Microsoft.PowerApps.PowerShell

1.0.13

Microsoft.PowerApps.AuthModule.psm1

                                $local:ErrorActionPreference = "Stop"

<#

If(Get-Module -ListAvailable -Name (Join-Path (Split-Path $script:MyInvocation.MyCommand.Path) "Microsoft.PowerApps.RestClientModule.psm1"))

{

    Write-Host "Module loaded"

}

else

{

    Import-Module (Join-Path (Split-Path $script:MyInvocation.MyCommand.Path) "Microsoft.PowerApps.RestClientModule.psm1") -NoClobber #-Force

}

#>

#[Reflection.Assembly]::LoadFile("$(Split-Path $script:MyInvocation.MyCommand.Path)\Microsoft.IdentityModel.Clients.ActiveDirectory.dll") | Out-Null

#[Reflection.Assembly]::LoadFile("$(Split-Path $script:MyInvocation.MyCommand.Path)\Microsoft.IdentityModel.Clients.ActiveDirectory.WindowsForms.dll") | Out-Null

function Get-JwtTokenClaims

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string]$JwtToken

    )

    $tokenSplit = $JwtToken.Split(".")

    $claimsSegment = $tokenSplit[1].Replace(" ", "+").Replace("-", "+");

    $mod = $claimsSegment.Length % 4

    if ($mod -gt 0)

    {

        $paddingCount = 4 - $mod;

        for ($i = 0; $i -lt $paddingCount; $i++)

        {

            $claimsSegment += "="

        }

    }

    $decodedClaimsSegment = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($claimsSegment))

    return ConvertFrom-Json $decodedClaimsSegment

}

function Add-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

        [string] $Audience = "https://management.azure.com/",

        [Parameter(Mandatory = $false)]

        [ValidateSet("prod","preview","tip1", "tip2", "usgov", "usgovhigh")]

        [string]$Endpoint = "prod",

        [string]$Username = $null,

        [SecureString]$Password = $null

    )

    $authContext = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext("https://login.windows.net/common");

    $redirectUri = New-Object System.Uri("urn:ietf:wg:oauth:2.0:oob");

    if ($Username -ne $null -and $Password -ne $null)

    {

        $credential = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.UserCredential($Username, $Password)

        $authResult = $authContext.AcquireToken($Audience, "1950a258-227b-4e31-a9cf-717495945fc2", $credential);

    }

    else {

        $authResult = $authContext.AcquireToken($Audience, "1950a258-227b-4e31-a9cf-717495945fc2", $redirectUri, 1);

    }

    $claims = Get-JwtTokenClaims -JwtToken $authResult.IdToken

    $global:currentSession = @{

        loggedIn = $true;

        idToken = $authResult.IdToken;

        upn = $claims.upn;

        tenantId = $claims.tid;

        userId = $claims.oid;

        refreshToken = $authResult.RefreshToken;

        expiresOn = (Get-Date).AddHours(8);

        resourceTokens = @{

            $Audience = @{

                accessToken = $authResult.AccessToken;

                expiresOn = $authResult.ExpiresOn;

            }

        };

        selectedEnvironment = "~default";

        flowEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.flow.microsoft.com" }

                "usgov"     { "gov.api.flow.microsoft.us" }

                "usgovhigh" { "high.api.flow.microsoft.us" }

                "preview"   { "preview.api.flow.microsoft.com" }

                "tip1"      { "tip1.api.flow.microsoft.com"}

                "tip2"      { "tip2.api.flow.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

        powerAppsEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.powerapps.com" }

                "usgov"     { "gov.api.powerapps.us" }

                "usgovhigh" { "high.api.powerapps.us" }

                "preview"   { "preview.api.powerapps.com" }

                "tip1"      { "tip1.api.powerapps.com"}

                "tip2"      { "tip2.api.powerapps.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };            

        bapEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.bap.microsoft.com" }

                "usgov"     { "gov.api.bap.microsoft.us" }

                "usgovhigh" { "high.api.bap.microsoft.us" }

                "preview"   { "preview.api.bap.microsoft.com" }

                "tip1"      { "tip1.api.bap.microsoft.com"}

                "tip2"      { "tip2.api.bap.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };      

        graphEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "graph.windows.net" }

                "usgov"     { "graph.windows.net" }

                "usgovhigh" { "graph.windows.net" }

                "preview"   { "graph.windows.net" }

                "tip1"      { "graph.windows.net"}

                "tip2"      { "graph.windows.net" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

        cdsOneEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.cds.microsoft.com" }

                "usgov"     { "gov.api.cds.microsoft.us" }

                "usgovhigh" { "high.api.cds.microsoft.us" }

                "preview"   { "preview.api.cds.microsoft.com" }

                "tip1"      { "tip1.api.cds.microsoft.com"}

                "tip2"      { "tip2.api.cds.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

    };

}

function Test-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

    )

    if (-not $global:currentSession)

    {

        Add-PowerAppsAccount

    }

}

function Remove-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

    )

    if ($global:currentSession -ne $null -and $global:currentSession.upn -ne $null)

    {

        Write-Verbose "Logging out $($global:currentSession.upn)"

    }

    else

    {

        Write-Verbose "No user logged in"

    }

    $global:currentSession = @{

        loggedIn = $false;

    };

}

function Get-JwtToken

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string] $Audience

    )

    if ($global:currentSession -eq $null)

    {

        $global:currentSession = @{

            loggedIn = $false;

        };

    }

    if ($global:currentSession.loggedIn -eq $false -or $global:currentSession.expiresOn -lt (Get-Date))

    {

        Write-Verbose "No user logged in. Signing the user in before acquiring token."

        Add-PowerAppsAccount -Audience $Audience

    }

    if ($global:currentSession.resourceTokens[$Audience] -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].accessToken -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].expiresOn -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].expiresOn -lt (Get-Date))

    {

        Write-Verbose "Token for $Audience is either missing or expired. Acquiring a new one."

        $tenantId = $global:currentSession.tenantId

        $authContext = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext("https://login.windows.net/$tenantId");

        $refreshTokenResult = $authContext.AcquireTokenByRefreshToken($global:currentSession.refreshToken, "1950a258-227b-4e31-a9cf-717495945fc2", $Audience)

        $global:currentSession.resourceTokens[$Audience] = @{

            accessToken = $refreshTokenResult.AccessToken;

            expiresOn = $refreshTokenResult.ExpiresOn;

        }

    }

    return $global:currentSession.resourceTokens[$Audience].accessToken;

}

function Invoke-OAuthDialog

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string] $ConsentLinkUri

    )

    Add-Type -AssemblyName System.Windows.Forms

    $form = New-Object -TypeName System.Windows.Forms.Form -Property @{ Width=440; Height=640 }

    $web  = New-Object -TypeName System.Windows.Forms.WebBrowser -Property @{ Width=420; Height=600; Url=$ConsentLinkUri }

    $DocComp  = {

        $Global:uri = $web.Url.AbsoluteUri        

        if ($Global:uri -match "error=[^&]*|code=[^&]*")

        {

            $form.Close()

        }

    }

    $web.ScriptErrorsSuppressed = $true

    $web.Add_DocumentCompleted($DocComp)

    $form.Controls.Add($web)

    $form.Add_Shown({$form.Activate()})

    $form.ShowDialog() | Out-Null

    $queryOutput = [System.Web.HttpUtility]::ParseQueryString($web.Url.Query)

    $output = @{}

    foreach($key in $queryOutput.Keys)

    {

        $output["$key"] = $queryOutput[$key]

    }

    return $output

}

function Get-TenantDetailsFromGraph

{

 <#

 .SYNOPSIS

 .

 .DESCRIPTION

 The Get-TenantDetailsFromGraph function . 

 Use Get-Help Get-TenantDetailsFromGraph -Examples for more detail.

 .EXAMPLE

 Get-TenantDetailsFromGraph

 .

 #>

    param

    (

        [string]$GraphApiVersion = "1.6"

    )

    process 

    {

        $TenantIdentifier = "myorganization"

        $route = "https://{graphEndpoint}/{tenantIdentifier}/tenantDetails`?api-version={graphApiVersion}" `

        | ReplaceMacro -Macro "{tenantIdentifier}" -Value $TenantIdentifier `

        | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

        $graphResponse = InvokeApi -Method GET -Route $route

        CreateTenantObject -TenantObj $graphResponse.value

    }

}

#Returns users or groups from Graph

#wrapper on top of https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/users-operations & https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/groups-operations 

function Get-UsersOrGroupsFromGraph(

)

{

    [CmdletBinding(DefaultParameterSetName="Id")]

    param

    (

        [Parameter(Mandatory = $true, ParameterSetName = "Id")]

        [string]$ObjectId,

        [Parameter(Mandatory = $true, ParameterSetName = "Search")]

        [string]$SearchString,

        [Parameter(Mandatory = $false, ParameterSetName = "Search")]

        [Parameter(Mandatory = $false, ParameterSetName = "Id")]

        [string]$GraphApiVersion = "1.6"

    )

    Process

    {

        if (-not [string]::IsNullOrWhiteSpace($ObjectId))

        {

            $userGraphUri = "https://graph.windows.net/myorganization/users/{userId}`?&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{userId}" -Value $ObjectId `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $userGraphResponse = InvokeApi -Route $userGraphUri -Method GET

            If($userGraphResponse.StatusCode -eq $null)

            {

                CreateUserObject -UserObj $userGraphResponse

            }

            $groupsGraphUri = "https://graph.windows.net/myorganization/groups/{groupId}`?api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{groupId}" -Value $ObjectId `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $groupGraphResponse = InvokeApi -Route $groupsGraphUri -Method GET

            If($groupGraphResponse.StatusCode -eq $null)

            {

                CreateGroupObject -GroupObj $groupGraphResponse

            }

        }

        else 

        {

            $userFilter = "startswith(userPrincipalName,'$SearchString') or startswith(displayName,'$SearchString')"

            $userGraphUri = "https://graph.windows.net/myorganization/users`?`$filter={filter}&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{filter}" -Value $userFilter `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $userGraphResponse = InvokeApi -Route $userGraphUri -Method GET

            foreach($user in $userGraphResponse.value)

            {

                CreateUserObject -UserObj $user

            }

            $groupFilter = "startswith(displayName,'$SearchString')"

            $groupsGraphUri = "https://graph.windows.net/myorganization/groups`?`$filter={filter}&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{filter}" -Value $groupFilter `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $groupsGraphResponse = Invoke-Request -Uri $groupsGraphUri -Method GET -ParseContent -ThrowOnFailure

            foreach($group in $groupsGraphResponse.value)

            {

                CreateGroupObject -GroupObj $group

            }    

        }

    }

}

function CreateUserObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$UserObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $UserObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectId -Value $UserObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name UserPrincipalName -Value $UserObj.userPrincipalName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Mail -Value $UserObj.mail `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $UserObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name AssignedLicenses -Value $UserObj.assignedLicenses `

        | Add-Member -PassThru -MemberType NoteProperty -Name AssignedPlans -Value $UserObj.assignedLicenses `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $UserObj;

}

function CreateGroupObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$GroupObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $GroupObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name Objectd -Value $GroupObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name Mail -Value $GroupObj.mail `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $GroupObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $GroupObj;

}

function CreateTenantObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$TenantObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $TenantObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name TenantId -Value $TenantObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name Country -Value $TenantObj.countryLetterCode `

        | Add-Member -PassThru -MemberType NoteProperty -Name Language -Value $TenantObj.preferredLanguage `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $TenantObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Domains -Value $TenantObj.verifiedDomains `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $TenantObj;

}

# SIG # Begin signature block

# MIIdiAYJKoZIhvcNAQcCoIIdeTCCHXUCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQULPGmzvILyfMnt/8R/VFWEsAe

# KZSgghhyMIIE3jCCA8agAwIBAgITMwAAAVMi29XcAx7KbwAAAAABUzANBgkqhkiG

# 9w0BAQUFADB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSEw

# HwYDVQQDExhNaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EwHhcNMTkxMjE5MDExMjU5

# WhcNMjEwMzE3MDExMjU5WjCBzjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEpMCcGA1UECxMgTWljcm9zb2Z0IE9wZXJhdGlvbnMgUHVlcnRvIFJp

# Y28xJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOkY3QTYtRTI1MS0xNTBBMSUwIwYD

# VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIBIjANBgkqhkiG9w0B

# AQEFAAOCAQ8AMIIBCgKCAQEAq1diK9JlonJ+oylzVWABNR+Ch+1DFBtELj+s2Clp

# mny7jKTaKBtfJj/VXgmPb0clmTSW/ORG4E7U6a+byrPi+2TRm+KPnOUhpjEWkrwU

# s7p9Yri6MkYVIpH6u7hDFpftVw0cnqD75GriLHPxAL9gXnWCijYmWrAwbQmiFCnv

# KLNd57OoyHOKnbNoE/ZY3nfXXiMblVCfiEeAk3c/FhEC1ZgePKWzPv3cDf77Clka

# DtGGkL1PLQOWKGlED6WBlKQWwwBbrRCcKn/DFhQjBVL7hKBvKIx41Onu1q4ZR3V3

# P4cKvhpgVtBzgrWyV49NW6zpbhTiNB8Hv0KJBmRSYpo5wQIDAQABo4IBCTCCAQUw

# HQYDVR0OBBYEFKYM4eA/3NrcTBY4Uo+HjtARq+DTMB8GA1UdIwQYMBaAFCM0+NlS

# RnAK7UD7dvuzK7DDNbMPMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwubWlj

# cm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY3Jvc29mdFRpbWVTdGFtcFBD

# QS5jcmwwWAYIKwYBBQUHAQEETDBKMEgGCCsGAQUFBzAChjxodHRwOi8vd3d3Lm1p

# Y3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY3Jvc29mdFRpbWVTdGFtcFBDQS5jcnQw

# EwYDVR0lBAwwCgYIKwYBBQUHAwgwDQYJKoZIhvcNAQEFBQADggEBAEPT3fFVLrkO

# s336Dh2XtV7NzB1XvFiBhTeDEWCAKb67K1Et2Qudz8wk37hfWgX0DIYi0lvDrZxf

# iLedK9xl/+CGKC8Cnle0c4kQxHzsJMh9TrYzfMkxzXQpyMAXm8gyzInlM1khJobC

# olWP97sqZdcESpLo5mWVz6uuVys59KaVND4VictBo1mH+UpZ4PVyTgpUgB0M5egL

# I7PWSAwfPVwadiKaREjVpd02X3mQWcCyeFrFLcj5zL6bOWArxBWVAQ+okjDr6utc

# 9bdm3DodUkNCauvvpVQhR+WZ9E6KoIfsgLrFfW1WhtMmF1msCk0bOdsMAwjD2gXM

# uuGf3UmLPt0wggYDMIID66ADAgECAhMzAAABiK9S1rmSbej5AAAAAAGIMA0GCSqG

# SIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTEwHhcNMjAw

# MzA0MTgzOTQ4WhcNMjEwMzAzMTgzOTQ4WjB0MQswCQYDVQQGEwJVUzETMBEGA1UE

# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z

# b2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24w

# ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSCNryE+Cewy2m4t/a74wZ

# 7C9YTwv1PyC4BvM/kSWPNs8n0RTe+FvYfU+E9uf0t7nYlAzHjK+plif2BhD+Ngdh

# IUQ8sVwWO39tjvQRHjP2//vSvIfmmkRoML1Ihnjs9kQiZQzYRDYYRp9xSQYmRwQj

# k5hl8/U7RgOiQDitVHaU7BT1MI92lfZRuIIDDYBdvXtbclYJMVOwqZtv0O9zQCre

# t6R+fRSGaDNfEEpcILL+D7RV3M4uaJE4Ta6KAOdvV+MVaJp1YXFTZPKtpjHO6d9p

# HQPZiG7NdC6QbnRGmsa48uNQrb6AfmLKDI1Lp31WMogTaX5tZf+CZT9PSuvjOCLN

# AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEEAYI3TAgBBggrBgEFBQcDAzAd

# BgNVHQ4EFgQUj9RJL9zNrPcL10RZdMQIXZN7MG8wVAYDVR0RBE0wS6RJMEcxLTAr

# BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEWMBQG

# A1UEBRMNMjMwMDEyKzQ1ODM4NjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzcitW2o

# ynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v

# cGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEGCCsG

# AQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0MAwG

# A1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBACnXo8hjp7FeT+H6iQlV3CcG

# nkSbFvIpKYafgzYCFo3UHY1VHYJVb5jHEO8oG26QqBELmak6MTI+ra3WKMTGhE1s

# EIlowTcp4IAs8a5wpCh6Vf4Z/bAtIppP3p3gXk2X8UXTc+WxjQYsDkFiSzo/OBa5

# hkdW1g4EpO43l9mjToBdqEPtIXsZ7Hi1/6y4gK0PmMiwG8LMpSn0n/oSHGjrUNBg

# HJPxgs63Slf58QGBznuXiRaXmfTUDdrvhRocdxIMi8nXQwWACMiQzJSRzBP5S2wU

# q7nMAqjaTbeXhJqD2SFVHdUYlKruvtPSwbnqSRWTGI8s4FEXt+TL3w5JnwVZmZkU

# FoioQDMMjFyaKurdJ6pnzbr1h6QW0R97fWc8xEIzLIOiU2rjwWAtlQqFO8KNiykj

# YGyEf5LyAJKAO+rJd9fsYR+VBauIEQoYmjnUbTXMSY2Lf5KMluWlDOGVh8q6XjmB

# ccpaT+8tCfxpaVYPi1ncnwTwaPQvVq8RjWDRB7Pa8ruHgj2HJFi69+hcq7mWx5nT

# UtzzFa7RSZfE5a1a5AuBmGNRr7f8cNfa01+tiWjVKk1a+gJUBSP0sIxecFbVSXTZ

# 7bqeal45XSDIisZBkWb+83TbXdTGMDSUFKTAdtC+r35GfsN8QVy59Hb5ZYzAXczh

# gRmk7NyE6jD0Ym5TKiW5MIIGBzCCA++gAwIBAgIKYRZoNAAAAAAAHDANBgkqhkiG

# 9w0BAQUFADBfMRMwEQYKCZImiZPyLGQBGRYDY29tMRkwFwYKCZImiZPyLGQBGRYJ

# bWljcm9zb2Z0MS0wKwYDVQQDEyRNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBB

# dXRob3JpdHkwHhcNMDcwNDAzMTI1MzA5WhcNMjEwNDAzMTMwMzA5WjB3MQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSEwHwYDVQQDExhNaWNyb3Nv

# ZnQgVGltZS1TdGFtcCBQQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQCfoWyx39tIkip8ay4Z4b3i48WZUSNQrc7dGE4kD+7Rp9FMrXQwIBHrB9VUlRVJ

# lBtCkq6YXDAm2gBr6Hu97IkHD/cOBJjwicwfyzMkh53y9GccLPx754gd6udOo6HB

# I1PKjfpFzwnQXq/QsEIEovmmbJNn1yjcRlOwhtDlKEYuJ6yGT1VSDOQDLPtqkJAw

# bofzWTCd+n7Wl7PoIZd++NIT8wi3U21StEWQn0gASkdmEScpZqiX5NMGgUqi+YSn

# EUcUCYKfhO1VeP4Bmh1QCIUAEDBG7bfeI0a7xC1Un68eeEExd8yb3zuDk6FhArUd

# DbH895uyAc4iS1T/+QXDwiALAgMBAAGjggGrMIIBpzAPBgNVHRMBAf8EBTADAQH/

# MB0GA1UdDgQWBBQjNPjZUkZwCu1A+3b7syuwwzWzDzALBgNVHQ8EBAMCAYYwEAYJ

# KwYBBAGCNxUBBAMCAQAwgZgGA1UdIwSBkDCBjYAUDqyCYEBWJ5flJRP8KuEKU5VZ

# 5KShY6RhMF8xEzARBgoJkiaJk/IsZAEZFgNjb20xGTAXBgoJkiaJk/IsZAEZFglt

# aWNyb3NvZnQxLTArBgNVBAMTJE1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1

# dGhvcml0eYIQea0WoUqgpa1Mc1j0BxMuZTBQBgNVHR8ESTBHMEWgQ6BBhj9odHRw

# Oi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9taWNyb3NvZnRy

# b290Y2VydC5jcmwwVAYIKwYBBQUHAQEESDBGMEQGCCsGAQUFBzAChjhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY3Jvc29mdFJvb3RDZXJ0LmNy

# dDATBgNVHSUEDDAKBggrBgEFBQcDCDANBgkqhkiG9w0BAQUFAAOCAgEAEJeKw1wD

# RDbd6bStd9vOeVFNAbEudHFbbQwTq86+e4+4LtQSooxtYrhXAstOIBNQmd16QOJX

# u69YmhzhHQGGrLt48ovQ7DsB7uK+jwoFyI1I4vBTFd1Pq5Lk541q1YDB5pTyBi+F

# A+mRKiQicPv2/OR4mS4N9wficLwYTp2OawpylbihOZxnLcVRDupiXD8WmIsgP+IH

# GjL5zDFKdjE9K3ILyOpwPf+FChPfwgphjvDXuBfrTot/xTUrXqO/67x9C0J71FNy

# Ie4wyrt4ZVxbARcKFA7S2hSY9Ty5ZlizLS/n+YWGzFFW6J1wlGysOUzU9nm/qhh6

# YinvopspNAZ3GmLJPR5tH4LwC8csu89Ds+X57H2146SodDW4TsVxIxImdgs8Uoxx

# WkZDFLyzs7BNZ8ifQv+AeSGAnhUwZuhCEl4ayJ4iIdBD6Svpu/RIzCzU2DKATCYq

# SCRfWupW76bemZ3KOm+9gSd0BhHudiG/m4LBJ1S2sWo9iaF2YbRuoROmv6pH8BJv

# /YoybLL+31HIjCPJZr2dHYcSZAI9La9Zj7jkIeW1sMpjtHhUBdRBLlCslLCleKuz

# oJZ1GtmShxN1Ii8yqAhuoFuMJb+g74TKIdbrHk/Jmu5J4PcBZW+JC33Iacjmbuqn

# l84xKf8OxVtc2E0bodj6L54/LlUWa8kTo/0wggd6MIIFYqADAgECAgphDpDSAAAA

# AAADMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBB

# dXRob3JpdHkgMjAxMTAeFw0xMTA3MDgyMDU5MDlaFw0yNjA3MDgyMTA5MDlaMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTEwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQCr8PpyEBwurdhuqoIQTTS68rZYIZ9CGypr6VpQqrgGOBoE

# Sbp/wwwe3TdrxhLYC/A4wpkGsMg51QEUMULTiQ15ZId+lGAkbK+eSZzpaF7S35tT

# sgosw6/ZqSuuegmv15ZZymAaBelmdugyUiYSL+erCFDPs0S3XdjELgN1q2jzy23z

# OlyhFvRGuuA4ZKxuZDV4pqBjDy3TQJP4494HDdVceaVJKecNvqATd76UPe/74yta

# EB9NViiienLgEjq3SV7Y7e1DkYPZe7J7hhvZPrGMXeiJT4Qa8qEvWeSQOy2uM1jF

# tz7+MtOzAz2xsq+SOH7SnYAs9U5WkSE1JcM5bmR/U7qcD60ZI4TL9LoDho33X/DQ

# Ur+MlIe8wCF0JV8YKLbMJyg4JZg5SjbPfLGSrhwjp6lm7GEfauEoSZ1fiOIlXdMh

# Sz5SxLVXPyQD8NF6Wy/VI+NwXQ9RRnez+ADhvKwCgl/bwBWzvRvUVUvnOaEP6SNJ

# vBi4RHxF5MHDcnrgcuck379GmcXvwhxX24ON7E1JMKerjt/sW5+v/N2wZuLBl4F7

# 7dbtS+dJKacTKKanfWeA5opieF+yL4TXV5xcv3coKPHtbcMojyyPQDdPweGFRInE

# CUzF1KVDL3SV9274eCBYLBNdYJWaPk8zhNqwiBfenk70lrC8RqBsmNLg1oiMCwID

# AQABo4IB7TCCAekwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFEhuZOVQBdOC

# qhc3NyK1bajKdQKVMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQE

# AwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFHItOgIxkEO5FAVO4eqn

# xzHRI4k0MFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNv

# bS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18yMi5j

# cmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUFBzAChkJodHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dDIwMTFfMjAxMV8wM18yMi5j

# cnQwgZ8GA1UdIASBlzCBlDCBkQYJKwYBBAGCNy4DMIGDMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2RvY3MvcHJpbWFyeWNwcy5o

# dG0wQAYIKwYBBQUHAgIwNB4yIB0ATABlAGcAYQBsAF8AcABvAGwAaQBjAHkAXwBz

# AHQAYQB0AGUAbQBlAG4AdAAuIB0wDQYJKoZIhvcNAQELBQADggIBAGfyhqWY4FR5

# Gi7T2HRnIpsLlhHhY5KZQpZ90nkMkMFlXy4sPvjDctFtg/6+P+gKyju/R6mj82nb

# Y78iNaWXXWWEkH2LRlBV2AySfNIaSxzzPEKLUtCw/WvjPgcuKZvmPRul1LUdd5Q5

# 4ulkyUQ9eHoj8xN9ppB0g430yyYCRirCihC7pKkFDJvtaPpoLpWgKj8qa1hJYx8J

# aW5amJbkg/TAj/NGK978O9C9Ne9uJa7lryft0N3zDq+ZKJeYTQ49C/IIidYfwzIY

# 4vDFLc5bnrRJOQrGCsLGra7lstnbFYhRRVg4MnEnGn+x9Cf43iw6IGmYslmJaG5v

# p7d0w0AFBqYBKig+gj8TTWYLwLNN9eGPfxxvFX1Fp3blQCplo8NdUmKGwx1jNpeG

# 39rz+PIWoZon4c2ll9DuXWNB41sHnIc+BncG0QaxdR8UvmFhtfDcxhsEvt9Bxw4o

# 7t5lL+yX9qFcltgA1qFGvVnzl6UJS0gQmYAf0AApxbGbpT9Fdx41xtKiop96eiL6

# SJUfq/tHI4D1nvi/a7dLl+LrdXga7Oo3mXkYS//WsyNodeav+vyL6wuA6mk7r/ww

# 7QRMjt/fdW1jkT3RnVZOT7+AVyKheBEyIXrvQQqxP/uozKRdwaGIm1dxVk5IRcBC

# yZt2WwqASGv9eZ/BvW1taslScxMNelDNMYIEgDCCBHwCAQEwgZUwfjELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0

# IENvZGUgU2lnbmluZyBQQ0EgMjAxMQITMwAAAYivUta5km3o+QAAAAABiDAJBgUr

# DgMCGgUAoIGUMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisGAQQBgjcC

# AQsxDjAMBgorBgEEAYI3AgEVMCMGCSqGSIb3DQEJBDEWBBT7SvA5W5ZXN3Cb57oI

# uHGWvkCMXDA0BgorBgEEAYI3AgEMMSYwJKASgBAAVABlAHMAdABTAGkAZwBuoQ6A

# DGh0dHA6Ly90ZXN0IDANBgkqhkiG9w0BAQEFAASCAQCQfNqyOJhXERl5GeBD7KOb

# Q+Vr/E4cTi8ThwmXqPfEB4Pz87IPTaCqWrU9jW2v2J9Qi2J/9JHWV78FBAVCPLUz

# zhc7vOHP0J+1Bms2S8mOmeyaBzMjzjLluMch7tvg2x2V++O11yL5LI9Nnr0mvSgs

# nAGzg9R5E+Z9T2hCGPC07+UB9yS9o+lJ4j9J8zQsqdTfXcqXK2Z4pLzqTgGShgCy

# 57NWxxfAa1445A45Rhc5wv4gsWnhkVj7bY8iXb7X33/VW9qJx6OZgp0h6IcvxDzF

# QIh4eVM9ULs16cOD2WEuiqglOcDgaY6waACg6habObWzSuvXlyxSEE73S417KLvK

# oYICKDCCAiQGCSqGSIb3DQEJBjGCAhUwggIRAgEBMIGOMHcxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xITAfBgNVBAMTGE1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQQITMwAAAVMi29XcAx7KbwAAAAABUzAJBgUrDgMCGgUAoF0wGAYJ

# KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNjAyMTgx

# ODU4WjAjBgkqhkiG9w0BCQQxFgQUsKznE0Skm9+GS9E01vODYp+571EwDQYJKoZI

# hvcNAQEFBQAEggEAIfhFxmfxgRGH3bYoHqAQTf78+T1Hppy+3MqF4d+ocULOt4hN

# szd4kT5xTZ5sYK+Dt49ZdVsnsjkbeEy0146XXQd+9UzcewGyAS5KxzFTP9ZoBH2L

# AFN9U7KSIr+R/zLMWzgCHDXSsgl4zKhRAi9CKW0vpvjtEDR1TTwY4WQIbBI6YTOZ

# xXj6gyQTAvN7jEhtvnhbxu0gxu7GxIfKmBjVmx8knOHC25/uHSd1YzOM4eH9FoRR

# yOcCOMZMtNDNux+kPevE0xlEmQChz/LMNeqJ++e/FGpaR9ohYfSLVxyrPxUDUw8v

# uxKJvqHexudhD+kFOKNKKi7f205E369upabQGA==

# SIG # End signature block