Microsoft.PowerPlatform.EnterprisePolicies

0.5.10

Private/RESTHelpers.ps1

                                <#

SAMPLE CODE NOTICE

THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED,

OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY.

THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER.

NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO.

#>

<#

.SYNOPSIS

    Import this module to get functions to help handling REST calls.

.DESCRIPTION

    This script can be imported to enable cmdlets to deal with HTTP connection and JSON messages.

.NOTES

    Copyright © 2025 Microsoft. All rights reserved.

#>

<#

.SYNOPSIS

    Create new HttpRequestMessage object and set Json content and authorization header

#>

function New-JsonRequestMessage

{

    param(

        [Parameter(Mandatory=$true)]

        [string] $Uri,

        [Parameter(Mandatory=$true)]

        [System.Security.SecureString] $AccessToken,

        [Parameter(Mandatory=$false)]

        [string] $Content,

        [Parameter(Mandatory=$false)]

        [System.Net.Http.HttpMethod] $HttpMethod = [System.Net.Http.HttpMethod]::Post

    )

    Write-Verbose "Creating request for URI: $Uri"

    $request = New-Object -TypeName System.Net.Http.HttpRequestMessage -ArgumentList @($HttpMethod, $Uri)

    if ($Content)

    {

        $request.Content = New-Object -TypeName System.Net.Http.StringContent -ArgumentList @($Content, [System.Text.Encoding]::UTF8, "application/json")

    }

    $request.Headers.Authorization = "Bearer $(ConvertFrom-SecureStringInternal $AccessToken)"

    return $request

}

function New-EnvironmentRouteRequest

{

    param(

        [Parameter(Mandatory)]

        [string] $EnvironmentId,

        [Parameter(Mandatory)]

        [string] $Path,

        [Parameter(Mandatory)]

        [string] $Query,

        [Parameter(Mandatory)]

        [BAPEndpoint] $Endpoint,

        [Parameter(Mandatory=$true)]

        [System.Security.SecureString] $AccessToken,

        [Parameter(Mandatory=$false)]

        [string] $Content,

        [Parameter(Mandatory=$false)]

        [System.Net.Http.HttpMethod] $HttpMethod = [System.Net.Http.HttpMethod]::Post

    )

    $hostName = Get-EnvironmentRouteHostName -Endpoint $Endpoint -EnvironmentId $EnvironmentId

    $uriBuilder = [System.UriBuilder]::new()

    $uriBuilder.Scheme = "https"

    $uriBuilder.Host = "primary-$hostName"

    $uriBuilder.Path = $Path

    $uriBuilder.Query = $Query

    $request = New-JsonRequestMessage -Uri $uriBuilder.Uri.ToString() -AccessToken $AccessToken -Content $Content -HttpMethod $HttpMethod

    $request.Headers.Host = $hostName

    return $request

}

function New-HomeTenantRouteRequest

{

    param(

        [Parameter(Mandatory)]

        [string] $TenantId,

        [Parameter(Mandatory)]

        [string] $Path,

        [Parameter(Mandatory)]

        [string] $Query,

        [Parameter(Mandatory)]

        [BAPEndpoint] $Endpoint,

        [Parameter(Mandatory=$true)]

        [System.Security.SecureString] $AccessToken,

        [Parameter(Mandatory=$false)]

        [string] $Content,

        [Parameter(Mandatory=$false)]

        [System.Net.Http.HttpMethod] $HttpMethod = [System.Net.Http.HttpMethod]::Post

    )

    $hostName = Get-TenantRouteHostName -Endpoint $Endpoint -TenantId $TenantId

    $uriBuilder = [System.UriBuilder]::new()

    $uriBuilder.Scheme = "https"

    $uriBuilder.Host = $hostName

    $uriBuilder.Path = $Path

    $uriBuilder.Query = $Query

    $request = New-JsonRequestMessage -Uri $uriBuilder.Uri.ToString() -AccessToken $AccessToken -Content $Content -HttpMethod $HttpMethod

    $request.Headers.Host = $hostName

    return $request

}

<#

.SYNOPSIS

    Gets a singleton HttpClient object or creates a new one and clears Default Request Headers

#>

function Get-HttpClient

{

    if($null -eq $script:httpClient)

    {

        [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls13 -bor [System.Net.SecurityProtocolType]::Tls12

        $script:httpClient = New-Object -TypeName System.Net.Http.HttpClient

        $script:httpClient.DefaultRequestHeaders.Clear()

    }

    return $script:httpClient

}

<#

.SYNOPSIS

    Given an async Task, await and return its result

#>

function Get-AsyncResult

{

    param(

        [Parameter(Mandatory=$true)]

        $task

    )

    try

    {

        $result = $task.GetAwaiter().GetResult()

    }

    catch

    {

        if ($_.Exception.InnerException)

        {

            # Two levels into inner exceptions have network connection problem messages

            if ($_.Exception.InnerException.InnerException)

            {

                throw $_.Exception.InnerException.InnerException.Message

            }

            else

            {

                throw $_.Exception.InnerException.Message   

            }

        }

        else

        {

            throw $_.Exception.Message

        }

    }

    return $result

}

function Get-EnvironmentRouteHostName {

    param (

        [Parameter(Mandatory)]

        [string] $EnvironmentId,

        [Parameter(Mandatory)]

        [BAPEndpoint] $Endpoint

    )

    $baseUri = Get-APIResourceUrl -Endpoint $Endpoint

    # Separate the scheme from the base URI

    $baseUri = $baseUri.Replace("https://", "").Trim('/')

    $EnvironmentId = $EnvironmentId.Replace("-", "")

    if($Endpoint -eq [BAPEndpoint]::tip1 -or $Endpoint -eq [BAPEndpoint]::tip2 -or $Endpoint -eq [BAPEndpoint]::usgovhigh) {

        $shortEnvId = $EnvironmentId.Substring($EnvironmentId.Length - 1, 1)

        $remainingEnvId = $EnvironmentId.Substring(0, $EnvironmentId.Length - 1)

    }

    else {

        $shortEnvId = $EnvironmentId.Substring($EnvironmentId.Length - 2, 2)

        $remainingEnvId = $EnvironmentId.Substring(0, $EnvironmentId.Length - 2)

    }

    return "$remainingEnvId.$shortEnvId.environment.$baseUri"

}

function Get-TenantRouteHostName {

    param (

        [Parameter(Mandatory)]

        [string] $TenantId,

        [Parameter(Mandatory)]

        [BAPEndpoint] $Endpoint

    )

    $baseUri = Get-APIResourceUrl -Endpoint $Endpoint

    # Separate the scheme from the base URI

    $baseUri = $baseUri.Replace("https://", "").Trim('/')

    $TenantId = $TenantId.Replace("-", "")

    if($Endpoint -eq [BAPEndpoint]::tip1 -or $Endpoint -eq [BAPEndpoint]::tip2 -or $Endpoint -eq [BAPEndpoint]::usgovhigh) {

        $shortTenantId = $TenantId.Substring($TenantId.Length - 1, 1)

        $remainingTenantId = $TenantId.Substring(0, $TenantId.Length - 1)

    }

    else {

        $shortTenantId = $TenantId.Substring($TenantId.Length - 2, 2)

        $remainingTenantId = $TenantId.Substring(0, $TenantId.Length - 2)

    }

    return "il-$remainingTenantId.$shortTenantId.tenant.$baseUri"

}

function Get-APIResourceUrl {

    param (

        [Parameter(Mandatory)]

        [BAPEndpoint] $Endpoint

    )

    switch ($Endpoint) {

        ([BAPEndpoint]::tip1) { return "https://api.preprod.powerplatform.com/" }

        ([BAPEndpoint]::tip2) { return "https://api.test.powerplatform.com/" }

        ([BAPEndpoint]::prod) { return "https://api.powerplatform.com/" }

        ([BAPEndpoint]::usgovhigh) { return "https://api.high.powerplatform.microsoft.us/" }

        ([BAPEndpoint]::dod) { return "https://api.appsplatform.us/" }

        ([BAPEndpoint]::china) { return "https://api.powerplatform.partner.microsoftonline.cn/" }

        Default { throw "Unsupported BAP endpoint: $Endpoint" }

    }

}

function Send-RequestWithRetries {

    param (

        [Parameter(Mandatory)]

        [int] $MaxRetries,

        [Parameter(Mandatory)]

        [int] $DelaySeconds,

        [Parameter(Mandatory)]

        [scriptblock] $RequestFactory

    )

    $client = Get-HttpClient

    $attempt = 0

    while ($attempt -lt $MaxRetries) {

        try {

            $sleepSeconds = $DelaySeconds

            $result = Get-AsyncResult -Task $client.SendAsync((& $RequestFactory))

            if(Test-Result -Result $result) {

                return $result

            }

            # Check for 503 Service Unavailable or 429 Too Many Requests with Retry-After header

            if ($result.StatusCode -eq 503 -or $result.StatusCode -eq 429) {

                if ($result.Headers.Contains("Retry-After")) {

                    $retryAfterValue = $result.Headers.GetValues("Retry-After") | Select-Object -First 1

                    # Retry-After can be either seconds (integer) or HTTP date

                    if ($retryAfterValue -match '^\d+$') {

                        $sleepSeconds = [int]$retryAfterValue

                    } else {

                        try {

                            $retryAfterDate = [DateTime]::Parse($retryAfterValue)

                            if ($retryAfterDate.Kind -ne [System.DateTimeKind]::Utc) {

                                $retryAfterDate = $retryAfterDate.ToUniversalTime()

                            }

                            $sleepSeconds = [Math]::Max(1, [int]($retryAfterDate - [DateTime]::UtcNow).TotalSeconds)

                        } catch {

                            Write-Verbose "Could not parse Retry-After header value: $retryAfterValue. Using default delay."

                            $sleepSeconds = $DelaySeconds

                        }

                    }

                    Write-Host "The service is working on the request and has requested a retry. Waiting for $sleepSeconds seconds as indicated by the Retry-After header..." -ForegroundColor Yellow

                }

            }

            $attempt++

        }

        catch {

            $attempt++

            Write-Verbose "Exception on attempt $attempt : $($_.Exception.Message)"

            if($attempt -ge $MaxRetries) {

                throw "Request failed after $MaxRetries attempts. Last error: $($_.Exception.Message)"

            }

        }

        if ($attempt -ge $MaxRetries) {

            Write-Host "Request failed after $MaxRetries attempts." -ForegroundColor Red

            Assert-Result -Result $result

        }

        Write-Verbose "Request failed on attempt $attempt. Retrying in $sleepSeconds seconds..."

        Start-Sleep -Seconds $sleepSeconds

    }

}

function Test-Result {

    param (

        [Parameter(Mandatory)]

        $Result

    )

    if (-not($Result.IsSuccessStatusCode))

    {

        $contentString = Get-AsyncResult -Task $Result.Content.ReadAsStringAsync()

        if ($contentString)

        {

            $errorMessage = $contentString.Trim('.')

            Write-Verbose "$(Get-LogDate): API Call returned $($Result.StatusCode): $($errorMessage). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

            return $false

        }

        else

        {

            Write-Verbose "$(Get-LogDate): API Call returned $($Result.StatusCode): $($Result.ReasonPhrase). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

            return $false

        }

    }

    return $true

}

function Assert-Result {

    param (

        [Parameter(Mandatory)]

        $Result

    )

    if (-not($Result.IsSuccessStatusCode))

    {

        $contentString = Get-AsyncResult -Task $Result.Content.ReadAsStringAsync()

        if ($contentString)

        {

            $errorMessage = $contentString.Trim('.')

            Write-Verbose "$(Get-LogDate): API Call returned $($Result.StatusCode): $($errorMessage). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

            throw "$(Get-LogDate): API Call returned $($Result.StatusCode): $($errorMessage). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

        }

        else

        {

            Write-Verbose "$(Get-LogDate): API Call returned $($Result.StatusCode): $($Result.ReasonPhrase). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

            throw "$(Get-LogDate): API Call returned $($Result.StatusCode): $($Result.ReasonPhrase). Correlation ID: $($($Result.Headers.GetValues("x-ms-correlation-id") | Select-Object -First 1))"

        }

    }

}

function ConvertFrom-JsonToClass {

    param (

        [string]$Json,

        [Type]$ClassType

    )

    $data = $Json | ConvertFrom-Json

    # Handle array types directly

    if ($ClassType.IsArray) {

        $elementType = $ClassType.GetElementType()

        $itemList = @()

        foreach ($item in $data) {

            $itemJson = $item | ConvertTo-Json -Depth 10

            $itemList += ConvertFrom-JsonToClass -Json $itemJson -ClassType $elementType

        }

        return ,$itemList  

    }

    # Handle primitive types and strings

    if ($ClassType.IsPrimitive -or $ClassType -eq [string]) {

        return ($data -as $ClassType)

    }

    # Handle common value types explicitly

    if ($ClassType -eq [DateTime]) {

        return [DateTime]::Parse($data)

    }

    if ($ClassType.FullName -eq 'System.Guid') {

        return [Guid]::Parse($data)

    }

    if ($ClassType.FullName -eq 'System.Decimal') {

        return [Decimal]::Parse($data)

    }

    # Handle complex types

    $instance = [Activator]::CreateInstance($ClassType)

    foreach ($property in $ClassType.GetProperties()) {

        $name = $property.Name

        $type = Get-UnderlyingType $property.PropertyType

        if ($data.PSObject.Properties[$name]) {

            if ($type -eq [hashtable] -or $type.FullName -eq 'System.Collections.Hashtable') {

                $instance.$name = ConvertTo-Hashtable $data.$name

            }

            elseif ($type.IsClass -and $type -ne [string]) {

                $nestedJson = $data.$name | ConvertTo-Json -Depth 10

                $instance.$name = ConvertFrom-JsonToClass -Json $nestedJson -ClassType $type

            }

            else {

                $instance.$name = $data.$name

            }

        }

    }

    return $instance

}

function Get-UnderlyingType([type]$t) {

    if ($t.IsGenericType -and $t.GetGenericTypeDefinition().FullName -eq 'System.Nullable`1') {

        return $t.GetGenericArguments()[0]

    }

    return $t

}

function ConvertTo-Hashtable($obj) {

    if ($obj -is [hashtable]) {

        return $obj

    }

    $hash = @{}

    foreach ($property in $obj.PSObject.Properties) {

        $hash[$property.Name] = $property.Value

    }

    return $hash

}

# SIG # Begin signature block

# MIIoKAYJKoZIhvcNAQcCoIIoGTCCKBUCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCtooQDiHLVnOHs

# bKbMJWdEa1eJlR8RB2BsaAe1XvPYoaCCDXYwggX0MIID3KADAgECAhMzAAAEhV6Z

# 7A5ZL83XAAAAAASFMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM3WhcNMjYwNjE3MTgyMTM3WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDASkh1cpvuUqfbqxele7LCSHEamVNBfFE4uY1FkGsAdUF/vnjpE1dnAD9vMOqy

# 5ZO49ILhP4jiP/P2Pn9ao+5TDtKmcQ+pZdzbG7t43yRXJC3nXvTGQroodPi9USQi

# 9rI+0gwuXRKBII7L+k3kMkKLmFrsWUjzgXVCLYa6ZH7BCALAcJWZTwWPoiT4HpqQ

# hJcYLB7pfetAVCeBEVZD8itKQ6QA5/LQR+9X6dlSj4Vxta4JnpxvgSrkjXCz+tlJ

# 67ABZ551lw23RWU1uyfgCfEFhBfiyPR2WSjskPl9ap6qrf8fNQ1sGYun2p4JdXxe

# UAKf1hVa/3TQXjvPTiRXCnJPAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUuCZyGiCuLYE0aU7j5TFqY05kko0w

# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW

# MBQGA1UEBRMNMjMwMDEyKzUwNTM1OTAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci

# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG

# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0

# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBACjmqAp2Ci4sTHZci+qk

# tEAKsFk5HNVGKyWR2rFGXsd7cggZ04H5U4SV0fAL6fOE9dLvt4I7HBHLhpGdE5Uj

# Ly4NxLTG2bDAkeAVmxmd2uKWVGKym1aarDxXfv3GCN4mRX+Pn4c+py3S/6Kkt5eS

# DAIIsrzKw3Kh2SW1hCwXX/k1v4b+NH1Fjl+i/xPJspXCFuZB4aC5FLT5fgbRKqns

# WeAdn8DsrYQhT3QXLt6Nv3/dMzv7G/Cdpbdcoul8FYl+t3dmXM+SIClC3l2ae0wO

# lNrQ42yQEycuPU5OoqLT85jsZ7+4CaScfFINlO7l7Y7r/xauqHbSPQ1r3oIC+e71

# 5s2G3ClZa3y99aYx2lnXYe1srcrIx8NAXTViiypXVn9ZGmEkfNcfDiqGQwkml5z9

# nm3pWiBZ69adaBBbAFEjyJG4y0a76bel/4sDCVvaZzLM3TFbxVO9BQrjZRtbJZbk

# C3XArpLqZSfx53SuYdddxPX8pvcqFuEu8wcUeD05t9xNbJ4TtdAECJlEi0vvBxlm

# M5tzFXy2qZeqPMXHSQYqPgZ9jvScZ6NwznFD0+33kbzyhOSz/WuGbAu4cHZG8gKn

# lQVT4uA2Diex9DMs2WHiokNknYlLoUeWXW1QrJLpqO82TLyKTbBM/oZHAdIc0kzo

# STro9b3+vjn2809D0+SOOCVZMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCGggwghoEAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAASFXpnsDlkvzdcAAAAABIUwDQYJYIZIAWUDBAIB

# BQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIE

# IPry+/3i0QQStzhOmrHLg1/OLKWcJNs6iIyKrt/18Fs3MEIGCisGAQQBgjcCAQwx

# NDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20wDQYJKoZIhvcNAQEBBQAEggEAnONVynWh71cyvs8Yp9uDL64++WB9gCRZ

# rtz+vgaIYxYJ6w47PqltcLtsIJNZVBuFHdE411lJuKkt2SugGOhNvrQNdAXU9zW0

# 4mVApmeRx5heLoRWWmD9u4EOv84Ln7lHi6z8dGk9n8EV+8+W8AP25gGmnlHJtuph

# MRxCQW2jK+y3JAYoXgV0zSXgjXoGjESEGoTpqlVcT9/T/zECXrVcRhQCYVtrTvB2

# 9uzLnRRpCXmyIU/ZeSxYN57QvJnoibZ8WKMMNzSrVScoo5aCqbdNN76TdW3MJKRT

# Qnge9tL54jq0TIjfqzjHsrxMvuL+8ESD2qHTVHsuy8iwAc6G/6tvxaGCF7Awghes

# BgorBgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJ

# YIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYB

# BAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAGzDgDPn2w1S1IoQXwm5kvUVelIK44

# A6rxpoaNC9qtLgIGaSTo2tzAGBMyMDI1MTIxNDE5NTc1Ny4wNDVaMASAAgH0oIHZ

# pIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYD

# VQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNV

# BAsTHm5TaGllbGQgVFNTIEVTTjoyQTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWlj

# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIFEKADAgECAhMzAAAC

# EKvN5BYY7zmwAAEAAAIQMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxMloXDTI2MTExMzE4NDgxMlowgdMx

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1p

# Y3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNo

# aWVsZCBUU1MgRVNOOjJBMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQg

# VGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC

# AgEAjcc4q057ZwIgpKu4pTXWLejvYEduRf+1mIpbiJEMFWWmU2xpip+zK7xFxKGB

# 1CclUXBU0/ZQZ6LG8H0gI7yvosrsPEI1DPB/XccGCvswKbAKckngOuGTEPGk7K/v

# EZa9h0Xt02b7m2n9MdIjkLrFl0pDriKyz0QHGpdh93X6+NApfE1TL24Vo0xkeoFG

# pL3rX9gXhIOF59EMnTd2o45FW/oxMgY9q0y0jGO0HrCLTCZr50e7TZRSNYAy2lyK

# bvKI2MKlN1wLzJvZbbc//L3s1q3J6KhS0KC2VNEImYdFgVkJej4zZqHfScTbx9hj

# FgFpVkJl4xH5VJ8tyJdXE9+vU0k9AaT2QP1Zm3WQmXedSoLjjI7LWznuHwnoGIXL

# iJMQzPqKqRIFL3wzcrDrZeWgtAdBPbipglZ5CQns6Baj5Mb6a/EZC9G3faJYK5QV

# HeE6eLoSEwp1dz5WurLXNPsp0VWplpl/FJb8jrRT/jOoHu85qRcdYpgByU9W7IWP

# drthmyfqeAw0omVWN5JxcogYbLo2pANJHlsMdWnxIpN5YwHbGEPCuosBHPk2Xd9+

# E/pZPQUR6v+D85eEN5A/ZM/xiPpxa8dJZ87BpTvui7/2uflUMJf2Yc9ZLPgEdhQQ

# o0LwMDSTDT48y3sV7Pdo+g5q+MqnJztN/6qt1cgUTe9u+ykCAwEAAaOCAUkwggFF

# MB0GA1UdDgQWBBSe42+FrpdF2avbUhlk86BLSH5kejAfBgNVHSMEGDAWgBSfpxVd

# AF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1p

# Y3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIw

# UENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUy

# MFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYG

# A1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B

# AQsFAAOCAgEAvs4rO3oo8czOrxPqnnSEkUVq718QzlrIiy7/EW7JmQXsJoFxHWUF

# 0Ux0PDyKFDRXPJVv29F7kpJkBJJmcQg5HQV7blUXIMWQ1qX0KdtFQXI/MRL77Z+p

# K5x1jX+tbRkA7a5Ft7vWuRoAEi02HpFH5m/Akh/dfsbx8wOpecJbYvuHuy4aG0/t

# GzOWFCxMMNhGAIJ4qdV87JnY/uMBmiodlm+Gz357XWW5tg3HrtNZXuQ0tWUv26ud

# 4nGKJo/oLZHP75p4Rpt7dMdYKUF9AuVFBwxYZYpvgk12tfK+/yOwq84/fjXVCdM8

# 3Qnawtbenbk/lnbc9KsZom+GnvA4itAMUpSXFWrcRkqdUQLN+JrG6fPBoV8+D8U2

# Q2F4XkiCR6EU9JzYKwTuvL6t3nFuxnkLdNjbTg2/yv2j3WaDuCK5lSPgsndIiH6B

# ku2Ui3A0aUo6D9z9v+XEuBs9ioVJaOjf/z+Urqg7ESnxG0/T1dKci7vLQ2XNgWFY

# O+/OlDjtGoma1ijX4m14N9qgrXTuWEGwgC7hhBgp3id/LAOf9BSTWA5lBrilsEoe

# xXBrOn/1wM3rjG0hIsxvF5/YOK78mVRGY6Y7zYJ+uXt4OTOFBwadPv8MklreQZLP

# nQPtiwop4rlLUYaPCiD4YUqRNbLp8Sgyo9g0iAcZYznTuc+8Q8ZIrgwwggdxMIIF

# WaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNy

# b3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAx

# ODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAy

# MDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL

# 1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5K

# Wv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTeg

# Cjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv62

# 6GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SH

# JMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss25

# 4o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/Nme

# Rd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afo

# mXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLi

# Mxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb

# 0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W2

# 9R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQF

# AgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1Ud

# DgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdM

# g30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp

# b3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJ

# KwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQF

# MAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8w

# TTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVj

# dHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBK

# BggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9N

# aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1V

# ffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1

# OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce57

# 32pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihV

# J9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZ

# UnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW

# 9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k

# +SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pF

# EUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L

# +DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1

# ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6

# CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZ

# pIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYD

# VQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNV

# BAsTHm5TaGllbGQgVFNTIEVTTjoyQTFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWlj

# cm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAOsyf2b6r

# iPKnnXlIgIL2f53PUsKggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0Eg

# MjAxMDANBgkqhkiG9w0BAQsFAAIFAOzpG10wIhgPMjAyNTEyMTQxMTE3NDlaGA8y

# MDI1MTIxNTExMTc0OVowdzA9BgorBgEEAYRZCgQBMS8wLTAKAgUA7OkbXQIBADAK

# AgEAAgIEngIB/zAHAgEAAgIS4DAKAgUA7Ops3QIBADA2BgorBgEEAYRZCgQCMSgw

# JjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3

# DQEBCwUAA4IBAQAHWki00LaEEp5ebzuk+rMum43mbNe7FcZ77A49yJ1+lSjNhKer

# ybV6xisqllJFQ85buWtQAU3RDjNUgpuf7DQyYHnHF+UJ+mkgLsohasRyBQL9Q0Zt

# sbk8un1D7JFKCbt1uOxiMt5gnXqBWnXVsIx7yV+7PDLqXbCcYofKXqMVFFjugS6y

# zkLqyDisT3AvRuK1+gEMXcpzQeJ0pVVP6TDkRSGVV3Ejov1yL3CbsS0JPe+ovL1R

# wPHqjjA3S2uKoS3OMnPWW0n3mEzLQzcQZRS14WHqmVSp7g3NOHThyVqzP79lyKiQ

# bVXBGTn5CQTTJrlMQGai4yMqge/ucZVidgHFMYIEDTCCBAkCAQEwgZMwfDELMAkG

# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx

# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIQq83kFhjvObAAAQAAAhAwDQYJ

# YIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkq

# hkiG9w0BCQQxIgQgjFlkVdHs+b4YEAhtR0b7Sl1SWFhCcrCFYf9hLl7zIJowgfoG

# CyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCDD1SHufsjzY59S1iHUQY9hnsKSrJPg

# 5a9Mc4YnGmPHxjCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# AhMzAAACEKvN5BYY7zmwAAEAAAIQMCIEIJ+Bg8QxJ5oi2u21+VZaK4mq0JDqnwTo

# nVNou3PzVNxjMA0GCSqGSIb3DQEBCwUABIICAHLAx2wt4eEryaIgrALxcvFq1TOq

# 4nqrcWZoglClFEzHeUFb0TY4Z9NTJOfIC8VWH5Xz4aw86JYgHxgFYY8SZcVwGypi

# fMmsAX291yrLdNzEMlusACbKHHNiunM6yB9H9gxnYeStVV7Jld6RHIR6nZjDo/sg

# G6Q79bkuYH5b1y6r3aMX/5UV5B4raEoJ8sdH860/WMqFt7Vs3QHfcjDdSDOHVB4K

# 2IfS9Fy+bpW03S0HXnA/EFoS/dGzTzltH3BVN2MGLbksNZW2zOBij2N7xAfFn8hz

# z92wxrV/DQWrfC6TeHb1VPBHfnkbBFRgloWGMALpgKCqjldoOKqAfGIbQ3d5Z6rB

# kl6+KMaUVirsnOJjdRFvxLDa0AxQC72jgEQ0pWfGHuW8DaUu9Ejbngd94ZwuWmPx

# grz/Rs81XpnW8/cru4KfQ63faYqjRf1Q649siAIc2y3ydv19/4DoE1NfV5z0paZ8

# +PBH8Zjh46F4h3yGz2zIDu4wwqE+kd007CU/b3s5KWtJr7wpxkrj++QmR4O/we+b

# 6Wibz9NTUlrM3O8S8wu3r9JADxyMSD8gaboJ6MyJd4hmCTyGmW7yuVYLK2bhawA4

# ki3GbgBRZlFy+PDt7lxvgOJxlDCzQXpUIbwFJYKHLI2BvZ68c5PnwIn0MMcOy3Xv

# zNadjYq/mGQ0XYiy

# SIG # End signature block