Microsoft.PowerApps.PowerShell

1.0.9

Microsoft.PowerApps.AuthModule.psm1

                                $local:ErrorActionPreference = "Stop"

<#

If(Get-Module -ListAvailable -Name (Join-Path (Split-Path $script:MyInvocation.MyCommand.Path) "Microsoft.PowerApps.RestClientModule.psm1"))

{

    Write-Host "Module loaded"

}

else

{

    Import-Module (Join-Path (Split-Path $script:MyInvocation.MyCommand.Path) "Microsoft.PowerApps.RestClientModule.psm1") -NoClobber #-Force

}

#>

#[Reflection.Assembly]::LoadFile("$(Split-Path $script:MyInvocation.MyCommand.Path)\Microsoft.IdentityModel.Clients.ActiveDirectory.dll") | Out-Null

#[Reflection.Assembly]::LoadFile("$(Split-Path $script:MyInvocation.MyCommand.Path)\Microsoft.IdentityModel.Clients.ActiveDirectory.WindowsForms.dll") | Out-Null

function Get-JwtTokenClaims

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string]$JwtToken

    )

    $tokenSplit = $JwtToken.Split(".")

    $claimsSegment = $tokenSplit[1].Replace(" ", "+");

    $mod = $claimsSegment.Length % 4

    if ($mod -gt 0)

    {

        $paddingCount = 4 - $mod;

        for ($i = 0; $i -lt $paddingCount; $i++)

        {

            $claimsSegment += "="

        }

    }

    $decodedClaimsSegment = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($claimsSegment))

    return ConvertFrom-Json $decodedClaimsSegment

}

function Add-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

        [string] $Audience = "https://management.azure.com/",

        [Parameter(Mandatory = $false)]

        [ValidateSet("prod","preview","tip1", "tip2", "usgov", "usgovhigh")]

        [string]$Endpoint = "prod",

        [string]$Username = $null,

        [SecureString]$Password = $null

    )

    $authContext = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext("https://login.windows.net/common");

    $redirectUri = New-Object System.Uri("urn:ietf:wg:oauth:2.0:oob");

    if ($Username -ne $null -and $Password -ne $null)

    {

        $credential = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.UserCredential($Username, $Password)

        $authResult = $authContext.AcquireToken($Audience, "1950a258-227b-4e31-a9cf-717495945fc2", $credential);

    }

    else {

        $authResult = $authContext.AcquireToken($Audience, "1950a258-227b-4e31-a9cf-717495945fc2", $redirectUri, 1);

    }

    $claims = Get-JwtTokenClaims -JwtToken $authResult.IdToken

    $global:currentSession = @{

        loggedIn = $true;

        idToken = $authResult.IdToken;

        upn = $claims.upn;

        tenantId = $claims.tid;

        userId = $claims.oid;

        refreshToken = $authResult.RefreshToken;

        expiresOn = (Get-Date).AddHours(8);

        resourceTokens = @{

            $Audience = @{

                accessToken = $authResult.AccessToken;

                expiresOn = $authResult.ExpiresOn;

            }

        };

        selectedEnvironment = "~default";

        flowEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.flow.microsoft.com" }

                "usgov"     { "gov.api.flow.microsoft.us" }

                "usgovhigh" { "high.api.flow.microsoft.us" }

                "preview"   { "preview.api.flow.microsoft.com" }

                "tip1"      { "tip1.api.flow.microsoft.com"}

                "tip2"      { "tip2.api.flow.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

        powerAppsEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.powerapps.com" }

                "usgov"     { "gov.api.powerapps.us" }

                "usgovhigh" { "high.api.powerapps.us" }

                "preview"   { "preview.api.powerapps.com" }

                "tip1"      { "tip1.api.powerapps.com"}

                "tip2"      { "tip2.api.powerapps.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };            

        bapEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.bap.microsoft.com" }

                "usgov"     { "gov.api.bap.microsoft.us" }

                "usgovhigh" { "high.api.bap.microsoft.us" }

                "preview"   { "preview.api.bap.microsoft.com" }

                "tip1"      { "tip1.api.bap.microsoft.com"}

                "tip2"      { "tip2.api.bap.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };      

        graphEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "graph.windows.net" }

                "usgov"     { "graph.windows.net" }

                "usgovhigh" { "graph.windows.net" }

                "preview"   { "graph.windows.net" }

                "tip1"      { "graph.windows.net"}

                "tip2"      { "graph.windows.net" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

        cdsOneEndpoint = 

            switch ($Endpoint)

            {

                "prod"      { "api.cds.microsoft.com" }

                "usgov"     { "gov.api.cds.microsoft.us" }

                "usgovhigh" { "high.api.cds.microsoft.us" }

                "preview"   { "preview.api.cds.microsoft.com" }

                "tip1"      { "tip1.api.cds.microsoft.com"}

                "tip2"      { "tip2.api.cds.microsoft.com" }

                default     { throw "Unsupported endpoint '$Endpoint'"}

            };

    };

}

function Test-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

    )

    if (-not $global:currentSession)

    {

        Add-PowerAppsAccount

    }

}

function Remove-PowerAppsAccount

{

    [CmdletBinding()]

    param

    (

    )

    if ($global:currentSession -ne $null -and $global:currentSession.upn -ne $null)

    {

        Write-Verbose "Logging out $($global:currentSession.upn)"

    }

    else

    {

        Write-Verbose "No user logged in"

    }

    $global:currentSession = @{

        loggedIn = $false;

    };

}

function Get-JwtToken

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string] $Audience

    )

    if ($global:currentSession -eq $null)

    {

        $global:currentSession = @{

            loggedIn = $false;

        };

    }

    if ($global:currentSession.loggedIn -eq $false -or $global:currentSession.expiresOn -lt (Get-Date))

    {

        Write-Verbose "No user logged in. Signing the user in before acquiring token."

        Add-PowerAppsAccount -Audience $Audience

    }

    if ($global:currentSession.resourceTokens[$Audience] -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].accessToken -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].expiresOn -eq $null -or `

        $global:currentSession.resourceTokens[$Audience].expiresOn -lt (Get-Date))

    {

        Write-Verbose "Token for $Audience is either missing or expired. Acquiring a new one."

        $tenantId = $global:currentSession.tenantId

        $authContext = New-Object Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext("https://login.windows.net/$tenantId");

        $refreshTokenResult = $authContext.AcquireTokenByRefreshToken($global:currentSession.refreshToken, "1950a258-227b-4e31-a9cf-717495945fc2", $Audience)

        $global:currentSession.resourceTokens[$Audience] = @{

            accessToken = $refreshTokenResult.AccessToken;

            expiresOn = $refreshTokenResult.ExpiresOn;

        }

    }

    return $global:currentSession.resourceTokens[$Audience].accessToken;

}

function Invoke-OAuthDialog

{

    [CmdletBinding()]

    param

    (

        [Parameter(Mandatory=$true)]

        [string] $ConsentLinkUri

    )

    Add-Type -AssemblyName System.Windows.Forms

    $form = New-Object -TypeName System.Windows.Forms.Form -Property @{ Width=440; Height=640 }

    $web  = New-Object -TypeName System.Windows.Forms.WebBrowser -Property @{ Width=420; Height=600; Url=$ConsentLinkUri }

    $DocComp  = {

        $Global:uri = $web.Url.AbsoluteUri        

        if ($Global:uri -match "error=[^&]*|code=[^&]*")

        {

            $form.Close()

        }

    }

    $web.ScriptErrorsSuppressed = $true

    $web.Add_DocumentCompleted($DocComp)

    $form.Controls.Add($web)

    $form.Add_Shown({$form.Activate()})

    $form.ShowDialog() | Out-Null

    $queryOutput = [System.Web.HttpUtility]::ParseQueryString($web.Url.Query)

    $output = @{}

    foreach($key in $queryOutput.Keys)

    {

        $output["$key"] = $queryOutput[$key]

    }

    return $output

}

function Get-TenantDetailsFromGraph

{

 <#

 .SYNOPSIS

 .

 .DESCRIPTION

 The Get-TenantDetailsFromGraph function . 

 Use Get-Help Get-TenantDetailsFromGraph -Examples for more detail.

 .EXAMPLE

 Get-TenantDetailsFromGraph

 .

 #>

    param

    (

        [string]$GraphApiVersion = "1.6"

    )

    process 

    {

        $TenantIdentifier = "myorganization"

        $route = "https://{graphEndpoint}/{tenantIdentifier}/tenantDetails`?api-version={graphApiVersion}" `

        | ReplaceMacro -Macro "{tenantIdentifier}" -Value $TenantIdentifier `

        | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

        $graphResponse = InvokeApi -Method GET -Route $route

        CreateTenantObject -TenantObj $graphResponse.value

    }

}

#Returns users or groups from Graph

#wrapper on top of https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/users-operations & https://msdn.microsoft.com/en-us/library/azure/ad/graph/api/groups-operations 

function Get-UsersOrGroupsFromGraph(

)

{

    [CmdletBinding(DefaultParameterSetName="Id")]

    param

    (

        [Parameter(Mandatory = $true, ParameterSetName = "Id")]

        [string]$ObjectId,

        [Parameter(Mandatory = $true, ParameterSetName = "Search")]

        [string]$SearchString,

        [Parameter(Mandatory = $false, ParameterSetName = "Search")]

        [Parameter(Mandatory = $false, ParameterSetName = "Id")]

        [string]$GraphApiVersion = "1.6"

    )

    Process

    {

        if (-not [string]::IsNullOrWhiteSpace($ObjectId))

        {

            $userGraphUri = "https://graph.windows.net/myorganization/users/{userId}`?&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{userId}" -Value $ObjectId `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $userGraphResponse = InvokeApi -Route $userGraphUri -Method GET

            If($userGraphResponse.StatusCode -eq $null)

            {

                CreateUserObject -UserObj $userGraphResponse

            }

            $groupsGraphUri = "https://graph.windows.net/myorganization/groups/{groupId}`?api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{groupId}" -Value $ObjectId `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $groupGraphResponse = InvokeApi -Route $groupsGraphUri -Method GET

            If($groupGraphResponse.StatusCode -eq $null)

            {

                CreateGroupObject -GroupObj $groupGraphResponse

            }

        }

        else 

        {

            $userFilter = "startswith(userPrincipalName,'$SearchString') or startswith(displayName,'$SearchString')"

            $userGraphUri = "https://graph.windows.net/myorganization/users`?`$filter={filter}&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{filter}" -Value $userFilter `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $userGraphResponse = InvokeApi -Route $userGraphUri -Method GET

            foreach($user in $userGraphResponse.value)

            {

                CreateUserObject -UserObj $user

            }

            $groupFilter = "startswith(displayName,'$SearchString')"

            $groupsGraphUri = "https://graph.windows.net/myorganization/groups`?`$filter={filter}&api-version={graphApiVersion}" `

            | ReplaceMacro -Macro "{filter}" -Value $groupFilter `

            | ReplaceMacro -Macro "{graphApiVersion}" -Value $GraphApiVersion;

            $groupsGraphResponse = Invoke-Request -Uri $groupsGraphUri -Method GET -ParseContent -ThrowOnFailure

            foreach($group in $groupsGraphResponse.value)

            {

                CreateGroupObject -GroupObj $group

            }    

        }

    }

}

function CreateUserObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$UserObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $UserObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectId -Value $UserObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name UserPrincipalName -Value $UserObj.userPrincipalName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Mail -Value $UserObj.mail `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $UserObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name AssignedLicenses -Value $UserObj.assignedLicenses `

        | Add-Member -PassThru -MemberType NoteProperty -Name AssignedPlans -Value $UserObj.assignedLicenses `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $UserObj;

}

function CreateGroupObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$GroupObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $GroupObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name Objectd -Value $GroupObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name Mail -Value $GroupObj.mail `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $GroupObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $GroupObj;

}

function CreateTenantObject

{

    param

    (

        [Parameter(Mandatory = $true)]

        [object]$TenantObj

    )

    return New-Object -TypeName PSObject `

        | Add-Member -PassThru -MemberType NoteProperty -Name ObjectType -Value $TenantObj.objectType `

        | Add-Member -PassThru -MemberType NoteProperty -Name TenantId -Value $TenantObj.objectId `

        | Add-Member -PassThru -MemberType NoteProperty -Name Country -Value $TenantObj.countryLetterCode `

        | Add-Member -PassThru -MemberType NoteProperty -Name Language -Value $TenantObj.preferredLanguage `

        | Add-Member -PassThru -MemberType NoteProperty -Name DisplayName -Value $TenantObj.displayName `

        | Add-Member -PassThru -MemberType NoteProperty -Name Domains -Value $TenantObj.verifiedDomains `

        | Add-Member -PassThru -MemberType NoteProperty -Name Internal -Value $TenantObj;

}

# SIG # Begin signature block

# MIIdgAYJKoZIhvcNAQcCoIIdcTCCHW0CAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUA0xvbHM+cAs3HC2H+hzyYHFO

# IZmgghhqMIIE2jCCA8KgAwIBAgITMwAAARzbbpm3tnP6bwAAAAABHDANBgkqhkiG

# 9w0BAQUFADB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSEw

# HwYDVQQDExhNaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EwHhcNMTgxMDI0MjEwNzM1

# WhcNMjAwMTEwMjEwNzM1WjCByjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEm

# MCQGA1UECxMdVGhhbGVzIFRTUyBFU046RDJDRC1FMzEwLTRBRjExJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggEiMA0GCSqGSIb3DQEBAQUA

# A4IBDwAwggEKAoIBAQCxqRuPkgvAvJMVHxyEsWMAs/pxAn3vnvfWrFqQj2NkG9kP

# E3XXn9Xn7n7WsHbuuVdpi4nSyPfLTriA2kzbF+eco/ZTVRbanYk8BXwZGgUzRgF4

# LxQq4INdpNmH2zBti8HK7xURC8HoBB82c5VnZp1AZvgnWRs+6wbzXnauqbwoGuTJ

# XPzaPXivUjL2W+W9G9NMJ5nrmkcNcmq/ncqA88qrofMBqly6y+SL1EdCR0oVYl1A

# ZOgf+ALrh/TMeA1Bld+EFzJa/rEo1QB3IPcwm3xQfW26SYOyQFPIfLjXkBs+VYrc

# S27bByATdjsOJ06krz5tc2fKLv+ao5r1sOIvFDcFAgMBAAGjggEJMIIBBTAdBgNV

# HQ4EFgQUb8nAx97t5y1LdYL20QwUPKqBH8UwHwYDVR0jBBgwFoAUIzT42VJGcArt

# QPt2+7MrsMM1sw8wVAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5taWNyb3Nv

# ZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljcm9zb2Z0VGltZVN0YW1wUENBLmNy

# bDBYBggrBgEFBQcBAQRMMEowSAYIKwYBBQUHMAKGPGh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2kvY2VydHMvTWljcm9zb2Z0VGltZVN0YW1wUENBLmNydDATBgNV

# HSUEDDAKBggrBgEFBQcDCDANBgkqhkiG9w0BAQUFAAOCAQEAWVKU4uhqdIGVX+vj

# MkduTPqjk59ZxNeOrJX/O7MP5OkObcq6T+vqTyjmeTsiNoO0btyofj9bUJUAic8z

# 10V/rwlvvsYUyzlnTos7+76NU86PoQuMGTLuPfmEAQD4rpUs1kyJchz2m0q7/AbI

# usbsTTLzJ8TW7vyEluJG9LhLAxvAz7dvWdcWQBmh52egoL84XvUq4g0lFNqkiSIV

# 7z7IFsXbvXzhS2NnOLIdpHjGfxhIvRCTFNKCxflV+O8/AqERd6txTeBFpWPRvN0U

# S+GOJvA77FxAvGH2vaH3zQ3WeQxVBAJ6LrUCiKkKm+gJFwE/2ftF5zEMuZS9Zg/F

# EnmzLDCCBf8wggPnoAMCAQICEzMAAAFRno2PQHGjDkEAAAAAAVEwDQYJKoZIhvcN

# AQELBQAwfjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEoMCYG

# A1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAxMTAeFw0xOTA1MDIy

# MTM3NDZaFw0yMDA1MDIyMTM3NDZaMHQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xHjAcBgNVBAMTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjCCASIw

# DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJVaxoZpRx00HvFVw2Z19mJUGFgU

# ZyfwoyrGA0i85lY0f0lhAu6EeGYnlFYhLLWh7LfNO7GotuQcB2Zt5Tw0Uyjj0+/v

# UyAhL0gb8S2rA4fu6lqf6Uiro05zDl87o6z7XZHRDbwzMaf7fLsXaYoOeilW7SwS

# 5/LjneDHPXozxsDDj5Be6/v59H1bNEnYKlTrbBApiIVAx97DpWHl+4+heWg3eTr5

# CXPvOBxPhhGbHPHuMxWk/+68rqxlwHFDdaAH9aTJceDFpjX0gDMurZCI+JfZivKJ

# HkSxgGrfkE/tTXkOVm2lKzbAhhOSQMHGE8kgMmCjBm7kbKEd2quy3c6ORJECAwEA

# AaOCAX4wggF6MB8GA1UdJQQYMBYGCisGAQQBgjdMCAEGCCsGAQUFBwMDMB0GA1Ud

# DgQWBBRXghquSrnt6xqC7oVQFvbvRmKNzzBQBgNVHREESTBHpEUwQzEpMCcGA1UE

# CxMgTWljcm9zb2Z0IE9wZXJhdGlvbnMgUHVlcnRvIFJpY28xFjAUBgNVBAUTDTIz

# MDAxMis0NTQxMzUwHwYDVR0jBBgwFoAUSG5k5VAF04KqFzc3IrVtqMp1ApUwVAYD

# VR0fBE0wSzBJoEegRYZDaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9j

# cmwvTWljQ29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNybDBhBggrBgEFBQcBAQRV

# MFMwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljQ29kU2lnUENBMjAxMV8yMDExLTA3LTA4LmNydDAMBgNVHRMBAf8E

# AjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBaD4CtLgCersquiCyUhCegwdJdQ+v9Go4i

# Elf7fY5u5jcwW92VESVtKxInGtHL84IJl1Kx75/YCpD4X/ZpjAEOZRBt4wHyfSlg

# tmc4+J+p7vxEEfZ9Vmy9fHJ+LNse5tZahR81b8UmVmUtfAmYXcGgvwTanT0reFqD

# DP+i1wq1DX5Dj4No5hdaV6omslSycez1SItytUXSV4v9DVXluyGhvY5OVmrSrNJ2

# swMtZ2HKtQ7Gdn6iNntR1NjhWcK6iBtn1mz2zIluDtlRL1JWBiSjBGxa/mNXiVup

# MP60bgXOE7BxFDB1voDzOnY2d36ztV0K5gWwaAjjW5wPyjFV9wAyMX1hfk3aziaW

# 2SqdR7f+G1WufEooMDBJiWJq7HYvuArD5sPWQRn/mjMtGcneOMOSiZOs9y2iRj8p

# pnWq5vQ1SeY4of7fFQr+mVYkrwE5Bi5TuApgftjL1ZIo2U/ukqPqLjXv7c1r9+si

# eOcGQpEIn95hO8Ef6zmC57Ol9Ba1Ths2j+PxDDa+lND3Dt+WEfvxGbB3fX35hOaG

# /tNzENtaXK15qPhErbCTeljWhLPYk8Tk8242Z30aZ/qh49mDLsiL0ksurxKdQtXt

# v4g/RRdFj2r4Z1GMzYARfqaxm+88IigbRpgdC73BmwoQraOq9aLz/F1555Ij0U3o

# rXDihVAzgzCCBgcwggPvoAMCAQICCmEWaDQAAAAAABwwDQYJKoZIhvcNAQEFBQAw

# XzETMBEGCgmSJomT8ixkARkWA2NvbTEZMBcGCgmSJomT8ixkARkWCW1pY3Jvc29m

# dDEtMCsGA1UEAxMkTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# MB4XDTA3MDQwMzEyNTMwOVoXDTIxMDQwMzEzMDMwOVowdzELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEhMB8GA1UEAxMYTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgUENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Fssd/b

# SJIqfGsuGeG94uPFmVEjUK3O3RhOJA/u0afRTK10MCAR6wfVVJUVSZQbQpKumFww

# JtoAa+h7veyJBw/3DgSY8InMH8szJIed8vRnHCz8e+eIHernTqOhwSNTyo36Rc8J

# 0F6v0LBCBKL5pmyTZ9co3EZTsIbQ5ShGLieshk9VUgzkAyz7apCQMG6H81kwnfp+

# 1pez6CGXfvjSE/MIt1NtUrRFkJ9IAEpHZhEnKWaol+TTBoFKovmEpxFHFAmCn4Tt

# VXj+AZodUAiFABAwRu233iNGu8QtVJ+vHnhBMXfMm987g5OhYQK1HQ2x/PebsgHO

# IktU//kFw8IgCwIDAQABo4IBqzCCAacwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E

# FgQUIzT42VJGcArtQPt2+7MrsMM1sw8wCwYDVR0PBAQDAgGGMBAGCSsGAQQBgjcV

# AQQDAgEAMIGYBgNVHSMEgZAwgY2AFA6sgmBAVieX5SUT/CrhClOVWeSkoWOkYTBf

# MRMwEQYKCZImiZPyLGQBGRYDY29tMRkwFwYKCZImiZPyLGQBGRYJbWljcm9zb2Z0

# MS0wKwYDVQQDEyRNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHmC

# EHmtFqFKoKWtTHNY9AcTLmUwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC5t

# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvbWljcm9zb2Z0cm9vdGNlcnQu

# Y3JsMFQGCCsGAQUFBwEBBEgwRjBEBggrBgEFBQcwAoY4aHR0cDovL3d3dy5taWNy

# b3NvZnQuY29tL3BraS9jZXJ0cy9NaWNyb3NvZnRSb290Q2VydC5jcnQwEwYDVR0l

# BAwwCgYIKwYBBQUHAwgwDQYJKoZIhvcNAQEFBQADggIBABCXisNcA0Q23em0rXfb

# znlRTQGxLnRxW20ME6vOvnuPuC7UEqKMbWK4VwLLTiATUJndekDiV7uvWJoc4R0B

# hqy7ePKL0Ow7Ae7ivo8KBciNSOLwUxXdT6uS5OeNatWAweaU8gYvhQPpkSokInD7

# 9vzkeJkuDfcH4nC8GE6djmsKcpW4oTmcZy3FUQ7qYlw/FpiLID/iBxoy+cwxSnYx

# PStyC8jqcD3/hQoT38IKYY7w17gX606Lf8U1K16jv+u8fQtCe9RTciHuMMq7eGVc

# WwEXChQO0toUmPU8uWZYsy0v5/mFhsxRVuidcJRsrDlM1PZ5v6oYemIp76KbKTQG

# dxpiyT0ebR+C8AvHLLvPQ7Pl+ex9teOkqHQ1uE7FcSMSJnYLPFKMcVpGQxS8s7Ow

# TWfIn0L/gHkhgJ4VMGboQhJeGsieIiHQQ+kr6bv0SMws1NgygEwmKkgkX1rqVu+m

# 3pmdyjpvvYEndAYR7nYhv5uCwSdUtrFqPYmhdmG0bqETpr+qR/ASb/2KMmyy/t9R

# yIwjyWa9nR2HEmQCPS2vWY+45CHltbDKY7R4VAXUQS5QrJSwpXirs6CWdRrZkocT

# dSIvMqgIbqBbjCW/oO+EyiHW6x5PyZruSeD3AWVviQt9yGnI5m7qp5fOMSn/DsVb

# XNhNG6HY+i+ePy5VFmvJE6P9MIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCBIAwggR8AgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAAFRno2PQHGjDkEAAAAAAVEwCQYFKw4DAhoFAKCB

# lDAZBgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYK

# KwYBBAGCNwIBFTAjBgkqhkiG9w0BCQQxFgQUPhtW0Rcz7LWSyMtaBQZRXTg75Dsw

# NAYKKwYBBAGCNwIBDDEmMCSgEoAQAFQAZQBzAHQAUwBpAGcAbqEOgAxodHRwOi8v

# dGVzdCAwDQYJKoZIhvcNAQEBBQAEggEAflNVog83TxMjIZJJKGK0ucUJXPsxrZ6L

# Agh9NnzVa7K2X+JEkkDTxcQ4s21QOCwIocFiQy9RWbg0ggBksqCou03Q38XkG1pL

# qA/vsQjIVLf6KrxQEKUKNiBP+c6/FfsSZbaiKdWlocfioxJUfusUMT22xme5+nCT

# atslZx4QfgzjjshBwI00A3IYyw0h3fZfSVDSVrsjcneMfK/yoyrhlD3XoxiCsAsh

# OUr3ean6gGoiMI9//ZjxHW9T78EZzsT547yD+qgmk/Du4ktO0Xy+dDVCxoyoQUf5

# nhUUSCfYjgUU/niHcGkePwnuB8QxKChpZ/LvFJoAZ6IImUalJc7k6KGCAigwggIk

# BgkqhkiG9w0BCQYxggIVMIICEQIBATCBjjB3MQswCQYDVQQGEwJVUzETMBEGA1UE

# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z

# b2Z0IENvcnBvcmF0aW9uMSEwHwYDVQQDExhNaWNyb3NvZnQgVGltZS1TdGFtcCBQ

# Q0ECEzMAAAEc226Zt7Zz+m8AAAAAARwwCQYFKw4DAhoFAKBdMBgGCSqGSIb3DQEJ

# AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5MDgzMDIyNTg1NVowIwYJ

# KoZIhvcNAQkEMRYEFAwiEaFz3HNFj0hkZuXtSTaAVDOHMA0GCSqGSIb3DQEBBQUA

# BIIBAJr3G/aWIhJA8vT8uXIF5cUlc4Oah7x+dS44+4D1seyg1GBD0+i4NMPpOq+U

# VCTlNjmAemyyPXlWEVxIuFq6q3SgDqBoKLrPnqEG6c7JqUciDDL0gGJJf5ecp71q

# VKj8HE3lAC6EB4D9dllj1R55aghzDf5AUNgGSLaZ61ccBqhifLuvfwnlsRNUOojv

# ul3xox4kjZzcY2S76Ydpyj+0YWkm/O8ruv/HRTGgaZ0peCUWNczAHscUndoQH7B0

# H2fQDZxXHu/6m4ASE05kuUoWD8S1MnmaU3CClpa9r+zwFtxqwzaq8D86Rr3oqBMW

# z0MhunM89RPohmNvcpRel6K+34Q=

# SIG # End signature block