zze2n6e/7wshOZep2A70/aQU6QBRWJO/G6FT1wIns=\ngithub.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=\ngithub.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=\ngithub.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=\ngithub.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=\ngithub.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=\ngithub.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=\ngithub.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=\ngithub.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=\ngithub.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=\ngithub.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=\ngithub.com/jhump/protoreflect v1.17.0 h1:qOEr613fac2lOuTgWN4tPAtLL7fUSbuJL5X5XumQh94=\ngithub.com/jhump/protoreflect v1.17.0/go.mod h1:h9+vUUL38jiBzck8ck+6G/aeMX8Z4QUY/NiJPwPNi+8=\ngithub.com/keybase/go-keychain v0.0.1 h1:way+bWYa6lDppZoZcgMbYsvC7GxljxrskdNInRtuthU=\ngithub.com/keybase/go-keychain v0.0.1/go.mod h1:PdEILRW3i9D8JcdM+FmY6RwkHGnhHxXwkPPMeUgOK1k=\ngithub.com/klauspost/compress v1.18.4 h1:RPhnKRAQ4Fh8zU2FY/6ZFDwTVTxgJ/EMydqSTzE9a2c=\ngithub.com/klauspost/compress v1.18.4/go.mod h1:R0h/fSBs8DE4ENlcrlib3PsXS61voFxhIs2DeRhCvJ4=\ngithub.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=\ngithub.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=\ngithub.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=\ngithub.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=\ngithub.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=\ngithub.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=\ngithub.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=\ngithub.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=\ngithub.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=\ngithub.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=\ngithub.com/lithammer/shortuuid/v4 v4.2.0 h1:LMFOzVB3996a7b8aBuEXxqOBflbfPQAiVzkIcHO0h8c=\ngithub.com/lithammer/shortuuid/v4 v4.2.0/go.mod h1:D5noHZ2oFw/YaKCfGy0YxyE7M0wMbezmMjPdhyEFe6Y=\ngithub.com/lufia/plan9stats v0.0.0-20260216142805-b3301c5f2a88 h1:PTw+yKnXcOFCR6+8hHTyWBeQ/P4Nb7dd4/0ohEcWQuM=\ngithub.com/lufia/plan9stats v0.0.0-20260216142805-b3301c5f2a88/go.mod h1:autxFIvghDt3jPTLoqZ9OZ7s9qTGNAWmYCjVFWPX/zg=\ngithub.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc=\ngithub.com/mattn/go-colorable v0.1.12/go.mod h1:u5H1YNBxpqRaxsYJYSkiCWKzEfiAb1Gb520KVy5xxl4=\ngithub.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=\ngithub.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=\ngithub.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=\ngithub.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU=\ngithub.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=\ngithub.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=\ngithub.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=\ngithub.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=\ngithub.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=\ngithub.com/mattn/go-sqlite3 v1.14.37 h1:3DOZp4cXis1cUIpCfXLtmlGolNLp2VEqhiB/PARNBIg=\ngithub.com/mattn/go-sqlite3 v1.14.37/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=\ngithub.com/mhale/smtpd v0.8.3 h1:8j8YNXajksoSLZja3HdwvYVZPuJSqAxFsib3adzRRt8=\ngithub.com/mhale/smtpd v0.8.3/go.mod h1:MQl+y2hwIEQCXtNhe5+55n0GZOjSmeqORDIXbqUL3x4=\ngithub.com/miekg/dns v1.1.72 h1:vhmr+TF2A3tuoGNkLDFK9zi36F2LS+hKTRW0Uf8kbzI=\ngithub.com/miekg/dns v1.1.72/go.mod h1:+EuEPhdHOsfk6Wk5TT2CzssZdqkmFhf8r+aVyDEToIs=\ngithub.com/minio/sio v0.4.3 h1:JqyID1XM86KwBZox5RAdLD4MLPIDoCY2cke2CXCJCkg=\ngithub.com/minio/sio v0.4.3/go.mod h1:4ANoe4CCXqnt1FCiLM0+vlBUhhWZzVOhYCz0069KtFc=\ngithub.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=\ngithub.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=\ngithub.com/oklog/run v1.2.0 h1:O8x3yXwah4A73hJdlrwo/2X6J62gE5qTMusH0dvz60E=\ngithub.com/oklog/run v1.2.0/go.mod h1:mgDbKRSwPhJfesJ4PntqFUbKQRZ50NgmZTSPlFA0YFk=\ngithub.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=\ngithub.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=\ngithub.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=\ngithub.com/otiai10/mint v1.6.3/go.mod h1:MJm72SBthJjz8qhefc4z1PYEieWmy8Bku7CjcAqyUSM=\ngithub.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=\ngithub.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=\ngithub.com/pires/go-proxyproto v0.11.0 h1:gUQpS85X/VJMdUsYyEgyn59uLJvGqPhJV5YvG68wXH4=\ngithub.com/pires/go-proxyproto v0.11.0/go.mod h1:ZKAAyp3cgy5Y5Mo4n9AlScrkCZwUy0g3Jf+slqQVcuU=\ngithub.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=\ngithub.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c/go.mod h1:7rwL4CYBLnjLxUqIJNnCWiEdr3bn6IUYi15bNlnbCCU=\ngithub.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=\ngithub.com/pkg/sftp v1.13.10 h1:+5FbKNTe5Z9aspU88DPIKJ9z2KZoaGCu6Sr6kKR/5mU=\ngithub.com/pkg/sftp v1.13.10/go.mod h1:bJ1a7uDhrX/4OII+agvy28lzRvQrmIQuaHrcI1HbeGA=\ngithub.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo=\ngithub.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10/go.mod h1:t/avpk3KcrXxUnYOhZhMXJlSEyie6gQbtLq5NM3loB8=\ngithub.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=\ngithub.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=\ngithub.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=\ngithub.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 h1:o4JXh1EVt9k/+g42oCprj/FisM4qX9L3sZB3upGN2ZU=\ngithub.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE=\ngithub.com/pquerna/otp v1.5.0 h1:NMMR+WrmaqXU4EzdGJEE1aUUI0AMRzsp96fFFWNPwxs=\ngithub.com/pquerna/otp v1.5.0/go.mod h1:dkJfzwRKNiegxyNb54X/3fLwhCynbMspSyWKnvi1AEg=\ngithub.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=\ngithub.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=\ngithub.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=\ngithub.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=\ngithub.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4=\ngithub.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=\ngithub.com/prometheus/procfs v0.20.1 h1:XwbrGOIplXW/AU3YhIhLODXMJYyC1isLFfYCsTEycfc=\ngithub.com/prometheus/procfs v0.20.1/go.mod h1:o9EMBZGRyvDrSPH1RqdxhojkuXstoe4UlK79eF5TGGo=\ngithub.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=\ngithub.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=\ngithub.com/rs/cors v1.11.1 h1:eU3gRzXLRK57F5rKMGMZURNdIG4EoAmX8k94r9wXWHA=\ngithub.com/rs/cors v1.11.1/go.mod h1:XyqrcTp5zjWr1wsJ8PIRZssZ8b/WMcMf71DJnit4EMU=\ngithub.com/rs/xid v1.6.0 h1:fV591PaemRlL6JfRxGDEPl69wICngIQ3shQtzfy2gxU=\ngithub.com/rs/xid v1.6.0/go.mod h1:7XoLgs4eV+QndskICGsho+ADou8ySMSjJKDIan90Nz0=\ngithub.com/rs/zerolog v1.34.0 h1:k43nTLIwcTVQAncfCw4KZ2VY6ukYoZaBPNOE8txlOeY=\ngithub.com/rs/zerolog v1.34.0/go.mod h1:bJsvje4Z08ROH4Nhs5iH600c3IkWhwp44iRc54W6wYQ=\ngithub.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=\ngithub.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=\ngithub.com/sagikazarmark/locafero v0.12.0 h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4=\ngithub.com/sagikazarmark/locafero v0.12.0/go.mod h1:sZh36u/YSZ918v0Io+U9ogLYQJ9tLLBmM4eneO6WwsI=\ngithub.com/secsy/goftp v0.0.0-20200609142545-aa2de14babf4 h1:PT+ElG/UUFMfqy5HrxJxNzj3QBOf7dZwupeVC+mG1Lo=\ngithub.com/secsy/goftp v0.0.0-20200609142545-aa2de14babf4/go.mod h1:MnkX001NG75g3p8bhFycnyIjeQoOjGL6CEIsdE/nKSY=\ngithub.com/sftpgo/sdk v0.1.9 h1:onBWfibCt34xHeKC2KFYPZ1DBqXGl9um/cAw+AVdgzY=\ngithub.com/sftpgo/sdk v0.1.9/go.mod h1:ehimvlTP+XTEiE3t1CPwWx9n7+6A6OGvMGlZ7ouvKFk=\ngithub.com/shirou/gopsutil/v3 v3.24.5 h1:i0t8kL+kQTvpAYToeuiVk3TgDeKOFioZO3Ztz/iZ9pI=\ngithub.com/shirou/gopsutil/v3 v3.24.5/go.mod h1:bsoOS1aStSs9ErQ1WWfxllSeS1K5D+U30r2NfcubMVk=\ngithub.com/shoenig/go-m1cpu v0.2.1 h1:yqRB4fvOge2+FyRXFkXqsyMoqPazv14Yyy+iyccT2E4=\ngithub.com/shoenig/go-m1cpu v0.2.1/go.mod h1:KkDOw6m3ZJQAPHbrzkZki4hnx+pDRR1Lo+ldA56wD5w=\ngithub.com/shoenig/test v1.7.0 h1:eWcHtTXa6QLnBvm0jgEabMRN/uJ4DMV3M8xUGgRkZmk=\ngithub.com/shoenig/test v1.7.0/go.mod h1:UxJ6u/x2v/TNs/LoLxBNJRV9DiwBBKYxXSyczsBHFoI=\ngithub.com/spf13/afero v1.15.0 h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I=\ngithub.com/spf13/afero v1.15.0/go.mod h1:NC2ByUVxtQs4b3sIUphxK0NioZnmxgyCrfzeuq8lxMg=\ngithub.com/spf13/cast v1.10.0 h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=\ngithub.com/spf13/cast v1.10.0/go.mod h1:jNfB8QC9IA6ZuY2ZjDp0KtFO2LZZlg4S/7bzP6qqeHo=\ngithub.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=\ngithub.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=\ngithub.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=\ngithub.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=\ngithub.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=\ngithub.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=\ngithub.com/spiffe/go-spiffe/v2 v2.6.0 h1:l+DolpxNWYgruGQVV0xsfeya3CsC7m8iBzDnMpsbLuo=\ngithub.com/spiffe/go-spiffe/v2 v2.6.0/go.mod h1:gm2SeUoMZEtpnzPNs2Csc0D/gX33k1xIx7lEzqblHEs=\ngithub.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=\ngithub.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=\ngithub.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=\ngithub.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=\ngithub.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals=\ngithub.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=\ngithub.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=\ngithub.com/studio-b12/gowebdav v0.12.0 h1:kFRtQECt8jmVAvA6RHBz3geXUGJHUZA6/IKpOVUs5kM=\ngithub.com/studio-b12/gowebdav v0.12.0/go.mod h1:bHA7t77X/QFExdeAnDzK6vKM34kEZAcE1OX4MfiwjkE=\ngithub.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=\ngithub.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=\ngithub.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA=\ngithub.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI=\ngithub.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw=\ngithub.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ=\ngithub.com/unrolled/secure v1.17.0 h1:Io7ifFgo99Bnh0J7+Q+qcMzWM6kaDPCA5FroFZEdbWU=\ngithub.com/unrolled/secure v1.17.0/go.mod h1:BmF5hyM6tXczk3MpQkFf1hpKSRqCyhqcbiQtiAF7+40=\ngithub.com/wagslane/go-password-validator v0.3.0 h1:vfxOPzGHkz5S146HDpavl0cw1DSVP061Ry2PX0/ON6I=\ngithub.com/wagslane/go-password-validator v0.3.0/go.mod h1:TI1XJ6T5fRdRnHqHt14pvy1tNVnrwe7m3/f1f2fDphQ=\ngithub.com/wneessen/go-mail v0.7.2 h1:xxPnhZ6IZLSgxShebmZ6DPKh1b6OJcoHfzy7UjOkzS8=\ngithub.com/wneessen/go-mail v0.7.2/go.mod h1:+TkW6QP3EVkgTEqHtVmnAE/1MRhmzb8Y9/W3pweuS+k=\ngithub.com/yl2chen/cidranger v1.0.3-0.20210928021809-d1cb2c52f37a h1:XfF01GyP+0eWCaVp0y6rNN+kFp7pt9Da4UUYrJ5XPWA=\ngithub.com/yl2chen/cidranger v1.0.3-0.20210928021809-d1cb2c52f37a/go.mod h1:aXb8yZQEWo1XHGMf1qQfnb83GR/EJ2EBlwtUgAaNBoE=\ngithub.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=\ngithub.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0=\ngithub.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=\ngo.etcd.io/bbolt v1.4.3 h1:dEadXpI6G79deX5prL3QRNP6JB8UxVkqo4UPnHaNXJo=\ngo.etcd.io/bbolt v1.4.3/go.mod h1:tKQlpPaYCVFctUIgFKFnAlvbmB3tpy1vkTnDWohtc0E=\ngo.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=\ngo.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=\ngo.opentelemetry.io/contrib/detectors/gcp v1.42.0 h1:kpt2PEJuOuqYkPcktfJqWWDjTEd/FNgrxcniL7kQrXQ=\ngo.opentelemetry.io/contrib/detectors/gcp v1.42.0/go.mod h1:W9zQ439utxymRrXsUOzZbFX4JhLxXU4+ZnCt8GG7yA8=\ngo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 h1:yI1/OhfEPy7J9eoa6Sj051C7n5dvpj0QX8g4sRchg04=\ngo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0/go.mod h1:NoUCKYWK+3ecatC4HjkRktREheMeEtrXoQxrqYFeHSc=\ngo.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 h1:OyrsyzuttWTSur2qN/Lm0m2a8yqyIjUVBZcxFPuXq2o=\ngo.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0/go.mod h1:C2NGBr+kAB4bk3xtMXfZ94gqFDtg/GkI7e9zqGh5Beg=\ngo.opentelemetry.io/otel v1.42.0 h1:lSQGzTgVR3+sgJDAU/7/ZMjN9Z+vUip7leaqBKy4sho=\ngo.opentelemetry.io/otel v1.42.0/go.mod h1:lJNsdRMxCUIWuMlVJWzecSMuNjE7dOYyWlqOXWkdqCc=\ngo.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 h1:5gn2urDL/FBnK8OkCfD1j3/ER79rUuTYmCvlXBKeYL8=\ngo.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0/go.mod h1:0fBG6ZJxhqByfFZDwSwpZGzJU671HkwpWaNe2t4VUPI=\ngo.opentelemetry.io/otel/metric v1.42.0 h1:2jXG+3oZLNXEPfNmnpxKDeZsFI5o4J+nz6xUlaFdF/4=\ngo.opentelemetry.io/otel/metric v1.42.0/go.mod h1:RlUN/7vTU7Ao/diDkEpQpnz3/92J9ko05BIwxYa2SSI=\ngo.opentelemetry.io/otel/sdk v1.42.0 h1:LyC8+jqk6UJwdrI/8VydAq/hvkFKNHZVIWuslJXYsDo=\ngo.opentelemetry.io/otel/sdk v1.42.0/go.mod h1:rGHCAxd9DAph0joO4W6OPwxjNTYWghRWmkHuGbayMts=\ngo.opentelemetry.io/otel/sdk/metric v1.42.0 h1:D/1QR46Clz6ajyZ3G8SgNlTJKBdGp84q9RKCAZ3YGuA=\ngo.opentelemetry.io/otel/sdk/metric v1.42.0/go.mod h1:Ua6AAlDKdZ7tdvaQKfSmnFTdHx37+J4ba8MwVCYM5hc=\ngo.opentelemetry.io/otel/trace v1.42.0 h1:OUCgIPt+mzOnaUTpOQcBiM/PLQ/Op7oq6g4LenLmOYY=\ngo.opentelemetry.io/otel/trace v1.42.0/go.mod h1:f3K9S+IFqnumBkKhRJMeaZeNk9epyhnCmQh/EysQCdc=\ngo.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=\ngo.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=\ngo.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=\ngo.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=\ngo.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=\ngo.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=\ngocloud.dev v0.45.0 h1:WknIK8IbRdmynDvara3Q7G6wQhmEiOGwpgJufbM39sY=\ngocloud.dev v0.45.0/go.mod h1:0kXKmkCLG6d31N7NyLZWzt7jDSQura9zD/mWgiB6THI=\ngolang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=\ngolang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=\ngolang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=\ngolang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=\ngolang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=\ngolang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=\ngolang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=\ngolang.org/x/mod v0.34.0 h1:xIHgNUUnW6sYkcM5Jleh05DvLOtwc6RitGHbDk4akRI=\ngolang.org/x/mod v0.34.0/go.mod h1:ykgH52iCZe79kzLLMhyCUzhMci+nQj+0XkbXpNYtVjY=\ngolang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=\ngolang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=\ngolang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=\ngolang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=\ngolang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=\ngolang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=\ngolang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=\ngolang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=\ngolang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=\ngolang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=\ngolang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=\ngolang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=\ngolang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=\ngolang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=\ngolang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=\ngolang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20201204225414-ed752295db88/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=\ngolang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=\ngolang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=\ngolang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=\ngolang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=\ngolang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=\ngolang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=\ngolang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=\ngolang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=\ngolang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=\ngolang.org/x/term v0.41.0/go.mod h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=\ngolang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=\ngolang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=\ngolang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=\ngolang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=\ngolang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=\ngolang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=\ngolang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=\ngolang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=\ngolang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=\ngolang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=\ngolang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=\ngolang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=\ngolang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=\ngolang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=\ngolang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=\ngolang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=\ngolang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=\ngolang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY=\ngolang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=\ngonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=\ngonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=\ngoogle.golang.org/api v0.272.0 h1:eLUQZGnAS3OHn31URRf9sAmRk3w2JjMx37d2k8AjJmA=\ngoogle.golang.org/api v0.272.0/go.mod h1:wKjowi5LNJc5qarNvDCvNQBn3rVK8nSy6jg2SwRwzIA=\ngoogle.golang.org/genproto v0.0.0-20260319171110-e3a33c96fb44 h1:5F2rCQQSavqKBEvXvkLt9Lc61ldIzythnt3+ucqJWG8=\ngoogle.golang.org/genproto v0.0.0-20260319171110-e3a33c96fb44/go.mod h1:L43LFes82YgSonw6iTXTxXUX1OlULt4AQtkik4ULL/I=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260319171110-e3a33c96fb44 h1:3r0atjZtaSjEuUu8NNhKvvnFh8ad9PHWsN9VRotabFU=\ngoogle.golang.org/genproto/googleapis/api v0.0.0-20260319171110-e3a33c96fb44/go.mod h1:EIQZ5bFCfRQDV4MhRle7+OgjNtZ6P1PiZBgAKuxXu/Y=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260319171110-e3a33c96fb44 h1:sRy++txmErSjyVWlIgQB5nB+U75+Di+AH7eEZ002B/s=\ngoogle.golang.org/genproto/googleapis/rpc v0.0.0-20260319171110-e3a33c96fb44/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=\ngoogle.golang.org/grpc v1.79.3 h1:sybAEdRIEtvcD68Gx7dmnwjZKlyfuc61Dyo9pGXXkKE=\ngoogle.golang.org/grpc v1.79.3/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=\ngoogle.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=\ngoogle.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=\ngopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=\ngopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=\ngopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=\ngopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc=\ngopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc=\ngopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=\ngopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\ngopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=\ngopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=\n"
},
{
"path": "init/com.github.drakkan.sftpgo.plist",
"content": "\n\n\n\n Label \n com.github.drakkan.sftpgo \n EnvironmentVariables \n \n SFTPGO_CONFIG_DIR \n /usr/local/opt/sftpgo/etc \n SFTPGO_LOG_FILE_PATH \n /usr/local/opt/sftpgo/var/log/sftpgo.log \n SFTPGO_HTTPD__TEMPLATES_PATH \n /usr/local/opt/sftpgo/usr/share/templates \n SFTPGO_HTTPD__STATIC_FILES_PATH \n /usr/local/opt/sftpgo/usr/share/static \n SFTPGO_HTTPD__OPENAPI_PATH \n /usr/local/opt/sftpgo/usr/share/openapi \n SFTPGO_HTTPD__BACKUPS_PATH \n /usr/local/opt/sftpgo/var/lib/backups \n SFTPGO_DATA_PROVIDER__CREDENTIALS_PATH \n /usr/local/opt/sftpgo/var/lib/credentials \n \n WorkingDirectory \n /usr/local/opt/sftpgo/etc \n ProgramArguments \n \n /usr/local/opt/sftpgo/bin/sftpgo \n serve \n \n KeepAlive \n ThrottleInterval \n 10 \n \n \n"
},
{
"path": "init/sftpgo.service",
"content": "[Unit]\nDescription=SFTPGo Server\nAfter=network.target\n\n[Service]\nUser=sftpgo\nGroup=sftpgo\nType=simple\nWorkingDirectory=/etc/sftpgo\nRuntimeDirectory=sftpgo\nEnvironment=SFTPGO_CONFIG_DIR=/etc/sftpgo/\nEnvironment=SFTPGO_LOG_FILE_PATH=\nEnvironmentFile=-/etc/sftpgo/sftpgo.env\nExecStart=/usr/bin/sftpgo serve\nExecReload=/bin/kill -s HUP $MAINPID\nLimitNOFILE=8192\nKillMode=mixed\nPrivateTmp=true\nRestart=always\nRestartSec=10s\nNoNewPrivileges=yes\nPrivateDevices=yes\nDevicePolicy=closed\nProtectSystem=true\nRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX\nAmbientCapabilities=CAP_NET_BIND_SERVICE\n\n[Install]\nWantedBy=multi-user.target\n"
},
{
"path": "internal/acme/account.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see Fs path {{.FsPath}}, Name: {{.Name}}, Target path \"{{.VirtualTargetDirPath}}/{{.TargetName}}\", size: {{.FileSize}}
`,\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr1 := dataprovider.EventRule{\n\t\tName: \"test rename rule\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerFsEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tFsEvents: []string{\"rename\"},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t},\n\t}\n\trule1, _, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tu := getTestUser()\n\tu.Username = \"test & chars\"\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\ttestFileSize := int64(32768)\n\t\tlastReceivedEmail.reset()\n\t\terr = writeSFTPFileNoCheck(testFileName, testFileSize, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Mkdir(\"subdir\")\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testFileName, path.Join(\"/subdir\", testFileName))\n\t\tassert.NoError(t, err)\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.True(t, slices.Contains(email.To, \"test@example.com\"))\n\t\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"rename\" from \"%s\"`, user.Username))\n\t\tassert.Contains(t, email.Data, \"Content-Type: text/html\")\n\t\tassert.Contains(t, email.Data, fmt.Sprintf(\"Target path %q\", path.Join(\"/subdir\", testFileName)))\n\t\tassert.Contains(t, email.Data, \"Name: test & chars,\")\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRuleIDPLogin(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notify@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\tlastReceivedEmail.reset()\n\n\tusername := `test_'idp_'login`\n\tcustom1 := `cust\"oa\"1`\n\tu := map[string]any{\n\t\t\"username\": \"{{.Name}}\",\n\t\t\"status\": 1,\n\t\t\"home_dir\": filepath.Join(os.TempDir(), \"{{.IDPFieldcustom1}}\"),\n\t\t\"permissions\": map[string][]string{\n\t\t\t\"/\": {dataprovider.PermAny},\n\t\t},\n\t}\n\tuserTmpl, err := json.Marshal(u)\n\trequire.NoError(t, err)\n\ta := map[string]any{\n\t\t\"username\": \"{{.Name}}\",\n\t\t\"status\": 1,\n\t\t\"permissions\": []string{dataprovider.PermAdminAny},\n\t}\n\tadminTmpl, err := json.Marshal(a)\n\trequire.NoError(t, err)\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"a1\",\n\t\tType: dataprovider.ActionTypeIDPAccountCheck,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tIDPConfig: dataprovider.EventActionIDPAccountCheck{\n\t\t\t\tMode: 1, // create if not exists\n\t\t\t\tTemplateUser: string(userTmpl),\n\t\t\t\tTemplateAdmin: string(adminTmpl),\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"a2\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"test@example.com\"},\n\t\t\t\tSubject: `\"{{.Event}} {{.StatusString}}\"`,\n\t\t\t\tBody: \"{{.Name}} Custom field: {{.IDPFieldcustom1}}\",\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr1 := dataprovider.EventRule{\n\t\tName: \"test rule IDP login\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerIDPLogin,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tIDPLoginEvent: dataprovider.IDPLoginUser,\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name, // the rule is not sync and will be skipped\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t},\n\t}\n\trule1, resp, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\n\tcustomFields := map[string]any{\n\t\t\"custom1\": custom1,\n\t}\n\tuser, admin, err := common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginUser,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tassert.Nil(t, admin)\n\tassert.NoError(t, err)\n\n\trule1.Actions[0].Options.ExecuteSync = true\n\trule1, resp, err = httpdtest.UpdateEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err, string(resp))\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginUser,\n\t\tStatus: 1,\n\t}, &customFields)\n\tif assert.NotNil(t, user) {\n\t\tassert.Equal(t, filepath.Join(os.TempDir(), custom1), user.GetHomeDir())\n\t\t_, err = httpdtest.RemoveUser(*user, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t}\n\tassert.Nil(t, admin)\n\tassert.NoError(t, err)\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail := lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"test@example.com\"))\n\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"%s OK\"`, common.IDPLoginUser))\n\tassert.Contains(t, email.Data, username)\n\tassert.Contains(t, email.Data, custom1)\n\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tassert.Nil(t, admin)\n\tassert.NoError(t, err)\n\n\trule1.Conditions.IDPLoginEvent = dataprovider.IDPLoginAny\n\trule1.Actions = []dataprovider.EventAction{\n\t\t{\n\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\tName: action1.Name,\n\t\t\t},\n\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\tExecuteSync: true,\n\t\t\t},\n\t\t\tOrder: 1,\n\t\t},\n\t}\n\trule1, _, err = httpdtest.UpdateEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tr2 := dataprovider.EventRule{\n\t\tName: \"test email on IDP login\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerIDPLogin,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tIDPLoginEvent: dataprovider.IDPLoginAdmin,\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t},\n\t}\n\trule2, resp, err := httpdtest.AddEventRule(r2, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\n\tlastReceivedEmail.reset()\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tif assert.NotNil(t, admin) {\n\t\tassert.Equal(t, 1, admin.Status)\n\t}\n\tassert.NoError(t, err)\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail = lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"test@example.com\"))\n\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"%s OK\"`, common.IDPLoginAdmin))\n\tassert.Contains(t, email.Data, username)\n\tassert.Contains(t, email.Data, custom1)\n\tadmin.Status = 0\n\t_, _, err = httpdtest.UpdateAdmin(*admin, http.StatusOK)\n\tassert.NoError(t, err)\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tif assert.NotNil(t, admin) {\n\t\tassert.Equal(t, 0, admin.Status)\n\t}\n\tassert.NoError(t, err)\n\taction1.Options.IDPConfig.Mode = 0\n\taction1, _, err = httpdtest.UpdateEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tif assert.NotNil(t, admin) {\n\t\tassert.Equal(t, 1, admin.Status)\n\t}\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveAdmin(*admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tr3 := dataprovider.EventRule{\n\t\tName: \"test rule2 IDP login\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerIDPLogin,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tIDPLoginEvent: dataprovider.IDPLoginAny,\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\t\tExecuteSync: true,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\trule3, resp, err := httpdtest.AddEventRule(r3, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tassert.Nil(t, admin)\n\tif assert.Error(t, err) {\n\t\tassert.Contains(t, err.Error(), \"more than one account check action rules matches\")\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule3, http.StatusOK)\n\tassert.NoError(t, err)\n\n\taction1.Options.IDPConfig.TemplateAdmin = `{}`\n\taction1, _, err = httpdtest.UpdateEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, _, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.ErrorIs(t, err, util.ErrValidation)\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tuser, admin, err = common.HandleIDPLoginEvent(common.EventParams{\n\t\tName: username,\n\t\tEvent: common.IDPLoginAdmin,\n\t\tStatus: 1,\n\t}, &customFields)\n\tassert.Nil(t, user)\n\tassert.Nil(t, admin)\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveEventRule(rule2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRuleEmailField(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notify@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\tlastReceivedEmail.reset()\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"action1\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"{{.Email}}\"},\n\t\t\t\tSubject: `\"{{.Event}}\" from \"{{.Name}}\"`,\n\t\t\t\tBody: \"Sample email body\",\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"action2\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"failure@example.com\"},\n\t\t\t\tSubject: `\"Failure`,\n\t\t\t\tBody: \"{{.ErrorString}}\",\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr1 := dataprovider.EventRule{\n\t\tName: \"r1\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerFsEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tFsEvents: []string{\"mkdir\"},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\tr2 := dataprovider.EventRule{\n\t\tName: \"test rule2\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerProviderEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tProviderEvents: []string{\"add\"},\n\t\t\tOptions: dataprovider.ConditionOptions{\n\t\t\t\tProviderObjects: []string{\"user\"},\n\t\t\t},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\t\tIsFailureAction: true,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\trule1, _, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err)\n\trule2, _, err := httpdtest.AddEventRule(r2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu := getTestUser()\n\tu.Email = \"user@example.com\"\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail := lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, user.Email))\n\tassert.Contains(t, email.Data, `Subject: \"add\" from \"admin\"`)\n\n\t// if we add a user without email the notification will fail\n\tlastReceivedEmail.reset()\n\tu1 := getTestUser()\n\tu1.Username += \"_1\"\n\tuser1, _, err := httpdtest.AddUser(u1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail = lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"failure@example.com\"))\n\tassert.Contains(t, email.Data, `no recipient addresses set`)\n\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr = client.Mkdir(testFileName)\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.True(t, slices.Contains(email.To, user.Email))\n\t\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"mkdir\" from \"%s\"`, user.Username))\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventRule(rule2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRuleCertificate(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notify@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\tlastReceivedEmail.reset()\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"action1\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"test@example.com\"},\n\t\t\t\tSubject: `\"{{.Event}} {{.StatusString}}\"`,\n\t\t\t\tContentType: 0,\n\t\t\t\tBody: \"Domain: {{.Name}} Timestamp: {{.Timestamp}} {{.ErrorString}} Date time: {{.DateTime}}\",\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"action2\",\n\t\tType: dataprovider.ActionTypeFolderQuotaReset,\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tr1 := dataprovider.EventRule{\n\t\tName: \"test rule certificate\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerCertificate,\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t},\n\t}\n\trule1, _, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr2 := dataprovider.EventRule{\n\t\tName: \"test rule 2\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerCertificate,\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t},\n\t}\n\trule2, _, err := httpdtest.AddEventRule(r2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\trenewalEvent := \"Certificate renewal\"\n\n\tcommon.HandleCertificateEvent(common.EventParams{\n\t\tName: \"example.com\",\n\t\tTimestamp: time.Now(),\n\t\tStatus: 1,\n\t\tEvent: renewalEvent,\n\t})\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail := lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"test@example.com\"))\n\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"%s OK\"`, renewalEvent))\n\tassert.Contains(t, email.Data, \"Content-Type: text/plain\")\n\tassert.Contains(t, email.Data, `Domain: example.com Timestamp`)\n\n\tlastReceivedEmail.reset()\n\tdateTime := time.Now()\n\tparams := common.EventParams{\n\t\tName: \"example.com\",\n\t\tTimestamp: dateTime,\n\t\tStatus: 2,\n\t\tEvent: renewalEvent,\n\t}\n\terrRenew := errors.New(\"generic renew error\")\n\tparams.AddError(errRenew)\n\tcommon.HandleCertificateEvent(params)\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail = lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"test@example.com\"))\n\tassert.Contains(t, email.Data, fmt.Sprintf(`Subject: \"%s KO\"`, renewalEvent))\n\tassert.Contains(t, email.Data, `Domain: example.com Timestamp`)\n\tassert.Contains(t, email.Data, dateTime.UTC().Format(\"2006-01-02T15:04:05.000\"))\n\tassert.Contains(t, email.Data, errRenew.Error())\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventRule(rule2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t// ignored no more certificate rules\n\tcommon.HandleCertificateEvent(common.EventParams{\n\t\tName: \"example.com\",\n\t\tTimestamp: time.Now(),\n\t\tStatus: 1,\n\t\tEvent: renewalEvent,\n\t})\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRuleIPBlocked(t *testing.T) {\n\toldConfig := config.GetCommonConfig()\n\n\tcfg := config.GetCommonConfig()\n\tcfg.DefenderConfig.Enabled = true\n\tcfg.DefenderConfig.Threshold = 3\n\tcfg.DefenderConfig.ScoreLimitExceeded = 2\n\n\terr := common.Initialize(cfg, 0)\n\tassert.NoError(t, err)\n\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"action1\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"test3@example.com\", \"test4@example.com\"},\n\t\t\t\tSubject: `New \"{{.Event}}\"`,\n\t\t\t\tBody: \"IP: {{.IP}} Timestamp: {{.Timestamp}}\",\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"action2\",\n\t\tType: dataprovider.ActionTypeFolderQuotaReset,\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tr1 := dataprovider.EventRule{\n\t\tName: \"test rule ip blocked\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerIPBlocked,\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t},\n\t}\n\trule1, _, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr2 := dataprovider.EventRule{\n\t\tName: \"test rule 2\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerIPBlocked,\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t},\n\t}\n\trule2, _, err := httpdtest.AddEventRule(r2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tlastReceivedEmail.reset()\n\ttime.Sleep(300 * time.Millisecond)\n\tassert.Empty(t, lastReceivedEmail.get().From, lastReceivedEmail.get().Data)\n\n\tfor i := 0; i < 3; i++ {\n\t\tuser.Password = \"wrong_pwd\"\n\t\t_, _, err = getSftpClient(user)\n\t\tassert.Error(t, err)\n\t}\n\t// the client is now banned\n\tuser.Password = defaultPassword\n\t_, _, err = getSftpClient(user)\n\tassert.Error(t, err)\n\t// check the email notification\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail := lastReceivedEmail.get()\n\tassert.Len(t, email.To, 2)\n\tassert.True(t, slices.Contains(email.To, \"test3@example.com\"))\n\tassert.True(t, slices.Contains(email.To, \"test4@example.com\"))\n\tassert.Contains(t, email.Data, `Subject: New \"IP Blocked\"`)\n\n\terr = dataprovider.DeleteEventRule(rule1.Name, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\terr = dataprovider.DeleteEventRule(rule2.Name, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\terr = dataprovider.DeleteEventAction(action1.Name, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\terr = dataprovider.DeleteEventAction(action2.Name, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\terr = dataprovider.DeleteUser(user.Username, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\terr = common.Initialize(oldConfig, 0)\n\tassert.NoError(t, err)\n}\n\nfunc TestEventRuleRotateLog(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"a1\",\n\t\tType: dataprovider.ActionTypeRotateLogs,\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"a2\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"success@example.net\"},\n\t\t\t\tSubject: `OK`,\n\t\t\t\tBody: \"OK action\",\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tr1 := dataprovider.EventRule{\n\t\tName: \"rule1\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerFsEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tFsEvents: []string{\"mkdir\"},\n\t\t\tOptions: dataprovider.ConditionOptions{\n\t\t\t\tNames: []dataprovider.ConditionPattern{\n\t\t\t\t\t{\n\t\t\t\t\t\tPattern: user.Username,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t},\n\t}\n\trule1, resp, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(\"just a test dir\")\n\t\tassert.NoError(t, err)\n\t\t// just check that the action is executed\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.Contains(t, email.To, \"success@example.net\")\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRuleInactivityCheck(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"a1\",\n\t\tType: dataprovider.ActionTypeUserInactivityCheck,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tUserInactivityConfig: dataprovider.EventActionUserInactivity{\n\t\t\t\tDisableThreshold: 10,\n\t\t\t\tDeleteThreshold: 20,\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"a2\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"success@example.net\"},\n\t\t\t\tSubject: `OK`,\n\t\t\t\tBody: \"OK action\",\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tr1 := dataprovider.EventRule{\n\t\tName: \"rule1\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerFsEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tFsEvents: []string{\"mkdir\"},\n\t\t\tOptions: dataprovider.ConditionOptions{\n\t\t\t\tNames: []dataprovider.ConditionPattern{\n\t\t\t\t\t{\n\t\t\t\t\t\tPattern: user.Username,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t},\n\t}\n\trule1, resp, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(\"just a test dir\")\n\t\tassert.NoError(t, err)\n\t\t// just check that the action is executed\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.Contains(t, email.To, \"success@example.net\")\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestEventRulePasswordExpiration(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"a1\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"failure@example.net\"},\n\t\t\t\tSubject: `Failure`,\n\t\t\t\tBody: \"Failure action\",\n\t\t\t},\n\t\t},\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"a2\",\n\t\tType: dataprovider.ActionTypePasswordExpirationCheck,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tPwdExpirationConfig: dataprovider.EventActionPasswordExpiration{\n\t\t\t\tThreshold: 10,\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta3 := dataprovider.BaseEventAction{\n\t\tName: \"a3\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"success@example.net\"},\n\t\t\t\tSubject: `OK`,\n\t\t\t\tBody: \"OK action\",\n\t\t\t},\n\t\t},\n\t}\n\taction3, _, err := httpdtest.AddEventAction(a3, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tr1 := dataprovider.EventRule{\n\t\tName: \"rule1\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerFsEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tFsEvents: []string{\"mkdir\"},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action3.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\t\tIsFailureAction: true,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\trule1, resp, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tdirName := \"aTestDir\"\n\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(dirName)\n\t\tassert.NoError(t, err)\n\t\t// the user has no password expiration, the check will be skipped and the ok action executed\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.Contains(t, email.To, \"success@example.net\")\n\t\terr = client.RemoveDirectory(dirName)\n\t\tassert.NoError(t, err)\n\t}\n\tuser.Filters.PasswordExpiration = 20\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(dirName)\n\t\tassert.NoError(t, err)\n\t\t// the passowrd is not about to expire, the check will be skipped and the ok action executed\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.Contains(t, email.To, \"success@example.net\")\n\t\terr = client.RemoveDirectory(dirName)\n\t\tassert.NoError(t, err)\n\t}\n\tuser.Filters.PasswordExpiration = 5\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(dirName)\n\t\tassert.NoError(t, err)\n\t\t// the passowrd is about to expire, the user has no email, the failure action will be executed\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 1)\n\t\tassert.Contains(t, email.To, \"failure@example.net\")\n\t\terr = client.RemoveDirectory(dirName)\n\t\tassert.NoError(t, err)\n\t}\n\t// remove the success action\n\trule1.Actions = []dataprovider.EventAction{\n\t\t{\n\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\tName: action2.Name,\n\t\t\t},\n\t\t\tOrder: 1,\n\t\t},\n\t\t{\n\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\tName: action1.Name,\n\t\t\t},\n\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\tIsFailureAction: true,\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err = httpdtest.UpdateEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\tuser.Email = \"user@example.net\"\n\tuser.Filters.AdditionalEmails = []string{\"additional@example.net\"}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tlastReceivedEmail.reset()\n\t\terr := client.Mkdir(dirName)\n\t\tassert.NoError(t, err)\n\t\t// the passowrd expiration will be notified\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn lastReceivedEmail.get().From != \"\"\n\t\t}, 1500*time.Millisecond, 100*time.Millisecond)\n\t\temail := lastReceivedEmail.get()\n\t\tassert.Len(t, email.To, 2)\n\t\tassert.Contains(t, email.To, user.Email)\n\t\tassert.Contains(t, email.To, user.Filters.AdditionalEmails[0])\n\t\tassert.Contains(t, email.Data, \"your SFTPGo password expires in 5 days\")\n\t\terr = client.RemoveDirectory(dirName)\n\t\tassert.NoError(t, err)\n\t}\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action3, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestSyncUploadAction(t *testing.T) {\n\tif runtime.GOOS == osWindows {\n\t\tt.Skip(\"this test is not available on Windows\")\n\t}\n\tuploadScriptPath := filepath.Join(os.TempDir(), \"upload.sh\")\n\tcommon.Config.Actions.ExecuteOn = []string{\"upload\"}\n\tcommon.Config.Actions.ExecuteSync = []string{\"upload\"}\n\tcommon.Config.Actions.Hook = uploadScriptPath\n\n\tu := getTestUser()\n\tu.QuotaFiles = 1000\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tmovedFileName := \"moved.dat\"\n\tmovedPath := filepath.Join(user.HomeDir, movedFileName)\n\terr = os.WriteFile(uploadScriptPath, getUploadScriptContent(movedPath, \"\", 0), 0755)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tsize := int64(32768)\n\t\terr = writeSFTPFileNoCheck(testFileName, size, client)\n\t\tassert.NoError(t, err)\n\t\t_, err = client.Stat(testFileName)\n\t\tassert.Error(t, err)\n\t\tinfo, err := client.Stat(movedFileName)\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, size, info.Size())\n\t\t}\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 1, user.UsedQuotaFiles)\n\t\tassert.Equal(t, size, user.UsedQuotaSize)\n\t\t// test some hook failure\n\t\t// the uploaded file is moved and the hook fails, it will be not removed from the quota\n\t\terr = os.WriteFile(uploadScriptPath, getUploadScriptContent(movedPath, \"\", 1), 0755)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFileNoCheck(testFileName+\"_1\", size, client)\n\t\tassert.Error(t, err)\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 2, user.UsedQuotaFiles)\n\t\tassert.Equal(t, size*2, user.UsedQuotaSize)\n\n\t\t// the uploaded file is not moved and the hook fails, the uploaded file will be deleted\n\t\t// and removed from the quota\n\t\tmovedPath = filepath.Join(user.HomeDir, \"missing dir\", movedFileName)\n\t\terr = os.WriteFile(uploadScriptPath, getUploadScriptContent(movedPath, \"\", 1), 0755)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFileNoCheck(testFileName+\"_2\", size, client)\n\t\tassert.Error(t, err)\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 2, user.UsedQuotaFiles)\n\t\tassert.Equal(t, size*2, user.UsedQuotaSize)\n\t\t// overwrite an existing file\n\t\t_, err = client.Stat(movedFileName)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFileNoCheck(movedFileName, size, client)\n\t\tassert.Error(t, err)\n\t\t_, err = client.Stat(movedFileName)\n\t\tassert.Error(t, err)\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 1, user.UsedQuotaFiles)\n\t\tassert.Equal(t, size, user.UsedQuotaSize)\n\t}\n\n\terr = os.Remove(uploadScriptPath)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tcommon.Config.Actions.ExecuteOn = nil\n\tcommon.Config.Actions.ExecuteSync = nil\n\tcommon.Config.Actions.Hook = uploadScriptPath\n}\n\nfunc TestQuotaTrackDisabled(t *testing.T) {\n\terr := dataprovider.Close()\n\tassert.NoError(t, err)\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf := config.GetProviderConf()\n\tproviderConf.TrackQuota = 0\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 32, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testFileName, testFileName+\"1\")\n\t\tassert.NoError(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\terr = dataprovider.Close()\n\tassert.NoError(t, err)\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf = config.GetProviderConf()\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n}\n\nfunc TestGetQuotaError(t *testing.T) {\n\tif dataprovider.GetProviderStatus().Driver == \"memory\" {\n\t\tt.Skip(\"this test is not available with the memory provider\")\n\t}\n\tu := getTestUser()\n\tu.TotalDataTransfer = 2000\n\tmappedPath := filepath.Join(os.TempDir(), \"vdir\")\n\tfolderName := filepath.Base(mappedPath)\n\tvdirPath := \"/vpath\"\n\tf := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: mappedPath,\n\t}\n\t_, _, err := httpdtest.AddFolder(f, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName,\n\t\t},\n\t\tVirtualPath: vdirPath,\n\t\tQuotaSize: 0,\n\t\tQuotaFiles: 10,\n\t})\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 32, client)\n\t\tassert.NoError(t, err)\n\n\t\terr = dataprovider.Close()\n\t\tassert.NoError(t, err)\n\n\t\terr = client.Rename(testFileName, path.Join(vdirPath, testFileName))\n\t\tassert.Error(t, err)\n\n\t\terr = config.LoadConfig(configDir, \"\")\n\t\tassert.NoError(t, err)\n\t\tproviderConf := config.GetProviderConf()\n\t\terr = dataprovider.Initialize(providerConf, configDir, true)\n\t\tassert.NoError(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPath)\n\tassert.NoError(t, err)\n}\n\nfunc TestRetentionAPI(t *testing.T) {\n\tu := getTestUser()\n\tu.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload,\n\t\tdataprovider.PermOverwrite, dataprovider.PermDownload, dataprovider.PermCreateDirs,\n\t\tdataprovider.PermChtimes}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tuploadPath := path.Join(testDir, testFileName)\n\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(uploadPath, 32, client)\n\t\tassert.NoError(t, err)\n\n\t\tfolderRetention := []dataprovider.FolderRetention{\n\t\t\t{\n\t\t\t\tPath: \"/\",\n\t\t\t\tRetention: 24,\n\t\t\t\tDeleteEmptyDirs: true,\n\t\t\t},\n\t\t}\n\t\tcheck := common.RetentionCheck{\n\t\t\tFolders: folderRetention,\n\t\t}\n\t\tc := common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\t_, err = client.Stat(uploadPath)\n\t\tassert.NoError(t, err)\n\n\t\terr = client.Chtimes(uploadPath, time.Now().Add(-48*time.Hour), time.Now().Add(-48*time.Hour))\n\t\tassert.NoError(t, err)\n\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\t_, err = client.Stat(uploadPath)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\n\t\t_, err = client.Stat(testDir)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(uploadPath, 32, client)\n\t\tassert.NoError(t, err)\n\n\t\tcheck.Folders[0].DeleteEmptyDirs = false\n\t\terr = client.Chtimes(uploadPath, time.Now().Add(-48*time.Hour), time.Now().Add(-48*time.Hour))\n\t\tassert.NoError(t, err)\n\n\t\tc = common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\t_, err = client.Stat(uploadPath)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\n\t\t_, err = client.Stat(testDir)\n\t\tassert.NoError(t, err)\n\n\t\terr = writeSFTPFile(uploadPath, 32, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Chtimes(uploadPath, time.Now().Add(-48*time.Hour), time.Now().Add(-48*time.Hour))\n\t\tassert.NoError(t, err)\n\t\tconn.Close()\n\t\tclient.Close()\n\t}\n\n\t// remove delete permissions to the user, it will be automatically granted\n\tuser.Permissions[\"/\"+testDir] = []string{dataprovider.PermListItems, dataprovider.PermUpload,\n\t\tdataprovider.PermCreateDirs, dataprovider.PermChtimes}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tinnerUploadFilePath := path.Join(\"/\"+testDir, testDir, testFileName)\n\t\terr = client.Mkdir(path.Join(testDir, testDir))\n\t\tassert.NoError(t, err)\n\n\t\terr = writeSFTPFile(innerUploadFilePath, 32, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Chtimes(innerUploadFilePath, time.Now().Add(-48*time.Hour), time.Now().Add(-48*time.Hour))\n\t\tassert.NoError(t, err)\n\n\t\tfolderRetention := []dataprovider.FolderRetention{\n\t\t\t{\n\t\t\t\tPath: \"/missing\",\n\t\t\t\tRetention: 24,\n\t\t\t},\n\t\t\t{\n\t\t\t\tPath: \"/\" + testDir,\n\t\t\t\tRetention: 24,\n\t\t\t\tDeleteEmptyDirs: true,\n\t\t\t},\n\t\t\t{\n\t\t\t\tPath: path.Dir(innerUploadFilePath),\n\t\t\t\tRetention: 0,\n\t\t\t},\n\t\t}\n\t\tcheck := common.RetentionCheck{\n\t\t\tFolders: folderRetention,\n\t\t}\n\t\tc := common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\t_, err = client.Stat(uploadPath)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\t\t_, err = client.Stat(innerUploadFilePath)\n\t\tassert.NoError(t, err)\n\n\t\tfolderRetention = []dataprovider.FolderRetention{\n\n\t\t\t{\n\t\t\t\tPath: \"/\" + testDir,\n\t\t\t\tRetention: 24,\n\t\t\t\tDeleteEmptyDirs: true,\n\t\t\t},\n\t\t}\n\n\t\tcheck = common.RetentionCheck{\n\t\t\tFolders: folderRetention,\n\t\t}\n\t\tc = common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\t_, err = client.Stat(innerUploadFilePath)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\t\tconn.Close()\n\t\tclient.Close()\n\t}\n\t// finally test some errors removing files or folders\n\tif runtime.GOOS != osWindows {\n\t\tdirPath := filepath.Join(user.HomeDir, \"adir\", \"sub\")\n\t\terr := os.MkdirAll(dirPath, os.ModePerm)\n\t\tassert.NoError(t, err)\n\t\tfilePath := filepath.Join(dirPath, \"f.dat\")\n\t\terr = os.WriteFile(filePath, nil, os.ModePerm)\n\t\tassert.NoError(t, err)\n\n\t\terr = os.Chtimes(filePath, time.Now().Add(-72*time.Hour), time.Now().Add(-72*time.Hour))\n\t\tassert.NoError(t, err)\n\n\t\terr = os.Chmod(dirPath, 0001)\n\t\tassert.NoError(t, err)\n\n\t\tfolderRetention := []dataprovider.FolderRetention{\n\n\t\t\t{\n\t\t\t\tPath: \"/adir\",\n\t\t\t\tRetention: 24,\n\t\t\t\tDeleteEmptyDirs: true,\n\t\t\t},\n\t\t}\n\n\t\tcheck := common.RetentionCheck{\n\t\t\tFolders: folderRetention,\n\t\t}\n\t\tc := common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\terr = os.Chmod(dirPath, 0555)\n\t\tassert.NoError(t, err)\n\n\t\tc = common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\terr = os.Chmod(dirPath, os.ModePerm)\n\t\tassert.NoError(t, err)\n\n\t\tcheck = common.RetentionCheck{\n\t\t\tFolders: folderRetention,\n\t\t}\n\t\tc = common.RetentionChecks.Add(check, &user)\n\t\tassert.NotNil(t, c)\n\t\terr = c.Start()\n\t\tassert.NoError(t, err)\n\n\t\tassert.Eventually(t, func() bool {\n\t\t\treturn len(common.RetentionChecks.Get(\"\")) == 0\n\t\t}, 1000*time.Millisecond, 50*time.Millisecond)\n\n\t\tassert.NoDirExists(t, dirPath)\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tassert.Eventually(t, func() bool {\n\t\treturn common.Connections.GetClientConnections() == 0\n\t}, 1*time.Second, 50*time.Millisecond)\n}\n\nfunc TestPerUserTransferLimits(t *testing.T) {\n\toldMaxPerHostConns := common.Config.MaxPerHostConnections\n\n\tcommon.Config.MaxPerHostConnections = 2\n\n\tu := getTestUser()\n\tu.UploadBandwidth = 32\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tif !assert.NoError(t, err) {\n\t\tprintLatestLogs(20)\n\t}\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tvar wg sync.WaitGroup\n\t\tnumErrors := 0\n\t\tfor i := 0; i <= 2; i++ {\n\t\t\twg.Add(1)\n\t\t\tgo func(counter int) {\n\t\t\t\tdefer wg.Done()\n\n\t\t\t\ttime.Sleep(20 * time.Millisecond)\n\t\t\t\terr := writeSFTPFile(fmt.Sprintf(\"%s_%d\", testFileName, counter), 64*1024, client)\n\t\t\t\tif err != nil {\n\t\t\t\t\tnumErrors++\n\t\t\t\t}\n\t\t\t}(i)\n\t\t}\n\t\twg.Wait()\n\n\t\tassert.Equal(t, 1, numErrors)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tcommon.Config.MaxPerHostConnections = oldMaxPerHostConns\n}\n\nfunc TestMaxSessionsSameConnection(t *testing.T) {\n\tu := getTestUser()\n\tu.UploadBandwidth = 32\n\tu.MaxSessions = 2\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tvar wg sync.WaitGroup\n\t\tnumErrors := 0\n\t\tfor i := 0; i <= 2; i++ {\n\t\t\twg.Add(1)\n\t\t\tgo func(counter int) {\n\t\t\t\tdefer wg.Done()\n\n\t\t\t\tvar err error\n\t\t\t\tif counter < 2 {\n\t\t\t\t\terr = writeSFTPFile(fmt.Sprintf(\"%s_%d\", testFileName, counter), 64*1024, client)\n\t\t\t\t} else {\n\t\t\t\t\t// wait for the transfers to start\n\t\t\t\t\ttime.Sleep(50 * time.Millisecond)\n\t\t\t\t\t_, _, err = getSftpClient(user)\n\t\t\t\t}\n\t\t\t\tif err != nil {\n\t\t\t\t\tnumErrors++\n\t\t\t\t}\n\t\t\t}(i)\n\t\t}\n\n\t\twg.Wait()\n\t\tassert.Equal(t, 1, numErrors)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestRenameDir(t *testing.T) {\n\tu := getTestUser()\n\ttestDir := \"/dir-to-rename\"\n\tu.Permissions[testDir] = []string{dataprovider.PermListItems, dataprovider.PermUpload}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(testDir, testFileName), 32, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testDir, testDir+\"_rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestBuiltinKeyboardInteractiveAuthentication(t *testing.T) {\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tauthMethods := []ssh.AuthMethod{\n\t\tssh.KeyboardInteractive(func(_, _ string, _ []string, _ []bool) ([]string, error) {\n\t\t\treturn []string{defaultPassword}, nil\n\t\t}),\n\t}\n\tconn, client, err := getCustomAuthSftpClient(user, authMethods)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t}\n\t// add multi-factor authentication\n\tconfigName, key, _, err := mfa.GenerateTOTPSecret(mfa.GetAvailableTOTPConfigNames()[0], user.Username)\n\tassert.NoError(t, err)\n\tuser.Password = defaultPassword\n\tuser.Filters.TOTPConfig = dataprovider.UserTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: kms.NewPlainSecret(key.Secret()),\n\t\tProtocols: []string{common.ProtocolSSH},\n\t}\n\terr = dataprovider.UpdateUser(&user, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\tpasscode, err := generateTOTPPasscode(key.Secret(), otp.AlgorithmSHA1)\n\tassert.NoError(t, err)\n\tpasswordAsked := false\n\tpasscodeAsked := false\n\tauthMethods = []ssh.AuthMethod{\n\t\tssh.KeyboardInteractive(func(_, _ string, questions []string, _ []bool) ([]string, error) {\n\t\t\tvar answers []string\n\t\t\tif strings.HasPrefix(questions[0], \"Password\") {\n\t\t\t\tanswers = append(answers, defaultPassword)\n\t\t\t\tpasswordAsked = true\n\t\t\t} else {\n\t\t\t\tanswers = append(answers, passcode)\n\t\t\t\tpasscodeAsked = true\n\t\t\t}\n\t\t\treturn answers, nil\n\t\t}),\n\t}\n\tconn, client, err = getCustomAuthSftpClient(user, authMethods)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t}\n\tassert.True(t, passwordAsked)\n\tassert.True(t, passcodeAsked)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestMultiStepBuiltinKeyboardAuth(t *testing.T) {\n\tu := getTestUser()\n\tu.PublicKeys = []string{testPubKey}\n\tu.Filters.DeniedLoginMethods = []string{\n\t\tdataprovider.SSHLoginMethodPublicKey,\n\t\tdataprovider.LoginMethodPassword,\n\t\tdataprovider.SSHLoginMethodKeyboardInteractive,\n\t}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tsigner, err := ssh.ParsePrivateKey([]byte(testPrivateKey))\n\tassert.NoError(t, err)\n\t// public key + password\n\tauthMethods := []ssh.AuthMethod{\n\t\tssh.PublicKeys(signer),\n\t\tssh.KeyboardInteractive(func(_, _ string, _ []string, _ []bool) ([]string, error) {\n\t\t\treturn []string{defaultPassword}, nil\n\t\t}),\n\t}\n\tconn, client, err := getCustomAuthSftpClient(user, authMethods)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t}\n\t// add multi-factor authentication\n\tconfigName, key, _, err := mfa.GenerateTOTPSecret(mfa.GetAvailableTOTPConfigNames()[0], user.Username)\n\tassert.NoError(t, err)\n\tuser.Password = defaultPassword\n\tuser.Filters.TOTPConfig = dataprovider.UserTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: kms.NewPlainSecret(key.Secret()),\n\t\tProtocols: []string{common.ProtocolSSH},\n\t}\n\terr = dataprovider.UpdateUser(&user, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\tpasscode, err := generateTOTPPasscode(key.Secret(), otp.AlgorithmSHA1)\n\tassert.NoError(t, err)\n\t// public key + passcode\n\tauthMethods = []ssh.AuthMethod{\n\t\tssh.PublicKeys(signer),\n\t\tssh.KeyboardInteractive(func(_, _ string, _ []string, _ []bool) ([]string, error) {\n\t\t\treturn []string{passcode}, nil\n\t\t}),\n\t}\n\tconn, client, err = getCustomAuthSftpClient(user, authMethods)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestRenameSymlink(t *testing.T) {\n\tu := getTestUser()\n\ttestDir := \"/dir-no-create-links\"\n\totherDir := \"otherdir\"\n\tu.Permissions[testDir] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermDelete,\n\t\tdataprovider.PermCreateDirs}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = client.Mkdir(otherDir)\n\t\tassert.NoError(t, err)\n\t\terr = client.Symlink(otherDir, otherDir+\".link\")\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(otherDir+\".link\", path.Join(testDir, \"symlink\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(otherDir+\".link\", \"allowed_link\")\n\t\tassert.NoError(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestSplittedDeletePerms(t *testing.T) {\n\tu := getTestUser()\n\tu.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermDeleteDirs,\n\t\tdataprovider.PermCreateDirs}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Remove(testFileName)\n\t\tassert.Error(t, err)\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = client.RemoveDirectory(testDir)\n\t\tassert.NoError(t, err)\n\t}\n\tu.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermDeleteFiles,\n\t\tdataprovider.PermCreateDirs, dataprovider.PermOverwrite}\n\t_, _, err = httpdtest.UpdateUser(u, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Remove(testFileName)\n\t\tassert.NoError(t, err)\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = client.RemoveDirectory(testDir)\n\t\tassert.Error(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestSplittedRenamePerms(t *testing.T) {\n\tu := getTestUser()\n\tu.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermRenameDirs,\n\t\tdataprovider.PermCreateDirs}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testFileName, testFileName+\"_renamed\")\n\t\tassert.Error(t, err)\n\t\terr = client.Rename(testDir, testDir+\"_renamed\")\n\t\tassert.NoError(t, err)\n\t}\n\tu.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermRenameFiles,\n\t\tdataprovider.PermCreateDirs, dataprovider.PermOverwrite}\n\t_, _, err = httpdtest.UpdateUser(u, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tconn, client, err = getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testFileName, testFileName+\"_renamed\")\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(testDir, testDir+\"_renamed\")\n\t\tassert.Error(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestSFTPLoopError(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 2525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\tuser1 := getTestUser()\n\tuser2 := getTestUser()\n\tuser1.Username += \"1\"\n\tuser2.Username += \"2\"\n\t// user1 is a local account with a virtual SFTP folder to user2\n\t// user2 has user1 as SFTP fs\n\tf := vfs.BaseVirtualFolder{\n\t\tName: \"sftp\",\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.SFTPFilesystemProvider,\n\t\t\tSFTPConfig: vfs.SFTPFsConfig{\n\t\t\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\t\t\tEndpoint: sftpServerAddr,\n\t\t\t\t\tUsername: user2.Username,\n\t\t\t\t},\n\t\t\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t}\n\tfolder, _, err := httpdtest.AddFolder(f, http.StatusCreated)\n\tassert.NoError(t, err)\n\tuser1.VirtualFolders = append(user1.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folder.Name,\n\t\t},\n\t\tVirtualPath: \"/vdir\",\n\t})\n\n\tuser2.FsConfig.Provider = sdk.SFTPFilesystemProvider\n\tuser2.FsConfig.SFTPConfig = vfs.SFTPFsConfig{\n\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\tEndpoint: sftpServerAddr,\n\t\t\tUsername: user1.Username,\n\t\t},\n\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t}\n\n\tuser1, resp, err := httpdtest.AddUser(user1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tuser2, resp, err = httpdtest.AddUser(user2, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\ta1 := dataprovider.BaseEventAction{\n\t\tName: \"a1\",\n\t\tType: dataprovider.ActionTypeUserQuotaReset,\n\t}\n\taction1, _, err := httpdtest.AddEventAction(a1, http.StatusCreated)\n\tassert.NoError(t, err)\n\ta2 := dataprovider.BaseEventAction{\n\t\tName: \"a2\",\n\t\tType: dataprovider.ActionTypeEmail,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tEmailConfig: dataprovider.EventActionEmailConfig{\n\t\t\t\tRecipients: []string{\"failure@example.com\"},\n\t\t\t\tSubject: `Failed action\"`,\n\t\t\t\tBody: \"Test body\",\n\t\t\t},\n\t\t},\n\t}\n\taction2, _, err := httpdtest.AddEventAction(a2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tr1 := dataprovider.EventRule{\n\t\tName: \"rule1\",\n\t\tStatus: 1,\n\t\tTrigger: dataprovider.EventTriggerProviderEvent,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tProviderEvents: []string{\"update\"},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action1.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action2.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 2,\n\t\t\t\tOptions: dataprovider.EventActionOptions{\n\t\t\t\t\tIsFailureAction: true,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\trule1, _, err := httpdtest.AddEventRule(r1, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tlastReceivedEmail.reset()\n\t_, _, err = httpdtest.UpdateUser(user2, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tassert.Eventually(t, func() bool {\n\t\treturn lastReceivedEmail.get().From != \"\"\n\t}, 3000*time.Millisecond, 100*time.Millisecond)\n\temail := lastReceivedEmail.get()\n\tassert.Len(t, email.To, 1)\n\tassert.True(t, slices.Contains(email.To, \"failure@example.com\"))\n\tassert.Contains(t, email.Data, `Subject: Failed action`)\n\n\tuser1.VirtualFolders[0].FsConfig.SFTPConfig.Password = kms.NewPlainSecret(defaultPassword)\n\tuser2.FsConfig.SFTPConfig.Password = kms.NewPlainSecret(defaultPassword)\n\n\tconn := common.NewBaseConnection(\"\", common.ProtocolWebDAV, \"\", \"\", user1)\n\t_, _, err = conn.GetFsAndResolvedPath(user1.VirtualFolders[0].VirtualPath)\n\tassert.ErrorIs(t, err, os.ErrPermission)\n\n\tconn = common.NewBaseConnection(\"\", common.ProtocolSFTP, \"\", \"\", user1)\n\t_, _, err = conn.GetFsAndResolvedPath(user1.VirtualFolders[0].VirtualPath)\n\tassert.Error(t, err)\n\tconn = common.NewBaseConnection(\"\", common.ProtocolFTP, \"\", \"\", user1)\n\t_, _, err = conn.GetFsAndResolvedPath(user1.VirtualFolders[0].VirtualPath)\n\tassert.Error(t, err)\n\n\t_, err = httpdtest.RemoveEventRule(rule1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveEventAction(action2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user1.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user2.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(folder, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n}\n\nfunc TestNonLocalCrossRename(t *testing.T) {\n\tbaseUser, resp, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tu := getTestUser()\n\tu.HomeDir += \"_folders\"\n\tu.Username += \"_folders\"\n\tmappedPathSFTP := filepath.Join(os.TempDir(), \"sftp\")\n\tfolderNameSFTP := filepath.Base(mappedPathSFTP)\n\tvdirSFTPPath := \"/vdir/sftp\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderNameSFTP,\n\t\t},\n\t\tVirtualPath: vdirSFTPPath,\n\t})\n\tmappedPathCrypt := filepath.Join(os.TempDir(), \"crypt\")\n\tfolderNameCrypt := filepath.Base(mappedPathCrypt)\n\tvdirCryptPath := \"/vdir/crypt\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderNameCrypt,\n\t\t},\n\t\tVirtualPath: vdirCryptPath,\n\t})\n\tf1 := vfs.BaseVirtualFolder{\n\t\tName: folderNameSFTP,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.SFTPFilesystemProvider,\n\t\t\tSFTPConfig: vfs.SFTPFsConfig{\n\t\t\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\t\t\tEndpoint: sftpServerAddr,\n\t\t\t\t\tUsername: baseUser.Username,\n\t\t\t\t},\n\t\t\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err = httpdtest.AddFolder(f1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tf2 := vfs.BaseVirtualFolder{\n\t\tName: folderNameCrypt,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.CryptedFilesystemProvider,\n\t\t\tCryptConfig: vfs.CryptFsConfig{\n\t\t\t\tPassphrase: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t\tMappedPath: mappedPathCrypt,\n\t}\n\t_, _, err = httpdtest.AddFolder(f2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tuser, resp, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vdirSFTPPath, testFileName), 8192, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vdirCryptPath, testFileName), 16384, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirSFTPPath, testFileName), path.Join(vdirCryptPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), path.Join(vdirSFTPPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(testFileName, path.Join(vdirCryptPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(testFileName, path.Join(vdirSFTPPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirSFTPPath, testFileName), testFileName+\".rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), testFileName+\".rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// rename on local fs or on the same folder must work\n\t\terr = client.Rename(testFileName, testFileName+\".rename\")\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirSFTPPath, testFileName), path.Join(vdirSFTPPath, testFileName+\"_rename\"))\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), path.Join(vdirCryptPath, testFileName+\"_rename\"))\n\t\tassert.NoError(t, err)\n\t\t// renaming a virtual folder is not allowed\n\t\terr = client.Rename(vdirSFTPPath, vdirSFTPPath+\"_rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(vdirCryptPath, vdirCryptPath+\"_rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(vdirCryptPath, path.Join(vdirCryptPath, \"rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Mkdir(path.Join(vdirCryptPath, \"subcryptdir\"))\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirCryptPath, \"subcryptdir\"), vdirCryptPath)\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// renaming root folder is not allowed\n\t\terr = client.Rename(\"/\", \"new_name\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// renaming a path to a virtual folder is not allowed\n\t\terr = client.Rename(\"/vdir\", \"new_vdir\")\n\t\tif assert.Error(t, err) {\n\t\t\tassert.Contains(t, err.Error(), \"SSH_FX_OP_UNSUPPORTED\")\n\t\t}\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderNameCrypt}, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderNameSFTP}, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(baseUser, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(baseUser.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPathCrypt)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPathSFTP)\n\tassert.NoError(t, err)\n}\n\nfunc TestNonLocalCrossRenameNonLocalBaseUser(t *testing.T) {\n\tbaseUser, resp, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tu := getTestSFTPUser()\n\tmappedPathLocal := filepath.Join(os.TempDir(), \"local\")\n\tfolderNameLocal := filepath.Base(mappedPathLocal)\n\tvdirLocalPath := \"/vdir/local\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderNameLocal,\n\t\t},\n\t\tVirtualPath: vdirLocalPath,\n\t})\n\tmappedPathCrypt := filepath.Join(os.TempDir(), \"crypt\")\n\tfolderNameCrypt := filepath.Base(mappedPathCrypt)\n\tvdirCryptPath := \"/vdir/crypt\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderNameCrypt,\n\t\t},\n\t\tVirtualPath: vdirCryptPath,\n\t})\n\tf1 := vfs.BaseVirtualFolder{\n\t\tName: folderNameLocal,\n\t\tMappedPath: mappedPathLocal,\n\t}\n\t_, _, err = httpdtest.AddFolder(f1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tf2 := vfs.BaseVirtualFolder{\n\t\tName: folderNameCrypt,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.CryptedFilesystemProvider,\n\t\t\tCryptConfig: vfs.CryptFsConfig{\n\t\t\t\tPassphrase: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t\tMappedPath: mappedPathCrypt,\n\t}\n\t_, _, err = httpdtest.AddFolder(f2, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tuser, resp, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\t\tassert.NoError(t, checkBasicSFTP(client))\n\t\terr = writeSFTPFile(testFileName, 4096, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vdirLocalPath, testFileName), 8192, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vdirCryptPath, testFileName), 16384, client)\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirLocalPath, testFileName), path.Join(vdirCryptPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), path.Join(vdirLocalPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(testFileName, path.Join(vdirCryptPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(testFileName, path.Join(vdirLocalPath, testFileName+\".rename\"))\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirLocalPath, testFileName), testFileName+\".rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), testFileName+\".rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// rename on local fs or on the same folder must work\n\t\terr = client.Rename(testFileName, testFileName+\".rename\")\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirLocalPath, testFileName), path.Join(vdirLocalPath, testFileName+\"_rename\"))\n\t\tassert.NoError(t, err)\n\t\terr = client.Rename(path.Join(vdirCryptPath, testFileName), path.Join(vdirCryptPath, testFileName+\"_rename\"))\n\t\tassert.NoError(t, err)\n\t\t// renaming a virtual folder is not allowed\n\t\terr = client.Rename(vdirLocalPath, vdirLocalPath+\"_rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\terr = client.Rename(vdirCryptPath, vdirCryptPath+\"_rename\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// renaming root folder is not allowed\n\t\terr = client.Rename(\"/\", \"new_name\")\n\t\tassert.ErrorIs(t, err, os.ErrPermission)\n\t\t// renaming a path to a virtual folder is not allowed\n\t\terr = client.Rename(\"/vdir\", \"new_vdir\")\n\t\tif assert.Error(t, err) {\n\t\t\tassert.Contains(t, err.Error(), \"SSH_FX_OP_UNSUPPORTED\")\n\t\t}\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderNameCrypt}, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderNameLocal}, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(baseUser, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(baseUser.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPathCrypt)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPathLocal)\n\tassert.NoError(t, err)\n}\n\nfunc TestCopyAndRemoveSSHCommands(t *testing.T) {\n\tu := getTestUser()\n\tu.QuotaFiles = 1000\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tfileSize := int64(32)\n\t\terr = writeSFTPFile(testFileName, fileSize, client)\n\t\tassert.NoError(t, err)\n\n\t\ttestFileNameCopy := testFileName + \"_copy\"\n\t\tout, err := runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", testFileName, testFileNameCopy), user)\n\t\tassert.NoError(t, err, string(out))\n\t\t// the resolved destination path match the source path\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", testFileName, path.Dir(testFileName)), user)\n\t\tassert.Error(t, err, string(out))\n\n\t\tinfo, err := client.Stat(testFileNameCopy)\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, fileSize, info.Size())\n\t\t}\n\n\t\ttestDir := \"test dir\"\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s '%s'`, testFileName, testDir), user)\n\t\tassert.NoError(t, err, string(out))\n\t\tinfo, err = client.Stat(path.Join(testDir, testFileName))\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, fileSize, info.Size())\n\t\t}\n\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 3*fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 3, user.UsedQuotaFiles)\n\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-remove %s\", testFileNameCopy), user)\n\t\tassert.NoError(t, err, string(out))\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-remove '%s'`, testDir), user)\n\t\tassert.NoError(t, err, string(out))\n\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 1, user.UsedQuotaFiles)\n\n\t\t_, err = client.Stat(testFileNameCopy)\n\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\t\t// create a dir tree\n\t\tdir1 := \"dir1\"\n\t\tdir2 := \"dir 2\"\n\t\terr = client.MkdirAll(path.Join(dir1, dir2))\n\t\tassert.NoError(t, err)\n\t\ttoCreate := []string{\n\t\t\tpath.Join(dir1, testFileName),\n\t\t\tpath.Join(dir1, dir2, testFileName),\n\t\t}\n\t\tfor _, p := range toCreate {\n\t\t\terr = writeSFTPFile(p, fileSize, client)\n\t\t\tassert.NoError(t, err)\n\t\t}\n\t\t// create a symlink, copying a symlink is not supported\n\t\terr = client.Symlink(path.Join(\"/\", dir1, testFileName), path.Join(\"/\", dir1, testFileName+\"_link\"))\n\t\tassert.NoError(t, err)\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", path.Join(\"/\", dir1, testFileName+\"_link\"),\n\t\t\tpath.Join(\"/\", testFileName+\"_link\")), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// copying a dir inside itself should fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", path.Join(\"/\", dir1),\n\t\t\tpath.Join(\"/\", dir1, \"sub\")), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// copy source and dest must differ\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", path.Join(\"/\", dir1),\n\t\t\tpath.Join(\"/\", dir1)), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// copy a missing file/dir should fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", path.Join(\"/\", \"missing_entry\"),\n\t\t\tpath.Join(\"/\", dir1)), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// try to overwrite a file with a dir\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", path.Join(\"/\", dir1), testFileName), user)\n\t\tassert.Error(t, err, string(out))\n\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s \"%s\"`, dir1, dir2), user)\n\t\tassert.NoError(t, err, string(out))\n\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 5*fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 5, user.UsedQuotaFiles)\n\n\t\t// copy again, quota must remain unchanged\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s/ \"%s\"`, dir1, dir2), user)\n\t\tassert.NoError(t, err, string(out))\n\t\t_, err = client.Stat(dir2)\n\t\tassert.NoError(t, err)\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 5*fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 5, user.UsedQuotaFiles)\n\t\t// now copy inside target\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s \"%s\"`, dir1, dir2), user)\n\t\tassert.NoError(t, err, string(out))\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 7*fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 7, user.UsedQuotaFiles)\n\n\t\tfor _, p := range []string{dir1, dir2} {\n\t\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-remove \"%s\"`, p), user)\n\t\t\tassert.NoError(t, err, string(out))\n\t\t\t_, err = client.Stat(p)\n\t\t\tassert.ErrorIs(t, err, os.ErrNotExist)\n\t\t}\n\t\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, fileSize, user.UsedQuotaSize)\n\t\tassert.Equal(t, 1, user.UsedQuotaFiles)\n\t\t// test quota errors\n\t\tuser.QuotaFiles = 1\n\t\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\t\tassert.NoError(t, err)\n\t\t// quota files exceeded\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", testFileName, testFileNameCopy), user)\n\t\tassert.Error(t, err, string(out))\n\t\tuser.QuotaFiles = 1000\n\t\tuser.QuotaSize = fileSize + 1\n\t\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\t\tassert.NoError(t, err)\n\t\t// quota size exceeded after the copy\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", testFileName, testFileNameCopy), user)\n\t\tassert.Error(t, err, string(out))\n\t\tuser.QuotaSize = fileSize - 1\n\t\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\t\tassert.NoError(t, err)\n\t\t// quota size exceeded\n\t\tout, err = runSSHCommand(fmt.Sprintf(\"sftpgo-copy %s %s\", testFileName, testFileNameCopy), user)\n\t\tassert.Error(t, err, string(out))\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestCopyAndRemovePermissions(t *testing.T) {\n\tu := getTestUser()\n\trestrictedPath := \"/dir/path\"\n\tpatternFilterPath := \"/patterns\"\n\tu.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: patternFilterPath,\n\t\t\tDeniedPatterns: []string{\"*.dat\"},\n\t\t},\n\t}\n\tu.Permissions[restrictedPath] = []string{}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\terr = client.MkdirAll(restrictedPath)\n\t\tassert.NoError(t, err)\n\t\terr = client.MkdirAll(patternFilterPath)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(testFileName, 100, client)\n\t\tassert.NoError(t, err)\n\t\t// getting file writer will fail\n\t\tout, err := runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, testFileName, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// file pattern not allowed\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, testFileName, patternFilterPath), user)\n\t\tassert.Error(t, err, string(out))\n\n\t\ttestDir := path.Join(\"/\", path.Base(restrictedPath))\n\t\terr = client.Mkdir(testDir)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(testDir, testFileName), 100, client)\n\t\tassert.NoError(t, err)\n\t\t// creating target dir will fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s/`, testDir, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// get dir contents will fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s /`, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// get dir contents will fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-remove %s`, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// give list dir permissions and retry, now delete will fail\n\t\tuser.Permissions[restrictedPath] = []string{dataprovider.PermListItems, dataprovider.PermUpload}\n\t\tuser.Permissions[testDir] = []string{dataprovider.PermListItems}\n\t\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\t\tassert.NoError(t, err)\n\t\t// no copy permission\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, testFileName, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\tuser.Permissions[restrictedPath] = []string{dataprovider.PermListItems, dataprovider.PermUpload, dataprovider.PermCopy}\n\t\tuser.Permissions[testDir] = []string{dataprovider.PermListItems, dataprovider.PermCopy}\n\t\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\t\tassert.NoError(t, err)\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, testFileName, restrictedPath), user)\n\t\tassert.NoError(t, err, string(out))\n\t\t// overwrite will fail, no permission\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, testFileName, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-remove %s`, restrictedPath), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// try to copy a file from testDir, we have only list permissions so getFileReader will fail\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, path.Join(testDir, testFileName), testFileName+\".copy\"), user)\n\t\tassert.Error(t, err, string(out))\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestCrossFoldersCopy(t *testing.T) {\n\tbaseUser, resp, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\n\tu := getTestUser()\n\tu.Username += \"_1\"\n\tu.HomeDir = filepath.Join(os.TempDir(), u.Username)\n\tu.QuotaFiles = 1000\n\tmappedPath1 := filepath.Join(os.TempDir(), \"mapped1\")\n\tfolderName1 := filepath.Base(mappedPath1)\n\tvpath1 := \"/vdirs/vdir1\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName1,\n\t\t},\n\t\tVirtualPath: vpath1,\n\t\tQuotaSize: -1,\n\t\tQuotaFiles: -1,\n\t})\n\tmappedPath2 := filepath.Join(os.TempDir(), \"mapped1\", \"dir\", \"mapped2\")\n\tfolderName2 := filepath.Base(mappedPath2)\n\tvpath2 := \"/vdirs/vdir2\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName2,\n\t\t},\n\t\tVirtualPath: vpath2,\n\t\tQuotaSize: -1,\n\t\tQuotaFiles: -1,\n\t})\n\tmappedPath3 := filepath.Join(os.TempDir(), \"mapped3\")\n\tfolderName3 := filepath.Base(mappedPath3)\n\tvpath3 := \"/vdirs/vdir3\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName3,\n\t\t},\n\t\tVirtualPath: vpath3,\n\t\tQuotaSize: -1,\n\t\tQuotaFiles: -1,\n\t})\n\tmappedPath4 := filepath.Join(os.TempDir(), \"mapped4\")\n\tfolderName4 := filepath.Base(mappedPath4)\n\tvpath4 := \"/vdirs/vdir4\"\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName4,\n\t\t},\n\t\tVirtualPath: vpath4,\n\t\tQuotaSize: -1,\n\t\tQuotaFiles: -1,\n\t})\n\tf1 := vfs.BaseVirtualFolder{\n\t\tName: folderName1,\n\t\tMappedPath: mappedPath1,\n\t}\n\t_, _, err = httpdtest.AddFolder(f1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tf2 := vfs.BaseVirtualFolder{\n\t\tName: folderName2,\n\t\tMappedPath: mappedPath2,\n\t}\n\t_, _, err = httpdtest.AddFolder(f2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tf3 := vfs.BaseVirtualFolder{\n\t\tName: folderName3,\n\t\tMappedPath: mappedPath3,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.CryptedFilesystemProvider,\n\t\t\tCryptConfig: vfs.CryptFsConfig{\n\t\t\t\tPassphrase: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err = httpdtest.AddFolder(f3, http.StatusCreated)\n\tassert.NoError(t, err)\n\tf4 := vfs.BaseVirtualFolder{\n\t\tName: folderName4,\n\t\tMappedPath: mappedPath4,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.SFTPFilesystemProvider,\n\t\t\tSFTPConfig: vfs.SFTPFsConfig{\n\t\t\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\t\t\tEndpoint: sftpServerAddr,\n\t\t\t\t\tUsername: baseUser.Username,\n\t\t\t\t},\n\t\t\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err = httpdtest.AddFolder(f4, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tuser, resp, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tconn, client, err := getSftpClient(user)\n\tif assert.NoError(t, err) {\n\t\tdefer conn.Close()\n\t\tdefer client.Close()\n\n\t\tbaseFileSize := int64(100)\n\t\terr = writeSFTPFile(path.Join(vpath1, testFileName), baseFileSize+1, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vpath2, testFileName), baseFileSize+2, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vpath3, testFileName), baseFileSize+3, client)\n\t\tassert.NoError(t, err)\n\t\terr = writeSFTPFile(path.Join(vpath4, testFileName), baseFileSize+4, client)\n\t\tassert.NoError(t, err)\n\t\t// cannot remove a directory with virtual folders inside\n\t\tout, err := runSSHCommand(fmt.Sprintf(`sftpgo-remove %s`, path.Dir(vpath1)), user)\n\t\tassert.Error(t, err, string(out))\n\t\t// copy across virtual folders\n\t\tcopyDir := \"/copy\"\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s/`, path.Dir(vpath1), copyDir), user)\n\t\tassert.NoError(t, err, string(out))\n\t\t// check the copy\n\t\tinfo, err := client.Stat(path.Join(copyDir, vpath1, testFileName))\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, baseFileSize+1, info.Size())\n\t\t}\n\t\tinfo, err = client.Stat(path.Join(copyDir, vpath2, testFileName))\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, baseFileSize+2, info.Size())\n\t\t}\n\t\tinfo, err = client.Stat(path.Join(copyDir, vpath3, testFileName))\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, baseFileSize+3, info.Size())\n\t\t}\n\t\tinfo, err = client.Stat(path.Join(copyDir, vpath4, testFileName))\n\t\tif assert.NoError(t, err) {\n\t\t\tassert.Equal(t, baseFileSize+4, info.Size())\n\t\t}\n\t\t// nested fs paths\n\t\tout, err = runSSHCommand(fmt.Sprintf(`sftpgo-copy %s %s`, vpath1, vpath2), user)\n\t\tassert.Error(t, err, string(out))\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(baseUser, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(baseUser.GetHomeDir())\n\tassert.NoError(t, err)\n\tfor _, folderName := range []string{folderName1, folderName2, folderName3, folderName4} {\n\t\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\terr = os.RemoveAll(filepath.Join(os.TempDir(), folderName))\n\t\tassert.NoError(t, err)\n\t}\n}\n\nfunc TestHTTPFs(t *testing.T) {\n\tu := getTestUserWithHTTPFs()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\terr = os.MkdirAll(user.GetHomeDir(), os.ModePerm)\n\tassert.NoError(t, err)\n\n\tconn := common.NewBaseConnection(xid.New().String(), common.ProtocolFTP, \"\", \"\", user)\n\terr = conn.CreateDir(httpFsWellKnowDir, false)\n\tassert.NoError(t, err)\n\n\terr = os.WriteFile(filepath.Join(os.TempDir(), \"httpfs\", defaultHTTPFsUsername, httpFsWellKnowDir, \"file.txt\"), []byte(\"data\"), 0666)\n\tassert.NoError(t, err)\n\n\terr = conn.Copy(httpFsWellKnowDir, httpFsWellKnowDir+\"_copy\")\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestProxyProtocol(t *testing.T) {\n\tresp, err := httpclient.Get(fmt.Sprintf(\"http://%v\", httpProxyAddr))\n\tif !assert.Error(t, err) {\n\t\tresp.Body.Close()\n\t}\n}\n\nfunc TestSetProtocol(t *testing.T) {\n\tconn := common.NewBaseConnection(\"id\", \"sshd_exec\", \"\", \"\", dataprovider.User{BaseUser: sdk.BaseUser{HomeDir: os.TempDir()}})\n\tconn.SetProtocol(common.ProtocolSCP)\n\trequire.Equal(t, \"SCP_id\", conn.GetID())\n}\n\nfunc TestGetFsError(t *testing.T) {\n\tu := getTestUser()\n\tu.FsConfig.Provider = sdk.GCSFilesystemProvider\n\tu.FsConfig.GCSConfig.Bucket = \"test\"\n\tu.FsConfig.GCSConfig.Credentials = kms.NewPlainSecret(\"invalid JSON for credentials\")\n\tconn := common.NewBaseConnection(\"\", common.ProtocolFTP, \"\", \"\", u)\n\t_, _, err := conn.GetFsAndResolvedPath(\"/vpath\")\n\tassert.Error(t, err)\n}\n\nfunc waitTCPListening(address string) {\n\tfor {\n\t\tconn, err := net.Dial(\"tcp\", address)\n\t\tif err != nil {\n\t\t\tlogger.WarnToConsole(\"tcp server %v not listening: %v\", address, err)\n\t\t\ttime.Sleep(100 * time.Millisecond)\n\t\t\tcontinue\n\t\t}\n\t\tlogger.InfoToConsole(\"tcp server %v now listening\", address)\n\t\tconn.Close()\n\t\tbreak\n\t}\n}\n\nfunc checkBasicSFTP(client *sftp.Client) error {\n\t_, err := client.Getwd()\n\tif err != nil {\n\t\treturn err\n\t}\n\t_, err = client.ReadDir(\".\")\n\treturn err\n}\n\nfunc getCustomAuthSftpClient(user dataprovider.User, authMethods []ssh.AuthMethod) (*ssh.Client, *sftp.Client, error) {\n\tvar sftpClient *sftp.Client\n\tconfig := &ssh.ClientConfig{\n\t\tUser: user.Username,\n\t\tHostKeyCallback: ssh.InsecureIgnoreHostKey(),\n\t\tAuth: authMethods,\n\t\tTimeout: 5 * time.Second,\n\t}\n\tconn, err := ssh.Dial(\"tcp\", sftpServerAddr, config)\n\tif err != nil {\n\t\treturn conn, sftpClient, err\n\t}\n\tsftpClient, err = sftp.NewClient(conn)\n\tif err != nil {\n\t\tconn.Close()\n\t}\n\treturn conn, sftpClient, err\n}\n\nfunc getSftpClient(user dataprovider.User) (*ssh.Client, *sftp.Client, error) {\n\tvar sftpClient *sftp.Client\n\tconfig := &ssh.ClientConfig{\n\t\tUser: user.Username,\n\t\tHostKeyCallback: ssh.InsecureIgnoreHostKey(),\n\t\tTimeout: 5 * time.Second,\n\t}\n\tif user.Password != \"\" {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(user.Password)}\n\t} else {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(defaultPassword)}\n\t}\n\n\tconn, err := ssh.Dial(\"tcp\", sftpServerAddr, config)\n\tif err != nil {\n\t\treturn conn, sftpClient, err\n\t}\n\tsftpClient, err = sftp.NewClient(conn)\n\tif err != nil {\n\t\tconn.Close()\n\t}\n\treturn conn, sftpClient, err\n}\n\nfunc runSSHCommand(command string, user dataprovider.User) ([]byte, error) {\n\tvar sshSession *ssh.Session\n\tvar output []byte\n\tconfig := &ssh.ClientConfig{\n\t\tUser: user.Username,\n\t\tHostKeyCallback: ssh.InsecureIgnoreHostKey(),\n\t\tTimeout: 5 * time.Second,\n\t}\n\tif user.Password != \"\" {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(user.Password)}\n\t} else {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(defaultPassword)}\n\t}\n\n\tconn, err := ssh.Dial(\"tcp\", sftpServerAddr, config)\n\tif err != nil {\n\t\treturn output, err\n\t}\n\tdefer conn.Close()\n\tsshSession, err = conn.NewSession()\n\tif err != nil {\n\t\treturn output, err\n\t}\n\tvar stdout, stderr bytes.Buffer\n\tsshSession.Stdout = &stdout\n\tsshSession.Stderr = &stderr\n\terr = sshSession.Run(command)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to run command %v: %v\", command, stderr.Bytes())\n\t}\n\treturn stdout.Bytes(), err\n}\n\nfunc getWebDavClient(user dataprovider.User) *gowebdav.Client {\n\trootPath := fmt.Sprintf(\"http://localhost:%d/\", webDavServerPort)\n\tpwd := defaultPassword\n\tif user.Password != \"\" {\n\t\tpwd = user.Password\n\t}\n\tclient := gowebdav.NewClient(rootPath, user.Username, pwd)\n\tclient.SetTimeout(10 * time.Second)\n\treturn client\n}\n\nfunc getTestUser() dataprovider.User {\n\tuser := dataprovider.User{\n\t\tBaseUser: sdk.BaseUser{\n\t\t\tUsername: defaultUsername,\n\t\t\tPassword: defaultPassword,\n\t\t\tHomeDir: filepath.Join(homeBasePath, defaultUsername),\n\t\t\tStatus: 1,\n\t\t\tExpirationDate: 0,\n\t\t},\n\t}\n\tuser.Permissions = make(map[string][]string)\n\tuser.Permissions[\"/\"] = allPerms\n\treturn user\n}\n\nfunc getTestSFTPUser() dataprovider.User {\n\tu := getTestUser()\n\tu.Username = defaultSFTPUsername\n\tu.FsConfig.Provider = sdk.SFTPFilesystemProvider\n\tu.FsConfig.SFTPConfig.Endpoint = sftpServerAddr\n\tu.FsConfig.SFTPConfig.Username = defaultUsername\n\tu.FsConfig.SFTPConfig.Password = kms.NewPlainSecret(defaultPassword)\n\treturn u\n}\n\nfunc getCryptFsUser() dataprovider.User {\n\tu := getTestUser()\n\tu.Username += \"_crypt\"\n\tu.FsConfig.Provider = sdk.CryptedFilesystemProvider\n\tu.FsConfig.CryptConfig.Passphrase = kms.NewPlainSecret(defaultPassword)\n\treturn u\n}\n\nfunc getTestUserWithHTTPFs() dataprovider.User {\n\tu := getTestUser()\n\tu.FsConfig.Provider = sdk.HTTPFilesystemProvider\n\tu.FsConfig.HTTPConfig = vfs.HTTPFsConfig{\n\t\tBaseHTTPFsConfig: sdk.BaseHTTPFsConfig{\n\t\t\tEndpoint: fmt.Sprintf(\"http://127.0.0.1:%d/api/v1\", httpFsPort),\n\t\t\tUsername: defaultHTTPFsUsername,\n\t\t},\n\t}\n\treturn u\n}\n\nfunc writeSFTPFile(name string, size int64, client *sftp.Client) error {\n\terr := writeSFTPFileNoCheck(name, size, client)\n\tif err != nil {\n\t\treturn err\n\t}\n\tinfo, err := client.Stat(name)\n\tif err != nil {\n\t\treturn err\n\t}\n\tif info.Size() != size {\n\t\treturn fmt.Errorf(\"file size mismatch, wanted %v, actual %v\", size, info.Size())\n\t}\n\treturn nil\n}\n\nfunc writeSFTPFileNoCheck(name string, size int64, client *sftp.Client) error {\n\tcontent := make([]byte, size)\n\t_, err := rand.Read(content)\n\tif err != nil {\n\t\treturn err\n\t}\n\tf, err := client.Create(name)\n\tif err != nil {\n\t\treturn err\n\t}\n\t_, err = io.Copy(f, bytes.NewBuffer(content))\n\tif err != nil {\n\t\tf.Close()\n\t\treturn err\n\t}\n\treturn f.Close()\n}\n\nfunc getUploadScriptEnvContent(envVar string) []byte {\n\tcontent := []byte(\"#!/bin/sh\\n\\n\")\n\tcontent = append(content, []byte(fmt.Sprintf(\"if [ -z \\\"$%s\\\" ]\\n\", envVar))...)\n\tcontent = append(content, []byte(\"then\\n\")...)\n\tcontent = append(content, []byte(\" exit 1\\n\")...)\n\tcontent = append(content, []byte(\"else\\n\")...)\n\tcontent = append(content, []byte(\" exit 0\\n\")...)\n\tcontent = append(content, []byte(\"fi\\n\")...)\n\treturn content\n}\n\nfunc getUploadScriptContent(movedPath, logFilePath string, exitStatus int) []byte {\n\tcontent := []byte(\"#!/bin/sh\\n\\n\")\n\tcontent = append(content, []byte(\"sleep 1\\n\")...)\n\tif logFilePath != \"\" {\n\t\tcontent = append(content, []byte(fmt.Sprintf(\"echo $@ > %v\\n\", logFilePath))...)\n\t}\n\tcontent = append(content, []byte(fmt.Sprintf(\"mv ${SFTPGO_ACTION_PATH} %v\\n\", movedPath))...)\n\tcontent = append(content, []byte(fmt.Sprintf(\"exit %d\", exitStatus))...)\n\treturn content\n}\n\nfunc getSaveProviderObjectScriptContent(outFilePath string, exitStatus int) []byte {\n\tcontent := []byte(\"#!/bin/sh\\n\\n\")\n\tcontent = append(content, []byte(fmt.Sprintf(\"echo ${SFTPGO_OBJECT_DATA} > %v\\n\", outFilePath))...)\n\tcontent = append(content, []byte(fmt.Sprintf(\"exit %d\", exitStatus))...)\n\treturn content\n}\n\nfunc generateTOTPPasscode(secret string, algo otp.Algorithm) (string, error) {\n\treturn totp.GenerateCodeCustom(secret, time.Now(), totp.ValidateOpts{\n\t\tPeriod: 30,\n\t\tSkew: 1,\n\t\tDigits: otp.DigitsSix,\n\t\tAlgorithm: algo,\n\t})\n}\n\nfunc isDbDefenderSupported() bool {\n\t// SQLite shares the implementation with other SQL-based provider but it makes no sense\n\t// to use it outside test cases\n\tswitch dataprovider.GetProviderStatus().Driver {\n\tcase dataprovider.MySQLDataProviderName, dataprovider.PGSQLDataProviderName,\n\t\tdataprovider.CockroachDataProviderName, dataprovider.SQLiteDataProviderName:\n\t\treturn true\n\tdefault:\n\t\treturn false\n\t}\n}\n\nfunc getEncryptedFileSize(size int64) (int64, error) {\n\tencSize, err := sio.EncryptedSize(uint64(size))\n\treturn int64(encSize) + 33, err\n}\n\nfunc printLatestLogs(maxNumberOfLines int) {\n\tvar lines []string\n\tf, err := os.Open(logFilePath)\n\tif err != nil {\n\t\treturn\n\t}\n\tdefer f.Close()\n\tscanner := bufio.NewScanner(f)\n\tfor scanner.Scan() {\n\t\tlines = append(lines, scanner.Text()+\"\\r\\n\")\n\t\tfor len(lines) > maxNumberOfLines {\n\t\t\tlines = lines[1:]\n\t\t}\n\t}\n\tif scanner.Err() != nil {\n\t\tlogger.WarnToConsole(\"Unable to print latest logs: %v\", scanner.Err())\n\t\treturn\n\t}\n\tfor _, line := range lines {\n\t\tlogger.DebugToConsole(\"%s\", line)\n\t}\n}\n\ntype receivedEmail struct {\n\tsync.RWMutex\n\tFrom string\n\tTo []string\n\tData string\n}\n\nfunc (e *receivedEmail) set(from string, to []string, data []byte) {\n\te.Lock()\n\tdefer e.Unlock()\n\n\te.From = from\n\te.To = to\n\te.Data = strings.ReplaceAll(string(data), \"=\\r\\n\", \"\")\n}\n\nfunc (e *receivedEmail) reset() {\n\te.Lock()\n\tdefer e.Unlock()\n\n\te.From = \"\"\n\te.To = nil\n\te.Data = \"\"\n}\n\nfunc (e *receivedEmail) get() receivedEmail {\n\te.RLock()\n\tdefer e.RUnlock()\n\n\treturn receivedEmail{\n\t\tFrom: e.From,\n\t\tTo: e.To,\n\t\tData: e.Data,\n\t}\n}\n\nfunc startHTTPFs() {\n\tgo func() {\n\t\treaddirCallback := func(name string) []os.FileInfo {\n\t\t\tif name == httpFsWellKnowDir {\n\t\t\t\treturn []os.FileInfo{vfs.NewFileInfo(\"ghost.txt\", false, 0, time.Unix(0, 0), false)}\n\t\t\t}\n\t\t\treturn nil\n\t\t}\n\t\tcallbacks := &httpdtest.HTTPFsCallbacks{\n\t\t\tReaddir: readdirCallback,\n\t\t}\n\t\tif err := httpdtest.StartTestHTTPFs(httpFsPort, callbacks); err != nil {\n\t\t\tlogger.ErrorToConsole(\"could not start HTTPfs test server: %v\", err)\n\t\t\tos.Exit(1)\n\t\t}\n\t}()\n\twaitTCPListening(fmt.Sprintf(\":%d\", httpFsPort))\n}\n"
},
{
"path": "internal/common/ratelimiter.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see \")\n\tform.Set(\"smtp_username\", defaultUsername)\n\tform.Set(\"smtp_password\", defaultPassword)\n\tform.Set(\"smtp_domain\", \"localdomain\")\n\tform.Set(\"smtp_auth\", \"100\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message) // invalid smtp_auth\n\t// set valid parameters\n\tform.Set(\"smtp_port\", \"a\") // converted to 587\n\tform.Set(\"smtp_auth\", \"1\")\n\tform.Set(\"smtp_encryption\", \"2\")\n\tform.Set(\"smtp_debug\", \"checked\")\n\tform.Set(\"smtp_oauth2_provider\", \"1\")\n\tform.Set(\"smtp_oauth2_client_id\", \"123\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\t// check\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Len(t, configs.SFTPD.HostKeyAlgos, 1)\n\tassert.Contains(t, configs.SFTPD.HostKeyAlgos, ssh.KeyAlgoRSA)\n\tassert.Len(t, configs.SFTPD.PublicKeyAlgos, 1)\n\tassert.Contains(t, configs.SFTPD.PublicKeyAlgos, ssh.InsecureKeyAlgoDSA) //nolint:staticcheck\n\tassert.Equal(t, \"mail.example.net\", configs.SMTP.Host)\n\tassert.Equal(t, 587, configs.SMTP.Port)\n\tassert.Equal(t, \"Example \", configs.SMTP.From)\n\tassert.Equal(t, defaultUsername, configs.SMTP.User)\n\tassert.Equal(t, 1, configs.SMTP.Debug)\n\tassert.Equal(t, \"\", configs.SMTP.OAuth2.ClientID)\n\terr = configs.SMTP.Password.Decrypt()\n\tassert.NoError(t, err)\n\tassert.Equal(t, defaultPassword, configs.SMTP.Password.GetPayload())\n\tassert.Equal(t, 1, configs.SMTP.AuthType)\n\tassert.Equal(t, 2, configs.SMTP.Encryption)\n\tassert.Equal(t, \"localdomain\", configs.SMTP.Domain)\n\t// set a redacted password, the current password must be preserved\n\tform.Set(\"smtp_password\", redactedSecret)\n\tform.Set(\"smtp_auth\", \"\")\n\tconfigs.SMTP.AuthType = 0 // empty will be converted to 0\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tupdatedConfigs, err := dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tencryptedPayload := updatedConfigs.SMTP.Password.GetPayload()\n\tsecretKey := updatedConfigs.SMTP.Password.GetKey()\n\terr = updatedConfigs.SMTP.Password.Decrypt()\n\tassert.NoError(t, err)\n\tassert.Equal(t, configs.SFTPD, updatedConfigs.SFTPD)\n\tassert.Equal(t, configs.SMTP, updatedConfigs.SMTP)\n\t// now set an undecryptable password\n\tupdatedConfigs.SMTP.Password = kms.NewSecret(sdkkms.SecretStatusSecretBox, encryptedPayload, secretKey, \"\")\n\terr = dataprovider.UpdateConfigs(&updatedConfigs, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tform.Set(\"form_action\", \"acme_submit\")\n\tform.Set(\"acme_port\", \"\") // on error will be set to 80\n\tform.Set(\"acme_protocols\", \"1\")\n\tform.Add(\"acme_protocols\", \"2\")\n\tform.Add(\"acme_protocols\", \"3\")\n\tform.Set(\"acme_domain\", \"example.com\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\t// no email set, validation will fail\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidEmail)\n\tform.Set(\"acme_domain\", \"\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\t// check\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Len(t, configs.SFTPD.HostKeyAlgos, 1)\n\tassert.Contains(t, configs.SFTPD.HostKeyAlgos, ssh.KeyAlgoRSA)\n\tassert.Len(t, configs.SFTPD.PublicKeyAlgos, 1)\n\tassert.Contains(t, configs.SFTPD.PublicKeyAlgos, ssh.InsecureKeyAlgoDSA) //nolint:staticcheck\n\tassert.Equal(t, 80, configs.ACME.HTTP01Challenge.Port)\n\tassert.Equal(t, 7, configs.ACME.Protocols)\n\tassert.Empty(t, configs.ACME.Domain)\n\tassert.Empty(t, configs.ACME.Email)\n\tassert.True(t, configs.ACME.HasProtocol(common.ProtocolFTP))\n\tassert.True(t, configs.ACME.HasProtocol(common.ProtocolWebDAV))\n\tassert.True(t, configs.ACME.HasProtocol(common.ProtocolHTTP))\n\t// create certificate files, so no real ACME call is done\n\tdomain := \"acme.example.com\"\n\tcrtPath := filepath.Join(acmeConfig.CertsPath, util.SanitizeDomain(domain)+\".crt\")\n\tkeyPath := filepath.Join(acmeConfig.CertsPath, util.SanitizeDomain(domain)+\".key\")\n\terr = os.WriteFile(crtPath, nil, 0666)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(keyPath, nil, 0666)\n\tassert.NoError(t, err)\n\tform.Set(\"acme_port\", \"402\")\n\tform.Set(\"acme_protocols\", \"1\")\n\tform.Add(\"acme_protocols\", \"1000\")\n\tform.Set(\"acme_domain\", domain)\n\tform.Set(\"acme_email\", \"email@example.com\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Len(t, configs.SFTPD.HostKeyAlgos, 1)\n\tassert.Len(t, configs.SFTPD.PublicKeyAlgos, 1)\n\tassert.Equal(t, 402, configs.ACME.HTTP01Challenge.Port)\n\tassert.Equal(t, 1, configs.ACME.Protocols)\n\tassert.Equal(t, domain, configs.ACME.Domain)\n\tassert.Equal(t, \"email@example.com\", configs.ACME.Email)\n\tassert.False(t, configs.ACME.HasProtocol(common.ProtocolFTP))\n\tassert.False(t, configs.ACME.HasProtocol(common.ProtocolWebDAV))\n\tassert.True(t, configs.ACME.HasProtocol(common.ProtocolHTTP))\n\n\terr = os.Remove(crtPath)\n\tassert.NoError(t, err)\n\terr = os.Remove(keyPath)\n\tassert.NoError(t, err)\n\terr = dataprovider.UpdateConfigs(nil, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n}\n\nfunc TestBrandingConfigMock(t *testing.T) {\n\terr := dataprovider.UpdateConfigs(nil, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\n\twebClientLogoPath := \"/static/branding/webclient/logo.png\"\n\twebClientFaviconPath := \"/static/branding/webclient/favicon.png\"\n\twebAdminLogoPath := \"/static/branding/webadmin/logo.png\"\n\twebAdminFaviconPath := \"/static/branding/webadmin/favicon.png\"\n\t// no custom log or favicon was set\n\tfor _, p := range []string{webClientLogoPath, webClientFaviconPath, webAdminLogoPath, webAdminFaviconPath} {\n\t\treq, err := http.NewRequest(http.MethodGet, p, nil)\n\t\tassert.NoError(t, err)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t}\n\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webConfigsPath, webToken)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"form_action\", \"branding_submit\")\n\tform.Set(\"branding_webadmin_name\", \"Custom WebAdmin\")\n\tform.Set(\"branding_webadmin_short_name\", \"WebAdmin\")\n\tform.Set(\"branding_webadmin_disclaimer_name\", \"Admin disclaimer\")\n\tform.Set(\"branding_webadmin_disclaimer_url\", \"invalid, not a URL\")\n\tform.Set(\"branding_webclient_name\", \"Custom WebClient\")\n\tform.Set(\"branding_webclient_short_name\", \"WebClient\")\n\tform.Set(\"branding_webclient_disclaimer_name\", \"Client disclaimer\")\n\tform.Set(\"branding_webclient_disclaimer_url\", \"https://example.com\")\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidDisclaimerURL)\n\n\tform.Set(\"branding_webadmin_disclaimer_url\", \"https://example.net\")\n\ttmpFile := filepath.Join(os.TempDir(), util.GenerateUniqueID()+\".png\")\n\terr = createTestPNG(tmpFile, 512, 512, color.RGBA{100, 200, 200, 0xff})\n\tassert.NoError(t, err)\n\n\tb, contentType, err = getMultipartFormData(form, \"branding_webadmin_logo\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\t// check\n\tconfigs, err := dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"Custom WebAdmin\", configs.Branding.WebAdmin.Name)\n\tassert.Equal(t, \"WebAdmin\", configs.Branding.WebAdmin.ShortName)\n\tassert.Equal(t, \"Admin disclaimer\", configs.Branding.WebAdmin.DisclaimerName)\n\tassert.Equal(t, \"https://example.net\", configs.Branding.WebAdmin.DisclaimerURL)\n\tassert.Equal(t, \"Custom WebClient\", configs.Branding.WebClient.Name)\n\tassert.Equal(t, \"WebClient\", configs.Branding.WebClient.ShortName)\n\tassert.Equal(t, \"Client disclaimer\", configs.Branding.WebClient.DisclaimerName)\n\tassert.Equal(t, \"https://example.com\", configs.Branding.WebClient.DisclaimerURL)\n\tassert.Greater(t, len(configs.Branding.WebAdmin.Logo), 0)\n\tassert.Len(t, configs.Branding.WebAdmin.Favicon, 0)\n\tassert.Len(t, configs.Branding.WebClient.Logo, 0)\n\tassert.Len(t, configs.Branding.WebClient.Favicon, 0)\n\n\terr = createTestPNG(tmpFile, 256, 256, color.RGBA{120, 220, 220, 0xff})\n\tassert.NoError(t, err)\n\tform.Set(\"branding_webadmin_logo_remove\", \"0\") // 0 preserves WebAdmin logo\n\tb, contentType, err = getMultipartFormData(form, \"branding_webadmin_favicon\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"Custom WebAdmin\", configs.Branding.WebAdmin.Name)\n\tassert.Equal(t, \"WebAdmin\", configs.Branding.WebAdmin.ShortName)\n\tassert.Equal(t, \"Admin disclaimer\", configs.Branding.WebAdmin.DisclaimerName)\n\tassert.Equal(t, \"https://example.net\", configs.Branding.WebAdmin.DisclaimerURL)\n\tassert.Equal(t, \"Custom WebClient\", configs.Branding.WebClient.Name)\n\tassert.Equal(t, \"WebClient\", configs.Branding.WebClient.ShortName)\n\tassert.Equal(t, \"Client disclaimer\", configs.Branding.WebClient.DisclaimerName)\n\tassert.Equal(t, \"https://example.com\", configs.Branding.WebClient.DisclaimerURL)\n\tassert.Greater(t, len(configs.Branding.WebAdmin.Logo), 0)\n\tassert.Greater(t, len(configs.Branding.WebAdmin.Favicon), 0)\n\tassert.Len(t, configs.Branding.WebClient.Logo, 0)\n\tassert.Len(t, configs.Branding.WebClient.Favicon, 0)\n\n\terr = createTestPNG(tmpFile, 256, 256, color.RGBA{80, 90, 110, 0xff})\n\tassert.NoError(t, err)\n\tb, contentType, err = getMultipartFormData(form, \"branding_webclient_logo\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Greater(t, len(configs.Branding.WebClient.Logo), 0)\n\n\terr = createTestPNG(tmpFile, 256, 256, color.RGBA{120, 50, 120, 0xff})\n\tassert.NoError(t, err)\n\tb, contentType, err = getMultipartFormData(form, \"branding_webclient_favicon\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Greater(t, len(configs.Branding.WebClient.Favicon), 0)\n\n\tfor _, p := range []string{webClientLogoPath, webClientFaviconPath, webAdminLogoPath, webAdminFaviconPath} {\n\t\treq, err := http.NewRequest(http.MethodGet, p, nil)\n\t\tassert.NoError(t, err)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t}\n\t// remove images\n\tform.Set(\"branding_webadmin_logo_remove\", \"1\")\n\tform.Set(\"branding_webclient_logo_remove\", \"1\")\n\tform.Set(\"branding_webadmin_favicon_remove\", \"1\")\n\tform.Set(\"branding_webclient_favicon_remove\", \"1\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nConfigsOK)\n\tconfigs, err = dataprovider.GetConfigs()\n\tassert.NoError(t, err)\n\tassert.Len(t, configs.Branding.WebAdmin.Logo, 0)\n\tassert.Len(t, configs.Branding.WebAdmin.Favicon, 0)\n\tassert.Len(t, configs.Branding.WebClient.Logo, 0)\n\tassert.Len(t, configs.Branding.WebClient.Favicon, 0)\n\tfor _, p := range []string{webClientLogoPath, webClientFaviconPath, webAdminLogoPath, webAdminFaviconPath} {\n\t\treq, err := http.NewRequest(http.MethodGet, p, nil)\n\t\tassert.NoError(t, err)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t}\n\tform.Del(\"branding_webadmin_logo_remove\")\n\tform.Del(\"branding_webclient_logo_remove\")\n\tform.Del(\"branding_webadmin_favicon_remove\")\n\tform.Del(\"branding_webclient_favicon_remove\")\n\t// image too large\n\terr = createTestPNG(tmpFile, 768, 512, color.RGBA{120, 50, 120, 0xff})\n\tassert.NoError(t, err)\n\tb, contentType, err = getMultipartFormData(form, \"branding_webclient_logo\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidPNGSize)\n\t// not a png image\n\terr = createTestFile(tmpFile, 128)\n\tassert.NoError(t, err)\n\tb, contentType, err = getMultipartFormData(form, \"branding_webclient_logo\", tmpFile)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidPNG)\n\n\terr = os.Remove(tmpFile)\n\tassert.NoError(t, err)\n\terr = dataprovider.UpdateConfigs(nil, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n}\n\nfunc TestSFTPLoopError(t *testing.T) {\n\tuser1 := getTestUser()\n\tuser2 := getTestUser()\n\tuser1.Username += \"1\"\n\tuser1.Email = \"user1@test.com\"\n\tuser2.Username += \"2\"\n\tuser1.FsConfig = vfs.Filesystem{\n\t\tProvider: sdk.SFTPFilesystemProvider,\n\t\tSFTPConfig: vfs.SFTPFsConfig{\n\t\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\t\tEndpoint: sftpServerAddr,\n\t\t\t\tUsername: user2.Username,\n\t\t\t},\n\t\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\t},\n\t}\n\n\tuser2.FsConfig.Provider = sdk.SFTPFilesystemProvider\n\tuser2.FsConfig.SFTPConfig = vfs.SFTPFsConfig{\n\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\tEndpoint: sftpServerAddr,\n\t\t\tUsername: user1.Username,\n\t\t},\n\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t}\n\n\tuser1, resp, err := httpdtest.AddUser(user1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tuser2, resp, err = httpdtest.AddUser(user2, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\n\t// test reset password\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 3525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr = smtpCfg.Initialize(configDir, true)\n\tassert.NoError(t, err)\n\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user1.Username)\n\tlastResetCode = \"\"\n\treq, err := http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr := executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"password\", defaultPassword)\n\tform.Set(\"confirm_password\", defaultPassword)\n\tform.Set(\"code\", lastResetCode)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorLoginAfterReset)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\t_, err = httpdtest.RemoveUser(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user1.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user2.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestLoginInvalidFs(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.AllowAPIKeyAuth = true\n\tu.FsConfig.Provider = sdk.GCSFilesystemProvider\n\tu.FsConfig.GCSConfig.Bucket = \"test\"\n\tu.FsConfig.GCSConfig.UploadPartSize = 1\n\tu.FsConfig.GCSConfig.UploadPartMaxTime = 10\n\tu.FsConfig.GCSConfig.Credentials = kms.NewPlainSecret(\"invalid JSON for credentials\")\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tapiKey, _, err := httpdtest.AddAPIKey(dataprovider.APIKey{\n\t\tName: \"testk\",\n\t\tScope: dataprovider.APIKeyScopeUser,\n\t\tUser: u.Username,\n\t}, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\t_, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.Error(t, err)\n\n\t_, err = getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.Error(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebClientChangePwd(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webChangeClientPwdPath, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform := make(url.Values)\n\tform.Set(\"current_password\", defaultPassword)\n\tform.Set(\"new_password1\", defaultPassword)\n\tform.Set(\"new_password2\", defaultPassword)\n\t// no csrf token\n\treq, err = http.NewRequest(http.MethodPost, webChangeClientPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webChangeClientPwdPath, webToken)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webChangeClientPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdNoDifferent)\n\n\tform.Set(\"current_password\", defaultPassword+\"2\")\n\tform.Set(\"new_password1\", defaultPassword+\"1\")\n\tform.Set(\"new_password2\", defaultPassword+\"1\")\n\treq, _ = http.NewRequest(http.MethodPost, webChangeClientPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdCurrentNoMatch)\n\n\tform.Set(\"current_password\", defaultPassword)\n\tform.Set(\"new_password1\", defaultPassword+\"1\")\n\tform.Set(\"new_password2\", defaultPassword+\"1\")\n\treq, _ = http.NewRequest(http.MethodPost, webChangeClientPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webClientLoginPath, rr.Header().Get(\"Location\"))\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPingPath, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\n\t_, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.Error(t, err)\n\t_, err = getJWTWebClientTokenFromTestServer(defaultUsername+\"1\", defaultPassword+\"1\")\n\tassert.Error(t, err)\n\t_, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword+\"1\")\n\tassert.NoError(t, err)\n\n\t// remove the change password permission\n\tuser.Filters.WebClient = []string{sdk.WebClientPasswordChangeDisabled}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tassert.Len(t, user.Filters.WebClient, 1)\n\tassert.Contains(t, user.Filters.WebClient, sdk.WebClientPasswordChangeDisabled)\n\n\twebToken, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword+\"1\")\n\tassert.NoError(t, err)\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"current_password\", defaultPassword+\"1\")\n\tform.Set(\"new_password1\", defaultPassword)\n\tform.Set(\"new_password2\", defaultPassword)\n\treq, _ = http.NewRequest(http.MethodPost, webChangeClientPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestPreDownloadHook(t *testing.T) {\n\tif runtime.GOOS == osWindows {\n\t\tt.Skip(\"this test is not available on Windows\")\n\t}\n\toldExecuteOn := common.Config.Actions.ExecuteOn\n\toldHook := common.Config.Actions.Hook\n\n\tcommon.Config.Actions.ExecuteOn = []string{common.OperationPreDownload}\n\tcommon.Config.Actions.Hook = preActionPath\n\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(preActionPath, getExitCodeScriptContent(0), os.ModePerm)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"testfile\"\n\ttestFileContents := []byte(\"file contents\")\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir()), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), testFileName), testFileContents, os.ModePerm)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\n\terr = os.WriteFile(preActionPath, getExitCodeScriptContent(1), os.ModePerm)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError403Message)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"permission denied\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tcommon.Config.Actions.ExecuteOn = oldExecuteOn\n\tcommon.Config.Actions.Hook = oldHook\n}\n\nfunc TestPreUploadHook(t *testing.T) {\n\tif runtime.GOOS == osWindows {\n\t\tt.Skip(\"this test is not available on Windows\")\n\t}\n\toldExecuteOn := common.Config.Actions.ExecuteOn\n\toldHook := common.Config.Actions.Hook\n\n\tcommon.Config.Actions.ExecuteOn = []string{common.OperationPreUpload}\n\tcommon.Config.Actions.Hook = preActionPath\n\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(preActionPath, getExitCodeScriptContent(0), os.ModePerm)\n\tassert.NoError(t, err)\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"filepre\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"file content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=filepre\",\n\t\tbytes.NewBuffer([]byte(\"single upload content\")))\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\terr = os.WriteFile(preActionPath, getExitCodeScriptContent(1), os.ModePerm)\n\tassert.NoError(t, err)\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=filepre\",\n\t\tbytes.NewBuffer([]byte(\"single upload content\")))\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\tcommon.Config.Actions.ExecuteOn = oldExecuteOn\n\tcommon.Config.Actions.Hook = oldHook\n}\n\nfunc TestShareUsage(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"testfile.dat\"\n\ttestFileSize := int64(65536)\n\ttestFilePath := filepath.Join(user.GetHomeDir(), testFileName)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 2,\n\t\tExpiresAt: util.GetTimeAsMsSinceEpoch(time.Now().Add(1 * time.Second)),\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/unknownid\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\treq.SetBasicAuth(defaultUsername, \"wrong password\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\ttime.Sleep(2 * time.Second)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"_mod\", nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = webClientPubSharesPath + \"/\" + objectID + \"_mod\"\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tshare.ExpiresAt = 0\n\tjsonReq := make(map[string]any)\n\tjsonReq[\"name\"] = share.Name\n\tjsonReq[\"scope\"] = share.Scope\n\tjsonReq[\"paths\"] = share.Paths\n\tjsonReq[\"password\"] = share.Password\n\tjsonReq[\"max_tokens\"] = share.MaxTokens\n\tjsonReq[\"expires_at\"] = share.ExpiresAt\n\tasJSON, err = json.Marshal(jsonReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, userSharesPath+\"/\"+objectID, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"invalid share scope\")\n\n\tshare.MaxTokens = 3\n\tshare.Scope = dataprovider.ShareScopeWrite\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, userSharesPath+\"/\"+objectID, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart1, err := writer.CreateFormFile(\"filenames\", \"file1.txt\")\n\tassert.NoError(t, err)\n\t_, err = part1.Write([]byte(\"file1 content\"))\n\tassert.NoError(t, err)\n\tpart2, err := writer.CreateFormFile(\"filenames\", \"file2.txt\")\n\tassert.NoError(t, err)\n\t_, err = part2.Write([]byte(\"file2 content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to parse multipart form\")\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\t// set the proper content type\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Allowed usage exceeded\")\n\n\tshare.MaxTokens = 6\n\tshare.Scope = dataprovider.ShareScopeWrite\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, userSharesPath+\"/\"+objectID, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientPubSharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 6, share.UsedTokens)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tshare.MaxTokens = 0\n\terr = dataprovider.UpdateShare(&share, user.Username, \"\", \"\")\n\tassert.NoError(t, err)\n\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermDownload}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"permission denied\")\n\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermAny}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tbody = new(bytes.Buffer)\n\twriter = multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filename\", \"file1.txt\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"file content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader = bytes.NewReader(body.Bytes())\n\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"No files uploaded!\")\n\n\tuser.Filters.WebClient = []string{sdk.WebClientSharesDisabled}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tuser.Filters.WebClient = []string{sdk.WebClientShareNoPasswordDisabled}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\tshare.Password = \"\"\n\terr = dataprovider.UpdateShare(&share, user.Username, \"\", \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"sharing without a password was disabled\")\n\n\tuser.Filters.WebClient = []string{sdk.WebClientInfoChangeDisabled}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tshare.Scope = dataprovider.ShareScopeRead\n\tshare.Paths = []string{\"/missing1\", \"/missing2\"}\n\terr = dataprovider.UpdateShare(&share, user.Username, \"\", \"\")\n\tassert.NoError(t, err)\n\n\tdefer func() {\n\t\trcv := recover()\n\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\n\t\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 6, share.UsedTokens)\n\n\t\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\terr = os.RemoveAll(user.GetHomeDir())\n\t\tassert.NoError(t, err)\n\t}()\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\texecuteRequest(req)\n}\n\nfunc TestSharePasswordPolicy(t *testing.T) {\n\tg := getTestGroup()\n\tg.UserSettings.Filters.PasswordStrength = 70\n\tgroup, _, err := httpdtest.AddGroup(g, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tu := getTestUser()\n\tu.Groups = []sdk.GroupMapping{\n\t\t{\n\t\t\tName: g.Name,\n\t\t\tType: sdk.GroupTypePrimary,\n\t\t},\n\t}\n\tu.Password = rand.Text()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, u.Password)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: util.GenerateUniqueID(),\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tPassword: defaultPassword,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"insecure password\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveGroup(group, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestShareMaxExpiration(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.MaxSharesExpiration = 5\n\tu.Filters.DefaultSharesExpiration = 10\n\t_, resp, err := httpdtest.AddUser(u, http.StatusBadRequest)\n\tassert.NoError(t, err)\n\tassert.Contains(t, string(resp), \"must be less than or equal to max shares expiration\")\n\n\tu.Filters.DefaultSharesExpiration = 0\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebClientToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\ts := dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPassword: defaultPassword,\n\t\tPaths: []string{\"/\"},\n\t\tExpiresAt: util.GetTimeAsMsSinceEpoch(time.Now().Add(24 * time.Hour * time.Duration(u.Filters.MaxSharesExpiration+2))),\n\t}\n\tasJSON, err := json.Marshal(s)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"share must expire before\")\n\n\treq, err = http.NewRequest(http.MethodPut, path.Join(userSharesPath, \"shareID\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// expiresAt is mandatory\n\ts.ExpiresAt = 0\n\tasJSON, err = json.Marshal(s)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"share must expire before\")\n\n\ts.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(2 * time.Hour))\n\tasJSON, err = json.Marshal(s)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tshareID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, shareID)\n\n\ts.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(24 * time.Hour * time.Duration(u.Filters.MaxSharesExpiration+2)))\n\tasJSON, err = json.Marshal(s)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, path.Join(userSharesPath, shareID), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"share must expire before\")\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientSharePath, webClientToken)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"name\", s.Name)\n\tform.Set(\"scope\", strconv.Itoa(int(s.Scope)))\n\tform.Set(\"max_tokens\", \"0\")\n\tform.Set(\"paths[0][path]\", \"/\")\n\tform.Set(\"expiration_date\", time.Now().Add(24*time.Hour*time.Duration(u.Filters.MaxSharesExpiration+2)).Format(\"2006-01-02 15:04:05\"))\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webClientToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareExpirationOutOfRange)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientSharePath, shareID), bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webClientToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareExpirationOutOfRange)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webClientToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorGetUser)\n}\n\nfunc TestWebClientShareCredentials(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshareRead := dataprovider.Share{\n\t\tName: \"test share read\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPassword: defaultPassword,\n\t\tPaths: []string{\"/\"},\n\t}\n\n\tshareWrite := dataprovider.Share{\n\t\tName: \"test share write\",\n\t\tScope: dataprovider.ShareScopeReadWrite,\n\t\tPassword: defaultPassword,\n\t\tPaths: []string{\"/\"},\n\t}\n\n\tasJSON, err := json.Marshal(shareRead)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tshareReadID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, shareReadID)\n\n\tasJSON, err = json.Marshal(shareWrite)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tshareWriteID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, shareWriteID)\n\n\turi := path.Join(webClientPubSharesPath, shareReadID, \"browse\")\n\treq, err = http.NewRequest(http.MethodGet, uri, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.Contains(t, location, url.QueryEscape(uri))\n\t// get the login form\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// now set the user token, it is not valid for the share\n\treq, err = http.NewRequest(http.MethodGet, uri, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\t// get a share token\n\tform := make(url.Values)\n\tform.Set(\"share_password\", defaultPassword)\n\tloginURI := path.Join(webClientPubSharesPath, shareReadID, \"login\")\n\treq, err = http.NewRequest(http.MethodPost, loginURI, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\t// set the CSRF token\n\tloginCookie, csrfToken, err := getCSRFTokenMock(loginURI, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, loginURI, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nShareLoginOK)\n\tcookie := rr.Header().Get(\"Set-Cookie\")\n\tcookie = strings.TrimPrefix(cookie, \"jwt=\")\n\tassert.NotEmpty(t, cookie)\n\treq, err = http.NewRequest(http.MethodGet, uri, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// get the download page\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, shareReadID, \"download?a=b\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// get the download page for a missing share\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, \"invalidshareid\", \"download\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// the same cookie will not work for the other share\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, shareWriteID, \"browse\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\t// IP address does not match\n\treq, err = http.NewRequest(http.MethodGet, uri, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\treq.RemoteAddr = \"1.2.3.4:1234\"\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\t// logout to a different share, the cookie is not valid.\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, shareWriteID, \"logout\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidToken)\n\t// logout\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, shareReadID, \"logout\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\t// the cookie is no longer valid\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, shareReadID, \"download?b=c\"), nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = uri\n\tsetJWTCookieForReq(req, cookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Contains(t, rr.Header().Get(\"Location\"), \"/login\")\n\n\t// try to login with invalid credentials\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"share_password\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, loginURI, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\t// login with the next param set\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"share_password\", defaultPassword)\n\tnextURI := path.Join(webClientPubSharesPath, shareReadID, \"browse\")\n\tloginURI = path.Join(webClientPubSharesPath, shareReadID, fmt.Sprintf(\"login?next=%s\", url.QueryEscape(nextURI)))\n\treq, err = http.NewRequest(http.MethodPost, loginURI, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, nextURI, rr.Header().Get(\"Location\"))\n\t// try to login to a missing share\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tloginURI = path.Join(webClientPubSharesPath, \"missing\", \"login\")\n\treq, err = http.NewRequest(http.MethodPost, loginURI, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestShareMaxSessions(t *testing.T) {\n\tu := getTestUser()\n\tu.MaxSessions = 1\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share max sessions read\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID+\"/dirs\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// add a fake connection\n\tfs := vfs.NewOsFs(\"id\", os.TempDir(), \"\", nil)\n\tconnection := &httpd.Connection{\n\t\tBaseConnection: common.NewBaseConnection(fs.ConnectionID(), common.ProtocolHTTP, \"\", \"\", user),\n\t}\n\terr = common.Connections.Add(connection)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID+\"/dirs\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"/dirs\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=file.pdf\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError429Message)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"/browse\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError429Message)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientPubSharesPath+\"/\"+objectID+\"/browse/exist\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"invalid share scope\")\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID+\"/files?path=afile\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\tform := make(url.Values)\n\tform.Set(\"files\", `[]`)\n\treq, err = http.NewRequest(http.MethodPost, webClientPubSharesPath+\"/\"+objectID+\"/partial\",\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError429Message)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\treq, err = http.NewRequest(http.MethodDelete, userSharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t// now test a write share\n\tshare = dataprovider.Share{\n\t\tName: \"test share max sessions write\",\n\t\tScope: dataprovider.ShareScopeWrite,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"file.txt\"), bytes.NewBuffer([]byte(\"content\")))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart1, err := writer.CreateFormFile(\"filenames\", \"file1.txt\")\n\tassert.NoError(t, err)\n\t_, err = part1.Write([]byte(\"file1 content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\tshare = dataprovider.Share{\n\t\tName: \"test share max sessions read&write\",\n\t\tScope: dataprovider.ShareScopeReadWrite,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientPubSharesPath+\"/\"+objectID+\"/browse/exist\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusTooManyRequests, rr)\n\tassert.Contains(t, rr.Body.String(), \"too many open sessions\")\n\n\tcommon.Connections.Remove(connection.GetID())\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\tassert.Len(t, common.Connections.GetStats(\"\"), 0)\n\tassert.Equal(t, int32(0), common.Connections.GetTotalTransfers())\n}\n\nfunc TestShareUploadSingle(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeWrite,\n\t\tPaths: []string{\"/\"},\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\tcontent := []byte(\"shared file content\")\n\tmodTime := time.Now().Add(-12 * time.Hour)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"file.txt\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\treq.Header.Set(\"X-SFTPGO-MTIME\", strconv.FormatInt(util.GetTimeAsMsSinceEpoch(modTime), 10))\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tinfo, err := os.Stat(filepath.Join(user.GetHomeDir(), \"file.txt\"))\n\tif assert.NoError(t, err) {\n\t\tassert.InDelta(t, util.GetTimeAsMsSinceEpoch(modTime), util.GetTimeAsMsSinceEpoch(info.ModTime()), float64(1000))\n\t}\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"upload\"), nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"file.txt\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tinfo, err = os.Stat(filepath.Join(user.GetHomeDir(), \"file.txt\"))\n\tif assert.NoError(t, err) {\n\t\tassert.InDelta(t, util.GetTimeAsMsSinceEpoch(time.Now()), util.GetTimeAsMsSinceEpoch(info.ModTime()), float64(3000))\n\t}\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"dir\", \"file.dat\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"%2F\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir(), \"dir\"), os.ModePerm)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"dir\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\n\t// only uploads to the share root dir are allowed\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"dir\", \"file.dat\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 2, share.UsedTokens)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, \"file1.txt\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestShareReadWrite(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.StartDirectory = path.Join(\"/start\", \"dir\")\n\tu.Permissions[\"/start/dir/limited\"] = []string{dataprovider.PermListItems}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\ttestFileName := \"test.txt\"\n\ttestSubDirs := \"/sub/dir\"\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share rw\",\n\t\tScope: dataprovider.ShareScopeReadWrite,\n\t\tPaths: []string{user.Filters.StartDirectory},\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\tfilesToCheck := make(map[string]any)\n\tfilesToCheck[\"files\"] = []string{testFileName}\n\tasJSON, err = json.Marshal(filesToCheck)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"/browse/exist?path=%2F\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar fileList []any\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 0)\n\n\tcontent := []byte(\"shared rw content\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID, testFileName), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tassert.FileExists(t, filepath.Join(user.GetHomeDir(), user.Filters.StartDirectory, testFileName))\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID)+\"/\"+url.PathEscape(path.Join(testSubDirs, testFileName)), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID)+\"/\"+url.PathEscape(path.Join(testSubDirs, testFileName))+\"?mkdir_parents=true\",\n\t\tbytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tassert.FileExists(t, filepath.Join(user.GetHomeDir(), user.Filters.StartDirectory, testSubDirs, testFileName))\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID)+\"/\"+url.PathEscape(path.Join(\"limited\", \"sub\", testFileName))+\"?mkdir_parents=true\",\n\t\tbytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"/browse/exist?path=%2F\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tfileList = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 1)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=\"+testFileName), nil) //nolint:goconst\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontentDisposition := rr.Header().Get(\"Content-Disposition\")\n\tassert.NotEmpty(t, contentDisposition)\n\n\tform := make(url.Values)\n\tform.Set(\"files\", fmt.Sprintf(`[\"%s\"]`, testFileName))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontentDisposition = rr.Header().Get(\"Content-Disposition\")\n\tassert.NotEmpty(t, contentDisposition)\n\tassert.Equal(t, \"application/zip\", rr.Header().Get(\"Content-Type\"))\n\t// parse form error\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial?path=p%C3%AO%GK\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t// invalid files list\n\tform.Set(\"files\", fmt.Sprintf(`[%s]`, testFileName))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\t// missing directory\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial?path=missing\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID)+\"/\"+url.PathEscape(\"../\"+testFileName),\n\t\tbytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Uploading outside the share is not allowed\")\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(sharesPath, objectID)+\"/\"+url.PathEscape(\"/../../\"+testFileName),\n\t\tbytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Uploading outside the share is not allowed\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestShareUncompressed(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"testfile.dat\"\n\ttestFileSize := int64(65536)\n\ttestFilePath := filepath.Join(user.GetHomeDir(), testFileName)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\ts, err := dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(0), s.ExpiresAt)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"application/zip\", rr.Header().Get(\"Content-Type\"))\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"?compress=false\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"application/zip\", rr.Header().Get(\"Content-Type\"))\n\n\tshare = dataprovider.Share{\n\t\tName: \"test share1\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{testFileName},\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"application/zip\", rr.Header().Get(\"Content-Type\"))\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"?compress=false\", nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"application/octet-stream\", rr.Header().Get(\"Content-Type\"))\n\n\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 2, share.UsedTokens)\n\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermUpload}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"?compress=false\", nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 2, share.UsedTokens)\n\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermAny}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\terr = os.Remove(testFilePath)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"?compress=false\", nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestDownloadFromShareError(t *testing.T) {\n\tu := getTestUser()\n\tu.DownloadDataTransfer = 1\n\tu.Filters.DefaultSharesExpiration = 10\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tuser.UsedDownloadDataTransfer = 1024*1024 - 32768\n\t_, err = httpdtest.UpdateTransferQuotaUsage(user, \"add\", http.StatusOK)\n\tassert.NoError(t, err)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1024*1024-32768), user.UsedDownloadDataTransfer)\n\ttestFileName := \"test_share_file.dat\"\n\ttestFileSize := int64(524288)\n\ttestFilePath := filepath.Join(user.GetHomeDir(), testFileName)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tshare := dataprovider.Share{\n\t\tName: \"test share root browse\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tMaxTokens: 2,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\ts, err := dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tassert.Greater(t, s.ExpiresAt, int64(0))\n\n\tdefer func() {\n\t\trcv := recover()\n\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\n\t\tshare, err = dataprovider.ShareExists(objectID, user.Username)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, 0, share.UsedTokens)\n\n\t\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\terr = os.RemoveAll(user.GetHomeDir())\n\t\tassert.NoError(t, err)\n\t}()\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\texecuteRequest(req)\n}\n\nfunc TestBrowseShares(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"testsharefile.dat\"\n\ttestFileNameLink := \"testsharefile.link\"\n\tshareDir := \"share\"\n\tsubDir := \"sub\"\n\ttestFileSize := int64(65536)\n\ttestFilePath := filepath.Join(user.GetHomeDir(), shareDir, testFileName)\n\ttestLinkPath := filepath.Join(user.GetHomeDir(), shareDir, testFileNameLink)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\terr = createTestFile(filepath.Join(user.GetHomeDir(), shareDir, subDir, testFileName), testFileSize)\n\tassert.NoError(t, err)\n\terr = os.Symlink(testFilePath, testLinkPath)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share browse\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{shareDir},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"upload\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"invalid share scope\")\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Please set the path to a valid file\")\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents := make([]map[string]any, 0)\n\terr = json.Unmarshal(rr.Body.Bytes(), &contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = make([]map[string]any, 0)\n\terr = json.Unmarshal(rr.Body.Bytes(), &contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F\"+subDir), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = make([]map[string]any, 0)\n\terr = json.Unmarshal(rr.Body.Bytes(), &contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 1)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F..\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPathInvalid)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"dirs?path=%2F..\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F..\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=%2F..%2F\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontentDisposition := rr.Header().Get(\"Content-Disposition\")\n\tassert.NotEmpty(t, contentDisposition)\n\n\tform := make(url.Values)\n\tform.Set(\"files\", `[]`)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial?path=%2F..\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPathInvalid)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=\"+testFileName), nil) //nolint:goconst\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontentDisposition = rr.Header().Get(\"Content-Disposition\")\n\tassert.NotEmpty(t, contentDisposition)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=\"+subDir+\"%2F\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontentDisposition = rr.Header().Get(\"Content-Disposition\")\n\tassert.NotEmpty(t, contentDisposition)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=missing\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=missing\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"dirs?path=missing\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=missing\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=\"+testFileNameLink), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=\"+testFileNameLink), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"non regular files are not supported for shares\")\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPDFMessage)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=missing\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPDFMessage)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=%2F..\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPathInvalid)\n\n\tfakePDF := []byte(`%PDF-1.6`)\n\tfor i := 0; i < 128; i++ {\n\t\tfakePDF = append(fakePDF, []byte(fmt.Sprintf(\"%d\", i))...)\n\t}\n\tpdfPath := filepath.Join(user.GetHomeDir(), shareDir, \"test.pdf\")\n\tpdfLinkPath := filepath.Join(user.GetHomeDir(), shareDir, \"link.pdf\")\n\terr = os.WriteFile(pdfPath, fakePDF, 0666)\n\tassert.NoError(t, err)\n\terr = os.Symlink(pdfPath, pdfLinkPath)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"viewpdf?path=test.pdf\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=test.pdf\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\ts, err := dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tusedTokens := s.UsedTokens\n\tassert.Greater(t, usedTokens, 0)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=link.pdf\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// downloading a symlink will fail, usage should not change\n\ts, err = dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tassert.Equal(t, usedTokens, s.UsedTokens)\n\n\t// share a symlink\n\tshare = dataprovider.Share{\n\t\tName: \"test share browse\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{path.Join(shareDir, testFileNameLink)},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\t// uncompressed download should not work\n\treq, err = http.NewRequest(http.MethodGet, webClientPubSharesPath+\"/\"+objectID+\"?compress=false\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"application/zip\", rr.Header().Get(\"Content-Type\"))\n\t// this share is not browsable, it does not contains a directory\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tform = make(url.Values)\n\tform.Set(\"files\", `[]`)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareBrowseNoDir)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareBrowseNoDir)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"the shared object is not a directory and so it is not browsable\")\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareBrowseNoDir)\n\n\t// now test a missing shareID\n\tobjectID = \"123456\"\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"files?path=\"+testFileName), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tform = make(url.Values)\n\tform.Set(\"files\", `[]`)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"partial?path=%2F\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"viewpdf?path=p\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"getpdf?path=p\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// share a missing base path\n\tshare = dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{path.Join(shareDir, \"missingdir\")},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"unable to check the share directory\")\n\t// share multiple paths\n\tshare = dataprovider.Share{\n\t\tName: \"test share\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{shareDir, \"/anotherdir\"},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareBrowsePaths)\n\n\tshare = dataprovider.Share{\n\t\tName: \"test share rw\",\n\t\tScope: dataprovider.ShareScopeReadWrite,\n\t\tPaths: []string{\"/missingdir\"},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"/browse/exist?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"unable to check the share directory\")\n\n\tshare = dataprovider.Share{\n\t\tName: \"test share rw\",\n\t\tScope: dataprovider.ShareScopeReadWrite,\n\t\tPaths: []string{shareDir},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"/browse/exist?path=%2F..\"), nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid path\")\n\t// share the root path\n\tshare = dataprovider.Share{\n\t\tName: \"test share root\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tMaxTokens: 0,\n\t}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = make([]map[string]any, 0)\n\terr = json.Unmarshal(rr.Body.Bytes(), &contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 1)\n\t// if we require two-factor auth for HTTP protocol the share should not work anymore\n\tuser.Filters.TwoFactorAuthProtocols = []string{common.ProtocolSSH}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tuser.Filters.TwoFactorAuthProtocols = []string{common.ProtocolSSH, common.ProtocolHTTP}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(sharesPath, objectID, \"dirs?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"two-factor authentication requirements not met\")\n\tuser.Filters.TwoFactorAuthProtocols = []string{common.ProtocolSSH}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t// share read/write\n\tshare.Scope = dataprovider.ShareScopeReadWrite\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"browse?path=%2F\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// on upload we should be redirected\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webClientPubSharesPath, objectID, \"upload\"), nil)\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(defaultUsername, defaultPassword)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.Equal(t, path.Join(webClientPubSharesPath, objectID, \"browse\"), location)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestUserAPIShareErrors(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tScope: 1000,\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"invalid scope\")\n\t// invalid json\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer([]byte(\"{\")))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tshare.Scope = dataprovider.ShareScopeWrite\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"at least a shared path is required\")\n\n\tshare.Paths = []string{\"path1\", \"../path1\", \"/path2\"}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"the write share scope requires exactly one path\")\n\n\tshare.Paths = []string{\"\", \"\"}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"at least a shared path is required\")\n\n\tshare.Paths = []string{\"path1\", \"../path1\", \"/path1\"}\n\tshare.Password = redactedSecret\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"cannot save a share with a redacted password\")\n\n\tshare.Password = \"newpass\"\n\tshare.AllowFrom = []string{\"not valid\"}\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"could not parse allow from entry\")\n\n\tshare.AllowFrom = []string{\"127.0.0.1/8\"}\n\tshare.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(-12 * time.Hour))\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"expiration must be in the future\")\n\n\tshare.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(12 * time.Hour))\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"name is mandatory\")\n\t// invalid json\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer([]byte(\"}\")))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath+\"?limit=a\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestUserAPIShares(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tu := getTestUser()\n\tu.Username = altAdminUsername\n\tuser1, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken1, err := getJWTAPIUserTokenFromTestServer(user1.Username, defaultPassword)\n\tassert.NoError(t, err)\n\n\t// the share username will be set from the claims\n\tshare := dataprovider.Share{\n\t\tName: \"share1\",\n\t\tDescription: \"description1\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tCreatedAt: 1,\n\t\tUpdatedAt: 2,\n\t\tLastUseAt: 3,\n\t\tExpiresAt: util.GetTimeAsMsSinceEpoch(time.Now().Add(2 * time.Hour)),\n\t\tPassword: defaultPassword,\n\t\tMaxTokens: 10,\n\t\tUsedTokens: 2,\n\t\tAllowFrom: []string{\"192.168.1.0/24\"},\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.NotEmpty(t, location)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\tassert.Equal(t, fmt.Sprintf(\"%v/%v\", userSharesPath, objectID), location)\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar shareGet dataprovider.Share\n\terr = json.Unmarshal(rr.Body.Bytes(), &shareGet)\n\tassert.NoError(t, err)\n\tassert.Equal(t, objectID, shareGet.ShareID)\n\tassert.Equal(t, share.Name, shareGet.Name)\n\tassert.Equal(t, share.Description, shareGet.Description)\n\tassert.Equal(t, share.Scope, shareGet.Scope)\n\tassert.Equal(t, share.Paths, shareGet.Paths)\n\tassert.Equal(t, int64(0), shareGet.LastUseAt)\n\tassert.Greater(t, shareGet.CreatedAt, share.CreatedAt)\n\tassert.Greater(t, shareGet.UpdatedAt, share.UpdatedAt)\n\tassert.Equal(t, share.ExpiresAt, shareGet.ExpiresAt)\n\tassert.Equal(t, share.MaxTokens, shareGet.MaxTokens)\n\tassert.Equal(t, 0, shareGet.UsedTokens)\n\tassert.Equal(t, share.Paths, shareGet.Paths)\n\tassert.Equal(t, redactedSecret, shareGet.Password)\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token1)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\ts, err := dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tmatch, err := s.CheckCredentials(defaultPassword)\n\tassert.True(t, match)\n\tassert.NoError(t, err)\n\tmatch, err = s.CheckCredentials(defaultPassword + \"mod\")\n\tassert.False(t, match)\n\tassert.Error(t, err)\n\n\tshareGet.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(3 * time.Hour))\n\tasJSON, err = json.Marshal(shareGet)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\ts, err = dataprovider.ShareExists(objectID, defaultUsername)\n\tassert.NoError(t, err)\n\tmatch, err = s.CheckCredentials(defaultPassword)\n\tassert.True(t, match)\n\tassert.NoError(t, err)\n\tmatch, err = s.CheckCredentials(defaultPassword + \"mod\")\n\tassert.False(t, match)\n\tassert.Error(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar shareGetNew dataprovider.Share\n\terr = json.Unmarshal(rr.Body.Bytes(), &shareGetNew)\n\tassert.NoError(t, err)\n\tassert.NotEqual(t, shareGet.UpdatedAt, shareGetNew.UpdatedAt)\n\tshareGet.UpdatedAt = shareGetNew.UpdatedAt\n\tassert.Equal(t, shareGet, shareGetNew)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar shares []dataprovider.Share\n\terr = json.Unmarshal(rr.Body.Bytes(), &shares)\n\tassert.NoError(t, err)\n\tif assert.Len(t, shares, 1) {\n\t\tassert.Equal(t, shareGetNew, shares[0])\n\t}\n\n\terr = dataprovider.UpdateShareLastUse(&shareGetNew, 2)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tshareGetNew = dataprovider.Share{}\n\terr = json.Unmarshal(rr.Body.Bytes(), &shareGetNew)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 2, shareGetNew.UsedTokens, \"share: %v\", shareGetNew)\n\tassert.Greater(t, shareGetNew.LastUseAt, int64(0), \"share: %v\", shareGetNew)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token1)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tshares = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &shares)\n\tassert.NoError(t, err)\n\tassert.Len(t, shares, 0)\n\n\t// set an empty password\n\tshareGet.Password = \"\"\n\tasJSON, err = json.Marshal(shareGet)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tshareGetNew = dataprovider.Share{}\n\terr = json.Unmarshal(rr.Body.Bytes(), &shareGetNew)\n\tassert.NoError(t, err)\n\tassert.Empty(t, shareGetNew.Password)\n\n\treq, err = http.NewRequest(http.MethodDelete, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tshare.Name = \"\"\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation = rr.Header().Get(\"Location\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t// the share should be deleted with the associated user\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\t_, err = httpdtest.RemoveUser(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user1.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestUsersAPISharesNoPasswordDisabled(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.WebClient = []string{sdk.WebClientShareNoPasswordDisabled}\n\tu.Filters.PasswordStrength = 70\n\tu.Password = \"ahpoo8baa6EeZieshies\"\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, u.Password)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"s\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err := json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"You are not authorized to share files/folders without a password\")\n\n\tshare.Password = defaultPassword\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tshare.Password = \"vi5eiJoovee5ya9yahpi\"\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.NotEmpty(t, location)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\tassert.Equal(t, fmt.Sprintf(\"%v/%v\", userSharesPath, objectID), location)\n\n\tshare.Password = \"\"\n\tasJSON, err = json.Marshal(share)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"You are not authorized to share files/folders without a password\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestUserAPIKey(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.AllowAPIKeyAuth = true\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tapiKey := dataprovider.APIKey{\n\t\tName: \"testkey\",\n\t\tUser: user.Username + \"1\",\n\t\tScope: dataprovider.APIKeyScopeUser,\n\t}\n\t_, _, err = httpdtest.AddAPIKey(apiKey, http.StatusBadRequest)\n\tassert.NoError(t, err)\n\tapiKey.User = user.Username\n\tapiKey, _, err = httpdtest.AddAPIKey(apiKey, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tadminAPIKey := dataprovider.APIKey{\n\t\tName: \"testadminkey\",\n\t\tScope: dataprovider.APIKeyScopeAdmin,\n\t}\n\tadminAPIKey, _, err = httpdtest.AddAPIKey(adminAPIKey, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"filenametest\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"test file content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar dirEntries []map[string]any\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirEntries)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirEntries, 1)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, adminAPIKey.Key, user.Username)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tuser.Status = 0\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\tuser.Status = 1\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolFTP}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tapiKeyNew := dataprovider.APIKey{\n\t\tName: apiKey.Name,\n\t\tScope: dataprovider.APIKeyScopeUser,\n\t}\n\n\tapiKeyNew, _, err = httpdtest.AddAPIKey(apiKeyNew, http.StatusCreated)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKeyNew.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\t// now associate a user\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKeyNew.Key, user.Username)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// now with a missing user\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKeyNew.Key, user.Username+\"1\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\t// empty user and key not associated to any user\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKeyNew.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\tapiKeyNew.ExpiresAt = util.GetTimeAsMsSinceEpoch(time.Now().Add(-24 * time.Hour))\n\t_, _, err = httpdtest.UpdateAPIKey(apiKeyNew, http.StatusOK)\n\tassert.NoError(t, err)\n\t// expired API key\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKeyNew.Key, user.Username)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveAPIKey(apiKeyNew, http.StatusOK)\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveAPIKey(adminAPIKey, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebClientExistenceCheck(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodPost, webClientExistPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr) // no CSRF header\n\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath, bytes.NewBuffer([]byte(`[]`)))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tfilesToCheck := make(map[string]any)\n\tfilesToCheck[\"files\"] = nil\n\tasJSON, err := json.Marshal(filesToCheck)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"files to be checked are mandatory\")\n\n\ttestFileName := \"file.dat\"\n\ttestDirName := \"adirname\"\n\tfilesToCheck[\"files\"] = []string{testFileName}\n\tasJSON, err = json.Marshal(filesToCheck)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath+\"?path=%2Fmissingdir\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath+\"?path=%2F\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar fileList []any\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 0)\n\n\terr = createTestFile(filepath.Join(user.GetHomeDir(), testFileName), 100)\n\tassert.NoError(t, err)\n\terr = os.Mkdir(filepath.Join(user.GetHomeDir(), testDirName), 0755)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath+\"?path=%2F\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tfileList = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 1)\n\n\tfilesToCheck[\"files\"] = []string{testFileName, testDirName}\n\tasJSON, err = json.Marshal(filesToCheck)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath+\"?path=%2F\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tfileList = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 2)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath+\"?path=%2F\"+testDirName, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tfileList = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &fileList)\n\tassert.NoError(t, err)\n\tassert.Len(t, fileList, 0)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientExistPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebClientViewPDF(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webClientViewPDFPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientViewPDFPath+\"?path=test.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=test.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2F\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPDFMessage)\n\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), \"test.pdf\"), []byte(\"some text data\"), 0666)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPDFMessage)\n\n\terr = createTestFile(filepath.Join(user.GetHomeDir(), \"test.pdf\"), 1024)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPDFMessage)\n\n\tfakePDF := []byte(`%PDF-1.6`)\n\tfor i := 0; i < 128; i++ {\n\t\tfakePDF = append(fakePDF, []byte(fmt.Sprintf(\"%d\", i))...)\n\t}\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), \"test.pdf\"), fakePDF, 0666)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: \"/\",\n\t\t\tDeniedPatterns: []string{\"*.pdf\"},\n\t\t},\n\t}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError403Message)\n\n\tuser.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: \"/\",\n\t\t\tDeniedPatterns: []string{\"*.txt\"},\n\t\t},\n\t}\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientGetPDFPath+\"?path=%2Ftest.pdf\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestWebEditFile(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttestFile1 := \"testfile1.txt\"\n\ttestFile2 := \"testfile2\"\n\tfile1Size := int64(65536)\n\tfile2Size := int64(1048576 * 5)\n\terr = createTestFile(filepath.Join(user.GetHomeDir(), testFile1), file1Size)\n\tassert.NoError(t, err)\n\terr = createTestFile(filepath.Join(user.GetHomeDir(), testFile2), file2Size)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFile1, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFile2, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorEditSize)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=missing\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=%2F\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorEditDir)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFile1, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolFTP}\n\tuser.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: \"/\",\n\t\t\tDeniedPatterns: []string{\"*.txt\"},\n\t\t},\n\t}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFile1, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError403Message)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFile1, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestWebGetFiles(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\ttestFileName := \"testfile\"\n\ttestDir := \"testdir\"\n\ttestFileContents := []byte(\"file contents\")\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir(), testDir), os.ModePerm)\n\tassert.NoError(t, err)\n\textensions := []string{\"\", \".doc\", \".ppt\", \".xls\", \".pdf\", \".mkv\", \".png\", \".go\", \".zip\", \".txt\"}\n\tfor _, ext := range extensions {\n\t\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), testFileName+ext), testFileContents, os.ModePerm)\n\t\tassert.NoError(t, err)\n\t}\n\terr = os.Symlink(filepath.Join(user.GetHomeDir(), testFileName+\".doc\"), filepath.Join(user.GetHomeDir(), testDir, testFileName+\".link\"))\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\treq, _ := http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testDir, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientDirsPath+\"?path=\"+testDir, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar dirContents []map[string]any\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirContents)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirContents, 1)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientDirsPath+\"?dirtree=1&path=\"+testDir, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tdirContents = make([]map[string]any, 0)\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirContents)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirContents, 0)\n\n\treq, _ = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+testDir, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar dirEntries []map[string]any\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirEntries)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirEntries, 1)\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"files\", fmt.Sprintf(`[\"%s\",\"%s\",\"%s\"]`, testFileName, testDir, testFileName+extensions[2]))\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=\"+url.QueryEscape(\"/\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t// add csrf token\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=\"+url.QueryEscape(\"/\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// parse form error\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=p%C3%AO%GK\",\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tfilesList := []string{testFileName, testDir, testFileName + extensions[2]}\n\tasJSON, err := json.Marshal(filesList)\n\tassert.NoError(t, err)\n\treq, _ = http.NewRequest(http.MethodPost, userStreamZipPath, bytes.NewBuffer(asJSON))\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tassert.NoError(t, err)\n\treq, _ = http.NewRequest(http.MethodPost, userStreamZipPath, bytes.NewBuffer([]byte(`file`)))\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"files\", fmt.Sprintf(`[\"%v\"]`, testDir))\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=\"+url.QueryEscape(\"/\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"files\", \"notalist\")\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=\"+url.QueryEscape(\"/\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientDirsPath+\"?path=/\", nil) //nolint:goconst\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tdirContents = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirContents)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirContents, len(extensions)+1)\n\n\treq, _ = http.NewRequest(http.MethodGet, userDirsPath+\"?path=/\", nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tdirEntries = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &dirEntries)\n\tassert.NoError(t, err)\n\tassert.Len(t, dirEntries, len(extensions)+1)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientDirsPath+\"?path=/missing\", nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorDirListGeneric)\n\n\treq, _ = http.NewRequest(http.MethodGet, userDirsPath+\"?path=missing\", nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to get directory lister\")\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\", nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Please set the path to a valid file\")\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testDir, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"is a directory\")\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=notafile\", nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to stat the requested file\")\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=2-\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\tassert.Equal(t, testFileContents[2:], rr.Body.Bytes())\n\tlastModified, err := http.ParseTime(rr.Header().Get(\"Last-Modified\"))\n\tassert.NoError(t, err)\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=2-\")\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\tassert.Equal(t, testFileContents[2:], rr.Body.Bytes())\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=-2\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\tassert.Equal(t, testFileContents[11:], rr.Body.Bytes())\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=-2,\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestedRangeNotSatisfiable, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=1a-\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestedRangeNotSatisfiable, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=2b-\")\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestedRangeNotSatisfiable, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=2-\")\n\treq.Header.Set(\"If-Range\", lastModified.UTC().Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"Range\", \"bytes=2-\")\n\treq.Header.Set(\"If-Range\", lastModified.UTC().Add(-120*time.Second).Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"If-Modified-Since\", lastModified.UTC().Add(-120*time.Second).Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"If-Modified-Since\", lastModified.UTC().Add(120*time.Second).Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotModified, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"If-Unmodified-Since\", lastModified.UTC().Add(-120*time.Second).Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPreconditionFailed, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, userFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"If-Unmodified-Since\", lastModified.UTC().Add(-120*time.Second).Format(http.TimeFormat))\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPreconditionFailed, rr)\n\n\treq, _ = http.NewRequest(http.MethodHead, webClientFilesPath+\"?path=\"+testFileName, nil)\n\treq.Header.Set(\"If-Unmodified-Since\", lastModified.UTC().Add(120*time.Second).Format(http.TimeFormat))\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\t_, resp, err := httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err, string(resp))\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientDirsPath+\"?path=/\", nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+testDir, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tfilesList = []string{testDir}\n\tasJSON, err = json.Marshal(filesList)\n\tassert.NoError(t, err)\n\treq, _ = http.NewRequest(http.MethodPost, userStreamZipPath, bytes.NewBuffer(asJSON))\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolFTP}\n\tuser.Filters.DeniedLoginMethods = []string{dataprovider.LoginMethodPassword}\n\t_, resp, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err, string(resp))\n\n\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tform = make(url.Values)\n\tform.Set(\"files\", `[]`)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientDownloadZipPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+testDir, nil)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestRenameDifferentResource(t *testing.T) {\n\tfolderName := \"foldercryptfs\"\n\tf := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: filepath.Join(os.TempDir(), \"folderName\"),\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.CryptedFilesystemProvider,\n\t\t\tCryptConfig: vfs.CryptFsConfig{\n\t\t\t\tPassphrase: kms.NewPlainSecret(\"super secret\"),\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err := httpdtest.AddFolder(f, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu := getTestUser()\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName,\n\t\t},\n\t\tVirtualPath: \"/folderPath\",\n\t})\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"file.txt\"\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\n\tgetStatusResponse := func(taskID string) int {\n\t\treq, _ := http.NewRequest(http.MethodGet, webClientTasksPath+\"/\"+url.PathEscape(taskID), nil)\n\t\treq.RemoteAddr = defaultRemoteAddr\n\t\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr := executeRequest(req)\n\t\tif rr.Code != http.StatusOK {\n\t\t\treturn -1\n\t\t}\n\t\tresp := make(map[string]any)\n\t\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\t\tif err != nil {\n\t\t\treturn -1\n\t\t}\n\t\treturn int(resp[\"status\"].(float64))\n\t}\n\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Cannot perform copy step\")\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileMovePath+\"?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\ttaskResp := make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &taskResp)\n\tassert.NoError(t, err)\n\ttaskID := taskResp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusNotFound\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), testFileName), []byte(\"just a test\"), os.ModePerm)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t// recreate the file and remove the delete permission\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), testFileName), []byte(\"just another test\"), os.ModePerm)\n\tassert.NoError(t, err)\n\n\tu.Permissions = map[string][]string{\n\t\t\"/\": {dataprovider.PermUpload, dataprovider.PermListItems, dataprovider.PermCreateDirs,\n\t\t\tdataprovider.PermDownload, dataprovider.PermOverwrite},\n\t}\n\t_, resp, err := httpdtest.UpdateUser(u, http.StatusOK, \"\")\n\tassert.NoError(t, err, string(resp))\n\twebAPIToken, err = getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Cannot perform copy step\")\n\n\tu.Permissions = map[string][]string{\n\t\t\"/\": {dataprovider.PermUpload, dataprovider.PermListItems, dataprovider.PermCreateDirs,\n\t\t\tdataprovider.PermDownload, dataprovider.PermOverwrite, dataprovider.PermCopy},\n\t}\n\t_, resp, err = httpdtest.UpdateUser(u, http.StatusOK, \"\")\n\tassert.NoError(t, err, string(resp))\n\twebAPIToken, err = getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Cannot perform remove step\")\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileMovePath+\"?path=\"+testFileName+\"&target=\"+url.QueryEscape(path.Join(\"/\", \"folderPath\", testFileName)), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\ttaskResp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &taskResp)\n\tassert.NoError(t, err)\n\ttaskID = taskResp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusForbidden\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebDirsAPI(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\ttestDir := \"testdir\"\n\n\treq, err := http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar contents []map[string]any\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 0)\n\n\t// rename a missing folder\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testDir+\"&target=\"+testDir+\"new\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// copy a missing folder\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/copy?path=\"+testDir+\"%2F&target=\"+testDir+\"new%2F\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// delete a missing folder\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// create a dir\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t// check the dir was created\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tif assert.Len(t, contents, 1) {\n\t\tassert.Equal(t, testDir, contents[0][\"name\"])\n\t}\n\t// rename a dir with the same source and target name\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testDir+\"&target=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testDir+\"&target=%2F\"+testDir+\"%2F\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\t// copy a dir with the same source and target name\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/copy?path=\"+testDir+\"&target=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\t// create a dir with missing parents\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=\"+url.QueryEscape(path.Join(\"/sub/dir\", testDir)), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// setting the mkdir_parents param will work\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?mkdir_parents=true&path=\"+url.QueryEscape(path.Join(\"/sub/dir\", testDir)), nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t// copy the dir\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/copy?path=\"+testDir+\"&target=\"+testDir+\"copy\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// rename the dir\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testDir+\"&target=\"+testDir+\"new\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// delete the dir\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=\"+testDir+\"new\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=\"+testDir+\"copy\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// the root dir cannot be created\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermListItems}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t// the user has no more the permission to create the directory\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\t// the user is deleted, any API call should fail\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=\"+testDir+\"&target=\"+testDir+\"new\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/copy?path=\"+testDir+\"&target=\"+testDir+\"new\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=\"+testDir+\"new\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestWebUploadSingleFile(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tcontent := []byte(\"test content\")\n\n\treq, err := http.NewRequest(http.MethodPost, userUploadFilePath, bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"please set a file path\")\n\n\tmodTime := time.Now().Add(-24 * time.Hour)\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file.txt\", bytes.NewBuffer(content)) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\treq.Header.Set(\"X-SFTPGO-MTIME\", strconv.FormatInt(util.GetTimeAsMsSinceEpoch(modTime), 10))\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tinfo, err := os.Stat(filepath.Join(user.GetHomeDir(), \"file.txt\"))\n\tif assert.NoError(t, err) {\n\t\tassert.InDelta(t, util.GetTimeAsMsSinceEpoch(modTime), util.GetTimeAsMsSinceEpoch(info.ModTime()), float64(1000))\n\t}\n\t// invalid modification time will be ignored\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file.txt\", bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\treq.Header.Set(\"X-SFTPGO-MTIME\", \"123abc\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tinfo, err = os.Stat(filepath.Join(user.GetHomeDir(), \"file.txt\"))\n\tif assert.NoError(t, err) {\n\t\tassert.InDelta(t, util.GetTimeAsMsSinceEpoch(time.Now()), util.GetTimeAsMsSinceEpoch(info.ModTime()), float64(3000))\n\t}\n\t// upload to a missing dir will fail without the mkdir_parents param\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=\"+url.QueryEscape(\"/subdir/file.txt\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?mkdir_parents=true&path=\"+url.QueryEscape(\"/subdir/file.txt\"), bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tmetadataReq := make(map[string]int64)\n\tmetadataReq[\"modification_time\"] = util.GetTimeAsMsSinceEpoch(modTime)\n\tasJSON, err := json.Marshal(metadataReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath+\"?path=file.txt\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tinfo, err = os.Stat(filepath.Join(user.GetHomeDir(), \"file.txt\"))\n\tif assert.NoError(t, err) {\n\t\tassert.InDelta(t, util.GetTimeAsMsSinceEpoch(modTime), util.GetTimeAsMsSinceEpoch(info.ModTime()), float64(1000))\n\t}\n\t// missing file\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath+\"?path=file2.txt\", bytes.NewBuffer(asJSON)) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to set metadata for path\")\n\t// invalid JSON\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath+\"?path=file.txt\", bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t// missing mandatory parameter\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"please set a modification_time and a path\")\n\n\tmetadataReq = make(map[string]int64)\n\tasJSON, err = json.Marshal(metadataReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath+\"?path=file.txt\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"please set a modification_time and a path\")\n\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=%2Fdir%2Ffile.txt\", bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to write file\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file.txt\", bytes.NewBuffer(content))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to retrieve your user\")\n\n\tmetadataReq[\"modification_time\"] = util.GetTimeAsMsSinceEpoch(modTime)\n\tasJSON, err = json.Marshal(metadataReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPatch, userFilesDirsMetadataPath+\"?path=file.txt\", bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to retrieve your user\")\n}\n\nfunc TestWebFilesAPI(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart1, err := writer.CreateFormFile(\"filenames\", \"file1.txt\")\n\tassert.NoError(t, err)\n\t_, err = part1.Write([]byte(\"file1 content\"))\n\tassert.NoError(t, err)\n\tpart2, err := writer.CreateFormFile(\"filenames\", \"file2.txt\")\n\tassert.NoError(t, err)\n\t_, err = part2.Write([]byte(\"file2 content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to parse multipart form\")\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(0), user.FirstUpload)\n\tassert.Equal(t, int64(0), user.FirstDownload)\n\t// set the proper content type\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Greater(t, user.FirstUpload, int64(0))\n\tassert.Equal(t, int64(0), user.FirstDownload)\n\t// check we have 2 files\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar contents []map[string]any\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\t// download a file\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=file1.txt\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"file1 content\", rr.Body.String())\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Greater(t, user.FirstUpload, int64(0))\n\tassert.Greater(t, user.FirstDownload, int64(0))\n\t// overwrite the existing files\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\t// now create a dir and upload to that dir\n\ttestDir := \"tdir\"\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=\"+testDir, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t// upload to a missing subdir will fail without the mkdir_parents param\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=\"+url.QueryEscape(\"/sub/\"+testDir), reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?mkdir_parents=true&path=\"+url.QueryEscape(\"/sub/\"+testDir), reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 4)\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+testDir, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\t// copy a file\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/copy?path=file1.txt&target=%2Ftdir%2Ffile_copy.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// rename a file\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?target=%2Ftdir%2Ffile3.txt&path=file1.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// rename a missing file\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=file1.txt&target=%2Ftdir%2Ffile3.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// rename a file with target name equal to source name\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=file1.txt&target=file1.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\t// delete a file\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file2.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// delete a missing file\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file2.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// delete a directory\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=tdir\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t// make a symlink outside the home dir and then try to delete it\n\textPath := filepath.Join(os.TempDir(), \"file\")\n\terr = os.WriteFile(extPath, []byte(\"contents\"), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.Symlink(extPath, filepath.Join(user.GetHomeDir(), \"file\"))\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\terr = os.Remove(extPath)\n\tassert.NoError(t, err)\n\t// remove delete and overwrite permissions\n\tuser.Permissions[\"/\"] = []string{dataprovider.PermListItems, dataprovider.PermDownload, dataprovider.PermUpload}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=tdir\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=%2Ftdir%2Ffile1.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t// the user is deleted, any API call should fail\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=file1.txt&target=%2Ftdir%2Ffile3.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file2.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestBufferedWebFilesAPI(t *testing.T) {\n\tu := getTestUser()\n\tu.FsConfig.OSConfig = sdk.OSFsConfig{\n\t\tReadBufferSize: 1,\n\t\tWriteBufferSize: 1,\n\t}\n\tvdirPath := \"/crypted\"\n\tmappedPath := filepath.Join(os.TempDir(), util.GenerateUniqueID())\n\tfolderName := filepath.Base(mappedPath)\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName,\n\t\t},\n\t\tVirtualPath: vdirPath,\n\t\tQuotaFiles: -1,\n\t\tQuotaSize: -1,\n\t})\n\tf := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: mappedPath,\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.CryptedFilesystemProvider,\n\t\t\tCryptConfig: vfs.CryptFsConfig{\n\t\t\t\tOSFsConfig: sdk.OSFsConfig{\n\t\t\t\t\tWriteBufferSize: 3,\n\t\t\t\t\tReadBufferSize: 2,\n\t\t\t\t},\n\t\t\t\tPassphrase: kms.NewPlainSecret(defaultPassword),\n\t\t\t},\n\t\t},\n\t}\n\t_, _, err := httpdtest.AddFolder(f, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart1, err := writer.CreateFormFile(\"filenames\", \"file1.txt\")\n\tassert.NoError(t, err)\n\t_, err = part1.Write([]byte(\"file1 content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=\"+url.QueryEscape(vdirPath), reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=file1.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"file1 content\", rr.Body.String())\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+url.QueryEscape(vdirPath+\"/file1.txt\"), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, \"file1 content\", rr.Body.String())\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=file1.txt\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Range\", \"bytes=2-\")\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\tassert.Equal(t, \"le1 content\", rr.Body.String())\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+url.QueryEscape(vdirPath+\"/file1.txt\"), nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Range\", \"bytes=3-6\")\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\tassert.Equal(t, \"e1 c\", rr.Body.String())\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPath)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebClientTasksAPI(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\tu1 := getTestUser()\n\tu1.Username = xid.New().String()\n\tuser1, _, err := httpdtest.AddUser(u1, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestDir := \"subdir\"\n\ttestFileData := []byte(\"data\")\n\ttestFilePath := filepath.Join(user.GetHomeDir(), testDir, \"file.txt\")\n\ttestFileName := filepath.Base(testFilePath)\n\terr = os.MkdirAll(filepath.Dir(testFilePath), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(testFilePath, testFileData, 0666)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\twebToken1, err := getJWTWebClientTokenFromTestServer(user1.Username, defaultPassword)\n\tassert.NoError(t, err)\n\n\tgetStatusResponse := func(taskID string) int {\n\t\treq, _ := http.NewRequest(http.MethodGet, webClientTasksPath+\"/\"+url.PathEscape(taskID), nil)\n\t\treq.RemoteAddr = defaultRemoteAddr\n\t\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr := executeRequest(req)\n\t\tif rr.Code != http.StatusOK {\n\t\t\treturn -1\n\t\t}\n\t\tresp := make(map[string]any)\n\t\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\t\tif err != nil {\n\t\t\treturn -1\n\t\t}\n\t\treturn int(resp[\"status\"].(float64))\n\t}\n\t// missing task\n\tassert.Equal(t, -1, getStatusResponse(\"missing\"))\n\n\treq, err := http.NewRequest(http.MethodPost, webClientFileCopyPath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName))+\"&target=\"+url.QueryEscape(testFileName), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp := make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID := resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusOK\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\t// cannot get the task with a different user\n\treq, err = http.NewRequest(http.MethodGet, webClientTasksPath+\"/\"+url.PathEscape(taskID), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken1)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileMovePath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName))+\"&target=\"+url.QueryEscape(testFileName), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID = resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusOK\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\treq, err = http.NewRequest(http.MethodDelete, webClientDirsPath+\"?path=\"+\n\t\turl.QueryEscape(testDir), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID = resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusOK\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\treq, err = http.NewRequest(http.MethodDelete, webClientDirsPath+\"?path=\"+\n\t\turl.QueryEscape(testDir), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID = resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusNotFound\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileMovePath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName))+\"&target=\"+url.QueryEscape(testFileName), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID = resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusNotFound\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileCopyPath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName)+\"/\")+\"&target=\"+url.QueryEscape(testFileName+\"/\"), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusAccepted, rr)\n\tresp = make(map[string]any)\n\terr = json.Unmarshal(rr.Body.Bytes(), &resp)\n\tassert.NoError(t, err)\n\ttaskID = resp[\"message\"].(string)\n\tassert.NotEmpty(t, taskID)\n\n\tassert.Eventually(t, func() bool {\n\t\tstatus := getStatusResponse(taskID)\n\t\treturn status == http.StatusNotFound\n\t}, 1000*time.Millisecond, 100*time.Millisecond)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user1.GetHomeDir())\n\tassert.NoError(t, err)\n\t// user deleted\n\treq, err = http.NewRequest(http.MethodDelete, webClientDirsPath+\"?path=\"+\n\t\turl.QueryEscape(testDir), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileMovePath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName))+\"&target=\"+url.QueryEscape(testFileName), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientFileCopyPath+\"?path=\"+\n\t\turl.QueryEscape(path.Join(testDir, testFileName))+\"&target=\"+url.QueryEscape(testFileName), nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestStartDirectory(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.StartDirectory = \"/start/dir\"\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tfilename := \"file1.txt\"\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart1, err := writer.CreateFormFile(\"filenames\", filename)\n\tassert.NoError(t, err)\n\t_, err = part1.Write([]byte(\"test content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t// check we have 2 files in the defined start dir\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar contents []map[string]any\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tif assert.Len(t, contents, 1) {\n\t\tassert.Equal(t, filename, contents[0][\"name\"].(string))\n\t}\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file2.txt\",\n\t\tbytes.NewBuffer([]byte(\"single upload content\")))\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=testdir\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=testdir&target=testdir1\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=%2Ftestdirroot\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+url.QueryEscape(u.Filters.StartDirectory), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 3)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+filename, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=%2F\"+filename, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPatch, userFilesPath+\"?path=\"+filename+\"&target=\"+filename+\"_rename\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=testdir1\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 2)\n\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=\"+filename+\"_rename\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath+\"?path=\"+url.QueryEscape(u.Filters.StartDirectory), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcontents = nil\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 1)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebFilesTransferQuotaLimits(t *testing.T) {\n\tu := getTestUser()\n\tu.UploadDataTransfer = 1\n\tu.DownloadDataTransfer = 1\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"file.data\"\n\ttestFileSize := 550000\n\ttestFileContents := make([]byte, testFileSize)\n\tn, err := io.ReadFull(rand.Reader, testFileContents)\n\tassert.NoError(t, err)\n\tassert.Equal(t, testFileSize, n)\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", testFileName)\n\tassert.NoError(t, err)\n\t_, err = part.Write(testFileContents)\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\t// error while download is active\n\tdownloadFunc := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\n\t\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\t\tassert.NoError(t, err)\n\t\tsetBearerForReq(req, webAPIToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t}\n\tdownloadFunc()\n\t// error before starting the download\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=\"+testFileName, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t// error while upload is active\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\t// error before starting the upload\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\t// now test upload/download to/from shares\n\tshare1 := dataprovider.Share{\n\t\tName: \"share1\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err := json.Marshal(share1)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\treq, err = http.NewRequest(http.MethodGet, sharesPath+\"/\"+objectID, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tform := make(url.Values)\n\tform.Set(\"files\", `[]`)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webClientPubSharesPath, objectID, \"/partial\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorQuotaRead)\n\n\tshare2 := dataprovider.Share{\n\t\tName: \"share2\",\n\t\tScope: dataprovider.ShareScopeWrite,\n\t\tPaths: []string{\"/\"},\n\t}\n\tasJSON, err = json.Marshal(share2)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userSharesPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tobjectID = rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, sharesPath+\"/\"+objectID, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUploadErrors(t *testing.T) {\n\tu := getTestUser()\n\tu.QuotaSize = 65535\n\tsubDir1 := \"sub1\"\n\tsubDir2 := \"sub2\"\n\tu.Permissions[path.Join(\"/\", subDir1)] = []string{dataprovider.PermListItems}\n\tu.Permissions[path.Join(\"/\", subDir2)] = []string{dataprovider.PermListItems, dataprovider.PermUpload,\n\t\tdataprovider.PermDelete}\n\tu.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: \"/sub2\",\n\t\t\tAllowedPatterns: []string{},\n\t\t\tDeniedPatterns: []string{\"*.zip\"},\n\t\t},\n\t}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"file.zip\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"file content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\t// zip file are not allowed within sub2\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath+\"?path=sub2\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\t// we have no upload permissions within sub1\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=sub1\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t// we cannot create dirs in sub2\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?mkdir_parents=true&path=\"+url.QueryEscape(\"/sub2/dir\"), reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"unable to check/create missing parent dir\")\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?mkdir_parents=true&path=\"+url.QueryEscape(\"/sub2/dir/test\"), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Error checking parent directories\")\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?mkdir_parents=true&path=\"+url.QueryEscape(\"/sub2/dir1/file.txt\"), bytes.NewBuffer([]byte(\"\")))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Error checking parent directories\")\n\t// create a dir and try to overwrite it with a file\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=file.zip\", nil) //nolint:goconst\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"operation unsupported\")\n\t// try to upload to a missing parent directory\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=missingdir\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=file.zip\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// upload will work now\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\t// overwrite the file\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tvfs.SetTempPath(filepath.Join(os.TempDir(), \"missingpath\"))\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tif runtime.GOOS != osWindows {\n\t\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file.zip\", nil)\n\t\tassert.NoError(t, err)\n\t\tsetBearerForReq(req, webAPIToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t\tvfs.SetTempPath(filepath.Clean(os.TempDir()))\n\t\terr = os.Chmod(user.GetHomeDir(), 0555)\n\t\tassert.NoError(t, err)\n\n\t\t_, err = reader.Seek(0, io.SeekStart)\n\t\tassert.NoError(t, err)\n\t\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\t\tassert.NoError(t, err)\n\t\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\t\tsetBearerForReq(req, webAPIToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t\tassert.Contains(t, rr.Body.String(), \"Error closing file\")\n\n\t\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file.zip\", bytes.NewBuffer(nil))\n\t\tassert.NoError(t, err)\n\t\tsetBearerForReq(req, webAPIToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t\tassert.Contains(t, rr.Body.String(), \"Error closing file\")\n\n\t\terr = os.Chmod(user.GetHomeDir(), os.ModePerm)\n\t\tassert.NoError(t, err)\n\t}\n\n\tvfs.SetTempPath(\"\")\n\n\t// upload a multipart form with no files\n\tbody = new(bytes.Buffer)\n\twriter = multipart.NewWriter(body)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader = bytes.NewReader(body.Bytes())\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=sub2\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"No files uploaded!\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAPIVFolder(t *testing.T) {\n\tu := getTestUser()\n\tu.QuotaSize = 65535\n\tvdir := \"/vdir\"\n\tmappedPath := filepath.Join(os.TempDir(), \"vdir\")\n\tfolderName := filepath.Base(mappedPath)\n\tu.VirtualFolders = append(u.VirtualFolders, vfs.VirtualFolder{\n\t\tBaseVirtualFolder: vfs.BaseVirtualFolder{\n\t\t\tName: folderName,\n\t\t},\n\t\tVirtualPath: vdir,\n\t\tQuotaSize: -1,\n\t\tQuotaFiles: -1,\n\t})\n\tf := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: mappedPath,\n\t}\n\t_, _, err := httpdtest.AddFolder(f, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(user.Username, defaultPassword)\n\tassert.NoError(t, err)\n\n\tfileContents := []byte(\"test contents\")\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"file.txt\")\n\tassert.NoError(t, err)\n\t_, err = part.Write(fileContents)\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath+\"?path=vdir\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(len(fileContents)), user.UsedQuotaSize)\n\n\tfolder, _, err := httpdtest.GetFolderByName(folderName, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(0), folder.UsedQuotaSize)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath+\"?path=vdir\", reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(len(fileContents)), user.UsedQuotaSize)\n\n\tfolder, _, err = httpdtest.GetFolderByName(folderName, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(0), folder.UsedQuotaSize)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(mappedPath)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAPIWritePermission(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.WebClient = append(u.Filters.WebClient, sdk.WebClientWriteDisabled)\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"file.txt\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=a&target=b\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=a\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userFilesPath+\"?path=a.txt\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userDirsPath+\"?path=dir\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, userFileActionsPath+\"/move?path=dir&target=dir1\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, userDirsPath+\"?path=dir\", nil)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAPICryptFs(t *testing.T) {\n\tu := getTestUser()\n\tu.QuotaSize = 65535\n\tu.FsConfig.Provider = sdk.CryptedFilesystemProvider\n\tu.FsConfig.CryptConfig.Passphrase = kms.NewPlainSecret(defaultPassword)\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"file.txt\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUploadSFTP(t *testing.T) {\n\tu := getTestUser()\n\tlocalUser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu = getTestSFTPUser()\n\tu.QuotaFiles = 100\n\tu.FsConfig.SFTPConfig.BufferSize = 2\n\tu.HomeDir = filepath.Join(os.TempDir(), u.Username)\n\tsftpUser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(sftpUser.Username, defaultPassword)\n\tassert.NoError(t, err)\n\n\tbody := new(bytes.Buffer)\n\twriter := multipart.NewWriter(body)\n\tpart, err := writer.CreateFormFile(\"filenames\", \"file.txt\")\n\tassert.NoError(t, err)\n\t_, err = part.Write([]byte(\"test file content\"))\n\tassert.NoError(t, err)\n\terr = writer.Close()\n\tassert.NoError(t, err)\n\treader := bytes.NewReader(body.Bytes())\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\texpectedQuotaSize := int64(17)\n\texpectedQuotaFiles := 1\n\tuser, _, err := httpdtest.GetUserByUsername(sftpUser.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, expectedQuotaFiles, user.UsedQuotaFiles)\n\tassert.Equal(t, expectedQuotaSize, user.UsedQuotaSize)\n\n\tuser.QuotaSize = 10\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t// we are now overquota on overwrite\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\tassert.Contains(t, rr.Body.String(), \"denying write due to space limit\")\n\tassert.Contains(t, rr.Body.String(), \"Unable to write file\")\n\n\t// delete the file\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(sftpUser.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 0, user.UsedQuotaFiles)\n\tassert.Equal(t, int64(0), user.UsedQuotaSize)\n\n\treq, err = http.NewRequest(http.MethodPost, userUploadFilePath+\"?path=file.txt\",\n\t\tbytes.NewBuffer([]byte(\"test upload single file content\")))\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\tassert.Contains(t, rr.Body.String(), \"denying write due to space limit\")\n\tassert.Contains(t, rr.Body.String(), \"Error saving file\")\n\n\t// delete the file\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t_, err = reader.Seek(0, io.SeekStart)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, userFilesPath, reader)\n\tassert.NoError(t, err)\n\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusRequestEntityTooLarge, rr)\n\tassert.Contains(t, rr.Body.String(), \"denying write due to space limit\")\n\tassert.Contains(t, rr.Body.String(), \"Error saving file\")\n\n\t// delete the file\n\treq, err = http.NewRequest(http.MethodDelete, userFilesPath+\"?path=file.txt\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, webAPIToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(sftpUser.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 0, user.UsedQuotaFiles)\n\tassert.Equal(t, int64(0), user.UsedQuotaSize)\n\n\t_, err = httpdtest.RemoveUser(sftpUser, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(localUser, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(localUser.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(sftpUser.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAPISFTPPasswordProtectedPrivateKey(t *testing.T) {\n\tu := getTestUser()\n\tu.Password = \"\"\n\tu.PublicKeys = []string{testPubKeyPwd}\n\tlocalUser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu = getTestSFTPUser()\n\tu.FsConfig.SFTPConfig.Password = kms.NewEmptySecret()\n\tu.FsConfig.SFTPConfig.PrivateKey = kms.NewPlainSecret(testPrivateKeyPwd)\n\tu.FsConfig.SFTPConfig.KeyPassphrase = kms.NewPlainSecret(privateKeyPwd)\n\tu.HomeDir = filepath.Join(os.TempDir(), u.Username)\n\tsftpUser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(sftpUser.Username, defaultPassword)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// update the user, the key must be preserved\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, sftpUser.FsConfig.SFTPConfig.KeyPassphrase.GetStatus())\n\t_, _, err = httpdtest.UpdateUser(sftpUser, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// using a wrong passphrase or no passphrase should fail\n\tsftpUser.FsConfig.SFTPConfig.KeyPassphrase = kms.NewPlainSecret(\"wrong\")\n\t_, _, err = httpdtest.UpdateUser(sftpUser, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t_, err = getJWTWebClientTokenFromTestServer(sftpUser.Username, defaultPassword)\n\tassert.Error(t, err)\n\tsftpUser.FsConfig.SFTPConfig.KeyPassphrase = kms.NewEmptySecret()\n\t_, _, err = httpdtest.UpdateUser(sftpUser, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t_, err = getJWTWebClientTokenFromTestServer(sftpUser.Username, defaultPassword)\n\tassert.Error(t, err)\n\n\t_, err = httpdtest.RemoveUser(sftpUser, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(localUser, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(localUser.GetHomeDir())\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(sftpUser.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUploadMultipartFormReadError(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodPost, userFilesPath, nil)\n\tassert.NoError(t, err)\n\n\tmpartForm := &multipart.Form{\n\t\tFile: make(map[string][]*multipart.FileHeader),\n\t}\n\tmpartForm.File[\"filenames\"] = append(mpartForm.File[\"filenames\"], &multipart.FileHeader{Filename: \"missing\"})\n\treq.MultipartForm = mpartForm\n\treq.Header.Add(\"Content-Type\", \"multipart/form-data\")\n\tsetBearerForReq(req, webAPIToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tassert.Contains(t, rr.Body.String(), \"Unable to read uploaded file\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestCompressionErrorMock(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tdefer func() {\n\t\trcv := recover()\n\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t_, err := httpdtest.RemoveUser(user, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\terr = os.RemoveAll(user.GetHomeDir())\n\t\tassert.NoError(t, err)\n\t}()\n\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, webToken)\n\tassert.NoError(t, err)\n\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"files\", `[\"missing\"]`)\n\treq, _ := http.NewRequest(http.MethodPost, webClientDownloadZipPath+\"?path=%2F\",\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\texecuteRequest(req)\n}\n\nfunc TestGetFilesSFTPBackend(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\tu := getTestSFTPUser()\n\tu.HomeDir = filepath.Clean(os.TempDir())\n\tu.FsConfig.SFTPConfig.BufferSize = 2\n\tu.Permissions[\"/adir\"] = nil\n\tu.Permissions[\"/adir1\"] = []string{dataprovider.PermListItems}\n\tu.Filters.FilePatterns = []sdk.PatternsFilter{\n\t\t{\n\t\t\tPath: \"/adir2\",\n\t\t\tDeniedPatterns: []string{\"*.txt\"},\n\t\t},\n\t}\n\tsftpUserBuffered, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tu.Username += \"_unbuffered\"\n\tu.FsConfig.SFTPConfig.BufferSize = 0\n\tsftpUserUnbuffered, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttestFileName := \"testsftpfile\"\n\ttestDir := \"testsftpdir\"\n\ttestFileContents := []byte(\"sftp file contents\")\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir(), testDir, \"sub\"), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir(), \"adir1\"), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.MkdirAll(filepath.Join(user.GetHomeDir(), \"adir2\"), os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), testFileName), testFileContents, os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), \"adir1\", \"afile\"), testFileContents, os.ModePerm)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(filepath.Join(user.GetHomeDir(), \"adir2\", \"afile.txt\"), testFileContents, os.ModePerm)\n\tassert.NoError(t, err)\n\tfor _, sftpUser := range []dataprovider.User{sftpUserBuffered, sftpUserUnbuffered} {\n\t\twebToken, err := getJWTWebClientTokenFromTestServer(sftpUser.Username, defaultPassword)\n\t\tassert.NoError(t, err)\n\t\treq, _ := http.NewRequest(http.MethodGet, webClientFilesPath, nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+path.Join(testDir, \"sub\"), nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t\thtmlErrFrag := `div id=\"errorMsg\" class=\"rounded border-warning border border-dashed bg-light-warning`\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+path.Join(testDir, \"missing\"), nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), htmlErrFrag)\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=adir/sub\", nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), htmlErrFrag)\n\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=adir1/afile\", nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), htmlErrFrag)\n\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=adir2/afile.txt\", nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), htmlErrFrag)\n\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Equal(t, testFileContents, rr.Body.Bytes())\n\n\t\treq, _ = http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\t\treq.Header.Set(\"Range\", \"bytes=2-\")\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusPartialContent, rr)\n\t\tassert.Equal(t, testFileContents[2:], rr.Body.Bytes())\n\n\t\t_, err = httpdtest.RemoveUser(sftpUser, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t}\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestClientUserClose(t *testing.T) {\n\tu := getTestUser()\n\tu.UploadBandwidth = 32\n\tu.DownloadBandwidth = 32\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttestFileName := \"file.dat\"\n\ttestFileSize := int64(524288)\n\ttestFilePath := filepath.Join(user.GetHomeDir(), testFileName)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\tuploadContent := make([]byte, testFileSize)\n\t_, err = rand.Read(uploadContent)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\twebAPIToken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tvar wg sync.WaitGroup\n\twg.Add(1)\n\tgo func() {\n\t\tdefer wg.Done()\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, _ := http.NewRequest(http.MethodGet, webClientFilesPath+\"?path=\"+testFileName, nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t}()\n\twg.Add(1)\n\tgo func() {\n\t\tdefer wg.Done()\n\t\treq, _ := http.NewRequest(http.MethodGet, webClientEditFilePath+\"?path=\"+testFileName, nil)\n\t\tsetJWTCookieForReq(req, webToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\t\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\t}()\n\twg.Add(1)\n\tgo func() {\n\t\tdefer wg.Done()\n\t\tbody := new(bytes.Buffer)\n\t\twriter := multipart.NewWriter(body)\n\t\tpart, err := writer.CreateFormFile(\"filenames\", \"upload.dat\")\n\t\tassert.NoError(t, err)\n\t\tn, err := part.Write(uploadContent)\n\t\tassert.NoError(t, err)\n\t\tassert.Equal(t, testFileSize, int64(n))\n\t\terr = writer.Close()\n\t\tassert.NoError(t, err)\n\t\treader := bytes.NewReader(body.Bytes())\n\t\treq, err := http.NewRequest(http.MethodPost, userFilesPath, reader)\n\t\tassert.NoError(t, err)\n\t\treq.Header.Add(\"Content-Type\", writer.FormDataContentType())\n\t\tsetBearerForReq(req, webAPIToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t\tassert.Contains(t, rr.Body.String(), \"transfer aborted\")\n\t}()\n\t// wait for the transfers\n\tassert.Eventually(t, func() bool {\n\t\tstats := common.Connections.GetStats(\"\")\n\t\tif len(stats) == 3 {\n\t\t\tif len(stats[0].Transfers) > 0 && len(stats[1].Transfers) > 0 {\n\t\t\t\treturn true\n\t\t\t}\n\t\t}\n\t\treturn false\n\t}, 1*time.Second, 50*time.Millisecond)\n\n\tfor _, stat := range common.Connections.GetStats(\"\") {\n\t\t// close all the active transfers\n\t\tcommon.Connections.Close(stat.ConnectionID, \"\")\n\t}\n\twg.Wait()\n\tassert.Eventually(t, func() bool { return len(common.Connections.GetStats(\"\")) == 0 },\n\t\t1*time.Second, 100*time.Millisecond)\n\tassert.Equal(t, int32(0), common.Connections.GetTotalTransfers())\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAdminSetupMock(t *testing.T) {\n\treq, err := http.NewRequest(http.MethodGet, webAdminSetupPath, nil)\n\tassert.NoError(t, err)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\t// now delete all the admins\n\tadmins, err := dataprovider.GetAdmins(100, 0, dataprovider.OrderASC)\n\tassert.NoError(t, err)\n\tfor _, admin := range admins {\n\t\terr = dataprovider.DeleteAdmin(admin.Username, \"\", \"\", \"\")\n\t\tassert.NoError(t, err)\n\t}\n\t// close the provider and initializes it without creating the default admin\n\tos.Setenv(\"SFTPGO_DATA_PROVIDER__CREATE_DEFAULT_ADMIN\", \"0\")\n\terr = dataprovider.Close()\n\tassert.NoError(t, err)\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf := config.GetProviderConf()\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n\t// now the setup page must be rendered\n\treq, err = http.NewRequest(http.MethodGet, webAdminSetupPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// check redirects to the setup page\n\treq, err = http.NewRequest(http.MethodGet, \"/\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminSetupPath, rr.Header().Get(\"Location\"))\n\treq, err = http.NewRequest(http.MethodGet, webBasePath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminSetupPath, rr.Header().Get(\"Location\"))\n\treq, err = http.NewRequest(http.MethodGet, webBasePathAdmin, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminSetupPath, rr.Header().Get(\"Location\"))\n\treq, err = http.NewRequest(http.MethodGet, webLoginPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminSetupPath, rr.Header().Get(\"Location\"))\n\treq, err = http.NewRequest(http.MethodGet, webClientLoginPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminSetupPath, rr.Header().Get(\"Location\"))\n\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webAdminSetupPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"username\", defaultTokenAuthUser)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"password\", defaultTokenAuthPass)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdNoMatch)\n\tform.Set(\"confirm_password\", defaultTokenAuthPass)\n\t// test a parse form error\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath+\"?param=p%C3%AO%GH\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test a dataprovider error\n\terr = dataprovider.Close()\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// finally initialize the provider and create the default admin\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf = config.GetProviderConf()\n\tproviderConf.BackupsPath = backupsPath\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webAdminMFAPath, rr.Header().Get(\"Location\"))\n\t// if we resubmit the form we get a bad request, an admin already exists\n\treq, err = http.NewRequest(http.MethodPost, webAdminSetupPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\tos.Setenv(\"SFTPGO_DATA_PROVIDER__CREATE_DEFAULT_ADMIN\", \"1\")\n}\n\nfunc TestAllowList(t *testing.T) {\n\tconfigCopy := common.Config\n\n\tentries := []dataprovider.IPListEntry{\n\t\t{\n\t\t\tIPOrNet: \"172.120.1.1/32\",\n\t\t\tType: dataprovider.IPListTypeAllowList,\n\t\t\tMode: dataprovider.ListModeAllow,\n\t\t\tProtocols: 0,\n\t\t},\n\t\t{\n\t\t\tIPOrNet: \"172.120.1.2/32\",\n\t\t\tType: dataprovider.IPListTypeAllowList,\n\t\t\tMode: dataprovider.ListModeAllow,\n\t\t\tProtocols: 0,\n\t\t},\n\t\t{\n\t\t\tIPOrNet: \"192.8.7.0/22\",\n\t\t\tType: dataprovider.IPListTypeAllowList,\n\t\t\tMode: dataprovider.ListModeAllow,\n\t\t\tProtocols: 8,\n\t\t},\n\t}\n\n\tfor _, e := range entries {\n\t\t_, _, err := httpdtest.AddIPListEntry(e, http.StatusCreated)\n\t\tassert.NoError(t, err)\n\t}\n\n\tcommon.Config.MaxTotalConnections = 1\n\tcommon.Config.AllowListStatus = 1\n\terr := common.Initialize(common.Config, 0)\n\tassert.NoError(t, err)\n\n\treq, _ := http.NewRequest(http.MethodGet, webLoginPath, nil)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), common.ErrConnectionDenied.Error())\n\n\treq.RemoteAddr = \"172.120.1.1\"\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\ttestIP := \"172.120.1.3\"\n\treq.RemoteAddr = testIP\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), common.ErrConnectionDenied.Error())\n\n\treq.RemoteAddr = \"192.8.7.1\"\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tentry := dataprovider.IPListEntry{\n\t\tIPOrNet: \"172.120.1.3/32\",\n\t\tType: dataprovider.IPListTypeAllowList,\n\t\tMode: dataprovider.ListModeAllow,\n\t\tProtocols: 8,\n\t}\n\terr = dataprovider.AddIPListEntry(&entry, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\n\treq.RemoteAddr = testIP\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\terr = dataprovider.DeleteIPListEntry(entry.IPOrNet, entry.Type, \"\", \"\", \"\")\n\tassert.NoError(t, err)\n\n\treq.RemoteAddr = testIP\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), common.ErrConnectionDenied.Error())\n\n\tcommon.Config = configCopy\n\terr = common.Initialize(common.Config, 0)\n\tassert.NoError(t, err)\n\n\tfor _, e := range entries {\n\t\t_, err := httpdtest.RemoveIPListEntry(e, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t}\n}\n\nfunc TestWebAdminLoginMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\n\treq, _ := http.NewRequest(http.MethodGet, serverStatusPath, nil)\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webStatusPath+\"notfound\", nil)\n\treq.RequestURI = webStatusPath + \"notfound\"\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webStatusPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webLogoutPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tcookie := rr.Header().Get(\"Cookie\")\n\tassert.Empty(t, cookie)\n\n\treq, _ = http.NewRequest(http.MethodGet, webStatusPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, logoutPath, nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, serverStatusPath, nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\tassert.Contains(t, rr.Body.String(), \"Your token is no longer valid\")\n\n\treq, _ = http.NewRequest(http.MethodGet, webStatusPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\t// now try using wrong password\n\tform := getLoginForm(defaultTokenAuthUser, \"wrong pwd\", csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\t// wrong username\n\tform = getLoginForm(\"wrong username\", defaultTokenAuthPass, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\t// try from an ip not allowed\n\ta := getTestAdmin()\n\ta.Username = altAdminUsername\n\ta.Password = altAdminPassword\n\ta.Filters.AllowList = []string{\"10.0.0.0/8\"}\n\n\t_, _, err = httpdtest.AddAdmin(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\trAddr := \"127.1.1.1:1234\"\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, rAddr)\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, loginCookie)\n\tform = getLoginForm(altAdminUsername, altAdminPassword, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.RemoteAddr = rAddr\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\n\trAddr = \"10.9.9.9:1234\"\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, rAddr)\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, loginCookie)\n\tform = getLoginForm(altAdminUsername, altAdminPassword, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.RemoteAddr = rAddr\n\tsetLoginCookie(req, loginCookie)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\n\trAddr = \"127.0.1.1:4567\"\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, rAddr)\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, loginCookie)\n\tform = getLoginForm(altAdminUsername, altAdminPassword, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.RemoteAddr = rAddr\n\treq.Header.Set(\"X-Forwarded-For\", \"10.9.9.9\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCredentials)\n\n\t// invalid csrf token\n\tform = getLoginForm(altAdminUsername, altAdminPassword, \"invalid csrf\")\n\treq, _ = http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\treq.RemoteAddr = \"10.9.9.8:1234\"\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\treq, _ = http.NewRequest(http.MethodGet, webLoginPath, nil)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t_, err = httpdtest.RemoveAdmin(a, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestAdminNoToken(t *testing.T) {\n\treq, _ := http.NewRequest(http.MethodGet, webAdminProfilePath, nil)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath, nil)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\n\treq, _ = http.NewRequest(http.MethodGet, userPath, nil)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, activeConnectionsPath, nil)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n}\n\nfunc TestWebUserShare(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, token)\n\tassert.NoError(t, err)\n\tuserAPItoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"test share\",\n\t\tDescription: \"test share desc\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t\tExpiresAt: util.GetTimeAsMsSinceEpoch(time.Now().Add(24 * time.Hour)),\n\t\tMaxTokens: 100,\n\t\tAllowFrom: []string{\"127.0.0.0/8\", \"172.16.0.0/16\"},\n\t\tPassword: defaultPassword,\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", share.Name)\n\tform.Set(\"scope\", strconv.Itoa(int(share.Scope)))\n\tform.Set(\"paths[0][path]\", \"/\")\n\tform.Set(\"max_tokens\", strconv.Itoa(share.MaxTokens))\n\tform.Set(\"allowed_ip\", strings.Join(share.AllowFrom, \",\"))\n\tform.Set(\"description\", share.Description)\n\tform.Set(\"password\", share.Password)\n\tform.Set(\"expiration_date\", \"123\")\n\t// invalid expiration date\n\treq, err := http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareExpiration)\n\tform.Set(\"expiration_date\", util.GetTimeFromMsecSinceEpoch(share.ExpiresAt).UTC().Format(\"2006-01-02 15:04:05\"))\n\tform.Set(\"scope\", \"\")\n\t// invalid scope\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareScope)\n\tform.Set(\"scope\", strconv.Itoa(int(share.Scope)))\n\t// invalid max tokens\n\tform.Set(\"max_tokens\", \"t\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareMaxTokens)\n\tform.Set(\"max_tokens\", strconv.Itoa(share.MaxTokens))\n\t// no csrf token\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"scope\", \"100\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareScope)\n\n\tform.Set(\"scope\", strconv.Itoa(int(share.Scope)))\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, userAPItoken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar shares []dataprovider.Share\n\terr = json.Unmarshal(rr.Body.Bytes(), &shares)\n\tassert.NoError(t, err)\n\tif assert.Len(t, shares, 1) {\n\t\ts := shares[0]\n\t\tassert.Equal(t, share.Name, s.Name)\n\t\tassert.Equal(t, share.Description, s.Description)\n\t\tassert.Equal(t, share.Scope, s.Scope)\n\t\tassert.Equal(t, share.Paths, s.Paths)\n\t\tassert.InDelta(t, share.ExpiresAt, s.ExpiresAt, 999)\n\t\tassert.Equal(t, share.MaxTokens, s.MaxTokens)\n\t\tassert.Equal(t, share.AllowFrom, s.AllowFrom)\n\t\tassert.Equal(t, redactedSecret, s.Password)\n\t\tshare.ShareID = s.ShareID\n\t}\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"expiration_date\", \"123\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/unknowid\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/\"+share.ShareID, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareExpiration)\n\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(csrfFormToken, \"\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/\"+share.ShareID, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"allowed_ip\", \"1.1.1\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/\"+share.ShareID, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidIPMask)\n\n\tform.Set(\"allowed_ip\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/\"+share.ShareID, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, userAPItoken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tshares = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &shares)\n\tassert.NoError(t, err)\n\tif assert.Len(t, shares, 1) {\n\t\ts := shares[0]\n\t\tassert.Equal(t, share.Name, s.Name)\n\t\tassert.Equal(t, share.Description, s.Description)\n\t\tassert.Equal(t, share.Scope, s.Scope)\n\t\tassert.Equal(t, share.Paths, s.Paths)\n\t\tassert.Equal(t, int64(0), s.ExpiresAt)\n\t\tassert.Equal(t, share.MaxTokens, s.MaxTokens)\n\t\tassert.Empty(t, s.AllowFrom)\n\t}\n\t// check the password\n\ts, err := dataprovider.ShareExists(share.ShareID, user.Username)\n\tassert.NoError(t, err)\n\tmatch, err := s.CheckCredentials(defaultPassword)\n\tassert.NoError(t, err)\n\tassert.True(t, match)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath+\"?path=%2F&files=a\", nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath+\"?path=%2F&files=%5B\\\"adir\\\"%5D\", nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath+\"/unknown\", nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath+\"/\"+share.ShareID, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharesPath, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharesPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserShareNoPasswordDisabled(t *testing.T) {\n\tu := getTestUser()\n\tu.Filters.WebClient = []string{sdk.WebClientShareNoPasswordDisabled}\n\tu.Filters.DefaultSharesExpiration = 15\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tuser.Filters.DefaultSharesExpiration = 30\n\tuser, _, err = httpdtest.UpdateUser(u, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\ttoken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientSharePath, token)\n\tassert.NoError(t, err)\n\tuserAPItoken, err := getJWTAPIUserTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\n\tshare := dataprovider.Share{\n\t\tName: \"s\",\n\t\tScope: dataprovider.ShareScopeRead,\n\t\tPaths: []string{\"/\"},\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", share.Name)\n\tform.Set(\"scope\", strconv.Itoa(int(share.Scope)))\n\tform.Set(\"paths[0][path]\", \"/\")\n\tform.Set(\"max_tokens\", \"0\")\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err := http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareNoPwd)\n\n\tform.Set(\"password\", defaultPassword)\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, userSharesPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, userAPItoken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar shares []dataprovider.Share\n\terr = json.Unmarshal(rr.Body.Bytes(), &shares)\n\tassert.NoError(t, err)\n\tif assert.Len(t, shares, 1) {\n\t\ts := shares[0]\n\t\tassert.Equal(t, share.Name, s.Name)\n\t\tassert.Equal(t, share.Scope, s.Scope)\n\t\tassert.Equal(t, share.Paths, s.Paths)\n\t\tshare.ShareID = s.ShareID\n\t}\n\tassert.NotEmpty(t, share.ShareID)\n\tform.Set(\"password\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webClientSharePath+\"/\"+share.ShareID, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorShareNoPwd)\n\n\tuser.Filters.DefaultSharesExpiration = 0\n\tuser.Filters.MaxSharesExpiration = 30\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webClientSharePath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestInvalidCSRF(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tfor _, loginURL := range []string{webClientLoginPath, webLoginPath} {\n\t\t// try using an invalid CSRF token\n\t\tloginCookie1, csrfToken1, err := getCSRFTokenMock(loginURL, defaultRemoteAddr)\n\t\tassert.NoError(t, err)\n\t\tassert.NotEmpty(t, loginCookie1)\n\t\tassert.NotEmpty(t, csrfToken1)\n\t\tloginCookie2, csrfToken2, err := getCSRFTokenMock(loginURL, defaultRemoteAddr)\n\t\tassert.NoError(t, err)\n\t\tassert.NotEmpty(t, loginCookie2)\n\t\tassert.NotEmpty(t, csrfToken2)\n\t\trAddr := \"1.2.3.4\"\n\t\tloginCookie3, csrfToken3, err := getCSRFTokenMock(loginURL, rAddr)\n\t\tassert.NoError(t, err)\n\t\tassert.NotEmpty(t, loginCookie3)\n\t\tassert.NotEmpty(t, csrfToken3)\n\n\t\tform := getLoginForm(defaultUsername, defaultPassword, csrfToken1)\n\t\treq, err := http.NewRequest(http.MethodPost, loginURL, bytes.NewBuffer([]byte(form.Encode())))\n\t\tassert.NoError(t, err)\n\t\treq.RemoteAddr = defaultRemoteAddr\n\t\treq.RequestURI = loginURL\n\t\tsetLoginCookie(req, loginCookie2)\n\t\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\t\t// use a CSRF token as login cookie (invalid audience)\n\t\tform = getLoginForm(defaultUsername, defaultPassword, csrfToken1)\n\t\treq, err = http.NewRequest(http.MethodPost, loginURL, bytes.NewBuffer([]byte(form.Encode())))\n\t\tassert.NoError(t, err)\n\t\treq.RemoteAddr = defaultRemoteAddr\n\t\treq.RequestURI = loginURL\n\t\treq.Header.Set(\"Cookie\", fmt.Sprintf(\"jwt=%s\", csrfToken1))\n\t\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\t\t// invalid IP\n\t\tform = getLoginForm(defaultUsername, defaultPassword, csrfToken3)\n\t\treq, err = http.NewRequest(http.MethodPost, loginURL, bytes.NewBuffer([]byte(form.Encode())))\n\t\tassert.NoError(t, err)\n\t\treq.RemoteAddr = defaultRemoteAddr\n\t\treq.RequestURI = loginURL\n\t\tsetLoginCookie(req, loginCookie3)\n\t\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\t\trr = executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\t}\n\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserProfile(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, token)\n\tassert.NoError(t, err)\n\n\temail := \"user@user.com\"\n\tdescription := \"User\"\n\n\tform := make(url.Values)\n\tform.Set(\"allow_api_key_auth\", \"1\")\n\tform.Set(\"email\", email)\n\tform.Set(\"description\", description)\n\tform.Set(\"public_keys[0][public_key]\", testPubKey)\n\tform.Set(\"public_keys[1][public_key]\", testPubKey1)\n\tform.Set(\"tls_certs[0][tls_cert]\", httpsCert)\n\tform.Set(\"additional_emails[0][additional_email]\", \"email1@user.com\")\n\t// no csrf token\n\treq, err := http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, user.Filters.AllowAPIKeyAuth)\n\tassert.Len(t, user.PublicKeys, 2)\n\tassert.Len(t, user.Filters.TLSCerts, 1)\n\tassert.Equal(t, email, user.Email)\n\tassert.Equal(t, description, user.Description)\n\tif assert.Len(t, user.Filters.AdditionalEmails, 1) {\n\t\tassert.Equal(t, \"email1@user.com\", user.Filters.AdditionalEmails[0])\n\t}\n\n\t// set an invalid email\n\tform.Set(\"email\", \"not an email\")\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidEmail)\n\t// invalid tls cert\n\tform.Set(\"email\", email)\n\tform.Set(\"tls_certs[0][tls_cert]\", \"not a TLS cert\")\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidTLSCert)\n\t// invalid public key\n\tform.Set(\"tls_certs[0][tls_cert]\", httpsCert)\n\tform.Set(\"public_keys[0][public_key]\", \"invalid\")\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPubKeyInvalid)\n\t// now remove permissions\n\tform.Set(\"public_keys[0][public_key]\", testPubKey)\n\tform.Del(\"public_keys[1][public_key]\")\n\tuser.Filters.WebClient = []string{sdk.WebClientAPIKeyAuthChangeDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\ttoken, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webClientProfilePath, token)\n\tassert.NoError(t, err)\n\n\tform.Set(\"allow_api_key_auth\", \"0\")\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, user.Filters.AllowAPIKeyAuth)\n\tassert.Len(t, user.PublicKeys, 1)\n\tassert.Len(t, user.Filters.TLSCerts, 1)\n\tassert.Equal(t, email, user.Email)\n\tassert.Equal(t, description, user.Description)\n\n\tuser.Filters.WebClient = []string{sdk.WebClientAPIKeyAuthChangeDisabled,\n\t\tsdk.WebClientPubKeyChangeDisabled, sdk.WebClientTLSCertChangeDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\ttoken, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webClientProfilePath, token)\n\tassert.NoError(t, err)\n\tform.Set(\"public_keys[0][public_key]\", testPubKey)\n\tform.Set(\"public_keys[1][public_key]\", testPubKey1)\n\tform.Set(\"tls_certs[0][tls_cert]\", \"\")\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, user.Filters.AllowAPIKeyAuth)\n\tassert.Len(t, user.PublicKeys, 1)\n\tassert.Len(t, user.Filters.TLSCerts, 1)\n\tassert.Equal(t, email, user.Email)\n\tassert.Equal(t, description, user.Description)\n\n\tuser.Filters.WebClient = []string{sdk.WebClientAPIKeyAuthChangeDisabled, sdk.WebClientInfoChangeDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\ttoken, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webClientProfilePath, token)\n\tassert.NoError(t, err)\n\tform.Set(\"email\", \"newemail@user.com\")\n\tform.Set(\"description\", \"new description\")\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, user.Filters.AllowAPIKeyAuth)\n\tassert.Len(t, user.PublicKeys, 2)\n\tassert.Len(t, user.Filters.TLSCerts, 0)\n\tassert.Equal(t, email, user.Email)\n\tassert.Equal(t, description, user.Description)\n\t// finally disable all profile permissions\n\tuser.Filters.WebClient = []string{sdk.WebClientAPIKeyAuthChangeDisabled, sdk.WebClientInfoChangeDisabled,\n\t\tsdk.WebClientPubKeyChangeDisabled, sdk.WebClientTLSCertChangeDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\ttoken, err = getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webChangeClientPwdPath, token)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webClientProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n}\n\nfunc TestWebAdminProfile(t *testing.T) {\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin, _, err := httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTWebTokenFromTestServer(admin.Username, altAdminPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminProfilePath, token)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webAdminProfilePath, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform := make(url.Values)\n\tform.Set(\"allow_api_key_auth\", \"1\")\n\tform.Set(\"email\", \"admin@example.com\")\n\tform.Set(\"description\", \"admin desc\")\n\t// no csrf token\n\treq, err = http.NewRequest(http.MethodPost, webAdminProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webAdminProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(admin.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, admin.Filters.AllowAPIKeyAuth)\n\tassert.Equal(t, \"admin@example.com\", admin.Email)\n\tassert.Equal(t, \"admin desc\", admin.Description)\n\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webAdminProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nProfileUpdated)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(admin.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.False(t, admin.Filters.AllowAPIKeyAuth)\n\tassert.Empty(t, admin.Email)\n\tassert.Empty(t, admin.Description)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webAdminProfilePath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n}\n\nfunc TestWebAdminPwdChange(t *testing.T) {\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin.Filters.Preferences.HideUserPageSections = 16 + 32\n\tadmin, _, err := httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebTokenFromTestServer(admin.Username, altAdminPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webChangeAdminPwdPath, token)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webChangeAdminPwdPath, nil)\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform := make(url.Values)\n\tform.Set(\"current_password\", altAdminPassword)\n\tform.Set(\"new_password1\", altAdminPassword)\n\tform.Set(\"new_password2\", altAdminPassword)\n\t// no csrf token\n\treq, _ = http.NewRequest(http.MethodPost, webChangeAdminPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ = http.NewRequest(http.MethodPost, webChangeAdminPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdNoDifferent)\n\n\tform.Set(\"new_password1\", altAdminPassword+\"1\")\n\tform.Set(\"new_password2\", altAdminPassword+\"1\")\n\treq, _ = http.NewRequest(http.MethodPost, webChangeAdminPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestAPIKeysManagement(t *testing.T) {\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin, _, err := httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiKey := dataprovider.APIKey{\n\t\tName: \"test key\",\n\t\tScope: dataprovider.APIKeyScopeAdmin,\n\t}\n\tasJSON, err := json.Marshal(apiKey)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, apiKeysPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.NotEmpty(t, location)\n\tobjectID := rr.Header().Get(\"X-Object-ID\")\n\tassert.NotEmpty(t, objectID)\n\tassert.Equal(t, fmt.Sprintf(\"%v/%v\", apiKeysPath, objectID), location)\n\tapiKey.KeyID = objectID\n\tresponse := make(map[string]string)\n\terr = json.Unmarshal(rr.Body.Bytes(), &response)\n\tassert.NoError(t, err)\n\tkey := response[\"key\"]\n\tassert.NotEmpty(t, key)\n\tassert.True(t, strings.HasPrefix(key, apiKey.KeyID+\".\"))\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar keyGet dataprovider.APIKey\n\terr = json.Unmarshal(rr.Body.Bytes(), &keyGet)\n\tassert.NoError(t, err)\n\tassert.Empty(t, keyGet.Key)\n\tassert.Equal(t, apiKey.KeyID, keyGet.KeyID)\n\tassert.Equal(t, apiKey.Scope, keyGet.Scope)\n\tassert.Equal(t, apiKey.Name, keyGet.Name)\n\tassert.Equal(t, int64(0), keyGet.ExpiresAt)\n\tassert.Equal(t, int64(0), keyGet.LastUseAt)\n\tassert.Greater(t, keyGet.CreatedAt, int64(0))\n\tassert.Greater(t, keyGet.UpdatedAt, int64(0))\n\tassert.Empty(t, keyGet.Description)\n\tassert.Empty(t, keyGet.User)\n\tassert.Empty(t, keyGet.Admin)\n\n\t// API key is not enabled for the admin user so this request should fail\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, admin.Username)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\tassert.Contains(t, rr.Body.String(), \"the admin associated with the provided api key cannot be authenticated\")\n\n\tadmin.Filters.AllowAPIKeyAuth = true\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, admin.Username)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, admin.Username+\"1\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\t// now associate the key directly to the admin\n\tapiKey.Admin = admin.Username\n\tapiKey.Description = \"test description\"\n\tasJSON, err = json.Marshal(apiKey)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, apiKeysPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar keys []dataprovider.APIKey\n\terr = json.Unmarshal(rr.Body.Bytes(), &keys)\n\tassert.NoError(t, err)\n\tif assert.GreaterOrEqual(t, len(keys), 1) {\n\t\tfound := false\n\t\tfor _, k := range keys {\n\t\t\tif k.KeyID == apiKey.KeyID {\n\t\t\t\tfound = true\n\t\t\t\tassert.Empty(t, k.Key)\n\t\t\t\tassert.Equal(t, apiKey.Scope, k.Scope)\n\t\t\t\tassert.Equal(t, apiKey.Name, k.Name)\n\t\t\t\tassert.Equal(t, int64(0), k.ExpiresAt)\n\t\t\t\tassert.Greater(t, k.LastUseAt, int64(0))\n\t\t\t\tassert.Equal(t, k.CreatedAt, keyGet.CreatedAt)\n\t\t\t\tassert.Greater(t, k.UpdatedAt, keyGet.UpdatedAt)\n\t\t\t\tassert.Equal(t, apiKey.Description, k.Description)\n\t\t\t\tassert.Empty(t, k.User)\n\t\t\t\tassert.Equal(t, admin.Username, k.Admin)\n\t\t\t}\n\t\t}\n\t\tassert.True(t, found)\n\t}\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// invalid API keys\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key+\"invalid\", \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\tassert.Contains(t, rr.Body.String(), \"the provided api key cannot be authenticated\")\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, \"invalid\", \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t// using an API key we cannot modify/get API keys\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tadmin.Filters.AllowList = []string{\"172.16.18.0/24\"}\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, versionPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"the provided api key is not valid\")\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestAPIKeySearch(t *testing.T) {\n\ttoken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiKey := dataprovider.APIKey{\n\t\tScope: dataprovider.APIKeyScopeAdmin,\n\t}\n\tfor i := 1; i < 5; i++ {\n\t\tapiKey.Name = fmt.Sprintf(\"testapikey%v\", i)\n\t\tasJSON, err := json.Marshal(apiKey)\n\t\tassert.NoError(t, err)\n\t\treq, err := http.NewRequest(http.MethodPost, apiKeysPath, bytes.NewBuffer(asJSON))\n\t\tassert.NoError(t, err)\n\t\tsetBearerForReq(req, token)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusCreated, rr)\n\t}\n\n\treq, err := http.NewRequest(http.MethodGet, apiKeysPath+\"?limit=1&order=ASC\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar keys []dataprovider.APIKey\n\terr = json.Unmarshal(rr.Body.Bytes(), &keys)\n\tassert.NoError(t, err)\n\tassert.Len(t, keys, 1)\n\tfirstKey := keys[0]\n\n\treq, err = http.NewRequest(http.MethodGet, apiKeysPath+\"?limit=1&order=DESC\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tkeys = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &keys)\n\tassert.NoError(t, err)\n\tif assert.Len(t, keys, 1) {\n\t\tassert.NotEqual(t, firstKey.KeyID, keys[0].KeyID)\n\t}\n\n\treq, err = http.NewRequest(http.MethodGet, apiKeysPath+\"?limit=1&offset=100\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tkeys = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &keys)\n\tassert.NoError(t, err)\n\tassert.Len(t, keys, 0)\n\n\treq, err = http.NewRequest(http.MethodGet, apiKeysPath+\"?limit=f\", nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, fmt.Sprintf(\"%v/%v\", apiKeysPath, \"missingid\"), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, apiKeysPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tkeys = nil\n\terr = json.Unmarshal(rr.Body.Bytes(), &keys)\n\tassert.NoError(t, err)\n\tcounter := 0\n\tfor _, k := range keys {\n\t\tif strings.HasPrefix(k.Name, \"testapikey\") {\n\t\t\treq, err = http.NewRequest(http.MethodDelete, fmt.Sprintf(\"%v/%v\", apiKeysPath, k.KeyID), nil)\n\t\t\tassert.NoError(t, err)\n\t\t\tsetBearerForReq(req, token)\n\t\t\trr = executeRequest(req)\n\t\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\t\tcounter++\n\t\t}\n\t}\n\tassert.Equal(t, 4, counter)\n}\n\nfunc TestAPIKeyErrors(t *testing.T) {\n\ttoken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiKey := dataprovider.APIKey{\n\t\tName: \"testkey\",\n\t\tScope: dataprovider.APIKeyScopeUser,\n\t}\n\tasJSON, err := json.Marshal(apiKey)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, apiKeysPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.NotEmpty(t, location)\n\n\t// invalid API scope\n\tapiKey.Scope = 1000\n\tasJSON, err = json.Marshal(apiKey)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, apiKeysPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\t// invalid JSON\n\treq, err = http.NewRequest(http.MethodPost, apiKeysPath, bytes.NewBuffer([]byte(`invalid JSON`)))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer([]byte(`invalid JSON`)))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, location, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodPut, location, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestAPIKeyOnDeleteCascade(t *testing.T) {\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin, _, err = httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tapiKey := dataprovider.APIKey{\n\t\tName: \"user api key\",\n\t\tScope: dataprovider.APIKeyScopeUser,\n\t\tUser: user.Username,\n\t}\n\n\tapiKey, _, err = httpdtest.AddAPIKey(apiKey, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusUnauthorized, rr)\n\n\tuser.Filters.AllowAPIKeyAuth = true\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, userDirsPath, nil)\n\tassert.NoError(t, err)\n\tsetAPIKeyForReq(req, apiKey.Key, \"\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar contents []map[string]any\n\terr = json.NewDecoder(rr.Body).Decode(&contents)\n\tassert.NoError(t, err)\n\tassert.Len(t, contents, 0)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\n\t_, _, err = httpdtest.GetAPIKeyByID(apiKey.KeyID, http.StatusNotFound)\n\tassert.NoError(t, err)\n\n\tapiKey.User = \"\"\n\tapiKey.Admin = admin.Username\n\tapiKey.Scope = dataprovider.APIKeyScopeAdmin\n\n\tapiKey, _, err = httpdtest.AddAPIKey(apiKey, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\t_, _, err = httpdtest.GetAPIKeyByID(apiKey.KeyID, http.StatusNotFound)\n\tassert.NoError(t, err)\n}\n\nfunc TestBasicWebUsersMock(t *testing.T) {\n\ttoken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser1 := getTestUser()\n\tuser1.Username += \"1\"\n\tuser1AsJSON := getUserAsJSON(t, user1)\n\treq, _ = http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(user1AsJSON))\n\tsetBearerForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user1)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, _ = http.NewRequest(http.MethodGet, webUsersPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, webUsersPath+jsonAPISuffix, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath, nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(webUserPath, user.Username), nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath+\"/0\", nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"username\", user.Username)\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath+\"/0\", &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath+\"/aaa\", &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webUserPath, user.Username), nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webUserPath, user.Username), nil)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webUserPath, user1.Username), nil)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestRenderDefenderPageMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webDefenderPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nDefenderTitle)\n}\n\nfunc TestWebAdminBasicMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminPath, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"username\", admin.Username)\n\tform.Set(\"password\", \"\")\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"description\", admin.Description)\n\tform.Set(\"user_page_hidden_sections\", \"1\")\n\tform.Add(\"user_page_hidden_sections\", \"2\")\n\tform.Add(\"user_page_hidden_sections\", \"3\")\n\tform.Add(\"user_page_hidden_sections\", \"4\")\n\tform.Add(\"user_page_hidden_sections\", \"5\")\n\tform.Add(\"user_page_hidden_sections\", \"6\")\n\tform.Add(\"user_page_hidden_sections\", \"7\")\n\tform.Set(\"default_users_expiration\", \"10\")\n\treq, _ := http.NewRequest(http.MethodPost, webAdminPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"status\", \"a\")\n\treq, _ = http.NewRequest(http.MethodPost, webAdminPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"default_users_expiration\", \"a\")\n\treq, _ = http.NewRequest(http.MethodPost, webAdminPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\tform.Set(\"default_users_expiration\", \"10\")\n\tform.Set(\"password\", admin.Password)\n\treq, _ = http.NewRequest(http.MethodPost, webAdminPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\t// add TOTP config\n\tconfigName, key, _, err := mfa.GenerateTOTPSecret(mfa.GetAvailableTOTPConfigNames()[0], altAdminUsername)\n\tassert.NoError(t, err)\n\taltToken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\tadminTOTPConfig := dataprovider.AdminTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: kms.NewPlainSecret(key.Secret()),\n\t}\n\tasJSON, err := json.Marshal(adminTOTPConfig)\n\tassert.NoError(t, err)\n\t// no CSRF token\n\treq, err = http.NewRequest(http.MethodPost, webAdminTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, altToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\n\treq, err = http.NewRequest(http.MethodPost, webAdminTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, altToken)\n\tsetCSRFHeaderForReq(req, csrfToken) // invalid CSRF token\n\treq.RemoteAddr = defaultRemoteAddr\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"the token is not valid\")\n\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webAdminPath, altToken)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webAdminTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, altToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\treq.RemoteAddr = defaultRemoteAddr\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(altAdminUsername, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, admin.Filters.TOTPConfig.Enabled)\n\tsecretPayload := admin.Filters.TOTPConfig.Secret.GetPayload()\n\tassert.NotEmpty(t, secretPayload)\n\tassert.Equal(t, 1+2+4+8+16+32+64, admin.Filters.Preferences.HideUserPageSections)\n\tassert.Equal(t, 10, admin.Filters.Preferences.DefaultUsersExpiration)\n\n\tadminTOTPConfig = dataprovider.AdminTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: kms.NewEmptySecret(),\n\t}\n\tasJSON, err = json.Marshal(adminTOTPConfig)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webAdminTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, altToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(altAdminUsername, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, admin.Filters.TOTPConfig.Enabled)\n\tassert.Equal(t, secretPayload, admin.Filters.TOTPConfig.Secret.GetPayload())\n\n\tadminTOTPConfig = dataprovider.AdminTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: nil,\n\t}\n\tasJSON, err = json.Marshal(adminTOTPConfig)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webAdminTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, altToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webAdminsPath+jsonAPISuffix, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, webAdminsPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webAdminPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"password\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tform.Set(csrfFormToken, csrfToken) // associated to altToken\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webAdminPath, token)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"email\", \"not-an-email\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"email\", \"\")\n\tform.Set(\"status\", \"b\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"email\", \"admin@example.com\")\n\tform.Set(\"status\", \"0\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(altAdminUsername, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, admin.Filters.TOTPConfig.Enabled)\n\tassert.Equal(t, \"admin@example.com\", admin.Email)\n\tassert.Equal(t, 0, admin.Status)\n\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, altAdminUsername+\"1\"), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(webAdminPath, altAdminUsername), nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(webAdminPath, altAdminUsername+\"1\"), nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, altToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webAdminPath, altAdminUsername), nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath, nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, altToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusNotFound)\n\tassert.NoError(t, err)\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webAdminPath, defaultTokenAuthUser), nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"you cannot delete yourself\")\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webAdminPath, defaultTokenAuthUser), nil)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n}\n\nfunc TestWebAdminGroupsMock(t *testing.T) {\n\tgroup1 := getTestGroup()\n\tgroup1.Name += \"_1\"\n\tgroup1, _, err := httpdtest.AddGroup(group1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tgroup2 := getTestGroup()\n\tgroup2.Name += \"_2\"\n\tgroup2, _, err = httpdtest.AddGroup(group2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tgroup3 := getTestGroup()\n\tgroup3.Name += \"_3\"\n\tgroup3, _, err = httpdtest.AddGroup(group3, http.StatusCreated)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminPath, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", admin.Username)\n\tform.Set(\"password\", \"\")\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"description\", admin.Description)\n\tform.Set(\"password\", admin.Password)\n\tform.Set(\"groups[0][group]\", group1.Name)\n\tform.Set(\"groups[0][group_type]\", \"1\")\n\tform.Set(\"groups[1][group]\", group2.Name)\n\tform.Set(\"groups[1][group_type]\", \"2\")\n\tform.Set(\"groups[2][group]\", group3.Name)\n\treq, err := http.NewRequest(http.MethodPost, webAdminPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tadmin, _, err = httpdtest.GetAdminByUsername(admin.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tif assert.Len(t, admin.Groups, 3) {\n\t\tfor _, g := range admin.Groups {\n\t\t\tswitch g.Name {\n\t\t\tcase group1.Name:\n\t\t\t\tassert.Equal(t, dataprovider.GroupAddToUsersAsPrimary, g.Options.AddToUsersAs)\n\t\t\tcase group2.Name:\n\t\t\t\tassert.Equal(t, dataprovider.GroupAddToUsersAsSecondary, g.Options.AddToUsersAs)\n\t\t\tcase group3.Name:\n\t\t\t\tassert.Equal(t, dataprovider.GroupAddToUsersAsMembership, g.Options.AddToUsersAs)\n\t\t\tdefault:\n\t\t\t\tt.Errorf(\"unexpected group %q\", g.Name)\n\t\t\t}\n\t\t}\n\t}\n\tadminToken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webUserPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, adminToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodGet, webUserPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, adminToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\t_, err = httpdtest.RemoveGroup(group1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveGroup(group2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveGroup(group3, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebAdminPermissions(t *testing.T) {\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin.Permissions = []string{dataprovider.PermAdminAddUsers}\n\t_, _, err := httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebToken(altAdminUsername, altAdminPassword)\n\trequire.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, httpBaseURL+webUserPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err := httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusOK, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+path.Join(webUserPath, \"auser\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+webFolderPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+webStatusPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+webConnectionsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+webAdminPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\treq, err = http.NewRequest(http.MethodGet, httpBaseURL+path.Join(webAdminPath, \"a\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\tresp, err = httpclient.GetHTTPClient().Do(req)\n\trequire.NoError(t, err)\n\tdefer resp.Body.Close()\n\tassert.Equal(t, http.StatusForbidden, resp.StatusCode)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestAdminUpdateSelfMock(t *testing.T) {\n\tadmin, _, err := httpdtest.GetAdminByUsername(defaultTokenAuthUser, http.StatusOK)\n\tassert.NoError(t, err)\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminPath, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"username\", admin.Username)\n\tform.Set(\"password\", admin.Password)\n\tform.Set(\"status\", \"0\")\n\tform.Set(\"permissions\", dataprovider.PermAdminAddUsers)\n\tform.Set(\"permissions\", dataprovider.PermAdminCloseConnections)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, _ := http.NewRequest(http.MethodPost, path.Join(webAdminPath, defaultTokenAuthUser), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorAdminSelfPerms)\n\n\tform.Set(\"permissions\", dataprovider.PermAdminAny)\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, defaultTokenAuthUser), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorAdminSelfDisable)\n\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"require_two_factor\", \"1\")\n\tform.Set(\"require_password_change\", \"1\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, defaultTokenAuthUser), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(defaultTokenAuthUser, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.False(t, admin.Filters.RequirePasswordChange)\n\tassert.False(t, admin.Filters.RequireTwoFactor)\n\n\tform.Set(\"role\", \"my role\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, defaultTokenAuthUser), bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorAdminSelfRole)\n}\n\nfunc TestWebMaintenanceMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, _ := http.NewRequest(http.MethodGet, webMaintenancePath, nil)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webMaintenancePath, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"mode\", \"a\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"mode\", \"0\")\n\tform.Set(\"quota\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"quota\", \"0\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath+\"?a=%3\", &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tbackupFilePath := filepath.Join(os.TempDir(), \"backup.json\")\n\terr = createTestFile(backupFilePath, 0)\n\tassert.NoError(t, err)\n\n\tb, contentType, _ = getMultipartFormData(form, \"backup_file\", backupFilePath)\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\terr = createTestFile(backupFilePath, 10)\n\tassert.NoError(t, err)\n\n\tb, contentType, _ = getMultipartFormData(form, \"backup_file\", backupFilePath)\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser := getTestUser()\n\tuser.ID = 1\n\tuser.Username = \"test_user_web_restore\"\n\tadmin := getTestAdmin()\n\tadmin.ID = 1\n\tadmin.Username = \"test_admin_web_restore\"\n\n\tapiKey := dataprovider.APIKey{\n\t\tName: \"key name\",\n\t\tKeyID: util.GenerateUniqueID(),\n\t\tKey: fmt.Sprintf(\"%v.%v\", util.GenerateUniqueID(), util.GenerateUniqueID()),\n\t\tScope: dataprovider.APIKeyScopeAdmin,\n\t}\n\tbackupData := dataprovider.BackupData{\n\t\tVersion: dataprovider.DumpVersion,\n\t}\n\tbackupData.Users = append(backupData.Users, user)\n\tbackupData.Admins = append(backupData.Admins, admin)\n\tbackupData.APIKeys = append(backupData.APIKeys, apiKey)\n\tbackupContent, err := json.Marshal(backupData)\n\tassert.NoError(t, err)\n\terr = os.WriteFile(backupFilePath, backupContent, os.ModePerm)\n\tassert.NoError(t, err)\n\n\tb, contentType, _ = getMultipartFormData(form, \"backup_file\", backupFilePath)\n\treq, _ = http.NewRequest(http.MethodPost, webRestorePath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nBackupOK)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(admin.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\t_, _, err = httpdtest.GetAPIKeyByID(apiKey.KeyID, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveAPIKey(apiKey, http.StatusOK)\n\tassert.NoError(t, err)\n\n\terr = os.Remove(backupFilePath)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserAddMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tgroup1 := getTestGroup()\n\tgroup1.Name += \"_1\"\n\tgroup1, _, err = httpdtest.AddGroup(group1, http.StatusCreated)\n\tassert.NoError(t, err)\n\tgroup2 := getTestGroup()\n\tgroup2.Name += \"_2\"\n\tgroup2, _, err = httpdtest.AddGroup(group2, http.StatusCreated)\n\tassert.NoError(t, err)\n\tgroup3 := getTestGroup()\n\tgroup3.Name += \"_3\"\n\tgroup3, _, err = httpdtest.AddGroup(group3, http.StatusCreated)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuser.UploadBandwidth = 32\n\tuser.DownloadBandwidth = 64\n\tuser.UploadDataTransfer = 1000\n\tuser.DownloadDataTransfer = 2000\n\tuser.UID = 1000\n\tuser.AdditionalInfo = \"info\"\n\tuser.Description = \"user dsc\"\n\tuser.Email = \"test@test.com\"\n\tuser.Filters.AdditionalEmails = []string{\"example1@test.com\", \"example2@test.com\"}\n\tmappedDir := filepath.Join(os.TempDir(), \"mapped\")\n\tfolderName := filepath.Base(mappedDir)\n\tf := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: mappedDir,\n\t}\n\tfolderAsJSON, err := json.Marshal(f)\n\tassert.NoError(t, err)\n\treq, _ := http.NewRequest(http.MethodPost, folderPath, bytes.NewBuffer(folderAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"email\", user.Email)\n\tform.Set(\"additional_emails[0][additional_email]\", user.Filters.AdditionalEmails[0])\n\tform.Set(\"additional_emails[1][additional_email]\", user.Filters.AdditionalEmails[1])\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"osfs_read_buffer_size\", \"2\")\n\tform.Set(\"osfs_write_buffer_size\", \"3\")\n\tform.Set(\"password\", user.Password)\n\tform.Set(\"primary_group\", group1.Name)\n\tform.Set(\"secondary_groups\", group2.Name)\n\tform.Set(\"membership_groups\", group3.Name)\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"directory_permissions[0][sub_perm_path]\", \"/subdir\")\n\tform.Set(\"directory_permissions[0][sub_perm_permissions][]\", \"list\")\n\tform.Add(\"directory_permissions[0][sub_perm_permissions][]\", \"download\")\n\tform.Set(\"virtual_folders[0][vfolder_path]\", \" /vdir\")\n\tform.Set(\"virtual_folders[0][vfolder_name]\", folderName)\n\tform.Set(\"virtual_folders[0][vfolder_quota_files]\", \"2\")\n\tform.Set(\"virtual_folders[0][vfolder_quota_size]\", \"1024\")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[0][pattern_policy]\", \"1\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.png\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[2][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[2][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[2][pattern_type]\", \"denied\")\n\tform.Set(\"directory_patterns[3][pattern_path]\", \"/dir3\")\n\tform.Set(\"directory_patterns[3][patterns]\", \"*.rar\")\n\tform.Set(\"directory_patterns[3][pattern_type]\", \"denied\")\n\tform.Set(\"directory_patterns[4][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[4][patterns]\", \"*.mkv\")\n\tform.Set(\"directory_patterns[4][pattern_type]\", \"denied\")\n\tform.Set(\"access_time_restrictions[0][access_time_day_of_week]\", \"2\")\n\tform.Set(\"access_time_restrictions[0][access_time_start]\", \"10\") // invalid and no end, ignored\n\tform.Set(\"access_time_restrictions[1][access_time_day_of_week]\", \"3\")\n\tform.Set(\"access_time_restrictions[1][access_time_start]\", \"12:00\")\n\tform.Set(\"access_time_restrictions[1][access_time_end]\", \"14:09\")\n\tform.Set(\"additional_info\", user.AdditionalInfo)\n\tform.Set(\"description\", user.Description)\n\tform.Add(\"hooks\", \"external_auth_disabled\")\n\tform.Set(\"disable_fs_checks\", \"checked\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"start_directory\", \"start/dir\")\n\tform.Set(\"require_password_change\", \"1\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\t// test invalid url escape\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath+\"?a=%2\", &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"public_keys\", testPubKey)\n\tform.Add(\"public_keys\", testPubKey1)\n\tform.Set(\"uid\", strconv.FormatInt(int64(user.UID), 10))\n\tform.Set(\"gid\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid gid\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"gid\", \"0\")\n\tform.Set(\"max_sessions\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid max sessions\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"max_sessions\", \"0\")\n\tform.Set(\"quota_size\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid quota size\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"quota_size\", \"0\")\n\tform.Set(\"quota_files\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid quota files\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"quota_files\", \"0\")\n\tform.Set(\"upload_bandwidth\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid upload bandwidth\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"upload_bandwidth\", strconv.FormatInt(user.UploadBandwidth, 10))\n\tform.Set(\"download_bandwidth\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid download bandwidth\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"download_bandwidth\", strconv.FormatInt(user.DownloadBandwidth, 10))\n\tform.Set(\"upload_data_transfer\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid upload data transfer\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"upload_data_transfer\", strconv.FormatInt(user.UploadDataTransfer, 10))\n\tform.Set(\"download_data_transfer\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid download data transfer\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"download_data_transfer\", strconv.FormatInt(user.DownloadDataTransfer, 10))\n\tform.Set(\"total_data_transfer\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid total data transfer\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"total_data_transfer\", strconv.FormatInt(user.TotalDataTransfer, 10))\n\tform.Set(\"status\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid status\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"123\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid expiration date\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(\"allowed_ip\", \"invalid,ip\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid allowed_ip\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"192.168.1.2\") // it should be 192.168.1.2/32\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\t// test invalid denied_ip\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"denied_ip\", \"\")\n\t// test invalid max file upload size\n\tform.Set(\"max_upload_file_size\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"max_upload_file_size\", \"1 KB\")\n\t// test invalid default shares expiration\n\tform.Set(\"default_shares_expiration\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"default_shares_expiration\", \"10\")\n\t// test invalid max shares expiration\n\tform.Set(\"max_shares_expiration\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"max_shares_expiration\", \"30\")\n\t// test invalid password expiration\n\tform.Set(\"password_expiration\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"password_expiration\", \"90\")\n\t// test invalid password strength\n\tform.Set(\"password_strength\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"password_strength\", \"60\")\n\t// test invalid tls username\n\tform.Set(\"tls_username\", \"username\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"tls_username\", string(sdk.TLSUsernameNone))\n\t// invalid upload bandwidth source\n\tform.Set(\"src_bandwidth_limits[0][bandwidth_limit_sources]\", \"192.168.1.0/24, 192.168.2.0/25\")\n\tform.Set(\"src_bandwidth_limits[0][upload_bandwidth_source]\", \"a\")\n\tform.Set(\"src_bandwidth_limits[0][download_bandwidth_source]\", \"0\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\t// invalid download bandwidth source\n\tform.Set(\"src_bandwidth_limits[0][upload_bandwidth_source]\", \"256\")\n\tform.Set(\"src_bandwidth_limits[0][download_bandwidth_source]\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"src_bandwidth_limits[0][download_bandwidth_source]\", \"512\")\n\tform.Set(\"src_bandwidth_limits[1][download_bandwidth_source]\", \"1024\")\n\tform.Set(\"src_bandwidth_limits[1][bandwidth_limit_sources]\", \"1.1.1\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorSourceBWLimitInvalid)\n\tform.Set(\"src_bandwidth_limits[1][bandwidth_limit_sources]\", \"127.0.0.1/32\")\n\tform.Set(\"src_bandwidth_limits[1][upload_bandwidth_source]\", \"-1\")\n\t// invalid external auth cache size\n\tform.Set(\"external_auth_cache_time\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(csrfFormToken, \"invalid form token\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tdbUser, err := dataprovider.UserExists(user.Username, \"\")\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, dbUser.Password)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\t// the user already exists, was created with the above request\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tnewUser := dataprovider.User{}\n\terr = render.DecodeJSON(rr.Body, &newUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, user.UID, newUser.UID)\n\tassert.Equal(t, 2, newUser.FsConfig.OSConfig.ReadBufferSize)\n\tassert.Equal(t, 3, newUser.FsConfig.OSConfig.WriteBufferSize)\n\tassert.Equal(t, user.UploadBandwidth, newUser.UploadBandwidth)\n\tassert.Equal(t, user.DownloadBandwidth, newUser.DownloadBandwidth)\n\tassert.Equal(t, user.UploadDataTransfer, newUser.UploadDataTransfer)\n\tassert.Equal(t, user.DownloadDataTransfer, newUser.DownloadDataTransfer)\n\tassert.Equal(t, user.TotalDataTransfer, newUser.TotalDataTransfer)\n\tassert.Equal(t, int64(1000), newUser.Filters.MaxUploadFileSize)\n\tassert.Equal(t, user.AdditionalInfo, newUser.AdditionalInfo)\n\tassert.Equal(t, user.Description, newUser.Description)\n\tassert.True(t, newUser.Filters.Hooks.ExternalAuthDisabled)\n\tassert.False(t, newUser.Filters.Hooks.PreLoginDisabled)\n\tassert.False(t, newUser.Filters.Hooks.CheckPasswordDisabled)\n\tassert.True(t, newUser.Filters.DisableFsChecks)\n\tassert.False(t, newUser.Filters.AllowAPIKeyAuth)\n\tassert.Equal(t, user.Email, newUser.Email)\n\tassert.Equal(t, len(user.Filters.AdditionalEmails), len(newUser.Filters.AdditionalEmails))\n\tassert.Equal(t, \"/start/dir\", newUser.Filters.StartDirectory)\n\tassert.Equal(t, 0, newUser.Filters.FTPSecurity)\n\tassert.Equal(t, 10, newUser.Filters.DefaultSharesExpiration)\n\tassert.Equal(t, 30, newUser.Filters.MaxSharesExpiration)\n\tassert.Equal(t, 90, newUser.Filters.PasswordExpiration)\n\tassert.Equal(t, 60, newUser.Filters.PasswordStrength)\n\tassert.Greater(t, newUser.LastPasswordChange, int64(0))\n\tassert.True(t, newUser.Filters.RequirePasswordChange)\n\tassert.True(t, slices.Contains(newUser.PublicKeys, testPubKey))\n\tif val, ok := newUser.Permissions[\"/subdir\"]; ok {\n\t\tassert.True(t, slices.Contains(val, dataprovider.PermListItems))\n\t\tassert.True(t, slices.Contains(val, dataprovider.PermDownload))\n\t} else {\n\t\tassert.Fail(t, \"user permissions must contain /somedir\", \"actual: %v\", newUser.Permissions)\n\t}\n\tassert.Len(t, newUser.PublicKeys, 2)\n\tassert.Len(t, newUser.VirtualFolders, 1)\n\tfor _, v := range newUser.VirtualFolders {\n\t\tassert.Equal(t, v.VirtualPath, \"/vdir\")\n\t\tassert.Equal(t, v.Name, folderName)\n\t\tassert.Equal(t, v.MappedPath, mappedDir)\n\t\tassert.Equal(t, v.QuotaFiles, 2)\n\t\tassert.Equal(t, v.QuotaSize, int64(1024))\n\t}\n\tassert.Len(t, newUser.Filters.FilePatterns, 3)\n\tfor _, filter := range newUser.Filters.FilePatterns {\n\t\tswitch filter.Path {\n\t\tcase \"/dir1\":\n\t\t\tassert.Len(t, filter.DeniedPatterns, 1)\n\t\t\tassert.Len(t, filter.AllowedPatterns, 1)\n\t\t\tassert.True(t, slices.Contains(filter.AllowedPatterns, \"*.png\"))\n\t\t\tassert.True(t, slices.Contains(filter.DeniedPatterns, \"*.zip\"))\n\t\t\tassert.Equal(t, sdk.DenyPolicyDefault, filter.DenyPolicy)\n\t\tcase \"/dir2\":\n\t\t\tassert.Len(t, filter.DeniedPatterns, 1)\n\t\t\tassert.Len(t, filter.AllowedPatterns, 2)\n\t\t\tassert.True(t, slices.Contains(filter.AllowedPatterns, \"*.jpg\"))\n\t\t\tassert.True(t, slices.Contains(filter.AllowedPatterns, \"*.png\"))\n\t\t\tassert.True(t, slices.Contains(filter.DeniedPatterns, \"*.mkv\"))\n\t\t\tassert.Equal(t, sdk.DenyPolicyHide, filter.DenyPolicy)\n\t\tcase \"/dir3\":\n\t\t\tassert.Len(t, filter.DeniedPatterns, 1)\n\t\t\tassert.Len(t, filter.AllowedPatterns, 0)\n\t\t\tassert.True(t, slices.Contains(filter.DeniedPatterns, \"*.rar\"))\n\t\t\tassert.Equal(t, sdk.DenyPolicyDefault, filter.DenyPolicy)\n\t\t}\n\t}\n\tif assert.Len(t, newUser.Filters.BandwidthLimits, 2) {\n\t\tfor _, bwLimit := range newUser.Filters.BandwidthLimits {\n\t\t\tif len(bwLimit.Sources) == 2 {\n\t\t\t\tassert.Equal(t, \"192.168.1.0/24\", bwLimit.Sources[0])\n\t\t\t\tassert.Equal(t, \"192.168.2.0/25\", bwLimit.Sources[1])\n\t\t\t\tassert.Equal(t, int64(256), bwLimit.UploadBandwidth)\n\t\t\t\tassert.Equal(t, int64(512), bwLimit.DownloadBandwidth)\n\t\t\t} else {\n\t\t\t\tassert.Equal(t, []string{\"127.0.0.1/32\"}, bwLimit.Sources)\n\t\t\t\tassert.Equal(t, int64(0), bwLimit.UploadBandwidth)\n\t\t\t\tassert.Equal(t, int64(1024), bwLimit.DownloadBandwidth)\n\t\t\t}\n\t\t}\n\t}\n\tif assert.Len(t, newUser.Filters.AccessTime, 1) {\n\t\tassert.Equal(t, 3, newUser.Filters.AccessTime[0].DayOfWeek)\n\t\tassert.Equal(t, \"12:00\", newUser.Filters.AccessTime[0].From)\n\t\tassert.Equal(t, \"14:09\", newUser.Filters.AccessTime[0].To)\n\t}\n\tassert.Len(t, newUser.Groups, 3)\n\tassert.Equal(t, sdk.TLSUsernameNone, newUser.Filters.TLSUsername)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, newUser.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t_, err = httpdtest.RemoveGroup(group1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveGroup(group2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveGroup(group3, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserUpdateMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuser.Filters.BandwidthLimits = []sdk.BandwidthLimit{\n\t\t{\n\t\t\tSources: []string{\"10.8.0.0/16\", \"192.168.1.0/25\"},\n\t\t\tUploadBandwidth: 256,\n\t\t\tDownloadBandwidth: 512,\n\t\t},\n\t}\n\tuser.TotalDataTransfer = 4000\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tlastPwdChange := user.LastPasswordChange\n\tassert.Greater(t, lastPwdChange, int64(0))\n\t// add TOTP config\n\tconfigName, key, _, err := mfa.GenerateTOTPSecret(mfa.GetAvailableTOTPConfigNames()[0], user.Username)\n\tassert.NoError(t, err)\n\tuserToken, err := getJWTWebClientTokenFromTestServer(defaultUsername, defaultPassword)\n\tassert.NoError(t, err)\n\tuserTOTPConfig := dataprovider.UserTOTPConfig{\n\t\tEnabled: true,\n\t\tConfigName: configName,\n\t\tSecret: kms.NewPlainSecret(key.Secret()),\n\t\tProtocols: []string{common.ProtocolSSH, common.ProtocolFTP},\n\t}\n\tasJSON, err := json.Marshal(userTOTPConfig)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, userToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webClientProfilePath, userToken)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientTOTPSavePath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, userToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, user.Filters.TOTPConfig.Enabled)\n\tassert.Equal(t, int64(4000), user.TotalDataTransfer)\n\tassert.Equal(t, lastPwdChange, user.LastPasswordChange)\n\tif assert.Len(t, user.Filters.BandwidthLimits, 1) {\n\t\tif assert.Len(t, user.Filters.BandwidthLimits[0].Sources, 2) {\n\t\t\tassert.Equal(t, \"10.8.0.0/16\", user.Filters.BandwidthLimits[0].Sources[0])\n\t\t\tassert.Equal(t, \"192.168.1.0/25\", user.Filters.BandwidthLimits[0].Sources[1])\n\t\t}\n\t\tassert.Equal(t, int64(256), user.Filters.BandwidthLimits[0].UploadBandwidth)\n\t\tassert.Equal(t, int64(512), user.Filters.BandwidthLimits[0].DownloadBandwidth)\n\t}\n\n\tdbUser, err := dataprovider.UserExists(user.Username, \"\")\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, dbUser.Password)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser.MaxSessions = 1\n\tuser.QuotaFiles = 2\n\tuser.QuotaSize = 1000 * 1000 * 1000\n\tuser.GID = 1000\n\tuser.Filters.AllowAPIKeyAuth = true\n\tuser.AdditionalInfo = \"new additional info\"\n\tuser.Email = \"user@example.com\"\n\tform := make(url.Values)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"email\", user.Email)\n\tform.Set(\"password\", \"\")\n\tform.Set(\"public_keys[0][public_key]\", testPubKey)\n\tform.Set(\"tls_certs[0][tls_cert]\", httpsCert)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", \"1 GB\")\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"directory_permissions[0][sub_perm_path]\", \"/otherdir\")\n\tform.Set(\"directory_permissions[0][sub_perm_permissions][]\", \"list\")\n\tform.Add(\"directory_permissions[0][sub_perm_permissions][]\", \"upload\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \" 192.168.1.3/32, 192.168.2.0/24 \")\n\tform.Set(\"denied_ip\", \" 10.0.0.2/32 \")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"denied\")\n\tform.Set(\"denied_login_methods\", dataprovider.SSHLoginMethodKeyboardInteractive)\n\tform.Set(\"denied_protocols\", common.ProtocolFTP)\n\tform.Set(\"max_upload_file_size\", \"100\")\n\tform.Set(\"default_shares_expiration\", \"30\")\n\tform.Set(\"max_shares_expiration\", \"60\")\n\tform.Set(\"password_expiration\", \"60\")\n\tform.Set(\"password_strength\", \"40\")\n\tform.Set(\"disconnect\", \"1\")\n\tform.Set(\"additional_info\", user.AdditionalInfo)\n\tform.Set(\"description\", user.Description)\n\tform.Set(\"tls_username\", string(sdk.TLSUsernameCN))\n\tform.Set(\"allow_api_key_auth\", \"1\")\n\tform.Set(\"require_password_change\", \"1\")\n\tform.Set(\"external_auth_cache_time\", \"120\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tdbUser, err = dataprovider.UserExists(user.Username, \"\")\n\tassert.NoError(t, err)\n\tassert.Empty(t, dbUser.Password)\n\tassert.False(t, dbUser.IsPasswordHashed())\n\n\tform.Set(\"password\", defaultPassword)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tdbUser, err = dataprovider.UserExists(user.Username, \"\")\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, dbUser.Password)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\tprevPwd := dbUser.Password\n\n\tform.Set(\"password\", redactedSecret)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tdbUser, err = dataprovider.UserExists(user.Username, \"\")\n\tassert.NoError(t, err)\n\tassert.NotEmpty(t, dbUser.Password)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\tassert.Equal(t, prevPwd, dbUser.Password)\n\tassert.True(t, dbUser.Filters.TOTPConfig.Enabled)\n\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, user.Email, updateUser.Email)\n\tassert.Equal(t, user.HomeDir, updateUser.HomeDir)\n\tassert.Equal(t, user.MaxSessions, updateUser.MaxSessions)\n\tassert.Equal(t, user.QuotaFiles, updateUser.QuotaFiles)\n\tassert.Equal(t, user.QuotaSize, updateUser.QuotaSize)\n\tassert.Equal(t, user.UID, updateUser.UID)\n\tassert.Equal(t, user.GID, updateUser.GID)\n\tassert.Equal(t, user.AdditionalInfo, updateUser.AdditionalInfo)\n\tassert.Equal(t, user.Description, updateUser.Description)\n\tassert.Equal(t, int64(100), updateUser.Filters.MaxUploadFileSize)\n\tassert.Equal(t, sdk.TLSUsernameCN, updateUser.Filters.TLSUsername)\n\tassert.True(t, updateUser.Filters.AllowAPIKeyAuth)\n\tassert.True(t, updateUser.Filters.TOTPConfig.Enabled)\n\tassert.Equal(t, int64(0), updateUser.TotalDataTransfer)\n\tassert.Equal(t, int64(0), updateUser.DownloadDataTransfer)\n\tassert.Equal(t, int64(0), updateUser.UploadDataTransfer)\n\tassert.Equal(t, int64(0), updateUser.Filters.ExternalAuthCacheTime)\n\tassert.Equal(t, 30, updateUser.Filters.DefaultSharesExpiration)\n\tassert.Equal(t, 60, updateUser.Filters.MaxSharesExpiration)\n\tassert.Equal(t, 60, updateUser.Filters.PasswordExpiration)\n\tassert.Equal(t, 40, updateUser.Filters.PasswordStrength)\n\tassert.True(t, updateUser.Filters.RequirePasswordChange)\n\tif val, ok := updateUser.Permissions[\"/otherdir\"]; ok {\n\t\tassert.True(t, slices.Contains(val, dataprovider.PermListItems))\n\t\tassert.True(t, slices.Contains(val, dataprovider.PermUpload))\n\t} else {\n\t\tassert.Fail(t, \"user permissions must contains /otherdir\", \"actual: %v\", updateUser.Permissions)\n\t}\n\tassert.True(t, slices.Contains(updateUser.Filters.AllowedIP, \"192.168.1.3/32\"))\n\tassert.True(t, slices.Contains(updateUser.Filters.DeniedIP, \"10.0.0.2/32\"))\n\tassert.True(t, slices.Contains(updateUser.Filters.DeniedLoginMethods, dataprovider.SSHLoginMethodKeyboardInteractive))\n\tassert.True(t, slices.Contains(updateUser.Filters.DeniedProtocols, common.ProtocolFTP))\n\tassert.True(t, slices.Contains(updateUser.Filters.FilePatterns[0].DeniedPatterns, \"*.zip\"))\n\tassert.Len(t, updateUser.Filters.BandwidthLimits, 0)\n\tassert.Len(t, updateUser.Filters.TLSCerts, 1)\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestRenderFolderTemplateMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webTemplateFolder, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tfolder := vfs.BaseVirtualFolder{\n\t\tName: \"templatefolder\",\n\t\tMappedPath: filepath.Join(os.TempDir(), \"mapped\"),\n\t\tDescription: \"template folder desc\",\n\t}\n\tfolder, _, err = httpdtest.AddFolder(folder, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webTemplateFolder+fmt.Sprintf(\"?from=%v\", folder.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webTemplateFolder+\"?from=unknown-folder\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\t_, err = httpdtest.RemoveFolder(folder, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestRenderUserTemplateMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodGet, webTemplateUser, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tuser, _, err := httpdtest.AddUser(getTestUser(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webTemplateUser+fmt.Sprintf(\"?from=%v\", user.Username), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webTemplateUser+\"?from=unknown\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestUserSaveFromTemplateMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateFolder, token)\n\tassert.NoError(t, err)\n\tuser1 := \"u1\"\n\tuser2 := \"u2\"\n\tform := make(url.Values)\n\tform.Set(\"username\", \"\")\n\tform.Set(\"home_dir\", filepath.Join(os.TempDir(), \"%username%\"))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", \"0\")\n\tform.Set(\"max_sessions\", \"0\")\n\tform.Set(\"quota_size\", \"0\")\n\tform.Set(\"quota_files\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(\"fs_provider\", \"0\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Add(\"template_users[0][tpl_username]\", user1)\n\tform.Add(\"template_users[0][tpl_password]\", \"password1\")\n\tform.Add(\"template_users[0][tpl_public_keys]\", \" \")\n\tform.Add(\"template_users[1][tpl_username]\", user2)\n\tform.Add(\"template_users[1][tpl_public_keys]\", testPubKey)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ := http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tu1, _, err := httpdtest.GetUserByUsername(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.False(t, u1.Filters.RequirePasswordChange)\n\tu2, _, err := httpdtest.GetUserByUsername(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.False(t, u2.Filters.RequirePasswordChange)\n\n\t_, err = httpdtest.RemoveUser(u1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(u2, http.StatusOK)\n\tassert.NoError(t, err)\n\n\tform.Add(\"tpl_require_password_change\", \"checked\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tu1, _, err = httpdtest.GetUserByUsername(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, u1.Filters.RequirePasswordChange)\n\tu2, _, err = httpdtest.GetUserByUsername(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.True(t, u2.Filters.RequirePasswordChange)\n\n\t_, err = httpdtest.RemoveUser(u1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(u2, http.StatusOK)\n\tassert.NoError(t, err)\n\n\terr = dataprovider.Close()\n\tassert.NoError(t, err)\n\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf := config.GetProviderConf()\n\tproviderConf.BackupsPath = backupsPath\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n}\n\nfunc TestUserTemplateErrors(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateFolder, token)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuser.FsConfig.Provider = sdk.S3FilesystemProvider\n\tuser.FsConfig.S3Config.Bucket = \"test\"\n\tuser.FsConfig.S3Config.Region = \"eu-central-1\"\n\tuser.FsConfig.S3Config.AccessKey = \"%username%\"\n\tuser.FsConfig.S3Config.KeyPrefix = \"somedir/subdir/\"\n\tuser.FsConfig.S3Config.UploadPartSize = 5\n\tuser.FsConfig.S3Config.UploadConcurrency = 4\n\tuser.FsConfig.S3Config.DownloadPartSize = 6\n\tuser.FsConfig.S3Config.DownloadConcurrency = 3\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"home_dir\", filepath.Join(os.TempDir(), \"%username%\"))\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"1\")\n\tform.Set(\"s3_bucket\", user.FsConfig.S3Config.Bucket)\n\tform.Set(\"s3_region\", user.FsConfig.S3Config.Region)\n\tform.Set(\"s3_access_key\", \"%username%\")\n\tform.Set(\"s3_access_secret\", \"%password%\")\n\tform.Set(\"s3_sse_customer_key\", \"%password%\")\n\tform.Set(\"s3_key_prefix\", \"base/%username%\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Add(\"hooks\", \"external_auth_disabled\")\n\tform.Add(\"hooks\", \"check_password_disabled\")\n\tform.Set(\"disable_fs_checks\", \"checked\")\n\tform.Set(\"s3_download_part_max_time\", \"0\")\n\tform.Set(\"s3_upload_part_max_time\", \"0\")\n\t// test invalid s3_upload_part_size\n\tform.Set(\"s3_upload_part_size\", \"a\")\n\tform.Set(\"form_action\", \"export_from_template\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ := http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tform.Set(\"s3_upload_part_size\", strconv.FormatInt(user.FsConfig.S3Config.UploadPartSize, 10))\n\tform.Set(\"s3_upload_concurrency\", strconv.Itoa(user.FsConfig.S3Config.UploadConcurrency))\n\tform.Set(\"s3_download_part_size\", strconv.FormatInt(user.FsConfig.S3Config.DownloadPartSize, 10))\n\tform.Set(\"s3_download_concurrency\", strconv.Itoa(user.FsConfig.S3Config.DownloadConcurrency))\n\t// no user defined\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorUserTemplate)\n\n\tform.Set(\"template_users[0][tpl_username]\", \"user1\")\n\tform.Set(\"template_users[0][tpl_password]\", \"password1\")\n\tform.Set(\"template_users[0][tpl_public_keys]\", \"invalid-pkey\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\trequire.Contains(t, rr.Body.String(), util.I18nErrorPubKeyInvalid)\n\n\tform.Set(\"template_users[0][tpl_username]\", \" \")\n\tform.Set(\"template_users[0][tpl_password]\", \"pwd\")\n\tform.Set(\"template_users[0][tpl_public_keys]\", testPubKey)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\trequire.Contains(t, rr.Body.String(), util.I18nErrorUserTemplate)\n}\n\nfunc TestUserTemplateRoleAndPermissions(t *testing.T) {\n\tr1 := getTestRole()\n\tr2 := getTestRole()\n\tr2.Name += \"_mod\"\n\trole1, resp, err := httpdtest.AddRole(r1, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\trole2, resp, err := httpdtest.AddRole(r2, http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin.Role = role1.Name\n\tadmin.Permissions = []string{dataprovider.PermAdminManageFolders, dataprovider.PermAdminChangeUsers,\n\t\tdataprovider.PermAdminViewUsers}\n\tadmin, _, err = httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\n\treq, _ := http.NewRequest(http.MethodGet, webTemplateUser, nil)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateFolder, token)\n\tassert.NoError(t, err)\n\tuser1 := \"u1\"\n\tuser2 := \"u2\"\n\tform := make(url.Values)\n\tform.Set(\"username\", \"\")\n\tform.Set(\"role\", role2.Name)\n\tform.Set(\"home_dir\", filepath.Join(os.TempDir(), \"%username%\"))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", \"0\")\n\tform.Set(\"max_sessions\", \"0\")\n\tform.Set(\"quota_size\", \"0\")\n\tform.Set(\"quota_files\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", \"1\")\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(\"fs_provider\", \"0\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Add(\"template_users[0][tpl_username]\", user1)\n\tform.Add(\"template_users[0][tpl_password]\", \"password1\")\n\tform.Add(\"template_users[0][tpl_public_keys]\", \" \")\n\tform.Add(\"template_users[1][tpl_username]\", user2)\n\tform.Add(\"template_users[1][tpl_public_keys]\", testPubKey)\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\t// Add the required permissions\n\tadmin.Permissions = append(admin.Permissions, dataprovider.PermAdminAddUsers)\n\t_, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\ttoken, err = getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\n\treq, _ = http.NewRequest(http.MethodGet, webTemplateUser, nil)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tcsrfToken, err = getCSRFTokenFromInternalPageMock(webTemplateUser, token)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tu1, _, err := httpdtest.GetUserByUsername(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, admin.Role, u1.Role)\n\tu2, _, err := httpdtest.GetUserByUsername(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, admin.Role, u2.Role)\n\n\t_, err = httpdtest.RemoveUser(u1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(u2, http.StatusOK)\n\tassert.NoError(t, err)\n\t// Set an empty role\n\tform.Set(\"role\", \"\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateUser, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tu1, _, err = httpdtest.GetUserByUsername(user1, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, admin.Role, u1.Role)\n\tu2, _, err = httpdtest.GetUserByUsername(user2, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, admin.Role, u2.Role)\n\n\t_, err = httpdtest.RemoveUser(u1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(u2, http.StatusOK)\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveRole(role1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveRole(role2, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestUserPlaceholders(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, token)\n\tassert.NoError(t, err)\n\tu := getTestUser()\n\tu.HomeDir = filepath.Join(os.TempDir(), \"%username%_%password%\")\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", u.Username)\n\tform.Set(\"home_dir\", u.HomeDir)\n\tform.Set(\"password\", u.Password)\n\tform.Set(\"status\", strconv.Itoa(u.Status))\n\tform.Set(\"expiration_date\", \"\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"public_keys[0][public_key]\", testPubKey)\n\tform.Set(\"public_keys[1][public_key]\", testPubKey1)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", \"0\")\n\tform.Set(\"max_sessions\", \"0\")\n\tform.Set(\"quota_size\", \"0\")\n\tform.Set(\"quota_files\", \"0\")\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ := http.NewRequest(http.MethodPost, webUserPath, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tuser, _, err := httpdtest.GetUserByUsername(defaultUsername, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, filepath.Join(os.TempDir(), fmt.Sprintf(\"%v_%v\", defaultUsername, defaultPassword)), user.HomeDir)\n\n\tdbUser, err := dataprovider.UserExists(defaultUsername, \"\")\n\tassert.NoError(t, err)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\thashedPwd := dbUser.Password\n\n\tform.Set(\"password\", redactedSecret)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webUserPath, defaultUsername), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(defaultUsername, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, filepath.Join(os.TempDir(), defaultUsername+\"_%password%\"), user.HomeDir)\n\t// check that the password was unchanged\n\tdbUser, err = dataprovider.UserExists(defaultUsername, \"\")\n\tassert.NoError(t, err)\n\tassert.True(t, dbUser.IsPasswordHashed())\n\tassert.Equal(t, hashedPwd, dbUser.Password)\n\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestFolderPlaceholders(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webFolderPath, token)\n\tassert.NoError(t, err)\n\tfolderName := \"folderName\"\n\tform := make(url.Values)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"mapped_path\", filepath.Join(os.TempDir(), \"%name%\"))\n\tform.Set(\"description\", \"desc folder %name%\")\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, err := http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tfolderGet, _, err := httpdtest.GetFolderByName(folderName, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, filepath.Join(os.TempDir(), folderName), folderGet.MappedPath)\n\tassert.Equal(t, fmt.Sprintf(\"desc folder %v\", folderName), folderGet.Description)\n\n\tform.Set(\"mapped_path\", filepath.Join(os.TempDir(), \"%name%_%name%\"))\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tfolderGet, _, err = httpdtest.GetFolderByName(folderName, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, filepath.Join(os.TempDir(), fmt.Sprintf(\"%v_%v\", folderName, folderName)), folderGet.MappedPath)\n\tassert.Equal(t, fmt.Sprintf(\"desc folder %v\", folderName), folderGet.Description)\n\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folderName}, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestFolderSaveFromTemplateMock(t *testing.T) {\n\tfolder1 := \"f1\"\n\tfolder2 := \"f2\"\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateFolder, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"name\", \"name\")\n\tform.Set(\"mapped_path\", filepath.Join(os.TempDir(), \"%name%\"))\n\tform.Set(\"description\", \"desc folder %name%\")\n\tform.Set(\"template_folders[0][tpl_foldername]\", folder1)\n\tform.Set(\"template_folders[1][tpl_foldername]\", folder2)\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, err := http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\t_, _, err = httpdtest.GetFolderByName(folder1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, _, err = httpdtest.GetFolderByName(folder2, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folder1}, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveFolder(vfs.BaseVirtualFolder{Name: folder2}, http.StatusOK)\n\tassert.NoError(t, err)\n\n\terr = dataprovider.Close()\n\tassert.NoError(t, err)\n\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf := config.GetProviderConf()\n\tproviderConf.BackupsPath = backupsPath\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n}\n\nfunc TestFolderTemplateErrors(t *testing.T) {\n\tfolderName := \"vfolder-template\"\n\tmappedPath := filepath.Join(os.TempDir(), \"%name%mapped%name%path\")\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateFolder, token)\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"mapped_path\", mappedPath)\n\tform.Set(\"description\", \"desc folder %name%\")\n\tform.Set(\"template_folders[0][tpl_foldername]\", \"folder1\")\n\tform.Set(\"template_folders[1][tpl_foldername]\", \"folder2\")\n\tform.Set(\"template_folders[2][tpl_foldername]\", \"folder3\")\n\tform.Set(\"template_folders[3][tpl_foldername]\", \"folder1 \")\n\tform.Add(\"template_folders[3][tpl_foldername]\", \" \")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ := http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateFolder+\"?param=p%C3%AO%GG\", &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidForm)\n\n\tform.Set(\"fs_provider\", \"1\")\n\tform.Set(\"s3_bucket\", \"bucket\")\n\tform.Set(\"s3_region\", \"us-east-1\")\n\tform.Set(\"s3_access_key\", \"%name%\")\n\tform.Set(\"s3_access_secret\", \"pwd%name%\")\n\tform.Set(\"s3_sse_customer_key\", \"key%name%\")\n\tform.Set(\"s3_key_prefix\", \"base/%name%\")\n\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\tform.Set(\"s3_upload_part_size\", \"5\")\n\tform.Set(\"s3_upload_concurrency\", \"4\")\n\tform.Set(\"s3_download_part_max_time\", \"0\")\n\tform.Set(\"s3_upload_part_max_time\", \"0\")\n\tform.Set(\"s3_download_part_size\", \"6\")\n\tform.Set(\"s3_download_concurrency\", \"2\")\n\n\tform.Set(\"template_folders[0][tpl_foldername]\", \" \")\n\tform.Set(\"template_folders[1][tpl_foldername]\", \"\")\n\tform.Set(\"template_folders[2][tpl_foldername]\", \"\")\n\tform.Set(\"template_folders[3][tpl_foldername]\", \" \")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFolderTemplate)\n\n\tform.Set(\"template_folders[0][tpl_foldername]\", \"name\")\n\tform.Set(\"mapped_path\", \"relative-path\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidHomeDir)\n}\n\nfunc TestFolderTemplatePermission(t *testing.T) {\n\tadmin := getTestAdmin()\n\tadmin.Username = altAdminUsername\n\tadmin.Password = altAdminPassword\n\tadmin.Permissions = []string{dataprovider.PermAdminChangeUsers, dataprovider.PermAdminAddUsers, dataprovider.PermAdminViewUsers}\n\tadmin, _, err := httpdtest.AddAdmin(admin, http.StatusCreated)\n\tassert.NoError(t, err)\n\t// no permission to view or add folders from templates\n\ttoken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webTemplateUser, token)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webTemplateFolder, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = webTemplateFolder\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tform := make(url.Values)\n\tform.Set(\"name\", \"name\")\n\tform.Set(\"mapped_path\", filepath.Join(os.TempDir(), \"%name%\"))\n\tform.Set(\"description\", \"desc folder %name%\")\n\tform.Set(\"template_folders[0][tpl_foldername]\", \"folder1\")\n\tform.Set(\"template_folders[1][tpl_foldername]\", \"folder2\")\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webTemplateFolder, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\n\tadmin.Permissions = append(admin.Permissions, dataprovider.PermAdminManageFolders)\n\t_, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\ttoken, err = getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\t_, err = getCSRFTokenFromInternalPageMock(webTemplateUser, token)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webTemplateFolder, nil)\n\tassert.NoError(t, err)\n\treq.RequestURI = webTemplateFolder\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserS3Mock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tlastPwdChange := user.LastPasswordChange\n\tassert.Greater(t, lastPwdChange, int64(0))\n\tuser.FsConfig.Provider = sdk.S3FilesystemProvider\n\tuser.FsConfig.S3Config.Bucket = \"test\"\n\tuser.FsConfig.S3Config.Region = \"eu-west-1\"\n\tuser.FsConfig.S3Config.AccessKey = \"access-key\"\n\tuser.FsConfig.S3Config.AccessSecret = kms.NewPlainSecret(\"access-secret\")\n\tuser.FsConfig.S3Config.SSECustomerKey = kms.NewPlainSecret(\"enc-key\")\n\tuser.FsConfig.S3Config.RoleARN = \"arn:aws:iam::123456789012:user/Development/product_1234/*\"\n\tuser.FsConfig.S3Config.Endpoint = \"http://127.0.0.1:9000/path?a=b\"\n\tuser.FsConfig.S3Config.StorageClass = \"Standard\"\n\tuser.FsConfig.S3Config.KeyPrefix = \"somedir/subdir/\"\n\tuser.FsConfig.S3Config.UploadPartSize = 5\n\tuser.FsConfig.S3Config.UploadConcurrency = 4\n\tuser.FsConfig.S3Config.DownloadPartMaxTime = 60\n\tuser.FsConfig.S3Config.UploadPartMaxTime = 120\n\tuser.FsConfig.S3Config.DownloadPartSize = 6\n\tuser.FsConfig.S3Config.DownloadConcurrency = 3\n\tuser.FsConfig.S3Config.ForcePathStyle = true\n\tuser.FsConfig.S3Config.SkipTLSVerify = true\n\tuser.FsConfig.S3Config.ACL = \"public-read\"\n\tuser.Description = \"s3 tèst user\"\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"1\")\n\tform.Set(\"s3_bucket\", user.FsConfig.S3Config.Bucket)\n\tform.Set(\"s3_region\", user.FsConfig.S3Config.Region)\n\tform.Set(\"s3_access_key\", user.FsConfig.S3Config.AccessKey)\n\tform.Set(\"s3_access_secret\", user.FsConfig.S3Config.AccessSecret.GetPayload())\n\tform.Set(\"s3_sse_customer_key\", user.FsConfig.S3Config.SSECustomerKey.GetPayload())\n\tform.Set(\"s3_role_arn\", user.FsConfig.S3Config.RoleARN)\n\tform.Set(\"s3_storage_class\", user.FsConfig.S3Config.StorageClass)\n\tform.Set(\"s3_acl\", user.FsConfig.S3Config.ACL)\n\tform.Set(\"s3_endpoint\", user.FsConfig.S3Config.Endpoint)\n\tform.Set(\"s3_key_prefix\", user.FsConfig.S3Config.KeyPrefix)\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[0][pattern_policy]\", \"0\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"denied\")\n\tform.Set(\"directory_patterns[1][pattern_policy]\", \"1\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"ftp_security\", \"1\")\n\tform.Set(\"s3_force_path_style\", \"checked\")\n\tform.Set(\"s3_skip_tls_verify\", \"checked\")\n\tform.Set(\"description\", user.Description)\n\tform.Add(\"hooks\", \"pre_login_disabled\")\n\tform.Add(\"allow_api_key_auth\", \"1\")\n\t// test invalid s3_upload_part_size\n\tform.Set(\"s3_upload_part_size\", \"a\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid s3_upload_concurrency\n\tform.Set(\"s3_upload_part_size\", strconv.FormatInt(user.FsConfig.S3Config.UploadPartSize, 10))\n\tform.Set(\"s3_upload_concurrency\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid s3_download_part_size\n\tform.Set(\"s3_upload_concurrency\", strconv.Itoa(user.FsConfig.S3Config.UploadConcurrency))\n\tform.Set(\"s3_download_part_size\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid s3_download_concurrency\n\tform.Set(\"s3_download_part_size\", strconv.FormatInt(user.FsConfig.S3Config.DownloadPartSize, 10))\n\tform.Set(\"s3_download_concurrency\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid s3_download_part_max_time\n\tform.Set(\"s3_download_concurrency\", strconv.Itoa(user.FsConfig.S3Config.DownloadConcurrency))\n\tform.Set(\"s3_download_part_max_time\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid s3_upload_part_max_time\n\tform.Set(\"s3_download_part_max_time\", strconv.Itoa(user.FsConfig.S3Config.DownloadPartMaxTime))\n\tform.Set(\"s3_upload_part_max_time\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// now add the user\n\tform.Set(\"s3_upload_part_max_time\", strconv.Itoa(user.FsConfig.S3Config.UploadPartMaxTime))\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.Bucket, user.FsConfig.S3Config.Bucket)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.Region, user.FsConfig.S3Config.Region)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.AccessKey, user.FsConfig.S3Config.AccessKey)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.RoleARN, user.FsConfig.S3Config.RoleARN)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.StorageClass, user.FsConfig.S3Config.StorageClass)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.ACL, user.FsConfig.S3Config.ACL)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.Endpoint, user.FsConfig.S3Config.Endpoint)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.KeyPrefix, user.FsConfig.S3Config.KeyPrefix)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.UploadPartSize, user.FsConfig.S3Config.UploadPartSize)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.UploadConcurrency, user.FsConfig.S3Config.UploadConcurrency)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.DownloadPartMaxTime, user.FsConfig.S3Config.DownloadPartMaxTime)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.UploadPartMaxTime, user.FsConfig.S3Config.UploadPartMaxTime)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.DownloadPartSize, user.FsConfig.S3Config.DownloadPartSize)\n\tassert.Equal(t, updateUser.FsConfig.S3Config.DownloadConcurrency, user.FsConfig.S3Config.DownloadConcurrency)\n\tassert.Equal(t, lastPwdChange, updateUser.LastPasswordChange)\n\tassert.True(t, updateUser.FsConfig.S3Config.ForcePathStyle)\n\tassert.True(t, updateUser.FsConfig.S3Config.SkipTLSVerify)\n\tif assert.Equal(t, 2, len(updateUser.Filters.FilePatterns)) {\n\t\tfor _, filter := range updateUser.Filters.FilePatterns {\n\t\t\tswitch filter.Path {\n\t\t\tcase \"/dir1\":\n\t\t\t\tassert.Equal(t, sdk.DenyPolicyDefault, filter.DenyPolicy)\n\t\t\tcase \"/dir2\":\n\t\t\t\tassert.Equal(t, sdk.DenyPolicyHide, filter.DenyPolicy)\n\t\t\t}\n\t\t}\n\t}\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.S3Config.AccessSecret.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.S3Config.AccessSecret.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.S3Config.AccessSecret.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.S3Config.AccessSecret.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.S3Config.SSECustomerKey.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.S3Config.SSECustomerKey.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.S3Config.SSECustomerKey.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.S3Config.SSECustomerKey.GetAdditionalData())\n\tassert.Equal(t, user.Description, updateUser.Description)\n\tassert.True(t, updateUser.Filters.Hooks.PreLoginDisabled)\n\tassert.False(t, updateUser.Filters.Hooks.ExternalAuthDisabled)\n\tassert.False(t, updateUser.Filters.Hooks.CheckPasswordDisabled)\n\tassert.False(t, updateUser.Filters.DisableFsChecks)\n\tassert.True(t, updateUser.Filters.AllowAPIKeyAuth)\n\tassert.Equal(t, 1, updateUser.Filters.FTPSecurity)\n\t// now check that a redacted password is not saved\n\tform.Set(\"s3_access_secret\", redactedSecret)\n\tform.Set(\"s3_sse_customer_key\", redactedSecret)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tvar lastUpdatedUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.S3Config.AccessSecret.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.S3Config.AccessSecret.GetPayload(), lastUpdatedUser.FsConfig.S3Config.AccessSecret.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.S3Config.AccessSecret.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.S3Config.AccessSecret.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.S3Config.SSECustomerKey.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.S3Config.SSECustomerKey.GetPayload(), lastUpdatedUser.FsConfig.S3Config.SSECustomerKey.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.S3Config.SSECustomerKey.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.S3Config.SSECustomerKey.GetAdditionalData())\n\tassert.Equal(t, lastPwdChange, lastUpdatedUser.LastPasswordChange)\n\t// now clear credentials\n\tform.Set(\"s3_access_key\", \"\")\n\tform.Set(\"s3_access_secret\", \"\")\n\tform.Set(\"s3_sse_customer_key\", \"\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar userGet dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &userGet)\n\tassert.NoError(t, err)\n\tassert.Nil(t, userGet.FsConfig.S3Config.AccessSecret)\n\tassert.Nil(t, userGet.FsConfig.S3Config.SSECustomerKey)\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebUserGCSMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, err := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tcredentialsFilePath := filepath.Join(os.TempDir(), \"gcs.json\")\n\terr = createTestFile(credentialsFilePath, 0)\n\tassert.NoError(t, err)\n\tuser.FsConfig.Provider = sdk.GCSFilesystemProvider\n\tuser.FsConfig.GCSConfig.Bucket = \"test\"\n\tuser.FsConfig.GCSConfig.KeyPrefix = \"somedir/subdir/\"\n\tuser.FsConfig.GCSConfig.StorageClass = \"standard\"\n\tuser.FsConfig.GCSConfig.ACL = \"publicReadWrite\"\n\tuser.FsConfig.GCSConfig.UploadPartSize = 16\n\tuser.FsConfig.GCSConfig.UploadPartMaxTime = 32\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"2\")\n\tform.Set(\"gcs_bucket\", user.FsConfig.GCSConfig.Bucket)\n\tform.Set(\"gcs_storage_class\", user.FsConfig.GCSConfig.StorageClass)\n\tform.Set(\"gcs_acl\", user.FsConfig.GCSConfig.ACL)\n\tform.Set(\"gcs_key_prefix\", user.FsConfig.GCSConfig.KeyPrefix)\n\tform.Set(\"gcs_upload_part_size\", strconv.FormatInt(user.FsConfig.GCSConfig.UploadPartSize, 10))\n\tform.Set(\"gcs_upload_part_max_time\", strconv.FormatInt(int64(user.FsConfig.GCSConfig.UploadPartMaxTime), 10))\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"ftp_security\", \"1\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tb, contentType, _ = getMultipartFormData(form, \"gcs_credential_file\", credentialsFilePath)\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = createTestFile(credentialsFilePath, 4096)\n\tassert.NoError(t, err)\n\tb, contentType, _ = getMultipartFormData(form, \"gcs_credential_file\", credentialsFilePath)\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, user.FsConfig.Provider, updateUser.FsConfig.Provider)\n\tassert.Equal(t, user.FsConfig.GCSConfig.Bucket, updateUser.FsConfig.GCSConfig.Bucket)\n\tassert.Equal(t, user.FsConfig.GCSConfig.StorageClass, updateUser.FsConfig.GCSConfig.StorageClass)\n\tassert.Equal(t, user.FsConfig.GCSConfig.ACL, updateUser.FsConfig.GCSConfig.ACL)\n\tassert.Equal(t, user.FsConfig.GCSConfig.KeyPrefix, updateUser.FsConfig.GCSConfig.KeyPrefix)\n\tassert.Equal(t, user.FsConfig.GCSConfig.UploadPartSize, updateUser.FsConfig.GCSConfig.UploadPartSize)\n\tassert.Equal(t, user.FsConfig.GCSConfig.UploadPartMaxTime, updateUser.FsConfig.GCSConfig.UploadPartMaxTime)\n\tif assert.Len(t, updateUser.Filters.FilePatterns, 1) {\n\t\tassert.Equal(t, \"/dir1\", updateUser.Filters.FilePatterns[0].Path)\n\t\tassert.Len(t, updateUser.Filters.FilePatterns[0].AllowedPatterns, 2)\n\t\tassert.Contains(t, updateUser.Filters.FilePatterns[0].AllowedPatterns, \"*.png\")\n\t\tassert.Contains(t, updateUser.Filters.FilePatterns[0].AllowedPatterns, \"*.jpg\")\n\t}\n\tassert.Equal(t, 1, updateUser.Filters.FTPSecurity)\n\tform.Set(\"gcs_auto_credentials\", \"on\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tupdateUser = dataprovider.User{}\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, 1, updateUser.FsConfig.GCSConfig.AutomaticCredentials)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = os.Remove(credentialsFilePath)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebUserHTTPFsMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, err := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser.FsConfig.Provider = sdk.HTTPFilesystemProvider\n\tuser.FsConfig.HTTPConfig = vfs.HTTPFsConfig{\n\t\tBaseHTTPFsConfig: sdk.BaseHTTPFsConfig{\n\t\t\tEndpoint: \"https://127.0.0.1:9999/api/v1\",\n\t\t\tUsername: defaultUsername,\n\t\t\tSkipTLSVerify: true,\n\t\t},\n\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\tAPIKey: kms.NewPlainSecret(defaultTokenAuthPass),\n\t}\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"6\")\n\tform.Set(\"http_endpoint\", user.FsConfig.HTTPConfig.Endpoint)\n\tform.Set(\"http_username\", user.FsConfig.HTTPConfig.Username)\n\tform.Set(\"http_password\", user.FsConfig.HTTPConfig.Password.GetPayload())\n\tform.Set(\"http_api_key\", user.FsConfig.HTTPConfig.APIKey.GetPayload())\n\tform.Set(\"http_skip_tls_verify\", \"checked\")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"denied\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"http_equality_check_mode\", \"true\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the updated user\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, 2, len(updateUser.Filters.FilePatterns))\n\tassert.Equal(t, user.FsConfig.HTTPConfig.Endpoint, updateUser.FsConfig.HTTPConfig.Endpoint)\n\tassert.Equal(t, user.FsConfig.HTTPConfig.Username, updateUser.FsConfig.HTTPConfig.Username)\n\tassert.Equal(t, user.FsConfig.HTTPConfig.SkipTLSVerify, updateUser.FsConfig.HTTPConfig.SkipTLSVerify)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.HTTPConfig.Password.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.HTTPConfig.Password.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.HTTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.HTTPConfig.APIKey.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.HTTPConfig.APIKey.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.HTTPConfig.APIKey.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.HTTPConfig.APIKey.GetAdditionalData())\n\tassert.Equal(t, 1, updateUser.FsConfig.HTTPConfig.EqualityCheckMode)\n\t// now check that a redacted password is not saved\n\tform.Set(\"http_equality_check_mode\", \"\")\n\tform.Set(\"http_password\", \" \"+redactedSecret+\" \")\n\tform.Set(\"http_api_key\", redactedSecret)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar lastUpdatedUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.HTTPConfig.Password.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.HTTPConfig.Password.GetPayload(), lastUpdatedUser.FsConfig.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.HTTPConfig.Password.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.HTTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.HTTPConfig.APIKey.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.HTTPConfig.APIKey.GetPayload(), lastUpdatedUser.FsConfig.HTTPConfig.APIKey.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.HTTPConfig.APIKey.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.HTTPConfig.APIKey.GetAdditionalData())\n\tassert.Equal(t, 0, lastUpdatedUser.FsConfig.HTTPConfig.EqualityCheckMode)\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebUserAzureBlobMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser.FsConfig.Provider = sdk.AzureBlobFilesystemProvider\n\tuser.FsConfig.AzBlobConfig.Container = \"container\"\n\tuser.FsConfig.AzBlobConfig.AccountName = \"aname\"\n\tuser.FsConfig.AzBlobConfig.AccountKey = kms.NewPlainSecret(\"access-skey\")\n\tuser.FsConfig.AzBlobConfig.Endpoint = \"http://127.0.0.1:9000/path?b=c\"\n\tuser.FsConfig.AzBlobConfig.KeyPrefix = \"somedir/subdir/\"\n\tuser.FsConfig.AzBlobConfig.UploadPartSize = 5\n\tuser.FsConfig.AzBlobConfig.UploadConcurrency = 4\n\tuser.FsConfig.AzBlobConfig.DownloadPartSize = 3\n\tuser.FsConfig.AzBlobConfig.DownloadConcurrency = 6\n\tuser.FsConfig.AzBlobConfig.UseEmulator = true\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"3\")\n\tform.Set(\"az_container\", user.FsConfig.AzBlobConfig.Container)\n\tform.Set(\"az_account_name\", user.FsConfig.AzBlobConfig.AccountName)\n\tform.Set(\"az_account_key\", user.FsConfig.AzBlobConfig.AccountKey.GetPayload())\n\tform.Set(\"az_endpoint\", user.FsConfig.AzBlobConfig.Endpoint)\n\tform.Set(\"az_key_prefix\", user.FsConfig.AzBlobConfig.KeyPrefix)\n\tform.Set(\"az_use_emulator\", \"checked\")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"denied\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\t// test invalid az_upload_part_size\n\tform.Set(\"az_upload_part_size\", \"a\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid az_upload_concurrency\n\tform.Set(\"az_upload_part_size\", strconv.FormatInt(user.FsConfig.AzBlobConfig.UploadPartSize, 10))\n\tform.Set(\"az_upload_concurrency\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid az_download_part_size\n\tform.Set(\"az_upload_concurrency\", strconv.Itoa(user.FsConfig.AzBlobConfig.UploadConcurrency))\n\tform.Set(\"az_download_part_size\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// test invalid az_download_concurrency\n\tform.Set(\"az_download_part_size\", strconv.FormatInt(user.FsConfig.AzBlobConfig.DownloadPartSize, 10))\n\tform.Set(\"az_download_concurrency\", \"a\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// now add the user\n\tform.Set(\"az_download_concurrency\", strconv.Itoa(user.FsConfig.AzBlobConfig.DownloadConcurrency))\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.Container, user.FsConfig.AzBlobConfig.Container)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.AccountName, user.FsConfig.AzBlobConfig.AccountName)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.Endpoint, user.FsConfig.AzBlobConfig.Endpoint)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.KeyPrefix, user.FsConfig.AzBlobConfig.KeyPrefix)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.UploadPartSize, user.FsConfig.AzBlobConfig.UploadPartSize)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.UploadConcurrency, user.FsConfig.AzBlobConfig.UploadConcurrency)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.DownloadPartSize, user.FsConfig.AzBlobConfig.DownloadPartSize)\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.DownloadConcurrency, user.FsConfig.AzBlobConfig.DownloadConcurrency)\n\tassert.Equal(t, 2, len(updateUser.Filters.FilePatterns))\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.AzBlobConfig.AccountKey.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.AzBlobConfig.AccountKey.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.AzBlobConfig.AccountKey.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.AzBlobConfig.AccountKey.GetAdditionalData())\n\t// now check that a redacted password is not saved\n\tform.Set(\"az_account_key\", redactedSecret+\" \")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar lastUpdatedUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.AzBlobConfig.AccountKey.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.AccountKey.GetPayload(), lastUpdatedUser.FsConfig.AzBlobConfig.AccountKey.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.AzBlobConfig.AccountKey.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.AzBlobConfig.AccountKey.GetAdditionalData())\n\t// test SAS url\n\tuser.FsConfig.AzBlobConfig.SASURL = kms.NewPlainSecret(\"sasurl\")\n\tform.Set(\"az_account_name\", \"\")\n\tform.Set(\"az_account_key\", \"\")\n\tform.Set(\"az_container\", \"\")\n\tform.Set(\"az_sas_url\", user.FsConfig.AzBlobConfig.SASURL.GetPayload())\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tupdateUser = dataprovider.User{}\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.AzBlobConfig.SASURL.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.AzBlobConfig.SASURL.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.AzBlobConfig.SASURL.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.AzBlobConfig.SASURL.GetAdditionalData())\n\t// now check that a redacted sas url is not saved\n\tform.Set(\"az_sas_url\", redactedSecret)\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tlastUpdatedUser = dataprovider.User{}\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.AzBlobConfig.SASURL.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.AzBlobConfig.SASURL.GetPayload(), lastUpdatedUser.FsConfig.AzBlobConfig.SASURL.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.AzBlobConfig.SASURL.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.AzBlobConfig.SASURL.GetAdditionalData())\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebUserCryptMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser.FsConfig.Provider = sdk.CryptedFilesystemProvider\n\tuser.FsConfig.CryptConfig.Passphrase = kms.NewPlainSecret(\"crypted passphrase\")\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"4\")\n\tform.Set(\"crypt_passphrase\", \"\")\n\tform.Set(\"cryptfs_read_buffer_size\", \"1\")\n\tform.Set(\"cryptfs_write_buffer_size\", \"2\")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"denied\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\t// passphrase cannot be empty\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"crypt_passphrase\", user.FsConfig.CryptConfig.Passphrase.GetPayload())\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, 2, len(updateUser.Filters.FilePatterns))\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.CryptConfig.Passphrase.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.CryptConfig.Passphrase.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.CryptConfig.Passphrase.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.CryptConfig.Passphrase.GetAdditionalData())\n\tassert.Equal(t, 1, updateUser.FsConfig.CryptConfig.ReadBufferSize)\n\tassert.Equal(t, 2, updateUser.FsConfig.CryptConfig.WriteBufferSize)\n\t// now check that a redacted password is not saved\n\tform.Set(\"crypt_passphrase\", redactedSecret+\" \")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar lastUpdatedUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.CryptConfig.Passphrase.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.CryptConfig.Passphrase.GetPayload(), lastUpdatedUser.FsConfig.CryptConfig.Passphrase.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.CryptConfig.Passphrase.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.CryptConfig.Passphrase.GetAdditionalData())\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebUserSFTPFsMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tuserAsJSON := getUserAsJSON(t, user)\n\treq, _ := http.NewRequest(http.MethodPost, userPath, bytes.NewBuffer(userAsJSON))\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusCreated, rr)\n\terr = render.DecodeJSON(rr.Body, &user)\n\tassert.NoError(t, err)\n\tuser.FsConfig.Provider = sdk.SFTPFilesystemProvider\n\tuser.FsConfig.SFTPConfig.Endpoint = \"127.0.0.1:22\"\n\tuser.FsConfig.SFTPConfig.Username = \"sftpuser\"\n\tuser.FsConfig.SFTPConfig.Password = kms.NewPlainSecret(\"pwd\")\n\tuser.FsConfig.SFTPConfig.PrivateKey = kms.NewPlainSecret(testPrivateKeyPwd)\n\tuser.FsConfig.SFTPConfig.KeyPassphrase = kms.NewPlainSecret(privateKeyPwd)\n\tuser.FsConfig.SFTPConfig.Fingerprints = []string{sftpPkeyFingerprint}\n\tuser.FsConfig.SFTPConfig.Prefix = \"/home/sftpuser\"\n\tuser.FsConfig.SFTPConfig.DisableCouncurrentReads = true\n\tuser.FsConfig.SFTPConfig.BufferSize = 5\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"password\", redactedSecret)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", strconv.FormatInt(int64(user.GID), 10))\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(user.MaxSessions), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(user.QuotaSize, 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(user.QuotaFiles), 10))\n\tform.Set(\"upload_bandwidth\", \"0\")\n\tform.Set(\"download_bandwidth\", \"0\")\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"expiration_date\", \"2020-01-01 00:00:00\")\n\tform.Set(\"allowed_ip\", \"\")\n\tform.Set(\"denied_ip\", \"\")\n\tform.Set(\"fs_provider\", \"5\")\n\tform.Set(\"crypt_passphrase\", \"\")\n\tform.Set(\"directory_patterns[0][pattern_path]\", \"/dir1\")\n\tform.Set(\"directory_patterns[0][patterns]\", \"*.jpg,*.png\")\n\tform.Set(\"directory_patterns[0][pattern_type]\", \"allowed\")\n\tform.Set(\"directory_patterns[1][pattern_path]\", \"/dir2\")\n\tform.Set(\"directory_patterns[1][patterns]\", \"*.zip\")\n\tform.Set(\"directory_patterns[1][pattern_type]\", \"denied\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\t// empty sftpconfig\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tform.Set(\"sftp_endpoint\", user.FsConfig.SFTPConfig.Endpoint)\n\tform.Set(\"sftp_username\", user.FsConfig.SFTPConfig.Username)\n\tform.Set(\"sftp_password\", user.FsConfig.SFTPConfig.Password.GetPayload())\n\tform.Set(\"sftp_private_key\", user.FsConfig.SFTPConfig.PrivateKey.GetPayload())\n\tform.Set(\"sftp_key_passphrase\", user.FsConfig.SFTPConfig.KeyPassphrase.GetPayload())\n\tform.Set(\"sftp_fingerprints\", user.FsConfig.SFTPConfig.Fingerprints[0])\n\tform.Set(\"sftp_prefix\", user.FsConfig.SFTPConfig.Prefix)\n\tform.Set(\"sftp_disable_concurrent_reads\", \"true\")\n\tform.Set(\"sftp_equality_check_mode\", \"true\")\n\tform.Set(\"sftp_buffer_size\", strconv.FormatInt(user.FsConfig.SFTPConfig.BufferSize, 10))\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar updateUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &updateUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, int64(1577836800000), updateUser.ExpirationDate)\n\tassert.Equal(t, 2, len(updateUser.Filters.FilePatterns))\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.SFTPConfig.Password.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.SFTPConfig.Password.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.Password.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.SFTPConfig.PrivateKey.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.SFTPConfig.PrivateKey.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.PrivateKey.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.PrivateKey.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateUser.FsConfig.SFTPConfig.KeyPassphrase.GetStatus())\n\tassert.NotEmpty(t, updateUser.FsConfig.SFTPConfig.KeyPassphrase.GetPayload())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.KeyPassphrase.GetKey())\n\tassert.Empty(t, updateUser.FsConfig.SFTPConfig.KeyPassphrase.GetAdditionalData())\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.Prefix, user.FsConfig.SFTPConfig.Prefix)\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.Username, user.FsConfig.SFTPConfig.Username)\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.Endpoint, user.FsConfig.SFTPConfig.Endpoint)\n\tassert.True(t, updateUser.FsConfig.SFTPConfig.DisableCouncurrentReads)\n\tassert.Len(t, updateUser.FsConfig.SFTPConfig.Fingerprints, 1)\n\tassert.Equal(t, user.FsConfig.SFTPConfig.BufferSize, updateUser.FsConfig.SFTPConfig.BufferSize)\n\tassert.Contains(t, updateUser.FsConfig.SFTPConfig.Fingerprints, sftpPkeyFingerprint)\n\tassert.Equal(t, 1, updateUser.FsConfig.SFTPConfig.EqualityCheckMode)\n\t// now check that a redacted credentials are not saved\n\tform.Set(\"sftp_password\", redactedSecret+\" \")\n\tform.Set(\"sftp_private_key\", redactedSecret)\n\tform.Set(\"sftp_key_passphrase\", redactedSecret)\n\tform.Set(\"sftp_equality_check_mode\", \"\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar lastUpdatedUser dataprovider.User\n\terr = render.DecodeJSON(rr.Body, &lastUpdatedUser)\n\tassert.NoError(t, err)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.SFTPConfig.Password.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.Password.GetPayload(), lastUpdatedUser.FsConfig.SFTPConfig.Password.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.Password.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.SFTPConfig.PrivateKey.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.PrivateKey.GetPayload(), lastUpdatedUser.FsConfig.SFTPConfig.PrivateKey.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.PrivateKey.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.PrivateKey.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, lastUpdatedUser.FsConfig.SFTPConfig.KeyPassphrase.GetStatus())\n\tassert.Equal(t, updateUser.FsConfig.SFTPConfig.KeyPassphrase.GetPayload(), lastUpdatedUser.FsConfig.SFTPConfig.KeyPassphrase.GetPayload())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.KeyPassphrase.GetKey())\n\tassert.Empty(t, lastUpdatedUser.FsConfig.SFTPConfig.KeyPassphrase.GetAdditionalData())\n\tassert.Equal(t, 0, lastUpdatedUser.FsConfig.SFTPConfig.EqualityCheckMode)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(userPath, user.Username), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebUserRole(t *testing.T) {\n\trole, resp, err := httpdtest.AddRole(getTestRole(), http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\ta := getTestAdmin()\n\ta.Username = altAdminUsername\n\ta.Password = altAdminPassword\n\ta.Role = role.Name\n\ta.Permissions = []string{dataprovider.PermAdminAddUsers, dataprovider.PermAdminChangeUsers,\n\t\tdataprovider.PermAdminDeleteUsers, dataprovider.PermAdminViewUsers}\n\tadmin, _, err := httpdtest.AddAdmin(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\twebToken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\tuser := getTestUser()\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tform.Set(\"home_dir\", user.HomeDir)\n\tform.Set(\"password\", user.Password)\n\tform.Set(\"status\", strconv.Itoa(user.Status))\n\tform.Set(\"permissions\", \"*\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"uid\", \"0\")\n\tform.Set(\"gid\", \"0\")\n\tform.Set(\"max_sessions\", \"0\")\n\tform.Set(\"quota_size\", \"0\")\n\tform.Set(\"quota_files\", \"0\")\n\tform.Set(\"upload_bandwidth\", strconv.FormatInt(user.UploadBandwidth, 10))\n\tform.Set(\"download_bandwidth\", strconv.FormatInt(user.DownloadBandwidth, 10))\n\tform.Set(\"upload_data_transfer\", strconv.FormatInt(user.UploadDataTransfer, 10))\n\tform.Set(\"download_data_transfer\", strconv.FormatInt(user.DownloadDataTransfer, 10))\n\tform.Set(\"total_data_transfer\", strconv.FormatInt(user.TotalDataTransfer, 10))\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"10\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tb, contentType, _ := getMultipartFormData(form, \"\", \"\")\n\treq, err := http.NewRequest(http.MethodPost, webUserPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, role.Name, user.Role)\n\n\tform.Set(\"role\", \"\")\n\tb, contentType, _ = getMultipartFormData(form, \"\", \"\")\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webUserPath, user.Username), &b)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tuser, _, err = httpdtest.GetUserByUsername(user.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, role.Name, user.Role)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveRole(role, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebEventAction(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminEventActionPath, webToken)\n\tassert.NoError(t, err)\n\taction := dataprovider.BaseEventAction{\n\t\tName: \"web_action_http\",\n\t\tDescription: \"http web action\",\n\t\tType: dataprovider.ActionTypeHTTP,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tHTTPConfig: dataprovider.EventActionHTTPConfig{\n\t\t\t\tEndpoint: \"https://localhost:4567/action\",\n\t\t\t\tUsername: defaultUsername,\n\t\t\t\tHeaders: []dataprovider.KeyValue{\n\t\t\t\t\t{\n\t\t\t\t\t\tKey: \"Content-Type\",\n\t\t\t\t\t\tValue: \"application/json\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\t\t\tTimeout: 10,\n\t\t\t\tSkipTLSVerify: true,\n\t\t\t\tMethod: http.MethodPost,\n\t\t\t\tQueryParameters: []dataprovider.KeyValue{\n\t\t\t\t\t{\n\t\t\t\t\t\tKey: \"param1\",\n\t\t\t\t\t\tValue: \"value1\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tBody: `{\"event\":\"{{.Event}}\",\"name\":\"{{.Name}}\"}`,\n\t\t\t},\n\t\t},\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", action.Name)\n\tform.Set(\"description\", action.Description)\n\tform.Set(\"fs_action_type\", \"0\")\n\tform.Set(\"type\", \"a\")\n\treq, err := http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"http_timeout\", \"b\")\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"cmd_timeout\", \"20\")\n\tform.Set(\"pwd_expiration_threshold\", \"10\")\n\tform.Set(\"http_timeout\", fmt.Sprintf(\"%d\", action.Options.HTTPConfig.Timeout))\n\tform.Set(\"http_headers[0][http_header_key]\", action.Options.HTTPConfig.Headers[0].Key)\n\tform.Set(\"http_headers[0][http_header_value]\", action.Options.HTTPConfig.Headers[0].Value)\n\tform.Set(\"http_headers[1][http_header_key]\", action.Options.HTTPConfig.Headers[0].Key) // ignored\n\tform.Set(\"query_parameters[0][http_query_key]\", action.Options.HTTPConfig.QueryParameters[0].Key)\n\tform.Set(\"query_parameters[0][http_query_value]\", action.Options.HTTPConfig.QueryParameters[0].Value)\n\tform.Set(\"http_body\", action.Options.HTTPConfig.Body)\n\tform.Set(\"http_skip_tls_verify\", \"1\")\n\tform.Set(\"http_username\", action.Options.HTTPConfig.Username)\n\tform.Set(\"http_password\", action.Options.HTTPConfig.Password.GetPayload())\n\tform.Set(\"http_method\", action.Options.HTTPConfig.Method)\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorURLRequired)\n\tform.Set(\"http_endpoint\", action.Options.HTTPConfig.Endpoint)\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// a new add will fail\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventActionPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// list actions\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventActionsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventActionsPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render add page\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventActionPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render action page\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminEventActionPath, action.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// missing action\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminEventActionPath, action.Name+\"1\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// check the action\n\tactionGet, _, err := httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, action.Description, actionGet.Description)\n\tassert.Equal(t, action.Options.HTTPConfig.Body, actionGet.Options.HTTPConfig.Body)\n\tassert.Equal(t, action.Options.HTTPConfig.Endpoint, actionGet.Options.HTTPConfig.Endpoint)\n\tassert.Equal(t, action.Options.HTTPConfig.Headers, actionGet.Options.HTTPConfig.Headers)\n\tassert.Equal(t, action.Options.HTTPConfig.Method, actionGet.Options.HTTPConfig.Method)\n\tassert.Equal(t, action.Options.HTTPConfig.SkipTLSVerify, actionGet.Options.HTTPConfig.SkipTLSVerify)\n\tassert.Equal(t, action.Options.HTTPConfig.Timeout, actionGet.Options.HTTPConfig.Timeout)\n\tassert.Equal(t, action.Options.HTTPConfig.Username, actionGet.Options.HTTPConfig.Username)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, actionGet.Options.HTTPConfig.Password.GetStatus())\n\tassert.NotEmpty(t, actionGet.Options.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, actionGet.Options.HTTPConfig.Password.GetKey())\n\tassert.Empty(t, actionGet.Options.HTTPConfig.Password.GetAdditionalData())\n\t// update and check that the password is preserved and the multipart fields\n\tform.Set(\"http_password\", redactedSecret)\n\tform.Set(\"http_body\", \"\")\n\tform.Set(\"http_timeout\", \"0\")\n\tform.Del(\"http_headers[0][http_header_key]\")\n\tform.Del(\"http_headers[0][http_header_val]\")\n\tform.Set(\"multipart_body[0][http_part_name]\", \"part1\")\n\tform.Set(\"multipart_body[0][http_part_file]\", \"{{.VirtualPath}}\")\n\tform.Set(\"multipart_body[0][http_part_body]\", \"\")\n\tform.Set(\"multipart_body[0][http_part_headers]\", \"X-MyHeader: a:b,c\")\n\tform.Set(\"multipart_body[12][http_part_name]\", \"part2\")\n\tform.Set(\"multipart_body[12][http_part_headers]\", \"Content-Type:application/json \\r\\n\")\n\tform.Set(\"multipart_body[12][http_part_body]\", \"{{.ObjectData}}\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tdbAction, err := dataprovider.EventActionExists(action.Name)\n\tassert.NoError(t, err)\n\terr = dbAction.Options.HTTPConfig.Password.Decrypt()\n\tassert.NoError(t, err)\n\tassert.Equal(t, defaultPassword, dbAction.Options.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, dbAction.Options.HTTPConfig.Body)\n\tassert.Equal(t, 0, dbAction.Options.HTTPConfig.Timeout)\n\tif assert.Len(t, dbAction.Options.HTTPConfig.Parts, 2) {\n\t\tassert.Equal(t, \"part1\", dbAction.Options.HTTPConfig.Parts[0].Name)\n\t\tassert.Equal(t, \"/{{.VirtualPath}}\", dbAction.Options.HTTPConfig.Parts[0].Filepath)\n\t\tassert.Empty(t, dbAction.Options.HTTPConfig.Parts[0].Body)\n\t\tassert.Equal(t, \"X-MyHeader\", dbAction.Options.HTTPConfig.Parts[0].Headers[0].Key)\n\t\tassert.Equal(t, \"a:b,c\", dbAction.Options.HTTPConfig.Parts[0].Headers[0].Value)\n\t\tassert.Equal(t, \"part2\", dbAction.Options.HTTPConfig.Parts[1].Name)\n\t\tassert.Equal(t, \"{{.ObjectData}}\", dbAction.Options.HTTPConfig.Parts[1].Body)\n\t\tassert.Empty(t, dbAction.Options.HTTPConfig.Parts[1].Filepath)\n\t\tassert.Equal(t, \"Content-Type\", dbAction.Options.HTTPConfig.Parts[1].Headers[0].Key)\n\t\tassert.Equal(t, \"application/json\", dbAction.Options.HTTPConfig.Parts[1].Headers[0].Value)\n\t}\n\t// change action type\n\taction.Type = dataprovider.ActionTypeCommand\n\taction.Options.CmdConfig = dataprovider.EventActionCommandConfig{\n\t\tCmd: filepath.Join(os.TempDir(), \"cmd\"),\n\t\tArgs: []string{\"arg1\", \"arg2\"},\n\t\tTimeout: 20,\n\t\tEnvVars: []dataprovider.KeyValue{\n\t\t\t{\n\t\t\t\tKey: \"key\",\n\t\t\t\tValue: \"val\",\n\t\t\t},\n\t\t},\n\t}\n\tdataprovider.EnabledActionCommands = []string{action.Options.CmdConfig.Cmd}\n\tdefer func() {\n\t\tdataprovider.EnabledActionCommands = nil\n\t}()\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorCommandRequired)\n\tform.Set(\"cmd_path\", action.Options.CmdConfig.Cmd)\n\tform.Set(\"cmd_timeout\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"cmd_timeout\", fmt.Sprintf(\"%d\", action.Options.CmdConfig.Timeout))\n\tform.Set(\"env_vars[0][cmd_env_key]\", action.Options.CmdConfig.EnvVars[0].Key)\n\tform.Set(\"env_vars[0][cmd_env_value]\", action.Options.CmdConfig.EnvVars[0].Value)\n\tform.Set(\"cmd_arguments\", \"arg1 ,arg2 \")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// update a missing action\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name+\"1\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// update with no csrf token\n\tform.Del(csrfFormToken)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\tform.Set(csrfFormToken, csrfToken)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, action.Options.CmdConfig.Cmd, actionGet.Options.CmdConfig.Cmd)\n\tassert.Equal(t, action.Options.CmdConfig.Args, actionGet.Options.CmdConfig.Args)\n\tassert.Equal(t, action.Options.CmdConfig.Timeout, actionGet.Options.CmdConfig.Timeout)\n\tassert.Equal(t, action.Options.CmdConfig.EnvVars, actionGet.Options.CmdConfig.EnvVars)\n\tassert.Equal(t, dataprovider.EventActionHTTPConfig{}, actionGet.Options.HTTPConfig)\n\tassert.Equal(t, dataprovider.EventActionPasswordExpiration{}, actionGet.Options.PwdExpirationConfig)\n\t// change action type again\n\taction.Type = dataprovider.ActionTypeEmail\n\taction.Options.EmailConfig = dataprovider.EventActionEmailConfig{\n\t\tRecipients: []string{\"address1@example.com\", \"address2@example.com\"},\n\t\tBcc: []string{\"address3@example.com\"},\n\t\tSubject: \"subject\",\n\t\tContentType: 1,\n\t\tBody: \"body\",\n\t\tAttachments: []string{\"/file1.txt\", \"/file2.txt\"},\n\t}\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"email_recipients\", \"address1@example.com, address2@example.com\")\n\tform.Set(\"email_bcc\", \"address3@example.com\")\n\tform.Set(\"email_subject\", action.Options.EmailConfig.Subject)\n\tform.Set(\"email_content_type\", fmt.Sprintf(\"%d\", action.Options.EmailConfig.ContentType))\n\tform.Set(\"email_body\", action.Options.EmailConfig.Body)\n\tform.Set(\"email_attachments\", \"file1.txt, file2.txt\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, action.Options.EmailConfig.Recipients, actionGet.Options.EmailConfig.Recipients)\n\tassert.Equal(t, action.Options.EmailConfig.Bcc, actionGet.Options.EmailConfig.Bcc)\n\tassert.Equal(t, action.Options.EmailConfig.Subject, actionGet.Options.EmailConfig.Subject)\n\tassert.Equal(t, action.Options.EmailConfig.ContentType, actionGet.Options.EmailConfig.ContentType)\n\tassert.Equal(t, action.Options.EmailConfig.Body, actionGet.Options.EmailConfig.Body)\n\tassert.Equal(t, action.Options.EmailConfig.Attachments, actionGet.Options.EmailConfig.Attachments)\n\tassert.Equal(t, dataprovider.EventActionHTTPConfig{}, actionGet.Options.HTTPConfig)\n\tassert.Empty(t, actionGet.Options.CmdConfig.Cmd)\n\tassert.Equal(t, 0, actionGet.Options.CmdConfig.Timeout)\n\tassert.Len(t, actionGet.Options.CmdConfig.EnvVars, 0)\n\t// change action type to data retention check\n\taction.Type = dataprovider.ActionTypeDataRetentionCheck\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"data_retention[10][folder_retention_path]\", \"p1\")\n\tform.Set(\"data_retention[10][folder_retention_val]\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"data_retention[10][folder_retention_val]\", \"24\")\n\tform.Set(\"data_retention[10][folder_retention_options][]\", \"1\")\n\tform.Set(\"data_retention[11][folder_retention_path]\", \"../p2\")\n\tform.Set(\"data_retention[11][folder_retention_val]\", \"48\")\n\tform.Set(\"data_retention[11][folder_retention_options][]\", \"1\")\n\tform.Set(\"data_retention[13][folder_retention_options][]\", \"1\") // ignored\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tif assert.Len(t, actionGet.Options.RetentionConfig.Folders, 2) {\n\t\tfor _, folder := range actionGet.Options.RetentionConfig.Folders {\n\t\t\tswitch folder.Path {\n\t\t\tcase \"/p1\":\n\t\t\t\tassert.Equal(t, 24, folder.Retention)\n\t\t\t\tassert.True(t, folder.DeleteEmptyDirs)\n\t\t\tcase \"/p2\":\n\t\t\t\tassert.Equal(t, 48, folder.Retention)\n\t\t\t\tassert.True(t, folder.DeleteEmptyDirs)\n\t\t\tdefault:\n\t\t\t\tt.Errorf(\"unexpected folder path %v\", folder.Path)\n\t\t\t}\n\t\t}\n\t}\n\taction.Type = dataprovider.ActionTypeFilesystem\n\taction.Options.FsConfig = dataprovider.EventActionFilesystemConfig{\n\t\tType: dataprovider.FilesystemActionMkdirs,\n\t\tMkDirs: []string{\"a \", \" a/b\"},\n\t}\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"fs_mkdir_paths\", strings.Join(action.Options.FsConfig.MkDirs, \",\"))\n\tform.Set(\"fs_action_type\", \"invalid\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\tform.Set(\"fs_action_type\", fmt.Sprintf(\"%d\", action.Options.FsConfig.Type))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tif assert.Len(t, actionGet.Options.FsConfig.MkDirs, 2) {\n\t\tfor _, dir := range actionGet.Options.FsConfig.MkDirs {\n\t\t\tswitch dir {\n\t\t\tcase \"/a\":\n\t\t\tcase \"/a/b\":\n\t\t\tdefault:\n\t\t\t\tt.Errorf(\"unexpected dir path %v\", dir)\n\t\t\t}\n\t\t}\n\t}\n\n\taction.Options.FsConfig = dataprovider.EventActionFilesystemConfig{\n\t\tType: dataprovider.FilesystemActionExist,\n\t\tExist: []string{\"b \", \" c/d\"},\n\t}\n\tform.Set(\"fs_action_type\", fmt.Sprintf(\"%d\", action.Options.FsConfig.Type))\n\tform.Set(\"fs_exist_paths\", strings.Join(action.Options.FsConfig.Exist, \",\"))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tif assert.Len(t, actionGet.Options.FsConfig.Exist, 2) {\n\t\tfor _, p := range actionGet.Options.FsConfig.Exist {\n\t\t\tswitch p {\n\t\t\tcase \"/b\":\n\t\t\tcase \"/c/d\":\n\t\t\tdefault:\n\t\t\t\tt.Errorf(\"unexpected path %v\", p)\n\t\t\t}\n\t\t}\n\t}\n\n\taction.Options.FsConfig = dataprovider.EventActionFilesystemConfig{\n\t\tType: dataprovider.FilesystemActionRename,\n\t\tRenames: []dataprovider.RenameConfig{\n\t\t\t{\n\t\t\t\tKeyValue: dataprovider.KeyValue{\n\t\t\t\t\tKey: \"/src\",\n\t\t\t\t\tValue: \"/target\",\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\tform.Set(\"fs_action_type\", fmt.Sprintf(\"%d\", action.Options.FsConfig.Type))\n\tform.Set(\"fs_rename[0][fs_rename_source]\", action.Options.FsConfig.Renames[0].Key)\n\tform.Set(\"fs_rename[0][fs_rename_target]\", action.Options.FsConfig.Renames[0].Value)\n\tform.Set(\"fs_rename[0][fs_rename_options][]\", \"1\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tif assert.Len(t, actionGet.Options.FsConfig.Renames, 1) {\n\t\tassert.True(t, actionGet.Options.FsConfig.Renames[0].UpdateModTime)\n\t}\n\n\taction.Options.FsConfig = dataprovider.EventActionFilesystemConfig{\n\t\tType: dataprovider.FilesystemActionCopy,\n\t\tCopy: []dataprovider.KeyValue{\n\t\t\t{\n\t\t\t\tKey: \"/copy_src\",\n\t\t\t\tValue: \"/copy_target\",\n\t\t\t},\n\t\t},\n\t}\n\tform.Set(\"fs_action_type\", fmt.Sprintf(\"%d\", action.Options.FsConfig.Type))\n\tform.Set(\"fs_copy[0][fs_copy_source]\", action.Options.FsConfig.Copy[0].Key)\n\tform.Set(\"fs_copy[0][fs_copy_target]\", action.Options.FsConfig.Copy[0].Value)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the update\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Len(t, actionGet.Options.FsConfig.Copy, 1)\n\n\taction.Type = dataprovider.ActionTypePasswordExpirationCheck\n\taction.Options.PwdExpirationConfig.Threshold = 15\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"pwd_expiration_threshold\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"pwd_expiration_threshold\", strconv.Itoa(action.Options.PwdExpirationConfig.Threshold))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, action.Options.PwdExpirationConfig.Threshold, actionGet.Options.PwdExpirationConfig.Threshold)\n\tassert.Equal(t, 0, actionGet.Options.CmdConfig.Timeout)\n\tassert.Len(t, actionGet.Options.CmdConfig.EnvVars, 0)\n\n\taction.Type = dataprovider.ActionTypeUserInactivityCheck\n\taction.Options.UserInactivityConfig = dataprovider.EventActionUserInactivity{\n\t\tDisableThreshold: 10,\n\t\tDeleteThreshold: 15,\n\t}\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"inactivity_disable_threshold\", strconv.Itoa(action.Options.UserInactivityConfig.DisableThreshold))\n\tform.Set(\"inactivity_delete_threshold\", strconv.Itoa(action.Options.UserInactivityConfig.DeleteThreshold))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, 0, actionGet.Options.PwdExpirationConfig.Threshold)\n\tassert.Equal(t, action.Options.UserInactivityConfig.DisableThreshold, actionGet.Options.UserInactivityConfig.DisableThreshold)\n\tassert.Equal(t, action.Options.UserInactivityConfig.DeleteThreshold, actionGet.Options.UserInactivityConfig.DeleteThreshold)\n\n\taction.Type = dataprovider.ActionTypeIDPAccountCheck\n\tform.Set(\"type\", fmt.Sprintf(\"%d\", action.Type))\n\tform.Set(\"idp_mode\", \"1\")\n\tform.Set(\"idp_user\", `{\"username\":\"user\"}`)\n\tform.Set(\"idp_admin\", `{\"username\":\"admin\"}`)\n\tform.Set(\"pwd_expiration_threshold\", strconv.Itoa(action.Options.PwdExpirationConfig.Threshold))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventActionPath, action.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tactionGet, _, err = httpdtest.GetEventActionByName(action.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, action.Type, actionGet.Type)\n\tassert.Equal(t, 1, actionGet.Options.IDPConfig.Mode)\n\tassert.Contains(t, actionGet.Options.IDPConfig.TemplateUser, `\"user\"`)\n\tassert.Contains(t, actionGet.Options.IDPConfig.TemplateAdmin, `\"admin\"`)\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(webAdminEventActionPath, action.Name), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(webAdminEventActionPath, action.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventActionsPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Equal(t, `[]`, rr.Body.String())\n}\n\nfunc TestWebEventRule(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminEventRulePath, webToken)\n\tassert.NoError(t, err)\n\ta := dataprovider.BaseEventAction{\n\t\tName: \"web_action\",\n\t\tType: dataprovider.ActionTypeFilesystem,\n\t\tOptions: dataprovider.BaseEventActionOptions{\n\t\t\tFsConfig: dataprovider.EventActionFilesystemConfig{\n\t\t\t\tType: dataprovider.FilesystemActionExist,\n\t\t\t\tExist: []string{\"/dir1\"},\n\t\t\t},\n\t\t},\n\t}\n\taction, _, err := httpdtest.AddEventAction(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\trule := dataprovider.EventRule{\n\t\tName: \"test_web_rule\",\n\t\tStatus: 1,\n\t\tDescription: \"rule added using web API\",\n\t\tTrigger: dataprovider.EventTriggerSchedule,\n\t\tConditions: dataprovider.EventConditions{\n\t\t\tSchedules: []dataprovider.Schedule{\n\t\t\t\t{\n\t\t\t\t\tHours: \"0\",\n\t\t\t\t\tDayOfWeek: \"*\",\n\t\t\t\t\tDayOfMonth: \"*\",\n\t\t\t\t\tMonth: \"*\",\n\t\t\t\t},\n\t\t\t},\n\t\t\tOptions: dataprovider.ConditionOptions{\n\t\t\t\tNames: []dataprovider.ConditionPattern{\n\t\t\t\t\t{\n\t\t\t\t\t\tPattern: \"u*\",\n\t\t\t\t\t\tInverseMatch: true,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tGroupNames: []dataprovider.ConditionPattern{\n\t\t\t\t\t{\n\t\t\t\t\t\tPattern: \"g*\",\n\t\t\t\t\t\tInverseMatch: true,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRoleNames: []dataprovider.ConditionPattern{\n\t\t\t\t\t{\n\t\t\t\t\t\tPattern: \"r*\",\n\t\t\t\t\t\tInverseMatch: true,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tActions: []dataprovider.EventAction{\n\t\t\t{\n\t\t\t\tBaseEventAction: dataprovider.BaseEventAction{\n\t\t\t\t\tName: action.Name,\n\t\t\t\t},\n\t\t\t\tOrder: 1,\n\t\t\t},\n\t\t},\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", rule.Name)\n\tform.Set(\"description\", rule.Description)\n\tform.Set(\"status\", \"a\")\n\treq, err := http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"status\", fmt.Sprintf(\"%d\", rule.Status))\n\tform.Set(\"trigger\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"trigger\", fmt.Sprintf(\"%d\", rule.Trigger))\n\tform.Set(\"schedules[0][schedule_hour]\", rule.Conditions.Schedules[0].Hours)\n\tform.Set(\"schedules[0][schedule_day_of_week]\", rule.Conditions.Schedules[0].DayOfWeek)\n\tform.Set(\"schedules[0][schedule_day_of_month]\", rule.Conditions.Schedules[0].DayOfMonth)\n\tform.Set(\"schedules[0][schedule_month]\", rule.Conditions.Schedules[0].Month)\n\tform.Set(\"name_filters[0][name_pattern]\", rule.Conditions.Options.Names[0].Pattern)\n\tform.Set(\"name_filters[0][type_name_pattern]\", \"inverse\")\n\tform.Set(\"group_name_filters[0][group_name_pattern]\", rule.Conditions.Options.GroupNames[0].Pattern)\n\tform.Set(\"group_name_filters[0][type_group_name_pattern]\", \"inverse\")\n\tform.Set(\"role_name_filters[0][role_name_pattern]\", rule.Conditions.Options.RoleNames[0].Pattern)\n\tform.Set(\"role_name_filters[0][type_role_name_pattern]\", \"inverse\")\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidMinSize)\n\tform.Set(\"fs_min_size\", \"0\")\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidMaxSize)\n\tform.Set(\"fs_max_size\", \"0\")\n\tform.Set(\"actions[0][action_name]\", action.Name)\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// a new add will fail\n\treq, err = http.NewRequest(http.MethodPost, webAdminEventRulePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// list rules\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventRulesPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventRulesPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render add page\n\treq, err = http.NewRequest(http.MethodGet, webAdminEventRulePath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render rule page\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminEventRulePath, rule.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// missing rule\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminEventRulePath, rule.Name+\"1\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// check the rule\n\truleGet, _, err := httpdtest.GetEventRuleByName(rule.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, rule.Trigger, ruleGet.Trigger)\n\tassert.Equal(t, rule.Status, ruleGet.Status)\n\tassert.Equal(t, rule.Description, ruleGet.Description)\n\tassert.Equal(t, rule.Conditions, ruleGet.Conditions)\n\tif assert.Len(t, ruleGet.Actions, 1) {\n\t\tassert.Equal(t, rule.Actions[0].Name, ruleGet.Actions[0].Name)\n\t\tassert.Equal(t, rule.Actions[0].Order, ruleGet.Actions[0].Order)\n\t}\n\t// change rule trigger and status\n\trule.Status = 0\n\trule.Trigger = dataprovider.EventTriggerFsEvent\n\trule.Conditions = dataprovider.EventConditions{\n\t\tFsEvents: []string{\"upload\", \"download\"},\n\t\tOptions: dataprovider.ConditionOptions{\n\t\t\tNames: []dataprovider.ConditionPattern{\n\t\t\t\t{\n\t\t\t\t\tPattern: \"u*\",\n\t\t\t\t\tInverseMatch: true,\n\t\t\t\t},\n\t\t\t},\n\t\t\tGroupNames: []dataprovider.ConditionPattern{\n\t\t\t\t{\n\t\t\t\t\tPattern: \"g*\",\n\t\t\t\t\tInverseMatch: true,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRoleNames: []dataprovider.ConditionPattern{\n\t\t\t\t{\n\t\t\t\t\tPattern: \"r*\",\n\t\t\t\t\tInverseMatch: true,\n\t\t\t\t},\n\t\t\t},\n\t\t\tFsPaths: []dataprovider.ConditionPattern{\n\t\t\t\t{\n\t\t\t\t\tPattern: \"/subdir/*.txt\",\n\t\t\t\t},\n\t\t\t},\n\t\t\tProtocols: []string{common.ProtocolSFTP, common.ProtocolHTTP},\n\t\t\tMinFileSize: 1024 * 1024,\n\t\t\tMaxFileSize: 5 * 1024 * 1024,\n\t\t},\n\t}\n\tform.Set(\"status\", fmt.Sprintf(\"%d\", rule.Status))\n\tform.Set(\"trigger\", fmt.Sprintf(\"%d\", rule.Trigger))\n\tfor _, event := range rule.Conditions.FsEvents {\n\t\tform.Add(\"fs_events\", event)\n\t}\n\tform.Set(\"path_filters[0][fs_path_pattern]\", rule.Conditions.Options.FsPaths[0].Pattern)\n\tfor _, protocol := range rule.Conditions.Options.Protocols {\n\t\tform.Add(\"fs_protocols\", protocol)\n\t}\n\tform.Set(\"fs_min_size\", fmt.Sprintf(\"%d\", rule.Conditions.Options.MinFileSize))\n\tform.Set(\"fs_max_size\", fmt.Sprintf(\"%d\", rule.Conditions.Options.MaxFileSize))\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the rule\n\truleGet, _, err = httpdtest.GetEventRuleByName(rule.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, rule.Status, ruleGet.Status)\n\tassert.Equal(t, rule.Trigger, ruleGet.Trigger)\n\tassert.Equal(t, rule.Description, ruleGet.Description)\n\tassert.Equal(t, rule.Conditions, ruleGet.Conditions)\n\tif assert.Len(t, ruleGet.Actions, 1) {\n\t\tassert.Equal(t, rule.Actions[0].Name, ruleGet.Actions[0].Name)\n\t\tassert.Equal(t, rule.Actions[0].Order, ruleGet.Actions[0].Order)\n\t}\n\trule.Trigger = dataprovider.EventTriggerIDPLogin\n\tform.Set(\"trigger\", fmt.Sprintf(\"%d\", rule.Trigger))\n\tform.Set(\"idp_login_event\", \"1\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the rule\n\truleGet, _, err = httpdtest.GetEventRuleByName(rule.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, rule.Trigger, ruleGet.Trigger)\n\tassert.Equal(t, 1, ruleGet.Conditions.IDPLoginEvent)\n\n\tform.Set(\"idp_login_event\", \"2\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the rule\n\truleGet, _, err = httpdtest.GetEventRuleByName(rule.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, rule.Trigger, ruleGet.Trigger)\n\tassert.Equal(t, 2, ruleGet.Conditions.IDPLoginEvent)\n\n\t// update a missing rule\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name+\"1\"),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// update with no csrf token\n\tform.Del(csrfFormToken)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\tform.Set(csrfFormToken, csrfToken)\n\t// update with no action defined\n\tform.Del(\"actions[0][action_name]\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorRuleActionRequired)\n\t// invalid trigger\n\tform.Set(\"trigger\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminEventRulePath, rule.Name),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(webAdminEventRulePath, rule.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(webAdminEventActionPath, action.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebIPListEntries(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, webToken)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webIPListPath+\"/mode\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webIPListPath+\"/mode/a\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webIPListPath, \"/1/a\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webIPListPath+\"/1\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webIPListsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tentry := dataprovider.IPListEntry{\n\t\tIPOrNet: \"12.34.56.78/20\",\n\t\tType: dataprovider.IPListTypeDefender,\n\t\tMode: dataprovider.ListModeDeny,\n\t\tDescription: \"note\",\n\t\tProtocols: 5,\n\t}\n\tform := make(url.Values)\n\tform.Set(\"ipornet\", entry.IPOrNet)\n\tform.Set(\"description\", entry.Description)\n\tform.Set(\"mode\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/mode\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError400Message)\n\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/2\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\tform.Set(\"mode\", \"2\")\n\tform.Set(\"protocols\", \"a\")\n\tform.Add(\"protocols\", \"1\")\n\tform.Add(\"protocols\", \"4\")\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/\"+strconv.Itoa(int(entry.Type)),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tentry1, _, err := httpdtest.GetIPListEntry(entry.IPOrNet, dataprovider.IPListTypeDefender, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, entry.Description, entry1.Description)\n\tassert.Equal(t, entry.Mode, entry1.Mode)\n\tassert.Equal(t, entry.Protocols, entry1.Protocols)\n\n\tform.Set(\"ipornet\", \"1111.11.11.11\")\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorIPInvalid)\n\n\tform.Set(\"ipornet\", entry.IPOrNet)\n\tform.Set(\"mode\", \"invalid\") // ignored for list type 1\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1\", bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tentry2, _, err := httpdtest.GetIPListEntry(entry.IPOrNet, dataprovider.IPListTypeAllowList, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, entry.Description, entry2.Description)\n\tassert.Equal(t, dataprovider.ListModeAllow, entry2.Mode)\n\tassert.Equal(t, entry.Protocols, entry2.Protocols)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webIPListPath, \"1\", url.PathEscape(entry2.IPOrNet)), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"protocols\", \"1\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webIPListPath, \"1\", url.PathEscape(entry.IPOrNet)),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\tentry2, _, err = httpdtest.GetIPListEntry(entry.IPOrNet, dataprovider.IPListTypeAllowList, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, entry.Description, entry2.Description)\n\tassert.Equal(t, dataprovider.ListModeAllow, entry2.Mode)\n\tassert.Equal(t, 1, entry2.Protocols)\n\n\tform.Del(csrfFormToken)\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1/\"+url.PathEscape(entry.IPOrNet),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/a/\"+url.PathEscape(entry.IPOrNet),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1/\"+url.PathEscape(entry.IPOrNet)+\"a\",\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tform.Set(\"mode\", \"a\")\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/2/\"+url.PathEscape(entry.IPOrNet),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\tform.Set(\"mode\", \"100\")\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/2/\"+url.PathEscape(entry.IPOrNet),\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\n\t_, err = httpdtest.RemoveIPListEntry(entry1, http.StatusOK)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveIPListEntry(entry2, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestWebRole(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webAdminRolePath, webToken)\n\tassert.NoError(t, err)\n\trole := getTestRole()\n\tform := make(url.Values)\n\tform.Set(\"name\", \"\")\n\tform.Set(\"description\", role.Description)\n\treq, err := http.NewRequest(http.MethodPost, webAdminRolePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminRolePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorNameRequired)\n\tform.Set(\"name\", role.Name)\n\treq, err = http.NewRequest(http.MethodPost, webAdminRolePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// a new add will fail\n\treq, err = http.NewRequest(http.MethodPost, webAdminRolePath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// list roles\n\treq, err = http.NewRequest(http.MethodGet, webAdminRolesPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, webAdminRolesPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render the new role page\n\treq, err = http.NewRequest(http.MethodGet, webAdminRolePath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminRolePath, role.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminRolePath, \"missing_role\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\t// parse form error\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminRolePath, role.Name)+\"?param=p%C4%AO%GH\",\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidForm)\n\t// update role\n\tform.Set(\"description\", \"new desc\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminRolePath, role.Name), bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check the changes\n\trole, _, err = httpdtest.GetRoleByName(role.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, \"new desc\", role.Description)\n\t// no CSRF token\n\tform.Set(csrfFormToken, \"\")\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminRolePath, role.Name), bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\t// missing role\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminRolePath, \"missing\"), bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\t_, err = httpdtest.RemoveRole(role, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestAddWebGroup(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webGroupPath, webToken)\n\tassert.NoError(t, err)\n\tgroup := getTestGroup()\n\tgroup.UserSettings = dataprovider.GroupUserSettings{\n\t\tBaseGroupUserSettings: sdk.BaseGroupUserSettings{\n\t\t\tHomeDir: filepath.Join(os.TempDir(), util.GenerateUniqueID()),\n\t\t\tPermissions: make(map[string][]string),\n\t\t\tMaxSessions: 2,\n\t\t\tQuotaSize: 123,\n\t\t\tQuotaFiles: 10,\n\t\t\tUploadBandwidth: 128,\n\t\t\tDownloadBandwidth: 256,\n\t\t\tExpiresIn: 10,\n\t\t},\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", group.Name)\n\tform.Set(\"description\", group.Description)\n\tform.Set(\"home_dir\", group.UserSettings.HomeDir)\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(group.UserSettings.MaxSessions), 10))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidQuotaSize)\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(group.UserSettings.QuotaFiles), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(group.UserSettings.QuotaSize, 10))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"upload_bandwidth\", strconv.FormatInt(group.UserSettings.UploadBandwidth, 10))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"download_bandwidth\", strconv.FormatInt(group.UserSettings.DownloadBandwidth, 10))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"expires_in\", strconv.Itoa(group.UserSettings.ExpiresIn))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidMaxFilesize)\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath+\"?b=%2\", &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr) // error parsing the multipart form\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// a new add will fail\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webGroupPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// list groups\n\treq, err = http.NewRequest(http.MethodGet, webGroupsPath, nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, webGroupsPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// render the new group page\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webGroupPath, group.Name), nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// check the added group\n\tgroupGet, _, err := httpdtest.GetGroupByName(group.Name, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.Equal(t, group.UserSettings, groupGet.UserSettings)\n\tassert.Equal(t, group.Name, groupGet.Name)\n\tassert.Equal(t, group.Description, groupGet.Description)\n\t// cleanup\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(groupPath, group.Name), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webGroupPath, group.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestAddWebFoldersMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webFolderPath, webToken)\n\tassert.NoError(t, err)\n\tmappedPath := filepath.Clean(os.TempDir())\n\tfolderName := filepath.Base(mappedPath)\n\tfolderDesc := \"a simple desc\"\n\tform := make(url.Values)\n\tform.Set(\"mapped_path\", mappedPath)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"description\", folderDesc)\n\tform.Set(\"osfs_read_buffer_size\", \"3\")\n\tform.Set(\"osfs_write_buffer_size\", \"4\")\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// adding the same folder will fail since the name must be unique\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// invalid form\n\treq, err = http.NewRequest(http.MethodPost, webFolderPath, strings.NewReader(form.Encode()))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", \"text/plain; boundary=\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t// now render the add folder page\n\treq, err = http.NewRequest(http.MethodGet, webFolderPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tvar folder vfs.BaseVirtualFolder\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &folder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, mappedPath, folder.MappedPath)\n\tassert.Equal(t, folderName, folder.Name)\n\tassert.Equal(t, folderDesc, folder.Description)\n\tassert.Equal(t, 3, folder.FsConfig.OSConfig.ReadBufferSize)\n\tassert.Equal(t, 4, folder.FsConfig.OSConfig.WriteBufferSize)\n\t// cleanup\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestHTTPFsWebFolderMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webFolderPath, webToken)\n\tassert.NoError(t, err)\n\tmappedPath := filepath.Clean(os.TempDir())\n\tfolderName := filepath.Base(mappedPath)\n\thttpfsConfig := vfs.HTTPFsConfig{\n\t\tBaseHTTPFsConfig: sdk.BaseHTTPFsConfig{\n\t\t\tEndpoint: \"https://127.0.0.1:9998/api/v1\",\n\t\t\tUsername: folderName,\n\t\t\tSkipTLSVerify: true,\n\t\t},\n\t\tPassword: kms.NewPlainSecret(defaultPassword),\n\t\tAPIKey: kms.NewPlainSecret(defaultTokenAuthPass),\n\t}\n\tform := make(url.Values)\n\tform.Set(\"mapped_path\", mappedPath)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"fs_provider\", \"6\")\n\tform.Set(\"http_endpoint\", httpfsConfig.Endpoint)\n\tform.Set(\"http_username\", \"%name%\")\n\tform.Set(\"http_password\", httpfsConfig.Password.GetPayload())\n\tform.Set(\"http_api_key\", httpfsConfig.APIKey.GetPayload())\n\tform.Set(\"http_skip_tls_verify\", \"checked\")\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check\n\tvar folder vfs.BaseVirtualFolder\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &folder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, mappedPath, folder.MappedPath)\n\tassert.Equal(t, folderName, folder.Name)\n\tassert.Equal(t, sdk.HTTPFilesystemProvider, folder.FsConfig.Provider)\n\tassert.Equal(t, httpfsConfig.Endpoint, folder.FsConfig.HTTPConfig.Endpoint)\n\tassert.Equal(t, httpfsConfig.Username, folder.FsConfig.HTTPConfig.Username)\n\tassert.Equal(t, httpfsConfig.SkipTLSVerify, folder.FsConfig.HTTPConfig.SkipTLSVerify)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, folder.FsConfig.HTTPConfig.Password.GetStatus())\n\tassert.NotEmpty(t, folder.FsConfig.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, folder.FsConfig.HTTPConfig.Password.GetKey())\n\tassert.Empty(t, folder.FsConfig.HTTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, folder.FsConfig.HTTPConfig.APIKey.GetStatus())\n\tassert.NotEmpty(t, folder.FsConfig.HTTPConfig.APIKey.GetPayload())\n\tassert.Empty(t, folder.FsConfig.HTTPConfig.APIKey.GetKey())\n\tassert.Empty(t, folder.FsConfig.HTTPConfig.APIKey.GetAdditionalData())\n\t// update\n\tform.Set(\"http_password\", redactedSecret)\n\tform.Set(\"http_api_key\", redactedSecret)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\t// check\n\tvar updateFolder vfs.BaseVirtualFolder\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &updateFolder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, mappedPath, updateFolder.MappedPath)\n\tassert.Equal(t, folderName, updateFolder.Name)\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateFolder.FsConfig.HTTPConfig.Password.GetStatus())\n\tassert.Equal(t, folder.FsConfig.HTTPConfig.Password.GetPayload(), updateFolder.FsConfig.HTTPConfig.Password.GetPayload())\n\tassert.Empty(t, updateFolder.FsConfig.HTTPConfig.Password.GetKey())\n\tassert.Empty(t, updateFolder.FsConfig.HTTPConfig.Password.GetAdditionalData())\n\tassert.Equal(t, sdkkms.SecretStatusSecretBox, updateFolder.FsConfig.HTTPConfig.APIKey.GetStatus())\n\tassert.Equal(t, folder.FsConfig.HTTPConfig.APIKey.GetPayload(), updateFolder.FsConfig.HTTPConfig.APIKey.GetPayload())\n\tassert.Empty(t, updateFolder.FsConfig.HTTPConfig.APIKey.GetKey())\n\tassert.Empty(t, updateFolder.FsConfig.HTTPConfig.APIKey.GetAdditionalData())\n\n\t// cleanup\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestS3WebFolderMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webFolderPath, webToken)\n\tassert.NoError(t, err)\n\tmappedPath := filepath.Clean(os.TempDir())\n\tfolderName := filepath.Base(mappedPath)\n\tfolderDesc := \"a simple desc\"\n\tS3Bucket := \"test\"\n\tS3Region := \"eu-west-1\"\n\tS3AccessKey := \"access-key\"\n\tS3AccessSecret := kms.NewPlainSecret(\"folder-access-secret\")\n\tS3SSEKey := kms.NewPlainSecret(\"folder-sse-key\")\n\tS3SessionToken := \"fake session token\"\n\tS3RoleARN := \"arn:aws:iam::123456789012:user/Development/product_1234/*\"\n\tS3Endpoint := \"http://127.0.0.1:9000/path?b=c\"\n\tS3StorageClass := \"Standard\"\n\tS3ACL := \"public-read-write\"\n\tS3KeyPrefix := \"somedir/subdir/\"\n\tS3UploadPartSize := 5\n\tS3UploadConcurrency := 4\n\tS3MaxPartDownloadTime := 120\n\tS3MaxPartUploadTime := 60\n\tS3DownloadPartSize := 6\n\tS3DownloadConcurrency := 3\n\tform := make(url.Values)\n\tform.Set(\"mapped_path\", mappedPath)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"description\", folderDesc)\n\tform.Set(\"fs_provider\", \"1\")\n\tform.Set(\"s3_bucket\", S3Bucket)\n\tform.Set(\"s3_region\", S3Region)\n\tform.Set(\"s3_access_key\", S3AccessKey)\n\tform.Set(\"s3_access_secret\", S3AccessSecret.GetPayload())\n\tform.Set(\"s3_sse_customer_key\", S3SSEKey.GetPayload())\n\tform.Set(\"s3_session_token\", S3SessionToken)\n\tform.Set(\"s3_role_arn\", S3RoleARN)\n\tform.Set(\"s3_storage_class\", S3StorageClass)\n\tform.Set(\"s3_acl\", S3ACL)\n\tform.Set(\"s3_endpoint\", S3Endpoint)\n\tform.Set(\"s3_key_prefix\", S3KeyPrefix)\n\tform.Set(\"s3_upload_part_size\", strconv.Itoa(S3UploadPartSize))\n\tform.Set(\"s3_download_part_max_time\", strconv.Itoa(S3MaxPartDownloadTime))\n\tform.Set(\"s3_download_part_size\", strconv.Itoa(S3DownloadPartSize))\n\tform.Set(\"s3_download_concurrency\", strconv.Itoa(S3DownloadConcurrency))\n\tform.Set(\"s3_upload_part_max_time\", strconv.Itoa(S3MaxPartUploadTime))\n\tform.Set(\"s3_upload_concurrency\", \"a\")\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"s3_upload_concurrency\", strconv.Itoa(S3UploadConcurrency))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webFolderPath, &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tvar folder vfs.BaseVirtualFolder\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &folder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, mappedPath, folder.MappedPath)\n\tassert.Equal(t, folderName, folder.Name)\n\tassert.Equal(t, folderDesc, folder.Description)\n\tassert.Equal(t, sdk.S3FilesystemProvider, folder.FsConfig.Provider)\n\tassert.Equal(t, S3Bucket, folder.FsConfig.S3Config.Bucket)\n\tassert.Equal(t, S3Region, folder.FsConfig.S3Config.Region)\n\tassert.Equal(t, S3AccessKey, folder.FsConfig.S3Config.AccessKey)\n\tassert.NotEmpty(t, folder.FsConfig.S3Config.AccessSecret.GetPayload())\n\tassert.NotEmpty(t, folder.FsConfig.S3Config.SSECustomerKey.GetPayload())\n\tassert.Equal(t, S3Endpoint, folder.FsConfig.S3Config.Endpoint)\n\tassert.Equal(t, S3StorageClass, folder.FsConfig.S3Config.StorageClass)\n\tassert.Equal(t, S3ACL, folder.FsConfig.S3Config.ACL)\n\tassert.Equal(t, S3KeyPrefix, folder.FsConfig.S3Config.KeyPrefix)\n\tassert.Equal(t, S3UploadConcurrency, folder.FsConfig.S3Config.UploadConcurrency)\n\tassert.Equal(t, int64(S3UploadPartSize), folder.FsConfig.S3Config.UploadPartSize)\n\tassert.Equal(t, S3MaxPartDownloadTime, folder.FsConfig.S3Config.DownloadPartMaxTime)\n\tassert.Equal(t, S3MaxPartUploadTime, folder.FsConfig.S3Config.UploadPartMaxTime)\n\tassert.Equal(t, S3DownloadConcurrency, folder.FsConfig.S3Config.DownloadConcurrency)\n\tassert.Equal(t, int64(S3DownloadPartSize), folder.FsConfig.S3Config.DownloadPartSize)\n\tassert.False(t, folder.FsConfig.S3Config.ForcePathStyle)\n\tassert.False(t, folder.FsConfig.S3Config.SkipTLSVerify)\n\t// update\n\tS3UploadConcurrency = 10\n\tform.Set(\"s3_upload_concurrency\", \"b\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tform.Set(\"s3_upload_concurrency\", strconv.Itoa(S3UploadConcurrency))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\tfolder = vfs.BaseVirtualFolder{}\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &folder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, mappedPath, folder.MappedPath)\n\tassert.Equal(t, folderName, folder.Name)\n\tassert.Equal(t, folderDesc, folder.Description)\n\tassert.Equal(t, sdk.S3FilesystemProvider, folder.FsConfig.Provider)\n\tassert.Equal(t, S3Bucket, folder.FsConfig.S3Config.Bucket)\n\tassert.Equal(t, S3Region, folder.FsConfig.S3Config.Region)\n\tassert.Equal(t, S3AccessKey, folder.FsConfig.S3Config.AccessKey)\n\tassert.Equal(t, S3RoleARN, folder.FsConfig.S3Config.RoleARN)\n\tassert.NotEmpty(t, folder.FsConfig.S3Config.AccessSecret.GetPayload())\n\tassert.NotEmpty(t, folder.FsConfig.S3Config.SSECustomerKey.GetPayload())\n\tassert.Equal(t, S3Endpoint, folder.FsConfig.S3Config.Endpoint)\n\tassert.Equal(t, S3StorageClass, folder.FsConfig.S3Config.StorageClass)\n\tassert.Equal(t, S3KeyPrefix, folder.FsConfig.S3Config.KeyPrefix)\n\tassert.Equal(t, S3UploadConcurrency, folder.FsConfig.S3Config.UploadConcurrency)\n\tassert.Equal(t, int64(S3UploadPartSize), folder.FsConfig.S3Config.UploadPartSize)\n\n\t// cleanup\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestUpdateWebGroupMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webGroupPath, webToken)\n\tassert.NoError(t, err)\n\tgroup, _, err := httpdtest.AddGroup(getTestGroup(), http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tgroup.UserSettings = dataprovider.GroupUserSettings{\n\t\tBaseGroupUserSettings: sdk.BaseGroupUserSettings{\n\t\t\tHomeDir: filepath.Join(os.TempDir(), util.GenerateUniqueID()),\n\t\t\tPermissions: make(map[string][]string),\n\t\t},\n\t\tFsConfig: vfs.Filesystem{\n\t\t\tProvider: sdk.SFTPFilesystemProvider,\n\t\t\tSFTPConfig: vfs.SFTPFsConfig{\n\t\t\t\tBaseSFTPFsConfig: sdk.BaseSFTPFsConfig{\n\t\t\t\t\tEndpoint: sftpServerAddr,\n\t\t\t\t\tUsername: defaultUsername,\n\t\t\t\t\tBufferSize: 1,\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t}\n\tform := make(url.Values)\n\tform.Set(\"name\", group.Name)\n\tform.Set(\"description\", group.Description)\n\tform.Set(\"home_dir\", group.UserSettings.HomeDir)\n\tform.Set(\"max_sessions\", strconv.FormatInt(int64(group.UserSettings.MaxSessions), 10))\n\tform.Set(\"quota_files\", strconv.FormatInt(int64(group.UserSettings.QuotaFiles), 10))\n\tform.Set(\"quota_size\", strconv.FormatInt(group.UserSettings.QuotaSize, 10))\n\tform.Set(\"upload_bandwidth\", strconv.FormatInt(group.UserSettings.UploadBandwidth, 10))\n\tform.Set(\"download_bandwidth\", strconv.FormatInt(group.UserSettings.DownloadBandwidth, 10))\n\tform.Set(\"upload_data_transfer\", \"0\")\n\tform.Set(\"download_data_transfer\", \"0\")\n\tform.Set(\"total_data_transfer\", \"0\")\n\tform.Set(\"max_upload_file_size\", \"0\")\n\tform.Set(\"default_shares_expiration\", \"0\")\n\tform.Set(\"max_shares_expiration\", \"0\")\n\tform.Set(\"expires_in\", \"0\")\n\tform.Set(\"password_expiration\", \"0\")\n\tform.Set(\"password_strength\", \"0\")\n\tform.Set(\"external_auth_cache_time\", \"0\")\n\tform.Set(\"fs_provider\", strconv.FormatInt(int64(group.UserSettings.FsConfig.Provider), 10))\n\tform.Set(\"sftp_endpoint\", group.UserSettings.FsConfig.SFTPConfig.Endpoint)\n\tform.Set(\"sftp_username\", group.UserSettings.FsConfig.SFTPConfig.Username)\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, path.Join(webGroupPath, group.Name), &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nError500Message)\n\tform.Set(\"sftp_buffer_size\", strconv.FormatInt(group.UserSettings.FsConfig.SFTPConfig.BufferSize, 10))\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webGroupPath, group.Name), &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webGroupPath, group.Name), &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorFsCredentialsRequired)\n\n\tform.Set(\"sftp_password\", defaultPassword)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webGroupPath, group.Name), &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\treq, err = http.NewRequest(http.MethodDelete, path.Join(groupPath, group.Name), nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webGroupPath, group.Name), &b)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Content-Type\", contentType)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestUpdateWebFolderMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webFolderPath, webToken)\n\tassert.NoError(t, err)\n\tfolderName := \"vfolderupdate\"\n\tfolderDesc := \"updated desc\"\n\tfolder := vfs.BaseVirtualFolder{\n\t\tName: folderName,\n\t\tMappedPath: filepath.Join(os.TempDir(), \"folderupdate\"),\n\t\tDescription: \"dsc\",\n\t}\n\t_, _, err = httpdtest.AddFolder(folder, http.StatusCreated)\n\tnewMappedPath := folder.MappedPath + \"1\"\n\tassert.NoError(t, err)\n\tform := make(url.Values)\n\tform.Set(\"mapped_path\", newMappedPath)\n\tform.Set(\"name\", folderName)\n\tform.Set(\"description\", folderDesc)\n\tform.Set(csrfFormToken, \"\")\n\tb, contentType, err := getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidCSRF)\n\n\tform.Set(csrfFormToken, csrfToken)\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusSeeOther, rr)\n\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(folderPath, folderName), nil)\n\tsetBearerForReq(req, apiToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\terr = render.DecodeJSON(rr.Body, &folder)\n\tassert.NoError(t, err)\n\tassert.Equal(t, newMappedPath, folder.MappedPath)\n\tassert.Equal(t, folderName, folder.Name)\n\tassert.Equal(t, folderDesc, folder.Description)\n\n\t// parse form error\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName)+\"??a=a%B3%A2%G3\", &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorInvalidForm)\n\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName+\"1\"), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tform.Set(\"mapped_path\", \"arelative/path\")\n\tb, contentType, err = getMultipartFormData(form, \"\", \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webFolderPath, folderName), &b)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\treq.Header.Set(\"Content-Type\", contentType)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t// render update folder page\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webFolderPath, folderName), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webFolderPath, folderName+\"1\"), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webFolderPath, folderName), nil)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webFolderPath, folderName), nil)\n\tsetJWTCookieForReq(req, apiToken) // api token is not accepted\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusFound, rr)\n\tassert.Equal(t, webLoginPath, rr.Header().Get(\"Location\"))\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webFolderPath, folderName), nil)\n\tsetJWTCookieForReq(req, webToken)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestWebFoldersMock(t *testing.T) {\n\twebToken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tapiToken, err := getJWTAPITokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tmappedPath1 := filepath.Join(os.TempDir(), \"vfolder1\")\n\tmappedPath2 := filepath.Join(os.TempDir(), \"vfolder2\")\n\tfolderName1 := filepath.Base(mappedPath1)\n\tfolderName2 := filepath.Base(mappedPath2)\n\tfolderDesc1 := \"vfolder1 desc\"\n\tfolderDesc2 := \"vfolder2 desc\"\n\tfolders := []vfs.BaseVirtualFolder{\n\t\t{\n\t\t\tName: folderName1,\n\t\t\tMappedPath: mappedPath1,\n\t\t\tDescription: folderDesc1,\n\t\t},\n\t\t{\n\t\t\tName: folderName2,\n\t\t\tMappedPath: mappedPath2,\n\t\t\tDescription: folderDesc2,\n\t\t},\n\t}\n\tfor _, folder := range folders {\n\t\tfolderAsJSON, err := json.Marshal(folder)\n\t\tassert.NoError(t, err)\n\t\treq, err := http.NewRequest(http.MethodPost, folderPath, bytes.NewBuffer(folderAsJSON))\n\t\tassert.NoError(t, err)\n\t\tsetBearerForReq(req, apiToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusCreated, rr)\n\t}\n\n\treq, err := http.NewRequest(http.MethodGet, folderPath, nil)\n\tassert.NoError(t, err)\n\tsetBearerForReq(req, apiToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tvar foldersGet []vfs.BaseVirtualFolder\n\terr = render.DecodeJSON(rr.Body, &foldersGet)\n\tassert.NoError(t, err)\n\tnumFound := 0\n\tfor _, f := range foldersGet {\n\t\tif f.Name == folderName1 {\n\t\t\tassert.Equal(t, mappedPath1, f.MappedPath)\n\t\t\tassert.Equal(t, folderDesc1, f.Description)\n\t\t\tnumFound++\n\t\t}\n\t\tif f.Name == folderName2 {\n\t\t\tassert.Equal(t, mappedPath2, f.MappedPath)\n\t\t\tassert.Equal(t, folderDesc2, f.Description)\n\t\t\tnumFound++\n\t\t}\n\t}\n\tassert.Equal(t, 2, numFound)\n\n\treq, err = http.NewRequest(http.MethodGet, webFoldersPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\treq, err = http.NewRequest(http.MethodGet, webFoldersPath+jsonAPISuffix, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, webToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tfor _, folder := range folders {\n\t\treq, _ := http.NewRequest(http.MethodDelete, path.Join(folderPath, folder.Name), nil)\n\t\tsetBearerForReq(req, apiToken)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t}\n}\n\nfunc TestAdminForgotPassword(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 3525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\ta := getTestAdmin()\n\ta.Username = altAdminUsername\n\ta.Password = altAdminPassword\n\ta.Filters.RequirePasswordChange = true\n\tadmin, _, err := httpdtest.AddAdmin(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webAdminForgotPwdPath, nil)\n\tassert.NoError(t, err)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webAdminResetPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webLoginPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\n\tform := make(url.Values)\n\tform.Set(\"username\", \"\")\n\t// no csrf token\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusForbidden, rr.Code)\n\t// empty username\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorUsernameRequired)\n\n\tlastResetCode = \"\"\n\tform.Set(\"username\", altAdminUsername)\n\t// disable the admin\n\tadmin.Status = 0\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.Len(t, lastResetCode, 0)\n\n\tadmin.Status = 1\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\tform = make(url.Values)\n\treq, err = http.NewRequest(http.MethodPost, webAdminResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusForbidden, rr.Code)\n\t// no password\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\t// no code\n\tform.Set(\"password\", defaultPassword)\n\tform.Set(\"confirm_password\", defaultPassword)\n\treq, err = http.NewRequest(http.MethodPost, webAdminResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\t// disable the admin\n\tadmin.Status = 0\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\tform.Set(\"code\", lastResetCode)\n\treq, err = http.NewRequest(http.MethodPost, webAdminResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\n\tadmin.Status = 1\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\t// ok\n\treq, err = http.NewRequest(http.MethodPost, webAdminResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", altAdminUsername)\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\t// not working smtp server\n\tsmtpCfg = smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 3526,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tform = make(url.Values)\n\tform.Set(\"username\", altAdminUsername)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPwdResetSendEmail)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tform.Set(\"username\", altAdminUsername)\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webAdminForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPwdResetGeneric)\n\n\treq, err = http.NewRequest(http.MethodGet, webAdminForgotPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webAdminResetPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\tadmin, _, err = httpdtest.GetAdminByUsername(admin.Username, http.StatusOK)\n\tassert.NoError(t, err)\n\tassert.False(t, admin.Filters.RequirePasswordChange)\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n}\n\nfunc TestUserForgotPassword(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 3525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\tu := getTestUser()\n\tu.Email = \"user@test.com\"\n\tu.Filters.WebClient = []string{sdk.WebClientPasswordResetDisabled}\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\treq, err := http.NewRequest(http.MethodGet, webClientForgotPwdPath, nil)\n\tassert.NoError(t, err)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientResetPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientLoginPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webClientLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\n\tform := make(url.Values)\n\tform.Set(\"username\", \"\")\n\t// no csrf token\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusForbidden, rr.Code)\n\t// empty username\n\tform.Set(csrfFormToken, csrfToken)\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorUsernameRequired)\n\t// user cannot reset the password\n\tform.Set(\"username\", user.Username)\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorPwdResetForbidded)\n\tuser.ExpirationDate = util.GetTimeAsMsSinceEpoch(time.Now().Add(-1 * time.Hour))\n\tuser.Filters.WebClient = []string{sdk.WebClientAPIKeyAuthChangeDisabled}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\t// user is expired\n\tlastResetCode = \"\"\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.Len(t, lastResetCode, 0)\n\n\tuser.ExpirationDate = util.GetTimeAsMsSinceEpoch(time.Now().Add(24 * time.Hour))\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\t// no login token\n\tform = make(url.Values)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusForbidden, rr.Code)\n\t// no password\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"password\", \"\")\n\tform.Set(\"confirm_password\", \"\")\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\t// passwords mismatch\n\tform.Set(\"password\", altAdminPassword)\n\tform.Set(\"code\", lastResetCode)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdNoMatch)\n\t// no code\n\tform.Del(\"code\")\n\tform.Set(\"confirm_password\", altAdminPassword)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\t// Invalid login condition\n\tform.Set(\"code\", lastResetCode)\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolHTTP}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n\t// ok\n\tuser.Filters.DeniedProtocols = []string{common.ProtocolFTP}\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\n\tloginCookie, csrfToken, err = getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tassert.NoError(t, err)\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", user.Username)\n\tlastResetCode = \"\"\n\treq, err = http.NewRequest(http.MethodPost, webClientForgotPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusFound, rr.Code)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientForgotPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webClientResetPwdPath, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n\t// user does not exist anymore\n\tform = make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"code\", lastResetCode)\n\tform.Set(\"password\", \"pwd\")\n\tform.Set(\"confirm_password\", \"pwd\")\n\treq, err = http.NewRequest(http.MethodPost, webClientResetPwdPath, bytes.NewBuffer([]byte(form.Encode())))\n\tassert.NoError(t, err)\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tassert.Equal(t, http.StatusOK, rr.Code)\n\tassert.Contains(t, rr.Body.String(), util.I18nErrorChangePwdGeneric)\n}\n\nfunc TestAPIForgotPassword(t *testing.T) {\n\tsmtpCfg := smtp.Config{\n\t\tHost: \"127.0.0.1\",\n\t\tPort: 3525,\n\t\tFrom: \"notification@example.com\",\n\t\tTemplatesPath: \"templates\",\n\t}\n\terr := smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\ta := getTestAdmin()\n\ta.Username = altAdminUsername\n\ta.Password = altAdminPassword\n\ta.Email = \"\"\n\tadmin, _, err := httpdtest.AddAdmin(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\t// no email, forgot pwd will not work\n\tlastResetCode = \"\"\n\treq, err := http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Your account does not have an email address\")\n\n\tadmin.Email = \"admin@test.com\"\n\tadmin, _, err = httpdtest.UpdateAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\t// invalid JSON\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/reset-password\"), bytes.NewBuffer([]byte(`{`)))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\n\tresetReq := make(map[string]string)\n\tresetReq[\"code\"] = lastResetCode\n\tresetReq[\"password\"] = defaultPassword\n\tasJSON, err := json.Marshal(resetReq)\n\tassert.NoError(t, err)\n\n\t// a user cannot use an admin code\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"invalid confirmation code\")\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\t// the same code cannot be reused\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"confirmation code not found\")\n\n\tadmin, err = dataprovider.AdminExists(altAdminUsername)\n\tassert.NoError(t, err)\n\n\tmatch, err := admin.CheckPassword(defaultPassword)\n\tassert.NoError(t, err)\n\tassert.True(t, match)\n\tlastResetCode = \"\"\n\t// now the same for a user\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"Your account does not have an email address\")\n\n\tuser.Email = \"user@test.com\"\n\tuser, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\t// invalid JSON\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/reset-password\"), bytes.NewBuffer([]byte(`{`)))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\t// remove the reset password permission\n\tuser.Filters.WebClient = []string{sdk.WebClientPasswordResetDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\n\tresetReq[\"code\"] = lastResetCode\n\tresetReq[\"password\"] = altAdminPassword\n\tasJSON, err = json.Marshal(resetReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"you are not allowed to reset your password\")\n\n\tuser.Filters.WebClient = []string{sdk.WebClientSharesDisabled}\n\t_, _, err = httpdtest.UpdateUser(user, http.StatusOK, \"\")\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\t// the same code cannot be reused\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"confirmation code not found\")\n\n\tuser, err = dataprovider.UserExists(defaultUsername, \"\")\n\tassert.NoError(t, err)\n\terr = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(altAdminPassword))\n\tassert.NoError(t, err)\n\n\tlastResetCode = \"\"\n\t// a request for a missing admin/user will be silently ignored\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, \"missing-admin\", \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Empty(t, lastResetCode)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, \"missing-user\", \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.Empty(t, lastResetCode)\n\n\tlastResetCode = \"\"\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\tassert.GreaterOrEqual(t, len(lastResetCode), 20)\n\n\tsmtpCfg = smtp.Config{}\n\terr = smtpCfg.Initialize(configDir, true)\n\trequire.NoError(t, err)\n\n\t// without an smtp configuration reset password is not available\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"No SMTP configuration\")\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(userPath, defaultUsername, \"/forgot-password\"), nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"No SMTP configuration\")\n\n\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\tassert.NoError(t, err)\n\t// the admin does not exist anymore\n\tresetReq[\"code\"] = lastResetCode\n\tresetReq[\"password\"] = altAdminPassword\n\tasJSON, err = json.Marshal(resetReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, path.Join(adminPath, altAdminUsername, \"/reset-password\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusBadRequest, rr)\n\tassert.Contains(t, rr.Body.String(), \"unable to associate the confirmation code with an existing admin\")\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestProviderClosedMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webConfigsPath, token)\n\tassert.NoError(t, err)\n\t// create a role admin\n\trole, resp, err := httpdtest.AddRole(getTestRole(), http.StatusCreated)\n\tassert.NoError(t, err, string(resp))\n\ta := getTestAdmin()\n\ta.Username = altAdminUsername\n\ta.Password = altAdminPassword\n\ta.Role = role.Name\n\ta.Permissions = []string{dataprovider.PermAdminAddUsers, dataprovider.PermAdminChangeUsers,\n\t\tdataprovider.PermAdminDeleteUsers, dataprovider.PermAdminViewUsers}\n\tadmin, _, err := httpdtest.AddAdmin(a, http.StatusCreated)\n\tassert.NoError(t, err)\n\taltToken, err := getJWTWebTokenFromTestServer(altAdminUsername, altAdminPassword)\n\tassert.NoError(t, err)\n\n\tdataprovider.Close()\n\n\ttestReq := make(map[string]any)\n\ttestReq[\"password\"] = redactedSecret\n\tasJSON, err := json.Marshal(testReq)\n\tassert.NoError(t, err)\n\treq, err := http.NewRequest(http.MethodPost, path.Join(webConfigsPath, \"smtp\", \"test\"), bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\ttestReq[\"base_redirect_url\"] = \"http://localhost\"\n\ttestReq[\"client_secret\"] = redactedSecret\n\tasJSON, err = json.Marshal(testReq)\n\tassert.NoError(t, err)\n\treq, err = http.NewRequest(http.MethodPost, webOAuth2TokenPath, bytes.NewBuffer(asJSON))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webConfigsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webConfigsPath, nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\tgetJSONFolders := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, _ := http.NewRequest(http.MethodGet, webFoldersPath+jsonAPISuffix, nil)\n\t\tsetJWTCookieForReq(req, token)\n\t\texecuteRequest(req)\n\t}\n\tgetJSONFolders()\n\n\tgetJSONGroups := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, _ := http.NewRequest(http.MethodGet, webGroupsPath+jsonAPISuffix, nil)\n\t\tsetJWTCookieForReq(req, token)\n\t\texecuteRequest(req)\n\t}\n\tgetJSONGroups()\n\n\tgetJSONUsers := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, _ := http.NewRequest(http.MethodGet, webUsersPath+jsonAPISuffix, nil)\n\t\tsetJWTCookieForReq(req, token)\n\t\texecuteRequest(req)\n\t}\n\tgetJSONUsers()\n\n\treq, _ = http.NewRequest(http.MethodGet, webUserPath+\"/0\", nil)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\tform := make(url.Values)\n\tform.Set(csrfFormToken, csrfToken)\n\tform.Set(\"username\", \"test\")\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath+\"/0\", strings.NewReader(form.Encode()))\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(webAdminPath, defaultTokenAuthUser), nil)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webAdminPath, defaultTokenAuthUser), strings.NewReader(form.Encode()))\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\tgetJSONAdmins := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, _ := http.NewRequest(http.MethodGet, webAdminsPath+jsonAPISuffix, nil)\n\t\tsetJWTCookieForReq(req, token)\n\t\texecuteRequest(req)\n\t}\n\tgetJSONAdmins()\n\n\treq, _ = http.NewRequest(http.MethodGet, path.Join(webFolderPath, defaultTokenAuthUser), nil)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, _ = http.NewRequest(http.MethodPost, path.Join(webFolderPath, defaultTokenAuthUser), strings.NewReader(form.Encode()))\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, strings.NewReader(form.Encode()))\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, _ = http.NewRequest(http.MethodPost, webUserPath, strings.NewReader(form.Encode()))\n\tsetJWTCookieForReq(req, altToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, webIPListPath+\"/1/a\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, webIPListPath+\"/1/a\", nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\tgetJSONRoles := func() {\n\t\tdefer func() {\n\t\t\trcv := recover()\n\t\t\tassert.Equal(t, http.ErrAbortHandler, rcv)\n\t\t}()\n\t\treq, err := http.NewRequest(http.MethodGet, webAdminRolesPath+jsonAPISuffix, nil)\n\t\tassert.NoError(t, err)\n\t\tsetJWTCookieForReq(req, token)\n\t\texecuteRequest(req)\n\t}\n\tgetJSONRoles()\n\n\treq, err = http.NewRequest(http.MethodGet, path.Join(webAdminRolePath, role.Name), nil)\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\treq, err = http.NewRequest(http.MethodPost, path.Join(webAdminRolePath, role.Name), strings.NewReader(form.Encode()))\n\tassert.NoError(t, err)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusInternalServerError, rr)\n\n\terr = config.LoadConfig(configDir, \"\")\n\tassert.NoError(t, err)\n\tproviderConf := config.GetProviderConf()\n\tproviderConf.BackupsPath = backupsPath\n\terr = dataprovider.Initialize(providerConf, configDir, true)\n\tassert.NoError(t, err)\n\tif config.GetProviderConf().Driver != dataprovider.MemoryDataProviderName {\n\t\t_, err = httpdtest.RemoveAdmin(admin, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t\t_, err = httpdtest.RemoveRole(role, http.StatusOK)\n\t\tassert.NoError(t, err)\n\t}\n}\n\nfunc TestWebConnectionsMock(t *testing.T) {\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, _ := http.NewRequest(http.MethodGet, webConnectionsPath, nil)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webConnectionsPath, \"id\"), nil)\n\tsetJWTCookieForReq(req, token)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webConnectionsPath, \"id\"), nil)\n\tsetJWTCookieForReq(req, token)\n\tsetCSRFHeaderForReq(req, \"csrfToken\")\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusForbidden, rr)\n\tassert.Contains(t, rr.Body.String(), \"Invalid token\")\n\n\tcsrfToken, err := getCSRFTokenFromInternalPageMock(webUserPath, token)\n\tassert.NoError(t, err)\n\treq, _ = http.NewRequest(http.MethodDelete, path.Join(webConnectionsPath, \"id\"), nil)\n\tsetJWTCookieForReq(req, token)\n\tsetCSRFHeaderForReq(req, csrfToken)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n}\n\nfunc TestGetWebStatusMock(t *testing.T) {\n\toldConfig := config.GetCommonConfig()\n\n\tcfg := config.GetCommonConfig()\n\tcfg.RateLimitersConfig = []common.RateLimiterConfig{\n\t\t{\n\t\t\tAverage: 1,\n\t\t\tPeriod: 1000,\n\t\t\tBurst: 1,\n\t\t\tType: 1,\n\t\t\tProtocols: []string{common.ProtocolFTP},\n\t\t},\n\t}\n\n\terr := common.Initialize(cfg, 0)\n\tassert.NoError(t, err)\n\n\ttoken, err := getJWTWebTokenFromTestServer(defaultTokenAuthUser, defaultTokenAuthPass)\n\tassert.NoError(t, err)\n\treq, _ := http.NewRequest(http.MethodGet, webStatusPath, nil)\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\terr = common.Initialize(oldConfig, 0)\n\tassert.NoError(t, err)\n}\n\nfunc TestStaticFilesMock(t *testing.T) {\n\treq, err := http.NewRequest(http.MethodGet, \"/static/favicon.png\", nil)\n\tassert.NoError(t, err)\n\trr := executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, \"/openapi/openapi.yaml\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, \"/static\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusMovedPermanently, rr)\n\tlocation := rr.Header().Get(\"Location\")\n\tassert.Equal(t, \"/static/\", location)\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusNotFound, rr)\n\n\treq, err = http.NewRequest(http.MethodGet, \"/openapi\", nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusMovedPermanently, rr)\n\tlocation = rr.Header().Get(\"Location\")\n\tassert.Equal(t, \"/openapi/\", location)\n\treq, err = http.NewRequest(http.MethodGet, location, nil)\n\tassert.NoError(t, err)\n\trr = executeRequest(req)\n\tcheckResponseCode(t, http.StatusOK, rr)\n}\n\nfunc TestPasswordChangeRequired(t *testing.T) {\n\tuser := getTestUser()\n\tassert.False(t, user.MustChangePassword())\n\tuser.Filters.RequirePasswordChange = true\n\tassert.True(t, user.MustChangePassword())\n\tuser.Filters.RequirePasswordChange = false\n\tassert.False(t, user.MustChangePassword())\n\tuser.Filters.PasswordExpiration = 2\n\tuser.LastPasswordChange = util.GetTimeAsMsSinceEpoch(time.Now())\n\tassert.False(t, user.MustChangePassword())\n\tuser.LastPasswordChange = util.GetTimeAsMsSinceEpoch(time.Now().Add(49 * time.Hour))\n\tassert.False(t, user.MustChangePassword())\n\tuser.LastPasswordChange = util.GetTimeAsMsSinceEpoch(time.Now().Add(-49 * time.Hour))\n\tassert.True(t, user.MustChangePassword())\n}\n\nfunc TestPasswordExpiresIn(t *testing.T) {\n\tuser := getTestUser()\n\tuser.Filters.PasswordExpiration = 30\n\tuser.LastPasswordChange = util.GetTimeAsMsSinceEpoch(time.Now().Add(-15*24*time.Hour + 1*time.Hour))\n\tres := user.PasswordExpiresIn()\n\tassert.Equal(t, 15, res)\n\tuser.Filters.PasswordExpiration = 15\n\tres = user.PasswordExpiresIn()\n\tassert.Equal(t, 1, res)\n\tuser.LastPasswordChange = util.GetTimeAsMsSinceEpoch(time.Now().Add(-15*24*time.Hour - 1*time.Hour))\n\tres = user.PasswordExpiresIn()\n\tassert.Equal(t, 0, res)\n\tuser.Filters.PasswordExpiration = 5\n\tres = user.PasswordExpiresIn()\n\tassert.Equal(t, -10, res)\n}\n\nfunc TestSecondFactorRequirements(t *testing.T) {\n\tuser := getTestUser()\n\tuser.Filters.TwoFactorAuthProtocols = []string{common.ProtocolHTTP, common.ProtocolSSH}\n\tassert.True(t, user.MustSetSecondFactor())\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolFTP))\n\tassert.True(t, user.MustSetSecondFactorForProtocol(common.ProtocolHTTP))\n\tassert.True(t, user.MustSetSecondFactorForProtocol(common.ProtocolSSH))\n\n\tuser.Filters.TOTPConfig.Enabled = true\n\tassert.True(t, user.MustSetSecondFactor())\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolFTP))\n\tassert.True(t, user.MustSetSecondFactorForProtocol(common.ProtocolHTTP))\n\tassert.True(t, user.MustSetSecondFactorForProtocol(common.ProtocolSSH))\n\n\tuser.Filters.TOTPConfig.Protocols = []string{common.ProtocolHTTP}\n\tassert.True(t, user.MustSetSecondFactor())\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolFTP))\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolHTTP))\n\tassert.True(t, user.MustSetSecondFactorForProtocol(common.ProtocolSSH))\n\n\tuser.Filters.TOTPConfig.Protocols = []string{common.ProtocolHTTP, common.ProtocolSSH}\n\tassert.False(t, user.MustSetSecondFactor())\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolFTP))\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolHTTP))\n\tassert.False(t, user.MustSetSecondFactorForProtocol(common.ProtocolSSH))\n}\n\nfunc TestIsNameValid(t *testing.T) {\n\ttests := []struct {\n\t\tname string\n\t\tinput string\n\t\texpected bool\n\t}{\n\t\t{\"simple name\", \"user\", true},\n\t\t{\"alphanumeric\", \"User123\", true},\n\t\t{\"unicode allowed\", \"你好\", true},\n\t\t{\"emoji allowed\", \"user😊\", true},\n\t\t{\"name with dot\", \"file.txt\", true},\n\t\t{\"name with multiple dots\", \"archive.tar.gz\", true},\n\t\t{\"control char\", \"abc\\u0001\", false},\n\t\t{\"newline\", \"abc\\n\", false},\n\t\t{\"tab\", \"abc\\t\", false},\n\t\t{\"slash\", \"user/name\", false},\n\t\t{\"backslash\", \"user\\\\name\", false},\n\t\t{\"colon\", \"user:name\", false},\n\t\t{\"single dot\", \".\", false},\n\t\t{\"double dot\", \"..\", false},\n\t\t{\"dot with suffix allowed\", \".hidden\", true},\n\t\t{\"name ending with dot\", \"file.\", false},\n\t\t{\"name ending with space\", \"file \", false},\n\t\t{\"CON\", \"CON\", false},\n\t\t{\"con lowercase\", \"con\", false},\n\t\t{\"con with extension\", \"con.txt\", false},\n\t\t{\"LPT1\", \"LPT1\", false},\n\t\t{\"lpt1 lowercase\", \"lpt1\", false},\n\t\t{\"COM5 uppercase\", \"COM5\", false},\n\t\t{\"com9 with extension\", \"com9.log\", false},\n\t\t{\"NUL\", \"NUL\", false},\n\t\t{\"Valid because suffix changes base\", \"con123\", true},\n\t\t{\"base name split\", \"aux.pdf\", false},\n\t\t{\"valid long name\", \"auxiliary\", true},\n\t\t{\"space only\", \" \", false},\n\t\t{\"dot inside\", \"ab.cd.ef\", true},\n\t\t{\"unicode that ends with dot\", \"你好.\", false},\n\t\t{\"unicode that ends with space\", \"你好 \", false},\n\t}\n\n\tfor _, tt := range tests {\n\t\tt.Run(tt.name, func(t *testing.T) {\n\t\t\tresult := util.IsNameValid(tt.input)\n\t\t\tif result != tt.expected {\n\t\t\t\tt.Errorf(\"IsNameValid(%q) = %v, expected %v\", tt.input, result, tt.expected)\n\t\t\t}\n\t\t})\n\t}\n}\n\nfunc startOIDCMockServer() {\n\tgo func() {\n\t\thttp.HandleFunc(\"/\", func(w http.ResponseWriter, _ *http.Request) {\n\t\t\tfmt.Fprintf(w, \"OK\\n\")\n\t\t})\n\t\thttp.HandleFunc(\"/auth/realms/sftpgo/.well-known/openid-configuration\", func(w http.ResponseWriter, _ *http.Request) {\n\t\t\tw.Header().Set(\"Content-Type\", \"application/json\")\n\t\t\tfmt.Fprintf(w, `{\"issuer\":\"http://127.0.0.1:11111/auth/realms/sftpgo\",\"authorization_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/auth\",\"token_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/token\",\"introspection_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/token/introspect\",\"userinfo_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/userinfo\",\"end_session_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/logout\",\"frontchannel_logout_session_supported\":true,\"frontchannel_logout_supported\":true,\"jwks_uri\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/certs\",\"check_session_iframe\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/login-status-iframe.html\",\"grant_types_supported\":[\"authorization_code\",\"implicit\",\"refresh_token\",\"password\",\"client_credentials\",\"urn:ietf:params:oauth:grant-type:device_code\",\"urn:openid:params:grant-type:ciba\"],\"response_types_supported\":[\"code\",\"none\",\"id_token\",\"token\",\"id_token token\",\"code id_token\",\"code token\",\"code id_token token\"],\"subject_types_supported\":[\"public\",\"pairwise\"],\"id_token_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"id_token_encryption_alg_values_supported\":[\"RSA-OAEP\",\"RSA-OAEP-256\",\"RSA1_5\"],\"id_token_encryption_enc_values_supported\":[\"A256GCM\",\"A192GCM\",\"A128GCM\",\"A128CBC-HS256\",\"A192CBC-HS384\",\"A256CBC-HS512\"],\"userinfo_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\",\"none\"],\"request_object_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\",\"none\"],\"request_object_encryption_alg_values_supported\":[\"RSA-OAEP\",\"RSA-OAEP-256\",\"RSA1_5\"],\"request_object_encryption_enc_values_supported\":[\"A256GCM\",\"A192GCM\",\"A128GCM\",\"A128CBC-HS256\",\"A192CBC-HS384\",\"A256CBC-HS512\"],\"response_modes_supported\":[\"query\",\"fragment\",\"form_post\",\"query.jwt\",\"fragment.jwt\",\"form_post.jwt\",\"jwt\"],\"registration_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/clients-registrations/openid-connect\",\"token_endpoint_auth_methods_supported\":[\"private_key_jwt\",\"client_secret_basic\",\"client_secret_post\",\"tls_client_auth\",\"client_secret_jwt\"],\"token_endpoint_auth_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"introspection_endpoint_auth_methods_supported\":[\"private_key_jwt\",\"client_secret_basic\",\"client_secret_post\",\"tls_client_auth\",\"client_secret_jwt\"],\"introspection_endpoint_auth_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"authorization_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"authorization_encryption_alg_values_supported\":[\"RSA-OAEP\",\"RSA-OAEP-256\",\"RSA1_5\"],\"authorization_encryption_enc_values_supported\":[\"A256GCM\",\"A192GCM\",\"A128GCM\",\"A128CBC-HS256\",\"A192CBC-HS384\",\"A256CBC-HS512\"],\"claims_supported\":[\"aud\",\"sub\",\"iss\",\"auth_time\",\"name\",\"given_name\",\"family_name\",\"preferred_username\",\"email\",\"acr\"],\"claim_types_supported\":[\"normal\"],\"claims_parameter_supported\":true,\"scopes_supported\":[\"openid\",\"phone\",\"email\",\"web-origins\",\"offline_access\",\"microprofile-jwt\",\"profile\",\"address\",\"roles\"],\"request_parameter_supported\":true,\"request_uri_parameter_supported\":true,\"require_request_uri_registration\":true,\"code_challenge_methods_supported\":[\"plain\",\"S256\"],\"tls_client_certificate_bound_access_tokens\":true,\"revocation_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/revoke\",\"revocation_endpoint_auth_methods_supported\":[\"private_key_jwt\",\"client_secret_basic\",\"client_secret_post\",\"tls_client_auth\",\"client_secret_jwt\"],\"revocation_endpoint_auth_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"HS256\",\"HS512\",\"ES256\",\"RS256\",\"HS384\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"backchannel_logout_supported\":true,\"backchannel_logout_session_supported\":true,\"device_authorization_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/auth/device\",\"backchannel_token_delivery_modes_supported\":[\"poll\",\"ping\"],\"backchannel_authentication_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/ext/ciba/auth\",\"backchannel_authentication_request_signing_alg_values_supported\":[\"PS384\",\"ES384\",\"RS384\",\"ES256\",\"RS256\",\"ES512\",\"PS256\",\"PS512\",\"RS512\"],\"require_pushed_authorization_requests\":false,\"pushed_authorization_request_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/ext/par/request\",\"mtls_endpoint_aliases\":{\"token_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/token\",\"revocation_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/revoke\",\"introspection_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/token/introspect\",\"device_authorization_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/auth/device\",\"registration_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/clients-registrations/openid-connect\",\"userinfo_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/userinfo\",\"pushed_authorization_request_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/ext/par/request\",\"backchannel_authentication_endpoint\":\"http://127.0.0.1:11111/auth/realms/sftpgo/protocol/openid-connect/ext/ciba/auth\"}}`)\n\t\t})\n\t\thttp.HandleFunc(\"/404\", func(w http.ResponseWriter, _ *http.Request) {\n\t\t\tw.WriteHeader(http.StatusNotFound)\n\t\t\tfmt.Fprintf(w, \"Not found\\n\")\n\t\t})\n\t\tif err := http.ListenAndServe(oidcMockAddr, nil); err != nil {\n\t\t\tlogger.ErrorToConsole(\"could not start HTTP notification server: %v\", err)\n\t\t\tos.Exit(1)\n\t\t}\n\t}()\n\twaitTCPListening(oidcMockAddr)\n}\n\nfunc waitForUsersQuotaScan(t *testing.T, token string) {\n\tfor {\n\t\tvar scans []common.ActiveQuotaScan\n\t\treq, _ := http.NewRequest(http.MethodGet, quotaScanPath, nil)\n\t\tsetBearerForReq(req, token)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\terr := render.DecodeJSON(rr.Body, &scans)\n\n\t\tif !assert.NoError(t, err, \"Error getting active scans\") {\n\t\t\tbreak\n\t\t}\n\t\tif len(scans) == 0 {\n\t\t\tbreak\n\t\t}\n\t\ttime.Sleep(100 * time.Millisecond)\n\t}\n}\n\nfunc waitForFoldersQuotaScanPath(t *testing.T, token string) {\n\tvar scans []common.ActiveVirtualFolderQuotaScan\n\tfor {\n\t\treq, _ := http.NewRequest(http.MethodGet, quotaScanVFolderPath, nil)\n\t\tsetBearerForReq(req, token)\n\t\trr := executeRequest(req)\n\t\tcheckResponseCode(t, http.StatusOK, rr)\n\t\terr := render.DecodeJSON(rr.Body, &scans)\n\t\tif !assert.NoError(t, err, \"Error getting active folders scans\") {\n\t\t\tbreak\n\t\t}\n\t\tif len(scans) == 0 {\n\t\t\tbreak\n\t\t}\n\t\ttime.Sleep(100 * time.Millisecond)\n\t}\n}\n\nfunc waitTCPListening(address string) {\n\tfor {\n\t\tconn, err := net.Dial(\"tcp\", address)\n\t\tif err != nil {\n\t\t\tlogger.WarnToConsole(\"tcp server %v not listening: %v\", address, err)\n\t\t\ttime.Sleep(100 * time.Millisecond)\n\t\t\tcontinue\n\t\t}\n\t\tlogger.InfoToConsole(\"tcp server %v now listening\", address)\n\t\tconn.Close()\n\t\tbreak\n\t}\n}\n\nfunc startSMTPServer() {\n\tgo func() {\n\t\tif err := smtpd.ListenAndServe(smtpServerAddr, func(_ net.Addr, _ string, _ []string, data []byte) error {\n\t\t\tre := regexp.MustCompile(`code is \".*?\"`)\n\t\t\tcode := strings.TrimPrefix(string(re.Find(data)), \"code is \")\n\t\t\tlastResetCode = strings.ReplaceAll(code, \"\\\"\", \"\")\n\t\t\treturn nil\n\t\t}, \"SFTPGo test\", \"localhost\"); err != nil {\n\t\t\tlogger.ErrorToConsole(\"could not start SMTP server: %v\", err)\n\t\t\tos.Exit(1)\n\t\t}\n\t}()\n\twaitTCPListening(smtpServerAddr)\n}\n\nfunc getTestAdmin() dataprovider.Admin {\n\treturn dataprovider.Admin{\n\t\tUsername: defaultTokenAuthUser,\n\t\tPassword: defaultTokenAuthPass,\n\t\tStatus: 1,\n\t\tPermissions: []string{dataprovider.PermAdminAny},\n\t\tEmail: \"admin@example.com\",\n\t\tDescription: \"test admin\",\n\t}\n}\n\nfunc getTestGroup() dataprovider.Group {\n\treturn dataprovider.Group{\n\t\tBaseGroup: sdk.BaseGroup{\n\t\t\tName: \"test_group\",\n\t\t\tDescription: \"test group description\",\n\t\t},\n\t}\n}\n\nfunc getTestRole() dataprovider.Role {\n\treturn dataprovider.Role{\n\t\tName: \"test_role\",\n\t\tDescription: \"test role description\",\n\t}\n}\n\nfunc getTestUser() dataprovider.User {\n\tuser := dataprovider.User{\n\t\tBaseUser: sdk.BaseUser{\n\t\t\tUsername: defaultUsername,\n\t\t\tPassword: defaultPassword,\n\t\t\tHomeDir: filepath.Join(homeBasePath, defaultUsername),\n\t\t\tStatus: 1,\n\t\t\tDescription: \"test user\",\n\t\t},\n\t}\n\tuser.Permissions = make(map[string][]string)\n\tuser.Permissions[\"/\"] = defaultPerms\n\treturn user\n}\n\nfunc getTestSFTPUser() dataprovider.User {\n\tu := getTestUser()\n\tu.Username = u.Username + \"_sftp\"\n\tu.FsConfig.Provider = sdk.SFTPFilesystemProvider\n\tu.FsConfig.SFTPConfig.Endpoint = sftpServerAddr\n\tu.FsConfig.SFTPConfig.Username = defaultUsername\n\tu.FsConfig.SFTPConfig.Password = kms.NewPlainSecret(defaultPassword)\n\treturn u\n}\n\nfunc getUserAsJSON(t *testing.T, user dataprovider.User) []byte {\n\tjson, err := json.Marshal(user)\n\tassert.NoError(t, err)\n\treturn json\n}\n\nfunc getCSRFTokenFromInternalPageMock(urlPath, token string) (string, error) {\n\treq, err := http.NewRequest(http.MethodGet, urlPath, nil)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\treq.RequestURI = urlPath\n\tsetJWTCookieForReq(req, token)\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusOK {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code: %d\", rr.Code)\n\t}\n\treturn getCSRFTokenFromBody(rr.Body)\n}\n\nfunc getCSRFTokenMock(loginURLPath, remoteAddr string) (string, string, error) {\n\treq, err := http.NewRequest(http.MethodGet, loginURLPath, nil)\n\tif err != nil {\n\t\treturn \"\", \"\", err\n\t}\n\treq.RemoteAddr = remoteAddr\n\trr := executeRequest(req)\n\tcookie := rr.Header().Get(\"Set-Cookie\")\n\tif cookie == \"\" {\n\t\treturn \"\", \"\", errors.New(\"unable to get login cookie\")\n\t}\n\ttoken, err := getCSRFTokenFromBody(bytes.NewBuffer(rr.Body.Bytes()))\n\treturn cookie, token, err\n}\n\nfunc getCSRFToken(url string) (string, string, error) {\n\treq, err := http.NewRequest(http.MethodGet, url, nil)\n\tif err != nil {\n\t\treturn \"\", \"\", err\n\t}\n\tresp, err := httpclient.GetHTTPClient().Do(req)\n\tif err != nil {\n\t\treturn \"\", \"\", err\n\t}\n\tcookie := resp.Header.Get(\"Set-Cookie\")\n\tif cookie == \"\" {\n\t\treturn \"\", \"\", errors.New(\"no login cookie\")\n\t}\n\n\tdefer resp.Body.Close()\n\n\ttoken, err := getCSRFTokenFromBody(resp.Body)\n\treturn cookie, token, err\n}\n\nfunc getCSRFTokenFromBody(body io.Reader) (string, error) {\n\tdoc, err := html.Parse(body)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\n\tvar csrfToken string\n\tvar f func(*html.Node)\n\n\tf = func(n *html.Node) {\n\t\tif n.Type == html.ElementNode && n.Data == \"input\" {\n\t\t\tvar name, value string\n\t\t\tfor _, attr := range n.Attr {\n\t\t\t\tif attr.Key == \"value\" {\n\t\t\t\t\tvalue = attr.Val\n\t\t\t\t}\n\t\t\t\tif attr.Key == \"name\" {\n\t\t\t\t\tname = attr.Val\n\t\t\t\t}\n\t\t\t}\n\t\t\tif name == csrfFormToken {\n\t\t\t\tcsrfToken = value\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\n\t\tfor c := n.FirstChild; c != nil; c = c.NextSibling {\n\t\t\tf(c)\n\t\t}\n\t}\n\n\tf(doc)\n\n\tif csrfToken == \"\" {\n\t\treturn \"\", errors.New(\"CSRF token not found\")\n\t}\n\n\treturn csrfToken, nil\n}\n\nfunc getLoginForm(username, password, csrfToken string) url.Values {\n\tform := make(url.Values)\n\tform.Set(\"username\", username)\n\tform.Set(\"password\", password)\n\tform.Set(csrfFormToken, csrfToken)\n\treturn form\n}\n\nfunc setCSRFHeaderForReq(req *http.Request, csrfToken string) {\n\treq.Header.Set(\"X-CSRF-TOKEN\", csrfToken)\n}\n\nfunc setBearerForReq(req *http.Request, jwtToken string) {\n\treq.Header.Set(\"Authorization\", fmt.Sprintf(\"Bearer %v\", jwtToken))\n}\n\nfunc setAPIKeyForReq(req *http.Request, apiKey, username string) {\n\tif username != \"\" {\n\t\tapiKey += \".\" + username\n\t}\n\treq.Header.Set(\"X-SFTPGO-API-KEY\", apiKey)\n}\n\nfunc setLoginCookie(req *http.Request, cookie string) {\n\treq.Header.Set(\"Cookie\", cookie)\n}\n\nfunc setJWTCookieForReq(req *http.Request, jwtToken string) {\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Cookie\", fmt.Sprintf(\"jwt=%v\", jwtToken))\n}\n\nfunc getJWTAPITokenFromTestServer(username, password string) (string, error) {\n\treturn getJWTAPITokenFromTestServerWithPasscode(username, password, \"\")\n}\n\nfunc getJWTAPITokenFromTestServerWithPasscode(username, password, passcode string) (string, error) {\n\treq, _ := http.NewRequest(http.MethodGet, tokenPath, nil)\n\treq.SetBasicAuth(username, password)\n\tif passcode != \"\" {\n\t\treq.Header.Set(\"X-SFTPGO-OTP\", passcode)\n\t}\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusOK {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", rr.Code)\n\t}\n\tresponseHolder := make(map[string]any)\n\terr := render.DecodeJSON(rr.Body, &responseHolder)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\treturn responseHolder[\"access_token\"].(string), nil\n}\n\nfunc getJWTAPIUserTokenFromTestServer(username, password string) (string, error) {\n\treq, _ := http.NewRequest(http.MethodGet, userTokenPath, nil)\n\treq.SetBasicAuth(username, password)\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusOK {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", rr.Code)\n\t}\n\tresponseHolder := make(map[string]any)\n\terr := render.DecodeJSON(rr.Body, &responseHolder)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\treturn responseHolder[\"access_token\"].(string), nil\n}\n\nfunc getJWTWebToken(username, password string) (string, error) {\n\tloginCookie, csrfToken, err := getCSRFToken(httpBaseURL + webLoginPath)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\tform := getLoginForm(username, password, csrfToken)\n\treq, _ := http.NewRequest(http.MethodPost, httpBaseURL+webLoginPath,\n\t\tbytes.NewBuffer([]byte(form.Encode())))\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\tclient := &http.Client{\n\t\tTimeout: 10 * time.Second,\n\t\tCheckRedirect: func(_ *http.Request, _ []*http.Request) error {\n\t\t\treturn http.ErrUseLastResponse\n\t\t},\n\t}\n\tresp, err := client.Do(req)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\tdefer resp.Body.Close()\n\n\tif resp.StatusCode != http.StatusFound {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", resp.StatusCode)\n\t}\n\tcookie := resp.Header.Get(\"Set-Cookie\")\n\tif strings.HasPrefix(cookie, \"jwt=\") {\n\t\treturn cookie[4:], nil\n\t}\n\treturn \"\", errors.New(\"no cookie found\")\n}\n\nfunc getCookieFromResponse(rr *httptest.ResponseRecorder) (string, error) {\n\tcookie := strings.Split(rr.Header().Get(\"Set-Cookie\"), \";\")\n\tif strings.HasPrefix(cookie[0], \"jwt=\") {\n\t\treturn cookie[0][4:], nil\n\t}\n\treturn \"\", errors.New(\"no cookie found\")\n}\n\nfunc getJWTWebClientTokenFromTestServerWithAddr(username, password, remoteAddr string) (string, error) {\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webClientLoginPath, remoteAddr)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\tform := getLoginForm(username, password, csrfToken)\n\treq, _ := http.NewRequest(http.MethodPost, webClientLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = remoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusFound {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", rr)\n\t}\n\treturn getCookieFromResponse(rr)\n}\n\nfunc getJWTWebClientTokenFromTestServer(username, password string) (string, error) {\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webClientLoginPath, defaultRemoteAddr)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\tform := getLoginForm(username, password, csrfToken)\n\treq, _ := http.NewRequest(http.MethodPost, webClientLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\treq.Header.Set(\"Cookie\", loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusFound {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", rr)\n\t}\n\treturn getCookieFromResponse(rr)\n}\n\nfunc getJWTWebTokenFromTestServer(username, password string) (string, error) {\n\tloginCookie, csrfToken, err := getCSRFTokenMock(webLoginPath, defaultRemoteAddr)\n\tif err != nil {\n\t\treturn \"\", err\n\t}\n\tform := getLoginForm(username, password, csrfToken)\n\treq, _ := http.NewRequest(http.MethodPost, webLoginPath, bytes.NewBuffer([]byte(form.Encode())))\n\treq.RemoteAddr = defaultRemoteAddr\n\tsetLoginCookie(req, loginCookie)\n\treq.Header.Set(\"Content-Type\", \"application/x-www-form-urlencoded\")\n\trr := executeRequest(req)\n\tif rr.Code != http.StatusFound {\n\t\treturn \"\", fmt.Errorf(\"unexpected status code %v\", rr)\n\t}\n\treturn getCookieFromResponse(rr)\n}\n\nfunc executeRequest(req *http.Request) *httptest.ResponseRecorder {\n\trr := httptest.NewRecorder()\n\ttestServer.Config.Handler.ServeHTTP(rr, req)\n\treturn rr\n}\n\nfunc checkResponseCode(t *testing.T, expected int, rr *httptest.ResponseRecorder) {\n\tassert.Equal(t, expected, rr.Code, rr.Body.String())\n}\n\nfunc getSftpClient(user dataprovider.User) (*ssh.Client, *sftp.Client, error) {\n\tvar sftpClient *sftp.Client\n\tconfig := &ssh.ClientConfig{\n\t\tUser: user.Username,\n\t\tHostKeyCallback: ssh.InsecureIgnoreHostKey(),\n\t\tTimeout: 5 * time.Second,\n\t}\n\tif user.Password != \"\" {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(user.Password)}\n\t} else {\n\t\tconfig.Auth = []ssh.AuthMethod{ssh.Password(defaultPassword)}\n\t}\n\n\tconn, err := ssh.Dial(\"tcp\", sftpServerAddr, config)\n\tif err != nil {\n\t\treturn conn, sftpClient, err\n\t}\n\tsftpClient, err = sftp.NewClient(conn)\n\tif err != nil {\n\t\tconn.Close()\n\t}\n\treturn conn, sftpClient, err\n}\n\nfunc createTestFile(path string, size int64) error {\n\tbaseDir := filepath.Dir(path)\n\tif _, err := os.Stat(baseDir); errors.Is(err, fs.ErrNotExist) {\n\t\terr = os.MkdirAll(baseDir, os.ModePerm)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t}\n\tcontent := make([]byte, size)\n\tif size > 0 {\n\t\t_, err := rand.Read(content)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t}\n\treturn os.WriteFile(path, content, os.ModePerm)\n}\n\nfunc getExitCodeScriptContent(exitCode int) []byte {\n\tcontent := []byte(\"#!/bin/sh\\n\\n\")\n\tcontent = append(content, []byte(fmt.Sprintf(\"exit %v\", exitCode))...)\n\treturn content\n}\n\nfunc getMultipartFormData(values url.Values, fileFieldName, filePath string) (bytes.Buffer, string, error) {\n\tvar b bytes.Buffer\n\tw := multipart.NewWriter(&b)\n\tfor k, v := range values {\n\t\tfor _, s := range v {\n\t\t\tif err := w.WriteField(k, s); err != nil {\n\t\t\t\treturn b, \"\", err\n\t\t\t}\n\t\t}\n\t}\n\tif len(fileFieldName) > 0 && len(filePath) > 0 {\n\t\tfw, err := w.CreateFormFile(fileFieldName, filepath.Base(filePath))\n\t\tif err != nil {\n\t\t\treturn b, \"\", err\n\t\t}\n\t\tf, err := os.Open(filePath)\n\t\tif err != nil {\n\t\t\treturn b, \"\", err\n\t\t}\n\t\tdefer f.Close()\n\t\tif _, err = io.Copy(fw, f); err != nil {\n\t\t\treturn b, \"\", err\n\t\t}\n\t}\n\terr := w.Close()\n\treturn b, w.FormDataContentType(), err\n}\n\nfunc generateTOTPPasscode(secret string) (string, error) {\n\treturn totp.GenerateCodeCustom(secret, time.Now(), totp.ValidateOpts{\n\t\tPeriod: 30,\n\t\tSkew: 1,\n\t\tDigits: otp.DigitsSix,\n\t\tAlgorithm: otp.AlgorithmSHA1,\n\t})\n}\n\nfunc isDbDefenderSupported() bool {\n\t// SQLite shares the implementation with other SQL-based provider but it makes no sense\n\t// to use it outside test cases\n\tswitch dataprovider.GetProviderStatus().Driver {\n\tcase dataprovider.MySQLDataProviderName, dataprovider.PGSQLDataProviderName,\n\t\tdataprovider.CockroachDataProviderName, dataprovider.SQLiteDataProviderName:\n\t\treturn true\n\tdefault:\n\t\treturn false\n\t}\n}\n\nfunc createTestPNG(name string, width, height int, imgColor color.Color) error {\n\tupLeft := image.Point{0, 0}\n\tlowRight := image.Point{width, height}\n\timg := image.NewRGBA(image.Rectangle{upLeft, lowRight})\n\tfor x := 0; x < width; x++ {\n\t\tfor y := 0; y < height; y++ {\n\t\t\timg.Set(x, y, imgColor)\n\t\t}\n\t}\n\tf, err := os.Create(name)\n\tif err != nil {\n\t\treturn err\n\t}\n\tdefer f.Close()\n\treturn png.Encode(f, img)\n}\n\nfunc BenchmarkSecretDecryption(b *testing.B) {\n\ts := kms.NewPlainSecret(\"test data\")\n\ts.SetAdditionalData(\"username\")\n\terr := s.Encrypt()\n\trequire.NoError(b, err)\n\tfor i := 0; i < b.N; i++ {\n\t\terr = s.Clone().Decrypt()\n\t\trequire.NoError(b, err)\n\t}\n}\n"
},
{
"path": "internal/httpd/internal_test.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see :%v/ \", scheme, config.GetWebDAVDConfig().Bindings[0].Port)\n\t}\n\tif config.GetHTTPDConfig().Bindings[0].IsValid() {\n\t\tscheme := \"http\"\n\t\tif config.GetHTTPDConfig().CertificateFile != \"\" && config.GetHTTPDConfig().CertificateKeyFile != \"\" {\n\t\t\tscheme = \"https\"\n\t\t}\n\t\tfmt.Fprintf(&info, \"WebClient URL: %s://:%d/ \", scheme, config.GetHTTPDConfig().Bindings[0].Port)\n\t}\n\treturn info.String()\n}\n\nfunc (s *Service) getPortableDirToServe() string {\n\tswitch s.PortableUser.FsConfig.Provider {\n\tcase sdk.S3FilesystemProvider:\n\t\treturn s.PortableUser.FsConfig.S3Config.KeyPrefix\n\tcase sdk.GCSFilesystemProvider:\n\t\treturn s.PortableUser.FsConfig.GCSConfig.KeyPrefix\n\tcase sdk.AzureBlobFilesystemProvider:\n\t\treturn s.PortableUser.FsConfig.AzBlobConfig.KeyPrefix\n\tcase sdk.SFTPFilesystemProvider:\n\t\treturn s.PortableUser.FsConfig.SFTPConfig.Prefix\n\tcase sdk.HTTPFilesystemProvider:\n\t\treturn \"/\"\n\tdefault:\n\t\treturn s.PortableUser.HomeDir\n\t}\n}\n\n// configures the portable user and return the printable password if any\nfunc (s *Service) configurePortableUser() string {\n\tif s.PortableUser.Username == \"\" {\n\t\ts.PortableUser.Username = \"user\"\n\t}\n\tprintablePassword := \"\"\n\tif s.PortableUser.Password != \"\" {\n\t\tprintablePassword = \"[redacted]\"\n\t}\n\tif len(s.PortableUser.PublicKeys) == 0 && s.PortableUser.Password == \"\" {\n\t\ts.PortableUser.Password = util.GenerateUniqueID()\n\t\tprintablePassword = s.PortableUser.Password\n\t}\n\ts.PortableUser.Filters.WebClient = []string{sdk.WebClientSharesDisabled, sdk.WebClientInfoChangeDisabled,\n\t\tsdk.WebClientPubKeyChangeDisabled, sdk.WebClientPasswordChangeDisabled, sdk.WebClientAPIKeyAuthChangeDisabled,\n\t\tsdk.WebClientMFADisabled, sdk.WebClientPasswordResetDisabled, sdk.WebClientTLSCertChangeDisabled,\n\t}\n\tif !s.PortableUser.HasAnyPerm([]string{dataprovider.PermUpload, dataprovider.PermOverwrite}, \"/\") {\n\t\ts.PortableUser.Filters.WebClient = append(s.PortableUser.Filters.WebClient, sdk.WebClientWriteDisabled)\n\t}\n\ts.configurePortableSecrets()\n\treturn printablePassword\n}\n\nfunc (s *Service) configurePortableSecrets() {\n\t// we created the user before to initialize the KMS so we need to create the secret here\n\tswitch s.PortableUser.FsConfig.Provider {\n\tcase sdk.S3FilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.S3Config.AccessSecret.GetPayload()\n\t\ts.PortableUser.FsConfig.S3Config.AccessSecret = getSecretFromString(payload)\n\tcase sdk.GCSFilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.GCSConfig.Credentials.GetPayload()\n\t\ts.PortableUser.FsConfig.GCSConfig.Credentials = getSecretFromString(payload)\n\tcase sdk.AzureBlobFilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.AzBlobConfig.AccountKey.GetPayload()\n\t\ts.PortableUser.FsConfig.AzBlobConfig.AccountKey = getSecretFromString(payload)\n\t\tpayload = s.PortableUser.FsConfig.AzBlobConfig.SASURL.GetPayload()\n\t\ts.PortableUser.FsConfig.AzBlobConfig.SASURL = getSecretFromString(payload)\n\tcase sdk.CryptedFilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.CryptConfig.Passphrase.GetPayload()\n\t\ts.PortableUser.FsConfig.CryptConfig.Passphrase = getSecretFromString(payload)\n\tcase sdk.SFTPFilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.SFTPConfig.Password.GetPayload()\n\t\ts.PortableUser.FsConfig.SFTPConfig.Password = getSecretFromString(payload)\n\t\tpayload = s.PortableUser.FsConfig.SFTPConfig.PrivateKey.GetPayload()\n\t\ts.PortableUser.FsConfig.SFTPConfig.PrivateKey = getSecretFromString(payload)\n\t\tpayload = s.PortableUser.FsConfig.SFTPConfig.KeyPassphrase.GetPayload()\n\t\ts.PortableUser.FsConfig.SFTPConfig.KeyPassphrase = getSecretFromString(payload)\n\tcase sdk.HTTPFilesystemProvider:\n\t\tpayload := s.PortableUser.FsConfig.HTTPConfig.Password.GetPayload()\n\t\ts.PortableUser.FsConfig.HTTPConfig.Password = getSecretFromString(payload)\n\t\tpayload = s.PortableUser.FsConfig.HTTPConfig.APIKey.GetPayload()\n\t\ts.PortableUser.FsConfig.HTTPConfig.APIKey = getSecretFromString(payload)\n\t}\n}\n\nfunc getSecretFromString(payload string) *kms.Secret {\n\tif payload != \"\" {\n\t\treturn kms.NewPlainSecret(payload)\n\t}\n\treturn kms.NewEmptySecret()\n}\n\nfunc configurePortableSFTPService(port int, enabledSSHCommands []string) {\n\tsftpdConf := config.GetSFTPDConfig()\n\tif len(sftpdConf.Bindings) == 0 {\n\t\tsftpdConf.Bindings = append(sftpdConf.Bindings, sftpd.Binding{})\n\t}\n\tif port > 0 {\n\t\tsftpdConf.Bindings[0].Port = port\n\t} else if port == 0 {\n\t\t// dynamic ports starts from 49152\n\t\tsftpdConf.Bindings[0].Port = 49152 + rand.Intn(15000)\n\t} else {\n\t\tsftpdConf.Bindings[0].Port = 0\n\t}\n\tif slices.Contains(enabledSSHCommands, \"*\") {\n\t\tsftpdConf.EnabledSSHCommands = sftpd.GetSupportedSSHCommands()\n\t} else {\n\t\tsftpdConf.EnabledSSHCommands = enabledSSHCommands\n\t}\n\tconfig.SetSFTPDConfig(sftpdConf)\n}\n\nfunc configurePortableFTPService(port int, cert, key string) {\n\tftpConf := config.GetFTPDConfig()\n\tif len(ftpConf.Bindings) == 0 {\n\t\tftpConf.Bindings = append(ftpConf.Bindings, ftpd.Binding{})\n\t}\n\tif port > 0 {\n\t\tftpConf.Bindings[0].Port = port\n\t} else if port == 0 {\n\t\tftpConf.Bindings[0].Port = 49152 + rand.Intn(15000)\n\t} else {\n\t\tftpConf.Bindings[0].Port = 0\n\t}\n\tftpConf.Bindings[0].CertificateFile = cert\n\tftpConf.Bindings[0].CertificateKeyFile = key\n\tconfig.SetFTPDConfig(ftpConf)\n}\n\nfunc configurePortableWebDAVService(port int, cert, key string) {\n\twebDavConf := config.GetWebDAVDConfig()\n\tif len(webDavConf.Bindings) == 0 {\n\t\twebDavConf.Bindings = append(webDavConf.Bindings, webdavd.Binding{})\n\t}\n\tif port > 0 {\n\t\twebDavConf.Bindings[0].Port = port\n\t} else if port == 0 {\n\t\twebDavConf.Bindings[0].Port = 49152 + rand.Intn(15000)\n\t} else {\n\t\twebDavConf.Bindings[0].Port = 0\n\t}\n\twebDavConf.Bindings[0].CertificateFile = cert\n\twebDavConf.Bindings[0].CertificateKeyFile = key\n\tif cert != \"\" && key != \"\" {\n\t\twebDavConf.Bindings[0].EnableHTTPS = true\n\t}\n\tconfig.SetWebDAVDConfig(webDavConf)\n}\n\nfunc configurePortableHTTPService(port int, cert, key string) {\n\thttpdConf := config.GetHTTPDConfig()\n\tif len(httpdConf.Bindings) == 0 {\n\t\thttpdConf.Bindings = append(httpdConf.Bindings, httpd.Binding{})\n\t}\n\tif port > 0 {\n\t\thttpdConf.Bindings[0].Port = port\n\t} else if port == 0 {\n\t\thttpdConf.Bindings[0].Port = 49152 + rand.Intn(15000)\n\t} else {\n\t\thttpdConf.Bindings[0].Port = 0\n\t}\n\thttpdConf.Bindings[0].CertificateFile = cert\n\thttpdConf.Bindings[0].CertificateKeyFile = key\n\tif cert != \"\" && key != \"\" {\n\t\thttpdConf.Bindings[0].EnableHTTPS = true\n\t}\n\thttpdConf.Bindings[0].EnableWebAdmin = false\n\thttpdConf.Bindings[0].EnableWebClient = true\n\thttpdConf.Bindings[0].EnableRESTAPI = false\n\thttpdConf.Bindings[0].RenderOpenAPI = false\n\tconfig.SetHTTPDConfig(httpdConf)\n}\n"
},
{
"path": "internal/service/service_windows.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see \"))\n\t}\n\tc.connection.Log(logger.LevelDebug, \"requested copy %q -> %q\", sshSourcePath, sshDestPath)\n\tif err := c.connection.Copy(sshSourcePath, sshDestPath); err != nil {\n\t\treturn c.sendErrorResponse(err)\n\t}\n\tc.connection.channel.Write([]byte(\"OK\\n\")) //nolint:errcheck\n\tc.sendExitStatus(nil)\n\treturn nil\n}\n\nfunc (c *sshCommand) handleSFTPGoRemove() error {\n\tsshDestPath, err := c.getRemovePath()\n\tif err != nil {\n\t\treturn c.sendErrorResponse(err)\n\t}\n\tif err := c.connection.RemoveAll(sshDestPath); err != nil {\n\t\treturn c.sendErrorResponse(err)\n\t}\n\tc.connection.channel.Write([]byte(\"OK\\n\")) //nolint:errcheck\n\tc.sendExitStatus(nil)\n\treturn nil\n}\n\nfunc (c *sshCommand) handleHashCommands() error {\n\tvar h hash.Hash\n\tswitch c.command {\n\tcase \"md5sum\":\n\t\th = md5.New()\n\tcase \"sha1sum\":\n\t\th = sha1.New()\n\tcase \"sha256sum\":\n\t\th = sha256.New()\n\tcase \"sha384sum\":\n\t\th = sha512.New384()\n\tdefault:\n\t\th = sha512.New()\n\t}\n\tvar response string\n\tif len(c.args) == 0 {\n\t\t// without args we need to read the string to hash from stdin\n\t\tbuf := make([]byte, 4096)\n\t\tn, err := c.connection.channel.Read(buf)\n\t\tif err != nil && err != io.EOF {\n\t\t\treturn c.sendErrorResponse(err)\n\t\t}\n\t\th.Write(buf[:n]) //nolint:errcheck\n\t\tresponse = fmt.Sprintf(\"%x -\\n\", h.Sum(nil))\n\t} else {\n\t\tsshPath := c.getDestPath()\n\t\tif ok, policy := c.connection.User.IsFileAllowed(sshPath); !ok {\n\t\t\tc.connection.Log(logger.LevelInfo, \"hash not allowed for file %q\", sshPath)\n\t\t\treturn c.sendErrorResponse(c.connection.GetErrorForDeniedFile(policy))\n\t\t}\n\t\tfs, fsPath, err := c.connection.GetFsAndResolvedPath(sshPath)\n\t\tif err != nil {\n\t\t\treturn c.sendErrorResponse(err)\n\t\t}\n\t\tif !c.connection.User.HasPerm(dataprovider.PermListItems, sshPath) {\n\t\t\treturn c.sendErrorResponse(c.connection.GetPermissionDeniedError())\n\t\t}\n\t\thash, err := c.computeHashForFile(fs, h, fsPath)\n\t\tif err != nil {\n\t\t\treturn c.sendErrorResponse(c.connection.GetFsError(fs, err))\n\t\t}\n\t\tresponse = fmt.Sprintf(\"%v %v\\n\", hash, sshPath)\n\t}\n\tc.connection.channel.Write([]byte(response)) //nolint:errcheck\n\tc.sendExitStatus(nil)\n\treturn nil\n}\n\n// for the supported commands, the destination path, if any, is the last argument\nfunc (c *sshCommand) getDestPath() string {\n\tif len(c.args) == 0 {\n\t\treturn \"\"\n\t}\n\treturn c.cleanCommandPath(c.args[len(c.args)-1])\n}\n\n// for the supported commands, the destination path, if any, is the second-last argument\nfunc (c *sshCommand) getSourcePath() string {\n\tif len(c.args) < 2 {\n\t\treturn \"\"\n\t}\n\treturn c.cleanCommandPath(c.args[len(c.args)-2])\n}\n\nfunc (c *sshCommand) cleanCommandPath(name string) string {\n\tname = strings.Trim(name, \"'\")\n\tname = strings.Trim(name, \"\\\"\")\n\tresult := c.connection.User.GetCleanedPath(name)\n\tif strings.HasSuffix(name, \"/\") && !strings.HasSuffix(result, \"/\") {\n\t\tresult += \"/\"\n\t}\n\treturn result\n}\n\nfunc (c *sshCommand) getRemovePath() (string, error) {\n\tsshDestPath := c.getDestPath()\n\tif sshDestPath == \"\" || len(c.args) != 1 {\n\t\terr := errors.New(\"usage sftpgo-remove \")\n\t\treturn \"\", err\n\t}\n\tif len(sshDestPath) > 1 {\n\t\tsshDestPath = strings.TrimSuffix(sshDestPath, \"/\")\n\t}\n\treturn sshDestPath, nil\n}\n\nfunc (c *sshCommand) sendErrorResponse(err error) error {\n\terrorString := fmt.Sprintf(\"%v: %v %v\\n\", c.command, c.getDestPath(), err)\n\tc.connection.channel.Write([]byte(errorString)) //nolint:errcheck\n\tc.sendExitStatus(err)\n\treturn err\n}\n\nfunc (c *sshCommand) sendExitStatus(err error) {\n\tstatus := uint32(0)\n\tvCmdPath := c.getDestPath()\n\tcmdPath := \"\"\n\ttargetPath := \"\"\n\tvTargetPath := \"\"\n\tif c.command == \"sftpgo-copy\" {\n\t\tvTargetPath = vCmdPath\n\t\tvCmdPath = c.getSourcePath()\n\t}\n\tif err != nil {\n\t\tstatus = uint32(1)\n\t\tc.connection.Log(logger.LevelError, \"command failed: %q args: %v user: %s err: %v\",\n\t\t\tc.command, c.args, c.connection.User.Username, err)\n\t}\n\texitStatus := sshSubsystemExitStatus{\n\t\tStatus: status,\n\t}\n\t_, errClose := c.connection.channel.(ssh.Channel).SendRequest(\"exit-status\", false, ssh.Marshal(&exitStatus))\n\tc.connection.Log(logger.LevelDebug, \"exit status sent, error: %v\", errClose)\n\tc.connection.channel.Close()\n\t// for scp we notify single uploads/downloads\n\tif c.command != scpCmdName {\n\t\telapsed := time.Since(c.startTime).Nanoseconds() / 1000000\n\t\tmetric.SSHCommandCompleted(err)\n\t\tif vCmdPath != \"\" {\n\t\t\t_, p, errFs := c.connection.GetFsAndResolvedPath(vCmdPath)\n\t\t\tif errFs == nil {\n\t\t\t\tcmdPath = p\n\t\t\t}\n\t\t}\n\t\tif vTargetPath != \"\" {\n\t\t\t_, p, errFs := c.connection.GetFsAndResolvedPath(vTargetPath)\n\t\t\tif errFs == nil {\n\t\t\t\ttargetPath = p\n\t\t\t}\n\t\t}\n\t\tcommon.ExecuteActionNotification(c.connection.BaseConnection, common.OperationSSHCmd, cmdPath, vCmdPath, //nolint:errcheck\n\t\t\ttargetPath, vTargetPath, c.command, 0, err, elapsed, nil)\n\t\tif err == nil {\n\t\t\tlogger.CommandLog(sshCommandLogSender, cmdPath, targetPath, c.connection.User.Username, \"\", c.connection.ID,\n\t\t\t\tcommon.ProtocolSSH, -1, -1, \"\", \"\", c.connection.command, -1, c.connection.GetLocalAddress(),\n\t\t\t\tc.connection.GetRemoteAddress(), elapsed)\n\t\t}\n\t}\n}\n\nfunc (c *sshCommand) computeHashForFile(fs vfs.Fs, hasher hash.Hash, path string) (string, error) {\n\thash := \"\"\n\tf, r, _, err := fs.Open(path, 0)\n\tif err != nil {\n\t\treturn hash, err\n\t}\n\tvar reader io.ReadCloser\n\tif f != nil {\n\t\treader = f\n\t} else {\n\t\treader = r\n\t}\n\tdefer reader.Close()\n\t_, err = io.Copy(hasher, reader)\n\tif err == nil {\n\t\thash = fmt.Sprintf(\"%x\", hasher.Sum(nil))\n\t}\n\treturn hash, err\n}\n\nfunc parseCommandPayload(command string) (string, []string, error) {\n\tparts, err := shlex.Split(command)\n\tif err == nil && len(parts) == 0 {\n\t\terr = fmt.Errorf(\"invalid command: %q\", command)\n\t}\n\tif err != nil {\n\t\treturn \"\", []string{}, err\n\t}\n\tif len(parts) < 2 {\n\t\treturn parts[0], []string{}, nil\n\t}\n\treturn parts[0], parts[1:], nil\n}\n"
},
{
"path": "internal/sftpd/transfer.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see \".\n\t// Many SMTP servers reject emails without a `From` header so, if not set,\n\t// SFTPGo will try to use the username as fallback, this may or may not be appropriate\n\tFrom string `json:\"from\" mapstructure:\"from\"`\n\t// SMTP username\n\tUser string `json:\"user\" mapstructure:\"user\"`\n\t// SMTP password. Leaving both username and password empty the SMTP authentication\n\t// will be disabled\n\tPassword string `json:\"password\" mapstructure:\"password\"`\n\t// 0 Plain\n\t// 1 Login\n\t// 2 CRAM-MD5\n\t// 3 OAuth2\n\tAuthType int `json:\"auth_type\" mapstructure:\"auth_type\"`\n\t// 0 no encryption\n\t// 1 TLS\n\t// 2 start TLS\n\tEncryption int `json:\"encryption\" mapstructure:\"encryption\"`\n\t// Domain to use for HELO command, if empty localhost will be used\n\tDomain string `json:\"domain\" mapstructure:\"domain\"`\n\t// Path to the email templates. This can be an absolute path or a path relative to the config dir.\n\t// Templates are searched within a subdirectory named \"email\" in the specified path\n\tTemplatesPath string `json:\"templates_path\" mapstructure:\"templates_path\"`\n\t// Set to 1 to enable debug logs\n\tDebug int `json:\"debug\" mapstructure:\"debug\"`\n\t// OAuth2 related settings\n\tOAuth2 OAuth2Config `json:\"oauth2\" mapstructure:\"oauth2\"`\n}\n\nfunc (c *Config) isEqual(other *Config) bool {\n\tif c.Host != other.Host {\n\t\treturn false\n\t}\n\tif c.Port != other.Port {\n\t\treturn false\n\t}\n\tif c.From != other.From {\n\t\treturn false\n\t}\n\tif c.User != other.User {\n\t\treturn false\n\t}\n\tif c.Password != other.Password {\n\t\treturn false\n\t}\n\tif c.AuthType != other.AuthType {\n\t\treturn false\n\t}\n\tif c.Encryption != other.Encryption {\n\t\treturn false\n\t}\n\tif c.Domain != other.Domain {\n\t\treturn false\n\t}\n\tif c.Debug != other.Debug {\n\t\treturn false\n\t}\n\treturn c.OAuth2.isEqual(&other.OAuth2)\n}\n\nfunc (c *Config) validate() error {\n\tif c.Port <= 0 || c.Port > 65535 {\n\t\treturn fmt.Errorf(\"smtp: invalid port %d\", c.Port)\n\t}\n\tif c.AuthType < 0 || c.AuthType > 3 {\n\t\treturn fmt.Errorf(\"smtp: invalid auth type %d\", c.AuthType)\n\t}\n\tif c.Encryption < 0 || c.Encryption > 2 {\n\t\treturn fmt.Errorf(\"smtp: invalid encryption %d\", c.Encryption)\n\t}\n\tif c.From == \"\" && c.User == \"\" {\n\t\treturn errors.New(`smtp: from address and user cannot both be empty`)\n\t}\n\tif c.AuthType == 3 {\n\t\treturn c.OAuth2.Validate()\n\t}\n\treturn nil\n}\n\nfunc (c *Config) loadTemplates(configDir string) error {\n\tif c.TemplatesPath == \"\" {\n\t\tlogger.Debug(logSender, \"\", \"templates path empty, using default\")\n\t\tc.TemplatesPath = \"templates\"\n\t}\n\ttemplatesPath := util.FindSharedDataPath(c.TemplatesPath, configDir)\n\tif templatesPath == \"\" {\n\t\treturn fmt.Errorf(\"smtp: invalid templates path %q\", templatesPath)\n\t}\n\tloadTemplates(filepath.Join(templatesPath, templateEmailDir))\n\treturn nil\n}\n\n// Initialize initializes and validates the SMTP configuration\nfunc (c *Config) Initialize(configDir string, isService bool) error {\n\tif !isService && c.Host == \"\" {\n\t\tif err := loadConfigFromProvider(); err != nil {\n\t\t\treturn err\n\t\t}\n\t\tif !config.isEnabled() {\n\t\t\treturn nil\n\t\t}\n\t\t// If not running as a service, templates will only be loaded if required.\n\t\treturn c.loadTemplates(configDir)\n\t}\n\t// In service mode SMTP can be enabled from the WebAdmin at runtime so we\n\t// always load templates.\n\tif err := c.loadTemplates(configDir); err != nil {\n\t\treturn err\n\t}\n\tif c.Host == \"\" {\n\t\treturn loadConfigFromProvider()\n\t}\n\tif err := c.validate(); err != nil {\n\t\treturn err\n\t}\n\tinitialConfig = c\n\tconfig.Set(nil)\n\tlogger.Debug(logSender, \"\", \"configuration successfully initialized, host: %q, port: %d, username: %q, auth: %d, encryption: %d, helo: %q\",\n\t\tc.Host, c.Port, c.User, c.AuthType, c.Encryption, c.Domain)\n\treturn loadConfigFromProvider()\n}\n\nfunc (c *Config) getMailClientOptions() []mail.Option {\n\toptions := []mail.Option{mail.WithPort(c.Port), mail.WithoutNoop()}\n\n\tswitch c.Encryption {\n\tcase 1:\n\t\toptions = append(options, mail.WithSSL())\n\tcase 2:\n\t\toptions = append(options, mail.WithTLSPolicy(mail.TLSMandatory))\n\tdefault:\n\t\toptions = append(options, mail.WithTLSPolicy(mail.NoTLS))\n\t}\n\tif c.User != \"\" {\n\t\toptions = append(options, mail.WithUsername(c.User))\n\t}\n\tif c.Password != \"\" {\n\t\toptions = append(options, mail.WithPassword(c.Password))\n\t}\n\tif c.User != \"\" || c.Password != \"\" {\n\t\tswitch c.AuthType {\n\t\tcase 1:\n\t\t\toptions = append(options, mail.WithSMTPAuth(mail.SMTPAuthLogin))\n\t\tcase 2:\n\t\t\toptions = append(options, mail.WithSMTPAuth(mail.SMTPAuthCramMD5))\n\t\tcase 3:\n\t\t\toptions = append(options, mail.WithSMTPAuth(mail.SMTPAuthXOAUTH2))\n\t\tdefault:\n\t\t\toptions = append(options, mail.WithSMTPAuth(mail.SMTPAuthPlain))\n\t\t}\n\t}\n\tif c.Domain != \"\" {\n\t\toptions = append(options, mail.WithHELO(c.Domain))\n\t}\n\tif c.Debug > 0 {\n\t\toptions = append(options,\n\t\t\tmail.WithLogger(&logger.MailAdapter{\n\t\t\t\tConnectionID: xid.New().String(),\n\t\t\t}),\n\t\t\tmail.WithDebugLog())\n\t}\n\treturn options\n}\n\nfunc (c *Config) getSMTPClientAndMsg(to, bcc []string, subject, body string, contentType EmailContentType,\n\tattachments ...*mail.File) (*mail.Client, *mail.Msg, error) {\n\tmsg := mail.NewMsg()\n\tmsg.SetUserAgent(version.GetServerVersion(\" \", false))\n\n\tvar from string\n\tif c.From != \"\" {\n\t\tfrom = c.From\n\t} else {\n\t\tfrom = c.User\n\t}\n\tif err := msg.From(from); err != nil {\n\t\treturn nil, nil, fmt.Errorf(\"invalid from address: %w\", err)\n\t}\n\tif err := msg.To(to...); err != nil {\n\t\treturn nil, nil, err\n\t}\n\tif len(bcc) > 0 {\n\t\tif err := msg.Bcc(bcc...); err != nil {\n\t\t\treturn nil, nil, err\n\t\t}\n\t}\n\tmsg.Subject(subject)\n\tmsg.SetDate()\n\tmsg.SetMessageID()\n\tmsg.SetAttachments(attachments)\n\n\tswitch contentType {\n\tcase EmailContentTypeTextPlain:\n\t\tmsg.SetBodyString(mail.TypeTextPlain, body)\n\tcase EmailContentTypeTextHTML:\n\t\tmsg.SetBodyString(mail.TypeTextHTML, body)\n\tdefault:\n\t\treturn nil, nil, fmt.Errorf(\"smtp: unsupported body content type %v\", contentType)\n\t}\n\n\tclient, err := mail.NewClient(c.Host, c.getMailClientOptions()...)\n\tif err != nil {\n\t\treturn nil, nil, fmt.Errorf(\"unable to create mail client: %w\", err)\n\t}\n\tif c.AuthType == 3 {\n\t\ttoken, err := c.OAuth2.getAccessToken()\n\t\tif err != nil {\n\t\t\treturn nil, nil, fmt.Errorf(\"unable to get oauth2 access token: %w\", err)\n\t\t}\n\t\tclient.SetPassword(token)\n\t}\n\treturn client, msg, nil\n}\n\n// SendEmail tries to send an email using the specified parameters\nfunc (c *Config) SendEmail(to, bcc []string, subject, body string, contentType EmailContentType, attachments ...*mail.File) error {\n\tclient, msg, err := c.getSMTPClientAndMsg(to, bcc, subject, body, contentType, attachments...)\n\tif err != nil {\n\t\treturn err\n\t}\n\tctx, cancelFn := context.WithTimeout(context.Background(), dialTimeout)\n\tdefer cancelFn()\n\n\treturn client.DialAndSendWithContext(ctx, msg)\n}\n\nfunc loadTemplates(templatesPath string) {\n\tlogger.Debug(logSender, \"\", \"loading templates from %q\", templatesPath)\n\n\tpasswordResetPath := filepath.Join(templatesPath, templatePasswordReset)\n\tpwdResetTmpl := util.LoadTemplate(nil, passwordResetPath)\n\tpasswordExpirationPath := filepath.Join(templatesPath, templatePasswordExpiration)\n\tpwdExpirationTmpl := util.LoadTemplate(nil, passwordExpirationPath)\n\n\temailTemplates[templatePasswordReset] = pwdResetTmpl\n\temailTemplates[templatePasswordExpiration] = pwdExpirationTmpl\n}\n\n// RenderPasswordResetTemplate executes the password reset template\nfunc RenderPasswordResetTemplate(buf *bytes.Buffer, data any) error {\n\tif !IsEnabled() {\n\t\treturn errors.New(\"smtp: not configured\")\n\t}\n\treturn emailTemplates[templatePasswordReset].Execute(buf, data)\n}\n\n// RenderPasswordExpirationTemplate executes the password expiration template\nfunc RenderPasswordExpirationTemplate(buf *bytes.Buffer, data any) error {\n\tif !IsEnabled() {\n\t\treturn errors.New(\"smtp: not configured\")\n\t}\n\treturn emailTemplates[templatePasswordExpiration].Execute(buf, data)\n}\n\n// SendEmail tries to send an email using the specified parameters.\nfunc SendEmail(to, bcc []string, subject, body string, contentType EmailContentType, attachments ...*mail.File) error {\n\treturn config.sendEmail(to, bcc, subject, body, contentType, attachments...)\n}\n\nfunc loadConfigFromProvider() error {\n\tconfigs, err := dataprovider.GetConfigs()\n\tif err != nil {\n\t\tlogger.Error(logSender, \"\", \"unable to load config from provider: %v\", err)\n\t\treturn fmt.Errorf(\"smtp: unable to load config from provider: %w\", err)\n\t}\n\tconfigs.SetNilsToEmpty()\n\tif err := configs.SMTP.TryDecrypt(); err != nil {\n\t\tlogger.Error(logSender, \"\", \"unable to decrypt smtp config: %v\", err)\n\t\treturn fmt.Errorf(\"smtp: unable to decrypt smtp config: %w\", err)\n\t}\n\tconfig.Set(configs.SMTP)\n\treturn nil\n}\n\nfunc updateRefreshToken(token string) {\n\tconfigs, err := dataprovider.GetConfigs()\n\tif err != nil {\n\t\tlogger.Error(logSender, \"\", \"unable to load config from provider, updating refresh token not possible: %v\", err)\n\t\treturn\n\t}\n\tconfigs.SetNilsToEmpty()\n\tif configs.SMTP.IsEmpty() {\n\t\tlogger.Warn(logSender, \"\", \"unable to update refresh token, smtp not configured in the data provider\")\n\t\treturn\n\t}\n\tconfigs.SMTP.OAuth2.RefreshToken = kms.NewPlainSecret(token)\n\tif err := dataprovider.UpdateConfigs(&configs, dataprovider.ActionExecutorSystem, \"\", \"\"); err != nil {\n\t\tlogger.Error(logSender, \"\", \"unable to save new refresh token: %v\", err)\n\t\treturn\n\t}\n\tlogger.Info(logSender, \"\", \"refresh token updated\")\n}\n"
},
{
"path": "internal/telemetry/router.go",
"content": "// Copyright (C) 2019 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see \\\"\"\n)\n\n// MaxRecursion defines the maximum number of allowed recursions\nconst MaxRecursion = 1000\n\n// errors definitions\nvar (\n\tErrValidation = NewValidationError(\"\")\n\tErrNotFound = NewRecordNotFoundError(\"\")\n\tErrMethodDisabled = NewMethodDisabledError(\"\")\n\tErrGeneric = NewGenericError(\"\")\n\tErrRecursionTooDeep = errors.New(\"recursion too deep\")\n)\n\n// ValidationError raised if input data is not valid\ntype ValidationError struct {\n\terr string\n}\n\n// Validation error details\nfunc (e *ValidationError) Error() string {\n\treturn fmt.Sprintf(\"Validation error: %s\", e.err)\n}\n\n// GetErrorString returns the unmodified error string\nfunc (e *ValidationError) GetErrorString() string {\n\treturn e.err\n}\n\n// Is reports if target matches\nfunc (e *ValidationError) Is(target error) bool {\n\t_, ok := target.(*ValidationError)\n\treturn ok\n}\n\n// NewValidationError returns a validation errors\nfunc NewValidationError(errorString string) *ValidationError {\n\treturn &ValidationError{\n\t\terr: errorString,\n\t}\n}\n\n// RecordNotFoundError raised if a requested object is not found\ntype RecordNotFoundError struct {\n\terr string\n}\n\nfunc (e *RecordNotFoundError) Error() string {\n\treturn fmt.Sprintf(\"not found: %s\", e.err)\n}\n\n// Is reports if target matches\nfunc (e *RecordNotFoundError) Is(target error) bool {\n\t_, ok := target.(*RecordNotFoundError)\n\treturn ok\n}\n\n// NewRecordNotFoundError returns a not found error\nfunc NewRecordNotFoundError(errorString string) *RecordNotFoundError {\n\treturn &RecordNotFoundError{\n\t\terr: errorString,\n\t}\n}\n\n// MethodDisabledError raised if a method is disabled in config file.\n// For example, if user management is disabled, this error is raised\n// every time a user operation is done using the REST API\ntype MethodDisabledError struct {\n\terr string\n}\n\n// Method disabled error details\nfunc (e *MethodDisabledError) Error() string {\n\treturn fmt.Sprintf(\"Method disabled error: %s\", e.err)\n}\n\n// Is reports if target matches\nfunc (e *MethodDisabledError) Is(target error) bool {\n\t_, ok := target.(*MethodDisabledError)\n\treturn ok\n}\n\n// NewMethodDisabledError returns a method disabled error\nfunc NewMethodDisabledError(errorString string) *MethodDisabledError {\n\treturn &MethodDisabledError{\n\t\terr: errorString,\n\t}\n}\n\n// GenericError raised for not well categorized error\ntype GenericError struct {\n\terr string\n}\n\nfunc (e *GenericError) Error() string {\n\treturn e.err\n}\n\n// Is reports if target matches\nfunc (e *GenericError) Is(target error) bool {\n\t_, ok := target.(*GenericError)\n\treturn ok\n}\n\n// NewGenericError returns a generic error\nfunc NewGenericError(errorString string) *GenericError {\n\treturn &GenericError{\n\t\terr: errorString,\n\t}\n}\n"
},
{
"path": "internal/util/i18n.go",
"content": "// Copyright (C) 2023 Nicola Murino\n//\n// This program is free software: you can redistribute it and/or modify\n// it under the terms of the GNU Affero General Public License as published\n// by the Free Software Foundation, version 3.\n//\n// This program is distributed in the hope that it will be useful,\n// but WITHOUT ANY WARRANTY; without even the implied warranty of\n// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n// GNU Affero General Public License for more details.\n//\n// You should have received a copy of the GNU Affero General Public License\n// along with this program. If not, see .* `)\n\tlockToken := string(re.Find(response))\n\tlockToken = strings.Replace(lockToken, \"\", \"\", 1)\n\tlockToken = strings.Replace(lockToken, \" \", \"\", 1)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\n\treq, err = http.NewRequest(http.MethodDelete, fmt.Sprintf(\"http://%v/%v\", webDavServerAddr, testFileName), nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"If\", fmt.Sprintf(\"(%v)\", lockToken))\n\treq.SetBasicAuth(u.Username, u.Password)\n\tresp, err = httpClient.Do(req)\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.StatusNoContent, resp.StatusCode)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\t// if we try to lock again it must succeed, the lock must be deleted with the object\n\treq, err = http.NewRequest(\"LOCK\", fmt.Sprintf(\"http://%v/%v\", webDavServerAddr, testFileName), bytes.NewReader([]byte(lockBody)))\n\tassert.NoError(t, err)\n\treq.SetBasicAuth(u.Username, u.Password)\n\tresp, err = httpClient.Do(req)\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.StatusCreated, resp.StatusCode)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestMtimeHeader(t *testing.T) {\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tclient := getWebDavClient(user, false, nil)\n\tassert.NoError(t, checkBasicFunc(client))\n\ttestFilePath := filepath.Join(homeBasePath, testFileName)\n\ttestFileSize := int64(65535)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\terr = uploadFileWithRawClient(testFilePath, testFileName, user.Username, defaultPassword,\n\t\tfalse, testFileSize, client, dataprovider.KeyValue{Key: ocMtimeHeader, Value: \"1668879480\"})\n\tassert.NoError(t, err)\n\t// check the modification time\n\tinfo, err := client.Stat(testFileName)\n\tif assert.NoError(t, err) {\n\t\tassert.Equal(t, time.Unix(1668879480, 0).UTC(), info.ModTime().UTC())\n\t}\n\t// test on overwrite\n\terr = uploadFileWithRawClient(testFilePath, testFileName, user.Username, defaultPassword,\n\t\tfalse, testFileSize, client, dataprovider.KeyValue{Key: ocMtimeHeader, Value: \"1667879480\"})\n\tassert.NoError(t, err)\n\tinfo, err = client.Stat(testFileName)\n\tif assert.NoError(t, err) {\n\t\tassert.Equal(t, time.Unix(1667879480, 0).UTC(), info.ModTime().UTC())\n\t}\n\t// invalid time will be silently ignored and the time set to now\n\terr = uploadFileWithRawClient(testFilePath, testFileName, user.Username, defaultPassword,\n\t\tfalse, testFileSize, client, dataprovider.KeyValue{Key: ocMtimeHeader, Value: \"not unix time\"})\n\tassert.NoError(t, err)\n\tinfo, err = client.Stat(testFileName)\n\tif assert.NoError(t, err) {\n\t\tassert.NotEqual(t, time.Unix(1667879480, 0).UTC(), info.ModTime().UTC())\n\t}\n\n\treq, err := http.NewRequest(\"MOVE\", fmt.Sprintf(\"http://%v/%v\", webDavServerAddr, testFileName), nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"Overwrite\", \"T\")\n\treq.Header.Set(\"Destination\", path.Join(\"/\", testFileName+\"rename\"))\n\treq.Header.Set(ocMtimeHeader, \"1666779480\")\n\treq.SetBasicAuth(u.Username, u.Password)\n\thttpClient := httpclient.GetHTTPClient()\n\tresp, err := httpClient.Do(req)\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.StatusCreated, resp.StatusCode)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\t// check the modification time\n\tinfo, err = client.Stat(testFileName + \"rename\")\n\tif assert.NoError(t, err) {\n\t\tassert.Equal(t, time.Unix(1666779480, 0).UTC(), info.ModTime().UTC())\n\t}\n\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestRenameWithLock(t *testing.T) {\n\tu := getTestUser()\n\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\n\tclient := getWebDavClient(user, false, nil)\n\tassert.NoError(t, checkBasicFunc(client))\n\ttestFilePath := filepath.Join(homeBasePath, testFileName)\n\ttestFileSize := int64(65535)\n\terr = createTestFile(testFilePath, testFileSize)\n\tassert.NoError(t, err)\n\terr = uploadFileWithRawClient(testFilePath, testFileName, user.Username, defaultPassword,\n\t\tfalse, testFileSize, client)\n\tassert.NoError(t, err)\n\n\tlockBody := `.* `)\n\tlockToken := string(re.Find(response))\n\tlockToken = strings.Replace(lockToken, \"\", \"\", 1)\n\tlockToken = strings.Replace(lockToken, \" \", \"\", 1)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\t// MOVE with a lock should succeeded\n\treq, err = http.NewRequest(\"MOVE\", fmt.Sprintf(\"http://%v/%v\", webDavServerAddr, testFileName), nil)\n\tassert.NoError(t, err)\n\treq.Header.Set(\"If\", fmt.Sprintf(\"(%v)\", lockToken))\n\treq.Header.Set(\"Overwrite\", \"T\")\n\treq.Header.Set(\"Destination\", path.Join(\"/\", testFileName+\"1\"))\n\treq.SetBasicAuth(u.Username, u.Password)\n\tresp, err = httpClient.Do(req)\n\tassert.NoError(t, err)\n\tassert.Equal(t, http.StatusCreated, resp.StatusCode)\n\terr = resp.Body.Close()\n\tassert.NoError(t, err)\n\n\terr = os.Remove(testFilePath)\n\tassert.NoError(t, err)\n\t_, err = httpdtest.RemoveUser(user, http.StatusOK)\n\tassert.NoError(t, err)\n\terr = os.RemoveAll(user.GetHomeDir())\n\tassert.NoError(t, err)\n}\n\nfunc TestPropPatch(t *testing.T) {\n\tu := getTestUser()\n\tu.Username = u.Username + \"1\"\n\tlocalUser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\tassert.NoError(t, err)\n\tsftpUser := getTestSFTPUser()\n\tsftpUser.FsConfig.SFTPConfig.Username = localUser.Username\n\n\tfor _, u := range []dataprovider.User{getTestUser(), getTestUserWithCryptFs(), sftpUser} {\n\t\tuser, _, err := httpdtest.AddUser(u, http.StatusCreated)\n\t\tassert.NoError(t, err)\n\t\tclient := getWebDavClient(user, true, nil)\n\t\tassert.NoError(t, checkBasicFunc(client), sftpUser.Username)\n\n\t\ttestFilePath := filepath.Join(homeBasePath, testFileName)\n\t\ttestFileSize := int64(65535)\n\t\terr = createTestFile(testFilePath, testFileSize)\n\t\tassert.NoError(t, err)\n\t\terr = uploadFileWithRawClient(testFilePath, testFileName, user.Username, defaultPassword,\n\t\t\tfalse, testFileSize, client)\n\t\tassert.NoError(t, err)\n\t\thttpClient := httpclient.GetHTTPClient()\n\t\tpropatchBody := `Wed, 04 Nov 2020 13:25:51 GMT Sat, 05 Dec 2020 21:16:12 GMT Wed, 04 Nov 2020 13:25:51 GMT 00000000 Wed, 04 Nov 2020 13:25:51 GMT Sat, 05 Dec 2020 21:16:12 GMT Wid, 04 Nov 2020 13:25:51 GMT 00000000 Swagger UI \n
\n \n \n \n \n\n"
},
{
"path": "openapi/swagger-ui/swagger-initializer.js",
"content": "window.onload = function() {\n //\n\n // the following lines will be replaced by docker/configurator, when it runs in a docker-container\n window.ui = SwaggerUIBundle({\n url: \"../openapi.yaml\",\n dom_id: '#swagger-ui',\n deepLinking: true,\n presets: [\n SwaggerUIBundle.presets.apis,\n SwaggerUIStandalonePreset\n ],\n plugins: [\n SwaggerUIBundle.plugins.DownloadUrl\n ],\n layout: \"StandaloneLayout\"\n });\n\n // \n};\n"
},
{
"path": "openapi/swagger-ui/swagger-ui-bundle.js",
"content": "/*! For license information please see swagger-ui-bundle.js.LICENSE.txt */\n!function webpackUniversalModuleDefinition(s,o){\"object\"==typeof exports&&\"object\"==typeof module?module.exports=o():\"function\"==typeof define&&define.amd?define([],o):\"object\"==typeof exports?exports.SwaggerUIBundle=o():s.SwaggerUIBundle=o()}(this,(()=>(()=>{var s={251:(s,o)=>{o.read=function(s,o,i,a,u){var _,w,x=8*u-a-1,C=(1<>1,L=-7,B=i?u-1:0,$=i?-1:1,U=s[o+B];for(B+=$,_=U&(1<<-L)-1,U>>=-L,L+=x;L>0;_=256*_+s[o+B],B+=$,L-=8);for(w=_&(1<<-L)-1,_>>=-L,L+=a;L>0;w=256*w+s[o+B],B+=$,L-=8);if(0===_)_=1-j;else{if(_===C)return w?NaN:1/0*(U?-1:1);w+=Math.pow(2,a),_-=j}return(U?-1:1)*w*Math.pow(2,_-a)},o.write=function(s,o,i,a,u,_){var w,x,C,j=8*_-u-1,L=(1<>1,$=23===u?Math.pow(2,-24)-Math.pow(2,-77):0,U=a?0:_-1,V=a?1:-1,z=o<0||0===o&&1/o<0?1:0;for(o=Math.abs(o),isNaN(o)||o===1/0?(x=isNaN(o)?1:0,w=L):(w=Math.floor(Math.log(o)/Math.LN2),o*(C=Math.pow(2,-w))<1&&(w--,C*=2),(o+=w+B>=1?$/C:$*Math.pow(2,1-B))*C>=2&&(w++,C/=2),w+B>=L?(x=0,w=L):w+B>=1?(x=(o*C-1)*Math.pow(2,u),w+=B):(x=o*Math.pow(2,B-1)*Math.pow(2,u),w=0));u>=8;s[i+U]=255&x,U+=V,x/=256,u-=8);for(w=w<0;s[i+U]=255&w,U+=V,w/=256,j-=8);s[i+U-V]|=128*z}},462:(s,o,i)=>{\"use strict\";var a=i(40975);s.exports=a},659:(s,o,i)=>{var a=i(51873),u=Object.prototype,_=u.hasOwnProperty,w=u.toString,x=a?a.toStringTag:void 0;s.exports=function getRawTag(s){var o=_.call(s,x),i=s[x];try{s[x]=void 0;var a=!0}catch(s){}var u=w.call(s);return a&&(o?s[x]=i:delete s[x]),u}},694:(s,o,i)=>{\"use strict\";i(91599);var a=i(37257);i(12560),s.exports=a},953:(s,o,i)=>{\"use strict\";s.exports=i(53375)},1733:s=>{var o=/[^\\x00-\\x2f\\x3a-\\x40\\x5b-\\x60\\x7b-\\x7f]+/g;s.exports=function asciiWords(s){return s.match(o)||[]}},1882:(s,o,i)=>{var a=i(72552),u=i(23805);s.exports=function isFunction(s){if(!u(s))return!1;var o=a(s);return\"[object Function]\"==o||\"[object GeneratorFunction]\"==o||\"[object AsyncFunction]\"==o||\"[object Proxy]\"==o}},1907:(s,o,i)=>{\"use strict\";var a=i(41505),u=Function.prototype,_=u.call,w=a&&u.bind.bind(_,_);s.exports=a?w:function(s){return function(){return _.apply(s,arguments)}}},2205:function(s,o,i){var a;a=void 0!==i.g?i.g:this,s.exports=function(s){if(s.CSS&&s.CSS.escape)return s.CSS.escape;var cssEscape=function(s){if(0==arguments.length)throw new TypeError(\"`CSS.escape` requires an argument.\");for(var o,i=String(s),a=i.length,u=-1,_=\"\",w=i.charCodeAt(0);++u=1&&o<=31||127==o||0==u&&o>=48&&o<=57||1==u&&o>=48&&o<=57&&45==w?\"\\\\\"+o.toString(16)+\" \":0==u&&1==a&&45==o||!(o>=128||45==o||95==o||o>=48&&o<=57||o>=65&&o<=90||o>=97&&o<=122)?\"\\\\\"+i.charAt(u):i.charAt(u):_+=\"�\";return _};return s.CSS||(s.CSS={}),s.CSS.escape=cssEscape,cssEscape}(a)},2209:(s,o,i)=>{\"use strict\";var a,u=i(9404),_=function productionTypeChecker(){invariant(!1,\"ImmutablePropTypes type checking code is stripped in production.\")};_.isRequired=_;var w=function getProductionTypeChecker(){return _};function getPropType(s){var o=typeof s;return Array.isArray(s)?\"array\":s instanceof RegExp?\"object\":s instanceof u.Iterable?\"Immutable.\"+s.toSource().split(\" \")[0]:o}function createChainableTypeChecker(s){function checkType(o,i,a,u,_,w){for(var x=arguments.length,C=Array(x>6?x-6:0),j=6;j>\",null!=i[a]?s.apply(void 0,[i,a,u,_,w].concat(C)):o?new Error(\"Required \"+_+\" `\"+w+\"` was not specified in `\"+u+\"`.\"):void 0}var o=checkType.bind(null,!1);return o.isRequired=checkType.bind(null,!0),o}function createIterableSubclassTypeChecker(s,o){return function createImmutableTypeChecker(s,o){return createChainableTypeChecker((function validate(i,a,u,_,w){var x=i[a];if(!o(x)){var C=getPropType(x);return new Error(\"Invalid \"+_+\" `\"+w+\"` of type `\"+C+\"` supplied to `\"+u+\"`, expected `\"+s+\"`.\")}return null}))}(\"Iterable.\"+s,(function(s){return u.Iterable.isIterable(s)&&o(s)}))}(a={listOf:w,mapOf:w,orderedMapOf:w,setOf:w,orderedSetOf:w,stackOf:w,iterableOf:w,recordOf:w,shape:w,contains:w,mapContains:w,orderedMapContains:w,list:_,map:_,orderedMap:_,set:_,orderedSet:_,stack:_,seq:_,record:_,iterable:_}).iterable.indexed=createIterableSubclassTypeChecker(\"Indexed\",u.Iterable.isIndexed),a.iterable.keyed=createIterableSubclassTypeChecker(\"Keyed\",u.Iterable.isKeyed),s.exports=a},2404:(s,o,i)=>{var a=i(60270);s.exports=function isEqual(s,o){return a(s,o)}},2523:s=>{s.exports=function baseFindIndex(s,o,i,a){for(var u=s.length,_=i+(a?1:-1);a?_--:++_{\"use strict\";var a=i(45951),u=Object.defineProperty;s.exports=function(s,o){try{u(a,s,{value:o,configurable:!0,writable:!0})}catch(i){a[s]=o}return o}},2694:(s,o,i)=>{\"use strict\";var a=i(6925);function emptyFunction(){}function emptyFunctionWithReset(){}emptyFunctionWithReset.resetWarningCache=emptyFunction,s.exports=function(){function shim(s,o,i,u,_,w){if(w!==a){var x=new Error(\"Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types\");throw x.name=\"Invariant Violation\",x}}function getShim(){return shim}shim.isRequired=shim;var s={array:shim,bigint:shim,bool:shim,func:shim,number:shim,object:shim,string:shim,symbol:shim,any:shim,arrayOf:getShim,element:shim,elementType:shim,instanceOf:getShim,node:shim,objectOf:getShim,oneOf:getShim,oneOfType:getShim,shape:getShim,exact:getShim,checkPropTypes:emptyFunctionWithReset,resetWarningCache:emptyFunction};return s.PropTypes=s,s}},2874:s=>{s.exports={}},2875:(s,o,i)=>{\"use strict\";var a=i(23045),u=i(80376);s.exports=Object.keys||function keys(s){return a(s,u)}},2955:(s,o,i)=>{\"use strict\";var a,u=i(65606);function _defineProperty(s,o,i){return(o=function _toPropertyKey(s){var o=function _toPrimitive(s,o){if(\"object\"!=typeof s||null===s)return s;var i=s[Symbol.toPrimitive];if(void 0!==i){var a=i.call(s,o||\"default\");if(\"object\"!=typeof a)return a;throw new TypeError(\"@@toPrimitive must return a primitive value.\")}return(\"string\"===o?String:Number)(s)}(s,\"string\");return\"symbol\"==typeof o?o:String(o)}(o))in s?Object.defineProperty(s,o,{value:i,enumerable:!0,configurable:!0,writable:!0}):s[o]=i,s}var _=i(86238),w=Symbol(\"lastResolve\"),x=Symbol(\"lastReject\"),C=Symbol(\"error\"),j=Symbol(\"ended\"),L=Symbol(\"lastPromise\"),B=Symbol(\"handlePromise\"),$=Symbol(\"stream\");function createIterResult(s,o){return{value:s,done:o}}function readAndResolve(s){var o=s[w];if(null!==o){var i=s[$].read();null!==i&&(s[L]=null,s[w]=null,s[x]=null,o(createIterResult(i,!1)))}}function onReadable(s){u.nextTick(readAndResolve,s)}var U=Object.getPrototypeOf((function(){})),V=Object.setPrototypeOf((_defineProperty(a={get stream(){return this[$]},next:function next(){var s=this,o=this[C];if(null!==o)return Promise.reject(o);if(this[j])return Promise.resolve(createIterResult(void 0,!0));if(this[$].destroyed)return new Promise((function(o,i){u.nextTick((function(){s[C]?i(s[C]):o(createIterResult(void 0,!0))}))}));var i,a=this[L];if(a)i=new Promise(function wrapForNext(s,o){return function(i,a){s.then((function(){o[j]?i(createIterResult(void 0,!0)):o[B](i,a)}),a)}}(a,this));else{var _=this[$].read();if(null!==_)return Promise.resolve(createIterResult(_,!1));i=new Promise(this[B])}return this[L]=i,i}},Symbol.asyncIterator,(function(){return this})),_defineProperty(a,\"return\",(function _return(){var s=this;return new Promise((function(o,i){s[$].destroy(null,(function(s){s?i(s):o(createIterResult(void 0,!0))}))}))})),a),U);s.exports=function createReadableStreamAsyncIterator(s){var o,i=Object.create(V,(_defineProperty(o={},$,{value:s,writable:!0}),_defineProperty(o,w,{value:null,writable:!0}),_defineProperty(o,x,{value:null,writable:!0}),_defineProperty(o,C,{value:null,writable:!0}),_defineProperty(o,j,{value:s._readableState.endEmitted,writable:!0}),_defineProperty(o,B,{value:function value(s,o){var a=i[$].read();a?(i[L]=null,i[w]=null,i[x]=null,s(createIterResult(a,!1))):(i[w]=s,i[x]=o)},writable:!0}),o));return i[L]=null,_(s,(function(s){if(s&&\"ERR_STREAM_PREMATURE_CLOSE\"!==s.code){var o=i[x];return null!==o&&(i[L]=null,i[w]=null,i[x]=null,o(s)),void(i[C]=s)}var a=i[w];null!==a&&(i[L]=null,i[w]=null,i[x]=null,a(createIterResult(void 0,!0))),i[j]=!0})),s.on(\"readable\",onReadable.bind(null,i)),i}},3110:(s,o,i)=>{const a=i(5187),u=i(85015),_=i(98023),w=i(53812),x=i(23805),C=i(85105),j=i(86804);class Namespace{constructor(s){this.elementMap={},this.elementDetection=[],this.Element=j.Element,this.KeyValuePair=j.KeyValuePair,s&&s.noDefault||this.useDefault(),this._attributeElementKeys=[],this._attributeElementArrayKeys=[]}use(s){return s.namespace&&s.namespace({base:this}),s.load&&s.load({base:this}),this}useDefault(){return this.register(\"null\",j.NullElement).register(\"string\",j.StringElement).register(\"number\",j.NumberElement).register(\"boolean\",j.BooleanElement).register(\"array\",j.ArrayElement).register(\"object\",j.ObjectElement).register(\"member\",j.MemberElement).register(\"ref\",j.RefElement).register(\"link\",j.LinkElement),this.detect(a,j.NullElement,!1).detect(u,j.StringElement,!1).detect(_,j.NumberElement,!1).detect(w,j.BooleanElement,!1).detect(Array.isArray,j.ArrayElement,!1).detect(x,j.ObjectElement,!1),this}register(s,o){return this._elements=void 0,this.elementMap[s]=o,this}unregister(s){return this._elements=void 0,delete this.elementMap[s],this}detect(s,o,i){return void 0===i||i?this.elementDetection.unshift([s,o]):this.elementDetection.push([s,o]),this}toElement(s){if(s instanceof this.Element)return s;let o;for(let i=0;i{const o=s[0].toUpperCase()+s.substr(1);this._elements[o]=this.elementMap[s]}))),this._elements}get serialiser(){return new C(this)}}C.prototype.Namespace=Namespace,s.exports=Namespace},3121:(s,o,i)=>{\"use strict\";var a=i(65482),u=Math.min;s.exports=function(s){var o=a(s);return o>0?u(o,9007199254740991):0}},3209:(s,o,i)=>{var a=i(91596),u=i(53320),_=i(36306),w=\"__lodash_placeholder__\",x=128,C=Math.min;s.exports=function mergeData(s,o){var i=s[1],j=o[1],L=i|j,B=L<131,$=j==x&&8==i||j==x&&256==i&&s[7].length<=o[8]||384==j&&o[7].length<=o[8]&&8==i;if(!B&&!$)return s;1&j&&(s[2]=o[2],L|=1&i?0:4);var U=o[3];if(U){var V=s[3];s[3]=V?a(V,U,o[4]):U,s[4]=V?_(s[3],w):o[4]}return(U=o[5])&&(V=s[5],s[5]=V?u(V,U,o[6]):U,s[6]=V?_(s[5],w):o[6]),(U=o[7])&&(s[7]=U),j&x&&(s[8]=null==s[8]?o[8]:C(s[8],o[8])),null==s[9]&&(s[9]=o[9]),s[0]=o[0],s[1]=L,s}},3650:(s,o,i)=>{var a=i(74335)(Object.keys,Object);s.exports=a},3656:(s,o,i)=>{s=i.nmd(s);var a=i(9325),u=i(89935),_=o&&!o.nodeType&&o,w=_&&s&&!s.nodeType&&s,x=w&&w.exports===_?a.Buffer:void 0,C=(x?x.isBuffer:void 0)||u;s.exports=C},4509:(s,o,i)=>{var a=i(12651);s.exports=function mapCacheHas(s){return a(this,s).has(s)}},4640:s=>{\"use strict\";var o=String;s.exports=function(s){try{return o(s)}catch(s){return\"Object\"}}},4664:(s,o,i)=>{var a=i(79770),u=i(63345),_=Object.prototype.propertyIsEnumerable,w=Object.getOwnPropertySymbols,x=w?function(s){return null==s?[]:(s=Object(s),a(w(s),(function(o){return _.call(s,o)})))}:u;s.exports=x},4901:(s,o,i)=>{var a=i(72552),u=i(30294),_=i(40346),w={};w[\"[object Float32Array]\"]=w[\"[object Float64Array]\"]=w[\"[object Int8Array]\"]=w[\"[object Int16Array]\"]=w[\"[object Int32Array]\"]=w[\"[object Uint8Array]\"]=w[\"[object Uint8ClampedArray]\"]=w[\"[object Uint16Array]\"]=w[\"[object Uint32Array]\"]=!0,w[\"[object Arguments]\"]=w[\"[object Array]\"]=w[\"[object ArrayBuffer]\"]=w[\"[object Boolean]\"]=w[\"[object DataView]\"]=w[\"[object Date]\"]=w[\"[object Error]\"]=w[\"[object Function]\"]=w[\"[object Map]\"]=w[\"[object Number]\"]=w[\"[object Object]\"]=w[\"[object RegExp]\"]=w[\"[object Set]\"]=w[\"[object String]\"]=w[\"[object WeakMap]\"]=!1,s.exports=function baseIsTypedArray(s){return _(s)&&u(s.length)&&!!w[a(s)]}},4993:(s,o,i)=>{\"use strict\";var a=i(16946),u=i(74239);s.exports=function(s){return a(u(s))}},5187:s=>{s.exports=function isNull(s){return null===s}},5419:s=>{s.exports=function(s,o,i,a){var u=new Blob(void 0!==a?[a,s]:[s],{type:i||\"application/octet-stream\"});if(void 0!==window.navigator.msSaveBlob)window.navigator.msSaveBlob(u,o);else{var _=window.URL&&window.URL.createObjectURL?window.URL.createObjectURL(u):window.webkitURL.createObjectURL(u),w=document.createElement(\"a\");w.style.display=\"none\",w.href=_,w.setAttribute(\"download\",o),void 0===w.download&&w.setAttribute(\"target\",\"_blank\"),document.body.appendChild(w),w.click(),setTimeout((function(){document.body.removeChild(w),window.URL.revokeObjectURL(_)}),200)}}},5556:(s,o,i)=>{s.exports=i(2694)()},5861:(s,o,i)=>{var a=i(55580),u=i(68223),_=i(32804),w=i(76545),x=i(28303),C=i(72552),j=i(47473),L=\"[object Map]\",B=\"[object Promise]\",$=\"[object Set]\",U=\"[object WeakMap]\",V=\"[object DataView]\",z=j(a),Y=j(u),Z=j(_),ee=j(w),ie=j(x),ae=C;(a&&ae(new a(new ArrayBuffer(1)))!=V||u&&ae(new u)!=L||_&&ae(_.resolve())!=B||w&&ae(new w)!=$||x&&ae(new x)!=U)&&(ae=function(s){var o=C(s),i=\"[object Object]\"==o?s.constructor:void 0,a=i?j(i):\"\";if(a)switch(a){case z:return V;case Y:return L;case Z:return B;case ee:return $;case ie:return U}return o}),s.exports=ae},6048:s=>{s.exports=function negate(s){if(\"function\"!=typeof s)throw new TypeError(\"Expected a function\");return function(){var o=arguments;switch(o.length){case 0:return!s.call(this);case 1:return!s.call(this,o[0]);case 2:return!s.call(this,o[0],o[1]);case 3:return!s.call(this,o[0],o[1],o[2])}return!s.apply(this,o)}}},6188:s=>{\"use strict\";s.exports=Math.max},6205:s=>{s.exports={ROOT:0,GROUP:1,POSITION:2,SET:3,RANGE:4,REPETITION:5,REFERENCE:6,CHAR:7}},6233:(s,o,i)=>{const a=i(6048),u=i(10316),_=i(92340);class ArrayElement extends u{constructor(s,o,i){super(s||[],o,i),this.element=\"array\"}primitive(){return\"array\"}get(s){return this.content[s]}getValue(s){const o=this.get(s);if(o)return o.toValue()}getIndex(s){return this.content[s]}set(s,o){return this.content[s]=this.refract(o),this}remove(s){const o=this.content.splice(s,1);return o.length?o[0]:null}map(s,o){return this.content.map(s,o)}flatMap(s,o){return this.map(s,o).reduce(((s,o)=>s.concat(o)),[])}compactMap(s,o){const i=[];return this.forEach((a=>{const u=s.bind(o)(a);u&&i.push(u)})),i}filter(s,o){return new _(this.content.filter(s,o))}reject(s,o){return this.filter(a(s),o)}reduce(s,o){let i,a;void 0!==o?(i=0,a=this.refract(o)):(i=1,a=\"object\"===this.primitive()?this.first.value:this.first);for(let o=i;o{s.bind(o)(i,this.refract(a))}))}shift(){return this.content.shift()}unshift(s){this.content.unshift(this.refract(s))}push(s){return this.content.push(this.refract(s)),this}add(s){this.push(s)}findElements(s,o){const i=o||{},a=!!i.recursive,u=void 0===i.results?[]:i.results;return this.forEach(((o,i,_)=>{a&&void 0!==o.findElements&&o.findElements(s,{results:u,recursive:a}),s(o,i,_)&&u.push(o)})),u}find(s){return new _(this.findElements(s,{recursive:!0}))}findByElement(s){return this.find((o=>o.element===s))}findByClass(s){return this.find((o=>o.classes.includes(s)))}getById(s){return this.find((o=>o.id.toValue()===s)).first}includes(s){return this.content.some((o=>o.equals(s)))}contains(s){return this.includes(s)}empty(){return new this.constructor([])}\"fantasy-land/empty\"(){return this.empty()}concat(s){return new this.constructor(this.content.concat(s.content))}\"fantasy-land/concat\"(s){return this.concat(s)}\"fantasy-land/map\"(s){return new this.constructor(this.map(s))}\"fantasy-land/chain\"(s){return this.map((o=>s(o)),this).reduce(((s,o)=>s.concat(o)),this.empty())}\"fantasy-land/filter\"(s){return new this.constructor(this.content.filter(s))}\"fantasy-land/reduce\"(s,o){return this.content.reduce(s,o)}get length(){return this.content.length}get isEmpty(){return 0===this.content.length}get first(){return this.getIndex(0)}get second(){return this.getIndex(1)}get last(){return this.getIndex(this.length-1)}}ArrayElement.empty=function empty(){return new this},ArrayElement[\"fantasy-land/empty\"]=ArrayElement.empty,\"undefined\"!=typeof Symbol&&(ArrayElement.prototype[Symbol.iterator]=function symbol(){return this.content[Symbol.iterator]()}),s.exports=ArrayElement},6499:(s,o,i)=>{\"use strict\";var a=i(1907),u=0,_=Math.random(),w=a(1..toString);s.exports=function(s){return\"Symbol(\"+(void 0===s?\"\":s)+\")_\"+w(++u+_,36)}},6549:s=>{\"use strict\";s.exports=Object.getOwnPropertyDescriptor},6925:s=>{\"use strict\";s.exports=\"SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED\"},7057:(s,o,i)=>{\"use strict\";var a=i(11470).charAt,u=i(90160),_=i(64932),w=i(60183),x=i(59550),C=\"String Iterator\",j=_.set,L=_.getterFor(C);w(String,\"String\",(function(s){j(this,{type:C,string:u(s),index:0})}),(function next(){var s,o=L(this),i=o.string,u=o.index;return u>=i.length?x(void 0,!0):(s=a(i,u),o.index+=s.length,x(s,!1))}))},7176:(s,o,i)=>{\"use strict\";var a,u=i(73126),_=i(75795);try{a=[].__proto__===Array.prototype}catch(s){if(!s||\"object\"!=typeof s||!(\"code\"in s)||\"ERR_PROTO_ACCESS\"!==s.code)throw s}var w=!!a&&_&&_(Object.prototype,\"__proto__\"),x=Object,C=x.getPrototypeOf;s.exports=w&&\"function\"==typeof w.get?u([w.get]):\"function\"==typeof C&&function getDunder(s){return C(null==s?s:x(s))}},7309:(s,o,i)=>{var a=i(62006)(i(24713));s.exports=a},7376:s=>{\"use strict\";s.exports=!0},7463:(s,o,i)=>{\"use strict\";var a=i(98828),u=i(62250),_=/#|\\.prototype\\./,isForced=function(s,o){var i=x[w(s)];return i===j||i!==C&&(u(o)?a(o):!!o)},w=isForced.normalize=function(s){return String(s).replace(_,\".\").toLowerCase()},x=isForced.data={},C=isForced.NATIVE=\"N\",j=isForced.POLYFILL=\"P\";s.exports=isForced},7666:(s,o,i)=>{var a=i(84851),u=i(953);function _extends(){var o;return s.exports=_extends=a?u(o=a).call(o):function(s){for(var o=1;o{const a=i(6205);o.wordBoundary=()=>({type:a.POSITION,value:\"b\"}),o.nonWordBoundary=()=>({type:a.POSITION,value:\"B\"}),o.begin=()=>({type:a.POSITION,value:\"^\"}),o.end=()=>({type:a.POSITION,value:\"$\"})},8068:s=>{\"use strict\";var o=(()=>{var s=Object.defineProperty,o=Object.getOwnPropertyDescriptor,i=Object.getOwnPropertyNames,a=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,_=Object.prototype.propertyIsEnumerable,__defNormalProp=(o,i,a)=>i in o?s(o,i,{enumerable:!0,configurable:!0,writable:!0,value:a}):o[i]=a,__spreadValues=(s,o)=>{for(var i in o||(o={}))u.call(o,i)&&__defNormalProp(s,i,o[i]);if(a)for(var i of a(o))_.call(o,i)&&__defNormalProp(s,i,o[i]);return s},__publicField=(s,o,i)=>__defNormalProp(s,\"symbol\"!=typeof o?o+\"\":o,i),w={};((o,i)=>{for(var a in i)s(o,a,{get:i[a],enumerable:!0})})(w,{DEFAULT_OPTIONS:()=>C,DEFAULT_UUID_LENGTH:()=>x,default:()=>B});var x=6,C={dictionary:\"alphanum\",shuffle:!0,debug:!1,length:x,counter:0},j=class _ShortUniqueId{constructor(s={}){__publicField(this,\"counter\"),__publicField(this,\"debug\"),__publicField(this,\"dict\"),__publicField(this,\"version\"),__publicField(this,\"dictIndex\",0),__publicField(this,\"dictRange\",[]),__publicField(this,\"lowerBound\",0),__publicField(this,\"upperBound\",0),__publicField(this,\"dictLength\",0),__publicField(this,\"uuidLength\"),__publicField(this,\"_digit_first_ascii\",48),__publicField(this,\"_digit_last_ascii\",58),__publicField(this,\"_alpha_lower_first_ascii\",97),__publicField(this,\"_alpha_lower_last_ascii\",123),__publicField(this,\"_hex_last_ascii\",103),__publicField(this,\"_alpha_upper_first_ascii\",65),__publicField(this,\"_alpha_upper_last_ascii\",91),__publicField(this,\"_number_dict_ranges\",{digits:[this._digit_first_ascii,this._digit_last_ascii]}),__publicField(this,\"_alpha_dict_ranges\",{lowerCase:[this._alpha_lower_first_ascii,this._alpha_lower_last_ascii],upperCase:[this._alpha_upper_first_ascii,this._alpha_upper_last_ascii]}),__publicField(this,\"_alpha_lower_dict_ranges\",{lowerCase:[this._alpha_lower_first_ascii,this._alpha_lower_last_ascii]}),__publicField(this,\"_alpha_upper_dict_ranges\",{upperCase:[this._alpha_upper_first_ascii,this._alpha_upper_last_ascii]}),__publicField(this,\"_alphanum_dict_ranges\",{digits:[this._digit_first_ascii,this._digit_last_ascii],lowerCase:[this._alpha_lower_first_ascii,this._alpha_lower_last_ascii],upperCase:[this._alpha_upper_first_ascii,this._alpha_upper_last_ascii]}),__publicField(this,\"_alphanum_lower_dict_ranges\",{digits:[this._digit_first_ascii,this._digit_last_ascii],lowerCase:[this._alpha_lower_first_ascii,this._alpha_lower_last_ascii]}),__publicField(this,\"_alphanum_upper_dict_ranges\",{digits:[this._digit_first_ascii,this._digit_last_ascii],upperCase:[this._alpha_upper_first_ascii,this._alpha_upper_last_ascii]}),__publicField(this,\"_hex_dict_ranges\",{decDigits:[this._digit_first_ascii,this._digit_last_ascii],alphaDigits:[this._alpha_lower_first_ascii,this._hex_last_ascii]}),__publicField(this,\"_dict_ranges\",{_number_dict_ranges:this._number_dict_ranges,_alpha_dict_ranges:this._alpha_dict_ranges,_alpha_lower_dict_ranges:this._alpha_lower_dict_ranges,_alpha_upper_dict_ranges:this._alpha_upper_dict_ranges,_alphanum_dict_ranges:this._alphanum_dict_ranges,_alphanum_lower_dict_ranges:this._alphanum_lower_dict_ranges,_alphanum_upper_dict_ranges:this._alphanum_upper_dict_ranges,_hex_dict_ranges:this._hex_dict_ranges}),__publicField(this,\"log\",((...s)=>{const o=[...s];o[0]=\"[short-unique-id] \".concat(s[0]),!0!==this.debug||\"undefined\"==typeof console||null===console||console.log(...o)})),__publicField(this,\"_normalizeDictionary\",((s,o)=>{let i;if(s&&Array.isArray(s)&&s.length>1)i=s;else{i=[],this.dictIndex=0;const o=\"_\".concat(s,\"_dict_ranges\"),a=this._dict_ranges[o];let u=0;for(const[,s]of Object.entries(a)){const[o,i]=s;u+=Math.abs(i-o)}i=new Array(u);let _=0;for(const[,s]of Object.entries(a)){this.dictRange=s,this.lowerBound=this.dictRange[0],this.upperBound=this.dictRange[1];const o=this.lowerBound<=this.upperBound,a=this.lowerBound,u=this.upperBound;if(o)for(let s=a;su;s--)i[_++]=String.fromCharCode(s),this.dictIndex=s}i.length=_}if(o){for(let s=i.length-1;s>0;s--){const o=Math.floor(Math.random()*(s+1));[i[s],i[o]]=[i[o],i[s]]}}return i})),__publicField(this,\"setDictionary\",((s,o)=>{this.dict=this._normalizeDictionary(s,o),this.dictLength=this.dict.length,this.setCounter(0)})),__publicField(this,\"seq\",(()=>this.sequentialUUID())),__publicField(this,\"sequentialUUID\",(()=>{const s=this.dictLength,o=this.dict;let i=this.counter;const a=[];do{const u=i%s;i=Math.trunc(i/s),a.push(o[u])}while(0!==i);const u=a.join(\"\");return this.counter+=1,u})),__publicField(this,\"rnd\",((s=this.uuidLength||x)=>this.randomUUID(s))),__publicField(this,\"randomUUID\",((s=this.uuidLength||x)=>{if(null==s||s<1)throw new Error(\"Invalid UUID Length Provided\");const o=new Array(s),i=this.dictLength,a=this.dict;for(let u=0;uthis.formattedUUID(s,o))),__publicField(this,\"formattedUUID\",((s,o)=>{const i={$r:this.randomUUID,$s:this.sequentialUUID,$t:this.stamp};return s.replace(/\\$[rs]\\d{0,}|\\$t0|\\$t[1-9]\\d{1,}/g,(s=>{const a=s.slice(0,2),u=Number.parseInt(s.slice(2),10);return\"$s\"===a?i[a]().padStart(u,\"0\"):\"$t\"===a&&o?i[a](u,o):i[a](u)}))})),__publicField(this,\"availableUUIDs\",((s=this.uuidLength)=>Number.parseFloat(([...new Set(this.dict)].length**s).toFixed(0)))),__publicField(this,\"_collisionCache\",new Map),__publicField(this,\"approxMaxBeforeCollision\",((s=this.availableUUIDs(this.uuidLength))=>{const o=s,i=this._collisionCache.get(o);if(void 0!==i)return i;const a=Number.parseFloat(Math.sqrt(Math.PI/2*s).toFixed(20));return this._collisionCache.set(o,a),a})),__publicField(this,\"collisionProbability\",((s=this.availableUUIDs(this.uuidLength),o=this.uuidLength)=>Number.parseFloat((this.approxMaxBeforeCollision(s)/this.availableUUIDs(o)).toFixed(20)))),__publicField(this,\"uniqueness\",((s=this.availableUUIDs(this.uuidLength))=>{const o=Number.parseFloat((1-this.approxMaxBeforeCollision(s)/s).toFixed(20));return o>1?1:o<0?0:o})),__publicField(this,\"getVersion\",(()=>this.version)),__publicField(this,\"stamp\",((s,o)=>{const i=Math.floor(+(o||new Date)/1e3).toString(16);if(\"number\"==typeof s&&0===s)return i;if(\"number\"!=typeof s||s<10)throw new Error([\"Param finalLength must be a number greater than or equal to 10,\",\"or 0 if you want the raw hexadecimal timestamp\"].join(\"\\n\"));const a=s-9,u=Math.round(Math.random()*(a>15?15:a)),_=this.randomUUID(a);return\"\".concat(_.substring(0,u)).concat(i).concat(_.substring(u)).concat(u.toString(16))})),__publicField(this,\"parseStamp\",((s,o)=>{if(o&&!/t0|t[1-9]\\d{1,}/.test(o))throw new Error(\"Cannot extract date from a formated UUID with no timestamp in the format\");const i=o?o.replace(/\\$[rs]\\d{0,}|\\$t0|\\$t[1-9]\\d{1,}/g,(s=>{const o={$r:s=>[...Array(s)].map((()=>\"r\")).join(\"\"),$s:s=>[...Array(s)].map((()=>\"s\")).join(\"\"),$t:s=>[...Array(s)].map((()=>\"t\")).join(\"\")},i=s.slice(0,2),a=Number.parseInt(s.slice(2),10);return o[i](a)})).replace(/^(.*?)(t{8,})(.*)$/g,((o,i,a)=>s.substring(i.length,i.length+a.length))):s;if(8===i.length)return new Date(1e3*Number.parseInt(i,16));if(i.length<10)throw new Error(\"Stamp length invalid\");const a=Number.parseInt(i.substring(i.length-1),16);return new Date(1e3*Number.parseInt(i.substring(a,a+8),16))})),__publicField(this,\"setCounter\",(s=>{this.counter=s})),__publicField(this,\"validate\",((s,o)=>{const i=o?this._normalizeDictionary(o):this.dict;return s.split(\"\").every((s=>i.includes(s)))}));const o=__spreadValues(__spreadValues({},C),s);this.counter=0,this.debug=!1,this.dict=[],this.version=\"5.3.2\";const{dictionary:i,shuffle:a,length:u,counter:_}=o;this.uuidLength=u,this.setDictionary(i,a),this.setCounter(_),this.debug=o.debug,this.log(this.dict),this.log(\"Generator instantiated with Dictionary Size \".concat(this.dictLength,\" and counter set to \").concat(this.counter)),this.log=this.log.bind(this),this.setDictionary=this.setDictionary.bind(this),this.setCounter=this.setCounter.bind(this),this.seq=this.seq.bind(this),this.sequentialUUID=this.sequentialUUID.bind(this),this.rnd=this.rnd.bind(this),this.randomUUID=this.randomUUID.bind(this),this.fmt=this.fmt.bind(this),this.formattedUUID=this.formattedUUID.bind(this),this.availableUUIDs=this.availableUUIDs.bind(this),this.approxMaxBeforeCollision=this.approxMaxBeforeCollision.bind(this),this.collisionProbability=this.collisionProbability.bind(this),this.uniqueness=this.uniqueness.bind(this),this.getVersion=this.getVersion.bind(this),this.stamp=this.stamp.bind(this),this.parseStamp=this.parseStamp.bind(this)}};__publicField(j,\"default\",j);var L,B=j;return L=w,((a,_,w,x)=>{if(_&&\"object\"==typeof _||\"function\"==typeof _)for(let C of i(_))u.call(a,C)||C===w||s(a,C,{get:()=>_[C],enumerable:!(x=o(_,C))||x.enumerable});return a})(s({},\"__esModule\",{value:!0}),L)})();s.exports=o.default,\"undefined\"!=typeof window&&(o=o.default)},9325:(s,o,i)=>{var a=i(34840),u=\"object\"==typeof self&&self&&self.Object===Object&&self,_=a||u||Function(\"return this\")();s.exports=_},9404:function(s){s.exports=function(){\"use strict\";var s=Array.prototype.slice;function createClass(s,o){o&&(s.prototype=Object.create(o.prototype)),s.prototype.constructor=s}function Iterable(s){return isIterable(s)?s:Seq(s)}function KeyedIterable(s){return isKeyed(s)?s:KeyedSeq(s)}function IndexedIterable(s){return isIndexed(s)?s:IndexedSeq(s)}function SetIterable(s){return isIterable(s)&&!isAssociative(s)?s:SetSeq(s)}function isIterable(s){return!(!s||!s[o])}function isKeyed(s){return!(!s||!s[i])}function isIndexed(s){return!(!s||!s[a])}function isAssociative(s){return isKeyed(s)||isIndexed(s)}function isOrdered(s){return!(!s||!s[u])}createClass(KeyedIterable,Iterable),createClass(IndexedIterable,Iterable),createClass(SetIterable,Iterable),Iterable.isIterable=isIterable,Iterable.isKeyed=isKeyed,Iterable.isIndexed=isIndexed,Iterable.isAssociative=isAssociative,Iterable.isOrdered=isOrdered,Iterable.Keyed=KeyedIterable,Iterable.Indexed=IndexedIterable,Iterable.Set=SetIterable;var o=\"@@__IMMUTABLE_ITERABLE__@@\",i=\"@@__IMMUTABLE_KEYED__@@\",a=\"@@__IMMUTABLE_INDEXED__@@\",u=\"@@__IMMUTABLE_ORDERED__@@\",_=\"delete\",w=5,x=1<>>0;if(\"\"+i!==o||4294967295===i)return NaN;o=i}return o<0?ensureSize(s)+o:o}function returnTrue(){return!0}function wholeSlice(s,o,i){return(0===s||void 0!==i&&s<=-i)&&(void 0===o||void 0!==i&&o>=i)}function resolveBegin(s,o){return resolveIndex(s,o,0)}function resolveEnd(s,o){return resolveIndex(s,o,o)}function resolveIndex(s,o,i){return void 0===s?i:s<0?Math.max(0,o+s):void 0===o?s:Math.min(o,s)}var $=0,U=1,V=2,z=\"function\"==typeof Symbol&&Symbol.iterator,Y=\"@@iterator\",Z=z||Y;function Iterator(s){this.next=s}function iteratorValue(s,o,i,a){var u=0===s?o:1===s?i:[o,i];return a?a.value=u:a={value:u,done:!1},a}function iteratorDone(){return{value:void 0,done:!0}}function hasIterator(s){return!!getIteratorFn(s)}function isIterator(s){return s&&\"function\"==typeof s.next}function getIterator(s){var o=getIteratorFn(s);return o&&o.call(s)}function getIteratorFn(s){var o=s&&(z&&s[z]||s[Y]);if(\"function\"==typeof o)return o}function isArrayLike(s){return s&&\"number\"==typeof s.length}function Seq(s){return null==s?emptySequence():isIterable(s)?s.toSeq():seqFromValue(s)}function KeyedSeq(s){return null==s?emptySequence().toKeyedSeq():isIterable(s)?isKeyed(s)?s.toSeq():s.fromEntrySeq():keyedSeqFromValue(s)}function IndexedSeq(s){return null==s?emptySequence():isIterable(s)?isKeyed(s)?s.entrySeq():s.toIndexedSeq():indexedSeqFromValue(s)}function SetSeq(s){return(null==s?emptySequence():isIterable(s)?isKeyed(s)?s.entrySeq():s:indexedSeqFromValue(s)).toSetSeq()}Iterator.prototype.toString=function(){return\"[Iterator]\"},Iterator.KEYS=$,Iterator.VALUES=U,Iterator.ENTRIES=V,Iterator.prototype.inspect=Iterator.prototype.toSource=function(){return this.toString()},Iterator.prototype[Z]=function(){return this},createClass(Seq,Iterable),Seq.of=function(){return Seq(arguments)},Seq.prototype.toSeq=function(){return this},Seq.prototype.toString=function(){return this.__toString(\"Seq {\",\"}\")},Seq.prototype.cacheResult=function(){return!this._cache&&this.__iterateUncached&&(this._cache=this.entrySeq().toArray(),this.size=this._cache.length),this},Seq.prototype.__iterate=function(s,o){return seqIterate(this,s,o,!0)},Seq.prototype.__iterator=function(s,o){return seqIterator(this,s,o,!0)},createClass(KeyedSeq,Seq),KeyedSeq.prototype.toKeyedSeq=function(){return this},createClass(IndexedSeq,Seq),IndexedSeq.of=function(){return IndexedSeq(arguments)},IndexedSeq.prototype.toIndexedSeq=function(){return this},IndexedSeq.prototype.toString=function(){return this.__toString(\"Seq [\",\"]\")},IndexedSeq.prototype.__iterate=function(s,o){return seqIterate(this,s,o,!1)},IndexedSeq.prototype.__iterator=function(s,o){return seqIterator(this,s,o,!1)},createClass(SetSeq,Seq),SetSeq.of=function(){return SetSeq(arguments)},SetSeq.prototype.toSetSeq=function(){return this},Seq.isSeq=isSeq,Seq.Keyed=KeyedSeq,Seq.Set=SetSeq,Seq.Indexed=IndexedSeq;var ee,ie,ae,ce=\"@@__IMMUTABLE_SEQ__@@\";function ArraySeq(s){this._array=s,this.size=s.length}function ObjectSeq(s){var o=Object.keys(s);this._object=s,this._keys=o,this.size=o.length}function IterableSeq(s){this._iterable=s,this.size=s.length||s.size}function IteratorSeq(s){this._iterator=s,this._iteratorCache=[]}function isSeq(s){return!(!s||!s[ce])}function emptySequence(){return ee||(ee=new ArraySeq([]))}function keyedSeqFromValue(s){var o=Array.isArray(s)?new ArraySeq(s).fromEntrySeq():isIterator(s)?new IteratorSeq(s).fromEntrySeq():hasIterator(s)?new IterableSeq(s).fromEntrySeq():\"object\"==typeof s?new ObjectSeq(s):void 0;if(!o)throw new TypeError(\"Expected Array or iterable object of [k, v] entries, or keyed object: \"+s);return o}function indexedSeqFromValue(s){var o=maybeIndexedSeqFromValue(s);if(!o)throw new TypeError(\"Expected Array or iterable object of values: \"+s);return o}function seqFromValue(s){var o=maybeIndexedSeqFromValue(s)||\"object\"==typeof s&&new ObjectSeq(s);if(!o)throw new TypeError(\"Expected Array or iterable object of values, or keyed object: \"+s);return o}function maybeIndexedSeqFromValue(s){return isArrayLike(s)?new ArraySeq(s):isIterator(s)?new IteratorSeq(s):hasIterator(s)?new IterableSeq(s):void 0}function seqIterate(s,o,i,a){var u=s._cache;if(u){for(var _=u.length-1,w=0;w<=_;w++){var x=u[i?_-w:w];if(!1===o(x[1],a?x[0]:w,s))return w+1}return w}return s.__iterateUncached(o,i)}function seqIterator(s,o,i,a){var u=s._cache;if(u){var _=u.length-1,w=0;return new Iterator((function(){var s=u[i?_-w:w];return w++>_?iteratorDone():iteratorValue(o,a?s[0]:w-1,s[1])}))}return s.__iteratorUncached(o,i)}function fromJS(s,o){return o?fromJSWith(o,s,\"\",{\"\":s}):fromJSDefault(s)}function fromJSWith(s,o,i,a){return Array.isArray(o)?s.call(a,i,IndexedSeq(o).map((function(i,a){return fromJSWith(s,i,a,o)}))):isPlainObj(o)?s.call(a,i,KeyedSeq(o).map((function(i,a){return fromJSWith(s,i,a,o)}))):o}function fromJSDefault(s){return Array.isArray(s)?IndexedSeq(s).map(fromJSDefault).toList():isPlainObj(s)?KeyedSeq(s).map(fromJSDefault).toMap():s}function isPlainObj(s){return s&&(s.constructor===Object||void 0===s.constructor)}function is(s,o){if(s===o||s!=s&&o!=o)return!0;if(!s||!o)return!1;if(\"function\"==typeof s.valueOf&&\"function\"==typeof o.valueOf){if((s=s.valueOf())===(o=o.valueOf())||s!=s&&o!=o)return!0;if(!s||!o)return!1}return!(\"function\"!=typeof s.equals||\"function\"!=typeof o.equals||!s.equals(o))}function deepEqual(s,o){if(s===o)return!0;if(!isIterable(o)||void 0!==s.size&&void 0!==o.size&&s.size!==o.size||void 0!==s.__hash&&void 0!==o.__hash&&s.__hash!==o.__hash||isKeyed(s)!==isKeyed(o)||isIndexed(s)!==isIndexed(o)||isOrdered(s)!==isOrdered(o))return!1;if(0===s.size&&0===o.size)return!0;var i=!isAssociative(s);if(isOrdered(s)){var a=s.entries();return o.every((function(s,o){var u=a.next().value;return u&&is(u[1],s)&&(i||is(u[0],o))}))&&a.next().done}var u=!1;if(void 0===s.size)if(void 0===o.size)\"function\"==typeof s.cacheResult&&s.cacheResult();else{u=!0;var _=s;s=o,o=_}var w=!0,x=o.__iterate((function(o,a){if(i?!s.has(o):u?!is(o,s.get(a,j)):!is(s.get(a,j),o))return w=!1,!1}));return w&&s.size===x}function Repeat(s,o){if(!(this instanceof Repeat))return new Repeat(s,o);if(this._value=s,this.size=void 0===o?1/0:Math.max(0,o),0===this.size){if(ie)return ie;ie=this}}function invariant(s,o){if(!s)throw new Error(o)}function Range(s,o,i){if(!(this instanceof Range))return new Range(s,o,i);if(invariant(0!==i,\"Cannot step a Range by 0\"),s=s||0,void 0===o&&(o=1/0),i=void 0===i?1:Math.abs(i),oa?iteratorDone():iteratorValue(s,u,i[o?a-u++:u++])}))},createClass(ObjectSeq,KeyedSeq),ObjectSeq.prototype.get=function(s,o){return void 0===o||this.has(s)?this._object[s]:o},ObjectSeq.prototype.has=function(s){return this._object.hasOwnProperty(s)},ObjectSeq.prototype.__iterate=function(s,o){for(var i=this._object,a=this._keys,u=a.length-1,_=0;_<=u;_++){var w=a[o?u-_:_];if(!1===s(i[w],w,this))return _+1}return _},ObjectSeq.prototype.__iterator=function(s,o){var i=this._object,a=this._keys,u=a.length-1,_=0;return new Iterator((function(){var w=a[o?u-_:_];return _++>u?iteratorDone():iteratorValue(s,w,i[w])}))},ObjectSeq.prototype[u]=!0,createClass(IterableSeq,IndexedSeq),IterableSeq.prototype.__iterateUncached=function(s,o){if(o)return this.cacheResult().__iterate(s,o);var i=getIterator(this._iterable),a=0;if(isIterator(i))for(var u;!(u=i.next()).done&&!1!==s(u.value,a++,this););return a},IterableSeq.prototype.__iteratorUncached=function(s,o){if(o)return this.cacheResult().__iterator(s,o);var i=getIterator(this._iterable);if(!isIterator(i))return new Iterator(iteratorDone);var a=0;return new Iterator((function(){var o=i.next();return o.done?o:iteratorValue(s,a++,o.value)}))},createClass(IteratorSeq,IndexedSeq),IteratorSeq.prototype.__iterateUncached=function(s,o){if(o)return this.cacheResult().__iterate(s,o);for(var i,a=this._iterator,u=this._iteratorCache,_=0;_=a.length){var o=i.next();if(o.done)return o;a[u]=o.value}return iteratorValue(s,u,a[u++])}))},createClass(Repeat,IndexedSeq),Repeat.prototype.toString=function(){return 0===this.size?\"Repeat []\":\"Repeat [ \"+this._value+\" \"+this.size+\" times ]\"},Repeat.prototype.get=function(s,o){return this.has(s)?this._value:o},Repeat.prototype.includes=function(s){return is(this._value,s)},Repeat.prototype.slice=function(s,o){var i=this.size;return wholeSlice(s,o,i)?this:new Repeat(this._value,resolveEnd(o,i)-resolveBegin(s,i))},Repeat.prototype.reverse=function(){return this},Repeat.prototype.indexOf=function(s){return is(this._value,s)?0:-1},Repeat.prototype.lastIndexOf=function(s){return is(this._value,s)?this.size:-1},Repeat.prototype.__iterate=function(s,o){for(var i=0;i=0&&o=0&&ii?iteratorDone():iteratorValue(s,_++,w)}))},Range.prototype.equals=function(s){return s instanceof Range?this._start===s._start&&this._end===s._end&&this._step===s._step:deepEqual(this,s)},createClass(Collection,Iterable),createClass(KeyedCollection,Collection),createClass(IndexedCollection,Collection),createClass(SetCollection,Collection),Collection.Keyed=KeyedCollection,Collection.Indexed=IndexedCollection,Collection.Set=SetCollection;var le=\"function\"==typeof Math.imul&&-2===Math.imul(4294967295,2)?Math.imul:function imul(s,o){var i=65535&(s|=0),a=65535&(o|=0);return i*a+((s>>>16)*a+i*(o>>>16)<<16>>>0)|0};function smi(s){return s>>>1&1073741824|3221225471&s}function hash(s){if(!1===s||null==s)return 0;if(\"function\"==typeof s.valueOf&&(!1===(s=s.valueOf())||null==s))return 0;if(!0===s)return 1;var o=typeof s;if(\"number\"===o){if(s!=s||s===1/0)return 0;var i=0|s;for(i!==s&&(i^=4294967295*s);s>4294967295;)i^=s/=4294967295;return smi(i)}if(\"string\"===o)return s.length>Se?cachedHashString(s):hashString(s);if(\"function\"==typeof s.hashCode)return s.hashCode();if(\"object\"===o)return hashJSObj(s);if(\"function\"==typeof s.toString)return hashString(s.toString());throw new Error(\"Value type \"+o+\" cannot be hashed.\")}function cachedHashString(s){var o=Pe[s];return void 0===o&&(o=hashString(s),xe===we&&(xe=0,Pe={}),xe++,Pe[s]=o),o}function hashString(s){for(var o=0,i=0;i0)switch(s.nodeType){case 1:return s.uniqueID;case 9:return s.documentElement&&s.documentElement.uniqueID}}var fe,ye=\"function\"==typeof WeakMap;ye&&(fe=new WeakMap);var be=0,_e=\"__immutablehash__\";\"function\"==typeof Symbol&&(_e=Symbol(_e));var Se=16,we=255,xe=0,Pe={};function assertNotInfinite(s){invariant(s!==1/0,\"Cannot perform this action with an infinite size.\")}function Map(s){return null==s?emptyMap():isMap(s)&&!isOrdered(s)?s:emptyMap().withMutations((function(o){var i=KeyedIterable(s);assertNotInfinite(i.size),i.forEach((function(s,i){return o.set(i,s)}))}))}function isMap(s){return!(!s||!s[Re])}createClass(Map,KeyedCollection),Map.of=function(){var o=s.call(arguments,0);return emptyMap().withMutations((function(s){for(var i=0;i=o.length)throw new Error(\"Missing value for key: \"+o[i]);s.set(o[i],o[i+1])}}))},Map.prototype.toString=function(){return this.__toString(\"Map {\",\"}\")},Map.prototype.get=function(s,o){return this._root?this._root.get(0,void 0,s,o):o},Map.prototype.set=function(s,o){return updateMap(this,s,o)},Map.prototype.setIn=function(s,o){return this.updateIn(s,j,(function(){return o}))},Map.prototype.remove=function(s){return updateMap(this,s,j)},Map.prototype.deleteIn=function(s){return this.updateIn(s,(function(){return j}))},Map.prototype.update=function(s,o,i){return 1===arguments.length?s(this):this.updateIn([s],o,i)},Map.prototype.updateIn=function(s,o,i){i||(i=o,o=void 0);var a=updateInDeepMap(this,forceIterator(s),o,i);return a===j?void 0:a},Map.prototype.clear=function(){return 0===this.size?this:this.__ownerID?(this.size=0,this._root=null,this.__hash=void 0,this.__altered=!0,this):emptyMap()},Map.prototype.merge=function(){return mergeIntoMapWith(this,void 0,arguments)},Map.prototype.mergeWith=function(o){return mergeIntoMapWith(this,o,s.call(arguments,1))},Map.prototype.mergeIn=function(o){var i=s.call(arguments,1);return this.updateIn(o,emptyMap(),(function(s){return\"function\"==typeof s.merge?s.merge.apply(s,i):i[i.length-1]}))},Map.prototype.mergeDeep=function(){return mergeIntoMapWith(this,deepMerger,arguments)},Map.prototype.mergeDeepWith=function(o){var i=s.call(arguments,1);return mergeIntoMapWith(this,deepMergerWith(o),i)},Map.prototype.mergeDeepIn=function(o){var i=s.call(arguments,1);return this.updateIn(o,emptyMap(),(function(s){return\"function\"==typeof s.mergeDeep?s.mergeDeep.apply(s,i):i[i.length-1]}))},Map.prototype.sort=function(s){return OrderedMap(sortFactory(this,s))},Map.prototype.sortBy=function(s,o){return OrderedMap(sortFactory(this,o,s))},Map.prototype.withMutations=function(s){var o=this.asMutable();return s(o),o.wasAltered()?o.__ensureOwner(this.__ownerID):this},Map.prototype.asMutable=function(){return this.__ownerID?this:this.__ensureOwner(new OwnerID)},Map.prototype.asImmutable=function(){return this.__ensureOwner()},Map.prototype.wasAltered=function(){return this.__altered},Map.prototype.__iterator=function(s,o){return new MapIterator(this,s,o)},Map.prototype.__iterate=function(s,o){var i=this,a=0;return this._root&&this._root.iterate((function(o){return a++,s(o[1],o[0],i)}),o),a},Map.prototype.__ensureOwner=function(s){return s===this.__ownerID?this:s?makeMap(this.size,this._root,s,this.__hash):(this.__ownerID=s,this.__altered=!1,this)},Map.isMap=isMap;var Te,Re=\"@@__IMMUTABLE_MAP__@@\",$e=Map.prototype;function ArrayMapNode(s,o){this.ownerID=s,this.entries=o}function BitmapIndexedNode(s,o,i){this.ownerID=s,this.bitmap=o,this.nodes=i}function HashArrayMapNode(s,o,i){this.ownerID=s,this.count=o,this.nodes=i}function HashCollisionNode(s,o,i){this.ownerID=s,this.keyHash=o,this.entries=i}function ValueNode(s,o,i){this.ownerID=s,this.keyHash=o,this.entry=i}function MapIterator(s,o,i){this._type=o,this._reverse=i,this._stack=s._root&&mapIteratorFrame(s._root)}function mapIteratorValue(s,o){return iteratorValue(s,o[0],o[1])}function mapIteratorFrame(s,o){return{node:s,index:0,__prev:o}}function makeMap(s,o,i,a){var u=Object.create($e);return u.size=s,u._root=o,u.__ownerID=i,u.__hash=a,u.__altered=!1,u}function emptyMap(){return Te||(Te=makeMap(0))}function updateMap(s,o,i){var a,u;if(s._root){var _=MakeRef(L),w=MakeRef(B);if(a=updateNode(s._root,s.__ownerID,0,void 0,o,i,_,w),!w.value)return s;u=s.size+(_.value?i===j?-1:1:0)}else{if(i===j)return s;u=1,a=new ArrayMapNode(s.__ownerID,[[o,i]])}return s.__ownerID?(s.size=u,s._root=a,s.__hash=void 0,s.__altered=!0,s):a?makeMap(u,a):emptyMap()}function updateNode(s,o,i,a,u,_,w,x){return s?s.update(o,i,a,u,_,w,x):_===j?s:(SetRef(x),SetRef(w),new ValueNode(o,a,[u,_]))}function isLeafNode(s){return s.constructor===ValueNode||s.constructor===HashCollisionNode}function mergeIntoNode(s,o,i,a,u){if(s.keyHash===a)return new HashCollisionNode(o,a,[s.entry,u]);var _,x=(0===i?s.keyHash:s.keyHash>>>i)&C,j=(0===i?a:a>>>i)&C;return new BitmapIndexedNode(o,1<>>=1)w[C]=1&i?o[_++]:void 0;return w[a]=u,new HashArrayMapNode(s,_+1,w)}function mergeIntoMapWith(s,o,i){for(var a=[],u=0;u>1&1431655765))+(s>>2&858993459))+(s>>4)&252645135,s+=s>>8,127&(s+=s>>16)}function setIn(s,o,i,a){var u=a?s:arrCopy(s);return u[o]=i,u}function spliceIn(s,o,i,a){var u=s.length+1;if(a&&o+1===u)return s[o]=i,s;for(var _=new Array(u),w=0,x=0;x=qe)return createNodes(s,C,a,u);var U=s&&s===this.ownerID,V=U?C:arrCopy(C);return $?x?L===B-1?V.pop():V[L]=V.pop():V[L]=[a,u]:V.push([a,u]),U?(this.entries=V,this):new ArrayMapNode(s,V)}},BitmapIndexedNode.prototype.get=function(s,o,i,a){void 0===o&&(o=hash(i));var u=1<<((0===s?o:o>>>s)&C),_=this.bitmap;return _&u?this.nodes[popCount(_&u-1)].get(s+w,o,i,a):a},BitmapIndexedNode.prototype.update=function(s,o,i,a,u,_,x){void 0===i&&(i=hash(a));var L=(0===o?i:i>>>o)&C,B=1<=ze)return expandNodes(s,z,$,L,Z);if(U&&!Z&&2===z.length&&isLeafNode(z[1^V]))return z[1^V];if(U&&Z&&1===z.length&&isLeafNode(Z))return Z;var ee=s&&s===this.ownerID,ie=U?Z?$:$^B:$|B,ae=U?Z?setIn(z,V,Z,ee):spliceOut(z,V,ee):spliceIn(z,V,Z,ee);return ee?(this.bitmap=ie,this.nodes=ae,this):new BitmapIndexedNode(s,ie,ae)},HashArrayMapNode.prototype.get=function(s,o,i,a){void 0===o&&(o=hash(i));var u=(0===s?o:o>>>s)&C,_=this.nodes[u];return _?_.get(s+w,o,i,a):a},HashArrayMapNode.prototype.update=function(s,o,i,a,u,_,x){void 0===i&&(i=hash(a));var L=(0===o?i:i>>>o)&C,B=u===j,$=this.nodes,U=$[L];if(B&&!U)return this;var V=updateNode(U,s,o+w,i,a,u,_,x);if(V===U)return this;var z=this.count;if(U){if(!V&&--z0&&a=0&&s>>o&C;if(a>=this.array.length)return new VNode([],s);var u,_=0===a;if(o>0){var x=this.array[a];if((u=x&&x.removeBefore(s,o-w,i))===x&&_)return this}if(_&&!u)return this;var j=editableVNode(this,s);if(!_)for(var L=0;L>>o&C;if(u>=this.array.length)return this;if(o>0){var _=this.array[u];if((a=_&&_.removeAfter(s,o-w,i))===_&&u===this.array.length-1)return this}var x=editableVNode(this,s);return x.array.splice(u+1),a&&(x.array[u]=a),x};var Xe,Qe,et={};function iterateList(s,o){var i=s._origin,a=s._capacity,u=getTailOffset(a),_=s._tail;return iterateNodeOrLeaf(s._root,s._level,0);function iterateNodeOrLeaf(s,o,i){return 0===o?iterateLeaf(s,i):iterateNode(s,o,i)}function iterateLeaf(s,w){var C=w===u?_&&_.array:s&&s.array,j=w>i?0:i-w,L=a-w;return L>x&&(L=x),function(){if(j===L)return et;var s=o?--L:j++;return C&&C[s]}}function iterateNode(s,u,_){var C,j=s&&s.array,L=_>i?0:i-_>>u,B=1+(a-_>>u);return B>x&&(B=x),function(){for(;;){if(C){var s=C();if(s!==et)return s;C=null}if(L===B)return et;var i=o?--B:L++;C=iterateNodeOrLeaf(j&&j[i],u-w,_+(i<=s.size||o<0)return s.withMutations((function(s){o<0?setListBounds(s,o).set(0,i):setListBounds(s,0,o+1).set(o,i)}));o+=s._origin;var a=s._tail,u=s._root,_=MakeRef(B);return o>=getTailOffset(s._capacity)?a=updateVNode(a,s.__ownerID,0,o,i,_):u=updateVNode(u,s.__ownerID,s._level,o,i,_),_.value?s.__ownerID?(s._root=u,s._tail=a,s.__hash=void 0,s.__altered=!0,s):makeList(s._origin,s._capacity,s._level,u,a):s}function updateVNode(s,o,i,a,u,_){var x,j=a>>>i&C,L=s&&j0){var B=s&&s.array[j],$=updateVNode(B,o,i-w,a,u,_);return $===B?s:((x=editableVNode(s,o)).array[j]=$,x)}return L&&s.array[j]===u?s:(SetRef(_),x=editableVNode(s,o),void 0===u&&j===x.array.length-1?x.array.pop():x.array[j]=u,x)}function editableVNode(s,o){return o&&s&&o===s.ownerID?s:new VNode(s?s.array.slice():[],o)}function listNodeFor(s,o){if(o>=getTailOffset(s._capacity))return s._tail;if(o<1<0;)i=i.array[o>>>a&C],a-=w;return i}}function setListBounds(s,o,i){void 0!==o&&(o|=0),void 0!==i&&(i|=0);var a=s.__ownerID||new OwnerID,u=s._origin,_=s._capacity,x=u+o,j=void 0===i?_:i<0?_+i:u+i;if(x===u&&j===_)return s;if(x>=j)return s.clear();for(var L=s._level,B=s._root,$=0;x+$<0;)B=new VNode(B&&B.array.length?[void 0,B]:[],a),$+=1<<(L+=w);$&&(x+=$,u+=$,j+=$,_+=$);for(var U=getTailOffset(_),V=getTailOffset(j);V>=1<U?new VNode([],a):z;if(z&&V>U&&x<_&&z.array.length){for(var Z=B=editableVNode(B,a),ee=L;ee>w;ee-=w){var ie=U>>>ee&C;Z=Z.array[ie]=editableVNode(Z.array[ie],a)}Z.array[U>>>w&C]=z}if(j<_&&(Y=Y&&Y.removeAfter(a,0,j)),x>=V)x-=V,j-=V,L=w,B=null,Y=Y&&Y.removeBefore(a,0,x);else if(x>u||V>>L&C;if(ae!==V>>>L&C)break;ae&&($+=(1<u&&(B=B.removeBefore(a,L,x-$)),B&&Vu&&(u=x.size),isIterable(w)||(x=x.map((function(s){return fromJS(s)}))),a.push(x)}return u>s.size&&(s=s.setSize(u)),mergeIntoCollectionWith(s,o,a)}function getTailOffset(s){return s>>w<=x&&w.size>=2*_.size?(a=(u=w.filter((function(s,o){return void 0!==s&&C!==o}))).toKeyedSeq().map((function(s){return s[0]})).flip().toMap(),s.__ownerID&&(a.__ownerID=u.__ownerID=s.__ownerID)):(a=_.remove(o),u=C===w.size-1?w.pop():w.set(C,void 0))}else if(L){if(i===w.get(C)[1])return s;a=_,u=w.set(C,[o,i])}else a=_.set(o,w.size),u=w.set(w.size,[o,i]);return s.__ownerID?(s.size=a.size,s._map=a,s._list=u,s.__hash=void 0,s):makeOrderedMap(a,u)}function ToKeyedSequence(s,o){this._iter=s,this._useKeys=o,this.size=s.size}function ToIndexedSequence(s){this._iter=s,this.size=s.size}function ToSetSequence(s){this._iter=s,this.size=s.size}function FromEntriesSequence(s){this._iter=s,this.size=s.size}function flipFactory(s){var o=makeSequence(s);return o._iter=s,o.size=s.size,o.flip=function(){return s},o.reverse=function(){var o=s.reverse.apply(this);return o.flip=function(){return s.reverse()},o},o.has=function(o){return s.includes(o)},o.includes=function(o){return s.has(o)},o.cacheResult=cacheResultThrough,o.__iterateUncached=function(o,i){var a=this;return s.__iterate((function(s,i){return!1!==o(i,s,a)}),i)},o.__iteratorUncached=function(o,i){if(o===V){var a=s.__iterator(o,i);return new Iterator((function(){var s=a.next();if(!s.done){var o=s.value[0];s.value[0]=s.value[1],s.value[1]=o}return s}))}return s.__iterator(o===U?$:U,i)},o}function mapFactory(s,o,i){var a=makeSequence(s);return a.size=s.size,a.has=function(o){return s.has(o)},a.get=function(a,u){var _=s.get(a,j);return _===j?u:o.call(i,_,a,s)},a.__iterateUncached=function(a,u){var _=this;return s.__iterate((function(s,u,w){return!1!==a(o.call(i,s,u,w),u,_)}),u)},a.__iteratorUncached=function(a,u){var _=s.__iterator(V,u);return new Iterator((function(){var u=_.next();if(u.done)return u;var w=u.value,x=w[0];return iteratorValue(a,x,o.call(i,w[1],x,s),u)}))},a}function reverseFactory(s,o){var i=makeSequence(s);return i._iter=s,i.size=s.size,i.reverse=function(){return s},s.flip&&(i.flip=function(){var o=flipFactory(s);return o.reverse=function(){return s.flip()},o}),i.get=function(i,a){return s.get(o?i:-1-i,a)},i.has=function(i){return s.has(o?i:-1-i)},i.includes=function(o){return s.includes(o)},i.cacheResult=cacheResultThrough,i.__iterate=function(o,i){var a=this;return s.__iterate((function(s,i){return o(s,i,a)}),!i)},i.__iterator=function(o,i){return s.__iterator(o,!i)},i}function filterFactory(s,o,i,a){var u=makeSequence(s);return a&&(u.has=function(a){var u=s.get(a,j);return u!==j&&!!o.call(i,u,a,s)},u.get=function(a,u){var _=s.get(a,j);return _!==j&&o.call(i,_,a,s)?_:u}),u.__iterateUncached=function(u,_){var w=this,x=0;return s.__iterate((function(s,_,C){if(o.call(i,s,_,C))return x++,u(s,a?_:x-1,w)}),_),x},u.__iteratorUncached=function(u,_){var w=s.__iterator(V,_),x=0;return new Iterator((function(){for(;;){var _=w.next();if(_.done)return _;var C=_.value,j=C[0],L=C[1];if(o.call(i,L,j,s))return iteratorValue(u,a?j:x++,L,_)}}))},u}function countByFactory(s,o,i){var a=Map().asMutable();return s.__iterate((function(u,_){a.update(o.call(i,u,_,s),0,(function(s){return s+1}))})),a.asImmutable()}function groupByFactory(s,o,i){var a=isKeyed(s),u=(isOrdered(s)?OrderedMap():Map()).asMutable();s.__iterate((function(_,w){u.update(o.call(i,_,w,s),(function(s){return(s=s||[]).push(a?[w,_]:_),s}))}));var _=iterableClass(s);return u.map((function(o){return reify(s,_(o))}))}function sliceFactory(s,o,i,a){var u=s.size;if(void 0!==o&&(o|=0),void 0!==i&&(i===1/0?i=u:i|=0),wholeSlice(o,i,u))return s;var _=resolveBegin(o,u),w=resolveEnd(i,u);if(_!=_||w!=w)return sliceFactory(s.toSeq().cacheResult(),o,i,a);var x,C=w-_;C==C&&(x=C<0?0:C);var j=makeSequence(s);return j.size=0===x?x:s.size&&x||void 0,!a&&isSeq(s)&&x>=0&&(j.get=function(o,i){return(o=wrapIndex(this,o))>=0&&ox)return iteratorDone();var s=u.next();return a||o===U?s:iteratorValue(o,C-1,o===$?void 0:s.value[1],s)}))},j}function takeWhileFactory(s,o,i){var a=makeSequence(s);return a.__iterateUncached=function(a,u){var _=this;if(u)return this.cacheResult().__iterate(a,u);var w=0;return s.__iterate((function(s,u,x){return o.call(i,s,u,x)&&++w&&a(s,u,_)})),w},a.__iteratorUncached=function(a,u){var _=this;if(u)return this.cacheResult().__iterator(a,u);var w=s.__iterator(V,u),x=!0;return new Iterator((function(){if(!x)return iteratorDone();var s=w.next();if(s.done)return s;var u=s.value,C=u[0],j=u[1];return o.call(i,j,C,_)?a===V?s:iteratorValue(a,C,j,s):(x=!1,iteratorDone())}))},a}function skipWhileFactory(s,o,i,a){var u=makeSequence(s);return u.__iterateUncached=function(u,_){var w=this;if(_)return this.cacheResult().__iterate(u,_);var x=!0,C=0;return s.__iterate((function(s,_,j){if(!x||!(x=o.call(i,s,_,j)))return C++,u(s,a?_:C-1,w)})),C},u.__iteratorUncached=function(u,_){var w=this;if(_)return this.cacheResult().__iterator(u,_);var x=s.__iterator(V,_),C=!0,j=0;return new Iterator((function(){var s,_,L;do{if((s=x.next()).done)return a||u===U?s:iteratorValue(u,j++,u===$?void 0:s.value[1],s);var B=s.value;_=B[0],L=B[1],C&&(C=o.call(i,L,_,w))}while(C);return u===V?s:iteratorValue(u,_,L,s)}))},u}function concatFactory(s,o){var i=isKeyed(s),a=[s].concat(o).map((function(s){return isIterable(s)?i&&(s=KeyedIterable(s)):s=i?keyedSeqFromValue(s):indexedSeqFromValue(Array.isArray(s)?s:[s]),s})).filter((function(s){return 0!==s.size}));if(0===a.length)return s;if(1===a.length){var u=a[0];if(u===s||i&&isKeyed(u)||isIndexed(s)&&isIndexed(u))return u}var _=new ArraySeq(a);return i?_=_.toKeyedSeq():isIndexed(s)||(_=_.toSetSeq()),(_=_.flatten(!0)).size=a.reduce((function(s,o){if(void 0!==s){var i=o.size;if(void 0!==i)return s+i}}),0),_}function flattenFactory(s,o,i){var a=makeSequence(s);return a.__iterateUncached=function(a,u){var _=0,w=!1;function flatDeep(s,x){var C=this;s.__iterate((function(s,u){return(!o||x0}function zipWithFactory(s,o,i){var a=makeSequence(s);return a.size=new ArraySeq(i).map((function(s){return s.size})).min(),a.__iterate=function(s,o){for(var i,a=this.__iterator(U,o),u=0;!(i=a.next()).done&&!1!==s(i.value,u++,this););return u},a.__iteratorUncached=function(s,a){var u=i.map((function(s){return s=Iterable(s),getIterator(a?s.reverse():s)})),_=0,w=!1;return new Iterator((function(){var i;return w||(i=u.map((function(s){return s.next()})),w=i.some((function(s){return s.done}))),w?iteratorDone():iteratorValue(s,_++,o.apply(null,i.map((function(s){return s.value}))))}))},a}function reify(s,o){return isSeq(s)?o:s.constructor(o)}function validateEntry(s){if(s!==Object(s))throw new TypeError(\"Expected [K, V] tuple: \"+s)}function resolveSize(s){return assertNotInfinite(s.size),ensureSize(s)}function iterableClass(s){return isKeyed(s)?KeyedIterable:isIndexed(s)?IndexedIterable:SetIterable}function makeSequence(s){return Object.create((isKeyed(s)?KeyedSeq:isIndexed(s)?IndexedSeq:SetSeq).prototype)}function cacheResultThrough(){return this._iter.cacheResult?(this._iter.cacheResult(),this.size=this._iter.size,this):Seq.prototype.cacheResult.call(this)}function defaultComparator(s,o){return s>o?1:s=0;i--)o={value:arguments[i],next:o};return this.__ownerID?(this.size=s,this._head=o,this.__hash=void 0,this.__altered=!0,this):makeStack(s,o)},Stack.prototype.pushAll=function(s){if(0===(s=IndexedIterable(s)).size)return this;assertNotInfinite(s.size);var o=this.size,i=this._head;return s.reverse().forEach((function(s){o++,i={value:s,next:i}})),this.__ownerID?(this.size=o,this._head=i,this.__hash=void 0,this.__altered=!0,this):makeStack(o,i)},Stack.prototype.pop=function(){return this.slice(1)},Stack.prototype.unshift=function(){return this.push.apply(this,arguments)},Stack.prototype.unshiftAll=function(s){return this.pushAll(s)},Stack.prototype.shift=function(){return this.pop.apply(this,arguments)},Stack.prototype.clear=function(){return 0===this.size?this:this.__ownerID?(this.size=0,this._head=void 0,this.__hash=void 0,this.__altered=!0,this):emptyStack()},Stack.prototype.slice=function(s,o){if(wholeSlice(s,o,this.size))return this;var i=resolveBegin(s,this.size);if(resolveEnd(o,this.size)!==this.size)return IndexedCollection.prototype.slice.call(this,s,o);for(var a=this.size-i,u=this._head;i--;)u=u.next;return this.__ownerID?(this.size=a,this._head=u,this.__hash=void 0,this.__altered=!0,this):makeStack(a,u)},Stack.prototype.__ensureOwner=function(s){return s===this.__ownerID?this:s?makeStack(this.size,this._head,s,this.__hash):(this.__ownerID=s,this.__altered=!1,this)},Stack.prototype.__iterate=function(s,o){if(o)return this.reverse().__iterate(s);for(var i=0,a=this._head;a&&!1!==s(a.value,i++,this);)a=a.next;return i},Stack.prototype.__iterator=function(s,o){if(o)return this.reverse().__iterator(s);var i=0,a=this._head;return new Iterator((function(){if(a){var o=a.value;return a=a.next,iteratorValue(s,i++,o)}return iteratorDone()}))},Stack.isStack=isStack;var at,ct=\"@@__IMMUTABLE_STACK__@@\",lt=Stack.prototype;function makeStack(s,o,i,a){var u=Object.create(lt);return u.size=s,u._head=o,u.__ownerID=i,u.__hash=a,u.__altered=!1,u}function emptyStack(){return at||(at=makeStack(0))}function mixin(s,o){var keyCopier=function(i){s.prototype[i]=o[i]};return Object.keys(o).forEach(keyCopier),Object.getOwnPropertySymbols&&Object.getOwnPropertySymbols(o).forEach(keyCopier),s}lt[ct]=!0,lt.withMutations=$e.withMutations,lt.asMutable=$e.asMutable,lt.asImmutable=$e.asImmutable,lt.wasAltered=$e.wasAltered,Iterable.Iterator=Iterator,mixin(Iterable,{toArray:function(){assertNotInfinite(this.size);var s=new Array(this.size||0);return this.valueSeq().__iterate((function(o,i){s[i]=o})),s},toIndexedSeq:function(){return new ToIndexedSequence(this)},toJS:function(){return this.toSeq().map((function(s){return s&&\"function\"==typeof s.toJS?s.toJS():s})).__toJS()},toJSON:function(){return this.toSeq().map((function(s){return s&&\"function\"==typeof s.toJSON?s.toJSON():s})).__toJS()},toKeyedSeq:function(){return new ToKeyedSequence(this,!0)},toMap:function(){return Map(this.toKeyedSeq())},toObject:function(){assertNotInfinite(this.size);var s={};return this.__iterate((function(o,i){s[i]=o})),s},toOrderedMap:function(){return OrderedMap(this.toKeyedSeq())},toOrderedSet:function(){return OrderedSet(isKeyed(this)?this.valueSeq():this)},toSet:function(){return Set(isKeyed(this)?this.valueSeq():this)},toSetSeq:function(){return new ToSetSequence(this)},toSeq:function(){return isIndexed(this)?this.toIndexedSeq():isKeyed(this)?this.toKeyedSeq():this.toSetSeq()},toStack:function(){return Stack(isKeyed(this)?this.valueSeq():this)},toList:function(){return List(isKeyed(this)?this.valueSeq():this)},toString:function(){return\"[Iterable]\"},__toString:function(s,o){return 0===this.size?s+o:s+\" \"+this.toSeq().map(this.__toStringMapper).join(\", \")+\" \"+o},concat:function(){return reify(this,concatFactory(this,s.call(arguments,0)))},includes:function(s){return this.some((function(o){return is(o,s)}))},entries:function(){return this.__iterator(V)},every:function(s,o){assertNotInfinite(this.size);var i=!0;return this.__iterate((function(a,u,_){if(!s.call(o,a,u,_))return i=!1,!1})),i},filter:function(s,o){return reify(this,filterFactory(this,s,o,!0))},find:function(s,o,i){var a=this.findEntry(s,o);return a?a[1]:i},forEach:function(s,o){return assertNotInfinite(this.size),this.__iterate(o?s.bind(o):s)},join:function(s){assertNotInfinite(this.size),s=void 0!==s?\"\"+s:\",\";var o=\"\",i=!0;return this.__iterate((function(a){i?i=!1:o+=s,o+=null!=a?a.toString():\"\"})),o},keys:function(){return this.__iterator($)},map:function(s,o){return reify(this,mapFactory(this,s,o))},reduce:function(s,o,i){var a,u;return assertNotInfinite(this.size),arguments.length<2?u=!0:a=o,this.__iterate((function(o,_,w){u?(u=!1,a=o):a=s.call(i,a,o,_,w)})),a},reduceRight:function(s,o,i){var a=this.toKeyedSeq().reverse();return a.reduce.apply(a,arguments)},reverse:function(){return reify(this,reverseFactory(this,!0))},slice:function(s,o){return reify(this,sliceFactory(this,s,o,!0))},some:function(s,o){return!this.every(not(s),o)},sort:function(s){return reify(this,sortFactory(this,s))},values:function(){return this.__iterator(U)},butLast:function(){return this.slice(0,-1)},isEmpty:function(){return void 0!==this.size?0===this.size:!this.some((function(){return!0}))},count:function(s,o){return ensureSize(s?this.toSeq().filter(s,o):this)},countBy:function(s,o){return countByFactory(this,s,o)},equals:function(s){return deepEqual(this,s)},entrySeq:function(){var s=this;if(s._cache)return new ArraySeq(s._cache);var o=s.toSeq().map(entryMapper).toIndexedSeq();return o.fromEntrySeq=function(){return s.toSeq()},o},filterNot:function(s,o){return this.filter(not(s),o)},findEntry:function(s,o,i){var a=i;return this.__iterate((function(i,u,_){if(s.call(o,i,u,_))return a=[u,i],!1})),a},findKey:function(s,o){var i=this.findEntry(s,o);return i&&i[0]},findLast:function(s,o,i){return this.toKeyedSeq().reverse().find(s,o,i)},findLastEntry:function(s,o,i){return this.toKeyedSeq().reverse().findEntry(s,o,i)},findLastKey:function(s,o){return this.toKeyedSeq().reverse().findKey(s,o)},first:function(){return this.find(returnTrue)},flatMap:function(s,o){return reify(this,flatMapFactory(this,s,o))},flatten:function(s){return reify(this,flattenFactory(this,s,!0))},fromEntrySeq:function(){return new FromEntriesSequence(this)},get:function(s,o){return this.find((function(o,i){return is(i,s)}),void 0,o)},getIn:function(s,o){for(var i,a=this,u=forceIterator(s);!(i=u.next()).done;){var _=i.value;if((a=a&&a.get?a.get(_,j):j)===j)return o}return a},groupBy:function(s,o){return groupByFactory(this,s,o)},has:function(s){return this.get(s,j)!==j},hasIn:function(s){return this.getIn(s,j)!==j},isSubset:function(s){return s=\"function\"==typeof s.includes?s:Iterable(s),this.every((function(o){return s.includes(o)}))},isSuperset:function(s){return(s=\"function\"==typeof s.isSubset?s:Iterable(s)).isSubset(this)},keyOf:function(s){return this.findKey((function(o){return is(o,s)}))},keySeq:function(){return this.toSeq().map(keyMapper).toIndexedSeq()},last:function(){return this.toSeq().reverse().first()},lastKeyOf:function(s){return this.toKeyedSeq().reverse().keyOf(s)},max:function(s){return maxFactory(this,s)},maxBy:function(s,o){return maxFactory(this,o,s)},min:function(s){return maxFactory(this,s?neg(s):defaultNegComparator)},minBy:function(s,o){return maxFactory(this,o?neg(o):defaultNegComparator,s)},rest:function(){return this.slice(1)},skip:function(s){return this.slice(Math.max(0,s))},skipLast:function(s){return reify(this,this.toSeq().reverse().skip(s).reverse())},skipWhile:function(s,o){return reify(this,skipWhileFactory(this,s,o,!0))},skipUntil:function(s,o){return this.skipWhile(not(s),o)},sortBy:function(s,o){return reify(this,sortFactory(this,o,s))},take:function(s){return this.slice(0,Math.max(0,s))},takeLast:function(s){return reify(this,this.toSeq().reverse().take(s).reverse())},takeWhile:function(s,o){return reify(this,takeWhileFactory(this,s,o))},takeUntil:function(s,o){return this.takeWhile(not(s),o)},valueSeq:function(){return this.toIndexedSeq()},hashCode:function(){return this.__hash||(this.__hash=hashIterable(this))}});var ut=Iterable.prototype;ut[o]=!0,ut[Z]=ut.values,ut.__toJS=ut.toArray,ut.__toStringMapper=quoteString,ut.inspect=ut.toSource=function(){return this.toString()},ut.chain=ut.flatMap,ut.contains=ut.includes,mixin(KeyedIterable,{flip:function(){return reify(this,flipFactory(this))},mapEntries:function(s,o){var i=this,a=0;return reify(this,this.toSeq().map((function(u,_){return s.call(o,[_,u],a++,i)})).fromEntrySeq())},mapKeys:function(s,o){var i=this;return reify(this,this.toSeq().flip().map((function(a,u){return s.call(o,a,u,i)})).flip())}});var pt=KeyedIterable.prototype;function keyMapper(s,o){return o}function entryMapper(s,o){return[o,s]}function not(s){return function(){return!s.apply(this,arguments)}}function neg(s){return function(){return-s.apply(this,arguments)}}function quoteString(s){return\"string\"==typeof s?JSON.stringify(s):String(s)}function defaultZipper(){return arrCopy(arguments)}function defaultNegComparator(s,o){return so?-1:0}function hashIterable(s){if(s.size===1/0)return 0;var o=isOrdered(s),i=isKeyed(s),a=o?1:0;return murmurHashOfSize(s.__iterate(i?o?function(s,o){a=31*a+hashMerge(hash(s),hash(o))|0}:function(s,o){a=a+hashMerge(hash(s),hash(o))|0}:o?function(s){a=31*a+hash(s)|0}:function(s){a=a+hash(s)|0}),a)}function murmurHashOfSize(s,o){return o=le(o,3432918353),o=le(o<<15|o>>>-15,461845907),o=le(o<<13|o>>>-13,5),o=le((o=o+3864292196^s)^o>>>16,2246822507),o=smi((o=le(o^o>>>13,3266489909))^o>>>16)}function hashMerge(s,o){return s^o+2654435769+(s<<6)+(s>>2)}return pt[i]=!0,pt[Z]=ut.entries,pt.__toJS=ut.toObject,pt.__toStringMapper=function(s,o){return JSON.stringify(o)+\": \"+quoteString(s)},mixin(IndexedIterable,{toKeyedSeq:function(){return new ToKeyedSequence(this,!1)},filter:function(s,o){return reify(this,filterFactory(this,s,o,!1))},findIndex:function(s,o){var i=this.findEntry(s,o);return i?i[0]:-1},indexOf:function(s){var o=this.keyOf(s);return void 0===o?-1:o},lastIndexOf:function(s){var o=this.lastKeyOf(s);return void 0===o?-1:o},reverse:function(){return reify(this,reverseFactory(this,!1))},slice:function(s,o){return reify(this,sliceFactory(this,s,o,!1))},splice:function(s,o){var i=arguments.length;if(o=Math.max(0|o,0),0===i||2===i&&!o)return this;s=resolveBegin(s,s<0?this.count():this.size);var a=this.slice(0,s);return reify(this,1===i?a:a.concat(arrCopy(arguments,2),this.slice(s+o)))},findLastIndex:function(s,o){var i=this.findLastEntry(s,o);return i?i[0]:-1},first:function(){return this.get(0)},flatten:function(s){return reify(this,flattenFactory(this,s,!1))},get:function(s,o){return(s=wrapIndex(this,s))<0||this.size===1/0||void 0!==this.size&&s>this.size?o:this.find((function(o,i){return i===s}),void 0,o)},has:function(s){return(s=wrapIndex(this,s))>=0&&(void 0!==this.size?this.size===1/0||s{\"use strict\";i(71340);var a=i(92046);s.exports=a.Object.assign},9957:(s,o,i)=>{\"use strict\";var a=Function.prototype.call,u=Object.prototype.hasOwnProperty,_=i(66743);s.exports=_.call(a,u)},9999:(s,o,i)=>{var a=i(37217),u=i(83729),_=i(16547),w=i(74733),x=i(43838),C=i(93290),j=i(23007),L=i(92271),B=i(48948),$=i(50002),U=i(83349),V=i(5861),z=i(76189),Y=i(77199),Z=i(35529),ee=i(56449),ie=i(3656),ae=i(87730),ce=i(23805),le=i(38440),pe=i(95950),de=i(37241),fe=\"[object Arguments]\",ye=\"[object Function]\",be=\"[object Object]\",_e={};_e[fe]=_e[\"[object Array]\"]=_e[\"[object ArrayBuffer]\"]=_e[\"[object DataView]\"]=_e[\"[object Boolean]\"]=_e[\"[object Date]\"]=_e[\"[object Float32Array]\"]=_e[\"[object Float64Array]\"]=_e[\"[object Int8Array]\"]=_e[\"[object Int16Array]\"]=_e[\"[object Int32Array]\"]=_e[\"[object Map]\"]=_e[\"[object Number]\"]=_e[be]=_e[\"[object RegExp]\"]=_e[\"[object Set]\"]=_e[\"[object String]\"]=_e[\"[object Symbol]\"]=_e[\"[object Uint8Array]\"]=_e[\"[object Uint8ClampedArray]\"]=_e[\"[object Uint16Array]\"]=_e[\"[object Uint32Array]\"]=!0,_e[\"[object Error]\"]=_e[ye]=_e[\"[object WeakMap]\"]=!1,s.exports=function baseClone(s,o,i,Se,we,xe){var Pe,Te=1&o,Re=2&o,$e=4&o;if(i&&(Pe=we?i(s,Se,we,xe):i(s)),void 0!==Pe)return Pe;if(!ce(s))return s;var qe=ee(s);if(qe){if(Pe=z(s),!Te)return j(s,Pe)}else{var ze=V(s),We=ze==ye||\"[object GeneratorFunction]\"==ze;if(ie(s))return C(s,Te);if(ze==be||ze==fe||We&&!we){if(Pe=Re||We?{}:Z(s),!Te)return Re?B(s,x(Pe,s)):L(s,w(Pe,s))}else{if(!_e[ze])return we?s:{};Pe=Y(s,ze,Te)}}xe||(xe=new a);var He=xe.get(s);if(He)return He;xe.set(s,Pe),le(s)?s.forEach((function(a){Pe.add(baseClone(a,o,i,a,s,xe))})):ae(s)&&s.forEach((function(a,u){Pe.set(u,baseClone(a,o,i,u,s,xe))}));var Ye=qe?void 0:($e?Re?U:$:Re?de:pe)(s);return u(Ye||s,(function(a,u){Ye&&(a=s[u=a]),_(Pe,u,baseClone(a,o,i,u,s,xe))})),Pe}},10023:(s,o,i)=>{const a=i(6205),INTS=()=>[{type:a.RANGE,from:48,to:57}],WORDS=()=>[{type:a.CHAR,value:95},{type:a.RANGE,from:97,to:122},{type:a.RANGE,from:65,to:90}].concat(INTS()),WHITESPACE=()=>[{type:a.CHAR,value:9},{type:a.CHAR,value:10},{type:a.CHAR,value:11},{type:a.CHAR,value:12},{type:a.CHAR,value:13},{type:a.CHAR,value:32},{type:a.CHAR,value:160},{type:a.CHAR,value:5760},{type:a.RANGE,from:8192,to:8202},{type:a.CHAR,value:8232},{type:a.CHAR,value:8233},{type:a.CHAR,value:8239},{type:a.CHAR,value:8287},{type:a.CHAR,value:12288},{type:a.CHAR,value:65279}];o.words=()=>({type:a.SET,set:WORDS(),not:!1}),o.notWords=()=>({type:a.SET,set:WORDS(),not:!0}),o.ints=()=>({type:a.SET,set:INTS(),not:!1}),o.notInts=()=>({type:a.SET,set:INTS(),not:!0}),o.whitespace=()=>({type:a.SET,set:WHITESPACE(),not:!1}),o.notWhitespace=()=>({type:a.SET,set:WHITESPACE(),not:!0}),o.anyChar=()=>({type:a.SET,set:[{type:a.CHAR,value:10},{type:a.CHAR,value:13},{type:a.CHAR,value:8232},{type:a.CHAR,value:8233}],not:!0})},10043:(s,o,i)=>{\"use strict\";var a=i(54018),u=String,_=TypeError;s.exports=function(s){if(a(s))return s;throw new _(\"Can't set \"+u(s)+\" as a prototype\")}},10076:s=>{\"use strict\";s.exports=Function.prototype.call},10124:(s,o,i)=>{var a=i(9325);s.exports=function(){return a.Date.now()}},10300:(s,o,i)=>{\"use strict\";var a=i(13930),u=i(82159),_=i(36624),w=i(4640),x=i(73448),C=TypeError;s.exports=function(s,o){var i=arguments.length<2?x(s):o;if(u(i))return _(a(i,s));throw new C(w(s)+\" is not iterable\")}},10316:(s,o,i)=>{const a=i(2404),u=i(55973),_=i(92340);class Element{constructor(s,o,i){o&&(this.meta=o),i&&(this.attributes=i),this.content=s}freeze(){Object.isFrozen(this)||(this._meta&&(this.meta.parent=this,this.meta.freeze()),this._attributes&&(this.attributes.parent=this,this.attributes.freeze()),this.children.forEach((s=>{s.parent=this,s.freeze()}),this),this.content&&Array.isArray(this.content)&&Object.freeze(this.content),Object.freeze(this))}primitive(){}clone(){const s=new this.constructor;return s.element=this.element,this.meta.length&&(s._meta=this.meta.clone()),this.attributes.length&&(s._attributes=this.attributes.clone()),this.content?this.content.clone?s.content=this.content.clone():Array.isArray(this.content)?s.content=this.content.map((s=>s.clone())):s.content=this.content:s.content=this.content,s}toValue(){return this.content instanceof Element?this.content.toValue():this.content instanceof u?{key:this.content.key.toValue(),value:this.content.value?this.content.value.toValue():void 0}:this.content&&this.content.map?this.content.map((s=>s.toValue()),this):this.content}toRef(s){if(\"\"===this.id.toValue())throw Error(\"Cannot create reference to an element that does not contain an ID\");const o=new this.RefElement(this.id.toValue());return s&&(o.path=s),o}findRecursive(...s){if(arguments.length>1&&!this.isFrozen)throw new Error(\"Cannot find recursive with multiple element names without first freezing the element. Call `element.freeze()`\");const o=s.pop();let i=new _;const append=(s,o)=>(s.push(o),s),checkElement=(s,i)=>{i.element===o&&s.push(i);const a=i.findRecursive(o);return a&&a.reduce(append,s),i.content instanceof u&&(i.content.key&&checkElement(s,i.content.key),i.content.value&&checkElement(s,i.content.value)),s};return this.content&&(this.content.element&&checkElement(i,this.content),Array.isArray(this.content)&&this.content.reduce(checkElement,i)),s.isEmpty||(i=i.filter((o=>{let i=o.parents.map((s=>s.element));for(const o in s){const a=s[o],u=i.indexOf(a);if(-1===u)return!1;i=i.splice(0,u)}return!0}))),i}set(s){return this.content=s,this}equals(s){return a(this.toValue(),s)}getMetaProperty(s,o){if(!this.meta.hasKey(s)){if(this.isFrozen){const s=this.refract(o);return s.freeze(),s}this.meta.set(s,o)}return this.meta.get(s)}setMetaProperty(s,o){this.meta.set(s,o)}get element(){return this._storedElement||\"element\"}set element(s){this._storedElement=s}get content(){return this._content}set content(s){if(s instanceof Element)this._content=s;else if(s instanceof _)this.content=s.elements;else if(\"string\"==typeof s||\"number\"==typeof s||\"boolean\"==typeof s||\"null\"===s||null==s)this._content=s;else if(s instanceof u)this._content=s;else if(Array.isArray(s))this._content=s.map(this.refract);else{if(\"object\"!=typeof s)throw new Error(\"Cannot set content to given value\");this._content=Object.keys(s).map((o=>new this.MemberElement(o,s[o])))}}get meta(){if(!this._meta){if(this.isFrozen){const s=new this.ObjectElement;return s.freeze(),s}this._meta=new this.ObjectElement}return this._meta}set meta(s){s instanceof this.ObjectElement?this._meta=s:this.meta.set(s||{})}get attributes(){if(!this._attributes){if(this.isFrozen){const s=new this.ObjectElement;return s.freeze(),s}this._attributes=new this.ObjectElement}return this._attributes}set attributes(s){s instanceof this.ObjectElement?this._attributes=s:this.attributes.set(s||{})}get id(){return this.getMetaProperty(\"id\",\"\")}set id(s){this.setMetaProperty(\"id\",s)}get classes(){return this.getMetaProperty(\"classes\",[])}set classes(s){this.setMetaProperty(\"classes\",s)}get title(){return this.getMetaProperty(\"title\",\"\")}set title(s){this.setMetaProperty(\"title\",s)}get description(){return this.getMetaProperty(\"description\",\"\")}set description(s){this.setMetaProperty(\"description\",s)}get links(){return this.getMetaProperty(\"links\",[])}set links(s){this.setMetaProperty(\"links\",s)}get isFrozen(){return Object.isFrozen(this)}get parents(){let{parent:s}=this;const o=new _;for(;s;)o.push(s),s=s.parent;return o}get children(){if(Array.isArray(this.content))return new _(this.content);if(this.content instanceof u){const s=new _([this.content.key]);return this.content.value&&s.push(this.content.value),s}return this.content instanceof Element?new _([this.content]):new _}get recursiveChildren(){const s=new _;return this.children.forEach((o=>{s.push(o),o.recursiveChildren.forEach((o=>{s.push(o)}))})),s}}s.exports=Element},10392:s=>{s.exports=function getValue(s,o){return null==s?void 0:s[o]}},10487:(s,o,i)=>{\"use strict\";var a=i(96897),u=i(30655),_=i(73126),w=i(12205);s.exports=function callBind(s){var o=_(arguments),i=s.length-(arguments.length-1);return a(o,1+(i>0?i:0),!0)},u?u(s.exports,\"apply\",{value:w}):s.exports.apply=w},10776:(s,o,i)=>{var a=i(30756),u=i(95950);s.exports=function getMatchData(s){for(var o=u(s),i=o.length;i--;){var _=o[i],w=s[_];o[i]=[_,w,a(w)]}return o}},10866:(s,o,i)=>{const a=i(6048),u=i(92340);class ObjectSlice extends u{map(s,o){return this.elements.map((i=>s.bind(o)(i.value,i.key,i)))}filter(s,o){return new ObjectSlice(this.elements.filter((i=>s.bind(o)(i.value,i.key,i))))}reject(s,o){return this.filter(a(s.bind(o)))}forEach(s,o){return this.elements.forEach(((i,a)=>{s.bind(o)(i.value,i.key,i,a)}))}keys(){return this.map(((s,o)=>o.toValue()))}values(){return this.map((s=>s.toValue()))}}s.exports=ObjectSlice},11002:s=>{\"use strict\";s.exports=Function.prototype.apply},11042:(s,o,i)=>{\"use strict\";var a=i(85582),u=i(1907),_=i(24443),w=i(87170),x=i(36624),C=u([].concat);s.exports=a(\"Reflect\",\"ownKeys\")||function ownKeys(s){var o=_.f(x(s)),i=w.f;return i?C(o,i(s)):o}},11091:(s,o,i)=>{\"use strict\";var a=i(45951),u=i(76024),_=i(92361),w=i(62250),x=i(13846).f,C=i(7463),j=i(92046),L=i(28311),B=i(61626),$=i(49724);i(36128);var wrapConstructor=function(s){var Wrapper=function(o,i,a){if(this instanceof Wrapper){switch(arguments.length){case 0:return new s;case 1:return new s(o);case 2:return new s(o,i)}return new s(o,i,a)}return u(s,this,arguments)};return Wrapper.prototype=s.prototype,Wrapper};s.exports=function(s,o){var i,u,U,V,z,Y,Z,ee,ie,ae=s.target,ce=s.global,le=s.stat,pe=s.proto,de=ce?a:le?a[ae]:a[ae]&&a[ae].prototype,fe=ce?j:j[ae]||B(j,ae,{})[ae],ye=fe.prototype;for(V in o)u=!(i=C(ce?V:ae+(le?\".\":\"#\")+V,s.forced))&&de&&$(de,V),Y=fe[V],u&&(Z=s.dontCallGetSet?(ie=x(de,V))&&ie.value:de[V]),z=u&&Z?Z:o[V],(i||pe||typeof Y!=typeof z)&&(ee=s.bind&&u?L(z,a):s.wrap&&u?wrapConstructor(z):pe&&w(z)?_(z):z,(s.sham||z&&z.sham||Y&&Y.sham)&&B(ee,\"sham\",!0),B(fe,V,ee),pe&&($(j,U=ae+\"Prototype\")||B(j,U,{}),B(j[U],V,z),s.real&&ye&&(i||!ye[V])&&B(ye,V,z)))}},11287:s=>{s.exports=function getHolder(s){return s.placeholder}},11331:(s,o,i)=>{var a=i(72552),u=i(28879),_=i(40346),w=Function.prototype,x=Object.prototype,C=w.toString,j=x.hasOwnProperty,L=C.call(Object);s.exports=function isPlainObject(s){if(!_(s)||\"[object Object]\"!=a(s))return!1;var o=u(s);if(null===o)return!0;var i=j.call(o,\"constructor\")&&o.constructor;return\"function\"==typeof i&&i instanceof i&&C.call(i)==L}},11470:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(65482),_=i(90160),w=i(74239),x=a(\"\".charAt),C=a(\"\".charCodeAt),j=a(\"\".slice),createMethod=function(s){return function(o,i){var a,L,B=_(w(o)),$=u(i),U=B.length;return $<0||$>=U?s?\"\":void 0:(a=C(B,$))<55296||a>56319||$+1===U||(L=C(B,$+1))<56320||L>57343?s?x(B,$):a:s?j(B,$,$+2):L-56320+(a-55296<<10)+65536}};s.exports={codeAt:createMethod(!1),charAt:createMethod(!0)}},11842:(s,o,i)=>{var a=i(82819),u=i(9325);s.exports=function createBind(s,o,i){var _=1&o,w=a(s);return function wrapper(){return(this&&this!==u&&this instanceof wrapper?w:s).apply(_?i:this,arguments)}}},12205:(s,o,i)=>{\"use strict\";var a=i(66743),u=i(11002),_=i(13144);s.exports=function applyBind(){return _(a,u,arguments)}},12242:(s,o,i)=>{const a=i(10316);s.exports=class BooleanElement extends a{constructor(s,o,i){super(s,o,i),this.element=\"boolean\"}primitive(){return\"boolean\"}}},12507:(s,o,i)=>{var a=i(28754),u=i(49698),_=i(63912),w=i(13222);s.exports=function createCaseFirst(s){return function(o){o=w(o);var i=u(o)?_(o):void 0,x=i?i[0]:o.charAt(0),C=i?a(i,1).join(\"\"):o.slice(1);return x[s]()+C}}},12560:(s,o,i)=>{\"use strict\";i(99363);var a=i(19287),u=i(45951),_=i(14840),w=i(93742);for(var x in a)_(u[x],x),w[x]=w.Array},12651:(s,o,i)=>{var a=i(74218);s.exports=function getMapData(s,o){var i=s.__data__;return a(o)?i[\"string\"==typeof o?\"string\":\"hash\"]:i.map}},12749:(s,o,i)=>{var a=i(81042),u=Object.prototype.hasOwnProperty;s.exports=function hashHas(s){var o=this.__data__;return a?void 0!==o[s]:u.call(o,s)}},13144:(s,o,i)=>{\"use strict\";var a=i(66743),u=i(11002),_=i(10076),w=i(47119);s.exports=w||a.call(_,u)},13222:(s,o,i)=>{var a=i(77556);s.exports=function toString(s){return null==s?\"\":a(s)}},13846:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(13930),_=i(22574),w=i(75817),x=i(4993),C=i(70470),j=i(49724),L=i(73648),B=Object.getOwnPropertyDescriptor;o.f=a?B:function getOwnPropertyDescriptor(s,o){if(s=x(s),o=C(o),L)try{return B(s,o)}catch(s){}if(j(s,o))return w(!u(_.f,s,o),s[o])}},13930:(s,o,i)=>{\"use strict\";var a=i(41505),u=Function.prototype.call;s.exports=a?u.bind(u):function(){return u.apply(u,arguments)}},14248:s=>{s.exports=function arraySome(s,o){for(var i=-1,a=null==s?0:s.length;++i{s.exports=function arrayPush(s,o){for(var i=-1,a=o.length,u=s.length;++i{const a=i(10316);s.exports=class RefElement extends a{constructor(s,o,i){super(s||[],o,i),this.element=\"ref\",this.path||(this.path=\"element\")}get path(){return this.attributes.get(\"path\")}set path(s){this.attributes.set(\"path\",s)}}},14744:s=>{\"use strict\";var o=function isMergeableObject(s){return function isNonNullObject(s){return!!s&&\"object\"==typeof s}(s)&&!function isSpecial(s){var o=Object.prototype.toString.call(s);return\"[object RegExp]\"===o||\"[object Date]\"===o||function isReactElement(s){return s.$$typeof===i}(s)}(s)};var i=\"function\"==typeof Symbol&&Symbol.for?Symbol.for(\"react.element\"):60103;function cloneUnlessOtherwiseSpecified(s,o){return!1!==o.clone&&o.isMergeableObject(s)?deepmerge(function emptyTarget(s){return Array.isArray(s)?[]:{}}(s),s,o):s}function defaultArrayMerge(s,o,i){return s.concat(o).map((function(s){return cloneUnlessOtherwiseSpecified(s,i)}))}function getKeys(s){return Object.keys(s).concat(function getEnumerableOwnPropertySymbols(s){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(s).filter((function(o){return Object.propertyIsEnumerable.call(s,o)})):[]}(s))}function propertyIsOnObject(s,o){try{return o in s}catch(s){return!1}}function mergeObject(s,o,i){var a={};return i.isMergeableObject(s)&&getKeys(s).forEach((function(o){a[o]=cloneUnlessOtherwiseSpecified(s[o],i)})),getKeys(o).forEach((function(u){(function propertyIsUnsafe(s,o){return propertyIsOnObject(s,o)&&!(Object.hasOwnProperty.call(s,o)&&Object.propertyIsEnumerable.call(s,o))})(s,u)||(propertyIsOnObject(s,u)&&i.isMergeableObject(o[u])?a[u]=function getMergeFunction(s,o){if(!o.customMerge)return deepmerge;var i=o.customMerge(s);return\"function\"==typeof i?i:deepmerge}(u,i)(s[u],o[u],i):a[u]=cloneUnlessOtherwiseSpecified(o[u],i))})),a}function deepmerge(s,i,a){(a=a||{}).arrayMerge=a.arrayMerge||defaultArrayMerge,a.isMergeableObject=a.isMergeableObject||o,a.cloneUnlessOtherwiseSpecified=cloneUnlessOtherwiseSpecified;var u=Array.isArray(i);return u===Array.isArray(s)?u?a.arrayMerge(s,i,a):mergeObject(s,i,a):cloneUnlessOtherwiseSpecified(i,a)}deepmerge.all=function deepmergeAll(s,o){if(!Array.isArray(s))throw new Error(\"first argument should be an array\");return s.reduce((function(s,i){return deepmerge(s,i,o)}),{})};var a=deepmerge;s.exports=a},14792:(s,o,i)=>{var a=i(13222),u=i(55808);s.exports=function capitalize(s){return u(a(s).toLowerCase())}},14840:(s,o,i)=>{\"use strict\";var a=i(52623),u=i(74284).f,_=i(61626),w=i(49724),x=i(54878),C=i(76264)(\"toStringTag\");s.exports=function(s,o,i,j){var L=i?s:s&&s.prototype;L&&(w(L,C)||u(L,C,{configurable:!0,value:o}),j&&!a&&_(L,\"toString\",x))}},14974:s=>{s.exports=function safeGet(s,o){if((\"constructor\"!==o||\"function\"!=typeof s[o])&&\"__proto__\"!=o)return s[o]}},15287:(s,o)=>{\"use strict\";var i=Symbol.for(\"react.element\"),a=Symbol.for(\"react.portal\"),u=Symbol.for(\"react.fragment\"),_=Symbol.for(\"react.strict_mode\"),w=Symbol.for(\"react.profiler\"),x=Symbol.for(\"react.provider\"),C=Symbol.for(\"react.context\"),j=Symbol.for(\"react.forward_ref\"),L=Symbol.for(\"react.suspense\"),B=Symbol.for(\"react.memo\"),$=Symbol.for(\"react.lazy\"),U=Symbol.iterator;var V={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},z=Object.assign,Y={};function E(s,o,i){this.props=s,this.context=o,this.refs=Y,this.updater=i||V}function F(){}function G(s,o,i){this.props=s,this.context=o,this.refs=Y,this.updater=i||V}E.prototype.isReactComponent={},E.prototype.setState=function(s,o){if(\"object\"!=typeof s&&\"function\"!=typeof s&&null!=s)throw Error(\"setState(...): takes an object of state variables to update or a function which returns an object of state variables.\");this.updater.enqueueSetState(this,s,o,\"setState\")},E.prototype.forceUpdate=function(s){this.updater.enqueueForceUpdate(this,s,\"forceUpdate\")},F.prototype=E.prototype;var Z=G.prototype=new F;Z.constructor=G,z(Z,E.prototype),Z.isPureReactComponent=!0;var ee=Array.isArray,ie=Object.prototype.hasOwnProperty,ae={current:null},ce={key:!0,ref:!0,__self:!0,__source:!0};function M(s,o,a){var u,_={},w=null,x=null;if(null!=o)for(u in void 0!==o.ref&&(x=o.ref),void 0!==o.key&&(w=\"\"+o.key),o)ie.call(o,u)&&!ce.hasOwnProperty(u)&&(_[u]=o[u]);var C=arguments.length-2;if(1===C)_.children=a;else if(1{var a=i(96131);s.exports=function arrayIncludes(s,o){return!!(null==s?0:s.length)&&a(s,o,0)>-1}},15340:()=>{},15377:(s,o,i)=>{\"use strict\";var a=i(92861).Buffer,u=i(64634),_=i(74372),w=ArrayBuffer.isView||function isView(s){try{return _(s),!0}catch(s){return!1}},x=\"undefined\"!=typeof Uint8Array,C=\"undefined\"!=typeof ArrayBuffer&&\"undefined\"!=typeof Uint8Array,j=C&&(a.prototype instanceof Uint8Array||a.TYPED_ARRAY_SUPPORT);s.exports=function toBuffer(s,o){if(s instanceof a)return s;if(\"string\"==typeof s)return a.from(s,o);if(C&&w(s)){if(0===s.byteLength)return a.alloc(0);if(j){var i=a.from(s.buffer,s.byteOffset,s.byteLength);if(i.byteLength===s.byteLength)return i}var _=s instanceof Uint8Array?s:new Uint8Array(s.buffer,s.byteOffset,s.byteLength),L=a.from(_);if(L.length===s.byteLength)return L}if(x&&s instanceof Uint8Array)return a.from(s);var B=u(s);if(B)for(var $=0;$255||~~U!==U)throw new RangeError(\"Array items must be numbers in the range 0-255.\")}if(B||a.isBuffer(s)&&s.constructor&&\"function\"==typeof s.constructor.isBuffer&&s.constructor.isBuffer(s))return a.from(s);throw new TypeError('The \"data\" argument must be a string, an Array, a Buffer, a Uint8Array, or a DataView.')}},15389:(s,o,i)=>{var a=i(93663),u=i(87978),_=i(83488),w=i(56449),x=i(50583);s.exports=function baseIteratee(s){return\"function\"==typeof s?s:null==s?_:\"object\"==typeof s?w(s)?u(s[0],s[1]):a(s):x(s)}},15972:(s,o,i)=>{\"use strict\";var a=i(49724),u=i(62250),_=i(39298),w=i(92522),x=i(57382),C=w(\"IE_PROTO\"),j=Object,L=j.prototype;s.exports=x?j.getPrototypeOf:function(s){var o=_(s);if(a(o,C))return o[C];var i=o.constructor;return u(i)&&o instanceof i?i.prototype:o instanceof j?L:null}},16038:(s,o,i)=>{var a=i(5861),u=i(40346);s.exports=function baseIsSet(s){return u(s)&&\"[object Set]\"==a(s)}},16426:s=>{s.exports=function(){var s=document.getSelection();if(!s.rangeCount)return function(){};for(var o=document.activeElement,i=[],a=0;a{var a=i(43360),u=i(75288),_=Object.prototype.hasOwnProperty;s.exports=function assignValue(s,o,i){var w=s[o];_.call(s,o)&&u(w,i)&&(void 0!==i||o in s)||a(s,o,i)}},16708:(s,o,i)=>{\"use strict\";var a,u=i(65606);function CorkedRequest(s){var o=this;this.next=null,this.entry=null,this.finish=function(){!function onCorkedFinish(s,o,i){var a=s.entry;s.entry=null;for(;a;){var u=a.callback;o.pendingcb--,u(i),a=a.next}o.corkedRequestsFree.next=s}(o,s)}}s.exports=Writable,Writable.WritableState=WritableState;var _={deprecate:i(94643)},w=i(40345),x=i(48287).Buffer,C=(void 0!==i.g?i.g:\"undefined\"!=typeof window?window:\"undefined\"!=typeof self?self:{}).Uint8Array||function(){};var j,L=i(75896),B=i(65291).getHighWaterMark,$=i(86048).F,U=$.ERR_INVALID_ARG_TYPE,V=$.ERR_METHOD_NOT_IMPLEMENTED,z=$.ERR_MULTIPLE_CALLBACK,Y=$.ERR_STREAM_CANNOT_PIPE,Z=$.ERR_STREAM_DESTROYED,ee=$.ERR_STREAM_NULL_VALUES,ie=$.ERR_STREAM_WRITE_AFTER_END,ae=$.ERR_UNKNOWN_ENCODING,ce=L.errorOrDestroy;function nop(){}function WritableState(s,o,_){a=a||i(25382),s=s||{},\"boolean\"!=typeof _&&(_=o instanceof a),this.objectMode=!!s.objectMode,_&&(this.objectMode=this.objectMode||!!s.writableObjectMode),this.highWaterMark=B(this,s,\"writableHighWaterMark\",_),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var w=!1===s.decodeStrings;this.decodeStrings=!w,this.defaultEncoding=s.defaultEncoding||\"utf8\",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(s){!function onwrite(s,o){var i=s._writableState,a=i.sync,_=i.writecb;if(\"function\"!=typeof _)throw new z;if(function onwriteStateUpdate(s){s.writing=!1,s.writecb=null,s.length-=s.writelen,s.writelen=0}(i),o)!function onwriteError(s,o,i,a,_){--o.pendingcb,i?(u.nextTick(_,a),u.nextTick(finishMaybe,s,o),s._writableState.errorEmitted=!0,ce(s,a)):(_(a),s._writableState.errorEmitted=!0,ce(s,a),finishMaybe(s,o))}(s,i,a,o,_);else{var w=needFinish(i)||s.destroyed;w||i.corked||i.bufferProcessing||!i.bufferedRequest||clearBuffer(s,i),a?u.nextTick(afterWrite,s,i,w,_):afterWrite(s,i,w,_)}}(o,s)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.emitClose=!1!==s.emitClose,this.autoDestroy=!!s.autoDestroy,this.bufferedRequestCount=0,this.corkedRequestsFree=new CorkedRequest(this)}function Writable(s){var o=this instanceof(a=a||i(25382));if(!o&&!j.call(Writable,this))return new Writable(s);this._writableState=new WritableState(s,this,o),this.writable=!0,s&&(\"function\"==typeof s.write&&(this._write=s.write),\"function\"==typeof s.writev&&(this._writev=s.writev),\"function\"==typeof s.destroy&&(this._destroy=s.destroy),\"function\"==typeof s.final&&(this._final=s.final)),w.call(this)}function doWrite(s,o,i,a,u,_,w){o.writelen=a,o.writecb=w,o.writing=!0,o.sync=!0,o.destroyed?o.onwrite(new Z(\"write\")):i?s._writev(u,o.onwrite):s._write(u,_,o.onwrite),o.sync=!1}function afterWrite(s,o,i,a){i||function onwriteDrain(s,o){0===o.length&&o.needDrain&&(o.needDrain=!1,s.emit(\"drain\"))}(s,o),o.pendingcb--,a(),finishMaybe(s,o)}function clearBuffer(s,o){o.bufferProcessing=!0;var i=o.bufferedRequest;if(s._writev&&i&&i.next){var a=o.bufferedRequestCount,u=new Array(a),_=o.corkedRequestsFree;_.entry=i;for(var w=0,x=!0;i;)u[w]=i,i.isBuf||(x=!1),i=i.next,w+=1;u.allBuffers=x,doWrite(s,o,!0,o.length,u,\"\",_.finish),o.pendingcb++,o.lastBufferedRequest=null,_.next?(o.corkedRequestsFree=_.next,_.next=null):o.corkedRequestsFree=new CorkedRequest(o),o.bufferedRequestCount=0}else{for(;i;){var C=i.chunk,j=i.encoding,L=i.callback;if(doWrite(s,o,!1,o.objectMode?1:C.length,C,j,L),i=i.next,o.bufferedRequestCount--,o.writing)break}null===i&&(o.lastBufferedRequest=null)}o.bufferedRequest=i,o.bufferProcessing=!1}function needFinish(s){return s.ending&&0===s.length&&null===s.bufferedRequest&&!s.finished&&!s.writing}function callFinal(s,o){s._final((function(i){o.pendingcb--,i&&ce(s,i),o.prefinished=!0,s.emit(\"prefinish\"),finishMaybe(s,o)}))}function finishMaybe(s,o){var i=needFinish(o);if(i&&(function prefinish(s,o){o.prefinished||o.finalCalled||(\"function\"!=typeof s._final||o.destroyed?(o.prefinished=!0,s.emit(\"prefinish\")):(o.pendingcb++,o.finalCalled=!0,u.nextTick(callFinal,s,o)))}(s,o),0===o.pendingcb&&(o.finished=!0,s.emit(\"finish\"),o.autoDestroy))){var a=s._readableState;(!a||a.autoDestroy&&a.endEmitted)&&s.destroy()}return i}i(56698)(Writable,w),WritableState.prototype.getBuffer=function getBuffer(){for(var s=this.bufferedRequest,o=[];s;)o.push(s),s=s.next;return o},function(){try{Object.defineProperty(WritableState.prototype,\"buffer\",{get:_.deprecate((function writableStateBufferGetter(){return this.getBuffer()}),\"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.\",\"DEP0003\")})}catch(s){}}(),\"function\"==typeof Symbol&&Symbol.hasInstance&&\"function\"==typeof Function.prototype[Symbol.hasInstance]?(j=Function.prototype[Symbol.hasInstance],Object.defineProperty(Writable,Symbol.hasInstance,{value:function value(s){return!!j.call(this,s)||this===Writable&&(s&&s._writableState instanceof WritableState)}})):j=function realHasInstance(s){return s instanceof this},Writable.prototype.pipe=function(){ce(this,new Y)},Writable.prototype.write=function(s,o,i){var a=this._writableState,_=!1,w=!a.objectMode&&function _isUint8Array(s){return x.isBuffer(s)||s instanceof C}(s);return w&&!x.isBuffer(s)&&(s=function _uint8ArrayToBuffer(s){return x.from(s)}(s)),\"function\"==typeof o&&(i=o,o=null),w?o=\"buffer\":o||(o=a.defaultEncoding),\"function\"!=typeof i&&(i=nop),a.ending?function writeAfterEnd(s,o){var i=new ie;ce(s,i),u.nextTick(o,i)}(this,i):(w||function validChunk(s,o,i,a){var _;return null===i?_=new ee:\"string\"==typeof i||o.objectMode||(_=new U(\"chunk\",[\"string\",\"Buffer\"],i)),!_||(ce(s,_),u.nextTick(a,_),!1)}(this,a,s,i))&&(a.pendingcb++,_=function writeOrBuffer(s,o,i,a,u,_){if(!i){var w=function decodeChunk(s,o,i){s.objectMode||!1===s.decodeStrings||\"string\"!=typeof o||(o=x.from(o,i));return o}(o,a,u);a!==w&&(i=!0,u=\"buffer\",a=w)}var C=o.objectMode?1:a.length;o.length+=C;var j=o.length-1))throw new ae(s);return this._writableState.defaultEncoding=s,this},Object.defineProperty(Writable.prototype,\"writableBuffer\",{enumerable:!1,get:function get(){return this._writableState&&this._writableState.getBuffer()}}),Object.defineProperty(Writable.prototype,\"writableHighWaterMark\",{enumerable:!1,get:function get(){return this._writableState.highWaterMark}}),Writable.prototype._write=function(s,o,i){i(new V(\"_write()\"))},Writable.prototype._writev=null,Writable.prototype.end=function(s,o,i){var a=this._writableState;return\"function\"==typeof s?(i=s,s=null,o=null):\"function\"==typeof o&&(i=o,o=null),null!=s&&this.write(s,o),a.corked&&(a.corked=1,this.uncork()),a.ending||function endWritable(s,o,i){o.ending=!0,finishMaybe(s,o),i&&(o.finished?u.nextTick(i):s.once(\"finish\",i));o.ended=!0,s.writable=!1}(this,a,i),this},Object.defineProperty(Writable.prototype,\"writableLength\",{enumerable:!1,get:function get(){return this._writableState.length}}),Object.defineProperty(Writable.prototype,\"destroyed\",{enumerable:!1,get:function get(){return void 0!==this._writableState&&this._writableState.destroyed},set:function set(s){this._writableState&&(this._writableState.destroyed=s)}}),Writable.prototype.destroy=L.destroy,Writable.prototype._undestroy=L.undestroy,Writable.prototype._destroy=function(s,o){o(s)}},16946:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(98828),_=i(45807),w=Object,x=a(\"\".split);s.exports=u((function(){return!w(\"z\").propertyIsEnumerable(0)}))?function(s){return\"String\"===_(s)?x(s,\"\"):w(s)}:w},16962:(s,o)=>{o.aliasToReal={each:\"forEach\",eachRight:\"forEachRight\",entries:\"toPairs\",entriesIn:\"toPairsIn\",extend:\"assignIn\",extendAll:\"assignInAll\",extendAllWith:\"assignInAllWith\",extendWith:\"assignInWith\",first:\"head\",conforms:\"conformsTo\",matches:\"isMatch\",property:\"get\",__:\"placeholder\",F:\"stubFalse\",T:\"stubTrue\",all:\"every\",allPass:\"overEvery\",always:\"constant\",any:\"some\",anyPass:\"overSome\",apply:\"spread\",assoc:\"set\",assocPath:\"set\",complement:\"negate\",compose:\"flowRight\",contains:\"includes\",dissoc:\"unset\",dissocPath:\"unset\",dropLast:\"dropRight\",dropLastWhile:\"dropRightWhile\",equals:\"isEqual\",identical:\"eq\",indexBy:\"keyBy\",init:\"initial\",invertObj:\"invert\",juxt:\"over\",omitAll:\"omit\",nAry:\"ary\",path:\"get\",pathEq:\"matchesProperty\",pathOr:\"getOr\",paths:\"at\",pickAll:\"pick\",pipe:\"flow\",pluck:\"map\",prop:\"get\",propEq:\"matchesProperty\",propOr:\"getOr\",props:\"at\",symmetricDifference:\"xor\",symmetricDifferenceBy:\"xorBy\",symmetricDifferenceWith:\"xorWith\",takeLast:\"takeRight\",takeLastWhile:\"takeRightWhile\",unapply:\"rest\",unnest:\"flatten\",useWith:\"overArgs\",where:\"conformsTo\",whereEq:\"isMatch\",zipObj:\"zipObject\"},o.aryMethod={1:[\"assignAll\",\"assignInAll\",\"attempt\",\"castArray\",\"ceil\",\"create\",\"curry\",\"curryRight\",\"defaultsAll\",\"defaultsDeepAll\",\"floor\",\"flow\",\"flowRight\",\"fromPairs\",\"invert\",\"iteratee\",\"memoize\",\"method\",\"mergeAll\",\"methodOf\",\"mixin\",\"nthArg\",\"over\",\"overEvery\",\"overSome\",\"rest\",\"reverse\",\"round\",\"runInContext\",\"spread\",\"template\",\"trim\",\"trimEnd\",\"trimStart\",\"uniqueId\",\"words\",\"zipAll\"],2:[\"add\",\"after\",\"ary\",\"assign\",\"assignAllWith\",\"assignIn\",\"assignInAllWith\",\"at\",\"before\",\"bind\",\"bindAll\",\"bindKey\",\"chunk\",\"cloneDeepWith\",\"cloneWith\",\"concat\",\"conformsTo\",\"countBy\",\"curryN\",\"curryRightN\",\"debounce\",\"defaults\",\"defaultsDeep\",\"defaultTo\",\"delay\",\"difference\",\"divide\",\"drop\",\"dropRight\",\"dropRightWhile\",\"dropWhile\",\"endsWith\",\"eq\",\"every\",\"filter\",\"find\",\"findIndex\",\"findKey\",\"findLast\",\"findLastIndex\",\"findLastKey\",\"flatMap\",\"flatMapDeep\",\"flattenDepth\",\"forEach\",\"forEachRight\",\"forIn\",\"forInRight\",\"forOwn\",\"forOwnRight\",\"get\",\"groupBy\",\"gt\",\"gte\",\"has\",\"hasIn\",\"includes\",\"indexOf\",\"intersection\",\"invertBy\",\"invoke\",\"invokeMap\",\"isEqual\",\"isMatch\",\"join\",\"keyBy\",\"lastIndexOf\",\"lt\",\"lte\",\"map\",\"mapKeys\",\"mapValues\",\"matchesProperty\",\"maxBy\",\"meanBy\",\"merge\",\"mergeAllWith\",\"minBy\",\"multiply\",\"nth\",\"omit\",\"omitBy\",\"overArgs\",\"pad\",\"padEnd\",\"padStart\",\"parseInt\",\"partial\",\"partialRight\",\"partition\",\"pick\",\"pickBy\",\"propertyOf\",\"pull\",\"pullAll\",\"pullAt\",\"random\",\"range\",\"rangeRight\",\"rearg\",\"reject\",\"remove\",\"repeat\",\"restFrom\",\"result\",\"sampleSize\",\"some\",\"sortBy\",\"sortedIndex\",\"sortedIndexOf\",\"sortedLastIndex\",\"sortedLastIndexOf\",\"sortedUniqBy\",\"split\",\"spreadFrom\",\"startsWith\",\"subtract\",\"sumBy\",\"take\",\"takeRight\",\"takeRightWhile\",\"takeWhile\",\"tap\",\"throttle\",\"thru\",\"times\",\"trimChars\",\"trimCharsEnd\",\"trimCharsStart\",\"truncate\",\"union\",\"uniqBy\",\"uniqWith\",\"unset\",\"unzipWith\",\"without\",\"wrap\",\"xor\",\"zip\",\"zipObject\",\"zipObjectDeep\"],3:[\"assignInWith\",\"assignWith\",\"clamp\",\"differenceBy\",\"differenceWith\",\"findFrom\",\"findIndexFrom\",\"findLastFrom\",\"findLastIndexFrom\",\"getOr\",\"includesFrom\",\"indexOfFrom\",\"inRange\",\"intersectionBy\",\"intersectionWith\",\"invokeArgs\",\"invokeArgsMap\",\"isEqualWith\",\"isMatchWith\",\"flatMapDepth\",\"lastIndexOfFrom\",\"mergeWith\",\"orderBy\",\"padChars\",\"padCharsEnd\",\"padCharsStart\",\"pullAllBy\",\"pullAllWith\",\"rangeStep\",\"rangeStepRight\",\"reduce\",\"reduceRight\",\"replace\",\"set\",\"slice\",\"sortedIndexBy\",\"sortedLastIndexBy\",\"transform\",\"unionBy\",\"unionWith\",\"update\",\"xorBy\",\"xorWith\",\"zipWith\"],4:[\"fill\",\"setWith\",\"updateWith\"]},o.aryRearg={2:[1,0],3:[2,0,1],4:[3,2,0,1]},o.iterateeAry={dropRightWhile:1,dropWhile:1,every:1,filter:1,find:1,findFrom:1,findIndex:1,findIndexFrom:1,findKey:1,findLast:1,findLastFrom:1,findLastIndex:1,findLastIndexFrom:1,findLastKey:1,flatMap:1,flatMapDeep:1,flatMapDepth:1,forEach:1,forEachRight:1,forIn:1,forInRight:1,forOwn:1,forOwnRight:1,map:1,mapKeys:1,mapValues:1,partition:1,reduce:2,reduceRight:2,reject:1,remove:1,some:1,takeRightWhile:1,takeWhile:1,times:1,transform:2},o.iterateeRearg={mapKeys:[1],reduceRight:[1,0]},o.methodRearg={assignInAllWith:[1,0],assignInWith:[1,2,0],assignAllWith:[1,0],assignWith:[1,2,0],differenceBy:[1,2,0],differenceWith:[1,2,0],getOr:[2,1,0],intersectionBy:[1,2,0],intersectionWith:[1,2,0],isEqualWith:[1,2,0],isMatchWith:[2,1,0],mergeAllWith:[1,0],mergeWith:[1,2,0],padChars:[2,1,0],padCharsEnd:[2,1,0],padCharsStart:[2,1,0],pullAllBy:[2,1,0],pullAllWith:[2,1,0],rangeStep:[1,2,0],rangeStepRight:[1,2,0],setWith:[3,1,2,0],sortedIndexBy:[2,1,0],sortedLastIndexBy:[2,1,0],unionBy:[1,2,0],unionWith:[1,2,0],updateWith:[3,1,2,0],xorBy:[1,2,0],xorWith:[1,2,0],zipWith:[1,2,0]},o.methodSpread={assignAll:{start:0},assignAllWith:{start:0},assignInAll:{start:0},assignInAllWith:{start:0},defaultsAll:{start:0},defaultsDeepAll:{start:0},invokeArgs:{start:2},invokeArgsMap:{start:2},mergeAll:{start:0},mergeAllWith:{start:0},partial:{start:1},partialRight:{start:1},without:{start:1},zipAll:{start:0}},o.mutate={array:{fill:!0,pull:!0,pullAll:!0,pullAllBy:!0,pullAllWith:!0,pullAt:!0,remove:!0,reverse:!0},object:{assign:!0,assignAll:!0,assignAllWith:!0,assignIn:!0,assignInAll:!0,assignInAllWith:!0,assignInWith:!0,assignWith:!0,defaults:!0,defaultsAll:!0,defaultsDeep:!0,defaultsDeepAll:!0,merge:!0,mergeAll:!0,mergeAllWith:!0,mergeWith:!0},set:{set:!0,setWith:!0,unset:!0,update:!0,updateWith:!0}},o.realToAlias=function(){var s=Object.prototype.hasOwnProperty,i=o.aliasToReal,a={};for(var u in i){var _=i[u];s.call(a,_)?a[_].push(u):a[_]=[u]}return a}(),o.remap={assignAll:\"assign\",assignAllWith:\"assignWith\",assignInAll:\"assignIn\",assignInAllWith:\"assignInWith\",curryN:\"curry\",curryRightN:\"curryRight\",defaultsAll:\"defaults\",defaultsDeepAll:\"defaultsDeep\",findFrom:\"find\",findIndexFrom:\"findIndex\",findLastFrom:\"findLast\",findLastIndexFrom:\"findLastIndex\",getOr:\"get\",includesFrom:\"includes\",indexOfFrom:\"indexOf\",invokeArgs:\"invoke\",invokeArgsMap:\"invokeMap\",lastIndexOfFrom:\"lastIndexOf\",mergeAll:\"merge\",mergeAllWith:\"mergeWith\",padChars:\"pad\",padCharsEnd:\"padEnd\",padCharsStart:\"padStart\",propertyOf:\"get\",rangeStep:\"range\",rangeStepRight:\"rangeRight\",restFrom:\"rest\",spreadFrom:\"spread\",trimChars:\"trim\",trimCharsEnd:\"trimEnd\",trimCharsStart:\"trimStart\",zipAll:\"zip\"},o.skipFixed={castArray:!0,flow:!0,flowRight:!0,iteratee:!0,mixin:!0,rearg:!0,runInContext:!0},o.skipRearg={add:!0,assign:!0,assignIn:!0,bind:!0,bindKey:!0,concat:!0,difference:!0,divide:!0,eq:!0,gt:!0,gte:!0,isEqual:!0,lt:!0,lte:!0,matchesProperty:!0,merge:!0,multiply:!0,overArgs:!0,partial:!0,partialRight:!0,propertyOf:!0,random:!0,range:!0,rangeRight:!0,subtract:!0,zip:!0,zipObject:!0,zipObjectDeep:!0}},17255:(s,o,i)=>{var a=i(47422);s.exports=function basePropertyDeep(s){return function(o){return a(o,s)}}},17285:s=>{function source(s){return s?\"string\"==typeof s?s:s.source:null}function lookahead(s){return concat(\"(?=\",s,\")\")}function concat(...s){return s.map((s=>source(s))).join(\"\")}function either(...s){return\"(\"+s.map((s=>source(s))).join(\"|\")+\")\"}s.exports=function xml(s){const o=concat(/[A-Z_]/,function optional(s){return concat(\"(\",s,\")?\")}(/[A-Z0-9_.-]*:/),/[A-Z0-9_.-]*/),i={className:\"symbol\",begin:/&[a-z]+;|&#[0-9]+;|&#x[a-f0-9]+;/},a={begin:/\\s/,contains:[{className:\"meta-keyword\",begin:/#?[a-z_][a-z1-9_-]+/,illegal:/\\n/}]},u=s.inherit(a,{begin:/\\(/,end:/\\)/}),_=s.inherit(s.APOS_STRING_MODE,{className:\"meta-string\"}),w=s.inherit(s.QUOTE_STRING_MODE,{className:\"meta-string\"}),x={endsWithParent:!0,illegal:/`]+/}]}]}]};return{name:\"HTML, XML\",aliases:[\"html\",\"xhtml\",\"rss\",\"atom\",\"xjb\",\"xsd\",\"xsl\",\"plist\",\"wsf\",\"svg\"],case_insensitive:!0,contains:[{className:\"meta\",begin://,relevance:10,contains:[a,w,_,u,{begin:/\\[/,end:/\\]/,contains:[{className:\"meta\",begin://,contains:[a,u,w,_]}]}]},s.COMMENT(//,{relevance:10}),{begin://,relevance:10},i,{className:\"meta\",begin:/<\\?xml/,end:/\\?>/,relevance:10},{className:\"tag\",begin:/)/,end:/>/,keywords:{name:\"style\"},contains:[x],starts:{end:/<\\/style>/,returnEnd:!0,subLanguage:[\"css\",\"xml\"]}},{className:\"tag\",begin:/)/,end:/>/,keywords:{name:\"script\"},contains:[x],starts:{end:/<\\/script>/,returnEnd:!0,subLanguage:[\"javascript\",\"handlebars\",\"xml\"]}},{className:\"tag\",begin:/<>|<\\/>/},{className:\"tag\",begin:concat(//,/>/,/\\s/)))),end:/\\/?>/,contains:[{className:\"name\",begin:o,relevance:0,starts:x}]},{className:\"tag\",begin:concat(/<\\//,lookahead(concat(o,/>/))),contains:[{className:\"name\",begin:o,relevance:0},{begin:/>/,relevance:0,endsParent:!0}]}]}}},17400:(s,o,i)=>{var a=i(99374),u=1/0;s.exports=function toFinite(s){return s?(s=a(s))===u||s===-1/0?17976931348623157e292*(s<0?-1:1):s==s?s:0:0===s?s:0}},17533:s=>{s.exports=function yaml(s){var o=\"true false yes no null\",i=\"[\\\\w#;/?:@&=+$,.~*'()[\\\\]]+\",a={className:\"string\",relevance:0,variants:[{begin:/'/,end:/'/},{begin:/\"/,end:/\"/},{begin:/\\S+/}],contains:[s.BACKSLASH_ESCAPE,{className:\"template-variable\",variants:[{begin:/\\{\\{/,end:/\\}\\}/},{begin:/%\\{/,end:/\\}/}]}]},u=s.inherit(a,{variants:[{begin:/'/,end:/'/},{begin:/\"/,end:/\"/},{begin:/[^\\s,{}[\\]]+/}]}),_={className:\"number\",begin:\"\\\\b[0-9]{4}(-[0-9][0-9]){0,2}([Tt \\\\t][0-9][0-9]?(:[0-9][0-9]){2})?(\\\\.[0-9]*)?([ \\\\t])*(Z|[-+][0-9][0-9]?(:[0-9][0-9])?)?\\\\b\"},w={end:\",\",endsWithParent:!0,excludeEnd:!0,keywords:o,relevance:0},x={begin:/\\{/,end:/\\}/,contains:[w],illegal:\"\\\\n\",relevance:0},C={begin:\"\\\\[\",end:\"\\\\]\",contains:[w],illegal:\"\\\\n\",relevance:0},j=[{className:\"attr\",variants:[{begin:\"\\\\w[\\\\w :\\\\/.-]*:(?=[ \\t]|$)\"},{begin:'\"\\\\w[\\\\w :\\\\/.-]*\":(?=[ \\t]|$)'},{begin:\"'\\\\w[\\\\w :\\\\/.-]*':(?=[ \\t]|$)\"}]},{className:\"meta\",begin:\"^---\\\\s*$\",relevance:10},{className:\"string\",begin:\"[\\\\|>]([1-9]?[+-])?[ ]*\\\\n( +)[^ ][^\\\\n]*\\\\n(\\\\2[^\\\\n]+\\\\n?)*\"},{begin:\"<%[%=-]?\",end:\"[%-]?%>\",subLanguage:\"ruby\",excludeBegin:!0,excludeEnd:!0,relevance:0},{className:\"type\",begin:\"!\\\\w+!\"+i},{className:\"type\",begin:\"!<\"+i+\">\"},{className:\"type\",begin:\"!\"+i},{className:\"type\",begin:\"!!\"+i},{className:\"meta\",begin:\"&\"+s.UNDERSCORE_IDENT_RE+\"$\"},{className:\"meta\",begin:\"\\\\*\"+s.UNDERSCORE_IDENT_RE+\"$\"},{className:\"bullet\",begin:\"-(?=[ ]|$)\",relevance:0},s.HASH_COMMENT_MODE,{beginKeywords:o,keywords:{literal:o}},_,{className:\"number\",begin:s.C_NUMBER_RE+\"\\\\b\",relevance:0},x,C,a],L=[...j];return L.pop(),L.push(u),w.contains=L,{name:\"YAML\",case_insensitive:!0,aliases:[\"yml\"],contains:j}}},17670:(s,o,i)=>{var a=i(12651);s.exports=function mapCacheDelete(s){var o=a(this,s).delete(s);return this.size-=o?1:0,o}},17965:(s,o,i)=>{\"use strict\";var a=i(16426),u={\"text/plain\":\"Text\",\"text/html\":\"Url\",default:\"Text\"};s.exports=function copy(s,o){var i,_,w,x,C,j,L=!1;o||(o={}),i=o.debug||!1;try{if(w=a(),x=document.createRange(),C=document.getSelection(),(j=document.createElement(\"span\")).textContent=s,j.ariaHidden=\"true\",j.style.all=\"unset\",j.style.position=\"fixed\",j.style.top=0,j.style.clip=\"rect(0, 0, 0, 0)\",j.style.whiteSpace=\"pre\",j.style.webkitUserSelect=\"text\",j.style.MozUserSelect=\"text\",j.style.msUserSelect=\"text\",j.style.userSelect=\"text\",j.addEventListener(\"copy\",(function(a){if(a.stopPropagation(),o.format)if(a.preventDefault(),void 0===a.clipboardData){i&&console.warn(\"unable to use e.clipboardData\"),i&&console.warn(\"trying IE specific stuff\"),window.clipboardData.clearData();var _=u[o.format]||u.default;window.clipboardData.setData(_,s)}else a.clipboardData.clearData(),a.clipboardData.setData(o.format,s);o.onCopy&&(a.preventDefault(),o.onCopy(a.clipboardData))})),document.body.appendChild(j),x.selectNodeContents(j),C.addRange(x),!document.execCommand(\"copy\"))throw new Error(\"copy command was unsuccessful\");L=!0}catch(a){i&&console.error(\"unable to copy using execCommand: \",a),i&&console.warn(\"trying IE specific stuff\");try{window.clipboardData.setData(o.format||\"text\",s),o.onCopy&&o.onCopy(window.clipboardData),L=!0}catch(a){i&&console.error(\"unable to copy using clipboardData: \",a),i&&console.error(\"falling back to prompt\"),_=function format(s){var o=(/mac os x/i.test(navigator.userAgent)?\"⌘\":\"Ctrl\")+\"+C\";return s.replace(/#{\\s*key\\s*}/g,o)}(\"message\"in o?o.message:\"Copy to clipboard: #{key}, Enter\"),window.prompt(_,s)}}finally{C&&(\"function\"==typeof C.removeRange?C.removeRange(x):C.removeAllRanges()),j&&document.body.removeChild(j),w()}return L}},18073:(s,o,i)=>{var a=i(85087),u=i(54641),_=i(70981);s.exports=function createRecurry(s,o,i,w,x,C,j,L,B,$){var U=8&o;o|=U?32:64,4&(o&=~(U?64:32))||(o&=-4);var V=[s,o,x,U?C:void 0,U?j:void 0,U?void 0:C,U?void 0:j,L,B,$],z=i.apply(void 0,V);return a(s)&&u(z,V),z.placeholder=w,_(z,s,o)}},19123:(s,o,i)=>{var a=i(65606),u=i(31499),_=i(88310).Stream;function resolve(s,o,i){var a,_=function create_indent(s,o){return new Array(o||0).join(s||\"\")}(o,i=i||0),w=s;if(\"object\"==typeof s&&((w=s[a=Object.keys(s)[0]])&&w._elem))return w._elem.name=a,w._elem.icount=i,w._elem.indent=o,w._elem.indents=_,w._elem.interrupt=w,w._elem;var x,C=[],j=[];function get_attributes(s){Object.keys(s).forEach((function(o){C.push(function attribute(s,o){return s+'=\"'+u(o)+'\"'}(o,s[o]))}))}switch(typeof w){case\"object\":if(null===w)break;w._attr&&get_attributes(w._attr),w._cdata&&j.push((\"/g,\"]]]]>\")+\"]]>\"),w.forEach&&(x=!1,j.push(\"\"),w.forEach((function(s){\"object\"==typeof s?\"_attr\"==Object.keys(s)[0]?get_attributes(s._attr):j.push(resolve(s,o,i+1)):(j.pop(),x=!0,j.push(u(s)))})),x||j.push(\"\"));break;default:j.push(u(w))}return{name:a,interrupt:!1,attributes:C,content:j,icount:i,indents:_,indent:o}}function format(s,o,i){if(\"object\"!=typeof o)return s(!1,o);var a=o.interrupt?1:o.content.length;function proceed(){for(;o.content.length;){var u=o.content.shift();if(void 0!==u){if(interrupt(u))return;format(s,u)}}s(!1,(a>1?o.indents:\"\")+(o.name?\"\":\"\")+(o.indent&&!i?\"\\n\":\"\")),i&&i()}function interrupt(o){return!!o.interrupt&&(o.interrupt.append=s,o.interrupt.end=proceed,o.interrupt=!1,s(!0),!0)}if(s(!1,o.indents+(o.name?\"<\"+o.name:\"\")+(o.attributes.length?\" \"+o.attributes.join(\" \"):\"\")+(a?o.name?\">\":\"\":o.name?\"/>\":\"\")+(o.indent&&a>1?\"\\n\":\"\")),!a)return s(!1,o.indent?\"\\n\":\"\");interrupt(o)||proceed()}s.exports=function xml(s,o){\"object\"!=typeof o&&(o={indent:o});var i=o.stream?new _:null,u=\"\",w=!1,x=o.indent?!0===o.indent?\" \":o.indent:\"\",C=!0;function delay(s){C?a.nextTick(s):s()}function append(s,o){if(void 0!==o&&(u+=o),s&&!w&&(i=i||new _,w=!0),s&&w){var a=u;delay((function(){i.emit(\"data\",a)})),u=\"\"}}function add(s,o){format(append,resolve(s,x,x?1:0),o)}function end(){if(i){var s=u;delay((function(){i.emit(\"data\",s),i.emit(\"end\"),i.readable=!1,i.emit(\"close\")}))}}return delay((function(){C=!1})),o.declaration&&function addXmlDeclaration(s){var o={version:\"1.0\",encoding:s.encoding||\"UTF-8\"};s.standalone&&(o.standalone=s.standalone),add({\"?xml\":{_attr:o}}),u=u.replace(\"/>\",\"?>\")}(o.declaration),s&&s.forEach?s.forEach((function(o,i){var a;i+1===s.length&&(a=end),add(o,a)})):add(s,end),i?(i.readable=!0,i):u},s.exports.element=s.exports.Element=function element(){var s={_elem:resolve(Array.prototype.slice.call(arguments)),push:function(s){if(!this.append)throw new Error(\"not assigned to a parent!\");var o=this,i=this._elem.indent;format(this.append,resolve(s,i,this._elem.icount+(i?1:0)),(function(){o.append(!0)}))},close:function(s){void 0!==s&&this.push(s),this.end&&this.end()}};return s}},19219:s=>{s.exports=function cacheHas(s,o){return s.has(o)}},19287:s=>{\"use strict\";s.exports={CSSRuleList:0,CSSStyleDeclaration:0,CSSValueList:0,ClientRectList:0,DOMRectList:0,DOMStringList:0,DOMTokenList:1,DataTransferItemList:0,FileList:0,HTMLAllCollection:0,HTMLCollection:0,HTMLFormElement:0,HTMLSelectElement:0,MediaList:0,MimeTypeArray:0,NamedNodeMap:0,NodeList:1,PaintRequestList:0,Plugin:0,PluginArray:0,SVGLengthList:0,SVGNumberList:0,SVGPathSegList:0,SVGPointList:0,SVGStringList:0,SVGTransformList:0,SourceBufferList:0,StyleSheetList:0,TextTrackCueList:0,TextTrackList:0,TouchList:0}},19358:(s,o,i)=>{\"use strict\";var a=i(85582),u=i(49724),_=i(61626),w=i(88280),x=i(79192),C=i(19595),j=i(54829),L=i(34084),B=i(32096),$=i(39259),U=i(85884),V=i(39447),z=i(7376);s.exports=function(s,o,i,Y){var Z=\"stackTraceLimit\",ee=Y?2:1,ie=s.split(\".\"),ae=ie[ie.length-1],ce=a.apply(null,ie);if(ce){var le=ce.prototype;if(!z&&u(le,\"cause\")&&delete le.cause,!i)return ce;var pe=a(\"Error\"),de=o((function(s,o){var i=B(Y?o:s,void 0),a=Y?new ce(s):new ce;return void 0!==i&&_(a,\"message\",i),U(a,de,a.stack,2),this&&w(le,this)&&L(a,this,de),arguments.length>ee&&$(a,arguments[ee]),a}));if(de.prototype=le,\"Error\"!==ae?x?x(de,pe):C(de,pe,{name:!0}):V&&Z in ce&&(j(de,ce,Z),j(de,ce,\"prepareStackTrace\")),C(de,ce),!z)try{le.name!==ae&&_(le,\"name\",ae),le.constructor=de}catch(s){}return de}}},19570:(s,o,i)=>{var a=i(37334),u=i(93243),_=i(83488),w=u?function(s,o){return u(s,\"toString\",{configurable:!0,enumerable:!1,value:a(o),writable:!0})}:_;s.exports=w},19595:(s,o,i)=>{\"use strict\";var a=i(49724),u=i(11042),_=i(13846),w=i(74284);s.exports=function(s,o,i){for(var x=u(o),C=w.f,j=_.f,L=0;L{\"use strict\";var a=i(23034);s.exports=a},19846:(s,o,i)=>{\"use strict\";var a=i(20798),u=i(98828),_=i(45951).String;s.exports=!!Object.getOwnPropertySymbols&&!u((function(){var s=Symbol(\"symbol detection\");return!_(s)||!(Object(s)instanceof Symbol)||!Symbol.sham&&a&&a<41}))},19931:(s,o,i)=>{var a=i(31769),u=i(68090),_=i(68969),w=i(77797);s.exports=function baseUnset(s,o){return o=a(o,s),null==(s=_(s,o))||delete s[w(u(o))]}},20181:(s,o,i)=>{var a=/^\\s+|\\s+$/g,u=/^[-+]0x[0-9a-f]+$/i,_=/^0b[01]+$/i,w=/^0o[0-7]+$/i,x=parseInt,C=\"object\"==typeof i.g&&i.g&&i.g.Object===Object&&i.g,j=\"object\"==typeof self&&self&&self.Object===Object&&self,L=C||j||Function(\"return this\")(),B=Object.prototype.toString,$=Math.max,U=Math.min,now=function(){return L.Date.now()};function isObject(s){var o=typeof s;return!!s&&(\"object\"==o||\"function\"==o)}function toNumber(s){if(\"number\"==typeof s)return s;if(function isSymbol(s){return\"symbol\"==typeof s||function isObjectLike(s){return!!s&&\"object\"==typeof s}(s)&&\"[object Symbol]\"==B.call(s)}(s))return NaN;if(isObject(s)){var o=\"function\"==typeof s.valueOf?s.valueOf():s;s=isObject(o)?o+\"\":o}if(\"string\"!=typeof s)return 0===s?s:+s;s=s.replace(a,\"\");var i=_.test(s);return i||w.test(s)?x(s.slice(2),i?2:8):u.test(s)?NaN:+s}s.exports=function debounce(s,o,i){var a,u,_,w,x,C,j=0,L=!1,B=!1,V=!0;if(\"function\"!=typeof s)throw new TypeError(\"Expected a function\");function invokeFunc(o){var i=a,_=u;return a=u=void 0,j=o,w=s.apply(_,i)}function shouldInvoke(s){var i=s-C;return void 0===C||i>=o||i<0||B&&s-j>=_}function timerExpired(){var s=now();if(shouldInvoke(s))return trailingEdge(s);x=setTimeout(timerExpired,function remainingWait(s){var i=o-(s-C);return B?U(i,_-(s-j)):i}(s))}function trailingEdge(s){return x=void 0,V&&a?invokeFunc(s):(a=u=void 0,w)}function debounced(){var s=now(),i=shouldInvoke(s);if(a=arguments,u=this,C=s,i){if(void 0===x)return function leadingEdge(s){return j=s,x=setTimeout(timerExpired,o),L?invokeFunc(s):w}(C);if(B)return x=setTimeout(timerExpired,o),invokeFunc(C)}return void 0===x&&(x=setTimeout(timerExpired,o)),w}return o=toNumber(o)||0,isObject(i)&&(L=!!i.leading,_=(B=\"maxWait\"in i)?$(toNumber(i.maxWait)||0,o):_,V=\"trailing\"in i?!!i.trailing:V),debounced.cancel=function cancel(){void 0!==x&&clearTimeout(x),j=0,a=C=u=x=void 0},debounced.flush=function flush(){return void 0===x?w:trailingEdge(now())},debounced}},20317:s=>{s.exports=function mapToArray(s){var o=-1,i=Array(s.size);return s.forEach((function(s,a){i[++o]=[a,s]})),i}},20334:(s,o,i)=>{\"use strict\";var a=i(48287).Buffer;class NonError extends Error{constructor(s){super(NonError._prepareSuperMessage(s)),Object.defineProperty(this,\"name\",{value:\"NonError\",configurable:!0,writable:!0}),Error.captureStackTrace&&Error.captureStackTrace(this,NonError)}static _prepareSuperMessage(s){try{return JSON.stringify(s)}catch{return String(s)}}}const u=[{property:\"name\",enumerable:!1},{property:\"message\",enumerable:!1},{property:\"stack\",enumerable:!1},{property:\"code\",enumerable:!0}],_=Symbol(\".toJSON called\"),destroyCircular=({from:s,seen:o,to_:i,forceEnumerable:w,maxDepth:x,depth:C})=>{const j=i||(Array.isArray(s)?[]:{});if(o.push(s),C>=x)return j;if(\"function\"==typeof s.toJSON&&!0!==s[_])return(s=>{s[_]=!0;const o=s.toJSON();return delete s[_],o})(s);for(const[i,u]of Object.entries(s))\"function\"==typeof a&&a.isBuffer(u)?j[i]=\"[object Buffer]\":\"function\"!=typeof u&&(u&&\"object\"==typeof u?o.includes(s[i])?j[i]=\"[Circular]\":(C++,j[i]=destroyCircular({from:s[i],seen:o.slice(),forceEnumerable:w,maxDepth:x,depth:C})):j[i]=u);for(const{property:o,enumerable:i}of u)\"string\"==typeof s[o]&&Object.defineProperty(j,o,{value:s[o],enumerable:!!w||i,configurable:!0,writable:!0});return j};s.exports={serializeError:(s,o={})=>{const{maxDepth:i=Number.POSITIVE_INFINITY}=o;return\"object\"==typeof s&&null!==s?destroyCircular({from:s,seen:[],forceEnumerable:!0,maxDepth:i,depth:0}):\"function\"==typeof s?`[Function: ${s.name||\"anonymous\"}]`:s},deserializeError:(s,o={})=>{const{maxDepth:i=Number.POSITIVE_INFINITY}=o;if(s instanceof Error)return s;if(\"object\"==typeof s&&null!==s&&!Array.isArray(s)){const o=new Error;return destroyCircular({from:s,seen:[],to_:o,maxDepth:i,depth:0}),o}return new NonError(s)}}},20426:s=>{var o=Object.prototype.hasOwnProperty;s.exports=function baseHas(s,i){return null!=s&&o.call(s,i)}},20575:(s,o,i)=>{\"use strict\";var a=i(3121);s.exports=function(s){return a(s.length)}},20798:(s,o,i)=>{\"use strict\";var a,u,_=i(45951),w=i(96794),x=_.process,C=_.Deno,j=x&&x.versions||C&&C.version,L=j&&j.v8;L&&(u=(a=L.split(\".\"))[0]>0&&a[0]<4?1:+(a[0]+a[1])),!u&&w&&(!(a=w.match(/Edge\\/(\\d+)/))||a[1]>=74)&&(a=w.match(/Chrome\\/(\\d+)/))&&(u=+a[1]),s.exports=u},20850:(s,o,i)=>{\"use strict\";s.exports=i(46076)},20999:(s,o,i)=>{var a=i(69302),u=i(36800);s.exports=function createAssigner(s){return a((function(o,i){var a=-1,_=i.length,w=_>1?i[_-1]:void 0,x=_>2?i[2]:void 0;for(w=s.length>3&&\"function\"==typeof w?(_--,w):void 0,x&&u(i[0],i[1],x)&&(w=_<3?void 0:w,_=1),o=Object(o);++a<_;){var C=i[a];C&&s(o,C,a,w)}return o}))}},21549:(s,o,i)=>{var a=i(22032),u=i(63862),_=i(66721),w=i(12749),x=i(35749);function Hash(s){var o=-1,i=null==s?0:s.length;for(this.clear();++o{var a=i(16547),u=i(43360);s.exports=function copyObject(s,o,i,_){var w=!i;i||(i={});for(var x=-1,C=o.length;++x{var a=i(51873),u=i(37828),_=i(75288),w=i(25911),x=i(20317),C=i(84247),j=a?a.prototype:void 0,L=j?j.valueOf:void 0;s.exports=function equalByTag(s,o,i,a,j,B,$){switch(i){case\"[object DataView]\":if(s.byteLength!=o.byteLength||s.byteOffset!=o.byteOffset)return!1;s=s.buffer,o=o.buffer;case\"[object ArrayBuffer]\":return!(s.byteLength!=o.byteLength||!B(new u(s),new u(o)));case\"[object Boolean]\":case\"[object Date]\":case\"[object Number]\":return _(+s,+o);case\"[object Error]\":return s.name==o.name&&s.message==o.message;case\"[object RegExp]\":case\"[object String]\":return s==o+\"\";case\"[object Map]\":var U=x;case\"[object Set]\":var V=1&a;if(U||(U=C),s.size!=o.size&&!V)return!1;var z=$.get(s);if(z)return z==o;a|=2,$.set(s,o);var Y=w(U(s),U(o),a,j,B,$);return $.delete(s),Y;case\"[object Symbol]\":if(L)return L.call(s)==L.call(o)}return!1}},22032:(s,o,i)=>{var a=i(81042);s.exports=function hashClear(){this.__data__=a?a(null):{},this.size=0}},22225:s=>{var o=\"\\\\ud800-\\\\udfff\",i=\"\\\\u2700-\\\\u27bf\",a=\"a-z\\\\xdf-\\\\xf6\\\\xf8-\\\\xff\",u=\"A-Z\\\\xc0-\\\\xd6\\\\xd8-\\\\xde\",_=\"\\\\xac\\\\xb1\\\\xd7\\\\xf7\\\\x00-\\\\x2f\\\\x3a-\\\\x40\\\\x5b-\\\\x60\\\\x7b-\\\\xbf\\\\u2000-\\\\u206f \\\\t\\\\x0b\\\\f\\\\xa0\\\\ufeff\\\\n\\\\r\\\\u2028\\\\u2029\\\\u1680\\\\u180e\\\\u2000\\\\u2001\\\\u2002\\\\u2003\\\\u2004\\\\u2005\\\\u2006\\\\u2007\\\\u2008\\\\u2009\\\\u200a\\\\u202f\\\\u205f\\\\u3000\",w=\"[\"+_+\"]\",x=\"\\\\d+\",C=\"[\"+i+\"]\",j=\"[\"+a+\"]\",L=\"[^\"+o+_+x+i+a+u+\"]\",B=\"(?:\\\\ud83c[\\\\udde6-\\\\uddff]){2}\",$=\"[\\\\ud800-\\\\udbff][\\\\udc00-\\\\udfff]\",U=\"[\"+u+\"]\",V=\"(?:\"+j+\"|\"+L+\")\",z=\"(?:\"+U+\"|\"+L+\")\",Y=\"(?:['’](?:d|ll|m|re|s|t|ve))?\",Z=\"(?:['’](?:D|LL|M|RE|S|T|VE))?\",ee=\"(?:[\\\\u0300-\\\\u036f\\\\ufe20-\\\\ufe2f\\\\u20d0-\\\\u20ff]|\\\\ud83c[\\\\udffb-\\\\udfff])?\",ie=\"[\\\\ufe0e\\\\ufe0f]?\",ae=ie+ee+(\"(?:\\\\u200d(?:\"+[\"[^\"+o+\"]\",B,$].join(\"|\")+\")\"+ie+ee+\")*\"),ce=\"(?:\"+[C,B,$].join(\"|\")+\")\"+ae,le=RegExp([U+\"?\"+j+\"+\"+Y+\"(?=\"+[w,U,\"$\"].join(\"|\")+\")\",z+\"+\"+Z+\"(?=\"+[w,U+V,\"$\"].join(\"|\")+\")\",U+\"?\"+V+\"+\"+Y,U+\"+\"+Z,\"\\\\d*(?:1ST|2ND|3RD|(?![123])\\\\dTH)(?=\\\\b|[a-z_])\",\"\\\\d*(?:1st|2nd|3rd|(?![123])\\\\dth)(?=\\\\b|[A-Z_])\",x,ce].join(\"|\"),\"g\");s.exports=function unicodeWords(s){return s.match(le)||[]}},22551:(s,o,i)=>{\"use strict\";var a=i(96540),u=i(69982);function p(s){for(var o=\"https://reactjs.org/docs/error-decoder.html?invariant=\"+s,i=1;io}return!1}(o,i,u,a)&&(i=null),a||null===u?function oa(s){return!!C.call(B,s)||!C.call(L,s)&&(j.test(s)?B[s]=!0:(L[s]=!0,!1))}(o)&&(null===i?s.removeAttribute(o):s.setAttribute(o,\"\"+i)):u.mustUseProperty?s[u.propertyName]=null===i?3!==u.type&&\"\":i:(o=u.attributeName,a=u.attributeNamespace,null===i?s.removeAttribute(o):(i=3===(u=u.type)||4===u&&!0===i?\"\":\"\"+i,a?s.setAttributeNS(a,o,i):s.setAttribute(o,i))))}\"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height\".split(\" \").forEach((function(s){var o=s.replace(U,sa);$[o]=new v(o,1,!1,s,null,!1,!1)})),\"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type\".split(\" \").forEach((function(s){var o=s.replace(U,sa);$[o]=new v(o,1,!1,s,\"http://www.w3.org/1999/xlink\",!1,!1)})),[\"xml:base\",\"xml:lang\",\"xml:space\"].forEach((function(s){var o=s.replace(U,sa);$[o]=new v(o,1,!1,s,\"http://www.w3.org/XML/1998/namespace\",!1,!1)})),[\"tabIndex\",\"crossOrigin\"].forEach((function(s){$[s]=new v(s,1,!1,s.toLowerCase(),null,!1,!1)})),$.xlinkHref=new v(\"xlinkHref\",1,!1,\"xlink:href\",\"http://www.w3.org/1999/xlink\",!0,!1),[\"src\",\"href\",\"action\",\"formAction\"].forEach((function(s){$[s]=new v(s,1,!1,s.toLowerCase(),null,!0,!0)}));var V=a.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,z=Symbol.for(\"react.element\"),Y=Symbol.for(\"react.portal\"),Z=Symbol.for(\"react.fragment\"),ee=Symbol.for(\"react.strict_mode\"),ie=Symbol.for(\"react.profiler\"),ae=Symbol.for(\"react.provider\"),ce=Symbol.for(\"react.context\"),le=Symbol.for(\"react.forward_ref\"),pe=Symbol.for(\"react.suspense\"),de=Symbol.for(\"react.suspense_list\"),fe=Symbol.for(\"react.memo\"),ye=Symbol.for(\"react.lazy\");Symbol.for(\"react.scope\"),Symbol.for(\"react.debug_trace_mode\");var be=Symbol.for(\"react.offscreen\");Symbol.for(\"react.legacy_hidden\"),Symbol.for(\"react.cache\"),Symbol.for(\"react.tracing_marker\");var _e=Symbol.iterator;function Ka(s){return null===s||\"object\"!=typeof s?null:\"function\"==typeof(s=_e&&s[_e]||s[\"@@iterator\"])?s:null}var Se,we=Object.assign;function Ma(s){if(void 0===Se)try{throw Error()}catch(s){var o=s.stack.trim().match(/\\n( *(at )?)/);Se=o&&o[1]||\"\"}return\"\\n\"+Se+s}var xe=!1;function Oa(s,o){if(!s||xe)return\"\";xe=!0;var i=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(o)if(o=function(){throw Error()},Object.defineProperty(o.prototype,\"props\",{set:function(){throw Error()}}),\"object\"==typeof Reflect&&Reflect.construct){try{Reflect.construct(o,[])}catch(s){var a=s}Reflect.construct(s,[],o)}else{try{o.call()}catch(s){a=s}s.call(o.prototype)}else{try{throw Error()}catch(s){a=s}s()}}catch(o){if(o&&a&&\"string\"==typeof o.stack){for(var u=o.stack.split(\"\\n\"),_=a.stack.split(\"\\n\"),w=u.length-1,x=_.length-1;1<=w&&0<=x&&u[w]!==_[x];)x--;for(;1<=w&&0<=x;w--,x--)if(u[w]!==_[x]){if(1!==w||1!==x)do{if(w--,0>--x||u[w]!==_[x]){var C=\"\\n\"+u[w].replace(\" at new \",\" at \");return s.displayName&&C.includes(\"\")&&(C=C.replace(\"\",s.displayName)),C}}while(1<=w&&0<=x);break}}}finally{xe=!1,Error.prepareStackTrace=i}return(s=s?s.displayName||s.name:\"\")?Ma(s):\"\"}function Pa(s){switch(s.tag){case 5:return Ma(s.type);case 16:return Ma(\"Lazy\");case 13:return Ma(\"Suspense\");case 19:return Ma(\"SuspenseList\");case 0:case 2:case 15:return s=Oa(s.type,!1);case 11:return s=Oa(s.type.render,!1);case 1:return s=Oa(s.type,!0);default:return\"\"}}function Qa(s){if(null==s)return null;if(\"function\"==typeof s)return s.displayName||s.name||null;if(\"string\"==typeof s)return s;switch(s){case Z:return\"Fragment\";case Y:return\"Portal\";case ie:return\"Profiler\";case ee:return\"StrictMode\";case pe:return\"Suspense\";case de:return\"SuspenseList\"}if(\"object\"==typeof s)switch(s.$$typeof){case ce:return(s.displayName||\"Context\")+\".Consumer\";case ae:return(s._context.displayName||\"Context\")+\".Provider\";case le:var o=s.render;return(s=s.displayName)||(s=\"\"!==(s=o.displayName||o.name||\"\")?\"ForwardRef(\"+s+\")\":\"ForwardRef\"),s;case fe:return null!==(o=s.displayName||null)?o:Qa(s.type)||\"Memo\";case ye:o=s._payload,s=s._init;try{return Qa(s(o))}catch(s){}}return null}function Ra(s){var o=s.type;switch(s.tag){case 24:return\"Cache\";case 9:return(o.displayName||\"Context\")+\".Consumer\";case 10:return(o._context.displayName||\"Context\")+\".Provider\";case 18:return\"DehydratedFragment\";case 11:return s=(s=o.render).displayName||s.name||\"\",o.displayName||(\"\"!==s?\"ForwardRef(\"+s+\")\":\"ForwardRef\");case 7:return\"Fragment\";case 5:return o;case 4:return\"Portal\";case 3:return\"Root\";case 6:return\"Text\";case 16:return Qa(o);case 8:return o===ee?\"StrictMode\":\"Mode\";case 22:return\"Offscreen\";case 12:return\"Profiler\";case 21:return\"Scope\";case 13:return\"Suspense\";case 19:return\"SuspenseList\";case 25:return\"TracingMarker\";case 1:case 0:case 17:case 2:case 14:case 15:if(\"function\"==typeof o)return o.displayName||o.name||null;if(\"string\"==typeof o)return o}return null}function Sa(s){switch(typeof s){case\"boolean\":case\"number\":case\"string\":case\"undefined\":case\"object\":return s;default:return\"\"}}function Ta(s){var o=s.type;return(s=s.nodeName)&&\"input\"===s.toLowerCase()&&(\"checkbox\"===o||\"radio\"===o)}function Va(s){s._valueTracker||(s._valueTracker=function Ua(s){var o=Ta(s)?\"checked\":\"value\",i=Object.getOwnPropertyDescriptor(s.constructor.prototype,o),a=\"\"+s[o];if(!s.hasOwnProperty(o)&&void 0!==i&&\"function\"==typeof i.get&&\"function\"==typeof i.set){var u=i.get,_=i.set;return Object.defineProperty(s,o,{configurable:!0,get:function(){return u.call(this)},set:function(s){a=\"\"+s,_.call(this,s)}}),Object.defineProperty(s,o,{enumerable:i.enumerable}),{getValue:function(){return a},setValue:function(s){a=\"\"+s},stopTracking:function(){s._valueTracker=null,delete s[o]}}}}(s))}function Wa(s){if(!s)return!1;var o=s._valueTracker;if(!o)return!0;var i=o.getValue(),a=\"\";return s&&(a=Ta(s)?s.checked?\"true\":\"false\":s.value),(s=a)!==i&&(o.setValue(s),!0)}function Xa(s){if(void 0===(s=s||(\"undefined\"!=typeof document?document:void 0)))return null;try{return s.activeElement||s.body}catch(o){return s.body}}function Ya(s,o){var i=o.checked;return we({},o,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=i?i:s._wrapperState.initialChecked})}function Za(s,o){var i=null==o.defaultValue?\"\":o.defaultValue,a=null!=o.checked?o.checked:o.defaultChecked;i=Sa(null!=o.value?o.value:i),s._wrapperState={initialChecked:a,initialValue:i,controlled:\"checkbox\"===o.type||\"radio\"===o.type?null!=o.checked:null!=o.value}}function ab(s,o){null!=(o=o.checked)&&ta(s,\"checked\",o,!1)}function bb(s,o){ab(s,o);var i=Sa(o.value),a=o.type;if(null!=i)\"number\"===a?(0===i&&\"\"===s.value||s.value!=i)&&(s.value=\"\"+i):s.value!==\"\"+i&&(s.value=\"\"+i);else if(\"submit\"===a||\"reset\"===a)return void s.removeAttribute(\"value\");o.hasOwnProperty(\"value\")?cb(s,o.type,i):o.hasOwnProperty(\"defaultValue\")&&cb(s,o.type,Sa(o.defaultValue)),null==o.checked&&null!=o.defaultChecked&&(s.defaultChecked=!!o.defaultChecked)}function db(s,o,i){if(o.hasOwnProperty(\"value\")||o.hasOwnProperty(\"defaultValue\")){var a=o.type;if(!(\"submit\"!==a&&\"reset\"!==a||void 0!==o.value&&null!==o.value))return;o=\"\"+s._wrapperState.initialValue,i||o===s.value||(s.value=o),s.defaultValue=o}\"\"!==(i=s.name)&&(s.name=\"\"),s.defaultChecked=!!s._wrapperState.initialChecked,\"\"!==i&&(s.name=i)}function cb(s,o,i){\"number\"===o&&Xa(s.ownerDocument)===s||(null==i?s.defaultValue=\"\"+s._wrapperState.initialValue:s.defaultValue!==\"\"+i&&(s.defaultValue=\"\"+i))}var Pe=Array.isArray;function fb(s,o,i,a){if(s=s.options,o){o={};for(var u=0;u\"+o.valueOf().toString()+\"\",o=Te.firstChild;s.firstChild;)s.removeChild(s.firstChild);for(;o.firstChild;)s.appendChild(o.firstChild)}},\"undefined\"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(s,o,i,a){MSApp.execUnsafeLocalFunction((function(){return Re(s,o)}))}:Re);function ob(s,o){if(o){var i=s.firstChild;if(i&&i===s.lastChild&&3===i.nodeType)return void(i.nodeValue=o)}s.textContent=o}var qe={animationIterationCount:!0,aspectRatio:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},ze=[\"Webkit\",\"ms\",\"Moz\",\"O\"];function rb(s,o,i){return null==o||\"boolean\"==typeof o||\"\"===o?\"\":i||\"number\"!=typeof o||0===o||qe.hasOwnProperty(s)&&qe[s]?(\"\"+o).trim():o+\"px\"}function sb(s,o){for(var i in s=s.style,o)if(o.hasOwnProperty(i)){var a=0===i.indexOf(\"--\"),u=rb(i,o[i],a);\"float\"===i&&(i=\"cssFloat\"),a?s.setProperty(i,u):s[i]=u}}Object.keys(qe).forEach((function(s){ze.forEach((function(o){o=o+s.charAt(0).toUpperCase()+s.substring(1),qe[o]=qe[s]}))}));var We=we({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function ub(s,o){if(o){if(We[s]&&(null!=o.children||null!=o.dangerouslySetInnerHTML))throw Error(p(137,s));if(null!=o.dangerouslySetInnerHTML){if(null!=o.children)throw Error(p(60));if(\"object\"!=typeof o.dangerouslySetInnerHTML||!(\"__html\"in o.dangerouslySetInnerHTML))throw Error(p(61))}if(null!=o.style&&\"object\"!=typeof o.style)throw Error(p(62))}}function vb(s,o){if(-1===s.indexOf(\"-\"))return\"string\"==typeof o.is;switch(s){case\"annotation-xml\":case\"color-profile\":case\"font-face\":case\"font-face-src\":case\"font-face-uri\":case\"font-face-format\":case\"font-face-name\":case\"missing-glyph\":return!1;default:return!0}}var He=null;function xb(s){return(s=s.target||s.srcElement||window).correspondingUseElement&&(s=s.correspondingUseElement),3===s.nodeType?s.parentNode:s}var Ye=null,Xe=null,Qe=null;function Bb(s){if(s=Cb(s)){if(\"function\"!=typeof Ye)throw Error(p(280));var o=s.stateNode;o&&(o=Db(o),Ye(s.stateNode,s.type,o))}}function Eb(s){Xe?Qe?Qe.push(s):Qe=[s]:Xe=s}function Fb(){if(Xe){var s=Xe,o=Qe;if(Qe=Xe=null,Bb(s),o)for(s=0;s>>=0,0===s?32:31-(wt(s)/xt|0)|0},wt=Math.log,xt=Math.LN2;var kt=64,Ot=4194304;function tc(s){switch(s&-s){case 1:return 1;case 2:return 2;case 4:return 4;case 8:return 8;case 16:return 16;case 32:return 32;case 64:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:return 4194240&s;case 4194304:case 8388608:case 16777216:case 33554432:case 67108864:return 130023424&s;case 134217728:return 134217728;case 268435456:return 268435456;case 536870912:return 536870912;case 1073741824:return 1073741824;default:return s}}function uc(s,o){var i=s.pendingLanes;if(0===i)return 0;var a=0,u=s.suspendedLanes,_=s.pingedLanes,w=268435455&i;if(0!==w){var x=w&~u;0!==x?a=tc(x):0!==(_&=w)&&(a=tc(_))}else 0!==(w=i&~u)?a=tc(w):0!==_&&(a=tc(_));if(0===a)return 0;if(0!==o&&o!==a&&!(o&u)&&((u=a&-a)>=(_=o&-o)||16===u&&4194240&_))return o;if(4&a&&(a|=16&i),0!==(o=s.entangledLanes))for(s=s.entanglements,o&=a;0i;i++)o.push(s);return o}function Ac(s,o,i){s.pendingLanes|=o,536870912!==o&&(s.suspendedLanes=0,s.pingedLanes=0),(s=s.eventTimes)[o=31-Et(o)]=i}function Cc(s,o){var i=s.entangledLanes|=o;for(s=s.entanglements;i;){var a=31-Et(i),u=1<=wr),Or=String.fromCharCode(32),Ar=!1;function ge(s,o){switch(s){case\"keyup\":return-1!==Sr.indexOf(o.keyCode);case\"keydown\":return 229!==o.keyCode;case\"keypress\":case\"mousedown\":case\"focusout\":return!0;default:return!1}}function he(s){return\"object\"==typeof(s=s.detail)&&\"data\"in s?s.data:null}var Cr=!1;var jr={color:!0,date:!0,datetime:!0,\"datetime-local\":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function me(s){var o=s&&s.nodeName&&s.nodeName.toLowerCase();return\"input\"===o?!!jr[s.type]:\"textarea\"===o}function ne(s,o,i,a){Eb(a),0<(o=oe(o,\"onChange\")).length&&(i=new Qt(\"onChange\",\"change\",null,i,a),s.push({event:i,listeners:o}))}var Pr=null,Ir=null;function re(s){se(s,0)}function te(s){if(Wa(ue(s)))return s}function ve(s,o){if(\"change\"===s)return o}var Tr=!1;if(x){var Nr;if(x){var Mr=\"oninput\"in document;if(!Mr){var Rr=document.createElement(\"div\");Rr.setAttribute(\"oninput\",\"return;\"),Mr=\"function\"==typeof Rr.oninput}Nr=Mr}else Nr=!1;Tr=Nr&&(!document.documentMode||9=o)return{node:a,offset:o-s};s=i}e:{for(;a;){if(a.nextSibling){a=a.nextSibling;break e}a=a.parentNode}a=void 0}a=Je(a)}}function Le(s,o){return!(!s||!o)&&(s===o||(!s||3!==s.nodeType)&&(o&&3===o.nodeType?Le(s,o.parentNode):\"contains\"in s?s.contains(o):!!s.compareDocumentPosition&&!!(16&s.compareDocumentPosition(o))))}function Me(){for(var s=window,o=Xa();o instanceof s.HTMLIFrameElement;){try{var i=\"string\"==typeof o.contentWindow.location.href}catch(s){i=!1}if(!i)break;o=Xa((s=o.contentWindow).document)}return o}function Ne(s){var o=s&&s.nodeName&&s.nodeName.toLowerCase();return o&&(\"input\"===o&&(\"text\"===s.type||\"search\"===s.type||\"tel\"===s.type||\"url\"===s.type||\"password\"===s.type)||\"textarea\"===o||\"true\"===s.contentEditable)}function Oe(s){var o=Me(),i=s.focusedElem,a=s.selectionRange;if(o!==i&&i&&i.ownerDocument&&Le(i.ownerDocument.documentElement,i)){if(null!==a&&Ne(i))if(o=a.start,void 0===(s=a.end)&&(s=o),\"selectionStart\"in i)i.selectionStart=o,i.selectionEnd=Math.min(s,i.value.length);else if((s=(o=i.ownerDocument||document)&&o.defaultView||window).getSelection){s=s.getSelection();var u=i.textContent.length,_=Math.min(a.start,u);a=void 0===a.end?_:Math.min(a.end,u),!s.extend&&_>a&&(u=a,a=_,_=u),u=Ke(i,_);var w=Ke(i,a);u&&w&&(1!==s.rangeCount||s.anchorNode!==u.node||s.anchorOffset!==u.offset||s.focusNode!==w.node||s.focusOffset!==w.offset)&&((o=o.createRange()).setStart(u.node,u.offset),s.removeAllRanges(),_>a?(s.addRange(o),s.extend(w.node,w.offset)):(o.setEnd(w.node,w.offset),s.addRange(o)))}for(o=[],s=i;s=s.parentNode;)1===s.nodeType&&o.push({element:s,left:s.scrollLeft,top:s.scrollTop});for(\"function\"==typeof i.focus&&i.focus(),i=0;i=document.documentMode,Fr=null,Br=null,$r=null,qr=!1;function Ue(s,o,i){var a=i.window===i?i.document:9===i.nodeType?i:i.ownerDocument;qr||null==Fr||Fr!==Xa(a)||(\"selectionStart\"in(a=Fr)&&Ne(a)?a={start:a.selectionStart,end:a.selectionEnd}:a={anchorNode:(a=(a.ownerDocument&&a.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:a.anchorOffset,focusNode:a.focusNode,focusOffset:a.focusOffset},$r&&Ie($r,a)||($r=a,0<(a=oe(Br,\"onSelect\")).length&&(o=new Qt(\"onSelect\",\"select\",null,o,i),s.push({event:o,listeners:a}),o.target=Fr)))}function Ve(s,o){var i={};return i[s.toLowerCase()]=o.toLowerCase(),i[\"Webkit\"+s]=\"webkit\"+o,i[\"Moz\"+s]=\"moz\"+o,i}var Ur={animationend:Ve(\"Animation\",\"AnimationEnd\"),animationiteration:Ve(\"Animation\",\"AnimationIteration\"),animationstart:Ve(\"Animation\",\"AnimationStart\"),transitionend:Ve(\"Transition\",\"TransitionEnd\")},Vr={},zr={};function Ze(s){if(Vr[s])return Vr[s];if(!Ur[s])return s;var o,i=Ur[s];for(o in i)if(i.hasOwnProperty(o)&&o in zr)return Vr[s]=i[o];return s}x&&(zr=document.createElement(\"div\").style,\"AnimationEvent\"in window||(delete Ur.animationend.animation,delete Ur.animationiteration.animation,delete Ur.animationstart.animation),\"TransitionEvent\"in window||delete Ur.transitionend.transition);var Wr=Ze(\"animationend\"),Jr=Ze(\"animationiteration\"),Hr=Ze(\"animationstart\"),Kr=Ze(\"transitionend\"),Gr=new Map,Yr=\"abort auxClick cancel canPlay canPlayThrough click close contextMenu copy cut drag dragEnd dragEnter dragExit dragLeave dragOver dragStart drop durationChange emptied encrypted ended error gotPointerCapture input invalid keyDown keyPress keyUp load loadedData loadedMetadata loadStart lostPointerCapture mouseDown mouseMove mouseOut mouseOver mouseUp paste pause play playing pointerCancel pointerDown pointerMove pointerOut pointerOver pointerUp progress rateChange reset resize seeked seeking stalled submit suspend timeUpdate touchCancel touchEnd touchStart volumeChange scroll toggle touchMove waiting wheel\".split(\" \");function ff(s,o){Gr.set(s,o),fa(o,[s])}for(var Xr=0;Xrbn||(s.current=vn[bn],vn[bn]=null,bn--)}function G(s,o){bn++,vn[bn]=s.current,s.current=o}var _n={},Sn=Uf(_n),En=Uf(!1),wn=_n;function Yf(s,o){var i=s.type.contextTypes;if(!i)return _n;var a=s.stateNode;if(a&&a.__reactInternalMemoizedUnmaskedChildContext===o)return a.__reactInternalMemoizedMaskedChildContext;var u,_={};for(u in i)_[u]=o[u];return a&&((s=s.stateNode).__reactInternalMemoizedUnmaskedChildContext=o,s.__reactInternalMemoizedMaskedChildContext=_),_}function Zf(s){return null!=(s=s.childContextTypes)}function $f(){E(En),E(Sn)}function ag(s,o,i){if(Sn.current!==_n)throw Error(p(168));G(Sn,o),G(En,i)}function bg(s,o,i){var a=s.stateNode;if(o=o.childContextTypes,\"function\"!=typeof a.getChildContext)return i;for(var u in a=a.getChildContext())if(!(u in o))throw Error(p(108,Ra(s)||\"Unknown\",u));return we({},i,a)}function cg(s){return s=(s=s.stateNode)&&s.__reactInternalMemoizedMergedChildContext||_n,wn=Sn.current,G(Sn,s),G(En,En.current),!0}function dg(s,o,i){var a=s.stateNode;if(!a)throw Error(p(169));i?(s=bg(s,o,wn),a.__reactInternalMemoizedMergedChildContext=s,E(En),E(Sn),G(Sn,s)):E(En),G(En,i)}var xn=null,kn=!1,On=!1;function hg(s){null===xn?xn=[s]:xn.push(s)}function jg(){if(!On&&null!==xn){On=!0;var s=0,o=At;try{var i=xn;for(At=1;s>=w,u-=w,Mn=1<<32-Et(o)+u|i<C?(j=x,x=null):j=x.sibling;var L=r(o,x,a[C],u);if(null===L){null===x&&(x=j);break}s&&x&&null===L.alternate&&b(o,x),i=f(L,i,C),null===w?_=L:w.sibling=L,w=L,x=j}if(C===a.length)return c(o,x),Fn&&tg(o,C),_;if(null===x){for(;CC?(j=x,x=null):j=x.sibling;var B=r(o,x,L.value,u);if(null===B){null===x&&(x=j);break}s&&x&&null===B.alternate&&b(o,x),i=f(B,i,C),null===w?_=B:w.sibling=B,w=B,x=j}if(L.done)return c(o,x),Fn&&tg(o,C),_;if(null===x){for(;!L.done;C++,L=a.next())null!==(L=q(o,L.value,u))&&(i=f(L,i,C),null===w?_=L:w.sibling=L,w=L);return Fn&&tg(o,C),_}for(x=d(o,x);!L.done;C++,L=a.next())null!==(L=y(x,o,C,L.value,u))&&(s&&null!==L.alternate&&x.delete(null===L.key?C:L.key),i=f(L,i,C),null===w?_=L:w.sibling=L,w=L);return s&&x.forEach((function(s){return b(o,s)})),Fn&&tg(o,C),_}return function J(s,o,i,a){if(\"object\"==typeof i&&null!==i&&i.type===Z&&null===i.key&&(i=i.props.children),\"object\"==typeof i&&null!==i){switch(i.$$typeof){case z:e:{for(var u=i.key,_=o;null!==_;){if(_.key===u){if((u=i.type)===Z){if(7===_.tag){c(s,_.sibling),(o=e(_,i.props.children)).return=s,s=o;break e}}else if(_.elementType===u||\"object\"==typeof u&&null!==u&&u.$$typeof===ye&&Ng(u)===_.type){c(s,_.sibling),(o=e(_,i.props)).ref=Lg(s,_,i),o.return=s,s=o;break e}c(s,_);break}b(s,_),_=_.sibling}i.type===Z?((o=Tg(i.props.children,s.mode,a,i.key)).return=s,s=o):((a=Rg(i.type,i.key,i.props,null,s.mode,a)).ref=Lg(s,o,i),a.return=s,s=a)}return g(s);case Y:e:{for(_=i.key;null!==o;){if(o.key===_){if(4===o.tag&&o.stateNode.containerInfo===i.containerInfo&&o.stateNode.implementation===i.implementation){c(s,o.sibling),(o=e(o,i.children||[])).return=s,s=o;break e}c(s,o);break}b(s,o),o=o.sibling}(o=Sg(i,s.mode,a)).return=s,s=o}return g(s);case ye:return J(s,o,(_=i._init)(i._payload),a)}if(Pe(i))return n(s,o,i,a);if(Ka(i))return t(s,o,i,a);Mg(s,i)}return\"string\"==typeof i&&\"\"!==i||\"number\"==typeof i?(i=\"\"+i,null!==o&&6===o.tag?(c(s,o.sibling),(o=e(o,i)).return=s,s=o):(c(s,o),(o=Qg(i,s.mode,a)).return=s,s=o),g(s)):c(s,o)}}var qn=Og(!0),Un=Og(!1),Vn=Uf(null),zn=null,Wn=null,Jn=null;function $g(){Jn=Wn=zn=null}function ah(s){var o=Vn.current;E(Vn),s._currentValue=o}function bh(s,o,i){for(;null!==s;){var a=s.alternate;if((s.childLanes&o)!==o?(s.childLanes|=o,null!==a&&(a.childLanes|=o)):null!==a&&(a.childLanes&o)!==o&&(a.childLanes|=o),s===i)break;s=s.return}}function ch(s,o){zn=s,Jn=Wn=null,null!==(s=s.dependencies)&&null!==s.firstContext&&(!!(s.lanes&o)&&(bs=!0),s.firstContext=null)}function eh(s){var o=s._currentValue;if(Jn!==s)if(s={context:s,memoizedValue:o,next:null},null===Wn){if(null===zn)throw Error(p(308));Wn=s,zn.dependencies={lanes:0,firstContext:s}}else Wn=Wn.next=s;return o}var Hn=null;function gh(s){null===Hn?Hn=[s]:Hn.push(s)}function hh(s,o,i,a){var u=o.interleaved;return null===u?(i.next=i,gh(o)):(i.next=u.next,u.next=i),o.interleaved=i,ih(s,a)}function ih(s,o){s.lanes|=o;var i=s.alternate;for(null!==i&&(i.lanes|=o),i=s,s=s.return;null!==s;)s.childLanes|=o,null!==(i=s.alternate)&&(i.childLanes|=o),i=s,s=s.return;return 3===i.tag?i.stateNode:null}var Kn=!1;function kh(s){s.updateQueue={baseState:s.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null,interleaved:null,lanes:0},effects:null}}function lh(s,o){s=s.updateQueue,o.updateQueue===s&&(o.updateQueue={baseState:s.baseState,firstBaseUpdate:s.firstBaseUpdate,lastBaseUpdate:s.lastBaseUpdate,shared:s.shared,effects:s.effects})}function mh(s,o){return{eventTime:s,lane:o,tag:0,payload:null,callback:null,next:null}}function nh(s,o,i){var a=s.updateQueue;if(null===a)return null;if(a=a.shared,2&Ls){var u=a.pending;return null===u?o.next=o:(o.next=u.next,u.next=o),a.pending=o,ih(s,i)}return null===(u=a.interleaved)?(o.next=o,gh(a)):(o.next=u.next,u.next=o),a.interleaved=o,ih(s,i)}function oh(s,o,i){if(null!==(o=o.updateQueue)&&(o=o.shared,4194240&i)){var a=o.lanes;i|=a&=s.pendingLanes,o.lanes=i,Cc(s,i)}}function ph(s,o){var i=s.updateQueue,a=s.alternate;if(null!==a&&i===(a=a.updateQueue)){var u=null,_=null;if(null!==(i=i.firstBaseUpdate)){do{var w={eventTime:i.eventTime,lane:i.lane,tag:i.tag,payload:i.payload,callback:i.callback,next:null};null===_?u=_=w:_=_.next=w,i=i.next}while(null!==i);null===_?u=_=o:_=_.next=o}else u=_=o;return i={baseState:a.baseState,firstBaseUpdate:u,lastBaseUpdate:_,shared:a.shared,effects:a.effects},void(s.updateQueue=i)}null===(s=i.lastBaseUpdate)?i.firstBaseUpdate=o:s.next=o,i.lastBaseUpdate=o}function qh(s,o,i,a){var u=s.updateQueue;Kn=!1;var _=u.firstBaseUpdate,w=u.lastBaseUpdate,x=u.shared.pending;if(null!==x){u.shared.pending=null;var C=x,j=C.next;C.next=null,null===w?_=j:w.next=j,w=C;var L=s.alternate;null!==L&&((x=(L=L.updateQueue).lastBaseUpdate)!==w&&(null===x?L.firstBaseUpdate=j:x.next=j,L.lastBaseUpdate=C))}if(null!==_){var B=u.baseState;for(w=0,L=j=C=null,x=_;;){var $=x.lane,U=x.eventTime;if((a&$)===$){null!==L&&(L=L.next={eventTime:U,lane:0,tag:x.tag,payload:x.payload,callback:x.callback,next:null});e:{var V=s,z=x;switch($=o,U=i,z.tag){case 1:if(\"function\"==typeof(V=z.payload)){B=V.call(U,B,$);break e}B=V;break e;case 3:V.flags=-65537&V.flags|128;case 0:if(null==($=\"function\"==typeof(V=z.payload)?V.call(U,B,$):V))break e;B=we({},B,$);break e;case 2:Kn=!0}}null!==x.callback&&0!==x.lane&&(s.flags|=64,null===($=u.effects)?u.effects=[x]:$.push(x))}else U={eventTime:U,lane:$,tag:x.tag,payload:x.payload,callback:x.callback,next:null},null===L?(j=L=U,C=B):L=L.next=U,w|=$;if(null===(x=x.next)){if(null===(x=u.shared.pending))break;x=($=x).next,$.next=null,u.lastBaseUpdate=$,u.shared.pending=null}}if(null===L&&(C=B),u.baseState=C,u.firstBaseUpdate=j,u.lastBaseUpdate=L,null!==(o=u.shared.interleaved)){u=o;do{w|=u.lane,u=u.next}while(u!==o)}else null===_&&(u.shared.lanes=0);Ws|=w,s.lanes=w,s.memoizedState=B}}function sh(s,o,i){if(s=o.effects,o.effects=null,null!==s)for(o=0;oi?i:4,s(!0);var a=rs.transition;rs.transition={};try{s(!1),o()}finally{At=i,rs.transition=a}}function wi(){return Uh().memoizedState}function xi(s,o,i){var a=yi(s);if(i={lane:a,action:i,hasEagerState:!1,eagerState:null,next:null},zi(s))Ai(o,i);else if(null!==(i=hh(s,o,i,a))){gi(i,s,a,R()),Bi(i,o,a)}}function ii(s,o,i){var a=yi(s),u={lane:a,action:i,hasEagerState:!1,eagerState:null,next:null};if(zi(s))Ai(o,u);else{var _=s.alternate;if(0===s.lanes&&(null===_||0===_.lanes)&&null!==(_=o.lastRenderedReducer))try{var w=o.lastRenderedState,x=_(w,i);if(u.hasEagerState=!0,u.eagerState=x,Dr(x,w)){var C=o.interleaved;return null===C?(u.next=u,gh(o)):(u.next=C.next,C.next=u),void(o.interleaved=u)}}catch(s){}null!==(i=hh(s,o,u,a))&&(gi(i,s,a,u=R()),Bi(i,o,a))}}function zi(s){var o=s.alternate;return s===ss||null!==o&&o===ss}function Ai(s,o){ls=cs=!0;var i=s.pending;null===i?o.next=o:(o.next=i.next,i.next=o),s.pending=o}function Bi(s,o,i){if(4194240&i){var a=o.lanes;i|=a&=s.pendingLanes,o.lanes=i,Cc(s,i)}}var hs={readContext:eh,useCallback:P,useContext:P,useEffect:P,useImperativeHandle:P,useInsertionEffect:P,useLayoutEffect:P,useMemo:P,useReducer:P,useRef:P,useState:P,useDebugValue:P,useDeferredValue:P,useTransition:P,useMutableSource:P,useSyncExternalStore:P,useId:P,unstable_isNewReconciler:!1},ds={readContext:eh,useCallback:function(s,o){return Th().memoizedState=[s,void 0===o?null:o],s},useContext:eh,useEffect:mi,useImperativeHandle:function(s,o,i){return i=null!=i?i.concat([s]):null,ki(4194308,4,pi.bind(null,o,s),i)},useLayoutEffect:function(s,o){return ki(4194308,4,s,o)},useInsertionEffect:function(s,o){return ki(4,2,s,o)},useMemo:function(s,o){var i=Th();return o=void 0===o?null:o,s=s(),i.memoizedState=[s,o],s},useReducer:function(s,o,i){var a=Th();return o=void 0!==i?i(o):o,a.memoizedState=a.baseState=o,s={pending:null,interleaved:null,lanes:0,dispatch:null,lastRenderedReducer:s,lastRenderedState:o},a.queue=s,s=s.dispatch=xi.bind(null,ss,s),[a.memoizedState,s]},useRef:function(s){return s={current:s},Th().memoizedState=s},useState:hi,useDebugValue:ri,useDeferredValue:function(s){return Th().memoizedState=s},useTransition:function(){var s=hi(!1),o=s[0];return s=vi.bind(null,s[1]),Th().memoizedState=s,[o,s]},useMutableSource:function(){},useSyncExternalStore:function(s,o,i){var a=ss,u=Th();if(Fn){if(void 0===i)throw Error(p(407));i=i()}else{if(i=o(),null===Fs)throw Error(p(349));30&ns||di(a,o,i)}u.memoizedState=i;var _={value:i,getSnapshot:o};return u.queue=_,mi(ai.bind(null,a,_,s),[s]),a.flags|=2048,bi(9,ci.bind(null,a,_,i,o),void 0,null),i},useId:function(){var s=Th(),o=Fs.identifierPrefix;if(Fn){var i=Rn;o=\":\"+o+\"R\"+(i=(Mn&~(1<<32-Et(Mn)-1)).toString(32)+i),0<(i=us++)&&(o+=\"H\"+i.toString(32)),o+=\":\"}else o=\":\"+o+\"r\"+(i=ps++).toString(32)+\":\";return s.memoizedState=o},unstable_isNewReconciler:!1},fs={readContext:eh,useCallback:si,useContext:eh,useEffect:$h,useImperativeHandle:qi,useInsertionEffect:ni,useLayoutEffect:oi,useMemo:ti,useReducer:Wh,useRef:ji,useState:function(){return Wh(Vh)},useDebugValue:ri,useDeferredValue:function(s){return ui(Uh(),os.memoizedState,s)},useTransition:function(){return[Wh(Vh)[0],Uh().memoizedState]},useMutableSource:Yh,useSyncExternalStore:Zh,useId:wi,unstable_isNewReconciler:!1},ms={readContext:eh,useCallback:si,useContext:eh,useEffect:$h,useImperativeHandle:qi,useInsertionEffect:ni,useLayoutEffect:oi,useMemo:ti,useReducer:Xh,useRef:ji,useState:function(){return Xh(Vh)},useDebugValue:ri,useDeferredValue:function(s){var o=Uh();return null===os?o.memoizedState=s:ui(o,os.memoizedState,s)},useTransition:function(){return[Xh(Vh)[0],Uh().memoizedState]},useMutableSource:Yh,useSyncExternalStore:Zh,useId:wi,unstable_isNewReconciler:!1};function Ci(s,o){if(s&&s.defaultProps){for(var i in o=we({},o),s=s.defaultProps)void 0===o[i]&&(o[i]=s[i]);return o}return o}function Di(s,o,i,a){i=null==(i=i(a,o=s.memoizedState))?o:we({},o,i),s.memoizedState=i,0===s.lanes&&(s.updateQueue.baseState=i)}var gs={isMounted:function(s){return!!(s=s._reactInternals)&&Vb(s)===s},enqueueSetState:function(s,o,i){s=s._reactInternals;var a=R(),u=yi(s),_=mh(a,u);_.payload=o,null!=i&&(_.callback=i),null!==(o=nh(s,_,u))&&(gi(o,s,u,a),oh(o,s,u))},enqueueReplaceState:function(s,o,i){s=s._reactInternals;var a=R(),u=yi(s),_=mh(a,u);_.tag=1,_.payload=o,null!=i&&(_.callback=i),null!==(o=nh(s,_,u))&&(gi(o,s,u,a),oh(o,s,u))},enqueueForceUpdate:function(s,o){s=s._reactInternals;var i=R(),a=yi(s),u=mh(i,a);u.tag=2,null!=o&&(u.callback=o),null!==(o=nh(s,u,a))&&(gi(o,s,a,i),oh(o,s,a))}};function Fi(s,o,i,a,u,_,w){return\"function\"==typeof(s=s.stateNode).shouldComponentUpdate?s.shouldComponentUpdate(a,_,w):!o.prototype||!o.prototype.isPureReactComponent||(!Ie(i,a)||!Ie(u,_))}function Gi(s,o,i){var a=!1,u=_n,_=o.contextType;return\"object\"==typeof _&&null!==_?_=eh(_):(u=Zf(o)?wn:Sn.current,_=(a=null!=(a=o.contextTypes))?Yf(s,u):_n),o=new o(i,_),s.memoizedState=null!==o.state&&void 0!==o.state?o.state:null,o.updater=gs,s.stateNode=o,o._reactInternals=s,a&&((s=s.stateNode).__reactInternalMemoizedUnmaskedChildContext=u,s.__reactInternalMemoizedMaskedChildContext=_),o}function Hi(s,o,i,a){s=o.state,\"function\"==typeof o.componentWillReceiveProps&&o.componentWillReceiveProps(i,a),\"function\"==typeof o.UNSAFE_componentWillReceiveProps&&o.UNSAFE_componentWillReceiveProps(i,a),o.state!==s&&gs.enqueueReplaceState(o,o.state,null)}function Ii(s,o,i,a){var u=s.stateNode;u.props=i,u.state=s.memoizedState,u.refs={},kh(s);var _=o.contextType;\"object\"==typeof _&&null!==_?u.context=eh(_):(_=Zf(o)?wn:Sn.current,u.context=Yf(s,_)),u.state=s.memoizedState,\"function\"==typeof(_=o.getDerivedStateFromProps)&&(Di(s,o,_,i),u.state=s.memoizedState),\"function\"==typeof o.getDerivedStateFromProps||\"function\"==typeof u.getSnapshotBeforeUpdate||\"function\"!=typeof u.UNSAFE_componentWillMount&&\"function\"!=typeof u.componentWillMount||(o=u.state,\"function\"==typeof u.componentWillMount&&u.componentWillMount(),\"function\"==typeof u.UNSAFE_componentWillMount&&u.UNSAFE_componentWillMount(),o!==u.state&&gs.enqueueReplaceState(u,u.state,null),qh(s,i,u,a),u.state=s.memoizedState),\"function\"==typeof u.componentDidMount&&(s.flags|=4194308)}function Ji(s,o){try{var i=\"\",a=o;do{i+=Pa(a),a=a.return}while(a);var u=i}catch(s){u=\"\\nError generating stack: \"+s.message+\"\\n\"+s.stack}return{value:s,source:o,stack:u,digest:null}}function Ki(s,o,i){return{value:s,source:null,stack:null!=i?i:null,digest:null!=o?o:null}}function Li(s,o){try{console.error(o.value)}catch(s){setTimeout((function(){throw s}))}}var ys=\"function\"==typeof WeakMap?WeakMap:Map;function Ni(s,o,i){(i=mh(-1,i)).tag=3,i.payload={element:null};var a=o.value;return i.callback=function(){Zs||(Zs=!0,eo=a),Li(0,o)},i}function Qi(s,o,i){(i=mh(-1,i)).tag=3;var a=s.type.getDerivedStateFromError;if(\"function\"==typeof a){var u=o.value;i.payload=function(){return a(u)},i.callback=function(){Li(0,o)}}var _=s.stateNode;return null!==_&&\"function\"==typeof _.componentDidCatch&&(i.callback=function(){Li(0,o),\"function\"!=typeof a&&(null===to?to=new Set([this]):to.add(this));var s=o.stack;this.componentDidCatch(o.value,{componentStack:null!==s?s:\"\"})}),i}function Si(s,o,i){var a=s.pingCache;if(null===a){a=s.pingCache=new ys;var u=new Set;a.set(o,u)}else void 0===(u=a.get(o))&&(u=new Set,a.set(o,u));u.has(i)||(u.add(i),s=Ti.bind(null,s,o,i),o.then(s,s))}function Ui(s){do{var o;if((o=13===s.tag)&&(o=null===(o=s.memoizedState)||null!==o.dehydrated),o)return s;s=s.return}while(null!==s);return null}function Vi(s,o,i,a,u){return 1&s.mode?(s.flags|=65536,s.lanes=u,s):(s===o?s.flags|=65536:(s.flags|=128,i.flags|=131072,i.flags&=-52805,1===i.tag&&(null===i.alternate?i.tag=17:((o=mh(-1,1)).tag=2,nh(i,o,1))),i.lanes|=1),s)}var vs=V.ReactCurrentOwner,bs=!1;function Xi(s,o,i,a){o.child=null===s?Un(o,null,i,a):qn(o,s.child,i,a)}function Yi(s,o,i,a,u){i=i.render;var _=o.ref;return ch(o,u),a=Nh(s,o,i,a,_,u),i=Sh(),null===s||bs?(Fn&&i&&vg(o),o.flags|=1,Xi(s,o,a,u),o.child):(o.updateQueue=s.updateQueue,o.flags&=-2053,s.lanes&=~u,Zi(s,o,u))}function $i(s,o,i,a,u){if(null===s){var _=i.type;return\"function\"!=typeof _||aj(_)||void 0!==_.defaultProps||null!==i.compare||void 0!==i.defaultProps?((s=Rg(i.type,null,a,o,o.mode,u)).ref=o.ref,s.return=o,o.child=s):(o.tag=15,o.type=_,bj(s,o,_,a,u))}if(_=s.child,!(s.lanes&u)){var w=_.memoizedProps;if((i=null!==(i=i.compare)?i:Ie)(w,a)&&s.ref===o.ref)return Zi(s,o,u)}return o.flags|=1,(s=Pg(_,a)).ref=o.ref,s.return=o,o.child=s}function bj(s,o,i,a,u){if(null!==s){var _=s.memoizedProps;if(Ie(_,a)&&s.ref===o.ref){if(bs=!1,o.pendingProps=a=_,!(s.lanes&u))return o.lanes=s.lanes,Zi(s,o,u);131072&s.flags&&(bs=!0)}}return cj(s,o,i,a,u)}function dj(s,o,i){var a=o.pendingProps,u=a.children,_=null!==s?s.memoizedState:null;if(\"hidden\"===a.mode)if(1&o.mode){if(!(1073741824&i))return s=null!==_?_.baseLanes|i:i,o.lanes=o.childLanes=1073741824,o.memoizedState={baseLanes:s,cachePool:null,transitions:null},o.updateQueue=null,G(Us,qs),qs|=s,null;o.memoizedState={baseLanes:0,cachePool:null,transitions:null},a=null!==_?_.baseLanes:i,G(Us,qs),qs|=a}else o.memoizedState={baseLanes:0,cachePool:null,transitions:null},G(Us,qs),qs|=i;else null!==_?(a=_.baseLanes|i,o.memoizedState=null):a=i,G(Us,qs),qs|=a;return Xi(s,o,u,i),o.child}function gj(s,o){var i=o.ref;(null===s&&null!==i||null!==s&&s.ref!==i)&&(o.flags|=512,o.flags|=2097152)}function cj(s,o,i,a,u){var _=Zf(i)?wn:Sn.current;return _=Yf(o,_),ch(o,u),i=Nh(s,o,i,a,_,u),a=Sh(),null===s||bs?(Fn&&a&&vg(o),o.flags|=1,Xi(s,o,i,u),o.child):(o.updateQueue=s.updateQueue,o.flags&=-2053,s.lanes&=~u,Zi(s,o,u))}function hj(s,o,i,a,u){if(Zf(i)){var _=!0;cg(o)}else _=!1;if(ch(o,u),null===o.stateNode)ij(s,o),Gi(o,i,a),Ii(o,i,a,u),a=!0;else if(null===s){var w=o.stateNode,x=o.memoizedProps;w.props=x;var C=w.context,j=i.contextType;\"object\"==typeof j&&null!==j?j=eh(j):j=Yf(o,j=Zf(i)?wn:Sn.current);var L=i.getDerivedStateFromProps,B=\"function\"==typeof L||\"function\"==typeof w.getSnapshotBeforeUpdate;B||\"function\"!=typeof w.UNSAFE_componentWillReceiveProps&&\"function\"!=typeof w.componentWillReceiveProps||(x!==a||C!==j)&&Hi(o,w,a,j),Kn=!1;var $=o.memoizedState;w.state=$,qh(o,a,w,u),C=o.memoizedState,x!==a||$!==C||En.current||Kn?(\"function\"==typeof L&&(Di(o,i,L,a),C=o.memoizedState),(x=Kn||Fi(o,i,x,a,$,C,j))?(B||\"function\"!=typeof w.UNSAFE_componentWillMount&&\"function\"!=typeof w.componentWillMount||(\"function\"==typeof w.componentWillMount&&w.componentWillMount(),\"function\"==typeof w.UNSAFE_componentWillMount&&w.UNSAFE_componentWillMount()),\"function\"==typeof w.componentDidMount&&(o.flags|=4194308)):(\"function\"==typeof w.componentDidMount&&(o.flags|=4194308),o.memoizedProps=a,o.memoizedState=C),w.props=a,w.state=C,w.context=j,a=x):(\"function\"==typeof w.componentDidMount&&(o.flags|=4194308),a=!1)}else{w=o.stateNode,lh(s,o),x=o.memoizedProps,j=o.type===o.elementType?x:Ci(o.type,x),w.props=j,B=o.pendingProps,$=w.context,\"object\"==typeof(C=i.contextType)&&null!==C?C=eh(C):C=Yf(o,C=Zf(i)?wn:Sn.current);var U=i.getDerivedStateFromProps;(L=\"function\"==typeof U||\"function\"==typeof w.getSnapshotBeforeUpdate)||\"function\"!=typeof w.UNSAFE_componentWillReceiveProps&&\"function\"!=typeof w.componentWillReceiveProps||(x!==B||$!==C)&&Hi(o,w,a,C),Kn=!1,$=o.memoizedState,w.state=$,qh(o,a,w,u);var V=o.memoizedState;x!==B||$!==V||En.current||Kn?(\"function\"==typeof U&&(Di(o,i,U,a),V=o.memoizedState),(j=Kn||Fi(o,i,j,a,$,V,C)||!1)?(L||\"function\"!=typeof w.UNSAFE_componentWillUpdate&&\"function\"!=typeof w.componentWillUpdate||(\"function\"==typeof w.componentWillUpdate&&w.componentWillUpdate(a,V,C),\"function\"==typeof w.UNSAFE_componentWillUpdate&&w.UNSAFE_componentWillUpdate(a,V,C)),\"function\"==typeof w.componentDidUpdate&&(o.flags|=4),\"function\"==typeof w.getSnapshotBeforeUpdate&&(o.flags|=1024)):(\"function\"!=typeof w.componentDidUpdate||x===s.memoizedProps&&$===s.memoizedState||(o.flags|=4),\"function\"!=typeof w.getSnapshotBeforeUpdate||x===s.memoizedProps&&$===s.memoizedState||(o.flags|=1024),o.memoizedProps=a,o.memoizedState=V),w.props=a,w.state=V,w.context=C,a=j):(\"function\"!=typeof w.componentDidUpdate||x===s.memoizedProps&&$===s.memoizedState||(o.flags|=4),\"function\"!=typeof w.getSnapshotBeforeUpdate||x===s.memoizedProps&&$===s.memoizedState||(o.flags|=1024),a=!1)}return jj(s,o,i,a,_,u)}function jj(s,o,i,a,u,_){gj(s,o);var w=!!(128&o.flags);if(!a&&!w)return u&&dg(o,i,!1),Zi(s,o,_);a=o.stateNode,vs.current=o;var x=w&&\"function\"!=typeof i.getDerivedStateFromError?null:a.render();return o.flags|=1,null!==s&&w?(o.child=qn(o,s.child,null,_),o.child=qn(o,null,x,_)):Xi(s,o,x,_),o.memoizedState=a.state,u&&dg(o,i,!0),o.child}function kj(s){var o=s.stateNode;o.pendingContext?ag(0,o.pendingContext,o.pendingContext!==o.context):o.context&&ag(0,o.context,!1),yh(s,o.containerInfo)}function lj(s,o,i,a,u){return Ig(),Jg(u),o.flags|=256,Xi(s,o,i,a),o.child}var _s,Ss,Es,ws,xs={dehydrated:null,treeContext:null,retryLane:0};function nj(s){return{baseLanes:s,cachePool:null,transitions:null}}function oj(s,o,i){var a,u=o.pendingProps,_=Zn.current,w=!1,x=!!(128&o.flags);if((a=x)||(a=(null===s||null!==s.memoizedState)&&!!(2&_)),a?(w=!0,o.flags&=-129):null!==s&&null===s.memoizedState||(_|=1),G(Zn,1&_),null===s)return Eg(o),null!==(s=o.memoizedState)&&null!==(s=s.dehydrated)?(1&o.mode?\"$!\"===s.data?o.lanes=8:o.lanes=1073741824:o.lanes=1,null):(x=u.children,s=u.fallback,w?(u=o.mode,w=o.child,x={mode:\"hidden\",children:x},1&u||null===w?w=pj(x,u,0,null):(w.childLanes=0,w.pendingProps=x),s=Tg(s,u,i,null),w.return=o,s.return=o,w.sibling=s,o.child=w,o.child.memoizedState=nj(i),o.memoizedState=xs,s):qj(o,x));if(null!==(_=s.memoizedState)&&null!==(a=_.dehydrated))return function rj(s,o,i,a,u,_,w){if(i)return 256&o.flags?(o.flags&=-257,sj(s,o,w,a=Ki(Error(p(422))))):null!==o.memoizedState?(o.child=s.child,o.flags|=128,null):(_=a.fallback,u=o.mode,a=pj({mode:\"visible\",children:a.children},u,0,null),(_=Tg(_,u,w,null)).flags|=2,a.return=o,_.return=o,a.sibling=_,o.child=a,1&o.mode&&qn(o,s.child,null,w),o.child.memoizedState=nj(w),o.memoizedState=xs,_);if(!(1&o.mode))return sj(s,o,w,null);if(\"$!\"===u.data){if(a=u.nextSibling&&u.nextSibling.dataset)var x=a.dgst;return a=x,sj(s,o,w,a=Ki(_=Error(p(419)),a,void 0))}if(x=!!(w&s.childLanes),bs||x){if(null!==(a=Fs)){switch(w&-w){case 4:u=2;break;case 16:u=8;break;case 64:case 128:case 256:case 512:case 1024:case 2048:case 4096:case 8192:case 16384:case 32768:case 65536:case 131072:case 262144:case 524288:case 1048576:case 2097152:case 4194304:case 8388608:case 16777216:case 33554432:case 67108864:u=32;break;case 536870912:u=268435456;break;default:u=0}0!==(u=u&(a.suspendedLanes|w)?0:u)&&u!==_.retryLane&&(_.retryLane=u,ih(s,u),gi(a,s,u,-1))}return tj(),sj(s,o,w,a=Ki(Error(p(421))))}return\"$?\"===u.data?(o.flags|=128,o.child=s.child,o=uj.bind(null,s),u._reactRetry=o,null):(s=_.treeContext,Ln=Lf(u.nextSibling),Dn=o,Fn=!0,Bn=null,null!==s&&(In[Tn++]=Mn,In[Tn++]=Rn,In[Tn++]=Nn,Mn=s.id,Rn=s.overflow,Nn=o),o=qj(o,a.children),o.flags|=4096,o)}(s,o,x,u,a,_,i);if(w){w=u.fallback,x=o.mode,a=(_=s.child).sibling;var C={mode:\"hidden\",children:u.children};return 1&x||o.child===_?(u=Pg(_,C)).subtreeFlags=14680064&_.subtreeFlags:((u=o.child).childLanes=0,u.pendingProps=C,o.deletions=null),null!==a?w=Pg(a,w):(w=Tg(w,x,i,null)).flags|=2,w.return=o,u.return=o,u.sibling=w,o.child=u,u=w,w=o.child,x=null===(x=s.child.memoizedState)?nj(i):{baseLanes:x.baseLanes|i,cachePool:null,transitions:x.transitions},w.memoizedState=x,w.childLanes=s.childLanes&~i,o.memoizedState=xs,u}return s=(w=s.child).sibling,u=Pg(w,{mode:\"visible\",children:u.children}),!(1&o.mode)&&(u.lanes=i),u.return=o,u.sibling=null,null!==s&&(null===(i=o.deletions)?(o.deletions=[s],o.flags|=16):i.push(s)),o.child=u,o.memoizedState=null,u}function qj(s,o){return(o=pj({mode:\"visible\",children:o},s.mode,0,null)).return=s,s.child=o}function sj(s,o,i,a){return null!==a&&Jg(a),qn(o,s.child,null,i),(s=qj(o,o.pendingProps.children)).flags|=2,o.memoizedState=null,s}function vj(s,o,i){s.lanes|=o;var a=s.alternate;null!==a&&(a.lanes|=o),bh(s.return,o,i)}function wj(s,o,i,a,u){var _=s.memoizedState;null===_?s.memoizedState={isBackwards:o,rendering:null,renderingStartTime:0,last:a,tail:i,tailMode:u}:(_.isBackwards=o,_.rendering=null,_.renderingStartTime=0,_.last=a,_.tail=i,_.tailMode=u)}function xj(s,o,i){var a=o.pendingProps,u=a.revealOrder,_=a.tail;if(Xi(s,o,a.children,i),2&(a=Zn.current))a=1&a|2,o.flags|=128;else{if(null!==s&&128&s.flags)e:for(s=o.child;null!==s;){if(13===s.tag)null!==s.memoizedState&&vj(s,i,o);else if(19===s.tag)vj(s,i,o);else if(null!==s.child){s.child.return=s,s=s.child;continue}if(s===o)break e;for(;null===s.sibling;){if(null===s.return||s.return===o)break e;s=s.return}s.sibling.return=s.return,s=s.sibling}a&=1}if(G(Zn,a),1&o.mode)switch(u){case\"forwards\":for(i=o.child,u=null;null!==i;)null!==(s=i.alternate)&&null===Ch(s)&&(u=i),i=i.sibling;null===(i=u)?(u=o.child,o.child=null):(u=i.sibling,i.sibling=null),wj(o,!1,u,i,_);break;case\"backwards\":for(i=null,u=o.child,o.child=null;null!==u;){if(null!==(s=u.alternate)&&null===Ch(s)){o.child=u;break}s=u.sibling,u.sibling=i,i=u,u=s}wj(o,!0,i,null,_);break;case\"together\":wj(o,!1,null,null,void 0);break;default:o.memoizedState=null}else o.memoizedState=null;return o.child}function ij(s,o){!(1&o.mode)&&null!==s&&(s.alternate=null,o.alternate=null,o.flags|=2)}function Zi(s,o,i){if(null!==s&&(o.dependencies=s.dependencies),Ws|=o.lanes,!(i&o.childLanes))return null;if(null!==s&&o.child!==s.child)throw Error(p(153));if(null!==o.child){for(i=Pg(s=o.child,s.pendingProps),o.child=i,i.return=o;null!==s.sibling;)s=s.sibling,(i=i.sibling=Pg(s,s.pendingProps)).return=o;i.sibling=null}return o.child}function Dj(s,o){if(!Fn)switch(s.tailMode){case\"hidden\":o=s.tail;for(var i=null;null!==o;)null!==o.alternate&&(i=o),o=o.sibling;null===i?s.tail=null:i.sibling=null;break;case\"collapsed\":i=s.tail;for(var a=null;null!==i;)null!==i.alternate&&(a=i),i=i.sibling;null===a?o||null===s.tail?s.tail=null:s.tail.sibling=null:a.sibling=null}}function S(s){var o=null!==s.alternate&&s.alternate.child===s.child,i=0,a=0;if(o)for(var u=s.child;null!==u;)i|=u.lanes|u.childLanes,a|=14680064&u.subtreeFlags,a|=14680064&u.flags,u.return=s,u=u.sibling;else for(u=s.child;null!==u;)i|=u.lanes|u.childLanes,a|=u.subtreeFlags,a|=u.flags,u.return=s,u=u.sibling;return s.subtreeFlags|=a,s.childLanes=i,o}function Ej(s,o,i){var a=o.pendingProps;switch(wg(o),o.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return S(o),null;case 1:case 17:return Zf(o.type)&&$f(),S(o),null;case 3:return a=o.stateNode,zh(),E(En),E(Sn),Eh(),a.pendingContext&&(a.context=a.pendingContext,a.pendingContext=null),null!==s&&null!==s.child||(Gg(o)?o.flags|=4:null===s||s.memoizedState.isDehydrated&&!(256&o.flags)||(o.flags|=1024,null!==Bn&&(Fj(Bn),Bn=null))),Ss(s,o),S(o),null;case 5:Bh(o);var u=xh(Qn.current);if(i=o.type,null!==s&&null!=o.stateNode)Es(s,o,i,a,u),s.ref!==o.ref&&(o.flags|=512,o.flags|=2097152);else{if(!a){if(null===o.stateNode)throw Error(p(166));return S(o),null}if(s=xh(Yn.current),Gg(o)){a=o.stateNode,i=o.type;var _=o.memoizedProps;switch(a[hn]=o,a[dn]=_,s=!!(1&o.mode),i){case\"dialog\":D(\"cancel\",a),D(\"close\",a);break;case\"iframe\":case\"object\":case\"embed\":D(\"load\",a);break;case\"video\":case\"audio\":for(u=0;u<\\/script>\",s=s.removeChild(s.firstChild)):\"string\"==typeof a.is?s=x.createElement(i,{is:a.is}):(s=x.createElement(i),\"select\"===i&&(x=s,a.multiple?x.multiple=!0:a.size&&(x.size=a.size))):s=x.createElementNS(s,i),s[hn]=o,s[dn]=a,_s(s,o,!1,!1),o.stateNode=s;e:{switch(x=vb(i,a),i){case\"dialog\":D(\"cancel\",s),D(\"close\",s),u=a;break;case\"iframe\":case\"object\":case\"embed\":D(\"load\",s),u=a;break;case\"video\":case\"audio\":for(u=0;uXs&&(o.flags|=128,a=!0,Dj(_,!1),o.lanes=4194304)}else{if(!a)if(null!==(s=Ch(x))){if(o.flags|=128,a=!0,null!==(i=s.updateQueue)&&(o.updateQueue=i,o.flags|=4),Dj(_,!0),null===_.tail&&\"hidden\"===_.tailMode&&!x.alternate&&!Fn)return S(o),null}else 2*ht()-_.renderingStartTime>Xs&&1073741824!==i&&(o.flags|=128,a=!0,Dj(_,!1),o.lanes=4194304);_.isBackwards?(x.sibling=o.child,o.child=x):(null!==(i=_.last)?i.sibling=x:o.child=x,_.last=x)}return null!==_.tail?(o=_.tail,_.rendering=o,_.tail=o.sibling,_.renderingStartTime=ht(),o.sibling=null,i=Zn.current,G(Zn,a?1&i|2:1&i),o):(S(o),null);case 22:case 23:return Hj(),a=null!==o.memoizedState,null!==s&&null!==s.memoizedState!==a&&(o.flags|=8192),a&&1&o.mode?!!(1073741824&qs)&&(S(o),6&o.subtreeFlags&&(o.flags|=8192)):S(o),null;case 24:case 25:return null}throw Error(p(156,o.tag))}function Ij(s,o){switch(wg(o),o.tag){case 1:return Zf(o.type)&&$f(),65536&(s=o.flags)?(o.flags=-65537&s|128,o):null;case 3:return zh(),E(En),E(Sn),Eh(),65536&(s=o.flags)&&!(128&s)?(o.flags=-65537&s|128,o):null;case 5:return Bh(o),null;case 13:if(E(Zn),null!==(s=o.memoizedState)&&null!==s.dehydrated){if(null===o.alternate)throw Error(p(340));Ig()}return 65536&(s=o.flags)?(o.flags=-65537&s|128,o):null;case 19:return E(Zn),null;case 4:return zh(),null;case 10:return ah(o.type._context),null;case 22:case 23:return Hj(),null;default:return null}}_s=function(s,o){for(var i=o.child;null!==i;){if(5===i.tag||6===i.tag)s.appendChild(i.stateNode);else if(4!==i.tag&&null!==i.child){i.child.return=i,i=i.child;continue}if(i===o)break;for(;null===i.sibling;){if(null===i.return||i.return===o)return;i=i.return}i.sibling.return=i.return,i=i.sibling}},Ss=function(){},Es=function(s,o,i,a){var u=s.memoizedProps;if(u!==a){s=o.stateNode,xh(Yn.current);var _,x=null;switch(i){case\"input\":u=Ya(s,u),a=Ya(s,a),x=[];break;case\"select\":u=we({},u,{value:void 0}),a=we({},a,{value:void 0}),x=[];break;case\"textarea\":u=gb(s,u),a=gb(s,a),x=[];break;default:\"function\"!=typeof u.onClick&&\"function\"==typeof a.onClick&&(s.onclick=Bf)}for(L in ub(i,a),i=null,u)if(!a.hasOwnProperty(L)&&u.hasOwnProperty(L)&&null!=u[L])if(\"style\"===L){var C=u[L];for(_ in C)C.hasOwnProperty(_)&&(i||(i={}),i[_]=\"\")}else\"dangerouslySetInnerHTML\"!==L&&\"children\"!==L&&\"suppressContentEditableWarning\"!==L&&\"suppressHydrationWarning\"!==L&&\"autoFocus\"!==L&&(w.hasOwnProperty(L)?x||(x=[]):(x=x||[]).push(L,null));for(L in a){var j=a[L];if(C=null!=u?u[L]:void 0,a.hasOwnProperty(L)&&j!==C&&(null!=j||null!=C))if(\"style\"===L)if(C){for(_ in C)!C.hasOwnProperty(_)||j&&j.hasOwnProperty(_)||(i||(i={}),i[_]=\"\");for(_ in j)j.hasOwnProperty(_)&&C[_]!==j[_]&&(i||(i={}),i[_]=j[_])}else i||(x||(x=[]),x.push(L,i)),i=j;else\"dangerouslySetInnerHTML\"===L?(j=j?j.__html:void 0,C=C?C.__html:void 0,null!=j&&C!==j&&(x=x||[]).push(L,j)):\"children\"===L?\"string\"!=typeof j&&\"number\"!=typeof j||(x=x||[]).push(L,\"\"+j):\"suppressContentEditableWarning\"!==L&&\"suppressHydrationWarning\"!==L&&(w.hasOwnProperty(L)?(null!=j&&\"onScroll\"===L&&D(\"scroll\",s),x||C===j||(x=[])):(x=x||[]).push(L,j))}i&&(x=x||[]).push(\"style\",i);var L=x;(o.updateQueue=L)&&(o.flags|=4)}},ws=function(s,o,i,a){i!==a&&(o.flags|=4)};var ks=!1,Os=!1,As=\"function\"==typeof WeakSet?WeakSet:Set,Cs=null;function Lj(s,o){var i=s.ref;if(null!==i)if(\"function\"==typeof i)try{i(null)}catch(i){W(s,o,i)}else i.current=null}function Mj(s,o,i){try{i()}catch(i){W(s,o,i)}}var js=!1;function Pj(s,o,i){var a=o.updateQueue;if(null!==(a=null!==a?a.lastEffect:null)){var u=a=a.next;do{if((u.tag&s)===s){var _=u.destroy;u.destroy=void 0,void 0!==_&&Mj(o,i,_)}u=u.next}while(u!==a)}}function Qj(s,o){if(null!==(o=null!==(o=o.updateQueue)?o.lastEffect:null)){var i=o=o.next;do{if((i.tag&s)===s){var a=i.create;i.destroy=a()}i=i.next}while(i!==o)}}function Rj(s){var o=s.ref;if(null!==o){var i=s.stateNode;s.tag,s=i,\"function\"==typeof o?o(s):o.current=s}}function Sj(s){var o=s.alternate;null!==o&&(s.alternate=null,Sj(o)),s.child=null,s.deletions=null,s.sibling=null,5===s.tag&&(null!==(o=s.stateNode)&&(delete o[hn],delete o[dn],delete o[mn],delete o[gn],delete o[yn])),s.stateNode=null,s.return=null,s.dependencies=null,s.memoizedProps=null,s.memoizedState=null,s.pendingProps=null,s.stateNode=null,s.updateQueue=null}function Tj(s){return 5===s.tag||3===s.tag||4===s.tag}function Uj(s){e:for(;;){for(;null===s.sibling;){if(null===s.return||Tj(s.return))return null;s=s.return}for(s.sibling.return=s.return,s=s.sibling;5!==s.tag&&6!==s.tag&&18!==s.tag;){if(2&s.flags)continue e;if(null===s.child||4===s.tag)continue e;s.child.return=s,s=s.child}if(!(2&s.flags))return s.stateNode}}function Vj(s,o,i){var a=s.tag;if(5===a||6===a)s=s.stateNode,o?8===i.nodeType?i.parentNode.insertBefore(s,o):i.insertBefore(s,o):(8===i.nodeType?(o=i.parentNode).insertBefore(s,i):(o=i).appendChild(s),null!=(i=i._reactRootContainer)||null!==o.onclick||(o.onclick=Bf));else if(4!==a&&null!==(s=s.child))for(Vj(s,o,i),s=s.sibling;null!==s;)Vj(s,o,i),s=s.sibling}function Wj(s,o,i){var a=s.tag;if(5===a||6===a)s=s.stateNode,o?i.insertBefore(s,o):i.appendChild(s);else if(4!==a&&null!==(s=s.child))for(Wj(s,o,i),s=s.sibling;null!==s;)Wj(s,o,i),s=s.sibling}var Ps=null,Is=!1;function Yj(s,o,i){for(i=i.child;null!==i;)Zj(s,o,i),i=i.sibling}function Zj(s,o,i){if(St&&\"function\"==typeof St.onCommitFiberUnmount)try{St.onCommitFiberUnmount(_t,i)}catch(s){}switch(i.tag){case 5:Os||Lj(i,o);case 6:var a=Ps,u=Is;Ps=null,Yj(s,o,i),Is=u,null!==(Ps=a)&&(Is?(s=Ps,i=i.stateNode,8===s.nodeType?s.parentNode.removeChild(i):s.removeChild(i)):Ps.removeChild(i.stateNode));break;case 18:null!==Ps&&(Is?(s=Ps,i=i.stateNode,8===s.nodeType?Kf(s.parentNode,i):1===s.nodeType&&Kf(s,i),bd(s)):Kf(Ps,i.stateNode));break;case 4:a=Ps,u=Is,Ps=i.stateNode.containerInfo,Is=!0,Yj(s,o,i),Ps=a,Is=u;break;case 0:case 11:case 14:case 15:if(!Os&&(null!==(a=i.updateQueue)&&null!==(a=a.lastEffect))){u=a=a.next;do{var _=u,w=_.destroy;_=_.tag,void 0!==w&&(2&_||4&_)&&Mj(i,o,w),u=u.next}while(u!==a)}Yj(s,o,i);break;case 1:if(!Os&&(Lj(i,o),\"function\"==typeof(a=i.stateNode).componentWillUnmount))try{a.props=i.memoizedProps,a.state=i.memoizedState,a.componentWillUnmount()}catch(s){W(i,o,s)}Yj(s,o,i);break;case 21:Yj(s,o,i);break;case 22:1&i.mode?(Os=(a=Os)||null!==i.memoizedState,Yj(s,o,i),Os=a):Yj(s,o,i);break;default:Yj(s,o,i)}}function ak(s){var o=s.updateQueue;if(null!==o){s.updateQueue=null;var i=s.stateNode;null===i&&(i=s.stateNode=new As),o.forEach((function(o){var a=bk.bind(null,s,o);i.has(o)||(i.add(o),o.then(a,a))}))}}function ck(s,o){var i=o.deletions;if(null!==i)for(var a=0;au&&(u=w),a&=~_}if(a=u,10<(a=(120>(a=ht()-a)?120:480>a?480:1080>a?1080:1920>a?1920:3e3>a?3e3:4320>a?4320:1960*Ns(a/1960))-a)){s.timeoutHandle=an(Pk.bind(null,s,Gs,Qs),a);break}Pk(s,Gs,Qs);break;default:throw Error(p(329))}}}return Dk(s,ht()),s.callbackNode===i?Gk.bind(null,s):null}function Nk(s,o){var i=Ks;return s.current.memoizedState.isDehydrated&&(Kk(s,o).flags|=256),2!==(s=Ik(s,o))&&(o=Gs,Gs=i,null!==o&&Fj(o)),s}function Fj(s){null===Gs?Gs=s:Gs.push.apply(Gs,s)}function Ck(s,o){for(o&=~Hs,o&=~Js,s.suspendedLanes|=o,s.pingedLanes&=~o,s=s.expirationTimes;0s?16:s,null===no)var a=!1;else{if(s=no,no=null,so=0,6&Ls)throw Error(p(331));var u=Ls;for(Ls|=4,Cs=s.current;null!==Cs;){var _=Cs,w=_.child;if(16&Cs.flags){var x=_.deletions;if(null!==x){for(var C=0;Cht()-Ys?Kk(s,0):Hs|=i),Dk(s,o)}function Yk(s,o){0===o&&(1&s.mode?(o=Ot,!(130023424&(Ot<<=1))&&(Ot=4194304)):o=1);var i=R();null!==(s=ih(s,o))&&(Ac(s,o,i),Dk(s,i))}function uj(s){var o=s.memoizedState,i=0;null!==o&&(i=o.retryLane),Yk(s,i)}function bk(s,o){var i=0;switch(s.tag){case 13:var a=s.stateNode,u=s.memoizedState;null!==u&&(i=u.retryLane);break;case 19:a=s.stateNode;break;default:throw Error(p(314))}null!==a&&a.delete(o),Yk(s,i)}function Fk(s,o){return ct(s,o)}function $k(s,o,i,a){this.tag=s,this.key=i,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=o,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=a,this.subtreeFlags=this.flags=0,this.deletions=null,this.childLanes=this.lanes=0,this.alternate=null}function Bg(s,o,i,a){return new $k(s,o,i,a)}function aj(s){return!(!(s=s.prototype)||!s.isReactComponent)}function Pg(s,o){var i=s.alternate;return null===i?((i=Bg(s.tag,o,s.key,s.mode)).elementType=s.elementType,i.type=s.type,i.stateNode=s.stateNode,i.alternate=s,s.alternate=i):(i.pendingProps=o,i.type=s.type,i.flags=0,i.subtreeFlags=0,i.deletions=null),i.flags=14680064&s.flags,i.childLanes=s.childLanes,i.lanes=s.lanes,i.child=s.child,i.memoizedProps=s.memoizedProps,i.memoizedState=s.memoizedState,i.updateQueue=s.updateQueue,o=s.dependencies,i.dependencies=null===o?null:{lanes:o.lanes,firstContext:o.firstContext},i.sibling=s.sibling,i.index=s.index,i.ref=s.ref,i}function Rg(s,o,i,a,u,_){var w=2;if(a=s,\"function\"==typeof s)aj(s)&&(w=1);else if(\"string\"==typeof s)w=5;else e:switch(s){case Z:return Tg(i.children,u,_,o);case ee:w=8,u|=8;break;case ie:return(s=Bg(12,i,o,2|u)).elementType=ie,s.lanes=_,s;case pe:return(s=Bg(13,i,o,u)).elementType=pe,s.lanes=_,s;case de:return(s=Bg(19,i,o,u)).elementType=de,s.lanes=_,s;case be:return pj(i,u,_,o);default:if(\"object\"==typeof s&&null!==s)switch(s.$$typeof){case ae:w=10;break e;case ce:w=9;break e;case le:w=11;break e;case fe:w=14;break e;case ye:w=16,a=null;break e}throw Error(p(130,null==s?s:typeof s,\"\"))}return(o=Bg(w,i,o,u)).elementType=s,o.type=a,o.lanes=_,o}function Tg(s,o,i,a){return(s=Bg(7,s,a,o)).lanes=i,s}function pj(s,o,i,a){return(s=Bg(22,s,a,o)).elementType=be,s.lanes=i,s.stateNode={isHidden:!1},s}function Qg(s,o,i){return(s=Bg(6,s,null,o)).lanes=i,s}function Sg(s,o,i){return(o=Bg(4,null!==s.children?s.children:[],s.key,o)).lanes=i,o.stateNode={containerInfo:s.containerInfo,pendingChildren:null,implementation:s.implementation},o}function al(s,o,i,a,u){this.tag=o,this.containerInfo=s,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.callbackNode=this.pendingContext=this.context=null,this.callbackPriority=0,this.eventTimes=zc(0),this.expirationTimes=zc(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=zc(0),this.identifierPrefix=a,this.onRecoverableError=u,this.mutableSourceEagerHydrationData=null}function bl(s,o,i,a,u,_,w,x,C){return s=new al(s,o,i,x,C),1===o?(o=1,!0===_&&(o|=8)):o=0,_=Bg(3,null,null,o),s.current=_,_.stateNode=s,_.memoizedState={element:a,isDehydrated:i,cache:null,transitions:null,pendingSuspenseBoundaries:null},kh(_),s}function dl(s){if(!s)return _n;e:{if(Vb(s=s._reactInternals)!==s||1!==s.tag)throw Error(p(170));var o=s;do{switch(o.tag){case 3:o=o.stateNode.context;break e;case 1:if(Zf(o.type)){o=o.stateNode.__reactInternalMemoizedMergedChildContext;break e}}o=o.return}while(null!==o);throw Error(p(171))}if(1===s.tag){var i=s.type;if(Zf(i))return bg(s,i,o)}return o}function el(s,o,i,a,u,_,w,x,C){return(s=bl(i,a,!0,s,0,_,0,x,C)).context=dl(null),i=s.current,(_=mh(a=R(),u=yi(i))).callback=null!=o?o:null,nh(i,_,u),s.current.lanes=u,Ac(s,u,a),Dk(s,a),s}function fl(s,o,i,a){var u=o.current,_=R(),w=yi(u);return i=dl(i),null===o.context?o.context=i:o.pendingContext=i,(o=mh(_,w)).payload={element:s},null!==(a=void 0===a?null:a)&&(o.callback=a),null!==(s=nh(u,o,w))&&(gi(s,u,w,_),oh(s,u,w)),w}function gl(s){return(s=s.current).child?(s.child.tag,s.child.stateNode):null}function hl(s,o){if(null!==(s=s.memoizedState)&&null!==s.dehydrated){var i=s.retryLane;s.retryLane=0!==i&&i{\"use strict\";var i={}.propertyIsEnumerable,a=Object.getOwnPropertyDescriptor,u=a&&!i.call({1:2},1);o.f=u?function propertyIsEnumerable(s){var o=a(this,s);return!!o&&o.enumerable}:i},23007:s=>{s.exports=function copyArray(s,o){var i=-1,a=s.length;for(o||(o=Array(a));++i{\"use strict\";var a=i(88280),u=i(32567),_=Function.prototype;s.exports=function(s){var o=s.bind;return s===_||a(_,s)&&o===_.bind?u:o}},23045:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(49724),_=i(4993),w=i(74436).indexOf,x=i(38530),C=a([].push);s.exports=function(s,o){var i,a=_(s),j=0,L=[];for(i in a)!u(x,i)&&u(a,i)&&C(L,i);for(;o.length>j;)u(a,i=o[j++])&&(~w(L,i)||C(L,i));return L}},23546:(s,o,i)=>{var a=i(72552),u=i(40346),_=i(11331);s.exports=function isError(s){if(!u(s))return!1;var o=a(s);return\"[object Error]\"==o||\"[object DOMException]\"==o||\"string\"==typeof s.message&&\"string\"==typeof s.name&&!_(s)}},23805:s=>{s.exports=function isObject(s){var o=typeof s;return null!=s&&(\"object\"==o||\"function\"==o)}},23888:(s,o,i)=>{\"use strict\";var a=i(98828),u=i(75817);s.exports=!a((function(){var s=new Error(\"a\");return!(\"stack\"in s)||(Object.defineProperty(s,\"stack\",u(1,7)),7!==s.stack)}))},24107:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(90392),_=i(92861).Buffer,w=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],x=new Array(64);function Sha256(){this.init(),this._w=x,u.call(this,64,56)}function ch(s,o,i){return i^s&(o^i)}function maj(s,o,i){return s&o|i&(s|o)}function sigma0(s){return(s>>>2|s<<30)^(s>>>13|s<<19)^(s>>>22|s<<10)}function sigma1(s){return(s>>>6|s<<26)^(s>>>11|s<<21)^(s>>>25|s<<7)}function gamma0(s){return(s>>>7|s<<25)^(s>>>18|s<<14)^s>>>3}a(Sha256,u),Sha256.prototype.init=function(){return this._a=1779033703,this._b=3144134277,this._c=1013904242,this._d=2773480762,this._e=1359893119,this._f=2600822924,this._g=528734635,this._h=1541459225,this},Sha256.prototype._update=function(s){for(var o,i=this._w,a=0|this._a,u=0|this._b,_=0|this._c,x=0|this._d,C=0|this._e,j=0|this._f,L=0|this._g,B=0|this._h,$=0;$<16;++$)i[$]=s.readInt32BE(4*$);for(;$<64;++$)i[$]=0|(((o=i[$-2])>>>17|o<<15)^(o>>>19|o<<13)^o>>>10)+i[$-7]+gamma0(i[$-15])+i[$-16];for(var U=0;U<64;++U){var V=B+sigma1(C)+ch(C,j,L)+w[U]+i[U]|0,z=sigma0(a)+maj(a,u,_)|0;B=L,L=j,j=C,C=x+V|0,x=_,_=u,u=a,a=V+z|0}this._a=a+this._a|0,this._b=u+this._b|0,this._c=_+this._c|0,this._d=x+this._d|0,this._e=C+this._e|0,this._f=j+this._f|0,this._g=L+this._g|0,this._h=B+this._h|0},Sha256.prototype._hash=function(){var s=_.allocUnsafe(32);return s.writeInt32BE(this._a,0),s.writeInt32BE(this._b,4),s.writeInt32BE(this._c,8),s.writeInt32BE(this._d,12),s.writeInt32BE(this._e,16),s.writeInt32BE(this._f,20),s.writeInt32BE(this._g,24),s.writeInt32BE(this._h,28),s},s.exports=Sha256},24168:(s,o,i)=>{var a=i(91033),u=i(82819),_=i(9325);s.exports=function createPartial(s,o,i,w){var x=1&o,C=u(s);return function wrapper(){for(var o=-1,u=arguments.length,j=-1,L=w.length,B=Array(L+u),$=this&&this!==_&&this instanceof wrapper?C:s;++j{\"use strict\";var a=i(23045),u=i(80376).concat(\"length\",\"prototype\");o.f=Object.getOwnPropertyNames||function getOwnPropertyNames(s){return a(s,u)}},24647:(s,o,i)=>{var a=i(54552)({À:\"A\",Á:\"A\",Â:\"A\",Ã:\"A\",Ä:\"A\",Å:\"A\",à:\"a\",á:\"a\",â:\"a\",ã:\"a\",ä:\"a\",å:\"a\",Ç:\"C\",ç:\"c\",Ð:\"D\",ð:\"d\",È:\"E\",É:\"E\",Ê:\"E\",Ë:\"E\",è:\"e\",é:\"e\",ê:\"e\",ë:\"e\",Ì:\"I\",Í:\"I\",Î:\"I\",Ï:\"I\",ì:\"i\",í:\"i\",î:\"i\",ï:\"i\",Ñ:\"N\",ñ:\"n\",Ò:\"O\",Ó:\"O\",Ô:\"O\",Õ:\"O\",Ö:\"O\",Ø:\"O\",ò:\"o\",ó:\"o\",ô:\"o\",õ:\"o\",ö:\"o\",ø:\"o\",Ù:\"U\",Ú:\"U\",Û:\"U\",Ü:\"U\",ù:\"u\",ú:\"u\",û:\"u\",ü:\"u\",Ý:\"Y\",ý:\"y\",ÿ:\"y\",Æ:\"Ae\",æ:\"ae\",Þ:\"Th\",þ:\"th\",ß:\"ss\",Ā:\"A\",Ă:\"A\",Ą:\"A\",ā:\"a\",ă:\"a\",ą:\"a\",Ć:\"C\",Ĉ:\"C\",Ċ:\"C\",Č:\"C\",ć:\"c\",ĉ:\"c\",ċ:\"c\",č:\"c\",Ď:\"D\",Đ:\"D\",ď:\"d\",đ:\"d\",Ē:\"E\",Ĕ:\"E\",Ė:\"E\",Ę:\"E\",Ě:\"E\",ē:\"e\",ĕ:\"e\",ė:\"e\",ę:\"e\",ě:\"e\",Ĝ:\"G\",Ğ:\"G\",Ġ:\"G\",Ģ:\"G\",ĝ:\"g\",ğ:\"g\",ġ:\"g\",ģ:\"g\",Ĥ:\"H\",Ħ:\"H\",ĥ:\"h\",ħ:\"h\",Ĩ:\"I\",Ī:\"I\",Ĭ:\"I\",Į:\"I\",İ:\"I\",ĩ:\"i\",ī:\"i\",ĭ:\"i\",į:\"i\",ı:\"i\",Ĵ:\"J\",ĵ:\"j\",Ķ:\"K\",ķ:\"k\",ĸ:\"k\",Ĺ:\"L\",Ļ:\"L\",Ľ:\"L\",Ŀ:\"L\",Ł:\"L\",ĺ:\"l\",ļ:\"l\",ľ:\"l\",ŀ:\"l\",ł:\"l\",Ń:\"N\",Ņ:\"N\",Ň:\"N\",Ŋ:\"N\",ń:\"n\",ņ:\"n\",ň:\"n\",ŋ:\"n\",Ō:\"O\",Ŏ:\"O\",Ő:\"O\",ō:\"o\",ŏ:\"o\",ő:\"o\",Ŕ:\"R\",Ŗ:\"R\",Ř:\"R\",ŕ:\"r\",ŗ:\"r\",ř:\"r\",Ś:\"S\",Ŝ:\"S\",Ş:\"S\",Š:\"S\",ś:\"s\",ŝ:\"s\",ş:\"s\",š:\"s\",Ţ:\"T\",Ť:\"T\",Ŧ:\"T\",ţ:\"t\",ť:\"t\",ŧ:\"t\",Ũ:\"U\",Ū:\"U\",Ŭ:\"U\",Ů:\"U\",Ű:\"U\",Ų:\"U\",ũ:\"u\",ū:\"u\",ŭ:\"u\",ů:\"u\",ű:\"u\",ų:\"u\",Ŵ:\"W\",ŵ:\"w\",Ŷ:\"Y\",ŷ:\"y\",Ÿ:\"Y\",Ź:\"Z\",Ż:\"Z\",Ž:\"Z\",ź:\"z\",ż:\"z\",ž:\"z\",IJ:\"IJ\",ij:\"ij\",Œ:\"Oe\",œ:\"oe\",ʼn:\"'n\",ſ:\"s\"});s.exports=a},24677:(s,o,i)=>{\"use strict\";var a=i(81214).DebounceInput;a.DebounceInput=a,s.exports=a},24713:(s,o,i)=>{var a=i(2523),u=i(15389),_=i(61489),w=Math.max;s.exports=function findIndex(s,o,i){var x=null==s?0:s.length;if(!x)return-1;var C=null==i?0:_(i);return C<0&&(C=w(x+C,0)),a(s,u(o,3),C)}},24739:(s,o,i)=>{var a=i(26025);s.exports=function listCacheGet(s){var o=this.__data__,i=a(o,s);return i<0?void 0:o[i][1]}},24823:(s,o,i)=>{\"use strict\";var a=i(28311),u=i(13930),_=i(36624),w=i(4640),x=i(37812),C=i(20575),j=i(88280),L=i(10300),B=i(73448),$=i(40154),U=TypeError,Result=function(s,o){this.stopped=s,this.result=o},V=Result.prototype;s.exports=function(s,o,i){var z,Y,Z,ee,ie,ae,ce,le=i&&i.that,pe=!(!i||!i.AS_ENTRIES),de=!(!i||!i.IS_RECORD),fe=!(!i||!i.IS_ITERATOR),ye=!(!i||!i.INTERRUPTED),be=a(o,le),stop=function(s){return z&&$(z,\"normal\",s),new Result(!0,s)},callFn=function(s){return pe?(_(s),ye?be(s[0],s[1],stop):be(s[0],s[1])):ye?be(s,stop):be(s)};if(de)z=s.iterator;else if(fe)z=s;else{if(!(Y=B(s)))throw new U(w(s)+\" is not iterable\");if(x(Y)){for(Z=0,ee=C(s);ee>Z;Z++)if((ie=callFn(s[Z]))&&j(V,ie))return ie;return new Result(!1)}z=L(s,Y)}for(ae=de?s.next:z.next;!(ce=u(ae,z)).done;){try{ie=callFn(ce.value)}catch(s){$(z,\"throw\",s)}if(\"object\"==typeof ie&&ie&&j(V,ie))return ie}return new Result(!1)}},25160:s=>{s.exports=function baseSlice(s,o,i){var a=-1,u=s.length;o<0&&(o=-o>u?0:u+o),(i=i>u?u:i)<0&&(i+=u),u=o>i?0:i-o>>>0,o>>>=0;for(var _=Array(u);++a{\"use strict\";function _typeof(s){return _typeof=\"function\"==typeof Symbol&&\"symbol\"==typeof Symbol.iterator?function(s){return typeof s}:function(s){return s&&\"function\"==typeof Symbol&&s.constructor===Symbol&&s!==Symbol.prototype?\"symbol\":typeof s},_typeof(s)}Object.defineProperty(o,\"__esModule\",{value:!0}),o.CopyToClipboard=void 0;var a=_interopRequireDefault(i(96540)),u=_interopRequireDefault(i(17965)),_=[\"text\",\"onCopy\",\"options\",\"children\"];function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}function ownKeys(s,o){var i=Object.keys(s);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(s);o&&(a=a.filter((function(o){return Object.getOwnPropertyDescriptor(s,o).enumerable}))),i.push.apply(i,a)}return i}function _objectSpread(s){for(var o=1;o=0||(u[i]=s[i]);return u}(s,o);if(Object.getOwnPropertySymbols){var _=Object.getOwnPropertySymbols(s);for(a=0;a<_.length;a++)i=_[a],o.indexOf(i)>=0||Object.prototype.propertyIsEnumerable.call(s,i)&&(u[i]=s[i])}return u}function _defineProperties(s,o){for(var i=0;i{\"use strict\";var a=i(65606),u=Object.keys||function(s){var o=[];for(var i in s)o.push(i);return o};s.exports=Duplex;var _=i(45412),w=i(16708);i(56698)(Duplex,_);for(var x=u(w.prototype),C=0;C{\"use strict\";var a=i(85582),u=i(62250),_=i(88280),w=i(51175),x=Object;s.exports=w?function(s){return\"symbol\"==typeof s}:function(s){var o=a(\"Symbol\");return u(o)&&_(o.prototype,x(s))}},25767:(s,o,i)=>{\"use strict\";var a=i(82682),u=i(39209),_=i(10487),w=i(36556),x=i(75795),C=w(\"Object.prototype.toString\"),j=i(49092)(),L=\"undefined\"==typeof globalThis?i.g:globalThis,B=u(),$=w(\"String.prototype.slice\"),U=Object.getPrototypeOf,V=w(\"Array.prototype.indexOf\",!0)||function indexOf(s,o){for(var i=0;i-1?o:\"Object\"===o&&function tryAllSlices(s){var o=!1;return a(z,(function(i,a){if(!o)try{i(s),o=$(a,1)}catch(s){}})),o}(s)}return x?function tryAllTypedArrays(s){var o=!1;return a(z,(function(i,a){if(!o)try{\"$\"+i(s)===a&&(o=$(a,1))}catch(s){}})),o}(s):null}},25911:(s,o,i)=>{var a=i(38859),u=i(14248),_=i(19219);s.exports=function equalArrays(s,o,i,w,x,C){var j=1&i,L=s.length,B=o.length;if(L!=B&&!(j&&B>L))return!1;var $=C.get(s),U=C.get(o);if($&&U)return $==o&&U==s;var V=-1,z=!0,Y=2&i?new a:void 0;for(C.set(s,o),C.set(o,s);++V{var a=i(75288);s.exports=function assocIndexOf(s,o){for(var i=s.length;i--;)if(a(s[i][0],o))return i;return-1}},26311:s=>{!function(){var o;function format(s){for(var o,i,a,u,_=1,w=[].slice.call(arguments),x=0,C=s.length,j=\"\",L=!1,B=!1,nextArg=function(){return w[_++]},slurpNumber=function(){for(var i=\"\";/\\d/.test(s[x]);)i+=s[x++],o=s[x];return i.length>0?parseInt(i):null};x{s.exports=function powershell(s){const o={$pattern:/-?[A-z\\.\\-]+\\b/,keyword:\"if else foreach return do while until elseif begin for trap data dynamicparam end break throw param continue finally in switch exit filter try process catch hidden static parameter\",built_in:\"ac asnp cat cd CFS chdir clc clear clhy cli clp cls clv cnsn compare copy cp cpi cpp curl cvpa dbp del diff dir dnsn ebp echo|0 epal epcsv epsn erase etsn exsn fc fhx fl ft fw gal gbp gc gcb gci gcm gcs gdr gerr ghy gi gin gjb gl gm gmo gp gps gpv group gsn gsnp gsv gtz gu gv gwmi h history icm iex ihy ii ipal ipcsv ipmo ipsn irm ise iwmi iwr kill lp ls man md measure mi mount move mp mv nal ndr ni nmo npssc nsn nv ogv oh popd ps pushd pwd r rbp rcjb rcsn rd rdr ren ri rjb rm rmdir rmo rni rnp rp rsn rsnp rujb rv rvpa rwmi sajb sal saps sasv sbp sc scb select set shcm si sl sleep sls sort sp spjb spps spsv start stz sujb sv swmi tee trcm type wget where wjb write\"},i={begin:\"`[\\\\s\\\\S]\",relevance:0},a={className:\"variable\",variants:[{begin:/\\$\\B/},{className:\"keyword\",begin:/\\$this/},{begin:/\\$[\\w\\d][\\w\\d_:]*/}]},u={className:\"string\",variants:[{begin:/\"/,end:/\"/},{begin:/@\"/,end:/^\"@/}],contains:[i,a,{className:\"variable\",begin:/\\$[A-z]/,end:/[^A-z]/}]},_={className:\"string\",variants:[{begin:/'/,end:/'/},{begin:/@'/,end:/^'@/}]},w=s.inherit(s.COMMENT(null,null),{variants:[{begin:/#/,end:/$/},{begin:/<#/,end:/#>/}],contains:[{className:\"doctag\",variants:[{begin:/\\.(synopsis|description|example|inputs|outputs|notes|link|component|role|functionality)/},{begin:/\\.(parameter|forwardhelptargetname|forwardhelpcategory|remotehelprunspace|externalhelp)\\s+\\S+/}]}]}),x={className:\"built_in\",variants:[{begin:\"(\".concat(\"Add|Clear|Close|Copy|Enter|Exit|Find|Format|Get|Hide|Join|Lock|Move|New|Open|Optimize|Pop|Push|Redo|Remove|Rename|Reset|Resize|Search|Select|Set|Show|Skip|Split|Step|Switch|Undo|Unlock|Watch|Backup|Checkpoint|Compare|Compress|Convert|ConvertFrom|ConvertTo|Dismount|Edit|Expand|Export|Group|Import|Initialize|Limit|Merge|Mount|Out|Publish|Restore|Save|Sync|Unpublish|Update|Approve|Assert|Build|Complete|Confirm|Deny|Deploy|Disable|Enable|Install|Invoke|Register|Request|Restart|Resume|Start|Stop|Submit|Suspend|Uninstall|Unregister|Wait|Debug|Measure|Ping|Repair|Resolve|Test|Trace|Connect|Disconnect|Read|Receive|Send|Write|Block|Grant|Protect|Revoke|Unblock|Unprotect|Use|ForEach|Sort|Tee|Where\",\")+(-)[\\\\w\\\\d]+\")}]},C={className:\"class\",beginKeywords:\"class enum\",end:/\\s*[{]/,excludeEnd:!0,relevance:0,contains:[s.TITLE_MODE]},j={className:\"function\",begin:/function\\s+/,end:/\\s*\\{|$/,excludeEnd:!0,returnBegin:!0,relevance:0,contains:[{begin:\"function\",relevance:0,className:\"keyword\"},{className:\"title\",begin:/\\w[\\w\\d]*((-)[\\w\\d]+)*/,relevance:0},{begin:/\\(/,end:/\\)/,className:\"params\",relevance:0,contains:[a]}]},L={begin:/using\\s/,end:/$/,returnBegin:!0,contains:[u,_,{className:\"keyword\",begin:/(using|assembly|command|module|namespace|type)/}]},B={variants:[{className:\"operator\",begin:\"(\".concat(\"-and|-as|-band|-bnot|-bor|-bxor|-casesensitive|-ccontains|-ceq|-cge|-cgt|-cle|-clike|-clt|-cmatch|-cne|-cnotcontains|-cnotlike|-cnotmatch|-contains|-creplace|-csplit|-eq|-exact|-f|-file|-ge|-gt|-icontains|-ieq|-ige|-igt|-ile|-ilike|-ilt|-imatch|-in|-ine|-inotcontains|-inotlike|-inotmatch|-ireplace|-is|-isnot|-isplit|-join|-le|-like|-lt|-match|-ne|-not|-notcontains|-notin|-notlike|-notmatch|-or|-regex|-replace|-shl|-shr|-split|-wildcard|-xor\",\")\\\\b\")},{className:\"literal\",begin:/(-)[\\w\\d]+/,relevance:0}]},$={className:\"function\",begin:/\\[.*\\]\\s*[\\w]+[ ]??\\(/,end:/$/,returnBegin:!0,relevance:0,contains:[{className:\"keyword\",begin:\"(\".concat(o.keyword.toString().replace(/\\s/g,\"|\"),\")\\\\b\"),endsParent:!0,relevance:0},s.inherit(s.TITLE_MODE,{endsParent:!0})]},U=[$,w,i,s.NUMBER_MODE,u,_,x,a,{className:\"literal\",begin:/\\$(null|true|false)\\b/},{className:\"selector-tag\",begin:/@\\B/,relevance:0}],V={begin:/\\[/,end:/\\]/,excludeBegin:!0,excludeEnd:!0,relevance:0,contains:[].concat(\"self\",U,{begin:\"(\"+[\"string\",\"char\",\"byte\",\"int\",\"long\",\"bool\",\"decimal\",\"single\",\"double\",\"DateTime\",\"xml\",\"array\",\"hashtable\",\"void\"].join(\"|\")+\")\",className:\"built_in\",relevance:0},{className:\"type\",begin:/[\\.\\w\\d]+/,relevance:0})};return $.contains.unshift(V),{name:\"PowerShell\",aliases:[\"ps\",\"ps1\"],case_insensitive:!0,keywords:o,contains:U.concat(C,j,L,B,V)}}},26657:(s,o,i)=>{\"use strict\";var a=i(75208),u=function isClosingTag(s){return/<\\/+[^>]+>/.test(s)},_=function isSelfClosingTag(s){return/<[^>]+\\/>/.test(s)};function getType(s){return u(s)?\"ClosingTag\":function isOpeningTag(s){return function isTag(s){return/<[^>!]+>/.test(s)}(s)&&!u(s)&&!_(s)}(s)?\"OpeningTag\":_(s)?\"SelfClosingTag\":\"Text\"}s.exports=function(s){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},i=o.indentor,u=o.textNodesOnSameLine,_=0,w=[];i=i||\" \";var x=function lexer(s){return function splitOnTags(s){return s.split(/(<\\/?[^>]+>)/g).filter((function(s){return\"\"!==s.trim()}))}(s).map((function(s){return{value:s,type:getType(s)}}))}(s).map((function(s,o,x){var C=s.value,j=s.type;\"ClosingTag\"===j&&_--;var L=a(i,_),B=L+C;if(\"OpeningTag\"===j&&_++,u){var $=x[o-1],U=x[o-2];\"ClosingTag\"===j&&\"Text\"===$.type&&\"OpeningTag\"===U.type&&(B=\"\"+L+U.value+$.value+C,w.push(o-2,o-1))}return B}));return w.forEach((function(s){return x[s]=null})),x.filter((function(s){return!!s})).join(\"\\n\")}},26710:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(24107),_=i(90392),w=i(92861).Buffer,x=new Array(64);function Sha224(){this.init(),this._w=x,_.call(this,64,56)}a(Sha224,u),Sha224.prototype.init=function(){return this._a=3238371032,this._b=914150663,this._c=812702999,this._d=4144912697,this._e=4290775857,this._f=1750603025,this._g=1694076839,this._h=3204075428,this},Sha224.prototype._hash=function(){var s=w.allocUnsafe(28);return s.writeInt32BE(this._a,0),s.writeInt32BE(this._b,4),s.writeInt32BE(this._c,8),s.writeInt32BE(this._d,12),s.writeInt32BE(this._e,16),s.writeInt32BE(this._f,20),s.writeInt32BE(this._g,24),s},s.exports=Sha224},27096:(s,o,i)=>{const a=i(87586),u=i(6205),_=i(10023),w=i(8048);s.exports=s=>{var o,i,x=0,C={type:u.ROOT,stack:[]},j=C,L=C.stack,B=[],repeatErr=o=>{a.error(s,\"Nothing to repeat at column \"+(o-1))},$=a.strToChars(s);for(o=$.length;x{s.exports=function baseUnary(s){return function(o){return s(o)}}},27374:(s,o)=>{\"use strict\";Object.defineProperty(o,\"__esModule\",{value:!0}),o.default=function(s,o,i){if(void 0===s)throw new Error('Reducer \"'+o+'\" returned undefined when handling \"'+i.type+'\" action. To ignore an action, you must explicitly return the previous state.')},s.exports=o.default},27534:(s,o,i)=>{var a=i(72552),u=i(40346);s.exports=function baseIsArguments(s){return u(s)&&\"[object Arguments]\"==a(s)}},27816:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(90392),_=i(92861).Buffer,w=[1518500249,1859775393,-1894007588,-899497514],x=new Array(80);function Sha(){this.init(),this._w=x,u.call(this,64,56)}function rotl30(s){return s<<30|s>>>2}function ft(s,o,i,a){return 0===s?o&i|~o&a:2===s?o&i|o&a|i&a:o^i^a}a(Sha,u),Sha.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this},Sha.prototype._update=function(s){for(var o,i=this._w,a=0|this._a,u=0|this._b,_=0|this._c,x=0|this._d,C=0|this._e,j=0;j<16;++j)i[j]=s.readInt32BE(4*j);for(;j<80;++j)i[j]=i[j-3]^i[j-8]^i[j-14]^i[j-16];for(var L=0;L<80;++L){var B=~~(L/20),$=0|((o=a)<<5|o>>>27)+ft(B,u,_,x)+C+i[L]+w[B];C=x,x=_,_=rotl30(u),u=a,a=$}this._a=a+this._a|0,this._b=u+this._b|0,this._c=_+this._c|0,this._d=x+this._d|0,this._e=C+this._e|0},Sha.prototype._hash=function(){var s=_.allocUnsafe(20);return s.writeInt32BE(0|this._a,0),s.writeInt32BE(0|this._b,4),s.writeInt32BE(0|this._c,8),s.writeInt32BE(0|this._d,12),s.writeInt32BE(0|this._e,16),s},s.exports=Sha},28077:s=>{s.exports=function baseHasIn(s,o){return null!=s&&o in Object(s)}},28303:(s,o,i)=>{var a=i(56110)(i(9325),\"WeakMap\");s.exports=a},28311:(s,o,i)=>{\"use strict\";var a=i(92361),u=i(82159),_=i(41505),w=a(a.bind);s.exports=function(s,o){return u(s),void 0===o?s:_?w(s,o):function(){return s.apply(o,arguments)}}},28586:(s,o,i)=>{var a=i(56449),u=i(44394),_=/\\.|\\[(?:[^[\\]]*|([\"'])(?:(?!\\1)[^\\\\]|\\\\.)*?\\1)\\]/,w=/^\\w*$/;s.exports=function isKey(s,o){if(a(s))return!1;var i=typeof s;return!(\"number\"!=i&&\"symbol\"!=i&&\"boolean\"!=i&&null!=s&&!u(s))||(w.test(s)||!_.test(s)||null!=o&&s in Object(o))}},28754:(s,o,i)=>{var a=i(25160);s.exports=function castSlice(s,o,i){var u=s.length;return i=void 0===i?u:i,!o&&i>=u?s:a(s,o,i)}},28879:(s,o,i)=>{var a=i(74335)(Object.getPrototypeOf,Object);s.exports=a},29172:(s,o,i)=>{var a=i(5861),u=i(40346);s.exports=function baseIsMap(s){return u(s)&&\"[object Map]\"==a(s)}},29367:(s,o,i)=>{\"use strict\";var a=i(82159),u=i(87136);s.exports=function(s,o){var i=s[o];return u(i)?void 0:a(i)}},29538:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(1907),_=i(13930),w=i(98828),x=i(2875),C=i(87170),j=i(22574),L=i(39298),B=i(16946),$=Object.assign,U=Object.defineProperty,V=u([].concat);s.exports=!$||w((function(){if(a&&1!==$({b:1},$(U({},\"a\",{enumerable:!0,get:function(){U(this,\"b\",{value:3,enumerable:!1})}}),{b:2})).b)return!0;var s={},o={},i=Symbol(\"assign detection\"),u=\"abcdefghijklmnopqrst\";return s[i]=7,u.split(\"\").forEach((function(s){o[s]=s})),7!==$({},s)[i]||x($({},o)).join(\"\")!==u}))?function assign(s,o){for(var i=L(s),u=arguments.length,w=1,$=C.f,U=j.f;u>w;)for(var z,Y=B(arguments[w++]),Z=$?V(x(Y),$(Y)):x(Y),ee=Z.length,ie=0;ee>ie;)z=Z[ie++],a&&!_(U,Y,z)||(i[z]=Y[z]);return i}:$},29817:s=>{s.exports=function stackHas(s){return this.__data__.has(s)}},29844:(s,o)=>{\"use strict\";function f(s,o){var i=s.length;s.push(o);e:for(;0>>1,u=s[a];if(!(0>>1;a<_;){var w=2*(a+1)-1,x=s[w],C=w+1,j=s[C];if(0>g(x,i))Cg(j,x)?(s[a]=j,s[C]=i,a=C):(s[a]=x,s[w]=i,a=w);else{if(!(Cg(j,i)))break e;s[a]=j,s[C]=i,a=C}}}return o}function g(s,o){var i=s.sortIndex-o.sortIndex;return 0!==i?i:s.id-o.id}if(\"object\"==typeof performance&&\"function\"==typeof performance.now){var i=performance;o.unstable_now=function(){return i.now()}}else{var a=Date,u=a.now();o.unstable_now=function(){return a.now()-u}}var _=[],w=[],x=1,C=null,j=3,L=!1,B=!1,$=!1,U=\"function\"==typeof setTimeout?setTimeout:null,V=\"function\"==typeof clearTimeout?clearTimeout:null,z=\"undefined\"!=typeof setImmediate?setImmediate:null;function G(s){for(var o=h(w);null!==o;){if(null===o.callback)k(w);else{if(!(o.startTime<=s))break;k(w),o.sortIndex=o.expirationTime,f(_,o)}o=h(w)}}function H(s){if($=!1,G(s),!B)if(null!==h(_))B=!0,I(J);else{var o=h(w);null!==o&&K(H,o.startTime-s)}}function J(s,i){B=!1,$&&($=!1,V(ie),ie=-1),L=!0;var a=j;try{for(G(i),C=h(_);null!==C&&(!(C.expirationTime>i)||s&&!M());){var u=C.callback;if(\"function\"==typeof u){C.callback=null,j=C.priorityLevel;var x=u(C.expirationTime<=i);i=o.unstable_now(),\"function\"==typeof x?C.callback=x:C===h(_)&&k(_),G(i)}else k(_);C=h(_)}if(null!==C)var U=!0;else{var z=h(w);null!==z&&K(H,z.startTime-i),U=!1}return U}finally{C=null,j=a,L=!1}}\"undefined\"!=typeof navigator&&void 0!==navigator.scheduling&&void 0!==navigator.scheduling.isInputPending&&navigator.scheduling.isInputPending.bind(navigator.scheduling);var Y,Z=!1,ee=null,ie=-1,ae=5,ce=-1;function M(){return!(o.unstable_now()-ces||125u?(s.sortIndex=a,f(w,s),null===h(_)&&s===h(w)&&($?(V(ie),ie=-1):$=!0,K(H,a-u))):(s.sortIndex=C,f(_,s),B||L||(B=!0,I(J))),s},o.unstable_shouldYield=M,o.unstable_wrapCallback=function(s){var o=j;return function(){var i=j;j=o;try{return s.apply(this,arguments)}finally{j=i}}}},30041:(s,o,i)=>{\"use strict\";var a=i(30655),u=i(58068),_=i(69675),w=i(75795);s.exports=function defineDataProperty(s,o,i){if(!s||\"object\"!=typeof s&&\"function\"!=typeof s)throw new _(\"`obj` must be an object or a function`\");if(\"string\"!=typeof o&&\"symbol\"!=typeof o)throw new _(\"`property` must be a string or a symbol`\");if(arguments.length>3&&\"boolean\"!=typeof arguments[3]&&null!==arguments[3])throw new _(\"`nonEnumerable`, if provided, must be a boolean or null\");if(arguments.length>4&&\"boolean\"!=typeof arguments[4]&&null!==arguments[4])throw new _(\"`nonWritable`, if provided, must be a boolean or null\");if(arguments.length>5&&\"boolean\"!=typeof arguments[5]&&null!==arguments[5])throw new _(\"`nonConfigurable`, if provided, must be a boolean or null\");if(arguments.length>6&&\"boolean\"!=typeof arguments[6])throw new _(\"`loose`, if provided, must be a boolean\");var x=arguments.length>3?arguments[3]:null,C=arguments.length>4?arguments[4]:null,j=arguments.length>5?arguments[5]:null,L=arguments.length>6&&arguments[6],B=!!w&&w(s,o);if(a)a(s,o,{configurable:null===j&&B?B.configurable:!j,enumerable:null===x&&B?B.enumerable:!x,value:i,writable:null===C&&B?B.writable:!C});else{if(!L&&(x||C||j))throw new u(\"This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.\");s[o]=i}}},30294:s=>{s.exports=function isLength(s){return\"number\"==typeof s&&s>-1&&s%1==0&&s<=9007199254740991}},30361:s=>{var o=/^(?:0|[1-9]\\d*)$/;s.exports=function isIndex(s,i){var a=typeof s;return!!(i=null==i?9007199254740991:i)&&(\"number\"==a||\"symbol\"!=a&&o.test(s))&&s>-1&&s%1==0&&s{\"use strict\";var a=i(30655),u=function hasPropertyDescriptors(){return!!a};u.hasArrayLengthDefineBug=function hasArrayLengthDefineBug(){if(!a)return null;try{return 1!==a([],\"length\",{value:1}).length}catch(s){return!0}},s.exports=u},30641:(s,o,i)=>{var a=i(86649),u=i(95950);s.exports=function baseForOwn(s,o){return s&&a(s,o,u)}},30655:s=>{\"use strict\";var o=Object.defineProperty||!1;if(o)try{o({},\"a\",{value:1})}catch(s){o=!1}s.exports=o},30756:(s,o,i)=>{var a=i(23805);s.exports=function isStrictComparable(s){return s==s&&!a(s)}},30980:(s,o,i)=>{var a=i(39344),u=i(94033);function LazyWrapper(s){this.__wrapped__=s,this.__actions__=[],this.__dir__=1,this.__filtered__=!1,this.__iteratees__=[],this.__takeCount__=4294967295,this.__views__=[]}LazyWrapper.prototype=a(u.prototype),LazyWrapper.prototype.constructor=LazyWrapper,s.exports=LazyWrapper},31175:(s,o,i)=>{var a=i(26025);s.exports=function listCacheSet(s,o){var i=this.__data__,u=a(i,s);return u<0?(++this.size,i.push([s,o])):i[u][1]=o,this}},31380:s=>{s.exports=function setCacheAdd(s){return this.__data__.set(s,\"__lodash_hash_undefined__\"),this}},31499:s=>{var o={\"&\":\"&\",'\"':\""\",\"'\":\"'\",\"<\":\"<\",\">\":\">\"};s.exports=function escapeForXML(s){return s&&s.replace?s.replace(/([&\"<>'])/g,(function(s,i){return o[i]})):s}},31769:(s,o,i)=>{var a=i(56449),u=i(28586),_=i(61802),w=i(13222);s.exports=function castPath(s,o){return a(s)?s:u(s,o)?[s]:_(w(s))}},31800:s=>{var o=/\\s/;s.exports=function trimmedEndIndex(s){for(var i=s.length;i--&&o.test(s.charAt(i)););return i}},32096:(s,o,i)=>{\"use strict\";var a=i(90160);s.exports=function(s,o){return void 0===s?arguments.length<2?\"\":o:a(s)}},32567:(s,o,i)=>{\"use strict\";i(79307);var a=i(61747);s.exports=a(\"Function\",\"bind\")},32629:(s,o,i)=>{var a=i(9999);s.exports=function clone(s){return a(s,4)}},32804:(s,o,i)=>{var a=i(56110)(i(9325),\"Promise\");s.exports=a},32827:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(82890),_=i(90392),w=i(92861).Buffer,x=new Array(160);function Sha384(){this.init(),this._w=x,_.call(this,128,112)}a(Sha384,u),Sha384.prototype.init=function(){return this._ah=3418070365,this._bh=1654270250,this._ch=2438529370,this._dh=355462360,this._eh=1731405415,this._fh=2394180231,this._gh=3675008525,this._hh=1203062813,this._al=3238371032,this._bl=914150663,this._cl=812702999,this._dl=4144912697,this._el=4290775857,this._fl=1750603025,this._gl=1694076839,this._hl=3204075428,this},Sha384.prototype._hash=function(){var s=w.allocUnsafe(48);function writeInt64BE(o,i,a){s.writeInt32BE(o,a),s.writeInt32BE(i,a+4)}return writeInt64BE(this._ah,this._al,0),writeInt64BE(this._bh,this._bl,8),writeInt64BE(this._ch,this._cl,16),writeInt64BE(this._dh,this._dl,24),writeInt64BE(this._eh,this._el,32),writeInt64BE(this._fh,this._fl,40),s},s.exports=Sha384},32865:(s,o,i)=>{var a=i(19570),u=i(51811)(a);s.exports=u},33855:(s,o,i)=>{var a=i(9999),u=i(15389);s.exports=function iteratee(s){return u(\"function\"==typeof s?s:a(s,1))}},34035:(s,o,i)=>{const a=i(3110),u=i(86804);o.g$=a,o.KeyValuePair=i(55973),o.G6=u.ArraySlice,o.ot=u.ObjectSlice,o.Hg=u.Element,o.Om=u.StringElement,o.kT=u.NumberElement,o.bd=u.BooleanElement,o.Os=u.NullElement,o.wE=u.ArrayElement,o.Sh=u.ObjectElement,o.Pr=u.MemberElement,o.sI=u.RefElement,o.Ft=u.LinkElement,o.e=u.refract,i(85105),i(75147)},34084:(s,o,i)=>{\"use strict\";var a=i(62250),u=i(46285),_=i(79192);s.exports=function(s,o,i){var w,x;return _&&a(w=o.constructor)&&w!==i&&u(x=w.prototype)&&x!==i.prototype&&_(s,x),s}},34840:(s,o,i)=>{var a=\"object\"==typeof i.g&&i.g&&i.g.Object===Object&&i.g;s.exports=a},34849:(s,o,i)=>{\"use strict\";var a=i(65482),u=Math.max,_=Math.min;s.exports=function(s,o){var i=a(s);return i<0?u(i+o,0):_(i,o)}},34932:s=>{s.exports=function arrayMap(s,o){for(var i=-1,a=null==s?0:s.length,u=Array(a);++i{function concat(...s){return s.map((s=>function source(s){return s?\"string\"==typeof s?s:s.source:null}(s))).join(\"\")}s.exports=function bash(s){const o={},i={begin:/\\$\\{/,end:/\\}/,contains:[\"self\",{begin:/:-/,contains:[o]}]};Object.assign(o,{className:\"variable\",variants:[{begin:concat(/\\$[\\w\\d#@][\\w\\d_]*/,\"(?![\\\\w\\\\d])(?![$])\")},i]});const a={className:\"subst\",begin:/\\$\\(/,end:/\\)/,contains:[s.BACKSLASH_ESCAPE]},u={begin:/<<-?\\s*(?=\\w+)/,starts:{contains:[s.END_SAME_AS_BEGIN({begin:/(\\w+)/,end:/(\\w+)/,className:\"string\"})]}},_={className:\"string\",begin:/\"/,end:/\"/,contains:[s.BACKSLASH_ESCAPE,o,a]};a.contains.push(_);const w={begin:/\\$\\(\\(/,end:/\\)\\)/,contains:[{begin:/\\d+#[0-9a-f]+/,className:\"number\"},s.NUMBER_MODE,o]},x=s.SHEBANG({binary:`(${[\"fish\",\"bash\",\"zsh\",\"sh\",\"csh\",\"ksh\",\"tcsh\",\"dash\",\"scsh\"].join(\"|\")})`,relevance:10}),C={className:\"function\",begin:/\\w[\\w\\d_]*\\s*\\(\\s*\\)\\s*\\{/,returnBegin:!0,contains:[s.inherit(s.TITLE_MODE,{begin:/\\w[\\w\\d_]*/})],relevance:0};return{name:\"Bash\",aliases:[\"sh\",\"zsh\"],keywords:{$pattern:/\\b[a-z._-]+\\b/,keyword:\"if then else elif fi for while in do done case esac function\",literal:\"true false\",built_in:\"break cd continue eval exec exit export getopts hash pwd readonly return shift test times trap umask unset alias bind builtin caller command declare echo enable help let local logout mapfile printf read readarray source type typeset ulimit unalias set shopt autoload bg bindkey bye cap chdir clone comparguments compcall compctl compdescribe compfiles compgroups compquote comptags comptry compvalues dirs disable disown echotc echoti emulate fc fg float functions getcap getln history integer jobs kill limit log noglob popd print pushd pushln rehash sched setcap setopt stat suspend ttyctl unfunction unhash unlimit unsetopt vared wait whence where which zcompile zformat zftp zle zmodload zparseopts zprof zpty zregexparse zsocket zstyle ztcp\"},contains:[x,s.SHEBANG(),C,w,s.HASH_COMMENT_MODE,u,_,{className:\"\",begin:/\\\\\"/},{className:\"string\",begin:/'/,end:/'/},o]}}},35345:s=>{\"use strict\";s.exports=URIError},35529:(s,o,i)=>{var a=i(39344),u=i(28879),_=i(55527);s.exports=function initCloneObject(s){return\"function\"!=typeof s.constructor||_(s)?{}:a(u(s))}},35680:(s,o,i)=>{\"use strict\";var a=i(25767);s.exports=function isTypedArray(s){return!!a(s)}},35749:(s,o,i)=>{var a=i(81042);s.exports=function hashSet(s,o){var i=this.__data__;return this.size+=this.has(s)?0:1,i[s]=a&&void 0===o?\"__lodash_hash_undefined__\":o,this}},35970:(s,o,i)=>{var a=i(83120);s.exports=function flatten(s){return(null==s?0:s.length)?a(s,1):[]}},36128:(s,o,i)=>{\"use strict\";var a=i(7376),u=i(45951),_=i(2532),w=\"__core-js_shared__\",x=s.exports=u[w]||_(w,{});(x.versions||(x.versions=[])).push({version:\"3.40.0\",mode:a?\"pure\":\"global\",copyright:\"© 2014-2025 Denis Pushkarev (zloirock.ru)\",license:\"https://github.com/zloirock/core-js/blob/v3.40.0/LICENSE\",source:\"https://github.com/zloirock/core-js\"})},36306:s=>{var o=\"__lodash_placeholder__\";s.exports=function replaceHolders(s,i){for(var a=-1,u=s.length,_=0,w=[];++a{\"use strict\";var a=i(11091),u=i(85582),_=i(76024),w=i(98828),x=i(19358),C=\"AggregateError\",j=u(C),L=!w((function(){return 1!==j([1]).errors[0]}))&&w((function(){return 7!==j([1],C,{cause:7}).cause}));a({global:!0,constructor:!0,arity:2,forced:L},{AggregateError:x(C,(function(s){return function AggregateError(o,i){return _(s,this,arguments)}}),L,!0)})},36556:(s,o,i)=>{\"use strict\";var a=i(70453),u=i(73126),_=u([a(\"%String.prototype.indexOf%\")]);s.exports=function callBoundIntrinsic(s,o){var i=a(s,!!o);return\"function\"==typeof i&&_(s,\".prototype.\")>-1?u([i]):i}},36624:(s,o,i)=>{\"use strict\";var a=i(46285),u=String,_=TypeError;s.exports=function(s){if(a(s))return s;throw new _(u(s)+\" is not an object\")}},36800:(s,o,i)=>{var a=i(75288),u=i(64894),_=i(30361),w=i(23805);s.exports=function isIterateeCall(s,o,i){if(!w(i))return!1;var x=typeof o;return!!(\"number\"==x?u(i)&&_(o,i.length):\"string\"==x&&o in i)&&a(i[o],s)}},36833:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(49724),_=Function.prototype,w=a&&Object.getOwnPropertyDescriptor,x=u(_,\"name\"),C=x&&\"something\"===function something(){}.name,j=x&&(!a||a&&w(_,\"name\").configurable);s.exports={EXISTS:x,PROPER:C,CONFIGURABLE:j}},37007:s=>{\"use strict\";var o,i=\"object\"==typeof Reflect?Reflect:null,a=i&&\"function\"==typeof i.apply?i.apply:function ReflectApply(s,o,i){return Function.prototype.apply.call(s,o,i)};o=i&&\"function\"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function ReflectOwnKeys(s){return Object.getOwnPropertyNames(s).concat(Object.getOwnPropertySymbols(s))}:function ReflectOwnKeys(s){return Object.getOwnPropertyNames(s)};var u=Number.isNaN||function NumberIsNaN(s){return s!=s};function EventEmitter(){EventEmitter.init.call(this)}s.exports=EventEmitter,s.exports.once=function once(s,o){return new Promise((function(i,a){function errorListener(i){s.removeListener(o,resolver),a(i)}function resolver(){\"function\"==typeof s.removeListener&&s.removeListener(\"error\",errorListener),i([].slice.call(arguments))}eventTargetAgnosticAddListener(s,o,resolver,{once:!0}),\"error\"!==o&&function addErrorHandlerIfEventEmitter(s,o,i){\"function\"==typeof s.on&&eventTargetAgnosticAddListener(s,\"error\",o,i)}(s,errorListener,{once:!0})}))},EventEmitter.EventEmitter=EventEmitter,EventEmitter.prototype._events=void 0,EventEmitter.prototype._eventsCount=0,EventEmitter.prototype._maxListeners=void 0;var _=10;function checkListener(s){if(\"function\"!=typeof s)throw new TypeError('The \"listener\" argument must be of type Function. Received type '+typeof s)}function _getMaxListeners(s){return void 0===s._maxListeners?EventEmitter.defaultMaxListeners:s._maxListeners}function _addListener(s,o,i,a){var u,_,w;if(checkListener(i),void 0===(_=s._events)?(_=s._events=Object.create(null),s._eventsCount=0):(void 0!==_.newListener&&(s.emit(\"newListener\",o,i.listener?i.listener:i),_=s._events),w=_[o]),void 0===w)w=_[o]=i,++s._eventsCount;else if(\"function\"==typeof w?w=_[o]=a?[i,w]:[w,i]:a?w.unshift(i):w.push(i),(u=_getMaxListeners(s))>0&&w.length>u&&!w.warned){w.warned=!0;var x=new Error(\"Possible EventEmitter memory leak detected. \"+w.length+\" \"+String(o)+\" listeners added. Use emitter.setMaxListeners() to increase limit\");x.name=\"MaxListenersExceededWarning\",x.emitter=s,x.type=o,x.count=w.length,function ProcessEmitWarning(s){console&&console.warn&&console.warn(s)}(x)}return s}function onceWrapper(){if(!this.fired)return this.target.removeListener(this.type,this.wrapFn),this.fired=!0,0===arguments.length?this.listener.call(this.target):this.listener.apply(this.target,arguments)}function _onceWrap(s,o,i){var a={fired:!1,wrapFn:void 0,target:s,type:o,listener:i},u=onceWrapper.bind(a);return u.listener=i,a.wrapFn=u,u}function _listeners(s,o,i){var a=s._events;if(void 0===a)return[];var u=a[o];return void 0===u?[]:\"function\"==typeof u?i?[u.listener||u]:[u]:i?function unwrapListeners(s){for(var o=new Array(s.length),i=0;i0&&(w=o[0]),w instanceof Error)throw w;var x=new Error(\"Unhandled error.\"+(w?\" (\"+w.message+\")\":\"\"));throw x.context=w,x}var C=_[s];if(void 0===C)return!1;if(\"function\"==typeof C)a(C,this,o);else{var j=C.length,L=arrayClone(C,j);for(i=0;i=0;_--)if(i[_]===o||i[_].listener===o){w=i[_].listener,u=_;break}if(u<0)return this;0===u?i.shift():function spliceOne(s,o){for(;o+1=0;a--)this.removeListener(s,o[a]);return this},EventEmitter.prototype.listeners=function listeners(s){return _listeners(this,s,!0)},EventEmitter.prototype.rawListeners=function rawListeners(s){return _listeners(this,s,!1)},EventEmitter.listenerCount=function(s,o){return\"function\"==typeof s.listenerCount?s.listenerCount(o):listenerCount.call(s,o)},EventEmitter.prototype.listenerCount=listenerCount,EventEmitter.prototype.eventNames=function eventNames(){return this._eventsCount>0?o(this._events):[]}},37167:(s,o,i)=>{var a=i(4901),u=i(27301),_=i(86009),w=_&&_.isTypedArray,x=w?u(w):a;s.exports=x},37217:(s,o,i)=>{var a=i(80079),u=i(51420),_=i(90938),w=i(63605),x=i(29817),C=i(80945);function Stack(s){var o=this.__data__=new a(s);this.size=o.size}Stack.prototype.clear=u,Stack.prototype.delete=_,Stack.prototype.get=w,Stack.prototype.has=x,Stack.prototype.set=C,s.exports=Stack},37241:(s,o,i)=>{var a=i(70695),u=i(72903),_=i(64894);s.exports=function keysIn(s){return _(s)?a(s,!0):u(s)}},37257:(s,o,i)=>{\"use strict\";i(96605),i(64502),i(36371),i(99363),i(7057);var a=i(92046);s.exports=a.AggregateError},37334:s=>{s.exports=function constant(s){return function(){return s}}},37381:(s,o,i)=>{var a=i(48152),u=i(63950),_=a?function(s){return a.get(s)}:u;s.exports=_},37471:(s,o,i)=>{var a=i(91596),u=i(53320),_=i(58523),w=i(82819),x=i(18073),C=i(11287),j=i(68294),L=i(36306),B=i(9325);s.exports=function createHybrid(s,o,i,$,U,V,z,Y,Z,ee){var ie=128&o,ae=1&o,ce=2&o,le=24&o,pe=512&o,de=ce?void 0:w(s);return function wrapper(){for(var fe=arguments.length,ye=Array(fe),be=fe;be--;)ye[be]=arguments[be];if(le)var _e=C(wrapper),Se=_(ye,_e);if($&&(ye=a(ye,$,U,le)),V&&(ye=u(ye,V,z,le)),fe-=Se,le&&fe1&&ye.reverse(),ie&&Z{\"use strict\";var a=i(76264),u=i(93742),_=a(\"iterator\"),w=Array.prototype;s.exports=function(s){return void 0!==s&&(u.Array===s||w[_]===s)}},37828:(s,o,i)=>{var a=i(9325).Uint8Array;s.exports=a},38221:(s,o,i)=>{var a=i(23805),u=i(10124),_=i(99374),w=Math.max,x=Math.min;s.exports=function debounce(s,o,i){var C,j,L,B,$,U,V=0,z=!1,Y=!1,Z=!0;if(\"function\"!=typeof s)throw new TypeError(\"Expected a function\");function invokeFunc(o){var i=C,a=j;return C=j=void 0,V=o,B=s.apply(a,i)}function shouldInvoke(s){var i=s-U;return void 0===U||i>=o||i<0||Y&&s-V>=L}function timerExpired(){var s=u();if(shouldInvoke(s))return trailingEdge(s);$=setTimeout(timerExpired,function remainingWait(s){var i=o-(s-U);return Y?x(i,L-(s-V)):i}(s))}function trailingEdge(s){return $=void 0,Z&&C?invokeFunc(s):(C=j=void 0,B)}function debounced(){var s=u(),i=shouldInvoke(s);if(C=arguments,j=this,U=s,i){if(void 0===$)return function leadingEdge(s){return V=s,$=setTimeout(timerExpired,o),z?invokeFunc(s):B}(U);if(Y)return clearTimeout($),$=setTimeout(timerExpired,o),invokeFunc(U)}return void 0===$&&($=setTimeout(timerExpired,o)),B}return o=_(o)||0,a(i)&&(z=!!i.leading,L=(Y=\"maxWait\"in i)?w(_(i.maxWait)||0,o):L,Z=\"trailing\"in i?!!i.trailing:Z),debounced.cancel=function cancel(){void 0!==$&&clearTimeout($),V=0,C=U=j=$=void 0},debounced.flush=function flush(){return void 0===$?B:trailingEdge(u())},debounced}},38329:(s,o,i)=>{var a=i(64894);s.exports=function createBaseEach(s,o){return function(i,u){if(null==i)return i;if(!a(i))return s(i,u);for(var _=i.length,w=o?_:-1,x=Object(i);(o?w--:++w<_)&&!1!==u(x[w],w,x););return i}}},38440:(s,o,i)=>{var a=i(16038),u=i(27301),_=i(86009),w=_&&_.isSet,x=w?u(w):a;s.exports=x},38530:s=>{\"use strict\";s.exports={}},38816:(s,o,i)=>{var a=i(35970),u=i(56757),_=i(32865);s.exports=function flatRest(s){return _(u(s,void 0,a),s+\"\")}},38859:(s,o,i)=>{var a=i(53661),u=i(31380),_=i(51459);function SetCache(s){var o=-1,i=null==s?0:s.length;for(this.__data__=new a;++o{\"use strict\";var a=i(76578),u=\"undefined\"==typeof globalThis?i.g:globalThis;s.exports=function availableTypedArrays(){for(var s=[],o=0;o{\"use strict\";var a=i(46285),u=i(61626);s.exports=function(s,o){a(o)&&\"cause\"in o&&u(s,\"cause\",o.cause)}},39298:(s,o,i)=>{\"use strict\";var a=i(74239),u=Object;s.exports=function(s){return u(a(s))}},39344:(s,o,i)=>{var a=i(23805),u=Object.create,_=function(){function object(){}return function(s){if(!a(s))return{};if(u)return u(s);object.prototype=s;var o=new object;return object.prototype=void 0,o}}();s.exports=_},39447:(s,o,i)=>{\"use strict\";var a=i(98828);s.exports=!a((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]}))},40154:(s,o,i)=>{\"use strict\";var a=i(13930),u=i(36624),_=i(29367);s.exports=function(s,o,i){var w,x;u(s);try{if(!(w=_(s,\"return\"))){if(\"throw\"===o)throw i;return i}w=a(w,s)}catch(s){x=!0,w=s}if(\"throw\"===o)throw i;if(x)throw w;return u(w),i}},40239:(s,o,i)=>{const a=i(10316);s.exports=class NumberElement extends a{constructor(s,o,i){super(s,o,i),this.element=\"number\"}primitive(){return\"number\"}}},40345:(s,o,i)=>{s.exports=i(37007).EventEmitter},40346:s=>{s.exports=function isObjectLike(s){return null!=s&&\"object\"==typeof s}},40551:(s,o,i)=>{\"use strict\";var a=i(45951),u=i(62250),_=a.WeakMap;s.exports=u(_)&&/native code/.test(String(_))},40860:(s,o,i)=>{var a=i(40882),u=i(80909),_=i(15389),w=i(85558),x=i(56449);s.exports=function reduce(s,o,i){var C=x(s)?a:w,j=arguments.length<3;return C(s,_(o,4),i,j,u)}},40882:s=>{s.exports=function arrayReduce(s,o,i,a){var u=-1,_=null==s?0:s.length;for(a&&_&&(i=s[++u]);++u<_;)i=o(i,s[u],u,s);return i}},40961:(s,o,i)=>{\"use strict\";!function checkDCE(){if(\"undefined\"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&\"function\"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(s){console.error(s)}}(),s.exports=i(22551)},40975:(s,o,i)=>{\"use strict\";var a=i(9748);s.exports=a},41067:(s,o,i)=>{const a=i(10316);s.exports=class NullElement extends a{constructor(s,o,i){super(s||null,o,i),this.element=\"null\"}primitive(){return\"null\"}set(){return new Error(\"Cannot set the value of null\")}}},41176:s=>{\"use strict\";var o=Math.ceil,i=Math.floor;s.exports=Math.trunc||function trunc(s){var a=+s;return(a>0?i:o)(a)}},41237:s=>{\"use strict\";s.exports=EvalError},41333:s=>{\"use strict\";s.exports=function hasSymbols(){if(\"function\"!=typeof Symbol||\"function\"!=typeof Object.getOwnPropertySymbols)return!1;if(\"symbol\"==typeof Symbol.iterator)return!0;var s={},o=Symbol(\"test\"),i=Object(o);if(\"string\"==typeof o)return!1;if(\"[object Symbol]\"!==Object.prototype.toString.call(o))return!1;if(\"[object Symbol]\"!==Object.prototype.toString.call(i))return!1;for(var a in s[o]=42,s)return!1;if(\"function\"==typeof Object.keys&&0!==Object.keys(s).length)return!1;if(\"function\"==typeof Object.getOwnPropertyNames&&0!==Object.getOwnPropertyNames(s).length)return!1;var u=Object.getOwnPropertySymbols(s);if(1!==u.length||u[0]!==o)return!1;if(!Object.prototype.propertyIsEnumerable.call(s,o))return!1;if(\"function\"==typeof Object.getOwnPropertyDescriptor){var _=Object.getOwnPropertyDescriptor(s,o);if(42!==_.value||!0!==_.enumerable)return!1}return!0}},41505:(s,o,i)=>{\"use strict\";var a=i(98828);s.exports=!a((function(){var s=function(){}.bind();return\"function\"!=typeof s||s.hasOwnProperty(\"prototype\")}))},41799:(s,o,i)=>{var a=i(37217),u=i(60270);s.exports=function baseIsMatch(s,o,i,_){var w=i.length,x=w,C=!_;if(null==s)return!x;for(s=Object(s);w--;){var j=i[w];if(C&&j[2]?j[1]!==s[j[0]]:!(j[0]in s))return!1}for(;++w{const a=i(27096),u=i(78004),_=a.types;s.exports=class RandExp{constructor(s,o){if(this._setDefaults(s),s instanceof RegExp)this.ignoreCase=s.ignoreCase,this.multiline=s.multiline,s=s.source;else{if(\"string\"!=typeof s)throw new Error(\"Expected a regexp or string\");this.ignoreCase=o&&-1!==o.indexOf(\"i\"),this.multiline=o&&-1!==o.indexOf(\"m\")}this.tokens=a(s)}_setDefaults(s){this.max=null!=s.max?s.max:null!=RandExp.prototype.max?RandExp.prototype.max:100,this.defaultRange=s.defaultRange?s.defaultRange:this.defaultRange.clone(),s.randInt&&(this.randInt=s.randInt)}gen(){return this._gen(this.tokens,[])}_gen(s,o){var i,a,u,w,x;switch(s.type){case _.ROOT:case _.GROUP:if(s.followedBy||s.notFollowedBy)return\"\";for(s.remember&&void 0===s.groupNumber&&(s.groupNumber=o.push(null)-1),a=\"\",w=0,x=(i=s.options?this._randSelect(s.options):s.stack).length;w{var o=\"\\\\ud800-\\\\udfff\",i=\"[\"+o+\"]\",a=\"[\\\\u0300-\\\\u036f\\\\ufe20-\\\\ufe2f\\\\u20d0-\\\\u20ff]\",u=\"\\\\ud83c[\\\\udffb-\\\\udfff]\",_=\"[^\"+o+\"]\",w=\"(?:\\\\ud83c[\\\\udde6-\\\\uddff]){2}\",x=\"[\\\\ud800-\\\\udbff][\\\\udc00-\\\\udfff]\",C=\"(?:\"+a+\"|\"+u+\")\"+\"?\",j=\"[\\\\ufe0e\\\\ufe0f]?\",L=j+C+(\"(?:\\\\u200d(?:\"+[_,w,x].join(\"|\")+\")\"+j+C+\")*\"),B=\"(?:\"+[_+a+\"?\",a,w,x,i].join(\"|\")+\")\",$=RegExp(u+\"(?=\"+u+\")|\"+B+L,\"g\");s.exports=function unicodeToArray(s){return s.match($)||[]}},42072:(s,o,i)=>{var a=i(34932),u=i(23007),_=i(56449),w=i(44394),x=i(61802),C=i(77797),j=i(13222);s.exports=function toPath(s){return _(s)?a(s,C):w(s)?[s]:u(x(j(s)))}},42156:s=>{\"use strict\";s.exports=function(){}},42220:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(58661),_=i(74284),w=i(36624),x=i(4993),C=i(2875);o.f=a&&!u?Object.defineProperties:function defineProperties(s,o){w(s);for(var i,a=x(o),u=C(o),j=u.length,L=0;j>L;)_.f(s,i=u[L++],a[i]);return s}},42426:(s,o,i)=>{var a=i(14248),u=i(15389),_=i(90916),w=i(56449),x=i(36800);s.exports=function some(s,o,i){var C=w(s)?a:_;return i&&x(s,o,i)&&(o=void 0),C(s,u(o,3))}},42824:(s,o,i)=>{var a=i(87805),u=i(93290),_=i(71961),w=i(23007),x=i(35529),C=i(72428),j=i(56449),L=i(83693),B=i(3656),$=i(1882),U=i(23805),V=i(11331),z=i(37167),Y=i(14974),Z=i(69884);s.exports=function baseMergeDeep(s,o,i,ee,ie,ae,ce){var le=Y(s,i),pe=Y(o,i),de=ce.get(pe);if(de)a(s,i,de);else{var fe=ae?ae(le,pe,i+\"\",s,o,ce):void 0,ye=void 0===fe;if(ye){var be=j(pe),_e=!be&&B(pe),Se=!be&&!_e&&z(pe);fe=pe,be||_e||Se?j(le)?fe=le:L(le)?fe=w(le):_e?(ye=!1,fe=u(pe,!0)):Se?(ye=!1,fe=_(pe,!0)):fe=[]:V(pe)||C(pe)?(fe=le,C(le)?fe=Z(le):U(le)&&!$(le)||(fe=x(pe))):ye=!1}ye&&(ce.set(pe,fe),ie(fe,pe,ee,ae,ce),ce.delete(pe)),a(s,i,fe)}}},43360:(s,o,i)=>{var a=i(93243);s.exports=function baseAssignValue(s,o,i){\"__proto__\"==o&&a?a(s,o,{configurable:!0,enumerable:!0,value:i,writable:!0}):s[o]=i}},43768:(s,o,i)=>{\"use strict\";var a=i(45981),u=i(85587);o.highlight=highlight,o.highlightAuto=function highlightAuto(s,o){var i,w,x,C,j=o||{},L=j.subset||a.listLanguages(),B=j.prefix,$=L.length,U=-1;null==B&&(B=_);if(\"string\"!=typeof s)throw u(\"Expected `string` for value, got `%s`\",s);w={relevance:0,language:null,value:[]},i={relevance:0,language:null,value:[]};for(;++U<$;)C=L[U],a.getLanguage(C)&&((x=highlight(C,s,o)).language=C,x.relevance>w.relevance&&(w=x),x.relevance>i.relevance&&(w=i,i=x));w.language&&(i.secondBest=w);return i},o.registerLanguage=function registerLanguage(s,o){a.registerLanguage(s,o)},o.listLanguages=function listLanguages(){return a.listLanguages()},o.registerAlias=function registerAlias(s,o){var i,u=s;o&&((u={})[s]=o);for(i in u)a.registerAliases(u[i],{languageName:i})},Emitter.prototype.addText=function text(s){var o,i,a=this.stack;if(\"\"===s)return;o=a[a.length-1],(i=o.children[o.children.length-1])&&\"text\"===i.type?i.value+=s:o.children.push({type:\"text\",value:s})},Emitter.prototype.addKeyword=function addKeyword(s,o){this.openNode(o),this.addText(s),this.closeNode()},Emitter.prototype.addSublanguage=function addSublanguage(s,o){var i=this.stack,a=i[i.length-1],u=s.rootNode.children,_=o?{type:\"element\",tagName:\"span\",properties:{className:[o]},children:u}:u;a.children=a.children.concat(_)},Emitter.prototype.openNode=function open(s){var o=this.stack,i=this.options.classPrefix+s,a=o[o.length-1],u={type:\"element\",tagName:\"span\",properties:{className:[i]},children:[]};a.children.push(u),o.push(u)},Emitter.prototype.closeNode=function close(){this.stack.pop()},Emitter.prototype.closeAllNodes=noop,Emitter.prototype.finalize=noop,Emitter.prototype.toHTML=function toHtmlNoop(){return\"\"};var _=\"hljs-\";function highlight(s,o,i){var w,x=a.configure({}),C=(i||{}).prefix;if(\"string\"!=typeof s)throw u(\"Expected `string` for name, got `%s`\",s);if(!a.getLanguage(s))throw u(\"Unknown language: `%s` is not registered\",s);if(\"string\"!=typeof o)throw u(\"Expected `string` for value, got `%s`\",o);if(null==C&&(C=_),a.configure({__emitter:Emitter,classPrefix:C}),w=a.highlight(o,{language:s,ignoreIllegals:!0}),a.configure(x||{}),w.errorRaised)throw w.errorRaised;return{relevance:w.relevance,language:w.language,value:w.emitter.rootNode.children}}function Emitter(s){this.options=s,this.rootNode={children:[]},this.stack=[this.rootNode]}function noop(){}},43838:(s,o,i)=>{var a=i(21791),u=i(37241);s.exports=function baseAssignIn(s,o){return s&&a(o,u(o),s)}},44394:(s,o,i)=>{var a=i(72552),u=i(40346);s.exports=function isSymbol(s){return\"symbol\"==typeof s||u(s)&&\"[object Symbol]\"==a(s)}},44673:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(82159),_=i(46285),w=i(49724),x=i(93427),C=i(41505),j=Function,L=a([].concat),B=a([].join),$={};s.exports=C?j.bind:function bind(s){var o=u(this),i=o.prototype,a=x(arguments,1),C=function bound(){var i=L(a,x(arguments));return this instanceof C?function(s,o,i){if(!w($,o)){for(var a=[],u=0;u{var a=i(1882),u=i(87296),_=i(23805),w=i(47473),x=/^\\[object .+?Constructor\\]$/,C=Function.prototype,j=Object.prototype,L=C.toString,B=j.hasOwnProperty,$=RegExp(\"^\"+L.call(B).replace(/[\\\\^$.*+?()[\\]{}|]/g,\"\\\\$&\").replace(/hasOwnProperty|(function).*?(?=\\\\\\()| for .+?(?=\\\\\\])/g,\"$1.*?\")+\"$\");s.exports=function baseIsNative(s){return!(!_(s)||u(s))&&(a(s)?$:x).test(w(s))}},45412:(s,o,i)=>{\"use strict\";var a,u=i(65606);s.exports=Readable,Readable.ReadableState=ReadableState;i(37007).EventEmitter;var _=function EElistenerCount(s,o){return s.listeners(o).length},w=i(40345),x=i(48287).Buffer,C=(void 0!==i.g?i.g:\"undefined\"!=typeof window?window:\"undefined\"!=typeof self?self:{}).Uint8Array||function(){};var j,L=i(79838);j=L&&L.debuglog?L.debuglog(\"stream\"):function debug(){};var B,$,U,V=i(80345),z=i(75896),Y=i(65291).getHighWaterMark,Z=i(86048).F,ee=Z.ERR_INVALID_ARG_TYPE,ie=Z.ERR_STREAM_PUSH_AFTER_EOF,ae=Z.ERR_METHOD_NOT_IMPLEMENTED,ce=Z.ERR_STREAM_UNSHIFT_AFTER_END_EVENT;i(56698)(Readable,w);var le=z.errorOrDestroy,pe=[\"error\",\"close\",\"destroy\",\"pause\",\"resume\"];function ReadableState(s,o,u){a=a||i(25382),s=s||{},\"boolean\"!=typeof u&&(u=o instanceof a),this.objectMode=!!s.objectMode,u&&(this.objectMode=this.objectMode||!!s.readableObjectMode),this.highWaterMark=Y(this,s,\"readableHighWaterMark\",u),this.buffer=new V,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.paused=!0,this.emitClose=!1!==s.emitClose,this.autoDestroy=!!s.autoDestroy,this.destroyed=!1,this.defaultEncoding=s.defaultEncoding||\"utf8\",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,s.encoding&&(B||(B=i(83141).I),this.decoder=new B(s.encoding),this.encoding=s.encoding)}function Readable(s){if(a=a||i(25382),!(this instanceof Readable))return new Readable(s);var o=this instanceof a;this._readableState=new ReadableState(s,this,o),this.readable=!0,s&&(\"function\"==typeof s.read&&(this._read=s.read),\"function\"==typeof s.destroy&&(this._destroy=s.destroy)),w.call(this)}function readableAddChunk(s,o,i,a,u){j(\"readableAddChunk\",o);var _,w=s._readableState;if(null===o)w.reading=!1,function onEofChunk(s,o){if(j(\"onEofChunk\"),o.ended)return;if(o.decoder){var i=o.decoder.end();i&&i.length&&(o.buffer.push(i),o.length+=o.objectMode?1:i.length)}o.ended=!0,o.sync?emitReadable(s):(o.needReadable=!1,o.emittedReadable||(o.emittedReadable=!0,emitReadable_(s)))}(s,w);else if(u||(_=function chunkInvalid(s,o){var i;(function _isUint8Array(s){return x.isBuffer(s)||s instanceof C})(o)||\"string\"==typeof o||void 0===o||s.objectMode||(i=new ee(\"chunk\",[\"string\",\"Buffer\",\"Uint8Array\"],o));return i}(w,o)),_)le(s,_);else if(w.objectMode||o&&o.length>0)if(\"string\"==typeof o||w.objectMode||Object.getPrototypeOf(o)===x.prototype||(o=function _uint8ArrayToBuffer(s){return x.from(s)}(o)),a)w.endEmitted?le(s,new ce):addChunk(s,w,o,!0);else if(w.ended)le(s,new ie);else{if(w.destroyed)return!1;w.reading=!1,w.decoder&&!i?(o=w.decoder.write(o),w.objectMode||0!==o.length?addChunk(s,w,o,!1):maybeReadMore(s,w)):addChunk(s,w,o,!1)}else a||(w.reading=!1,maybeReadMore(s,w));return!w.ended&&(w.lengtho.highWaterMark&&(o.highWaterMark=function computeNewHighWaterMark(s){return s>=de?s=de:(s--,s|=s>>>1,s|=s>>>2,s|=s>>>4,s|=s>>>8,s|=s>>>16,s++),s}(s)),s<=o.length?s:o.ended?o.length:(o.needReadable=!0,0))}function emitReadable(s){var o=s._readableState;j(\"emitReadable\",o.needReadable,o.emittedReadable),o.needReadable=!1,o.emittedReadable||(j(\"emitReadable\",o.flowing),o.emittedReadable=!0,u.nextTick(emitReadable_,s))}function emitReadable_(s){var o=s._readableState;j(\"emitReadable_\",o.destroyed,o.length,o.ended),o.destroyed||!o.length&&!o.ended||(s.emit(\"readable\"),o.emittedReadable=!1),o.needReadable=!o.flowing&&!o.ended&&o.length<=o.highWaterMark,flow(s)}function maybeReadMore(s,o){o.readingMore||(o.readingMore=!0,u.nextTick(maybeReadMore_,s,o))}function maybeReadMore_(s,o){for(;!o.reading&&!o.ended&&(o.length0,o.resumeScheduled&&!o.paused?o.flowing=!0:s.listenerCount(\"data\")>0&&s.resume()}function nReadingNextTick(s){j(\"readable nexttick read 0\"),s.read(0)}function resume_(s,o){j(\"resume\",o.reading),o.reading||s.read(0),o.resumeScheduled=!1,s.emit(\"resume\"),flow(s),o.flowing&&!o.reading&&s.read(0)}function flow(s){var o=s._readableState;for(j(\"flow\",o.flowing);o.flowing&&null!==s.read(););}function fromList(s,o){return 0===o.length?null:(o.objectMode?i=o.buffer.shift():!s||s>=o.length?(i=o.decoder?o.buffer.join(\"\"):1===o.buffer.length?o.buffer.first():o.buffer.concat(o.length),o.buffer.clear()):i=o.buffer.consume(s,o.decoder),i);var i}function endReadable(s){var o=s._readableState;j(\"endReadable\",o.endEmitted),o.endEmitted||(o.ended=!0,u.nextTick(endReadableNT,o,s))}function endReadableNT(s,o){if(j(\"endReadableNT\",s.endEmitted,s.length),!s.endEmitted&&0===s.length&&(s.endEmitted=!0,o.readable=!1,o.emit(\"end\"),s.autoDestroy)){var i=o._writableState;(!i||i.autoDestroy&&i.finished)&&o.destroy()}}function indexOf(s,o){for(var i=0,a=s.length;i=o.highWaterMark:o.length>0)||o.ended))return j(\"read: emitReadable\",o.length,o.ended),0===o.length&&o.ended?endReadable(this):emitReadable(this),null;if(0===(s=howMuchToRead(s,o))&&o.ended)return 0===o.length&&endReadable(this),null;var a,u=o.needReadable;return j(\"need readable\",u),(0===o.length||o.length-s0?fromList(s,o):null)?(o.needReadable=o.length<=o.highWaterMark,s=0):(o.length-=s,o.awaitDrain=0),0===o.length&&(o.ended||(o.needReadable=!0),i!==s&&o.ended&&endReadable(this)),null!==a&&this.emit(\"data\",a),a},Readable.prototype._read=function(s){le(this,new ae(\"_read()\"))},Readable.prototype.pipe=function(s,o){var i=this,a=this._readableState;switch(a.pipesCount){case 0:a.pipes=s;break;case 1:a.pipes=[a.pipes,s];break;default:a.pipes.push(s)}a.pipesCount+=1,j(\"pipe count=%d opts=%j\",a.pipesCount,o);var w=(!o||!1!==o.end)&&s!==u.stdout&&s!==u.stderr?onend:unpipe;function onunpipe(o,u){j(\"onunpipe\"),o===i&&u&&!1===u.hasUnpiped&&(u.hasUnpiped=!0,function cleanup(){j(\"cleanup\"),s.removeListener(\"close\",onclose),s.removeListener(\"finish\",onfinish),s.removeListener(\"drain\",x),s.removeListener(\"error\",onerror),s.removeListener(\"unpipe\",onunpipe),i.removeListener(\"end\",onend),i.removeListener(\"end\",unpipe),i.removeListener(\"data\",ondata),C=!0,!a.awaitDrain||s._writableState&&!s._writableState.needDrain||x()}())}function onend(){j(\"onend\"),s.end()}a.endEmitted?u.nextTick(w):i.once(\"end\",w),s.on(\"unpipe\",onunpipe);var x=function pipeOnDrain(s){return function pipeOnDrainFunctionResult(){var o=s._readableState;j(\"pipeOnDrain\",o.awaitDrain),o.awaitDrain&&o.awaitDrain--,0===o.awaitDrain&&_(s,\"data\")&&(o.flowing=!0,flow(s))}}(i);s.on(\"drain\",x);var C=!1;function ondata(o){j(\"ondata\");var u=s.write(o);j(\"dest.write\",u),!1===u&&((1===a.pipesCount&&a.pipes===s||a.pipesCount>1&&-1!==indexOf(a.pipes,s))&&!C&&(j(\"false write response, pause\",a.awaitDrain),a.awaitDrain++),i.pause())}function onerror(o){j(\"onerror\",o),unpipe(),s.removeListener(\"error\",onerror),0===_(s,\"error\")&&le(s,o)}function onclose(){s.removeListener(\"finish\",onfinish),unpipe()}function onfinish(){j(\"onfinish\"),s.removeListener(\"close\",onclose),unpipe()}function unpipe(){j(\"unpipe\"),i.unpipe(s)}return i.on(\"data\",ondata),function prependListener(s,o,i){if(\"function\"==typeof s.prependListener)return s.prependListener(o,i);s._events&&s._events[o]?Array.isArray(s._events[o])?s._events[o].unshift(i):s._events[o]=[i,s._events[o]]:s.on(o,i)}(s,\"error\",onerror),s.once(\"close\",onclose),s.once(\"finish\",onfinish),s.emit(\"pipe\",i),a.flowing||(j(\"pipe resume\"),i.resume()),s},Readable.prototype.unpipe=function(s){var o=this._readableState,i={hasUnpiped:!1};if(0===o.pipesCount)return this;if(1===o.pipesCount)return s&&s!==o.pipes||(s||(s=o.pipes),o.pipes=null,o.pipesCount=0,o.flowing=!1,s&&s.emit(\"unpipe\",this,i)),this;if(!s){var a=o.pipes,u=o.pipesCount;o.pipes=null,o.pipesCount=0,o.flowing=!1;for(var _=0;_0,!1!==a.flowing&&this.resume()):\"readable\"===s&&(a.endEmitted||a.readableListening||(a.readableListening=a.needReadable=!0,a.flowing=!1,a.emittedReadable=!1,j(\"on readable\",a.length,a.reading),a.length?emitReadable(this):a.reading||u.nextTick(nReadingNextTick,this))),i},Readable.prototype.addListener=Readable.prototype.on,Readable.prototype.removeListener=function(s,o){var i=w.prototype.removeListener.call(this,s,o);return\"readable\"===s&&u.nextTick(updateReadableListening,this),i},Readable.prototype.removeAllListeners=function(s){var o=w.prototype.removeAllListeners.apply(this,arguments);return\"readable\"!==s&&void 0!==s||u.nextTick(updateReadableListening,this),o},Readable.prototype.resume=function(){var s=this._readableState;return s.flowing||(j(\"resume\"),s.flowing=!s.readableListening,function resume(s,o){o.resumeScheduled||(o.resumeScheduled=!0,u.nextTick(resume_,s,o))}(this,s)),s.paused=!1,this},Readable.prototype.pause=function(){return j(\"call pause flowing=%j\",this._readableState.flowing),!1!==this._readableState.flowing&&(j(\"pause\"),this._readableState.flowing=!1,this.emit(\"pause\")),this._readableState.paused=!0,this},Readable.prototype.wrap=function(s){var o=this,i=this._readableState,a=!1;for(var u in s.on(\"end\",(function(){if(j(\"wrapped end\"),i.decoder&&!i.ended){var s=i.decoder.end();s&&s.length&&o.push(s)}o.push(null)})),s.on(\"data\",(function(u){(j(\"wrapped data\"),i.decoder&&(u=i.decoder.write(u)),i.objectMode&&null==u)||(i.objectMode||u&&u.length)&&(o.push(u)||(a=!0,s.pause()))})),s)void 0===this[u]&&\"function\"==typeof s[u]&&(this[u]=function methodWrap(o){return function methodWrapReturnFunction(){return s[o].apply(s,arguments)}}(u));for(var _=0;_{var o=/[a-z][A-Z]|[A-Z]{2}[a-z]|[0-9][a-zA-Z]|[a-zA-Z][0-9]|[^a-zA-Z0-9 ]/;s.exports=function hasUnicodeWord(s){return o.test(s)}},45539:(s,o,i)=>{var a=i(40882),u=i(50828),_=i(66645),w=RegExp(\"['’]\",\"g\");s.exports=function createCompounder(s){return function(o){return a(_(u(o).replace(w,\"\")),s,\"\")}}},45807:(s,o,i)=>{\"use strict\";var a=i(1907),u=a({}.toString),_=a(\"\".slice);s.exports=function(s){return _(u(s),8,-1)}},45891:(s,o,i)=>{var a=i(51873),u=i(72428),_=i(56449),w=a?a.isConcatSpreadable:void 0;s.exports=function isFlattenable(s){return _(s)||u(s)||!!(w&&s&&s[w])}},45951:function(s,o,i){\"use strict\";var check=function(s){return s&&s.Math===Math&&s};s.exports=check(\"object\"==typeof globalThis&&globalThis)||check(\"object\"==typeof window&&window)||check(\"object\"==typeof self&&self)||check(\"object\"==typeof i.g&&i.g)||check(\"object\"==typeof this&&this)||function(){return this}()||Function(\"return this\")()},45981:s=>{function deepFreeze(s){return s instanceof Map?s.clear=s.delete=s.set=function(){throw new Error(\"map is read-only\")}:s instanceof Set&&(s.add=s.clear=s.delete=function(){throw new Error(\"set is read-only\")}),Object.freeze(s),Object.getOwnPropertyNames(s).forEach((function(o){var i=s[o];\"object\"!=typeof i||Object.isFrozen(i)||deepFreeze(i)})),s}var o=deepFreeze,i=deepFreeze;o.default=i;class Response{constructor(s){void 0===s.data&&(s.data={}),this.data=s.data,this.isMatchIgnored=!1}ignoreMatch(){this.isMatchIgnored=!0}}function escapeHTML(s){return s.replace(/&/g,\"&\").replace(//g,\">\").replace(/\"/g,\""\").replace(/'/g,\"'\")}function inherit(s,...o){const i=Object.create(null);for(const o in s)i[o]=s[o];return o.forEach((function(s){for(const o in s)i[o]=s[o]})),i}const emitsWrappingTags=s=>!!s.kind;class HTMLRenderer{constructor(s,o){this.buffer=\"\",this.classPrefix=o.classPrefix,s.walk(this)}addText(s){this.buffer+=escapeHTML(s)}openNode(s){if(!emitsWrappingTags(s))return;let o=s.kind;s.sublanguage||(o=`${this.classPrefix}${o}`),this.span(o)}closeNode(s){emitsWrappingTags(s)&&(this.buffer+=\"\")}value(){return this.buffer}span(s){this.buffer+=``}}class TokenTree{constructor(){this.rootNode={children:[]},this.stack=[this.rootNode]}get top(){return this.stack[this.stack.length-1]}get root(){return this.rootNode}add(s){this.top.children.push(s)}openNode(s){const o={kind:s,children:[]};this.add(o),this.stack.push(o)}closeNode(){if(this.stack.length>1)return this.stack.pop()}closeAllNodes(){for(;this.closeNode(););}toJSON(){return JSON.stringify(this.rootNode,null,4)}walk(s){return this.constructor._walk(s,this.rootNode)}static _walk(s,o){return\"string\"==typeof o?s.addText(o):o.children&&(s.openNode(o),o.children.forEach((o=>this._walk(s,o))),s.closeNode(o)),s}static _collapse(s){\"string\"!=typeof s&&s.children&&(s.children.every((s=>\"string\"==typeof s))?s.children=[s.children.join(\"\")]:s.children.forEach((s=>{TokenTree._collapse(s)})))}}class TokenTreeEmitter extends TokenTree{constructor(s){super(),this.options=s}addKeyword(s,o){\"\"!==s&&(this.openNode(o),this.addText(s),this.closeNode())}addText(s){\"\"!==s&&this.add(s)}addSublanguage(s,o){const i=s.root;i.kind=o,i.sublanguage=!0,this.add(i)}toHTML(){return new HTMLRenderer(this,this.options).value()}finalize(){return!0}}function source(s){return s?\"string\"==typeof s?s:s.source:null}const a=/\\[(?:[^\\\\\\]]|\\\\.)*\\]|\\(\\??|\\\\([1-9][0-9]*)|\\\\./;const u=\"[a-zA-Z]\\\\w*\",_=\"[a-zA-Z_]\\\\w*\",w=\"\\\\b\\\\d+(\\\\.\\\\d+)?\",x=\"(-?)(\\\\b0[xX][a-fA-F0-9]+|(\\\\b\\\\d+(\\\\.\\\\d*)?|\\\\.\\\\d+)([eE][-+]?\\\\d+)?)\",C=\"\\\\b(0b[01]+)\",j={begin:\"\\\\\\\\[\\\\s\\\\S]\",relevance:0},L={className:\"string\",begin:\"'\",end:\"'\",illegal:\"\\\\n\",contains:[j]},B={className:\"string\",begin:'\"',end:'\"',illegal:\"\\\\n\",contains:[j]},$={begin:/\\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\\b/},COMMENT=function(s,o,i={}){const a=inherit({className:\"comment\",begin:s,end:o,contains:[]},i);return a.contains.push($),a.contains.push({className:\"doctag\",begin:\"(?:TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):\",relevance:0}),a},U=COMMENT(\"//\",\"$\"),V=COMMENT(\"/\\\\*\",\"\\\\*/\"),z=COMMENT(\"#\",\"$\"),Y={className:\"number\",begin:w,relevance:0},Z={className:\"number\",begin:x,relevance:0},ee={className:\"number\",begin:C,relevance:0},ie={className:\"number\",begin:w+\"(%|em|ex|ch|rem|vw|vh|vmin|vmax|cm|mm|in|pt|pc|px|deg|grad|rad|turn|s|ms|Hz|kHz|dpi|dpcm|dppx)?\",relevance:0},ae={begin:/(?=\\/[^/\\n]*\\/)/,contains:[{className:\"regexp\",begin:/\\//,end:/\\/[gimuy]*/,illegal:/\\n/,contains:[j,{begin:/\\[/,end:/\\]/,relevance:0,contains:[j]}]}]},ce={className:\"title\",begin:u,relevance:0},le={className:\"title\",begin:_,relevance:0},pe={begin:\"\\\\.\\\\s*\"+_,relevance:0};var de=Object.freeze({__proto__:null,MATCH_NOTHING_RE:/\\b\\B/,IDENT_RE:u,UNDERSCORE_IDENT_RE:_,NUMBER_RE:w,C_NUMBER_RE:x,BINARY_NUMBER_RE:C,RE_STARTERS_RE:\"!|!=|!==|%|%=|&|&&|&=|\\\\*|\\\\*=|\\\\+|\\\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\\\?|\\\\[|\\\\{|\\\\(|\\\\^|\\\\^=|\\\\||\\\\|=|\\\\|\\\\||~\",SHEBANG:(s={})=>{const o=/^#![ ]*\\//;return s.binary&&(s.begin=function concat(...s){return s.map((s=>source(s))).join(\"\")}(o,/.*\\b/,s.binary,/\\b.*/)),inherit({className:\"meta\",begin:o,end:/$/,relevance:0,\"on:begin\":(s,o)=>{0!==s.index&&o.ignoreMatch()}},s)},BACKSLASH_ESCAPE:j,APOS_STRING_MODE:L,QUOTE_STRING_MODE:B,PHRASAL_WORDS_MODE:$,COMMENT,C_LINE_COMMENT_MODE:U,C_BLOCK_COMMENT_MODE:V,HASH_COMMENT_MODE:z,NUMBER_MODE:Y,C_NUMBER_MODE:Z,BINARY_NUMBER_MODE:ee,CSS_NUMBER_MODE:ie,REGEXP_MODE:ae,TITLE_MODE:ce,UNDERSCORE_TITLE_MODE:le,METHOD_GUARD:pe,END_SAME_AS_BEGIN:function(s){return Object.assign(s,{\"on:begin\":(s,o)=>{o.data._beginMatch=s[1]},\"on:end\":(s,o)=>{o.data._beginMatch!==s[1]&&o.ignoreMatch()}})}});function skipIfhasPrecedingDot(s,o){\".\"===s.input[s.index-1]&&o.ignoreMatch()}function beginKeywords(s,o){o&&s.beginKeywords&&(s.begin=\"\\\\b(\"+s.beginKeywords.split(\" \").join(\"|\")+\")(?!\\\\.)(?=\\\\b|\\\\s)\",s.__beforeBegin=skipIfhasPrecedingDot,s.keywords=s.keywords||s.beginKeywords,delete s.beginKeywords,void 0===s.relevance&&(s.relevance=0))}function compileIllegal(s,o){Array.isArray(s.illegal)&&(s.illegal=function either(...s){return\"(\"+s.map((s=>source(s))).join(\"|\")+\")\"}(...s.illegal))}function compileMatch(s,o){if(s.match){if(s.begin||s.end)throw new Error(\"begin & end are not supported with match\");s.begin=s.match,delete s.match}}function compileRelevance(s,o){void 0===s.relevance&&(s.relevance=1)}const fe=[\"of\",\"and\",\"for\",\"in\",\"not\",\"or\",\"if\",\"then\",\"parent\",\"list\",\"value\"];function compileKeywords(s,o,i=\"keyword\"){const a={};return\"string\"==typeof s?compileList(i,s.split(\" \")):Array.isArray(s)?compileList(i,s):Object.keys(s).forEach((function(i){Object.assign(a,compileKeywords(s[i],o,i))})),a;function compileList(s,i){o&&(i=i.map((s=>s.toLowerCase()))),i.forEach((function(o){const i=o.split(\"|\");a[i[0]]=[s,scoreForKeyword(i[0],i[1])]}))}}function scoreForKeyword(s,o){return o?Number(o):function commonKeyword(s){return fe.includes(s.toLowerCase())}(s)?0:1}function compileLanguage(s,{plugins:o}){function langRe(o,i){return new RegExp(source(o),\"m\"+(s.case_insensitive?\"i\":\"\")+(i?\"g\":\"\"))}class MultiRegex{constructor(){this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}addRule(s,o){o.position=this.position++,this.matchIndexes[this.matchAt]=o,this.regexes.push([o,s]),this.matchAt+=function countMatchGroups(s){return new RegExp(s.toString()+\"|\").exec(\"\").length-1}(s)+1}compile(){0===this.regexes.length&&(this.exec=()=>null);const s=this.regexes.map((s=>s[1]));this.matcherRe=langRe(function join(s,o=\"|\"){let i=0;return s.map((s=>{i+=1;const o=i;let u=source(s),_=\"\";for(;u.length>0;){const s=a.exec(u);if(!s){_+=u;break}_+=u.substring(0,s.index),u=u.substring(s.index+s[0].length),\"\\\\\"===s[0][0]&&s[1]?_+=\"\\\\\"+String(Number(s[1])+o):(_+=s[0],\"(\"===s[0]&&i++)}return _})).map((s=>`(${s})`)).join(o)}(s),!0),this.lastIndex=0}exec(s){this.matcherRe.lastIndex=this.lastIndex;const o=this.matcherRe.exec(s);if(!o)return null;const i=o.findIndex(((s,o)=>o>0&&void 0!==s)),a=this.matchIndexes[i];return o.splice(0,i),Object.assign(o,a)}}class ResumableMultiRegex{constructor(){this.rules=[],this.multiRegexes=[],this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(s){if(this.multiRegexes[s])return this.multiRegexes[s];const o=new MultiRegex;return this.rules.slice(s).forEach((([s,i])=>o.addRule(s,i))),o.compile(),this.multiRegexes[s]=o,o}resumingScanAtSamePosition(){return 0!==this.regexIndex}considerAll(){this.regexIndex=0}addRule(s,o){this.rules.push([s,o]),\"begin\"===o.type&&this.count++}exec(s){const o=this.getMatcher(this.regexIndex);o.lastIndex=this.lastIndex;let i=o.exec(s);if(this.resumingScanAtSamePosition())if(i&&i.index===this.lastIndex);else{const o=this.getMatcher(0);o.lastIndex=this.lastIndex+1,i=o.exec(s)}return i&&(this.regexIndex+=i.position+1,this.regexIndex===this.count&&this.considerAll()),i}}if(s.compilerExtensions||(s.compilerExtensions=[]),s.contains&&s.contains.includes(\"self\"))throw new Error(\"ERR: contains `self` is not supported at the top-level of a language. See documentation.\");return s.classNameAliases=inherit(s.classNameAliases||{}),function compileMode(o,i){const a=o;if(o.isCompiled)return a;[compileMatch].forEach((s=>s(o,i))),s.compilerExtensions.forEach((s=>s(o,i))),o.__beforeBegin=null,[beginKeywords,compileIllegal,compileRelevance].forEach((s=>s(o,i))),o.isCompiled=!0;let u=null;if(\"object\"==typeof o.keywords&&(u=o.keywords.$pattern,delete o.keywords.$pattern),o.keywords&&(o.keywords=compileKeywords(o.keywords,s.case_insensitive)),o.lexemes&&u)throw new Error(\"ERR: Prefer `keywords.$pattern` to `mode.lexemes`, BOTH are not allowed. (see mode reference) \");return u=u||o.lexemes||/\\w+/,a.keywordPatternRe=langRe(u,!0),i&&(o.begin||(o.begin=/\\B|\\b/),a.beginRe=langRe(o.begin),o.endSameAsBegin&&(o.end=o.begin),o.end||o.endsWithParent||(o.end=/\\B|\\b/),o.end&&(a.endRe=langRe(o.end)),a.terminatorEnd=source(o.end)||\"\",o.endsWithParent&&i.terminatorEnd&&(a.terminatorEnd+=(o.end?\"|\":\"\")+i.terminatorEnd)),o.illegal&&(a.illegalRe=langRe(o.illegal)),o.contains||(o.contains=[]),o.contains=[].concat(...o.contains.map((function(s){return function expandOrCloneMode(s){s.variants&&!s.cachedVariants&&(s.cachedVariants=s.variants.map((function(o){return inherit(s,{variants:null},o)})));if(s.cachedVariants)return s.cachedVariants;if(dependencyOnParent(s))return inherit(s,{starts:s.starts?inherit(s.starts):null});if(Object.isFrozen(s))return inherit(s);return s}(\"self\"===s?o:s)}))),o.contains.forEach((function(s){compileMode(s,a)})),o.starts&&compileMode(o.starts,i),a.matcher=function buildModeRegex(s){const o=new ResumableMultiRegex;return s.contains.forEach((s=>o.addRule(s.begin,{rule:s,type:\"begin\"}))),s.terminatorEnd&&o.addRule(s.terminatorEnd,{type:\"end\"}),s.illegal&&o.addRule(s.illegal,{type:\"illegal\"}),o}(a),a}(s)}function dependencyOnParent(s){return!!s&&(s.endsWithParent||dependencyOnParent(s.starts))}function BuildVuePlugin(s){const o={props:[\"language\",\"code\",\"autodetect\"],data:function(){return{detectedLanguage:\"\",unknownLanguage:!1}},computed:{className(){return this.unknownLanguage?\"\":\"hljs \"+this.detectedLanguage},highlighted(){if(!this.autoDetect&&!s.getLanguage(this.language))return console.warn(`The language \"${this.language}\" you specified could not be found.`),this.unknownLanguage=!0,escapeHTML(this.code);let o={};return this.autoDetect?(o=s.highlightAuto(this.code),this.detectedLanguage=o.language):(o=s.highlight(this.language,this.code,this.ignoreIllegals),this.detectedLanguage=this.language),o.value},autoDetect(){return!this.language||function hasValueOrEmptyAttribute(s){return Boolean(s||\"\"===s)}(this.autodetect)},ignoreIllegals:()=>!0},render(s){return s(\"pre\",{},[s(\"code\",{class:this.className,domProps:{innerHTML:this.highlighted}})])}};return{Component:o,VuePlugin:{install(s){s.component(\"highlightjs\",o)}}}}const ye={\"after:highlightElement\":({el:s,result:o,text:i})=>{const a=nodeStream(s);if(!a.length)return;const u=document.createElement(\"div\");u.innerHTML=o.value,o.value=function mergeStreams(s,o,i){let a=0,u=\"\";const _=[];function selectStream(){return s.length&&o.length?s[0].offset!==o[0].offset?s[0].offset\"}function close(s){u+=\"\"}function render(s){(\"start\"===s.event?open:close)(s.node)}for(;s.length||o.length;){let o=selectStream();if(u+=escapeHTML(i.substring(a,o[0].offset)),a=o[0].offset,o===s){_.reverse().forEach(close);do{render(o.splice(0,1)[0]),o=selectStream()}while(o===s&&o.length&&o[0].offset===a);_.reverse().forEach(open)}else\"start\"===o[0].event?_.push(o[0].node):_.pop(),render(o.splice(0,1)[0])}return u+escapeHTML(i.substr(a))}(a,nodeStream(u),i)}};function tag(s){return s.nodeName.toLowerCase()}function nodeStream(s){const o=[];return function _nodeStream(s,i){for(let a=s.firstChild;a;a=a.nextSibling)3===a.nodeType?i+=a.nodeValue.length:1===a.nodeType&&(o.push({event:\"start\",offset:i,node:a}),i=_nodeStream(a,i),tag(a).match(/br|hr|img|input/)||o.push({event:\"stop\",offset:i,node:a}));return i}(s,0),o}const be={},error=s=>{console.error(s)},warn=(s,...o)=>{console.log(`WARN: ${s}`,...o)},deprecated=(s,o)=>{be[`${s}/${o}`]||(console.log(`Deprecated as of ${s}. ${o}`),be[`${s}/${o}`]=!0)},_e=escapeHTML,Se=inherit,we=Symbol(\"nomatch\");var xe=function(s){const i=Object.create(null),a=Object.create(null),u=[];let _=!0;const w=/(^(<[^>]+>|\\t|)+|\\n)/gm,x=\"Could not find the language '{}', did you forget to load/include a language module?\",C={disableAutodetect:!0,name:\"Plain text\",contains:[]};let j={noHighlightRe:/^(no-?highlight)$/i,languageDetectRe:/\\blang(?:uage)?-([\\w-]+)\\b/i,classPrefix:\"hljs-\",tabReplace:null,useBR:!1,languages:null,__emitter:TokenTreeEmitter};function shouldNotHighlight(s){return j.noHighlightRe.test(s)}function highlight(s,o,i,a){let u=\"\",_=\"\";\"object\"==typeof o?(u=s,i=o.ignoreIllegals,_=o.language,a=void 0):(deprecated(\"10.7.0\",\"highlight(lang, code, ...args) has been deprecated.\"),deprecated(\"10.7.0\",\"Please use highlight(code, options) instead.\\nhttps://github.com/highlightjs/highlight.js/issues/2277\"),_=s,u=o);const w={code:u,language:_};fire(\"before:highlight\",w);const x=w.result?w.result:_highlight(w.language,w.code,i,a);return x.code=w.code,fire(\"after:highlight\",x),x}function _highlight(s,o,a,w){function keywordData(s,o){const i=L.case_insensitive?o[0].toLowerCase():o[0];return Object.prototype.hasOwnProperty.call(s.keywords,i)&&s.keywords[i]}function processBuffer(){null!=U.subLanguage?function processSubLanguage(){if(\"\"===Y)return;let s=null;if(\"string\"==typeof U.subLanguage){if(!i[U.subLanguage])return void z.addText(Y);s=_highlight(U.subLanguage,Y,!0,V[U.subLanguage]),V[U.subLanguage]=s.top}else s=highlightAuto(Y,U.subLanguage.length?U.subLanguage:null);U.relevance>0&&(Z+=s.relevance),z.addSublanguage(s.emitter,s.language)}():function processKeywords(){if(!U.keywords)return void z.addText(Y);let s=0;U.keywordPatternRe.lastIndex=0;let o=U.keywordPatternRe.exec(Y),i=\"\";for(;o;){i+=Y.substring(s,o.index);const a=keywordData(U,o);if(a){const[s,u]=a;if(z.addText(i),i=\"\",Z+=u,s.startsWith(\"_\"))i+=o[0];else{const i=L.classNameAliases[s]||s;z.addKeyword(o[0],i)}}else i+=o[0];s=U.keywordPatternRe.lastIndex,o=U.keywordPatternRe.exec(Y)}i+=Y.substr(s),z.addText(i)}(),Y=\"\"}function startNewMode(s){return s.className&&z.openNode(L.classNameAliases[s.className]||s.className),U=Object.create(s,{parent:{value:U}}),U}function endOfMode(s,o,i){let a=function startsWith(s,o){const i=s&&s.exec(o);return i&&0===i.index}(s.endRe,i);if(a){if(s[\"on:end\"]){const i=new Response(s);s[\"on:end\"](o,i),i.isMatchIgnored&&(a=!1)}if(a){for(;s.endsParent&&s.parent;)s=s.parent;return s}}if(s.endsWithParent)return endOfMode(s.parent,o,i)}function doIgnore(s){return 0===U.matcher.regexIndex?(Y+=s[0],1):(ae=!0,0)}function doBeginMatch(s){const o=s[0],i=s.rule,a=new Response(i),u=[i.__beforeBegin,i[\"on:begin\"]];for(const i of u)if(i&&(i(s,a),a.isMatchIgnored))return doIgnore(o);return i&&i.endSameAsBegin&&(i.endRe=function escape(s){return new RegExp(s.replace(/[-/\\\\^$*+?.()|[\\]{}]/g,\"\\\\$&\"),\"m\")}(o)),i.skip?Y+=o:(i.excludeBegin&&(Y+=o),processBuffer(),i.returnBegin||i.excludeBegin||(Y=o)),startNewMode(i),i.returnBegin?0:o.length}function doEndMatch(s){const i=s[0],a=o.substr(s.index),u=endOfMode(U,s,a);if(!u)return we;const _=U;_.skip?Y+=i:(_.returnEnd||_.excludeEnd||(Y+=i),processBuffer(),_.excludeEnd&&(Y=i));do{U.className&&z.closeNode(),U.skip||U.subLanguage||(Z+=U.relevance),U=U.parent}while(U!==u.parent);return u.starts&&(u.endSameAsBegin&&(u.starts.endRe=u.endRe),startNewMode(u.starts)),_.returnEnd?0:i.length}let C={};function processLexeme(i,u){const w=u&&u[0];if(Y+=i,null==w)return processBuffer(),0;if(\"begin\"===C.type&&\"end\"===u.type&&C.index===u.index&&\"\"===w){if(Y+=o.slice(u.index,u.index+1),!_){const o=new Error(\"0 width match regex\");throw o.languageName=s,o.badRule=C.rule,o}return 1}if(C=u,\"begin\"===u.type)return doBeginMatch(u);if(\"illegal\"===u.type&&!a){const s=new Error('Illegal lexeme \"'+w+'\" for mode \"'+(U.className||\"\")+'\"');throw s.mode=U,s}if(\"end\"===u.type){const s=doEndMatch(u);if(s!==we)return s}if(\"illegal\"===u.type&&\"\"===w)return 1;if(ie>1e5&&ie>3*u.index){throw new Error(\"potential infinite loop, way more iterations than matches\")}return Y+=w,w.length}const L=getLanguage(s);if(!L)throw error(x.replace(\"{}\",s)),new Error('Unknown language: \"'+s+'\"');const B=compileLanguage(L,{plugins:u});let $=\"\",U=w||B;const V={},z=new j.__emitter(j);!function processContinuations(){const s=[];for(let o=U;o!==L;o=o.parent)o.className&&s.unshift(o.className);s.forEach((s=>z.openNode(s)))}();let Y=\"\",Z=0,ee=0,ie=0,ae=!1;try{for(U.matcher.considerAll();;){ie++,ae?ae=!1:U.matcher.considerAll(),U.matcher.lastIndex=ee;const s=U.matcher.exec(o);if(!s)break;const i=processLexeme(o.substring(ee,s.index),s);ee=s.index+i}return processLexeme(o.substr(ee)),z.closeAllNodes(),z.finalize(),$=z.toHTML(),{relevance:Math.floor(Z),value:$,language:s,illegal:!1,emitter:z,top:U}}catch(i){if(i.message&&i.message.includes(\"Illegal\"))return{illegal:!0,illegalBy:{msg:i.message,context:o.slice(ee-100,ee+100),mode:i.mode},sofar:$,relevance:0,value:_e(o),emitter:z};if(_)return{illegal:!1,relevance:0,value:_e(o),emitter:z,language:s,top:U,errorRaised:i};throw i}}function highlightAuto(s,o){o=o||j.languages||Object.keys(i);const a=function justTextHighlightResult(s){const o={relevance:0,emitter:new j.__emitter(j),value:_e(s),illegal:!1,top:C};return o.emitter.addText(s),o}(s),u=o.filter(getLanguage).filter(autoDetection).map((o=>_highlight(o,s,!1)));u.unshift(a);const _=u.sort(((s,o)=>{if(s.relevance!==o.relevance)return o.relevance-s.relevance;if(s.language&&o.language){if(getLanguage(s.language).supersetOf===o.language)return 1;if(getLanguage(o.language).supersetOf===s.language)return-1}return 0})),[w,x]=_,L=w;return L.second_best=x,L}const L={\"before:highlightElement\":({el:s})=>{j.useBR&&(s.innerHTML=s.innerHTML.replace(/\\n/g,\"\").replace(//g,\"\\n\"))},\"after:highlightElement\":({result:s})=>{j.useBR&&(s.value=s.value.replace(/\\n/g,\"{\"use strict\";s.exports=\"undefined\"!=typeof Reflect&&Reflect&&Reflect.apply},47181:(s,o,i)=>{\"use strict\";var a=i(95116).IteratorPrototype,u=i(58075),_=i(75817),w=i(14840),x=i(93742),returnThis=function(){return this};s.exports=function(s,o,i,C){var j=o+\" Iterator\";return s.prototype=u(a,{next:_(+!C,i)}),w(s,j,!1,!0),x[j]=returnThis,s}},47237:s=>{s.exports=function baseProperty(s){return function(o){return null==o?void 0:o[s]}}},47248:(s,o,i)=>{var a=i(16547),u=i(51234);s.exports=function zipObject(s,o){return u(s||[],o||[],a)}},47422:(s,o,i)=>{var a=i(31769),u=i(77797);s.exports=function baseGet(s,o){for(var i=0,_=(o=a(o,s)).length;null!=s&&i<_;)s=s[u(o[i++])];return i&&i==_?s:void 0}},47473:s=>{var o=Function.prototype.toString;s.exports=function toSource(s){if(null!=s){try{return o.call(s)}catch(s){}try{return s+\"\"}catch(s){}}return\"\"}},47886:(s,o,i)=>{var a=i(5861),u=i(40346);s.exports=function isWeakMap(s){return u(s)&&\"[object WeakMap]\"==a(s)}},47934:(s,o,i)=>{s.exports={ary:i(64626),assign:i(74733),clone:i(32629),curry:i(49747),forEach:i(83729),isArray:i(56449),isError:i(23546),isFunction:i(1882),isWeakMap:i(47886),iteratee:i(33855),keys:i(88984),rearg:i(84195),toInteger:i(61489),toPath:i(42072)}},48152:(s,o,i)=>{var a=i(28303),u=a&&new a;s.exports=u},48287:(s,o,i)=>{\"use strict\";const a=i(67526),u=i(251),_=\"function\"==typeof Symbol&&\"function\"==typeof Symbol.for?Symbol.for(\"nodejs.util.inspect.custom\"):null;o.Buffer=Buffer,o.SlowBuffer=function SlowBuffer(s){+s!=s&&(s=0);return Buffer.alloc(+s)},o.INSPECT_MAX_BYTES=50;const w=2147483647;function createBuffer(s){if(s>w)throw new RangeError('The value \"'+s+'\" is invalid for option \"size\"');const o=new Uint8Array(s);return Object.setPrototypeOf(o,Buffer.prototype),o}function Buffer(s,o,i){if(\"number\"==typeof s){if(\"string\"==typeof o)throw new TypeError('The \"string\" argument must be of type string. Received type number');return allocUnsafe(s)}return from(s,o,i)}function from(s,o,i){if(\"string\"==typeof s)return function fromString(s,o){\"string\"==typeof o&&\"\"!==o||(o=\"utf8\");if(!Buffer.isEncoding(o))throw new TypeError(\"Unknown encoding: \"+o);const i=0|byteLength(s,o);let a=createBuffer(i);const u=a.write(s,o);u!==i&&(a=a.slice(0,u));return a}(s,o);if(ArrayBuffer.isView(s))return function fromArrayView(s){if(isInstance(s,Uint8Array)){const o=new Uint8Array(s);return fromArrayBuffer(o.buffer,o.byteOffset,o.byteLength)}return fromArrayLike(s)}(s);if(null==s)throw new TypeError(\"The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type \"+typeof s);if(isInstance(s,ArrayBuffer)||s&&isInstance(s.buffer,ArrayBuffer))return fromArrayBuffer(s,o,i);if(\"undefined\"!=typeof SharedArrayBuffer&&(isInstance(s,SharedArrayBuffer)||s&&isInstance(s.buffer,SharedArrayBuffer)))return fromArrayBuffer(s,o,i);if(\"number\"==typeof s)throw new TypeError('The \"value\" argument must not be of type number. Received type number');const a=s.valueOf&&s.valueOf();if(null!=a&&a!==s)return Buffer.from(a,o,i);const u=function fromObject(s){if(Buffer.isBuffer(s)){const o=0|checked(s.length),i=createBuffer(o);return 0===i.length||s.copy(i,0,0,o),i}if(void 0!==s.length)return\"number\"!=typeof s.length||numberIsNaN(s.length)?createBuffer(0):fromArrayLike(s);if(\"Buffer\"===s.type&&Array.isArray(s.data))return fromArrayLike(s.data)}(s);if(u)return u;if(\"undefined\"!=typeof Symbol&&null!=Symbol.toPrimitive&&\"function\"==typeof s[Symbol.toPrimitive])return Buffer.from(s[Symbol.toPrimitive](\"string\"),o,i);throw new TypeError(\"The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type \"+typeof s)}function assertSize(s){if(\"number\"!=typeof s)throw new TypeError('\"size\" argument must be of type number');if(s<0)throw new RangeError('The value \"'+s+'\" is invalid for option \"size\"')}function allocUnsafe(s){return assertSize(s),createBuffer(s<0?0:0|checked(s))}function fromArrayLike(s){const o=s.length<0?0:0|checked(s.length),i=createBuffer(o);for(let a=0;a=w)throw new RangeError(\"Attempt to allocate Buffer larger than maximum size: 0x\"+w.toString(16)+\" bytes\");return 0|s}function byteLength(s,o){if(Buffer.isBuffer(s))return s.length;if(ArrayBuffer.isView(s)||isInstance(s,ArrayBuffer))return s.byteLength;if(\"string\"!=typeof s)throw new TypeError('The \"string\" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof s);const i=s.length,a=arguments.length>2&&!0===arguments[2];if(!a&&0===i)return 0;let u=!1;for(;;)switch(o){case\"ascii\":case\"latin1\":case\"binary\":return i;case\"utf8\":case\"utf-8\":return utf8ToBytes(s).length;case\"ucs2\":case\"ucs-2\":case\"utf16le\":case\"utf-16le\":return 2*i;case\"hex\":return i>>>1;case\"base64\":return base64ToBytes(s).length;default:if(u)return a?-1:utf8ToBytes(s).length;o=(\"\"+o).toLowerCase(),u=!0}}function slowToString(s,o,i){let a=!1;if((void 0===o||o<0)&&(o=0),o>this.length)return\"\";if((void 0===i||i>this.length)&&(i=this.length),i<=0)return\"\";if((i>>>=0)<=(o>>>=0))return\"\";for(s||(s=\"utf8\");;)switch(s){case\"hex\":return hexSlice(this,o,i);case\"utf8\":case\"utf-8\":return utf8Slice(this,o,i);case\"ascii\":return asciiSlice(this,o,i);case\"latin1\":case\"binary\":return latin1Slice(this,o,i);case\"base64\":return base64Slice(this,o,i);case\"ucs2\":case\"ucs-2\":case\"utf16le\":case\"utf-16le\":return utf16leSlice(this,o,i);default:if(a)throw new TypeError(\"Unknown encoding: \"+s);s=(s+\"\").toLowerCase(),a=!0}}function swap(s,o,i){const a=s[o];s[o]=s[i],s[i]=a}function bidirectionalIndexOf(s,o,i,a,u){if(0===s.length)return-1;if(\"string\"==typeof i?(a=i,i=0):i>2147483647?i=2147483647:i<-2147483648&&(i=-2147483648),numberIsNaN(i=+i)&&(i=u?0:s.length-1),i<0&&(i=s.length+i),i>=s.length){if(u)return-1;i=s.length-1}else if(i<0){if(!u)return-1;i=0}if(\"string\"==typeof o&&(o=Buffer.from(o,a)),Buffer.isBuffer(o))return 0===o.length?-1:arrayIndexOf(s,o,i,a,u);if(\"number\"==typeof o)return o&=255,\"function\"==typeof Uint8Array.prototype.indexOf?u?Uint8Array.prototype.indexOf.call(s,o,i):Uint8Array.prototype.lastIndexOf.call(s,o,i):arrayIndexOf(s,[o],i,a,u);throw new TypeError(\"val must be string, number or Buffer\")}function arrayIndexOf(s,o,i,a,u){let _,w=1,x=s.length,C=o.length;if(void 0!==a&&(\"ucs2\"===(a=String(a).toLowerCase())||\"ucs-2\"===a||\"utf16le\"===a||\"utf-16le\"===a)){if(s.length<2||o.length<2)return-1;w=2,x/=2,C/=2,i/=2}function read(s,o){return 1===w?s[o]:s.readUInt16BE(o*w)}if(u){let a=-1;for(_=i;_x&&(i=x-C),_=i;_>=0;_--){let i=!0;for(let a=0;au&&(a=u):a=u;const _=o.length;let w;for(a>_/2&&(a=_/2),w=0;w>8,u=i%256,_.push(u),_.push(a);return _}(o,s.length-i),s,i,a)}function base64Slice(s,o,i){return 0===o&&i===s.length?a.fromByteArray(s):a.fromByteArray(s.slice(o,i))}function utf8Slice(s,o,i){i=Math.min(s.length,i);const a=[];let u=o;for(;u239?4:o>223?3:o>191?2:1;if(u+w<=i){let i,a,x,C;switch(w){case 1:o<128&&(_=o);break;case 2:i=s[u+1],128==(192&i)&&(C=(31&o)<<6|63&i,C>127&&(_=C));break;case 3:i=s[u+1],a=s[u+2],128==(192&i)&&128==(192&a)&&(C=(15&o)<<12|(63&i)<<6|63&a,C>2047&&(C<55296||C>57343)&&(_=C));break;case 4:i=s[u+1],a=s[u+2],x=s[u+3],128==(192&i)&&128==(192&a)&&128==(192&x)&&(C=(15&o)<<18|(63&i)<<12|(63&a)<<6|63&x,C>65535&&C<1114112&&(_=C))}}null===_?(_=65533,w=1):_>65535&&(_-=65536,a.push(_>>>10&1023|55296),_=56320|1023&_),a.push(_),u+=w}return function decodeCodePointsArray(s){const o=s.length;if(o<=x)return String.fromCharCode.apply(String,s);let i=\"\",a=0;for(;aa.length?(Buffer.isBuffer(o)||(o=Buffer.from(o)),o.copy(a,u)):Uint8Array.prototype.set.call(a,o,u);else{if(!Buffer.isBuffer(o))throw new TypeError('\"list\" argument must be an Array of Buffers');o.copy(a,u)}u+=o.length}return a},Buffer.byteLength=byteLength,Buffer.prototype._isBuffer=!0,Buffer.prototype.swap16=function swap16(){const s=this.length;if(s%2!=0)throw new RangeError(\"Buffer size must be a multiple of 16-bits\");for(let o=0;oi&&(s+=\" ... \"),\"\"},_&&(Buffer.prototype[_]=Buffer.prototype.inspect),Buffer.prototype.compare=function compare(s,o,i,a,u){if(isInstance(s,Uint8Array)&&(s=Buffer.from(s,s.offset,s.byteLength)),!Buffer.isBuffer(s))throw new TypeError('The \"target\" argument must be one of type Buffer or Uint8Array. Received type '+typeof s);if(void 0===o&&(o=0),void 0===i&&(i=s?s.length:0),void 0===a&&(a=0),void 0===u&&(u=this.length),o<0||i>s.length||a<0||u>this.length)throw new RangeError(\"out of range index\");if(a>=u&&o>=i)return 0;if(a>=u)return-1;if(o>=i)return 1;if(this===s)return 0;let _=(u>>>=0)-(a>>>=0),w=(i>>>=0)-(o>>>=0);const x=Math.min(_,w),C=this.slice(a,u),j=s.slice(o,i);for(let s=0;s>>=0,isFinite(i)?(i>>>=0,void 0===a&&(a=\"utf8\")):(a=i,i=void 0)}const u=this.length-o;if((void 0===i||i>u)&&(i=u),s.length>0&&(i<0||o<0)||o>this.length)throw new RangeError(\"Attempt to write outside buffer bounds\");a||(a=\"utf8\");let _=!1;for(;;)switch(a){case\"hex\":return hexWrite(this,s,o,i);case\"utf8\":case\"utf-8\":return utf8Write(this,s,o,i);case\"ascii\":case\"latin1\":case\"binary\":return asciiWrite(this,s,o,i);case\"base64\":return base64Write(this,s,o,i);case\"ucs2\":case\"ucs-2\":case\"utf16le\":case\"utf-16le\":return ucs2Write(this,s,o,i);default:if(_)throw new TypeError(\"Unknown encoding: \"+a);a=(\"\"+a).toLowerCase(),_=!0}},Buffer.prototype.toJSON=function toJSON(){return{type:\"Buffer\",data:Array.prototype.slice.call(this._arr||this,0)}};const x=4096;function asciiSlice(s,o,i){let a=\"\";i=Math.min(s.length,i);for(let u=o;ua)&&(i=a);let u=\"\";for(let a=o;ai)throw new RangeError(\"Trying to access beyond buffer length\")}function checkInt(s,o,i,a,u,_){if(!Buffer.isBuffer(s))throw new TypeError('\"buffer\" argument must be a Buffer instance');if(o>u||o<_)throw new RangeError('\"value\" argument is out of bounds');if(i+a>s.length)throw new RangeError(\"Index out of range\")}function wrtBigUInt64LE(s,o,i,a,u){checkIntBI(o,a,u,s,i,7);let _=Number(o&BigInt(4294967295));s[i++]=_,_>>=8,s[i++]=_,_>>=8,s[i++]=_,_>>=8,s[i++]=_;let w=Number(o>>BigInt(32)&BigInt(4294967295));return s[i++]=w,w>>=8,s[i++]=w,w>>=8,s[i++]=w,w>>=8,s[i++]=w,i}function wrtBigUInt64BE(s,o,i,a,u){checkIntBI(o,a,u,s,i,7);let _=Number(o&BigInt(4294967295));s[i+7]=_,_>>=8,s[i+6]=_,_>>=8,s[i+5]=_,_>>=8,s[i+4]=_;let w=Number(o>>BigInt(32)&BigInt(4294967295));return s[i+3]=w,w>>=8,s[i+2]=w,w>>=8,s[i+1]=w,w>>=8,s[i]=w,i+8}function checkIEEE754(s,o,i,a,u,_){if(i+a>s.length)throw new RangeError(\"Index out of range\");if(i<0)throw new RangeError(\"Index out of range\")}function writeFloat(s,o,i,a,_){return o=+o,i>>>=0,_||checkIEEE754(s,0,i,4),u.write(s,o,i,a,23,4),i+4}function writeDouble(s,o,i,a,_){return o=+o,i>>>=0,_||checkIEEE754(s,0,i,8),u.write(s,o,i,a,52,8),i+8}Buffer.prototype.slice=function slice(s,o){const i=this.length;(s=~~s)<0?(s+=i)<0&&(s=0):s>i&&(s=i),(o=void 0===o?i:~~o)<0?(o+=i)<0&&(o=0):o>i&&(o=i),o>>=0,o>>>=0,i||checkOffset(s,o,this.length);let a=this[s],u=1,_=0;for(;++_>>=0,o>>>=0,i||checkOffset(s,o,this.length);let a=this[s+--o],u=1;for(;o>0&&(u*=256);)a+=this[s+--o]*u;return a},Buffer.prototype.readUint8=Buffer.prototype.readUInt8=function readUInt8(s,o){return s>>>=0,o||checkOffset(s,1,this.length),this[s]},Buffer.prototype.readUint16LE=Buffer.prototype.readUInt16LE=function readUInt16LE(s,o){return s>>>=0,o||checkOffset(s,2,this.length),this[s]|this[s+1]<<8},Buffer.prototype.readUint16BE=Buffer.prototype.readUInt16BE=function readUInt16BE(s,o){return s>>>=0,o||checkOffset(s,2,this.length),this[s]<<8|this[s+1]},Buffer.prototype.readUint32LE=Buffer.prototype.readUInt32LE=function readUInt32LE(s,o){return s>>>=0,o||checkOffset(s,4,this.length),(this[s]|this[s+1]<<8|this[s+2]<<16)+16777216*this[s+3]},Buffer.prototype.readUint32BE=Buffer.prototype.readUInt32BE=function readUInt32BE(s,o){return s>>>=0,o||checkOffset(s,4,this.length),16777216*this[s]+(this[s+1]<<16|this[s+2]<<8|this[s+3])},Buffer.prototype.readBigUInt64LE=defineBigIntMethod((function readBigUInt64LE(s){validateNumber(s>>>=0,\"offset\");const o=this[s],i=this[s+7];void 0!==o&&void 0!==i||boundsError(s,this.length-8);const a=o+256*this[++s]+65536*this[++s]+this[++s]*2**24,u=this[++s]+256*this[++s]+65536*this[++s]+i*2**24;return BigInt(a)+(BigInt(u)<>>=0,\"offset\");const o=this[s],i=this[s+7];void 0!==o&&void 0!==i||boundsError(s,this.length-8);const a=o*2**24+65536*this[++s]+256*this[++s]+this[++s],u=this[++s]*2**24+65536*this[++s]+256*this[++s]+i;return(BigInt(a)<>>=0,o>>>=0,i||checkOffset(s,o,this.length);let a=this[s],u=1,_=0;for(;++_=u&&(a-=Math.pow(2,8*o)),a},Buffer.prototype.readIntBE=function readIntBE(s,o,i){s>>>=0,o>>>=0,i||checkOffset(s,o,this.length);let a=o,u=1,_=this[s+--a];for(;a>0&&(u*=256);)_+=this[s+--a]*u;return u*=128,_>=u&&(_-=Math.pow(2,8*o)),_},Buffer.prototype.readInt8=function readInt8(s,o){return s>>>=0,o||checkOffset(s,1,this.length),128&this[s]?-1*(255-this[s]+1):this[s]},Buffer.prototype.readInt16LE=function readInt16LE(s,o){s>>>=0,o||checkOffset(s,2,this.length);const i=this[s]|this[s+1]<<8;return 32768&i?4294901760|i:i},Buffer.prototype.readInt16BE=function readInt16BE(s,o){s>>>=0,o||checkOffset(s,2,this.length);const i=this[s+1]|this[s]<<8;return 32768&i?4294901760|i:i},Buffer.prototype.readInt32LE=function readInt32LE(s,o){return s>>>=0,o||checkOffset(s,4,this.length),this[s]|this[s+1]<<8|this[s+2]<<16|this[s+3]<<24},Buffer.prototype.readInt32BE=function readInt32BE(s,o){return s>>>=0,o||checkOffset(s,4,this.length),this[s]<<24|this[s+1]<<16|this[s+2]<<8|this[s+3]},Buffer.prototype.readBigInt64LE=defineBigIntMethod((function readBigInt64LE(s){validateNumber(s>>>=0,\"offset\");const o=this[s],i=this[s+7];void 0!==o&&void 0!==i||boundsError(s,this.length-8);const a=this[s+4]+256*this[s+5]+65536*this[s+6]+(i<<24);return(BigInt(a)<>>=0,\"offset\");const o=this[s],i=this[s+7];void 0!==o&&void 0!==i||boundsError(s,this.length-8);const a=(o<<24)+65536*this[++s]+256*this[++s]+this[++s];return(BigInt(a)<>>=0,o||checkOffset(s,4,this.length),u.read(this,s,!0,23,4)},Buffer.prototype.readFloatBE=function readFloatBE(s,o){return s>>>=0,o||checkOffset(s,4,this.length),u.read(this,s,!1,23,4)},Buffer.prototype.readDoubleLE=function readDoubleLE(s,o){return s>>>=0,o||checkOffset(s,8,this.length),u.read(this,s,!0,52,8)},Buffer.prototype.readDoubleBE=function readDoubleBE(s,o){return s>>>=0,o||checkOffset(s,8,this.length),u.read(this,s,!1,52,8)},Buffer.prototype.writeUintLE=Buffer.prototype.writeUIntLE=function writeUIntLE(s,o,i,a){if(s=+s,o>>>=0,i>>>=0,!a){checkInt(this,s,o,i,Math.pow(2,8*i)-1,0)}let u=1,_=0;for(this[o]=255&s;++_>>=0,i>>>=0,!a){checkInt(this,s,o,i,Math.pow(2,8*i)-1,0)}let u=i-1,_=1;for(this[o+u]=255&s;--u>=0&&(_*=256);)this[o+u]=s/_&255;return o+i},Buffer.prototype.writeUint8=Buffer.prototype.writeUInt8=function writeUInt8(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,1,255,0),this[o]=255&s,o+1},Buffer.prototype.writeUint16LE=Buffer.prototype.writeUInt16LE=function writeUInt16LE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,2,65535,0),this[o]=255&s,this[o+1]=s>>>8,o+2},Buffer.prototype.writeUint16BE=Buffer.prototype.writeUInt16BE=function writeUInt16BE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,2,65535,0),this[o]=s>>>8,this[o+1]=255&s,o+2},Buffer.prototype.writeUint32LE=Buffer.prototype.writeUInt32LE=function writeUInt32LE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,4,4294967295,0),this[o+3]=s>>>24,this[o+2]=s>>>16,this[o+1]=s>>>8,this[o]=255&s,o+4},Buffer.prototype.writeUint32BE=Buffer.prototype.writeUInt32BE=function writeUInt32BE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,4,4294967295,0),this[o]=s>>>24,this[o+1]=s>>>16,this[o+2]=s>>>8,this[o+3]=255&s,o+4},Buffer.prototype.writeBigUInt64LE=defineBigIntMethod((function writeBigUInt64LE(s,o=0){return wrtBigUInt64LE(this,s,o,BigInt(0),BigInt(\"0xffffffffffffffff\"))})),Buffer.prototype.writeBigUInt64BE=defineBigIntMethod((function writeBigUInt64BE(s,o=0){return wrtBigUInt64BE(this,s,o,BigInt(0),BigInt(\"0xffffffffffffffff\"))})),Buffer.prototype.writeIntLE=function writeIntLE(s,o,i,a){if(s=+s,o>>>=0,!a){const a=Math.pow(2,8*i-1);checkInt(this,s,o,i,a-1,-a)}let u=0,_=1,w=0;for(this[o]=255&s;++u>>=0,!a){const a=Math.pow(2,8*i-1);checkInt(this,s,o,i,a-1,-a)}let u=i-1,_=1,w=0;for(this[o+u]=255&s;--u>=0&&(_*=256);)s<0&&0===w&&0!==this[o+u+1]&&(w=1),this[o+u]=(s/_|0)-w&255;return o+i},Buffer.prototype.writeInt8=function writeInt8(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,1,127,-128),s<0&&(s=255+s+1),this[o]=255&s,o+1},Buffer.prototype.writeInt16LE=function writeInt16LE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,2,32767,-32768),this[o]=255&s,this[o+1]=s>>>8,o+2},Buffer.prototype.writeInt16BE=function writeInt16BE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,2,32767,-32768),this[o]=s>>>8,this[o+1]=255&s,o+2},Buffer.prototype.writeInt32LE=function writeInt32LE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,4,2147483647,-2147483648),this[o]=255&s,this[o+1]=s>>>8,this[o+2]=s>>>16,this[o+3]=s>>>24,o+4},Buffer.prototype.writeInt32BE=function writeInt32BE(s,o,i){return s=+s,o>>>=0,i||checkInt(this,s,o,4,2147483647,-2147483648),s<0&&(s=4294967295+s+1),this[o]=s>>>24,this[o+1]=s>>>16,this[o+2]=s>>>8,this[o+3]=255&s,o+4},Buffer.prototype.writeBigInt64LE=defineBigIntMethod((function writeBigInt64LE(s,o=0){return wrtBigUInt64LE(this,s,o,-BigInt(\"0x8000000000000000\"),BigInt(\"0x7fffffffffffffff\"))})),Buffer.prototype.writeBigInt64BE=defineBigIntMethod((function writeBigInt64BE(s,o=0){return wrtBigUInt64BE(this,s,o,-BigInt(\"0x8000000000000000\"),BigInt(\"0x7fffffffffffffff\"))})),Buffer.prototype.writeFloatLE=function writeFloatLE(s,o,i){return writeFloat(this,s,o,!0,i)},Buffer.prototype.writeFloatBE=function writeFloatBE(s,o,i){return writeFloat(this,s,o,!1,i)},Buffer.prototype.writeDoubleLE=function writeDoubleLE(s,o,i){return writeDouble(this,s,o,!0,i)},Buffer.prototype.writeDoubleBE=function writeDoubleBE(s,o,i){return writeDouble(this,s,o,!1,i)},Buffer.prototype.copy=function copy(s,o,i,a){if(!Buffer.isBuffer(s))throw new TypeError(\"argument should be a Buffer\");if(i||(i=0),a||0===a||(a=this.length),o>=s.length&&(o=s.length),o||(o=0),a>0&&a=this.length)throw new RangeError(\"Index out of range\");if(a<0)throw new RangeError(\"sourceEnd out of bounds\");a>this.length&&(a=this.length),s.length-o>>=0,i=void 0===i?this.length:i>>>0,s||(s=0),\"number\"==typeof s)for(u=o;u=a+4;i-=3)o=`_${s.slice(i-3,i)}${o}`;return`${s.slice(0,i)}${o}`}function checkIntBI(s,o,i,a,u,_){if(s>i||s3?0===o||o===BigInt(0)?`>= 0${a} and < 2${a} ** ${8*(_+1)}${a}`:`>= -(2${a} ** ${8*(_+1)-1}${a}) and < 2 ** ${8*(_+1)-1}${a}`:`>= ${o}${a} and <= ${i}${a}`,new C.ERR_OUT_OF_RANGE(\"value\",u,s)}!function checkBounds(s,o,i){validateNumber(o,\"offset\"),void 0!==s[o]&&void 0!==s[o+i]||boundsError(o,s.length-(i+1))}(a,u,_)}function validateNumber(s,o){if(\"number\"!=typeof s)throw new C.ERR_INVALID_ARG_TYPE(o,\"number\",s)}function boundsError(s,o,i){if(Math.floor(s)!==s)throw validateNumber(s,i),new C.ERR_OUT_OF_RANGE(i||\"offset\",\"an integer\",s);if(o<0)throw new C.ERR_BUFFER_OUT_OF_BOUNDS;throw new C.ERR_OUT_OF_RANGE(i||\"offset\",`>= ${i?1:0} and <= ${o}`,s)}E(\"ERR_BUFFER_OUT_OF_BOUNDS\",(function(s){return s?`${s} is outside of buffer bounds`:\"Attempt to access memory outside buffer bounds\"}),RangeError),E(\"ERR_INVALID_ARG_TYPE\",(function(s,o){return`The \"${s}\" argument must be of type number. Received type ${typeof o}`}),TypeError),E(\"ERR_OUT_OF_RANGE\",(function(s,o,i){let a=`The value of \"${s}\" is out of range.`,u=i;return Number.isInteger(i)&&Math.abs(i)>2**32?u=addNumericalSeparator(String(i)):\"bigint\"==typeof i&&(u=String(i),(i>BigInt(2)**BigInt(32)||i<-(BigInt(2)**BigInt(32)))&&(u=addNumericalSeparator(u)),u+=\"n\"),a+=` It must be ${o}. Received ${u}`,a}),RangeError);const j=/[^+/0-9A-Za-z-_]/g;function utf8ToBytes(s,o){let i;o=o||1/0;const a=s.length;let u=null;const _=[];for(let w=0;w55295&&i<57344){if(!u){if(i>56319){(o-=3)>-1&&_.push(239,191,189);continue}if(w+1===a){(o-=3)>-1&&_.push(239,191,189);continue}u=i;continue}if(i<56320){(o-=3)>-1&&_.push(239,191,189),u=i;continue}i=65536+(u-55296<<10|i-56320)}else u&&(o-=3)>-1&&_.push(239,191,189);if(u=null,i<128){if((o-=1)<0)break;_.push(i)}else if(i<2048){if((o-=2)<0)break;_.push(i>>6|192,63&i|128)}else if(i<65536){if((o-=3)<0)break;_.push(i>>12|224,i>>6&63|128,63&i|128)}else{if(!(i<1114112))throw new Error(\"Invalid code point\");if((o-=4)<0)break;_.push(i>>18|240,i>>12&63|128,i>>6&63|128,63&i|128)}}return _}function base64ToBytes(s){return a.toByteArray(function base64clean(s){if((s=(s=s.split(\"=\")[0]).trim().replace(j,\"\")).length<2)return\"\";for(;s.length%4!=0;)s+=\"=\";return s}(s))}function blitBuffer(s,o,i,a){let u;for(u=0;u=o.length||u>=s.length);++u)o[u+i]=s[u];return u}function isInstance(s,o){return s instanceof o||null!=s&&null!=s.constructor&&null!=s.constructor.name&&s.constructor.name===o.name}function numberIsNaN(s){return s!=s}const L=function(){const s=\"0123456789abcdef\",o=new Array(256);for(let i=0;i<16;++i){const a=16*i;for(let u=0;u<16;++u)o[a+u]=s[i]+s[u]}return o}();function defineBigIntMethod(s){return\"undefined\"==typeof BigInt?BufferBigIntNotDefined:s}function BufferBigIntNotDefined(){throw new Error(\"BigInt not supported\")}},48590:(s,o)=>{\"use strict\";Object.defineProperty(o,\"__esModule\",{value:!0}),o.default=function(s){return s&&\"@@redux/INIT\"===s.type?\"initialState argument passed to createStore\":\"previous state received by the reducer\"},s.exports=o.default},48648:s=>{\"use strict\";s.exports=\"undefined\"!=typeof Reflect&&Reflect.getPrototypeOf||null},48655:(s,o,i)=>{var a=i(26025);s.exports=function listCacheHas(s){return a(this.__data__,s)>-1}},48675:(s,o,i)=>{s.exports=i(20850)},48948:(s,o,i)=>{var a=i(21791),u=i(86375);s.exports=function copySymbolsIn(s,o){return a(s,u(s),o)}},49092:(s,o,i)=>{\"use strict\";var a=i(41333);s.exports=function hasToStringTagShams(){return a()&&!!Symbol.toStringTag}},49326:(s,o,i)=>{var a=i(31769),u=i(72428),_=i(56449),w=i(30361),x=i(30294),C=i(77797);s.exports=function hasPath(s,o,i){for(var j=-1,L=(o=a(o,s)).length,B=!1;++j{\"use strict\";var a=i(45951),u=i(46285),_=a.document,w=u(_)&&u(_.createElement);s.exports=function(s){return w?_.createElement(s):{}}},49653:(s,o,i)=>{var a=i(37828);s.exports=function cloneArrayBuffer(s){var o=new s.constructor(s.byteLength);return new a(o).set(new a(s)),o}},49698:s=>{var o=RegExp(\"[\\\\u200d\\\\ud800-\\\\udfff\\\\u0300-\\\\u036f\\\\ufe20-\\\\ufe2f\\\\u20d0-\\\\u20ff\\\\ufe0e\\\\ufe0f]\");s.exports=function hasUnicode(s){return o.test(s)}},49724:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(39298),_=a({}.hasOwnProperty);s.exports=Object.hasOwn||function hasOwn(s,o){return _(u(s),o)}},49747:(s,o,i)=>{var a=i(66977);function curry(s,o,i){var u=a(s,8,void 0,void 0,void 0,void 0,void 0,o=i?void 0:o);return u.placeholder=curry.placeholder,u}curry.placeholder={},s.exports=curry},50002:(s,o,i)=>{var a=i(82199),u=i(4664),_=i(95950);s.exports=function getAllKeys(s){return a(s,_,u)}},50104:(s,o,i)=>{var a=i(53661);function memoize(s,o){if(\"function\"!=typeof s||null!=o&&\"function\"!=typeof o)throw new TypeError(\"Expected a function\");var memoized=function(){var i=arguments,a=o?o.apply(this,i):i[0],u=memoized.cache;if(u.has(a))return u.get(a);var _=s.apply(this,i);return memoized.cache=u.set(a,_)||u,_};return memoized.cache=new(memoize.Cache||a),memoized}memoize.Cache=a,s.exports=memoize},50583:(s,o,i)=>{var a=i(47237),u=i(17255),_=i(28586),w=i(77797);s.exports=function property(s){return _(s)?a(w(s)):u(s)}},50689:(s,o,i)=>{var a=i(50002),u=Object.prototype.hasOwnProperty;s.exports=function equalObjects(s,o,i,_,w,x){var C=1&i,j=a(s),L=j.length;if(L!=a(o).length&&!C)return!1;for(var B=L;B--;){var $=j[B];if(!(C?$ in o:u.call(o,$)))return!1}var U=x.get(s),V=x.get(o);if(U&&V)return U==o&&V==s;var z=!0;x.set(s,o),x.set(o,s);for(var Y=C;++B{var a=i(24647),u=i(13222),_=/[\\xc0-\\xd6\\xd8-\\xf6\\xf8-\\xff\\u0100-\\u017f]/g,w=RegExp(\"[\\\\u0300-\\\\u036f\\\\ufe20-\\\\ufe2f\\\\u20d0-\\\\u20ff]\",\"g\");s.exports=function deburr(s){return(s=u(s))&&s.replace(_,a).replace(w,\"\")}},51175:(s,o,i)=>{\"use strict\";var a=i(19846);s.exports=a&&!Symbol.sham&&\"symbol\"==typeof Symbol.iterator},51234:s=>{s.exports=function baseZipObject(s,o,i){for(var a=-1,u=s.length,_=o.length,w={};++a{var a=i(80079);s.exports=function stackClear(){this.__data__=new a,this.size=0}},51459:s=>{s.exports=function setCacheHas(s){return this.__data__.has(s)}},51811:s=>{var o=Date.now;s.exports=function shortOut(s){var i=0,a=0;return function(){var u=o(),_=16-(u-a);if(a=u,_>0){if(++i>=800)return arguments[0]}else i=0;return s.apply(void 0,arguments)}}},51871:(s,o,i)=>{\"use strict\";var a=i(1907),u=i(82159);s.exports=function(s,o,i){try{return a(u(Object.getOwnPropertyDescriptor(s,o)[i]))}catch(s){}}},51873:(s,o,i)=>{var a=i(9325).Symbol;s.exports=a},52623:(s,o,i)=>{\"use strict\";var a={};a[i(76264)(\"toStringTag\")]=\"z\",s.exports=\"[object z]\"===String(a)},53138:(s,o,i)=>{var a=i(11331);s.exports=function customOmitClone(s){return a(s)?void 0:s}},53209:(s,o,i)=>{\"use strict\";var a=i(65606),u=65536,_=4294967295;var w=i(92861).Buffer,x=i.g.crypto||i.g.msCrypto;x&&x.getRandomValues?s.exports=function randomBytes(s,o){if(s>_)throw new RangeError(\"requested too many random bytes\");var i=w.allocUnsafe(s);if(s>0)if(s>u)for(var C=0;C{var o=Math.max;s.exports=function composeArgsRight(s,i,a,u){for(var _=-1,w=s.length,x=-1,C=a.length,j=-1,L=i.length,B=o(w-C,0),$=Array(B+L),U=!u;++_{\"use strict\";var a=i(93700);s.exports=a},53661:(s,o,i)=>{var a=i(63040),u=i(17670),_=i(90289),w=i(4509),x=i(72949);function MapCache(s){var o=-1,i=null==s?0:s.length;for(this.clear();++o{var a=i(30980),u=i(56017),_=i(94033),w=i(56449),x=i(40346),C=i(80257),j=Object.prototype.hasOwnProperty;function lodash(s){if(x(s)&&!w(s)&&!(s instanceof a)){if(s instanceof u)return s;if(j.call(s,\"__wrapped__\"))return C(s)}return new u(s)}lodash.prototype=_.prototype,lodash.prototype.constructor=lodash,s.exports=lodash},53812:(s,o,i)=>{var a=i(72552),u=i(40346);s.exports=function isBoolean(s){return!0===s||!1===s||u(s)&&\"[object Boolean]\"==a(s)}},54018:(s,o,i)=>{\"use strict\";var a=i(46285);s.exports=function(s){return a(s)||null===s}},54128:(s,o,i)=>{var a=i(31800),u=/^\\s+/;s.exports=function baseTrim(s){return s?s.slice(0,a(s)+1).replace(u,\"\"):s}},54552:s=>{s.exports=function basePropertyOf(s){return function(o){return null==s?void 0:s[o]}}},54641:(s,o,i)=>{var a=i(68882),u=i(51811)(a);s.exports=u},54829:(s,o,i)=>{\"use strict\";var a=i(74284).f;s.exports=function(s,o,i){i in s||a(s,i,{configurable:!0,get:function(){return o[i]},set:function(s){o[i]=s}})}},54878:(s,o,i)=>{\"use strict\";var a=i(52623),u=i(73948);s.exports=a?{}.toString:function toString(){return\"[object \"+u(this)+\"]\"}},55157:s=>{s.exports=function(){throw new Error(\"Readable.from is not available in the browser\")}},55364:(s,o,i)=>{var a=i(85250),u=i(20999)((function(s,o,i){a(s,o,i)}));s.exports=u},55481:(s,o,i)=>{var a=i(9325)[\"__core-js_shared__\"];s.exports=a},55527:s=>{var o=Object.prototype;s.exports=function isPrototype(s){var i=s&&s.constructor;return s===(\"function\"==typeof i&&i.prototype||o)}},55580:(s,o,i)=>{var a=i(56110)(i(9325),\"DataView\");s.exports=a},55674:(s,o,i)=>{\"use strict\";Object.defineProperty(o,\"__esModule\",{value:!0}),o.validateNextState=o.getUnexpectedInvocationParameterMessage=o.getStateName=void 0;var a=_interopRequireDefault(i(48590)),u=_interopRequireDefault(i(82261)),_=_interopRequireDefault(i(27374));function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}o.getStateName=a.default,o.getUnexpectedInvocationParameterMessage=u.default,o.validateNextState=_.default},55808:(s,o,i)=>{var a=i(12507)(\"toUpperCase\");s.exports=a},55973:s=>{class KeyValuePair{constructor(s,o){this.key=s,this.value=o}clone(){const s=new KeyValuePair;return this.key&&(s.key=this.key.clone()),this.value&&(s.value=this.value.clone()),s}}s.exports=KeyValuePair},56017:(s,o,i)=>{var a=i(39344),u=i(94033);function LodashWrapper(s,o){this.__wrapped__=s,this.__actions__=[],this.__chain__=!!o,this.__index__=0,this.__values__=void 0}LodashWrapper.prototype=a(u.prototype),LodashWrapper.prototype.constructor=LodashWrapper,s.exports=LodashWrapper},56110:(s,o,i)=>{var a=i(45083),u=i(10392);s.exports=function getNative(s,o){var i=u(s,o);return a(i)?i:void 0}},56367:(s,o,i)=>{s.exports=i(77731)},56449:s=>{var o=Array.isArray;s.exports=o},56698:s=>{\"function\"==typeof Object.create?s.exports=function inherits(s,o){o&&(s.super_=o,s.prototype=Object.create(o.prototype,{constructor:{value:s,enumerable:!1,writable:!0,configurable:!0}}))}:s.exports=function inherits(s,o){if(o){s.super_=o;var TempCtor=function(){};TempCtor.prototype=o.prototype,s.prototype=new TempCtor,s.prototype.constructor=s}}},56757:(s,o,i)=>{var a=i(91033),u=Math.max;s.exports=function overRest(s,o,i){return o=u(void 0===o?s.length-1:o,0),function(){for(var _=arguments,w=-1,x=u(_.length-o,0),C=Array(x);++w{\"use strict\";var a=i(98828);s.exports=!a((function(){function F(){}return F.prototype.constructor=null,Object.getPrototypeOf(new F)!==F.prototype}))},57758:(s,o,i)=>{\"use strict\";var a;var u=i(86048).F,_=u.ERR_MISSING_ARGS,w=u.ERR_STREAM_DESTROYED;function noop(s){if(s)throw s}function call(s){s()}function pipe(s,o){return s.pipe(o)}s.exports=function pipeline(){for(var s=arguments.length,o=new Array(s),u=0;u0,(function(s){x||(x=s),s&&j.forEach(call),_||(j.forEach(call),C(x))}))}));return o.reduce(pipe)}},58068:s=>{\"use strict\";s.exports=SyntaxError},58075:(s,o,i)=>{\"use strict\";var a,u=i(36624),_=i(42220),w=i(80376),x=i(38530),C=i(62416),j=i(49552),L=i(92522),B=\"prototype\",$=\"script\",U=L(\"IE_PROTO\"),EmptyConstructor=function(){},scriptTag=function(s){return\"<\"+$+\">\"+s+\"\"},NullProtoObjectViaActiveX=function(s){s.write(scriptTag(\"\")),s.close();var o=s.parentWindow.Object;return s=null,o},NullProtoObject=function(){try{a=new ActiveXObject(\"htmlfile\")}catch(s){}var s,o,i;NullProtoObject=\"undefined\"!=typeof document?document.domain&&a?NullProtoObjectViaActiveX(a):(o=j(\"iframe\"),i=\"java\"+$+\":\",o.style.display=\"none\",C.appendChild(o),o.src=String(i),(s=o.contentWindow.document).open(),s.write(scriptTag(\"document.F=Object\")),s.close(),s.F):NullProtoObjectViaActiveX(a);for(var u=w.length;u--;)delete NullProtoObject[B][w[u]];return NullProtoObject()};x[U]=!0,s.exports=Object.create||function create(s,o){var i;return null!==s?(EmptyConstructor[B]=u(s),i=new EmptyConstructor,EmptyConstructor[B]=null,i[U]=s):i=NullProtoObject(),void 0===o?i:_.f(i,o)}},58156:(s,o,i)=>{var a=i(47422);s.exports=function get(s,o,i){var u=null==s?void 0:a(s,o);return void 0===u?i:u}},58523:s=>{s.exports=function countHolders(s,o){for(var i=s.length,a=0;i--;)s[i]===o&&++a;return a}},58661:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(98828);s.exports=a&&u((function(){return 42!==Object.defineProperty((function(){}),\"prototype\",{value:42,writable:!1}).prototype}))},58968:s=>{\"use strict\";s.exports=Math.floor},59350:s=>{var o=Object.prototype.toString;s.exports=function objectToString(s){return o.call(s)}},59399:(s,o,i)=>{\"use strict\";var a=i(25264).CopyToClipboard;a.CopyToClipboard=a,s.exports=a},59550:s=>{\"use strict\";s.exports=function(s,o){return{value:s,done:o}}},60183:(s,o,i)=>{\"use strict\";var a=i(11091),u=i(13930),_=i(7376),w=i(36833),x=i(62250),C=i(47181),j=i(15972),L=i(79192),B=i(14840),$=i(61626),U=i(68055),V=i(76264),z=i(93742),Y=i(95116),Z=w.PROPER,ee=w.CONFIGURABLE,ie=Y.IteratorPrototype,ae=Y.BUGGY_SAFARI_ITERATORS,ce=V(\"iterator\"),le=\"keys\",pe=\"values\",de=\"entries\",returnThis=function(){return this};s.exports=function(s,o,i,w,V,Y,fe){C(i,o,w);var ye,be,_e,getIterationMethod=function(s){if(s===V&&Te)return Te;if(!ae&&s&&s in xe)return xe[s];switch(s){case le:return function keys(){return new i(this,s)};case pe:return function values(){return new i(this,s)};case de:return function entries(){return new i(this,s)}}return function(){return new i(this)}},Se=o+\" Iterator\",we=!1,xe=s.prototype,Pe=xe[ce]||xe[\"@@iterator\"]||V&&xe[V],Te=!ae&&Pe||getIterationMethod(V),Re=\"Array\"===o&&xe.entries||Pe;if(Re&&(ye=j(Re.call(new s)))!==Object.prototype&&ye.next&&(_||j(ye)===ie||(L?L(ye,ie):x(ye[ce])||U(ye,ce,returnThis)),B(ye,Se,!0,!0),_&&(z[Se]=returnThis)),Z&&V===pe&&Pe&&Pe.name!==pe&&(!_&&ee?$(xe,\"name\",pe):(we=!0,Te=function values(){return u(Pe,this)})),V)if(be={values:getIterationMethod(pe),keys:Y?Te:getIterationMethod(le),entries:getIterationMethod(de)},fe)for(_e in be)(ae||we||!(_e in xe))&&U(xe,_e,be[_e]);else a({target:o,proto:!0,forced:ae||we},be);return _&&!fe||xe[ce]===Te||U(xe,ce,Te,{name:V}),z[o]=Te,be}},60270:(s,o,i)=>{var a=i(87068),u=i(40346);s.exports=function baseIsEqual(s,o,i,_,w){return s===o||(null==s||null==o||!u(s)&&!u(o)?s!=s&&o!=o:a(s,o,i,_,baseIsEqual,w))}},60581:(s,o,i)=>{\"use strict\";var a=i(13930),u=i(62250),_=i(46285),w=TypeError;s.exports=function(s,o){var i,x;if(\"string\"===o&&u(i=s.toString)&&!_(x=a(i,s)))return x;if(u(i=s.valueOf)&&!_(x=a(i,s)))return x;if(\"string\"!==o&&u(i=s.toString)&&!_(x=a(i,s)))return x;throw new w(\"Can't convert object to primitive value\")}},60680:(s,o,i)=>{var a=i(13222),u=/[\\\\^$.*+?()[\\]{}|]/g,_=RegExp(u.source);s.exports=function escapeRegExp(s){return(s=a(s))&&_.test(s)?s.replace(u,\"\\\\$&\"):s}},61045:(s,o,i)=>{const a=i(6048),u=i(23805),_=i(6233),w=i(87726),x=i(10866);s.exports=class ObjectElement extends _{constructor(s,o,i){super(s||[],o,i),this.element=\"object\"}primitive(){return\"object\"}toValue(){return this.content.reduce(((s,o)=>(s[o.key.toValue()]=o.value?o.value.toValue():void 0,s)),{})}get(s){const o=this.getMember(s);if(o)return o.value}getMember(s){if(void 0!==s)return this.content.find((o=>o.key.toValue()===s))}remove(s){let o=null;return this.content=this.content.filter((i=>i.key.toValue()!==s||(o=i,!1))),o}getKey(s){const o=this.getMember(s);if(o)return o.key}set(s,o){if(u(s))return Object.keys(s).forEach((o=>{this.set(o,s[o])})),this;const i=s,a=this.getMember(i);return a?a.value=o:this.content.push(new w(i,o)),this}keys(){return this.content.map((s=>s.key.toValue()))}values(){return this.content.map((s=>s.value.toValue()))}hasKey(s){return this.content.some((o=>o.key.equals(s)))}items(){return this.content.map((s=>[s.key.toValue(),s.value.toValue()]))}map(s,o){return this.content.map((i=>s.bind(o)(i.value,i.key,i)))}compactMap(s,o){const i=[];return this.forEach(((a,u,_)=>{const w=s.bind(o)(a,u,_);w&&i.push(w)})),i}filter(s,o){return new x(this.content).filter(s,o)}reject(s,o){return this.filter(a(s),o)}forEach(s,o){return this.content.forEach((i=>s.bind(o)(i.value,i.key,i)))}}},61074:s=>{s.exports=function asciiToArray(s){return s.split(\"\")}},61160:(s,o,i)=>{\"use strict\";var a=i(92063),u=i(73992),_=/^[\\x00-\\x20\\u00a0\\u1680\\u2000-\\u200a\\u2028\\u2029\\u202f\\u205f\\u3000\\ufeff]+/,w=/[\\n\\r\\t]/g,x=/^[A-Za-z][A-Za-z0-9+-.]*:\\/\\//,C=/:\\d+$/,j=/^([a-z][a-z0-9.+-]*:)?(\\/\\/)?([\\\\/]+)?([\\S\\s]*)/i,L=/^[a-zA-Z]:/;function trimLeft(s){return(s||\"\").toString().replace(_,\"\")}var B=[[\"#\",\"hash\"],[\"?\",\"query\"],function sanitize(s,o){return isSpecial(o.protocol)?s.replace(/\\\\/g,\"/\"):s},[\"/\",\"pathname\"],[\"@\",\"auth\",1],[NaN,\"host\",void 0,1,1],[/:(\\d*)$/,\"port\",void 0,1],[NaN,\"hostname\",void 0,1,1]],$={hash:1,query:1};function lolcation(s){var o,a=(\"undefined\"!=typeof window?window:void 0!==i.g?i.g:\"undefined\"!=typeof self?self:{}).location||{},u={},_=typeof(s=s||a);if(\"blob:\"===s.protocol)u=new Url(unescape(s.pathname),{});else if(\"string\"===_)for(o in u=new Url(s,{}),$)delete u[o];else if(\"object\"===_){for(o in s)o in $||(u[o]=s[o]);void 0===u.slashes&&(u.slashes=x.test(s.href))}return u}function isSpecial(s){return\"file:\"===s||\"ftp:\"===s||\"http:\"===s||\"https:\"===s||\"ws:\"===s||\"wss:\"===s}function extractProtocol(s,o){s=(s=trimLeft(s)).replace(w,\"\"),o=o||{};var i,a=j.exec(s),u=a[1]?a[1].toLowerCase():\"\",_=!!a[2],x=!!a[3],C=0;return _?x?(i=a[2]+a[3]+a[4],C=a[2].length+a[3].length):(i=a[2]+a[4],C=a[2].length):x?(i=a[3]+a[4],C=a[3].length):i=a[4],\"file:\"===u?C>=2&&(i=i.slice(2)):isSpecial(u)?i=a[4]:u?_&&(i=i.slice(2)):C>=2&&isSpecial(o.protocol)&&(i=a[4]),{protocol:u,slashes:_||isSpecial(u),slashesCount:C,rest:i}}function Url(s,o,i){if(s=(s=trimLeft(s)).replace(w,\"\"),!(this instanceof Url))return new Url(s,o,i);var _,x,C,j,$,U,V=B.slice(),z=typeof o,Y=this,Z=0;for(\"object\"!==z&&\"string\"!==z&&(i=o,o=null),i&&\"function\"!=typeof i&&(i=u.parse),_=!(x=extractProtocol(s||\"\",o=lolcation(o))).protocol&&!x.slashes,Y.slashes=x.slashes||_&&o.slashes,Y.protocol=x.protocol||o.protocol||\"\",s=x.rest,(\"file:\"===x.protocol&&(2!==x.slashesCount||L.test(s))||!x.slashes&&(x.protocol||x.slashesCount<2||!isSpecial(Y.protocol)))&&(V[3]=[/(.*)/,\"pathname\"]);Z{var a=i(20426),u=i(49326);s.exports=function has(s,o){return null!=s&&u(s,o,a)}},61489:(s,o,i)=>{var a=i(17400);s.exports=function toInteger(s){var o=a(s),i=o%1;return o==o?i?o-i:o:0}},61626:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(74284),_=i(75817);s.exports=a?function(s,o,i){return u.f(s,o,_(1,i))}:function(s,o,i){return s[o]=i,s}},61747:(s,o,i)=>{\"use strict\";var a=i(45951),u=i(92046);s.exports=function(s,o){var i=u[s+\"Prototype\"],_=i&&i[o];if(_)return _;var w=a[s],x=w&&w.prototype;return x&&x[o]}},61802:(s,o,i)=>{var a=i(62224),u=/[^.[\\]]+|\\[(?:(-?\\d+(?:\\.\\d+)?)|([\"'])((?:(?!\\2)[^\\\\]|\\\\.)*?)\\2)\\]|(?=(?:\\.|\\[\\])(?:\\.|\\[\\]|$))/g,_=/\\\\(\\\\)?/g,w=a((function(s){var o=[];return 46===s.charCodeAt(0)&&o.push(\"\"),s.replace(u,(function(s,i,a,u){o.push(a?u.replace(_,\"$1\"):i||s)})),o}));s.exports=w},62006:(s,o,i)=>{var a=i(15389),u=i(64894),_=i(95950);s.exports=function createFind(s){return function(o,i,w){var x=Object(o);if(!u(o)){var C=a(i,3);o=_(o),i=function(s){return C(x[s],s,x)}}var j=s(o,i,w);return j>-1?x[C?o[j]:j]:void 0}}},62060:s=>{var o=/\\{(?:\\n\\/\\* \\[wrapped with .+\\] \\*\\/)?\\n?/;s.exports=function insertWrapDetails(s,i){var a=i.length;if(!a)return s;var u=a-1;return i[u]=(a>1?\"& \":\"\")+i[u],i=i.join(a>2?\", \":\" \"),s.replace(o,\"{\\n/* [wrapped with \"+i+\"] */\\n\")}},62193:(s,o,i)=>{var a=i(88984),u=i(5861),_=i(72428),w=i(56449),x=i(64894),C=i(3656),j=i(55527),L=i(37167),B=Object.prototype.hasOwnProperty;s.exports=function isEmpty(s){if(null==s)return!0;if(x(s)&&(w(s)||\"string\"==typeof s||\"function\"==typeof s.splice||C(s)||L(s)||_(s)))return!s.length;var o=u(s);if(\"[object Map]\"==o||\"[object Set]\"==o)return!s.size;if(j(s))return!a(s).length;for(var i in s)if(B.call(s,i))return!1;return!0}},62224:(s,o,i)=>{var a=i(50104);s.exports=function memoizeCapped(s){var o=a(s,(function(s){return 500===i.size&&i.clear(),s})),i=o.cache;return o}},62250:s=>{\"use strict\";var o=\"object\"==typeof document&&document.all;s.exports=void 0===o&&void 0!==o?function(s){return\"function\"==typeof s||s===o}:function(s){return\"function\"==typeof s}},62284:(s,o,i)=>{var a=i(84629),u=Object.prototype.hasOwnProperty;s.exports=function getFuncName(s){for(var o=s.name+\"\",i=a[o],_=u.call(a,o)?i.length:0;_--;){var w=i[_],x=w.func;if(null==x||x==s)return w.name}return o}},62416:(s,o,i)=>{\"use strict\";var a=i(85582);s.exports=a(\"document\",\"documentElement\")},62802:(s,o,i)=>{\"use strict\";s.exports=function SHA(o){var i=o.toLowerCase(),a=s.exports[i];if(!a)throw new Error(i+\" is not supported (we accept pull requests)\");return new a},s.exports.sha=i(27816),s.exports.sha1=i(63737),s.exports.sha224=i(26710),s.exports.sha256=i(24107),s.exports.sha384=i(32827),s.exports.sha512=i(82890)},63040:(s,o,i)=>{var a=i(21549),u=i(80079),_=i(68223);s.exports=function mapCacheClear(){this.size=0,this.__data__={hash:new a,map:new(_||u),string:new a}}},63345:s=>{s.exports=function stubArray(){return[]}},63560:(s,o,i)=>{var a=i(73170);s.exports=function set(s,o,i){return null==s?s:a(s,o,i)}},63600:(s,o,i)=>{\"use strict\";s.exports=PassThrough;var a=i(74610);function PassThrough(s){if(!(this instanceof PassThrough))return new PassThrough(s);a.call(this,s)}i(56698)(PassThrough,a),PassThrough.prototype._transform=function(s,o,i){i(null,s)}},63605:s=>{s.exports=function stackGet(s){return this.__data__.get(s)}},63702:s=>{s.exports=function listCacheClear(){this.__data__=[],this.size=0}},63737:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(90392),_=i(92861).Buffer,w=[1518500249,1859775393,-1894007588,-899497514],x=new Array(80);function Sha1(){this.init(),this._w=x,u.call(this,64,56)}function rotl5(s){return s<<5|s>>>27}function rotl30(s){return s<<30|s>>>2}function ft(s,o,i,a){return 0===s?o&i|~o&a:2===s?o&i|o&a|i&a:o^i^a}a(Sha1,u),Sha1.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this},Sha1.prototype._update=function(s){for(var o,i=this._w,a=0|this._a,u=0|this._b,_=0|this._c,x=0|this._d,C=0|this._e,j=0;j<16;++j)i[j]=s.readInt32BE(4*j);for(;j<80;++j)i[j]=(o=i[j-3]^i[j-8]^i[j-14]^i[j-16])<<1|o>>>31;for(var L=0;L<80;++L){var B=~~(L/20),$=rotl5(a)+ft(B,u,_,x)+C+i[L]+w[B]|0;C=x,x=_,_=rotl30(u),u=a,a=$}this._a=a+this._a|0,this._b=u+this._b|0,this._c=_+this._c|0,this._d=x+this._d|0,this._e=C+this._e|0},Sha1.prototype._hash=function(){var s=_.allocUnsafe(20);return s.writeInt32BE(0|this._a,0),s.writeInt32BE(0|this._b,4),s.writeInt32BE(0|this._c,8),s.writeInt32BE(0|this._d,12),s.writeInt32BE(0|this._e,16),s},s.exports=Sha1},63862:s=>{s.exports=function hashDelete(s){var o=this.has(s)&&delete this.__data__[s];return this.size-=o?1:0,o}},63912:(s,o,i)=>{var a=i(61074),u=i(49698),_=i(42054);s.exports=function stringToArray(s){return u(s)?_(s):a(s)}},63950:s=>{s.exports=function noop(){}},64039:(s,o,i)=>{\"use strict\";var a=\"undefined\"!=typeof Symbol&&Symbol,u=i(41333);s.exports=function hasNativeSymbols(){return\"function\"==typeof a&&(\"function\"==typeof Symbol&&(\"symbol\"==typeof a(\"foo\")&&(\"symbol\"==typeof Symbol(\"bar\")&&u())))}},64502:(s,o,i)=>{\"use strict\";i(82048)},64626:(s,o,i)=>{var a=i(66977);s.exports=function ary(s,o,i){return o=i?void 0:o,o=s&&null==o?s.length:o,a(s,128,void 0,void 0,void 0,void 0,o)}},64634:s=>{var o={}.toString;s.exports=Array.isArray||function(s){return\"[object Array]\"==o.call(s)}},64894:(s,o,i)=>{var a=i(1882),u=i(30294);s.exports=function isArrayLike(s){return null!=s&&u(s.length)&&!a(s)}},64932:(s,o,i)=>{\"use strict\";var a,u,_,w=i(40551),x=i(45951),C=i(46285),j=i(61626),L=i(49724),B=i(36128),$=i(92522),U=i(38530),V=\"Object already initialized\",z=x.TypeError,Y=x.WeakMap;if(w||B.state){var Z=B.state||(B.state=new Y);Z.get=Z.get,Z.has=Z.has,Z.set=Z.set,a=function(s,o){if(Z.has(s))throw new z(V);return o.facade=s,Z.set(s,o),o},u=function(s){return Z.get(s)||{}},_=function(s){return Z.has(s)}}else{var ee=$(\"state\");U[ee]=!0,a=function(s,o){if(L(s,ee))throw new z(V);return o.facade=s,j(s,ee,o),o},u=function(s){return L(s,ee)?s[ee]:{}},_=function(s){return L(s,ee)}}s.exports={set:a,get:u,has:_,enforce:function(s){return _(s)?u(s):a(s,{})},getterFor:function(s){return function(o){var i;if(!C(o)||(i=u(o)).type!==s)throw new z(\"Incompatible receiver, \"+s+\" required\");return i}}}},65291:(s,o,i)=>{\"use strict\";var a=i(86048).F.ERR_INVALID_OPT_VALUE;s.exports={getHighWaterMark:function getHighWaterMark(s,o,i,u){var _=function highWaterMarkFrom(s,o,i){return null!=s.highWaterMark?s.highWaterMark:o?s[i]:null}(o,u,i);if(null!=_){if(!isFinite(_)||Math.floor(_)!==_||_<0)throw new a(u?i:\"highWaterMark\",_);return Math.floor(_)}return s.objectMode?16:16384}}},65482:(s,o,i)=>{\"use strict\";var a=i(41176);s.exports=function(s){var o=+s;return o!=o||0===o?0:a(o)}},65606:s=>{var o,i,a=s.exports={};function defaultSetTimout(){throw new Error(\"setTimeout has not been defined\")}function defaultClearTimeout(){throw new Error(\"clearTimeout has not been defined\")}function runTimeout(s){if(o===setTimeout)return setTimeout(s,0);if((o===defaultSetTimout||!o)&&setTimeout)return o=setTimeout,setTimeout(s,0);try{return o(s,0)}catch(i){try{return o.call(null,s,0)}catch(i){return o.call(this,s,0)}}}!function(){try{o=\"function\"==typeof setTimeout?setTimeout:defaultSetTimout}catch(s){o=defaultSetTimout}try{i=\"function\"==typeof clearTimeout?clearTimeout:defaultClearTimeout}catch(s){i=defaultClearTimeout}}();var u,_=[],w=!1,x=-1;function cleanUpNextTick(){w&&u&&(w=!1,u.length?_=u.concat(_):x=-1,_.length&&drainQueue())}function drainQueue(){if(!w){var s=runTimeout(cleanUpNextTick);w=!0;for(var o=_.length;o;){for(u=_,_=[];++x1)for(var i=1;i{s.exports=function json(s){const o={literal:\"true false null\"},i=[s.C_LINE_COMMENT_MODE,s.C_BLOCK_COMMENT_MODE],a=[s.QUOTE_STRING_MODE,s.C_NUMBER_MODE],u={end:\",\",endsWithParent:!0,excludeEnd:!0,contains:a,keywords:o},_={begin:/\\{/,end:/\\}/,contains:[{className:\"attr\",begin:/\"/,end:/\"/,contains:[s.BACKSLASH_ESCAPE],illegal:\"\\\\n\"},s.inherit(u,{begin:/:/})].concat(i),illegal:\"\\\\S\"},w={begin:\"\\\\[\",end:\"\\\\]\",contains:[s.inherit(u)],illegal:\"\\\\S\"};return a.push(_,w),i.forEach((function(s){a.push(s)})),{name:\"JSON\",contains:a,keywords:o,illegal:\"\\\\S\"}}},66645:(s,o,i)=>{var a=i(1733),u=i(45434),_=i(13222),w=i(22225);s.exports=function words(s,o,i){return s=_(s),void 0===(o=i?void 0:o)?u(s)?w(s):a(s):s.match(o)||[]}},66721:(s,o,i)=>{var a=i(81042),u=Object.prototype.hasOwnProperty;s.exports=function hashGet(s){var o=this.__data__;if(a){var i=o[s];return\"__lodash_hash_undefined__\"===i?void 0:i}return u.call(o,s)?o[s]:void 0}},66743:(s,o,i)=>{\"use strict\";var a=i(89353);s.exports=Function.prototype.bind||a},66977:(s,o,i)=>{var a=i(68882),u=i(11842),_=i(77078),w=i(37471),x=i(24168),C=i(37381),j=i(3209),L=i(54641),B=i(70981),$=i(61489),U=Math.max;s.exports=function createWrap(s,o,i,V,z,Y,Z,ee){var ie=2&o;if(!ie&&\"function\"!=typeof s)throw new TypeError(\"Expected a function\");var ae=V?V.length:0;if(ae||(o&=-97,V=z=void 0),Z=void 0===Z?Z:U($(Z),0),ee=void 0===ee?ee:$(ee),ae-=z?z.length:0,64&o){var ce=V,le=z;V=z=void 0}var pe=ie?void 0:C(s),de=[s,o,i,V,z,ce,le,Y,Z,ee];if(pe&&j(de,pe),s=de[0],o=de[1],i=de[2],V=de[3],z=de[4],!(ee=de[9]=void 0===de[9]?ie?0:s.length:U(de[9]-ae,0))&&24&o&&(o&=-25),o&&1!=o)fe=8==o||16==o?_(s,o,ee):32!=o&&33!=o||z.length?w.apply(void 0,de):x(s,o,i,V);else var fe=u(s,o,i);return B((pe?a:L)(fe,de),s,o)}},67197:s=>{s.exports=function matchesStrictComparable(s,o){return function(i){return null!=i&&(i[s]===o&&(void 0!==o||s in Object(i)))}}},67526:(s,o)=>{\"use strict\";o.byteLength=function byteLength(s){var o=getLens(s),i=o[0],a=o[1];return 3*(i+a)/4-a},o.toByteArray=function toByteArray(s){var o,i,_=getLens(s),w=_[0],x=_[1],C=new u(function _byteLength(s,o,i){return 3*(o+i)/4-i}(0,w,x)),j=0,L=x>0?w-4:w;for(i=0;i>16&255,C[j++]=o>>8&255,C[j++]=255&o;2===x&&(o=a[s.charCodeAt(i)]<<2|a[s.charCodeAt(i+1)]>>4,C[j++]=255&o);1===x&&(o=a[s.charCodeAt(i)]<<10|a[s.charCodeAt(i+1)]<<4|a[s.charCodeAt(i+2)]>>2,C[j++]=o>>8&255,C[j++]=255&o);return C},o.fromByteArray=function fromByteArray(s){for(var o,a=s.length,u=a%3,_=[],w=16383,x=0,C=a-u;xC?C:x+w));1===u?(o=s[a-1],_.push(i[o>>2]+i[o<<4&63]+\"==\")):2===u&&(o=(s[a-2]<<8)+s[a-1],_.push(i[o>>10]+i[o>>4&63]+i[o<<2&63]+\"=\"));return _.join(\"\")};for(var i=[],a=[],u=\"undefined\"!=typeof Uint8Array?Uint8Array:Array,_=\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\",w=0;w<64;++w)i[w]=_[w],a[_.charCodeAt(w)]=w;function getLens(s){var o=s.length;if(o%4>0)throw new Error(\"Invalid string. Length must be a multiple of 4\");var i=s.indexOf(\"=\");return-1===i&&(i=o),[i,i===o?0:4-i%4]}function encodeChunk(s,o,a){for(var u,_,w=[],x=o;x>18&63]+i[_>>12&63]+i[_>>6&63]+i[63&_]);return w.join(\"\")}a[\"-\".charCodeAt(0)]=62,a[\"_\".charCodeAt(0)]=63},68002:s=>{\"use strict\";s.exports=Math.min},68055:(s,o,i)=>{\"use strict\";var a=i(61626);s.exports=function(s,o,i,u){return u&&u.enumerable?s[o]=i:a(s,o,i),s}},68090:s=>{s.exports=function last(s){var o=null==s?0:s.length;return o?s[o-1]:void 0}},68223:(s,o,i)=>{var a=i(56110)(i(9325),\"Map\");s.exports=a},68294:(s,o,i)=>{var a=i(23007),u=i(30361),_=Math.min;s.exports=function reorder(s,o){for(var i=s.length,w=_(o.length,i),x=a(s);w--;){var C=o[w];s[w]=u(C,i)?x[C]:void 0}return s}},68623:(s,o,i)=>{\"use strict\";var a=i(694);s.exports=a},68882:(s,o,i)=>{var a=i(83488),u=i(48152),_=u?function(s,o){return u.set(s,o),s}:a;s.exports=_},68969:(s,o,i)=>{var a=i(47422),u=i(25160);s.exports=function parent(s,o){return o.length<2?s:a(s,u(o,0,-1))}},69302:(s,o,i)=>{var a=i(83488),u=i(56757),_=i(32865);s.exports=function baseRest(s,o){return _(u(s,o,a),s+\"\")}},69383:s=>{\"use strict\";s.exports=Error},69600:s=>{\"use strict\";var o,i,a=Function.prototype.toString,u=\"object\"==typeof Reflect&&null!==Reflect&&Reflect.apply;if(\"function\"==typeof u&&\"function\"==typeof Object.defineProperty)try{o=Object.defineProperty({},\"length\",{get:function(){throw i}}),i={},u((function(){throw 42}),null,o)}catch(s){s!==i&&(u=null)}else u=null;var _=/^\\s*class\\b/,w=function isES6ClassFunction(s){try{var o=a.call(s);return _.test(o)}catch(s){return!1}},x=function tryFunctionToStr(s){try{return!w(s)&&(a.call(s),!0)}catch(s){return!1}},C=Object.prototype.toString,j=\"function\"==typeof Symbol&&!!Symbol.toStringTag,L=!(0 in[,]),B=function isDocumentDotAll(){return!1};if(\"object\"==typeof document){var $=document.all;C.call($)===C.call(document.all)&&(B=function isDocumentDotAll(s){if((L||!s)&&(void 0===s||\"object\"==typeof s))try{var o=C.call(s);return(\"[object HTMLAllCollection]\"===o||\"[object HTML document.all class]\"===o||\"[object HTMLCollection]\"===o||\"[object Object]\"===o)&&null==s(\"\")}catch(s){}return!1})}s.exports=u?function isCallable(s){if(B(s))return!0;if(!s)return!1;if(\"function\"!=typeof s&&\"object\"!=typeof s)return!1;try{u(s,null,o)}catch(s){if(s!==i)return!1}return!w(s)&&x(s)}:function isCallable(s){if(B(s))return!0;if(!s)return!1;if(\"function\"!=typeof s&&\"object\"!=typeof s)return!1;if(j)return x(s);if(w(s))return!1;var o=C.call(s);return!(\"[object Function]\"!==o&&\"[object GeneratorFunction]\"!==o&&!/^\\[object HTML/.test(o))&&x(s)}},69675:s=>{\"use strict\";s.exports=TypeError},69884:(s,o,i)=>{var a=i(21791),u=i(37241);s.exports=function toPlainObject(s){return a(s,u(s))}},69982:(s,o,i)=>{\"use strict\";s.exports=i(29844)},70080:(s,o,i)=>{var a=i(26025),u=Array.prototype.splice;s.exports=function listCacheDelete(s){var o=this.__data__,i=a(o,s);return!(i<0)&&(i==o.length-1?o.pop():u.call(o,i,1),--this.size,!0)}},70414:s=>{\"use strict\";s.exports=Math.round},70453:(s,o,i)=>{\"use strict\";var a,u=i(79612),_=i(69383),w=i(41237),x=i(79290),C=i(79538),j=i(58068),L=i(69675),B=i(35345),$=i(71514),U=i(58968),V=i(6188),z=i(68002),Y=i(75880),Z=i(70414),ee=i(73093),ie=Function,getEvalledConstructor=function(s){try{return ie('\"use strict\"; return ('+s+\").constructor;\")()}catch(s){}},ae=i(75795),ce=i(30655),throwTypeError=function(){throw new L},le=ae?function(){try{return throwTypeError}catch(s){try{return ae(arguments,\"callee\").get}catch(s){return throwTypeError}}}():throwTypeError,pe=i(64039)(),de=i(93628),fe=i(71064),ye=i(48648),be=i(11002),_e=i(10076),Se={},we=\"undefined\"!=typeof Uint8Array&&de?de(Uint8Array):a,xe={__proto__:null,\"%AggregateError%\":\"undefined\"==typeof AggregateError?a:AggregateError,\"%Array%\":Array,\"%ArrayBuffer%\":\"undefined\"==typeof ArrayBuffer?a:ArrayBuffer,\"%ArrayIteratorPrototype%\":pe&&de?de([][Symbol.iterator]()):a,\"%AsyncFromSyncIteratorPrototype%\":a,\"%AsyncFunction%\":Se,\"%AsyncGenerator%\":Se,\"%AsyncGeneratorFunction%\":Se,\"%AsyncIteratorPrototype%\":Se,\"%Atomics%\":\"undefined\"==typeof Atomics?a:Atomics,\"%BigInt%\":\"undefined\"==typeof BigInt?a:BigInt,\"%BigInt64Array%\":\"undefined\"==typeof BigInt64Array?a:BigInt64Array,\"%BigUint64Array%\":\"undefined\"==typeof BigUint64Array?a:BigUint64Array,\"%Boolean%\":Boolean,\"%DataView%\":\"undefined\"==typeof DataView?a:DataView,\"%Date%\":Date,\"%decodeURI%\":decodeURI,\"%decodeURIComponent%\":decodeURIComponent,\"%encodeURI%\":encodeURI,\"%encodeURIComponent%\":encodeURIComponent,\"%Error%\":_,\"%eval%\":eval,\"%EvalError%\":w,\"%Float32Array%\":\"undefined\"==typeof Float32Array?a:Float32Array,\"%Float64Array%\":\"undefined\"==typeof Float64Array?a:Float64Array,\"%FinalizationRegistry%\":\"undefined\"==typeof FinalizationRegistry?a:FinalizationRegistry,\"%Function%\":ie,\"%GeneratorFunction%\":Se,\"%Int8Array%\":\"undefined\"==typeof Int8Array?a:Int8Array,\"%Int16Array%\":\"undefined\"==typeof Int16Array?a:Int16Array,\"%Int32Array%\":\"undefined\"==typeof Int32Array?a:Int32Array,\"%isFinite%\":isFinite,\"%isNaN%\":isNaN,\"%IteratorPrototype%\":pe&&de?de(de([][Symbol.iterator]())):a,\"%JSON%\":\"object\"==typeof JSON?JSON:a,\"%Map%\":\"undefined\"==typeof Map?a:Map,\"%MapIteratorPrototype%\":\"undefined\"!=typeof Map&&pe&&de?de((new Map)[Symbol.iterator]()):a,\"%Math%\":Math,\"%Number%\":Number,\"%Object%\":u,\"%Object.getOwnPropertyDescriptor%\":ae,\"%parseFloat%\":parseFloat,\"%parseInt%\":parseInt,\"%Promise%\":\"undefined\"==typeof Promise?a:Promise,\"%Proxy%\":\"undefined\"==typeof Proxy?a:Proxy,\"%RangeError%\":x,\"%ReferenceError%\":C,\"%Reflect%\":\"undefined\"==typeof Reflect?a:Reflect,\"%RegExp%\":RegExp,\"%Set%\":\"undefined\"==typeof Set?a:Set,\"%SetIteratorPrototype%\":\"undefined\"!=typeof Set&&pe&&de?de((new Set)[Symbol.iterator]()):a,\"%SharedArrayBuffer%\":\"undefined\"==typeof SharedArrayBuffer?a:SharedArrayBuffer,\"%String%\":String,\"%StringIteratorPrototype%\":pe&&de?de(\"\"[Symbol.iterator]()):a,\"%Symbol%\":pe?Symbol:a,\"%SyntaxError%\":j,\"%ThrowTypeError%\":le,\"%TypedArray%\":we,\"%TypeError%\":L,\"%Uint8Array%\":\"undefined\"==typeof Uint8Array?a:Uint8Array,\"%Uint8ClampedArray%\":\"undefined\"==typeof Uint8ClampedArray?a:Uint8ClampedArray,\"%Uint16Array%\":\"undefined\"==typeof Uint16Array?a:Uint16Array,\"%Uint32Array%\":\"undefined\"==typeof Uint32Array?a:Uint32Array,\"%URIError%\":B,\"%WeakMap%\":\"undefined\"==typeof WeakMap?a:WeakMap,\"%WeakRef%\":\"undefined\"==typeof WeakRef?a:WeakRef,\"%WeakSet%\":\"undefined\"==typeof WeakSet?a:WeakSet,\"%Function.prototype.call%\":_e,\"%Function.prototype.apply%\":be,\"%Object.defineProperty%\":ce,\"%Object.getPrototypeOf%\":fe,\"%Math.abs%\":$,\"%Math.floor%\":U,\"%Math.max%\":V,\"%Math.min%\":z,\"%Math.pow%\":Y,\"%Math.round%\":Z,\"%Math.sign%\":ee,\"%Reflect.getPrototypeOf%\":ye};if(de)try{null.error}catch(s){var Pe=de(de(s));xe[\"%Error.prototype%\"]=Pe}var Te=function doEval(s){var o;if(\"%AsyncFunction%\"===s)o=getEvalledConstructor(\"async function () {}\");else if(\"%GeneratorFunction%\"===s)o=getEvalledConstructor(\"function* () {}\");else if(\"%AsyncGeneratorFunction%\"===s)o=getEvalledConstructor(\"async function* () {}\");else if(\"%AsyncGenerator%\"===s){var i=doEval(\"%AsyncGeneratorFunction%\");i&&(o=i.prototype)}else if(\"%AsyncIteratorPrototype%\"===s){var a=doEval(\"%AsyncGenerator%\");a&&de&&(o=de(a.prototype))}return xe[s]=o,o},Re={__proto__:null,\"%ArrayBufferPrototype%\":[\"ArrayBuffer\",\"prototype\"],\"%ArrayPrototype%\":[\"Array\",\"prototype\"],\"%ArrayProto_entries%\":[\"Array\",\"prototype\",\"entries\"],\"%ArrayProto_forEach%\":[\"Array\",\"prototype\",\"forEach\"],\"%ArrayProto_keys%\":[\"Array\",\"prototype\",\"keys\"],\"%ArrayProto_values%\":[\"Array\",\"prototype\",\"values\"],\"%AsyncFunctionPrototype%\":[\"AsyncFunction\",\"prototype\"],\"%AsyncGenerator%\":[\"AsyncGeneratorFunction\",\"prototype\"],\"%AsyncGeneratorPrototype%\":[\"AsyncGeneratorFunction\",\"prototype\",\"prototype\"],\"%BooleanPrototype%\":[\"Boolean\",\"prototype\"],\"%DataViewPrototype%\":[\"DataView\",\"prototype\"],\"%DatePrototype%\":[\"Date\",\"prototype\"],\"%ErrorPrototype%\":[\"Error\",\"prototype\"],\"%EvalErrorPrototype%\":[\"EvalError\",\"prototype\"],\"%Float32ArrayPrototype%\":[\"Float32Array\",\"prototype\"],\"%Float64ArrayPrototype%\":[\"Float64Array\",\"prototype\"],\"%FunctionPrototype%\":[\"Function\",\"prototype\"],\"%Generator%\":[\"GeneratorFunction\",\"prototype\"],\"%GeneratorPrototype%\":[\"GeneratorFunction\",\"prototype\",\"prototype\"],\"%Int8ArrayPrototype%\":[\"Int8Array\",\"prototype\"],\"%Int16ArrayPrototype%\":[\"Int16Array\",\"prototype\"],\"%Int32ArrayPrototype%\":[\"Int32Array\",\"prototype\"],\"%JSONParse%\":[\"JSON\",\"parse\"],\"%JSONStringify%\":[\"JSON\",\"stringify\"],\"%MapPrototype%\":[\"Map\",\"prototype\"],\"%NumberPrototype%\":[\"Number\",\"prototype\"],\"%ObjectPrototype%\":[\"Object\",\"prototype\"],\"%ObjProto_toString%\":[\"Object\",\"prototype\",\"toString\"],\"%ObjProto_valueOf%\":[\"Object\",\"prototype\",\"valueOf\"],\"%PromisePrototype%\":[\"Promise\",\"prototype\"],\"%PromiseProto_then%\":[\"Promise\",\"prototype\",\"then\"],\"%Promise_all%\":[\"Promise\",\"all\"],\"%Promise_reject%\":[\"Promise\",\"reject\"],\"%Promise_resolve%\":[\"Promise\",\"resolve\"],\"%RangeErrorPrototype%\":[\"RangeError\",\"prototype\"],\"%ReferenceErrorPrototype%\":[\"ReferenceError\",\"prototype\"],\"%RegExpPrototype%\":[\"RegExp\",\"prototype\"],\"%SetPrototype%\":[\"Set\",\"prototype\"],\"%SharedArrayBufferPrototype%\":[\"SharedArrayBuffer\",\"prototype\"],\"%StringPrototype%\":[\"String\",\"prototype\"],\"%SymbolPrototype%\":[\"Symbol\",\"prototype\"],\"%SyntaxErrorPrototype%\":[\"SyntaxError\",\"prototype\"],\"%TypedArrayPrototype%\":[\"TypedArray\",\"prototype\"],\"%TypeErrorPrototype%\":[\"TypeError\",\"prototype\"],\"%Uint8ArrayPrototype%\":[\"Uint8Array\",\"prototype\"],\"%Uint8ClampedArrayPrototype%\":[\"Uint8ClampedArray\",\"prototype\"],\"%Uint16ArrayPrototype%\":[\"Uint16Array\",\"prototype\"],\"%Uint32ArrayPrototype%\":[\"Uint32Array\",\"prototype\"],\"%URIErrorPrototype%\":[\"URIError\",\"prototype\"],\"%WeakMapPrototype%\":[\"WeakMap\",\"prototype\"],\"%WeakSetPrototype%\":[\"WeakSet\",\"prototype\"]},$e=i(66743),qe=i(9957),ze=$e.call(_e,Array.prototype.concat),We=$e.call(be,Array.prototype.splice),He=$e.call(_e,String.prototype.replace),Ye=$e.call(_e,String.prototype.slice),Xe=$e.call(_e,RegExp.prototype.exec),Qe=/[^%.[\\]]+|\\[(?:(-?\\d+(?:\\.\\d+)?)|([\"'])((?:(?!\\2)[^\\\\]|\\\\.)*?)\\2)\\]|(?=(?:\\.|\\[\\])(?:\\.|\\[\\]|%$))/g,et=/\\\\(\\\\)?/g,tt=function getBaseIntrinsic(s,o){var i,a=s;if(qe(Re,a)&&(a=\"%\"+(i=Re[a])[0]+\"%\"),qe(xe,a)){var u=xe[a];if(u===Se&&(u=Te(a)),void 0===u&&!o)throw new L(\"intrinsic \"+s+\" exists, but is not available. Please file an issue!\");return{alias:i,name:a,value:u}}throw new j(\"intrinsic \"+s+\" does not exist!\")};s.exports=function GetIntrinsic(s,o){if(\"string\"!=typeof s||0===s.length)throw new L(\"intrinsic name must be a non-empty string\");if(arguments.length>1&&\"boolean\"!=typeof o)throw new L('\"allowMissing\" argument must be a boolean');if(null===Xe(/^%?[^%]*%?$/,s))throw new j(\"`%` may not be present anywhere but at the beginning and end of the intrinsic name\");var i=function stringToPath(s){var o=Ye(s,0,1),i=Ye(s,-1);if(\"%\"===o&&\"%\"!==i)throw new j(\"invalid intrinsic syntax, expected closing `%`\");if(\"%\"===i&&\"%\"!==o)throw new j(\"invalid intrinsic syntax, expected opening `%`\");var a=[];return He(s,Qe,(function(s,o,i,u){a[a.length]=i?He(u,et,\"$1\"):o||s})),a}(s),a=i.length>0?i[0]:\"\",u=tt(\"%\"+a+\"%\",o),_=u.name,w=u.value,x=!1,C=u.alias;C&&(a=C[0],We(i,ze([0,1],C)));for(var B=1,$=!0;B=i.length){var Y=ae(w,U);w=($=!!Y)&&\"get\"in Y&&!(\"originalValue\"in Y.get)?Y.get:w[U]}else $=qe(w,U),w=w[U];$&&!x&&(xe[_]=w)}}return w}},70470:(s,o,i)=>{\"use strict\";var a=i(46028),u=i(25594);s.exports=function(s){var o=a(s,\"string\");return u(o)?o:o+\"\"}},70695:(s,o,i)=>{var a=i(78096),u=i(72428),_=i(56449),w=i(3656),x=i(30361),C=i(37167),j=Object.prototype.hasOwnProperty;s.exports=function arrayLikeKeys(s,o){var i=_(s),L=!i&&u(s),B=!i&&!L&&w(s),$=!i&&!L&&!B&&C(s),U=i||L||B||$,V=U?a(s.length,String):[],z=V.length;for(var Y in s)!o&&!j.call(s,Y)||U&&(\"length\"==Y||B&&(\"offset\"==Y||\"parent\"==Y)||$&&(\"buffer\"==Y||\"byteLength\"==Y||\"byteOffset\"==Y)||x(Y,z))||V.push(Y);return V}},70981:(s,o,i)=>{var a=i(75251),u=i(62060),_=i(32865),w=i(75948);s.exports=function setWrapToString(s,o,i){var x=o+\"\";return _(s,u(x,w(a(x),i)))}},71064:(s,o,i)=>{\"use strict\";var a=i(79612);s.exports=a.getPrototypeOf||null},71167:(s,o,i)=>{const a=i(10316);s.exports=class StringElement extends a{constructor(s,o,i){super(s,o,i),this.element=\"string\"}primitive(){return\"string\"}get length(){return this.content.length}}},71340:(s,o,i)=>{\"use strict\";var a=i(11091),u=i(29538);a({target:\"Object\",stat:!0,arity:2,forced:Object.assign!==u},{assign:u})},71514:s=>{\"use strict\";s.exports=Math.abs},71961:(s,o,i)=>{var a=i(49653);s.exports=function cloneTypedArray(s,o){var i=o?a(s.buffer):s.buffer;return new s.constructor(i,s.byteOffset,s.length)}},72428:(s,o,i)=>{var a=i(27534),u=i(40346),_=Object.prototype,w=_.hasOwnProperty,x=_.propertyIsEnumerable,C=a(function(){return arguments}())?a:function(s){return u(s)&&w.call(s,\"callee\")&&!x.call(s,\"callee\")};s.exports=C},72552:(s,o,i)=>{var a=i(51873),u=i(659),_=i(59350),w=a?a.toStringTag:void 0;s.exports=function baseGetTag(s){return null==s?void 0===s?\"[object Undefined]\":\"[object Null]\":w&&w in Object(s)?u(s):_(s)}},72903:(s,o,i)=>{var a=i(23805),u=i(55527),_=i(90181),w=Object.prototype.hasOwnProperty;s.exports=function baseKeysIn(s){if(!a(s))return _(s);var o=u(s),i=[];for(var x in s)(\"constructor\"!=x||!o&&w.call(s,x))&&i.push(x);return i}},72949:(s,o,i)=>{var a=i(12651);s.exports=function mapCacheSet(s,o){var i=a(this,s),u=i.size;return i.set(s,o),this.size+=i.size==u?0:1,this}},73093:(s,o,i)=>{\"use strict\";var a=i(94459);s.exports=function sign(s){return a(s)||0===s?s:s<0?-1:1}},73126:(s,o,i)=>{\"use strict\";var a=i(66743),u=i(69675),_=i(10076),w=i(13144);s.exports=function callBindBasic(s){if(s.length<1||\"function\"!=typeof s[0])throw new u(\"a function is required\");return w(a,_,s)}},73170:(s,o,i)=>{var a=i(16547),u=i(31769),_=i(30361),w=i(23805),x=i(77797);s.exports=function baseSet(s,o,i,C){if(!w(s))return s;for(var j=-1,L=(o=u(o,s)).length,B=L-1,$=s;null!=$&&++j{var o=/\\w*$/;s.exports=function cloneRegExp(s){var i=new s.constructor(s.source,o.exec(s));return i.lastIndex=s.lastIndex,i}},73402:s=>{function concat(...s){return s.map((s=>function source(s){return s?\"string\"==typeof s?s:s.source:null}(s))).join(\"\")}s.exports=function http(s){const o=\"HTTP/(2|1\\\\.[01])\",i={className:\"attribute\",begin:concat(\"^\",/[A-Za-z][A-Za-z0-9-]*/,\"(?=\\\\:\\\\s)\"),starts:{contains:[{className:\"punctuation\",begin:/: /,relevance:0,starts:{end:\"$\",relevance:0}}]}},a=[i,{begin:\"\\\\n\\\\n\",starts:{subLanguage:[],endsWithParent:!0}}];return{name:\"HTTP\",aliases:[\"https\"],illegal:/\\S/,contains:[{begin:\"^(?=\"+o+\" \\\\d{3})\",end:/$/,contains:[{className:\"meta\",begin:o},{className:\"number\",begin:\"\\\\b\\\\d{3}\\\\b\"}],starts:{end:/\\b\\B/,illegal:/\\S/,contains:a}},{begin:\"(?=^[A-Z]+ (.*?) \"+o+\"$)\",end:/$/,contains:[{className:\"string\",begin:\" \",end:\" \",excludeBegin:!0,excludeEnd:!0},{className:\"meta\",begin:o},{className:\"keyword\",begin:\"[A-Z]+\"}],starts:{end:/\\b\\B/,illegal:/\\S/,contains:a}},s.inherit(i,{relevance:0})]}}},73424:(s,o,i)=>{var a=i(16962),u=i(2874),_=Array.prototype.push;function baseAry(s,o){return 2==o?function(o,i){return s(o,i)}:function(o){return s(o)}}function cloneArray(s){for(var o=s?s.length:0,i=Array(o);o--;)i[o]=s[o];return i}function wrapImmutable(s,o){return function(){var i=arguments.length;if(i){for(var a=Array(i);i--;)a[i]=arguments[i];var u=a[0]=o.apply(void 0,a);return s.apply(void 0,a),u}}}s.exports=function baseConvert(s,o,i,w){var x=\"function\"==typeof o,C=o===Object(o);if(C&&(w=i,i=o,o=void 0),null==i)throw new TypeError;w||(w={});var j=!(\"cap\"in w)||w.cap,L=!(\"curry\"in w)||w.curry,B=!(\"fixed\"in w)||w.fixed,$=!(\"immutable\"in w)||w.immutable,U=!(\"rearg\"in w)||w.rearg,V=x?i:u,z=\"curry\"in w&&w.curry,Y=\"fixed\"in w&&w.fixed,Z=\"rearg\"in w&&w.rearg,ee=x?i.runInContext():void 0,ie=x?i:{ary:s.ary,assign:s.assign,clone:s.clone,curry:s.curry,forEach:s.forEach,isArray:s.isArray,isError:s.isError,isFunction:s.isFunction,isWeakMap:s.isWeakMap,iteratee:s.iteratee,keys:s.keys,rearg:s.rearg,toInteger:s.toInteger,toPath:s.toPath},ae=ie.ary,ce=ie.assign,le=ie.clone,pe=ie.curry,de=ie.forEach,fe=ie.isArray,ye=ie.isError,be=ie.isFunction,_e=ie.isWeakMap,Se=ie.keys,we=ie.rearg,xe=ie.toInteger,Pe=ie.toPath,Te=Se(a.aryMethod),Re={castArray:function(s){return function(){var o=arguments[0];return fe(o)?s(cloneArray(o)):s.apply(void 0,arguments)}},iteratee:function(s){return function(){var o=arguments[1],i=s(arguments[0],o),a=i.length;return j&&\"number\"==typeof o?(o=o>2?o-2:1,a&&a<=o?i:baseAry(i,o)):i}},mixin:function(s){return function(o){var i=this;if(!be(i))return s(i,Object(o));var a=[];return de(Se(o),(function(s){be(o[s])&&a.push([s,i.prototype[s]])})),s(i,Object(o)),de(a,(function(s){var o=s[1];be(o)?i.prototype[s[0]]=o:delete i.prototype[s[0]]})),i}},nthArg:function(s){return function(o){var i=o<0?1:xe(o)+1;return pe(s(o),i)}},rearg:function(s){return function(o,i){var a=i?i.length:0;return pe(s(o,i),a)}},runInContext:function(o){return function(i){return baseConvert(s,o(i),w)}}};function castCap(s,o){if(j){var i=a.iterateeRearg[s];if(i)return function iterateeRearg(s,o){return overArg(s,(function(s){var i=o.length;return function baseArity(s,o){return 2==o?function(o,i){return s.apply(void 0,arguments)}:function(o){return s.apply(void 0,arguments)}}(we(baseAry(s,i),o),i)}))}(o,i);var u=!x&&a.iterateeAry[s];if(u)return function iterateeAry(s,o){return overArg(s,(function(s){return\"function\"==typeof s?baseAry(s,o):s}))}(o,u)}return o}function castFixed(s,o,i){if(B&&(Y||!a.skipFixed[s])){var u=a.methodSpread[s],w=u&&u.start;return void 0===w?ae(o,i):function flatSpread(s,o){return function(){for(var i=arguments.length,a=i-1,u=Array(i);i--;)u[i]=arguments[i];var w=u[o],x=u.slice(0,o);return w&&_.apply(x,w),o!=a&&_.apply(x,u.slice(o+1)),s.apply(this,x)}}(o,w)}return o}function castRearg(s,o,i){return U&&i>1&&(Z||!a.skipRearg[s])?we(o,a.methodRearg[s]||a.aryRearg[i]):o}function cloneByPath(s,o){for(var i=-1,a=(o=Pe(o)).length,u=a-1,_=le(Object(s)),w=_;null!=w&&++i1?pe(o,i):o}(0,u=castCap(_,u),s),!1}})),!u})),u||(u=w),u==o&&(u=z?pe(u,1):function(){return o.apply(this,arguments)}),u.convert=createConverter(_,o),u.placeholder=o.placeholder=i,u}if(!C)return wrap(o,i,V);var $e=i,qe=[];return de(Te,(function(s){de(a.aryMethod[s],(function(s){var o=$e[a.remap[s]||s];o&&qe.push([s,wrap(s,o,$e)])}))})),de(Se($e),(function(s){var o=$e[s];if(\"function\"==typeof o){for(var i=qe.length;i--;)if(qe[i][0]==s)return;o.convert=createConverter(s,o),qe.push([s,o])}})),de(qe,(function(s){$e[s[0]]=s[1]})),$e.convert=function convertLib(s){return $e.runInContext.convert(s)(void 0)},$e.placeholder=$e,de(Se($e),(function(s){de(a.realToAlias[s]||[],(function(o){$e[o]=$e[s]}))})),$e}},73448:(s,o,i)=>{\"use strict\";var a=i(73948),u=i(29367),_=i(87136),w=i(93742),x=i(76264)(\"iterator\");s.exports=function(s){if(!_(s))return u(s,x)||u(s,\"@@iterator\")||w[a(s)]}},73648:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(98828),_=i(49552);s.exports=!a&&!u((function(){return 7!==Object.defineProperty(_(\"div\"),\"a\",{get:function(){return 7}}).a}))},73948:(s,o,i)=>{\"use strict\";var a=i(52623),u=i(62250),_=i(45807),w=i(76264)(\"toStringTag\"),x=Object,C=\"Arguments\"===_(function(){return arguments}());s.exports=a?_:function(s){var o,i,a;return void 0===s?\"Undefined\":null===s?\"Null\":\"string\"==typeof(i=function(s,o){try{return s[o]}catch(s){}}(o=x(s),w))?i:C?_(o):\"Object\"===(a=_(o))&&u(o.callee)?\"Arguments\":a}},73992:(s,o)=>{\"use strict\";var i=Object.prototype.hasOwnProperty;function decode(s){try{return decodeURIComponent(s.replace(/\\+/g,\" \"))}catch(s){return null}}function encode(s){try{return encodeURIComponent(s)}catch(s){return null}}o.stringify=function querystringify(s,o){o=o||\"\";var a,u,_=[];for(u in\"string\"!=typeof o&&(o=\"?\"),s)if(i.call(s,u)){if((a=s[u])||null!=a&&!isNaN(a)||(a=\"\"),u=encode(u),a=encode(a),null===u||null===a)continue;_.push(u+\"=\"+a)}return _.length?o+_.join(\"&\"):\"\"},o.parse=function querystring(s){for(var o,i=/([^=?#&]+)=?([^&]*)/g,a={};o=i.exec(s);){var u=decode(o[1]),_=decode(o[2]);null===u||null===_||u in a||(a[u]=_)}return a}},74218:s=>{s.exports=function isKeyable(s){var o=typeof s;return\"string\"==o||\"number\"==o||\"symbol\"==o||\"boolean\"==o?\"__proto__\"!==s:null===s}},74239:(s,o,i)=>{\"use strict\";var a=i(87136),u=TypeError;s.exports=function(s){if(a(s))throw new u(\"Can't call method on \"+s);return s}},74284:(s,o,i)=>{\"use strict\";var a=i(39447),u=i(73648),_=i(58661),w=i(36624),x=i(70470),C=TypeError,j=Object.defineProperty,L=Object.getOwnPropertyDescriptor,B=\"enumerable\",$=\"configurable\",U=\"writable\";o.f=a?_?function defineProperty(s,o,i){if(w(s),o=x(o),w(i),\"function\"==typeof s&&\"prototype\"===o&&\"value\"in i&&U in i&&!i[U]){var a=L(s,o);a&&a[U]&&(s[o]=i.value,i={configurable:$ in i?i[$]:a[$],enumerable:B in i?i[B]:a[B],writable:!1})}return j(s,o,i)}:j:function defineProperty(s,o,i){if(w(s),o=x(o),w(i),u)try{return j(s,o,i)}catch(s){}if(\"get\"in i||\"set\"in i)throw new C(\"Accessors not supported\");return\"value\"in i&&(s[o]=i.value),s}},74335:s=>{s.exports=function overArg(s,o){return function(i){return s(o(i))}}},74372:(s,o,i)=>{\"use strict\";var a=i(69675),u=i(36556)(\"TypedArray.prototype.buffer\",!0),_=i(35680);s.exports=u||function typedArrayBuffer(s){if(!_(s))throw new a(\"Not a Typed Array\");return s.buffer}},74436:(s,o,i)=>{\"use strict\";var a=i(4993),u=i(34849),_=i(20575),createMethod=function(s){return function(o,i,w){var x=a(o),C=_(x);if(0===C)return!s&&-1;var j,L=u(w,C);if(s&&i!=i){for(;C>L;)if((j=x[L++])!=j)return!0}else for(;C>L;L++)if((s||L in x)&&x[L]===i)return s||L||0;return!s&&-1}};s.exports={includes:createMethod(!0),indexOf:createMethod(!1)}},74610:(s,o,i)=>{\"use strict\";s.exports=Transform;var a=i(86048).F,u=a.ERR_METHOD_NOT_IMPLEMENTED,_=a.ERR_MULTIPLE_CALLBACK,w=a.ERR_TRANSFORM_ALREADY_TRANSFORMING,x=a.ERR_TRANSFORM_WITH_LENGTH_0,C=i(25382);function afterTransform(s,o){var i=this._transformState;i.transforming=!1;var a=i.writecb;if(null===a)return this.emit(\"error\",new _);i.writechunk=null,i.writecb=null,null!=o&&this.push(o),a(s);var u=this._readableState;u.reading=!1,(u.needReadable||u.length{var a=i(21791),u=i(95950);s.exports=function baseAssign(s,o){return s&&a(o,u(o),s)}},75147:(s,o,i)=>{const a=i(85105);s.exports=class JSON06Serialiser extends a{serialise(s){if(!(s instanceof this.namespace.elements.Element))throw new TypeError(`Given element \\`${s}\\` is not an Element instance`);let o;s._attributes&&s.attributes.get(\"variable\")&&(o=s.attributes.get(\"variable\"));const i={element:s.element};s._meta&&s._meta.length>0&&(i.meta=this.serialiseObject(s.meta));const a=\"enum\"===s.element||-1!==s.attributes.keys().indexOf(\"enumerations\");if(a){const o=this.enumSerialiseAttributes(s);o&&(i.attributes=o)}else if(s._attributes&&s._attributes.length>0){let{attributes:a}=s;a.get(\"metadata\")&&(a=a.clone(),a.set(\"meta\",a.get(\"metadata\")),a.remove(\"metadata\")),\"member\"===s.element&&o&&(a=a.clone(),a.remove(\"variable\")),a.length>0&&(i.attributes=this.serialiseObject(a))}if(a)i.content=this.enumSerialiseContent(s,i);else if(this[`${s.element}SerialiseContent`])i.content=this[`${s.element}SerialiseContent`](s,i);else if(void 0!==s.content){let a;o&&s.content.key?(a=s.content.clone(),a.key.attributes.set(\"variable\",o),a=this.serialiseContent(a)):a=this.serialiseContent(s.content),this.shouldSerialiseContent(s,a)&&(i.content=a)}else this.shouldSerialiseContent(s,s.content)&&s instanceof this.namespace.elements.Array&&(i.content=[]);return i}shouldSerialiseContent(s,o){return\"parseResult\"===s.element||\"httpRequest\"===s.element||\"httpResponse\"===s.element||\"category\"===s.element||\"link\"===s.element||void 0!==o&&(!Array.isArray(o)||0!==o.length)}refSerialiseContent(s,o){return delete o.attributes,{href:s.toValue(),path:s.path.toValue()}}sourceMapSerialiseContent(s){return s.toValue()}dataStructureSerialiseContent(s){return[this.serialiseContent(s.content)]}enumSerialiseAttributes(s){const o=s.attributes.clone(),i=o.remove(\"enumerations\")||new this.namespace.elements.Array([]),a=o.get(\"default\");let u=o.get(\"samples\")||new this.namespace.elements.Array([]);if(a&&a.content&&(a.content.attributes&&a.content.attributes.remove(\"typeAttributes\"),o.set(\"default\",new this.namespace.elements.Array([a.content]))),u.forEach((s=>{s.content&&s.content.element&&s.content.attributes.remove(\"typeAttributes\")})),s.content&&0!==i.length&&u.unshift(s.content),u=u.map((s=>s instanceof this.namespace.elements.Array?[s]:new this.namespace.elements.Array([s.content]))),u.length&&o.set(\"samples\",u),o.length>0)return this.serialiseObject(o)}enumSerialiseContent(s){if(s._attributes){const o=s.attributes.get(\"enumerations\");if(o&&o.length>0)return o.content.map((s=>{const o=s.clone();return o.attributes.remove(\"typeAttributes\"),this.serialise(o)}))}if(s.content){const o=s.content.clone();return o.attributes.remove(\"typeAttributes\"),[this.serialise(o)]}return[]}deserialise(s){if(\"string\"==typeof s)return new this.namespace.elements.String(s);if(\"number\"==typeof s)return new this.namespace.elements.Number(s);if(\"boolean\"==typeof s)return new this.namespace.elements.Boolean(s);if(null===s)return new this.namespace.elements.Null;if(Array.isArray(s))return new this.namespace.elements.Array(s.map(this.deserialise,this));const o=this.namespace.getElementClass(s.element),i=new o;i.element!==s.element&&(i.element=s.element),s.meta&&this.deserialiseObject(s.meta,i.meta),s.attributes&&this.deserialiseObject(s.attributes,i.attributes);const a=this.deserialiseContent(s.content);if(void 0===a&&null!==i.content||(i.content=a),\"enum\"===i.element){i.content&&i.attributes.set(\"enumerations\",i.content);let s=i.attributes.get(\"samples\");if(i.attributes.remove(\"samples\"),s){const a=s;s=new this.namespace.elements.Array,a.forEach((a=>{a.forEach((a=>{const u=new o(a);u.element=i.element,s.push(u)}))}));const u=s.shift();i.content=u?u.content:void 0,i.attributes.set(\"samples\",s)}else i.content=void 0;let a=i.attributes.get(\"default\");if(a&&a.length>0){a=a.get(0);const s=new o(a);s.element=i.element,i.attributes.set(\"default\",s)}}else if(\"dataStructure\"===i.element&&Array.isArray(i.content))[i.content]=i.content;else if(\"category\"===i.element){const s=i.attributes.get(\"meta\");s&&(i.attributes.set(\"metadata\",s),i.attributes.remove(\"meta\"))}else\"member\"===i.element&&i.key&&i.key._attributes&&i.key._attributes.getValue(\"variable\")&&(i.attributes.set(\"variable\",i.key.attributes.get(\"variable\")),i.key.attributes.remove(\"variable\"));return i}serialiseContent(s){if(s instanceof this.namespace.elements.Element)return this.serialise(s);if(s instanceof this.namespace.KeyValuePair){const o={key:this.serialise(s.key)};return s.value&&(o.value=this.serialise(s.value)),o}return s&&s.map?s.map(this.serialise,this):s}deserialiseContent(s){if(s){if(s.element)return this.deserialise(s);if(s.key){const o=new this.namespace.KeyValuePair(this.deserialise(s.key));return s.value&&(o.value=this.deserialise(s.value)),o}if(s.map)return s.map(this.deserialise,this)}return s}shouldRefract(s){return!!(s._attributes&&s.attributes.keys().length||s._meta&&s.meta.keys().length)||\"enum\"!==s.element&&(s.element!==s.primitive()||\"member\"===s.element)}convertKeyToRefract(s,o){return this.shouldRefract(o)?this.serialise(o):\"enum\"===o.element?this.serialiseEnum(o):\"array\"===o.element?o.map((o=>this.shouldRefract(o)||\"default\"===s?this.serialise(o):\"array\"===o.element||\"object\"===o.element||\"enum\"===o.element?o.children.map((s=>this.serialise(s))):o.toValue())):\"object\"===o.element?(o.content||[]).map(this.serialise,this):o.toValue()}serialiseEnum(s){return s.children.map((s=>this.serialise(s)))}serialiseObject(s){const o={};return s.forEach(((s,i)=>{if(s){const a=i.toValue();o[a]=this.convertKeyToRefract(a,s)}})),o}deserialiseObject(s,o){Object.keys(s).forEach((i=>{o.set(i,this.deserialise(s[i]))}))}}},75208:s=>{\"use strict\";var o,i=\"\";s.exports=function repeat(s,a){if(\"string\"!=typeof s)throw new TypeError(\"expected a string\");if(1===a)return s;if(2===a)return s+s;var u=s.length*a;if(o!==s||void 0===o)o=s,i=\"\";else if(i.length>=u)return i.substr(0,u);for(;u>i.length&&a>1;)1&a&&(i+=s),a>>=1,s+=s;return i=(i+=s).substr(0,u)}},75251:s=>{var o=/\\{\\n\\/\\* \\[wrapped with (.+)\\] \\*/,i=/,? & /;s.exports=function getWrapDetails(s){var a=s.match(o);return a?a[1].split(i):[]}},75288:s=>{s.exports=function eq(s,o){return s===o||s!=s&&o!=o}},75795:(s,o,i)=>{\"use strict\";var a=i(6549);if(a)try{a([],\"length\")}catch(s){a=null}s.exports=a},75817:s=>{\"use strict\";s.exports=function(s,o){return{enumerable:!(1&s),configurable:!(2&s),writable:!(4&s),value:o}}},75880:s=>{\"use strict\";s.exports=Math.pow},75896:(s,o,i)=>{\"use strict\";var a=i(65606);function emitErrorAndCloseNT(s,o){emitErrorNT(s,o),emitCloseNT(s)}function emitCloseNT(s){s._writableState&&!s._writableState.emitClose||s._readableState&&!s._readableState.emitClose||s.emit(\"close\")}function emitErrorNT(s,o){s.emit(\"error\",o)}s.exports={destroy:function destroy(s,o){var i=this,u=this._readableState&&this._readableState.destroyed,_=this._writableState&&this._writableState.destroyed;return u||_?(o?o(s):s&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,a.nextTick(emitErrorNT,this,s)):a.nextTick(emitErrorNT,this,s)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(s||null,(function(s){!o&&s?i._writableState?i._writableState.errorEmitted?a.nextTick(emitCloseNT,i):(i._writableState.errorEmitted=!0,a.nextTick(emitErrorAndCloseNT,i,s)):a.nextTick(emitErrorAndCloseNT,i,s):o?(a.nextTick(emitCloseNT,i),o(s)):a.nextTick(emitCloseNT,i)})),this)},undestroy:function undestroy(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)},errorOrDestroy:function errorOrDestroy(s,o){var i=s._readableState,a=s._writableState;i&&i.autoDestroy||a&&a.autoDestroy?s.destroy(o):s.emit(\"error\",o)}}},75948:(s,o,i)=>{var a=i(83729),u=i(15325),_=[[\"ary\",128],[\"bind\",1],[\"bindKey\",2],[\"curry\",8],[\"curryRight\",16],[\"flip\",512],[\"partial\",32],[\"partialRight\",64],[\"rearg\",256]];s.exports=function updateWrapDetails(s,o){return a(_,(function(i){var a=\"_.\"+i[0];o&i[1]&&!u(s,a)&&s.push(a)})),s.sort()}},76024:(s,o,i)=>{\"use strict\";var a=i(41505),u=Function.prototype,_=u.apply,w=u.call;s.exports=\"object\"==typeof Reflect&&Reflect.apply||(a?w.bind(_):function(){return w.apply(_,arguments)})},76169:(s,o,i)=>{var a=i(49653);s.exports=function cloneDataView(s,o){var i=o?a(s.buffer):s.buffer;return new s.constructor(i,s.byteOffset,s.byteLength)}},76189:s=>{var o=Object.prototype.hasOwnProperty;s.exports=function initCloneArray(s){var i=s.length,a=new s.constructor(i);return i&&\"string\"==typeof s[0]&&o.call(s,\"index\")&&(a.index=s.index,a.input=s.input),a}},76264:(s,o,i)=>{\"use strict\";var a=i(45951),u=i(85816),_=i(49724),w=i(6499),x=i(19846),C=i(51175),j=a.Symbol,L=u(\"wks\"),B=C?j.for||j:j&&j.withoutSetter||w;s.exports=function(s){return _(L,s)||(L[s]=x&&_(j,s)?j[s]:B(\"Symbol.\"+s)),L[s]}},76545:(s,o,i)=>{var a=i(56110)(i(9325),\"Set\");s.exports=a},76578:s=>{\"use strict\";s.exports=[\"Float16Array\",\"Float32Array\",\"Float64Array\",\"Int8Array\",\"Int16Array\",\"Int32Array\",\"Uint8Array\",\"Uint8ClampedArray\",\"Uint16Array\",\"Uint32Array\",\"BigInt64Array\",\"BigUint64Array\"]},76959:s=>{s.exports=function strictIndexOf(s,o,i){for(var a=i-1,u=s.length;++a{var a=i(91033),u=i(82819),_=i(37471),w=i(18073),x=i(11287),C=i(36306),j=i(9325);s.exports=function createCurry(s,o,i){var L=u(s);return function wrapper(){for(var u=arguments.length,B=Array(u),$=u,U=x(wrapper);$--;)B[$]=arguments[$];var V=u<3&&B[0]!==U&&B[u-1]!==U?[]:C(B,U);return(u-=V.length){var a=i(49653),u=i(76169),_=i(73201),w=i(93736),x=i(71961);s.exports=function initCloneByTag(s,o,i){var C=s.constructor;switch(o){case\"[object ArrayBuffer]\":return a(s);case\"[object Boolean]\":case\"[object Date]\":return new C(+s);case\"[object DataView]\":return u(s,i);case\"[object Float32Array]\":case\"[object Float64Array]\":case\"[object Int8Array]\":case\"[object Int16Array]\":case\"[object Int32Array]\":case\"[object Uint8Array]\":case\"[object Uint8ClampedArray]\":case\"[object Uint16Array]\":case\"[object Uint32Array]\":return x(s,i);case\"[object Map]\":case\"[object Set]\":return new C;case\"[object Number]\":case\"[object String]\":return new C(s);case\"[object RegExp]\":return _(s);case\"[object Symbol]\":return w(s)}}},77556:(s,o,i)=>{var a=i(51873),u=i(34932),_=i(56449),w=i(44394),x=a?a.prototype:void 0,C=x?x.toString:void 0;s.exports=function baseToString(s){if(\"string\"==typeof s)return s;if(_(s))return u(s,baseToString)+\"\";if(w(s))return C?C.call(s):\"\";var o=s+\"\";return\"0\"==o&&1/s==-1/0?\"-0\":o}},77731:(s,o,i)=>{var a=i(79920)(\"set\",i(63560));a.placeholder=i(2874),s.exports=a},77797:(s,o,i)=>{var a=i(44394);s.exports=function toKey(s){if(\"string\"==typeof s||a(s))return s;var o=s+\"\";return\"0\"==o&&1/s==-1/0?\"-0\":o}},78004:s=>{\"use strict\";class SubRange{constructor(s,o){this.low=s,this.high=o,this.length=1+o-s}overlaps(s){return!(this.highs.high)}touches(s){return!(this.high+1s.high)}add(s){return new SubRange(Math.min(this.low,s.low),Math.max(this.high,s.high))}subtract(s){return s.low<=this.low&&s.high>=this.high?[]:s.low>this.low&&s.highs+o.length),0)}add(s,o){var _add=s=>{for(var o=0;o{for(var o=0;o{for(var o=0;o{for(var i=o.low;i<=o.high;)s.push(i),i++;return s}),[])}subranges(){return this.ranges.map((s=>({low:s.low,high:s.high,length:1+s.high-s.low})))}}s.exports=DRange},78096:s=>{s.exports=function baseTimes(s,o){for(var i=-1,a=Array(s);++i{\"use strict\";i(85160)},79192:(s,o,i)=>{\"use strict\";var a=i(51871),u=i(46285),_=i(74239),w=i(10043);s.exports=Object.setPrototypeOf||(\"__proto__\"in{}?function(){var s,o=!1,i={};try{(s=a(Object.prototype,\"__proto__\",\"set\"))(i,[]),o=i instanceof Array}catch(s){}return function setPrototypeOf(i,a){return _(i),w(a),u(i)?(o?s(i,a):i.__proto__=a,i):i}}():void 0)},79290:s=>{\"use strict\";s.exports=RangeError},79307:(s,o,i)=>{\"use strict\";var a=i(11091),u=i(44673);a({target:\"Function\",proto:!0,forced:Function.bind!==u},{bind:u})},79538:s=>{\"use strict\";s.exports=ReferenceError},79612:s=>{\"use strict\";s.exports=Object},79770:s=>{s.exports=function arrayFilter(s,o){for(var i=-1,a=null==s?0:s.length,u=0,_=[];++i{},79920:(s,o,i)=>{var a=i(73424),u=i(47934);s.exports=function convert(s,o,i){return a(u,s,o,i)}},80079:(s,o,i)=>{var a=i(63702),u=i(70080),_=i(24739),w=i(48655),x=i(31175);function ListCache(s){var o=-1,i=null==s?0:s.length;for(this.clear();++o{var a=i(13222);s.exports=function toLower(s){return a(s).toLowerCase()}},80257:(s,o,i)=>{var a=i(30980),u=i(56017),_=i(23007);s.exports=function wrapperClone(s){if(s instanceof a)return s.clone();var o=new u(s.__wrapped__,s.__chain__);return o.__actions__=_(s.__actions__),o.__index__=s.__index__,o.__values__=s.__values__,o}},80345:(s,o,i)=>{\"use strict\";function ownKeys(s,o){var i=Object.keys(s);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(s);o&&(a=a.filter((function(o){return Object.getOwnPropertyDescriptor(s,o).enumerable}))),i.push.apply(i,a)}return i}function _objectSpread(s){for(var o=1;o0?this.tail.next=o:this.head=o,this.tail=o,++this.length}},{key:\"unshift\",value:function unshift(s){var o={data:s,next:this.head};0===this.length&&(this.tail=o),this.head=o,++this.length}},{key:\"shift\",value:function shift(){if(0!==this.length){var s=this.head.data;return 1===this.length?this.head=this.tail=null:this.head=this.head.next,--this.length,s}}},{key:\"clear\",value:function clear(){this.head=this.tail=null,this.length=0}},{key:\"join\",value:function join(s){if(0===this.length)return\"\";for(var o=this.head,i=\"\"+o.data;o=o.next;)i+=s+o.data;return i}},{key:\"concat\",value:function concat(s){if(0===this.length)return a.alloc(0);for(var o,i,u,_=a.allocUnsafe(s>>>0),w=this.head,x=0;w;)o=w.data,i=_,u=x,a.prototype.copy.call(o,i,u),x+=w.data.length,w=w.next;return _}},{key:\"consume\",value:function consume(s,o){var i;return su.length?u.length:s;if(_===u.length?a+=u:a+=u.slice(0,s),0===(s-=_)){_===u.length?(++i,o.next?this.head=o.next:this.head=this.tail=null):(this.head=o,o.data=u.slice(_));break}++i}return this.length-=i,a}},{key:\"_getBuffer\",value:function _getBuffer(s){var o=a.allocUnsafe(s),i=this.head,u=1;for(i.data.copy(o),s-=i.data.length;i=i.next;){var _=i.data,w=s>_.length?_.length:s;if(_.copy(o,o.length-s,0,w),0===(s-=w)){w===_.length?(++u,i.next?this.head=i.next:this.head=this.tail=null):(this.head=i,i.data=_.slice(w));break}++u}return this.length-=u,o}},{key:_,value:function value(s,o){return u(this,_objectSpread(_objectSpread({},o),{},{depth:0,customInspect:!1}))}}]),BufferList}()},80376:s=>{\"use strict\";s.exports=[\"constructor\",\"hasOwnProperty\",\"isPrototypeOf\",\"propertyIsEnumerable\",\"toLocaleString\",\"toString\",\"valueOf\"]},80631:(s,o,i)=>{var a=i(28077),u=i(49326);s.exports=function hasIn(s,o){return null!=s&&u(s,o,a)}},80909:(s,o,i)=>{var a=i(30641),u=i(38329)(a);s.exports=u},80945:(s,o,i)=>{var a=i(80079),u=i(68223),_=i(53661);s.exports=function stackSet(s,o){var i=this.__data__;if(i instanceof a){var w=i.__data__;if(!u||w.length<199)return w.push([s,o]),this.size=++i.size,this;i=this.__data__=new _(w)}return i.set(s,o),this.size=i.size,this}},81042:(s,o,i)=>{var a=i(56110)(Object,\"create\");s.exports=a},81214:(s,o,i)=>{\"use strict\";function _typeof(s){return _typeof=\"function\"==typeof Symbol&&\"symbol\"==typeof Symbol.iterator?function(s){return typeof s}:function(s){return s&&\"function\"==typeof Symbol&&s.constructor===Symbol&&s!==Symbol.prototype?\"symbol\":typeof s},_typeof(s)}Object.defineProperty(o,\"__esModule\",{value:!0}),o.DebounceInput=void 0;var a=_interopRequireDefault(i(96540)),u=_interopRequireDefault(i(20181)),_=[\"element\",\"onChange\",\"value\",\"minLength\",\"debounceTimeout\",\"forceNotifyByEnter\",\"forceNotifyOnBlur\",\"onKeyDown\",\"onBlur\",\"inputRef\"];function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}function _objectWithoutProperties(s,o){if(null==s)return{};var i,a,u=function _objectWithoutPropertiesLoose(s,o){if(null==s)return{};var i,a,u={},_=Object.keys(s);for(a=0;a<_.length;a++)i=_[a],o.indexOf(i)>=0||(u[i]=s[i]);return u}(s,o);if(Object.getOwnPropertySymbols){var _=Object.getOwnPropertySymbols(s);for(a=0;a<_.length;a++)i=_[a],o.indexOf(i)>=0||Object.prototype.propertyIsEnumerable.call(s,i)&&(u[i]=s[i])}return u}function ownKeys(s,o){var i=Object.keys(s);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(s);o&&(a=a.filter((function(o){return Object.getOwnPropertyDescriptor(s,o).enumerable}))),i.push.apply(i,a)}return i}function _objectSpread(s){for(var o=1;o=a?i.notify(s):o.length>u.length&&i.notify(_objectSpread(_objectSpread({},s),{},{target:_objectSpread(_objectSpread({},s.target),{},{value:\"\"})}))}))})),_defineProperty(_assertThisInitialized(i),\"onKeyDown\",(function(s){\"Enter\"===s.key&&i.forceNotify(s);var o=i.props.onKeyDown;o&&(s.persist(),o(s))})),_defineProperty(_assertThisInitialized(i),\"onBlur\",(function(s){i.forceNotify(s);var o=i.props.onBlur;o&&(s.persist(),o(s))})),_defineProperty(_assertThisInitialized(i),\"createNotifier\",(function(s){if(s<0)i.notify=function(){return null};else if(0===s)i.notify=i.doNotify;else{var o=(0,u.default)((function(s){i.isDebouncing=!1,i.doNotify(s)}),s);i.notify=function(s){i.isDebouncing=!0,o(s)},i.flush=function(){return o.flush()},i.cancel=function(){i.isDebouncing=!1,o.cancel()}}})),_defineProperty(_assertThisInitialized(i),\"doNotify\",(function(){i.props.onChange.apply(void 0,arguments)})),_defineProperty(_assertThisInitialized(i),\"forceNotify\",(function(s){var o=i.props.debounceTimeout;if(i.isDebouncing||!(o>0)){i.cancel&&i.cancel();var a=i.state.value,u=i.props.minLength;a.length>=u?i.doNotify(s):i.doNotify(_objectSpread(_objectSpread({},s),{},{target:_objectSpread(_objectSpread({},s.target),{},{value:a})}))}})),i.isDebouncing=!1,i.state={value:void 0===s.value||null===s.value?\"\":s.value};var a=i.props.debounceTimeout;return i.createNotifier(a),i}return function _createClass(s,o,i){return o&&_defineProperties(s.prototype,o),i&&_defineProperties(s,i),Object.defineProperty(s,\"prototype\",{writable:!1}),s}(DebounceInput,[{key:\"componentDidUpdate\",value:function componentDidUpdate(s){if(!this.isDebouncing){var o=this.props,i=o.value,a=o.debounceTimeout,u=s.debounceTimeout,_=s.value,w=this.state.value;void 0!==i&&_!==i&&w!==i&&this.setState({value:i}),a!==u&&this.createNotifier(a)}}},{key:\"componentWillUnmount\",value:function componentWillUnmount(){this.flush&&this.flush()}},{key:\"render\",value:function render(){var s,o,i=this.props,u=i.element,w=(i.onChange,i.value,i.minLength,i.debounceTimeout,i.forceNotifyByEnter),x=i.forceNotifyOnBlur,C=i.onKeyDown,j=i.onBlur,L=i.inputRef,B=_objectWithoutProperties(i,_),$=this.state.value;s=w?{onKeyDown:this.onKeyDown}:C?{onKeyDown:C}:{},o=x?{onBlur:this.onBlur}:j?{onBlur:j}:{};var U=L?{ref:L}:{};return a.default.createElement(u,_objectSpread(_objectSpread(_objectSpread(_objectSpread({},B),{},{onChange:this.onChange,value:$},s),o),U))}}]),DebounceInput}(a.default.PureComponent);o.DebounceInput=w,_defineProperty(w,\"defaultProps\",{element:\"input\",type:\"text\",onKeyDown:void 0,onBlur:void 0,value:void 0,minLength:0,debounceTimeout:100,forceNotifyByEnter:!0,forceNotifyOnBlur:!0,inputRef:void 0})},81919:(s,o,i)=>{\"use strict\";var a=i(48287).Buffer;function isSpecificValue(s){return s instanceof a||s instanceof Date||s instanceof RegExp}function cloneSpecificValue(s){if(s instanceof a){var o=a.alloc?a.alloc(s.length):new a(s.length);return s.copy(o),o}if(s instanceof Date)return new Date(s.getTime());if(s instanceof RegExp)return new RegExp(s);throw new Error(\"Unexpected situation\")}function deepCloneArray(s){var o=[];return s.forEach((function(s,i){\"object\"==typeof s&&null!==s?Array.isArray(s)?o[i]=deepCloneArray(s):isSpecificValue(s)?o[i]=cloneSpecificValue(s):o[i]=u({},s):o[i]=s})),o}function safeGetProperty(s,o){return\"__proto__\"===o?void 0:s[o]}var u=s.exports=function(){if(arguments.length<1||\"object\"!=typeof arguments[0])return!1;if(arguments.length<2)return arguments[0];var s,o,i=arguments[0];return Array.prototype.slice.call(arguments,1).forEach((function(a){\"object\"!=typeof a||null===a||Array.isArray(a)||Object.keys(a).forEach((function(_){return o=safeGetProperty(i,_),(s=safeGetProperty(a,_))===i?void 0:\"object\"!=typeof s||null===s?void(i[_]=s):Array.isArray(s)?void(i[_]=deepCloneArray(s)):isSpecificValue(s)?void(i[_]=cloneSpecificValue(s)):\"object\"!=typeof o||null===o||Array.isArray(o)?void(i[_]=u({},s)):void(i[_]=u(o,s))}))})),i}},82048:(s,o,i)=>{\"use strict\";var a=i(11091),u=i(88280),_=i(15972),w=i(79192),x=i(19595),C=i(58075),j=i(61626),L=i(75817),B=i(39259),$=i(85884),U=i(24823),V=i(32096),z=i(76264)(\"toStringTag\"),Y=Error,Z=[].push,ee=function AggregateError(s,o){var i,a=u(ie,this);w?i=w(new Y,a?_(this):ie):(i=a?this:C(ie),j(i,z,\"Error\")),void 0!==o&&j(i,\"message\",V(o)),$(i,ee,i.stack,1),arguments.length>2&&B(i,arguments[2]);var x=[];return U(s,Z,{that:x}),j(i,\"errors\",x),i};w?w(ee,Y):x(ee,Y,{name:!0});var ie=ee.prototype=C(Y.prototype,{constructor:L(1,ee),message:L(1,\"\"),name:L(1,\"AggregateError\")});a({global:!0,constructor:!0,arity:2},{AggregateError:ee})},82159:(s,o,i)=>{\"use strict\";var a=i(62250),u=i(4640),_=TypeError;s.exports=function(s){if(a(s))return s;throw new _(u(s)+\" is not a function\")}},82199:(s,o,i)=>{var a=i(14528),u=i(56449);s.exports=function baseGetAllKeys(s,o,i){var _=o(s);return u(s)?_:a(_,i(s))}},82261:(s,o,i)=>{\"use strict\";Object.defineProperty(o,\"__esModule\",{value:!0});var a=_interopRequireDefault(i(9404)),u=_interopRequireDefault(i(48590));function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}o.default=function(s,o,i){var _=Object.keys(o);if(!_.length)return\"Store does not have a valid reducer. Make sure the argument passed to combineReducers is an object whose values are reducers.\";var w=(0,u.default)(i);if(a.default.isImmutable?!a.default.isImmutable(s):!a.default.Iterable.isIterable(s))return\"The \"+w+' is of unexpected type. Expected argument to be an instance of Immutable.Collection or Immutable.Record with the following properties: \"'+_.join('\", \"')+'\".';var x=s.toSeq().keySeq().toArray().filter((function(s){return!o.hasOwnProperty(s)}));return x.length>0?\"Unexpected \"+(1===x.length?\"property\":\"properties\")+' \"'+x.join('\", \"')+'\" found in '+w+'. Expected to find one of the known reducer property names instead: \"'+_.join('\", \"')+'\". Unexpected properties will be ignored.':null},s.exports=o.default},82682:(s,o,i)=>{\"use strict\";var a=i(69600),u=Object.prototype.toString,_=Object.prototype.hasOwnProperty;s.exports=function forEach(s,o,i){if(!a(o))throw new TypeError(\"iterator must be a function\");var w;arguments.length>=3&&(w=i),function isArray(s){return\"[object Array]\"===u.call(s)}(s)?function forEachArray(s,o,i){for(var a=0,u=s.length;a{var a=i(39344),u=i(23805);s.exports=function createCtor(s){return function(){var o=arguments;switch(o.length){case 0:return new s;case 1:return new s(o[0]);case 2:return new s(o[0],o[1]);case 3:return new s(o[0],o[1],o[2]);case 4:return new s(o[0],o[1],o[2],o[3]);case 5:return new s(o[0],o[1],o[2],o[3],o[4]);case 6:return new s(o[0],o[1],o[2],o[3],o[4],o[5]);case 7:return new s(o[0],o[1],o[2],o[3],o[4],o[5],o[6])}var i=a(s.prototype),_=s.apply(i,o);return u(_)?_:i}}},82890:(s,o,i)=>{\"use strict\";var a=i(56698),u=i(90392),_=i(92861).Buffer,w=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591],x=new Array(160);function Sha512(){this.init(),this._w=x,u.call(this,128,112)}function Ch(s,o,i){return i^s&(o^i)}function maj(s,o,i){return s&o|i&(s|o)}function sigma0(s,o){return(s>>>28|o<<4)^(o>>>2|s<<30)^(o>>>7|s<<25)}function sigma1(s,o){return(s>>>14|o<<18)^(s>>>18|o<<14)^(o>>>9|s<<23)}function Gamma0(s,o){return(s>>>1|o<<31)^(s>>>8|o<<24)^s>>>7}function Gamma0l(s,o){return(s>>>1|o<<31)^(s>>>8|o<<24)^(s>>>7|o<<25)}function Gamma1(s,o){return(s>>>19|o<<13)^(o>>>29|s<<3)^s>>>6}function Gamma1l(s,o){return(s>>>19|o<<13)^(o>>>29|s<<3)^(s>>>6|o<<26)}function getCarry(s,o){return s>>>0>>0?1:0}a(Sha512,u),Sha512.prototype.init=function(){return this._ah=1779033703,this._bh=3144134277,this._ch=1013904242,this._dh=2773480762,this._eh=1359893119,this._fh=2600822924,this._gh=528734635,this._hh=1541459225,this._al=4089235720,this._bl=2227873595,this._cl=4271175723,this._dl=1595750129,this._el=2917565137,this._fl=725511199,this._gl=4215389547,this._hl=327033209,this},Sha512.prototype._update=function(s){for(var o=this._w,i=0|this._ah,a=0|this._bh,u=0|this._ch,_=0|this._dh,x=0|this._eh,C=0|this._fh,j=0|this._gh,L=0|this._hh,B=0|this._al,$=0|this._bl,U=0|this._cl,V=0|this._dl,z=0|this._el,Y=0|this._fl,Z=0|this._gl,ee=0|this._hl,ie=0;ie<32;ie+=2)o[ie]=s.readInt32BE(4*ie),o[ie+1]=s.readInt32BE(4*ie+4);for(;ie<160;ie+=2){var ae=o[ie-30],ce=o[ie-30+1],le=Gamma0(ae,ce),pe=Gamma0l(ce,ae),de=Gamma1(ae=o[ie-4],ce=o[ie-4+1]),fe=Gamma1l(ce,ae),ye=o[ie-14],be=o[ie-14+1],_e=o[ie-32],Se=o[ie-32+1],we=pe+be|0,xe=le+ye+getCarry(we,pe)|0;xe=(xe=xe+de+getCarry(we=we+fe|0,fe)|0)+_e+getCarry(we=we+Se|0,Se)|0,o[ie]=xe,o[ie+1]=we}for(var Pe=0;Pe<160;Pe+=2){xe=o[Pe],we=o[Pe+1];var Te=maj(i,a,u),Re=maj(B,$,U),$e=sigma0(i,B),qe=sigma0(B,i),ze=sigma1(x,z),We=sigma1(z,x),He=w[Pe],Ye=w[Pe+1],Xe=Ch(x,C,j),Qe=Ch(z,Y,Z),et=ee+We|0,tt=L+ze+getCarry(et,ee)|0;tt=(tt=(tt=tt+Xe+getCarry(et=et+Qe|0,Qe)|0)+He+getCarry(et=et+Ye|0,Ye)|0)+xe+getCarry(et=et+we|0,we)|0;var rt=qe+Re|0,nt=$e+Te+getCarry(rt,qe)|0;L=j,ee=Z,j=C,Z=Y,C=x,Y=z,x=_+tt+getCarry(z=V+et|0,V)|0,_=u,V=U,u=a,U=$,a=i,$=B,i=tt+nt+getCarry(B=et+rt|0,et)|0}this._al=this._al+B|0,this._bl=this._bl+$|0,this._cl=this._cl+U|0,this._dl=this._dl+V|0,this._el=this._el+z|0,this._fl=this._fl+Y|0,this._gl=this._gl+Z|0,this._hl=this._hl+ee|0,this._ah=this._ah+i+getCarry(this._al,B)|0,this._bh=this._bh+a+getCarry(this._bl,$)|0,this._ch=this._ch+u+getCarry(this._cl,U)|0,this._dh=this._dh+_+getCarry(this._dl,V)|0,this._eh=this._eh+x+getCarry(this._el,z)|0,this._fh=this._fh+C+getCarry(this._fl,Y)|0,this._gh=this._gh+j+getCarry(this._gl,Z)|0,this._hh=this._hh+L+getCarry(this._hl,ee)|0},Sha512.prototype._hash=function(){var s=_.allocUnsafe(64);function writeInt64BE(o,i,a){s.writeInt32BE(o,a),s.writeInt32BE(i,a+4)}return writeInt64BE(this._ah,this._al,0),writeInt64BE(this._bh,this._bl,8),writeInt64BE(this._ch,this._cl,16),writeInt64BE(this._dh,this._dl,24),writeInt64BE(this._eh,this._el,32),writeInt64BE(this._fh,this._fl,40),writeInt64BE(this._gh,this._gl,48),writeInt64BE(this._hh,this._hl,56),s},s.exports=Sha512},83120:(s,o,i)=>{var a=i(14528),u=i(45891);s.exports=function baseFlatten(s,o,i,_,w){var x=-1,C=s.length;for(i||(i=u),w||(w=[]);++x0&&i(j)?o>1?baseFlatten(j,o-1,i,_,w):a(w,j):_||(w[w.length]=j)}return w}},83141:(s,o,i)=>{\"use strict\";var a=i(92861).Buffer,u=a.isEncoding||function(s){switch((s=\"\"+s)&&s.toLowerCase()){case\"hex\":case\"utf8\":case\"utf-8\":case\"ascii\":case\"binary\":case\"base64\":case\"ucs2\":case\"ucs-2\":case\"utf16le\":case\"utf-16le\":case\"raw\":return!0;default:return!1}};function StringDecoder(s){var o;switch(this.encoding=function normalizeEncoding(s){var o=function _normalizeEncoding(s){if(!s)return\"utf8\";for(var o;;)switch(s){case\"utf8\":case\"utf-8\":return\"utf8\";case\"ucs2\":case\"ucs-2\":case\"utf16le\":case\"utf-16le\":return\"utf16le\";case\"latin1\":case\"binary\":return\"latin1\";case\"base64\":case\"ascii\":case\"hex\":return s;default:if(o)return;s=(\"\"+s).toLowerCase(),o=!0}}(s);if(\"string\"!=typeof o&&(a.isEncoding===u||!u(s)))throw new Error(\"Unknown encoding: \"+s);return o||s}(s),this.encoding){case\"utf16le\":this.text=utf16Text,this.end=utf16End,o=4;break;case\"utf8\":this.fillLast=utf8FillLast,o=4;break;case\"base64\":this.text=base64Text,this.end=base64End,o=3;break;default:return this.write=simpleWrite,void(this.end=simpleEnd)}this.lastNeed=0,this.lastTotal=0,this.lastChar=a.allocUnsafe(o)}function utf8CheckByte(s){return s<=127?0:s>>5==6?2:s>>4==14?3:s>>3==30?4:s>>6==2?-1:-2}function utf8FillLast(s){var o=this.lastTotal-this.lastNeed,i=function utf8CheckExtraBytes(s,o,i){if(128!=(192&o[0]))return s.lastNeed=0,\"�\";if(s.lastNeed>1&&o.length>1){if(128!=(192&o[1]))return s.lastNeed=1,\"�\";if(s.lastNeed>2&&o.length>2&&128!=(192&o[2]))return s.lastNeed=2,\"�\"}}(this,s);return void 0!==i?i:this.lastNeed<=s.length?(s.copy(this.lastChar,o,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal)):(s.copy(this.lastChar,o,0,s.length),void(this.lastNeed-=s.length))}function utf16Text(s,o){if((s.length-o)%2==0){var i=s.toString(\"utf16le\",o);if(i){var a=i.charCodeAt(i.length-1);if(a>=55296&&a<=56319)return this.lastNeed=2,this.lastTotal=4,this.lastChar[0]=s[s.length-2],this.lastChar[1]=s[s.length-1],i.slice(0,-1)}return i}return this.lastNeed=1,this.lastTotal=2,this.lastChar[0]=s[s.length-1],s.toString(\"utf16le\",o,s.length-1)}function utf16End(s){var o=s&&s.length?this.write(s):\"\";if(this.lastNeed){var i=this.lastTotal-this.lastNeed;return o+this.lastChar.toString(\"utf16le\",0,i)}return o}function base64Text(s,o){var i=(s.length-o)%3;return 0===i?s.toString(\"base64\",o):(this.lastNeed=3-i,this.lastTotal=3,1===i?this.lastChar[0]=s[s.length-1]:(this.lastChar[0]=s[s.length-2],this.lastChar[1]=s[s.length-1]),s.toString(\"base64\",o,s.length-i))}function base64End(s){var o=s&&s.length?this.write(s):\"\";return this.lastNeed?o+this.lastChar.toString(\"base64\",0,3-this.lastNeed):o}function simpleWrite(s){return s.toString(this.encoding)}function simpleEnd(s){return s&&s.length?this.write(s):\"\"}o.I=StringDecoder,StringDecoder.prototype.write=function(s){if(0===s.length)return\"\";var o,i;if(this.lastNeed){if(void 0===(o=this.fillLast(s)))return\"\";i=this.lastNeed,this.lastNeed=0}else i=0;return i=0)return u>0&&(s.lastNeed=u-1),u;if(--a=0)return u>0&&(s.lastNeed=u-2),u;if(--a=0)return u>0&&(2===u?u=0:s.lastNeed=u-3),u;return 0}(this,s,o);if(!this.lastNeed)return s.toString(\"utf8\",o);this.lastTotal=i;var a=s.length-(i-this.lastNeed);return s.copy(this.lastChar,0,a),s.toString(\"utf8\",o,a)},StringDecoder.prototype.fillLast=function(s){if(this.lastNeed<=s.length)return s.copy(this.lastChar,this.lastTotal-this.lastNeed,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);s.copy(this.lastChar,this.lastTotal-this.lastNeed,0,s.length),this.lastNeed-=s.length}},83221:s=>{s.exports=function createBaseFor(s){return function(o,i,a){for(var u=-1,_=Object(o),w=a(o),x=w.length;x--;){var C=w[s?x:++u];if(!1===i(_[C],C,_))break}return o}}},83349:(s,o,i)=>{var a=i(82199),u=i(86375),_=i(37241);s.exports=function getAllKeysIn(s){return a(s,_,u)}},83488:s=>{s.exports=function identity(s){return s}},83693:(s,o,i)=>{var a=i(64894),u=i(40346);s.exports=function isArrayLikeObject(s){return u(s)&&a(s)}},83729:s=>{s.exports=function arrayEach(s,o){for(var i=-1,a=null==s?0:s.length;++i{var a=i(14792),u=i(45539)((function(s,o,i){return o=o.toLowerCase(),s+(i?a(o):o)}));s.exports=u},84195:(s,o,i)=>{var a=i(66977),u=i(38816),_=u((function(s,o){return a(s,256,void 0,void 0,void 0,o)}));s.exports=_},84247:s=>{s.exports=function setToArray(s){var o=-1,i=Array(s.size);return s.forEach((function(s){i[++o]=s})),i}},84629:s=>{s.exports={}},84851:(s,o,i)=>{\"use strict\";s.exports=i(85401)},84977:(s,o,i)=>{\"use strict\";Object.defineProperty(o,\"__esModule\",{value:!0});var a=function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}(i(9404)),u=i(55674);o.default=function(s){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:a.default.Map,i=Object.keys(s);return function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]:o(),_=arguments[1];return a.withMutations((function(o){i.forEach((function(i){var a=(0,s[i])(o.get(i),_);(0,u.validateNextState)(a,i,_),o.set(i,a)}))}))}},s.exports=o.default},85015:(s,o,i)=>{var a=i(72552),u=i(56449),_=i(40346);s.exports=function isString(s){return\"string\"==typeof s||!u(s)&&_(s)&&\"[object String]\"==a(s)}},85087:(s,o,i)=>{var a=i(30980),u=i(37381),_=i(62284),w=i(53758);s.exports=function isLaziable(s){var o=_(s),i=w[o];if(\"function\"!=typeof i||!(o in a.prototype))return!1;if(s===i)return!0;var x=u(i);return!!x&&s===x[0]}},85105:s=>{s.exports=class JSONSerialiser{constructor(s){this.namespace=s||new this.Namespace}serialise(s){if(!(s instanceof this.namespace.elements.Element))throw new TypeError(`Given element \\`${s}\\` is not an Element instance`);const o={element:s.element};s._meta&&s._meta.length>0&&(o.meta=this.serialiseObject(s.meta)),s._attributes&&s._attributes.length>0&&(o.attributes=this.serialiseObject(s.attributes));const i=this.serialiseContent(s.content);return void 0!==i&&(o.content=i),o}deserialise(s){if(!s.element)throw new Error(\"Given value is not an object containing an element name\");const o=new(this.namespace.getElementClass(s.element));o.element!==s.element&&(o.element=s.element),s.meta&&this.deserialiseObject(s.meta,o.meta),s.attributes&&this.deserialiseObject(s.attributes,o.attributes);const i=this.deserialiseContent(s.content);return void 0===i&&null!==o.content||(o.content=i),o}serialiseContent(s){if(s instanceof this.namespace.elements.Element)return this.serialise(s);if(s instanceof this.namespace.KeyValuePair){const o={key:this.serialise(s.key)};return s.value&&(o.value=this.serialise(s.value)),o}if(s&&s.map){if(0===s.length)return;return s.map(this.serialise,this)}return s}deserialiseContent(s){if(s){if(s.element)return this.deserialise(s);if(s.key){const o=new this.namespace.KeyValuePair(this.deserialise(s.key));return s.value&&(o.value=this.deserialise(s.value)),o}if(s.map)return s.map(this.deserialise,this)}return s}serialiseObject(s){const o={};if(s.forEach(((s,i)=>{s&&(o[i.toValue()]=this.serialise(s))})),0!==Object.keys(o).length)return o}deserialiseObject(s,o){Object.keys(s).forEach((i=>{o.set(i,this.deserialise(s[i]))}))}}},85160:(s,o,i)=>{\"use strict\";var a=i(96540);var u=\"function\"==typeof Object.is?Object.is:function is(s,o){return s===o&&(0!==s||1/s==1/o)||s!=s&&o!=o},_=a.useSyncExternalStore,w=a.useRef,x=a.useEffect,C=a.useMemo,j=a.useDebugValue},85250:(s,o,i)=>{var a=i(37217),u=i(87805),_=i(86649),w=i(42824),x=i(23805),C=i(37241),j=i(14974);s.exports=function baseMerge(s,o,i,L,B){s!==o&&_(o,(function(_,C){if(B||(B=new a),x(_))w(s,o,C,i,baseMerge,L,B);else{var $=L?L(j(s,C),_,C+\"\",s,o,B):void 0;void 0===$&&($=_),u(s,C,$)}}),C)}},85401:(s,o,i)=>{\"use strict\";var a=i(462);s.exports=a},85463:s=>{s.exports=function baseIsNaN(s){return s!=s}},85558:s=>{s.exports=function baseReduce(s,o,i,a,u){return u(s,(function(s,u,_){i=a?(a=!1,s):o(i,s,u,_)})),i}},85582:(s,o,i)=>{\"use strict\";var a=i(92046),u=i(45951),_=i(62250),aFunction=function(s){return _(s)?s:void 0};s.exports=function(s,o){return arguments.length<2?aFunction(a[s])||aFunction(u[s]):a[s]&&a[s][o]||u[s]&&u[s][o]}},85587:(s,o,i)=>{\"use strict\";var a=i(26311),u=create(Error);function create(s){return FormattedError.displayName=s.displayName||s.name,FormattedError;function FormattedError(o){return o&&(o=a.apply(null,arguments)),new s(o)}}s.exports=u,u.eval=create(EvalError),u.range=create(RangeError),u.reference=create(ReferenceError),u.syntax=create(SyntaxError),u.type=create(TypeError),u.uri=create(URIError),u.create=create},85762:(s,o,i)=>{\"use strict\";var a=i(1907),u=Error,_=a(\"\".replace),w=String(new u(\"zxcasd\").stack),x=/\\n\\s*at [^:]*:[^\\n]*/,C=x.test(w);s.exports=function(s,o){if(C&&\"string\"==typeof s&&!u.prepareStackTrace)for(;o--;)s=_(s,x,\"\");return s}},85816:(s,o,i)=>{\"use strict\";var a=i(36128);s.exports=function(s,o){return a[s]||(a[s]=o||{})}},85884:(s,o,i)=>{\"use strict\";var a=i(61626),u=i(85762),_=i(23888),w=Error.captureStackTrace;s.exports=function(s,o,i,x){_&&(w?w(s,o):a(s,\"stack\",u(i,x)))}},86009:(s,o,i)=>{s=i.nmd(s);var a=i(34840),u=o&&!o.nodeType&&o,_=u&&s&&!s.nodeType&&s,w=_&&_.exports===u&&a.process,x=function(){try{var s=_&&_.require&&_.require(\"util\").types;return s||w&&w.binding&&w.binding(\"util\")}catch(s){}}();s.exports=x},86048:s=>{\"use strict\";var o={};function createErrorType(s,i,a){a||(a=Error);var u=function(s){function NodeError(o,a,u){return s.call(this,function getMessage(s,o,a){return\"string\"==typeof i?i:i(s,o,a)}(o,a,u))||this}return function _inheritsLoose(s,o){s.prototype=Object.create(o.prototype),s.prototype.constructor=s,s.__proto__=o}(NodeError,s),NodeError}(a);u.prototype.name=a.name,u.prototype.code=s,o[s]=u}function oneOf(s,o){if(Array.isArray(s)){var i=s.length;return s=s.map((function(s){return String(s)})),i>2?\"one of \".concat(o,\" \").concat(s.slice(0,i-1).join(\", \"),\", or \")+s[i-1]:2===i?\"one of \".concat(o,\" \").concat(s[0],\" or \").concat(s[1]):\"of \".concat(o,\" \").concat(s[0])}return\"of \".concat(o,\" \").concat(String(s))}createErrorType(\"ERR_INVALID_OPT_VALUE\",(function(s,o){return'The value \"'+o+'\" is invalid for option \"'+s+'\"'}),TypeError),createErrorType(\"ERR_INVALID_ARG_TYPE\",(function(s,o,i){var a,u;if(\"string\"==typeof o&&function startsWith(s,o,i){return s.substr(!i||i<0?0:+i,o.length)===o}(o,\"not \")?(a=\"must not be\",o=o.replace(/^not /,\"\")):a=\"must be\",function endsWith(s,o,i){return(void 0===i||i>s.length)&&(i=s.length),s.substring(i-o.length,i)===o}(s,\" argument\"))u=\"The \".concat(s,\" \").concat(a,\" \").concat(oneOf(o,\"type\"));else{var _=function includes(s,o,i){return\"number\"!=typeof i&&(i=0),!(i+o.length>s.length)&&-1!==s.indexOf(o,i)}(s,\".\")?\"property\":\"argument\";u='The \"'.concat(s,'\" ').concat(_,\" \").concat(a,\" \").concat(oneOf(o,\"type\"))}return u+=\". Received type \".concat(typeof i)}),TypeError),createErrorType(\"ERR_STREAM_PUSH_AFTER_EOF\",\"stream.push() after EOF\"),createErrorType(\"ERR_METHOD_NOT_IMPLEMENTED\",(function(s){return\"The \"+s+\" method is not implemented\"})),createErrorType(\"ERR_STREAM_PREMATURE_CLOSE\",\"Premature close\"),createErrorType(\"ERR_STREAM_DESTROYED\",(function(s){return\"Cannot call \"+s+\" after a stream was destroyed\"})),createErrorType(\"ERR_MULTIPLE_CALLBACK\",\"Callback called multiple times\"),createErrorType(\"ERR_STREAM_CANNOT_PIPE\",\"Cannot pipe, not readable\"),createErrorType(\"ERR_STREAM_WRITE_AFTER_END\",\"write after end\"),createErrorType(\"ERR_STREAM_NULL_VALUES\",\"May not write null values to stream\",TypeError),createErrorType(\"ERR_UNKNOWN_ENCODING\",(function(s){return\"Unknown encoding: \"+s}),TypeError),createErrorType(\"ERR_STREAM_UNSHIFT_AFTER_END_EVENT\",\"stream.unshift() after end event\"),s.exports.F=o},86215:function(s,o){var i,a,u;a=[],i=function(){\"use strict\";var isNativeSmoothScrollEnabledOn=function(s){return s&&\"getComputedStyle\"in window&&\"smooth\"===window.getComputedStyle(s)[\"scroll-behavior\"]};if(\"undefined\"==typeof window||!(\"document\"in window))return{};var makeScroller=function(s,o,i){var a;o=o||999,i||0===i||(i=9);var setScrollTimeoutId=function(s){a=s},stopScroll=function(){clearTimeout(a),setScrollTimeoutId(0)},getTopWithEdgeOffset=function(o){return Math.max(0,s.getTopOf(o)-i)},scrollToY=function(i,a,u){if(stopScroll(),0===a||a&&a<0||isNativeSmoothScrollEnabledOn(s.body))s.toY(i),u&&u();else{var _=s.getY(),w=Math.max(0,i)-_,x=(new Date).getTime();a=a||Math.min(Math.abs(w),o),function loopScroll(){setScrollTimeoutId(setTimeout((function(){var o=Math.min(1,((new Date).getTime()-x)/a),i=Math.max(0,Math.floor(_+w*(o<.5?2*o*o:o*(4-2*o)-1)));s.toY(i),o<1&&s.getHeight()+ix?scrollToElem(o,a,u):w+i>j?scrollToY(w-x+i,a,u):u&&u()},scrollToCenterOf=function(o,i,a,u){scrollToY(Math.max(0,s.getTopOf(o)-s.getHeight()/2+(a||o.getBoundingClientRect().height/2)),i,u)};return{setup:function(s,a){return(0===s||s)&&(o=s),(0===a||a)&&(i=a),{defaultDuration:o,edgeOffset:i}},to:scrollToElem,toY:scrollToY,intoView:scrollIntoView,center:scrollToCenterOf,stop:stopScroll,moving:function(){return!!a},getY:s.getY,getTopOf:s.getTopOf}},s=document.documentElement,getDocY=function(){return window.scrollY||s.scrollTop},o=makeScroller({body:document.scrollingElement||document.body,toY:function(s){window.scrollTo(0,s)},getY:getDocY,getHeight:function(){return window.innerHeight||s.clientHeight},getTopOf:function(o){return o.getBoundingClientRect().top+getDocY()-s.offsetTop}});if(o.createScroller=function(o,i,a){return makeScroller({body:o,toY:function(s){o.scrollTop=s},getY:function(){return o.scrollTop},getHeight:function(){return Math.min(o.clientHeight,window.innerHeight||s.clientHeight)},getTopOf:function(s){return s.offsetTop}},i,a)},\"addEventListener\"in window&&!window.noZensmooth&&!isNativeSmoothScrollEnabledOn(document.body)){var i=\"history\"in window&&\"pushState\"in history,a=i&&\"scrollRestoration\"in history;a&&(history.scrollRestoration=\"auto\"),window.addEventListener(\"load\",(function(){a&&(setTimeout((function(){history.scrollRestoration=\"manual\"}),9),window.addEventListener(\"popstate\",(function(s){s.state&&\"zenscrollY\"in s.state&&o.toY(s.state.zenscrollY)}),!1)),window.location.hash&&setTimeout((function(){var s=o.setup().edgeOffset;if(s){var i=document.getElementById(window.location.href.split(\"#\")[1]);if(i){var a=Math.max(0,o.getTopOf(i)-s),u=o.getY()-a;0<=u&&u<9&&window.scrollTo(0,a)}}}),9)}),!1);var u=new RegExp(\"(^|\\\\s)noZensmooth(\\\\s|$)\");window.addEventListener(\"click\",(function(s){for(var _=s.target;_&&\"A\"!==_.tagName;)_=_.parentNode;if(!(!_||1!==s.which||s.shiftKey||s.metaKey||s.ctrlKey||s.altKey)){if(a){var w=history.state&&\"object\"==typeof history.state?history.state:{};w.zenscrollY=o.getY();try{history.replaceState(w,\"\")}catch(s){}}var x=_.getAttribute(\"href\")||\"\";if(0===x.indexOf(\"#\")&&!u.test(_.className)){var C=0,j=document.getElementById(x.substring(1));if(\"#\"!==x){if(!j)return;C=o.getTopOf(j)}s.preventDefault();var onDone=function(){window.location=x},L=o.setup().edgeOffset;L&&(C=Math.max(0,C-L),i&&(onDone=function(){history.pushState({},\"\",x)})),o.toY(C,null,onDone)}}}),!1)}return o}(),void 0===(u=\"function\"==typeof i?i.apply(o,a):i)||(s.exports=u)},86238:(s,o,i)=>{\"use strict\";var a=i(86048).F.ERR_STREAM_PREMATURE_CLOSE;function noop(){}s.exports=function eos(s,o,i){if(\"function\"==typeof o)return eos(s,null,o);o||(o={}),i=function once(s){var o=!1;return function(){if(!o){o=!0;for(var i=arguments.length,a=new Array(i),u=0;u{const a=i(10316);s.exports=class LinkElement extends a{constructor(s,o,i){super(s||[],o,i),this.element=\"link\"}get relation(){return this.attributes.get(\"relation\")}set relation(s){this.attributes.set(\"relation\",s)}get href(){return this.attributes.get(\"href\")}set href(s){this.attributes.set(\"href\",s)}}},86375:(s,o,i)=>{var a=i(14528),u=i(28879),_=i(4664),w=i(63345),x=Object.getOwnPropertySymbols?function(s){for(var o=[];s;)a(o,_(s)),s=u(s);return o}:w;s.exports=x},86649:(s,o,i)=>{var a=i(83221)();s.exports=a},86804:(s,o,i)=>{const a=i(10316),u=i(41067),_=i(71167),w=i(40239),x=i(12242),C=i(6233),j=i(87726),L=i(61045),B=i(86303),$=i(14540),U=i(92340),V=i(10866),z=i(55973);function refract(s){if(s instanceof a)return s;if(\"string\"==typeof s)return new _(s);if(\"number\"==typeof s)return new w(s);if(\"boolean\"==typeof s)return new x(s);if(null===s)return new u;if(Array.isArray(s))return new C(s.map(refract));if(\"object\"==typeof s){return new L(s)}return s}a.prototype.ObjectElement=L,a.prototype.RefElement=$,a.prototype.MemberElement=j,a.prototype.refract=refract,U.prototype.refract=refract,s.exports={Element:a,NullElement:u,StringElement:_,NumberElement:w,BooleanElement:x,ArrayElement:C,MemberElement:j,ObjectElement:L,LinkElement:B,RefElement:$,refract,ArraySlice:U,ObjectSlice:V,KeyValuePair:z}},87068:(s,o,i)=>{var a=i(37217),u=i(25911),_=i(21986),w=i(50689),x=i(5861),C=i(56449),j=i(3656),L=i(37167),B=\"[object Arguments]\",$=\"[object Array]\",U=\"[object Object]\",V=Object.prototype.hasOwnProperty;s.exports=function baseIsEqualDeep(s,o,i,z,Y,Z){var ee=C(s),ie=C(o),ae=ee?$:x(s),ce=ie?$:x(o),le=(ae=ae==B?U:ae)==U,pe=(ce=ce==B?U:ce)==U,de=ae==ce;if(de&&j(s)){if(!j(o))return!1;ee=!0,le=!1}if(de&&!le)return Z||(Z=new a),ee||L(s)?u(s,o,i,z,Y,Z):_(s,o,ae,i,z,Y,Z);if(!(1&i)){var fe=le&&V.call(s,\"__wrapped__\"),ye=pe&&V.call(o,\"__wrapped__\");if(fe||ye){var be=fe?s.value():s,_e=ye?o.value():o;return Z||(Z=new a),Y(be,_e,i,z,Z)}}return!!de&&(Z||(Z=new a),w(s,o,i,z,Y,Z))}},87136:s=>{\"use strict\";s.exports=function(s){return null==s}},87170:(s,o)=>{\"use strict\";o.f=Object.getOwnPropertySymbols},87296:(s,o,i)=>{var a,u=i(55481),_=(a=/[^.]+$/.exec(u&&u.keys&&u.keys.IE_PROTO||\"\"))?\"Symbol(src)_1.\"+a:\"\";s.exports=function isMasked(s){return!!_&&_ in s}},87586:(s,o,i)=>{const a=i(6205),u=i(10023),_={0:0,t:9,n:10,v:11,f:12,r:13};o.strToChars=function(s){return s=s.replace(/(\\[\\\\b\\])|(\\\\)?\\\\(?:u([A-F0-9]{4})|x([A-F0-9]{2})|(0?[0-7]{2})|c([@A-Z[\\\\\\]^?])|([0tnvfr]))/g,(function(s,o,i,a,u,w,x,C){if(i)return s;var j=o?8:a?parseInt(a,16):u?parseInt(u,16):w?parseInt(w,8):x?\"@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\\\]^ ?\".indexOf(x):_[C],L=String.fromCharCode(j);return/[[\\]{}^$.|?*+()]/.test(L)&&(L=\"\\\\\"+L),L}))},o.tokenizeClass=(s,i)=>{for(var _,w,x=[],C=/\\\\(?:(w)|(d)|(s)|(W)|(D)|(S))|((?:(?:\\\\)(.)|([^\\]\\\\]))-(?:\\\\)?([^\\]]))|(\\])|(?:\\\\)?([^])/g;null!=(_=C.exec(s));)if(_[1])x.push(u.words());else if(_[2])x.push(u.ints());else if(_[3])x.push(u.whitespace());else if(_[4])x.push(u.notWords());else if(_[5])x.push(u.notInts());else if(_[6])x.push(u.notWhitespace());else if(_[7])x.push({type:a.RANGE,from:(_[8]||_[9]).charCodeAt(0),to:_[10].charCodeAt(0)});else{if(!(w=_[12]))return[x,C.lastIndex];x.push({type:a.CHAR,value:w.charCodeAt(0)})}o.error(i,\"Unterminated character class\")},o.error=(s,o)=>{throw new SyntaxError(\"Invalid regular expression: /\"+s+\"/: \"+o)}},87726:(s,o,i)=>{const a=i(55973),u=i(10316);s.exports=class MemberElement extends u{constructor(s,o,i,u){super(new a,i,u),this.element=\"member\",this.key=s,this.value=o}get key(){return this.content.key}set key(s){this.content.key=this.refract(s)}get value(){return this.content.value}set value(s){this.content.value=this.refract(s)}}},87730:(s,o,i)=>{var a=i(29172),u=i(27301),_=i(86009),w=_&&_.isMap,x=w?u(w):a;s.exports=x},87805:(s,o,i)=>{var a=i(43360),u=i(75288);s.exports=function assignMergeValue(s,o,i){(void 0!==i&&!u(s[o],i)||void 0===i&&!(o in s))&&a(s,o,i)}},87978:(s,o,i)=>{var a=i(60270),u=i(58156),_=i(80631),w=i(28586),x=i(30756),C=i(67197),j=i(77797);s.exports=function baseMatchesProperty(s,o){return w(s)&&x(o)?C(j(s),o):function(i){var w=u(i,s);return void 0===w&&w===o?_(i,s):a(o,w,3)}}},88280:(s,o,i)=>{\"use strict\";var a=i(1907);s.exports=a({}.isPrototypeOf)},88310:(s,o,i)=>{s.exports=Stream;var a=i(37007).EventEmitter;function Stream(){a.call(this)}i(56698)(Stream,a),Stream.Readable=i(45412),Stream.Writable=i(16708),Stream.Duplex=i(25382),Stream.Transform=i(74610),Stream.PassThrough=i(63600),Stream.finished=i(86238),Stream.pipeline=i(57758),Stream.Stream=Stream,Stream.prototype.pipe=function(s,o){var i=this;function ondata(o){s.writable&&!1===s.write(o)&&i.pause&&i.pause()}function ondrain(){i.readable&&i.resume&&i.resume()}i.on(\"data\",ondata),s.on(\"drain\",ondrain),s._isStdio||o&&!1===o.end||(i.on(\"end\",onend),i.on(\"close\",onclose));var u=!1;function onend(){u||(u=!0,s.end())}function onclose(){u||(u=!0,\"function\"==typeof s.destroy&&s.destroy())}function onerror(s){if(cleanup(),0===a.listenerCount(this,\"error\"))throw s}function cleanup(){i.removeListener(\"data\",ondata),s.removeListener(\"drain\",ondrain),i.removeListener(\"end\",onend),i.removeListener(\"close\",onclose),i.removeListener(\"error\",onerror),s.removeListener(\"error\",onerror),i.removeListener(\"end\",cleanup),i.removeListener(\"close\",cleanup),s.removeListener(\"close\",cleanup)}return i.on(\"error\",onerror),s.on(\"error\",onerror),i.on(\"end\",cleanup),i.on(\"close\",cleanup),s.on(\"close\",cleanup),s.emit(\"pipe\",i),s}},88984:(s,o,i)=>{var a=i(55527),u=i(3650),_=Object.prototype.hasOwnProperty;s.exports=function baseKeys(s){if(!a(s))return u(s);var o=[];for(var i in Object(s))_.call(s,i)&&\"constructor\"!=i&&o.push(i);return o}},89353:s=>{\"use strict\";var o=Object.prototype.toString,i=Math.max,a=function concatty(s,o){for(var i=[],a=0;a{\"use strict\";o.H=void 0;var a=function _interopRequireDefault(s){return s&&s.__esModule?s:{default:s}}(i(84977));o.H=a.default},89935:s=>{s.exports=function stubFalse(){return!1}},90160:(s,o,i)=>{\"use strict\";var a=i(73948),u=String;s.exports=function(s){if(\"Symbol\"===a(s))throw new TypeError(\"Cannot convert a Symbol value to a string\");return u(s)}},90179:(s,o,i)=>{var a=i(34932),u=i(9999),_=i(19931),w=i(31769),x=i(21791),C=i(53138),j=i(38816),L=i(83349),B=j((function(s,o){var i={};if(null==s)return i;var j=!1;o=a(o,(function(o){return o=w(o,s),j||(j=o.length>1),o})),x(s,L(s),i),j&&(i=u(i,7,C));for(var B=o.length;B--;)_(i,o[B]);return i}));s.exports=B},90181:s=>{s.exports=function nativeKeysIn(s){var o=[];if(null!=s)for(var i in Object(s))o.push(i);return o}},90289:(s,o,i)=>{var a=i(12651);s.exports=function mapCacheGet(s){return a(this,s).get(s)}},90392:(s,o,i)=>{\"use strict\";var a=i(92861).Buffer,u=i(15377);function Hash(s,o){this._block=a.alloc(s),this._finalSize=o,this._blockSize=s,this._len=0}Hash.prototype.update=function(s,o){s=u(s,o||\"utf8\");for(var i=this._block,a=this._blockSize,_=s.length,w=this._len,x=0;x<_;){for(var C=w%a,j=Math.min(_-x,a-C),L=0;L=this._finalSize&&(this._update(this._block),this._block.fill(0));var i=8*this._len;if(i<=4294967295)this._block.writeUInt32BE(i,this._blockSize-4);else{var a=(4294967295&i)>>>0,u=(i-a)/4294967296;this._block.writeUInt32BE(u,this._blockSize-8),this._block.writeUInt32BE(a,this._blockSize-4)}this._update(this._block);var _=this._hash();return s?_.toString(s):_},Hash.prototype._update=function(){throw new Error(\"_update must be implemented by subclass\")},s.exports=Hash},90916:(s,o,i)=>{var a=i(80909);s.exports=function baseSome(s,o){var i;return a(s,(function(s,a,u){return!(i=o(s,a,u))})),!!i}},90938:s=>{s.exports=function stackDelete(s){var o=this.__data__,i=o.delete(s);return this.size=o.size,i}},91033:s=>{s.exports=function apply(s,o,i){switch(i.length){case 0:return s.call(o);case 1:return s.call(o,i[0]);case 2:return s.call(o,i[0],i[1]);case 3:return s.call(o,i[0],i[1],i[2])}return s.apply(o,i)}},91596:s=>{var o=Math.max;s.exports=function composeArgs(s,i,a,u){for(var _=-1,w=s.length,x=a.length,C=-1,j=i.length,L=o(w-x,0),B=Array(j+L),$=!u;++C{\"use strict\";i(64502)},92046:s=>{\"use strict\";s.exports={}},92063:s=>{\"use strict\";s.exports=function required(s,o){if(o=o.split(\":\")[0],!(s=+s))return!1;switch(o){case\"http\":case\"ws\":return 80!==s;case\"https\":case\"wss\":return 443!==s;case\"ftp\":return 21!==s;case\"gopher\":return 70!==s;case\"file\":return!1}return 0!==s}},92271:(s,o,i)=>{var a=i(21791),u=i(4664);s.exports=function copySymbols(s,o){return a(s,u(s),o)}},92340:(s,o,i)=>{const a=i(6048);function coerceElementMatchingCallback(s){return\"string\"==typeof s?o=>o.element===s:s.constructor&&s.extend?o=>o instanceof s:s}class ArraySlice{constructor(s){this.elements=s||[]}toValue(){return this.elements.map((s=>s.toValue()))}map(s,o){return this.elements.map(s,o)}flatMap(s,o){return this.map(s,o).reduce(((s,o)=>s.concat(o)),[])}compactMap(s,o){const i=[];return this.forEach((a=>{const u=s.bind(o)(a);u&&i.push(u)})),i}filter(s,o){return s=coerceElementMatchingCallback(s),new ArraySlice(this.elements.filter(s,o))}reject(s,o){return s=coerceElementMatchingCallback(s),new ArraySlice(this.elements.filter(a(s),o))}find(s,o){return s=coerceElementMatchingCallback(s),this.elements.find(s,o)}forEach(s,o){this.elements.forEach(s,o)}reduce(s,o){return this.elements.reduce(s,o)}includes(s){return this.elements.some((o=>o.equals(s)))}shift(){return this.elements.shift()}unshift(s){this.elements.unshift(this.refract(s))}push(s){return this.elements.push(this.refract(s)),this}add(s){this.push(s)}get(s){return this.elements[s]}getValue(s){const o=this.elements[s];if(o)return o.toValue()}get length(){return this.elements.length}get isEmpty(){return 0===this.elements.length}get first(){return this.elements[0]}}\"undefined\"!=typeof Symbol&&(ArraySlice.prototype[Symbol.iterator]=function symbol(){return this.elements[Symbol.iterator]()}),s.exports=ArraySlice},92361:(s,o,i)=>{\"use strict\";var a=i(45807),u=i(1907);s.exports=function(s){if(\"Function\"===a(s))return u(s)}},92522:(s,o,i)=>{\"use strict\";var a=i(85816),u=i(6499),_=a(\"keys\");s.exports=function(s){return _[s]||(_[s]=u(s))}},92861:(s,o,i)=>{var a=i(48287),u=a.Buffer;function copyProps(s,o){for(var i in s)o[i]=s[i]}function SafeBuffer(s,o,i){return u(s,o,i)}u.from&&u.alloc&&u.allocUnsafe&&u.allocUnsafeSlow?s.exports=a:(copyProps(a,o),o.Buffer=SafeBuffer),SafeBuffer.prototype=Object.create(u.prototype),copyProps(u,SafeBuffer),SafeBuffer.from=function(s,o,i){if(\"number\"==typeof s)throw new TypeError(\"Argument must not be a number\");return u(s,o,i)},SafeBuffer.alloc=function(s,o,i){if(\"number\"!=typeof s)throw new TypeError(\"Argument must be a number\");var a=u(s);return void 0!==o?\"string\"==typeof i?a.fill(o,i):a.fill(o):a.fill(0),a},SafeBuffer.allocUnsafe=function(s){if(\"number\"!=typeof s)throw new TypeError(\"Argument must be a number\");return u(s)},SafeBuffer.allocUnsafeSlow=function(s){if(\"number\"!=typeof s)throw new TypeError(\"Argument must be a number\");return a.SlowBuffer(s)}},93243:(s,o,i)=>{var a=i(56110),u=function(){try{var s=a(Object,\"defineProperty\");return s({},\"\",{}),s}catch(s){}}();s.exports=u},93290:(s,o,i)=>{s=i.nmd(s);var a=i(9325),u=o&&!o.nodeType&&o,_=u&&s&&!s.nodeType&&s,w=_&&_.exports===u?a.Buffer:void 0,x=w?w.allocUnsafe:void 0;s.exports=function cloneBuffer(s,o){if(o)return s.slice();var i=s.length,a=x?x(i):new s.constructor(i);return s.copy(a),a}},93427:(s,o,i)=>{\"use strict\";var a=i(1907);s.exports=a([].slice)},93628:(s,o,i)=>{\"use strict\";var a=i(48648),u=i(71064),_=i(7176);s.exports=a?function getProto(s){return a(s)}:u?function getProto(s){if(!s||\"object\"!=typeof s&&\"function\"!=typeof s)throw new TypeError(\"getProto: not an object\");return u(s)}:_?function getProto(s){return _(s)}:null},93663:(s,o,i)=>{var a=i(41799),u=i(10776),_=i(67197);s.exports=function baseMatches(s){var o=u(s);return 1==o.length&&o[0][2]?_(o[0][0],o[0][1]):function(i){return i===s||a(i,s,o)}}},93700:(s,o,i)=>{\"use strict\";var a=i(19709);s.exports=a},93736:(s,o,i)=>{var a=i(51873),u=a?a.prototype:void 0,_=u?u.valueOf:void 0;s.exports=function cloneSymbol(s){return _?Object(_.call(s)):{}}},93742:s=>{\"use strict\";s.exports={}},94033:s=>{s.exports=function baseLodash(){}},94459:s=>{\"use strict\";s.exports=Number.isNaN||function isNaN(s){return s!=s}},94643:(s,o,i)=>{function config(s){try{if(!i.g.localStorage)return!1}catch(s){return!1}var o=i.g.localStorage[s];return null!=o&&\"true\"===String(o).toLowerCase()}s.exports=function deprecate(s,o){if(config(\"noDeprecation\"))return s;var i=!1;return function deprecated(){if(!i){if(config(\"throwDeprecation\"))throw new Error(o);config(\"traceDeprecation\")?console.trace(o):console.warn(o),i=!0}return s.apply(this,arguments)}}},95089:s=>{const o=\"[A-Za-z$_][0-9A-Za-z$_]*\",i=[\"as\",\"in\",\"of\",\"if\",\"for\",\"while\",\"finally\",\"var\",\"new\",\"function\",\"do\",\"return\",\"void\",\"else\",\"break\",\"catch\",\"instanceof\",\"with\",\"throw\",\"case\",\"default\",\"try\",\"switch\",\"continue\",\"typeof\",\"delete\",\"let\",\"yield\",\"const\",\"class\",\"debugger\",\"async\",\"await\",\"static\",\"import\",\"from\",\"export\",\"extends\"],a=[\"true\",\"false\",\"null\",\"undefined\",\"NaN\",\"Infinity\"],u=[].concat([\"setInterval\",\"setTimeout\",\"clearInterval\",\"clearTimeout\",\"require\",\"exports\",\"eval\",\"isFinite\",\"isNaN\",\"parseFloat\",\"parseInt\",\"decodeURI\",\"decodeURIComponent\",\"encodeURI\",\"encodeURIComponent\",\"escape\",\"unescape\"],[\"arguments\",\"this\",\"super\",\"console\",\"window\",\"document\",\"localStorage\",\"module\",\"global\"],[\"Intl\",\"DataView\",\"Number\",\"Math\",\"Date\",\"String\",\"RegExp\",\"Object\",\"Function\",\"Boolean\",\"Error\",\"Symbol\",\"Set\",\"Map\",\"WeakSet\",\"WeakMap\",\"Proxy\",\"Reflect\",\"JSON\",\"Promise\",\"Float64Array\",\"Int16Array\",\"Int32Array\",\"Int8Array\",\"Uint16Array\",\"Uint32Array\",\"Float32Array\",\"Array\",\"Uint8Array\",\"Uint8ClampedArray\",\"ArrayBuffer\",\"BigInt64Array\",\"BigUint64Array\",\"BigInt\"],[\"EvalError\",\"InternalError\",\"RangeError\",\"ReferenceError\",\"SyntaxError\",\"TypeError\",\"URIError\"]);function lookahead(s){return concat(\"(?=\",s,\")\")}function concat(...s){return s.map((s=>function source(s){return s?\"string\"==typeof s?s:s.source:null}(s))).join(\"\")}s.exports=function javascript(s){const _=o,w=\"<>\",x=\"\",C={begin:/<[A-Za-z0-9\\\\._:-]+/,end:/\\/[A-Za-z0-9\\\\._:-]+>|\\/>/,isTrulyOpeningTag:(s,o)=>{const i=s[0].length+s.index,a=s.input[i];\"<\"!==a?\">\"===a&&(((s,{after:o})=>{const i=\"\",returnBegin:!0,end:\"\\\\s*=>\",contains:[{className:\"params\",variants:[{begin:s.UNDERSCORE_IDENT_RE,relevance:0},{className:null,begin:/\\(\\s*\\)/,skip:!0},{begin:/\\(/,end:/\\)/,excludeBegin:!0,excludeEnd:!0,keywords:j,contains:ce}]}]},{begin:/,/,relevance:0},{className:\"\",begin:/\\s/,end:/\\s*/,skip:!0},{variants:[{begin:w,end:x},{begin:C.begin,\"on:begin\":C.isTrulyOpeningTag,end:C.end}],subLanguage:\"xml\",contains:[{begin:C.begin,end:C.end,skip:!0,contains:[\"self\"]}]}],relevance:0},{className:\"function\",beginKeywords:\"function\",end:/[{;]/,excludeEnd:!0,keywords:j,contains:[\"self\",s.inherit(s.TITLE_MODE,{begin:_}),le],illegal:/%/},{beginKeywords:\"while if switch catch for\"},{className:\"function\",begin:s.UNDERSCORE_IDENT_RE+\"\\\\([^()]*(\\\\([^()]*(\\\\([^()]*\\\\)[^()]*)*\\\\)[^()]*)*\\\\)\\\\s*\\\\{\",returnBegin:!0,contains:[le,s.inherit(s.TITLE_MODE,{begin:_})]},{variants:[{begin:\"\\\\.\"+_},{begin:\"\\\\$\"+_}],relevance:0},{className:\"class\",beginKeywords:\"class\",end:/[{;=]/,excludeEnd:!0,illegal:/[:\"[\\]]/,contains:[{beginKeywords:\"extends\"},s.UNDERSCORE_TITLE_MODE]},{begin:/\\b(?=constructor)/,end:/[{;]/,excludeEnd:!0,contains:[s.inherit(s.TITLE_MODE,{begin:_}),\"self\",le]},{begin:\"(get|set)\\\\s+(?=\"+_+\"\\\\()\",end:/\\{/,keywords:\"get set\",contains:[s.inherit(s.TITLE_MODE,{begin:_}),{begin:/\\(\\)/},le]},{begin:/\\$[(.]/}]}}},95116:(s,o,i)=>{\"use strict\";var a,u,_,w=i(98828),x=i(62250),C=i(46285),j=i(58075),L=i(15972),B=i(68055),$=i(76264),U=i(7376),V=$(\"iterator\"),z=!1;[].keys&&(\"next\"in(_=[].keys())?(u=L(L(_)))!==Object.prototype&&(a=u):z=!0),!C(a)||w((function(){var s={};return a[V].call(s)!==s}))?a={}:U&&(a=j(a)),x(a[V])||B(a,V,(function(){return this})),s.exports={IteratorPrototype:a,BUGGY_SAFARI_ITERATORS:z}},95950:(s,o,i)=>{var a=i(70695),u=i(88984),_=i(64894);s.exports=function keys(s){return _(s)?a(s):u(s)}},96131:(s,o,i)=>{var a=i(2523),u=i(85463),_=i(76959);s.exports=function baseIndexOf(s,o,i){return o==o?_(s,o,i):a(s,u,i)}},96540:(s,o,i)=>{\"use strict\";s.exports=i(15287)},96605:(s,o,i)=>{\"use strict\";var a=i(11091),u=i(45951),_=i(76024),w=i(19358),x=\"WebAssembly\",C=u[x],j=7!==new Error(\"e\",{cause:7}).cause,exportGlobalErrorCauseWrapper=function(s,o){var i={};i[s]=w(s,o,j),a({global:!0,constructor:!0,arity:1,forced:j},i)},exportWebAssemblyErrorCauseWrapper=function(s,o){if(C&&C[s]){var i={};i[s]=w(x+\".\"+s,o,j),a({target:x,stat:!0,constructor:!0,arity:1,forced:j},i)}};exportGlobalErrorCauseWrapper(\"Error\",(function(s){return function Error(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"EvalError\",(function(s){return function EvalError(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"RangeError\",(function(s){return function RangeError(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"ReferenceError\",(function(s){return function ReferenceError(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"SyntaxError\",(function(s){return function SyntaxError(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"TypeError\",(function(s){return function TypeError(o){return _(s,this,arguments)}})),exportGlobalErrorCauseWrapper(\"URIError\",(function(s){return function URIError(o){return _(s,this,arguments)}})),exportWebAssemblyErrorCauseWrapper(\"CompileError\",(function(s){return function CompileError(o){return _(s,this,arguments)}})),exportWebAssemblyErrorCauseWrapper(\"LinkError\",(function(s){return function LinkError(o){return _(s,this,arguments)}})),exportWebAssemblyErrorCauseWrapper(\"RuntimeError\",(function(s){return function RuntimeError(o){return _(s,this,arguments)}}))},96794:(s,o,i)=>{\"use strict\";var a=i(45951).navigator,u=a&&a.userAgent;s.exports=u?String(u):\"\"},96897:(s,o,i)=>{\"use strict\";var a=i(70453),u=i(30041),_=i(30592)(),w=i(75795),x=i(69675),C=a(\"%Math.floor%\");s.exports=function setFunctionLength(s,o){if(\"function\"!=typeof s)throw new x(\"`fn` is not a function\");if(\"number\"!=typeof o||o<0||o>4294967295||C(o)!==o)throw new x(\"`length` must be a positive 32-bit integer\");var i=arguments.length>2&&!!arguments[2],a=!0,j=!0;if(\"length\"in s&&w){var L=w(s,\"length\");L&&!L.configurable&&(a=!1),L&&!L.writable&&(j=!1)}return(a||j||!i)&&(_?u(s,\"length\",o,!0,!0):u(s,\"length\",o)),s}},98023:(s,o,i)=>{var a=i(72552),u=i(40346);s.exports=function isNumber(s){return\"number\"==typeof s||u(s)&&\"[object Number]\"==a(s)}},98828:s=>{\"use strict\";s.exports=function(s){try{return!!s()}catch(s){return!0}}},99363:(s,o,i)=>{\"use strict\";var a=i(4993),u=i(42156),_=i(93742),w=i(64932),x=i(74284).f,C=i(60183),j=i(59550),L=i(7376),B=i(39447),$=\"Array Iterator\",U=w.set,V=w.getterFor($);s.exports=C(Array,\"Array\",(function(s,o){U(this,{type:$,target:a(s),index:0,kind:o})}),(function(){var s=V(this),o=s.target,i=s.index++;if(!o||i>=o.length)return s.target=null,j(void 0,!0);switch(s.kind){case\"keys\":return j(i,!1);case\"values\":return j(o[i],!1)}return j([i,o[i]],!1)}),\"values\");var z=_.Arguments=_.Array;if(u(\"keys\"),u(\"values\"),u(\"entries\"),!L&&B&&\"values\"!==z.name)try{x(z,\"name\",{value:\"values\"})}catch(s){}},99374:(s,o,i)=>{var a=i(54128),u=i(23805),_=i(44394),w=/^[-+]0x[0-9a-f]+$/i,x=/^0b[01]+$/i,C=/^0o[0-7]+$/i,j=parseInt;s.exports=function toNumber(s){if(\"number\"==typeof s)return s;if(_(s))return NaN;if(u(s)){var o=\"function\"==typeof s.valueOf?s.valueOf():s;s=u(o)?o+\"\":o}if(\"string\"!=typeof s)return 0===s?s:+s;s=a(s);var i=x.test(s);return i||C.test(s)?j(s.slice(2),i?2:8):w.test(s)?NaN:+s}}},o={};function __webpack_require__(i){var a=o[i];if(void 0!==a)return a.exports;var u=o[i]={id:i,loaded:!1,exports:{}};return s[i].call(u.exports,u,u.exports,__webpack_require__),u.loaded=!0,u.exports}__webpack_require__.n=s=>{var o=s&&s.__esModule?()=>s.default:()=>s;return __webpack_require__.d(o,{a:o}),o},__webpack_require__.d=(s,o)=>{for(var i in o)__webpack_require__.o(o,i)&&!__webpack_require__.o(s,i)&&Object.defineProperty(s,i,{enumerable:!0,get:o[i]})},__webpack_require__.g=function(){if(\"object\"==typeof globalThis)return globalThis;try{return this||new Function(\"return this\")()}catch(s){if(\"object\"==typeof window)return window}}(),__webpack_require__.o=(s,o)=>Object.prototype.hasOwnProperty.call(s,o),__webpack_require__.r=s=>{\"undefined\"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(s,Symbol.toStringTag,{value:\"Module\"}),Object.defineProperty(s,\"__esModule\",{value:!0})},__webpack_require__.nmd=s=>(s.paths=[],s.children||(s.children=[]),s);var i={};return(()=>{\"use strict\";__webpack_require__.d(i,{default:()=>WT});var s={};__webpack_require__.r(s),__webpack_require__.d(s,{CLEAR:()=>at,CLEAR_BY:()=>ct,NEW_AUTH_ERR:()=>it,NEW_SPEC_ERR:()=>st,NEW_SPEC_ERR_BATCH:()=>ot,NEW_THROWN_ERR:()=>rt,NEW_THROWN_ERR_BATCH:()=>nt,clear:()=>clear,clearBy:()=>clearBy,newAuthErr:()=>newAuthErr,newSpecErr:()=>newSpecErr,newSpecErrBatch:()=>newSpecErrBatch,newThrownErr:()=>newThrownErr,newThrownErrBatch:()=>newThrownErrBatch});var o={};__webpack_require__.r(o),__webpack_require__.d(o,{AUTHORIZE:()=>Rt,AUTHORIZE_OAUTH2:()=>Lt,CONFIGURE_AUTH:()=>Ft,LOGOUT:()=>Dt,RESTORE_AUTHORIZATION:()=>Bt,SHOW_AUTH_POPUP:()=>Mt,authPopup:()=>authPopup,authorize:()=>authorize,authorizeAccessCodeWithBasicAuthentication:()=>authorizeAccessCodeWithBasicAuthentication,authorizeAccessCodeWithFormParams:()=>authorizeAccessCodeWithFormParams,authorizeApplication:()=>authorizeApplication,authorizeOauth2:()=>authorizeOauth2,authorizeOauth2WithPersistOption:()=>authorizeOauth2WithPersistOption,authorizePassword:()=>authorizePassword,authorizeRequest:()=>authorizeRequest,authorizeWithPersistOption:()=>authorizeWithPersistOption,configureAuth:()=>configureAuth,logout:()=>logout,logoutWithPersistOption:()=>logoutWithPersistOption,persistAuthorizationIfNeeded:()=>persistAuthorizationIfNeeded,preAuthorizeImplicit:()=>preAuthorizeImplicit,restoreAuthorization:()=>restoreAuthorization,showDefinitions:()=>showDefinitions});var a={};__webpack_require__.r(a),__webpack_require__.d(a,{authorized:()=>Jt,definitionsForRequirements:()=>definitionsForRequirements,definitionsToAuthorize:()=>Wt,getConfigs:()=>Ht,getDefinitionsByNames:()=>getDefinitionsByNames,isAuthorized:()=>isAuthorized,selectAuthPath:()=>selectAuthPath,shownDefinitions:()=>zt});var u={};__webpack_require__.r(u),__webpack_require__.d(u,{TOGGLE_CONFIGS:()=>gn,UPDATE_CONFIGS:()=>mn,downloadConfig:()=>downloadConfig,getConfigByUrl:()=>getConfigByUrl,loaded:()=>actions_loaded,toggle:()=>toggle,update:()=>update});var _={};__webpack_require__.r(_),__webpack_require__.d(_,{get:()=>get});var w={};__webpack_require__.r(w),__webpack_require__.d(w,{transform:()=>transform});var x={};__webpack_require__.r(x),__webpack_require__.d(x,{transform:()=>parameter_oneof_transform});var C={};__webpack_require__.r(C),__webpack_require__.d(C,{allErrors:()=>In,lastError:()=>Tn});var j={};__webpack_require__.r(j),__webpack_require__.d(j,{SHOW:()=>Fn,UPDATE_FILTER:()=>Dn,UPDATE_LAYOUT:()=>Rn,UPDATE_MODE:()=>Ln,changeMode:()=>changeMode,show:()=>actions_show,updateFilter:()=>updateFilter,updateLayout:()=>updateLayout});var L={};__webpack_require__.r(L),__webpack_require__.d(L,{current:()=>current,currentFilter:()=>currentFilter,isShown:()=>isShown,showSummary:()=>$n,whatMode:()=>whatMode});var B={};__webpack_require__.r(B),__webpack_require__.d(B,{taggedOperations:()=>taggedOperations});var $={};__webpack_require__.r($),__webpack_require__.d($,{getActiveLanguage:()=>Vn,getDefaultExpanded:()=>zn,getGenerators:()=>Un,getSnippetGenerators:()=>getSnippetGenerators});var U={};__webpack_require__.r(U),__webpack_require__.d(U,{JsonSchemaArrayItemFile:()=>JsonSchemaArrayItemFile,JsonSchemaArrayItemText:()=>JsonSchemaArrayItemText,JsonSchemaForm:()=>JsonSchemaForm,JsonSchema_array:()=>JsonSchema_array,JsonSchema_boolean:()=>JsonSchema_boolean,JsonSchema_object:()=>JsonSchema_object,JsonSchema_string:()=>JsonSchema_string});var V={};__webpack_require__.r(V),__webpack_require__.d(V,{allowTryItOutFor:()=>allowTryItOutFor,basePath:()=>Hs,canExecuteScheme:()=>canExecuteScheme,consumes:()=>Us,consumesOptionsFor:()=>consumesOptionsFor,contentTypeValues:()=>contentTypeValues,currentProducesFor:()=>currentProducesFor,definitions:()=>Js,externalDocs:()=>Ds,findDefinition:()=>findDefinition,getOAS3RequiredRequestBodyContentType:()=>getOAS3RequiredRequestBodyContentType,getParameter:()=>getParameter,hasHost:()=>ro,host:()=>Ks,info:()=>Rs,isMediaTypeSchemaPropertiesEqual:()=>isMediaTypeSchemaPropertiesEqual,isOAS3:()=>Ms,lastError:()=>Os,mutatedRequestFor:()=>mutatedRequestFor,mutatedRequests:()=>to,operationScheme:()=>operationScheme,operationWithMeta:()=>operationWithMeta,operations:()=>qs,operationsWithRootInherited:()=>Ys,operationsWithTags:()=>Qs,parameterInclusionSettingFor:()=>parameterInclusionSettingFor,parameterValues:()=>parameterValues,parameterWithMeta:()=>parameterWithMeta,parameterWithMetaByIdentity:()=>parameterWithMetaByIdentity,parametersIncludeIn:()=>parametersIncludeIn,parametersIncludeType:()=>parametersIncludeType,paths:()=>Bs,produces:()=>Vs,producesOptionsFor:()=>producesOptionsFor,requestFor:()=>requestFor,requests:()=>eo,responseFor:()=>responseFor,responses:()=>Zs,schemes:()=>Gs,security:()=>zs,securityDefinitions:()=>Ws,semver:()=>Fs,spec:()=>spec,specJS:()=>Is,specJson:()=>Ps,specJsonWithResolvedSubtrees:()=>Ns,specResolved:()=>Ts,specResolvedSubtree:()=>specResolvedSubtree,specSource:()=>js,specStr:()=>Cs,tagDetails:()=>tagDetails,taggedOperations:()=>selectors_taggedOperations,tags:()=>Xs,url:()=>As,validOperationMethods:()=>$s,validateBeforeExecute:()=>validateBeforeExecute,validationErrors:()=>validationErrors,version:()=>Ls});var z={};__webpack_require__.r(z),__webpack_require__.d(z,{CLEAR_REQUEST:()=>wo,CLEAR_RESPONSE:()=>Eo,CLEAR_VALIDATE_PARAMS:()=>xo,LOG_REQUEST:()=>So,SET_MUTATED_REQUEST:()=>_o,SET_REQUEST:()=>bo,SET_RESPONSE:()=>vo,SET_SCHEME:()=>Co,UPDATE_EMPTY_PARAM_INCLUSION:()=>go,UPDATE_JSON:()=>fo,UPDATE_OPERATION_META_VALUE:()=>ko,UPDATE_PARAM:()=>mo,UPDATE_RESOLVED:()=>Oo,UPDATE_RESOLVED_SUBTREE:()=>Ao,UPDATE_SPEC:()=>po,UPDATE_URL:()=>ho,VALIDATE_PARAMS:()=>yo,changeConsumesValue:()=>changeConsumesValue,changeParam:()=>changeParam,changeParamByIdentity:()=>changeParamByIdentity,changeProducesValue:()=>changeProducesValue,clearRequest:()=>clearRequest,clearResponse:()=>clearResponse,clearValidateParams:()=>clearValidateParams,execute:()=>actions_execute,executeRequest:()=>executeRequest,invalidateResolvedSubtreeCache:()=>invalidateResolvedSubtreeCache,logRequest:()=>logRequest,parseToJson:()=>parseToJson,requestResolvedSubtree:()=>requestResolvedSubtree,resolveSpec:()=>resolveSpec,setMutatedRequest:()=>setMutatedRequest,setRequest:()=>setRequest,setResponse:()=>setResponse,setScheme:()=>setScheme,updateEmptyParamInclusion:()=>updateEmptyParamInclusion,updateJsonSpec:()=>updateJsonSpec,updateResolved:()=>updateResolved,updateResolvedSubtree:()=>updateResolvedSubtree,updateSpec:()=>updateSpec,updateUrl:()=>updateUrl,validateParams:()=>validateParams});var Y={};__webpack_require__.r(Y),__webpack_require__.d(Y,{executeRequest:()=>wrap_actions_executeRequest,updateJsonSpec:()=>wrap_actions_updateJsonSpec,updateSpec:()=>wrap_actions_updateSpec,validateParams:()=>wrap_actions_validateParams});var Z={};__webpack_require__.r(Z),__webpack_require__.d(Z,{JsonPatchError:()=>Do,_areEquals:()=>_areEquals,applyOperation:()=>applyOperation,applyPatch:()=>applyPatch,applyReducer:()=>applyReducer,deepClone:()=>Lo,getValueByPointer:()=>getValueByPointer,validate:()=>validate,validator:()=>validator});var ee={};__webpack_require__.r(ee),__webpack_require__.d(ee,{compare:()=>compare,generate:()=>generate,observe:()=>observe,unobserve:()=>unobserve});var ie={};__webpack_require__.r(ie),__webpack_require__.d(ie,{hasElementSourceMap:()=>hasElementSourceMap,includesClasses:()=>includesClasses,includesSymbols:()=>includesSymbols,isAnnotationElement:()=>Fu,isArrayElement:()=>Mu,isBooleanElement:()=>Tu,isCommentElement:()=>Bu,isElement:()=>Cu,isLinkElement:()=>Du,isMemberElement:()=>Ru,isNullElement:()=>Iu,isNumberElement:()=>Pu,isObjectElement:()=>Nu,isParseResultElement:()=>$u,isPrimitiveElement:()=>isPrimitiveElement,isRefElement:()=>Lu,isStringElement:()=>ju});var ae={};__webpack_require__.r(ae),__webpack_require__.d(ae,{isJSONReferenceElement:()=>Ld,isJSONSchemaElement:()=>Dd,isLinkDescriptionElement:()=>Bd,isMediaElement:()=>Fd});var ce={};__webpack_require__.r(ce),__webpack_require__.d(ce,{isBooleanJsonSchemaElement:()=>isBooleanJsonSchemaElement,isCallbackElement:()=>Tm,isComponentsElement:()=>Nm,isContactElement:()=>Mm,isDiscriminatorElement:()=>og,isExampleElement:()=>Rm,isExternalDocumentationElement:()=>Dm,isHeaderElement:()=>Lm,isInfoElement:()=>Fm,isLicenseElement:()=>Bm,isLinkElement:()=>$m,isMediaTypeElement:()=>ng,isOpenApi3_0Element:()=>Um,isOpenapiElement:()=>qm,isOperationElement:()=>Vm,isParameterElement:()=>zm,isPathItemElement:()=>Wm,isPathsElement:()=>Jm,isReferenceElement:()=>Hm,isRequestBodyElement:()=>Km,isResponseElement:()=>Gm,isResponsesElement:()=>Ym,isSchemaElement:()=>Xm,isSecurityRequirementElement:()=>Qm,isSecuritySchemeElement:()=>Zm,isServerElement:()=>eg,isServerVariableElement:()=>rg,isServersElement:()=>sg});var le={};__webpack_require__.r(le),__webpack_require__.d(le,{isJSONReferenceElement:()=>Ld,isJSONSchemaElement:()=>g_,isLinkDescriptionElement:()=>y_,isMediaElement:()=>Fd});var pe={};__webpack_require__.r(pe),__webpack_require__.d(pe,{isJSONReferenceElement:()=>Ld,isJSONSchemaElement:()=>A_,isLinkDescriptionElement:()=>C_});var de={};__webpack_require__.r(de),__webpack_require__.d(de,{isJSONSchemaElement:()=>K_,isLinkDescriptionElement:()=>G_});var fe={};__webpack_require__.r(fe),__webpack_require__.d(fe,{isJSONSchemaElement:()=>oS,isLinkDescriptionElement:()=>iS});var ye={};__webpack_require__.r(ye),__webpack_require__.d(ye,{isBooleanJsonSchemaElement:()=>predicates_isBooleanJsonSchemaElement,isCallbackElement:()=>zS,isComponentsElement:()=>WS,isContactElement:()=>JS,isExampleElement:()=>HS,isExternalDocumentationElement:()=>KS,isHeaderElement:()=>GS,isInfoElement:()=>YS,isJsonSchemaDialectElement:()=>XS,isLicenseElement:()=>QS,isLinkElement:()=>ZS,isMediaTypeElement:()=>mE,isOpenApi3_1Element:()=>tE,isOpenapiElement:()=>eE,isOperationElement:()=>rE,isParameterElement:()=>nE,isPathItemElement:()=>sE,isPathItemElementExternal:()=>isPathItemElementExternal,isPathsElement:()=>oE,isReferenceElement:()=>iE,isReferenceElementExternal:()=>isReferenceElementExternal,isRequestBodyElement:()=>aE,isResponseElement:()=>cE,isResponsesElement:()=>lE,isSchemaElement:()=>uE,isSecurityRequirementElement:()=>pE,isSecuritySchemeElement:()=>hE,isServerElement:()=>dE,isServerVariableElement:()=>fE});var be={};__webpack_require__.r(be),__webpack_require__.d(be,{cookie:()=>cookie,header:()=>parameter_builders_header,path:()=>parameter_builders_path,query:()=>query});var _e={};__webpack_require__.r(_e),__webpack_require__.d(_e,{Button:()=>Button,Col:()=>Col,Collapse:()=>Collapse,Container:()=>Container,Input:()=>Input,Link:()=>layout_utils_Link,Row:()=>Row,Select:()=>Select,TextArea:()=>TextArea});var Se={};__webpack_require__.r(Se),__webpack_require__.d(Se,{basePath:()=>NP,consumes:()=>MP,definitions:()=>jP,findDefinition:()=>CP,hasHost:()=>PP,host:()=>TP,produces:()=>RP,schemes:()=>DP,securityDefinitions:()=>IP,validOperationMethods:()=>wrap_selectors_validOperationMethods});var we={};__webpack_require__.r(we),__webpack_require__.d(we,{definitionsToAuthorize:()=>LP});var xe={};__webpack_require__.r(xe),__webpack_require__.d(xe,{callbacksOperations:()=>$P,findSchema:()=>findSchema,isOAS3:()=>selectors_isOAS3,isOAS30:()=>selectors_isOAS30,isSwagger2:()=>selectors_isSwagger2,servers:()=>BP});var Pe={};__webpack_require__.r(Pe),__webpack_require__.d(Pe,{CLEAR_REQUEST_BODY_VALIDATE_ERROR:()=>iI,CLEAR_REQUEST_BODY_VALUE:()=>aI,SET_REQUEST_BODY_VALIDATE_ERROR:()=>oI,UPDATE_ACTIVE_EXAMPLES_MEMBER:()=>tI,UPDATE_REQUEST_BODY_INCLUSION:()=>eI,UPDATE_REQUEST_BODY_VALUE:()=>QP,UPDATE_REQUEST_BODY_VALUE_RETAIN_FLAG:()=>ZP,UPDATE_REQUEST_CONTENT_TYPE:()=>rI,UPDATE_RESPONSE_CONTENT_TYPE:()=>nI,UPDATE_SELECTED_SERVER:()=>XP,UPDATE_SERVER_VARIABLE_VALUE:()=>sI,clearRequestBodyValidateError:()=>clearRequestBodyValidateError,clearRequestBodyValue:()=>clearRequestBodyValue,initRequestBodyValidateError:()=>initRequestBodyValidateError,setActiveExamplesMember:()=>setActiveExamplesMember,setRequestBodyInclusion:()=>setRequestBodyInclusion,setRequestBodyValidateError:()=>setRequestBodyValidateError,setRequestBodyValue:()=>setRequestBodyValue,setRequestContentType:()=>setRequestContentType,setResponseContentType:()=>setResponseContentType,setRetainRequestBodyValueFlag:()=>setRetainRequestBodyValueFlag,setSelectedServer:()=>setSelectedServer,setServerVariableValue:()=>setServerVariableValue});var Te={};__webpack_require__.r(Te),__webpack_require__.d(Te,{activeExamplesMember:()=>gI,hasUserEditedBody:()=>dI,requestBodyErrors:()=>mI,requestBodyInclusionSetting:()=>fI,requestBodyValue:()=>pI,requestContentType:()=>yI,responseContentType:()=>vI,selectDefaultRequestBodyValue:()=>selectDefaultRequestBodyValue,selectedServer:()=>uI,serverEffectiveValue:()=>SI,serverVariableValue:()=>bI,serverVariables:()=>_I,shouldRetainRequestBodyValue:()=>hI,validOperationMethods:()=>wI,validateBeforeExecute:()=>EI,validateShallowRequired:()=>validateShallowRequired});var Re=__webpack_require__(96540);function formatProdErrorMessage(s){return`Minified Redux error #${s}; visit https://redux.js.org/Errors?code=${s} for the full message or use the non-minified dev environment for full errors. `}var $e=(()=>\"function\"==typeof Symbol&&Symbol.observable||\"@@observable\")(),randomString=()=>Math.random().toString(36).substring(7).split(\"\").join(\".\"),qe={INIT:`@@redux/INIT${randomString()}`,REPLACE:`@@redux/REPLACE${randomString()}`,PROBE_UNKNOWN_ACTION:()=>`@@redux/PROBE_UNKNOWN_ACTION${randomString()}`};function isPlainObject(s){if(\"object\"!=typeof s||null===s)return!1;let o=s;for(;null!==Object.getPrototypeOf(o);)o=Object.getPrototypeOf(o);return Object.getPrototypeOf(s)===o||null===Object.getPrototypeOf(s)}function createStore(s,o,i){if(\"function\"!=typeof s)throw new Error(formatProdErrorMessage(2));if(\"function\"==typeof o&&\"function\"==typeof i||\"function\"==typeof i&&\"function\"==typeof arguments[3])throw new Error(formatProdErrorMessage(0));if(\"function\"==typeof o&&void 0===i&&(i=o,o=void 0),void 0!==i){if(\"function\"!=typeof i)throw new Error(formatProdErrorMessage(1));return i(createStore)(s,o)}let a=s,u=o,_=new Map,w=_,x=0,C=!1;function ensureCanMutateNextListeners(){w===_&&(w=new Map,_.forEach(((s,o)=>{w.set(o,s)})))}function getState(){if(C)throw new Error(formatProdErrorMessage(3));return u}function subscribe(s){if(\"function\"!=typeof s)throw new Error(formatProdErrorMessage(4));if(C)throw new Error(formatProdErrorMessage(5));let o=!0;ensureCanMutateNextListeners();const i=x++;return w.set(i,s),function unsubscribe(){if(o){if(C)throw new Error(formatProdErrorMessage(6));o=!1,ensureCanMutateNextListeners(),w.delete(i),_=null}}}function dispatch(s){if(!isPlainObject(s))throw new Error(formatProdErrorMessage(7));if(void 0===s.type)throw new Error(formatProdErrorMessage(8));if(\"string\"!=typeof s.type)throw new Error(formatProdErrorMessage(17));if(C)throw new Error(formatProdErrorMessage(9));try{C=!0,u=a(u,s)}finally{C=!1}return(_=w).forEach((s=>{s()})),s}dispatch({type:qe.INIT});return{dispatch,subscribe,getState,replaceReducer:function replaceReducer(s){if(\"function\"!=typeof s)throw new Error(formatProdErrorMessage(10));a=s,dispatch({type:qe.REPLACE})},[$e]:function observable(){const s=subscribe;return{subscribe(o){if(\"object\"!=typeof o||null===o)throw new Error(formatProdErrorMessage(11));function observeState(){const s=o;s.next&&s.next(getState())}observeState();return{unsubscribe:s(observeState)}},[$e](){return this}}}}}function bindActionCreator(s,o){return function(...i){return o(s.apply(this,i))}}function compose(...s){return 0===s.length?s=>s:1===s.length?s[0]:s.reduce(((s,o)=>(...i)=>s(o(...i))))}var ze=__webpack_require__(9404),We=__webpack_require__.n(ze),He=__webpack_require__(81919),Ye=__webpack_require__.n(He),Xe=__webpack_require__(89593),Qe=__webpack_require__(20334),et=__webpack_require__(55364),tt=__webpack_require__.n(et);const rt=\"err_new_thrown_err\",nt=\"err_new_thrown_err_batch\",st=\"err_new_spec_err\",ot=\"err_new_spec_err_batch\",it=\"err_new_auth_err\",at=\"err_clear\",ct=\"err_clear_by\";function newThrownErr(s){return{type:rt,payload:(0,Qe.serializeError)(s)}}function newThrownErrBatch(s){return{type:nt,payload:s}}function newSpecErr(s){return{type:st,payload:s}}function newSpecErrBatch(s){return{type:ot,payload:s}}function newAuthErr(s){return{type:it,payload:s}}function clear(s={}){return{type:at,payload:s}}function clearBy(s=()=>!0){return{type:ct,payload:s}}const lt=function makeWindow(){var s={location:{},history:{},open:()=>{},close:()=>{},File:function(){},FormData:function(){}};if(\"undefined\"==typeof window)return s;try{s=window;for(var o of[\"File\",\"Blob\",\"FormData\"])o in window&&(s[o]=window[o])}catch(s){console.error(s)}return s}();__webpack_require__(84058),__webpack_require__(55808);var ut=__webpack_require__(50104),pt=__webpack_require__.n(ut),ht=__webpack_require__(7309),dt=__webpack_require__.n(ht),mt=__webpack_require__(42426),gt=__webpack_require__.n(mt),yt=__webpack_require__(75288),vt=__webpack_require__.n(yt),bt=__webpack_require__(1882),_t=__webpack_require__.n(bt),St=__webpack_require__(2205),Et=__webpack_require__.n(St),wt=__webpack_require__(53209),xt=__webpack_require__.n(wt),kt=__webpack_require__(62802),Ot=__webpack_require__.n(kt);const At=We().Set.of(\"type\",\"format\",\"items\",\"default\",\"maximum\",\"exclusiveMaximum\",\"minimum\",\"exclusiveMinimum\",\"maxLength\",\"minLength\",\"pattern\",\"maxItems\",\"minItems\",\"uniqueItems\",\"enum\",\"multipleOf\");function getParameterSchema(s,{isOAS3:o}={}){if(!We().Map.isMap(s))return{schema:We().Map(),parameterContentMediaType:null};if(!o)return\"body\"===s.get(\"in\")?{schema:s.get(\"schema\",We().Map()),parameterContentMediaType:null}:{schema:s.filter(((s,o)=>At.includes(o))),parameterContentMediaType:null};if(s.get(\"content\")){const o=s.get(\"content\",We().Map({})).keySeq().first();return{schema:s.getIn([\"content\",o,\"schema\"],We().Map()),parameterContentMediaType:o}}return{schema:s.get(\"schema\")?s.get(\"schema\",We().Map()):We().Map(),parameterContentMediaType:null}}var Ct=__webpack_require__(48287).Buffer;const jt=\"default\",isImmutable=s=>We().Iterable.isIterable(s),immutableToJS=s=>isImmutable(s)?s.toJS():s;function objectify(s){return isObject(s)?immutableToJS(s):{}}function fromJSOrdered(s){if(isImmutable(s))return s;if(s instanceof lt.File)return s;if(!isObject(s))return s;if(Array.isArray(s))return We().Seq(s).map(fromJSOrdered).toList();if(_t()(s.entries)){const o=function createObjWithHashedKeys(s){if(!_t()(s.entries))return s;const o={},i=\"_**[]\",a={};for(let u of s.entries())if(o[u[0]]||a[u[0]]&&a[u[0]].containsMultiple){if(!a[u[0]]){a[u[0]]={containsMultiple:!0,length:1},o[`${u[0]}${i}${a[u[0]].length}`]=o[u[0]],delete o[u[0]]}a[u[0]].length+=1,o[`${u[0]}${i}${a[u[0]].length}`]=u[1]}else o[u[0]]=u[1];return o}(s);return We().OrderedMap(o).map(fromJSOrdered)}return We().OrderedMap(s).map(fromJSOrdered)}function normalizeArray(s){return Array.isArray(s)?s:[s]}function isFn(s){return\"function\"==typeof s}function isObject(s){return!!s&&\"object\"==typeof s}function isFunc(s){return\"function\"==typeof s}function isArray(s){return Array.isArray(s)}const Pt=pt();function objMap(s,o){return Object.keys(s).reduce(((i,a)=>(i[a]=o(s[a],a),i)),{})}function objReduce(s,o){return Object.keys(s).reduce(((i,a)=>{let u=o(s[a],a);return u&&\"object\"==typeof u&&Object.assign(i,u),i}),{})}function systemThunkMiddleware(s){return({dispatch:o,getState:i})=>o=>i=>\"function\"==typeof i?i(s()):o(i)}function validateValueBySchema(s,o,i,a,u){if(!o)return[];let _=[],w=o.get(\"nullable\"),x=o.get(\"required\"),C=o.get(\"maximum\"),j=o.get(\"minimum\"),L=o.get(\"type\"),B=o.get(\"format\"),$=o.get(\"maxLength\"),U=o.get(\"minLength\"),V=o.get(\"uniqueItems\"),z=o.get(\"maxItems\"),Y=o.get(\"minItems\"),Z=o.get(\"pattern\");const ee=i||!0===x,ie=null!=s,ae=ee||ie&&\"array\"===L||!(!ee&&!ie),ce=w&&null===s;if(ee&&!ie&&!ce&&!a&&!L)return _.push(\"Required field is not provided\"),_;if(ce||!L||!ae)return[];let le=\"string\"===L&&s,pe=\"array\"===L&&Array.isArray(s)&&s.length,de=\"array\"===L&&We().List.isList(s)&&s.count();const fe=[le,pe,de,\"array\"===L&&\"string\"==typeof s&&s,\"file\"===L&&s instanceof lt.File,\"boolean\"===L&&(s||!1===s),\"number\"===L&&(s||0===s),\"integer\"===L&&(s||0===s),\"object\"===L&&\"object\"==typeof s&&null!==s,\"object\"===L&&\"string\"==typeof s&&s].some((s=>!!s));if(ee&&!fe&&!a)return _.push(\"Required field is not provided\"),_;if(\"object\"===L&&(null===u||\"application/json\"===u)){let i=s;if(\"string\"==typeof s)try{i=JSON.parse(s)}catch(s){return _.push(\"Parameter string value must be valid JSON\"),_}o&&o.has(\"required\")&&isFunc(x.isList)&&x.isList()&&x.forEach((s=>{void 0===i[s]&&_.push({propKey:s,error:\"Required property not found\"})})),o&&o.has(\"properties\")&&o.get(\"properties\").forEach(((s,o)=>{const w=validateValueBySchema(i[o],s,!1,a,u);_.push(...w.map((s=>({propKey:o,error:s}))))}))}if(Z){let o=((s,o)=>{if(!new RegExp(o).test(s))return\"Value must follow pattern \"+o})(s,Z);o&&_.push(o)}if(Y&&\"array\"===L){let o=((s,o)=>{if(!s&&o>=1||s&&s.length{if(s&&s.length>o)return`Array must not contain more then ${o} item${1===o?\"\":\"s\"}`})(s,z);o&&_.push({needRemove:!0,error:o})}if(V&&\"array\"===L){let o=((s,o)=>{if(s&&(\"true\"===o||!0===o)){const o=(0,ze.fromJS)(s),i=o.toSet();if(s.length>i.size){let s=(0,ze.Set)();if(o.forEach(((i,a)=>{o.filter((s=>isFunc(s.equals)?s.equals(i):s===i)).size>1&&(s=s.add(a))})),0!==s.size)return s.map((s=>({index:s,error:\"No duplicates allowed.\"}))).toArray()}}})(s,V);o&&_.push(...o)}if($||0===$){let o=((s,o)=>{if(s.length>o)return`Value must be no longer than ${o} character${1!==o?\"s\":\"\"}`})(s,$);o&&_.push(o)}if(U){let o=((s,o)=>{if(s.length{if(s>o)return`Value must be less than or equal to ${o}`})(s,C);o&&_.push(o)}if(j||0===j){let o=((s,o)=>{if(s{if(isNaN(Date.parse(s)))return\"Value must be a DateTime\"})(s):\"uuid\"===B?(s=>{if(s=s.toString().toLowerCase(),!/^[{(]?[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}[)}]?$/.test(s))return\"Value must be a Guid\"})(s):(s=>{if(s&&\"string\"!=typeof s)return\"Value must be a string\"})(s),!o)return _;_.push(o)}else if(\"boolean\"===L){let o=(s=>{if(\"true\"!==s&&\"false\"!==s&&!0!==s&&!1!==s)return\"Value must be a boolean\"})(s);if(!o)return _;_.push(o)}else if(\"number\"===L){let o=(s=>{if(!/^-?\\d+(\\.?\\d+)?$/.test(s))return\"Value must be a number\"})(s);if(!o)return _;_.push(o)}else if(\"integer\"===L){let o=(s=>{if(!/^-?\\d+$/.test(s))return\"Value must be an integer\"})(s);if(!o)return _;_.push(o)}else if(\"array\"===L){if(!pe&&!de)return _;s&&s.forEach(((s,i)=>{const w=validateValueBySchema(s,o.get(\"items\"),!1,a,u);_.push(...w.map((s=>({index:i,error:s}))))}))}else if(\"file\"===L){let o=(s=>{if(s&&!(s instanceof lt.File))return\"Value must be a file\"})(s);if(!o)return _;_.push(o)}return _}const utils_btoa=s=>{let o;return o=s instanceof Ct?s:Ct.from(s.toString(),\"utf-8\"),o.toString(\"base64\")},It={operationsSorter:{alpha:(s,o)=>s.get(\"path\").localeCompare(o.get(\"path\")),method:(s,o)=>s.get(\"method\").localeCompare(o.get(\"method\"))},tagsSorter:{alpha:(s,o)=>s.localeCompare(o)}},buildFormData=s=>{let o=[];for(let i in s){let a=s[i];void 0!==a&&\"\"!==a&&o.push([i,\"=\",encodeURIComponent(a).replace(/%20/g,\"+\")].join(\"\"))}return o.join(\"&\")},shallowEqualKeys=(s,o,i)=>!!dt()(i,(i=>vt()(s[i],o[i])));function requiresValidationURL(s){return!(!s||s.indexOf(\"localhost\")>=0||s.indexOf(\"127.0.0.1\")>=0||\"none\"===s)}const createDeepLinkPath=s=>\"string\"==typeof s||s instanceof String?s.trim().replace(/\\s/g,\"%20\"):\"\",escapeDeepLinkPath=s=>Et()(createDeepLinkPath(s).replace(/%20/g,\"_\")),isExtension=s=>/^x-/.test(s),getExtensions=s=>ze.Map.isMap(s)?s.filter(((s,o)=>isExtension(o))):Object.keys(s).filter((s=>isExtension(s))),getCommonExtensions=s=>s.filter(((s,o)=>/^pattern|maxLength|minLength|maximum|minimum/.test(o)));function deeplyStripKey(s,o,i=()=>!0){if(\"object\"!=typeof s||Array.isArray(s)||null===s||!o)return s;const a=Object.assign({},s);return Object.keys(a).forEach((s=>{s===o&&i(a[s],s)?delete a[s]:a[s]=deeplyStripKey(a[s],o,i)})),a}function stringify(s){if(\"string\"==typeof s)return s;if(s&&s.toJS&&(s=s.toJS()),\"object\"==typeof s&&null!==s)try{return JSON.stringify(s,null,2)}catch(o){return String(s)}return null==s?\"\":s.toString()}function paramToIdentifier(s,{returnAll:o=!1,allowHashes:i=!0}={}){if(!We().Map.isMap(s))throw new Error(\"paramToIdentifier: received a non-Im.Map parameter as input\");const a=s.get(\"name\"),u=s.get(\"in\");let _=[];return s&&s.hashCode&&u&&a&&i&&_.push(`${u}.${a}.hash-${s.hashCode()}`),u&&a&&_.push(`${u}.${a}`),_.push(a),o?_:_[0]||\"\"}function paramToValue(s,o){return paramToIdentifier(s,{returnAll:!0}).map((s=>o[s])).filter((s=>void 0!==s))[0]}function b64toB64UrlEncoded(s){return s.replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=/g,\"\")}const isEmptyValue=s=>!s||!(!isImmutable(s)||!s.isEmpty()),idFn=s=>s;function createStoreWithMiddleware(s,o,i){let a=[systemThunkMiddleware(i)];return createStore(s,o,(lt.__REDUX_DEVTOOLS_EXTENSION_COMPOSE__||compose)(function applyMiddleware(...s){return o=>(i,a)=>{const u=o(i,a);let dispatch=()=>{throw new Error(formatProdErrorMessage(15))};const _={getState:u.getState,dispatch:(s,...o)=>dispatch(s,...o)},w=s.map((s=>s(_)));return dispatch=compose(...w)(u.dispatch),{...u,dispatch}}}(...a)))}class Store{constructor(s={}){Ye()(this,{state:{},plugins:[],system:{configs:{},fn:{},components:{},rootInjects:{},statePlugins:{}},boundSystem:{},toolbox:{}},s),this.getSystem=this._getSystem.bind(this),this.store=function configureStore(s,o,i){return createStoreWithMiddleware(s,o,i)}(idFn,(0,ze.fromJS)(this.state),this.getSystem),this.buildSystem(!1),this.register(this.plugins)}getStore(){return this.store}register(s,o=!0){var i=combinePlugins(s,this.getSystem());systemExtend(this.system,i),o&&this.buildSystem();callAfterLoad.call(this.system,s,this.getSystem())&&this.buildSystem()}buildSystem(s=!0){let o=this.getStore().dispatch,i=this.getStore().getState;this.boundSystem=Object.assign({},this.getRootInjects(),this.getWrappedAndBoundActions(o),this.getWrappedAndBoundSelectors(i,this.getSystem),this.getStateThunks(i),this.getFn(),this.getConfigs()),s&&this.rebuildReducer()}_getSystem(){return this.boundSystem}getRootInjects(){return Object.assign({getSystem:this.getSystem,getStore:this.getStore.bind(this),getComponents:this.getComponents.bind(this),getState:this.getStore().getState,getConfigs:this._getConfigs.bind(this),Im:We(),React:Re},this.system.rootInjects||{})}_getConfigs(){return this.system.configs}getConfigs(){return{configs:this.system.configs}}setConfigs(s){this.system.configs=s}rebuildReducer(){this.store.replaceReducer(function buildReducer(s,o){return function allReducers(s,o){let i=Object.keys(s).reduce(((i,a)=>(i[a]=function makeReducer(s,o){return(i=new ze.Map,a)=>{if(!s)return i;let u=s[a.type];if(u){const s=wrapWithTryCatch(u,o)(i,a);return null===s?i:s}return i}}(s[a],o),i)),{});if(!Object.keys(i).length)return idFn;return(0,Xe.H)(i)}(objMap(s,(s=>s.reducers)),o)}(this.system.statePlugins,this.getSystem))}getType(s){let o=s[0].toUpperCase()+s.slice(1);return objReduce(this.system.statePlugins,((i,a)=>{let u=i[s];if(u)return{[a+o]:u}}))}getSelectors(){return this.getType(\"selectors\")}getActions(){return objMap(this.getType(\"actions\"),(s=>objReduce(s,((s,o)=>{if(isFn(s))return{[o]:s}}))))}getWrappedAndBoundActions(s){return objMap(this.getBoundActions(s),((s,o)=>{let i=this.system.statePlugins[o.slice(0,-7)].wrapActions;return i?objMap(s,((s,o)=>{let a=i[o];return a?(Array.isArray(a)||(a=[a]),a.reduce(((s,o)=>{let newAction=(...i)=>o(s,this.getSystem())(...i);if(!isFn(newAction))throw new TypeError(\"wrapActions needs to return a function that returns a new function (ie the wrapped action)\");return wrapWithTryCatch(newAction,this.getSystem)}),s||Function.prototype)):s})):s}))}getWrappedAndBoundSelectors(s,o){return objMap(this.getBoundSelectors(s,o),((o,i)=>{let a=[i.slice(0,-9)],u=this.system.statePlugins[a].wrapSelectors;return u?objMap(o,((o,i)=>{let _=u[i];return _?(Array.isArray(_)||(_=[_]),_.reduce(((o,i)=>{let wrappedSelector=(...u)=>i(o,this.getSystem())(s().getIn(a),...u);if(!isFn(wrappedSelector))throw new TypeError(\"wrapSelector needs to return a function that returns a new function (ie the wrapped action)\");return wrappedSelector}),o||Function.prototype)):o})):o}))}getStates(s){return Object.keys(this.system.statePlugins).reduce(((o,i)=>(o[i]=s.get(i),o)),{})}getStateThunks(s){return Object.keys(this.system.statePlugins).reduce(((o,i)=>(o[i]=()=>s().get(i),o)),{})}getFn(){return{fn:this.system.fn}}getComponents(s){const o=this.system.components[s];return Array.isArray(o)?o.reduce(((s,o)=>o(s,this.getSystem()))):void 0!==s?this.system.components[s]:this.system.components}getBoundSelectors(s,o){return objMap(this.getSelectors(),((i,a)=>{let u=[a.slice(0,-9)];return objMap(i,(i=>(...a)=>{let _=wrapWithTryCatch(i,this.getSystem).apply(null,[s().getIn(u),...a]);return\"function\"==typeof _&&(_=wrapWithTryCatch(_,this.getSystem)(o())),_}))}))}getBoundActions(s){s=s||this.getStore().dispatch;const o=this.getActions(),process=s=>\"function\"!=typeof s?objMap(s,(s=>process(s))):(...o)=>{var i=null;try{i=s(...o)}catch(s){i={type:rt,error:!0,payload:(0,Qe.serializeError)(s)}}finally{return i}};return objMap(o,(o=>function bindActionCreators(s,o){if(\"function\"==typeof s)return bindActionCreator(s,o);if(\"object\"!=typeof s||null===s)throw new Error(formatProdErrorMessage(16));const i={};for(const a in s){const u=s[a];\"function\"==typeof u&&(i[a]=bindActionCreator(u,o))}return i}(process(o),s)))}getMapStateToProps(){return()=>Object.assign({},this.getSystem())}getMapDispatchToProps(s){return o=>Ye()({},this.getWrappedAndBoundActions(o),this.getFn(),s)}}function combinePlugins(s,o){return isObject(s)&&!isArray(s)?tt()({},s):isFunc(s)?combinePlugins(s(o),o):isArray(s)?s.map((s=>combinePlugins(s,o))).reduce(systemExtend,{components:o.getComponents()}):{}}function callAfterLoad(s,o,{hasLoaded:i}={}){let a=i;return isObject(s)&&!isArray(s)&&\"function\"==typeof s.afterLoad&&(a=!0,wrapWithTryCatch(s.afterLoad,o.getSystem).call(this,o)),isFunc(s)?callAfterLoad.call(this,s(o),o,{hasLoaded:a}):isArray(s)?s.map((s=>callAfterLoad.call(this,s,o,{hasLoaded:a}))):a}function systemExtend(s={},o={}){if(!isObject(s))return{};if(!isObject(o))return s;o.wrapComponents&&(objMap(o.wrapComponents,((i,a)=>{const u=s.components&&s.components[a];u&&Array.isArray(u)?(s.components[a]=u.concat([i]),delete o.wrapComponents[a]):u&&(s.components[a]=[u,i],delete o.wrapComponents[a])})),Object.keys(o.wrapComponents).length||delete o.wrapComponents);const{statePlugins:i}=s;if(isObject(i))for(let s in i){const a=i[s];if(!isObject(a))continue;const{wrapActions:u,wrapSelectors:_}=a;if(isObject(u))for(let i in u){let a=u[i];Array.isArray(a)||(a=[a],u[i]=a),o&&o.statePlugins&&o.statePlugins[s]&&o.statePlugins[s].wrapActions&&o.statePlugins[s].wrapActions[i]&&(o.statePlugins[s].wrapActions[i]=u[i].concat(o.statePlugins[s].wrapActions[i]))}if(isObject(_))for(let i in _){let a=_[i];Array.isArray(a)||(a=[a],_[i]=a),o&&o.statePlugins&&o.statePlugins[s]&&o.statePlugins[s].wrapSelectors&&o.statePlugins[s].wrapSelectors[i]&&(o.statePlugins[s].wrapSelectors[i]=_[i].concat(o.statePlugins[s].wrapSelectors[i]))}}return Ye()(s,o)}function wrapWithTryCatch(s,o,{logErrors:i=!0}={}){return\"function\"!=typeof s?s:function(...a){try{return s.call(this,...a)}catch(s){if(i){const{uncaughtExceptionHandler:i}=o().getConfigs();\"function\"==typeof i?i(s):console.error(s)}return null}}}var Tt=__webpack_require__(61160),Nt=__webpack_require__.n(Tt);const Mt=\"show_popup\",Rt=\"authorize\",Dt=\"logout\",Lt=\"authorize_oauth2\",Ft=\"configure_auth\",Bt=\"restore_authorization\";function showDefinitions(s){return{type:Mt,payload:s}}function authorize(s){return{type:Rt,payload:s}}const authorizeWithPersistOption=s=>({authActions:o})=>{o.authorize(s),o.persistAuthorizationIfNeeded()};function logout(s){return{type:Dt,payload:s}}const logoutWithPersistOption=s=>({authActions:o})=>{o.logout(s),o.persistAuthorizationIfNeeded()},preAuthorizeImplicit=s=>({authActions:o,errActions:i})=>{let{auth:a,token:u,isValid:_}=s,{schema:w,name:x}=a,C=w.get(\"flow\");delete lt.swaggerUIRedirectOauth2,\"accessCode\"===C||_||i.newAuthErr({authId:x,source:\"auth\",level:\"warning\",message:\"Authorization may be unsafe, passed state was changed in server Passed state wasn't returned from auth server\"}),u.error?i.newAuthErr({authId:x,source:\"auth\",level:\"error\",message:JSON.stringify(u)}):o.authorizeOauth2WithPersistOption({auth:a,token:u})};function authorizeOauth2(s){return{type:Lt,payload:s}}const authorizeOauth2WithPersistOption=s=>({authActions:o})=>{o.authorizeOauth2(s),o.persistAuthorizationIfNeeded()},authorizePassword=s=>({authActions:o})=>{let{schema:i,name:a,username:u,password:_,passwordType:w,clientId:x,clientSecret:C}=s,j={grant_type:\"password\",scope:s.scopes.join(\" \"),username:u,password:_},L={};switch(w){case\"request-body\":!function setClientIdAndSecret(s,o,i){o&&Object.assign(s,{client_id:o});i&&Object.assign(s,{client_secret:i})}(j,x,C);break;case\"basic\":L.Authorization=\"Basic \"+utils_btoa(x+\":\"+C);break;default:console.warn(`Warning: invalid passwordType ${w} was passed, not including client id and secret`)}return o.authorizeRequest({body:buildFormData(j),url:i.get(\"tokenUrl\"),name:a,headers:L,query:{},auth:s})};const authorizeApplication=s=>({authActions:o})=>{let{schema:i,scopes:a,name:u,clientId:_,clientSecret:w}=s,x={Authorization:\"Basic \"+utils_btoa(_+\":\"+w)},C={grant_type:\"client_credentials\",scope:a.join(\" \")};return o.authorizeRequest({body:buildFormData(C),name:u,url:i.get(\"tokenUrl\"),auth:s,headers:x})},authorizeAccessCodeWithFormParams=({auth:s,redirectUrl:o})=>({authActions:i})=>{let{schema:a,name:u,clientId:_,clientSecret:w,codeVerifier:x}=s,C={grant_type:\"authorization_code\",code:s.code,client_id:_,client_secret:w,redirect_uri:o,code_verifier:x};return i.authorizeRequest({body:buildFormData(C),name:u,url:a.get(\"tokenUrl\"),auth:s})},authorizeAccessCodeWithBasicAuthentication=({auth:s,redirectUrl:o})=>({authActions:i})=>{let{schema:a,name:u,clientId:_,clientSecret:w,codeVerifier:x}=s,C={Authorization:\"Basic \"+utils_btoa(_+\":\"+w)},j={grant_type:\"authorization_code\",code:s.code,client_id:_,redirect_uri:o,code_verifier:x};return i.authorizeRequest({body:buildFormData(j),name:u,url:a.get(\"tokenUrl\"),auth:s,headers:C})},authorizeRequest=s=>({fn:o,getConfigs:i,authActions:a,errActions:u,oas3Selectors:_,specSelectors:w,authSelectors:x})=>{let C,{body:j,query:L={},headers:B={},name:$,url:U,auth:V}=s,{additionalQueryStringParams:z}=x.getConfigs()||{};if(w.isOAS3()){let s=_.serverEffectiveValue(_.selectedServer());C=Nt()(U,s,!0)}else C=Nt()(U,w.url(),!0);\"object\"==typeof z&&(C.query=Object.assign({},C.query,z));const Y=C.toString();let Z=Object.assign({Accept:\"application/json, text/plain, */*\",\"Content-Type\":\"application/x-www-form-urlencoded\",\"X-Requested-With\":\"XMLHttpRequest\"},B);o.fetch({url:Y,method:\"post\",headers:Z,query:L,body:j,requestInterceptor:i().requestInterceptor,responseInterceptor:i().responseInterceptor}).then((function(s){let o=JSON.parse(s.data),i=o&&(o.error||\"\"),_=o&&(o.parseError||\"\");s.ok?i||_?u.newAuthErr({authId:$,level:\"error\",source:\"auth\",message:JSON.stringify(o)}):a.authorizeOauth2WithPersistOption({auth:V,token:o}):u.newAuthErr({authId:$,level:\"error\",source:\"auth\",message:s.statusText})})).catch((s=>{let o=new Error(s).message;if(s.response&&s.response.data){const i=s.response.data;try{const s=\"string\"==typeof i?JSON.parse(i):i;s.error&&(o+=`, error: ${s.error}`),s.error_description&&(o+=`, description: ${s.error_description}`)}catch(s){}}u.newAuthErr({authId:$,level:\"error\",source:\"auth\",message:o})}))};function configureAuth(s){return{type:Ft,payload:s}}function restoreAuthorization(s){return{type:Bt,payload:s}}const persistAuthorizationIfNeeded=()=>({authSelectors:s,getConfigs:o})=>{if(!o().persistAuthorization)return;const i=s.authorized().toJS();localStorage.setItem(\"authorized\",JSON.stringify(i))},authPopup=(s,o)=>()=>{lt.swaggerUIRedirectOauth2=o,lt.open(s)},$t={[Mt]:(s,{payload:o})=>s.set(\"showDefinitions\",o),[Rt]:(s,{payload:o})=>{let i=(0,ze.fromJS)(o),a=s.get(\"authorized\")||(0,ze.Map)();return i.entrySeq().forEach((([o,i])=>{if(!isFunc(i.getIn))return s.set(\"authorized\",a);let u=i.getIn([\"schema\",\"type\"]);if(\"apiKey\"===u||\"http\"===u)a=a.set(o,i);else if(\"basic\"===u){let s=i.getIn([\"value\",\"username\"]),u=i.getIn([\"value\",\"password\"]);a=a.setIn([o,\"value\"],{username:s,header:\"Basic \"+utils_btoa(s+\":\"+u)}),a=a.setIn([o,\"schema\"],i.get(\"schema\"))}})),s.set(\"authorized\",a)},[Lt]:(s,{payload:o})=>{let i,{auth:a,token:u}=o;a.token=Object.assign({},u),i=(0,ze.fromJS)(a);let _=s.get(\"authorized\")||(0,ze.Map)();return _=_.set(i.get(\"name\"),i),s.set(\"authorized\",_)},[Dt]:(s,{payload:o})=>{let i=s.get(\"authorized\").withMutations((s=>{o.forEach((o=>{s.delete(o)}))}));return s.set(\"authorized\",i)},[Ft]:(s,{payload:o})=>s.set(\"configs\",o),[Bt]:(s,{payload:o})=>s.set(\"authorized\",(0,ze.fromJS)(o.authorized))};function assertIsFunction(s,o=\"expected a function, instead received \"+typeof s){if(\"function\"!=typeof s)throw new TypeError(o)}var ensureIsArray=s=>Array.isArray(s)?s:[s];function getDependencies(s){const o=Array.isArray(s[0])?s[0]:s;return function assertIsArrayOfFunctions(s,o=\"expected all items to be functions, instead received the following types: \"){if(!s.every((s=>\"function\"==typeof s))){const i=s.map((s=>\"function\"==typeof s?`function ${s.name||\"unnamed\"}()`:typeof s)).join(\", \");throw new TypeError(`${o}[${i}]`)}}(o,\"createSelector expects all input-selectors to be functions, but received the following types: \"),o}Symbol(),Object.getPrototypeOf({});var qt=\"undefined\"!=typeof WeakRef?WeakRef:class{constructor(s){this.value=s}deref(){return this.value}};function weakMapMemoize(s,o={}){let i={s:0,v:void 0,o:null,p:null};const{resultEqualityCheck:a}=o;let u,_=0;function memoized(){let o=i;const{length:w}=arguments;for(let s=0,i=w;s{i={s:0,v:void 0,o:null,p:null},memoized.resetResultsCount()},memoized.resultsCount=()=>_,memoized.resetResultsCount=()=>{_=0},memoized}function createSelectorCreator(s,...o){const i=\"function\"==typeof s?{memoize:s,memoizeOptions:o}:s,createSelector2=(...s)=>{let o,a=0,u=0,_={},w=s.pop();\"object\"==typeof w&&(_=w,w=s.pop()),assertIsFunction(w,`createSelector expects an output function after the inputs, but received: [${typeof w}]`);const x={...i,..._},{memoize:C,memoizeOptions:j=[],argsMemoize:L=weakMapMemoize,argsMemoizeOptions:B=[],devModeChecks:$={}}=x,U=ensureIsArray(j),V=ensureIsArray(B),z=getDependencies(s),Y=C((function recomputationWrapper(){return a++,w.apply(null,arguments)}),...U);const Z=L((function dependenciesChecker(){u++;const s=function collectInputSelectorResults(s,o){const i=[],{length:a}=s;for(let u=0;uu,resetDependencyRecomputations:()=>{u=0},lastResult:()=>o,recomputations:()=>a,resetRecomputations:()=>{a=0},memoize:C,argsMemoize:L})};return Object.assign(createSelector2,{withTypes:()=>createSelector2}),createSelector2}var Ut=createSelectorCreator(weakMapMemoize),Vt=Object.assign(((s,o=Ut)=>{!function assertIsObject(s,o=\"expected an object, instead received \"+typeof s){if(\"object\"!=typeof s)throw new TypeError(o)}(s,\"createStructuredSelector expects first argument to be an object where each property is a selector, instead received a \"+typeof s);const i=Object.keys(s);return o(i.map((o=>s[o])),((...s)=>s.reduce(((s,o,a)=>(s[i[a]]=o,s)),{})))}),{withTypes:()=>Vt});const state=s=>s,zt=Ut(state,(s=>s.get(\"showDefinitions\"))),Wt=Ut(state,(()=>({specSelectors:s})=>{let o=s.securityDefinitions()||(0,ze.Map)({}),i=(0,ze.List)();return o.entrySeq().forEach((([s,o])=>{let a=(0,ze.Map)();a=a.set(s,o),i=i.push(a)})),i})),selectAuthPath=(s,o)=>({specSelectors:s})=>(0,ze.List)(s.isOAS3()?[\"components\",\"securitySchemes\",o]:[\"securityDefinitions\",o]),getDefinitionsByNames=(s,o)=>({specSelectors:s})=>{console.warn(\"WARNING: getDefinitionsByNames is deprecated and will be removed in the next major version.\");let i=s.securityDefinitions(),a=(0,ze.List)();return o.valueSeq().forEach((s=>{let o=(0,ze.Map)();s.entrySeq().forEach((([s,a])=>{let u,_=i.get(s);\"oauth2\"===_.get(\"type\")&&a.size&&(u=_.get(\"scopes\"),u.keySeq().forEach((s=>{a.contains(s)||(u=u.delete(s))})),_=_.set(\"allowedScopes\",u)),o=o.set(s,_)})),a=a.push(o)})),a},definitionsForRequirements=(s,o=(0,ze.List)())=>({authSelectors:s})=>{const i=s.definitionsToAuthorize()||(0,ze.List)();let a=(0,ze.List)();return i.forEach((s=>{let i=o.find((o=>o.get(s.keySeq().first())));i&&(s.forEach(((o,a)=>{if(\"oauth2\"===o.get(\"type\")){const u=i.get(a);let _=o.get(\"scopes\");ze.List.isList(u)&&ze.Map.isMap(_)&&(_.keySeq().forEach((s=>{u.contains(s)||(_=_.delete(s))})),s=s.set(a,o.set(\"scopes\",_)))}})),a=a.push(s))})),a},Jt=Ut(state,(s=>s.get(\"authorized\")||(0,ze.Map)())),isAuthorized=(s,o)=>({authSelectors:s})=>{let i=s.authorized();return ze.List.isList(o)?!!o.toJS().filter((s=>-1===Object.keys(s).map((s=>!!i.get(s))).indexOf(!1))).length:null},Ht=Ut(state,(s=>s.get(\"configs\"))),execute=(s,{authSelectors:o,specSelectors:i})=>({path:a,method:u,operation:_,extras:w})=>{let x={authorized:o.authorized()&&o.authorized().toJS(),definitions:i.securityDefinitions()&&i.securityDefinitions().toJS(),specSecurity:i.security()&&i.security().toJS()};return s({path:a,method:u,operation:_,securities:x,...w})},loaded=(s,o)=>i=>{const{getConfigs:a,authActions:u}=o,_=a();if(s(i),_.persistAuthorization){const s=localStorage.getItem(\"authorized\");s&&u.restoreAuthorization({authorized:JSON.parse(s)})}},wrap_actions_authorize=(s,o)=>i=>{s(i);if(o.getConfigs().persistAuthorization)try{const[{schema:s,value:o}]=Object.values(i),a=(0,ze.fromJS)(s),u=\"apiKey\"===a.get(\"type\"),_=\"cookie\"===a.get(\"in\");u&&_&&(document.cookie=`${a.get(\"name\")}=${o}; SameSite=None; Secure`)}catch(s){console.error(\"Error persisting cookie based apiKey in document.cookie.\",s)}},wrap_actions_logout=(s,o)=>i=>{const a=o.getConfigs(),u=o.authSelectors.authorized();try{a.persistAuthorization&&Array.isArray(i)&&i.forEach((s=>{const o=u.get(s,{}),i=\"apiKey\"===o.getIn([\"schema\",\"type\"]),a=\"cookie\"===o.getIn([\"schema\",\"in\"]);if(i&&a){const s=o.getIn([\"schema\",\"name\"]);document.cookie=`${s}=; Max-Age=-99999999`}}))}catch(s){console.error(\"Error deleting cookie based apiKey from document.cookie.\",s)}s(i)};var Kt=__webpack_require__(90179),Gt=__webpack_require__.n(Kt);class LockAuthIcon extends Re.Component{mapStateToProps(s,o){return{state:s,ownProps:Gt()(o,Object.keys(o.getSystem()))}}render(){const{getComponent:s,ownProps:o}=this.props,i=s(\"LockIcon\");return Re.createElement(i,o)}}const Yt=LockAuthIcon;class UnlockAuthIcon extends Re.Component{mapStateToProps(s,o){return{state:s,ownProps:Gt()(o,Object.keys(o.getSystem()))}}render(){const{getComponent:s,ownProps:o}=this.props,i=s(\"UnlockIcon\");return Re.createElement(i,o)}}const Xt=UnlockAuthIcon;function auth(){return{afterLoad(s){this.rootInjects=this.rootInjects||{},this.rootInjects.initOAuth=s.authActions.configureAuth,this.rootInjects.preauthorizeApiKey=preauthorizeApiKey.bind(null,s),this.rootInjects.preauthorizeBasic=preauthorizeBasic.bind(null,s)},components:{LockAuthIcon:Yt,UnlockAuthIcon:Xt,LockAuthOperationIcon:Yt,UnlockAuthOperationIcon:Xt},statePlugins:{auth:{reducers:$t,actions:o,selectors:a,wrapActions:{authorize:wrap_actions_authorize,logout:wrap_actions_logout}},configs:{wrapActions:{loaded}},spec:{wrapActions:{execute}}}}}function preauthorizeBasic(s,o,i,a){const{authActions:{authorize:u},specSelectors:{specJson:_,isOAS3:w}}=s,x=w()?[\"components\",\"securitySchemes\"]:[\"securityDefinitions\"],C=_().getIn([...x,o]);return C?u({[o]:{value:{username:i,password:a},schema:C.toJS()}}):null}function preauthorizeApiKey(s,o,i){const{authActions:{authorize:a},specSelectors:{specJson:u,isOAS3:_}}=s,w=_()?[\"components\",\"securitySchemes\"]:[\"securityDefinitions\"],x=u().getIn([...w,o]);return x?a({[o]:{value:i,schema:x.toJS()}}):null}function isNothing(s){return null==s}var Qt=function repeat(s,o){var i,a=\"\";for(i=0;ix&&(o=a-x+(_=\" ... \").length),i-a>x&&(i=a+x-(w=\" ...\").length),{str:_+s.slice(o,i).replace(/\\t/g,\"→\")+w,pos:a-o+_.length}}function padStart(s,o){return er.repeat(\" \",o-s.length)+s}var rr=function makeSnippet(s,o){if(o=Object.create(o||null),!s.buffer)return null;o.maxLength||(o.maxLength=79),\"number\"!=typeof o.indent&&(o.indent=1),\"number\"!=typeof o.linesBefore&&(o.linesBefore=3),\"number\"!=typeof o.linesAfter&&(o.linesAfter=2);for(var i,a=/\\r?\\n|\\r|\\0/g,u=[0],_=[],w=-1;i=a.exec(s.buffer);)_.push(i.index),u.push(i.index+i[0].length),s.position<=i.index&&w<0&&(w=u.length-2);w<0&&(w=u.length-1);var x,C,j=\"\",L=Math.min(s.line+o.linesAfter,_.length).toString().length,B=o.maxLength-(o.indent+L+3);for(x=1;x<=o.linesBefore&&!(w-x<0);x++)C=getLine(s.buffer,u[w-x],_[w-x],s.position-(u[w]-u[w-x]),B),j=er.repeat(\" \",o.indent)+padStart((s.line-x+1).toString(),L)+\" | \"+C.str+\"\\n\"+j;for(C=getLine(s.buffer,u[w],_[w],s.position,B),j+=er.repeat(\" \",o.indent)+padStart((s.line+1).toString(),L)+\" | \"+C.str+\"\\n\",j+=er.repeat(\"-\",o.indent+L+3+C.pos)+\"^\\n\",x=1;x<=o.linesAfter&&!(w+x>=_.length);x++)C=getLine(s.buffer,u[w+x],_[w+x],s.position-(u[w]-u[w+x]),B),j+=er.repeat(\" \",o.indent)+padStart((s.line+x+1).toString(),L)+\" | \"+C.str+\"\\n\";return j.replace(/\\n$/,\"\")},nr=[\"kind\",\"multi\",\"resolve\",\"construct\",\"instanceOf\",\"predicate\",\"represent\",\"representName\",\"defaultStyle\",\"styleAliases\"],sr=[\"scalar\",\"sequence\",\"mapping\"];var ir=function Type$1(s,o){if(o=o||{},Object.keys(o).forEach((function(o){if(-1===nr.indexOf(o))throw new tr('Unknown option \"'+o+'\" is met in definition of \"'+s+'\" YAML type.')})),this.options=o,this.tag=s,this.kind=o.kind||null,this.resolve=o.resolve||function(){return!0},this.construct=o.construct||function(s){return s},this.instanceOf=o.instanceOf||null,this.predicate=o.predicate||null,this.represent=o.represent||null,this.representName=o.representName||null,this.defaultStyle=o.defaultStyle||null,this.multi=o.multi||!1,this.styleAliases=function compileStyleAliases(s){var o={};return null!==s&&Object.keys(s).forEach((function(i){s[i].forEach((function(s){o[String(s)]=i}))})),o}(o.styleAliases||null),-1===sr.indexOf(this.kind))throw new tr('Unknown kind \"'+this.kind+'\" is specified for \"'+s+'\" YAML type.')};function compileList(s,o){var i=[];return s[o].forEach((function(s){var o=i.length;i.forEach((function(i,a){i.tag===s.tag&&i.kind===s.kind&&i.multi===s.multi&&(o=a)})),i[o]=s})),i}function Schema$1(s){return this.extend(s)}Schema$1.prototype.extend=function extend(s){var o=[],i=[];if(s instanceof ir)i.push(s);else if(Array.isArray(s))i=i.concat(s);else{if(!s||!Array.isArray(s.implicit)&&!Array.isArray(s.explicit))throw new tr(\"Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })\");s.implicit&&(o=o.concat(s.implicit)),s.explicit&&(i=i.concat(s.explicit))}o.forEach((function(s){if(!(s instanceof ir))throw new tr(\"Specified list of YAML types (or a single Type object) contains a non-Type object.\");if(s.loadKind&&\"scalar\"!==s.loadKind)throw new tr(\"There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.\");if(s.multi)throw new tr(\"There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.\")})),i.forEach((function(s){if(!(s instanceof ir))throw new tr(\"Specified list of YAML types (or a single Type object) contains a non-Type object.\")}));var a=Object.create(Schema$1.prototype);return a.implicit=(this.implicit||[]).concat(o),a.explicit=(this.explicit||[]).concat(i),a.compiledImplicit=compileList(a,\"implicit\"),a.compiledExplicit=compileList(a,\"explicit\"),a.compiledTypeMap=function compileMap(){var s,o,i={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function collectType(s){s.multi?(i.multi[s.kind].push(s),i.multi.fallback.push(s)):i[s.kind][s.tag]=i.fallback[s.tag]=s}for(s=0,o=arguments.length;s=0?\"0b\"+s.toString(2):\"-0b\"+s.toString(2).slice(1)},octal:function(s){return s>=0?\"0o\"+s.toString(8):\"-0o\"+s.toString(8).slice(1)},decimal:function(s){return s.toString(10)},hexadecimal:function(s){return s>=0?\"0x\"+s.toString(16).toUpperCase():\"-0x\"+s.toString(16).toUpperCase().slice(1)}},defaultStyle:\"decimal\",styleAliases:{binary:[2,\"bin\"],octal:[8,\"oct\"],decimal:[10,\"dec\"],hexadecimal:[16,\"hex\"]}}),gr=new RegExp(\"^(?:[-+]?(?:[0-9][0-9_]*)(?:\\\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\\\.(?:inf|Inf|INF)|\\\\.(?:nan|NaN|NAN))$\");var yr=/^[-+]?[0-9]+e/;var vr=new ir(\"tag:yaml.org,2002:float\",{kind:\"scalar\",resolve:function resolveYamlFloat(s){return null!==s&&!(!gr.test(s)||\"_\"===s[s.length-1])},construct:function constructYamlFloat(s){var o,i;return i=\"-\"===(o=s.replace(/_/g,\"\").toLowerCase())[0]?-1:1,\"+-\".indexOf(o[0])>=0&&(o=o.slice(1)),\".inf\"===o?1===i?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:\".nan\"===o?NaN:i*parseFloat(o,10)},predicate:function isFloat(s){return\"[object Number]\"===Object.prototype.toString.call(s)&&(s%1!=0||er.isNegativeZero(s))},represent:function representYamlFloat(s,o){var i;if(isNaN(s))switch(o){case\"lowercase\":return\".nan\";case\"uppercase\":return\".NAN\";case\"camelcase\":return\".NaN\"}else if(Number.POSITIVE_INFINITY===s)switch(o){case\"lowercase\":return\".inf\";case\"uppercase\":return\".INF\";case\"camelcase\":return\".Inf\"}else if(Number.NEGATIVE_INFINITY===s)switch(o){case\"lowercase\":return\"-.inf\";case\"uppercase\":return\"-.INF\";case\"camelcase\":return\"-.Inf\"}else if(er.isNegativeZero(s))return\"-0.0\";return i=s.toString(10),yr.test(i)?i.replace(\"e\",\".e\"):i},defaultStyle:\"lowercase\"}),br=pr.extend({implicit:[dr,fr,mr,vr]}),_r=br,Sr=new RegExp(\"^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$\"),Er=new RegExp(\"^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\\\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\\\.([0-9]*))?(?:[ \\\\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$\");var wr=new ir(\"tag:yaml.org,2002:timestamp\",{kind:\"scalar\",resolve:function resolveYamlTimestamp(s){return null!==s&&(null!==Sr.exec(s)||null!==Er.exec(s))},construct:function constructYamlTimestamp(s){var o,i,a,u,_,w,x,C,j=0,L=null;if(null===(o=Sr.exec(s))&&(o=Er.exec(s)),null===o)throw new Error(\"Date resolve error\");if(i=+o[1],a=+o[2]-1,u=+o[3],!o[4])return new Date(Date.UTC(i,a,u));if(_=+o[4],w=+o[5],x=+o[6],o[7]){for(j=o[7].slice(0,3);j.length<3;)j+=\"0\";j=+j}return o[9]&&(L=6e4*(60*+o[10]+ +(o[11]||0)),\"-\"===o[9]&&(L=-L)),C=new Date(Date.UTC(i,a,u,_,w,x,j)),L&&C.setTime(C.getTime()-L),C},instanceOf:Date,represent:function representYamlTimestamp(s){return s.toISOString()}});var xr=new ir(\"tag:yaml.org,2002:merge\",{kind:\"scalar\",resolve:function resolveYamlMerge(s){return\"<<\"===s||null===s}}),kr=\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\\n\\r\";var Or=new ir(\"tag:yaml.org,2002:binary\",{kind:\"scalar\",resolve:function resolveYamlBinary(s){if(null===s)return!1;var o,i,a=0,u=s.length,_=kr;for(i=0;i64)){if(o<0)return!1;a+=6}return a%8==0},construct:function constructYamlBinary(s){var o,i,a=s.replace(/[\\r\\n=]/g,\"\"),u=a.length,_=kr,w=0,x=[];for(o=0;o>16&255),x.push(w>>8&255),x.push(255&w)),w=w<<6|_.indexOf(a.charAt(o));return 0===(i=u%4*6)?(x.push(w>>16&255),x.push(w>>8&255),x.push(255&w)):18===i?(x.push(w>>10&255),x.push(w>>2&255)):12===i&&x.push(w>>4&255),new Uint8Array(x)},predicate:function isBinary(s){return\"[object Uint8Array]\"===Object.prototype.toString.call(s)},represent:function representYamlBinary(s){var o,i,a=\"\",u=0,_=s.length,w=kr;for(o=0;o<_;o++)o%3==0&&o&&(a+=w[u>>18&63],a+=w[u>>12&63],a+=w[u>>6&63],a+=w[63&u]),u=(u<<8)+s[o];return 0===(i=_%3)?(a+=w[u>>18&63],a+=w[u>>12&63],a+=w[u>>6&63],a+=w[63&u]):2===i?(a+=w[u>>10&63],a+=w[u>>4&63],a+=w[u<<2&63],a+=w[64]):1===i&&(a+=w[u>>2&63],a+=w[u<<4&63],a+=w[64],a+=w[64]),a}}),Ar=Object.prototype.hasOwnProperty,Cr=Object.prototype.toString;var jr=new ir(\"tag:yaml.org,2002:omap\",{kind:\"sequence\",resolve:function resolveYamlOmap(s){if(null===s)return!0;var o,i,a,u,_,w=[],x=s;for(o=0,i=x.length;o>10),56320+(s-65536&1023))}function setProperty(s,o,i){\"__proto__\"===o?Object.defineProperty(s,o,{configurable:!0,enumerable:!0,writable:!0,value:i}):s[o]=i}for(var qr=new Array(256),Ur=new Array(256),Vr=0;Vr<256;Vr++)qr[Vr]=simpleEscapeSequence(Vr)?1:0,Ur[Vr]=simpleEscapeSequence(Vr);function State$1(s,o){this.input=s,this.filename=o.filename||null,this.schema=o.schema||Mr,this.onWarning=o.onWarning||null,this.legacy=o.legacy||!1,this.json=o.json||!1,this.listener=o.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=s.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function generateError(s,o){var i={name:s.filename,buffer:s.input.slice(0,-1),position:s.position,line:s.line,column:s.position-s.lineStart};return i.snippet=rr(i),new tr(o,i)}function throwError(s,o){throw generateError(s,o)}function throwWarning(s,o){s.onWarning&&s.onWarning.call(null,generateError(s,o))}var zr={YAML:function handleYamlDirective(s,o,i){var a,u,_;null!==s.version&&throwError(s,\"duplication of %YAML directive\"),1!==i.length&&throwError(s,\"YAML directive accepts exactly one argument\"),null===(a=/^([0-9]+)\\.([0-9]+)$/.exec(i[0]))&&throwError(s,\"ill-formed argument of the YAML directive\"),u=parseInt(a[1],10),_=parseInt(a[2],10),1!==u&&throwError(s,\"unacceptable YAML version of the document\"),s.version=i[0],s.checkLineBreaks=_<2,1!==_&&2!==_&&throwWarning(s,\"unsupported YAML version of the document\")},TAG:function handleTagDirective(s,o,i){var a,u;2!==i.length&&throwError(s,\"TAG directive accepts exactly two arguments\"),a=i[0],u=i[1],Br.test(a)||throwError(s,\"ill-formed tag handle (first argument) of the TAG directive\"),Rr.call(s.tagMap,a)&&throwError(s,'there is a previously declared suffix for \"'+a+'\" tag handle'),$r.test(u)||throwError(s,\"ill-formed tag prefix (second argument) of the TAG directive\");try{u=decodeURIComponent(u)}catch(o){throwError(s,\"tag prefix is malformed: \"+u)}s.tagMap[a]=u}};function captureSegment(s,o,i,a){var u,_,w,x;if(o1&&(s.result+=er.repeat(\"\\n\",o-1))}function readBlockSequence(s,o){var i,a,u=s.tag,_=s.anchor,w=[],x=!1;if(-1!==s.firstTabInLine)return!1;for(null!==s.anchor&&(s.anchorMap[s.anchor]=w),a=s.input.charCodeAt(s.position);0!==a&&(-1!==s.firstTabInLine&&(s.position=s.firstTabInLine,throwError(s,\"tab characters must not be used in indentation\")),45===a)&&is_WS_OR_EOL(s.input.charCodeAt(s.position+1));)if(x=!0,s.position++,skipSeparationSpace(s,!0,-1)&&s.lineIndent<=o)w.push(null),a=s.input.charCodeAt(s.position);else if(i=s.line,composeNode(s,o,3,!1,!0),w.push(s.result),skipSeparationSpace(s,!0,-1),a=s.input.charCodeAt(s.position),(s.line===i||s.lineIndent>o)&&0!==a)throwError(s,\"bad indentation of a sequence entry\");else if(s.lineIndento?V=1:s.lineIndent===o?V=0:s.lineIndento?V=1:s.lineIndent===o?V=0:s.lineIndento)&&(Z&&(w=s.line,x=s.lineStart,C=s.position),composeNode(s,o,4,!0,u)&&(Z?z=s.result:Y=s.result),Z||(storeMappingPair(s,$,U,V,z,Y,w,x,C),V=z=Y=null),skipSeparationSpace(s,!0,-1),j=s.input.charCodeAt(s.position)),(s.line===_||s.lineIndent>o)&&0!==j)throwError(s,\"bad indentation of a mapping entry\");else if(s.lineIndent=0))break;0===u?throwError(s,\"bad explicit indentation width of a block scalar; it cannot be less than one\"):j?throwError(s,\"repeat of an indentation width identifier\"):(L=o+u-1,j=!0)}if(is_WHITE_SPACE(_)){do{_=s.input.charCodeAt(++s.position)}while(is_WHITE_SPACE(_));if(35===_)do{_=s.input.charCodeAt(++s.position)}while(!is_EOL(_)&&0!==_)}for(;0!==_;){for(readLineBreak(s),s.lineIndent=0,_=s.input.charCodeAt(s.position);(!j||s.lineIndentL&&(L=s.lineIndent),is_EOL(_))B++;else{if(s.lineIndent0){for(u=w,_=0;u>0;u--)(w=fromHexCode(x=s.input.charCodeAt(++s.position)))>=0?_=(_<<4)+w:throwError(s,\"expected hexadecimal character\");s.result+=charFromCodepoint(_),s.position++}else throwError(s,\"unknown escape sequence\");i=a=s.position}else is_EOL(x)?(captureSegment(s,i,a,!0),writeFoldedLines(s,skipSeparationSpace(s,!1,o)),i=a=s.position):s.position===s.lineStart&&testDocumentSeparator(s)?throwError(s,\"unexpected end of the document within a double quoted scalar\"):(s.position++,a=s.position)}throwError(s,\"unexpected end of the stream within a double quoted scalar\")}(s,$)?Y=!0:!function readAlias(s){var o,i,a;if(42!==(a=s.input.charCodeAt(s.position)))return!1;for(a=s.input.charCodeAt(++s.position),o=s.position;0!==a&&!is_WS_OR_EOL(a)&&!is_FLOW_INDICATOR(a);)a=s.input.charCodeAt(++s.position);return s.position===o&&throwError(s,\"name of an alias node must contain at least one character\"),i=s.input.slice(o,s.position),Rr.call(s.anchorMap,i)||throwError(s,'unidentified alias \"'+i+'\"'),s.result=s.anchorMap[i],skipSeparationSpace(s,!0,-1),!0}(s)?function readPlainScalar(s,o,i){var a,u,_,w,x,C,j,L,B=s.kind,$=s.result;if(is_WS_OR_EOL(L=s.input.charCodeAt(s.position))||is_FLOW_INDICATOR(L)||35===L||38===L||42===L||33===L||124===L||62===L||39===L||34===L||37===L||64===L||96===L)return!1;if((63===L||45===L)&&(is_WS_OR_EOL(a=s.input.charCodeAt(s.position+1))||i&&is_FLOW_INDICATOR(a)))return!1;for(s.kind=\"scalar\",s.result=\"\",u=_=s.position,w=!1;0!==L;){if(58===L){if(is_WS_OR_EOL(a=s.input.charCodeAt(s.position+1))||i&&is_FLOW_INDICATOR(a))break}else if(35===L){if(is_WS_OR_EOL(s.input.charCodeAt(s.position-1)))break}else{if(s.position===s.lineStart&&testDocumentSeparator(s)||i&&is_FLOW_INDICATOR(L))break;if(is_EOL(L)){if(x=s.line,C=s.lineStart,j=s.lineIndent,skipSeparationSpace(s,!1,-1),s.lineIndent>=o){w=!0,L=s.input.charCodeAt(s.position);continue}s.position=_,s.line=x,s.lineStart=C,s.lineIndent=j;break}}w&&(captureSegment(s,u,_,!1),writeFoldedLines(s,s.line-x),u=_=s.position,w=!1),is_WHITE_SPACE(L)||(_=s.position+1),L=s.input.charCodeAt(++s.position)}return captureSegment(s,u,_,!1),!!s.result||(s.kind=B,s.result=$,!1)}(s,$,1===i)&&(Y=!0,null===s.tag&&(s.tag=\"?\")):(Y=!0,null===s.tag&&null===s.anchor||throwError(s,\"alias node should not have any properties\")),null!==s.anchor&&(s.anchorMap[s.anchor]=s.result)):0===V&&(Y=x&&readBlockSequence(s,U))),null===s.tag)null!==s.anchor&&(s.anchorMap[s.anchor]=s.result);else if(\"?\"===s.tag){for(null!==s.result&&\"scalar\"!==s.kind&&throwError(s,'unacceptable node kind for ! tag; it should be \"scalar\", not \"'+s.kind+'\"'),C=0,j=s.implicitTypes.length;C\"),null!==s.result&&B.kind!==s.kind&&throwError(s,\"unacceptable node kind for !<\"+s.tag+'> tag; it should be \"'+B.kind+'\", not \"'+s.kind+'\"'),B.resolve(s.result,s.tag)?(s.result=B.construct(s.result,s.tag),null!==s.anchor&&(s.anchorMap[s.anchor]=s.result)):throwError(s,\"cannot resolve a node with !<\"+s.tag+\"> explicit tag\")}return null!==s.listener&&s.listener(\"close\",s),null!==s.tag||null!==s.anchor||Y}function readDocument(s){var o,i,a,u,_=s.position,w=!1;for(s.version=null,s.checkLineBreaks=s.legacy,s.tagMap=Object.create(null),s.anchorMap=Object.create(null);0!==(u=s.input.charCodeAt(s.position))&&(skipSeparationSpace(s,!0,-1),u=s.input.charCodeAt(s.position),!(s.lineIndent>0||37!==u));){for(w=!0,u=s.input.charCodeAt(++s.position),o=s.position;0!==u&&!is_WS_OR_EOL(u);)u=s.input.charCodeAt(++s.position);for(a=[],(i=s.input.slice(o,s.position)).length<1&&throwError(s,\"directive name must not be less than one character in length\");0!==u;){for(;is_WHITE_SPACE(u);)u=s.input.charCodeAt(++s.position);if(35===u){do{u=s.input.charCodeAt(++s.position)}while(0!==u&&!is_EOL(u));break}if(is_EOL(u))break;for(o=s.position;0!==u&&!is_WS_OR_EOL(u);)u=s.input.charCodeAt(++s.position);a.push(s.input.slice(o,s.position))}0!==u&&readLineBreak(s),Rr.call(zr,i)?zr[i](s,i,a):throwWarning(s,'unknown document directive \"'+i+'\"')}skipSeparationSpace(s,!0,-1),0===s.lineIndent&&45===s.input.charCodeAt(s.position)&&45===s.input.charCodeAt(s.position+1)&&45===s.input.charCodeAt(s.position+2)?(s.position+=3,skipSeparationSpace(s,!0,-1)):w&&throwError(s,\"directives end mark is expected\"),composeNode(s,s.lineIndent-1,4,!1,!0),skipSeparationSpace(s,!0,-1),s.checkLineBreaks&&Lr.test(s.input.slice(_,s.position))&&throwWarning(s,\"non-ASCII line breaks are interpreted as content\"),s.documents.push(s.result),s.position===s.lineStart&&testDocumentSeparator(s)?46===s.input.charCodeAt(s.position)&&(s.position+=3,skipSeparationSpace(s,!0,-1)):s.position=55296&&a<=56319&&o+1=56320&&i<=57343?1024*(a-55296)+i-56320+65536:a}function needIndentIndicator(s){return/^\\n* /.test(s)}function chooseScalarStyle(s,o,i,a,u,_,w,x){var C,j=0,L=null,B=!1,$=!1,U=-1!==a,V=-1,z=function isPlainSafeFirst(s){return isPrintable(s)&&s!==Kr&&!isWhitespace(s)&&45!==s&&63!==s&&58!==s&&44!==s&&91!==s&&93!==s&&123!==s&&125!==s&&35!==s&&38!==s&&42!==s&&33!==s&&124!==s&&61!==s&&62!==s&&39!==s&&34!==s&&37!==s&&64!==s&&96!==s}(codePointAt(s,0))&&function isPlainSafeLast(s){return!isWhitespace(s)&&58!==s}(codePointAt(s,s.length-1));if(o||w)for(C=0;C=65536?C+=2:C++){if(!isPrintable(j=codePointAt(s,C)))return 5;z=z&&isPlainSafe(j,L,x),L=j}else{for(C=0;C=65536?C+=2:C++){if(10===(j=codePointAt(s,C)))B=!0,U&&($=$||C-V-1>a&&\" \"!==s[V+1],V=C);else if(!isPrintable(j))return 5;z=z&&isPlainSafe(j,L,x),L=j}$=$||U&&C-V-1>a&&\" \"!==s[V+1]}return B||$?i>9&&needIndentIndicator(s)?5:w?2===_?5:2:$?4:3:!z||w||u(s)?2===_?5:2:1}function writeScalar(s,o,i,a,u){s.dump=function(){if(0===o.length)return 2===s.quotingType?'\"\"':\"''\";if(!s.noCompatMode&&(-1!==Yr.indexOf(o)||Xr.test(o)))return 2===s.quotingType?'\"'+o+'\"':\"'\"+o+\"'\";var _=s.indent*Math.max(1,i),w=-1===s.lineWidth?-1:Math.max(Math.min(s.lineWidth,40),s.lineWidth-_),x=a||s.flowLevel>-1&&i>=s.flowLevel;switch(chooseScalarStyle(o,x,s.indent,w,(function testAmbiguity(o){return function testImplicitResolving(s,o){var i,a;for(i=0,a=s.implicitTypes.length;i\"+blockHeader(o,s.indent)+dropEndingNewline(indentString(function foldString(s,o){var i,a,u=/(\\n+)([^\\n]*)/g,_=(x=s.indexOf(\"\\n\"),x=-1!==x?x:s.length,u.lastIndex=x,foldLine(s.slice(0,x),o)),w=\"\\n\"===s[0]||\" \"===s[0];var x;for(;a=u.exec(s);){var C=a[1],j=a[2];i=\" \"===j[0],_+=C+(w||i||\"\"===j?\"\":\"\\n\")+foldLine(j,o),w=i}return _}(o,w),_));case 5:return'\"'+function escapeString(s){for(var o,i=\"\",a=0,u=0;u=65536?u+=2:u++)a=codePointAt(s,u),!(o=Gr[a])&&isPrintable(a)?(i+=s[u],a>=65536&&(i+=s[u+1])):i+=o||encodeHex(a);return i}(o)+'\"';default:throw new tr(\"impossible error: invalid scalar style\")}}()}function blockHeader(s,o){var i=needIndentIndicator(s)?String(o):\"\",a=\"\\n\"===s[s.length-1];return i+(a&&(\"\\n\"===s[s.length-2]||\"\\n\"===s)?\"+\":a?\"\":\"-\")+\"\\n\"}function dropEndingNewline(s){return\"\\n\"===s[s.length-1]?s.slice(0,-1):s}function foldLine(s,o){if(\"\"===s||\" \"===s[0])return s;for(var i,a,u=/ [^ ]/g,_=0,w=0,x=0,C=\"\";i=u.exec(s);)(x=i.index)-_>o&&(a=w>_?w:x,C+=\"\\n\"+s.slice(_,a),_=a+1),w=x;return C+=\"\\n\",s.length-_>o&&w>_?C+=s.slice(_,w)+\"\\n\"+s.slice(w+1):C+=s.slice(_),C.slice(1)}function writeBlockSequence(s,o,i,a){var u,_,w,x=\"\",C=s.tag;for(u=0,_=i.length;u<_;u+=1)w=i[u],s.replacer&&(w=s.replacer.call(i,String(u),w)),(writeNode(s,o+1,w,!0,!0,!1,!0)||void 0===w&&writeNode(s,o+1,null,!0,!0,!1,!0))&&(a&&\"\"===x||(x+=generateNextLine(s,o)),s.dump&&10===s.dump.charCodeAt(0)?x+=\"-\":x+=\"- \",x+=s.dump);s.tag=C,s.dump=x||\"[]\"}function detectType(s,o,i){var a,u,_,w,x,C;for(_=0,w=(u=i?s.explicitTypes:s.implicitTypes).length;_ tag resolver accepts not \"'+C+'\" style');a=x.represent[C](o,C)}s.dump=a}return!0}return!1}function writeNode(s,o,i,a,u,_,w){s.tag=null,s.dump=i,detectType(s,i,!1)||detectType(s,i,!0);var x,C=Jr.call(s.dump),j=a;a&&(a=s.flowLevel<0||s.flowLevel>o);var L,B,$=\"[object Object]\"===C||\"[object Array]\"===C;if($&&(B=-1!==(L=s.duplicates.indexOf(i))),(null!==s.tag&&\"?\"!==s.tag||B||2!==s.indent&&o>0)&&(u=!1),B&&s.usedDuplicates[L])s.dump=\"*ref_\"+L;else{if($&&B&&!s.usedDuplicates[L]&&(s.usedDuplicates[L]=!0),\"[object Object]\"===C)a&&0!==Object.keys(s.dump).length?(!function writeBlockMapping(s,o,i,a){var u,_,w,x,C,j,L=\"\",B=s.tag,$=Object.keys(i);if(!0===s.sortKeys)$.sort();else if(\"function\"==typeof s.sortKeys)$.sort(s.sortKeys);else if(s.sortKeys)throw new tr(\"sortKeys must be a boolean or a function\");for(u=0,_=$.length;u<_;u+=1)j=\"\",a&&\"\"===L||(j+=generateNextLine(s,o)),x=i[w=$[u]],s.replacer&&(x=s.replacer.call(i,w,x)),writeNode(s,o+1,w,!0,!0,!0)&&((C=null!==s.tag&&\"?\"!==s.tag||s.dump&&s.dump.length>1024)&&(s.dump&&10===s.dump.charCodeAt(0)?j+=\"?\":j+=\"? \"),j+=s.dump,C&&(j+=generateNextLine(s,o)),writeNode(s,o+1,x,!0,C)&&(s.dump&&10===s.dump.charCodeAt(0)?j+=\":\":j+=\": \",L+=j+=s.dump));s.tag=B,s.dump=L||\"{}\"}(s,o,s.dump,u),B&&(s.dump=\"&ref_\"+L+s.dump)):(!function writeFlowMapping(s,o,i){var a,u,_,w,x,C=\"\",j=s.tag,L=Object.keys(i);for(a=0,u=L.length;a1024&&(x+=\"? \"),x+=s.dump+(s.condenseFlow?'\"':\"\")+\":\"+(s.condenseFlow?\"\":\" \"),writeNode(s,o,w,!1,!1)&&(C+=x+=s.dump));s.tag=j,s.dump=\"{\"+C+\"}\"}(s,o,s.dump),B&&(s.dump=\"&ref_\"+L+\" \"+s.dump));else if(\"[object Array]\"===C)a&&0!==s.dump.length?(s.noArrayIndent&&!w&&o>0?writeBlockSequence(s,o-1,s.dump,u):writeBlockSequence(s,o,s.dump,u),B&&(s.dump=\"&ref_\"+L+s.dump)):(!function writeFlowSequence(s,o,i){var a,u,_,w=\"\",x=s.tag;for(a=0,u=i.length;a\",s.dump=x+\" \"+s.dump)}return!0}function getDuplicateReferences(s,o){var i,a,u=[],_=[];for(inspectNode(s,u,_),i=0,a=_.length;i()=>{},downloadConfig=s=>o=>{const{fn:{fetch:i}}=o;return i(s)},getConfigByUrl=(s,o)=>i=>{const{specActions:a,configsActions:u}=i;if(s)return u.downloadConfig(s).then(next,next);function next(u){u instanceof Error||u.status>=400?(a.updateLoadingStatus(\"failedConfig\"),a.updateLoadingStatus(\"failedConfig\"),a.updateUrl(\"\"),console.error(u.statusText+\" \"+s.url),o(null)):o(((s,o)=>{try{return fn.load(s)}catch(s){return o&&o.errActions.newThrownErr(new Error(s)),{}}})(u.text,i))}},get=(s,o)=>s.getIn(Array.isArray(o)?o:[o]),yn={[mn]:(s,o)=>s.merge((0,ze.fromJS)(o.payload)),[gn]:(s,o)=>{const i=o.payload,a=s.get(i);return s.set(i,!a)}};function configsPlugin(){return{statePlugins:{configs:{reducers:yn,actions:u,selectors:_}}}}const setHash=s=>s?history.pushState(null,null,`#${s}`):window.location.hash=\"\";var vn=__webpack_require__(86215),bn=__webpack_require__.n(vn);const _n=\"layout_scroll_to\",Sn=\"layout_clear_scroll\";const En={fn:{getScrollParent:function getScrollParent(s,o){const i=document.documentElement;let a=getComputedStyle(s);const u=\"absolute\"===a.position,_=o?/(auto|scroll|hidden)/:/(auto|scroll)/;if(\"fixed\"===a.position)return i;for(let o=s;o=o.parentElement;)if(a=getComputedStyle(o),(!u||\"static\"!==a.position)&&_.test(a.overflow+a.overflowY+a.overflowX))return o;return i}},statePlugins:{layout:{actions:{scrollToElement:(s,o)=>i=>{try{o=o||i.fn.getScrollParent(s),bn().createScroller(o).to(s)}catch(s){console.error(s)}},scrollTo:s=>({type:_n,payload:Array.isArray(s)?s:[s]}),clearScrollTo:()=>({type:Sn}),readyToScroll:(s,o)=>i=>{const a=i.layoutSelectors.getScrollToKey();We().is(a,(0,ze.fromJS)(s))&&(i.layoutActions.scrollToElement(o),i.layoutActions.clearScrollTo())},parseDeepLinkHash:s=>({layoutActions:o,layoutSelectors:i,getConfigs:a})=>{if(a().deepLinking&&s){let a=s.slice(1);\"!\"===a[0]&&(a=a.slice(1)),\"/\"===a[0]&&(a=a.slice(1));const u=a.split(\"/\").map((s=>s||\"\")),_=i.isShownKeyFromUrlHashArray(u),[w,x=\"\",C=\"\"]=_;if(\"operations\"===w){const s=i.isShownKeyFromUrlHashArray([x]);x.indexOf(\"_\")>-1&&(console.warn(\"Warning: escaping deep link whitespace with `_` will be unsupported in v4.0, use `%20` instead.\"),o.show(s.map((s=>s.replace(/_/g,\" \"))),!0)),o.show(s,!0)}(x.indexOf(\"_\")>-1||C.indexOf(\"_\")>-1)&&(console.warn(\"Warning: escaping deep link whitespace with `_` will be unsupported in v4.0, use `%20` instead.\"),o.show(_.map((s=>s.replace(/_/g,\" \"))),!0)),o.show(_,!0),o.scrollTo(_)}}},selectors:{getScrollToKey:s=>s.get(\"scrollToKey\"),isShownKeyFromUrlHashArray(s,o){const[i,a]=o;return a?[\"operations\",i,a]:i?[\"operations-tag\",i]:[]},urlHashArrayFromIsShownKey(s,o){let[i,a,u]=o;return\"operations\"==i?[a,u]:\"operations-tag\"==i?[a]:[]}},reducers:{[_n]:(s,o)=>s.set(\"scrollToKey\",We().fromJS(o.payload)),[Sn]:s=>s.delete(\"scrollToKey\")},wrapActions:{show:(s,{getConfigs:o,layoutSelectors:i})=>(...a)=>{if(s(...a),o().deepLinking)try{let[s,o]=a;s=Array.isArray(s)?s:[s];const u=i.urlHashArrayFromIsShownKey(s);if(!u.length)return;const[_,w]=u;if(!o)return setHash(\"/\");2===u.length?setHash(createDeepLinkPath(`/${encodeURIComponent(_)}/${encodeURIComponent(w)}`)):1===u.length&&setHash(createDeepLinkPath(`/${encodeURIComponent(_)}`))}catch(s){console.error(s)}}}}}};var wn=__webpack_require__(2209),xn=__webpack_require__.n(wn);const operation_wrapper=(s,o)=>class OperationWrapper extends Re.Component{onLoad=s=>{const{operation:i}=this.props,{tag:a,operationId:u}=i.toObject();let{isShownKey:_}=i.toObject();_=_||[\"operations\",a,u],o.layoutActions.readyToScroll(_,s)};render(){return Re.createElement(\"span\",{ref:this.onLoad},Re.createElement(s,this.props))}},operation_tag_wrapper=(s,o)=>class OperationTagWrapper extends Re.Component{onLoad=s=>{const{tag:i}=this.props,a=[\"operations-tag\",i];o.layoutActions.readyToScroll(a,s)};render(){return Re.createElement(\"span\",{ref:this.onLoad},Re.createElement(s,this.props))}};function deep_linking(){return[En,{statePlugins:{configs:{wrapActions:{loaded:(s,o)=>(...i)=>{s(...i);const a=decodeURIComponent(window.location.hash);o.layoutActions.parseDeepLinkHash(a)}}}},wrapComponents:{operation:operation_wrapper,OperationTag:operation_tag_wrapper}}]}var kn=__webpack_require__(40860),On=__webpack_require__.n(kn);function transform(s){return s.map((s=>{let o=\"is not of a type(s)\",i=s.get(\"message\").indexOf(o);if(i>-1){let o=s.get(\"message\").slice(i+19).split(\",\");return s.set(\"message\",s.get(\"message\").slice(0,i)+function makeNewMessage(s){return s.reduce(((s,o,i,a)=>i===a.length-1&&a.length>1?s+\"or \"+o:a[i+1]&&a.length>2?s+o+\", \":a[i+1]?s+o+\" \":s+o),\"should be a\")}(o))}return s}))}var An=__webpack_require__(58156),Cn=__webpack_require__.n(An);function parameter_oneof_transform(s,{jsSpec:o}){return s}const jn=[w,x];function transformErrors(s){let o={jsSpec:{}},i=On()(jn,((s,i)=>{try{return i.transform(s,o).filter((s=>!!s))}catch(o){return console.error(\"Transformer error:\",o),s}}),s);return i.filter((s=>!!s)).map((s=>(!s.get(\"line\")&&s.get(\"path\"),s)))}let Pn={line:0,level:\"error\",message:\"Unknown error\"};const In=Ut((s=>s),(s=>s.get(\"errors\",(0,ze.List)()))),Tn=Ut(In,(s=>s.last()));function err(o){return{statePlugins:{err:{reducers:{[rt]:(s,{payload:o})=>{let i=Object.assign(Pn,o,{type:\"thrown\"});return s.update(\"errors\",(s=>(s||(0,ze.List)()).push((0,ze.fromJS)(i)))).update(\"errors\",(s=>transformErrors(s)))},[nt]:(s,{payload:o})=>(o=o.map((s=>(0,ze.fromJS)(Object.assign(Pn,s,{type:\"thrown\"})))),s.update(\"errors\",(s=>(s||(0,ze.List)()).concat((0,ze.fromJS)(o)))).update(\"errors\",(s=>transformErrors(s)))),[st]:(s,{payload:o})=>{let i=(0,ze.fromJS)(o);return i=i.set(\"type\",\"spec\"),s.update(\"errors\",(s=>(s||(0,ze.List)()).push((0,ze.fromJS)(i)).sortBy((s=>s.get(\"line\"))))).update(\"errors\",(s=>transformErrors(s)))},[ot]:(s,{payload:o})=>(o=o.map((s=>(0,ze.fromJS)(Object.assign(Pn,s,{type:\"spec\"})))),s.update(\"errors\",(s=>(s||(0,ze.List)()).concat((0,ze.fromJS)(o)))).update(\"errors\",(s=>transformErrors(s)))),[it]:(s,{payload:o})=>{let i=(0,ze.fromJS)(Object.assign({},o));return i=i.set(\"type\",\"auth\"),s.update(\"errors\",(s=>(s||(0,ze.List)()).push((0,ze.fromJS)(i)))).update(\"errors\",(s=>transformErrors(s)))},[at]:(s,{payload:o})=>{if(!o||!s.get(\"errors\"))return s;let i=s.get(\"errors\").filter((s=>s.keySeq().every((i=>{const a=s.get(i),u=o[i];return!u||a!==u}))));return s.merge({errors:i})},[ct]:(s,{payload:o})=>{if(!o||\"function\"!=typeof o)return s;let i=s.get(\"errors\").filter((s=>o(s)));return s.merge({errors:i})}},actions:s,selectors:C}}}}function opsFilter(s,o){return s.filter(((s,i)=>-1!==i.indexOf(o)))}function filter(){return{fn:{opsFilter}}}var Nn=__webpack_require__(7666),Mn=__webpack_require__.n(Nn);const arrow_up=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M 17.418 14.908 C 17.69 15.176 18.127 15.176 18.397 14.908 C 18.667 14.64 18.668 14.207 18.397 13.939 L 10.489 6.109 C 10.219 5.841 9.782 5.841 9.51 6.109 L 1.602 13.939 C 1.332 14.207 1.332 14.64 1.602 14.908 C 1.873 15.176 2.311 15.176 2.581 14.908 L 10 7.767 L 17.418 14.908 Z\"})),arrow_down=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M17.418 6.109c.272-.268.709-.268.979 0s.271.701 0 .969l-7.908 7.83c-.27.268-.707.268-.979 0l-7.908-7.83c-.27-.268-.27-.701 0-.969.271-.268.709-.268.979 0L10 13.25l7.418-7.141z\"})),arrow=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M13.25 10L6.109 2.58c-.268-.27-.268-.707 0-.979.268-.27.701-.27.969 0l7.83 7.908c.268.271.268.709 0 .979l-7.83 7.908c-.268.271-.701.27-.969 0-.268-.269-.268-.707 0-.979L13.25 10z\"})),components_close=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M14.348 14.849c-.469.469-1.229.469-1.697 0L10 11.819l-2.651 3.029c-.469.469-1.229.469-1.697 0-.469-.469-.469-1.229 0-1.697l2.758-3.15-2.759-3.152c-.469-.469-.469-1.228 0-1.697.469-.469 1.228-.469 1.697 0L10 8.183l2.651-3.031c.469-.469 1.228-.469 1.697 0 .469.469.469 1.229 0 1.697l-2.758 3.152 2.758 3.15c.469.469.469 1.229 0 1.698z\"})),copy=({className:s=null,width:o=15,height:i=16,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 15 16\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"g\",{transform:\"translate(2, -1)\"},Re.createElement(\"path\",{fill:\"#ffffff\",fillRule:\"evenodd\",d:\"M2 13h4v1H2v-1zm5-6H2v1h5V7zm2 3V8l-3 3 3 3v-2h5v-2H9zM4.5 9H2v1h2.5V9zM2 12h2.5v-1H2v1zm9 1h1v2c-.02.28-.11.52-.3.7-.19.18-.42.28-.7.3H1c-.55 0-1-.45-1-1V4c0-.55.45-1 1-1h3c0-1.11.89-2 2-2 1.11 0 2 .89 2 2h3c.55 0 1 .45 1 1v5h-1V6H1v9h10v-2zM2 5h8c0-.55-.45-1-1-1H8c-.55 0-1-.45-1-1s-.45-1-1-1-1 .45-1 1-.45 1-1 1H3c-.55 0-1 .45-1 1z\"}))),lock=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M15.8 8H14V5.6C14 2.703 12.665 1 10 1 7.334 1 6 2.703 6 5.6V8H4c-.553 0-1 .646-1 1.199V17c0 .549.428 1.139.951 1.307l1.197.387C5.672 18.861 6.55 19 7.1 19h5.8c.549 0 1.428-.139 1.951-.307l1.196-.387c.524-.167.953-.757.953-1.306V9.199C17 8.646 16.352 8 15.8 8zM12 8H8V5.199C8 3.754 8.797 3 10 3c1.203 0 2 .754 2 2.199V8z\"})),unlock=({className:s=null,width:o=20,height:i=20,...a})=>Re.createElement(\"svg\",Mn()({xmlns:\"http://www.w3.org/2000/svg\",viewBox:\"0 0 20 20\",className:s,width:o,height:i,\"aria-hidden\":\"true\",focusable:\"false\"},a),Re.createElement(\"path\",{d:\"M15.8 8H14V5.6C14 2.703 12.665 1 10 1 7.334 1 6 2.703 6 5.6V6h2v-.801C8 3.754 8.797 3 10 3c1.203 0 2 .754 2 2.199V8H4c-.553 0-1 .646-1 1.199V17c0 .549.428 1.139.951 1.307l1.197.387C5.672 18.861 6.55 19 7.1 19h5.8c.549 0 1.428-.139 1.951-.307l1.196-.387c.524-.167.953-.757.953-1.306V9.199C17 8.646 16.352 8 15.8 8z\"})),icons=()=>({components:{ArrowUpIcon:arrow_up,ArrowDownIcon:arrow_down,ArrowIcon:arrow,CloseIcon:components_close,CopyIcon:copy,LockIcon:lock,UnlockIcon:unlock}}),Rn=\"layout_update_layout\",Dn=\"layout_update_filter\",Ln=\"layout_update_mode\",Fn=\"layout_show\";function updateLayout(s){return{type:Rn,payload:s}}function updateFilter(s){return{type:Dn,payload:s}}function actions_show(s,o=!0){return s=normalizeArray(s),{type:Fn,payload:{thing:s,shown:o}}}function changeMode(s,o=\"\"){return s=normalizeArray(s),{type:Ln,payload:{thing:s,mode:o}}}const Bn={[Rn]:(s,o)=>s.set(\"layout\",o.payload),[Dn]:(s,o)=>s.set(\"filter\",o.payload),[Fn]:(s,o)=>{const i=o.payload.shown,a=(0,ze.fromJS)(o.payload.thing);return s.update(\"shown\",(0,ze.fromJS)({}),(s=>s.set(a,i)))},[Ln]:(s,o)=>{let i=o.payload.thing,a=o.payload.mode;return s.setIn([\"modes\"].concat(i),(a||\"\")+\"\")}},current=s=>s.get(\"layout\"),currentFilter=s=>s.get(\"filter\"),isShown=(s,o,i)=>(o=normalizeArray(o),s.get(\"shown\",(0,ze.fromJS)({})).get((0,ze.fromJS)(o),i)),whatMode=(s,o,i=\"\")=>(o=normalizeArray(o),s.getIn([\"modes\",...o],i)),$n=Ut((s=>s),(s=>!isShown(s,\"editor\"))),taggedOperations=(s,o)=>(i,...a)=>{let u=s(i,...a);const{fn:_,layoutSelectors:w,getConfigs:x}=o.getSystem(),C=x(),{maxDisplayedTags:j}=C;let L=w.currentFilter();return L&&!0!==L&&(u=_.opsFilter(u,L)),j>=0&&(u=u.slice(0,j)),u};function plugins_layout(){return{statePlugins:{layout:{reducers:Bn,actions:j,selectors:L},spec:{wrapSelectors:B}}}}function logs({configs:s}){const o={debug:0,info:1,log:2,warn:3,error:4},getLevel=s=>o[s]||-1;let{logLevel:i}=s,a=getLevel(i);function log(s,...o){getLevel(s)>=a&&console[s](...o)}return log.warn=log.bind(null,\"warn\"),log.error=log.bind(null,\"error\"),log.info=log.bind(null,\"info\"),log.debug=log.bind(null,\"debug\"),{rootInjects:{log}}}let qn=!1;function on_complete(){return{statePlugins:{spec:{wrapActions:{updateSpec:s=>(...o)=>(qn=!0,s(...o)),updateJsonSpec:(s,o)=>(...i)=>{const a=o.getConfigs().onComplete;return qn&&\"function\"==typeof a&&(setTimeout(a,0),qn=!1),s(...i)}}}}}}const extractKey=s=>{const o=\"_**[]\";return s.indexOf(o)<0?s:s.split(o)[0].trim()},escapeShell=s=>\"-d \"===s||/^[_\\/-]/g.test(s)?s:\"'\"+s.replace(/'/g,\"'\\\\''\")+\"'\",escapeCMD=s=>\"-d \"===(s=s.replace(/\\^/g,\"^^\").replace(/\\\\\"/g,'\\\\\\\\\"').replace(/\"/g,'\"\"').replace(/\\n/g,\"^\\n\"))?s.replace(/-d /g,\"-d ^\\n\"):/^[_\\/-]/g.test(s)?s:'\"'+s+'\"',escapePowershell=s=>{if(\"-d \"===s)return s;if(/\\n/.test(s)){return`@\"\\n${s.replace(/`/g,\"``\").replace(/\\$/g,\"`$\")}\\n\"@`}if(!/^[_\\/-]/.test(s)){return`'${s.replace(/'/g,\"''\")}'`}return s};const curlify=(s,o,i,a=\"\")=>{let u=!1,_=\"\";const addWords=(...s)=>_+=\" \"+s.map(o).join(\" \"),addWordsWithoutLeadingSpace=(...s)=>_+=s.map(o).join(\" \"),addNewLine=()=>_+=` ${i}`,addIndent=(s=1)=>_+=\" \".repeat(s);let w=s.get(\"headers\");_+=\"curl\"+a;const x=s.get(\"curlOptions\");if(ze.List.isList(x)&&!x.isEmpty()&&addWords(...s.get(\"curlOptions\")),addWords(\"-X\",s.get(\"method\")),addNewLine(),addIndent(),addWordsWithoutLeadingSpace(`${s.get(\"url\")}`),w&&w.size)for(let o of s.get(\"headers\").entries()){addNewLine(),addIndent();let[s,i]=o;addWordsWithoutLeadingSpace(\"-H\",`${s}: ${i}`),u=u||/^content-type$/i.test(s)&&/^multipart\\/form-data$/i.test(i)}const C=s.get(\"body\");if(C)if(u&&[\"POST\",\"PUT\",\"PATCH\"].includes(s.get(\"method\")))for(let[s,o]of C.entrySeq()){let i=extractKey(s);addNewLine(),addIndent(),addWordsWithoutLeadingSpace(\"-F\"),o instanceof lt.File&&\"string\"==typeof o.valueOf()?addWords(`${i}=${o.data}${o.type?`;type=${o.type}`:\"\"}`):o instanceof lt.File?addWords(`${i}=@${o.name}${o.type?`;type=${o.type}`:\"\"}`):addWords(`${i}=${o}`)}else if(C instanceof lt.File)addNewLine(),addIndent(),addWordsWithoutLeadingSpace(`--data-binary '@${C.name}'`);else{addNewLine(),addIndent(),addWordsWithoutLeadingSpace(\"-d \");let o=C;ze.Map.isMap(o)?addWordsWithoutLeadingSpace(function getStringBodyOfMap(s){let o=[];for(let[i,a]of s.get(\"body\").entrySeq()){let s=extractKey(i);a instanceof lt.File?o.push(` \"${s}\": {\\n \"name\": \"${a.name}\"${a.type?`,\\n \"type\": \"${a.type}\"`:\"\"}\\n }`):o.push(` \"${s}\": ${JSON.stringify(a,null,2).replace(/(\\r\\n|\\r|\\n)/g,\"\\n \")}`)}return`{\\n${o.join(\",\\n\")}\\n}`}(s)):(\"string\"!=typeof o&&(o=JSON.stringify(o)),addWordsWithoutLeadingSpace(o))}else C||\"POST\"!==s.get(\"method\")||(addNewLine(),addIndent(),addWordsWithoutLeadingSpace(\"-d ''\"));return _},requestSnippetGenerator_curl_powershell=s=>curlify(s,escapePowershell,\"`\\n\",\".exe\"),requestSnippetGenerator_curl_bash=s=>curlify(s,escapeShell,\"\\\\\\n\"),requestSnippetGenerator_curl_cmd=s=>curlify(s,escapeCMD,\"^\\n\"),request_snippets_selectors_state=s=>s||(0,ze.Map)(),Un=Ut(request_snippets_selectors_state,(s=>{const o=s.get(\"languages\"),i=s.get(\"generators\",(0,ze.Map)());return!o||o.isEmpty()?i:i.filter(((s,i)=>o.includes(i)))})),getSnippetGenerators=s=>({fn:o})=>Un(s).map(((s,i)=>{const a=(s=>o[`requestSnippetGenerator_${s}`])(i);return\"function\"!=typeof a?null:s.set(\"fn\",a)})).filter((s=>s)),Vn=Ut(request_snippets_selectors_state,(s=>s.get(\"activeLanguage\"))),zn=Ut(request_snippets_selectors_state,(s=>s.get(\"defaultExpanded\")));var Wn=__webpack_require__(46942),Jn=__webpack_require__.n(Wn),Hn=__webpack_require__(59399);const Kn={cursor:\"pointer\",lineHeight:1,display:\"inline-flex\",backgroundColor:\"rgb(250, 250, 250)\",paddingBottom:\"0\",paddingTop:\"0\",border:\"1px solid rgb(51, 51, 51)\",borderRadius:\"4px 4px 0 0\",boxShadow:\"none\",borderBottom:\"none\"},Gn={cursor:\"pointer\",lineHeight:1,display:\"inline-flex\",backgroundColor:\"rgb(51, 51, 51)\",boxShadow:\"none\",border:\"1px solid rgb(51, 51, 51)\",paddingBottom:\"0\",paddingTop:\"0\",borderRadius:\"4px 4px 0 0\",marginTop:\"-5px\",marginRight:\"-5px\",marginLeft:\"-5px\",zIndex:\"9999\",borderBottom:\"none\"},request_snippets=({request:s,requestSnippetsSelectors:o,getComponent:i})=>{const a=(0,Re.useRef)(null),u=i(\"ArrowUpIcon\"),_=i(\"ArrowDownIcon\"),w=i(\"SyntaxHighlighter\",!0),[x,C]=(0,Re.useState)(o.getSnippetGenerators()?.keySeq().first()),[j,L]=(0,Re.useState)(o?.getDefaultExpanded()),B=o.getSnippetGenerators(),$=B.get(x),U=$.get(\"fn\")(s),handleSetIsExpanded=()=>{L(!j)},handleGetBtnStyle=s=>s===x?Gn:Kn,handlePreventYScrollingBeyondElement=s=>{const{target:o,deltaY:i}=s,{scrollHeight:a,offsetHeight:u,scrollTop:_}=o;a>u&&(0===_&&i<0||u+_>=a&&i>0)&&s.preventDefault()};return(0,Re.useEffect)((()=>{}),[]),(0,Re.useEffect)((()=>{const s=Array.from(a.current.childNodes).filter((s=>!!s.nodeType&&s.classList?.contains(\"curl-command\")));return s.forEach((s=>s.addEventListener(\"mousewheel\",handlePreventYScrollingBeyondElement,{passive:!1}))),()=>{s.forEach((s=>s.removeEventListener(\"mousewheel\",handlePreventYScrollingBeyondElement)))}}),[s]),Re.createElement(\"div\",{className:\"request-snippets\",ref:a},Re.createElement(\"div\",{style:{width:\"100%\",display:\"flex\",justifyContent:\"flex-start\",alignItems:\"center\",marginBottom:\"15px\"}},Re.createElement(\"h4\",{onClick:()=>handleSetIsExpanded(),style:{cursor:\"pointer\"}},\"Snippets\"),Re.createElement(\"button\",{onClick:()=>handleSetIsExpanded(),style:{border:\"none\",background:\"none\"},title:j?\"Collapse operation\":\"Expand operation\"},j?Re.createElement(_,{className:\"arrow\",width:\"10\",height:\"10\"}):Re.createElement(u,{className:\"arrow\",width:\"10\",height:\"10\"}))),j&&Re.createElement(\"div\",{className:\"curl-command\"},Re.createElement(\"div\",{style:{paddingLeft:\"15px\",paddingRight:\"10px\",width:\"100%\",display:\"flex\"}},B.entrySeq().map((([s,o])=>Re.createElement(\"div\",{className:Jn()(\"btn\",{active:s===x}),style:handleGetBtnStyle(s),key:s,onClick:()=>(s=>{x!==s&&C(s)})(s)},Re.createElement(\"h4\",{style:s===x?{color:\"white\"}:{}},o.get(\"title\")))))),Re.createElement(\"div\",{className:\"copy-to-clipboard\"},Re.createElement(Hn.CopyToClipboard,{text:U},Re.createElement(\"button\",null))),Re.createElement(\"div\",null,Re.createElement(w,{language:$.get(\"syntax\"),className:\"curl microlight\",renderPlainText:({children:s,PlainTextViewer:o})=>Re.createElement(o,{className:\"curl\"},s)},U))))},plugins_request_snippets=()=>({components:{RequestSnippets:request_snippets},fn:{requestSnippetGenerator_curl_bash,requestSnippetGenerator_curl_cmd,requestSnippetGenerator_curl_powershell},statePlugins:{requestSnippets:{selectors:$}}});class ModelCollapse extends Re.Component{static defaultProps={collapsedContent:\"{...}\",expanded:!1,title:null,onToggle:()=>{},hideSelfOnExpand:!1,specPath:We().List([])};constructor(s,o){super(s,o);let{expanded:i,collapsedContent:a}=this.props;this.state={expanded:i,collapsedContent:a||ModelCollapse.defaultProps.collapsedContent}}componentDidMount(){const{hideSelfOnExpand:s,expanded:o,modelName:i}=this.props;s&&o&&this.props.onToggle(i,o)}UNSAFE_componentWillReceiveProps(s){this.props.expanded!==s.expanded&&this.setState({expanded:s.expanded})}toggleCollapsed=()=>{this.props.onToggle&&this.props.onToggle(this.props.modelName,!this.state.expanded),this.setState({expanded:!this.state.expanded})};onLoad=s=>{if(s&&this.props.layoutSelectors){const o=this.props.layoutSelectors.getScrollToKey();We().is(o,this.props.specPath)&&this.toggleCollapsed(),this.props.layoutActions.readyToScroll(this.props.specPath,s.parentElement)}};render(){const{title:s,classes:o}=this.props;return this.state.expanded&&this.props.hideSelfOnExpand?Re.createElement(\"span\",{className:o||\"\"},this.props.children):Re.createElement(\"span\",{className:o||\"\",ref:this.onLoad},Re.createElement(\"button\",{\"aria-expanded\":this.state.expanded,className:\"model-box-control\",onClick:this.toggleCollapsed},s&&Re.createElement(\"span\",{className:\"pointer\"},s),Re.createElement(\"span\",{className:\"model-toggle\"+(this.state.expanded?\"\":\" collapsed\")}),!this.state.expanded&&Re.createElement(\"span\",null,this.state.collapsedContent)),this.state.expanded&&this.props.children)}}const useTabs=({initialTab:s,isExecute:o,schema:i,example:a})=>{const u=(0,Re.useMemo)((()=>({example:\"example\",model:\"model\"})),[]),_=(0,Re.useMemo)((()=>Object.keys(u)),[u]).includes(s)&&i&&!o?s:u.example,w=(s=>{const o=(0,Re.useRef)();return(0,Re.useEffect)((()=>{o.current=s})),o.current})(o),[x,C]=(0,Re.useState)(_),j=(0,Re.useCallback)((s=>{C(s.target.dataset.name)}),[]);return(0,Re.useEffect)((()=>{w&&!o&&a&&C(u.example)}),[w,o,a]),{activeTab:x,onTabChange:j,tabs:u}},model_example=({schema:s,example:o,isExecute:i=!1,specPath:a,includeWriteOnly:u=!1,includeReadOnly:_=!1,getComponent:w,getConfigs:x,specSelectors:C})=>{const{defaultModelRendering:j,defaultModelExpandDepth:L}=x(),B=w(\"ModelWrapper\"),$=w(\"HighlightCode\",!0),U=xt()(5).toString(\"base64\"),V=xt()(5).toString(\"base64\"),z=xt()(5).toString(\"base64\"),Y=xt()(5).toString(\"base64\"),Z=C.isOAS3(),{activeTab:ee,tabs:ie,onTabChange:ae}=useTabs({initialTab:j,isExecute:i,schema:s,example:o});return Re.createElement(\"div\",{className:\"model-example\"},Re.createElement(\"ul\",{className:\"tab\",role:\"tablist\"},Re.createElement(\"li\",{className:Jn()(\"tabitem\",{active:ee===ie.example}),role:\"presentation\"},Re.createElement(\"button\",{\"aria-controls\":V,\"aria-selected\":ee===ie.example,className:\"tablinks\",\"data-name\":\"example\",id:U,onClick:ae,role:\"tab\"},i?\"Edit Value\":\"Example Value\")),s&&Re.createElement(\"li\",{className:Jn()(\"tabitem\",{active:ee===ie.model}),role:\"presentation\"},Re.createElement(\"button\",{\"aria-controls\":Y,\"aria-selected\":ee===ie.model,className:Jn()(\"tablinks\",{inactive:i}),\"data-name\":\"model\",id:z,onClick:ae,role:\"tab\"},Z?\"Schema\":\"Model\"))),ee===ie.example&&Re.createElement(\"div\",{\"aria-hidden\":ee!==ie.example,\"aria-labelledby\":U,\"data-name\":\"examplePanel\",id:V,role:\"tabpanel\",tabIndex:\"0\"},o||Re.createElement($,null,\"(no example available\")),ee===ie.model&&Re.createElement(\"div\",{className:\"model-container\",\"aria-hidden\":ee===ie.example,\"aria-labelledby\":z,\"data-name\":\"modelPanel\",id:Y,role:\"tabpanel\",tabIndex:\"0\"},Re.createElement(B,{schema:s,getComponent:w,getConfigs:x,specSelectors:C,expandDepth:L,specPath:a,includeReadOnly:_,includeWriteOnly:u})))};class ModelWrapper extends Re.Component{onToggle=(s,o)=>{this.props.layoutActions&&this.props.layoutActions.show(this.props.fullPath,o)};render(){let{getComponent:s,getConfigs:o}=this.props;const i=s(\"Model\");let a;return this.props.layoutSelectors&&(a=this.props.layoutSelectors.isShown(this.props.fullPath)),Re.createElement(\"div\",{className:\"model-box\"},Re.createElement(i,Mn()({},this.props,{getConfigs:o,expanded:a,depth:1,onToggle:this.onToggle,expandDepth:this.props.expandDepth||0})))}}function _typeof(s){return _typeof=\"function\"==typeof Symbol&&\"symbol\"==typeof Symbol.iterator?function(s){return typeof s}:function(s){return s&&\"function\"==typeof Symbol&&s.constructor===Symbol&&s!==Symbol.prototype?\"symbol\":typeof s},_typeof(s)}function _defineProperties(s,o){for(var i=0;i1&&void 0!==arguments[1]?arguments[1]:{},i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},a=function createChecker(s,o){return function(i){if(\"string\"==typeof i)return(0,ze.is)(o[i],s[i]);if(Array.isArray(i))return(0,ze.is)(getIn(o,i),getIn(s,i));throw new TypeError(\"Invalid key: expected Array or string: \"+i)}}(o,i),u=s||Object.keys(function _objectSpread2(s){for(var o=1;o1&&void 0!==arguments[1]?arguments[1]:{};return!check(this.updateOnProps,this.props,s,\"updateOnProps\")||!check(this.updateOnStates,this.state,o,\"updateOnStates\")}}]),ImmutablePureComponent}(Re.Component);var Qn,Zn=__webpack_require__(5556),es=__webpack_require__.n(Zn);function _extends(){return _extends=Object.assign?Object.assign.bind():function(s){for(var o=1;oRe.createElement(\"svg\",_extends({xmlns:\"http://www.w3.org/2000/svg\",width:200,height:200,className:\"rolling-load_svg__lds-rolling\",preserveAspectRatio:\"xMidYMid\",style:{backgroundImage:\"none\",backgroundPosition:\"initial initial\",backgroundRepeat:\"initial initial\"},viewBox:\"0 0 100 100\"},s),Qn||(Qn=Re.createElement(\"circle\",{cx:50,cy:50,r:35,fill:\"none\",stroke:\"#555\",strokeDasharray:\"164.93361431346415 56.97787143782138\",strokeWidth:10},Re.createElement(\"animateTransform\",{attributeName:\"transform\",begin:\"0s\",calcMode:\"linear\",dur:\"1s\",keyTimes:\"0;1\",repeatCount:\"indefinite\",type:\"rotate\",values:\"0 50 50;360 50 50\"})))),decodeRefName=s=>{const o=s.replace(/~1/g,\"/\").replace(/~0/g,\"~\");try{return decodeURIComponent(o)}catch{return o}};class Model extends Xn{static propTypes={schema:xn().map.isRequired,getComponent:es().func.isRequired,getConfigs:es().func.isRequired,specSelectors:es().object.isRequired,name:es().string,displayName:es().string,isRef:es().bool,required:es().bool,expandDepth:es().number,depth:es().number,specPath:xn().list.isRequired,includeReadOnly:es().bool,includeWriteOnly:es().bool};getModelName=s=>-1!==s.indexOf(\"#/definitions/\")?decodeRefName(s.replace(/^.*#\\/definitions\\//,\"\")):-1!==s.indexOf(\"#/components/schemas/\")?decodeRefName(s.replace(/^.*#\\/components\\/schemas\\//,\"\")):void 0;getRefSchema=s=>{let{specSelectors:o}=this.props;return o.findDefinition(s)};render(){let{getComponent:s,getConfigs:o,specSelectors:i,schema:a,required:u,name:_,isRef:w,specPath:x,displayName:C,includeReadOnly:j,includeWriteOnly:L}=this.props;const B=s(\"ObjectModel\"),$=s(\"ArrayModel\"),U=s(\"PrimitiveModel\");let V=\"object\",z=a&&a.get(\"$$ref\"),Y=a&&a.get(\"$ref\");if(!_&&z&&(_=this.getModelName(z)),Y){const s=this.getModelName(Y),o=this.getRefSchema(s);ze.Map.isMap(o)?(a=o.mergeDeep(a),z||(a=a.set(\"$$ref\",Y),z=Y)):ze.Map.isMap(a)&&1===a.size&&(a=null,_=Y)}if(!a)return Re.createElement(\"span\",{className:\"model model-title\"},Re.createElement(\"span\",{className:\"model-title__text\"},C||_),!Y&&Re.createElement(rolling_load,{height:\"20px\",width:\"20px\"}));const Z=i.isOAS3()&&a.get(\"deprecated\");switch(w=void 0!==w?w:!!z,V=a&&a.get(\"type\")||V,V){case\"object\":return Re.createElement(B,Mn()({className:\"object\"},this.props,{specPath:x,getConfigs:o,schema:a,name:_,deprecated:Z,isRef:w,includeReadOnly:j,includeWriteOnly:L}));case\"array\":return Re.createElement($,Mn()({className:\"array\"},this.props,{getConfigs:o,schema:a,name:_,deprecated:Z,required:u,includeReadOnly:j,includeWriteOnly:L}));default:return Re.createElement(U,Mn()({},this.props,{getComponent:s,getConfigs:o,schema:a,name:_,deprecated:Z,required:u}))}}}class Models extends Re.Component{getSchemaBasePath=()=>this.props.specSelectors.isOAS3()?[\"components\",\"schemas\"]:[\"definitions\"];getCollapsedContent=()=>\" \";handleToggle=(s,o)=>{const{layoutActions:i}=this.props;i.show([...this.getSchemaBasePath(),s],o),o&&this.props.specActions.requestResolvedSubtree([...this.getSchemaBasePath(),s])};onLoadModels=s=>{s&&this.props.layoutActions.readyToScroll(this.getSchemaBasePath(),s)};onLoadModel=s=>{if(s){const o=s.getAttribute(\"data-name\");this.props.layoutActions.readyToScroll([...this.getSchemaBasePath(),o],s)}};render(){let{specSelectors:s,getComponent:o,layoutSelectors:i,layoutActions:a,getConfigs:u}=this.props,_=s.definitions(),{docExpansion:w,defaultModelsExpandDepth:x}=u();if(!_.size||x<0)return null;const C=this.getSchemaBasePath();let j=i.isShown(C,x>0&&\"none\"!==w);const L=s.isOAS3(),B=o(\"ModelWrapper\"),$=o(\"Collapse\"),U=o(\"ModelCollapse\"),V=o(\"JumpToPath\",!0),z=o(\"ArrowUpIcon\"),Y=o(\"ArrowDownIcon\");return Re.createElement(\"section\",{className:j?\"models is-open\":\"models\",ref:this.onLoadModels},Re.createElement(\"h4\",null,Re.createElement(\"button\",{\"aria-expanded\":j,className:\"models-control\",onClick:()=>a.show(C,!j)},Re.createElement(\"span\",null,L?\"Schemas\":\"Models\"),j?Re.createElement(z,null):Re.createElement(Y,null))),Re.createElement($,{isOpened:j},_.entrySeq().map((([_])=>{const w=[...C,_],j=We().List(w),L=s.specResolvedSubtree(w),$=s.specJson().getIn(w),z=ze.Map.isMap(L)?L:We().Map(),Y=ze.Map.isMap($)?$:We().Map(),Z=z.get(\"title\")||Y.get(\"title\")||_,ee=i.isShown(w,!1);ee&&0===z.size&&Y.size>0&&this.props.specActions.requestResolvedSubtree(w);const ie=Re.createElement(B,{name:_,expandDepth:x,schema:z||We().Map(),displayName:Z,fullPath:w,specPath:j,getComponent:o,specSelectors:s,getConfigs:u,layoutSelectors:i,layoutActions:a,includeReadOnly:!0,includeWriteOnly:!0}),ae=Re.createElement(\"span\",{className:\"model-box\"},Re.createElement(\"span\",{className:\"model model-title\"},Z));return Re.createElement(\"div\",{id:`model-${_}`,className:\"model-container\",key:`models-section-${_}`,\"data-name\":_,ref:this.onLoadModel},Re.createElement(\"span\",{className:\"models-jump-to-path\"},Re.createElement(V,{path:j})),Re.createElement(U,{classes:\"model-box\",collapsedContent:this.getCollapsedContent(_),onToggle:this.handleToggle,title:ae,displayName:Z,modelName:_,specPath:j,layoutSelectors:i,layoutActions:a,hideSelfOnExpand:!0,expanded:x>0&&ee},ie))})).toArray()))}}const enum_model=({value:s,getComponent:o})=>{let i=o(\"ModelCollapse\"),a=Re.createElement(\"span\",null,\"Array [ \",s.count(),\" ]\");return Re.createElement(\"span\",{className:\"prop-enum\"},\"Enum:\",Re.createElement(\"br\",null),Re.createElement(i,{collapsedContent:a},\"[ \",s.map(String).join(\", \"),\" ]\"))};function isAbsoluteUrl(s){return s.match(/^(?:[a-z]+:)?\\/\\//i)}function buildBaseUrl(s,o){return s?isAbsoluteUrl(s)?function addProtocol(s){return s.match(/^\\/\\//i)?`${window.location.protocol}${s}`:s}(s):new URL(s,o).href:o}function safeBuildUrl(s,o,{selectedServer:i=\"\"}={}){try{return function buildUrl(s,o,{selectedServer:i=\"\"}={}){if(!s)return;if(isAbsoluteUrl(s))return s;const a=buildBaseUrl(i,o);return isAbsoluteUrl(a)?new URL(s,a).href:new URL(s,window.location.href).href}(s,o,{selectedServer:i})}catch{return}}function sanitizeUrl(s){if(\"string\"!=typeof s||\"\"===s.trim())return\"\";const o=s.trim(),i=\"about:blank\";try{const s=`https://base${String(Math.random()).slice(2)}`,a=new URL(o,s),u=a.protocol.slice(0,-1);if([\"javascript\",\"data\",\"vbscript\"].includes(u.toLowerCase()))return i;if(a.origin===s){if(o.startsWith(\"/\"))return`${a.pathname}${a.search}${a.hash}`;if(o.startsWith(\"./\")||o.startsWith(\"../\")){const s=o.match(/^(\\.\\.?\\/)+/)[0];return`${s}${a.pathname.substring(1)}${a.search}${a.hash}`}return`${a.pathname.substring(1)}${a.search}${a.hash}`}return String(a)}catch{return i}}class ObjectModel extends Re.Component{render(){let{schema:s,name:o,displayName:i,isRef:a,getComponent:u,getConfigs:_,depth:w,onToggle:x,expanded:C,specPath:j,...L}=this.props,{specSelectors:B,expandDepth:$,includeReadOnly:U,includeWriteOnly:V}=L;const{isOAS3:z}=B,Y=w>2||2===w&&\"items\"!==j.last();if(!s)return null;const{showExtensions:Z}=_(),ee=Z?getExtensions(s):(0,ze.List)();let ie=s.get(\"description\"),ae=s.get(\"properties\"),ce=s.get(\"additionalProperties\"),le=s.get(\"title\")||i||o,pe=s.get(\"required\"),de=s.filter(((s,o)=>-1!==[\"maxProperties\",\"minProperties\",\"nullable\",\"example\"].indexOf(o))),fe=s.get(\"deprecated\"),ye=s.getIn([\"externalDocs\",\"url\"]),be=s.getIn([\"externalDocs\",\"description\"]);const _e=u(\"JumpToPath\",!0),Se=u(\"Markdown\",!0),we=u(\"Model\"),xe=u(\"ModelCollapse\"),Pe=u(\"Property\"),Te=u(\"Link\"),$e=u(\"ModelExtensions\"),JumpToPathSection=()=>Re.createElement(\"span\",{className:\"model-jump-to-path\"},Re.createElement(_e,{path:j})),qe=Re.createElement(\"span\",null,Re.createElement(\"span\",null,\"{\"),\"...\",Re.createElement(\"span\",null,\"}\"),a?Re.createElement(JumpToPathSection,null):\"\"),We=B.isOAS3()?s.get(\"allOf\"):null,He=B.isOAS3()?s.get(\"anyOf\"):null,Ye=B.isOAS3()?s.get(\"oneOf\"):null,Xe=B.isOAS3()?s.get(\"not\"):null,Qe=le&&Re.createElement(\"span\",{className:\"model-title\"},a&&s.get(\"$$ref\")&&Re.createElement(\"span\",{className:Jn()(\"model-hint\",{\"model-hint--embedded\":Y})},s.get(\"$$ref\")),Re.createElement(\"span\",{className:\"model-title__text\"},le));return Re.createElement(\"span\",{className:\"model\"},Re.createElement(xe,{modelName:o,title:Qe,onToggle:x,expanded:!!C||w<=$,collapsedContent:qe},Re.createElement(\"span\",{className:\"brace-open object\"},\"{\"),a?Re.createElement(JumpToPathSection,null):null,Re.createElement(\"span\",{className:\"inner-object\"},Re.createElement(\"table\",{className:\"model\"},Re.createElement(\"tbody\",null,ie?Re.createElement(\"tr\",{className:\"description\"},Re.createElement(\"td\",null,\"description:\"),Re.createElement(\"td\",null,Re.createElement(Se,{source:ie}))):null,ye&&Re.createElement(\"tr\",{className:\"external-docs\"},Re.createElement(\"td\",null,\"externalDocs:\"),Re.createElement(\"td\",null,Re.createElement(Te,{target:\"_blank\",href:sanitizeUrl(ye)},be||ye))),fe?Re.createElement(\"tr\",{className:\"property\"},Re.createElement(\"td\",null,\"deprecated:\"),Re.createElement(\"td\",null,\"true\")):null,ae&&ae.size?ae.entrySeq().filter((([,s])=>(!s.get(\"readOnly\")||U)&&(!s.get(\"writeOnly\")||V))).map((([s,i])=>{let a=z()&&i.get(\"deprecated\"),x=ze.List.isList(pe)&&pe.contains(s),C=[\"property-row\"];return a&&C.push(\"deprecated\"),x&&C.push(\"required\"),Re.createElement(\"tr\",{key:s,className:C.join(\" \")},Re.createElement(\"td\",null,s,x&&Re.createElement(\"span\",{className:\"star\"},\"*\")),Re.createElement(\"td\",null,Re.createElement(we,Mn()({key:`object-${o}-${s}_${i}`},L,{required:x,getComponent:u,specPath:j.push(\"properties\",s),getConfigs:_,schema:i,depth:w+1}))))})).toArray():null,0===ee.size?null:Re.createElement(Re.Fragment,null,Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\" \")),Re.createElement($e,{extensions:ee,propClass:\"extension\"})),ce&&ce.size?Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\"< * >:\"),Re.createElement(\"td\",null,Re.createElement(we,Mn()({},L,{required:!1,getComponent:u,specPath:j.push(\"additionalProperties\"),getConfigs:_,schema:ce,depth:w+1})))):null,We?Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\"allOf ->\"),Re.createElement(\"td\",null,We.map(((s,o)=>Re.createElement(\"div\",{key:o},Re.createElement(we,Mn()({},L,{required:!1,getComponent:u,specPath:j.push(\"allOf\",o),getConfigs:_,schema:s,depth:w+1}))))))):null,He?Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\"anyOf ->\"),Re.createElement(\"td\",null,He.map(((s,o)=>Re.createElement(\"div\",{key:o},Re.createElement(we,Mn()({},L,{required:!1,getComponent:u,specPath:j.push(\"anyOf\",o),getConfigs:_,schema:s,depth:w+1}))))))):null,Ye?Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\"oneOf ->\"),Re.createElement(\"td\",null,Ye.map(((s,o)=>Re.createElement(\"div\",{key:o},Re.createElement(we,Mn()({},L,{required:!1,getComponent:u,specPath:j.push(\"oneOf\",o),getConfigs:_,schema:s,depth:w+1}))))))):null,Xe?Re.createElement(\"tr\",null,Re.createElement(\"td\",null,\"not ->\"),Re.createElement(\"td\",null,Re.createElement(\"div\",null,Re.createElement(we,Mn()({},L,{required:!1,getComponent:u,specPath:j.push(\"not\"),getConfigs:_,schema:Xe,depth:w+1}))))):null))),Re.createElement(\"span\",{className:\"brace-close\"},\"}\")),de.size?de.entrySeq().map((([s,o])=>Re.createElement(Pe,{key:`${s}-${o}`,propKey:s,propVal:o,propClass:\"property\"}))):null)}}class ArrayModel extends Re.Component{render(){let{getComponent:s,getConfigs:o,schema:i,depth:a,expandDepth:u,name:_,displayName:w,specPath:x}=this.props,C=i.get(\"description\"),j=i.get(\"items\"),L=i.get(\"title\")||w||_,B=i.filter(((s,o)=>-1===[\"type\",\"items\",\"description\",\"$$ref\",\"externalDocs\"].indexOf(o))),$=i.getIn([\"externalDocs\",\"url\"]),U=i.getIn([\"externalDocs\",\"description\"]);const V=s(\"Markdown\",!0),z=s(\"ModelCollapse\"),Y=s(\"Model\"),Z=s(\"Property\"),ee=s(\"Link\"),ie=L&&Re.createElement(\"span\",{className:\"model-title\"},Re.createElement(\"span\",{className:\"model-title__text\"},L));return Re.createElement(\"span\",{className:\"model\"},Re.createElement(z,{title:ie,expanded:a<=u,collapsedContent:\"[...]\"},\"[\",B.size?B.entrySeq().map((([s,o])=>Re.createElement(Z,{key:`${s}-${o}`,propKey:s,propVal:o,propClass:\"property\"}))):null,C?Re.createElement(V,{source:C}):B.size?Re.createElement(\"div\",{className:\"markdown\"}):null,$&&Re.createElement(\"div\",{className:\"external-docs\"},Re.createElement(ee,{target:\"_blank\",href:sanitizeUrl($)},U||$)),Re.createElement(\"span\",null,Re.createElement(Y,Mn()({},this.props,{getConfigs:o,specPath:x.push(\"items\"),name:null,schema:j,required:!1,depth:a+1}))),\"]\"))}}const ts=\"property primitive\";class Primitive extends Re.Component{render(){let{schema:s,getComponent:o,getConfigs:i,name:a,displayName:u,depth:_,expandDepth:w}=this.props;const{showExtensions:x}=i();if(!s||!s.get)return Re.createElement(\"div\",null);let C=s.get(\"type\"),j=s.get(\"format\"),L=s.get(\"xml\"),B=s.get(\"enum\"),$=s.get(\"title\")||u||a,U=s.get(\"description\");const V=getExtensions(s);let z=s.filter(((s,o)=>-1===[\"enum\",\"type\",\"format\",\"description\",\"$$ref\",\"externalDocs\"].indexOf(o))).filterNot(((s,o)=>V.has(o))),Y=s.getIn([\"externalDocs\",\"url\"]),Z=s.getIn([\"externalDocs\",\"description\"]);const ee=o(\"Markdown\",!0),ie=o(\"EnumModel\"),ae=o(\"Property\"),ce=o(\"ModelCollapse\"),le=o(\"Link\"),pe=o(\"ModelExtensions\"),de=$&&Re.createElement(\"span\",{className:\"model-title\"},Re.createElement(\"span\",{className:\"model-title__text\"},$));return Re.createElement(\"span\",{className:\"model\"},Re.createElement(ce,{title:de,expanded:_<=w,collapsedContent:\"[...]\"},Re.createElement(\"span\",{className:\"prop\"},a&&_>1&&Re.createElement(\"span\",{className:\"prop-name\"},$),Re.createElement(\"span\",{className:\"prop-type\"},C),j&&Re.createElement(\"span\",{className:\"prop-format\"},\"($\",j,\")\"),z.size?z.entrySeq().map((([s,o])=>Re.createElement(ae,{key:`${s}-${o}`,propKey:s,propVal:o,propClass:ts}))):null,x&&V.size>0?Re.createElement(pe,{extensions:V,propClass:`${ts} extension`}):null,U?Re.createElement(ee,{source:U}):null,Y&&Re.createElement(\"div\",{className:\"external-docs\"},Re.createElement(le,{target:\"_blank\",href:sanitizeUrl(Y)},Z||Y)),L&&L.size?Re.createElement(\"span\",null,Re.createElement(\"br\",null),Re.createElement(\"span\",{className:ts},\"xml:\"),L.entrySeq().map((([s,o])=>Re.createElement(\"span\",{key:`${s}-${o}`,className:ts},Re.createElement(\"br\",null),\" \",s,\": \",String(o)))).toArray()):null,B&&Re.createElement(ie,{value:B,getComponent:o}))))}}class Schemes extends Re.Component{UNSAFE_componentWillMount(){let{schemes:s}=this.props;this.setScheme(s.first())}UNSAFE_componentWillReceiveProps(s){this.props.currentScheme&&s.schemes.includes(this.props.currentScheme)||this.setScheme(s.schemes.first())}onChange=s=>{this.setScheme(s.target.value)};setScheme=s=>{let{path:o,method:i,specActions:a}=this.props;a.setScheme(s,o,i)};render(){let{schemes:s,currentScheme:o}=this.props;return Re.createElement(\"label\",{htmlFor:\"schemes\"},Re.createElement(\"span\",{className:\"schemes-title\"},\"Schemes\"),Re.createElement(\"select\",{onChange:this.onChange,value:o,id:\"schemes\"},s.valueSeq().map((s=>Re.createElement(\"option\",{value:s,key:s},s))).toArray()))}}class SchemesContainer extends Re.Component{render(){const{specActions:s,specSelectors:o,getComponent:i}=this.props,a=o.operationScheme(),u=o.schemes(),_=i(\"schemes\");return u&&u.size?Re.createElement(_,{currentScheme:a,schemes:u,specActions:s}):null}}var rs=__webpack_require__(24677),ns=__webpack_require__.n(rs);const ss={value:\"\",onChange:()=>{},schema:{},keyName:\"\",required:!1,errors:(0,ze.List)()};class JsonSchemaForm extends Re.Component{static defaultProps=ss;componentDidMount(){const{dispatchInitialValue:s,value:o,onChange:i}=this.props;s?i(o):!1===s&&i(\"\")}render(){let{schema:s,errors:o,value:i,onChange:a,getComponent:u,fn:_,disabled:w}=this.props;const x=s&&s.get?s.get(\"format\"):null,C=s&&s.get?s.get(\"type\"):null,j=_.getSchemaObjectType(s),L=_.isFileUploadIntended(s);let getComponentSilently=s=>u(s,!1,{failSilently:!0}),B=C?getComponentSilently(x?`JsonSchema_${C}_${x}`:`JsonSchema_${C}`):u(\"JsonSchema_string\");return L||!ze.List.isList(C)||\"array\"!==j&&\"object\"!==j||(B=u(\"JsonSchema_object\")),B||(B=u(\"JsonSchema_string\")),Re.createElement(B,Mn()({},this.props,{errors:o,fn:_,getComponent:u,value:i,onChange:a,schema:s,disabled:w}))}}class JsonSchema_string extends Re.Component{static defaultProps=ss;onChange=s=>{const o=this.props.schema&&\"file\"===this.props.schema.get(\"type\")?s.target.files[0]:s.target.value;this.props.onChange(o,this.props.keyName)};onEnumChange=s=>this.props.onChange(s);render(){let{getComponent:s,value:o,schema:i,errors:a,required:u,description:_,disabled:w}=this.props;const x=i&&i.get?i.get(\"enum\"):null,C=i&&i.get?i.get(\"format\"):null,j=i&&i.get?i.get(\"type\"):null,L=i&&i.get?i.get(\"in\"):null;if(o?(isImmutable(o)||\"object\"==typeof o)&&(o=stringify(o)):o=\"\",a=a.toJS?a.toJS():[],x){const i=s(\"Select\");return Re.createElement(i,{className:a.length?\"invalid\":\"\",title:a.length?a:\"\",allowedValues:[...x],value:o,allowEmptyValue:!u,disabled:w,onChange:this.onEnumChange})}const B=w||L&&\"formData\"===L&&!(\"FormData\"in window),$=s(\"Input\");return j&&\"file\"===j?Re.createElement($,{type:\"file\",className:a.length?\"invalid\":\"\",title:a.length?a:\"\",onChange:this.onChange,disabled:B}):Re.createElement(ns(),{type:C&&\"password\"===C?\"password\":\"text\",className:a.length?\"invalid\":\"\",title:a.length?a:\"\",value:o,minLength:0,debounceTimeout:350,placeholder:_,onChange:this.onChange,disabled:B})}}class JsonSchema_array extends Re.PureComponent{static defaultProps=ss;constructor(s,o){super(s,o),this.state={value:valueOrEmptyList(s.value),schema:s.schema}}UNSAFE_componentWillReceiveProps(s){const o=valueOrEmptyList(s.value);o!==this.state.value&&this.setState({value:o}),s.schema!==this.state.schema&&this.setState({schema:s.schema})}onChange=()=>{this.props.onChange(this.state.value)};onItemChange=(s,o)=>{this.setState((({value:i})=>({value:i.set(o,s)})),this.onChange)};removeItem=s=>{this.setState((({value:o})=>({value:o.delete(s)})),this.onChange)};addItem=()=>{const{fn:s}=this.props;let o=valueOrEmptyList(this.state.value);this.setState((()=>({value:o.push(s.getSampleSchema(this.state.schema.get(\"items\"),!1,{includeWriteOnly:!0}))})),this.onChange)};onEnumChange=s=>{this.setState((()=>({value:s})),this.onChange)};render(){let{getComponent:s,required:o,schema:i,errors:a,fn:u,disabled:_}=this.props;a=a.toJS?a.toJS():Array.isArray(a)?a:[];const w=a.filter((s=>\"string\"==typeof s)),x=a.filter((s=>void 0!==s.needRemove)).map((s=>s.error)),C=this.state.value,j=!!(C&&C.count&&C.count()>0),L=i.getIn([\"items\",\"enum\"]),B=i.get(\"items\"),$=u.getSchemaObjectType(B),U=u.getSchemaObjectTypeLabel(B),V=i.getIn([\"items\",\"format\"]),z=i.get(\"items\");let Y,Z=!1,ee=\"file\"===$||\"string\"===$&&\"binary\"===V;if($&&V?Y=s(`JsonSchema_${$}_${V}`):\"boolean\"!==$&&\"array\"!==$&&\"object\"!==$||(Y=s(`JsonSchema_${$}`)),!ze.List.isList(B?.get(\"type\"))||\"array\"!==$&&\"object\"!==$||(Y=s(\"JsonSchema_object\")),Y||ee||(Z=!0),L){const i=s(\"Select\");return Re.createElement(i,{className:a.length?\"invalid\":\"\",title:a.length?a:\"\",multiple:!0,value:C,disabled:_,allowedValues:L,allowEmptyValue:!o,onChange:this.onEnumChange})}const ie=s(\"Button\");return Re.createElement(\"div\",{className:\"json-schema-array\"},j?C.map(((o,i)=>{const w=(0,ze.fromJS)([...a.filter((s=>s.index===i)).map((s=>s.error))]);return Re.createElement(\"div\",{key:i,className:\"json-schema-form-item\"},ee?Re.createElement(JsonSchemaArrayItemFile,{value:o,onChange:s=>this.onItemChange(s,i),disabled:_,errors:w,getComponent:s}):Z?Re.createElement(JsonSchemaArrayItemText,{value:o,onChange:s=>this.onItemChange(s,i),disabled:_,errors:w}):Re.createElement(Y,Mn()({},this.props,{value:o,onChange:s=>this.onItemChange(s,i),disabled:_,errors:w,schema:z,getComponent:s,fn:u})),_?null:Re.createElement(ie,{className:`btn btn-sm json-schema-form-item-remove ${x.length?\"invalid\":null}`,title:x.length?x:\"\",onClick:()=>this.removeItem(i)},\" - \"))})):null,_?null:Re.createElement(ie,{className:`btn btn-sm json-schema-form-item-add ${w.length?\"invalid\":null}`,title:w.length?w:\"\",onClick:this.addItem},\"Add \",U,\" item\"))}}class JsonSchemaArrayItemText extends Re.Component{static defaultProps=ss;onChange=s=>{const o=s.target.value;this.props.onChange(o,this.props.keyName)};render(){let{value:s,errors:o,description:i,disabled:a}=this.props;return s?(isImmutable(s)||\"object\"==typeof s)&&(s=stringify(s)):s=\"\",o=o.toJS?o.toJS():[],Re.createElement(ns(),{type:\"text\",className:o.length?\"invalid\":\"\",title:o.length?o:\"\",value:s,minLength:0,debounceTimeout:350,placeholder:i,onChange:this.onChange,disabled:a})}}class JsonSchemaArrayItemFile extends Re.Component{static defaultProps=ss;onFileChange=s=>{const o=s.target.files[0];this.props.onChange(o,this.props.keyName)};render(){let{getComponent:s,errors:o,disabled:i}=this.props;const a=s(\"Input\"),u=i||!(\"FormData\"in window);return Re.createElement(a,{type:\"file\",className:o.length?\"invalid\":\"\",title:o.length?o:\"\",onChange:this.onFileChange,disabled:u})}}class JsonSchema_boolean extends Re.Component{static defaultProps=ss;onEnumChange=s=>this.props.onChange(s);render(){let{getComponent:s,value:o,errors:i,schema:a,required:u,disabled:_}=this.props;i=i.toJS?i.toJS():[];let w=a&&a.get?a.get(\"enum\"):null,x=!w||!u,C=!w&&[\"true\",\"false\"];const j=s(\"Select\");return Re.createElement(j,{className:i.length?\"invalid\":\"\",title:i.length?i:\"\",value:String(o),disabled:_,allowedValues:w?[...w]:C,allowEmptyValue:x,onChange:this.onEnumChange})}}const stringifyObjectErrors=s=>s.map((s=>{const o=void 0!==s.propKey?s.propKey:s.index;let i=\"string\"==typeof s?s:\"string\"==typeof s.error?s.error:null;if(!o&&i)return i;let a=s.error,u=`/${s.propKey}`;for(;\"object\"==typeof a;){const s=void 0!==a.propKey?a.propKey:a.index;if(void 0===s)break;if(u+=`/${s}`,!a.error)break;a=a.error}return`${u}: ${a}`}));class JsonSchema_object extends Re.PureComponent{constructor(){super()}static defaultProps=ss;onChange=s=>{this.props.onChange(s)};handleOnChange=s=>{const o=s.target.value;this.onChange(o)};render(){let{getComponent:s,value:o,errors:i,disabled:a}=this.props;const u=s(\"TextArea\");return i=i.toJS?i.toJS():Array.isArray(i)?i:[],Re.createElement(\"div\",null,Re.createElement(u,{className:Jn()({invalid:i.length}),title:i.length?stringifyObjectErrors(i).join(\", \"):\"\",value:stringify(o),disabled:a,onChange:this.handleOnChange}))}}function valueOrEmptyList(s){return ze.List.isList(s)?s:Array.isArray(s)?(0,ze.fromJS)(s):(0,ze.List)()}const ModelExtensions=({extensions:s,propClass:o=\"\"})=>s.entrySeq().map((([s,i])=>{const a=immutableToJS(i)??null;return Re.createElement(\"tr\",{key:s,className:o},Re.createElement(\"td\",null,s),Re.createElement(\"td\",null,JSON.stringify(a)))})).toArray();var os=__webpack_require__(11331),as=__webpack_require__.n(os);const hasSchemaType=(s,o)=>{const i=ze.Map.isMap(s);if(!i&&!as()(s))return!1;const a=i?s.get(\"type\"):s.type;return o===a||Array.isArray(o)&&o.includes(a)},getType=(s,o=new WeakSet)=>{if(null==s)return\"any\";if(o.has(s))return\"any\";o.add(s);const{type:i,items:a}=s;return Object.hasOwn(s,\"items\")?(()=>{if(a)return`array<${getType(a,o)}>`;return\"array\"})():i},getSchemaObjectTypeLabel=s=>getType(immutableToJS(s)),json_schema_5=()=>({components:{modelExample:model_example,ModelWrapper,ModelCollapse,Model,Models,EnumModel:enum_model,ObjectModel,ArrayModel,PrimitiveModel:Primitive,ModelExtensions,schemes:Schemes,SchemesContainer,...U},fn:{hasSchemaType,getSchemaObjectTypeLabel}});var cs=__webpack_require__(19123),ls=__webpack_require__.n(cs),us=__webpack_require__(41859),ps=__webpack_require__.n(us),hs=__webpack_require__(62193),ds=__webpack_require__.n(hs);const shallowArrayEquals=s=>o=>Array.isArray(s)&&Array.isArray(o)&&s.length===o.length&&s.every(((s,i)=>s===o[i])),list=(...s)=>s;class Cache extends Map{delete(s){const o=Array.from(this.keys()).find(shallowArrayEquals(s));return super.delete(o)}get(s){const o=Array.from(this.keys()).find(shallowArrayEquals(s));return super.get(o)}has(s){return-1!==Array.from(this.keys()).findIndex(shallowArrayEquals(s))}}const utils_memoizeN=(s,o=list)=>{const{Cache:i}=pt();pt().Cache=Cache;const a=pt()(s,o);return pt().Cache=i,a},fs={string:s=>s.pattern?(s=>{try{const o=/(?<=(?\"user@example.com\",\"string_date-time\":()=>(new Date).toISOString(),string_date:()=>(new Date).toISOString().substring(0,10),string_time:()=>(new Date).toISOString().substring(11),string_uuid:()=>\"3fa85f64-5717-4562-b3fc-2c963f66afa6\",string_hostname:()=>\"example.com\",string_ipv4:()=>\"198.51.100.42\",string_ipv6:()=>\"2001:0db8:5b96:0000:0000:426f:8e17:642a\",number:()=>0,number_float:()=>0,integer:()=>0,boolean:s=>\"boolean\"!=typeof s.default||s.default},primitive=s=>{s=objectify(s);let{type:o,format:i}=s,a=fs[`${o}_${i}`]||fs[o];return isFunc(a)?a(s):\"Unknown Type: \"+s.type},sanitizeRef=s=>deeplyStripKey(s,\"$$ref\",(s=>\"string\"==typeof s&&s.indexOf(\"#\")>-1)),ms=[\"maxProperties\",\"minProperties\"],gs=[\"minItems\",\"maxItems\"],ys=[\"minimum\",\"maximum\",\"exclusiveMinimum\",\"exclusiveMaximum\"],vs=[\"minLength\",\"maxLength\"],mergeJsonSchema=(s,o,i={})=>{const a={...s};if([\"example\",\"default\",\"enum\",\"xml\",\"type\",...ms,...gs,...ys,...vs].forEach((s=>(s=>{void 0===a[s]&&void 0!==o[s]&&(a[s]=o[s])})(s))),void 0!==o.required&&Array.isArray(o.required)&&(void 0!==a.required&&a.required.length||(a.required=[]),o.required.forEach((s=>{a.required.includes(s)||a.required.push(s)}))),o.properties){a.properties||(a.properties={});let s=objectify(o.properties);for(let u in s)Object.prototype.hasOwnProperty.call(s,u)&&(s[u]&&s[u].deprecated||s[u]&&s[u].readOnly&&!i.includeReadOnly||s[u]&&s[u].writeOnly&&!i.includeWriteOnly||a.properties[u]||(a.properties[u]=s[u],!o.required&&Array.isArray(o.required)&&-1!==o.required.indexOf(u)&&(a.required?a.required.push(u):a.required=[u])))}return o.items&&(a.items||(a.items={}),a.items=mergeJsonSchema(a.items,o.items,i)),a},sampleFromSchemaGeneric=(s,o={},i=void 0,a=!1)=>{s&&isFunc(s.toJS)&&(s=s.toJS());let u=void 0!==i||s&&void 0!==s.example||s&&void 0!==s.default;const _=!u&&s&&s.oneOf&&s.oneOf.length>0,w=!u&&s&&s.anyOf&&s.anyOf.length>0;if(!u&&(_||w)){const i=objectify(_?s.oneOf[0]:s.anyOf[0]);if(!(s=mergeJsonSchema(s,i,o)).xml&&i.xml&&(s.xml=i.xml),void 0!==s.example&&void 0!==i.example)u=!0;else if(i.properties){s.properties||(s.properties={});let a=objectify(i.properties);for(let u in a)Object.prototype.hasOwnProperty.call(a,u)&&(a[u]&&a[u].deprecated||a[u]&&a[u].readOnly&&!o.includeReadOnly||a[u]&&a[u].writeOnly&&!o.includeWriteOnly||s.properties[u]||(s.properties[u]=a[u],!i.required&&Array.isArray(i.required)&&-1!==i.required.indexOf(u)&&(s.required?s.required.push(u):s.required=[u])))}}const x={};let{xml:C,type:j,example:L,properties:B,additionalProperties:$,items:U}=s||{},{includeReadOnly:V,includeWriteOnly:z}=o;C=C||{};let Y,{name:Z,prefix:ee,namespace:ie}=C,ae={};if(a&&(Z=Z||\"notagname\",Y=(ee?ee+\":\":\"\")+Z,ie)){x[ee?\"xmlns:\"+ee:\"xmlns\"]=ie}a&&(ae[Y]=[]);const schemaHasAny=o=>o.some((o=>Object.prototype.hasOwnProperty.call(s,o)));s&&!j&&(B||$||schemaHasAny(ms)?j=\"object\":U||schemaHasAny(gs)?j=\"array\":schemaHasAny(ys)?(j=\"number\",s.type=\"number\"):u||s.enum||(j=\"string\",s.type=\"string\"));const handleMinMaxItems=o=>{if(null!=s?.maxItems&&(o=o.slice(0,s?.maxItems)),null!=s?.minItems){let i=0;for(;o.lengths&&null!==s.maxProperties&&void 0!==s.maxProperties&&pe>=s.maxProperties,canAddProperty=o=>!s||null===s.maxProperties||void 0===s.maxProperties||!hasExceededMaxProperties()&&(!(o=>!(s&&s.required&&s.required.length&&s.required.includes(o)))(o)||s.maxProperties-pe-(()=>{if(!s||!s.required)return 0;let o=0;return a?s.required.forEach((s=>o+=void 0===ae[s]?0:1)):s.required.forEach((s=>o+=void 0===ae[Y]?.find((o=>void 0!==o[s]))?0:1)),s.required.length-o})()>0);if(le=a?(i,u=void 0)=>{if(s&&ce[i]){if(ce[i].xml=ce[i].xml||{},ce[i].xml.attribute){const s=Array.isArray(ce[i].enum)?ce[i].enum[0]:void 0,o=ce[i].example,a=ce[i].default;return void(x[ce[i].xml.name||i]=void 0!==o?o:void 0!==a?a:void 0!==s?s:primitive(ce[i]))}ce[i].xml.name=ce[i].xml.name||i}else ce[i]||!1===$||(ce[i]={xml:{name:i}});let _=sampleFromSchemaGeneric(s&&ce[i]||void 0,o,u,a);canAddProperty(i)&&(pe++,Array.isArray(_)?ae[Y]=ae[Y].concat(_):ae[Y].push(_))}:(i,u)=>{if(canAddProperty(i)){if(Object.prototype.hasOwnProperty.call(s,\"discriminator\")&&s.discriminator&&Object.prototype.hasOwnProperty.call(s.discriminator,\"mapping\")&&s.discriminator.mapping&&Object.prototype.hasOwnProperty.call(s,\"$$ref\")&&s.$$ref&&s.discriminator.propertyName===i){for(let o in s.discriminator.mapping)if(-1!==s.$$ref.search(s.discriminator.mapping[o])){ae[i]=o;break}}else ae[i]=sampleFromSchemaGeneric(ce[i],o,u,a);pe++}},u){let u;if(u=sanitizeRef(void 0!==i?i:void 0!==L?L:s.default),!a){if(\"number\"==typeof u&&\"string\"===j)return`${u}`;if(\"string\"!=typeof u||\"string\"===j)return u;try{return JSON.parse(u)}catch(s){return u}}if(s||(j=Array.isArray(u)?\"array\":typeof u),\"array\"===j){if(!Array.isArray(u)){if(\"string\"==typeof u)return u;u=[u]}const i=s?s.items:void 0;i&&(i.xml=i.xml||C||{},i.xml.name=i.xml.name||C.name);let _=u.map((s=>sampleFromSchemaGeneric(i,o,s,a)));return _=handleMinMaxItems(_),C.wrapped?(ae[Y]=_,ds()(x)||ae[Y].push({_attr:x})):ae=_,ae}if(\"object\"===j){if(\"string\"==typeof u)return u;for(let o in u)Object.prototype.hasOwnProperty.call(u,o)&&(s&&ce[o]&&ce[o].readOnly&&!V||s&&ce[o]&&ce[o].writeOnly&&!z||(s&&ce[o]&&ce[o].xml&&ce[o].xml.attribute?x[ce[o].xml.name||o]=u[o]:le(o,u[o])));return ds()(x)||ae[Y].push({_attr:x}),ae}return ae[Y]=ds()(x)?u:[{_attr:x},u],ae}if(\"object\"===j){for(let s in ce)Object.prototype.hasOwnProperty.call(ce,s)&&(ce[s]&&ce[s].deprecated||ce[s]&&ce[s].readOnly&&!V||ce[s]&&ce[s].writeOnly&&!z||le(s));if(a&&x&&ae[Y].push({_attr:x}),hasExceededMaxProperties())return ae;if(!0===$)a?ae[Y].push({additionalProp:\"Anything can be here\"}):ae.additionalProp1={},pe++;else if($){const i=objectify($),u=sampleFromSchemaGeneric(i,o,void 0,a);if(a&&i.xml&&i.xml.name&&\"notagname\"!==i.xml.name)ae[Y].push(u);else{const o=i[\"x-additionalPropertiesName\"]||\"additionalProp\",_=null!==s.minProperties&&void 0!==s.minProperties&&pesampleFromSchemaGeneric(mergeJsonSchema(s,U,o),o,void 0,a)));else if(Array.isArray(U.oneOf))i=U.oneOf.map((s=>sampleFromSchemaGeneric(mergeJsonSchema(s,U,o),o,void 0,a)));else{if(!(!a||a&&C.wrapped))return sampleFromSchemaGeneric(U,o,void 0,a);i=[sampleFromSchemaGeneric(U,o,void 0,a)]}return i=handleMinMaxItems(i),a&&C.wrapped?(ae[Y]=i,ds()(x)||ae[Y].push({_attr:x}),ae):i}let de;if(s&&Array.isArray(s.enum))de=normalizeArray(s.enum)[0];else{if(!s)return;if(de=primitive(s),\"number\"==typeof de){let o=s.minimum;null!=o&&(s.exclusiveMinimum&&o++,de=o);let i=s.maximum;null!=i&&(s.exclusiveMaximum&&i--,de=i)}if(\"string\"==typeof de&&(null!==s.maxLength&&void 0!==s.maxLength&&(de=de.slice(0,s.maxLength)),null!==s.minLength&&void 0!==s.minLength)){let o=0;for(;de.length(s.schema&&(s=s.schema),s.properties&&(s.type=\"object\"),s),createXMLExample=(s,o,i)=>{const a=sampleFromSchemaGeneric(s,o,i,!0);if(a)return\"string\"==typeof a?a:ls()(a,{declaration:!0,indent:\"\\t\"})},sampleFromSchema=(s,o,i)=>sampleFromSchemaGeneric(s,o,i,!1),resolver=(s,o,i)=>[s,JSON.stringify(o),JSON.stringify(i)],bs=utils_memoizeN(createXMLExample,resolver),_s=utils_memoizeN(sampleFromSchema,resolver),getSchemaObjectType=s=>immutableToJS(s)?.type??\"string\",Ss=[{when:/json/,shouldStringifyTypes:[\"string\"]}],Es=[\"object\"],get_json_sample_schema=s=>(o,i,a,u)=>{const{fn:_}=s(),w=_.memoizedSampleFromSchema(o,i,u),x=typeof w,C=Ss.reduce(((s,o)=>o.when.test(a)?[...s,...o.shouldStringifyTypes]:s),Es);return gt()(C,(s=>s===x))?JSON.stringify(w,null,2):w},get_yaml_sample_schema=s=>(o,i,a,u)=>{const{fn:_}=s(),w=_.getJsonSampleSchema(o,i,a,u);let x;try{x=fn.dump(fn.load(w),{lineWidth:-1},{schema:rn}),\"\\n\"===x[x.length-1]&&(x=x.slice(0,x.length-1))}catch(s){return console.error(s),\"error: could not generate yaml example\"}return x.replace(/\\t/g,\" \")},get_xml_sample_schema=s=>(o,i,a)=>{const{fn:u}=s();if(o&&!o.xml&&(o.xml={}),o&&!o.xml.name){if(!o.$$ref&&(o.type||o.items||o.properties||o.additionalProperties))return'\\n\\x3c!-- XML example cannot be generated; root element name is undefined --\\x3e';if(o.$$ref){let s=o.$$ref.match(/\\S*\\/(\\S+)$/);o.xml.name=s[1]}}return u.memoizedCreateXMLExample(o,i,a)},get_sample_schema=s=>(o,i=\"\",a={},u=void 0)=>{const{fn:_}=s();return\"function\"==typeof o?.toJS&&(o=o.toJS()),\"function\"==typeof u?.toJS&&(u=u.toJS()),/xml/.test(i)?_.getXmlSampleSchema(o,a,u):/(yaml|yml)/.test(i)?_.getYamlSampleSchema(o,a,i,u):_.getJsonSampleSchema(o,a,i,u)},json_schema_5_samples=({getSystem:s})=>{const o=get_json_sample_schema(s),i=get_yaml_sample_schema(s),a=get_xml_sample_schema(s),u=get_sample_schema(s);return{fn:{jsonSchema5:{inferSchema,sampleFromSchema,sampleFromSchemaGeneric,createXMLExample,memoizedSampleFromSchema:_s,memoizedCreateXMLExample:bs,getJsonSampleSchema:o,getYamlSampleSchema:i,getXmlSampleSchema:a,getSampleSchema:u,mergeJsonSchema},inferSchema,sampleFromSchema,sampleFromSchemaGeneric,createXMLExample,memoizedSampleFromSchema:_s,memoizedCreateXMLExample:bs,getJsonSampleSchema:o,getYamlSampleSchema:i,getXmlSampleSchema:a,getSampleSchema:u,mergeJsonSchema,getSchemaObjectType}}};var ws=__webpack_require__(37334),xs=__webpack_require__.n(ws);const ks=[\"get\",\"put\",\"post\",\"delete\",\"options\",\"head\",\"patch\",\"trace\"],spec_selectors_state=s=>s||(0,ze.Map)(),Os=Ut(spec_selectors_state,(s=>s.get(\"lastError\"))),As=Ut(spec_selectors_state,(s=>s.get(\"url\"))),Cs=Ut(spec_selectors_state,(s=>s.get(\"spec\")||\"\")),js=Ut(spec_selectors_state,(s=>s.get(\"specSource\")||\"not-editor\")),Ps=Ut(spec_selectors_state,(s=>s.get(\"json\",(0,ze.Map)()))),Is=Ut(Ps,(s=>s.toJS())),Ts=Ut(spec_selectors_state,(s=>s.get(\"resolved\",(0,ze.Map)()))),specResolvedSubtree=(s,o)=>s.getIn([\"resolvedSubtrees\",...o],void 0),mergerFn=(s,o)=>ze.Map.isMap(s)&&ze.Map.isMap(o)?o.get(\"$$ref\")?o:(0,ze.OrderedMap)().mergeWith(mergerFn,s,o):o,Ns=Ut(spec_selectors_state,(s=>(0,ze.OrderedMap)().mergeWith(mergerFn,s.get(\"json\"),s.get(\"resolvedSubtrees\")))),spec=s=>Ps(s),Ms=Ut(spec,(()=>!1)),Rs=Ut(spec,(s=>returnSelfOrNewMap(s&&s.get(\"info\")))),Ds=Ut(spec,(s=>returnSelfOrNewMap(s&&s.get(\"externalDocs\")))),Ls=Ut(Rs,(s=>s&&s.get(\"version\"))),Fs=Ut(Ls,(s=>/v?([0-9]*)\\.([0-9]*)\\.([0-9]*)/i.exec(s).slice(1))),Bs=Ut(Ns,(s=>s.get(\"paths\"))),$s=xs()([\"get\",\"put\",\"post\",\"delete\",\"options\",\"head\",\"patch\"]),qs=Ut(Bs,(s=>{let o=(0,ze.List)();return!ze.Map.isMap(s)||s.isEmpty()||s.forEach(((s,i)=>{if(!s||!s.forEach)return{};s.forEach(((s,a)=>{ks.indexOf(a)<0||(o=o.push((0,ze.fromJS)({path:i,method:a,operation:s,id:`${a}-${i}`})))}))})),o})),Us=Ut(spec,(s=>(0,ze.Set)(s.get(\"consumes\")))),Vs=Ut(spec,(s=>(0,ze.Set)(s.get(\"produces\")))),zs=Ut(spec,(s=>s.get(\"security\",(0,ze.List)()))),Ws=Ut(spec,(s=>s.get(\"securityDefinitions\"))),findDefinition=(s,o)=>{const i=s.getIn([\"resolvedSubtrees\",\"definitions\",o],null),a=s.getIn([\"json\",\"definitions\",o],null);return i||a||null},Js=Ut(spec,(s=>{const o=s.get(\"definitions\");return ze.Map.isMap(o)?o:(0,ze.Map)()})),Hs=Ut(spec,(s=>s.get(\"basePath\"))),Ks=Ut(spec,(s=>s.get(\"host\"))),Gs=Ut(spec,(s=>s.get(\"schemes\",(0,ze.Map)()))),Ys=Ut([qs,Us,Vs],((s,o,i)=>s.map((s=>s.update(\"operation\",(s=>ze.Map.isMap(s)?s.withMutations((s=>(s.get(\"consumes\")||s.update(\"consumes\",(s=>(0,ze.Set)(s).merge(o))),s.get(\"produces\")||s.update(\"produces\",(s=>(0,ze.Set)(s).merge(i))),s))):(0,ze.Map)())))))),Xs=Ut(spec,(s=>{const o=s.get(\"tags\",(0,ze.List)());return ze.List.isList(o)?o.filter((s=>ze.Map.isMap(s))):(0,ze.List)()})),tagDetails=(s,o)=>(Xs(s)||(0,ze.List)()).filter(ze.Map.isMap).find((s=>s.get(\"name\")===o),(0,ze.Map)()),Qs=Ut(Ys,Xs,((s,o)=>s.reduce(((s,o)=>{let i=(0,ze.Set)(o.getIn([\"operation\",\"tags\"]));return i.count()<1?s.update(\"default\",(0,ze.List)(),(s=>s.push(o))):i.reduce(((s,i)=>s.update(i,(0,ze.List)(),(s=>s.push(o)))),s)}),o.reduce(((s,o)=>s.set(o.get(\"name\"),(0,ze.List)())),(0,ze.OrderedMap)())))),selectors_taggedOperations=s=>({getConfigs:o})=>{let{tagsSorter:i,operationsSorter:a}=o();return Qs(s).sortBy(((s,o)=>o),((s,o)=>{let a=\"function\"==typeof i?i:It.tagsSorter[i];return a?a(s,o):null})).map(((o,i)=>{let u=\"function\"==typeof a?a:It.operationsSorter[a],_=u?o.sort(u):o;return(0,ze.Map)({tagDetails:tagDetails(s,i),operations:_})}))},Zs=Ut(spec_selectors_state,(s=>s.get(\"responses\",(0,ze.Map)()))),eo=Ut(spec_selectors_state,(s=>s.get(\"requests\",(0,ze.Map)()))),to=Ut(spec_selectors_state,(s=>s.get(\"mutatedRequests\",(0,ze.Map)()))),responseFor=(s,o,i)=>Zs(s).getIn([o,i],null),requestFor=(s,o,i)=>eo(s).getIn([o,i],null),mutatedRequestFor=(s,o,i)=>to(s).getIn([o,i],null),allowTryItOutFor=()=>!0,parameterWithMetaByIdentity=(s,o,i)=>{const a=Ns(s).getIn([\"paths\",...o,\"parameters\"],(0,ze.OrderedMap)()),u=s.getIn([\"meta\",\"paths\",...o,\"parameters\"],(0,ze.OrderedMap)());return a.map((s=>{const o=u.get(`${i.get(\"in\")}.${i.get(\"name\")}`),a=u.get(`${i.get(\"in\")}.${i.get(\"name\")}.hash-${i.hashCode()}`);return(0,ze.OrderedMap)().merge(s,o,a)})).find((s=>s.get(\"in\")===i.get(\"in\")&&s.get(\"name\")===i.get(\"name\")),(0,ze.OrderedMap)())},parameterInclusionSettingFor=(s,o,i,a)=>{const u=`${a}.${i}`;return s.getIn([\"meta\",\"paths\",...o,\"parameter_inclusions\",u],!1)},parameterWithMeta=(s,o,i,a)=>{const u=Ns(s).getIn([\"paths\",...o,\"parameters\"],(0,ze.OrderedMap)()).find((s=>s.get(\"in\")===a&&s.get(\"name\")===i),(0,ze.OrderedMap)());return parameterWithMetaByIdentity(s,o,u)},operationWithMeta=(s,o,i)=>{const a=Ns(s).getIn([\"paths\",o,i],(0,ze.OrderedMap)()),u=s.getIn([\"meta\",\"paths\",o,i],(0,ze.OrderedMap)()),_=a.get(\"parameters\",(0,ze.List)()).map((a=>parameterWithMetaByIdentity(s,[o,i],a)));return(0,ze.OrderedMap)().merge(a,u).set(\"parameters\",_)};function getParameter(s,o,i,a){return o=o||[],s.getIn([\"meta\",\"paths\",...o,\"parameters\"],(0,ze.fromJS)([])).find((s=>ze.Map.isMap(s)&&s.get(\"name\")===i&&s.get(\"in\")===a))||(0,ze.Map)()}const ro=Ut(spec,(s=>{const o=s.get(\"host\");return\"string\"==typeof o&&o.length>0&&\"/\"!==o[0]}));function parameterValues(s,o,i){return o=o||[],operationWithMeta(s,...o).get(\"parameters\",(0,ze.List)()).reduce(((s,o)=>{let a=i&&\"body\"===o.get(\"in\")?o.get(\"value_xml\"):o.get(\"value\");return ze.List.isList(a)&&(a=a.filter((s=>\"\"!==s))),s.set(paramToIdentifier(o,{allowHashes:!1}),a)}),(0,ze.fromJS)({}))}function parametersIncludeIn(s,o=\"\"){if(ze.List.isList(s))return s.some((s=>ze.Map.isMap(s)&&s.get(\"in\")===o))}function parametersIncludeType(s,o=\"\"){if(ze.List.isList(s))return s.some((s=>ze.Map.isMap(s)&&s.get(\"type\")===o))}function contentTypeValues(s,o){o=o||[];let i=Ns(s).getIn([\"paths\",...o],(0,ze.fromJS)({})),a=s.getIn([\"meta\",\"paths\",...o],(0,ze.fromJS)({})),u=currentProducesFor(s,o);const _=i.get(\"parameters\")||new ze.List,w=a.get(\"consumes_value\")?a.get(\"consumes_value\"):parametersIncludeType(_,\"file\")?\"multipart/form-data\":parametersIncludeType(_,\"formData\")?\"application/x-www-form-urlencoded\":void 0;return(0,ze.fromJS)({requestContentType:w,responseContentType:u})}function currentProducesFor(s,o){o=o||[];const i=Ns(s).getIn([\"paths\",...o],null);if(null===i)return;const a=s.getIn([\"meta\",\"paths\",...o,\"produces_value\"],null),u=i.getIn([\"produces\",0],null);return a||u||\"application/json\"}function producesOptionsFor(s,o){o=o||[];const i=Ns(s),a=i.getIn([\"paths\",...o],null);if(null===a)return;const[u]=o,_=a.get(\"produces\",null),w=i.getIn([\"paths\",u,\"produces\"],null),x=i.getIn([\"produces\"],null);return _||w||x}function consumesOptionsFor(s,o){o=o||[];const i=Ns(s),a=i.getIn([\"paths\",...o],null);if(null===a)return;const[u]=o,_=a.get(\"consumes\",null),w=i.getIn([\"paths\",u,\"consumes\"],null),x=i.getIn([\"consumes\"],null);return _||w||x}const operationScheme=(s,o,i)=>{let a=s.get(\"url\").match(/^([a-z][a-z0-9+\\-.]*):/),u=Array.isArray(a)?a[1]:null;return s.getIn([\"scheme\",o,i])||s.getIn([\"scheme\",\"_defaultScheme\"])||u||\"\"},canExecuteScheme=(s,o,i)=>[\"http\",\"https\"].indexOf(operationScheme(s,o,i))>-1,validationErrors=(s,o)=>{o=o||[];const i=s.getIn([\"meta\",\"paths\",...o,\"parameters\"],(0,ze.fromJS)([])),a=[];if(0===i.length)return a;const getErrorsWithPaths=(s,o=[])=>{const getNestedErrorsWithPaths=(s,o)=>{const i=[...o,s.get(\"propKey\")||s.get(\"index\")];return ze.Map.isMap(s.get(\"error\"))?getErrorsWithPaths(s.get(\"error\"),i):{error:s.get(\"error\"),path:i}};return ze.List.isList(s)?s.map((s=>ze.Map.isMap(s)?getNestedErrorsWithPaths(s,o):{error:s,path:o})):getNestedErrorsWithPaths(s,o)};return i.forEach(((s,o)=>{const i=o.split(\".\").slice(1,-1).join(\".\"),u=s.get(\"errors\");if(u&&u.count()){getErrorsWithPaths(u).forEach((({error:s,path:o})=>{a.push(((s,o,i)=>`For '${i}'${(o=o.reduce(((s,o)=>\"number\"==typeof o?`${s}[${o}]`:s?`${s}.${o}`:o),\"\"))?` at path '${o}'`:\"\"}: ${s}.`)(s,o,i))}))}})),a},validateBeforeExecute=(s,o)=>0===validationErrors(s,o).length,getOAS3RequiredRequestBodyContentType=(s,o)=>{let i={requestBody:!1,requestContentType:{}},a=s.getIn([\"resolvedSubtrees\",\"paths\",...o,\"requestBody\"],(0,ze.fromJS)([]));return a.size<1||(a.getIn([\"required\"])&&(i.requestBody=a.getIn([\"required\"])),a.getIn([\"content\"]).entrySeq().forEach((s=>{const o=s[0];if(s[1].getIn([\"schema\",\"required\"])){const a=s[1].getIn([\"schema\",\"required\"]).toJS();i.requestContentType[o]=a}}))),i},isMediaTypeSchemaPropertiesEqual=(s,o,i,a)=>{if((i||a)&&i===a)return!0;let u=s.getIn([\"resolvedSubtrees\",\"paths\",...o,\"requestBody\",\"content\"],(0,ze.fromJS)([]));if(u.size<2||!i||!a)return!1;let _=u.getIn([i,\"schema\",\"properties\"],(0,ze.fromJS)([])),w=u.getIn([a,\"schema\",\"properties\"],(0,ze.fromJS)([]));return!!_.equals(w)};function returnSelfOrNewMap(s){return ze.Map.isMap(s)?s:new ze.Map}var no=__webpack_require__(85015),so=__webpack_require__.n(no),oo=__webpack_require__(38221),io=__webpack_require__.n(oo),ao=__webpack_require__(63560),co=__webpack_require__.n(ao),lo=__webpack_require__(56367),uo=__webpack_require__.n(lo);const po=\"spec_update_spec\",ho=\"spec_update_url\",fo=\"spec_update_json\",mo=\"spec_update_param\",go=\"spec_update_empty_param_inclusion\",yo=\"spec_validate_param\",vo=\"spec_set_response\",bo=\"spec_set_request\",_o=\"spec_set_mutated_request\",So=\"spec_log_request\",Eo=\"spec_clear_response\",wo=\"spec_clear_request\",xo=\"spec_clear_validate_param\",ko=\"spec_update_operation_meta_value\",Oo=\"spec_update_resolved\",Ao=\"spec_update_resolved_subtree\",Co=\"set_scheme\",toStr=s=>so()(s)?s:\"\";function updateSpec(s){const o=toStr(s).replace(/\\t/g,\" \");if(\"string\"==typeof s)return{type:po,payload:o}}function updateResolved(s){return{type:Oo,payload:s}}function updateUrl(s){return{type:ho,payload:s}}function updateJsonSpec(s){return{type:fo,payload:s}}const parseToJson=s=>({specActions:o,specSelectors:i,errActions:a})=>{let{specStr:u}=i,_=null;try{s=s||u(),a.clear({source:\"parser\"}),_=fn.load(s,{schema:rn})}catch(s){return console.error(s),a.newSpecErr({source:\"parser\",level:\"error\",message:s.reason,line:s.mark&&s.mark.line?s.mark.line+1:void 0})}return _&&\"object\"==typeof _?o.updateJsonSpec(_):o.updateJsonSpec({})};let jo=!1;const resolveSpec=(s,o)=>({specActions:i,specSelectors:a,errActions:u,fn:{fetch:_,resolve:w,AST:x={}},getConfigs:C})=>{jo||(console.warn(\"specActions.resolveSpec is deprecated since v3.10.0 and will be removed in v4.0.0; use requestResolvedSubtree instead!\"),jo=!0);const{modelPropertyMacro:j,parameterMacro:L,requestInterceptor:B,responseInterceptor:$}=C();void 0===s&&(s=a.specJson()),void 0===o&&(o=a.url());let U=x.getLineNumberForPath?x.getLineNumberForPath:()=>{},V=a.specStr();return w({fetch:_,spec:s,baseDoc:String(new URL(o,document.baseURI)),modelPropertyMacro:j,parameterMacro:L,requestInterceptor:B,responseInterceptor:$}).then((({spec:s,errors:o})=>{if(u.clear({type:\"thrown\"}),Array.isArray(o)&&o.length>0){let s=o.map((s=>(console.error(s),s.line=s.fullPath?U(V,s.fullPath):null,s.path=s.fullPath?s.fullPath.join(\".\"):null,s.level=\"error\",s.type=\"thrown\",s.source=\"resolver\",Object.defineProperty(s,\"message\",{enumerable:!0,value:s.message}),s)));u.newThrownErrBatch(s)}return i.updateResolved(s)}))};let Po=[];const Io=io()((()=>{const s=Po.reduce(((s,{path:o,system:i})=>(s.has(i)||s.set(i,[]),s.get(i).push(o),s)),new Map);Po=[],s.forEach((async(s,o)=>{if(!o)return void console.error(\"debResolveSubtrees: don't have a system to operate on, aborting.\");if(!o.fn.resolveSubtree)return void console.error(\"Error: Swagger-Client did not provide a `resolveSubtree` method, doing nothing.\");const{errActions:i,errSelectors:a,fn:{resolveSubtree:u,fetch:_,AST:w={}},specSelectors:x,specActions:C}=o,j=w.getLineNumberForPath??xs()(void 0),L=x.specStr(),{modelPropertyMacro:B,parameterMacro:$,requestInterceptor:U,responseInterceptor:V}=o.getConfigs();try{const o=await s.reduce((async(s,o)=>{let{resultMap:w,specWithCurrentSubtrees:C}=await s;const{errors:z,spec:Y}=await u(C,o,{baseDoc:String(new URL(x.url(),document.baseURI)),modelPropertyMacro:B,parameterMacro:$,requestInterceptor:U,responseInterceptor:V});if(a.allErrors().size&&i.clearBy((s=>\"thrown\"!==s.get(\"type\")||\"resolver\"!==s.get(\"source\")||!s.get(\"fullPath\")?.every(((s,i)=>s===o[i]||void 0===o[i])))),Array.isArray(z)&&z.length>0){let s=z.map((s=>(s.line=s.fullPath?j(L,s.fullPath):null,s.path=s.fullPath?s.fullPath.join(\".\"):null,s.level=\"error\",s.type=\"thrown\",s.source=\"resolver\",Object.defineProperty(s,\"message\",{enumerable:!0,value:s.message}),s)));i.newThrownErrBatch(s)}return Y&&x.isOAS3()&&\"components\"===o[0]&&\"securitySchemes\"===o[1]&&await Promise.all(Object.values(Y).filter((s=>\"openIdConnect\"===s?.type)).map((async s=>{const o={url:s.openIdConnectUrl,requestInterceptor:U,responseInterceptor:V};try{const i=await _(o);i instanceof Error||i.status>=400?console.error(i.statusText+\" \"+o.url):s.openIdConnectData=JSON.parse(i.text)}catch(s){console.error(s)}}))),co()(w,o,Y),C=uo()(o,Y,C),{resultMap:w,specWithCurrentSubtrees:C}}),Promise.resolve({resultMap:(x.specResolvedSubtree([])||(0,ze.Map)()).toJS(),specWithCurrentSubtrees:x.specJS()}));C.updateResolvedSubtree([],o.resultMap)}catch(s){console.error(s)}}))}),35),requestResolvedSubtree=s=>o=>{Po.find((({path:i,system:a})=>a===o&&i.toString()===s.toString()))||(Po.push({path:s,system:o}),Io())};function changeParam(s,o,i,a,u){return{type:mo,payload:{path:s,value:a,paramName:o,paramIn:i,isXml:u}}}function changeParamByIdentity(s,o,i,a){return{type:mo,payload:{path:s,param:o,value:i,isXml:a}}}const updateResolvedSubtree=(s,o)=>({type:Ao,payload:{path:s,value:o}}),invalidateResolvedSubtreeCache=()=>({type:Ao,payload:{path:[],value:(0,ze.Map)()}}),validateParams=(s,o)=>({type:yo,payload:{pathMethod:s,isOAS3:o}}),updateEmptyParamInclusion=(s,o,i,a)=>({type:go,payload:{pathMethod:s,paramName:o,paramIn:i,includeEmptyValue:a}});function clearValidateParams(s){return{type:xo,payload:{pathMethod:s}}}function changeConsumesValue(s,o){return{type:ko,payload:{path:s,value:o,key:\"consumes_value\"}}}function changeProducesValue(s,o){return{type:ko,payload:{path:s,value:o,key:\"produces_value\"}}}const setResponse=(s,o,i)=>({payload:{path:s,method:o,res:i},type:vo}),setRequest=(s,o,i)=>({payload:{path:s,method:o,req:i},type:bo}),setMutatedRequest=(s,o,i)=>({payload:{path:s,method:o,req:i},type:_o}),logRequest=s=>({payload:s,type:So}),executeRequest=s=>({fn:o,specActions:i,specSelectors:a,getConfigs:u,oas3Selectors:_})=>{let{pathName:w,method:x,operation:C}=s,{requestInterceptor:j,responseInterceptor:L}=u(),B=C.toJS();if(C&&C.get(\"parameters\")&&C.get(\"parameters\").filter((s=>s&&!0===s.get(\"allowEmptyValue\"))).forEach((o=>{if(a.parameterInclusionSettingFor([w,x],o.get(\"name\"),o.get(\"in\"))){s.parameters=s.parameters||{};const i=paramToValue(o,s.parameters);(!i||i&&0===i.size)&&(s.parameters[o.get(\"name\")]=\"\")}})),s.contextUrl=Nt()(a.url()).toString(),B&&B.operationId?s.operationId=B.operationId:B&&w&&x&&(s.operationId=o.opId(B,w,x)),a.isOAS3()){const o=`${w}:${x}`;s.server=_.selectedServer(o)||_.selectedServer();const i=_.serverVariables({server:s.server,namespace:o}).toJS(),a=_.serverVariables({server:s.server}).toJS();s.serverVariables=Object.keys(i).length?i:a,s.requestContentType=_.requestContentType(w,x),s.responseContentType=_.responseContentType(w,x)||\"*/*\";const u=_.requestBodyValue(w,x),C=_.requestBodyInclusionSetting(w,x);u&&u.toJS?s.requestBody=u.map((s=>ze.Map.isMap(s)?s.get(\"value\"):s)).filter(((s,o)=>(Array.isArray(s)?0!==s.length:!isEmptyValue(s))||C.get(o))).toJS():s.requestBody=u}let $=Object.assign({},s);$=o.buildRequest($),i.setRequest(s.pathName,s.method,$);s.requestInterceptor=async o=>{let a=await j.apply(void 0,[o]),u=Object.assign({},a);return i.setMutatedRequest(s.pathName,s.method,u),a},s.responseInterceptor=L;const U=Date.now();return o.execute(s).then((o=>{o.duration=Date.now()-U,i.setResponse(s.pathName,s.method,o)})).catch((o=>{\"Failed to fetch\"===o.message&&(o.name=\"\",o.message='**Failed to fetch.** \\n**Possible Reasons:** \\n - CORS \\n - Network Failure \\n - URL scheme must be \"http\" or \"https\" for CORS request.'),i.setResponse(s.pathName,s.method,{error:!0,err:o})}))},actions_execute=({path:s,method:o,...i}={})=>a=>{let{fn:{fetch:u},specSelectors:_,specActions:w}=a,x=_.specJsonWithResolvedSubtrees().toJS(),C=_.operationScheme(s,o),{requestContentType:j,responseContentType:L}=_.contentTypeValues([s,o]).toJS(),B=/xml/i.test(j),$=_.parameterValues([s,o],B).toJS();return w.executeRequest({...i,fetch:u,spec:x,pathName:s,method:o,parameters:$,requestContentType:j,scheme:C,responseContentType:L})};function clearResponse(s,o){return{type:Eo,payload:{path:s,method:o}}}function clearRequest(s,o){return{type:wo,payload:{path:s,method:o}}}function setScheme(s,o,i){return{type:Co,payload:{scheme:s,path:o,method:i}}}const To={[po]:(s,o)=>\"string\"==typeof o.payload?s.set(\"spec\",o.payload):s,[ho]:(s,o)=>s.set(\"url\",o.payload+\"\"),[fo]:(s,o)=>s.set(\"json\",fromJSOrdered(o.payload)),[Oo]:(s,o)=>s.setIn([\"resolved\"],fromJSOrdered(o.payload)),[Ao]:(s,o)=>{const{value:i,path:a}=o.payload;return s.setIn([\"resolvedSubtrees\",...a],fromJSOrdered(i))},[mo]:(s,{payload:o})=>{let{path:i,paramName:a,paramIn:u,param:_,value:w,isXml:x}=o,C=_?paramToIdentifier(_):`${u}.${a}`;const j=x?\"value_xml\":\"value\";return s.setIn([\"meta\",\"paths\",...i,\"parameters\",C,j],(0,ze.fromJS)(w))},[go]:(s,{payload:o})=>{let{pathMethod:i,paramName:a,paramIn:u,includeEmptyValue:_}=o;if(!a||!u)return console.warn(\"Warning: UPDATE_EMPTY_PARAM_INCLUSION could not generate a paramKey.\"),s;const w=`${u}.${a}`;return s.setIn([\"meta\",\"paths\",...i,\"parameter_inclusions\",w],_)},[yo]:(s,{payload:{pathMethod:o,isOAS3:i}})=>{const a=Ns(s).getIn([\"paths\",...o]),u=parameterValues(s,o).toJS();return s.updateIn([\"meta\",\"paths\",...o,\"parameters\"],(0,ze.fromJS)({}),(_=>a.get(\"parameters\",(0,ze.List)()).reduce(((a,_)=>{const w=paramToValue(_,u),x=parameterInclusionSettingFor(s,o,_.get(\"name\"),_.get(\"in\")),C=((s,o,{isOAS3:i=!1,bypassRequiredCheck:a=!1}={})=>{let u=s.get(\"required\"),{schema:_,parameterContentMediaType:w}=getParameterSchema(s,{isOAS3:i});return validateValueBySchema(o,_,u,a,w)})(_,w,{bypassRequiredCheck:x,isOAS3:i});return a.setIn([paramToIdentifier(_),\"errors\"],(0,ze.fromJS)(C))}),_)))},[xo]:(s,{payload:{pathMethod:o}})=>s.updateIn([\"meta\",\"paths\",...o,\"parameters\"],(0,ze.fromJS)([]),(s=>s.map((s=>s.set(\"errors\",(0,ze.fromJS)([])))))),[vo]:(s,{payload:{res:o,path:i,method:a}})=>{let u;u=o.error?Object.assign({error:!0,name:o.err.name,message:o.err.message,statusCode:o.err.statusCode},o.err.response):o,u.headers=u.headers||{};let _=s.setIn([\"responses\",i,a],fromJSOrdered(u));return lt.Blob&&u.data instanceof lt.Blob&&(_=_.setIn([\"responses\",i,a,\"text\"],u.data)),_},[bo]:(s,{payload:{req:o,path:i,method:a}})=>s.setIn([\"requests\",i,a],fromJSOrdered(o)),[_o]:(s,{payload:{req:o,path:i,method:a}})=>s.setIn([\"mutatedRequests\",i,a],fromJSOrdered(o)),[ko]:(s,{payload:{path:o,value:i,key:a}})=>{let u=[\"paths\",...o],_=[\"meta\",\"paths\",...o];return s.getIn([\"json\",...u])||s.getIn([\"resolved\",...u])||s.getIn([\"resolvedSubtrees\",...u])?s.setIn([..._,a],(0,ze.fromJS)(i)):s},[Eo]:(s,{payload:{path:o,method:i}})=>s.deleteIn([\"responses\",o,i]),[wo]:(s,{payload:{path:o,method:i}})=>s.deleteIn([\"requests\",o,i]),[Co]:(s,{payload:{scheme:o,path:i,method:a}})=>i&&a?s.setIn([\"scheme\",i,a],o):i||a?void 0:s.setIn([\"scheme\",\"_defaultScheme\"],o)},wrap_actions_updateSpec=(s,{specActions:o})=>(...i)=>{s(...i),o.parseToJson(...i)},wrap_actions_updateJsonSpec=(s,{specActions:o})=>(...i)=>{s(...i),o.invalidateResolvedSubtreeCache();const[a]=i,u=Cn()(a,[\"paths\"])||{};Object.keys(u).forEach((s=>{const i=Cn()(u,[s]);as()(i)&&i.$ref&&o.requestResolvedSubtree([\"paths\",s])})),o.requestResolvedSubtree([\"components\",\"securitySchemes\"])},wrap_actions_executeRequest=(s,{specActions:o})=>i=>(o.logRequest(i),s(i)),wrap_actions_validateParams=(s,{specSelectors:o})=>i=>s(i,o.isOAS3()),plugins_spec=()=>({statePlugins:{spec:{wrapActions:{...Y},reducers:{...To},actions:{...z},selectors:{...V}}}});var No=function(){var extendStatics=function(s,o){return extendStatics=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(s,o){s.__proto__=o}||function(s,o){for(var i in o)o.hasOwnProperty(i)&&(s[i]=o[i])},extendStatics(s,o)};return function(s,o){function __(){this.constructor=s}extendStatics(s,o),s.prototype=null===o?Object.create(o):(__.prototype=o.prototype,new __)}}(),Mo=Object.prototype.hasOwnProperty;function module_helpers_hasOwnProperty(s,o){return Mo.call(s,o)}function _objectKeys(s){if(Array.isArray(s)){for(var o=new Array(s.length),i=0;i=48&&o<=57))return!1;i++}return!0}function escapePathComponent(s){return-1===s.indexOf(\"/\")&&-1===s.indexOf(\"~\")?s:s.replace(/~/g,\"~0\").replace(/\\//g,\"~1\")}function unescapePathComponent(s){return s.replace(/~1/g,\"/\").replace(/~0/g,\"~\")}function hasUndefined(s){if(void 0===s)return!0;if(s)if(Array.isArray(s)){for(var o=0,i=s.length;o0&&\"constructor\"==x[j-1]))throw new TypeError(\"JSON-Patch: modifying `__proto__` or `constructor/prototype` prop is banned for security reasons, if this was on purpose, please set `banPrototypeModifications` flag false and pass it to this function. More info in fast-json-patch README\");if(i&&void 0===B&&(void 0===C[$]?B=x.slice(0,j).join(\"/\"):j==L-1&&(B=o.path),void 0!==B&&U(o,0,s,B)),j++,Array.isArray(C)){if(\"-\"===$)$=C.length;else{if(i&&!helpers_isInteger($))throw new Do(\"Expected an unsigned base-10 integer value, making the new referenced value the array element with the zero-based index\",\"OPERATION_PATH_ILLEGAL_ARRAY_INDEX\",_,o,s);helpers_isInteger($)&&($=~~$)}if(j>=L){if(i&&\"add\"===o.op&&$>C.length)throw new Do(\"The specified index MUST NOT be greater than the number of elements in the array\",\"OPERATION_VALUE_OUT_OF_BOUNDS\",_,o,s);if(!1===(w=Bo[o.op].call(o,C,$,s)).test)throw new Do(\"Test operation failed\",\"TEST_OPERATION_FAILED\",_,o,s);return w}}else if(j>=L){if(!1===(w=Fo[o.op].call(o,C,$,s)).test)throw new Do(\"Test operation failed\",\"TEST_OPERATION_FAILED\",_,o,s);return w}if(C=C[$],i&&j0)throw new Do('Operation `path` property must start with \"/\"',\"OPERATION_PATH_INVALID\",o,s,i);if((\"move\"===s.op||\"copy\"===s.op)&&\"string\"!=typeof s.from)throw new Do(\"Operation `from` property is not present (applicable in `move` and `copy` operations)\",\"OPERATION_FROM_REQUIRED\",o,s,i);if((\"add\"===s.op||\"replace\"===s.op||\"test\"===s.op)&&void 0===s.value)throw new Do(\"Operation `value` property is not present (applicable in `add`, `replace` and `test` operations)\",\"OPERATION_VALUE_REQUIRED\",o,s,i);if((\"add\"===s.op||\"replace\"===s.op||\"test\"===s.op)&&hasUndefined(s.value))throw new Do(\"Operation `value` property is not present (applicable in `add`, `replace` and `test` operations)\",\"OPERATION_VALUE_CANNOT_CONTAIN_UNDEFINED\",o,s,i);if(i)if(\"add\"==s.op){var u=s.path.split(\"/\").length,_=a.split(\"/\").length;if(u!==_+1&&u!==_)throw new Do(\"Cannot perform an `add` operation at the desired path\",\"OPERATION_PATH_CANNOT_ADD\",o,s,i)}else if(\"replace\"===s.op||\"remove\"===s.op||\"_get\"===s.op){if(s.path!==a)throw new Do(\"Cannot perform the operation at a path that does not exist\",\"OPERATION_PATH_UNRESOLVABLE\",o,s,i)}else if(\"move\"===s.op||\"copy\"===s.op){var w=validate([{op:\"_get\",path:s.from,value:void 0}],i);if(w&&\"OPERATION_PATH_UNRESOLVABLE\"===w.name)throw new Do(\"Cannot perform the operation from a path that does not exist\",\"OPERATION_FROM_UNRESOLVABLE\",o,s,i)}}function validate(s,o,i){try{if(!Array.isArray(s))throw new Do(\"Patch sequence must be an array\",\"SEQUENCE_NOT_AN_ARRAY\");if(o)applyPatch(_deepClone(o),_deepClone(s),i||!0);else{i=i||validator;for(var a=0;a0&&(s.patches=[],s.callback&&s.callback(a)),a}function _generate(s,o,i,a,u){if(o!==s){\"function\"==typeof o.toJSON&&(o=o.toJSON());for(var _=_objectKeys(o),w=_objectKeys(s),x=!1,C=w.length-1;C>=0;C--){var j=s[B=w[C]];if(!module_helpers_hasOwnProperty(o,B)||void 0===o[B]&&void 0!==j&&!1===Array.isArray(o))Array.isArray(s)===Array.isArray(o)?(u&&i.push({op:\"test\",path:a+\"/\"+escapePathComponent(B),value:_deepClone(j)}),i.push({op:\"remove\",path:a+\"/\"+escapePathComponent(B)}),x=!0):(u&&i.push({op:\"test\",path:a,value:s}),i.push({op:\"replace\",path:a,value:o}),!0);else{var L=o[B];\"object\"==typeof j&&null!=j&&\"object\"==typeof L&&null!=L&&Array.isArray(j)===Array.isArray(L)?_generate(j,L,i,a+\"/\"+escapePathComponent(B),u):j!==L&&(u&&i.push({op:\"test\",path:a+\"/\"+escapePathComponent(B),value:_deepClone(j)}),i.push({op:\"replace\",path:a+\"/\"+escapePathComponent(B),value:_deepClone(L)}))}}if(x||_.length!=w.length)for(C=0;C<_.length;C++){var B;module_helpers_hasOwnProperty(s,B=_[C])||void 0===o[B]||i.push({op:\"add\",path:a+\"/\"+escapePathComponent(B),value:_deepClone(o[B])})}}}function compare(s,o,i){void 0===i&&(i=!1);var a=[];return _generate(s,o,a,\"\",i),a}Object.assign({},Z,ee,{JsonPatchError:Ro,deepClone:_deepClone,escapePathComponent,unescapePathComponent});var Vo=__webpack_require__(14744),zo=__webpack_require__.n(Vo);const Wo={add:function add(s,o){return{op:\"add\",path:s,value:o}},replace,remove:function remove(s){return{op:\"remove\",path:s}},merge:function lib_merge(s,o){return{type:\"mutation\",op:\"merge\",path:s,value:o}},mergeDeep:function mergeDeep(s,o){return{type:\"mutation\",op:\"mergeDeep\",path:s,value:o}},context:function context(s,o){return{type:\"context\",path:s,value:o}},getIn:function lib_getIn(s,o){return o.reduce(((s,o)=>void 0!==o&&s?s[o]:s),s)},applyPatch:function lib_applyPatch(s,o,i){if(i=i||{},\"merge\"===(o={...o,path:o.path&&normalizeJSONPath(o.path)}).op){const i=getInByJsonPath(s,o.path);Object.assign(i,o.value),applyPatch(s,[replace(o.path,i)])}else if(\"mergeDeep\"===o.op){const i=getInByJsonPath(s,o.path),a=zo()(i,o.value,{customMerge:s=>{if(\"enum\"===s)return(s,o)=>Array.isArray(s)&&Array.isArray(o)?[...new Set([...s,...o])]:zo()(s,o)}});s=applyPatch(s,[replace(o.path,a)]).newDocument}else if(\"add\"===o.op&&\"\"===o.path&&lib_isObject(o.value)){applyPatch(s,Object.keys(o.value).reduce(((s,i)=>(s.push({op:\"add\",path:`/${normalizeJSONPath(i)}`,value:o.value[i]}),s)),[]))}else if(\"replace\"===o.op&&\"\"===o.path){let{value:a}=o;i.allowMetaPatches&&o.meta&&isAdditiveMutation(o)&&(Array.isArray(o.value)||lib_isObject(o.value))&&(a={...a,...o.meta}),s=a}else if(applyPatch(s,[o]),i.allowMetaPatches&&o.meta&&isAdditiveMutation(o)&&(Array.isArray(o.value)||lib_isObject(o.value))){const i={...getInByJsonPath(s,o.path),...o.meta};applyPatch(s,[replace(o.path,i)])}return s},parentPathMatch:function parentPathMatch(s,o){if(!Array.isArray(o))return!1;for(let i=0,a=o.length;i(s+\"\").replace(/~/g,\"~0\").replace(/\\//g,\"~1\"))).join(\"/\")}`:s}function replace(s,o,i){return{op:\"replace\",path:s,value:o,meta:i}}function forEachNewPatch(s,o,i){return cleanArray(flatten(s.filter(isAdditiveMutation).map((s=>o(s.value,i,s.path)))||[]))}function forEachPrimitive(s,o,i){return i=i||[],Array.isArray(s)?s.map(((s,a)=>forEachPrimitive(s,o,i.concat(a)))):lib_isObject(s)?Object.keys(s).map((a=>forEachPrimitive(s[a],o,i.concat(a)))):o(s,i[i.length-1],i)}function forEach(s,o,i){let a=[];if((i=i||[]).length>0){const u=o(s,i[i.length-1],i);u&&(a=a.concat(u))}if(Array.isArray(s)){const u=s.map(((s,a)=>forEach(s,o,i.concat(a))));u&&(a=a.concat(u))}else if(lib_isObject(s)){const u=Object.keys(s).map((a=>forEach(s[a],o,i.concat(a))));u&&(a=a.concat(u))}return a=flatten(a),a}function lib_normalizeArray(s){return Array.isArray(s)?s:[s]}function flatten(s){return[].concat(...s.map((s=>Array.isArray(s)?flatten(s):s)))}function cleanArray(s){return s.filter((s=>void 0!==s))}function lib_isObject(s){return s&&\"object\"==typeof s}function lib_isFunction(s){return s&&\"function\"==typeof s}function isJsonPatch(s){if(isPatch(s)){const{op:o}=s;return\"add\"===o||\"remove\"===o||\"replace\"===o}return!1}function isMutation(s){return isJsonPatch(s)||isPatch(s)&&\"mutation\"===s.type}function isAdditiveMutation(s){return isMutation(s)&&(\"add\"===s.op||\"replace\"===s.op||\"merge\"===s.op||\"mergeDeep\"===s.op)}function isPatch(s){return s&&\"object\"==typeof s}function getInByJsonPath(s,o){try{return getValueByPointer(s,o)}catch(s){return console.error(s),{}}}var Jo=__webpack_require__(48675);const Ho=class ApiDOMAggregateError extends Jo{constructor(s,o,i){if(super(s,o,i),this.name=this.constructor.name,\"string\"==typeof o&&(this.message=o),\"function\"==typeof Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=new Error(o).stack,null!=i&&\"object\"==typeof i&&Object.hasOwn(i,\"cause\")&&!(\"cause\"in this)){const{cause:s}=i;this.cause=s,s instanceof Error&&\"stack\"in s&&(this.stack=`${this.stack}\\nCAUSE: ${s.stack}`)}}};class ApiDOMError extends Error{static[Symbol.hasInstance](s){return super[Symbol.hasInstance](s)||Function.prototype[Symbol.hasInstance].call(Ho,s)}constructor(s,o){if(super(s,o),this.name=this.constructor.name,\"string\"==typeof s&&(this.message=s),\"function\"==typeof Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=new Error(s).stack,null!=o&&\"object\"==typeof o&&Object.hasOwn(o,\"cause\")&&!(\"cause\"in this)){const{cause:s}=o;this.cause=s,s instanceof Error&&\"stack\"in s&&(this.stack=`${this.stack}\\nCAUSE: ${s.stack}`)}}}const Ko=ApiDOMError;const Go=class ApiDOMStructuredError extends Ko{constructor(s,o){if(super(s,o),null!=o&&\"object\"==typeof o){const{cause:s,...i}=o;Object.assign(this,i)}}};var Yo=__webpack_require__(65606);function _isPlaceholder(s){return null!=s&&\"object\"==typeof s&&!0===s[\"@@functional/placeholder\"]}function _curry1(s){return function f1(o){return 0===arguments.length||_isPlaceholder(o)?f1:s.apply(this,arguments)}}function _curry2(s){return function f2(o,i){switch(arguments.length){case 0:return f2;case 1:return _isPlaceholder(o)?f2:_curry1((function(i){return s(o,i)}));default:return _isPlaceholder(o)&&_isPlaceholder(i)?f2:_isPlaceholder(o)?_curry1((function(o){return s(o,i)})):_isPlaceholder(i)?_curry1((function(i){return s(o,i)})):s(o,i)}}}function _curry3(s){return function f3(o,i,a){switch(arguments.length){case 0:return f3;case 1:return _isPlaceholder(o)?f3:_curry2((function(i,a){return s(o,i,a)}));case 2:return _isPlaceholder(o)&&_isPlaceholder(i)?f3:_isPlaceholder(o)?_curry2((function(o,a){return s(o,i,a)})):_isPlaceholder(i)?_curry2((function(i,a){return s(o,i,a)})):_curry1((function(a){return s(o,i,a)}));default:return _isPlaceholder(o)&&_isPlaceholder(i)&&_isPlaceholder(a)?f3:_isPlaceholder(o)&&_isPlaceholder(i)?_curry2((function(o,i){return s(o,i,a)})):_isPlaceholder(o)&&_isPlaceholder(a)?_curry2((function(o,a){return s(o,i,a)})):_isPlaceholder(i)&&_isPlaceholder(a)?_curry2((function(i,a){return s(o,i,a)})):_isPlaceholder(o)?_curry1((function(o){return s(o,i,a)})):_isPlaceholder(i)?_curry1((function(i){return s(o,i,a)})):_isPlaceholder(a)?_curry1((function(a){return s(o,i,a)})):s(o,i,a)}}}const Xo=Number.isInteger||function _isInteger(s){return(s|0)===s};function _isString(s){return\"[object String]\"===Object.prototype.toString.call(s)}function _nth(s,o){var i=s<0?o.length+s:s;return _isString(o)?o.charAt(i):o[i]}function _path(s,o){for(var i=o,a=0;a=0;)_has(o=Pi[i],s)&&!Ri(a,o)&&(a[a.length]=o),i-=1;return a})):_curry1((function keys(s){return Object(s)!==s?[]:Object.keys(s)}));const ea=Wi;const ra=_curry1((function type(s){return null===s?\"Null\":void 0===s?\"Undefined\":Object.prototype.toString.call(s).slice(8,-1)}));function _uniqContentEquals(s,o,i,a){var u=_arrayFromIterator(s);function eq(s,o){return _equals(s,o,i.slice(),a.slice())}return!_includesWith((function(s,o){return!_includesWith(eq,o,s)}),_arrayFromIterator(o),u)}function _equals(s,o,i,a){if(Zo(s,o))return!0;var u=ra(s);if(u!==ra(o))return!1;if(\"function\"==typeof s[\"fantasy-land/equals\"]||\"function\"==typeof o[\"fantasy-land/equals\"])return\"function\"==typeof s[\"fantasy-land/equals\"]&&s[\"fantasy-land/equals\"](o)&&\"function\"==typeof o[\"fantasy-land/equals\"]&&o[\"fantasy-land/equals\"](s);if(\"function\"==typeof s.equals||\"function\"==typeof o.equals)return\"function\"==typeof s.equals&&s.equals(o)&&\"function\"==typeof o.equals&&o.equals(s);switch(u){case\"Arguments\":case\"Array\":case\"Object\":if(\"function\"==typeof s.constructor&&\"Promise\"===function _functionName(s){var o=String(s).match(/^function (\\w*)/);return null==o?\"\":o[1]}(s.constructor))return s===o;break;case\"Boolean\":case\"Number\":case\"String\":if(typeof s!=typeof o||!Zo(s.valueOf(),o.valueOf()))return!1;break;case\"Date\":if(!Zo(s.valueOf(),o.valueOf()))return!1;break;case\"Error\":return s.name===o.name&&s.message===o.message;case\"RegExp\":if(s.source!==o.source||s.global!==o.global||s.ignoreCase!==o.ignoreCase||s.multiline!==o.multiline||s.sticky!==o.sticky||s.unicode!==o.unicode)return!1}for(var _=i.length-1;_>=0;){if(i[_]===s)return a[_]===o;_-=1}switch(u){case\"Map\":return s.size===o.size&&_uniqContentEquals(s.entries(),o.entries(),i.concat([s]),a.concat([o]));case\"Set\":return s.size===o.size&&_uniqContentEquals(s.values(),o.values(),i.concat([s]),a.concat([o]));case\"Arguments\":case\"Array\":case\"Object\":case\"Boolean\":case\"Number\":case\"String\":case\"Date\":case\"Error\":case\"RegExp\":case\"Int8Array\":case\"Uint8Array\":case\"Uint8ClampedArray\":case\"Int16Array\":case\"Uint16Array\":case\"Int32Array\":case\"Uint32Array\":case\"Float32Array\":case\"Float64Array\":case\"ArrayBuffer\":break;default:return!1}var w=ea(s);if(w.length!==ea(o).length)return!1;var x=i.concat([s]),C=a.concat([o]);for(_=w.length-1;_>=0;){var j=w[_];if(!_has(j,o)||!_equals(o[j],s[j],x,C))return!1;_-=1}return!0}const na=_curry2((function equals(s,o){return _equals(s,o,[],[])}));function _includes(s,o){return function _indexOf(s,o,i){var a,u;if(\"function\"==typeof s.indexOf)switch(typeof o){case\"number\":if(0===o){for(a=1/o;i=0}function _map(s,o){for(var i=0,a=o.length,u=Array(a);i=0&&\"[object Array]\"===Object.prototype.toString.call(s)};function _dispatchable(s,o,i){return function(){if(0===arguments.length)return i();var a=arguments[arguments.length-1];if(!ca(a)){for(var u=0;u\":_toString_toString(i,a)},mapPairs=function(s,o){return _map((function(o){return _quote(o)+\": \"+i(s[o])}),o.slice().sort())};switch(Object.prototype.toString.call(s)){case\"[object Arguments]\":return\"(function() { return arguments; }(\"+_map(i,s).join(\", \")+\"))\";case\"[object Array]\":return\"[\"+_map(i,s).concat(mapPairs(s,ma((function(s){return/^\\d+$/.test(s)}),ea(s)))).join(\", \")+\"]\";case\"[object Boolean]\":return\"object\"==typeof s?\"new Boolean(\"+i(s.valueOf())+\")\":s.toString();case\"[object Date]\":return\"new Date(\"+(isNaN(s.valueOf())?i(NaN):_quote(aa(s)))+\")\";case\"[object Map]\":return\"new Map(\"+i(Array.from(s))+\")\";case\"[object Null]\":return\"null\";case\"[object Number]\":return\"object\"==typeof s?\"new Number(\"+i(s.valueOf())+\")\":1/s==-1/0?\"-0\":s.toString(10);case\"[object Set]\":return\"new Set(\"+i(Array.from(s).sort())+\")\";case\"[object String]\":return\"object\"==typeof s?\"new String(\"+i(s.valueOf())+\")\":_quote(s);case\"[object Undefined]\":return\"undefined\";default:if(\"function\"==typeof s.toString){var a=s.toString();if(\"[object Object]\"!==a)return a}return\"{\"+mapPairs(s,ea(s)).join(\", \")+\"}\"}}const ga=_curry1((function toString(s){return _toString_toString(s,[])}));var ya=_curry2((function test(s,o){if(!function _isRegExp(s){return\"[object RegExp]\"===Object.prototype.toString.call(s)}(s))throw new TypeError(\"‘test’ requires a value of type RegExp as its first argument; received \"+ga(s));return _cloneRegExp(s).test(o)}));const va=ya;function _arity(s,o){switch(s){case 0:return function(){return o.apply(this,arguments)};case 1:return function(s){return o.apply(this,arguments)};case 2:return function(s,i){return o.apply(this,arguments)};case 3:return function(s,i,a){return o.apply(this,arguments)};case 4:return function(s,i,a,u){return o.apply(this,arguments)};case 5:return function(s,i,a,u,_){return o.apply(this,arguments)};case 6:return function(s,i,a,u,_,w){return o.apply(this,arguments)};case 7:return function(s,i,a,u,_,w,x){return o.apply(this,arguments)};case 8:return function(s,i,a,u,_,w,x,C){return o.apply(this,arguments)};case 9:return function(s,i,a,u,_,w,x,C,j){return o.apply(this,arguments)};case 10:return function(s,i,a,u,_,w,x,C,j,L){return o.apply(this,arguments)};default:throw new Error(\"First argument to _arity must be a non-negative integer no greater than ten\")}}function _pipe(s,o){return function(){return o.call(this,s.apply(this,arguments))}}const ba=_curry1((function isArrayLike(s){return!!ca(s)||!!s&&(\"object\"==typeof s&&(!_isString(s)&&(0===s.length||s.length>0&&(s.hasOwnProperty(0)&&s.hasOwnProperty(s.length-1)))))}));var _a=\"undefined\"!=typeof Symbol?Symbol.iterator:\"@@iterator\";function _createReduce(s,o,i){return function _reduce(a,u,_){if(ba(_))return s(a,u,_);if(null==_)return u;if(\"function\"==typeof _[\"fantasy-land/reduce\"])return o(a,u,_,\"fantasy-land/reduce\");if(null!=_[_a])return i(a,u,_[_a]());if(\"function\"==typeof _.next)return i(a,u,_);if(\"function\"==typeof _.reduce)return o(a,u,_,\"reduce\");throw new TypeError(\"reduce: list must be array or iterable\")}}function _xArrayReduce(s,o,i){for(var a=0,u=i.length;a=arguments.length)?C=o[w]:(C=arguments[u],u+=1),a[w]=C,_isPlaceholder(C)?x=!0:_-=1,w+=1}return!x&&_<=0?i.apply(this,a):_arity(Math.max(0,_),_curryN(s,a,i))}}const $a=_curry2((function curryN(s,o){return 1===s?_curry1(o):_arity(s,_curryN(s,[],o))}));const za=_curry1((function curry(s){return $a(s.length,s)}));function _isFunction(s){var o=Object.prototype.toString.call(s);return\"[object Function]\"===o||\"[object AsyncFunction]\"===o||\"[object GeneratorFunction]\"===o||\"[object AsyncGeneratorFunction]\"===o}const Ja=_curry2((function invoker(s,o){return $a(s+1,(function(){var i=arguments[s];if(null!=i&&_isFunction(i[o]))return i[o].apply(i,Array.prototype.slice.call(arguments,0,s));throw new TypeError(ga(i)+' does not have a method named \"'+o+'\"')}))}));const Ha=Ja(1,\"split\");function dropLastWhile(s,o){for(var i=o.length-1;i>=0&&s(o[i]);)i-=1;return ja(0,i+1,o)}var Ga=function(){function XDropLastWhile(s,o){this.f=s,this.retained=[],this.xf=o}return XDropLastWhile.prototype[\"@@transducer/init\"]=_xfBase_init,XDropLastWhile.prototype[\"@@transducer/result\"]=function(s){return this.retained=null,this.xf[\"@@transducer/result\"](s)},XDropLastWhile.prototype[\"@@transducer/step\"]=function(s,o){return this.f(o)?this.retain(s,o):this.flush(s,o)},XDropLastWhile.prototype.flush=function(s,o){return s=wa(this.xf,s,this.retained),this.retained=[],this.xf[\"@@transducer/step\"](s,o)},XDropLastWhile.prototype.retain=function(s,o){return this.retained.push(o),s},XDropLastWhile}();function _xdropLastWhile(s){return function(o){return new Ga(s,o)}}const ec=_curry2(_dispatchable([],_xdropLastWhile,dropLastWhile));const rc=Ja(1,\"join\");const sc=_curry1((function flip(s){return $a(s.length,(function(o,i){var a=Array.prototype.slice.call(arguments,0);return a[0]=i,a[1]=o,s.apply(this,a)}))}))(_curry2(_includes));const oc=za((function(s,o){return pipe(Ha(\"\"),ec(sc(s)),rc(\"\"))(o)}));function _iterableReduce(s,o,i){for(var a=i.next();!a.done;)o=s(o,a.value),a=i.next();return o}function _methodReduce(s,o,i,a){return i[a](s,o)}const ic=_createReduce(_arrayReduce,_methodReduce,_iterableReduce);var ac=function(){function XMap(s,o){this.xf=o,this.f=s}return XMap.prototype[\"@@transducer/init\"]=_xfBase_init,XMap.prototype[\"@@transducer/result\"]=_xfBase_result,XMap.prototype[\"@@transducer/step\"]=function(s,o){return this.xf[\"@@transducer/step\"](s,this.f(o))},XMap}();const cc=_curry2(_dispatchable([\"fantasy-land/map\",\"map\"],(function _xmap(s){return function(o){return new ac(s,o)}}),(function map(s,o){switch(Object.prototype.toString.call(o)){case\"[object Function]\":return $a(o.length,(function(){return s.call(this,o.apply(this,arguments))}));case\"[object Object]\":return _arrayReduce((function(i,a){return i[a]=s(o[a]),i}),{},ea(o));default:return _map(s,o)}})));const lc=_curry2((function ap(s,o){return\"function\"==typeof o[\"fantasy-land/ap\"]?o[\"fantasy-land/ap\"](s):\"function\"==typeof s.ap?s.ap(o):\"function\"==typeof s?function(i){return s(i)(o(i))}:ic((function(s,i){return function _concat(s,o){var i;o=o||[];var a=(s=s||[]).length,u=o.length,_=[];for(i=0;io!=o>s)return o>s?o:s}var i=safeMax(s,o);if(void 0!==i)return i;var a=safeMax(typeof s,typeof o);if(void 0!==a)return a===typeof s?s:o;var u=ga(s),_=safeMax(u,ga(o));return void 0!==_&&_===u?s:o}));var kc=_curry2((function pluck(s,o){return cc(Da(s),o)}));const Oc=kc;const jc=_curry1((function anyPass(s){return $a(Aa(Ec,0,Oc(\"length\",s)),(function(){for(var o=0,i=s.length;oQo(va(/^win/),[\"platform\"],Yo),getProtocol=s=>{try{const o=new URL(s);return oc(\":\",o.protocol)}catch{return}},ul=(pipe(getProtocol,_c),s=>{if(Yo.browser)return!1;const o=getProtocol(s);return bc(o)||\"file\"===o||/^[a-zA-Z]$/.test(o)}),isHttpUrl=s=>{const o=getProtocol(s);return\"http\"===o||\"https\"===o},toFileSystemPath=(s,o)=>{const i=[/%23/g,\"#\",/%24/g,\"$\",/%26/g,\"&\",/%2C/g,\",\",/%40/g,\"@\"],a=La(!1,\"keepFileProtocol\",o),u=La(isWindows,\"isWindows\",o);let _=decodeURI(s);for(let s=0;s ![\"Aledade](\"./img/Aledade_logo.png\"){kind=logo}
](https://www.aledade.com/)\n\n[![\"Jump](\"./img/jumptrading.png\")
](https://www.jumptrading.com/)\n\n[![\"WP](\"./img/wpengine.png\")
](https://wpengine.com/)\n\n#### Silver sponsors\n\n[![\"IDCS](\"./img/IDCS.png\")
](https://idcs.ip-paris.fr/)\n\n#### Bronze sponsors\n\n[![\"7digital](\"./img/7digital.png\")
](https://www.7digital.com/)\n\n[![\"servinga](\"./img/servinga.png\")
](https://servinga.com/)\n\n[![\"ReUI](\"./img/reui.png\")
](https://www.reui.io/)\n\n## Documentation\n\nYou can explore all supported features and configuration options at [docs.sftpgo.com](https://docs.sftpgo.com/latest/).\n\n**Note:** The link above refers to the **Community Edition**.\nFor details on **Enterprise Edition**, please refer to the [Enterprise Documentation](https://docs.sftpgo.com/enterprise/).\n\n## Support\n\n- **Community Support**: use [GitHub Discussions](https://github.com/drakkan/sftpgo/discussions) to ask questions, share feedback, and engage with other users.\n- **Commercial Support**: If you require guaranteed SLAs, expert guidance, or the advanced features listed above, check out [SFTPGo Enterprise](https://sftpgo.com).\n\nSFTPGo Enterprise is available as:\n\n- On-premises: Full control on your infrastructure. More details: [sftpgo.com/on-premises](https://sftpgo.com/on-premises)\n- Fully managed SaaS: We handle the infrastructure. More details: [sftpgo.com/saas](https://sftpgo.com/saas)\n\n## Internationalization\n\nThe translations are available via [Crowdin](https://crowdin.com/project/sftpgo), who have granted us an open source license.\n\nBefore translating please take a look at our contribution [guidelines](https://docs.sftpgo.com/latest/web-interfaces/#internationalization).\n\n## Release Cadence\n\nSFTPGo follows a feature-driven release cycle.\n\n- Enterprise Edition: Receives major new features first and follows a faster [release cadence](https://docs.sftpgo.com/enterprise/changelog/).\n- Community Edition: Remains maintained, receiving bug fixes, security updates, and updates to core features.\n\n## Acknowledgements\n\nSFTPGo makes use of the third party libraries listed inside [go.mod](./go.mod).\n\nWe are very grateful to all the people who contributed with ideas and/or pull requests.\n\nThank you to [ysura](https://www.ysura.com/) for granting us stable access to a test AWS S3 account.\n\nThank you to [KeenThemes](https://keenthemes.com/) for granting us a custom license to use their amazing [themes](https://keenthemes.com/bootstrap-templates) for the SFTPGo WebAdmin and WebClient user interfaces, across both the Open Source and Open Core versions.\n\nThank you to [Crowdin](https://crowdin.com/) for granting us an Open Source License.\n\nThank you to [Incode](https://www.incode.it/) for helping us to improve the UI/UX.\n\n## License\n\nSFTPGo source code is licensed under the GNU AGPL-3.0-only with [additional terms](./NOTICE).\n\nThe [theme](https://keenthemes.com/bootstrap-templates) used in WebAdmin and WebClient user interfaces is proprietary, this means:\n\n- KeenThemes HTML/CSS/JS components are allowed for use only within the SFTPGo product and restricted to be used in a resealable HTML template that can compete with KeenThemes products anyhow.\n- The SFTPGo WebAdmin and WebClient user interfaces (HTML, CSS and JS components) based on this theme are allowed for use only within the SFTPGo product and therefore cannot be used in derivative works/products without an explicit grant from the [SFTPGo Team](mailto:support@sftpgo.com).\n\nMore information about [compliance](https://sftpgo.com/compliance.html).\n\n**Note:** We do not provide legal advice. If you have questions about license compliance or whether your use case is permitted under the license terms, please consult your legal team.\n\n## Copyright\n\nCopyright (C) 2019 - 2026 Nicola Murino\n"
},
{
"path": "SECURITY.md",
"content": "# Security Policy\n\n## Supported Versions\n\nWe actively maintain the latest stable release of SFTPGo. While we strive to keep the Open Source version secure and up-to-date, maintenance is performed on a best-effort basis by the community and contributors.\n\n## Scope and Dependency Policy\n\nOur security advisories focus on vulnerabilities found within the **SFTPGo codebase itself**.\n\nTo ensure the long-term sustainability of the project, we handle upstream dependencies (like the Go standard library, external packages, or Docker base images) as follows:\n\n- Community Updates: For the Open Source version, vulnerabilities in upstream components (such as the Go standard library or third-party packages) are addressed during our **regular release cycles**. We generally do not provide immediate, out-of-band or ad-hoc releases to address dependency-only CVEs.\n- Empowering Users: One of the strengths of SFTPGo being open-source is that you have full control. If your security scanners require an immediate fix, you can always rebuild the project using the latest patched Go toolchain or updated dependencies.\n- Compatibility: We are committed to keeping SFTPGo compatible with the latest stable Go compiler. If an upstream fix breaks SFTPGo, fixing that becomes a priority for us.\n- Professional Needs: We understand that some organizations have strict compliance requirements or internal SLAs that require guaranteed, immediate response times and out-of-band patches. For these cases, we offer [SFTPGo Enterprise](https://sftpgo.com/on-premises) to cover the additional maintenance and support overhead.\n\n## Reporting a Vulnerability\n\nTo report (possible) security issues in SFTPGo, please either send a mail to the [SFTPGo Team](mailto:support@sftpgo.com) or use Github's [private reporting feature](https://github.com/drakkan/sftpgo/security/advisories/new).\n"
},
{
"path": "crowdin.yml",
"content": "project_id_env: CROWDIN_PROJECT_ID\napi_token_env: CROWDIN_PERSONAL_TOKEN\nfiles:\n - source: /static/locales/en/translation.json\n translation: /static/locales/%two_letters_code%/%original_file_name%\n type: i18next_json\n"
},
{
"path": "docker/scripts/download-plugins.sh",
"content": "#!/usr/bin/env bash\nset -euo pipefail\n\nARCH=$(uname -m)\n\ncase ${ARCH} in\n x86_64)\n SUFFIX=amd64\n ;;\n aarch64)\n SUFFIX=arm64\n ;;\n *)\n SUFFIX=ppc64le\n ;;\nesac\n\necho \"Downloading plugins for arch ${SUFFIX}\"\n\nPLUGINS=(geoipfilter kms pubsub eventstore eventsearch auth)\n\nfor PLUGIN in \"${PLUGINS[@]}\"; do\n URL=\"https://github.com/sftpgo/sftpgo-plugin-${PLUGIN}/releases/latest/download/sftpgo-plugin-${PLUGIN}-linux-${SUFFIX}\"\n DEST=\"/usr/local/bin/sftpgo-plugin-${PLUGIN}\"\n\n echo \"Downloading ${PLUGIN}...\"\n if curl --fail --silent --show-error -L \"${URL}\" --output \"${DEST}\"; then\n chmod 755 \"${DEST}\"\n else\n echo \"Error: Failed to download ${PLUGIN}\" >&2\n exit 1\n fi\ndone\n\necho \"All plugins downloaded successfully\"\n"
},
{
"path": "examples/OTP/authy/README.md",
"content": "# Authy\n\nThese example show how-to integrate [Twilio Authy API](https://www.twilio.com/docs/authy/api) for One-Time-Password logins.\n\nThe examples assume that the user has the free [Authy app](https://authy.com/) installed and uses it to generate offline [TOTP](https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm) codes (soft tokens).\n\nYou first need to [create an Authy Application in the Twilio Console](https://twilio.com/console/authy/applications?_ga=2.205553366.451688189.1597667213-1526360003.1597667213), then you can create a new Authy user and store a reference to the matching SFTPGo account.\n\nVerify that your Authy application is successfully registered:\n\n```bash\nexport AUTHY_API_KEY=