pax_global_header00006660000000000000000000000064145107474310014520gustar00rootroot0000000000000052 comment=6988bdab7a203abfe8dc264992f7e350c67aef3d python3-saml-1.16.0/000077500000000000000000000000001451074743100141435ustar00rootroot00000000000000python3-saml-1.16.0/.github/000077500000000000000000000000001451074743100155035ustar00rootroot00000000000000python3-saml-1.16.0/.github/workflows/000077500000000000000000000000001451074743100175405ustar00rootroot00000000000000python3-saml-1.16.0/.github/workflows/python-package.yml000066400000000000000000000054661451074743100232100ustar00rootroot00000000000000# This workflow will install Python dependencies, run tests and lint with a variety of Python versions # For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions name: Python package on: push: branches: - master pull_request: branches: - master jobs: test_py3: runs-on: ubuntu-20.04 strategy: fail-fast: false matrix: python-version: - "3.5" - "3.6" - "3.7" - "3.8" - "3.9" - "3.10" - "3.11" - "3.12" steps: - uses: actions/checkout@v3 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v2 with: python-version: ${{ matrix.python-version }} - uses: actions/cache@v2 with: path: ~/.cache/pip key: ${{ runner.os }}-pip-${{ hashFiles('**/setup.py') }} restore-keys: | ${{ runner.os }}-pip- - name: Install dependencies run: | pip install -U setuptools sudo apt-get update -qq sudo apt-get install -qq swig python-dev libxml2-dev libxmlsec1-dev make install-req make install-test - name: Test run: make pytest test_py2: runs-on: ubuntu-20.04 container: image: python:2.7.18-buster strategy: fail-fast: false steps: - uses: actions/checkout@v3 - uses: actions/cache@v2 with: path: ~/.cache/pip key: ${{ runner.os }}-pip-${{ hashFiles('**/setup.py') }} restore-keys: | ${{ runner.os }}-pip- - name: Install dependencies run: | pip install -U setuptools apt-get update -qq apt-get install -qq swig python-dev libxml2-dev libxmlsec1-dev make install-req make install-test - name: Test run: make pytest lint: runs-on: ubuntu-20.04 environment: CI steps: - uses: actions/checkout@v3 - uses: actions/setup-python@v2 with: python-version: "3.12" - uses: actions/cache@v2 with: path: ~/.cache/pip key: ${{ runner.os }}-pip-${{ hashFiles('**/setup.py') }} restore-keys: | ${{ runner.os }}-pip- - name: Install dependencies run: | pip install -U setuptools sudo apt-get update -qq sudo apt-get install -qq swig python-dev libxml2-dev libxmlsec1-dev pip install --force-reinstall --no-binary lxml lxml make install-req make install-test - name: Run linters run: | make pycodestyle make flake8 - name: Run coveralls env: COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }} run: | pip install coveralls coverage run setup.py test coverage report -m coveralls python3-saml-1.16.0/.gitignore000066400000000000000000000005121451074743100161310ustar00rootroot00000000000000*~ .#* ## the next line needs to start with a backslash to avoid looking like ## a comment \#*# *.pyc *.pyo .*.swp __pycache_ /parts /.installed.cfg /develop-eggs /*.eg *.egg-info /eggs /.eggs /build /dist /venv .coverage .pypirc /.idea .mypy_cache/ .pytest_cache poetry.lock *.key *.crt *.pem settings.py advanced_settings.py python3-saml-1.16.0/.travis.yml000066400000000000000000000014071451074743100162560ustar00rootroot00000000000000language: python python: - '2.7' - '3.5' - '3.6' - '3.7' - '3.8' - '3.9' - '3.10' matrix: include: - python: '3.7' dist: xenial # required for Python >= 3.7 (travis-ci/travis-ci#9069) install: - sudo apt-get update -qq - sudo apt-get install -qq swig python-dev libxml2-dev libxmlsec1-dev - 'travis_retry pip install --force-reinstall --no-binary lxml lxml' - 'travis_retry pip install .' - 'travis_retry pip install -e ".[test]"' script: - 'coverage run --source=src/onelogin/saml2 --rcfile=tests/coverage.rc setup.py test' - 'coverage report -m --rcfile=tests/coverage.rc' # - 'pylint src/onelogin/saml2 --rcfile=tests/pylint.rc' # - 'flake8 --toml-config pyproject.toml' - 'flake8 --ignore E226,E302,E41,E731,E501,C901,W504' python3-saml-1.16.0/LICENSE000066400000000000000000000021251451074743100151500ustar00rootroot00000000000000Copyright (c) 2010-2022 OneLogin, Inc. Copyright (c) 2023 IAM Digital Services, SL. Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. python3-saml-1.16.0/MANIFEST.in000066400000000000000000000002261451074743100157010ustar00rootroot00000000000000include README.md include LICENSE recursive-include src *.py recursive-include src *.xsd recursive-exclude * __pycache__ recursive-exclude * *.py[co] python3-saml-1.16.0/Makefile000066400000000000000000000014441451074743100156060ustar00rootroot00000000000000PIP=pip FLAKE8=flake8 PYTEST=pytest PYCODESTYLE=pycodestyle COVERAGE=coverage COVERAGE_CONFIG=tests/coverage.rc PEP8_CONFIG=tests/pep8.rc MAIN_SOURCE=src/onelogin/saml2 DEMOS=demo-django demo-flask demo-tornado demo_pyramid TESTS=tests/src/OneLogin/saml2_tests SOURCES=$(MAIN_SOURCE) $(DEMOS) $(TESTS) install-req: $(PIP) install . install-test: $(PIP) install -e ".[test]" pytest: $(COVERAGE) run --source $(MAIN_SOURCE) --rcfile=$(COVERAGE_CONFIG) -m pytest $(COVERAGE) report -m --rcfile=$(COVERAGE_CONFIG) pycodestyle: $(PYCODESTYLE) --ignore=E501,E731,W504 $(SOURCES) --config=$(PEP8_CONFIG) flake8: $(FLAKE8) $(SOURCES) clean: rm -rf .pytest_cache/ rm -rf .eggs/ find . -type d -name "__pycache__" -exec rm -r {} + find . -type d -name "*.egg-info" -exec rm -r {} + rm .coverage python3-saml-1.16.0/README.md000066400000000000000000002305421451074743100154300ustar00rootroot00000000000000# SAML Python Toolkit (compatible with Python3) [![Python package](https://github.com/SAML-Toolkits/python3-saml/actions/workflows/python-package.yml/badge.svg)](https://github.com/SAML-Toolkits/python3-saml/actions/workflows/python-package.yml) ![PyPI Downloads](https://img.shields.io/pypi/dm/python3-saml.svg?label=PyPI%20Downloads) [![Coverage Status](https://coveralls.io/repos/github/SAML-Toolkits/python3-saml/badge.svg?branch=master)](https://coveralls.io/github/SAML-Toolkits/python3-saml?branch=master) [![PyPi Version](https://img.shields.io/pypi/v/python3-saml.svg)](https://pypi.python.org/pypi/python3-saml) ![Python versions](https://img.shields.io/pypi/pyversions/python3-saml.svg) Add SAML support to your Python software using this library. Forget those complicated libraries and use the open source library provided by the SAML tool community. This version supports Python3. Python 2 support was deprecated on Jan 1st, 2020: [python-saml](https://github.com/onelogin/python-saml) #### Warning #### Version 1.16.X is the latest version supporting Python2, consider its use deprecated. 1.17 won't be Python2 compatible. Version 1.13.0 sets sha256 and rsa-sha256 as default algorithms Version 1.8.0 sets strict mode active by default Update ``python3-saml`` to ``1.5.0``, this version includes security improvements for preventing XEE and Xpath Injections. Update ``python3-saml`` to ``1.4.0``, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability. This version also changes how the calculate fingerprint method works, and will expect as input a formatted X.509 certificate. Update ``python3-saml`` to ``1.2.6`` that adds the use defusedxml that will prevent XEE and other attacks based on the abuse of XML. (CVE-2017-9672) Update ``python3-saml`` to ``>= 1.2.1``, ``1.2.0`` had a bug on signature validation process (when using ``wantAssertionsSigned`` and ``wantMessagesSigned``). [CVE-2016-1000251](https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000251/CVE-2016-1000251.json) ``1.2.0`` version includes a security patch that contains extra validations that will prevent signature wrapping attacks. ``python3-saml < v1.2.0`` is vulnerable and allows signature wrapping! #### Security Guidelines #### If you believe you have discovered a security vulnerability in this toolkit, please report it by mail to the maintainer: sixto.martin.garcia+security@gmail.com Why add SAML support to my software? ------------------------------------ SAML is an XML-based standard for web browser single sign-on and is defined by the OASIS Security Services Technical Committee. The standard has been around since 2002, but lately it is becoming popular due its advantages: * **Usability** - One-click access from portals or intranets, deep linking, password elimination and automatically renewing sessions make life easier for the user. * **Security** - Based on strong digital signatures for authentication and integrity, SAML is a secure single sign-on protocol that the largest and most security conscious enterprises in the world rely on. * **Speed** - SAML is fast. One browser redirect is all it takes to securely sign a user into an application. * **Phishing Prevention** - If you don’t have a password for an app, you can’t be tricked into entering it on a fake login page. * **IT Friendly** - SAML simplifies life for IT because it centralizes authentication, provides greater visibility and makes directory integration easier. * **Opportunity** - B2B cloud vendor should support SAML to facilitate the integration of their product. General Description ------------------- SAML Python toolkit lets you turn your Python application into a SP (Service Provider) that can be connected to an IdP (Identity Provider). **Supports:** * SSO and SLO (SP-Initiated and IdP-Initiated). * Assertion and nameId encryption. * Assertion signatures. * Message signatures: ``AuthNRequest``, ``LogoutRequest``, ``LogoutResponses``. * Enable an Assertion Consumer Service endpoint. * Enable a Single Logout Service endpoint. * Publish the SP metadata (which can be signed). **Key Features:** * **saml2int** - Implements the SAML 2.0 Web Browser SSO Profile. * **Session-less** - Forget those common conflicts between the SP and the final app, the toolkit delegate session in the final app. * **Easy to use** - Programmer will be allowed to code high-level and low-level programming, 2 easy to use APIs are available. * **Tested** - Thoroughly tested. Installation ------------ ### Dependencies ### * python 2.7 (deprecated) // python 3.6 * [xmlsec](https://pypi.python.org/pypi/xmlsec) Python bindings for the XML Security Library. * [lxml](https://pypi.python.org/pypi/lxml) Python bindings for the libxml2 and libxslt libraries. * [isodate](https://pypi.python.org/pypi/isodate) An ISO 8601 date/time/ duration parser and formatter Review the ``setup.py`` file to know the version of the library that ``python3-saml`` is using ### Code ### #### Option 1. Download from GitHub #### The toolkit is hosted on GitHub. You can download it from: * Latest release: https://github.com/saml-toolkits/python3-saml/releases/latest * Master repo: https://github.com/saml-toolkits/python3-saml/tree/master Copy the core of the library ``(src/onelogin/saml2 folder)`` and merge the ``setup.py`` inside the Python application. (Each application has its structure so take your time to locate the Python SAML toolkit in the best place). #### Option 2. Download from pypi #### The toolkit is hosted in pypi, you can find the ``python3-saml`` package at https://pypi.python.org/pypi/python3-saml You can install it executing: ``` $ pip install python3-saml ``` If you want to know how a project can handle python packages review this [guide](https://packaging.python.org/en/latest/tutorial.html) and review this [sampleproject](https://github.com/pypa/sampleproject) #### NOTE #### To avoid ``libxml2`` library version incompatibilities between ``xmlsec`` and ``lxml`` it is recommended that ``lxml`` is not installed from binary. This can be ensured by executing: ``` $ pip install --force-reinstall --no-binary lxml lxml ``` Security Warning ---------------- In production, the **strict** parameter MUST be set as **"true"**. Otherwise your environment is not secure and will be exposed to attacks. In production also we highly recommend to register on the settings the IdP certificate instead of using the fingerprint method. The fingerprint, is a hash, so at the end is open to a collision attack that can end on a signature validation bypass. Other SAML toolkits deprecated that mechanism, we maintain it for compatibility and also to be used on test environment. ### Avoiding Open Redirect attacks ### Some implementations uses the RelayState parameter as a way to control the flow when SSO and SLO succeeded. So basically the user is redirected to the value of the RelayState. If you are using Signature Validation on the HTTP-Redirect binding, you will have the RelayState value integrity covered, otherwise, and on HTTP-POST binding, you can't trust the RelayState so before executing the validation, you need to verify that its value belong a trusted and expected URL. Read more about Open Redirect [CWE-601](https://cwe.mitre.org/data/definitions/601.html). ### Avoiding Replay attacks ### A replay attack is basically try to reuse an intercepted valid SAML Message in order to impersonate a SAML action (SSO or SLO). SAML Messages have a limited timelife (NotBefore, NotOnOrAfter) that make harder this kind of attacks, but they are still possible. In order to avoid them, the SP can keep a list of SAML Messages or Assertion IDs already validated and processed. Those values only need to be stored the amount of time of the SAML Message life time, so we don't need to store all processed message/assertion Ids, but the most recent ones. The OneLogin_Saml2_Auth class contains the [get_last_request_id](https://github.com/onelogin/python3-saml/blob/ab62b0d6f3e5ac2ae8e95ce3ed2f85389252a32d/src/onelogin/saml2/auth.py#L357), [get_last_message_id](https://github.com/onelogin/python3-saml/blob/ab62b0d6f3e5ac2ae8e95ce3ed2f85389252a32d/src/onelogin/saml2/auth.py#L364) and [get_last_assertion_id](https://github.com/onelogin/python3-saml/blob/ab62b0d6f3e5ac2ae8e95ce3ed2f85389252a32d/src/onelogin/saml2/auth.py#L371) methods to retrieve the IDs Checking that the ID of the current Message/Assertion does not exists in the list of the ones already processed will prevent replay attacks. Getting Started --------------- ### Knowing the toolkit ### The new SAML Toolkit contains different folders (``certs``, ``lib``, ``demo-django``, ``demo-flask`` and ``tests``) and some files. Let's start describing them: #### src #### This folder contains the heart of the toolkit, **onelogin/saml2** folder contains the new version of the classes and methods that are described in a later section. #### demo-django #### This folder contains a Django project that will be used as demo to show how to add SAML support to the Django Framework. **demo** is the main folder of the Django project (with its ``settings.py``, ``views.py``, ``urls.py``), **templates** is the Django templates of the project and **saml** is a folder that contains the ``certs`` folder that could be used to store the X.509 public and private key, and the SAML toolkit settings (``settings.json`` and ``advanced_settings.json``). ***Notice about certs*** SAML requires a X.509 cert to sign and encrypt elements like ``NameID``, ``Message``, ``Assertion``, ``Metadata``. If our environment requires sign or encrypt support, the certs folder may contain the X.509 cert and the private key that the SP will use: * sp.crt The public cert of the SP * sp.key The private key of the SP Or also we can provide those data in the setting file at the ``x509cert`` and the ``privateKey`` JSON parameters of the ``sp`` element. Sometimes we could need a signature on the metadata published by the SP, in this case we could use the X.509 cert previously mentioned or use a new X.509 cert: ``metadata.crt`` and ``metadata.key``. Use ``sp_new.crt`` if you are in a key rollover process and you want to publish that X.509 certificate on Service Provider metadata. If you want to create self-signed certs, you can do it at the https://www.samltool.com/self_signed_certs.php service, or using the command: ```bash openssl req -new -x509 -days 3652 -nodes -out sp.crt -keyout sp.key ``` #### demo-flask #### This folder contains a Flask project that will be used as demo to show how to add SAML support to the Flask Framework. ``index.py`` is the main Flask file that has all the code, this file uses the templates stored at the ``templates`` folder. In the ``saml`` folder we found the ``certs`` folder to store the X.509 public and private key, and the SAML toolkit settings (``settings.json`` and ``advanced_settings.json``). #### demo_pyramid #### This folder contains a Pyramid project that will be used as demo to show how to add SAML support to the [Pyramid Web Framework](http://docs.pylonsproject.org/projects/pyramid/en/latest/). ``\_\_init__.py`` is the main file that configures the app and its routes, ``views.py`` is where all the logic and SAML handling takes place, and the templates are stored in the ``templates`` folder. The ``saml`` folder is the same as in the other two demos. #### demo-tornado #### This folder contains a Tornado project that will be used as demo to show how to add SAML support to the Tornado Framework. ``views.py`` (with its ``settings.py``) is the main Flask file that has all the code, this file uses the templates stored at the ``templates`` folder. In the ``saml`` folder we found the ``certs`` folder to store the X.509 public and private key, and the SAML toolkit settings (``settings.json`` and ``advanced_settings.json``). It requires python3.5 (it's using tornado 6.0.3) #### setup.py #### Setup script is the centre of all activity in building, distributing, and installing modules. Read more at https://pythonhosted.org/an_example_pypi_project/setuptools.html #### tests #### Contains the unit test of the toolkit. In order to execute the test you only need to load the virtualenv with the toolkit installed on it properly: ``` pip install -e ".[test]" ``` and execute: ``` python setup.py test ``` The previous line will run the tests for the whole toolkit. You can also run the tests for a specific module. To do so for the auth module you would have to execute this: ``` python setup.py test --test-suite tests.src.OneLogin.saml2_tests.auth_test.OneLogin_Saml2_Auth_Test ``` With the ``--test-suite`` parameter you can specify the module to test. You'll find all the module available and their class names at ``tests/src/OneLogin/saml2_tests/``. ### How It Works ### #### Settings #### First of all we need to configure the toolkit. The SP's info, the IdP's info, and in some cases, configure advanced security issues like signatures and encryption. There are two ways to provide the settings information: * Use a ``settings.json`` file that we should locate in any folder, but indicates its path with the ``custom_base_path`` parameter. * Use a JSON object with the setting data and provide it directly to the constructor of the class (if your toolkit integation requires certs, remember to provide the ``custom_base_path`` as part of the settings or as a parameter in the constructor). In the demo-django and in the demo-flask folders you will find a ``saml`` folder, inside there is a ``certs`` folder and a ``settings.json`` and ``advanced_settings.json`` file. Those files contain the settings for the SAML toolkit. Copy them in your project and set the correct values. This is the ``settings.json`` file: ```javascript { // If strict is True, then the Python Toolkit will reject unsigned // or unencrypted messages if it expects them to be signed or encrypted. // Also it will reject the messages if the SAML standard is not strictly // followed. Destination, NameId, Conditions ... are validated too. "strict": true, // Enable debug mode (outputs errors). "debug": true, // Service Provider Data that we are deploying. "sp": { // Identifier of the SP entity (must be a URI) "entityId": "https:///metadata/", // Specifies info about where and how the message MUST be // returned to the requester, in this case our SP. "assertionConsumerService": { // URL Location where the from the IdP will be returned "url": "https:///?acs", // SAML protocol binding to be used when returning the // message. SAML Toolkit supports this endpoint for the // HTTP-POST binding only. "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" }, // Specifies info about where and how the message MUST be sent. "singleLogoutService": { // URL Location where the from the IdP will be sent (IdP-initiated logout) "url": "https:///?sls", // URL Location where the from the IdP will sent (SP-initiated logout, reply) // OPTIONAL: only specify if different from url parameter //"responseUrl": "https:///?sls", // SAML protocol binding to be used when returning the // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, // If you need to specify requested attributes, set a // attributeConsumingService. nameFormat, attributeValue and // friendlyName can be omitted "attributeConsumingService": { // OPTIONAL: only specify if SP requires this. // index is an integer which identifies the attributeConsumingService used // to the SP. SAML toolkit supports configuring only one attributeConsumingService // but in certain cases the SP requires a different value. Defaults to '1'. // "index": '1', "serviceName": "SP test", "serviceDescription": "Test Service", "requestedAttributes": [ { "name": "", "isRequired": false, "nameFormat": "", "friendlyName": "", "attributeValue": [] } ] }, // Specifies the constraints on the name identifier to be used to // represent the requested subject. // Take a look on src/onelogin/saml2/constants.py to see the NameIdFormat that are supported. "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", // Usually X.509 cert and privateKey of the SP are provided by files placed at // the certs folder. But we can also provide them with the following parameters "x509cert": "", "privateKey": "" /* * Key rollover * If you plan to update the SP X.509cert and privateKey * you can define here the new X.509cert and it will be * published on the SP metadata so Identity Providers can * read them and get ready for rollover. */ // 'x509certNew': '', }, // Identity Provider Data that we want connected with our SP. "idp": { // Identifier of the IdP entity (must be a URI) "entityId": "https://app.onelogin.com/saml/metadata/", // SSO endpoint info of the IdP. (Authentication Request protocol) "singleSignOnService": { // URL Target of the IdP where the Authentication Request Message // will be sent. "url": "https://app.onelogin.com/trust/saml2/http-post/sso/", // SAML protocol binding to be used when returning the // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, // SLO endpoint info of the IdP. "singleLogoutService": { // URL Location where the from the IdP will be sent (IdP-initiated logout) "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", // URL Location where the from the IdP will sent (SP-initiated logout, reply) // OPTIONAL: only specify if different from url parameter "responseUrl": "https://app.onelogin.com/trust/saml2/http-redirect/slo_return/", // SAML protocol binding to be used when returning the // message. SAML Toolkit supports the HTTP-Redirect binding // only for this endpoint. "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, // Public X.509 certificate of the IdP "x509cert": "" /* * Instead of using the whole X.509cert you can use a fingerprint in order to * validate a SAMLResponse (but you still need the X.509cert to validate LogoutRequest and LogoutResponse using the HTTP-Redirect binding). * But take in mind that the algorithm for the fingerprint should be as strong as the algorithm in a normal certificate signature * (e.g. SHA256 or strong) * * (openssl x509 -noout -fingerprint -in "idp.crt" to generate it, * or add for example the -sha256 , -sha384 or -sha512 parameter) * * If a fingerprint is provided, then the certFingerprintAlgorithm is required in order to * let the toolkit know which algorithm was used. Possible values: sha1, sha256, sha384 or sha512 * 'sha1' is the default value. * * Notice that if you want to validate any SAML Message sent by the HTTP-Redirect binding, you * will need to provide the whole X.509cert. */ // "certFingerprint": "", // "certFingerprintAlgorithm": "sha1", /* In some scenarios the IdP uses different certificates for * signing/encryption, or is under key rollover phase and * more than one certificate is published on IdP metadata. * In order to handle that the toolkit offers that parameter. * (when used, 'X.509cert' and 'certFingerprint' values are * ignored). */ // 'x509certMulti': { // 'signing': [ // '' // ], // 'encryption': [ // '' // ] // } } } ``` In addition to the required settings data (idp, sp), extra settings can be defined in `advanced_settings.json`: ```javascript { // Security settings "security": { /** signatures and encryptions offered **/ // Indicates that the nameID of the sent by this SP // will be encrypted. "nameIdEncrypted": false, // Indicates whether the messages sent by this SP // will be signed. [Metadata of the SP will offer this info] "authnRequestsSigned": false, // Indicates whether the messages sent by this SP // will be signed. "logoutRequestSigned": false, // Indicates whether the messages sent by this SP // will be signed. "logoutResponseSigned": false, /* Sign the Metadata false || true (use sp certs) || { "keyFileName": "metadata.key", "certFileName": "metadata.crt" } */ "signMetadata": false, /** signatures and encryptions required **/ // Indicates a requirement for the , // and elements received by this SP to be signed. "wantMessagesSigned": false, // Indicates a requirement for the elements received by // this SP to be signed. [Metadata of the SP will offer this info] "wantAssertionsSigned": false, // Indicates a requirement for the // elements received by this SP to be encrypted. "wantAssertionsEncrypted": false, // Indicates a requirement for the NameID element on the SAMLResponse // received by this SP to be present. "wantNameId": true, // Indicates a requirement for the NameID received by // this SP to be encrypted. "wantNameIdEncrypted": false, // Indicates a requirement for the AttributeStatement element "wantAttributeStatement": true, // Authentication context. // Set to false and no AuthContext will be sent in the AuthNRequest, // Set true or don't present this parameter and you will get an AuthContext 'exact' 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' // Set an array with the possible auth context values: array ('urn:oasis:names:tc:SAML:2.0:ac:classes:Password', 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'), "requestedAuthnContext": true, // Allows the authn comparison parameter to be set, defaults to 'exact' if the setting is not present. "requestedAuthnContextComparison": "exact", // Set to true to check that the AuthnContext(s) received match(es) the requested. "failOnAuthnContextMismatch": false, // In some environment you will need to set how long the published metadata of the Service Provider gonna be valid. // is possible to not set the 2 following parameters (or set to null) and default values will be set (2 days, 1 week) // Provide the desire TimeStamp, for example 2015-06-26T20:00:00Z "metadataValidUntil": null, // Provide the desire Duration, for example PT518400S (6 days) "metadataCacheDuration": null, // If enabled, URLs with single-label-domains will // be allowed and not rejected by the settings validator (Enable it under Docker/Kubernetes/testing env, not recommended on production) "allowSingleLabelDomains": false, // Algorithm that the toolkit will use on signing process. Options: // 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' // 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384' // 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512' "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", // Algorithm that the toolkit will use on digest process. Options: // 'http://www.w3.org/2000/09/xmldsig#sha1' // 'http://www.w3.org/2001/04/xmlenc#sha256' // 'http://www.w3.org/2001/04/xmldsig-more#sha384' // 'http://www.w3.org/2001/04/xmlenc#sha512' 'digestAlgorithm': "http://www.w3.org/2001/04/xmlenc#sha256", // Specify if you want the SP to view assertions with duplicated Name or FriendlyName attributes to be valid // Defaults to false if not specified 'allowRepeatAttributeName': false, // If the toolkit receive a message signed with a // deprecated algorithm (defined at the constant class) // will raise an error and reject the message "rejectDeprecatedAlgorithm": true }, // Contact information template, it is recommended to suply a // technical and support contacts. "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, // Organization information template, the info in en_US lang is // recommended, add more if required. "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } ``` In the ``security`` section, you can set the way that the SP will handle the messages and assertions. Contact the admin of the IdP and ask them what the IdP expects, and decide what validations will handle the SP and what requirements the SP will have and communicate them to the IdP's admin too. Once we know what kind of data could be configured, let's talk about the way settings are handled within the toolkit. The settings files described (``settings.json`` and ``advanced_settings.json``) are loaded by the toolkit if not other dict with settings info is provided in the constructors of the toolkit. Let's see some examples. ```python # Initializes toolkit with settings.json & advanced_settings.json files. auth = OneLogin_Saml2_Auth(req) # or settings = OneLogin_Saml2_Settings() # Initializes toolkit with settings.json & advanced_settings.json files from a custom base path. custom_folder = '/var/www/django-project' auth = OneLogin_Saml2_Auth(req, custom_base_path=custom_folder) # or settings = OneLogin_Saml2_Settings(custom_base_path=custom_folder) # Initializes toolkit with the dict provided. auth = OneLogin_Saml2_Auth(req, settings_data) # or settings = OneLogin_Saml2_Settings(settings_data) ``` You can declare the ``settings_data`` in the file that contains the constructor execution or locate them in any file and load the file in order to get the dict available as we see in the following example: ```python filename = "/var/www/django-project/custom_settings.json" # The custom_settings.json contains a json_data_file = open(filename, 'r') # settings_data dict. settings_data = json.load(json_data_file) json_data_file.close() auth = OneLogin_Saml2_Auth(req, settings_data) ``` #### Metadata Based Configuration The method above requires a little extra work to manually specify attributes about the IdP. (And your SP application) There's an easier method -- use a metadata exchange. Metadata is just an XML file that defines the capabilities of both the IdP and the SP application. It also contains the X.509 public key certificates which add to the trusted relationship. The IdP administrator can also configure custom settings for an SP based on the metadata. Using ````parse_remote```` IdP metadata can be obtained and added to the settings without further ado. Take in mind that the OneLogin_Saml2_IdPMetadataParser class does not validate in any way the URL that is introduced in order to be parsed. Usually the same administrator that handles the Service Provider also sets the URL to the IdP, which should be a trusted resource. But there are other scenarios, like a SAAS app where the administrator of the app delegates this functionality to other users. In this case, extra precaution should be taken in order to validate such URL inputs and avoid attacks like SSRF. `` idp_data = OneLogin_Saml2_IdPMetadataParser.parse_remote('https://example.com/auth/saml2/idp/metadata') `` You can specify a timeout in seconds for metadata retrieval, without it is not guaranteed that the request will complete `` idp_data = OneLogin_Saml2_IdPMetadataParser.parse_remote('https://example.com/auth/saml2/idp/metadata', timeout=5) `` If the Metadata contains several entities, the relevant ``EntityDescriptor`` can be specified when retrieving the settings from the ``IdpMetadataParser`` by its ``entityId`` value: ``idp_data = OneLogin_Saml2_IdPMetadataParser.parse_remote(https://example.com/metadatas, entity_id='idp_entity_id')`` #### How load the library #### In order to use the toolkit library you need to import the file that contains the class that you will need on the top of your python file. ``` python from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils ``` #### The Request #### Building a ``OneLogin\_Saml2\_Auth`` object requires a ``request`` parameter: ```python auth = OneLogin_Saml2_Auth(req) ``` This parameter has the following scheme: ```python req = { "http_host": "", "script_name": "", "get_data": "", "post_data": "", # Advanced request options "https": "", "request_uri": "", "query_string": "", "validate_signature_from_qs": False, "lowercase_urlencoding": False } ``` Each Python framework builds its own ``request`` object, you may map its data to match what the SAML toolkit expects. Let`s see some examples: ```python def prepare_from_django_request(request): return { 'http_host': request.META['HTTP_HOST'], 'script_name': request.META['PATH_INFO'], 'get_data': request.GET.copy(), 'post_data': request.POST.copy() } def prepare_from_flask_request(request): url_data = urlparse(request.url) return { 'http_host': request.host, 'script_name': request.path, 'get_data': request.args.copy(), 'post_data': request.form.copy() } ``` An explanation of some advanced request parameters: * `https` - Defaults to ``off``. Set this to ``on`` if you receive responses over HTTPS. * `request_uri` - The path where your SAML server receives requests. Set this if requests are not received at the server's root. * `query_string` - Set this with additional query parameters that should be passed to the request endpoint. * `validate_signature_from_qs` - If `True`, use `query_string` to validate request and response signatures. Otherwise, use `get_data`. Defaults to `False`. Note that when using `get_data`, query parameters need to be url-encoded for validation. By default we use upper-case url-encoding. Some IdPs, notably Microsoft AD, use lower-case url-encoding, which makes signature validation to fail. To fix this issue, either pass `query_string` and set `validate_signature_from_qs` to `True`, which works for all IdPs, or set `lowercase_urlencoding` to `True`, which only works for AD. #### Initiate SSO #### In order to send an ``AuthNRequest`` to the IdP: ```python from onelogin.saml2.auth import OneLogin_Saml2_Auth req = prepare_request_for_toolkit(request) auth = OneLogin_Saml2_Auth(req) # Constructor of the SP, loads settings.json # and advanced_settings.json auth.login() # This method will build and return a AuthNRequest URL that can be # either redirected to, or printed out onto the screen as a hyperlink ``` The ``AuthNRequest`` will be sent signed or unsigned based on the security info of the ``advanced_settings.json`` file (i.e. ``authnRequestsSigned``). The IdP will then return the SAML Response to the user's client. The client is then forwarded to the **Assertion Consumer Service (ACS)** of the SP with this information. We can set a ``return_to`` url parameter to the login function and that will be converted as a ``RelayState`` parameter: ```python target_url = 'https://example.com' auth.login(return_to=target_url) ``` The login method can receive 3 more optional parameters: * ``force_authn`` When ``true``, the ``AuthNReuqest`` will set the ``ForceAuthn='true'`` * ``is_passive`` When true, the ``AuthNReuqest`` will set the ``Ispassive='true'`` * ``set_nameid_policy`` When true, the ``AuthNReuqest`` will set a ``nameIdPolicy`` element. If a match on the future ``SAMLResponse`` ID and the ``AuthNRequest`` ID to be sent is required, that ``AuthNRequest`` ID must to be extracted and stored for future validation, we can get that ID by ``auth.get_last_request_id()`` #### The SP Endpoints #### Related to the SP there are 3 important endpoints: The metadata view, the ACS view and the SLS view. The toolkit provides examples of those views in the demos, but let's see an example. ***SP Metadata*** This code will provide the XML metadata file of our SP, based on the info that we provided in the settings files. ```python req = prepare_request_for_toolkit(request) auth = OneLogin_Saml2_Auth(req) saml_settings = auth.get_settings() metadata = saml_settings.get_sp_metadata() errors = saml_settings.validate_metadata(metadata) if len(errors) == 0: print(metadata) else: print("Error found on Metadata: %s" % (', '.join(errors))) ``` The ``get_sp_metadata`` will return the metadata signed or not based on the security info of the ``advanced_settings.json`` (``signMetadata``). Before the XML metadata is exposed, a check takes place to ensure that the info to be provided is valid. Instead of using the Auth object, you can directly use ``` saml_settings = OneLogin_Saml2_Settings(settings=None, custom_base_path=None, sp_validation_only=True) ``` to get the settings object and with the ``sp_validation_only=True`` parameter we will avoid the IdP settings validation. ***Assertion Consumer Service (ACS)*** This code handles the SAML response that the IdP forwards to the SP through the user's client. ```python req = prepare_request_for_toolkit(request) auth = OneLogin_Saml2_Auth(req) auth.process_response() errors = auth.get_errors() if not errors: if auth.is_authenticated(): request.session['samlUserdata'] = auth.get_attributes() if 'RelayState' in req['post_data'] and OneLogin_Saml2_Utils.get_self_url(req) != req['post_data']['RelayState']: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the req['post_data']['RelayState'] is a trusted URL. auth.redirect_to(req['post_data']['RelayState']) else: for attr_name in request.session['samlUserdata'].keys(): print('%s ==> %s' % (attr_name, '|| '.join(request.session['samlUserdata'][attr_name]))) else: print('Not authenticated') else: print("Error when processing SAML Response: %s %s" % (', '.join(errors), auth.get_last_error_reason())) ``` The SAML response is processed and then checked that there are no errors. It also verifies that the user is authenticated and stored the userdata in session. At that point there are 2 possible alternatives: * If no ``RelayState`` is provided, we could show the user data in this view or however we wanted. * If ``RelayState`` is provided, a redirection takes place. Notice that we saved the user data in the session before the redirection to have the user data available at the ``RelayState`` view. In order to retrieve attributes we use: ```python attributes = auth.get_attributes(); ``` With this method we get a dict with all the user data provided by the IdP in the assertion of the SAML response. If we execute print attributes we could get: ```python { "cn": ["Jhon"], "sn": ["Doe"], "mail": ["Doe"], "groups": ["users", "members"] } ``` Each attribute name can be used as a key to obtain the value. Every attribute is a list of values. A single-valued attribute is a list of a single element. The following code is equivalent: ```python attributes = auth.get_attributes(); print(attributes['cn']) print(auth.get_attribute('cn')) ``` Before trying to get an attribute, check that the user is authenticated. If the user isn't authenticated, an empty dict will be returned. For example, if we call to ``get_attributes`` before a ``auth.process_response``, the ``get_attributes()`` will return an empty dict. ***Single Logout Service (SLS)*** This code handles the Logout Request and the Logout Responses. ```python delete_session_callback = lambda: request.session.flush() url = auth.process_slo(delete_session_cb=delete_session_callback) errors = auth.get_errors() if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL. return redirect(url) else: print("Successfully Logged out") else: print("Error when processing SLO: %s %s" % (', '.join(errors), auth.get_last_error_reason())) ``` If the SLS endpoints receives a Logout Response, the response is validated and the session could be closed, using the callback. ```python # Part of the process_slo method logout_response = OneLogin_Saml2_Logout_Response(self.__settings, self.__request_data['get_data']['SAMLResponse']) if not logout_response.is_valid(self.__request_data, request_id): self.__errors.append('invalid_logout_response') elif logout_response.get_status() != OneLogin_Saml2_Constants.STATUS_SUCCESS: self.__errors.append('logout_not_success') elif not keep_local_session: OneLogin_Saml2_Utils.delete_local_session(delete_session_cb) ``` If the SLS endpoints receives an Logout Request, the request is validated, the session is closed and a Logout Response is sent to the SLS endpoint of the IdP. ```python # Part of the process_slo method request = OneLogin_Saml2_Utils.decode_base64_and_inflate(self.__request_data['get_data']['SAMLRequest']) if not OneLogin_Saml2_Logout_Request.is_valid(self.__settings, request, self.__request_data): self.__errors.append('invalid_logout_request') else: if not keep_local_session: OneLogin_Saml2_Utils.delete_local_session(delete_session_cb) in_response_to = request.id response_builder = OneLogin_Saml2_Logout_Response(self.__settings) response_builder.build(in_response_to) logout_response = response_builder.get_response() parameters = {'SAMLResponse': logout_response} if 'RelayState' in self.__request_data['get_data']: parameters['RelayState'] = self.__request_data['get_data']['RelayState'] security = self.__settings.get_security_data() if 'logoutResponseSigned' in security and security['logoutResponseSigned']: parameters['SigAlg'] = OneLogin_Saml2_Constants.RSA_SHA1 parameters['Signature'] = self.build_response_signature(logout_response, parameters.get('RelayState', None)) return self.redirect_to(self.get_slo_url(), parameters) ``` If we don't want that ``process_slo`` to destroy the session, pass a ``true`` parameter to the ``process_slo`` method: ```python keepLocalSession = true auth.process_slo(keep_local_session=keepLocalSession); ``` #### Initiate SLO #### In order to send a Logout Request to the IdP: The Logout Request will be sent signed or unsigned based on the security info of the ``advanced_settings.json`` (``logoutRequestSigned``). The IdP will return the Logout Response through the user's client to the Single Logout Service (SLS) of the SP. We can set a ``return_to`` url parameter to the logout function and that will be converted as a ``RelayState`` parameter: ```python target_url = 'https://example.com' auth.logout(return_to=target_url) ``` Also there are another 5 optional parameters that can be set: * ``name_id``: That will be used to build the ``LogoutRequest``. If no ``name_id`` parameter is set and the auth object processed a SAML Response with a ``NameId``, then this ``NameId`` will be used. * ``session_index``: ``SessionIndex`` that identifies the session of the user. * ``nq``: IDP Name Qualifier. * ``name_id_format``: The ``NameID`` Format that will be set in the ``LogoutRequest``. * ``spnq``: The ``NameID SP NameQualifier`` will be set in the ``LogoutRequest``. If no ``name_id`` is provided, the ``LogoutRequest`` will contain a ``NameID`` with the entity Format. If ``name_id`` is provided and no ``name_id_format`` is provided, the ``NameIDFormat`` of the settings will be used. If a match on the ``LogoutResponse`` ID and the ``LogoutRequest`` ID to be sent is required, that ``LogoutRequest`` ID must to be extracted and stored for future validation, we can get that ID by: ```python auth.get_last_request_id() ``` #### Example of a view that initiates the SSO request and handles the response (is the acs target) #### We can code a unique file that initiates the SSO process, handle the response, get the attributes, initiate the SLO and processes the logout response. Note: Review the demos, in a later section we explain the demo use case further in detail. ```python req = prepare_request_for_toolkit(request) # Process the request and build the request dict that # the toolkit expects auth = OneLogin_Saml2_Auth(req) # Initialize the SP SAML instance if 'sso' in request.args: # SSO action (SP-SSO initited). Will send an AuthNRequest to the IdP return redirect(auth.login()) elif 'sso2' in request.args: # Another SSO init action return_to = '%sattrs/' % request.host_url # but set a custom RelayState URL return redirect(auth.login(return_to)) elif 'slo' in request.args: # SLO action. Will sent a Logout Request to IdP nameid = request.session['samlNameId'] nameid_format = request.session['samlNameIdFormat'] nameid_nq = request.session['samlNameIdNameQualifier'] nameid_spnq = request.session['samlNameIdSPNameQualifier'] session_index = request.session['samlSessionIndex'] return redirect(auth.logout(None, nameid, session_index, nameid_nq, nameid_format, nameid_spnq)) elif 'acs' in request.args: # Assertion Consumer Service auth.process_response() # Process the Response of the IdP errors = auth.get_errors() # This method receives an array with the errors if len(errors) == 0: # that could took place during the process if not auth.is_authenticated(): # This check if the response was ok and the user msg = "Not authenticated" # data retrieved or not (user authenticated) else: request.session['samlUserdata'] = auth.get_attributes() # Retrieves user data request.session['samlNameId'] = auth.get_nameid() request.session['samlNameIdFormat'] = auth.get_nameid_format() request.session['samlNameIdNameQualifier'] = auth.get_nameid_nq() request.session['samlNameIdSPNameQualifier'] = auth.get_nameid_spnq() request.session['samlSessionIndex'] = auth.get_session_index() self_url = OneLogin_Saml2_Utils.get_self_url(req) if 'RelayState' in request.form and self_url != request.form['RelayState']: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the request.form['RelayState'] is a trusted URL. return redirect(auth.redirect_to(request.form['RelayState'])) # Redirect if there is a relayState else: # If there is user data we save that to print it later. msg = '' for attr_name in request.session['samlUserdata'].keys(): msg += '%s ==> %s' % (attr_name, '|| '.join(request.session['samlUserdata'][attr_name])) elif 'sls' in request.args: # Single Logout Service delete_session_callback = lambda: session.clear() # Obtain session clear callback url = auth.process_slo(delete_session_cb=delete_session_callback) # Process the Logout Request & Logout Response errors = auth.get_errors() # Retrieves possible validation errors if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL. return redirect(url) else: msg = "Successfully logged out" if len(errors) == 0: print(msg) else: print(', '.join(errors)) ``` ### SP Key rollover ### If you plan to update the SP ``x509cert`` and ``privateKey`` you can define the new ``x509cert`` as ``settings['sp']['x509certNew']`` and it will be published on the SP metadata so Identity Providers can read them and get ready for rollover. ### IdP with multiple certificates ### In some scenarios the IdP uses different certificates for signing/encryption, or is under key rollover phase and more than one certificate is published on IdP metadata. In order to handle that the toolkit offers the ``settings['idp']['x509certMulti']`` parameter. When that parameter is used, ``x509cert`` and ``certFingerprint`` values will be ignored by the toolkit. The ``x509certMulti`` is an array with 2 keys: - ``signing``: An array of certs that will be used to validate IdP signature - ``encryption``: An array with one unique cert that will be used to encrypt data to be sent to the IdP. ### Replay attacks ### In order to avoid replay attacks, you can store the ID of the SAML messages already processed, to avoid processing them twice. Since the Messages expires and will be invalidated due that fact, you don't need to store those IDs longer than the time frame that you currently accepting. Get the ID of the last processed message/assertion with the ``get_last_message_id/get_last_assertion_id`` method of the ``Auth`` object. ### Main classes and methods ### Described below are the main classes and methods that can be invoked from the SAML2 library. #### OneLogin_Saml2_Auth - auth.py #### Main class of SAML Python Toolkit * `__init__` Initializes the SP SAML instance. * ***login*** Initiates the SSO process. * ***logout*** Initiates the SLO process. * ***process_response*** Process the SAML Response sent by the IdP. * ***process_slo*** Process the SAML Logout Response / Logout Request sent by the IdP. * ***redirect_to*** Redirects the user to the url past by parameter or to the url that we defined in our SSO Request. * ***is_authenticated*** Checks if the user is authenticated or not. * ***get_attributes*** Returns the set of SAML attributes. * ***get_attribute*** Returns the requested SAML attribute. * ***get_nameid*** Returns the ``nameID``. * ***get_session_index*** Gets the ``SessionIndex`` from the ``AuthnStatement``. * ***get_session_expiration*** Gets the ``SessionNotOnOrAfter`` from the ``AuthnStatement``. * ***get_errors*** Returns a list with code errors if something went wrong. * ***get_last_error_reason*** Returns the reason of the last error * ***get_sso_url*** Gets the SSO url. * ***get_slo_url*** Gets the SLO url. * ***get_last_request_id*** The ID of the last Request SAML message generated (``AuthNRequest``, ``LogoutRequest``). * ***get_last_authn_contexts*** Returns the list of authentication contexts sent in the last SAML Response. * ***build_request_signature*** Builds the Signature of the SAML Request. * ***build_response_signature*** Builds the Signature of the SAML Response. * ***get_settings*** Returns the settings info. * ***set_strict*** Set the strict mode active/disable. * ***get_last_request_xml*** Returns the most recently-constructed/processed XML SAML request (``AuthNRequest``, ``LogoutRequest``) * ***get_last_response_xml*** Returns the most recently-constructed/processed XML SAML response (``SAMLResponse``, ``LogoutResponse``). If the SAMLResponse had an encrypted assertion, decrypts it. * ***get_last_response_in_response_to*** The `InResponseTo` ID of the most recently processed SAML Response. * ***get_last_message_id*** The ID of the last Response SAML message processed. * ***get_last_assertion_id*** The ID of the last assertion processed. * ***get_last_assertion_not_on_or_after*** The ``NotOnOrAfter`` value of the valid ``SubjectConfirmationData`` node (if any) of the last assertion processed (is only calculated with strict = true) * ***get_last_assertion_issue_instant*** The `IssueInstant` value of the last assertion processed. #### OneLogin_Saml2_Auth - authn_request.py #### SAML 2 Authentication Request class * `__init__` This class handles an ``AuthNRequest``. It builds an ``AuthNRequest`` object. * ***get_request*** Returns unsigned ``AuthnRequest``. * ***get_id*** Returns the ``AuthNRequest`` ID. * ***get_xml*** Returns the XML that will be sent as part of the request. #### OneLogin_Saml2_Response - response.py #### SAML 2 Authentication Response class * `__init__` Constructs the SAML Response object. * ***is_valid*** Determines if the SAML Response is valid. Includes checking of the signature by a certificate. * ***check_status*** Check if the status of the response is success or not * ***get_audiences*** Gets the audiences * ***get_issuers*** Gets the issuers (from message and from assertion) * ***get_nameid_data*** Gets the NameID Data provided by the SAML Response from the IdP (returns a dict) * ***get_nameid*** Gets the NameID provided by the SAML Response from the IdP (returns a string) * ***get_session_not_on_or_after*** Gets the ``SessionNotOnOrAfter`` from the ``AuthnStatement`` * ***get_session_index*** Gets the ``SessionIndex`` from the ``AuthnStatement`` * ***get_attributes*** Gets the Attributes from the ``AttributeStatement`` element. * ***validate_num_assertions*** Verifies that the document only contains a single Assertion (encrypted or not) * ***validate_timestamps*** Verifies that the document is valid according to Conditions Element * ***get_error*** After execute a validation process, if fails this method returns the cause * ***get_xml_document*** Returns the SAML Response document (If contains an encrypted assertion, decrypts it). * ***get_id*** the ID of the response * ***get_assertion_id*** the ID of the assertion in the response * ***get_assertion_not_on_or_after*** the ``NotOnOrAfter`` value of the valid ``SubjectConfirmationData`` if any #### OneLogin_Saml2_LogoutRequest - logout_request.py #### SAML 2 Logout Request class * `__init__` Constructs the Logout Request object. * ***get_request*** Returns the Logout Request deflated, base64-encoded. * ***get_id*** Returns the ID of the Logout Request. (If you have the object you can access to the id attribute) * ***get_nameid_data*** Gets the NameID Data of the the Logout Request (returns a dict). * ***get_nameid*** Gets the NameID of the Logout Request Message (returns a string). * ***get_issuer*** Gets the Issuer of the Logout Request Message. * ***get_session_indexes*** Gets the ``SessionIndexes`` from the Logout Request. * ***is_valid*** Checks if the Logout Request received is valid. * ***get_error*** After execute a validation process, if fails this method returns the cause. * ***get_xml*** Returns the XML that will be sent as part of the request or that was received at the SP #### OneLogin_Saml2_LogoutResponse - logout_response.py #### SAML 2 Logout Response class * `__init__` Constructs a Logout Response object. * ***get_issuer*** Gets the Issuer of the Logout Response Message * ***get_status*** Gets the Status of the Logout Response. * ***is_valid*** Determines if the SAML ``LogoutResponse`` is valid * ***build*** Creates a Logout Response object. * ***get_response*** Returns a Logout Response object. * ***get_error*** After execute a validation process, if fails this method returns the cause. * ***get_xml*** Returns the XML that will be sent as part of the response or that was received at the SP #### OneLogin_Saml2_Settings - settings.py #### Configuration of the SAML Python Toolkit * `__init__` Initializes the settings: Sets the paths of the different folders and Loads settings info from settings file or array/object provided. * ***check_settings*** Checks the settings info. * ***check_idp_settings*** Checks the IdP settings info. * ***check_sp_settings*** Checks the SP settings info. * ***get_errors*** Returns an array with the errors, the array is empty when the settings is ok. * ***get_sp_metadata*** Gets the SP metadata. The XML representation. * ***validate_metadata*** Validates an XML SP Metadata. * ***get_base_path*** Returns base path. * ***get_cert_path*** Returns cert path. * ***get_lib_path*** Returns lib path. * ***get_ext_lib_path*** Returns external lib path. * ***get_schemas_path*** Returns schema path. * ***check_sp_certs*** Checks if the X.509 certs of the SP exists and are valid. * ***get_sp_key*** Returns the X.509 private key of the SP. * ***get_sp_cert*** Returns the X.509 public cert of the SP. * ***get_sp_cert_new*** Returns the future X.509 public cert of the SP. * ***get_idp_cert*** Returns the X.509 public cert of the IdP. * ***get_sp_data*** Gets the SP data. * ***get_idp_data*** Gets the IdP data. * ***get_security_data*** Gets security data. * ***get_contacts*** Gets contacts data. * ***get_organization*** Gets organization data. * ***format_idp_cert*** Formats the IdP cert. * ***format_idp_cert_multi*** Formats all registered IdP certs. * ***format_sp_cert*** Formats the SP cert. * ***format_sp_cert_new*** Formats the SP cert new. * ***format_sp_key*** Formats the private key. * ***set_strict*** Activates or deactivates the strict mode. * ***is_strict*** Returns if the ``strict`` mode is active. * ***is_debug_active*** Returns if the debug is active. #### OneLogin_Saml2_Metadata - metadata.py #### A class that contains functionality related to the metadata of the SP * ***builder*** Generates the metadata of the SP based on the settings. * ***sign_metadata*** Signs the metadata with the key/cert provided. * ***add_x509_key_descriptors*** Adds the X.509 descriptors (sign/encryption) to the metadata #### OneLogin_Saml2_Utils - utils.py #### Auxiliary class that contains several methods * ***decode_base64_and_inflate*** Base64 decodes and then inflates according to RFC1951. * ***deflate_and_base64_encode*** Deflates and the base64 encodes a string. * ***format_cert*** Returns a X.509 cert (adding header & footer if required). * ***format_private_key*** Returns a private key (adding header & footer if required). * ***redirect*** Executes a redirection to the provided url (or return the target url). * ***get_self_url_host*** Returns the protocol + the current host + the port (if different than common ports). * ***get_self_host*** Returns the current host. * ***is_https*** Checks if https or http. * ***get_self_url_no_query*** Returns the URL of the current host + current view. * ***get_self_routed_url_no_query*** Returns the routed URL of the current host + current view. * ***get_self_url*** Returns the URL of the current host + current view + query. * ***generate_unique_id*** Generates an unique string (used for example as ID for assertions). * ***parse_time_to_SAML*** Converts a UNIX timestamp to SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z. * ***parse_SAML_to_time*** Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z to a UNIX timestamp. * ***now*** Returns unix timestamp of actual time. * ***parse_duration*** Interprets a ISO8601 duration value relative to a given timestamp. * ***get_expire_time*** Compares 2 dates and returns the earliest. * ***delete_local_session*** Deletes the local session. * ***calculate_X.509_fingerprint*** Calculates the fingerprint of a X.509 cert. * ***format_finger_print*** Formats a fingerprint. * ***generate_name_id*** Generates a nameID. * ***get_status*** Gets Status from a Response. * ***decrypt_element*** Decrypts an encrypted element. * ***write_temp_file*** Writes some content into a temporary file and returns it. * ***add_sign*** Adds signature key and senders certificate to an element (Message or Assertion). * ***validate_sign*** Validates a signature (Message or Assertion). * ***validate_binary_sign*** Validates signed bynary data (Used to validate GET Signature). #### OneLogin_Saml2_XML- xml_utils.py #### A class that contains methods to handle XMLs * ***to_string*** Serialize an element to an encoded string representation of its XML tree. * ***to_etree*** Parses an XML document or fragment from a string. * ***validate_xml*** Validates a xml against a schema * ***query*** Extracts nodes that match the query from the Element * ***extract_tag_text*** #### OneLogin_Saml2_IdPMetadataParser - idp_metadata_parser.py #### A class that contains methods to obtain and parse metadata from IdP * ***get_metadata*** Get the metadata XML from the provided URL * ***parse_remote*** Get the metadata XML from the provided URL and parse it, returning a dict with extracted data * ***parse*** Parse the Identity Provider metadata and returns a dict with extracted data * ***merge_settings*** Will update the settings with the provided new settings data extracted from the IdP metadata For more info, look at the source code. Each method is documented and details about what does and how to use it are provided. Make sure to also check the doc folder where HTML documentation about the classes and methods is provided. Demos included in the toolkit ----------------------------- The toolkit includes 3 demos to teach how use the toolkit (A Django, Flask and a Tornado project), take a look on it. Demos require that SP and IdP are well configured before test it, so edit the settings files. Notice that each python framework has it own way to handle routes/urls and process request, so focus on how it deployed. New demos using other python frameworks are welcome as a contribution. ### Getting Started ### We said that this toolkit includes a Django application demo and a Flask application demo, let's see how fast is it to deploy them. ***Virtualenv*** The use of a [virtualenv](http://virtualenv.readthedocs.org/en/latest/) is highly recommended. Virtualenv helps isolating the python environment used to run the toolkit. You can find more details and an installation guide in the [official documentation](http://virtualenv.readthedocs.org/en/latest/). Once you have your virtualenv ready and loaded, then you can install the toolkit on it in development mode executing this: ``` python setup.py develop ``` Using this method of deployment the toolkit files will be linked instead of copied, so if you make changes on them you won't need to reinstall the toolkit. If you want install it in a normal mode, execute: ``` python setup.py install ``` ### Demo Flask ### You'll need a virtualenv with the toolkit installed on it. To run the demo you need to install the requirements first. Load your virtualenv and execute: ``` pip install -r demo-flask/requirements.txt ``` This will install flask and its dependencies. Once it has finished, you have to complete the configuration of the toolkit. You'll find it at `demo-flask/settings.json` Now, with the virtualenv loaded, you can run the demo like this: ``` cd demo-flask python index.py ``` You'll have the demo running at http://localhost:8000 #### Content #### The flask project contains: * ***index.py*** Is the main flask file, where or the SAML handle take place. * ***templates***. Is the folder where flask stores the templates of the project. It was implemented a base.html template that is extended by index.html and attrs.html, the templates of our simple demo that shows messages, user attributes when available and login and logout links. * ***saml*** Is a folder that contains the 'certs' folder that could be used to store the X.509 public and private key, and the saml toolkit settings (settings.json and advanced_settings.json). #### SP setup #### The SAML Python Toolkit allows you to provide the settings info in 2 ways: Settings files or define a setting dict. In the ``demo-flask``, it uses the first method. In the ``index.py`` file we define the ``app.config['SAML_PATH']``, that will target to the ``saml`` folder. We require it in order to load the settings files. First we need to edit the ``saml/settings.json`` file, configure the SP part and review the metadata of the IdP and complete the IdP info. Later edit the ``saml/advanced_settings.json`` files and configure the how the toolkit will work. Check the settings section of this document if you have any doubt. #### IdP setup #### Once the SP is configured, the metadata of the SP is published at the ``/metadata`` url. Based on that info, configure the IdP. #### How it works #### 1. First time you access to the main view (http://localhost:8000), you can select to login and return to the same view or login and be redirected to ``/?attrs`` (attrs view). 2. When you click: 2.1 in the first link, we access to ``/?sso`` (index view). An ``AuthNRequest`` is sent to the IdP, we authenticate at the IdP and then a Response is sent through the user's client to the SP, specifically the Assertion Consumer Service view: ``/?acs``. Notice that a ``RelayState`` parameter is set to the url that initiated the process, the index view. 2.2 in the second link we access to ``/?attrs`` (attrs view), we will expetience have the same process described at 2.1 with the diference that as ``RelayState`` is set the ``attrs`` url. 3. The SAML Response is processed in the ACS ``/?acs``, if the Response is not valid, the process stops here and a message is shown. Otherwise we are redirected to the ``RelayState`` view. a) / or b) ``/?attrs`` 4. We are logged in the app and the user attributes are showed. At this point, we can test the single log out functionality. The single log out functionality could be tested by 2 ways. 5.1 SLO Initiated by SP. Click on the ``logout`` link at the SP, after that a Logout Request is sent to the IdP, the session at the IdP is closed and replies through the client to the SP with a Logout Response (sent to the Single Logout Service endpoint). The SLS endpoint ``/?sls`` of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP side, the logout process is initiated at the IdP, sends a Logout Request to the SP (SLS endpoint, ``/?sls``). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user at the local app and send a Logout Response to the IdP (to the SLS endpoint of the IdP). The IdP receives the Logout Response, process it and close the session at of the IdP. Notice that the SLO Workflow starts and ends at the IdP. Notice that all the SAML Requests and Responses are handled at a unique view (index) and how GET parameters are used to know the action that must be done. ### Demo Tornado ### You'll need a virtualenv with the toolkit installed on it. First of all you need some packages, execute: ``` apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl ``` To run the demo you need to install the requirements first. Load your virtualenv and execute: ``` pip install -r demo-tornado/requirements.txt ``` This will install tornado and its dependencies. Once it has finished, you have to complete the configuration of the toolkit. You'll find it at `demo-tornado/saml/settings.json` Now, with the virtualenv loaded, you can run the demo like this: ``` cd demo-tornado python views.py ``` You'll have the demo running at http://localhost:8000 #### Content #### The tornado project contains: * ***views.py*** Is the main flask file, where or the SAML handle take place. * ***settings.py*** Contains the base path and the path where is located the ``saml`` folder and the ``template`` folder * ***templates***. Is the folder where tornado stores the templates of the project. It was implemented a base.html template that is extended by index.html and attrs.html, the templates of our simple demo that shows messages, user attributes when available and login and logout links. * ***saml*** Is a folder that contains the 'certs' folder that could be used to store the X.509 public and private key, and the saml toolkit settings (settings.json and advanced_settings.json). #### SP setup #### The SAML Python Toolkit allows you to provide the settings info in 2 ways: Settings files or define a setting dict. In the ``demo-tornado``, it uses the first method. In the ``settings.py`` file we define the ``SAML_PATH``, that will target to the ``saml`` folder. We require it in order to load the settings files. First we need to edit the ``saml/settings.json`` file, configure the SP part and review the metadata of the IdP and complete the IdP info. Later edit the ``saml/advanced_settings.json`` files and configure the how the toolkit will work. Check the settings section of this document if you have any doubt. #### IdP setup #### Once the SP is configured, the metadata of the SP is published at the ``/metadata`` url. Based on that info, configure the IdP. #### How it works #### 1. First time you access to the main view (http://localhost:8000), you can select to login and return to the same view or login and be redirected to ``/?attrs`` (attrs view). 2. When you click: 2.1 in the first link, we access to ``/?sso`` (index view). An ``AuthNRequest`` is sent to the IdP, we authenticate at the IdP and then a Response is sent through the user's client to the SP, specifically the Assertion Consumer Service view: ``/?acs``. Notice that a ``RelayState`` parameter is set to the url that initiated the process, the index view. 2.2 in the second link we access to ``/?attrs`` (attrs view), we will expetience have the same process described at 2.1 with the diference that as ``RelayState`` is set the ``attrs`` url. 3. The SAML Response is processed in the ACS ``/?acs``, if the Response is not valid, the process stops here and a message is shown. Otherwise we are redirected to the ``RelayState`` view. a) / or b) ``/?attrs`` 4. We are logged in the app and the user attributes are showed. At this point, we can test the single log out functionality. The single log out functionality could be tested by 2 ways. 5.1 SLO Initiated by SP. Click on the ``logout`` link at the SP, after that a Logout Request is sent to the IdP, the session at the IdP is closed and replies through the client to the SP with a Logout Response (sent to the Single Logout Service endpoint). The SLS endpoint ``/?sls`` of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP side, the logout process is initiated at the IdP, sends a Logout Request to the SP (SLS endpoint, ``/?sls``). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user at the local app and send a Logout Response to the IdP (to the SLS endpoint of the IdP). The IdP receives the Logout Response, process it and close the session at of the IdP. Notice that the SLO Workflow starts and ends at the IdP. Notice that all the SAML Requests and Responses are handled at a unique view (index) and how GET parameters are used to know the action that must be done. ### Demo Django ### You'll need a virtualenv with the toolkit installed on it. To run the demo you need to install the requirements first. Load your virtualenv and execute: ``` pip install -r demo-django/requirements.txt ``` This will install django and its dependencies. Once it has finished, you have to complete the configuration of the toolkit. Later, with the virtualenv loaded, you can run the demo like this: ``` cd demo-django python manage.py runserver 0.0.0.0:8000 ``` You'll have the demo running at http://localhost:8000. Note that many of the configuration files expect HTTPS. This is not required by the demo, as replacing these SP URLs with HTTP will work just fine. HTTPS is however highly encouraged, and left as an exercise for the reader for their specific needs. If you want to integrate a production django application, take a look on this SAMLServiceProviderBackend that uses our toolkit to add SAML support: https://github.com/KristianOellegaard/django-saml-service-provider #### Content #### The django project contains: * ***manage.py***. A file that is automatically created in each Django project. Is a thin wrapper around django-admin.py that takes care of putting the project’s package on ``sys.path`` and sets the ``DJANGO_SETTINGS_MODULE`` environment variable. * ***saml*** Is a folder that contains the 'certs' folder that could be used to store the X.509 public and private key, and the saml toolkit settings (``settings.json`` and ``advanced_settings.json``). * ***demo*** Is the main folder of the django project, that contains the typical files: * ***settings.py*** Contains the default parameters of a django project except the ``SAML_FOLDER`` parameter, that may contain the path where is located the ``saml`` folder. * ***urls.py*** A file that define url routes. In the demo we defined ``'/'`` that is related to the index view, ``'/attrs'`` that is related with the attrs view and ``'/metadata'``, related to the metadata view. * ***views.py*** This file contains the views of the django project and some aux methods. * ***wsgi.py*** A file that let as deploy django using WSGI, the Python standard for web servers and applications. * ***templates***. Is the folder where django stores the templates of the project. It was implemented a ``base.html`` template that is extended by ``index.html`` and ``attrs.html``, the templates of our simple demo that shows messages, user attributes when available and login and logout links. #### SP setup #### The SAML Python Toolkit allows you to provide the settings info in 2 ways: settings files or define a setting dict. In the demo-django it used the first method. After set the ``SAML_FOLDER`` in the ``demo/settings.py``, the settings of the Python toolkit will be loaded on the Django web. First we need to edit the ``saml/settings.json``, configure the SP part and review the metadata of the IdP and complete the IdP info. Later edit the ``saml/advanced_settings.json`` files and configure the how the toolkit will work. Check the settings section of this document if you have any doubt. #### IdP setup #### Once the SP is configured, the metadata of the SP is published at the ``/metadata`` url. Based on that info, configure the IdP. #### How it works #### This demo works very similar to the ``flask-demo`` (We did it intentionally). ### Getting up and running on Heroku ### Getting ``python3-saml`` up and running on Heroku will require some extra legwork: ``python3-saml`` depends on ``python-xmlsec`` which depends on headers from the ``xmlsec1-dev`` Linux package to install correctly. First you will need to add the ```apt``` buildpack to your build server: ``` heroku buildpacks:add --index=1 -a your-app heroku-community/apt heroku buildpacks:add --index=2 -a your-app heroku/python ``` You can confirm the buildpacks have been added in the correct order with ```heroku buildpacks -a your-app```, you should see the apt buildpack first followed by the Python buildpack. Then add an ```Aptfile``` into the root of your repository containing the ```libxmlsec1-dev``` package, the file should look like: ``` libxmlsec1-dev ``` Finally, add ``python3-saml`` to your ``requirements.txt`` and ```git push``` to trigger a build. ### Demo Pyramid ### Unlike the other two projects, you don't need a pre-existing virtualenv to get up and running here, since Pyramid comes from the [buildout](http://www.buildout.org/en/latest/) school of thought. To run the demo you need to install Pyramid, the requirements, etc.: ``` cd demo_pyramid python3 -m venv env env/bin/pip install --upgrade pip setuptools env/bin/pip install -e ".[testing]" ``` If you want to make sure the tests pass, run: ``` env/bin/pytest ``` Next, edit the settings in `demo_pyramid/saml/settings.json`. (Pyramid runs on port 6543 by default.) Now you can run the demo like this: ``` env/bin/pserve development.ini ``` If that worked, the demo is now running at http://localhost:6543. #### Content #### The Pyramid project contains: * ***\_\_init__.py*** is the main Pyramid file that configures the app and its routes. * ***views.py*** is where all the SAML handling takes place. * ***templates*** is the folder where Pyramid stores the templates of the project. It was implemented a ``layout.jinja2`` template that is extended by ``index.jinja2`` and ``attrs.jinja2``, the templates of our simple demo that shows messages, user attributes when available and login and logout links. * ***saml*** is a folder that contains the 'certs' folder that could be used to store the X.509 public and private key, and the saml toolkit settings (``settings.json`` and ``advanced_settings.json``). #### SP setup #### The SAML Python Toolkit allows you to provide the settings info in 2 ways: settings files or define a setting dict. In ``demo_pyramid`` the first method is used. In the ``views.py`` file we define the ``SAML_PATH``, which will target the ``saml`` folder. We require it in order to load the settings files. First we need to edit the ``saml/settings.json``, configure the SP part and review the metadata of the IdP and complete the IdP info. Later edit the ``saml/advanced_settings.json`` files and configure the how the toolkit will work. Check the settings section of this document if you have any doubt. #### IdP setup #### Once the SP is configured, the metadata of the SP is published at the ``/metadata`` url. Based on that info, configure the IdP. #### How it works #### 1. First time you access to the main view (http://localhost:6543), you can select to login and return to the same view or login and be redirected to ``/?attrs`` (attrs view). 2. When you click: 2.1 in the first link, we access to ``/?sso`` (index view). An ``AuthNRequest`` is sent to the IdP, we authenticate at the IdP and then a Response is sent through the user's client to the SP, specifically the Assertion Consumer Service view: ``/?acs``. Notice that a ``RelayState`` parameter is set to the url that initiated the process, the index view. 2.2 in the second link we access to ``/?attrs`` (attrs view), we will experience the same process described at 2.1 with the diference that as ``RelayState`` is set the ``attrs`` url. 3. The SAML Response is processed in the ACS ``/?acs``, if the Response is not valid, the process stops here and a message is shown. Otherwise we are redirected to the ``RelayState`` view. a) ``/`` or b) ``/?attrs`` 4. We are logged in the app and the user attributes are showed. At this point, we can test the single log out functionality. The single log out functionality could be tested by 2 ways. 5.1 SLO Initiated by SP. Click on the "logout" link at the SP, after that a Logout Request is sent to the IdP, the session at the IdP is closed and replies through the client to the SP with a Logout Response (sent to the Single Logout Service endpoint). The SLS endpoint /?sls of the SP process the Logout Response and if is valid, close the user session of the local app. Notice that the SLO Workflow starts and ends at the SP. 5.2 SLO Initiated by IdP. In this case, the action takes place on the IdP side, the logout process is initiated at the IdP, sends a Logout Request to the SP (SLS endpoint, /?sls). The SLS endpoint of the SP process the Logout Request and if is valid, close the session of the user at the local app and send a Logout Response to the IdP (to the SLS endpoint of the IdP). The IdP receives the Logout Response, process it and close the session at of the IdP. Notice that the SLO Workflow starts and ends at the IdP. Notice that all the SAML Requests and Responses are handled at a unique view (index) and how GET parameters are used to know the action that must be done. python3-saml-1.16.0/changelog.md000066400000000000000000000275571451074743100164340ustar00rootroot00000000000000# python3-saml changelog ### 1.16.0 (Oct 9, 2023) - [#364](https://github.com/SAML-Toolkits/python3-saml/commit/d1bfaeb17a786735827b8252b91deafde29dabd8) Improve get_metadata method from Parser, allowing to set headers - Fix WantAuthnRequestsSigned parser - Fix expired payloads used on tests - Updated content from docs folder ### 1.15.0 (Dec 27, 2022) - [#317](https://github.com/SAML-Toolkits/python3-saml/pull/317) Handle unicode characters gracefully in python 2 - [#338](https://github.com/SAML-Toolkits/python3-saml/pull/338) Fix WantAuthnRequestsSigned parser - [#339](https://github.com/SAML-Toolkits/python3-saml/pull/339) Add Poetry support - Remove version restriction on lxml dependency - Updated Django demo to 4.X (only py3 compatible) - Updated Travis file. Forced lxml to be installed using no-validate_binary - Removed references to OneLogin from documentation ### 1.14.0 (Feb 18, 2022) - [#297](https://github.com/onelogin/python3-saml/pull/297) Don't require yanked version of lxml. - [#298](https://github.com/onelogin/python3-saml/pull/298) Add support for python 3.10 and cleanup the GHA. - [#299](https://github.com/onelogin/python3-saml/pull/299) Remove stats from coveralls removed as they are no longer maintained. ### 1.13.0 (Jan 28, 2022) - [#296](https://github.com/onelogin/python3-saml/pull/296) Add rejectDeprecatedAlgorithm settings in order to be able reject messages signed with deprecated algorithms. - Set sha256 and rsa-sha256 as default algorithms - [#288](https://github.com/onelogin/python3-saml/pull/288) Support building a LogoutResponse with non-success status - Added warning about Open Redirect and Reply attacks - [##274](https://github.com/onelogin/python3-saml/pull/274) Replace double-underscored names with single underscores - Add at OneLogin_Saml2_Auth get_last_assertion_issue_instant() and get_last_response_in_response_to() methods - Upgrade dependencies ### 1.12.0 (Aug 13, 2021) * [#276](https://github.com/onelogin/python3-saml/pull/276) Deprecate server_port from request data dictionary ### 1.11.0 (Jul 23, 2021) * [#261](https://github.com/onelogin/python3-saml/pull/261) Allow duplicate named attributes, controlled by a new setting * [#268](https://github.com/onelogin/python3-saml/pull/268) Make the redirect scheme matcher case-insensitive * [#256](https://github.com/onelogin/python3-saml/pull/256) Improve signature validation process. Add an option to use query string for validation * [#259](https://github.com/onelogin/python3-saml/pull/259) Add get metadata timeout * [#246](https://github.com/onelogin/python3-saml/pull/246) Add the ability to change the ProtocolBinding in the authn request. * [#248](https://github.com/onelogin/python3-saml/pull/248) Move storing the response data into its own method in the Auth class * Remove the dependency on defusedxml * [#241](https://github.com/onelogin/python3-saml/pull/241) Improve AttributeConsumingService support * Update expired dates from test responses * Migrate from Travis to Github Actions ### 1.10.1 (Jan 27, 2021) * Fix bug on LogoutRequest class, get_idp_slo_response_url was used instead get_idp_slo_url ### 1.10.0 (Jan 14, 2021) * Added custom lxml parser based on the one defined at xmldefused. Parser will ignore comments and processing instructions and by default have deactivated huge_tree, DTD and access to external documents * Destination URL Comparison is now case-insensitive for netloc * Support single-label-domains as valid. New security parameter allowSingleLabelDomains * Added get_idp_sso_url, get_idp_slo_url and get_idp_slo_response_url methods to the Settings class and use it in the toolkit * [#212](https://github.com/onelogin/python3-saml/pull/212) Overridability enhancements. Made classes overridable by subclassing. Use of classmethods instead staticmethods * Add get_friendlyname_attributes support * Remove external lib method get_ext_lib_path. Add set_cert_path in order to allow set the cert path in a different folder than the toolkit * Add sha256 instead sha1 algorithm for sign/digest as recommended value on documentation and settings * [#178](https://github.com/onelogin/python3-saml/pull/178) Support for adding idp.crt from filesystem * Add samlUserdata to demo-flask session * Fix autoreloading in demo-tornado ### 1.9.0 (Nov 20, 2019) * Allow any number of decimal places for seconds on SAML datetimes * Fix failOnAuthnContextMismatch code * Improve signature validation when no reference uri * Update demo versions. Improve them and add Tornado demo. ### 1.8.0 (Sep 11, 2019) * Set true as the default value for strict setting * [#152](https://github.com/onelogin/python3-saml/pull/152/files) Don't clean xsd and xsi namespaces * Drop python3.4 support due lxml. See lxml 4.4.0 (2019-07-27) ### 1.7.0 (Jul 02, 2019) * Adjusted acs endpoint to extract NameQualifier and SPNameQualifier from SAMLResponse. Adjusted single logout service to provide NameQualifier and SPNameQualifier to logout method. Add getNameIdNameQualifier to Auth and SamlResponse. Extend logout method from Auth and LogoutRequest constructor to support SPNameQualifier parameter. Align LogoutRequest constructor with SAML specs * Added get_in_response_to method to Response and LogoutResponse classes * Update defusexml dependency ### 1.6.0 (Apr 10, 2019) * Add support for Subjects on AuthNRequests by the new name_id_value_req parameter * [#127](https://github.com/onelogin/python3-saml/pull/127) Fix for SLO when XML specifies encoding * [#126](https://github.com/onelogin/python3-saml/pull/126) Fixed setting NameFormat attribute for AttributeValue tags ### 1.5.0 (Jan 29, 2019) * Security improvements. Use of tagid to prevent XPath injection. Disable DTD on fromstring defusedxml method * [#97](https://github.com/onelogin/python3-saml/pull/97) Check that the response has all of the AuthnContexts that we provided * Adapt renders from Django demo for Django 1.11 version * Update pylint dependency to 1.9.1 * If debug enable, print reason for the SAMLResponse invalidation * Fix DSA constant * [#106](https://github.com/onelogin/python3-saml/pull/106) Support NameID children inside of AttributeValue elements * Start using flake8 for code quality ### 1.4.1 (Apr 25, 2018) * Add ID to EntityDescriptor before sign it on add_sign method. * Update defusedxml, coveralls and coverage dependencies * Update copyright and license reference ### 1.4.0 (Feb 27, 2018) * Fix vulnerability [CVE-2017-11427](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11427). Process text of nodes properly, ignoring comments * Improve how fingerprint is calcultated * Fix issue with LogoutRequest rejected by ADFS due NameID with unspecified format instead no format attribute * Fix signature position in the SP metadata * [#80](https://github.com/onelogin/python3-saml/pull/80) Preserve xmlns:xs namespace when signing and serializing responses * Redefine NSMAP constant * Updated Django demo (Django 1.11). ### 1.3.0 (Sep 15, 2017) * Improve decrypt method, Add an option to decrypt an element in place or copy it before decryption. * [#63](https://github.com/onelogin/python3-saml/pull/63) Be able to get at the auth object the last processed ID (response/assertion) and the last generated ID, as well as the NotOnOrAfter value of the valid SubjectConfirmationData in the processed SAMLResponse * On a LogoutRequest if the NameIdFormat is entity, NameQualifier and SPNameQualifier will be omitted. If the NameIdFormat is not entity and a NameQualifier is provided, then the SPNameQualifier will be also added. * Reset errorReason attribute of the auth object before each Process method * [#65](https://github.com/onelogin/python3-saml/pull/65) Fix issue on getting multiple certs when only sign or encryption certs ### 1.2.6 (Jun 15, 2017) * Use defusedxml that will prevent XEE and other attacks based on the abuse on XMLs. (CVE-2017-9672) ### 1.2.5 (Jun 2, 2017) * Fix issue related with multicers (multicerts were not used on response validation) ### 1.2.4 (May 18, 2017) * Publish KeyDescriptor[use=encryption] only when required * [#57](https://github.com/onelogin/python3-saml/pull/57) Be able to register future SP x509cert on the settings and publish it on SP metadata * [#57](https://github.com/onelogin/python3-saml/pull/57) Be able to register more than 1 Identity Provider x509cert, linked with an specific use (signing or encryption * [#57](https://github.com/onelogin/python3-saml/pull/57) Allow metadata to be retrieved from source containing data of multiple entities * [#57](https://github.com/onelogin/python3-saml/pull/57) Adapt IdP XML metadata parser to take care of multiple IdP certtificates and be able to inject the data obtained on the settings. * Be able to relax SSL Certificate verification when retrieving idp metadata * Checking the status of response before assertion count * Allows underscores in URL hosts * Add a Pyramid demo * Be able to provide a NameIDFormat to LogoutRequest * Add DigestMethod support. Add sign_algorithm and digest_algorithm par ameters to sign_metadata and add_sign. * Validate serial number as string to work around libxml2 limitation * Make the Issuer on the Response Optional * Fixed bug with formated cert fingerprints ### 1.2.3 (January 15, 2017) * Fix p3 compatibility ### 1.2.2 (January 11, 2017) * [#37](https://github.com/onelogin/python3-saml/pull/37) Add option to raise response validation exceptions * [#42](https://github.com/onelogin/python3-saml/pull/42) Optionally raise detailed exceptions vs. returning False. Implement a more specific exception class for handling some validation errors. Improve/Fix tests. Add support for retrieving the last ID of the generated AuthNRequest / LogoutRequest. Add hooks to retrieve last-sent and last-received requests and responses * Improved inResponse validation on Responses * Add the ability to extract the specific certificate from IdP metadata when several defined * Fix Invalid True attribute value in Metadata XML * [#35](https://github.com/onelogin/python3-saml/pull/35) Fix typos and json sample code in documentation ### 1.2.1 (October 18, 2016) * [#30](https://github.com/onelogin/python3-saml/pull/30) Bug on signature checks ### 1.2.0 (October 14, 2016) * Several security improvements: * Conditions element required and unique. * AuthnStatement element required and unique. * SPNameQualifier must math the SP EntityID * Reject saml:Attribute element with same “Name” attribute * Reject empty nameID * Require Issuer element. (Must match IdP EntityID). * Destination value can't be blank (if present must match ACS URL). * Check that the EncryptedAssertion element only contains 1 Assertion element. * Improve Signature validation process * Document the wantAssertionsEncrypted parameter * Support multiple attributeValues on RequestedAttribute * Fix AttributeConsumingService ### 1.1.4 (Jun 27, 2016) * Change the decrypt assertion process. * Add 2 extra validations to prevent Signature wrapping attacks. ### 1.1.3 (Jun 02, 2016) * Fix Metadata XML (RequestedAttribute) * Fix Windows specific Unix date formatting bug. * Fix SHA384 Constant URI * Refactor of settings.py to make it a little more readable. * Bugfix for ADFS lowercase signatures * READMEs suggested wrong cert name ### 1.1.2 (May 14, 2016) * Allow AuthnRequest with no NameIDPolicy. * Remove NameId requirement on SAMLResponse, now requirement depends on setting * Use python-xmlsec 0.6.0 * Make idp settings optional * Fix Organization element on SP metadata. Minor style code fix * Add debug parameter to decrypt method * Support AttributeConsumingService * Improve AuthNRequest format * Fix unspecified NameID * Make deflate process when retrieving built SAML messages optional * Not compare Assertion InResponseTo if not found * [#15](https://github.com/onelogin/python3-saml/pull/15) Passing NameQualifier through to logout request * Improve documentation * [#12](https://github.com/onelogin/python3-saml/pull/12) Add information about getting the demos up and running on Heroku ### 1.1.1 (Mar 17, 2016) * Make AttributeStatements requirement optional python3-saml-1.16.0/demo-django/000077500000000000000000000000001451074743100163275ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/demo/000077500000000000000000000000001451074743100172535ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/demo/__init__.py000066400000000000000000000000001451074743100213520ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/demo/settings.py000066400000000000000000000046771451074743100215030ustar00rootroot00000000000000""" Django settings for demo project. For more information on this file, see https://docs.djangoproject.com/en/1.6/topics/settings/ For the full list of settings and their values, see https://docs.djangoproject.com/en/1.6/ref/settings/ """ # Build paths inside the project like this: os.path.join(BASE_DIR, ...) import os BASE_DIR = os.path.dirname(os.path.dirname(__file__)) # Quick-start development settings - unsuitable for production # See https://docs.djangoproject.com/en/1.6/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! SECRET_KEY = '0c7216)gs^ne$%3+je20zuo+g0&^6yb@e68qdr!^!r0hmb-6y+' # SECURITY WARNING: don't run with debug turned on in production! DEBUG = True ALLOWED_HOSTS = [] # Application definition INSTALLED_APPS = ( 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', ) MIDDLEWARE = ( 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', ) ROOT_URLCONF = 'demo.urls' WSGI_APPLICATION = 'demo.wsgi.application' # Database # https://docs.djangoproject.com/en/1.6/ref/settings/#databases # DATABASES = { # 'default': { # 'ENGINE': 'django.db.backends.sqlite3', # 'NAME': os.path.join(BASE_DIR, 'db.sqlite3'), # } # } # Internationalization # https://docs.djangoproject.com/en/1.6/topics/i18n/ LANGUAGE_CODE = 'en-us' TIME_ZONE = 'UTC' USE_I18N = True USE_L10N = True USE_TZ = True STATIC_URL = '/static/' SAML_FOLDER = os.path.join(BASE_DIR, 'saml') SESSION_ENGINE = 'django.contrib.sessions.backends.file' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [os.path.join(BASE_DIR, 'templates')], 'APP_DIRS': True, 'OPTIONS': { 'debug': True, 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] python3-saml-1.16.0/demo-django/demo/urls.py000066400000000000000000000004431451074743100206130ustar00rootroot00000000000000from django.urls import re_path from django.contrib import admin from .views import attrs, index, metadata admin.autodiscover() urlpatterns = [ re_path(r'^$', index, name='index'), re_path(r'^attrs/$', attrs, name='attrs'), re_path(r'^metadata/$', metadata, name='metadata'), ] python3-saml-1.16.0/demo-django/demo/views.py000066400000000000000000000144611451074743100207700ustar00rootroot00000000000000from django.conf import settings from django.urls import reverse from django.http import (HttpResponse, HttpResponseRedirect, HttpResponseServerError) from django.shortcuts import render from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils def init_saml_auth(req): auth = OneLogin_Saml2_Auth(req, custom_base_path=settings.SAML_FOLDER) return auth def prepare_django_request(request): # If server is behind proxys or balancers use the HTTP_X_FORWARDED fields result = { 'https': 'on' if request.is_secure() else 'off', 'http_host': request.META['HTTP_HOST'], 'script_name': request.META['PATH_INFO'], 'get_data': request.GET.copy(), # Uncomment if using ADFS as IdP, https://github.com/onelogin/python-saml/pull/144 # 'lowercase_urlencoding': True, 'post_data': request.POST.copy() } return result def index(request): req = prepare_django_request(request) auth = init_saml_auth(req) errors = [] error_reason = None not_auth_warn = False success_slo = False attributes = False paint_logout = False if 'sso' in req['get_data']: return HttpResponseRedirect(auth.login()) # If AuthNRequest ID need to be stored in order to later validate it, do instead # sso_built_url = auth.login() # request.session['AuthNRequestID'] = auth.get_last_request_id() # return HttpResponseRedirect(sso_built_url) elif 'sso2' in req['get_data']: return_to = OneLogin_Saml2_Utils.get_self_url(req) + reverse('attrs') return HttpResponseRedirect(auth.login(return_to)) elif 'slo' in req['get_data']: name_id = session_index = name_id_format = name_id_nq = name_id_spnq = None if 'samlNameId' in request.session: name_id = request.session['samlNameId'] if 'samlSessionIndex' in request.session: session_index = request.session['samlSessionIndex'] if 'samlNameIdFormat' in request.session: name_id_format = request.session['samlNameIdFormat'] if 'samlNameIdNameQualifier' in request.session: name_id_nq = request.session['samlNameIdNameQualifier'] if 'samlNameIdSPNameQualifier' in request.session: name_id_spnq = request.session['samlNameIdSPNameQualifier'] return HttpResponseRedirect(auth.logout(name_id=name_id, session_index=session_index, nq=name_id_nq, name_id_format=name_id_format, spnq=name_id_spnq)) # If LogoutRequest ID need to be stored in order to later validate it, do instead # slo_built_url = auth.logout(name_id=name_id, session_index=session_index) # request.session['LogoutRequestID'] = auth.get_last_request_id() # return HttpResponseRedirect(slo_built_url) elif 'acs' in req['get_data']: request_id = None if 'AuthNRequestID' in request.session: request_id = request.session['AuthNRequestID'] auth.process_response(request_id=request_id) errors = auth.get_errors() not_auth_warn = not auth.is_authenticated() if not errors: if 'AuthNRequestID' in request.session: del request.session['AuthNRequestID'] request.session['samlUserdata'] = auth.get_attributes() request.session['samlNameId'] = auth.get_nameid() request.session['samlNameIdFormat'] = auth.get_nameid_format() request.session['samlNameIdNameQualifier'] = auth.get_nameid_nq() request.session['samlNameIdSPNameQualifier'] = auth.get_nameid_spnq() request.session['samlSessionIndex'] = auth.get_session_index() if 'RelayState' in req['post_data'] and OneLogin_Saml2_Utils.get_self_url(req) != req['post_data']['RelayState']: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the req['post_data']['RelayState'] is a trusted URL. return HttpResponseRedirect(auth.redirect_to(req['post_data']['RelayState'])) elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() elif 'sls' in req['get_data']: request_id = None if 'LogoutRequestID' in request.session: request_id = request.session['LogoutRequestID'] dscb = lambda: request.session.flush() url = auth.process_slo(request_id=request_id, delete_session_cb=dscb) errors = auth.get_errors() if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL return HttpResponseRedirect(url) else: success_slo = True elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() if 'samlUserdata' in request.session: paint_logout = True if len(request.session['samlUserdata']) > 0: attributes = request.session['samlUserdata'].items() return render(request, 'index.html', {'errors': errors, 'error_reason': error_reason, 'not_auth_warn': not_auth_warn, 'success_slo': success_slo, 'attributes': attributes, 'paint_logout': paint_logout}) def attrs(request): paint_logout = False attributes = False if 'samlUserdata' in request.session: paint_logout = True if len(request.session['samlUserdata']) > 0: attributes = request.session['samlUserdata'].items() return render(request, 'attrs.html', {'paint_logout': paint_logout, 'attributes': attributes}) def metadata(request): # req = prepare_django_request(request) # auth = init_saml_auth(req) # saml_settings = auth.get_settings() saml_settings = OneLogin_Saml2_Settings(settings=None, custom_base_path=settings.SAML_FOLDER, sp_validation_only=True) metadata = saml_settings.get_sp_metadata() errors = saml_settings.validate_metadata(metadata) if len(errors) == 0: resp = HttpResponse(content=metadata, content_type='text/xml') else: resp = HttpResponseServerError(content=', '.join(errors)) return resp python3-saml-1.16.0/demo-django/demo/wsgi.py000066400000000000000000000006151451074743100206000ustar00rootroot00000000000000""" WSGI config for demo project. It exposes the WSGI callable as a module-level variable named ``application``. For more information on this file, see https://docs.djangoproject.com/en/1.6/howto/deployment/wsgi/ """ import os os.environ.setdefault("DJANGO_SETTINGS_MODULE", "demo.settings") from django.core.wsgi import get_wsgi_application # noqa: E402 application = get_wsgi_application() python3-saml-1.16.0/demo-django/manage.py000077500000000000000000000003671451074743100201420ustar00rootroot00000000000000#!/usr/bin/env python import os import sys if __name__ == "__main__": os.environ.setdefault("DJANGO_SETTINGS_MODULE", "demo.settings") from django.core.management import execute_from_command_line execute_from_command_line(sys.argv) python3-saml-1.16.0/demo-django/requirements.txt000066400000000000000000000000341451074743100216100ustar00rootroot00000000000000Django==4.1.10 python3-saml python3-saml-1.16.0/demo-django/saml/000077500000000000000000000000001451074743100172635ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/saml/advanced_settings.json000066400000000000000000000020701451074743100236420ustar00rootroot00000000000000{ "security": { "nameIdEncrypted": false, "authnRequestsSigned": false, "logoutRequestSigned": false, "logoutResponseSigned": false, "signMetadata": false, "wantMessagesSigned": false, "wantAssertionsSigned": false, "wantNameId" : true, "wantNameIdEncrypted": false, "wantAssertionsEncrypted": false, "allowSingleLabelDomains": false, "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", "digestAlgorithm": "http://www.w3.org/2001/04/xmlenc#sha256", "rejectDeprecatedAlgorithm": true }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/demo-django/saml/certs/000077500000000000000000000000001451074743100204035ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/saml/certs/README000066400000000000000000000005731451074743100212700ustar00rootroot00000000000000Take care of this folder that could contain private key. Be sure that this folder never is published. SAML Python Toolkit expects that certs for the SP could be stored in this folder as: * sp.key Private Key * sp.crt Public cert * sp_new.crt Future Public cert Also you can use other cert to sign the metadata of the SP using the: * metadata.key * metadata.crt python3-saml-1.16.0/demo-django/saml/settings.json000066400000000000000000000022221451074743100220140ustar00rootroot00000000000000{ "strict": true, "debug": true, "sp": { "entityId": "https:///metadata/", "assertionConsumerService": { "url": "https:///?acs", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" }, "singleLogoutService": { "url": "https:///?sls", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "x509cert": "", "privateKey": "" }, "idp": { "entityId": "https://app.onelogin.com/saml/metadata/", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "singleLogoutService": { "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509cert": "" } }python3-saml-1.16.0/demo-django/templates/000077500000000000000000000000001451074743100203255ustar00rootroot00000000000000python3-saml-1.16.0/demo-django/templates/attrs.html000066400000000000000000000015331451074743100223520ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if paint_logout %} {% if attributes %}

You have the following attributes:

{% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login and access again to this page {% endif %} {% endblock %} python3-saml-1.16.0/demo-django/templates/base.html000066400000000000000000000015601451074743100221270ustar00rootroot00000000000000 A Python SAML Toolkit demo

A Python SAML Toolkit demo

{% block content %}{% endblock %}
python3-saml-1.16.0/demo-django/templates/index.html000066400000000000000000000026051451074743100223250ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if errors %} {% endif %} {% if not_auth_warn %} {% endif %} {% if success_slo %} {% endif %} {% if paint_logout %} {% if attributes %} {% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login Login and access to attrs page {% endif %} {% endblock %} python3-saml-1.16.0/demo-flask/000077500000000000000000000000001451074743100161655ustar00rootroot00000000000000python3-saml-1.16.0/demo-flask/index.py000066400000000000000000000132361451074743100176530ustar00rootroot00000000000000import os from flask import (Flask, request, render_template, redirect, session, make_response) from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.utils import OneLogin_Saml2_Utils app = Flask(__name__) app.config['SECRET_KEY'] = 'onelogindemopytoolkit' app.config['SAML_PATH'] = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'saml') def init_saml_auth(req): auth = OneLogin_Saml2_Auth(req, custom_base_path=app.config['SAML_PATH']) return auth def prepare_flask_request(request): # If server is behind proxys or balancers use the HTTP_X_FORWARDED fields return { 'https': 'on' if request.scheme == 'https' else 'off', 'http_host': request.host, 'script_name': request.path, 'get_data': request.args.copy(), # Uncomment if using ADFS as IdP, https://github.com/onelogin/python-saml/pull/144 # 'lowercase_urlencoding': True, 'post_data': request.form.copy() } @app.route('/', methods=['GET', 'POST']) def index(): req = prepare_flask_request(request) auth = init_saml_auth(req) errors = [] error_reason = None not_auth_warn = False success_slo = False attributes = False paint_logout = False if 'sso' in request.args: return redirect(auth.login()) # If AuthNRequest ID need to be stored in order to later validate it, do instead # sso_built_url = auth.login() # request.session['AuthNRequestID'] = auth.get_last_request_id() # return redirect(sso_built_url) elif 'sso2' in request.args: return_to = '%sattrs/' % request.host_url return redirect(auth.login(return_to)) elif 'slo' in request.args: name_id = session_index = name_id_format = name_id_nq = name_id_spnq = None if 'samlNameId' in session: name_id = session['samlNameId'] if 'samlSessionIndex' in session: session_index = session['samlSessionIndex'] if 'samlNameIdFormat' in session: name_id_format = session['samlNameIdFormat'] if 'samlNameIdNameQualifier' in session: name_id_nq = session['samlNameIdNameQualifier'] if 'samlNameIdSPNameQualifier' in session: name_id_spnq = session['samlNameIdSPNameQualifier'] return redirect(auth.logout(name_id=name_id, session_index=session_index, nq=name_id_nq, name_id_format=name_id_format, spnq=name_id_spnq)) elif 'acs' in request.args: request_id = None if 'AuthNRequestID' in session: request_id = session['AuthNRequestID'] auth.process_response(request_id=request_id) errors = auth.get_errors() not_auth_warn = not auth.is_authenticated() if len(errors) == 0: if 'AuthNRequestID' in session: del session['AuthNRequestID'] session['samlUserdata'] = auth.get_attributes() session['samlNameId'] = auth.get_nameid() session['samlNameIdFormat'] = auth.get_nameid_format() session['samlNameIdNameQualifier'] = auth.get_nameid_nq() session['samlNameIdSPNameQualifier'] = auth.get_nameid_spnq() session['samlSessionIndex'] = auth.get_session_index() self_url = OneLogin_Saml2_Utils.get_self_url(req) if 'RelayState' in request.form and self_url != request.form['RelayState']: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the request.form['RelayState'] is a trusted URL. return redirect(auth.redirect_to(request.form['RelayState'])) elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() elif 'sls' in request.args: request_id = None if 'LogoutRequestID' in session: request_id = session['LogoutRequestID'] dscb = lambda: session.clear() url = auth.process_slo(request_id=request_id, delete_session_cb=dscb) errors = auth.get_errors() if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL. return redirect(url) else: success_slo = True elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() return render_template( 'index.html', errors=errors, error_reason=error_reason, not_auth_warn=not_auth_warn, success_slo=success_slo, attributes=attributes, paint_logout=paint_logout ) @app.route('/attrs/') def attrs(): paint_logout = False attributes = False if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() return render_template('attrs.html', paint_logout=paint_logout, attributes=attributes) @app.route('/metadata/') def metadata(): req = prepare_flask_request(request) auth = init_saml_auth(req) settings = auth.get_settings() metadata = settings.get_sp_metadata() errors = settings.validate_metadata(metadata) if len(errors) == 0: resp = make_response(metadata, 200) resp.headers['Content-Type'] = 'text/xml' else: resp = make_response(', '.join(errors), 500) return resp if __name__ == "__main__": app.run(host='0.0.0.0', port=8000, debug=True) python3-saml-1.16.0/demo-flask/requirements.txt000066400000000000000000000000131451074743100214430ustar00rootroot00000000000000flask==1.0 python3-saml-1.16.0/demo-flask/saml/000077500000000000000000000000001451074743100171215ustar00rootroot00000000000000python3-saml-1.16.0/demo-flask/saml/advanced_settings.json000066400000000000000000000020701451074743100235000ustar00rootroot00000000000000{ "security": { "nameIdEncrypted": false, "authnRequestsSigned": false, "logoutRequestSigned": false, "logoutResponseSigned": false, "signMetadata": false, "wantMessagesSigned": false, "wantAssertionsSigned": false, "wantNameId" : true, "wantNameIdEncrypted": false, "wantAssertionsEncrypted": false, "allowSingleLabelDomains": false, "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", "digestAlgorithm": "http://www.w3.org/2001/04/xmlenc#sha256", "rejectDeprecatedAlgorithm": true }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/demo-flask/saml/certs/000077500000000000000000000000001451074743100202415ustar00rootroot00000000000000python3-saml-1.16.0/demo-flask/saml/certs/README000066400000000000000000000005731451074743100211260ustar00rootroot00000000000000Take care of this folder that could contain private key. Be sure that this folder never is published. SAML Python Toolkit expects that certs for the SP could be stored in this folder as: * sp.key Private Key * sp.crt Public cert * sp_new.crt Future Public cert Also you can use other cert to sign the metadata of the SP using the: * metadata.key * metadata.crt python3-saml-1.16.0/demo-flask/saml/settings.json000066400000000000000000000022231451074743100216530ustar00rootroot00000000000000{ "strict": true, "debug": true, "sp": { "entityId": "https:///metadata/", "assertionConsumerService": { "url": "https:///?acs", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" }, "singleLogoutService": { "url": "https:///?sls", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "x509cert": "", "privateKey": "" }, "idp": { "entityId": "https://app.onelogin.com/saml/metadata/", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "singleLogoutService": { "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509cert": "" } } python3-saml-1.16.0/demo-flask/templates/000077500000000000000000000000001451074743100201635ustar00rootroot00000000000000python3-saml-1.16.0/demo-flask/templates/attrs.html000066400000000000000000000014731451074743100222130ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if paint_logout %} {% if attributes %}

You have the following attributes:

{% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login and access again to this page {% endif %} {% endblock %} python3-saml-1.16.0/demo-flask/templates/base.html000066400000000000000000000015601451074743100217650ustar00rootroot00000000000000 A Python SAML Toolkit demo

A Python SAML Toolkit demo

{% block content %}{% endblock %}
python3-saml-1.16.0/demo-flask/templates/index.html000066400000000000000000000025131451074743100221610ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if errors %} {% endif %} {% if not_auth_warn %} {% endif %} {% if success_slo %} {% endif %} {% if paint_logout %} {% if attributes %} {% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login Login and access to attrs page {% endif %} {% endblock %} python3-saml-1.16.0/demo-tornado/000077500000000000000000000000001451074743100165335ustar00rootroot00000000000000python3-saml-1.16.0/demo-tornado/README.md000066400000000000000000000003421451074743100200110ustar00rootroot00000000000000# Tornado Demo # Fully-working tornado-demo. ### About issues ### This is only a demo, some issues about session still remain. Actually the session is global. ### Production ### Remember to disable debugging in production. python3-saml-1.16.0/demo-tornado/Settings.py000066400000000000000000000002201451074743100206770ustar00rootroot00000000000000import os BASE_DIR = os.path.dirname(__file__) SAML_PATH = os.path.join(BASE_DIR, 'saml') TEMPLATE_PATH = os.path.join(BASE_DIR, 'templates') python3-saml-1.16.0/demo-tornado/requirements.txt000066400000000000000000000000171451074743100220150ustar00rootroot00000000000000tornado==6.3.3 python3-saml-1.16.0/demo-tornado/saml/000077500000000000000000000000001451074743100174675ustar00rootroot00000000000000python3-saml-1.16.0/demo-tornado/saml/advanced_settings.json000066400000000000000000000020701451074743100240460ustar00rootroot00000000000000{ "security": { "nameIdEncrypted": false, "authnRequestsSigned": false, "logoutRequestSigned": false, "logoutResponseSigned": false, "signMetadata": false, "wantMessagesSigned": false, "wantAssertionsSigned": false, "wantNameId" : true, "wantNameIdEncrypted": false, "wantAssertionsEncrypted": false, "allowSingleLabelDomains": false, "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", "digestAlgorithm": "http://www.w3.org/2001/04/xmlenc#sha256", "rejectDeprecatedAlgorithm": true }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/demo-tornado/saml/certs/000077500000000000000000000000001451074743100206075ustar00rootroot00000000000000python3-saml-1.16.0/demo-tornado/saml/certs/README000066400000000000000000000005731451074743100214740ustar00rootroot00000000000000Take care of this folder that could contain private key. Be sure that this folder never is published. SAML Python Toolkit expects that certs for the SP could be stored in this folder as: * sp.key Private Key * sp.crt Public cert * sp_new.crt Future Public cert Also you can use other cert to sign the metadata of the SP using the: * metadata.key * metadata.crt python3-saml-1.16.0/demo-tornado/saml/settings.json000066400000000000000000000022221451074743100222200ustar00rootroot00000000000000{ "strict": true, "debug": true, "sp": { "entityId": "https:///metadata/", "assertionConsumerService": { "url": "https:///?acs", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" }, "singleLogoutService": { "url": "https:///?sls", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "x509cert": "", "privateKey": "" }, "idp": { "entityId": "https://app.onelogin.com/saml/metadata/", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "singleLogoutService": { "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509cert": "" } }python3-saml-1.16.0/demo-tornado/templates/000077500000000000000000000000001451074743100205315ustar00rootroot00000000000000python3-saml-1.16.0/demo-tornado/templates/attrs.html000066400000000000000000000016531451074743100225610ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if paint_logout %} {% if attributes %}

You have the following attributes:

{% for attr, i in attributes %} {% if i == 0 %} {% end %}
NameValues
{{ attr }}
    {% end %} {% if i == 1 %} {% for val in attr %}
  • {{ val }}
    • {% end %} {% end %}
{% else %} {% end %} Logout {% else %} Login and access again to this page {% end %} {% end %} python3-saml-1.16.0/demo-tornado/templates/base.html000066400000000000000000000015531451074743100223350ustar00rootroot00000000000000 A Python SAML Toolkit demo

A Python SAML Toolkit demo

{% block content %}{% end %}
python3-saml-1.16.0/demo-tornado/templates/index.html000066400000000000000000000034251451074743100225320ustar00rootroot00000000000000{% extends "base.html" %} {% block content %} {% if errors %} {% end %} {% if not_auth_warn %} {% end %} {% if success_slo %} {% end %} {% if paint_logout %} {% if attributes %} {% for attr in attributes %} {% end %}
NameValues
{{ attr[0] }}
    {% for elem in attr[1] %}
  • {{ elem }}
    • {% end %}
{% else %} {% end %} Logout {% else %} Login Login and access to attrs page {% end %} {% end %} python3-saml-1.16.0/demo-tornado/views.py000066400000000000000000000155161451074743100202520ustar00rootroot00000000000000import tornado.ioloop import tornado.web import Settings import tornado.httpserver import tornado.httputil from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.utils import OneLogin_Saml2_Utils # Global session info session = {} class Application(tornado.web.Application): def __init__(self): handlers = [ (r"/", IndexHandler), (r"/attrs", AttrsHandler), (r"/metadata", MetadataHandler), ] settings = { "template_path": Settings.TEMPLATE_PATH, "saml_path": Settings.SAML_PATH, "autoreload": True, "debug": True } tornado.web.Application.__init__(self, handlers, **settings) class IndexHandler(tornado.web.RequestHandler): def post(self): req = prepare_tornado_request(self.request) auth = init_saml_auth(req) error_reason = None attributes = False paint_logout = False success_slo = False auth.process_response() errors = auth.get_errors() not_auth_warn = not auth.is_authenticated() if len(errors) == 0: session['samlUserdata'] = auth.get_attributes() session['samlNameId'] = auth.get_nameid() session['samlSessionIndex'] = auth.get_session_index() self_url = OneLogin_Saml2_Utils.get_self_url(req) if 'RelayState' in self.request.arguments and self_url != self.request.arguments['RelayState'][0].decode('utf-8'): # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the self.request.arguments['RelayState'][0] is a trusted URL. return self.redirect(self.request.arguments['RelayState'][0].decode('utf-8')) elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() self.render('index.html', errors=errors, error_reason=error_reason, not_auth_warn=not_auth_warn, success_slo=success_slo, attributes=attributes, paint_logout=paint_logout) def get(self): req = prepare_tornado_request(self.request) auth = init_saml_auth(req) error_reason = None errors = [] not_auth_warn = False success_slo = False attributes = False paint_logout = False if 'sso' in req['get_data']: print('-sso-') return self.redirect(auth.login()) elif 'sso2' in req['get_data']: print('-sso2-') return_to = '%s/attrs' % self.request.host return self.redirect(auth.login(return_to)) elif 'slo' in req['get_data']: print('-slo-') name_id = None session_index = None if 'samlNameId' in session: name_id = session['samlNameId'] if 'samlSessionIndex' in session: session_index = session['samlSessionIndex'] return self.redirect(auth.logout(name_id=name_id, session_index=session_index)) elif 'acs' in req['get_data']: print('-acs-') auth.process_response() errors = auth.get_errors() not_auth_warn = not auth.is_authenticated() if len(errors) == 0: session['samlUserdata'] = auth.get_attributes() session['samlNameId'] = auth.get_nameid() session['samlSessionIndex'] = auth.get_session_index() self_url = OneLogin_Saml2_Utils.get_self_url(req) if 'RelayState' in self.request.arguments and self_url != self.request.arguments['RelayState'][0].decode('utf-8'): return self.redirect(auth.redirect_to(self.request.arguments['RelayState'][0].decode('utf-8'))) elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() elif 'sls' in req['get_data']: print('-sls-') dscb = lambda: session.clear() # clear out the session url = auth.process_slo(delete_session_cb=dscb) errors = auth.get_errors() if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL. return self.redirect(url) else: success_slo = True elif auth.get_settings().is_debug_active(): error_reason = auth.get_last_error_reason() if 'samlUserdata' in session: print('-samlUserdata-') paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() print("ATTRIBUTES", attributes) self.render('index.html', errors=errors, error_reason=error_reason, not_auth_warn=not_auth_warn, success_slo=success_slo, attributes=attributes, paint_logout=paint_logout) class AttrsHandler(tornado.web.RequestHandler): def get(self): paint_logout = False attributes = False if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() self.render('attrs.html', paint_logout=paint_logout, attributes=attributes) class MetadataHandler(tornado.web.RequestHandler): def get(self): req = prepare_tornado_request(self.request) auth = init_saml_auth(req) saml_settings = auth.get_settings() metadata = saml_settings.get_sp_metadata() errors = saml_settings.validate_metadata(metadata) if len(errors) == 0: # resp = HttpResponse(content=metadata, content_type='text/xml') self.set_header('Content-Type', 'text/xml') self.write(metadata) else: # resp = HttpResponseServerError(content=', '.join(errors)) self.write(', '.join(errors)) # return resp def prepare_tornado_request(request): dataDict = {} for key in request.arguments: dataDict[key] = request.arguments[key][0].decode('utf-8') result = { 'https': 'on' if request == 'https' else 'off', 'http_host': request.host, 'script_name': request.path, 'get_data': dataDict, 'post_data': dataDict, 'query_string': request.query } return result def init_saml_auth(req): auth = OneLogin_Saml2_Auth(req, custom_base_path=Settings.SAML_PATH) return auth if __name__ == "__main__": app = Application() http_server = tornado.httpserver.HTTPServer(app) http_server.listen(8000) tornado.ioloop.IOLoop.instance().start() python3-saml-1.16.0/demo_pyramid/000077500000000000000000000000001451074743100166145ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/.coveragerc000066400000000000000000000000661451074743100207370ustar00rootroot00000000000000[run] source = demo_pyramid omit = demo_pyramid/test* python3-saml-1.16.0/demo_pyramid/.gitignore000066400000000000000000000002731451074743100206060ustar00rootroot00000000000000*.egg *.egg-info *.pyc *$py.class *~ .coverage coverage.xml build/ dist/ .tox/ nosetests.xml env*/ tmp/ Data.fs* *.sublime-project *.sublime-workspace .*.sw? .sw? .DS_Store coverage test python3-saml-1.16.0/demo_pyramid/CHANGES.txt000066400000000000000000000000341451074743100204220ustar00rootroot000000000000000.0 --- - Initial version. python3-saml-1.16.0/demo_pyramid/MANIFEST.in000066400000000000000000000002201451074743100203440ustar00rootroot00000000000000include *.txt *.ini *.cfg *.rst recursive-include demo_pyramid *.ico *.png *.css *.gif *.jpg *.pt *.txt *.mak *.mako *.js *.html *.xml *.jinja2 python3-saml-1.16.0/demo_pyramid/README.txt000066400000000000000000000010011451074743100203020ustar00rootroot00000000000000demo_pyramid =============================== Getting Started --------------- - Change directory into your newly created project. cd demo_pyramid - Create a Python virtual environment. python3 -m venv env - Upgrade packaging tools. env/bin/pip install --upgrade pip setuptools - Install the project in editable mode with its testing requirements. env/bin/pip install -e ".[testing]" - Run your project's tests. env/bin/pytest - Run your project. env/bin/pserve development.ini python3-saml-1.16.0/demo_pyramid/demo_pyramid/000077500000000000000000000000001451074743100212655ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/demo_pyramid/__init__.py000066400000000000000000000012041451074743100233730ustar00rootroot00000000000000from pyramid.config import Configurator from pyramid.session import SignedCookieSessionFactory session_factory = SignedCookieSessionFactory('onelogindemopytoolkit') def main(global_config, **settings): """ This function returns a Pyramid WSGI application. """ config = Configurator(settings=settings) config.set_session_factory(session_factory) config.include('pyramid_jinja2') config.add_static_view('static', 'static', cache_max_age=3600) config.add_route('index', '/') config.add_route('attrs', '/attrs/') config.add_route('metadata', '/metadata/') config.scan() return config.make_wsgi_app() python3-saml-1.16.0/demo_pyramid/demo_pyramid/saml/000077500000000000000000000000001451074743100222215ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/demo_pyramid/saml/advanced_settings.json000066400000000000000000000020701451074743100266000ustar00rootroot00000000000000{ "security": { "nameIdEncrypted": false, "authnRequestsSigned": false, "logoutRequestSigned": false, "logoutResponseSigned": false, "signMetadata": false, "wantMessagesSigned": false, "wantAssertionsSigned": false, "wantNameId" : true, "wantNameIdEncrypted": false, "wantAssertionsEncrypted": false, "allowSingleLabelDomains": false, "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", "digestAlgorithm": "http://www.w3.org/2001/04/xmlenc#sha256", "rejectDeprecatedAlgorithm": true }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/demo_pyramid/demo_pyramid/saml/certs/000077500000000000000000000000001451074743100233415ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/demo_pyramid/saml/certs/README000066400000000000000000000005731451074743100242260ustar00rootroot00000000000000Take care of this folder that could contain private key. Be sure that this folder never is published. SAML Python Toolkit expects that certs for the SP could be stored in this folder as: * sp.key Private Key * sp.crt Public cert * sp_new.crt Future Public cert Also you can use other cert to sign the metadata of the SP using the: * metadata.key * metadata.crt python3-saml-1.16.0/demo_pyramid/demo_pyramid/saml/settings.json000066400000000000000000000022231451074743100247530ustar00rootroot00000000000000{ "strict": true, "debug": true, "sp": { "entityId": "https:///metadata/", "assertionConsumerService": { "url": "https:///?acs", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" }, "singleLogoutService": { "url": "https:///?sls", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "x509cert": "", "privateKey": "" }, "idp": { "entityId": "https://app.onelogin.com/saml/metadata/", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "singleLogoutService": { "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509cert": "" } } python3-saml-1.16.0/demo_pyramid/demo_pyramid/static/000077500000000000000000000000001451074743100225545ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/demo_pyramid/static/pyramid-16x16.png000066400000000000000000000024471451074743100255210ustar00rootroot00000000000000PNG  IHDRatEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp n#IDATxڌM(DQg2i$4Svb!e#dž`llD4PRfA$ % )Q$SgfWs7ν߹9Î6qXqʏb^LGyG_E` t-=^ @/Fw,.JûZY.+8|C1LCHr&c\B+T ΡfiXT#}*8F NgIХIpY'ȁj IDgMɥ'+:2e8^ Od@A><@6| ]peiP.0caAȸƠT ڨ9X8;3T0lS'}JIw3h1ᰊ!' jۯ1+S:wIENDB`python3-saml-1.16.0/demo_pyramid/demo_pyramid/static/pyramid.png000066400000000000000000000311451451074743100247330ustar00rootroot00000000000000PNG  IHDRX AiCCPICC ProfileH wTSϽ7" %z ;HQIP&vDF)VdTG"cE b PQDE݌k 5ޚYg}׺PtX4X\XffGD=HƳ.d,P&s"7C$ E6<~&S2)212 "įl+ɘ&Y4Pޚ%ᣌ\%g|eTI(L0_&l2E9r9hxgIbטifSb1+MxL 0oE%YmhYh~S=zU&ϞAYl/$ZUm@O ޜl^ ' lsk.+7oʿ9V;?#I3eE妧KD d9i,UQ h A1vjpԁzN6p\W p G@ K0ށiABZyCAP8C@&*CP=#t] 4}a ٰ;GDxJ>,_“@FXDBX$!k"EHqaYbVabJ0՘cVL6f3bձX'?v 6-V``[a;p~\2n5׌ &x*sb|! ߏƿ' Zk! $l$T4QOt"y\b)AI&NI$R$)TIj"]&=&!:dGrY@^O$ _%?P(&OJEBN9J@y@yCR nXZOD}J}/G3ɭk{%Oחw_.'_!JQ@SVF=IEbbbb5Q%O@%!BӥyҸM:e0G7ӓ e%e[(R0`3R46i^)*n*|"fLUo՝mO0j&jajj.ϧwϝ_4갺zj=U45nɚ4ǴhZ ZZ^0Tf%9->ݫ=cXgN].[7A\SwBOK/X/_Q>QG[ `Aaac#*Z;8cq>[&IIMST`ϴ kh&45ǢYYF֠9<|y+ =X_,,S-,Y)YXmĚk]c}džjcΦ浭-v};]N"&1=xtv(}'{'IߝY) Σ -rqr.d._xpUەZM׍vm=+KGǔ ^WWbj>:>>>v}/avO8 FV> 2 u/_$\BCv< 5 ]s.,4&yUx~xw-bEDCĻHGKwFGEGME{EEKX,YFZ ={$vrK .3\rϮ_Yq*©L_wד+]eD]cIIIOAu_䩔)3ѩiB%a+]3='/40CiU@ёL(sYfLH$%Y jgGeQn~5f5wugv5k֮\۹Nw]m mHFˍenQQ`hBBQ-[lllfjۗ"^bO%ܒY}WwvwXbY^Ю]WVa[q`id2JjGէ{׿m>PkAma꺿g_DHGGu;776ƱqoC{P38!9 ҝˁ^r۽Ug9];}}_~imp㭎}]/}.{^=}^?z8hc' O*?f`ϳgC/Oϩ+FFGGόzˌㅿ)ѫ~wgbk?Jި9mdwi獵ޫ?cǑOO?w| x&mf2:Y~ pHYs  $iTXtXML:com.adobe.xmp 1 5 72 1 72 200 1 200 2014-01-03T20:01:68 Pixelmator 3.0 ћ7#IDATx ŕǣDpW6Q#&j1n!qfƸD$11ȸ/c&h\Q'(ʌ݈!AI\ \E]{oWuWu[:ԩSKsҳ* L-bŊt@ZfWYeE\y@h kÚF.v`+Fpsx<5P@,@O-)t+irӴ2 +RC9 thZÆ7rFTc@e*n_0G~_94BHQ٩E@,X}lZ;7v&KgA໰ֹUyIVޔʫ>-a_V5&U& 0_+Š+k#Еy#LmM^47ݲ-6\THT/Yω64υdzoσkAV4؟xRa*6=@-,`n*M't4O?&rz=~5)fNEMq ]v@듞D:' ΙeC>~ Y 3б)- eO9|@,'FAY=VX  qi /TO^H9y*0*++a2c:Ҕ qi O1,$=5L@];5yPIrc!`Fp0x*B ҩ(l@p43#|tFNO  3Aq_A}6P@Tm7݁Tѹ1 -@.QFG do* 8Gfo ee΢Fln @x H;/ j ղvC{\휔IZ㤯6*@zP>gPF Wr-PVWdyŬ!W% j%BVF̳"4|]^d(;NEh SS'ę)Q@~Ytt]@8&`J:˾JAwvhž1ߝ C@v2)ArZ5Qi}r[ *:$zHk> (DOhp2h <˱bOhS'uU@)軜kfds&85}*F8pPM&!y,@ELIWy;ĶeUc&0!mVC hz,+W4F BUc`KK8:%Tup6K:Q<0+D R1[faSRø:_+v`HJ?D%,^QO 5Pz+=@G=`M"]]ߌM@*M@%=ZzkfSYr}R!zwBO}`V\:yVCID:ek w~/  Qrl^WQlBmN; >@49-*gbU} <=8er\L]Dmq*S$j&BB1hl4yW}q.=&!i2M.KiN`J'\sfAh,HI(q7yƶD! 'J&=0*K͍j T 5ӻ\d*qozaveϿHh0 y [&>#5Z)^Jo`<r1&'S#j`?Q}y P9GRZ7ξ6|KqI$YZOH^k VA֓:x+Z蛦#@Oh#Q2z{]Zo4PՐ~ L=1UVAKWmEsܽc7]:$Ӏ[s ւ- '\r@0&^Ē -oD˪ET|՛3W|uIRy}9LvjMT"(J̀NELbHyvT%Ai|&R7{A,ױvE$G;zvM MRxiSPz hߊ/QۡOr!Kt9 LvG՝Wo5]ՕҾ>`u_5ޛ@n t4n1!A힨ۑ*Qym ˣqLÓ@n ݆NĞW$ݎ&HEŗg P շ_zVK`b1kq Y`Q|hhB;WvB[-~q2ZM, Qhs1~<6cW79TL$74 +(4$ʤ#z*4H=g?u1fur?b[Ԍ<,JWXcfGDLT-kg}Utfc1O( !]I[w7zdfA=! +Jbn@뀢A"4L]5s!4!2hN++:դAIE3"!C0r].,ҢTE6 ~u"-? Md"Mp5g {,Co!P 07Zno}Tio5=&8)|׋‚2Ei&GM&L%!Eט q>=9ʨÇIÈZ>Ҙ r`M@ZU nffeAZy !Hx-q_JF,4ɮGAm@ /ը' >[NPO„QmJBxϷAic"qȏWMV#< ԜҦl!{QM$%\PMAl ]S,2|1q_7LQj1"iLͼ7+mKzj^or2Ou2^ &!n} #8Fw N>Ҝ?* Dg* "Jk%xi["6T`0l$' d.ՊTW+F GLB'I\I0ȥ<*ӓ UoYwl0hUói},Rhq!@ u@a !'4R|0?P[^tzX? HG?e@] AG0-;!KWA@ rT>@ #&!Z$S3#(e49B,@qG#ڨ8:4M`*WGp7%JC0(3@ 8qX 5 @Xv-d0N#n( :2I'taZ \"4*R7@Bv}_]x{nˣ0 I{x,gw;u(}=/`K HvLpr=hAX& RdGyp?} Q2}RQRzۥAw\zuj%32ej@AD5VWKq&Zqv@{7H-dCAT.?GͰ%^-} ;אSɇ{:<$L]7#"eI0 ٠ճzǀ\QҌ667Lf&Ȩ>Sp_+a2?]W{zXzc 89 \j}EJz Ti %˱uYGT7zKSIإdTa6z( -q3,1dHjӠrv]ZpR _CڪgZ򕻶]7+I~1mjW%)izHlR w${ 8lQ+Bڗ0T-mWCMSC]v):@ݸ/Q@2z{Jk<~\[5cwW,݀O,yM/H/vOJNS 7޴<{? kF,1No _/ vt3w4AZ U-SOvG ݙC ۃ "@xGpY(:Z^'zB +%*ON^]D'0A@6-HϢ@>v>@3PBKW2'~<Ԋ\jL1]Gzk˜ADml'v8@l((x" fpc%#3/t 㪑SoUvC egಁյE&.}҇0%*b}%s,/t8_PTb\XQ)y}qMQU} gY+Pj ]o-##}V"SP~D #o+bF̖5T%4bLo"ݱ-{.AJJ֢,Yic4S^-J D<қ(B Tr ~ҊWsVΉ9Lq2IXs #6J}GԉJ$+zi2KTz(Չtzh\U7,cW51@d<(^T^uơY%@S`cVDwHp t ZԛR='ZjIh ~gP5/PPM@(NrsW#5>@9EK?? :kuj鍺Vi ".K=Kɑ* .p-8*5kT^q?U(yNCK? B?KNVE^9@ݻ&۵ 19-hBc yRxP˻Tl(i.K78:Z445 ܃>Zfᜐhqt.?4mB PH:B>B'R 4Ew݆\U/.H{ϝAV۱@N /*Yi 9or 'MF_`|BF+қl+f|~Mձ:5}Dy(Ҫ\X[Md]M%9 ~#SIIR5;xp x I~.׌]5{?|6 51w a7 =4R*idJۯ}!қ3 9TU6 DJrsA^yqD&${|C!_|1wW^B=ḌR]iRK[O8Z4 Bc:@:4(ћwT5{D76Z;\x 9G!wWt"Lvp(w Rs*qoDif!&~T\·%8Wm !?h"5g ^cC /qЏgβB$CnV$z5-ч_jEƵU:(TЉ% ]%!ɟ6;j0K r :O"AI!n y~+G B;"- ;&OZ` v.bi ;A1`K[@/&]5P@T* -Ҽњh4؇vE^ SQ,]4Nlɴ 2/0]LITk D x 25i-z.,@%x8ˉw!AQ`2Ii 8T- ȇk-34~D։}󑛠EZ(DaPJ*T%d#j½b[HyqXD *Z6 ̙ nnX>$IENDB`python3-saml-1.16.0/demo_pyramid/demo_pyramid/static/theme.css000066400000000000000000000055661451074743100244040ustar00rootroot00000000000000@import url(//fonts.googleapis.com/css?family=Open+Sans:300,400,600,700); body { font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif; font-weight: 300; color: #ffffff; background: #bc2131; } h1, h2, h3, h4, h5, h6 { font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif; font-weight: 300; } p { font-weight: 300; } .font-normal { font-weight: 400; } .font-semi-bold { font-weight: 600; } .font-bold { font-weight: 700; } .starter-template { margin-top: 250px; } .starter-template .content { margin-left: 10px; } .starter-template .content h1 { margin-top: 10px; font-size: 60px; } .starter-template .content h1 .smaller { font-size: 40px; color: #f2b7bd; } .starter-template .content .lead { font-size: 25px; color: #f2b7bd; } .starter-template .content .lead .font-normal { color: #ffffff; } .starter-template .links { float: right; right: 0; margin-top: 125px; } .starter-template .links ul { display: block; padding: 0; margin: 0; } .starter-template .links ul li { list-style: none; display: inline; margin: 0 10px; } .starter-template .links ul li:first-child { margin-left: 0; } .starter-template .links ul li:last-child { margin-right: 0; } .starter-template .links ul li.current-version { color: #f2b7bd; font-weight: 400; } .starter-template .links ul li a, a { color: #f2b7bd; text-decoration: underline; } .starter-template .links ul li a:hover, a:hover { color: #ffffff; text-decoration: underline; } .starter-template .links ul li .icon-muted { color: #eb8b95; margin-right: 5px; } .starter-template .links ul li:hover .icon-muted { color: #ffffff; } .starter-template .copyright { margin-top: 10px; font-size: 0.9em; color: #f2b7bd; text-transform: lowercase; float: right; right: 0; } @media (max-width: 1199px) { .starter-template .content h1 { font-size: 45px; } .starter-template .content h1 .smaller { font-size: 30px; } .starter-template .content .lead { font-size: 20px; } } @media (max-width: 991px) { .starter-template { margin-top: 0; } .starter-template .logo { margin: 40px auto; } .starter-template .content { margin-left: 0; text-align: center; } .starter-template .content h1 { margin-bottom: 20px; } .starter-template .links { float: none; text-align: center; margin-top: 60px; } .starter-template .copyright { float: none; text-align: center; } } @media (max-width: 767px) { .starter-template .content h1 .smaller { font-size: 25px; display: block; } .starter-template .content .lead { font-size: 16px; } .starter-template .links { margin-top: 40px; } .starter-template .links ul li { display: block; margin: 0; } .starter-template .links ul li .icon-muted { display: none; } .starter-template .copyright { margin-top: 20px; } } python3-saml-1.16.0/demo_pyramid/demo_pyramid/templates/000077500000000000000000000000001451074743100232635ustar00rootroot00000000000000python3-saml-1.16.0/demo_pyramid/demo_pyramid/templates/attrs.jinja2000066400000000000000000000014611451074743100255210ustar00rootroot00000000000000{% extends "layout.jinja2" %} {% block content %} {% if paint_logout %} {% if attributes %}

You have the following attributes:

{% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login and access again to this page {% endif %} {% endblock %} python3-saml-1.16.0/demo_pyramid/demo_pyramid/templates/index.jinja2000066400000000000000000000031111451074743100254650ustar00rootroot00000000000000{% extends "layout.jinja2" %} {% block content %}

Pyramid Starter project

Welcome to demo_pyramid, a Pyramid application generated by
Cookiecutter.

{% if errors %} {% endif %} {% if not_auth_warn %} {% endif %} {% if success_slo %} {% endif %} {% if paint_logout %} {% if attributes %} {% for attr in attributes %} {% endfor %}
NameValues
{{ attr.0 }}
    {% for val in attr.1 %}
  • {{ val }}
    • {% endfor %}
{% else %} {% endif %} Logout {% else %} Login Login and access to attrs page {% endif %} {% endblock %} python3-saml-1.16.0/demo_pyramid/demo_pyramid/templates/layout.jinja2000066400000000000000000000050541451074743100257030ustar00rootroot00000000000000 Cookiecutter Starter project for the Pyramid Web Framework
{% block content %}

No content

{% endblock content %}
Copyright © Pylons Project
python3-saml-1.16.0/demo_pyramid/demo_pyramid/tests.py000066400000000000000000000013051451074743100230000ustar00rootroot00000000000000import unittest from pyramid import testing class ViewTests(unittest.TestCase): def setUp(self): self.config = testing.setUp() def tearDown(self): testing.tearDown() def test_my_view(self): from .views import my_view request = testing.DummyRequest() info = my_view(request) self.assertEqual(info['project'], 'demo_pyramid') class FunctionalTests(unittest.TestCase): def setUp(self): from demo_pyramid import main app = main({}) from webtest import TestApp self.testapp = TestApp(app) def test_root(self): res = self.testapp.get('/', status=200) self.assertTrue(b'Pyramid' in res.body) python3-saml-1.16.0/demo_pyramid/demo_pyramid/views.py000066400000000000000000000107161451074743100230010ustar00rootroot00000000000000import os from pyramid.httpexceptions import (HTTPFound, HTTPInternalServerError, HTTPOk,) from pyramid.view import view_config from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.utils import OneLogin_Saml2_Utils SAML_PATH = os.path.join(os.path.dirname(__file__), 'saml') def init_saml_auth(req): auth = OneLogin_Saml2_Auth(req, custom_base_path=SAML_PATH) return auth def prepare_pyramid_request(request): # Uncomment this portion to set the request.scheme # based on the supplied `X-Forwarded` headers. # Useful for running behind reverse proxies or balancers. # # if 'X-Forwarded-Proto' in request.headers: # request.scheme = request.headers['X-Forwarded-Proto'] return { 'https': 'on' if request.scheme == 'https' else 'off', 'http_host': request.host, 'script_name': request.path, 'get_data': request.GET.copy(), # Uncomment if using ADFS as IdP, https://github.com/onelogin/python-saml/pull/144 # 'lowercase_urlencoding': True, 'post_data': request.POST.copy(), } @view_config(route_name='index', renderer='templates/index.jinja2') def index(request): req = prepare_pyramid_request(request) auth = init_saml_auth(req) errors = [] error_reason = "" not_auth_warn = False success_slo = False attributes = False paint_logout = False session = request.session if 'sso' in request.GET: return HTTPFound(auth.login()) elif 'sso2' in request.GET: return_to = '%s/attrs/' % request.host_url return HTTPFound(auth.login(return_to)) elif 'slo' in request.GET: name_id = None session_index = None if 'samlNameId' in session: name_id = session['samlNameId'] if 'samlSessionIndex' in session: session_index = session['samlSessionIndex'] return HTTPFound(auth.logout(name_id=name_id, session_index=session_index)) elif 'acs' in request.GET: auth.process_response() errors = auth.get_errors() not_auth_warn = not auth.is_authenticated() if len(errors) == 0: session['samlUserdata'] = auth.get_attributes() session['samlNameId'] = auth.get_nameid() session['samlSessionIndex'] = auth.get_session_index() self_url = OneLogin_Saml2_Utils.get_self_url(req) if 'RelayState' in request.POST and self_url != request.POST['RelayState']: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the request.POST['RelayState'] is a trusted URL. return HTTPFound(auth.redirect_to(request.POST['RelayState'])) else: error_reason = auth.get_last_error_reason() elif 'sls' in request.GET: dscb = lambda: session.clear() url = auth.process_slo(delete_session_cb=dscb) errors = auth.get_errors() if len(errors) == 0: if url is not None: # To avoid 'Open Redirect' attacks, before execute the redirection confirm # the value of the url is a trusted URL. return HTTPFound(url) else: success_slo = True if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() return { 'errors': errors, 'error_reason': error_reason, 'not_auth_warn': not_auth_warn, 'success_slo': success_slo, 'attributes': attributes, 'paint_logout': paint_logout, } @view_config(route_name='attrs', renderer='templates/attrs.jinja2') def attrs(request): paint_logout = False attributes = False session = request.session if 'samlUserdata' in session: paint_logout = True if len(session['samlUserdata']) > 0: attributes = session['samlUserdata'].items() return { 'paint_logout': paint_logout, 'attributes': attributes, } @view_config(route_name='metadata', renderer='html') def metadata(request): req = prepare_pyramid_request(request) auth = init_saml_auth(req) settings = auth.get_settings() metadata = settings.get_sp_metadata() errors = settings.validate_metadata(metadata) if len(errors) == 0: resp = HTTPOk(body=metadata, headers={'Content-Type': 'text/xml'}) else: resp = HTTPInternalServerError(body=', '.join(errors)) return resp python3-saml-1.16.0/demo_pyramid/development.ini000066400000000000000000000021461451074743100216420ustar00rootroot00000000000000### # app configuration # http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/environment.html ### [app:main] use = egg:demo_pyramid pyramid.reload_templates = true pyramid.debug_authorization = false pyramid.debug_notfound = false pyramid.debug_routematch = false pyramid.default_locale_name = en pyramid.includes = pyramid_debugtoolbar # By default, the toolbar only appears for clients from IP addresses # '127.0.0.1' and '::1'. # debugtoolbar.hosts = 127.0.0.1 ::1 ### # wsgi server configuration ### [server:main] use = egg:waitress#main listen = 127.0.0.1:6543 [::1]:6543 ### # logging configuration # http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/logging.html ### [loggers] keys = root, demo_pyramid [handlers] keys = console [formatters] keys = generic [logger_root] level = INFO handlers = console [logger_demo_pyramid] level = DEBUG handlers = qualname = demo_pyramid [handler_console] class = StreamHandler args = (sys.stderr,) level = NOTSET formatter = generic [formatter_generic] format = %(asctime)s %(levelname)-5.5s [%(name)s:%(lineno)s][%(threadName)s] %(message)s python3-saml-1.16.0/demo_pyramid/production.ini000066400000000000000000000016431451074743100215070ustar00rootroot00000000000000### # app configuration # http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/environment.html ### [app:main] use = egg:demo_pyramid pyramid.reload_templates = false pyramid.debug_authorization = false pyramid.debug_notfound = false pyramid.debug_routematch = false pyramid.default_locale_name = en ### # wsgi server configuration ### [server:main] use = egg:waitress#main listen = *:6543 ### # logging configuration # http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/logging.html ### [loggers] keys = root, demo_pyramid [handlers] keys = console [formatters] keys = generic [logger_root] level = WARN handlers = console [logger_demo_pyramid] level = WARN handlers = qualname = demo_pyramid [handler_console] class = StreamHandler args = (sys.stderr,) level = NOTSET formatter = generic [formatter_generic] format = %(asctime)s %(levelname)-5.5s [%(name)s:%(lineno)s][%(threadName)s] %(message)s python3-saml-1.16.0/demo_pyramid/pytest.ini000066400000000000000000000000661451074743100206470ustar00rootroot00000000000000[pytest] testpaths = demo_pyramid python_files = *.py python3-saml-1.16.0/demo_pyramid/setup.py000066400000000000000000000022501451074743100203250ustar00rootroot00000000000000import os from setuptools import setup, find_packages here = os.path.abspath(os.path.dirname(__file__)) with open(os.path.join(here, 'README.txt')) as f: README = f.read() with open(os.path.join(here, 'CHANGES.txt')) as f: CHANGES = f.read() requires = [ 'pyramid', 'pyramid_jinja2', 'pyramid_debugtoolbar', 'waitress', 'xmlsec', 'isodate', 'python3-saml', ] tests_require = [ 'WebTest >= 1.3.1', # py3 compat 'pytest', 'pytest-cov', ] setup( name='demo_pyramid', version='0.0', description='demo_pyramid', long_description=README + '\n\n' + CHANGES, classifiers=[ 'Programming Language :: Python', 'Framework :: Pyramid', 'Topic :: Internet :: WWW/HTTP', 'Topic :: Internet :: WWW/HTTP :: WSGI :: Application', ], author='', author_email='', url='', keywords='web pyramid pylons', packages=find_packages(), include_package_data=True, zip_safe=False, extras_require={ 'testing': tests_require, }, install_requires=requires, entry_points={ 'paste.app_factory': [ 'main = demo_pyramid:main', ], }, ) python3-saml-1.16.0/docs/000077500000000000000000000000001451074743100150735ustar00rootroot00000000000000python3-saml-1.16.0/docs/SAML_Python3_Toolkit_Guide.pdf000066400000000000000000011405711451074743100226010ustar00rootroot00000000000000%PDF-1.5 % 16 0 obj << /Length 2115 /Filter /FlateDecode >> stream xڝXms _~1W$Em{םm38ȑd'޽dƢ(`l(&4S?t?q4{hjCn[D,L¢Y&C1%8q~zۺuS3T :uYl/,lS8h+?̓N*zmp+7$L/,|,=%yB+ы7ZH$\"FvA)VLwGvfdnz_ӌA $4"3m5NgB'rqO^4HJB5 :3'"2pt6T ]q9*E*kǟ[:4|#QP aRj#0w4fgH[~uՊ0֩H2nb'obg:f=3OD"h!4 CS60)D:~uCs0;d:?'I 㬔J㡬\cEy@8q=X5?~jx#̖C&x2웂=)iw|ioGd@n(^nDz~jَz0Q+PLLIf:MEoEt=d4a|xҰH1J!YYmW!d5ﭜq`~ڕp~n/gn 8$q|w7qsXw/lm{vɂ·Dt&:Vo+.!^+,D!6m@xU ˠt5y$R8<r]NQѶ>b؎rm|UM@d}=u J^|=iEX /6ݡ~l~_ %u:!4yl>  %|.Bݨ"V+SȨ\{ @\M@/Kj=ْ/d(Y~l0༥r MTU76#E밹s8*=PS-/$I},f0\Ѹ}'Ͼ AbN*\ ~<@.;2s׳mbg*ͪ6g/)VmT)YEEs/i45XWЀ/uR}_3RFG"۸?_F\O&3}uLGc:8y*za~*[a~<-ivI/WL#O̼f\&PAa->ݦLL9StT_8=apgbd1v& wdtL qs޶]˒JpW]&i6/@A+gٗA|[P\SqlǝZU=t\'Ё+[08]jOdV-n endstream endobj 5 0 obj << /Type /XObject /Subtype /Form /FormType 1 /PTEX.FileName (/tmp/tex2pdf.-0f0371200e438ae9/6772454c626ed4074f26105a1cce238e3a939752.pdf) /PTEX.PageNumber 1 /PTEX.InfoDict 35 0 R /BBox [0 0 157 20] /Group 22 0 R /Resources << /ExtGState << /a0 << /CA 1 /ca 1 >> /a1 << /CA 0.3 /ca 0.3 >> >>/Shading << /sh6 36 0 R /sh8 37 0 R >>/Font << /f-0-0 38 0 R>> >> /Length 733 /Filter /FlateDecode >> stream xTn1+|AZ '"q@E$.=UF !4uLUnxv?~Doo$XJBԊuE֛*i[I %uwnFo佸/?[CU2rvWM%nW ҽd׻C ڽ_ެ;ǺKyj_x|Yw;&[^ _yqpڽB*gd͞G[tB*}*shꐙM7XF'SQS=I;t6ӭ%Z,Gx"6{cm*io7m&gyUnȱk6< Kkzv:!a;ES8M tyHƝֶ %)w,_9of endstream endobj 42 0 obj << /Length 44 0 R /Filter /FlateDecode >> stream x]n ;OvӖlRi.9G i!C~WC#?F(â`„gDU*^WyTEm8,mHk =e{[;i_E(EׁFʽuuڷqۥ#y]Ԣq03,;h:o2=),$1;M!Y>d)ٰ ٘\s:a7dYqLE޳=vC>dɖd>IVכUMn=TRQǬSV~> stream xX{\UU{xDE#vbPĆ:*Y=lDLqM-kdE'GRf):ȨaAX>͝{gXgz^(G}>k@Ǽ`t)'Ѱ*XQJbp|{iFRD=ǖO5Bć.Z,j"z# O&[⢱oB@|;ikM$RZζajS d^Q_5 !k90AM l2?R,&#* 0nݮFd):Sz2={p4|q~㖓6khv:c-O`};/}=b\&ɞ4$ Nj[vf[jZ&حf;͊n &*{ ܖ J]P3\3f3*kbQoxu f["=nf%><߲Ri/o,@JX:#GRdGXV3W!feu->1UGA:KRT>2:6ڞpw4ICMָfЌiye}cSSs`&)l9515c2:ǖuf@*h?Pi^:u):f$(K&,f-12avCСzWLhRD >E{ YRW 6U|,5:5&56՛Ek1Zlov\v|vbQbEteLel2"~]b]bGbͥ7\ "oQ\yLyl<_ޟe<E!`z1=cґ ,}1ԔټTu&9?g J.dߐz/Xptw\e^حcpWEJJvU9ANota{RǫQDGҏ pvkFyteudro?VYwY23&7$%]jmT?p 9I-!&Q582%syKͰlL6 &[umQ3B-! Hz΍߫(5h˒.%JCxiT =`Z&=ɟ R lzUr Yb`dH2jB تBk Zl~k؁^1QD@v0(#=s"hpw?.t4H =bj~( |i6VДl: &4Dn.qꢜ?0|hPMpPA1,(}$Uq"pێMwظiG] f:}{WM.x)sJnI6$3(.h ,SdFaSye),eKQbq!B裼b (uﵵXrbJtMҎUAt#'F3t,cl޷g2 vX%lv-Rfn;wQ/)?O'J-mtRb5O΃yhf)zK?4.{/f.N&_%"{b0߄f3 Mth/uY3g"3E*RϺ G +??%=d8O x6" }LAe@Cʠf r4[/.xySc q,a4qk?d\`l JF9N$;Iƿ; W}X/श@WO0ݘKZ?,P[N zꤽPS1vUIԷ: ͬSX/i >A7 A9K'ϒr+ɭr@^(|' |WrѷT,4 Lfy쀋؊%I)PBR(JYsB-4J(=Cd9TΑ]{xs2CT@ ^9f!%QiO~1 ȁ GcI=c PgX 9A~] }TZ}=ED.=)X=\ƅ]"OE@3' 4U`iFCqB뉃X鰄Z%B2@5q kſ[jVZq" *8`4p%üJ䛖ߨ͜=ɺv}|]\",BGD4C\;5ӑ߲J-{r3]pP<w}J(Av(>)T[Hu7_]k0պ5JPg$\;IfJe4Bs,S12D9E#[nʵ'k5(S|~5u wW]Oݏ__`MlHᗺ\^㿹 Sk)~rEy~ϝϕ)x(~FQ~ }5xT ?-T ֏ <^plxLo_ <"fT1ǃMry>?O | |S`7v`no.ۇ.EJ&p..m9򱎦+l/f|ن[^[Z h_ \cq-T78_ \Wur >^՚ \pFq5ZeUn\eJǕ䩕>P{V |Vg ,>]ZʟXZ+$K|sO \'mX.G .3CR| \$pc0Ѕ0O ̝g]8ςG{8WNuX;!p(7݅F*|G[Hӭ8"obj1ŊÓ|fǤ>CPqD|&p9gŁ;1s7c0Lh; Յ'`$cy*B`8- D@0.TJљv[8 l[8ZZ4 44@ (ӠL p) 5,oSt endstream endobj 6 0 obj << /Type /XObject /Subtype /Form /FormType 1 /PTEX.FileName (/tmp/tex2pdf.-0f0371200e438ae9/330c80b0c98c841a725d575abee5ac8af249a37f.pdf) /PTEX.PageNumber 1 /PTEX.InfoDict 46 0 R /BBox [0 0 178 20] /Group << /Type /Group /S /Transparency /I true /CS /DeviceRGB >> /Resources << /ExtGState << /a0 << /CA 1 /ca 1 >> /a1 << /CA 0.3 /ca 0.3 >> /s7 47 0 R >>/Shading << /sh6 48 0 R >>/Font << /f-0-0 49 0 R>> >> /Length 324 /Filter /FlateDecode >> stream xRN0 +|lm$M+Vath7uEB=v:4&v??Ȓa5Q0*q #Fv @trcm fAT1=^9ukAGKV~GŘS|$ann a=j#G6!/*f@ l4QW "ƟB563ybئe yc4oj  endstream endobj 53 0 obj << /Length 56 0 R /Filter /FlateDecode >> stream x]Rn0[^H$]<{X 2{H)`2&;Ͻ5wjz a³(AVDþ\z;m![;:kƞu.6@.4α^!Kc 1C(ӺԪqsB?36;hh2g4ыyhDŽcmŸ"\$MU1_E\  {y$+0O#+#|s%k$i$k$iꉽ34CԓM)[};]tʙ6o[ ȝ_ endstream endobj 54 0 obj << /Length 57 0 R /Filter /FlateDecode /Type /XObject /Subtype /Form /FormType 1 /BBox [ 0 0 1 1] /Resources << /ExtGState << /a0 << /ca 1 /CA 1 >> >> /Shading << /sh11 58 0 R >> >> /Group << /Type /Group /S /Transparency /I true /CS /DeviceGray >> >> stream xO4PH/V/04T($L endstream endobj 55 0 obj << /Length 59 0 R /Filter /FlateDecode /Length1 7080 >> stream xX{xE?է{^=I$dH+11@͂ AѠ!"+D %1 ,D@DjdYLA֫׈WH*$y}y}ku<~ BΙS޻7xw>pNDi]3g_ a],(M{UC=Ӧ8}׽ AmSsm) :}?ՖP~3Ω\OcT4s2y2 >DP}ʆھb N.ۉZ4%P.1WH2d6n<[Nda#6¥2^D)qy%?*[끵%^*<9܀$d yW@EkQSw9Œ쁹WDٲ'eFՊ7ٱKK ;>y;vDB.7{M5C׈. npq95]s;ut^/Cӡ-uptZxˤ&\4Wh;_\;l#e?_NT*PQ-UOu9C eRk5 R/NҲ-")[f{Զ26cE|!<|lp\'(ܮ 'HD6 M2Prhq b^UU(1c2k⬗3 pZ͞fˮތ!ðnQַhU'xjQZnn^^^-*WI|vH:ߒCa>U15"//*ʃ |u^=/rTI:XHI~W6ffck`ۥ[͟QV;sNz_FKf)]b֏Etw?=({ߕp/c] ґ%q0LD;)U.qHc cvU62g;{K5E t[*f9rI…k45v+K;n6o|x{G\촒/iWHA(>`TpMx+WX_ilT|?XWNןh ̴Ġ`w3 JU$5E HAT}#{o&3bp|b;<1޼7+9+ eRf !3l$ pAJAZYڲ@U*T^*>5-pyI'špY,X* /,.-k 2".I{pn7Y2kCScC9qIO+_8俵J9wyw_ƍKvN}e/{+0`WZZeL|@ 6{6FdP >29V-{/d/,0IEDQD%nmlybG^zիm?,F0҈I:?$48os:$>>PM 5=Pɪe_G!7EIM^˦RF{ڛ)8kxp> o.x/Ì rػ(e/0g&iIzcOj Շ: kzL_O|z =UjzUMсNt==&̌gTd,XQњуr6`,>`]$'c>;sruk7?ݟ&KWLm^JßMO/,4G]}6To-; N]t{o ̈-*!^{J`Q[RR8.))I^Qe e͉|I/'hvyy?"8K3 J)e~tN/|̐yqMGlyr17s2[OY#*qK@Zw`>uª%p39 |@V.3I*;\-sB9=TiB:89㖷CnBo1&MΉe2$Ys"{\TD8sxm< l)Y/DCH2sJ{2WwkPmqe[F|R/1wȓ]ɰ£B+Bb QO[MBLIlgI`$.OȘi/ L N e69Sm ~2+8m⯷QxlMO=moO1W}u4z캚_1lNyj}. dFȜ\6CQ8R!KrJuv3YQ--r^[;,L^2eIS4)U'J]i_*UZSI^;+-tWk3ӱQjRmu]4o{;lVٖ56B@YWG_쓎{Ht^̗z2I=0_Kd f6DŽD!bϒ]3bc-01&dQ^=60ܪ HN.owcJnAZZ*Kv c>S31non͎4az|l9'7Y\ڼŜ]w,: 2ԯf'۸g`*M't'xbX3#.?a?-H1e♭UU|xz-k?O.!݋+g,2-c]ƿd_f+팖&di }m\Pl<泇juPPVhHhO8ӺC=NJQwF{6Ml3:cg@h8Hc nh]nlJw$e=6=,W`lb;VJͳ^ `.a'Xԟv@+UpwnjxKp>Z#ny6EyO'70H#9,|<|M=;C3CIhKN@ lrfAT.$l4O" GY63t-iQxLC2&Jd8iAΤm` *ócJ*4s82T@ [׵< RtTI9vRXQEJemo=BUFYLyNeWnz?B_N'm~)r$͇?Dlu7/ [vWu/_ÿxÖ6 KgCx^xx~3'mq&~$/??:|_{^EAwh;Ex:<^??%dy"x"odq/3IZ<6 <"U|YK |Q!02ʛ6p7 |aA|awQىMwQ'uW>'{Jp./]^|~ w |ZOyqm[]|[6nu%XOCpͿqPq'|b?=A9:uN\KZ_.\݆:f _uW-k)XcʏEq+>:1_ՏڇXE U%XI2-XR\,BТE!,/(>(p.4+6ӆ6,8K 0x. &D8um"MxQND~s6N8v~<||ñ7 tI_zGSh7pTNNu8Gԟ 58\Wy>j_aC|ơN"0OA>>  A>81 g BǬLg91S|۱_6}KObӢ<Lb{1c7a/J0؆:BDLث {c"U(Tx~>q4+РYt t:SF;Qy.Pa@S& # tp?2@Jd}/> /Resources << /ExtGState << /a0 << /CA 1 /ca 1 >> /a1 << /CA 0.3 /ca 0.3 >> /s7 62 0 R >>/Shading << /sh6 63 0 R >>/Font << /f-0-0 64 0 R>> >> /Length 304 /Filter /FlateDecode >> stream x͒Ok0s)ăkJee&FZX2ogM #ט*EE\*L|V#GE"H LfXPs&zgLsX1N*!Vɰμ\:TI0sJfgŰLi4%ZA8 1z,3HNUGx~*2])=g[u7MtM-*AB eY啕YnkCk9CycňgOԷOkvM}o7;_vk endstream endobj 68 0 obj << /Length 71 0 R /Filter /FlateDecode >> stream x]Qn >n+HݨR^rCMY0)RCV[x> >> /Shading << /sh11 73 0 R >> >> /Group << /Type /Group /S /Transparency /I true /CS /DeviceGray >> >> stream xO4PH/V/04T($L endstream endobj 70 0 obj << /Length 74 0 R /Filter /FlateDecode /Length1 5180 >> stream xW tTU߭%ZSTUJ I $HR"kL &(vԄEPd)ip '* ;ƱB1Qx3c{}Μ3̙{w~=`u({ha'_he>ctLTTвQ.Г {u͙druOKH߭^`Er’Y1W\Drꃕe hZJ^ZFr ɎWݮN% A|/UPw|T7{$Ft ={NivV_QWWm_V%e\뎂Z64WyPES/g(+^1ou(ST]Ԇ(_g%6ǩľcllgF8^,9}%?,쑳RR.uw_JIiLH`㙁YXN<()KSZ5oY7Dk1DmSO-D&>7jTGzBU̅MT~>DUY_ꡞ5ޠm |5YsTsA3_%aZc ؂cހ\_M7|?CqBTA^g5iCEG$M8):N%{0Mש]'E;97*QLo υ\+rxzf65*YTiҖ,SRneCsfi=B-=D6SKVoo5H 91jRXB1Ks[`dtUSY ~m:Dd'H;Oo)&3b7g̳OKjkkN[}hlp@.}kȇi_ÝiEh z`v4ۢ[FBk5:;jɍ0g+)yq9ۜW1tG3=.7uWS[`/p8 cVŮrrmH%&ޚzkҭ RG*^ru!%?9}s|BYFg:4*1 D:rie勭~nꦮn0m MYQ?lXΞG-goLJ曘+m1ZKCXx[IV1 X`NIwFɶ!!aqIY+$ɢ3+ۺe߾-[,l9s׬Z K3 &l6[V'&tޑHw8q; ,VJ7è?_.8϶lUzIvF ڟɚ()a';?*, Eh*H4>rc]lFWNUЅ2<:]4c.A+Z#޾*refߴfGZ9i]Z;gxǷ`S Z6N6䯇D }fo(C+ X&_Xy&_ne<VRNgcLF:rs"r,'vu(ߙtX)\"~QA'ۤp~=pC`s_3{/~go ƅ1^uWk_ //2/˳ҧ#~:/ V 'pݳ:ǵd;qj_cAU@jpaSf̸R`@@ID9x -q+ X(>>>eX)Wt'~Kj>*.X.L" s4 BD= ,. , y|^8v3 m8!8ˊ3L:'366tԓ/0o=f©z"p'yq4~W'+p8 oqw8 q0z-p+1M|GghfpT,f1cg::M L)8,‡0ق%mwb ]:hD 3tZQƒ h`$D R4)<mZhEl5O@S- PCith8P+PC4VTL2e Iĥ4d&c) o%?(; endstream endobj 10 0 obj << /Type /XObject /Subtype /Form /FormType 1 /PTEX.FileName (/tmp/tex2pdf.-0f0371200e438ae9/f0977deedc8038b55a582d216602d1653f85474f.pdf) /PTEX.PageNumber 1 /PTEX.InfoDict 76 0 R /BBox [0 0 86 20] /Group << /Type /Group /S /Transparency /I true /CS /DeviceRGB >> /Resources << /ExtGState << /a0 << /CA 1 /ca 1 >> /a1 << /CA 0.3 /ca 0.3 >> /s7 77 0 R >>/Shading << /sh6 78 0 R >>/Font << /f-0-0 79 0 R>> >> /Length 288 /Filter /FlateDecode >> stream xRMk0 WXuncfMIa붰Sm=#Bͻ">&hqI#+N1ʵhw葔V};fL2Q:`PݕF:^:o]Sr,"D$ieq|idͱ,Q o}ruiغ>D+sGyڔ&5f$o: *3KOHHV5qn~naå(̟-ܲՉ9 ג/\-Dp endstream endobj 83 0 obj << /Length 86 0 R /Filter /FlateDecode >> stream x]n <ݡ"tP-`R! TKoM06V\$'cY݀22^'-jDŽI% v] Cq ?8Pʽmx{Eq=26w]$ŏh'd:Zw {*10qLUETDnodh03$:Gk4]k+ d,WO|~+} endstream endobj 84 0 obj << /Length 87 0 R /Filter /FlateDecode /Type /XObject /Subtype /Form /FormType 1 /BBox [ 0 0 1 1] /Resources << /ExtGState << /a0 << /ca 1 /CA 1 >> >> /Shading << /sh11 88 0 R >> >> /Group << /Type /Group /S /Transparency /I true /CS /DeviceGray >> >> stream xO4PH/V/04T($L endstream endobj 85 0 obj << /Length 89 0 R /Filter /FlateDecode /Length1 4580 >> stream xV{xՙ;M& $L=[- 54HF,h5,ڀh)-,h!>kKX6"v!ܧs\y{;7ĈI \bѪ_ܻH?H-X -($r؉^Њ#,#r)<|]ղ͋^TdQ'0RQ5 mܿf#k>( ^r"g{7[ :=סa#:k9MF+]a;JU*}M5^y;&r(:L kL4Џ.1v'*eKbɉ\DonE2N۠m6jh-ݺOd4>̃sSi*+F1*aZ .'!ʵxFQ\G|G呮] ܰJr2>U2EA(JΒl|-yniۦ/&HGhzS/n;ZsR*}=*W- g4HQѣEIv[Kfj:s"itXJ0+Xzުީ(N7\3i㚩oRLe0 S K":l8/OT.8WyY-ZNO^`cD={-J&q]UT'Q?Er2ܧNT\e4UihHgڶ={޽C޺}[bQ*;Y5:UdHr"kg;TGrf5S El-{f鱾%eYߥ')z|cY3V ;OZD";j#'fH :T?IWPBV5У suF-Gu:8PZ9D n2:d+L~m#Iy-䕼%1OWoi~)6vj"|2%t>TX&j:K ,VNjV}w,=;6z\NeWݤM(6ת?Q:f$.0'Im)]& ~]:*Mز-SKEQ:Yt&%:WuvYҵx%ke6[YTMj<ʦqJSA|:$D+Q@Ԯ^7(jRMurlnb;ԉ45k Et*g)'`аcT }DyLx(#^VR:?bRTNV9ւZLNЬKc"~ŕVckحƒ9w޴mȲ'r{3o}z>o}*ЗU@Ͷ2+o-`5jc&htZE*]ֶESc]j\Q_j'%݁2J5bkV`iÓ6mcD<<܊Iܐ~ŧ\ᓭ'"88~o%ſ#+sć\QW_,+Ky~E=;xW[ 秉 8? ~Gy?IL%:#8ۑ)Jtd1> /Resources << /ExtGState << /a0 << /CA 1 /ca 1 >> /a1 << /CA 0.3 /ca 0.3 >> /s7 92 0 R >>/Shading << /sh6 93 0 R >>/Font << /f-0-0 94 0 R>> >> /Length 305 /Filter /FlateDecode >> stream xR;O@ Wxl\{ߊ)b@iZHÂďǾGAU'%}~| "V۪Q50* ,=\NYlmI H[g#I7J i`#l鸠Q;6qZb;,hm໳@}> G鿰dV.;NE@ f3*ՉSd*POCiP|fC>qd"ZΙ hぜ9{2rŠGW7qm%'ajk?2鷹 VCq]URѹhL񜶍z(b endstream endobj 98 0 obj << /Length 101 0 R /Filter /FlateDecode >> stream x]n0 w=t|('`(C8eAV}E1H6?),NKl#L:pnA!bjV)8xQ$qΙI4 )8ǰYOg|P O=?8P&{0"Yt۸/ku>Wܒ4~PwAєe 1@ŪKF] =e2G &9Ć#3&udDS=|r$H-xǼ#$ OI}ʊ"/ЮUXB> >> /Shading << /sh11 103 0 R >> >> /Group << /Type /Group /S /Transparency /I true /CS /DeviceGray >> >> stream xO4PH/V/04T($L endstream endobj 100 0 obj << /Length 104 0 R /Filter /FlateDecode /Length1 6132 >> stream xX{XUնs5fo5"f;|`M4`"MR#G("6ksiu E-Ԧq5w)٦fjHqs1`͓Sϼf5|H+\^M!go3I gZrLk|z\0(~)]OZ㐘"W:vD J{kB mՖ Jx1;ri?HeyX55%&H11:381a˫74tt+ ~m4y{T3]?Q>2}xr#!wr6j}zdTnR&MݪZ6lf)j6*`Exf>جQ`vI5Ψ3g:ӵzDZ jH)j#%>mR^S߆$d0upΈ`SUZcL0N5N56YZˬfn1Y!&i {@<4eq^^v I,I` `k- >|}ܧ}TH(OMl4'dCƇL͓-L5JLgEEbXe\i^i)ۊ77Z*ljsemV@=v3 XoDjD#Koxlθh18Ʀuيх 8SG*P7uPCl0~>~ )75&))b,Ѯh<ؤD-dbeZѣg*Nm-I%lxއ E#lj% 0j4[&X+Y};U;Y3rU3`96O}OHշTU}H]53_O!t9t3:ٍ yT=+ sZ`+(jz=T%~*i`Al6޵l!^N\c*{:U8%Zŷ$KaA]6c lϲil.qґhaPN)Tzc7eP9SW VTIb&w:Bi.5՜{1bF~˿enZsք>E,&(T/*ܽ= C-_ ;U2w/] HΒ0IDu屵x͋=q9G>*n,dC4fay}$\y"7ՃBbM&)k]皛y;INY _7J(*!G&3 jg~Pk8JӃ&92$0Gǰjuzb,z'E3)mx1YD=q^$+tflO.'0@U瑎y~ 2 =A~o,ӹR׶ @gGq3ʨ멩:8K|TKbtkˍVU%Ig̉5ݓ-Cd.ӽGR$tΠ[%=ćʴO}d=6Vm{y[O彗yY^DoTúϾzH(/ uus4U3t|r^-T"z_)J'}ud &E_S4tiv RC8lo@NAZ .' 3 ѧʼn3Ǟxߘj:?[#߉<*+u-N'3A/.HB u~wvo))uZb 7FG{TI-w5Ț&ly~ JG_ R [@Č6;l _*m¡z[I⺋ŵĵo.Z=ʶk1ՄkuW,|n(\c[|7K\/+m7]G+ ekDG! 4pPP҉z.//o7o7GX^V|EnEQQŦ¢)}K7Ĝ(ʕOJN /_@2TDt e7mPWJxnwtP$ĸUSKS  ?>NdCqIWrHK4;C.`$ *HCC\b **;Z"0+sLyٿĂE([ÑK]:Ÿ?&\%?_s#D1vs 3PR?w.KY*O&j7ƊW9ot足5 Kvt.ුjNF ͹b$Uq@jwuۼ3n'&q%RE"/`ϲAⰀ,2\&l{NHz{=CCN.vUW~hGp>c+Xy<J:%PBkWhrb®|muij+9[(/=HrBBXLjФ+iB $&l}Jh^]2ެ/Vp\*ݪu\FAR+y&fxNeFG{jaBucB݄3kZ{/6!S{{;A}2Gir/dzfRVY>-MG ]͏2Bg6q㶉̟CW " N8$1aV(V9*wR >&Sh52 DEwABkUSMt ktՂ;Dc58cO`OS?6ӡ7̢J9NvITuR_-mN//7G 6{ڪ{5Wrlmok_ +xY2_,2 ? ~.|͉9?'~L?^gόgQQ8oQ8U?otc$?-1OXn|7xTR<<ƃKY<,} g{r spWb_'_oÝ_CvV ܶƷ%V~/-6[x+spS7be/[K˭^Xl|]XfmX0/$;%/zyIV*^,~̋( IR^\XLR}/YŸd >.g.Ȇ -  6߆>)_Ή'VSIYK1j )0G >p>,p l >J)'ΓS1݅'u8ql(p p / L4c(|l1 (r!>/ Sixw;p'=vడV>aǡV"0Ed'܆ɃAIf>H$3D+& 0ߌy?OsWOŞu/bww׌qc1pF;ГQmI"s0Šn[`xb(5BvT`z)8]:hCJXTT=m`nhٖ`4 4)hhiz'rPA,ԋ¥\z3$fM FiQ# endstream endobj 111 0 obj << /Length 2123 /Filter /FlateDecode >> stream xڽXKsWlv ޾I#G[!SIN 1ͯOt䒲$3' z x? |^x^!TƉ(KL(+W o?O.GrYn?1W8LQ! ГA zuYr% 3TYjk]'av4+;޾J֦l-5I.0RP|+]"_fo՛AU=j=tFÞ4j } 3- 36ieHz S0D$Yӝ{M[(o1.ik"cPDd8ꊚ8+|w-* e.Xu(B\`GA 46eRZP8dx0q>zGWo~$kne멽m%е} ^e[ߩ~lZu[mYpꬥ"qJg޷ns&;8HbثA*M;Xh:c5MCkLn.^Wirǽ)oyG]`$OD3pxd[V^39 n/yo]`Ide:]S!vY=(]K~$mE" :cZ-[E5;ˆfgΡS F58MBH"< /IC y S_z)Tj(|&9x7!h4"\=>.DKE;~o\`;89d^#3̑pL m .h FD)W",B?r0i2~}fTy>nۡf_=yLx,1?bPF;bbh@eca! 1i]IrpS~PxWՌ@;<a=_F/ܓy.4[r̅[?ǭ { t JL1_Wk݌+hj8+b's,2dVkâRGS?#պ[NCbW٪靲eY`mCd"Xd= #|LEFHfHHH:_3x׼6x$,y#&RD'C!8ۑ_+8 l.Rulk. F~Ys];Ǣ(@aKj8_Q@(nlSs"GAN\_D_Sn BaF:H/.gޘ_){G جSPCzYY?|N55 G[P-0d7|+.r4b]fmaYT7e^h߫[8ƚC K'C]Y endstream endobj 124 0 obj << /Length 2239 /Filter /FlateDecode >> stream xڕXK6WʢO߲xθ͹Ϗ~D\Kƿ(F/yL䯆(^V=-juוݓ?W3’97Ӱ׍X塾 ̊'+" ToWνȦ*$LyA6RZ6,EoځU/zMˊV;}ѯjxwENRH/҈<$醴X"B$^hly-Nx2ъraI^"mِ*F+ToM't"ji0>d+j-xB-ޛE{f=8EVlTغ tRҎ#Kn8`6*O&auwTPmqO@ań2@Ym-GOa~y<, QY<0 &}5?ZUV EHMLRyF!N<̫\T Te-@2Xy܍g^n/P@Bl.*U^}.z:qdraZ+i0!1 $a ltDgȦG 9v@ ެVU'ȍ^9,4" 26Ypނf %E]3<.j@Ǖ9 xo}"eA.oSX6IBb!}B&UVxL2NeW$xo7۝L*Κ"@L1K#TN(;8qg4%ȃOOE9s2 N7Pdž[WP?*JD'6v1j}xi 1 ʺ״L@GԽ'@=hiОS_G!0D&<}ׂe*_6%5}|v0ie;ٵ:@3kᤲ} =}V|/+ΥmBIٺ0 mb`ƿ&cm.huLLf3 7#tWF_Mz nbUE 5BWqe[%fc.xmT>UldGۚQ1ZIs(mbF| t@(u0McalRϱyG^h~. ̜2 "@bG#TGue'+w^LHڶPB1hktj~O9>˺z(.Aa|w->Kwjz):KA,"st]dޞ|qq~Whk v :,Hs6jriEbs4SzS'=CO:[4LE s_LV&C> stream xZis8_oԔITv|ĎgٔL>2cs,*Gfiɓu  iB0S)$LYpLK" ™D0!4J̈́ J:L[&49& e@pB1Ù2#PHt,qTjfK㊥{9b~~bǽjuvݪlm`/=ʛjR0-"۩ S ϝdL[,meQ?LBNf0&MTSo: =dE]1pǓ7?il>y1h>SXUY[T^ X|yvZgI ?h/R jS2' ]@ثFYQRs}hⶭ'yqRH)ϫCIoхҝ!K=i/3{;ge!iwϳ;f7p^q/ou1nH8zrP,}WeSzh8m6%AΟD4::Ho,!ihYO?b$hQ7e[s|o.-mdD=TQI"J=B*tҋ{7&7 B#M+64k9 4˵iAu]m\KWo(ۧp?+l0;kN ]"h,>la1.φ9f@fK"E^'@"JLk/b-T sM5_9t3#nkh<&B\A1Uu+GJR8跐%,ݦa}ΆM.-߽)Ɉ(ͯץ$#s@.Ϲeδ&=!+^ӌ䒘|&5u{!Y[jN}f?9EnWBQ]>)Ę9l vA]m"=M/k YŇn%-;-y#o2-wmxHVk)3+,e}gQ]+Y-B:Y-񣳔CqaiѴuq2i<(\ ޻-d` 2->ddXӝH"),)}ŕFM[Ϧ*7_)%U5KJ$`.&ᖕӷ$U: R]Dt!IJvUB;^[J mT!!zCטQ} 1;c ެ ̼N`b9|3S̼W>|^7L8xus{xCȿ˓wr)uaqNē J½ÙK,—; 'ޯ# 6 3-OrZZ#UfyLE5 D#`PYz@:Mu&ځnN7F(&,"bǁ%2*]Ga>&m>q2*\guA[0?toF|vIl8JӁ"[D:{, n:q^CoӦ/E6LM2C LL!y,Ra>+ 79ܐEyUGaVs0]u p% endstream endobj 145 0 obj << /Length 2232 /Filter /FlateDecode >> stream xڕYYs6~_PUM9ǤJacԒxӍnP$GT=y˻{w^j/ Xݣ'0`-'(HԋuH{wO~X,H b)MȾu\">*#}\b +iy|5]͘|YhUY} [a$ [}H?A@BmL'"W+7+ϯ󞨲Kw,lՐtIT+?G6_p$jXߧ zKYyw,߆mf4d4?/PX#1r1&ufnZ ؔY;E x e>_NYeN %YTj/AL?+{f\UҾNֻ֢ ֦5M2y[5QLOND „h´S9 {횚q͈Pū ux{{C70/`x.(1Vhbm-LfMU)TKxA;`|SߴW`MltA)H|ds3$<@P.Eԧe*"6&+*CFt&rR{ڹ`Uڰq6P/1I^ʎ3vc0DUיS"|Ȋ%JQ^mXԮzSbnxڟfs Rv]r?ʲ Jb?4 VR)Y ~5O0 |zY@ * Y!<DB:o&l~2fJg Ivl-fAjtp+CQ.8dP%<gJ!/!y*|S+׼@4G7䁼T?y2=[b,ÖAc5CIl{LD gc5ٚ-8 P8( q? }S^r h‚oAk[3~+$貦!VB$Ğ'60-v}'͖:X9+sG!3Ot-E>l)~1=mk1lDDDiFS7\p z2~S=Pbd8Mm^.s">Q `]ɢ+" Mu#fXAYM9eBh* ҝ ]8uQln|8}(phr0fY|uI_\!%]mZ1L/L7c nOoސq pPڗ mT*!uBim:׽@p&U[>M;]g;(Li%wb-SWFJ3:K=(a ]x&4\[V+U 3 ҿȐ>;k)dZgsv NֹʆzPdܲb)#7Sa4_kb:t>){s\JkenS+Jgbgr>)NQBisMzKxիh 0KP@50iЕ/4;/ "\Y~ҋm$q=V6^B/D(^ ߊYȹik V-K ;6hl? D.)k)butL*R'N /yy]\s|`q)jή_%GLOb8E %8zb:8%H0V6890Cbg#| >m侘c.Y s2[vXh @(15fNxRSoda6vUA;۠78P']ڮ=D[\PSR!%oU"}xygiI'웼+Sܟ[hhq]-ݾIPƬ4~Ʌ+v0I ,H29(/[zf),ŎD+:Cpվny|e6aUnw,O2Q6#IxST;<-'7%/DڍC2apnE8 Uh7%*boR(kvɎy endstream endobj 161 0 obj << /Length 2552 /Filter /FlateDecode >> stream xڥYYoH~ϯ@f_< l=&{L#cJԒ*6SR}ꪯnUM}s^U*HEU(•\IE%Biݭ~>_uBRiT6~$訣)w,Z[>챔i^<=Wk[h6mU*/x.^xLr LcJHZX7aAQ%4<4ӕAq#]2'|粪tlw({ /qZXZnsl`N nbC ~\*I~{F5Rhx-+)B5;_DthXjk*=_8(uky*su<2XNj+TjSqAk56 ˬDhOd MZr-l_MG Pbc\3]y98F%BbAе[TUR?$s*_.L+u)`*wKDu|ͣ8,LPd.yU^.:32Om<;3HHG\`-i'h:43>4eБzܤ^R?C r ڮn > +p#{Z1Dk@t )4֞K97NnS4ďebs8iXvjBTHė/XxL[hi?e K[HiDB$^>x%{5=4;_' pm0-3 &>Y4ǓǤ}Ag|{m4$- N[N#« FchN+?B<4y(Qb^h Þ'¸ M-@qeSxhHLTiꙌOe^oH2v"CD Il(Tw>hk 81NgxiHXe2~!v&[SK e%o#9'51L2KL\6U&Үx;(`͂\4ljpT 7'IWHRC<#: %#J gN\E `कP%>lUppv$z:C7c%bL|*L#'PHvd cʔ1&2V+WX9 fPE;#cCJ&1cD3؁4āI smɋʞ -_ FMT}q{ݚWKz Գp(OĞC+p U6@,\{>^ 3 -1/CYoח Z^4&Pf$s~P=Gri~>_'ՇAhop ]I/ Ei<{>e ))x |@K~_Df:H&`;Kw=<~}7vm^PK;{*p1axDglXhUV>etz)Z"E }:H8aaӕOe翹JXV9,ۮ)?I緔]Zӿl̆;J*Zi_,;b:;<^_x@n"upVqGCsA.^oաɿbC3yD A p> stream xڵXݏ8_(}w؏b'Ţ] $nY匒sT*tEpu}QNt{Qo]iw(JJ"ѾA4Xz|y^&AE*-2,cB<3a gS!  wc+;ttSu0B3j#vmgw>(?聥ۂ%ug.B5s}i$\uI.@c-1wS9T(,3X-ٙH2e.\qwl-ꒆwW國XK wzW!^(WHi]4G{[5+v G.؜ę/"v.a?xUY&bN7O,xh"th1 \"*d2Err.8@T };3DmΠH\!ʗ. ʠb?))ai+ہC(`0 umudju.E!|5;4+y O8\.抄{/~̪X\h+Pi^q`+HLTŏJ=a$:IEx S)1i; S41j>Tr};p=Ob9=ր8!lkxWN̗w" SXS'"?.` 39P ~gbk?mO @1\>[}\ZyR`af(:tIJ,a)a;mQG]Ac3].q*j̭{ks 6mrJ`fgv w*@!% {a5N*ϟA&JIhF:LESEGCާ1N ځ7lQ-O-+_Ff+Gǂ $Qé 4;*?ͭ8S] (.4E)#VǞ79O8,  &T]D/O;)RЁt)63?*TF5, OpA !٤3*EN? .8./#p{.g7jBڳXIEs%qp\ b$3ƶmmw]v{ hU ksށ.B;$K]wg8TVg)5-)W,`N@XZ^pܷՖc4v0=3͑"XY8TkAH bSN;0Ƶ8g4##Z5lDz_{Щ;cce''o?AcwG'QԥwYx7nOhơ_譝:<-ftp~=Gj/^=8^`gd]&K2ϱ:|*aYuK/7;v4V\N}}C ]cӖDk~?fֶBKoZ G^td+ endstream endobj 185 0 obj << /Length 1299 /Filter /FlateDecode >> stream xYO6_@n^N71n/4iqf;tN (TǗqmy~Ͷi t`']áz/c<3faCv\c7ՇY^$XJZ48̊lCi[\(:ӸYKMv>5V]2 $B)1xXb_-5?˜)_p1e3neGdNåF3DHsZI֣tQ@n+SS<)$)tyVp׷?!5v]KX-K[O]`#; lgom̽q` |}jͷݰ<; o`H++g~mw"N2Oٮ)b!YoyefH߲$tDY|eGw謟ثS$nꥯoofSB`ea^~˵wpF?-F!wbժ\߈tzgBJ!#Rh$Ek~. endstream endobj 191 0 obj << /Length 1288 /Filter /FlateDecode >> stream xY[o6~ϯ򲴨usB EΛs"`,"*I% ҡ*r'J}-rn9#Zs˵>nw}oC?&3 Il}էVw[ϳ }*=5U;Z[7;jbh]}E9wM8S2#XrSFP #fP_$T60W0 #NqS\SRKx* Mt P0vmH(N؜PGe;;rޙN,8Unj/Qi8v)̺e~~aLn&ws hcMCh.i4>:FoHܙzEI:T:] % O;pNR@f  ٬y-)g7*`DgoVi+ժQ3Ęû J3/w\ "5)j:KEHGge7Fy+}ླOI6k=pzsh[{C^*pws6@B߱LOj,UD}^>\8ZҴ԰}U:]Hd%m*!b bR6 '+b~^T%.*K^kz+3Dz8&;|NC8>qKJ/PKbN0AS)6tQ'iœbVZx~`~;3͸c-i(UXOՁYu*!)vIu qإ kf9)PXt<7pRLHa Ը6q)߸/LE8(Mm}lq]n=v Hcć[38eD3>vW?ԀIШ8ytW)K^"Bqɜ17d%ChOϼ}춁r|'X4ǭz Gu*[?ng<ٖ4\1XMl,؏G'C3 zarՔ՜LfVK4FX |Ɩfƒk͡ᪧ~CdrpԶc4S ¬SbK|ۍ@#>7lݎ;ᓚ݋t!Lni t!uAa4CHΖk[\cw!HJ"^PlsmHG+Ƅx Zޔ$w yzk8; NQS@d6Sk+ jmcs/~_'IK+,]*Vҷ{^!gu?dG endstream endobj 195 0 obj << /Length 1478 /Filter /FlateDecode >> stream xY[o6~ϯhQ7KFQ6C;E@KE&=IC-R{DN\LDtzi_є4)Zu-cJ՚{Q%%զ l=6lfz N\&4/ٜ%ՄWr&.˃iip%_ׂL,N<_K1 Z?VdŠ̫3;szMhn)2b\5|o~T9:g\majS+Fp hnI: ]b-+mL%eY)M +gGZHx+H[@PM)1VJrCY1^OJC>-DJyXƂG>/b)3MFυ6{O|E'` NMNW'jСhTh}x]g͹/KŚPVBx9֖t CY9<^dQIFjqX#f΋dj&9$yY?sqRkkp.|7Kv_5"aj;~Xă; uҗ( 6! >F~k"KV/Q4:nQb ++~VJw)t1? frJd;V:ygOQ)͍G9M Q}EA:Pw6B]W"ZذGMCi1:&vJT5Pq0X֧xX3Hb|b(L=7-e9){&?KhBKQ`I.6ix:IPureVOn!țsOTu”mkgEpP 3n v'VV._Pun*BaG&{ȕ]~iS{$?']qcߥ^ |V:W 8iO=`@}lR/6`1㽣LG=1|oovBbwoBJ/GE-t8گ -/(f?xɍu6P}*x\AKսQD?yo%㮹7uQitfعEq$Ӊca {۴kaS ?ĕLE} ƯC'4֬߅>,-aH%0c6vCBv'> stream xQo0O-*viRS[M-o]204UߑgHKBߝ/΁"B3n6C8(-:|Tm! #ʛXHp3NTN0Uo;ߖ 4 zH X0[$tS̽Fv*U i,U=zٍlH}K=Z5rz+B#Sun 1w2PVd猼LW-cPwbvʒN cuavS?*u2)gF&G|29_XOȦj$ f[1_blsprps!$,Wrzt{FmK1TשF|6nrY@ d̙6lw=s-yeUԠq>ӇZԱ|SQeI>>jCTK~@ݜa5ɮ]' F=asw`_rڸj+]%cIus6ާm ?st&<~r&?`C 9ѢkӢ,Ys5*YD(g*r:]WLVL2~vDɅ{kᕼul`c(~_]G9ȋ(mp´Wtb%{{~UwR'\츬X.^k`?p\_]R9v \}ždOP 3lW iP_m> stream xZr6}Wh3wqIR:}IHbM*Zwy)RTbٔiglI`w]x0pFm\;yz2<ڃl@ ل lA԰`hТqLqY\ ?i(Ǫ%8Q ^|bK\OMKhqHtjM.ˑ\Ǿ[)֢ԂMX'_1. a/,V[Ƌ&5#b__[a `\0oGAvσsf,|oAZR)ObCbȴ`H 䑞\L)^O<^ɣ' <憅jȕH8F%="nـt7g)` 01?Po0I E`>\'Do uEM&qOW\(j 8ٰg"b:W T, iVך|bMq2] 4rxۘRRc~4 zU5Ux0q ɱǓ1~ĤK8\Dq}*X,W01=*vDB 4(jU"exiO ߲|w5ߟ] SQ5zڦ\{ӎ90ݷ̿[,aNv&WCb€L[%daqyc?PdcygQe+Rh3:8]Jɢs>cidu_ǘ1;Y.(,Z*e":6ɣkak-v7{q:"|޷+=/1ev͸_f-|j ޛ C s$F˫\'jʸNU|$۩/_Izd]DIP.*'L _Ҧ _^@!vJI&B uU(UjWRSݭfɢb*ȺżlGmFQUU]f͊mwuJv'|Sμ&_/ ,p |q> Y\z Jbb =1~IhF#1'خZ gW <y]/qM'ڵv8ioaϡ,~`ddG (/Wd)FG Y0ޤhH (X'-־ڕtFzaJ;oos}tQΙU:O.F\@ru itK ZI"r3Mrh>dȜ)L(}{ٶ vlFD/w*Ipk1[s|ϥDU r+;:Mm4JƣzFk%b>FߖQJ 傑nxv6(NU2jIFZPK\6Ge=^8RK7މPsL!ĎLn{Du ȇ 4tdpVv]L6? y9q ]E8AVs BWa;n+o{kshB<6R!7W|YPnX!Bz ]x x><.0d9پ\='Is_" endstream endobj 208 0 obj << /Length 1464 /Filter /FlateDecode >> stream xYmo6_!t*,]{iX+юID:i:HeI$C:y=;yqۧf%ɝcɯ/N~X,ǹ{y$r4B$ s],f8ӕy Jj Q&uJӾm^AqN^6JkkށƼcd@ĝBEMA`Fh%,SyҏQ1"DIy zS3ޣwv?H> } DKaK25Ъ~Vc=D!q95`d 8Œ=~GY$uob9`$hK}ݭi[}l_W'h[՞=3͚~=Ԧ: -q_mxga۪c7W>{X;{)R\2!UJ@76Qe/<],{-:xhˡrqHzi9ANl`) uԣGuء P-on1P~1T&A7 w)("LƵң@:Qu[.fDmj6ă.{i`9և BNa<"ʦpU,Hñ/I;n[Ha@Sy&QlS[+SHaho𺼭d3{w7PТoIaoUCNtC`7m}ٯ[6up U}w[0hC>/pnn3yDbP`4_|  endstream endobj 212 0 obj << /Length 2107 /Filter /FlateDecode >> stream xYmo~BHF \k|+zpvIaY+m%>wCjWu@X噙uQ(eA9\ZMˠdeƳrB<+,ipY_SZml?@u͝64yF2F74t-DY˶RՉ-xۺxҵvܲ/:yVDy2u .WUOX?VG3 (^좈w$O{pFw/L!XVdp [ca}/ú$ۛ|wTe،qq~J#<*ӹb"}8ZՅ655J^АWh+4 n=qnO'vܞ/Ĺ{׿CjpQ 䂕qoᅹu]-Z/ {c_;[$bvQ<" 1#X܂? v\yXYX 10Ǝ)9\gPnW[~DLHC C#u;,`2d0qrި>j4ȬVc-* 4 g">=݉)uQfqІ}5QOxޯRB7$D(>ಥ%`*hŀ/] x>|SfYnw?`B+VnHk-/ A(ew4OVֹ+RUKf؂lX]THO(NT|$yq g995X :%9ʻra9MٓGY݆!>b]jF+rƋ'e"" 2" R៻f쥅 }8Hť6V[J55̊#8Ou%" ˰Yš6q{g#O@!sNo1)(VDUz(Ҙ^_Fe"?@Qfh6=nʪs+,y'%B[WAجSҪW Oiizs# z yA349ؠş"{/))–L]BXH!%4J&kZnC!G;ZCX UHIsf~I W:Sت5idn'iRh|5Mí& 8)k/J(ګƾd;vC'KDqNS ܴխJP[\\Ciw2H]ˮHz0`xI{ѻ5f7|^Xmba r|t6i >Y,qijK6[5.ZD&> ZR]9g:#,%B=Cxb&oFS*1CGNE nmbԼ}y@ X6տN endstream endobj 219 0 obj << /Length 1684 /Filter /FlateDecode >> stream xY[o6~ϯ@LK>XdhנSlV'KD' -))1y+3uÃNBz!! O2 'g7,FHE}c>}6U4ObrAH/BhFgJ~yv D,9% @`̔ZǃDl>j6(4-(G!;Hh'jDs-Ç;dQ#}g87>cf *ݙ8K{4pUG}WQbGTTbYijvFSd@M)M<^,.#((b Gk vBj]Z2aX8CԌrDq:5$#+jaf7y6_/"XdG1A X[ Ԃ՘U,-p18<^)sd);۵}|x * <5FQҠؑ?t97},Z9C\l-΢Ϋܛ,I2T|&5O8+<{\@>X -4( iC]3fY[9(X΢U2%^ 24R+SlqDGhX4(ezyPH _La2ұJ1$[8K 4m//^ܣe2\wm:}eJ\xFjˑ]F7[G[mP@Ϣ/5d>6}ߕ'vY"s[^@*,ېuS܍ Y͵F6k53-] qQ & ?Vݹ+J2TXafwɇdJ\'1w只 s.ReKBZE6#(vv*nU]y7dE.16ldd+,;${ym.!ߎ?~LFiS,::<a5:> stream xڵێ6=_a`"cV/ôtH bX2CR5'Xs:Ob$q< C٬hyӳWϾ{)YF2j7T)I_pw/Y2:$Kb7}5zWuu۽E|\N8d¡rͻn v?,~]DDt@ Hi1AZDLmt7%0I$7txekTssQnun;S|~sbnEi.bTiC[}-wWuȻ%Se±%? ?U%%`W-!,\TrMqW76,RE! 舭@{j`ECWyWP̓Gm Vh!n.dWE# 7B lMb BpB%Б _ 9x}{?JbQNgD*>[±|~Ի/ߺZ%;w˸2bVF<?nQSx~2k7HN:ky\~}ۂhg'ŦzW@r2!S(cRK~_l=n?zJO]Ɛ$Q:./Jc\DJ"~3ۉVE?$҅qX29F'$~FXL%IStwM3B|0B.WCgRAR`LW0Z|tܹ}&{ұ+_g%Բ׍a(1Kc3i̔cE n>#;`+4RypJAyiܾ2DPUSn2$ Rh'MOưf\A+_V'D\sw_޹DHaچBx%bj[xH@ z2qq'AÈtYi2!9j^wsq{Ӈmo*P^J׎`Ne$CMf~00uWb:<5I8C?~2E ) /ņo8~ 740fi˷W(|"Mq%kp)MHy.wv>fb; Z=*X{ϔDvTWa!~ wM}Jܾ @ܝvdvӹ$k;ZMg ?tSlj&RcfЕP(pƥҞO1B3SI<*lT$$yE{+ tTWL[YWN_(2?6}Sts;]XyXBf,'BtbyzXѐMEY"xRA49 |{D)<Ɣe#"A Ve,4 5h^$MXAM6' V&vr6ea?j_pg1(Aq>'o\GE9HTJixu5 8E+6?^K# Cd 'R(c +?kz Q?18iXu/vP@܈6$ BIX6TX WO _$y a8Ml1l>y)Цٖ'H2Xvnx4v Å: MEgl endstream endobj 233 0 obj << /Length 2240 /Filter /FlateDecode >> stream xڽY[o8~ϯ $xӥ@2vA;[$vPm:V+K(;ͿCҖdNfВx9WN>."zw-gAF"$NX&q̓?6oU;4?w_DDD>vy% _,a_qaox ^8!YSP_v%Ieۮ/|.+\4Oަ;_ф8С$ ]/Onjϰ2=#ÞtDd wK5✇VT'W, 806j&4,n!wFzuyÞ/e:ÈAuaM½u3SScjDd)̌0xG\Zj$:_#$Ekf$." ۥ:u`$נ7jM\i?%jM'>#"BY孱z5''ބ] XBҤ` BO׹3)'@f q'l̬&ƳI|ֳ`T@ίqj;Z蟖gpQg}igQ2#u,H<BO+|t]qĶD{7e*;G{Ҙ3]i茏;rDҌ6yM'?!) A+21SeRj;3RYeU&, m^a,sn?Qz]WLH0Nj%2Ysҝ6Ν6gSV0JuT xmپ4kvJv1ŭ mV<3&-5đvDzҰD]Q4\(IQiM>k9pbce` ev;1`bra⌻3<7ydZ3!+<1szn ZnZ C1;d@. KyxѴ,|SFPMD>O u!ƻ5č*s-Xb E8ro[ˁx&_'8PId/Nk#gp-J;mȲR읠v`w[A/[jUKRmj8CtBc?AEr4@B\E)< g+OYs\8TKx{w&ᧈBAib"sݿ]hLp&:B;sxBۢwn@5h\7 p@!{CdSsatg! v:O"Q)TԍȰŷK;3|ჺRHoK!(P,\F~C?rsd;,_"$hOh؄Ur_#P]TёMQc\YFU"=Frggh7Hϗ`Oo'zc^h57i٥<͟_X4Xy,Ee "}zIr6Ȑ{[/5Yfe hAp0z+SRqcLtP}e{7hڪn㐆pqiV;)ئ֥lvlA % ԝ24oj[Ǫ#K3·`o OF 0flHgl$Xҕh>xea$|Vז< 4Z|@fi}6ja[.?VUzӸKsNCQqឦ*G$:4RZIv~trćFS=tvf"f{U;N:>kGo81wA[~?Tz553] {cӺ*_58)UESr_%⬇1fGh곥(% w#ʜqF(ccIB"'\ b#-"|78^\*0yDf֪du R2UͶY ?8^arirY*mOeږv5J+? 6PfF\w X1M_^(e92 ~V7PDW<#)ޚƽIo. #) endstream endobj 239 0 obj << /Length 2099 /Filter /FlateDecode >> stream xZmo6_ˡ8H(RR-Rln! ŦcʒO;䐲ȯ1~MIhgt<<7$pnfe"rϸs3unRwtwÙGYNϜKs;\`R.RAJVxV(/i=sT+U=??CO"oAQM5YDVX_-jͦ,:Z(d{ZHZ::hʋ$&^W}I915A@^+i5V2IR˩u6o IQOXsk0weJĈ5oJLXT~d9Mv 4HJfiuޯjb@Bl)݁˃NY\ ylG2ќ y4 }ľ! $^x<_$nxIÐD=\Y\l6^Y)L*?2VG .w:"4>bsG6vH.v:);y,ҩM gA;F9(i)'H"uLT(^B%q,''x5pd0Ir#~qz&E>Umu&Љkg;}? '!\i^ZWI?GBF#nS,sKPzӁ)O *~M]ɐ{3o |`4o8s)ޟ6Q5] 䬖eꪇǠsPι[p):4<"" Cs=cOy25Ao7YH"W5@Ђoө ~ՠXeSVsS}х Lac'YM4 q~; 7f4< 9%ۂw {ǶK ]φ䑐aR G+XwTaWfDb@cL-ЙЬ3ѤhyR@۩Xs+&60nM2:bɽw1~[f ņjM2Fnf:[<7Oh}PnCd4$X(Mrjmŗu׿1wkIx_~5ۈ緢 7} S1{ؔدX5֯F<ʲB24rgKɓ-fg!3\=&,DWXs}0}D q6kQY#tԚua܆:Sݿ7O ۃ6?̋?h4ft^Ȱ$vY-=jY6E`B.$!oAýɨ4`6m1.΅$9N2xUW“S>:r-ee+w KԷitVWfiUiJm)8תTwqhܱz&/ca] 44Ci\HnPˀ(0HΤw7g+J endstream endobj 243 0 obj << /Length 2077 /Filter /FlateDecode >> stream xZYoF~PSiýxCA ,) Z\YlhR%)'=(kIa;Z0nޝziSyG8}r3RJieE4K̙!Diwm{N\OU^Q4c6OrC}wH,B"w! (P>ܱ\=TI~=ц\V{Atz8ZLR#N]~Q' qn>U wϙ!8gb"C\N=͡zfH/*Q'n:ky?mu@aq4 ɘwu 7OBZ?}ML?]A ^cGɩsS[|3τaN ~C p&15 >F<4ܜ`:>k`'!1psW e-2u HDTUTj^䕸GC] hz 6-`K I5Y 3h_&rC5TZe9}8EuHDM* 3:m6YSU L,ΓLΞZy ( '[VsUy+[MD&j*-HFUMB0"dnlatM RP.*9:XmAL\2c:6iqx{eۍM6ZLd.6\KaqFPYV&;}tt]:p\z#.0`p,`Sy|WY\Z\y dY}+G/ոS4l`ȓI@0ՒWzҜHoUlVb}m9xr{.jIwBcƃi䪲ts`যZdnTdZ 10gqKm#k$Pv>S>et zFԳ"LVZʔ-:=@C.i⛌DхawC7Λ(!U=h)63_> stream xYKsFWf(YgMQ[{],$d!@@'yHQs!ӏ&G~wut@"(H,PDHQ&M..\-ӻE6Y٪ijɫ=خە#,W #I |3$ B묹&[z# F+?[.ٯ۬i[B}`+[|K$u@m^lEym[)WmVU*l meH)dSY~^i;'A|O0ͨ,/GN1z>VM=}s)vRNp7>Zg(A'-$aQn_X *wM/`>LЯ`$E4Nl-".:o?m@QⰒ>"׭ʹol3[CGӞ=@1;r3G[?;όE%2;+n&coޗ.hӲmlǙȤD,.,v[Oq?ˋ\q*M{]1`#]{L2;QզCBp"f:0ͳEvulݚQ^Zmq:yj$1'a\݁MH1M\oU-K(7]iovT/Ju4ʂyiA4r[Y߭+gUW60J | V:)b.߬f*r#\ 4/ƘVju;6UD,lnN'/$`MH2f^o_9{8m{)+=Tx{챓oFvW[ڃ2osE pyDbyi_`@c~+2%Lzn=8߼5-J 'zW :Ox+Ea>j(A?j?U͔Bgyh[63留Jvt?j3Yu5:L`$3W׳ їt)-٦~i FA"$>Y%}\a U/ @%b%FT1 TaUI骗^ms}0en8}h߽ͭm$|՘"XZ 6Y l:Dkk{e )S U~]^,uJji{ ۀCHĖnsPM(MT;Zs1GD2(gjãׄB?߅zlvu%ZD,7FmnV䢎u*)zDb˺1 yݚa8nyH8'ˁMB *冚WڴV]؁=qjH@r۶I{zw_dh]M4~6 .<%рBgˏ `TuZ5 YU PYe*,+5JImɆ\={,aB{Jq EX:|3д#zID9J"nx# 4-]">o湺>4Y\(y9NHkZBjk{Q xaPt b-aj5[kjZ` ., |[ ,~I܂Quc{a",3W](#UWgÄG0|xu#nLlQ؎G٢6xp^J}^nߧ AH?{vI(vl|cې=fxҽDsۍt}-(`Do5`Sl(t͵9h5 VЋ|diϻ )!Vl)*!# {WG2I& endstream endobj 254 0 obj << /Length 2343 /Filter /FlateDecode >> stream xZmo6_hq8-eDRKօ _致X(m J[8r($k7w|ERh3hĞta.^_21 H2wrw?fp˞ x?qGuu?qXY>חu'73Ol'¥\$1Nf ڟՔZE>e2~FU=-0&,:VY˲ڮw())JyT$ñp:-㈾wp0 ;y&t*勚[S_Xy +29)oVIlڮ>L@ahZZ)hW 33 &ԣc,v(PxTm'[8\9Yr2Kl] k{F)*4 T3եIk1Ԇ _/SE>3mNI 䐧VCq*6q@ROYw^ZKR \"sUQ-QVy kF];7>MJ8<{e<]S8 3l< jZDq^7#AldF=p#a4,EAX6Q#vLfL?pQ*kT/OT,es̞߫g=,jptઐm<@<#QbiuLA\%ۄ; ~Mkht0@c'$Gad~.v f͒AgLdyL-5:ɿ5,m(g"koϠB6R\#7ry7`Nu ei]BNY+d[ۊTW7ڜf&bfDrpHpU.$qxU,}wYj(uߜ[%b(@J[51$:iJ5iRΪ;}dz:K`F˾vy|Y>{d3odu㏰ p6Ymq`qj$|=B0U:r&UwC6$"X^1Ԧ.ң >U%eL/JЪan3Z.3.omD;vhy^Nۨ̽6'1dv=ܥS_טT'g X%`EA. \[-" F!oT8pl%Ydrg#׭$N1AQ?_tKjSUA>ZP0nLIΣp`ov¨D |}Y"bݏʫf-g˃`T]Uj{.f3`.\,r;=ѪSe2e`BR?򬬗TOɠ,sh򮰮(Gם^CD o 4=؀em X:5#P}@hDQ^%l02"V5yYc֭r jY^1 [;RR.Ib%X 'XF\mQFנn)Q/I턺pc0jbY>|ݻ9wa[{E ("O ])kQv=mW2-nrRΓ6$;_-\GnGStPޚuۼSN|0 *@_ɎxDÒË 9} 4U~šHug-{Dpd쨚l mp:~, endstream endobj 138 0 obj << /Type /ObjStm /N 100 /First 884 /Length 1676 /Filter /FlateDecode >> stream xYn7}WKP.90RHRmYjmɐd4YۍZj郼\!9sk8L\ /}4Dz %1_HLҵW DR? y LQ/ f,OAF^WRgJq9Bz&0%fΐKX*ِx'oGs+uZ,'wqE% Yܦʍ}`*Hrgʮ>U:J%XTuC(^%:&6L\xiOo X_|8|Ak%6\ FlƷR|˴&|gzqs5u9~׺o迡6zzpѣiΥ_rsq7mlZ5K_4XxjnKiH5T;[N' & }UI>}u޿%er%Gߪ&p> stream xZ[o6~_mѭY()@"lH2؇t(6㨑%W3?I&#݇dJ<\x4d9'?_oIF~BJ',z1* .DV7? '> @"3ନ~-8C`<*/_Gm@O?JkBzZbВ׷,W?;&3E(9f$4fc˩uS-x[hhn4&xYuM}4x[u:gWr}?6?sSΐ¼,mD#,^õ|cn8s,4" ,z0ZLѫBxC3B59T920r\5 ui0'>EIbӃüso[5ph!NPr`PY? " ~xI89အ Ď1.vw6hSjRcڤuq5UhHY#eXN@L֯;]r"]S;;|C{@tXpB:AY4n PѸx,Ov5ۭWhrM<}S1I!?L7.sW}=*M B ?2+Aů M'8> F,|Q C8$L"_;&Rs@A=UV,s>-t Wz惽Azs^vd3OIc[MC85nV{znZ+<O7}iVXP4 w9Sgךͺ* u^pQOh-6/u{.e!&UUYםjcIm+ Aպ7Z0dPZZnk7\nD**ut=Ĝ. [c⣝r*]jV+G Y6h.W>"ec(kg+VLewyuʿbZƕqg :aL;cSSĚN*})f.k&ϟ\.AAbt0Rk W+UDz<أdzM5SSaAcLQdoMćCΊtXph$>,,G7hLύOd}u@GH@#@ Pe( Y;zy30B~MbGw$|JSHn@Է m9_#Dt҃j㊧ }B]I =E#IKn+|;y],L:}du'QL25x=n>#1qȅ ĤiVY)f#y&-%%ZHִ9$lY@X}ͫ3MJ N\*A*3ȲłWQW~l[4K2jCCK4[P}bX6~˟Zݴ]}_ 'T 1rJ   f:q4 hGA?PЄePgCFF([QP$= Q͉Erīk4,8) # ^? endstream endobj 270 0 obj << /Length 2232 /Filter /FlateDecode >> stream xڵYKs8WtU xf2d|ت͖`c&_ )1c%F?~0\VW!;H*W7w1dBfwY?%Ymn~zGŐ )PWQO$tԮKTP[]eJ/ kTmnyWy ;<4HiZe{x͇nk&i+$JB%IN0xA+ zmZh {E{ǕykirqAu^f{c^̇ɔ9[Z tL 6m5:F֭ҬEWJyg𰷒T5~Ups$JRh `Zy5L]%xfQ ;Ե. m,ӏ-XBnƒ yxM]Jѱ(̆у"m߸=«jͫ==)|c1% wNsoUg2LT_R"DYNc.$'J(`~sYD9[KO)2N51)Ҽt(F$I1Gg]k;^s&^!n:wΰ mqmI"pǶ|ۏa?pvGl@1,U|dL]@|6m >l09oirz !yVA%rͩ/ZhP4r2TS]/t!@$(3=ߒ_No#Jx1:jڪ/jJu~dl~bciVE,#Bg d 6vjšU:Ǣm.1mLb~DF)U}`ʮSNQ6H+nzTlRcGu'hem l6ϵKlLe[g(Fse3<{z(gh _qYo3_3g8YV & Q*>L-DVT 9AgrbFck=ӂ@H9dB8NQ;VXw YHPG`(!fxɈ Q!Ѕf&G]^/iegؘ*V;wC@OD"$zoh1&︜΍EG@_P6>lڦrBcJc ' A0 d!CNNv2'F4%)_j|YF{Qˏ;NqDYm.yHVSPWP}1M `[׮*`ڌ( Iؖ XCP$348&Cש -G,ٹ i6}6 RGɬ{f>bN$PsQ6XZM3 <<g58m+#^lqYF`Gv˜J#\wf5ɉPjEXcC؛{Rt:!HUOXδO\Cjmkc4:{׿|sMm#*1IU'5_ɏ+A@6@_XoBh83Sm#wyyS endstream endobj 279 0 obj << /Length 2201 /Filter /FlateDecode >> stream xYKsϯZa7yrj3]ʦT4 JCnDZ\w4"QjI J2 9MIǏƮygWBf1*)'\)[*0ȦSwg0MgloRdI<;8k?gt֛5`E~fxnkÅxћxNNGQyhdD,'yENJGem?)8zvz,:.=c e%&*_ z2W+ I i2}_̋DJт#4 VD*] YkmYՂG[, (߽Xyirk,#)[z2^d|vVE~XUTTm&8+ҝ<"1qjVxv=o.VjFb{X a1M.\XcS^kR (A > (plz: *~3}._S|^@*i7[1=ѥtscl!)uW=fThGldC}Rr 腤B"3\8H泊D%?jWFZ:^8cZYDz_2nr;Թy _v 9o4PP$p?˙L#L 4dB_K;B1çLT1#uhJAP2 ɠ.}ih`PLn{U? ߣ/( Rj1i`go @ ޸A.\m(~_}7Rq~v^NjLprEԼ MǡI; @ N\Z$L]Ûo,? Lwzꏺp|!g.xpZa|qt[͔|T<`dm)$t Aw6>|-vpRۃ{׀N&gC`aRFG*߶Mh 5|?i1䁲*w,=gNh@sQh܌@6t;% w{Gga7 9\{5G\A&~.vT~JĄ":f|YN _[3OMpaN٘tcza0|)K'8dl:v}Dcǯ0sl8 ~@iPX9bylCn#h7_'ydapN2)7Sf}$ISpL`+GeAUogwGl6"EǦuГdhؐ~Uy7;}[2o—Eϛ%FxσR:dثٽ> stream xYKsFWV-ǘ7cSr┩V)D %I@ v_=Ӄ@Jw7L(~y=|HdrQ!I&d&貈?2,WXEhnw^,oxMB$l8s|0ݡŒiw7ƾկio-kDc?.Y.\lqʦƑ bPAu(E^-T365MW?]7b岘+",}b; 4cja4J,2oϓ86/{ Wq++GN$zUuGݬmg])I7<}$#zJUU K%}%DѣR$rK-{Y&"-i"TX`u :\lu-}nzwČu?NQ3…L4S}ee^[{}>L Ar/s# LFRS"@(0H cf"~W/qNJ# WٳQ mlv`U.X!N2OZԌƖ^U٭3B$7vaǹ)ZP@{GDi&遍9 URpQ.5!<z} 12TcU%!jiaՂp/ fHEB+uSL tu<`ҧT;xg>`&_ m'l8xRu@ɘ!Bm6o>𓺮)&sXh )uq" 7 t p*qJ{1Ω$bo!^ ]|txIie->v)ΚH7"M`{ rhcX F=1"ee&qt+ۺ VGj^C.I<-x: Wr7Otp@> stream xڵY[o6~?BO 0_.zEva(%$ߡHɲ#KN$4ER gGGgt{qdTF.")LDY[;%xnnH1x.NJ8}^~]ۦɋMѓ]#)U' c,n_~?%: ! 1 K= H<5d mֶ ),(Pd=Xs?PN`.*YQ͓𺿺adcn {$rT` \ATZ{3muL`;$Y$cA1[mNmqwZp?Tv"bn82,% /+#lm4s!zpfvo`A(;û]Gs`aﴼ:1mL+;2Ή)lV^YL,aJTcrTTyPR.&n[Ͳ;?,%F^#FeۈZh \$xv6={02=#NI$@ %x**_0qySy݄"*%IA)Kr [C˘P$5G} Ϟ]@7^B@||~-0y$+|-wm}]pЮ~RJ~DZVMF10 .k2iS(^ʸe[m"_[+Ȭ e5\dH~jr D9:h#T购?TmRr ن HTleD $&Kx%@ۚc]q .|Uc6Ás!9B>%')0j8b i֎*O,GPd7NEy(MC?ޏG;ޕ8* ߔR +xv#‡8ݱ[_"UXHCH}8l+혭J٬>|l _iJc@uga,7yt@ȑo_1EIe yD!7&tFq8&uS҄I@⢿HoN jG# l*yhlB"pςg~;g~aS,r cﰁCl5f19H1 [{T*oŅ`> stream xڽYYsܸ~#TA\%زK);]WwͰ,ɱth= C-#}xEׯ^g2HoDjR)et]D;ǦLʄ}qݙ}0rx$$~7Ѓ9roG;f2 +m{14%QeD)! u +]ܚf0$t=C6chse\cݵ3ea ׳*iۅMni(YsA|+H$T7smj))t%eREC:A?[--*" PZ:;tiuX&Jmw[J$"Ed@y87ʹEy>/ںn}{ܡ J<G O9I,H!z¢Z rr?!wWð'DdI]hls)vϒa HvtwG>ؼN:p*RdF$sg/?b9wZl[gnb,2:H*0L8 Ir鳀eI{ ;\ʽ1B.2xv1Ffqi-P)9:E8j>qx>NƂ1*$$e :<)AIG S;8lrOg'Kk`曦meq$ԏ*A)iBt\)ў. حЕҵ1lzg4q\EcsʏIΈVw &`¦ue ՛OOp^NY$Bmke(QI_~u. MΈi bȅEfZww^EqZT?)%BE\Twk d.)=+؉}t cCf*xL,ht[<8bPq̎oDt8/M^m<Wg1bI IBdbeD"$.]2 lqytV4qU%adtg*'j2^ʹR3Ǜ㦹]RBhozwƛ@ gdrm*ͩ|:OTZH9BO[IBS…هW f;uFT?6/6X͡mlIjj8R¡pC:Գ*{@J1@IK)n}Y#F^·QHo,;b~S'saM^I2.:^5ʎ/ߝ*\?5a3UJ`1kz^̀R=YϦM"p(H7J[U6Ǖҁr=dh&p?le0ښ}ei{B볈eH:"uV:`-!-s;9T, 䆹X`.VD"/y_.$ :hF(Ի,  QHb!e\6߹93Ma:? /\uYD VYt,g s}4?"~Pꡗ/U1Gѿ (! Z)A;8 t]TO?(c QW0p=E ΂8'e0߰^kKA غQI3apSryD{Ԩ)<%љ7]*+69ojʪ'g?SR4"9@@9~OLyϵV.)+„vIthW$h1+?O\NJ(\tmK9ֳ^s{Dݛ0@PܹZe/3V5s >]L3#!|s\|J 8aTH9?P3¶ ]t~S]W._{e̷'.6-V&Va bg%ϰϷ7 t ļ|ҭ&X w_ U4AiĸŎ% %J@Z;isq꿙U endstream endobj 314 0 obj << /Length 2015 /Filter /FlateDecode >> stream xڽXێ6}W2+u[vIhbX,p8N E_$ۜ9sfwBgg/n+2;xQezY"N]Q}ݴM. ო2&-}7wF 7qXIP9AQA߷>[yn2Fnb~Pf[ƅşܯS:=p)܆A62/68}#$ ۍ(|#떿Q'`fkqmEBJ{Iz}/M^R@{Aᐣ2FWPEPę2E7<+|]R?u" ,cul:keKB/D ,Ң 2vgg("ʥpZ 'LAVf5eha)aZJt(-,O4σ46yNʌ}[G znz͉ZwswO _; B+@$f"#n7"ۤ` R-~2A=hΤidI@I?,ZWO ɳ=AHB[ u9ƎJu+$nB|%|[x*| r2wzӁۣ;"<yQ7qiuowlsj6$$;8={Eqn Q (i-ĉOe跢xV*Oa2ª,A}cJ;Vrf"Q5V?Yw=RhE=,݋ƥZO0PtO6a[|WW~MgiE;ƲĬowZ*_+M]z}oYVdI\1$aήs vQWz†(pP S ۾)Nl~2 us_O3"`4<;I ĎbV*dpi ݉(ر蜐]<]_P?d{qtA2(#wP`ݷ4 ?^{o':`9R9o`Wu]A'!qC8(DpFHUC d897^uЎF t>h⬪u_3ݨ!pG]bP<6U39sE[ 0ٌ R3;"ӂ蛽xl髝+ݲjR /ƾ%& -ē:DҐуSéݕ:bTh42Tfoԣ±A\l01xfg[=(v@X]{}faU׹G_Q+LT3D[#{A0ʛyS $L/k,r&~5$m$IFC]{Vp@im*JԖi)GYg-YSp)"۰k4gU-f?mث7lTghZ v |}S}Y-!ts[p%22L:o%{r鴗S.\ x48Tn/Z)پ  S^D%Dyҏ:'I~S6XdDMȖ&핳:h0 ![, A@mN.kR$}[}Dr/E|SosL\TǼL! An{\/UEXbk6h/,]eq#H:hqaAn-/8x~}^w5< $!ֺfffzdPuWa9,@6źՔό{H$jf2:`h/;NԲ܋Y'9綺?H|IGSY:cg?mS`eЎ"_-zo' endstream endobj 325 0 obj << /Length 2093 /Filter /FlateDecode >> stream xڝXs_7C3-I9dL GhY}wo@6/>{{|⫿VzJf+kR&Yկ_ܾQJm;i&n8SiSYN~ m]^ƹF}Tp,j\,4K,sH &Іƅ;dO d&Sis]VO)>X<,T^Tɘ#ߐ6=$g/`} VP9 -J`3g v,鼆}Hp<\2rR~p;Lr?ԵPU E"Gg[㰺W9%)+ls@g !YSD҇OTPg!ɧ&T0]G> y9MއoCIjt:gvtUKˬt/`3N`5&5Qz#c7kcȈS?[Ŕ/39J y z% CG2=8m+ߟ`c6}{lD?~I:e@ δM' ;q\0Z᳍RK㞞xAmwD:rm=77"1Ns8 2L*H|ހtx4&c汅n ['a;]iȈ/]D).NJfMf1ގ1u5Acr=vuH6fx]aeXr/ZyY27P6U|l_o pJ endstream endobj 338 0 obj << /Length 2545 /Filter /FlateDecode >> stream xڽ]o6=bߪHK5E +ګ,mE N'Qp83whhR/0Od]\EPzq].~ D?# h!BgaC~8CLvG/zme|(Vy6HKMf7mE DEw@օwnMm֎ACQP4%uupjC;thڎvzӋLO:`Ô#X55Ed \X}g mq N(V{e$b%RP 跕43 uN Qg#4T q/Ch2IbQȶ८ gd;F4cՔJ(xלBE :%no>}1 ,3*1_eϽTg:ԑ8B3౨)]f2%' C\@Ew#i2r -ح3UYB;u4*kwwTP2Y`i p] 0 ,ᶰ\u!~~gx_ LwD:g_Z#!Lsv*E1.Ui:Ա >=Z8iTi.brF싩m,'q VNqE17Q̋Ӑ&{rRTa'w9;DPUaT̶a0q؋gcJu!+a 1KJ)fšu<h58h :P''c $Qsh@J OU]|cXu`2Ղ=nͮ)0f<"+8]Št^*N4pȀ~3YV۟ΖTG.5i].V>V蹹Ž-/7;RO(caӢ؞,( guOeHcQ%PkFq4V'`/۽)WJ B\ҙTrxj S( F<;{%rfjf2Hes'LH,Hbq~DdБ/jSW7i͸V-AN^$suI™@A <`8x U0Jj`[gpakw vkXڀHyeb5άl7.0dgPT{XBy1e\cRW?f晿=1AŪ<$8x ƒPT cǙ6P_̶,K#%z;7EgP[OuŇPpvK)߰8:s+9Ӕ[{Aܺ|"B/>v$PW` Bƣd7zZ۩9Jz`A-4h|vboꋮ3A?;qX*BkLLЏ"_^BOܡfQź/u<NS7Uy@)o^D5_ a 䤓x|\"/1v9q{G/y{فV5Hz,I5}h#P98z4Tl.e[ygdž41a&m@:Xg&Š N7\95\6nI0pp^YzuyK U$fXn>҄wTO״P{i .}mI/]͘8Ӧ tg͗ + V۲m +.cAZa >7̭kz%o%/8 _X˷j5xuiH7WDOz?53kOC/{] I>p-4ͬzn`JWwƗtͷZJ8ްf-[X[~J,$o0n* tZ Jҹ# KwAj <(-׊bp,1QY1K(CS~N^'H˶Ɋ3 eՓ_۰֟ DZI?Ô);q5/|+:JãQC* >!$sS0Ɣa.u/D:c?5u"@5)<ö6u!weE$컌[8!}@zI\L\0?3ZeK >ѡ-Kk+Ƕ1?'\ U EiJƙĚu/ݠ  Bu +tК;D=RUSsc Oo Q endstream endobj 348 0 obj << /Length 2356 /Filter /FlateDecode >> stream xڥYnF}W̛)@+/~ c""^daKCjIVuUsHj4 Y쮮˩-]_I{W(RnV(U2[]UߓaNk{t\n2wD*ZearMs6$LWQbaS[z]rg:KEeS6۶RJ2Ǩ9R,_y5`F'#{pRh9aUmh]Yy'_mۀ^ eߠﭜ+cZVr1MmRZd&t?l}֑4szyv\]Dϔw~{hʍ'=raL0@v%$OJTX,Ϊ=& l%o0Wu{=Ö`GY {9ꠝrsVflo[ db_7GvvL͛|%X?_,쯛zC!A, I@r@4;Gmꁿq砷I@|QRΦe Tq7c[B=[##֔A[ڡT\dR@$أLSEdʆҫB(-PvmZ]_݀gbPRHZ,,Y[Y+5"Z =K.'5~!VJPccʙML'AzmI>14l` zn/ul' ?O?gfC,>ҰHdg]8t!!xR 薌kl"[ xH b|_'Z)l b"$r:V<@a*1F[@)[Pu֥¹_sй) d&ar;}x=NH6Zpyr%"yLQ\הxnG6\T Pd.P ͗AW]x\Gc5 7s-S A6v߱.@-ʎxB))ӡ dX# ˪J#A)fZ}$Ih(ٴȆ@2!y3BƕOTq4ʩYaZtoTuVL-`lSJӉCmF1k17$<" kg'7cRa# BŸ׸e@6M?W}d\w7 ܍lUqJ-$BMn_H:'AQ0'#X*½oLe*v$bzo&;zcF*5O PO _S oh#EX|$IMI~dz!k<']bk'exvlwo, 8zm<#؁x.]v. a;/~Y3b>]1h+G,_?pZ_FQ91qNFwK 'y܉ t8`$2OfyVq4ZV2Y姍@6h= ! ۵\V lԘt4Bs;Ek]G(v֡3,%oNV" %P4f|$fk; yHrģ >|NO<Z Lqww%Dȍ)+n]$wpA_%fI+`LKQq-?]dizy~ endstream endobj 362 0 obj << /Length 2619 /Filter /FlateDecode >> stream xڽێ}H˼D&j(xhO7;4z.*Wd#E<`r\*f/~yջCDbu’JEJD(b[ ExР5y]i\cmy[}_.~p>Y"5>Ϻ뚖=G}'r|k/Lg(G>eI#?[%NH0T93oԻwXaXVxoj3kMqCiNwE4ӻۤ8_BJ!CSNwfJ&j R-%sz\$ܦAR PeBȤ$89QBr,vE/%)UˋY4$^S &+9|?_q,d49MPDY2j+Ux:1wYdB ,Lϐ ㆅL{P5 vCoxpaöF=T0OpVP Fi@D)3Cӹ_;+%3z |UA̯}@w Qi!tY7+&VEWh{.~G3;ز&TJQҧjF>91!5Žy:)_~_睦Ä$NQ*Er눓2p2-ua E I5NJJ.*%Pdi?_>8)dhb1^FQ#WIK* ;iP$vM^ջjXӤ vzh˥ _x MCAXQ"b=7]mI/!M0ۅ:!h?1"qJ2&/KSQfXUuyWpf_Te\xEljEX's2 /*iA0d`hh{@?jRٯ5: OD(S`M5[J@ޣj_]+ǒ=52e¿8ޮkE}M$s&>( (a޷6{Rr*Lo[[Un 5U|-7 ܗ4n_IO46+QGb{.t7F9M:!Yw/s?烠1 S4#) ,{*W٢E=8]n붳:TPE"̎8_a%*Ұ_xH}jCV34[4"酢PHmI9ܰ9^ȵ1?\c_hjn4~칿aIbDi&d.U#؟Vu9 endstream endobj 258 0 obj << /Type /ObjStm /N 100 /First 880 /Length 1450 /Filter /FlateDecode >> stream xXn7+l7  Am /\[HR A=w,5n)%u9sC9l%A-pN2Y$¯ь_ ҼK귷`l3-dOP Ci_ U~5m CC(w `%:J<ʁ$!*{ACO)T'2O'+2 AEJ ERlaea͎a#j>qA BKpq-wJyF+zueD=<'%;Y9. 5yOCk;p{@j dZP(aU8AF 449Y`E,"聊D`1C8 ~(<_fܕxRY0]J([32XrB ے!pB M8!4vBj섖MԀLc1Q#Z1',)IaEP-T \)V~VDֲ̎fËpH+aabőb/7WW'OFrGGa8fw]]r#on>1k6 q' 0V7u8 ëax;s\8{7 ϑ|CFz~Yϯlj?v<<{N:2S}M@m)C.iGl Pb"V>IƜ#N0il˜`~TI]uFDVLӶi)jZjM}SNbK O>p뾋cPjّڡ2/6vSf\%>dvv?-+1<.5@5@3$yhT1 ە>0f;eI[N0T{T}JFߵ 7\t{pxX,Au2<?3GlFt:8MԩgqXWaN?ł15.OFr ~߽_?0 /W뛳c\.\l=^#Ò"-'oxYl^$3O6^ZD_ ui'HlRR V/Zb6vC+|e9tc76ߏ`lnR;` 7^N0Tr4si`۷8|o"uǓ~Oncf';"U;8{X\\\'e̱w٢NMj S6c pgػǜ;* .ЦWpϗ-[;Wis3Sܽ1g76δl Vk+L+`*S e7 endstream endobj 374 0 obj << /Length 2692 /Filter /FlateDecode >> stream xڥYs6B"X"~KGI7M6a1EHʎ|Ȕ춟`."Z珗/^z4fY$`*Z ^0!rrԫ0o{ٮJ]v.4PW\Bkfb1ݶ=luZw# j4r:c(Yv{ 8׿Oo ;kIfdXsR sXn+}ՖnR.WZ/ȮJp^ީh/-< K]<:Z'qK"Ͷy$fqIePf\,3zenM!%5)+6Y/mӵ/^=d=eN3!K/FgMk&Sm\.Q\WeqMd@4Yܭ* I[$}]uEu=X`"Jzh%KbAw~7 3QL8|Θwʤ7}V]S[sm'ap۩T KT.{SMXЉyPHI=q HChq9,U5 E ?tFn>B?:Qr$H2ؠ^y2a]C؍?MFDno}V4D&Z6- |^Q0v FvX:NB+'ݡ- jiOyǯ>}|3b.8LNVnh \[V ~Q"Y6Sו h)-(&09G9_>sB1z"g`o>MaM Ӄ%1xeDIA0[,!D4-[5UXeâmMÊx+*c9cR ś$S_ΨAPjfG ̿<̱aD=[z@۫',*i쾰gn )L{Y5̶`2Ͻ4 ŽS}(W=)j(0b)OtLu#1RY :'NpQ%@Z~̥b*N#<"fM lI$K܈hHaR{/ mOӉ毇Ňx:,BYj5zfNTi=o.f~E5/; cMA^Zc^H=Hv<U7dg; ' %#ICFQ!CI);3Юi ̸Wg|:hy,8 C8%PS?p e&ΖܜPLZ6,%#֣t20rYD噻"4uC%4&ǸwEpH̍:^9 "%!cZG=`v0!-vX@EL /;⥊CAW~b}7VRoQUȨy<]Twǡ@ixBL99ψ0rt Qh"$xH9^^ 6':f%JޏSpTnWn\#8o !uc;R#NJI^2caw z -IQ`D-R hg[!vKĤmiG9q$2 5% R '|ǓΜrOG t5s1P!R58fB]!n!vUoDD!XJr#{/ʒ+7ef]W#7y I/٣~@@p6tҗ_HWu4.y{Bl {_=UJDZG37vϦO O )Ke(1B8&2 94fΞO n?fΗp ՟|ƙFB8I}5P.fQZH$1^ EezV+MLBehk1jE\ygY4Ɗ1FVM[5iclqѝPq_b[lAH)^&d[JBB|PhM$~]gA#1,t/`d7x7ʢݸP#Y7à/OC?`v hs TzSz?fm(*5L^{6 #KQN Y!Os2M(Ϧhv P& 4 Ľ ́Uk|ES͙bPӃoʬ[n!9Y<~+L"'3(٧iW<ܡ/q9SA ApA\aWU?,fM}?{>d<|D] We;D3w b$v[RH>Mx}j/PZ!izb3?(\үgmi NT9C *01R@&ItM~io|jP7M QgHR^/a:X $/xu F]y:iژYp(e{%to^? endstream endobj 387 0 obj << /Length 1903 /Filter /FlateDecode >> stream xڝXKo60zi)iJѢ]hz(E،͍,CЖbQ9o^fY4]D-,W\ͮf,ULɔq!g٧i;{B<׽{I揦,qz+[b}׸[}/+',A4TmKݮuGcD$bQ!:[/D̙9\?id'^R)ݶ=,Xj adv}¥,kؓjߺxd2JP6d ;2!9$Lɔ#sRCSl^Tg\ãEwԯ 7F7MuD:9Zp6_69V7x3nxdVha*Smp55L>NZ?-ULR(}IY =x|`]>jʂGGU' 91|e,.o8%ܣ2%LWb \BJu_ A18F`Ƿ[ooZӕ}I9EX5MmϳLDTzZeۚF?JY6A36- Hs2,bgoF1g xFv.rx6Tǣw~nZDghЀs]W_[\R"\ d:;b(ktﱁz3UgFb2u]{SbcW89o#=pJTw|-^ޚjZb7XkpӶol]Iľb}cS|whӃ|hoj׻rv>66OHl.8 F_=ޑ~!O5NQ?Y/x k3Xol|\1tf(݋Mr8$*T2&.IC ʕbw2@bh-XJ&":Ի/-^wA'A6ÀO`&/AuJ+ oC>?df(l )ӧm>,Sr[ws E!qB53a Zщ+WI4Xȱq44Ev~emX$77*{sCtI7A^LԅoDϯn:c!aH (q ;vL0U+⯐~X?a60o|#%UAoAEXa ,V^`!&W|bV &jgOp5z~2 =q]^8LAۜa

> stream xڽZ[o~ϯX%Zś.%89iRR )RyE{UV .)\:]/_JgnELdWJ/23!^&xºZ/,N'_} .U5R2Q$w}[HӺ껥ȓj(Ф0ߜ_mk"./[M(y$.X>@/ Qǩpi&0;iClm"r4 R܂wavG#mz H]Ymoc?eRq귦:WG)Y T.Y)sg0,iMDZ-)ٸnBN0ZOFN#nՌk~Lex{s(hBtbPWbo;T]eK_k۵ 8y_0… `[ŨվRO!2~F88k2ĬySȍ*ŰXe=hIFlO<#ZVfj\QF6%,uP~.Jb]k WUaiÑi!qQ$?I"H M:z#9š!?(]DkȧA3!KńOWV4GTְ> A5*,W٤_/u&M ^8dRL8!v%Utz*MpA* ewsE{_};+\YQPMW?h*!sJuvZ3Vf^)rx36&[ 4.SO u}u[౽3*sY~R# ,ktZg3n(v[eq6NSG,={C`o2|3pw\V ?cqʬt:e]8ᤴ nmfFm9_eb|5R&:pJ ~r">#i4˙NCY;ci }|IknBV DҥO͇S~ TBU%QorXvil1>Ƌg)%`L5í4G`ٽ1}*m@أ8Z2BxӀ[J3{wHZS?049`^s3.CA!2VNeH_hmN76:"DZK,Äݞ`'{wq:5[Ŧ/•&NɩZ*8uW^/'pf?aYB$Ny p Z-s .jS`6!r2`uq'/3{+p%s[SpQtwbom;{sQ2-4//TiϲuMy"+>.c|&r2w/죅N?}]-}hڞbOT| G~MoTV4˅rg %Ud7 PJ{l/f0"Hd}櫶`0G#[mBY ;a1sLB-/7Fkސt|';'^M= JG jlb]?l>cIr`ZfN;vK?<ܵhi *Oz+u%^~O'V;s.V-z.i+ԃ >6vhYM,QJ tǼ“'O{yNcwIj~#CǝF=cf̡P3͓y >\_muF+HgKQђ| endstream endobj 409 0 obj << /Length 290 /Filter /FlateDecode >> stream x]MS {$"8AؠɘZ)4xwaywa 6 + *ZiU%2THvO~K)9m~Sxywԃ]!9þX >ԇܠEwIЈm :w,^ pl^P$蕢Lޟbo7 WvPC! 9`ICsBO!c@ 'w!U?&iӥmNFA1WQ> stream xڴzeT[5N hww m܂KCpww  ;:Lz~.Uu4 9 1PDS113 ZXEFN Q#' `vt01q#$ Xi 0vT*#X }."v̝~`鷷0@`2H31m]B -` 476ؚT51e 58ÿrQQU ɫt 5?U p`oow91U!U-E1f5.@Gߴ83f6̝x]]]>9;:1:|b+?Us Gg)N^ $nJXpos#_4F**l,@N@ld0KR  C*;ua[pe^FbF gmb rptr;"`fa 5%SQ^_ֿ 8l&𐊁LElmlY;"nON3V [WJ,@fnlǨwJ,B#t09o&巘/;[;# ~Ap4r^T7BdZ8Q.2p-goտMJ ޡ kw) Q < Tp;[[kedcavc*l(n4Up21˥C/d _"?̧ A`?3%LL`-xa.d3Y`3k.O06pvf#ckddl@fp. .7bQ}g5鏔_ҿOI,lJfp 8q{g[nl_!ٸh;,33[8!Gta9C p3hݪ&8@p\nxP}/u39/VqrjXa"g`>r׿/??m<ٸ8,9^V5OMfmMx-rK`ɹ˰5,$ 5QJy' 4_VǮMQĄ2}K:H3s &ZԆE:XF_/ItKZa]1߹ͣϏC:cDu -LcIuui&UEVv}Q!UbCK}uFf q a *JEgTk '2h .@E%ÃØgo\Zl{sfCULr6PJ&m^!3O_t%Qb<7 ;"_LX3KG"RAY2NM_$E#Hz ɥf| t )nx8Y)iVp+(ڶjeEszø] uI9 NQ1 smǾ!yR|M"Bϭ I=u%*R4ak8易u@voTFL;an6}y{k ,DlIԕ_k,ChZBovDx&T``tGHmcH1 $qS\9 FEӅBZKڪ#TvOI[J0 6۫|e2?9P.d5-rx+ry9y#9>)6HW,D_ ɇ+nX|ϖzcfeL,Sdyjh(v夕ZVO1l3gA*b iՌ1ӝ_riUxtdVF t P/`0ٹR}(TM 7$PpiϲYU3/ 0>TDG+F `rIwŅzb[tYQsI#_1,1zypk;ЖǖO!o ݺ6A"p1@?kء8*!lMUHVH}rޮʶd1E nk8RRhpm?t+7V?Y"3 Ft8”@L]Ks 1qDsddB;$8y?x.i(ۗ7.7#.OZ/8D gؾAz TG %zߛ@$]Ѓ2&D|YV]ogGEؽa:GH0^䀲EX.a*V7tN80 &ۋdc [JxNnK/#j8IPM{ZSHC+X_~#.5,7%Ax t=ȵR(яlkPFgc=;sqX)u⟓[i'ɦm#ȕIfb_+э+^ |UQKM*soXzZ?GFP-GB\(zGa`I{/ViV U4~TB7eʭc^R@!D%(b!=]z ,^H6<'H2 ٔ]z9]AwzhEōG חN<U$|Ch+Myf ?$qۛY-ꅃ ?\ݏpwnOWá4r4J{Pjܓ@#mkȵEw럾E3w!dz*|}oa|\-)CY A~.%O9Iw%RND$vBJ O+Y?'hP!}.<cfd"H cGcGшN6\y"2px~)v\X}yʻE5se YqaNqEc)DD+%`sYq(gd8 =6EZ5d]UaG{H{@t:/I3 {!&Zv9b|⛦=Q 揣5,lhs+Cd : :y5% 4%7:x`wr Xf FUצ2 f,lWK9T7R3*^Esbzkݘrg)S-un~rze19S[T }q'iIHm^uAmO7q~z!d/\].b6ǎ?#q))YIMئ3Ǡ>aR|:oZkU=N? O `5nTC,v N{3+9DJO["l7h!DWMHrz8JEY z-b,R)v,]\g*Aۑ3)*` 6nǹ)*ڪ/!<p2,CRwpkn4I#xWy ; $R˸~UrQg) FVÓ2q&2vրʜ)xzMY4_2Ƈx[!iz &NLJ?׶,7:R9Bmbh& 0q(ZVǶD cγ+ȄY;EIٙ3>W x"v51~:)KX B+X6W]i<Q<8YC2̝tr2à]4Afcv0#4smoT⑷kI"MxTʮOL@~U|(E;@̂L≬=6>eX(~Ơ 0=L;}KT2ױEf?cQ4J*m w w,~I^bT +Qy218¢&9l]d̰0G֩ n)JS= }*i̕&({0t%t-nEy{ uK^qA>LO)=t4G\xE{O& &dS 2+>X󿴔.p8V!-Kfrbz#^A)B:;*"jG_$9 9}8vH0J.A5!i sQP~L1'X}|[I$UksPWWiA3΁=-ΰHn̮ K0u\#zA=߁?ʜ?Τd-t nuBdx_#f+@keyMм8l>l7}$ F?pe2]U? VǂD2+ P7Zq,6uJo gߚJUj\ 5WE1EoCBL-ɧv)n=}+YǙ,:Jp浮à\\™hmb*lu{XNlRB"l7QqbquZԂD50c;a<S_yd!ݫMWcZ׍r_ZYb$$2Heraۑ 58ky^uNRK85:G{g4vYq~AZ-k-!@6 ǃoMlXoC7zl3T!}al*+K$OY&&܌h-ׅZWZIӜF}*'a? J&>DGEIöU2_)N> h[a:nev4i2ˍ|J8C{r]-J9qy`\{XkUXt6Gkꇡ̨I`5mqˀ),bCu|"D3d;V0+.zI1q`%.N52FzN!QW-x UX4SY=D^NTA:7u;!*C IdD985Z["n9Wg3~V~ݔ!g:m 3~RR lER/TuDshN֛^㐡ϳW~hKwQE*HKtg osސH?fwPsrɑ޼Sfkv퓊ϱ$7V} bԲHz`(O+.bJ1 3&L⻣0R>Տ܋nS fϦq?i<>nf}*>ut_@$mᔁB I*DtwA}D],B`oL](p'Ðx 9\Ý\Y*7qwS@ EHEjќQ.ֲ3TM"O)u$Og., [ZUnoȃsӭnÞnm%\Hn1ʷˣ97jbah . %y >X0&Yo{o{GylcQ#>Fj*K), wbN5P/&FE!JwҰr:ێ-@bTnwₙCɑSN]Ե!! MGus&]' ~x`*#y+ K y2ԒiK9T~sX@b AOڬ67ƕD TZ6zO>=P p[+olmF? 1 `I|LXdˢ#N_GcݩS l=)A"Li3DzwPE>6Dhk6˻䯐ffK,Og|3\0'.P?ˇ.v]Y2/rϊt_|8iGAКjt({q,كê|X*w5%*i_ڴ%P-NL=Dt#DlCȻB"D#dĝwM2 C|r=}3⤡,9\-shfA~A CSY9XlnlcnLv~:;i\8RE$yK|3mo}8 :ScJA>7~7~_>oX4No Mdzos Raځn)-̲lǻG &G}ašz%|J݊~f<%YHU*#V< Κa pHAh0#zu2~ N~x燆r1'Sڳ~Yl& $ћP(heNs膠'6zܽqI3] % K }ҬF"Gֶve;ICBy}Y0~EpՇult6/O~c¼ϩN6ٜd*@:^4iZw+)8HuC G;>}AqpX禆b,AXďqW\ጚ$oiZĿ]LXQ trI`UË~6ݭt +̐=93q]@xwqmvqt]ܹ̃vOâ35NMV+<* I1GPOSvtG)$/#rH~5 =p*ynjoezraoy8D6 UCDdyH\Mg|&s2a0gͦ.u9JVJ陣%i,dM$iS^-r!xWemG}7 $Òb0ni46 /vJHy٢d!|j>Ne\-{ /b1X%嘡>ϜsEd6Yp9'`}wBE+ʀ>'s}DuP;BWBK_`I v]-BlkpIۇܛʎEo(ٙ|&5DɌkJTۑ(+j,*h}^)*:^ƒ@_񓉆JMmHM92+YWJiǢ+. {P+T%a5CϴtS)>h7xF&QB,}`ꦺDu9R5SwTݘOIs&-;YMZNBƩF;:l9 0d sd);?@^p O6j)EDwv!դ߫b~[9TT29&\i0m_KOl>hm5t~mY`G:z{F0S@aB!Pɶ(~O`KSִ{]cRcqէң^[$0#h rR=z]Îf|g=C0s i>.s-!)7Gӯ^ͻT#oFeN2!B8sh2 28?:ؑq|~l4ba*`a{P)=MHLnS9a1b'fƼ1;4z!& @Dr8J6%67+8P糭,I&.$}Skom!=&$B 1&q6즞`_6߃a bAH>w^0}ӹ;\-'JѨR:8u ӘAk\ANl? :QS~*44W 6zg! _9E/W*6 Yg d|"P@O@T<$qJCTr]v:A ;!;ki] z6 N3ﱊ`] Ш~A`l3oG*J\45B)r5Ԏ&\cܙ!xt1cHyAP|e>VQ}8'awG6)$!X-*ʰ }AO(XiEģH;%B2;n śF4hl vFIG%?>$qԩW=sB2!+ l1N 6 Qrҵ+#f뢊;@-9b &CF#;ܫYWx[LUbF %3,r|Mͥ|3uM/j%T7J;2Ӎ5[QzgǓM3?6h e}i$._^k<;+q˾QX 3xz.y\ȴwC6u@rSpw7>RϼvtTIEveh/&ꚇ{MAJ=[ \&2glZi:k5l{-/-=Qo(*q2XSg 'otLّU 9&+0࡟Yͦ #&6-:4s}Bz'&|JEM@}bDѱAne&\MAy;GTJ×ڄ1T戀Zbj|.yr6B)1LuW=G*z}9D+ȩDY 3gB _\R‡RElSuXAP\9#nQeT;^Ԥ*\KMcLk,z߫I(2 ]' 46E-A,$)*к*Aw5\ӪmYCeVԛp.^"khu^ƙʦufOI݃SU5DuyO}V[F. ⠱Q&2j ~vU9VXeEcQ :͸a+t#jPP{dz>G]W#*3׫V{dM:üNe$|T=E[7+"yn{ [ qXlىCWwiR4k"^z`1ve,q{2+7N.9X$WFHzB˲80/wLUKk:0}m/DYV,fl*8zg/u =R~t7w1,pyNV@R В UVAU*RbeͿMVʺYj|̘n?CڱIRcٵ }\ ǮҬq ydIŮAP*8>_TRksci$L!RYb;۸*gM1(٥42M'$k\o C(pYsVQlX-!rŬu8iŐ\b%]nyB7D?OVrbTߐ> S׫ 7|t )ErٍSǣ)W_ʎEl 8͌_X ߘh"Vܷ nR R>׺C$r늣3|xAe$P'm0ΓodQ\~ެ[K3''0*n)Egj{ܢEĔ;u‚:~,lL.5Jw84LT pXx&7*%#b%f5p)>| 8K9wlV_+TYwT{I^"x ّ%]Z2PAW+( 47u'A5Gt`E:0_苼F %7RLYxԧ$ˋFib]!t|E9_yVt t{v}˳[c]&TtxwzHO֏$ͥwk)޷-SQ7̤)/Ү;`6B4MleDᚨas{@vW-ASEdWr QtdX@gUh@RcF&yDƖE,>ɐ:Sw\Wc/ܩAUq5,~]OKMIQ YWtZ:87v 2R &E T\?:vk Z(k$,ރD5]ĖﾕbW}1^mKxl\H,q犌8p5eyM #3/ўxf팕JK4: 64p 24X| o+KU,rH5D~,|}}fODw9u4]5]It_+^񊙅)qgC"NJ#\[+(O77xoqeDh3l,on175V<1+sY5dUn])텺VY!(?48Qu dnqS%Tpc-PG!x=k : ~!T5i4ƹ-r߾رU]jHS_QP}xy.Z5¥~K+9£-h)+u$ 1, gFQxI()9^͝na^f;\>X3Dfbi+tc jᗁ;G)Fh$,=JSxWCȻ kֲ}jƖ!2r[l'}ΫHf6.'5߭O\Wd&*Ƌ F7`ܹYu g-V{.dT7v5 E!f3^d:iC:(DmdͨQ#pqI/}RWbuho3o|\{w"GM9G/egҺ>#gx̯͡@5 %_N2L/Pw^ɑTOh 34bp+@l*VV,k {JΟ/fvs~U5qZpmG}L / 8Aڔ_y̔e;~PmC?ڋAMť:3ǢnrˈOFP(JiK&)<ƭ\`[=E1G_K@7mAo6:ECl Tc?Ҷ lݏ=~+T^'$~'y_ּ!OSACu$;(tNV':.C䯣) @?c793oL@ŃF(n}\.CAhʹPOmk'p/y"7i+ ~uCmL2޸SG֮i󌍿/p[bm6bo)iF` UsUlb?-^}b{.Fw 6'+ӌ32='Li?5t!"Dc>0!m$2-dqrTz#_"a-'BxQ!7Ɍn.oOhh U(^r}yXQ۟^b&%s@ j)? fPŕ2ciqp&o7Jk#NrX/uE|,y|/OY[)wR?=[ fTShCV&sF`(n>>p23mm5uephǰ;{QZ]Bg! 7DYgWXk=3qf;URfXc:έt\Tf"S0k ՗GVrEf`HVmܗEMsGKe 5'c'O"k(!p~${ /d]IrY1^SK[*DZ93ާSx֘<#%Z~iB"f z+Κb SseJ196 IgfsLVXOV ZUZi^,ݵ3͝K26D|*u *iBpr$h$y->!fK-_AB63$Yџz5}|1~0E kAp=Ͻ" FxeYhѮYQi&Fz3cKP((gϒ#f[;Wv=`MYKQfq~m>2f $dXCTҦ|wiIR{?C#.` {p= jAffͮ𯼘TUG[ Yk*-@q o' d,.]7 ;!TEгjpԻq4p_^"F@~%0hч j=0xM+5̭2%/KMo29EީQyL+"W-0` XIlCR9l]g%Fx7z*]tM]kߠVEd[uwݏ$ 2Ұ맱 #p94ۼ֗+78Ջ<aRW X2Cq J,_*W]]wus^[:Si* |_V`"u'Q~Ž'(2 G`V'+M_X5q|k_nʼ,|F:ƻP}[xsQ'gƕ5_&*䁏p!OWykq!]>:/?2ŤM-ADB˟^7X+.e?S/Z(c8 ZiFR>@XN0/glSB irDr[P'w1Ԡ7 C"zLXO"L Ay(;\Ox,Pwt 2>3AebnjM\Y'72jX3Ȉx%~=Kd{%FwB|&+J`o] t0qUl#dBZn~5y4# 8cpIvL-c}r1eƲB1#\; &rDftީCdI7Zq SA-m|Ǟc@_T@{#^U~ .:Y9r|5FnJ!ؒG6XUC˭p^WWV2`93G*f, w? 0& ̟^$V9ml2RT "ڍɀ w4d71(z22[PQQfV ~$!97Y[1oG!|ӑ˾Yuc?/NΌWۡ+D WDA~Ap/v|xw׶ ria*HR,eD} >"w_ލތ Y*M5 6]CǓ@R` 2۵3qo*YIp?ybPd5u:*MyNDF0:ʩ tF͎6)֍7fF 1|uJQ9[2gqN.#\LU?^ Mag2pHػm5$jUI313F&U>jJr38Vx\6Uu$KoGa|kۮEm쟬MJ(I!‚t3 gLJH5Av~KJcT ,I ^Ee5o.̰aF*i_{WI$j^ ! kviGM'6gN&ulUdbF.1b󱶲v2Utu\D3vk6Mi].6v(j 3B~oR7Hf?\kOnw#`*Yy`g!ayj/(Iv_:x1CL@Fb~b3nSbJ~%H3S] kX@ltտ%o\3-&pm^(!F)${$(lq|mLT桶9_kxY&tn"l͎CWijՃ=Xgxc@RLتC 2%7$g7WΩE `'%/}N_p310.Y+wz*Λ\ soi=*f i/zn+cK]hC2ڙYp wOڴ,XD>gS7;Ç䘓fvIŚO)3a1a9oެnIE[&(37S ,m/č U!i4Fxh͓ \]Ƥ=mؔ'.,W^1JE4wlbu}Uj~uEy-JV.7b JӬՆ}0F%BT^Mt;9h gos3$m ??/ǻDݗ adATly[LuBC&~SX"醌ȒzMA^!  U _x 9ny47̘pp{<HSlAO n_?n}ҹWoew>S;lxf+=ƴC;l0'PY QU3՛vZa㰏x An֑rj X(&9ѧVpv:6wIzuegt4᥽V;٠Ͱb`̚HY[XheEݓ.h,X;LvAn~ h(Ztك\o}~4#)GJȚVVĚ,5nydQ%VGAGL73d)+ړp+.GGlo]ʔJ$Zӛ0W_j klzAl[Wþ9^#60,?|n9uٰܖ{~+>m d8 [wi=GSɾp EڅC=}уa?eLEމL0?ƴzq*$,8msQ;}V5 b5?mImZU 9ekg?@QIj`,3 uxuߡy+~n.s#cfa~Wzҧ9Uä_ئگ0䞌4E]ځA$|V,vT"[KCoWF.՜Йjά\: B>U{[ `Enb(̏@Sid~G[_JtK2@ #CѺ"j#vG;%di=tS1kjpҘرgg3K5Ý^۸1Q;im'TagȐ!MpN ;\>!'B*8k}h99S:ڏx|eÖ=̓螜}ҜUW uvvpiseQɥNB|#!Iyi$fOBHb`BrFr.en.qayѬ ҥ< fE&9Š_%Ďmvᩑw%U!@ ?mIWS6#R@i Hق=~3K㵔oǮT,56})QnT7M<^aJ#=}&0X yIlbUa'I~Dà;~'99 L:7,l54<_!PX\564:{ZzœBt⭖6Y #u[ԧ#?n -sv&'8NeMsAU<x,ucK~p"Hn2 u7CK0Q [5@mX y նtR0LG+%.D6^8[EM[NMUiSGIA#bc |B$ Ţm (Jn}sr)nK[yabs|}5Qy04v㌌,8d 8a)R]5 y@CK"rY6;kZ]COt!VcXRxceBhCi~A}l[1x7OQL3.V8yd L՛b/n{ޱNrԬZƥEX#&1*㮸DDv+UT Шo$#iocNcJ 5L [Mp7O^2ɇȓ.AYBW|l FEVtE2W$ :t6X/ݳ粒DnDpӫ5{ 7šiyܳ S3=y#!MoK ^ud2*ɢmϋ&(Y jMomm}n$[N@::="cZ6]l`|1 yvUڡhکϝmIDGڇᨾK:oLu͵q=b 祛8<^Gsi:Ǒa NaLսdrrNKjqFUM5-X`8p69]|x4AVӎPjqEoX0.g9SȊ́^͹R]=V$+ݍpuB㚤{Fr JM #&<(Pk1X`:u80lDO*=64Em12cض<,N$~=gUCg궫@L6}UiR q2,X&%AZůOn|Nn˚U 5@-%}Z#K R4u}:ߛ]ui|퍨Ӕɼ BiFi)Nmw`8zGo7N_U3x} -R7.XM4[ݕ/Nw/Lh-4=>Oōgҡ [dO+ 1j2Že7Q~CN4ˎ_t8~#5oJMLb,Y߃sIpM Ʒ畘vY(uSpȹ`;i~~of茦7H?YYl^}]rb$E`׵t )ݹ7O-la^ s|laSݸ1*)\E]2:\b4.2_SbIl#Qs碥Rz}y'ǒ?؈#*?6 fCj-$6Y~#nq2:-=;P𽪬pT&rfί5"S% xulHbEU)qI.Xt(Y4\ue߈աzͺ_ &ܘ[ , +=J9^2m (D:7h?njUJf>\^+ vfEDm.\b2x:nh=rUu'taZWG8MҖFK^%ӹ3ע`_OvZv`ܕ$#'֗ ܜ,o'+P/HlOYWW:^@}GIܼ+;^l2WOЬS]*K4bLtI`2t|7|yBRhQ/[/ e#jjr)]28U6HpVeoyW.Z;^ɭ+t mwW.vc8/!U edoG--58i 0ۉKuD )@#⾧fjM^ sCgHvΪgG\TA]B~`݈a$A=)1D$=@X7w#n3Sbg@͝@'-'QzG@y%hJ 審/1U{Ӷk3jq8m!~(b`ֲ#odi|B `呛yM:%1$CUzJ8NZޘm4Akټ@ {l5,wYA.vJ5@UpԕBF^|^7@ÔG2R>UVӋQF/!iO.[?>#o6~A<]YcUSA%Zp;O]#iWNM6WT2nz`c1qO(iI1 Ze紒9SH̯84]uw"<aWt_S^P?(aY>_͗&DH/QDn/a.n71.wS՝j_J< BXR=|~.pMnTckJ dV=~AY+zk5^ڹlߝM.=*}NЃ?Vae8r|([dqԥ~@,wJ]V¢ꪂ]!_"oB3]L^@3۷[ /$f|ˈPI!T Ǩa"*@82O ,_;ڍRS-l ߫:ϔ%SkĀf̈́r[}HZL!|Ӟ?ZO!ksq }_C%wa=0ow1E Ga)#2 gjr@YpLܢm73!/AZo?n x*c5nū$0ju߄2 ۳ ̧̝$ r^su+o;Va5ÔsdɠVܙt옉*))MDwX~V;72Yl,~GlT({Z)hdHpKyKnV%ŽD}CKNn̙R!0Sd!D=1S`J"Q2R} eM'#qK.jG[!򹠆D+C8l0 K_`교ZDIssR_I)mt9ʅ_gbYw.i<8/v)KAo=]7!}pX=1hyKZta&i9w‚[N"XIYdXs/ u: Ҵ0"滁e^O4j<2!HF֭+p5 垴h\i֋4zߏt;.r*/Ɇ9YXc&hKU9@qɧz|t 5GVFe:pYY&_0u=ƉAv %sKP}1SQozh}Gk_AbF=Fy>C*nd̋iChwAoLAcZdi0ʓ E jWA=w-._ɫ?`~? azy'P/N+mAp5^PorbByϪY \ەuL([:\ɨWCvR TX) 9u?=DfJXiiaMyLCsӮEU$͗$6r{'QPwZZɂE 2ɗ ^[a Byn]^F J? ;;. 7n1khLEċ!COQT_fubo.w~!sR.9f64XKѢ͢;-I]%+ YZ3$*n eg%s,Ut(gm"oQ䭺n(0 ɻ8$e-oAхBp;GBIwŜE"P "&xTPnB rD!=;QBߌekwV@beQ<݌;4WwWNa_lhqȭ I.-ʊ^&-r8Q7HƱF3|5#KIϞs!2*2yմE` ḷԁ1O13fj- OLV߶Z@ʓ _㑦N-0Cf32#/rsFC.,dh%dX}C?*qu 5 +Xr@Ct&66X,M?#.ֿQH؍q*IJ BCc+uf?8FӠĹ7R˷m{j,u8R a_}Oa*biS/xRq1OE/1lR)c.Uԝ)^%B\ySCEs}@U@O= 3$oj0Aj|ߩ\r} ] -U-0 =νq<╇~< 2™:WHO'@Ӡe*zW/g$.9>iҟuh6Ȍt|e)=jrEWӫPC:-u/Q,/ۈ c4YU R2S@4H(=KQ_ $?U *򋯖x$=V{W}#4ez{~qQ [bd +W^v\BI(x0^b &R:"A_\|( ņ-&늎0{ATG+ ҏ_9cN@Q.8wbo^S[ I8ԨW29-8S b!2L(c%L]Ymz2\>J 9${'\[ (vgsx: > stream xڴuP[=h%7!hp;̽3ϖ~XQ^hl&wgf`)YE&&68rrQ'3#+``ab#Hٛ9},=rf.Ff*"مcތ#Ddea'+=LEF&6@wg+)@A t0Zc3K#[sj PSWVH*+)P3|$Vqup:QU5I:8L U@^cO?rªŽ p3srSQ|0M# hW#; ɂ/~Vw Ƹڛ~_ l @O_vG#\;X9+( 3w177pt1rquexR@O /9̿?Lw6;[98+{?{feMNX*ݱgppO>a1Y !Rq{SQkg? ɓTmct_:0[9}?6 3`ab_Jcfch`ndlkenlfpqr5#8fNˇ? _?ۛ20m?_ㄚm=fp@1Ps7l=\4P[9KXy*ZXv1ǎeRsl?1t,=3'}hגGG0J+\r7Z[X9FNNFpL`agx3H/.!W_9 FrbAFɿ+߈(70q1Fq*#6#N?>&AL%L??X~P? 44?h?h8}:}L4[3sgF|P8̝?;~l?X:-Z,Vta[w_ 8m4L?p3rqa ǿ?W?EDl2g0HbMuk,}?`faf4 Nm -/)$f8ДXɘ%1, l Ȥ(J%$}lM5U3GUgP ʔ[(">-*alo#rwt?EL^薵C/07c8٢y,u/t?aF bKC9vhܐƓT^^tMRUa~ghdYYH-7ܡ+k#Y3SoQ݌Vk/xa; *H!GyhbEcqT?۹6cwy!O07+r-3@u"e+^X7Iuq-k)[Lۧ%U$g{RԣtddC΍L+' #)9ƻ6GUűhzZjs}cNBVQkܯ! KLHK!{ ňhY-:兺1m 8\8೵ tȮdH%nC-[IU57ag BfTJn8p@t_؜<]{~pnQHE{zw 5Kitƚxa"]K[ o딘T u09)"lzRBqy(`&z4X>1 쑼Ѱ ǂ'Մjr6`ܝsg>đMtxw $83ܷOcK)XZVwV4ߟEwJB'U4q(TtlUHn cR&'Ή~^#N,3 ֽSI!N/=$]}Hr.P1tE2N (ؾ,2>r\38e^Sѻ^lȚAËӒ )=1G\ +;&31?7U^} zdrք0F?E@i(/adA^7.GAa|ni @_*)m  ᓂ6=S-[ߢ:ӱ *ph;6*%i*4yֽeh&sJτ;BlMi)\en.IOmN+3bHlj\7hrBCS(+|$n0#T jU;S3tlF>voO1e>~KUAq 9Q*UCQ"OZ}]O|/< 鸪Ed$9)`@!D I( qm]y 9!m@4?&Ϛ=\Iay+դ9{B7'T[}FCwTiiu]I[4_?һ5%L׀ f̼K5soÎK­{HASk@b\s説b5fyyt2 B flNQ S~+Gl^ ,x"TN&>mTKF`Ocɠ N"_5߷{s9x LKL액BIl ;tDpB|EAj$e:̡De4yLN<;N,{ȯs/([BnUz=YɣU2ri@O$V& #K<:1*ξwK'ޏxFm1+e 1\xm.ppNO+r ~WLaR 8yW.vj֨pa~'թ$Bڵey3E.~RAoL00ZH*ȏlvM9Yw8T0L(;0)=`,#޴|%>Ċ&wm9 '[s -*^hb㸲rNԘ{kn#s-|0}iu_BX;$hiU)t>fwC3|Xl[MBLu1N+>(-N M.fr O;#ח(= ˝xGyfJ؟vGΞ1ic7ai|ec.Aƕq>a]Gńp预19(bvX)XdV`5j N|UiaC r$%CauL³<<6E4M^2q` :ؼ8>Ez3֪+srLm$0(:o|ē< D!`R:St⮄ZN54sܹOD 1TsLoNM9 aq~ch$5vOɸfL̂kPBG_ABzDtWPAW$9(_(K[WֳJB"ML%[*g(?tD#DG(V_ lS%֏|ۄ1[4kT9tsLdkU +yWDcY sjyΩ3&c #'CG*5C_ꈽ?q%HﲐjJQϥYPn7ZGGl]fjO5mf&X|',hCf`|n?MGgĆ_ IU 5Sz3ߙhF'" 0\@)+Ʃ&]i:PփfNJ֛W"]F!Z끘O$(*_F;6re$kp]c2#R0IsǃFx2sm[5|;"D?695<'20y\'޵ aE“oDVIB^ZUb^%0sOu!;8 HJ1a]~YhG( FĐHzOnSI(JCR.Si)ZbdD.B+~C 'Z_lJG*n: ?OY 29FI9'! )9- 63Xa;i,q;崊@I,0Zvu{7l3.IzŋҴȯJQ_VzARC!*<L~`}e8w uÜy={3ނ3 ̾2TW_s~M/WI,: b `_nʼB7 w(KԦ`Kԕ6iA2ܷG˵XM1Wfb8M:&9iiwZ7SK~%otwYHI FL7Dr/8hFrSLJ>N L10 ۴ ,-Rճc,0E AR+uߨ*D_qllKK܂DZE'cb)%ڹp2:o^!)x^~T{[CUBEt _Om[Ƀh)O/6uG;z;~o]! <2nB @x!,5=zsZѭ2::#(j1g9pK[͑(4ѣLw0+!9R:s$NR)90S2D!'k9_.V͸_kl\gr}kȬW9;gU8PnHY9e/GD!’ Cz_S]@ ћV:Zqؗl1u?xJ:ZUڍ{Q!g/<$JWhVrl_?[Wfo<óリ<ɲJ' YIAKiT~yXXn |m崏F\.`ZE߰ z!FR v0ʒbOaoXBjd =2d@`^HP:1mT3ɥd!2ۙ`&וOLUU}RI ֝/DQ Rl"\i A) >j}D0oG[:< ϣ}pZ0|#/ރ2OĬypd V-2:L1/ʧN%=ݱ]M'w:V!hZ_]U~ʉPIT 3*{ y0ef+HKq;F?y7I xG9ؘj7;MJ&4yՓ\  fP)q"δpu;." J cRt*T%hlyJyDc,D\0IHGSߘViwW",egǞm1ā'<=m;]sm[bP'itMrɥo }l?3j5l&M\*kI`UikRJ3噕+IYJ xQt7D[I}Oz8ZK[nt&zF2M+*j]0)2 g~]9 qyt ?퓹X2¯em802W8̀bdKZW7[Q"8{hscU[>/;^ɾPu )F|gU[?TCPJth7p+H#V,MB \z^3~R/ey t,ZÃ^pZbmZA3 Y}ħ#OZPZk.2N ƈimF=BK4됥;Jt @swe7Q[TК +odRS^Q)7Rx n"NUor{Ћ\2vfs̾<ɀȡQI;v!6i7: 5,4Ču1Ĝ-#Z h<׻9M}򻈭0 ]UQ+VQ3٩9v]txGЭA!4 e{@мwcE;FC%LJn!r5@oU Uc|60H,JeSqĩ?7d(n.'!uby #[Xj0;g1I"zL7i #HP8BEW*ؗ| 2 aU W,w]nڟܤKXsFf╘Q<2u3&!| bj*8!5.?mˀpLJ>osnK6u}eUm!bkgwA3 z~.gb;ccv ]HCQՀPՁd_je?l,Ƃ͉^Y2+fgqԸYz=ߟ"ԅy:t^%uX %>|5YV* hٙppM5jMNgaɯM0 ~^^#tݮa^CjrWU鄷CDY|lqb;2Yː08흋܍a D++4Sif.*YdnS `e, ZQeٖi!3~cF޼C(dy|IQ Byі˿iy;'kcަ]0Q?fQ@*!=)*$,\t0: SO3E`Ԝ%JO%D{=Sx(7rrz!AsXUPA`2R %m߯{&0~AiF("ްO+P{A ٤~3EH.v'LCKw[ ^w__9RiJ|"ۭ'T_SA}wVARs EzG~~B j<Mx\ZOzV8y'K'(dĊ#MڞGfy.D0<?oKƥEN8p$ާ=~9&5S8H `7P6ylNo.9\b^ۅ%"U^1zNtwWh6̐gJQ nM-IX{<So>z 4k胏Cg|9iP œ/sQEn*P4S$ςw:Yv{ ZP loWsF'1Va"^Q[] vw <;:8,ڟXX! v,D?\0rN8pl< ~4B½y;Ԉ0- ݢU~l'Y!C|.J JaU(lOkԒ*^!p.ߟ^F%mn>8'BTVDLkH=ܽ.~J3Ү4͚иX&|IɞKq]{ ^?pgdǞ?!&.tBQ&iH2#Hh|Th>ΩYQOvclT?):eۼw^H%opU=Ȩ ia]#8ؿOB|YݤryDSzNf3"<y(k q5Pf24 f*xK>lx_\pKq{ lθ#`.LՒw7+r}Yz9bF1l̒}ASVi,+˴x/v@;_x*` ̵at79M&XHr+=Cd;s ~wE$;_C2Oȼڽ6#tFA*Ɛwro(92)~Gbaa.|8' axM"Z58 WӉ'asy#/3=r"ULm=UBR;ǂj9o: ^Hʿf ;PfFd{l-r6G0O"_2LhQ#BG4e\l˨M[ߒ \ƹ3gN펚q`ƷE8O]73W,U96 &f;5Rnźf̜OFYLԄn cg؏aXH j6؞\Xf8= ,sC'#D* [踽ͳ zµu ߑ{߶xRZ_g|틹gX nbDݨO 6 svHA$ 2Wbő9Z2SCe?ɺMͻqK>%94hm.\`Hy2کaQ\LnӽZMWb!qxB?"Eni1Gcs_AWDL=C}Ⱦ"wж`]9։&Fil̥Ʋ_ oYKz9w$!iMo)WޞCg6Ss !\[_)Ho PSȞ%u+bZfQL[6CY:?S`E6IpKϙu;% ضX5BUf ȼ`,(CVM E4WZ7qZ )-2] ;y@M:kǝwl0.vMaTMδb*H%%m 8up&LisnPn1L|O{W_;GQ[(I֬{+I2Z擨! *݄2qÔB ˸{a3{Rp[)A`1iרi)b}7'Drxn N+ )ئqks)w_scӰbdi{xqք<¶a>]>ּ.?PEH>Cg]"dVD/fk91Ox~L5Ǧū0ĦXO_ 3B0WMC[mA o-g}wooZsZE%B޾P;9b{x tG`۫մ'6IwrOe]<:؀o ϵn`O3J{ .w$ˇ%VuR@[>mTe?y$^"#`ı )JZ (qS Z ]ydۨ+im yԚ2ENB4/ى-W|r .noW~BOSsb0R>/B_ے5VI %֓A}C L˗G v A>[G1qgje3^"52Ѥ!=WuxZ(dc$|dZ\h}zɖ͕4R|qJ~NU+dE*k:V [qL|*; N LqmFΤ.%DM_CzYL2 'qhwܨ@qײ >19l( Vb}` BY緛َ:>Ko9q}\`"ӉZjl\Lةd2L/ȸT>c*zyXXRBxnF2koDr3=ԷBNL5W}x0Uʖygt?F-NճNDlk`Kkc'ScatfND~&VvzӉ#DaT'z(TCy^/Ȑcj8+ 4p]G̉RUy "Bp~\ޓ.!S4IU9̊M^2&Ǚ~UW9%UiLЫh~; X1׀e?FXi]$ವཟ-U h&e"kH^ImO_glnJNWlvf\"H#J 75SD a>D12TF@*Q%tsBo{gC)<z+$̽J(,aAWam|BQ}yׂ40 VY}$ =Plϓk"_Ô=I /D˲.uL[3W^s&uˌ C3)i6W=5}ZĈryM|Ǖq/!|Ci`ia2?Hd=x< p![^7B{9*Sn5(8>neWre.Ǿ^]<>6[1G0t9;8uh |%şMux~\;'?*}+YW=X4I?@R&X*)0O7#EN+SdܘD|Q~t|s&KE2D߃ n/ bΎ{Ԝ[joVEDƉ1~mh\js`hdduLmNnmldcNֽ'?<{ruW_H\f9[ؤCp畕>ZOY6+FSej|`W8JQYvX2E+ϹOvg'=*w:k3fLquvfv1k&w *u:=8!i!jVN2³N|.SɆSmf`[C+`.Wւ* έCN[t/4-6lZ_9qe y \6r\kQ)?r,zOK#\g9`CBv[$s':zV OʂWk7oن[`Ʊwlۗ1!u[ 6ԟϖDB"/gD{kUY!EKğcO2)^; J?RAFl<)-s_d=^!OzF!fmXBp{k<3zŁ<.Nkө?%^Nތ9-cUDC@ڔE`v (ۓ,P݅4٫5Yt׶_ ;חvر{ƒ}9D0BHlcE fPxk$* ]qVrқ&b_j<"avaTn*)lvq4t9KWc]4yUZN1LSs`#TPqUѭ \ ZM^|M{s/jY߯%w7䮤fv1J5t> AhX*C/'7#1,ΧM+&heօTIRN[Cqπݖ@Bl+n;-&J2:`#d+&G,|TEwI끗6*&BFP}^n[x dT0FsŮՇ')&yhRM@JDs\BMB/VkcfbbPzxg)vіiZ;6E&*8-8M^nO9RiGqfuf!B+KpETqNk(BjݘF3Ì.GJBş ㉍QSbq_Z'⠸ZXojg1b4. R.~r'df\&Pɡ 䟑qVL!!nhF8Ǹb;x D6qB'\5lT^#߆CS[׻a$_ڙIcjڸ37WDoG4(P0Wh5> 'SUW ">ؤ' ml ˏa&CVh54e?).`Byx;ǼsdST$pzU]$ y4|ZwCG 7g>ڠьlj~{ҔڸIn}7Z]C \h#Mquoz(,.ުDM% d5S&;\c2IsVA>N 2?5Ok 3QwO #*ۣ8" qs:/IPa,jlFƽ.!L R@3Q#.bcPƃRn{ф-.r)dxJ ERPZZ.G3ɟM'xk1Z:S]-R~LW6w;Ӡ X=92AvU{{?ގ9r '5=փ5[KQr!v{Q9h[pkÈEu1/s:p׽ [ilkʏaa߼1g3f+lmf~v5ka]~A ObHs|0լbN5qt#hL\&jr"DnD}lK 4JI ^4Pe9YDvr>mJ=U/%5&CGZSyOE-NEoTii=ludܾZI/xiq>W&Yu53z0+0J/|.Ŭv4"Mmo|Mvh}bêfwt7#X'H!W1hcٱ.'C ٠i,  \͟$?]Vk'n_<\BɯhAPn*'I:PB}T`~i[_[UߓoÙ٢ȥ5Joūn]s?ι7C5I.4Z%KrӥS^f`v@NmFG=4B dKOR{r0VBYTR/ \r[| M4i;fr\=YqX.}Op4ܹD˕,n$=/3Bc ޯOMNk\lg0dވfe3Yސqsm,ް P,OAF)h˶@4F~۠1°z[@}@薸t(h|LW#ȫ]ܖ6(W OʈIm2֌bt)͗r\6Ovw"̵t;9m֎n3ʪgn¡ECplb{"xCaO6,VD3SW1w$a"9 !j<}l˹yF[)$ϼ^ Fc(iT-Oǒ,{-SK^5A-ER ^&@%ҵU`Ȑ08iS ?s](EЍmo-1+=ȺHfXu4f /b\ E!RVV4 F.Է8p~k@*ڨZAJ.ZW_} Av}Kp߂=u!@K骕g6cvNNwZ&->.3Ъ@J&t)~0ȥ ;̻$͋LƙR5:ͨBq_0qr_%;aX]otK`}UMeB)JJ㛚'DҞ)+% :.:fiŹItyd+k{+J-^$ZĒƞ^T(=#aVksS’]Oϸr*m9O9g:n'}rj$1POM|'TO:^$EO{'ݴrKϲx1n!0]v%~:|o*.`m-ճyG@SH36?yǯ͖;Q1H,g34[-#;3,3e9!B,JBz|50ahXf eD:,]B~B;~g4yD3ʼK`ØrO9KH*f g R ~SB!YC'eoC&ͨo~3"9ǰ>*$ObUu!S}7oV"3TY%jmB ]G(Dٮ msœC,))Qb:&zG8K  jƩsd_. q9L ` IMNS"ق5nЉEFԦiA~܏(Gk~ CaN|FOe0<ʸ*GƤ4&Q +Rs)ŻˊPHw#ѪS |qK]~y[obNÊv)?]O)̆^炶Ox!JyuV>޷dysX q8Zy?qCxLWHj"̂pg>K ;ޘ,Z[LjPBf\1ܜg7VQKcۇZvو1#]O!t5GJ*CPp[Fբ1oIf9dq*В_?H9*M0Ҟ9`VW9K$V=Y8f:W|x>y>}"d5K3fw) Eaͅ'K"/N ]'[xTA;܅HpܸʂMOdr f 9w+C:O듊׏(fc2[\%?=iPo7N͂t??^7و_<W$7C/_ղI;͘ջͶdkGt%ֵ;cjCpT6b.zta~iVʡN<54({u?2݅rhj2&;k܄4QCjdKk9%Ԗ>g!Г׹K@0_aCAo)TaJjH匍v29{!8 T @(VCcQHƟ-G~b̠̭WX"Q*o{w sW?aAE]BP3V_"bSJ414YqcD3;6hpIsB*͢ۄ${FbUj?r3xh g!$[]i~0,l62kvث_/DTfdf 8d Hr ? ~{@|D6}gX-o'd@@TCQәsk &$߽>G;2J)z 7i?j8 NVlSڰH  CC?TD?,jzFAm@Y"«P xH:+'1UlvJj+qtu)y,eTJ18R8w {O$MԚ?l;ʊ&3ý">i=#fIch:3+SR{SF _rL ۘ55!GZJ!7W#],HБe !)nj_ԯX:s ׎տ!0[EH~iM[E&A*5jf.-cmݒ2o*Xk1Bk$bх\z(z# p9٦vD,`UKe)8×іh3!Ha 8>ϋ}ς}-_gq&+.W½y.4xA [g/1Sl9 X2}QwݺS Z^5uuU&0!epȡ:>-eC2P $ E`7✖sW;}kǫKNF2HNoC4> B;h(4n黮faƶV Mj#%F&|D$[S|GZg1cV*+R@&Ḇ&x}M[I~cp-yhNds87*<g]5tIyN?*ouUUX9(m_i [HS_OG'E2]aGi4J[x RϽUD|BeSPZeLuN 촨8sۛSj z ӣEB(e> #8[u&Vd^!pڇ) S.$9X ~`e;09= 4>`i|VQcʩp;=0G HTZGpzV^O8' u爒mF";퉩Jo1Sz= C qjԿ5[7S;"K3O4yL뛈ycrL,n9P.]}jO@t4;A W)Q)O[ :0Z0NbcǠZ*T(My!k9+sϛfcf=?@ѷF> stream xڴweTZ-A w'kи.-{ޙY߷Xڧ !S7E@V4 ) K=+zDgo ҳrMoFzz8( h4z.@_@dgOgZZ)\A.&c0[ g`r37Y$hi2 7)dY@FE*@IA@[`kkjTPT( Q%?VoSdvVWTf3j#} OioF ˿M9蜜hiAƴէhbjpٚ>mq2|w25Z;VZQ&OaoDi94&zvJI,LVzVozvݿdo@C lm?i]3M Ww==1=+opmLZWoLIˈ+(H 4+Z{gӳ8oC*le(|7}Bo<كl]69Y:#S+C'``MdejǛ1@&t55 otZFzv@wS##`otwS `hj`6oKWtq+#o[%VkZXm5YY Fpt2 oKBFHz.m?&*?S;Sg-;@LKFYMmd2gې[oOoh9A [ M,=[[=8`da2M!Z\#-eetAl:ЛNbt (7? z7?@g@tF@7_#`{hFv9 3f|kև [j2Z @ҬߜnM ?RI޽ߘښ/?[_t֗?)LPyl ?N[Cd`|y h790rnE6_o_XdT15|i={[Sg +Mߴ+? gWifm(es/_ӷU7@gȀ,.C8gGU"bD P!wW GU*Zcl<߶0p2OWQ!šDFZ>TJSTg GKC+U?ނDDv=ٺLHRIdrw<_<)8 ڇ7d԰?b/rwݻq{(12tĂJ`- 111;1ե}6*wkagR^^i=} 0v@nyvGp ~p"U(Yߜm,)WDRhGu@+W͖m'5&`]~<@f.BHWOBR7&pkmr|F8U^xgҳY2ʮ?y{9ݲg'D">j)N5ng{Ҳ">j# j|,4c`TwlҕYb ù1Pr$.f+XG"FX KnJ.>Ղ.'s;̶m6o#n~M@N1SWvӐ5e^Tf|ElcvT%5A$(GWm"yAYj.$Nx=OktSĄW\{T>gN)|)C 4|# j?|7!ol@u/7rA?jq}(p=-&hgiV]u4L9lm`"7 ?WU[|["ꚊAIrf[lc@^f`<[S[vO$d\(=yȈn #s[CtQY/\Iql+.A|yVu5TؽJ&h W5?+tK`ԉw#V+nb-4wt˲S? ԊR듒wj'WzW+G}ɵN1h6 oVt_3 )a&J Y@mCMZ&b}hܧ8_FX Bj%r$ץs=D1́!Sq =)KhW ݀ 8pCwclqZWG|;s Q+@)n[3p;PUKr*ZZ D3iUUn 1rƏә/+~⹣$AQZqYOA*NXZV gk=8O;Z*6 zo6Q8B.үJAY*l}Vgj/jk+j^0 P5+aN#oCdZx}m'{6ʑ߰CUwGFudBh\ׂJ /V \sunX9V~ar CNjqbOY=&:4Eç^YAH.mfκŵXZґLYO"PRPn3gGNܼe_9 f7VZlV"(ХZnG~ +K{Ip!lF4 &@!HhVxBx0=v@/څC,֮E2wЌH G4>- kUؙܭi%EGf:1$NZIPd [Ron"NUpG(flxɪun^rS3,v/lr`1N5G9z G  wWKQC%EI+٣0d،Q{TfC#̻[Vү2{tB؝u@}ZNsa5ct~[#{'9ie>ZL)1+9qf<w~&_2Me|}#6s0]F C(`{-?w #L;wLEzOk$]Sb dDh2ҬҘ1->/F$~Y7i\VG:0'wݥ)mET\x8i5+wӶn_c04FkJLn(J`6Wcw8]VϩŮg{l%x>*DͣtGh>vMш$ygnX6;T,{X֛||虰*BwXqpFx7Bg9tWXS Z c]qx{"P/N-W`(-A s[> :4{ekğ|+(Lюd|Q{Q's[J<Գ(D Vygn@Bz@VDڦ"?LlOF<'#'τVíBߏAC =Kwʂha+5; e]vc]łh>Rp+ 9!SfEٌ 7OPOQ/ I}Z2+2s0!2 J~񪩑 ''uFRu$z B<as2$7en7NgaTGXWDa |Ove'5$ޚvTG=OGb /"IūˍUP]LŬ[aEF(ӽ3m?hYJ\hfLdYn/̖xy'lD ŋ C{YCDK ٔF* 4\ZgL>!ςg0Wn;? fhOfbợ;/!_SMκ$Ü/|usvc k;7Bo\ 0kЯn;h5X|.Xܾ}~NL`{RߤM1d]hGhdA =V#xh+`aY^Ids@L3f3o$HGN<\T_@X7 L /CVgʤl ZƐNUD23r/;ul %GGW">5,ڒq粇#.B(x)E0%ʢ,`mUBCARk=U ^]v㙬C::|sWKyDx ;"Y566cXm͕r;/G^ܾJڍCYPj5mg)t׌aPvgه$cuϗ v*A{uk]\\M WqKL@CCO&!"j^kZpڭF8Bj2~BaJ,x3@v=2aw"\>|E+qg5ԕs=ү= BYgrhъ%6/gaZ*#.%l.$ %Z=~'r[IơT"81$ \ .Z I~aWXarԯ0*stŲ@AqM4k|Ԉ18x6VpZj @m+}@oZٽa d4dގ/?nKEw?̦6]E,uK]HPա$Zꝓ2{Y[وn֝=CMAɪ,h= $DT}VxPCIN(mΜtjH-Vf C wPrTi8ii6P-%‡e2֜D;Z#°q:AQO14#:F6!Me|r6!9 MZlY3ojH;sdQYYo9sb>;i⹃鍵A0zT8:f}OkvQewzt0t~mOψGTNf^Rv+3TwXQJng&N`wmv:qK ANl$#wk12z`' d?eFylHIeb'q5\)-7%mi_Ϻ= 9*e1*D̮0ZBoK'B|71V Ֆp8mDG MJUUjhr  eH! {+ pQA>*~ oW0\p$RXhb7o@9(}R,˷Ós.U/͓\.%>[z;# hF[!Ht4^bvڀ < f$9'n.JL _#4uF1eȠL]8tAA_Ļ1b~i_TNA>Lo4J Y;_pu}Q3c I>KH>a] 5']FaSQbk1Ɂ:|YAT&@!wH,L5YWה>9l!_a4 9GgTeR/^bs\q AխJl+,_{:l|]j{.+OkSD L]}?oܮz|訚leWLXW bX.>9G _0YV] q3A]|w?ؤ1f?V7>{Jn)a`Í#OC|H.N fl) Z@.U򥋆Snp3 zw}^H7 `FcIraQb"3Dpv8CT*bf7e0ϾZQȅd3&,TQwP?Xfid ^r^v97!=_q-E//Dg5cf@E`~;Y -CĠӓh6N̦౨)6N=F#YьYˑb2@YphKG86Fw>TA%\__W5Ύ G& KlF,FT.~P'׽]GG+&˲i0KprM]G̗[i45q ͌.;~z5@.xnN~=qv9,u>>"AuIj8B+eĹPNgy4廓-׵|.V擝sQRX&-\~@ٚ֟_I@RD|}ݿO22ʆ]"Ξ\D+,y/ 'Nc "JF9塒5}jc\/;XBl(rͅC^̈I3z9ENezZ g[1tz >ZEWL4oɓ%Z]_옕, L;&HvcQCifKI4Fc!??śF4QtIͺܞ/IR&#֩$3Z_n;|ZѴG/ _fCI[Yi|ʓ2{Ώn2y|=jهrJbtњ^"72p2ɉ=I$ ߎpwv~, kZL}0Ж)D)~E&9xgp w?xL>xJUmv|]#z˧=S65MOda%@LA{^CL-峖wD ӭt"5.lM{ /˰=NFc9Dv8cNOp~Xٰ9H@ĝ.#P?KP; ߤWZ=_5هFlK':FYP}Y_Bȹs6[ WzMlŪvq̢Q+aG00 5 ie.-RD?),wS3V~xilAd{.fl#^¥ \-;Eg)N)BML0ToݪFuBUZ/1T%`Av^PҌ{e~w @ w:\X"{! 5A1`Z*׌L[+$ǘ>T@W@\OU>^*'xx#=|&KF?[^i2;w@_F_}S%ߗ>&YX]{R1ȣ,qΛJ~8ekKr{wZΉD>B BY6{7޽Mgxw*w:#$4[cEX$ bd*}/,VR{C;ZDܣq0śz˼uScݳ NX+g\sm5do8BGPTI: N\Y_3pKk}4J%&w{^}觴E >D١'E?$NPH=~:ȝ]`OKӎ4 /V^zauy' D\SV V#]&b}b%(~~Ho@|?Ƹ.-,3؂X?N*< "vI-mق)qiPBZb ρgo;ɘi7xP?ns^\{G$3@j$p d0wGqGyqֱ˭;oSm($fMٽb!1E:$WSWxl鯕RpG|<̪1z}q2<3}v:u|ps~ C%\wit;j+z}4h]b5W.ɘnzyu>m):رxtF)۲~n/7S&ӍjRN̦e T`.v]/-ڳ]vqf@h^b-sBO>Lj׃pJ6-38 ge (eԈѵh~hZ%kv[Z,ОU#3K_rQkc? r>gqU" _7*oP$cGonIP)1w7c2>LK5W]^K [,vw譍*"@AzW^PS "]wQ4chKöBMHϯ5WQ0%9 \L3 lyx9fՓQ^uK<+=mF|כ>]w+*>}SZ{5$C4 5SK‹[0MBGqp>NY8z>^WwɀS{\.!_xu/"Scxw@XL6QĽESCLy/O,H]dm Z7bu[ Ee<{:AZ w^@f[*nW#X~6,POx~5"<&z;Ysh2D|esz+sw{ſ&]pKTcz=u)`uRC2 !Ѿ\QmvR%)%UhLpxeb5UGSzr(1D2N\IO; V[xy.KG3ɯ|;5*PY q0'Y-~3= pQH`hݶqۚQ|GP= $ Tg`Tnh)>fTM!` '{qEr)n7V5p;U55|.-ݚ 3<&\_KwtiOpa={N9v@xb˹&3kt``7P-a_*"ųX)efr;ʃ.Tf]^ܤ0kOˤdJKڟ<8{b)|f%%@ W}Uڵ$'e;(Z 1;yޘ\[=CWIc CI> !iׁX†䔜+MHGgl!ΌYq< Cg|w&rܷsuW)r˜oICE>#`|2]M+/B馉uWoFr~YK'V@CV|l?Vd2e+G(_a%dK4SBA4!oRGqߊmKf;j_Zy̮uC>Ԓ.77t?dCWtXw`4E6%栣++ LKapQ!/y!.ioAX}/'/6.M2:~ޢjTqȐ(B3x9W{mS{5ɥ2oT,2ϿSV{J42<6"%woCx3`VPeVI!}Cd7^٠:|Z?ͳ/a*\5}|"thdS[Z '(_0LAŋY}jߗ2ɣ{]x PD^{/Iӧ$;P8=9GUӜbE=L|p_EVN4)n.k(c%I E>+WCDP8l<M&6kmVxU`GvTS5RUȉQ~BfPyz fSa  ?TMOsN/L(Xcq=S,zBIn b74=wyOlņOWiG@Ӎ 87sgͽ<,KM86+0?Xz(&gh}BI ~X"{=`\?6ټ)w#(1%9jj:uT+:2`u4'X e,d?.d! iVة^rS0+XC5;g@өUWQs<Γ0;>l-5y鄿|>0 tLNoBf(c}?n^7n}YNRh[f+/mZ>6$f+r6d%]Єo``n'Lz%_ow'=ku\uJq87 / E ta3jbu6V7*ϣ&>rw*zԞhn.R(Zv< A0kSh*v>t#)s]!Nm"|:#!*q{}U.В8xYHOYjqO_1S.X#~EKj1-|r(33"4AA޹ >n(# Ju$a{e]`ga,T!94#x^^qS7C@*TPʃWƁ& XP.F4UlBbb{%K@h È47i ȉ2K|D2Zb^>۫ GŸTx%&Íjrk`E ϛ xc<'B Y8xP.4~xJkc$Vf_ BH>ة1+Q_eLe L;]7U2x؇#RN~-"Oek(!ѺI;)>~bP`|H0J[k?dKÏ&ܱ6)k;I&ށϊ*fZL@G-BrdA+Hr{`x8W@hČ9dKY eRVTD%BIN5e oC<)/ΜӯiC*K܃$CʘNGa2qmt5)cNWruҥ"rBV l"tRQڿ›_%Qլxt>7twc&i >5{cTgwz笺 t,1`6ׄ!Ni% Cͪ2gW*1!Rk_{b=Vjx^1e:o %8f:+Ov>sI\RڻH> mC􅭳ͪ:_F~hu h``zCi pLF%r(#I% U2+S'-8sʸ:Rkyq3M_]L'iY=j+b9qPp<,?ŷ!mSEt[O؃`ȸ6ky@Gy3wd6&Mi^٪L=':[ٕ\B!Ks5SR,~)Em2e$xst3) X1\$GR%&7_[ط{> >Z^iT-eVv,3_$!5hA,\5rJטfr@`"(*^B5srb{Mwh SeZ=Ɇ{9?o.ֽSʂY)/5e+~c Y\IXtwm2ws  W|+IB di/%. {>&;,ќQIo3=JfFvld%P9LO ]\%?q1AhwPjmSD+({WQ9_?ˁ[j37J9s~d|yE}J]SFm'|@ fXJ&9p5w}9Ah—0*#Xx:2A嘕8F,叒Y$;W_}[3s֟m熟^L?Al^چZ`KJH֥B&lmf0UT_ts#>?^鬕v=?jXa^ԯf_+o(>E0kEğ^GG1fZKKH ` -I/̈;[4 ’r8Ї;U! `m>h,,+ :(tH7@kVu` 0$֜צ3q ?(6T`yTOS)_;4Q1 ēQْAfFIoB;dD[?xy55'bCmnn|_ :r]#/|)9Ix@ ɦ'\ yt̅`l ՉAR-fڝ7Ȅvjzn-VHHfID F)O Aݴ)p ?Pә.GM򃧍# X1qY9'Q:d\IE]uśޮYkclt3R3f2hl:'"?T{N5w$rٗ,~@ŕOɎ֯o.( OFYON0ޗ6DIêdb;n "xrC^&:84NS+˦ MOܻ(c_9rӵX-Y c@l2+ۙJ$RX>-o+.ٲƃvCAT)き oW֯1Q kT|,{hɔFL[qн= _Y'SVy*jVXgrR>;jgx_3,|v/p\^USiHk:YAP1?OӞN f\΂@u*"Fn@+LE xd,BيA"w?DJKOm-O"b+/UѠA㹡<2-0">__ (65&=j]rCt &f]TLrMYalk5&ki @c |y<S#z'_4u0x%ɥP.K 2l$ 7x{KPx˧ٯ|J3O60S@aKW=T3=bpj+.馂}kf8r$SG-ba!iCr|9`oWt_uZoz ȓ9/vˆu  Sgl<䳄SнU&r̚uf'ϜezվG.!73:HD^\cJ=PPпm9͝ %O9RC_|o(v䕀MUh>1f{+ͤ (T-KQ/꙯7&szbqQ\Ivbi#8B{4]iߛ]^ ]2#tD7gn5'j!G[51tLI;{ kaD#\4Gԡo 6p`L@ HpY-{^lK3̑ {G̀jke/pF8ە^J̐7>F w} u 3~'vhtͱasgX\M1y~k`r[kAw=]h`fGWVv_:ZTCh?%"ʄQ#o(P"U'̻x$XL_V!0vve |%(ȟ"^dvQF8 RA)!՘w(V<鍪b[wTby ;AZ"w@O\ɎA),fPdk 'ċUȟtp.8y}4)l) Ì<~@1\#nEBjDX~^A IP=>[Bמ$~tѻYz[X~aI2QvWr6NqHovuIdOE;\ _HQ ٱM;.SQm[v^`Ɩ1MokGӵsEg XD){0vȀJfem =MÊVScOzx՛Rw,CO|YLj԰4c@Ck.xք>] c@`R )Qfj'?t]e0yUwvgؚU//IwE3JS6a?,X/8.wViEQS`a9H\}8` ^m5 nw)w y%Lsooj+:-JuJ˶HU _T"g[r(|$4JGNSAVB3aĸK^]7 Xq[ɢvיñ.13򄚠˄aG\ǥW}6?I]N}DZKYW\ glGӔIT VqTsʣ'>a7PئJnZ>*j(g nPS42v|UV gIkIMa(ΥD̀]{b>bb5A.&{@T9$D% dP}SWq/ Dj1犼8ȴ0p͈O?nPG;j?B~b -ɋr^$V}A'Ur/$}쩑/v]*b(?@guIs0e&tIY[c\),?K2vj']A xE5M)"wXךs n׾}4#+BDm5aZ) endstream endobj 498 0 obj << /Length1 2960 /Length2 34908 /Length3 0 /Length 36544 /Filter /FlateDecode >> stream xڴeT\ݲ5 =@ 8n=;!Xp us!7ȬU2\UkoP)1;%@Ll̬yU{+*ʉHE% 4qvLFܻ`b5p[ق..BcXDo'2s0Yع&&^^`OXAρrsXD,"x,⯈"o `|ElW`~EW `}E`.rE("0Wo \T^+sQ{E`.Eh"0W\t\t_8߈gb?SVN0Clb*6kp')xyMfF\`3;p+ +6V0U X7kW.?kM\^iqr3{#XapٙCWjaZt-.dO_ !A^9q l 7g_,_LͰɽf:XW2`XouZ*?V8nkz,lqz=? ϭ>\?˲K|6pkA?\`wkW`\66p\Z9j>,s:?1.fk >8 X{/+gp&o-MG0?p`5Wg[9/WgkO=V lOQW'x2W 'Xp/Gٿަyv'W 4C\w0IZ/Q0YC|\+->N/E* lȠ.t7O kS=$VN\o+Jh2ke(,upNgƵ4~wGH&/k]Ƀ(ekv\D' Zt}ǎ4Y1uځ,zÒwZqɥ-ʷeR}D\>$ TȸBN|I1? 18.}u՗R${Rl)쥼U3B-ۄ<#y$Kb3dx36tu?'2ߌ>"J'@+mݲXBa(BrWIg~͚ KQrXo܅'(?_y|LzqP š+Qc(ZS9Ql,-=W҆ Ki;S!=6ZhfEϫ|V/o"DK2a#!XA) uަ"^}qؙ9gRMsŽh3,SCQe}@{'킬xr,$N4҈(+t H6(wIAo;L,># 'HCxj@BW=[bif݅G7 er>{cNFdџ3t ֈAR[d9U\Q˥KQKo[d*wb}uF\ƣ$wQԴv}o>?TaM~Z$xrt۲L*0#-4 ;+}l EثA]\ux`z4xJXT Xh:r"VCApL։F!?~zfP -1Μyhagp{AX;sBWM"5ևl1ƭ҄}Uup)35/sa6 0gЪe  4ErJuv2c}3[!3'dPe&GmYWQGAOiϣv;/;8IHA: Ħ1=bIr* cq>ϙP p=!adKhne3GIlcCϘ (싷øNSPqLZQsnعiDC{WU[9Suy(rgz2Aj_f_ 9:QM3dTÊm.$*Ӕ@-5E!d潗lC/(0kZcRE>&֦֝:VWJD{X/{b} ē}HzCzZX^qEnns+MN%wyQI&~Xuį)o_CО@"{o8w44>\\g<@r۠=^43 &JU1FyO n;Tl P~=R=.<0@=e/{ ]ţ# G칝,n+DSЫY~M!ƥw+L]U eew7h7c]QmKcoT_{Ha?B;rrod[i8Rfj,zq>cG@ &1iVMpD7ndS'vVߑ0y9QXgeNw,\IF/:0HL'D;vsb>B)Պi7hS%l%EF4u:doW-SGc4ɿ sEwK<8=Iv:IC3?R(RlJDk m8X"3W?Ěr7^"*fSELka1L  E}!Msd?~%fنϰFwH+WOe^UΛ„6R534⺙0.l҈H%*XIyg#Kwo] jXu[>TOū &g7X4nFڳWVgm{1sKE:jkX~o*!Z`k`8q,HSi@pj M8v ťF?'Qa< TV@j̀e ,6Z+zl٤ 2wEب.IVҬ\n\s,Z12TY4?&{Ѧ B, UwbT堏R}_vfƳdPyvl,슞֥iN6WE8x/)J8⸵C+.-vU8fh bǴ`X>#;wS #I#w,TA$^]MW03i %o~f4-tM򜆺r'Ӿ E=<[&mqRs178t+O{;2H/!V /p[b0ʥO4mX1V4!\-Ix5a Fc]zE Ql8nO3Z&h^Cu-tDzfE4"P ԡL'EHEtUJU؀kXVp0 4K۽<6AY™pՌ۰]~uzڑÂbIAܟ][(l;#;?|eQ:oxW%!!!ͦ0ӷaSw6ex qG6•a:tv',<߅V|rQdmGߤAAFq{q[CFzJ07 ^"Q s $_2֚[\f4"E?o[zK3VIYQF_1~*?FΜr&D3-H"oroNrr̹W[ Y)O6ӭ'8W*ҕ׵\E72{=/mbߨ vTa5-!h^]9e}s^ nZTw9jrp:NX [a79WB'ke"Fa5 ONxK|ʥrTGf6I7!06(mlb+uN0*V7fY=<9t,eC[dx\u/u10jNE˱tJ,iЅfh7yq]J:@erkrXqX+:vA'Cގe!@.4#w;u.s 5MݳA7=TJ%3/JN%bFmYƱ"eN&V>z$2j1ݥ߈?,?Kt;CkRLe܉v\IYnxZa ˧H+ݱ'َ2 1c_SPn=-OEk8fMZ/i즈{?jfQN!Bzywj n[ oy_ZO]K2,a9HZabZc rF!&?梩Q5i/Hj&2#u :":eQ {O#K/>5K$unt6/8T[c/B, hjJrK}'j58ݏaU9Fm$AYUH&D6;<Uop:z_Zb&a7$iw".JB2in@Ȱױ#I^-d Brk֫Daz }!$' "VP  *s?C(o2 7]dQZېWo DBUkOO|r4D=`Hy&{߆S?wM|_Be.W{[[}f '6Ty9P>۟7&߲F2%Fw+0Hۓ (c{m_dX4Jˉ'Dll&[0@LXq&q[%sl3hfz:xYPe \<'s2wxWwLiįˉT"Hb6~tVIdALςle 4/aq?:'uH@@~@w%bumA}?bR;S!/"S\*D"X6(JZ̙o٥cgcZES+)SK''3h[ &Ҁ݈U1V(֗ZvGz .ÂM:x|f*8RW:G쯚i"qrAQ)+O?> r~+wdJ@U >=ݭhr#*m~8E!R 言O8 ! Ψ6###(kT#+К[,VN;CnUC?T1L\0k,qk=Ee>= -(g9~?h܅jIp~Zs90d3Y+PDcQ3'gZT#&RlbqNw4˄\25S5 rÝALy­x!}.Oai$o.38YnMŨ(g 6 zvamo(g𿧯",XkQIMGL#\Y4WE\V↱L)۬oPF`uSXsu޼e |e"j㳧!V'U[vP0?CVJ0m7-[%zɞZQHoe<(6GF&MU qoԆ.?3bih{wyf1muM!UdARr>엳JjS==;G蹳C%*cϤ* ]5>J(h ʴs <7}#zojc1vs1 r;< %&@r%Ÿ6!jH͈ 1ejf{!kN\˾~Qui5ȕ땝3+<=wMRc9yjcι*߾ֱڐG J%rLc6 ϨY-b8d7A&7S-kH/Pg[YD7,2/{n+c/5XHF;Blh_ Q;K&o5F6v6DKv֙DV#y&LV5d÷_328WU\cC5H [˘0Sȯ /jc&,3 @ׇ_yu߅~'+b[鎇L6Eؗc4tpJ/e2pB*6ɧɋnеy]~j<N1!=∴m$l=KaS˻N$t"]ձsNܷS%VW8ƠzQcUlPdDs` /”jiF &G{9ol୨U1 .xmWq>3` د7 UNkwQRG{m9FwpO>< UɶcIT]V*p(gKNC8`dSH&RJ sv/a A]]wTiɗ.LasľycܮRk:6iC% 9k HtFfO>Bn"p[{b w'fߎ(L#[+:Dflrwߨf 9}gHmrdaWKϔQ5Α~k9wE%TlBP{V6KI1ϲ)h}!'B\HE5^d $WcT?g$d +^ui vd3PW}~؊qx{;7wSQVbG]#HF=qA%V-Etθ_xd)T%(Q^\o՟*Oᡛ<(ް'F.ONHCۼ8׎6F&9G;^ 0zwy_ˠ;>$DdAwr3܆ҮxPuv$qFV9ݒKoJyȿ5x'h E_Zg7B =*u__@|g}~o3_-U>~Vwl6FA$\yV3{{Œ<È@#Εk|{[\1CBQZ=[9SI8[`ݙ,Z~7[չ o <4nU|Zҙ (𪃫 a:R-rZ1ra`ͫ⪖X*!"*k_Na1$Z؀r$>nPाZeEddNI ش>ߗ*nbxCF8v!< fX27G dq$,utFc%AϟQ7\501W}"eo1ݡ6"߯*M44{ěZBp-T?'/VhR7TD6ko! kt+Fnu6#"x~|l鉀xMQT+L'6PIıJ@ hkmЅ7i ;ҩC\O<c-y"öo~|0,Wt6m=5V5=%@E\I9\o u]E y׋.PˆwR^P܍ME܇|:*?xl8wD۳$BǻM<)^5&ijXEA:;N;\V$؄ 9O 냁WEWHt@ypfLxvUmQ>b_M" CcƉTqZox/$QTO@=UZ׶8pYcf^=[2P s|ÿ1ɒ~tˀ-dP1#:}&BF۠D bX5,_lZ}}v`} ^zGv.y$EY?5P ^MX>sLKufOBHn<[n!=)66##,ڊp2FGзѩ䖐>>owve†*.'^RmioכX;7)D;`oG8OoV4qdZ6jNTFKB[`qKE銽fN'a9p-LWB.QDڵI%Д7W/B'r ?꺢>9K*] TpT1론ͬo:= RVue ŷ;1,{؞tb[)N)@W 4abUwf{/LmGCQ*kԞ'\u-(%nj̶2>HEZQQJh|j=0hXj<Bjr%jp oG(p{"'y^ļ'u(]4OP}(° ( iL_&_~}{|c5:WQbޠȧlQ'Q}#7ޒj6u.eHW┒sОw>BT0t10ie:חwGTqÙpp44fسlz\I{>n3 !Ea27q޹`ie:hS"78P(ox?kҌ+nfb6$g揮B >i3ĹZ'RlJ hq!k ,>#+jDjkG{|@OW:; #@vvLښ1Lb\V|چ[4GIFd*4mCz>dR L`~FR+3fљʖ|KVNkdu6#F|tm&g)IY*jIb,ȪyKʔ[ĜP6{lx/6I(ދهuk`*G`>  yK֩ \vS^SUz;_Q*W2=$!hBk>sPe?!wɽV:5-Cb4HK#Zdگ8~d)]I"W74nvS=QR ~'aމϷת>6'ŅOS \qXbHÙI*-J%!SE@1]L͈gU ^ c5H9Eқtօ,$aavov O;'AE{{ED@q.|jR0( FrdLp-Ƽ\Qo=j,%24 $']>/?dlGY7f}5 ,H!,evɅ~B~{vF]\ daTu^M0R @oY0](qO36\xC۳J.[_nse0j@޽hf%Ԉ7\_bZC)~ %f\ktY&#ḩCʏ?7Kj1̂B Mˮ?~`ބ@v됢˷o1+%Gڧ&0@n)iqh=yqJ2͒pUn{'[2,KhbsWqي5#^n3<{'YIHf]>s훻e}:Z0/2OZu>/[EW5 cYUC򧌎P<HbCvkݘ*6 Pp-Ȕ&NZ 9EgAރ6,q;tM209KT=a 2oXMHKw$nU A9qHmlwmM6uR r odf#|'kR:䷦tBת l>M ͵nx-G8L(:XflP*F*r8w)V [Aa-~#n)H嫵uKVT4*|֛0%Π+54s-(Ju^#P6Ş0 a#v~rrG"yJ-TMxW XwL yώEǔ1A kJXnCftٰ[NbA֡9/u*3 kD݄' y߮szЯY],4Fgp$hh IӦ|L S h,B['p*ۇp̥3m{"! ʍ%Z*v2]p%LOMloѽODz X6ZJt̨%Z{])!&?!Ω3Nv\^azBn;(tA2|fX%h8>!Mb#Y_dߊ1mVOSvWH͜AMlucrԞ288.Yfe]8tsۮM#R[c%^5:Ic?l)*ՎSfߛ01yJR^QoipX]#zk>)lKX{yBp|7r;4LM9D]̚dFU౜zYLeg3)\-7F (g 'j\oDZ}9z< di`MX߻%=3p$'i e ˍ:b*8 x6ߒfZ =ud ֳ ~jcNC*_d[>ٞQ"%8݇ ;zIveJ~":1imGh=|^ 3.CF"9 ָoƇAQ،ȜFIy'njV-:uϞ恉*+¾d,!SW;ॕ$]ʵ]>BMꚺv@[9}$hy\HVl_P$Ct]0m۶m۶i۶mcڶmOi}R/֡8oh1<([0nLmɡMhDH3 K#ZuqpY@`FNviɅ[dE[Kt3 enuu+?hEp;X%/:vvPx+wlREԦ࿐; 4!Ⱦ qG9MG62X^.6Y_VsvRXn>bn00_Z q[c.B85 B.j;S?g>l`Dbc$hXjoO)ck/*b6 0|rq!Jv0MUOĄY =`N^eR6{/):.+iSو8撿2Y>$|s@93;q]ts"PGc؟P^M_<\ O;i4;ޛ&j(}J_ܔ!IkW=e%l%kcí1WWd[ms=庼~G˸?*˷ SWe!)OC<5%TXrpZQ剏me hM|f^eQ+pl2OJ9CrIy~PSÔ:+!yBdl>qqz5Q7؎n̆jOn=.#aSatvE3$xgP5s1SPơ9iuG$ HG`9e<"D Z"@+\QYǟm[o4="xzihTꄧh q ':ՐǒlZ阴D6]&>jj&?'m] 1_XDLɂ^e *ZTT=nTU&f Y`?:M3dRH\p}/o*8W&`3F2w(@P\gݨUkS17$zÒ6l2ݗa&/[ ԏ\d2Yܽ v?(?HCRv!Ap E'#3GFГ+:^"6!B knpefT۠Y3%b9.XtDc'^4Si+ 2PCeI4v߮3BL!>,k6Bhq=ݮ\] $)fIbq/AR[-c |42#]Q3:쇛5GLCsCX1Z*QU@U9W;w7E6^[-D30 Γ\)$2eN(mjs,;v2-/HܶPoc3(-+Ն#`¨o:@]1gfeuQ漟*͡#,0gDBSF5LIx '^f!6xfsn#{w=C](#+!}|QJkb,upZzS* J}*(p@/9\qOUнvfY֝TR8ly|9Qo#=T3sRjG|\a b0g!|n*d3TGpCK;_a-i ()1A +d?-AO6`U,sq@LJ/=p4Ub_n:h;E3+{?Qf݀BhZ;॓(]m>LF<6t$yBSRx c ߤ B뚡 ^X.a$Mi6nG):d;eNcȱUҙKUQߜSܖm-Y`J嶄YADL|_`$@2gh1g?`Jl\Bc<tVpB<Ùuosιn ˣtF魒7AMzm|Pf 148jG"CO>}ܡh D67 5O49W@vQ,RI- |anF[R#gT6?֓vT2Bg:RT+ V@&w^4 8pp&2\^.{)4bAEL(Ns1mS Zw٩\2=Yʜ2 $.^gb ENuKf / YQ}a!)2sD,\}ƋAy {1Pˇ:r#X$`Pp,q=9:*ȶFX|h`0)x{\=Z""}р3> #٬H ]IEUu}o~KN-ݮjd ?o G2=fyjk{̀Jb`4*Z+5MG[,_a3Zqdz.SAd$b![)n«/Ͻ k"gJ—c_96²w.<F߬3QqNyS$] ݇?c Z|NK~ Ӥ Y"D[66{iVwBZBGp&2=#Ys[?*jd!83'!tj47dRciE S3%Ŷ,BL'ާOg4G/4<7;*`tg0S.+ `' 2[w}55ÎDNZQ<<^ޯ*{.˲Grz;NEFCK:nXR> |`ae2m Op[Brt2&OZt8>k39FQTC}_UCQCָ\mV/U=1Ҏ1#[kxe'Q%$ĥ~S,4(Jv>e &_V/d\8 TӈOϱZv萟B*6K]:6?p聾yA;4?Q:*K^ggp@a2G!b"f_a9ˊ7U\W3ip:/NO |wt.Ȃþʓ\y#N7/Y\Qz'c6;Ip`ʙ˜?A> 9sre WSfQGثVgk\Oa [_1WkTZxm,3}"kF3cY&G|g!Sa⯞oE-Tq?R;"!Xgd;+ %y':thڐxy xIGcm^bP߽M9È%j7APd6+o-iu6R!5_z/™@_'c49R-^d*{7G޳K|U9{\aAkp<ᵨ/Xqʚ h |.-ߞV2*9S|Ouv!f=+pEOH?Z V6A2 YmW5V ڜpP@=( *qه@NE/ A}'_ϷLyl[a轫'h!Pߣ^Z,M&G;T oVE&\[**rUrPr?t,^m!"vMbEmMcŇ'tHBm+EX3M~9Psz$E$ ErMvѴ-HP]ϴ87o]1qō2]9brf0Rdk4H`]Eb2o sQ|Tj௏wdmd}h>Kwvpw[]xYh)_6b;k(5M:rY,u7SC b{P(sK'XPKRtp13'`zrK%l8WwF)SZim͔BZ2-a W/av@mi3R cAHUx![. ᩘ:Po'(T(e>3(6R bsժ͢__rؙܥt4fW r]bN~ue9e{W^2Q&5bӽ?H">mi%]L+\[t7iǩo'Vt]R9E?YB\lۻ=H!~q$6ƯفpaqՏ %{uDUP5 ǨíGGmL5<ۧu"|  U_1}ao;_YA!e!7uER9^C0Qd=236'(<>F3ګlrچ]RA‰E" 6XäۻD"[RBg/سI:iN%Ai*|Zr<7Ь-49.U\IV3<|3c0ΤGD#÷xEwy~o:@T^+C[g MV0423Y!UcwԢEzJOk1D%~ #*Z63Z 9`aZ:Οg 3D/I49A$p3z. sq. nܳr/颐|C؋z+wNP=.{:ߥ5gQ{?Շ2f͚|eJ9_:sUW S[KǫB?٦2yiK;ߊy4샯$0tpΧ {bh-<DŽ+2bUK/-[qV^N)}? ƣ@~.A"r?ʮݐMLW2HZ}ɂ-c3.BU7D)I7m2E0z*-OJVizh \IN%٠z8CKk&7?P#~e͖) =$w؆(2TbU?8uĕV"msЛ(+r!VixħyV4CE*^F1-^=^;/3Yo1WNgM$zp!*ff謻q|5(_۱s!1:Ff~JN :W,k+D=jNF<4DZ!<瑦 UhX ѸJڀ{e 1=4n?@~;;jY9 Uqa4.!bdBq!=k]ʹR7r0L P }j [Q }쁵MUABe CˠȣpXil?MOiMWaEԞr{)s7EmKs G.nYp[}jOjE7C(=NBLgnY7(yH"q#N H 5?eϊ⌂}me8B@mGsWִbj:^#S0%h6Kو0 @03s{23́A4C՟FTyv9 xh70,UP ÷S?D>jO%Ȥ;\ N '7 a%WF>K8hs AvLMW[I!N߷%?_P0 +yRUlP%>xX>Cv-5ʀ= 3Lukyc?/6Tqc{/~*% 3s@؅U6㸫_,TG3}OņODžoB*cIq .naTZ/ڴr{9C;p;g*xA}<: NUƚ@_>s%/YZ?5G S+K?+MuL8T]hd.`]x%T3jnHf 4g<ǖQ6s0HrH=V'>*Cg#-ҕO|IIv.gJ"RjWGʴaV{_Qe)l2F%\ 5St7<^-#sUs'W{uxhKnz!gk8*~g͘Jb `eԁ' *VGd5 ̧INL%a'Pk{>?Hi%_w/S {^,J0{ .ʁr;FlZe3 R)F\CXovYM6(5¯+݌lzmT@&=sǪMBP)W~v蜑J̳:u+f.`\χva qliWG#8:%thj(*ox>&F቙6:Nڞ8^# LU;آ=>Uk.3=G=i>{o#qh]f84(i14n^o}?=?[} Kyf zZZK]Ԟ ;$H[-\i)8Fƥ3nSԟ0^`]#Z?o2ƿ;"Ŋu߾ spC.01Ey@xUY9$qs+cLLMuE2b!s Ǻ"Xyԇd-G#Qtbúc&Qyat2a/ ]bMiEXUC#?E#:g!c+2cJD6[NUdo!4?:9B[;03OjIНgv@WcP˥'sU> 6l^wɜ0oyasNjS8f4V_>[XQP@wȵI%4k?:Gg¯=g0S3]٬|.v%g ;Pj}=Oh,B[|&/tCZPH*(1(KC0^*KLץܺRI=HBrgG? ]y^ϷGګGGkY(`.lA|%*HՓ`lywh~-b=k@*N]w9zLts;w!uxְ3Ec>JYM%@%Qi^!RZ\ζ]A㇉tHYKחsXhި|VJ)l6̬pɭR*e (ʒ4y4ry&8r9ˆUYERH}3W6&N\'v:1՟f#NL1d`7e0p,~hB[c܍Aλ(C]^ O=$d>EjZ0|q%#O 9.CNO=c.%ך T}}vPֶ&#Gcd_ R5ΨW%qkR +sۈ )e^Y,k7+~Y/L= ]a9;%3^l$B9 WS٬jɫ)bt€c+@ =^&Jٮ'zpؿ^(x a2@)&,ֆW o⸕Cޞ#.XHㄝH ,=)EHrÁļw{#j=;s29(f`ϕ]wT0= I6\CIr~ؽIo*֕p؊ϗ&Љ55ߣtqv{IЄO{NMQ7 A ZjeR+@F:wu(gؿ.JE |*􎸐q]$T^"`TdyXOׯ.#YD}Pٹo] b:.KL++NH:6w~]myl dEN!$;pqKS{$˥L+ pv,p˯#cR˖|a񣒫RU}Xf0qfBAI /u @U;#5wB*,P~] .s'o`vst MݦZKE;z'/Z!3 (x+l)6,@:p0{Z rB?~[xp+rkbz:IЗh*7!nG'; MWD?풞KQ~o\JnLY˲j|"|ķf&I ٸ7)ltXsc}F9{oN!߽ͺS-k OS6!&yBnԻn~&{E$|\tdgtOt\B| M.3Rqygf^^;XKe,Fp^2A8(uV-!E%^ "2n*x FTyhD> s -Y|q%NUV(ouj*;5r'6OHWkCn쾭Qq>#SQtIִM ?QޜoTyhI?h ¶'|-UW9of@$ ͪN>/΍k=,4aH|`IZBԿg*Lbn#Xoo0_+8)ٌfZmXI%0/[xi ]Ip2Aw=4#YR41!b\J`]?a;I6h耂Rde.t1 n\KB&Z@o|_w  Wstcr3K-ZE:N- {񹥶/yÍ2kH45:9;CSqzNOAIR1̏p-gW}piwg a*[r9C yF :2~Pm=cT(VTWQe^X_?=fZSћsǮñZ=-_u7m:wJ9l`t0<\&Ijfk]t;_BytX9v Dy^Hc;~" ps"?[{Kacν?U&Ig9&buK {PZ6ғ6̵ I[x Sg-36N xh=Ԅ&5MlCU7%{'VIJSڱ[.ڂ3zb\2I]7)( B;.^D3I~@\Pu~JAM5닏=;g~`qfدsrclU9Fm||`BMƺr+k~5oFu_U%AOЀV=%cQKpb9U}i@OZvB}3¹i9έµ!Y-BssҎBSYh8f}eUk1K Prs׿_NDUt9ܷ}£ue+2K@9yi6t\;+TzBevJSn^--sF'I 6^"r鵚%̄M8Ʉz*½#[ Q0}a:q2ǟ]X}͓T}J,ZRC9v[ݮ"FTps ^B7 'w} QZ?;0:4Gvɾ Sbm5prM-qyiu&>Tx9bjJZ\e[3ܐzJ8¯>ry Wͨ a J3mv1W/9>ŋrg_E>n; &yιép&NQ 5[W@\*#/ŝ7 !WȒk@֌~f1ptYv|͑2@T>R]0Q jjC)Ӕi4PxEksxzRn }g] C`"ёրg^[<{}DP]_F>G:}~9wM"/n!U+3M+MNp#vӒρ+y)MDS=AψS0ytpun8J5)Bt}b3/@S'H3aHa!mQ9]fJJ^d5KՇD~'w~"|=-NtbiD/_"$9B} 0EʅX$}@{3l4O1BN.gwyNo<2pLjIqxMco3~ΫxR+)WR]dhG_+]o(! 7( Yձ{w{܂Ig YpBa{ P@*.T N8N+᳸}G(""s*‡ՄD`J`$`LxVe)ײw`=t͝X޳ !B{[/A{qNwt}"AFdrLֳw~ԅƴz)Ո%'d#u8"H2e[wS!8ȩ[įIYT#1riH2A@~c_d.^&3hFDΑ\DٰgYoYڦ\! uReBv |c Ld[\(͌5?)J~0x?E\aei![-^!.K2uT58y-pp+-T6qI~r),eB(˪fZv4MH1U|Puy"1_]G,f^r Mmr1Xtlp<'T5 a>XZ>V;vR4Ѱ!^Xp`j4= _lB@8k9g)70^Ղ< sẏ46W;Y@JUHV+ͷv*6 j$]xjA]X#`z_-WZ7d-Sֈjc{cZfUʳHLxV)t ~sC_JKՁEܹ o#t;6t噬/0f|ܘ!DȫRN86꒤y6Yƽyx)O 5";|9)ÚD)6*&ůzk>}Vu80T _툄z;# zR @\#/$Y#H-ƝB rY\mhH־|c?iT)eKiS7Dy0V3u'^zY0M&}PIvaucg>sݻ#?$^ɾ XFʕ{8r3X+`V[vEs!6 jB*/HNϨn3`j|7FF.9%NsC|9fͰau,x&@ ff'oyVL˭qcYL(JD6g:Nc nX'95`^W:^ 6Pm U16VjAB ZFU7o-o7ۤY< h̿@܆e聀N}2sw۴1xZlHd߼GTy/$G<6Qҏ_.S^@i(SК8ˎ eצ[4Y:KJ\F\ Goۈ{;}0{- yN Nt(3ctuReCxr*"=r'pÒI¦yN9,E> stream xڴuTۺ=[^݊kpݡwP܊)s>;~##y3;\kd$jf G= ɃYY@f6&$JJqG1 d/a XxXYXXx(R@{ `P㿀2 hb6 Ҿ,,쌌2cڀ\lfY&&"hLƶ9@ &RUPVezKr^5&@JCMϫ:hPTSO$+{\NV7[#K0؁Օ r`r?uK+'+vu" [lLN?AA{-ވi/we,WV[كo`c/hFqgG?5=eݺl=]9cN?oddvWF {?sfeMATQ棤:@o3y'*!rX)io&{ }VoZ͔/ M)ˤg)پim߱aY1&GS{! ?4)$MAfV6N.;˛ 89or6%3=pp{AHl/`6_`6d0fTfo22; r 9 ro7O6$-ؿdԲ2[Ehq7-ϿE<989opsQZ^o27@7)y)uJcHdWXJ^ O0?' $rȀ…~T yi>}$OAض/k-_*'nTD}|Q%EGs442vkpLgƷ4Fyۻ_ѯͲ6a9b-t.Nv@_b{E9tЧk/k Xŋn\u/)AM8v\wEIΖ'?2)WiK}yL>T[1zWsZD<*.pЩL|,nynrUMkF ը#2&LIs㰮Cj]B0o4Rg1o>L8ÙΩ%Q, %bɄ_nm1ԊkP71,Z訥a|.UKsXJӈrŠ!> $8XLbt:9s񎄦/~snrI_cQFxULǦoԺhp O%#:Aa} L@v ӊfzڬGjAfqI薋sFe4HXe!Y x@]vYIj. `!IW jV{]/m GUZy-8 :, 3-35<+/ݼ&6sBVnMIR^Ŵ}-6iLxs*NmFh-Fd!HS +96aEFjM%12Ņ Y OFQfftJ>JnAUk^C\E5 UgwVr6p6epk{윯ҭSIf GZ AnϪڿ/W̆3aq7 , .dQ +ˡuEY'h^[*_G"תxE(|e~ng/IKqLuvLVi}W}BN!BH}8Q݋{~ ijs1p҆=6sx>DJGG#];BwKUVOK9|H}#٩^tI\JNf0G!5|i6 +ߕ+[n'c Y}4DL;V%؞wGb nhAյ+@GF:@nsk Ec16`F0އgsfD53L )Y=8O:OLcUst-*@կ6Ɂ\Θ9q8ƋkzpqO|1ebU}ẆϊgJ987\(ܖ7#_)+-3s7Ԥy¡p Lh |~>AxJ_2)T3b[6p2ĖO fo$m6~웉ePjlQ|PHUr ҅ݝ߇Z~_~J_dZ!?k`aKꄊIU@cKcK݀g|`:4Ibȣ{h\ ڄ4p'6e)$=͓0|(:㣍'ڡ>R$"3Rr.IZFG/xl]_n77/Fi&{_"X' Q-?*އ:h^ZP tB4!4t%4qQ.(̊KC9"?9~BNjFy 1B%"˄5ZsR yM( Vxw4';1v ݈愍|2 G c3,L(8ė>Ȫh>dO9{8nb:F/0PZDVT!`ZQKO`E \.yZ_ZCÒe ٸ0"qgCYѫф}7-*OW†ϰYd]Be;e]R^)KkkX^HQFן1PjTRnȦ}?˾j4r&1L"M3w0R?Rt~:|1:@i'YT)a,,w+5ե%9M38ȭ%*ϥ onL7??ᣦ5w7?J+m1,ކTw&Sj͠ݠ-kh)R1{ E?gQ*fTCV韕UA>;V"&0ʂ6*` !>RT 61frڧ:yM8 '&d *\Nnb{$θߕ11`'r˱k)o|% t:!ϼ OWRy.bnDl2*{NCr\Uf pɀo>0N šcE'8WW^=j 蚩`W,*l(:B  :X<ż³ 8?JPbrj1 %l\7/E^ƶѯKT}$i:%a.=iT^ OqKx1tH$ :3{.J5q|@*=o63zGo<dzӤ@GBȷaO,/E賐ꇘ\.^_ХIQg!y9@%k0.P PxxS4E<r;.bD_5߮i4y7_B"ut[wh}(=r$cQ%@J> s>;8s5r%awcHoXqnj1]T!L]r7y8Uxǵ La9 !1{֏wFڷy lڸ#cOL?V'77r; 6tƵUn\};Ӹ&Zd\/bhȕ6Ta[כ;) u_JӃԟw+}< (Sc4#/ᾔ2z"NmLWwfG=M17IS Sr :,r7-l}KYqx~M95ߓjAEcxqU_aMgZ fd8hbޠXp!=ߝ+/MQFOvf?۟g!IUikDWNKsgˏcpGm'EkK[&;2D'8CIA~E5y/`4$]F~FLTD BIFDri@=Is!kKJ{UB9BjGȐ-*'JhӒ%53L]c{ <:LgO]2VXoӹ7+S%1R9;y$F[{ qgamXj٠(̈-bp7؏]︇KG} .=:Z,Z帤_#B1?ǭ}92!Icڳa)=9tcWOq*Kxu_w)Q4Uzl"`diaFyaȿ`~SU5_zD S{8Z.1.*Zwzo>k}h7ᎀP;7.]r9+tf˛eqt^JūXw-ƇGC#NaJG9F LB>>M^7ڇzmˋ{h=b^&d#ѩ P  .1"Z dGJARP@r:P< ]0鉊ihCfҌ$j#ZdWe! '-PN1̰!A Y.&M%$C&;ޅh=LVvZ|)~ځ,5}Z>UyP!k3K "PVnSuݹowvUSzz8`2rCL5B3 @~KefYR d0󌼙fWKD@ڛa$XxSEû Sb7>gP$5[=pEyi^L a`^@^.  I4]S1g9rRa(eѦU; wQC޹a}+?wo\gc(GfUL_gA0ftw"|Xb9Їwk ؄'G+=;;p]Y" ;w2L Yk`mkgNscT߿3zIU8pR*S= "QkB_hmcyPͷ bN8sfj/BEj@K Bo- 4Qk+6ffA2剧Ze9%hт!q{Ɲ\G }.A@ M;$tE Um3BF z?iH>}"Y5V:EWp̀[d]@T6ϨִEE6fuD!UxmWDHԫղZe#ɒMng״X' ?q09+5]4˗PLq\;t7T!]?LVU*'i$=Qv@SPԟ( 鼏OD5GpMkg b4e(%ۼZCqj,ʅ> s=%"D"]P$̛O!G8%TՋr{?QhEZB9B?PO(63N1׷/z;J|y[zS9 v )>,\,iM:v=DO1\ܵI׹Pđ'oxZGZB8ΖGù }]Ş 3_9يh9ZX(bW6XaMN0$.8LfɄ]fԮ;?h9 TcPk.6 j?ޏijV3|I/@FH[:;DY0tZ#gDef޻mӫrȵtOcŚYrtX8tzj)bo QȽ WP)kpBR[~;9e[GEи8.a_ %>| 7^*ZTZAZ[H2}9L B7y#}qZ*=Ω7"j svt)0?fDElb)HWiSeƅtr＃gG>g)UI Pcvx} B:s{ 0,+NP.,KU-|a z0#=)z+|:^vPT& *:J}釰NC3UY @:;qqV>!R]B[߮ \s'c6ɖmẩ8V5`ps%,Is58,GB{0p&hm`!<5(TdoKiݢXs iD !l lڤ݃R-Zn Ep%;˜_Fñt"x3v\,{rr[a}ՃkfUBc ^C'w}CN1YV4OiwYXj{Ne^<#*EyI]݌wYf ֐*q-3So0M+)͘Ć c1Ġݐ"SR!|đRF@Ӎʝ8e3EЉHU7% )Q0vv!ޝ'1O;p7~sg/,T9|~FXNx~w=_1cۮT\9x&6 1Z ~bCK|P.mU@=?IMO|HYK DR=lAn1Ȇ|@ 8b}3bvv:sO-1/R$6g""뭃/oTeE9"֢`p&\e&;Q EM6_:*?{JlK*Ջ.2Y (h ;̳)TxT$y.,qyY6U 6:#|DEvc<ӵl$!k31c&{l?1skmma_1k>A~E{= ׎]Bƴ|W>/ spq3] +o+n8 (gNF"ʸ 9aGsKW/0<ܿ 9۬N *#}lzH8`[MsH/!`٘O 񜡅un#j96jgZ0|ϞLn(iRE*蘝 f^^s[ Z(@U4+}T{ή1$b̳A>Pzy`,#=qAy67So_sN k UXLNq4U SZ9KB۽*Z}2^^l͍q/F͢&}`_hŏP'ի4`I&QWgRuf9 ]uy`,&|T{V;S$2vzg&2C^̃dƄnNN3cVxE]driҁA2U~nn&~ z(2B6YYۄŒeNxHburma* }WOF=ޜZ o XVN< S`y1_oG^̒;4Bz>oo=4Y>̬ru1$~V7_z3LX<ﹰseIP\(Mx0V͜M?Lҿ/,kc0٩ UnobT Kla1b-Fl"E472Z nä1I8YqeX17ĕdܸ{\ML-wJ;-ǩ5Ǥ?4YɠpLmC ū"|>Ё|0à*74Bls{7Ԃg3m\)w,nYX$q!hxO,?Ի¥y74f#Q4]4.;T8|}ku͍3'g@S9eW:.anb*x#qmKU"k Jgmq韭Zjy/mo;(0M^{5Lj۾eo#Wo}9,Z^<`x+iF)4xJbd `Ʉ*VS3Z>WH&[N)FPKt{+mKhZg#\V-XB|l{2.0m,L_d3}ˮ͑LzV<{n]!ˣXn@ŷ`*`BKd͗Q]2=fddǜ}6dX<^sWXunp snmCPJb TFqI\`ֺv2~ e|KBd۔ E>/6Y,$o$i3`(*D#=)̯ WwhJN?ô%[ ]b,aO<܋FZCK%_͆ ^fP$EӜ!>813ܯs/돌eql(h1(H>Ddv{%u' z$یz?wK&/7@jwSѓ vEҩpp?>bc-l=YC09\ Xڌh.sHL]%%ފlԃJn[; dÍ$=~do{>"iy~|FXMbSY }"28\>Y!EfE̲^K\i ,splnTla$-*Wy:Hr?% ه+̊9Aa/zaY4b [}/ռm:V fOX_D9Iˆ;V)c9ݠ"̯j|sѵo7@7ÿZs048'U46Κz[2:'/Fo@Q6[#I.G{x .^,o"2twm}ʱpx(NX3M4.8f)ӯĽC~ Mʃ#`fx s#iC@Tz0xrS1[(Lѐ+u} ]p7[Ŭq6O͐y^ ,$n9Ģ]9Eà))mTX9kVesHRDVWzY;j$1AtV\Hh޲,#n o+Hz^']>^<(Ol2fP1X24ԗ. (3{l=6(HVKm/ҳM'0 /rJ]Gï^:SȺ C*/r_^DaCLg?3\>w:L&%<9v.٪xE/9[Ub)ډ{'<T CRDt@L c h䬄q>B< jw QtlU|\12i*nl;ۈ B[L MM g O_!t DyMn]_9Cq'<{I:/}+5c&${u?h|^V4|.oLtRȻcN㕍`}|b9v:|ZꒁPq!Q`ܒ? SHZ, Dg-Hx DFgWR0l8*C0i$]]4X|̓Zo*0 5I JHQ 3pPl\ OCjxgI6Njg1MCԐ_d ^Vb)0ʄϝ\]o;k6}"5{eIrhuUpcEi`lIP2*fH%@RH&/Җ7#2t2f >b:NLV&-F}"OqbJ/ "zYhxە{XeR[cb<@>_s.T߈*g2_ Їȣ#A c괠w5I_S>|%b_Z) `wwՌږUr1uܻd /A%P8jOTZT4JXtdQ}d?Z. 7K H~xj9HEi B]Rhzo^qejҩp=qքs)>ŎV|k4Qs?ǎ;wa/Sg -}3k~nNM`]Phs"z$b%Fj#6/>HKGOw}PYҞǭ'մ[.-gx frWBڎ`ʿFn|ۥ86RtF; Y<$K\Zo#/ *ueMtlMQm\n4~]"^#sٕ]mGJjxx9%hQ:[yR4^c)]wW 7s@"hK oi6A8I635_/g) 7G̨9rW;g6"z c~rNH;5;1H;Y P hLFz:=~fQFѩN}:p&OC&NCR a`zRLu0D(2-5-Kx>?mK=ANOqtO@@7Dw64=S)vJߦ-;hnrM[M{r6#>1 #zGWT{%؋$SI$^S!ҲIQtڔ~4^VWI;p&ͿHMʇ&&@)ZS#c$WǪ8>Ԉ m!3pۥ]3qEJK+_;wޓ()>/)#tv0qƮ;ǟC7z 7E oO 9jDvKq`h:Hp)lw x={ob3 9aoGIڿX .ד9pWIwBX 7i{3~=ākmyQFv;ϝ=h"2v]5Tnt_;-4҇lT]{ٞ0=?O2%. ډ֩p&1qkC?ܰSնDz3к~pg'xM62y=Jȏ;^^.gr(Z 1Lbt y  \H9⮧(ի2YńEӥ0 0u>Q{'m3|I~20- )zbҫ%凷- Ӧ7"U&3wNYSo %cu11E˥rX~z>\(]([᫓jjsW1kİnI=QeVToG Ug3JYӫ:絔J؃ qQa`]Q@S~ R΍"~f*yRL6PX(UgS)m=찶z{j߸c-odju$u@-w32p!qb16#&9蝅ZEwI.M)\"4hTvjbΠ4=$zYܡ0]vgHaܪfFv-j\FY;/@ G 2a؄װunn'aqѢX !PtRbJ=yB÷V؛EW,!%&8L0A:g ;ܴŲqʸT |xo#frD1^RRRnWȶd-K^6 gO(CpF-X Lxl~L0]j"ĻLJ? m9.tb'StҲ^qw,!֝0w ~00BD;\cW#UwtFF0]|a,fGs斈yc]EYTGd {R'_9!Vʊ-5:|ät;f/X%" pw z},V=1|0o|gtlD؎)ityhg@Jr<{mϩ8 -5.+b嘝/of~QiƘ)f3YODhhᏔm 忩Sժ,Aca -jqw*-oaQ 60>Yf> )K |q,goɢB%"T}:X6Sl(vUn]TDo^HG{0[sAqN;kWfO5WE1f[u)q 뭷!lw jzl@ e-9"nE\j^1`CsI4<60O8YP{ VW-_dCucuBŘc{ m*Q:SZsdQ _f>ZxIisiU tSM% .J3 dj@1莢P<%P-JY>w452,nԐ̼,M+SSg|oW]#BF=k1GYx.(n'YH7[7jDŽnOT υ%5/lowAB▲Wu+Gxװ_d$#̜A#8Fk)lFV`D?:RkkP*)}yJY)hW`x8= .SUMyxy?f6~F6m"SY~Id,J-F/Vݒ> |QQU0CF*Kh9pvv <şn#j@Fh%Jӽ驥33鞸{0lT M0{MP.q9d4re1qp =!Fl:}g)pT&,**e3QrV&IJ8ahkW N$Οi0k$9VQ{z"#ͣ >:O\x+^\?5_:0H=)B-T77"x͉BZƩ/_MMd6it;kɗHnn q`Ţ?:~Sln[>9)$~Z%)_ qch0 =PҎD߬4}?u#Y"jAl^⧣qo& } R{kp.~8 =PlzK:&aTF%|dMK;yagn{\5޻ s߲Q 7*1MV<.Y?t9 eX) u}G4H HqճZɘy)?qe_ 2#ÀQKq&=Vd%Uc[o[ڌ :M:UжQ`ٝj|JyF*CvCF3f'%-Vk;cH@4qSI#DlQźѱχDދ _=r%ɷ4Hk2zͼ&\o6SH RY?Cj'qȓoZ.F^'LGĔ,,OCf_lj,]F]t's|R/ 9'TrfWX gڊb,܌ki[J.3e "٠!ra qgUd]^NU4Q[,(*ebQc&&uC("3~xI6U*%6ˎy82!b>nLV'H|!Ҝiu`9ZU#V-m@ePVq2\Q .Յi^$I$1,R &;-MPcAHSL- .n'.36GXR3A[8uw[@eY !t+zT~#8U$|P ìqDD>caUIBV3N`ZqX P(~m0 Rgx˜HDy4~,%bYWm AmmwАq@@)x-!#&n*88K u;jU|kS*_f w—"RR}k ͂h'G2K0`OXꖀ^ܐjRSusk̈>WZs WrxY_wnsX!K!(/T3*,̠IDWțP? _[ f|1a?YUFqj-j!)1BOwo-֞4aӌM"c:eZBTQ8(%c|s(B=saq$y7;PJӍi*<ПSKYqVi1Fi3qwB$R1}/-R` ;8C=" C; jcLKR(XynLR!S3,B:"~ū^ cM*M/{kIrZe/v #k׾ 5?|V%LQ붦 $jcg{56DZTM+b{cFSu1\&zuQ`,eߨ7H'4 %<%|18xܡ!/o-+1`.( DPd/w 8?pt^+&_4޷^ jW] "[Y.A֮%;C2ZZ"Td_8uخ>]jRc[oW*F_7HYZ[,04)]"6Kz)Pu,G+[J5}Hzt )> %i/t@q?qpW,]Ȝx[yэ'tW#_̘)>GdFTqy,[ZJ8](;D`6s~kxT.Omwç!|w_Rx@\m X\"fkHsꏒVF yjHChG;䰛PlCmHaz)cfB]+ \W>'ynyIK;%y&~si{v!9.orT߸"S`/=Sӵrs6M:@eSx]Jepb7PůA'O/j-S"3Qa$B wYDj c,03K)]Ӊ$5. ]muΏ;[R6 z$Y^XdOyaV9"zbA\;fn&h6F#ҁwqd t0Ǘ /V pRU,;zƓN%3SD vE%T>1aQZLTJcjM/U-L%i"X⃽}b7/) Ɲ:Cz>^U^cʎ_13*f CyҊO߸DrוN\S7`+ ̀t%nɶπG r%t5lp7 -Rx֗ ]_HHst_+" M1mv[ڹsSh4 kyKz\jnN#>(o3DIk: 3evHU^̽R+H8}M \f5g 5n, .P~MV' (R{ V/~qG&l)@-5+1{m٢REi@աhY >N|_h endstream endobj 502 0 obj << /Length1 2993 /Length2 30848 /Length3 0 /Length 32544 /Filter /FlateDecode >> stream xڴuX>LJ H7 HwtwKC !!] !-[~sZLIAl :102`fRhۊ9y\NE'H*$ :@cw 4&,B!= vA(yq;g!Y;0#g?ϴfmC^%B dr@r@RAn@Hשapb, D'W_ ?WGB/u B!3_ i2{ny`U'#r+Drt!/YG?EDn  q>j?wkt /Y~j )/(aU+)>F/A,oˠ*I$kRX?eTYhGއM\x8GQ= C~ޯf_&'_}*%>| y:qB[ֲZ4҄`6h~;6ʨGxv0?wX]wmOj]g僤3șlEUB*DE$u" p#@VrLeoUTH oUIѴE}t-lK,t'C90T: |{s:B,9E_  sXtrE(BTzQh.}kD@츕eg_цs](h.[q4 vL@7mþ-q/3SO5Z3u9MsuG+ o3kDІv̩eDozJɧE㼱^ўM% ^s$/0NDNL_Ao;HOz3f: AZ601T8&\1n҅tq-,7c6tƹ )d~d%!lpzܷzs>WmlԢ@"@@lDSBaVJfȅ e"r* D\ʹ"Gq*ج)F< px/-:DXF9Oct:Prg3Q8MRS;+l,I>rrY܅XX9{9~52^&yslX4ڂ49dF|mnH;r?ŝCGEףs$D.`B zXzu\/3B ,x4qJG@W5CIJ@՝59FXFb|96i'h#wmqvτh]"<ʄ.\9cT?J!Hȧ5d$SKnXT˜jk/zbGRS/(jo2u>~9n_Uv)P‘9u>D2SZzZN„ݶAzd}<[_;,ٶ+쑴`WOs8P{OB±K"+y_^!Xt3(\htvP)qІk|3 nնT(LVSx.ο ci3ur J,ح6?2D8^#ҁZB~+^%M1sʢ t{鉘^ZUM~Ao}U^mea %Oorb\ħn)kiz+Ldm ze%qGZV`SႫKZKx]%`G^Mh@MR[ZrA.Ul(>ɵ+ym&ɴXN*Ö6u):Z.[*FB.>Ꟊ7]0I4f@)*?&D''n-Jys`&akh#p)hZTcj*;YVVi1hd =;v8=Aok}a`j|XVs5\%&=JӤܝշ$EYm~t2Y~|?8@O_jw1N"`*ҽ8cᬻp<>-7tpd.Ls/>[CPkH5|<#A2eU7n)Y|<.LYbO&] IQ=01CzqKK)VDmu'­\M$Ñ7Ky@MI;r} E&( }~6L4`8tn~N#]h(/n1KBeH)Y'Ԁ0yB޵p\BH `1adJwş ,:o';pLRF'AS!;RLMAe-إ:6;h0Hz))- [k CFWWp0j찱OCix#H["O82KHtWa-Bq6`Hy~fl{h*~&7ާ|tS x؛S N{-Fi ϩ uƔz Xz(Jw3TAb͜6_"[˛@)쌉\1Oy{m]\%@e0|폫xpڝHt[4=3d.!p=1:o1# e uRCpНPv'+|—9n'NPHfaCPeA?2"rU$P!hj4#iy$&Cf =jKUu%_(gPѐ1%16:{^( rn4qg$|W@D@*LXvI~bCdE5p>"HXͨ'JKUE٥IѺ͡B√׫g$L׬A.5UVR0>MT;ݨ{ra-tܔEHɎvL"HU),| $Ҫ4 E^=՝#(1ƋԥLrjcql ks\OͲO#%B0KD,HkrORAYكJ;|Kk񼠛ȇ ?,p_~l(4>ps8/MG_y[{/f=&cض#N>Uc>C<+gx93yZUym}feJfaX,2}RGlJ&M -Aީآ"Zv6^s_ 8 11rZq0N6,fJwNmZe"+dUԆ?eqWmYD<燁mAEh$$$?Oa$7vc]L%~dQGMd$P{443ط U\G"{ZAU_F#W7d>xvĿL9a`Զ K5zk/ BiBK("ak[듣rZ, K5`fNdwUup5ykXlQay?t"߆ J#AmEz[W@2cz$|+jlZ~]'C}ռHbX},.vYm;QIAώ&{ ~Z C245:6|g vޝDwIw0ߕw{c44bG^ V^LBPt*JSx5 >W9v|V.TqzlT#0"{ۋz(_ˬ9ĻxPh2DXBo_6:h7m[/+Ge\/mʍ*d?l ex@MGY+v(+wDCZS(#D)]?)yL";1&MO, ME)Xh7腗"IsxGV+~w0h4XZJ;,WXCX(q6)3/NKne(g5&P6_kd]]X^p`iLSgObH[RUn!y >+:PM˱pw.N1X`0QJCE8%r"÷8^ k}.iDnNj^)M(O} )jFX.Ĺ=J㗷+~)3~JFG+gjjMa: N[!'|M9{Zfz(qWt:[y bt)*MZ?# 8M6ze_F%&%˪N|VJLO잧m]5IIqu 4_þI K#Q>+vۮ8k7 gEYc^D] ίj,{gz(5#Hu\[ű^ e堥m+$e 4X1kzRO3jMB+Bw?OXv5GHɼ~ro /^Vp,pJ5Jxt꛱&H.ŚuP!g|+PKAcRoĪHA:5W))ν~&nS/+or9&CjUMMĝF!Knf/ĥ_vb|/ܚG [RS鵂{F)*4|y]t׾J}gX`k؁2 !IKV*9&Av 6ScMhv8T"gGcC~ʺG^ͻ6?oL`9iN2#<3jYxEԌ(ǖM1_4Y% y$5!֔Z^7,m9p6ǽJ}<ηw상mMߜH LX{#f[`O1ORlمd O#01_ML~ U‘BSkl,9T|D* z k>**'rYo}E/:}]W\);M|} R۔<ᾒ R.㎇2}s_)Րe\~%$k qSaX b@@cQfpU^ap_{1̷8[H':ygq[kjPo[PسM-qbЄ 7>a4tO g5#Hl+ m[gnI|,c*yxjb^ѭ8c jXI (zQYx8gDcf# e7h {azvtVLvի胐c 2 nLӷhgZv}t#4<3KjGAT嗫:Mj 0ZT_vy7yłNXC՚P%X9/:E?uN3O O*KYK\ܢ)9H:]%Vѯ(s,ztBK[2L5[m 穂KgO -L`.Km۰iTU.UjiZX?Ǯ<+2++9bmWms| z0RSVZ`D:ZN /Űf&cEeGyq߾_1L3?Ƌg؂桠C%w4< qć+ ShxCghәP13Ro&X%j&S?"T:#2PY~V6fO|t-2yhj^b@zm'|{of='93]nQdv/"S$)N$$.6a'!1(d-IGpu@ W Q 7&~`) [ۙﻙ1 }HATfLO4a>8]dI)M#{F p&wV~WQpVGG=ށsV,6B&ܗRqnB<`d_(Gm7 9J91dY .e/YnN]:bNC:V_X< &mAܯ,D C.M¦"LG=r~ZHLk8b9=Jsș]"-㶚 L+nO~wѭY!R'\{UVbh'uf k$ƒsxBk /WW|\kÎMۈ}1@0ĘEԍCe'UXQ"SyB I}}n{E Fs܂oB=ݡ \도‹Lyw2ՆV^Ux*a>gҒ}IMlz\SruT~Qӡ}*(!w5.r "dl-K{Lb(ش^@~-W&rDM4.ShQ¸? -L8p(5F0qǧ/[Rq"S /#{pMO|o ~P)rDkmLd\oZa.2k6h6IDeJ-A#O;J6~PL6 NZc%IO9|ߦ!nH d ]^"[zt._8"MW" Z_8~F23p>^u>e3*'{.a3QS,)MjH+͓J }_Mzn۾':ς2F?ѵۧ~؃z3%жurc\./HXwyMvJ`-a@_S{p:Lty

212 (_-_/K\1;Ҟ ua,)20eaB4?oezEzz<[6 ߑx ^.nUEkM n|BRU/STȯ6+%7^.kttWSkRw Z^S{Pb dUZٱ\z=yr8LZ2#Kڽth&ܞK۹:Ѷ`)1o=gVNT_.*~rBi;A셅bDGnoH(ʗoCsr^u?iFmKd=GV|64`"wU'ŲsO3n DX5.9o=Хu;EkSTz}q+eLnHY xoׄ?!vB4J;mD3֎$R |AMz1{eֈzf&P%7/mz ?5OTٸ 6< Ѿ%`"=I$S.ccOe򩯸KE=s)wtȶg6ZLA+ղ;YDY(sY@O~[21aӣk {r4fz,:d;?:7Mpn}[#U:8%9!SjP>BRIZdqV?e')JƿNl(*Aݹ;-V +o =6R^7(8"5sc'Uf^kQ~4Ȇ@ni ;`XWeix:NIw:77|T,fO8s )څp>AZ0=mBn&LnC}^8߻BZ#jXNKl=0uPABXil(@H< 8SvH+s ]49ݓFeW `$|p7`ՃշWXX~^ h>+x-O+og^R}GBJ <+5x%90){/3ZRЁR*` \OR|,k/An MweFYb"sb]mž3Kk8ٯS#XB3jzw=`UZC/ bB7 6ǼݢÊb [U߼numR\5R aot2ss.9oљ ꔧܡEœ*pgU}AB7X4j(o{21OS[E_}!xO<|K V wOכ\BPv~Ty `H@G!)va3:, ^8,Ž2eKM\wJL8Kª.*|Q Y.΁.1eפY5·{9_(HC8e >gP\HL4Ckt-ƵX07jI{,d7)G7qT(`X~:u0?ZyϞlZtm;-DS|@sMKp^Ʌ9 .XU5vu ͭ8 /,y,:P 2RorM2ĉlI><}k2ڜl34<+7zTc7:cHuwmBUc+2|Lt摍\I}>ˬa|KCiM &z(o;]~&rwyk^=̃+ ̵2]3&s|Aibp@snlO}q~1T}%SU?p7VX:a $/_n쫁; 8([iE8~/{LJY#6Q~I"̊o1g!jp6-,#ޜgDede}@AkO'C@mg2_X'V$оOψ;G+_0~_-u-fpW+݀4D0 (! ;)xWl`hl%LdR,="|ťo; q UBGUuיDOE%4]; 9fe6+4HIJ+VB.{c@*dFL#`QyVSfojhɑ玔І:%r94~# n=ЪDˆz'W!C İ 0B`~[ݰcD֐rsIem_WϚvD_w4)[$0b&/:}uZB@rް*>(5>/TDY8i$[ٜsڢp's?\+͛1X(Zz rXȪrL+3_,)"ok5˩0򌪡0 78DEbZXFJ0F{A\%oQ@*пNsZHv~LSl&]WD5rts,Li׭ AXڂ6wpDsppK12e`qYYݣtJ ? J|i|N|+XFt)xH[wJ-kp?$'Qk`2Շؗ$^Haqz S#ș~@U{uNT%Ur{/`%.W:W'IޝguV=Rklv "g]QA%0p^!ך&Thjû6Ɉ&% Nϋ~f U~% rFh , rA nV1}˂lJvn);b* uT~/AyV'R)?Q~,ꭍ)!O,9k[yrq$FWus/|jw&}1_nCx:4i$mG47Vtr6jZ&ʍ=}0[dӦ\u;&WTY|5#Mb*o > ^Jw!OwGrSyfS6 x3cqmid[9kWEܸB庈 ګ uaF- ^A֛:'`{@:誐&<(R%xnzT־^)v: i%ҥg }_mӶdDf@}[;זQ[:tv @ ee}NER]T/]$1czie& %uɂeTv|@,Ybr5,5>Kzolg^9ݛFM^ωD.Gáxւ3UzēE07TdMS/ i(LKO;ey0M %" QP'X׆/H|D{_Ⱦ6*N]CySҨot!TUm:~2^h]_FXױx7_E1vn$k ppziC-2 }U3r-.cl85{J[Sԏen#I "͌ h D:ڠ+[,凜n >t[Drj)Hі>)*sd!r|R [@5sosM6uήxR&Qz=3Ua}TZk:w{&<1![+c̙ʤpci*9a7JF= duFcz/5W{ߡg|X< _םG"ڿ]t׉fCFߋ BԸ,U +\`-jttG C/ST1g"UhdV`xZb|kU3@.G--5 tS8.fg!g!% V:QBf~d8ڒEx}.JvۭO՘g1z5AŘ[=/&:G.ꦋmAyOշC1P&Qx8GD`-q=1_xSR$t4gÝpYE=c~Np5ٜBa9N Λ%]Yޥ9͛Ns?~r<&h IlP1`DB`9kD >|΁mZ&6|(Pe(œ 9'د^]*ɨwS#6նT}IxЖ8"eޜ))ɾtz }㬝Aowܽ"HZ~_;P jAVAN %,!5K1>uR{}Ju0ǫ4m }RQV$;/+(`ݔ 9.K0^sQFݵ@ni?K:y:m/R- z Vb?hWEI3} f @9RCu^[?morX< rK- T<l4G/$XQ_XuQdʩXk>x@ :cVDx<%ȕ _`~QMFs&1 e~0HARSk?6D̳-Y|' C DfyrPU;-M 3,0-T,g҃$kXDJ3;i!QpW~ۅCQiQf-)=+iw}ૡM~.DGz,0.'AJ6M#wS>zrLS6}bd}CB"g?3 B2%t v%Cl)ᒀ$.| ݃4ENU{ CUʌҊL)͈(KIʿ7zV"Y8Eaef -(c(r Ęn>4 {6 {8EZsb,c$BZ`~m_1DUe (IaM:RX,D4(X&tF3+L``f W(/. s6`d]7GK2}`"߆҈3̉΋Y#+%c@t͂SMZ ,,T$[Yk+cSGfCYBohI{;APyʕ1\;nl~JED;Е!TD ȯ̦!jV)vb,$ե0nayJt\9G k5"Ǯl$!P^&oMߌ‹& t0kݝ!r]r<f u/%) #aQCR{وő~,fmX1"X0 p K6ؽͺwyܦOd"jBf= iVB$4 T ?^gfYϱLĸѡ3eĸ/˿t-6z`ÅEoF}k`emybneu2uoA<ϺxPx% V@%BQß4n*PH61#@t:J'\:[>u_̂9×9ޔ˪nV 4vg|:6ZIVqB<)R=F| S#rzUEa٨wʷ{E+aC_T6+"vOgY҂CuJ*{*b'9jrt02/K =BgϐS/~MF ?F3Hv#>;=/.q]aቫzu0!MOwonsf$A@J/5. *)qp :.mhi@L.Q+y]4b~ޱ`i6Cww%D$ƺ&F5v՜-XzI|Sdw0k7mNy4q3@EeÂsyMu rq4Л_E&?܆C,H3)au: axT&C[Gy|֑d])ʟW}QČZ)+:|qB-lsGv{`)eGlxUPtqٕz ;YfnHw1׭/IH~qSN:Ѹ?>-k Ң: z|"hJ)&ƨ VEnP,~BJ:Maz]nD;B5g Al ֫3rddv\6 M+qbM3%'&3 ,,qHG|jc\7š?⑟2@71mzTtZ̮M,7tχpϛ\_䍂r9ٯui%~Bh=*'*j7b@>l+Xw7G1&'zZpg-(wfBw:bU_)_X(=,):o*#`uKX^ dr<ź5"p\-I B=<B͠Q9^ Kצcv&ycoň픻XB$e64DV>0*R="~fk),$XK3`zT;<$3|!cnC'V`*FFeB팝EF[ْ$XV^QAxvcZ.4T(]Z `jjb=bPg A=޶ oeG&ȩ 'CX|Thzq+KGG‘qkQ2<1Q}LrA r܇ Zw2kiNȅz+O[G9-"ZI-~E\V -&Ŀ!J5v@; WS&HAv>!|zҊA _T[p0?,􍀃"xz=4MčK2rʅa*M m<8(0ȟH>a"Yfu jNވi&ɠJ; Ct,n\Tk\z~fXDƓ缁Tyr]U9*X*-O~>q1>BGNư-9WuecuH/i.XW">Sp;;I`;"J$@5z@'NƟ{>܂;ip%@KKYDF\]aJcBY-9f m0t`'49lEz?J)Ýkg@SםV S4ٝ'X$ =+`*!Ho~-8]RC8 L)I,g&b砾mzp4CS F|an9=5S2-? o(zϔs$nCH_U#F ::0 Qʞ`;Tn#粠<`/Dʹ1*I @S y><+tEK$gKA92¤p @veu5W !u(V4$dwRw<()u]䙿G2fjwOʼ)K*߫Yp4ɼזT-sԶ\7Gnd)VS{bHC!~S' $a=r%޿hNCuQ?м W/JY0jt8F8 Ri9}[]b{EA{C="v#i3l6U}{ٰɔD]ȑLτdHd=U/^])֙: %͔|WӿlHxv.쮺w>Y@uK$G.X96X]ksqe-=gnKx%[KPՌm/3'xӇ[ ~{ I2IXkbe$1uA=c(WvMyf Ȋ -z+c!X  <=zl~2lu*#MŦmOUU 5\O0j=>d5[ 0~lT>J>곆Sc[TD CfKwGC2pחئ1Xm^.^aI yOmSzM" ƀ{qK-q;ᚫ*DlsP;}}gH1$:!EISCc^66Qc8@2^X l,7"׷ > Ǣ6,]ӄGC^7 hѰe何C8:0qh&޲|7u_3i<$%TtKO7o*ȠSǒ: b>[K֗8;Zf'`AL@ƿǏVs̲8`&f®Bg#X\,o~D)2i/VA,x*[C'R,JzR>K/ě0CA;uY3Z%8SAt<$L>g3Sb # $_:` 5.Qr"rUCS_$VA)IbmN|c'@˚g_`Yo WY7(9aq.Y\2h"#|GPi>Q; TE SUעP=JK b!1am"<(" "kk5tf6H.@c,QogTRt`@ C9ukmǁ#z1ӤqD[ h@4MHԑde|_&^79[2Ǜ1ơ 5ww"Ԥr9֕,\)mj ;ZuHtʣ#[.PO\fƍ; P3\n]q"3~z&BQaiEdr=&mY` șm x,́(İw9+W9TyS?מҤƑ+X4 h0~TNk3w:ͻ6MDjɂo|ƆUlä2DPrPK >@CDŬ]6@9IK"h=#Z !5`A,MerP\H7 KǰNNp<:7E'eHA #Whr QK='ZI.+V* cz":kj3m󰳃v@|“ؐaYen*y[M3)"O?R|{2%!cgk:djٓ:cGZgfte=jA YF-akï;4Z%ai]5j}%.⺬¼QBk^r ZOͣ HəF:V#5߫t{tJa[7"<ę!]g;mo HgѪn AN2 ?28j}ƻ2#lIհL#Qܵ,e'a^;Lo# |cl:\{^ 2UϏ mʿA3`2 p <~@ (j7t^᷐.  0s[\t?M!Bn~}6$)ܴ}҂cj=J;hmaU2圂]I_0âT#kI.xVuD~pTٟt,Zs2v(D| ) %s!7gPL{; FXmMw!iIZ5\y̍չʷ׵gx:pSÆ/vzf5@&@>ySuJ[4J=;̖u 9ܷ!{#:+QhH4"7Ʀр X)Yl`?e2z^D|oKZG{%j!^@:/ߐr)̍K;<JzV6w[ZJ(̅ʎIi1E,VX8xYdO+E&G/h)YTO(ZpT.}Kf2mSkʂ1Q2pm?7c ;Տ]Dl?=x&B )z=v"1); TbjFԘ^&urڶ'ln/ IFuDyClP5K vUAr[tx6P{E\|9%xGWE,?cҽLPWHY% cAOFްNx"nS<[PDbm|[4S+% 5Tv1x5 bN$=ݼ/&C{f]Z+Kz3+i%aJuG*H=[B~#fX*4c[Qn3*g ]n*se}h>e`!ws\DNu$Ѳ O%5H1D0< J7m?)X7EL-+pdv(ɱ4FWu7B.zC\v "XQEoY!;UAS҆tBDS/}Hbj5{j|`4Ǽ I`N c;fHpH3r^H/e춸D+P#AT&{I,qqpc0X]}@~Tpo>R Eӑ r( "~]n#P_?o8+,36m]^0,qsW utfI(!}FS7.o= sW2oU0 Y4<|z[߿QsT6UW\.JR1."ѺzuHFZQg!m($$U\/>6[U&GczTJF~I{Kw|y7iymm( i0>Ƨ\hGi\/oT@S#1W6wA}a kCWxsЉ:1L487Vsl={y?.[tq֗c>a+xyX^׍f^;HyoƟ_\g:rd[Z;KE-hgҔy{xUZ51;&2fa${Z$rֵ'e7" R.JKѢUz"{ h؉KbE'c{9//cKb< k9{ؚJ.- (}ң^<ͥO*\T#=T!-Ph+"&Wn0 ,oRVRF$s|e:o.%?BWjggP!οeGO\-6܄/U2Jz/鴪"{܉hP/Z9R#Gr\Fw/(Y(}˷Ay D'94\cזvh_Jizܣjd8B#: 85<}@D޵{"f ɸI׆0teZhx~W~;.Sv땎n[Y xZJ,P[y }r055{ ~OwdqEр#| 6 t`%bɟ>xVHأj]]չX䶅o{,K=brt\<|Էg})^M WZ'3қeE͵c# + Q/ gmZ` : VbV1GHUٷySZ3#)<~{Zx ]vh6SC8V8f+IE%ZLXЀb4ҷaq&ЪL#פNʼn. j$L|gO]VԮ3ЁJL:j4KnnJ-l1,y;L.1xg AH|mP±kj|wƾV_(1tT&z nRdِ>ٷ]0,NO줥:\r0[VZzC5Ԛ쳉\ p/JҼZWڞ396VMyOڢ:RAqT疧)4| >~ 7u<'#^&[J^\x^vWzպeN]'V Ra@m&ҍlg5JӘ8bVxYY}< }ŀ7M55űDWr96<@+zHս5?2G v CQlV2ec]1(y) qH5s eŰ+_!ڳNk iCtވs/FMB~*Ԝ;ps :8j烷8ޅ_#6f&mx8/>*HN4*,yGA +\xNi9G)(19dVC}-=CUb;t/vi/\7µei`WeW8$$Ov2e z&D' I{Gm1mfoutM(meYϩ s&T去]VQ$bQYRaZʣHj}i>5!_qUOR8(P~HÖ؊ ˍ%O/{Uk ^TI1&=T<˳,q--KC5Tj +?Uy$vM6 xa !WWP{[3'CKq80,$5Y3Wȹ]o!_J mt5>C!œ{jYyTԟyN9*ؿ7i_lwTG΋j;_ȤQj2+{>m,WLN,VC Mk$g t6v{I9 +N fӪYQ_(0Wt<{ ZmAx^ÁUk2"0?GecHzSx=vbH[.[?dǃ^oY_aKNT T%Ex0|bvf!vcb#'K!Sޙ?NK5>hSCVh3m.ۛmHw/+K}&-3#N~PQNu?d?6&3N XvFժ F =9{4𤞏s t 4m*-Cq~ N2ڹ&݈+G&)/оT aɠGU6h9H{/+2{ xy#('f΅'śn&E3^+86&eQpQϊp6Cw*5=IAD.V^%-K }'~6y|&^eT8:6XQ҂|3_Ypg+"-;y6з+`s28ANcsJ'2*!W#V#!x+9v _=M}DGjVq6k@ᔒT|ul5BinA gc  ցl,XOea8 7jj/J5۸L=_ffFh}ed_Gk3hpQC4h֜ܳ)$:G$=++WMct;'Kx Dz2:r!χ~mڄHE o:&ճ" P>F&zOxnt ԙڨ!%8AEw. ܟ]JIUTΞ\vq4=R'+]%sg[޺ׄ2=728(z4LTfl޳ŐLdжb򈈺z1&"F$f:-j"IC cL-Lta*x-F5/Vӵ~"9dtVzY@gB2ttu;Ar~ o#ZӇXz&֋ _Ɗ4ʂ cY`m"o_ M&sR6̴14v`}TNx쁄)u_{57r7^oyiFNL`+O){{Y[<ؖp{%Y/|X B .^.,$bLz'y$_ê9W_X+/ZMi.s6Pm'@宱!zojIp5 lЇnWUdFxZ7Tt?tJe~(SMj.$QpSaZ g#S@G$ AGt◅eʋ1>$}oUϿ6m^AόpO|D!0rVۤLwCB̑aVpSصB,ճ^JX0XJun0}X&7VrlFb!I X~V PCb?Un/+c)riݷڻOjޫC!w,/>L+``@p=3zULU 孆Fj?t*EEpYc.!n"+dk6w6XXC[@,WE)#cGE˧葩J,% Rk*q}IJh É]tUu'i(xrf8aqޥ9C [lyC7yx5z CՍ5fC2.tEVşmlnfzIyM8fIRdד_ɂT@N'jl.xSa9e,쁁Qk}5m~_v![au5% aU#G<tYXi'K _]8KggH۹Ҝ)6\Q;G Sũ۽_c v03=&,A*݌,sJD^tIPnЀqq.~u+gJza;`iuNUרSBMC#q6H%oփ_Jފ S8+l:ވ=Cd P9eF6 P_ *k %Tg< oI]hk6ǡD`O §"> +Y H1h7ȗ<͞A˜;?\mST,ت>&Ѿq(^0zEhWWu]Go>62(X#,dʬ'.B7`,/2 1/ƶK"83%WuKCV<]mAtzăV =" ꘫ? {ILG/ԙ4EBg]?2֕Cﯫa;}MG4Ph)|;BHM-ePX-"1a_WAHjdGtgxwsu /- G{ˀ [:†θR LaޣG: "8tMv;sUYmʗ:#;{%d@@}ˍr-7SQbT -M49o#̰߉ Dc G̤[7GCH^wr府hzb$^L!񂋌'5gJ3R{)MEJ,=}p7J{b»9}> stream xڴuT=Lw7"0twtww343ttw -4H7 {?߫~}Xkh(4Yĭ@0ȝ] 9Y,(44@sw;0H(sZC2](4Y  qZ,|@ws-g /vsg0w ;" vqu5 ˯~eK-^nvs@U`hkh [zmMi M&+d`MggHjji2U@f֯Z@D 3@E  ,%&k'B~KZ"ۺ; yyyx]mXҧek: @G_YAn {_kP܀d; $Aט܀ؚp2A KH/hE@ @\?`̌̽b 7?ji[AnvnnX9wfvl*2ҚZ,J(!{kiD;9Cįv?+7D9`qss qpBYaHp5yg{C3f'RCD%Ҟheqr=7vĭJ 2m%vdr=2;$wWA6|!YEBal !rB2A_R%ߐ2}>dDCRߢ!cLl{!tuT~!_g?BDRs@f<oflH-ǂCf#2qYy!c?@BX} jݟš`G9d_yC.?GۏyY ㇬ d[+W_.b? (K`K0œ4'';H (BZsh߁B@z4aO뭩5Vbʁ$:گs+;) ˸sڒڣG]wqؗFmoJf9>:x/bD8 /!ּW|qƬ(`T ˀ)HK8ndS2i8610OL]1:` ʦ#WPh)&Tmԗ%_Z[䒭(}7]r2o;'ζ7. =5 t_*oʅ(}aEpZx۰IFE9*$;u!.%A΃ -x hyS{s|Խ/h}TWbTZFi&G~MUjk^ͻz|4ǟEݎ6~xٹ?i ~ VA兊]@0ۃxe=M${fE)A \ng4'?%MTփR\(h\"#e{ONE[NFnRV﹂=tͣ)K?\nזa*ɋ+Euo2#]x,{gҊSvX tɄ)~9 :faٴl4 yA[cOck/lBJM8XܙHLwi(N?;&CiU(j@'iGM22qč jid4 ,?|;ZcCsfa&0fɻ,J[Clߙ渌H~hd y'i(q4 /)6̡bkxỾ ʚiP?o6Kt=dо}N4$<\s v7;@kоF" aye ]e +[ir@xg-q34Ş!|ԋ)Ѝ6)f NR]BidBLkl2Z:܇rO#, *OXLOuJ$r"9XqÙged.=/vMҖT֋6]BSHR(n/xB5nbW9sۼdY "ny[v3UңSL[8DnUr0e]!š>||;p #db]GRoJ X+g^5o:8>n V;5<-8`4ݓɦAy& Zoo^e$sLV-$+mvnh=:=[V 55:=I^pX hsv]! \H 2ؤqp^˺ڶjӌ-q4aY鉺R>s d`5iۛ P{SP#~QR[$iFK/A*^}RcqqIU=8K7u?,˩!X}nE,v)^Ĉ|c3(-Vi#,!\ ZL[E1 ͊f"8|&ö4Lc}[zBQODdHŇyM0 Z5a.#:TɝQ$Vv"0c|Jt9q#~L_hg'm7]U@US~TLIz*j8ԹE 8%p1pb:XoҁNm{gAqa =J*@D0iFL@B$r#|xBSJwdĉ^-μΊ7k}q&?;k-Y 0<A>-!-?k@{XisX 8#n;D-5,rka trN u_ Yͳ D]<fM\7ºvnJoa  V9F9(M2JGkdtA#Qo"j0~V#p^} -8!2ȷ3wS9Pj֓]樗"0ƇW4.ޜC1*D'Z0f#zӳH͎ l&Wl[1yIgo 9%ՓџU48i׫}RvH^vh) sL'GjQ ;(CEי21G(E:6wbd$Q!O أ5`?<XԺщG e ӎ:uD7?#‰O@P;Cm#՗H5,#{P[dӴYF>.-&l ?< PM ^XA'gT{G8ayL]ZA&6utw,9g5, 5Ж#ш o}J.d0B{KuZpmZcTx;[OT>_L'n*,p(_l zW=Nc^d]ǐȲ{I6k,RK, kO}r1Kڱ|ư]ù]߶nÈ;L]i5}Vhӣ>u5 mZWpoX++阔{J'(30_*`- dB6q^ I4Nj[ ,oR9[/0dL\Qb%m<7f|'-Og^-ӻע/^L4]h9[O+#lPՠLxRH\Yl%5kh{ A>\;'<# K1zVyL-EI-ԓc?78lv(^G^8Ppo&٭]%'{Ţ >&dib𩘜4蟫↊Q+M|;>pB3ĢO|\N~&\H ~;֔3*˜i7 PR,>)msnohbRQA7:?6('I=^Zg@0M{[N!4I.Z_Ƞ&_ی,1g71n"vKիbm'AI[.{'3quŷ.iaHԁs?`;>'iLQP>iemm%Hw%aóK&WXȗ]lxsLt&d#-|sku𓪐YD6_I3w +ӀO$J<(o}h6!Q I DK{Z"rbZ/|Y'V<>ެ&|y{s )wMW2rOgŽОtNYy5NFBA}9NGi9Zf{]Y~^+'V,]*P`W5[v;}uߕ@16De̼y!pߺ~`ig,sˆN E'fQJ,( )*x%Gle2JbL"Vfz FValŹ`g ?sc"JaGgOt66FEsVGko1(d;mu#Z]"7.Vd(z*9j-;!J t\6)LKkpFl4ebIVxJYP (-*-E!nvo0;mzP~Շ+;:!lYv; L-K(ᦕANza7&ÆFBU@ANDaۜܜwJ q(>tl >#FxkͶ0E(UW"7g['Np1IAb+=V? ߁?tQLG}uvkzq`US MF!#(\șK/n=ԫbݤ -v d x=J8JXq3PiAw,WЀHh wYU:;q %獜zw V/~&j)juU*\+I~V&d=_T7 @-F3j8syG":WH?ϖۍ:wCWu5g>NKfZN53H)V6M)Tmd'#ؾϏ e`7~.l`3({Ζ;ASFt{,<,|.M72#|\lw[w?%FԒdflsΫsxBFxwkSb` ֕xcnipYBTpbDWIް4.NwgXuq%cՎ8D΂IћFI`۴qxcךߠ$5z0 O2p0mxd-,h=>TP 8!Y |Wl> j"rŊ+SiB}^0Z )nET ݋25jCKq8%'"[5-fq%^zJ+Ŏ9<аb>h{|/L7%n%9aVoI7+d磗UnI? J Bߏ ӟXޔ"*7K"2qmy6^zS;{:0VxER,MTkokD`UZlZu /~1|ᮞt1t',U=iKx/qȣHօ[E;E9"Y~c^Vyb@c-/56l@0-"gw@uNl x-{,¹`4y҄CûghxvgKS ~.럯A\r)$_/@ ]BV{m$L,/)N17G ݱ)?nCѱb|V":GX58+k䈙ez~4~>~_{d+/+@gr1$7dqro'k° XP·Ho vi̳fSL\ jm6$+m!kǑufzxfk_,ib3zti#S0| 6т闒OL[澯3}Ox} 3^4f6oEr{IcBJvkFk"߽<+s>w8'4Ըt:yAGwіч9*.9vjKأJ|?3Ʋ_1s c [ *!-\r{b7z!w))VUByFäBUaBi.5 i^&EM…tG굏QghtҰTQy|.yLmUVlך٧c3-`kzV5M}DŽSo^,^N=i[LZ^|]gIM({FDF\oꅨޒ: =_W9`dIM6m|)K9WFba~fz|{ښ*pȐ` dsسgct$v5Ԃ c6'_u{ 6 @u6dϳ ߢVFc5:5kJw5³YGkotysՋo7Ad4B͎c[`,&y!*j WJ#S#Iwh= s ރ[{463LU#TRc>{Z@a紣q[ E v'y(Ͼ#Y4666;9Yfu=H_}3d.DgN".ULj1Z)ZpcPLU4~BX͂'S65(6MB2h4a269W*UV$QG Г,l5. 5;W-6\M r#J uBw pw-NlxWHmZC#6x$ócOFcI{%v*&ar3 )W:}0jx:4?'UfR`^jNNBqīn*7o}z=s7jFc4D]T3o/@yOѶbA1"@l H4??I{ٌM]bdJ\1p5Emic'"3YC̉ơ|_h*>^/7u_⹮|jO?nRYTr32Ua/18 >Gk,-8| )jBHG)8~-Y]+7 JJ Tz~+cuYӬbA:62k꼍ksEiC-8 ƹ5͛\ґ6A,}eZȊD!. 'rMЇ$izܦrX+IqOvYd}dl#[wW}>c f2$ vuToUee9B&sxcczT`Ҏ>~4P(ΑTS~4Z;t!5lm33R8y #JPS2(x}~'s^v(*=@4YִbIAb Q'II)tS}kd;nFfBWmbGFҫM;*+w-L.QK.'Pֳ {AŢk;9#J\T|0'XxѷOkTx_0ȡt윗UC}nzO >a7|3N]MĈz#^^k~BA^w+X F]oz懃?^&㿷:͕эiS)-l,ζ1IHqqO!n>j]kC 6w3yqPt}T]I}-Vq"Qd7Y(P׿[h u %MzmpV=Z6 7,< ]MU>sWwZָ~a'hܮOm!QOݔ&ps^/4Jpթ-5=m->X@w!jz(~?\m#SC[0&``=8+Uޛ/兮 _l(] yGn*nY3pѲ/h !x>pр}DFt.%i1eǑ뒋9@}tvD(Q0GaMҝ7t~]mmm6z|q.BQJ+HrjrFDdexX\;'e=~W-ȡF.#&~^\^bٸ4ȪMp=c8%x=gk(_TWˋXH-%>¿_no{pMK'l߈e[9/0U[X,s,!˵sn5"!?v1%xR*YHOfK~ k2[3lZzZ/)R7ޜY֣֗ܟG2fWڋLg#%Z ŴbQ$c.T>S-.fc335%<{[t%v5;%ҋ%掃NYĦV Lkh^@Wݘ6p{B@5ay! Q-Np׺;~ȴ>wyP8rC4QƩ(ׇgsKgw{IܢHMجۡ lSZY%^4ֈJoz BP-%^Y 08g-lZ.eE lVioU2R戭i0ORNJD1n5b83E#pz̧dCcL0O_ U,@J vSש)η[ ,'5/,%ejĽMp)J%pd`{΂_7zStOQt=K4`-LeC2gG\]XLfO=Q{= (z*FT̲nUV}C~ gUJ `*`E#ߍ'}']ZzHB2%\B#v\`.V|푒eje28LTj4[+ Kjv/%QԀ5+G8fs9}  x'Oz EV}WZohn.,:I+l {9Ygu"xAsT{qB=7I =HFAeP-xǼ"-N[cm 1ƽю( p?-,#-x=Tvʃ}{eYFX?3nM@e#ݤv@ă(:pR7ctT8QiMӎg9@!19={0@ͿU};<6>.|R{`E`:-դy]z_f#IV#eO<דnڵ#5LPJ-]' ؠUѲWNhYch_ۮ,hT+W3!R55^7l%"Wt(mlKȿKM#Mװ "iCF* VґbQK՞yϾ+ŹLH\L0HPU읡9~BH,'IG=:b^݂P# {&&q|/mnt-oƆ/;F@T[~1zjX nډz'<7"'+uA!5 <ȾkXc gq.vl9Iw*8+ 2l>Y+\L]Fu؛TF䖝+\9FUFw2b5Qa+Å[ÄQ ͆}EM+[ x˂w*onɕs`4aO0"f&E^_#.Ǻt "Qh_'y3?JnaEޅlŪ5]DcOؾh^ X! 8]>C1yTlKB.l+7OPiL=ge~>{T贔.J\9ndݟ&Nߔ5q~%|&`^R:h,Z!\F>w&F/DjIoKS?T)jN I\VRA>|ЗsM͎=|R=KCurWx =B>x~cizv-w5ړW~(^[X{派{)鰵#ۉtgD)9xM#wYẇ. TďWL(x+9ziׇxD&tm_j\4OE}AT"J]@z7}ZIL SS͖wj^9'>@7JlzW-S^p߉V߆wNPHV2Ơ3HQZuvG8_Mjao q^]a^;Vny/u,Cη>j@tI- #e\M}' 4"j{h[ &}#KX/ѭZv.20*&yQyT^{^%Dع=r[3( MG"zxK-WTjZ77drqI?_9k}! ;kj5&6|pP$t 2~y0 +l x`JLiPؐu(X-P M+4Maz/NIl D/KOC;sMt­mw8@9'p ]DG=SPjhV+")t6JKQ)QI⯗/h71WvD%M-MoE)-waXnrcɬnիyL[ i Λ̠* "A7ɣ{r=H=Dᔝy--O|Ŏ`(EкI$7/U`FhVk)|p i$ݴ9vFg*w):B7|v%bgSq iq<>M*/Ex|6bVvYOP=w‰᲎ޘ4@ٴ ga&b _87*J7ڲ\sؘi~ՅLdY [Q|Xx~g7OY܊-2N]SL>j Pc^:YJ"=p]#j/m?d':/pK7tIJl0V{(IuTuNE/4\6՚C]bx}N:ȱvݩ-͍\ |{7PWnM!^&62VQRPJ_AqF>ć&: "qfBeeaYz|cRE5ȣ)7_|fVTϵl<Ѱ]QɨY BU^T"s{p t&W'mV VBe[Du[q-y=b X_=Լs.^̼}( 6֘sZD@?T)ck0Q0l"I_>7ꤖw  Q{k_ַZd7` ̟a5"uV>=g+BSi[Fbt*p؛_Ab9mun;cEkM*,@]O+\o#(u.k_F | Ołn! 1FhĂ'-q`/8ЊXR_@wY8UOH=(I&:S62OGٕS'v; ՎSrKWC\wQssh=}.ؒr1Ƅ?ˍgAgs6Μ4{F&3 S=<ϑC_:ʰ*$3|Zu4Ow#=3VC ] a3/C̼:>skU D˦o`ڻt bN]zݘ 9]*]lGy6\cH6uΆY`zfSbض8Ɓa7*VďȐfc ot<\yGA gР45,m=#m$51qs7^xh$@C+U^V !kOV|ߟ}t Vmz UR53)9yLHeo0(QRք6TA8cipqM2gZB15nb -Wޮ#I,~F5]]{DNBX-~lUA$A*_w&N5oQ8rCXɸfVȹ"PA?^d hꕃ%XW})<8/0[*5އ }<^gDz,r͘..xFJ9q"&(Du֏J)vy RGV $eV^53'~A'ЬY<_cծSmYg7")q:D= OƯTvic-,5c/;JW,jzɨè7@M)>Pq„s|R$V2o7bW)wRGėk쳁B+Q@Mg\Ʊnrnڋ &CQr&[F3+&ʜ2]sp %YC}P1nkzt~|;&{?峐Sb+#U r3U,lpzڴÁuLP<|W[ޭ\p=4|e7wm.t^)ZeGeA%=X0!<bFAOĽ#3⇯e; wڌN'U~uц: rTM9E{=[ blSTpefQ!0U O8K xB}5bCv`@ h@&<=c}o6lFɧx$JS*1ϥZ(_rYYfԺS&mEpsl|> @Ņ,>q,|3 <)*;^܁&=X%NtZ3Y%S?Ebk tCY5J_"ȿ3eT,ۉpimQee*NKJWlSEeER/w9Lv# "$(mRfP4:@{s}΍T'4<I #>C-f0a$|;9R,-/Nί^ `[-wjVR+XT^lC(#uï/\jtBGzD ;T9'SrvfeP[8]' pa4:0Bc$GLu_^7@6.nI]#l1=6=CxMlVq:;'%tWmj49ѹɗt*A]V`F{zNht' kgR~m6+!I$/'R@̫s!O .R8KAջt<&q0'{Kpvµn>ʛ(sPMj@SU  IRHry)ZSԯ>!ϚQ?fLyuAN=mK?5`^W:^=(\`IR|wcW`VvO$e%XIF&i BLtNU'l)0j0n4D2n>6,~:8o$Mj G(@hd šC6w7*_.eY %Yr#63EYbPm` >\VđE)Ga5⢸ult8a9wt*V$}D̈́9rI@$wf-1%fmH=؜^?$p;eiSzHJ h erFpGQ_ q)brOQmi Y?4ce$Xr\ئX)┕Bv^_ne"+с Ř5gç˃\<Yߧw1s.jUչSmxwߝ! Wf̚<*OqECH1xS6TÆ՞Q)bl&ۺw}kygPXIx]v fWz5tG!>\$MoaAuLhaþo?}L!4 HtT_Žj^,y;8wly~IQՀ/ef⺃tLyyq|E8Η]Aה|+6BM R4 Fm+C߮€nҶ3Ky6wMjpZ ,UF-a}A0SkdWr}G@__6v(FP0O;~Q|`"8+%ݼͪZ#p+}kOӖ-mb$d{*6@Rp 9P~^ᅪ0^ax@Tzo?'"gnʿCbF\׭NP4(;E;¦71{?=Wf`;g*<C^զXXz<:_Sݚ岰w$KO'_2p#k <Dt +ep;-{&N{ _p >򜪣|Xwi"Z$+Ch@Mse.sASYU&cOJOANqouU@FS˷ 9b;b+iU H {#~&&]w' v_Vi0#ձm&ߵv!8=+QX[&k=oҒ˼_U3ND.y,bS,Kq8mqT~ړP|ʨj!S|/ɧJmE(x$o~(/wHYf]mEZ)/ c}8)?k kaaE Dt5g6vP1^VquSeV7?r !efa~2xyl!][(;iߥM"{SkVRrZkݕůmqMcbsO폵IN y!1ˌ.7V;HrCHdwY~whv:gj^W^$8X 'tv\{LN˟+ +LQru2w$%sp[\Vef\'G>wd@s,|iϢEВ U dmČBDKL̄Ϥ3jɛ?ġviֆz7";7 m ~1YNʎs4H '9SҧI.wZ$o鼦8K Il^jۭ4u + ZYO$_1MF~PD;<yCկa\M֚n'fk= Ck̲i:֐7UÆůUHU@ O):kQdm1\dQ-}. 0Q(z4eWPo-ܶFntiKRr.$BLDKo9KJZ٠auJ'^Y&u2ϐԅ_sgQ@6` G98(> X+Lߡn֝3ēmt䍹NW4t R:tĽiJvt`Ɂn|shCge(u!6?Yv>oBut cX l׉$phV#<1A&%Laqq[}yi-wM0$n/kb|<+'1q`m۬ɾs; 7R~Ă ON^PBpxNbAP v)2sA*A~N}.R($eT5<@>u3Xؾwj4VR-I"50ss?)Cڰ-&nWỪU>lgsi'kV5YX&ՋV3z0Y5oі*Z} @DqW/A"zdjV vT1;Q*ׄgY[.17A ?ɉt'TFWFDH1R7 xoيqλ ]%07AMKSZ#$t\6OΈKswMLiK0>ZsQ»Ensw3,dDmbNV^;>^KD|pK'W?}ضW_ J=54r+A eƤ<δ ه#J^Z[VK(ʤFIw\kߥӬ/,?$3/A +USűi\zcqnTE 1DyݘCyTs Z<&}e{AT!"5r_]׌y!1p4RPή%=1)։gwE#""vU֊s7=?&? EF2GW܄ ,y9G _2 44]Ye{׾S,ՓXS)LAHT<$i܇?>|ߎ$hsj( !0+-X-|8IOJgkļOfQ奯4U1qI Ť"XZ#zEa&R<:=7nB9$qa@8X9W޸[`0R F,im] S6:BGdJ10(mv fC'B9B7zۻwʶb>S0:gT`m5:7Y@c7,}qbiBZUה ~],y]y24HܿLcrSSFFblm ~b/:] endstream endobj 371 0 obj << /Type /ObjStm /N 100 /First 888 /Length 3382 /Filter /FlateDecode >> stream xZ[wH~# d0Vl[R|p]]]Wr$ey3T&oI!fX>.gJuTk3ڋL{ʌC}Y6sJμg>++`V\#Hh jЙP 6Z 4R ` {t{ 9,eg+i=؝"R IWZ p, e-ZL=0=`>4x!aw'%]"ڣ2a5*f!*ZcT ,Zc8 5}Ok$02pe8 -)ll*{𱈪=g g {䣙b RB;0E8 ۂN#`Q 40  B HJ. `Ɍ/(:CDf:@jࢗ!;bȡಀඃdWVDqY3azأrZeg`d0d2TzXgkYc,g@$S~^qQe3Q^_C諯 ϋi5fhcGż\ŜRJa!y]'LsA^m {ńݟ2wYM96]'uBȑ){{eiBc7eqMY юʂXvR^jW©r|36ѩKgޭ̛[M%zO rmIlX?a'܆,3 ˩\ jNj LgGw>-ըc ~\TO\Ty9;gŔU1]p8owϏn .waGe(Z7f7ei;*k+%o˵YƂYWPZƂ=L]݈UPMY@e;*ñp聲Qk2$ݔ͹g/܉o:gF87;qv]޴gURw.μ~3}c!6ϰ5|Ŧi[UfGlFiR7=Hl.'mwlm W]jU|&S_k,9f{ܛTedŃy9KSk׬4qY2;n{p)nN@,'+D y8Oe|{@YBԙa* mT{h~pw1FZ8>!J:;6z,i)sSX*dSlMB,Z$+x|l#9>M_bJEkZ#c11c~֩jVSbyGQR58d@8T/Tkeo%G[뒂mBĭGS${0u$\^ǸZ|޻ĠA#&͘H=,T%QAQƞ@ӼQ3c-Eړ3$||sPeUyv?;<*'!(LGHsOݑ"R'=7%B/ı{"'U<ME{*&o,>PCJ䟲gΞW5{`}vlP)a~و9`_//)G6f6e%+dpl\UQ/처!>-ʪIayuflc\bUl13b_׻G#ص?{^W䌣ȸVdD/w ["syBxAqx[?#G-7`iQ xu5}ww;#|vO!Ť-mr3v`_{CƎ>H۳r1t-o,s0]GI7]Gbܟm X6w-;XiۤTb{S0^;' ߟjt d qRUI?0ŧE̊/q1\S`\.Nj9U:] 5UϰF>%ʩMi-m篟i~|7S_y 33)6x S1F2 ͢am6|z72رW%Oaw}fw1R?c '?U9\Oa9̸1 gE^HEb>oceG7|S; "KnĜ↾+o ~CmNL,7ctKyشuh,ovc"Yk\rIQ;~]/.E$i:=”K #T_#Q-KF$\@ R+2)4Ph0)w-eC؜unf?-ϑV[_-B6 endstream endobj 549 0 obj << /Producer (pdfTeX-1.40.20) /Author()/Title()/Subject()/Creator(\376\377\000L\000a\000T\000e\000X\000\040\000v\000i\000a\000\040\000p\000a\000n\000d\000o\000c)/Keywords() /CreationDate (D:20231001022910+02'00') /ModDate (D:20231001022910+02'00') /Trapped /False /PTEX.Fullbanner (This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) kpathsea version 6.3.1) >> endobj 506 0 obj << /Type /ObjStm /N 82 /First 734 /Length 3203 /Filter /FlateDecode >> stream xZm۶_vh/ 3$tƎ;i&dnhc- Ir>$( skNb+J2M$*O".D@G"U8@BRt=%,CVd V,"!#xQ8gpH.&8DG)Nx$5 _L.D GIIepPdV(PRP6ȃv0 H sIF%h @&!@pM! I$PB(ph0 13l! 2#@Ib\ģ TI\eBS[C)9 T.HRģBFc8N͉1k" *i&%4J)JN  Cj01I0Y[bȐ}hHWf`()P:  Ñ04䒆L82$Y]*S.IST%1` hLJc*7ն(wuq{yɛ_¬;Um>6 wu`Bߝu玼UeZ=kG"ˬi&Z|՛ꐕ,U:o6uql:F`AzQ7틻Y_fVb5LAJO{^qƗAL&KĞ/~ ١آ8~Sf[Bܩn,)Ǫ&.ͷ8ۻTym)j, a߳qmf-j/"k4o*۹:oUq?g]92}* fۖ2*'LӱTʲ2"d6.ѵ]_~w37 KLHlWٶö/YpEb{=I@BĘTd 3!jWf]|8ۂ붸-6+2ˎ)3"g>5!amޗ=W2 6吷wՖ3d۬wYi-؝jQV-ub{VM&;>)z0~+N,@`1H7=!2p\ڡԛKme:k{Jc?G(W" Ǻ#U< .1kɩ-}I}ae]uM>fmu_v綮K>#ǂr߶c#\2w0qWO%O<](ҥp"XKs<9@&}zZGH.<"%c:N틻`qqr{4s)E=c< = +iH HwHtGM1K_\Dy*5]Ѝ¸HG2ׅG. "<*Etrţql`9;TX¸;;һ &ϛYFo@[+e LKJ-FJ# tCjIX< )0M!R)nqkRSHQÕǻ SN*\6F*UR`z"'GixSea9M- 0ͨpa+{6%>х3M8|y:|1<\ rRm,p᥷Pg'at<[*ɳ&t$' [_˰%yLPZBHzM4#F*m{,v3xw`BЖC]YC@˸+{7k'ojn{ f ka"z8/'תеԾ'aVZVk;HLx[m|e܊\RIa)r 3\kMثUJo$&˥IhĻSͻ/k>Kk]ж\}c3ӱs!Ԛy&IDQ{2sЉjڙo ]`i{#eX%-C5:lwxnלǪn⦺m?4AO>j٢}mo,^^K_̿*ll} 6c'x\ S[lto!;;`?Hw:N-Al*3;0O8Қn}8H8J5[^dmv',a_ U?5SǼsjttB endstream endobj 550 0 obj << /Type /XRef /Index [0 551] /Size 551 /W [1 3 1] /Root 548 0 R /Info 549 0 R /ID [<59D9D1E7B58875B7718B77BFC9478FA4> <59D9D1E7B58875B7718B77BFC9478FA4>] /Length 1310 /Filter /FlateDecode >> stream x%KlVE;)\ZJK m Jo- b酢a_X`L0/&F11&N$Mqʅ 76ƨ+gyQ 0 ŌO@l[b\?MqͬX=k[\7[ס.X7!y2Hɰ0۹*Pk@5 lfo3ōJcT+:Py3h[V+_W`'vfl_#@;~@rt?Q. Zb(Xc6uG#qN10`v偆aX1048PSÊI0nxPptpV \0ӹP̂)4b̀zE2JQRe*T\cK}_<@JQRe*VJ/8888889{Qőכ}&'-G3of888y@GGGGGGkvfi;i!#M+Rtqq/ C.CCYD$GMMY_RRY> òͲײ c}K9e)9e39e=9fvO  s]:ΚkΟWkΊwPkފ_o`UK_hU?u*#j-Y2e ܲr#t(- 2"xH&+B E' (H!+ @G֞eZv;ԊuZgY;coOVYMRt endstream endobj startxref 310107 %%EOF python3-saml-1.16.0/docs/saml2/000077500000000000000000000000001451074743100161115ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_modules/000077500000000000000000000000001451074743100177205ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_modules/index.html000066400000000000000000000113131451074743100217140ustar00rootroot00000000000000 Overview: module code — SAML Python2/3 Toolkit 1 documentation

  • Overview: module code
python3-saml-1.16.0/docs/saml2/_modules/onelogin/000077500000000000000000000000001451074743100215325ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/000077500000000000000000000000001451074743100225505ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/auth.html000066400000000000000000003125531451074743100244100ustar00rootroot00000000000000 onelogin.saml2.auth — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.auth

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Auth class


Main class of SAML Python Toolkit.

Initializes the SP SAML instance

"""

import xmlsec

from onelogin.saml2 import compat
from onelogin.saml2.authn_request import OneLogin_Saml2_Authn_Request
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.logout_request import OneLogin_Saml2_Logout_Request
from onelogin.saml2.logout_response import OneLogin_Saml2_Logout_Response
from onelogin.saml2.response import OneLogin_Saml2_Response
from onelogin.saml2.settings import OneLogin_Saml2_Settings
from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError
from onelogin.saml2.xmlparser import tostring



[docs]class OneLogin_Saml2_Auth(object):
    """

    This class implements the SP SAML instance.

    Defines the methods that you can invoke in your application in
    order to add SAML support (initiates SSO, initiates SLO, processes a
    SAML Response, a Logout Request or a Logout Response).
    """

    authn_request_class = OneLogin_Saml2_Authn_Request
    logout_request_class = OneLogin_Saml2_Logout_Request
    logout_response_class = OneLogin_Saml2_Logout_Response
    response_class = OneLogin_Saml2_Response

    def __init__(self, request_data, old_settings=None, custom_base_path=None):
        """
        Initializes the SP SAML instance.

        :param request_data: Request Data
        :type request_data: dict

        :param old_settings: Optional. SAML Toolkit Settings
        :type old_settings: dict

        :param custom_base_path: Optional. Path where are stored the settings file and the cert folder
        :type custom_base_path: string
        """
        self._request_data = request_data
        if isinstance(old_settings, OneLogin_Saml2_Settings):
            self._settings = old_settings
        else:
            self._settings = OneLogin_Saml2_Settings(old_settings, custom_base_path)
        self._attributes = dict()
        self._friendlyname_attributes = dict()
        self._nameid = None
        self._nameid_format = None
        self._nameid_nq = None
        self._nameid_spnq = None
        self._session_index = None
        self._session_expiration = None
        self._authenticated = False
        self._errors = []
        self._error_reason = None
        self._last_request_id = None
        self._last_message_id = None
        self._last_assertion_id = None
        self._last_assertion_issue_instant = None
        self._last_authn_contexts = []
        self._last_request = None
        self._last_response = None
        self._last_response_in_response_to = None
        self._last_assertion_not_on_or_after = None


[docs]    def get_settings(self):
        """
        Returns the settings info
        :return: Setting info
        :rtype: OneLogin_Saml2_Setting object
        """
        return self._settings



[docs]    def set_strict(self, value):
        """
        Set the strict mode active/disable

        :param value:
        :type value: bool
        """
        assert isinstance(value, bool)
        self._settings.set_strict(value)



[docs]    def store_valid_response(self, response):
        self._attributes = response.get_attributes()
        self._friendlyname_attributes = response.get_friendlyname_attributes()
        self._nameid = response.get_nameid()
        self._nameid_format = response.get_nameid_format()
        self._nameid_nq = response.get_nameid_nq()
        self._nameid_spnq = response.get_nameid_spnq()
        self._session_index = response.get_session_index()
        self._session_expiration = response.get_session_not_on_or_after()
        self._last_message_id = response.get_id()
        self._last_assertion_id = response.get_assertion_id()
        self._last_assertion_issue_instant = response.get_assertion_issue_instant()
        self._last_authn_contexts = response.get_authn_contexts()
        self._authenticated = True
        self._last_response_in_response_to = response.get_in_response_to()
        self._last_assertion_not_on_or_after = response.get_assertion_not_on_or_after()



[docs]    def process_response(self, request_id=None):
        """
        Process the SAML Response sent by the IdP.

        :param request_id: Is an optional argument. Is the ID of the AuthNRequest sent by this SP to the IdP.
        :type request_id: string

        :raises: OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND, when a POST with a SAMLResponse is not found
        """
        self._errors = []
        self._error_reason = None

        if 'post_data' in self._request_data and 'SAMLResponse' in self._request_data['post_data']:
            # AuthnResponse -- HTTP_POST Binding
            response = self.response_class(self._settings, self._request_data['post_data']['SAMLResponse'])
            self._last_response = response.get_xml_document()

            if response.is_valid(self._request_data, request_id):
                self.store_valid_response(response)
            else:
                self._errors.append('invalid_response')
                self._error_reason = response.get_error()

        else:
            self._errors.append('invalid_binding')
            raise OneLogin_Saml2_Error(
                'SAML Response not found, Only supported HTTP_POST Binding',
                OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND
            )



[docs]    def process_slo(self, keep_local_session=False, request_id=None, delete_session_cb=None):
        """
        Process the SAML Logout Response / Logout Request sent by the IdP.

        :param keep_local_session: When false will destroy the local session, otherwise will destroy it
        :type keep_local_session: bool

        :param request_id: The ID of the LogoutRequest sent by this SP to the IdP
        :type request_id: string

        :returns: Redirection url
        """
        self._errors = []
        self._error_reason = None

        get_data = 'get_data' in self._request_data and self._request_data['get_data']
        if get_data and 'SAMLResponse' in get_data:
            logout_response = self.logout_response_class(self._settings, get_data['SAMLResponse'])
            self._last_response = logout_response.get_xml()
            if not self.validate_response_signature(get_data):
                self._errors.append('invalid_logout_response_signature')
                self._errors.append('Signature validation failed. Logout Response rejected')
            elif not logout_response.is_valid(self._request_data, request_id):
                self._errors.append('invalid_logout_response')
            elif logout_response.get_status() != OneLogin_Saml2_Constants.STATUS_SUCCESS:
                self._errors.append('logout_not_success')
            else:
                self._last_message_id = logout_response.id
                if not keep_local_session:
                    OneLogin_Saml2_Utils.delete_local_session(delete_session_cb)

        elif get_data and 'SAMLRequest' in get_data:
            logout_request = self.logout_request_class(self._settings, get_data['SAMLRequest'])
            self._last_request = logout_request.get_xml()
            if not self.validate_request_signature(get_data):
                self._errors.append("invalid_logout_request_signature")
                self._errors.append('Signature validation failed. Logout Request rejected')
            elif not logout_request.is_valid(self._request_data):
                self._errors.append('invalid_logout_request')
            else:
                if not keep_local_session:
                    OneLogin_Saml2_Utils.delete_local_session(delete_session_cb)

                in_response_to = logout_request.id
                self._last_message_id = logout_request.id
                response_builder = self.logout_response_class(self._settings)
                response_builder.build(in_response_to)
                self._last_response = response_builder.get_xml()
                logout_response = response_builder.get_response()

                parameters = {'SAMLResponse': logout_response}
                if 'RelayState' in self._request_data['get_data']:
                    parameters['RelayState'] = self._request_data['get_data']['RelayState']

                security = self._settings.get_security_data()
                if security['logoutResponseSigned']:
                    self.add_response_signature(parameters, security['signatureAlgorithm'])

                return self.redirect_to(self.get_slo_response_url(), parameters)
        else:
            self._errors.append('invalid_binding')
            raise OneLogin_Saml2_Error(
                'SAML LogoutRequest/LogoutResponse not found. Only supported HTTP_REDIRECT Binding',
                OneLogin_Saml2_Error.SAML_LOGOUTMESSAGE_NOT_FOUND
            )



[docs]    def redirect_to(self, url=None, parameters={}):
        """
        Redirects the user to the URL passed by parameter or to the URL that we defined in our SSO Request.

        :param url: The target URL to redirect the user
        :type url: string
        :param parameters: Extra parameters to be passed as part of the URL
        :type parameters: dict

        :returns: Redirection URL
        """
        if url is None and 'RelayState' in self._request_data['get_data']:
            url = self._request_data['get_data']['RelayState']
        return OneLogin_Saml2_Utils.redirect(url, parameters, request_data=self._request_data)



[docs]    def is_authenticated(self):
        """
        Checks if the user is authenticated or not.

        :returns: True if is authenticated, False if not
        :rtype: bool
        """
        return self._authenticated



[docs]    def get_attributes(self):
        """
        Returns the set of SAML attributes.

        :returns: SAML attributes
        :rtype: dict
        """
        return self._attributes



[docs]    def get_friendlyname_attributes(self):
        """
        Returns the set of SAML attributes indexed by FiendlyName.

        :returns: SAML attributes
        :rtype: dict
        """
        return self._friendlyname_attributes



[docs]    def get_nameid(self):
        """
        Returns the nameID.

        :returns: NameID
        :rtype: string|None
        """
        return self._nameid



[docs]    def get_nameid_format(self):
        """
        Returns the nameID Format.

        :returns: NameID Format
        :rtype: string|None
        """
        return self._nameid_format



[docs]    def get_nameid_nq(self):
        """
        Returns the nameID NameQualifier of the Assertion.

        :returns: NameID NameQualifier
        :rtype: string|None
        """
        return self._nameid_nq



[docs]    def get_nameid_spnq(self):
        """
        Returns the nameID SP NameQualifier of the Assertion.

        :returns: NameID SP NameQualifier
        :rtype: string|None
        """
        return self._nameid_spnq



[docs]    def get_session_index(self):
        """
        Returns the SessionIndex from the AuthnStatement.
        :returns: The SessionIndex of the assertion
        :rtype: string
        """
        return self._session_index



[docs]    def get_session_expiration(self):
        """
        Returns the SessionNotOnOrAfter from the AuthnStatement.
        :returns: The SessionNotOnOrAfter of the assertion
        :rtype: unix/posix timestamp|None
        """
        return self._session_expiration



[docs]    def get_last_assertion_not_on_or_after(self):
        """
        The NotOnOrAfter value of the valid SubjectConfirmationData node
        (if any) of the last assertion processed
        """
        return self._last_assertion_not_on_or_after



[docs]    def get_errors(self):
        """
        Returns a list with code errors if something went wrong

        :returns: List of errors
        :rtype: list
        """
        return self._errors



[docs]    def get_last_error_reason(self):
        """
        Returns the reason for the last error

        :returns: Reason of the last error
        :rtype: None | string
        """
        return self._error_reason



[docs]    def get_attribute(self, name):
        """
        Returns the requested SAML attribute.

        :param name: Name of the attribute
        :type name: string

        :returns: Attribute value(s) if exists or None
        :rtype: list
        """
        assert isinstance(name, compat.str_type)
        return self._attributes.get(name)



[docs]    def get_friendlyname_attribute(self, friendlyname):
        """
        Returns the requested SAML attribute searched by FriendlyName.

        :param friendlyname: FriendlyName of the attribute
        :type friendlyname: string

        :returns: Attribute value(s) if exists or None
        :rtype: list
        """
        assert isinstance(friendlyname, compat.str_type)
        return self._friendlyname_attributes.get(friendlyname)



[docs]    def get_last_request_id(self):
        """
        :returns: The ID of the last Request SAML message generated.
        :rtype: string
        """
        return self._last_request_id



[docs]    def get_last_message_id(self):
        """
        :returns: The ID of the last Response SAML message processed.
        :rtype: string
        """
        return self._last_message_id



[docs]    def get_last_assertion_id(self):
        """
        :returns: The ID of the last assertion processed.
        :rtype: string
        """
        return self._last_assertion_id



[docs]    def get_last_assertion_issue_instant(self):
        """
        :returns: The IssueInstant of the last assertion processed.
        :rtype: unix/posix timestamp|None
        """
        return self._last_assertion_issue_instant



[docs]    def get_last_authn_contexts(self):
        """
        :returns: The list of authentication contexts sent in the last SAML Response.
        :rtype: list
        """
        return self._last_authn_contexts



[docs]    def get_last_response_in_response_to(self):
        """
        :returns: InResponseTo attribute of the last Response SAML processed or None if it is not present.
        :rtype: string
        """
        return self._last_response_in_response_to



[docs]    def login(self, return_to=None, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None):
        """
        Initiates the SSO process.

        :param return_to: Optional argument. The target URL the user should be redirected to after login.
        :type return_to: string

        :param force_authn: Optional argument. When true the AuthNRequest will set the ForceAuthn='true'.
        :type force_authn: bool

        :param is_passive: Optional argument. When true the AuthNRequest will set the Ispassive='true'.
        :type is_passive: bool

        :param set_nameid_policy: Optional argument. When true the AuthNRequest will set a nameIdPolicy element.
        :type set_nameid_policy: bool

        :param name_id_value_req: Optional argument. Indicates to the IdP the subject that should be authenticated
        :type name_id_value_req: string

        :returns: Redirection URL
        :rtype: string
        """
        authn_request = self.authn_request_class(self._settings, force_authn, is_passive, set_nameid_policy, name_id_value_req)
        self._last_request = authn_request.get_xml()
        self._last_request_id = authn_request.get_id()

        saml_request = authn_request.get_request()
        parameters = {'SAMLRequest': saml_request}

        if return_to is not None:
            parameters['RelayState'] = return_to
        else:
            parameters['RelayState'] = OneLogin_Saml2_Utils.get_self_url_no_query(self._request_data)

        security = self._settings.get_security_data()
        if security.get('authnRequestsSigned', False):
            self.add_request_signature(parameters, security['signatureAlgorithm'])
        return self.redirect_to(self.get_sso_url(), parameters)



[docs]    def logout(self, return_to=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None):
        """
        Initiates the SLO process.

        :param return_to: Optional argument. The target URL the user should be redirected to after logout.
        :type return_to: string

        :param name_id: The NameID that will be set in the LogoutRequest.
        :type name_id: string

        :param session_index: SessionIndex that identifies the session of the user.
        :type session_index: string

        :param nq: IDP Name Qualifier
        :type: string

        :param name_id_format: The NameID Format that will be set in the LogoutRequest.
        :type: string

        :param spnq: SP Name Qualifier
        :type: string

        :returns: Redirection URL
        """
        slo_url = self.get_slo_url()
        if slo_url is None:
            raise OneLogin_Saml2_Error(
                'The IdP does not support Single Log Out',
                OneLogin_Saml2_Error.SAML_SINGLE_LOGOUT_NOT_SUPPORTED
            )

        if name_id is None and self._nameid is not None:
            name_id = self._nameid

        if name_id_format is None and self._nameid_format is not None:
            name_id_format = self._nameid_format

        logout_request = self.logout_request_class(
            self._settings,
            name_id=name_id,
            session_index=session_index,
            nq=nq,
            name_id_format=name_id_format,
            spnq=spnq
        )
        self._last_request = logout_request.get_xml()
        self._last_request_id = logout_request.id

        parameters = {'SAMLRequest': logout_request.get_request()}
        if return_to is not None:
            parameters['RelayState'] = return_to
        else:
            parameters['RelayState'] = OneLogin_Saml2_Utils.get_self_url_no_query(self._request_data)

        security = self._settings.get_security_data()
        if security.get('logoutRequestSigned', False):
            self.add_request_signature(parameters, security['signatureAlgorithm'])
        return self.redirect_to(slo_url, parameters)



[docs]    def get_sso_url(self):
        """
        Gets the SSO URL.

        :returns: An URL, the SSO endpoint of the IdP
        :rtype: string
        """
        return self._settings.get_idp_sso_url()



[docs]    def get_slo_url(self):
        """
        Gets the SLO URL.

        :returns: An URL, the SLO endpoint of the IdP
        :rtype: string
        """
        return self._settings.get_idp_slo_url()



[docs]    def get_slo_response_url(self):
        """
        Gets the SLO return URL for IdP-initiated logout.

        :returns: an URL, the SLO return endpoint of the IdP
        :rtype: string
        """
        return self._settings.get_idp_slo_response_url()



[docs]    def add_request_signature(self, request_data, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256):
        """
        Builds the Signature of the SAML Request.

        :param request_data: The Request parameters
        :type request_data: dict

        :param sign_algorithm: Signature algorithm method
        :type sign_algorithm: string
        """
        return self._build_signature(request_data, 'SAMLRequest', sign_algorithm)



[docs]    def add_response_signature(self, response_data, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256):
        """
        Builds the Signature of the SAML Response.
        :param response_data: The Response parameters
        :type response_data: dict

        :param sign_algorithm: Signature algorithm method
        :type sign_algorithm: string
        """
        return self._build_signature(response_data, 'SAMLResponse', sign_algorithm)


    @staticmethod
    def _build_sign_query_from_qs(query_string, saml_type):
        """
        Build sign query from query string

        :param query_string: The query string
        :type query_string: str

        :param saml_type: The target URL the user should be redirected to
        :type saml_type: string SAMLRequest | SAMLResponse
        """
        args = ('%s=' % saml_type, 'RelayState=', 'SigAlg=')
        parts = query_string.split('&')
        # Join in the order of arguments rather than the original order of parts.
        return '&'.join(part for arg in args for part in parts if part.startswith(arg))

    @staticmethod
    def _build_sign_query(saml_data, relay_state, algorithm, saml_type, lowercase_urlencoding=False):
        """
        Build sign query

        :param saml_data: The Request data
        :type saml_data: str

        :param relay_state: The Relay State
        :type relay_state: str

        :param algorithm: The Signature Algorithm
        :type algorithm: str

        :param saml_type: The target URL the user should be redirected to
        :type saml_type: string  SAMLRequest | SAMLResponse

        :param lowercase_urlencoding: lowercase or no
        :type lowercase_urlencoding: boolean
        """
        sign_data = ['%s=%s' % (saml_type, OneLogin_Saml2_Utils.escape_url(saml_data, lowercase_urlencoding))]
        if relay_state is not None:
            sign_data.append('RelayState=%s' % OneLogin_Saml2_Utils.escape_url(relay_state, lowercase_urlencoding))
        sign_data.append('SigAlg=%s' % OneLogin_Saml2_Utils.escape_url(algorithm, lowercase_urlencoding))
        return '&'.join(sign_data)

    def _build_signature(self, data, saml_type, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256):
        """
        Builds the Signature
        :param data: The Request data
        :type data: dict

        :param saml_type: The target URL the user should be redirected to
        :type saml_type: string  SAMLRequest | SAMLResponse

        :param sign_algorithm: Signature algorithm method
        :type sign_algorithm: string
        """
        assert saml_type in ('SAMLRequest', 'SAMLResponse')
        key = self.get_settings().get_sp_key()

        if not key:
            raise OneLogin_Saml2_Error(
                "Trying to sign the %s but can't load the SP private key." % saml_type,
                OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND
            )

        msg = self._build_sign_query(data[saml_type],
                                     data.get('RelayState', None),
                                     sign_algorithm,
                                     saml_type)

        sign_algorithm_transform_map = {
            OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1,
            OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1,
            OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256,
            OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384,
            OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512
        }
        sign_algorithm_transform = sign_algorithm_transform_map.get(sign_algorithm, xmlsec.Transform.RSA_SHA256)

        signature = OneLogin_Saml2_Utils.sign_binary(msg, key, sign_algorithm_transform, self._settings.is_debug_active())
        data['Signature'] = OneLogin_Saml2_Utils.b64encode(signature)
        data['SigAlg'] = sign_algorithm


[docs]    def validate_request_signature(self, request_data):
        """
        Validate Request Signature

        :param request_data: The Request data
        :type request_data: dict

        """

        return self._validate_signature(request_data, 'SAMLRequest')



[docs]    def validate_response_signature(self, request_data):
        """
        Validate Response Signature

        :param request_data: The Request data
        :type request_data: dict

        """

        return self._validate_signature(request_data, 'SAMLResponse')


    def _validate_signature(self, data, saml_type, raise_exceptions=False):
        """
        Validate Signature

        :param data: The Request data
        :type data: dict

        :param cert: The certificate to check signature
        :type cert: str

        :param saml_type: The target URL the user should be redirected to
        :type saml_type: string  SAMLRequest | SAMLResponse

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean
        """
        try:
            signature = data.get('Signature', None)
            if signature is None:
                if self._settings.is_strict() and self._settings.get_security_data().get('wantMessagesSigned', False):
                    raise OneLogin_Saml2_ValidationError(
                        'The %s is not signed. Rejected.' % saml_type,
                        OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE
                    )
                return True

            idp_data = self.get_settings().get_idp_data()

            exists_x509cert = self.get_settings().get_idp_cert() is not None
            exists_multix509sign = 'x509certMulti' in idp_data and \
                'signing' in idp_data['x509certMulti'] and \
                idp_data['x509certMulti']['signing']

            if not (exists_x509cert or exists_multix509sign):
                error_msg = 'In order to validate the sign on the %s, the x509cert of the IdP is required' % saml_type
                self._errors.append(error_msg)
                raise OneLogin_Saml2_Error(
                    error_msg,
                    OneLogin_Saml2_Error.CERT_NOT_FOUND
                )

            sign_alg = data.get('SigAlg', OneLogin_Saml2_Constants.RSA_SHA1)
            if isinstance(sign_alg, bytes):
                sign_alg = sign_alg.decode('utf8')

            security = self._settings.get_security_data()
            reject_deprecated_alg = security.get('rejectDeprecatedAlgorithm', False)
            if reject_deprecated_alg:
                if sign_alg in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS:
                    raise OneLogin_Saml2_ValidationError(
                        'Deprecated signature algorithm found: %s' % sign_alg,
                        OneLogin_Saml2_ValidationError.DEPRECATED_SIGNATURE_METHOD
                    )

            query_string = self._request_data.get('query_string')
            if query_string and self._request_data.get('validate_signature_from_qs'):
                signed_query = self._build_sign_query_from_qs(query_string, saml_type)
            else:
                lowercase_urlencoding = self._request_data.get('lowercase_urlencoding', False)
                signed_query = self._build_sign_query(data[saml_type],
                                                      data.get('RelayState'),
                                                      sign_alg,
                                                      saml_type,
                                                      lowercase_urlencoding)

            if exists_multix509sign:
                for cert in idp_data['x509certMulti']['signing']:
                    if OneLogin_Saml2_Utils.validate_binary_sign(signed_query,
                                                                 OneLogin_Saml2_Utils.b64decode(signature),
                                                                 cert,
                                                                 sign_alg):
                        return True
                raise OneLogin_Saml2_ValidationError(
                    'Signature validation failed. %s rejected' % saml_type,
                    OneLogin_Saml2_ValidationError.INVALID_SIGNATURE
                )
            else:
                cert = self.get_settings().get_idp_cert()

                if not OneLogin_Saml2_Utils.validate_binary_sign(signed_query,
                                                                 OneLogin_Saml2_Utils.b64decode(signature),
                                                                 cert,
                                                                 sign_alg,
                                                                 self._settings.is_debug_active()):
                    raise OneLogin_Saml2_ValidationError(
                        'Signature validation failed. %s rejected' % saml_type,
                        OneLogin_Saml2_ValidationError.INVALID_SIGNATURE
                    )
            return True
        except Exception as e:
            self._error_reason = str(e)
            if raise_exceptions:
                raise e
            return False


[docs]    def get_last_response_xml(self, pretty_print_if_possible=False):
        """
        Retrieves the raw XML (decrypted) of the last SAML response,
        or the last Logout Response generated or processed
        :returns: SAML response XML
        :rtype: string|None
        """
        response = None
        if self._last_response is not None:
            if isinstance(self._last_response, compat.str_type):
                response = self._last_response
            else:
                response = tostring(self._last_response, encoding='unicode', pretty_print=pretty_print_if_possible)
        return response



[docs]    def get_last_request_xml(self):
        """
        Retrieves the raw XML sent in the last SAML request
        :returns: SAML request XML
        :rtype: string|None
        """
        return self._last_request or None
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/authn_request.html000066400000000000000000000600741451074743100263340ustar00rootroot00000000000000 onelogin.saml2.authn_request — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.authn_request

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Authn_Request class


AuthNRequest class of SAML Python Toolkit.

"""

from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.utils import OneLogin_Saml2_Utils
from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates



[docs]class OneLogin_Saml2_Authn_Request(object):
    """

    This class handles an AuthNRequest. It builds an
    AuthNRequest object.

    """

    def __init__(self, settings, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None):
        """
        Constructs the AuthnRequest object.

        :param settings: OSetting data
        :type settings: OneLogin_Saml2_Settings

        :param force_authn: Optional argument. When true the AuthNRequest will set the ForceAuthn='true'.
        :type force_authn: bool

        :param is_passive: Optional argument. When true the AuthNRequest will set the Ispassive='true'.
        :type is_passive: bool

        :param set_nameid_policy: Optional argument. When true the AuthNRequest will set a nameIdPolicy element.
        :type set_nameid_policy: bool

        :param name_id_value_req: Optional argument. Indicates to the IdP the subject that should be authenticated
        :type name_id_value_req: string
        """
        self._settings = settings

        sp_data = self._settings.get_sp_data()
        idp_data = self._settings.get_idp_data()
        security = self._settings.get_security_data()

        self._id = self._generate_request_id()
        issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now())

        destination = idp_data['singleSignOnService']['url']

        provider_name_str = ''
        organization_data = settings.get_organization()
        if isinstance(organization_data, dict) and organization_data:
            langs = organization_data
            if 'en-US' in langs:
                lang = 'en-US'
            else:
                lang = sorted(langs)[0]

            display_name = 'displayname' in organization_data[lang] and organization_data[lang]['displayname']
            if display_name:
                provider_name_str = "\n" + '    ProviderName="%s"' % organization_data[lang]['displayname']

        force_authn_str = ''
        if force_authn is True:
            force_authn_str = "\n" + '    ForceAuthn="true"'

        is_passive_str = ''
        if is_passive is True:
            is_passive_str = "\n" + '    IsPassive="true"'

        subject_str = ''
        if name_id_value_req:
            subject_str = """
    <saml:Subject>
        <saml:NameID Format="%s">%s</saml:NameID>
        <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></saml:SubjectConfirmation>
    </saml:Subject>""" % (sp_data['NameIDFormat'], name_id_value_req)

        nameid_policy_str = ''
        if set_nameid_policy:
            name_id_policy_format = sp_data['NameIDFormat']
            if security['wantNameIdEncrypted']:
                name_id_policy_format = OneLogin_Saml2_Constants.NAMEID_ENCRYPTED

            nameid_policy_str = """
    <samlp:NameIDPolicy
        Format="%s"
        AllowCreate="true" />""" % name_id_policy_format

        requested_authn_context_str = ''
        if security['requestedAuthnContext'] is not False:
            authn_comparison = security['requestedAuthnContextComparison']

            if security['requestedAuthnContext'] is True:
                requested_authn_context_str = """    <samlp:RequestedAuthnContext Comparison="%s">
        <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>""" % authn_comparison
            else:
                requested_authn_context_str = '     <samlp:RequestedAuthnContext Comparison="%s">' % authn_comparison
                for authn_context in security['requestedAuthnContext']:
                    requested_authn_context_str += '<saml:AuthnContextClassRef>%s</saml:AuthnContextClassRef>' % authn_context
                requested_authn_context_str += '    </samlp:RequestedAuthnContext>'

        attr_consuming_service_str = ''
        if 'attributeConsumingService' in sp_data and sp_data['attributeConsumingService']:
            attr_consuming_service_str = "\n    AttributeConsumingServiceIndex=\"%s\"" % sp_data['attributeConsumingService'].get('index', '1')

        request = OneLogin_Saml2_Templates.AUTHN_REQUEST % \
            {
                'id': self._id,
                'provider_name': provider_name_str,
                'force_authn_str': force_authn_str,
                'is_passive_str': is_passive_str,
                'issue_instant': issue_instant,
                'destination': destination,
                'assertion_url': sp_data['assertionConsumerService']['url'],
                'entity_id': sp_data['entityId'],
                'subject_str': subject_str,
                'nameid_policy_str': nameid_policy_str,
                'requested_authn_context_str': requested_authn_context_str,
                'attr_consuming_service_str': attr_consuming_service_str,
                'acs_binding': sp_data['assertionConsumerService'].get('binding', 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST')
            }

        self._authn_request = request

    def _generate_request_id(self):
        """
        Generate an unique request ID.
        """
        return OneLogin_Saml2_Utils.generate_unique_id()


[docs]    def get_request(self, deflate=True):
        """
        Returns unsigned AuthnRequest.
        :param deflate: It makes the deflate process optional
        :type: bool
        :return: AuthnRequest maybe deflated and base64 encoded
        :rtype: str object
        """
        if deflate:
            request = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._authn_request)
        else:
            request = OneLogin_Saml2_Utils.b64encode(self._authn_request)
        return request



[docs]    def get_id(self):
        """
        Returns the AuthNRequest ID.
        :return: AuthNRequest ID
        :rtype: string
        """
        return self._id



[docs]    def get_xml(self):
        """
        Returns the XML that will be sent as part of the request
        :return: XML request body
        :rtype: string
        """
        return self._authn_request
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/compat.html000066400000000000000000000256721451074743100247350ustar00rootroot00000000000000 onelogin.saml2.compat — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.compat

# -*- coding: utf-8 -*-

""" py3 compatibility class


"""

from __future__ import absolute_import, print_function, with_statement

try:
    basestring
except NameError:
    basestring = str

try:
    unicode
except NameError:
    unicode = str


if isinstance(b'', type('')):  # py 2.x
    text_types = (basestring,)  # noqa
    bytes_type = bytes
    str_type = basestring  # noqa

    def utf8(data):
        """  return utf8-encoded string """
        if isinstance(data, basestring):
            return data.decode("utf8")
        return unicode(data)

    def to_string(data):
        """ return string """
        if isinstance(data, unicode):
            return data.encode("utf8")
        return str(data)

    def to_bytes(data):
        """ return bytes """
        if isinstance(data, unicode):
            return data.encode("utf8")
        return str(data)

else:  # py 3.x
    text_types = (bytes, str)
    bytes_type = bytes
    str_type = str


[docs]    def utf8(data):
        """ return utf8-encoded string """
        if isinstance(data, bytes):
            return data.decode("utf8")
        return str(data)



[docs]    def to_string(data):
        """convert to string"""
        if isinstance(data, bytes):
            return data.decode("utf8")
        return str(data)



[docs]    def to_bytes(data):
        """return bytes"""
        if isinstance(data, str):
            return data.encode("utf8")
        return bytes(data)
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/constants.html000066400000000000000000000362011451074743100254540ustar00rootroot00000000000000 onelogin.saml2.constants — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.constants

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Constants class


Constants class of SAML Python Toolkit.

"""



[docs]class OneLogin_Saml2_Constants(object):
    """

    This class defines all the constants that will be used
    in the SAML Python Toolkit.

    """

    # Value added to the current time in time condition validations
    ALLOWED_CLOCK_DRIFT = 300

    # NameID Formats
    NAMEID_EMAIL_ADDRESS = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'
    NAMEID_X509_SUBJECT_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName'
    NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName'
    NAMEID_UNSPECIFIED = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'
    NAMEID_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos'
    NAMEID_ENTITY = 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
    NAMEID_TRANSIENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient'
    NAMEID_PERSISTENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'
    NAMEID_ENCRYPTED = 'urn:oasis:names:tc:SAML:2.0:nameid-format:encrypted'

    # Attribute Name Formats
    ATTRNAME_FORMAT_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified'
    ATTRNAME_FORMAT_URI = 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri'
    ATTRNAME_FORMAT_BASIC = 'urn:oasis:names:tc:SAML:2.0:attrname-format:basic'

    # Namespaces
    NS_SAML = 'urn:oasis:names:tc:SAML:2.0:assertion'
    NS_SAMLP = 'urn:oasis:names:tc:SAML:2.0:protocol'
    NS_SOAP = 'http://schemas.xmlsoap.org/soap/envelope/'
    NS_MD = 'urn:oasis:names:tc:SAML:2.0:metadata'
    NS_XS = 'http://www.w3.org/2001/XMLSchema'
    NS_XSI = 'http://www.w3.org/2001/XMLSchema-instance'
    NS_XENC = 'http://www.w3.org/2001/04/xmlenc#'
    NS_DS = 'http://www.w3.org/2000/09/xmldsig#'

    # Namespace Prefixes
    NS_PREFIX_SAML = 'saml'
    NS_PREFIX_SAMLP = 'samlp'
    NS_PREFIX_MD = 'md'
    NS_PREFIX_XS = 'xs'
    NS_PREFIX_XSI = 'xsi'
    NS_PREFIX_XSD = 'xsd'
    NS_PREFIX_XENC = 'xenc'
    NS_PREFIX_DS = 'ds'

    # Prefix:Namespace Mappings
    NSMAP = {
        NS_PREFIX_SAMLP: NS_SAMLP,
        NS_PREFIX_SAML: NS_SAML,
        NS_PREFIX_DS: NS_DS,
        NS_PREFIX_XENC: NS_XENC,
        NS_PREFIX_MD: NS_MD
    }

    # Bindings
    BINDING_HTTP_POST = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'
    BINDING_HTTP_REDIRECT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
    BINDING_HTTP_ARTIFACT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact'
    BINDING_SOAP = 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP'
    BINDING_DEFLATE = 'urn:oasis:names:tc:SAML:2.0:bindings:URL-Encoding:DEFLATE'

    # Auth Context Class
    AC_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified'
    AC_PASSWORD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password'
    AC_PASSWORD_PROTECTED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport'
    AC_X509 = 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'
    AC_SMARTCARD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard'
    AC_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos'

    # Subject Confirmation
    CM_BEARER = 'urn:oasis:names:tc:SAML:2.0:cm:bearer'
    CM_HOLDER_KEY = 'urn:oasis:names:tc:SAML:2.0:cm:holder-of-key'
    CM_SENDER_VOUCHES = 'urn:oasis:names:tc:SAML:2.0:cm:sender-vouches'

    # Status Codes
    STATUS_SUCCESS = 'urn:oasis:names:tc:SAML:2.0:status:Success'
    STATUS_REQUESTER = 'urn:oasis:names:tc:SAML:2.0:status:Requester'
    STATUS_RESPONDER = 'urn:oasis:names:tc:SAML:2.0:status:Responder'
    STATUS_VERSION_MISMATCH = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch'
    STATUS_NO_PASSIVE = 'urn:oasis:names:tc:SAML:2.0:status:NoPassive'
    STATUS_PARTIAL_LOGOUT = 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout'
    STATUS_PROXY_COUNT_EXCEEDED = 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded'

    # Sign & Crypto
    SHA1 = 'http://www.w3.org/2000/09/xmldsig#sha1'
    SHA256 = 'http://www.w3.org/2001/04/xmlenc#sha256'
    SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#sha384'
    SHA512 = 'http://www.w3.org/2001/04/xmlenc#sha512'

    DSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#dsa-sha1'
    RSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
    RSA_SHA256 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256'
    RSA_SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384'
    RSA_SHA512 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512'

    # Enc
    TRIPLEDES_CBC = 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc'
    AES128_CBC = 'http://www.w3.org/2001/04/xmlenc#aes128-cbc'
    AES192_CBC = 'http://www.w3.org/2001/04/xmlenc#aes192-cbc'
    AES256_CBC = 'http://www.w3.org/2001/04/xmlenc#aes256-cbc'
    RSA_1_5 = 'http://www.w3.org/2001/04/xmlenc#rsa-1_5'
    RSA_OAEP_MGF1P = 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p'

    # Define here the deprecated algorithms
    DEPRECATED_ALGORITHMS = [DSA_SHA1, RSA_SHA1, SHA1]
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/errors.html000066400000000000000000000363371451074743100247660ustar00rootroot00000000000000 onelogin.saml2.errors — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.errors

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Error class


Error class of SAML Python Toolkit.

Defines common Error codes and has a custom initializator.

"""



[docs]class OneLogin_Saml2_Error(Exception):
    """

    This class implements a custom Exception handler.
    Defines custom error codes.

    """

    # Errors
    SETTINGS_FILE_NOT_FOUND = 0
    SETTINGS_INVALID_SYNTAX = 1
    SETTINGS_INVALID = 2
    METADATA_SP_INVALID = 3
    # SP_CERTS_NOT_FOUND is deprecated, use CERT_NOT_FOUND instead
    SP_CERTS_NOT_FOUND = 4
    CERT_NOT_FOUND = 4
    REDIRECT_INVALID_URL = 5
    PUBLIC_CERT_FILE_NOT_FOUND = 6
    PRIVATE_KEY_FILE_NOT_FOUND = 7
    SAML_RESPONSE_NOT_FOUND = 8
    SAML_LOGOUTMESSAGE_NOT_FOUND = 9
    SAML_LOGOUTREQUEST_INVALID = 10
    SAML_LOGOUTRESPONSE_INVALID = 11
    SAML_SINGLE_LOGOUT_NOT_SUPPORTED = 12
    PRIVATE_KEY_NOT_FOUND = 13
    UNSUPPORTED_SETTINGS_OBJECT = 14

    def __init__(self, message, code=0, errors=None):
        """
        Initializes the Exception instance.

        Arguments are:
            * (str)   message.   Describes the error.
            * (int)   code.      The code error (defined in the error class).
        """
        assert isinstance(code, int)

        if errors is not None:
            message = message % errors

        Exception.__init__(self, message)
        self.code = code




[docs]class OneLogin_Saml2_ValidationError(Exception):
    """
    This class implements another custom Exception handler, related
    to exceptions that happens during validation process.
    Defines custom error codes .
    """

    # Validation Errors
    UNSUPPORTED_SAML_VERSION = 0
    MISSING_ID = 1
    WRONG_NUMBER_OF_ASSERTIONS = 2
    MISSING_STATUS = 3
    MISSING_STATUS_CODE = 4
    STATUS_CODE_IS_NOT_SUCCESS = 5
    WRONG_SIGNED_ELEMENT = 6
    ID_NOT_FOUND_IN_SIGNED_ELEMENT = 7
    DUPLICATED_ID_IN_SIGNED_ELEMENTS = 8
    INVALID_SIGNED_ELEMENT = 9
    DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS = 10
    UNEXPECTED_SIGNED_ELEMENTS = 11
    WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE = 12
    WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION = 13
    INVALID_XML_FORMAT = 14
    WRONG_INRESPONSETO = 15
    NO_ENCRYPTED_ASSERTION = 16
    NO_ENCRYPTED_NAMEID = 17
    MISSING_CONDITIONS = 18
    ASSERTION_TOO_EARLY = 19
    ASSERTION_EXPIRED = 20
    WRONG_NUMBER_OF_AUTHSTATEMENTS = 21
    NO_ATTRIBUTESTATEMENT = 22
    ENCRYPTED_ATTRIBUTES = 23
    WRONG_DESTINATION = 24
    EMPTY_DESTINATION = 25
    WRONG_AUDIENCE = 26
    ISSUER_MULTIPLE_IN_RESPONSE = 27
    ISSUER_NOT_FOUND_IN_ASSERTION = 28
    WRONG_ISSUER = 29
    SESSION_EXPIRED = 30
    WRONG_SUBJECTCONFIRMATION = 31
    NO_SIGNED_MESSAGE = 32
    NO_SIGNED_ASSERTION = 33
    NO_SIGNATURE_FOUND = 34
    KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA = 35
    CHILDREN_NODE_NOT_FOUND_IN_KEYINFO = 36
    UNSUPPORTED_RETRIEVAL_METHOD = 37
    NO_NAMEID = 38
    EMPTY_NAMEID = 39
    SP_NAME_QUALIFIER_NAME_MISMATCH = 40
    DUPLICATED_ATTRIBUTE_NAME_FOUND = 41
    INVALID_SIGNATURE = 42
    WRONG_NUMBER_OF_SIGNATURES = 43
    RESPONSE_EXPIRED = 44
    AUTHN_CONTEXT_MISMATCH = 45
    DEPRECATED_SIGNATURE_METHOD = 46
    DEPRECATED_DIGEST_METHOD = 47

    def __init__(self, message, code=0, errors=None):
        """
        Initializes the Exception instance.
        Arguments are:
            * (str)   message.   Describes the error.
            * (int)   code.      The code error (defined in the error class).
        """
        assert isinstance(code, int)

        if errors is not None:
            message = message % errors

        Exception.__init__(self, message)
        self.code = code
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/idp_metadata_parser.html000066400000000000000000001261511451074743100274340ustar00rootroot00000000000000 onelogin.saml2.idp_metadata_parser — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.idp_metadata_parser

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_IdPMetadataParser class
Metadata class of SAML Python Toolkit.
"""


from copy import deepcopy

try:
    import urllib.request as urllib2
except ImportError:
    import urllib2

import ssl

from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML



[docs]class OneLogin_Saml2_IdPMetadataParser(object):
    """
    A class that contain methods related to obtaining and parsing metadata from IdP

    This class does not validate in any way the URL that is introduced,
    make sure to validate it properly before use it in a get_metadata method.
    """


[docs]    @classmethod
    def get_metadata(cls, url, validate_cert=True, timeout=None, headers=None):
        """
        Gets the metadata XML from the provided URL
        :param url: Url where the XML of the Identity Provider Metadata is published.
        :type url: string

        :param validate_cert: If the url uses https schema, that flag enables or not the verification of the associated certificate.
        :type validate_cert: bool

        :param timeout: Timeout in seconds to wait for metadata response
        :type timeout: int
        :param headers: Extra headers to send in the request
        :type headers: dict

        :returns: metadata XML
        :rtype: string
        """
        valid = False

        request = urllib2.Request(url, headers=headers or {})

        if validate_cert:
            response = urllib2.urlopen(request, timeout=timeout)
        else:
            ctx = ssl.create_default_context()
            ctx.check_hostname = False
            ctx.verify_mode = ssl.CERT_NONE
            response = urllib2.urlopen(request, context=ctx, timeout=timeout)
        xml = response.read()

        if xml:
            try:
                dom = OneLogin_Saml2_XML.to_etree(xml)
                idp_descriptor_nodes = OneLogin_Saml2_XML.query(dom, '//md:IDPSSODescriptor')
                if idp_descriptor_nodes:
                    valid = True
            except Exception:
                pass

        if not valid:
            raise Exception('Not valid IdP XML found from URL: %s' % (url))

        return xml



[docs]    @classmethod
    def parse_remote(cls, url, validate_cert=True, entity_id=None, timeout=None, **kwargs):
        """
        Gets the metadata XML from the provided URL and parse it, returning a dict with extracted data
        :param url: Url where the XML of the Identity Provider Metadata is published.
        :type url: string

        :param validate_cert: If the url uses https schema, that flag enables or not the verification of the associated certificate.
        :type validate_cert: bool

        :param entity_id: Specify the entity_id of the EntityDescriptor that you want to parse a XML
                          that contains multiple EntityDescriptor.
        :type entity_id: string

        :param timeout: Timeout in seconds to wait for metadata response
        :type timeout: int

        :returns: settings dict with extracted data
        :rtype: dict
        """
        idp_metadata = cls.get_metadata(url, validate_cert, timeout, headers=kwargs.pop('headers', None))
        return cls.parse(idp_metadata, entity_id=entity_id, **kwargs)



[docs]    @classmethod
    def parse(
            cls,
            idp_metadata,
            required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT,
            required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT,
            entity_id=None):
        """
        Parses the Identity Provider metadata and return a dict with extracted data.

        If there are multiple <IDPSSODescriptor> tags, parse only the first.

        Parses only those SSO endpoints with the same binding as given by
        the `required_sso_binding` parameter.

        Parses only those SLO endpoints with the same binding as given by
        the `required_slo_binding` parameter.

        If the metadata specifies multiple SSO endpoints with the required
        binding, extract only the first (the same holds true for SLO
        endpoints).

        :param idp_metadata: XML of the Identity Provider Metadata.
        :type idp_metadata: string

        :param required_sso_binding: Parse only POST or REDIRECT SSO endpoints.
        :type required_sso_binding: one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT
            or OneLogin_Saml2_Constants.BINDING_HTTP_POST

        :param required_slo_binding: Parse only POST or REDIRECT SLO endpoints.
        :type required_slo_binding: one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT
            or OneLogin_Saml2_Constants.BINDING_HTTP_POST

        :param entity_id: Specify the entity_id of the EntityDescriptor that you want to parse a XML
                          that contains multiple EntityDescriptor.
        :type entity_id: string

        :returns: settings dict with extracted data
        :rtype: dict
        """
        data = {}

        dom = OneLogin_Saml2_XML.to_etree(idp_metadata)
        idp_entity_id = want_authn_requests_signed = idp_name_id_format = idp_sso_url = idp_slo_url = certs = None

        entity_desc_path = '//md:EntityDescriptor'
        if entity_id:
            entity_desc_path += "[@entityID='%s']" % entity_id
        entity_descriptor_nodes = OneLogin_Saml2_XML.query(dom, entity_desc_path)

        if len(entity_descriptor_nodes) > 0:
            entity_descriptor_node = entity_descriptor_nodes[0]
            idp_descriptor_nodes = OneLogin_Saml2_XML.query(entity_descriptor_node, './md:IDPSSODescriptor')
            if len(idp_descriptor_nodes) > 0:
                idp_descriptor_node = idp_descriptor_nodes[0]

                idp_entity_id = entity_descriptor_node.get('entityID', None)

                want_authn_requests_signed = idp_descriptor_node.get('WantAuthnRequestsSigned', None)

                name_id_format_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, './md:NameIDFormat')
                if len(name_id_format_nodes) > 0:
                    idp_name_id_format = OneLogin_Saml2_XML.element_text(name_id_format_nodes[0])

                sso_nodes = OneLogin_Saml2_XML.query(
                    idp_descriptor_node,
                    "./md:SingleSignOnService[@Binding='%s']" % required_sso_binding
                )

                if len(sso_nodes) > 0:
                    idp_sso_url = sso_nodes[0].get('Location', None)

                slo_nodes = OneLogin_Saml2_XML.query(
                    idp_descriptor_node,
                    "./md:SingleLogoutService[@Binding='%s']" % required_slo_binding
                )

                if len(slo_nodes) > 0:
                    idp_slo_url = slo_nodes[0].get('Location', None)

                signing_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, "./md:KeyDescriptor[not(contains(@use, 'encryption'))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate")
                encryption_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, "./md:KeyDescriptor[not(contains(@use, 'signing'))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate")

                if len(signing_nodes) > 0 or len(encryption_nodes) > 0:
                    certs = {}
                    if len(signing_nodes) > 0:
                        certs['signing'] = []
                        for cert_node in signing_nodes:
                            certs['signing'].append(''.join(OneLogin_Saml2_XML.element_text(cert_node).split()))
                    if len(encryption_nodes) > 0:
                        certs['encryption'] = []
                        for cert_node in encryption_nodes:
                            certs['encryption'].append(''.join(OneLogin_Saml2_XML.element_text(cert_node).split()))

                data['idp'] = {}

                if idp_entity_id is not None:
                    data['idp']['entityId'] = idp_entity_id

                if idp_sso_url is not None:
                    data['idp']['singleSignOnService'] = {}
                    data['idp']['singleSignOnService']['url'] = idp_sso_url
                    data['idp']['singleSignOnService']['binding'] = required_sso_binding

                if idp_slo_url is not None:
                    data['idp']['singleLogoutService'] = {}
                    data['idp']['singleLogoutService']['url'] = idp_slo_url
                    data['idp']['singleLogoutService']['binding'] = required_slo_binding

                if want_authn_requests_signed is not None:
                    data['security'] = {}
                    data['security']['authnRequestsSigned'] = want_authn_requests_signed == "true"

                if idp_name_id_format:
                    data['sp'] = {}
                    data['sp']['NameIDFormat'] = idp_name_id_format

                if certs is not None:
                    if (len(certs) == 1 and
                        (('signing' in certs and len(certs['signing']) == 1) or
                         ('encryption' in certs and len(certs['encryption']) == 1))) or \
                        (('signing' in certs and len(certs['signing']) == 1) and
                         ('encryption' in certs and len(certs['encryption']) == 1 and
                         certs['signing'][0] == certs['encryption'][0])):
                        if 'signing' in certs:
                            data['idp']['x509cert'] = certs['signing'][0]
                        else:
                            data['idp']['x509cert'] = certs['encryption'][0]
                    else:
                        data['idp']['x509certMulti'] = certs
        return data



[docs]    @staticmethod
    def merge_settings(settings, new_metadata_settings):
        """
        Will update the settings with the provided new settings data extracted from the IdP metadata
        :param settings: Current settings dict data
        :type settings: dict
        :param new_metadata_settings: Settings to be merged (extracted from IdP metadata after parsing)
        :type new_metadata_settings: dict
        :returns: merged settings
        :rtype: dict
        """
        for d in (settings, new_metadata_settings):
            if not isinstance(d, dict):
                raise TypeError('Both arguments must be dictionaries.')

        # Guarantee to not modify original data (`settings.copy()` would not
        # be sufficient, as it's just a shallow copy).
        result_settings = deepcopy(settings)

        # previously I will take care of cert stuff
        if 'idp' in new_metadata_settings and 'idp' in result_settings:
            if new_metadata_settings['idp'].get('x509cert', None) and result_settings['idp'].get('x509certMulti', None):
                del result_settings['idp']['x509certMulti']
            if new_metadata_settings['idp'].get('x509certMulti', None) and result_settings['idp'].get('x509cert', None):
                del result_settings['idp']['x509cert']

        # Merge `new_metadata_settings` into `result_settings`.
        dict_deep_merge(result_settings, new_metadata_settings)
        return result_settings




[docs]def dict_deep_merge(a, b, path=None):
    """Deep-merge dictionary `b` into dictionary `a`.

    Kudos to http://stackoverflow.com/a/7205107/145400
    """
    if path is None:
        path = []
    for key in b:
        if key in a:
            if isinstance(a[key], dict) and isinstance(b[key], dict):
                dict_deep_merge(a[key], b[key], path + [str(key)])
            elif a[key] == b[key]:
                # Key conflict, but equal value.
                pass
            else:
                # Key/value conflict. Prioritize b over a.
                a[key] = b[key]
        else:
            a[key] = b[key]
    return a
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/logout_request.html000066400000000000000000001364051451074743100265300ustar00rootroot00000000000000 onelogin.saml2.logout_request — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.logout_request

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Logout_Request class


Logout Request class of SAML Python Toolkit.

"""

from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError
from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML



[docs]class OneLogin_Saml2_Logout_Request(object):
    """

    This class handles a Logout Request.

    Builds a Logout Response object and validates it.

    """

    def __init__(self, settings, request=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None):
        """
        Constructs the Logout Request object.

        :param settings: Setting data
        :type settings: OneLogin_Saml2_Settings

        :param request: Optional. A LogoutRequest to be loaded instead build one.
        :type request: string

        :param name_id: The NameID that will be set in the LogoutRequest.
        :type name_id: string

        :param session_index: SessionIndex that identifies the session of the user.
        :type session_index: string

        :param nq: IDP Name Qualifier
        :type: string

        :param name_id_format: The NameID Format that will be set in the LogoutRequest.
        :type: string

        :param spnq: SP Name Qualifier
        :type: string
        """
        self._settings = settings
        self._error = None
        self.id = None

        if request is None:
            sp_data = self._settings.get_sp_data()
            idp_data = self._settings.get_idp_data()
            security = self._settings.get_security_data()

            self.id = self._generate_request_id()

            issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now())

            cert = None
            if security['nameIdEncrypted']:
                exists_multix509enc = 'x509certMulti' in idp_data and \
                    'encryption' in idp_data['x509certMulti'] and \
                    idp_data['x509certMulti']['encryption']
                if exists_multix509enc:
                    cert = idp_data['x509certMulti']['encryption'][0]
                else:
                    cert = self._settings.get_idp_cert()

            if name_id is not None:
                if not name_id_format and sp_data['NameIDFormat'] != OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED:
                    name_id_format = sp_data['NameIDFormat']
            else:
                name_id = idp_data['entityId']
                name_id_format = OneLogin_Saml2_Constants.NAMEID_ENTITY

            # From saml-core-2.0-os 8.3.6, when the entity Format is used:
            # "The NameQualifier, SPNameQualifier, and SPProvidedID attributes
            # MUST be omitted.
            if name_id_format and name_id_format == OneLogin_Saml2_Constants.NAMEID_ENTITY:
                nq = None
                spnq = None

            # NameID Format UNSPECIFIED omitted
            if name_id_format and name_id_format == OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED:
                name_id_format = None

            name_id_obj = OneLogin_Saml2_Utils.generate_name_id(
                name_id,
                spnq,
                name_id_format,
                cert,
                False,
                nq
            )

            if session_index:
                session_index_str = '<samlp:SessionIndex>%s</samlp:SessionIndex>' % session_index
            else:
                session_index_str = ''

            logout_request = OneLogin_Saml2_Templates.LOGOUT_REQUEST % \
                {
                    'id': self.id,
                    'issue_instant': issue_instant,
                    'single_logout_url': self._settings.get_idp_slo_url(),
                    'entity_id': sp_data['entityId'],
                    'name_id': name_id_obj,
                    'session_index': session_index_str,
                }
        else:
            logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(request, ignore_zip=True)
            self.id = self.get_id(logout_request)

        self._logout_request = compat.to_string(logout_request)


[docs]    def get_request(self, deflate=True):
        """
        Returns the Logout Request deflated, base64encoded
        :param deflate: It makes the deflate process optional
        :type: bool
        :return: Logout Request maybe deflated and base64 encoded
        :rtype: str object
        """
        if deflate:
            request = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._logout_request)
        else:
            request = OneLogin_Saml2_Utils.b64encode(self._logout_request)
        return request



[docs]    def get_xml(self):
        """
        Returns the XML that will be sent as part of the request
        or that was received at the SP
        :return: XML request body
        :rtype: string
        """
        return self._logout_request



[docs]    @classmethod
    def get_id(cls, request):
        """
        Returns the ID of the Logout Request
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :return: string ID
        :rtype: str object
        """

        elem = OneLogin_Saml2_XML.to_etree(request)
        return elem.get('ID', None)



[docs]    @classmethod
    def get_nameid_data(cls, request, key=None):
        """
        Gets the NameID Data of the the Logout Request
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :param key: The SP key
        :type key: string
        :return: Name ID Data (Value, Format, NameQualifier, SPNameQualifier)
        :rtype: dict
        """
        elem = OneLogin_Saml2_XML.to_etree(request)
        name_id = None
        encrypted_entries = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:EncryptedID')

        if len(encrypted_entries) == 1:
            if key is None:
                raise OneLogin_Saml2_Error(
                    'Private Key is required in order to decrypt the NameID, check settings',
                    OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND
                )

            encrypted_data_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:EncryptedID/xenc:EncryptedData')
            if len(encrypted_data_nodes) == 1:
                encrypted_data = encrypted_data_nodes[0]
                name_id = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key)
        else:
            entries = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:NameID')
            if len(entries) == 1:
                name_id = entries[0]

        if name_id is None:
            raise OneLogin_Saml2_ValidationError(
                'NameID not found in the Logout Request',
                OneLogin_Saml2_ValidationError.NO_NAMEID
            )

        name_id_data = {
            'Value': OneLogin_Saml2_XML.element_text(name_id)
        }
        for attr in ['Format', 'SPNameQualifier', 'NameQualifier']:
            if attr in name_id.attrib:
                name_id_data[attr] = name_id.attrib[attr]

        return name_id_data



[docs]    @classmethod
    def get_nameid(cls, request, key=None):
        """
        Gets the NameID of the Logout Request Message
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :param key: The SP key
        :type key: string
        :return: Name ID Value
        :rtype: string
        """
        name_id = cls.get_nameid_data(request, key)
        return name_id['Value']



[docs]    @classmethod
    def get_nameid_format(cls, request, key=None):
        """
        Gets the NameID Format of the Logout Request Message
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :param key: The SP key
        :type key: string
        :return: Name ID Format
        :rtype: string
        """
        name_id_format = None
        name_id_data = cls.get_nameid_data(request, key)
        if name_id_data and 'Format' in name_id_data.keys():
            name_id_format = name_id_data['Format']
        return name_id_format



[docs]    @classmethod
    def get_issuer(cls, request):
        """
        Gets the Issuer of the Logout Request Message
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :return: The Issuer
        :rtype: string
        """

        elem = OneLogin_Saml2_XML.to_etree(request)
        issuer = None
        issuer_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:Issuer')
        if len(issuer_nodes) == 1:
            issuer = OneLogin_Saml2_XML.element_text(issuer_nodes[0])
        return issuer



[docs]    @classmethod
    def get_session_indexes(cls, request):
        """
        Gets the SessionIndexes from the Logout Request
        :param request: Logout Request Message
        :type request: string|DOMDocument
        :return: The SessionIndex value
        :rtype: list
        """

        elem = OneLogin_Saml2_XML.to_etree(request)
        session_indexes = []
        session_index_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/samlp:SessionIndex')
        for session_index_node in session_index_nodes:
            session_indexes.append(OneLogin_Saml2_XML.element_text(session_index_node))
        return session_indexes



[docs]    def is_valid(self, request_data, raise_exceptions=False):
        """
        Checks if the Logout Request received is valid
        :param request_data: Request Data
        :type request_data: dict

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean

        :return: If the Logout Request is or not valid
        :rtype: boolean
        """
        self._error = None
        try:
            root = OneLogin_Saml2_XML.to_etree(self._logout_request)

            idp_data = self._settings.get_idp_data()
            idp_entity_id = idp_data['entityId']

            get_data = ('get_data' in request_data and request_data['get_data']) or dict()

            if self._settings.is_strict():
                res = OneLogin_Saml2_XML.validate_xml(root, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active())
                if isinstance(res, str):
                    raise OneLogin_Saml2_ValidationError(
                        'Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd',
                        OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT
                    )

                security = self._settings.get_security_data()

                current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data)

                # Check NotOnOrAfter
                if root.get('NotOnOrAfter', None):
                    na = OneLogin_Saml2_Utils.parse_SAML_to_time(root.get('NotOnOrAfter'))
                    if na <= OneLogin_Saml2_Utils.now():
                        raise OneLogin_Saml2_ValidationError(
                            'Could not validate timestamp: expired. Check system clock.)',
                            OneLogin_Saml2_ValidationError.RESPONSE_EXPIRED
                        )

                # Check destination
                destination = root.get('Destination', None)
                if destination:
                    if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)):
                        raise OneLogin_Saml2_ValidationError(
                            'The LogoutRequest was received at '
                            '%(currentURL)s instead of %(destination)s' %
                            {
                                'currentURL': current_url,
                                'destination': destination,
                            },
                            OneLogin_Saml2_ValidationError.WRONG_DESTINATION
                        )

                # Check issuer
                issuer = self.get_issuer(root)
                if issuer is not None and issuer != idp_entity_id:
                    raise OneLogin_Saml2_ValidationError(
                        'Invalid issuer in the Logout Request (expected %(idpEntityId)s, got %(issuer)s)' %
                        {
                            'idpEntityId': idp_entity_id,
                            'issuer': issuer
                        },
                        OneLogin_Saml2_ValidationError.WRONG_ISSUER
                    )

                if security['wantMessagesSigned']:
                    if 'Signature' not in get_data:
                        raise OneLogin_Saml2_ValidationError(
                            'The Message of the Logout Request is not signed and the SP require it',
                            OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE
                        )

            return True
        except Exception as err:
            # pylint: disable=R0801
            self._error = str(err)
            debug = self._settings.is_debug_active()
            if debug:
                print(err)
            if raise_exceptions:
                raise
            return False



[docs]    def get_error(self):
        """
        After executing a validation process, if it fails this method returns the cause
        """
        return self._error


    def _generate_request_id(self):
        """
        Generate an unique logout request ID.
        """
        return OneLogin_Saml2_Utils.generate_unique_id()
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/logout_response.html000066400000000000000000000760001451074743100266700ustar00rootroot00000000000000 onelogin.saml2.logout_response — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.logout_response

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Logout_Response class


Logout Response class of SAML Python Toolkit.

"""

from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_ValidationError
from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML



[docs]class OneLogin_Saml2_Logout_Response(object):
    """

    This class  handles a Logout Response. It Builds or parses a Logout Response object
    and validates it.

    """

    def __init__(self, settings, response=None):
        """
        Constructs a Logout Response object (Initialize params from settings
        and if provided load the Logout Response.

        Arguments are:
            * (OneLogin_Saml2_Settings)   settings. Setting data
            * (string)                    response. An UUEncoded SAML Logout
                                                    response from the IdP.
        """
        self._settings = settings
        self._error = None
        self.id = None

        if response is not None:
            self._logout_response = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(response, ignore_zip=True))
            self.document = OneLogin_Saml2_XML.to_etree(self._logout_response)
            self.id = self.document.get('ID', None)


[docs]    def get_issuer(self):
        """
        Gets the Issuer of the Logout Response Message
        :return: The Issuer
        :rtype: string
        """
        issuer = None
        issuer_nodes = self._query('/samlp:LogoutResponse/saml:Issuer')
        if len(issuer_nodes) == 1:
            issuer = OneLogin_Saml2_XML.element_text(issuer_nodes[0])
        return issuer



[docs]    def get_status(self):
        """
        Gets the Status
        :return: The Status
        :rtype: string
        """
        entries = self._query('/samlp:LogoutResponse/samlp:Status/samlp:StatusCode')
        if len(entries) == 0:
            return None
        status = entries[0].attrib['Value']
        return status



[docs]    def is_valid(self, request_data, request_id=None, raise_exceptions=False):
        """
        Determines if the SAML LogoutResponse is valid
        :param request_id: The ID of the LogoutRequest sent by this SP to the IdP
        :type request_id: string

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean

        :return: Returns if the SAML LogoutResponse is or not valid
        :rtype: boolean
        """
        self._error = None
        try:
            idp_data = self._settings.get_idp_data()
            idp_entity_id = idp_data['entityId']
            get_data = request_data['get_data']

            if self._settings.is_strict():
                res = OneLogin_Saml2_XML.validate_xml(self.document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active())
                if isinstance(res, str):
                    raise OneLogin_Saml2_ValidationError(
                        'Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd',
                        OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT
                    )

                security = self._settings.get_security_data()

                # Check if the InResponseTo of the Logout Response matches the ID of the Logout Request (requestId) if provided
                in_response_to = self.get_in_response_to()
                if request_id is not None and in_response_to and in_response_to != request_id:
                    raise OneLogin_Saml2_ValidationError(
                        'The InResponseTo of the Logout Response: %s, does not match the ID of the Logout request sent by the SP: %s' % (in_response_to, request_id),
                        OneLogin_Saml2_ValidationError.WRONG_INRESPONSETO
                    )

                # Check issuer
                issuer = self.get_issuer()
                if issuer is not None and issuer != idp_entity_id:
                    raise OneLogin_Saml2_ValidationError(
                        'Invalid issuer in the Logout Response (expected %(idpEntityId)s, got %(issuer)s)' %
                        {
                            'idpEntityId': idp_entity_id,
                            'issuer': issuer
                        },
                        OneLogin_Saml2_ValidationError.WRONG_ISSUER
                    )

                current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data)

                # Check destination
                destination = self.document.get('Destination', None)
                if destination:
                    if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)):
                        raise OneLogin_Saml2_ValidationError(
                            'The LogoutResponse was received at %s instead of %s' % (current_url, destination),
                            OneLogin_Saml2_ValidationError.WRONG_DESTINATION
                        )

                if security['wantMessagesSigned']:
                    if 'Signature' not in get_data:
                        raise OneLogin_Saml2_ValidationError(
                            'The Message of the Logout Response is not signed and the SP require it',
                            OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE
                        )
            return True
        # pylint: disable=R0801
        except Exception as err:
            self._error = str(err)
            debug = self._settings.is_debug_active()
            if debug:
                print(err)
            if raise_exceptions:
                raise
            return False


    def _query(self, query):
        """
        Extracts a node from the Etree (Logout Response Message)
        :param query: Xpath Expression
        :type query: string
        :return: The queried node
        :rtype: Element
        """
        return OneLogin_Saml2_XML.query(self.document, query)


[docs]    def build(self, in_response_to, status=OneLogin_Saml2_Constants.STATUS_SUCCESS):
        """
        Creates a Logout Response object.
        :param in_response_to: InResponseTo value for the Logout Response.
        :type in_response_to: string
        :param: status: The status of the response
        :type: status: string
        """
        sp_data = self._settings.get_sp_data()

        self.id = self._generate_request_id()

        issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now())

        logout_response = OneLogin_Saml2_Templates.LOGOUT_RESPONSE % {
            "id": self.id,
            "issue_instant": issue_instant,
            "destination": self._settings.get_idp_slo_response_url(),
            "in_response_to": in_response_to,
            "entity_id": sp_data["entityId"],
            "status": status,
        }

        self._logout_response = logout_response



[docs]    def get_in_response_to(self):
        """
        Gets the ID of the LogoutRequest which this response is in response to
        :returns: ID of LogoutRequest this LogoutResponse is in response to or None if it is not present
        :rtype: str
        """
        return self.document.get('InResponseTo')



[docs]    def get_response(self, deflate=True):
        """
        Returns a Logout Response object.
        :param deflate: It makes the deflate process optional
        :type: bool
        :return: Logout Response maybe deflated and base64 encoded
        :rtype: string
        """
        if deflate:
            response = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._logout_response)
        else:
            response = OneLogin_Saml2_Utils.b64encode(self._logout_response)
        return response



[docs]    def get_error(self):
        """
        After executing a validation process, if it fails this method returns the cause
        """
        return self._error



[docs]    def get_xml(self):
        """
        Returns the XML that will be sent as part of the response
        or that was received at the SP
        :return: XML response body
        :rtype: string
        """
        return self._logout_response


    def _generate_request_id(self):
        """
        Generate an unique logout response ID.
        """
        return OneLogin_Saml2_Utils.generate_unique_id()
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/metadata.html000066400000000000000000001260151451074743100252230ustar00rootroot00000000000000 onelogin.saml2.metadata — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.metadata

# -*- coding: utf-8 -*-

""" OneLoginSaml2Metadata class


Metadata class of SAML Python Toolkit.

"""

from time import gmtime, strftime, time
from datetime import datetime

from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.utils import OneLogin_Saml2_Utils
from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML

try:
    basestring
except NameError:
    basestring = str



[docs]class OneLogin_Saml2_Metadata(object):
    """

    A class that contains methods related to the metadata of the SP

    """

    TIME_VALID = 172800   # 2 days
    TIME_CACHED = 604800  # 1 week


[docs]    @classmethod
    def builder(cls, sp, authnsign=False, wsign=False, valid_until=None, cache_duration=None, contacts=None, organization=None):
        """
        Builds the metadata of the SP

        :param sp: The SP data
        :type sp: string

        :param authnsign: authnRequestsSigned attribute
        :type authnsign: string

        :param wsign: wantAssertionsSigned attribute
        :type wsign: string

        :param valid_until: Metadata's expiry date
        :type valid_until: string|DateTime|Timestamp

        :param cache_duration: Duration of the cache in seconds
        :type cache_duration: int|string

        :param contacts: Contacts info
        :type contacts: dict

        :param organization: Organization info
        :type organization: dict
        """
        if valid_until is None:
            valid_until = int(time()) + cls.TIME_VALID
        if not isinstance(valid_until, basestring):
            if isinstance(valid_until, datetime):
                valid_until_time = valid_until.timetuple()
            else:
                valid_until_time = gmtime(valid_until)
            valid_until_str = strftime(r'%Y-%m-%dT%H:%M:%SZ', valid_until_time)
        else:
            valid_until_str = valid_until

        if cache_duration is None:
            cache_duration = cls.TIME_CACHED
        if not isinstance(cache_duration, compat.str_type):
            cache_duration_str = 'PT%sS' % cache_duration  # Period of Time x Seconds
        else:
            cache_duration_str = cache_duration

        if contacts is None:
            contacts = {}
        if organization is None:
            organization = {}

        sls = ''
        if 'singleLogoutService' in sp and 'url' in sp['singleLogoutService']:
            sls = OneLogin_Saml2_Templates.MD_SLS % \
                {
                    'binding': sp['singleLogoutService']['binding'],
                    'location': sp['singleLogoutService']['url'],
                }

        str_authnsign = 'true' if authnsign else 'false'
        str_wsign = 'true' if wsign else 'false'

        str_organization = ''
        if len(organization) > 0:
            organization_names = []
            organization_displaynames = []
            organization_urls = []
            for (lang, info) in organization.items():
                organization_names.append("""        <md:OrganizationName xml:lang="%s">%s</md:OrganizationName>""" % (lang, info['name']))
                organization_displaynames.append("""        <md:OrganizationDisplayName xml:lang="%s">%s</md:OrganizationDisplayName>""" % (lang, info['displayname']))
                organization_urls.append("""        <md:OrganizationURL xml:lang="%s">%s</md:OrganizationURL>""" % (lang, info['url']))
            org_data = '\n'.join(organization_names) + '\n' + '\n'.join(organization_displaynames) + '\n' + '\n'.join(organization_urls)
            str_organization = """    <md:Organization>\n%(org)s\n    </md:Organization>""" % {'org': org_data}

        str_contacts = ''
        if len(contacts) > 0:
            contacts_info = []
            for (ctype, info) in contacts.items():
                contact = OneLogin_Saml2_Templates.MD_CONTACT_PERSON % \
                    {
                        'type': ctype,
                        'name': info['givenName'],
                        'email': info['emailAddress'],
                    }
                contacts_info.append(contact)
            str_contacts = '\n'.join(contacts_info)

        str_attribute_consuming_service = ''
        if 'attributeConsumingService' in sp and len(sp['attributeConsumingService']):
            attr_cs_desc_str = ''
            if "serviceDescription" in sp['attributeConsumingService']:
                attr_cs_desc_str = """            <md:ServiceDescription xml:lang="en">%s</md:ServiceDescription>
""" % sp['attributeConsumingService']['serviceDescription']

            requested_attribute_data = []
            for req_attribs in sp['attributeConsumingService']['requestedAttributes']:
                req_attr_nameformat_str = req_attr_friendlyname_str = req_attr_isrequired_str = ''
                req_attr_aux_str = ' />'

                if 'nameFormat' in req_attribs.keys() and req_attribs['nameFormat']:
                    req_attr_nameformat_str = " NameFormat=\"%s\"" % req_attribs['nameFormat']
                if 'friendlyName' in req_attribs.keys() and req_attribs['friendlyName']:
                    req_attr_friendlyname_str = " FriendlyName=\"%s\"" % req_attribs['friendlyName']
                if 'isRequired' in req_attribs.keys() and req_attribs['isRequired']:
                    req_attr_isrequired_str = " isRequired=\"%s\"" % 'true' if req_attribs['isRequired'] else 'false'
                if 'attributeValue' in req_attribs.keys() and req_attribs['attributeValue']:
                    if isinstance(req_attribs['attributeValue'], basestring):
                        req_attribs['attributeValue'] = [req_attribs['attributeValue']]

                    req_attr_aux_str = ">"
                    for attrValue in req_attribs['attributeValue']:
                        req_attr_aux_str += """
                <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">%(attributeValue)s</saml:AttributeValue>""" % \
                            {
                                'attributeValue': attrValue
                            }
                    req_attr_aux_str += """
            </md:RequestedAttribute>"""

                requested_attribute = """            <md:RequestedAttribute Name="%(req_attr_name)s"%(req_attr_nameformat_str)s%(req_attr_friendlyname_str)s%(req_attr_isrequired_str)s%(req_attr_aux_str)s""" % \
                    {
                        'req_attr_name': req_attribs['name'],
                        'req_attr_nameformat_str': req_attr_nameformat_str,
                        'req_attr_friendlyname_str': req_attr_friendlyname_str,
                        'req_attr_isrequired_str': req_attr_isrequired_str,
                        'req_attr_aux_str': req_attr_aux_str
                    }

                requested_attribute_data.append(requested_attribute)

            str_attribute_consuming_service = """        <md:AttributeConsumingService index="%(attribute_consuming_service_index)s">
            <md:ServiceName xml:lang="en">%(service_name)s</md:ServiceName>
%(attr_cs_desc)s%(requested_attribute_str)s
        </md:AttributeConsumingService>
""" % \
                {
                    'service_name': sp['attributeConsumingService']['serviceName'],
                    'attr_cs_desc': attr_cs_desc_str,
                    'attribute_consuming_service_index': sp['attributeConsumingService'].get('index', '1'),
                    'requested_attribute_str': '\n'.join(requested_attribute_data)
                }

        metadata = OneLogin_Saml2_Templates.MD_ENTITY_DESCRIPTOR % \
            {
                'valid': ('validUntil="%s"' % valid_until_str) if valid_until_str else '',
                'cache': ('cacheDuration="%s"' % cache_duration_str) if cache_duration_str else '',
                'entity_id': sp['entityId'],
                'authnsign': str_authnsign,
                'wsign': str_wsign,
                'name_id_format': sp['NameIDFormat'],
                'binding': sp['assertionConsumerService']['binding'],
                'location': sp['assertionConsumerService']['url'],
                'sls': sls,
                'organization': str_organization,
                'contacts': str_contacts,
                'attribute_consuming_service': str_attribute_consuming_service
            }

        return metadata



[docs]    @staticmethod
    def sign_metadata(metadata, key, cert, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256, digest_algorithm=OneLogin_Saml2_Constants.SHA256):
        """
        Signs the metadata with the key/cert provided

        :param metadata: SAML Metadata XML
        :type metadata: string

        :param key: x509 key
        :type key: string

        :param cert: x509 cert
        :type cert: string

        :returns: Signed Metadata
        :rtype: string

        :param sign_algorithm: Signature algorithm method
        :type sign_algorithm: string

        :param digest_algorithm: Digest algorithm method
        :type digest_algorithm: string
        """
        return OneLogin_Saml2_Utils.add_sign(metadata, key, cert, False, sign_algorithm, digest_algorithm)


    @staticmethod
    def _add_x509_key_descriptors(root, cert, signing):
        key_descriptor = OneLogin_Saml2_XML.make_child(root, '{%s}KeyDescriptor' % OneLogin_Saml2_Constants.NS_MD)
        root.remove(key_descriptor)
        root.insert(0, key_descriptor)
        key_info = OneLogin_Saml2_XML.make_child(key_descriptor, '{%s}KeyInfo' % OneLogin_Saml2_Constants.NS_DS)
        key_data = OneLogin_Saml2_XML.make_child(key_info, '{%s}X509Data' % OneLogin_Saml2_Constants.NS_DS)

        x509_certificate = OneLogin_Saml2_XML.make_child(key_data, '{%s}X509Certificate' % OneLogin_Saml2_Constants.NS_DS)
        x509_certificate.text = OneLogin_Saml2_Utils.format_cert(cert, False)
        key_descriptor.set('use', ('encryption', 'signing')[signing])


[docs]    @classmethod
    def add_x509_key_descriptors(cls, metadata, cert=None, add_encryption=True):
        """
        Adds the x509 descriptors (sign/encryption) to the metadata
        The same cert will be used for sign/encrypt

        :param metadata: SAML Metadata XML
        :type metadata: string

        :param cert: x509 cert
        :type cert: string

        :param add_encryption: Determines if the KeyDescriptor[use="encryption"] should be added.
        :type add_encryption: boolean

        :returns: Metadata with KeyDescriptors
        :rtype: string
        """
        if cert is None or cert == '':
            return metadata
        try:
            root = OneLogin_Saml2_XML.to_etree(metadata)
        except Exception as e:
            raise Exception('Error parsing metadata. ' + str(e))

        assert root.tag == '{%s}EntityDescriptor' % OneLogin_Saml2_Constants.NS_MD
        try:
            sp_sso_descriptor = next(root.iterfind('.//md:SPSSODescriptor', namespaces=OneLogin_Saml2_Constants.NSMAP))
        except StopIteration:
            raise Exception('Malformed metadata.')

        if add_encryption:
            cls._add_x509_key_descriptors(sp_sso_descriptor, cert, False)
        cls._add_x509_key_descriptors(sp_sso_descriptor, cert, True)
        return OneLogin_Saml2_XML.to_string(root)
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/response.html000066400000000000000000004155071451074743100253100ustar00rootroot00000000000000 onelogin.saml2.response — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.response

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Response class


SAML Response class of SAML Python Toolkit.

"""

from copy import deepcopy
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError, return_false_on_exception
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML



[docs]class OneLogin_Saml2_Response(object):
    """

    This class handles a SAML Response. It parses or validates
    a Logout Response object.

    """

    def __init__(self, settings, response):
        """
        Constructs the response object.

        :param settings: The setting info
        :type settings: OneLogin_Saml2_Setting object

        :param response: The base64 encoded, XML string containing the samlp:Response
        :type response: string
        """
        self._settings = settings
        self._error = None
        self.response = OneLogin_Saml2_Utils.b64decode(response)
        self.document = OneLogin_Saml2_XML.to_etree(self.response)
        self.decrypted_document = None
        self.encrypted = None
        self.valid_scd_not_on_or_after = None

        # Quick check for the presence of EncryptedAssertion
        encrypted_assertion_nodes = self._query('/samlp:Response/saml:EncryptedAssertion')
        if encrypted_assertion_nodes:
            decrypted_document = deepcopy(self.document)
            self.encrypted = True
            self.decrypted_document = self._decrypt_assertion(decrypted_document)


[docs]    def is_valid(self, request_data, request_id=None, raise_exceptions=False):
        """
        Validates the response object.

        :param request_data: Request Data
        :type request_data: dict

        :param request_id: Optional argument. The ID of the AuthNRequest sent by this SP to the IdP
        :type request_id: string

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean

        :returns: True if the SAML Response is valid, False if not
        :rtype: bool
        """
        self._error = None
        try:
            # Checks SAML version
            if self.document.get('Version', None) != '2.0':
                raise OneLogin_Saml2_ValidationError(
                    'Unsupported SAML version',
                    OneLogin_Saml2_ValidationError.UNSUPPORTED_SAML_VERSION
                )

            # Checks that ID exists
            if self.document.get('ID', None) is None:
                raise OneLogin_Saml2_ValidationError(
                    'Missing ID attribute on SAML Response',
                    OneLogin_Saml2_ValidationError.MISSING_ID
                )

            # Checks that the response has the SUCCESS status
            self.check_status()

            # Checks that the response only has one assertion
            if not self.validate_num_assertions():
                raise OneLogin_Saml2_ValidationError(
                    'SAML Response must contain 1 assertion',
                    OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS
                )

            idp_data = self._settings.get_idp_data()
            idp_entity_id = idp_data['entityId']
            sp_data = self._settings.get_sp_data()
            sp_entity_id = sp_data['entityId']

            signed_elements = self.process_signed_elements()

            has_signed_response = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP in signed_elements
            has_signed_assertion = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML in signed_elements

            if self._settings.is_strict():
                no_valid_xml_msg = 'Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd'
                res = OneLogin_Saml2_XML.validate_xml(self.document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active())
                if isinstance(res, str):
                    raise OneLogin_Saml2_ValidationError(
                        no_valid_xml_msg,
                        OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT
                    )

                # If encrypted, check also the decrypted document
                if self.encrypted:
                    res = OneLogin_Saml2_XML.validate_xml(self.decrypted_document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active())
                    if isinstance(res, str):
                        raise OneLogin_Saml2_ValidationError(
                            no_valid_xml_msg,
                            OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT
                        )

                security = self._settings.get_security_data()
                current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data)

                # Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided
                in_response_to = self.get_in_response_to()
                if in_response_to is not None and request_id is not None:
                    if in_response_to != request_id:
                        raise OneLogin_Saml2_ValidationError(
                            'The InResponseTo of the Response: %s, does not match the ID of the AuthNRequest sent by the SP: %s' % (in_response_to, request_id),
                            OneLogin_Saml2_ValidationError.WRONG_INRESPONSETO
                        )

                if not self.encrypted and security['wantAssertionsEncrypted']:
                    raise OneLogin_Saml2_ValidationError(
                        'The assertion of the Response is not encrypted and the SP require it',
                        OneLogin_Saml2_ValidationError.NO_ENCRYPTED_ASSERTION
                    )

                if security['wantNameIdEncrypted']:
                    encrypted_nameid_nodes = self._query_assertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData')
                    if len(encrypted_nameid_nodes) != 1:
                        raise OneLogin_Saml2_ValidationError(
                            'The NameID of the Response is not encrypted and the SP require it',
                            OneLogin_Saml2_ValidationError.NO_ENCRYPTED_NAMEID
                        )

                # Checks that a Conditions element exists
                if not self.check_one_condition():
                    raise OneLogin_Saml2_ValidationError(
                        'The Assertion must include a Conditions element',
                        OneLogin_Saml2_ValidationError.MISSING_CONDITIONS
                    )

                # Validates Assertion timestamps
                self.validate_timestamps(raise_exceptions=True)

                # Checks that an AuthnStatement element exists and is unique
                if not self.check_one_authnstatement():
                    raise OneLogin_Saml2_ValidationError(
                        'The Assertion must include an AuthnStatement element',
                        OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_AUTHSTATEMENTS
                    )

                # Checks that the response has all of the AuthnContexts that we provided in the request.
                # Only check if failOnAuthnContextMismatch is true and requestedAuthnContext is set to a list.
                requested_authn_contexts = security['requestedAuthnContext']
                if security['failOnAuthnContextMismatch'] and requested_authn_contexts and requested_authn_contexts is not True:
                    authn_contexts = self.get_authn_contexts()
                    unmatched_contexts = set(authn_contexts).difference(requested_authn_contexts)
                    if unmatched_contexts:
                        raise OneLogin_Saml2_ValidationError(
                            'The AuthnContext "%s" was not a requested context "%s"' % (', '.join(unmatched_contexts), ', '.join(requested_authn_contexts)),
                            OneLogin_Saml2_ValidationError.AUTHN_CONTEXT_MISMATCH
                        )

                # Checks that there is at least one AttributeStatement if required
                attribute_statement_nodes = self._query_assertion('/saml:AttributeStatement')
                if security.get('wantAttributeStatement', True) and not attribute_statement_nodes:
                    raise OneLogin_Saml2_ValidationError(
                        'There is no AttributeStatement on the Response',
                        OneLogin_Saml2_ValidationError.NO_ATTRIBUTESTATEMENT
                    )

                encrypted_attributes_nodes = self._query_assertion('/saml:AttributeStatement/saml:EncryptedAttribute')
                if encrypted_attributes_nodes:
                    raise OneLogin_Saml2_ValidationError(
                        'There is an EncryptedAttribute in the Response and this SP not support them',
                        OneLogin_Saml2_ValidationError.ENCRYPTED_ATTRIBUTES
                    )

                # Checks destination
                destination = self.document.get('Destination', None)
                if destination:
                    if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)):
                        # TODO: Review if following lines are required, since we can control the
                        # request_data
                        #  current_url_routed = OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data)
                        #  if not destination.startswith(current_url_routed):
                        raise OneLogin_Saml2_ValidationError(
                            'The response was received at %s instead of %s' % (current_url, destination),
                            OneLogin_Saml2_ValidationError.WRONG_DESTINATION
                        )
                elif destination == '':
                    raise OneLogin_Saml2_ValidationError(
                        'The response has an empty Destination value',
                        OneLogin_Saml2_ValidationError.EMPTY_DESTINATION
                    )
                # Checks audience
                valid_audiences = self.get_audiences()
                if valid_audiences and sp_entity_id not in valid_audiences:
                    raise OneLogin_Saml2_ValidationError(
                        '%s is not a valid audience for this Response' % sp_entity_id,
                        OneLogin_Saml2_ValidationError.WRONG_AUDIENCE
                    )

                # Checks the issuers
                issuers = self.get_issuers()
                for issuer in issuers:
                    if issuer is None or issuer != idp_entity_id:
                        raise OneLogin_Saml2_ValidationError(
                            'Invalid issuer in the Assertion/Response (expected %(idpEntityId)s, got %(issuer)s)' %
                            {
                                'idpEntityId': idp_entity_id,
                                'issuer': issuer
                            },
                            OneLogin_Saml2_ValidationError.WRONG_ISSUER
                        )

                # Checks the session Expiration
                session_expiration = self.get_session_not_on_or_after()
                if session_expiration and session_expiration <= OneLogin_Saml2_Utils.now():
                    raise OneLogin_Saml2_ValidationError(
                        'The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response',
                        OneLogin_Saml2_ValidationError.SESSION_EXPIRED
                    )

                # Checks the SubjectConfirmation, at least one SubjectConfirmation must be valid
                any_subject_confirmation = False
                subject_confirmation_nodes = self._query_assertion('/saml:Subject/saml:SubjectConfirmation')

                for scn in subject_confirmation_nodes:
                    method = scn.get('Method', None)
                    if method and method != OneLogin_Saml2_Constants.CM_BEARER:
                        continue
                    sc_data = scn.find('saml:SubjectConfirmationData', namespaces=OneLogin_Saml2_Constants.NSMAP)
                    if sc_data is None:
                        continue
                    else:
                        irt = sc_data.get('InResponseTo', None)
                        if in_response_to and irt and irt != in_response_to:
                            continue
                        recipient = sc_data.get('Recipient', None)
                        if recipient and current_url not in recipient:
                            continue
                        nooa = sc_data.get('NotOnOrAfter', None)
                        if nooa:
                            parsed_nooa = OneLogin_Saml2_Utils.parse_SAML_to_time(nooa)
                            if parsed_nooa <= OneLogin_Saml2_Utils.now():
                                continue
                        nb = sc_data.get('NotBefore', None)
                        if nb:
                            parsed_nb = OneLogin_Saml2_Utils.parse_SAML_to_time(nb)
                            if parsed_nb > OneLogin_Saml2_Utils.now():
                                continue

                        if nooa:
                            self.valid_scd_not_on_or_after = OneLogin_Saml2_Utils.parse_SAML_to_time(nooa)

                        any_subject_confirmation = True
                        break

                if not any_subject_confirmation:
                    raise OneLogin_Saml2_ValidationError(
                        'A valid SubjectConfirmation was not found on this Response',
                        OneLogin_Saml2_ValidationError.WRONG_SUBJECTCONFIRMATION
                    )

                if security['wantAssertionsSigned'] and not has_signed_assertion:
                    raise OneLogin_Saml2_ValidationError(
                        'The Assertion of the Response is not signed and the SP require it',
                        OneLogin_Saml2_ValidationError.NO_SIGNED_ASSERTION
                    )

                if security['wantMessagesSigned'] and not has_signed_response:
                    raise OneLogin_Saml2_ValidationError(
                        'The Message of the Response is not signed and the SP require it',
                        OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE
                    )

            if not signed_elements or (not has_signed_response and not has_signed_assertion):
                raise OneLogin_Saml2_ValidationError(
                    'No Signature found. SAML Response rejected',
                    OneLogin_Saml2_ValidationError.NO_SIGNATURE_FOUND
                )
            else:
                cert = self._settings.get_idp_cert()
                fingerprint = idp_data.get('certFingerprint', None)
                if fingerprint:
                    fingerprint = OneLogin_Saml2_Utils.format_finger_print(fingerprint)
                fingerprintalg = idp_data.get('certFingerprintAlgorithm', None)

                multicerts = None
                if 'x509certMulti' in idp_data and 'signing' in idp_data['x509certMulti'] and idp_data['x509certMulti']['signing']:
                    multicerts = idp_data['x509certMulti']['signing']

                # If find a Signature on the Response, validates it checking the original response
                if has_signed_response and not OneLogin_Saml2_Utils.validate_sign(self.document, cert, fingerprint, fingerprintalg, xpath=OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH, multicerts=multicerts, raise_exceptions=False):
                    raise OneLogin_Saml2_ValidationError(
                        'Signature validation failed. SAML Response rejected',
                        OneLogin_Saml2_ValidationError.INVALID_SIGNATURE
                    )

                document_check_assertion = self.decrypted_document if self.encrypted else self.document
                if has_signed_assertion and not OneLogin_Saml2_Utils.validate_sign(document_check_assertion, cert, fingerprint, fingerprintalg, xpath=OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH, multicerts=multicerts, raise_exceptions=False):
                    raise OneLogin_Saml2_ValidationError(
                        'Signature validation failed. SAML Response rejected',
                        OneLogin_Saml2_ValidationError.INVALID_SIGNATURE
                    )

            return True
        except Exception as err:
            self._error = str(err)
            debug = self._settings.is_debug_active()
            if debug:
                print(err)
            if raise_exceptions:
                raise
            return False



[docs]    def check_status(self):
        """
        Check if the status of the response is success or not

        :raises: Exception. If the status is not success
        """
        status = OneLogin_Saml2_Utils.get_status(self.document)
        code = status.get('code', None)
        if code and code != OneLogin_Saml2_Constants.STATUS_SUCCESS:
            splited_code = code.split(':')
            printable_code = splited_code.pop()
            status_exception_msg = 'The status code of the Response was not Success, was %s' % printable_code
            status_msg = status.get('msg', None)
            if status_msg:
                status_exception_msg += ' -> ' + status_msg
            raise OneLogin_Saml2_ValidationError(
                status_exception_msg,
                OneLogin_Saml2_ValidationError.STATUS_CODE_IS_NOT_SUCCESS
            )



[docs]    def check_one_condition(self):
        """
        Checks that the samlp:Response/saml:Assertion/saml:Conditions element exists and is unique.
        """
        condition_nodes = self._query_assertion('/saml:Conditions')
        if len(condition_nodes) == 1:
            return True
        else:
            return False



[docs]    def check_one_authnstatement(self):
        """
        Checks that the samlp:Response/saml:Assertion/saml:AuthnStatement element exists and is unique.
        """
        authnstatement_nodes = self._query_assertion('/saml:AuthnStatement')
        if len(authnstatement_nodes) == 1:
            return True
        else:
            return False



[docs]    def get_audiences(self):
        """
        Gets the audiences

        :returns: The valid audiences for the SAML Response
        :rtype: list
        """
        audience_nodes = self._query_assertion('/saml:Conditions/saml:AudienceRestriction/saml:Audience')
        return [OneLogin_Saml2_XML.element_text(node) for node in audience_nodes if OneLogin_Saml2_XML.element_text(node) is not None]



[docs]    def get_authn_contexts(self):
        """
        Gets the authentication contexts

        :returns: The authentication classes for the SAML Response
        :rtype: list
        """
        authn_context_nodes = self._query_assertion('/saml:AuthnStatement/saml:AuthnContext/saml:AuthnContextClassRef')
        return [OneLogin_Saml2_XML.element_text(node) for node in authn_context_nodes]



[docs]    def get_in_response_to(self):
        """
        Gets the ID of the request which this response is in response to
        :returns: ID of AuthNRequest this Response is in response to or None if it is not present
        :rtype: str
        """
        return self.document.get('InResponseTo')



[docs]    def get_issuers(self):
        """
        Gets the issuers (from message and from assertion)

        :returns: The issuers
        :rtype: list
        """
        issuers = set()

        message_issuer_nodes = OneLogin_Saml2_XML.query(self.document, '/samlp:Response/saml:Issuer')
        if len(message_issuer_nodes) > 0:
            if len(message_issuer_nodes) == 1:
                issuer_value = OneLogin_Saml2_XML.element_text(message_issuer_nodes[0])
                if issuer_value:
                    issuers.add(issuer_value)
            else:
                raise OneLogin_Saml2_ValidationError(
                    'Issuer of the Response is multiple.',
                    OneLogin_Saml2_ValidationError.ISSUER_MULTIPLE_IN_RESPONSE
                )

        assertion_issuer_nodes = self._query_assertion('/saml:Issuer')
        if len(assertion_issuer_nodes) == 1:
            issuer_value = OneLogin_Saml2_XML.element_text(assertion_issuer_nodes[0])
            if issuer_value:
                issuers.add(issuer_value)
        else:
            raise OneLogin_Saml2_ValidationError(
                'Issuer of the Assertion not found or multiple.',
                OneLogin_Saml2_ValidationError.ISSUER_NOT_FOUND_IN_ASSERTION
            )

        return list(set(issuers))



[docs]    def get_nameid_data(self):
        """
        Gets the NameID Data provided by the SAML Response from the IdP

        :returns: Name ID Data (Value, Format, NameQualifier, SPNameQualifier)
        :rtype: dict
        """
        nameid = None
        nameid_data = {}

        encrypted_id_data_nodes = self._query_assertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData')
        if encrypted_id_data_nodes:
            encrypted_data = encrypted_id_data_nodes[0]
            key = self._settings.get_sp_key()
            nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key)
        else:
            nameid_nodes = self._query_assertion('/saml:Subject/saml:NameID')
            if nameid_nodes:
                nameid = nameid_nodes[0]

        is_strict = self._settings.is_strict()
        want_nameid = self._settings.get_security_data().get('wantNameId', True)
        if nameid is None:
            if is_strict and want_nameid:
                raise OneLogin_Saml2_ValidationError(
                    'NameID not found in the assertion of the Response',
                    OneLogin_Saml2_ValidationError.NO_NAMEID
                )
        else:
            if is_strict and want_nameid and not OneLogin_Saml2_XML.element_text(nameid):
                raise OneLogin_Saml2_ValidationError(
                    'An empty NameID value found',
                    OneLogin_Saml2_ValidationError.EMPTY_NAMEID
                )

            nameid_data = {'Value': OneLogin_Saml2_XML.element_text(nameid)}
            for attr in ['Format', 'SPNameQualifier', 'NameQualifier']:
                value = nameid.get(attr, None)
                if value:
                    if is_strict and attr == 'SPNameQualifier':
                        sp_data = self._settings.get_sp_data()
                        sp_entity_id = sp_data.get('entityId', '')
                        if sp_entity_id != value:
                            raise OneLogin_Saml2_ValidationError(
                                'The SPNameQualifier value mistmatch the SP entityID value.',
                                OneLogin_Saml2_ValidationError.SP_NAME_QUALIFIER_NAME_MISMATCH
                            )

                    nameid_data[attr] = value
        return nameid_data



[docs]    def get_nameid(self):
        """
        Gets the NameID provided by the SAML Response from the IdP

        :returns: NameID (value)
        :rtype: string|None
        """
        nameid_value = None
        nameid_data = self.get_nameid_data()
        if nameid_data and 'Value' in nameid_data.keys():
            nameid_value = nameid_data['Value']
        return nameid_value



[docs]    def get_nameid_format(self):
        """
        Gets the NameID Format provided by the SAML Response from the IdP

        :returns: NameID Format
        :rtype: string|None
        """
        nameid_format = None
        nameid_data = self.get_nameid_data()
        if nameid_data and 'Format' in nameid_data.keys():
            nameid_format = nameid_data['Format']
        return nameid_format



[docs]    def get_nameid_nq(self):
        """
        Gets the NameID NameQualifier provided by the SAML Response from the IdP

        :returns: NameID NameQualifier
        :rtype: string|None
        """
        nameid_nq = None
        nameid_data = self.get_nameid_data()
        if nameid_data and 'NameQualifier' in nameid_data.keys():
            nameid_nq = nameid_data['NameQualifier']
        return nameid_nq



[docs]    def get_nameid_spnq(self):
        """
        Gets the NameID SP NameQualifier provided by the SAML response from the IdP.

        :returns: NameID SP NameQualifier
        :rtype: string|None
        """
        nameid_spnq = None
        nameid_data = self.get_nameid_data()
        if nameid_data and 'SPNameQualifier' in nameid_data.keys():
            nameid_spnq = nameid_data['SPNameQualifier']
        return nameid_spnq



[docs]    def get_session_not_on_or_after(self):
        """
        Gets the SessionNotOnOrAfter from the AuthnStatement
        Could be used to set the local session expiration

        :returns: The SessionNotOnOrAfter value
        :rtype: time|None
        """
        not_on_or_after = None
        authn_statement_nodes = self._query_assertion('/saml:AuthnStatement[@SessionNotOnOrAfter]')
        if authn_statement_nodes:
            not_on_or_after = OneLogin_Saml2_Utils.parse_SAML_to_time(authn_statement_nodes[0].get('SessionNotOnOrAfter'))
        return not_on_or_after



[docs]    def get_assertion_not_on_or_after(self):
        """
        Returns the NotOnOrAfter value of the valid SubjectConfirmationData node if any
        """
        return self.valid_scd_not_on_or_after



[docs]    def get_session_index(self):
        """
        Gets the SessionIndex from the AuthnStatement
        Could be used to be stored in the local session in order
        to be used in a future Logout Request that the SP could
        send to the SP, to set what specific session must be deleted

        :returns: The SessionIndex value
        :rtype: string|None
        """
        session_index = None
        authn_statement_nodes = self._query_assertion('/saml:AuthnStatement[@SessionIndex]')
        if authn_statement_nodes:
            session_index = authn_statement_nodes[0].get('SessionIndex')
        return session_index



[docs]    def get_attributes(self):
        """
        Gets the Attributes from the AttributeStatement element.
        EncryptedAttributes are not supported
        """
        return self._get_attributes('Name')



[docs]    def get_friendlyname_attributes(self):
        """
        Gets the Attributes from the AttributeStatement element indexed by FiendlyName.
        EncryptedAttributes are not supported
        """
        return self._get_attributes('FriendlyName')


    def _get_attributes(self, attr_name):
        allow_duplicates = self._settings.get_security_data().get('allowRepeatAttributeName', False)
        attributes = {}
        attribute_nodes = self._query_assertion('/saml:AttributeStatement/saml:Attribute')
        for attribute_node in attribute_nodes:
            attr_key = attribute_node.get(attr_name)
            if attr_key:
                if not allow_duplicates and attr_key in attributes:
                    raise OneLogin_Saml2_ValidationError(
                        'Found an Attribute element with duplicated ' + attr_name,
                        OneLogin_Saml2_ValidationError.DUPLICATED_ATTRIBUTE_NAME_FOUND
                    )

                values = []
                for attr in attribute_node.iterchildren('{%s}AttributeValue' % OneLogin_Saml2_Constants.NSMAP['saml']):
                    attr_text = OneLogin_Saml2_XML.element_text(attr)
                    if attr_text:
                        attr_text = attr_text.strip()
                        if attr_text:
                            values.append(attr_text)

                    # Parse any nested NameID children
                    for nameid in attr.iterchildren('{%s}NameID' % OneLogin_Saml2_Constants.NSMAP['saml']):
                        values.append({
                            'NameID': {
                                'Format': nameid.get('Format'),
                                'NameQualifier': nameid.get('NameQualifier'),
                                'value': nameid.text
                            }
                        })
                if attr_key in attributes:
                    attributes[attr_key].extend(values)
                else:
                    attributes[attr_key] = values
        return attributes


[docs]    def validate_num_assertions(self):
        """
        Verifies that the document only contains a single Assertion (encrypted or not)

        :returns: True if only 1 assertion encrypted or not
        :rtype: bool
        """
        encrypted_assertion_nodes = OneLogin_Saml2_XML.query(self.document, '//saml:EncryptedAssertion')
        assertion_nodes = OneLogin_Saml2_XML.query(self.document, '//saml:Assertion')

        valid = len(encrypted_assertion_nodes) + len(assertion_nodes) == 1

        if (self.encrypted):
            assertion_nodes = OneLogin_Saml2_XML.query(self.decrypted_document, '//saml:Assertion')
            valid = valid and len(assertion_nodes) == 1

        return valid



[docs]    def process_signed_elements(self):
        """
        Verifies the signature nodes:
         - Checks that are Response or Assertion
         - Check that IDs and reference URI are unique and consistent.

        :returns: The signed elements tag names
        :rtype: list
        """
        sign_nodes = self._query('//ds:Signature')

        signed_elements = []
        verified_seis = []
        verified_ids = []
        response_tag = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP
        assertion_tag = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML

        security = self._settings.get_security_data()
        reject_deprecated_alg = security.get('rejectDeprecatedAlgorithm', False)

        for sign_node in sign_nodes:
            signed_element = sign_node.getparent().tag
            if signed_element != response_tag and signed_element != assertion_tag:
                raise OneLogin_Saml2_ValidationError(
                    'Invalid Signature Element %s SAML Response rejected' % signed_element,
                    OneLogin_Saml2_ValidationError.WRONG_SIGNED_ELEMENT
                )

            if not sign_node.getparent().get('ID'):
                raise OneLogin_Saml2_ValidationError(
                    'Signed Element must contain an ID. SAML Response rejected',
                    OneLogin_Saml2_ValidationError.ID_NOT_FOUND_IN_SIGNED_ELEMENT
                )

            id_value = sign_node.getparent().get('ID')
            if id_value in verified_ids:
                raise OneLogin_Saml2_ValidationError(
                    'Duplicated ID. SAML Response rejected',
                    OneLogin_Saml2_ValidationError.DUPLICATED_ID_IN_SIGNED_ELEMENTS
                )
            verified_ids.append(id_value)

            # Check that reference URI matches the parent ID and no duplicate References or IDs
            ref = OneLogin_Saml2_XML.query(sign_node, './/ds:Reference')
            if ref:
                ref = ref[0]
                if ref.get('URI'):
                    sei = ref.get('URI')[1:]

                    if sei != id_value:
                        raise OneLogin_Saml2_ValidationError(
                            'Found an invalid Signed Element. SAML Response rejected',
                            OneLogin_Saml2_ValidationError.INVALID_SIGNED_ELEMENT
                        )

                    if sei in verified_seis:
                        raise OneLogin_Saml2_ValidationError(
                            'Duplicated Reference URI. SAML Response rejected',
                            OneLogin_Saml2_ValidationError.DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS
                        )
                    verified_seis.append(sei)

            # Check the signature and digest algorithm
            if reject_deprecated_alg:
                sig_method_node = OneLogin_Saml2_XML.query(sign_node, './/ds:SignatureMethod')
                if sig_method_node:
                    sig_method = sig_method_node[0].get("Algorithm")
                    if sig_method in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS:
                        raise OneLogin_Saml2_ValidationError(
                            'Deprecated signature algorithm found: %s' % sig_method,
                            OneLogin_Saml2_ValidationError.DEPRECATED_SIGNATURE_METHOD
                        )

                dig_method_node = OneLogin_Saml2_XML.query(sign_node, './/ds:DigestMethod')
                if dig_method_node:
                    dig_method = dig_method_node[0].get("Algorithm")
                    if dig_method in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS:
                        raise OneLogin_Saml2_ValidationError(
                            'Deprecated digest algorithm found: %s' % dig_method,
                            OneLogin_Saml2_ValidationError.DEPRECATED_DIGEST_METHOD
                        )

            signed_elements.append(signed_element)

        if signed_elements:
            if not self.validate_signed_elements(signed_elements, raise_exceptions=True):
                raise OneLogin_Saml2_ValidationError(
                    'Found an unexpected Signature Element. SAML Response rejected',
                    OneLogin_Saml2_ValidationError.UNEXPECTED_SIGNED_ELEMENTS
                )
        return signed_elements



[docs]    @return_false_on_exception
    def validate_signed_elements(self, signed_elements):
        """
        Verifies that the document has the expected signed nodes.

        :param signed_elements: The signed elements to be checked
        :type signed_elements: list
        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean
        """
        if len(signed_elements) > 2:
            return False

        response_tag = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP
        assertion_tag = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML

        if (response_tag in signed_elements and signed_elements.count(response_tag) > 1) or \
           (assertion_tag in signed_elements and signed_elements.count(assertion_tag) > 1) or \
           (response_tag not in signed_elements and assertion_tag not in signed_elements):
            return False

        # Check that the signed elements found here, are the ones that will be verified
        # by OneLogin_Saml2_Utils.validate_sign
        if response_tag in signed_elements:
            expected_signature_nodes = OneLogin_Saml2_XML.query(self.document, OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH)
            if len(expected_signature_nodes) != 1:
                raise OneLogin_Saml2_ValidationError(
                    'Unexpected number of Response signatures found. SAML Response rejected.',
                    OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE
                )

        if assertion_tag in signed_elements:
            expected_signature_nodes = self._query(OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH)
            if len(expected_signature_nodes) != 1:
                raise OneLogin_Saml2_ValidationError(
                    'Unexpected number of Assertion signatures found. SAML Response rejected.',
                    OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION
                )

        return True



[docs]    @return_false_on_exception
    def validate_timestamps(self):
        """
        Verifies that the document is valid according to Conditions Element

        :returns: True if the condition is valid, False otherwise
        :rtype: bool
        """
        conditions_nodes = self._query_assertion('/saml:Conditions')

        for conditions_node in conditions_nodes:
            nb_attr = conditions_node.get('NotBefore')
            nooa_attr = conditions_node.get('NotOnOrAfter')
            if nb_attr and OneLogin_Saml2_Utils.parse_SAML_to_time(nb_attr) > OneLogin_Saml2_Utils.now() + OneLogin_Saml2_Constants.ALLOWED_CLOCK_DRIFT:
                raise OneLogin_Saml2_ValidationError(
                    'Could not validate timestamp: not yet valid. Check system clock.',
                    OneLogin_Saml2_ValidationError.ASSERTION_TOO_EARLY
                )
            if nooa_attr and OneLogin_Saml2_Utils.parse_SAML_to_time(nooa_attr) + OneLogin_Saml2_Constants.ALLOWED_CLOCK_DRIFT <= OneLogin_Saml2_Utils.now():
                raise OneLogin_Saml2_ValidationError(
                    'Could not validate timestamp: expired. Check system clock.',
                    OneLogin_Saml2_ValidationError.ASSERTION_EXPIRED
                )
        return True


    def _query_assertion(self, xpath_expr):
        """
        Extracts nodes that match the query from the Assertion

        :param xpath_expr: Xpath Expresion
        :type xpath_expr: String

        :returns: The queried nodes
        :rtype: list
        """

        assertion_expr = '/saml:Assertion'
        signature_expr = '/ds:Signature/ds:SignedInfo/ds:Reference'
        signed_assertion_query = '/samlp:Response' + assertion_expr + signature_expr
        assertion_reference_nodes = self._query(signed_assertion_query)
        tagid = None

        if not assertion_reference_nodes:
            # Check if the message is signed
            signed_message_query = '/samlp:Response' + signature_expr
            message_reference_nodes = self._query(signed_message_query)
            if message_reference_nodes:
                message_id = message_reference_nodes[0].get('URI')
                final_query = "/samlp:Response[@ID=$tagid]/"
                tagid = message_id[1:]
            else:
                final_query = "/samlp:Response"
            final_query += assertion_expr
        else:
            assertion_id = assertion_reference_nodes[0].get('URI')
            final_query = '/samlp:Response' + assertion_expr + "[@ID=$tagid]"
            tagid = assertion_id[1:]
        final_query += xpath_expr
        return self._query(final_query, tagid)

    def _query(self, query, tagid=None):
        """
        Extracts nodes that match the query from the Response

        :param query: Xpath Expresion
        :type query: String

        :param tagid: Tag ID
        :type query: String

        :returns: The queried nodes
        :rtype: list
        """
        if self.encrypted:
            document = self.decrypted_document
        else:
            document = self.document
        return OneLogin_Saml2_XML.query(document, query, None, tagid)

    def _decrypt_assertion(self, xml):
        """
        Decrypts the Assertion

        :raises: Exception if no private key available
        :param xml: Encrypted Assertion
        :type xml: Element
        :returns: Decrypted Assertion
        :rtype: Element
        """
        key = self._settings.get_sp_key()
        debug = self._settings.is_debug_active()

        if not key:
            raise OneLogin_Saml2_Error(
                'No private key available to decrypt the assertion, check settings',
                OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND
            )

        encrypted_assertion_nodes = OneLogin_Saml2_XML.query(xml, '/samlp:Response/saml:EncryptedAssertion')
        if encrypted_assertion_nodes:
            encrypted_data_nodes = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], '//saml:EncryptedAssertion/xenc:EncryptedData')
            if encrypted_data_nodes:
                keyinfo = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], '//saml:EncryptedAssertion/xenc:EncryptedData/ds:KeyInfo')
                if not keyinfo:
                    raise OneLogin_Saml2_ValidationError(
                        'No KeyInfo present, invalid Assertion',
                        OneLogin_Saml2_ValidationError.KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA
                    )
                keyinfo = keyinfo[0]
                children = keyinfo.getchildren()
                if not children:
                    raise OneLogin_Saml2_ValidationError(
                        'KeyInfo has no children nodes, invalid Assertion',
                        OneLogin_Saml2_ValidationError.CHILDREN_NODE_NOT_FOUND_IN_KEYINFO
                    )
                for child in children:
                    if 'RetrievalMethod' in child.tag:
                        if child.attrib['Type'] != 'http://www.w3.org/2001/04/xmlenc#EncryptedKey':
                            raise OneLogin_Saml2_ValidationError(
                                'Unsupported Retrieval Method found',
                                OneLogin_Saml2_ValidationError.UNSUPPORTED_RETRIEVAL_METHOD
                            )
                        uri = child.attrib['URI']
                        if not uri.startswith('#'):
                            break
                        uri = uri.split('#')[1]
                        encrypted_key = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], './xenc:EncryptedKey[@Id=$tagid]', None, uri)
                        if encrypted_key:
                            keyinfo.append(encrypted_key[0])

                encrypted_data = encrypted_data_nodes[0]
                decrypted = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key, debug=debug, inplace=True)
                xml.replace(encrypted_assertion_nodes[0], decrypted)
        return xml


[docs]    def get_error(self):
        """
        After executing a validation process, if it fails this method returns the cause
        """
        return self._error



[docs]    def get_xml_document(self):
        """
        Returns the SAML Response document (If contains an encrypted assertion, decrypts it)

        :return: Decrypted XML response document
        :rtype: DOMDocument
        """
        if self.encrypted:
            return self.decrypted_document
        else:
            return self.document



[docs]    def get_id(self):
        """
        :returns: the ID of the response
        :rtype: string
        """
        return self.document.get('ID', None)



[docs]    def get_assertion_id(self):
        """
        :returns: the ID of the assertion in the response
        :rtype: string
        """
        if not self.validate_num_assertions():
            raise OneLogin_Saml2_ValidationError(
                'SAML Response must contain 1 assertion',
                OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS
            )
        return self._query_assertion('')[0].get('ID', None)



[docs]    def get_assertion_issue_instant(self):
        """
        :returns: the IssueInstant of the assertion in the response
        :rtype: unix/posix timestamp|None
        """
        if not self.validate_num_assertions():
            raise OneLogin_Saml2_ValidationError(
                'SAML Response must contain 1 assertion',
                OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS
            )
        issue_instant = self._query_assertion('')[0].get('IssueInstant', None)
        return OneLogin_Saml2_Utils.parse_SAML_to_time(issue_instant)
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/settings.html000066400000000000000000003721131451074743100253050ustar00rootroot00000000000000 onelogin.saml2.settings — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.settings

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Settings class

Copyright (c) 2010-2021 OneLogin, Inc.
MIT License

Setting class of OneLogin's Python Toolkit.

"""
from time import time
import re
from os.path import dirname, exists, join, sep

from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.errors import OneLogin_Saml2_Error
from onelogin.saml2.metadata import OneLogin_Saml2_Metadata
from onelogin.saml2.utils import OneLogin_Saml2_Utils
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML

try:
    import ujson as json
except ImportError:
    import json

try:
    basestring
except NameError:
    basestring = str

# Regex from Django Software Foundation and individual contributors.
# Released under a BSD 3-Clause License
url_regex = re.compile(
    r'^(?:[a-z0-9\.\-]*)://'  # scheme is validated separately
    r'(?:(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_])?\.)+(?:[A-Z]{2,6}\.?|[A-Z0-9-]{2,}\.?)|'  # domain...
    r'localhost|'  # localhost...
    r'\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|'  # ...or ipv4
    r'\[?[A-F0-9]*:[A-F0-9:]+\]?)'  # ...or ipv6
    r'(?::\d+)?'  # optional port
    r'(?:/?|[/?]\S+)$', re.IGNORECASE)
url_regex_single_label_domain = re.compile(
    r'^(?:[a-z0-9\.\-]*)://'  # scheme is validated separately
    r'(?:(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_])?\.)+(?:[A-Z]{2,6}\.?|[A-Z0-9-]{2,}\.?)|'  # domain...
    r'(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_]))|'  # single-label-domain
    r'localhost|'  # localhost...
    r'\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|'  # ...or ipv4
    r'\[?[A-F0-9]*:[A-F0-9:]+\]?)'  # ...or ipv6
    r'(?::\d+)?'  # optional port
    r'(?:/?|[/?]\S+)$', re.IGNORECASE)
url_schemes = ['http', 'https', 'ftp', 'ftps']



[docs]def validate_url(url, allow_single_label_domain=False):
    """
    Auxiliary method to validate an urllib
    :param url: An url to be validated
    :type url: string
    :param allow_single_label_domain: In order to allow or not single label domain
    :type url: bool
    :returns: True if the url is valid
    :rtype: bool
    """

    scheme = url.split('://')[0].lower()
    if scheme not in url_schemes:
        return False
    if allow_single_label_domain:
        if not bool(url_regex_single_label_domain.search(url)):
            return False
    else:
        if not bool(url_regex.search(url)):
            return False
    return True




[docs]class OneLogin_Saml2_Settings(object):
    """

    Handles the settings of the Python toolkits.

    """

    metadata_class = OneLogin_Saml2_Metadata

    def __init__(self, settings=None, custom_base_path=None, sp_validation_only=False):
        """
        Initializes the settings:
        - Sets the paths of the different folders
        - Loads settings info from settings file or array/object provided

        :param settings: SAML Toolkit Settings
        :type settings: dict

        :param custom_base_path: Path where are stored the settings file and the cert folder
        :type custom_base_path: string

        :param sp_validation_only: Avoid the IdP validation
        :type sp_validation_only: boolean
        """
        self._sp_validation_only = sp_validation_only
        self._paths = {}
        self._strict = True
        self._debug = False
        self._sp = {}
        self._idp = {}
        self._security = {}
        self._contacts = {}
        self._organization = {}
        self._errors = []

        self._load_paths(base_path=custom_base_path)
        self._update_paths(settings)

        if settings is None:
            try:
                valid = self._load_settings_from_file()
            except Exception as e:
                raise e
            if not valid:
                raise OneLogin_Saml2_Error(
                    'Invalid dict settings at the file: %s',
                    OneLogin_Saml2_Error.SETTINGS_INVALID,
                    ','.join(self._errors)
                )
        elif isinstance(settings, dict):
            if not self._load_settings_from_dict(settings):
                raise OneLogin_Saml2_Error(
                    'Invalid dict settings: %s',
                    OneLogin_Saml2_Error.SETTINGS_INVALID,
                    ','.join(self._errors)
                )
        else:
            raise OneLogin_Saml2_Error(
                'Unsupported settings object',
                OneLogin_Saml2_Error.UNSUPPORTED_SETTINGS_OBJECT
            )

        self.format_idp_cert()
        if 'x509certMulti' in self._idp:
            self.format_idp_cert_multi()
        self.format_sp_cert()
        if 'x509certNew' in self._sp:
            self.format_sp_cert_new()
        self.format_sp_key()

    def _load_paths(self, base_path=None):
        """
        Set the paths of the different folders
        """
        if base_path is None:
            base_path = dirname(dirname(dirname(__file__)))
        if not base_path.endswith(sep):
            base_path += sep
        self._paths = {
            'base': base_path,
            'cert': base_path + 'certs' + sep,
            'lib': dirname(__file__) + sep
        }

    def _update_paths(self, settings):
        """
        Set custom paths if necessary
        """
        if not isinstance(settings, dict):
            return

        if 'custom_base_path' in settings:
            base_path = settings['custom_base_path']
            base_path = join(dirname(__file__), base_path)
            self._load_paths(base_path)


[docs]    def get_base_path(self):
        """
        Returns base path

        :return: The base toolkit folder path
        :rtype: string
        """
        return self._paths['base']



[docs]    def get_cert_path(self):
        """
        Returns cert path

        :return: The cert folder path
        :rtype: string
        """
        return self._paths['cert']



[docs]    def set_cert_path(self, path):
        """
        Set a new cert path
        """
        self._paths['cert'] = path



[docs]    def get_lib_path(self):
        """
        Returns lib path

        :return: The library folder path
        :rtype: string
        """
        return self._paths['lib']



[docs]    def get_schemas_path(self):
        """
        Returns schema path

        :return: The schema folder path
        :rtype: string
        """
        return self._paths['lib'] + 'schemas/'


    def _load_settings_from_dict(self, settings):
        """
        Loads settings info from a settings Dict

        :param settings: SAML Toolkit Settings
        :type settings: dict

        :returns: True if the settings info is valid
        :rtype: boolean
        """
        errors = self.check_settings(settings)
        if len(errors) == 0:
            self._errors = []
            self._sp = settings['sp']
            self._idp = settings.get('idp', {})
            self._strict = settings.get('strict', True)
            self._debug = settings.get('debug', False)
            self._security = settings.get('security', {})
            self._contacts = settings.get('contactPerson', {})
            self._organization = settings.get('organization', {})

            self._add_default_values()
            return True

        self._errors = errors
        return False

    def _load_settings_from_file(self):
        """
        Loads settings info from the settings json file

        :returns: True if the settings info is valid
        :rtype: boolean
        """
        filename = self.get_base_path() + 'settings.json'

        if not exists(filename):
            raise OneLogin_Saml2_Error(
                'Settings file not found: %s',
                OneLogin_Saml2_Error.SETTINGS_FILE_NOT_FOUND,
                filename
            )

        # In the php toolkit instead of being a json file it is a php file and
        # it is directly included
        with open(filename, 'r') as json_data:
            settings = json.loads(json_data.read())

        advanced_filename = self.get_base_path() + 'advanced_settings.json'
        if exists(advanced_filename):
            with open(advanced_filename, 'r') as json_data:
                settings.update(json.loads(json_data.read()))  # Merge settings

        return self._load_settings_from_dict(settings)

    def _add_default_values(self):
        """
        Add default values if the settings info is not complete
        """
        self._sp.setdefault('assertionConsumerService', {})
        self._sp['assertionConsumerService'].setdefault('binding', OneLogin_Saml2_Constants.BINDING_HTTP_POST)

        self._sp.setdefault('attributeConsumingService', {})

        self._sp.setdefault('singleLogoutService', {})
        self._sp['singleLogoutService'].setdefault('binding', OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT)

        self._idp.setdefault('singleLogoutService', {})

        # Related to nameID
        self._sp.setdefault('NameIDFormat', OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED)
        self._security.setdefault('nameIdEncrypted', False)

        # Metadata format
        self._security.setdefault('metadataValidUntil', None)  # None means use default
        self._security.setdefault('metadataCacheDuration', None)  # None means use default

        # Sign provided
        self._security.setdefault('authnRequestsSigned', False)
        self._security.setdefault('logoutRequestSigned', False)
        self._security.setdefault('logoutResponseSigned', False)
        self._security.setdefault('signMetadata', False)

        # Sign expected
        self._security.setdefault('wantMessagesSigned', False)
        self._security.setdefault('wantAssertionsSigned', False)

        # NameID element expected
        self._security.setdefault('wantNameId', True)

        # Encrypt expected
        self._security.setdefault('wantAssertionsEncrypted', False)
        self._security.setdefault('wantNameIdEncrypted', False)

        # Signature Algorithm
        self._security.setdefault('signatureAlgorithm', OneLogin_Saml2_Constants.RSA_SHA256)

        # Digest Algorithm
        self._security.setdefault('digestAlgorithm', OneLogin_Saml2_Constants.SHA256)

        # Reject Deprecated Algorithms
        self._security.setdefault('rejectDeprecatedAlgorithm', False)

        # AttributeStatement required by default
        self._security.setdefault('wantAttributeStatement', True)

        # Disallow duplicate attribute names by default
        self._security.setdefault('allowRepeatAttributeName', False)

        self._idp.setdefault('x509cert', '')
        self._idp.setdefault('certFingerprint', '')
        self._idp.setdefault('certFingerprintAlgorithm', 'sha1')

        self._sp.setdefault('x509cert', '')
        self._sp.setdefault('privateKey', '')

        self._security.setdefault('requestedAuthnContext', True)
        self._security.setdefault('requestedAuthnContextComparison', 'exact')
        self._security.setdefault('failOnAuthnContextMismatch', False)


[docs]    def check_settings(self, settings):
        """
        Checks the settings info.

        :param settings: Dict with settings data
        :type settings: dict

        :returns: Errors found on the settings data
        :rtype: list
        """
        assert isinstance(settings, dict)

        errors = []
        if not isinstance(settings, dict) or len(settings) == 0:
            errors.append('invalid_syntax')
        else:
            if not self._sp_validation_only:
                errors += self.check_idp_settings(settings)
            sp_errors = self.check_sp_settings(settings)
            errors += sp_errors

        return errors



[docs]    def check_idp_settings(self, settings):
        """
        Checks the IdP settings info.
        :param settings: Dict with settings data
        :type settings: dict
        :returns: Errors found on the IdP settings data
        :rtype: list
        """
        assert isinstance(settings, dict)

        errors = []
        if not isinstance(settings, dict) or len(settings) == 0:
            errors.append('invalid_syntax')
        else:
            if not settings.get('idp'):
                errors.append('idp_not_found')
            else:
                allow_single_domain_urls = self._get_allow_single_label_domain(settings)
                idp = settings['idp']
                if not idp.get('entityId'):
                    errors.append('idp_entityId_not_found')

                if not idp.get('singleSignOnService', {}).get('url'):
                    errors.append('idp_sso_not_found')
                elif not validate_url(idp['singleSignOnService']['url'], allow_single_domain_urls):
                    errors.append('idp_sso_url_invalid')

                slo_url = idp.get('singleLogoutService', {}).get('url')
                if slo_url and not validate_url(slo_url, allow_single_domain_urls):
                    errors.append('idp_slo_url_invalid')

                if 'security' in settings:
                    security = settings['security']

                    exists_x509 = bool(idp.get('x509cert'))
                    exists_fingerprint = bool(idp.get('certFingerprint'))

                    exists_multix509sign = 'x509certMulti' in idp and \
                        'signing' in idp['x509certMulti'] and \
                        idp['x509certMulti']['signing']
                    exists_multix509enc = 'x509certMulti' in idp and \
                        'encryption' in idp['x509certMulti'] and \
                        idp['x509certMulti']['encryption']

                    want_assert_sign = bool(security.get('wantAssertionsSigned'))
                    want_mes_signed = bool(security.get('wantMessagesSigned'))
                    nameid_enc = bool(security.get('nameIdEncrypted'))

                    if (want_assert_sign or want_mes_signed) and \
                            not (exists_x509 or exists_fingerprint or exists_multix509sign):
                        errors.append('idp_cert_or_fingerprint_not_found_and_required')
                    if nameid_enc and not (exists_x509 or exists_multix509enc):
                        errors.append('idp_cert_not_found_and_required')
        return errors



[docs]    def check_sp_settings(self, settings):
        """
        Checks the SP settings info.
        :param settings: Dict with settings data
        :type settings: dict
        :returns: Errors found on the SP settings data
        :rtype: list
        """
        assert isinstance(settings, dict)

        errors = []
        if not isinstance(settings, dict) or not settings:
            errors.append('invalid_syntax')
        else:
            if not settings.get('sp'):
                errors.append('sp_not_found')
            else:
                allow_single_domain_urls = self._get_allow_single_label_domain(settings)
                # check_sp_certs uses self._sp so I add it
                old_sp = self._sp
                self._sp = settings['sp']

                sp = settings['sp']
                security = settings.get('security', {})

                if not sp.get('entityId'):
                    errors.append('sp_entityId_not_found')

                if not sp.get('assertionConsumerService', {}).get('url'):
                    errors.append('sp_acs_not_found')
                elif not validate_url(sp['assertionConsumerService']['url'], allow_single_domain_urls):
                    errors.append('sp_acs_url_invalid')

                if sp.get('attributeConsumingService'):
                    attributeConsumingService = sp['attributeConsumingService']
                    if 'serviceName' not in attributeConsumingService:
                        errors.append('sp_attributeConsumingService_serviceName_not_found')
                    elif not isinstance(attributeConsumingService['serviceName'], basestring):
                        errors.append('sp_attributeConsumingService_serviceName_type_invalid')

                    if 'requestedAttributes' not in attributeConsumingService:
                        errors.append('sp_attributeConsumingService_requestedAttributes_not_found')
                    elif not isinstance(attributeConsumingService['requestedAttributes'], list):
                        errors.append('sp_attributeConsumingService_serviceName_type_invalid')
                    else:
                        for req_attrib in attributeConsumingService['requestedAttributes']:
                            if 'name' not in req_attrib:
                                errors.append('sp_attributeConsumingService_requestedAttributes_name_not_found')
                            if 'name' in req_attrib and not req_attrib['name'].strip():
                                errors.append('sp_attributeConsumingService_requestedAttributes_name_invalid')
                            if 'attributeValue' in req_attrib and type(req_attrib['attributeValue']) != list:
                                errors.append('sp_attributeConsumingService_requestedAttributes_attributeValue_type_invalid')
                            if 'isRequired' in req_attrib and type(req_attrib['isRequired']) != bool:
                                errors.append('sp_attributeConsumingService_requestedAttributes_isRequired_type_invalid')

                    if "serviceDescription" in attributeConsumingService and not isinstance(attributeConsumingService['serviceDescription'], basestring):
                        errors.append('sp_attributeConsumingService_serviceDescription_type_invalid')

                slo_url = sp.get('singleLogoutService', {}).get('url')
                if slo_url and not validate_url(slo_url, allow_single_domain_urls):
                    errors.append('sp_sls_url_invalid')

                if 'signMetadata' in security and isinstance(security['signMetadata'], dict):
                    if 'keyFileName' not in security['signMetadata'] or \
                            'certFileName' not in security['signMetadata']:
                        errors.append('sp_signMetadata_invalid')

                authn_sign = bool(security.get('authnRequestsSigned'))
                logout_req_sign = bool(security.get('logoutRequestSigned'))
                logout_res_sign = bool(security.get('logoutResponseSigned'))
                want_assert_enc = bool(security.get('wantAssertionsEncrypted'))
                want_nameid_enc = bool(security.get('wantNameIdEncrypted'))

                if not self.check_sp_certs():
                    if authn_sign or logout_req_sign or logout_res_sign or \
                       want_assert_enc or want_nameid_enc:
                        errors.append('sp_cert_not_found_and_required')

            if 'contactPerson' in settings:
                types = settings['contactPerson']
                valid_types = ['technical', 'support', 'administrative', 'billing', 'other']
                for c_type in types:
                    if c_type not in valid_types:
                        errors.append('contact_type_invalid')
                        break

                for c_type in settings['contactPerson']:
                    contact = settings['contactPerson'][c_type]
                    if ('givenName' not in contact or len(contact['givenName']) == 0) or \
                            ('emailAddress' not in contact or len(contact['emailAddress']) == 0):
                        errors.append('contact_not_enought_data')
                        break

            if 'organization' in settings:
                for org in settings['organization']:
                    organization = settings['organization'][org]
                    if ('name' not in organization or len(organization['name']) == 0) or \
                        ('displayname' not in organization or len(organization['displayname']) == 0) or \
                            ('url' not in organization or len(organization['url']) == 0):
                        errors.append('organization_not_enought_data')
                        break
        # Restores the value that had the self._sp
        if 'old_sp' in locals():
            self._sp = old_sp

        return errors



[docs]    def check_sp_certs(self):
        """
        Checks if the x509 certs of the SP exists and are valid.
        :returns: If the x509 certs of the SP exists and are valid
        :rtype: boolean
        """
        key = self.get_sp_key()
        cert = self.get_sp_cert()
        return key is not None and cert is not None



[docs]    def get_idp_sso_url(self):
        """
        Gets the IdP SSO URL.

        :returns: An URL, the SSO endpoint of the IdP
        :rtype: string
        """
        idp_data = self.get_idp_data()
        return idp_data['singleSignOnService']['url']



[docs]    def get_idp_slo_url(self):
        """
        Gets the IdP SLO URL.

        :returns: An URL, the SLO endpoint of the IdP
        :rtype: string
        """
        idp_data = self.get_idp_data()
        if 'url' in idp_data['singleLogoutService']:
            return idp_data['singleLogoutService']['url']



[docs]    def get_idp_slo_response_url(self):
        """
        Gets the IdP SLO return URL for IdP-initiated logout.

        :returns: an URL, the SLO return endpoint of the IdP
        :rtype: string
        """
        idp_data = self.get_idp_data()
        if 'url' in idp_data['singleLogoutService']:
            return idp_data['singleLogoutService'].get('responseUrl', self.get_idp_slo_url())



[docs]    def get_sp_key(self):
        """
        Returns the x509 private key of the SP.
        :returns: SP private key
        :rtype: string or None
        """
        key = self._sp.get('privateKey')
        key_file_name = self._paths['cert'] + 'sp.key'

        if not key and exists(key_file_name):
            with open(key_file_name) as f:
                key = f.read()

        return key or None



[docs]    def get_sp_cert(self):
        """
        Returns the x509 public cert of the SP.
        :returns: SP public cert
        :rtype: string or None
        """
        cert = self._sp.get('x509cert')
        cert_file_name = self._paths['cert'] + 'sp.crt'

        if not cert and exists(cert_file_name):
            with open(cert_file_name) as f:
                cert = f.read()

        return cert or None



[docs]    def get_sp_cert_new(self):
        """
        Returns the x509 public of the SP planned
        to be used soon instead the other public cert
        :returns: SP public cert new
        :rtype: string or None
        """
        cert = self._sp.get('x509certNew')
        cert_file_name = self._paths['cert'] + 'sp_new.crt'

        if not cert and exists(cert_file_name):
            with open(cert_file_name) as f:
                cert = f.read()

        return cert or None



[docs]    def get_idp_cert(self):
        """
        Returns the x509 public cert of the IdP.
        :returns: IdP public cert
        :rtype: string
        """
        cert = self._idp.get('x509cert')
        cert_file_name = self.get_cert_path() + 'idp.crt'
        if not cert and exists(cert_file_name):
            with open(cert_file_name) as f:
                cert = f.read()
        return cert or None



[docs]    def get_idp_data(self):
        """
        Gets the IdP data.

        :returns: IdP info
        :rtype: dict
        """
        return self._idp



[docs]    def get_sp_data(self):
        """
        Gets the SP data.

        :returns: SP info
        :rtype: dict
        """
        return self._sp



[docs]    def get_security_data(self):
        """
        Gets security data.

        :returns: Security info
        :rtype: dict
        """
        return self._security



[docs]    def get_contacts(self):
        """
        Gets contact data.

        :returns: Contacts info
        :rtype: dict
        """
        return self._contacts



[docs]    def get_organization(self):
        """
        Gets organization data.

        :returns: Organization info
        :rtype: dict
        """
        return self._organization



[docs]    def get_sp_metadata(self):
        """
        Gets the SP metadata. The XML representation.
        :returns: SP metadata (xml)
        :rtype: string
        """
        metadata = self.metadata_class.builder(
            self._sp, self._security['authnRequestsSigned'],
            self._security['wantAssertionsSigned'],
            self._security['metadataValidUntil'],
            self._security['metadataCacheDuration'],
            self.get_contacts(), self.get_organization()
        )

        add_encryption = self._security['wantNameIdEncrypted'] or self._security['wantAssertionsEncrypted']

        cert_new = self.get_sp_cert_new()
        metadata = self.metadata_class.add_x509_key_descriptors(metadata, cert_new, add_encryption)

        cert = self.get_sp_cert()
        metadata = self.metadata_class.add_x509_key_descriptors(metadata, cert, add_encryption)

        # Sign metadata
        if 'signMetadata' in self._security and self._security['signMetadata'] is not False:
            if self._security['signMetadata'] is True:
                # Use the SP's normal key to sign the metadata:
                if not cert:
                    raise OneLogin_Saml2_Error(
                        'Cannot sign metadata: missing SP public key certificate.',
                        OneLogin_Saml2_Error.PUBLIC_CERT_FILE_NOT_FOUND
                    )
                cert_metadata = cert
                key_metadata = self.get_sp_key()
                if not key_metadata:
                    raise OneLogin_Saml2_Error(
                        'Cannot sign metadata: missing SP private key.',
                        OneLogin_Saml2_Error.PRIVATE_KEY_FILE_NOT_FOUND
                    )
            else:
                # Use a custom key to sign the metadata:
                if ('keyFileName' not in self._security['signMetadata'] or
                        'certFileName' not in self._security['signMetadata']):
                    raise OneLogin_Saml2_Error(
                        'Invalid Setting: signMetadata value of the sp is not valid',
                        OneLogin_Saml2_Error.SETTINGS_INVALID_SYNTAX
                    )
                key_file_name = self._security['signMetadata']['keyFileName']
                cert_file_name = self._security['signMetadata']['certFileName']
                key_metadata_file = self._paths['cert'] + key_file_name
                cert_metadata_file = self._paths['cert'] + cert_file_name

                try:
                    with open(key_metadata_file, 'r') as f_metadata_key:
                        key_metadata = f_metadata_key.read()
                except IOError:
                    raise OneLogin_Saml2_Error(
                        'Private key file not readable: %s',
                        OneLogin_Saml2_Error.PRIVATE_KEY_FILE_NOT_FOUND,
                        key_metadata_file
                    )

                try:
                    with open(cert_metadata_file, 'r') as f_metadata_cert:
                        cert_metadata = f_metadata_cert.read()
                except IOError:
                    raise OneLogin_Saml2_Error(
                        'Public cert file not readable: %s',
                        OneLogin_Saml2_Error.PUBLIC_CERT_FILE_NOT_FOUND,
                        cert_metadata_file
                    )

            signature_algorithm = self._security['signatureAlgorithm']
            digest_algorithm = self._security['digestAlgorithm']

            metadata = self.metadata_class.sign_metadata(metadata, key_metadata, cert_metadata, signature_algorithm, digest_algorithm)

        return metadata



[docs]    def validate_metadata(self, xml):
        """
        Validates an XML SP Metadata.

        :param xml: Metadata's XML that will be validate
        :type xml: string

        :returns: The list of found errors
        :rtype: list
        """

        assert isinstance(xml, compat.text_types)

        if len(xml) == 0:
            raise Exception('Empty string supplied as input')

        errors = []
        root = OneLogin_Saml2_XML.validate_xml(xml, 'saml-schema-metadata-2.0.xsd', self._debug)
        if isinstance(root, str):
            errors.append(root)
        else:
            if root.tag != '{%s}EntityDescriptor' % OneLogin_Saml2_Constants.NS_MD:
                errors.append('noEntityDescriptor_xml')
            else:
                if (len(root.findall('.//md:SPSSODescriptor', namespaces=OneLogin_Saml2_Constants.NSMAP))) != 1:
                    errors.append('onlySPSSODescriptor_allowed_xml')
                else:
                    valid_until, cache_duration = root.get('validUntil'), root.get('cacheDuration')

                    if valid_until:
                        valid_until = OneLogin_Saml2_Utils.parse_SAML_to_time(valid_until)
                    expire_time = OneLogin_Saml2_Utils.get_expire_time(cache_duration, valid_until)
                    if expire_time is not None and int(time()) > int(expire_time):
                        errors.append('expired_xml')

        # TODO: Validate Sign

        return errors



[docs]    def format_idp_cert(self):
        """
        Formats the IdP cert.
        """
        self._idp['x509cert'] = OneLogin_Saml2_Utils.format_cert(self._idp['x509cert'])



[docs]    def format_idp_cert_multi(self):
        """
        Formats the Multple IdP certs.
        """
        if 'x509certMulti' in self._idp:
            if 'signing' in self._idp['x509certMulti']:
                for idx in range(len(self._idp['x509certMulti']['signing'])):
                    self._idp['x509certMulti']['signing'][idx] = OneLogin_Saml2_Utils.format_cert(self._idp['x509certMulti']['signing'][idx])

            if 'encryption' in self._idp['x509certMulti']:
                for idx in range(len(self._idp['x509certMulti']['encryption'])):
                    self._idp['x509certMulti']['encryption'][idx] = OneLogin_Saml2_Utils.format_cert(self._idp['x509certMulti']['encryption'][idx])



[docs]    def format_sp_cert(self):
        """
        Formats the SP cert.
        """
        self._sp['x509cert'] = OneLogin_Saml2_Utils.format_cert(self._sp['x509cert'])



[docs]    def format_sp_cert_new(self):
        """
        Formats the SP cert.
        """
        self._sp['x509certNew'] = OneLogin_Saml2_Utils.format_cert(self._sp['x509certNew'])



[docs]    def format_sp_key(self):
        """
        Formats the private key.
        """
        self._sp['privateKey'] = OneLogin_Saml2_Utils.format_private_key(self._sp['privateKey'])



[docs]    def get_errors(self):
        """
        Returns an array with the errors, the array is empty when the settings is ok.

        :returns: Errors
        :rtype: list
        """
        return self._errors



[docs]    def set_strict(self, value):
        """
        Activates or deactivates the strict mode.

        :param value: Strict parameter
        :type value: boolean
        """
        assert isinstance(value, bool)

        self._strict = value



[docs]    def is_strict(self):
        """
        Returns if the 'strict' mode is active.

        :returns: Strict parameter
        :rtype: boolean
        """
        return self._strict



[docs]    def is_debug_active(self):
        """
        Returns if the debug is active.

        :returns: Debug parameter
        :rtype: boolean
        """
        return self._debug


    def _get_allow_single_label_domain(self, settings):
        security = settings.get('security', {})
        return 'allowSingleLabelDomains' in security.keys() and security['allowSingleLabelDomains']
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/utils.html000066400000000000000000004324271451074743100246120ustar00rootroot00000000000000 onelogin.saml2.utils — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.utils

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Utils class


Auxiliary class of SAML Python Toolkit.

"""

import base64
import warnings
from copy import deepcopy
import calendar
from datetime import datetime
from hashlib import sha1, sha256, sha384, sha512
from isodate import parse_duration as duration_parser
import re
from textwrap import wrap
from functools import wraps
from uuid import uuid4
from xml.dom.minidom import Element
import zlib
import xmlsec

from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.errors import OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError
from onelogin.saml2.xml_utils import OneLogin_Saml2_XML


try:
    from urllib.parse import quote_plus, urlsplit, urlunsplit  # py3
except ImportError:
    from urlparse import urlsplit, urlunsplit
    from urllib import quote_plus  # py2



[docs]def return_false_on_exception(func):
    """
    Decorator. When applied to a function, it will, by default, suppress any exceptions
    raised by that function and return False. It may be overridden by passing a
    "raise_exceptions" keyword argument when calling the wrapped function.
    """
    @wraps(func)
    def exceptfalse(*args, **kwargs):
        if not kwargs.pop('raise_exceptions', False):
            try:
                return func(*args, **kwargs)
            except Exception:
                return False
        else:
            return func(*args, **kwargs)
    return exceptfalse




[docs]class OneLogin_Saml2_Utils(object):
    """

    Auxiliary class that contains several utility methods to parse time,
    urls, add sign, encrypt, decrypt, sign validation, handle xml ...

    """

    RESPONSE_SIGNATURE_XPATH = '/samlp:Response/ds:Signature'
    ASSERTION_SIGNATURE_XPATH = '/samlp:Response/saml:Assertion/ds:Signature'

    TIME_FORMAT = "%Y-%m-%dT%H:%M:%SZ"
    TIME_FORMAT_2 = "%Y-%m-%dT%H:%M:%S.%fZ"
    TIME_FORMAT_WITH_FRAGMENT = re.compile(r'^(\d{4,4}-\d{2,2}-\d{2,2}T\d{2,2}:\d{2,2}:\d{2,2})(\.\d*)?Z?$')


[docs]    @staticmethod
    def escape_url(url, lowercase_urlencoding=False):
        """
        escape the non-safe symbols in url
        The encoding used by ADFS 3.0 is not compatible with
        python's quote_plus (ADFS produces lower case hex numbers and quote_plus produces
        upper case hex numbers)
        :param url: the url to escape
        :type url: str

        :param lowercase_urlencoding: lowercase or no
        :type lowercase_urlencoding: boolean

        :return: the escaped url
        :rtype str
        """
        encoded = quote_plus(url)
        return re.sub(r"%[A-F0-9]{2}", lambda m: m.group(0).lower(), encoded) if lowercase_urlencoding else encoded



[docs]    @staticmethod
    def b64encode(data):
        """base64 encode"""
        return compat.to_string(base64.b64encode(compat.to_bytes(data)))



[docs]    @staticmethod
    def b64decode(data):
        """base64 decode"""
        return base64.b64decode(data)



[docs]    @staticmethod
    def decode_base64_and_inflate(value, ignore_zip=False):
        """
        base64 decodes and then inflates according to RFC1951
        :param value: a deflated and encoded string
        :type value: string
        :param ignore_zip: ignore zip errors
        :returns: the string after decoding and inflating
        :rtype: string
        """
        encoded = OneLogin_Saml2_Utils.b64decode(value)
        try:
            return zlib.decompress(encoded, -15)
        except zlib.error:
            if not ignore_zip:
                raise
        return encoded



[docs]    @staticmethod
    def deflate_and_base64_encode(value):
        """
        Deflates and then base64 encodes a string
        :param value: The string to deflate and encode
        :type value: string
        :returns: The deflated and encoded string
        :rtype: string
        """
        return OneLogin_Saml2_Utils.b64encode(zlib.compress(compat.to_bytes(value))[2:-4])



[docs]    @staticmethod
    def format_cert(cert, heads=True):
        """
        Returns a x509 cert (adding header & footer if required).

        :param cert: A x509 unformatted cert
        :type: string

        :param heads: True if we want to include head and footer
        :type: boolean

        :returns: Formatted cert
        :rtype: string
        """
        x509_cert = cert.replace('\x0D', '')
        x509_cert = x509_cert.replace('\r', '')
        x509_cert = x509_cert.replace('\n', '')
        if len(x509_cert) > 0:
            x509_cert = x509_cert.replace('-----BEGIN CERTIFICATE-----', '')
            x509_cert = x509_cert.replace('-----END CERTIFICATE-----', '')
            x509_cert = x509_cert.replace(' ', '')

            if heads:
                x509_cert = "-----BEGIN CERTIFICATE-----\n" + "\n".join(wrap(x509_cert, 64)) + "\n-----END CERTIFICATE-----\n"

        return x509_cert



[docs]    @staticmethod
    def format_private_key(key, heads=True):
        """
        Returns a private key (adding header & footer if required).

        :param key A private key
        :type: string

        :param heads: True if we want to include head and footer
        :type: boolean

        :returns: Formated private key
        :rtype: string
        """
        private_key = key.replace('\x0D', '')
        private_key = private_key.replace('\r', '')
        private_key = private_key.replace('\n', '')
        if len(private_key) > 0:
            if private_key.find('-----BEGIN PRIVATE KEY-----') != -1:
                private_key = private_key.replace('-----BEGIN PRIVATE KEY-----', '')
                private_key = private_key.replace('-----END PRIVATE KEY-----', '')
                private_key = private_key.replace(' ', '')
                if heads:
                    private_key = "-----BEGIN PRIVATE KEY-----\n" + "\n".join(wrap(private_key, 64)) + "\n-----END PRIVATE KEY-----\n"
            else:
                private_key = private_key.replace('-----BEGIN RSA PRIVATE KEY-----', '')
                private_key = private_key.replace('-----END RSA PRIVATE KEY-----', '')
                private_key = private_key.replace(' ', '')
                if heads:
                    private_key = "-----BEGIN RSA PRIVATE KEY-----\n" + "\n".join(wrap(private_key, 64)) + "\n-----END RSA PRIVATE KEY-----\n"
        return private_key



[docs]    @staticmethod
    def redirect(url, parameters={}, request_data={}):
        """
        Executes a redirection to the provided url (or return the target url).

        :param url: The target url
        :type: string

        :param parameters: Extra parameters to be passed as part of the url
        :type: dict

        :param request_data: The request as a dict
        :type: dict

        :returns: Url
        :rtype: string
        """
        assert isinstance(url, compat.str_type)
        assert isinstance(parameters, dict)

        if url.startswith('/'):
            url = '%s%s' % (OneLogin_Saml2_Utils.get_self_url_host(request_data), url)

        # Verify that the URL is to a http or https site.
        if re.search('^https?://', url, flags=re.IGNORECASE) is None:
            raise OneLogin_Saml2_Error(
                'Redirect to invalid URL: ' + url,
                OneLogin_Saml2_Error.REDIRECT_INVALID_URL
            )

        # Add encoded parameters
        if url.find('?') < 0:
            param_prefix = '?'
        else:
            param_prefix = '&'

        for name, value in parameters.items():

            if value is None:
                param = OneLogin_Saml2_Utils.escape_url(name)
            elif isinstance(value, list):
                param = ''
                for val in value:
                    param += OneLogin_Saml2_Utils.escape_url(name) + '[]=' + OneLogin_Saml2_Utils.escape_url(val) + '&'
                if len(param) > 0:
                    param = param[0:-1]
            else:
                param = OneLogin_Saml2_Utils.escape_url(name) + '=' + OneLogin_Saml2_Utils.escape_url(value)

            if param:
                url += param_prefix + param
                param_prefix = '&'

        return url



[docs]    @staticmethod
    def get_self_url_host(request_data):
        """
        Returns the protocol + the current host + the port (if different than
        common ports).

        :param request_data: The request as a dict
        :type: dict

        :return: Url
        :rtype: string
        """
        current_host = OneLogin_Saml2_Utils.get_self_host(request_data)
        protocol = 'https' if OneLogin_Saml2_Utils.is_https(request_data) else 'http'

        if request_data.get('server_port') is not None:
            warnings.warn(
                'The server_port key in request data is deprecated. '
                'The http_host key should include a port, if required.',
                category=DeprecationWarning,
            )
            port_suffix = ':%s' % request_data['server_port']
            if not current_host.endswith(port_suffix):
                if not ((protocol == 'https' and port_suffix == ':443') or (protocol == 'http' and port_suffix == ':80')):
                    current_host += port_suffix

        return '%s://%s' % (protocol, current_host)



[docs]    @staticmethod
    def get_self_host(request_data):
        """
        Returns the current host (which may include a port number part).

        :param request_data: The request as a dict
        :type: dict

        :return: The current host
        :rtype: string
        """
        if 'http_host' in request_data:
            return request_data['http_host']
        elif 'server_name' in request_data:
            warnings.warn("The server_name key in request data is undocumented & deprecated.", category=DeprecationWarning)
            return request_data['server_name']
        raise Exception('No hostname defined')



[docs]    @staticmethod
    def is_https(request_data):
        """
        Checks if https or http.

        :param request_data: The request as a dict
        :type: dict

        :return: False if https is not active
        :rtype: boolean
        """
        is_https = 'https' in request_data and request_data['https'] != 'off'
        # TODO: this use of server_port should be removed too
        is_https = is_https or ('server_port' in request_data and str(request_data['server_port']) == '443')
        return is_https



[docs]    @staticmethod
    def get_self_url_no_query(request_data):
        """
        Returns the URL of the current host + current view.

        :param request_data: The request as a dict
        :type: dict

        :return: The url of current host + current view
        :rtype: string
        """
        self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data)
        script_name = request_data['script_name']
        if script_name:
            if script_name[0] != '/':
                script_name = '/' + script_name
        else:
            script_name = ''
        self_url_no_query = self_url_host + script_name
        if 'path_info' in request_data:
            self_url_no_query += request_data['path_info']

        return self_url_no_query



[docs]    @staticmethod
    def get_self_routed_url_no_query(request_data):
        """
        Returns the routed URL of the current host + current view.

        :param request_data: The request as a dict
        :type: dict

        :return: The url of current host + current view
        :rtype: string
        """
        self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data)
        route = ''
        if 'request_uri' in request_data and request_data['request_uri']:
            route = request_data['request_uri']
            if 'query_string' in request_data and request_data['query_string']:
                route = route.replace(request_data['query_string'], '')

        return self_url_host + route



[docs]    @staticmethod
    def get_self_url(request_data):
        """
        Returns the URL of the current host + current view + query.

        :param request_data: The request as a dict
        :type: dict

        :return: The url of current host + current view + query
        :rtype: string
        """
        self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data)

        request_uri = ''
        if 'request_uri' in request_data:
            request_uri = request_data['request_uri']
            if not request_uri.startswith('/'):
                match = re.search('^https?://[^/]*(/.*)', request_uri)
                if match is not None:
                    request_uri = match.groups()[0]

        return self_url_host + request_uri



[docs]    @staticmethod
    def generate_unique_id():
        """
        Generates an unique string (used for example as ID for assertions).

        :return: A unique string
        :rtype: string
        """
        return 'ONELOGIN_%s' % sha1(compat.to_bytes(uuid4().hex)).hexdigest()



[docs]    @staticmethod
    def parse_time_to_SAML(time):
        r"""
        Converts a UNIX timestamp to SAML2 timestamp on the form
        yyyy-mm-ddThh:mm:ss(\.s+)?Z.

        :param time: The time we should convert (DateTime).
        :type: string

        :return: SAML2 timestamp.
        :rtype: string
        """
        data = datetime.utcfromtimestamp(float(time))
        return data.strftime(OneLogin_Saml2_Utils.TIME_FORMAT)



[docs]    @staticmethod
    def parse_SAML_to_time(timestr):
        r"""
        Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z
        to a UNIX timestamp. The sub-second part is ignored.

        :param timestr: The time we should convert (SAML Timestamp).
        :type: string

        :return: Converted to a unix timestamp.
        :rtype: int
        """
        try:
            data = datetime.strptime(timestr, OneLogin_Saml2_Utils.TIME_FORMAT)
        except ValueError:
            try:
                data = datetime.strptime(timestr, OneLogin_Saml2_Utils.TIME_FORMAT_2)
            except ValueError:
                elem = OneLogin_Saml2_Utils.TIME_FORMAT_WITH_FRAGMENT.match(timestr)
                if not elem:
                    raise Exception("time data %s does not match format %s" % (timestr, r'yyyy-mm-ddThh:mm:ss(\.s+)?Z'))
                data = datetime.strptime(elem.groups()[0] + "Z", OneLogin_Saml2_Utils.TIME_FORMAT)

        return calendar.timegm(data.utctimetuple())



[docs]    @staticmethod
    def now():
        """
        :return: unix timestamp of actual time.
        :rtype: int
        """
        return calendar.timegm(datetime.utcnow().utctimetuple())



[docs]    @staticmethod
    def parse_duration(duration, timestamp=None):
        """
        Interprets a ISO8601 duration value relative to a given timestamp.

        :param duration: The duration, as a string.
        :type: string

        :param timestamp: The unix timestamp we should apply the duration to.
                          Optional, default to the current time.
        :type: string

        :return: The new timestamp, after the duration is applied.
        :rtype: int
        """
        assert isinstance(duration, compat.str_type)
        assert timestamp is None or isinstance(timestamp, int)

        timedelta = duration_parser(duration)
        if timestamp is None:
            data = datetime.utcnow() + timedelta
        else:
            data = datetime.utcfromtimestamp(timestamp) + timedelta
        return calendar.timegm(data.utctimetuple())



[docs]    @staticmethod
    def get_expire_time(cache_duration=None, valid_until=None):
        """
        Compares 2 dates and returns the earliest.

        :param cache_duration: The duration, as a string.
        :type: string

        :param valid_until: The valid until date, as a string or as a timestamp
        :type: string

        :return: The expiration time.
        :rtype: int
        """
        expire_time = None

        if cache_duration is not None:
            expire_time = OneLogin_Saml2_Utils.parse_duration(cache_duration)

        if valid_until is not None:
            if isinstance(valid_until, int):
                valid_until_time = valid_until
            else:
                valid_until_time = OneLogin_Saml2_Utils.parse_SAML_to_time(valid_until)
            if expire_time is None or expire_time > valid_until_time:
                expire_time = valid_until_time

        if expire_time is not None:
            return '%d' % expire_time
        return None



[docs]    @staticmethod
    def delete_local_session(callback=None):
        """
        Deletes the local session.
        """

        if callback is not None:
            callback()



[docs]    @staticmethod
    def calculate_x509_fingerprint(x509_cert, alg='sha1'):
        """
        Calculates the fingerprint of a formatted x509cert.

        :param x509_cert: x509 cert formatted
        :type: string

        :param alg: The algorithm to build the fingerprint
        :type: string

        :returns: fingerprint
        :rtype: string
        """
        assert isinstance(x509_cert, compat.str_type)

        lines = x509_cert.split('\n')
        data = ''
        inData = False

        for line in lines:
            # Remove '\r' from end of line if present.
            line = line.rstrip()
            if not inData:
                if line == '-----BEGIN CERTIFICATE-----':
                    inData = True
                elif line == '-----BEGIN PUBLIC KEY-----' or line == '-----BEGIN RSA PRIVATE KEY-----':
                    # This isn't an X509 certificate.
                    return None
            else:
                if line == '-----END CERTIFICATE-----':
                    break

                # Append the current line to the certificate data.
                data += line

        if not data:
            return None

        decoded_data = base64.b64decode(compat.to_bytes(data))

        if alg == 'sha512':
            fingerprint = sha512(decoded_data)
        elif alg == 'sha384':
            fingerprint = sha384(decoded_data)
        elif alg == 'sha256':
            fingerprint = sha256(decoded_data)
        else:
            fingerprint = sha1(decoded_data)

        return fingerprint.hexdigest().lower()



[docs]    @staticmethod
    def format_finger_print(fingerprint):
        """
        Formats a fingerprint.

        :param fingerprint: fingerprint
        :type: string

        :returns: Formatted fingerprint
        :rtype: string
        """
        formatted_fingerprint = fingerprint.replace(':', '')
        return formatted_fingerprint.lower()



[docs]    @staticmethod
    def generate_name_id(value, sp_nq, sp_format=None, cert=None, debug=False, nq=None):
        """
        Generates a nameID.

        :param value: fingerprint
        :type: string

        :param sp_nq: SP Name Qualifier
        :type: string

        :param sp_format: SP Format
        :type: string

        :param cert: IdP Public Cert to encrypt the nameID
        :type: string

        :param debug: Activate the xmlsec debug
        :type: bool

        :returns: DOMElement | XMLSec nameID
        :rtype: string

        :param nq: IDP Name Qualifier
        :type: string
        """

        root = OneLogin_Saml2_XML.make_root("{%s}container" % OneLogin_Saml2_Constants.NS_SAML)
        name_id = OneLogin_Saml2_XML.make_child(root, '{%s}NameID' % OneLogin_Saml2_Constants.NS_SAML)
        if sp_nq is not None:
            name_id.set('SPNameQualifier', sp_nq)
        if sp_format is not None:
            name_id.set('Format', sp_format)
        if nq is not None:
            name_id.set('NameQualifier', nq)
        name_id.text = value

        if cert is not None:
            xmlsec.enable_debug_trace(debug)

            # Load the public cert
            manager = xmlsec.KeysManager()
            manager.add_key(xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None))

            # Prepare for encryption
            enc_data = xmlsec.template.encrypted_data_create(
                root, xmlsec.Transform.AES128, type=xmlsec.EncryptionType.ELEMENT, ns="xenc")

            xmlsec.template.encrypted_data_ensure_cipher_value(enc_data)
            key_info = xmlsec.template.encrypted_data_ensure_key_info(enc_data, ns="dsig")
            enc_key = xmlsec.template.add_encrypted_key(key_info, xmlsec.Transform.RSA_OAEP)
            xmlsec.template.encrypted_data_ensure_cipher_value(enc_key)

            # Encrypt!
            enc_ctx = xmlsec.EncryptionContext(manager)
            enc_ctx.key = xmlsec.Key.generate(xmlsec.KeyData.AES, 128, xmlsec.KeyDataType.SESSION)
            enc_data = enc_ctx.encrypt_xml(enc_data, name_id)
            return '<saml:EncryptedID>' + compat.to_string(OneLogin_Saml2_XML.to_string(enc_data)) + '</saml:EncryptedID>'
        else:
            return OneLogin_Saml2_XML.extract_tag_text(root, "saml:NameID")



[docs]    @staticmethod
    def get_status(dom):
        """
        Gets Status from a Response.

        :param dom: The Response as XML
        :type: Document

        :returns: The Status, an array with the code and a message.
        :rtype: dict
        """
        status = {}

        status_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status')
        if len(status_entry) != 1:
            raise OneLogin_Saml2_ValidationError(
                'Missing Status on response',
                OneLogin_Saml2_ValidationError.MISSING_STATUS
            )

        code_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusCode', status_entry[0])
        if len(code_entry) != 1:
            raise OneLogin_Saml2_ValidationError(
                'Missing Status Code on response',
                OneLogin_Saml2_ValidationError.MISSING_STATUS_CODE
            )
        code = code_entry[0].values()[0]
        status['code'] = code

        status['msg'] = ''
        message_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusMessage', status_entry[0])
        if len(message_entry) == 0:
            subcode_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusCode/samlp:StatusCode', status_entry[0])
            if len(subcode_entry) == 1:
                status['msg'] = subcode_entry[0].values()[0]
        elif len(message_entry) == 1:
            status['msg'] = OneLogin_Saml2_XML.element_text(message_entry[0])

        return status



[docs]    @staticmethod
    def decrypt_element(encrypted_data, key, debug=False, inplace=False):
        """
        Decrypts an encrypted element.

        :param encrypted_data: The encrypted data.
        :type: lxml.etree.Element | DOMElement | basestring

        :param key: The key.
        :type: string

        :param debug: Activate the xmlsec debug
        :type: bool

        :param inplace: update passed data with decrypted result
        :type: bool

        :returns: The decrypted element.
        :rtype: lxml.etree.Element
        """

        if isinstance(encrypted_data, Element):
            encrypted_data = OneLogin_Saml2_XML.to_etree(str(encrypted_data.toxml()))
        if not inplace and isinstance(encrypted_data, OneLogin_Saml2_XML._element_class):
            encrypted_data = deepcopy(encrypted_data)
        elif isinstance(encrypted_data, OneLogin_Saml2_XML._text_class):
            encrypted_data = OneLogin_Saml2_XML._parse_etree(encrypted_data)

        xmlsec.enable_debug_trace(debug)
        manager = xmlsec.KeysManager()

        manager.add_key(xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None))
        enc_ctx = xmlsec.EncryptionContext(manager)
        return enc_ctx.decrypt(encrypted_data)



[docs]    @staticmethod
    def add_sign(xml, key, cert, debug=False, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256, digest_algorithm=OneLogin_Saml2_Constants.SHA256):
        """
        Adds signature key and senders certificate to an element (Message or
        Assertion).

        :param xml: The element we should sign
        :type: string | Document

        :param key: The private key
        :type: string

        :param cert: The public
        :type: string

        :param debug: Activate the xmlsec debug
        :type: bool

        :param sign_algorithm: Signature algorithm method
        :type sign_algorithm: string

        :param digest_algorithm: Digest algorithm method
        :type digest_algorithm: string

        :returns: Signed XML
        :rtype: string
        """
        if xml is None or xml == '':
            raise Exception('Empty string supplied as input')

        elem = OneLogin_Saml2_XML.to_etree(xml)

        sign_algorithm_transform_map = {
            OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1,
            OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1,
            OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256,
            OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384,
            OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512
        }
        sign_algorithm_transform = sign_algorithm_transform_map.get(sign_algorithm, xmlsec.Transform.RSA_SHA256)

        signature = xmlsec.template.create(elem, xmlsec.Transform.EXCL_C14N, sign_algorithm_transform, ns='ds')

        issuer = OneLogin_Saml2_XML.query(elem, '//saml:Issuer')
        if len(issuer) > 0:
            issuer = issuer[0]
            issuer.addnext(signature)
            elem_to_sign = issuer.getparent()
        else:
            entity_descriptor = OneLogin_Saml2_XML.query(elem, '//md:EntityDescriptor')
            if len(entity_descriptor) > 0:
                elem.insert(0, signature)
            else:
                elem[0].insert(0, signature)
            elem_to_sign = elem

        elem_id = elem_to_sign.get('ID', None)
        if elem_id is not None:
            if elem_id:
                elem_id = '#' + elem_id
        else:
            generated_id = generated_id = OneLogin_Saml2_Utils.generate_unique_id()
            elem_id = '#' + generated_id
            elem_to_sign.attrib['ID'] = generated_id

        xmlsec.enable_debug_trace(debug)
        xmlsec.tree.add_ids(elem_to_sign, ["ID"])

        digest_algorithm_transform_map = {
            OneLogin_Saml2_Constants.SHA1: xmlsec.Transform.SHA1,
            OneLogin_Saml2_Constants.SHA256: xmlsec.Transform.SHA256,
            OneLogin_Saml2_Constants.SHA384: xmlsec.Transform.SHA384,
            OneLogin_Saml2_Constants.SHA512: xmlsec.Transform.SHA512
        }
        digest_algorithm_transform = digest_algorithm_transform_map.get(digest_algorithm, xmlsec.Transform.SHA256)

        ref = xmlsec.template.add_reference(signature, digest_algorithm_transform, uri=elem_id)
        xmlsec.template.add_transform(ref, xmlsec.Transform.ENVELOPED)
        xmlsec.template.add_transform(ref, xmlsec.Transform.EXCL_C14N)
        key_info = xmlsec.template.ensure_key_info(signature)
        xmlsec.template.add_x509_data(key_info)

        dsig_ctx = xmlsec.SignatureContext()
        sign_key = xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None)
        sign_key.load_cert_from_memory(cert, xmlsec.KeyFormat.PEM)

        dsig_ctx.key = sign_key
        dsig_ctx.sign(signature)

        return OneLogin_Saml2_XML.to_string(elem)



[docs]    @staticmethod
    @return_false_on_exception
    def validate_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False, xpath=None, multicerts=None):
        """
        Validates a signature (Message or Assertion).

        :param xml: The element we should validate
        :type: string | Document

        :param cert: The public cert
        :type: string

        :param fingerprint: The fingerprint of the public cert
        :type: string

        :param fingerprintalg: The algorithm used to build the fingerprint
        :type: string

        :param validatecert: If true, will verify the signature and if the cert is valid.
        :type: bool

        :param debug: Activate the xmlsec debug
        :type: bool

        :param xpath: The xpath of the signed element
        :type: string

        :param multicerts: Multiple public certs
        :type: list

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean
        """
        if xml is None or xml == '':
            raise Exception('Empty string supplied as input')

        elem = OneLogin_Saml2_XML.to_etree(xml)
        xmlsec.enable_debug_trace(debug)
        xmlsec.tree.add_ids(elem, ["ID"])

        if xpath:
            signature_nodes = OneLogin_Saml2_XML.query(elem, xpath)
        else:
            signature_nodes = OneLogin_Saml2_XML.query(elem, OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH)

            if len(signature_nodes) == 0:
                signature_nodes = OneLogin_Saml2_XML.query(elem, OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH)

        if len(signature_nodes) == 1:
            signature_node = signature_nodes[0]

            if not multicerts:
                return OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, debug, raise_exceptions=True)
            else:
                # If multiple certs are provided, I may ignore cert and
                # fingerprint provided by the method and just check the
                # certs multicerts
                fingerprint = fingerprintalg = None
                for cert in multicerts:
                    if OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, False, raise_exceptions=False):
                        return True
                raise OneLogin_Saml2_ValidationError(
                    'Signature validation failed. SAML Response rejected.',
                    OneLogin_Saml2_ValidationError.INVALID_SIGNATURE
                )
        else:
            raise OneLogin_Saml2_ValidationError(
                'Expected exactly one signature node; got {}.'.format(len(signature_nodes)),
                OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES
            )



[docs]    @staticmethod
    @return_false_on_exception
    def validate_metadata_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False):
        """
        Validates a signature of a EntityDescriptor.

        :param xml: The element we should validate
        :type: string | Document

        :param cert: The public cert
        :type: string

        :param fingerprint: The fingerprint of the public cert
        :type: string

        :param fingerprintalg: The algorithm used to build the fingerprint
        :type: string

        :param validatecert: If true, will verify the signature and if the cert is valid.
        :type: bool

        :param debug: Activate the xmlsec debug
        :type: bool

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean
        """
        if xml is None or xml == '':
            raise Exception('Empty string supplied as input')

        elem = OneLogin_Saml2_XML.to_etree(xml)
        xmlsec.enable_debug_trace(debug)
        xmlsec.tree.add_ids(elem, ["ID"])

        signature_nodes = OneLogin_Saml2_XML.query(elem, '/md:EntitiesDescriptor/ds:Signature')

        if len(signature_nodes) == 0:
            signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/ds:Signature')

            if len(signature_nodes) == 0:
                signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/md:SPSSODescriptor/ds:Signature')
                signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/md:IDPSSODescriptor/ds:Signature')

        if len(signature_nodes) > 0:
            for signature_node in signature_nodes:
                # Raises exception if invalid
                OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, debug, raise_exceptions=True)
            return True
        else:
            raise Exception('Could not validate metadata signature: No signature nodes found.')



[docs]    @staticmethod
    @return_false_on_exception
    def validate_node_sign(signature_node, elem, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False):
        """
        Validates a signature node.

        :param signature_node: The signature node
        :type: Node

        :param xml: The element we should validate
        :type: Document

        :param cert: The public cert
        :type: string

        :param fingerprint: The fingerprint of the public cert
        :type: string

        :param fingerprintalg: The algorithm used to build the fingerprint
        :type: string

        :param validatecert: If true, will verify the signature and if the cert is valid.
        :type: bool

        :param debug: Activate the xmlsec debug
        :type: bool

        :param raise_exceptions: Whether to return false on failure or raise an exception
        :type raise_exceptions: Boolean
        """
        if (cert is None or cert == '') and fingerprint:
            x509_certificate_nodes = OneLogin_Saml2_XML.query(signature_node, '//ds:Signature/ds:KeyInfo/ds:X509Data/ds:X509Certificate')
            if len(x509_certificate_nodes) > 0:
                x509_certificate_node = x509_certificate_nodes[0]
                x509_cert_value = OneLogin_Saml2_XML.element_text(x509_certificate_node)
                x509_cert_value_formatted = OneLogin_Saml2_Utils.format_cert(x509_cert_value)
                x509_fingerprint_value = OneLogin_Saml2_Utils.calculate_x509_fingerprint(x509_cert_value_formatted, fingerprintalg)
                if fingerprint == x509_fingerprint_value:
                    cert = x509_cert_value_formatted

        if cert is None or cert == '':
            raise OneLogin_Saml2_Error(
                'Could not validate node signature: No certificate provided.',
                OneLogin_Saml2_Error.CERT_NOT_FOUND
            )

        # Check if Reference URI is empty
        # reference_elem = OneLogin_Saml2_XML.query(signature_node, '//ds:Reference')
        # if len(reference_elem) > 0:
        #     if reference_elem[0].get('URI') == '':
        #         reference_elem[0].set('URI', '#%s' % signature_node.getparent().get('ID'))

        if validatecert:
            manager = xmlsec.KeysManager()
            manager.load_cert_from_memory(cert, xmlsec.KeyFormat.CERT_PEM, xmlsec.KeyDataType.TRUSTED)
            dsig_ctx = xmlsec.SignatureContext(manager)
        else:
            dsig_ctx = xmlsec.SignatureContext()
            dsig_ctx.key = xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None)

        dsig_ctx.set_enabled_key_data([xmlsec.KeyData.X509])

        try:
            dsig_ctx.verify(signature_node)
        except Exception as err:
            raise OneLogin_Saml2_ValidationError(
                'Signature validation failed. SAML Response rejected. %s',
                OneLogin_Saml2_ValidationError.INVALID_SIGNATURE,
                str(err)
            )

        return True



[docs]    @staticmethod
    def sign_binary(msg, key, algorithm=xmlsec.Transform.RSA_SHA256, debug=False):
        """
        Sign binary message

        :param msg: The element we should validate
        :type: bytes

        :param key: The private key
        :type: string

        :param debug: Activate the xmlsec debug
        :type: bool

        :return signed message
        :rtype str
        """

        if isinstance(msg, str):
            msg = msg.encode('utf8')

        xmlsec.enable_debug_trace(debug)
        dsig_ctx = xmlsec.SignatureContext()
        dsig_ctx.key = xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None)
        return dsig_ctx.sign_binary(compat.to_bytes(msg), algorithm)



[docs]    @staticmethod
    def validate_binary_sign(signed_query, signature, cert=None, algorithm=OneLogin_Saml2_Constants.RSA_SHA256, debug=False):
        """
        Validates signed binary data (Used to validate GET Signature).

        :param signed_query: The element we should validate
        :type: string


        :param signature: The signature that will be validate
        :type: string

        :param cert: The public cert
        :type: string

        :param algorithm: Signature algorithm
        :type: string

        :param debug: Activate the xmlsec debug
        :type: bool
        """
        try:
            xmlsec.enable_debug_trace(debug)
            dsig_ctx = xmlsec.SignatureContext()
            dsig_ctx.key = xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None)

            sign_algorithm_transform_map = {
                OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1,
                OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1,
                OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256,
                OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384,
                OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512
            }
            sign_algorithm_transform = sign_algorithm_transform_map.get(algorithm, xmlsec.Transform.RSA_SHA256)

            dsig_ctx.verify_binary(compat.to_bytes(signed_query),
                                   sign_algorithm_transform,
                                   compat.to_bytes(signature))
            return True
        except xmlsec.Error as e:
            if debug:
                print(e)
            return False



[docs]    @staticmethod
    def normalize_url(url):
        """
        Returns normalized URL for comparison.
        This method converts the netloc to lowercase, as it should be case-insensitive (per RFC 4343, RFC 7617)
        If standardization fails, the original URL is returned
        Python documentation indicates that URL split also normalizes query strings if empty query fields are present

        :param url: URL
        :type url: String

        :returns: A normalized URL, or the given URL string if parsing fails
        :rtype: String
        """
        try:
            scheme, netloc, path, query, fragment = urlsplit(url)
            normalized_url = urlunsplit((scheme.lower(), netloc.lower(), path, query, fragment))
            return normalized_url
        except Exception:
            return url
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/xml_templates.html000066400000000000000000000441311451074743100263170ustar00rootroot00000000000000 onelogin.saml2.xml_templates — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.xml_templates

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_Auth class


Main class of SAML Python Toolkit.

Initializes the SP SAML instance

"""



[docs]class OneLogin_Saml2_Templates(object):

    ATTRIBUTE = """
        <saml:Attribute Name="%s" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
            <saml:AttributeValue xsi:type="xs:string">%s</saml:AttributeValue>
        </saml:Attribute>"""

    AUTHN_REQUEST = """\
<samlp:AuthnRequest
  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  ID="%(id)s"
  Version="2.0"%(provider_name)s%(force_authn_str)s%(is_passive_str)s
  IssueInstant="%(issue_instant)s"
  Destination="%(destination)s"
  ProtocolBinding="%(acs_binding)s"
  AssertionConsumerServiceURL="%(assertion_url)s"%(attr_consuming_service_str)s>
    <saml:Issuer>%(entity_id)s</saml:Issuer>%(subject_str)s%(nameid_policy_str)s
%(requested_authn_context_str)s
</samlp:AuthnRequest>"""

    LOGOUT_REQUEST = """\
<samlp:LogoutRequest
  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  ID="%(id)s"
  Version="2.0"
  IssueInstant="%(issue_instant)s"
  Destination="%(single_logout_url)s">
    <saml:Issuer>%(entity_id)s</saml:Issuer>
    %(name_id)s
    %(session_index)s
</samlp:LogoutRequest>"""

    LOGOUT_RESPONSE = """\
<samlp:LogoutResponse
  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  ID="%(id)s"
  Version="2.0"
  IssueInstant="%(issue_instant)s"
  Destination="%(destination)s"
  InResponseTo="%(in_response_to)s">
    <saml:Issuer>%(entity_id)s</saml:Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="%(status)s" />
    </samlp:Status>
</samlp:LogoutResponse>"""

    MD_CONTACT_PERSON = """\
    <md:ContactPerson contactType="%(type)s">
        <md:GivenName>%(name)s</md:GivenName>
        <md:EmailAddress>%(email)s</md:EmailAddress>
    </md:ContactPerson>"""

    MD_SLS = """\
        <md:SingleLogoutService Binding="%(binding)s"
                                Location="%(location)s" />\n"""

    MD_REQUESTED_ATTRIBUTE = """\
            <md:RequestedAttribute Name="%(req_attr_name)s"%(req_attr_nameformat_str)s%(req_attr_isrequired_str)s%(req_attr_aux_str)s"""

    MD_ATTR_CONSUMER_SERVICE = """\
        <md:AttributeConsumingService index="1">
            <md:ServiceName xml:lang="en">%(service_name)s</md:ServiceName>
%(attr_cs_desc)s%(requested_attribute_str)s
        </md:AttributeConsumingService>\n"""

    MD_ENTITY_DESCRIPTOR = """\
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
                     %(valid)s
                     %(cache)s
                     entityID="%(entity_id)s">
    <md:SPSSODescriptor AuthnRequestsSigned="%(authnsign)s" WantAssertionsSigned="%(wsign)s" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
%(sls)s        <md:NameIDFormat>%(name_id_format)s</md:NameIDFormat>
        <md:AssertionConsumerService Binding="%(binding)s"
                                     Location="%(location)s"
                                     index="1" />
%(attribute_consuming_service)s    </md:SPSSODescriptor>
%(organization)s
%(contacts)s
</md:EntityDescriptor>"""

    MD_ORGANISATION = """\
    <md:Organization>
        <md:OrganizationName xml:lang="%(lang)s">%(name)s</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="%(lang)s">%(display_name)s</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="%(lang)s">%(url)s</md:OrganizationURL>
    </md:Organization>"""

    RESPONSE = """\
<samlp:Response
  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  ID="%(id)s"
  InResponseTo="%(in_response_to)s"
  Version="2.0"
  IssueInstant="%(issue_instant)s"
  Destination="%(destination)s">
    <saml:Issuer>%(entity_id)s</saml:Issuer>
    <samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
        <samlp:StatusCode
          xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
          Value="%(status)s">
        </samlp:StatusCode>
    </samlp:Status>
    <saml:Assertion
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xmlns:xs="http://www.w3.org/2001/XMLSchema"
        Version="2.0"
        ID="%(assertion_id)s"
        IssueInstant="%(issue_instant)s">
        <saml:Issuer>%(entity_id)s</saml:Issuer>
        <saml:Subject>
            <saml:NameID
              NameQualifier="%(entity_id)s"
              SPNameQualifier="%(requester)s"
              Format="%(name_id_policy)s">%(name_id)s</saml:NameID>
            <saml:SubjectConfirmation Method="%(cm)s">
                <saml:SubjectConfirmationData
                  NotOnOrAfter="%(not_after)s"
                  InResponseTo="%(in_response_to)s"
                  Recipient="%(destination)s">
                </saml:SubjectConfirmationData>
            </saml:SubjectConfirmation>
        </saml:Subject>
        <saml:Conditions NotBefore="%(not_before)s" NotOnOrAfter="%(not_after)s">
            <saml:AudienceRestriction>
                <saml:Audience>%(requester)s</saml:Audience>
            </saml:AudienceRestriction>
        </saml:Conditions>
        <saml:AuthnStatement
          AuthnInstant="%(issue_instant)s"
          SessionIndex="%(session_index)s"
          SessionNotOnOrAfter="%(not_after)s">
%(authn_context)s
        </saml:AuthnStatement>
        <saml:AttributeStatement>
%(attributes)s
        </saml:AttributeStatement>
    </saml:Assertion>
</samlp:Response>"""
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/xml_utils.html000066400000000000000000000634471451074743100254740ustar00rootroot00000000000000 onelogin.saml2.xml_utils — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.xml_utils

# -*- coding: utf-8 -*-

""" OneLogin_Saml2_XML class


Auxiliary class of SAML Python Toolkit.

"""

from os.path import join, dirname
from lxml import etree
from onelogin.saml2 import compat
from onelogin.saml2.constants import OneLogin_Saml2_Constants
from onelogin.saml2.xmlparser import tostring, fromstring


for prefix, url in OneLogin_Saml2_Constants.NSMAP.items():
    etree.register_namespace(prefix, url)



[docs]class OneLogin_Saml2_XML(object):
    _element_class = type(etree.Element('root'))
    _parse_etree = staticmethod(fromstring)
    _schema_class = etree.XMLSchema
    _text_class = compat.text_types
    _bytes_class = compat.bytes_type
    _unparse_etree = staticmethod(tostring)

    dump = staticmethod(etree.dump)
    make_root = staticmethod(etree.Element)
    make_child = staticmethod(etree.SubElement)


[docs]    @staticmethod
    def to_string(xml, **kwargs):
        """
        Serialize an element to an encoded string representation of its XML tree.
        :param xml: The root node
        :type xml: str|bytes|xml.dom.minidom.Document|etree.Element
        :returns: string representation of xml
        :rtype: string
        """

        if isinstance(xml, OneLogin_Saml2_XML._text_class):
            return xml

        if isinstance(xml, OneLogin_Saml2_XML._element_class):
            OneLogin_Saml2_XML.cleanup_namespaces(xml)
            return OneLogin_Saml2_XML._unparse_etree(xml, **kwargs)

        raise ValueError("unsupported type %r" % type(xml))



[docs]    @staticmethod
    def to_etree(xml):
        """
        Parses an XML document or fragment from a string.
        :param xml: the string to parse
        :type xml: str|bytes|xml.dom.minidom.Document|etree.Element
        :returns: the root node
        :rtype: OneLogin_Saml2_XML._element_class
        """
        if isinstance(xml, OneLogin_Saml2_XML._element_class):
            return xml
        if isinstance(xml, OneLogin_Saml2_XML._bytes_class):
            return OneLogin_Saml2_XML._parse_etree(xml, forbid_dtd=True, forbid_entities=True)
        if isinstance(xml, OneLogin_Saml2_XML._text_class):
            return OneLogin_Saml2_XML._parse_etree(compat.to_bytes(xml), forbid_dtd=True, forbid_entities=True)

        raise ValueError('unsupported type %r' % type(xml))



[docs]    @staticmethod
    def validate_xml(xml, schema, debug=False):
        """
        Validates a xml against a schema
        :param xml: The xml that will be validated
        :type xml: str|bytes|xml.dom.minidom.Document|etree.Element
        :param schema: The schema
        :type schema: string
        :param debug: If debug is active, the parse-errors will be showed
        :type debug: bool
        :returns: Error code or the DomDocument of the xml
        :rtype: xml.dom.minidom.Document
        """

        assert isinstance(schema, compat.str_type)
        try:
            xml = OneLogin_Saml2_XML.to_etree(xml)
        except Exception as e:
            if debug:
                print(e)
            return 'unloaded_xml'

        schema_file = join(dirname(__file__), 'schemas', schema)
        with open(schema_file, 'r') as f_schema:
            xmlschema = OneLogin_Saml2_XML._schema_class(etree.parse(f_schema))

        if not xmlschema.validate(xml):
            if debug:
                print('Errors validating the metadata: ')
                for error in xmlschema.error_log:
                    print(error.message)
            return 'invalid_xml'
        return xml



[docs]    @staticmethod
    def query(dom, query, context=None, tagid=None):
        """
        Extracts nodes that match the query from the Element

        :param dom: The root of the lxml objet
        :type: Element

        :param query: Xpath Expresion
        :type: string

        :param context: Context Node
        :type: DOMElement

        :param tagid: Tag ID
        :type query: String

        :returns: The queried nodes
        :rtype: list
        """
        if context is None:
            source = dom
        else:
            source = context

        if tagid is None:
            return source.xpath(query, namespaces=OneLogin_Saml2_Constants.NSMAP)
        else:
            return source.xpath(query, tagid=tagid, namespaces=OneLogin_Saml2_Constants.NSMAP)



[docs]    @staticmethod
    def cleanup_namespaces(tree_or_element, top_nsmap=None, keep_ns_prefixes=None):
        """
        Keeps the xmlns:xs namespace intact when etree.cleanup_namespaces is invoked.
        :param tree_or_element: An XML tree or element
        :type tree_or_element: etree.Element
        :param top_nsmap: A mapping from namespace prefixes to namespace URIs
        :type top_nsmap: dict
        :param keep_ns_prefixes: List of prefixes that should not be removed as part of the cleanup
        :type keep_ns_prefixes: list
        :returns: An XML tree or element
        :rtype: etree.Element
        """
        all_prefixes_to_keep = [
            OneLogin_Saml2_Constants.NS_PREFIX_XS,
            OneLogin_Saml2_Constants.NS_PREFIX_XSI,
            OneLogin_Saml2_Constants.NS_PREFIX_XSD
        ]

        if keep_ns_prefixes:
            all_prefixes_to_keep = list(set(all_prefixes_to_keep.extend(keep_ns_prefixes)))

        return etree.cleanup_namespaces(tree_or_element, keep_ns_prefixes=all_prefixes_to_keep)



[docs]    @staticmethod
    def extract_tag_text(xml, tagname):
        open_tag = compat.to_bytes("<%s" % tagname)
        close_tag = compat.to_bytes("</%s>" % tagname)

        xml = OneLogin_Saml2_XML.to_string(xml)
        start = xml.find(open_tag)
        assert start != -1

        end = xml.find(close_tag, start) + len(close_tag)
        assert end != -1
        return compat.to_string(xml[start:end])



[docs]    @staticmethod
    def element_text(node):
        # Double check, the LXML Parser already removes comments
        etree.strip_tags(node, etree.Comment)
        return node.text
python3-saml-1.16.0/docs/saml2/_modules/onelogin/saml2/xmlparser.html000066400000000000000000001014061451074743100254550ustar00rootroot00000000000000 onelogin.saml2.xmlparser — SAML Python2/3 Toolkit 1 documentation

Source code for onelogin.saml2.xmlparser

# -*- coding: utf-8 -*-

# Based on the lxml example from defusedxml
# DTDForbidden, EntitiesForbidden, NotSupportedError are clones of the classes defined at defusedxml
#
# Copyright (c) 2013 by Christian Heimes <christian@python.org>
# Licensed to PSF under a Contributor Agreement.
# See https://www.python.org/psf/license for licensing details.
"""lxml.etree protection"""

from __future__ import print_function, absolute_import

import threading

from lxml import etree as _etree

LXML3 = _etree.LXML_VERSION[0] >= 3

__origin__ = "lxml.etree"

tostring = _etree.tostring



[docs]class DTDForbidden(ValueError):
    """Document type definition is forbidden
    """

    def __init__(self, name, sysid, pubid):
        super(DTDForbidden, self).__init__()
        self.name = name
        self.sysid = sysid
        self.pubid = pubid

    def __str__(self):
        tpl = "DTDForbidden(name='{}', system_id={!r}, public_id={!r})"
        return tpl.format(self.name, self.sysid, self.pubid)




[docs]class EntitiesForbidden(ValueError):
    """Entity definition is forbidden
    """

    def __init__(self, name, value, base, sysid, pubid, notation_name):
        super(EntitiesForbidden, self).__init__()
        self.name = name
        self.value = value
        self.base = base
        self.sysid = sysid
        self.pubid = pubid
        self.notation_name = notation_name

    def __str__(self):
        tpl = "EntitiesForbidden(name='{}', system_id={!r}, public_id={!r})"
        return tpl.format(self.name, self.sysid, self.pubid)




[docs]class NotSupportedError(ValueError):
    """The operation is not supported
    """




[docs]class RestrictedElement(_etree.ElementBase):
    """A restricted Element class that filters out instances of some classes
    """

    __slots__ = ()
    blacklist = (_etree._Entity, _etree._ProcessingInstruction, _etree._Comment)

    def _filter(self, iterator):
        blacklist = self.blacklist
        for child in iterator:
            if isinstance(child, blacklist):
                continue
            yield child

    def __iter__(self):
        iterator = super(RestrictedElement, self).__iter__()
        return self._filter(iterator)


[docs]    def iterchildren(self, tag=None, reversed=False):
        iterator = super(RestrictedElement, self).iterchildren(tag=tag, reversed=reversed)
        return self._filter(iterator)



[docs]    def iter(self, tag=None, *tags):
        iterator = super(RestrictedElement, self).iter(tag=tag, *tags)
        return self._filter(iterator)



[docs]    def iterdescendants(self, tag=None, *tags):
        iterator = super(RestrictedElement, self).iterdescendants(tag=tag, *tags)
        return self._filter(iterator)



[docs]    def itersiblings(self, tag=None, preceding=False):
        iterator = super(RestrictedElement, self).itersiblings(tag=tag, preceding=preceding)
        return self._filter(iterator)



[docs]    def getchildren(self):
        iterator = super(RestrictedElement, self).__iter__()
        return list(self._filter(iterator))



[docs]    def getiterator(self, tag=None):
        iterator = super(RestrictedElement, self).getiterator(tag)
        return self._filter(iterator)




[docs]class GlobalParserTLS(threading.local):
    """Thread local context for custom parser instances
    """

    parser_config = {
        "resolve_entities": False,
        'remove_comments': True,
        'no_network': True,
        'remove_pis': True,
        'huge_tree': False
    }

    element_class = RestrictedElement


[docs]    def createDefaultParser(self):
        parser = _etree.XMLParser(**self.parser_config)
        element_class = self.element_class
        if self.element_class is not None:
            lookup = _etree.ElementDefaultClassLookup(element=element_class)
            parser.set_element_class_lookup(lookup)
        return parser



[docs]    def setDefaultParser(self, parser):
        self._default_parser = parser



[docs]    def getDefaultParser(self):
        parser = getattr(self, "_default_parser", None)
        if parser is None:
            parser = self.createDefaultParser()
            self.setDefaultParser(parser)
        return parser



_parser_tls = GlobalParserTLS()
getDefaultParser = _parser_tls.getDefaultParser



[docs]def check_docinfo(elementtree, forbid_dtd=False, forbid_entities=True):
    """Check docinfo of an element tree for DTD and entity declarations
    The check for entity declarations needs lxml 3 or newer. lxml 2.x does
    not support dtd.iterentities().
    """
    docinfo = elementtree.docinfo
    if docinfo.doctype:
        if forbid_dtd:
            raise DTDForbidden(docinfo.doctype, docinfo.system_url, docinfo.public_id)
        if forbid_entities and not LXML3:
            # lxml < 3 has no iterentities()
            raise NotSupportedError("Unable to check for entity declarations " "in lxml 2.x")

    if forbid_entities:
        for dtd in docinfo.internalDTD, docinfo.externalDTD:
            if dtd is None:
                continue
            for entity in dtd.iterentities():
                raise EntitiesForbidden(entity.name, entity.content, None, None, None, None)




[docs]def parse(source, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True):
    if parser is None:
        parser = getDefaultParser()
    elementtree = _etree.parse(source, parser, base_url=base_url)
    check_docinfo(elementtree, forbid_dtd, forbid_entities)
    return elementtree




[docs]def fromstring(text, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True):
    if parser is None:
        parser = getDefaultParser()
    rootelement = _etree.fromstring(text, parser, base_url=base_url)
    elementtree = rootelement.getroottree()
    check_docinfo(elementtree, forbid_dtd, forbid_entities)
    return rootelement



XML = fromstring



[docs]def iterparse(*args, **kwargs):
    raise NotSupportedError("iterparse not available")
python3-saml-1.16.0/docs/saml2/_sources/000077500000000000000000000000001451074743100177335ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_sources/index.rst.txt000066400000000000000000000006221451074743100224120ustar00rootroot00000000000000.. SAML Python2/3 Toolkit documentation master file, created by sphinx-quickstart on Sun Oct 1 03:00:42 2023. You can adapt this file completely to your liking, but it should at least contain the root `toctree` directive. Welcome to SAML Python2/3 Toolkit's documentation! ================================================== .. toctree:: :maxdepth: 4 :caption: Contents: onelogin python3-saml-1.16.0/docs/saml2/_sources/modules.rst.txt000066400000000000000000000000751451074743100227550ustar00rootroot00000000000000onelogin ======== .. toctree:: :maxdepth: 4 onelogin python3-saml-1.16.0/docs/saml2/_sources/onelogin.rst.txt000066400000000000000000000003351451074743100231160ustar00rootroot00000000000000onelogin package ================ Subpackages ----------- .. toctree:: :maxdepth: 4 onelogin.saml2 Module contents --------------- .. automodule:: onelogin :members: :undoc-members: :show-inheritance: python3-saml-1.16.0/docs/saml2/_sources/onelogin.saml2.rst.txt000066400000000000000000000051321451074743100241330ustar00rootroot00000000000000onelogin.saml2 package ====================== Submodules ---------- onelogin.saml2.auth module -------------------------- .. automodule:: onelogin.saml2.auth :members: :undoc-members: :show-inheritance: onelogin.saml2.authn\_request module ------------------------------------ .. automodule:: onelogin.saml2.authn_request :members: :undoc-members: :show-inheritance: onelogin.saml2.compat module ---------------------------- .. automodule:: onelogin.saml2.compat :members: :undoc-members: :show-inheritance: onelogin.saml2.constants module ------------------------------- .. automodule:: onelogin.saml2.constants :members: :undoc-members: :show-inheritance: onelogin.saml2.errors module ---------------------------- .. automodule:: onelogin.saml2.errors :members: :undoc-members: :show-inheritance: onelogin.saml2.idp\_metadata\_parser module ------------------------------------------- .. automodule:: onelogin.saml2.idp_metadata_parser :members: :undoc-members: :show-inheritance: onelogin.saml2.logout\_request module ------------------------------------- .. automodule:: onelogin.saml2.logout_request :members: :undoc-members: :show-inheritance: onelogin.saml2.logout\_response module -------------------------------------- .. automodule:: onelogin.saml2.logout_response :members: :undoc-members: :show-inheritance: onelogin.saml2.metadata module ------------------------------ .. automodule:: onelogin.saml2.metadata :members: :undoc-members: :show-inheritance: onelogin.saml2.response module ------------------------------ .. automodule:: onelogin.saml2.response :members: :undoc-members: :show-inheritance: onelogin.saml2.settings module ------------------------------ .. automodule:: onelogin.saml2.settings :members: :undoc-members: :show-inheritance: onelogin.saml2.utils module --------------------------- .. automodule:: onelogin.saml2.utils :members: :undoc-members: :show-inheritance: onelogin.saml2.xml\_templates module ------------------------------------ .. automodule:: onelogin.saml2.xml_templates :members: :undoc-members: :show-inheritance: onelogin.saml2.xml\_utils module -------------------------------- .. automodule:: onelogin.saml2.xml_utils :members: :undoc-members: :show-inheritance: onelogin.saml2.xmlparser module ------------------------------- .. automodule:: onelogin.saml2.xmlparser :members: :undoc-members: :show-inheritance: Module contents --------------- .. automodule:: onelogin.saml2 :members: :undoc-members: :show-inheritance: python3-saml-1.16.0/docs/saml2/_static/000077500000000000000000000000001451074743100175375ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_static/_sphinx_javascript_frameworks_compat.js000066400000000000000000000103011451074743100275710ustar00rootroot00000000000000/* Compatability shim for jQuery and underscores.js. * * Copyright Sphinx contributors * Released under the two clause BSD licence */ /** * small helper function to urldecode strings * * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/decodeURIComponent#Decoding_query_parameters_from_a_URL */ jQuery.urldecode = function(x) { if (!x) { return x } return decodeURIComponent(x.replace(/\+/g, ' ')); }; /** * small helper function to urlencode strings */ jQuery.urlencode = encodeURIComponent; /** * This function returns the parsed url parameters of the * current request. Multiple values per key are supported, * it will always return arrays of strings for the value parts. */ jQuery.getQueryParameters = function(s) { if (typeof s === 'undefined') s = document.location.search; var parts = s.substr(s.indexOf('?') + 1).split('&'); var result = {}; for (var i = 0; i < parts.length; i++) { var tmp = parts[i].split('=', 2); var key = jQuery.urldecode(tmp[0]); var value = jQuery.urldecode(tmp[1]); if (key in result) result[key].push(value); else result[key] = [value]; } return result; }; /** * highlight a given string on a jquery object by wrapping it in * span elements with the given class name. */ jQuery.fn.highlightText = function(text, className) { function highlight(node, addItems) { if (node.nodeType === 3) { var val = node.nodeValue; var pos = val.toLowerCase().indexOf(text); if (pos >= 0 && !jQuery(node.parentNode).hasClass(className) && !jQuery(node.parentNode).hasClass("nohighlight")) { var span; var isInSVG = jQuery(node).closest("body, svg, foreignObject").is("svg"); if (isInSVG) { span = document.createElementNS("http://www.w3.org/2000/svg", "tspan"); } else { span = document.createElement("span"); span.className = className; } span.appendChild(document.createTextNode(val.substr(pos, text.length))); node.parentNode.insertBefore(span, node.parentNode.insertBefore( document.createTextNode(val.substr(pos + text.length)), node.nextSibling)); node.nodeValue = val.substr(0, pos); if (isInSVG) { var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect"); var bbox = node.parentElement.getBBox(); rect.x.baseVal.value = bbox.x; rect.y.baseVal.value = bbox.y; rect.width.baseVal.value = bbox.width; rect.height.baseVal.value = bbox.height; rect.setAttribute('class', className); addItems.push({ "parent": node.parentNode, "target": rect}); } } } else if (!jQuery(node).is("button, select, textarea")) { jQuery.each(node.childNodes, function() { highlight(this, addItems); }); } } var addItems = []; var result = this.each(function() { highlight(this, addItems); }); for (var i = 0; i < addItems.length; ++i) { jQuery(addItems[i].parent).before(addItems[i].target); } return result; }; /* * backward compatibility for jQuery.browser * This will be supported until firefox bug is fixed. */ if (!jQuery.browser) { jQuery.uaMatch = function(ua) { ua = ua.toLowerCase(); var match = /(chrome)[ \/]([\w.]+)/.exec(ua) || /(webkit)[ \/]([\w.]+)/.exec(ua) || /(opera)(?:.*version|)[ \/]([\w.]+)/.exec(ua) || /(msie) ([\w.]+)/.exec(ua) || ua.indexOf("compatible") < 0 && /(mozilla)(?:.*? rv:([\w.]+)|)/.exec(ua) || []; return { browser: match[ 1 ] || "", version: match[ 2 ] || "0" }; }; jQuery.browser = {}; jQuery.browser[jQuery.uaMatch(navigator.userAgent).browser] = true; } python3-saml-1.16.0/docs/saml2/_static/basic.css000066400000000000000000000353231451074743100213400ustar00rootroot00000000000000/* * basic.css * ~~~~~~~~~ * * Sphinx stylesheet -- basic theme. * * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ /* -- main layout ----------------------------------------------------------- */ div.clearer { clear: both; } div.section::after { display: block; content: ''; clear: left; } /* -- relbar ---------------------------------------------------------------- */ div.related { width: 100%; font-size: 90%; } div.related h3 { display: none; } div.related ul { margin: 0; padding: 0 0 0 10px; list-style: none; } div.related li { display: inline; } div.related li.right { float: right; margin-right: 5px; } /* -- sidebar --------------------------------------------------------------- */ div.sphinxsidebarwrapper { padding: 10px 5px 0 10px; } div.sphinxsidebar { float: left; width: 230px; margin-left: -100%; font-size: 90%; word-wrap: break-word; overflow-wrap : break-word; } div.sphinxsidebar ul { list-style: none; } div.sphinxsidebar ul ul, div.sphinxsidebar ul.want-points { margin-left: 20px; list-style: square; } div.sphinxsidebar ul ul { margin-top: 0; margin-bottom: 0; } div.sphinxsidebar form { margin-top: 10px; } div.sphinxsidebar input { border: 1px solid #98dbcc; font-family: sans-serif; font-size: 1em; } div.sphinxsidebar #searchbox form.search { overflow: hidden; } div.sphinxsidebar #searchbox input[type="text"] { float: left; width: 80%; padding: 0.25em; box-sizing: border-box; } div.sphinxsidebar #searchbox input[type="submit"] { float: left; width: 20%; border-left: none; padding: 0.25em; box-sizing: border-box; } img { border: 0; max-width: 100%; } /* -- search page ----------------------------------------------------------- */ ul.search { margin: 10px 0 0 20px; padding: 0; } ul.search li { padding: 5px 0 5px 20px; background-image: url(file.png); background-repeat: no-repeat; background-position: 0 7px; } ul.search li a { font-weight: bold; } ul.search li p.context { color: #888; margin: 2px 0 0 30px; text-align: left; } ul.keywordmatches li.goodmatch a { font-weight: bold; } /* -- index page ------------------------------------------------------------ */ table.contentstable { width: 90%; margin-left: auto; margin-right: auto; } table.contentstable p.biglink { line-height: 150%; } a.biglink { font-size: 1.3em; } span.linkdescr { font-style: italic; padding-top: 5px; font-size: 90%; } /* -- general index --------------------------------------------------------- */ table.indextable { width: 100%; } table.indextable td { text-align: left; vertical-align: top; } table.indextable ul { margin-top: 0; margin-bottom: 0; list-style-type: none; } table.indextable > tbody > tr > td > ul { padding-left: 0em; } table.indextable tr.pcap { height: 10px; } table.indextable tr.cap { margin-top: 10px; background-color: #f2f2f2; } img.toggler { margin-right: 3px; margin-top: 3px; cursor: pointer; } div.modindex-jumpbox { border-top: 1px solid #ddd; border-bottom: 1px solid #ddd; margin: 1em 0 1em 0; padding: 0.4em; } div.genindex-jumpbox { border-top: 1px solid #ddd; border-bottom: 1px solid #ddd; margin: 1em 0 1em 0; padding: 0.4em; } /* -- domain module index --------------------------------------------------- */ table.modindextable td { padding: 2px; border-collapse: collapse; } /* -- general body styles --------------------------------------------------- */ div.body { min-width: 360px; max-width: 800px; } div.body p, div.body dd, div.body li, div.body blockquote { -moz-hyphens: auto; -ms-hyphens: auto; -webkit-hyphens: auto; hyphens: auto; } a.headerlink { visibility: hidden; } h1:hover > a.headerlink, h2:hover > a.headerlink, h3:hover > a.headerlink, h4:hover > a.headerlink, h5:hover > a.headerlink, h6:hover > a.headerlink, dt:hover > a.headerlink, caption:hover > a.headerlink, p.caption:hover > a.headerlink, div.code-block-caption:hover > a.headerlink { visibility: visible; } div.body p.caption { text-align: inherit; } div.body td { text-align: left; } .first { margin-top: 0 !important; } p.rubric { margin-top: 30px; font-weight: bold; } img.align-left, figure.align-left, .figure.align-left, object.align-left { clear: left; float: left; margin-right: 1em; } img.align-right, figure.align-right, .figure.align-right, object.align-right { clear: right; float: right; margin-left: 1em; } img.align-center, figure.align-center, .figure.align-center, object.align-center { display: block; margin-left: auto; margin-right: auto; } img.align-default, figure.align-default, .figure.align-default { display: block; margin-left: auto; margin-right: auto; } .align-left { text-align: left; } .align-center { text-align: center; } .align-default { text-align: center; } .align-right { text-align: right; } /* -- sidebars -------------------------------------------------------------- */ div.sidebar, aside.sidebar { margin: 0 0 0.5em 1em; border: 1px solid #ddb; padding: 7px; background-color: #ffe; width: 40%; float: right; clear: right; overflow-x: auto; } p.sidebar-title { font-weight: bold; } nav.contents, aside.topic, div.admonition, div.topic, blockquote { clear: left; } /* -- topics ---------------------------------------------------------------- */ nav.contents, aside.topic, div.topic { border: 1px solid #ccc; padding: 7px; margin: 10px 0 10px 0; } p.topic-title { font-size: 1.1em; font-weight: bold; margin-top: 10px; } /* -- admonitions ----------------------------------------------------------- */ div.admonition { margin-top: 10px; margin-bottom: 10px; padding: 7px; } div.admonition dt { font-weight: bold; } p.admonition-title { margin: 0px 10px 5px 0px; font-weight: bold; } div.body p.centered { text-align: center; margin-top: 25px; } /* -- content of sidebars/topics/admonitions -------------------------------- */ div.sidebar > :last-child, aside.sidebar > :last-child, nav.contents > :last-child, aside.topic > :last-child, div.topic > :last-child, div.admonition > :last-child { margin-bottom: 0; } div.sidebar::after, aside.sidebar::after, nav.contents::after, aside.topic::after, div.topic::after, div.admonition::after, blockquote::after { display: block; content: ''; clear: both; } /* -- tables ---------------------------------------------------------------- */ table.docutils { margin-top: 10px; margin-bottom: 10px; border: 0; border-collapse: collapse; } table.align-center { margin-left: auto; margin-right: auto; } table.align-default { margin-left: auto; margin-right: auto; } table caption span.caption-number { font-style: italic; } table caption span.caption-text { } table.docutils td, table.docutils th { padding: 1px 8px 1px 5px; border-top: 0; border-left: 0; border-right: 0; border-bottom: 1px solid #aaa; } th { text-align: left; padding-right: 5px; } table.citation { border-left: solid 1px gray; margin-left: 1px; } table.citation td { border-bottom: none; } th > :first-child, td > :first-child { margin-top: 0px; } th > :last-child, td > :last-child { margin-bottom: 0px; } /* -- figures --------------------------------------------------------------- */ div.figure, figure { margin: 0.5em; padding: 0.5em; } div.figure p.caption, figcaption { padding: 0.3em; } div.figure p.caption span.caption-number, figcaption span.caption-number { font-style: italic; } div.figure p.caption span.caption-text, figcaption span.caption-text { } /* -- field list styles ----------------------------------------------------- */ table.field-list td, table.field-list th { border: 0 !important; } .field-list ul { margin: 0; padding-left: 1em; } .field-list p { margin: 0; } .field-name { -moz-hyphens: manual; -ms-hyphens: manual; -webkit-hyphens: manual; hyphens: manual; } /* -- hlist styles ---------------------------------------------------------- */ table.hlist { margin: 1em 0; } table.hlist td { vertical-align: top; } /* -- object description styles --------------------------------------------- */ .sig { font-family: 'Consolas', 'Menlo', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', monospace; } .sig-name, code.descname { background-color: transparent; font-weight: bold; } .sig-name { font-size: 1.1em; } code.descname { font-size: 1.2em; } .sig-prename, code.descclassname { background-color: transparent; } .optional { font-size: 1.3em; } .sig-paren { font-size: larger; } .sig-param.n { font-style: italic; } /* C++ specific styling */ .sig-inline.c-texpr, .sig-inline.cpp-texpr { font-family: unset; } .sig.c .k, .sig.c .kt, .sig.cpp .k, .sig.cpp .kt { color: #0033B3; } .sig.c .m, .sig.cpp .m { color: #1750EB; } .sig.c .s, .sig.c .sc, .sig.cpp .s, .sig.cpp .sc { color: #067D17; } /* -- other body styles ----------------------------------------------------- */ ol.arabic { list-style: decimal; } ol.loweralpha { list-style: lower-alpha; } ol.upperalpha { list-style: upper-alpha; } ol.lowerroman { list-style: lower-roman; } ol.upperroman { list-style: upper-roman; } :not(li) > ol > li:first-child > :first-child, :not(li) > ul > li:first-child > :first-child { margin-top: 0px; } :not(li) > ol > li:last-child > :last-child, :not(li) > ul > li:last-child > :last-child { margin-bottom: 0px; } ol.simple ol p, ol.simple ul p, ul.simple ol p, ul.simple ul p { margin-top: 0; } ol.simple > li:not(:first-child) > p, ul.simple > li:not(:first-child) > p { margin-top: 0; } ol.simple p, ul.simple p { margin-bottom: 0; } aside.footnote > span, div.citation > span { float: left; } aside.footnote > span:last-of-type, div.citation > span:last-of-type { padding-right: 0.5em; } aside.footnote > p { margin-left: 2em; } div.citation > p { margin-left: 4em; } aside.footnote > p:last-of-type, div.citation > p:last-of-type { margin-bottom: 0em; } aside.footnote > p:last-of-type:after, div.citation > p:last-of-type:after { content: ""; clear: both; } dl.field-list { display: grid; grid-template-columns: fit-content(30%) auto; } dl.field-list > dt { font-weight: bold; word-break: break-word; padding-left: 0.5em; padding-right: 5px; } dl.field-list > dd { padding-left: 0.5em; margin-top: 0em; margin-left: 0em; margin-bottom: 0em; } dl { margin-bottom: 15px; } dd > :first-child { margin-top: 0px; } dd ul, dd table { margin-bottom: 10px; } dd { margin-top: 3px; margin-bottom: 10px; margin-left: 30px; } .sig dd { margin-top: 0px; margin-bottom: 0px; } .sig dl { margin-top: 0px; margin-bottom: 0px; } dl > dd:last-child, dl > dd:last-child > :last-child { margin-bottom: 0; } dt:target, span.highlighted { background-color: #fbe54e; } rect.highlighted { fill: #fbe54e; } dl.glossary dt { font-weight: bold; font-size: 1.1em; } .versionmodified { font-style: italic; } .system-message { background-color: #fda; padding: 5px; border: 3px solid red; } .footnote:target { background-color: #ffa; } .line-block { display: block; margin-top: 1em; margin-bottom: 1em; } .line-block .line-block { margin-top: 0; margin-bottom: 0; margin-left: 1.5em; } .guilabel, .menuselection { font-family: sans-serif; } .accelerator { text-decoration: underline; } .classifier { font-style: oblique; } .classifier:before { font-style: normal; margin: 0 0.5em; content: ":"; display: inline-block; } abbr, acronym { border-bottom: dotted 1px; cursor: help; } .translated { background-color: rgba(207, 255, 207, 0.2) } .untranslated { background-color: rgba(255, 207, 207, 0.2) } /* -- code displays --------------------------------------------------------- */ pre { overflow: auto; overflow-y: hidden; /* fixes display issues on Chrome browsers */ } pre, div[class*="highlight-"] { clear: both; } span.pre { -moz-hyphens: none; -ms-hyphens: none; -webkit-hyphens: none; hyphens: none; white-space: nowrap; } div[class*="highlight-"] { margin: 1em 0; } td.linenos pre { border: 0; background-color: transparent; color: #aaa; } table.highlighttable { display: block; } table.highlighttable tbody { display: block; } table.highlighttable tr { display: flex; } table.highlighttable td { margin: 0; padding: 0; } table.highlighttable td.linenos { padding-right: 0.5em; } table.highlighttable td.code { flex: 1; overflow: hidden; } .highlight .hll { display: block; } div.highlight pre, table.highlighttable pre { margin: 0; } div.code-block-caption + div { margin-top: 0; } div.code-block-caption { margin-top: 1em; padding: 2px 5px; font-size: small; } div.code-block-caption code { background-color: transparent; } table.highlighttable td.linenos, span.linenos, div.highlight span.gp { /* gp: Generic.Prompt */ user-select: none; -webkit-user-select: text; /* Safari fallback only */ -webkit-user-select: none; /* Chrome/Safari */ -moz-user-select: none; /* Firefox */ -ms-user-select: none; /* IE10+ */ } div.code-block-caption span.caption-number { padding: 0.1em 0.3em; font-style: italic; } div.code-block-caption span.caption-text { } div.literal-block-wrapper { margin: 1em 0; } code.xref, a code { background-color: transparent; font-weight: bold; } h1 code, h2 code, h3 code, h4 code, h5 code, h6 code { background-color: transparent; } .viewcode-link { float: right; } .viewcode-back { float: right; font-family: sans-serif; } div.viewcode-block:target { margin: -1px -10px; padding: 0 10px; } /* -- math display ---------------------------------------------------------- */ img.math { vertical-align: middle; } div.body div.math p { text-align: center; } span.eqno { float: right; } span.eqno a.headerlink { position: absolute; z-index: 1; } div.math:hover a.headerlink { visibility: visible; } /* -- printout stylesheet --------------------------------------------------- */ @media print { div.document, div.documentwrapper, div.bodywrapper { margin: 0 !important; width: 100%; } div.sphinxsidebar, div.related, div.footer, #top-link { display: none; } }python3-saml-1.16.0/docs/saml2/_static/css/000077500000000000000000000000001451074743100203275ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_static/css/badge_only.css000066400000000000000000000062351451074743100231520ustar00rootroot00000000000000.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}@font-face{font-family:FontAwesome;font-style:normal;font-weight:400;src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713?#iefix) format("embedded-opentype"),url(fonts/fontawesome-webfont.woff2?af7ae505a9eed503f8b8e6982036873e) format("woff2"),url(fonts/fontawesome-webfont.woff?fee66e712a8a08eef5805a46892932ad) format("woff"),url(fonts/fontawesome-webfont.ttf?b06871f281fee6b241d60582ae9369b9) format("truetype"),url(fonts/fontawesome-webfont.svg?912ec66d7572ff821749319396470bde#FontAwesome) format("svg")}.fa:before{font-family:FontAwesome;font-style:normal;font-weight:400;line-height:1}.fa:before,a .fa{text-decoration:inherit}.fa:before,a .fa,li .fa{display:inline-block}li .fa-large:before{width:1.875em}ul.fas{list-style-type:none;margin-left:2em;text-indent:-.8em}ul.fas li .fa{width:.8em}ul.fas li .fa-large:before{vertical-align:baseline}.fa-book:before,.icon-book:before{content:"\f02d"}.fa-caret-down:before,.icon-caret-down:before{content:"\f0d7"}.fa-caret-up:before,.icon-caret-up:before{content:"\f0d8"}.fa-caret-left:before,.icon-caret-left:before{content:"\f0d9"}.fa-caret-right:before,.icon-caret-right:before{content:"\f0da"}.rst-versions{position:fixed;bottom:0;left:0;width:300px;color:#fcfcfc;background:#1f1d1d;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;z-index:400}.rst-versions a{color:#2980b9;text-decoration:none}.rst-versions .rst-badge-small{display:none}.rst-versions .rst-current-version{padding:12px;background-color:#272525;display:block;text-align:right;font-size:90%;cursor:pointer;color:#27ae60}.rst-versions .rst-current-version:after{clear:both;content:"";display:block}.rst-versions .rst-current-version .fa{color:#fcfcfc}.rst-versions .rst-current-version .fa-book,.rst-versions .rst-current-version .icon-book{float:left}.rst-versions .rst-current-version.rst-out-of-date{background-color:#e74c3c;color:#fff}.rst-versions .rst-current-version.rst-active-old-version{background-color:#f1c40f;color:#000}.rst-versions.shift-up{height:auto;max-height:100%;overflow-y:scroll}.rst-versions.shift-up .rst-other-versions{display:block}.rst-versions .rst-other-versions{font-size:90%;padding:12px;color:grey;display:none}.rst-versions .rst-other-versions hr{display:block;height:1px;border:0;margin:20px 0;padding:0;border-top:1px solid #413d3d}.rst-versions .rst-other-versions dd{display:inline-block;margin:0}.rst-versions .rst-other-versions dd a{display:inline-block;padding:6px;color:#fcfcfc}.rst-versions.rst-badge{width:auto;bottom:20px;right:20px;left:auto;border:none;max-width:300px;max-height:90%}.rst-versions.rst-badge .fa-book,.rst-versions.rst-badge .icon-book{float:none;line-height:30px}.rst-versions.rst-badge.shift-up .rst-current-version{text-align:right}.rst-versions.rst-badge.shift-up .rst-current-version .fa-book,.rst-versions.rst-badge.shift-up .rst-current-version .icon-book{float:left}.rst-versions.rst-badge>.rst-current-version{width:auto;height:30px;line-height:30px;padding:0 6px;display:block;text-align:center}@media screen and (max-width:768px){.rst-versions{width:85%;display:none}.rst-versions.shift{display:block}}python3-saml-1.16.0/docs/saml2/_static/css/fonts/000077500000000000000000000000001451074743100214605ustar00rootroot00000000000000python3-saml-1.16.0/docs/saml2/_static/css/fonts/Roboto-Slab-Bold.woff000066400000000000000000002531101451074743100253460ustar00rootroot00000000000000wOFFVHxGDEF:@ > ?GPOS/2ZYGSUB0t9A"=OS/22R`*cmap3,j|cvt 9 /8*fpgm9< zAgasp> glyf>( /head356mhhea4$ $ hmtx4Dn7Rloca< :i~maxpE  nameE ;&!postG $F[2prepUxc`d``a&@Ȩ$#Sd%c%c@r*t y #ƻxڔQny3{ 9d8a`A@$9,2bp$ Y5dN7ξo !bt=?GϞwBզkř]4|n2ڥL+}{JƝh*Oli3:+RKTȗf#_15nasjƭMƹ2y*d#Oy.Fףh?zD'Q}}+VƧnoo$>5IK5J*jf2n&r\PoU>NK}C{~~?p-Mvl6ZSf朱 6m6{ `K:4K0EjiIᷯǶL+|}s֭Cſ6lQS̅y9%̂Z ˖ُ[ 0ضm۶m۶m۶mm;]a4BA"jPH40!;" : 2! jSN0%>RaL0 b a2cW0@00rX07N4R& v,>!"%M&>3j.~714C 12&c2=Z233 2+ڲ ˠ۰-ڳ=;#pp%W+p qס;7s zp;ww %_b0?`?)&+a+*b+;(rbr+7)b*㔪*Ϊj&Ϋj..ZZzzk8jFFk4kk见c:&:2;>;1:#:3039 8s3: 3KS0˹ӹ+3631s2[󺍻2{'KzyGx+zgkqO*I[;)~ᷜO/¹?!!\"T0\"B\"RHh9FIQ8rN^۶zm۶m[cOՙmsب{s*;5d7"očW˽"" ~x6p?jYP1!:t% rP 0aݥ;VޒNmT͓tu:SiiegH*fV{T VˮTna2HSޔj nւubUL 604x;P%erBzsr3FZba=_ơךXpX""9 x:d3AY] @ai#sA6dAX @P @F|ՆPT|DZ'fϩz?}Bt.v|y0>"?T ^|r2'gX'OL;B O!fuAiֺrKҁExN/;}lJ;;mf,#5osY\XKN.m!ė]Z&t- Э8jhQK2~Gb`]-AԲn%Γ1Um 3mY COl~ފW< aUA+ĝp0+YYp2\8:^[A]0k7؈!E tpV;YmgN|%پ.ŗKN#I[Ym5znGi Nr4mmcWx'? sI ~_m)"a?~&>'rΤr$pö-Zߘ#q=&StnYu|< *PN Dw&ƫ[ Z(`[ l%J@N-5'h:x:x|6H-F=b硧zѯ{9̇3j~!,8`t7C_!CK}rґTkw|88&Y(6XվJ% L?=ت \*| 5?DLj_h1܊ ({ M֣#(JoTĹK0kNUчH6Wȉ'u.)fqO=Srå.epI6Dz+ƪ[>Y(?~6h钇=Եhq9Źp.FP@Ih  5h %ZDJ<܃@ApsǍ"-ƢEloFY fwYWEZx@r " T`Q )[Kdl)O9xCl$ v?f&suXå՚?SOY(O,woϦVOϖsC$Mm͡N'P/~*֏B!M8-e+:-Wq5תu>F*ӌϔlۗx/eƖCU:ZۋH*~ܐ#wh7 -CT;{> 26XR?sQQqU89dǯ9JmNui@Cq&gq6p.Ž iO77/>%l鸗z]+Zme;^v3]J7ۻ%{>!H}S%cqg9Nb SL"Wg I yZ,NǽIC8~D;W[$M~hmE_'l@':{MMcϵjcogvQ~wʻ=~Fa9F#rMb x\}\>!r\(OEiGX>'/T$_vWy7X[{4JɏT~& ZN~.zA~!3r$7-r9Nvb5Cpf8'>R|(U#QQqCh%Tć fw2Ǚd,yY긹m&;BX:ůB~`=-eMV*=Fc_צ­Wû'xPAV*MN:ڥZNLSjt&[?ջa^cOr3>&4k2=wgY~nso>w8šgk07Sx%^|YVÚPօCQm.;î;|}$xXD*Rt*71[A/fXƇ@criOo0Q=Ӏ4RZӖt3]JwzқNPnep3Ye^u`oﱞ/Vŧvݝj1e|J 4&t=Ӏ4RZӖt3]Jwz|}i]ʭ ~2yy;z`#[}*hgrgs2; iB X|gs6ۼٜùNے4c>396bؐǦQ͟ vvf^Ԡ&7(cLcϗ|g,rpCXΰ>y~3s3N7cN<43G8'@ngB19ymJKZ1d)k͠ uh@#N DT$NҒVA/0;EDA Zq-q;8VXç"6a[~BSZҊLe&KYwP4tЎAT]*ɜBUZҊ6=EFrww%5hA+6ng4cJVkBQ2lbzqG^K_"Gv/NrrO_$s RO-s⨤lF`<9\<=9ڏ3<"Y t3.5miOG:Ӆ˸t'1)Le:3t8n@X K;cl&?ޛ ` CbV9|{}X&f̫-=W ߱fs?bg3V8cTT:+_G~կuTTKUTKU@ TTJUTJUTJU@JU@JUT T@ T Q:S*P PD>QOTD>QOTD wVW}ζ!.ki~oqg[>P߼ ;/Ƴ8s8mQNfN^y/Md;l&џ d[/wwڿ{{ Mb Y|gs~{GY,9\7a(q 0Od&"C^q(Y%d2W W CtS1'\糰Ht|~9ILa~~9UքE~kMq\jYCr m/"cVY{l(Ձ(^Od9E>Kfg}zm}r,d9q`\~*6Sx*~/*v%yBŲP$3٢UE {)  /P'W2gY*`dl Ua3l̍/$lr|;זuc3י1^#+}?6K0AnxAgpyk!^cqg2 ˒G Ql%"2I69̙x!3ؙhL,p&p&v&;Õ ĺoBFkzbR!81Nx^™XjA^!{Fbga{z gc83>s>YX,lw9 6wD'ٕ' c7rs"ɳmUM!d}pxp=8+۝+&k$s]wս\CXG{?%CqcߥҸQwS;+d]:1L;`L|7=1fX&;YO+ݴ1HFnj?ILa~Qo$g"ϧ5nɨNFu2gdTe>X%*>KU)JUʨRF2Q*eT)J)UڥJUڥJUXU*BʨPF2*Kv.kqZm-XU-c-.kqeT.c-\F2nU˨Z{mJ5_*fT1cX%_Jf5_mVьfTt+W+UJgT:cc9zMiI+3FOe&KT$ m_NH{-r 9*ª:ӄJ >"((8TI)Tgts.VA/0;183e U/x6vvmoEm`c߬<㣌h17I2~1>9<<$xgYRVzU|>u ^G M7S< 9Yⳅ~AXB+|,MuY8qg\u8bmyg7<9\}"_y}%{1T^X߅BwzЋp6=) a2L9Kζ}2PdƏhǧSw:ԍ;}nJ5nDcNMn'a`wKvJ=\8SJ=8i@Cqfܙ>9s9/I\HӸ)݌Ri%[6l'ˎt q9]f{wCdoG#(ǽC)w =)Le:3c.۪~NךMMse [>uEvh*oӿaq??}ȱ#7)LO'l{Wy7X[{]%WˏrD~*?r\'?Ero_Ȍ(7Ͷo[;W{O'g8s8SQ^{'wՕO& ;. 5}b}GiuV1k>ެivxr^~Nz=ڳXr@ܨQlW? 5S g#CtJp*9:ԥ^|?]4b-ԾiK{:ҙ.\t;=M_~??~v+K|y;_L0kk[`9|;=q?{g̵ۘg!O4?/x^u`ozۿ`# hH#.5miOG:Ӆ˸t'KhG'0[=eky嫼-=Jz*\!,ܧMinLgя[gTZ,s ק+/X̧RH/` ԶmQmqꨊkAm۶mחd'yfvsmROO8/gu))EE$ jb^`ŽMxA$.9h#<jbf{+*a,^&]cI,17-~13N13QRH`5uӐ{%@/IlV VG[L ʃMQ\Dw+gE7,8 70y~ O7l3/T'a8z<,DnY3ĻM㈼ %FlHJpEGz+EC<8{U+1'Yn=AH# 88hyRV DkkϢ^Z8t \wkr(FL<;j>y+ks|Vn[YY|J^MVCE%vI^W#>3bT!xIS$Iyy\u fNJhyԬ;kQ̌ت^sm۶mfoi0ٶ1aȳw:sZ܉mĈ\{f‘Y D4!](AP+O?ZY0:Љta؍(aq8q% D\eɸRp w,Yl}k ڷulv!ZEFvgH&ψ&AF,X a0bSciԇ4ٌ [؁,;ك{ه8>8:Q"1N31OpLN61p|G<".pi.rѼ%2+\1rռ5:0r>G08 (( ( ( ( (#A|)Og<7_%/׼6|[-|L>X&,2qX)kFNZ1[VG~4;{N`1WsXPm[@'r_4,gvJw> #@>T)$!R5*R1*U\*T2UT*U15UZTof79ٛV"RYd{vRխnG=UPπٰàF4ٳ6=M@gJSӴ֬f=9!yͣ^ Z<,j Z4-kԦoi ղ]kx)v{ [AM&Nzީkۈj?6&1"r ,nUX =ݜ*o̱ɦg}pzgSrsռRp-j y'|^y'7~yaž'H$N^ DIV5٠![dѓrHN)Sk(wCwx긻1[ߗ&<3dtΑy@A)%]+TtQuAC7i]vݟ}m[iݥ{t0CzH =eg>Sogas+kw}˭Nsx !n)>  !D#a#j xYYr`77m۶*c1kfm[Qmǵ:̍9O~f?})!gGH.OPlXR@-+A K}249BZm,E[˧޲`Etr:Y݅@/K۠o0? ;zY8,bK0`0&LLV),[,dE`%BV[V:6MJN`E6c{J ǀ )+4g9 9oEWV5n7Mܲnsk<2xlybgynżk7⼳OgwIŊ)F\Y @BBe+TE!K.W@ %TR;42xWQPUUjD wjVjM\mN^AWGR/~ ג " 0p GQM1C$5S3A.-ҢB.-ol3M5\G[ݞf[Z 333ۡ!233y<-23c2=;KVfro+[]-muDW*1@C]*+űޥ^O'z&a ra0q:5kXcƊ5kXcƊ5kyqr/ ƅ"qD}i\,n,ѸEB^h {eۋWh{eۋ1_B,RײX&-B2VW*X^kkcz]SjĦrzKlVYo-뭲Z[ezkYoֲ*7m%0o8/JKߤ:Xu٪k&f?U=+k[rK\CBnVk֨8a#gp`%rT=1T9 oϣ<>C< UݶUݶUݶo-jҋ=?G]_0Wo;]"MR*67RoUKԯHIIx; HiGh/QxڝlP{qζm۶`f8ۮճmln) ⨆`N=( (0P ȌǢƌY guꢕz蠽>io>(a;{Pp*ǖ&;f73xBWѝC_џ d_1P1dO~r7s74/65? bfae'줝v&]_rA.e"W\rSnm+jc0By#k!=5@kl]غ`a6{l-U8ik Nx_=eZ駡0Jrܦ(]r)9S4'kJ<ʠh2BETECGG UBLb2DTSxc`fŴu1TS7Nh&䉘"(6b(HRar"Gər\+7˽<&O*ʫZCr3"dd7'ƫ8EuHYt ZgYtFws|(e3,aZa% X5q=F<N[=Rj連qU!݆\տxj[ȸEHƣ4Lj [ dRB{ d~|N+Y3>)^A?zӶ0SQ\LMEhʄT q8 Lxc\6>.I@ ]IV3ˠټp' Tۇ))Eݟ3i0O/= 3~ Q-JjߴEY-*j砪y[]ŨE[}jXc}׸mVz}վj zzeVdi75)EeR nK wuJGΖv΂o3G}[ K{h|kܯҕk~2jmrpʂu`@\\D'xB3yQ| ,7g~]YK7h=GWא E9ދ,QK$ԓ=Qνl`#Li*E)K9Nwc,2~iԹu:@ӫҠk-"j-q\jݍ=bCT>O5 b]b?Ӹ"+ 1qsQ|5>Z&h*=tC_X43~y޽^9+VYtc?Gc_@ԑv9rbAu&EAY]gk7KH6妲x@o0z8fbq@&c J?&RmP:9P ڶΕDp˜u8?zk, 8, w'r5HVoMJXeՓT0*a:h`2M m $!b)J 1C1bcDy0IVJj͝ael&[zO)=MO 'JRzğ^Jo;ؽ'ahxڌZ\TW>7 exS0 baG( "`$DT[%buLz٬&Z{ښ {3l-`sOwbV !;XI1u3{Zz7q8hC</rLhePrRCMK,#x ZIXޝJu:ҔV^{/@5,1! C_C^؁ lŇD*No s!ډڽ +"Cμl aY#0No@jSG(sY9 Yy`qIi0LMX7zΩo3Y &\+:W~1䳗LSqeyM ?μCa| I zCy/ 퉚rM251K P U(MU̟8W$P9y=4W9GWwwݽyWOP޽ᏛIЖ]{ݧp!װ{e벑K祽F5WeeCKue޺g~#{VVy8q8PO@g CPܗSYHֆH(T!ckRQȷbKe`II0 /\_E%hԮRyc]Z^vM֢#7dD:rsW? N+k 6{k{G=udGXyuiG<3'%uZ}]ZPS#wD`J516-TI *gLYHUt?O|}2r6tH&rވ0 u,O7S4҈L,<Ы-g(oz1B5C<%FN][Irv[_icN8:60,^Mi t2G٥,}%.CzG*GS֌%6rHÐ YĄvq$Pr>[(hVOh{Ձ{~z>ֈMs?]9 a=s |@H@ `5pN*p2ЬW*=N.jqL܍I;z|W wă5(1_&de@=uN>Z1I'MLQ 9p$ Bzn<+#ob,Pe-dZxG)"u99t@LD./v'j]^ze!XXEq#9̮ۛM(g,Gpĩ) W_U@J.a]5CaoFCΓxyf(|ko/%H+Yk[ ƪϓ>bSЇⱆqSj^#>$><"Bp^ˬNu^/s#N3S,'_ '"A'Zu n,\k  ijV9YynזA ũz1+ƫbhh{<&ͽԅ)N0sn1z+'Lж>~ }c{g\_wt@`#\CPM'8c[F2XFQmv,8K?zУ-ybcɤ"kpFֺܻkҽ-/CPEVd2&1@:k(5א(V"0fD;8=щAVʧ^y|w2#T]FpFTJNw8T!Z<6[GW+՗,>H9;ҚpqvD|)wމIux/ʤ߼o.B7lpZׂ+:kXCc{M6׌̜:SlQ= M55__[sCN+Gհ36w+|ak'N6ngzݖggϮꦙL>d[>,4؍r, ]H  5yNw۞xi})*DF9Uq󗦦%7 ք?ZWx[3*^n垲Ep}݄림쳩cg@v *'wFhm\zB˔yr)'ih1vZֶ.0ޟ%{BY~CyPsO|!cQVITtf˷={ hj u IQZKxV| Fݚ#h3= , A;RU!EE 6,Ki(LЇ-mVNӑ-L0&lo@4 }B= {NCʁ6sV %r5exm[*KX`Dc8jM"=zqUj{jRㄱڎ7.^||h+D c譽W@Pe}{ihd@;FکHIJxd [YbI(z9 rԈ NyT PMe\ <k|EtqIn7mw_Tܘyӿ2sXN7KGNqTc`,|#SLQ$ފqch3ԣ&;]7Ig¨1c#EvO|IǕb_<  ŧq+Ai^<8t0XEnI!ĨN b @ QsunӜ X-zc# F25$CSE IǴ&+9d;pDQ{p`, edDn %]SmE!D@yg;.gRѦJ6B"1blG/G"6l\L9zqY/:Oݔokr3;4u^4.qs2GCPI{DnCF()iDc0v(1^}^dx*Lm*n$iӘ &9b.v`yCo2n}bjx_߂)tﮂ"iq`8p3ލb_wT3;=/ z BxD1 }?{jEY]8Y0IS)1EشNcNO"73UFyt_>@?v|/t^8$d$nXų]ѕw(QZN2L"BB ѪY6P9lGM;=jNa?iևB3z9q $!E)gQ)M9%851\n i)j8! ۊw_>v;GL(Ƞp%)xZO܎REI?e+?e''Y84Þbc =Ĉ)n΀]@AӢ{ +mRٸ7JI-o$|-o?SL)**\dĕCYr׸ [eq: 10![j'in#Ȑ#A5%q.  )5&tE/U Ge[8~?b7/ޒ,'umm q;Z~ǵY8vqͽIY+TNd!X(i7RX qfYGo4I՝1mׯl(>}ΈjS=pȉLojJ ٱZlPaxFF ̄VtO X#{EFƆ31EqMԖZrCiؕAz#;+=-1!(*BA򜲈~nN{a P 51oXeɀQHM&}XF~n25a :I:9Ia& р.H98$4-n8yN%#h4;k JKg\ 51 Kzq\p1^}_|W!CLG0cbEcô'q)_萡W6|39PPaRqit:hj彿/5/~E818oy?ʦzM!sNW_s@S ܔ'7+79[|gg>KGeľ);7}(~1wvFz27Hp{C(J[!=WR .R֡~ƌ7.!s=kgpW1Ͼ6oͳ>Ra݃W5f*\rY3uD$-gbHYFwj˙bg#Fymʡ9T3w훿E);S;w᜻DD/lFdz@Zî}ߎ_{%v?ۭ~ ]~sa, ^FM m]$uѼRt4P;0]l~c䱍324<, G/ԙi.,zh(KQ&[OQwT`Amo U4jUĭ[۸A:ꞩ F|Vn4œFغes~ F;Gݒ41OTwĘr :4SL9%4&R4S(ʚ=e Xjז Fͱ9$'5ԏ]{V`mҝ-7pr-Hݮ^ (dHQє3ܐ*cոEbod)7T>ts,R8O܎/yYMiE$&鑟">{Xh\>*8Ό}STC#@Ifl=Kc9M LŏA9xZ8dp#0 9$HyEp2Pz)9ȘKIئ2ĉSOe~ٜH)6NmIBיT^߼+,Y>چJB81$8P* 3-uB^-F|/{[>3>'u9]u={ГH8ÿ^ Kv(Z BRy=f׮MgDڵچǵ&. YPT \cb1^Z <Y r,@:^/;\iD[nk^yŴb>|0~%m/WVK>_,a"ӌyrYx+ p!a~,9  -5%UM8N )?+x+s}5Ә|hwc8">2`33ྫnpf>Þ'UsdDΎĦ= ߷2zQk8%rD$  i\$Y$Ct}1J v{!k{̅fbcqŪΖ 򱇏SחO̼b [qz[06E{EiQxQ߭)aCN9|6F(H kjTKWSRAP"=`{WL8߿b/ˏd_tO u\0ckWX\1XbOn|=( JC4$&;@<ʹGGtkbL1$8sW“Ju+i >perP]%1W!47{ ÿ>n5=w 3+eGJĄj 2êfbMs9>.Ko*(n:%7}C-ã7^b#qg\dĨw@a; @MNe @. PQ"R4PD)kVv&iR򓬹f@%ۥ348?6Ȯi]܃;:M:4 N0bC:9Yl(PQ\52T=$|1Rb@Ӊ!E9k99X فw;_y`͊B}6楊A*Og0eYYO!ok.Cnﲙ՚G {%2:dfY1I$P*$+0`fw^wĤh2NrL 9;WEZT=oME$[(U>Ík:G^0iQ&+|bѨ p@BBkbAOcUd7>->\x'w>wF ϥ =ŚlH # N!0b -9}9rܡ'eJkv,MNٻ)ێşѴqNw_3I2LOs:$ e쒠&@Akhjy}ıd7׉>O,_-s*[S]MM0g/|oiz^a0mKz+UQcdT5 īE]tz:d5&+M3'N9}i>"qFv%uۉ1n@:̓w?֯Fo78kxc#Aw! |ɹ֙9QԱmPoʠpiAgf,̪ܗ'%hL4DGtX}co:{5K5j33k˧Mh_d.VR$vb$*25䐝E"eIR#TQG1rnTm)&WNp[+1Nalғkd6tŐe~bIi}[W<׽xf>^s6SB$"K6TcCHkDZQ~nU=f=xd ?ҢoU|=F/o_~3{ڻkJGNC ߬ogL,hG }a`qa yhwS2rέü \JU<XPmC5"pYKM e=NB'07estr۶.Yu=yt&^&~:9ѯko[OfՑ!nGfItUC wܳ_xOﶞځxnnWý1:-=^W| nj؎M)$ )Xf-zWL'LWp~bо@e" Ύ6YAc vAy÷2vOr{5o{'ofQp|q7} ]e$ IY7,E! +(WE-'ׇA8`ref!) IXKrxqUtPƻuroדּt9DLCF E.SwWNuҾӕO4'| vfD(Qì>=0+Z MGV@``F1\dqbqH4T>ɟJ=_P*ַN<+\|wM,}N}&*$xс/kݔc[&#r?Fߏ4@`ETFMɳK/E_?/a;d(7Y@E^[6p[܊qlffVe,AEÙ͡N"/Nj< smrs稱A4gsInqc| K?#(ϙ}bD߾P9,o|rJӳeuyVWl+0k\y>em͓au1}=?CNaqdm5#kV?a3VS^ij1ފ( 8@ u/1NI54˭juXw /3Ce+UeAccl.GM4`tf$k| {oo UUNPU鋆1 c.XBx6Q#>ɴBy˻ >m7F]p٢k6?N t_% P(=/cCQ|  c C( "`Z$vegd˨Uv} QsǓY˜sK7U]p7\{-Q⊂9+w_1k:T'orx`lnvymb6]XdÒNK`J fdT{ l0a[ RB|x݉xa:%Y%{rXtSp?R^s/$+YZhF5NkBZM,aqK3n[0vصKaAbVN{D1VK96ispΛǟXtZ:靐%ZXr'~|^A CrMɘ:q/[%uJqM?V"6Y.za0a nULfCNY/w-vN/4?;\r˭ +*4, ϊ&^O(oPMD2#|ZQt+O6 ϰ3b==}9N~B1T'rq p[i71J;@TЅ}~qWm^5Bkا[{u֎ KG1^5|ّt+VrHpiu!**¶4RnV vRh Ʌ\+"=Z0y ڹsAT{}M۟V:뽀/o]&]yIKZPmߡMǢMz[tD h˜4V eU4/5TVH¬ I|m'buơ]u0wl F`c]" +LM1bjix1Hn]\H;Jtl, ^#p#N3̨GGGFڳ2%]lÀb'bfZ!|X_.Md+)dx]3g.\D% A) I9WbQlh9)яߧtKW1{ֹc~N7r+$܅:~#Mtm ibR$rg0&}03{Qܧoӷva쨑c++78pÒ|Q3fZR^[[np=d'=F\<lX VB0#ׅʨ~*)3AdX,Q(9hqjJ|%([g|$?/%s !#C4 4%'QrU9m4Vk'!bv/L'Dc||!6]}BP &9 )LSzGOpH3#>aR-y QWs {"اG:furjr!R-aA.0jR R(OvPǕ\1v(/`pۉƹF{䞒DZ!_%&H$Q4%4W,pfi'`lx"t ]jǫs(GJzdxשbdyC9:&( q{u3Rj7m ;jh. 7~IYGd(HC8 tPd +tK]P$M/$L۩BӁ+VPE18q>N7s& 3*mc ZuPF1A/zBub"! a?q5s n|WimV\.Nth3{=/=ӥ‡qo_۶T٧9ݮW /$s]I@p9 C 1w-=Sg7Neژb1F IYQC̴CgryR℄³'V?~DïYN Ƹ}SGof:םFȩ'L#8e;WГy_~8FwQnCFw 7dY;s^(,i'Cz-Us}> lV#Hқ,Kg݁ynf0J,4[QoUGSƔr0_e )HԵC{ ={ڻ}]Z{\i2%)AG 70';m  ZjnGy-!u~w-|ժq ^c]#疳̉4 F9ʆV=]Wn{Sb[rZ?asٵ/}tL%u|cuyU$Qz.?(BK v:xl.x6c‡7ƾ?ۅcv[&^.D|5ʎh>E||D\k$ 8;b(r[=pkCG4]'QCk߃i%j ANh$&@[mDD'C X(^YzV?P^_8?Ywղ&vy_֒($y!b(1GYwrF|S6z$}f=}Fӷ6%TIXt`@1%KK"cVRq 0gR2S[jXw& n~Cq}ϢCT-}1dQ箋p}& 5,:ȯ!Vm_,{ϛqүMG&@֘ q#J(0 4?@Gx:ոc~Qa~],KT"-%~p2N?#%buޤuG~o㒃}zX ,0V 3~X 0$BLX+63j[bǵiT 9̌fHӄeXj8\#WS[R// lL}{1ij[ bJ,D*Yeā*.lzGހ#ɊvtL>!)}`sg#1^k~2Ƣ)Q;ݜ秵Q<>} $ 'Gya7vDʆ_0aҧwE#J?w`gf-Yxɓ}< eAzCZ0fCG)ʻą8gFbBMbc T1P9%,黁n%&CU͸WPu=qR< [nF f_% |{qJkhfE5tU 7,'m5 ^}N2NsuʸA*︍c<3©Riq'> P2 E!5ԣ81a $?>91 ;ޭ#G0Q7|8 m59-ظzt%y<}duX2P+Jf 6&#ۇu7 ]C5 Fw-ߣOq/Z[3ïfaрR{u3N,J,&T*nM^.ؿT٫ݽ{Z2dg9O7 /#iZKR钕Uc/[bQ֝:Ė/\X^1gN<tە#‡c* ViD* qi%0S԰}5&OɋlOZ8m5E:T"vA`4Lv^+ l)S#IrHA,ϕV)+Ҫ·: jӫmkxϩRHUr*py3ݠILGhT@Ql'j{q pvl6=v 2lœ„ƍic0?O+_bkѽ#sa#ٳ*+1iw+]y]s(0{VȦ1R/4A#9F ȹ0y d-ruF Z0\~2Lǰ&8&c$ͬCzkO4'biNwƦjk/#F(x7ٍ"Hד=#9{C73 tз?R_+Uy( b.Xt@z>~4t :| >}9,$I:ooS'2i#(.DR = HI_F~ᇥzD@S??cJb;l4ߒ=ȷ#?]%x{IyQ Dfr e j9U'Rę:nF>4#DNf<;]Yj8OJ].UɑŔJԊYy_n^V>OwwʷأN%툒5b._&9b]F=b!Z%P{IwdGn|*IYCeX NYbQoꊳo 8'?jTϜ>Ӗ-^v=/٢X?|;fN>Қi'Yɽ$F%%FT4S)M22݄b}xJ)}YvPh [.P?DXYBRůaj䚹-]e!(' KCpabK=q"NҞ$]&? 8BCȖIlh|<=coB`o?w ygOMцރG{?n䕓]`U-x /I{s͸ě븻~ osmlɫsk*gqwD+PTĩP7= ^_Y,IGY g '\P࠽jfԎ0"<{B|1s`=( _M^Y9n8[<|PzǞUYjwP6 aY;-CʨeLY-՚)^$1hglbq9P%l{CvPc.5*{wQn/t?6!~ߎ 񁟕Sz_7 1NbG@v8A4P@11r {q}={ͥ['8>rD,mZV^VWRpyg%r?Mw+lNsiR|psv1U\[RcT;8:$G!;RJKǎ #cĎ9cGmӾUffZ[Yիv\ c}8q"# Z)UPXnu*PvQM7.=M~^VaV'N4۶tmG\/Úq&GiZ׮Ʉ;_ZCjϸm;oZG?SP'>K9t]  s(t.6Nx1&|py"ٴn¹s-޹;7ΟtV6mg.+1#z8aԅIY=m^QYm_xg_9a$SX+IA0T*7sOEFc~߉u!^uUȈN%> }Zc=gQK嚌& B$ uaMDlk Gxqh~㯌AϿ8/O9q<@ʸٓI汻[=q 4#-DrÄ gתxƁM$B) x Po rg$29AI+1>"oZzgNcOt})j߶S?;yH5k6\i?qq gyFvЌ#4mm w{;O:VB*Cgi3gN2kL6) ;־<)^!膫\B qLQM79.>.MV &/9K|9 2!fg8~K*^y]%:"S-5\HfC fq`s]C'!ae׻̖-1sTG[6.eܺ};WVlL1t-R5G^~HfBD-@vO9QrHNRy 31L|fN!75T3&Yr䬠c`̀xX~̼{=c#Ky!z( c^gϘ1zBMx7 p%TpKJ xCZ.p+I$UY}cܲ%vc SE{<,~TC0'{룾{hƓ'><" K"~}v?_b0W>^#V%-)@A1 e83Y-/{%%Rrqkx(96lt8|h_p-pB̛5kNѷ x8ovkW8vlU:?鱶,2ۏBӒWZ%G1-YLN3WDVVNE9b\6=܄A]n.ר*B&ý]Ol"MuK\mٺOymbsL1 3^ M޹|.]Z<<̨PtP Ф&t;:vEgt_a;ˢ_e|'Z!eZ)p 42.V3ܙJHjV藯MvlY8]T G/N*8gs}Ixr#)A8+R:̬R=>@nbE_]7GFKaRo4bӏv0]L'$•zU'Y쬡SB AFyGzZ%%F@kʺwYs aʰDD8flSLY_ݼѵ(ޭuh-3B ]`=4nT?h;T=/7.sـ;%~'}/۩*[b FSzZ!748h9)'N\..MU'&|h} pX=~J%%]X' YbP3Ɣ \!p>$Dn ci4Ǻw@(D}Tz[vfoݡMǝ?+3Bf$i'i.v7c7P[&iFe6+?29:7޼wiH 'K㎴a?Joz w3u[ka! ¬?O`qЯn+`فZ|r| SB qi.fRݵH<ϙ0㔌cqJD2J:YolS]Rc};_ǽz zZǖ9x? 12K '0x@C@{sJze5kDz; 6}W'Uuˬ_gnhw5]K z"ipfcMf ESi3ɤLawڭ8As-)O|ƴX l4I$JI"Fa4qEez SLJ!$)5)5&1&n3bm-Sj?dh777{/Dn*Qs W8Ux+.ovt"dz v5WJy">y@XaZֱw>M~ꍹi/ų91gtx.'ʓt{p{7E`(;T% 1ARkt@CGb7{q~ =4\>.'5 #k^jeT ۹Y:^ e$.k1һH=$W/%u4z&ԽR pO5rwJ1sG͍5f42KNOD9>PXPDg,mvWv\KvϾj|%W%^\:9Ḧˋ;?# !~g>hARI.29@Δ^Rjp? MˍYT"!7S؏W A!)n_9POq''?Sl.\&W'_S5rL7)>ezї߳{ce OKMPvSPdV9OƯ\{* j#7tݼd׎!K7UTo|W}ѥsn@H7B؏X҄k cX"*=`eأG1K:8i'swaVsMC|բ0!2B9*f[%MHNNf}vlڏӛSĉ}$R&?]SžnGݿ QH FnI.[o~o.\4gH1H7;jCżkEو]: k完v=a]z5K|;cP7Fx,Pu)vp} 5qI"ڵ]Hr:9&7X^x~~hrNe⮖Qq阠xnmx!3GxӢ$^{z1|O׳۹^$5|쁄p\sGGqf W[Cc  .O1 -^4};1[=5/M83ԛxQAGJkSjH~!YFf\,[Bt9Q1ƼKڙ-t8Tի[ E Н9dXc (~!{5&O.n8jXCOE<{z\gĞ$j:5dN7rQdUIrMuDQ8w(JY 2 hf5PNB=J;vk-ds35ͥk zyxf=[ܽM-գUcT[`޴/uk. 㹡{R$٤;̝$7BPD7\Ʉ]əV)i)uZG{vj%|h|N}4ǎ{[jDݐբ7C۬aJ-6_i@4f 4Z#CA^j)Ijݬ 0{ OVbu6߱Ĺ6I^PiPfmJQ}FΦ(^?q:ecbv_YT\1Mg`1ILev0n4q1 Է4?MM/dV9"$#~\[QZ80Tw'@;c9p91΃Z}n߼e:.nj8ȪŦ3mn|NFv.~9[jsu,8y+bT"F\(I6RGW&1л_ΐ'I@ʱƥscxo91H65*53{~1鎻^찞B/?`BA6rV\oxki;|]ZZuZQ)Rx@s𸾠6Q]?YǂHJ`#8'9q*v춺>r9[t˕쀌i`A0&Yst2; # b&BHp'D:"AdN_F t74s/F k~"@}CMx/43¨i8Wr!X,KAdf?}<.]H5!{ F_G 6OF۪WMkRKnSedZ)t*=)2dȱ>bP^[~~wK/d)t!4Tc OI ;%jT WprhԂ!}L g9%.@GpyRS\?RV[ɿT|A>YytkNM<`1MigW D'X(HP+r%3=\. "@ ߾m2o"/ X렼_bS˫AygĖ-~D}$ާOCBk;!7 `i_bmdwb2bPhJSԢXw0ħhj5ԊFt,a`8,ʒ.W;#F+vFB!tNYOL?N ^t$鲷@1Og)*.7%?J:{;I0A6 r%* *\ &_w 7] \Wp Z= CUjC4|TtC 4^6HD+U.mbBߚXie 1ǥVHiRY8"zST!ǯ(qcT|sK%6B,NC4N <3Bba:.‰\zdQ9P M !ڜ5U;C;Ω|a?./f'<S/׆h@9Rd?,̖$pVhL3rV=K 4%Wi* v67k>9O0|l`4:#8>.[^cJdf*{Q_Xja@-l'[@wBJX,F >bN!CsLk>Yn||Sߠo~,󰲲A4ҸY׍ZGIAۯC /&o8]\+Ue^!jO^F"GPf3XwN:TQDՈZnti_@r[nJrL‰<&[H.*fzsbfc .{X1ym{oY*'Gٮ4#B޼^bGV<|;Ƽ!Τ+уTIr8pEw¬54I,L%t.$wN}X*0+l>R]&ƿer驭qpH)⸆~5&$b%Ǻ+ch6r0[ ab;}tWst bw%mΰ9/2 -=ȭ-Üxge9[}hWy[]\?{gk+ z] E3p2{4 bh7!$ra:$ Ry9hЎ1ܟhТfhP E?Ι9g|`[6oݗ]Uty}=g+^+ڱ#g(IA=g6UG>+hmPY6o~y f7<R|zL\?w??}G 6yr\eII> .ߧ‘n<}ɥ̪;gQoH]g7X\V~;n=z.}J1nvsϷFϹU2UxR(|? |a?zWfJ5ZyekVmYLap;ΜX3J$j2T_1GQ\ᛰqHueqvԚGc`i P 126ƪw ؜#Gbjp[ˆѯy;5NԵ# H590˼E65f\K*X"όqF|->]A6v,,NK `]|AS'})֨Gu. S 46PDC:K ˂h]~t"}ៅx&lWy)Mۏxl^D[ ElCR!P.l_[wTw=ÓނsoFʻ׷Z>iGNׇk^ וb*$EEUGCd8XIDEEAЕ(J׾}={ עctbY2$"="h蔕U;Sӥ%yx=rK)~pξ{ga"jum-F.gM^:h|*+ǔ(oJ3 xj ߸~j9^~#4n\ =w2Q^pcTeKAO/0~hvM 1D~4o.՝ ]UmOׯun5]ʾED_-XgU4J-_ )>bj1;+=PPT4">'|!ߋb↼-ovUf$e+ְ0kDm]>6;x<`:, G<:"@֢˙(ǓD? 1!# .XzeK̯?wiSFL1q|uQCзOzv'KFmZ(&=FrdnJ)d7+J{/b`RBNk;vl_ReaM%Pб]xٯ1^%7ٓ7{_:|ƌj^IIVV+"[}G](>hzVE$!3WZR ̓*й$qmWHfUvA8jL 摻+Puĝ*)7b;$5W+hZ$ _)*VOW[45Bų}!;vCY/u$~GP[Ī7x8҄}[l7=L?ЯogTyQrv1,Nh)IϤx]D%ꬋ? DSOkQJf"2qd 4jbE4mc)'H7⸏BCp9/&J*Z;85) 9P7M VyehLbӘqpj<Mo%AkӌWI{~5F "xOѸ^7Q8TH3 SZ.@`4}/{f:}Q.Jjx`~C.,{e ?߬eH!,c "&!hG:Y'g _yьۅvFI Q2b|7fAO$% ӏKhHxiq9T!bT/9!z!5~提ITa>. Ux  3[ @<N\~MWa1!ze}WR`zf)| 2xp5=“ WXPJ6TׅK] !TSuR(^4x+-z }םbxG|vNZF_}OyF.x/ 3eysLq0ʧ86 n{HcWE*Q,llk!w5<󚾖O5TjCbEjSV&5-f\0$m"^g{ n{)LՙK^E:f9RymFR^˜)W⩧H.nkE/"9FqoQ^O/>{wn%]u8. =vO}I4|kW=, WA*q0r]t>4AhQjBe  вձx~xL/sW&󸘑!]Cp%[7<3ԀgW8SB,T(FqU';qri,BI~(jb'[T\+9Ouh5h\6g^jŢ%[7d\*oP\JH6S)?ƃσB0%Q5TAgA!ܢ`P &b7sMŋ\=ӝu<==YltqgT,<4tϊn"3)? Uhv!ǪqqAQ)ׇl]qcjN[6W*^Vgrm|}Y'UG~d-*R6(eᴷ/*D $696a~SRǙI0)\Hmfi :<ϣ+* _qJ&Ϻg^ef bfQ)m4?q LZB-ZA@ErWjhl)2̢\9"v&9a=çxH4}.y_E䄘J )Q\倚(g,Bf9mܨ)q6ZA7kЫxٞ4h\~\?O>yuigO8[U{q;'j8f_[gX qmɱvmlxtFMW&$"<(oC aT =**L7 &bWo*9Ҕ}z\%')' a?Oas'c9 \L|o˵:23'-fjNɲ3v:~o-'uϪ=]fE*:v>"K4V&acjtB|J@PSU+zFf9nl%N_M]3ޠOKUR2tqú&zӄҾNJߨ#o}^QV;ҳ{\Ydm|ၛ*Vy.6\< ŷ)/ %BҀju2^lx)d}yy ͛ס= ¡5Qx뾥ڷoJ9lϏW.ʼnwb* f#݆x1벓ei7xH,4]mUD_e28a(5E Tc[2Xx< Z\jSQK+lr^i6XpӡkDlpZ7Q{m=chQ0lG]:XW8jvհ]}3y몡ua9klą%Qx^3=*paxY+]e]*3pOh\b$T| |*`L#β琛?aq2:`4Gg'xFpp W; r<~㑋\=ǰ]y%D[lSm848`pL )QA2R?22M KSh )!Yli&0Bhz\Q@%gx"`B6o8]{ V1D/@ތtڒ ;;Ԡ6A`a0. 拌_>y^ğom׮,^o1ciRvrOC+xjځչ랂o3uH?D@o0@8F+Y*w3ns%fk7 Y3ҙY ?77+3'2/*z!HEߍ~{:h%_={0ؔ?Z3<,R#ؓ"#-,:>귳\q9OsRH6PªzTVtjM۷ߵқ!e8x"J_\7{ WL^Td({꡼L=Ց3WL~׻VӬ;x/VO_wTNx!2}nž!` ͌̈́ɸxc0>x%Ŷяݣ"9gHm!-TVqAB 2%pMoAP !U&w%v=PY0l|<KYsG<<(ex͟1Mi+G8d~?0S~^/pD[~ɧ}Wꟽ &$Ƃz &:e#uzyF 8;5#Ԇ=!ed+ p4R6N&aD!aJ5A!T- 73zztyDx`hKUf5?XC[-О/ﮫٳَ{uv^?:?ۭ۫k?nlikꜟC)uJc>кkYxKCuxD,>dhIYY &Nhb{S9# {vb.(8hXr/&u);T;8eg@!Q9p,{L 3d."8J 'XܝB΃0JHҳ5fUc_1fT١QQ8" f0yEw?=~.{VCKŻY)c[ǀ_U\r__e׋|KL 2Z{=S^fgNAmxoU+ѱiaAUHPcaarbIhC$ y~!w NZ@y5 RMʂ"N6uhwOGSٸ~Gp&vs#tĶSWJ{f՚ꥳgi/zڌ-vD6!܃ARjw$N‘oB@Ã#ŪR*-M1c~oZɉqF2&P#-‡ݶGWTt ?g땐tFNn1@Vvv.lՕWr}Μs3gΜ.4 +UhP`Ç˞v>ξv6Y⦳W{|BD0 e(Am=\YΓȂ:7O+A#URTyɈ[1ryБ`ȷ-[y˲[ >PZ}r m"DEx61y))w$*$e(S҇^i=Nw`<n.&yz #A_Y5bP⛰* O{fٷ7SbWWY]czzPuձU^ Əe>a=3]؃Ґ7whU?JCJCkoA -b~SUGQjWWժ5_ޫwwV[&\% .,AK[2r#Kv٭Dw3{7q$4 .H՗i|y7K5qPe0yha̗ᤅ02(Q=8kFP$r4oo-&q:%Xf&ݝճ2f*:>. L9/L ]܇4|>zE.:A^j d }4S.g(=#^Wje`^vg8*}OJ7HVa{˗{Srtx;W4cxK9D` MCH7}5Q#]$^C.oF-{bv/1ĭHWDx+29(\#krbB\-; MS_O~Y-jʐR]~xf# R+#VgOcՔq~Οy_r,:S:}9 $8 1T5]BU?qHPUL`>^T΢UdE7{ ~說4~Ơ9[T)pR; gހV+Pg+/f^$g-> ; !VrMJemU]MyUbŽ_'|sT٤MF[& ~Lja[6N,Z;gn < ~ mwΘ_~:gtoUVn{ݹۓyi-NBG_ƑjJׄ`mp vfbhu$;{/NɞߞWp . dqK;~S~,6-lYgC>~ =bˣb{d'DY~?져TprwI q}oҺg͌.]w xOډ:DF>m=X;eh)<wFe֟|1萮Lkv/WAuHL! QL藠jprs 4|yBքGi91!1eE9jx`CB/Du,}Vj~p1NF)Ge nthFNhg}`Ps>sxcuuhm>D) onra -~8պwSyuOAU+ڴt.-GֶYeתr=V9A;#cqY,0b,tw;dŢ#۵+aw :?(tfֲ*yC!i;s7E5!|R#TG&x1R3,3ńW`039| ftsgϜ>uQÇ .-),?of2DŽurw3CքY7xdƙyX8 YorAR r gQ"kɈ-f%B]+ܨ?[l#[٬&O׬`O$F$&FE%GC<3PGYOeA'\xSV@*X* ,??!PMUrǏ%&Dx$%n?$.--'طJqҠCO:Fl6?xu&޵zxz.kxhBFHuMgne~^Í? 9z,O҂aEs18<>"߅G?Yiq:˺ GvCYϔp5]/ 2PO^Ά(BUy-]aRN+kPèQ@aaa;[@tX$c j>](=5$iyަ^h^/LD\Q,t.șQb!2|b`z|\|~ݤ]6n$HMv2q6᥽"Fx5~Ϝ&,W>x`1|Eg9'o'e?F`(?ɴeଝﳱ t d~2.Go}GG[`69Ͽr/hn}{+3+ أr &Ϛuq95F!g}ʯ)d$D?Cd…RVCB#M%W*2'u3a8^Ou{B5],jkM9ZM:!X{RWPg!8~x@؃g1{={˨mUb/"֪EUlD]D=Jw4ŽB&DR7O~9o^̓SCW`A1ss50nпzUC Z׬׿uKDǣ#.j#H9N_i =0{1WktV,Z[II#q41Hr70L%!8a?ubJe_b"4Ҩ=~Mo^#|838wTx0[u[Sz|JF2u:4Gtl^$jgT)iߊE_ ddX![@[w?~>v9qC' }3R֎{ؔngx'C"?? .0-WpEj dYM @q|*?1G:efIӫ\|\S]£cڅFC&) x h% 2 ᛏeJ]JeJ39< C-/loDXKehXT4cnZel3WՂkki֩OX`PLCWC$Rahsz'_^E=8q$Kf}>/~F*9*)+Neŧ]0{ߑ$pظ@pԵCC&LhաxpݾBn^~m_Xˡ&xrExk םY4L+#74}pd”NNK& 7ʔff͌9!s`p?@ޟZ2pb?Y]w%%6&%9.6_Ew/^v3-eXhZ+ZZ-oe#aZӖq"boiˊ O:a8~#c#*<<a'QjIIjׂ4BuWN8Z(X[s@7*( ?L%͂p+}^<2\ziSuL/Y!Dq}d(GO0xTfI~~qIA^1 w5 thp_|u޽v-YvtKZ-F&6 .H4n{}p tèFE4:/=/F,ڂU} F9{PfώOsR Bd;j%QH.bycKM[<1YF6cP^%Žۿw_N/'qF~L8B'!:4ˆ򏜺5L@-W}yf.q $d b>yqֶc`n W}{Uһnma4`씘$vW`U9u™׎>&3*u~}D[e90I۵m/sуĻz{wF|SUcCU i rO@X [8#Ov} 4wۮg_J2IbGssg{Qi <ʄOܯliOeOpX1m@kg)Gh%%3w^ZD>wdXMVH)nźK^VyiV1M"Ðz;<]66[[9-d: Ty)kj@6jA@Ƹ[e܀wytekq;]]ɣ 2x>|~E#st^Ǵ̫_[ڍHmƍ^U/x|h渑go}%^Mc&@yFo}4')sbo;k-aej]?y[op-@}ْM.ۊ? M hv]KC+d-&#r-Zs~Q:[ p_3c!._ud)]-,eZ'וxJ3MiiK)fl(Z_0ffu1;-^X`.ڽl&=>7 9ݻhb\:y]|; UfǚQw:9 o.WlY7*_U[s龘3ܧo#ҁYW{5w6¿+ܥDA氶|WE м+zF<& ^}ͥK-N" @$翵vGhUs΅;3w,YFmYcYȲLXzQ_q,Fd8heȲ,㐃N=gfdܢ.qOfj}hߍ{8T06ZLh L8x 80fqֱħp'bc)ܿlIyh> :u$2A1,$  eM'A?[FAdO[ѸɵONgԽ< b_#,3x#iv삾 LgP!n;ꑽ>+i \ɋpx#x?}\ I_ReRkq1n.Ayڎʦ~4S9640X~tl]u-xѽ s~v U=֏.wBҷ̄=y;.W=0D:wLZ,\8ȼC{⣯oUߪRM4_MLj*9&9F\6H*SPs׹b z-|&_ w'o8%};ۚO:a]X B$YHp,3p;H-5GKK58ݹ71 w¬0V|Lw`ιr6`#{#XXj4g!Xs_`6Xt{^FʍDF]ail E-3sp?,G;jiX?Z3骩xV3 Y*9\#YNuPV@NvF8hz jmVlO^Ww5AxWw:f!`}y 4tTÏt@. q,ZWY=p4W7q䇳A64L՗y 7 .TrF*Koop c d!B’#>5a}Ϝ#kc&O`seC[+ 8h jwh*c'Yvsq|f'wڥ02 $Ä.Ѹ]l H]jOfNCoO @VkEGQ@:5t2'$ip]ox^0].sH/@9*exc@Fe}mC֮^͕+qPq`p8OJH1 ԱۦAwhB p~\_;Q9+ׯ >]>3O"БKAc׬()$/t+Y9 fn 5rr { 5 \Z>|z0fQVѿYT%VGRz4laĢ4=<?J-DX2am\rq-? v嚖\]ϟ|A`9'GaΧ6-4B!X8$. " 'BީuW1W?Q8e?p!p´ |$L1`ԁ6ǥ\{ޡ0UeHCW,fzEw5֓o1_8>&tX14DԞrCS(lElkeu۠oOa k5jm=Ԕ `^ +S#}t#ΤB+q&FK'6\ p@;\W;SI^@0gVTk>Wo I8}OּKc˳hPY[d?_$8$p=݆:̈́3+9S Yba<&d85弖rcϊ$)A>A:h5OИ1s_B%I{Uc((Pq~xa1GLAU}T ypѰ*2e((Z7Rլ6»'S̜s BGm40 bX_`5W. r Hs \b=f,%Dށry lSBXxf:`EeBƭY>B~F}p Ե蹔چ1I4 h\(KH~т{ oLR???{@QVOZΤDP j2)oh cH NvPdצ\!ζ I؆(^Ov= Q7[=!%2ɯIAƂm#6 J7 h^'ôR I|S>fQ'C/%qV#V<cbqk>J$|iXw=\ S\?rO1c 7 [s<d4 W5'${5bV:;L̛ն#j*QDz/sZpۛ[v1ZaOȎf)@b&fIiNzk-\̰,h΅#H6 64#,i|};<ЫE|q3c1Lg«W5l. qc5zXƾBk8п^m5 i LB*1g\%0O*kf7tZ?%#LTL3aM6^V/OejwgHΎƒϖW‡op愢lu"͸(7CS/I h9M|dIH$H³qo~2>[>z?w98?kS'NrsW kfw/lssP35 . >lx>q Q0\1y;QJ,qaqŲA[9g?4τkxb&pa]I|t*5w]=ۜ.ay9I k ]x]WvG $c, 0=H T/ LvMtg%Yx7^znzzakkKͣ$J LJV; n% }_er屠8 Mw?G/^nn l~P]69H׮Z(M!&d+rQB#s䤋Oy MJ!EJοF=@Zw we4>\e;6.H$"灁5ka8:]Y8z׭`9R&/˷.ߺeSp(| V[2x;aWZImJbT2i~ţ5.LdVP_h5.5"Zy8x_-okh0l%#ܵs&彵8fZ\j;{1{I2A{vyH"tuW:ܩIB##i6GF=Ac c?SG6f. F2\3(ad@x2SCƞ(ucqjno" sX*߂O"3NۚN2/(,7d^o˖-xޙ8G 㷄08N6{``r K˝ ˟ZۅOnL)( pPF1֏>swbBp杧, N=ܠw4לmng?wP!N򾚦&5Fnr78(Z9B'qgB32lA9DhX"c,[ya tov c+Y#GJo(5"}؈p!$dB/V}1O+|q/8 `<Ъ xO8WKPz/5nP]W7Ǽ\߅0R !+h_P&ϫΣӌ[uP ) ž>TR]N#;Pg ~rQ*mr\]ҙhF 2<B7c9:Nj3ewSvnh$o9#sJN"3Jj]}ofc&g4ysL=a-̿T)Yr;׾#J7w-%DmaMxU:IwW'+~DXt':pNb}p?oYt3 GFdӽ{%Y<ž6Gpz8,zYt,}Hu,sh f4msb۰ 4HiF!IN_Xm9ŹVQ^dn)zYߥz>I^~Ϣ4rI}[Jq$p|&y]]]˺딠{}sfy9wPg :I> Eil49Œ,$Ǵz+azε3 `Q.<#f5]WVv2 ׃&߭i„NWXl"m- 8)8rl1[* a }F2!L8tY*5iq8[ ߪ޽/W#5ܨZn6ōx96~eX҂JG{p umFDZYW*Q+9#>) u%%J$]-؊Hz5|Iud+u/.`q쑛d7݅$bDQFovy4q|qܼΧŗb׆88YGaiY $lx9g2zk]b‘n- f}c5|I8^ll*\)fl\[BHt]I]x\T ./ @m4xgoNLLlآ \_ظ_?Dv ]#TL |xO1XrT9 s2\cfnkPW/7/ -(߃t$="ha'LJb#ӥbI%f_ުm7l>kGaaxcCpq`Q,(joHG`ըA[kNGzJ b]`EqZ6 8t MY5HRH<,2i2דL8QXnۅA!5VQ(4LGN=^cG;W-ZJ#^g l84YM[4tBMg$ \qp2#񺴥 |p?Ao"vj2)V*  ow[=ߑd)4JkkW/ZHDx0YfNHМ[ji$/q4;YJt8833ɍ(7] @?e5(z%OwRCcVp(wSHTUo T@sUywE+9t9jTԙ*$Sn ?ɍbH\p;Aÿ́ĭQ|,>f]f,V hnI5n }FzgA4钱w8bkd~6bcC}Xj |Ϙ kɗ,j\*W6.LoIRgZ84:4Ѧ-R1J\V6Ng\F4EgU[`ȅq&eI`{i2HC_)X_NU|JY_Xs. wBz!MM VfN sdp`Jf6-fP?LJ~x;tRBgqkmoWӷn=HJ.2 gFow黷uV٪M9f헬oбYK6VZߞwAv{>V :i:zG[K@p>{E@WKukǏs_+ .ME3>󑹹`f|26󟌌wwoeH0Yb/Yۡ#Ǭ^YMRݿ#Y]hKivH߽Ԯ'QW_p3'xocc쫆>|w!7UCL=5@64L'-^Z:У.g3x}ǡ+ޮ֒Sַи߷=ZyzSJh߮F6s""g3G|;c/B~ ײdecxtf|3ZV^G;]ywfNoZxs[*}/«k-n}{>9ڗxI:GRߚr%ZiSٻw;b0Y=dj“wTLs+#xf]NDgٕ͚s'{O=~tkhKHpCpO wՃ4$ Πxҷ7@swf]J | owR^x&lwf=-z &ߝ9xkwCwf]}{ w&ws朂; :zgônw&v`d֭.w❇Y u-g{`Gs^$~3=! ݭf(.}E[|8ӫo$E|"{N(T]8kcIOz8wAst/Y1lwN,Ou4<[fwW}n'N6|Gz.%4[ex|=f9Bޯ6 {H_#؃z}h^q[5k%ҵˠIb"O'vǺ<#/OkOZ5N_Eaͻ݅le- GZjx1nd$6g}{> t 4$z0IcF$>QG€5G.=mQ(oˑtw;GC.0W%2rW&)#Sp}#ZQ`oږåqT{hJ+6RAGhz*u &*7ԁpmOѱXJOJ\ @]Z[úeߺ@;a!m'x,x)Eh&ʒ*5/[aҮWkjv]L"!-i@3$>AT @t0h+7Ґl`%qN@\Y'-$Xʊx҇Uq-PxGDerKt\Q;XO4"-o?ʓ~˺Ecޫo!ƞ};=CD":!8q R:{=Ψ/7ee؅]CC~ ~|L'<y~}Se7 YFPyD,IG:5/ F ' WR^ Ys+qMPq6Ÿ7O |j9j5;|Q[! ;LmM{5ò6o9zя)oFr3zyo!DO`56[;V~Nt5tv|S\^Z.a@;N38Zю@C-%>s7EǜF%3<}lCDGxv?˜-/ѮQ͋/Y7ƨlCn|=5G@]!MOz Q|+fBu7LRD$5k9jr5׏8OZ?s?&#lCGpuMD!Sgh ok' HdAԚ;c867m}a;'Nxz~_ kkX2MxH'E`u*Z/HCڬqi#-ьi3Wm# j:L׎\^T ңoۻ!1h[8}_dxgM:JNYi%nQ7IԯxtҤZ+[ӣML{E1!My h_x^h3x#6O!5cF\EOqsM[IۖdJdj>eIx'4f􍏛-,7GjJ Vʈ&@z*U2v誴k#+ß7w8[K0o'x;^*<$nHCGn*K'ܕ HID2l%z"]|_jxv$JQp@Ԇ?꧰2q?1]ܯ2k&aF{jxo<5h%]s\:; @w٩gu=5EۭEѴ>쁿|?􌦹˂'-V?$r!Blr8"Cf2`)7/|pYAssVݯUm I[#9n;kA| 7rPSyE]]e҂Ơȴ࿹?e\)~@}&&7öW.ܺa}wWH*#2J8DE5T 46XFJ6 級xm\XdMXTSw7-mW@?Cqؑ5~5c1?TOOq^ڢRD'cIqtm4<㻪r] :0 H"aHFZZEOb7 {^kl& +P(P=u8"6őm 6=5Ke`7`^j-0i3DqG P|n#i!z/06M%B.HQ8f䳍ģLn(FDy.x:/ tR(e]|F-c}nbc='%sUxkX@tQAJL! '%3ryuJ0bQXyϤ Мz0\o=mA>+q[zLV_|?% nȇ9ydXFD>|!7Q }i93 i9Oa(&̿7(d,Jc;`JD_u5ۥNJ̽_0((%԰2 E~X?$ UVY3 co^po8?z0/ۊȑI:="YuP Y[d}553(8</>nlL|l }X b婕>evmm6篵ra ΏQ-~ ? wʑɭd*ߴqbŲD# }>^(ui/Y4dc4./K.Q[VӨ9_/41탗J_?#8$#buW\S{Kj͙pVkҕŰҸ4^ʸ?bv}[ ʯE^Kq=YetȘtN8q6%qY:į"I{N$ۻ ( IQ ԑ'ox| xRa)֝4p?͎[:F"Y!?Ex%;/12C?;hc`I]?|aͣo­XN}ba.3rm8ڋgՉAΐεlζ:OԤj'*C)[`kCm[1˿? o?>pmMoTaF5]J\4;Әb>>`1#=!Ե8l)nG6o2=o uf&Rl M<`kÌÄc^ idEQ &s655ֵԷhaJMns^I&g`T :aghU^ԧB~Hl. QK-kNks"İ$e#Mp>ɋ1p$_J}wdzsvED ED%`e84mۧEMJtl'&YW6 f*7C%L؃WPtTb8Us^9NGR>91OGfsv!sf@h5v>;Ӽu*A0)楪JAHkɟ>סR:,gF[f[nz}w[%i]LHwM/Ӵ}Ȣ>i֝ݯ+_TWCon}3(A`}FLB8aM*z}:Ʊ5y,ZSOOwp18{A_yoO'i{%i]ԏ};Dy? N478a}z3Ÿn2ߧ6:28U<`t@|,<e.vj숉ޞR[:} uzhݔoiW@>NDt=#5=4O z:,O4Z-D۩ C( yaE{AN< )5{O< µb=O\u珋ll.6Hy-5Jq*-7ZE:Տ4_tC1iLޓX9𽜯wm; ^ѽ.ޞXy$Pwn'-9uw*B_k+  +i:9^*a۫)%@Vu6o&im޵yo.ؒD 2%XQvc>7?׊ҍ%'&Wc'=WΐByP@;b:YzXno_|%X,\~5Fj ,T-Lc89u.S$uWE^w%a|iAd;vY͈P{'OKދ$~ ;E|C=[֮r,IyRB@sRSE7$Eސn[b [~ߡs)7ٌ>䔟 _zo1Ċ,=zY.\]\ނx7:gw]up/\a҂墄%<LWǧQaOH8lvZysn1֡LIU2_W(z\I?ժ&|=ʇ?6~h=##$0C>-3f쁣*w８ OE/& ONw{|ޮ|kXc]C{^@_sJ@+#U.u٥I[鈷jtے l|^!,W[ʯ;1 b{~jOZ_&=mhF jg,x/MWx9 X뤚܋J,:{u%mCo-yW“ gcOgo0bެ&gE߮skk7:߱aޱ3{6BǹwLf>~KMnSkգG`5o;͡>4n"Yp~,b^V1&<:6]v鍡!mgJ+ѓ%̣XqbY,9 4cEACLr;HFtZhW@?G}jeeNT㈱T:t+F(wo4 _.kͪ;NK;koa8T|~h0y0a Ï:RJC 1V&_%hOjKsERP8%\" D:>Jҗ(4s/q ɣ \UM;r`6>N2ݗMdS}J~?wދzX\~\~"E9 Z&h%Q_\LV饦1958ə%Ǔ}8ymzZtAn$M9y!* K:7ߛN`B~@.hi1-G]/qWt_SIKq#3eߗ={\$-/g6 ԑnScIŒ13m٤6GLnc܇ mЁ-L &Q$BЩےf(R-3Ϙ *45v\Қsvc{c)/v =7Oj3)];=9%8 ~+wp]Jxþ{~kJ)c0ڂ{^&/쩁x$W39FN8N8]\M-2_4+,:)>| tg'_QK?[pp5|i~+ܠ`K!pq5Sk-jybF"I]¼OhiWi<\RaphYDd)zg]|N[Y,HpGn})iƟg4<Uܕ(䓛ѫT\@Ȥb)@t&ie?:k~9 ޳kvFZg6ڐ}xYt۞;\b48l2iGUiG3LjKZ]uK ϛO,#':FoqQ|#%cq;ʩ:+T!Ih#(PDH JIȉAww2hHC'{آ{WAn3 I8 }6,> ~L芈vg26 C w&FFF6lKxc^-^sU7%\?N~k&P=4g=BDR49smٳӝ9{g9@WأgK [!dGykQ֡'m>)#>podF^?zl,OaDVrW MU}虨o d?Wҵ?:xK=wJa܊5].}mJw310EaBh,Ŝy+*>j!<7GV(拪 $q ~%p\Rّ4k׏=06o:aC!.Z] ΀smVCsb^Q7Ffk[g| +d vm?AKKp˰>ɉr\wZ|kՖ#m4-Wה)߂J!qxl~EYu?M?usӣij:*í8 xBsG]q`hLāqOV ml`/C,\N %2t>!U{*sW P7+mCR1lj\~`#Jkr6Q%͐ͭmV#'_UzMrmGny+q2ntg?k޲n5~`濽?1G-(Gx?oOs?{113lSPL!^Lj7}.Ytd.VTڡ UrDCo&\Q|wMTWyķue? yyQQ#J86lw|UaWp0 A:$.č姉0ncp~8G'Y} g/jBƏ U&\&k}ϗnpizhOH6P1De"8 @ƥ'E(> G==!,D:iDdN^=O?S?1=~AA},*%+Vu*YUcu!u5kzTuwY9 @9 s2k5k8 [A%3Eb)~yչKNɟh+^p쁟vg>{Wlvp@d56еLȝQҚ$VA+ ݖi%"m`$61_򫾘N'νn,U[}]luaAwkC5VtOHN3 rJSk6\1UY!b׈-e-H b_e{blmzsͷܻzgu=۽ouxoَjh{$="MAAE l@ 'e0rw5䟰j~܇_gf/բlu{g?>m6_PEMq3*h2ԻXQ/ \\;x|ß7!e[U=a'ziz/՛9uy(YBSQ=y׭^bAoQ]M2yAkj6n-s;ۚJܑΤvm 9ʥ=3qҲÉ߿yE|H׸ϟm+hW{1 P\IHZ[&PmN6&B?Oo@kYa#FD < %;$H2hVTYeq~iƣlȤxT`\= $>TECimEFIP3kPcHaǮ^hyAҵɹĢ(>*w_Tkff#/?տx>PKg6w5:cDcxpR\0DRpZGHBs9\HfiyK ݀~tc@k'h q -k78kW ~x$?1;-mӃw\sڗ=37e*Yvhsٳs|@3|&Ņ]%ER.#cuzZwh}x;5FȻ_S/=Ow<ǫ_V/V?#Dp=gᶳg Y]mUJ+gD }E[/BHy7Pvxc`d`|e`#@9rHd`S xc`d`H{Oqix4c/32f{j8cڶm۶m{Տ8|yЬ-;2Q2afyRWrm6MK֛~m)dFKΗ1_|rGK/#25_yߊMq0`y gEkC+{"RB9BBN~!cH] Tו Q3;]SUHU n졟oT_5{JsnUl2;hҩ6٠Ә斓jț̔/vDw7(1,1Mz7mRtӝZQi fNrS(ד&KneK%\'_Rg0AaPs4?VGP § +ɰ}_(s7 t 4G%ET̳6ep|") %˴gi{_M5k+$;atT^I%n[~d8'&gP>d1 r/KZ\e"l /$8O"B\r4NlLo-tm+Z7>j\-G? 2w$+1 #u-P裤EjÌ;W G%dDGSgtxP邏[B\2̗B]\Rd(qn8hG\MI"=a;TTn˴%ajtM&UgVX kUoN{#Ρ_\RR"Mi?#i/)InH雔$,)E.l@Gۥ% z+-ϓ&Q~O$/tbr&9>$.fFA~d2#ˈ5LSs]꽷-R.CHwKE4QM0-X6S sm8Ech49v|%U4e o"?H<20O,f+T73=p`Z3vHp\DfQUHVL1jl6O3L2%l דcr0b2ި|ܢwod_CEG~ rgd':<MX&CD_Fzڿ3R? E/^J=ׯEIMW;C7o"ksqX%=?ax+ߞeOX7FhՃ[n ZIj=y(]3J*ױL[zz.jbS5 eH|0{*yUFk8tiD޹9Wӣ3\grN[5peJwr'^0#~0,S€3PHHӵ9t6%lgpjEkl +(?M>Eľą$)FHzKvS(T;u5=桍W*FQVB)Y,b sfY}z%bfmfe ?{/''Yȩಸky!k~?Q2E>nBVW"\~cBƓ5!yKh~Sy) :A9\yPY:&k2ڀvNkۭ'`aQbih ߖ尕dmnl-}{Koq'YptVRn'x->o_\uP<":YEda&Y'XCF7b4@Jw%-]TO$-IҵtIZZ뺤uiI$I03{ol<03̬?-I}XO7k}7Hpl@9@ RkؠG<>҆C֡8?/sWADGG8#u$(L2B"2GFQX{{:6^6:nhZ rO|(&l1[,&3&+&&f (LN5N) )K%5HiɴcΔϴ΀3,IFe2T>[0}g 3EΕ5|SѪP+y|<W~RҕJ@+?J*YUjSTŲŖEբWMQnPK՞%RP4 MF -3%`5XvbPZ@ߵ<-C[ӶjZ֨ukImJrbZ(S\ `>,1 p HR.ҁ%bDpDu:Z[צ:L8ft@.TQ3YZ^Q+ u` קY= CPch1|5iliU\ӌcQmč5gM5}6M &5}WwIsff[2ڨސm,92 X\Ϳ6K79MfZ`e[5b˴1mv̆-kk˱flm#ۤ=β7څv=S`9r.kW}w;۝3װ\E.˷k_q8̃]q7yq<'<D1hMV3{ !wlCH|& DNXuK+9}O;lQŒ0Od'x!j%+ۖL5nuT3>Z.7f]I3T+Sf]eq)mۿ6T( pJm)48B98Q:=aQ(f!G#{ X8Z R\ +vVeF6^>Huau㴪u4S˰p^~wIcAu6~Vޑ1ep+x)r5ɒ59QL!E4_%7 +2+3;z`9?XjH3f$viw^cڡKҜF$LJSO8g޳'?WFZe*ĹTj(cŝA \y%ZI`54[p*=G!oZL8+~{]B[FqxlCby?ԶmǨmjwծkԶm dFhfN$W IRJ.C,rʓ@"J*SB*jԪSA.ꦻzꥷ>꧿d!fFe1g &d)ffe9gZd%ZfVZe5Zg 6䲝vyov;쀳nb$&9co${sniբ%Gso\=O##-v'2\Ȋȉ{/;Ͻ((((ʨꨉڨhF;`-m۶.MD%$ed#H<9,m۶=k?~WPTRVQUS70426153wptrvqus2Lb@.׶m۶m_ Qd)RI!Sl9rWPb%J)WRj5jթנQf-ZiסSn=z#? EqD(hQO DF4GuDAC5fD4iʴ5Ƿ؉x?#%eּ,[jͺ l۱kϾ;q̹ \ x<(zm۶]dn1CCs(18M0$M140,1<-"-2˭*:m&m6.>p+&q#0ɔL < 17|r3 +7/G302P ,lgVN.{2 ;|}5&fV6vN.n^>~B`dbfaec7h? )8mbX|%Ya R)V*3+RmU\ ]h)s5Dh|*}Y8YO24'67YFPɖvJ×4(4GOBoLeFь09>QX=o >VȊ(ܾqT2Wg}` c8NS Lm,ӹJ͒Z@\W5pZ^UF' B+uVlmj=CmID>X9o\l})kc4\%x,] aN4Jvj3ER?GI4AȟpYpE9nB3FF2}S1jLd_0oU  i6#b$Z^aYe'/Mu^" u%$<\GAu7Jv/3(ʢt6Qd Eci=94E%c DdS(ydPRX?ޤw|i *yz`qfwE3oa9b2A\ O}'O\,OjJ֠Qh"˴XƲ[9b}c<9bVEcV,؎#-bW\y *,,llU[`e&TEݯ!x݈NC*Vb- k&Gzycdc}J&!YrjűX0o'[o+@vݤʹ3>Bm0nMۤ tTLP?ĀygQI3wJnz_N/Ӏ64Үn x.7w<:6_4W%nҥLfw񺕘7%Uc Wkǚr;"SSK5҇Tth#U.pp[\boR8c|/dP"j3hb=˪P:"MY>$%E3QwL/IDo>E.;'q@@Mo_qH#&t.K$o.K\_NAI=qexp$?YԮK^{ZK/2J~rj9岼2B|pG6ѵ;F%(@7-V':(,ihߵk<x+021MݝeaMI 11wL|cc湎̇/ +?6vN.ṅ/ +?6vN.ṅ/ +?6vN.ṅ/ +?6vN.nȇ/ +?!w]i:3 u):y8߼ƶy_m\|YlףB^IIWmxp"(b##c_Nd . 6*(xo DzFdBBWh& I]6q3ima"@"rk&vl.U;#68tDyj 7v0oһX+python3-saml-1.16.0/docs/saml2/_static/css/fonts/Roboto-Slab-Bold.woff2000066400000000000000000002033601451074743100254320ustar00rootroot00000000000000wOF2x@4t`j8  D :6$n F [b 7Sܜαmϑ4a'w$#w|@CVUA3"q() AZ}})Q@L0LpTS5f7Ӓw.8a(%<15:JQæ(f[G}ݾ^w> OR?N5b=l C"NWЗ8WޏZ, HE1b!7hZǞkT j5TZH>Esw1]f{.d49<+`oUjUcZ~^OW&|iw5d\qE~[23K.\a3ԩSaΐXD/#Zߩ2BYvnGL?C-'qX-Jt^nyηP%N '|cm`?DYERR(zQ,`^ Ya#3ie#)i etu1bS׬Bjp׀>䶂gzޞ⸹,EzD%}1yJȇd|{3RT _|QdYP<.̭[1`k5BZm0"E$/ZrMHꑲ07h}Vd5ՃE"VłƀQ%J` &33ϼh/ڿ󟪏>ndh#'RJٔPQA:A"&BEu=A  #K&&J_0g˚e˚aZOʊ1”z5pFSO߄Z'6K͆#?14dwWӬ*TRL$X$ܶ@;$ >@av=!k"C|tzJIIDSv_gZea3e,&SA\9o ~ZA=دj&X;k6D??UL(RdI~AJ$ E'|;s߽Jv.69`'6I߮1a53SI򆀪Ade w&C8̆C<}jk]&!&@ fo֩SG[.ؼtS̾"T&Ihv-{U>龇$H!R)[I=j&!bb[ "A~ߛ-[Jڿ@1'h@4)f/tڙ0~w:8bHh!bm.FCZƲT4 ᩄw;eB*!R|1MR]˫BǃbSlD{Om< fBKE=#ñJqC궨;CdO!.gnb=*ح,s5MivfR :t$(:/Td@ E4uq,cnG*TQc0%0^;O <`8@|ҫju3TcaR O5m9 DTN:;*\PH!@:ѬNs墍D{~2NZC l 8M,񻯁f4 ?Ny` qk5%PNP(\Fo`6 ӈbp`.~YfLǫmEk%JRZ}ymZ,CƋC~],rQ}!c?g;ТksR IHv@j}٪Ǎ{_W`@J&-* aA%ٛLָ|i]Kmc̤kyznM8h<&%3{@қdt;/nJIA^:8POz  H@OzˡM;>6CިypL/ JiYw/?NYTmq\9|hBQ!u 3 _ﶽEFhK9 ;R*3dNqiRkI ZXJR5"KYU,={>())8ib&k:Ʃ+Z#ڹ kM)~!%.2`:ʴbFo ͷt{pO4Im!MTPAb>8zcVI벭ǫfmtT?"&2TUH}$7:f.Z=ҵv+#Xh4 ON艂{\9UѼ: ֨ d&YgFIt?Z`2Dlؒw+Q.7-i+SI xs%F%ƪ }a{L:Zq5alEn1"; ؕ@*cwbH$̶܎Q#=~LJ_4j/ 8uSR''Q>j/rD<(?](BP5jP 5T\J+Vj -UUjUWjQSM:[]umm6ZO=T-jɮSi5L'kokZﺖ[VXV,& @T΋W٣0=4Yn,+[= 15%y|mT5xSA>=d_0PJ-[ ǖw2nZݜx5_V#Qk_:ЁwC\N' Sn_3BJr3J)eΌңC3ku$nPƻ̍ 9lj5f]XK8 1LvF tʐ؉}Y $O' *!, M%Ef  Cɓ "HP2DP.P2:dA$f,rIE8g !$˟43 0?$pJŹs{H!_}'AsqdK1 ܒj#yXprϊv?_é޺.«^W^]`} 00yot̔sjr-Krr%LiPr<_/jK;2 ˪m $aVҝfiq!_WTu#:سqG%w^Q̃QI⫞nY%l@еMsRqji ;91ϵ 0\L cOSP_UY3Z``&}40ѐ&ʙzY4idW`'}<#{`jZme->9^|;׽7F[Ht`'7ٝ= IkZ`Zr)w3YK9+++7XL 5+7)deNcᡌG8E Y.&Zv/s`˫dMgjL@e%qf9z8dQ2mb KWWp+d= X-eH.A ñA[tOol#w.Z՝J69- SSO߻;2JEi L6H Ǩ1$ 0ˤxӼ6O r _EbtL ^eef sED ^*Sջ&hc!p RDP!C 'p !{QQ=Qd ;EC0Fv1Gџ<@.ꢦe`ڵq8cgi\7<S~YeWًt A` l"ıwȍ"ZDBČ98xpٕ?" f݆&2&$ɆőG@DjdE)SAJzPpMZM[NSݣzO3 -{(`PNJBC ź> AjÎMZmjU-x7J0@KJRJy@BxCvA<"F֧~A1T- q5ZJ_e iyd4gQ_;)H+QL TQN4k:n= 22qcƪA:4jҬE6:t/zӏ;ƨq6\ !xxCZnlVu3(6o+tJcO;q(D FkXo =w6[@ 2;0Wdb6gbNP?k,g#[3i{1x^@ S-vy:+hK1U4)dI,U̒]e GS˙0c#IQ 5nC{{%m㝧7DBޢf5=BNhn:e[ޭLݚΊ̷Jh7+_Uo½C*kԬU;ҧ,Nu筴gm~]u[Qu$ HK  N VԢ aUP1hc9N9< ܲi F*7j\Iq۰Q&M531u^:3 eX-Hp :%Fc͎ss1/W9]FixH~Ҏ~>7[u 7^|Tؖ?U$*hQD>CL ѓoR2dĘ SfYdٛu *hQD>C3" Yi7躡uZnlL'u7aNM]>5lù.|**F w+uC=Qnb[wAs&m"h*\BQ}=DY)e@EM˴-L83dno,ٵTL;MKږ 6iQ[.+/Ab-GnoeR $4 ,6wԸIMZMm%2 2xj DcQlKx0=48S8G>Cm 5nҴ3BYȧڠpe4X>4 .!PsMZM[:IRR&Clђb;87ʕGNװ$EZTkبq͆eHfu]ՅiـK!)p[s4 lAK7v`CEA:TQoڀP].j(bf >vP6A$C`]4gfI $=S&)I=74m4 .!W6eաŊ/a/6ЍdR!c]^r83\t<)uz_l0l'hiʵ\Fdٽ#dDn#Ӿ:reO|\w#UdlDA1Z F@ ӘI3&gE%UG4Wgh?MbM8o-Hp 9#nTYFk{5;pg'MJK!ƖK?؆r|59A\U"5JFH7S֞n f Zܺ9˖x:. ؎{7‹0n$4u/EYˠ>d-r;H!T9.uS?В1V,M,ۂ3bu*Kxa b-1^B8ZNcu&Ocdy%]jEF,ЈPvlPɠP3xf>AX( |: rF5AR wfP&' f݆&A.FK33aƎ}I0ZG܂r!qğ jaW=1f0$b)l: M8E"ɘ$+tJcO)orժרYvtěx+PV>:ƕ՟Ë TC?@Ɣi2F2CYx1ֽdf$S{5;p҈ 8%V&\u$#5پ6>Ỳ? BIo)iASb8i$_'-dw>ΞrpWġk9r$3C>N[IR%E*dCcH*0WۿT?@ hq%Hl`nt2[m-O3Բ5М`P)BB G]6ppra0njSc掾Z(8ΔK-)I@ S*@ 7R*jXS'%6 -<=>^2@3k' ctr1'rƹߩImSA&ZjӮCs56n=z Q&MmBA6hV}eŮG@hͺy41nF_kQE` 3թPNhrH]kr4+tJcO)_23,\*œe`]v:-t,OJgf .;YF3݌GB8PnPSgsڿ+=͑y[M6u%{( h A0QNcЫt^t2v3^©83Ւ! fX$h*I<'ɮcp3ߕ.Mǟ!P vP L5u0B-͢Pn_!vAL8)}\2M#6ępj/ Ř`<4B/:I0I/YH%UG6h`)Ue؂JpĜ+h?lㅀ,Z"HSdCE?$"Cr0     rAT}u,lAKHͅ+<Ƽ /8%8-;#/tTQ,.*ڑ(iYdB87 ]V'_(7[^TfРI6_}Z'!wmp9 q~JO~"lXHoֺXq"D 3%HFO|g )P0p*P0p9f632l^f3^> ;A`~ZGflVe;~B?<3BrOo3rS+۱INPɄyx}q(=pi @ZR.j8$*SU8(HXT ,FӴu8S8GՃѻm˞@fƉ~rMoĚg%I3LQŻKyAThp_8p[Y %BP(  C-(صdT96"Z}+ۀ@  `09_Q;?^ G U×vjkGd"b'yiq"7|Fmeocmz*y59ȞYZƐMO_u>}wKk˶pCBfڽ~x;UBg6R3L&W||G_MŊW_/Sֆ';WDAJ&/{lTM)o8r"‘J_FLMYƯm5۝JrVqZh Yb* I^Կ z-.rv5;}'?>-J zS Ʈ4U,g~%#7'@L!ռw#1s^.s+|.TFL=IO+YUT^W}{?f~^Z+dOz '`6Y~;% ,bK \JߝɌ,TSjW2قF hc=YMb`MtA 'mI#'({@3$L"m2SX˜k:Y6l!G8)\pGċh|DRn0>)H];A}oQPǩblzNK}nOObjbA&@.y@J> 3UHFrc;rd^UV(6$)x q eZ=[ 4Ƃ'ْ5i&͢5C@(eRa&T0Ԅ S5\MlJ[VBRe"'CDDDDTCІf$UJԮuH{ SB0A~5KI}ʢ]irjBneȫU+˽ZrˆyŵALbfX6 E,[T|I p@ ܆5:Yo#cl#B fvf{ |RaG*{G`#}LI*dBxS pH1s Ph\\X\8Tܥy7C1N( AITMfAT6&;I E-:熚ZZ[hVX6hFMcqŔnms;9n7}-rkCBP`B=B/р0a4"%d\71x A&dR㖴nTIR&EP:vaOC/!I t$MdHɞ([qYc*}eBueVlT7 dN8}" 8,}!6༂0p~LM4)dLg݇ meA+$zp^~V`ypCR6 2p&I('ςp$ʒ x^8ܪ v88^>-Co=#@1qՈj|jJyE Kށ._hsksFX_n45-`mdLQ,MF " +߭ÆM(AC u |@`JV &;/ߣ 2j"|(2qBGtM'D<%tfHE v/RsW֫!^חnۺJ >}`j5!]|4G0W g2@2fi22~L6&~.'RB@:IkᲷ< @O!ҝ? d&;m./% #^7> o02d40j`*ZU*j L&[#TC{*5Ka!Lvd *'U^'=-Aeapt` wS:iOjˁZQP|uoShD3{♓ LD"Tf9ܘͱiY-I°0&5Y-ieKvݺ ۫{c[gGWpAzқsF Ng!`(Ɓ)`7<+$@)ȖVIB 1 '3u?~ `/Л*ܻr_i7m88II.)%bjY*1zwCr u=Րj,cnW̳͵@;O?>/8^v9W; gW!> 9rV 9 '@vqq=w@~dA*u6{^۷N||Bsff ]Q􋈑?~5m5&<-݄GiPGHzH}}# ;ϋ!ܢ/;+/Ԓ_=w ;_A_mMsW[f-s\"pr\c+S1Aq"Dݤ[I!YȕbGRN$q$;-=#sefaec6]ZnPj5ppruygy[ҵezzJVyE*G#AyQ0IP*E{.ǂ_-K*R٬|iluJUTXVAuqj_#Hp K@XPF3IMaIՌ456Ut[Q5JY3b}H-h9uTKLO,zoT#NYv<O o5;{/2 ;B0 f_Gk-r׍vϿ vfTD  ]TZ[u_bob@;ψ˙4=rQ#^ I_k䛽I \ \Ppxbi)TT^7u H(ȣQH2tԨӰ&-`Mo^=*&L1˹~t`8\ aH !+ǝ?A*W.]7˸\bn펿h&Eh i]:s`%KJM?ص$\|DZo-V׏>Z/m"5*נ /DIx^?m֢jݵps֎D3–{衛+X$g̅jVѤ:H l'a>I i$ : *-(^ _8®bpgI8rV6`!BZqWs]vL%~[l[h;Έ]ۛu8?x/t`x( Hp5݄!߸\((ې;GH0х\*ieC],Y8TLT`'XUfN/-V@JZML?H8+#!].b?a_|:^r !!B=a'|=[*?IZOi9T$άsXT!xt[$+fhK֩}"9AEJjITs¤&ZcQ- H7qևmݴ?-4WbՃT"vآHC $P!9k5ROR=uSΰ"/L<)Ż͂G3 =;X:Vddє- $ZfWc.ID1fF}[12>*,-beuhf4*̆r!*zqo) b5_u[8wS픵tLӄٓKIF}#d؈dC2mDC2a!Y6"`!Yl{HxpC"!Cr؈#/; ̄9dQ%&yɭȻy_#rcC|˓uy.9>@>ϛVq W"{{r#O&Z= a{NP%_eZTCB\xʒK+*1a6"REG`bo "/gxАVt;3Qv HȧQ\!8nz{tK"A\Y%p, cRh[Yt}h)"BouL] ]JaVPZW%qK1E6I+6ţDcjr7.z;T",tn;WuD {J)  ZD*)8$Ue۶ <: 0Ofn ̌B)`H0t~Ӕh+a­{'_+d\IDkTHuꫡ"%:[,/Y.A|Yd6^b[;Zht<\[FjO v2zDRHd -tZho[bǠ(Bhy׍MM#}iVRI=tmHϲ‚i <{I ө91gg72FfQu^K R٨< \q7}xm̼J*VgI8ّfV)xw I&;}FNTǣu{jldOF5k[lQN8 J#'qχ %-[K,BLG2B)5^9;&1#D)!"@!;`s }B^/߰>JBRAĚ0ƷuIYɎht^vqv_s̔B^/9{ޏNv%^TWlpJ6ꦑZA %j[#cNȳ3t)g4 \BK9AUgm"d>]ю^^ ף;{3$z=aOު%s # -XTӗ?@n>+_zIaX=;cz"5}"CrsPj/ JObQ!p ! 7 I7g8._R'dٛ$` B*hzcyeBuSfkZR~_{[r<*sE =4>W _c1 )xk!Gq^ܹYpۤWK%AwBA"OtrQ=`D,-f0 6(3VBۤ-V{;oJJ1:ayKs TZZ=@Z hV-9l+9i> B@7 4ja@HN^YpK¶Q("AQF&O^=>D[ ymqnwЪgЖFjbiWYzh%蕡SΠf#{łx?KXԭڳF{Ř И-FO8N!oQ5%QOȫL}2OaF^'i^Q'hԏRYCǛ 9z;G8&BB!V#0P@N4x \X:Mى$ D#h "bDBy-Y[p4@4Av/ SA?BFOȏé\OjtC<&aK_C|@& $`(ciy* US(fO-yz&vJpW^UL޶0첔-5K )XGSvEYu^U>'uĭcpY=41dGL*>#Za)}O,MGQ+3 @xts2?-#ńnjDr[M\!єiSEЪ]sK@;0nX'++ !$viNP_]|ٮ^ԅ 9) RKyquA :b!qb^EG͞@7>>{[/ŗM,=p𭠢胹 t4G0Ƒ\*G͆TGj̒/@aks4nMGǛ0Si~CZNFiꅵ6UR~[=xp@ Z/ue(B١ 9!S e ]z]%}1.7BBFcTjFخ3i}5@ luȶ{!:v&@4.5_@ށ|,]M/8sZZvEX"tLXyy΂\n* I_/*D$O rxZYew?୏shxEÙ+Yg N2hm譌]R{ȁ܊ eZ6=%ڬ. |+)Js1lPْ2CAy-Pߋ9(}qy9:x+)%!QI Jt#3 NS;jB>P5TV<$׳DMC D'N#02CTiqwdzy^S`pag&ȑ+ʢ2go2_338srMg\m!]h:]y8{9Ѝ-#s)bOJr!!Vf \Ǚ{l.$%$d5j5YK'{j">1xhOd on{-]5B.j } v/E[Q j۪xWO*.j)VbOǎ:o֠YM~:&|َ A-۪*ƨt'PE2PfCdc$c@ o³x`C&Us̙) Wo_4Y|5̎,̙PK+ٹU.B!j2r䦎aZoE^<#g }I?Nr /J<{: Db$[wuYGA )oIZU5lQ&*rc,tcs2ZTX/-8‹s7 y1{1'5RW %#CB\~lQg[j_Rxr-Nm?nug[/THGSzrk\DzGhJX='x AoׂH1ْ#{,g?tH`SCCN#r,XI0,lc"nZzڔUK67jE['NCs'pB?e2Y+l B)`iOɞ`VZ $DM![rH wc0'v̱ '$H:rN:fD]4ס"]sxx"oYj@Fɕ\|@SS9!.'Mszn'+oxW…1GqŽW`V0&_iy $)א_q_ewZ2^s*S) U/zz=yB|YIP88HŻ.um%LrgTf_MO TW6I[Ԏ.zݜx jȉIczlf\rʃmn@2H[(Ws)\-Vrc.ϙjW6{jjZ T'd[!4Ǽ]q3vd`A쐵\0cahn:DT,7-}'8Ÿ S:һ"*2kAr<B| GxfLSBRƮcVSj\U5YkN-/_RiʪfdXR|N>36l%]& S&VJKx>F~T5< q\+|;J^aS>!yE>e{NW0^x>ণBmx52CjÄJkl/M;o2V>cEKP ZQap,E 6Ԩ?UIZG'dkgVzpT.W.e5$a)fi7\s*^eզ]>!BVhGi)%By L<42ӉxA u} &ϡrLA픃5Ik:Q޼tɺͻ4#q3-,c4==:Puʻ]o5uoL@{_3z0>>@]+Vé(+}K<.c8\f^#|`"6լeYG5y>h]v "gfY^Š}\'Ǹmyo퉲9_qR~!nqhۮ'~W5q/^wpemf )59KETx ,^e֭W_KO%XSЖEGt͸ђ<(++¸尶fPyA"IWOK?PoKH- N-*1)W S}ey.go@滼KOX@vfFʯ7'1PD-E|12 ?''Hv;R,o 97,0vUpQ:aJUBX 9]J9RT2\-Sʃe]]PW˪vCS*\IFj_ђ3a_f$2p.޶jCW3zSě}ǜI- BQHWrJZ;1TvaLpySOQ7G9f0,ǂEYuw wit`ɽ]Z=tG> FօXoVGXL>u6V+\1Kq;iy[Mpnt[P&>X2ڴ-/)ƯecrgJ>k'@UIeGR2t.cq 4c@LMH~qXX$ceut1,Ӕ_k9̦')g0k/hkAj*weE\U+AmSAeb}^žjnoWY0O dgZ;_UQ;Z7&|`i]Y  /9)ۡ~xBfq]nSq#d+:˛M7 bw%}ɹ틱S0nK*wYז-Y+ ~a`rsj 2P=d&;|Yֺ7ԋ@Pfw8Zw[ctuJ'DP XՇ {gHyPS <E௼<x̤ @I^ o1<Ƕl@dVY&cHީU]WxQW1)rNgom*lN= pެ u9-L1&ta76^nKxQŶo-Wjz~YT~d!=TgoYo/vv20 054':nnTڝ{9K]X z }? r`lfg0P)<ꢷl0b)o8 /_2AL ADXgU uEsb$z`n%ƭ ^ksڋ $bP \ J]$pA qSLEɍ9Gй)!3;G̿[NJ?,ͷ t>?5$޿Ƃ;K{$o Drmhj$Z_U'bZ-|G[ê OIZ ;>}\d9H(vtEfT!܄f.1ZyӶJEuq*JSR 2 s ,'8$B*|KeQ><ZSECaKzBhV3%~TzgD` N(6O —V|$x!&=?+Eo{tCrPt| ^Â>|%2"_oF7ý"Pl'W:c"r&jB?M r';]^̆4Η%kd2̕_]ڸu/ B@8)yxsbG-A ;lԋC+r=A P'wgxH)@O\uZVO-bjjkśr g2=Mda@-%A`SmeŠq<~S4"dQcu?D﷽;\QKVA.Cpb,Lbe5"ž۟214:Pe*W|eѡoWASS 'HL2UMG<ld},\݃!4|WxoEPŌI!dWd.F`IbQfJe[ێ2DZ|-Bz71Wت«FD/֔^<ї+lVfMU-iPBQZ;:@'3n e92/ 53Pkj0xPmԮZea;l0Tk]K(vܸN8ąc{t%h (em@/zl-AY|kgџݨi[|4pT5 ^qNErX?&_qiK]#tJ3)T#!jjgYҴلWY(};+r^rs$jI]cht5a%tаa_9QMGI>*)W5' r ev }׆0VK >B7b?:&QGaޏ ax$){r=~f3t-Bo7~j[j#뭖5/ȏN( BwD1tz+4*}w˟7VF%(*HXt#慛[5y-=-;V*hahZ2KDnͺ]}[]!a5`s櫈mrcEc[S":Qº k3, iV:\IJ^ÅC@<ay_d)ܖX 4;&~ 0s@S#M':&m[M! ̩ loL#nZ#L57WC‹ Z}CJ zKۈmjzq_嘤] ϽP*?qU)1s%0#e9uWL<^TȟI"#:+vYY ,J˽xQ?X.@;Сjr|mV1V"JY+6/ڞ;f-3fA6}༻K;4*`F/3tF G6zF q8ő:99dņM+>mRֽx } K!E bǵy0܍:e"ɜWqAnzMد,: zY'2 򏤾8+v}ẓkmTz8%Izcud/ClPB#EKpk<8}vyK_# 7bBh`Ch͝|AX_YBi˦Ї\k+ MAg0$L2#u/ ^.-6-[5^1s2(ZmVw[-dLTt- MVEJ$2ZXgYP7'y4ԷG _tw7QNa'9$*e"mo:o"7fDIԓ x#2V9 Xk0(ǀY;E2UuXR6]M&hJtI"Zq6RPc5/IdΕ}XnսĢp%&Zl&d2WFA@W*0L(e߿;q=kN旱N2 6!7l6x,A|F% sSF{V /9Q##A//qs˛eB)xDB϶5u]6Nfa3f'N 6K<5U9?QP$)Ҥ@E>frXOOO]m^yeLh{uQRɗHE]C # jǢ,JϦrP@ͩ2XڜtPzYe1+| jSIgC>J5@Q菼3^|=^dש򓧫rzk'.n*~,.΂{% `x=T*H6fkQB\҉nn ik K؂!rFT%mz1LP=w:{JGn_imJ[B-%]z7,|">?e?rPKDlvRQ^iv޳COu1k{$B ]-K^_fX4; B#vlಡ, BIwXУ߀*Ÿ)ea76FOooyzc71H >gڤLĢڇѯL 2rwvJ+ĪRi¶SLڄuI^*6"cןݨ^^ww^n@?K?k*sxC3TZ|Uol-MmCW99 x1s꓇4؟; Th龍`xN˘tUNq^[/"oCeᘠ BW*/68sDG׻']SZce"crn/qvzcz?"B|y ޓ,H,Ht@G}.fJ(L\pN HPga`!ꞴocHz<84|GS_XLuR#hQ>oh'Z9W~M:6.%ܸ»z2 9ԉtGFR"SݗY^t ~#i}G+aYcm;c: \ &c^|d0啋("L6- U±?aRN=s[K'I2#(~ҵ-JƔ,GV1n+:Cke+"*DKI:OԥsjH)-2k]腥Ջ~ >97/)5:Θ˱1'w%1SPF"C>0+6ں̑' B#(0 TZ '(i]ȥݛu[mvDޞ{a5_iIL%m0&ݰV.v_Rn(Y1a(_ڰy@Cwg39;H0GM }f~;ֺ+<|蓑L"P{eD-Pt72D8@@ޟn^[_=0C-'ˬ7nFDQg&I5t~zJocX?.V%PTSsHFmTӛgHؚe5DD_C)5 ^~!l}ޱt~=n.\R#8{(XWeu{Ն)ޓ[ 桝DdiTh~,PQs_C(0p{pnldy5u0y,^ltZL;Qd[ J+e`:xH oKe}e~ëlưyY[;)hxÍunec3|?ZrU5K$1`c[T+N%9þuPLA8G,B*RHĔߖCPCÈH:GCR ${+Y~۟VVõ{:҂H%f6FCQp>˪Ξ,cmgO2 2[QGX8 5Y.6- r2o;bS{\?`(y okS4ϴȚas :0]'u`VHkŸ] sƸĊKZ1Fan'6gW/oMxr*(~ҋt]z3D0Ir}¢[3}xVHG3 x3oƶ/7]J1V(~b``éܬ2Btm%kbW7ԇ}Q%dg=SBK $<?ϣmȇ3iߋ}u xǨ|tz ݔ檈{R($rk L\Ue=\Ӻm$9䙙T)mq] ArAМBhX/P(VognAǂ3A|;UUgZUɆ tQ"J*\#=t5Na!X't~|XKv܇5 i0ꉟn܎yx܆42~R Z7J,0u~0Ń"MhΡ?WzTMjgmZ$)h tfb4UT>+d]H;۠TO@HEdŁ IW&wOB}XP&iʃsV;wt8.Z3A%@ y 1q_apW~H?]%(qk8.q1k{2Cj :X=÷(ܟЅPzKa G׹J.̋U(eZZgEb,ʞ߼ e_F%K=EB]J~().-2'ucdŝŖ5q=nuG!1rvvʡS俫sYKf0s@R yVjmc@¥Ó},U,;Tլ)j6buGl …O4`S@g46t4iXӡN,#T/OT2v$ gIE]EaIm-M^Q鬱T5KnE)^F9}ވ]ub٭qvߩipb -ئ^XV{-? \OUUQ 8'pޛuu/ rmZECsE)M)'O+Wvf~ Q=龡4iϱ~aн|Aodo^, M\]Wފ C`cd;ŶlҒOwDQ\AnP5KSdVsY቞?_] h%<. v=IH眗/y)kհ>nȈV,4\dٟҋoMK`.޾=uClCͣWXz*꾹͑W*F<5+;ٗD!w>Oe5B++.~vz|cJl$Qy1-\jluSȿyv1TN`o*Z@wz`>=QţQ[;~~,{tB1\ YJс >ܝL8Ye(+=)bCǼ:mT8JD5^= ?m&)ޱflKBʋxȪ "ɗq{wh^9<#f؝S h57Ϩ7B\iW^# ^, Xܪ Ŷ05uY+XVJZo׳{aUjrDw.w2e6o"ZsTZւyo$RsEs' 26z"a\3 {fff>`//n̂ȸ\%fϢE:ηePGՂ~4k7io? d+x#^uE|"[@,싡(#.^wt=]=:вWx3&5G^zflUv_Vh9n5Tʐ]Ͱ:پL'~R:uϮ¥s:v2XJ,8])<~VZ:jt +z9Х}XdwM'mpT<&*m 6gy40yTA{LFڋ (4үElj oOIu*HCd]IZj(.Y_<4dp6uěfr7b(آ{DIn+?gNzELg?[9K,ט,`q&sB>D!M1w8>NӆծL//v]][BNy;+c3/>>W}J?}V*(OlU·mčB&w&-W F 9gm>3Jۄ^vl%⯃v>sy06דH gsʍ~`Bx:|8F}^ѦFI!/XsVR@uř&A@laΚlQ󿋏g:Y f,1*\ͩQcV.@KBAVBo}X^&/kezAҁ,$+e%yY[8 )lޡ1͛YmhUd<߮:~,gNb#&%璙%Z_hKn* e`'dS'd?׽9k@^.ӆs7@ݹuq\ ۘh}Ā],(sn:S<:᥅u2ymmlSS_wbm'lSfW+3!fs'95O IG> }S/%s 5&Fһ-2,vQ8ڍϺ{Gw4-#/4tD>OJVF~UdFw5.ӹ}"@] bU׼4AǪw!愑5W@fџ1Uxe4C`R; V_7+u6dLSPNq` 0c-]MupQyJe_)Vl@L[(" =P垏7{4w-u82+Lt ?zLMt\lP\%lZ `ܻD5rN| s]>i/>ަ}bpXEEȢWnUgD7-\U*EQ ki,Q+f͜ϡbuT1W~]Q蚼 I3*k<yo{YqQ؉~2x6@4*r9e짰N 2 ڍЇ]3tBK5zZ&HsOWyq=2*o rs5y>H;n)km.cV?)iEwu(-(phchm ^jd\ Ҿг?Bow9~ HKߔz)Du5;I x# }EűvR=54K=mvh=ޔ6J<@3\IaҞ#:O|Z5ߨh(MC4?ڧwOQyUinBm cZ36, ...xa}fNPs.r)uMɛr?;M_l(/$W.6ZQHssf6=]-镓GƩ9YG ]*][eV{z͑^&.ЈdM?Ho5u#Fc|[{Gw$w݆D:'f_KkX' :R?yqks~挣?65W.0z@xb뷄| ( AcuMWWKIy~b˂ qX(|=%@izPC^=_\^ZGZA^[`@œ>X!v ծ^M8x|.'1T#X< vY+LU,3(6%MeH#Pze"ۊHݗZϷDyvsYe]{Lܱ9w{ u9chgА|BD}ޥ"\}2CXO/0CZmY[lugOqAdx2~~OByAI3C`UלNZ78Vs쳋OZF͸_$b,eBT,:| X9Kbi[|*Q-WM>k=])JټUlHHK+ C^$-[zQ9#AV2۩a0fjS:ILa$$kXX1uymb#2 MH@21eCܲ'x-gR!+J. [RwuUɣZjlI!=3f^ZC=`*2so [0D/H''4mjzEo<KJ&d.I3ѰgFUehk 樟X3g釉E̋8w=H}sq]Wכ{}ˏ@2T.Xr~Ƞ1?f#Q8Gc1v/_!j+N*[Öo6YY/J =[XXx99xr56p$mPP Ejqϼ>IuX]q$g[>;K$7`kqKX>aZRiqTt 4N( c0±~,x &I$Q GW@mI: t3wW_"|E&LD~a;t$R9 QypRn'K. 踟=dgÓww2-;7/X'o&&B$|tS$Fo|ڦzG;ڂ_?׿ W#9y4yYb\Ab#C )HMv ޝƝ$_Bfhr"ۙwRȼ߸y%?xuJt9 ؛~mA=^83lBAMFS0tG=yވ `,;ɍ著SۂXRx^}{ֺX_T~%]%JE'VNʏd|(:ՔSaiξpj󁛴0yEƕ[H-q?!| uYgϾ0LJZ֛s." s+R<0\)@Eg"{H*`(oub}Ay:5J2N7PYgS_W}C'|MjKЭq0^qNUh.gR#qȤ#D{2C@Ab@K4{ÎhOn Kmb-Hn-mꜥL]u`^u6׻-,w dm\8Ov'n򎶦0l ?xNX1\C<݃(Z[V V[67>6;Y"be" @TTZԈm]{;z '/,b g3NaJYvh"/0ޜ*RmdY"L+ǡyvj;"ri|4бbST@P8<IRa:@AA A2xP66d*r>QP^PƕԓRSNQ4$EgbB’Z p f6aKbrNe}۔5kj殾/K96,'T2)r|6_$GbPp}ΧK z@^o y:0ЌB!H2[?J ƨ0h`e? |i˨î4ƫ^?'?oD6 $otW"o;[qz3rsd}7qUZ}1qGX,)0C2fg4S}"4xB=#&ms : s =@6h H nm,3V'ir7ƱAm5|}E`7Wv=ʹB5 D!s_g^Zrc"STv]?E`dV }yɜ!g=_)G|Pвx(̫o`d޸#2'kL#߂i%@-LU.V)R',:wBk(88ϲ Y@AW&5%7oRl*56AҪ:aDvh#'Vޅ0Ѯt@C8Є}UUȲ7`YQix'ڎK>=sw9"H;5PL#YHIێRpHAקc{kt0 N[IaW`E8` P`IHGIMZKGw"|HbZ.p۲NSu`/7~|yh[^fm ZG2ymԁ-lz ӹPᐈqFr(pT<vg\"i(e#`ZsW)n%2a z$$lDrZ P^|h}nb?P}*V6&uoR(; ZmThme꨷Z:mp@n[4h #dH4l%dD63N)HC9Zi~K="a*7vb\fe;`oiAC Kb5(BߦtYM?F-H(JX \džxU*[ )B|< . i"Kv(3k+W&`8Q*ɡt2IC1$9J89cw`q:8v(wf"VNOI6FՎdvPqUкRŦ$1ZCߴA]cB -t?`9(Dpx:q:k)XFI)4|"鬐ܘ~(Jnt,z.0N7 n=3a#mJ*6.*L8@}B*WgDQxm7?K@ĕl /F[¶}kOm6EQtiH~ZClbSwmKo/ K e[S?/1 7@T囦*$ = U挘f __%%+)H'o#b7iJ=ruAA3  fp d C"k<句^ߝ/PjQ:YMK>֮?9 u'ϊ{. )HNTl Xy USxE*L?E` zjɌ6#cF҄/2YO(35&un: {^c)'o˻7P\DN(3f3>{DQۢwJ#O_3bGg0NԚdBCbԄ%/kHw|ݥ,i`vS^m~t~m}Y%Ŗ+&Yfx|jy3^ײ;/ RB[hpC 8?TP$]Njx}6J*NQ,84,tq:Jį<+4QI.=>0eB\(PcV|N?P4g@vVbM`:vplRr\'&냩Q=5d?3M$;>KZL}|Qלj\uv sI[LuKŧezEܘܫe9JPUR%7B-Kݿvg^k(˔"Bz2ᓿ1L 3_#;qG):Ms h^n/ @;NQg;︊񫤉Pe=Tu\ -vuN9MjM4H/?j܌wz&8 ][X{vs sδ'g#!TjLّ%k0K+9vE5J E5CB /ɿ3npЬxV:s R3z=e iԱ$s%m1Ιo -%ΐJK#M\qB*`-]qĹ=yRjUz&rZ(Z"i9ھ1̗.,'%NZ3GFȌ MFgǦ*ˮe/SDD[spbs[:GWHv׳py[qD}O+p*//pt]̅,gOymmnzHQKvKמI؜Ppo|ګkoYHţ})$dn2UKgRTDԛF.Lpt碲V95E#TFlT勄l3^ˉNIk;X)>W%Kak2)X9+ps`S*xwDLp*oH71(0R07>2H650̬y/?Hoa$jqGqe0Mb`֡3,"p2fL:2i u3(ppl_E$>Fuxz>B\x "@qvmC%-_uftZJ޵p5D-7#_W;4$ DۓH;7";x09NZsn4w8z!QFsȰ=-Wv%uKLZ7YPfXI'4 ,Ck` pB\!A9=G+ٮ(7do&}G(Ib7:wG?*KliɾЦ54/eީN{Y0p/,`qcQ5F> P9O=C0WxO zY]ͷm|c]:ј%U&thq>D *֞|6eRiۃ d!{)6ZЍ 2m)>֎4p Eΐ(8H,GjᵴDyDТo:=t)'9;һ& gSؒԼ[MLX/&5Zi)Ión :B;l߻ )-6Cr\I^}u+74*"Y)C[Y#& O. ?.(QbIS$ٷ60I~Yv7˾T='P)DvhS7DCڹ@yFicTy05l*-[5< @˟dYeiQ 88z!Z]E=dE#- AMy\8O ,RV/_:9i]S6c^j˙LJ][)(%kmpL ؉p895ԝtY4/EXA)D7XE3 \x\(LAI"npQM( ȪI@8Ĭe&$]xDKۡq0(RP\-n|Ndž^qhЭ cGYs( GRJoh}ܻJS4FLn\[bKz`c6~{~I#+Q2CG,pu! r ")+Qt*5 Zo~!l0Q.~6dsoyv>,Zn7:-[8-5+bzc7yF/?BTr|QNb+~$wn\Ec{7if9U?|TS? ǽRΦE՗qّ m5PH*rH],|"S۱â'Nx~1@.|yں-m84;YI0>9LCzd!q(vM̬o< 9FlBU>ߺ,0234vFr{٬ =c~N{][&&}X'46GxxA,.:驠ѭ`cI1U5' E Lc+H0 'NDbW1Th_ս7+t4eR/ڞ7q$ŗzp&\Mw{b_~x{}[=}6X-V/P0/,mZ5ȓy`)xCh7%&USM3I_#%R340sp0C~!aM/_XaxPɬ4V\kN:[5&- d'k6uq"q_`no-ͬTYlj  ׾>~ 7:O*VQ DMS7mw* m+=_t`bxbnJC,eh18RQ)\Qato#m.xrCΌECj?H&f'O"0ժ(1W ogyT3B!58^89 7cd,I(L ed M#<NaQߺp Dup CB8^G0||g&]ƪFR]>$C5bYtc0٣!QyIYǃt^҅0(@ =+W:bXj٭aOm#j As1-+lN.#wk@UPWtLbJr^;=KϓOݓ۱0 GDǥ;vE!kaS|#a)<ӂh #)ADRtxDղ|'un167ɫT(YE4Q_mN|u1s3BT]w|ӍvMiV(6U_!_ft^$ Z25(XbvyGk ,Yd40YsBly$J`g!LH)gv$MWLޖs<ӚRvzˌlob y1ťYxX[q>:1KQ1}5X+ V&^>5Cl.tTj@؁GRY5_Ŭ~e5RZhkLdyf /"vFF U6CcODeJXYFͮ3hjK,Z̷5_tD/,ܷ^kL]lRDX| 6Ձ!'Kfٱ u.+!]dCA(D|-yysjN!i=DM55epjaOkIOQc#h4ѹ;w)ѹT,\-T81,sHGAA5 IH-Ŭ-$3ZY}npM3cjgfi ql$ߏ;ΨK4  J/yLitl%fj)t"|GpDϑaVj; Ӡ+˱0f"r.WJ0՞j<(c:x 2{^+*]_g?vҒop)sLd>@(V"EvvLњ6qYCQ>qI #-;zcɒO_4(NNZ9Kr{iHGpC+.7tV HK!%X:ltB:Xx3&L s&nn%ÇՈ1aC0S],Z@+MRePϷO\z`aG)XPC aݚǧ^mXaw| $tgFpE5$t/+Ak9{E<ϏK#.na;d r4o.QlBT܃feluCiʤMEKnȦo7x6\Je6g|/+_KͫOK{)}3!2y-Ě$0rf"ϯ:,ƞm<}cA Q7'p Yb$aUg "K(v-Ѡό䥴 >Д48%ژذWbenޖ~!QE*0)&]Y!s_ CP"&N>d<H뉀ۦfE`6ُٝzְCr{ZT `&Ԟo3cƞJ"?~j+Ц&xher c@d;(`XALȌipB{΀ԕ?[:2m=7K5qYG r6epNNw L/˪O'4qMW2g9L>8_Nc,ryt2ެE#ȶeԓ!D;E ,&l-RG 9I% JAO-ղb!fKrtB{=-ij5,WWcrjJ*&㲙 *7˱}; .rEy䲚m]I8a9+W2%rPOhn}U&I b.6~ wx@tmq1 F\_ `Tk a .RE3|d6PRNiH]uq쫀ŭ33#$81dwna*jhrl[R̺?A02NJB7s:ksqDf!IMi ȚOkx ̌ #emC ϛ捴lBPn,򛳜E H(q;r6~*ͯP$]-j[nw(qKI!_`vIw}V|Ɉ uעZξࠏ%tmcihd4?AHƘ[iAX}ng8%Q߸4ĞBxP7-N|JXioFln~/B,L-#%2=^o<i; +T$X ڜV]<eRSOMZԤYuePv_޻<,$%^t2Xp-MjfBӵ`, 1A ή\]ǑԱ:)W`EpU0R=ڂ7Ug ''=m 8;B:B^ԭqt@Ԛ- P3+tETWPU>Ҥ7G1eqq?kɧoر Tk4tlLqqIixcw/Ŵm_q|K.x֩`ƈA&a0W&!-F!<4xCɩV"uVON1 AͿoP=`'-&slqP` ?a'x@)=/Od܁6dPhYs#HxIҷcqjYIJ89u }FvHGj5%^}lӎp)6Aeދ ֓Lzr6`xW7JѬ<#`?fxtp>ÀbO;Ær G,T-eǓẔ=k4}JIi<)uO-+ݐla񬹙1E[ax ok9q0ČDHg&$Cdy|֧]ybt'Gyy^r>cfÞF @Pq1 ZJ~²xƒ0X}tU4|h?y><Ὰ&y™L<bK.Ӆx?xfJߦR vKċ^,?ޠhZ4 GarX1bI kmb{/ '9R#yݢQb=;z..Vb vw,R8cV潉k8 R>/iToɋܬs9ޜB%ɼvM5z, O<Ǭh1M:S͵"Ke%3?PvzB{תta':˃,Qq3.}tDxӅ6aAk.lz92>C/YނxeQ(B>'rPҖ@fh }.A2E_켇 M@ 7QTj#Yr%H<}=3reu{K¤Y ( IcZ|f_ #?`I)b_u4t_E|-Gov>Eh  I odч${gl 7-۰6\`Y#u"m?v,Xc+2FŶ+l$h249Ď}uUR$5^ 1Y/g\-m}~;;ZL~BKU+w$IѤ9R{v)FĚXܱ?qO}\K~4 f2u__t(?Gg. R&aUb\C0aYw8l4WVcBSJެU;'{jG^g4է,IW)|SR$͍+F ]Tӽ*oƀFtЈ321~ m,0lu1JpԢgf:5"52M`1{ޅHxLJjD yrM+S9Y Ld]}nj5ފdQ+ĞuYފǯruOtK3(% YN ``AšS"GŐx ;Σ.u2/ Q0$N^0HsEV)bTL̦־D0=*~dhRcwj!nD;WdVI[fvSr|Ɲs$gx=>B䢲ՎD;_2vKkEwnK u@ײUH ~4FG TeZλ7Btd73M>}Ŕn:=r|~d$y]_y,Op_O߼OY`9N v@9|h:h5Ai{nkX_iEuӝZH웩ۤy{}6)$UnK)tF>yY!MiCR)nxp܄Kp9ed= onQ.ٷEx,cؔ?h}2D"_ZΡ g;y]͸зm"mY Ne1by0u**INGOI7X1 mx@';KlF-J^We 4Ծ},ǡ'o\1댢I(ejٛ2r7缺g2DD)SDZUa]|==^Fr7ثrLyW/\(,g7,] ; )磽wfttQaFdvtGR>x|2Qr$^ȏM RG{?|*7@|:شAb4nM󆴴mP]뙂qEЧ6\͆ Q~lҥXjZ~:3WyKB=.*V7e=t08%ǘ%$   $`PRg5bH*D3oW,-}MS:Ke]5wi:fx]>&/]o -yv2?ixRl[dBg}oOʌ,ȖKǥjwp@Ζq&uEE XٞU(73<4YՐYn /-GB7كS':W1 (/z. in-ߑ<_.2)$_lvB%I\D  $km6%AN  n3ۦe3>NcAݮ-:VM+w40f%=t GF嘲 Z"FNMJzXw/&L&qպ oj9`TpF{N"$ QNF:F$pWo4TMcy'CZ:DyN@gtcsEH)kJW@Tq_^"F2[h>q+JSa eMl3aTs6ϔP8:%+ZK<Q4.Cs}`n8ިWA_̇GgmZr/#X5ܣIi)?5OXaE}uׄ-א"sI۠> ϸ J$ afPt),s]ɶcq m 0y5ρ~/ OFq'|-vkЈDSB?~:^紁"qP/#Gq25xp ήdb"MH(E?YZ[^`:YuaSpH.UI0~F_y'`ߞ|iVoNJ.vjN>"q]aK2Sb=~\hdےcs8MfpOXe~x觬uOrm9fQ"XԨ@0?4P9VhXYڈ n _Qn .O6T8#x~U7d Ȫ7$Qgy*-;%b͛MFj V*娔Ԕ̆ acxGb(AD`0f]uEUvݮJVq( əW_& >1=H`,ZNi %1^ J@XO@3 a+o2UxאW<1sMfW\hp7Ok汭Dd).,5=G/^ ;&ȕ 0D3:*PSbUW!(:\f]a>en&O3!I`.Rh/4@}Mud/Jm35!0Ja|ja  kCep;4qҐ 9'*jUy &&F/jo/ v lE@{dj%>z :7*gFA-b1Lu#.lʓNyִKƿ>NC9DGMqihQ&O񺢟{KƤlKc7ɤ3za03bPhYw*i23{/lAPN(\{)|[Už ׼uuu"6Mǂѹjq8}\*azځz6fI*1d]lRUN1C/^@^- S%HFnf:-|7*yq'W?xڽJ`G~x˾%Wk;O '&slb thp@7ue]VZ>U\Szcd5 w,=H1Ho>vJi2E3in[^|//@;r>dcW{]JXPuv҆m->R=L;DtSmhwZWr WDMuvh ܜa8{pΝ#XW;Nԃ_Xh(b;Cr(Bpʲ; $؊޻.;fX;Z~q(nqU;6DxH䘎q)Xsd߇2)Ǣ# :Y%sδB?wό˃=՝Gr^`DrjtǯoWG z"JGu1wxy#&ʘI$ۆm+h igNܠ5Skm0( F /i_AnޝIy5lƦwQ\'lHIS[D:7YQjd!L Ͻn,Q ƚ#똩7ޏoC9rr7tN#- ,6Ͷ{~]o/KI)ݶB26#D!DBel1\Ya)՚aL\||Q&!W mBM^7벤I1?N 8wd&xu ʘ_5=e~<{_&P)ٳ^sϩ|yr{̰>pՓ.q-iGaFO+v]Oxqw߬8*]11a"ʢղ4fߚꮡe;cL˟w<Ʌ-'*\zʠbb>%62h q e\p-Sjiפ4;OZdlc*ǚKba{Qۢ@kw$zmܽX ~=SYTi o#)8)PCCs 6(^&XZL;_phݸn7*ЭS:y2(_kZ|݄ߺ\>nsrU/| 5v6mlCFmAs,F=( Ɖz+<2 NOVbJ; 7`jBe īyMBW ԝuE|5u0"`h eo똙&<+6%&2z4y*T_T& Z$ȿac„1ȶ'ɪd-i[.\KXZ|c/LXnwB}C -G+uvO'E*mS\pBnKjn "czɀIO,Nvh!?KyоF{4%GWU> :ZGʂԹ28i뾞Sg^ lv:m^Eoư܆h8o雫h6lW19{ڨw39a$:;{ ]vKL.&ckn\+̚N C2Tf,^J:4jWUliOơ3 'nFFhp^y 'h^um?ohrU2feN|ځn%tP߸IomW0z[nE|\%d*ъ3()TPMv~ߢnO]ǜwnRrD+}]j8]>]Qb6q#8\a?1hݕuUfUjZ]K-%{{F5>(M>!LWь_rb+oĴnSHQ6>].A}5AzJrMrd4rVB2h?h׹UQsd6Ia+x ~>%L4*m6wnp*J㕘u Nq8Eq1!e嬰$)Q}wXQ#QQ+ǖ9*߭[G] +H2VA]aa $bf+ 7ض@"_`v1F ;fʑ}p|Qu(x za^M^alKo;Eeo^ўO v|s{v͇Ȓ6-|4^BK|E+K6[ edA1;SN#C[5H-w v$+k:nP3DQq~L}NBazMaE9kCT+38ԷV~ |J7J{}Q"`_Ke\FOC6> #!T]@]@pS5I #Z;=L&90 :_qFfo9ŊO0YϏ8LlsQr']'p.;2dj|ϠbUwE)Rkh|j krn2ɾ:%InČq' r1eȴG'Ѥ'M ҿm$-.m1"ڌUG,6 {5Fh[1|ըdTgroZߧ9jx@i9'=5l)^3CJy_q`^{ =yh6|Nq:31|A4s&0$ ɡQU&MZ1kWN ]JI$< z9u,+r%}MY,yړusUS✰&̡ska W! "  %a} 9PBQMsS:R$*A& TĈ>iЅwKp pɡb;o[i$nsoޛ+\XaMc9Q1V"И5aX$.`l,c~Dr~ȲDi)8B@O(6T\09Sí3q<\iO}lBSYKdPgq<~z"Pt2nƬ-$-5>M /*>GPCf5GӡW0è2RoJpϔ.$pF񝍟Pxdx#@  (Y-2|ƟH\H[4y5!jݓI \jW#qU@z%eWqߛpLYAg64|7T;rR-w,K)Гr1k7Ic?vhwj|'WLv"BY&sktQ^l[)Ӝ;?Iv&Kf6ޒwes[h Uï4#$ِB2L3_lPǸH<_1 jozP]ˉS"3.Au"ǥʶ/8Ɏ4CBF븱#"aW67a?8kҹΈ,_O4B# s]$Ǣ!lHZ:$NTۦL=\䄯P/3\bcLSA4=h P1yw+nõ0/v^^;W IwK"zoQJ<2" BnfR) _Wv6S<ڽ{ڝ<:=>C\_ Bٹd+^iJ(71M΢m ;}U3Ýr#yGx)He.0hL)) wT#g8̫*7Vfa%`+a ;Cn2yߝ|Ŀ-+?ɇsFs)-0P!Wԯ=hV'7AQ\9|.ӦWH16lutm'B\V1ԫckWCmDpNLق;nM8Χl}ݮ"_{J@px Z<@#0+%m%K6l9Eq]dk:iANǼ續㹓R"Zdn ddT+0+If7j_6#b@q1v[.1k_>+N1w;cV6ZyU \+ N3hQ`ϱ}FwzV5G.^D[ͪݚP%uBOF kE ߃^?RL>d Ǩ^ \o+E* HJ9z}=B5*OEAw9D heU!M+#4^,6Io,@͸f_FOfoWx+~YIihx*j D)K֒\VzsmhvD (xs.?9>3hOŵocr>=V ]]g>49\ceOiiaOU E-'I2 ma>1/ 펳.4XUPShQ:P;];O-ݑj\9k e 0ߙ#eUvnO}Rb90b%p=\FAv [%@(d#pR/(^Jjn;uZm r΂C =z:>9%RYs'adz獜py=O^URڪh?8m{imD[`8cEHA*_Ya*wR#Fޗ\ZOMXt ZeW9)isB.LUs/QN}fЂV՜ԧ=jc湵g]460dCL4{|Zq V"u1 1ʣc}=rZ7dIջr=r`PC퉡RaėYDc_xU2G,ThPg?V1xb\ n {}n+|o׆%F8h$so| )VT(8$4L;~dGy84i1n^>~, i ,"jOV HH~"E-V8$EϓR2 *z0\<|B"bR2[_5rkҬG6:t"7V$Qd)RsZiҫg])Kp+P-qTOMܭ90 @H즈l1df N GVpUzGTZmP .>!1FMJpNZzFFs fʾ?Ƥi'IʪH*u`Pʔm&kȑ3W}\S璉.z@y@1X͝@$)Td9\_ %R\T5Z`4-V,X98yx "Pqi8Bcd8ѯy@s[RHdĄqOH͕a¸'6 =!66W%"ڭ^ bBT\0Rics}&y\ &Tg eKzBL BZ(„2 3Kʸ'$Ul L (mb*Dnˏ| S#uV m,~48+{\Vc"m=tyNIe _PsޟD/\qމ˵a}/#^;8֚xnW&Z{}~+Ok2.y5aσT Hnd/-=r +!!"Hpe#ҲYEŰL{ܱF(Ϯ],ǣ6,Iz$6+F $t+C3A>9ќkp.̳9eFPUsD^I%"A xLt:6 }7 z(RNW8k؀-]`by =ͥzMx/XW8huYkOZ(QU *uKd;}VoͺUMͺ|Fn^R*ks xvA>n'ucBJ躒!E8)BZ鄑C{Z YC I0WL⏪ 7>Ic7>"McHb-t)%˃djZq}^.f/fnP4p"B[˄QOl|EEڲ+1e>D*P /BZ$2Hݥ[z 2L=Dxhĭf^@1l)Wo` dW^$2BzX+Ga޻Bu@~]<)h r 0$7G؜B)sD EKFf@Փ2B#L IV%hj}èB(1BfM[IYByU_3WxQl4ꫀhDiMzZ9s,:;~1*1\2EAȔ0Lv?g1 B nǛ"~$w7bdD|uiʤijjjx.hwq y"/9I$!ˉe%~g_e>iMN*eh.jQ#TC10mz:SO)#L WG+WX`ʸE@ mlniwQ Td+q2@=o?_kMj;޺/qd:'i+ɺ`'>xb8dW$qwf*kD@ e\ ݥ&qOH"L'4Y3ݸkB &qOH͵"L(㞐JkDP=!660{B*ml aBT\ {5oACkdZ`ЙaoWz\F$6q;.Hc2ppB%L?_wۂvرh(UZֻ-UB/iQL}{;GO^ݻXw{X)Vo;ϴ<*&Z ?],python3-saml-1.16.0/docs/saml2/_static/css/fonts/Roboto-Slab-Regular.woff000066400000000000000000002504201451074743100260700ustar00rootroot00000000000000wOFFQhGDEF:@ > ?GPOS+UrsGSUB-t9A"=OS/2/T`*cmap/j|cvt 5.8)fpgm5 zAgasp:glyf:J )head.46Vhhea/ $$ hmtx/(wnloca7:%fmaxp?  name?plpostB $F[2prepPxc`d``a&@Ȩ$#Sd%c%c@r*t y #ƻxڔPڶm۶mo2ڶm ֶmD33"FzEjMaB8'ԧןl@J:J9V΢>QBH1Qbw67֋B',zJs/'˕rWߪXlߖd-Aeo Hkd6Z퍮S1]ll7*([cwY5͎P'+be[YVEz*MwBjI1;sl͵[kS+VvQnmjt=oYLqй>A}J" H/ó?]-'K__ dfLP#R}/rO +,-;)݃p0\$i!vWy1I4Jeo+Û^k8 {r_Fb;/Q?{\92ϋVo;SNDFC#!,ȉȍ"d+H*ԨHDzGcd@S"+ZmCzl([(D' %pPg8[(;D-OP 񖈧 j۶m۶m۶m۶m۶mC*#> ;'~&I2(1C>#3*09S12-1=ӣ9Z%[5Zss1sWp:r-ס7rp+w1%_?` ?)2)b`*V(c2*#+2c*+v*crvʫ꧁O##;2C83c:&C90;8S18;2;82 1KS2+*ӹk0k3 s3;3 {{Kzy x'yᒿ@.A! yu1V@%AΚgV ζm۾m=kiku/ެCկ*U9Mw=oa9Oe goxIeHzŮu!4A HxiZ"4FdNeJ]R`L֠ަSMJI35"m~еxu3Amҵ7}e u5YI"֋ށuk;L,iY`r⸉"F-X$:s`+S4mvR;n W¯C#h>BΩȱ25>dEF#+Z:ͩ/fD:$H!ݏt` 0qV8s < fMfM@ +t6]&MZOבo*ֻtaJ*d.qhnE@C B*VPЏ0{%]%W'If0ɬ,\MZF$S#쫉s|H¼,aA!bUU:b${-hkk! aA m,BĴت bl5X@h)D4UVCqUKNz"%:}}#7S j27 l),IɼX"N2A{:w,Ix˻:J*NK#t2=_l4J!~[^ W҉BCl[gXv6l7a MK'j4dLquN3įo!QH,o&%\ƍs3k@~!hNsI gX~!<**Ckׅ?ߟHo6ےҗM΅|_Q~cc+L5L"M<3ߵ|{a|}|T8[\du𲎳 Y* cx>8u|'s[8s]a"r3}  h|ȧ:fH*GA?%d z,{7.eKhD\>ӱA.v3{ so| oP8 [T͠o 0ѹ[8L;eci5` Y1YDƠL=k',5[:\Xlj{x6e XփK#_07`qj𧢮mb/vpVqtr4QVɕp<_}[ލVep[ϐڨϒƨ]dA4 &q஁F>̏}:}ܧ} ~:}ܧ NlkF#[oGCp pꫩPAd#2Va.Va!Q\3Qe)K 0b1y+H!2.f'Йe*DD+ZRH$dpdz})9sǨMTRt0 I bEWvb*jB4MB!dpX97Cٓz+|ׄ d0#ͥe8f꿐EڗeնF}|^ۋ%׳2lys% 4ocElSRDg.+ݔ{v\<|!r(cSz8AqXlBSx?MfpmhK;!V&3ɢ#89S93ɎMv+g9\y<_ S^̕yBrӏ 9XCe7(Ot9C͚\9,`!YrǼJFcY*cEl+Sq:Qr7yƏo;_Fr-ϧ+aTگvFZ&(hT:7p#3EΒyg,`r뮰JyG+?U/A|X>"IZkS / Qnow=@rP˭#Y!r)wg|WQTSKIDXZ׳QO8!'gqHf,SrVrxyy5-v3.ȏUO$wp}!cEu$9Ka.bUTۊI*NrbEj@J bEڮ_~!V::{_g:{^@:{'9Ka.{'H 9q]H^)~!{BF8]&7$ӂrnvN$֤c>f+ `Fe<[Ε4Йn18d$J$&dLH'. Q@!}1"߰҇!d3W3븁2^^ Rvv[/ }0fxXOU3cC{ՁLH'. Q@!}1"߿҇j&p7p#YS`3֛36fS6[kiAKZq9q;wp'Xbg1Z7N'j֤ jںjN[Liu[۞{3w4sJ֛~|R]LJl06Mn0= Þ7|PH"$%Cٞf\jtLK$&Hvgy!ՙB3 3G*1TRM}Mz2,e AڑE'Е\HД8f'ȥ?P&3":OO.e&z66>elv_7dӃd!KYf&#Nt+1M6)q Xb<~xmP/+5Q~J7p#m> X/o Og|WQir|f\m(U~QnT68$J$&g;$;nHvg|,eyl},O(T0H gW0,? b߰J˫u̾He+ˑۋ7{Zۣ8M%LdCuw繓9S9"ٝ)1,-:zU>P[__-_7kq|]2,nw{蘣.Ua\E 2Oy> X^)o{74V{w 0Q\:0Nȫ/gzӵO{~ղoiH%rb)X&yny.;yg"%WjղF7b<~]SMk܊tƶ>E /R^_wk=d~|Mvg<_O *J|PI54~&i+gݞk?ut`HΑ%0RT 6L9K/ ]]I1MvYަ~K/վ_*jhi?_S]f38;Goaf/d)]#27+oQ.W%bBl&ysNvЖ%;хЖ+(z8AqFW&48gɳmv)?D|%} :%0RLt^䙮9ԋԯr,;X~WOZȈi 8}AO\2"Fz5Jv{q̴Bi_*R(?>ʛ-'[{ /Ke1qߑ:Qr7y>=/O=_{^o_{~WK3޲?*_jk]mg,9[y<糀/.)9^%^5`7X$ߖw{},,[vC|ܭ/=|>*k5^Oc?BZЊt6;MOO BGֶ2-6ƫZΐ9ui9ᐞl[u<=4TצdSmڎޏɱWb&j>ovNgqatO~,g%pyGy'YhD ö^ZepBHOs\gPyʔ(mr]j=%ms>#gkgR"! {l#]Rԋԋ|Yv;wD.J=ק{0I dpBܟfdG#wr,.~:DD>#9̍_2r/įJ.JWjϜUZ betLG{[>,9p ӆ[-짊beގ7R(.wzURZ-= 1M% 2Jqz=yp{e?G&iYRd=qw"~B"=jN>X_SOvg;xg 0~5^<泀Jb!l6׳c4w6Z{Xϱk&_:ɼɜ©wku1#~ptJr#2/gngUgf6跉wẋrVknNgUh%j9@32n ?(/y^T_/kZgz]"km?w#! e,šULbrhLw2863IIq[dNTN9@zG".b{ӘOA|r~\m}dvŜPpFw輐@TӹNnۛ-oVצV7r?_xGx'XZ3< +lM{|f>dlgn9%͵<clG\AN-2,b YN6ZbVFC`^LH'. Q@!}1"svmɥ}L:nFf0H-!+|xxxT4ZHHW0bi#R/R~rD9E}7)/.+xU<<<V99qxjAmuԨa_4Vնmk۶g}f{.r6KH*!5%Ay)5Eol%4c59gy5TRLlhpH Cs^ݻ(f/gI BTlLdG 2fwi"M9"M3Н~.Жs䰉xT҄[0\jIFH \3ї]c36:::sf0#Ϥ7Q+X&:P<@(3ޯG륃WQ퇍_NPҥ?V%ͤ~4Ip8'e4@VwqTمrÿwU n 9b0UªdWޫ'7EQx'UI`Z'bb~Mȍ/ao4zfV8JjkUC<)H&ݮg_|s*Uޞm϶mֶڶcQSmTvڝ? s!D iB& !=4hcp`)=(=d4t8rp.#WYnB] !+cVY޲j|b5jP'1 1$1,1"1.1ObYh3c(1V]K[ҽ[{wJ+ݻOwtރҽ]ҽҽ=ҽҽ}ҽ{H=&{\tISҽ{H='{w.H^xxxxx 卖卑卥kKHIfIHJHIN";[w\)yRKxJ.].ŻRw:)ލRx74*g0'˜@ B* y#Y0͂|(`@2 `T0TTPTp4H4h($F?Os8 eUXf8̮DYx(V/֋\z3q3qEW~eW.ʥ_W6*Zr'sֻzFA/`#2md57?_$4crczEǑ= 7Qso^j۶mcPvWSw7s8W+_$ eCJTVJX*2&TڨVVmj:;5hаQg'4YMjCMi4=zVy ZkIKhYQЫZ״FkMzK[tèӑhaEAXTTB! ,': TQ3:/tA_ꊾuX7zꖾ}{A4E0 "' b1Š(bA,wzc4IOB/zf~wC#я~C_2g'8\T8!G ]D8DK]9ÖߐT"J4,K5K5O5l0ĝ=!7>NQArN< fc!] ({Kqzu- @DRUU (Pw?݃}{ܒ)$v,(24u.)۫[SY$z.,ʪƦΡUm߇IM .3d8DDضmFSAm׏<'3ɧe!!bclM26G(%[bT]5׳N]7h&Mݢ۴u=zO_!C=bnj2uOGFQ*ם!DX?F\"Q%rȕ*[;[kvr \}>eWEa?ٷ۶mc &cm-rl;;<:94(*Ski".BE]|%ڕdN"x@L"Iiɑzd%'Mf@ 5F~/t3E<]@)SZzK>d')K I#Eh1L`9T)2MB ̐*3fI0G`1OK,g KeY.!+X j Y#VcQlfɳ. -Gts$ig%9Es+UrM1nIJ{<JG'OyFx+x#!o;=(Og)Ew0!4 uVcNyKXABQ:J`%+leU~0YAWnƵ۞cmی3{`xSj8c;=GbQcTYO3zx~!^`@ R˱XΚq=TL9үkx=ޤߊ6WLoƷ4f2ӲL4f7f)-~_ՃQjSS~S~jO|P KQ#(Kc' WѸJM6W5mj\|9_htE+]FW4赹VMux9AO$=StN39CRIk(?Rj,6K5eyh,Ec)K[rwU{'bͽG<@̃QMJrMIpJTxNxn!l7Z7Zt'^ͤ$н^}~=avpyC!<Qqq&XSe%e4֤&5iI_EKZ),Yn&+T۬SnZϚ!+W~Ǭ_iyZ_%+Z~׬km޲eu[D-[VnYݲeu-[VnYݲĺ Z7kYײe]˺u-ZֵkYײe]˳Ye>^"/e?3+`WoޫaE#??+YjVy-kuofnvYU`W=QլYUߪ/j:ښ rGΞqk('94|3U]Ow=di}U{y 6#m6Zk6ަ}i35u z[xڝlP{qζm۶`f8ۮճmln) ⨆`N=( (0P ȌǢƌY guꢕz蠽>io>(a;{Pp*ǖ&;f73xBWѝC_џ d_1P1dO~r7s74/65? bfae'줝v&]_rA.e"W\rSnm+jc0By#k!=5@kl]غ`a6{l-U8ik Nx_=eZ駡0Jrܦ(]r)9S4'kJ<ʠh2BETECGG UBLb2DTSxc`f8u1TS7Nh&䉘"(6b(HRar"Gər\+7˽<&O*ʫZCr3"dd7'ƫ8EuHYt ZgYtFws|(e3,aZa% X5q=F< xڜUG{F nQRb34kg9\w[[ң}d*v=ǜk@E-ۀ{+X:%}W*/2sdw7d;qI[Nvv*GHG1Sg$qބz/{i$?IXn|$,NB5ڍʡpz^"NH2iQ=Iw.&RÃQN9|/Nwl?9A 臭X S2QRŒC&1f1IȈ%ETj>N[=Rj連qU!݆\տxj[ȸEHƣ4Lj [ dRB{ d~|N+Y3>)^A?zӶ0SQ\LMEhʄT q8 Lxc\6>.I@ ]IV3ˠټp' Tۇ))Eݟ3i0O/= 3~ Q-JjߴEY-*j砪y[]ŨE[}jXc}׸mVz}վj zzeVdi75)EeR nK wuJGΖv΂o3G}[ K{h|kܯҕk~2jmrpʂu`@\\D'xB3yQ| ,7g~]YK7h=GWא E9ދ,QK$ԓ=Qνl`#Li*E)K9Nwc,2~iԹu:@ӫҠk-"j-q\jݍ=bCT>O5 b]b?Ӹ"+ 1qsQ|5>Z&h*=tC_X43~y޽^9+VYtc?Gc_@ԑv9rbAu&EAY]gk7KH6妲x@o0z8fbq@&c J?&RmP:9P ڶΕDp˜u8?zk, 8, w'r5HVoMJXeՓT0*a:h`2M m $!b)J 1C1bcDy0IVJj͝ael&[zO)=MO 'JRzğ^Jo;ؽ'ahxڌZxTW>ʛx&DH'I3$@ N%;) xq'T Nz۰xٺ- .Re}/tېwNf!38`Ix`o1P`Y̞&gfqk@.C$CIh!JPӢ1;D87G#b4$MJLu:r)b@7=YnG}!brQJp7ҟG!s /rL(yd#qx)28'pN{Xgb#^sf`fZzZZVfvNdyR4#%84ӓsg&uGN]?g;vċ<5#on4o5h'|wecΫ1[o>;++8tɫ!ZZ>@khoݺ!e Hr*#84fB8Axp^'%̕a5uJȞ,nVttu߾dKXۻk} {&zYTK$Ǒc<={੧#Jv/5x3Oz}꩹]Gڣp|Pxܧ[z%t7P<ge 02C[C$E אǤ";_dW{Q>SR>2avvO>pt[MtU_K/''<^iE&Yʷ>k+Eufd慡 LÀrƩt4TS"Nwi7ҎkxlivvN 4[L`*ѽII/p_8y~9.:*n{1Ez҈뙯įGצ/ؿe ;[i8]_])(');%RdPPmw҂;!=1i7Gia l28]@aלͅ뚦5yKkm{'Wz̝x N_Jpe>8+a6&ptpBiG >aM?NqP$]>5.EzT\&L ᘧJ7D9ߋTiPOuSݫaz|aM?5=wf޲=r˜Aˎ|ɑ67rfYXIƮ\:i¢ErX'}^g C@R`yA")'DW6*zB2e]YAmzNl]\z|+^?&qRs Lu+mZ<3y=,}夺!]*yq;xXz i`@kC9NV?nY#KOa Y aQ0Brv̲ZiRscC02tq'fKԜMIM?epa}7OW@n]PE(*vpS-*R?I͛4Oќ׷czFPbճ9Ys5{HbZ=hX?ètuU "#5(/8ghV&xɖBb/VؤI^/VbjK;~+N4diO{yN7PT&A>ِvaA=4i.QAhH H հ" GƠT&SSAEv75cOMM㝦iTQM\ %]] ӲszqvM1櫇Yfs}}T;|m}e¬-8*m []zbݎp*# s4D$M[&Y~*uHef6 2ܳXDsB,]3WpX Lj!_ታZ{c./c^N|'1!0PHh ī0<F1<Á$'9 .gt$Ѧ RH,66"M#=XY|,+%zoE>=[YbFsVҙOSe$CKv2ڐ "Б@ RR (PC-czÓզ"H6k*tBtc6]>ϗ?[Cù5;yK1egM.zIJ/ktB{p;s ܭs_0B8"!yH#9*.bٌ`3lYc0ZUQ]Vr&p!S~#|xR\,UX'P߻_^ 8ɣHr{eI\FY *BʹL&n;$.kSIvbCXFHn5{S[R$`A`E!L 3َ*G^^fZݖ  r{"V92N( A&a @Fl5Lh`,CX*RL޻Z\mzp)\!Xɶ_5moŌ͍/;g`%v."z q3^o6L [/?+)&:(!$&Ĺv92c=TE)Rɞvn 5"HdyWSU4XUD% UǍKݳ2WG[⊄d5nx䍥s-‘| >9-^O x\;Zsb"#`B :N2߬kߎF Ç==)w 7KE>~TLbTۅuw)/!\ˈ 0%*"e 1l@$Bv} `ڳUFf#Auoa4)CWrؘh"Iu"La@" SQ z[Z0=h^WĖ>S.W! I ?'`+$y|A H,7; 47qL¦y Q.:"݉Lw:XxZm\aIjZ(kWQ/]z&ѩPJxN|+O0Wg'.\8r\+Tw="x3 -#N4^q~A&#R 4#9l29XѢ}쵔&/"h0kuQ)llYtxi;?M!7SSr7 z//5_x3t,@RAKcup%%#RcCȨjk5C Mʆ!E).ɥQᦏ1*%)×MKwl\I\~Mϛ״yOL4cں<8|֔Ez@vWĐ;{۪G=`&tO>6490>=hř7Ok Oo|oэih?_5iS>ōs>ݶܨFSz}TB@0aмBQ*lJ VnxCQGGo 1 y{DSQ'bj uQW)H-IHZ^odnO>3DQҩmeըG*>Āz`걱&|^M}dyhϒd!|9 Q(۽n͍*4GMcǔ)G `~-k&TU?x61چ0R;INJ4[)VowrЧPo\\ AKǨg0`xo8_?+ޛ'x3Wͷ/+՚W `-VQQS̊3xo?z E֦nX̮FZM.c+ih4BGSćoDZy,)$mch_b_-/Ʒ?a5u,f|$$*THƣ =?^Jgϼ= c5gENtӨٮ1I2hHtEʆ%X΍S+ZmƉW; u͉- ?1{JkY̎>H6VC(eo+#O$1(jzUNVu_kRfg1\BZSJ+++Qb\1LJ?>^~i@`Ix1ws!ahV U & MCӭK,Ea Р^jcoccz#4CaEN_rmde2U'(O#H}㋣3N87~Xy$ܷvtccܓ?lg99"W{~bN}hq:'D# ~ZәEF )b E&>jcjp9S=L^Y}d[nmq"kU=?B #g9BiHswRl<9,FuM %ISRZJ6AA.\pVmyޔ5 QjiXHU9 ֏:q(2gsr+5W2j0LUqBrLcLN1'ˈ]ppiem{ӂzzيV,'-W3[/QXuw!^t`?kqFA AYc5CŃ6NcTZCbϼ9erD}NN~Y,=/XJS8D:(fAQ"e\ GVWKq)[K,=˺芻OTjFIT ѯu@. ܣVr5Ԗ{2c˅]/oXn{\;rm4E 9VK2vK̝V62tÑ,3tYgKf&֕SxJtSHKoG(;jW8 {kUۋˌq%M AF {,R4T5 Q4qoR=0WS]z|K{qtcvO)#cG̉P '05Y>0"bE4yaW ׌`<޼0?8K$+z77HoA$T#9?6lQLvgM[~ ݓ4xYϏU3t .hB\ztЈ[;1kUIIkI?}lSSgDMU׮]r5I9kf]}b=X\^ch0HK(gv$P!Kd2FxT/zV*Y8T޶4=ujKteo-=|tm+gz3]ZJd {wul#Éw9VK^(q;QCIq:juyKNeP^Fv6<CCgZ*fxT}ObQ;̸7qLvGv|P>z?IP2r #[5*OJS("{EO1:I'G+Z:ѸeO(;Q/Bwji L7'u\Q?tzoʴfܿЙoORP{aRMϷmMrb틓3֗/~ .aQH Pm4C5 pXN{U5]F/n5݊?>6!ql̕\qcmpBv|͵f+Y9 4hL`"XA":1T52Z+tbiDO8Tvl@Ba i JPCUJ{;PB0aWo'| o|9}' Ͽ#wk/;?0PjLQ~TVWCR0, ,\ $b/־< {{w7MfH!NЃTЋ "DX)A|ޕ3wn6~$)gfΜ!R 0Ym+MLgq[6X ,%T<T<\n]ȵ*0dMO?f0|\`uYH~SjWȇ~ӕ' *:yȪ~~֝ܗ/ѯui'j W\>1>:3p'EGn1J=,ʁ.+'ԤQNVlL:fF +.#EqD`b+Ec'>Ƶkny^wh]t~ i(КxX|#,m\TN푾%Gǵ)N#b0x #̡I\_n=M3kpF HW,ZqQ K GN"_4̊h]dg;s XfGcF]JM&6}/;[7 }_SYfa]:CG_٩=6o_>~д4gկsmpt5<:ݸzAYĎ얆׍^P6aB%F8:qRۨkMS㱍z6 Qٯ 4\o=.]./~iU\;ORHCRH|Q<Ie nʈa(‚eآ9.4)) gܴT:2xQxSQīGR~t]OߵF4iȑ0/0\oޅr vqxK;vvt}oުv܅J.tSh Q-΋~p\TӤ]<\a1hh:![C?KDioƏttקe(],N0 nwڶm:U"Ě7ܖ>jaԙ [tҲY> 7 soh1IDb[ې3ی6I=0`>t}8(,0ug3ZBdx;ɐҾËc30~j$إ }C08+dw+uJHsOt0l *bPr!^Fl!`p[,oۺ y|3{ ؒh. .0Qja][!~ۑ%mv޹mFlWЮ'gVT8w\Q-{t:vh شn8Ӽefs?\EZ5?na nM限:wL)ߺ|7,lѽ{žԝ;NߺuzQEE{՛hH[]D0!\bQ*mqA%]Ďb%,=jNK{CL];`8̡;3S$@5 a%*$+d]+ 2fO&]Zv7eSBwzy;7'_6o)ul~] dpPI2OF'\d C0bt0Nm)3Fr!׎PfzO!۹GVR`vнC+ѡJK{\nѨu}3tt,IM;0u ??<8?ā>۴ 1_S"xX8`4Q' t O3c? X+[hYi9竪Ϝ4aq*Fő%nhuĘ=ӵua5tPnhGAN06_ K8``AþfCgD埸qxx2Y=GN .?$KoƳMb: }cXai-B ;wFfMվ9a\qGkBŀg]ĉgM_>xu %޵yv¥æK*_[8t|W@7H 4.M4DQ6 @bClv>p:^0ܦ*+T(m\[X{Jx },D6kt8I*b<&$KIկDT@ Fb>boE$r~k`Dt1Q!Na ~A[!G;s͋Nzso vץTM>>Yxӵlܵ ]Fv2u~ڇ]*j>]PTqC[={`kX;̳ϖr}xsB0J1x#$Dܔ5V)#Km%9[u7J cQr~1%Vb _'>|b^/ڂ n+~kFv״sw[ꠦ/==Wq_[h:윴>.3j_lUj xiʋޯy7U!FGOaO\5^WН'ś$Ĝ rgk賦m]dשFD y57&F4K}#m+w㞤EHo5ܠг!eI䢉=+3-F\>ql$dȄr[%q߬˱-b&-#noJr||h(HP=g#O`2(̢88+O;gɴs]!8wV|7m" eYg;O7֬?M_;Ƭ3 !9l}CMu4Β$!w200T2LB)TI^#РsU+VDw]ej' }֚R֋صw.ӟI\ ye|H(kƚf?FO'q:`<&h W;|ɷbr TQ!Aj_>8PB9” Sp }c'"9VeTE>0 xtPw!U;vȁך%}~nK2l3MPOPlI>~C+_ 0s֭86eSZo}CEs[HwEFT$XI #btm ], \O_ j:葳#;R[H\G.&ܹhnmFm|8 ,!%#Ofz(;Wf-(Np3D#4]&˖F2wY>3:`o`+ҌٸS[oϸ)[1J3R< < ډ0Kla g}DYR@Mx yx Ιyn<~nOydY.ɲKϮ uٟN/lP|lsOBCS'^z!-p]3>y]Ƨ)}$r>ISF+1 N(!X|.r7kYجu֙)#bc~K9nX\ azZD=zsO-P"6memn}Su͜0~Vvںq=z d? =7&N\6&X\T5L| K#lպJL!jD[5VJ]%6 b;cDn?.A`%zYWzyrstۮ=g^/Eu|C/g.XMs"C7Q۩.,0cyduw ^*u;_dָȯګ#%_+2ehA "\:Cuhk=YWu+SpZav! pRb NBFh::ɅXh^- ˀr_kS䫊 ܡX ) [?27Y()ux?>V 9M$\bE0ӵv(R>ll4k\ѸNrF7QCc`({¸ھ=wXrRjkkDox@a2ݑAVY @E#l Wɵ߰y _H=5A w`8.ʜ()Ƭķ'o3;XWox@o͖[j0cOĆ ¤(vv`J%;>mMز%[7bi4t"۠y{a[9c!G_D!΍ĴI_48Ѣh"{o^WwգvLyfkc1I]4l…C-!/]Fs :}мm7AIkĬT9))@k_̤<]N n$5Itg k7zѢcZ6 ]L9aVH%~&N/#B(DYhV'a$Ý@x!uun`dm/kuoWGxM&hKHYS1Ϯ'٬ yOx0*a.j44qڈ`dpE paɥ  V. 3\Oɦ@.( 1$4D]ciB[#@a}ZJHAw$U'm6c~(F@ˉ%_38҄CW*fڱ8~~F$1V* N`g/lm;h\Ԛ,/҄MYG <SYb.cL^ ӖJgCfX (D؉͎ڣ0 96lHy] @EA (7i`,ktVt@F-^~ەvTĆ*Fh]hV# ؕ?P`YԔi7ig ύ,Uh,ڎ18Pb,t̂ΈkT#iZQHỳ$G=g׵m+zi#f4UpR>hC=l`J4aa䤥i0+#5;-[Ɨ] 14KC.(4}fào_23\ qw3F\6T:Cډ'qdmNR w|-u[6ܾoxzg6iVD9.@F! A`2;XIVÄxz,wLGU>|6S[[*<P+QYx3yl +,^fwkY5 .:Pj}:i>,G\"ZY6K rЏ|vNI:W ":ܗ[[׈w~AĻEvXI&xNex(#lЊ>bpaDekN;e1BahK$;[TgN͡7h}pg9u^sa s e5oSbn=_ۿ*5+)uoyهŽtY*hz$1kL7d KTyH)ejd2:76Wn$buPb,I k j'0lJ3C0cڭn|Yw/֤/ۨh;Yqj ܵlH˳y702 y>"׈PF&u611N!+E&CũjQmk?GdjdDl*kGxo׊K[civg"830:G r69 2HbwD| \~>}֔IG뮝hupϾq{24+[Y󎪣nt5!z^;}YwXPōw@!rəRiL L1te8 ]B8|N~Ϥs:7kcëm0/KDOn7ոںxߞ 4vx#!@YbR E ـ48Ծ0svc/7jX^8ڈ{&3{*Zܹ07/:˷=}ݏFa{K#064F}ܑ&ryc}:%bZ=r{Τ=Օ< l$Zi1Pkg2S*C})HdXNgv\ S V{scȒQiݰo^?zuj%gV(ޫYa9S ǕAϽ2Ӟ4lQvV\4|%<㗃l*)z.7tH H< ts:5|9_#`z1KЉ3ϻp݄x>‚} ^y5{B#ѽߞvTQV<`u GNS4xTFVUj`*(5dѠ,^4ۣ}J2Cm >Y{<+cRG"iŦnw="^[Vßܾ\٭o_]>y@+;BSa ws çϘ1݌I!H-17D w9&>vgX񨼀ĘS:U#YtWxzKxx-;{.iq\2KC"1.%tuGc"Bʗ]\]o!m,4"C@7D'^NcJxob({!I_b@cRLfȨ+#:FCG& U).*X񞌞nxGoN{ѻ갽&a9^~y@6>fm6ޑXGNK@`$Z?`rV1닍KtSb Y? 's8Gs5ArՆ≪*TH0@F\OPWYH_0))ɓr{X6Y^Q*u*$ ϫ_ k9*D>] i.bظR7uʈR%1+I;fiTiӹb}v F ܄f:%YjlklR5V/"2`zrE@+:]-])qto-F\SG%5s\~qrmRv4Z*/{!!ژ'#G648=;;&9YYR4 @JpK``M Rb jq~RN?_|崔i~ώٱ7~5[>:wk5hKX? [% gܽ̓C UtRv[Z>\uOmagOqَ4ԓxX*٩R#k30┌)2D ($_8vk0בR_$9tQ%`2 L$ (@'NPIdYEzAlUq룷}SEC+s[~Mm<,ȀBLFXD9cr%i474yr#k9Ӊh=0z(=pbUkD*g&oo>ŬaXu(mfrloXG rbb1 XaP0C^2WlA/akA6564utL8i#F8FNHHAAv2[l&D0w2 ;G}(ͣ-339̜̜dY+)Q.HuAoYFd.t4X=fٟr"G_/ԁj}W&}W$$Ia]aM(3)` %HH"$!9!9*>*0c{A}?WnV n} )IГ@3bw:VN(GiS#` oK-Mپ]YV}h E,5=5 }5fwB GC>ze̵Xq%Ί1{qHXۡ} 忀_1_V).jX S>R[eq%nfyʗVF$\ሧR?ŁRUra\ j5Dp򌴪CKTgE `ZÜ,DO􉆐obH/j+Ε+c>OifŀO-]"`Ga?e͎;4[ Mm{ު4ic_̷$ڈCFJ˥U헗W$xS\w Uĝ@h"0BK4Pe+-“*ӓ Wbu ɪL E,JP| ?1qŜm9yby߲IUX/[z({fߣuܦت^tmkFtxJ^30kAA^3кbfs{;Sܙgo|vCeey[,HMy;M!c]Liջo?\=a'e"4UQ5Xզo'X&Z(u+M[!I%55h朗'Sj熪^C} TEݦ1_p:}\rQ:ruQ:<2dTU)oNx-t`1W1巼[\9A<oQCbQل7 VL @c833yɕq3!]ewmvk3VXpl: AyBN. O.PNnۤ}FR^xLnIIpmW,"BT^Sj7T M+ 䗎ɠMO~Q]jsH!į s5lPv\b"B4|Ĥk*NRcg޿lgjiOq.߻uGؓV9jۑ{>'6.W)/1d7m9m9Ļ\rAA/NEUuI F(#hn8Z%$V[iopGp QgZӸ~Cߐh]0rTl.+YIfa:yJm^cR1dx\276AYD'ܕvDrH8^x9X=@U(8XéUNs(n8'^^ `́d?~KWJNM.7~eM9 t+YF=xB+ݱ:ݚևֈ}P?C7CסfdlFSS4/XW]NDq`HC.[ Om8֙=4;c^/~,q\+ Zr&)΍u"&f=ҌSUB "G8ڎ~!+{ sǎ&~B9ɕ?*FN-&msWFd_d6e.iҪI.ĝpmK?ͻ&¼BtG 逦a'Ãh4@ ;ճʦznk.yaC{"ox͊+*͟++xCUE6V{+Go9nou^#g_P:P y9ۣ{gYg͞ij>GL;E=4av 6ɪLrRˍ@!v`}v\B:~287k;%!wQc5#Wպvqţs3) 2pИA,Zz*չ(3p;e# 4ԪM@97j( nQ+2]D+~Q >Tɼտ}֏3N'`4J! !?Ծ/Zusr|5å=7L>P<03(eQ@ -73F,ju=C5lH8 \PP>[il.[9rNjVt5 -x(j4S'ތc\l\z7}A_Z'gSk@,*03V~%: :V!K:w]NL]\Ort/\.FϙsxLvh%$\\<3h?+܅Lpb[U[W]1#m 4x 6y5Ys {%!"Z,q *њhes1zM)P.tB3덢F(k]62̮t!b#bF }CwAU>47s5D!w+?^d{i9;7 /I$Tʎ!@xw۽'6k]9C?#5jxOvҠ2߬˶.XuNT3crD>S񁦽/EySe(N6#_. *:'ω!B.`שqy-6ENlִ'Xiں}yBnSuD"-- TgHKʰ~>rݺlּ]XxPLf15-bw\GVsCy_4À+6 KLjAi\_F2Զ6\9(yB6\U<<VEaq C"`ZܚfeXBzҦrR%:X &s:FXZz`|,{"Ic ֖W՘`՟`eƌeoެigM?1F|y\C)j#wY+S*ehn5[yVRBzf g8SbfrCʒ!H^ZDxi ~٩)H-\2{ر7mIٕ+oXh;kƴ)' 3`5e#)-_ܿo=vnڱimqgOOoPnQQ* Rͪ?^Xf;f͛gT3v\N4-hd S/^ ;,!ς>}zɓym 隔ǍZcuS}I֍DW>!6LL0ڌvA$4 5ݱO8 ;1$XvVJ2G-|T:.',osQ46`N5J`B|_ ۍ_k%NyZ*m^Ů[.nt~&-Cy_.vS(! 9jP Eb ͈n'JXauU-EAq;,($=EQK $!ϟUG ϝ}UD >噘E5 3]ޑ+UFZ_ULgۡ}x)T($q,Rg ϦG/3'Kc%Z:ggu'mv!ƅ$N 4I63 D>6brqw"c*hwlKG4R:kCůpi~%ЬSA4Pe0X7Jl:陼ksF=+@y}hE){!~Ah:`lʫ1H*gŋVb_󕍷/sfe* ?j hsF-m3:&iߍ/&\ iUܯR4b[dy с5XQ:0(',Ri:EQ&t:=գ#Z]BQg\)!hs u DhdfB4NY$L16g1nbM:dvzUί!ܲ9c(+A֌_CGng y:$ݵs]so/3M;<Џ-$F N`@83x 1ʢP_W-T -1_mˬv5D|/_aOθ;.^飏~:gr܎g&]7ainL6 U߈ c|[h+1ot{lU?^ɜo8)1"a%.Iֺld /JB~b>R=O)BM!D3U0@'!(kʲ7⫪p6g#j-5;1zTebhk g/|][߱aZR,qKIńd#wx徎`д2xJ0m<tdxű'\@>\i8̡%.ݙ|3WH:xm;yZVJkۓqLVڈ:)!`+p u)=I!1OfFXOT%z;IrT˼tySED;f{R*fq`NKyHUasma.(Fb_JG`qu`e±pG#>&Z J3GtM=KQ +#Mlr[~P=<힅Kۦ3kJr\!9h@44oda-5HjvjVzZ|\tTYI,h6@ YR=uϕ!S;򟎉T=;zL> ss[ddJh %^+ܖQg f.ѲoîŮo[aXkUUpӪ[fLi|xĸg'ӣoS:a#X½2G߶W']{vtGxUrZE $KR (:L tc"Z`Qf\;Q> ,g0q5X q&)|nae #vC׾YחÀSa#MO`a&79K1ڣWv w uXihxIYsFY3qtt e~2NaâNGepUf5LUuA]V2U)_3q$d57B?{wG'n+N^2OncܑM"* %I?=z>x%;e7 f'oyԷ5͗oV}sٿw͚yqѓG?3uLY-H|µ++Qw7*leU|LxVgC4YJOnԥܽ.jk)^9\Llz1BP1',Y~}j|z>sn݂[ieUUAYxX_Ԟml7z{8qى-j^__f%ᴜ&~pD:6NxP7"TcNe:ݺ.0 ` rZ'nU'ᮓg𧚙-rfF<{9'o \"fIkn /x󤜟\Kќdcr_/W aZ[]7Vt:Nq!S.%@S-9⛥ЪIgGpc(&>Δsxpu",?l/K͍.~VԊ3P0x7 9G圄 EWgJ;R08o#~%.`چy x?LFJJ]o T5/v֭c1 =~ ]+ܽZ1ޖqB+]Y7}Te, MImf^J-I\vH×QR|US2\St&ݣ4#UܫX5;eX0K9)1Fdb8??Unn?a=y4c#.wf ud+MOnYoi/&(kJ+%d̿ԑ̐JXG2-cՋnBs N=y9?zNQ.N},xn/=zc f_n5WOT ` o| IiA?k|o(4__XBθԝN`zh 0ovj`G$8 ]QjtD;xvj~dz:'G%ve:u|JgS^{]{u:$#^gv>33oz:~\x;L%bbIH$sl=_Iʡ+҈D0%$Ǵ i~>q)6_@F9#9Sw:=W(~sކ ngc}g3g1Yٳ1c̈́0y ,Ū ]-v2uoC_GhBHbq(GO#:S1NaI!, LCBu0H N!  hh(!]:u?6uJ28 he߂ϙ q5gfu}kz_9}}k۷l޽ k<=w]壁oΠO͐~wlٲ}i_T2Q!D'-\ ᶟCx{a)ب/d5r݁]k;%iS_@D̅n0HYvqD[˳`'w62}|#5;lKoEs;]b͵oe%_*wq*Qh1uTvxaq;ޙT2{)2>6BM iϡ[9p0t1"HFCCnd7jz X yoQXV w!z򊖍_QbC~SA͎:P,Q>?O߽Mrzry#jN;s}[Wmaܳ $dVH6j@6 fF !p fum` F4 :&4 HR͚7kUVTQn\Vl3mJ}em˖v]?߱Ebؤ-n8|X;gS!S*/9+.ou'u3#1C,V ،lxQvL=rzC1jҬ@oLRj~MNbtԖ0@7HjAnnɔ삘VK.>,@mi0|-\5%]Qe=7D=Q8nxCeRHiMړm d0#D6/ck҅^|e8]۵SnK:vkWۿ} k}|>zOӧzo[&Mշ-k~_vȲ~W>&f;_`/6u/$ClgFRlB[*|UI~M,(ɞu|i%_GRN=o?̑Mn^nԧߌb??fb{P;GqTRcIK )1gI4e9lms/|Ɠw:kϩ##9x_]tKO䔎)[N2[M:lCG_KkZY˻(bgw2U"N]l DmȿeN4ԯw^5sGoe*Dwn~O Q 'ƪ4Gu; 8~kSc.!Kn;abS[F_| 3 [r;_Cߙ^>H;tBiNo?'`] hɵk M8L4topeU(a??%?5^ ɐreO3daf`!nQ;gAqZ0J!t" u,!!4B Gwˉq{X esQ*R8)P-ܦkc:ѣ4On]ڴHGPTаG"5Fv? j|3Ǘ;Oex(t v"Gm[[7]#йnr:c&@7^apE)?oQ8I޵SǶCa㈎trչXNñ|ƲVQhqrpf4BT@9YX^|Ş‘VacGcxK{CroKrNN/&c+N|lY|%_hb=e#kVӾ/!/!M ?߶wuΕMPmcu Ϊ* <:TWie)/ԣ*~Gf|]87w Ll4g#ｼ #)B;yiEm2y{{k{,pP{4L}ګs@uP?Msu'l}g .-@%1/4C<,דI|p[*-F*̢8n3\J~8{ ߽/i sN DI 0 DLlU޵^] ]C=޼9sέsO]].m~a˅ R3ӿ)Ϟ[}S_fVBP]]|]ȵ"ОbeuzU z} ;۪FdGÈ:(01TQq౯Z' 8~2{NAjPcz3ijUNlZՕ촴Z,q=rw{&x8KWq.=; rvi~'COrX 1LǺO'.4s'g |aZ;S.ΎPh5 d~,Pd$m}bͦJMǬzBҥo* _ը'ɉ9ذnӢvByQè*GES1T5Pt*ZLQHƄ˗-H[0/5yFB|ɓ& C]57QQZXQZXY);&Uݢc}&+T obqaFdl2ZsWiy'XaHf⚎7~ܹ!v,cUn:xe;EM ^WZl߁]l]ض-i0ДPrC4|_ ctOJ 9{vmߡ=U- ޻1׽ڮ{n_/S ՠj$%ge asneD llaiARנ]"CvMyt` ZvSYlM6jiy#xK;kZ|V>t PSS3a p#z7|uеX37|NldgrPF)!0\ʘ e~\;@2׀6KO'G+n7kZL[$0\=@]i8z,:hY{h`HlIQ&Ct*sPVӧc,tX͡p\2; UYʍYEǹ[wvfdhTQR{^Vz3b A3UW7(HeuJ2tl2M4blaE A^+¼%w5=ʸ7s%&s6.b~Ȥ!6]48 iq} NCBkrz#}\mȱ >1ΎHvZdrr7+|ޞ!kI..(>>;9'0sz(w n1<} @wLl衰6qF6an] ܺuܻa^tEc=c05)EͦdjUU7!$kh_A4F׸qh`g“˥a0-,/}#G #nCVHK@!KGIĎ >6@e &_ >cxd" 4M0_0.2ct35,w5p!p `-mM!=>};/XuW^t3\b@?Cq>6f3+5֜娎u+ahTLZCF䁩Q)vf0qB&JWi:P8|#bd5 {⧻N?`Ɂ3/V~~O97nHc6z4u4ٓ g7脁 >;AO Bc7iʩzh2+(hEN|Uqs3/#!9]?iMg9ADZy;cD~mMg ɗMwŸ1.bf]{L>)P"P16euXV[MMQMzLiZ!bѣ/C`%0ޙ_#?;H*hHO>?JӍIxD@Ky*^sl зk i)B^$mN^](5b!}UDup^y>c-0}~mCvllPoǠ&?k3%=/6޹qhKA/@+W-q I3x_k)-?M*B=UmkRUD Gu2}25-g%4wL !Qq٢RRz,.&$] ꧒&ײ|}a,"u,^c@44 *LjQjZZxpX! lRu4$,|\H41@g1 #Z$j94c,P

 Ty ؗJyLQ!3Ԏҍ?l+€! }U&FAd)gy({ _E_j|O yHAc?|Zs{ufbbFfb"PXE58ijU*MOc]Fgu[3 Q6Í&Ry_nSTe2ktoUV _ Gv JWUq #loOxD'>E;tbh#{Zz!4+j~\wԘaN rvT1T|<71(EtъֱD[ "&NB`$Nyfw=Yp4)jFzBeR31t͡=7TFNH:92\E'31Z3]뉉H[7]8]D͸Y>ؑ?zQl su+:iLn~Iw;Hٚ9q&:A*ꚦ8 Ǟtz/#/&/q!*hUpAo{nvtk ed\_jL XO?iZr4POX֦G~?'`ٽt}Ì{,+ٷ$HYmS * *3;kиqν{w"qo{y{xL,3ZGE"&mj >nQ{#--$}$?<';oEv2 B h MGO8&! 9p5 +[Ü.F{I1`F1^a꟏0m0<([իT4 40feaW _w|X ?'c l{l#:X<#}AB6FVwF}||fz,gܤEyxӸgGgg-J˘+4b|ð r+&:cE(,OӲk7g@6 [;1Z+5u\-}}ۑ[i,4zJ/81 I8.-m„tUVU%%yrI ,ZxE^B{#d;ꗜ?k?86sp.8ҫϟפsN^AXcCx*2pZ MCU|rwz|ś'pOfLJVNRD6ډ&t!ZS\ g79rg~n Xz{]{O^{ys^^qN_Vw1;e>]y; @'"qK~o0m__f§AV$^pޠS-:vƕS* 3rS;.z6;U29c_>z Gb}uNίᇨsO}ʙGg]:;Vy3QOes^q!.΃ SEG|lwrdډ8LkJ"cBp>i,ZOQ Q¬ɑ)G§8\z2A֞".99,6ҍQUSeճصƇO(6 Ҷ4Pa-k=9 @SGe?*򠹎n)[^G<ɢ9*cg!ffJ^nUI|C5Pswш.c,M8/b&M6VQ"BA[Ř6"G0e `}!=ߕ;ϓӁPgrz^g֣~ *-\^9PK^yVוz.ڍo\^r;VQsT>mrXj~7.'OEvmy&œ'Ti-K}[#: A;0/n?P G/|R\ D <Fi/ykqv`񺠕P^%#6'6ls7ЧfqGܦr6%DPtЅE\jSr 7ɵ"/WZc!q,|.7SVxtRFf5Q5Cց@hvJt?_}i ֡w p-`sQ’ysr06۬Iy&u׊׮5YX0;9w1m0eqf\lzLg"0mj׵7nk] bo]s:tԸ<1sֺ{@' A%U|# $9^u2 yԄb::i(5ͷ}Su VEEEgY#|js t[2:d~c#> 9~E>Nk.\5o1/uc3H>5QUF. fdI#Q#bIeYP_+\O#ϥ'JRML_r0GÖ$MW,0gЯu5^}eq<,z%@Za D/%dnݛoMv?R|"𡭊/ ñc+jL'ŐeOKEYIah*P~~JʌZGinJ!&Z(SSd3QuH!52=P&)Hi+ʳɋxQeDdN"M EEom|K._nq> R/S[`B8օtٙeI+F lV2I%YʱULœXm9`+p8e \u>gzϬdgꫦ`P@V^r*u#%H~85KYjԸ5CMlsM  ٤B6 m$ä MS!F*T6yDݦk>@x(t֕ li1-(28-h n%Z S )0Ȩ sOA]nhBBsvaºI>Y@fVBL)NIH<>v+2lgjSţ<0>e$PVl\>9l+M )cS=;}w]toţa6psUzιvjI Z}9Ņ"#P\z_Or!l ?'7TP.$fnXTm>@%ޕFCI,t1tp zB׌ WC"sX =EW*#; bT kxSs J5Jc])ķ&;{dM>=%c1 MmZ#rT% GDkyBod9qCv'8/6+0;+465$f$:%!GƨlĦ˒Gg.G!!( 55!$1HԙB[Y^!"@؉L:)}]>Z5y?tB1 ""TQ!6k6E$*#b\},~l;lilmk\$A, lkCWtLzu u-dwת.F[H*]G} чE$>3iKA*͋#)(1n3gJp%iFgT&`N}lKOBbۙE~ցҮtYmEpNLh:Pt)} 5~OJ7-ݜuӥmXCyTTj&)xȷ=^RbMibd&x^2@n( a ]9|&1\ lY0˩`0>ha @'ؗ̃Ńn5 #YØc:x]7-=[O9p1MdʹEa6#GF1+ wp{@ȣĜdEqg86!yzۺۺ˾%VS%Rvi̊i+JE&pppQCFM)m^RkhnwHz׎W#7E?oj_C>BGaT<%FZD0hB#ވ9͹/.BrFVO(GNKN;D8/v䐉5:wn<RuW id y@GN:J.CYxG #a:˯uNeP|@VPC=]$exHڐCMT0҈nWg5c;de}wS,yOea:&sqxW?07B cwv`mB9hC~ޥߒ>^vm%Ot((h}žzWuݼ*:cNO eeۣ ]ڃG#gnjv#>2{uuP7dyHrQ1R4Y1+WT1`ZƝăd9-sX<{怨 )ŽG #>3{_KGB-ϱ8VXfݎ<;x"sTj$ѺHK<1TdLGv<%o_{!:Zcd}?6ժ$l6B7b9ȉc0PFI7 mOվzFYBRgOg̀j{zDr%'oR<_?'u{hЊo<*8M܊i41gLI+neQӼX'J`v÷6Ҽ2=+Jzm4^?od˩i%p$ ;7N_?>K&.'_,x7MZMO 92nIϦ$ջAAPÖOlQ8f\ݙ96=U"p\b 66u[O&fӱb6O  `iݼKz>qIIGrqcksx&NQuj)(;l߿:i?~nZNoR0(G{,ŗX gj>>OnҒ^64{zo`}h"mpbQP=%A!3'y ׭]j rZvXg#~aVCkƆ=y Y1Zד8ڟ&G0ukC&Ln3͛y9C4& ۢ=1ޅ=HG PPj6Yct{ȿkTf BC׬n}f~ЄMmYd x̸3=mti'љ5__@<6Emx3qY5-Yc~|<~%ϥz=lNW Ctl|w5УiKF6 )[GojVO:ҋQoUjv~ ףi\tgxiin162*<)fm^3@[3$|[}'#ۺRzZ|q+jqmnbl;յhI|/y]/oc=evd;$sjF,٫E@ia<I<ܼ0lf^n4| +y-CK4a"~o̼oK˱c7F6G:g%gSR!RC^h(JUeӾMD'ѿQӇR;nm{_:qf 1-"+L.36%}:\M1y >uX*QAϘٸ/H-&z&xq1}v,54z7zu/l>:u{WZv\fc!(7b@08%8L(5j i5p%$砕sxΩJ+e`*;Ll,Zgo%+FNhSqfToF"Eca=Af`JeMx+}q9;҄dk|wiB[)O_+Ƥrd(4L ~p}4T\i ]1{LJ;.5} z x?iR,QJMY 01JiƗE7[5914uڇnFȘZּc^<+\βV|T''@aaHa:S̐ ғW/Z߃,7y'Q^P`T <;@Ru㕪A( t}jhIWk*l<0gq] U y/2u|>-`/0LŢ߱]9ꫮݸ|6o\mݶF{Lż'q [S|V>!| PM*l% 90.\XT]s9K G@r<ᕬ)^X>a[,)oE<@7.3z=F7 .b]@"qn|.o٬׻u_O9Ju}=6哏[ӓ"_(x:7=d;[I|#~ zͮZ{uoj}{_-}| $kǢoe9-=\6}ih~nPu 72^^NpkXY.u[lO3毢M~G-z3YFo֨^wGMU;A;'+Pߖ3K uM)WuIǢyB|Wt4}vDkHj1S/I^.)N[LɲqJWpԘ^9kytER4ʁsۯXߞW@ŷ?=kآoe)-SїfvTIh.0ҷUavoI]QSB 7wp7*4*\Qp)̷x? jzJZÿmʊbgZҷL/kԝ@UY@;p[oM|Z'qƕ#f݆I|wCM߉K=f}w>M ~.Np^Ǜ5?( g蘭|g{˗НPo~owB[>LwU*Ӗ#]^=pu[ߝ4}F8vc2|w k߂GOVEn=C|߂B8*,n(&P=p:bC݉+4WRwgf㱟=?5{o.dwպ W=__ܔ/>sgLUhzQ/8?o}r<>;) ef{kO]sϗqB[_wt|;P>D=pI=3tI~묐nw4?7eURZދEOz{tOwE6e#EtM[ϩo76߷螆wؚmZr,H_*D_ecSp?wkW毢^pwámƢi *Co[}| k}V窬XYxIwN(ԷN4 ,>ww0GɊс<7ַW.?Yރ'#OG\F0O,[䵍ݗߑ u]wlJ=G}._p}WJyR}.AxOuî+y +7Kx`QE+{~ʗ3aɄ y`pQY ,w]cf^oc#+={t[x#4%HvzMV`S$d:##kد˗H1P<8Ȝa4?UOUq|iiZgk濥TCϳs:.hrpFEt}u(|YB\ UHua5ta&Wxs"3UmI& Xضon+01h4GqZ8TW9HZT/FGJu XbC(*atKaVuEeUw1ʂpP)յѡZ*kzRufS|&(Zg)'j(@5lR.PLǠ^@/ٙOl*sm镥ƹQ~#scלLZ9nOɱ 'ZScNhѺ,%HnaM|˜ZgTm2 7Q5*uchMw,|yX>A|>uW/ 2:QHgJM,mNLӇf'6"խ>˺BZ8PX Յ|LNlL#ɨY3Q##hvv {_+}&?kI|xO#3:LrL׹Tk@:EFDN's2nWu9jZ+Z;m9e(p`\6ƒj 'lم5Ik*=joƒh6N:IK L's|,< oɼ3מ$yÄ95Hr:[H6-S|6^hؑ! a6E|?$0,& \G`5uOoב qoi:hrKt4):ֻ^AUr[U}agkVN9:IɟU}owxO;z-g:>i7vbKfK} d-vc%T*N(TH-4x]y d嗵}KlVvXUL|.x!J`{$+ +f1Ճ)*ڱqyO|H˜W5> 'fhl{U5IM kSJ*BS%K{눺e8C]_sgAfj|L32M_Rh&8f.P9ct8 :xKӵH?ӻnczҽh/vіU'} ;ɥjZu&RƼJGȨZudR'ɮD v)Mѷ9 7>&^sIxuc*KE]ѫGC؃ݵE=;Rr%O%!2UH_zT|S b- )\Dǂ2[9O|պM}W?Bn#d]tssO6R>6\XNH:jJITۈ2QpbywwV0?.>ï764Qt H5dsdQBvlDgW@lt+Dk!8J~٦h3KyM(PF#\^ o8_;óa%*0iHq!D|W33%Tk[60Y C..)ONv!+<,SQL)@5s.ٲAqa~=^1Ii~ƒZ35ğ7O]ȍa>):S4)@S'5 ?9OzɄ_~V/ }Y _8WO$^$N-Dt*i%iBPWw7t=zvGs^@ gkjj3iïjW byznk}·T>y;́; RY w-7CMmZO}@6 Y&pѿDߊgE|K:.gI:bt0Q4@&w'_?bǶ8CVaV'(ќCiyza@,G%bk(? /k]A&_ yCwq8p.].={xQu qdcUz1_-ץP-G2nBo~-,\AOueʝSe>HC\z<<0Y=7 wsޮү-ׯ[үf1^+u }ׁ61#ܖ "uЕ@|wo᥍mB?ok#;*s- ,g{K7P7Լر}-7nakÖ^\NzB'YPm.Jd+J^q ^Ƴ7[ ?GA AΛ\ *D͔MJ2WY ayDFϜIi]ox 37oXXSd*z{5knݍ;݁MOP3|c쳋&7=HRםyExApsT_xj1cK2M];-hn|mѻ\.F-dQNoc࢔:ݨ]@UzBU/qhXaiH`qP.jI}ë=xr6Q&S@cFAP+T\. MG6m8i^hw=Kw;ob7 .S9`| blJ~(_GjC=Ezl4\sUS;I;蘱c Mi ^WЊB~ JM"`/p=s@s3T-3KX&&tNI6x {0_F)vNbyv%VNZ0rz+3guw?w‡G. {'0g-πn.w[S|>\|]EK}+H+JӬgǖOT!O`S-):ajWh,ZakY:E/ꋦ`'[/_ye(|5=Z9u).JbAz^P,UYg,mw{J}פ;:i՞t^ďYwxfOvFwFWk@G]ʦޞ:q^(&KşRX5* L&%] B_Ou 4^ 5WAw+&8.1JoJr=E=')f֒|;Kpf iE'w&:{#:wOg\-ҟ~)Ê-9Uoƨ!TaO=gVs…,]>*%}(r2M8ܝ^tZ5MWZrއCs59?$?,$ ҁ9e2{|k֠tf%ڊ~V]*m~dfq'p=s.yD~|SJ7lٶLzrk?faG/b-u|ཐ8;b>_EⅧGu?=mQ͇̈́N܏[0ĐaXDeYƖ_}+?P.&B]eZ*-yC7<cE?l?[%d.,e/$J" Q/R򛳇r7!1g*j)7G7tL}a܇πz N8AqDgt͂ZbLX?)>(ZXϱ-]EC]t zsF⮨q ˕oŽhNEu #p)HGGT>ᡸJKŰ?!˲X^gZ)܀7gbx}|ja_ aT}/1c;x-^یәj2QK¥6F7ZYDLp|M&ρe nĜ̉ ϛإ j qJB=,=7]o1FLC2ӖTɦ #u(S袘ws\= bkxS[CG}65:(,jUGt2|,X:9#t Ml'&no9qGs~Yl2{;ܧLD0T,89ܪF}jY'͵t;=:ZbftKp?Ń*Y;πGN[IccjGA&8(ozbf9Ҫb7Ka;ha; 1ӸB",ȧh $Hg& `0­蹊\,ZnàͰl!T\?a0I+|q<xaDŕ|?zt|r}LH59&eX-iæMõ z6U*= A:7/|_<֍?{p=??1ïos-{ 6^Y{)=_ xL|cP9bJ rUQnFT$ZKIZH1u BtrIGҸ΁7Uwuǹ t%>I R{*.az(iEhgu9[ H|w#<Ɣ:c~"znT/E8FhBqrM\0ΣV<8'?x81te,xO`8b0}Tt8GΌ CԚv%IT vg# kD )ГTgDN%?M96$eHx0h%PE<o`)(͢ ffٗtMOߍke,챂*.3ёt=ND'Tn5PsAwU@|/|ps}w).=n͞pxcK/.B* nYєNmTE[u9r w\aQ͗eX2 \5vUvsϊ'EýI]d\5% LSef\X "Dou^g h48Xs^6}*ZL9N'˻ %peM P+9e> 3YYwZ#ƣN'<{[E) HUKF2x! GGPM`nX']~'{:[;tO9JZr!W'o)}xQa^GG~wn/~ lYד-m$h޽F1=+,د3'O_eSlri#"6 ~9W*)D-]pvqگ|.Ov)=r8id!d2zn\Uې ;ಙ>;^uƆ-ªsy;̩6-+B!QdaG7i;mD68ߝl.}ns_d.; Cb+̠֬؀XW^YWR:z#%RV}FgUid<2uحFqCa߹[V U}z7S~x*ys(. 3Y'l[6b6-֒jlkvͶrJ"ڋZ1.S6(Ʊvd=*8N2m1OkZ&aa./r,:\,s/IWmE&lv,7>;#fh{Iiuȼ9ӯ[M@XqWeC'f }xmVz|+?Rm ߐc^f_Q:C~8Uxc`d` V+.|e`#@bHr9@J~ xc`d`H{y@" %Qx4c%Ummlm۶m۶fGFRR33 eG+J\Y3 1*\9>D25\cS-+]cLt9ҭ#i[5&0 Q͢s?+`gVuȷ!W-]Zʗ(@zH4G?Nz"0ܢ*d1<IYިIěF/8icgEWM|{F5U7ſw&&;OQؖQlzd+*ٕtc<=e'rg&nπ]JEZzE/Rݨ/jTcVD-d$FwZ\LsirU KYhXvUͧ> M{)s,0dkUgFYY mlY(O fZ #ԱcT:-mv[q*.k6>No.U͎Ԏ%/^%?FW9ԓ h9ZRWTrO"rCZ[GZ4jAͮ4G+׸$CI\DZ\K;pTꝯ.D8;egClڊw/?Q.{m1/\3U/@5ʩV6Zxv|[VG ;"fk&i玈6VZZD۩}@h(Cb7`hq:6M2- ($f%Ykc(LVwkzX߭_L pQn73Θ0vAYP*ea/ˏe^f 37\vnrO>X=T^3QT~vX49 a= }'_btnmMތt%5tsOQ)?nnλYΦa{.wӤ\eVtＬ (## 1n !1Lb9NS7x:c;o|Z_ޙ Btz_ ˪Xܲ[m<oX*~"?ުa@˾?衩EO'zjCSvo|~E/M^SEX_CZ^Cz}3)&bw:,g7i^/m5losz Q6p ^?&=7_<:y}L'O:P#웸 0s3qvɁT Bȅxl0c(ȄI)ȣ_R6%K*)Ƈ8LiHc"瘏rN*ޱy q[KXU gqEռU7sS &7x sY0|C+\ :pQ'·4.>ga*ǘ81 eH|NP0=g<*>N])w9l\ӣw\:.Q7Gi WJ0'Laӧ~uZS=ϪS9`wp,^;xD~m۶mۚm۶m۶m۶Ԓ^ԭ]#[U-!RHCA(6aa_EjwqF#7QHTcRK= TI\MEqqqq'ZHm0p'$n$'II'Hr\X)3)7djfum#IzgeQarkYIVM6=Cݹ˹y|^C\gRL<>ECEOqqgnqEuu?9>4<0-LMX310. RO^ Gp_%*a:E#M6y:Kס#Io6M+ۀ&صM׆~:M~'Xh$ LapU.s\qx_)PitR.%Iy|RtQL\zu\ bL>HFJYfqXkv-aw8gmNpM~Jb)7֚2.I$Iҥ%]%i}-$I%ZZk1036336HZ7Ø v̎*fC|r/y#s9\f3?5oY(\\-x)Evo⣼/,-:@Rԗڥ%Ғ}cae2b]yiC4-ZůVtO{֊k5' 1tukav1'bfp`ѻAٰlXneef(ʶӜϜ6 pXnw q#^oG667m 6/(~;7ݪݢmٷ/lqۂL8& ;;;;蓨I4(\].k7"yb#sI+W2(P%F$o@P X p! `G@(MLP)Ta! Ą  up`"L9 v18 5!}!!LBHy~~~6K;C )EʗdhY$<9ZC>#7ES1(tD٠+J2*U5UtIR竫85QTofHcĴEZv@Z9]C7Sº?*=N?g C@0p /rch}WSD4!en12~cY,d+G%VUfMتlxۘisrv}.+}AvڃƁY;}yMwWk"2w{MuOGa/:ˎێ' _G9NP'I_N N{O@]🵝-e߂y9<}p1~a,d^B_Cӡj~ azX\W\'H<Y(#c?cX$^┸#qnnoDu'1%ww]wd^)9$TSj$HStC/MKӯ}:Sg҇|*yjy{>5L{F?Gl'`P]n xL! a}n΍cDM2E6QWUd3}zI"3kO|1 Жb,ԙ%V吜*DŽ<2/9G0XD>'<̶Ѵ,{FvK]K麋p9&C9rJ/ 3V.W Z;| eGa ؟2F}ٜs< aWTSLNrdfsp֘U%0J-~U[){. fWmSZ0tԟ [֙mNaI6<VT܏%K2`'2UNpوgUʞYvY,lٸRB12usi\[q1trzPƅsYvPUT7|po`PAC1*f{`QbO߲gXUЬRH|OS47[_K-=r4}Ŵ#OmIdy ELz"aUE?:v~2Gc9%|˭O '1'j'.Ruy[jHw>qA3kss#* c.cB!bn;3Dh \!-VV9" ?#?&xlCby?ԶmǨmjwծkԶm dFhfN$W IRJ.C,rʓ@"J*SB*jԪSA.ꦻzꥷ>꧿d!fFe1g &d)ffe9gZd%ZfVZe5Zg 6䲝vyov;쀳nb$&9co${sniբ%Gso\=O##-v'2\Ȋȉ{/;Ͻ((((ʨꨉڨhF;`-m۶.MD%$ed#H<9,m۶=k?~WPTRVQUS70426153wptrvqus2Lb@.׶m۶m_ Qd)RI!Sl9rWPb%J)WRj5jթנQf-ZiסSn=z#? EqD(hQO DF4GuDAC5fD4iʴ5Ƿ؉x?#%eּ,[jͺ l۱kϾ;q̹ \ x<(zm۶]dn1CCs(18M0$M140,1<-"-2˭*:m&m6.>p+&q#0ɔL < 17|r3 +7/G302P ,lgVN.{2 ;|}5&fV6vN.n^>~B`dbfaec7h? )8mbX|%Ya R)V*3+RmU\ ]h)s5Dh|*}Y8YO24'67YFPɖvJ×4(4GOBoLeFь09>QX=o >VȊ(ܾqT2Wg}` c8NS Lm,ӹJ͒Z@\W5pZ^UF' B+uVlmj=CmID>X9o\l})kc4\%x,] aN4Jvj3ER?GI4AȟpYpE9nB3FF2}S1jLd_0oU  i6#b$Z^aYe'/Mu^" u%$<\GAu7Jv/3(ʢt6Qd Eci=94E%c DdS(ydPRX?ޤw|i *yz`qfwE3oa9b2A\ O}'O\,OjJ֠Qh"˴XƲ[9b}c<9bVEcV,؎#-bW\y *,,llU[`e&TEݯ!x݈NC*Vb- k&Gzycdc}J&!YrjűX0o'[o+@vݤʹ3>Bm0nMۤ tTLP?ĀygQI3wJnz_N/Ӏ64Үn x.7w<:6_4W%nҥLfw񺕘7%Uc Wkǚr;"SSK5҇Tth#U.pp[\boR8c|/dP"j3hb=˪P:"MY>$%E3QwL/IDo>E.;'q@@Mo_qH#&t.K$o.K\_NAI=qexp$?YԮK^{ZK/2J~rj9岼2B|pG6ѵ;F%(@7-V':(,ihߵk<x+021MݝeaMI 11wL|cc湎̇/ +?6vN.ṅ/ +?6vN.ṅ/ +?6vN.ṅ/ +?6vN.nȇ/ +?!w]i:3 u):y8߼ƶy_m\|YlףB^IIWmxp"(b##c_Nd . 6*(xo DzFdBBWh& I]6q3ima"@"rk&vl.U;#68tDyj 7v0oһX+python3-saml-1.16.0/docs/saml2/_static/css/fonts/Roboto-Slab-Regular.woff2000066400000000000000000002016141451074743100261530ustar00rootroot00000000000000wOF2h(@ t`j8  @R :6$n )F [^ ƶCU"#n{B!W=.k'pr-~znm@%Ҥ!~ʆ hXmC)-IƳ*uSPP rFݴ}]/eUnYJ6vN% nn-~}`ѸS :}Ἓȸ6oޜϥ۶+EyP3f0x؎ɖOdONLS:kI{!q71;}6V=U7zqT\Ұzf5}Tu ј>jB)JsN}Ku[6O(Q=qS  J,-sNiK(Er[XbT1`BF(I!0hJZ5ql,N(J7D@Ԥfa1UƜN:E‚6AQ)+Qg-qsֺrڏ>}$9Z`K C~Y6|n8)m $ ߮E_H xXMZ "r"fD!4& UWcȜqbfNX?T4vQ BOg,i!1!p~r^OIJShvrͽ#>I\}p*^.a*/Xpɲ0TM!#tXjB(8md$ʠTe>DWu85m>W c&=0j?s=4P3T҄S7% Rù #7 7|PlK1- JZkc|~Qݻ)J0P2'dw"=xҦ*oJt?8ݱn8 'RmfE|cfݜ O0 ~5 P@f !𑡔 )Qђ}8D)-`Ah35Wڟ:f OQ Z6, %WBHHuꅬn}XO5]npIy<e*u'.c .-PY' b!,Ao5%EIWm.M>=7uv[rl)ixҲ+P Qu%{׀L l2E| .[^T+^DJ{MTؚAlŐBc1U@û"5տsJ%FdOLHVQE}ne2tﵖ#0B WWTc6O|1"ZnX|{f{ %)""AB%¿EzStvc1B\e2ʦ4"uE_̀ϙ%i/N]8@DI[|U&Nwc񐬱H zZV]X=9,q5BemY,ady&ҵAԂ,fET`U{2k. a/Hr T-YBA=YL67Bq, o,誈Ҕ>^ y!Mǟ\G^ VFFOz87\1Hf~mK|`pKqd97f1\FDX6);| Klw۲Cie'>+d ۬㥭[j%Vlؽscח~,ټ n5Bn%!q{CX Śoj 5S[\o",C/m8! Ea`3 N)sT?SGNW3uc{+v]ltW?AC\}_y3ߴY[,Xd٪\dM)t ɐeA2'"BRY}Tl ŷRN%ؙ;wp_v&$7ՔfF!m43iHgiKnVܙ;[ro\;?u{LO;gł'нЉܶUyx{]z=kn3kmK}KcsgvƯe-,ǟ- WhdvJ&2UZժLo9Dڹ`\֍ȻW'AD3em堩ЖWT|2+` %0bt4QsXFuJMS뗛IE_mvUnZ3eR3f*3g.7C&|_æp7RH4Y(DEai*H^/ $@R@AQIQ~tP% "0>(xga TyLh.AʹU `A,9L$09rInɊD0|(0chXJe_E zq3.{1Y ;ˠr45hʂYMo̴.U8NAJю֬:>DDl7Pc0;`6*&WZK]%]%~P!рl=PT&:#֨<۱p8J;;,N,А> e@@Wvb2ZɃ6~UH܆N=@Un e D):u2^H-Xԣ XYf K y@XD}҇c:PRUrri ϵC 8  ֎]E*4ˠ3NxZo$>MZ"2sD& ð=/;PF:( ee( \4rGTi*)Vzﴓ+4[&хݸb(WZwLΧFTXJ `GMɘw01f(pKc(Tɮ%Z~ .* R+1*e{, ӊWP&E;,"ʣ8"rģ4i |ӱ"CH`WV_J2K` % D2jqMt$Gm`cUTńUZ4e[03p]{flkÓ֥LRZ5ϓӞww$Zs] DHg4@'' QT?f)1*S tFO$Y{'tOXH;VB:gJİB8K'RV Yly J-`|M nyxv9n*6V؉ٲpS`X>!3l3Oݣ2<P1xLX8$Z}%)jf#65f$)弿DUxIwZ jPҔ)p ы'eh2 B @L!NUL" xԂS;0 FhQJ&>\? Tʫꕠ-.jTA9 G.g=/AWFM:Z0zxȜ,y5ą7À9t_"9W4.?5uu#uNs7wo͜BcdG+R*rl暹߹p׾CM%̃٬9,Z E,( 5 i1ӠI.= QhhlS Sf܃ob +ll1;md!CwfY-+ezOܕ-sJg;+"FLWҭt0JH)UJOK-MY!bWNyӂS ^kШIڴHsg3aj91kμ,[g֬۰i˶ڳ^^CơcoaN  uv \~a? vXi KABP FMZ?j5~è}sjm~5]2s͒/x=Katu;6Fl&ι6fWӑ~xł$, WFsvO2Ě K^3SPé!8rWsnzfz56\A'B>y4t!A Y)SFzeТw1x#RɊ3`Ȉ1lزS;8rWsnzf XqG, 1aB)RJ-:ʠE)Zdz0dĘ S6l٩UAmB)Re+)< /3PBBP|% 1bĈ#F1 oF>q=G>S?3ES:sRL􇌯t_En$U\]xQ/_~kĘi` d"i!gZ뙎gD13*K8S'[D2-װΖ'L5g)Y"!cPʚ_-䘳dnňS[kKv#YtYXDu=؉\rE7c֜y k鋸Wa2eCA$V?%RKB"TU^&m,pA: .WK=jB2sfs-X֐1Z *%RX:5TyurSpą]-!vN\#:kM`Õ-B>HC1:BX ;mdρ#g)-WlK-Rv)U*Yq#;Zx;,SMx;^Q mĐo~OWI`=,SP]%?KG 8J):E5&-33 {,4 6ڧj.̵/w >+`N醳{!/vu'y pkT`-rSuV4-{VUUUUUUU+jPi4esc0񜻅xvBU䮧5,ׇ rܲ` u Oxm KLHJκQ8OÛF10iʬy ௦zz9g7)j~lje*T/X-RFW< OM_KYݲ9nP9(^_m6n >V8 ϝqF[Teˑ;RVj kFYlzn6Ɯv[z׊v>7j?ӓ8єP5WjF-U]V-Jzn'xt[Z7q$.@9M3r5 >l¤ff}-XVX_ Z#sKaF318*]Qk:l9r%7meB Yr3NPMPQ&-.L ~hNhq=]6k6q`gs 1'8s7=AXUg!cL_&EF l!|N`f6G҆LLe)Ovsmq =w,1a7G HV$ɥdmY!g]GPT0dĘ SkQkUiμ,[g֬7 lɞrOh0 _&oc~kp yߤ;"9}9ʛ!>?a|fo C|TRoFʜy ֬1L~l[.p3!Ea. ?.,"R,q&̕r~ǔoǏnk. PEVzH4zc-]KLˏrZ:{VLbSp4UoC} lN^ԳȨoe|6̢C}!Ցb:Dge U1Dƚ{7-@؈_A#6 a&iI"ɵY6D$MӗfZ85Q3z?7'IsKB%}+}iƶVg.ƚIL5ozܬ9qx=˸% VE<qn"!( )@gOFb,],cag9p"c?}td7A [8n' {P ǸIF5*1 *UWλE\>!BqOD#d|WVcVk%'.|8Gxf|7w^0@?J+?*:E XlpYo#{9sK5BWJ~;\^n嶻{>oݶDd)O"¸~0㱏VT[D/#ACBO B)z1 c1 <'|g «$ 6"疫N꾏WoQ] \6a>2-X<.FCLG*c:2eHBXkB@5b$bdf"PP~*MDX:5h||v\Rp-d;3jkm"L} QM G aJOr;-m;3`u׾<;7ɝc)Ny{Z} gggm۴ y?R?y%gx ~^\zOmwV:l-mbK})/ӓ,Iiܿ!U)EFqOW=dsrҽZePc؍1+N)UcO X|Yt =*fCl}0;3Y޲n637j5+ AcwMv]C~ V(k`(΅C8΋.8?D$(^1PT6]tp:K ŔjJӤ2LU S8jzjZvEu+^tM׏n-0Ewun=MӬ4/xbZ<3- ^V/MMMƻ;M.ܙ(w2\7FoȀYOA ddUcWXWhsፊЈ hM]6&o<1mAPK Xuб[rppc ֱhECpB L 7|`\.Nkd~}(@p'4: "!RlQdgqY1PJpI3$p-nù.v1:x<1ty<4/A5ˉ8 @17Wh#$;chɄ)4"E3w`B],ZQOAy)%h!("դ0 PxlWRA HET  r2ejʲk-+z gϣG!C<\"w?y`m ه%Mtfv|o_[B:Jxb[y! (٠d>*Ykw=<2:N6NH^HYʑ hx hxhx(oMV0x(]  [O!F 1RVj@>%V@\XVL)PNzۉ8utuP)@03XFLmWл 2;_FV]r$l tdN; pPM`G+o``6*S`!#SK}ߎ]~HBwm)`\T8\XX& x̺?`:.@qe4&e#]IWҵDN𘃟ݫ))(P*6%؋,*J x QKDII~I!Y# 5=d! YB]˱˱qeo-3#P?Bh x|/m|l~@ݑt$CL,a+ bw7N˂ m!EPH PHd GH!әt,W7 %pMp`aR4aX`3s_k^nD@AB5W +o,po PckR.\KҮtk wnvnw~aKz7Ѱƛɧ~ŗ^~evd{o]=}#cS3s K+[f*@FP& a~.*$ȣHFHKhC |,lfmgGFO΂WOYImK_5r` Vyyqs^C멯ݟD @EQڞlMO ُ}{_j :l(kB]I(vy4'&q^i\x飃fV"k$m5 "._E~ZLΪ!uOp2 {8>4k[W8a^YaSTkRZ`Lj098yHu4 11tu<YjҢ PV<4ոC]^ešr$]\~դlM\˞KC'/*_W;;\,x3nɭs9b?@%(Q5K4zismx'y)}!=nV]mi?HEhyHk49@,фӅ~ xo"0j^mTjTc /ش ik~OgBUh O›KaQ~_YL5BNtH'9ũN䡝Lg9)RwMɤIխaMkYS2c]YLN7~M8Ӥ?Rֶz5xI'-g{rՍ_\bv5WpdvetSM4ʈ%wbK].wW#&<( P PrЪ00lg0"%{J`ǫl]} J UbZB"HiL`$et4NT;jW&8G"PйP*asL%QPEEni901` 7L`dL1l-1%,f e Qs"h0`"dT4t(SJ: hӡK>&3aʌ9 XYa:m&6sȉ3ɋ7"@ Bjb˭4g9iL6tӬhdZVe]Xc$U:$46Vt+>ܐ&qTX"N_, ڝSrkɊͶw01pt:DĄ*Tr@jN#HG^#47b\&#Μ(A ,АpՌ< mPkݖ+'a?m(hEGЉqtf]DWSw+A$7h` 43Su/ݯg ]N3Vktz-z= R$v^+S/;Eu?]q0!jS ~+.vpmwf; Ca@/YY̒wM \VVvv0T+Ryo\ ub+bB߾"r}hŰ~FNϨثǐ͐4c`.1eHd(!,i'D.1+ȅKv#t̝xVЎCđd %L-%ܠh9":H3SĻ?*G=W,C6sQa6JE~:և ^JtZx&Tl0ji0Aٳ.5m ΢tML2f4㲥OdNxB̊Jx1NPoǮx|niK}sbyeEA<}K76ϗ $Q氅XncWh>0sx SAC.4&0n.0  }9| \Y:Sev]4ͫowjY@2lYF-{'E&n嘵c1YiVmun)U k ^ :@>yiva@ }óx@1>@p |0 7559p[AsJ! S8Wv^/ގ|nGʳ+<4&EDv*10#\eK=j8vJBf9ml`ly3'&胈HD D&nq!fu+( ncrYyObœfʹ̦s5Ym3"Dcn-{# ݥs;q@SCuCk^#s{)Հ.Sm Z fn6֖tNi7<[' ?""ke- Z!I$ q {><0_CKMsU[Z\2XyQ]}RH+F>/ֲJxyAoMe4cgR ?77X rhD3*J1^}y uPPxM{r(:.XiV{ w[naQ5|I>ӷ4P@K 0Ľ?W暨E2y;fd<W'z ̫'?xxgsk$9 y;;}_!PEdMn#_O L hA+x@tP1 hK,) gRAˊ 1 fT@@I,l%PLk0$DBz\8n’\9;MEDiJbP.ƌ>LKkHqxD4&@{6 "Saq.&xpnFv@IڹFWCX| 8eG`c !#B2Qf ;L ";څL~jX:%(NK Ec);c2i|"m)H,4V6~Y}_ d)wa|޶J([y_A.ƅ6LXDZJ6uv]-SWo) .6\02 )7<߷a` )W&e4Z-+ݣⒿFT]ZrP5QcJ %^cp¡y'Unp8rQȜ}r1ڪH __uhpi-dVoTߩS.bzjo[4Fur# :7j)Aͳ0:)1c4TZ]5Y0R}E`O9=6\@5>H[~~-q*ң+\B#*wYaZ&>6n3Cef ]ONEJ H"'b1 /PYc4)g?ƒK-S[#I =8\iC &61zۓȱӖ$Tʐ+9JmR%`B0gK*!@RE|`'=_ʸ0篺=kcwJ`Jic%v\Nz2u(?&,Q5ڃJV0SKA䓠@͗@p_u]@|o䖈K Mh@‚Z :\X,|ב'N|n/F]vF2["x TQ@Գ("ͣh3 ݤ(:?e@i6{;?|/h4:؈Hw#sDydD9L&!t !.T&& f0fЧTqʼ08՟躘p'q-5ZV[kZH5&`~3Û 画5I "|)Kۖ=ܞ 2`*T[1w!ѝ?`Vt/Liˁa.\<"))Rf4!\"4/ CX0m\`6TrQfxāU9K@J P*8\K@/9ܮ1':y*SY08>V]VwiHTxlGv[]TkBL){h.$p`> C@#1oYb@r蕢 )W16F<p170,hh!ad>%t S=r}=0_ Œ)[&3M3z< ;[H:t W 5_"+Ȼx[[ٿщ`?lbif~36N3?9C|)):WQn-?&]0JD'R/99pyMّz=ڗ~ժS*?E/wFDE_5( $}Iꔙx+**U^ NGp? +m61m".&VXyiLO)(gk/ML=֫#rL2⭶tlmITvD٥ilP>ϼ}`5nw^mc]CB.Ehw_v"w4OQ<&H p{^ajZ;t =84Mx0+0?]jz B{]! lmSޤvUQ-pDX-۹Eƹhm{ޠ1pl4(r!dt%\⼟P!e㨡:ȔC>.LP>1S&c} 22۠5MMhȐ;}0g!u>`0§vh7klL ) :d%< eAN ( 7.|+{'G~,8C1^c%jj&@ hᐟxG,E0- _L 6^6Ww߳kH޽gN 4RYgC]ĖY׻9>,-سlRh-Ur}ϧ3xKJ欨{1C˛nC S<(]zV}XhnPIM V&Mm98'MgzP^Z91*bkK5Kn%zMkߒ?I-'g2yO0Kna,k/&QF?4,Stj y6jhL.spqrD.{#o;nn[:8ĿUA፹w}o I.ͯv#vodo+!SlEMn79ȡo;Nfgv'coN'`Sb!<ˎS|0پ[zKLfbH(˦.%,w&mbJ4NM)*,'CXS%g&t>Is;?rQ׸[ DVD(B9yw@%bS} HL<:+~M8Iqo[l%0DdM%emfR?;tOoqLH u/IQKa06A+\Ԩ%\h,Wp$^jљ}Y^fdOӬ%":`ijvVC|Aqeqi#%UBڃ!-mƽKh"|IMj߆>EMW$vƢ7GivСǐ Jb*I$򸮕:|A/GCP`UZj/vx0Ӟ*&ϛ-?lݔ^:{V@5koj6^ZxwPW_gKt)O7*-p)(u1yZ\0vG ?xz(mPNݱrN;J33x4E|>!G2߿m3ݲܞ1{!:U:G8IߛD\o&kk3Ri,&CFE"]-ĝ@t0ۿ >''NNOO'$NMrXdUi@׬^.׾QF۔Lvy#>޿>ӱPpf.pi1u\` ?O/]ހ/CaCÔq*X^:ϯLyRy!gDn]IN?|[-I^A /ބsplp9}0a^2ӭwTOغvbcy#&teyy#(l6ol*4_P7}ȯoY2vo`!6׷±4JgO<#[~}yw4MZЛH t))br~b驍i {HfDv^ˤ<010`&;pRMU~L/H`%IbJ慨CjmcF:}|ӦM9=лR`$ l NS 5wƒ`У|ي_K~,0)>fXmDl :,qDy3b:H_9#~Hͼ ]K`}WU77l^Y]Uor5Qfg}JR˹X狭6V{kyYWC"o һWX'+ .Ri-c;L$\Z&#nWgr]quLoӽVi U6ymb_TTeNWwU`EQ*0.'OVU-1E0|aWo]!؄-}iqy9nCiU 1c?am?PEI]T)U6%|Q޽j۷j134:N(D! ?헨Ի0 ԪDDX[EIUKthߤ.L2WFp&׸€K`Dz>ǑʗX,Q[2H>?3ysc(m;g >#|x_SLϻb_pUJ( "N*ں`?_A~%`?LAbyr+0`l`$+vPMѯ *[drgʾǽv JCdZI5Go!D'$JnsoϠv`c&bibCKe3rƪBuNX3k鬸.w5Tl]:$mR*tv]W--̅.r <&>蘀\[HtF \@4>ew^g~Ȳ7 8)G/UKuePk|`v!UPd\\wV_vGJeޥ@ 2:. XZ‹,#='6:w$ØV"~I|@3G+O-JLxϻg6ġ^0M -x4YrQ]=l=Tʍa䀾#">=7Ҁ5LkwN{ѓ5os~ ֧mds~6FHzzRRZJNN=}N$56HGl8=0C }k(\qKvTiE$WLD7n1rPُ $f6sP ûӖFXs]LPyCü{$Ox_{d͹P˚y<h,d_'Ơv@GvOIyjjy.Un2Mw6)&:|}ё:7+uCaNNaj\J=_wP~2QG6 _=ͱ0!H?>o8w^R8~Qmh/- ؐeքOF6ԋ1Exܓe 0j<| QF~sʙ}_ęUɄH8,RQ- W V ~bQ`=.å?-8VVy+gg"g'5HkV&X+oZ*Dz V2/f*  70! @ϻ8l,q!=`-k"Q'WR+ۖZ"̅l^il]V{mx"MX1_f@\m"}qcaCw`[ХtAulmL _apoc0Lm+!I?YQ{ U_,k)TUT[Hʵ镩R"n4hR 8~^8ݓFYG]mfH 3oxQ=ϠDU'RȩO J/ eLq}D^o8Q[VR{ZIpb*3LҰL _̐]njBJ>!~"kDѼ9w0Ƞc; ێOchc0 Y4ixErNa܎?9|% \rSUE c/GzEV\ԠW}UEQBIr_^s2c. K^ϷU:At FCܛۚ;<Šq+鬬>1USU- jpXklY_$Y-;Y˫6SN)(O:mͽQ-HD5vޯSvfHȫ u 8ޚR*/yz78(h@fuaSvqjQ\N[]6cMKĖ">G3E7˻&B:(4u_B* HHZ,Y+X##LT**|ꦋ |P!ŤVV=ЋxSO[au!W&Նݚ3FFM|#u迥EԺcKm9J]|Hh`p x^*Q.$`9ͷOJh!j5&5=&@ MxI1As`;>~J 3h+**ޜeD!,M5{C':9wʁI`@V55:ǏENWU w<6OkTqQvdC?IXT 52LzN9Լ7nFbB".M"n^8f4m PBE'XX"1oRao^!-hU8d`)8Ŏm82 ܃Q,9GhOH+>y;ȳ=&I}EF[H>,`.b IiyrǡtX[ӵ`Ԍ>Џ飯oI8 qMEdïaB{s93~ѧt?za$CEL!}]/ۆtxk'o+i,md \J餙Y6 v" Y.Ǥ3IQ-Ѱd?9@&=ƧoY̋T$]G4l>2= eЛ5ORZ;e]-OOrff0JG: oYV&yPE\V{3(Q24ߗRoBf#dݙ7.8Y7&LypkA8v_"wxSNAC.pi+hKhyVcC3W75|$f0?4#zKUVUiClWcI{yvsD`;QϞ#b|ymn 6a(d|;zP5h|U=1$NՍ;"G >ҊtiyJG鄁kf \14?Ga^a hp~kGad/(U^~e!!w tF6Vkrˍ\^kh֝tH,VUTUWl^yXSk:-|)?KWօW틎VTsny>y/mGYo.aU ?82>`"PfEYDTTedUDTtTXå.t4Z6Zs ennɷ@*r\9o㝄7PP7+/a !)ٙ9>x8dJ\+L%"W[ݖ2pw—ՊղdNdҗ-P_@wEP Z+F,Q7ZxZ?D;A _6i?$lc.4T¼|Jɱ8Cj #d)>P8E(TR$5|exqh9KEL6ևx5Gu!Ms:zD1`\jcFB4ŵ&ߠr$05~[~]^JT.tǧq%: n(*A(uݧ گ=EF:Ho(;^()I- O|>-v$ۥʒ:2*&h']C9nDwOCFNVFEӈcN'G(c męwuC?;(nUjhB9Kcb8|lH= \74||躏ЈO;c'*H~o>)'β0Y!FA{^e[O@[CXE+رeu2 ]YCؾGDu2ߤBe j[9$Yw\ RUӺFI_mnfsw[Wʽz-qh;㑄o w^MM %d-Sz-Tc ZڋE}蛀#*U"!l=E8jxRzzw0Lc_|˾|P2=Hl4=G@?f _$=O$MKdV頻Z4朗HVq8=Jէ6n~<_ldqs2CGWJz~3s~~{d%u*jj@h (X]L0>7ϷgdhlfYƀT ɵa*^TA#8Y,1ޟ!?ډ$gv(wmؖ"lC>FbcsO_:"O(|Tl{:/5R!Jj?^*Z.ƯbssgЇyuUh}5 _t0S]p`9DOk"[e`TefuQLO}|MCeCEabHNۈ rK~䵙g/HaAq|v$Ƞg#lRQbNJou>~Sʯz"UPkJ(absuQ(q2f5DxQ>څVHfEOE?e@\ޒ9XkH'&l}$NHf8F;mPC7kLNYlN>B\L9kn1 {WJ-1R5|XŶp|bl[h{g 4?:U2OOinOj/s7]ޜ?<=-B3kNj.j]nDv, _t Z%{l( [JnS :tS]RuC2pW.+oqXwDgo?GI1}U){w-,|r,^R}]9 Uem1Kd _^0|>89kˈiW{%4tw̍N1ԏmfo39o[10] \KYnrVKWkX4N}HZ};#4ƹ WnɜY5M Pn+ GӣA'pgIq*[pqQ;0ծ,=GXS\%h3hBkz* #QBKY [L';ĭ|}*hdRYimɭR]^-A[m;oۆ(`e}ē/X&NVw=`E*c6JT#B"_+ЛLm7(*' $"Kz]6܃ p"?J2X2O($Xܡ\8 5˺|ctfV^m=t\do[Z`"(%2lm,ԏڣʡL%8v [TL2\`xoL~2wGH`b߱&4ru@T޵*T (og|{|:bÇ,=!ġ#g/!b2A 9$~ ]Y\/ oY*QRNo=^} (=\5UQEDCВG~pۜ,֕CNKsQd)}Zi/Y&}-K/GLb2t/>/n\߂C*%%hT ޵]7aQY^~_ rg:n2q?8P_nҹ@f(tltUI蓐mjyHGRGa騀`!}=YU~ >.,ڞT00BY SC%JxKoп;Dூ;x+ 4IZm􂲜LMŃ˒qu|){[pd},p ZXݾ;L{ m{HشLo&[&qPܼv09G VMdzO͔*MMo-76no"QsbU12aJS@kkчTD>dzKvC:bT3, o^jݧY@9Ӽ+jYEޘ z34@e]BVOf  [ &hW+o}|/0@H( ,6*aW5Tq1Kc70͟.")QzTrPX0 L*Osͽ'~\BN䠞 ?}|Z.=n.b:\(XO4c,0ќ:=:ytAF9aA@t%jE:,wB~dۺQr^(Zq5&:EK4fmƁw^zY)egfę&XVaK* ԊL=H\rл>4#5xy)n)q4 L*OhxI|LB*N^S|J2nUC!‹?_C,,"st0 (hHĤRVBzף7u\9jZnıOc*(x9eǛTPj<wό&G 9HzQp/EJEӫ ࿋J4b%&#úZٶx<}Naޱ+ `Akf%焔8>\wӨ^`ěnb C\"JS5aDdD % Lwͦ'oT_􅝴qNYNUvvBM 3yA5^ړ3 bIy)pScb]0Fhdԣwxkuڙx(~^[$-ͬUB x]q6^61 P-$򻰉rK⹩ P 0:1%zxܥ)y.o .ZqeƍA||Îx= -V7|<95"{:ym(.7]69g nlLl~h=\oOC 9>7C{ܺϱ(Dge< z48 kǛU}Ն5AVs- +uWKȦ@$dX չaYh"̍ @\a!Lhb:1H' ;?ߕ09D;S^[=6jmdo|`Qw6zٛJ xX`0Z;魘 @؂gOjhE_w:`FgW_,7t u#G/׿Zq G0őyMrp !SޔCQ/"࢚0r2K4?5xힰ'h(1!y|?[|D6%'23z6ව3X?;?9coU /,HA u] (1@v5Qv.Oh} fZ>0s!߁V}0`M:v(3b0Y)^N< /WG~P1z6# b OBV2[345+E<9r!~ 3!U잝YV#c~n0^cse8U!K_{ Z*il\C y (4W4j`B{,QZ*pYG@wTh? |'[fZl-"7"&ތBx2C8w#_$OSLpKb.Beeyrwz.:8En ;џ _-![ tn}Gqf.&_޵s)R?9~>VJ-z|.MM,&jZ` ?S~:7Owb ;O4T.q6BtSr l!a [w|mvMQ_Oc"8Ɇer@nL'މKSӚSzB֔vvON5n)eŜ<|iH8+>؀H|48mt=q6tn7uv鑰)';r5tq*DPe{(r4IE^~Ц1蛰To緄~a(hʇ1ma $qtF_=l.x`5&w &!<-3?n.D iNQWU e u[;=EN)_OYI֦M8~%4=#^!)lЙUb@xs=[n)3v>e2hmM]To\M`OLܱEƋ HAS JwGEP yKݞaX]\Ù+53C+I$y߾㝗eE/U3T)Ul!~oiQZQ7V3V-mz(lAX+/tM)J%*ȑ6 YmZmv 0 W3n ~:xuri@,{#695$^Z#'._\= 32XW$B!]p&Uxjfji h,!%%GD=47`yj|9Jޕ ),IUX\:fJu0ir<"? fT;\w{#,2>Lg 4QH ƹ]>myӯ-ǸXZai;>v#鬰3kHw;ґ*s }X|fvvoonpbP`|J̝ުʰtY}TH1 Wg!dS3Dpּg!BqSDZ-}3M䃥~=D|zezVT_bMZE,2cQyx1_Ć;Jo~g1͞$ߞu]acu_(]}T6L`R2ܰ?Q^q`i.ϬiUF:?})N 1,kX}Q4*7: q*"_YlLEmFx x[Ƈ_ }Mr搐鳳NIrYTm^cy[~C[ 3ÐGre3SCgJi , Y:@ڟ_/ηp& ?E~}pcRa4wiρZ[.cs١ҐX#2,V ;ĢC9,@(OWF A&*%@&J6f#1 1d EWd)?}Ebm-KG\nkъmJU;q[_M]K-CX-HC H4 "yPNCT "fB=BY$nn1X ]:bzkDAt;-<2X/l8b8l;r'Aw84Dw(4XMw,K*vyZ:74WhXU:74Wx镏‹3OU?}h'Wvu5%&?!̗0X0*(kض!A; ⠯VlNVD |[V9W)@)'cȘ ViDZqOݪyKL{ʯ˄L1j aq:j@ymm"]u@ZM8!x,6"07jBV/)= P/0eyy!|H_je vDf9e|VHUnS:] f`(.(5?O)Gur<ϘLP.!vH/W^.#vTJ.k!Y>sMM'`"t\ RV zrc Z+^`aCpCHZTDVWg}$+ ف9füI2L 1>dc^6NAjy6겊]/Z7(J"wތ$ac)П{ltK_d[9coR[#k:xKlHFz(S 'v%,y^qG\qŞ\;qvWvǓ]GCEʠܳm4-`60rHFQcyy+3=V`\,hnMW@r4U TDbW"D0ˊuB9/$^Y 2oH.3pZG:^"[;I´\YFB?fy(]gRjxۯJ >^;5c"{j:i%\~%V!DӽŞ$d-Q&oV5 7AMAjzk ٛR$6`39n-$D6aKՉ%xft_k_p짷 YksүMJ .]_F&Jda zŅf#ibL$BWid8IRfس+<}羞j 4VUPAMMI -StR[k, ,JTS[š4*Tj<|2VgƤut:H~E >Ne+LzYIPjQ&K|Poj™R|]\[ͥ9b_Տ{37xT: nVzܔO?U.nPg@ysOjȒ[ǜn??P>$(sۏk[-jUAx@}m@R˪lQJA"5`0p#NpjW矏WBfИBsAw6 7 N3b%llevagj<x: y𔀰 ׍$yr=|wM1420HTociSX W\UICJʒ'3c [n?\n.2ޣ0YĒ2]g{UJUнA8xfO2^+?밖˴0SmOBD;U$P\ w.! +J J0iQ^WI&|i?iZMlO={\Y ˆ=`Ű6Ab dkŪQԑҲvߖK_ltj)֟K@̆L;];:U@DCOCz8VvcWXC)}p5&O#k mQp1?5>Q875|*-BQD`-" Aw6mq sc43ғJu2vZ(?=DyMv?\: >:.]#v~!6/~$ j SnF-x)/u&נmQ| zĴuc`NwBax%EM&GZl9WKRߛY}Q`@a_AӏgΜG܋;`a`?Ti =AM:zB|CgMM/N-fYgjyb yx[b2çkL`'E,݀T&Keߝobs-z@D~[1LB4 "^ώK˞&j ogÌRvL+t/T~@ţ@ǒƀps"چjJU;~qpkZ{}Zt*uΉ V]K8LwT +aqˆJ~8D[Pzd#oK,NG I꼪dZ3>whŇOoqY`<<`Umrd#/])o*ԕ?g&T~M*-4+keI¡®xVrEBRf=LnpLd4 `8%\7BAhwG.~RW؏}2hVׁUk53]Z5icE*\j|0NUdE 2vF Q4HN,5%}|J}|kA{K.~x^}*x39Np'F?o5z]@7e<\9I4VNo~2s]G5{)۝ I$L) 4Nq=Z\N-: (@Eɭvlvaޚu b'We ā*N0 Ő*V:2Z L0+TʒT@OU;C[GZ??1aXVgyA|+ 9d8yyC飽8JLW Kl2rotn 5CdljM={Yy0YtA٤iI-cT̾5*2',,)ʅЅSX,\W7fT7ʺBL Q'BNު{0ei۰tPvZ A5PiZ#JX%S?=D_zBz]]Y8E)xO8Jʫߟ_%cЈ֞e2 J.ۜ?&=op+,gZ]҈TܪC1O_+7♹w-cvQ]m1 ^D|K67o2O_ {k6$CBW1&&8wT\o,>/#Uy``WuS~l8ֵ^mH@yjȠu+QPP 6Ta#pNcls>5Z# iFek'{,pB-3C8J\h{2@ ^ǎg 47P2ju{_P)G>@Ùd5;c |_/{EBώMh%np *`MJN\C"fB,\%$29'[%+p%)wW_7>?+U7'U WIvTl7?ru$OC 1b(Z=r褬:ќJX)Q)q LkUtaz+a;G?r({m:Y%23m#7Lsl aIe>V3F`7cv4ef$hhر'  е`Gۚ;COTB4Y{|3Q:D>LuFqIb?,8%EHXI{/E /.@4hu]uw;\z/?Nw^M@m5JBDD ͩn6!@*0uw6DUB_-\zk,ӆل~K( &[52eݔyQBckAJvc6:>A;WtSQV`PQD㉸B{SVۇyNK@2񮳒%f 5+l#fhgulIƠ 6ʍ:9#2ƣ/z8 ^z8F bLA I? Z#椲ce MXtu!|ݘO[.m9kE \ٮX5*ox0kPPj:|Qf H8@ee[qJ!&߸`KR`@Kk=F~17l/TY۟P"ET& >Q NJ`tӰ$AYuѣ3F/%?%U ׇ5*P/5x,t 4C~^^1/@_?JJ%Jܴ@1 er݄%F+4 5SdS-) 2]A#ӈued;*KUhru#sYh-IT "0΂HjM!:D5Q£Kv8QNLKcLϥ Ͱc YMH/?4NF6g pU[~J0- oW/Ujn,{Ԫ̖tL\$MKPX'F(r$Œ`*}TM^Nx;G^{;*b7~]BP4MhD낟;.<<qk 7)xr 2ai[͟U)+{>Kg>4jspVnCD:8J}R6l8l2nPXVb%T7mpss3̝2~^ֈ7X:G4}aTTe@-U"Vlmb)Gi$ CA֙ꩿ-vq$u M4AfHhK~Y]~Q:,2F""iJ< _ocxjH=N^ՑPsL`uD=Iiv֢Z#*z%,2 #:Testaq˳9kK{ AJ9}_J9 tq(A!ͪoOX}.9ǭ^/:ʗI7ew*6p楈.5a#y@[sJߞ O{MG|,[yMGJuZp-\g:1k$kCjܻʄih,&/>9u2 E:7霈!fn'>yE_;԰ɱ; y^eU\:ڦX?E!qS?[,=x&B#?=,?%XɪSyhSCw#oukN$NY)J. BN:q-)(&kkr Ehޑ;9'sellrO\BevF[= 3ϡ[̋o/:{J["5vr͇gPyפNiA0b4 7 ]k NtsȆ P2Bb'"6|6w%ל hlj`@#Hl))mj @ h}Ό*t6Bp 4l{@jlqЗC#/HXoa|$B|Ok9t_2!c _w'Ul;&0Ow\ |ihh5}TnC ?퓫&vNCO1KV$q*qz^iP/x$=#i\ *89NJqCՄ[奏C} p*8݆EΟ"<*yIأPмsxr Üg;DI/s_nf:*N'h0=jmWYe]O5A S9qFW#M} Q˪G4hb +}>Fe G!258ĴAg=7O; aLﳯ$[3˹q>IqEٺO}Ӧ/i]>~(Z)WI6B mså^[IL w1{OBHVV нv׶˦\̕4=x5̧hj_C=XwRbB_ A@rr%S%GpFyyF*N?Cg:t҉U9hρH^WևZ#橖fsO`j{U%B贑. 9pk9sx^",WY&}KXjz/V[2WܜOc_mW{H .8xr&weJT ݩB4/֧7Ttb3#̧ƾDo|"\R<}(|',F8-Hny1=9/rPd)wpZP= ԓӝ:RUHԚ})ܟ-h0߶>TO)kܗ2VsG(M${y^e=&DʼnK^֎.ꎣfڗa)YQ f4A⯈hF q놼`+L,6Z7%\#qRPĿ;$_; ]C)n{t)ɴV{e>=4q/^5[K`)]=mػ &Qx ¡ KϤcDgP=Ol. PDϘBEd$P`fXc@/UzTc6\h@5B^f' hu1uslZoKCT šK3^sƄe#NizB2#/ZLo1tIm%ٶcyKvz7ZGU2 :OΞyumthZPW lF<9[& `|muS"Ab2ʧ:\Rl5);]ZF'%PSG;{3+]ʾe=4%Iҹ>iy-QJhUWװmb={k'ѹ'K׋$ZF-r3;\ǞB])^q{H$7(=+Ynݎ+ѥMLma| ԷգiN$kW5Vk^6=oU@ňg |od9rU.] K'Mok՟+(9ϸ2)ѹ,U&vj. &W<<&yAsQghroZ2L۸YNQyz A<Y= `" _rosq&ey(y$OǕ̹tGSJĕQipv #e ?i%z}wpE GFNM%а 2Wy=q(bq5B9a۹ǫq@5lrTY/ [y+y=O'FiD; ^;l KwnΖӝlle7%8m$`RM]9d}WyTDԫ{(H\ P5@P2iAzO'Co&b TqboF ܒ~P"QAsZHt߸?zC"?ha#;y&J,9ZT'u0*]pEKG.4Ѐ aG7{60ND3`%+U(gKD؈ {RY{6غyY=Mq T|JpU|zE:qU"'xb a0Q+mzc#εP>u/ m~N#pMBt+ZH4 _P&7 NH=^8#n:q @a3- 8Baq5 Ƃ E Oky9g8.J +ziCƼ="o kD} fJ'HQq$ioς^Ј,MVt/ oFTQy?3B͉ut9ij2QsjLDU5@RU^^-% &OJ!;<f¼-Z"-Sqe/FO`ʢq(*j|7j K<6ILp-nO8S  cq;V CɌvh 2wxъl.qerh'-~n -o¤1RƠ\P!>J5LDDU[RtVʩݒ#% Ҩ} uvbm "~E\J:{WtitG*y rFP-d6ˍ `a[C:Kȋ(օf>&{ |{" @_;kЭ1E^wez4Zt]}\3qR' yۤI`#b'E PIgڷ|n1J-0Mr:QOԽY[$'poQ,supƹG z9ή7S,nNH7m%p{C?㿏S}>aCw7?X\FRDB"@᫉#w|.ZJ\Y&Sc\ǀd"2~e`)KkN_+2^ZH4*$/ӴjpȚ^-Gx`GCF&}7pgo->o X#[Y-<3M|υS}G rS\-Y7IYˡokOȉtB pR'1L{ÇR'hU ,©U7,Њ@n<1ŚeixHIT 7v#.x `j`3kbndA=mnulTXQd~^۴ƶʟ!ecAY]d˝B-9~z!r/_[{wq[_Su2JE%e4u@´rS9G{VO>ȞȎ(Q4%O-WEul koE\9_f Yq ##凂pB)0̎\k@ڜE2d3JsjܸPwiL7wͱB'/ \|`DF5B/ lPF>.-U [*h-AKlZ6#ی穚W@ֵMOE!7__nzᕯ@ 7DD4aa&B0#0kO1`Nbw#[;.GsҗPҸjKKXO*ݴK`d0r7|]X*˸Ԅ1Z9!w봍 b0v)杜lg#r ty:è{ 8 Hs}nRCQSBQhdb҇ Bsjskܧ{.m C0WkEs>ҦۛDB{1u1.&tW!2 @SX9CÆ eGa)2ظ0Ěb$! NAcpVQXїF:'`L*b9Gt` |Qc;K,5)&ǨaԂTuvG UIܲh} N:׉E!$#/z۶7 gu(Z aB1zr&! }l01}bYoA DaqΟǁǧrzXƥ i7T8*V`3"pNNq6ɊY0| ]iHہJΛRWѺ8F͈XV]8?MCHt};eqigx.Ht!2Ƃ={VeʬI b![qzs*cq*Cî i!qf4j4@tjzn4Tڽgrw04OG=c弄|hӌ>Փ*$(Պcmڞi\}SRf2~C{ld3x6LjJNoI(HAiP!Ċ+P+fyG3R4K79xlH ݓ΁P-]@i[E^~%lV«U:1۱ &cPch^xI8PuUW3Gb6D-e`ƀ0ĖAoiB&A+1*>ge"=}࢙K>]]!HA1=O׍ ~@KZ0kCԮ\SQd6}\cCh}LnZ}"5vFגau ~0b*4&_41~i쪱K'z7 V Q9CWT` Mg:JEFLz:b} f`!4 @O)hY6:^zrziӘS,A8t$mPbۣ璙ƫY:7E1'1GkDu~Z>qѸ|P_$iIA"ȵ\mcmÄ dӹc!Rf/ AP`6'/ ͟\{ W6DO@0sSۻ0ztîZ]??LtEK7I4٪Vy6a[TrFjT B4/uR#HEM]P6Kϼ3 CA{7OT@MCj3μx:fd T gM>ʟ ZQ&Z2»={QG=^m֖z~]RtGLADޡmh²qTD"[ZIbJxOv}—4}tw`7>mn1V(K-\m#6QN:EYߏCߖ ]_ҩ(Zwuv՘ӔYUq:Mn֩')b nzfGبmKF:i2%*_i>şiƥ6F,?N.K);m-³Mf /Vg'=I49 y&Y.HiI.*(`cS;QYkQ$[cC4_?_]kWnsKl_r ;N\\Ppl{G2C_TR`BE=Ϳ^n.,$#\S̀8¶gX2OrXGcuMXtİ>mX I-]h8.u1.);Vve"dK{~hIw }0l6aǬHI-9ǿu珬Uqo<;|/:t;_}oodƂ#E-rvhE | q2!m:tf|{,~k[ucA.TuOKW6m8|DRІÌwomt`AObCPl ~G.c/9uKN?t [12T2>L>5ݧ vLnFyJ۰[ѝM;Qݳ:wT3t-~>oa9=^_^wmVdmi5ꕒ((1Kc$l'18uW24=hu6Zf$#2<}O+"yi4C,9f$s&!ؼm[O2O7K*xoU8)7x%;U9|qؽ鿘'S^;^9-mjI%dƩ0{,S4?F"G:KIxA :m EycTz M.N#+|ÿf-hG'c.Cʧ[~.(X: r$?" jǬ2ۜ =!K,r+Ѓ:}i;W 4Ee}|Rm[g"Bp- 6;1V"v?'z9Ņ<:}«tꑋ_2Ƞ>Ft#ؾ]_`\aٞ۷Bqd[!ɲEԷ+{q &6XO,z3T<:LAM_ ,!HCk[2oXҹa'TʈtLt4+r5deʕδ徖`[hK0{_I |d!om2!cB!A]R:M7RRnrd. ؈uP_ell KX7iJqhރF;6DˁJ6!-TI*=JqosG5CvOv^6S\jf3>mp=0=2Koblv/GyY:;GKMEl:+7e :-c;"{Um0_.83plll˧rFsԐlӸ* "dƛ>6VQҾ7C& vW!Zw0 nV 1d.voc8G@nȡq'bmnA3;b @5G_JZID!< /܁000v3 Џ䅚!O,ZLbego$6-{b6UQzK|Bo(Ľ}.^6xCZM+->6S=zmDU#f5V,_nocn*T]շFLVqh;=*&gc"0N\d{oe`[Y2 |u)*R.#S Rå?)ݾN H˒`j x0Eߵ|~$tB6^ GM}Rն3L ]D\Chx|bfZ*;ӕL(0u Ou0y+nr*F+JIa0r xfGvjn8SŌ9Ix9/cq )qzН3OY_4WcxQFJCIQjzOrcWg#)^Ύ\4u~qYݨQ%5_i393ʤ0K< =S 0LfW؝֬F^xܨtqws>nׁ~W-M`ب%j}<>,|TLQwg^( VYv=='  &ũj:ڒWo͏f֏ˉLt2j|So fi /W`Z=h'rjT'ِ U]9g[g ^=~UPF =*'=,Nόs5R՜lal@%9a= rDW&Sg QbL{%Uhs4 /'LFzjgGj9n\ck`Jχgd4D&{e+@ڧ_7SUU63{}\X\`$ٟncٖ^P0w>K2 +sQ.cA]BӵEWu2Kͷ1q3bɴm `Ԡ%㡙|ǚ{ʬ*?މ"iIѠ?3D% n 6U+Lq'n-Yr{TEe@']9Sa³f䤀Ѡ H3r:F\NwL>QP"<⭃ {O XGej- OGB+?Či=ŧ٨T-]3.V ;Zvl{+> ^WS$yʅcqc=nOTYL15ώ5aEm[{%Lzam|9͟OM֕ ^o\ /XUó[%LlnN Y/v@x1*y?6R4_)@XԢkq H9n_>R r4 [}֠o 7ޅē7U^b1ue^IN]XDi>1t0JjH%zV_ ?v۰|/[^/:26Eh ߡ:!f?vG (pO·YCO>Ub.wb%tpBN@Kwm9V#l,~$``0b7Nv\_^6 m<%c|pUY2B VD$fGL)U~T>IctJ{OUҚ<1a:\s~F`Cc`U~&> yS b*bI^\`:.Ծ#5!3{b;ûr5'S{2ιiqIi7C37%_Y ~akbUkQ1T-݆F~t^ cxX{A:=M~p?_IWu;RBk`DhR*|"}d Sۅp,r-^R4WZU9C 0f(,k6ȸ(':i拣q)RuJpj:(6vyԽ>ؒ/b1OH7H:kV8jb5z匽dzV>e:qñS,^_j03:L6,e 5߬GL}dю@:"s6L xUߩR.p\}#O1߷7w||%pb_->MPέ]mhHX KACMنbBdUV"Ʌ !6K3x'D%uN|GuUr՞J5ѩ߇ö.sQ{Xc%89[HX*M̫5'7}n~7G~#|̩V'rFmgTd iR-?ݢ|fB,_g~^jۜ8.wt\W7XcCINlTuo'k-c87z7:ًz>ՆdAu2&+7j=n=mo-Zxvj_&𕩸".L!㗓OE}w2—Ў}þ haV]B<Phd9Ƹ2=/2°%hBĂ} FN{Ǻ4fFldv =!?PU8B^ޡ%T9{k4)IV 3XV"[A'dq+C 7anCn߻&M~́]wUE -DCNwEIq Mޛ%Q呶鴁葩QzfT%pS\hkxaYz,@"_qK̐*~`ƹ8ˇ7Q e [NHv;m\E2ͬpЯ90feƀ)|u߯]QQhaEwR^U6m$ck wVy71 7Mk *9F4Ϲ36G[A"T&͞}Zi& p & dtbz$ /? ;@sTcֹ Buw~RS?p9Xl+۽T0"k͋WDaOz5e5NWP"q܀3eb˲zmB{Q qOÙۧiGJ. )0 _\ƺv57953<Щ]BQTB;cw'T(~:\*dXK0R>qgC;#`iBs@ƼS1m/+ha".̹bu!YB7MdAp㸷Ss3Vpjv֪$6v{ йHFT.=0u=}8ѐjBbC(Pسa*yMHW9rAjɊ,)W=9=8WЗ!PcWL;obqo)twŹDR'{nk%:(-Xu H&sU=z:&岝 zFUA_쒿Q=6oǿ!^>-7Wƿ(;?WI/CS ML"`3 `?{qoKxI!Xr[CuŽaHq(Q߰\ҥF=LYMidpcqF\ L==VwERcq;XZD\$BdxJd@K$M2P{wH({0Ȃ%9Ŵj-=~$&^^Q+:PdSvWBb: ɞT '-!5ĈAol=w҆.cVtm :LF?4Ir*V˓:b[nA A(?M\.9=lK Touu9qE'2O:YGFY݈}Uo rĥ=Ufۉ !W=S x"Ip. GdcAFt+g˔g{1Z2,>ۂ"|mGLB[vv)ujo<1K0w]YOvqލsEثG#/)~p:9] CM=ߛ>=d»c$Ui9^LJ+bXcC@HͷX0LY]3FV؃ѫǃ!䭘X9Ǫű5yK}#XL&M|x@ &, ڧVk:jl2'3F-F~A2r3BՏ*ZP\F'`:LQkꕍv:Yw>K!x?PFM7gQ1ӎfr'ʁ݁YNN:8b<o 4ƌsog{ˑRsŜ5!=B~\ I:{?JKMK7 ԗ):PE* jAkmLfѸ RB $,jSGSmɖF`HJ;D24 ٭7grRҹ/y)|{LԌ͉MF̓BGONv #?ѱD%.L%xȻ*sL,o|jTyXĩklJ3IhR-Tt>b*O˗+a[M>M< =aQW sd[#mfuž`-8 ˶X>i;`6!qiB]9}['5giY ei7dπG$_x8!ls+Fr쯌Ȉ~W3n:cմ +@+jr hqxh{!w n@q?0v3/fUHJM&_;N؅~6>u}|+W{0rcDPXK!Xajіs"*~{eU&/$~u+}L$]>7~'U(Q{]K{*Rfa}E"kdѿL^>L*47$DawgJߌ,nq4Z23K#_?1GxS,@ˋM/UJuUhc=bx h z/\:GWs8a#c2ܒp&gT, 3~[ȩwm PK-^6KE3w}t\y z)dEw=$,IUbߴ~1(ʩ~lw~xY kGs_RLǬKrإ8pvF * ߞpBPMUJƟ"3#[/flrHOq;[Wϴ6hJ6K@O1MXqdN_/>~He:iSClq%9Ptw_2T8ڄ/%Ia8~J1 m!ni ^|][^̀a0c?`3,$T!k79VΨq ' e8Maoμ4"5^v,̰ݘ:Cd,9Iם!;o%\(׼W:mܳB[VMrwOb!a|_R3  -MY)Y* 4TY uBԙXK5`R ]?k7?v67ostĭ;_tn"O/׬ܭ@6,UтN2O4=} YdR^$?8;GŮ6/GE^gmi\o=8{EPë^ AM򈳉G+%BwFpXNfޟZn]֠D4J/k&.+'d|r|'hnnr`;6-!EV>X 8F3>$R/19Ā7C'C}ӫ>d/Bu,9c'f7+SAN sÍΨO7J}YO-f0ً<m`zo_}!d,c;U,N> ߯jbw k_-c _|7qf 7O=ʜ^}E `{Y⻎5(06 o c&'=޺8sOd؋dZ h,-/81 y /x:)8{!Y=s1Ge[JJPnətPy@G3nV8B즲.N.8">#2vqljmAJ06 rV},gw>Ar2fzC4XS]Ŏ ?[@6fMM("s"'L Hݴb)r{c8Q:?Ŀ~jȽL]<}XׁIv:ҝLp |Ǝ_SW ν="2yP D,VD\$* W U8(c9vV#0e~6!.d@M*.b;qžm:hhl'Na:LIiGb$h/5PL9M &Fʘ<3x3Հ˛߳ b7-[JB==Ax#U1;ܫ5V1K0ʱL폗|O|sЪ35l޽i/۸˘[q[dR'V{?msfأ?םj bFcG0ǟ^yl4:G[sg羕ldTWt6Fۖs+he^*z,<Ψ!Ё;o_!8-Ƈsj {3]hR@A@@ 2@ "O.%xν5t)?F5lՋO{L@@8ᜫ>%B_RL'd/>pz*kDO@-|]tJkAК *?#/p,v`> fޠO~M̶aPIUGOkU j(ו7綞8|-ũ~j%{f#~e& ~a߀ï(96>`6B{7 %pj`pr^z to6\tHi9ؓ0MAW3C9w8,p1a֌DOjHCq.8V˾@x4/(aHۅD%3Qd Q9\2GزR;ߍ]3QhpA+ɭY>tP--sNjL:.HܻB‚􎉛+ !s.GŁ}\WռVk/nceGz=4YB2-m;q5Յ$ZeikIBfjŒE;ocԛh#U{?HIxR:p=֖f 51,SgÞ>z)pPrЉdb%٨ ؈=pfĹҹDzQ)82hn_B1lgͰjIhdiϼ\Gi^* -^`vʑDaN]F"Պ#%YPҚ/,fϗEdu}mݱ;P`?xj Xͧw`72Ȏ0\L]izwm!|8zNUnp=N{Z 7bEl9mLTsjQO(1PedTm fJ2h<>k 7GCp;(zYx2So?` "(_SpUGpne[Yg VGNK=wf;Wo>i"yfwPmO58| c#q@R9I议ըοDK, ƅ)B `" ACTA-z\P]CI?pT&Ul<`M9 ] ȳ |K[ "t{-qDzIlǰ $exiAA龏;}_Q5(k SZ.Ǎ7pI hh5׌݅;PlYkesC{Շj(UE.L GH1?tMEGN0BG\}^D2פB0~+v3v{[w׮T@j~^:]RuԨ/THe^8CFt'̄h=rN P|a׋z]lbCBdvg*@U"7kóu )TKjse%vIj)" h}Ɋɲr=UK[_{=۴x`5h#6޺\܄QEw {#'x^+elAvW(؄a3(!GhV.-[|6Q}k :B9M:uoӼM!T:GK֕ÐA͉%ߺtq3ґh<,wX$@#4tL36fǵ!ql!vg`m-vA%rTS*t&벛(AMYsplz[N,Ejn/}DEA;M"K>2m1` ^^֙͘7a12 ZMց4j" (.߼R~ 3k1@ sPR4C刕L8#7QD.E7=ZnQ38Ԃ;{~ L>xܢ-svuoHK~m KA?K %ǺVM%Hb-(,a)m9/+3[.1+5 xn,f#({OpBR.S  -O|ZVv@?ml SwHhn"uA)*}|Cř!i3? 3]g7 )=!⹨sڢ|'pq_Ȑ\ߥJPcw ?7Z+ĄВk_ ԅkxy[W&=:aI1vsݙBٹۮr'ЮF_MbQ"p] B8;M&jg(4!Iߵ\l1pVrhrg Hd_4+)TNfR2-G!lR&f̩oBQgժXCշdԕ e*KٔC ^A?7JLTf̚[(`pÇO-b?Ilz~Fl._(ʕjhڝn?ƳlXXowãcCrJjZg2aZz~ „2.r)+.;y_`E+^"d)e\pQ<^:.XwЊtk'bLamQ{,p"D!:Fٓ[Y}gDko[%Kxo<_(ʕI5Щ~'& nT`۹(@TP!W ğQňuF@Xs*탰us0t,`L6 ?~/_~xj|33g͞cY/w ]K.+ZblȞݳ~W $e98N [p/8hD=N (ߗө3Ll@~3$n+֍ʕjhڝnnn  GxKҙl._(ʕjQU &Դj#go694H@0HaCGSPRQ30?F ,^_? *˩?eMA+>8Tjb=h BSޏ>G0bsO7Q#Z?Q=.8K*WD¸'S%&{B*ml=U0 *!՘m1{B*mlNP>gY,PpPPv-.>8TǕTe:`6"LcӁ3˛79鼠GOʢU+Ӣc/:) ,(3M#NC6*-Ϡ nc P5}xɢ6U lj%㎁`.>N/'@#- QI3]{0DIu4cb/u_*v/Ӷ:M-5>qaH(_PkimYXХ{]QwB ,[(Kf;Z["v-Vءpe1%Mܙ_;&>x)enCWmd~n9؎`z.l%I MPČUd쵛O8pxq1Ļ╴@PRC34[h*B"^p[s@I hB9fy0ϸ@ Déjmd%|N5:Iflg>l h>j̦(HZk^\*++ƞ9nK[: :qgT22K?d\="Lesm(0K;P=!660S֡|0{B*mlaBT\ „2 @ eRics]ʸ'z eAٗH-hЙaoWzVxbzne a]2WxX:@>Npx? ܙl=w u/(hl־dY* '    T     @ f %RE    $!k(D'  % %  0%/&p@0 !"""`>N^n~.>N^n~>N^n~ !"""`!@P`p 0@P`p!@P`p\XSB1ݬ        ,,,,,,,,,,,,,tLT$l x T ( dl,4dpH$d,t( !"0# $,$&D'()T**,,-.@./`/00123d4445 556 6\67H78 8`89L9:h:;<>?h?@H@A0ABXBCdCDLDEFG0GHIJ8KLMdN,NNOP`PQ4QR RlS,ST`U0WXZ[@[\<\]^(^_`pb,bddePefg`giLijDk klm@n,oLpqrsxttuD{`||}}~Hl@lH T H`@$\XDTXDP,8d\Hx tXpdxt@ Œ\ ļŸƔ0dʨˀ͔xϰЌ,ш҈ ӌ8,՜`lHش`Tڸ۔@lބ߬lp 4X$l( ` d      ,,8(Xx|T@| !"x##l$$'h(*L,T.L1t1230345t6T7$8 9H::;<<?X@ABCDEHFHGpHHIxJ JKLMN@P@QRSDT ULV`VWXX4XZZ[d[\|]^`aHabcXdetfhghi\jxnp@svwxyz{h|}}\lt4t88LT|| 4xLX(  @lt$xLL HĠT(  ʈˠϔldPՄxpڬTT ވL <H$l4 Pl ,xp,xt d 44,hP 4   4<,,408$8T |!h"$L%0&H'()*0*+,.$.012@234t5$69 ::; ;<(<=4?@ACDFH`HILLLLLLLLLLLLLLLLp7!!!@pp p]!2#!"&463!&54>3!2+@&&&&@+$(($F#+&4&&4&x+#+".4>32".4>32467632DhgZghDDhg-iWDhgZghDDhg-iW&@ (8 2N++NdN+';2N++NdN+'3 8!  #"'#"$&6$ rL46$܏ooo|W%r4L&V|oooܳ%=M%+".'&%&'3!26<.#!";2>767>7#!"&5463!2 %3@m00m@3%    @ :"7..7":6]^B@B^^BB^ $΄+0110+$ (   t1%%1+`B^^B@B^^"'.54632>324 #LoP$$Po>Z$_dC+I@$$@I+"#"'%#"&547&547%62V??V8<8y   b% I))9I  + % %#"'%#"&547&547%62q2ZZ2IzyV)??V8<8)>~>[   2 b% I))9I %#!"&54>3 72 &6 }XX}.GuLlLuG.>mmUmEEm> /?O_o54&+";2654&+";2654&+";264&#!"3!2654&+";2654&+";264&#!"3!2654&+";2654&+";2654&+";267#!"&5463!2&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&^BB^^B@B^@&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&B^^B@B^^/?#!"&5463!2#!"&5463!2#!"&5463!2#!"&5463!2L44LL44LL44LL44LL44LL44LL44LL44L4LL44LL4LL44LL4LL44LL4LL44LL /?O_o#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!28((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(8 (88((88(88((88(88((88(88((88(88((88(88((88(88((88(88((88(88((88/?O_#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!28((88(@(88((88(@(88(@(88((88((88(@(88(@(88((88(@(88((8 (88((88(88((88(88((88(88((88(88((88(88((88y"/&4?62 62,PP&PP,jPn#$"' "/&47 &4?62 62 PP&P&&P&P&P&&P&P#+D++"&=#"&=46;546;232  #"'#"$&6$   @    @  rK56$܏ooo|W@    @   rjK&V|oooܳ0#!"&=463!2  #"'#"$&6$   @ rK56$܏ooo|W@  @ rjK&V|oooܳ)5 $&54762>54&'.7>"&5462zz+i *bkQнQkb* j*LhLLhLzzBm +*i JyhQQhyJ i*+ mJ4LL44LL/?O%+"&=46;2%+"&546;2%+"&546;2+"&546;2+"&546;2`r@@r@@n4&"2#"/+"&/&'#"'&'&547>7&/.=46?67&'&547>3267676;27632Ԗ #H  ,/ 1)  ~'H  (C  ,/ 1)  $H ԖԖm 6%2X  % l2 k r6 [21 ..9Q $ k2 k w3 [20/;Cg+"&546;2+"&546;2+"&546;2!3!2>!'&'!+#!"&5#"&=463!7>3!2!2@@@@@@@`0 o`^BB^`5FN(@(NF5 @@@L%%Ju  @LSyuS@%44%f5#!!!"&5465 7#"' '&/&6762546;2&&??>  LL >  X   &&&AJ A J Wh##!"&5463!2!&'&!"&5!(8((88((`x c`(8`((88(@(8(D 9 8( ,#!"&=46;46;2.  6 $$ @(r^aa@@`(_^aa2NC5.+";26#!26'.#!"3!"547>3!";26/.#!2W  .@   @.$S   S$@   9I   I6>  >%=$4&"2$4&"2#!"&5463!2?!2"'&763!463!2!2&4&&4&&4&&48(@(88(ч::(8@6@*&&*4&&4&&4&&4& (88(@(8888)@)'&&@$0"'&76;46;232  >& $$ `  (r^aa` @`2(^aa$0++"&5#"&54762  >& $$ ^ ?  @(r^aa` ? (^aa #!.'!!!%#!"&547>3!2<<<_@`&& 5@5 @  &&>=(""='#"'&5476.  6 $$   ! (r^aaJ %%(_^aa3#!"'&?&#"3267672#"$&6$3276&@*hQQhwI mʬzzk)'@&('QнQh_   z8zoe$G!"$'"&5463!23267676;2#!"&4?&#"+"&=!2762@hk4&&&GaF * &@&ɆF * Ak4&nf&&&4BHrd@&&4rd  Moe&/?O_o+"&=46;25+"&=46;25+"&=46;2#!"&=463!25#!"&=463!25#!"&=463!24&#!"3!26#!"&5463!2 @  @  @  @  @  @  @    @    @    @   ^B@B^^BB^`@  @ @  @ @  @ @  @ @  @ @  @ 3@  MB^^B@B^^!54&"#!"&546;54 32@Ԗ@8(@(88( p (8jj(88(@(88@7+"&5&5462#".#"#"&5476763232>32@@ @ @KjKך=}\I&:k~&26]S &H&  &H5KKut,4, & x:;*4*&K#+"&546;227654$ >3546;2+"&="&/&546$ <X@@Gv"DװD"vG@@X<4L41!Sk @ G< _bb_ 4.54632&4&&M4&UF &""""& F&M&&M&%/B/%G-Ik"'!"&5463!62#"&54>4.54632#"&54767>4&'&'&54632#"&547>7676'&'.'&54632&4&&M4&UF &""""& FU &'8JSSJ8'&  &'.${{$.'& &M&&M&%/B/%7;&'66'&;4[&$ [2[ $&[  #/37#5#5!#5!!!!!!!#5!#5!5##!35!!! #'+/37;?3#3#3#3#3#3#3#3#3#3#3#3#3#3#3#3#3???? ^>>~??????~??~??^??^^? ^??4&"2#"'.5463!2KjKKjv%'45%5&5L45&% jKKjK@5%%%%54L5&6'k54&"2#"'.5463!2#"&'654'.#32KjKKjv%'45%5&5L45&%%'4$.%%5&55&% jKKjK@5%%%%54L5&6'45%%%54'&55&6' yTdt#!"&'&74676&7>7>76&7>7>76&7>7>76&7>7>63!2#!"3!2676'3!26?6&#!"3!26?6&#!"g(sAeM ,*$/ !'& JP$G] x6,& `   h `   "9Hv@WkNC<.  &k& ( "$p" . #u&#  %!' pJvwEF#  @   @  2#"' #"'.546763!''!0#GG$/!''! 8""8  X! 8" "8  <)!!#"&=!4&"27+#!"&=#"&546;463!232(8&4&&4 8(@(8 qO@8((`(@Oq8(&4&&4&@` (88( Oq (8(`(q!)2"&42#!"&546;7>3!2  Ijjjj3e55e3gr`Ijjjj1GG1rP2327&7>7;"&#"4?2>54.'%3"&#"#ժ!9&WB03& K5!)V?@L' >R>e;&L::%P>vO 'h N_":- &+# : ' +a%3 4'.#"32>54.#"7>7><5'./6$3232#"&#"+JBx)EB_I:I*CRzb3:dtB2P$ $5.3bZF|\8!-T>5Fu\,,jn OrB,7676'5.'732>7"#"&#&#"OA zj=N!}:0e%  y + tD3~U#B4 # g  '2 %/!: T bRU,7}%2"/&6;#"&?62+326323!2>?23&'.'.#"&"$#"#&=>764=464.'&#"&'!~:~!PP!~:~!P6 ,,$$% *'  c2N  ($"LA23Yl !x!*%%%% pP,T NE Q7^oH!+( 3  *Ueeu  wga32632$?23&'.5&'&#"&"5$#"#&=>7>4&54&54>.'&#"&'2#".465!#".'&47>32!4&4>Q6 ,,Faw!*' =~Pl*  ($"LA23Yl  )!* <7@@7<  <7@@7<  pP,T MF Q747ƢHoH!+( 3  tJHQ6  wh',686,'$##$',686,'$##$/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?O_o%+"&=46;2+"&=46;2+"&=46;2#!"&=463!2+"&=46;2#!"&=463!2#!"&=463!2#!"&=463!2        @     @   @   @   s  s    s    s  s  /?O#"'&47632#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2     @     @   @  @          s  s  s  /?O#"&54632 #!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2`      @     @   @  @     @   s  s  s  #"'#!"&5463!2632' mw@www '*wwww."&462!5 !"3!2654&#!"&5463!2pppp@  @ ^BB^^B@B^ppp@@  @    @B^^BB^^k%!7'34#"3276' !7632k[[v  6`%`$65&%[[k `5%&&'4&"2"&'&54 Ԗ!?H?!,,ԖԖmF!&&!Fm,%" $$ ^aa`@^aa-4'.'&"26% 547>7>2"KjKXQqYn 243nYqQ$!+!77!+!$5KK,ԑ ]""]ً 9>H7'3&7#!"&5463!2'&#!"3!26=4?6 !762xtt`  ^Qwww@?6 1B^^B@B^ @(` `\\\P`tt8`  ^Ͼww@w 1^BB^^B~ @` \ \P+Z#!"&5463!12+"3!26=47676#"'&=# #"'.54>;547632www M8 pB^^B@B^ 'sw- 9*##;Noj' #ww@w "^BB^^B  *  "g`81T`PSA:'*4/D#!"&5463!2#"'&#!"3!26=4?632"'&4?62 62www@?6 1 B^^B@B^ @ BRnBBn^ww@w 1 ^BB^^B @ BnnBC"&=!32"'&46;!"'&4762!#"&4762+!54624&&4&&44&&4&&44&&44&&4&&44&&6'&'+"&546;267: &&&& s @  Z&&&&Z +6'&''&'+"&546;267667: : &&&&  s @  :  Z&&&&Z  : z6'&''&47667S: : s @  : 4 : | &546h!!0a   $#!"&5463!2#!"&5463!2&&&&&&&&@&&&&&&&&#!"&5463!2&&&&@&&&&&54646&5- : s  :  :4:  +&5464646;2+"&5&5-  &&&& : s  :  : &&&& :  &54646;2+"&5- &&&& s  : &&&&  62#!"&!"&5463!24 @ &&&&-:&&&& "'&476244444Zf "/&47 &4?62S44444#/54&#!4&+"!"3!;265!26 $$ &&&&&&&&@^aa@&&&&&&&&+^aa54&#!"3!26 $$ &&&&@^aa@&&&&+^aa+74/7654/&#"'&#"32?32?6 $$ }ZZZZ^aaZZZZ^aa#4/&"'&"327> $$ [4h4[j^aa"ZiZJ^aa:F%54&+";264.#"32767632;265467>$ $$ oW  5!"40K(0?i+! ":^aaXRd D4!&.uC$=1/J=^aa.:%54&+4&#!";#"3!2654&+";26 $$ ```^aa^aa/_#"&=46;.'+"&=32+546;2>++"&=.'#"&=46;>7546;232m&&m l&&l m&&m l&&ls&%&&%&&%&&%&&&l m&&m l&&l m&&m ,&%&&%&&%&&%&#/;"/"/&4?'&4?627626.  6 $$ I     ͒(r^aaɒ    (_^aa , "'&4?6262.  6 $$ Z4f44fz(r^aaZ&4ff4(_^aa "4'32>&#" $&6$  WoɒV󇥔 zzz8YW˼[?zz:zz@5K #!#"'&547632!2A4@%&&K%54'u%%&54&K&&4A5K$l$L%%%54'&&J&j&K5K #"/&47!"&=463!&4?632%u'43'K&&%@4AA4&&K&45&%@6%u%%K&j&%K55K&$l$K&&u#5K@!#"'+"&5"/&547632K%K&56$K55K$l$K&&#76%%53'K&&%@4AA4&&K&45&%%u'5K"#"'&54?63246;2632K%u'45%u&&J'45%&L44L&%54'K%5%t%%$65&K%%4LL4@&%%K',"&5#"#"'.'547!34624&bqb>#  5&44& 6Uue7D#  "dž&/#!"&546262"/"/&47'&463!2 &@&&4L  r&4  r L&& 4&&&L rI@& r  L4&& s/"/"/&47'&463!2#!"&546262&4  r L&& &@&&4L  r@@& r  L4&& 4&&&L r##!+"&5!"&=463!46;2!28(`8((8`(88(8((8(8 (8`(88(8((8(88(`8#!"&=463!28(@(88((8 (88((88z5'%+"&5&/&67-.?>46;2%6.@g.L44L.g@. .@g. L44L .g@.g.n.4LL43.n.gg.n.34LL4͙.n.g -  $54&+";264'&+";26/a^    ^aa fm  @ J%55!;263'&#"$4&#"32+#!"&5#"&5463!"&46327632#!2$$8~+(888(+}(`8((8`]]k==k]]8,8e8P88P8`(88(@MMN4&#"327>76$32#"'.#"#"&'.54>54&'&54>7>7>32&z&^&./+>+)>J> Wm7' '"''? &4&c&^|h_bml/J@L@#* #M6:D 35sҟw$ '% ' \t3#!"&=463!2'.54>54''  @ 1O``O1CZZ71O``O1BZZ7@  @ N]SHH[3`)TtbN]SHH[3^)Tt!1&' 547 $4&#"2654632 '&476 ==嘅}(zVl''ٌ@uhyyhu9(}VzD##D# =CU%7.5474&#"2654632%#"'&547.'&476!27632#76$7&'7+NWb=嘧}(zVj\i1  z,X Y[6 $!%'FuJiys?_9ɍ?kyhun(}Vz YF  KA؉La  02-F"@Qsp@_!3%54&+";264'&+";26#!"&'&7>2    #%;"";%#`,@L 5 `   `  L`4LH` `   a 5 L@ #37;?Os!!!!%!!!!%!!!!!!!!%!!4&+";26!!%!!!!74&+";26%#!"&546;546;2!546;232 `@ `@ @@ @ @  @  @  @  @ L44LL4^B@B^^B@B^4L  @@@@    @@   @@    M4LL44L`B^^B``B^^B`L7q.+"&=46;2#"&=".'673!54632#"&=!"+"&=46;2>767>3!546327>7&54>$32dFK1A  0) L.٫C58.H(Ye#3C $=463!22>=463!2#!"&5463!2#!"&5463!2H&&/7#"&463!2!2LhLLhLhLLh! &&&&& &4hLLhLLhLLhL%z< 0&4&& )17&4& &&#!"&5463!2!2\@\\@\\@\\\\ W*#!"&547>3!2!"4&5463!2!2W+B"5P+B@"5^=\@\ \H#t3G#3G:_Ht\\ @+32"'&46;#"&4762&&4&&44&&44&&4@"&=!"'&4762!54624&&44&&44&&4&& !!!3!!0@67&#".'&'#"'#"'32>54'6#!"&5463!28ADAE=\W{O[/5dI kDtpČe1?*w@www (M& B{Wta28r=Ku?RZ^GwT -@www$2+37#546375&#"#3!"&5463ww/Dz?swww@wS88 ww#'.>4&#"26546326"&462!5!&  !5!!=!!%#!"&5463!2B^8(Ԗ>@|K55KK55K^B(8ԖԖ€>v5KK55KKHG4&"&#"2654'32#".'#"'#"&54$327.54632@pp)*Pppp)*Pb '"+`N*(a;2̓c`." b PTY9ppP*)pppP*)b ".`(*Nͣ2ͣ`+"' b MRZB4&"24&"264&"26#"/+"&/&'#"'&547>7&/.=46?67&'&547>3267676;27632#"&'"'#"'&547&'&=4767&547>32626?2#"&'"'#"'&547&'&=4767&547>32626?2ԖLhLKjKLhLKjK "8w s%(  ")v  >  "8x s"+  ")v  <  3zLLz3 3>8L3)x3 3zLLz3 3>8L3)x3 ԖԖ4LL45KK54LL45KK #)0C wZ l/ Y N,& #)0C vZl. Y L0"qG^^Gqq$ ]G)FqqG^^Gqq$ ]G)Fq%O#"'#"&'&4>7>7.546$ '&'&'# '32$7>54'VZ|$2 $ |E~E<| $ 2$|ZV:(t}X(  &%(Hw쉉xH(%& (XZT\MKG<m$4&"24&#!4654&#+32;254'>4'654&'>7+"&'&#!"&5463!6767>763232&4&&4N2`@`%)7&,$)' %/0Ӄy#5 +1 &<$]`{t5KK5$e:1&+'3TF0h4&&4&3M:;b^v+D2 5#$IIJ 2E=\$YJ!$MCeM-+(K55KK5y*%Au]c>q4&"24&'>54'654&'654&+"+322654&5!267+#"'.'&'&'!"&5463!27>;2&4&&4+ 5#bW0/% ')$,&7)%`@``2Nh0##T3'"( 0;e$5KK5 tip<& 1&4&&4&#\=E2&%IURI$#5 2D+v^b;:M2gc]vDEA%!bSV2MK55K(,,MeCM$!I@#"&547&547%6@?V8 b% I)94.""'." 67"'.54632>32+C`\hxeH>Hexh\`C+ED4 #LoP$$Po>Q|I.3MCCM3.I|Q/Z$_dC+I@$$@I+ (@%#!"&5463!2#!"3!:"&5!"&5463!462 ww@  B^^B  4&@&&&4 `  ww   ^B@B^ 24& && &%573#7.";2634&#"35#347>32#!"&5463!2FtIG9;HIxI<,tԩw@wwwz4DD43EEueB&#1s@www .4&"26#!+"'!"&5463"&463!2#2&S3 Ll&c4LL44LL4c@& &{LhLLhL'?#!"&5463!2#!"3!26546;2"/"/&47'&463!2www@B^^B@B^@&4t  r &&`ww@w@^BB^^B@R&t r  4&&@"&5!"&5463!462 #!"&54&>3!2654&#!*.54&>3!24&@&&&4 sw  @B^^B  @w4& && &3@w   ^BB^    I&5!%5!>732#!"&=4632654&'&'.=463!5463!2!2JJSq*5&=CKuuKC=&5*q͍S8( ^B@B^ (8`N`Ѣ΀GtO6)"M36J[E@@E[J63M")6OtG(8`B^^B`8 ',26'&'&76'6'&6&'&6'&4#"7&64 654'.'&'.63226767.547&7662>76#!"&5463!2  /[  . =XĚ4,+"  * +, 1JH'5G:: #L5+@=&#w@wwwP.1GE,ԧ4 4+ ; /5cFO:>JJ>:O9W5$@(b 4 @www'?$4&"2$4&"2#!"&5463!3!267!2#!#!"&5!"'&762&4&&4&&4&&48(@(88(c==c(8*&&*6&4&&4&&4&&4& (88(@(88HH88`(@&&('@1c4&'.54654'&#"#"&#"32632327>7#"&#"#"&54654&54>76763232632   N<;+gC8A`1a99gw|98aIe$IVNz<:LQJ  ,-[% 061I()W,$-7,oIX()oζA;=N0 eTZ  (O#".'&'&'&'.54767>3232>32 e^\4?P bMO0# 382W# & 9C9 Lĉ" 82<*9FF(W283 #0OMb P?4\^e FF9*<28 "L 9C9 & #!"3!2654&#!"&5463!2`B^^B@B^^ީwww@w^BB^^B@B^ww@w#!72#"' #"'.546763YY !''!0#GG$/!''!&UUjZ 8""8  X! 8" "8 GW4.'.#"#".'.'.54>54.'.#"32676#!"&5463!2 1.- +$)  c8 )1)  05.D <90)$9w@wwwW  )1) 7c  )$+ -.1 9$)0< D.59@www,T1# '327.'327.=.547&54632676TC_LҬ#+i!+*pDNBN,y[`m`%i]hbEm}a u&,SXK &$f9s? _#"!#!#!54632V<%'ЭHH (ںT\dksz &54654'>54'6'&&"."&'./"?'&546'&6'&6'&6'&6'&74"727&6/a49[aA)O%-j'&]]5r-%O)@a[9' 0BA; + >HCU  #  $  2  AC: oM=a-6OUwW[q ( - q[WwUP6$C +) (  8&/ &eMa  & $      %+"&54&"32#!"&5463!54 &@&Ԗ`(88(@(88(r&&jj8((88(@(8#'+2#!"&5463"!54&#265!375!35!B^^BB^^B   `^B@B^^BB^  ` !="&462+"&'&'.=476;+"&'&$'.=476; pppp$!$qr % }#ߺppp!E$ rqܢ# % ֻ!)?"&462"&4624&#!"3!26!.#!"#!"&547>3!2/B//B//B//B @   2^B@B^\77\aB//B//B//B/@    ~B^^B@2^5BB52.42##%&'.67#"&=463! 25KK5L4_u:B&1/&.- zB^^B4LvyKjK4L[!^k'!A3;):2*547&5462;U gIv0ZZ0L4@Ԗ@4L2RX='8P8'=XR U;Ig0,3lb??bl34LjjL4*\(88(\}I/#"/'&/'&?'&'&?'&76?'&7676767676` (5 )0 ) *) 0) 5(  (5 )0 )))) 0) 5( *) 0) 5(  )5 )0 )**) 0) 5)  )5 )0 )*5h$4&"24&#!4>54&#"+323254'>4'654&'!267+#"'&#!"&5463!2>767>32!2&4&&4N2$YGB (HGEG HQ#5K4Li!<;5KK5 A# ("/?&}vh4&&4&3M95S+C=,@QQ9@@IJ 2E=L5i>9eME;K55K J7R>@#zD<5=q%3#".'&'&'&'.#"!"3!32>$4&"2#!"#"&?&547&'#"&5463!&546323!2` #A<(H(GY$2NL4K5#aWTƾh&4&&4K5;=!ihv}&?/"( #A  5K2*! Q@.'!&=C+S59M34L=E2 JI UR@@&4&&4&5K;ELf9>igR7J K5h4&"24#"."&#"4&#"".#"!54>7#!"&54.'&'.5463246326326&4&&4IJ 2E=L43M95S+C=,@QQ9@@E;K55K J7R>@#zD9eMZ4&&4&<#5K4LN2$YGB (HGEG HV;5KK5 A# ("/?&}vhi!<4<p4.=!32>332653272673264&"2/#"'#"&5#"&54>767>5463!2@@2*! Q@.'!&=C+S59M34L.9E2 JI UR&4&&4&Lf6Aig6Jy#@>R7J K55K;E@TƾH #A<(H(GY$2NL4K#5#a=4&&4&D=ihv}&?/"( #A  5KK5;+54&#!764/&"2?64/!26 $$ & [6[[j6[&^aa@&4[[6[[6&+^aa+4/&"!"3!277$ $$ [6[ &&[6j[ ^aae6[j[6&&4[j[^aa+4''&"2?;2652?$ $$ [6[[6&&4[^aaf6j[[6[ &&[^aa+4/&"4&+"'&"2? $$ [6&&4[j[6[j^aad6[&& [6[[j^aa   $2>767676&67>?&'4&'.'.'."#&6'&6&'3.'.&'&'&&'&6'&>567>#7>7636''&'&&'.'"6&'6'..'/"&'&76.'7>767&.'"76.7"7"#76'&'.'2#22676767765'4.6326&'.'&'"'>7>&&'.54>'>7>67&'&#674&7767>&/45'.67>76'27".#6'>776'>7647>?6#76'6&'676'&67.'&'6.'.#&'.&6'&.5/a^D&"      4   $!   #          .0"Y +  !       $     "  +       Α      ^aa                        P   ' -( # * $  "  !     * !   (         $      2 ~/$4&"2 #"/&547#"32>32&4&&4V%54'j&&'/덹:,{ &4&&4&V%%l$65&b'Cr! " k[G +;%!5!!5!!5!#!"&5463!2#!"&5463!2#!"&5463!2&&&&&&&&&&&&@&&&&&&&&&&&&{#"'&5&763!2{' **)*)'/!5!#!"&5!3!26=#!5!463!5463!2!2^B@B^&@&`^B`8(@(8`B^ B^^B&&B^(88(^G 76#!"'&? #!"&5476 #"'&5463!2 '&763!2#"'c)'&@**@&('c (&*cc*&' *@&('c'(&*cc*&('c'(&@*19AS[#"&532327#!"&54>322>32"&462 &6 +&'654'32>32"&462QgRp|Kx;CByy 6Fe= BPPB =eF6 ԖV>!pRgQBC;xK|Ԗ{QNa*+%xx5eud_C(+5++5+(C_due2ԖԖ>NQ{u%+*jԖԖp!Ci4/&#"#".'32?64/&#"327.546326#"/&547'#"/&4?632632(* 8( !)(A(')* 8( !USxySSXXVzxTTUSxySSXXVzxT@(  (8 *(('( (8 SSUSx{VXXTTSSUSx{VXXT#!"5467&5432632t,Ԟ;F`j)6,>jK?s !%#!"&7#"&463!2+!'5#8EjjE8@&&&&@XYY&4&&4&qDS%q%N\jx2"&4#"'#"'&7>76326?'&'#"'.'&676326326&'&#"32>'&#"3254?''74&&4&l NnbSVZ bRSD zz DSRb)+USbn \.2Q\dJ'.2Q\dJ.Q2.'Jd\Q2.'Jd`!O` ` &4&&4r$#@B10M5TNT{L5T II T5L;l'OT4M01B@#$*3;$*3;;3*$;3*$: $/ @@Qq`@"%3<2#!"&5!"&5467>3!263! !!#!!46!#!(88(@(8(8(`((8D<++<8(`(8(`8(@(88( 8((`(8((<`(8(``(8||?%#"'&54632#"'&#"32654'&#"#"'&54632|udqܟs] = OfjL?R@T?"& > f?rRX=Edudsq = _MjiL?T@R?E& f > =XRr?b!1E)!34&'.##!"&5#3463!24&+";26#!"&5463!2 08((88(@(8  8((88((`(1  `(88((88(@  `(88(@(8(`#!"&5463!2w@www`@www/%#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&&&&&@'7G$"&462"&462#!"&=463!2"&462#!"&=463!2#!"&=463!2ppppppp @   ppp @    @   Рpppppp  ppp    <L\l|#"'732654'>75"##5!!&54>54&#"'>3235#!"&=463!2!5346=#'73#!"&=463!2#!"&=463!2}mQjB919+i1$AjM_3</BB/.#U_:IdDRE @  k*Gj @   @   TP\BX-@8 C)5Xs J@$3T4+,:;39SG2S.7<  vcc)) %Ll}    5e2#!"&=463%&'&5476!2/&'&#"!#"/&'&=4'&?5732767654'&@02uBo  T25XzrDCBBEh:%)0%HPIP{rQ9f#-+>;I@KM-/Q"@@@#-bZ $&P{<8[;:XICC>.'5oe80#.0(  l0&%,"J&9%$<=DTIcs&/6323276727#"327676767654./&'&'737#"'&'&'&54'&54&#!"3!260% <4"VRt8<@< -#=XYhW8+0$"+dTLx-'I&JKkmuw<=V@!X@ v '|N;!/!$8:IObV;C#V  &   ( mL.A:9 !./KLwPM$@@ /?O_o%54&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!26#!"&5463!2@@@@@@@@@^BB^^B@B^NB^^B@B^^#+3 '$"/&4762%/?/?/?/?%k*66bbbb|<<<bbbbbbbb%k66Ƒbbb<<<<^bbbbbb@M$4&"2!#"4&"2&#"&5!"&5#".54634&>?>;5463!2LhLLh LhLLhL! 'ԖԖ@' !&  ?&&LhLLhL hLLhL jjjj &@6/" &&J#"'676732>54.#"7>76'&54632#"&7>54&#"&54$ ok; -j=yhwi[+PM 3ѩk=J%62>VcaaQ^ ]G"'9r~:`}Ch 0=Z٤W=#uY2BrUI1^Fk[|aL2#!67673254.#"67676'&54632#"&7>54&#"#"&5463ww+U ,iXբW<"uW1AqSH1bdww'74'!3#"&46327&#"326%35#5##33#!"&5463!20U6cc\=hlࠥYmmnnnnw@wwww&46#Ȏ;edwnnnnn@www ]#/#"$&6$3 &#"32>7!5!%##5#5353Еttu{zz{SZC` cot*tq||.EXN#?? ,<!5##673#$".4>2"&5!#2!46#!"&5463!2rM* *M~~M**M~~M*jjj&&&&`P%挐|NN||NN|*jjjj@&&&&@ "'&463!2@4@&Z4@4&@ #!"&4762&&4Z4&&4@@ "'&4762&4@4&@&4&@ "&5462@@4&&44@&&@ 3!!%!!26#!"&5463!2`m` ^BB^^B@B^  `@B^^BB^^@ "'&463!2#!"&4762@4@&&&&44@4&Z4&&4@ "'&463!2@4@&4@4&@ #!"&4762&&4Z4&&4@:#!"&5;2>76%6+".'&$'.5463!2^B@B^,9j9Gv33vG9H9+bI\ A+=66=+A [">nSMA_:B^^B1&c*/11/*{'VO3@/$$/@*?Nh^l+!+"&5462!4&#"!/!#>32]_gTRdgdQV?U I*Gg?!2IbbIJaaiwE3300 084#"$'&6?6332>4.#"#!"&54766$32z䜬m IwhQQhbF*@&('kz   _hQнQGB'(&*eoz(q!#"'&547"'#"'&54>7632&4762.547>32#".'632%k'45%&+~(  (h  &  \(  (  &  ~+54'k%5%l%%l$65+~  &  (  (\  &  h(  (~+%'!)19K4&"24&"26.676&$4&"24&"24&"2#!"'&46$ KjKKj KjKKje2.e<^P,bKjKKjKjKKj KjKKj##LlLKjKKjK jKKjK~-M7>7&54$ LhяW.{+9E=cQdFK1A  0) pJ2`[Q?l&٫C58.H(Y':d 6?32$64&$ #"'#"&'&4>7>7.546'&'&'# '32$7>54'Yj`a#",5NK ~EVZ|$2 $ |: $ 2$|ZV:(t}hfR88T h̲X(  &%(Hw(%& (XZT\MKG{x|!#"'.7#"'&7>3!2%632u  j H{(e 9 1bU#!"&546;5!32#!"&546;5!32#!"&546;5463!5#"&5463!2+!2328((88(``(88((88(``(88((88(`L4`(88(@(88(`4L`(8 (88(@(88((88(@(88((88(@(84L8(@(88((8L48OY"&546226562#"'.#"#"'.'."#"'.'.#"#"&5476$32&"5462И&4&NdN!>! 1X:Dx+  +ww+  +xD:X1 -U !*,*&4&hh&&2NN2D &  ..J< $$ 767#"&'"&547&547&547.'&54>2l4  2cKEooED ) ) Dg-;</- ?.P^P.? -/<;-gYY  .2 L4H|O--O|HeO , , Oeq1Ls26%%4.2,44,2.4%%62sL1qcqAAq4#!#"'&547632!2#"&=!"&=463!54632  @  `     ` ?`   @  @  !    54&+4&+"#"276#!"5467&5432632   `  _ v,Ԝ;G_j)``    _ ԟ7 ,>jL>54'&";;265326#!"5467&5432632    v,Ԝ;G_j) `   `7 ,>jL>X`$"&462#!"&54>72654&'547 7"2654'54622654'54&'46.' &6 &4&&4&yy %:hD:FppG9Fj 8P8 LhL 8P8 E; Dh:% >4&&4&}yyD~s[4Dd=PppP=d>hh>@jY*(88(*Y4LL4Y*(88(*YDw" A4*[s~>M4&"27 $=.54632>32#"' 65#"&4632632 65.5462&4&&4G9& <#5KK5!!5KK5#< &ܤ9Gpp&4&&4&@>buោؐ&$KjKnjjKjK$&jjb>Ppp %!5!#"&5463!!35463!2+32@\\8(@(8\@@\\@\(88(\@ 34#"&54"3#!"&5!"&5>547&5462;U gI@L4@Ԗ@4L2RX='8P8'=XR U;Ig04LjjL4*\(88(\@"4&+32!#!"&+#!"&5463!2pP@@Pjj@@\@\&0pj \\&-B+"&5.5462265462265462+"&5#"&5463!2G9L44L9G&4&&4&&4&&4&&4&L44L &=d4LL4 d=&&`&&&&`&&&&4LL4  &#3CS#!"&5463!2!&'&!"&5!463!2#!"&52#!"&=4632#!"&=463(8((88((`x c`(8@@@`((88(@(8(D 9 8(`@@@@@/?O_o-=%+"&=46;25+"&=46;2+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2+"&=46;2!!!5463!2#!"&5463!2 @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @ &&&&@  @ @  @  @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @  @  @   `&&&& /?O_o%+"&=46;25+"&=46;2+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2+"&=46;2!!#!"&=!!5463!24&+"#54&+";26=3;26%#!"&5463!463!2!2 @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @ 8(@(8 @  @  @  @  @ &&&@8((8@&@  @ @  @  @  @ @  @ @  @ @  @ @  @ @  @ @  @  @  @  (88(  @  ``   `` -&&& (88(&@<c$4&"2!#4&"254&+54&+"#";;26=326+"&5!"&5#"&46346?>;463!2KjKKjKjKKj&ԖԖ&&@&&KjKKjK jKKjK .&jjjj&4&@@&&#'1?I54&+54&+"#";;26=326!5!#"&5463!!35463!2+32 \\8(@(8\ \\@\(88(\: #32+53##'53535'575#5#5733#5;2+3@E&&`@@` `@@`&&E%@`@ @ @      @ 0 @!3!57#"&5'7!7!K5@   @5K@@@ #3%4&+"!4&+";265!;26#!"&5463!2&&&&&&&&w@www&&@&&&&@&&@www#354&#!4&+"!"3!;265!26#!"&5463!2&&&&&@&&@&w@www@&@&&&&&&@&:@www-M3)$"'&4762 "'&4762 s 2  .   2 w 2  .   2 w 2    2  ww  2    2  ww M3)"/&47 &4?62"/&47 &4?62S .  2 w 2   .  2 w 2  M . 2    2 .  . 2    2 .M3S)$"' "/&4762"' "/&47623 2  ww  2    2  ww  2    2 w 2   .v 2 w 2   .M3s)"'&4?62 62"'&4?62 623 .  . 2    2 .  . 2    2 .   2 w 2v .   2 w 2-Ms3 "'&4762s w 2  .   2 ww  2    2 MS3"/&47 &4?62S .  2 w 2  M . 2    2 .M 3S"' "/&47623 2  ww  2   m 2 w 2   .M-3s"'&4?62 623 .  . 2    2- .   2 w 2/4&#!"3!26#!#!"&54>5!"&5463!2  @ ^B && B^^B@B^ @  MB^%Q= &&& $$ (r^aa(^aa!C#!"&54>;2+";2#!"&54>;2+";2pPPpQh@&&@j8(PppPPpQh@&&@j8(Pp@PppPhQ&&j (8pPPppPhQ&&j (8p!C+"&=46;26=4&+"&5463!2+"&=46;26=4&+"&5463!2Qh@&&@j8(PppPPpQh@&&@j8(PppPPp@hQ&&j (8pPPppP@hQ&&j (8pPPpp@@ #+3;G$#"&5462"&462"&462#"&462"&462"&462"&462#"&54632K54LKj=KjKKjKjKKjL45KKjK<^^^KjKKjppp\]]\jKL45KjKKjKujKKjK4LKjKK^^^jKKjKpppr]]\  $$ ^aaQ^aa,#"&5465654.+"'&47623   #>bqb&44&ɢ5"  #D7euU6 &4&m 1X".4>2".4>24&#""'&#";2>#".'&547&5472632>3=T==T==T==T=v)GG+v@bRRb@=&\Nj!>3lkik3hPTDDTPTDDTPTDDTPTDD|x xXK--K|Mp<# )>dA{RXtfOT# RNftWQ,%4&#!"&=4&#!"3!26#!"&5463!2!28(@(88((88((8\@\\@\\(88(@(88(@(88@\\\\ u'E4#!"3!2676%!54&#!"&=4&#!">#!"&5463!2!2325([5@(\&8((88((8,9.+C\\@\ \6Z]#+#,k(88(@(88(;5E>:5E\\\ \1. $4@"&'&676267>"&462"&462.  > $$ n%%/02 KjKKjKKjKKjKfff^aayy/PccP/jKKjKKjKKjKffff@^aa$4@&'."'.7>2"&462"&462.  > $$ n20/%7KjKKjKKjKKjKfff^aa3/PccP/y jKKjKKjKKjKffff@^aa +7#!"&463!2"&462"&462.  > $$ &&&&KjKKjKKjKKjKfff^aa4&&4&jKKjKKjKKjKffff@^aa#+3C54&+54&+"#";;26=3264&"24&"2$#"'##"3!2@@KjKKjKKjKKjKܒ,gjKKjKKjKKjKXԀ,, #/;GS_kw+"=4;27+"=4;2'+"=4;2#!"=43!2%+"=4;2'+"=4;2+"=4;2'+"=4;2+"=4;2+"=4;2+"=4;2+"=4;2+"=4;54;2!#!"&5463!2`````````````````````p`K55KK55Kp`````````````````````````5KK55KK@*V#"'.#"63232+"&5.5462#"/.#"#"'&547>32327676R?d^7ac77,9xm#@#KjK# ڗXF@Fp:f_ #WIpp&3z h[ 17q%q#::#5KKu't#!X: %#+=&>7p @ *2Fr56565'5&'. #"32325#"'+"&5.5462#"/.#"#"'&547>32327676@ͳ8 2.,#,fk*1x-!#@#KjK# ڗXF@Fp:f_ #WIpp&3z e`vo8t-  :5 [*#::#5KKu't#!X: %#+=&>7p  3$ "/&47 &4?62#!"&=463!2I.  2 w 2   -@). 2    2 . -@@-S$9%"'&4762  /.7> "/&47 &4?62i2  .   2 w E > u > .  2 w 2   2    2  ww !   h. 2    2 . ;#"'&476#"'&7'.'#"'&476' )'s "+5+@ա' )'F*4*Er4M:}}8 GO *4*~ (-/' #"'%#"&7&67%632B;>< V??V --C4 <B=cB5 !% %!b 7I))9I7 #"'.5!".67632y( #  ##@,( )8! !++"&=!"&5#"&=46;546;2!76232-SSS  SS``  K$4&"24&"24&"27"&5467.546267>5.5462 8P88P88P88P8P88P4,CS,4pp4,,4pp4,6d7AL*',4ppP88P8P88P8HP88P8`4Y&+(>EY4PppP4Y4Y4PppP4Y%*54&#"#"/.7!2<'G,')7N;2]=A+#H  0PRH6^;<T%-S#:/*@Z}   >h.%#!"&=46;#"&=463!232#!"&=463!2&&&@@&&&@&&&&&&&&&&&&f&&&&b#!"&=463!2#!"&'&63!2&&&&''%@% &&&&&&&&k%J%#/&'#!53#5!36?!#!'&54>54&#"'6763235 Ź}4NZN4;)3.i%Sin1KXL7觧*  #& *@jC?.>!&1' \%Awc8^;:+54&#"'6763235 Ź}4NZN4;)3.i%PlnEcdJ觧*  #& *-@jC?.>!&1' \%AwcBiC:D'P%! #!"&'&6763!2P &:&? &:&?5"K,)""K,)h#".#""#"&54>54&#"#"'./"'"5327654.54632326732>32YO)I-D%n  "h.=T#)#lQTv%.%P_ % %_P%.%vUPl#)#T=@/#,-91P+R[Ql#)#|'' 59%D-I)OY[R+P19-,##,-91P+R[YO)I-D%95%_P%.%v'3!2#!"&463!5&=462 =462 &546 &&&&&4&r&4&@&4&&4&G݀&&&&f s CK&=462 #"'32=462!2#!"&463!5&'"/&4762%4632e*&4&i76`al&4&&&&&}n  R   R zfOego&&5`3&&&4&&4& D R   R zv"!676"'.5463!2@@w^Cct~5  5~tcC&&@?JV|RIIR|V&&#G!!%4&+";26%4&+";26%#!"&546;546;2!546;232@@@@L44LL4^B@B^^B@B^4L  N4LL44L`B^^B``B^^B`LL4&"2%#"'%.5!#!"&54675#"#"'.7>7&5462!467%632&4&&4  @ o&&}c ;pG=(  8Ai8^^.   &4&&4&` ` fs&& jo/;J!# 2 KAE*,B^^B! ` $ -4&"2#"/&7#"/&767%676$!28P88PQr @ U @ {`PTP88P8P`  @U @rQ!6'&+!!!!2Ѥ 8̙e;<*@8 !GGGQII %764' 64/&"2 $$ f3f4:4^aaf4334f:4:^aa %64'&" 2 $$ :4f3f4F^aa4f44f^aa 764'&"27 2 $$ f:4:f4334^aaf4:4f3^aa %64/&" &"2 $$ -f44f4^aa4f3f4:w^aa@7!!/#35%!'!%j/d jg2|855dc b @! !%!!7!FG)DH:&H dS)U4&"2#"/ $'#"'&5463!2#"&=46;5.546232+>7'&763!2&4&&4f ]wq4qw] `dC&&:FԖF:&&Cd`4&&4& ]] `d[}&&"uFjjFu"&&y}[d#2#!"&546;4 +"&54&" (88(@(88( r&@&Ԗ8((88(@(8@&&jj'3"&462&    .  > $$ Ԗ>aX,fff^aaԖԖa>TX,,~ffff@^aa/+"&=46;2+"&=46;2+"&=46;28((88((88((88((88((88((8 (88((88((88((88((88((88/+"&=46;2+"&=46;2+"&=46;28((88((88((88((88((88((8 (88((88(88((88(88((885E$4&"2%&'&;26%&.$'&;276#!"&5463!2KjKKj   f  \ w@wwwjKKjK"G   ܚ  f   @www   $64'&327/a^ ! ^aaJ@%% 65/ 64'&"2 "/64&"'&476227<ij6j6u%k%~8p8}%%%k%}8p8~%<@% %% !232"'&76;!"/&76  ($>( J &% $%64/&"'&"2#!"&5463!2ff4-4ff4fw@wwwf4f-f4@www/#5#5'&76 764/&"%#!"&5463!248` # \P\w@www4`8  #@  `\P\`@www)4&#!"273276#!"&5463!2& *f4 'w@www`&')4f*@www%5 64'&"3276'7>332#!"&5463!2`'(wƒa8! ,j.( &w@www`4`*'?_`ze<  bw4/*@www-.  6 $$  (r^aaO(_^aa -"'&763!24&#!"3!26#!"&5463!2yB(( @   w@www]#@##   @ @www -#!"'&7624&#!"3!26#!"&5463!2y((@B@u @   w@www###@  @ @www -'&54764&#!"3!26#!"&5463!2@@####@w@wwwB((@@www`%#"'#"&=46;&7#"&=46;632/.#"!2#!!2#!32>?6#  !"'?_  BCbCaf\ + ~2   }0$  q 90r p r%D p u?#!"&=46;#"&=46;54632'.#"!2#!!546;2D a__ g *`-Uh1    ߫}   $^L  4b+"&=.'&?676032654.'.5467546;2'.#"ǟ B{PDg q%%Q{%P46'-N/B).ĝ 9kC< Q 7>W*_x*%K./58`7E%_ ,-3  cVO2")#,)9;J) "!* #VD,'#/&>AX>++"''&=46;267!"&=463!&+"&=463!2+32Ԫ$   pU9ӑ @/*f o  VRfq f=SE!#"&5!"&=463!5!"&=46;&76;2>76;232#!!2#![       % )   "  Jg Uh BW&WX hU g 84&#!!2#!!2#!+"&=#"&=46;5#"&=46;463!2j@jo g|@~vv u n#467!!3'##467!++"'#+"&'#"&=46;'#"&=46;&76;2!6;2!6;232+32QKt# #FNQo!"դѧ !mY Zga~bm] [o"U+, @h h@@X hh @83H\#5"'#"&+73273&#&+5275363534."#22>4.#2>ut 3NtRP*Ho2 Lo@!R(Ozh=,GID2F 8PuE>.'%&TeQ,jm{+>R{?jJrL6V @`7>wmR1q uWei/rr :Vr" $7V4&#"326#"'&76;46;232!5346=#'73#"'&'73267##"&54632BX;4>ID2F +>R{8PuE>.'%&TeQ,jm{?jJrL6 @`rr :Vr3>wmR1q uWei@ \%4&#"326#!"&5463!2+".'&'.5467>767>7>7632!2&%%&&&& &7.' :@$LBWM{#&$h1D!  .I/! Nr&&%%&&&&V?, L=8=9%pEL+%%r@W!<%*',<2(<&L,"r@ \#"&546324&#!"3!26%#!#"'.'.'&'.'.546767>;&%%&&&& &i7qN !/I.  !D1h$&#{MWBL$@: '.&&%%&&&&=XNr%(M&<(2<,'*%<!W@r%%+LEp%9=8=L  +=\d%54#"327354"%###5#5#"'&53327#"'#3632#"'&=4762#3274645"=424'.'&!  7>76#'#3%54'&#"32763##"'&5#327#!"&5463!2BBPJNC'%! B? )#!CC $)  54f"@@ B+,A  A+&+A  ZK35N # J!1331CCC $)w@www2"33FYF~(-%"o4*)$(* (&;;&&9LA3  8334S,;;,WT+<<+T;(\g7x:&&::&&<r%-@www  +=[c}#"'632#542%35!33!3##"'&5#327%54'&#"5#353276%5##"=354'&#"32767654"2 '.'&547>76 3#&'&'3#"'&=47632%#5#"'&53327''RZZ:kid YYY .06 62+YY-06 R[!.'CD''EH$VVX::Y X;:Y fyd/%jG&DC&&CD&O[52. [$C-D..D^^* ly1%=^I86i077S 3 $EWgO%33%OO%35 EEFWt;PP;pt;PP;pqJgTFQ%33&PP%33%R 7>%3!+}{'+"&72'&76;2+"'66;2U &  ( P *'eJ."-dZ-n -'74'&+";27&+";276'56#!"&5463!2~} 7e  ۩w@www"  $Q #'!# @www I-22#!&$/.'.'.'=&7>?>369II ! ' $ !01$$%A' $ ! g  \7@)(7Y   \7@)(7Y @ '5557 ,VWQV.RW=?l%l`~0  !#!#%777 5! R!!XCCfff݀# `,{{{`Og4&"2 &6 $"&462$"&62>7>7>&46.'.'. '.'&7>76 Ԗ HR6L66LGHyU2L  L2UyHHyU2L  L2UyHn X6X  XX ԖԖH6L66L6 L2UyHHyU2L  L2UyHHyU2L n6X  XX  2#!"&54634&"2$4&"2ww@ww||||||w@www||||||| !3 37! $$ n6^55^h ^aaM1^aaP *Cg'.676.7>.'$7>&'.'&'? 7%&'.'.'>767$/u5'&$I7ob?K\[zH,1+.@\7':Yi4&67&'&676'.'>7646&' '7>6'&'&7>7#!"&5463!2PR$++'TJXj7-FC',,&C ."!$28 h /" +p^&+3$ i0(w@www+.i6=Bn \C1XR:#"'jj 8Q.cAj57!? "0D$4" P[ & 2@wwwD"%.5#5>7>;!!76PYhpN!HrD0M C0N#>8\xx: W]oW-X45/%'#.5!5!#"37>#!"&5463!2p>,;$4 5eD+WcEw@wwwK()F ,VhV^9tjA0/@www@#"'&76;46;23   &  ++"&5#"&7632  ^  c  & @#!'&5476!2 &  ^  b '&=!"&=463!546  &    q&8#"'&#"#"5476323276326767q'T1[VA=QQ3qqHih"-bfGw^44O#A?66%CKJA}} !"䒐""A$@C3^q|z=KK?6 lk)  %!%!VVuuu^-m5w}n~7M[264&"264&"2"&546+"&=##"&5'#"&5!467'&766276#"&54632    *<;V<<O@-K<&4'>&4.'.'.'.'.'&6&'.'.6767645.'#.'6&'&7676"&'&627>76'&7>'&'&'&'&766'.7>7676>76&6763>6&'&232.'.6'4."7674.'&#>7626'.'&#"'.'.'&676.67>7>5'&7>.'&'&'&7>7>767&'&67636'.'&67>7>.'.67 \  U7  J#!W! '  " ';%  k )"    '   /7*   I ,6 *&"!   O6* O $.( *.'  .x,  $CN      * 6   7%&&_f& ",VL,G$3@@$+ "  V5 3"  ""#dA++ y0D- %&n 4P'A5j$9E#"c7Y 6" & 8Z(;=I50 ' !!e  R   "+0n?t(-z.'< >R$A"24B@( ~ 9B9, *$        < > ?0D9f?Ae  .(;1.D 4H&.Ct iY% *  7      J  <    W 0%$  ""I! *  D  ,4A'4J" .0f6D4pZ{+*D_wqi;W1G("% %T7F}AG!1#%  JG 3  '.2>Vb%&#'32&'!>?>'&' &>"6&#">&'>26 $$ *b6~#= XP2{&%gx| .W)oOLOsEzG< CK}E $MFD<5+ z^aa$MWM 1>]|YY^D եA<KmE6<" @9I5*^aa>^4./.543232654.#"#".#"32>#"'#"$&547&54632632':XM1h*+D($,/9p`DoC&JV;267676&#!"&=463!267 #!"'&5463!26%8#! &&Z"M>2! ^I 7LRx_@>MN""`=&&*%I},  L7_jj9/%4&#!"3!264&#!"3!26#!"&5463!2  &&&&&&&&19#"'#++"&5#"&5475##"&54763!2"&4628(3- &B..B& -3(8IggI`(8+Ue&.BB.&+8(kk`%-"&5#"&5#"&5#"&5463!2"&4628P8@B\B@B\B@8P8pPPp@`(88(`p.BB.0.BB.(88(Pppͺ!%>&'&#"'.$ $$ ^/(V=$<;$=V).X^aaJ`"(("`J^aa,I4."2>%'%"/'&5%&'&?'&767%476762%6[՛[[՛o ܴ   $ $ " $ $  ՛[[՛[[5` ^ ^ 2` `2 ^ ^ ` 1%#"$54732$%#"$&546$76327668ʴhf킐&^zs,!V[vn) 6<ׂf{z}))Ns3(@ +4&#!"3!2#!"&5463!2#!"&5463!2@&&&f&&&&@&&&&4&&4&@&&&&&&&& `BH+"/##"./#"'.?&5#"&46;'&462!76232!46 `&C6@Bb03eI;:&&&4L4&F Z4&w4) '' 5r&4&&4&&4}G#&/.#./.'&4?63%27>'./&'&7676>767>?>%6})(."2*&@P9A #sGq] #lh<* 46+(  < 5R5"*>%"/ +[>hy  K !/Ui%6&'&676&'&6'.7>%.$76$% $.5476$6?62'.76&&'&676%.76&'..676#"NDQt -okQ//jo_  %&JՂYJA-.-- 9\DtT+X?*<UW3' 26$>>W0 {"F!"E    ^f`$"_]\<`F`FDh>CwlsJ@ ;=?s  :i_^{8+?` ) O`s2RDE58/Kr #"'>7&4$&5mī"#̵$5$"^^W=acE*czk./"&4636$7.'>67.'>65.67>&/>z X^hc^O<q+f$H^XbVS!rȇr?5GD_RV@-FbV=3! G84&3Im<$/6X_D'=NUTL;2KPwtPt=  &ռ ,J~S/#NL,8JsF);??1zIEJpqDIPZXSF6\?5:NR=;.&1 +!"&=!!%!5463!2sQ9Qs***sQNQsBUw wUBFHCCTww%1#"&=!"&=463!54632.  6 $$     ` ?(r^aa    (_^aa%1#!#"'&47632!2.  6 $$   @  ` (r^aa  ?  @  (_^aa/#"'&476324&#!"3!26#!"&5463!2&@& @   w@www& @B@ &  @ @www"&462  >& $$ Ԗ*(r^aaԖԖ (^aa]6#"$54732>%#"'!"&'&7>32'!!!2f:лѪz~u: ((%`V6B^hD%i(]̳ޛ *>6߅r#! 3?^BEa߀#9#36'&632#"'&'&63232#!"&5463!2 Q,&U #+' ;il4L 92<D`w@www`9ܩ6ɽ ]`C477&@wwwD+"&5#"'&=4?5#"'&=4?546;2%6%66546;2  wwwwcB G]B Gty]ty #3C#!+"&5!"&=463!46;2!24&#!"3!26#!"&5463!2@`@`^BB^^B@B^www@w@`@`2@B^^BB^^ww@w'/?P+5#"&547.467&546;532!764'!"+32#323!&ln@ :MM: @nY*Yz--zY*55QDDU9pY-`]]`.X /2I$ t@@/!!/@@3,$,3$p$00&*0&& !P@RV2#"&/#"&/#"&546?#"&546?'&54632%'&54632763276%>S]8T;/M77T7%>ww@ww!"5bBBb// * 8(@(87)(8=%/' #?w@www#~$EE y &L(88e):8(%O r    O?GQaq47&67>&&'&67>&"$32#"#"'654  $&6 $6&$ CoL.*K  Px.* iSƓ i 7J ?~pi{_Я;lLUZ=刈刈_t'<Z :!   @! j`Q7  $ky, Rfk*4LlL=Z=刈&$&546$7%7&'5>]5%w&P?zrSF!| &0 ##!"&5#5!3!3!3!32!546;2!5463) );));;))&&&@@&&&  6 $&727"'%+"'&7&54767%&4762֬>4P t+8?::  ::A W` `EvEEvE<."e$IE&O &EI&{h.`m"&#"&'327>73271[ >+)@ (]:2,C?*%Zx/658:@#N C= E(oE=W'c:#!#"$&6$3 &#"32>7! ڝyy,{ۀہW^F!LC=y:yw߂0H\R%"N^ '&76232762$"&5462"&46274&"&'264&#"'&&#"32$54'>$ $&6$ G>>0yx14J55J5J44J5Fd$?4J55%6E#42F%$fLlLq>>11J44%&4Z%44J54R1F$Z-%45J521Z%F1#:ʎ 9LlL#Qa"'&7622762%"&5462"&546274&#"&'73264&#"'&&#"32654'>#!"&5463!2 55 **.>.-@-R.>.-@-<+*q6- -- 0OpoOxzRrqP6z~{{Prr^aa]054&"#"&5!2654632!#"&57265&'&#".'&'#"&5467%&4>7>3263232654.547'654'63277.'.*#">7?67>?>32#"'7'>3'>3235?KcgA+![,7*  2(-#=  /~[(D?G  |,)"# +)O8,+'6 y{=@0mI#938OAE` -  )y_/FwaH8j7=7?%a % %!?)L J 9=5]~pj  %(1$",I  $@((  +!.S -L__$'-9L 5V+ 6 T+6.8- $ 0 + t |S 16]&#"'&#"67>76'&'&#"67>32764.#"#.32>67>7 $&54>7>7>7rJ@ "kb2)W+ ,5/1   #   Z -!$IOXp7sLCF9vz NAG#/ 5|Հ';RKR/J#=$,9,+$UCS7'2"1  ! / ,   /--ST(::(ep4AM@=I>".)xΤlsY|qK@ %(YQ&N EHv~<Zx'#"&5467&6?2?'&"/.7.546326#"&'&/7264/7'764&"'?>>32.AUpIUxYE.A %%%h% %hJ%D,FZxULs TgxUJrVD %hJ%@/LefL.C %Jh%CV sNUxϠ@.FZyUHpVA %h&%% %Ji%CWpIUybJ/Uy^G,D %Jh%@U sMt UC %hJ%C-KfyEX[_gj&/&'.''67>7>7&'&'&'>76763>7>#&'&'767672'%'7'+"&'&546323267>7%#"'4'6767672,32,+DCCQLDf' % :/d B 4@ }  &!0$?Jfdf-.=6(:!TO? !IG_U% . k*.=; 5gN_X "  ##  292Q41   *6nA;| BS N.  %1$ 6 $nk^ '7GWgw2+"&5463#!"&5463!254&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";26#"&=! B^^BB^^B:FjB^8((`( `(8^BB^^B@B^"vEj^B(8(`(8(/?O_o/?2#!"&5463;26=4&+";26=4&+";26=4&+";26=4&+"54&+";2654&+";2654&+";2654&+";2654&+";2654&#!"3!2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";26@&&&&@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@&&&&@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@`' "&5#"&5&4762!762$"&462B\B@B\BOpP.BB..BB.8$PO広3CQ#".54>32#".546322#"&#"#"54>%".54>32%2#"&54> &X=L|<&X=M{2r_-$$-_rUU%&&5%ő'- "'.546762@FF$@B@$.&,&.]]|q#<<#(BB B%'-%'-'%'-"'%&'"'%.5467%467%62@ll@ll,@GG&!@@@@@@!&+#+#6#+$*`:p:px p=`$>>$&@&@ @&p@ &.A!!"!&2673!"5432!%!254#!5!2654#!%!2#!8Zp?vdΊens6(N[RWu?rt1SrF|iZ@7މoy2IMC~[R yK{T:%,AGK2#!"&5463!!2654'654.#532#532"&5!654&#"327#2#>!!ww@ww~uk'JTMwa| DH> I1q Fj?w@wwwsq*4p9O*¸Z^qh LE "(nz8B M'?"&4624&#"'.'324&#"3267##"&/632632.ʏhhMALR vGhг~~K „yO^   ʏʏВ*LM@!שwwȍde)qrOPqȦs:03=7'.?67'67%'>&%'7%7./6D\$>  "N,?a0#O 1G9'/P(1#00  ($=!F "9|]"RE<6 'o9%8J$\ :\HiTe<?}V#oj? d,6%N#" HlSVY]C =@C4&"2!.#!"4&"2+"&=!"&=#"&546;>3!232^^^Y ^^^`pppp`]ibbi]~^^^e^^^PppPPppP]^^]3;EM2+"&=!"&=#"&546;>;5463!232264&"!.#!"264&" ]`pppp`]ibbi^^^dY !^^^]@PppP@@PppP@]^^] ^^^e^^^ 3$#!#!"&5467!"&47#"&47#"&4762++&2 $$ 2&&&4&&Z4&&##&&4&4&44&m4&m+DP4'&#"32763232674'&!"32763 3264'&$#"32763232> $$ g* o`#ə0#z#l(~̠) -g+^aaF s" +g (* 3#!| #/IK/%*%D= )[^aa !!!'!!77!,/,-a/G t%/;<HTbcq%7.#"32%74'&"32765"/7627#"5'7432#"/7632#"5'7432#"&5'74632 #"/6327#"/6327#"/46329"&/462"&/>21"&/567632#!.547632632  *     X    ^  `    ^  b  c   fu U`59u  4J   l~ ~ F 2    m | O,           ru| u  " )9 $7 $&= $7 $&= $7 $&=  $&=46w`ww`ww`wb`VTEvEEvETVTEvEEvET*VTEvEEvET*EvEEvEEvEEv#^ct#!"&5463!2!&'&!"&5!632#"&'#"/&'&7>766767.76;267674767&5&5&'67.'&'&#3274(8((88((`x c`(8!3;:A0?ݫY   ^U 47D$    74U3I  |L38wtL0`((88(@(8(D 9 8(Q1&(!;  (g- Up~R2(/{E(Xz*Z%(i6CmVo8 #T#!"&5463!2!&'&!"&5!3367653335!3#4.5.'##'&'35(8((88((`x c`(8iFFZcrcZ`((88(@(8(D 9 8(kk" kkJ  ! k#S#!"&5463!2!&'&!"&5!%!5#7>;#!5#35!3#&'&/35!3(8((88((`x c`(8-Kg kL#DCJg  jLD`((88(@(8(D 9 8(jj jjkk kk#8C#!"&5463!2!&'&!"&5!%!5#5327>54&'&#!3#32(8((88((`x c`(8 G]L*COJ?0R\wx48>`((88(@(8(D 9 8(jjRQxk !RY#*2#!"&5463!2!&'&!"&5!!57"&462(8((88((`x c`(8Pppp`((88(@(8(D 9 8(ppp  #*7JR5#5#5#5##!"&5463!2!&'&!"&5##5!"&54765332264&"<(8((88((`x c`(8kޑcO"jKKjK`((88(@(8(D 9 8(SmmS?M&4&&4#9L^#!"&5463!2!&'&!"&5!#"/#"&=46;76276'.'2764'.(8((88((`x c`(8 6ddWW6&44`((88(@(8(D 9 8(. G5{{5]]$5995#3C#!"&5463!2!&'&!"&5!2#!"&5463#"'5632(8((88((`x c`(84LL44LL4l  `((88(@(8(D 9 8(L44LL44L  Z #7K[#!"&5463!2!&'&!"&5!>&'&7!/.?'&6?6.7>'(8((88((`x c`(8` 3  3  3  3 v  ?  `((88(@(8(D 9 8( & & - & &  ?   '6#'. '!67&54632".'654&#"32eaAɢ/PRAids`WXyzOvд:C;A:25@Ң>-05rn`H( ' gQWZc[ -%7' %'-'% %"'&54762[3[MN 3",""3,3"ong$߆]gn$+) ")")" x#W#"&#!+.5467&546326$32327.'#"&5463232654&#"632#".#"oGn\ u_MK'̨|g? CM7MM5,QAAIQqAy{b]BL4PJ9+OABIRo?z.z n6'+s:zcIAC65D*DRRD*wyal@B39E*DRRD*'/7  $&6$ 6277&47' 7'"' 6& 6'lLRRZB|RR>dZZLlLZRR«Z&>«|R ! $&54$7 >54'5PffP牉@s-ff`-c6721>?>././76&/7>?>?>./&31#"$&(@8!IH2hM>'  )-* h'N'!'Og,R"/!YQG54'63&547#5#"=3235#47##6323#324&"26%#!"&5463!2F]kbf$JMM$&N92Z2&`9UW=N9:PO;:dhe\=R +)&')-S99kJ<)UmQ/-Ya^"![Y'(<`X;_L6#)|tWW:;X  #'#3#!"&5463!2) p*xeשw@www0,\8@www9I#"'#"&'&>767&5462#"'.7>32>4."&'&54>32JrO<3>5-&FD(=Gq@C$39aLL²L4 &) @]v q#CO!~󿵂72765'./"#"&'&5 }1R<2" 7MW'$  ;IS7@5sQ@@)R#DvTA ; 0x I)!:> +)C 6.> !-I[4&#"324&#"3264&#"324&#"326&#"#".'7$4$32'#"$&6$32D2)+BB+)3(--(31)+BB+)4'--'4'#!0>R HMŰ9ou7ǖD䣣 R23('3_,--,R23('3_,--,NJ ?uWm%#"'%#"'.5 %&'&7632! ; `u%"(!]#c)(  #"'%#"'.5%&'&76 !  (%##fP_"(!)'+ʼn4I#"$'&6?6332>4.#"#!"&54766$32#!"&=46;46;2z䜬m IwhQQhbF*@&('k@z   _hQнQGB'(&*eozΘ@@`  >. $$ ffff^aafff^aa>"&#"#"&54>7654'&#!"#"&#"#"&54>765'46.'."&54632326323!27654'.5463232632,-,,",:! %]& %@2(/.+*)6! <.$..**"+8#  #Q3,,++#-:#"$$ /:yuxv)%$ /?CG%!5%2#!"&5463!5#5!52#!"&54632#!"&5463#5!5`&&&& &&&&&&&&@&&&&&&&&&&&&%2 &547%#"&632%&546 #"'6\~~\h ~\h\ V V VV%5$4&#"'64'73264&"&#"3272#!"&5463!2}XT==TX}}~>SX}}XS>~}w@www~:xx:~}}Xx9}}9xX}@www/>LXds.327>76 $&6$32762#"/&4762"/&47626+"&46;2'"&=462#"'&4?62E0l,  *"T.D@Yooo@5D [  Z  Z  [ ``[ Z  2 ,l0 (T" .D5@oooY@D, Z  [  [  Z ``EZ  [ 5%!  $&66='&'%77'727'%amlLmf?55>fFtuutFLlLHYC L||L Y˄(E''E*( /?IYiy%+"&=46;2+"&=46;2+"&=46;2+"&=46;2%"&=!#+"&=46;2+"&=46;2+"&=46;2+"&=46;2!54!54>$ +"&=46;2#!"&=@&&@3P > P3&&rrr&&rrr he 4LKM:%%:MKL4WT&&%/9##!"&563!!#!"&5"&5!2!5463!2!5463!2&&&&&&  &&&i@&&@&7'#5&?6262%%o;j|/&jJ%p&j;&i&p/|jţ%Jk%o%  :g"&5462#"&546324&#!"263662>7'&75.''&'&&'&6463!276i~ZYYZ~@OS;+[G[3YUD#o?D&G3I=JyTkBuhNV!WOhuAiSy*'^CC^'*SwwSTvvTSwwSTvvWID\_"[ gq# /3qFr2/ $rg%4 HffHJ4d#!#7!!7!#5!VFNrmNNN N!Y+?Ne%&'&'&7>727>'#&'&'&>2'&'&676'&76$7&'&767>76 '6# <;11x# *# G,T93%/#0vNZ;:8)M:( &C.J}2 %0  ^*  JF &7'X"2LDM" +6 M2+'BQfXV#+] #' L/(eB9  #,8!!!5!!5!5!5!5#26%!!26#!"&5!5&4& &pPPp@@&&@!&@PppP@*  9Q$"&54627"."#"&547>2"'.#"#"&5476$ "'&$ #"&5476$ (}R}hLK NN Ud: xx 8    ,, |2222 MXXM ic,>>,   ̺  '/7?KSck{4&"2$4&"24&"24&"24&"24&"24&"24&"24&"264&"24&#!"3!264&"2#!"&5463!2KjKKjKjKKjKjKKjKKjKKjKjKKjKjKKjKKjKKjKjKKjKLhLLhLKjKKj&&&&KjKKjL44LL44L5jKKjKKjKKjKjKKjKjKKjKjKKjKjKKjKjKKjKjKKjK4LL44LLjKKjK&&&&jKKjK4LL44LL 'E!#"+"&7>76;7676767>'#'"#!"&7>3!2W",&7' #$ &gpf5 O.PqZZdS -V"0kqzTxD!!8p8%'i_F?;kR(` !&)' (2!&6367! &63!2! `B 1LO(+#=)heCQg#s`f4#6q'X|0 -g >IY#6?>7&#!%'.'33#&#"#"/3674'.54636%#"3733#!"&5463!24  : @7vH%hEP{0&<'VFJo1,1.F6A#L44LL44L"% 7x'6 O\JYFw~v^fH$ ! "xdjD"!6`J4LL44LL +3@GXcgqz -<JX{&#"327&76'32>54.#"35#3;5#'#3537+5;3'23764/"+353$4632#"$2#462#"6462""'"&5&5474761256321##%354&'"&#"5#35432354323=#&#"32?4/&54327&#"#"'326'#"=35#5##3327"327'#"'354&3"5#354327&327''"&46327&#"3=#&#"32?"5#354327&3=#&"32?"#3274?67654'&'4/"&#!"&5463!2_gQQh^_~\[[\]_^hQQge<F$$$ !!&&/ !/  !! 00/e&'!"e$   '!!''   8''NgL44LL44LUQghQUk=("  ! =))=2( '! 'L#(>( & DC(>(zL#DzG)<)4LL44LL  BWbjq}+532%+5324&+32763#4&'.546327&#"#"'3265#"&546325&#"32 !264&"2%#'#735#535#535#3'654&+353#!"&5463!29$<=$@?SdO__J-<AA@)7")9,<$.%0*,G3@%)1??.+&((JgfJ*A!&jjjGZYGиwsswPiL>8aA !M77MM77M3! 4erJ]&3YM(, ,%7(#)  ,(@=)M%A20C&Mee(X0&ĖjjjV 8Z8J9N/4$ 8NN88NN  #&:O[ $?b3'7'#3#%54+32%4+324+323'%#5#'#'##337"&##'!!732%#3#3##!"&53733537!572!56373353#'#'#"5#&#!'#'#463!2#"5#"5!&+&+'!!7353273532!2732%#54&+#32#46.+#2#3#3##+53254&".546;#"67+53254&.546;#"#'#'##"54;"&;7335wY-AJF=c(TS)!*RQ+*RQ+Y,B^9^Ft`njUM ') ~PSPRm٘M77Mo7q @)U 8"E(1++NM77Mx378D62W74;9<-A"EA0:A F@1:ؗBf~~""12"4(w$#11#@}}!%+%5(v$:O\zK?* $\amcrVlOO176Nn23266&+"&#"3267;24&+"'&+";27%4&+";2?>23266&+"&#"3267;254+";27#76;2#!"&5463!23%#2%%,,  _3$$2%%M>AL Vb5)LDHeE:< EM j,K'-R M ~M>AR  Vb5)LEHeE:< E J ABI*'! ($rL44LL44Lv%1 %3!x*k $2 %3!;5h n a !(lI;F   rp p8;5h t a !(lI;F ` #k 4LL44LL  2HW[lt#"'5632#6324&'.54327&#"#"&'32767#533275#"=5&#"'#36323#4'&#"'#7532764&"24'&#"327'#"'&'36#!"&5463!2=!9n23BD$ &:BCRM.0AC'0RH`Q03'`.>,&I / * / 8/n-(G@5$ S3=,.B..B02^`o?7je;9G+L44LL44LyE%# Vb;A !p &'F:Aq)%)#orgT$ v2 8)2z948/{ 8AB..B/q?@r<7(g/4LL44LL ?#!"&'24#"&54"&/&6?&5>547&54626=L4@ԕ;U g3 T 2RX='8P8|5 4Ljj U;Ig@   `  "*\(88(]k  &N4#"&54"3 .#"#!"&'7!&7&/&6?&5>547&54626;U gIm*]Z0L4@ԕ=o=CT T 2RX='8P8|5  U;IgXu?bl3@4Ljja`   `  "*\(88(]k/7[%4&+";26%4&+";26%4&+";26!'&'!+#!"&5#"&=463!7>3!2!2@@@@@@0 o`^BB^`5FN(@(NF5@@@u  @LSyuS@%44%,<H#"5432+"=4&#"326=46;2  >. $$ ~Isy9"SgR8vHD w ffff^aam2N+ )H-mF+10*F +fff^aab4&#"32>"#"'&'#"&54632?>;23>5!"3276#"$&6$3 k^?zb=ka`U4J{K_/4^W&  vx :XB0܂ff ) fzzXlz=lapzob35!2BX G@8  ' '=vN$\ff  1 SZz8zX#("/+'547'&4?6276 'D^h  i%5@%[i  h]@]h  i%@5%[i  h^@@)2#"&5476#".5327>OFi-ay~\~;'S{s:D8>)AJfh]F?X{[TC6LlG]v2'"%B];$-o%!2>7>3232>7>322>7>32".'.#"#"&'.#"#"&'.#"#546;!!!!!32#"&54>52#"&54>52#"&54>52-P&+#($P.-P$'#+&PZP&+#"+&P-($P-.P$(#+$P.-P$'#+&P-.P$+#pP@@PpH85K"&ZH85K"&ZH85K"&Z@Pp@@@pMSK5, :&LMSK5, :&LMSK5, :& !!3 ! @@@  #"$$3!!2"jaѻxlalxaaj!!3/"/'62'&63!2'y  `I  yMy `I y'W`#".'.#"32767!"&54>3232654.'&546#&'5&#" 4$%Eӕ;iNL291 ;XxR`f՝Q8TWiWgW:;*:`Qs&?RWXJ8 oNU0 J1F@#) [%6_POQiX(o`_?5"$iʗ\&>bds6aP*< -;iFn* -c1BWg4'.'4.54632#7&'.#"#"'.#"32767'#"&54632326#!"&5463!2#$( 1$6]' !E3P|ad(2S;aF9'EOSej]m] <*rYshpt.#)$78L*khw@wwwB % $/$G6 sP`X):F/fwH1pdlqnmPHuikw_:[9D'@www34."2>$4.#!!2>#!".>3!2QнQQнQQh~wwhfffнQQнQQнQZZQffff#>3!2#!".2>4."fffнQQнQQffffQнQQн ,\!"&?&#"326'3&'!&#"#"'  5467'+#"327#"&463!!'#"&463!2632(#AHs9q ci<= #]$ KjKKjKKjKKjH#j#H&&&KjKKjKg V i jKKjKKjKKjK ..n(([5KK55KK5[poNv<+#"'#"&546;&546$32322$B$22$$*$22$Xڭӯ$22$tX'hs2$ϧkc$22$1c$2F33F3VVT2#$2ԱVT2#$2g#2UU݃ 2$#2UU1݃2 ,u54#"67.632&#"32654'.#"32764.'&$#"7232&'##"&54732654&#"467&5463254632>32#"'&ru&9%" *#͟ O%GR=O&^opC8pP*bY _#$N Pb@6)?+0L15 "4$.Es  5IQ"!@ h "Y7e|J>ziPeneHbIlF>^]@n*9 6[_3#"&54632#.#"32%3#"&54632#.#"326%4&'.'&! ! 7>7>! =39? 6'_ >29? 5'17m-VU--,bW.뮠@Fyu0HC$뮠@Fyu0HC$L= ?? <=! A <`;+"&54&#!+"&5463!2#!"&546;2!26546;2pЇ0pp@Ipp>Sc+"&=46;254&+"&+";2=46;2;2=46;2;2%54&#!";2=;26#!"&5463!2A5DD5A7^6a7MB55B7?5B~```0`rr5A44A5v5AA5f*A``0` !!!! #!"&5463!2ړ7H7jv@vvv':@vvvMUahmrx#"'!"'!#"&547.547.54674&547&54632!62!632!#!627'!%!"67'#77!63!!7357/7'%# %'3/&=&' 5#?&547 6!p4q"""6" 'h*[ |*,@?wAUMpV@˝)Ϳw7({*U%K6=0(M "! O dX$k !! ! b [TDOi @6bxBAݽ5  ɝ:J +3,p x1Fi (R 463!#!"&5%'4&#!"3`а@..@A-XfB$.BB..C} )&54$32&'%&&'67"w`Rd]G{o]>p6sc(@wgmJPAjyYWa͊AZq{HZ:<dv\gx>2ATKn+;"'&#"&#"+6!263 2&#"&#">3267&#">326e~└Ȁ|隚Ν|ū|iyZʬ7Ӕްr|uѥx9[[9jj9ANN+,#ll"BS32fk[/?\%4&+";26%4&+";26%4&+";26%4&+";26%#!"&5467&546326$32]]eeeeee$~i qfN-*#Sjt2"'qCB8!'> !%)-159=AEIMQUY]agkosw{! %! 5!#5#5#5#5#57777????#5!#5!#5!#5!#5!#5!#5!#5#537#5!#5!#5!#5!#5!#55#535353535353%"&546326#"'#32>54.&54>3237.#"Q%%%%%%%%%?iiihOiixiiyiixiiArssrrssr%sssrrssNs%%%%%%%%%%'32#".543232654&#"#"&54654&#"#"&547>326ڞUzrhgrxSПdU 7#"&463!2!2&&4&&&&4&KjKKjKjKKj &&&%&& &&4&&&&4&&&5jKKjKKjKKjK%z 0&4&&3D7&4& %&'S4&"4&"'&"27"&462"&462!2#!"&54>7#"&463!2!2&4&4&4&4KjKKjKjKKj &&&%&& &&4&%&&ے&4"jKKjKKjKKjK%z 0&4&&3D7&4& %& & !'! !%!!!!%"'.763!2o]FooZY@:@!!gf//I62'"/"/"/"/"/"/"/7762762762762762762%"/77627&6?35!5!!3762762'"/"/"/"/"/"/%5#5!4ZSS6SS4SS4SS4SS4SS4SS4ZSS4SS4SS4SS4SS4SS4S-4ZSS4S@4SS4ZSS6SS4SS4SS4SS4SS4S@ZSSSSSSSSSSSSSSZSSSSSSSSSSSSSyZRRR@%:= :+: =RRZSSSSSSSSSSSSSCv!/&'&#""'&#" 32>;232>7>76#!"&54>7'3&547&547>763226323@``` VFaaFV      $. .$     yy .Q5ZE$ ,l*%>>%*>*98(QO!L\p'.'&67'#!##"327&+"&46;2!3'#"&7>;276;2+6267!"'&7&#"(6&#"#"' Dg OOG`n%ELL{@&&Nc,sU&&!Fre&&ss#/,<= #]gL oGkP'r-n&4&2-ir&&?o  4 _5OW! .54>762>7.'.7>+#!"&5#"&5463!2"&462{{BtxG,:`9(0bԿb0(9`:,GxtB&@&&@&K55K`?e==e?1O6# ,  #$  , #6OO&&&&5KK?!"'&'!2673267!'. ."!&54632>321 4q#F""8'go#- #,"tYg>oP$$Po> Zep#)R0+I@$$@I++332++"&=#"&=46;.7>76$  @ ᅪ*r@@r'/2+"&5".4>32!"&=463  &@~[՛[[u˜~gr&`u՛[[՛[~~@r=E32++"&=#"&=46;5&547&'&6;22676;2  >``@``ٱ?E,,=?rH@``@GݧH`jjrBJ463!2+"&=32++"&=#"&=46;5.7676%#"&5   &@~``@``  vXr&@``@+BF`rks463!2+"&=32++"&=#"&=46;5&547'/.?'+"&5463!2+7>6 %#"&5   &@~``@``~4e  0  io@& jV  0  Z9r&@``@Gɞ5o , sp &@k^ , c8~~`r8>KR_32++"&=!+"&=#"&=46;.767666'27&547&#"&'2#" @@ 'Ϋ'sggsww@sgg@@-ssʃl99OOr99FP^l463!2+"&=$'.7>76%#"&=463!2+"&=%#"&54'>%&547.#"254&' &@L?CuГP vY &@;"ޥ5݇ޥ5`&_ڿgwBF@&J_ s&&?%x%xJP\h463!2+"&='32++"&=#"&=46;5.7676632%#"&56'327&7&#"2#" &@L? ߺu``@``} ຒɞueeu9uee&_"|N@``@""|a~lo99r9@9;C2+"&5"/".4>327'&4?627!"&=463  &@Ռ .  N~[՛[[u˜N .  gr&`֌  . Ou՛[[՛[~N  . @r9A'.'&675#"&=46;5"/&4?62"/32+  '֪ \  . 4 .  \r|ݧ憛@\ .    . \@r~9A"/&4?!+"&=##"$7>763546;2!'&4?62  m  - @ݧ憛@& -  @rm4 -  ٮ*   - r+"&5&54>2  @[՛[rdGu՛[[r  ".4>2r[՛[[՛r5՛[[՛[[$2#!37#546375&#"#3!"&5463#22#y/Dz?s!#22#2##2S88 2#V#2L4>32#"&''&5467&5463232>54&#"#"'.Kg&RvgD $ *2% +Z hP=DXZ@7^?1 ۰3O+lh4`M@8'+c+RI2 \ZAhSQ>B>?S2Vhui/,R0+ ZRkmz+>Q2#"'.'&756763232322>4."7 #"'&546n/9bLHG2E"D8_ pdddxO"2xxê_lx2X  !+'5>-pkW[C I I@50Oddd˥Mhfxx^ә #'+/7!5!!5!4&"2!5!4&"24&"2!!! 8P88P 8P88P88P88PP88P8 P88P88P88P8 +N &6 !2#!+"&5!"&=463!46;23!#!"&54>32267632#"_>@`     `  L4Dgy 6Fe=OOU4L>   ` `  4L2y5eud_C(====`L43V &6 #"/#"/&54?'&54?6327632#!"&54>32 7632_>     %%Sy 6Fe=J%>     %65%Sy5eud_C(zz.!6%$!2!!!46;24&"2!54&#!"&&&@ԖV@&&@&&ԖԖ@&3!!! !5!'!53!! #7IeeI7CzCl@@@#2#!"&?.54$3264&"!@մppp((ppp#+/2#!"&?.54$3264&"!264&"!@մ^^^@^^^@((^^^^^^v(#"'%.54632 "'% 632U/@k0G,zD# [k# /tg F Gz  #'#3!) p*xe0,\8T #/DM%2<GQ^lw &'&676676&'&7654&'&&546763"#"'3264&7.>&'%'.767&7667&766747665"'.'&767>3>7&'&'47.'.7676767&76767.'$73>?>67673>#6766666&'&6767.'"'276&67&54&&671&'6757>7&"2654&57>&>&'5#%67>76$7&74>=.''&'&'#'#''&'&'&'65.'&6767.'#%&''&'#2%676765&'&'&7&5&'6.7>&5R4&5S9 W"-J0(/r V"-J0(.)#"6&4pOPppc|o}vQ[60XQW1V  # 5X N"& . ) D>q J:102(z/=f*4!> S5b!%  (!$p8~5..:5I  ~T 4~9p# ! ) & ?()5F 1   d%{v*: @e s|D1d {:*dAA|oYk'&<tuut&v HCXXTR;w 71™ Z*&' 1  9? . $Gv 5k65P.$.`aasa``Z9k'9؋ӗa-*Gl|Me_]`F& OܽsDD!/+``aa``a154&'"&#!!26#!"&5463!2    iLCly5)*Hcelzzlec0hb,,beIVB9@RB9J_L44LL44L44%2"4:I;p!q4bb3p (P`t`P(6EC.7BI64LL44LL  .>$4&'6#".54$ 4.#!"3!2>#!"&5463!2Zjbjj[wٝ]>oӰٯ*-oXL44LL44L')꽽)J)]wL`ֺ۪e4LL44LL;4&#!"3!26#!"&5463!2#54&#!";#"&5463!2  @ ^BB^^B@B^  B^^B@B^`@  MB^^B@B^^>  ^B@B^^5=Um ! !!2#!"&=463!.'!"&=463!>2!2#264&"".54>762".54>762?(``(?b|b?B//B/]]FrdhLhdrF]]FrdhLhdrF@@@(?@@ ?(@9GG9@/B//BaItB!!BtI Ѷ!!ь ItB!!BtI Ѷ!!ь-M32#!"&=46;7&#"&=463!2#>5!!4.'.46ՠ`@`ՠ`MsFFsMMsFFsMojjo@@jj@@<!(!!(!-3?32#!"&=46;7&#"&=463!2+!!64.'#ՠ`@`ՠ`  DqLLqDojjo@@jj@@B>=C-3;32#!"&=46;7&#"&=463!2+!!6.'#ՠ`@`ՠ`UVU96gg6ojjo@@jj@@β**ɍ-G32#!"&=46;7&#"&=463!2#>5!!&'.46ՠ`@`ՠ`MsFFsMkkojjo@@jj@@<!(!33!(!9I2#!"&=4637>7.'!2#!"&=463@b":1P4Y,++,Y4P1:"":1P4Y,++,Y4P1:"b@@@7hVX@K-AA-K@XVh77hVX@K-AA-K@XVh7Aj"#54&#"'54&#"3!26=476=4&#"#54&'&#"#54&'&'2632632#!"&5&=4632>3265K @0.B @0.B#6'&& l @0.B 2' .B A2TA9B;h" d mpPTlLc _4.HK5]0CB.S0CB./#'?&&)$$)0CB. }(AB.z3M2"61d39L/PpuT(Ifc_E`1X"#4&"'&#"3!267654&"#4&"#4&26326#!"&'&5463246326\B B\B&@5K&@"6LB\B B\B sciL}QP%&#"!"3!754?27%>54&#!26=31?>Ijjq,J[j.-tjlV\$B.R1?@B.+?2`$v5K-%5KK5.olRIS+6K5̈$B\B 94E.&ʀ15uE& ԖPjjdXUGJ7!.B P2.B %2@ 7K5(B@KjKj?+fU E,5K~!1.>F.F,Q5*H$b2#!"&=%!"&=463!7!"&'&=4634'&#!">3!!"3!32#!"3!23!26=n$32>32>32#"#.#"#.#"3!27654&#"547654&#"#654&Mye t|]WSSgSY\x{ 70"1i92DU1&=  =&0@c >&/Btd4!*"8K4+"@H@/'= t?_K93-] UlgQQgsW ]#+ i>p&30&VZ&0B/ %3B. "to ){+C4I (  /D0&p0D3[_cg"'&#"3!2676=4&"#54&#"#54&#"#4&'2632632632#!"&'&5463246#!#!#5K)B4J&@#\8P8 @0.B J65K J6k cJ/4qG^\hB2.1!~K5y?^\Vljt-.j[J,qjjI7$?1R.B+.B$`2?gvEo.5KK5%-K6+SIR[&.E49 B\B$5KG#!+"&5!"&=463!2+"&' +"' +"'&5>;2>76;2Y    M .x - N     u  , u ?  LW   #  *:J4'&+326+"'#+"&5463!2  $6& $&6$ UbUI-uu,uuڎLlLAX!Jmf\$ 6uuu,KLlL-[k{276/&'&#"&5463276?6'.#"!276/&'&#"&5463276?6'.#"  $6&  $&6]h - %Lb`J%E 5 ,5R- h - %Lb`J%E 5 ,5R-'uu,uulL/hR    dMLc  NhR   dMLc  N1uuu,LlL@  ' 7 '7 ``H ``H !``H ```H` '%  7' 7'7 ' $&6$ X`(W:,:X`(WLLlLX`(W:BX`(XLlL $ %/9ES[#"&54632$"&4624&"26$4&#"2%#"&462$#"&4632#"32&! 24>  !#"&'.'#"$547.'!6$327&'77'&77N77N'qqqqqPOrqEsttsst}||}uԙ[WQ~,> nP/R U P酛n >,m'77'&77N77N6^Orqqqqqqt棣棣(~|| on[usј^~33pc8{y%cq33dqpf L 54 "2654"'&'"/&477&'.67>326?>< x ,  (-'sI  VCV  Hr'-(  $0@!BHp9[%&!@0$u  ]\\]-$)!IHV D V HI!)$-#36>N"&462."&/.2?2?64/67>&  #!"&5463!2]]]3 $; &|v;$ (CS31 =rM= 4TC(G zw@www]]]($-;,540= sL =45,; @www(2#"$&546327654&#" &#"AZ\@/#%E1/##.1E$![A懇@@\!#21E!6!E13"|! gL&5&'.#4&5!67&'&'5676&'6452>3.'5A5RV[t,G'Q4}-&r! G;>!g12sV&2:#;d=*'5E2/..FD֕71$1>2F!&12,@K r#"&5462>%.#"'&#"#"'>54#".'7654&&5473254&/>7326/632327?&$  $6 $&6$ !&"2&^ u_x^h ;J݃HJǭ qE Dm! M G?̯' %o8 9U(F(ߎLlL&!&!SEm|[n{[<ɪ "p C Di% (K HCέ  pC B m8 @Kނ  HF(LlL "*6%&6$ 7&$5%%6'$2"&4}x3nQH:dΏX e8z' li=! 7So?vM '&7>>7'7>''>76.'6'El:Fg r *t6K3U Z83P)3^I%=9 )<}Jk+C-Wd &U-TE+]Qr-< Q#0 C+M8 3':$ _Q =+If5[ˮ&&SGZoMkܬc#7&#"327#"'&$&546$;#"'654'632ե›fKYYKf¥yͩ䆎L1hvvƚwwkn]*]nlxDLw~?T8bb9SA}+5?F!3267!#"'#"4767%!2$324&#"6327.'!.#"۔c28Ψ-\?@hU0KeFjTlyE3aVsz.b؏W80]TSts<hO_u7bBtSbF/o|V]SHކJ34&#!"3!26#!!2#!"&=463!5!"&5463!2  @ ^B `` B^^B@B^   @ @B^@@^BB^^>3!"&546)2+6'.'.67>76%&F8$.39_0DD40DD0+*M7{L *="# U<-M93#D@U8vk_Y [hD00DD00Dce-JF1 BDN&)@ /1 dy%F#"'&'&'&'&763276?6#"/#"/&54?'&763276"&'&'&5#&763567632#"'&7632654'&#"32>54'&#"'.5463!2#!3>7632#"'&'&#"'&767632yqoq>* 432fba  $B? >B BB AA.-QPPR+ 42 %<ciђ:6& hHGhkG@n`IȌ5 !m(|.mzyPQ-.  je  q>@@?ppgVZE|fb6887a %RB? =B ABBAJvniQP\\PRh!cDS`gΒ 23geFGPHXcCI_ƍ5" n*T.\PQip [*81 / 9@:>t%6#".'.>%6%&7>'.#*.'&676./&'.54>754'&#"%4>327676= >vwd" l "3 /!,+ j2.|%& (N &wh>8X}xc2"W<4<,Z~fdaA`FBIT;hmA<7QC1>[u])  u1V(k1S) - 0 B2* %M ;W(0S[T]I) A 5%R7&&T,Xq&&1X,LΒw%%;#!"&5463!546;2!2!+"&52#!"/&4?63!5! (&&@&&(&&@&&( (  &&@&&@&&&&  #''%#"'&54676%6%% hh @` !   !    #52#"&5476!2#"&5476!2#"'&546        @  @  @    84&"2$4&"2$4&"2#"'&'&7>7.54$ KjKKjKjKKjKjKKjdne4" %!KjKKjKKjKKjKKjKKjK.٫8  !%00C'Z'.W"&462"&462"&462 6?32$6&#"'#"&'5&6&>7>7&54>$ KjKKjKjKKjKjKKjhяW.{+9E=cQdFK1A  0) LlLjKKjKKjKKjKKjKKjKpJ2`[Q?l&٫C58.H(Yee    Y'w(O'R@$#"&#"'>7676327676#" b,XHUmM.U_t,7A3ge z9@xSaQBLb( VU  !!!==w)AU!!77'7'#'#274.#"#32!5'.>537#"76=4>5'.465! KkkK _5 5 #BH1`L I& v6S F!Sr99rS!`` /7K%s}H XV P V  e  Vd/9Q[ $547.546326%>>32"&5%632264&#"64'&""&'&"2>&2654&#";2 P 3>tSU<)tqH+>XX|Wh,:UStW|XX>=X*  ))  +^X^|WX=>X:_.2//a:Ru?  Q%-W|XW>J( =u>XX|WX`  *((*  +2 2X>=XW|E03>$32!>7 '&'&7!6./EUnohiI\0<{ >ORDƚ~˕VƻoR C37J6I`Tb<^M~M8O  5!#!"&!5!!52!5463 ^B@B^`B^^B `B^^"^BB^0;%'#".54>327&$#"32$ !"$&6$3 ##320JUnLnʡ~~&q@tKL}'` - -oxnǑUyl}~~FڎLlLt`(88(   7!' !\W\ d;tZ`_O; }54+";2%54+";2!4&"!4;234;2354;2354>3&546263232632#"&#"26354;2354;2354;2````pp```  !,! -&M<FI(2 ```@PppPpppppp# #   ppppp j#"'&=!;5463!2#!"&=#".'.#!#"&463232>7>;>32#"&'#"!546 %. `@` :,.',-XjjXh-,'.,: kb>PppP>bk .%Z & :k%$> $``6&L')59I"TlԖlT"I95)'L&69GppG9$ >$%k: !+32&#!332 $&6$ ~O88OLlL>pN  iLlL '':Ma4&'#"'.7654.#""'&#"3!267#!"&54676$32#"'.76'&>$#"'.7654'&676mD5)  z{6lP,@KijjOoɎȕ>>[ta) GG 4?a) ll >;_-/ 9GH{zyN@,KԕoN繁y! ?hh>$ D" >â? $ n"&5462'#".54>22654.'&'.54>32#"#*.5./"~~s!m{b6# -SjR,l'(s-6^]Itg))[zxȁZ&+6,4$.X%%Dc* &D~WL}]I0"  YYZvJ@N*CVTR3/A3$#/;'"/fR-,&2-" 7Zr^Na94Rji3.I+ &6W6>N%&60;96@7F6I3+4&#!"3!26%4&#!"3!26 $$ ^aa`@@^aa '7  $ >. %"&546;2#!"&546;2#/a^(^aa(N@@4&#!"3!26 $$ @@^aa`@^aa '  $ >. 7"&5463!2#/a^(n@^aa(N@ %=%#!"'&7!>3!26=!26=!2%"&54&""&546 ##]VTV$KjKKjK$&4&Ԗ&4&>9G!5KK55KK5!&&jj&&#/;Im2+#!"&'#"&463>'.3%4&"26%4&"26%6.326#>;463!232#.+#!"&5#"5KK5sH..Hs5KK5e# )4# %&4&&4&&4&&4&` #4) #%~]eZ&&Ze] E-&&-EKjKj.<<.KjK)#)`"@&&`&&&&`&&)#`)"dXo&&oXG,8&&8!O##!!2#!+"'&7#+"'&7!"'&?63!!"'&?63!6;236;2!2@@8@7 8Q NQ N 8G@ 8GQ NQ N7   8 8  H H  k%  ".>2I20]@]@oo@@oo㔕a22]]p^|11|99|11|(%7'7' ' 7T dltl)qnluul)1$4&"24&"2 &6 +"&5476;2 &6 LhLLhLLhLLhL>  &   &`>hLLhLLhLLhL>&&>G  .7)1!62 1!62he220e22> v +4 [d+ d 135#5&'72!5!#"&'"'#"$547&54$ Eh`X(cYz:L:zYc\$_K`Pa}fiXXiޝfa  (+.>#5#5!5!5!54&+'#"3!267!7!#!"&5463!2U``'    jjV>(>VV>>Vq  ( ^(>VV>>VV=&'&'&'&76'&'&.' #.h8"$Y ''>eX5, ,PtsK25MRLqS;:.K'5R ChhRt(+e^TTu B"$:2~<2HpwTT V/7GWg. %&32?673327>/.'676$4&"2 $&6$   $6& $&6$ d -- m  ,6*6,  mKjKKjoooKzz8zzȎLlLU4>>4-. YG0 )xx) 0GYޞ .jKKjKqoooolzzz80LlLD/7H#"'.7'654&#"'67'.6?>%"&46227#".547|D,=),9#7[͑fx!X: D$ +s)hhijZt<F/*8C,q؜e\r,WBX/C2hhh=tXm>NZ+"&=46;2+"&=4>7>54&#"#"/.7632  >. $$ p=+& 35,W48'3  l zffff^aaP2P: D#;$# $*;? R Cfff^aa'Y >O`"&5462&'.'.76.5632.'#&'.'&6?65\\[( | r [A@[[@A#2#  7* <Y$  +}"(  q87] F  _1 )    #1Ke34&+326+"&=!#!"&763!2#!"&5463!2#>?4.'3#>?4.'3#>?4.'3Xe`64[l7  , L; =+3&98&+)>>+3&98&+)>=+3&88&+)> Wj|r >Q$~d $kaw+-wi[[\;/xgY $kaw+-wi[[\;/xgY $kaw+-wi[[\;/xgYJ\m4.'.'&#"#"'.'&47>7632327>7>54&'&#"327>"&47654'&462"'&476'&462"'&47>&'&462i$ $^"  %%  "^$ $W "@9O?1&&18?t@" W&%%&4KK6pp&46ZaaZ&4mttm ^x -  - x^ = /U7C kkz'[$ =&5%54'4&KK4r7>54 "&54>2"&462%"&54&#""&546 %#"&'&'.7>#"'&'.7>&4&&4&4&&4SZ&4&&44$#&&&j3$"('$&4&[՛[&4&&4F&4&]\&4&$  !D4%  ,\44&&4&4&&4&-Z4&&4&;cX/)#&>B)&4&j9aU0'.4a7&&u՛[[4&&4&@&&]]&&Ώ0 u40 )4#g&'.#"32676%4/&#"326'&#"2632#2+&'%#"'&6?676676632%#"'&6767#"&'&6767#"'.7>327"#"&'&6763"'.7>;7632;>%5K$ "0%>s$ "0%>;;>%5KVL#>H30 \($$(\( єyO2F/{(?0(TK.5sg$ єy#-F/{$70(TK.5sg$L#>H30 \($$(\#(@5"'K58!'"58!'"55"'K#dS$K K$Sdx#@1 w d>N;ET0((? - 2K|1 wd#N;ET0$(? - 2K$#dS$K K$SdxDN\2654& 265462"2654 #"32654>7>54."/&47&'?62 &4&&4&h՛[&4&r$'("$3j&&&#$4[ " @ GB[ "&&Β&&][u&&7a4.'0Ua9j&4&)B>&#)/Xc;u՛ "  " Gi[ Xh#"&54676324&'&#"'>54#"32#"54>54'.#"32>7>767632326#!"&5463!2b )   :4FDN  [1,^JK-*E#9gWRY vm0O w@wwwC22 c@X&!9{MA_"S4b// DR"XljPY < @www%e4.#"32>7676#'.#"#"&54>3232>754&*#"&54>763 >32 ''il$E/  @P@ ^`'W6&!.. ! -P5+ E{n46vLeVz:,SN/ M5M[  ]$[^5iC'2H&!(?]v`* l b$9> =R2 #"&5467%!"&7>3-.7>;%.7>322326/.76/.'&6766/&/&#"&676 &676&6766/&672? =1( H/ '96&@)9<')29% &06##$ J 0 7j)5@"*3%"!M %#K"%Ne 8)'8_(9./=*%8!Q #P"\Q#N&a)<9bR]mp%"'.'&54>76%&54763263 #"/7#"'#"&/%$%322654&#"%'OV9  nt  |\d ϓ[nt  |@D:) ;98'+| j," 41CH^nVz(~R 9\'  r  @L@  @w46HI(+C ,55, f[op@\j;(zV~i/5O#"'&54>32&#" 654'67'"'>54''&'"'6767&546767>7蒓`V BMR B9)̟!SH-77IXmSMH*k#".o;^J qןד>@YM $bKd ү[E";Kx%^6;%T,U:im=Mk).DT4'"&5463267&#" 6;64'.'4'>732676%#!"&5463!2),蛜s5-54&#"#"'654'.#"#"&#"3263232>3232>76 $$ Cf'/'% ( $UL ( #'/'@ 3#@,G)+H+@#3 ^aaX@ _O#NW#O_ .* ##(^aaq[632632#"&#"#".'&#"#".'&54767>7654.54632327&547>P9 B6?K? %O4T% >6>Z64Y=6>%S4N$ ?L?4B @{:y/$ ,'R! F! 8% #)(()#%: !F Q'+%0z:zO_4'.'&54>54&#"#"'654'.#"#"&#"3263232>3232>76#!"&5463!2Cf'.'% ( $VM  ) #'.'@ 3 #A,G)+H+A# 4 w@wwwXA  ?4N$NW&M&L  /* ## + @www O$>?>762'&#"./454327327>7> EpB5 3FAP/h\/NGSL  RP* m95F84f&3Ga4B|wB.\FI*/.?&,5~K % & Y."7n< "-I.M`{ARwJ!FX^dj''''"'7&'7&'7&'7&547'67'67'67'63277774$#"32$   *'ֱ,?g=OO&L&NJBg;1''ֱ.=gCIM $'&&NJBg=.%w؝\\w Ioo<<-NIDg=/%(ײ+AhEHO*"#*OICh=/'(ֲ/=h>ON.]xwڝ]7e[@)6!!"3#"&546%3567654'3!67!4&'7Sgny]K-#75LSl>9V%cPe}&Hn_HȌ=UoLQ1!45647UC" !-9[nx"&46254&"326754&"326754&"26754&"26#".547632632626326'4#"#"54732764&"264.#"327632>#"'"'#"'#"&5#"'67&'327&'&54>3267>7>7>32632632T"8""8)<())(<))))<))<))<))<) Tد{ՐRhx=8 78 n 81 pH_6Soc F@b@?d?uKbM70[f5Y$35KUC<:[;+8 n 87 8/8Zlv]64qE 'YK0-AlB; W#;WS9 &(#-7Z://:/Tr++r,,r++r,,r++r,,r++r,,ʠgxXVעe9222222^KVvF02OO23OO`lF;mhj84DroB@r+@222222C0DP`.r8h9~T4.&o@9 1P%14'!3#"&46327&#"326%35#5##33 $$  }Pcc]321IUΠ?LL?cc4MX &04;0XpD[[DpD,)&&Q 9V\26&".'&'&6?.#"#26327677>'32>&3#'&+"?626&"#!'.'!"&5463!>;26;2!2P P  92#.}SP9::%L \B )spN/9oJ5  !+D`]BgY9+,9% Pk 4P P &NnF!_7*}B<{o0&&B;*<@$ucRRc#@16#37c&@@@ J"@*4^`ED B o/8927 *@OLC!T!323X$BJ@@@&AS 0C 59" 'D/&&D4 88 $5A&%O#!"&547>7>2$7>/.".'&'&2>^B@B^ >FFzn_0P:P2\nzFF> R & p^1P:P1^ & R P2NMJMQ0Rr.B^^B 7:5]yPH!%%"FPy]5:7 = 4 QH!%%!Ht 4 =<"-/ ?1Pp+".'.'.?>;2>7$76&'&%.+"3!26#!"&54767>;2' +~'*OJ%%JN,&x' % ^M,EE,M7 ZE[P*FF*P:5  ^B@B^){$.MK%%KM.$+X)o3 "a 22!] 4  I>"">,&S8JB##B12 ` `B^^B8&ra#11#$R&  "&.2v%/%''%/%7%7'%7'/#&5'&&?&'&?&'&7%27674?6J" 0<=_gNU?DfuYGb7=^H^` =v~yT3GDPO 4Fѭqi_w\ހ!1uS%V_-d 1=U{J8n~r'U4.#".'"3!264&"26+#!"&5463!232+32+32 0P373/./373P0 T=@=T֙֙|`^B@B^^BB^`````*9deG-! !-Ged9IaallkOB^^BB^^B +Yi"&54622#!"&54>;2>+32+32+#!"&5463!2324&#!"3!26֙֙0.I/ OBBO -Q52-)&)-2 ``  ``  `^B@B^^BB^`  @   |kkl"=IYL)CggC0[jM4      B^^BB^^B @  @ !1AQu4.#".'"3!24&"254&#!"3!2654&#!"3!2654&#!"3!26#!54&+"!54&+"!"&5463!2)P90,***,09P)J66S"@8@^B@@B^^BB^Ukc9 9ckU?@@88 @@N@B^````^BB^^!1AQu#!"&4>32>72"&462#!"&=463!25#!"&=463!25#!"&=463!24&#!"3!546;2!546;2!26#!"&5463!2J66J)P90,***,09P)"@8@ @  `@@` ^B@B^^BB^ՀUUkc9 9c`@@88@@2  @ ````@B^^BB^^(%.'"&' $&  #"$&6$ wCιCwjJ~J>LlLśJSSJ͛>6LlL$,  $&6654&$ 3 72&&  lLmzzBl>KlLGzzG>'7#!"&54>7&54>2  62654' '3/U]B,ȍ,B]U/OQнQ>+X}}X0bӃۚӅb0}hQQh>ff#=#!"&4>3272"&462!3!26#!"&5463!;26=!2J66J)Q8PP8Q)  ^B@B^^B``B^VVVld9KK9d` @B^^BB^``^+;K[eu4.#"'"3!264&"254&#!"3!2654&#!"3!26%54&+";2654&#!"3!26!54&#!"!#!"&5463!2"D/@@/D"?,,?pppp@@@@^B@B^^BB^D6]W2@@2W]67MMppp@@@@@@@@n`@B^^BB^^+;K[eu#!"&54>3272"&462#!"&=463!2%#!"&=463!2+"&=46;25#!"&=463!2!3!26#!"&5463!2?,V,?"D/@@/D"pppp@@@  ^B@B^^BB^D7MM76]W2@@2W]֠ppp@@@@@@@@` @B^^BB^^A#"327.#"'63263#".'#"$&546$32326J9"65I).!1iCCu +I\Gw\B!al݇yǙV/]:=B>9+32%#!"&5463!2#"&54>54'&#"#"54654'.#"#"'.54>54'&'&543232654&432#"&54>764&'&'.54632  ?c'p& ?b1w{2V ?#&#9&CY' &.&#+B : &65&*2w1GF1)2<)<'  ( BH=ӊ:NT :O )4:i   F~b` e!}U3i?fRUX|'&'&Ic&Q  *2U.L6* / L:90%>..>%b>+ +z7ymlw45)0 33J@0!! TFL P]=GS -kwm  !*(%6&692? $&6$  '   al@lLlL,& EC h$LlL /37;%"&546734&'4&" 67 54746 #5#5#5ppF::FDFNV^fnv~"/&4?.7&#"!4>3267622"&4"&46262"&42"&4462"$2"&42"&4"&46262"&4"&46262"&42"&4$2"&42"&42"&4  R ,H8JfjQhjG^R,  !4&&4&Z4&&4&4&&4&4&&4&&4&&44&&4&4&&4&Z4&&4&4&&4&4&&4&4&&4&4&&4&&4&&4&Z4&&4&Z4&&4&  R  ,[cGjhQRJ'A, &4&&4Z&4&&4Z&4&&4Z&4&&444&&4&&4&&4Z&4&&4Z&4&&4Z&4&&4&4&&4Z&4&&4Z&4&&4&&4&&4Z&4&&4Z&4&&4%-5=EM}+"&=#!"'+"&=&="&4626"&462&"&462"&462&"&462&"&462#!"&=46;4632676/&?.7&#"!2"&462&"&462&"&462"&462&"&462&"&462"&462&"&462"&462@?AA? @ @R...R@`jlL.h) * * $ %35K.....uvnu....@@jN  * * .t2#K5..R..R. @Hq '&'&54 &7676767654$'.766$76"&462&'&'&7>54.'.7>76ȵ|_ğyv/ۃ⃺k] :Buq CA _kނXVobZZbnW|V 0  Q2- l}O  / :1z q%zG 4( 6Roa ą\< )4 J}%!!#!"&5463!2^B@B^^BB^`@B^^BB^^%#!"&=463!2^B@B^^BB^B^^BB^^ &))!32#!#!"&5463!463!2`B^^B^B@B^^B`^BB^^B@B^B^^BB^`B^^#3%764/764/&"'&"2?2#!"&5463!2    s^B@B^^BB^ג     @B^^BB^^#'7"/"/&4?'&4?62762!!%#!"&5463!2     ^B@B^^BB^    `@B^^BB^^ ! $&6$ .2r`LlLf4LlL#.C&>"'&4762"/&4?62'"'&4762%'.>6.'.>6'>/>76&'&.'&7&'">?4'.677>7.>37654'&'67>776 $&6$  ( 4Z# # & # # & y"6&.JM@& "(XE* $+8 jT?3#'.'&!3!2>?3.'#!57>7'./5!27#'.#!"g%%D-!gg<6WWZe#1=/2*]Y3-,C1 /Dx] VFIq-HD2NK '>*%R= f 07=. f D]\|yu,0>Seu#2#"'&5<>323#3#&'#334'."#"+236'&54.#"5#37326#!"&5463!2 <  zzj k-L+ )[$8=".un/2 ^B@B^^BB^5cy    (ݔI(8?C (3> #"($=@B^^BB^^0K S&'.'&'./674&$#">&>?>'76'# "&#./.'7676767>76$w .~kuBR] T%z+",|ޟj<)(!( ~ˣzF8"{%%#5)}''xJF0"H[$%EJ#% .Gk29(B13"?@ S)5" #9dmW";L65RA0@T.$}i`:f3A%% BM<$q:)BD aa%`]A &c| Ms!  Z 2}i[ F&** < ʣsc"J<&NsF% 0@Wm6&'.6$.7>7 $76".4>2., &>6'"'&7>=GV:e #:$?+% q4g &3hT`ZtQмQQмpAP1LK!:< }҈`dlb,9'  %%($! a3)W)x  оQQоQQcQǡ-җe)Us2XD\ϼYd /?O_o#"=#"=4;543#"=#"=4;543#"=#"=4;543#"=#"=4;543#"=#"=4;543%#!"&5463!2++532325++532325++532325++532325++53232p00pp00pp00pp00pp008((88(@(80pp00pp00pp00pp00pp0     @(88((88     /Q/&'%&/"&=.6?&?&'&6?'.>-#".6?'.>'&6'.>54627>%>76#"'% %6 27 2G f!)p&4&p)!f G2 72  *6 " 47 2G f!)p&4&p)!f G2 72 " 6* !k 3 j&3 %,*&&ր*9% 3&j 3 k!./!>>$,*!k 3.j&3 %Ԝ9*&&ր*ǜ,% 3&j 3 k!*,$>>!/.&6.'&$ &76$76$PutۥiPuGxy Զ[xy -_v١eNuv١e =uʦ[t78X &6# #'7-'%'&$  $6 $&6$ 31NE0gR=|||">"LlL^v!1f2iЂwgfZQQ^>"||||wLlL &ZXblw.'&>'&'&".'.'&&'&'&7>767>67>7626&'&>&'&>'.7>.676'&'&'&'.67.>7>6&'&676&'&676.676&'&>&'&676'.>6/4-LJg-   $  6)j2%+QF)b3FSP 21DK2AW ") ")$? ? 8A& AE5lZm= gG2Sw*&>$5jD GHyX/4F r 1  1""!l=6> 6 ,5./'e    .*|Ed! u & &%& &5d ))66 @ C& 8B @qL?P^7 G-hI[q:"T6 ,6 &/`  L wQ'   A ^   "  $& _  y  * <Copyright Dave Gandy 2016. All rights reserved.Copyright Dave Gandy 2016. All rights reserved.FontAwesomeFontAwesomeRegularRegularFONTLAB:OTFEXPORTFONTLAB:OTFEXPORTFontAwesomeFontAwesomeVersion 4.7.0 2016Version 4.7.0 2016FontAwesomeFontAwesomePlease refer to the Copyright section for the font trademark attribution notices.Please refer to the Copyright section for the font trademark attribution notices.Fort AwesomeFort AwesomeDave GandyDave Gandyhttp://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/license/      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab cdefghijklmnopqrstuvwxyz{|}~"      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~glassmusicsearchenvelopeheartstar star_emptyuserfilmth_largethth_listokremovezoom_inzoom_outoffsignalcogtrashhomefile_alttimeroad download_altdownloaduploadinbox play_circlerepeatrefreshlist_altlockflag headphones volume_off volume_down volume_upqrcodebarcodetagtagsbookbookmarkprintcamerafontbolditalic text_height text_width align_left align_center align_right align_justifylist indent_left indent_rightfacetime_videopicturepencil map_markeradjusttinteditsharecheckmove step_backward fast_backwardbackwardplaypausestopforward fast_forward step_forwardeject chevron_left chevron_right plus_sign minus_sign remove_signok_sign question_sign info_sign screenshot remove_circle ok_circle ban_circle arrow_left arrow_rightarrow_up arrow_down share_alt resize_full resize_smallexclamation_signgiftleaffireeye_open eye_close warning_signplanecalendarrandomcommentmagnet chevron_up chevron_downretweet shopping_cart folder_close folder_openresize_verticalresize_horizontal bar_chart twitter_sign facebook_sign camera_retrokeycogscomments thumbs_up_altthumbs_down_alt star_half heart_emptysignout linkedin_signpushpin external_linksignintrophy github_sign upload_altlemonphone check_emptybookmark_empty phone_signtwitterfacebookgithubunlock credit_cardrsshddbullhornbell certificate hand_right hand_lefthand_up hand_downcircle_arrow_leftcircle_arrow_rightcircle_arrow_upcircle_arrow_downglobewrenchtasksfilter briefcase fullscreengrouplinkcloudbeakercutcopy paper_clipsave sign_blankreorderulol strikethrough underlinetablemagictruck pinterestpinterest_signgoogle_plus_sign google_plusmoney caret_downcaret_up caret_left caret_rightcolumnssort sort_downsort_up envelope_altlinkedinundolegal dashboard comment_alt comments_altboltsitemapumbrellapaste light_bulbexchangecloud_download cloud_uploaduser_md stethoscopesuitcasebell_altcoffeefood file_text_altbuildinghospital ambulancemedkit fighter_jetbeerh_signf0fedouble_angle_leftdouble_angle_rightdouble_angle_updouble_angle_down angle_left angle_rightangle_up angle_downdesktoplaptoptablet mobile_phone circle_blank quote_left quote_rightspinnercirclereply github_altfolder_close_altfolder_open_alt expand_alt collapse_altsmilefrownmehgamepadkeyboardflag_altflag_checkeredterminalcode reply_allstar_half_emptylocation_arrowcrop code_forkunlink_279 exclamation superscript subscript_283 puzzle_piece microphonemicrophone_offshieldcalendar_emptyfire_extinguisherrocketmaxcdnchevron_sign_leftchevron_sign_rightchevron_sign_upchevron_sign_downhtml5css3anchor unlock_altbullseyeellipsis_horizontalellipsis_vertical_303 play_signticketminus_sign_alt check_minuslevel_up level_down check_sign edit_sign_312 share_signcompasscollapse collapse_top_317eurgbpusdinrjpyrubkrwbtcfile file_textsort_by_alphabet_329sort_by_attributessort_by_attributes_alt sort_by_ordersort_by_order_alt_334_335 youtube_signyoutubexing xing_sign youtube_playdropbox stackexchange instagramflickradnf171bitbucket_signtumblr tumblr_signlong_arrow_down long_arrow_uplong_arrow_leftlong_arrow_rightwindowsandroidlinuxdribbleskype foursquaretrellofemalemalegittipsun_366archivebugvkweiborenren_372stack_exchange_374arrow_circle_alt_left_376dot_circle_alt_378 vimeo_square_380 plus_square_o_382_383_384_385_386_387_388_389uniF1A0f1a1_392_393f1a4_395_396_397_398_399_400f1ab_402_403_404uniF1B1_406_407_408_409_410_411_412_413_414_415_416_417_418_419uniF1C0uniF1C1_422_423_424_425_426_427_428_429_430_431_432_433_434uniF1D0uniF1D1uniF1D2_438_439uniF1D5uniF1D6uniF1D7_443_444_445_446_447_448_449uniF1E0_451_452_453_454_455_456_457_458_459_460_461_462_463_464uniF1F0_466_467f1f3_469_470_471_472_473_474_475_476f1fc_478_479_480_481_482_483_484_485_486_487_488_489_490_491_492_493_494f210_496f212_498_499_500_501_502_503_504_505_506_507_508_509venus_511_512_513_514_515_516_517_518_519_520_521_522_523_524_525_526_527_528_529_530_531_532_533_534_535_536_537_538_539_540_541_542_543_544_545_546_547_548_549_550_551_552_553_554_555_556_557_558_559_560_561_562_563_564_565_566_567_568_569f260f261_572f263_574_575_576_577_578_579_580_581_582_583_584_585_586_587_588_589_590_591_592_593_594_595_596_597_598f27euniF280uniF281_602_603_604uniF285uniF286_607_608_609_610_611_612_613_614_615_616_617_618_619_620_621_622_623_624_625_626_627_628_629uniF2A0uniF2A1uniF2A2uniF2A3uniF2A4uniF2A5uniF2A6uniF2A7uniF2A8uniF2A9uniF2AAuniF2ABuniF2ACuniF2ADuniF2AEuniF2B0uniF2B1uniF2B2uniF2B3uniF2B4uniF2B5uniF2B6uniF2B7uniF2B8uniF2B9uniF2BAuniF2BBuniF2BCuniF2BDuniF2BEuniF2C0uniF2C1uniF2C2uniF2C3uniF2C4uniF2C5uniF2C6uniF2C7uniF2C8uniF2C9uniF2CAuniF2CBuniF2CCuniF2CDuniF2CEuniF2D0uniF2D1uniF2D2uniF2D3uniF2D4uniF2D5uniF2D6uniF2D7uniF2D8uniF2D9uniF2DAuniF2DBuniF2DCuniF2DDuniF2DEuniF2E0uniF2E1uniF2E2uniF2E3uniF2E4uniF2E5uniF2E6uniF2E7_698uniF2E9uniF2EAuniF2EBuniF2ECuniF2EDuniF2EE=O<01hpython3-saml-1.16.0/docs/saml2/_static/css/fonts/fontawesome-webfont.svg000066400000000000000000015437331451074743100262120ustar00rootroot00000000000000 Created by FontForge 20120731 at Mon Oct 24 17:37:40 2016 By ,,, Copyright Dave Gandy 2016. All rights reserved. python3-saml-1.16.0/docs/saml2/_static/css/fonts/fontawesome-webfont.ttf000066400000000000000000005032541451074743100262010ustar00rootroot00000000000000 PFFTMkGGDEFp OS/22z@X`cmap : gasphglyfMLhead-6hhea $hmtxEy loca\ maxp,8 name㗋ghpostkuːxY_< 3232  '@i33spyrs@  pU]yn2@ zZ@55 zZZ@,_@s@ @(@@@- MM- MM@@@ -`b $ 648""""""@ D@ ,,@  m)@@   ' D9>dY* '    T     @ f %RE    $!k(D'  % %  0%/&p@0 !"""`>N^n~.>N^n~>N^n~ !"""`!@P`p 0@P`p!@P`p\XSB1ݬ        ,,,,,,,,,,,,,tLT$l x T ( dl,4dpH$d,t( !"0# $,$&D'()T**,,-.@./`/00123d4445 556 6\67H78 8`89L9:h:;<>?h?@H@A0ABXBCdCDLDEFG0GHIJ8KLMdN,NNOP`PQ4QR RlS,ST`U0WXZ[@[\<\]^(^_`pb,bddePefg`giLijDk klm@n,oLpqrsxttuD{`||}}~Hl@lH T H`@$\XDTXDP,8d\Hx tXpdxt@ Œ\ ļŸƔ0dʨˀ͔xϰЌ,ш҈ ӌ8,՜`lHش`Tڸ۔@lބ߬lp 4X$l( ` d      ,,8(Xx|T@| !"x##l$$'h(*L,T.L1t1230345t6T7$8 9H::;<<?X@ABCDEHFHGpHHIxJ JKLMN@P@QRSDT ULV`VWXX4XZZ[d[\|]^`aHabcXdetfhghi\jxnp@svwxyz{h|}}\lt4t88LT|| 4xLX(  @lt$xLL HĠT(  ʈˠϔldPՄxpڬTT ވL <H$l4 Pl ,xp,xt d 44,hP 4   4<,,408$8T |!h"$L%0&H'()*0*+,.$.012@234t5$69 ::; ;<(<=4?@ACDFH`HILLLLLLLLLLLLLLLLp7!!!@pp p]!2#!"&463!&54>3!2+@&&&&@+$(($F#+&4&&4&x+#+".4>32".4>32467632DhgZghDDhg-iWDhgZghDDhg-iW&@ (8 2N++NdN+';2N++NdN+'3 8!  #"'#"$&6$ rL46$܏ooo|W%r4L&V|oooܳ%=M%+".'&%&'3!26<.#!";2>767>7#!"&5463!2 %3@m00m@3%    @ :"7..7":6]^B@B^^BB^ $΄+0110+$ (   t1%%1+`B^^B@B^^"'.54632>324 #LoP$$Po>Z$_dC+I@$$@I+"#"'%#"&547&547%62V??V8<8y   b% I))9I  + % %#"'%#"&547&547%62q2ZZ2IzyV)??V8<8)>~>[   2 b% I))9I %#!"&54>3 72 &6 }XX}.GuLlLuG.>mmUmEEm> /?O_o54&+";2654&+";2654&+";264&#!"3!2654&+";2654&+";264&#!"3!2654&+";2654&+";2654&+";267#!"&5463!2&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&^BB^^B@B^@&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&B^^B@B^^/?#!"&5463!2#!"&5463!2#!"&5463!2#!"&5463!2L44LL44LL44LL44LL44LL44LL44LL44L4LL44LL4LL44LL4LL44LL4LL44LL /?O_o#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!28((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(88((88(@(8 (88((88(88((88(88((88(88((88(88((88(88((88(88((88(88((88(88((88/?O_#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!28((88(@(88((88(@(88(@(88((88((88(@(88(@(88((88(@(88((8 (88((88(88((88(88((88(88((88(88((88(88((88y"/&4?62 62,PP&PP,jPn#$"' "/&47 &4?62 62 PP&P&&P&P&P&&P&P#+D++"&=#"&=46;546;232  #"'#"$&6$   @    @  rK56$܏ooo|W@    @   rjK&V|oooܳ0#!"&=463!2  #"'#"$&6$   @ rK56$܏ooo|W@  @ rjK&V|oooܳ)5 $&54762>54&'.7>"&5462zz+i *bkQнQkb* j*LhLLhLzzBm +*i JyhQQhyJ i*+ mJ4LL44LL/?O%+"&=46;2%+"&546;2%+"&546;2+"&546;2+"&546;2`r@@r@@n4&"2#"/+"&/&'#"'&'&547>7&/.=46?67&'&547>3267676;27632Ԗ #H  ,/ 1)  ~'H  (C  ,/ 1)  $H ԖԖm 6%2X  % l2 k r6 [21 ..9Q $ k2 k w3 [20/;Cg+"&546;2+"&546;2+"&546;2!3!2>!'&'!+#!"&5#"&=463!7>3!2!2@@@@@@@`0 o`^BB^`5FN(@(NF5 @@@L%%Ju  @LSyuS@%44%f5#!!!"&5465 7#"' '&/&6762546;2&&??>  LL >  X   &&&AJ A J Wh##!"&5463!2!&'&!"&5!(8((88((`x c`(8`((88(@(8(D 9 8( ,#!"&=46;46;2.  6 $$ @(r^aa@@`(_^aa2NC5.+";26#!26'.#!"3!"547>3!";26/.#!2W  .@   @.$S   S$@   9I   I6>  >%=$4&"2$4&"2#!"&5463!2?!2"'&763!463!2!2&4&&4&&4&&48(@(88(ч::(8@6@*&&*4&&4&&4&&4& (88(@(8888)@)'&&@$0"'&76;46;232  >& $$ `  (r^aa` @`2(^aa$0++"&5#"&54762  >& $$ ^ ?  @(r^aa` ? (^aa #!.'!!!%#!"&547>3!2<<<_@`&& 5@5 @  &&>=(""='#"'&5476.  6 $$   ! (r^aaJ %%(_^aa3#!"'&?&#"3267672#"$&6$3276&@*hQQhwI mʬzzk)'@&('QнQh_   z8zoe$G!"$'"&5463!23267676;2#!"&4?&#"+"&=!2762@hk4&&&GaF * &@&ɆF * Ak4&nf&&&4BHrd@&&4rd  Moe&/?O_o+"&=46;25+"&=46;25+"&=46;2#!"&=463!25#!"&=463!25#!"&=463!24&#!"3!26#!"&5463!2 @  @  @  @  @  @  @    @    @    @   ^B@B^^BB^`@  @ @  @ @  @ @  @ @  @ @  @ 3@  MB^^B@B^^!54&"#!"&546;54 32@Ԗ@8(@(88( p (8jj(88(@(88@7+"&5&5462#".#"#"&5476763232>32@@ @ @KjKך=}\I&:k~&26]S &H&  &H5KKut,4, & x:;*4*&K#+"&546;227654$ >3546;2+"&="&/&546$ <X@@Gv"DװD"vG@@X<4L41!Sk @ G< _bb_ 4.54632&4&&M4&UF &""""& F&M&&M&%/B/%G-Ik"'!"&5463!62#"&54>4.54632#"&54767>4&'&'&54632#"&547>7676'&'.'&54632&4&&M4&UF &""""& FU &'8JSSJ8'&  &'.${{$.'& &M&&M&%/B/%7;&'66'&;4[&$ [2[ $&[  #/37#5#5!#5!!!!!!!#5!#5!5##!35!!! #'+/37;?3#3#3#3#3#3#3#3#3#3#3#3#3#3#3#3#3???? ^>>~??????~??~??^??^^? ^??4&"2#"'.5463!2KjKKjv%'45%5&5L45&% jKKjK@5%%%%54L5&6'k54&"2#"'.5463!2#"&'654'.#32KjKKjv%'45%5&5L45&%%'4$.%%5&55&% jKKjK@5%%%%54L5&6'45%%%54'&55&6' yTdt#!"&'&74676&7>7>76&7>7>76&7>7>76&7>7>63!2#!"3!2676'3!26?6&#!"3!26?6&#!"g(sAeM ,*$/ !'& JP$G] x6,& `   h `   "9Hv@WkNC<.  &k& ( "$p" . #u&#  %!' pJvwEF#  @   @  2#"' #"'.546763!''!0#GG$/!''! 8""8  X! 8" "8  <)!!#"&=!4&"27+#!"&=#"&546;463!232(8&4&&4 8(@(8 qO@8((`(@Oq8(&4&&4&@` (88( Oq (8(`(q!)2"&42#!"&546;7>3!2  Ijjjj3e55e3gr`Ijjjj1GG1rP2327&7>7;"&#"4?2>54.'%3"&#"#ժ!9&WB03& K5!)V?@L' >R>e;&L::%P>vO 'h N_":- &+# : ' +a%3 4'.#"32>54.#"7>7><5'./6$3232#"&#"+JBx)EB_I:I*CRzb3:dtB2P$ $5.3bZF|\8!-T>5Fu\,,jn OrB,7676'5.'732>7"#"&#&#"OA zj=N!}:0e%  y + tD3~U#B4 # g  '2 %/!: T bRU,7}%2"/&6;#"&?62+326323!2>?23&'.'.#"&"$#"#&=>764=464.'&#"&'!~:~!PP!~:~!P6 ,,$$% *'  c2N  ($"LA23Yl !x!*%%%% pP,T NE Q7^oH!+( 3  *Ueeu  wga32632$?23&'.5&'&#"&"5$#"#&=>7>4&54&54>.'&#"&'2#".465!#".'&47>32!4&4>Q6 ,,Faw!*' =~Pl*  ($"LA23Yl  )!* <7@@7<  <7@@7<  pP,T MF Q747ƢHoH!+( 3  tJHQ6  wh',686,'$##$',686,'$##$/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?%#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&f&&&&f&&&&f&&&&/?O_o%+"&=46;2+"&=46;2+"&=46;2#!"&=463!2+"&=46;2#!"&=463!2#!"&=463!2#!"&=463!2        @     @   @   @   s  s    s    s  s  /?O#"'&47632#!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2     @     @   @  @          s  s  s  /?O#"&54632 #!"&=463!2#!"&=463!2#!"&=463!2#!"&=463!2`      @     @   @  @     @   s  s  s  #"'#!"&5463!2632' mw@www '*wwww."&462!5 !"3!2654&#!"&5463!2pppp@  @ ^BB^^B@B^ppp@@  @    @B^^BB^^k%!7'34#"3276' !7632k[[v  6`%`$65&%[[k `5%&&'4&"2"&'&54 Ԗ!?H?!,,ԖԖmF!&&!Fm,%" $$ ^aa`@^aa-4'.'&"26% 547>7>2"KjKXQqYn 243nYqQ$!+!77!+!$5KK,ԑ ]""]ً 9>H7'3&7#!"&5463!2'&#!"3!26=4?6 !762xtt`  ^Qwww@?6 1B^^B@B^ @(` `\\\P`tt8`  ^Ͼww@w 1^BB^^B~ @` \ \P+Z#!"&5463!12+"3!26=47676#"'&=# #"'.54>;547632www M8 pB^^B@B^ 'sw- 9*##;Noj' #ww@w "^BB^^B  *  "g`81T`PSA:'*4/D#!"&5463!2#"'&#!"3!26=4?632"'&4?62 62www@?6 1 B^^B@B^ @ BRnBBn^ww@w 1 ^BB^^B @ BnnBC"&=!32"'&46;!"'&4762!#"&4762+!54624&&4&&44&&4&&44&&44&&4&&44&&6'&'+"&546;267: &&&& s @  Z&&&&Z +6'&''&'+"&546;267667: : &&&&  s @  :  Z&&&&Z  : z6'&''&47667S: : s @  : 4 : | &546h!!0a   $#!"&5463!2#!"&5463!2&&&&&&&&@&&&&&&&&#!"&5463!2&&&&@&&&&&54646&5- : s  :  :4:  +&5464646;2+"&5&5-  &&&& : s  :  : &&&& :  &54646;2+"&5- &&&& s  : &&&&  62#!"&!"&5463!24 @ &&&&-:&&&& "'&476244444Zf "/&47 &4?62S44444#/54&#!4&+"!"3!;265!26 $$ &&&&&&&&@^aa@&&&&&&&&+^aa54&#!"3!26 $$ &&&&@^aa@&&&&+^aa+74/7654/&#"'&#"32?32?6 $$ }ZZZZ^aaZZZZ^aa#4/&"'&"327> $$ [4h4[j^aa"ZiZJ^aa:F%54&+";264.#"32767632;265467>$ $$ oW  5!"40K(0?i+! ":^aaXRd D4!&.uC$=1/J=^aa.:%54&+4&#!";#"3!2654&+";26 $$ ```^aa^aa/_#"&=46;.'+"&=32+546;2>++"&=.'#"&=46;>7546;232m&&m l&&l m&&m l&&ls&%&&%&&%&&%&&&l m&&m l&&l m&&m ,&%&&%&&%&&%&#/;"/"/&4?'&4?627626.  6 $$ I     ͒(r^aaɒ    (_^aa , "'&4?6262.  6 $$ Z4f44fz(r^aaZ&4ff4(_^aa "4'32>&#" $&6$  WoɒV󇥔 zzz8YW˼[?zz:zz@5K #!#"'&547632!2A4@%&&K%54'u%%&54&K&&4A5K$l$L%%%54'&&J&j&K5K #"/&47!"&=463!&4?632%u'43'K&&%@4AA4&&K&45&%@6%u%%K&j&%K55K&$l$K&&u#5K@!#"'+"&5"/&547632K%K&56$K55K$l$K&&#76%%53'K&&%@4AA4&&K&45&%%u'5K"#"'&54?63246;2632K%u'45%u&&J'45%&L44L&%54'K%5%t%%$65&K%%4LL4@&%%K',"&5#"#"'.'547!34624&bqb>#  5&44& 6Uue7D#  "dž&/#!"&546262"/"/&47'&463!2 &@&&4L  r&4  r L&& 4&&&L rI@& r  L4&& s/"/"/&47'&463!2#!"&546262&4  r L&& &@&&4L  r@@& r  L4&& 4&&&L r##!+"&5!"&=463!46;2!28(`8((8`(88(8((8(8 (8`(88(8((8(88(`8#!"&=463!28(@(88((8 (88((88z5'%+"&5&/&67-.?>46;2%6.@g.L44L.g@. .@g. L44L .g@.g.n.4LL43.n.gg.n.34LL4͙.n.g -  $54&+";264'&+";26/a^    ^aa fm  @ J%55!;263'&#"$4&#"32+#!"&5#"&5463!"&46327632#!2$$8~+(888(+}(`8((8`]]k==k]]8,8e8P88P8`(88(@MMN4&#"327>76$32#"'.#"#"&'.54>54&'&54>7>7>32&z&^&./+>+)>J> Wm7' '"''? &4&c&^|h_bml/J@L@#* #M6:D 35sҟw$ '% ' \t3#!"&=463!2'.54>54''  @ 1O``O1CZZ71O``O1BZZ7@  @ N]SHH[3`)TtbN]SHH[3^)Tt!1&' 547 $4&#"2654632 '&476 ==嘅}(zVl''ٌ@uhyyhu9(}VzD##D# =CU%7.5474&#"2654632%#"'&547.'&476!27632#76$7&'7+NWb=嘧}(zVj\i1  z,X Y[6 $!%'FuJiys?_9ɍ?kyhun(}Vz YF  KA؉La  02-F"@Qsp@_!3%54&+";264'&+";26#!"&'&7>2    #%;"";%#`,@L 5 `   `  L`4LH` `   a 5 L@ #37;?Os!!!!%!!!!%!!!!!!!!%!!4&+";26!!%!!!!74&+";26%#!"&546;546;2!546;232 `@ `@ @@ @ @  @  @  @  @ L44LL4^B@B^^B@B^4L  @@@@    @@   @@    M4LL44L`B^^B``B^^B`L7q.+"&=46;2#"&=".'673!54632#"&=!"+"&=46;2>767>3!546327>7&54>$32dFK1A  0) L.٫C58.H(Ye#3C $=463!22>=463!2#!"&5463!2#!"&5463!2H&&/7#"&463!2!2LhLLhLhLLh! &&&&& &4hLLhLLhLLhL%z< 0&4&& )17&4& &&#!"&5463!2!2\@\\@\\@\\\\ W*#!"&547>3!2!"4&5463!2!2W+B"5P+B@"5^=\@\ \H#t3G#3G:_Ht\\ @+32"'&46;#"&4762&&4&&44&&44&&4@"&=!"'&4762!54624&&44&&44&&4&& !!!3!!0@67&#".'&'#"'#"'32>54'6#!"&5463!28ADAE=\W{O[/5dI kDtpČe1?*w@www (M& B{Wta28r=Ku?RZ^GwT -@www$2+37#546375&#"#3!"&5463ww/Dz?swww@wS88 ww#'.>4&#"26546326"&462!5!&  !5!!=!!%#!"&5463!2B^8(Ԗ>@|K55KK55K^B(8ԖԖ€>v5KK55KKHG4&"&#"2654'32#".'#"'#"&54$327.54632@pp)*Pppp)*Pb '"+`N*(a;2̓c`." b PTY9ppP*)pppP*)b ".`(*Nͣ2ͣ`+"' b MRZB4&"24&"264&"26#"/+"&/&'#"'&547>7&/.=46?67&'&547>3267676;27632#"&'"'#"'&547&'&=4767&547>32626?2#"&'"'#"'&547&'&=4767&547>32626?2ԖLhLKjKLhLKjK "8w s%(  ")v  >  "8x s"+  ")v  <  3zLLz3 3>8L3)x3 3zLLz3 3>8L3)x3 ԖԖ4LL45KK54LL45KK #)0C wZ l/ Y N,& #)0C vZl. Y L0"qG^^Gqq$ ]G)FqqG^^Gqq$ ]G)Fq%O#"'#"&'&4>7>7.546$ '&'&'# '32$7>54'VZ|$2 $ |E~E<| $ 2$|ZV:(t}X(  &%(Hw쉉xH(%& (XZT\MKG<m$4&"24&#!4654&#+32;254'>4'654&'>7+"&'&#!"&5463!6767>763232&4&&4N2`@`%)7&,$)' %/0Ӄy#5 +1 &<$]`{t5KK5$e:1&+'3TF0h4&&4&3M:;b^v+D2 5#$IIJ 2E=\$YJ!$MCeM-+(K55KK5y*%Au]c>q4&"24&'>54'654&'654&+"+322654&5!267+#"'.'&'&'!"&5463!27>;2&4&&4+ 5#bW0/% ')$,&7)%`@``2Nh0##T3'"( 0;e$5KK5 tip<& 1&4&&4&#\=E2&%IURI$#5 2D+v^b;:M2gc]vDEA%!bSV2MK55K(,,MeCM$!I@#"&547&547%6@?V8 b% I)94.""'." 67"'.54632>32+C`\hxeH>Hexh\`C+ED4 #LoP$$Po>Q|I.3MCCM3.I|Q/Z$_dC+I@$$@I+ (@%#!"&5463!2#!"3!:"&5!"&5463!462 ww@  B^^B  4&@&&&4 `  ww   ^B@B^ 24& && &%573#7.";2634&#"35#347>32#!"&5463!2FtIG9;HIxI<,tԩw@wwwz4DD43EEueB&#1s@www .4&"26#!+"'!"&5463"&463!2#2&S3 Ll&c4LL44LL4c@& &{LhLLhL'?#!"&5463!2#!"3!26546;2"/"/&47'&463!2www@B^^B@B^@&4t  r &&`ww@w@^BB^^B@R&t r  4&&@"&5!"&5463!462 #!"&54&>3!2654&#!*.54&>3!24&@&&&4 sw  @B^^B  @w4& && &3@w   ^BB^    I&5!%5!>732#!"&=4632654&'&'.=463!5463!2!2JJSq*5&=CKuuKC=&5*q͍S8( ^B@B^ (8`N`Ѣ΀GtO6)"M36J[E@@E[J63M")6OtG(8`B^^B`8 ',26'&'&76'6'&6&'&6'&4#"7&64 654'.'&'.63226767.547&7662>76#!"&5463!2  /[  . =XĚ4,+"  * +, 1JH'5G:: #L5+@=&#w@wwwP.1GE,ԧ4 4+ ; /5cFO:>JJ>:O9W5$@(b 4 @www'?$4&"2$4&"2#!"&5463!3!267!2#!#!"&5!"'&762&4&&4&&4&&48(@(88(c==c(8*&&*6&4&&4&&4&&4& (88(@(88HH88`(@&&('@1c4&'.54654'&#"#"&#"32632327>7#"&#"#"&54654&54>76763232632   N<;+gC8A`1a99gw|98aIe$IVNz<:LQJ  ,-[% 061I()W,$-7,oIX()oζA;=N0 eTZ  (O#".'&'&'&'.54767>3232>32 e^\4?P bMO0# 382W# & 9C9 Lĉ" 82<*9FF(W283 #0OMb P?4\^e FF9*<28 "L 9C9 & #!"3!2654&#!"&5463!2`B^^B@B^^ީwww@w^BB^^B@B^ww@w#!72#"' #"'.546763YY !''!0#GG$/!''!&UUjZ 8""8  X! 8" "8 GW4.'.#"#".'.'.54>54.'.#"32676#!"&5463!2 1.- +$)  c8 )1)  05.D <90)$9w@wwwW  )1) 7c  )$+ -.1 9$)0< D.59@www,T1# '327.'327.=.547&54632676TC_LҬ#+i!+*pDNBN,y[`m`%i]hbEm}a u&,SXK &$f9s? _#"!#!#!54632V<%'ЭHH (ںT\dksz &54654'>54'6'&&"."&'./"?'&546'&6'&6'&6'&6'&74"727&6/a49[aA)O%-j'&]]5r-%O)@a[9' 0BA; + >HCU  #  $  2  AC: oM=a-6OUwW[q ( - q[WwUP6$C +) (  8&/ &eMa  & $      %+"&54&"32#!"&5463!54 &@&Ԗ`(88(@(88(r&&jj8((88(@(8#'+2#!"&5463"!54&#265!375!35!B^^BB^^B   `^B@B^^BB^  ` !="&462+"&'&'.=476;+"&'&$'.=476; pppp$!$qr % }#ߺppp!E$ rqܢ# % ֻ!)?"&462"&4624&#!"3!26!.#!"#!"&547>3!2/B//B//B//B @   2^B@B^\77\aB//B//B//B/@    ~B^^B@2^5BB52.42##%&'.67#"&=463! 25KK5L4_u:B&1/&.- zB^^B4LvyKjK4L[!^k'!A3;):2*547&5462;U gIv0ZZ0L4@Ԗ@4L2RX='8P8'=XR U;Ig0,3lb??bl34LjjL4*\(88(\}I/#"/'&/'&?'&'&?'&76?'&7676767676` (5 )0 ) *) 0) 5(  (5 )0 )))) 0) 5( *) 0) 5(  )5 )0 )**) 0) 5)  )5 )0 )*5h$4&"24&#!4>54&#"+323254'>4'654&'!267+#"'&#!"&5463!2>767>32!2&4&&4N2$YGB (HGEG HQ#5K4Li!<;5KK5 A# ("/?&}vh4&&4&3M95S+C=,@QQ9@@IJ 2E=L5i>9eME;K55K J7R>@#zD<5=q%3#".'&'&'&'.#"!"3!32>$4&"2#!"#"&?&547&'#"&5463!&546323!2` #A<(H(GY$2NL4K5#aWTƾh&4&&4K5;=!ihv}&?/"( #A  5K2*! Q@.'!&=C+S59M34L=E2 JI UR@@&4&&4&5K;ELf9>igR7J K5h4&"24#"."&#"4&#"".#"!54>7#!"&54.'&'.5463246326326&4&&4IJ 2E=L43M95S+C=,@QQ9@@E;K55K J7R>@#zD9eMZ4&&4&<#5K4LN2$YGB (HGEG HV;5KK5 A# ("/?&}vhi!<4<p4.=!32>332653272673264&"2/#"'#"&5#"&54>767>5463!2@@2*! Q@.'!&=C+S59M34L.9E2 JI UR&4&&4&Lf6Aig6Jy#@>R7J K55K;E@TƾH #A<(H(GY$2NL4K#5#a=4&&4&D=ihv}&?/"( #A  5KK5;+54&#!764/&"2?64/!26 $$ & [6[[j6[&^aa@&4[[6[[6&+^aa+4/&"!"3!277$ $$ [6[ &&[6j[ ^aae6[j[6&&4[j[^aa+4''&"2?;2652?$ $$ [6[[6&&4[^aaf6j[[6[ &&[^aa+4/&"4&+"'&"2? $$ [6&&4[j[6[j^aad6[&& [6[[j^aa   $2>767676&67>?&'4&'.'.'."#&6'&6&'3.'.&'&'&&'&6'&>567>#7>7636''&'&&'.'"6&'6'..'/"&'&76.'7>767&.'"76.7"7"#76'&'.'2#22676767765'4.6326&'.'&'"'>7>&&'.54>'>7>67&'&#674&7767>&/45'.67>76'27".#6'>776'>7647>?6#76'6&'676'&67.'&'6.'.#&'.&6'&.5/a^D&"      4   $!   #          .0"Y +  !       $     "  +       Α      ^aa                        P   ' -( # * $  "  !     * !   (         $      2 ~/$4&"2 #"/&547#"32>32&4&&4V%54'j&&'/덹:,{ &4&&4&V%%l$65&b'Cr! " k[G +;%!5!!5!!5!#!"&5463!2#!"&5463!2#!"&5463!2&&&&&&&&&&&&@&&&&&&&&&&&&{#"'&5&763!2{' **)*)'/!5!#!"&5!3!26=#!5!463!5463!2!2^B@B^&@&`^B`8(@(8`B^ B^^B&&B^(88(^G 76#!"'&? #!"&5476 #"'&5463!2 '&763!2#"'c)'&@**@&('c (&*cc*&' *@&('c'(&*cc*&('c'(&@*19AS[#"&532327#!"&54>322>32"&462 &6 +&'654'32>32"&462QgRp|Kx;CByy 6Fe= BPPB =eF6 ԖV>!pRgQBC;xK|Ԗ{QNa*+%xx5eud_C(+5++5+(C_due2ԖԖ>NQ{u%+*jԖԖp!Ci4/&#"#".'32?64/&#"327.546326#"/&547'#"/&4?632632(* 8( !)(A(')* 8( !USxySSXXVzxTTUSxySSXXVzxT@(  (8 *(('( (8 SSUSx{VXXTTSSUSx{VXXT#!"5467&5432632t,Ԟ;F`j)6,>jK?s !%#!"&7#"&463!2+!'5#8EjjE8@&&&&@XYY&4&&4&qDS%q%N\jx2"&4#"'#"'&7>76326?'&'#"'.'&676326326&'&#"32>'&#"3254?''74&&4&l NnbSVZ bRSD zz DSRb)+USbn \.2Q\dJ'.2Q\dJ.Q2.'Jd\Q2.'Jd`!O` ` &4&&4r$#@B10M5TNT{L5T II T5L;l'OT4M01B@#$*3;$*3;;3*$;3*$: $/ @@Qq`@"%3<2#!"&5!"&5467>3!263! !!#!!46!#!(88(@(8(8(`((8D<++<8(`(8(`8(@(88( 8((`(8((<`(8(``(8||?%#"'&54632#"'&#"32654'&#"#"'&54632|udqܟs] = OfjL?R@T?"& > f?rRX=Edudsq = _MjiL?T@R?E& f > =XRr?b!1E)!34&'.##!"&5#3463!24&+";26#!"&5463!2 08((88(@(8  8((88((`(1  `(88((88(@  `(88(@(8(`#!"&5463!2w@www`@www/%#!"&=463!2#!"&=463!2#!"&=463!2&&&&&&&&&&&&&&&&&&&&&&&&@'7G$"&462"&462#!"&=463!2"&462#!"&=463!2#!"&=463!2ppppppp @   ppp @    @   Рpppppp  ppp    <L\l|#"'732654'>75"##5!!&54>54&#"'>3235#!"&=463!2!5346=#'73#!"&=463!2#!"&=463!2}mQjB919+i1$AjM_3</BB/.#U_:IdDRE @  k*Gj @   @   TP\BX-@8 C)5Xs J@$3T4+,:;39SG2S.7<  vcc)) %Ll}    5e2#!"&=463%&'&5476!2/&'&#"!#"/&'&=4'&?5732767654'&@02uBo  T25XzrDCBBEh:%)0%HPIP{rQ9f#-+>;I@KM-/Q"@@@#-bZ $&P{<8[;:XICC>.'5oe80#.0(  l0&%,"J&9%$<=DTIcs&/6323276727#"327676767654./&'&'737#"'&'&'&54'&54&#!"3!260% <4"VRt8<@< -#=XYhW8+0$"+dTLx-'I&JKkmuw<=V@!X@ v '|N;!/!$8:IObV;C#V  &   ( mL.A:9 !./KLwPM$@@ /?O_o%54&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!2654&#!"3!26#!"&5463!2@@@@@@@@@^BB^^B@B^NB^^B@B^^#+3 '$"/&4762%/?/?/?/?%k*66bbbb|<<<bbbbbbbb%k66Ƒbbb<<<<^bbbbbb@M$4&"2!#"4&"2&#"&5!"&5#".54634&>?>;5463!2LhLLh LhLLhL! 'ԖԖ@' !&  ?&&LhLLhL hLLhL jjjj &@6/" &&J#"'676732>54.#"7>76'&54632#"&7>54&#"&54$ ok; -j=yhwi[+PM 3ѩk=J%62>VcaaQ^ ]G"'9r~:`}Ch 0=Z٤W=#uY2BrUI1^Fk[|aL2#!67673254.#"67676'&54632#"&7>54&#"#"&5463ww+U ,iXբW<"uW1AqSH1bdww'74'!3#"&46327&#"326%35#5##33#!"&5463!20U6cc\=hlࠥYmmnnnnw@wwww&46#Ȏ;edwnnnnn@www ]#/#"$&6$3 &#"32>7!5!%##5#5353Еttu{zz{SZC` cot*tq||.EXN#?? ,<!5##673#$".4>2"&5!#2!46#!"&5463!2rM* *M~~M**M~~M*jjj&&&&`P%挐|NN||NN|*jjjj@&&&&@ "'&463!2@4@&Z4@4&@ #!"&4762&&4Z4&&4@@ "'&4762&4@4&@&4&@ "&5462@@4&&44@&&@ 3!!%!!26#!"&5463!2`m` ^BB^^B@B^  `@B^^BB^^@ "'&463!2#!"&4762@4@&&&&44@4&Z4&&4@ "'&463!2@4@&4@4&@ #!"&4762&&4Z4&&4@:#!"&5;2>76%6+".'&$'.5463!2^B@B^,9j9Gv33vG9H9+bI\ A+=66=+A [">nSMA_:B^^B1&c*/11/*{'VO3@/$$/@*?Nh^l+!+"&5462!4&#"!/!#>32]_gTRdgdQV?U I*Gg?!2IbbIJaaiwE3300 084#"$'&6?6332>4.#"#!"&54766$32z䜬m IwhQQhbF*@&('kz   _hQнQGB'(&*eoz(q!#"'&547"'#"'&54>7632&4762.547>32#".'632%k'45%&+~(  (h  &  \(  (  &  ~+54'k%5%l%%l$65+~  &  (  (\  &  h(  (~+%'!)19K4&"24&"26.676&$4&"24&"24&"2#!"'&46$ KjKKj KjKKje2.e<^P,bKjKKjKjKKj KjKKj##LlLKjKKjK jKKjK~-M7>7&54$ LhяW.{+9E=cQdFK1A  0) pJ2`[Q?l&٫C58.H(Y':d 6?32$64&$ #"'#"&'&4>7>7.546'&'&'# '32$7>54'Yj`a#",5NK ~EVZ|$2 $ |: $ 2$|ZV:(t}hfR88T h̲X(  &%(Hw(%& (XZT\MKG{x|!#"'.7#"'&7>3!2%632u  j H{(e 9 1bU#!"&546;5!32#!"&546;5!32#!"&546;5463!5#"&5463!2+!2328((88(``(88((88(``(88((88(`L4`(88(@(88(`4L`(8 (88(@(88((88(@(88((88(@(84L8(@(88((8L48OY"&546226562#"'.#"#"'.'."#"'.'.#"#"&5476$32&"5462И&4&NdN!>! 1X:Dx+  +ww+  +xD:X1 -U !*,*&4&hh&&2NN2D &  ..J< $$ 767#"&'"&547&547&547.'&54>2l4  2cKEooED ) ) Dg-;</- ?.P^P.? -/<;-gYY  .2 L4H|O--O|HeO , , Oeq1Ls26%%4.2,44,2.4%%62sL1qcqAAq4#!#"'&547632!2#"&=!"&=463!54632  @  `     ` ?`   @  @  !    54&+4&+"#"276#!"5467&5432632   `  _ v,Ԝ;G_j)``    _ ԟ7 ,>jL>54'&";;265326#!"5467&5432632    v,Ԝ;G_j) `   `7 ,>jL>X`$"&462#!"&54>72654&'547 7"2654'54622654'54&'46.' &6 &4&&4&yy %:hD:FppG9Fj 8P8 LhL 8P8 E; Dh:% >4&&4&}yyD~s[4Dd=PppP=d>hh>@jY*(88(*Y4LL4Y*(88(*YDw" A4*[s~>M4&"27 $=.54632>32#"' 65#"&4632632 65.5462&4&&4G9& <#5KK5!!5KK5#< &ܤ9Gpp&4&&4&@>buោؐ&$KjKnjjKjK$&jjb>Ppp %!5!#"&5463!!35463!2+32@\\8(@(8\@@\\@\(88(\@ 34#"&54"3#!"&5!"&5>547&5462;U gI@L4@Ԗ@4L2RX='8P8'=XR U;Ig04LjjL4*\(88(\@"4&+32!#!"&+#!"&5463!2pP@@Pjj@@\@\&0pj \\&-B+"&5.5462265462265462+"&5#"&5463!2G9L44L9G&4&&4&&4&&4&&4&L44L &=d4LL4 d=&&`&&&&`&&&&4LL4  &#3CS#!"&5463!2!&'&!"&5!463!2#!"&52#!"&=4632#!"&=463(8((88((`x c`(8@@@`((88(@(8(D 9 8(`@@@@@/?O_o-=%+"&=46;25+"&=46;2+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2+"&=46;2!!!5463!2#!"&5463!2 @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @ &&&&@  @ @  @  @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @ @  @  @  @   `&&&& /?O_o%+"&=46;25+"&=46;2+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2%+"&=46;2+"&=46;2%+"&=46;2+"&=46;2!!#!"&=!!5463!24&+"#54&+";26=3;26%#!"&5463!463!2!2 @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @  @ 8(@(8 @  @  @  @  @ &&&@8((8@&@  @ @  @  @  @ @  @ @  @ @  @ @  @ @  @ @  @  @  @  (88(  @  ``   `` -&&& (88(&@<c$4&"2!#4&"254&+54&+"#";;26=326+"&5!"&5#"&46346?>;463!2KjKKjKjKKj&ԖԖ&&@&&KjKKjK jKKjK .&jjjj&4&@@&&#'1?I54&+54&+"#";;26=326!5!#"&5463!!35463!2+32 \\8(@(8\ \\@\(88(\: #32+53##'53535'575#5#5733#5;2+3@E&&`@@` `@@`&&E%@`@ @ @      @ 0 @!3!57#"&5'7!7!K5@   @5K@@@ #3%4&+"!4&+";265!;26#!"&5463!2&&&&&&&&w@www&&@&&&&@&&@www#354&#!4&+"!"3!;265!26#!"&5463!2&&&&&@&&@&w@www@&@&&&&&&@&:@www-M3)$"'&4762 "'&4762 s 2  .   2 w 2  .   2 w 2    2  ww  2    2  ww M3)"/&47 &4?62"/&47 &4?62S .  2 w 2   .  2 w 2  M . 2    2 .  . 2    2 .M3S)$"' "/&4762"' "/&47623 2  ww  2    2  ww  2    2 w 2   .v 2 w 2   .M3s)"'&4?62 62"'&4?62 623 .  . 2    2 .  . 2    2 .   2 w 2v .   2 w 2-Ms3 "'&4762s w 2  .   2 ww  2    2 MS3"/&47 &4?62S .  2 w 2  M . 2    2 .M 3S"' "/&47623 2  ww  2   m 2 w 2   .M-3s"'&4?62 623 .  . 2    2- .   2 w 2/4&#!"3!26#!#!"&54>5!"&5463!2  @ ^B && B^^B@B^ @  MB^%Q= &&& $$ (r^aa(^aa!C#!"&54>;2+";2#!"&54>;2+";2pPPpQh@&&@j8(PppPPpQh@&&@j8(Pp@PppPhQ&&j (8pPPppPhQ&&j (8p!C+"&=46;26=4&+"&5463!2+"&=46;26=4&+"&5463!2Qh@&&@j8(PppPPpQh@&&@j8(PppPPp@hQ&&j (8pPPppP@hQ&&j (8pPPpp@@ #+3;G$#"&5462"&462"&462#"&462"&462"&462"&462#"&54632K54LKj=KjKKjKjKKjL45KKjK<^^^KjKKjppp\]]\jKL45KjKKjKujKKjK4LKjKK^^^jKKjKpppr]]\  $$ ^aaQ^aa,#"&5465654.+"'&47623   #>bqb&44&ɢ5"  #D7euU6 &4&m 1X".4>2".4>24&#""'&#";2>#".'&547&5472632>3=T==T==T==T=v)GG+v@bRRb@=&\Nj!>3lkik3hPTDDTPTDDTPTDDTPTDD|x xXK--K|Mp<# )>dA{RXtfOT# RNftWQ,%4&#!"&=4&#!"3!26#!"&5463!2!28(@(88((88((8\@\\@\\(88(@(88(@(88@\\\\ u'E4#!"3!2676%!54&#!"&=4&#!">#!"&5463!2!2325([5@(\&8((88((8,9.+C\\@\ \6Z]#+#,k(88(@(88(;5E>:5E\\\ \1. $4@"&'&676267>"&462"&462.  > $$ n%%/02 KjKKjKKjKKjKfff^aayy/PccP/jKKjKKjKKjKffff@^aa$4@&'."'.7>2"&462"&462.  > $$ n20/%7KjKKjKKjKKjKfff^aa3/PccP/y jKKjKKjKKjKffff@^aa +7#!"&463!2"&462"&462.  > $$ &&&&KjKKjKKjKKjKfff^aa4&&4&jKKjKKjKKjKffff@^aa#+3C54&+54&+"#";;26=3264&"24&"2$#"'##"3!2@@KjKKjKKjKKjKܒ,gjKKjKKjKKjKXԀ,, #/;GS_kw+"=4;27+"=4;2'+"=4;2#!"=43!2%+"=4;2'+"=4;2+"=4;2'+"=4;2+"=4;2+"=4;2+"=4;2+"=4;2+"=4;54;2!#!"&5463!2`````````````````````p`K55KK55Kp`````````````````````````5KK55KK@*V#"'.#"63232+"&5.5462#"/.#"#"'&547>32327676R?d^7ac77,9xm#@#KjK# ڗXF@Fp:f_ #WIpp&3z h[ 17q%q#::#5KKu't#!X: %#+=&>7p @ *2Fr56565'5&'. #"32325#"'+"&5.5462#"/.#"#"'&547>32327676@ͳ8 2.,#,fk*1x-!#@#KjK# ڗXF@Fp:f_ #WIpp&3z e`vo8t-  :5 [*#::#5KKu't#!X: %#+=&>7p  3$ "/&47 &4?62#!"&=463!2I.  2 w 2   -@). 2    2 . -@@-S$9%"'&4762  /.7> "/&47 &4?62i2  .   2 w E > u > .  2 w 2   2    2  ww !   h. 2    2 . ;#"'&476#"'&7'.'#"'&476' )'s "+5+@ա' )'F*4*Er4M:}}8 GO *4*~ (-/' #"'%#"&7&67%632B;>< V??V --C4 <B=cB5 !% %!b 7I))9I7 #"'.5!".67632y( #  ##@,( )8! !++"&=!"&5#"&=46;546;2!76232-SSS  SS``  K$4&"24&"24&"27"&5467.546267>5.5462 8P88P88P88P8P88P4,CS,4pp4,,4pp4,6d7AL*',4ppP88P8P88P8HP88P8`4Y&+(>EY4PppP4Y4Y4PppP4Y%*54&#"#"/.7!2<'G,')7N;2]=A+#H  0PRH6^;<T%-S#:/*@Z}   >h.%#!"&=46;#"&=463!232#!"&=463!2&&&@@&&&@&&&&&&&&&&&&f&&&&b#!"&=463!2#!"&'&63!2&&&&''%@% &&&&&&&&k%J%#/&'#!53#5!36?!#!'&54>54&#"'6763235 Ź}4NZN4;)3.i%Sin1KXL7觧*  #& *@jC?.>!&1' \%Awc8^;:+54&#"'6763235 Ź}4NZN4;)3.i%PlnEcdJ觧*  #& *-@jC?.>!&1' \%AwcBiC:D'P%! #!"&'&6763!2P &:&? &:&?5"K,)""K,)h#".#""#"&54>54&#"#"'./"'"5327654.54632326732>32YO)I-D%n  "h.=T#)#lQTv%.%P_ % %_P%.%vUPl#)#T=@/#,-91P+R[Ql#)#|'' 59%D-I)OY[R+P19-,##,-91P+R[YO)I-D%95%_P%.%v'3!2#!"&463!5&=462 =462 &546 &&&&&4&r&4&@&4&&4&G݀&&&&f s CK&=462 #"'32=462!2#!"&463!5&'"/&4762%4632e*&4&i76`al&4&&&&&}n  R   R zfOego&&5`3&&&4&&4& D R   R zv"!676"'.5463!2@@w^Cct~5  5~tcC&&@?JV|RIIR|V&&#G!!%4&+";26%4&+";26%#!"&546;546;2!546;232@@@@L44LL4^B@B^^B@B^4L  N4LL44L`B^^B``B^^B`LL4&"2%#"'%.5!#!"&54675#"#"'.7>7&5462!467%632&4&&4  @ o&&}c ;pG=(  8Ai8^^.   &4&&4&` ` fs&& jo/;J!# 2 KAE*,B^^B! ` $ -4&"2#"/&7#"/&767%676$!28P88PQr @ U @ {`PTP88P8P`  @U @rQ!6'&+!!!!2Ѥ 8̙e;<*@8 !GGGQII %764' 64/&"2 $$ f3f4:4^aaf4334f:4:^aa %64'&" 2 $$ :4f3f4F^aa4f44f^aa 764'&"27 2 $$ f:4:f4334^aaf4:4f3^aa %64/&" &"2 $$ -f44f4^aa4f3f4:w^aa@7!!/#35%!'!%j/d jg2|855dc b @! !%!!7!FG)DH:&H dS)U4&"2#"/ $'#"'&5463!2#"&=46;5.546232+>7'&763!2&4&&4f ]wq4qw] `dC&&:FԖF:&&Cd`4&&4& ]] `d[}&&"uFjjFu"&&y}[d#2#!"&546;4 +"&54&" (88(@(88( r&@&Ԗ8((88(@(8@&&jj'3"&462&    .  > $$ Ԗ>aX,fff^aaԖԖa>TX,,~ffff@^aa/+"&=46;2+"&=46;2+"&=46;28((88((88((88((88((88((8 (88((88((88((88((88((88/+"&=46;2+"&=46;2+"&=46;28((88((88((88((88((88((8 (88((88(88((88(88((885E$4&"2%&'&;26%&.$'&;276#!"&5463!2KjKKj   f  \ w@wwwjKKjK"G   ܚ  f   @www   $64'&327/a^ ! ^aaJ@%% 65/ 64'&"2 "/64&"'&476227<ij6j6u%k%~8p8}%%%k%}8p8~%<@% %% !232"'&76;!"/&76  ($>( J &% $%64/&"'&"2#!"&5463!2ff4-4ff4fw@wwwf4f-f4@www/#5#5'&76 764/&"%#!"&5463!248` # \P\w@www4`8  #@  `\P\`@www)4&#!"273276#!"&5463!2& *f4 'w@www`&')4f*@www%5 64'&"3276'7>332#!"&5463!2`'(wƒa8! ,j.( &w@www`4`*'?_`ze<  bw4/*@www-.  6 $$  (r^aaO(_^aa -"'&763!24&#!"3!26#!"&5463!2yB(( @   w@www]#@##   @ @www -#!"'&7624&#!"3!26#!"&5463!2y((@B@u @   w@www###@  @ @www -'&54764&#!"3!26#!"&5463!2@@####@w@wwwB((@@www`%#"'#"&=46;&7#"&=46;632/.#"!2#!!2#!32>?6#  !"'?_  BCbCaf\ + ~2   }0$  q 90r p r%D p u?#!"&=46;#"&=46;54632'.#"!2#!!546;2D a__ g *`-Uh1    ߫}   $^L  4b+"&=.'&?676032654.'.5467546;2'.#"ǟ B{PDg q%%Q{%P46'-N/B).ĝ 9kC< Q 7>W*_x*%K./58`7E%_ ,-3  cVO2")#,)9;J) "!* #VD,'#/&>AX>++"''&=46;267!"&=463!&+"&=463!2+32Ԫ$   pU9ӑ @/*f o  VRfq f=SE!#"&5!"&=463!5!"&=46;&76;2>76;232#!!2#![       % )   "  Jg Uh BW&WX hU g 84&#!!2#!!2#!+"&=#"&=46;5#"&=46;463!2j@jo g|@~vv u n#467!!3'##467!++"'#+"&'#"&=46;'#"&=46;&76;2!6;2!6;232+32QKt# #FNQo!"դѧ !mY Zga~bm] [o"U+, @h h@@X hh @83H\#5"'#"&+73273&#&+5275363534."#22>4.#2>ut 3NtRP*Ho2 Lo@!R(Ozh=,GID2F 8PuE>.'%&TeQ,jm{+>R{?jJrL6V @`7>wmR1q uWei/rr :Vr" $7V4&#"326#"'&76;46;232!5346=#'73#"'&'73267##"&54632BX;4>ID2F +>R{8PuE>.'%&TeQ,jm{?jJrL6 @`rr :Vr3>wmR1q uWei@ \%4&#"326#!"&5463!2+".'&'.5467>767>7>7632!2&%%&&&& &7.' :@$LBWM{#&$h1D!  .I/! Nr&&%%&&&&V?, L=8=9%pEL+%%r@W!<%*',<2(<&L,"r@ \#"&546324&#!"3!26%#!#"'.'.'&'.'.546767>;&%%&&&& &i7qN !/I.  !D1h$&#{MWBL$@: '.&&%%&&&&=XNr%(M&<(2<,'*%<!W@r%%+LEp%9=8=L  +=\d%54#"327354"%###5#5#"'&53327#"'#3632#"'&=4762#3274645"=424'.'&!  7>76#'#3%54'&#"32763##"'&5#327#!"&5463!2BBPJNC'%! B? )#!CC $)  54f"@@ B+,A  A+&+A  ZK35N # J!1331CCC $)w@www2"33FYF~(-%"o4*)$(* (&;;&&9LA3  8334S,;;,WT+<<+T;(\g7x:&&::&&<r%-@www  +=[c}#"'632#542%35!33!3##"'&5#327%54'&#"5#353276%5##"=354'&#"32767654"2 '.'&547>76 3#&'&'3#"'&=47632%#5#"'&53327''RZZ:kid YYY .06 62+YY-06 R[!.'CD''EH$VVX::Y X;:Y fyd/%jG&DC&&CD&O[52. [$C-D..D^^* ly1%=^I86i077S 3 $EWgO%33%OO%35 EEFWt;PP;pt;PP;pqJgTFQ%33&PP%33%R 7>%3!+}{'+"&72'&76;2+"'66;2U &  ( P *'eJ."-dZ-n -'74'&+";27&+";276'56#!"&5463!2~} 7e  ۩w@www"  $Q #'!# @www I-22#!&$/.'.'.'=&7>?>369II ! ' $ !01$$%A' $ ! g  \7@)(7Y   \7@)(7Y @ '5557 ,VWQV.RW=?l%l`~0  !#!#%777 5! R!!XCCfff݀# `,{{{`Og4&"2 &6 $"&462$"&62>7>7>&46.'.'. '.'&7>76 Ԗ HR6L66LGHyU2L  L2UyHHyU2L  L2UyHn X6X  XX ԖԖH6L66L6 L2UyHHyU2L  L2UyHHyU2L n6X  XX  2#!"&54634&"2$4&"2ww@ww||||||w@www||||||| !3 37! $$ n6^55^h ^aaM1^aaP *Cg'.676.7>.'$7>&'.'&'? 7%&'.'.'>767$/u5'&$I7ob?K\[zH,1+.@\7':Yi4&67&'&676'.'>7646&' '7>6'&'&7>7#!"&5463!2PR$++'TJXj7-FC',,&C ."!$28 h /" +p^&+3$ i0(w@www+.i6=Bn \C1XR:#"'jj 8Q.cAj57!? "0D$4" P[ & 2@wwwD"%.5#5>7>;!!76PYhpN!HrD0M C0N#>8\xx: W]oW-X45/%'#.5!5!#"37>#!"&5463!2p>,;$4 5eD+WcEw@wwwK()F ,VhV^9tjA0/@www@#"'&76;46;23   &  ++"&5#"&7632  ^  c  & @#!'&5476!2 &  ^  b '&=!"&=463!546  &    q&8#"'&#"#"5476323276326767q'T1[VA=QQ3qqHih"-bfGw^44O#A?66%CKJA}} !"䒐""A$@C3^q|z=KK?6 lk)  %!%!VVuuu^-m5w}n~7M[264&"264&"2"&546+"&=##"&5'#"&5!467'&766276#"&54632    *<;V<<O@-K<&4'>&4.'.'.'.'.'&6&'.'.6767645.'#.'6&'&7676"&'&627>76'&7>'&'&'&'&766'.7>7676>76&6763>6&'&232.'.6'4."7674.'&#>7626'.'&#"'.'.'&676.67>7>5'&7>.'&'&'&7>7>767&'&67636'.'&67>7>.'.67 \  U7  J#!W! '  " ';%  k )"    '   /7*   I ,6 *&"!   O6* O $.( *.'  .x,  $CN      * 6   7%&&_f& ",VL,G$3@@$+ "  V5 3"  ""#dA++ y0D- %&n 4P'A5j$9E#"c7Y 6" & 8Z(;=I50 ' !!e  R   "+0n?t(-z.'< >R$A"24B@( ~ 9B9, *$        < > ?0D9f?Ae  .(;1.D 4H&.Ct iY% *  7      J  <    W 0%$  ""I! *  D  ,4A'4J" .0f6D4pZ{+*D_wqi;W1G("% %T7F}AG!1#%  JG 3  '.2>Vb%&#'32&'!>?>'&' &>"6&#">&'>26 $$ *b6~#= XP2{&%gx| .W)oOLOsEzG< CK}E $MFD<5+ z^aa$MWM 1>]|YY^D եA<KmE6<" @9I5*^aa>^4./.543232654.#"#".#"32>#"'#"$&547&54632632':XM1h*+D($,/9p`DoC&JV;267676&#!"&=463!267 #!"'&5463!26%8#! &&Z"M>2! ^I 7LRx_@>MN""`=&&*%I},  L7_jj9/%4&#!"3!264&#!"3!26#!"&5463!2  &&&&&&&&19#"'#++"&5#"&5475##"&54763!2"&4628(3- &B..B& -3(8IggI`(8+Ue&.BB.&+8(kk`%-"&5#"&5#"&5#"&5463!2"&4628P8@B\B@B\B@8P8pPPp@`(88(`p.BB.0.BB.(88(Pppͺ!%>&'&#"'.$ $$ ^/(V=$<;$=V).X^aaJ`"(("`J^aa,I4."2>%'%"/'&5%&'&?'&767%476762%6[՛[[՛o ܴ   $ $ " $ $  ՛[[՛[[5` ^ ^ 2` `2 ^ ^ ` 1%#"$54732$%#"$&546$76327668ʴhf킐&^zs,!V[vn) 6<ׂf{z}))Ns3(@ +4&#!"3!2#!"&5463!2#!"&5463!2@&&&f&&&&@&&&&4&&4&@&&&&&&&& `BH+"/##"./#"'.?&5#"&46;'&462!76232!46 `&C6@Bb03eI;:&&&4L4&F Z4&w4) '' 5r&4&&4&&4}G#&/.#./.'&4?63%27>'./&'&7676>767>?>%6})(."2*&@P9A #sGq] #lh<* 46+(  < 5R5"*>%"/ +[>hy  K !/Ui%6&'&676&'&6'.7>%.$76$% $.5476$6?62'.76&&'&676%.76&'..676#"NDQt -okQ//jo_  %&JՂYJA-.-- 9\DtT+X?*<UW3' 26$>>W0 {"F!"E    ^f`$"_]\<`F`FDh>CwlsJ@ ;=?s  :i_^{8+?` ) O`s2RDE58/Kr #"'>7&4$&5mī"#̵$5$"^^W=acE*czk./"&4636$7.'>67.'>65.67>&/>z X^hc^O<q+f$H^XbVS!rȇr?5GD_RV@-FbV=3! G84&3Im<$/6X_D'=NUTL;2KPwtPt=  &ռ ,J~S/#NL,8JsF);??1zIEJpqDIPZXSF6\?5:NR=;.&1 +!"&=!!%!5463!2sQ9Qs***sQNQsBUw wUBFHCCTww%1#"&=!"&=463!54632.  6 $$     ` ?(r^aa    (_^aa%1#!#"'&47632!2.  6 $$   @  ` (r^aa  ?  @  (_^aa/#"'&476324&#!"3!26#!"&5463!2&@& @   w@www& @B@ &  @ @www"&462  >& $$ Ԗ*(r^aaԖԖ (^aa]6#"$54732>%#"'!"&'&7>32'!!!2f:лѪz~u: ((%`V6B^hD%i(]̳ޛ *>6߅r#! 3?^BEa߀#9#36'&632#"'&'&63232#!"&5463!2 Q,&U #+' ;il4L 92<D`w@www`9ܩ6ɽ ]`C477&@wwwD+"&5#"'&=4?5#"'&=4?546;2%6%66546;2  wwwwcB G]B Gty]ty #3C#!+"&5!"&=463!46;2!24&#!"3!26#!"&5463!2@`@`^BB^^B@B^www@w@`@`2@B^^BB^^ww@w'/?P+5#"&547.467&546;532!764'!"+32#323!&ln@ :MM: @nY*Yz--zY*55QDDU9pY-`]]`.X /2I$ t@@/!!/@@3,$,3$p$00&*0&& !P@RV2#"&/#"&/#"&546?#"&546?'&54632%'&54632763276%>S]8T;/M77T7%>ww@ww!"5bBBb// * 8(@(87)(8=%/' #?w@www#~$EE y &L(88e):8(%O r    O?GQaq47&67>&&'&67>&"$32#"#"'654  $&6 $6&$ CoL.*K  Px.* iSƓ i 7J ?~pi{_Я;lLUZ=刈刈_t'<Z :!   @! j`Q7  $ky, Rfk*4LlL=Z=刈&$&546$7%7&'5>]5%w&P?zrSF!| &0 ##!"&5#5!3!3!3!32!546;2!5463) );));;))&&&@@&&&  6 $&727"'%+"'&7&54767%&4762֬>4P t+8?::  ::A W` `EvEEvE<."e$IE&O &EI&{h.`m"&#"&'327>73271[ >+)@ (]:2,C?*%Zx/658:@#N C= E(oE=W'c:#!#"$&6$3 &#"32>7! ڝyy,{ۀہW^F!LC=y:yw߂0H\R%"N^ '&76232762$"&5462"&46274&"&'264&#"'&&#"32$54'>$ $&6$ G>>0yx14J55J5J44J5Fd$?4J55%6E#42F%$fLlLq>>11J44%&4Z%44J54R1F$Z-%45J521Z%F1#:ʎ 9LlL#Qa"'&7622762%"&5462"&546274&#"&'73264&#"'&&#"32654'>#!"&5463!2 55 **.>.-@-R.>.-@-<+*q6- -- 0OpoOxzRrqP6z~{{Prr^aa]054&"#"&5!2654632!#"&57265&'&#".'&'#"&5467%&4>7>3263232654.547'654'63277.'.*#">7?67>?>32#"'7'>3'>3235?KcgA+![,7*  2(-#=  /~[(D?G  |,)"# +)O8,+'6 y{=@0mI#938OAE` -  )y_/FwaH8j7=7?%a % %!?)L J 9=5]~pj  %(1$",I  $@((  +!.S -L__$'-9L 5V+ 6 T+6.8- $ 0 + t |S 16]&#"'&#"67>76'&'&#"67>32764.#"#.32>67>7 $&54>7>7>7rJ@ "kb2)W+ ,5/1   #   Z -!$IOXp7sLCF9vz NAG#/ 5|Հ';RKR/J#=$,9,+$UCS7'2"1  ! / ,   /--ST(::(ep4AM@=I>".)xΤlsY|qK@ %(YQ&N EHv~<Zx'#"&5467&6?2?'&"/.7.546326#"&'&/7264/7'764&"'?>>32.AUpIUxYE.A %%%h% %hJ%D,FZxULs TgxUJrVD %hJ%@/LefL.C %Jh%CV sNUxϠ@.FZyUHpVA %h&%% %Ji%CWpIUybJ/Uy^G,D %Jh%@U sMt UC %hJ%C-KfyEX[_gj&/&'.''67>7>7&'&'&'>76763>7>#&'&'767672'%'7'+"&'&546323267>7%#"'4'6767672,32,+DCCQLDf' % :/d B 4@ }  &!0$?Jfdf-.=6(:!TO? !IG_U% . k*.=; 5gN_X "  ##  292Q41   *6nA;| BS N.  %1$ 6 $nk^ '7GWgw2+"&5463#!"&5463!254&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";26#"&=! B^^BB^^B:FjB^8((`( `(8^BB^^B@B^"vEj^B(8(`(8(/?O_o/?2#!"&5463;26=4&+";26=4&+";26=4&+";26=4&+"54&+";2654&+";2654&+";2654&+";2654&+";2654&#!"3!2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";2654&+";26@&&&&@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@&&&&@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@`' "&5#"&5&4762!762$"&462B\B@B\BOpP.BB..BB.8$PO広3CQ#".54>32#".546322#"&#"#"54>%".54>32%2#"&54> &X=L|<&X=M{2r_-$$-_rUU%&&5%ő'- "'.546762@FF$@B@$.&,&.]]|q#<<#(BB B%'-%'-'%'-"'%&'"'%.5467%467%62@ll@ll,@GG&!@@@@@@!&+#+#6#+$*`:p:px p=`$>>$&@&@ @&p@ &.A!!"!&2673!"5432!%!254#!5!2654#!%!2#!8Zp?vdΊens6(N[RWu?rt1SrF|iZ@7މoy2IMC~[R yK{T:%,AGK2#!"&5463!!2654'654.#532#532"&5!654&#"327#2#>!!ww@ww~uk'JTMwa| DH> I1q Fj?w@wwwsq*4p9O*¸Z^qh LE "(nz8B M'?"&4624&#"'.'324&#"3267##"&/632632.ʏhhMALR vGhг~~K „yO^   ʏʏВ*LM@!שwwȍde)qrOPqȦs:03=7'.?67'67%'>&%'7%7./6D\$>  "N,?a0#O 1G9'/P(1#00  ($=!F "9|]"RE<6 'o9%8J$\ :\HiTe<?}V#oj? d,6%N#" HlSVY]C =@C4&"2!.#!"4&"2+"&=!"&=#"&546;>3!232^^^Y ^^^`pppp`]ibbi]~^^^e^^^PppPPppP]^^]3;EM2+"&=!"&=#"&546;>;5463!232264&"!.#!"264&" ]`pppp`]ibbi^^^dY !^^^]@PppP@@PppP@]^^] ^^^e^^^ 3$#!#!"&5467!"&47#"&47#"&4762++&2 $$ 2&&&4&&Z4&&##&&4&4&44&m4&m+DP4'&#"32763232674'&!"32763 3264'&$#"32763232> $$ g* o`#ə0#z#l(~̠) -g+^aaF s" +g (* 3#!| #/IK/%*%D= )[^aa !!!'!!77!,/,-a/G t%/;<HTbcq%7.#"32%74'&"32765"/7627#"5'7432#"/7632#"5'7432#"&5'74632 #"/6327#"/6327#"/46329"&/462"&/>21"&/567632#!.547632632  *     X    ^  `    ^  b  c   fu U`59u  4J   l~ ~ F 2    m | O,           ru| u  " )9 $7 $&= $7 $&= $7 $&=  $&=46w`ww`ww`wb`VTEvEEvETVTEvEEvET*VTEvEEvET*EvEEvEEvEEv#^ct#!"&5463!2!&'&!"&5!632#"&'#"/&'&7>766767.76;267674767&5&5&'67.'&'&#3274(8((88((`x c`(8!3;:A0?ݫY   ^U 47D$    74U3I  |L38wtL0`((88(@(8(D 9 8(Q1&(!;  (g- Up~R2(/{E(Xz*Z%(i6CmVo8 #T#!"&5463!2!&'&!"&5!3367653335!3#4.5.'##'&'35(8((88((`x c`(8iFFZcrcZ`((88(@(8(D 9 8(kk" kkJ  ! k#S#!"&5463!2!&'&!"&5!%!5#7>;#!5#35!3#&'&/35!3(8((88((`x c`(8-Kg kL#DCJg  jLD`((88(@(8(D 9 8(jj jjkk kk#8C#!"&5463!2!&'&!"&5!%!5#5327>54&'&#!3#32(8((88((`x c`(8 G]L*COJ?0R\wx48>`((88(@(8(D 9 8(jjRQxk !RY#*2#!"&5463!2!&'&!"&5!!57"&462(8((88((`x c`(8Pppp`((88(@(8(D 9 8(ppp  #*7JR5#5#5#5##!"&5463!2!&'&!"&5##5!"&54765332264&"<(8((88((`x c`(8kޑcO"jKKjK`((88(@(8(D 9 8(SmmS?M&4&&4#9L^#!"&5463!2!&'&!"&5!#"/#"&=46;76276'.'2764'.(8((88((`x c`(8 6ddWW6&44`((88(@(8(D 9 8(. G5{{5]]$5995#3C#!"&5463!2!&'&!"&5!2#!"&5463#"'5632(8((88((`x c`(84LL44LL4l  `((88(@(8(D 9 8(L44LL44L  Z #7K[#!"&5463!2!&'&!"&5!>&'&7!/.?'&6?6.7>'(8((88((`x c`(8` 3  3  3  3 v  ?  `((88(@(8(D 9 8( & & - & &  ?   '6#'. '!67&54632".'654&#"32eaAɢ/PRAids`WXyzOvд:C;A:25@Ң>-05rn`H( ' gQWZc[ -%7' %'-'% %"'&54762[3[MN 3",""3,3"ong$߆]gn$+) ")")" x#W#"&#!+.5467&546326$32327.'#"&5463232654&#"632#".#"oGn\ u_MK'̨|g? CM7MM5,QAAIQqAy{b]BL4PJ9+OABIRo?z.z n6'+s:zcIAC65D*DRRD*wyal@B39E*DRRD*'/7  $&6$ 6277&47' 7'"' 6& 6'lLRRZB|RR>dZZLlLZRR«Z&>«|R ! $&54$7 >54'5PffP牉@s-ff`-c6721>?>././76&/7>?>?>./&31#"$&(@8!IH2hM>'  )-* h'N'!'Og,R"/!YQG54'63&547#5#"=3235#47##6323#324&"26%#!"&5463!2F]kbf$JMM$&N92Z2&`9UW=N9:PO;:dhe\=R +)&')-S99kJ<)UmQ/-Ya^"![Y'(<`X;_L6#)|tWW:;X  #'#3#!"&5463!2) p*xeשw@www0,\8@www9I#"'#"&'&>767&5462#"'.7>32>4."&'&54>32JrO<3>5-&FD(=Gq@C$39aLL²L4 &) @]v q#CO!~󿵂72765'./"#"&'&5 }1R<2" 7MW'$  ;IS7@5sQ@@)R#DvTA ; 0x I)!:> +)C 6.> !-I[4&#"324&#"3264&#"324&#"326&#"#".'7$4$32'#"$&6$32D2)+BB+)3(--(31)+BB+)4'--'4'#!0>R HMŰ9ou7ǖD䣣 R23('3_,--,R23('3_,--,NJ ?uWm%#"'%#"'.5 %&'&7632! ; `u%"(!]#c)(  #"'%#"'.5%&'&76 !  (%##fP_"(!)'+ʼn4I#"$'&6?6332>4.#"#!"&54766$32#!"&=46;46;2z䜬m IwhQQhbF*@&('k@z   _hQнQGB'(&*eozΘ@@`  >. $$ ffff^aafff^aa>"&#"#"&54>7654'&#!"#"&#"#"&54>765'46.'."&54632326323!27654'.5463232632,-,,",:! %]& %@2(/.+*)6! <.$..**"+8#  #Q3,,++#-:#"$$ /:yuxv)%$ /?CG%!5%2#!"&5463!5#5!52#!"&54632#!"&5463#5!5`&&&& &&&&&&&&@&&&&&&&&&&&&%2 &547%#"&632%&546 #"'6\~~\h ~\h\ V V VV%5$4&#"'64'73264&"&#"3272#!"&5463!2}XT==TX}}~>SX}}XS>~}w@www~:xx:~}}Xx9}}9xX}@www/>LXds.327>76 $&6$32762#"/&4762"/&47626+"&46;2'"&=462#"'&4?62E0l,  *"T.D@Yooo@5D [  Z  Z  [ ``[ Z  2 ,l0 (T" .D5@oooY@D, Z  [  [  Z ``EZ  [ 5%!  $&66='&'%77'727'%amlLmf?55>fFtuutFLlLHYC L||L Y˄(E''E*( /?IYiy%+"&=46;2+"&=46;2+"&=46;2+"&=46;2%"&=!#+"&=46;2+"&=46;2+"&=46;2+"&=46;2!54!54>$ +"&=46;2#!"&=@&&@3P > P3&&rrr&&rrr he 4LKM:%%:MKL4WT&&%/9##!"&563!!#!"&5"&5!2!5463!2!5463!2&&&&&&  &&&i@&&@&7'#5&?6262%%o;j|/&jJ%p&j;&i&p/|jţ%Jk%o%  :g"&5462#"&546324&#!"263662>7'&75.''&'&&'&6463!276i~ZYYZ~@OS;+[G[3YUD#o?D&G3I=JyTkBuhNV!WOhuAiSy*'^CC^'*SwwSTvvTSwwSTvvWID\_"[ gq# /3qFr2/ $rg%4 HffHJ4d#!#7!!7!#5!VFNrmNNN N!Y+?Ne%&'&'&7>727>'#&'&'&>2'&'&676'&76$7&'&767>76 '6# <;11x# *# G,T93%/#0vNZ;:8)M:( &C.J}2 %0  ^*  JF &7'X"2LDM" +6 M2+'BQfXV#+] #' L/(eB9  #,8!!!5!!5!5!5!5#26%!!26#!"&5!5&4& &pPPp@@&&@!&@PppP@*  9Q$"&54627"."#"&547>2"'.#"#"&5476$ "'&$ #"&5476$ (}R}hLK NN Ud: xx 8    ,, |2222 MXXM ic,>>,   ̺  '/7?KSck{4&"2$4&"24&"24&"24&"24&"24&"24&"24&"264&"24&#!"3!264&"2#!"&5463!2KjKKjKjKKjKjKKjKKjKKjKjKKjKjKKjKKjKKjKjKKjKLhLLhLKjKKj&&&&KjKKjL44LL44L5jKKjKKjKKjKjKKjKjKKjKjKKjKjKKjKjKKjKjKKjK4LL44LLjKKjK&&&&jKKjK4LL44LL 'E!#"+"&7>76;7676767>'#'"#!"&7>3!2W",&7' #$ &gpf5 O.PqZZdS -V"0kqzTxD!!8p8%'i_F?;kR(` !&)' (2!&6367! &63!2! `B 1LO(+#=)heCQg#s`f4#6q'X|0 -g >IY#6?>7&#!%'.'33#&#"#"/3674'.54636%#"3733#!"&5463!24  : @7vH%hEP{0&<'VFJo1,1.F6A#L44LL44L"% 7x'6 O\JYFw~v^fH$ ! "xdjD"!6`J4LL44LL +3@GXcgqz -<JX{&#"327&76'32>54.#"35#3;5#'#3537+5;3'23764/"+353$4632#"$2#462#"6462""'"&5&5474761256321##%354&'"&#"5#35432354323=#&#"32?4/&54327&#"#"'326'#"=35#5##3327"327'#"'354&3"5#354327&327''"&46327&#"3=#&#"32?"5#354327&3=#&"32?"#3274?67654'&'4/"&#!"&5463!2_gQQh^_~\[[\]_^hQQge<F$$$ !!&&/ !/  !! 00/e&'!"e$   '!!''   8''NgL44LL44LUQghQUk=("  ! =))=2( '! 'L#(>( & DC(>(zL#DzG)<)4LL44LL  BWbjq}+532%+5324&+32763#4&'.546327&#"#"'3265#"&546325&#"32 !264&"2%#'#735#535#535#3'654&+353#!"&5463!29$<=$@?SdO__J-<AA@)7")9,<$.%0*,G3@%)1??.+&((JgfJ*A!&jjjGZYGиwsswPiL>8aA !M77MM77M3! 4erJ]&3YM(, ,%7(#)  ,(@=)M%A20C&Mee(X0&ĖjjjV 8Z8J9N/4$ 8NN88NN  #&:O[ $?b3'7'#3#%54+32%4+324+323'%#5#'#'##337"&##'!!732%#3#3##!"&53733537!572!56373353#'#'#"5#&#!'#'#463!2#"5#"5!&+&+'!!7353273532!2732%#54&+#32#46.+#2#3#3##+53254&".546;#"67+53254&.546;#"#'#'##"54;"&;7335wY-AJF=c(TS)!*RQ+*RQ+Y,B^9^Ft`njUM ') ~PSPRm٘M77Mo7q @)U 8"E(1++NM77Mx378D62W74;9<-A"EA0:A F@1:ؗBf~~""12"4(w$#11#@}}!%+%5(v$:O\zK?* $\amcrVlOO176Nn23266&+"&#"3267;24&+"'&+";27%4&+";2?>23266&+"&#"3267;254+";27#76;2#!"&5463!23%#2%%,,  _3$$2%%M>AL Vb5)LDHeE:< EM j,K'-R M ~M>AR  Vb5)LEHeE:< E J ABI*'! ($rL44LL44Lv%1 %3!x*k $2 %3!;5h n a !(lI;F   rp p8;5h t a !(lI;F ` #k 4LL44LL  2HW[lt#"'5632#6324&'.54327&#"#"&'32767#533275#"=5&#"'#36323#4'&#"'#7532764&"24'&#"327'#"'&'36#!"&5463!2=!9n23BD$ &:BCRM.0AC'0RH`Q03'`.>,&I / * / 8/n-(G@5$ S3=,.B..B02^`o?7je;9G+L44LL44LyE%# Vb;A !p &'F:Aq)%)#orgT$ v2 8)2z948/{ 8AB..B/q?@r<7(g/4LL44LL ?#!"&'24#"&54"&/&6?&5>547&54626=L4@ԕ;U g3 T 2RX='8P8|5 4Ljj U;Ig@   `  "*\(88(]k  &N4#"&54"3 .#"#!"&'7!&7&/&6?&5>547&54626;U gIm*]Z0L4@ԕ=o=CT T 2RX='8P8|5  U;IgXu?bl3@4Ljja`   `  "*\(88(]k/7[%4&+";26%4&+";26%4&+";26!'&'!+#!"&5#"&=463!7>3!2!2@@@@@@0 o`^BB^`5FN(@(NF5@@@u  @LSyuS@%44%,<H#"5432+"=4&#"326=46;2  >. $$ ~Isy9"SgR8vHD w ffff^aam2N+ )H-mF+10*F +fff^aab4&#"32>"#"'&'#"&54632?>;23>5!"3276#"$&6$3 k^?zb=ka`U4J{K_/4^W&  vx :XB0܂ff ) fzzXlz=lapzob35!2BX G@8  ' '=vN$\ff  1 SZz8zX#("/+'547'&4?6276 'D^h  i%5@%[i  h]@]h  i%@5%[i  h^@@)2#"&5476#".5327>OFi-ay~\~;'S{s:D8>)AJfh]F?X{[TC6LlG]v2'"%B];$-o%!2>7>3232>7>322>7>32".'.#"#"&'.#"#"&'.#"#546;!!!!!32#"&54>52#"&54>52#"&54>52-P&+#($P.-P$'#+&PZP&+#"+&P-($P-.P$(#+$P.-P$'#+&P-.P$+#pP@@PpH85K"&ZH85K"&ZH85K"&Z@Pp@@@pMSK5, :&LMSK5, :&LMSK5, :& !!3 ! @@@  #"$$3!!2"jaѻxlalxaaj!!3/"/'62'&63!2'y  `I  yMy `I y'W`#".'.#"32767!"&54>3232654.'&546#&'5&#" 4$%Eӕ;iNL291 ;XxR`f՝Q8TWiWgW:;*:`Qs&?RWXJ8 oNU0 J1F@#) [%6_POQiX(o`_?5"$iʗ\&>bds6aP*< -;iFn* -c1BWg4'.'4.54632#7&'.#"#"'.#"32767'#"&54632326#!"&5463!2#$( 1$6]' !E3P|ad(2S;aF9'EOSej]m] <*rYshpt.#)$78L*khw@wwwB % $/$G6 sP`X):F/fwH1pdlqnmPHuikw_:[9D'@www34."2>$4.#!!2>#!".>3!2QнQQнQQh~wwhfffнQQнQQнQZZQffff#>3!2#!".2>4."fffнQQнQQffffQнQQн ,\!"&?&#"326'3&'!&#"#"'  5467'+#"327#"&463!!'#"&463!2632(#AHs9q ci<= #]$ KjKKjKKjKKjH#j#H&&&KjKKjKg V i jKKjKKjKKjK ..n(([5KK55KK5[poNv<+#"'#"&546;&546$32322$B$22$$*$22$Xڭӯ$22$tX'hs2$ϧkc$22$1c$2F33F3VVT2#$2ԱVT2#$2g#2UU݃ 2$#2UU1݃2 ,u54#"67.632&#"32654'.#"32764.'&$#"7232&'##"&54732654&#"467&5463254632>32#"'&ru&9%" *#͟ O%GR=O&^opC8pP*bY _#$N Pb@6)?+0L15 "4$.Es  5IQ"!@ h "Y7e|J>ziPeneHbIlF>^]@n*9 6[_3#"&54632#.#"32%3#"&54632#.#"326%4&'.'&! ! 7>7>! =39? 6'_ >29? 5'17m-VU--,bW.뮠@Fyu0HC$뮠@Fyu0HC$L= ?? <=! A <`;+"&54&#!+"&5463!2#!"&546;2!26546;2pЇ0pp@Ipp>Sc+"&=46;254&+"&+";2=46;2;2=46;2;2%54&#!";2=;26#!"&5463!2A5DD5A7^6a7MB55B7?5B~```0`rr5A44A5v5AA5f*A``0` !!!! #!"&5463!2ړ7H7jv@vvv':@vvvMUahmrx#"'!"'!#"&547.547.54674&547&54632!62!632!#!627'!%!"67'#77!63!!7357/7'%# %'3/&=&' 5#?&547 6!p4q"""6" 'h*[ |*,@?wAUMpV@˝)Ϳw7({*U%K6=0(M "! O dX$k !! ! b [TDOi @6bxBAݽ5  ɝ:J +3,p x1Fi (R 463!#!"&5%'4&#!"3`а@..@A-XfB$.BB..C} )&54$32&'%&&'67"w`Rd]G{o]>p6sc(@wgmJPAjyYWa͊AZq{HZ:<dv\gx>2ATKn+;"'&#"&#"+6!263 2&#"&#">3267&#">326e~└Ȁ|隚Ν|ū|iyZʬ7Ӕްr|uѥx9[[9jj9ANN+,#ll"BS32fk[/?\%4&+";26%4&+";26%4&+";26%4&+";26%#!"&5467&546326$32]]eeeeee$~i qfN-*#Sjt2"'qCB8!'> !%)-159=AEIMQUY]agkosw{! %! 5!#5#5#5#5#57777????#5!#5!#5!#5!#5!#5!#5!#5#537#5!#5!#5!#5!#5!#55#535353535353%"&546326#"'#32>54.&54>3237.#"Q%%%%%%%%%?iiihOiixiiyiixiiArssrrssr%sssrrssNs%%%%%%%%%%'32#".543232654&#"#"&54654&#"#"&547>326ڞUzrhgrxSПdU 7#"&463!2!2&&4&&&&4&KjKKjKjKKj &&&%&& &&4&&&&4&&&5jKKjKKjKKjK%z 0&4&&3D7&4& %&'S4&"4&"'&"27"&462"&462!2#!"&54>7#"&463!2!2&4&4&4&4KjKKjKjKKj &&&%&& &&4&%&&ے&4"jKKjKKjKKjK%z 0&4&&3D7&4& %& & !'! !%!!!!%"'.763!2o]FooZY@:@!!gf//I62'"/"/"/"/"/"/"/7762762762762762762%"/77627&6?35!5!!3762762'"/"/"/"/"/"/%5#5!4ZSS6SS4SS4SS4SS4SS4SS4ZSS4SS4SS4SS4SS4SS4S-4ZSS4S@4SS4ZSS6SS4SS4SS4SS4SS4S@ZSSSSSSSSSSSSSSZSSSSSSSSSSSSSyZRRR@%:= :+: =RRZSSSSSSSSSSSSSCv!/&'&#""'&#" 32>;232>7>76#!"&54>7'3&547&547>763226323@``` VFaaFV      $. .$     yy .Q5ZE$ ,l*%>>%*>*98(QO!L\p'.'&67'#!##"327&+"&46;2!3'#"&7>;276;2+6267!"'&7&#"(6&#"#"' Dg OOG`n%ELL{@&&Nc,sU&&!Fre&&ss#/,<= #]gL oGkP'r-n&4&2-ir&&?o  4 _5OW! .54>762>7.'.7>+#!"&5#"&5463!2"&462{{BtxG,:`9(0bԿb0(9`:,GxtB&@&&@&K55K`?e==e?1O6# ,  #$  , #6OO&&&&5KK?!"'&'!2673267!'. ."!&54632>321 4q#F""8'go#- #,"tYg>oP$$Po> Zep#)R0+I@$$@I++332++"&=#"&=46;.7>76$  @ ᅪ*r@@r'/2+"&5".4>32!"&=463  &@~[՛[[u˜~gr&`u՛[[՛[~~@r=E32++"&=#"&=46;5&547&'&6;22676;2  >``@``ٱ?E,,=?rH@``@GݧH`jjrBJ463!2+"&=32++"&=#"&=46;5.7676%#"&5   &@~``@``  vXr&@``@+BF`rks463!2+"&=32++"&=#"&=46;5&547'/.?'+"&5463!2+7>6 %#"&5   &@~``@``~4e  0  io@& jV  0  Z9r&@``@Gɞ5o , sp &@k^ , c8~~`r8>KR_32++"&=!+"&=#"&=46;.767666'27&547&#"&'2#" @@ 'Ϋ'sggsww@sgg@@-ssʃl99OOr99FP^l463!2+"&=$'.7>76%#"&=463!2+"&=%#"&54'>%&547.#"254&' &@L?CuГP vY &@;"ޥ5݇ޥ5`&_ڿgwBF@&J_ s&&?%x%xJP\h463!2+"&='32++"&=#"&=46;5.7676632%#"&56'327&7&#"2#" &@L? ߺu``@``} ຒɞueeu9uee&_"|N@``@""|a~lo99r9@9;C2+"&5"/".4>327'&4?627!"&=463  &@Ռ .  N~[՛[[u˜N .  gr&`֌  . Ou՛[[՛[~N  . @r9A'.'&675#"&=46;5"/&4?62"/32+  '֪ \  . 4 .  \r|ݧ憛@\ .    . \@r~9A"/&4?!+"&=##"$7>763546;2!'&4?62  m  - @ݧ憛@& -  @rm4 -  ٮ*   - r+"&5&54>2  @[՛[rdGu՛[[r  ".4>2r[՛[[՛r5՛[[՛[[$2#!37#546375&#"#3!"&5463#22#y/Dz?s!#22#2##2S88 2#V#2L4>32#"&''&5467&5463232>54&#"#"'.Kg&RvgD $ *2% +Z hP=DXZ@7^?1 ۰3O+lh4`M@8'+c+RI2 \ZAhSQ>B>?S2Vhui/,R0+ ZRkmz+>Q2#"'.'&756763232322>4."7 #"'&546n/9bLHG2E"D8_ pdddxO"2xxê_lx2X  !+'5>-pkW[C I I@50Oddd˥Mhfxx^ә #'+/7!5!!5!4&"2!5!4&"24&"2!!! 8P88P 8P88P88P88PP88P8 P88P88P88P8 +N &6 !2#!+"&5!"&=463!46;23!#!"&54>32267632#"_>@`     `  L4Dgy 6Fe=OOU4L>   ` `  4L2y5eud_C(====`L43V &6 #"/#"/&54?'&54?6327632#!"&54>32 7632_>     %%Sy 6Fe=J%>     %65%Sy5eud_C(zz.!6%$!2!!!46;24&"2!54&#!"&&&@ԖV@&&@&&ԖԖ@&3!!! !5!'!53!! #7IeeI7CzCl@@@#2#!"&?.54$3264&"!@մppp((ppp#+/2#!"&?.54$3264&"!264&"!@մ^^^@^^^@((^^^^^^v(#"'%.54632 "'% 632U/@k0G,zD# [k# /tg F Gz  #'#3!) p*xe0,\8T #/DM%2<GQ^lw &'&676676&'&7654&'&&546763"#"'3264&7.>&'%'.767&7667&766747665"'.'&767>3>7&'&'47.'.7676767&76767.'$73>?>67673>#6766666&'&6767.'"'276&67&54&&671&'6757>7&"2654&57>&>&'5#%67>76$7&74>=.''&'&'#'#''&'&'&'65.'&6767.'#%&''&'#2%676765&'&'&7&5&'6.7>&5R4&5S9 W"-J0(/r V"-J0(.)#"6&4pOPppc|o}vQ[60XQW1V  # 5X N"& . ) D>q J:102(z/=f*4!> S5b!%  (!$p8~5..:5I  ~T 4~9p# ! ) & ?()5F 1   d%{v*: @e s|D1d {:*dAA|oYk'&<tuut&v HCXXTR;w 71™ Z*&' 1  9? . $Gv 5k65P.$.`aasa``Z9k'9؋ӗa-*Gl|Me_]`F& OܽsDD!/+``aa``a154&'"&#!!26#!"&5463!2    iLCly5)*Hcelzzlec0hb,,beIVB9@RB9J_L44LL44L44%2"4:I;p!q4bb3p (P`t`P(6EC.7BI64LL44LL  .>$4&'6#".54$ 4.#!"3!2>#!"&5463!2Zjbjj[wٝ]>oӰٯ*-oXL44LL44L')꽽)J)]wL`ֺ۪e4LL44LL;4&#!"3!26#!"&5463!2#54&#!";#"&5463!2  @ ^BB^^B@B^  B^^B@B^`@  MB^^B@B^^>  ^B@B^^5=Um ! !!2#!"&=463!.'!"&=463!>2!2#264&"".54>762".54>762?(``(?b|b?B//B/]]FrdhLhdrF]]FrdhLhdrF@@@(?@@ ?(@9GG9@/B//BaItB!!BtI Ѷ!!ь ItB!!BtI Ѷ!!ь-M32#!"&=46;7&#"&=463!2#>5!!4.'.46ՠ`@`ՠ`MsFFsMMsFFsMojjo@@jj@@<!(!!(!-3?32#!"&=46;7&#"&=463!2+!!64.'#ՠ`@`ՠ`  DqLLqDojjo@@jj@@B>=C-3;32#!"&=46;7&#"&=463!2+!!6.'#ՠ`@`ՠ`UVU96gg6ojjo@@jj@@β**ɍ-G32#!"&=46;7&#"&=463!2#>5!!&'.46ՠ`@`ՠ`MsFFsMkkojjo@@jj@@<!(!33!(!9I2#!"&=4637>7.'!2#!"&=463@b":1P4Y,++,Y4P1:"":1P4Y,++,Y4P1:"b@@@7hVX@K-AA-K@XVh77hVX@K-AA-K@XVh7Aj"#54&#"'54&#"3!26=476=4&#"#54&'&#"#54&'&'2632632#!"&5&=4632>3265K @0.B @0.B#6'&& l @0.B 2' .B A2TA9B;h" d mpPTlLc _4.HK5]0CB.S0CB./#'?&&)$$)0CB. }(AB.z3M2"61d39L/PpuT(Ifc_E`1X"#4&"'&#"3!267654&"#4&"#4&26326#!"&'&5463246326\B B\B&@5K&@"6LB\B B\B sciL}QP%&#"!"3!754?27%>54&#!26=31?>Ijjq,J[j.-tjlV\$B.R1?@B.+?2`$v5K-%5KK5.olRIS+6K5̈$B\B 94E.&ʀ15uE& ԖPjjdXUGJ7!.B P2.B %2@ 7K5(B@KjKj?+fU E,5K~!1.>F.F,Q5*H$b2#!"&=%!"&=463!7!"&'&=4634'&#!">3!!"3!32#!"3!23!26=n$32>32>32#"#.#"#.#"3!27654&#"547654&#"#654&Mye t|]WSSgSY\x{ 70"1i92DU1&=  =&0@c >&/Btd4!*"8K4+"@H@/'= t?_K93-] UlgQQgsW ]#+ i>p&30&VZ&0B/ %3B. "to ){+C4I (  /D0&p0D3[_cg"'&#"3!2676=4&"#54&#"#54&#"#4&'2632632632#!"&'&5463246#!#!#5K)B4J&@#\8P8 @0.B J65K J6k cJ/4qG^\hB2.1!~K5y?^\Vljt-.j[J,qjjI7$?1R.B+.B$`2?gvEo.5KK5%-K6+SIR[&.E49 B\B$5KG#!+"&5!"&=463!2+"&' +"' +"'&5>;2>76;2Y    M .x - N     u  , u ?  LW   #  *:J4'&+326+"'#+"&5463!2  $6& $&6$ UbUI-uu,uuڎLlLAX!Jmf\$ 6uuu,KLlL-[k{276/&'&#"&5463276?6'.#"!276/&'&#"&5463276?6'.#"  $6&  $&6]h - %Lb`J%E 5 ,5R- h - %Lb`J%E 5 ,5R-'uu,uulL/hR    dMLc  NhR   dMLc  N1uuu,LlL@  ' 7 '7 ``H ``H !``H ```H` '%  7' 7'7 ' $&6$ X`(W:,:X`(WLLlLX`(W:BX`(XLlL $ %/9ES[#"&54632$"&4624&"26$4&#"2%#"&462$#"&4632#"32&! 24>  !#"&'.'#"$547.'!6$327&'77'&77N77N'qqqqqPOrqEsttsst}||}uԙ[WQ~,> nP/R U P酛n >,m'77'&77N77N6^Orqqqqqqt棣棣(~|| on[usј^~33pc8{y%cq33dqpf L 54 "2654"'&'"/&477&'.67>326?>< x ,  (-'sI  VCV  Hr'-(  $0@!BHp9[%&!@0$u  ]\\]-$)!IHV D V HI!)$-#36>N"&462."&/.2?2?64/67>&  #!"&5463!2]]]3 $; &|v;$ (CS31 =rM= 4TC(G zw@www]]]($-;,540= sL =45,; @www(2#"$&546327654&#" &#"AZ\@/#%E1/##.1E$![A懇@@\!#21E!6!E13"|! gL&5&'.#4&5!67&'&'5676&'6452>3.'5A5RV[t,G'Q4}-&r! G;>!g12sV&2:#;d=*'5E2/..FD֕71$1>2F!&12,@K r#"&5462>%.#"'&#"#"'>54#".'7654&&5473254&/>7326/632327?&$  $6 $&6$ !&"2&^ u_x^h ;J݃HJǭ qE Dm! M G?̯' %o8 9U(F(ߎLlL&!&!SEm|[n{[<ɪ "p C Di% (K HCέ  pC B m8 @Kނ  HF(LlL "*6%&6$ 7&$5%%6'$2"&4}x3nQH:dΏX e8z' li=! 7So?vM '&7>>7'7>''>76.'6'El:Fg r *t6K3U Z83P)3^I%=9 )<}Jk+C-Wd &U-TE+]Qr-< Q#0 C+M8 3':$ _Q =+If5[ˮ&&SGZoMkܬc#7&#"327#"'&$&546$;#"'654'632ե›fKYYKf¥yͩ䆎L1hvvƚwwkn]*]nlxDLw~?T8bb9SA}+5?F!3267!#"'#"4767%!2$324&#"6327.'!.#"۔c28Ψ-\?@hU0KeFjTlyE3aVsz.b؏W80]TSts<hO_u7bBtSbF/o|V]SHކJ34&#!"3!26#!!2#!"&=463!5!"&5463!2  @ ^B `` B^^B@B^   @ @B^@@^BB^^>3!"&546)2+6'.'.67>76%&F8$.39_0DD40DD0+*M7{L *="# U<-M93#D@U8vk_Y [hD00DD00Dce-JF1 BDN&)@ /1 dy%F#"'&'&'&'&763276?6#"/#"/&54?'&763276"&'&'&5#&763567632#"'&7632654'&#"32>54'&#"'.5463!2#!3>7632#"'&'&#"'&767632yqoq>* 432fba  $B? >B BB AA.-QPPR+ 42 %<ciђ:6& hHGhkG@n`IȌ5 !m(|.mzyPQ-.  je  q>@@?ppgVZE|fb6887a %RB? =B ABBAJvniQP\\PRh!cDS`gΒ 23geFGPHXcCI_ƍ5" n*T.\PQip [*81 / 9@:>t%6#".'.>%6%&7>'.#*.'&676./&'.54>754'&#"%4>327676= >vwd" l "3 /!,+ j2.|%& (N &wh>8X}xc2"W<4<,Z~fdaA`FBIT;hmA<7QC1>[u])  u1V(k1S) - 0 B2* %M ;W(0S[T]I) A 5%R7&&T,Xq&&1X,LΒw%%;#!"&5463!546;2!2!+"&52#!"/&4?63!5! (&&@&&(&&@&&( (  &&@&&@&&&&  #''%#"'&54676%6%% hh @` !   !    #52#"&5476!2#"&5476!2#"'&546        @  @  @    84&"2$4&"2$4&"2#"'&'&7>7.54$ KjKKjKjKKjKjKKjdne4" %!KjKKjKKjKKjKKjKKjK.٫8  !%00C'Z'.W"&462"&462"&462 6?32$6&#"'#"&'5&6&>7>7&54>$ KjKKjKjKKjKjKKjhяW.{+9E=cQdFK1A  0) LlLjKKjKKjKKjKKjKKjKpJ2`[Q?l&٫C58.H(Yee    Y'w(O'R@$#"&#"'>7676327676#" b,XHUmM.U_t,7A3ge z9@xSaQBLb( VU  !!!==w)AU!!77'7'#'#274.#"#32!5'.>537#"76=4>5'.465! KkkK _5 5 #BH1`L I& v6S F!Sr99rS!`` /7K%s}H XV P V  e  Vd/9Q[ $547.546326%>>32"&5%632264&#"64'&""&'&"2>&2654&#";2 P 3>tSU<)tqH+>XX|Wh,:UStW|XX>=X*  ))  +^X^|WX=>X:_.2//a:Ru?  Q%-W|XW>J( =u>XX|WX`  *((*  +2 2X>=XW|E03>$32!>7 '&'&7!6./EUnohiI\0<{ >ORDƚ~˕VƻoR C37J6I`Tb<^M~M8O  5!#!"&!5!!52!5463 ^B@B^`B^^B `B^^"^BB^0;%'#".54>327&$#"32$ !"$&6$3 ##320JUnLnʡ~~&q@tKL}'` - -oxnǑUyl}~~FڎLlLt`(88(   7!' !\W\ d;tZ`_O; }54+";2%54+";2!4&"!4;234;2354;2354>3&546263232632#"&#"26354;2354;2354;2````pp```  !,! -&M<FI(2 ```@PppPpppppp# #   ppppp j#"'&=!;5463!2#!"&=#".'.#!#"&463232>7>;>32#"&'#"!546 %. `@` :,.',-XjjXh-,'.,: kb>PppP>bk .%Z & :k%$> $``6&L')59I"TlԖlT"I95)'L&69GppG9$ >$%k: !+32&#!332 $&6$ ~O88OLlL>pN  iLlL '':Ma4&'#"'.7654.#""'&#"3!267#!"&54676$32#"'.76'&>$#"'.7654'&676mD5)  z{6lP,@KijjOoɎȕ>>[ta) GG 4?a) ll >;_-/ 9GH{zyN@,KԕoN繁y! ?hh>$ D" >â? $ n"&5462'#".54>22654.'&'.54>32#"#*.5./"~~s!m{b6# -SjR,l'(s-6^]Itg))[zxȁZ&+6,4$.X%%Dc* &D~WL}]I0"  YYZvJ@N*CVTR3/A3$#/;'"/fR-,&2-" 7Zr^Na94Rji3.I+ &6W6>N%&60;96@7F6I3+4&#!"3!26%4&#!"3!26 $$ ^aa`@@^aa '7  $ >. %"&546;2#!"&546;2#/a^(^aa(N@@4&#!"3!26 $$ @@^aa`@^aa '  $ >. 7"&5463!2#/a^(n@^aa(N@ %=%#!"'&7!>3!26=!26=!2%"&54&""&546 ##]VTV$KjKKjK$&4&Ԗ&4&>9G!5KK55KK5!&&jj&&#/;Im2+#!"&'#"&463>'.3%4&"26%4&"26%6.326#>;463!232#.+#!"&5#"5KK5sH..Hs5KK5e# )4# %&4&&4&&4&&4&` #4) #%~]eZ&&Ze] E-&&-EKjKj.<<.KjK)#)`"@&&`&&&&`&&)#`)"dXo&&oXG,8&&8!O##!!2#!+"'&7#+"'&7!"'&?63!!"'&?63!6;236;2!2@@8@7 8Q NQ N 8G@ 8GQ NQ N7   8 8  H H  k%  ".>2I20]@]@oo@@oo㔕a22]]p^|11|99|11|(%7'7' ' 7T dltl)qnluul)1$4&"24&"2 &6 +"&5476;2 &6 LhLLhLLhLLhL>  &   &`>hLLhLLhLLhL>&&>G  .7)1!62 1!62he220e22> v +4 [d+ d 135#5&'72!5!#"&'"'#"$547&54$ Eh`X(cYz:L:zYc\$_K`Pa}fiXXiޝfa  (+.>#5#5!5!5!54&+'#"3!267!7!#!"&5463!2U``'    jjV>(>VV>>Vq  ( ^(>VV>>VV=&'&'&'&76'&'&.' #.h8"$Y ''>eX5, ,PtsK25MRLqS;:.K'5R ChhRt(+e^TTu B"$:2~<2HpwTT V/7GWg. %&32?673327>/.'676$4&"2 $&6$   $6& $&6$ d -- m  ,6*6,  mKjKKjoooKzz8zzȎLlLU4>>4-. YG0 )xx) 0GYޞ .jKKjKqoooolzzz80LlLD/7H#"'.7'654&#"'67'.6?>%"&46227#".547|D,=),9#7[͑fx!X: D$ +s)hhijZt<F/*8C,q؜e\r,WBX/C2hhh=tXm>NZ+"&=46;2+"&=4>7>54&#"#"/.7632  >. $$ p=+& 35,W48'3  l zffff^aaP2P: D#;$# $*;? R Cfff^aa'Y >O`"&5462&'.'.76.5632.'#&'.'&6?65\\[( | r [A@[[@A#2#  7* <Y$  +}"(  q87] F  _1 )    #1Ke34&+326+"&=!#!"&763!2#!"&5463!2#>?4.'3#>?4.'3#>?4.'3Xe`64[l7  , L; =+3&98&+)>>+3&98&+)>=+3&88&+)> Wj|r >Q$~d $kaw+-wi[[\;/xgY $kaw+-wi[[\;/xgY $kaw+-wi[[\;/xgYJ\m4.'.'&#"#"'.'&47>7632327>7>54&'&#"327>"&47654'&462"'&476'&462"'&47>&'&462i$ $^"  %%  "^$ $W "@9O?1&&18?t@" W&%%&4KK6pp&46ZaaZ&4mttm ^x -  - x^ = /U7C kkz'[$ =&5%54'4&KK4r7>54 "&54>2"&462%"&54&#""&546 %#"&'&'.7>#"'&'.7>&4&&4&4&&4SZ&4&&44$#&&&j3$"('$&4&[՛[&4&&4F&4&]\&4&$  !D4%  ,\44&&4&4&&4&-Z4&&4&;cX/)#&>B)&4&j9aU0'.4a7&&u՛[[4&&4&@&&]]&&Ώ0 u40 )4#g&'.#"32676%4/&#"326'&#"2632#2+&'%#"'&6?676676632%#"'&6767#"&'&6767#"'.7>327"#"&'&6763"'.7>;7632;>%5K$ "0%>s$ "0%>;;>%5KVL#>H30 \($$(\( єyO2F/{(?0(TK.5sg$ єy#-F/{$70(TK.5sg$L#>H30 \($$(\#(@5"'K58!'"58!'"55"'K#dS$K K$Sdx#@1 w d>N;ET0((? - 2K|1 wd#N;ET0$(? - 2K$#dS$K K$SdxDN\2654& 265462"2654 #"32654>7>54."/&47&'?62 &4&&4&h՛[&4&r$'("$3j&&&#$4[ " @ GB[ "&&Β&&][u&&7a4.'0Ua9j&4&)B>&#)/Xc;u՛ "  " Gi[ Xh#"&54676324&'&#"'>54#"32#"54>54'.#"32>7>767632326#!"&5463!2b )   :4FDN  [1,^JK-*E#9gWRY vm0O w@wwwC22 c@X&!9{MA_"S4b// DR"XljPY < @www%e4.#"32>7676#'.#"#"&54>3232>754&*#"&54>763 >32 ''il$E/  @P@ ^`'W6&!.. ! -P5+ E{n46vLeVz:,SN/ M5M[  ]$[^5iC'2H&!(?]v`* l b$9> =R2 #"&5467%!"&7>3-.7>;%.7>322326/.76/.'&6766/&/&#"&676 &676&6766/&672? =1( H/ '96&@)9<')29% &06##$ J 0 7j)5@"*3%"!M %#K"%Ne 8)'8_(9./=*%8!Q #P"\Q#N&a)<9bR]mp%"'.'&54>76%&54763263 #"/7#"'#"&/%$%322654&#"%'OV9  nt  |\d ϓ[nt  |@D:) ;98'+| j," 41CH^nVz(~R 9\'  r  @L@  @w46HI(+C ,55, f[op@\j;(zV~i/5O#"'&54>32&#" 654'67'"'>54''&'"'6767&546767>7蒓`V BMR B9)̟!SH-77IXmSMH*k#".o;^J qןד>@YM $bKd ү[E";Kx%^6;%T,U:im=Mk).DT4'"&5463267&#" 6;64'.'4'>732676%#!"&5463!2),蛜s5-54&#"#"'654'.#"#"&#"3263232>3232>76 $$ Cf'/'% ( $UL ( #'/'@ 3#@,G)+H+@#3 ^aaX@ _O#NW#O_ .* ##(^aaq[632632#"&#"#".'&#"#".'&54767>7654.54632327&547>P9 B6?K? %O4T% >6>Z64Y=6>%S4N$ ?L?4B @{:y/$ ,'R! F! 8% #)(()#%: !F Q'+%0z:zO_4'.'&54>54&#"#"'654'.#"#"&#"3263232>3232>76#!"&5463!2Cf'.'% ( $VM  ) #'.'@ 3 #A,G)+H+A# 4 w@wwwXA  ?4N$NW&M&L  /* ## + @www O$>?>762'&#"./454327327>7> EpB5 3FAP/h\/NGSL  RP* m95F84f&3Ga4B|wB.\FI*/.?&,5~K % & Y."7n< "-I.M`{ARwJ!FX^dj''''"'7&'7&'7&'7&547'67'67'67'63277774$#"32$   *'ֱ,?g=OO&L&NJBg;1''ֱ.=gCIM $'&&NJBg=.%w؝\\w Ioo<<-NIDg=/%(ײ+AhEHO*"#*OICh=/'(ֲ/=h>ON.]xwڝ]7e[@)6!!"3#"&546%3567654'3!67!4&'7Sgny]K-#75LSl>9V%cPe}&Hn_HȌ=UoLQ1!45647UC" !-9[nx"&46254&"326754&"326754&"26754&"26#".547632632626326'4#"#"54732764&"264.#"327632>#"'"'#"'#"&5#"'67&'327&'&54>3267>7>7>32632632T"8""8)<())(<))))<))<))<))<) Tد{ՐRhx=8 78 n 81 pH_6Soc F@b@?d?uKbM70[f5Y$35KUC<:[;+8 n 87 8/8Zlv]64qE 'YK0-AlB; W#;WS9 &(#-7Z://:/Tr++r,,r++r,,r++r,,r++r,,ʠgxXVעe9222222^KVvF02OO23OO`lF;mhj84DroB@r+@222222C0DP`.r8h9~T4.&o@9 1P%14'!3#"&46327&#"326%35#5##33 $$  }Pcc]321IUΠ?LL?cc4MX &04;0XpD[[DpD,)&&Q 9V\26&".'&'&6?.#"#26327677>'32>&3#'&+"?626&"#!'.'!"&5463!>;26;2!2P P  92#.}SP9::%L \B )spN/9oJ5  !+D`]BgY9+,9% Pk 4P P &NnF!_7*}B<{o0&&B;*<@$ucRRc#@16#37c&@@@ J"@*4^`ED B o/8927 *@OLC!T!323X$BJ@@@&AS 0C 59" 'D/&&D4 88 $5A&%O#!"&547>7>2$7>/.".'&'&2>^B@B^ >FFzn_0P:P2\nzFF> R & p^1P:P1^ & R P2NMJMQ0Rr.B^^B 7:5]yPH!%%"FPy]5:7 = 4 QH!%%!Ht 4 =<"-/ ?1Pp+".'.'.?>;2>7$76&'&%.+"3!26#!"&54767>;2' +~'*OJ%%JN,&x' % ^M,EE,M7 ZE[P*FF*P:5  ^B@B^){$.MK%%KM.$+X)o3 "a 22!] 4  I>"">,&S8JB##B12 ` `B^^B8&ra#11#$R&  "&.2v%/%''%/%7%7'%7'/#&5'&&?&'&?&'&7%27674?6J" 0<=_gNU?DfuYGb7=^H^` =v~yT3GDPO 4Fѭqi_w\ހ!1uS%V_-d 1=U{J8n~r'U4.#".'"3!264&"26+#!"&5463!232+32+32 0P373/./373P0 T=@=T֙֙|`^B@B^^BB^`````*9deG-! !-Ged9IaallkOB^^BB^^B +Yi"&54622#!"&54>;2>+32+32+#!"&5463!2324&#!"3!26֙֙0.I/ OBBO -Q52-)&)-2 ``  ``  `^B@B^^BB^`  @   |kkl"=IYL)CggC0[jM4      B^^BB^^B @  @ !1AQu4.#".'"3!24&"254&#!"3!2654&#!"3!2654&#!"3!26#!54&+"!54&+"!"&5463!2)P90,***,09P)J66S"@8@^B@@B^^BB^Ukc9 9ckU?@@88 @@N@B^````^BB^^!1AQu#!"&4>32>72"&462#!"&=463!25#!"&=463!25#!"&=463!24&#!"3!546;2!546;2!26#!"&5463!2J66J)P90,***,09P)"@8@ @  `@@` ^B@B^^BB^ՀUUkc9 9c`@@88@@2  @ ````@B^^BB^^(%.'"&' $&  #"$&6$ wCιCwjJ~J>LlLśJSSJ͛>6LlL$,  $&6654&$ 3 72&&  lLmzzBl>KlLGzzG>'7#!"&54>7&54>2  62654' '3/U]B,ȍ,B]U/OQнQ>+X}}X0bӃۚӅb0}hQQh>ff#=#!"&4>3272"&462!3!26#!"&5463!;26=!2J66J)Q8PP8Q)  ^B@B^^B``B^VVVld9KK9d` @B^^BB^``^+;K[eu4.#"'"3!264&"254&#!"3!2654&#!"3!26%54&+";2654&#!"3!26!54&#!"!#!"&5463!2"D/@@/D"?,,?pppp@@@@^B@B^^BB^D6]W2@@2W]67MMppp@@@@@@@@n`@B^^BB^^+;K[eu#!"&54>3272"&462#!"&=463!2%#!"&=463!2+"&=46;25#!"&=463!2!3!26#!"&5463!2?,V,?"D/@@/D"pppp@@@  ^B@B^^BB^D7MM76]W2@@2W]֠ppp@@@@@@@@` @B^^BB^^A#"327.#"'63263#".'#"$&546$32326J9"65I).!1iCCu +I\Gw\B!al݇yǙV/]:=B>9+32%#!"&5463!2#"&54>54'&#"#"54654'.#"#"'.54>54'&'&543232654&432#"&54>764&'&'.54632  ?c'p& ?b1w{2V ?#&#9&CY' &.&#+B : &65&*2w1GF1)2<)<'  ( BH=ӊ:NT :O )4:i   F~b` e!}U3i?fRUX|'&'&Ic&Q  *2U.L6* / L:90%>..>%b>+ +z7ymlw45)0 33J@0!! TFL P]=GS -kwm  !*(%6&692? $&6$  '   al@lLlL,& EC h$LlL /37;%"&546734&'4&" 67 54746 #5#5#5ppF::FDFNV^fnv~"/&4?.7&#"!4>3267622"&4"&46262"&42"&4462"$2"&42"&4"&46262"&4"&46262"&42"&4$2"&42"&42"&4  R ,H8JfjQhjG^R,  !4&&4&Z4&&4&4&&4&4&&4&&4&&44&&4&4&&4&Z4&&4&4&&4&4&&4&4&&4&4&&4&&4&&4&Z4&&4&Z4&&4&  R  ,[cGjhQRJ'A, &4&&4Z&4&&4Z&4&&4Z&4&&444&&4&&4&&4Z&4&&4Z&4&&4Z&4&&4&4&&4Z&4&&4Z&4&&4&&4&&4Z&4&&4Z&4&&4%-5=EM}+"&=#!"'+"&=&="&4626"&462&"&462"&462&"&462&"&462#!"&=46;4632676/&?.7&#"!2"&462&"&462&"&462"&462&"&462&"&462"&462&"&462"&462@?AA? @ @R...R@`jlL.h) * * $ %35K.....uvnu....@@jN  * * .t2#K5..R..R. @Hq '&'&54 &7676767654$'.766$76"&462&'&'&7>54.'.7>76ȵ|_ğyv/ۃ⃺k] :Buq CA _kނXVobZZbnW|V 0  Q2- l}O  / :1z q%zG 4( 6Roa ą\< )4 J}%!!#!"&5463!2^B@B^^BB^`@B^^BB^^%#!"&=463!2^B@B^^BB^B^^BB^^ &))!32#!#!"&5463!463!2`B^^B^B@B^^B`^BB^^B@B^B^^BB^`B^^#3%764/764/&"'&"2?2#!"&5463!2    s^B@B^^BB^ג     @B^^BB^^#'7"/"/&4?'&4?62762!!%#!"&5463!2     ^B@B^^BB^    `@B^^BB^^ ! $&6$ .2r`LlLf4LlL#.C&>"'&4762"/&4?62'"'&4762%'.>6.'.>6'>/>76&'&.'&7&'">?4'.677>7.>37654'&'67>776 $&6$  ( 4Z# # & # # & y"6&.JM@& "(XE* $+8 jT?3#'.'&!3!2>?3.'#!57>7'./5!27#'.#!"g%%D-!gg<6WWZe#1=/2*]Y3-,C1 /Dx] VFIq-HD2NK '>*%R= f 07=. f D]\|yu,0>Seu#2#"'&5<>323#3#&'#334'."#"+236'&54.#"5#37326#!"&5463!2 <  zzj k-L+ )[$8=".un/2 ^B@B^^BB^5cy    (ݔI(8?C (3> #"($=@B^^BB^^0K S&'.'&'./674&$#">&>?>'76'# "&#./.'7676767>76$w .~kuBR] T%z+",|ޟj<)(!( ~ˣzF8"{%%#5)}''xJF0"H[$%EJ#% .Gk29(B13"?@ S)5" #9dmW";L65RA0@T.$}i`:f3A%% BM<$q:)BD aa%`]A &c| Ms!  Z 2}i[ F&** < ʣsc"J<&NsF% 0@Wm6&'.6$.7>7 $76".4>2., &>6'"'&7>=GV:e #:$?+% q4g &3hT`ZtQмQQмpAP1LK!:< }҈`dlb,9'  %%($! a3)W)x  оQQоQQcQǡ-җe)Us2XD\ϼYd /?O_o#"=#"=4;543#"=#"=4;543#"=#"=4;543#"=#"=4;543#"=#"=4;543%#!"&5463!2++532325++532325++532325++532325++53232p00pp00pp00pp00pp008((88(@(80pp00pp00pp00pp00pp0     @(88((88     /Q/&'%&/"&=.6?&?&'&6?'.>-#".6?'.>'&6'.>54627>%>76#"'% %6 27 2G f!)p&4&p)!f G2 72  *6 " 47 2G f!)p&4&p)!f G2 72 " 6* !k 3 j&3 %,*&&ր*9% 3&j 3 k!./!>>$,*!k 3.j&3 %Ԝ9*&&ր*ǜ,% 3&j 3 k!*,$>>!/.&6.'&$ &76$76$PutۥiPuGxy Զ[xy -_v١eNuv١e =uʦ[t78X &6# #'7-'%'&$  $6 $&6$ 31NE0gR=|||">"LlL^v!1f2iЂwgfZQQ^>"||||wLlL &ZXblw.'&>'&'&".'.'&&'&'&7>767>67>7626&'&>&'&>'.7>.676'&'&'&'.67.>7>6&'&676&'&676.676&'&>&'&676'.>6/4-LJg-   $  6)j2%+QF)b3FSP 21DK2AW ") ")$? ? 8A& AE5lZm= gG2Sw*&>$5jD GHyX/4F r 1  1""!l=6> 6 ,5./'e    .*|Ed! u & &%& &5d ))66 @ C& 8B @qL?P^7 G-hI[q:"T6 ,6 &/`  L wQ'   A ^   "  $& _  y  * <Copyright Dave Gandy 2016. All rights reserved.Copyright Dave Gandy 2016. All rights reserved.FontAwesomeFontAwesomeRegularRegularFONTLAB:OTFEXPORTFONTLAB:OTFEXPORTFontAwesomeFontAwesomeVersion 4.7.0 2016Version 4.7.0 2016FontAwesomeFontAwesomePlease refer to the Copyright section for the font trademark attribution notices.Please refer to the Copyright section for the font trademark attribution notices.Fort AwesomeFort AwesomeDave GandyDave Gandyhttp://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/license/      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab cdefghijklmnopqrstuvwxyz{|}~"      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~glassmusicsearchenvelopeheartstar star_emptyuserfilmth_largethth_listokremovezoom_inzoom_outoffsignalcogtrashhomefile_alttimeroad download_altdownloaduploadinbox play_circlerepeatrefreshlist_altlockflag headphones volume_off volume_down volume_upqrcodebarcodetagtagsbookbookmarkprintcamerafontbolditalic text_height text_width align_left align_center align_right align_justifylist indent_left indent_rightfacetime_videopicturepencil map_markeradjusttinteditsharecheckmove step_backward fast_backwardbackwardplaypausestopforward fast_forward step_forwardeject chevron_left chevron_right plus_sign minus_sign remove_signok_sign question_sign info_sign screenshot remove_circle ok_circle ban_circle arrow_left arrow_rightarrow_up arrow_down share_alt resize_full resize_smallexclamation_signgiftleaffireeye_open eye_close warning_signplanecalendarrandomcommentmagnet chevron_up chevron_downretweet shopping_cart folder_close folder_openresize_verticalresize_horizontal bar_chart twitter_sign facebook_sign camera_retrokeycogscomments thumbs_up_altthumbs_down_alt star_half heart_emptysignout linkedin_signpushpin external_linksignintrophy github_sign upload_altlemonphone check_emptybookmark_empty phone_signtwitterfacebookgithubunlock credit_cardrsshddbullhornbell certificate hand_right hand_lefthand_up hand_downcircle_arrow_leftcircle_arrow_rightcircle_arrow_upcircle_arrow_downglobewrenchtasksfilter briefcase fullscreengrouplinkcloudbeakercutcopy paper_clipsave sign_blankreorderulol strikethrough underlinetablemagictruck pinterestpinterest_signgoogle_plus_sign google_plusmoney caret_downcaret_up caret_left caret_rightcolumnssort sort_downsort_up envelope_altlinkedinundolegal dashboard comment_alt comments_altboltsitemapumbrellapaste light_bulbexchangecloud_download cloud_uploaduser_md stethoscopesuitcasebell_altcoffeefood file_text_altbuildinghospital ambulancemedkit fighter_jetbeerh_signf0fedouble_angle_leftdouble_angle_rightdouble_angle_updouble_angle_down angle_left angle_rightangle_up angle_downdesktoplaptoptablet mobile_phone circle_blank quote_left quote_rightspinnercirclereply github_altfolder_close_altfolder_open_alt expand_alt collapse_altsmilefrownmehgamepadkeyboardflag_altflag_checkeredterminalcode reply_allstar_half_emptylocation_arrowcrop code_forkunlink_279 exclamation superscript subscript_283 puzzle_piece microphonemicrophone_offshieldcalendar_emptyfire_extinguisherrocketmaxcdnchevron_sign_leftchevron_sign_rightchevron_sign_upchevron_sign_downhtml5css3anchor unlock_altbullseyeellipsis_horizontalellipsis_vertical_303 play_signticketminus_sign_alt check_minuslevel_up level_down check_sign edit_sign_312 share_signcompasscollapse collapse_top_317eurgbpusdinrjpyrubkrwbtcfile file_textsort_by_alphabet_329sort_by_attributessort_by_attributes_alt sort_by_ordersort_by_order_alt_334_335 youtube_signyoutubexing xing_sign youtube_playdropbox stackexchange instagramflickradnf171bitbucket_signtumblr tumblr_signlong_arrow_down long_arrow_uplong_arrow_leftlong_arrow_rightwindowsandroidlinuxdribbleskype foursquaretrellofemalemalegittipsun_366archivebugvkweiborenren_372stack_exchange_374arrow_circle_alt_left_376dot_circle_alt_378 vimeo_square_380 plus_square_o_382_383_384_385_386_387_388_389uniF1A0f1a1_392_393f1a4_395_396_397_398_399_400f1ab_402_403_404uniF1B1_406_407_408_409_410_411_412_413_414_415_416_417_418_419uniF1C0uniF1C1_422_423_424_425_426_427_428_429_430_431_432_433_434uniF1D0uniF1D1uniF1D2_438_439uniF1D5uniF1D6uniF1D7_443_444_445_446_447_448_449uniF1E0_451_452_453_454_455_456_457_458_459_460_461_462_463_464uniF1F0_466_467f1f3_469_470_471_472_473_474_475_476f1fc_478_479_480_481_482_483_484_485_486_487_488_489_490_491_492_493_494f210_496f212_498_499_500_501_502_503_504_505_506_507_508_509venus_511_512_513_514_515_516_517_518_519_520_521_522_523_524_525_526_527_528_529_530_531_532_533_534_535_536_537_538_539_540_541_542_543_544_545_546_547_548_549_550_551_552_553_554_555_556_557_558_559_560_561_562_563_564_565_566_567_568_569f260f261_572f263_574_575_576_577_578_579_580_581_582_583_584_585_586_587_588_589_590_591_592_593_594_595_596_597_598f27euniF280uniF281_602_603_604uniF285uniF286_607_608_609_610_611_612_613_614_615_616_617_618_619_620_621_622_623_624_625_626_627_628_629uniF2A0uniF2A1uniF2A2uniF2A3uniF2A4uniF2A5uniF2A6uniF2A7uniF2A8uniF2A9uniF2AAuniF2ABuniF2ACuniF2ADuniF2AEuniF2B0uniF2B1uniF2B2uniF2B3uniF2B4uniF2B5uniF2B6uniF2B7uniF2B8uniF2B9uniF2BAuniF2BBuniF2BCuniF2BDuniF2BEuniF2C0uniF2C1uniF2C2uniF2C3uniF2C4uniF2C5uniF2C6uniF2C7uniF2C8uniF2C9uniF2CAuniF2CBuniF2CCuniF2CDuniF2CEuniF2D0uniF2D1uniF2D2uniF2D3uniF2D4uniF2D5uniF2D6uniF2D7uniF2D8uniF2D9uniF2DAuniF2DBuniF2DCuniF2DDuniF2DEuniF2E0uniF2E1uniF2E2uniF2E3uniF2E4uniF2E5uniF2E6uniF2E7_698uniF2E9uniF2EAuniF2EBuniF2ECuniF2EDuniF2EE=O<01hpython3-saml-1.16.0/docs/saml2/_static/css/fonts/fontawesome-webfont.woff000066400000000000000000002773501451074743100263520ustar00rootroot00000000000000wOFF~ FFTM0kGGDEFL OS/2l>`2z@cmapi :gaspglyf _yLMheadb36-hheab$ hmtxb Eylocae \maxpl ,namemD㗋posto`u=O<01hxc`d``b `b`d`d:$Y< xc`fdbʢb l |6F0#Fnx͒Jqgje>"D>{EO >,"u^[[[jos_M%:0g80B.Lszðפ 1YlKWvest)Mk^Zֵ֪m׉Θbk̳26>'YҖjukZۺgm2 (4-iEkЖv}XB Y``c9ZJV5eY߆6G ΂`3| 6[uIpn-[pL0Lp;׸%8o>F8 G8`Wί"E^_=(K,FK+ybx TՕ0o}{uuuwUWիnnjmz-nvEEAAJ!*(hD2c%FʦEbb6$&7߹UUW7 tw{98m8bI ڃ݌7 SEG!3j㔐=w;P^IA;RRnkLS.)o8G([)9O,,AtS h yujZupPGxN on{ho2AD-r]u5e^dMX8=r5ͻ^Q\~2V0 o0kC qA跍 G< 9v`|NXWI:"'aW޺O=}k#"7e %Vs~-y$ŵXw&'q.n.EK#JDڝn봽7=|wL:Ӎ2vmrRv:=0P@DۓVZ7eOd7HMSY|[of'BL}ƷҗV^+{W=uҤ֦='j,| ;vAo=0q8"I³8yZ6Ǵo9q< i3k1%& uk {H}@΁W—^qԷ4;gg7Ny/ qPOЌL4q,ԇ"Sv=jL /UjC-woȍnj̮{j\ vEk z>pn=^=ajID(෠quF;э5֮s7 ;QC7U[׈yZIۘػ*!$ dⵄŖ-ˇ?{mf6po~mԽwoG6Moza--m#]?]?Vkzܥܵ.>)9NH%&T/ _IAxOB]8(.v)G=HPSUP>fFE-GGs|'?~zI*R|[` -V'ݙGP3b'\RI̞#n;W ٟDTѹb80^s6,rȥ ism15kk,}qWȝ;tseYqqC/0q|> 3W/ըsF"sIoAHI 8C„ w~@ _(]h=r9p! ;H-[Ifw;%=d꯵bmH)k=o\hEi 7i:-!mn:`[G]GE,;syH62ƈs՗:I@^\wOVõ<g?]Y{?qKgH[X&tdn[,Z!H6#=nݳ;OWUG4]]6ٰp7[aM5PB]?4P呂7o\!׺ߜؤ 2>8/p2h@k~ھB~a[r=Pr8SescF ӗ S#P|0z'zS)8aFBFE VrJ(EfDpU\'h4P jd3}CvfM}Zlf,.pj1tYj2lƗ,U<:zt[%Y!1vMfrc:_n"7zwvm zuidtO.3Ku =.#Cjn(,THu_Z 6qhhP4#JH%jt3M)#zzdt1Dn~9/ȋB@NV?p'r f: ;bBQHb$h3CG|#v2ydm)esvw~٬fp~DG r 0^XzˣՇcl& \`\8HHa IC?6:5H;lވ4C&\FjԬ,|MCݔ/f8ܮ2 .ҍl _/AkTVΝg ~T΂<`2Q&;XAW@@gj{j, suuE ֟:A 8,&ռ }|b0lFQ$px=4ddm7nru"N:O u^x@񝂍CG*%F>Tm?2.opˮ1r\T١K+L؜cn:8qyN\Dvj[ܦDy/*=H [0l8=`Dd&76tOd٧,崅v2+׷ TU[NHN8W|fG{ܘlT_Z1 8j `Ar㼌` h *b #ռBj0s$n^7w $Gɡ;N .A>3;My?zpͥΙ4aqp҃GFw|]֯!ؾbvq8e+)h.,U~4]h.P4s)+kqD2uϸuE3 V⭯ҟfS8/D]5ޖ*xWGj}l&klnçiPv'6#(%)>qEo6U+6ŋ8ۢlޏ> `Mn''zB-t/ꬱ3ik3 55Z 1ao|+ őm 0$YəOa1ag9up9Gת+b=H߀Q1hT]ҒQ^?s9ػ lB|4TNYBL, g#5A㉐=!7~=/X]WuwZW避[ꞞWd==Bm®ҏ΋v?$ E# L!7ط!TRRI4)H#l*:#H.)pӇ źRMB=ƅ(ǂ͵˥>A,_2%5pyn6/Mbt,L֮l+9QGb]*D; {PZ!*U1|s{"3\gGχyG:-nQg7`ԏ3xAx%ÏUXMZ&HX9>osGa '!lü|EW-ebbxsY06E>)VH ߰}V=G~Ykh/;ۇ0{4.c\h`5 FA5Tg[4#So3yuy=<'j{ hNk6 @1c/5 -T:`YX]g~ilp!e>1x06?eoAsb̪fyb3@B߂Yq?;m)h4skP UfW62c>8F(t*GC ym srp? ICY:ϻ&͜99TY-k%)@|FFh9*(RtKǻTXM-IP.%C"?,+ˆ= >tUgQWw#Υ7 ݋[P ޮ'j7 7̗9ZI SO4YkDE͂B~`Ig;mu֢zSg)rE܉=mK9ZD]4~7߉R6Hۂ(ji!BldpӜ^zz拾gF:qꢝkWl/СuX2rTsBנͫڂt}}ƶ_5 k4 A;oHLϹ)z.quAzyxjk5F-@lҙcڗҗ\6= O]9/5ڔ볝\tOCT3f(i ]w PiQwγ=JߌvGޮy[[,Et&QocÂyb66kMK|֋$Yz%P(^87DrK`%5.: Ďx=mnًm]Ю&2G(-@Q7xu3%@p~нt S]=)AG AVg; *=$mz -|_EZˢk<5U5fFIj`=H})0~F,"N6k"}ṒkT"$mZPc',ϛtzՅ];+j +NG>K#h-zp6\;yb~9.m \=qrqü=fS 6u(؍3#0  :Nz{SM]"`R .Cr`-U{낍znq tx ic+Ԛ:3Y㳙N*aVP `1Qb@fc^X9̼ܶjtҜY ӂhھ3 ijs+\8Tvi|Q< v߹c81-t\16GInJ:̇hX Gr+4Hjv4l!,cC54{ٱ4dR~p*;9nC%d}dA 4Q8iOi TgdulUSAq$.j6U;MǶۏێۏj9JDvAFbmLOI=`jf:>IǁJ! 6Txưqn̓S9ĀM|!ґ8X)hͅͳ(,ӌ2+lD3Qɕp$`Pt[ DV2opo%xZ)n:p4N)F ՆtT7Mu`8P*r >(O^tXi(M4! t(>hcU<@ܦç$M'(J׳Q܃<8Vjj7P?Ͼ;_!Q.h|:B)Ӓxܘs_d9aN=.WO.\|_O&tk.".Dp53͓ 6`8IuKjk/wiUSusUlr ̥;ѠMe`TB&n¦\ g2pd[0Ovz I'm%41}@€:įZ/r @1m8_.WRlv(F5Aս~]*@Qؿ VgM܊:MʞQZ㖵. HfJwKIA\f7zl}5VzG Ɛ u̻vߋaɰZ(S6W z7ek[j #6[6iSڣn@d`[}i]<{bN&kG[Q`Ek$|'GOR4: yX1dhz3TʷL-3DG%Z b锥3I陌R^cy,3P!@ieNq좀FS'}@4шÏ~*T(PY+=!?}>Ю+w*3Usƽ i[9a\uWeY5 +,iK\ʚe<zKC&Hdbktݩ7!;BTR@J vKU8bUH^Q;Okb%[QHO 9谉0r0}U>ʔV5^ܵ}ecFmۈrqLEl "I5ڦfU2cW+O, MJ񝁧6y?*0&Nݚxq?)>e( @qTVx>sjAi2W@WU{LГK^ A'96&E[ h8J*X>wyW+Vc*YP!3 ^ %"`ɒRcD@2ܵG5gL6}*Xl틵\"*p9B4MzA65L.2k,0^>G@@Hty Z4iepWtAh,8<{9ȽǷƶwZOYE< Z)t#/崐\F7ʔB>(&6ldit/=n>?&s]@Ν0Z.3Ĥ9MG6XIJHXa:C}3 6~>D3UO>[vZ_}סqN!ʃ -W S Ha)Y'lg8=`z(bwvi:2E!`;x,Y ߩ =Іj^ǻQ^_Yy`Q[&aYQ us0{&m胑*j)TC$ YQ>*P}H˥_7!n?Vا(sOGRBXbG/*󨴉bE("lrʔ$ΫdJwGp6 P/#j mtCR0}Bj̣RXvI>(j=:ECtV:O[h[5"uE3W. f[eܫ8P)e 0Rԁd.ُ:~}t<)/Q cOBGGp<"-G-b΢y3b#5RPCk{d˚ ح6d]LdLu鋶 LCzӮIYs;A@*nyڢKˏɩEWeMâx[*u -zҗrizH> 2$ =_j7{!h7Ύ|pfs%9LAQ,2WH(EEug&/ $̃cm$0^(K_ C]Di+/TRhOJ?Nޛ j; 쁳#ISm0Q4WՏ5_fd "0ԏ ~D}R'k GK1(_/TFȤ8>Q8m.mstÁ-`wZaxx";ͯ2o2:h*4X-hW3snP,ɞ "ޗ`7Nw8ɐD\ (,f鄝 IM|؟նkÿl5nv xL/LM}ݻ/Еum.umd>Nh&kԵ-h# +qs}v.L8c|P=/2,T,\fxP!:*}uLvyj{C [ ^܋lV͛CZk9~_+2_ʗ7%\~NVw|:$^fH-œl6[DniD>=}4b=U{xCu:6ݨ18=Z%ܓ&?i*V߻"z,K=,5keb PÒ}aM)dŐ".Aǝ2AnK% %7; QΤx9: J's9:(w̿sltWN~+lAڏm[w77n\W<9-N߹ti?";iw[;LvP2zrgkcl;#E*b8*<~h!:Q@qӼek/#@wꪫ' r*2_2mppm"Oގ:wFgRۜ{zh?U_3m3ؾ)[_./d jG̨.+{7g|6w6؟>d5;{O"-<+jaW22pWagy6&BhI2%1S*[ϤF۷%nwT QĶ!=00!dP$Oj!%l6bd[6,6`^Hfɖ3V ߶[8|\MQ lƜYxj?KO3ٲ%))JrGƼQ̼)2c"^–;@Y5u!'hVGTi M9#(ן<4s{@efQ`Gy 8L"KB3+fOx_c`= C@d-TOj+Jw]f1򉠦J -L[,Əvu&}z)AԫyzX߶"MWwP-蒺Mrk 44LZvɎiZcKU/Nja,a !"Y<]K-{S &,- l5V(DSJZU+6UԤ)jȀMXju5xkOxkCf>v;oĂu)O[H%rJrZNCQn?|x_B*kgYn3:B4WͤuQ.RMF2>8G3J<ZŠrVŗY~P9w;< +iչ+5DDhp,;ʹjfƼ=䵫9 3Ƒ,@('h:Ƌ&mTkPq8󨴱!ä.#Q{== 4V#mx _)IfC#yFN uQRPQyQ u:]g*OU֧c'PfՅԭںo>x,uP^"yXdci+Y_'z6~(+q$U;{S<^xGn}ouvXt%&3`.:gA'%O0j@Ew:мjdqge4c&ūY3]*tI* r6% &AR^3$p,a2GÇ}O>W476Ոn7[YNqOecu/=cm:&4Co<}iAO6ăNYm:̲f3J"MK:Ek:e-O7 6;kh}x?1/\g^y}7|4q'7o^ o.Uξ&d5v 3_P MpĹVjlU  a^vqǹ܈\?虽쪰:Oob2AL29zXvQ VUq^k%@$Ǡ#o}TscFW}$yF$y^2:l4/maԽ&oL3ѤNIq!#ĺ~N>0=ٞbDAw Oh CTѡ ֩FI.M#Œ3ze{EvceR] ecsERn`{ahZ]'3W0vIxV[mQ8f64Sc%WrF.aR6aLv0n=,L ZBU\]aJXL7e銛 ljQƀcHj\}MGޛ [X@"WdNS<+#(;<"w~omyL'DpEbY?~{{,o,RD(JbC>ܶ_dՇwffsܦk3ގ&~L =$&Cyd"le؄ tQRʉ@*΋7JՄpC#5-Vgo !Gi 4&NpOo޴խ9k'y=JS4/;٬vY3MiB< (Yuv<9_m@|zU _<';^;#b})Kywno%6,i7-+v(k6ic"Ym=t#WRTmR[nafʭklW޼(IdrUU5=^Dfj}-:$rp( %\x+>wW؄ Ou gq/,W:˺/Ɏ+ y+&Lo) @[@exbiu;:Ykw[50x:rsS&_Xxf[bT:7ak}Yx<5r'(>q-proɴ2HU&I-Kmhɠ\YFY`|fM0]63Bw5%#'iH(8[*k.Etc&aNmVJQKTMbX4?#4c왓Q,<v5?J [Js'ڛiӒӇC>䶵hMz__m27b2HC' j ,JN؋ LuqMZW7'./^L^DL%S n4:OW^of߷Rпlq{\PȖ叙y4*xBav kx@͗qY’.3HQF|:rƔ9`P_SRL 6b|jAn~<DN"u0Q\ Wuާfn6oH玤N N'S;)̓vGvejOXJUPsps<׷4}am}SjTYCheubm20~t'r3:_H7M笜YrN:1!-z\MaP}l&pq6*_UYIG~O_KU8FT{t( av"CBf_F;QnqӳB$MU*rg,^GD,IH:7FD Jlk6c']u;& FbFiB"&͙MykUP\M]J~qZ JP$5K?1/,# K:I)DoY:Mg!'S$M }ÊN~$Ū3wm6]r׊sO^ ll 6H{RvBoLg(iZhVd˂]w!r<3H/7CyYN9Y@LceY֖Y $rz2dk`8v1gI1"0k~,c$ tyh2 ^/sv骩m{ TUM~{WÏɿmkUٹ?΅s4a:ZDg;@Vם4`gلw]x/goLvw'vڟڔyK<+Ǟ~NF=ΐ7.'hٖ}t)vSK4Yԉs]kWN-ЯK`~kR-^"9BF%`%5S'$^\o;NKM#_5yr֖ jKgMdn7Y n NlݮmGYN̂09E&WKbK|ĸJﱵWr{ݷkQcZ\2R؛Oۡ_h]Ըy&܈V;~M/׭n߮>_[./m2A qJ{ >L M8Af]'vHTUOμŃ̚u\eAb~u:ynwݥIٸ$j[QV*b 聇nEC*ZɭEo?҃&k=t#=KTrfWQjJN^yٔQW/Oo^rrj;NM4I`0wϚ _ߜ !Iouz#3tzi kjmfL'k ^9uDћVnǼ^߲rn_CSC "6Gi1#W0=p']@8z}Q/ F"̒ &=lFwdF3v1FuDFYV'F`.bNu䡁 Vl|I׀ɷ*~)Z*!+uQvCM/vԂ.qcYs, wDiN6 YrLU߲[crcq5)V!c031;B0ތeG͝UaVNUe (;;|d;_TA"?/}Mi ;]wt7WY㰛nNgh7EB7_RE=SxV5P sm`ržYazRat k_F= dVٿgCj߇%T}[n.Z$Uq:ۛ*<ggnGh (U?.b=Ђ z3ek 4 v^QVJRT+N1Ey D;YC+dNA݇n$9MAyhpJ=^蹭%[ҫ{\r8L^Rڠg8ޥ~ad8U=gP'1.#l =ΑѬzR6np~[EfnG+y|:fE˻~E׶Mʟ]f}jE3qMOϚ{d?]uU?#/;s~򹃫ؚǀK-6B'闘̵Lgcg&=G' }S唩VCIsyRCM)rd7&UC͝w4Nsca7fl]tTwݵFè4ou֍2B>#o7(J~jE(EM-P3/rQQ@Wヌ(QUm)!sG7ꜜZ4 …U lڟpd:Cce's2E;u*'$]" c4} vzyDzɨn4bTF.b4R#P*~6tjtŋdۥy1 W!ןD}glْW_A4R/u|]P Ǯ~:t[94{-.ǀyA0 x6-NMvM$c50ghQ61BnW_us;BEg}\"\aQ=#ͧվv1ŊSY(R.i[9 JdQӜ< 0@BNya)j0Vh2쬄sOeP5>I~1!-A8agjNq^76e/쾇ݳRuԢZ&UEJlpYo<2"_:979f阎.! hI4 RkCjGBu +btQPu/ А1TZ5V:+zp8jy\ST!zru8Y۸$ՅFuFY Tj +[kj`GŦ+yl֦Y닍4R,+h")=U>yV˕!V]Z8G_ jW pH ֬Q6P8=wQ9]W809{z$5p+҃D%ꔒ-R`5CbJihEI@xQ@-Jhnא!7#םY ѣX2MnƔi&#ix2nB~#}2n)Ͱ.woB( Yk"5nG PTF;NQ@(奣$%l7Q?lRPfB!wҤJƝaîGٍJ vKgWOӬL_$ta[!i&M>JLBfR% ۣ6!o "$,J{l2"Qo#BQ'!"# H:. o <9*a$ <1ʔ/- ᪠(J&$ f^o ћ}6,+7 g2.;H\Ұf,-JǒEw\Bwjǎ>fM..klDj.Xv}mW\:5֔jKضV3BS$l&ijDYdIO~q!rW)\3 H.iT2R ˔D'i>-(*Qoc$`g#Aꆘ0ߨn7.>x;w,yc?Ơ36I61q ($,Njwܴtr(yh2l{s\p@ 5H?]JHʽgIhhh{ ef zUs|+DWxst -}"<;p> #?X;$}upȖow/&ν'dޒM-3g֛떤$yIEuR ;5ItБfb{g-:6ާ>k0ڹQs.A,1xBU\tBBA= )~3.{ҍPa~OBP:sQS=:Ufs1KɗM @PsygQ')_@\l`|N16fpp3,Y,wZ1~טOnoy'ǗlfCW?Ot=Kz (UQCdPn.<=y]Sd2KZu{d^&P^ qhEAakFQ7><~̈^=QbyAsX Gr9Aժ` ΕMʆ돱, ,)4KݑYZ?0Jd\;|h~ki?ev宰Kv2)i9Jcj~Uivo V޴ʍX~eCkˆƆKڰZn߹ZXkon퀭:h7ΤG+Ș}I]Sfn"u!`*ئ(E3 M N4jnRXMGs/MtbRS{i+-v aJu3Z/WS9ZK]>Ɵյ68N^~i>v$$&x;ό/nTu _pdR7#ƌ]Kqk^:J1)Ǥ5$2 ;ʗ$X[Z(ޜhJ7*%2E叙#zg{hLK,M#ǤOkdւ nnVZĦپ[ȷkV%ʂ:@S>Զ}S~.vm[kl&żVLsHuvM[2/z9ն.S<#y\6 nGfmȬ@xʃEӻeiwXDv [#:bL_hkm[-NٌEZ~emM%Y뛮%Zbth%:9}6xn.^%,uXF>.1^xoUQO7}\1B,53V̒ׄ'Ōzw67Oi6o_rUqp,1qOi#*n;6F(Ny'+ܣcTq333~xh4[ A=,Oc⋢rx{+=.zfGA=SMϒk߉kѥ1|ug\==j=$rR3, xٰU`B!"LQ Jc@({˯F/43ibM6A >A 0Z( zcdI Q&Z+8LTW& aQ<a"*FS)1^T}uМ5`-q'6nh־ ڻO׬%3<h%rܿe :b VY zlN]6p/oyiOc5xrM{>_ؾv5>9Xruʓ3r0rdet|¶Ld_*5hct,g}Wi\<csp=iv6l۽N8E߹ٿ}aq̈́s+Wߚ DٶD^؉>[DPjq\j3th d[)7rhUW]jiK97 X|/>g],pK4YW_ځ/&-.S0+0:AH4bc7o|~۶FyWub^yV{1 o8S8#(緥~w޹jҢ6ĉ"h0PT u) $`]+E:Eq؎W7jD-7(3uŲ{Ql`Y$OCoɊ= ;h>E3g^tPeNB*ʘ!x % ֙Y}IK %epH ZR ́H+!)ʵ * 1B1ˬB`> &)ç & ),~)|H}ؚ"odA[aO:)禓GwLr(yļCgQ#[UN84~c!yzݰҔZ3;zss.FMؾ1 FSI`A 4QByE軼a"OiPSbnByḰXKG`SVЍC/|WM߫ʪkjv! :|uQ(UϜe׷]N#h<;vU{}fjH%X&? Vu~V~j6A'MYvM!GP۹re紳 Dk/s)kq8vI8#x G,c?;_?!syٯ3ηw>w`||tuP~IhhnE/&jy+ٸuTS6ooOoh-Np8ޗU2$u]v$0$ c ߂ST6hBڭw.ci[ҙ-: g*Khq{FA lW?}'MR~<3.([v 'Tgx4JA]ԧ?21:yAc4Qd8`b4Dlu*l.]&' NY ?_EJOG#yn ^TA/UB {dȎU}xX1r_i}~8b*=^]W*s->KdfgQU(s,ZeM\]2)1 $l!?OnG'o~P]h꙾V'E6Fo/q+Zj z*S`OƁ| MUa{o03g}(骪5J8+5OOWU$# +Z J,2Yin>ŖXp 'E!4l񺻜i S(߁TR_ʠ̈́$^ŊMOwޯ,cӊф惞\I`T)&IX3W Sv$Fݸ{e1fHțaw(Q \9u\Ox7NЍ%hۑ\WTT۪˻UmʂjrS-kU-nE*+g]4u,}뮻mfmsMX9UuuUNGQ>+UUG7O(YA!9ې#I%y\gf6)+{?DC<Ukmb~c|T`ᾮ& >E7"B1;/ ʤA$vBfYtجG_))P@ p7:z3hfa2 :v(^&m胍ɛ7Mi(&+;vv&1S {\ر%W[7mnYm}5qoqQˊc^nBq]dZCG6\i9I/`b}ޥ75!parHٰ) |\n@s؇Ӂfs޿jZV+m#~xd Iq|Y;$`kG^i[يFTX *QlN+xDՑ -ML[J ϧ},i.F,2"BGщ0~IeOÖ[咛o}Ta>ľ/oz>E}ʋ `vz%5QlҥH++l6gSÔ|Bh8ڱt}C_Ꮐ֣*=d[™M{WJfw.a44D o*VVA8sP-Ҟ}A" @"Ȥt0+||E4N Łݓ1 9)*YѶQoP@ J2::b?2Hϴ3Y_nx[b¼Y1-Mҧi.#?\!Бck3Fʷ׌8'חed($lٷYS hC:Sli,ɯ䝂Fi$柌tn_=PpT ;(3V{ID{iEZLI sҢc"3[*8#^NG#c`4cCf4q&E:r@B$=DMRI'04 'yP^?RxS^3Ԡj"!psmhg8G41$G>LxNy8.'RԇG@"LC8S1I.uߣBG?> sj6خ0FƆ{17qDXSJRʳR%FL!sM(~l^0av$.XV]Υt:Jt1"GЏeC7aR.#*fE|[rX\pM[\c3`Z*؇qfPW3f!u61SJrmoXQN[1c_.ʁ 6a<K#QGRs7gc7P߀sޝtos02zr {V{n͕{6>]yTЊX(|'׵h%" ׫{i`./Md!]Ђ[x C9w<XcpKCabP#lmПur8/^W`Mfs (=TA{r \X݃f?8:4gdYc O*EuDmO[, fs 6W X6 b%֢Bۇߕ"l?YkZ&|l !\I8 |`&11P/ IK)){@'ZYhv&g @6` wE&yIIJ9DI=Ab̚|/HuD@& 찇NQz^~y @^,, Q `qq__X(.l{^//T8 c#*bi&OaS l"y$&̲Ds7Pu =j\.Qܑ?҆|rz4ʻ}ǃ ufůsfBQBEv^M94$?8<"<.L3jL(L5FVw߽wpf.p©Mnc^8(Uν>n.Key@{SF׆{`| 737KݒpȕHdQ"p(@dY T cTYK KJ+VOwdC$ZѧtHοn w? &iG, 蛙|шD>yA-@K#Lҗ|sĩi@3@gM/<X6t\_ey̺q*+j/2+&Z=9s{] FlƎp7@Ŭ7G/Ð"^9M4%?}e %Ci*fFii&8{L?pG[mXګ`dl'k&cb5ncd`A0g -X RY< zŽU-̞w' v8 jBXV>גk5`Y TTj,OƧ. fء6;*;ZdNywM" 0ԈKՒ4D=#eLpEH6_-8(uwʫ%S$#0zޓd%NQoc[:@~ƹOqS>P 䬕}Ǐ{"f+wm3;a8Zx 9a>n  f|}XϓѸ?Gc"[yggYQ@z䛒K="aU5v:t op I+' /NAO٠#HzK/ ]^z 1Q80)]h" +_TaU8icm<ǥe}d@ųAc`h9NQS&ݫMXKX~ JЃ͠X)=PԯuM7:u&eVb{u+9denWjdSX 6>A8ozt+$5Fv_iN&,>V2 7>#_f 0ZҬ`>&$+H кeH!oڇևhN+?]¿0Ck~\,?0evgφ cuH`s$%C_V@DbQRUͫYA$|E{Z|uaޡU_CSnn "k ǥESʇ8A 2}桫j >M_dd2/?(Jt5XOwNn r>-|<+> z?=y W~><W䯀\0gj[yc~޷CՀCC<9OE2VnK+gj2*j~y\'oޱL+0+1{iuW7*voܨUjFc=|LƦ~߮e˴P9i̫ˉ~d 9yr }uf**?8?'a"U[/͑zyU@ʙpy=K.۳H+9ې3۽RNgQ l]}g+Dd3E d٠C|="猖D$1K/%cio&5OpFrrre+9Sn*YLID##@ fq 패a#'b}=I\̮' Zh|,=:=(T")F`EEVj,Q|FQ_/a| 2rKbIxX^bI&$Jt2(i]NEWؗ,ޥxVcmpF&+a) z؇d=>>1F_9=!~S`;{L|cpn|U^;-.߄m";aX(Ȑ1|YYz_-^U{3u!C+Hn9d>)Ȯ˵UIͧ@E$*}*~ V9_XAW6Я5DT@BlEM+Քd0X v mRfFu%Tc^*-q)tS9岠G)AojYJ}A8I}JJer(Z`Y~IrXimf)~U(0$(@z)p_\zvOw^9;]WU 5c(? z?ܶg'hNrG]ua!z"!`4yp A72E{\ G9 T2 ftBIQ WsxnRP> #G\(:4QSR 7~F9r@ :bQ&eP3RNZD%&J ~2{@1HrX/SV18cYϷw5m4y /T4"9 |O"u(M(֍nb.e1"r% ӆڠgt }*ݶ7DHBlg]rt9m72Z.T 6kuuN^=ŒBaF_lcY@2n6J Ea (z6id0[\IoھfЅ<jW}qG9aM\WWr!(^k=sF-멜 jH NQkpè],/?nMb=Zdy׻pQ/{B5T)~ +0cы[pkM[J%~uD.7Jwuw:l{ٻp=[amEeĉuB=\,UX簙ŀb\CӴq 倢#ҤZa͍ta[;OgxlLl {]WlwGO܏z a5xsbV3wgug=N~%8wo%q1c>(G3J&iJtX2E4} {ѯDVV"oN`4~[b1BM%CvL|"0-m}Fq$Y";(:jш-P=4]W im+wԀvZ9Zی|d涋]v8Uzxc]NnSz묝-'<ShC5j<Ҕ {=.t(F~>WZYfu3 i7QKT h2 SF}R&U*0, 61*ap2Հ::A/J\``AI _/qZΤoޒWz]aГ2KV@o/,hZ[8FCwЗ<O~pz7Q3;{aN jiZC1jvWqӰ^@ub w+#!δƮ2_Y~t$ّI)s";gZA IeߔZ=FaV;vkuvfe[ϳ}{XOV `^B5 5յvvNNyJ>)M`h3ͮsw׈sR7mKWlXu8wNYok׬?޲<;Y(6.x&U8ǹՓ9G̯/!?C#Fl ndB]]yu? y;x m/1HB D_A//Q!;tB!Ll 1q]ee%]/+ 8{k:|KVUY3i$ambAl]Vjoinݮr.xIA->9XhJf3UVa1s8ٗ7RmDC1/Th&Dc5[O`LoFE &_ugKy%:jz%!W`׌Ot\hԆMKMgZ" H{<ܲh䂥3BNOsimM6W˂͢oab x+@] &m 6bZؑʩ;G_^W"Z-FE/.[XGe#^eY3,1h@$NE `u:i4jAy : ~% |8@0mLtJ<,a ZZQ x7YfK'_6=iV;h vo8?i;ZWdu.;9 _H@X~w+*&V݄0ƳG3y&|fsGjlO8vN_Z?dy1BK:87+UZf{R[$Ґ&w(T5!=.MdnEk2M =2Mt,uEFq7-_ h᢯!ZESQ=w"6xoגyyQ;aZ@dԋc?ڭ% <%]C^%=Dhtw 2}Og+a9g5ԸA~ij]iXcǴXmŕc- kU¢HQ .aQiӍ.nz ~LC}SPaa#Tf-V5K-=?QUqxl#_X ,U{/~|ijQ?iځuo'?<]~dlp@`KysMI8pj 22 A8_;ͪKpAu|Q__nNg)!(NiU~[^T VmCg-V祯̌$eEz h΁v@bap([Ӣ~^՘)8oy#km>-<n~"5 > `,g0}`O1k(O1FN/2+lESs_*3 - D[H |$>h^zN R % xN!+ސ_SRCAp4Xetf+XO\7뮋/FähZ, :oEJRb[ hX`l @6)?llGz0=,El#;BcY[7?6s>9=1, ?䟃"zs`<h\Ȥ?,/gyLIhkh6ҋ;^ ׮}|GioH'anCҧvѻKNuu9/ mBrhSڱtb9y97e4O1 ĺb.yp vY&k[j_8ӟ籺\$%i2NC;q*O<$~J>oIzwm"8#e"L :R4pE\t#)_/9^\-}\_r9*GBpH~}>jƊOf/aAl}ع03wWrKDoSB﹄E;N#iQ"H܅ :33#^bZ=.* t7 /lN3/]#ԊYod/2'a-ra|ƙpg+}C2ٌ,KKK<]`mfkẔ&ˆ-NZhn;]-_TDךNjڢnNO]eOȽP4]}iCS]I_%VuY[ 4doD:9a*XP} 3FU. !nS`9^ik3XWG sJAyx4͢}}4WNIk{+B6c[z=kKLw|c\k)[#^ '?'xP:̚wkyݺ^tZ&gX^Z<4\kr|UrH`4͇ >pklw*iBU ~u㪗K:_m-\bl@jGC1`Y*IbQԟ X=G,=i[:[Y3 fȏgY\.۸EC铞|; FS[Z|QЁ> Y`-tSkESI]Sq ` k:/mդ7);psk~&*.(O^ްoPTQ1j}l~e6w댂NèZU@NfIbb0SB4TVq5H `9;Xed$i8p3!3@7f%St3w(7f*ojB(%&4H x*LTB<qJ7;xĒB1u9hԏ0P7@š!Ov)c?pY"h#^ކV!ю@JI+h Xjȏ3n AVpZC/LU:4qaEaa. `M18@ a)p#`DIqhފո>IP!`6N$Or[FY-aMz-JRƤsjh642@ =?4 yioO.6&@ƪ8 g/"*,vh_.@ku-X+v& N8,s{YkUCӂv#tᬘVf(:fi 46/9-ehtGS&T#h*zDlB J@]BZGzղ2Q\g9Fc6i, 2FV;䝎+ ( S@VL)ݛ%NV :aE(B?M'8iѪp|GA5A{z```]wxBaU&$nunw/E!ltg6tF^`r ΀vMs²=j_/ʷNS\ֶBrgUX49m_C{3 SjҚ=&@ h(6UCZEJ`pj&=`ZJBsŌ aL fɤee2[4_6{A\qڊ % k ^qTUJjZlpUHݖymĠWOY\jY`B xqz0 `4 ?1FQKnEF6Ȏz2zKg,zBy|Dk`t鳲T9 vCh hnBӺi~l/tkck6x֮r(rXc7L)D ElP{W(@*M1G3Q_\UܶeIsP( p[Ym\zipG>6o|vݫȃxHwxIJQ$*c|ZBSʳr_ tB[Q́F&FDǦ ݵ>FF^n4ĻHdZg03LE-6tmYQy[n[uZ]k]O-\JXwP4Qg8vi"3bN ~S QK.B.S(Wb d'~LYR4@lm$/kmȕX_51 isQ u Pf`>yIt/&NK4GK at=K2A≫ l6QK'? ݛR:!+ t³BGw$Iz508;6 ob-b!B6 uٳϢ) )egKY@\͍4VB}f$9zx+C#…{ i<AǜJ=żTgյ4kB(gjt7Lp:d<ÈSo^,齺S v5ku&sQ9QcsFlǜ- EЈ`s5DrYuo{wigamj `Ihf܄vSWzM?6YNB&Cm @SY:hk]һ 0b_c␾_]|Ik:dMZ#kv:##^55ZO]ƬNgcD#5XJxb[ZBPCcHTT 9FXe*:~gbmQ(-D6n]]}o #˧QA?W&Md8qWаcۼIS@.js1 /1 Ņ9l\>$6eb/_SfŲ'{n,8>;lO00-q`@6m5 zԡwգ2ӝX㬞VKuycRT9|b $OmkǤ%̣bgDܣ/</_ʷ_}~PDx5(߿|omC٫gߤ俾 F~VYCN$mk/4U9'(h, 6qpiĢU,i8hxk#9dwz-]|VٲY>rI@ڒ\0׷˷D]}JNJ9 W.h,cи H%,g5Px j̭fvU\hH[m\h5՘;;9i6_Q}֢c&;ڢ19-}>WAb .c)In%UD>,/h021:AJ1{+[{q`)~jocGj1iL b*idS!2}5ca2Zldiˊ9KqsTɴ; ;afTU>%+kbGYjQ,VCj)[eP G<\x՞[]jt=~'} 6*#A8ϭT 2 XbKpDZ(׷e!?x2K-_ȥ 5‚Ap ~Uj,{??Z/go~ڒ[ "m'N:La: hx>,jQ 8;Ѡ;_+BU۴}KPkj6uO{{iI= ?s~^X@,h**#Q԰Q3aXHp)Brk$,1J=$_ߥ9$t0us0(LL>(U3')˲X|bk{.$#{b*M 3R*V.+r?Q~{3FO]j\x _b}*JpPh=->"WT>#БZ: a^a"/9$3yɘHy❕;/)aPp-YVtEzk;KKCm?9 iN_u"iS"bPɦ˿ w:W(x 7(cغDdb Q"!24: nH%Ux;R<4~:wCr\32;^q]9;ʉ4q6{;-g*{tGwGUe{{7f'3Nzhw ahb(Qv,(YZPς sLt??0}s9eqr>rtA/;wS@ʇ*]Nr J=RҵԞguH(-]RR$l^ }{n"<̩'T] Gh=:6'cğ0J1HC1TOk0q)}F?H}wÊہ 4i؟qOm'ێj%#=k3:)%ї¾袺sql&{dܑxMJfW8O  %ET O'%_IhN$tϚ"58>sdO2~$3џ~烌VJLLLdRJjˡ\䰼N1=f21]8GЋARyã[f jSGZ3GZ ] &D g`6Ko$XL ZU}xRy$fsw,J6ؐR( K |FKdUX:4ri8Je~YhO!y΢R>zVtUGVw<0v&7TG8VlƢ!;^8OW/&H#LD90((ѓ? a)Am!L<| ئ%\ÌL4⏕`n?`VWkhb+iŚb%8ti5@/th$pK套sGXh%bɻb/u5K:`Ěcbֈ^:Mžrݹ׶gY5e\pA:K#xs"Nt;f dBC 3vDk/U1ղ9GsX-BC<27ǽ M.EguL͋\yY6{ZbuyE5%.wAP3}Snc ez52QYͫx`բ*'/ΗCi~E'`ciE*&9ҞKA# \:+/c)q!r^={pn7\ݱdq;zkڗ,\Ր9N.N[EZ4w^/<4z29愘+GU=0R= 9#}^)trgrt:".^Q~;3ʪrmNEE@~}Pf\tzMբI`/81iSNMPVv<_aO6)hNv9dyXOJA1`SNF 0d 7`z$ 8g0: aї Z\f0< \oqg~1?8`|l"[nb1 MysB'F~ZbvGN u_f͉kE/˚>6D٘HN T1P>GO6g\=WNeqot#uz:JO')%A]4QWCMR& $%j¢ 7Hl%GmPPF @9sBM\+,u`4cNZ#,U̥.aLQ<4I&ũ1@aWN]P9h^^=T0}\$y'ѾY!aED*nĈ\nE*eS4OpD1Kr2B}qj1Ʀ/T 78KYY&駵lWSJ9=4OG:ٝf+\*Z8Nʢ g^@$|%-ϦWHM VLR:/QJh{8s*dXJ5`j[pk&UYbd`l&LSTr@ tڞ){iEڲZw:0Th &!̀\V`);^L1C|]ߢr.-8eu J|W>RNr 8xA#b+<SfLM6e- !d#_ԚQ&qqPBkA(#ZqƗ!Jpl"1ײkIZVp@?-=6Ss,e:3eZ5R9+7N9InۇםXgCSٮ嫳lmu ,3m9zOPEǰB^rF&B^mc r4sͅj\g1H9T1rFBCZ0JPhwan]bյP5ނGnWgkuʥC?■ͮ |@-^%;x>@5eyAU954mƄWbp\!,GhD" 3! 鄛HT\6H8`9LE5tV\){`{ ꔻ@`N{9瞞ݷv5ٛ:WnYu?={%14*v e\{z?gme&b+hP9B{ OQ,mճU[`l\5zHṽu=`zrX ~UӚ gv^5y#Q(2'}CWKs륊O67Րo6kCD&PS㯳XNoQ5\8<On}թNh f ft+x2mS48vו2 )ѻ$:(Z1FbpB2kYcÐQ+Ꮏn#4wݩ/+kOT=#ʶN= ;33Q @&.֯ɗ/oD{ L=aMM=I;eχ,'d(E5^BK1gՀbAtp7oC/Ҳj8QQޢ>”YnPj.$Qlw[Dž@>|rFR=v?$ksH Lk꿿 N \|D gC ]ݭ~wS$cwT<б|"QDRMcjId*Y N5~wQHպAk3`$0 t1B(_%ZUh*\TzR׋PyRя9h`AsdӬb ဟRX| NjhZ; 'h0{*AZ+ehȦ`<r^PHm˄V}TWkO' #gmkOW.QZQ {p=4A6 Ҙ‹B3?#9Db%>OCxu'@<>W8-{j>9أW9.Yz&omC}s1e5\Z|犩] C-`.* 45K}_.]|[NIwzd 6?rp%K끼5kqAgZ 3g!BE RǕ>Cl)I]{km;sZ=-Cs[֯{l|~󪧭[OVƀ#@Ik<I{wKk[V?ZE?oxtϥA E?PR> Tk lR"7(/CmUe@$8} , a[ҳxq^Q:ZRPjVu t%n2f9ر]7~,Un6c6:gѫ +-.?M&fv߱s#zVwq:꙱m۫۷c$_g)O&&\@bd34n'BX̡1R;q"LN,`/mO䔰m8F0V\6&yhM&t3J0`g@5zzX—#Ն1oԠRڮT}V*yp-"D$ן2pԓ1 8G07Oy#xh(> MswLiw:&mH)yi*F)I$qKwN^~2I6JU`>u0P5mh9vyռ%M|Vεz0cQ[} Уcvg-3 盲^Y)Vؿ娢VԳVBa\Α.ї-&<_60¡0z̈B@} 0gI=FS]+(]` \x\J KRqbN38ʔʗ5 f jA3]֚@ZOjM$%RN Y[wzterZlJYV9q* N&[5L[2<2?Kl*}*g?je܏Id?r `^1}/U߃wyE|k4~ NT~WrZ@ څ _(Z VT%ZZ#X>u㲻^Eo2˽T'v <Ր*`cN-FK+P WAv4?JScF'c73 SRӀ\Q>j2;ⱳIܯ3s:,([.edW=s ~=; !FKl*`DǯP 1I𿐁I Ș,a8pc3X)WW`:5KQy7j$uE|pM5* `lh $J6R/#4*8BݺؖWX.m)R3fa-v4+JP%Fvځ'C78-6F @6aY9_,GoЧͳ%{#QkA6>ohͻ㥌d͟_G蓌/tk `RӍ) |:2r ⯿s<ʖ5E躉]]Zm/xƜO XR\roytX Q]$^Ӎiܠ*nR gf5/C7A5 (1Gu@|,J$4 DIIDmx8=9="zcq2wНvȅ GZ55!_u*ZmߴN3^#7$QLZu%!^A I1)91C|GDM߰A7Y݌:֨n;VBNRSq%yo|&5زgt1cL0o1Cٍe^w>½!6jf4K Gzi dߴL]/y rEF~ӛUQ@߉`1qUwb\L(bY%) ZRlҿ˪0-WiUФIS+_!y]+r=`'tv7{}1{\ǃ$ cϜZ; ;usg,kv۸U߻|ozrPQwGb "]lɵ\{h7{‡{8ֻo=`#vN_2}N$sSz̙Z 6t6@fn:6i!T$" W8=(}mZx}}5hKż{8P޾7yƾ7^:8,B7l{8O<Ĥlt jC`)7a9Jl6C/?4gZ+q+IaɅq&g w.yEZEW~q7 K&*/: ;,woܳeCk57nug͵&շ7ڱf}?uP;o>r;N}ztPu]C<֘јsUۧ. o bo?7gW ,I$Z* !N|˲f<s&|헪m:?^KgzQtc+kx>7n鸧H1L"bN65|#.hd `/0뉚]R>[K R;tHdNkVrh*<;?Gj3 d4 ьi1;^Cg&cP SV9y8xqcn蒳ѡϷ]j^ 閪8w<:ml튵ݳGVt*魏7Ϛq0Jg!=B_Sb>7LS*J&o#'q&]+F.O s!qLCDktK||4cLzbU[)3K!wY޶oXq¾é [?b(\5La乖/{s atq/RˀƓ/=V!疕 rR|BDPxt|߳eg)VA"#^A qF$ڻ"db&B%+ձa6U{nm0YoM}4Ғ|y|*I{6b =} 6d1yݰ=s/}qU|gFOS1 j~;q/^u 5eZXnKDkc`LSUxM֔v)#(&:!P UԤ:ˮ>eKqGe6(ABO3cC~QgTh&*F&ak[:V#UJ5.Ugp+* ¢*f=c(ךW1^4٠.QK wƐetC<(a,zB0V<[M>CwUc:y'܃i9}^< C08C\OPE^1sZR5Hvn}}n6mpb1, P ؊ A1eWv5wǽ# h#/_]ps3:u8ifٟ>0[v۶DY4ag "DR 9KvHR]SPŷzJƛ3в ?X§)VF 1Io0O%eœhyw xA;2ބI>gvz _ap^i5ҕp}ϛwJ9ˉlԔV4W5qH >.{C[|_B>N=^[r9^5bUΙvJڂk|߰8NgNJhJ,JA9*rDx0s{P6_WFjpm8Ϛl#)ku?!ḰГ V{=ӓi3a3 `F`vin`n7< 2n7unhC"$T/^BdG#yYl޼rU 5) 嘭C/YZ,[, rͱZhXqE~Djŗ=kqW[Y$9.v1rqj3܈m7%q\br2:.G!D8<%rըרi^`:X+r:]<cr6 yi䜂?DE;x6@KIhu϶aںqV-6 uU;V3 VZG>E ;B41zb_h {b#g¼ p9t(J8!RY'%saX{D_!"8dr50.&ʷӾ6ې9p:X qw3Ϡhu8eD07D{ s&Byfth sȤ'7VT lL./!”.75^FV= .H*^WR֮,_0.iW]ee+ܸ&wo]MP{(aW80=p\qZkք΁w3V]"Kf EJne*kT7*>q{-ȕ*LnwWXr. ҫ.z=b69bX`-Q @w?qmEp_|#KWW%eB3µ{ҷe(K@ږ ˃K{[@ Ǹys0df Q9)8{!p笯k.U }>}kk׳v@՗.q٥W&oE3C^?C?G[۷={b<}aA uip(uiW2JM_+X  ^]"~ǡ@)<MN=BóM-L!mL!]}c@ж\%:%Ko`**|3*]I˰@uXK {(|I|~_ hq% A_&A%D̠ڍޠ-hCxB>Y3=8:Y7bzS8?%,S/ҋ^$(3HݝH $#BL*f@pO UFٳ \@ݟ e EHquAo=SgDQ.b&.{f׋w Z%0.7s??~u?sȊ 'D;FFEl188:UgFͯ_6m 0cYV7wU֜'706L6rh+FZ|T~8155ipMVOKZ۲s6žbD K읁;!f I5k%fpoZNK$p܉7&x8"~}3c@qL4GK2m L5 TNy#4I <1BD,5X ay$yRcTPYLєP ZWfjzA3*SUs(go.KZ!Jڊ&A 0%Έ-B:)NゝKg u\6߸~-o_wSg+ggC.f$]Hx Ghc n@dV`2]zuܸVJ hsUW+w,WD}nOӤ тf}́Rj5NͧyO8<lH.6N;@{ È^x]8!Dh"=eN 23x,> I$,>扵pB]41+RKH)'!G,~%!z}< A &d!t2B &Jd41Q4yAI@6d=c2/c~{V̢4 WwvÑ@|']_41zJqKOtT)j$4+ӎ0KQ1sm|~2k5oZDnHg 1,:/X9c^k4yUzKqjNo6yu4vg(tN')&]tjJC!SF4!H!C3Ą'$O={bj6iA9CN@qz|jP8uMn˦{n2z$aF/K17~;D1cA2=|ɪx\T>m:Vb̗o}Yn[7}_Yj/c 7N\vu؆-5\ƭI~ĩ /,H]>|xq"vJϠ | .(D߼*+੧R\N?hp;$OUUӁzY&7uj^c`+)4U3ұsX&:tq{,8qd>IML]Z EM1V C9eV H꙾rJ XEE ֣o_rUxv|0'5#GTO|x\.PިDK8ćGKgd,Xo3.A 5 $@k37_ c%ByN;IpMhZUTM6 ;$==<RIR5cX6IQ!3;*j n^JCCYzAHElEz@.Y!ᩡlI%Y@Գ2+^D*ԿV" h2-0e򽻴2.tKUr]Uт@@]bҿk5ԥ-:TB nz҈܄ n"(E.VX䫋\I^X+PM2q2$ E)2(O\"DO}Q :Z B"g[?kDQ3[]Ь,eR*7j w킗ƤwFFP^A}AA=pQdrעļڲ33)wgys&p߷W7z0 D{satD ]3jA%S VW-80{WtNBD[|D`- BU0?1DɠXTFvKR8|dO2iMA9 6ز4OIwI~y~4=:"`h0* 64` F)br#!f"G#jS1s2_F8tr}]Fsu9bW&Se!n%~g!a?FD[&NתM8! !P+:lbmVֶ̯sYD󂼊%tH@`u* za-N2T_⾗+ZR>Y-{=MA<ɭ;S;xށ>\23 ['4'͝y6dF[Ha,rTH*OQW/JUZ<֋puBL!LHQXPu%!]Dkաm[")\0$R.w`бsZ"ebEVŸ]ӭ(8&t{+s^7{lyENK5c5*.J`sZϙmW'|/w;.Ѯx`mi3._#,9bnVw~6(b#0֟dD0Tپ0)H -^L*KlD?t0̹Ep|e ,uO =kv g8b#+6B'G|bLzpӓ ʜ%?ϔO31d~rQ|ϻ~!*LGZ<C-%< 2ɴxXnW<{;dmKQU&!h9W!sDߣ7#w_@ '|Ļ_oPF>K *5D"ђb2x8@ Yx ">!~S&JZ4O>ˑ!ټ;֗ eMkd#+MO#@ *)T=/9NW 1ńA)_$7">sZ̔JSrmXē`;o]5'\G] O3`TD.ķҕ'130#nCXoa.& aH% & )!i-{`D6 P fӌxI;RRw%cÆŒN^^n[^Y օ+p [0-XE=J0#,!1@Q8T #~!?؄~<!vCq_&`f} 󆂭t~5d&{ZpNMWd]iV\WBQFID$#N$5L ]qPXTMjVDIh>d]2tx9>>]rհ"0|fڜ ; ۬n-{w*EXP*sǎpj9V8jhJG;H[K·%';VW9hJ wTOoϢ1Ҿvire/g}}?\cS[ڲڧѭ5^sZ18x3N]3L5i'O݅$ #럍 8\|Տ,t' z"`Հ4,{K};?}͍^ge5r[<4LLuB Н/8ԭkGV$ʗ͒<pX֢c \?SP{zmZhH Zx*RkjJZ;oR%UYOVV*__?M̺vvqRc =80jY3}B-Ӎa{- VTD8h{} e9$![N;#gV[eɲ$WȒle٘blf馛N$@BO@R)0KB A84\KliJl}̛7oDNOŦt^'`HT.MҀF -' =I$ݨPWشY0V3V"ར4h=sF1\U l?|U'EX^*ՓbhV |(S16mZy|^v'`K€ ,,,/_>_G_?)egΌ1(; xϯMϯ}Bh* !(0zOެGvJJ<{cy K1qA| ^t@K9 #72e|:?\}c` G0%S вO?\0=C}%76 OuL:{gp1`]LKXcr,w'cAL /?d${mX3x9OC&~ϜbϞ/N W {C{m߾7[5ƼsO?ӧ,\x]!.gRښY:*doarrs3[{VEy>v[ˡoXM@Z! +VxV4Fxanwud<,>8d7[1j:pBZ~f3B5S~VrnV n# ~0,/x聞?^ԙ3e /]wuow$3gbj4ר7!*FyjgQ;9 ?2~~hўtO:)t='݃==CuY4$[:, tBoEԘLoHMe@-5 ,Bo;{q^̍,f4&vphȻv)"< '*|0Nز0[JnEE.W :LD.D8ߵ?ODPI1Wes烏8bavzigk6~[~΍qD >MfU^OM8Ru6.x~jTAkMgzև:j崉aU3iPRtLUxY`(@|R* EDzgcg@ 'uA`2+,vЋć/ DtUwmKbI"et'&d{bDrRINf$U`>[2ThӌNՅk-z*FO<(:sXv7b2uTt\k.7ǻt(?GC߱7N95Ct%igC̉gS`/@χU0>`;lc(|0v0:Җi#!5a *:0,O <R|MYJ)llj*SnE뇀`ODokͨCb +z%089fx1ÆiaPp_?=/!Uz2,lOZt9@`~mnCNNPf.l/IMlLX\ܗKj)Eu%u*bN c 7kg1(  ;p{1-g1@\2t 7D P4-oo')%z29L5)2<:B&):O¤T]EݶK~M [uN9\[F_)6TVpHtKu4ӬV6_WʧU;(+4%ɤfei^oH$S;C!; 竭>N5)D{ʎ! K} rљyVЌw1Hde;N \DFChWvπw;ty9rӹp \;>#~`)ahZbizYjq;~\lЛS +rjBkoPl )^NA]'ޮh}f"c.!ok岭o<PB{?L'Eԗ D =]*.gJŶ}Bot&& e\E^׭{/NK޽DX9#^4xC_ jK"wCjM{.(,ր+MsQD QcTP^/4y5@^+/'w4} Zsũ"`W% yGIpC0:E?kݺYɎ+ U"5U@SxW.0pKaX}:]zInN6C̦߾uQ'|䘔UVєN=?v7 9l&mONb{#pG^]/ SJVN\*T-@vfVO!h4RhtLaH\d,Ӏ"F'aKDPo(z p=cwd7b]Z8p`"2X:"ŋ׃'H-2s֯{/Ǿh{ThrĐ!CT0b/b  Ԝ[9>(^0atvav؀ńQ1So4Vx E Nln=˜zxϒŒ;ؼѤ$. )_$1(}5$ӊEP۔&~F̩8ޫ`(1E(ѻ&G"T¹|b,i((18W0w#BSGXK{_gS.ф6g?{i֛뷛⥶v=vlTRa dځӖȔ \v힁UU7V͋ *5}$2uC0w҇AåήCvELSY>{4&~MjF %ۇt_O\',}%l)h z%ۺZyIF]݂Շ_'7~U) <2N(;h-Pq]aV%?yyNM َy[{[h1r#}B+:>̮ׅ N " ܖ7Aq0t#I$O*}~TwDE 7^ ٝ#D(%M*6X>$@p^ ") zAG% b>>T^}; OǘQ;c-/ ^#7wVt s&G'*-#צQ%^M'pc"-W+*m9zLԎp힒{ɑ]}}(b0};ax]t[)Q@]gД vÉ7g㮆'fToJfȬ"Rۚ˫DŽ* S?u=95jU!9F9j.4p|P{wΔ"Nz(mW`yخ`ŰKf?~Fm(ȑX0sr6D#P2 ='HBL"-0j0dNG̏rF=/tu?"Ju*/^]2Q.Uԩ\|OYw/^p9ߡ%Ԟv%( -FʋkBeNk=vuP37g, }QįK L Z>:MN⏆/"[I}II}{R…wu R_KnxRFmX`HS]}Gŝ-g(KqAM"qpn 8o|5Rg1:?M N 1a%O0<;,A[w* X '!(=i}&?#^$ ^2)m4sDE|gPb2Dq>n.*?W̸x(Ļ8sDSD<\"53PsA907@R Fq 1xodYХ&]bnʁdbzya(rj~}@8  >>4J.]RRŨ 2*F A6r]eH}KK۔JҡObƆL G hN'%+Sx̒jU,V/}2D5NwY8G,JeAh*c幔‚wޡ.0{DxSfѢ2w$F-:WY\D,oIyךnNI ,i)m#YǪjU-3Y$v%%3ZpV򒲗.#cNf.5 d$C},KSצIX$fX͊DM^uVJ0Rs0=t@kToRZ$bX*eVEWϕ5T0Tnkޑ 7&$2iyThF7ubqey#lR*[)IMk\a#u[N^3VqאnL(v\fTGQI7p=3?קw(snYISMg''gaFmL*1JJ2U,O}}]&k9-Di-%}jS*0XXWb%cRLR)$MNK,NcإUdfI$DĢ*$R fLMMuLձK7)lJehZ%V1՛ ڒS.u4elJ=RSj>rlڮb4%ǎ-Y ]#,EJ ؈]?Sgz-K=:b+ 4A|hFCR("F'ch)= EjjR7﫧W*JoJL2lXBa ar:ZcůM?'-V xn ]mPQY 5eS0 Ư_?^:w.rMP ToܞL"ʛ_b^GS7eZUd lX>ͧAGM1 0Bǖc(B0lEguK Ppl G»vh[!A9v qo9b\#}v@04> B4ZQ)?ݘ:>uX vn(zHE~Jńs(7Pz Xx@?n;E)҃4EJACuJyc>,FuUiZ: ^{P?cYոOBk3Xt5PTErׁn*~)pD M0;bMA폨p[인ւ 4]Lvky4a.YB\UE/5lbK2#M%PJvWθnpk'`@ɴ`iʌPW8Ġl%t %ʌSQ~Vpj*$w^#G1i6}"vw"bzrMZښ]].?+;z##Jz~:vvۻ$31~eݹ+tJG;I mWyؤqk*dƜ^VX_<:7''wtq}aYa#TH 3:#CyVZWjU֕?;AY|.d7R]&ODh<*z@ i݉AwNA%L @vI0c*T.39R[VJЩ,՜bM1WR ߫>EƉN, `õ>U8z/{23Yh확b^āpQ{/RX_߲d8Ȭ6e;зk }B rfq HˠfŬD ζ%,Ĭm ?sx\j\WWUqCS~mlY3M>qs3`ػoSL4.\剶jlu[I77쵥S4m323ȧꑳlg@ ͢؏1W%`T;ω ExCt#8*g30Gx{!w>滢xi$plɣ` ;f7kAfyh3>>GU4VO-HM֌oK<')m? %{[2p;>κK>e}}ڸ0D2`TIHnP(A!6Ƣ2hk}U3Yެșt#d}s|'s|\P_ξGփ$į8;BhQ",Ƙ{ 5k'ZUָߚ8~)A^R--.fGWԋZGE*.FzӘP.$-J}&\VTTnv?a/'n-{4yʐ`ʡ5e9<4eU斕dT U6?AX&튨Řf5?MA6eb$d`t%Qp3`sb3NnMSpU5G [6CnqҀ 0y"U(tK\SR*1S$AW~gSvtQR[ %ZԛgXo3c(|:c(sVl` nHz*_~uzP5X"ݫ~P]#jDy%Kj $-v!F~32ܪQ5`.|ap>nw/y#?X##Jw5( Nx4슩qV^=~R'Ҫe,ҧXM}jJ-)T:אw3rT'x}scFy7k V0\SM(2@u:-YzǮS8W[4;0qƷr6SBIXqLt&t&#M G#&t ڠ470݆IpX2M LuwDo2` %\7߳g ^mlmW)sX7ao`BfbnQ1J)?FT7ѣ;C6XV}EBq:ٗzhW*S/'W I~F,앀 Ud A:ɫ+z:b4'Ŵ؉szkܮ.08q/8kYHE>QvŋgO~aժ bx.쨽'TY&7(w^;[Ս$\0w/6p'">@'w.XHZɋ(jXyc\X{'Dy>z-zxy>xm˔ۜS^O]Ђ{E&``w)+ySL>cua=$+h)V,7RH֯a=U<35@fF9Ni@6݅LDQs-cr졂 z W^׏~чS25$Z}݊#q~d{VF^ުԚYl&'Jk~O V{W|šG&$d]8/vDj&7xҤU떦ʐ3 {W(1O-T}2k@NH:e i|},Nj$}^\X,_+Vr{-sv7d/zkuxC499/%Vϕ4] j3=/#TQcϱͫHBw _Ee^f[џ3 76N3w\"R1v/}}"O{?1 E>9|.mV 40 lK҇k|2A?g`f.}WF\[XQ:J1D~NN*(|C^&@Gj1:;kN\ 0ƅfӨp?$0oGG߽0Cは/zF4X~dIE[.9љwI` 샧'ab$~+/m`.- Qb'͛"+6XJ̓n+fA0H+l_sʴ!-TdؿOdɜiLjNqJɘeO;;%G'o;"),=K ][ g|Mo<< 4/c遷xj~ܱja>txkla^3qniiЗ1MɎH͌و KQj1$ag2g#K|!yeDQLxX{i4{{VNl Ѩr|_IG$iu,N?TW߂bt*xAutAՏ7Ѐ \84dه&I~Xsul0eZ~rsUJkG )2S~mVyn#~chVA+c%YY Z!W1tA1y51+AE8ICo.V3[ '1;Sv2Q:pؽ{/fb/vܽ1l^:fy%6?a2Gy8rmngô0.ׂ~XnjcpD1N70%p{ UWܥ҄oS(آ  v-6=C=s"n"^D͐8'ݿ ڊEBTPAEU!DwUIOep$FZo|놪'܈s!}q"TPd(le+ VW^DlYs:ahI`XkUq&HIR& 5 R r#F-M>/?}DLeJ{L':y!=lgwKsC83jwV˩}. 'v cU Q)I{W-Ly}0W_훰S%  YIV١gD7;;ZX4vhH;n}5>J13U!P3xd}?1mډwER`*A 36?M~hIxY= 28Lq,6h=΅Pt{k0f7?rFR8`vG<ؔk TzgL+VaLwp # &ɼS,Y~>o~3b!wcE. k,)O>e 1z<gT%5" V*1'_nFBQX !I'P!q`3QltStb‚ /<;ɖ?&%yD,eOp8jb> @Tﾶcη歿Zyw~?zEgZsq snݴŖ'2;͹Gz,>#QQ?_bNɆӍivnjj~w`GS^`=O3cM#!ȧtxۄ~.k:D!,茮?:At$6p9*> bi([nϠA#鰺Ih*~[Dqt珓j`my. 7e5/6u_T BXa ?-t :Ufr4RJJoE--j#髳,*v>&$Q?㰗.;Q ]'׬=f͚S' 3rxW˯f8{)VLo0床|`;& ޱ~Riqì^OMNTuG:I.AR(_Mo=pNtMj7#~s&#K( =q0:]pN8DG^>HY4׻]F# ÷,FhLuO'zܴ%*cvvd Elg:1hr35kgFatu~ˆm>џz9qLI)U<gx _ifmљ `.l8 sdg鶍yXWx6ݴ e}ư_("/[0:ӻއ6: l6%P,4 P8u,:N/6Ƿ7.Aߎgd 6{r0x؋LF"\b6(%D"`Fvpg!b` _ J*eK83|q(ԦJ>WR!&)A|r*2H8%ݠJe[|MojP?C[8ra93{cbqo5&0 4%eٳw<<` [S7߇?CӞ̶{"yPn)hAcWzZ*yb.urܚ[%XqᏣ605n'Ny'ND~ ^%s%藂]ML cBuJDO_D~_8;U\W#'soMgC=P9NWǐu0-ת׶Nnk9tz9MF̍("QIS?E@!&O">H@!}Z%? ? qx6rD.L0"*r 8"GO5E7 9?Е)Aֆu)~Q}@l Lrz\'I,\zӷyMڞ0`V+έxFGO_C?ҭm 2h0~|lClq槇L?dnOuD`mptGDVf롷G3H >F`h㖋mpM6\.f/ђE8 :|12ؑ92^ ԍ5k F?pA Иwd< w=6J@l^}SCGmr f%[ϧgi\ [x,ރ u *Ժ0: |WlrJi6}w ,i2ִi& ׈y|[I0C^ymr򑯎i&"Hm$ۖOvyxt)^F( buroQ i7c#RsMav))fDjL(sb&[sdTb1s_7牀:U_UX /ϭXqX@ Й[FAQJq#?)ߺ|V}+-H6aGtSxYq~ㅰVjhW#r#1!w48Q{n/i=( U-zFnU5˖gRqw`c4gej+6C9 ein33Ѭ1[wc⭽ҿˏ^.L\xK1ms\rGU5^4Z!Oѷzh3Φwyeƹ;R=}&z(6It} |ZieݲNˇdKۊ8'slj 9I!R jp%p%HZ޶(hʎҾ~ߗX;;<<4kA`6KTV2^4"?K/AnyܵE!JbG*/JZX?3ҹO;OCBp`D8or[Lf5~V;>QqJD>C\K7]A-aoy@] " ;vsHH'&!zXX5gԞNpCMN14^4xF~Fe21)^p?#fJZRԙ1]顕j3R%i5!̐?B{WJ-sva{> Zi9O?W'+ӼQ J0]zLBVQ= > J}FS*)ƉFZ5˨Vj p4]!n sDs43Q:pӞ# 'N%;g_= .2I_Y-,VH>{LBg6ep;kJW"u.#| ]H(PڰFtoQ,VXSTfAápuN\[;olBMEhZة>g 6 %ؑY$h0ggyX$^TDVÅ b$RrIh;,J>`i9 P*NJ}׌.GBei:㳙CB01Z[-OL|9uG̘1G\~;]kLCSYbz ɪ:QRnNH_X>҇BB),l}U1ƙ[ jV]Ҥ]/?ϝ8i ~%I7モl4Ub5˨5Q7Sߣ;{ȅ0N|v4-]$eq2\Ni%bd.3]@8m@n|7\9+إ29e9?G-n@@RHTlI[RV w=bCA9MVꐗ#bPƝ &bf.A@c5Iؚ =>,/eM|ဌb7dI~ЌӦ^@5p|n`LZAŦ*C}d.y<5PU=kR,5D«2 +g/ G32 S}r .qnƬ(^*pٍ9=\<,Q?"|p)+Fkrxo>.|4߅Ad )S:ƦI|*Έ qGs6;^O~+r.uD 뻐%WCAQTیuրW3egչ+HD))0:&p L Nt~NmyFyOs[ `\ky;h_e0@.ӿx9? f`/Z^}WBHRo7z`@Q4ΆбLwl_7^=t=SUZ7HGqgEGJ}9RcjB=)Ĝl #=v~xqvwoDk(k. @@ºk!}!HZ;wg_8}Vܯpt>׵>x4G;r>p<8"d4\:~FB/PGbfUޓJi8ۆݹuM5|35.axnoX0f1K4?szRG|{GgjCB*:m6H}Wu{ˁ6֒B-yC=Jۼ;&[8ի4|rq^9pH/U`mP<=cxOAX^kC]MIh'P?LqAC`S6ħR_h fA tL2jXBZ`͘piDlJALxfˮѺԘUА1 3CO9Ka|{۾Tz%E"˫T*7Cxvi2Vd9'a=zˣVIxF:x- i !p;m/Yp|x(~B%W~FA)1S~?E4=KR0j*^FR0*9GHg PR ArX㲁xk ҽ쯎[q-E%C!P L4"zڲ\̛_L#e"քDWTSҁP)ǥ `Uo~گ9,O`g ^O&WK50<0Ħ]oGp + *HEL b5pdL_RӥJ`wDcCl  n%-u'w8_iJqXl0kD>%K>gg^Қ(a 󬬔H΂l#*~)e,3L],.p`v:W62|]ţ^J+qXrJŰ/ab `ݰZ|tyֵB׭Tupm_%mzcNE(OD}˹ 8%ٛ /VaMr8NJ ,3R,w_V^Xk a'VZ,CL{TpU"2vh{^scS*1b#OQCmxf.{@(*Fz孷A6/Vfp'wG`)gI %[ ?hN}Do.ۇ̡cܴm}J'cy *2u=/6uX8hk lleTŏP7h:xXhxQƯKh :a׈~RF% 6.x0Fsu.VltOa.`Epv:VvqdE&;HpYs`Pk3$7LXʎ&x9ݾJR35\zMphg>0[Ġ[JNMyFYԏO fNȼ믨Zwb!;;kԜ9_]Բ?RpD,V]Zn 6yA;SkWi` @]!teKm&N̈ tpT ڄ?D!~mR+u& Z9"O "FBM&A J&PDzP_N"ce`:PK'  `. c YDDg:1JjrQU yH"6_zH7c aO2is+szDm^uK~ I\J lذSG8ӧQW}{Jޠ9Q-ry!pF}FKA P}%#2mW2cMK~??X͈gf63F{/CxU~hx_D0 D/(g[~=jGօFtZ.;NX8)˞93DkkpHα6A #}w{{Nޚ@gDvYv,[a%ģ5 ;nPs;sZ(xpѐ+ uG4߇s>=%s8Vo~Q:Ot?5'f=tgt%_4-9 \GpOϒE7s0HuLcW@BT]nyKfm-1V|u+fÏ'76g#wv7 /F)ˇ/Nw'gH\Ǩ^_9]>3OPh4\JnxIA4]:2p97i4TzYSFMa,qXKAJ9%+dDFرDBFt(LF_2du"ၝE9*D\5A5ЌoaZwmۛF^wLꛆScX6K+5gffgUߛvKsn1Qδƚ*L'S]+ ~)WOK%W '-3 YP- VhU<įV-"aO_*}3nȽ]\g=tr ?|[s*Z9 7ݶwͥp|xbhd}-P*vsӋ+I4dʢ|ciS;<|ʊ}帤F9}4d^v dy֨A2 -d8ߒS80DeDo[Ā=9io4gpìi5߾L^d)LX&s7tsX5KIՃ<7seajEo9'F^1# L9>kGYܝf^LMR_gSduvmySgOOgr[SFL8JFQx u6ʆez>z7Ʊ1ɰ]5CքяҡLؤMf)7&\ Cʓ'kyD=X!.MXuutpsر^oS*qT8l{%zT TOmػj:D.[>*VRnBU~Q{ڞy&W(Z ɮvk: (R,P( 5\T:%E5 k2U::fgR޳!Гd8m/St=Z `I;BVUafte 0)/p!cUJƧ7ŀ=d!]3iu+*4ƀ3s$\(Rg EmpX7yLCZQgin^Rvzi{U{|*͖::+wiEHaWq9UuOQQ=>mLi\@WicUu`̶V^eL?UITch|58rTVRmSTQ+Ř~cՎ%p"覫!VS`D/\d߄[ Vy!UEd…[[Fص¨ACV<4m,i)C;wf\Nr+K\ ֊lmN}W͠޸0Ӯra#2uSǼT!z؊?n+ks~WV_Ww>ҁɅRSI?;|Tɢqj5"#k U++A14rFty+INy0MYcXpdW>q++Zbmbilˊ]m`A Z^Lޒ|Xb"ku~pt8Bfx>[&cf0{ ]3 ̟y~&H3P|m][`7TGYrfn,kfx/oK_ *{t@2#g=/{Lg5S?(lK?òc!_03 γ%  ɰRO׎- Sm r;< ɪ)1Xɫl ̊%"a  ΘG՞v'bXZȝ܉l fm"&}GPX9{ΰ&ߐRasfW1^|q4t؍Dӻ'w'wTREdji}GU7c..}!.zsEmj1ݐ=0Z,SqK+J,q&ʹV )A{07Ы.B,=1ydq޼΅mIƣ*? 2|*0VB'G!$hBVa{(HeRzq#.Ob{o2E+RGqaaalZRJ-[~[ٗV-Tl"C",zw0gѬJƩ7+fg<Džo*pRGoҟ&%c^~[$[⑩.wػ<Gwąu  aDZ.n&EuFC~L_3ϐv5䙾/\! ̫zBkhy8! GJR^ό*_4>Sk6 A \6nLz#UCر-Wwa HII? 2Pj&%v sh1[M ћr%݈$wHd~A7ś? WaºG~*|M^nYRo^zzj=#[ۀC^WbHRo0 sdy46~ZC7{Ɨsݳǟn 8d]IU֝{6NJgnys]7,m9F7 |s湟3i/峹7fe 6ʏz&1>+aK;i c*kپm۞Ρѕs0HzBτ =gWVOR>#9~Vs#y nIUMR<}H$ո6K.^P}M̓XO__ ,!0rI]^H@Ld\LӤ)5mbIV-ZP+B35p%oNਟqoD 6q+uVhYᔅёBVӊ*b Kh.8̲6_^ddyԠԘ]B"ђ),i37ܿM:_i~X@,-Ѭ,}pa<2 8<|{ޝʰ~Ő;,j^-@d.=4cj u V%]8})Ϸ$'*K X1l8HH̛J41E!gy,U=U=M5账zGV!=G?l^3B_nevMIYdkۖg5:ñlfpl\C l;>mJ_$\?7wj=zŊq }Lx {oFQ.j.ZM]ImnvQ{eW`el|cΑJJbLsIR0)- ;UM*C*.T]< z]ʗu@VޗSޕ53J'Grd ),ꁪaWwiְ] "Fs-aאbJ:Dr1I'.J ]-[|:j6"yFvju/cYx|P/Aޡ\(.]VH!O6qrqGvX?$K q3̘&丣߹|d:dnI&.BZzb@ &[1㹞~_OG>բh^Q|w4]`]w`増s^toǿLψu)VBlNux$V 6}yqc<$^GVM)$Ue_y[ń$`xK)J_Sn@6zD霘1-=F]` P{7>0!Mzm)?7?yi XyUUêVl9U5Qy,4(/5\}?o&,{w)3]:~@}.m@k&^I'%ŏqi%O(5LA١zjq ~q U@JX g[_REJrbrֿ|v e4LECލf ?_^r9-R7~'rfna@S4S`@4z9 Me`(x$ [vrQ p AW_v.L1@!Cd/;)̡X?x{;T?Vvavՠ8mrqFߦt>_A?P5(~N{'\:o_\zʬc<% }[J5<< _yR6$kj~FLtɦqNDrÄ{ x!E:0r D8ҡhWaY[pq.pQrFv: :&!=QΊPXǠ&e":آ}0hԺA oU{6:+D޷32-my,ͿH[>`PPtQZ8f :gA QV*)Bȃ&1^o)* kVy,Z/XV˸EJ?mN+gjGlч| }kC_s&`4l-B!W;ZmH5ƿ+qJ(l9@ gQY9O2]:jXڠUPRbTyq[T|,1%g2WZBbhuaI,{bA1٪DP놜z|$X>tBwʞNjaNn6~, KڠuXh}y=HЂh$ATgwLa엪͏1axr Jt<&5Q)`6/4M%gooj, Z cMZpLh֩gGdWa75Ł"֨VFm :jYhڴi6͛q4eMݰn1Bt\T1Ux;$1HkhbĄЏH 1S[.s Kګd:IJ, ~~=8pӬٻddx &%b(Ns ZFsE=Xx-9FTx ʡ6usJnԬ xO*(^Ffа4JH۷}wI@-mR硢',(1&^D +1/J_i^F"5P0c#ۜzw/]=s@+ܳ<4-#Hw4fEEixk!+T- m5_Vq&[A)fӆ5,(>,_mW` Ђv9t͛ Eos84*O{lӧo LjF/x^ý^&SP8>A&::ف V7C3!D6d!X|y:E_%7gk]&TmcVO#P_3k*"_/o>| 1r'X>ҧ/%Hyӳ>Zj4һT@hnu/~LyCaaU4Wi@~dyGZqi$ݥ9pC@&sr<>K1ѿK;JD,~t&@84 -9Z.n}:Εz#dh! ǥkO[:!]Y) tdOrrvP2+2*TEڄUjPBwKΘ =|Ǥ<3n魠*ڿfMhsX>WgON'$u7tAұAqh͌̇D0'*&40< BXFFV}oq|߻Gg^äkשGNrJws`ϏUL:J^ ck@ }ߓM$?t^"YSN[yļ+]p}LFY>HCAqpyM?x MzA >Dm7r)y蒾V͍l1ύ"wm_\s ɬ?=OMfR5UC ԫ{GeHa[y =sD RUW%Rd1'=uR(/_ 9ַܺI "%;0ݎb+MG`p\ {?sX΁RKV7M3y> sh)wdc yt\̌m7x5~ngl4mp‰Ѩ!k ԣIdBG4CBs5COYbjo۰8=vMa./lnMqfJ,ias2`0:{Y),fs~vAt T12?+E1VhcO=B@U Xy$c9h hׂU ׇL_CAkHq> yJ--?I'<TJ#2v$d1h0 Y!}=nbJ0dN݊Tl_9V9Jkm{\n.ӡ>AB0fsfX |,c:k;u>CvFގsZLWT xc`d```a<=|EdՓg_(ETu=O'{?Law]+tw^nD.}kzՇ 쯍U}ɩo9:΋;FШO;XSB[xe#2UoاC??✼ 9Xz{w> O3E*De[=픖wE:seI5oÞR݇G=SBPs|W+Ⱥ }[0l]1V~ٴFoMr;'O^gLyhol7/ӌrq3}=vCCHF=ǡv @ilr.r4CүVldV¬L[eN0WԿoϓiosWwz:zQYY3RyK >?+#B|Jzj6]@UD-Pv>n໌u;WOMeFYг\l@*!u?'m '18 >wCÚ\fMc}~5lmo,.}Yr[Kf\yBGyoC[ |EE@ \}d<z/ |x{TgN.iBdb!3iMe$׹4M='4ri!e}Nҿ1H6dHAT8T* HGJ%K^ 2 RYHYRyr*УBTq"(*ѯTDSTuT-Iz jpE/N:R]ɕW gKnl7wSGG{oxDJ=é =Ż7,5w0@N386C&9^5;J-H~i >j^+zOPu//wR+=q v@GSLLgr _:KຈLzK[w˘Yu:sGXK˟Qt8;*3 s3=6(T~G77L4YCٜ9񜋮z]%q  ϖ1TeWe}(=drwsoWse \迎$H} nEc2pϘoKS }woZ{/o?9w*z % އaa/G|wywᘋɀu}є<m󐼇O~p)>kyg{ü,Ǜuβ(MxjAƿݤMk`RADݴ7?MhbW6;I&avk_@+@Uo'cBMH7g<dE ,p?-QvZ^SJr /gp}oyw/xGY:wLƜle>[.1[.bq- uyזK輵mwfyx~bbЇ1BL IvQ K^Ik&LŽD0fb`0(JfRMdDI/DK1Z`*tMƬ d.do<UڨUڴMr;gzpXmk'F}FUF]=j;௲Ki"bD.xB$dy&_jQ>º\ՒO-9"ZmWj\DI滎SidIΩ+Щ})dG»2']ZJZrl$;2VznM"L4R+_ ek=~^^8D9yWy1E& ϋx}WtȲuUb'X̔ؖ,O`ݶ5- 0̏1}̰Ls~N$ݾ}oW))L?nJ].ucԭRn4d 90 X ư l l [ְ `{v`gv`w`o1P `8`8VL ¡pGp p'p pgp Pzj4Fj-hClX ]p}p5C!D0· B.KR .+J kZF n[V n;N {^AxGQx 'Ix gYxEx ^WUx3 o;.x7 !0 $| > "_/W5:| ߂ow=>~?O39~ _o~?Ÿ+ ¿/0bp XaQ\qčpc7psĭpk߄v=;N3n;{^7c XAMN~?Ax0p qgP< #H< cX<D<):xgxX:6 [ڸ`袇kCpqq-x^x^Wx^x^7xތxގwxލxޏ>>O>>/f| ߆ow;]n|߇Ca| ?ŏI~? E|_ƯWku~w{}?ƟOgso ?/W?_JQ2i TaQZFihcڄ6hsڂhkچDv=@;N3Bn;A{^7CST!LM~?@At0BhifP:#H:cX:D:NST:N3L:Φs\ydQ$E-jSlZM]rG}rɣ5S@!E4G@Χ B.KR.+JkZFn[Vn;N{^AzGQz'IzgYzEz^WcAv#(ot?StZ~Ayb: nN/vj DUϝS۫|\QHn vr3ot<ϦjCҾk5| lIuw9ba G10竖N^O踍nXouܾ sTSM!ˮnSV\ShKѳn~mX=[ڡ؍bZGNXv3Y_sT+N _L:>WGAhӲo{ NwG[VCɩrs#_e=oNgy5YVS&ufLD T^n5iY|^~Hˡgs;'MI#I3>+7A:p}=[|y-N*y.orJqQYX;(Ck8>koqDWpd5E=qunk 6t$z"cÎ|١(S cJ)0.Geɔq:-# $ Y=f f-YVtyXKhQ]ԗH e_`~(5TAFֱQijhr&|`DC {nA9YH61G&Ύm/% iźAJcO wtCŗ^l4b&ψ8WV/g|%%Y]%Ԯ{M>ɏ63Y 8Tcx7V.M\7r8G 6CpWlЋcS\Ha /r6z#^`ޑ5,Q!^ߴ]&h#*ZL>K,GҧK\w>5]-2䖠qRs#?Xb9Vq-ˎJK! <= "4sύ=qWv/TKkXedI$9GM7\@&SJ5H⁚+C%)RVU)&E}Uc|8L h,]M hR@dVui(KQIf)EU )4>&<и+RRb\kӵJ+ $J+ $0, ʂ( gu!в1tmZ&akEX+V4tV !6dZC@ 2dȐ0a zhL@fϻ?PUTTPUT*4US^nHKhĄ EE|Q_TEE|QĤ &!L bnb܊BLa)$EYU)&)K2!0XKb C,a IIHJ3bC` 1!f0 3bC` _FYeA!0ʂ" DzC7DzC7DzC7*0!!!!!!! LA)S,z.sK"!UAT!"!"!"!"!"!"!"!"1)DC"JU۴41kƙ")қ:& ]2XbB 3Kooooooooof)Uzu]uYzRWzB׃VzJӺlROi);y4ҼSwJNi);y4ҼSWҴּӚwZNki;y5ּӚwZNkiͫckIҌѼ3WGؒ;yg4Ѽ3wFhY;yg5ռwVΊS&5&դtVj python3-saml-1.16.0/docs/saml2/_static/css/fonts/fontawesome-webfont.woff2000066400000000000000000002265501451074743100264300ustar00rootroot00000000000000wOF2-h -?FFTM `r (X6$p  u[R rGa* '=:&=r* ]tEn1F@|fm`$ؑ@d[BQ$([U<+(@P5`>P;(1lhԨ)YyJi|%ہ^G3nڕ ͐Dp\Yr LPt)6R^"S L~YRCXR 4Fy\[7n|s໌qM%K.ۺ, Lt'M,c+bׇOs^$z.mŠ h&gbv'6:smb1بm0"ǂ*Vc$,0ATPT1< ;`'H?sΩ:NDI$T[b4,μ｣bl6 ILi}ی&4m,'#ץRwbu,K vm_-\HHH?m 9P)9J$ƽ8~;rn=$Nddn!';8'N!-Jʶ.X= ,"`: {K!'-FH #$~Z_N5VU8Fȯ%Pݫ Cp$Qrʽkk3ٷ:R%2{ީh%)8 ILK6v#,;Ц6N2hv OOt#xTBfq^#?{5bI%-WZbA ^1n5צNQY'S!t" `b3%35fv;lά9:jgf?grpx | $ eZ($w(ZrSv+ZqMݙm?&s[tSSj9?| >G,bDշ^^:l3NA`5 26LpS Aߧ/U ֘'9\Նt!l PMR9n `(@ Hy)MdM 5ԤH'ґmSuo9 1 tØuc@]KRbNv("y뽻{ cscz&p5,jn kN!.n^Uu@|?v>rUaHR ՑI DˋQ~p ܍;;nL$t : hFCYTOFNN~}1"`a(?H \u0LԵ'͔PbnmOJl?s0,8xBBF_RiZ~e#jwhOc*&F6 Yq{}?>u.4h%g`& )R5H}ˤkܩ'JOI_qOb'HǟBYEM6v5NJ ONF Nx(1:\߫Ckcb8Q d[L(el+2u-a֘d5;N$"HSFo2i"\h7IfN8qx#v 6um `NM-J\FrDZ0#'ꥈnGjLچXʌAgYs*Y^ٵ;"$hb=ϛ0vH-.D܎Yd +^{Cm,@N<.VMS+\D+R|6 'q\T9DX<$p"酦$ҷ ,psTbNkI_` FWV%w~DԐ*xiy[rZ[S%Gs`F<ㅣ V+!+؍9ykfb82s}l;[)e$Tk)v9{uut޳@E>|C<\4%Rv @׺C8\~)#k|.ao00Gq0%hp L"+>% ^MˊNsq=䦆K4r-*%h#%;pP馔hC= &)baKL@t!~2S]rYlZ63ўJoOV;h&gO5RT/}{AZ&St ͯPC0D,pbpзz) ]I>Q\Bl"^3R>r*C>xPUz}Y=̕}ж 6-`/"H o&DI0E2Xa-{5< ,}``6jiim'w5RF,ч%SYWh6L_i샣=i13YI7NCpIĔ(r0{jrKТo)l3naT1\IE(m߃Dle$ÅwXU(@Ma"n,*vG̨x>G Sg̉"Qvb0*zPEyɉ?7$ %GpdY&f!a6|);u7#34mJij oOpȁv8jx(K/ZdxŃm7V_\fL7 pXzH7-,(1KHbe,r-pL3=T2t2ټXk:Z5spSsT:.]D"@-Ȇ!A2ɶ-F}˒2BǃQ)tç|#4|\㨀`fc,#g1:-ty ]2Z~.)nj%RK(y`8C֍zK-N `^+n3ϴT3tQأ4<>:J0È%ݑZab`vͬaT/ZaޝГIi W1_>)H"p |7mF^Z~f0J^I3V!{<+OeB#BcjL\-Zh[I<qv~k]GTD?S/-%ݒ7 wi|CIqwcWx /7xHO/o]G]y߃#7b$tR$ ]a7FѮ,n!rI|28x6gSh R^^D.xMMS?漞'G#~+v4d!FyT9-fVa7hB4,2Ɖ&vTHMqp4?R\Xa<4@MiHD_ EgRyMlTؠJݮ yc"HJ, 6u/ڴyVnJn۟H\PRBd|4_$k.w™IpS$|}j9m|1ߘn9395qS|xW9BVZ!mK/Ln;iu$*t3Ͷ@}B{Yԑz2Ju@a\MR7odze7/$4]^2kh$=%1IB؃ H|N.[M\ Lb1Mg:NV._0,+,ht7l8s~IV^ N˼Mؑjك- oܮůQo[mj=rm>~z4$M}z sh""u7V{RûݦO-D9V٥gIʎKLg۶BTP'K̦ qW֒3ep&ےLhpNaS w &;e(,-7vx-w$WnXUt8Y?KMctY؃p*Շ-БfL|[nL }4{5頠3᧌ n$$,+DNԄ-HV>HOs\-;W6NM8Fi;7k26%֒a],:!ʲڽE,{U nawNg.I9r:jFbKΨf)*cG5-kb6UЩpZMO`$WDyA߻[4aJ?fD?=d(KD䴱:D/[#$A #KH.:x?%Vr@[B$}coS6`LPfM&ɔA<:vÚ Q~Pw[+`+j V+R*ul!|+'KY66_ud}_[yuۘjo$Y=yjRi)bԋLaD(XUwIڻZ$7ڻ9&4Z'DF[N]~dD?VQWͲ}vS>Nm+SqHaU!ΒWb_+UO]^l59 @1'A^mo:9ףs-N:tD-zkSja4rczFۻ ޿xv7[äC8#7p5+ ~*bJJYzֳw+-p/LL[cgnlcaPHF$}9`\ 83Ym1b>~ƽJ؂ϏyBs="f(zKM"H`wcEd:b86(9<clݘ/kg G^ESE)5G_^k߇ v̚}T3;6 WvTCP_k._eєNJL{T!6j>h0 #[㗚Kz,!32:6d>himE\=H Z+{6@Wʯ&lC',rX !8(\̭2-P8h@C4 <~Z7j%) eeFpZ'15 ^6B3nco#~²qR@!ա z^Ks]T@TNT ,S*@7CīɅLiQN, #:RѪj91-YPN¿\&yL8ӹ&0cvƉ\JA;Q;]IM8 sMf?԰Irr!K9я8p}Q콍g-*sm~XP0dM^?DdIm8eCN}cà٭$s7ۼ#յR{b4vMql)vOճjְr1f4cs_%v%lKZNi+V3'~NMG@HBb+vVFq@ݱuKZhp@E0uaSXdUK}ԯ8GXKiI% uR)EI-ږ8|1GΞf6Ȁ=!KF6Qf[X~_j\^͋^k`DsG]~㤛yo};+i%N}Q0ԥUu)M[Z`"7 ?/[C{l)$Mr|^ a:"֊a l>hya{2>CPL j?ntg]S{UӇ('b'fg0ӃLPAMtd)2úY!v&`o2P[ aޔ5 S|#+7J #ȸ_dU6#VDB"K|)otkl,lU)ݹe5OyUAt2_ n53e*1v(K_HvVʉ3},ACUƍ؂Cuti-]`7]R !zsNt&̉̄k)SL̹y7$ϥDJNd"9 31 IZ(^( lw6 /@YB^}OT~9cc]{)}D8${yc,ʤ{tAW3zHImD4ܤUT3dID) I۬.d~[ -K^2Zc 8u,Y^\_ԁ_+cJ$\2:ZW bBw=[1'NYVz4;(fzNUf(p֙!x#L=#ŋThnba˳",T\o!@@sN%| tXj j Qo5oeF)o 9˷:h*'cJ孏[{ȄNfnz]8F/|1v g@J:YնNu:dhHo tM`R̍Ri:|N_P"B@ m`a:M  c2Ũ<ؓUOS\%a\Ap ꄯe\A.̰{wǿ~6 ;s2ŋ`W`TyPgee0 00}/ǔ;h[tGD5^E#hȍ:f? u3z0ڎ$T^TAhz x I{5'rK zo l֢,b89-:G|W)bA5G<*ٕ:ğ!]gj~O&UN뢹8 g ]-WW(WNI3Ngr3|m m'=[n힬M,?$HDD-O?5uX]˓37>*wg?*!JyT@ UgzI_7&\tH.YZ(4Y'd T Fs-qya7 [67K&J/$c/x[ᶏ;Īz1Fv]G'ڏQBSOІ$y(TS-;hűzT%Dts"=gwUuD?b$Zr9G<&Ña^2_Be;b~փ)Ό2j r8]'7 bChTd )+ mD).51-|Yy*oڤL 4A她= T@|X$in.KI|R@P@P*ak@ ۟=I =l[ג"hX0QҜf˒펖c<#9`|cO}$o>eX<`,o_K3 p{YAn[9M T(!"?Z]iEm Ğ>'{Gt *~y`'A?٘#)o($ȉەLvYO1o_& .mv!*)$zmrt(:GGbeVwi$CO1 cZZ0G 7z@Jy~p)g,gYL.$, -<k{yc*02/q1gKM&R<7xCy[Mʛ #ͺDya3\wfwrFĸM] \NsWݍd<ӡW064tȴvȻ0>ԯ ; )f#* 2<h ~'Bw mH/wqMog C)̵67#BS>_-[L|RRlQ}\TH) 9Fa"^bA:ݳQ4' =sO '@.Y&8z ,i73y;U}p/I  xVxilFZfhXc.b B*|&|ge/kuv\_Hb dpG/A}㬬'xȜՋ;E !Wj{ZI$z{Op;x=׺q{5l23O =@jj# GYTn>&ެ#CBϩzLuylSaa0LTv3,2 sdTrU}El1z`Xa*h{qiuU\"Lд@TXRUFg]sE5V0X/ukzB'كJx Iz7YΕ1tyΚ_}|xm[xJ}zlDVrcsdsqv[&`oUl?<jC! OeqB=J\`Lr孈d1MhowѹKiģd*;^ҋ$xHUU`]GkCꆂOQSCwo g~yG8P{{H.$6!}d4,q>`llUMBRPe2A1RHqlBQ$W%bhBÚV@(?FAQ}dl+bNIMdT"+ƌo0`89\|5 ޣئ(y jqm(<\G 2dTP0$n@ Ē!X 㺕Nkճxikiݝͨћ"0?^2XF,{sr_e@Vyg N_iwq;XED\b1G(RsT<\ډQ2tT ; `[,AkKbDl#b8,]i\|kCxLq~r Ά>|žBab?aag30( j"FA*{ߣd]ř+XHzs ZSLu:˅)ҲnJEBnS>Ħ mh,RT~}9, /.H~!`ExOۖ mwIl꧴ёUzzk**|m* .?~ chp?eY]*H|̛1e?V; ا 2PQVlW6m5O3'^x,ҹa)TeUs10ft9T{!L@OLtǽ!^L!ti ^:CR K ?2TYx۩Fq#0 <hѭ)kesaTl x9d%+b8XZ ;gv8 n7ϻa&^ob{w OO7jϯزΞ,~WYػqÎzVoλg'5("ե AӃ[:P|Ӓ+>#2?$MndueSJ%e؞~Uq ޳҈zRnп,7˱>` /uFgOg)PJ\)Xk VF"\tr#wE]s:Y#n8 Lm"6D VġH`Q ௢үQkG ]<2N?U &|a_G܏}di!:`Ⱦ[\,Y]JϹߐì~OA%> ]2Pl5pOѐ[ʀ4O@¡,Ҭ-,4X7-#?3{M·C18aY)M"ka_=4JqM?nh6kɜP  2;3 g4ՍZЦөGZk(m pv riZF}i:/czPuVQ9E&'/ v<2ۊYQ)j.HN11sʗ؋{ '|klT%1ꪋCgQUJ['Uֶ̝ؔ{81 rnҹ} :,й6X7fe' NM2p|4p6Vn듁p&S=[- ߞ~NjIY/c`YAq6-Y30#V~hsEPT;ub6WD#N1o>)ΘCx4$/jl1 y./,Rr[YE*GЕKm/|7 SISƗqF㍹6:cVs @w+k1caíw0 :Y5Q" +g"%*2t`Gݴ f:hN33^~yө)o)l*H-;+|+[-ZGXf~Meb75[ Ho}pi8;`$7~Yw4RypJs}!*Yf~W]TKV0Fyl$"\AE?W ,[b0q.|xZ/ˁ]P*4$*(R7L&`goTܑ.$V̇hULHnei_"o߁e*mbD2u{ݹш ߶\ؿZDܚ vz1UlRl-wk2VxՑ;؀400=ԑx~޽ګ o2RmԔ=_rZ&ן/߸([C{%b[f.\l$}VچU*B3lRPf d'GLc[dN %C9X5h _ cҠW?+`ރχ#CBW'B~cb 5~}`AE((r{2me5 t>`vd, p*=ϕƼ' o$ݥ;f`̢tɟJ$HZKԊk+LmR21,qF p̹-J%b=gV^y~׼0~-Pת{ƛB2XZ?oG!xn.}%}Oo _?bJNv$bl;z`&Kx^]"d+g eI2 B#(ijNN>SwF W |b WoW^\q?1>BL/=iR,cykWZ)BUkjy4XK, 3 F9pKuշ q@OAvyG4.,m#D"^ѣ8lQZ1C\4oJܨ힊dD6h[|L]V~.:0z*HX,Ͽ7zUQNe.7$:.0֣Mj9g {2ڬCO墸N٘@.W1Dz[[M%V5r!4&Ur s7%yNJ(?nYm"TCMmr.ݴ{bSNT]*}v`1^HvNoUۆAS6WOىe [(B͝to1bϫZH{~N}Vˋٹo<>#oTFD"%73.(?f]`!1%UqL:蜧ϸ|@8'+VWu۠0 } +T/Qnl~c{pa=V:#vm~1t 0SPH]/jg/!{/c jh[=U@ʍqIg6Mmq%Y8dc`"Xt>"{riPO?0=/9FnV}OY[՜"I {GEz `)ӇrOoKY꺧S4;L'>cN@8 ʋ{삕zb8_xV(X"]ΔěM6w,fgf+͜)TJUt> -]z}o*mGŶ1S<۵&:QzHjljL F,aY"'LˬɴbJp{6իh]m E= ~fFvE`EWinux8!GVY??7K^+[2%_mwsZMZ?vl9fO {,'9/} T}6VzôvU[dT,_uVE+B:xaY.L4rP1"nj[)Xs54 4sS6 {(,kW :Dm3/ T*z'1o'3ow|Ћ=Y< aDm?F_Y3f^Lff'@&M7F0{GTB/fzqc].L.In^Wk(hc!Ȝ|%?%\6Qn*0''Whĩ=ŝLCgR񛙌9V玫؛AӚTQyč&i٣hQJ,#|d驺z|yYH{FI%ORD&k' (kͷ_uXT4JotǠ`X l/-ԩ TBIjԛ/ Jn0,ħXBUHhFe% 6% /:&zLldKT ^Gv͊SA4:DIʯ< !.1?nTzhԓ尵 ZBCnI~+sm8T=f!c(KHSH7!LS.D4$~]ٴaGsiK7"dϸ}|{ܰQ7r-ŷzRaV]v4t2-讨YDیS@%_B(FHke%&5='jF,GoW9;(ڤX3z`fM<~1bR6t0luFIj˯JoIqĴ(cǘU@Ѣ#e&Vy( {̧KuWKeZ ^>(wDI߹}x ƺ5gYG22& sσ!q\ CP%U fbS'HLbi,sF67߼D g̣oGa)jS-&>7yCCΖi]MR A0 KfF=z ggtf7Kx [ L^.[ԭ>Zc736c͗qw*CCV<])E9)ϛ0lSM.$bASHib%zqݓV޷ʀ7+8{ \HAZ#[80* r[-swnxP+HElY./k6wKb?88GI. ur޼l9Eiޜ`"ƃȇ˺&vIբu*J\[^enQ%j ?{nW+1 ZC $3!6/SG @4ΌE!Rd8hg?J~u? ZiD4K{j%)'xMaYvkEt,lc:wXk||2$.Ey=x*-LM_xC{t4.<Pr͙s1/N8uu.ӿS_rj]\av^sQ ZŜ-DuSg6{${r25>, hcbJ֊?${ouo>ͨvCl(N9ߖQ]}3( z^)(Үe}E1\pB(yf̷HY/HI;,q«=d&T<)3SfV1ړ'vhD n$4n'r}b0DxoV UJgIN}4/|ߥ\$My"j}jib!NӽSBvC9wp7}5q2ѪҴUÍ,鼁I};Y͜ȝDJm[Osޥ$FlX~=/_SLJ&^( qwv# ꒎.P:bBfV2qgnٙ l8VӅb0aG-OTlO=AfWO׭OJ{̑Ͳg k:I3*zA$̊kP `nFGx)GRPE%5\}3۵RuuW-2G%voMk xBuFN7ׂkV)12dB!4 . N8O,f2TiV udLzyug’;Ks'^y+7UUOBж+$%O9elե*c@Fc6ggMU_~1fvV5 -V 0 )_D{Գb1#Q|k9=?Pocs$&}BoWT"M =Dy$,IN,چ wIxE6xnCC-,ϕ̲Y :y~ʝ،=Yc,TxeqUk*OTq\E*/ؒ/NSUf:b?īHt$ٶUfudH"$2kQ /WiXNx r6_y{?2ڽC~{u8|܁Sf+{30`wbcCQ+zƪ\T-{]ξ6Ѯc?8Z~|&eD9qW2R,Y+y<`OwAbz6|]:qZOVgM̥ickJ0=,4,am"RC#,c fZ6RcGŢ:)e eIr6.Z;P+O)$\wIV(h`z{%fpxl }onr 7%ӧ{ xm1oВiq JO'V!"=$ ї4KS+&Zۙ'憥Y^e~},x'"so߮d߽}{.kTJY;ffjKVB+jqMWL"e/׶߻YfxwI:kIq.DzdLWim]ɗ] f)B{lֻ`j~ކ;ā;~7-zAX'tbWO.$GS0Ra#QPO|P[ %`C)c"ͽdD1xp_s*5ac]܎*t]8Ju׷uO աH>hLkq7gR2,ʪZ]|$CZm qX LrSKb홞%H/w>G9(|vvNnNvX N Ѐ`p+{(u\ sQp ݨ3q\͟$ﵧ;QSřz[jl 6n 8DT}㔨PE %BWحYw.!/^mdSZ~j=*Qgd⨎0t]q-.PJBp1 ثatl/ypq{~TOH6 uNwY| AVrwDh4Kk+ /@ @OJZB1[?l{JՊq9PvoY6CJ$H`7Ei)*eK؂Y8{V)b pNv/A%;uh(w̃l}*4y|uV:&*P;LQg*}OW;xT!F[ o l*KKUvܼƌ٫NY4$Gd+3$KVZF&FuRj.GNۖ5ƴrevvvȬ2MC[)|eGyb{)ڻ.I{l1CesZthɻRæGp7?(dW^=  &fV͞iϟ\G6$$uP=ou87[%>`<.$MtӗB)GjSQUd`S"3ɽ}MױT th?7]iEHzş|-tdۑ,:Dj7lD6٧-+}ZU4^xOݼfQH U;"I{)1Z.@2󄖩b+qzV s^>V[ŵ-5v]蚮c""f\߬<ۋcy#Qj6dr#ȑJ4lO(yN}$m [-|Ԉ*S\ќ臉@ @ ie'm'q$s'B੻Ad).* _y#z_Ы_{_a_=+䊒ӌϞ'Pܺw GJl.rqZvD(DCG&Cر!=ǣz4v($;{2 @iǘupcE  hh s> L^fڻw TWޟR /_IĦM'B.,P-Hj)%PDp2^^w`K֫KPa>ξ﫥jϨg)KSټdGFYG$X` 7%ҀcKQO"BաB'^.`";GleԒO^l:Q>45e=[7$z iF\*B'ǝA koMFc3|Ӭ%v>!]€'! }:xi/xcR^WICz_`~cVFvf]5OnC?ҷ79']/g}փiUIȃOt̒?k:[>TSiE<7E-N ؐw;mDu[z+9g_PO$UYN[#jI&3\e4n)Rvcx/VC?Kg{GX"b(6 ʛ| RrI&-Nձ*?2BpEYP [.r?gOh/%lROE f N=d&u_qb? X°f:J/ }?(u6P"L~iV-g1YBg  }HK24鵖r)ۡ#|ti@@JR[k xcE^I2߸dVoqPkZa2H/=(c[lW%icXchPq6cM? }iShRm]6;?'B}gMmǞCj,vԱ>G+zYl?Gܦ*{.m7AT^1D";RUr"bhlqw$/gyRmZp%0Bϝ#4b\q0n N]M J},QrQ*ͯA\')yz'KdخDWdi@gzu'1\}^qI<>e^h)Q*lzBl? gGZ0`~9/ie+UrWWs6 g*D}zyn+ህwUӋ։fG%!L[#"h2fmh|Fqb}*H#znV˴]xA 1mk ׂV|=@=OBzPd5Vrl$ZՄ88^Ϗqp(:A6J5PY2 èV'Gpe᝭\hjp1awʓSA$|HE#7ч|p* `D]ZB-\6iWẍGGG׮~YJT7Mq^#0õqb0KVot[ Ֆm^k k-dpݟ^ Jd3ݕFFTϺۗ9o\S8qk"σxL_:PLh0!iˌ{8:zE  Oy/Иl ,)GqQR`\ J>[ip&Հ@ $:Q8Bt:@`{>'aޝu99'LcиđHhd͞YGf/ N=Sf0T;WJ& I 231kÉr`}A̶d@ \q-9(B,vѣALXqH[!f-t|nPΤR^bGOf=+hWD;Kfx1^ U]3@jK8{V. "k5hG¾pC鹒*6iS+пu4495dj+ KkNqBM++?{2MNJVu90$#dV/,) Ak0Ƃ^Fߛn<%Jvq$d @ww?Rs D1F-_E1}zcƝZh[$&DWx&fe% ~) ~XLt˛҅JK//(F[ KY=;ؕb~$Vd]8|bJ):v 3RRQ}˺O kUP}SV xsQro3z2F'֯nN?{"]1B+յ ;* eO]-N~2̜u%l(Zb9Mh]Z3')9#>*%)V`leY.5*D~- d5JZ!QӦ^fP/fj TXX&(f!Ý^g/j< /륃S'J֓5V^ ߟ^m{2; 0i7$&⩵ӵXEOSx5DZيt"hv_CS~A$<@ f\;Sa)6C_Ί g0(4i-k< #5t\CCh> ;!` 3-6htD]SeN }}"#Qn`F:>79$lVe~̈Ja%q~ܣ˴^lC f+/ eBa<' \*FC;|c ڀNf!L2i~<[ p&ѕAknnr틧n&fvnjn-25(!rC~D"`\T'j P`0iO͚Fkrfuəکj\'3!BIElQ?m12pQe>RwتD.ۋ XN#'Njjо4!tK_fR!@棼CJ-jaH* Np@wV[; ➄sqHlڜA?y "j!<U?hk1oa޻e8S1Н䋄!9hI B 9Ko_([f0o! 31C;XIh$ɀ禹@@0Wl ]&)s64wY3c.Mg ^1Oqs#Ms3ZNLMi} 9U~x~{$6FɬQEi2WvYF AVl VDXer(ZeͰ3)\t5\^"rШs wP5f7NK$f^q{"L]z`@DQh6f~hG5uU7G~ .#3P TV!nژPf6Չ>l6 9@Җ5Ϛ62t@7 L2  t'ԯbHԼwWfɊ7=.=bx %d? a 9epHҩ K\ۏ$C%0 ntv:M`᳑Basp& )"-qc @Ibk3ePF8ZmUL((qP05n'CVijɿX?qg^:ӛ[[PV8 6=Iɉ(cG@Lb!ll8߬MvvVbq~/%Ii҂ϡ֣T=!BPS:muvPsϥ;Z|s,G:pHgVuZR>f@e⋮@F<6Ͳ.L /)X 3"LN>^m w'>\C]9b Jn)snt__xEKD B $gYAV>g$%L0L#{&ΝFtd\P=a4 8"<ܝsL^^NEcvH-_>֋;|+c! 8O/.规Jn8&,%st]6( kH6 Fq#(ۉ[y{0(^ ֿbףŬ &fzCqI<Μ$((h\EDCc_x/E.:i^+Ο1צ҂Ji4@`lxNL$搘6T.?4] X1h|}g8<1Ȥ< @K// 5pלotpa jtbE Ey&Ц4`د$L"Jvi ljZ%=')8e`8T*M8.w~\(Htv r"jDoGG ilHe%ia&9dd>-i lMܰTA$VHG| $ :1R s\Z $Pjۇ]ًg8`簆 zߒVXݕxrtX/Ap2^[1~R{뚬ɇ:kCU'5n%'CXP06Gۮl[<NscOFeQ-gi$RNo7Wz _t"?z6y/H}ё{qL$ -a[st nSn2ğ@ѷxHNp2& 3 fx) WP'h7f> s!;p&QcN>OgdHE1u {^گV}2@JHS>!~L^d r5/GyNW-`ɚLJ=(RV2ȏM;:-A0<Ȥ L1L~.ܤkgLinNdu'f]BsLA5ShKvvn-_e9eV"mB:GΫxcZX oyHKgT~cN¸OZK:bA%9C ]oʗw1)(t^?uƦ-A99NلL#A2Yu5/_=fqljއˡ?uArZ]AX _vM1V&P\6X2m7䥱[lҏ'AQ6R S Q}딭SeS\D-wLrTC]ӎorly݂XJ^fo - ˰(X3R>\# 9VP饘QՐۑ,aeX#*gVTnqGL(Z)oMi!#ZH.$ɀW\p*ȶ /.gy 9L2p(#Z-)ijjԭ=0b`n0a]k2I)XE8fnDη%8CS.oěNg'dp-J=aYɹبNkY Ե=fNH^f<(|E(SL\>u4vdN~HN[nDeh/ڈ(21he_ʔQnV=CHEgi~%B15czŕ v >aY%e&c!pIB 8г]~A-l641/[\\Z I T4Waa8'lxRYNej3:-:G6vad$$`M,ܔCz3!q1]Ӌn#xBl]K^t_@YugSk]OƤ&v:NaLewɋ-hY}:xi O x|+^ñCq%]{[[q" x@LupՔj -[=ئ\ ejq[%^W'Hjyc%J8Imx=C/].&w4D,Ƙ3"z`U |M:3Qc!_ǣW(WjqS#f(G4GޗI>nڄE٩^˗nHG[M'C&Ǹ'orUmNݾwJ?6\AbGNzŽ2qXDIa'HVT으Et|G3( oOtrJls<;3)YQ`gw8"o&7>cѭ^@& tT}g$}0hh)GTsy4r o MH; Φw~| !( ad" -sQg#,1M|/uhR-.k$GK,݅1a=aYPA,q%! ONzvN6^>ƬAvJFӽ) /ުl̒B3GM'[,n\\kѣ m1hmo>!jM0C <埵ߎ\`K|_xN`ǀpWJ jHLM<_=CM@Wޅ%ꉷdžf%Mnp Z3@>'Md Y,BTuJ:o>b^չȑދGx_W`H "=ϟz&=@%ӌHqixDHXxjꄯK |@QTP+:uc}ОT B5ڨ81hȩaFuXLc[nNרxtNDX*N8s7|2 R{>}78.GyՂOg#Qq'g fKY`9h2„6$} (T?}A`78LHFRG EFJXw!SKr@EKa2'ʌ%v[؟[7SFjj[5hMt,^i#Coq§ZeteWip_t^*>VlhZQjXB㨪9q7@'[=eH+^їa/G6z<6)yжDHwFv2nF)%d.)ەP6^÷r {hj)ϰy"T㝼jMUd΂Mݱ[Dg4{+ݝ:<9qAw L}A=£6۠evAu+U_Q3f?R\0R R^ ,VwW2`A vG<9 4nX;? ?*uV0{[4"΂,qӼ? p}_gKB_ %_g=Ih|.ݥąV^1䓺0 "{7ms9ꛦBNIpi{ ]J :My%uGVց kkpyjp:G]Z$0 _N+M7Y2l @x6q 459OТ}Trf52k t߲}pU\ursVlתa޲ }Vm~3gm,\7m}-*,EHq$Yx=E_V'CRiND9/ Cbx@8`2I̪,!f݄nE8b+Q2쪘CZ^?GVf砱(BIe+9: A  v4RBH zѳy|x֣W?EtFOܔc=1E$V(T} rY!HhQ!.F/ dիG0;j86t 8y QG/Za3= O_ؤJPגIRsZ=|ڼA##su曻;..tש:KIT'6m7":sbqyL@Z,Y bg,n{O;]ɪ!_"=cӺdij2GBX$|i!*nT%;*^3/cEs4CwLj})<(YpHwW^HL- vpđ@wПp̹UK>1뷀L˾f0pΎ=_! 9q[ƭt-c\ @q]CAJpPao|ylN{F*3FxLTv0ԛV,jHA(\xxtP R^Sh"HJn#_p.$s2iB{TuZK t\LI%* P={b"UQ"VR} >Z ŊNVݮ-Jh σ ^ ;FQ,*+""00):;:VP8*e(7Jl0oHe^Ɗy%`4Y[eX}6KJ˩^#<ɝI_/23-@l4`P=K&=.)՜XvLfo BG]ޮ+؂PyInV`k-~SddcU.gƗ' 1N0P!ίH]Hf[Zx\. +\_4bOv#v!l,x<DxIN-Fe,/\mdPyIrǐ&$GKKև1qzG!A38̍97U;ȴVeg ݌LΐotpR# AD䶅)m"ǛX!-ΜaR_});;6П(o:֔qC^Ǖ۵A=zOb d~hzn/J~ǪŤzS,JJ#2ŭi Z~_{c]obR:v:?e? tZ]ָՠgժMk&zzq%UCW\Yڻes7ivZdTVQC$mČki wƿ#;̋ %yG8@5:yq)|⌬N=Bց^\S8]]?{rW[-+Wq)^2-KK0g4LҼ&OSPdŞ-m>nxQyY崎byCQA)BD`<`7%f"Y>ШG]T}_T,a^&xԠ,v4EpW¶SANⅭgj)&d 5 4($sDBݦxOhXQLw`qnPsTs'@Tz,2J*njވ4_}3יjҫ-%i POF?kjS#G'p1Jmba[2?kKq!@-^Y97*o0iMl=ߺ(7g_ǙWأ.. pk #c]@qos]vKi]C+K6 -/'S{VF#pƦuO&gzutxeL.vsMfџ@/)uA)0!۽)/Y_$mU?S^ GqVċj.vUH0mǕ*3bt3($F#PhzZo\d沠pmL~L jbmmK qsN"Q_Qh9 -㳟CUџO=ކy5 YkN.eui#uڒࠠp *!C_߻3Qpazmg- -k 8Z莧YPdM`TGhѤ]:dVNvcW:w|kҁ.:ӫOڑsw pT %z΁ه*0) A&3PPQ_i.-Z!%Ttf3k״+f6 6mPяH4ׇ2 umMCͥpm*Y˭9_J[.9&,rHi߃8Ʌa[Nnx J#u:nY}lzӮ^Y;zӉ1`7zv/_眓{='T `Jټ]ȇU)K{v[՝y`-0-?^[mSƐ=O#_DqqmR0) ibJ}I克WTm Aj/bYFNGuc\:i%fU,pIp ^yBcx2 Vb6Nd ٍәTlW{tĈT{S/QYK7#pQcGogQG?e<tJ83YިF^:̊|ʚ8`r}QhF4뢺j":k2;k.,&zTIFTy=K;pr$Ѳ8f_TIV[[ź`.N0U8IY D57o- !mv9\/KR!6 b\+'Ie/aFzͷ{P|w4ej-t۠^\SK+'JRSf4Ԗ+e"Ӄj\ʌE.>p!\B}vچN!"fR0rG߻* /J6Mn~}}<olϸpf%n~WXUlA!ˍ!ӫ8iD*z3@EYoJNC8f,R ƏmwE(iwLe7xЬ2Lz B,'\n@Oޤl os4PcXY }tp- yC&z Z`7)T)0jJׯ$7 ۷oUckwY;8>+g6w&$>ނu> VZJg˿=>Oi]@QYOƽ AIN%F(Y99JC4Q@J9u3p=0A1 ,^>(HRBxLԇj-ap37ubNV4|u砋ale zJ@5yCQ@RRqO¼p1Bj*O|O ,0߰ʹн,u Hs5IJR(+FL?Fh#~J1 p)O"-Jq Ƀ7u6(ۄ!P@>Á1 &'s3هX,9Y|sACEvp|̺%37_*xC8 <"'"G!£V볩s&<6D-mttzq5"mJ}_(^m'Vs۴F>}*sVӇ"m9oq{o! <]w@a#aYY}i|#r\I _ߙW+"푎Nܞ0|98ֽ .yfnsˡb~p*5E#s vN9>cQG!Ú8Њy6& -2~Q[aṖо)5_[z_itb(߭O=C/ P4? 9T,1լ9"fP]SԜ(0v4sJsbnQ{} #@ɏU^R+/6' Kh-Fs5XޖXyXQ3 WKb"&â{[mpZֶ/ʲZ[Z-l$NeWHWM_ Vӧxs䀱X )oC&6lktIp].@?wShs-$9nP[pYӲG:Etb&< E_p0JtzX B.R .EĎu-0OSBþm Ǣ]vd`ÝXP[ VC4O0&zu4&Eʙ'tAB%+DˎG~AxCPKZnRgx+i|oʜ8oqJ`G~ ɕo P 8yuq뢵𐠵Ռ=ƶT·n2paA/F[ ]+p^F(?ɬ3ggQ)ĊDLm4G;?81[ѫT> =Q8)ʒ5ck+gdRA|vakBcz[C8^'դOS0* )5r|Ȥ^?z}[SWUT}?LU^}L 6h8 bǎEڰn/MA66Mkr0.'})X "9O ~.7@3_~I*`֣q^ Q(Tߠ1``w2uՓأ0F(zcgsSolP8C4>@e1bς zF]5Qƃ/Y vAfGWJ;=yw@Rq\kK0{2tv0="w 0Nr DnJ`37%/-*R.U+[lQ7H0x/{džq8>6F'0*G\Qa$;hfEBC-`0)y[hʑV H2pCxQP¥9>&zgိ*+kɼ'W_~IPg_CO{b̖aշN ~A'/I팟o" ܬ*0wKOLxi1M*ˀzܗ{ meJ!,O'Z2Nm:ܢ*G`x]sҶ#fD\FIHw]I ?7#ȂU.5w5ɮR?70:3np&9&VupAFsUc;I}!\Uv}bz:9y! Rξ N@)0ߗDd;(AXr[BNa+{?X/Jڽ՜vݶ6lҤgO%P (/V j>MTc74bɤ^~^()yIЄe7a'xU$u8/NΨ'nh贑51;^n48ߖSqF; Jx]]Y MG-WM_ KVgGg>W&i& əۣκ5XnF>gla⧲0x){8}>;|9 i 7?kNW APEjpYrҊJp7~V8o? 3#JF ;Sl6QAiCfT0YwI+~[kB41L[*;/jLAM0X}>.tغutjiZ6)udn? |n4oZ8H/h!}I>d _Y3rDwc6ZKجA;T GXKb4p:I9m{#?{X%CKM;E({vT6 LaY}jOѭTв`u Jۃ2f1D/MR1Cb @#^$yH"c%߀.MtBl7 ^]]]*eg^1: v"t2=M@f]M̟D_w`tјmuJw"BhO;ֽ.w3,eJVKmC2LCyӝOLU{/\"K h bxZLRiO(=|V})׾[[P[n26YK UL}W0$ڃR: O3Ij(ΒRօJ )HInS(gKp 2\oNya軚8'p%KEEgO[:*׸pⳇWFt!Woڧ"˲"CրooBJd;'K͒__hv+ dލ 'VmI.^˅ 8BsfG08ռ*ʮ ꩐Tҕc6s~JimxY~V)Iƛ+hΜ;]EBAАQl"U,C)'fC{KD]p#(^ys==UjonlVeuiJ+$dU#;O ?92 <;q>o Trx& ['-xp0j[;3Iw6N?;K9YR2vrD3' KgՂ?h?r_K& `t͡񟞉y7&.>tu4ߛG :^MpvwڴYz~ڇձM٪!RWd;# ^zʈQ t\Wy\OJ14:5\ SXT ݓgvV9UkX,miM\(n>EI aIi_,( ;.s)=5AI(wXg}4YDp4{jq(Q ̷ZJUZfK*xC~p"2r#$!JzZY.^|h}zXaIEXgt^4R{fLypᚚ1ި|O 25" tUAޗ@uRPNX1ZN/ܨxIQ×_y6EK / cuDo7դ |2VC f+H :`wiy~wkt@4OE],<ͦ?sb1- JAA2-=t칙Cõ̍: Ba;WCEΞr{`&,'t[8qu -(J]4 ʹ5ay hhY.4j&4a q'( 5sXGjWB~cm۶/.6a_A5+=d >Ĺ_.h8tBs0HJll[UH4v. >]( k9. UA:,A-wyʰ҉VjVU ^}|wTHӘ,Aq0;,ZD*#{lH7bRX0CduBѢ5d=V\T=Q37o qA̐AOlܿ!{_uD G_rkߘT^}Wo).8|gWPCeJx6N(~v_;ΞS?W#M˿^SmG θJQ50 i<&+;V=KrU e#,tFjëΓU|N'uLx&) 6wrroG4 LR gnZa#t+2>if!ϥ)Ǿ>0$&qqJY\IS(ˤ7^+'wٚze !e-ݙ{awτ K"Jd Ly"FջPn)ж w-YU6L8"!ѡ|Fj=cȠERz!z|%%N{9c׉S'I#ܳ&QFn๕ !JƄeeo},XM0cs9]e08ux޾B䦂@h~T$% ?-&=EsnϨf'$Є`9wvȒߖ$sNy7zԯ3.ɉA>c,vA?p-?#Gv˧hm,QvG=KԾ nk@p*;rQwZ*ړǤ 3νեwR-`Qz\ӧvch:pZ7ןg~#;xDtO|tҺ}&Y9ƮpbuU[]Tι#UFo~yեj`a~.;&\UBD<j5yуo)],+]*D89żmSTI9⺹"_KKgh&\^a= X(u`mgO,Ӊh}y$ے$ E[b \ڊxl~[l:鈼,g\jgY '&f)GL|ƭ*Qpr~;ZI] !q٘ >0S|_Aeg<28@+5 3gKp:ELBvKj:*&z0V >GXCJIOErWb$W+^jɒϖ6HX#18 ˌ5ԋ`֩wGU,03 ̵1 Q&g;!]vX~0a \MF4C&h VӾӗ|怙w9}9/HY1˚W(u2igo}9~!V7;:H xǗ~㲿vWزj w$kʪe1Z^W$S+ļњ,-3!cmh9% Q*;%_8FV(s߷f8dشgm5@@7V։!)^`#m܊Gk!yu訦(+q:­D݉5/bwb+bᎁ6}HЛm$te1-ě G]iܘ$Q:npysǩBq8Hr-;-cN*rJ]cGYucyUku DQ):4^K<|XEޚ.Hxr亞jΚơ-]eU6xbk_loⰯuvoLzA+$^ҕ\w%>[PG<2FnD!$Sx8;;(~ Wou\Ht*GĞv:[Lr-yGm k-6K=9D>GkaDl9*K2J8OsP"偙bN% pxcN&ay{Mlƪ3#LmN̕&>4wՙި|3}+e}_,,ALu[ϲQJ5'z@NԝZ̉ED@(PVdl\8N&,)I]dNY8+ʞ_wu⥊8#+1d8s6Ǭ}壯 Uyfc+!)Ȧ1[N}3ǮIGu]x~^ʔ4 qd[>,{1#^3ID=q$%ɥ:A*Cg R@ BH@!Tnwl˭a]ɬz5 {z1R&l\WџgEIّt)8RTp*YMڋFfR8VYbJir5Fč N4egH%<ټ njc*v<᧼ /Ujao.lGvAvPؠZj9IdAvƉ< jO3j5KhiMt|en*=-ABQ׍.|"?Ïs\Z%gt2^L#;K0>;!SSI!!H>S|BϵŵQN,$,J,ya>A"TSMK"I쫈+;;Ӽ[5*^1!;m--?wb^eCiO{*NC/.Ms'  f+vS'̘  TkOHLTpRs#2Y@2N6^T)u[>4(n#*w²Jb$ȤFTxM3,"& ܴyWm k!o , ˒e6GG\r]U2%8WH CQo娣)*[zb2nʹ.CL?gl2\#.WY`WG>r8e1jB Uq8`{l_d9)\$n +L[o"N>eYfC-\Qz%seg@% I^؄*ӬD/j1'$YF\(AЃ]xiZk$5U܈?ZN:5ZC'Zܤ}w~HEVN'O:R|J%ءC.^ڎ`g͐(3!a [0ɘ»#c]j)`rsJ!*jcf`o+ ;mxx 2= }JKo a XN-K;xL@@a,u]ϺU,Y;Ia˯%y\ #2"daE޵>P~?nŠv]wZY׬a)33t2T۷MN6=?Cݹސd}1y"9gV˚!Z1qz&Ww-fRC|K>'cwA?`6$,|Ckٝ0->\#˽5KLiTom\[کNJXu}ꕵۡx[@4u g@+"R.AST+8S3r P,qݕV^fbڝ]d|k xtQ ä=:qC/ѾK69@̦8ۃ)6mkϋz{vC Gv̠d lCȇ`hr.SFmإ>2푈n\y 3k43b?sNjT%a)2}7 I }A6m"o'iLII5y?|Ue-Ңhb=Ϫ۱_*'{h3ry":U@>q|J!׎72ZΝ ]p%},r Tāeu1't̖Xm٩X$:Dl>OKX[;4Eh!BAjZ<|:f^Oh5a Ku/bztw~8i$oot^3Q?rLˊfoInHiqUgg)Ӈi-aui4,a{ nY$HkJcJ8@t1Ay8RQ)( qr<'T2QUET ԫ *DWV-J(YWZ~]^oP6{ [=ʤƔڗ>!C/9kyyrL+>;ʒ[/ fn>O< 1#ryw70"aYM0Ib8H^-ri a ޴B7N9!gI 2iOB *{Ȫ!&FsSmt*Vch|ʢ&E=E+BJ&Q"/qd"8Yn$:W|8a% F~\\ =w帙"i4}BW3߬[o4Yf"31Doڔr]CpϼAylk7S Lj @>s%0)uA 9-^{#x/ަL[`0/(?¨Y)؛a wI{ddC1ڐGdj<R0*eYCNsI(~.D*; ڻ{VqS[BOl]yWMRZ$.%qj"̙.9*H*:HfcEpRoQ#"htL\V Of}=Q]LH|_~kϣ񏈔vrți&!*)rIb@쪖%M5Нs!N=3h%`U3yV| pk,6խ]+{EΗ\^yn۔.*QzMOտD'TS\0WU'5:#h΅A%EZʜ5bҜ6M.^qӶX(1]l(4AҢۋVXkv)^ۚn6eQ~q`a4ElZ{!eٹ Rfmwš|Nwda{%Q cygRA9zXBN|5ّO49_w9.fo(D\EPl~PˢA'Ǐm |)]ˍ1<|`){y?J;|Ɠ=J7MMA~weHb^;+4T1纲ѳ'ZNWRfZx R}Eڢu^} =ּ3CAlC\'EΩ).b.-GB؄HA|ZEy˭yH: $'Xv3&yVQJ/I^ '4ZY[}>ēnѭţvTow(kxǂ Կ^gWzۼr1k }Pc.fŝL@^-7pjorͤDⶴ ppKtrU}$gmJtAPv h*ٲ͛-Zv&dHj|4P9?]]zw wLz zЩ!.+',zb8*߮$jΆ,7bCo/]Eh+#PN: q͸E@G4+5|"E@8xy>XqI3%4&Ueѣxޜ+V[ W?$U7H2ܘm &{}3}`RU=}ii*"Q:, !86ܤP'TsrvwMDKOxinM'\W mFfPOV \`%~JJvCm8kv9EgfvG١w20$-\IMD7OۺrU :Qڃ1<; -:z^%qBZKQD{җxoe%*p 7|-t<^xأbT*n }ۙo˞(ﴲ\^(Zn3fZ,2:"n@{8,-^wQRE~ '>@^U>W5 %3#X5"߶縵mw #,,C8閅WO=ĻH7=ζ:+ ᓞ(NQxTa7$m};aÿmk.47Kt݋B{Z=+IwoN.R"kO5haCK0OP$/{qu[_f_".wy$8)"oX;34Z'G&o5gȬ [푂px$~VlYy?A:O0O.?Iv{~ lz]%xդ1G2 ͯ4` 1w^"B~<׎kh:&9Dɗ@ I4|ߖ^y~r׮ۙ|,y-nQߖBN"n%;TsB֭f =3EXX7W s i*(*+"AC.ڥ+:WR^mSQMz+ . sS!F]bZxL}NN $pgvE mA~DPh#.0k㲧on?֭l/Ox$] L`.\(P+:rj{x}cO#V ̥): f(ýQ ǀ*[յ~-`h1):ҙn@-݁'>c(>,U0.Q/sU*kޑR1&&;{=< QdÅR%R F@"zEG1M}<*:Q5 zW ՟DKj~_  [#Z/9XMFۇ{7șک+hsDf!!/y {ܸ=g0<)84TMʦzj^K"$L+܏!^\*d%\%Ns$Z:˼&,t 'U}~# \ɝ/!-mYVB-Ei8ɷ92jW][тQT~79E3SѧB0n+\q\Xh;edIx6> XCVrpNFK|99QPba-~ $GnX?:a.pf. !®Cf߄Z$ ݞ\؉jrvb1F4 %B B k"r,$$\7K5sn_ +v P$ϩ3/x>Jaw/TiXFN)@ԅAK$r>Gnc QR] ]e\C w^ʺ𑞯W6ު}LB|ұ61R pn=  b>@kDRƌB MQnh50qb9j C_~Poaʀ1>bשiv63u_;fj/1'y9D8a n+.Zfq>ZTΟάs6 wV @)w1`h |ZwUia{]"5 X MDXfl|6b3Z=cddž/bWOgL  Á^ ~Їo;Lx0e_Z,Cõݷ%"({>96?C`/}G(? Zi 6m v{L3Z[ax'96!12'pͥ[˔))L@ƙV~+r2ʑkk9Z 0NG25raQJ #+Z,OhO :X=`O0 ߋWݴcZBb4l’ٟsԳܻYj(J՜:qZo%9" ]c,:ZrPA<@p/" g][uoW(AǸ3aIL/)^j_s;_"KY mĄ"oj=1HfΤ;F U\V>{9Yc6J?x̀W0M-7ؙHrV2 I<( 5uywjBtA֏o\e3YL\ʺkl#ss˯Gb/kBZ0rDhDq9WzC8 @C4.7U{_\_}#!|z(12Od@C?x7 N.?yjvGCҌ"ʚYlC`2'%b[iܫ6hLF HO] M"U1P [9X |UB S~z|.4TP{.b9py-~^z \@JX`nbDWpk9_c,:2YaFμҦ׭b1DLcau"ҝTT 7+ovzӀƣ iO~}$f}e]Է99y26WLuS Mvq9t)iG׉06G -0I#u1}ŭ[cz6WŁ!-pi?K8'`PCrrp\B;ki~8߯I{'DʪJ"am@!BS҂ ?{łk}MqWW,/R+OC[Yw3|ck=} Qc;Y4ed6nگlc`,ɩߤ@7iM=Gs4g%rGpHC5p#S/ڝ* ϓ]6}NxErP?SrbO{Qph*LbY Sn /BZ; }m~9a4-h[ ͎ϭJ$1N&|'c䬥/ʺ&᧥,/94 g)^D/P"܈Edӽ &S#pKDD Ț M9B4Ge@f~޻;a~WOk CL T|;v)␳aH z=lyNS^xG0fx!eƸ.9\( (noAiO@ut:)SPU6&*Bvp F~[@]Ja0dTx͊ZС q0.W2v1hd-CZVA@Gñ|g;=E4'K<@|4^q |\V1p%[#S#F#-CI̥+\),Wyy:#sQP^,JzF "穼ƹ0-hq(B?Z{)6{oݔ2WCtˋg5T8,+Oe0HUܺvRrAD 6ř!D)n:nc a=2ݫws9OYV@^XI{+ #bWy+@% 0.{'~{dzr/ێlL*bd_Ecfa"sص- v$95]&,̋PLY$8>=[w<* C~$\YY7W$Y^qF%EAWQ7{EH2C)Cu͔.w9AYȓKcd Ị< wTPNwbԡ"~H66_0wnDKAANe9iFVg?#|ּ^2|Ś{A&X|[QhY^oG|#W*fe`-ޣ\6i˺.tu/^ykA/˙5nnמz]1Z[ϝomV95˅_6 e^^!MMHчVx]m$ՏKJM4F-oQC23q/T])<6.jxo/|CA^[cB2|A {o1K{2A`O F8;' 9ƀ@bR]ʷq,Vo<*l^ܫQcT_5?$U0_9׊ f)Cץ) יP["q,6 #acd$\ـݻgyZgvbԷaz8{ț}BhA{mD.'*KOik;D #/h;@± !+ګ-ckn.v$?:ܗb{azKޣdGkyVֶZͥ:'Zsg.O\/+i.5j>( =>v w=7\4߈y~)qNKss~9< k {doÞ;Z荄AR4vríḾѲʀ&_>p9UF(#eI|K!Вl036nLGe*6Ne /ˌԎŪjj՚we7r|т֔讞 AZSCr ֔BInt~-#ZVvLBr"9ŗ598Vxh_d^:|xmW(~ My+)#%ʂu~ޯщ*KX8[4XL{J.. 5|E^]sҝcC~L@!=Iuzmʐ^IU:d݌a?a2h/iy;nQo (& =X;-?vkC) fm9ҟEf^-MזJ=4o,q˒i^X\lX޳ۓ{-:V{??&*_i]Ţ@T~9{UpMXאjS雩W::@VVپ=-}_ey{Ď^gifhjrԮ 0(w90{T,OT<~ >ϷXVX8^tΪ/y F&$ZLȏ!DHn˃8mL:dJ'!c\?<ƶ}@}݁ "'||2_}W 3:}6)X.邈Iemś[:ޝrmL#hd c^o;6a!mLS >nN-j'9BPB"7%"J<Z) }B [Sgԓd%7 O MmfZdQ?8k 8VjW{z 5zՄff2!]J73Cƅ2P,Mwǹ*)5H% s9ҏtIT H'~icK"~X=~KH^!Oq& "^S9c*l`t122Qd @Z1N[ :H\t܆CeSSR|DXECydhp9@<(+$̙4;.9댋)5des׷z$Uf{<&v$b)K WTR8Yj'?K^GW{o%8dwJgMz 3.7S[^n?ԣlC9XdC?5{/{/{ 2D{D uwo̧ CjcT#Ț y+L@w1c@]?|K 9dXe,r755뼼ِ\\5A 7 [B~bs^wE)`sOrя)eަlCZ@Kgߝz/miM)|DRѿ=/|pzWPC !Uqu.fc^tX\ZZJ9V]бو+|fq,ҏA_/儘(# :ΓkQn~C <ϳMfɥ$<;eڤ1%iEUgq*;R1=XhW`VUr7.Y"qyW(M&qψb)cAnjIW4ytҝ1Q܃j 6W!hd77"N˴:CM\ti1r[?Ѓo{TEzr 6k?ZQ[7/V{.=ծ"+9= KLe,`S w9oW͡ɓl _G׆aR0e_ǁu5X2k>[:kї/7:YÒ+W.1Ade;f4Y.H:^θ`"7%1$E5:DkP2r@5ݕ+Zf}G 7R=4GObT˷ ώ#_w Taҳjt[H -ysGdhAu.Z54N^RӲG2Qё\I>]zP=>';r?8Dx[k5j4ITU W0*hڬFgLRgX,cA!*}% sY|{F+u]$_oIr+sźv8sR?,%_'N,8+ kħFgd/$[5'Zǡ)A{P {2dfܥC(QUg1r\;Hbb τe+lI""Ӝ .?>ikV2Yr.6ы<OF}Klc+$#˧{ɘ 6S9Ґud`*ٕX5=eou7~4-xf&|ۼc;¼,Z_ݥ&k㯩 \&cwFc렮7ؔWK]}QY:H A=r/KuWT7Voi;Ս+ݖO?em+9W*3Mu=-ZR)Qv!EQa(9P+Bv{@E5*q]?vS!W㐸7g!N£IrWOԇdmbWBM!*I>t39 3D˓ʬy*{+ IfD$5w[EGeLeurH1T~ΧtWyw$vsjf2(dFg]kSz!~']:4`lyi1Yʸ7yT)IJu ^ճķ'^DvIwN{+$>| ؿzFda ObDL{̬o<5|ʐ-DIߚkyBoW+o^'^N? =8\|7rp0~Iq X3 Xdyzl0E p)KdBĔ,DK Ξkm?^$ fRd9M"Q%ƨѣfHç]9_RUAq}<=^F-ڋV욽Vq*ĝ/sru!`D[Iw=) EkvkȿgouS,`*糣: g mb|{{qOuyeڬ(+7oʈz0'#2VQǗME} LK4~I:ֲnj5'Je9wse>{hPg,f!k土^Ɔl|wu|Ñ߬DQx3Ckp)eC>Ԟ$2f=:Hh5ڢhFL,@:E~7BV?Q#3QA.јڬxWujTa7`N"*kKbYJD: ,T3sq%̓!Lo oPMZ~8_BUh2|H@mEj]<m wFɇ|![$Q#zT֞N6 讎HNb!b'rV!Rn&>ww)rR`><\|a +Q۹o=b$Jhܒ"A丄uu?\hG!7˽&K>p50E*~#>ĤR>p8%q{}# pqͿfOG[pVarNv @`HrrUHkέ|zg,tQͭNb)Y0G}ws=?1]Ο.:X ӻ$Vލځsw/@@{W,}v✥"ԸzEIIKUŏIeP`fq4ꒀy]%] -"Փ9szRi ٪Ӎ럤1!Sj3 ^-S`Y9%̥ʒ>2.-}pѷ7^-R2U[KV^j]N牅a"}-| k2a^!b)-D*57hoѠJ?\ζn<oQ0^06%g>)fU*7U'M$+6_7 ԤY|jipUzǵA[ .`{ f"[ꨃH170u eeɲHk.a03eTuu+(l:*owQʑGwE8wU՛nK- ͎KMr9]ay+2p+ҹx?_Q{(Ƕ; -!1FR9nf !К?n cD$=Kn,PYgxqͩ'C }G%3CgQӜc$n%lcfUˌN^ޤM-'KVϚ9yezbQȵƏxTRQ5~ ^u9g3f {&#TuH8%2t):N#s??%?05љT*Rg)Sאy"҇SAܻ錪)qRK=WH=.(<>L},7汫ƎP s+fIX\h;sb).VĦ,|pUYY }0ӐTzqMeRp -NS\ .] HdvidK9}dqzK5nX e5bF6ʍmC@;?{R,l=pe(FM-c<: GНn喊&RaRVz*/ҴT#H6v#I(V!QҠG߄+xm2k3zU35հ2o~Gqrv * [ՒC[~:m&$4ijB84|؍pHr+ƺQ)؂I gHSba-ui-l/о0\M}K?FdD{={<ԍ^Ѡ;|x݋ ]94jFaf|l\Q!r53Lc6?aa5cG|-ls^8%6uO9Qǟ nXIx4paܽfζK~?+2yIb);(JΕFH+*1&"ɰɍPa%'of?cOOK 8VzMécg֧6Y_} om+zgT|VQ?'"xR;gO^L8;qaߘlLbL\Ww>k~[gwk:>2}ZB{W ,w&S ka@Ը?6>3n=)?{2H2, )qH` ޕ3jkTĞB?Qm$%)}bUq_cqY -_1Ӂ)j?E=7>-96l. sx"hc[y7?N - TK79|ѰxzjgmhInHog)v~ C;LJqu pmW<˗=l+(lCPm-[IHHK(|LQkgª?CEBx}QN";FNUcE\k5EG н^Jv<+Dk rKCN w¹*{Ϛ>jhÉW~{|kÿ$a=g1izf҆Mm  z`0X*+Gn ?J >[Std>)`zdM+9,Z', į>cu}nmĐN=z8$Rգ3c 1MEKY$ 5 ]Y^=xܠKHUNyxUqYd*ggmnL%r䰼!@Z"["(͘pfk"v$ρ9&LIQV:WIZk7TT!X52QIe(ZP b}LLϰ:.'T/ kS->lT5}Tr#e(SG:'WmP 8oVV7S*6⋫-7kI5P|-wSX-g `(TzI(jaZc^w.8g-fV]hl3.yOu2&8EAD|L|Z3ɡ2]ۑ5KqO[شܵ,Մ>k*jsέ *Ѯ|\A[ T O=5@'z=]Z(CGEfM8GWP+qNEmF068Z:b7-Ь%{Ch1^tm,R\H TZ#x㮽`Y'}?}iou8KP1㥙夆CZ"8@x µ-``Pj}6LlRU\6[ CZN"*Y=3CȾ3ڣx~,ceG ;,5R>Uw6ԼSAR7|aqu^ځ;V`ۼ:{~۔x9:7N+m1f75dGrzZFݬ(:%P 9GaxLIrl2}>Mn?KwE/:T@Y_a^OME^3 O\s _ ^9$-Q5y'msс cvV I߇!?I$7ܡ\ód[#mH܁F&8$*pw,意hiḩt-,6i0I^,`Ś7{~5QR ]5j^FiT\?8E|ӕ_eoH{UĠT&L-3QWnԤuM* ۥD+%j;bͮ' Y> (؟4 w]|/JW#ȤZca7B'8:{} N$8oQ|W mOnL)Q^!WCM8}:Nhۑc&4ٝqo_@xމɐ5 Q+t*\]w C!W^"ywne/R=`*5bJzMwZN h PQ7޴-␜EgC29*XYKUk&D\4]aw-5&_kD@;I1fͫ{C[ŏY}ExdS9ɇ@~$`KPK}=wvZR ?Ph{%Zdϙ'biys-KhOü. [4/%0y]|(珫DBˀ(D뺹"cfw8NgPmzdo *Ģj6hni[}iY LٱEf9eF8dǣOk@p#B\'Mo=) uĐEB>:6Qlo6]Z* ) ˸kֿ /d?6 Q7Dx'ey:KCaM۽T&ufTx_WD){5PJ7A 2wWqo-Cg*te j ^"~4{;fo-W?*wW1{|k.QZ" X-J/~ ۵dp;} WAD|Qķ~XC}6cT;k#7.{7c8T_4X;B*bm#"""*RJ)EDDDD̛?97t3Zkgсhzt&ޯw.YNˋվgH@E!6~brݴz]DDDDDDDfffffffVUUUUUUUi{z6Ndpython3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-bold-italic.woff000066400000000000000000011674201451074743100254760ustar00rootroot00000000000000wOFF GPOSt `GSUBD:(fZdOS/2Ѐ``k?cmap5j&&cvt lӵ{cؘcmFԝs!sy-rsya^o(3sy鍯5Y$/鷎W~=Fwfmݿݟ*lf[nЉVV=[3ouU~zZP󑖻_Z&V;Yym6ݵϷYl}ѮR6퇵_~v^#AǬS3Ԏ=[ni\O:ts;/Weog~w8`C>fh䰑_&tMjec,O~6>uBmSn2d{:~gn>f gL5ė`oZ%>ܑ |9>\Oh}dVyٕ/Ws9w#:-~U7HJgyKfm+ڽlȤ-AU:IDS" !q7|q,b!7` obXy\Vw9d*"`(?FLeQJj:y<̋Η<*Ox 0Pa<#aca< aLI03M4gy>]3lj̄xfٜ_Wx>s5x]Ę"#fp쒕1EnQWctĜ91?&MIcd1dEL6|>+1V>on/7Ĕs QS)F\k";T~1\K]Q2>Cc_a3!c8@r@4N'3 f "̂c|Vp{}>?W:1 X_(2bH! daa.K6s25 1緹$f-Ce2bCcu !1q5Dx'ĨkYFNG'Oq/c el(EW>K;WjVjk55j>^g 3jWmU2uY[=Ǖ^8rUUD׹p,[,:c8@h비(@k4AQ_ m ; ɨ/Zˢ%<[H> v^hW:C{@O>A@x`Ca Q0q888O\1>&dS)`4O3|YYL3 Lx{y^Y<_bM^+*\xq׸\{>#:\:\:\:\:\:\:\H ȷ6%+pE N2H:"z0FKēqId1KD|GO󹖮fWU^j^>_%ll5|[/j+%э`Eң. 9HfdCDk8f Yކe@gs!8 G(#f@j|ÃZ@[h<t.AwATx:2:2:2:2:2:2:?Ort9~'y3lvn{ p18'$8 g,\4H YmȖȅ<(1 .Fq7xP >ePP W\*PAlD@DC f:PA}hT n.5 p wA15xfp?X`Bpl o3yP >CB2uMpujQ!#! f:P an7Bch7A,Rc@[nٱFh M _VsKuR5ب(TC(+I&7ʝzߨMw@= &:tHWat FHa4VCɵ2茚1S"J~q= p\;JߕtϣϣBoq#\}WFٙ3=aۙqfQY^I3)L>C/_Nٍ޳ۋl/_:It֌1AQG`$g:s±fg803fl[3^Čf.~uױ_~;uQώSώSNRNRNRNRNRNRώSώSώSώSώSώSώSώSώ+~_Z~.k&~we~.~~NrE~x?\/>]ۯ3,XVg+볕le}>[YFTs֞ rt8zfW ĝvѮj)D(x5؃&OIx@c=ֈ-!h`"L0i4<t̄Y0^YBϪJ䴡I'eԗ=J@+d?a @G]-GLEc;RoKOIOߖ-=}[zho?Z[A k9++ ףHDIF&pA @Hr$ɩah m-rXg"%߈nCE!>Ak8=`0 0 x׎8h rq,'L1^~[ d d d xf%e  1r `!Mx X*a\*/wTa5tz{q-Wɯ IrFU(  WS Erؓ? '{%'S5R1F0LXջ/J"4AZܧ<{{{{(wD|%k0^2΂qrr"M[XZ"G-6G-C˭zYlCD[h˩ ɤ=T$*w;ʝDNr'QIT$*w;ʝDNr'QIT$*w;ʝDNr'QIT$*w;ʝDzb۰ V80pLzA3 06A{@G tnz50~ Tu:j@NZ'P Tu:AwC8 8p R4p 2"d˩Z .' ; 4sڮWsA2(*>SM Q 1?8fTA}h y nnIw[Lmp;h{'ǻ NN65xfp?;O`5|5U/9nhkU ~ri]^~8#pq8'i8gyip2! ..C6@\nʃ| '&^d@ x| @KMeP!3UUס Aʗ^6Gȷ͑`3B 9[7rl M&( ;!Xvb 614؛ *9K_kGGԾrz ujT[鹯"]^R8YwpZΚM]̙ }E=zІfjY*"5ԭsԭԭ4:F'"WUP'GD|? gV%{{w{w{=ɽɽ6fwi=zXc zZVs7q۸O7w 3f|3cn.fob3fbvf ;0C|cua"3 3evn;U^Aϡp;f\=gSK]\Vؗ4 M}mE>x_OC~'+y)˵:"z?0fMV&33kKX'Ugf8Q<Ϻԥoo`}~f}Qy:Ry:Qy:Qy:D5"0 gހ+Oa- e-Z֜Usn9źgY[kwv7?&,/nϸce{2uPOKd*wrvQcQ=B̬3k1Fj*eYhh Cea8Y2BJ|k W .Ry̜&oل;Q-Lga6e rQNF3_.%v3n`UfFg4F<ƈQ(E!e #gF>G2#~FV!oe2gFwih`TmʨΨ:avR6C#e1yFHIFHg#H|祌Z:|J*\sv5P*8´Ob.8+Y,mm}!93krRYř9;D>Sgq r#j7/oăx Dsb <4g WUxJ1Z 73 mbCG񤡓c̱ GF`1GXe!fƊq0Y4L}kAaOP'( }>AaOP'(B YpAz =\ Az =\jSFWFWFWFW&.j{' iɴddZCa 3~'hc)^LC# ]ɄQdB[2 p3n =L 1hݦO=Vky<ܛ'1i6ZdgG5G8gr'8b<#~y/}6.KR8T<CP8R<#H8R<#H8R<,pk =Έۃ88N<88N<88N<8dqAƝ<{o/q\yW~-}3k]^zq'# $lmC9~pvZg3N g993:s(mu?:g륝=ZX w0#f2'2k} ַsCĝIwטܘ:n`癩j ֘ZؘZؘZؘU}]pD0Wr19X%tǁz"0s '1cKE+f*<,XDZqZ885cX885cƭX89ucX89ucX89;kŝZqgw;[ǝmVrgY+UZwq#q!88GCq#q!88盦ARmWf0b0`Xȏ̶tVģ:sn8puD1goCcx'#q՜>:xes1lTUUVWYFOq khz{o{-܏u?p}EO?{όam#1m_חPb"LDs"י>gf>>g"LY"nCzt vo}n9ݥtvN۝G[MF`*<:t SǛ~"oC"OJ~LXK:'ȅDr!\H4撵 pla60[_k^́ghj60cmpVp !00FhH10x`>.1!oCzt~֣G[oC߆t ~6mHې!oC߆tM.OK '?#dɊŬ^҉^F__Sد۷~9?yzWed.ٗX8+DՆ<ş =m&s(dZPmz[].{Ew߻].{Ew߻].{Ew߻].{Ew߻ēzwe `!Mx X>`(c?[\;ƍ`܈Ŭ*Ow].EwEldY̊yX1/nv`,6퀝 v  p18'$8 g,T8 !.B&d%eȆP=T!J :TA5H'"d>|7o䳿g&M>|q;>nJS<)km x3x*]\Qq-'!NʁL)r8<; I&M![m)b`a˲Ȗ>+{<9LFVUd[QzZE8xEObCe4^.3trt =dCO8~LQz:r,{GnQS"[>ނ%򛨥ߖD \$ `*LY1Os|<1</,k^2sx>2GB?8@M#d/\ xOhZLI<~ŦUO֧'#V2o9nmJ%ײT'=R;K!RȾ/J]%RȾdU/K1&Ƶrq,2~q#5|[X2بsUXJHXJ+ ٨ ٨ f@3}>Lh4f@3}>Lh40&$ o`*Le YWB֕u%d] YWB֕u%d] Yg%duVJY:+Yg%duVJY:+Yg%duVJY:+Y1JHXG1|a | ka|_2hlmVJY6+f%۬dlmVJY6+f%۬dlm6F6f#ldlm6F6f#ldlm6F6f#ld[ vl[!:Qs-l+YG iUdJUedXu UFvȮ uO6UMedyzX\kԵlZ6u-VE]˦eSײkUԵlZ6u-M]˦eSײkԵ*Z6u-M]e-njȚu2@Ȕ Sdy+sJW |_)ηsv_)W RJ}%_||ePʹ\+v?)Ov'I~R\O.'gI ~RO'sɹZ~rOαBsa?d~2?)O ?)O ?)O ď?~O?'~ď7~O?q'nč7~O?q'nč7~O?q'nč7~O?'^ċx/~O|$?O|$?O|$?O|$?O|$?O|$?OJ?)OJ?)OJ?)OJ?)OJĆ~bOl ?'6Ć~bOl ?'6Ć~bO?'vĎ;~bO?'vĎ;~bO?'vĎ;~r?~Cq>RM24u̺DVQd/dlMN|$D&ы.YL] ^o++[IԘfDm$zVBMD$Pcgof&!fRL0+33Bfbլ̦ٸܶ1+Ett2"fc&v܄ju\((V7'Ja79ĕ.&M\1+&&V(.z1.} ],$bYҙi֥ٜY2P*P*p$簆#49rtG&÷|l+lH&."师IE"V\ʚ师u/gq+.bpt"H!qt"H!qt"%s\?%s\?%s\?%s\?%s\?%s\?%s~ dwA;~$dwNI;~'$dwNI;~'$dwNI;~'oE%V4*d췢;PO'ߊ:OPP{J[m3tkF1/\ Xp .`,\ Xp .`,\ 2p \ 2p \ 2p \ 2p \ 2p \ 2p \ 䈗(.;|:KdJ&(_%߶j_Qlq}LeJG~P뿯p/Ftt: jVAøa\Sq=a8F ]wqs%2,F*TQ*UTJURE*Q*QQJPQjTjJPQJPQM,5CE5*Q*5CfTըFE5*QQjTTըFE5*QQjTTըFe7mDt#MR+߲m -%n1! >eiDڇe;b_ɩD~@'r;VkZ&Q GQ<-O22rG!9#|헠XղsKO6ĸ-$sQQn8 +SNRcI{xGh|h|h|h|h|h|h|h|h|h|h|h|atz zkC/Ecz97q4}?Yɫ=?^EY^EY^EY^EY^EY^EY^EY^EY^EY^EY^EY^EY^EY(eUJU*QV%ʪDYľW*b_E쫈}"UľW*b_E쫈}"UľW*b_E쫈}"U_e^)gp*p*a1:Kq*ܿ x>Igq"\/p"\/p"\/_E~_E׷\߂[p} o-׷\߂[p} o-׷\߂[p} o- t>ib ٢<yVECWyWϭq~ k.kJ E҃'9Kr&}e1*wr'vn'~y<_׸!t+D(8]%}%g1Yҝ(݉ҝ܉ʝ܉ʝ܉ʝ܉ʝ܉ʝ܉ʝ܁܁܁܁܁܁܁܁܁܁܁܁܁<ʃ<ʃ<ʃ<ʃ<DX4m }=V!yռFԴs]g`2˖Wڵ'9M!>{tvB-F-->Ed􃌾Ņĩl ]8r;2q;*`Ξ'1TbXBWH _!+$~įBWH _!+$~į,`'Kp.T R\*Kp.T R\*Kp.Tōq7]ܸwq.nōq7]ܸwq.nōq7]ܸwq.n4|H< 6 ޡxQeiԋ vpqu MY[kE9^E9^E9^E9^E9^E9^E9^E9A9A9A9A9A9A9A9A9A9A9A9A973_5^J~jUWrYYx;++d}57"*+*+*+*+*+*+*+I{qa a0F0FhH100&Da <Sa^XNuMuHUBU}ME}hH5@5L5}R$A+Ȋh*J }L9jqB}OONUSqdRa|b>VNJX1+c|b>VNJX1+dłX bAV,ȊY +dłX bAV,ȊY +dłX bAV,ȊY +dłh픣rSvN9)G;hU}UȪbUǰsXWX4Vu+:}N Y$d}A>H Y$d}A>H Y$d}A>(FE5Qͤez1)&*ZLDjE%:q:q"BZM/&:DbSLtN1)&:DbSֹ YNۣp 8 N8 h?]f\ށ}້zv\\ p\5WUqt\B.ܦh(%z9Dg"^}uj5 U? W~^{g>_x< Uf,T*PeBY2 Uf,T*PeBY2 Uf,T*PeBY2 UfBTY* Qe!,DUBB.B.B.B.B.B.B.B.B.B.B.B.ݟ-{lN'w#^ގxBPl оk7M)AS4}%LMCF- U{=jAx̻blU/| qЀli7@#}#xTi5$}negso;xݝ8|)^ȑfd9=dCl53Y@ЫD8*!/GүD H7GוrɌH?52kB пD U>uJ%du"/*RZ8Fc3KWTY5Ǐ¨EQ8QCxPeuGZKduYÎ-f,ѲH7M XjS$e+U7a` ?mbLcd4ԬxRlͅ䵬u5f̚}c@暃[%:VAPjPѫz64UzC 5~S{0"4cS?f%?zbXX1ƧUR V Qb&ZHrw؇;2fa3yQeNQon@4[fYr:r 0ᷚv:⯿OU3vyяu'mev>a dQ2FFQ̱J=-w̭-c47E#MէGw_eYe)W*յ.ePmwCt}h壒fe©B4.hvX\݌^%bt/#1uF,a"M͌b"}53N\ǵVd5gfETV&F16V㠸H$J0R5#|\T=Bmd*d38G?ct-Y0u2|>H>F${ "YU߮dpbP^{c#)hU9"LWE!PA%'>[^b[Ep~po2 ԎiV03γ̨3@}Ŭ>̬e3󆾢.{jk̞ff;/RfT*ɿ̦Kw3ȻM]D'y7YeN2Gȿ,f&w󙃢9K}Lbdk\w9w;H*ϋxw"$w B"*JD:CtD V݆PJV}^JY#*楊SŪb!FF*U,D Q^+4*ZM 1v$=)zSwq-.iPݏswiiF"#1ϰCIVg.Hf|!e  Bzs1 YMBVS!CTj4G᪨KĿ/fF@ZvdSh@4 ۊZ dE\Bf,"3X~ _/塀H!魨w9}.GG:3c{E(vJ]y HG@UMU[iEYq+((,"J.{p=\e˞\vBpҫh^EwV+QJ,c%Y PCUoPqWY_s<-mYxm'Y͊eEWSV3V3Vd1+Y̊"H9*+**"*s׋ѧOw}>] kVѤ&U4IPѤVǾ-q?7w$I3q ztM9~b!>4n˹[|U9wUάhMOm ZL\3q *H9 6g y8z4>e&ܝrwVʝ8';S;yk;"3/g̸Ft5 EC'Йc]Y7+ԼGah]RT%\g;:}+wBG[hE~.6ǝhĝwN\ J+z=Dh#ϱ( ΡK(lG]STTw8fꐕ$ع;w#&!6emʸǝb'& 1Q~fA\\܉;s'vNL܉;N*X4`ZϥC&dv3|7ȥNP~+BhSPmn*XZ T\SMm"H6tT gU|up6u+٨Z6wF%QlTUUUUUFQElTUFDx"F就s6V&zp_`eD=z.:.5꯿ATKj QUh9-'H wӮ8bX*YH4ˉf9,'Dh*DSA!tJQ^fe&}nct#{(6ѕ|V48[ .*PżYk= 1|}t_ص_NWWŷ兿oت;xu1.ե LNf|ȵq_8{u-<3^͌WgWuyx~m}b˼%\vNǿ| ϚX)#W~\hȨAF XȈZV>-"X+ga,1O1f c c־1dLU1K75v=CNb幏=D<ڠ(h#f3b6##M\aĨXc F1R;wis~p.Vb%s!}o؆oőnvFKao#v{; K_䛗o\qWDi}ܺ@n] .[ȭ rKh&g*\>%2]tzAox@_a<qa a0F0FhH10,,7-X K`V,ev{;G*NJtiC/KXE\i"O~/Et/fk {LZҽͧ{^tkn"܂?H[f;",hkZB/_wɥh c:䉈nr^DOy >bD?$?P>6Z>$4?9KU/dqz6F 6f-˗"70N{y9/EΧL9|.2Ry|QO&S-ɲMt,wH#.2<yEǡ&qpDGxA*U vDUls8.cKmX]Xeyu_>~p18ϋ+uϘl>_/\qsN_ή CbTxn 9<-%<o;5wjmtN@Wݡ!c/ yi\cd 2qi?qL3 `6$O_W`̅Wa|X Xo[Rxr/v0 +*{}>OW: X_(z/vw5~#dV>e&!@]4 7-]vNa}Cp sq8'i8gyip2! ..C6"5Aꚣ4ԐPCM"-cN.}'iIQT@Q6QAQǣ(xT](e+P٤MHֲ EP@L&$dIhHC$3Ʉ6%==\=W=>3I&}g̭~wV[}w?鲡l:Ά汭a{P6Tk4׀]7P=6T cCP=6T cCP=6T ĆoCPlP]6ԯl *kCPlgl 6T cC- s P6P]66 Æ:Ю:~KͷRԫ-u괧RT= 7Lll8SS:{OT{ў걧z%`OS={|{Ξ -{jĞ:sbOiOiOeOeO9Sn^SE~^>i&mWmɮZ7vU]Ȯ+ή:j]UgWUo]UgWUuvU]UgWUuv[ ꭿsWUuvU]UgWUuvU]UgWUuv"ή:ή:ή:ή:ή쪺[-[:jvEvU߹FѮjFѮjFѮjFѮjFѮjFGiowTQvGowTQyTG婎SN쪩S:*OuT`0y6Dy;%ExW,{ȗ(oW<3qHpd;UWS:pNϝN8gl8esz>fO_Wu[W v?^VG{"u/F')};#}5 ;w3уͣ}8qpiWk>|Wm_ѷ}E|Wb_ቯZwj=<-gf[᭑•2_ z* j|_{{ᰯ>UoLcEv>>=&sѽ&}81zcK3Ϥg3Y}!جf P.\?׏7Gg׏/ea5{Ě}p_YcO^8^7_V&SН.^ /A VX-Rc2uwwww a̾Y!<݊0vdwk>}J^3w|kz^{ִ`GuS„ `Ub7>׷~utS=9vx/7W;n ^o^os_ϨU<޻nｻu+`& bwO<+"_— :H`o `89PSB\Z5> nĒ.ǽ{Dߢ */א_mU]SG7z/5Iז @>|4;Vo&ȇ¥lVakGddk߅D>m?DvvpT.)O3.N?υ-]]~7ݱ[OV*pEpY<x~xmdF"\">0YqdY)AׯbzxŌb\vV\>[Qy:sbmw;Lxp>]kOG=J|5|2TنUw.\6Wx7śȣyNNGÕʮʕÞ!m# P1\<) N*aɞ /T6O:v}p>>y;Ϩ]ٰyœwu~pQɯOOqZ<鷰.\Vjުo |{>]U9!~Hq q8? 8SqrXOs[uZpZ}W{yW{y^^}j97\u.t"󗄿]UFnz.`kȜIU]fE䞪D 5{SU˭tCTpZU:x*rY[r.e^s烟*Gy뽿!;ȯF"+ܻFߍPpoSߎȽW'rLA9 X}plf7Nwn=ANl\}mV?C#;TG(V?YgbώݸSc<8 z^D6GOW(DDq. p!..,^ Wb&ը5z܀qn-W5n3]>ƻ1 b6`.>܏_>GxSxa2ځNr:~G\}\*986F{Q@QD (cc Κ[|fĚ#|-r?fʚ"߬zdҿ.]ۑYW||.w >8 ?8?ďcp48'8'b*N)NK5?i8?43qW[ykCԜ1B\ \Kq.%L\Qkp- [7jnr_/ߵVoï:v|_wo >TsO}o59&k>܏ ØG(xOwx Oc _y<^B /%:,+!z,,E*lUAХ^upqjjiiQ㺩ެYL)[V> [m(>mTlʲkʊ[SS4CSZ)+# F Oqݬn()\i v$w hS j+#ذb?M\YÜ?2\W*Nq냏6x>a',/L~%hU9ءpeq&9sq}X_}n []o-pvSwn܋٘.\ݣG ߎvl-߈chY9$SAc[l#v s u3%5~ׄii׀k@5 v H]Үi׀kK—沰C=a:5e݆ӨS^)].6E"\w[,.>lvFvw85lkݮawk?Do6]pCd _s͛_ uMW|Cp UIakᴊS]隘*BI=nˮit0+:Dc*<+5qX X|*% OTæ!Sa֤Ut`oL}?_ ߚˆ>LU]Z\kqnx /X x vg9ݰ; _ĿK2WU셽5}}7-6{Mx`|Ouj3p&9sq^Z p!.. Wb&ը5RGKEwQ~GEwQd4Gi"Ӫg`:1s1oT?0{#x4樒vTI;UҎ*iGJQs*iGJQ%vTI;UҎ*iGJQ%vTI;UҎ*iGJQ%vTI;UҎ*iGJQ%vTI;UҎ*:<먲QeRG*KU:,_$LFE `3>n;3n;3n;3n;3n;3n;3ti [j2bù5ŰicǗ)5)>8JWN86]@đѪqcoEj`췥p#-)aodQPBGZGkn(Tv6I’_Oeޥ̻tWOâR]Uy`W5ݥtR]jKMwUMwsyΟ\ea?﹯wroVN`A'?׾x c5w|x'0v_*|=89 <#|9 Fl "ϧI^)U.+v{NsW>lg> i}ww}}o}Ko~.o~?GO6mړgrF˴'tק]5+s=Gs=~ϕu?8{ٻkO}1{'gn6uOfo՜֜9vs.S;9msu9o)y{Vs?=_tys;}sg͝;ѹĜ v-}{ޤy[i?Moy{t^|^˼5m}msr7}W(_}k[ݿ6`>p>x=6IO\/OϼnW˿+=G#@#0`oG#ȹy8?,n=뻵w+n0'MNB3?iGhcqYgwgݝvw`pYO<`3e6_WWxOR98o8e9Kq.%L\:ݯigv~v-? +'Xiv{Y W鉿tcx䊱GOZ |P 4@o| l| #[:Hl *6O3asd4.{NB+}g[#Úa و!6腬V8^+d+ U? يCUG5![Y1=lu(\ZqS_CU1SS\l]Q7{m2bG?.x2\[;/*|i_}<&+~I WV<.X *^W|1F}N5GECP4氽"LH7V*ޗSV{>>=_fFE{^S~RQ|,NQΊoS+Fa2VFʚpIfxd¶  WTn_:hrmT<8=rGjy^0SyzG>PeKvծio ].:=?}lKqÕkVժVVn0|R6N*̤f5YVe'yza8džM 7L>LOxå?(8b+Z-;=\5qr˾.3 Vri #"a[UEXWUtRuVe5^Ve5^Ve5^Ve5^Ve5^Ve5^Ve5^jIp|U>8Ae^Ve^Ve^Ve^VevzYzYzYzYzYzYzYzYzYzYzY^zY^zYzYu^.~dzx<^B /%:,+!z,,E*ݲz+@3ZH"6VB;:Љ^k{ZFjZ¶2T-s~=oc`4Tk*1 QjDQ) 9>+>Jʚ4c8 gs0<"\_\p9/q%f*\Z\ka? No>orz3n ¯q; ݘ{[g>B3g5# X?EQEx1QXh@#^Ea-`MY^zZzZzZzZzZS5r|)vqJ `3|(ll)[ð%lcO˦<Ӧ^7dn6LNYnج)ĺks0jf~Ga{OzާK``scY1?nǭdǬOm>3q˜s0y;a_ q.Q2\+K\ WVy\k,u=x/F׸JzUfI:iQ'Iuq%x*eJiT)1W)M*I4 Gyy!V,eEŋ^%O& Ҫ\Q.Ɋ%RrMabӄ7;mqHVEsrE&V5KUMYQsv_:=nJJ؊7| cC$OyET"S|b'|V*fӬ|NR>'U}*(T$A TbzUY*=U5ar,|E!2ԤRBje +J)V(fD)-WJ+*S9+=tjVZ*jJ&SQ1SQW %URJj*j*jjEmeހeyzE}fbآZ*IuP]+*R^a|+,W׶r8vXQ5Sc+Xb_-yj¤:K:KĤ~a8džIwm xSk1֠֎QkPkI֬bj-ZbroB_)b[NQlKmb[ؒU뫔O|Owq0s#C?Ƒ8 Gp<~p"dT tpY8`:΅V p!.]_8Jjg-7F iR&iR&iR&iRY|jMoUO٪7+ճz]UCgU(xMؤMؤMؤMؤM]UlR&UlR&UlR&UlR&UlR&UlR&UlR&UlR&UlR&UlR&Ulr6MnئITI>!>SqNOq Np>P} 6 ݘ{^<#x z\rZWj^-׫z\rZ~9rZWj^-׫z\rZWjuZWj^-׫z\rZZZZZZZZZZZZZZZ>Y-rL-rL-rL-rL-rL-zWqWqg< >݃=y7張rC9t P{O=GxQ*z1J-0j:jUM'tRM'tRM'tRM'tRM'tRM'tLMtLMtLMtLMtLMtLMtLMAj:cj:cj:cj:cj:cj:cj:cj:cj:cj:cj:cj:t,zn=NgcwuRY'u2CNUru\]/Wru\]/Wru\]uݢ[unnTǫuݢ[unQ-E]uݢ[unQ-E]uݢ[unQ-E]uݢ[unQ-E]넺N넺N넺N넺N넺N넺N넺N넺N넺N넺N넺^z^Y]7fuݬunn r*uj{^/yEQ) > G5J|/7}/oaص5@|c])#C?=Ū~_Ū~_Ū~_ŪA7UߠT}oP A/ST2UL/ST2UL/ST2UL/ST2UL/ST2UL/ST2UL/S7z&7܊+܉.܍Y\<~<| gLyNg p!.%jR\q~+1Wj [-3RMMN<}_joeGb\3o09q`& f fz>JRYU'Vg? 畔O)VRS?S#{xtOSU?7a?V?3qbrߦT??c/P?[g~ϱQg's*6ߦJoT*Y7xy|cJqoI̺ A7*fRT U7(aTg}OoUUcUQ}zySخꓪ>3~_T7UZU4q_eR'T}Z7__S۩UUߦ_y~T_ꗨFUT7OoV+&\T*UJկRIU^էT*U߬ꗪ_T}oUUU\կR-UշO~OaUQYկR U?vhoVY/WIUߠ3mі7 EQCѧ}J'}vQ0>awڋ?wZ:%[+}oU}Fg}Vѿ賊>nRѯT[NܿTMQѿ賊>3>S~gskێPK'{?V۩OMڨ_f&ͨ?QͯTq5V)5p'|b\f|Fg|Fg|Fgo%/uJg|Fg|fwV_U;ij~5Y)((((((((((((((lrtf3J>3J>7( J~ߠ7( J~ߠ7( J~k|Q5JFɗ|Q5JF(%_k|oP JA7(%ߠ|oP JA7(%U JA7(%ߠ|oP JA7(%Z7(%ߠ|oP JA7OnTJQ7*7oTJQ7s8䇕|oTJJ~W%&%BA俧JK?wSY%i%RY%UY%U%UY%UY%UY%UY%U%߸_x7f^<܇~*Y7f߬U|oV*Y7ߦT|oSm*-BP9qyoSm*Mŷ6ߦT|oSm*Mŷ6ߦT|oSm*Mŷ6ߦT|oSm*Mŷ6ߦ'LÿO8w | :[U|ZŧU|ZŧU|ZŧJgpXa?U?ʻIy7)&ݤwnRMʻIy7)&ݤwnRMʻIy7)&ݤwnRMʻIy7)fݬwnVʻYy7+fݢ[wnQ-ʻEy(ݢ[wnQ-ʻEy(ݢ[wnQ-ʻEy(ݢS;wJywJywJywJywJywJywJywJySp3{K彥Ryow/ܵ&\W*N)EL)**VRʻFygwFygwFyg}*>O++gT*ŝQ-{퍊'ҭkw>t %@I/Pq%Wq%Wq%W B%PI/Rq% *zDE=*:*zDE/P#*:S*:S R[|M<{fx3 7c+\r*7nv}[ݶmpx}YUzU vQ7)ڛmZю(EW#vD.RÊ5XGk}䟂hgUqUPU(ʑaT*SaFr~<|520VwWtJX bD]e1,Fň+¤ FM bDAzTq0V qpZQ#`DA\B[ -uڏ[#}E_kZ}E_kZ}E_kZk-Z֢k-Z֢k-Z֢k-Z֢k-Z֢{,Z֢{,Z֢k-Z֢k-֢k-֢EK֢?Ԣ?Ԣ?jN//N/rG{"[X ,s\`y.<X ,s幠ea^A qc1`)ЈWфXтhE0nuƭθ:Vg[ ΅VBs8Zq3nq-θ8g[q3nq-θ8؀1wa8g[q3nqƣ Ec|; хBkt5BZ Ѕ/G_ininic}?wY#戅9baX#u9b]X#u9b]X#e9bY-˸e,eܲ[q2nY-˸e,eܲG/ĕp5jq u7F܄q nm~qopn½9y<1z1<'$~4^>lZ3!88G~#q18x'DLI8?)8p:~i80F,X#ňe1bYX#ňe1bYX#ňe1bYX#ňe1bYvAEn[AEn[AEn[AEn[AEn[AEn3zXÏւwg8{ǧo3r'#yap _[^Ā3ٯ^cLggi -|9r[=9v.K{%a&r]'ɳk_wD@W,Ў|vKv}pxpQPL``}NC.gÆs]_;׆냽nYpqǗ(W|WGVLIڊS<}Wߨ:\?vke+}p ]0?q$88. 4ػzR*>Tsq\\>^}n o͸6|7 w^<<l[8~wjl=vDZ0B[WWM()'.]]c5.=;:߉u K}*,UX꫰WaR_N_Ns>|,Y>|g9sYv,;T\7a&߄ivڿoivڿo';ߜjvںn;mN6نcxl's';jfUYv,j]5ˮeWͲfRlY,[j-5˖eKͲfRlY,[j-5˖eKͲfRlY,{T{T\\&a$lMi6M¦I4 &a$완=gLžI3 {&a$완=gLžI3 {&a$옄cvLŽI06L it.Kj.vKit-vKit-vKit+JOit+Jit+Jit:Ju*9[%glUrJViUZmV[NiSZ픱ݶwdQӎj_rDm+Ӿ/:NӾ/:NӦ)::mNӦ):mNӦ):mNӦ):mN{^:=wNNNi &-#7EwzLX9I._^KU.\n]nK%̬÷"{g\%]2m 1{^c#ƈe'"_ | ~1 ?\㲭.-.dzǐpevvU.R^:l)/{"o{u&>Go}LEQZހ/p;۝YY--Y4ow;\Zco73Ur@dp>25زjװ東Ƀ G[7]T#S&]ˑlNs^n`P5v׌s/K? ƿƇz{w] 넣gggoGXrssssssssss _ǿ&m`="qa!~Hq qjG'>p"$Sp*~p:~i8g,6tO|-w:.h(/pIX.eW3qF^kpcp}ƺ n |wֻ G305|"k"&x4Qc8 >NV꫘> OU*u[kVݞ?۝p?xcHXfI6n ;&o&'Eο ˰+Zǎ}asa{-u: hZg=|8]b6`.a ~g?y?EQEx1QXh@#^EhF V)gmȆ}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj}nj} (j0}x?6A|[`Kl# aW3j]Ͱv51l1l1lE}b78g =|{ao| W|@}Cq~G1Q8XNJcEԱ"S8ND'QljDq"8u,>",>",>",>",>",>",}l\}!<#x <)<=x<^B /%:,+!z,,E* ˱ 4+ъ$RH d gkX.n 8&FD/ѱ.(A1pct6FFkjTgT*Q3|FϨU>gCa_[օ%+ϊ>+o)~Y1l-H;+cuy1#99Fe#99F1rg<#9c}T \`#F.0r \f2#0;ypº9a1.fQeYwuGYwu [`Ae<nus;Ⱥ;ʺ1Xyeܱǧ}[EEZyq^COg22:]Ǽwcu̻y0dAdAdA]̸w1.fŌq3b]̸91nqsc7Ǹ91nqsc7Ǹ91nqsc7Ǹ91nqscwqGwqsc7Ǹy3nqg7Ǹ91nqsc7Ǹ91nqsc7Ǹ91nqsjB {q{q{q{7ϸy3nqg<2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2(2nqsc7Ǹ91nqsc7Ǹ91nqsc7Ǹ91nqsc2(2(2(2(2(2nq[d"ȸE-2nq [`-0nq [`-0nq [`-0nq [`-0nq [`-0nqˌ[f2̸e-3nqˌ[f2̸e-3nqˌ[f2̸e`}qaw}qaww#ndAdAdAdAdAdAdAdAdQ1nqsc̸e-3nq5A%kL–lfy7zM v X.pAdAdAdAdAdAdAdAdAdAdAdAdAdAdAdAd&E.p,\d" Y,\d" p? Yg,ײZdAb!b!b!b!bMxxDwhMܡ4q_zxeQPTNomEg!h6i,]`,]dD K K K K KD'nǫ&:EdA.2 S2 S2{j8A.p~q~8GhcqAAAA/bP]  aB`!l6l-z aBX_Y +-JKaRXi)VZ + XcxD(X `A,Q D(X `A,Q D(X `A,Q D(X `A-QoĠ1hA ZĠ1hA ZĠ1hA ZĠ1hA ZĠًDт(ZE hA-Q Dт(ZE hA-Q Dт(ZE hA-Q Dт(ZE hA-Q Dт(ZE hA-~ ߂ -~ ߂ -~ ߂ - oA[DoA[DoA[Z bւXkA Zk-Z bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,! bȂ ,fhAuye%l6Z VF+aJh%l6]uyٿʼn[K_bؿ%/K_b?)OSb?)OSb?)OSb?)OSbay&K_b[ŋ?/ bwwwww?'4x[7ȿȗ®^᫑tkNqzCv`Er>Y7FN Gпɭ%d LZ>`tXdn,E|[_RA"HY) e,ERA":,ح㷔s@/R@j5R@5PV,bXd"+YȊEV,bXd"+YȊEV,bXd"+YȊEV,bXd"+Y[KXb+XĊ%V,bKXb+XĊ%V,bKXb+XĊ%V,bKXb+XĊ%V,bKXb+X1Ŋ)VLbSb+X1Ŋ)VLbSb+Xq +a5װV\Ê%V,bKXb+ߒ=888888%V,bKXb+XĊ%V,bKXb+XĊ%V,bKXb+XĊ%V,bK888888V,b X`+XV`V`V`V`V`V`V`V`V`V`V`V`V`V`V`V`V`V`V`V`Vg~Vg~Vg~Vg~Vg~Vg~Vg~Vg~Vg~Vg~Vg~VLbBWwN]ݩ;uucޔ`c.g匹13r\Θs9c.g:cΘ3:cΘYbcĘ%g~g~gR1gjZ>jYF,ZVP-+T eղjYAZVP-+>jZ>j7V[? Q1MŮGxl3H6]_f-k37hK  F֛BE'= qahD{f>7cSz7:3ޕՙNKfX\xާ8n ,d8M `B]D7齆 K^ax0V,5 6Nw43辑o_23s3gߙ'ߓμg"ε\".\*yqiuq;saz̑=oj樂9hs?s0| ¸pnP7 pCPv !nȃr0XjX;6'ҟB ?ю8q>b>:|gb'J?;a>?bx?~uddO| !|"I?#?5\Do|1F+\{,mrv"fFWqZĘv?hލ/PfFx#AT"0vaa~qG˨Z9e=Dw{uQ)F~8ݖaNfhJ;N]xD1ZʱL~omx;3ϚKO G߁N3نe1o-ír3UL0St x?feyqU3ghj9pUoU%TKZ/PP"MLC%*pc$f.f~#3Лٿx+pe+qx8Y3L9,yE&l=jQ?A-b]2Oa.dfviS|QG#Ŋ29!/#;2"$ʳV!B@jѠE@Sf$O$N' Y'Nkrq:ϐ%j ~5_WU/~Ջ_WU7~Ս_uWU/~у_t0~1_ C/abńab/^ɋ_C0~/a:%4;3\.aO^ڙ89;= <sx1g E~m|e ~1_ ?x@70L ^\t ^`y|P5ka8 F(8+aLfn\ n)0G`ΐ/`0 3`&<!xU֙_Z,'O'ɓrd9yjjx>K߼7/O* SN2SA~r^p }*BpRT'U H!Azz:NfW =_~:{U+?f.?AO't ]~.?A Ww W>r쾅^e 2zJju0&na;t!d~Gz+ud |+[$-T*I JB%qRIT'I%qRIT'I%qRIT'I%qRIT'I%qRIT'I%qRIT'I%qRIT'I%qRIT'$H% RId 8H&d 8H&2B&VdbL2B&V XD&V X!+dd 8H&d 8H&d 8H&d 8? OЁ't :x3wx=_n3'7Η3]k`8Yd,2o7ȍ;xfH&i$)-g#f dl17\ڷ@S=/C.wtu/<7 1_i$U*IJ_%鯒WI$UR"E5,Z#ʮEم(cvs;8!iDz lDpLld& MpD@V~+Ilf&;ƧdO9?'@/i:%sI\:%Iqo'Iqo'Iqo'Iqo'Iqo'Iqo'Iqo'Iqo'Iqo'Iqo'-qhi)EVl 2VA/8D4ۍFv#y'5Do^\x2'&FȢaV&ppkB "ҾѯN]ӰLGx."1V!"ΠR g?C\\߯'s2Qxߟs'5{d=a̕FH!)d~]A 0sθ^Y t}9IfHv;}&>7/3_`:X=;8y B8J`+l pvm| yn@688NS` ?9ۈMl#۵vmd6]ٮlFk#۵YJ}~kq d$cDFj-EM(9z'V(\τ}xdG2\ dPN-F,y eO:'v({c/u쥔,lߑozSc {=<*̣<*FVnղ2pGW9} 6?]UΨwܭk;#)a$dB_cv\*`'YX:T9D\S{Y=g i]"U[VG=l=pVܳ#qVkZqVkZqVܭwkZqVܭwkZqV[8s88GFkZV+ՊkZV+ՊkZV+ՊkZOKDы8oXLH36JsT'~wQy݌|,z3kÌ?[Fh16ۘ#16ۘocm̿I }eaqx3xzxGkwwuq{G<=NkVob~o[jBW 5_+|PjBW 5_+|PjBW 5_+|PjBW 5_+|PtP: CP0T: CP0T: C Ty2BTeJ?v:@3hIwڧIm+~گPjBW _+~@3P u_+}PBSu N):ZPjBSu N):ZPjBSut*JGt*JGt*JGt*JGt*JGt*JGt*JGt*JGt*JGt*JGRՖXvC;쁽 nM~VQ?U*gYE~V------kKWSnݨo/w\ӃCDI%QR6S,>%A[ptjWV+?7%# >gx1VF$y?O_?~?~[+I_A:[o>*m7[ڵ5<#Ktҟ *.x[=gQfL:,hG3\7e%)Q%~tEdh5t鳆ܷ?KYz/E^]ҡߧ:JIw>>oz|jq['GuEtw~,]#*o"EWC?zQX<3/?8f{9of_j^&UHl/=~vtU7?eX_1~fO+ӊt/5G]W\̈́[[Q۵OG3VFVZm]#K՝!iƘ϶jytUz}k歴[]YO{~mOTĞQG+{*KkL~n0bbkwfP:]Jm~S6쒭"VTT4&3l0}-=o` !Ӌl h3Z0h3Z0h3Z0h3Z0h3ƌ0h3ƌA;ryL~+X 5mfl =qxހ&o;l^/90X7xa"Lp 00 dnýp3b^7`> o ,к> ΆkZ'ܾm6(X(<B(t> B(t> B(t> G(4|BQh> G(4|BQh> G(4|BQh> G(t% ]BWЕ(t% ]BWЕ(tuj0G1x9$<O3,̅yx^exI;`'Dv"N؉;`'Dv"N؉;`'ۉeD2"`XF,#ˈeD2"`XF,#ˈeD2"`GyD@GyD@GyD@GyD@GyD@GyD@-+{DT_ړ(=NC~An\]gYUֵa <Oxxs</K2h92*„8ѵRU_ q!"[xk"bS8G(BD5uxÛ deG}G}G}G}G}G}G}G}G}G}G}G}G}}}}}1>Xkcc}1>Xkcc}1>Xkcc}LVZ7~쟼*k?5I]Bn+!3j1^Σպkr<}U *XA2f2wϋ=eJ,2fE; 9>t}ݏۇȀPYo/pz8#} f{ ~'$')}S47ǜ`?gFZ0U_M;! z2S MF*4A̶U/&wƾvvj{w: k7HQ3L%#2~*CXƵ0Hd2-2p41Ad>m\Ʋɘ9S6ˠ\P BLz,&8.!K.ÁUTJ}˪XoJb) ݦ =Vcfhw<̏F}2,n0ѯo+~sXe~>Wod ?xQ.xr9kw`5FNzYhݍ'u7ZwʔT,SI۵z9t,CŹh>Aϡ4Mh.4?ߋ?B/5h^t-z? ?C{.zsK}5G6Lm%Ts;$?0̶l~aed8k&N'k8)qxBd~Wƌgډ~Fܒ[֭M;:q`Z F:~HW0utsHF;DoF;Z@F;Z_.`m?FHc1ҁa1FڏH{3ތp-Z}ŌnW1Dr|AmIrqD\'ꉸD\=Wl"D[@ى8;Gqv"[NՓEBz!Vlڊ+غBnW&;d'$ꉨ$UODQDT=UODQˉz"j!hZ@4-`ꉢz('EIh3(Eˉz(*&";QTOEˉDrrrro "j9ULDQDT1Q(wYr"k9ZNd-gbqZ-'ꉮzNt-$] DBN)I4%ɿ "NDى(;e'ꉨDj"jU&"lFE]]&5zuġ쥌C:ղ%/챕=~H0ы=n'+Jc.ndQ\d6d aސ# 11dg'2 E&í"pa4<"0 4>$46>&1>a|B\g|6>c+F7"F Ʒ7/&IE-F.׉'ߍcqxɸ˨C?ag>/!8<~} cYx䞁o?>p=G 5}n8WϞq•Nx'N4`ШAsם.4j\ Wr}^l쯳.ɮȮʮͮnnN#mﻡlj~*'8qí ۞-q~6O9v)S*}5r?K䆲7_q;fqތg1}|ǟgN|C'KpU}Ӯ!qZ-etW&GUs >q74G5v9ƘBw&' g49.W9.7w>mq;qqw.RԈ5"LHQ#RWԈ5"Eדk9D^##G+r\\Y.Nٝ;qckpckpcVjGڑbޢa\UfV)r||H>o$ #]".&.&.wj;Ǝj֐{S7EM1;ai=*rJ!Y)fV^6232323Y U7Ⱥn(8N6K{t󫻻tTFfQfQf(f6"F*k CTbfJRficfJ-N1wp 3t-#c|TF*_#|BkPZ~A_DcA4xA4:lf|3_`W0x!3^Ȍ2]GdYSZn=5'&fK"6533Ǚ3ѻA/ ">!{ǨB̌D=N}QK%FEE7EpT9+V"V"g(Gs+##q9 Dr.#U~DE䑋r90wޥ_̬7 eCQbm!m~9ƹƵƵƵ]4U Ds36m<666=NE8af988h2M\"c"c78oh[tsbw htF'\4FsYͥf.͵\Εj.;;fʼnݍ?C9qk6zZ*bʹt[i>ｚU+gE_ h=Hw?vwQa֗=55IQ[~Q;ջݘ~NP;ǧ퍓vN;劣[!;}={{yQEQOx6U;|ޥzIxy\&K9G1t"6SyQ8 C|;j=j=j=\\U@* W U>"^Ճ GaOMs#D7q⽑ {xo F⽁xo`aGbbGOy1SF⾁$aBx>5N6i5 l1@6 kH6Zy|BC6 lsULFfⶑ Lfd@&jJcq@7Ǎq#qH$waÍԙ0u&L SgRcFⷑm$~F2r@6oYRtPYrk\Z.b-q:F:F2w 1#}ĸ m1q#+Ԟ0L7N[D&YqV$6Z@LPr6zJ@)bkTe\)WK7x&^T%W.%6[WW#Dk FԜ6ֆ֚ZZ[њ~šS=^qhCSќvt*S2499\[3IjKҴQފJglNzW -ꃝLM׉LQ062N1lChSEvfX; Fm)_ګ+cXArF-QK6rpA-Sb -Ŷ2ŶWꥊn Z-Ahq5Z\ѢUE5:U@ 8y8y(^; \yYCgQT0pxo8`*>?CG `* & `* &ǡ^ ' ar \4\p8iaC)PrJRD)P82NA&wj>?;=G)P82 >o d,*>G%*;?.}?9\Pڹ}CSQT4u7i|n.ǥ_ơqsPXuuݣwtj]_^Dag?& (l >?gNNiwsl' pp 93 p9sD9 s爴pnadFe`T*mY>޲Uj]}(עj4] t5FQZ z49"j5Z֏*,+ɵo~tl#U :W5Z@Kghߟd=Z^:~G;dJ2R%کD;hT Sv*g nA'kɚk>kU_4 MT3WJ=Ti y0\iFc>F1Jv2n'1:1:1:1:fw3}y1u=sh*޵_ W#{G db|Gƶ8pp3Z0h3Z%vi5Bq)> E8|ٞq1O<->Z(ȳq8!Qq*{N7ZۆB[9.Z{6%W&Gy(UVՊZy?GQ( E6ՆZQT+jEQ(EVʱ98{F1zn⸵>1qW;9v7SwR]W{a;y90֏D}5Op'ZaSy 3Oa)}]&LEy3Oq)<0fSy 3Oa)<1OmS8cX{f7BA1@uvPYZ}DjP 7BiFF mE,^=nz˽wq61tC'1tC'1tFK e#*R }JQA|tG\F[i3_`s_7X-GlZX嗨di ;X~b*a[ ~PB^WHߘERVt)+4Yْ7VC!4}`̇Q(KRz2f\~j}a&xJKYťRVqj1@++J?#+}ܰ#>gۈ2Ⳕ\B|.!>Wg)G|ƗgY~uYF|">ˈ2K|Zz~3Jc&[2bFLud)1YJLd)1YJLd{{w{\BLO"&md1NLyb4|0(cXAۈ ՅBbu!GyjGj)Gj)ZF6b#e`1XF G^#mKDٚ+:L3<-vNXxZ0[359goGK )f>l'83ЮEwHi$4e2dFݱkQER:zД/Ge ;NƠe{E%Zfc,;Kcc,QSxjO-e/Y'3r|gn}W=_V C}M&.`2@YIA(ҙYj:2ř!Nɬd"ͺa$a,`>1'| _bȇXRG 0w_((?0Y  4@3h( .fd&sM0ۀa&f`Yi͖a&L03 0rX _fD8 NN 8Np:g9p.p!\.r WՐcyqC1v"Lp @|oa N 33qFFFFFFFf~Xg#(<0ix</ C>|-,e=? 3_`cYk`-6&6("p@1@)A9lmPN.7T@5xc B;! KiQ h( m9vC;쁽 eUQq8vs;ι܎sn9ۭ}o_ 5mxMl e 8zC;pUp8>R}nE}åp_-\c;p%.pZQ!Cn ?4m݃KdȊ0W]l{`u/~LxfCq#ݬB7й*t B'Ё*t^K,R:::(Iss*kRv)ҥ(8Wp [u+n׭\[Up nU*UVܪ[Up nU*UVܪ[Up nU*UVܪ[Up nU*8K/ҋ,8K/ҋ]8@W+Jqx8R^),BV7\f캙]M@8 B(;pͨnfM:Yv>2fmCx [)kMB,e-So}6ӡm/2ӑ~tnvBYm*}׼5Uﴪ7%*w_g"(YJDd&;(7nVͪYUvuTnV Ya7+fݬh=+ ȪgfGYwdରGfTFnTFnTFnTFnYp_8΃.a\ep9 ap0("f|-~ohױ͆F|,s+ۘt[LmHguSOYkTFnTFn"%LڕG!S?{T"*PD.3(bRdVh{fKEfede틆w]iVݞ%91 *3 2(0 dsQ{~~=y=8s^r. #ƈ1"l"ZV+ v<XBxG`< IR5= KwOl6l1+1l6] l1l6lg[_f[/fPL02Eof]GG4g #{}6fgc٘}6fgc'2l>1l>1l>1l>1l>;}%ӳh5\I&U0fl`̅{mYnWv=x_?`wP+4 &SV)ɔdjZAlllBZU3ƌ1mx3S0m oNss@4 }k ۟  >G#i­pPZn>fef2sٙNgfdfefs~f>=p\fYˬì>Ĭ&4;~|b;/>Fk2/ϨEߓ߃?Q?QߓQߛQ߃Qߎ?PbWM#|0ՌjF|5#_͈fW3ywZ^b\07 sWM69"ܐ7U፪FUx*QH[̭lV6s+|f>e3OuZP ~Ca `a` c&xm0n;NSa1<O:$,ix<<񯃸@ʿ_ia Al!4"Gn$n"3 Sa2ГKB}2R_6#Vj|kyK/~A v db, ͠9@ p A8u'6B  6ïVa]^!lp Ð v2""؃{`A=h*+ǻ2C8AΨ3jZ;Ψ3jZ;Ψ3jZ;Ψ3jZ;Ψ3jZ;Ψ3jZ;Ψ3jZ;Ψ3jZk:r7̀X̂p}2s`.wfYc>,/K2Q&^e, 'y TzåT҇JPI*C%}>T҇JPI*C%}>T҇JPI*C%}>T҇JPI*C%}>T҇JPI*C%})9@8<ȇp[9'yC NBT2_ep%@[A4Duj]ZJyx-| # v蓶AѰ3Kixd?2G摷y a w'73J=~>_y6T+WkD|_#ɭ"õ2K^@_8E< ]p<*HA) cP!|ITɗ 8%&7¹ZVO m~E yЅݤGG0Tn3 g{ra4w| .y߃xM׾ ,UK6g**'uX/Bf wP8V"Ѿ7.w2KC *Yrz7X e l'-0 n`2w0]0 0fck1<'Tꗩ/SF(3foV|?~a#/ `3 [ ilmvNa/6ȀL82le> M?-䱆}EP >3I(r|P *TA5z2K@ &O'|I>$|Ýx~ψ`ɢ5y0< "x< K)xga)< "/+* o|..Wj XO_ײr\R.OY*E+K| kp+h vLYgu$0(̔wY¬d0Pn(LY}Y; s&IFaQd&IFaQd&yIFaQd&IFaQd&IFaQd&IFaQd&IFaQQQdf 3 &CaP<&CaXP(L\&(!Cf-sE,WYʐ*\P,ZKu q;c'dy!Z-kʍ+dYfldi۹p/l! ,xlE('l}2ͼB0/ͫS >/Q"w֊7] aqQbđx)T)ƜFKao-}^ً>g7F}v^ً>{f7pa tR tRp=pa,78`"hJN[6ww04c<bVN_f]ҍq/E+T*_WU*_WU*}6JRT*JRkߎu7hm^ы6zF/E]^tы.zE/E]^tы.zE/E=^ЋzC/ZF h-tntЋzAY;pNj_NBxBT)Z)hs}ntύUE4h.0V" eҋFzH/E}nЍC7zF=tnЍB7ZF h-tnЍB7ZF h-tntЍAw_}T>*MJGQi4}T rD>7FhUpU.q<*b]pD=d)2>+2>+2>+2>+2>+2>+2>+2>+수y 3`&Z}d6$23籝q~HzCadRA8$KVfYmeV[VfYmeV[VfYmeV[VfYmeV[VfWtWtWtWtWtWtWtD8]+tX ,WzCaA< A0u0 F 7q0&Dnp;w n`̄{ \`.(`>0BSV{!|*X  >U*a qWBU!PNnWG?ϰRHM~-`4 6;`'ݰ>` ȄlC p8 yrNsA)pC)2x&wJRp j@M2uNASP9uNASP9uNJ-R Ԃ+J-@Ƴ=48@[h=b: 3[b.y }H\~o#+.7.YpQ@ RKb'%*|eSƊy8`" d;a LihG/-.`6$a9bb.CnhB9cvri1W7oư+) @tRGD9W+N* q-g]4qkG+w/J9RβfǧكgE? '8w7{"=Ω90TkGLRps# ׼Gz%ʺ眫^_NiP7-1-^ <&Zk#am\OMTMMtJWf#3hW ur+翛$`?ӟ5T]kna0fʁYדeg-Xzd|I5%+sq "'3Q .sg3R6q v#y9UrثMȥQ61zUfJg>*QeisÿGQhd\Ƹji4c+CTsxW}]Hwt7 3,Rp)tˠA43Dg|Uw|Y\#;&PSS#U*******r*r*r**<s:<s:<s:<s:<s:<s:<s:<s:*r{qggcva0S΀ܟ%q@JKéDoqpL,»&aK|W cU|ucTT~_U:::Nrʌ`|FK9Yi|A]vEOmx[Vx[ցumAv..sVL/ 6ï+g]BO~@@a a@p3̓3!͏"x1X ~%< x^u/2^ek  oy<o7O' x7-|#lgH_ 6f.1o+ov;a6ȀLȒ*uJ]e9 G!1`, /bЮR8 eT UP j,Q &>qP8O'A}>qP8O'A}>q(Q'\p\W5x>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTD>QOTTe!<# xS4<RxEx ^WUx ކw`%|>cXXtR8u:Nj'ZIqR8u:Nj'ZIqR8u:Nj'ZIqR8u:Nj'ZIqR8u:Nj'ZI)))))))))))))))))))))Vkxe N j=:{uPC8RO`|E4h.%a5DbjbjbjbjfirסFP7\RNhqʐO^Ky;" F#8FAWBz ^JJYo(N_ehk1+xsk]Tpx=s{>9IV^C_e.K9RεT[YEǓơ8Bq[*3G]VlsPK;Kmt_Gɞ٧_`/گ\` CK%{fjjR*Av^__:\x: ߞAOfAdu8V=Ǫe/=9b^2` u}w=0 .yg⯷+U 3sGRxلvވ߬CX Po]j_v`oiӾ &BZw}a,78\yl=UuԊQtc_cSTҧF\ihҍt]8F.Sߧ)re௰ir%cucune%ne>a< !xEn]l].pya-}䧖Cr0d]'gE7W0UX9UX98OkO~??K~Ѧ횝hg0kgxeTz_/jQu{jwZz*7GrQƿQSCb;o>~FQ!fT8D #;F~#?_pL~ ]/dg֜{E;u|R|49F"I]ȣTcGqqqq뻃paA>y4 bzU1w0jhv pLb7~v5O3pDU1x ^eހdXG-e%` 7Mr30&-0 n`2w0]0 0f, @̑n\|DxHe!<#$x (-T'IXO < K9x^%YpFaPQZހdXʲ& ɂk +=x>*X >a-| _¿+e6O3lRal_a X! ~  `7ı\m T>S2nJ'vv2;+-h<ȳt}Ȉ hf'0̳e|l.":05>1Ht0*FnlE0N5Nw)EEbI.3g4Rbu21 `\a\!2%5+ u󃢂.A]M<3X*5* O<drׂ ŲA%by'J-d+MטUbii" ?5 Xt-P!f#換hv ]ȿOZƵ@htk0z^y%.f RK3{/ qUZ-9VŒ;_0W빭W>َ%Qc:4ܮhzos~Ψ3[N1Wios߮lsΓ+jzz̽I1cfwykڶ֣-ڞnim}ppv;mf ?z8gheGp;9#cosThehĉP%^만%2zZ5D.vV6-?@k5P}Eh eRyGQyWК{-7åb+U6yŬ;PɝRݰx/>o?K/*Z桢**EEU=׳D~< '"YKOU5(e9JYIM_Z \+_:[_JTլbPAW>2vUe U2J&TĄdi۹p/l! ,xlE('}JsC'6mm 4 24ta;@.Ц&'P >NA BԃYe YRCV!ԐUj*5dJ Y#k>7a k,o;D5|xl?G1Wj|k XO_ dJG%٣QI${T=*dJG%٣QI${T=*dJG%٣QI${T=*5_ҟ TţpLԑ1`WIp~ 2oAWk^1h폊3k\;xF4Záհ][3%~A_~@\@<=g=9)Kˠ\AzP;/hɞ^/a} )RN[N_a_m͐#F~m {'x4 J"7+$?8zĆPQGPNi,0=aNkYԑ+GnyG>IN? pWG0C\IEN"^Q+*o"}9>^(:S~JZQ9b&B{pzڴVyshxSv}Q'88?ECҶh['mGӶy8J'[Bu,}Ҷ.ڶ=Iіif_3ogުGS=5_o*Q7#0{K%^j܍akk{UBVbanE jn墇1Y32RzȠ^p-/ڼ=8ǺcX.p+y`^DZqfgЬBCK|^}sιܮ`~aC8J72 i֎=k׋U% DЗ=:?{f=ԠGx+ xe1Yڷ;$ ѫ3xS DǼcs ǼcN{=qq5(r_=(> :m-ZVGd!m e! ̠pSa^-Ww.;p/p p8R}UlJpn\Wqn}ȫ^1$k]8"u5B놣M W@ >F[7EӉmgb4K$!#p;IXO#G<Rxx2}E#|qw^?khk,Bi Xv|UUk{I)F1ya` c&m0n;NS.n3qߍ5J#{7̀@f`̅{Mط"kP۾SWzCA˝qla @>Uc; F w# @́(X | `5|k3\ K!s)d.e2BRPY̥2~-`4 KA@SvL!)(]u J J JL9 `1#p  W8R %!jH)*iE[^%JT)ZI#R`8>n АH_@UGө+gLьURYs/J!~>b@ 6bjOu5aDwd6/#b=_nQpQ/,\u8H=z"[E]Aȓ_|8&_rpqP^m/7hO׸خgZRxN,7EY#A>u*5=E~l6O3lb5}cʀL8Ypϔ vȁ\p (T@TTP q p[s j3mC_@_`caϥ&6_+p IluX H7&r30&-0 n`2w0]0 0f, @̑Yp/̃p,, !xE($c'IXO < K9x^%xYکFX^gLD[7 +*,or-G5&\˻RV5.:X>[>-`5|kS >z'| kZ~a?FH_ 6f7 ۀyj;a솃P_߳5v-hq7o][rOmPz$L_)N_i$/ⷁL jBjkEơq8yx\oIڍ㨫&s%ruVr @Ĝ]3# Q`~[7J;|ǰJ?3R0Rga3R*)Hɔ%zFRFH#(nk^2ѰѰѰѰPhXhXhXh(a4a4a4a4a4a4a4a4a40000J k#PHe$2j_^EvP0Fƣ(]$ whIbtdd1222dd`dXω$]V3\H*eex=%r.=~=~8~ޱY F{Y]]NVJyHT+բ޼M7N *U8)dxQwn4c26&p ^|< :ȑ+B}2PhV?>`\(ڗ'gLh%cgJRb]\C[h|HuE7D:WW W Wbd ix?8@cIC?wr](4 U%xu3q5=ی)8pR=nߤ2Eo$2sd>!ǘs`vfU2Wɓj9|5r2*eT˨TJ9`55˘ :PLaUO>y@y <+SBe\oX˴ҏ8C6!S*C,9v$깖A~F05=B 1n!NG11 ө#bPr<wuD/` cch2(1HikՁ_:[_;^XAu ꎟ; C=^B嗢KQRT_/E嗢RT~)*_/E嗢KQ|*_/E P51S b b b b b b b b b b,jx`0 0 u0F0 F 0npΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈΈCч:u>}3Cч:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:#:~lu;dPg|ި۝ٷ utdK-:AՖcoC tө7SoLޘN1zc:jө7SoLޘN1zc:F˖[On'+ '#+CD<``j*c 5j6JaY3(4Ѣ+EwVs6{q31OVc e=y3}^zʗ DSJ D;{}:nŅgr8ʫe "Z_:Zί@_FUڽÙvGÔ=g~%Q*KkfELK3bIe_" m"("9d3^š]N$Df0odzWMզoDg^`8% g]5p`^d^oyڿJs"Kp,U<+.nnn6gʚ}c tn ݁sWnq0&Dnp;w ĵz;}ч}ч}s#0#0݈:x $b݈iqqqkW#D܃hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6hÈ6켱_<ggR.:fT`> d;Hzs s:5EBoZ71ͲD愣9ڌCwѝpt' GwƢ;c=hO8=hO8=hO8=hO8=hO8=hO8~f_zn.qxv AlG(цh#rmm kʙՔ+D KMYޛV{d- K"2jy)A%';;;H*"QI%(1Lm01.Q+E0IK%#AnП^ gHdcpzl51d<1O|JќxO\ /#]kig?+GjΑZ7qGw$qGw$qG$&qGw$qGw$qGw$qGw$qGw$qGw$qGw$qGw$qGr6_p6Ws6q68$H$H$H$H$H$H$nݕuOԫ6~j8o65ܯ khʹip&}T2I_biUg G+k?9:WXQ#Τcs=1٣=cKMަα9s^Dy(.MdžQ!0 Gx\U8絚3<!0Bi!;sȧ>s#g<1;=F۝NAMfe2Y¬ aV0+C!~~fg3 av0;C!fgH!fc1l a60C!fc1l a6^)mFm9\!X&R us*DޜJh$7'P"O:<-   85O(GyGyGyGyGyD#<#<#<#<#<#<#YWrw~CM^W;.+ yeEBMe gVN={9E{&~v O`5sQb3PЮ[ۚ=X:r 5Az1Cuϫ{ huӟ_ |Z~:?××uėAeÈlQv ] v Q&Dy'Gt"$Ƒ]} d8o+Ƒu:qx82O7G8vee7c%Xb%+^C[ڡ+0vO;Lө~:vLoyz}vMg`~љh;i;iXڢ+mK[E,mK[A}$-biX"-biX"VҦ>PE{ @-ԉF, ͠9z+ ߀?[߷ڵ¡WLŮkں:z*o4EY4$hTD$h&h&h&h&h&h&h&h&hBW"{ SUy7]4E]4E]4E]4E]4E]4E]4E+_Kڜb*bFʠ;R[HciLHc4Hc4Hc4HcO1DC1DC1DC1DC1DDf}ѯ$OD'5R~~UWdZ#ֈ5bhZ#ֈ5bhZ#ֈ5bhZ#>Km2h ("XY,,8;Aƻ;ihW8n\M*ZgklM2 s9saGx8[gkqj&169ݢ%G59g:r{]^g{wgҁ=ܢ{fo[-y }ނ>oA[|̶n6d$ADDPKS{CTĆ z GPEAdw&$tX@O|>?}^mO}>mO{>O{>O{>O-ߦ()/5Ӟg>O{Ӟg>O{Ӟg>O{ӞXX,,D-qkCSսBju>*l kGɸ)VEԪZ'}w.H>qSi5-ګEԴQ"jZDMi-EԶQ"j[Dmm-EnnniͳUjqӍq-=nM7Z^Z(5h"Z(5h"Z(5h"Z(%Nq3bqӟ\L 7Ps)I<ya4>\jLI3:v8MaG:fRt3uIQOQgu3Gm+WQ ϧ (J{!W0v3_] #P47ILH(I״UjZBMKi 5-%Դ~ImKm -%ԶږPj[BmKm ՓIg_=]ZcZZV'3_=ՓzV)UJhZV)UJhZV)UJhZV)UJIJp^#!ܛEEF#6~Y$^D~]SKE=0%S􋟈Fw1PQ\9~ײߵws k`6~術FO .\DL;'vbc#Mo-#ĚLVui-s^"O(=FWȓC}b )rXSU[/5X =>5]7ѽjˆOYRޠ=G(a %`kDw7{OWj~JmOb"Yl-OYYoDA1FSL`4gB[7ٶdV~_zz7kKbif>˼5:Oֺ0/` 8 0 G<),Oay SX<),Oay SX Fpgě-oVp&;vVs5{~Z.g8ϱHe8c& %2xL?ld|y?3, uX~ 8[ @d 4?)o) 0_A| f`&~0` ,bPb *+ 餵v`U'm6A2'eL7b+_j,<0uȏi+0CZAGV*ګj^JQ\L0TVQl0No:ͻIeHƇC8OUJ,]qj-eZ*1C:q=į%\&w +8U%n\sr/r#7TfTfT6Xw<-( b6a 3phٰVzֲTq!%ZEZ?s[F Sg1d~A9_~[u@XU]M3°EH0+Vu? :Jwz_ǻ7I=ĭ`O_}稺=ac0[AWf<.fΩsskYc?vP/];{{~WT}LIߦfP'( 3j)ѓS Gf[{m<uȿB$]7G .c/ SZ#J]?w'3P 6XK,zDo b&JQE)i;CMCk8e֏7jIZ}Z=9+}VJI zcv 8v|ctR~3jv ?ۿ3s;DN}?}o} \w0c/ciLx[Gx8qp՛(8Ogz_2G3Jo2ۛY8arlmsR2Ru5W7@*RívDW[qTX'ZG>a 'dFgK[e?ՇևRl5ڇ۳/vXV3'[-OfZgjf|hl26Z:z&2M7nqs_թa000} G&yEy dZֵsZ&ZnmYlq]]>wCin'PS69 ۺL|fPxvp$'OxelCXw/$w̑&_m:,6@}WqreŎ'n2#:s>͔OZe5}ߩ}gSyyZ߱gEm{GrUr7ʟoU/ 87sx9}R]5wŅvO*O:CύX+@_p͵XOr1ߪ,6s/>`=?WQi8ޒHIn$ƨ律+U_  >R j}sTo~d1Y`y KYmU16ʷ]E};SR#|ujcs9H=gV̡UsZ~ ?lL4ibiN62_Uw^Zgç>,U[~=HbfUhc(zs9aƱy|Q_>QeqHEJA祈oCX$,`;0 ڬ-zڦoW._E=A] ׃Ǎ&7[6p;Lw&6WP~<=uCn諏2K}0p&}t69r̮z=ul.5A캋fA=㚨]Oyx^Ux}{У<=w Dw»z39 fl0,Wz+(o렧`}71#1>i39LKo`|fY`.Wq?`eA5k@-Xւu`=$ @JKxO/,`? ! D@6 @Tl54hGY@kA X|0\Ƈu0N,Ɖu`X؛5\ WkFpn`{}qO Ex&?zxC=| O`*>/tP _A| f`&~0\Z~ "n `XVTƽTƕU ր`X6M`3آ[IM[/` !֯@1+xX~ Wvd `+^m> ƟG@6 @4("bgU*UIxUOSSZMo$6IMo$6I\'>GRM)ަoS)۔mJ6xRM)ަoS)۔mJ6xRM)ަoS)۔mJ6xRM)ަoS)۔mJ6x%x:rDp u%,_ Ɓ 0WU,_C;] ׃8&]w*;Nex2Sީ Tw*;jNSNsNᝦ? U?*xik^ P&exx%x$gާSĶOX. JBxRP)^/T* Bexg^덀t)^[7yJYOV'Ux:ޠ}A?П@p$ĺ`a3;'NSެ,ν9h -DX9\.Vb1X .b1X.9w,.c1X>cqX>cqX>cqX>cqX>cqX>Wr<N'S4p:88|>VjcOcxpUjd5pj8Y5N|mr5pppp8,'Kp,'Kp,'KpJ8Y%l% NNNViTp\_ov ǂSיf5pY nUjfp,79# ~Uϖg+g5Y%,?8,?8,?]>0Up8\VWpZz|-_8|-p-gUԛ}wsJ+lA n z0p8A9 z oy? x< ηηηηηηηηηW+|pr8_9W+|pr8_9W+|pr8_9W+|pr8_9W竁|18_ |q8_|q8_ |18_ |18_ |18_ |18_ |18_ |18_|q8_|q8_|q8_|q8_%| 8_Η%| 8_|q8_|q8_ W竁j|5pZ8_-W 竅j|pZ8_-ꧼpZ8_-W 竅j|5p8_ W竁j|5p8_ W 竆U|pj8_5W 竆U|p/bp/bp/bp/bp/bp/bp/9 竆U|pj8_5W 竆U|K|K|K|K|K|K|K|K|K| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%| 8_Η%|pJ8_%W 竄U*|pJ8_%W 竄U*|pJ8_%W 竄U|Up*8_ W[ [ [ [ [ [ [ [ [ [ 竄U*|pJ8_%618` 18`%X V ϭ8NQ&襆_o++Kdkx菞y-US_9}y<=-׹f=o* {RV{ʳwڻTo:PWW?eqA1UTuPKVW.*EπYwMZS[̗|Z}&r-` lUpig}GM4mV縩gFosaI;YRT(yU7`.|k|uSn׸b408WY^E]ћҿӫKKD=urg/ ߲UޫI~N?oRI|##~KY,Z,]2w)HmpJ':)zJ>rI_I[~aH+8޼}ٶJi`{JPUF"!/DnJ3ٔ_ҶMӗ=ڹ/Op7UPb[K>vx)M#Hc ,l 6R9SCDXF><𳞌uu>9u.iqywFj ߤ.u*9RgHi8rHMe]o~vZDc5,WM}h_>/Vߓ3F>1mY[?cmsa>'][βuYse="ңh/ӏ9c%wiċRNYv#UFUJ)U߫irWGss P]\!hѪkXu8uTuL5u:u"u[ޟKToBJTMmՑ}1|ϩW|勉|.}+S|~PV||[mz}4m樇&fzlivf'7Wq kd\yyZ`3ǩyJO:9%cec{? ""#uΡu0 LeV~V Lal&K0*WmՌ4gޅ%S@b ֪ (R쥭jª=S*ao:r襎*Wɠrgn}6Dy]C9M WX/ Ar\ҋҋ>zq4җa|tqa \fk,k.t].sM_z-=mJO{ I?{m&,?xzow 9Cey;Mex|gSx=wwDk3sXvgĻԻTy+*[Q~__wwo4}72wm xk&㭙KF%#'(#'(#'(#ǐ㖑)#2rښ*9͜|Bsjj̟U\|I]jl1w1\*X^>˧l˲0ojPVKʲY%̝/5X]TkyFkPVX&mm 1w^h-w/4NL=?D 2ȝ mˬ˘_n]oc5SӬޚ5b6[z'Z k[曬̷XIkm~UQKhe{϶ ,;ZI݆(z ETğ+ß,FvbfdH˽y"FY ÅgE`[r|R~X,lNs+R|aZYA$~K6y_.6øe%tl@xsڗɫ~^7]ùDګh`s:BoY ji孖ȰzNS>o&Ya8<{ɺUYɤ#oʺPw-=KbuRҖ'OVb1Khmk₥XFժabG/|>k7u9X7pz~_91jY{sme]}n8bbDP/~j CwmwOaA5b<,G}]UI\G)eCĉiw"J>E5D N`i%-((VJ87ʺ~[7ZVq~ /#)^}[qNDV_S+;8chTRM=Y:\?>T| P8H'ǫSӟ&tg?ul爏Ż?ǯƺJ⧯?}~z;o}O,~={Tj暹6Vn_C/V# _ Ч^ 橷mT_gxQ<_L<_B<[&o*yUrtv۽e4u?(r<14F98mŎo3.u|qیkfeBoHo\ۅu]lՍR|||=0#ऽUTNL[a>a!aǶcSر 7#aėp`d# #zna7&U~ng ;j|)|9,|9KrDr؟!%-VhbAl:}bb7C7#X$8擰NKXgX) ubX)u:CblNSL6C%%--[XG,#^iX9,b080008[;6ŎMcS;6ŎMcS;6Ŏmc[)/fw w wMOUAk ) ., .K\D\D\08۱r@zC&8'-23z`qXv"G8Nh`KkE$̐(+Q%Q[HD$~l*@FQSsdd)0 6Ā9FŚŚsŚ#b!D$3%sI'_}5D|Y$k*Q!-QH%3$sKXp:o/_@T[>}/#uQuaoȨ ˨k!w9Eebx~e'jˑUŖQT[^[lYlHD"&|Y(m,,,w,,,,6̝#џAma(,(pDDDh+h+D>}!$B̐+%["DD~!6D,T2M,S g94LS94LS9Hl#gL9ș@M,TMe̷1B⵨l۹2#2C2C25̐, qYSцlцl nelrTGYCH/?ZCy%Wkw_[ rq`>xZߦϭGO}X>ݯnbݧ@&9M_tWGߨ }Q;m"ffv4ĈӜ8ok0}QprwsED"}E ՔFGѲsKM_p|D ?8|*t,~aOW74Z$\pd!VIԶ^r7Ih}#w)r~ӞF'*nn $ҭCvw ,k\-X-&-\]Ѩ^lhO8K?k5Nl v71}>={=ƪ,ں*=@_gmz~V_oF{]ѸGheåJ9/9 [' zLj~qeHPmX_W-aGro#81nW'm++QQN sȆ,kHvI;ll׃ ~MM 7h}*N_Ǻ]^[Kwa+{|ij6JwXc[=) Kip'^{kQK-u\,b,CgO?2,tԸ7c~ٽacboq KG{*ȗY׫PKyq)˴=>ZN@l.~Ve~Ke5q~ܝi;e+gnR1&C%\ɭj1,R '" AU`dYDd9F\R3Z%qqbhnCܟz?Wvzg~ ""5ĽܽR uW5ܽɽE1<.u:33LMxLoVݬP|k|k9aԹf7W*RX[Vo::[]dUXbrru=޾W]j?`?_?POٳl{*?R5^nT*{Z`k"{AM&iʆkVSLRI&[memLN鏝,b 3k&A(lmYT^蹠\HzΖ Jes9DF.up5SF M͌| <1Zӹtk5|hr;۴7ڳ;;h"v;>T#G*b(o,ÏeLc3sx2Vlle&˳ܳX˳ݳY ĆbC66\E++8J){TawVUU3f[ ;;X..byby!&by.,ooP.ug~a‰ K_osb.>}_7Ukwc5ve J6tlO=V/XTn6?֯ZH4'<,kEw=G 9_>Sqҟ,&IFK&p%g|Sz _;&'۹e6 R?&Kw(Gs2GO$zެ.^a9=^sJe:KHOM%z!wkhfgXoWtBFO2pY-}/[Y_<PNSYsDz. [_ęy8~~}J唏;xRD[~uF'^#dy~~ߵt=߫ѕg<}Yo]9nCꢍݙ*ڻ^ú'vhX2no?_;k4 k5t竝rC݆t.p|]JF%淼`;pw=ӟy#>.ݣ$ J?(C" K" [" Qa"x \މ܋8E<DhHDcHD㒈-G"D49W䊺)W-nr)A (%J rUӔ\մS٦R?I22$=[2 $@HBd,H±_rH`U. GIB/U& j\*ӹNN{si.y !fo. \r,aKCPrI&COd8B2H&ÑU3Jl¢DBɐD.[JDB"Q#u+$>Lb%n%KG%H,XXb&KK,'-tyKG%Γ(:_AEK/QtJNjJ'QE7(~E 6Ol\gNbs: 6w\_bs!vM2: $odtHGw\^1Lr9 $cdq ^1@27IFQ~sɝj(w+YF^$#W8,dq%#(#8K]uu-Eh)PQu:pCD8TԁdD:p}Dh%Q"xDu @Ţ:'@TԁͨhFNI^S!D ~{5';fUߦ7~J5rˊU:7:OfT r ,;/EEkF+뮢#+TupZ+D47݃әΤN?_޿VvW^n4V'g~_pU{eZg9XFY*E>ҕ?&O?ROjX^,?wfTNt˵)Օ¥X6(zŴ3L%g/W;fν3{-Ʉ`N~ϕjXuFS|Y$OKa 7>r_\γ`6 7 J]A>Պ֘Emk- ~#3\2{q]'6(r;w\u:MfIlj E4z x;7$w"m~D|[={e߇|>oo߷پ9y} |?}1_ܗ[[[j}IV6v/]_}u>m*3jX'Z'Y'[XZY[g3\%u*SdʒpjܹrN GǻJש9UQLQ٧uE"g>(wZAMME guD+ͮ9hvbGX+{bQ=rr\#W,=rŢW$=rr\#W,:`;\tv}Dl.:`;X+MhEl#`3ۈ&F4 &J4\[&V4N vMhD(`{ۋhhhg7P>S4>S4>St=S;S4^-5QPɖ**^F9SE3E(:OTkA¢EG+:Zю6@t#EG-: Ѣ5hEG˖쪞EM5-KԴFUeEM;TԴvm(hv X,:Zgњ/Mr`rUrkǝcUD3o}3鯈^$Vި!X\'Hg>(B-'?ެ/;K5]D TX\Ͼ)ŋ9 ?6ֈRBF(E4 kn>g)d~ ֣i ya?| ߪ/kxLMϘi~K0<τ\RA7γog(955]ZOYꨬ#&7X㦽*$[g?k.1n?Tn7ԘQu{AS\.OVam_$'l~*yo|S&ΊS+}Z{Қ2wQi9w7K8-֩lr~޾{>[5~gBtT矹6c?':OY×$R;mbVDgݓm"/Dc_`{;nick0G'={|Ŝljf~0˃-m47`epG֣0'aduea]6m`~^ gH!!qAmlNTV83(gNVMNL#)W+C+C+F$ JX'8RiA:#<#X>%(q-_bԝo6;5ܴHO4Oda^Y-`pgsl _ SSS!7(7$7(7s a͠ !=բ.Q-LQ-zj+"(%}բmE(.E9үD.zE-D^Bh;ڈ^Q$zEWeHL+ڈ^M6WXOD^QH(nWD(J]E(J]U:LE1H bŠ(tm.VLVECŎ7@Q JD%h#*AXT"Q JP$*A Q D%Hh/*A7JP$*AEt ?-D%JFFN{Q ZJ'*AE%.*AgQ JTT6JP$*A Q ZJAT{is(ul!:@[X X5D!Q+[I\]e]_2e$7#Gba2xn"㹉2QBFu -$m!oFw qz%-@P-,@ 9 YH6r.h/r.h-K_Sߞ/_n-m[JV9D9%6Dm$-ȷDmL-of:9+*mFضĶMvLx :@)m/U^% @kta/ǃS\\TA@^z9-`q'7aAO?r5?Ek?!o/ E΁^!ၑc 7p |40=M`V`~`q`I"Pؕʰ2B92Zf%GF2FdqF茱2ʸ!֌2Ϙd3x?i_fȘ #,*cMƦuAO ````aAO |,tk? ~:}pnpa0\\\R!_(# 5 BBCCBCCBC#CFƄ. ]%4!togC/^0ihzЬВPE&!5+ӕie2s2el1Kfޙ3e<)љc3e^yC歙weޟ913'g~Ǚ2̜9;sAf,sYfUM3ž?GNn}ÃG>+|^k7o~0Xo?},tkѷD?~:}tnta4]]]ݑ|yy&yyEy:u?oHywInɛwoyO=rj[(zzg{ !0;3;;;;;3; "ADDH$ "H ! AB"DH "A\~=K%J=q֭]{7X`i 4X`S v6`C 68ഃ;ڎz8ccccccccccccccccccc㤣P- /t CLa v,RؽWa .W8pJY .)\^p]-; w+>>>UĊZEuE"Q(YԨiQˢ6E:u-QԻ_ʢEcM*Z4hvEEKV)Z_hk΢=E-:Qt=vOmO=R|y5o-o]ao;[]]]]]====]K%K8K%hIqIV%mK:t.VҳOIA%CJF-P2dZ̒9% J,+YYdC%J(9\rdIO:> ⾌ooooooooooooooooooooJk-uzJdiҦ-K۔/TڵGi~K+KG)_:tj٥K.-]Qt}ҭ;K/=TzDi?7Lz~L-/sBeLYeڕu,RֽWY߲eˆ.W6lJYeRXaGmzE3 ? rL@a9XsR2VL~a~"'=8ˁ́CǀULo[Cۀw>?Dk/׀3 p#p<.U Fh1hEFJ+: QiV~~ 4z?Y.Z}8ۤn! |'l0R>.=c-V=EA_qEչ(: j)FV<-P/]O}I4p0G(FIƑgJ >Ff埢pg t }6p 'ɻ6D$E.Q#cWQ~Kz[%W&ɧ:E4.<(q\V&\%IQЇY"@./.q)uݥ>x?,m`N (hξt‡9H=39-`M=@rT꽘T!D) R e {oN`^í@țP?$=#H;E πkI*h,M_~Y2f"iVJK>iKhQE{T[%@s[gЖzQ prla}ϋ9rj82ҿFH}9J\¡9\@Ew}LIX]}JY } i}T>6V7R?*4i^E;-:|}JaM>&Xiv+&+$d#v|BB5x6_. _ 9WYA{wC/vmd6m"4[Bo?73SK.x5%A>pRFZ![{/a΅cj$Kz^KmMoWGF@h5wK[CRzΖnZ%QO{\ 'ɿj?ZLɡY|O-+E4=_Mm@s'o y@B׿MO?3H>Qrf#au|5>>w |SbkZ!%yH?/^y>$9srT7=y'RD~ܒoASwi&k kfUZhzL{򵒝LH olYTXDj1-%ZjKڥZ2vLkЮнzCzDOZ~EY߮gs^o RdPf&, DM+_3~i`XC5a}e8ݔe?6gÍl"kֳY+k϶ׁdol{ub#6ރl+CPNN6LYfÕ{lof#=·|,?b/ |[㏱Ո^3Z<//u|9/W*7Ml3ʷ_ ˶}?`;a~?.~g{ 9{G;(4D>;">>c'_٧Fq#;)n7D/vJLwbʪb6;#抹J^k^.EJxAbxW)~\ꪮ4Q/V(W\@4S BZz+ԄPJLmSmj[rQtϞ7l麶J[[VV4TFۍJ Y+uJ_۶=J~{@C ǶJSIeV jiӯ*N>^m@ͫyxӼ` .?yevnQyޱEy}&.Ϋ;#ۍۅ#؄_.WKQUESvr{{J [?7]qEW{ma_^&Fg-Fgg199<1y7oؗٗI^G,1q131s ?s&/K_)V_U-x;`0q4DxYX՞?3_FGmvwQowQL5_<[JC}>JǨx}:BORSG Q 2~5}p}ub??= ^ScJ: >6]HH=H4HC5`|Y f75`|Y f77e ˖-/[Ulcٖe,;RvT@@݀# @2(42&>)5#;/00PXXXXX8888A{v^h0llll\\\\\<<<< !=T'T?BP< 5  u u u    M M M - - - m m    *gI]nS/'7-oYަ}y={+X^Y>|LISg._|i57o-Y|'Oyv@8N[ۆ;;{Gdž''gW׆77wO"jDԉԏ#H(d"M"-"#"#]"#"}#"#"#"#S"#"" #K"#""#[";"#"#G"#,EkEFQO GFѦі6NѮ~сccbΘ7EcXXXXXXXXXXؠؐ؄ش؜؂ز؆خ؁رXU\:qwLIEu]cK{Wo|@|p|X|t|\|b|J|z|V|^|a|I|y|U|]|c|K|G|w|_`HxT%DD݄#ID2(42&>)5#;/10QXXXXXؙؚؔؓ؟8888I{v^ҙ&h2llll\\\\\ܐܜܞܕܛ<<<ě }cOPJٗ#(ML8zjR܎$Lxby?BϋUc &z5s\,)Ҩu@1 'Z+䧹Փ|"ԚM2 Hq:q38^{@c;_ F plI4Y2L3Zp9<8(wRiNnKoM>iΗQ~o3!.$8l-i?!;p_~M`!ǃ1aǚޖkҽ3$A9G'Zl!=zEEHV5<%-&Via'}9%E=+ѐ"B%=}kQ[E" ,ihSY\#?s$<"IZI݆^%hT[oϢ8r^CHz3ϰ8 i׀ AX~/ Ё 1Oiڛ=Kf 3Q^}l˫zF"\W*/G?\LX 9y`Pr+>i(`̤9$VyZeSˍ֩z_b}$y=+SpЫ_Stmg4tqZQ&Y % TMhZaF X2Ρ= }Be v%B2Cx: Z)Jbˑ5^=AkY5߀^lZz?pl5pdЮ'rt&vzvsoډ.@c*=E~޶d^q*i6,U~4:NJк2{Y@҈Ci dѷ v# \+ighGȆJ2&K9O^j_+qoUAhz.y " D ]hHHM~0ȏXHbǧ($T-$+NIowhTs< esyp$>*aoh~QWIKNĽ2gE,auM[l]y w{/a51&WDѴD{Ib&!b92}6 ě%L挬<ëKž $:$Km^"Os_s |/xS-RBj~e5|  DV磳9fB 9Q=%8( +^BB7n&]yR v54!5FY}d"kx%?]}3Iu [;ݒx'$rh7A(0V \] p4;_'Zͽsv㪜͜az|"C3ML+V=G+o &=qD?sޣbPBL2xREa?,_zBȱH}ޓ$G ؅k9 (ܯ'?͙ę.bv[ _?k7q m( yD}MGF򚲳GB sPCg 9?ᐖX[jqǴd YZzAHz;0iB5«F>dFye&ݤɟ /[$q<䇧 QRҔ('>7#/(|NMM&Bjo$%ohG}YlxnAdCN:I1_үcB˴}oCi~0on=XhI!?'yϿR@4̷',›2?<}¯hi]3<2 ;Gџa9HV@adz?bo݋:[EhT$+9 N;{N= ݣRV/ԗi?icMfm[{({N{`Z4тi X`p}Yc'ii)iiQѦ) **,+;5*T64#2R]l1Vc8e'i+vROq*^%DXif:lkaj8nN1\}W7@_ zȹ+\2șƘ^t6S f`Og ,au [.fc.a'Zm6K[m>)yYX]M&}W9&gQ\)`k5p57BP;\v}1Zs 124h)rwu_CMq<8O/Ϡ{&݅vQSN31~=Ϛ>l G$BN34";IaU8L\}@tJ 4(O1Qο=&?јPjcBјʑh,pUY>' C5/| U^B*cRǬ$iXR[Pt H'ғTxsﱤKZGGO[Z?J"^&YK㥹oj9*ԇqQ;DBJLy$1kQ@++ߏ,ݒY! Gjt`Ҹkd@y2?".DQST/^b馶'<$9$/#Eb wAGzȃgqH(,d#UJ*`=sWoBq 8dC zOYM'%$$iښ9I6 (OYhy}f}P4V) rĪi?@{7PoZ2I2&RR{ƒ,['ecAV(>R[ڂiӱޙ @ғ(`7?[97ydQbUw>*u@]I4:`fK([sJp9)=UG5^/٤$-RmI_b=cÉkr6n F#qZUgin?+i-XY*!43E3 OrhŎ@B#ǘ#s+mC7'C{ jXm9]HșOm,ĝ4ՄD;K,k@jphhNvr;Ӄ1 P&]M̻w51jbļy"֑~o1yf&)T)"qhM/ R^+E3r,?\p>*ϰTDʛxsVڝ|^6ߚg#d6ŸA8wopZֻ =8Wz#pZoJ8y@l QlogOvgOَfTg;=g©<5NӲ1괼xݚ xU֭[!q{X,a5 d ak &AA"" 7@83l}<̈u7F?0}ﮮsN{nw@ Musz$@iY!$5B'OD _oA4ZCC\V耮d XLDfnIr_UبwǢ157nF*`NLu﬎:h_ ;Rp 0 )-Ua!G_b$BTBX)}i@Mq|6<$ 1ע9Z#nD/mtC~ّ Q5Pqn@[G'@ P xL]7rJ p :'n­00 `Ɂha0iQdapp0]8N;:0U8C8[8/} EeUµMm§3 !ħ Cp5_DJX8e* GYDxJCI|ږVF cq' M- I>4l=F8Q8Ux0W8_8{ {0_X , G%Sw-3_Ԗ1̖0JfC,a)#uppp0_X ,̞ۅƒC#’U}JCY9~-~&c*/㾇dE~m~҃<[y8Cr&;?>_5ۃ؊H>؃xN媹>ku+lI%\Snʠ?uj%zQW'!uLV/ߨߪ6&LzN=~5^n=k*s[Yeuw~kUiW߾ | uFO^TUM}>RôV.a5N}>MNw68Mfou6Va}\ЯWku>~ .n~o*Ψ}yѱ;ǡ2S}4Α⬺`ҷ@*zN5Jo{P=uu1}]}ЂNNw'7:C/قlK v&#5Gn׎/P+d3! yu0^{/ڟٟ#ch&gz@/@S 65F[]ؼd&q;՝Hs90b0W ƈc@sBN%8z vg:ENril}2OOW"㹒诼yֿXZwcsɩYa\Wj~jϾѵ{, _aqLDPMY|bg-$v ['8/ .UG(wA4W9\QrP*"L #TB:MgC:K,rJVcY ܿo]<ށ[DGbh:}Ͱ 1Ha>`_UhvrF_Ѷn5m\7vjD7ZA[]Y[C4ɽJIQ,]gf"0@HLǭ {s4nc0v 8nk5?/a ,GGdF1Н=ѓћV`v0]f7lEfk3٭ɼ>hcn֯r3~w/*PO]j@M8PG9ԏpa{knב+nm>rOxW{T{L4=.-m"}U4}MhWh7M$=ݷD{a?wG=G}ΏDE!?ao$#1%3/:k(~:eEdU+?{ڷG~}ks(?Us͹σzrcn[ǭs[+2pϱ_gdV̬$r_鯉wTiYL|vm;K5ڮ&*^{{A7uKZto]Nۃ#1q42כxoieڙon1feƙN3L7wYfoYiS`6̻͟bo[V{zzom -c6o{=+;vMctmuS [VNuGIw}*GZ}Lgkuif&t7&Ť`3Ĥf4434\3,0CfYajl0[379k>3/̗+s|mgy!o+{; R )xxc2P tyPLJz  x՘gtU%464`zwLｙC3!B HtB-Ѝvx>oog$i4BI&HB=O&\b[d KvdK\֒eZѲ('+9ENt_9]SzI1 "@$"HDjFEF."BD"&"%*l*%WED QJE[Qt}DwC}D'b'1Q֓d}L5YF9i 5h=m.ݡ{El1[vm/ھ6^ll(.l,k&bl#[˶bVqˆPCn[Vٝ˝r#.]bDK6[ dd1FS&z˪,)KⲄ\'9r(rh*ɚ,cq.īx oFMjJ?ŊbX+FClv[fP앇Hoyp `8&U`da/K U555 ]==#Yy3&"UDDdD#jE1'H22MdH_dȜёm";dR3EdyRQɢRGZ4HYDYd{.ΰ8w}>|H:b!`i ="’, _:QKkH_o//)=-y%=-CK͈#|ԒӒ>2IZc2ῴ,:-s]$-XXny-+muO]./reohbБzmAc Nx|R&$;?Tphp!2pQ,\67ǝDnueeUk16omDGz(yj"k]z,+zy':#Lg.^>yD͚H A9ZJIHO 8#z<H{7E멫&p` {+4^* fMsh)圊qJ1D}QSUT9U^ƯUUQQ}U%UYUQ*VUUT?U݄jmVuySQT]5XS.j&jjFf>S3T 5J}~fCPjJc[Qe=%ǶhE#mޡQ.hlE5atJTcp #@h2;qN۸ۆV5mIq(Zvo؆NRkpFS[JؙT~Mbjn1}nR;un*FUmm0.?CTƎ ZK5^MD5 xJ &Z5?Sm5^MU"QMSKRL-W+JJVkZN*Nm0F6jڪ&#OlKڡv]jڣ}j:CVVGQuLW'owuRR:Ϊs꼺.xuI%ꊺꆺn_Vw=~zֹzgz^W5&So[#a(g0̋Fp^._(o7 Xg0΋+V".`60es\ w'y;W^B0p.43k `64kh~2昷sMl~1KR,7+0ƼXP,ep*,1H岺q.+ ָ+ ;J+ʸkVrv xqQp'ZCVCGu(MqGpMĽKNCgYq6E/.فⲸ"⺸!n⎸k.";z~y;K`1̋W7rX+u]XEt>]Tt]\%t!]~鲭gjq| +ռ2q~'2x#i>g:S\(.^WP>C)tAJ$H-DI-2P2=e·dZNf`ng%ce"l2!sO)=i*Pm&IUerGtY]]5ty]SWеtE]:Vʺ[McUw41Ma\pL qp 6u73s6M ` ܆p]W;ynNxHKǰx {^x U80#;8qc8pZޝu_&?մ3w-9w/>ǁ|E~'x~ ?4i ݂9p^\.jx .H! R@JH! @ZH!dPp" A& QB69 'O 7䁼C(0P C N% aPB9CyPAE9¹ Ds ՠ:ԀP "z2: u0[yo>@=(QA}B&'y9ifMmg?ƾdi[a|o";o }͠9gZZs@h =t :C ݠ;O^/ }wVa0;7 q[0=fan-!;8: N])t\77p*W\mZ,C6'xg>:`R2[mJaRJیRPzۆ2ضaRFlwl{P9;/OkP=;Z逸Z5v9u+]I*bWS/Gc7R_Iui}@_؇4>/co&W4ɾ[bT'ͰkJNM8 nqrήź6O۱ i6ؘvaڍMi6؜a ڏs^W^C[قv(èN*bGRQ#YұKK\fop{%s!.K]:һ`fl[vkq= 6cg]vN؍;s7= wupǍ܇s,< < <$$_tx _;|o5i'گd;NSESF*ϋG'^B?ro捼7۸8\Kp.17)S5&W*9cN9mΙV< <"ˣ+Țrܡ#eΜYu64Lo5on!r#x\3[5KuQUW5GU=7jYiVfYk։:QC433|&ĿQxc` |} X10010Ⱦ_Xհ.eau n3Գ.e$6u-sc*i(jP!wU@>]PxVisV$NBuyij?B0`B,.JPZ)v}~͕ig7~Z}M I;Ôa|ϻ:zw JgVvt٢0:2Q0:o6! "!S(M{Us; ہM%ʨ"IIqV5f>oNbA FIF#+ "vpe=b ^;tiLp?$3r($$ ~_G~%zODw'k" o ts'#Xv(h+L1+bƔ?$/94;9u}7f2%k' ?>ex[GɞP/'2,Gɘ 3eXMzI٢멉S^eeX/B;OMflUԍ(3]~@!Mii5s:%.xEf4Tk7HrzLCoVI ֟U1Gfl&gg?d.b;H8yldK6V_A&D$M߄RR0%呱7MSj^wi M9)o`9Ә1\%gl]@|١E,gTeJr,RIyT2mX (Q!C% :TC*˯{]-#K>YJr>,G+*|dVsEC}"O㣸*29h82J^c@+96*DKI\!ã9WgǍ`N4zcO7d5d."ˈ/;:tEUZ/*UX*h"wzlbuELi..~[f B^WBzڋǢA9 }s+xYa=ͬdχ.lyR{(]/Jzq3^lG^}'KX̲JXh .m`D.Gh[q#GTNෝnPM~eYCjnh50|}"綢jK]E=f9(K*zfK+:vkb>vKMb|9- 1 s8_˘ŏO5 ]EW!Z5y |ʆyDq;R SǞ dZК-aaǜ_0a0Asgs_37a1A`9 :aeEGi>m}-t?ᰉn?AԈ?iԟF_j4bCE7GG|5b1z: xrT8rMox}|[{oɒmɖ۱3gAvBHHHH&aB -Q @)U:-$;^+v{/غWηwe` S +#b1\ L RVZ\$GxGYlß,q<W-f*A1oKiQRr=E7Ât`fl? fy6ER{Z@u:}M.`.Ep=@F@_ ~ 56u3ElC>bggG?M1 p8oiKKk_'TiSjc RC @Ue`dr Kgjj$`F2J\%xLT+25ڽ*cb"EC _?,Yf' m:GA0MLO R/%y5bBY y}h?hh Q y{#?!e ;$ R4*)(}0K9|c iҞq.H5 U[]祍PԙD5&#6lio|1yme*q{)%pBƂbA%'uS.3 9mI6/;;^_}k ̰%he WNWm*_idhٜy5=}h0]ZIl^ی;(…8FR`~t:14 $|f)X+ U>?V gFG!h<>w7Mn9)DGGV+:F+^yc!i2A!9x%u_~.(.@Fm3mo?q/ʾCӭ#u 1qƄ:J[hppP,_Іb8n4P.!><ڰ5Rwsp$ Q!^GGD3(=!VJ?R3 |/p*R~!RC@~7=q'`G׎2\c×3 > rRls37ⶐJ m{8Rx ߖ-$ѦPϞ^Zغ,[,Ӡόf =,Ɔj5U]U罟^7 Ce!_&$-hgKsz F]jk!.?݋,~o( I͠ bZܷ{S|MJ5܄twcw߽tA?1R3h .8X`1O-o+S sfJ^lc0ʃcHROS DXjFkoA+(EUe_,(n3rT}|i ސ @DURJ~M,GC`'JR$55q`h\2z幭v_CZEt3DDWCph%j;.*8#̭3b3p(,Eo/5 RPMwAZuSg{!(#n TD!×w(y,uG66C?'Kh3kBzM#Fμ$u 0 Gr ߡ (_r >^qYP4 mK?ywbD^ yRJL}@m~QL0n#>- iLN%d 08 00l$\~ɆI"VG豉x?~F T{` 9;gN^}^KQ-gJe:1aˆ,J$EϔCPyIDwNdL=hGzv]@|2{G Ygcw<4}g;ɫ'KrZO2#~HIfvҩJ BIc[R?QT(ùh@kN XL\PHbԣF*htێ4s\DcsW@}|F QS"eA"W= ]?㣭4-_$7B[׬@IXh$ wY3 9{w݋j4QY?yO\LEg|uwk|e/eJƨ]T%mr4XGdVr.% Xwviox$eHJC)A-˟_O0.65~!qњH?fo\IK7F#e \߼uďaJ/)RQ3qx-\5kq k$›=w\oK5Ȫ&if;M!b2Fb*2DtN4ԑ%kgqKCIv@>-RųJHV$is6\ݦtOR4i(MGdl2㓹 \LLɬK5e蓪*{nMڡYY\X#bԷtzv4ҫ9~+j~S{zDe ZJ̱S(|ۦw;G?UZٴ5,2%ڮD0` Bݸ ExPfl0A"i0=ƥ$?Q ,q9da I@'!>n!fob`SboFgc9%p 5}`zO]1ljKɊ֌AͿ[l0AY0Ѿᣛ;>s6c;ط;H'@Y-?EGx|A{bS^H_JMgoONBٷuM-] N7@$ XL)vGe o}N~˕.984?e B=tbo8V"5VF/&ߢAֿg?e"1(5M1X8*"*LSBd0vXt;\@}D,V0Y$fPЌj시bح$xs!cTQW:1R$F?T % AQ<%`2%D_I%+@X7F_Ar#&s\PRcuPLIݨ;7fPst!6/=q`砿||GM(uC'FV2JC^yegkK{2*o3p$3 @{ f&Xo9kG6 4$+mi`K6)ޣ1~ hHؗa:ۓM${n=Sa7d0'0:Ls`N7c@(V%5QY*HFsV(./>Kmu',Wg+K:oYZ)sgŠPeV^e`]~yycsS<%" ca_ 7cJ }љi5UPUrꢭŸ{Woѫ% euΐ$'Inz$d+AfiU{JM5E*w `֢5=l͵olwm}+:tuhìԼj@]y!eP t9cBI<)Ѽ΁{Smŝeb=_Y Z_y,/Y|MIee\%]zk:RH`&q(c. xTmkhj NJVF AW(IRaˆψƈ5LgtZtY*^BQ( P*pQ IBew4)P5i;If )E V'Q(Goչ6 ˢ`;YE\]ϒsCu@-ɲ(iB܍+V%f^ gP|ML jwY9)\JmӲ%SB(!-Xz_.KoiD$$c{k,UT 4P;J\dOcoՓJŬ#=Et|BH̵rZDDC<#sbEOzUh%,]Ɯ^jqP_%4no֩0$@0dO,͞j)+^ѬK^|hѕ>Citxؿ9)˗?'>obHX2,d4eDhSrPp8 ~BV*`Fpvu(,M+%xES70ULd<(nr Ķ{wQiOE>mmI|3ƚّ{/\pko4UU.3g{©)*qaOcc"q<#@6wUC@s$(\s~58Zd0K;2vCsuk]B{rAhRo*JK"3Ev۳9_,m+u/i'w\qJZGEeL6L8'ms&.%b ̞D?N7G8(C6EJ9a^T@9_LWPZ4`]n} !׻fJ|oO%a\jӝ*ݤ(Rj3,a1o?a0jF8D,N̶1Ӕm:{9LD UZ#ۓY~GE]Ĝ _n'9gTr+0چ8KW6bke \5}+1[D7stH̄t_K  672 :g~ i䬘?!z4=ɔI p3'&w8"#@qXE>r pCQ;(ʀzI"/zwTFcTpC̙:Mwax$%K$+s< YVe\5ݜ᧴L93Yms19ӪmL+*3oBLh/UJ @}QuTTԍixY<⾮ (w/ƭ:g^Mm,ƱuJxds,aaTRy=~#ƽ0xz%#|_p& VOI?A#&5*Y&3TE2OIHDg cCE~ABZ㒈/!&yj^TjcL'ޤDE:1YLi Ҿ^wOwĶT[ iID j2MTR1L1~q}:=~)rRNszJ8T^? 1\r<S5z)JSmdguTbN2IALL $S9VK$lq ]JwGx3sı~]Uod:3t*bI2T=?׭K Ml$~Z~ QS+VeǦrNY"W,᪱dzӉQ/g?]Uut} 2kHOIi.7?A66[$SU*Cj\7\-?o)Ȋ39^+Ib&.w>rջ+(#Dwg+}gHP~ aa+y"X8*> X}QAɵln e~H ZAKȲb8qL@1C&aKIAX'",l뿲ӧ-fӦ$f7Y (waULA<}5M^5JBJb1uos&]W/cFL&Nqz H/OOn:3BF_l59Grw]ȎɻizLSG\ؑ^ёg#(IBJAUj%G늨B uX *ʻ]OTWW +,ⲀO,8<ݻeϞlU9PON'cڲ-ٹqO:gA %2_s#e %s2JK=,`,5+j*/)h:-,wr&m\. "ogz{"Lwce8Vj>,opF*kT*E9S/ai\[X#QQDm`ppu׉e2[Q,VT΢]s&tk[D u[9M"vLYOx)H d!!㥤 JnN ""|/{T`bLh4z6%(pt1!s;xc>kZ! lE!I?[_)#'Ã3¸9! L3b2!A}xUZo::yӠPbeI6'g{$.Ԗ|_aYױƱ"yooQΖkKCԞf#+Z /L )Sd 55=?!k`2Z: M1.)C1]WW_>zA% 8&¢7HLv$E#7HԽO<,q(j.'=EFgv#k2ch*2a=ir~!mlB}n~FTɹ"A6Eߣי௯QQrb;\'\xtšo /(^p5ů\78x֎t*xtGYAXgp,aՆUޯU0.) ot>ws]٣J:՛ERv QҨ.ӓ]$Z"gk|CQ8X['^fdhoʖ.#'ޣZ}K90Ȝ__ZӸ9ȋC={=--^T c=_AW,WE%o =@XȌKݳr^Wyz֦&G%3 ǺH}d9c^9snзpҳ9\/GBP~YzP=I[{CqDD[R)m^[V£]ɳj 9\Bny KFYei%9݇h/SJ3kvyŎ,ůK4FY|f(ܓ]J9Ipl`0AuWrzG0oQm̬xe:&Y|GC+I=aIq6lAsc >klRLneI0YCYPDqqgmdqI LYVͯMJ=D4_j4 9R[YJ SrZ0VԕBdYe* p]\%ҜSpthj{w=wwÛWuefԗ穋&EbQuQ/u˓9,rʜɅS)fϓT؞?@OdBP1iTL;ͨ,I* Ҝ%7 ?@5ZM7E!rVޡ6[Ez%w ,بS k,Eld|g9vxLqU)Ts#T.R%5P5 OP0To{EY;CL1ݻ@+ūF uY**C [8Ʒ<kO' ;YTJ&!)NvA2-7oө{nݍ^QRwXZ;e~0(nbO,O#GW3;lDInϒ)ޑF;[`_)KG6 }<}RYݺ;5a5ap^A펁D]a ؀ ̓F^#V9UgUVMWE8R2Z!ꇹFGJc™U^C O,|G 3EŊ~e?1.Gwd9:F;ɷ#W #4LG>ş6LF ɿ0oJ߸?U:/mmk!OXJSj;/M%%-rO5=X^hMlA^d?{$+gr,oqaP{LpzN#6t1MOfΗ2Wb532jv`kG NYx-q5̚_+k yd{ʅCc%Će8Mb VEۧеS":/ɞKwaa/}ա0Y0yƈg'wkdɝ݈M!ua oى:טTۊU01ﱿ) F1DhĶ)4&dqX6 |"RpʜD_C2 {q7(ĨҨSMFMy kj=8e}77j{SyTa+≾ }Z e툣/7~G0=ɡNx7T.kkY&ULS*,U/`(m07B&)nA*3"T[dV~GaK2I *σjH(JyO߆ 3NIVJZ[&('bOmPAiSgoV${37iǜ/q{G+6g59Jy?;wI-> NoW "x3doq3S',Gԝ\@^TPWǗ!p&tdx3e1^-WGQXy@LW-LKJ^#MjAoARgf-lL^evY/=a$όIh56ӞU,1LD=SAD +>dN"[Tn ~sJj @)ٿGHKR4RH7z)5' 4?؈XjzGssPmPkn͖טǞ-Wh+ZeHR Xs@qXLʲɭ~#(TIT4t\` P_dѝU3ݧܘBmuOw75PxX&bK!*xx²T~Ujt)$F_bpZB~DBQ$JJDp,1m6nU*efTI,Fxbz2(JG$hv.ONHܑc/k /$Z|>T&!"^HXl0IR/r X#%}Bk?̟}/ʎ ( tx_ҤB'@}|-U\ϝ.NXeàp`H:߯GA#wt*[ii@Jt0QyFzhԞI >bfQ Th^+ܒ,|sx,Y^6YB]`h,,҅rAh.X\$Y= =ؙI C:6j,Jv+&NOFiuVC jfX1A_ǔPcTXr҃ȒW+-# ^C!BO\1}-[80IļE쎾e\pRvXxArFT$V! \[۪ p>݌^֧i%RfU*$uI4텸I)c ]P୍'2<)e)X<[>=@[½I_ŕ{G0@_p|E<_Ʒģu;n)ajÞԐ[>p_[C KaDAĂ?$"pQ"qS ,_bcԹ$.d7i9H7f͝qeJ!.a@F(>@S賽⑇:#ESռ>mWЏX,-!y,ե9:̼8ēKp<2 ph>#u.qu[*f Z~ (X,>Ʌc|ڶ?Lcbe"l 8&l%rV W5KMzO^h>݉fѧ@A:%ݮ^BV|7˙Q6nւa2ɻ$'^kX5/l"_f)cC#!3).5ʟTD˴eT;$Z(^1ME2 /~]~j gPMq(.T {P  ]?^$?M'kԀ"s)^8%YI4c?\` $%3,NR#i/bv-cN+y4JV(8' |^V'}%(cdɛW49d tWfu]6<ҧדU> vr2@?&@1,F v-4hb=/Qpݖĭ[2;#^Y4w@&#WaF\r5Ӟdw7%Q|Qlخ}@䶃 f3R[p3%z,XXO+3iS ~;5k+Yb_Ժ_Tz/n@nz^/Tq-T/+q"`L9&2a 02jol)b$5OHǦhoٕ{Yz̓i$>i~;ueێ%m,|X9Er|cJ>[f׉<6YגZl?r~{`4=m?h`ހ~y>Vb^¿ #w9? MF~-`{Jcqөzgb]@6-.3 5zQ,ipdFm@)1 fQ<~>d5ƦUpSKgp\'M3n@;:GY8b4E#JI^#Mޔ7_Ȗ7֕mf_AyKZ:z=8*HU#`r)d[`eWB~]l7֚0$yM# ߟ"5+s$.(;~m3oa|.;I{ ѳD1sQBsJ\[jgyAp^/ʪj<٭OŵY}d 9JLmSI37fv};ۂm.(f]0-eMK[Lu.:9ȹC qČIkb/FEF ]D"Xh%hk?,=`NEYTQIyp>()=ǐ1(Id ~v@G r:;&+1 S#.(OT'GCʜTr>ߚ(ڴu5ZMx ;s~2)r5yŶʃ"'Q&4-bUȺHA3,+[lUL,02݌V=ڙO[s~-?P`.)UWg&;1G4'R*S7臽-̦-;ۡ+W$TU4V$gͱhiDqgM=plxT"3[?恌@dՇȶ|8ɪgPJ;}jHE%j,ejYi.uU7{}f#O6xcyr]#4Ek%Բzk_!ohFg3Sog9w}f:V gOҢE $ןGYJ!||ەA"sNs(Rvhu 啑 t(j\9)i~aJ MvXh""K)J彑#`e ~j T z*EbR Ğai*Ld !s(T0teuI]`<N,Β7p*%fery5=UZ,zōި8/򒬹2`<w<wyktekkKG'o\WQּ֐;7ͯ2/("Nzi^QZMe:X;tY6CFiӦ*7VR.g_qp I:8+58$yuZF~YOhI̐yh_Bw55Lu rknm}Dɵe:',}FLL_Aju: b_BcNu{xj }ܤVL_d/K/:9ujy-@rS = 䔸&xN#fmmrܵAD|ܟԼϭsPfB+҇[w%I;]׼}5gm}xL0m19lSy 9,iҘUsdKOvϭKU:UzZsTjQ.ѯ4jp^w ]5_ 2 eCx7/\!ǧ3dwlu8JL@su'ۙZWο:>8gmaWmg-ɿ DV>'V巶x#%kxN^`^0T#w'A: MŐ* !g%}y5lؿ T.|dsIǩow~\ƒ'=m cPgPA2n ]{u2ƫk uGo0d[܀ͣi]y w1Cy W[d~Ƕ{8r`墸eOm,HǢX_vyj)r]'"u* R_Y*>MI"J C%HL Kd RI*->_w_-t N Ub&޸6nn~5h e7}rߪj7xsk<f1QV%'s/sgC#_`|D/5I E\z[b!N4q@s͚֜Y):24zubQYZaOR;:?(U^H,NÐľ~/C~Uءkpt,T;ufCvoq@G d)܇F^`kT7gI"ډ6t=wFt/~~NC>;?-;poXB&\nSTF]y˭jʍN),ډP: bTѭtO0F f_26c($AXDT \  ;"25B`ѝ[YV^[BɵT^DSc 0oM{7ߨg]UwH<P#[2{qwЯFڈš= ?#^ Ma꣯P5̌X9lƞ$ ?,qHR~OTZv)cUB96Հz793xv3cƂcE{%Vȫ/`w3чsfߘ=I _\"[UFd0XX{Ԥr'Fog6 }5yB_r˨*MPWh շ~nIsw: 9*se%[=m= dO227T"!)N+Cuu7uG%d&=Y1CxbL_f`՞UY75KfwJ^}ڃkRs}2K3Wy*x̖*]ĻF s7T&YytD5)1bg"pj>՚lߞBD khPc\c S rBhPl0 Sɔzi\p]3\/l?JkYVgA2ӑ"E9 ! ?tW#_Potm9Ken⎤ξ%#Y\oB[%Ŀ챪U]D^x86k#e) YeQ|iܨ_ UǢ帥eȖO[tz{ Zmq `}+![u@> x=6z .CAX ؁c*[V7H_Dːm 7l/Ik3s>9,:څ&-8y#ovBnh7f F˞ثj }?jG`CRωuqZv}=Ifx=D6JepGPki(KBQY+l/t߸bəK)@JVYjfB^jKC{o}}ORл)xB[cT;2wAG(A2 33c#gV33cC'/!&>D?g]J??}Ri| Y\ےn$GBzNjyq*׉5ֽpIfЏ$"I xB'N E7\&I?n0圡C{q<ǘ3BqgFR6 a9c`~e΂> SC~jIҳ>W؝d>[ɧᄗv7a3o?භn|ΓT,'_ȯI>E=B:浕ՃU Eg̹ݏm㊁E"e.9GgZ=V ُqq!#?=ef:JlkGTv]wsosq{w^WuݾeMrW=l[_\WVh熖uCQ\͖+{;Nze˶܋{ǀ;`0 0^C/@B `k7{f!μ̛7\C*5|*}l'Y-h=FONpM#3M͡:@ >ujYiEmi7=˷fo{eo K3|q~_80Y}?y?'O}'{ \2䭐X&ϵY,7vH`FF߯YbPf6偵hv)ȯm9πyBCޗ6Vl0]9WGO$ݲirlHuSOј|8"NY%Fk&g/ Dsr{r?3woS+0"n.#]蜠,K:cM~cK|IW/Brc14vCu+_]9m\s~m5PqK|g/ӘK*~:`qG:n!آdiKX2ɹ܉E>aGcڜTO#{L-eĞZET Z3 # O;ʚu8S8܊cfiPy PCV]|Knq7ȏL^߼P.cKʞJoa*/ (9ޙsukFԅl%Q$H ўX,lPԂNgS(Vh5J&Sʬ$~Bc?S4Ca7cjwSND* ą]NaI&39PLy;!,aMsl5Nv*298sch gkohh?_I^W*^CjnX/ز-b욛"hi29)Pߨ&|SjӪU9bu華Ƒ.Zq˼L@(<ؤ$4AY9/7ȁٞ!!k1lb<,/pM%i#͈{C6aCn{qPfi:ۋJLn{$\Ǘw\ΖL}ng)m\?%t*u$>s- Ϻ"䕑Ae~4Dgg3BJI!_yZ}Mf-Y:ힶhÖU0יp-MFΪ~Z7;&~sIp|ou7 Bo/?SkOz(&u.hHuX2؜h/>Db;Ǘ;X%".,LbʊW僓UUtZᨘYxjZ!&9̋是LAhI69J D\*Di"Ja-9EdN3A.:w(suAEUuG5옑ݼ9{Eu֝UkZr#ˋs^pblKo XE+HyK̪Rr^'Lqo̊%EƏA_).ّGjJMkb]Q1x\( Q=Oe-wEgΊ ,A D%EYm#,lTO1‹BWn1sZ.f!_տQ/84HӰJK;a|uǔΡ繕Jw]0ϣCof ;m|AT8cY>M!Kjk||KQ{>9O+AOp-W]\P6*;hvMO94tgRlJOb.pŨqx8=ڈr0'curRO8Lieܼ5-PmU꬚3]*Qb01 qVݐPZP)D܋@Hxa _a%)=3N7Ao{AtA;m@](80 G]T'@c8lfI߆΢š둡/f-Y~of+˕Q!BXFSPoB19r2FLWYn5QڌKp޼(a_, YK 4¶d,VlJo!֦TJ:{'0_p~瞢>2[A) P34;"Xy ϫ/ rj/I2s^ʃt܈>,dݎOy`(ri\W]k] + \$?@)*e?' <|ԫC<G*u͓ ܖzbTv+lxاs:YSJ1ǐW^ǏSa]a4L?{+Otw\<}bei>|ՉkV:W}ߢ;]a=ꌇp,~ HH(A9J\AbBkKݹv!K8UW*rzEm>Pa*`<^Ė@fߒO d;1JeB )*jǕGsx /S:ƉFWOvE}Oih&_Cyt(MD:0ȥKu:* |6ᷩlUˡr<'343rujQ"B|Wcesl**0++g45ҕ!TOD1^ 7 P"csJ98 0nOUNƤECkz>" Hxg;mB>Tx҂Z\ )*YdQNuW2ƥZy gTV$JaLI۬[REh ./j:Λ)xP:Hni8=UZ68W OjPH*Yx 2sA Mÿ4r|'TH(St@훨 N%SćE ]y{# 2napRI}}J6S(MEZt~:V 4&,KҾA .3JE7:-Qq7,z=Q;X-ZArw"59K5ke/\$HFrOP=QfK^ >_ /ܾ6>!rR )) I 9-`9 NWXZfVJՁvKEDwHXnqyV)Z HiFp2nd:@ HDb1%*;Zpu$g QvԙlϾ]xpp2<@M?D|Xj {܅>ov,vvpzsJg Ff]6>20teyљSܮ܀G) Vin'\:3Mn93Gfh%A\*ʌϪtVlȎg3 =RRꝻ߻;:?f#R_:[~D+ߴ.&̤|I0{O;!VD<1$SIY ȏ$*X/IS>T,K" K;KJ7tuf\ nՈvF] <#Goo,z@+{b= UI)}/\6ڱr|JehBjN>=X#A^{Lbv4Ա*n2/fF˦6/g0q*[)Pe*͒jmrgFnVٲ^SKKb6&5s-[ ݎoft|{xL{2G1Gh6^=v !eخ9 ^7Di?jw>jݬ&L0?7΁xs?\sn~pmT4}.{AV@\"*i JW0楹#$yk-Ɨ ۇͫK[x-,wdlZ=1))nf{bbQM_%UXL>na4)%v۲/+X%FKr-Xm"|sd` ΞvD?̞(usl }ކE;nk;~q;*k+7}.X;甔ϩ'4S7䮥>_]'cSdaV#=`l^$^Z%`~dۅK~p˻]s8Px].M-%i #teQQLt˹7A7\'S5k nV.} nJfrsɌH` ̟Qt߫>~V{T_pAb43ddCȩ!_1XH>Zw,s1=xTùJȇ3*)@*>+) 7/ D[INXM%C z^&h)Zz&S 8qˆg/XItYRM2qLD'9P_#2E9Z'^E/b<ݑ e⍳ /}zsk;}˞,[dJ^cv_Ѻ폮P\seb_pq-AterKv)BuguY(aWYF ii8fܥhXvqKmKlDrgt7\N%v#'sQ)S5\.e23L%uJҤ`K9rrdKB7QM zN] .|oJA˥-k

|7.A\@ XgyyiCR^vD DJw}78مLvhE](y ";SѲNR9ȇ5߲Dq~Ae شXo J󷬲kE': V8m~c|S0 $?9,䧞h9, J>t+}Zᰂ*Wm#R]<)gJ`!)h Nt w1J ؂sob; L?8};p-FRh‚7~$B^l0aBOQ/L|~-l^~^>?mS zߦhUbRhqj̹;=5ھy?/5r%{gW;knKnm_}(X}Ϣqsv{=vC|B|T\8 QV (U1jTAƹT N<̙3HX_dڮ䨆| #ya=wB:)JKR: F8eupGஜ\ԒimBF˖(c"&%ЗDx8⮵o6y|apgQ Z8K&diHfῐ1H?AķhuKo 1 EEW9fa^XSI}`N *oM}']stQHj*YqGt'-:fbǜ=ck9Qq }׏$ 1U<*pw}7Gw8t0Xybc~K`l aʓ&xÅIKC\P uڡu]6YSN^9gۨ(#K.)~=W9|͜Ho{SѝJ[DTzV S|qYAO_2=h),վC %|)P,/ OSaQcr ȾMkesW<$<'I7Y*9ҠV`-(lJA/@ ?qw>`D#|of$ ň|-4^}\G^ f5REqw:Dѿ?HyS-7*_NC^Jۂy3o.&͛iZY&P1sD* TNM\Uf$`3vW=[GÁ SYU|wp'6ĔZ_;ڸӯ6cr_gg,7+=kZLNѱ t\&(Bx,ܐ4 % nL|”%M+M_ot͉ϒeo<e9|OG+eߒok~jT4.;3szb[X(XU k{ =ƒE$>E@˞k[(" `kceY#aLĉ&m_4zזeu"˳ Uf&˭RcEFN/9FGn~r-Bb<Ey iJ^Rܽ_D ./Sc׃Ybk=F<~A}湢<Ǟ2ͥSVG?"?uAf$b7=a i R}J-^WeE"jjRJl>\ԕ.CC8LotXQ8bPV뜬hk`q1D Dmq&D@,u%YeC%&EF]jﵮݬפ,$ QIr(mIrr4wp;䇄 7ƀ*H~=S ?uJ'is6ҿppޢ@g\Pm(Zd+bi -x(.H% | @"::šAكthdQg٥lj.͋Ks 99 3 /y"`/WK ef܏P'Uk?+gl͖l!P,J?H:`Ti+g ?R3q&DLt%ZDV9*:ƨװ8Ud)nT68mbsIm66SleUhݽ` :zb_%A䩨LM7 #S,eYf_X[0(4-?("S:B:ܦmhp>@>kQq?CsU_QN/=$~3,+܀&)jF~a1v];mwfF(Ti;D6ZKjskOJ=T\T3jr&%H%&B~NG)E~>ˢ㠼`7Ff LYĿ"2{]'R#y+aHJfvHN; S j֛ұ+n.G1%RCbq-Kn<̗rDG]D-u wRsb2E K l e{ەy{&9.R$$wQՄ5`oC'3ΦY,,CI΢Ƴ-,Ega=2)()/!JT!j+[k* zQ*ѴJT:-rD#_'o5O<jBu)` jх e{LbT|8 wȭTEB ~rEQ_8~4[/ZG;2ڳ4ns_t| Ɗ=_Ie;A.F"C{; 碼)\q?nߑVAyoxj]Cݎ?7P|k+Ի= D'eZFŜCM#P^Fx44CBw/K亘2)qRQc̑1:pgdj掁K,b[?vYK :ΕVC}}lH??Y5G6.rk{eko_|bƊM+ʅ۞b-מ"oEgxz,g+ _doԠmұ7 : {{`FtP&ع9TlP},7{ٷQ><&t03'iTQ n<Я1cq.DTooJGܭ^K +?fM:C ~S?>I=SMv{U,&S'`_&ȧs7i:,p4{wtuڥN1%mOڀ$n98tQgkK81bGwn' #hI>gzQon^bm9<8V=Tƾt0ԴkTDjl55W"7|#6t2JlG_@ AqTb@II xv&zM?>W׿Bw4|-](_un9z*[iCjlا~;tH* ʐG} z(BLHuXt_5d3~{|8i9"qۍ(: 4Y1T,>x\冬/^Ʋu F`0m9)QΑLG'οB}"g!sW`[`Yr.hXg3yx9ˊTRQ^cT$ROJF$]s=%qH@ʨ~KL! Ph F 0՟!.FDB|/I1cQTM?lί.%ͯ%׎~v=D'26w9L4AJNi$vg%PaOsf6%ś IT8e԰(Wu~̥@56<0SIg<&Bզy8우~$@ ѩ jCC~h;±):nWF)X7'BLJJ֍^XB^.ghL/ JN&Uƺ|Lps \z?;.d1V214ATc4&bʴΒ~b&b(}:cӰ ="WSmÊ(IOL*)IY/cZD=TX nbJ60n0Z*T" 0Çl<χPRl8? 1йdo\X;J)_&a%0kT#Z͆M iX$U4ctTiZОcڨSBVTH4|JםTd\GVܻm'32E`otaM-A{GuQY03\J䎾- S̳cxpѦ&e,.ƒ]({U B@eK2=jx/D/ "oTfZ /h-;'sM' wwa ̌WMJ! Qt\B_@DnOfl)R922}qdU&NHCϪsS9 oydBf\zig2TvZ7a17{;On c7+̚/J nCOO7۲K~,HEF_/,ϝUa%qa{QnR^DOJMslݐa< 6oJS>:)t^ 'E81<8>>P21l|# y=[,H0ZRv Ӟ RgQa4Dv:p ɾx*<5g 8?>XM{9U.)JL gM/>-Qj^QRIϳ>Ԙg2e\j@Fz _}2/_sO҇xlLu~`xC9rx,qu]1;Kt3f9U5d9MAq_ʇ9-{?;/H]FqMM00P&"Y0$uBV̌[͢]>qk<[%|;jZ;>_6SXTZi~>w9m/% :M%֖9" D޸L<[<>S<`҈ʊ9i .;a8~'Ny3:խ F"^rO)+O ͞bݢL8%Y$W gV: gV8=0ϭܒQ Cp\ucʊ':7@IKW ŖjnVJ1fCժ0NۯD"@:zvld sEKc' ,;f⣲(#L.PHUJNi J8!IJoF Gː/,m"״2xdm^CsԸ/|[.d㦽^a!?][̍ lḚ]%o_%cbo~&t Sdu.^/_ݕ\61_C=]dn` bbw`YYI12 Yӎ"d<{*5`ں{)OX2\azIi%?M+XkK9_C#K4vz"m _h_[C Mgގ9e N`#xұD(@1uM'4}!%D4H)_!P|jSH'%}UYua=[$s H5,rzSD:k*wy\phj32d7CțCB ̴X~`@犌ƨu@peZX!RTcjj\:U (5y T,Cнg쭴wLIva{-u^8aU?޷f߲J]mtƾr}{iS{dyt)(>}Si?r {J|/IpHkRuyEi2@.gn<鬞[b*)̒stmpyeNG̢҅&"H"rU:SəYm4:\t;J(e\8բyS$th fvT|G,LWua]~XcT)bV3bħ%x?׉TwZr=A?K:0'W}b؆!gxzi6gIBp8̓_J(JsB<'J !=}Ü9fF@<KGCe`.H' 4Jvd.@?ߓysGwep ;f1 s})vYy3~I>N5Uȿ^)+1u -i]5fU؍KkLJIvUsLֱ+̚K[JteoouOv-' P1jaoLGQ+S SvYNҙ3~BnO%ACu.-`j!Ô vS0JXl哵v 'vbEl1>5hײ]K(L ATj J bӑkؑ1 Prmh 1D(J؂:_xuB% ZE[[0$GRfa{aj@G_g1nJRZMs p"[M9#aSv>!ӮWZJz&TcM9N%;k9v53}#>VfcF{}#$޿~ ]YH3r]*≙a}rX5Jh[0eIvqA=v pp&1ן'Gς!:L0"<A;$_>y5|?Ԟ!%3^m@Y&r3,l3 %7jE,[xv]( k/%UeG]p/TJ\UpeZ,$_ 52WfKI(0rV%RqKw}rz+Rx fduRNR r+71 [';1ˤ"\ro~+堧QEO#<+sZ|M%G@ʕrLO}l@:~4˯R:ys4/i+0@cV"&GO*nW8|Y/ kGAQ+=EƬ?Uv(@ͶE]܊iRJl,ļ)} jl\'(H#b2|x١C}C{l6#G&5Dfh R,Î"RyJ;oE6_mxa`u߁ ykugF4DPuڜV8Z );A9d,2;aaOg1\S?7clх&)p9n}vPNvVMC3$\ǏgX%M&:^܌DR~E11qȤv:Z'e!r)\# .K: …WKg#cL Y SHt̳r `6MalrN{t"gi:j>؋;+::VrX85 ye !64aWs[ㆌP(@X%HO^/26dHq4pq+Wpnfvu]]gtaRP@]TdzMo&q<#@ֺ&~z<0948nډwؿ><39r-']+1u +ϒf`~r޽|v;nF= GL8ie6flSҞ2p%H@#`wjo'/:%\fS()Jg 6ʛCP7E:uf8/pqXp8iJ65ibMC0.:!_uU2vrrS=ZF[r['\/+ V'V!keeP˓5i3+<\1QId)>&\"`;jtV Vc㪎uvmM[Vzz-wncpclcz'B1Z $Z ABt{wWZ"~Ul;g̜9S~C6j$i_ h͍ŎRw\'ްI'UE\!ݬ 2dBPԗ`f2XlV}/qjµ( $Z霹9ԵQ9*H($FV3Nģ%hGhGx8fO58ZQpLԹĂOz_F+{%3q:2HH<,VDLq]edh?|ઌb+;ȝn?N? xgJ8&F!3(x5ΪR阙("Ls1:SoBdHq?~@t29=LF$*B3^ݎ![CZğ? )wr ̀RVsS8:hŹ ͇vN8Gsj ^[//*\YL>=@@fC62* m߲ $g@bu*b y)vg3H{S=X焖ԫXcФ=8,`Ja&}\ n# |D ;ER)(gIe*HtQX)|JKnLW"UV\oⶨa5VHS\a永lՀwD|6çM*(૕z2QA+C1:K-81 A|  t=ƞ"]O8DkP6gӱ}kA ۩2gd}wH7\ ^ߑ){B=6|x/g|瓾i:bM .]q4s5;wСDU C+NvP(ֈxG3ٔ!K̔MRPq PPaЪwdlB|iW^F>1 I+oK_e5hٴyoƪ}U;Cwm)G V:+席nNKCH{KO|k%{n\Q ]wpաWvM};&D }˼X<ָWM7B23}n# 7lr璛WdGwrSk/@f).teiuStu!a"fcb%\$"r#JU砓\{L=3cppf̌cck/[\)U66_ΛXOe#GY[n-FC;K:[8GO,ɮ:Ϊ-cgNcRg`NsP1Py*HW_Y8_yy{Ŧ&Cȓ8jzr+']ܐߓ,K8[y=,^Wu^%UXO+a rSnO">נ8 򴆦!Z#{(,3 KIr!&;SVR9cEHQ*lb<c{(ǰEՄZFu`l# JX@XV4[.m^Xo_S, "~[6uwOy2['6lR@wkU<ج𲱛WEujHN=Z_wקB6+9zLi '[<*( L@z&Z2)B4"lh硎@5J yjw384sG)xJDŽ/545c5h2jz-uB~ a1mب%+f)ZN[9ݡdgW:`SYQI^;I <=e /z.Xlנ~EJ}=PKL!HDMddC%3!]<4խ bj;Xv< {Ț(Ų.Ts7%.-db5e.YyS)XKŒ@d.aj8[*ǰ[.F?]7QP\w 7L\,a1w-߼ ɉ b-6&oqx…dP߷Wk#@,V}G>,.|\,;HE'q3O(aڷ(-p ݺ|53-{u;4UM'zsgkQ׽FsH ,~l]?lWQ _BNFW8Te9KOeK(󢉸 y&qtZ'szMkuknZ># [j7=l+*oGŔ{ C}vr sWe3VݿᏏ_4ʗ>)2$a#m*uμ`sO8t66]UB`r]n dgt&Ŧ`ykn[}4$ɨ\41'h.$RX8>J¢ SzM"٢ *Vܼ$k\ew~0_HR_nMiMޘZ?6OsLGc(3~-}Mv[(fH&yf@MPIBa0Wq@fR |܋x< D>q+&OzC{okl!/uB Q>AOA5Jhǚ/{T*._ɺ`3ݍfhdrtbr_ӊK93}VTCVAvYF-r-kl~㮝n]^:d\s͹Etw5R 0 }s׌Oie%z@ۚ@WV߻>/wxwלof4"Di6zý6qRW*PQj FC ai˻U-hGYd@艕zuqh8'qjunoen@̭B-5qpӒcw&߀_B4Vdv_xf>hk\XE|SIK`eCɨFQrQ_؝ǎ[Mӓ !E=|6uc:z)C0vsq +!RxoI4S7u=H( M<@#o][cE޾N;L+=okCB}8UZrlҖ?"ؘ5%;.]}M׼{kP_חvV 7 8 7P~$ꚕSl/V?LeT>|_ \WrUmꩿ7oGWXh`HKO|ڟ|%OOaD =u8GOL\v2 0ˠxG8bFc*?K z,$)?@jkK2 3Rj诐2ZtœI\湗pQ-8lbQxEIg~(nuj"7#,#β W&#e:LfgU G/JhYXxn!o\u*˘!nPgY?$<>G[¯A;Sg1OƄKtƟр}x|ӌJS~yWD<xA9}jOۦA$%O_rx4:{Q,N*Kh {86e"|}J4BHп*W_P tJNzJKu 7S8fW+iؽ9թS5t#2;lvolb3v/VR`l{/s 4ŗ7kwBﮆy{~|kw0?l0 **n h2CusjԀkB4/Ƕ;:n3(Eҩ@`t̏%'뮾23q 93Wܱr8O Җ–bd8`KQ׊Yz`{j؁s%4؏cTܜ|$e9}Gw4JcpU׻l=gRLUCWXw52dsqCqtř-(U;S,`Uz|\V=E͠曛'DdrTʄ͑c %XKW8_99J(kNX) 6YO3zb._Dbh5s^Q^W>r*zM:dg׾66piWY-Kv7 ˮn%]L)s8il>3~kaOX3\|삡ux("5C;'V&}Fe*0CGg8FjJj9ܞe:ُLX͎1#cb_ ^Cu`cRr.4q)*JR,wa49oP!UD0. n??qƻMoburLReF: w0[ğF NnRsT {ҡ#nBt]-R~T?4;VKWA>&|aS8ˡ}8!^vG vOC_!?' 3 'DF؃8ҡN#6Ebt; П?Kn} VK]qXz:M94:7a+Ey&/_0~ TlE"[1 O) 5Ra}Qpc ڋc%ko^ Hl~,| ڒ X6[8#շ붒nҔsٟoWT3vpXtѕ!d\%O"{<q(|xD6~O 'B?^߻8vcS7W)ʳb굵6OUp_oZ|%An,Sy bk@NuF{ʔ($AKV'r2`5:RN) q{Ga,ކKe;HN:6mm1J1oC؆8_#SM4tw@fT-0ΪeUfiJŃuKbsT 9Ш% >lEtŒ>π gv8iS,uT) C ?YYN4jY#Y+1,$uq erKu959l6{ۓ,--r/zȃ)5ΙBӒ鄟r3MSiNk<_Qa[L"XX(m?T@U!*ﱛ'_QYa I)DH7JBo@S2.$N)K(<}Bb'N"=C !XƇ8J{*"Y{IYCTFSA?*p*4֘[XjV^YT9ZKG(@(0bx4n!p ^w[W>z"!հ6i1gӐ4;q} iz*-d@#2cM.NV3O:'u =#pMȅ-ʏv9268B9sox JF! !B-ϣ:e΀Ojh*ǢS/,Ag}6q[gs5}pcyyRսGC,=Kޣpb'h+0A[+3;bQUzkUE6 xf߱gƠ-\]c}Ol4hGCki4rEnEw*ב `ajR5F/ IAA(ΪUG:D]>&mc3VSG e܇1#<)oELHM9hK6 'aH_j \\RC%VM2g-6͸$膼<9G(6X*dJ3,1}v/awYzdoK]R IÖJ5)'74`[JDҬo6+a 8 P4%5Fˬ\m8sp{V$/cv:q"2d.߸{pKg]O29$lǦ)RTB&G,G8'[M =S0-a+YR^%Aا5R1 =i[y tQ/6+G4^29Zj4169l _hޔA2Gsg&]g{d(n#Ckf TrFĭ~5+l-?th4$^[+#W8\/ 18RtCopӲJͽ鬅w.H2r;AJ'Y麬kw(ohRIf`8TNLfp.!+VUe:ϖ&oYל9ڙQ˖05!SǸu^u4Vfxn7@$e+ԦH]VɎ` nK!bYTQ˖r3rAv<ɵFuܟ;X_;8~l Z,A}|˛ג{ `Qïqa\8ul<u),<#ޖ5\fP*|r/G B"(LFbYBƾs["}k眵ۻ=ͅ~.yF疪T8A-t*yqp~*+!I,u2!}UpxTn#o Sa'w KJ[P熒+SkwuM L[+qZ-:U*0Hf2&N]YSF0qN׳З[%vE}o_,~U¼ez*PO<5 \S_Ŀ}NbogiLn-Nk = 1̀s˲#{*VUiY{8b'TDC$f؉'TiXKjw}]{j#`Ά@fw=P 9ivy#i O˧FA) 6`mnBsGp=O'%9[}Eӟ!8Tw O8N$f!͐Yk/Xu+0WjdPS6i89"pl}'1sh[Qy2{UX,CmH=zn?B́3Ȝ D+!NpxUyUߵׂ§~xj|o?H<K܆VH EcъSslw^vYyz+\ JB0ݦ)dzq9?y7VͱYɻF:$t6#^NQdqa\50EN"A>w7$c (qrI$ Oʧ|< * Ʉ_'oUUbNc30HDzC Cns19|LWS3ݸC 5~? =bu\.Da3"o_Uw[=0+gÜ\!䶩32hx(Yy: s~ Nۚ=˄"EL6&-Rr->7o"cbԍSv۬)n'M|0p}-/-֝'Çc]NmEIlz1s}.ò}$~%ѻɟz~Ҋo3咳U=݈ oYjhh2\,[2 !pɹH !kԕG Gh: uւ*{QbKPr& P떦pJzpۏm"ip0lx}H .P"ғd1'rZ$718Y:}.,Ȭ)qس]P=SFEe"x\d6/V䥔P,.;reҠ]f45Gb_Aw. : \4%(2T)@'$J%AC,swOC)_,b\AɒVJ"rm-5֪ZJ%wDdrJSO)kOS #bo:[}xD_e,TqF=0Vk 2b d'V-mDХi!)L"3Y1|sL |5TxjjXKyQG076/A4fx"b,6d+\՜ao:b޵RLx8[!^+0)/4NZ9eU4zx4Tw(("Ikqܩ>E+Nf=ʥ%-jh F0. E,MjL~pBX xr%˿촵}uю=VRZ,0JdhZ!q/mܡ/|{7U?*-Vrjx- Ex _]D :0fJʙ'?ld?)}RiV&GӬqO@ k2i7Liֹ^:pbi{n{U*Tv&W%:5j-;gP:g_"׋]COwdVWkacgQ\ muqZ'RL/#>cv{Nmpe2;/#܊C{ ɈϞ˄@6nf⼑Ǐ U'Ui^sJE-|{RA΄Ⱦ3--Bsf|}eՅѳh`TƩk2WFai!9X1>uݖKȭ%dV֓_9VQ546O-VgFٍ? XЋ~2{{!ѴT ҙQ?@F5-/wI5'㔱M+[*x\s%FU _nju"E[.9`_-?8Sէ5 ]3۵͹vΉdyZ|Y&0|}F<13<9㾦p`Y[2$~Ui"kH\tIA0CxpMu)%4q/ʥCp%ŴLX;FUO<5Qxj@3 sZZ$q''E|k3AwtIWcJkP_Eߖ|WĆ51k3_&>Q^:i;𴍸 f;'q_n4$f!'jfeFz62z>ۘ[_ײ:AXo0PڳˣьٍAcFA 4`HjdI,}/e)vj5W>r)?/ÉH@hd85QΩFZ#3E0%!4ZWr@M^I[F2w{.YL{ :L kZ:WLxh d}ۛAYp#N L$ M7CP`xKM6_mXr3=E m֥|czE<{]U]uPk4iY璜o(\qvXnr-ڻ45Km]*`LȓBbŭm-̃\ Y*hT>pVs2 C4( */ǚ\\'VYB5[ -Ϲ1oץmk k ,J{dXglߋ{=l L=qCx=*u_3o )%(Q%4|^9=֏)%l  .|O lB([-͌? d:}, "Y&=Dw⚺jX%p]8 ַ k$].^YzQ¶b f ٿİTPSJ6H}dy.Q3Js_@7/tfOBױK ^x'~oj%2>g6 ۫Sx"2g : QU25 ~ӘjѤM_ye kUި^5JVrppݭ#{>T:TYT*{Yk(+AF/ `$##ώ~0i0@a ] k~d 錹P.bYiȴ8c/DSu wza]wm& |4JC A?CpW $?.ҟFߚ~8R-CyJr~!QjcW%}xurt$FNl L.[* 6 B቉2h]ʡ/rb=΃ޞaޅ87 oħ~?B%>/aO e9*auۥexҳW[ ixTŅeBM޽ VYM{~< >$d,YֵPޏ$T^ac!6_yʋHY],ec ÈEv;ٙ Gy97ҪO>0i(ط"zN?M=/no]S[ Fӹmj3pʾZʛ Ud+(oi+?ȇ9jֹ"!N/ pRSnUĘi`H~)@i_j)gi a^_:ۋk̮6߱w ٩@VhP.pPV]r*# Ía5|%z֚U htNޜ9",$N`v?&isPuȕ,ꁓɡB(f_htP#AgKױQZҼ,QHvM+w'~pٝ햲 )"EόYȶ~S;`χfB&8J"l y晹\쇊Rb_&E}|`Hg3(J%4bN2Njw{9]6q0|g/ th}J+FV[2@<L N0j)E6B=tP_opHuRy-mFy=cwm&qR/(+- u,qZI[& it+Yk^>Cq͙+t@6]Yn(B,c{,鸿=MAmZznaOVZXI*Fjd!45ΆvO`"?s]mu[¦zH9BlXuX5{'*0k-0[>UƇɘ_b'n$eY%EeXbsɫL:`}Iĕ '"Y˺# Esɿұ_a2:ĕZ&y0MNJwƅw)'u|W͇QdW+9߰ZGb!0/Y'ubBlhu`2ldG?$ռkN&.6 8lƮ*ܥꍧ{bmHL0.-\ ~rL(B7E'V(F]vMyvpg٪C;:7V^XװޣXMהB9C&;*[D>pf\aޮnBg 67zȉ%sfD*Cjobvj1H\9gA֞k>VoZcfzB/0A^U8&@7zpQu˛2AxݢˋT)@ZUs#7]uw7 ?TܬK#JQt9ywW1p&?g!/Q͖PP!ttUi_'53CU7$tzamGf[$#XM]WϹ ?:ɽD{OǗ n'Ezg y2/;R躦3jjrTOU꫐_xᙧF)z^OnW-_⪌5$xϵ,%~m {vUæ[g4GtD ƘK"akȼUs!S^g,BT)eq],w\3ӰaigZShb}iKEji0޿lM t٫^xO/{O{}M/il&^TB\c_]2~j/bW)ݍ_|#;%;hI0: T֭p?8pU+6vrrPI#4&кX y/Ԭ%]?7z2>Uikt8:̦rZ:(1'5Z tT$"o!s|9L^%Mͺp\Dxe5MTw\iz|%GSa5Ut FfU*v-X'RHȏH^-V<r ZFT |VI)(d9FeT˜ywdV14KKQ0 OP;'wj\xҡb,%ܾ] ʼnH蠣n,G[z-CЯPPUl,)R-sw \1.P!R1>J 7|x;f;9vHw.L~3ޤ;pBlZnJI\B'K4;$߷i~/سf t6n$=7lR;ZIF؛[]A۵`:4c( :s?EU}Q*4>$ q%>a'!Nڂ~45V֦4,͜\ G8B7N=gc)G79~Cn9(G'@όl[ x* 艉iKUQD#7CFI5Q(\=z4N|~DL8<~v@j"eu&AL Gv/tP.S(>)H2h%bԅ| ijw0d. 7~QQ]B5SJe%lꈓPJrתT o Ջ ~]+5֧ mikeff6wcA1m+S%5Rm 3bXb#WQ9'4ʜ'@DT:G։Kv[&4Ocef }YNXׂ> mg`ʻ]6 'd)ӋKo~߲$ӰoBB'Ƨy6sCsrТB;/435-XW*N lPO#vٔSZE(zőa=f~͎Y>n!ZSX }7.)g%|>:`&W؞މ{YT{8_Cao2H$}R5;*\XT\jF֢ϒ%Džj~=zB˿04cŒR>J[' 3} ;SҾh[ΧD:BP,{ HNnAL$absx$n{;T7@y%+/:-g(ѩC"Ec8=y%宦5Mft)3l] C:HE/ -FBqs~K 'igÓFk-`{iuk:yi]YS*n&W[1$t]to*\A2v}5@|h+ߏ̹Q n#4J x ~wCC2Y- 71i_c%Kr2Pߙ Y}*LoDTd%|CKrrCwz+#T$Ǥxgwͪ@zszcepEuՅsf" 8 _s`ZYB-Acv,%t:,""s*3s ܜtFP|`Jw'Q vy'# ,=0kJ ;'OI'$jR\(#qG2CWף=LK9 lMAm\)׷4[ x¾M5}ï5CaG0=Bt?"\X ߤe*LRߢ,B$h ZBe:5f+,PWDq+P՛RNkUpy"*'n)ujDc/3)z 稥*gpMlzY>eB yj'\[W5Tjpl7~o_,Jǚf-,hv0=gHn,M"1R}{7a`WdrNaI8~cӾ5(-B$ piسYz{ O+izn<#ٻP^SԻvIx")| fMW0صAϻ.=>K}ʑ'|T\96BZHqeE([Ȳ1G^,v}<h~X(R-Bd`DM\CxSq3p UodiujV+XDl]&Xg bvG]^^7/W%6E| ZbP$P%j)E7*qe q3{4*3F+qR.R=T\O KKM  K[szVbUwsnŎ#;/8F?̽m^PT4D74eFjڑ 5dv2>Wd'<\T_k x\xfPCCvhi9Պ2:,]$SAyW aǔEf.O[⌶NN)zUGOeu/YO KGE@nB+|@9ayxq` 7Ti,!W569QPsVC\sH$g^A ɰ!0ܰAC[-5tG9]IXRcRJթ:T%,Hsá6$|FgADơΦ #ڕbrfIŶ _/M$DJkp}NRXy@Ecx8(Bw:KNԻR> ݉@,0D ՐbL^>Qe'2q~3e;/R1&hFÓ_+J~h^Z-d%a b;PJ:|Q`-Li.VTr1J4:g@|,CuijB޲tn\Wp0Er6Rl|Sh5R _"V*mJ6XcTI&y:ܡfB)/1 CSw΋EgR]'qij~iZJJTB_2,eP&#"/m\s~/Wt&?\˓|7{Σ1hOtg_jUo{./*Q^,jl\NBOR;LHɲ/jZ*5SlK@{'֍Ffom_m&̂@=$oBN˂|)[7E876h̯!A͂`1SV5xT~h_h_OO06|F6Rqhm@t9D7AdWL'j#0oiI{ 9:zr m2C.ڎY|{# T:cym ݲ(zSk:J/ܹo_:S]KR}l/YtFvdtz9=5]݋ӮT: m%Zt$A(_V;Dީ8Ɋ(i꫈I&sU0:!P!@Yt.O$ 9KVy~J@(Z g# "e[ex_l݋ S׵]]b~yvE?aJjRr7WiTXE٧lt-nQ+|qX-Lfa#FBY.cXwҗ|60 \e`0wM!SsZ @ c]4Kd3(cr 6j뎴;WJ+?(vt6brx'WE# vcmcEisUiNN -WQr Ӧ?p;mv/*>8/ԹKeߺV&OWC&r6ti`F vY\4 !h0S~ٞW: ⯴`owU@f坺 Ԣ~džc)΄X_F. B7rPE3*^Q\kHT4Ra g"Ӥ0H(+@T@ !6v&VX&]h4؂6,Ŵ)"4{j4Z9j`c e`IH Qmhl#b=" WYCeϰym73c_Ж"2 Æb)X4 >;C/ZEL};Y.K&-j]#Qe.rlYDz4d<\ZIlV#O\CV e6"|iD* 1y\ ouvs4_IB6&t6Xh3B"q[6Y3rw![0N,7dFvB{ m]Fj-?WjeYi 6Pgq= c2fG5ePLD&5)NO4uKi(u=ֵ `5\;) YΝ<}ʇTQuְguL'pږy?=uý8wpl>,a mHҝЅ3($|WN|:-v 5S")f+Jm_MZL#> d=Mi\iI rP*XRJE!?dp&R[d*Az ְ/T"e,o]n u>s.Ȼ~«Vr|+a芹0^Ke'Vqހ{^< xXBRq,iBڬ]i1Y_OU̺fR/7zV(Q@y |ވ,ܤƆyO{pNle]H43"?S^$A.;lck ]i_eB9֪pH$7T8BDpZPEN3 aYf``YE~4ZwSLT\?; Mx>T: ^!˞c6N@"|kI{)': 7!s:*H_l UYU-#Ut+dPOOl W!}/|-W*ͳ1N"P!/3luKb%8zM&՛HgtD_|v@TJ㑾p189s57Ȁ4n,|*8P~h]ؿJ~D^4X*P9q/3 |k9NSD6Y>/(ه_db9wk] R(|J+z_ԧ7gTKj>0}! q\# ɮl\>W!$rckHqA !\XaI@+$Rs㮋\Xi:Fae(J *HifP1M2WFICP`2-5V`b0pj9S [0JI{hc-&ȫ8L ^f[3pV %i!4)[lbAZ@]Bf:XRQŻeRzfKprXN#HjVfU\]UbO~O yB!9Bi+|RAE}M G֭СXJ?ڂ(,A/VvGQÈx|N[;уOqܭf^$Sx٥ %^(zYMnF;cȚ7핪P ,?3qHoK7Ry q13l$usME112ܝ?WŐϹHKV"1'q(oWZu<HYy䗥>ڂ&k!\KlӼ;y@+J6T:UtjBH*  S]}|Pe]-)-l 8*WmFzvJFtu[ }RdC3T08mC:K^H uB]wjaG+;AV޿.j^YTk}cLaZ2 ~I%Z .Rp*& )dnE scQJ b7ZBm)ȼ||UGS6 #)''U,HTWjJl%N%S\Avjҁ28uDϱ`f>oh1ԖA.X:cbיR sy P@۽+Q IIY)pQy9/$9U.ri6L k3*?ŢNU>V~e i}ZQUhBpWе'O1T~&U  *c!Fg5ˌ.)lHC|]# 7Vs`+@:/A$U.;|Lԧ>CE]jK.=r6f-?=!w޺{2^[i7 /0SvZ Dawǽe^17Ƙhz -l^)USt*4ư{QOfЊ\PE@OSZ5,jY  gwMtw /I+c񨲈Z?0ڶdyD-S!ݠ9RZ1iL=Ow?_M [ 67|'TXf&לC)Eͬ{ lxr* +@TW@՟#n&YEZBmW`5; \{UeaKq`]ݽnGL>imI!#w} „ sⲞ8a6!cn~ruz=cp=B&7$ , X9 *OGȯBnDႥf/jFeTdKMC'&蔐 xL=ϗ1X PRԷ{jYX4Z;~ JdT$E 8EŚxߣ:dGJcc9#t eCppؓz4|xhnz #Y+sF8|jKuxRkC7_yQḡUyK6gw`.\忋kYN߅ Fg6פjj]T>S+|Sqp{W'ZBjΘco5xڅիUۺ$n z~]qZªKd o45T;ǥͣ™Jx`B'huKkSCfUx1ALk % B)+]sztNø"wb(5u+#*y:rԶͭ:2"D{@?c5/wta|iyUvJuR79;qwiq&?˜|^T <{Tt< C?H 7Fyʠ1)C%CݬVgaµiu =|קgF7Keʢt[G7Ζ>==FP,Zp쏷{v zuw3i.t8UYXW%-R-:}ЯDkS<6 9pB#j*{H,9OM&_خG]꨾r -5 ܮywul |H˳}[˲wSA b(351S*lC ymޖ3#@a,ݸ5[5L4zW5,EX(Fjym+9xw-M<—qc^`;#پ3{Zx r0ValH͆r3r2)M8t&Hxz8zIꬆGAȗ~s\ 1*ȿOrU[S:n`L<˩JFpOvUInE!]T*8~8t|sO6f-uv*vͩϺ=5 zplu j{S\w-guG>>H+3e~eCyYB>r(I|$iYF *VNMh {d ,< Yn3Zj''rZJ' o,$ԚZ0pCBށr%sRHh}*PRx PXIザ < #sGoXqaڇ6٧62q8Y,]..8x}[RaF [7к-c?zW[UV\S9&{Gso-z1UWF<\UZGdqKe \}짤}a/x瘸#0(]'He#~=2:qR [fߖV䊉]S>,G!F^1A:g_ 9K鷿=P7f QIw{GߟZi9 +D:L/7{Vbe;*P0muZ`Jj,)ѥΤ,=pǎ,9?iǢ.Sb-`:JۤX|p۪z%SH$J_o~KE9Vhw?چCqHaI1/[^"4Ͼ.LgLR[ĀŻz_\ :Ŝ otUH%s1"4 SA>25iCnj<&q$n-0'BRϓׁWn8K 2x^ȗ Fc r d َz=Z[.#$V=.`B IEHT<{őb))'%Z!Xsf, 0:uZK-J$v4!A| qX<, i{MUT }On#[8zr xZYw!wӄ F,~A3ubmIun{r faQ͵WFg&oB69 o+5UbV wp {'ڈ2O <œWDFw,\C:{VA'S<2g>TKZɧrY0v32ņNokݝ:Si+2*{G7;|gn2hH+n8tK횗Eaajs UwTɷqPVh[;'+ʗkں|^}]ި0\՟P5ZEtV&-0ɮI+/+X{x/$,)(uyKy1o,A ec*7;1t␳ik4ڹ=tkVE#BթԊk2c0|T1Gpj.,I(ޞ6ȒU)/}~J)P=G"F}RnVQ8uӌ^`jNnwZ>,:Xȑq(rv8ӂt;V]HW6҄f3!8xj]BK$M/bSZs?M/$'h1岧  x\қrbSgKbϢ kZ;w/iT\͇jxλ~ljt -7RgTb>z֩o_ӇNj/,oҘb ,Mi*H?|~֡nҤő3@x=G6v/#:gZ߭yHg|x߃{|0|'h%KoB6?}%>?%hs$W^}6+ĢJeJ.N;"c[[ɧ,_&on_cӆ\mPcʜ$+/ʗJevsM8k]aZF.@_tfO7Sx/T)`&wC,~4TL,l4c-jL" WU#{&OOy7]1yYP~w{IѤ*gZ;9!}7?J6lytu乣3#Phg{ہf}@;±ɯ} ⾂ֱ<:6{B0z ꘦Sy3L ]۹tҳ`Ex_ߵ[9ҥH'3Ol bрdJ. w%Kn 2ݪM2E {Dw66bHoK}POCyA3PRVSSu z[6 Dr^ -_М+^dܹZ>4%U8#k5,o]ihb/W5 &bsM{t e]z|jQ4霉rg,b)vϛA8:+~ M 9+u)GUK%z<ˬPlo]ѸbҊwh9 -L< (r~cV&kunf,N9} FRGVr( ߼D-^I (>794M7}2ul9 iG9 T SYpI(OO@V?aR :'?!ߏUo3zQM2T{ //}p퀣[Ql4,}[}QE~֠2'R,=_DVmӇƊLzRP!we{եܥW޴w ϬM49m?_\DI>&:r܆ ~\=cǠ~ 13Ѕd M_@Cm|Kʢ>yWl2eSD _–yie'l22UQ%PE0Xm]'OV68#iLjAd6_ǬisFT*tč:R,R,U-,PV qČB{E" 婹11 J-2sQaX%Gq9D5(1ۄKn75>~U "^ZS*:-h(]TtqQ$m֤Al \=6秣*j9-M׎U[Vpq=709trڎVʇjݯ 뷘`M%˦);P4K5XyD6]-aF{FܕQEїN1H "LIͥ.ڡ_$z1x穕9BOg]{y5ŹTh<5SuM!5Үx:S 7Y= feݳ$U -!߂ZֶvHu6"BH>q&NK6^iP ):՜v@ G4lR1I2W2YX5Vb؟iV=6<6jJA/OrJG-av+yd X!)ل!d t9!lA::$1 %(ewW8~= ?l4BtRhPXڜ,L9΀c俾 k9S+\%p94NIP5kiV">C$W?{*N,+YTZOuQxR7 MY+ɖdWKVdY{qæ4;j@HBz )n I6nvI`_+6y>y랙;Μsf9KQb`v;=.0>Ҥ{g|XQ_ᆾ(# _xOV<vT@a9O[Ї?Mt/x:# G~ l !,q ͙,j3|T! OЪEw{3%LEUq;QПˀ<)G$S駸WWC>woLf])D{iW1ܟ{! 0t!C`ڵ+C=KDqxjO;mְxMjC2ð:Js *F lM-gē"v@z-/6#[jA39 ewmn$"TfEU *sѩ5Rwgc:  0QF61!w<Ƙl*~ħKW6ǛڇʔpCI(? Z`oj.[tRH7P.uHrOZ<6$Fϖ=QeU[ZcCB2-" ^ 3ďE]W<JX(sSD),P~wR< :B[&C]oݻo#%"Y4ex b`:RxbaT;gr k{Ɗm@ؔ6Ruc ;L-~h$iw$;J@?_j6cL&#RE{ [efǪX<:Z5>,uEd!؊,)k]Gw!1:#UV8r2 _)d(ȺQwWW4 #|#m\K \_wR\9ʎ7zP|HrxP&}QaR N;/OUO6dP\rc޼P4rxTN5QhHAA=A&1Vo- ""Gv#41#%NzCV:Zt5hDZ5y|ɦۆ4Ҵ(O1uc֒/3v ܍_$c᧐~=گzf SQ°k62{mmt{Q3V aE5ֲ:GƑ\"wtkYNj Ӻ9ׄw]R'Ɣ3_88m jO~O$5dty%!czӎj9Tc2VwN^Fy,]po0Dĸ9/>3Nz 7* b ޕfΙWir`!Da_,?յұE#dIGfTߣ_Smix;fп03%V pǜN~ E/ qVGłX9F_956$=ů U-nkϸUigHg-a7ADVK&&ص{0:5Z4{{lDTlMtߜ1p'ou>Z>J@ﮦ|#RQ'4|Z4*(k<K((U'03#!KH %b>L2 xQ;׉, 1a)EΖc-e/a &OM)_nn: >%Hm" {A8aÃRJy{i9i(6`8@nn) 5:-CIR?Rp aiO)S^Ӂ}fcR"CBTfKL_ b67w{-璄7"+jo,ELo5]rJo\űT,¡_m]LV';8_u&Oh:M,^ |πf#AĜ?J8i8 a ^hFL]KHT0hԢnsj<9ڰvv?>]X}y&<+YjXQ.Œ4 BMt1lx/RKTvUS؃uqhhS"!u>V7Bx;醤UqC#>WӚj׹1XOoay8C \YPjPw9UP[5]oD~ pr׶v߲97A5ExW!x~r0UjwqjZ_i7B/5zS>ڕc$"\1"rf"9Ei:e襂NM38?|g]$< 7߉:a#, ?k{{1!8 P6k"z&9ߍz[_q J6D1O{KHXkڼsSUʎ?SwN}w=; 'BߦR3c ;L'oKNΔ41%3BJ[BG:a.I,~r ;kcd$h])q*&>ئz%uwٰWew g?Cs-Qb <:'vcԎ=ulr/48 L g¿ o[Z-(,}LQ:ݮب_6Y)i3 qE·[tiTk.4,~g0 { N;K<\(suq0j{KX?p߲M,D^BsL߈hy!qxP-N\ (t<ڪtqNUwmv"!X疻ĆE99Iq,~ܽ aކݹ eyVtgxKтK2gsHo4ؚ~wm?gka v!ga?0$y9h< &JB2a jAl?;SH [_lYwzռ55Vw@j&HVv_6_+uII&Ny\D֠5!+I=UZҹ.q^ NʔRUbUQᱵ;2k~LIRI+(Ln[߶)Q7iy+DrOqcrW Y+ӻ"Md/rޤO͛}t$袬=ඞIsX @kM]rejR 4.rm|υ%|G߶`ʆ:Tg# FiUZ(rdKW|4t55):1WiYP7kkqSef&<퍣+͹\! 2F*GnEV9R/MGc:GaR>/h05^_V<)W)I о:b4ME?pOpzj4Z4" :>͸}_EA{n"Վ[ȿ),[~2ѧ9!ɐ>Ob%Yh ('HP%6t 5.T&Jc3Z+M'B E |Ic ."ŒUZ="JHߖDŽ8듯# .rijt /09sL=d&h]{~:J##c@d .t=bG׉CyH2X„]G2a1w|]ȩؑqjY ߍɸꜣDȧa~{;9c$eL!̩P0{`MK7m{XBo<0bYvaFSHݤ.ps-Weۨ/S TY1b&N_H?KOObEE YzS**:JUTpґPԓ_/tP놺} {*׵&ڃNadauB6 #U%;cZE8yK3m٪em)mˡܚ֜#eR v%0 R1:j\7_;th$՟?+vJ^zvS(hO/Y|XT-Rp.sLrg"` qi*_ˣ>ȗ/YbYۺ{)P_\\Xt lr[df{2 IL+,O4 " 0x1nFrOֆmI撡5 !obZեҥ$/Y–?Y;~yD]QWwgEoמٹsK9_4Re;ㅙm8CWV>׷{jn 0%J:!+*Bv1a/^/ԺB@ 7j 5gb-Y~ mkFaez&& %$&BB:rEE_E͞n5b)Uw%f5EqsUb׳a}J|~_CGl* 2;th+JGsc\&,b5٭F,}i\:71Mi..81^)CGzLwҥuvgmqn"Y[#X_ED"~k纗ӱ"Y =к$Eg'8&qH LMpb Øl r`6ՐrV$]m+sd"N#cx }h 蝳6Wo9*h#T\ʒr)VUrjmK4g9U;/EN~ _Aױ W {Wd[۔_`tu;=7V,QLzCdd\go-usg%F[JST~ J( t&ZL,pQB c\|g&|r)0nt%Qo.?ir ti.TpٞO#_eg9_BOfd;LA{vWP yh 9 #ZΓ%ʵ+}5Ai|cyUCn؞[vڒ餟XsOe,'e^95qˬ{W&|n q=S#DlYȆv@"C/.ܤD+j}} -: XAR퓁sx-g &8MIb`/||/'BMܷW^~`w_2WȎcc=|4=ˇ_~S|e[!#DLk1D~a:E=kxޑ.G]}ɣͯ.dU g%iLS̄:%pE 0RmÅG^8]\p`J- !p:ԝ%ћ_p5R{]ircZܪι!hOç6wn ؤq5<%:}##VyW,2 "t{;r?slg)]Y&GܱnO~# #J K!#AS\`9t A5-{z q+wuYiR9~7;-~obk:nkR<* ;XUeT5 oe$Vk 9]%y>Xy7P~xĚ?>C+k3Wc42 ҚI@E"#VSbV;֖o^S\(zbB7ѣe(rG|ݻϩwUn wSz_f,$ZrrVoi ~$*Jvd=֒@!${z ):Jp\ȻRw[EE:[1umYYȲj%A➁'v831 OC #3Q7BcHH3~$ҊҸC( ]$1 @@r|0L[D-Tke 8x{ PK>7u{6~~J - ~֡mguREio6u` {jfJOYI#$/%c$X-n+ b?t683]& ohҝ|_&"i^ui4KC^{oVTh1rCU1zO?WboikqNq>)o/OMgVdeB!sK' ;XVSHTQ-~ _]< YGMRrɺxD]:֕zGMKmjWQW+< wLEʦ F6z(^AV6Tx)8.L2򚞂u}{tlSʴܪD#l;_ӥT^2lGvCd % /3V&g9 Jc8 h$'5`:p/Psv6>v8р>H%Z, l ݄gW>)9DjWb܍[RzV}"o-8Kg>h f ,`N!V VJE^TZjknH0aٖWj5Ҥ,ypbw6*C2R /r +-MjGs WEizE6% ƔB SHOϞf#fOpc{XelB͘2׎ bp̧d. }GiI;M-z=,nê9RZY]SU+j=p)=m-\Z&P@`QkCYZp{ٕV-yyB[R;o֒7:N^^nB촥|fWR0~ERr<ƜNrc=SJ̊߿0,^iP++ʛFjRߌԭf2lm+ʫ\ 7F,J%>u^itFXTH y W"^-͆5N'wqtZؠpXq~?k=OΘwK~먐pS;=ZTZZ{dd!$!Q*o:nή$C^DzQ2@i S\ 5jFk*zFG;kXT**jȇ:!EgmNQ0uD'%"$Hy ی0N_R> )g>5bN|U)=&Qf X+1zUjI,6y*Q8qUXl^"W}3-Ԇ%og$c_l$SkzqdOkr(>>hϴ]ۘ Y6 Z4MMZ-#?kxv:;P*~ c`穸B{ֲc݅юU+Ww:öPfDnLM۫N6\deZL2w5~L+с,8<@uuњs=ۻ}c;sKm%~ h)Y ,z+r}[4o=EKGL^_?L=IeLїi1dgOsw;7Ls꒭R${ƸsWGFŃgzf.*M%^a;nbZX~x(V=RTWvZR |eF(~YD6{#Civ"[!@MwT ISW`4AK\I~`pIq̒MN o;Z\rLS RiB䏝Fc> I"t%rI;EcCIp~%^܏;z<FHxjBy<"o62N92O /T؃7~9 0- T.=@(vti%TyvޥM<Fj>rE/AP:[5RY(M 8 $l ̘}>fhό"*"MqjI^t&jE!]==a/7 E-GXfRtLPzkUw,qj.&`x6,e6K$9⒫)ʱRKZϦ>wFH91(v X⍢~};؆]󂉍&w킠!ۈ3oMw gVlM@54 E} eb6#KɢiieBڗ$-f `>4|0? ͂i"2-5"-4҆Wp YȿA-R l䚅98` s&`}!4ȗ\TbSF$_f#iUL?tYC[#nzޒ$v M;ֲ̲gК,U`'HcBP:99ͤ|gZɤ9˨Ur"CA>Wy7\K>[Z"}N ~P♳&?VBe;D5&(Ly9zt >3P{9-tܑ`3x^k_,e6QLp#GO WxXĩߴGڰmWϩݾ@I#[N`(cLܯ"آψ ?/Fa: (rx<(<e}S N֭1(((L; }ANJjkd}lhbu&=_࿓,p&B 20 w2`k[dM0: '+@??n)KP ǭ{<{~6ތ8SkֹPl)'kvinw_??V`Fo@~()Z r1|Hx|!-P*;8 ֮ۂ;*j-i?,+߿(u1rlɂ]GHoM9ڈq?B a_)e{U6~Iê!8U,kԃ!^bQ _E# >>#ǩ*bM˷xjM 0 ߎ޹ w#W&3ĝ9^,1dM[ln&E]⊍45˔p e ?4|0dȜd́*[X8lPď691Ȉ1 5<ٝpYd3MCGM&v&r#lR b?+ҏ ܆?g9œJEz9B9ƅN h'' H!4zDH: =kYpglme8k5,s{{ocl/3es\e=$CcOR۽J<698+rP^;s2Db&.$q?]d["LEɒI2vkB*$/%E rxjO2X27rW;r>Բղ7)Q)7Q!sEbFLp1ysomoQklqn&N3Da++d a΄Výj˸@",quFjSVl!H)](޺K - Dsxph_ܸ~zb_ y;PlZ V &,;;҃|-GO>t ֢rOu 0Ãx#0sŬþeadWȋ\:jSdαKZGz㐚y+bH<ouw/gz`8 g}I~LYqz}Rd}Cwx<,.ft7_@Ȕҙp&&*}f`SNB/H'[?'EV 6 Nc~jpĵ2FbLjbbY4U1/aD9dT :'0P,oO'~,og<&PQ@4j:UF([l`!H&ʐrDqO|Jۭo\ruM+:ViJ* Q%S~Orj?t +sG95*bqsf))ȷ@iLR+ew+$(!W };1 <3@B EvڭO?t* n~+ŒkGKkAR*T$rVQx3 .u/ H+ji^uJ\rOR[lS (Wb$*2ק&זآx^嵥,6UYOƀ!u[/,-:FinŤ)kҠfv\Km)(Ei2,M&SHd*J *aԝ#\Nn)Tl'hZ%7%$`;,6gd=-V{vY&#"A$m3Xo6JAzzP19T!J] KBT'YbTEѵv2ѓy(sjbQAʎ3Иa;PQlb[yģQP)15B& [QO#.lMGy r41YđbFBZ6n1;sG( ]QsT\@=n*7qlmsAmܓX6.U`(3F$;A^YJHyJ8&"*[cɩ6#ڌ @N9xbEm?/*"56nP|gZ# &*pЋn<], qpEgy{ew8qxd%^;L&, :72 E ۻ8+P4mCdCBfs:6~Oʪ%m;6y݄Y$=|6 ~4@[@G$O0^4(ecbbZeZtD!tD)93)DܨhFu]QV{PDg0Ǚ=Tw6ps \ek7 f-^J<8c V8E]HIpYBn*MH_ZZQjMͮ>oW=ZM.-| I0l{'l>-WKbSe `td(Y}pgJM= m>ݎ~ .hg3ҞЎcAH{.BF.7Pyڂm ]H :V3PpOٰ-wR#0)v&FH67MȟH}wג:FOEB R$_F^` i;i Hc {({9BiW1}6-K$Hkڲ w1o]|F{=o9w -,`\7N~2A@|/&w[h'' !I I{!Ɯ$ +!6 nc)C1$!*n,I1b"u\!XE!ml+ i$cH+$}-.id|!d'?FC.gp7"QwJ mWba6t+!xV؀ %xS։< T$Hy%bh !Zr~|'a>"5q@2߽l~v*Row'yp:EDhcvH}|0߭dg#U0Av.B[Xr̈́iH rE0mmk&<Lj VCW7z%n;=K^*!)צi.Fhȫd#n$ k&Ls `k&L#Jxlo @9W5YG2 KP ؋RhcБmHIq\C7nQHf mϲܿ JS9sȜR+/mɋm?0 IoLv'8[66CWR64s8;0* p|MKI顾dn&5 -VH$OI?EP@ Z@oҡjo/ FRC[{bk!gւk1w;jvETw-نu)pj]5ֳ MZWR#9c]Iɺd'n"_JV&=6weײYѥy@u)`_>L lJNPRKb Ѯkp@ F)L}iCQj 70i$^ƛo6%iP4e8^ f;"`>oa\}>Pv:[^99ϫV{ayDy7K+KC/O| >coS4DŌ|X1u־݉31TyJ34,SS˓TtE9IcGߖҺ.S~gz]1X/cwbPzu/&h`$uAD觇?% *m?U>ޯ.m,ݿQ)p%y؇.nLdEx3P4_=r#C*^rX䎉lm \J>ӥ r|P{:geyu_5KY @71;߁:!!wᮂO ,>xgr//7Ģ "KzQѯ=~o#15|Ap>3lMe25]fڄ3RQ;}knf u^![0spk=&WH4V"Nn[+d}9XрR3s\-Fh =KMk nZA+ǰx2u1ՏkcimzlWd%6q5jȸ/ v+Zs:Fi8r#D:Z&A52W@CոE:h!դ]3E05T1>L@MGD OOL|11V_#dXs;J|DQ0Vmnf)/Ц; x~RϾvB,HdC':RWR)% fqt(Sĺ̡jPT}\0# n-7ngʹ3,h$<76Vȼ GռZsƃXc4R*])}NF7dMpWu{cg/8PcQ\M?Ѿ"?!Em\Vm-t] }zGU MeQR7G: o5xkۦ:&'6pn{#E J.Or~y)ೄ\1G؁M(7Qjœ?M(`/6ZZs('ghgiùRWJ$U*Y [auF _XΥYbqNW"ZJ"&S pG)L,A?Cʕu x*Oȷgx9!?*b P殔I 8$"Z񴮩^;NH^+HgY5])͕U{AلuXpb MfwKV!5"4%/2&ӛOs{=ﾄiZYVjFrrԸjm@zz8L3+pTl 򍹩.Ap_ZoZқy%lhD t@!.#|͐&D~GmEq,{=;cY6fN/V4kLK{RjtV efՖOpXZ8VoDpL/36  'd._jNj[_m.R !1ǟp_|;y9;szP";͗'#bǥ?cJqGbRNBcj\Io._l,ʫ(խ.[*o2B̙]rkyhRGlOB1!{a;>oNKWJAlEt)i6Q c()a(I£Rne3 $'\)){=*;He˒%[V%&[rv9Nz! IH%I$ RҖ KIXJ`!$;3J}}~;sΙ33g9c$r&=/kdKne}TAݺ]3hYiuqIY9^f/pA_:Q;ZJvrEJBEІ.% J1#]74Nx*.}q:…D r 0xMCM_ٯ'Aʩg٨N+Mb]{'dI>+V9,eej%DD>`pշ_\6z#UKק@}3w.rmB!<ؿ9KGg[ u:8$-0*Z9<$˼)H,7A)ý ~ g+9Π{p5 &C)R[gU{Ϳs> A#=M2# O`[½loGȊw:SS*edcMLJzu\DfsP]m(KSln2)Ӂ @J)Zk LʱId5Ɠ@Rٖӳƭq&.az# omGI췸>P.OG8jpIjnə\{@J}Mp똸yfUܘffś&Ij bz2U;L#~I_Xֹd9@L,`- rh \jX'!?1e7(3ŁR #,/V* V6MḶX,9=.uSD ;NO3D[:W*5&jtHjFֻ[(!I6&GKPLe2ĈteE{#]"H9*DHw.o בJ1AP*H/V5JM͑NC ,Qkq4a\{M D-ǜ3!6Yu`etME\&SE~7єeǁ1 <ڍ;pB|u=kPWH'y= fԍ4''5T/PfW@]ќ#!eKWv ;) 3<0F}2ÑoX7z=@gЊp %~=H)K3dGEI6΢gN.mɭY0);Ϡ3zt^u>F4$gZIt 5i*l^ y)˦if̘~0ӻFlyd-n}c z 9D܌_d䒔3KGoՖ_?P5ٜ6yfόb[?UG)|b)Ke?=Mm w~;gg_~=͂ T{_٧V~׏ }G ǯe[$5r1FFlE3h:i szrZԢ"Q{_4vtՎ,OyDO_]=58kGE#ktg+Yl,~&V_wI;wtvl"Ζ߈`-lѡK6e{Їθ]j'r:宠 bGӥ1 4|v@S|E P]hC<7r/XQ9H\_+lC/KJd&:.#Jgh j&A4h+2TnMKJ`6%e3M:-$ T*.}Rzrq1RP-NH4J{=7^`WyFKA4:>)ijGn=!]& z*42^kH';|aRM¯jUK-F{S(ڞ"s}ޮ^c{5>q2>}?jt(#1fp,J'=4e^}=4W$SM0_Qk/ਅvoLĆ\5;TDWaשUqz im2Lx^1 ![&\bZ&Wh뽦CL)Jy uq[wCi;5$׿WoPe;E60E.hSY;ȃn<~XܨʺdMc4jx7.ab)O'GqlGNTkr觗?pmvLemI;Ff7c%,]w ܪB__#[G#ۋgŭs&qP1ktokS>goA $ch4Kg{ f/{ImUYX4ҫaR86K{apg{ 2g[ {{[wNanݷzэBݷ瓼薡7H  jvlH?l|Χ-dw.g Ku&]jjbKW-MESr G_$Rugi rFCY+.2,͐QuՎז7TրN{qGFxˣ7'XGxmiP*XРbL;UOKfwu)CZᛗg#hڮڸA!V!%=AЭN{݉wE9<+߬9rf=!,"M;CU**3Ѷ]ŝMh[η8)|l#؍sz/xgfd=|.vȲ*ߢ>䶌KgldYyYIquogAC6-eF-^oltA^oo4ʇ5#c~c79S3q[n3׆nzBDfvϊ^1WeStk`ߴ(D(!:'M $qҢY!%JDfJu_tؒtתIݳq )NB ]CnlM'l8DG6:OL5ܘ7 #WM?faur߄>G/MK-v>w{Fνi om# Z Zvnl}-acw_Z-h?Ch7yA4yK諠un?L'QgVm9uw僞Y@ 7(n`H,hO :uINzǩINk%'O:u >>6ƓSΌ 17߬Ymm*f˽O$yЂ'??UꟋU쟓fu) i}/좮ȫ*; [˓l0uMx${iJds>dMPZUrO0oPeSƟ vʍ-;׾ZFvYmÏ<2;|9_1nwSHZVn0}JeNVդ&<љݒ3TAZ|=*gJN {]Ɍu Egf+>0nߞ7h3SZqrIc) GQKvNuAQ%7Ksjݙ?UQ@PHo)HXʼ=2WH:;KrOl%!3Ғ|@rүdf7 >{x_D.GwRl۸)v8|1;me(ћvNC\N ;4ƛ*١D{LU.XT?IUʮ܂T$w}VYyLHMYɕΊqgE̙E$%`GC! a1Hc!j|]Ab,Q)391Eq?quT?Ft.J 7Y7%*(2ʔIJ`0d|[pIs5\993UG =u"IV!P?b7ZgTb'ќcSRtbۜPJ "!уv#g颸z݃ Gl [ѪH|TDQHfBz"N|ykr+А.yJ)#W,=A!btxE 4v6x4)"Af6Z +?@em)M ^JRn]lJV]ZP~H4#>s?H6Q2'?Pz&I56VIu69@;X g=7]MkO#4Ԧv6Iu9OMsxv%aZ&6'h~%rþ) V Ա~"]KAZ, fܙ>A2ߝehJ[-pLQ- mv1 eGפ;7^FgP%# yNK. 3rz&XٗWY|CD=[% 2!YE/x3ܘYbMNd{CTsub}Tڷ><({?ևTK:܏h C6ݗ~c⑏-(?JAIDiS)P7na]X{ ߏI axw"nI~}ߎÞ<qosGx{:!sg~{'( [Cϋϛ%_ Ͻ sw]ȇ1Yc7en n8Gl<ωn+KMe=ީE lGccsŞk{͊hjՐVI hq6O*5gs z`3Cs9]hd̄ꊾtrd]Piٺ\?ޮd$!ˉ+[7ƍhE ln[3Y\4 ̄Lͮ7"o4d TtM15cA[Mc +2UfSqM($ԋT.sODmĀAl*"ͤw1o9!sF%ћgC(01Y(1j-=Az M=&oW`=om+f9M^(DYaNwQ<Y_Яt74eq'g:LLq!yYUܿ3DOg3V%Xt }IcShy+N<^.4HiMc6 N|̪޲h>Ɯ4L(p_ZYսl1:iee־CEI<40zz -A?HH朧#u3f:ή팙}5,|]VwmmZAwb-ySu, /HyBwz$<;w3j1}m.Eexפ|X3̓r`ih|JH&R ^O%1Z~Ybu㒥jՃ*J-sue[@Q_o}<5f͏9߹>F1Ik\Md9g+LeQkގ5Ȳ !\Z,, zIJOhig i-)1/]j-87Ͱ g※z?S|eic{'Ɓ=롫irV?ͩ'Qd=i^JOc^cLK,R&3ćq8Y܏y΋ uPB$QYesanbVӒǷ/MЬIP šM-]xXNJ")a"Y y=fl`Gd~V1bGO"1ͣ4 1!5Q1u>T&Hpq&ea#|0M3PI8A3 O34xI成4&FiV\bywjw* s\B Х"ԃa kۦ[VO ^Ν m< 7्gb٤*x\8v{4v}y}]bSg|=Wk}]ӊ~/یrKrh%W'YćT4 KYjy)r VۿϐϮT+W_Ox?)CV5k:8,<)%=_"}ﭸ[K`w<bYN|:Ur )8Q>@f_i{7uMy4gۮVb2suk@G=:K+|Q.E~i_< #wϐ[g`>mv'VȧݤЈׅӂ 3ʴZCZc3׵.MɓSnHJs]1ZәySx'J1[@ rFn3 rT;l>ґ^<6e[,|Hb1ͨz\h3`86#[ %Q&1=U9 Df[.zoq1ZL8F]"DZ;.v#pdpts9j7-H հ.~gZ.O#%{r*bh`l*n;ݸM]^{RR=>RRUWK+IN"7K{*r*:;i9eu LaȭwŔArkI,ZjL3d H*tRe'(53xn##]6Dq?@|ԖƂc\Xdq%YvYp%g ‘B"NS!%JYnqgZM91qjXGcp`<^ǺqA2y~sMfm)ԕf?SgN@:Df`L ك+Wo \Wb t*EhH "c6+o{H!] |Մ3Kn{tC;RWbrJeOͫ^wl9eMѨ QLbC67kӰVU:H61>}B㓯[3 ϙJ $͜YDo8I߃˞I>BSOHh߅`HP W0b 0à]dWQ >8;sf>aבQ$h'3, M[2k7mbpG@El~6լܯ|+?7%?돢EPV<@8D\osK[4~cb 2z-pf[UytLvbj-cȾSe`Dc { swV$&g(4{e%pj <\on}CGjdY!,!Z)^̉M)JYk{gyUu.f_SCʯ=3aX2WSD||R՘ }4y Wzs xt^Ecu"[/>v%S&-[laxO`Q pRFoe*vBJ\}pzV;:I)q ُ}m $)#;+g򜇀=ʞ*hMi9o бxKN XIPNאYeS65W+ *9urtrwS9 ɩCE#p9)1!XwG4˜ҹ’XVk/ a%L2zR*f-}so. O2|b[h3 Rq_КЎPd20A*Jk-x4g/ɓFi թW&6Ew 4)iD ~tMrQ`s廅cN”y՜BEBR*ڨWQGU!O t*lTSOI{5;v=G<-qwՀ<$ii}O6+2 {oPsy>'`(W/ |J?go#IXmcg`OQ\:hBG چ$E+y'HB283!+S֫ I" +T&fH*j!Z{Xٖ88UH0#gZ1,$ FȃȇhRS4.pb*odXNW;I X B>ѰG E0XvD<% [ c3blUcl%guĠn~Oo!;Jt/%$+)8 X|p~Oǣ?ѝ]Tc?;R Qɩ{ƘFF,&(~HrfzL pt`>'#qT'}u;s@<ݕkRIR#>ޑT2<#g"\cJfKSKS f4?pȞO+$+7AB ƌiF+k,%y{ :1ћ,%B&}jQm% PM,|- hSLaqZ3P"]MzKfn`F4J;U;6)HP m٬vbt1D TN H9P~O@.}fr$@sD4<&cMf3r>潏pr| x[NVO<տ}}I q}%!%P+O  as%4P}2f޾=冖^gU5J0,eO99pm(T^t^9LEtoɯ}eG rpʵHS kP z~qgWwX'z`}PtG$ޅ}+cp ['Bq=!䧅tDŽtW}PA'ʏ" vBTZb*sAI7Kӝʐ)˔؉ h=8-`zz=ш;#`NI4IjS֟lXX~ X$4a~,`[7LSH(ei9 '{Q^f߿p:1B}fsf!lYߠnъ,$xD(p:Gn Qܦj%j+Q4θ)2߿oπ.U%%$уݾH+>p}f3l>90In*Kc@S&yRDDpC4(Y">Ss(-a\z2)tEg 0e^;2O@9xDŗj|7,]_~\ F8sQ^? nBCR.ZJ>ow^7ך㻧8v[Z!i4[4c[xenJ Xc{n:HKJtPdLH^7!c"A a+^@t_nJyaZ '˨bɍL2]cȺnWy2xȽ$glW B#jWB?Zv3=iW ifsSw{ז|X ? }yY|L "!xp,@}| 1q~NǀEѢ翀64jLj`nHc'R;~:8`S!o\-jKfƷ_c瀊xJI%\J/")Z?C;jhw:΅ 4U a8';"io m;/;E\p/?79܏ >a:ɿ2$_8A'Br8̇gU} |(:\8'ifW^<>w<͎+;lP9 wŝ*@g(~ 착Q&pE4ðJrɢM-g;ǔ5le+5g٣[I?|[XfsP/ޱ|3r~]+*Qs$ 9CqDDٌIypZ67Ypf 91"9jw)-z !W-cNO;w~+ƙψ=Xϸ ϯ8ʝ+N :D^hOt$;f`StܮN0!țU~{y&&3=oca8F]>ᜋb1Z]đc/x7{}gt@׫#I\2Pȫ'hō a?om .ATYO +Ǔa-1\K0qG8ɬ+{_ob;q%w"G+`s?7euV]+iض{Opsm|yell }q䁯8^VrM|݄[9~tG0\z+D+}-Yo~Iٔߡ;/=Gu 2ڬ D5aEί ply!Qz? Ynbփ<Îg{WDNVx؝OqGX?: 볜o/ϋ Q.9pξa&Iv.tO ^x:%0vӑ߁s\~IJ)lX鎰\\x,psuG/ ?#E/->愱yp ?+M+ y;pb[؇|p_gܦ#2xmKbI'V,ŶF# n8=ӧe%yzNOըS,|~9I@mPo]|6 7QK,Ķl_v)SϾrK+Joclc;OmLfx-l] sޓb'4Bi ҳyx/,.R#_XX "T?XqpOo3 /\0Է2B|^ˋk]3p; oi[q!C8e0? /fwXnLp|989{Þcyo{^ܟ wpϥsANNN}yP^(@'7\|,.ʯ .#帽8[F ;>E76@?qvKDZyöFc}rVq p_" 2.1~A>O1W.߮= ټuFJQ}I7s?H};z#_{Zo;23ƭ &}yvvyg5=chR; i@~1t)+F,P1`~#`~t.Vc%/R +#qO_ Z' -`r7~~)ӗyS+ȿ?F#ʝOHd.Fw$] L%SfKoIb2zf'uiCRקTcB\ ƪcHY绝ywX>tPï}!Z7Gu1 g>B2ݏ$&a#7sw)vco^/x\ezFh s%vp @=3bc`$Q^ΗQr!PSxhba;Z'RUr+Н?Yܭl#^tSr/r)r[-Y{ɿ(kV_c kc2k ?(8*JJ7cJbUQN7$Gnx;/HĴ8+ϋGGfyUloH%gy2c ]ifZK{I(;l2M2l$ؘiDTXz^-C2t,a#&anՕ@QD(ğn2d q-9Z8vgn~A7 ?  U+L-{zV F+5-l0x "qNa׳ϩWl}G~\:uy/ot̗'K,Bz|d0&@I1m(md{1Ԃ3`Z/*' G Zݿ.^ݿ.@eq2:)SzLC,]ZGsI>| Jȸ2H>lR"j\SVh?>OQ)ikw@{YNl|l!U,Rz5g#' n=KxYv)u񗪸50iPa{y7[g/jȞ}{< <H"-"]/=M8#tٲi(;bWA;! uA,dNr=.rK5"R FeòwsMt"}z}ݛOޏНo{0' ṔwDDžplUC-+*p;A~WZY%:{A2m0WkdV]e?uZɭwwUg y9ögpq*l"5σm Z q%"~hs0yz 5?I"^0pqT@OSN~o|d@OWO"s:4 џ~ߊw׏)d;q:O?ɯ`N~E,OS V3ɯ#Ĉ N9ȮLUe9ޟrv`m c7x0q ]о$'h_8o8ш汻8ԻvQӅ|V<= Y9gh(e8T|Y!okD(zV"@M@!⟔;K0%!T2vҷ߽aOS kR=/^\^Lx}, q K_`)\w^O_"r{b'~?Eм17>m 58ynS,TFS62# 3@e~\oA7T8lqIvTCKvW#D8q.=,,C9}Y"8?_8?Dh{x]H 3\H*@}i]! hqzZ!gdm1Iui{O(М=`џXdU @GM_" 8#9!*EΟF=|Ɵ1ܸ:qV;fayNxHWZPWz@.뒽^^E:/oOFVo2BE!!f-IM\dv3}n_kE Q'χ)rT8&־ c4T[\A} ]Cc ӑL3'N힌ɵ{9\_ ~ p"0#9-Ah' w_\S <=p-+ zՓ}lo+ď UER ,-h`}IywdӥǙؚ&Osi^!)6SnKxdJ-}N->v`E^b> ֧'Lh8{fzJ|C [ &zZծRǤMhO4۷_c>i=G{Rs)ՎtG ᷣ席pT؟qؿ%x[1|pޟEɸqJ wwV'ѣnY,w@c[?ȧXo0GFX9GwsJ_J˻JS*C1}SE-j[u<" HwN79)C-f/8>,ZAuQDnN%;s3 F.A$'V.7䋼c{.މ:voTO?g3Q-QƀMQqQSsWcF'O ~$ڏ_ɥ])t@O=ofD_#@uEVcƖHӠM1uX˵4hb@g5+ơMwq؊Kc`\0tUw!~C*NÂ|rG0cLYĈWBC|wDrEA) % b DCRwNH5([b](]=TkO#c Q 0'v6 4!DvX[zw?s9}ou4]‰S1Q37ջgɕiMUi9^Kըb+ *& 3M f7ͨ3ZM19Ql#a~%ur.Ԩ93H!/ ][i%[dt!"G ~@,~4(_󑀟!?>@9 \U^[L 9bGDPOv>\\ nt|%iU.`2b\QιiA[Vh6 }Csz'2z1 ӷ @}λ .J r'xy.D#O}1T'bFFm3Nɪ UCVѢaɷ; 5,)spqmGβR,Fpp?""~A!/4Cr i!8"N0"D!H%BcZrpgaApIf Iy..zferi$5T;[~f{_iSY9dJ[V<)s u.9F#I.Ud6qUej}rfM![\LӲ~RaTqtQ`Jpom:dEyyxUS >reb? o ?pXq ?*A1!UꓫJ7WsALUVNPk'u)%C*pN]\Ӻ0]Φ>+0=jM?j{1{VisU*CU;}p✜QG=}*oIhgb1;aɠ;ܔ*r`+N&;r. ]\zs:YwtZ#9O HH{.x\gxO|Ək8F. kh'a>2yT5w1>_WG`=बO齷;[fwf{/eKa齩"MUP[P@-Q1Xb,$ 6TgٙYags={&jHۿ"+hk0ԗfl,} 9ji['u/#n>64tqsǙ k0T}JAJEksggP:FhUkfoIõCg۬dN! >&'?U}cW+A%n̹1,dE,d-s:+B?Hp1Mȋ/8=1܍Lk=7*ʞM?g.ߡ_سGmKЅ$!Gأs;y|c֧c:"Oy9/}4`W5aY5O 8ebK|cI+S? 51OOA,oLq<Ώ;Z ǚ ewĂK>MP}v\^r~"?_{cI;A7|ЀEhQFp/-pvm&B_W7'<)t_W tOSq}mZ  |#LYtc]5r.Gd)f 6%P|?s<N@Ր%phr$VYXosK5R3FɴQ>EC9̬Z*>ƭ  3kxN0k5b%Cv5=OU; s -X}_qˉ y=,Ȱ4=}>FO5g4G)q C,Gb,8Zr( jٲ?߲Pwא ұDM⊽ Xd|!7愘'őQJL5|=pŃD#'F/ 7ULntQߤu&c( qK}K̝E'z rov]rq-N~lA~~?߯{Dfc~k*hDc؎805dH 6HKLBeG\+`9oOa,3E?ߓM&] iZOL?43Gzpʕ"#x類̭ g/Lo]32jM'ul>h]~+.iY~+.y|)sGIR/5loDGlo'W/ >:>' o_d[)$+u.NdcDz)QmFΧ+OCr~G[ܽI 1 ԤGHFR#@х~0EMWO,IH^@ph'n?;2Ur.> 윒.6HސQ(s7˄Xb o8nx=~y0hJN3IzWc.IRzYIIiWgīI<^#ץO:){~"< OiNIV][O_c/8wOmߞ=>ϩeQn=I!WEW#W1NN!n=—\Ky*yyy$~wKRipC [y )+/^* :#TۿL -\f;d}Wu?LIIuR)eÈ{;}de̠_4Vy/ʆ;Ntun1qjac\saqhnKxxkx4>|E)3#?.xQڶZG=<ܪќӈb,i;^u.[\e$64~<͉;1}>pN"v$ħxѱ3Y$cn|ϛL;?mJ)tC*LD>0>xlA|>"'`R=x=!% |4+Q4dFSF$.1KJ:wWV.5pCĮGy[sJtQgW5+eZ4XWN8eJmvbkNdĆ7VXBH2y~<| ,Q^Ss/'&Y^lǹD =4xֆ"?ka;T4m 韧̹omEn%EC1=Q# 8~K0r˝*w9sM^aRpLoBWO;>LřO57b!j&"!Xeo$Knl me7t|g[ C5MrD:cZn7;7D*juڞJX.W,S>Um$GVݺwc4CzstvZ,ҥ*v jՅZ=\}"!|yD"Yg "ޠc^?/>.{yj_)s|Cu||5g4gy=Aěðf@F u(Lugh%fBs徺o^a:l)" 4)0[#^J4t^*t"-ӣ]l֜}ȣm-1k̽ 0ⴂsZ^~္1y꺊iv{Q+7%8r~y ;',IJܟb\tA$pzf ~$v!–'9OI"/GO0&^C7!|Š, rs>CJT?uA G7-XM!5ҮQU>@U6{Wݏb2]dfX$}eQ8uo ܰ }U86 z~)CkqxˢDez ʸWB_HmakdM++s.\o5 Vu! Dav$_r{5~,PFVRC鏦$~3/<~{7<'K:\ǨIv\y:$as1B^ǒD< XYl:AR~drn.X5ia!_Uxkj/5mݢXDOz/=t {m|'ˀ~OJɐfb⫊>/Z3O}2^U?ھ? h~>[۱|;>?i{_mq 8[ߓLhYj4K'&[(H4l*R|?Yz8\Ïg;*KȃC`1MdxoMK'UWe]ޠ}4Sǥ L6cF,k%}=ry,'Ցgܦ\÷)MF(?a>E8hh@rPη;A7J^^Xa .7d˪ؽȧUƎ =1zzIR7p\;A^4a{R ㏧/65-F\$WWR=w#u ' tHP'2̬=^COb&U&ShBNLe[pLQx<׏ n9Eal%a~JqHͰJՊpJLM?ovP٤=M^[avxJN£5#jE"밟}BPߓH ޕ4ds(*gUx0ԑ5E3q`7ķCMzFFuT|E HuoTV"Q^eh.`yJ9>w%p_o<. *kп@CE3zW.]YĸoQF@k*~O?Tw%p]PQ⋔%/Y~b̦%iwOK?|`6-D"戙jM}eIc^"\ORv,g&ON!{|fMD~@fޝ|QLD}*aT|im~Kfг k[̍L6NY1sβ! wRQiTe>B„<D-}rBͯ.n{@(<6b .H<&rI]~s!tzAc]bt 4N}Q8/!$! u7$ eaK,R&,mUYMzNnoɯo 5 W,|TIeE:Rsٌcf{}2=XY}wՋG@vej_+C4:SmxϭRv"l(z][E h*!U9 tjG\ 9b )>6xŠ13,l H!5`~^fNJz1{, r&nXI!}إ9BP7]~lOפ{`nq=C 6*qw nbŶpX?M{W +fP{n]7Fsm_?g *^7_^n='ES@f 3Qo[Q ?e|VEoU]UK,K)֒|N=|Ohq NG=D#&cUYVv )utܵ혭T@).+i/ ˇ7Cr9.h!_Pv|hd5BjNgYo4;r UY'*w7~]EB%;iX!hf` OV )`3r#6kldYtʒdi5JRc/F*N"ʤfJT9#6N/#7J|qO\S.&,K` v >FTNddYR6Fn=P*Ur)tb>}wn8b~lt4*<2>7k<Vm O%!Y@jLPڼ3ƒVܠ2&aEH WQz@!l>?jE] ʂOW); xԲfu*#JfeH!w2bګ -Cl.RkYK̦Ek> (jH| ,Tb.Y}JTP,7?J:M-Y`K@ϒܔɞcNB /σoL5mPm^( a6 ԑ7z_߲ϵ?ne^xe Yp|Wsy8$Z]<[z7_ӉӟHe\{b- /F 8 ~4';yes>sL*z Ӟ~8~d9S =rC}%uI׋m:}o}_c_!J_NttUfU8iO&X?x͕~צ/_'I" s, '?eX<75y֫vU'y~u?¿6#e?<}('K+7ߥ n RʼI}ũO&5hm8^ڋTDN|o2kw~kO9XOiw}wy:KdXF=k>O$Ӊ$]>|&c<>'[ŭ?8 q"#hlU|+8˺@٘,ksRݡ&Y7lA 7%FQ)$++ (Z[J:lV쿫Y\יxq"oĜR]IP|!\<^C?cBz'L+RgSyRN_Ӊ'tƷ@\|8])tS,%}Y<7E\ҙm+F}1/1~p_ D)wBh~]*z8s~rPS樗\>h%̭g0-s}ό [*->aTčMu~`..˿|K*~2zȧķOUxWR/'p)3^ٜJqYxuZI<^Ӓ~m < oNc<=I" 4$g;BwR* z>Z_̠ע+?)d:6L.VKgqgD yeScD+?4n/h^)ayoŷM&8#Z.?cћzlf=}f}|։PpΌI|Q MXAhA/ްkd/VU,QZ}fL>M6QJ{G @d_.$TJK 6=u4G7[!|(?E_m3N7xpio*6iO&X?xpjoitN$~4|oHpwVB׃'sXOy^y2_n^o}?|Xy^#k3?|^#3>ߛ|^6vR8E%=kvp[ɖu} E-?m WqyG-&b-7Yh+,zdc8)l!㏉D93B8(&Rpi%0aKJGx>=)xs/la& G`: á-$"= q]0* y &N\1#4~G "֍{t>?Q:톃;XR]tݺbĊn[[y3m^9q|4:8@kQy=UtwGpgR `@HB7D3ȾD*jp}?E݅{7&C|>O )Hꔱ$YAs7itZX m)l*m&idX[?%#;jKuѶiQ;^yv{8X&#G\2_~ /ls*wM^9L| HfL*S4!?-}i/t)N[~$Kcf.X5o(Y5vrlɁK; eJ}0:2:̪Vx^RbYbjU6̧TUR>4&PUjuԮYW5`Tkv U&ec)(2 V 5daB<.kJ|RYB_.Qlѐ`۴B,q;2Rm r]Q;`UX~\u4&IKR)8ewMJ_4xa =x@ ~ ESAȏ `7L9ALRq"+BJ2|2%$- l4_ ;ϱs~x/>@48~D \PZCl y5}xv7~Fؐ{ K3uň \vF[O/{a4=7ElHsf44O-_dONxׄ>D-~ǡmFD1+tafceأ#uMBm k?tvg%8+Ϯߺ`zC:2*\cm:o+j;y5 vtȼZ .RbW+ ?VjɝCi:2Zi5Tf)G→q5?_6xTyjըNos'$?~;Ͱzm bgzh,w[ԒZ1\fx\= nolZy1ߋg`Mae,ݯW:\amq\LFu-h >`(~?&pp2-8-g0dj_ ӿ$UdMK8䛚^LP|_|?gQ7p1oeKNedqAz=>=~|3զ iL`1Oq9Uħ"[M՟!.:qS8WI>rˌ~!p~_>\# LGþ;Y`c"+)@|2kC摚v؝}AiCtEMğ=(bp0CNK#Zis4ZF3m}O{UWݪXFZ[:rHWBasQW7;;SHK0b5;$i [,a]pV\.;m%hVb~LcBK@J,ȁ"͈CS 6ح ƋWwqsrͨ1]3Yư-jQaD!:t{;B-bcYɫ*faE裙:qL>_V@:P+vgW(瞅 zh>pnik+r;E !}x|$Nt !U]CTKPmcv+x/rrWAB#l10툔m^+ HWHD"0U۶mۆ!OkyL׎2bb'BjOfbr? &}Q׷Mz}cY^\v!޽Z0\ pW`{`GN.2f s@{Jw@mٺf#<r#.?mM#nG+E9iC:!I@ z%EƖ|^P܆1 Gk=ye?n9!hGlBcT!ڐ [3yD +'5b 6'F,7Q}{>@go'O,旸qݽf`q ʭ3]$g[z_10謶͙>5K%iZ6ޭHӹG#Uh):B±ICpmͪ*giِwvl8UoB|?W">h;aūv^X-WrRޔqIr v !b5gXleܗvG?6@݊&7h2~#rlnƍ $Nx#ֵbid8,jqv.ErM.έb_B>]1 bVRG˜4s2GňHdxʂBRۈ~%~n}GU~'qEAQQOަG^bJoI/4[/o։Ѳ@SѴ-qb*^lACZ Jm&^6}j%G0w%! ķ '.o֋1쭈/C|1q,~$S1=Q|m+%:po|1e󖋸ٛ6]N7WNl/v|,B!̥at1JGHdDv?u3 þ?l-10t.6Zu u3q?~o8_~/l|h|_h B˘,C|XPhDZ!Fe,YɭHDˊi,mUW2+%&69[) Jð>DiI@+3[O#,U>>zwwoʁۂaUZtoX,:ͬwԫ5U aw̧U( ܷΔCh){lv!u["v͆ 0~,KE2NS @ }gQ*icvN0AQH!{4|ۗ$mC轻{wD4n_ ^c(IxE9 lČg^>.xٳGOJHD^,]c`,S/I,X zE\D_Ļ}Aٕex01{^ϊ.xcB=xO;ƭ]skk]Y'a'w. ;FN# ;FMp:(B/ҥGG}G`QI0Im'p8yl8,ϘBucg;X2`=q.Ԃ&'[ %: VO/S~Ymb)( *I"2Iψc 4ӬҌ&X3o$ h`5U Vr*i ʹOQVBseKDR/Sɔj,5Xʴ>MJ^$_ra!9eRr2!^a'>HRf:%?KK#AQb&[9- vrA T3Ҳ󦍵{LP*0Xnk7mC[D $r!/7RbW$"рGUVRYjw{[(NǬr| fNq :w!:t~&y^zc/ZGlO|,X{a~{~箵k\MNW 4a:g3W$?bH B*& f/3A ΣKQ;hBb3).V娂L5KuF,^SHKLjˤʠ)z:F-SH[_hiRm-YYْa RTVfFmAbV[hC2_ۇ/}"K(,ʥ[\1sH#>&,+ +Y 1pVjQ]&Ikvʕ5mnzDؙ :T5{Bⰹ-u i!PϏ/\/k%mnkZ~EbZҔ8GB4eyݓUv;낼Uz"`8/˛\`s=q Hb~ ǎXY8|ZZכʜ6U-Y&ܽbAE?0I -k pт?/x}pr`PU`JuU@/`LN)e {X" YL^(xEAYʲ{k0p,;z 2~Ap." GE#rU{ɰmгPmiRk͌A?p= J>;xӴ_nQˈF 0yڗ4?NO}b?Ł7Th4Vu?ğ/vJOٴ ƿIUox<8r#qnQ!װ q-`OAPpXhYU6NLڒM0z=m@y:O}-zE/8s%U,աA1"mP  e r7Rj|R.$( bɹQ|]Bu_JAFp&yAA[8+!ZR3cS7a4m﹢ԻmW >O oL6mI-cEVDN\XzJi΄h\jPsZS'5VYEۯ^rW̺\ajfiя1zݳ׾w&C ptxBPK_C7?IEƉCr}Jn7]OK*A-/6{P̳ZuvF7˦SoWĩs-B|eK($Fq^܁}bc庤Oz] оnJiRB D^CFSq92YbYsg'ZR}-99xn"MBgU9NzENEQYiUc䣂|hB ^C]\,B ug͙]T]\J Fht?xp?FAyޠ'"-$B2y6:gM,O25TeӅʇ6t Z6ҹR2_] ޷[u׷uP*gq MNx 5BCZNz?2gߢ]IdOZ9{ o[ݱyN%:AD\^,ڄ+#{-eFF|Y: Ǩ-wuGT\0 HH7B~~jD s 5`ݧʴƠ] 'WZj-}4rf׽{X]h ZrfD51s&mI8zϟ% GI[㸯'):Ac Zq;Y>p4HKU*rs=qLؽ28JH_Ԋ3yRnT Y:[1 "܋ć@,'w{LZ?6TYE ?lb0~qqJHiJeuwͬAZlY: ꑱC1\ItJ ?WT6n|,V}vx kG'*\ E_^!/0}:\6&Mxhs˄49_IV>QPۏ'-"hc1O~) ;&\o4$l(w;|>0Es.mցN8ZL< APM֛%g* tI} pۉCHfuxcq) u/Thw/ \8| j_џ,WE{~SP}<_6R&h[uy~Q4:lʖ}]Ȩ56dlz_aY6wj r)].Dz@Ϲ94,,}Jtt:0P@qhT\6撖MCQq ><ĵ5/\֌^O.. ,~nzekwWAK{^~J$!Vem3SG ͛aUJaćz5[o2itɠv !5ľq)>8OhNKIJ b` qj;cHB/ѧK! DSY~¬<,io@11t=P,E2տN.ؖ:ȹ~  ͭEJue:4E9e{sxXV)da~^֢.܇{hQ ?НR%ħ1Ƹs2G1j[ӟHeݷb^`yP,A8$L<&~!c{1i@Ab"sT-0g 9#f6o"1کhfDGԡe7۹f@>l,S[Z!561Zě6)˜!՗XaBd@<(xyww0M}l r+ %@HRew))/W$U0eY[\E.Oĥ`|-=GNA3bIO}USF nU| ^Zf3]zϩ߮w]-2r]E'bzh ΘJ/"Y]yCF7O,UfA,~ڐ s} C?lWgؑX67)AVN+Fihq{CY C(.&v8M~xF _.1ׁV֍LtLԊjD7VB] j4B퐰 @¸\c~xngž&')`:qs%_ 5#vPY}H)S0 -HbȜͤv+dCˎ m֍!.7 כBrRfg 9T n6 >yPj (>E=F!b`.6ޛKP)nI3ӹ9:(H R;Z$V!/߮RcСV;^^L]-Vk-ߝt:zdJ;65ku2p MB4̑GȈ9_E"\ }NU]9DWM%K px CrwU8i/XJ#p[~ Zdt<ېmv->Q'a2ыi)g~nW|_6qم&2KnSbг-۾}ە-MKYVJ6~{wK|wg{ci3bJ~=l`bܯp~nGeIgAl{7s=Σbڒ+_B蘈nv#" 98=~5>݋+nC52~\]Y$k-TGw|[Kfn&QdMmΦI짥ܫԤp$2ꔍNFj>e]Ӎґh%po2,C 2Sw7t=졯cF6P90-C3઩X[V~kLQ,BXpƩR^vr? K`nS Ay?ƚ/Lme*Of˴k+S|TF\LmSB=Rb>R swCxlI I:۔1FvKYO[q ߴSx׳cw {B 6O(E-Y`Q| / yc-4p)@*xNm@"< P7pI!T`e;bB[ϓuUkbTq5O(['^3 ¦ qwۖԘ8,Fu&iIJHfq!bvKw:4ܸR`2>p)>>">#>|2'/<)>}F>a `L46s?2%o q :1=Wn?|r:v)#ExvhNK6 Om5}!1gxŇrL}h|N|h3} u^^$1#pi"dba n͠:A`<6NXHMcN)=>`Vl̯@)%QIՒYg8X瀠$B73RIz@I JW@d  6K$lEN¤4O m:ɠ2)=QC.o)b4;HB)aVV AۨU;PQ'H; i>lzPxC33ŘDMB$Jb?([6Qf>(d~vO NaK84!`ooaOtRj@1D2Cv$n$p(ُʢb=2| aQyTRxv1Ro2LߌzRϥWp+ET.Ƀ̏]^O%r3_TI&XJ,^aAR& R`+qc&|7D}ęBą.7KNP@k|'D@A0Vd %%#R0qUGhHиAuDw8"4UE S7#vPAi9e6S"P4@vhST& Y )"D|h|B,̤#!/QGP>'HGlIaSDS"p<hD-%|J%kB(l +rpd'cFdN3QCX#EܝJKP@Z}']xk 1/E&05qI}r $A)%JmS098,Xj L^A|wkTcokI{6IC^8陸gD4DG.ԅƤr?cRto2DQIH(HY*v[{n+ѨARUO!COht j(:)kEcKݠ臕f 0~8|@tZz?@$}JYEZ?̶@b+7g~0Ô@eaacU5 x ,6D"h.p;ْCj 1h}&.F\xxDNn쭝ԁR hL1 4!6DʯOʨSO~ SuIX_}O<%0IIOsݙJ+P!%?Z@9\t GODOZxQIt> ʠ s,!![+>NMTeЕ9Q|R3M54xe/VdM>P{WāƠ>.>t8%>0<~Ch2G|J|I|Խkanu|C)@VJm [jNdgmUpT0K4+>g$9/Sl{lSăB9p>t0: Kĉ32Qv!i@n%~Qz;LT$$8Ы2IяņD %vF+v`RCXa3udЖ 0܏"NV8ٟ t8ׯdt d80Vl[S4h ~qg`@!5hRH>fAš ixA]G3>Q'P hN5f@at嘁"^?E(w&p#mǯFcH\3dCj-)[_&}ܖl!M#3ht'JW{͠r`RlSaSe~$=B beKB$dZM;k/WC"k/#+,]d'w9sm rmq>?+rr`~~`{~ B509F9[GTK +YW{vGma\|)>|~/_/ӥjği g+0WXP]G]Mk5c^9Zh]4GFCaq܌hƚPX6_T=i_WR=iѴz_~/5ݺNC?$~b jɾ=hԣ*!L<ˮp0`}{UJ kp Z[8|aGq%8aIjYʕŰ7$IWՇ 61< b΢;ax]ѯ9\Ai7ʳ2?"ֺI|P8sܸzyУ\X"ћ+C ګA@mO;zib&88r|z֞OTqd)!эlZи{wsG.gGF=7GPMZ>yQ(t;kKN{ b=?9TGC[\ya~`͎2F^C,*;qdi kD%6XYPP 7VT5-\}Yu+}[h V_  s摷$)vMf#}12,gs_oL.Lu;0^ m|ƙoB.a n[N 5,<ҷS/Ceҳ~dsJ)+,H8m?*p&:r8ڳb7 _PU)֕<д%K^wP@R6 N#3Bp>rNz+\hYNZRS)7GO]kIJ% e\ͫp;w بUgJIqժSBq<֪Ou*yUo[R^DЋj4^!tȉ)Rw=Q^'9'm0NJ{'52|7Y/E{z*?Jͨ|EOSHjS6j j jnT@͏WMRpY`^5u&RGy;sh// Z~qjh׿GI0nmӪAkTzs*(墦M95̓A$m%tE]17J.cٷ4C/R7G~*>O\NTWO2/ҼnIB$G}*Kp_^Q+V\OOYY 7y>OSf$fAꠖgk`^B[QCy&iWW鈼R]0!M@)+NN~ O [E݊>9{`VC7$Ƀwִ|pkLJ"so֎+WMo[Y9[:tFt̆u챿Don蹶H3Zxa}kGOq[Χ#/k$0.ʐݦȖ6ƅAc ިmBV_άgZ_[i\&{Ma+cs;ÊBcYvtu߸mo<r:͢p[?bXrcmI@yvIihfȔCws,tE=T?o?@TibZ`Zev-s51o 9&S97v U@y?_Dʏ]+.8k-s+.e^oYq]-{">ې㚿8%/ںRt98zݽG-{ kfΞ_>_5o|g[U7M.3zC4P9++>p>t%T݄*ysmͿ{=m+gWWH߳5zgz.l =3n_VӲpnO n@_< yA d V  xݚwEOWW;Q$H CPCD  &P@e] (ALp%;0DX@ zݧǻNUuu N9$?g̷1Ւ3'++Sf)C)Ӑ󤥪*骪9V1+J8h~2:k{v J9cezG2%C}Hd4Ew3[u)J)oh]Mʹ$Kb(ğ#^ʺkI eHU>Nz{H*e#5G:5اχ<ԸLI%z*}tM)TqV42~)IygUſ'^ׂR^7B)WJDsR SP[anx_znx{J],5ϥOSs!Q'AU@Z&9-T)댕GTc$p-d m)}x*MTM~ [+i2pur+%tO;MðZtH/m ~fF 6^]< ma L;0+I:y1<h\r7V ^GiaͼKq[MqiRI+ܵ]YM}Ty(? ~z1K*zH%3[&ml3S&80ofH{2i 0fm%ᥰ?X{hrK)ulΔȏ) *-ûX_1{Ni˚~!n%sMT ef?wNHYdJ&5$ˢe۹잕do=ku?ۤz "@ԥOK;Y٭n9fg҉}},]ݑfTit^~IQFF*6SVJ1_EXs$'=:/[jՐڔ,=|y{L&51yb'8s Hw|Hԉ{ږKn=]iAa9.6#2}]nZ[!YD(qwd3], K`~IR\ dZa,r. 愚NL7p'i)f( }=4q`gQ}6M&Y7TSN-3H?wÎ:# ܬr7Eܓ0{u}~wgjHcwԽ_*{}(7+&=`VE Vq!{R[7Yln]3)ۆnr߼m[ٻyl<6 oa8Yn"hG=gm'aļ+0vwo>5ZVOwfǎ|Nif[poכ=j7K!uAA-8,>vNH!FqdA;s6>(Ǯ&I@Ut!=Wc>hmN4jio6ӷWTyvm%UYfFnlJذoT¾E?khN&hÉ؂}wF5TY#xBȞNk`?`"aN'i<ͳZAKȬmD3苝ȩhv#iHu6Vާqj6{; .E)ξj8_S ViY Kd2r6:q'33AuXf>dQ^%}طҼD錾>ԄtcnT_賻$.4[S<­!Y&S$b>KC.wMk>?`呾QtxGYg]2ثhfVpv>X.iY>unm}`3!m t ӔwB^=3۫i6 x7AfI<_xV#5޼L)kmh]:IMPnՃћ]eSά);tfw:5u }ɻ/bo_v}Z!5mht%z.V\cgɹ:YןSaog`ǽW3Im5ޞN3-XKJZݛ!]5 ;t9h{wK]#mC%^&9!Ϲrn-s/S%6k‡d8iGyT9)-C7Ku:m\tpKbx4 o{BV/iAF`0 ꌆ`"E򌇠 \ӔmAAf Fd x^< p?Y$h_ChzmGÓʞ1ZP"+Tc>,rv`HՁ3-%f݂mW62I\Vꌽ0ZRHwZnIwG2=W0O0ggI0{߆ b{cWݯ+I;t]mƩ/(lr-[L{ѫa0= oJN P{֤dmp0_;ruAfv!f1Üϝjvym|w,\HKQ9Q_fWO᫶<)lF4/o}{N6bs/>t_΋}2w_~ F9ʢu |wTE9L{UTI g٣ f0~FאR^Q>T DgL/ּeYنTX qTS)ƨ/R%>tUp~,.!$Yv^.كҿ1ʬ1&=9p& RGm6?iacα gYXwF* ttz,wiT>:zvt3.:Ϗo'gD,Me3Q^uK+(/"6N$K+Vluu c> ocU=r8V= ?DtqАE^k&Yd!%ɏy\ǚcfX?X܍ &;y}?A osG_iN8Xqrbhrbcjb46VƏyٜr3KPJ TIg=חS6B&M gs1-d`9mKa` 6!'~BNlB(j'+YMME!7$6>Ʌ5_+|e%iݰg:7φuKq@_ddDcRxNa1`Qg q@^CQ<1=6;gwQ^)#+8 e6^c&bmQ }l<U+o&k>6c-biw<8w5}}lL҇|l?n@ ljݻxO~'6rQKd4P'FuP?}r[K(mi~Qʔ}"u >-ZOhop>7o9;1,Rޏy, ғlI$(k&/AED#S,Y(XGE#C" oa `FpuX:#/&ȋ<ym/.KGrr9`0wf@>g>?\iC>|jklbn7 ."͞Y`?e`'ruu&XOٹBff$=nr&'U[x${\u};a'޿BۚxJ0X5VlAi$+뀤(bkfƽzF<*v/9h2yzǚ5u볲f;RiT- b曥ү9\PҎGJs^wy. |cX[m-l/ owa.~?)7vqhxG g>?}eW_xg0x xSO~ xAh F ^/ xCk~ ,__i\A\`2lD3-ȱb >df܄Ə-(~ ?_1Omx;ށwq+V / 6qi.Xy~/E.\_2<ű-|my[nޖfiYZntY/w嗻]E5_*|5"p^MJWٿgF)fxܿ$pSdȨЫ!»B"EކwcBw+s]ඐ+E!»B #U =''x/އ_*~ > \gUwaWG8܅{BD>>oH}ُ0x I< ~dHy8/uCD/ė"CDxSɋBod?Ï~o{?[3q E||-p rvE7å=g>O<\#e3ߞ?p_ÿkX[xy5Ї9404[gbšYW?D?JsED +7`1 s ?7D"V_pm ?? /ٞ{?eϿF.|GTaγ^yڳ]n|ٓ|?9{8_?u?;s ,;_ƩXW ` +,pCe`bFL-̱Cx3n¿aނGcq;܂Omx;ށ8? [qIiY,~>N/"ރ_{/U~? >owa.~?"wO,Z:Xx? \, wxA_,g?xb|\h] ݋=9)ۧcWolE[K > ϛ mxyo}y:ǿw^aJ ]?Ϲ2휿xkե_; s2f᧱'^CWn{[jA-hqO *,|Z /< gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gz{gzO !\#wA'濮IOXXϙ0Ͽ _Kan \dיq;z.9̛ p^iUxu<ϼk~ºvf ?q,، y0o^Nυ8"8|´GυÞ-nϷ?s}^$ԚyN9?Bէ&!r3[d:ZxUF#FAs?s?_5 Wq+W۾{>r;ȡǑ<;u^ν ?)=H\;,b;m+=xt)ۧK~JN mWo, |;|k. }?o?)4sݶnX{Ksl.$_9Co81KBo;>%V+I`+]JW~+ҕ_|82\G+Õ_:ҕ_ʯtW+]JW~+ҕ_ʯtW+]JW~+ҕ_>\V+]JW~epW !8!8Mo a;4« \<#sn[#{vι9W;eys^朗9eys^朗9eys^UrpëG82\pL=y`q5γy8YXdށ o`2hd`$xLGK_|ܫ;{s-syjSϖ e |@#.V~{ҁR 'N3-%\'޲pU[g[f́oh;UY.8- ?J{֚f~_kךf~_kךf~_kךf~_kt6kZ3̯5kڠtNWtNWtNWtNWtNWtNWtNWtNWtNWtNWtNWtNWtuEPdj2l2lj}x갽g+ oX2;ί3Kr\ 5$7?wzgwzgwzgeWW%/UYq&1)f*}s7E*3oe~"wy37Wx~+x?>_ů7p;'~ć[m>C>?.S $>>3~<>cxOI< ~ xAk Eb| ^/E 辠Cx3nG?Ï~Mт{?[qLNLYw<~"/~[Kx~Q7 A鋁W>7ywmk]/ * 4pek4y/ |__/&p%^_g3yn_)2~i=^_ ކwcп.p[uཡ/2xKdR62ދW~|_ov&>ovUwaWG8 />>oR>CxQ<$xb?2~)pq bRcR`7 od?Ï~o{?[3q?_/=|f}Ͼgo7}>f}Ͼgo7}>f}Ͼg~з-o} ?[A~з-o} ?[A~з;.;V03̱W/rd]M`L1 *ְ lb D ^ &b9wwwwwwwwww_.Nj4xWUF`92 anu|kX6mޭݪ߭jݭjݭjݭ֧/G_ V03̱߉.Nj߉#+`XVWul`[N`:uԩSN:uԩSN:6sn36sn36sn36sn36sn3_ _M/W> |_Ug#ghdh<9'rXeѸ=Ɗ ??]/x7~ 5r;gYxīj]n|1  x#?exm5~+7`UZOx3 ލOVb QlF]1 )"ރ_{,U~? >owa.~?ߘߘ..p>Xֿ6 ^/v1y.R+~o -߶wk/rW:_ف+ /;pMОx'xSCbWgpx0V:d <_xS}W`l5[W~ ų͛ gxmy:ǿw}^WG]]-}_;\>fx؋n]U4sl>ϿI]-<τϲ= 0Nv= #_O^/<{6E_<~)ƉE['t= 9+⳻tm7]Mvӵtm"|SdAc'3 I?iA = p?+^m"EE0n7rWG|c 9šʃKZ{^W_x0$ÃaKB/*a _}\3 {\Za x󄉊'd'L>´yZ0'VȨ "9mn 1WձEa;(lzp8n?EȠ7ۮ*Aυ~0h4 >Շ S1?E.Ux+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ܿͅ,0N\WO^\= KB/8s!.M-|m6:̹ _8ϙ939f2f2pdɸ4>{qL^939f2f22\xxLx1kb&;000a&#{uA<[p39g&LL΅ƙ 3ޫ0;0A5wts&p.d``98+wts͙9wtsfonA\8{saBfo.^\aL9L]~tԅmS7g 䵁p5^ ;1;1;1;1;1;33Wȡ  ?~OJ? |;ka{>V^\)ۧK}<&*p]<['^77Qo,=Vo@y[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tEW[tuHyļO+šKr\W//?+-_xWd[:kW۾;WKcDƿXO=W:ÇuX:6-lc'p>ws>ws>ws>ws>ws>ws>ws>ws>ws>ws>ws>ws>ws>wYr#ӳ &b9Ua/> \mV03̱_~ο焁#s &b9߈ߤ^Eu:wEFu:wq2AN`P'z ~ 2XƠphxoT''XֱMla:\}sy>yyyypETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETdHETAETAETAETAETAETAETAETAETAE/=U`? h}iOwǬ/=}UD<~h&94sxOx,7E^7Ox3 ލ\+x%^W5x-^w{Ox= os ,_YVl ? Llofn [xo ï~_ovO&>|T} \:} |~mpG!~xb|3\hm߾^WqoO=۷_~}x[ <߾bo۷ ۷X+~ } |[۾tUxu*~6!~x no߆7o?xL-} lo?&gC-X+~?ibN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'ڝXkwbN݉;v'T 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4HA* RiJT 4 4 4 4 4 4 4 4 4 ! IeH*CRʐTr#HF*7RʍTnr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F&72ɍLndr#F#sɐLd2$! dH&C2ɐL2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.Crː\2$! eH.CrRȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB2! )dH!C RȐB|(C! 5/ |__/&p%^_g3yn_)2ᭃ^"x" WW,"W,^U:~7A|ek+^~?#So>?K+p>?]+OE>CxQ<$xb?2y8/u_q |1^/E:ƿqXM!Uƿqxśl?Gcq܂Omx;ށwq+Vq&NQ+./RdKx~dUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;Q*wTUrG;QwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;jQwԸ5qG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹusG;Q:wԹ3Gg:gJOp_WgLB}#tG>B}#tG>B}#tG>B}#tG>B}#tG>B}#tG>B}#tG>B}#tG>B}#tG>B}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(G>JQ}t(Gppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhrG;&w4MhqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;Zw-hqG;ZwmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;6wmhsG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtpG;:wtcƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1cƌy3i̘1t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>Nq}t8>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t'>A O}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>IIO}t$'>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}Stݧ>E)O}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>MiO}t4ݧ>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}3t g>C}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,g>KY}t,gفE. sϩ>sϩ>sϩ>sϩ>sO!EO!ˑ `)fc[_ֱMla;ꏪꏪꏪꏪꏪꏪꏪꏪꏪꏪꏩꏩꏩꏩꏩꏩꏩꏩꏩꏩ 4p9^ ,G 4 anu|kX6mP};TߡwCP};TߡwCP};TߡwST};UߩNwST};UߩNwST}Tߥ.wK]R}Tߥ.wK]R}Tߥ.wK=Q}{TߣG=Q}{TߣG=Q}{Tߣ3.g> aE^WFQ{e^WFQ{e^WFQ{e^WFQ{e^WFQ{e^O}S}Tߧ>O}S}Tߧ>O}S}T߯~_W}U߯~_W}U߯~_PT?~@PT?~@PT?~PTU?A~PTU?A~PTT?!~HCRT?!~HCRT?!~HgUVgUVgUVgUVgUVgUVgUVgUVgUVgUVgU?a~XêVU?a~XêVU?a~XêQGT?Տ~D#QGT?Տ~D#QGT?Տ~TUGU?QՏ~TUGU?QՏ~TUT?1Տ~LcST?1Տ~LcST?1Տ~LWU?qՏ~\WU?qՏ~\WU? O~BP'T? O~BP'T? O~BP'U?IO~RT'U?IO~RT'U?IO~JSRT?)O~JSRT?)O~JSRT?iO~ZӪVU?iO~ZӪVU?iO~ZӪQgT?Ϩ~F3QgT?Ϩ~F3QgT?Ϫ~VUgU?Y<>aދǞM$MN)$@S!IJ7ZYTX{ey I3jg 4ARg΅p:+ $L_}yF=g/ӗe2}L_/ӗe2@/ @/ @/ @/ @/ +r=m2Lgِgg*wݲCv.9 E|Y"_^D/ыE"z^D/ыE"z^D/ыEbz1^L/Ӌbz1^L/Ӌbz1^L/KRz)^J/KRz)^J/KRz)^F/e2z^F/e2z^F/o+pߑYn3ln!;eW6hmڠAk Z6jmڨQkFZ6jmڤIk&MZ6imڬYkfZ6kmڬEk-Z[hmڢEkVZ[jmڪUkֻ;&+ ?V~ yf'|}%w)䨯/Ke|Ue%^IW+Jz%^IW+Jz%^IWҫU*z^EWѫU*z^EWѫU*z^MWӫjz5^MWӫjz5^MWӫz ^Ck5z ^Ck5z ^CkZz-^KkZz-^KkZz-}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'}'^Gu:z^Gu:z^Gzz=^Ozz=^Ozz=^Oo7 z@o7 z@o7 z#Ho7Fz#Ho7Fz#Ho7қM&zDo7ћM&zDo7ћM&zLo7ӛfz3Lo7ӛfz3Lo7ӛz Bo[-z Bo[-z Bo[Vz+Jo[Vz+Jo[Vz+Fom6zFom6zFovz;Novz;Novz;NߝݯYnw,,[.[vN%G}|A(_/W,;zAw;zAw;zIw;Nz'Iw;Nz'Iw;.zEwѻ].zEwѻ].zEwӻnz7Mwӻnz7Mwӻnz7C{=zC{=zC{^z/K{^z/K{^z/K}>zG}>zG}>z?O~z?O~z?O}>@}>@}~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>HA }>HA }>H#####################ccccccccccccccccccccc!}>DчC!}>DчC!}>DӇa0}>LӇa0}>LӇa0888888888888888888888}>BG#}>BG#}>BGQ(}>JGQ(}>JGQ(}>Jc1}>Fc1}>Fc1r,d˲!e*wݲCv.9 E|Y"_e9Nq8}>Nq8}>N/g&+ )rِggAO' }>AO'I$}>IO'I$}>IO'I$}>IOѧS)}>EOѧS)}>EOѧS)}>MOӧi4}>MOӧi4}>MOӧ3 }>Cg3 }>Cg3 }>CgY,}>KgY,}>KgY}>Gs9}>Gs9}>Gy<}>Oy<}>Oy<}L>myfVr-;d Z'Nh:uBIZ'Nj:uRISZNi:uJ)SZNk:uZiZh:uF3Zgh:uVYZgj:uN9sZi:uO?-l\q?l\qEZ.j]ԺuQEKZ.i]ҺuI%KZ.k]ֺuYeZh]ѺuE+ZWh]պuUUZWj]պuM5kZ״i]Ӻu]uZ׵k]׺u] Z7nhкuCMZ7njԺuSM[ZniҺuK-[Znkֺu[mZhѺuG;ZwhպuW]ZwjպuO={ZiӺu_}Zk׺u_Zh=z@CZj=zPCGZi=zH#GZk=zXcZzC 7zC 7zD'ZOh=zᏕ~8ˬg%w)|SM7zSM7*?E+++~w{/ȁBME,,,3[I\^R3gʿ /ɯJ\E_W_oŵBuy+oUܖw=q vk(ɾEk_,!7d?mO89|%;Wc+ϔ,?3S|q<ߥx}dooK׬%?#,x/x/x/x/x/x/x/x/x/x/x/x/x/x/x/x/z/z/z/z/z/z/z/z/z/z/z/z/z/z/z/y/y/y/y/y/y/y/y/y/y/y/y/y/y/y/yy=[2?e9{;RVm]gr3dk\Wq9{<Ȭ^~/{e/7+/%_X+neQ[+?JͿ/}*/=SVOxW|/U.՚ՅrY7}OOl.|26.w_5enJ{ :˾#X|S~O~_{, yEX2WQnU97:Y/dl~97V駮O]7fOQ.-{d{d+>_!9(K?G19$q9"G|k|MM[OI9%匜sr>o^f7Z+v]}cWǮ>vO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}W'>qO\}=${ eH,CbːX2$! eH,CbːX2$! .zOYYO3Y~@~L?-?,?g[YՊoʲV=Y~CY.B,>BQ Y^)b7 fygʻw/)r*>9gم\){3x<!Y+W_ϳ_KOgsy 忓^Y~J_e)A6濷MYV&.Kr(]"?+Uu9"G|A(KxExM7o/ 9)W䴜rNߖ'򟜊<-ȳ?(H˿)&.g]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"uHE.Rw]"b? BCk->\]_O,YF' ^={BmAd (BZAT x.q&:/3]Y D%AIJzRS fiK/ƫ,*[1s_^^ x_Yg/ }Vr^+ BM$YUK./e~̇W<{gu5hϚw>yTԆW̲O}8kȃ(gQ7ҧ1M fAМhW-]4Vj[{5x}뼢G16jx-8?ڙ[{_ 7yNxHG"Zh4GyG8Nw>v֯fYn8b^o&o{Goe6q| *+Nv3nzC;wdz|ywixOaOy/׽py {>}`=>m81@ <l/:!p>la?C:\8#܏0ߑhQkg1jȬ?cK8y~ =ގM9ާ&D;w3s${0YdSx4xS|NtN5ϩfBޗiitO~L5,g靛,ng59|b\Ǫw,Xx5 Ξ3N8qǗ9>͵Os\i:|+_]ox37xCEt%^,Yl)h^崮J:V9[~5$_C7v$ڒhH+ $}C9$ORău漎Z~ fy2alIQ6Emܔ;yB&jpKi']n:龻3aN(/3ˠ? ^gϰgx6;ߌ[V6^lMj37,Y4lg|o7;j'viW^pwѽ.\v;mG؏=vc9gܽ|wO^؏64e?z!2Cj0|rGi<Ϗ: o<6fs[?A(, B">#ũ kx+H B]A=ű }A(!A"'%.Z 8U׃P>y~pryA#P|bz(TPB]УEꉤ xKq3= +ߓ Pv@zXvP1})+p)gqKQrt*Ň)]sz?w9Wm_u9\@9Мhy 3L2Ά5t_f>C?!gP3Gi#(G5JhV;Z3y [BcqK8S1-{?7'yNq3pd='˙v Ϧ\ 3Ɨ򦩟Ft0w3cwo+Ypg˟lȟ~/bz'艛& ͵sy8w|c> |~W5/}!̅z{7v/@K x&xXb}۱%<\Bh>Ki[RXʃ8,SL2,98,c}Y{+Xf%+iY*pWK37]kg-;'2p۳ ldѬ6ҵѽ0MM>SqM54xi8^ffl;U6<ћw&ޙpeѽvNw:Vo;Ͼ7b>V;}퓻~f3<( ̃z:azϱC9tDQGaߎqqO9$'yqRI)?y~Zi=~gxvl{γs}z'wgq_ebWU{/w_w^:-?xO5}4߀y݀My7oo}hKq??ǂp0U ¡!A8.#A%A8뻣ŀ |O G޽r u;ĥ 7>?O}uF>x/+bWwj!- \00 QPNA} ^ …r^y!&GK Hz<>\8r Oϟt_$Hu"g' <$>u@)Oi~>,].*] f1 Ϥg{zǫKxV%ݗTX!16xzFۻ7vvyaͻ#;3-B˛jr>wDw3aߥ={ '{p%߷7|w_ڋЏ~ >קjۇ54h(g 0dփx6H`,w ;x6;1PCP;9Tpڱ yp{yޏF9Q5wh-gѸq=F1;X{=VXskKXX}l>Ǵ}'o'obͱspc樟Cw؍3CC )Fbp!7| /^,Xx~Ocyw1Gwq3>Ϲ3Wyp7ϳyl\`'W8mg_Ӷ/!. }-.,o t!k_"E/#%/$I0X K/ Y̗ż[ oR[jv)~ׇѷLrVګW]˕ޮrε9V洚y'/D8~$ITv k>5$I8$Xzuש_~=[z^`l0 f{lNt&KV.Y]ȋ7pRIBo]LW)b)b)osmmI&{ VT"ՙO©zg9 gګ,eU2,3>d_ߎvlvw;y#Gwe#; 룮t#i13|1{tf{lq=Nq=·|8;;aNػ>n $ 'aRsJ)5;6|J)5Ԝ)yDODOi4i;uln?3?{Yq?˳fq9ؿ/qyi]_TQEٟ7󛾿qyx8]wų+;;|ų+wqWytGWytο|^3k4\ hqq0üu?x'?a ㆹ{=|nݰ[nߔ{SM7y4[fq[mhEq۾n۟t6NG?ϩ WPY4]ť W.DC?G|9_;WL<ʗ,A< .b??0ȏ#\p_F ^EBt]zTͣjQ1q^?QM~">UY4Iڊ/⬈"Ί8+"0Ox? h^!+&ߊC1\Lbz?C3{ Ź~%̣y0v+q=UvIK^rKVz_ ~)(Gi=J ^S>]ve`]֬ʚUY*x59zn-\Z³rW}Kͩ j  Vq3nOC\qC3nh F9>E=ʻeQfݏ2('Qfe6 ؍lg#<x6ơ1lgc6ƣ1 MۄMio6oSϚԾ4gO3`3O3D3{ڌf44 ihWsyoNs9qo[8oἅh|iɗkiN-ͩY44һVzһޭංۊ'x|*ޯƯ5~kMKZkݿ--/ۙA;3hvoǷvr۩oc{y|󫽾յ Xo@_p6h}Fv͛hFs4tQv#iHKGZ:_'p$.pDs'Ag;3]⬋7Ms~oo68tűj6̥nfMnrM.;{Þz]=ߕwq{?ٿx4/ վy[noÇ>>0g}ͯg^?wߝgӿ?_]0cs!uCa(oƃa޵pg#4͑F`0ўw` >kGpg>;?9^f>ޜ&4'2\&<^}3虤d>Lg )<s|?7qj'<_]pK|I4ϧ{wcO|t̠q.3`͐;Cf˙8}Y̒?K, g6Naus+51rbp{]uG[8[qͥg.w?1O||x/_ٙe/i;'{HE4/2Eє`ghH;^.b-e]Zb~KfRxQM"$ҹޯc oZk]Zk/}D:Z~z3[Oz od>'Ӗ&dz7z/6;c#@=N%&~lMTWL54}ӼirpK7t0ۉ }2xAo͸ou=Lz[oc+?m٦6muLgҒ{,}cY8fٻζӾ]vϷa;ao[gߺ֬w.vw#oy>~wg˖mqexA}Ȼw9s(ߎ1܎{NurC P`wxWOoMY4@"!$!ZjW:]۰Z,9А Y] g {+zWz{o\ˊ^>rcA,y.oQ~%/Q^c:( E ^Dy?c7ٽWQZsmo6|}>;엷~ 6!^Dy667776㛝[tQ^gl-ʷ6 6m7Y(om|F?{f݉:ß}st!|ɜ3E\ BB|𾾿߶m5)%)wy|K'Lf<"Jɷτ7 ?S5U&-/NZVA;*OuT|]jU]N>>?B !c<Q89ʎ_>?& 9:7F޳/pp1Uj :*0R9."L3U ۓLe+lf҂OԹ>-l @* ]˩H%R9ϤSy]PUhAS (vD.^B^s~NÉFF_2KBy)! |lK(W:w"%SaѐD3@@*^ @UAON+*.ýX3kͭwhP4]bFyueJU Ch/8"|9h?1K@n`)BZ5^?u SIO1m* !SZ|:uS^z\i?ֹ=dl,S,g]g#x6]Zs ,5b<9c ;;.|+&)Dbgi铐)mJ Z`se3cЫ('`[Sζ! H e%hP3Z`SuW=OsCc4~M9A WOs8 QΠʐg!y½N8"Rg3\Xm=;f/C;$? ;=8+bZm?1=}u5^e 8a,\%\-3ul_";9t<3Y +0rYgēzGa"ԢjNR"#pf3 *΂.2F쨗d_.6gT;fB']𲚗A?b4p^dqNi='6`Rc 1cdz'ϊEJFz"'}KĐ>eogMCDHw>g`XosĻ"nfo~C'YC׶3#jvRuvh/,]՝T4+C8X,.>Ԧ*G)42aM3:R D)N)6_/8.n:ʘK#{I[kg wy䯤ȇe'"׺n#HB;GqDž*N(jʻ()i& 熣)P7,EZn$#/wѭyY$्Eo{*jCO9p Uq닋ZXWX Udⶪz[EvH]_s /U"{lc u'.T)WMo"vө7_atU䜋 ڎq0),h0n1ud_ٟ@$!Pr9A$G1Xr9@N$')Tr9A$g9\r9\@.$%Rr\A$W5Zr@n$7-VrA$w=^r<@$#Qy$'S|A$_7[@~$?/WA$C]QB)eSA}*AGҙt:+Nsҹt:/O ҅t(].NKҥt,].OW+ҕʴFCј&4uќt*]Nנkҵhv&%t:Kף t4݈nL79݂nI[mt;=Kw]tO'n:Ni ݑD{GT3t]4+ݍN{ҽt/ݏO҃z(=NGңz,=OO'ғz*=NϠgҳz.=O/ҋz)^NWҫz-^Oo7қz+Nwһz/O҇(}wOΏq}>Egsy}D_Wku}Eߦw{}~D?Ogs~Eow{D_owEfs1dlfb3Yجl66;bsyؼl>6?[-b Eآl18[-ɖbKeزl9<[Vb+ YbYrVUتl5:[b bku(.[6`l#1ۄm6ccl %ۊmͶa۲l,ہuql].bKإ2v9]ɮbWkص:v=nb7[ح6v;bw{ؽ>v?{=bGأ18{=ɞbOgس9<{^b/Wث5:{bowػ=>}>bOا39}ɾb_oط;=~b?_د7?;b)=N8s.%W<#H>g|N>|A_/|I_/× |E_x#󄧼3W|Mo䝼_Guz|}ߐ&|S7[-V|k ߖoǷc'I|2;x/x?w|agA w|Oߛ@~?H~sss3͏qcqx~?OSit~?sy|~_/Ker~_ůkuz~o[mv~{}~?8Gcq?şgsy_vpG+Uo;]?'S_7[?/W#\ "` !|!!Fb1M.sb1O/pqt :ObXL,.KbXN,/V+ʢ&BX$"u\bXM.kDCtb1J+ ĆbHl,6͜b\l![6b[s3Il/ƊD'Ƌ [Ld#v;^1E~1U,Ġb1M*v=Ğb/G+ā q8D*#đ(q8F+Njʼn$q8E*N3ę,q8G+ ą΋K"gX\".JqZ\#׉ FqY"nNq[#AxX<"IxZ<#ω ExX"^ΎN3o>xG+ć#D|*>/ė+F|+ߋď'E*~?ğ_/O|3}+ggg3Π?////////////////ЏOԯ;~77G:ΐ3ooooooooowqxO'G'ןTga?wO/oHWzH*RH_Jd Gȑr&9R.g9r.9G+'r!\D.*%r)\F.+r%PF2Le]f2\E*W5r-ِ#;e)+\Gr-7Mr39Fn.[ʭrNn/d' [Nd#w;^9E~9U,r9M*w=r/G+ y*')|F>+%|E*_7-|G+ߓ#D~*?/+F~+'E*?/rUKZ}UߩGY~UO;p7Ѐ<@A0",,,,,,,,,,,,,,,,Ԃ08H4YEJjZzFfV:fA 66 Fc̓--mm탱AW0.L`rS? P0L v v v         NN N NN N N N  .. . .. . . .  nn n nn n n n         ^^ ^ ^^}=?׽(ې3k@jWH7nA.4[KC]Du Duݨc'.uQ M0m3M0Kt3ӅF4JQrk\%sM?yn(~u[I0y|){w{lZh(;M3礻5'cèMjO+:"gujqH+u"E]=FO5Pvg;L5F1ҺlT*]HFkFҳ5R]#uFA 3$$ġO敦k*8,B(2vה)]mZE6=2nBeQ۴gҔ.`Oa`]S'wqtl$MMS{ZNwo%lh2eEohz}ޮ- Lg!7eHp:YC2ՙ3?{Rz_ =݃=&%ImXPO`hZYUFId!l;'t#J@Ы5Qײe|lIA4F'ct.Fbt*ѹK~%k#R|M'M,_K^ zŵD./ΙvO7Ԓ qHrxml`Xk'cQc'c[c'ceLj2j2j2;7j2j26j2֛7j2;8;8;8.4ƱV˭ Q`Xy 0c0x`X6;%hD."]ĺHtꢮL. 94hr6Ɣ%:>zMfW4+M&zEB3+4,t"ED.tBc#5F1j NCjPcLbz1S^T/f3ՋL9s4պ&hkXc#P*qRFJ4RT>oS}ަMy6mT>oS}ަMSj }ئzצMa6՛8Շm?OzlgHPa{W3`` I!u ^zmn&`' 4"@5@?ku|;R@uoKЯ@j`n%6a>0f=,% cÙ昷s7Gs;Ov\v @Kth}::X,A=(:`XV?7gaXyA;M;9`mC^Vu ZFP׺ua]z]k]XR9u=\܎RA9H!c)F"J1sOT:>uCFW0Ž`Es"eC= |37_|d3_{ "(_:)^W":*|"{,Ί ŞâˢaOFifAEثQGػn5 ޾E`&)`0 ``B /B /B /Bk,?#?#?|#7|#7|c7|c7Ƹc?c?O7|O@?}Y) :)g :)S/tп:W:[:aM 2Og~S^h_}h`| k`| S47~vv`\ہ_lgz'hdya htLh&4U&4S'u]'u]'4Z'u~ R:7njx_l&:Dz,+4KveNs+yJp$8w3Ias%\Ip$8GIFN ' lq/xׄҐ41&M/[`=M`k'X'mc-&u~]H 8+IaҀ ws;yNp.' a?&$؏ " l6m]`W&}Iݗ41oM[aL | vQ;ML**[ f``' tLCx^[rJ_k7 솧BΧvޢ _L|1 ^ښ6~:Ѓ~:J:Udѣ`z{v&vޥR޾!O:!*Gm;*!/ƮKJh2qiUTRJpkHpKHp;Hꐦ: $z=> eu$m$uH]ݺjm? ո-$%$$yƶ47e˰fJ}~zFNcxcCj15f'QAk Hnl$76۳<.1=4n9xB U 0Tou8l-yf9`lv86qKJ%+ZxpV8ޫ~Yi Ѐ8VSG,eۃԂ!`a 1:81:81:81O'F#Ĉb?1O'F'Q}Cc[k>SChhhh$6TbC%6T, ؐI uQ PZnT!ZaY: [D[ E \ԖFޢ-6lO sa пտW>zqZiYS !1GCb#bC(>ffh,Cm71Db9&sL$_i.:i![/i4OC̆9NĞ]aа5bO Vu!WiI5,*.C+a8mpi;-l+^an9Z\gvyn *¦uxe803g8P3xx_:uv4;$]~~ק_(1`KԔuSڨ5.5DgLi3M(ZSc@ƀJaOıV''1RcBƄJ bBJ˴.P%9{)Dq͌-ϤmqI6uOlﴰtL KajZY*zu$q[n5 o3kd2eҷF Fs6zh,mm j9l!Dl"DP纂'g'QmsɁO%&--c:Skm9EAM՜~m;h94b0% i*jUS ^-S?(3|1X^b=JB ۸lb*Kx#x`#x`#E0"z%"yWXoD+D*D&[g_kϰDk{Z7YhM1zՂu"P?C` ZVSXG Bx8-+]*(Ϩ>AtTԅQ9[2cS93^GV1 <-}A Y!Yz':FJ7j`ݷ"m\guMŀA!["[ _=%"el1vd`2iKo$N|D5I !niZbCƪ6>r140V YkT!0*Y5kwSP֐˜RKOKT|F3P`GAY4[B%0RVҭ!IeWsLLE$.UJmZEqLRt24edؔ)SS&71M njpS75F?GF?GF?XhdbF&Xh{?68<&gPT-;sZZ_tZp_vY%.?kfim;qZ[:`'N^3GlMenEֶw}35dHVKm&m _(i;u0Ra0 Mn,l/| 6۰mZ+6~`YiFTarڈ ! .*s NCMXi&h9]2+v*~*z* 6lo@~٪axlӹ\+8_XY!9[`Vn+ ρ_~2U9r~p1W#?dX]/XN\K { caw W  T0*mUdg q٬Ϩ`CW+Uݪ@; {*,7-]53c}lFgl=t2 C@dSUAT*X5Ui!SB_o  PRY, Ic6 4AUZ Jsl^Aa)&@BRJ`!T *.`'ŪWgNNHNvKvհxoBgU-6^Bd'rt@iR[[LXQCBE to챕~Hf e -^F*#=61o::CS'w&tt^Gd23 j"a N2?ӥ{*aN"{Q'23ľixKkZX,d*\*-Jli*TDJ[inCf:e6"ij)mش45MfkyalEæ:UsouDbcӪijV Z>y SmrCxs'-b|G6 6Ӄ0y=/I667M+45PΉc=us''f2)[_54q!SKn)t fƛS,{|SfEi\o4\csC#侵jg6Bnd߈V̊ ;M0olb{a㉪7z3#`]t&ol;LnJpij8+4:M- +L/MS*i&k+P.V) =il~oya.vol״ag3s~}632lf83I}63g3#g3t~krܙb?kvu}TmQ%Lݹ:_|Кog fZ4F3̦;XL?/9QKδrgbv1O1bw|:31ʍ΍:IUZ%7@n4ĦLLizNl͍ vnc#'[<6^76 O?Mn4ɹq<΍\Fs#׹un:7r΍\Fs#׹ir sɍ̍ˍˍˍNˍˍʍʍ͍=7"g73 Ѷyfp3kFF s#wHXn.7Z67B^\csc'5Җ0F_IDѮJUFM25eݔ)sS\#YHVa$0U*dF}Z*\F #WUa0rU*\F #WUa0rU*\F #WUa0rU*\F #WUa0rU*\F #WUa0rUZw&[3<ֲ3ߒh`ظzy2W+F⊬'#s\ad02W+F #sZQ2rrN]m`]6VN>81lTa橁x8Y:C@aϦ!ʣލL .YS\R,python3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-bold-italic.woff2000066400000000000000000005714341451074743100255630ustar00rootroot00000000000000wOF2  f`$f  @C6$< @ go 9[axt04=<& 4u"ʋbeMKKjuXA;i۶SW@DX9e1D j~)}>02V:oBH|6& U%E(&!aQ≜$KD2Jςl&-R[\R˨<*r+-TEG̋P ـ"xkɚ:ޏE(w8iRPR#I *}m::67pA;B];.RKZk{vϣzRo 0Pp{ MWi5ziqܘ?<$ɡ#0?uýkG( ,`\4EiXÐ8^^k:6"& &(::)M|\;fvFz ѬQ:9 YϢy`~D rBjAm2q%pʚKσ [|ʬD)VQ"F.,_OQVAȩR&.o\~0+IvhR+a. ^cP[&nefeMidl6 ;:5F |8^rU~v1 )Fd2Z(FJ7K3waI.RJ#0ۨc~ E)+RH8S üR̠ ylMbEatUA(v)5-,mYC@@5(E.tq7*/O⇳xv\CE F#7ʠrVl;&mpQ*uzǘ \8G>UѱE#E5kQk;5:+w]kd+1rQgJ0/Jx^殡MPfK' )t2PPC.+qOIٔ X!5E_e2$h=-Z|[ԺB  hTpzp5āXDi:S8.$:l0V %E>W> KyT 5HʘwSx͓6p]4XK`4t1UK_L/6T.1L4~# H8twv W+YLd_n2w?Ikh=4jDxor v`jF]jW_ߩ rzǼԾţ\?,s:ORA%|搢"AJn|p%Svՠ7L^.m@׬Q^nŊzl6ڑZ))Y[jDs-oaG:ojknʣZSo U*,1>'v@mȶS^Z蒏V*n)|V|U8ՁRwecdp3iTgE$' /Q}O0X"P^"sM\j*a ~jT_lůJjt.b㽨LzcX ++"F:{gKi'm"ZJHQJTԼ[ jv )C4ײG|zԛȼ-4%>l-=nլVv@΂P _uRWȧ=*-]WI~RQ6OBWʃO\qKϳu:T:p'e&~Ji('b;gќ(s4kU/`Mɼd5|ECpYtӮɣcz;| 07_y-qK#ǼF$&TWoVu),GΠ6|6qH j[W*Yxd~&.xX@:Z Ϋ4"svQFWC^kͤX6-wz,/:8&ʮ:ﮚ&xPy6mm7X_x! j”›<\|Gp?>} UP~ISz҇. @U UMOÇ~O?>b TPWK6GAA" Ua(Bd2 ĄpcyY\%܅>*1*!W?9::ڟYC?=gJoXyu A^_;g'PO'WlVAgd|JH" )o`7.tn7Vpdvu(:p[0sռL&$+R|1x<3d:(,E0t-5^P`^3=eWpuGi-'̾sk+s?h0E|;v*3^*WyGt~. ^Nl\2C2a>;Y;O?yi ^ ?S~m8UR>g:?)J(CaJ_4!n=&f|hw&P0䯓wՙjQg $U)_NoO)[?X^zW.M,/o9'vJ>E~7V+S[?R'H!??A)OKrx\޷­`>rң/x@<GScXDg? WeV YdOqp+^e=N/,, ~ 7(uFkSTmp:a4F/7A +6@.U&"XJV.+F!^m/)o̹ o?SOE3KVa Țm$P@C9W$hK)"R.QabXb>~Ʒ_wp I XC?N.k X(!؟NL>[2Ry^[)?]q<=/*^+X;iv7Ɇ]BɏY IPs|J*!r"֣[TR+zZOLD']ʂ?qQ7*߸Pϡh`1?/ $і+" N )i&](P;\NdcB$$([2_aW}خsV_Q/Kth [-Q$$cLk=Ldޞ}q !X*$4ĩ6B0+mIIq1-*&6hR<.T%g&:īUyfP23qV=d7qWn _cbcnl~{kB$ZAQ.D{8c#Q~T AVπx wμyZbL**,0.CD95jv{_BKB8AP( uG>udu>7_(o4Z2Z2?EQtEQ(.j`]h CY4!9BEZU1.r%tHDH+Rz^yBOx"x+O!Bp,\8qݧKe/;Ο˲_okXV *%TE?UJ-M=P AL 9 /4(Az_+쬈[dXCc({FF45-? vME4EQ4q~m3EQ^sg%abaMgW1\b$MɊVLa¶ TuhKGi)oL4FN57UEWw l(71l !>F8~QT.i%VXNܒɴ=_j9\rcד3Z F^]ߙ1Dclrz)IaiOe Lk3)at t!tBjoI őnIu6Ʋ`^D0؈0,@B}#~ŨWZ 3D&ĻJ阇tkmeUVA#ä0]<=s8Zg.~Ηyys8Wsxxs97K=:b+&,p#z$0r -UkAH:$,"aˆAA0h0_Lz/ Lv>- ogŔ %8`_# 'vQPҸts(i'IۅM 8힚^ (+0bEQESEQEQEQFh4FQwLLOVf`I,Q zvRO=a?)*"gKZ83&wVcH!0SW':9dR}_PHS.}rR -  K3jc+ p a~N{ 0]k8v  kID\7Uw}DRb``圳6cQ͵\?J0!,xkK򮦙hͿnvcFE~ lkY^r w|nQq5{BLS 6-#i =.M}k ܣhh/|!k !IWm,%]* Pv, ,pسv [k`abk[ĵgO ~\KL2b" IBQPMCajeHt {x06/qjSJ)d<}NTB BխD<ѐ iN!;,€j?~x%J!o̷pV2C :2JZbR4m2Ss߹^ټÎ6J#m~#ż`e/y}FԴ>Mv颽ъ\fa +\n( s^1bXC'szcg+̻aBZ@њh)WvB8x&%A*Vh%DHʗIz5_ ~wzcj4. NxAh l녍1YE3Ӹے>?Xb3>[t=~fj<ϻ끩Y^& >+?@,L޲MHk~L#43Eۧn;ϐFqdk]=kLpM_g>g=+ۥ 0 !!%uu'<\f {xrgXJ_&}2ϽmxxXo?^y]/L&/MͼC  Kb"$> >#>گ3YhH۝ ݊=#rAG?{PTae}"@XQͪ} iFtXqW=Y%*" Oz[rE&a_]SeEQmQ=}Gn58En%GZf&vmQN {< yRDx!aA؜(Ĝ5VC$Jt# YPf6R.=v~ H ڀ"WZ!"E9^v4_2c12'>2޳ J=sߜAd&8˶ØPf/cm%-y+K  t>m:ꟴ1kW:ȉ5WvaY˖ϒV٪Ki9:h }mAI%zB[W1.vW{ HJ)JIJ) dZS*t;YO׳OM&mb=VM{{|!v;͡']_]I]S ÒCB^꩸h£PyގSn$10\+ Y' $9o}PpyIvĊPWW6&PUU kRI(O+RujVwy`YKƲOtS<~W3YOw" YrT')* _ \ӟӵ1jAQ*(Gh7=ՊUJKU?+;n(̇[g,obLZ=&||c I\6!plzTi2ҏ W4Q \^:D}3WY&|mhؼq~bhôlqxxS{!UǗE9$ 5FhQ>'j *ltgOiuXieHt&|.)T(fs0f[3LՖ:bЪ+xX,y_i(\G!f%UY.*7y>4aZzz4! H:|pؗ*\`1&aB0k[!]b2)~0\B l̥AdsoPZ-UAjǟ3_kA@D0s}SY1xXN@"-C-jqW (`idm}NQ1v|@ރf}EXcOo沺O3'] d#XW*.9x;Gz"0cL0!0tg?[60UCWyt+霽"XiAEv˗|܅D':_ʿs/?SOxdHt˂~ZB+K8"hq ~1OxnCV/=!KyU0GWYKX!: 0oz>h _YW}׏dz~(?N yߟ0#s}Cq"+{T5&@`-יy^o{yG<4=>||DD};O_p.о䏗0g>T!ܶfw.J` NIJi^C#VVmfØ*M>?#.82.fuY&aKW=[5+W#@ZTUJ&v8|XQ1Zn>{_R'@=lAG(Ф<~@yT}r@kdRv&GYdZ~f|2"n Lճz((/>LyFv܏}z#'O^͓ɏbGxWUfX.vΔJPTM柂c gёzvpq36@F8Wh`4-V@U 5-q!`߄J%QR `ݿϼm=뽥}@}Cȩfny{οŞh)0{[AVN$ 2HY0[Rtޮ/I,0,εttw5Ɲ\]'2)YDO1ei''<R~ǝ 8K7;_)/zN*x_iJm8)y yT)c愤x\LC ^bD3Xj?-t[D[["g~MqTLDfrFh[ll!jXD%%d6%y֓^LO{ 4`tfw~U7~cmg#ʅL X+d|KC$b56]CP7u' q;K5TIGe!Wr$/b?!L~{V6\_n I R2ּz"neMrym?|+?:7s103b^HfX.`²jYfcOgy<2_*?ݟ~ɳoR+i-nV&l+dPmS 8Vy&xmచ7Q( q1fp" >@A8!::?X`PaĉH^%ޱw5{?C̅;FrF:/{#o/Yf ʸbphxAdey_-ѬTM7,ve4Y6=haYQ5="o? fX(ɊIaBM _p @$Si bs-,)B0$E3,'HjaZeQ/Sضe8ArD2=Lj&{-ʑ !!,̬'OFQM0 HL&/ʇ)";Y"$ fNB3FE.%^5WHynkqт*=y׭=MfG!j5sPKӒsNܼ|Ĝq,Jzc;Yr>4eԒ$ʱCL(B*@&q!iَHh*UjV7E,d Fg@LZ:e"A1 i=uzAlnt_dsGP ]=fgy֢Qi[߽ H"(H_p;̆n2[)b'#wYCFQ50-qf8AzuֈCuyôlOѧ!Q' H~ &0< N&jj0e3.DPN%YQ50yiĮ# e|JTg `cPS!$G{eZ 18r[&!k=$mRӧ/ OQ8Tŗ(O,夵Js"*BXSіMnti)gF\]bܧnmⲗ[XydTE;/Yb X Glٳm`U1)vhԶhpk ں uTΔ-щ@T59 &nyi 1eXU RnsOy a]< o41F~ޕ{dedg&XJ֙ DhYB:c:k}[b & " W/{CrGwBo~ΐYW>񈺧7E#K@Xͅ0ȭ |Nl\yZy0v3])))ꁕIIsw`)ed&섒 GB G-k2[-{qN)LE}?}74 `}63; g]-X0)j 30x:'^z9ƕt.zRДX/5~vɨvO,uV~~\w9ZUTM7L aBR h „2.2k nm9Lxq`:nҊH@d||"c1 )a֟BmyAQ6R D1 )a%R.29PEb B0b8AR4r@EtaBMf\H'&j$R\L'*QU `dN3ćE_@Ű5OV)B!`̅OxL8qLI'-!닅4LJ1A7Ojҕz4nE0nUȍ%k`|'#?L> 9A[p&-&RbtxjΨtHk5WǻG'/\2YݗH ZO],(Ʒ%R 70dE¼+ṟWijZs,'۴%TԒ]Ҽy ԋmtWH){2c'$ sdbq{<{n,p0jY>ǡqWrf\iZ%ʣA PD(Y:$Im𦆛V0] 브cY,u2jNdl=Ju{mg능ȥ\{yDBXrn>[(>`P>#4MT% e,tXetHt"[.'wg i/iziH*80YPA)װ;DZ;R0 ګpb~JɘFt}b{kr#ҸA4NgBq13 ]~LәGLQ2zTq\_f\( 5 RI" mS p(Rf,Yػ_L(10>>ȳs^44oM l];WU;ŀ]n;)ߝ=`0+9+[>ޣb )a9^n}$.N e R7Saq hbx009FM4]?(N0fxĩ7\}ާ$ ,ϗ$ xX] S59>D1S$rt!md$at㌳1 s t'|ܬYڶm۶0JilM6bma]>wfigߜ.W{tF'TNͰQU zf냺1ЭuRVCv2M@ 2y.x7\^<@ @ wO40Db B0b8AR4rR2XwgPA[VN^I\ml/JX<԰fyu ~yd8FV牍6{c ^k7l.l9ţ\S4WuTo0H$IE?uaBv\k4D$%5}91L|| 0( ZM2鞟%x<th8Xfg&J;ܾee7~0&a e0w.tW耾JF30tB 'HfX(ɊiG(ιs۠=uCN*]C;%v:?u(ؔD|]R᭡E)he!<!*0ĔXI(Qj5HjqԅN=41hi֤`mm*:ji:8]C:Ʌ^'?0@ 0$)Lw?" d8h1 %*GfҬi9aXJElpR_ݲ@D ) dJΌ5AaBXc /Gh׉.sa洜Yˆ &̾aX "xّ@(|ztw ZdB㾴0EjՖ1/U.$|l&CՊO}׮}])EyNvk/E5~)EpD0">d@qvo zlTs|Z+qDٖǚ3:<ւ(_ƊM:3XըQnmٝ)іQcOCCHF"""##UƼ;W 2 ֨:Ěu#CϠd1gK|B<#&FGXO&AG-K h$ [AmJ /f2G:7Ȇ*& ):i8vR,0Ǩs?n}^kTmTF!/ߢob 42O#/ !20/bdOW-c>r fV4g`ɠ wKFQv፛77 ]͑VlHzb|կY5=L^hNw ~;ba;ݶ':Xzf[>ّm]Ѷwqay"J~x~MZ$X9vogpMO5y8C(Iŭ+!1(A'()HTh Z:m[Zz̎9nXyY]yqX(]3 A3~w\frUkӻȀOŖE׭qV/IF 1IJ8TiDdl9,]4ܯ[yJ 0" Qd$<vg3|";8h?/zžgګ:w5auTe4)HdXKZu צ;vُwu.lݘz ?n5'H% 71F˥qBHL28 V@ZӴ $?S$n yziB;JwӃT:r,FGLYpe']=I3`Rtcm'h$J||~GZxI{c$XinFl.#S=OyKvKF & Y%4~^IrUBT*U(gGG؅pr "%00-dja*P lBgX2G- F\Py ^OGz^>Q)#P6JNƪjԼhYBq{R5vS уY6B?7VIL t߀*8$~Z tq[ \݄za]1SZM[;H7'8))ܝ @%S8 I耸pם 3zKF, òʅ`"Hᖯ.Fb 43 Qײ~pdz IUSRPT* SwE*n!\أ +شaa|PLĺfpɻμۭMhm>'wȔ#/ (3? O~")\-v~՜y9)i^󔀰pfPXawO{Ý`+W< \O*hT~̓A$JwPl$nwQ(>,PӀkőS?֧qXiGh.DiJ$9*%=%TDQaJ[ӊ+ozT*9LY屖ND|0!,멪`7_== )a9^n}!Zm[7㾹LBpApQu ?/SMw͘ 9376gvc;H}h #eCPdbI8#.9X'$p= ˈeH/앆d,Wgbc1s{;حħhSXTynq{js/^H+@#"S 9 wOVx$i8fț_:ǹ޸JƞoUW(f|o^Y KM2w8g!5WD+< $8H$IFl0w$Mw[ܑ!sxZ/+jc5ʈ +R\f:K r $}F5:NerQ Έt19-T.O$c%pG ( T)RމRJ)** }!Dg!ab/J<$I!I0$I$IT(Hp@x+A~Cf'鬭x!@HQ*έȯ{֪^\Ɔ<6R{QEFTƌuV OuF!Xfn!{hȟ}YS1Jo_  `$2zL3bwe_[9?¯e({_F7\J #\aO>\qKk35W~G5SJ*bZr (i^ u9@kB*(_]?p|*~O{/~gK ?*tʰ%FK<ڸc%|(!xy~oW}DR럟?7%/%[?VwYΔWKgCJK{:bau>wIk0yy{'w?Ѧ=12/Qٍ6xԅϗXgZA&s=to16oa`>EͰ4PհTw| un?}}se*py `H qkmv{wm߇9{JX(:tFuJU!a"1Ȭ70?68?!4|{&O;s( Qg[J =jo`ou rxʧ#Y-1 'rXI [/Cʿ}Srol?eMj^iYW50n%DCSa=SvjCSO8u tqJ9C 1#stX\ [f ffn%y J9ʹ\1j볽r7A8yKQZiOe?+Q}B0m6h컗Jbvxmq=|/(V]X%~4@FP 'ӷzd" jZ+28:3i1[=SH0 )ݕfXnzVIVF] YnzuރGOynūީ(J]6jU^cȄJx?"o9tq 0a9NͰ/f_fU ӲE8<{ͻvss`~9py|hW .JZ!Y „r Jja2q~2VZTN>nj ju`yFcշj??_+!e#Gx=]̴E #($E3, $+.3oxp (Ɋiٗ۷|h.7!1}Yc_X[L('PX0$).I@;ډuk/]a:h\`ء{SևFW@&'xWn37A&пg9_W_4F nn yv2gp؏Kݗ̆rxU.w߯S„>b _H0$S:*`vb.=}{8dF8\QIuPtMjӎbvB"nH괭-z CaX}vrPoa9+}SP}.T5Z:!ݕɲ5 BᲖWH{D>C9)R3s|T RvXds&R%iGVRk/**`'&R!bs<@K[GW]g7˪t+\*g8AF(ɊiNC`ThvB3Eok!&D]K a%D;EDdZQN{پtg }zAܿenuNtaǓnl; 4 }I9ߥT_^8oiKo~_GQnM_(A?)ςo֥\.^/sŏt~믑>'uHoTQgyRwLbf*_(\ͷFL+*r *bNMj#!*•1A%YQ5ݐirؐÇ?ӊe"wdPh~SiE+ɶzsgCvhpt9#r%cx=yd3wi2j9.dhF[(;Ȝe_*!G he10 fcQ!)[|T9j)ףVI,ؚ^%N#w&!PaD)f3.3׸9uEl'w=H|sDefw3 A%2 !TekTTJU)<4r,կJI4w&9]HrWn7ڤkU7zf#H蝎4CL`v2W2" "z 4jGPu r5H51Zm*9xBx\.RmVO)Khs&GVRk:T@n,)FvJ0*P`\H% @EtôB~\et?FP 'HfX(ɊIK&Դx\diX/?9aJ2plvWax^h Y09h֭P]QsΨ)i9Ci3`AYi@ ec'HfXD3jaZ8Nj{ū7>|=ƁyTppy|hƕC2BRkڢK@F.ih_UIьh2[6@*jZ6B:DPDIVTM7LfMٌ0F4K2"+SE 5&B0kkNA)%9AR4r %YQ50-{~xxx1* -xAtSr8b %I IIːyvk;k9vlv3<6a7 lb @&OVιbO^ E0ǿn3zȯT߻FtXYK7 x J3 &-m]weMpbVwͺ lqKXfRcARx^ A$g7. v:QU$*Ы 5qeG'c&f5ƜA2plvWaQ9h֭Zx/^POT_? 3h !8e{D+{}jǹ=<Sd|rw/ „p'HfXD3e;Njxū7>|=ف%9kpy| ".ܐ[LP.=?B02){ &jj0e3.KY@ xAdEtd֔!ceB3 ʫS(բPTDxl@k\8Ar>o'.U BPEն NͰ/ܪfxpq$E3, "QU Ӳ_8c'^zç-l ߑ8kS[[+?5,rHLPM`RQ,)̃:k>#ɱ&䒏')DHUj?ס/ڭ[&wYcPOZj)C)+RmCB'#WՍ؝};_FE$E2Y^QQEW `#ʺ]Vڪ{dܚ^K ciQ]<i}D?h1́?vXu%1M֔shfn-TZR+QU5uMB}oGj7qCN.ïnPUib:^|:pfQ֋ J0(JB$(rXjY ھrG]QFӤDNnus+I0l-жT`nFrAyMRRJ(<5MGHiZ4UBT+V-Da*.zC'fE!$BB2atxRvJp Ћ12d(T1Ylhi-(8]n "(+ ISͰDrI ;?DIVTMFt 5{PB^1@MZQ+&94jfq\%2_Q,6 P^q!\T5 ;~(B0M&s9/<Kg&U]\ȾqGqr d1ƾf##+NRT~DU #($E3, $+.0-x}9AR4r %YQ50-{@R4YH>xAtSrr_*;8<vIk!7Mpu/cX/ "4` cr9]CwM3cDaA"U%;.d f26Ήq*B\y93v9䚧ppXP}h}zssSv/OCo|y\fvo(z~^9%.-E j^=w]Y12,Xx *hJmpw( #!.Přa]纁s˦JIڰn]lM;ukOƟb"@"X'% $MU]'#߆ձ, QshDSڸ^ACcg  'HfXDIVltGNTS4S+n Q`!Ļ1]۞1ÆJ;6#;|}0l7NͰQUD*n Li%+S-y6I4r J2!67.%(URe1 wQcR+HbtO:`S8.D&,g (Ɋiَ"Ox݇O;{|)9:f9\_ ' J1Mg B0b8AR4r JrZaZ.+CI4a9^"\2;@b dXm.nn{uECwlX+ƀ#z#dc%wvqtl0=R/'Sfӏ?3W?pjۚpal `$2zL3b}'vf?үBy>14zH̰FDE MX]uʓZ8.d1Jhilۺ *cY=N0g-QX/ =y'|V4?2[cBR0 Lv\ϧ]o!CǭhXmZH6E3,ˊyeǣ9%㻃M)ffH=xm>L7i I>3?)>y r7s & ²jh Kُy HPișծ\ە#8̓S;q=`p JjaZv@`$hX IhxAde%Bmn%(URLM]f ɯ/kq_bMAR4DIVTM7Lv\ 7UYa?fs{,'rCs{+E7rPϘ'W@::o%y]v>ޝP/,Io$AЇ#h[A)9PCXkiNh`\rWv,.IeAx"pvjD$~%"Bj_385~X:HtaYnON?O%5:$vu7Rܴ^[a Jz}+^ |o)k ssoƝj(C"͝1t}<:6msoַ7~?MPgpD!\(I2J3 &k֊@ aJr zPu|N,"tu]`n[砣쯽)PRR{I,YoUܚ#+ltΥ w,XFꉶ&ƖDCfԗ $??لxn/TB!{| NiֆtljXm@텔S4rE"²jz  fX(ɊiN;ވw|_1:h2[0b8AR6a9^%YZ4S3kO$ٶm%UTRUUUUU YDUlIQH@ *]*},B*+E*jK@Fp܈ KRV7ȅςd9d;o E: APi@B̰л(+HVN "Z$GZ4D&K̋ 4W>a>͇ \C+.B#t:&DH?.q:hsw*nw"xW=!_W]u MͽR{-Ͱ\,^Gx4 fX(ɊiNxn-vC=c1!+\IhxAd%khOR5J*EUHM]<"Jc@Lh5gAM )a9AU ӲC$E3,HdEtôlCq;./'ɕ*F[h`ph`4-VU 5-q!f „r(Ɋ,-MLPUr@cccc҅lNcgAbx@3΅\P釩 3E#iq^k<&_}Gy\ꅇrl-B6It?&D"H$ɹ n 9X{VGb>!BF$+{`)HPƅT"L(B*Ӳe50K}vN'B(9 Z-:$E3l jORt:N圖eYeYeYeY$In> 0 08o9j$=ܦ*jK :!Aٓ_[Xm۶ @Wb䮚lR*o,H$Iv:}{';%+4ݙJ5i)L %ߚk@fnr*v= fX(ɊiNd_q-4I@:% %IW=YBXU8Ṅ$d$ byXkR@Fh'HN% %xH"!*1c#9qŴ樨n„2.Rt@ e\He>$cm<$I$ɲ,ɲ[XLy\Wdn H+M<̶ap JjaZv.!f+v:XL(LA($eQ@H-!2B*miَ݃laUUUUUUUUPU+q?k nwT0CDR\,)5Fg #hiZ Fs~+KUޗL9*oIpK̃1H"͈_uɣJ5eNtی=ej)irDm ZLg, Èу_rZ4k,[1}{$I$Ic1Ƙ9ΖpoWO1n?WCt Thh{1d7vY$?틾վpW:׾H}D,Rh&ݴkiiQ\gF>jKi*$\\m-8x&~ee'NͰ8!{G@f 9E5af.$I$I$x/vH8J%I$I$IXH' $jkw'Gw*%-lMmZ!dnKlIX^rKTGJ3zet %It2}PlWIu)ϯԅu*p}MiR^x&W*CMך>) J?KH,Ð}>=~ґPz^Lmw\_'da Ϗ&Nfqw@ۧzZzGH=c$HdP}`=q4瑧xb7cy@y$$E%R?U)H]Z 7CAFP}TD楝,$@:)淶qphQRZR`#鮹Ad+3\rD$^6$EyLu| Y0; ӵn¤u ׀aBR ɴl/鐠NC[RU x2J3 &-m]Crs s+j6$E3l jfmc'?dc 5a9*ʜupʸʴw!6. ̀Qѧq?D`H,@FP 'HfXNn Liٌ dQ&DIVTM7Lf9n!*wT ɹ0f" g B@g GsYC)0 fn0`+oi瓩M??$r|J.>BdEtPi"lEkIKCt~d+p}ոݡW p=y7Bn[__Z׆ A1 )a%Һԑg[(i29qqu=# @T}Ebܵ%EY2np ~ݮ"v>#nVb8AR4r<DIVT @„͸Ω0?aB9AlZja2]PN/k@ýj;Ǫ5$@BA:HƛO 2yR~Wo]![(7VB]12F:z_w;JEwtdZvޫ~ $7sS5`ލ-A=8s9s,>眿%P$+^0T%jtB0e1;]8M1 vӮʳ9qF'B,Í ?G۹4 [_K$u[B*|ㅤBpʼ.]kpQ 8jbc]~- te"\L.%-#+'_];piGY`mQ1,./0\o/*$KnWMCUӔ)~Zw~ lݠN6;V~?}ƋtJ4|*EAs``@` ΃P3\C]!ya:ă-{nN[]nU7įX,/VTM7L aBR)m „2.2BBK BPxӸGg4;>uC>m dʩDDDDD{\ܙgm#RiMv\+uYJEl@"ʢ-BeZ؆2 3'I|ߪ9ߐD7'WvxZGu%}ԋh+N%R[mBY>M1砄jyÌ(P/iEZKsw0@e<*d( BP P qHŹq"HfX(Ɋiَ/T<"!Nh/#t3aw?["sP@Wd 565u+?Ʈoj1䒤xe=#7< &*VXihevB)5(BcBj憇3R()ѸЌl> j PVNyvwNMv~l*2y>Z}kh)ekj 0ɚ<չB[RIMPBݼE覡z:gbM;@hpz()1Y9CrlF}SyEo5dsc ?"cJ&ey9ɓL`&]vrTBēVsG4e3vNQ@}ş\ p2e"[Cl>XظWYoX%$`҃E%gj6{Lh6dM!v,)H@2\l`w&j}XhZ"p@`C!X8z^%@Xa# nt8B/z{~F{y 9lg2(A/h|U(;(]rz B;2!+ΌG`=P`K[BIIr.h'ӡYDX6R`-alHǎzw0}؎Rߗ˙P05WA~Ԥhuh^R=k7۳uex-Y;dfٱƜĎ=ƘsH24l?3PD!*Z>4CB pxXS+l;DJN@-&yvz)CMTxwϳ1nKC]m&j?:Qy2(TQ[RlyvK r'7sƃu@qo\E_axafXD;%WQ!P@ez% *jCNm(xU. ju}{1ʚ..^ZǷ~O tn͢ \BiY|MznS$pv`N\1?v&)„2."!A1 )a9^%YqU-ݓ Ӳ2 (Ɋi9*hxAtSri;6./LP.@ Iьh2[6W7w?WQi"m1ΐP]tFlu1s߁  #($Um`4-V~1ߨ0mjk/vi_}H7cCY]4 >HQځp*L Q[OPæ5r(-i+*fR+$7\pݗ= !DslԠ4!:f SLX 4 KJhǠLfਊcRx#r;kƂ'TCoD:wNC938˲QcJ׀d";ކJS xI /RRs'#2r۬r?nc踵jmG9cg:劈N۶kK.Kt=5O7#jq "/'"vJr'm1q_20f17[2Y",%2#FHF@uhþHƨc^^1LQ^Rt2͕#ŋUj `5'*" cMѫ/ԁv{! ۹2;CNL9iF/c/׎.犘ru{_կ Xא▔0+SL7P}|P:9P(v b )TШTà:4xhhhhctNH99bag2 {7@uqht}0}"KvT4ژq"hSEAX?7¦R@O/5}F̡eD~D=d`xTCoD:wN<`D &vĘ"Rs_I(3Fe?@^#}  d%&X謹~{fMB{A7 <{tnoWS6ftcÒnMO>87%q||=\dcnLJT)R&TrYM3C"AR^3Jo5ϻe807 M3ئpڲ:WzzAkq b3l>3n$!2R%|naP] %/huhE3}&-nꗗr9[1H_$D-gf62^Fu< .)u3rV@~IH5d=C)tlߎƻlq.W/|CV:::z46Zs=ۈPW[nR`C`\<3`oKp0'[BO !*sDgO'>GHȕ"+IƏ!:)=֕ & A`\d޵zLV]O  ŧWDP+"SaNxYi\ 8rKIgba+Jg0q_5ڿGÅh&3緬42ԟ?96ʿ7?  8+?kѤp=ױ{ejϯvCŠlXx й`oE(tC|d`(8n2/_6g1pQ 2ʬ.S3^_\ YM5 _ 5@r{PDXc= wp4ֲWSR22 s {ȼB9j1!:Qaju̠3,2{XvσXrG>l20Md}[߾`RMH YdݛzKy2>&I;LbMYs.gA;'\%0H/,ewtɸσ.t1Is: -Pθ;^rX7GDP!%22 cSX(@mLѧIՙyIS.=tkOe!ktƂ59-զeg938VbPݐ[}IͳczleR (1}%򇃪 P_&ED5ꋌJpsWUNvJWjI`8~6SWdt%p+Rdi5yٶh͸1lw/m)O@w~py8{xVD(A| 0/"R27dLlMR$@[ Ls9hVB: *$`l]CG !"tJsToda!' Ȧ>Q{D7'z|1{/P_ ;PHNꔽsi,G/g#iu#i / F8Jiv09.Gi.3:QIdR̡PPA+*FCub… }o 0E*Qޑ,`PAnoS>eTI qA骂j eޠRa)Q\Ujko-.OS)JcU ,UtPLjь=Hv.Ku{Lk>oW` sVuTbEljwXjaП+B;o|ѥ,rƙ_[jɦ7)7`WL|,Yjm\ âQ+_%x)_4/m%` էa߃T| >~ǐXXXzr+-F !Co Bi HS٬ZS3aQM# 1u9Ǒn zi?hC.f.˕,Tѧ3xI*'~!N&5cA5@3V+^.sy;3*67#bdY9o97GH;l;_f—e eJN?,5 0y]L ANq*n )R0iDTF(cEBd-Lr 0,e?@HH@&u!C J 诃~s?Xdy`2z@rlmDLh`e V"gs 5Al}=z|yAq HTT9Mu[sJBRR4l%+I9鱠aINWϒ t ~ TFHΐMhs1<@.B5GY6))ҁθ 7b9iQcmj,i;nv|mD6>ze-AN`"Ik+I/7)JnQ*"G98f|[VзCYLUaQOQ$XMF1 "NV^tUb{J *Đ3ڢt?N(,t\Qy0dY-qܕ|s%$+&=d%>m/!W^?-$p*p"mo31 $M6c1(=܃&+؉0>,HȨ(qxukJ"桡^չ+t8m":$RJ퉘_H?yÄvHB&ʚYX9*$gȦ+\?֬ 7HGo! A"$BUw cd&t>.4i L&1 S>lr)偉 )y9wK\]=Fb^FD}73м~> Iѣak­pk3ӣ!y=:8jc5Y7cgoøS=g]XG9'./JerJѶW #d Hf FbPQ5@PӲ Y „r(Ɋچnr\$R\|Zن@F&dBp%l6x uV-Xk/^cG[C{l%/ԇZk;9ItG><\UFL%0_QQy&Ovy '?`~Ҵ'dҿ/1KYJVȯ}D?fE+9ٳ_W~xBݦVnfQm~`Sϔ:xm[ZUV"70WGJj~A[^ǓQTCH o.4_ VR&$=fdzN[ʔˆ"-2bĒ!PPh e7~&M=Bhp!²jo}YʴS47? ់|#dd.P\/zH>WiχIā<])]9KxVLsg}wAsL%הDL̒hcc*#0<> %GDDDDDDDh1LrSX++-+e4,X& T1YlT ut x`"0:XgYh,뜵Xt4tF9tuS`Th0o1l]l}Уca;ǥw*ȱF{~˕Z2< ͥ{PzGzuKqs&q8n+bʀ e;oi6390t>I!%I IBU 5-q!)fVjV@FNs74Sgd9:ּ!Ϗ2w{Rs ݭvGsgu) ΃oԻϤ9τ2+jheV+&#CIlft,x!$Iy20yЄ@ҲCpAく=t|KZ4P`*tCF!x%s 3iJRFΥ3<>Un A*ľ #; Ib#ĩ#gm{-y# cI`ЀSP~dh XĻ'6圈>qitn>_?Z OW L(B*Ӳ=HDkBӏOrzD*0b8AR4r<DIVTM0U>yw;Õ/`h1q I)iY9LVX;=*~Q2 CƄMͰHdEtôlx_drIZ7J, Nmo;]Ӧ_JR^Q2kr ˕R.u=$Iܨʘ¨^v}Da#+zC/K,sĺOzrSZ:/Ja[h @X196i!L(B*M7DPƅTz92Ee0K1 Uf(CC> 8WBWK]lavo3LгؖmpsA9|!@j,QƸ*QJg}11c8AR4^9Vp%):癍PF$Yy_Q@"L(B*Ӳmnx ;#EeEjQ bLäed>tx12Jc@Lh5gA?I IeEtôl %E3, > f@xeQ+ ߹omr! !Č`SB!B!+@|ȴMmrf~[sW~ݴXuy0o 7c_7׭4n"쬏uwѻ{CE:<<ސ= :U_TVxR݃>МT݆XG\pҎno׻hx9@@^ |rf?w L?lM`-SkYA,*綼=%}ww)A woyQ\9̏sBI ^%9fDT,n By`n"6/%4ayd|I~Sr^M4iOkO ̛Yћl9777 7<vCL\?LPxA(d? 4YYxOZd.UdB8)8?#{ }睆Sޣȯj«'Ï|8{[N[| Ǘ {l@ ]h08k`RȆP$;lYgSߘ؍#fb07|uiiRݗ֑~ k1%Svi)'㿃A!$=|%usoC#M w=7]yӊbDIsQfMѬm~'c.`P Uy jaSX ¨dr9GISX>X0H߃iaȵ%r] S7¨f&e?C:]յBDJKڸă  `$2zL3bODVڇ.n Liٌ 2sN{~KHJIcFaW!%LË 1 &92kF&v:ǮwﮤঀUrtn;ߕg7~fAO9$E3, $+.} ?ƤEaig6%Sz߾3 R?CPNkUNP}$^Ym1)Lt >wnX@r|RW'۠.?qwUO!kxe5iғ)A'`ItT:"=vE&A] 9Wo̽j=t_0Eх\%? "p>'mj)%kb2djwÅM;vowu ,Y߇H.F݃"{]P{M @&kH$9KviA>Uivt\d \)2Ht/5!1. y,g'K7FeC;\roȌr=<Ѱ/C=<~1DId ?,r4*G{΂34಻!V=*5'Fx#I=y6&?צ0"$8t /J!کUQG!d0X=zX, Ec0d I <*Xj{#$rH ˳K~-|;E~߉G,ߡz7{ SHac'&x ^F٪\b@u.Ÿ bR V [D+Cu =Qm숐o8ޒ58h!#{I(LǚnT&7vM6mڬ{r}ˏ)S^#{S"ЇĮ#[Ʋ?Q]?v+gi1 ,;#K`/ LN0FI I֐ZLlI2%,M ,Śb7NKBtau{C\jxE_Dqh3I\5r6Jvl,u` XuStIrm dd[6U¢Tp=nXlb8l+in8YeNm7j0="ۑ^UV+wvu- F4y+-VB+˔Vlϟ{S'%W:] ӥГ1lćK5Oer}ģ߸C }3;Kn{r6W9on8*׾z+DT2#kV 4&q!:9D1ڳRFlI (Ɋ˭j70 !a0ZUUJ$I4V.Gohri. HHH D_yc%{CIqһ ysỾov  a*ںw0xGD3pVN%0ᘂej~l: q\Y㸓38ԟ3 I[1|L(B:c`phxAdVt ôlLhx@$JjaZauVR#14lTz AX~P u<%x>1;c|ex|P$HerRhu`!A1 )1MfH\z~nݍH]ec+~a/?iV׽(26s\q@Ju*k :w 6c!fw*jpXMP&U$+ǚntj'.YnYUmӁi2J-znHxtDKS3Rl̼Wl=f z=p %Ppz_%V.<;~uӣ{1aqޱ3{[kH 4=!]p Yp^ E10Ix-Ѡݎ(#O@->xrpƆ + B<\[9aU`Ρ 1<\ yO~G01q:'0RQx E8EđJ鯓B'Hu4*!l8A,o`f|c0KNk]98Lba֙QS5`}!?ׄrЃĒR0>"y“~ulҳ/ie:( D_LO/SɎj;OMjGՆ ',>lH}"#ɶg$v$+##zB:Nِ՝Zg5 uYrld6)yq++{\wy_%NA=\qg@č.ƛjpI=]zj/"2w^Xmi5+V |5 a C7YAy,QڈB""""""8̲uSK^.I6)q`pj霿򘼗r> ڧjD@ϧE"G%өF2Y :O]:=pxS-!i=HB}1%q=-~ p8/"h:y.eed?X> [Jϱ!uc ,?-ad!i',!Iz7 `=HWPMb C1$PTbI 'rtMQL-rcOIx0*Tg8HYQv "8$dJUE"%5S2]kXjEzGl.n4MCz d pOu6i^9 & " -Vx1HR9Q7;sW+G$;=#.pVF>D腻ZB4p"qkro_JG~DsWߊSE1T\AfU5̭hg%=?[5-CHS8BS [:A;Swu;J./[t%0btZ vS/aɦ4ȏfK2}sXզRLթ=Rы3L8WU8 a[<ka x2ZWю${OnG!dt(Zř10 xDǪsG 0ը#0%kb0YE͚=u0Xc&+j9HzBޒޜ:7=q6ZQhk|L!yZq4M$w(vd]$s$I I$G\!$I$Ѻz[&JGd/.hKN iL\$nnBݻ`i C b qo}0 Q| }VC򮗲a`8L)FaJB7BH؆7333ZѾww!aBpDg&Cdλr &pP2W/Gϐ.(3&kfa;6yщsɀ33YK8ArR+ΐBvMx Fr=j/քjaZʸJi &q!HdEt㩼>߲2RI#6 =ѓEI [z CnQGYA>Bp!6дlBXNͰ$PQ5@PӲ NKH2b|5:!qۏDw_s#jcx ń1QSQd#O LٺP+J{{b>a÷Μ짳=^󽸼oԿ?QgDʾr*'*5 ~f_fv_wy]??u~5QFh=P0^ ],ƱӬt HؼL)[vJqkonHhi^@;.*n_LuO :T,Dz" 'OXacPYJi=֮ԟ𩎾SK}h~dܵk,I (Ɋ[NfWo;D1E3ޭpǵ kJ͋bGHzhG3/QTM7y,ż)aeUӂ%}wދCw=(}9;JӇgPH**^AVyy::\!SZr.RaÙ&K <DWou3^wyI'[kS[kyS4Ry9^SªYvwqגz!#!A@8I"#b ?=^ d`w{`(S_z3[{nDIhxAd%khO NǗIT>@ +8T$E3,HdEtôlIQ@i5,m_-@ΚT`*%F4.hDHYg'VJCłH1<8R%ԃi $NԢgŴJ`b^2(@Գ$UL̅#35w@$-Kb[({6Cvyy;G= Q~෺Rmu՜V[ PRĵ %3`ΰbAϖS{V)u +@f`Z5pF/A1FzJ +2orwg`hެ u (e2tkoY@fb~if;P{D6^=S:{pq5f.e[b끄Fg&,r;[BP6d e+_͒ߑ8{?x<9h" &9zf2N>;$Q@2f:B%]& -S}vm ~--E{_mm^ .~[l!uı`&IM.{Ii-(4KW*o!셓vj80Ai(`G5;}844jʥBiLў8C) 2]%pOkU;+:.`{MW3^Fw^p}=~Ӭڵ iv{LW&G' rFj st LpBjjm!#a:Q@`JG^Y&r_ 5U#=ĥ~%qӏ9}9ͳ8xI&LIcXޔ x:N7vz?avϱ<Cbb|n'}wKăӮ 1.Kͨmaf숞Sq$`(2Q^8цB _hԡ ~18<ID8bȒGA{"ɟBF H  |YHXF);eB(83 4+ ZpCəg‘C~`Э0 G1LP­$=X$qʜE8_aLme\2\!U~9W!!9Q!I4qFq󺎺!qJCwyLNTQؙN]_ F._A\ TRn5HO>ox$9e.499$$̏iEpp_2Gz?Ķ\$Bs3Q_s`p@CMSEw,c{"YD?WH pˎcn.{kR.Usf*j Sȴ?v8qoFv򍳹oߝIs||0GhN(PsrJL"~^H@(h]$#xaKYnZB ^.c*%<*"%+`\ŚG|@? P.R  6kTQ:]{op/+t+-g#%p;}$yk2k{V~.X/_Qof)E˗rѽsqZ>3Tld= Q M(5Rb4m^Q-&r[X:DEtwDZ9!Ɲw 6$4?LbО5#^HY<^0(Yq -$ VM8t(p6潸}^ ^3%3n̼̺{쒈`%޷ b1IûT>iL`""rLMasb)\G8ɧXVh$x=_z':a1GzVx" BJ )8Yc0m26yٰaer5@&㧔} o&[1W Ɋj2P/bTwD'۸|n꟬4r;f/ȭ;MYKuؿ vFFu@hNx`vn%4!^4okQ}^Yl6K&m kR5sZ:0Tۻ3qbӥQ[=RN.\iun!!<[n`YH4jLј!xaRRāMa=}'L8d3wļn ~?Dks6G?HyGl=VV>ܭBLmB;5V\.X5Kbsw[δSⰩlL *{3ԙӎ6am@@ , j󴺣 QEzlpFzrp$겮4u=K*=6C74&K<5ؠS >]GCDl)üYEt859 Ix:̲tGA_W}ZD.EBW{5{ͥj'o73m29VHMؤOd J7Ula6Bs$.A(># w|; WH&YLlSEWv^mZSoZʾGsλƢp$۸S{A<ܣĞ裑zO{&c:_7I VJTس%9GX{jQ[ 4W<3Di[ZlF{{?]9 gv{vywm-vjOWm44ZNXA\YDNh]A|$sX.~hrgb^_Hjb/qO (],iAUdzkVx9w~d^c@bN-`;3f#|D-"zC>e/}Z)|<ڏi9v('9Is$*ε9@'ƗCbZ-x@A{^pfۣzϛ+0X񢆮:ېJ>pDTs$F/Pއmrke i VxaCZ^"^Z|s;БΩIO(Q;{ ]0[tk&]rڅIz|ңvnBX x7intH'Zw^]GW3t N':u05PN;ckw);(%bp0aTF?n"kyL{AVwqϳN+ 4SJߖs_''ݓT)_F\Hخv,x%P|M-:=n.%Lf g@Plh` Gd3VGLyPB+K>Ir0:=ckڐ"P>E 9(Tj\Y[3qcG5m 3[@$,T{z:rOb!"?|{># @/j/RyH9𵶩nj=GJf<'"'#``0% rv")g,~Fg6L%qגe-u"v=H5eJj>_fY;1J vl.šhD =A,ɤMhr>S98HLÍiQFcqmv<̛|SoFC wTUn!NV{tBs66 =L8¯="j<~tN pb3K4p h ׮9](l>+np9]Tԡ+tL<7&=H6a"^#H*YM삽|Y[kO`a246]UCW,L r&n3m#TFAtqJJ,p$='IR-I3L`V7jC]ybq4EPiFkЉty BEEٞ^Bnޛy@.f(ijiGة (}0H^8^婨TەShQ 225!#L湐Η$TRHT,042tе[SB|C&}kи_?jnV6v&{G'gW7wO/oPƅT/ZbU'ieUB@еV8#,Ģ|rD(A1,k@cx@bQXEr$5$Vu&q!$ P.#yd58+_6c, q=GGVY={7'KFP !1X!PD~ dX9By&q$͈ T4t dsQ0T:04#͑̏xD3,Ob.O"*`I ZBQqIiY904ˋClڔRS.r]BPưqĕ@b)K+*0yWVLIRdU]"gp nyŧ|f< -j#&ۄ#EkFn뾧|$Ap$EIVTM7Lv. "c5m',oe۫_Uݴڝn_Uݴ]_m,Jŏ JJQk:HK2BR $+zUSzM-mli^m?y\S#BBCKGWOa9  „DPAe#h(5vJ J@`n S. itlaK89n"j)5Di-E$)b r hJ!eSie݌ V6valwӼqzqug͑eZaZq{>0[6re;~s(&FqfyQVuMrWjbʥ6r6.9;<||=9ʩt\|?O?hۧuk̯q}%а:ffK9~n8h)R3m؟P{.JB)Xj+VݕW'?Z_F.^7wkkX3k?fo6P+0K-p+`#ŲQikfc\ukKl;?y9D[[K"v8B|r>6!{9U76wZM(ZZm=*!N֩5ZQ+Cy"3U8?e҄XzA]s]] Sucpl}g>' rߘzD(.:*܂,<ҢI$ȖRz9sKŗHrAAf.pTHQ%I|o.rheTB%QQR c[aZlV;ccNbӮyOn)8Pat&ˇp$'tFqOtH?JiyeuMm]8˺yc>߹k~2c]r"#+'7/q=/ƲTXefh muz}};IOyCNk:9}.r;ui_׿ai)7C37۰:"MbNKq*M"\ةOa M=ޟo\/)?]_QVuiw~(WzjeU7k-Z\Dk+wC7w۰:"MbNKq*M"\ةOa ֢UE{/@9VPqZjX=} 7d*5ޠQ`Cacr 'r!ϴ{"iCk^ b+b}yܖUWTyjPs[jxR 6h*n~W )L*a&Lii?`q'xN7,1l׵[rsW_hfquy{8ͫear]J"(Bul!à垘&bQZ!fuUhLY:}4?Nh_[ VUb_ @%~B.BT/d;Cp#8($ Y6XRW`wtSbj}dt4؄J;M1H=OਠgCWr ;69~'1M'Fwb.ӊZn4cbڍV0+J`2tX%D:vC]OM%-^ qs[eqȥ«J?i*>C IOW!-)'s(#7}jxy>(&NdDxY V|AO(#j[:># :pQE-v<\$uMbGa8ɕ>MN@-]#:ˤn,ұ#t'׭xKi3 D{7,j\QJPvUȴ.T"$Oz F:huѶdr,I)-aaI[!^k]˧qNr#C%dϖ20%h'@^$EzMڛo&t$,cm4`f=\joe*Mʭ#ˌȩ|$4vv'5wB=HNM@a-S+$Ew;s¦ 14Ŝ% :!+Q=B IfEK~w8&pq&OܺF4#R,̦@"ZxXq].Sݱb$CcC({$lC -y&mŞlvÑǔ =!GplUg-fe$Рt5J| |mxT+wNHsR Za/<-a!m|S2I*FX%'_X՟pK\Rh=cJψZ V M@v=Q©hnĦh˶0ȀexGî^+ޜ#{c%#q/l[R%0>8m5ȷe\` q1 ';o?y}Yu/S얎1A}ٜ/)ջkwu c>brr?ϟ1Kdq9mSa:/LTB"XiK]גqIQb.YF[ˣ TTkő}li<ʘe\3 b{ ]Q[#%i]$IHdI3.T,`*<[^$ {\_5Wm>^rMEe |HO;h`b(/}F5ʓ߿|mN 3رPQYs6l"e~!tLW wۨ8W;/0 *}r) x)`SX^o8k2Zn'EDFh[Z#]ZHs Ж |.In5B;1J5R-yJP*o]lqS(yZ'47T/5mLLVjƅR'ȔilF'R87v}6٦ܙ4Phz )5hMCIUJgO*(m%rAԡ HLSkKQm]"t :B5Ts2T<\^C%46 -j}+餤۶3xC{00xqt6읋PfAܟf8<~@V)^{ k$ގx]ל9ubg8zо`jkk&L#5@@t1'^Ad[=H&Ks}8gR0KCe(q"xd߄GL>9FoH.ç\A) B3n-ɧ(+$B] ;3'NARcD|6%j\nM8hR ,ND)J>GiF)51+>p p0,g 9QȅsI)vW)A|%+8W׮x^ Cy8Q媚)0wiW}{?G3pZ ]}(өL m-CuP/(шHy[ϝ~Vq DT3k4GÍzD3\ F彸U4LtPJse]z:DI8T]WqOa#Li15sLBү! 1z?LzOoyL" 2MeC?AA=\2h{A~}7x/[Ya9u㙫j0П׽R:1W(+7MMNTkDϭ7 etVDѱ`%֊V,==V /ۮHT*М .*|ˎ,ޅq:q0%{cR#ՠz  e#>*r$^[L.mK{בGkso۹1T7} Dx3/qLL`Bؾ끐AQ_yNA'd@Kc҂ R\t?28YdTa︃q=J??UF5ݽ0]! wQ^_^g8b%A5H9~ ?,̊>4)^p"s|~lZDWHspZI1((O< V:!]Z#,79cA˵A*.-Z@{ΪES}q=djE ªcXmr[4?ԭ1z/*/ =C{?^q6{7>ԟwЍ31{GkFYtMtH$>`wt/Nqszu)Wŋ=lߕbb~<ԭ`´6Ń_/&H;OuSxlƭ!rz klj N$-ٽI"ʢ۱}n0ړl$˓lT䎍yN.{ϯ~X-e v & Pĉt \$*Z18'dˇs9+sZe}8"Յތ}5>o49U 'x% oa+( ICY(E6um*X)؂jiYT즐4H%Ͷ*n;Ɋ*I) t`1Btߤb'7B@G܊A`pC=}L*:%($*N՞zZ2y`7%ETZ.kuj %kUޮ%.8%(t-HI˸3r+Ǘ.2„Qi6`F*ODzqv.8FԂBH};r{t!"$6I7_x!0N3BWYͦș}RTx2=+FeA$A[ Xk9@! rd,ȶx-why9.86<_|pk6:G?-&w:ZgfFcXEΊop ht%gǒ_ OA8"kCy$VWGmMY F*4:Z5~l{qP;;Юvl95| -nK[$ьٝr W -0?#KAAe [3п۝n?a &2dSM7Lz8Gsli rؠ6o9D]zG輚96ocZѪVֵ5m(O]lE-.l-e J/+, H2aDfb382)Zu)Mm߻(37څx` 5VBig?$\yhnS4P$FR4P*JXk6ء Vn=x:=j! [v4>>BXE?#i1-Pz; 4xo28_T7hoOVmSlM, z\-F8$BI,Ut2el9rk]D>T;SBgft-# o tO/95 ]\\fV6v!B{%HJF-gu,XhŖRV1$5ϓh{oUq|UZeU^UYki]ڤs[֊VѺϧ~u-U/碶A}MMیu`+ۧ}{zz7Gwmq/U{*tw[ɪgjR5DK$ekOM0q$[ ݑHi 3+Чz '*RUsWFCO Z:jF!'x dX ^up'+wGcqib}NqEn=#JzEpH }"ݗ=_xaBE܋Q`diM,ACh6-ρSC@A ˂c(ٖ,0ͻQP2ѢېI <i$ɒcir7|VXkw.7(LyXi-v'I\v}ONWQC +|nF'WrzE͢,;q|.nd`@;b$iS@zFeg^vNӼ^_g賥uTTo(9yE@ ػ>5n'd>MG52flW^Omfi^ѯG{Vw|;ȾMBD纲SEj9Eli:26`ܼ\TovdkYBBn]݅g+6.dkZv^+[_E2YjL-J?$I*Z*{b%m-CH m=G:%Ҩf91ΓeNi";*q5V_u1m}W>VM/QWJ+ iG8JW#N::hVMS}w]SuJ/jO<&"JWgL(Ҡ )aڮߢY`ϝ#M 7͜&G) 6iW*徻m}+Y4+>v*_4,T5h~$>tC+KUҔt/ `K-7<7ug9SnͭH—6n@(,LgqSQ^]$G)QTiu*SO{M߸<  xdy$ WC@8][#x]y |4/@35!;C7C15>ڠKW7{FVnv)5սVYxELLvU_,j(foAJ4TPN%X[(&],}kN::+9nA>oSm+m!_/yG ;j8FO_Gf{dk2? ?lzGfa$YAQ*@.i{)nUOYŐmZ0o/bTo?5ܚ˺ _+=s|Dٕj?RYSQ5UK޸A;""%;̷g^+O, žxq6qswp O}^:0£q`s\wޕ[ȿjJk[;=@ k y9=^}(Gt{K> $ѿoBOy<tw_Y5|] ~[zb4 UmG.H1e&/ao'#hO 3C-BCt\ERz#_q#O Y5\#e?o@Ad &„&l$<5o(P3LHTb~= la,Kb0E)NIJ$c)OE*Su{>Εԥ> iLt5Jwz*қg Gb+x&2Lg&f.Yb?Yy/I,o!ٺlg'W(9ir^ UU[\Y5'P3Cّ G/O^/lՙ^XgnShE%UAjpj)jeY5;Zkh<' Ue֔) xz/z/ ?Gku{Sרj-\PG5B4[ (iFhCm)Gk0h{3V[vkE!N$HJ,M&8 BP4fmKҊm[֎rmiG'Yg9yWa ֛6(Ե 6zvxۿ_6\gYos(ZhVmWaWs0 tC؋͂&3b8ARtpy|OkU& 8O *΀,vs.[ 8]^)rY56ϛ_~dIYyXҼEJcbب$Q.T5Sv}o(keV+^MS+o=zR,WeY@!Rd*)RI!Sl9rWPZE2xPXa7_a=7gL6"Yj$Ų4J-^ ?H&Abw}I,E>U2r s\tp|XC ydi\V"+9C76 1|,ce ֖b#/a'{qGkc6A.qP pψH/h׎9} 9F >Q VTX]Gsi5Ftքٜ4Ӣ9k.\*= +a; Qk G .ɾw+ 2Ư 4P d$  EѱI;~܄<&E`SpШtJZŌ#zD )F$ FH֓fs.rE/bQwmn\9e˃VXuj4VV#  4@H%F/J4kbB0t*3yiSI O`RZTS1J߷@akX:i~3tÖ/fc&7MmzC9e=vA~ܷ޶ c_jVկakZsPiOe?g\ŬV%G'g6}or^8խUDC5ve {&h\ ,S܎>ФN7qޫFHpHOoȰRN"WKИ6rA4V't/(tWwG}}%\TF hE)zlýcjc,IH xޚ|3=L@`eW a&Ufq>㡱M83"OP(=eP8 P)*>uh螬 +d`k4PU/O=,x 5ڇ87O.R %٪)"-j3jog),ՙ o&a;YvQ'G_ߚԨ'D1U.4tE6\@oAs)$OR+jyI)JS<\ lzVc:QnPmKW|9Ownaoq:b(Iu O'iH9 V8$YIsvHք'+B`75!Aa3m1<rXp:|,})g<2.Zy -&q ҐzM&S*-][GzDv+rP$r յhv^ ød,İ.Y#9?; {S"} +TE.lMDA^MqnA~]Z@`'P7q'tz*iAP8ܞρ?hfP-+^ B%%6Wׄf51d+Y%dӻ(-BRPUQY6͉&!Fܞ瘕A@ */Ǵ0݂I\8&5L[f (P=b>S&{rǣhB*S;BN1EUXm 8Q&\ 5^8' cs_IeSX%oBQ DV$"`%hM:(DK]ՕYSQ@5 t< U'wbsY 4@fv^#miԏ{b,!8g L bI-6ΈKk՞Hz|%+P*fJBaSGC*ZACf5k12$\B2)f@ Ԋ]T Snv͵3"0Q;9l-_VBBmgrF%. #y&#G"6@:!fP+g@dyT+g'-YPv+b;*FƃQ߃Ei{;&I;bbɳ%:Um\^Nq;/n>'!7x/?jn\Z%CYE g-͔_}|!s7_=FUѣj.t똶Ә*IJ;g>5LX)_# e(,S$8Hd8&G*jn..ZPr8͎>6CwqYWTp69("iKd25=tF*hQ. 6'[aJ"4|7O&p[ˈ&%e}'H|y'2}@S]vJ6 ;*Ȉ/BRO|_ ᐿBR\m+wTrBo " CL8{ ` _ BS># }Rz0%b77bK6#Hkƒ8Ue WA]LtDƻ(OO9-w㑛8.ځAۍd!@n cka&>-3Bv> ;H3p'Y(n{`z|6`q0ʥ+7pR4JEdտS75ѳO"V*䕕Rk˷=d/P{yغ9Q;dI.<(i0N(zP{1֒FwalByg?O[IbV=MD&WBM֝W]@= I= (&otodWȶIKLEL$,D'"^%6e/5|Kݩ/"v5֊sXkEbs@gldŪHƨ LNER+at`y)h}qc->愜8Y1T2v]†(i]U5{Y\C09Z ؍.f$3Q?~6VBq{\'bh6:/˕ R ї}4pAZ{J;^/_HTmKu6 cH53M]rX#?nZN ix/U!2IiwBX+Fu ?Tq/RCa1B('Ϫ-Hثjbq)rS"U hv5'TQ) lvmWws`Ґ?[MPiomE:| |Z&U~p^UF A?lenEhCz5Gkf/k'bEZ M<_$m} zzIBXC <Am`ƑҤ=v_hŢij>WN_U10`>=I{'XYW!H.g ˻x]XqaĹ ®Pzffx*}t' 1YV10@gFgi=A\?#OpdJq( ,яx&/AعކIvcyD#Hm(ZM]؇yRս0`%3W ĬVՇc`{SP&GR`S.MC6vй[yeJEȢ>ۚ^ZW%2`1ez RBDf601FVq}Ah#ˠs[(5ϒiT2NuP(q}+N 梞`{,%~WUNIkAc0xξޢ@!l/~=?}Aw5 (ȼ{zJj\\8ijvg8k8~rȬ1fW?P[Jye7q\PfJ2lVܿoQ>˧iksG^?Կ *{[2wXG 1:ý[~zc:d;Dd=+F{%Y׳B(2BIcqUAkR T56qf _yÇ1Biڳ% R;.Bp˃ZyV Ibl7VWǻ6)AUtu{ۮ){X`) ng 'QL9gN~r 4EXy(#B(˻H-3R hE9XLP*WzzaUeGXyh#GDG}(is*`oaFfgiZ&:h!HY<]ZFS,M7]a3mD2F7DuZߧb ((mTX#pǚv!G L 3>f_喝ƒMstK/tp3@$v;N"/˾j/neE Ȓ zmcϠ $ϲRrG$yRxAw';1Wef8IDN&ӁkkWI:8^ͳ3}0jXI{eөagR{t2X'pڝIKU=O' !}f{;M-p#.vGh32Tn #'D8'OW:P`I,.ԪLA`SVC\X'ydܗYl76 jksݯn.cZAq[6(k*$2SRMbR㺛Қ7ۡrJ$%@h&8ۢK^# $b"T waiVoLGb蒱r]4\ 8zһ.!O,ZGPilհ! p6:n>8EN_hsc=|>"E>BîPv[Q$KzK9bGʖ@<8f :Ⱥ*]rLj!U|D'M2785'l7YIJx?1MnʳFՋ10U Zj ?=Jz >"S &BmTkNI S^aIBp!Q5W@k~c gUmɯbk)WAӵKMWT Uν}-YU6\1ʼr9yT2kUqho?ږŭ=#Sɒ*j]ߏV=5%tԪ:߶Zy#a Sb+*uhњfUS$f'Hԙd׆\܃|p)$KqL%v^1yX+6S*ߖcK. 7C "mT3G8ssfM6Buʗ:qg?wkC?E*B%zb~mpOfw9,a gRfxҸ#d^CA@7`.{^\Xް}ǒ `OB zI:%ţ[΃T^_ [ߚbu_HV•MRi~{nm{f BĐ@z1QI<{\QC| s'|U34{ M>U}u46ZQ/[CfU'yz{ðˬ%nDot9nt=mvMD1 b_XFC ǔ tʵ@:6H]B׆h'܁\Q\MY%˲I=Jo"4io+]f/Jt$S%Pe ])_ lvfHkAPW {d{vs:uղx@\2jsN8kQTW8Z A\|Nߒϡs5 R_5罹>ق,IU>`=Oսsd?q-+Ѫ]^/nsw}WV.}Gwu>ynBo"O47P_ϧȏM?y2GcΗ2/ 7ziVCL]ASD*(qص3ʑ[XzZD(Y5}"U-e]Ew:teڬC9LϨatI`b*k{FHy%\d,Ry> \GB5q낞$wqwtcS>>v^ y?h'|o01gdp GmW39f~hu4 #p~ crR$. Ĝ7sE1lkkiȂlIb!-٧h(k{BYހD_%^aH%@3`L*UV zEz ɞBj$l;mâ+( F|Hj[ `Ub#}`t5GsNݒZqOB̃T#J7T+E|NPIo&F֓y և Nd.fޙP-9/M憧p*ۻbUЍ5믋s}1hW++,@4TfJ@!7y?).p@&>)U.~fg=rQ'9+ Z=w3ET=+bKQ6alYK?.F*goZ99J-ݩ(:PvXVj!DV2!i X\ƅ(oAJp4iuA^&NCYKr(8 [B s^F)w.]^"SЕ,ɍX)BAυ_o)=^b/rLЬtAy4 1#Q}"ϡdHc7tNoǸ "o_ _3l6GԆz+MLȱ u׎` zxîDntTWLjmn`J#z]uR,jӏ],,+태*$nD9qI\f?Ţ6NM~Y\Lfce#_)k@dȦvMM#DgZ7)f8E (@D2f ~ ytjkS\!vF">R=v `ZzͦWpNF};CL&iJޅ>q(ߤB5޽VUb͸$nk7Z"D JM;e~7 !+,ˑS˄dHWoGbMch`7[MRd״ HS#y9 r緳gޟY Fb5.Jyg˟Pį[>%dzJܯS@K;PyW&NX؅"h}^~RRX;T-eQy݄xdB^Kk!e#MȹQ ![j6iմGM?/)J6tzqwyL5F\VTO;g\ I:rwA c$~}=o^R넝uS[X (Uة\À 'L44peӫagY0_/.l#45N')_8m<(Z ΃ E:E1b ybgj]p`f͖ŏժ/t2g?dmx3?/voaB_=> 5ɲ՟kZl~+<<07gdɛk/sYQCͭu*鱾FVH~+;{O]CwVO)qЪ3B%ψ=Chzt QY{&p}$= P 5y cNk# "#ކ \ԹOjBI>3xVQΒ==nv;UϫCϛ.USVtQuyRj'Z^d`YSHq!8!~QBD1MN2k*nJ7q Rӫ7)N֬#7 +[;v眿]h': ^q.J"K5 <,=>2_1śkyt22XRT.}lI"B!?iysvCO"}֨ %kY\xgcebY$sa"1_>9B7r1ݩ*eEzDEY \ r\ ˅E7}N}8&jdEru]0銟E2O2gZK\-6H(ib6UBUD TOzLuSa/$:~ ">D*P,I蝎v%GXKl%q+[垑\z+j}!WݺxtSl&ARf]!Hۤt&\'uF[QU'η\}$XB) hBr&[`4XR]# 3pAمL #Atrf~" ĉT:JѤXt( Y'VӞju.N 'kQ)k,$,$[pa>&o}I~-61ŽZ"97Ȗ\HEΠ˟1?gsJ(YA]sx$6/S_r[1i;tuYX~@OgfcŁ;GBaE=/c*`$z;?ֶ_$ 5)T\Nֶ\\2ʙϟʚ<4`~z_xgi"\FM An8dyC}P1<$ mSK 2L9})X|n.bչRvΈS\p'1U,lӡYdYizT{lg~)oJm\cN$P^~b>G`\00Dd=zFr!!l5QuMl^ E2{92&dx:P);*wK2q"27Q 긣E޹G7xWwT=>h&2~R&i1[k!Q텚 ӓCۆLJx֮>RJŮT N[{˒,KbvגȤ-uy3,5;b -Jj$l&8IIwZ.OДhusׂ2,ywV.M6.IFunꞢS$z}@yqD^ 'Y=nHI,הkPyB!!?exZ[X^`փu:}AvL*k)s"o 3<;[1hW3GZNJ nVcgH< 17`y.^9q$K0)S5CАO<</M\˘7PZJ2R/9ighYn&?m5y<"BwntBy|%4d>80A j0l .g0Jpj%aʼ&P.ʅ2e*6x^p:~29Љ̃FI'" ZsиI?vhHRߧ!sẁ)?i^Nw _ l9 HVϽYltjxS>39Z ~, 6*[^RF誠`X͢jJ6+0۔dlQCgu,PV{AKD$AViOg ~VyX"O`Oct{Vl .E*ӭ-M\[ٿumHl€>ZR5ԮzQ ]$A0,/*lpao8A{>AyjH.M^abɛK5l#7*e?M/-p)]C-]oki9{b/#RVʻM%% v۠Vކ'h.t9αMj`ifh#T+pgH$!ju`$IW$/?&H2SjrHiG[ozo{Q)t'>j}Zv?9Ց!KC/lCNXcTKC$Csl,)Qmo'7'rK>J+A`ӥJ~r:UBޫJYE/ex'ƖqGo9HkD{E"gS{_ h\kF0ܷ;X̵uh׏%\dme=q-RL/Qs`Ĕ(1ؗh)*QC,!8,ȕa"4J;Ź#T {Gj]l7n)rxdG8Xԑl<qTͷΓ"OOj1h5zϜ]nK  ~Rˈ*j[dvG1W~WyN (~| :9ʄcCm;xW+ΩT~F)@B 2Zҡk3&-aL.Sypޡ\9j#D{U^H-R}0&$A4cUkdI D{ rpr.0N: }g.$MCh?޷jx.\*U{=0fy;e4V Y ]jZ KE錴 ͇4ӏIXf)]əVZ^ ^ ~\*XM6ui:'͏ pYa1 lT-`FĆ|^'Z|uT`c+%qB*Z6!/){5 Lih.P/d0ͲZl13$=[YtْrIp gÄM tTWLCͶ[c 6'O5<35LGk2|@^?tԃPkD?Us"#Htϯ@ .M$x ]׵6k4{cFHW7[^ ,4yF}4U0gɐF)&2/ )$TJm5;6|ѳs8+̠ fB*N1vø#gowFTI\ӭ2_)3+\]]DM2-5I ({IM䐶(1+vF-n6j#%v`љz _ە/PXtGM "ǥĿEJ`Rs\1~15{`;3 ^LES:w͂w|Y9WhgYIsslҍDc JؓlQED0ky͡R8\zq3sGj> ֵR[! GB-' _B.x]08IC8m* o +Z+)6!~HIzslLUE&ɓCC?k%AP2sUdl1cE-rKڜs/u54y~1~ QwԊ jTc{J1 K0T) /m/B7ˆ]3<~!\u!|cHAWj3[ {齐3;*E(o J.qȾҴzqϒIc# wj#Юb #Bnۆ]6Ad?k濎UAd{ul<~Kgt'hM{9kJQJGKRTAUǠP#uW|.K27,S0fo`#1!ЫnM9ު fd/ 2(q7\c!G. #f(cxiřf)V?=@ wgoju*OisFo?"EEI! 0!k_="؋ !&}ɨN,Kr.=]# Dovh0"A>zM'㹅nXĔ.!]r|&?:8W xܾV>"ڹ(WñF)XGMx>ýdv]v{3 .kH׹ka!)^Mm7zN^ jZͺ&"(Scq1,,k rauy\܏W$̰̍bwMXE=X1\@rۏɜ/>B3~[HIb qe|n't;`kHp$ZߋRvtǹdP@4˓_K=vR $iMR"Zၫ%a0OB:F{bGF}K`]S_e `ɱ/}e@WwZ=oLqM>7|45=#LJ9\Bڢ\S*YS妰P3U#Yn ;M,+`k%{վM%\Br|_Tb iO2!8V_.Ҭ4[kyH'Hb]yѝݡGi:Ҽ>w49VؖsN.dl$Vvz9wPf~8z3zF:zBֳƝz ޖ)&*J}^w 0wn; vxJ|GN>7^?* .>D*&,@5boe! W:^HQ*;>)'9+8?Zv?[rcMW iy( P5Gn'J[:`IK '񕉔5jؔ{1Edb[ ?_[Ii Iӫ*9][3j]GIT | ]A%h믡>ߌu bD}P(7d* d7GfusKM`*6{qϋ*BF4k a+ r*&tg;,@13OqF?)mZ@A0̋{HNt0gPC)]!:E~ίInoiܮd=]. Y!z^f ހcW?v)K"3i_kR@Yd4m(QH}]g!4AF rKooecyUn6>B}Koh-?c@7 Wa08`գ +3Umn菢4:'IGqL}4 \F ++u{L?{DHN_ՁcvCY {":o}7bsCYS~vLg Џ;4bNA ķr&@Ur ;fT1s"o.Tg๙*eje}7GX\Obƒ.(̺܈[{MtPQFe G,fG6T/ ]iL(-t,&>)Nl$ u20K!jmsh  dC6_BU>X׍h<5fagI*ڔ$x G5DbqH,?q]"%I%N1 I PUO u\Yk.kg$dXXeܓS1kjbgV8y- c+RR`L+\B'U`EibgE/(ٕʾ%N҆PgN,ȑP% t Fl :UkX2'E 83*Ӭ_1eۜ4`IZT4Ykx`VA3&1]I8«e_uF+nJZEi >!!BMKq!z@ A2u4:NL*d}¿Y%FҧlS[iggK D<$K1&aIxx^]X{ɹwt惫ci@C~X/;o|x)nW /x{HQ4VyPM@?7j0A%"1$ďY,2hiT 9 /U*)IV\R$"[Q~'0ָjy_\0+ eb^6֔U)~qHTH 9TBCXz^e,re"TY\dWZ 8TAvQ׼ͤ߹ ;2x`w$v|D*鐻>*aJD^}wCP\pՕ*2^$bbM]著L,FK9t,!佳wW{(0۾1W4b4S 3T8ʀ+fK TXA:o;OϸRx{ol߇hzp7<H4]M>>)ۀ\I-VJs݌_,4.2"05}3, V!J^HV7k*Z_X(#} # ZعJn66j)]`$?8%mt|ލSN<&_ddҭKM`՘E/,L3M:*YwYқGB2! @RŒF(Jn{lKb'7R3ѿ(_/\ݤuv̠. sUYq(:ena-nRD\-)=j{)4gwkcD܋~/# rrLWH}`p)׈iyp\ ]E rj4Į*GC!ҿ FƑ̓UR -9o"tWsHF=g)+W$["z}N3\xO<~kV}Jb-sI嬩RbimQV,?1h=t{ݾa \)uk⓬Dê >ΡLO dM%VIiެԵz{u+|.ᯁ7K#_kY{9~UO1[V1+>A8;ffpF(MgدCiIҪU_@עa؎ f澞Ū&ҭɥ+!+^frlf]w}!eskZǕ MR@nedJ): Y-ƨ+,|hv<&R~q^Yٜ}mm.YpUN㹫kzXD|TW͗[A v"+SbbӜl\}h}y̺! {+MH9ïNzff!.j a 9im,Q(^S3+,P5a!cJ("57f'(H61YA&yLbh nAUS-'p9wY ly4:zYZy a~".ӹ0>ɧhBgПhnCl aRDXy݄Tb z?L NklŠ=Uo2M28~\W&m_bkA 5HUF.`"imYgWRt,yj6P?9|B\TO!/bp]-֪) -6eۇU:B as531t +5/ݭ W'̘rtP wЩ}:>yak*Ky }iKR~UşM3"L1ϲKYXA/A|("VcROdυ$f JN&&"AEcKRo2d,T 3mz5@hhu/Vt8cm岝O0r"'z+Xc1(antTeQsm iltr8ӶuRx m9c\UKa2`MlO{di+fG KH4CˁMD}\6~פrop_u믪s븪΂ CzEH'.=MM0nRe'VWv ~p{Rd aP{,n#)>eCR^ XsODQO}*c jHE|*\YY>RhϓoEcZElD"æQα8b~]x' hWc&@Qsi'֘`沢'rPl!?} ߃%w+_!EWwccXGO{)@޲j37b窫&[*m{q-D@}bL{a g4=i=ճ#Mݸ ױao86015t籱e$'YAڥA^ũ@x/8Ê |>cE z):?J_vω{%2l6e;殬@ ~ v)~ȼ "^/+.#-'_x Pkt T"Rmvf)Pr-)ۣR6m1ƍMճ)38c|ednNw1aLCB8 *EcKo ̡( SxЉ8bi=~L!-z}PԔh}b5^@RU=).)iJhA'e*KvBʯDX%vonrhgU}%5tDfB >d!CRC̚va_B {N7(>>Y>ਬrtũ6\3. aY+EA;4NȬd)Wsg8_0\ ZQnQvrkҿz3[8GdԄ#-֭ &1>xɂ)-97ԭa:*%NjIC-yN&(A%HAJ|t],MQǙf} UR%Rnn X -vd7k]3I !M+X{׭-JЩNjPUhޔEVDUܬA W?]*G{sP(ܲiE?V8ٰɵQJ!!GJiLi^M[Ռ ?6aCدEڇfPdg4 H7pɝ5wsѹ0v'e"]0$jN¿i o'lҥtLqpSȣ@ູ ކJ~2ǂ5męwP&?$W7!=d[6UL+){,HeXf$n*c{{.PF+z1+S@,u+VSS8e>nhpy }Y}>Utx 5Jv"ա~}R4ic<8T=n_fSx'җ1 wܱjGKF:1+5L@hNxN}u%ZK /;$aoiwb#skiD@pޞ@8p~U/K $EhXV``lt%ʿG;{^8lfOíȳ AҟF&.,$uTV<I/^c-ģ1V#5v#q[pzt`5><"I*P͵(n0p$Q6p<5f;~V&t';Ys+RI@'fì'a1!1]g y#UE e_AC8l1,ׯS繏J fN`B`wVGچcZzD !|]CCkd{>oT$KCK[o45ݏT[e$CqWGgO97]&[BTCD77is4Np-Oζo2ҨVAΏ˿دz=z0]?RMV37{5,N@3c!+cTJ45 [+!8U@D3f3uVd٤_ك75䧈%"]WR'jrEL/PAH۩w4IR;RWr:]j3֛7ke=2M8>~'vswy LJE­;ǡ`RB7W'ĭqu UZX'vWhϰ[7<Փ 2O!/.#X 1Yǝ^j(~4zV+G/<$} [0HV Ķ!$@ "o`:!1gZ>K>tUCZ װЫ/͟>K XK&`Pq)?K}+aSx?x{l~s 3 hҬ_zsP~ 0Xlinv*,&8&9]{#*;DŽ;N6dzYbilF HqZ%Y} q6TOѪO&U'YNEeu!Mj]QrȫY6 r:H(d"r}B~H?CK!I#tRir=0A5S7bVhy~|ޑmbVjļ.UMn"+Q}c->U#Pqk?,e#me 6] e&xo 2&6ls+(j#d7łndvF1:KXiМkU ⼧,5u-=!x6]d eS lBs朏h<%lP`ڶH KgzS/-K >rɆwqzT.:],\=_?Uz>ZH͢uHJT0 nnsA/Z`!KZ*} u6u_2Xٷ.hq9e{T += P4)6z]j .ؓyʯ,RPx."Ʃ[H¶`&oϗ&$[0upWRaZ`1Zx\[4Y!jz}KɟYVL^Z.v;VlH wì? UU7&@2#bwP7p&8a>H?R2)A0r0>t1s,M;T(RBZdmB?p~4pf! E>"f%hΘ}n&Շ}|AҘ7Ɨ=)CcJlxvx b7-2^C &2)іDQ=BG_rO)I\&_6hcIBlW0ٚa%FUݥbd%qo=1:Fߍ^z2u2f7W?<,`z"կ<@8Q -JÇ83JP㽆RFDQmLkSw6!*$0" *N~s Ϝ naMpK$A\f@~\I.IBPdvG΍e<@!|`-S#誃C1dH|.zR`!5hEKhes/UIstx2oS"Oa3|?^(izI&\A^<@=y7>[Ȅ$QmR-9%눨k}paָ!tK%W+{{q",)f@T6NwԒ_{@-TrC $b9oM=E$}50Dxn@EAZ<܏xԀHctT溆HDbt͖Ɛ ;ʨe ?WVo$/&Kf+R)f_ cPgRĜ`E0#V:S=dV%[?-,Ϲ BU}Nd,М@fءj89߅_Gq0, 3S_IIt 2fr ;A*sV78~]$c1?3' 6d xICBJ,I ":73j^!YX@O1q&\Yԗ`A 2TJpN(z$Bb([:&@Kz)Tb|VNN{<rMOtr~7=<9{-5e){SΗde(m{05.?wf<M&TMܾ/!n1I+aW?#g8zܺÀCw)fi@1a,e>K'p-1SXˡ6\d4О0%H?{е}C j-#@+~#{G^j qg|dD]d!i{:!c^$CiQYA챀Bv)K%-lANcۍb)!gMx;9!wEm!PHـ"1: 7 &RFkD^O=^ 吏àRŠL]ͯLi!rs\ٱh`P^7J\.^'^>_JtN(Wdۚ: _0?-G/vu=+Ψj8PYH.R vLEB<@t5[Yn[|\+? Պbd[m\?>ߦQWu\4r9d3Z*p|0`'RݐT1/BJrMU Ch8aɗ`\*=DpfxP@LdFpe 83UhW dt/Btzqo:uDFdw|i JR$H2**\Œdk0"?)VC-}/%@O*ڥ CxƓAb[o|~6q(6G\w4a]{.f;tm[~Ft״FR W'Vz»µׂTmZ(b>CA&w&nk@'wc.s>1l6g\Ѥse=O20 &prmZaW}Q0q=Yj/V볲o#1P -UT{S)KճcK@3ve؆(jq]l44c`&IlE\nZuWR eٔ6֢-)Fܧs_/#PSR|eAYӴ>xAmרTFf'&G{ꩄ ̪|$k`_`m8[zXP hs+Hd*Ͱ1g 8UQc!mVVFqڇ^ϱL" ȃ,NV>Ҫx'D ܶ^~b~W;_mO^hjS ;po"&&xS}gzsEUEĬٯO7U%vMlQ&1"-d^Lh_y(d 5^Ӎi9Y|?񉛿o F65-e: `ʮr%H6!G3O.Wk|y$N*}LVUZRwSϦ9rz8<Ϊp1yZZl/Ohas8C69hSh8_T[>F[ϕFKG$[C0U⤀kS*D/YgR019MTnÅKQcvmjEa9 LB8ye"GR'ȹ?:8l魇OTUDOҋC*T6/[mHT2 6)(B 8uس&Ic-گ,ǙZ׻2>vBNc̄'J`*PF=}%E0-wdW$R/dݩ3rFw! 5lf薈;>CKll<tGuR D/\/Wv8D׳zCV+ <)~4ۏcdi#tX#gW_LE>:X]WEi<Ny]S7buZQ>yyb^aRVו?26*r|؍(~`z)gZ^aזyK{]5WҜdhp4k[ s-h-c_,S?ڈSr|Jp^'L LY/ GY]ZK5Ǖ%2M-MSyv1faDY5P 1s \{bgT vċ[k+?sObtl0w {Avk 9ޛ_$H@y9ɾ5g8 \gm94wIe/BgËs.^(9ǔiTcv'|0cIVwA5wQuQ6V4~GC_zx9r-g3Do]m6S$N^PFSޠ2V ګC2:Ww%dUGM(DPȱ"B~D pm9G6 ?41U)$/\}v9#6lH t73WUڦ:z l+,QcPzZєcWἔ <:ΣpPh/ZM,7E-4*,BDǵ**M+n\m},si)uqQ*}.G$`s*V rC>F ^GD)Cr%Uؘtw1<ھ#9*[1Jf =Qj~5b 6o)-[]!B30~Q{ucs%u}G}yWն=Jñ aoERN&xUP:дӟ+oOyãoIğz:)ܗ`{_3>$_. , E H] }8룽oqulō ;xi.0b0p'|'c,ZvI:Xphe?m"-֚m^(+2Ŷ,B79 0㈜:A:i!U5KGY$w0 bH#K&aVj}\J MO lϠ`{(0,,+ aZxW5&ET"*GX]%}-Dͻ5%IBVW/} CK.^&<aŌ$kG53l^YlYv4_x݊hݳ/}nÊ{CnvpCnBu~k:J4^ 'u5J}q5K6wwkϾ乽z0n [:XoFhT(h퓆Y.}l4@} XDz٢X\CaU !Hhmś1'X0hh&07cv1,\#R) =A;V5Gu +5ı2zg;Q}轕s.s~-<dPQ`*Ha59LmAAR8Rp;Ȏyt*z7lW~ g7Fxe OWuT&I.q跤e|%Q6"*2?y*5v,h c7M]aD&kf'~mClu†w:i.D)_(]Z&M 'b$9O\(AD>XUe$ZinFL6HMw4KI _dQB-Oڥ3\V5#>xF˶g$ci" 7?{\`оdon|Æ颎d f]s$Q|"ԉTj~wz'X@{.NX1m d۳;'Xn22)PiHIeN)JT?YtggL"8u?G+֜jn.~,% P&OśM KG1.I9TZ4W&E(cȋhwDTKxUW_~?σg7&g+sNs xeG*k{_feV yԳqS nbh"R\фFC+aL#Q .J H-}V0ӭ!N g-̠5 'Ά91(4ߴ>;H+ IG kBȀK㐄MP D t8+Viv'y0=ց0WpҦ[Y$Em'Tmegꂆϙέh߰3tEWg_YK.qGzW̢h&㗧 n$ǭE T ĊBFraÜ[Dp%x&~ 3N7`g̒%`VxhE&*lF6`0"] OE#B !DʢO[LX8ͦ.hzyd0j 2oI2K>I#.A 7/ >ev}5OɍFf+d`uxjF;х)2HcՀN9 $vZ[ @~BEۗdk9Uj;EnhL`|&'ƥz˗!z:d~eWN}H~P %,Z[ac1!g6iUܣ[Hd[A P&Z(hU^-^)NX)7APtpJ쳣Y;Cu6N5Tf 姆ZΚK RyGbʼn(,.ŗe$hUn'Y)BN DT{%qsyDCbs%:`շc7rc cg,{)d|<5EGo6mg䨿XmW BgDfƸ?7Ee.X [wyogG*(-]0'ɳx]>g$["?=ipkkbT޼0 ;7)K (*QW bOaή Dp妑Y3gRDFta#vχ9]du3LC?EWAԟ/,΂\7x Վ$ЀjlmȚ;WZL|gNTSPԝqBzty|8GxTAT p{"gH4Bsȇ \h0H ˚X?/P6 %tsYΟDa)CT*JD2Ŀ`ZH%6)B=8rTT/̥5;5~Bˁ2zoO?خ}?TMFNĬ#@ Ay;p-K)3nUm~;;aUk6oOSQF^_zvq଑eUn孉 jXf;-<`hGSq晶 hKy^>dH5DMZs0κg33t|&)Nװ) Xg_x%hjU`xYe{3n>BǬu@܏㛂tDѵ5Bzu:@`Fps.S|QxnA]o蚀 +L5D}g-38sSh:"ʿZv\jE v~~ DlX7^B?GE\ꑧ B~B?R6F\șBaȕRՋ (gnU>-C,|C6}Hl^C17:b '2Y^M.TҮwDA!W{@YqFVT=vfF $ݿ%qZc  tNfHE)+o ؋ӟOVpܺH䶐_#8TW 2JB)H4^c`D<'RR͒LrXuKJv+~jvG[[Et&XR"n)?~pD[hV[ͷ=Yʖ>8'eTMu\Loߔazaq3'5AF*_\1`k-8Meٜ/NJ6ϺbNb;k-Dut ww5#JgEIklcAw{F7OPHieN6ǒ0QeNrtYEK4PXVcqÅ+h'e3tv}VmCԌ:jI8 *@~bŌ-l7K;vPaܧ75W.[Z!jVW J>gg(-\+&Hv8*}Z?|)zυM. 2>+$b&5}~m)9d̜Zyj*Aw$ ,?^Qq\P2()z =hkzcIn*>X.H)$-?ݸmfK%Ogh/dL[ESWҪv`Eܶw7^8˦ysi?aѽ0sM3̪ŝnto izMI`.8l4G 4!׺4zfaBε`G[B:ES:ĦbNpRO93|7s|Tt9D^p6Vl|Q-c9s n+07]0qۦX4]&t;Cnaֱ9ǻEyaq^B$0  &)צEI̍j8Jnb+3;752,$IW8#~*t9Gkq-5lF>m3./菽_TU FϘܱ^*eFt+)-7<]o/װhE#,L64^dBմ%Ӎa)66q mTiMʾ l}$A΢'@_};Ts/?&o:S(i?$=T $(oS4>w\#r;K+D)7ZM0!:`0F6U5Ve/zݐCQzT6C+ǍgZ6"&2/ &/eY}wh +/m;Er]yϊu["6޿ eEPSTe1{Q CH@!4ifNo ^);ϪŬgKQP!}ӳwU S#`jn7<a*qQ A6b[-~kÂ6~8Ż'lHtcqSh02Ia._ ns.:Y vu;ܢWo]Ňpѳ{('pcQRuy?([Mzc*gRR"C͜x?"8W=DNL]T`% U{4M'^)$؇8)*oI9PPS+>ℋ*K3]"H%#X6]2V{ Tud$-Ml^S>T]n51aܗ@3C͔( =UY:MY#pU=IFd&U@bFp- 󝎺]f=_(lmdU5\ U}SP qS) Ѫu}&1z2z{{࿂bT|c-]0 !;&b**ND[dAUC 3% F %$V,M/Yi K?~-"iv.;n #S D;g9Dž\&>b=\|M=gu5VP'|\|_dDJU,e4m_%t ؜k̢`R LqMvNۮR'B L|x!``2NccG^lX߫8>y#[RM}i^]y ٠$b:R^26Z:Ѥ,G 'oG8w]+p fP/%:͸EϤMg=sFJ0wR) =SpOAgRn;Uձ_7U"elC a84WuW{TI?mYk ]Z'L'&x&T@icޓ=.ƀD,'e  ɮ<0ϟtM%y|5Wp +)7y7E` Љ/i#Qsu}GsLZ'A 0ƛ!˼ܝ2_yzFWwQ7ޏbjл}}M57;M=̑K&8X JPBni7Q$p91̃1yJ#kz֔) ,ì@p G%kpPhwC gPYuTESާ@f#DUf%Vt%ەnmʃ&v|<wm.5(X(G1lZqNm6NSݘ N/ ,{qeVS|_~djkm| igskG-$yAۧ `W+15pCqi cR UA @N)Mrxs 8Y,7ϐ]ޚ|%h]SVX 'dϠ(= V+ X~HG].dHyPCG=qQqaBNE\*.&Ev'Ÿ׮x&x돾|`ě#HnT`5xVhVN}j]"I-mm4Y?af $/D$ù%yzs`v̏| >!O%E%VCy&f;,A ;ܼΰ&28Ѵ=BBNdE( 0?YK/$?ޔQHFX :P 3i~nQ{Kf^yϣZz.q `+6bw\\EϳytAJjgCzȥo.'X (Mq8ovJC\nVEo Y!*ocǹ 3L gz\9Wq v2F9fIv >z PcB}CܣcA#[cEc\O2w5`tzy%""y(Z=M@xn!+cj)a+umǦ<03qm.o=ڭ3(XzBaD+GOMx32a3)DG)Z &Q2ejnpbU8 HV&$J J}Ƥµy[`ٲ%\:v5esCP4RuONGTo ^}8)*n[BOckn eɟ5Np}fjjz/&!ZxZo%pW"4iR)7"J4)oE8ZfxKWHJtlĺ播 wɟrppٯ8 f(뮈 [X9ȹe,&S k &A" ^%(ԝXr) T^R^}o!ٛkqdp8x&PEM)^__RwRJZ= 6Y's*,TZD caQ2mO,@][MKz`$m.غ Z)j9G|M5c "0v׮Qɳ2z`'CXa3K46 *F!ȥgj5`oN_XF}}zhȌ?CxcFܯC"d+j>fq4ZiLcM4oBiTD$ZhQ*'wY 1l+(0'ݸW f[J809s-zcma`H@@ )0Fe5/lG2Mi?;~,ҫ 9wkG19:@(  59_MGW>.W>;ħv) mDb<tn%pV֘+G 6Ʊ~wNrW)"03B#>9ctg1 сkAy#AK ߏ#(vƃ }˂D"U4 ݊@٣GH.xiR*r= jBl߳ަ!e(#W>i=r>I,n* zkʝT(rMk\͗D(;5@U/#^EQ դIdW%ۂ?p/Ql*cp֓-wďnEV\9O>@x.%Q>?f0'}aCW=xi]]s[S5l1R _Z(ߧsݝ:P>\$|o8]VT+L $LlT(8<Csu/hoU)=j@IynמiG{=AiC!9Dw IHM2HaW+tr Э)}=vR{/Ύ[ܶeeO_F9N~%ilՑZ@K `mst_g؉<M2?)7C9ڿܓFz}uE@R%Ar*܎mN7Ra7E{@1L ;9HVH~[*i'IѼ7LMњ2^9F_y-?4wOGu ĵ-?[qV`>(PƝG(*<[rWq,qIό "aw^Ug+#4k笂Kmk L&q]d҃qØ{?~2PLmZ̘O lE25_) Psti.]*tS᧫e:Вs=%.Jo|rH|U/R(IP= +BZb] q==N+i|\[iH#4Y,.C /4;-)\P]/L@)1qChX)P+ `ǨG pIL@x"ׇOF1sr}ߢ(n--&DE"{aISY~"QI;(uQkKrx27*3 ȎJۜ>4^+Q:fޙxzdNnxB'uD]>8SAjbϐ/!¡oǰ!oie0._-$ỸbSָYO{3; ~`/YsTRUbq#!bJt HWͶD$,mܩ(YDHȮ#w$U%K'ۇ_0vGxMZ]`t{i-f8-t76Q &tJUvgӹzY_FYRx(ļ' l#>0+ycPޙpI"JP!tY^B /Iשĺii%.g`=rb* $>JLIXxm+/`dOO tAtD yB I,Jf1D| +gӁ)2A?}!Tb!;BpX:8d>!۰3 Pf텸UFĺJѐu}zW ޏ?韸`Bmž8HKݒƪf0!~/ELmʳ;$b(/נB֙jUڜ3J[j˷UEP8zd608m q@HZ<4y2!t7r'OQ: smZKj<" \lel&͎[^~W|pFۜVdLӊ5qhPާH-ʊ 2@NpMnvY^@9"kOGJE9PZ-5$#W<=>eƨu'Qw}VJ0t[=%Cbb7w|@=a/ݔ ^ CopYAOnWI7,xE95vDZA&EI;c* 0 A:>D˯} 䣓9;l8؋kZ5n3dc̖^1\L 4+S7bUa+Q+ Y=1?~KlKSdxaqnt^מR }𭈚;:WWz:ܡ\?59В ώnGG5f&~h':硋C5b(r[83uN49n7Ι8v(8(r#TPp#SX^J'&Rlb!9?:cY5S 0(4 a 1)Z]QU}1=жTixG-k~0V,ֲf<#cs 8d J05l*$*~5) O%w^~UE.Y:VgVt眘`OhiCdw.QnaS a!!8ha7\B NsZu" b󘱤#Zw;L o:vaݓug핾5ZuzLHM6#Ɲo탆|Z dd#r4b;d^sdm %N5o}]9JeB MYqW|:?p!m'Zڵ"-C!/um7:lP( ٓ(EguB+)*b^'?C,#{ ގ 1)+e$)$.UeMr".3n_N/:q:DQV'fi,1K0{TE r<_0iJyJ~^HOv[0*g | E;SܡX;Z1Vދ,xn½ҍ0Cl g6XO" VUNIn0 ~X1,! GaZfMjo~h,hG児]&NiJm|"Us^MRt-r)D)/o ڟ K(TM=!}YiKZ&qXpU0xRBnLN`ٕHt  Y`JI2JT rYX0jP>S t){}FF)x7l7{ Hi7 Qn랈ߙ(cLd_ qbY)ky#衆ߋ8͎tk i' +wq`D&L:'d[/ g`d `<߮k9Jcp+1ѥ: uǙm`E|20#OP8c:qJZfv c<\;Q Ջ R7_z;"f?AI\ `N@ωV[dR7pS I>t䆋Hp4D%lH~RP2e|O ےϟt˸= _qd^eGB2Jj#1ٷ H1`6"IS}~5 v ڦ T+qaGf,d@"ګpj|E #G$UǤf^G'Ԅ$Ra^%XրT9čr7RA xMp /{CCxV$);$Q(>. 䫑@;6~{s%VfqBhpTm1e""񗀱5n (Wr![5>|xՑ`ťu+R`F}at=Jە6.ț"ou";[.2ՠY{] -43_X!B nr:̚T$ךs .z|V\,t: -IT7' 5"l$9|>34R5'\ ?RZBR A'T%T4 1a-|oXſ5dtFvّ0v/-Sy+{p-Qލ "x\7n+^b3f<5ZyΤ/ >gݐ#&Dl~×YgĶu;)5>n6$]?"owh C7=|%dt6h<7Tvi6=퍐>f5'CҔە6ʶUJWր Al%M`sGRÝf5; QTm+&3!S5 ]%`|rb@?zax$"ŒVitx)Zԇ \ KAA)oS-@@`k)ƭD%tptoa ^βW8dYYW؍?`^ }f#U]1ƋUgk$N5 #ѿDT;T_j;[gffL_i'gªM´YPdL|zH4bisҟy&{)l3ʱY^?zM+㴍AExRfޤ4/! ד|BuI0N) 皌Ngƒ|at0A}hcf5wW@<֍Qt=ԭ5&4`;f&\4!}麟^0X8h?a)Ea @+;Y$ /6p%AH;,.ޕYWp\z ޥp?h)°V[TiYI0)5ysOLtT!ZD`#>7-7l x%x>,-̹yks-CE {<>O.'N_J`>\ X#u%Ume ㌁7O޿%/i8Wwpuaq/޻^{VYX4Ȋ?~\X}R`40¦zT,iښk1ѷU(زF>R@M0Ǖ܌wr0Vv+R ۋbN}/Xgjl#ou9]n|Q7Z}fúDѺ!=ܰѸ؛2+=xvBL=p;vBNoZ*BVlmV2 lZ,&Z4R myN͈5(( r8}MD6uLW42Њ~,̪\&q☔g>k] B?BUAšx@{.Kߑ̇.M{΍0$x{"c5rຕAT{6=2"Ms^K1s($TwP`Waƒvo.`J_IAܯȟWWz'֒ mQ>΋>+eӏ7] )Rnc%# Wv p}㯔]Td*cy!ED > ؚ:WfRgJ-+cȮQuj w /fϖ,xOʢtW5Խ9 3 LSP~o&uDA)H 丗DŽlȭܠw6%\)CN-Y%a1L21|_@#Hdh!=[zÕm^HҴ?p }by:gofC%KKGH9\h3!˛Xlʞ!B{(eLQ 4ϛ@YJ́T|gZJ H|6=WDՅ"B:wRtF PSFw&3vY(N$;,[{I-xyQ ׏wWZa \auc!]Ïtũ@j5ڀ ^7V}|- ;&(Hl`d;&QFS?_H\?VZTe%4!M?#F+j󠦂NI řu$,$+j`B~v}6F)qaWe>.Y@|t -Gq^h (zr *n"&VX]4},{~{Pt˸A8z )ËB"'e`~ݸTysGv%orR ct*HP9$sbql ey}6α>Ii:Z#L8A#_~g;Wy+䝃ъ'$9.n< pTv z5sh{⊗0KİS/aԻ.igvVvZ/k~|ĖpFOZӊ<佗nF{yie]~\GO.(Y*(qEwUێ%uzKmO~:;»S;\-^߿5\K{=5e 5kLzjT9i pKy>mcSQ~[ MM;=} }ٵ٫nЂ£@MDE6SjpRSu10eכ%5Us%7X5wKٚqa|s ;+V-B =g=c*Gk1YYOH73sC9sy| K$v3+ (BkcۇrΕmօa\j&k# `]%zyL[!)lߗJ$B_/=)qfA(z>Цy`Yk O.,i:^v@ u >(C6joJ+?u1>v²!vSU%oӲ"'s`bN VoH,u;3:Zbom'abmXFKXubm]:&pމ JqgfG@\ }[X7)kהm30,iEG@o키Q4}pRc#1JtQPvDlۢ/wmՊoRP1۞YJ %pZWY$&yxjyNx`Lc,#{^JhPpWl\ɬ-WƲÌ̔4RßxxZJ`;M'6ޤ8ea}X>)C@KyE{R)K h-ʤqvhSg2?Ad^LMd,CZYK D_F,E2!Q 3ޕ.+s(\fͅcQ0 MP))Y(96Jy^0&0lT^+Å"~ _KQ*^Q`H~2EVqi۲+-QtU"*k̘jYPygX{Ƀ!x]*-LShY9YlfQg I..MPgp?Av.G [AO߫ f֤֔5^g0е4%g1",~,Wxb +M`y1Q9L̽85n@1N/1I9`-.lmو\[-2ﾡ e"o-KnSghɲfy ,қbMlҠH T{r7CK:5\+$k bۣY@mE\cVP6=qaI~\{i4k/ 1Q7 GlϪ6,OaoN DL~K(UXQ 賗?!92}*#*%\~OLyIá0%hag4*c/IRi wt_' ͊pf$P@2Ԧ ;6w-}Qp~󆸺2:ɢ|}J .OѦHړ,`4z4t!&RZİ4J DDMmy$zz9DRV62 )߸&q\~70#S-^}-Qe"Pɮ8v/ \ okxx»x`.,gEBC 9eLc}/Y: 5'< ~wFMx(grMk%fX(eMq8v۵:w"Bq( xa|v%V`bH*SO\ReYD"g iK kJ nbcrpˠftD*s/bp `9XZ)_;"$A䤸M쿡 H*^sػRp{B H×` TgcWcHe^?Խd L2ʶ.6y[~M D\>n]Śa|<T+Y=A-6-*'[r;19\}Y]^8Jf%6c{@prj+U~3#iCYVmSl %6*jTVc;[B1z{dsʍ`FZwP&mP_{dH1~ zt 0@V_Pz.]r3X C JmL_Ϫ Ʈ -*';h"Π%W^hyd~`0z5޹\3 f(W\+2&{\͵b J +I9'.߾McGY8 _@4e:>F%pE]?gY4cPSGvLdt}s$v7pKUCS4swCMHo^95QU$jY (Q᥻Y [!jl WJ>z+[ŜH!A7?1phTjsK\).#0k,r]j"L41 V$O2: n7сl-T Blύ飪 >ORl=yN `B0qc}lmNk77Xb !a}|ě qb V6hrIҭf54wz ,DhT5z /fv2xm}oB!=Cw5xi4 `|D@Éȼ Xє2}>jT H.vEl mHyKB$X"N::B=,I ᰽&vDo43CoC\._Qf#'HMr}YE?RBӺԦUOYPGVē er0/~OwJNܺhE!߀.:4ol%ϻM(ï˾U׫9L n1K mS] yf,iǡ Xj{{0ZcB75j#>4SQ+?I|##6vcx]4mT OR$S`(31|򠛚c$^TLC_Q;dGIq$[CXc ƆAH w[{Ǝۜn!65MF 4׹ 8&#(v3b}!U i) P'P#ׄf+PeM=!P(icQz̪JB +2eY$57g Yo fÈ9Քɵ ͨ4L;- M g7N"WbUb]mi_$ Akqei>bj"(p5ꬍ1D!][afBS(d0k\C s3)2J=7m%^$-B?:uѶ*PH1*STtA9GDQ _)Ede3 VD(_' Y:KtZJsM.LYNLWezv~ p,H\Dz/j><8'7MezQ23[AAq+./(- /F1szCQCEi dzVy^ôlL>l,̛ŕBtrn#V~JږCg>lC˟h#I7 @7݈-hJҙs(e pC`&Z {IQr)!ɚ5՗~4I*#BDm?3¡zwȼ֚$VeL[ D{4ED *3 3zLH+IJl|^P}Ĥ$~&8 X5?.fO.r6#@g"T HM7PFCFC=Lh z^73E 5-z_ ~?_9&YHc˜T/ bgj5P(T~w1";Kòq_SHM6mqtZt\ =q) @Um6a./kiqe&FݚODzHkCCj̤Phj/5ړ\`lgb֘I2Vmw@ GB8#0Zfc)E ~Y8DSǵHǫ19eݣ~*ʴow_-y.⮑?|O:HqD3 .y4Ç猗9Zs~kYN 6?+A$* y#m;#ǭ ZvkXCt=d} 1iEp"Fkô~0/􎛮1Ezfޕ'Ӑ m4>Y7df} !`ۥ(kZk>˿xD>/. /l/eҨrͯ ]7:T^+{~}cvTp38i0yӘ5GZrQqp Hŋ8gig@Lш )c^nJ^f7SG45P.}j+s@Z˜i,#y:#IZ}ZpW!_` ^-1IVVS4+Bf+ K@G B y,0Yq+25a:,dwql!ߑL wjV:m,~x'RmʼYThA9V IIKIi\#J ]u98ZV0Ŷ$[pn(5` ߕpe&UU[/LWH=kzf[YqTʪ,Ja\,e،Ra+tB ʤ 3b79ֽ?>/DVwRRv[*_2}ZV(?;-/.u3pwZW5]0rer`~%08~[m49 N2^UӹD!Qd567rNv ˂4+ZW9vݷ7H |WkZD>d/^yQUkȜ^ƭPXZs~k"+Py+' W/%&߷1ۉDΤ꡷O+A;)/|~\Lz8l{j'GG46F5ԔD )5n6(SK%CN*OJ8=.ie6eE2I$/˨!K/<҉ 06Z2h$"%h}3k)bmTT>l:g)tНb9(z"菰K;ǃ7E,FWy93Ivj~;~~.@2́޽]يenV4pCƸ )?"dR2l'kÄ2uKV*R&;TU52xs{vg{O89ڍ0vR"K '_!FG`Ҧz)]aR!HSQ԰L6}w t `I:R7#bo}ZQ0J5sZC4/."eXAfX6nm@uYџ>O +XK4Q4WZNk%0Mw2kC+M$W"0:Wˆ#KUoBhfb[Za?ZVH-C3dft< :(:0@ S(ϦO?4DY1xt=sBb8>f(6."Mk{7IE-_睏OLnW~I M&~SW\ܤ?v> $]!AF\J߱ۂfɮ}Fʺg%Շ:zrUbV&ҋ8CO_4SQSɤ;aJ/7RNt޿'azEZQ?BY_e^ZQP}V}j &Ӱ!n:*}?qMmJ)+%G](jI_ QV yjLŎ_kVn7>Tiw-eMΔ<؊+{ɵ>qTUu< 1~c*?[emPU̸M@n`FLRf)^!H<8r\J=eU>Ȑ~}kC)Z}Hۃ+/2ۑ@K]/-wd/sV T]O2.~|⢬_u_}T޾2[ڔvv9OCN;00d( SLc_7%CS4ztD\EWpC͒[^SY vcN 6Hթ\@E'=y #qfyfn!s qR>;3ZUޒ:E"^0*=Lhhdz;_;2Q h[yKMۊn&'OD>iۺzs]3^\;JkXi-I5P[ǸX\Nz/vn8Tvy9B'Z1o.fԸSl.afF;AZ>@2,-ǡc5-r9)4ɹh !ڣ{;AhwՌ2梲sZwk2l*[d֒uU"vkuޖ H<kd}ҾmjmHFy.~8B-Ђub7zԃO8|L6fkP K׈r{T=^ՍU+X ʶ#xoAߒrTd nLg}:IX>7ΐSNuzMk_#,?NdMVv46!}B9)w82GƼxGjԢ%&* ۃs3΂蜅 0%lNFWP#]~zrMasy2?QzXX`ߐ@cޤhg6\0 |l;O%1Zlt0ͮ 3/GFf "؀W7[L26PD:4.lkBR ژ[-ȉr$gn%9:SvWXYTY\qh'&+GbQ=mfr y9Y8ӑu:OK:<^N5qtN͏]4UPΎd1A@id_{{+_rxDX zcJE`.h/ѫ2*:Ȝ0Td#< hYc-A>'Ua >gySp}X2~?hӟU,#7E^S7f\,w \^Xcg @ HQ,衢ZIyӬ[rSsy/OcWrvVږ& +{IY*,7W,~\UHrq&Ljȍ&Mt}ge0'ˠE5ɱkr.>*yN~ $~(W"J@wBaB'տŒZKn c0&u=RH(*7"kNg@1U Kĵ䯷{dV-0 ƀvS!T}1ȔHߜGyxho0CTONv=mAGZUKMmfpȖ,j١ kYz@NoE\CnȻN9-RITlWkbs-V2kj%oY׆-Z#RÊ^4_GDtAn#vcr4:B$SWU@}67EYׅj1>-7P?OL}RXܠutyZlTxE Ip'T+W qbns.}(w)jH{h~,v@mQ#VM 9$'^L7!/e!MUˤ|#$,7zq\+:zyBYcMye[;rdeNoueWˬU2ކ EDРkm, S€%y=9Uv?c0^wݗ(f}n jU h8Iiy; ,ZMF䥚 ѽ|:gMb=|mņ.h+@Rt޺?O Xe&QLy xw$L`a%& #(!)Ύρ%6JD{{eSTtEaCU>^ܷ!EO'_u^xviЪ.^{2~_-L"7C칖ac1G6z $X9c:n4Z?p5|ZNZ  qf-gC8G\۠{V{H)@K~Iq+9&gh@p3qGZǬF~GѶ$*K桒5خIriIxOy4\ai`IQ"[-h[ƒ{oP@i Yնz \o*)5'.X^'|) =ADa5R#]zy1jxTQ$~x@flռG 7wL=[֚mU)0 O9tӯ;-gWC:*3B+,FYeL6vrLfc&eSO=TDr|  :Kǭh=WV7z)eJmo!#2/q}IVd:T-LM563EY&%JnO(cf_Ȩ$Q: Ss&h+Nvc[*zJE5e9v9O-8h _y*b8`/QuyfHlǟ Q ɑœEJu[|CX?犕t(-#W3#|ИWs0B$ lH.jdԙ-G]a7e'׵OƝ)"$|REg*3NpL?>8_to{w>9ۗ5:%%4|nazl l0Ԇ>5kElID$J/,7GFxkcSra $uD3zlͷ_A#WB H.UE1E%vul@͞cV'(fA@vڀ 3nީSȹZ' JPbeѢ4c=zB땙:ƾư<*D L0:;ሟKw ΨorXz*׆S\O}ѠT![|Ade˃!OKy*\c\AP/w![2gDAݐ+gͺ?29G%OI/<NzyST.NgiBtߟK}E+ZuӨXlwFbMDM;PvH&)*-u jav2^V9nvw1/&24v=iR'@|;,,_Nl,{qsQv]e  m4Fn(uMN0ݒOG7hK%'0ym'.ބxBz6!ZGo _mJ8ijz%WZ4 d5O+}/vZ*˟H{b!4_1αrܕWjK\G˲0S XheY6ndRcA=.s-, 5-<+Z*'3 Iȹҟ:ԂW(vS98%|*MM{OTwjDsOx Xsoߴ7ͯS/뵄Kφ,o- +V k5rx$Bx.#sư|[Vօm(kXPF IfR|)NV67()/8y_ro2ņmYOY?>&;Ȯa6J'/f̐Dn'|Ff)QxJQf_ny%.q$S؍?A<\^@\@_ 7W2>6dwE=zՁ?)Eـ!]B$__/^cJ_ߠ hG a݄?%=vRo+zReqG Ar/;dxcߧKaMTL9Z?&#ju>n. `j?b;,$Y YF k ώ G6K,vQ.}m1ziKsSO:Wc5 }fqbg@ׄ?t,kkġqQZ$pa_F5O+%Rpp]`Ij]LrRUy%bQYo[BQڳ[gec>`EZ˟kBVazn[%tT7ǁc/P ECH0kD|7"em hFQۑrRGdiؖ(o*6%b.txXYp$e Y[x3ݘIV'>[(̄-Gƛ~ׅ>O:\w8z&mZnaARexC{oF89g&9>Z!u*OڠRL#8d/09?\`5qYOz ّF[4_|y]nx_]?K,J2VҴArE620d;5MJ *-X*Aؒ3ZW>!3I@d]26iT*R{:2Ox#rGy3-hIZ\'c[ZNq">ƮZ)[1ܾqv ' 4Q_QFow?j'"Rr.v&_~S 5i[gcA'CڱtX@i;)yydU B&$GDŽEԍ$Z NrR 4sg2cJGJ8fٵЋqNoe}hgW=Nd” "6ailZ0FհՃ2x AL||lY E+JgPՆZӔ"2OMyYdAuHK(5%e VG!N]ABa(TuoeLE8w~{#HVUe'ȌcE>6a|UU XJ4-':Yd=!!F۹ "!ֻ:hxqW|kYʑ[w/<9 Z懧! %t;GtS7!  8p Ⱥ y p{?JEDPŭRt*JqF00Lb_X(wfO g@T\8 fE~nBMYn>HA&-̑',XQ)fP9PYhRt e?Lpj\ʭt^_ˡsUqE}[E蕈.{=k3^!`#@@#yrt&]Q^]S'p)\dTP$B& IqHQ˼~g&tm44{]46M ( .뉤+Co<h C#h4 @m`~8\i, $py0QzƉD ܆xN;u\1ـoGOJ܌x51}CQG,@$W,LK[l&/?Pe(;Z 9;q03ݶj~yaRraMCA!hwf4 }>U1_PhT2-w̱ⷰ YW5{lAd)'lJдLslؤhMrPx&ڹ$;aNJ "0 i9 Fg;iz0 jvdz?Grٴ-wX䂣6L2PS׮N::l_AO3w @kͯo_ebap"pz- ܓOUdG-+j9;(vUy]Vkcš`ڌ+6HV\&^q]$X|Yhf&5DTe:h\kPK\ l+5o&S-:w}]L=#8)V-?k,,ןj}njɼ^%hjY܂!;՛mwfyU\x7'-niŸKyjqzފ45/q733b i ^4ϋq^d0IbGe~<(Sz8 99gX33otJA?Suf}?#vzGNJtr@p̽O~+GvP=VN/8{i1]ߕ5.%%eo~Q"+$< ؜[v,lQmWAY⤶#2֘r։ybU:`VK(@U/M;qN0"3"PEd~}^֜aԤ{B:Ha4@w?lfӳ8>jDX~)1cnT7%I@Tna?H=^&b|uh(I,8{wg׃f2L Bet2ATEa1 ruW󘂍 $WA#EfIP˾^.o廟}IvV Hi%oK|1lų4LPceoRQylD(~?Ryթ럁Լ4]tln}V`#_R+sŸ!Mk|^5'8' OV]<.P2tA҇C'y8|`rh:?妶Ȫp=0㙹sb^)9^@bE_)&54MC]3[oeoe*/  aDmoDDQ31$if )-lD9b/UP7kqm)Wlk}(Ep5D w叇yCid=<軲(_T^Īr7*|",=^+9Jy3֒M]uN]Z)^mG12~9}d:NJȃ eOFK.]@ܞ}I[Մ@mPkoN~]G{'߷9~, +_0 L:oF=rgo.#̲/6]Z7Tc56ܘ:ɱ'̱Nf85ʸňg_`X,vF8I02̟sR-1 Jui^^uuϠ+#6bi9 078yo R 6цֻdl3ZKiO{q7#J ';vĦ03M#d QJD1LwX̎ i=_y\G)1v69'UlD D˜_Z^>m2c( }N&? iq9w ^ZFb)bSe \y?z}"K? 0}/0UW>WaU8FL.vCXݽF놙e'ؖ yz1SrB6k7UծDx2i\ cT RngE5J%`/YNұ`suvybԡ}­1Wo* h#;:&T"s*͑c:;>asH/lӂB*f?2{%L9_>ݍkٮL,䣏뽷Ԥ7.9K|yi <ԒnvH5*K(cjB9 /%J͝| tCٟ|kY^ JXD,;DpAEy`Pkl8٥2Twy0b;&:CB'.'a}}Syۅi aTjvcB:1q9qyMu]JfM7֮muZ]W'rG.LcN,M=?^H-N)<{Ia&ZO;..X+߿}DLxqcࠏ8U@M|r|8#޾[+j<$ 4HTpxL<80l?f,Yn1-E8Z9XtnvL$иQYF21`LXaJi%Z=#,:+[s~tl}h/-tnߡbL;o/;ag <4ۉ\{L朞!*;K|3A@P ]5M=GpAbyٟ=9zlK{%EyW܏؃WCxdlVt헛 ?NZY(cr`_T"S).G >]O r#N"[kĪ-lύvȼZjOm*>~oa:ҾE}%JŨ9W{@Y/ H ΀;[wlnԿrocL2  zθx5\BS2zjsp׆"L^49JSkY^^Ꮃ2^3Xql44OqӅׯ1MYV<iJ9Y90M1Y_זР2M 3\. @dfL!8기|'%''Q)TU]Zy'`qoYKM /dfCXTCg2s pb2IJ[Ӡ3‚Ak 9 ds횢D? G;}>6$AS.Z}J.< _! ~͸\92' C @%}6eNb,qޭ$ ogHXsܝw`r̤Yy׵zi j5~fBiyIOtuj_0*9V`%7URN lV5,ޏ.u9WQ`)Kv gtcD\~[I'j0GJƿɕ֥('zCVu]@ 9 RmO%j{G9ibl7`"'R` 500]u6{TDZmd+:\+y4b+^h&u,D4DUp0|cY~SdY'b:-O( K6ht7'i0Gʭ^fAOdp98$l.wu\d GI4悬yՙ΀_4 1GFƞjzgua:m}02yPK9P yU;1$`Tj 83okI>sL)G*:̦)i<@wޛ>fSNg<>n$$Z; i I.wL{R+map}OQ2,*_Kb7 :"P /j.nY# 8OOd߄9a.N?tzq NLE%f3@l掏םI_ՋT]-x H\xMAraAfYk5\pk |2$\=Q> ߽[&mP7ܲ~JT7U7s @ԝ~SN6 ij̝IHG^r}m|4rp+ىGbYOU}g`sdVF쇲{Aa ; N[&ɝglT`?wR)q.m Tv P,}F׏ւvґv ͿUξ"y?2|/} {3+,2q&K$r M#&[TE>q+,  DZ}q:3HƖ r#(A~ø4O(݇Q>*ǟS3_=4/jɘ"\>"՞ˀ=(l۶8~#ŵy+_/SDX3Hj`LV3g}I&ReњX+:ʟCrr7"}, xú V-^2 ]۷o#J~bw7BKj,Lo@CHd["8DTu2i[?Gwo9SQx w,d*ſ4myCw+8sqJWy͢~n't:aG~~Z܍o^(Յر?^=ͼED%L~?3vkSMc]\SfSE\AhzE=I9``؟!ߔ1Ϯzۏ)<:,8G7NǬsҏno{#;p/<KI7U,WŽ?MI̾TDj)4;bxDʝT}_^Od&M)aQӺ"j?2;^36`X%yPq&Fɛ nGJ"D9]|?dC scI.Kn4+;AzmF;Q: Lɠ hlʗRy]մL[!QE?=Ϣɿ^TKkp f"^׉|(.܈;JHqQW7*u ϩdq%P#Y ]9@33! 2@:=نTj8"h:Leэ(BBrE5֣kMxmգL'N$RuwsQR;( IԠx^ `jL_Tyf&p;d_9(rCoN Ċ%6}S"MZflg׾3q^nRiDENu-Ꭷ(&wJRէ%"їk~%r0oUQN&Qp*lװ 49Jk_Üym昮H"g;Pd!'?t1ٵӟh`Y8jږ)*Tr-뙬y_͊ Ej<vL"VbmK1˻q1 "{RQ"5VW. ni+"Yʼ䄲.S<|q!<U-HV*n*ňr+Wyq5 ~Vu_ z@L,KNf.0AyR9(\EV_T~>ysHrT1fA`j{#&C!z'P]^{+_GZ%;~;]Ca<+J$7z 0'~3y!a;+/`~}v4u.6H9;ED]I,Q+EԐ?=OZF_%"!K6 EШ6s@Řb㴛aurI봩BqpWC9Vi/f(ڋ3|hh7$j<P3SN K3DBHӠ9Ȣ;?虡4[TQ_2W%{x_\Вѽ&sS &!Gd9Z6R -9=qDEKj㩍T: e'g*7GU9aANݡOiɑ/OfǺLVr9#eW:C(PO=_ɉI/:w.!Bȃ+/Bn P'u <1vuco'ñ(hi1Zh7y O+sj: j\,LP~m3%yHxpF+@|*-7ՊR iݝy26q S:i'0x-Wȏ+ůbh7*j̜ASa3f(=;ySnP/dmXbBEfGkzy 1NqX[D/mYAS,Fʜ{Z\q,Xzz{4yp MoS}B Ā2;XR|V o٥Ԋ&ғNӏ]gUpiVg>}OBĕ[nFHKM]O){Lnһ8Rs-8B=dp>PcHǼq4>pĝɊ')&0%T^F {fΥt?tɉx4Zu+LTuxɼjtF'un0Q\>9oߴyCÑ], (.Dq]K:ѫUCCM /^_MYMdbiZ]` Ա3N2܋vy1%'g9QL`ʺ.eTY F1&GX w?u1:2Ч곷Z%<ӷL;@ };ax+qڅ.=R=O*[n-=2v6W~7Jh7C,4[o~t^MY韖9# 0]k _F?8bcƷ@ g}J5/df,80? v#B%\z+\/4C#\΋IVO ?}Zqċy cOނؔ4V80/n*BCU _ xhr;T7vRvvR<72WصJ J+7[)ӊilMZrV|ws#hr3/$GSv: F ׇʱDknKU,-LmIv\{PVSj=up} G#M4q@QBf7;.Ygm> ϨoN{˚3O푩i_af5HK /?zY9I/M ]}Σz$:!KPG@O`y=T}#<&]g'Cz1OƜQZB1I(Y؞tQ퇟6'b[c¤p9ߓY:4ӪT DEԄ'8c@xUo(fu1f"SV*as#g #犢wv&-brїi5Ebx%ksjG='d'ɡ)͌MlSXe"m8jo1ca*5l!sJRd0ʟ+)g!"eL ࣂcm Ɩ ??,‰`2]q6pɀaXܳ"w+3,E#scUJ `w H^.Ʊr%lN{DVH(#_vQq6botqOFpFpF&"߂Og&o(ћ.5+5/Cwheݪ"r20_t!썎v`$HW0_XڜY哪 TKbv>n]"q ϙQVμ]`Di aVo9y$˜\Bq)cK$rŒ4w),Eɹ!Z(%F3Bz[5iQr].眞]A|f$14 WPsCQg֫IE=m)r-bEM.x@HvvC&"xA$$z{l`.E`(fτy{,ZӶ&=%Ni^XkP9R=~ڤV 2*o" BY OdO3U]5,p'H}8%_9,,@Ю|2qf! EX|uqmE!pۊBʼn;l@{$e?ɍtG~F.!' :]BYqZ_/JNJdC(YFXFD)!3_(+G>C["q¡{dvdEM ]h.g[ߗ 7Ff'zV(=2.x!(#+ DLjX|W?u!(m]Uj"v|or"~. "^QDATЮY.H8#P+5@v~zwH2iT(pL woFATƬޑH0P!J `WP ʹ2>:?VSAxZG2ꕹ#bR11?\EWFCMԧ8״%oD'ϯMxX->6L@!mYv  ")!2K#"&⇹`L'3eO3M_ 9"J#!* c650g*Q\KEҏأ?'B&ʾ-9sC.B;3΢&aq`] @]H\w=֌ߗ֯yNm(=KK|Ĺ* 5RI i'Nc n8oi`[xYZj[a+*'LI<͕Y\ l=6%>{xQSMK~— wJy.4ZWdqHndQ *H2d+ ?Ll~$PlUˆ>) ́v }+s.Gi/taI w'ۉv?G ;OBsKצd=v7;M0n祝/#9L¦r#\9.zTkJ2tԱgn1g|ˆe=Uat/}ooLmxoV5 dJSbP5^-gaI?5\K 9CWaʠbsY[u:n-&eA=h|A^okAus7\,_7nUۻ66&G d!27{cojE9|=qB1{=JSt奈,H~icKYT$U?r3C~aNȆXt,^g%B{f~/ir>t=jvl@dMt/5˘Ho}"B*U/pU|~jU;[>6fP *~)V-j>}7n;~JVz7nA|޶64^=wNIwnvEդj=`fQ3WI *]S_͗cq7;(yf2~[y+l[wm/=_)@dr:'DDV^F/_nW<jWzEg QNtTP$k0gDGkqް{ʛ1fpWdbp9WWbL<t\ckϧW+rٝ5o/wiyn}Au0*eb%qY+X..R/w *)޼C{:]-׏.<֫ׯmfna;SbǗֽ2]S쐄)ty!aH呔H:L&3_QSWB+GސX;qF7 |A8d 3꭬H yhItt3ci[sL۶{X,wxf;\gGQЁG!"~y#ݟqI?$5'M^ZjONfϤ? OadxJTXr 2=GW+V;m>SEs$umȰl;hK\ZeVM| ԕ>2K>_̀U!3 v[`:e:Q@bUTY ;>$`Nj%;nHS)=2 QuW?  =JtID=p~=$֛SwrB]^;gÖS1QWa_vGD2oVkݼEI?H's'FLF,"nhuSB҉]yTe= V%|"׍H2}Losg}} =i T*D;&5C3ge{S@S*8$ә nH|4Rƥ%Xrju ҚU|rY$Wq.ÃEph 'EfytW\C#ӫqdqCSTV@ɶgs4պMMړ { &2{c:ky)uB5R K?"}JMkVl7TP27' kFy\5P0b5B-Xd3XLYSg_VQHWEe#ˉ3J=;Ukƣy\9Ҧ>t Hp-ߧL O(HlpD:1Enya{?L_Z\'|egǏ'*_7 f$KT('BQz.qδ'w/qor-nb ҕXY#r)^ѵkIo OH|Оx[HX m<3%(@19'MM'[}k#[L5L` AnH`$|qz*uZ<peNFG+Y>R&)H"g5ы&ujwpU1XXeK"evf%\:X5OsFzYe\jSgɩiDR^ r MKܫ|˓Ca%PKx׀^zac26zz-4Yg Te{3FZd)I5`aбwgEr-8zsF`X",8R&Xh}wXtOX//aGḣLCqbV}4g'Ae)V"q֓S+*P<G8,*KʫmɛSl\jVq]7-&KbSkLv:~|nx#:k0H[ ";8jp@w E%ᰲ bQ=aܾ"ߝE]x?ꁽI]CUX!5<)ቪBfV~(RsdwC6fzЌB,yϪ ΨBKE/[jmɽիyv#'zdiQ gTwte蔌[3VYZ;=̊9g,tį̎> Xcٺ//?@%Nb=[nl'{륈`3wdX-)hFO=X[PM;' 23NwOqK!8WuOk 05+ቝnE,T:3X9}TL=& ɨab=I6S62Jȳdy,"Pnu1o9LF.{QBi)5G⽙>=.zbK`j_jv*sg_G'(xVAp;e+k(bqϲUT sS#H]l\+3Deʂ'dÔKe0hՎn#FRrxx:P;)e3ҥ ˯:ZHG*稊Ya);[Kv̿y-pɓR F .hix~P޶_  AGH qod _^` 6RI2(MxYy8cY"',jUNЖbdxhbɁ N::(Z2hVjƎ!ZC&o$t?2z&ViҴQ=U@ySoMZ13oS!wz, %2f] :𵴌Qk"g <##کNWI{4Ԃi! ʰnr1" Mع&;Oj0NX.z`z ­4˷[ޢz̭٢/$}Q5)Տo5^bqS!|s@kg(^8Hj[|, Ե 1&N8fO [t"[^kCgX!3XBV{ItdMrx* ̈ ޣJ?#\ (AgR7"^D4leFBkDn6vl>VNc m˰G@m O7K^80elѳ>iA5r5OL䮛ހ8ʚ%$yfǶZX*UGxg|?%V:%-z/ pk۬i#%-igwxqR*;<(~| k(g]馆Dpc C8\`r Տ9dX%LV8+L!e}붿.,y|ϧX*+dz^Q#`,–Q,w6֩y/bEza8Sۚd"#u&G7rDV.'˘L|^G()`';(#bjI/%-##Z3_xh,{=o#lgTLFm+*_ AΫb$Ƙ"٧xƛY<c,a!jbsb"#VeH?I%4>RC]rjAͪ buu1F}Is-hKy7#B#ҩmt1Ƃ6?ڃ=IP=SI2EFkeKC14vc-31nʳߪz*uT.|)E_"5-@T4ISK *ƚZO{skm}m|G*`[cpVi:cA;Trt}1FVas=GEWx92~'\M\ȉ_9~GI-(ZWHwڵvAzT+j5+sN:?CE.bيn1h^ R :9OYf9ZA,׳qFd4@Pf<,@-r4TJ;ijȭձcu?.'enud3F ?  Κ^ofZhNuiYm: X0T2XYmژ vRj0x%xV 84j"Hadh-Kl{}1p_^OLf6é'LEHak&hu !}lW0C aPjpD=Nc0kHiƿ)(KCq\I`2PmqK7isO.xYa+G RBEES%ʆE%kĊĤzU:.et|EC;.s~KFQW@)ICaHԙ/2BQ4ävB zcqPa("òj=ESW׻{>*]/K ,pyR3dh i+6d3n)7N^>  QڕiA99A}%FL򍱱hH,R" hy-]0k~SGOx}|P nYhڥ)k*AN'5!OF<\B]լւQm;j-iR1dGr!QeF%PTD+-IoZ u3>˒TSo| @O逷-wGֹIFĐTP o()pn  Ï 9X0~0i>n1 '&X8xJ7&0nTޚpr%\Ax x~>ȳwbe+4gI>7zrAkVh8W<-뉘SE&pfa:<>mݝ_I^r aML )?|)-zHp.O`kPhYShzԷg= ɲ( q\M npq˞2ڳFCxG4@apйDS<Ny'dȟ)i_"q^6 )CVQqzD`iED}>i'A'^~$M3t3*&Fj7KC@As@XuXV={~G=ڐ`I擬Q WO@gU\(Lb8pbR2O,*t7低H@o엑}2lP<7m<xo_7kЯ <8w~73ea? .>7;Gߥ2Q2Oz1_?_Y5^FR`?K (omR:ɾ`P-<YXޠ{+a{ xYEsqA=gwFƦ!z0!",&q} X2ۻ߅ + ر6uJ @)slк*H ȾK_ j,&c 1J8j/B#,Q]kJ$ LP;,0"Y@K, }5aOEBYsQ`z\OH i8rX>PjlC1c-le>߹Ի贰h`Ș+!nˊe6Z>c:=41^ Gd/ XI2b dr*ofXNۺE@+˙5Ӊ >( cԔT/ c4h2܇ ^Up+qQ׸]7Պ|o*{Sۛ .59]tpk1홹Vs:QC5Eb;XC<' (en)CQ㊖ GEa%U%Ē?M.G׌.FSרLzs!1LKu^mn9ǓJ!wRKޚt|jf{ӶZzFP 'Hay $$eM7:˝/L3[QT14r(ʪit{eAŘ"IV40-q=r É )nkSIEzG#v(kaBjR7Lkύy;2T &!uôާt"4WSh &4R7LkF)|s%$I$IxRxsKája2mPF[/Ls5R LhV#nS@$I$It[=TU ҤEk&!uôAp[ @|m 4     Y~J  v ҪFe(²j7b @U8`h?:Lv$Iffffր<IT@RDDDa Rw sS\:˴%2]]p>lA@} 0fnFhCWIk\\Zg+4_spTkZ؏?&0Yęi FG(A h3ƦE~]bRrJܩi!Vwi8̏|hx@$JjaZ)VtԻ(/,}Eս/N&jsquvx};㏻Kd(6eSfQeX[-7F Mb3ʹEm=mڥ9n1/iyv歶͎\L)!cob)Bej_>T,)41jN/?/YM#v9I)~ǞاCþvDU]bK?Ah.|Z`^aYךSf0 U_ zMzgtvV1z-Q'0瑛u$H3}^5H= 'dma#&M(@ I55:dT١ \'aMT֟FWc-/^Z &Xb-?Q/gxO7Pr#RߪtR_Jv"D:YztYCSRRFi1ԧbK{xP<˟?3HIp5A׽lu'Zo˃4E„f9Bieg]qҥK.#ΰBm QI5 RaB!uôd2bX,bX,bӽ_z9:, OXXY+2$@gџ:B>ϵ;fn m7GoKo6 &LG(B8Ɯ-B0b8AR4r Jr:xS'4P4r :D)"mMذGiFG 8Om␳8bԥI=~f9?˲,Zr0٨hj|fy3|eE3~'|I%X+! ۜۈ <yX>۩uzo_VA)BDgF"U8VC %PzAQr~[O]o3M,%Pn1)(cFJzVm3Gpe 9DE56PGo5I-Btrb @o`k֚fs]r9|>.L&CWǓjB 0?R7Lkq#pTUUUUUU+<-U:Rj돧X,֛GENWr\ݎm۶vqc1$]?s . x{r]H\p|a/?yIS{XL>>VCM<!_fKMQh4{f'ou9.@AL(Bq #($E3, $+.aѽ2ӭx|7˲Qd0I @%YQ50c>c. \Hut@1(!KPe ^>T0Rғ/ނ5 3]Jk>pmpvIxXWÎLsV, n-[ Zxu"=3*h{BFYPm1 dE Ӳ#0B*ּ+x3>|$$ @O>X($I$I$I$I$I$I$I$I$I$I$I$I$I$IB$IHb6&V?哸}&\k:2lPƅ\il NZzQ[ЪlͱW1ԬM UA($E3,AdEtWff@8CPC0f3 9}@x@(%徥jƏU١QgGO8[?Z|0>9Ts.m>GXb鈱Q/` t>x<-Q'a^r!0YmaZc7 U~4]bF  LhV#nؽZ*(((((`@bF @0&׶K _ DDDDDDDDDDliiiiiAdh{diiiioJ VUUUUTH$I$I& x I$I$IJ$I$Il۶m۶mvfffffffffߐPj0fȇ I'bUI$I> l۶p3^IG 0m5vV@UUUUURJ)RJ)R $I$I$4c1c18>$I$I$ٶm۶m۶$I$I$ UUUUU+>B@41Vb AkۅJH0EP x _V :>$I$I$%I$I$IffffffAAXVT9s9R]maYQRԠ ,+VeEJ?"""""eEJR6ZjjFU+533333K ²j$I$I$ٶm۶m۶}kO$I$Im۶m۶mC>!MQD+@Ь6GH0M*I$I$I$I$I!9O(X&!uô@@`O$I$Il۶m۶mxo*U$II$c1kZs9FMb* JK+QZLHQZNHQZMHQZ!b J+) B&"AVȦX$ DE(@X$ +oUU$I!9;T@RUUUM3E1AV1 @ |!Ç>|k011111111`jjjjjjjj\=[."""{1v{?CLZUwkb7K xH YDԀ@ 5sm˕:,Pe}kgN\3֜A< ]o&h2wK爱Q/ON I^mTV.ً=ZJOjq觬p{"r0wTʂFXI2AIf`}"%}b>PD+m$d^o~Y S)}{/~3`Mj@ނ'D2̀lN^К߄B[v2{^3WL8ǜp >.sq-Svk|E?n#K\VTM7Lv<@$JjaZzVA3, dHV40׺m]d &86g/.x]x\@n+wkZ&E'CPt>/0!E3yf/dAYP髎F{߿y;f C'/VjE@%Z̊s I (Ɋ˭j Lv<^_)@P4r :D)",q,H, JIьh2[6Wz%(TUUUU-C2 vn?sCMb#VVM8>O_$ @OaDf,ufI"v+!MU![9WŴ4@`I#콌L9!"ɸPZQŠ]-ekރcv>:ij}׃e2s&|}.hKX~劉ibCXQڝ(Z١=VHOpa1-lfOed,$}y=a@+I]ʗBvڻ~dϗ߯#|?TX thLj*,bW$S|{5e[KhunJR ٭gi|e]M.lORa!D!rE柞(Ƚs&E+yYQmV3" ʇ?j[CH/Kֻ NwMXD|fԦ$=b_UO }1*{SVlOM=nj=hϡwfmog3#kBKy}q̃™߼ѥ1n^Cpڕm(9Z%`NZX^2yfWtq<_^.M25u >͔8g !$b-W*A#4ptq; Dzk|@Na['X͝"\]TfW"r_ЎWcɆUr=&V_dCXQz)}+o}ٞY_]P|/o߶hB -zb8Y{s^fˣvvɜPX'H:!lY ^ f'^i-NdJ@3 ,")6MÈrG4qĶ*>Ҏ;&f #Q4靠abA-#^+TLu"#|Nƨr}k õiۤ0 }W,S0l[ m^oEMXIt,YݗmRu;4€i8sXθ͕0+yJ)隋LU\#jlJɸ!ӟ馁)=2G6{_o8Ot!(̬u֐ġ*0"\pXb+NAbxH,E4 r:'@^"D+H ,Д.,F|ykHB  C0$Dshjhh.FT0y'\^E<fo!Եb##1hܪl-duJhvDĞ8+yq'_V ,MX̝EU|)It"IWUqӝѴHwg⼝U-ηnͶnÎ{N;뼋.꺛n뾇{hCaX*UФY05& ror(xáZ- R8-·-nC An;z'W^{wl$EDE%5-} DHAd rDLB!J},a f>&&Tٱ*%G$G]D1X DBpy|!K+K, 0 ]D. yK[DPitpy|P$HerRhuzəRtD'Nr)3gY!_rku)["6-bK:Zn;9xFw/s|!dqՐ4SCɓ J*3L=R9Fi*]#U5xѯziA`G QOt>LBX"%.F&j;]\ܥwKWPTRVQ_[>}ן M-m]=}C#cS3s K+k[;=:9{\t&La9ʲlYTpt2, /n Ӳ5 Wl'Hn+( @,O *`.L*K^kgEqrv#ׂ4r4UשVdKh++-Zkh2['gh[;֭nj`ݨu^neo|2 (A!P4pk?iEF[,[ %,֝2. ӲR(N,/ʪn|"Ui^m?~ެ/fceoIfXDIVTM7Lv\(N`! 8 !A1 )a9^%YQ50-q=?97i4 ;~ΗXYeh#Y((6-7ҤTkZ2v tiµ(媍u>Ĕ/1v4ˮj!˜ KpeU4h<κ^q -,|B=~  $ "L & Vn&R\To C08Bc8qߤB*H"SCF,6I0%R\T5Z`4 a*km@$%7S ce5-U|Db}CDIgMVy}ӄaͣK#Ƈ•/D^@d(>D"qmG`ԐK0}Ke݅gpϥ~Iia{T]~U^Nx×T{DUx!3NyIj=¹G-z"ڈ uaBq!)D)@Bк"""""z,'DBL\u]RUi0 B|t&   !LJ)RJRJa~Y4/}ҫf(gOj{M;,&X` )7wE`R[ETUUջsqX u߽5z;d:7+&y\{#JVqHt a˗ܠhtuTD]+G00 [ˇ.t]Lq}.LV\w-ƒ?h ۄ;2A8t7QO8Kl%z^t1B U='#E4 !otgKR, RJ)O[#R4&YStdA)å'(#TY[~jy=B֣hS17@PkUN%o"܊YSi=ɻEj{1TUћ:ܯ^q[n` 7Pkra 41uL&OA"dCo(.Va ~}];z/0 >c+k"5"zD1%,kp6<#(V|pA:"V={o|2&#'dЏf,}:bNi96<3mYO‚Eq*OWAYP'{~܇3f_H h2D$KY+՝!-1ٯa,?>߿uj%$8).;#qԲ2Ӛx9}ҽo)=X^i}[zRH+OM"c%y5ÙC1OW/U/qi SV8Pr_qV7;7C=*\O8x? }qy^H#rͧ~OZ]:T _s7V4~3W7]@+9/pRJN\Z~p8Tz0.=贉aX{z?b+{CSR>g.. ־ Ν?:?Ο%ԋveWhUlWG}OM 6ô YGu1[&v8iƈ>Hc< E[XRJ<$dmF!SXi'&ə<oc&=0x/X j@ѧ,wbjIA . FgWlcv*iߧ,}+cCճf_cY:u&%w2}җ佳ztcL䎩Ɣ13c-n2Q~_tdu.;N D/^-g|F9ʞO=ֆZy0&B+S,Z?SGhzB2 *ܔ!tH\ B0&]mxT D#qe4qd#BG,*FBK+qZzv`4TOc7oc&lnd0Y{e׶ WȨ ƅ\f1cq9)rX_rp B*vvFˍ&<}88AMG9>^v/ƚ V1 o*eI[fZ#5j$uKp_BÆpo uڐCSi VZ`︕LoNZxoy6{Oh.3LC-JLMOE'z| jxC$ZbJ&DLC@]|c&8y+ 8@L}BzD}yoj~xuip4GZb <Xg<=%61 Ks /44H{s 7/vG;y 8>rHYȶλ:~wcU˱QStT6dY L1.\}_.tW!.jҮ+ǀXK}>Mfi6gŽ+ƽ:v,^i_ |q Xдp#*4S_۽xJ.tbl[NIM+]F㭓{TM; {.Lnw](];XC*0 S| 6 )#hT| jLj">µ)+2;B"bjw/ҾլАAe0̊UsՆ=KUw2b"t!VZ-̃М%En-q$5rbo$S#\xW gq JJ1 j4 p &``s^Il(V@BF G'q,7%l} A.aqE^dBhB.UaLB<V1 M'?حt9tdwpy<m1d\yR =]d;KY*$ nz_R~vW ',0oål!B.IzRJ)1cq9s.B!RJ)J)R*Y$ c1B!B)RJ)c1c/t~&+F,lϨI B~*GI%(#͂i[5[qw*2K'>NcSpython3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-bold.woff000066400000000000000000011347401451074743100242320ustar00rootroot00000000000000wOFF +GPOS̈́~0R2GSUB4(fS|-OS/28``k?cmapޘAHcvt lDP,IU,h4m??vNpZCe^Xk}XxB;h@ @WQ=!zAo}Xa ްaupx>Rt a40^3s&x2<)3OtU X)Gm>>x lFNq[!5?Žox1^x>;^hvםu'yݏ;x]h'̬k'YDtXY5]V(Bì0<v]!ҷ6"WPm[N yNAGSQ8q0&DxQ~e%X^% RHuX&Fs\oJXa_[_[_/NpFNz =L6=YmH 2ՐY2Ð 9 f XeN(P .(){1}⤱xx0y+Gxܚ|-G*c\\̩t+%?$#b_1wHQ Kb|K%urnӍ^8)Y3YrLun "fAD7"-1TBwC6jm1ѶhK47Ho+"rO4^]f3Jܪ-ZƊH_Ϊ133īj!?KY(d^1' C qA n _%3bVy:c2V*;ﲊѯ3ڭDY)jƉgY9+uc ͙K ш3#= u]dnF\ҙKe3QKb>Oz}<<ׄ #d9feݬ̶=-?}#QcB #gt]C :u[pjj+ \j\3Wj+{q\zΎ͒PU`Yۡf"Ptyھ*WxUP Z jn[)>,͢-X<"E :C)B7Ю(_="b>A0`Ca Q810xaL'`LSO2i@D&fL`u|/0Ey,^9.dm^W`s%hn)$k:,ހJհ\KENE#,vKwPO‹8hD0Wx A8oL+` YqM<,m[섏a=~8 ,šMTBO)iӔz R20׈^ . = 뵄evjtͅya}@"@۠4Fp h\h\4o-h  DB+#̗dRz)Y^JV/տ/->#a| `7쁽HOS >/KHpQwX='d$,d8 .T&*C6@.!,쟾P`wB \e@9*7 UP @ ԂT2 @A ! p0Ѓn[6h7FЧv4Gl~h- Vvs#tãzB B0Pa<#a12@&40&$ O4x ixfĆga.<+^ðrXoJXa-lx6FW 6{2>l|6;`'| `7쁽w S >/KH0 o;~ p~SpY8p.E)pR B͐Y`Ȇ3RA1 %pJeP*Y@e]ltJC)R=pPռZɂx'P'PW LJCc^]-ÃoƔz 3=Z.΢.΢blL]dSc=FeTj<ѐh L#Cqa8j2Hf4FϠ:Duޑ#UyT'x4W-eTƣkzE^jrN>A5ޙj#E/[eԮD+%>Z&Yz`j`6uSZYMIg7ٍfG_t=2zeIѓ.'K>>>>>>z$z$z$z$$$$$$kջޭܵ]W 4OKmJutBAzwSTnw7ջM^L^L${ m#*jC^ =I%<5~IrDZB.WF]B1Vh"=âTRnqvthC}0Wn =L'a<az xfĆga.<|x =OS:)U]'.<Fw953e5uRM y 6Ӊ"bs\Dl#6guI/AMՙ>=ӽL虲:3ugz~ 7mchT<}ddnRgfT?T?YD  >_#Y!_'CV!k8Eq7K`l>]^/)|%$A pQ|?x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*x*xC\lȀ,̐ 9 f \/P-`E"(8C) *,-cSU΢EU9rUe,KNi5u(TZ7*TTTTQ0PɎ.\>),xo'gϮގ0or8П/$h2׌4,DGl 8^B>ݜn(ۃoa{tq;q5I@13sNt+KKYRV5V6VanJX"Vb+wkwDW&opWT:~[N ^d͟n.˨KKKKKKKYVb+Ja>,8"svqw܇}} Z.Oa3Zju,=Ƭ*њYĬ=:g3Q>\Uq8պ%1u6qYU:>:~:~: E%ۘ fw"UJf&dvo1̮_QGڦMT$Pj4 EVIr'XߝNw'gPd6Lו,7 =o"Ģ}w~EsTB<Pdp~V(`_؟9=[e.uoFu*%9Y/* j'ɿ̬3+G!ݽ̮5kgfQȝh"6PI^utXGI3YXG8K%A {46 NZh_~ nOfTQKQ3Z.]bh?3)F;h&FJ60YF;hw0BFdēx3^F=˨?0FȨ?1Qjǚ2qF>Ⱦ<_ɨEje㌘Wg-a\FaF(`<"L̋y p\JbR%%p },™Op휩rJtA1%]Lq;g$Ψ"}媨+x}vSj u(aSAh/vK B?a !|}(ax F 08`"L<S0]l3`&< l>UXykDX+ڈu^tVQuu.]g񃮇x[S|؋@:u{^u>n*uīuW2E#h,͢s[ah>vq {x~8 ,;B@Gq(BO^_Tbyb{8~?uX2PvCTnu/TA55P >Pqb!4 ]p7f"WEᱦv5eE3NG tGiHǑ3 K1dCנEP 6pB \RpAT"U4D x3v:Q4`w_fI^@_!@a a0FcZޅQ810xaL'`1!3b=҃UC4(#Ӡ8IM2r:,ApA> . {`/p@zC )pRz^@/}>Kz^@/}>Kz^JJjjju7ZMVwSnju7ZCP{=juSbٸ4V^ho@:WU|>{>^cE61(8c\0 ?&J}wVcWWWG gxu.}►eE. G(WFQ8nxQp(1 G p(\. ¹[E+ ¹Rq(\' ׉up(\' Yeqǟ0eJ:3*QJD*QJD*QJD*QJMѝMk/ ܡ;4pO. 3 3:L򌎻6]kݟ]kwm ܵ6 swm ܵ;6pcwlg &V@ c+Yu&|m8jю#b0+b`E 1"VX+b`E 1"V`X.6YVb+єhXJԽk)3nʌ2xX`K-f/`ƚg6 ̸i`M K=#0kV0ҫ_gWrf_v)؟\ə]8s:gșz3{rqa?ŁOq@tA%$DrȀ""QD$'EDH""QD$D!8h""QD$D("EDH""Y;QȬ^^Vp/̎Gx$;ɎGx$;ɎGx$;ɎG@7?¹p.7bvQ wE sq8wsq8Ji]sq8wsq8ws(j(*xX g6F(Q@Q>< gEYpV$ gEYpV$ gEYpV$ gEQEwTєUy9@ h⿉7~ R FZH^k8?FՁO[ gsf wۆ gcK#٨(zOg.:l*;7lugKX򻷒MsYWD$zzzzz$Ռ`?mmmmm"mm"m"m"m"m"zrJMMMAoGDDe"$-KQY"*KQY"D%oI[Do!RHuXa+a w\].6OvߣD=eޝ@'|wz(߿8E'רDJ }Лꃒ$b?)y1/@>D?M?M?0P4P4PPPPPDP"}"7$*3Tg苢"}Q4}Q}Q}Q}Q}&%;荒$|&Ix((((((((((((((((((J³$<+ J³pD H$q@v"їH%u@菒$<+ J³$<+ J³$<+ J³$Y6}[>mvNvn{a^ ç|_+8_a8G8w=E͆3J` H7n =@zp%if~}hAs.G8lݟbT[jr+:TGK;δ9/CbF"¿Xp^KUzQe%T2S܂|AgdrEtjgJq+fAT}f7߉:فC;Y3|Z|N?kgvY;~N?kgvY;~N?kgvY;~N?kgvY;~.0/+K!^a,5X+ko!w* ܠU<,-vz_;Nk}vz_{P"}"vz`;=Nl=(v`;}>Nlv`;}>Nlv`^ ACz7al `a lCv;cA^p)|%$A pQ|=5CnȆ3RR Bo[- mhIFmZnꄖvK\%4Pĵگ-q햸vK\%nkϡ%2~{mwYA^%ǒcE a1"WŐcXz,y=N~M~C~B~D~^@~B~E~B~E~L~N 7 7%7$7&7Ǒk͝DZXq0XcűXrk,irӬD 3Kތ%oƒ7z+n1p.9/ՋabXV/&z1'0abXV/ՋabXV/_F3NG tG b 9"N'G#prD89"3Y8/6Wu9r arF.y.x|9x+x%xn>kAuW VE!ސ5ʽymWZ%C幰rHX'Ca`8Gc< x810x'$O'x<x<ІЖc;o2tQ'8NE50O-0KU.Wfp?ϛsl@KG Z<yކ1f{xD;FhwN2Y65vqW覞7v2ؓ@/y}xq^΋y8oj2q`<~Lv5(f|\60`2<S`*< )3`&̂ q0#sEG rEqqx8//e^b\$_2۸D͸T buuq,>VȾ7Jհ:Xoq#;.lz>l|6;`'|^3^$')|o9Y0ɂ`qfqYWTBD[Kѯ6??G|?D+D~(e EC"ZxlrNY Jdmgٺr oO_ x:]wp ^G?9eDs\rzBY4 f!,DZ f!j"BYWyeXo'YF4'8NE%XPrc{x:@4tN@WQ=!zAo}Xa FyC`( 00 6F؈c#zlD=6F؈c#zlD=6F؈c#zlD=>\x^y0^ ex?z`&jj&jj&jj&jj&jj{>l|6;`'| `7쁽HOS >oBt#gɗi"ZʈZ"E!JʉZGDJd 9Q!*,^K],rR9)FN!'ՐIirR 9)FNJ#'Ii4rR 9FNJ#'ՐjIiDe+P+PoPqO' ''lNxvx;>'|'w^̝"<OxO E5AW |rJQ~9uUQx) wA(P K|ȇÇ*}P%>TUC}(ՅRkQ P P P P PD%*(QA JTPD%*(QA JTPD%*(QA JTPXkQb-JE(%֢ZX_5~ƫQD%*(QA JTPD%*(QA JTPrXQb9J,G(%rXQb9J,G(%rXQb9J,G(%3ꭨ: G%W`oqd1^AAHh#p\h̙ kGRM^R1iS8Kӕ͵!#\f-c13B#\ K{]bbݝ3 }2bذZ?l#. / `bF#EĈ#6Æm݆m݆m݆m݆mf\,Fb^ދ{1z/Fb^ދ{1z/Fb^ދ{1z/F 2^{z/Ce "E[^E[^E[^E[^E[^E[^E[^E[^E[^E[^E[^E[^ўޣdM߇9hˋҦI1 "MZ?N0`2<S`*< )3`&̂ q0^j.|heeq_ZrWyD-hUwC\ {1PQS*֨6гk|>Bم+}]FKdxr>j+h+h+h+h+h+h+B] Qt!.Dх(EB] Qt!.Dх(EB] Qt!.Dх(EB]zr>.{ea=첇]v.{ea=첇]v.{ea=첇]vwv9]~T;mKE;_wp5~TE ŇQ0+P:pJFײ)FZ=j'вG[9q\4p+π epY<Ý+f-Yb=Yb='3;6hÉ6hÉ6hÉ6hÉ6hÉ6hÉ6hÉ6hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\hÅ6\Q}8 `a.@9%(唠SrJPN )A9%(唠SrJPN q'q'q'q'q'q'q'q'q'q'q'q'q'q7q7q7q7:Q^?VL%>X5-6kK> _X-kZ1+*+Z彄PY 1****A{/GDCG tnb>A0iked^dd^ddedd%ddad)bn܁w,Ydly|jXdB+qtzKgfwݬV)UjZ/ZV)UjZV)UjZV)Uj/ƚ+]XXV +:]ĊdE_bEX1GB@sju;vvGR"7+_嗵߿d쒝]KPs?I;;dg쐝Cvv!;;dgk>l|6;`'| %nV͊YQ7+fEݬunVԍXMz~*Bd+sZ.9(qV ΚUڿ_F'_ǭdMp]t޽:t3;if'd;bZ̨쪉]5dW\׫:6fva3;lf찙6fva3;l_R%1XI V`%1XI V`eN݅\\\\\\\\\\\\ɞ߅9w}2gdSXӬ?)9;> c} ۙoB(?27|Ov]!;Bos%C T<ӂRj!WB?WQO*gO4d8]jעbRqJA5)4SPN IA9)('夠rRPN 1111111111111F9('dlrQN6̐Gm6Q }Ԇ>jCGm6Q }Ԇ>jCGmC8|TQq>*G8|TQq>*G8|TQq>*~B(߭ɕ'dU@W_va{'}7yx=~7%Thzhi]I7#yPw5gĔ@GUP 6 ]}:[po̥!F] 6;.i My| q^3˟t<-!B ILJ5cu-}z{| ǙP(˃Pŀ9: %KeT _+Yn G/j5\*ߗV)w61pӸN~3}YaiO~'2&f %*n%n2ßvfHXZ|Dې!3Qj)5\.y+~.S;Tƌ~¨?Ꚉ[y#ogD/#zՌ1Jb/g.XW**THeFN0Z)|CzQo #+貂U,/=!pyմ\׿ΪYZfP ʘKՊٸٸK)~a$'#Y93K9/ O!NrFFXZCwB@s|w^`4Q1F:gɁ UةXJba\B+P˼? 7t_M(簓3Y>Tf*bh\b&WYrOb&z.g:LYE3f&;If`+Ι)g6̤Be/?2cb Xr&2䨮00)YbI`fSMu)kr,`&zYb)bH;¨}^:,2g bm=86]Į!1aCfX;M_q1$|!3?̏33}`_nw+y%WgOiy UO<$tW"=B^k"(2B&Sb YL!)d 2W!J!K)dR YJ!C)dJSI!;)d kFIadQJRPd)ůȑGRTY¯αߑW3NƪeZZZN4TG˳d`{`V4dECV2 VA U 4UA  VNS`謂 ST \1I~f<_T1y-| ylf")d3 ̂Fd3lB6Sd ڽn+mYLtQ\:++mhJt`&vV PF\VW}!4nԅNUtO}ST-hSE*Ւ}ShTE*uOٔO%zϩb88n8/\>sVs5T|R!EЦ6UMmMmhSڂ>UOڂ>PY|hUE*:UѩJ5CZQfliQE*TњoNěћ yЙyjDpTl*sT6lQٜ9N*I%ُFhdD*(DÅ>T}C ߉Y)vΎa_c_;S;IvXv^}T=b88}w__vvήi7i'?a?a=/v]2^vo/vvK{W.[G٭Qv(t]:.bNKv.x;'m/+A|vjЅ䲺~oo@MsVٻDp9u:ˬD^>2z-Ofi/hIޭWחU*wu2X+ѼF󨀵 v2bwVd|-3Mt)a&fyYgfyYQaTf[l 9f{ٖh{V1s ;03 31;!>Gj/zz 2:!s+U&e5J)T Ϗ/k1xo"#,%\,mpV܊gf/3 3(yenkmiߕkRy+.UgU\^UΫi|7i\Wq滛1O0~<7Pg3w==}%^ɪkAb015>2՟+;XΈ_v"0b0VFcG#{9yˌ;+,VY i"] ޅA.ǧ8jjj˅ &:4`_qاdOqק(d8ڿj *Z 8R q"ϟ8</<N+oVN|}@"⵿ ÎC}a|?}a)/ +,S4to-h  DB+οҷAV30R.֏8`"L9L$L`:̀0 g`6=xs</y0_nտ w'Miɽ)" *ʎ(".ʎ "" (R*ˣ,.,]RH iۤ(-q2gf9s&Il>&jjjjB·#Hx' $$w.E»Hx bukR?*Hx"d!zTT沴|WܖhUiU ^f<- ɢO[5Mlߖ7L}=11100Ѳ)A,5L颹)Kl29DmOPkOy5NR EuUsY P#juSE]k(њZ QOP7iﲹhn ^?h(>a|sS *_Ԁ.jAT>]]uaܪqsxϠ^G4Vڳ 9Q[UW/h 8hǭ5/q wq VPhɭ{|?5~4]ͽP/T\+~P6Wɾ,"GV2e2E2Xue4qi⪶Q<Wo?ՙIrӸ\C)Pʽ|g||33|BawUq{S+_vrW =]^XCq %s|U--++q}ΐg=|\bդj&2\ Ta2gy\ìe2ky<˪Fh"wh2Zīh:Z- Wіڡ&:#:3+;z'B/w.C_C @ ` C!>0C 1s %m&c rZ1`1[9a.a>`!aLKΣ94Ub*sd.Uqgc;X-"AsriqŪ/d<>w\C8| %D}E)nxwZ/G#Q1y8j 97i7Ԕ 8$ 4u hC=ٯ~ ]پeTL7Cc.ׄ65|%ef>k&O' 4 }ΰ\5y5,B@1C{^eU Vxze6x#e3"yHY,w(Kx8i؏ה-؊"؆؁\.ŽףFeiNwa7ird gp^(&bλ%o00ޖי.fy)Go -ǟ|\3!Bbe Qdt!YA8,LJq^Oxސ>~}џ \ {B_/4C_B_Cɝ6BEHBl!Y8V \zCn By<&K=[cڋ2XLFpSc4AS4Cs@KVxMn2.7f hvhN.n艷P7ot UCJ':F'VRziCJt!| .T 1+NJ[MsF.;R1h9Kҩt*/Kҩtt*'NEDiUVz^WyU^z^Wy+'|> H\[eѭ.ѭnҭLI\1.Np\Kc.wӱ|t,IʧcѱtS"Xyth:V@!֘r }Kҷ-/}Kҷ-/}˄2oy[^oy[^oy[^oy[^oy[^Wm$Ɔj ت63PN-$-E}KDuu2fcwyUvbc ˔jG] C&J> Q'[zDa6b6#[1EŻLƳ݆؁؅H@"~>!lℌVOqgTEMC:,r9l@6\ٸKp2 .sU|W5LS 2MeWu'-_^SoŸnBe?D9;4PT1 *4eۇꈞtGtԧX7NLѺ3Z7tGBo SjuUcmca8>|6h|1 c9a<& Lsܣ1hS@~jS1 _c:fyRv\`.ak .",,C-{+ dVc GHG6`#6a3[X!۰;@Nk䴶 H؃؇_p+" p\kNqgpVHC:,Ȁ琉, vdKG^r2[(=lZUkm#星165D뉙gW ߘ7`~Xc~Q^5erٗ+\oep٦7`73Ûffx335@ fx33=:#:3+;z'B/`]ybca8>|cs;D4f/Nyx<0UD O23ĢMj%s̳4Oo=|n^X}3y)!˱c%V!?`5`-~B$# ؂A,m؎؉]؍$GcH||9Ȁp^6of,5p=̤f? qw/gR=\ O% {}^坰}Zao~CCް$y(옌#_D![_gb|EjTQLxU1z .ꢻ. w4E/!+FItR7M'uItR7M'uItR7M'uItR7M'uItR7M'uItR7M'uItR7M'uItR7M'u)tJ;N)tJ;N)tJ;.ʟ2yV,.z)ǭF7Y+u䃿>DLZ Psqtt VCG  1U5̔ KKea%^>t+V:KζB7s\Ng.SyA\^fWG%V`n:榃`n:榃`n:f_USx iu|HdU/*GGG??;;+#ݦ@.:~SoVߤ=-oc7=Mqc}EOqQ.fwbvw1].fslb6w1].bs\b.v1Ԛ'j㟹\b.v1].bs\b.v1].bM-*ZN!xc[V9a1`$Fa4>|Pa<& Lė$go`:;<:,",,e\ﱒӫ!?ct3c1̘nfL73͌ft3c1̘nfL73͌ft3cg3v;yQ(B1n! nMs7y&乛"Gc8.7YG)9"\䔋ry<:q?tp^*>!jo-ڡ=:#:30cbX!FׅOlņ"(23 4?=Svg moniߥ؎v\qk=w vzSNvzӷ;wZ;7ܻOwu_k'ھ͉I#ל1v3OH͓ߴ9uYm9u[uvň3Fӫ_Yꉫgs]q\wu ׭_}ݟo98rlȵ?FN\XU 6lX}c 71qcRt#'mO[Woݽԭǘci-̈)1scV-oL|̉1wb걵cƴ}=[l 3cn{0DXG5QܸI#f-[0.:n5}ǝݸ0_=l?1~.6v܎)Fn[m+vdg{Ono'm}SsQwGwL1s犄{F [7◿ 9EcI`w0;L]C4B&hhW uf~mP䶜FxhFxhFxhFxhFxhFxhFxhFxh1\}LhB| %q&c rZ阁o0}2;<,",b b5KLa\ [&MNp4s|;KrSUuBqrM A6exڌC//)CE ڌMg{e,Ufde6[gCY$h7fe v)9keAxh;ڎxh;ڎxh;ڎPvsDZ^iVzyT~Wܞ#\(_+18qRڔl,秈AJ*4ǟeb#/ ǎc8T28Ta:hqozwM>cFt뺆": 6&bλ%/B/B/BP/'h'1)KC 1'Cy&))~۞AcuX!}8.?A`} PS>'SBg/3i'4Y =-n=[Cn=[G[t͕gBoȴP]-`!~or~ ǶL: if1QZp^8|`>јO4m Im*kL |6Gvjs00 K ᢗ\h+=VbXTg:(OzDa6q&- }FcXk4FcXk4Xۍ$g^/؏8CqG2Y#p'q 527KZ*Ґ 2`9d" aؑ9/. rWqMh V? qE(-d`n&S-*Z5xm&ڢڣ:: z-x}{~/A!x`(>G# FbFSg1%ۉ2%I) S1 _c:f,|\,",,2c9V{*D:yB$# ؂A,m؎؉]؍$c|D$)YjNǬ9̔tX+!Y8/f 2 N(MܑgwQ s)d>@2;lL [-[# ['z(KxYaI8&τ=aVy=d0pB*Ld&m2SԤ<Ͷx^ѐMYYYe2fDLY&,hiiigiI4$fiYh6fiYh6fiYh6fiYh6fiYh6fiYh6fiYh6fiYh6e rT...K+J.hI$ڥvyvi]]]]]h e2vA̠]f.3h e2vB4B/U[ 3yR\whgiighLZgj{$W瀕D=)4g0 W.V^RI BiVZjz-d MJ4u $FJ#MZiVYFjH4R+4FD#tZi240M6|-NOfJ+6ݥ^0,.2Yf. .D{M3+UteL;۷=L]Nͤ6.fl3\fxv=hI44>wrr Zn2湈ƸD4Wqp΋AZޏ\>6p:[X!۰;ޅݴתuAved{H||KhGi%4 o'FN[iiVp& 8||DtM6Ϸqp<҆ӆchSWWd.$ 8My|^<)LSNSfţ1јOјИ(EIkΤ5'њӚhhVZl5g*xW4篔?RѠOӠРhЙ4Lt& :}ۨ Zt&- --:}}B>M>KNE[hљƿqٚZ?e4ӧiu34׺u?i4Lc}>ؾy0PaaaagV7cw6<4L#tyhO۶Ӷm+mJ۶ҶUҸ4n+;mq[iVw;ƝNN7ަ]2ܦ2g rǥҼOӼҼhV5$] &3 ZI Ϥg­p+-J O'“h%Ԑ&~/ixm(m$mFG_h6ڸ6nhiIOFOēBYh㙴$x&mB?I_N?A3hVy$S#cj&hfhhW uYbj hvhN.n艷os}}=11100َ'쏔V(Y24_`"dLA,m؎؉Ɣ&&hjuMYb<mMN2#C2SePx xCM1Xy>P#*x=LuOls1PMvbc Vb"D'yVzDa6b6#[1EXƳ݆؁؅H@"~>7~  MaQIIB2N,R*iHg93f@Sڴj6Th0$-mu<jZmVG xQ{N4Оր/aU?ԚKZSVk-ضQ:ZWiպ;z'z7X+zC @߾dca8>|b6h|1 c9a<& L3 1kS1i5c{vH4lbc r.c.Ӗ3 |Xf':yVQfh?! (6݌hlV q6l0_iWn$ ?cb~~A¯8#8$0_iWo88d0gigpV^Rئ" 頍i2LlevKpT)˸UxCE~k/n : "m(=L^00בW{溨g9[hn"^BC{mh&ZUkxME;GtD'tFtE7tG[%O{m;x/|0^'N/Nk~v&c TLט31 1bL3/B,}L4/2c9V{*D:y#'Db= -؊"؆؁؅H@"~e2|D5E,53__{VSy VC&yWyޘ|7qG&̃R=\VOֈaDð˒efay/ۣtXɤ0r140PZIf & i<d 4bB&x^GkZh7Evh//N.n艷 60PhC>>P|0cBgoD|mɘil9Gb5[^s-\д|,B,b)`)2eX~jE:ۊm%KyyZ\E&.q~)\|[Wy<} (USlQ.j )mU?U6<1G 5P'a0p|dC=Lٯ~<=%Tu—پF1k~Sa`1L ײ0]56}d;K +_|@"9otVDus]:_m?MɮiJ¤9*OӔ'+KORseY2-c̫|@DWre\."d9ʏҦDqyZ-؊"؆؁\.얙 S5甽2UbJVWHzLS~婪z 8TU%TpY^IcTwJ:kAJp *lm\v.Kb\הn˹ޫ{d+-JDW_ s%_)~BnMRNJ[܆mnIsϹRnGPLT'SF6 9I5|H7ɓ~!Xrclj,\o2XZfg|J7֖gugXW:,2n|yy '1|<}^lL;-tyhMύNyx n!/(϶7Qus-nN5 R.SyAx!3B v"CoCoCBeIū1CLg֐0뉷}.?A` !ei|-CZs29yy*L M^ =ehje2` u| y&$fh?=~̮z-CZ5E,fy-jQUe(`j$KLM -*Z5$U < E%[TE 5 |Q)/*2ρS_1jC1*6ƒvdjKV$ u2fcwy:,",* 88$B_ )$4"򌚆tXyVc?mÆ #q N\^e_5(ux㪎TZ(KUJSi|*OqwQ{(EQ?i=2Y c[a<x]#ꉰԯz H5ohgZaӚZ3ւm hE]u4s=ГVڋ-,fjuS{s\ `; 2Ea8>|b6h|1 c9a<& Lsܫ1jSM4|2m&Y>"mbcbc r.c[񷇖tmJVc b~~ X(lF񙶉fDc "CQ(B1n!\E ea-0f\,x%4xMiss@KVx 5@h耎肮聞x hʽ6П6>11 Ň0c>Hh|1 c9a<~jDl'a2+L4|阁o00s-,,",,2c9V{*D:yL5HG6`#6a3[X!۰; HădH1)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)~ SL?0-ՙ71bڞYg2EfmȤääääääääääää!۰; H؃؇88_qGp')”iaʴ0eZ2-Laʴrރ „ia´0aZ0-L&L  „ia´0aZ0-LՍ „ia´0aZ0-L&L oHRVF dcccI1I1I1K)L[3%aJ|)>Sbk&wLMP&Lr&9 I$ga0Y,Lr&9 I$gah#1 )3/0Lr&9 I$ga0Y,Lr&9 Db"s1\Ld.&2DbFjv:Njv:Njv:Njv:Njv:Njv:Nj餶v.REjHm"]4<eGz^yWGz^yWGz^yWGz^yWGz^yWGz^y}R4&BXHTF*X*RAdEbu+^on{YhXf.3̐\dC"EVnxoWE44:+JJJ444WYitV&&FgYiYUV,d:+^'3>Ԝ#G{UQG D8rߝ#y G Hi &xZ+׫01Lɘ"O_a*kLLFr:;,B,b,Iu5`œtW^^\T?x}X7#Ӏc4h8̽~,,,,,,,w߹凹凹凹凹凹凹凹凹2/:g1i4}L>&MIǤyI*UyW4}L>KӥtydcDwi*Ϯ|LZW|LW1LW1LW1LW1LW1LW1LW1LW1LW1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1LT1L=1L=_2|ɔ3 gӄi4c1E"2E\eq * c1A |L>&cr 19|L>&cr19|L >y]ٮϳ9Kyf7&}$>GHzI#}t Hw#}t>GHw#}> RDH>G"H$ItUvv.etnf܊w{.ɆAlg2a+ssJ*OzW9u=#a-=vXa?X.Ȁa*xuR*5>;]JD9?clŻ3)ڢȂⷄʄR>cr[\wpiU~]w1k5hܚVy W*60_˒wVa2n쯬W222{,{,{,c+Hj;K%*9Y& ZFސ6!nB |t4G#视^x0@5 b0X4|"OFax=Q#d ։GnڡƵs+\k:/Bh+Q=5Qo?\ǥNsa\1.VTkb)kb)k$+,r!}\(bVBVBQz^-+Y!+Y!X!Xh;#:3+;z'B/w.C_C @ ` C!>0y^(>f>HY$Fa43َc;%? 1_Ockf阁o0ls-\|,B,b.Ke~_vVe]QYdT2J Y|lz _O't$E~IB&r%ˮGG݂A,m؎u!Seq,dzBHEV琉,G,$ CZ}YTmR ZR+@jH V ZR+@jH V ZR+@jH V ZR+@jH;/%KR/%KzYc)d)d)d)d)d)Tguf3 KzDa6b6#[X!۰; H؃؇8_qG$c8>SHF RtXpypvd". rW3\H:΅s!\H:΅s1Dq E e?D95PTcv7A0X{ 8~,ҞBm3zxyr=^GkhCPc=X5CPvGBo>x=E? @A!x`(>OPeFa4>|0&bLhs0 RV{kVc Gy[ ;zDa6b6#[1E ۱Mk H؃؇_p+" sEc=Xϴ8d iH`X4=uOcl#e9\c՘`i,4rK9RNc)Xi,4rkwp%R7;de!e!e!e!e狙狙狙狙 f" _B—$|>JŤ{1$u]'u]'u]' HҽtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwtIwt:$݃{tA=HI $݃{tA=HIwtIwtAҽtE{^DA]'t~OIw?'tXF/>^ܝ/u=@$zD:^@I $$D^DE$z^LI  u]'u]'u]'u]'u]'$DI )$uR\'ŃN뤸N뤸Nx) Ńx:iZB%i iZB%i>iO擦i>iO擦h*)Jh*)Jh*)ZLŤh1)ZLŤh1)ZLŤh1)ZLŤh1)ZLŤh1)ZLŤh1)ZLŤh1)ZLŤh ART'EuRT'EuRT'E HR- E HQIQIQIQIQIQIQIQIQIQIQIQIQIQIQIQIQIQՊ>@RzIQ/)%E^RT'EuRT'EuRT'EuRT'Eh AR4HI )$Eh AR4HI )$Eh AR4HI )$Eh AR4HI )$Eh AR4HI )$Eh AR4HI )$EhIQIQIQIQIQIQIQIQIQIQIQIQIQI )$Eh AR4HI )$Eh)ZDEh)ZDEh)'E~ROIQ?)'E~ROIQ?)'E~ROIQ?)'E~ROIQ?)'E~ROI) Eh R4@H) Eh R4@H) Eh R)zKsq9pF^7P"G8#|D\q"BU CD#bG<""b!"5"CCD 1D b3A "f1YD b               N tG<"1yD#b>'#b s "f1S1[" "" " D$"&1IDL"bDD@'q"fq"#bo1ͩdsS g<P1yT̠b>ITLbYTGAT̢ṬbQ P P P P P1<*QYT|P ؅]؅]؅T̢@}G$*fP1DCT Q1DCT Q1DCT Q1DCT Q1DCT Q1DCT Q1DCT Q1DCṬbA *fP1T̢bE,*fP1T̠b3A *fP1T̠b3A *fP1T̠b3A *vb*vb*vb*vb*vb*vb*vb*vb*vb??G<*Q1yṬbG<*Q1yṬbG<*Q1yṬbG<*Q1yṬbG<*Q1s *fP1T̠b3A *fP1T̠b3A *fP1T̠b3A *fP1/QqQqQqQqQ1ITLbD$*&Q1ITLbD$*&Q1ITLbD$*&Q1ITLbD$*&Q1ITLbD$************>O2T\Pq*.Ce 3A98TsPq*A98QQQ>O̠b3A *** 扛*WXD&Www=o'b!*d b}+at{Q{Q{Q{Q{QwybS bTdy gEM扽؋u"~e7' ڋ++q_c-_.a__~ҦĿwuED,"bWG7]}yb!""b!""b!""b!""b?hn}zEkc=c+Ѱ=cu1Dc3t1;(=('=2x/;#_%1)Tb~Lp~?G ycD`L _+cV4t]` AA=Es[6GEt1]Bt]l-vj)سe`7f]Vk!m3To#.ham\۬6կ.&mR,6˵͐6CfH i!m3mZm6G*TtSnMZIK7i&-ݤ𮳴t_vOK7"TtSXH7"tSnMQ)J7i&-ݤtS(tSnMMvߵtRY RZwRHVw-V*J_JK*iI"T Rnoz1J]ًJ%g %-T%RPJUBJ(U *T%RPJUBJ(U *T%RPJUBJ(U *T%RPJUBJ(U "T$PJZBIK(7yWZBIK(i %-%PJZBIK(i %-%PJZBIK(i %-%Pҵo;i %-%PJZBH( "T$RP*JEBH( "T$RP*JEBH( "T$RP*JEBH( "T$RP*JEBH( "T$RPJQB)J(E (%RPJQB)J(E %-%PJZBIK(i %-%PJZBIK(i %-%PJZBIK(i %-%RPJQB)J(E (%RPJQB)J(E (%RPJQB)obobI($J eRBY)PVJ& $dd@2Y ,LH& $HQIK i $-%sACԅ7#}Fy\cf{A-bBb>^'mXo ZOLl:zPwY+*o212O⸗8{>ϙ:bb_bb_p$2- 'J3QL36q>jXu]L!]AWF9G7э}zoh?kMVDZ>XG0nyhet:#B O6؞w]Zi۵x- -qf˗0ٞ_ӟ.o}cw1PP]G-+8N Z'^I|1=֣^+\$uʺі;'fʽ_k?\5ý^uW=Fb~Ji8M}i?O'St }g4E ??Cst(F/Ѻ#h:x:7zO_:i2Cqt<@'IwTNT R8V*U}XbRZOKbњ..C ëmw GK~R/0ld"q9:NhyYtnԇ_}pkicip,?Xwh"NX{hO:>CIs\2aaaø:ø:ø:ځځځځځځY\\\\\\\\\\>\kc T!i^Qz(F:P>|÷>|÷>|÷-o)|[#Ǐŷ-o)|Kc-o)|K[J [[[[[[[-ŷߖR|[oKm)-ŷߖRY9K1g),ŜsbRY9K1giM_ү-Mwt M[i:nIE]Mt͢{>OzL͡G/c8=AOS4վzzzzzzzZ=Rs<h5/^r4@! R TҖei^\Tn)OF=ك=ك=fxڪ9U0tcafpEr#hh]3fe1-D/4ܼw2H:aUx<=O7Gh6m9Dsh6Gmڕ{lp%-n wK[p%-n wK[p%-n wK[p%-ծX`y"D'G]Z4v%,˳i ϥߣSN1;UAkpu\C? ނ*J"qM^EY8#'t5[Dsǽ1x&|'׮\kYt9 ?ނËp%.p K8\på xF{͕ǢjWp[֯p KEX<<Dž՞y+?nyJ=E}=Haz?AU,PG9X{cmwRiÕnW[sJ؁L\+3qef,:(r69h4Ѽib*-Hi_Y; :l_*}NߠlBߥ1l&ͬ]CuW[^C?NxZՃy)M7bt?Ksqn6ƹ87fl]"r=Ci uRuS2Zʠi@Ez(}~4Hy*P)Z_ŹE8"YRZ&WK'#N4Gun6ƺX7qm+7Θ̀=_26_'-ɪv=or=?|='fpך==hwl#$&GD$Έ'ΌV3F<@<3zl^47|0q/ZJї 2}ߠo}Ip]pmĞy9Ĥ`jb`zb?OX~&&'1 7qL0-qrpO:#x:qfp#~pnpYy=:c&Оcǔ65y=J .kOo4[mi{ځvhgz'BDڝGЇ#'EQ'4?@ .]ٕp;v^m5^ekwc/eޜ3omF}̽- naiX*Ae9,堲TrPY*Ae9,堲TrPY*Ae9,堲TrPY*Ae9,堲TrPYv)!֧OY|V%&E}Y~rtPr7v>,')tF}}sW12FY(e,ceQ1ʜ=DY(e9,G刲QayaX^ayaX^ayaX^6 °0,/ °0,/ °0,/ °0,/ ps={8Nqe.t8]2Nqe.t8]9EhNSSSSSSSS[GδWH{A#gșd,93^LÞw$os-Ӡ= k*r{ں7ީ>b3b3;GUߣ{T}Q=GUߣ{T}Q=GUߣ{T}Q=߇{ KtH')ƘMimvǯRW[6;Oof3j*>b0b[wIQ;~GUwTQsa;vGUjwTߵ=R{w="{#GUӣjzTMQ5=GUӣjzTMQ5=G|=,_|=,_^n|顕K^մ6*SJƔ1dL)SJƔ1dL)SJ7(wc#5`5tj>D}6ߢFxЦ_UzD\fQZ-r(5z-gmZoc3gmcc:1`O){*SٞˆvxvO ~WWr8O'`[S}ˑͽM=wCfKҋҋ=#?$>B{^N)P q\: 8(6r\II+Wj[I;^E9,Z(rX(rX&R P P P P P P P P P P P 尰9^i (A{K#5G}yd:x:N/ҩt}N3L2}J_7,:w{'g2]r4@! R ѰNN?'btdK5_WgW6pxOG}tW g:VkWMת#j#v=7䊍7i^ڻ '>Ez~j^;3mg~`k4?+Wp\y=W^ϕs\y=W^ϕs\y=WNʩ\9+rTʕSr*WNʩ\9+rTʕSr*WNʩ\9+rTʕSr*WNʩ\(W>ʕr\(W>ʕr\h3GCqt<@'It2B_S4NgЙe }F_oDs~.\?r\s~.\?r\s~.p}Y\?gq,~Y\?gq,~Y\?stӹ~:O\?stӹ~:O\?stӹ~:O\?uUt靜]5V/rsNZx[bM-i+;h/-mh2.n]i7hoۻ-Cu}{{2؆_Xϝ'A]TbZ4SrTJ@cr$zekz׸βBUGыMh&f4cQ_8}&7}C?,Zy/D5nyDk:gMGGk ш?:f0Z9&uy9ʏm*cHykMzZL=_j-S>.pRin Z2s-Y-C4=zcj7m*zBOE/Υyl}r!=Ci uG϶&-z==*31&:ʉrΪ􀞾ϸuNQ5sWDeZk>iٜV[>{u̞1h3:j6QYU[_~s$H.<<ޞP'6߮ZnyW[ˮrGz;|x\^?b/~nIx%>x菉q{ =dbBĖA^oMlKG$Uk|0fZs㣖]7XUn-`׃j+[7mFE Ec`_S=&FxeM5zos}`|ܠuuDO?̖ ^AđA"qt!qL☠1qrԠ)qfAs[ ĕ+ [&҉l]b01p@n jt0 n|=o8"@Q Gj8 _lbpZiGNo83XW >pny jNpaÅ! 7\|ᲆ˃~pMpx~pCσcnj)8W Nh .lxࢆ sK4,.mlX\0Lm(6 o(7w4z081xT`E'5Nmn]5^l 8qfm ^߹4h KoƱ+/ninqt]qW3o=1;-L-nVouVs>doo};vw;~mmnlGo6lk~w84}Zno®ͻmnvn+&~d^'uc}>O6|rOq>|3wq~ ПCo9C>C|蓇v{Dc~'p-]_9}/>}k8挻C<̯yvnʮSnvJMn?9/;]Νt={չw98/V{nUۨmT*{W}~Be'T=FE_P7+zzEoQ۩T6yjVUx3'>)}Rr?Bdf PJfyJ^yJNI)I|^c2dAeeR(BʤP&2)Ie(BʤPf\2?Be(s!\2)tIK ]Rr! d,)dI! dIyO'{ϓ9$'d@h4f 4F !R f DJ!RJFkDAk'e,.O }RBBIr<4zfo5՟5_n$?*1>ղZmVfjZmVkZmV[R]5%֜{Vyu^MLޮu7ݎswܯp9Rg9=όuƹsG8{&=w;ѿG-+p{#"2hi˃&3nFGHGIɓV^Ӹ8 /䗍O]&Sd LA)H2I o194mSc ]SxޛSc NnjB)8 Sd _N|9A #MWFQk@}>o'휱UcH9Dg>.qa\pӓyz2O/b2OO6vYd,Se \"S2A 1#c9k&"GBi3J%ڸ^IGy IF]inƫ6ft3^Փ/if{if{if{if|d}^&ɴ ڼr_ㄨ+fy?"X_QWҎ]]ъ\Fl#FSj֮6 v͠/o3vc}{ph ~QT#ީXwQT^ƨ1enslsd#p\jUmAՆ_7Ahƹr*rUnW Un( PuUdQ5UcQ5Q8Go\L=QC~W1TjWz!ղ&7F|*oEyOŴe5wآ-ذ6?KhABU&TeM;9nW渵^eWxs8gr+6=tPԫz-o]x)G3hJ\(^K(Ҏ"t#,'gѓ 7wpsX=YruG:53:Z8 rururWOg?F#󢪼3, 7R(Mу,g9}g9=YN~/AN\4$ q|,g~\?l|G8?YοWK#g9>YrǏpwp(EEU܋VR6r|F8~gps8~(=Ez%Q%x'ߌ_r+>y_^ϗkg=G:_yv닎5Ni/Qu7Y9~A%]]^rT{I{9{k{K{K{K{;{93vޫkvx{xoZk@'7, ;M-?Hk.AYtkxCzOStr2h\`=p#p:stzM{N9tN. 8`>90;y$|\qup\kbQmwz됽l/됽.~{[|Z|g?(/]qpE0ῴPE6mn$HzLeK4D[k9Hޥ}ul/KKܟz_ǖ`'mp6Hk8YO|IO'T#_'鉓E"5y[].kGkimvݦii-&Hs>ڽilx{<"%:#RH'o|ĸsm\/5vgy0IeFU6چU۰jVmêmX a6چU۰jVmêmyTGyTGyc;g'Vaޏ|jVaSߢ>–=[vNTpNeTxoypYveMn?-8߂-8߂-%s.-ZI٨| η| η|Kη|Kη|78Bmt{[{VՍkv't.Rm}Hsyy^y{x.Ͻ7̯a< o:ϟ˵98 |+ɧsO%`3p9g^:qDyt3EII6VfHϏo.K肦T"У .Ę:{'6| tycx;mA[jضN;>w+'Zw[Wq=fƿDyc66; /B"4//B"4F _EXŢJ+[4(i~_[0khDc>WV#>1)BojzPP %Bhih0d0d0d0cn_Jk>QTEQTEQ4͛[Zt[У͍^0gBsМ!4gV!4gX]S `0DDO(mۯ`H`"ADcƛXjVY-*q(Q-4>ZQVh| l|LMXΡGk:1 zhErɍO{/$q3j2c_`OgޟChQ =F{HU|^K/5˵T^ayJ3)I Uj=n?9VieuV4Goң7I٤-ZEw;zVmxLP uzzG/ B oSo-hUuzN뤺뤺N뤺:뤺NuR]'u^]'uR]/SuR/?zF|=GTj9j9שZNZΫZNZjj9ZNZj9SIMOSӚLJM'45>M'xRWUj|Tr:=NM'[ozGr5TI5TI5Tϩ餚^=zZР끲w|m}j}sps>$4z^ m LгQL hB-Qm)',QrA<0^_~}us8njs8Lk-[oB\Z*vl{C4 8^dslnoq>E|}q:狎ECX"p{ƫT95yNpR2\ZL=hS(2AkР?k {mΔڷmBȿM v. vn v  {5W?4]|MбtOFsϣoF5Mߡwt ]N?te54hY4cnu,7P%`fvL [VQW;hږN[F'ioZ=4؃>@͇'GhOڋѼc7=Ŀ5^Ot}>Eҧ }&4IayNGБtMgcAtH'ޛ7UmOҤJ LXD&AeIQ*neYERE)-ZRҹIIShxo{;x׵2kg'D/du"L"W=sZO׺XDk7a&̂ܞsי!-Ma6{x2a9ܽxXű@i>Σ'ΕGG !$"nGCg?#=PޤgaySם8c'+Jϟ*Oiqt{Mb,k_[ h C B¯pD5G s?.E% R2\THt h12:8 c6@cF7z J܆2QBeR*B%@kRRC QMɼԆ:P€ 4@Sh.B\aJk@[ht."ѝy 7 }]+u !0 ˣ ( c`"L`2Lx43 ^y0 `1,a),VҢ5F#'𙼬 6f"([ v. {TN| A~DOpbgbW 18'3pAH7dt<./^"Qge8',/^ :.w%"Cmh ajxV40<@aCa 0QˍXnO܄LT(!!jƄ|rP|h-s4vu4GFGFGG#ֿHfZ'ðJ*2[Vm1V*f8ͱ;K ;,cY&DfErg m/3S1efzb!fzbx^}hHy3<Α%DM}>ReG5YK2gd =F{fU9E$L/336Q7KܞW=^/yxh'Z艖 L7Z荧SƓxzxxxhM}x>=79Ԑh3L42%++AL/K-R3L/5KOKzڅj 4fZ@Kh v:@G tݡ􄧡>ho%,A KP%,A KP%,A KP%,A KP%,A KP0&D$=`2LGg@$Y0 `7쁽pw4d4f4f4V ތhɌQifTfFQifTfFQiJ3̨43*͌J3̨43*͌J3̨43*͌J3̨43*͌J3̨43*͌Js`TfFQifTKKKK?{ { { { { Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)Uy)~Q_%E ~Q_߃Em\| Ka,Zd 󄩦jAmu! A}F 4f=JuXM1_ yiĄ3bfTLZ/%KI륤RrǍA{P7/EJP7 fA,;>μ&ԂpOXO-pY E,~ofP2K@ɼ(lJfAɪbP1 *fG`zFQxʕr%\(W1ʕrQ8+:rţ\Pd"QEQdˍr%\P.u岠\\^ˋrYP+岠\˂r%\ˋrYP. eG(\^ˋryQ./E(\^ˋryQ./E(\^ˋryQ./E(\^ˋryQ.΋ryp^ˋryQ./E( Ed8/E(*AJP˂rYP. eA,(岠\˂rYP. eA,(ZrE\Q(W(ʵrDZ\MQ.岠\˂rYP. eA,(˂rYP. eA,(岠\˂rYP. eA,(岠\˂rYP. eA,(W eAJP˂rYP. ek&*3  "BaJQR)EaJQ?)EaJQUT T XP #>e[cdR:SiTrt)9]J.%GK֦lm*[la*[ /_d>^75+ Zh'sEWyGD@7='< 7 0` 00#`$<`4`, mxޅ`,%; X%}b% &TvfM'EH,D0ƼLd*|~}n>75U-彵-*۸| _v;a=wdZ}[=wG pႼP1z^("p&xP 6;g6Fa lρ}P}P}P}P}P}P| A~W C @z-S2-o)pWfחph(˂KeN)]8 t.҅CpH!]8ˠ^)Qx.υp<\ sr.\΅˹p9.\ sr.\΅˹p9.\ sr.\e-s`.oal->m%|a]^}C ?a_ c 18!.E% R2\THt 'cdup@ِҎbQL;iG1(ŴvӎbQL;iG1(Ŵvӎbڕ` < Ky>_p?ppppppppp5:j(j(j(j(j(j(j(j(j(j(j(j(j(j(j(j(j(j(uԫWWGP^eȖ 9+l̓yp6<8gl%|ahyp7<wn̓yp7< ~?il w)8-3p΁g"XXvH W Ҥ6Іp@hm8  9﯑ug].+&i.nqJMR[ujHT$ ҔO4hߓ,?}M}͠9Ȉcd12q8FF##Ȉcd12q8FF##Ȉcd12q8FF##N׭ ( c /L1V@U*s4aˑ̆9:7d)/E -c!U "X K}X dX6oJXE<,VSi 0Shg?Qg9ֲn"@Ԯb%xF}d#6Ljc1bq8Fl#6Nu}MM?W+Cc8Fp#8ʼ278\7'I `i04A f3H$ `I0$A f3H$ `I0$A f3H$ ` 0#3Y0?suxބ<-X(3o;.,a),al->m%|a]^}C ?a_d1~šDq(QJšDq(QJšDq(QJšDq(QJő2IyLR^&)/ITBeR*B%+AU:ԀP jC aP@ChMq0\Riz@[ht."tz\7~ A00`,(o"X K}X `9U"!fHY,a0tE:R>'6& [`+| v. {10o`-|{~C ?a_Iqp~p 8 sfH"\zVŠSXq +Na)8U&T2 S1q8a0q8c1+nM@ xe)IJe܆2I$pf8IsI3!i4IHpRb8)1NJ '% ÍE(0tN: 'Ipa80\ER[X:bIm%L,i?1IpRc81Nj '5IpRc81Nj WVv$1PD`2{2WW+j׋OM9fиE3no?6Gyl(-bha甪Rj@MM7pR[Wh*)u50M3ҀOq+nμ P91N)L,Xd*^UobrTP%4Ntbe18U="h@{D#,!6>7 D?TfG[#D?OD?(wGb j 8|рDЉmʟWk)XtiQeU697J[pS+dtQD i%YN42RR7dܟATkKdR?U~2P?S?)O ]%.ȶbl#>m'gi֌5K J3L ~<xT\NcbbZJN}&=6l?.dkŻXxSK:}A_wxbƽ3 78>ǧS8>O쓋c?p}e[=p|]ٙS)q|8>E"Oǧ!w]#.^ Ed0B9xjB- r"4%1%-#!333333QHhJ'iIvi'iIvi'iIvi'iIvi'iIvi'iIvi'iIvi'iIvԙiiG}iiG}iiG}iiGQQQ摬}$kj!Gi7iMvݤi7iMvݤi7iM. MHbzgcZ"14̻1JEO5S 5Y:8$^XC`=SH>jҹt$;INҹt$;INҹt$In1GJ1z=Ѥu'iIZ֝u'iIZw֝TYF͝G]Hr/ H><0]f@$a;쀝 v+ˌ}XBTJPAu#H7ֆ:80A=Óˉ!0F0 F{5Ke(Q*TG,RYGE1b<*yT(QQ̣G}zf$ImFRf<- g, IiFRfIHR3 .H4H16f@&\gU!rIu᤺pR]8.TN 'ՅIu᤺pR]8.TN 'Յ© `rPBGu᣺Q].|T> ՅGu᣺Q].|T> ՅGu᣺Q].|T> ՅGu᣺Q].|T> ՅGu᣺Q].|T> ՅGu᣺Q].|T> Յ§ '<0^0&ϱ0^WU `:̀Hx |XhJG%㣒Qd|T2>*JGJqSRT)n7U*MJqSRT)n7U*MJqSRT)n7U*MJqSRT)n7U*MJqSRT)n7U**********************E<+*%*******EJub:RXNT'V+ՉJ^Ȕ-L9 y{|S1UM@ xTPPPPŨ%K73R\f%pƟbrFq?Is.5_-$p&^}.p&qy= .,/ Y2Sw`xPiJ=[v1zWQ[=}༁}>S l_޽EKOP,$4?E^򦮏lglcz&X2#6W>IPE!yZ<;5K94œ»,cmSN?)]%KsHع"RDo\H"^$Ye) )>~wx?ku!4D26򖩆c 6ԁ>ChO@#h OSB3SMbcj^t5-l=8oX,lQ6nQd<JDjEuOttHF񚾲#fbXUD??! b>UM|w'z>_|%6ep2\p97^pCupip񝡿a8/4j:W7W tPϴiT`ѤGG[p-?T_T~n76I}ރSPm‡COWht?xf _Q{U;ThXqݵTVWiT +4iK[U^Omzpiݲ?l>#a+OI}];i?MwU->!h2Oߝ/LNn6S^vFw6ޭ{1{\:Ws_>Ox1YfyW_'j!jӤC)+Mh5POS6T#gOnbfZLJJUTRR>NMEi&NBg{MP?U6YJP)*uJDSTy(ZTTWE,%GQ|,%GQ|g' Jd%GM"X6/a),V*VX B|:>`3l9l/K Esh.ͅP4B\( Es|$.ᖷD1ǨnG" 4"ͣ+jd3Vݚ 5ɫ*ߪܮE&_aHSy] _HSЀ ??̟Xgהfl yܠ_eQ18./QF~2/(ՠ̝ 92#(yC-"F-bnd%<+ӂJ|51|pǥ \:KE n@/u^#O>+ _Q9@׫Cպa0팢'|Ydh's aga|4?F vH,RLPM棵yJ8f4MxC+WerC(N(Kf #o~_ ~1!L'ഴp,ăAM$sW. 9ڗ_1>T~u'd%P.>t*Je.StB'⣓OS3YL^♙<NPpz"l3?u@uqy4wHrzdory;HhA(%a%aq*rjqܞU%eUS&''RKl{PbD[PK&cͱ1sl~ؤrlnslnpl96g86MZӐ H$_pRU)Ǫ4CtQnf 'mz]T4}r\i3- wD5Q6Fi( c}Hc؇ r@OA+mV{3`Jh%;ԎVj@+5LRuZԅVPLz2z&#*[50檴emyL-3h 2$B{ОNS=~;mỵ-iKB{^#h/z\3D<&hF#_N ]TfCxaQ̫+zB2o2xM^+#qqlB !?y/xvLb;=pEc}*}\zu2LTSwae\E古 RZ )AJs~$HJs4)- Ih#$4$4 ABK%$]6,oA*s2,T 9HeRYA*stRYE*s HeE2iA4 9iASX:IAs HbUIb?$/ArI[$3tRV)+C$U]!U]!U]!U]!UIU餪tRU:*D MtT:iAr)~.EY!)iAZ -eRHKҒ -9HK@ZrRIJY$to"H hQV흴ǙׄZPɛ>4&0]OC$a;쀝 v jȕV㣲H?2PTjPjH?3όߌaPC8 hIh}к ,<a̖90^7MX ]Ʒ#1ç.al->m%|5d v _7p'8 1  cp C"\`K`e@&5nj Y@7fCTP c#(ա@ aP;7T_iҚC' ]+D@7='As0`Qpea1 0&K0 SaL < `1,a),VgB 6f[s_lvnh(>[ ~?/ 8qp~p 8 sfvUC"\p bk o*M7\ȃ|(7LI)[r  y&xP*M6CTA5L5L_Z)PLD柡WUs4Qzi8NEjPjn)$7) Wg!jŽ}=+l$ij?E4!w^ gE7>j$r"G)OjzAi<+A_CA;kaC%n),cySԥvon"\Q 9"j֦~~fPנdZ,ϚrX+a|a ! >a|_MalMV%|a]^}sSKv Y3TQ;5zy1Z+j?݃hjX8. Pk%ߩu=Ej/5C{;Y:FSDw.zm좍oick3=KۖeٲT-ڴ`z&tm6͡MshM&46͡M7ѦhM&tm6DЦ9&tmCЦhO'=}5чrhAMu&ZPϴP4BEux[¡2J4uz-hK؛vц8omIцe'D vkKUŨ(aTd[#9RGT'EelIzo0:[ ~z0[3m5^e|y6Ƙ1aycƘǠ^gNz ~g͘ NSLf,OyЍ7B iVPEE~c5';OrH,=E1i%׈Gh~]~=R"=r@?>~F3A~#HE$>OOLzՔUrӿ*yp5KԄQN&lEM45$ajIԀ_O 8p>5|jgPuJ׀55\;jkZQ%S^kEژ/7@!aJ l<*ۑH{Rbfvd<#!&hzz&Pc'yQiDӈ15OjU*Jeܠwp5~d !ݞpAP䵤VRn 'I2uFD}&Re7pJ}'*2d<s4'5')n- P~( & I~( ?_ߚJ%ᇒ{ۑCI$$'I$P~M~k~( ?JE¯A¯AoNJ¯AoNK¯A¯A$G#I$H~$ ?I$G#I$H~$ ?I$G#I$H~$ ?Is!#[בבHHp6z\ 9~ ^6x 1-lx2X+`%`5? %%%%%%金Ha$0~I?F#金Ha$0~I?F#金Ha$0~I?F#' ٻ1BHy=)'82;ܵ"8|ROBGiR,K9֤8{8f2wiRѲ7Ѭe}d:I;N W#3]"O `U2[% uOy'y4zQ 9Jo)5XǬG4_74#!f!*/G3K&4_X:[V,c+[Ζ_+< r9C!{%tc1 r~/XD7gٛxAc^/x^i *$?Ϳ㿪h1{&hÇcp 1|8>Çcp 1|8>Çcp c18F c18F c18F c18F c18F c18F c6Æcp a1l8 ǰ6#Lj1qx#Lj1qx#Lj1qx#Lj1qx#Lj1qx#Lj1qx#c$aτp:H1+q8Fq0P1E8Fc8F,c8F,c8F,c8F,c8F4cD8F4cD8F4cD8F4cD8F4cD8F4cD8#=.M)qr.qLSlDn!wGVSU3f?n(~E/qTˆiLUe+2ʲePc*QBa& O SQG2Om0+]GRIiw@uD}[ٺ#lݑ/C$C[ů+Q%uTpTq)TpƯd3n0܀ ^ fPIt0Ze<:!\(70#|]0p5*!T ͔1 -%^B;mD/7Wr)?zTCT3]h4-4u.=u2яhts!zY܊^kqt-{6"O#O#O#;H44 O#O#O#O#O#O#O#;H44 OC_hmu]hd1YFb4,F#w]h.4,F#]hd1YF=!hbg4q(:@zCнP)7 Gf;Н~tُ@wZ;Нhtg?3 yТ;,4d xA=*ox'ocyc M;nG$&8R9Rr^Hrrjr;:$ΌΌX{8_)K ?yLߜ|Y3xD [`+}<؆[SSxp\[x5ۀ>[>+J^i+mx 6҆WJ^i+ms܆WJ^i+mxo+$2 L+$2 L+$2 L+$2 L+$2 L+$2 L+ᕷVF&aajXaX'n,:ƑOWhzd n?MSt(Sxֶ' OFasm`j Uk*]R4ϏM!Bf0- Ȳ#>ݥrz>4M;)-- ,~`J)+_ߙ+QC单Ǿj6ڂjkWUZSiBkV9'5muyhL`ލy?{{ٌ|* `$#V;ƶ*G2m=8r͋fPwA"u=ۺ+;8ϒ9ϑcy,NkNbtMr2]H. k:>QmKV>s?RaMl5o}7c4=pFM_ hxe?pv9#+%_#GqpdsdGYM紶^G͟{S l#wf#gô$OopTY*j3ZP m5VC[Mt IiZ^[^aQuUU}/~{5qJRR&qEJ)(aJ؉)J؜6ޞk=5P+S'@UC*kOU3s-5\"Fc!W`!ZT'+ii~+U)k_S U /|_{`/K6dc/ΛlŨ&l:Φl9zΦnͧEfSo6MfSo6MfS2(SޢOgS6MgS6MgS6MgS֝j5]vteo.CrTZ6'\E\E\8\EQȁȁȁȁȁȁȁȁr|%)E $g瓳Z|ԇȁȁȁȁȁȁȁ1>6!mDnۓۖ6(kfG{o^}N[< UlӮygbMț dXWF)j,֜5cXs:ŚcX9kŚӱt9kNǚa9W&w(N$G-+Lru!\]DHr5F/cXs:֜5cXs:֜^˚c6ӱt,:NǢӱt,:NǢӱt,:ŢcX,:\E_ŢcXǢcŢct,:NǢӱt,:NǢӱt,:NǢӱt,:]i0i0a;v0f`6 f`6 f` v:vaL <vhm `7GCa`|=0i0i0i0ax< wdN4N4N4N4N4a; w0; wo夁7sڱb; w4N4N4N4N4N4N4N>xY5-|+l~ƂvrgIӞR)6$xRa{+c XC*֐5R|*5JͧR|O7$(I K7 c|}o9V5DC)PJB2v*JmR۩v*JmԴsSTj:NSTj:NS:$KRTj,KRTj,KRTj,KJb=zQk+=(2r]I+]SU;t~jB`3}2Lwb%jo.v^gP aup)Wguw_Kob,g/z^b W0 L%tA.n;z^xp ` D0L`$I`4kO3Yx^/+Ux3[`&xfB ?"b]qCKGE%)T&gJJ%TNQ'?]Wt~/bt;:wD/&-կT璿_kUMzk7țwZ_4S1fj^ ^֨чe_CQhP'U9+8SJ}mc^sŌ?uXF7!uk'nk(˚Dk=D?z5[_6 gY@o^|Ub1o"I{_/&j/KEջTw{?x[.Ebpo#7nw;pL#'Uqer2zyzJl0|! UD`5X ZA6(A9[VM;,KQ2:&3%q{dp^wݨջ^1{ǥG)U7W"bj|jZK7zZarjMfQ,JE)YN)(eS,JE)(e̢Y2RfϨF2RfQ,SXJEI(i%͢Y4 [,P)t*%]Ŕ4fQ,JEI(i%͢Y4fQ,JEI(i:*cw)a<%QJr.,wJOR:RSxJO)uwc0 њ[њ[9}&>V0rH@nzufr37;d pֽVOf8fmQ̀ ̀ ̀ Ͱ{O6n36n36n36n36n3~pk44WP~ fmfmfmfmfmfmfm\Z̭(_{Rςd 3i3=u9v|Cz—YחK3?JYƤQPmP QcͱQ} Îl}6w쳹c F,^xp Ɔ F,`Ăj8D<ulDrprp}:Ƒ1RIpx c(<1x c$x c<1x c1 ()ōbN) Ihu}<1x c<1x c^\mvxuyErr=9R>Ў>N4^Fu9,'u,'ױVNGF-h/dL&gM@S:Ox&ޅa1,~Ic9su4$Ċ[Uux\hH5N1hGMA3֛^ll2eLg=\rĽlPq6˗UJ[VM/vr?8G<.bX hp2O-»U/uO'͗OGc0,Ћ% VMzƳ~u}PWE`1X'#^^R u^T?Z;آVP!* VM}-"U`;Yn,JlQ0<~]p.L6fVx[{uy޼v~üC6d9`:x[z,W0 LrvG t  z 7~?A`00}?#(Nzp'w0 t x< Ix<ρ _Ex^M0f;`VgQ˫ϩ(595p\9V`QõFڨwcce٫ΝX]hۘjEC5O|ҿH*kڵP,g\BJsk=Kb'ݏMRȑ8k\h%2x,E՛@0 `0 'a`8FQ F1dp 8Ƃ`8h&u(Ca6p; `%WU N/1NJ_ۇe_Nj۔q.wqz ^ZuxoLZzy X`V4+Vs+`'v(r{>!PIRﴞOg9l0|! UzUV5"ll[6ѶZV?nKX>w=V6d?cO8nCkbRT95)QRU}HU]dtS*+q';#؆cYf%/K>r"/W7εROK\iw1ש|r\aTK9jG}/W׾_j*Z*ڌ*څZZ[Q.ݴJWoJ. l騵 l;J 5rr$Qʸ~39^C=y<-$%vwRMBEb4jdFʏ'R< Cw @1sFY6Mr}Njjw Pj[}+eyLKyWWGK_(!3({{}_OQ&__=}.;;YCj!Ւ0rR-@vz 큡TWzEYw8ͳ\D(Jκr(ArPB(y"%"(L˽Bˑ_XGN"(}OۥO 25W%fXu1W% aV1VQVN:/>bwzZCԓ0k )jU[ &[1O?3"h=~:Egjrfϝ羖9[<~v29Yѳf,4WMVcst{zcbĦɕ{4Ɨ5~ȩˮ\z3jvֶ֯i h[9f39OR]oƵ8Ͱhi ,Ǝ_b=(`ʢUU\!~qE8+xD?W\#;",j@U͹LJpђx׸I.U>}6/U[<+m|>j˷h+4r|kݾu_d_}Tf;l9v%֜ʕmygNSSU|@hNǛ=[j?Ee[Z-z&۳Xoz{wPYYi=cR}c#/Pn=CyW߯I 1diV]o̐oy.aX.}ڍث}ɥQ[Xl'Not.ыݳu=Wot R7oY =#KT;o+)2B=՗gځA'.+gz^xp ` D0__3_3___3_3_3_3_3_3_3___3_3___3|璿.z1W'Fs 8Nc 0\1o7zy nwm,`*Lt ?K0K_z_`>x~dWb/%-s_K 3:_wr|!)3V)qW,G|bLv9oA%gro'Ъȿָ.*ە/Zz.揝sգwG^ߪ:IOVA.n>K=W>/` ` Np0@8 cp*C(:Ɓ3Ylpmp]]+*p5'Vߧ׃Mq^np'wx{6|pu'jv5;ǃ~ @} Xf9Dl \|=&5IOv_zf@\uוzk>c?z_ԫ]/+Ux3[5AA>XH|XKl,O`@X րBEr%`"P_fP*js+`'v(~{>!P j)`p}&@ `g C00#(Np 8UONc 0 p>Lp) \׃;nw;pL{}~}عx<O5Si x</Ke x^o7 @{h0 #1| >`| E<_||BX~r Bz]V ~A͠T-`+vn{/`^_ @n={/`/ا 8hgnU5u@e2"0xr)ϔg3UxLsL*QJtt*֯t/˔nYrfO,D4j縞fglQ8A'L`iz& mx &mx MYLmu>'2.BPE("qʸe\2.B PE"pj5\.B PE"pj5\.B PE(U̼\dp-ܨ+Q ( ( ( ( ( xrf9^Y,k5xrf9^Y,k5xrf9^Y,k5xrf9^Y,k5/t% :Ax(4Ax(4Ax(4Ax(4Ax(4Ax(4Ax(4Ax(4Ax 4 Ax 4 Ax 4 Ax 4 Ax Z-AK%xF Yﰚ9ephZ4dv=@.t]A7ǃ@o@0 ex2z^ ^W/ëex2z^ ^Wգx(^=Wգx(^=Wգx(^=Wգx(^=Wգx(^=Wգx(^=Wգx(^ ^W/ëex2z^ ^W/ëGzGzGx|z>^=Wǫx|z>^=Wǫx|z>^=Wǫx|z>^=Wǫx|z>^=Wǫ+x z^^WW+x z^^WW+x z^^WWWx0^=Wx0^}x9x9x9x9x9x9x9x9x9x9xExExExExExEx2adp 8Ƃ>Ylk]ΗMuŭ`/ni-Hq+X[.;ʧw*ăf9hz z=V+DEc!X=Bc!X===Rkd!4YMFda4YMFda4YMFda4YMFda4YMFda4YMFda4YMVȍ`8`YKMVy]V.",.",d]BEetJtY]V.+D etY]V.+@ etY]V.+@Je2tvtY1Ĉhڬ5Htc*`V"h-F+@Jh+\贕tZ!:m%:AEi%0:-N 0:-N 0:-N+@[]0z-^0zԻ@oGla4[Fz'-n[n+AEmt[-\] &;8 I>h&)Ml͖ `f+6 WAY FoAmAmAmAmAmA jhBZ!ZVV+D jhBZ!ZVV+D jhBZ!ZVV+D jhBZ!ZVV"hZ-V BhZ-V[V[V[V[V[V BhZ-V BhZ-V BhZ-V BhZ-V BhZ-V BhZ-V h0Z-V h0Z-V h0Z-V h0Z-V hhhhhhhh0Z-V h0Z-V "hZ-V"hZVV+EJjjhRZ)ZVV+EJjhRr"hZ-V"hZ-V"hZ-V"hZ-V"hZ-V"hZ-V"hZ-V BhZ-V BhZ-V BhZ-V BhZ-V BhZ-V BhZ-V BjZoMwTYAEjhBZ!ZVV+D jhZZVV+@ jhZZVV+@ jhZZVV+@ jhZZVV+@ jhZZVV+@ j%hZ ZVV+AJj%hZ ZVV+AJj%hZ ZVV+AՊjeh2ZZ VV+CննՊjhbZ1ZVV+FՊjhZ ZVV+A"zT-`+حC-~ B[ V~+A=eˣa-1Fk ltw ~{.;_Ӧ[ګTreX\RпVoR.遇T#GU'Uw`a`\.܀v]z)˝Dom=[v-zڭjr}= FoaNoGi;};uzN}_DYι7Uu-R"ۢv@["G+.^H,k)uW;JQajrAgzBm^`s'kj{X ҳv~u]^cR-gL^Wg}Lէmm라FKYʯ*bUL1h$dLjٷjf9Ǵ`wK>)Z1ũ*4ڨ4RiU`2TS}ԀZjJ=@p r R.`-uΆ+k5#5g#5 HRgņR1D/.ˋU%sR\溌-.'+R>Դ_j-5퓚Pӗ)w9a>wrR7~3 xW-㛉5|b >X5T0߂MXN|߷0>|؇y+1Jb%XI,V2XřCxl$棱,f3+Uyyg^ %aC7XRےcImImIg[vR`3vtXRCb1͘ZnDCLzb Z\-V&BHJT7쭻ꉭN`:;;UbUϓ_–KпB+դp I3SVݠRԍLMLu 5U݃}Ocjejcjg2LF/x[ mz_/1ҍ@a 2>d 7,c19xe#FeFjjl26av;K i(-/JKh(-}[UU}$$]uz lu3뷺nCvMꚪZ}az[w=LӮgHY׳km-ry{;d))*snS=SU=*33{=_E%e-[zK[bcRcRU\L6~Lۘ/fj媖OM`nU7VPjCfd3iͤ5PZZCi]Һ2uՓUOZW=i]i]1ZWsi]ni]ni]mu52_T͗bf94竦f|=mrf-f &bn6˙W\̵%ꎱ,2&VS͉ b!OV;bgʱrw/OԷzYYCT<gbT,:;l;{Kgo=RǙ?i}|\k[˙~fªZXVjemJim1eU,w}\WH7?V@?-[A%!]n6AJ3v,G1!q/:VsƽjZIg+qθS;j"_HyDstSJRD e]S$V؁,QQS :5U7Rr{Udq0@xW4!b5{ބUʾnU'y~MxHbmDj:&Q#rknY N*M̫b/i[ÎVU#[vvO(Z&.mM(7!m~_xz+%Wb_+x*X׫=o$͍5﫚<̉+g9 G-VjCڈsc~/o bo}L uZiHu+}Ujhj)pVO֋`Ž\^WvXJ[AbUίb@v3]z&BRq-'ZIͭRӃiisERel>*&m˸}Jʝ߫AyJ>q~)kc}l0^O֎WgBe.UP}7BBUrD-dfKDwL׊D5q舛EG":JCĝ|7).3֌Uw㱧Ǟ&~KEW؈QF}FSᇿ1llپטh^r}q{lk܂w]lJJamnp̶\&dxnt{oz՗1yU5ӱ 8lm#'/mo/eO[Wa7W3yH cסǒⱤ[U;HNx5ɫB盢D'ί':?It~}  Q.QnHK,l :9 :9F첁e(QΧQo@,K RMTS,KK RDƊƋ^bثG{uttR]خGG G:MQ16}6}6b٦X)meb٦X)mebٖX)4Emľ66 Q6cEmƉڌʟW hNS4ghќ 9Es͙$h9voJĽŔ׍5Ʊ_7d,H9u;vK)QVT\G+Q%QqD1'HT\diWM]%KrIO\} oZm34C\,ׂVr-h%g8i.i חDn0%L>0SL3\?MPU9 gYۮRuטбY_|-p⥍&}RLFt=RN'Ꞻ.7p:FsD4WU^-JD,!\?Qr\ N.[/.!XJ;ϷUwj"rW׾key&mm~p)P9vx*?`Qr?PH*ˠ;;} XFRfku"l=vۨH|cMl)'2zrX$:ļhk\^flwj=Ju^QA>Y>WckqP_tqz2l}o/%v$ڜWc>=Eκ+#-ZZr߭꛱1G${~~Noʪzؖm]ӃzsxھI}tʹmPOO"iصVahw5^ -8ڝte߻.塚u5k8{k_p_/:BX-Q֥W)UQ#GDscVp̳T5)T`rjj],9Ǫ= ױ'M//kw[㩔+wWc{Z{dRGKwZ^7ERd2j&*drr&ڡaAU eTaLfFFhRFShaPiqF+H5RUndL#RF;htTݟ?SܳsT'u^^!׽ʽJwopoTܥ25ȽٽE qowoWݻQ5}}@rrRyn$Q==ɞZZuww:FX,,uo'uWRgOVO_._U?K=lKퟧJ}F}__/++ԗx0k.a]ٝ0)Ff򩨲ιR0^&K⨃b P*P*0 blcxX^g1lQ[qR[R[VUL260zFC!ڈZLZ/HjhùuPu<m$5Hj4Yj5ܟ?UqϨ]/;[sc?u<<<R^;ԺE/a}{)?`G/bb ְA5ro&R.2c+{ V@XI=zb%Jꉕ$ċ$JJLK+J,d2'c+.l2c1nXyOy?P>~PGO93,ɏ%}ؓ%='ZU%U%Uj(=,˘|jڀDLU#VK(٧Sbnډݴ7\Ku0LT>bX#Y5khf$c ~ h5FK&HaݶbFk5S6lO3ҸJmyDў-9Fc?%KS OɒCSJK$HK$Hߊ[Vҷq~ +y6YY?pܶX^k*==*~˖|{{-x_rrؽ½c] ݅m+lnf+lne}{6j[akNҽ˽K"w%ޣRݿi}{{?붥6qRJw%tqa=^Ojy|l{' b=ǜ|@%ߚߪsI`0U*M*[~捬F*jlqRTXmX`u`>ȖsT5WZײ~u7Y7̋"*6vkjH8nU҆ц?:IKn/-/-fز//SII Ow# |\5V/_/Ub`a` |NP.d$T:R?c(r\"O֏-m.1lF"Ш~]3hZێT/P님i;d{~ۘ3 )Ǹ[=B(GB_^izZͺfg)w?ukΖOOo8'䙎y<=ӹU]%m(5Qn]﮳i3?'֫8dY,b[ _~7r]&M{(v=YoO\__9?=Fge5>%e^};UfU鑐Vc>2 ,?^_s@Og=gQW +J)qlo߳Fb߯tL/GhҦOUR?/z1UwgQa;:eZ&NNv;uV{Q]ep}rβ;+߈:}e(=O3O}I{вGoDM0Y;JE}c;ﲶ}lYsXVv{~_hϲWd?V5fnm?(D!vaJaI7"hcvP]@4Ph`-k,N6 |ړn'5qIt#э[+gYcαOrؒQ~G@+|I>%^W{uܫd4_r 徽%}ܱO{r>Mϧ='Qw{ rO>K/=yܓ{~'?Hɻ䞼GƢQ+C_F2^eܫ7^ W?PF ;r>[;]}S;#1?fnjP%LDԍ$.u#JDKbiҝ%n"Qtϝ%~N9O?9O?I$sm$rN9O"n9I'q9'I'sD $r&VA"ab[ĶZmj.BlV3fb[ŶĶ:mŶȈ\&#seBJH26!K&/cdT2*GȒe$2/#be,P4TF% Q }jrɨXGF%2*!VF%tQ }dT 0jtWܯv/{2w4ށF;KzRwJ@ށTȐEz;!_ I[_ I@ȓ~$h#m ~6/M_ I@cȓ~n/'M_ I_ $I@cȓYz Oz IzddGN/` 0D} dG~+HAK5H_H yyv2Rk(A27!QFXҧ(cC,yB!^ƆI/CgվU;'&#AdGH1ifCj'e|Gmfفy'3sH9g*◞$i$#D2B$VzIdHKI$ɘKIȑA2rdq$HJFHJC*І82Ҥ$ɨ4>$◞<6T_dP6TƧ2>Ŕ)e6@F +2b%[nzȸ2nt+]7a#}:^Q҃;JzpGJH;!>åߧ\~&!}=ySzZJ_OI_O7ɓdP7o(/y xW|YzJOPd@}?俨Ÿ瞹_+iY OOr\M'bjHɒ߮Y[@?XC_A=2?_GnՃ2~枽=fߟ_Fθ}ƿ'tJol jT u[T=.6;Ƈz~c?;O>ͮ&RճZbydN3 .3=K?PBEH,O?usOh7HMg3WONkV]$MZI*f9>V:?uay͉N?B^x(G%QƉ׈m5KW(=~k>xDwy,Xr/]icXZzЋX鍔vسNjB~#)'J=y1KQ#:ڡwSŊV w5N)W=<<=<=<#?O_URQݦ( QҚJWUiJӥޢmުm6io=-~O;Tcd?3i{f]3"(r0j0j10jQyGj[ Wدz_~5 7د```\`wc ```j~Y~nL80808 80 80 80  X5808080'80 8<80 80#80 80'80 880-80 8080-80#80 H0,H0H666% k (kDp`Qp`H"V=X$sʄv;lP=VF`°D&_a#د0د8GѯtDa\PX+%bR"JX+%!bR"JX+%b,,R"JX+%b^- V^^- ^Z=xzj.jQJzSyyE%%E%o6=86=5=x5-xҴϴϴ̴`ŴjQoQ Y2 `´zӂҀҀRRRխQՁjG nGeƻIV"`t`xCIJZiZ``4`4``4`;7򂣺U82R**-*gi̔oҮ&u%~D~xf;oux\V|]!۽DIE<< gKޒpk绫x/ngw{f4jM'\N_yqFs?A{˺?=įwD1D^A 5""b~bjz6J,b~b~b~lE 1blE 1%b~b~z/[bC@̯A_1-b:NQWF{5iW{5p7!#!![W/"p=br4!FOu'uuu+uuW!VT!N{uW!DmC@mCԭBmC]ۆQV06<)*D6Deu!FԭCmCmCm+YGGԝAA@t֥]WcL0&k]Q7I3V#v#v#v#vc 6ED"LcX2ղ,kX@liBliCliBliBlhadkZb5-6vF݊nElDlGl e/ĖĖXbK/b0bK bK;bMzv=»DH@btGyPGnY"P0鬂HHHHH=&" $2p"G@xFs(AXHxr"%BdDv! {KB+ 'o!E@C&0"*"$q I!*>DDd(DFGd")DEd.D!~D@ mDvCd?9Nxz%艗 IDH$A$X", BI*v*N vpIOV[n}PӧY}AG_?H?T?B?Z?N?Q?E?]?K?W?_HTBZNAYMSG_HD\JFNߡ4phѐ0 9C00000000000ϰذ̰ҰưްѰŰݰ˰ppppf8k8oh2*:4cҘ1&c?@p(Xd4LcqqqqqŸɸոø۸xjA{~~8Tp;#:j >Aюq)YEՎu ͎m=C#S3sGsjFu΄39뜍ξaΑ1IΩyeΕ5΍-]νΣ6YyEgKҹ.+w5Fƺ&&f渚] ]K\]\k]-Mݮ}V1IiW뒛qzv1wʝu׺}݃C#ܣSݳs݋K+ܫܛ;{݇GݧgNx= Oړy=}=<=<#=c<= b/5FF&fVV66vN:|~ίv/?7G'ggW7wOg]E@0 H2|>h, , , 6vvZ' KA& ֠; Ƃ`6Xl    N N N . .  nnn    v;C\H2!oH %BP.Tj   M M  --- m m m  Ά·.D͢S1)fļX/6āq8J+N'ęY\(.ĵbI*wăbxL<) 0VakcT8 7GGDž'gWWׅ77wOτυ;.#7"Ft$4FFDGEFFDG&EFfDfGEDGEVFDG6FDGvEFDGFND"g###]QET5GQ4MF3|>m...D7EFwDwGEF[Ǣ' K1&c֘;bX6Vk MMM͍͊͏--mmmu:\\7qo\'x.^oOOψώϋ///ooo/ƻ.aN8D$LdD})/101$1<1*161!191-131'ќXXXXXhIlJlMHNKL&%N&N'ʘ2vMV&8[ӓwzғHYҗOnZwţFi=(Nw5ENTeXvaE\tU\pU’K Z@- _t@8Bz* T 8&6~h_FL>_-?H'iEz%p>p ~k{Asҏ = G&3z._@NdqE?8ގs%6&KU"}Kt=\弈Gy }zT,\ү = yu~Y>.SDP*!9!9e 2Hiڎ|NB"|vY JYhڅy:v-FY](PoY+RsgeY୲~~9e$Rh}i+65?wH%zpP'Bi F> Xc1r]J-P&Rt)؎[~ԂsQ.+V{ i qTh_yؿ@Xv{8KҨZT9} M 7W.h8>?*"sVi_oފcV@cGCsHCma(A1ooQ,,n(5Hm7e> k@xq|jyҳk@^#;qz /phhtV4IGH]LZ[5C߀@XECAk~t\@:8 ,ZtWez} [tĥe)hpޮi^Gi۱{,Emm/.0tT33#u(M:G_@NjЯԾ-~C#X,Z\z?T5#?2|]ߓP!L1woF׉4*ҹc2 amh,IgXxUR.Ñ2%yB{w,zVc׀()Wֳ{sUzcHdUCzI󟀎]Y_wsk-/lu)üՃ}#xgW7ZS*2Kwj.;Jy:w!aOuB!6_r9~gog?{ 5#4?5|\gRD?#N_]&(cIyEkUw,a`їb$/AfVr?s"fEZB<y=䡱 {T_-!c|u)t3ꍃ5GO^ zEWF:qM [YeD *%c)I ~U"suLVtvR`)A=(E㘐L0ުNpƣ:z)SWT: ZR Lڠ63MjU) <3DP *棂V2Cs`0&ؘ{b !'T !/B< z3~B?chK— yqq³³Xa<3\ Ϥz;Va,s;fV0c>"G'`m`az3'1O0 >A/s b~Cb~K3/3GcP ƜcM̽xa9=}}y}}ɶ1nf}lr_<5s_fqs3۹B׹3;or˙gJY܏]&I9n33s/_20 $w{ 'Oov9up︋\7sxi㕼y4ib#:o2c|cg.1d??t?6nod5¿ ogu Bެ(l¡p ު)|loEHaՊؾ[읊&#pPPwQJ~LQzʀ2~\WƉz>S/,)6kCוg}u sO*#;*J _dPQL=z՗8Aݩfwi~½٬y;_Ǖl<]}5;~9GǴj}]]?]]/..忢—jj_࿩}Q{e5ke;~}v|uFퟴOt.]J5GuCu7uuKjlKTZ֭=w^^>ňيt/+FN;{[I_u}ӅH1 '§O+>/<$<%L* >>>nsuw_twyqz'xzOggggggggggٳгijܳʳ9i{.x.yʫZnoYo;;;;;;;;;;;߻ȻԻ»ڻλٻͻӻǻ{{{{{{q>>ї}9_77777777777Ϸط̷ҷƷ޷ѷŷݷ˷wwww;;+:ҟ&?@p(Xd4Lſɿտÿۿ???o__ 0U@܁` H@CO`P`h`D`t`\`b`J`z`V`n`~`Q`i`E`u`]`C`s`[`g`O`PHxTL\#䂚1hzb0Ls`cop@pppXpdpLp|pRpjpFpvp^pApqpYpepMp}pcpKp{pWpo@phD-x6x>x1Rt!s"d(ʇCM~!Q ɡi9ВЪPKhShkhGhwh_`5t,t2t:$2JԋV-Řb ġq8N(NĹ|qT\!׉6qG/S!v&l ްN\.^^^^^^>>>>n _ wE]qFH$DHS_d`dHdxdTdldBdrdZdfdN90$<*69iG.D.E*Zh0hm!'?:(:4:":::.:1:%:=:+:7:?(4":.!9-3'?z(z$z6)656#6;6/ 8,2&>1%=+7v v8v4v";;+⺸9x2xxs|a|I|y|U|m%)5#;/~0???o__J0 UB&܉`"H%DCObPbhbDbtb\bbbJbzbVbnb~bQbibEbub]bCbsb[bgbObPHxTL\#Yƕiʌe2oX(K (\6ld٘eʦ(]6lAee+֔/Xl{ٮe-;QVv|Ų"KΤ?I&d>YlJKLIOJMNHNNNKLI6'&$'W%&[[;cɓr\U/˃TyOyACG.W>|JYs/*_Z|u ˷,SPϔ+(Lq)Mʘ)1HST]175 585,525&5>5)555#5;5/ 8,2&>1%=+7u u8u4u"Ֆ::PT* E"YWW4UX1bxŨ*&WLY1baŒ*VTlZbwž*NVhPq)ͤUi}ښvX:Φk >Aq)YEu m=C#S3stg%W4V+be2]l[9rpʑc*WNZ9rv+U\Src핻*V<\yDe[+2.c83L$d2L})/303$3<3*363!393-333'ӜYYYYYill̴feNfNg32*UZ VŪRU٪ڪ>UU Q5j\Ī)UӫfUͭ_jiՊU6TmVjOCUGW:Su3e5Yc֞fl"ull[l|bZQ6W;Ցdu:_]_Tݯz`գVO\=zfKW^[RzkVV>Y}BS9kΝ bT.5FF&fVV66vN:r5\Xcֈ5tMò5jF֌_3fj͌5j,YVfM5[j[spњ5m5gk\+9|2||s~a~I~y~U~m%)5#;/0ߚ???o__Rr 6VxC`iOO_ ']3,_) Xs?e880YгIT 8W"|*  OP -/ yЌ(BA |3E!!}zzmF 7I؀Ar|3y LQ[F wEyTw3r6!ѯ!-@Oqʼr.췠ݱN3gPfWep~=gKE:YzԦm'K#Q 5=P DbO/]~hFZG}~ H !Cڅr[p^zs_I_u(8Ae5p%F\)W]EFoHWBUq^7 1Ut4A?gy (9?C@h J@^z OﷷO@=ţKG~;rID6*}:,-uEG78zWDG72!J`iE|tI)aUxrR q ,r HmHk(O4oӱVкVg#Mrllҳc\st\UDd('Tv}dyȳ (,3- i+F %Emvm/q%P򧡁ec+tB =z!Xї""mIPjjy:QkY3U4io4Z6~a)RfwAs1'!hMn"l[//Q 2am R}Vh H7~YКԞ3 پLkY+&$zfO;ԃ(jcd^-v]쐮x[e1 z LOk%m{Y{Ev/OI5Y#;kVCү,'ZyG앐uIXg[R9<ꁎ)3GNґl°ԣCK!falRKs\4Bḳ4ֆx#ԯS7C!J/N7:#SOGsRo|ԯ`(",䁟V WSW:1e t50A1|zJ3?.8#JKFiS`$Hݎp$oY&rhn|y2蟼ks9䁷}r+􃐦#_8Ó>j,ИQQFw~wIS[MVk0le k J,׀OcXE4Rfv>t̲މ q7"Z4:@}?QK)k :{."ӹR 'oqG+p=E0k.Qz8:UQ>a{'ei\۫繖O+׉Oc\Aio a'L-R4.4VО }e} l^d(N|\eyݰ$'c1ֻBN`Sck)=ղzVEseiQYZధygDSrEGr"Zȡt u1#M+`O =SOPA3p<0P&K'yt64F(y$Gԗzː!MiD|p'IoIRd)Hrrk5VRoidE@^A\;6YW)8A8NEZxkIJQ.Ӕy H50 } 2{FOXgGh(@GX.=GdH{HtZu%G=8"kJ%i0N}yHtb4}2B ]dM11xXyZVIO3q>^nQ׉EF]}XDnO@ʌ>A%ӐDgdB,q- }HK{X|6Q|ǃ= /1\tUeokiҧ9i#}RoLҔ%fTDmW@D Y%ĕG)zeSQ|g;٭Xc#&.XqnU5nWUS}H_a}?jAۄ>cfx&0M̭L>oª:Nf s33݂ 䯑3͌cf`f0{/̣BrS7Hy9L`3/3ӘW33?0_ifXYk[XVXz.O5]  OP~ W=*H1as|aj={KXw!Ő.CDGLIO$B$I$C$OH~DBd8QD@d2iDfCB"K,'Z"-D6JdD9H1"'&NK DTDDDDDbDRÎg'Slv].cWkFv e٣ a}%UzhaSc{*JU6< | r ?_. 9WBvM"وZ*G%g~TJ񹒒{; rk7bu]V L@VGLGx&"6N`L俭.5W=Oݢޠ5iC,Hǯ 齟`j"l 6";!!"G'r"td#F #;/HH:"D@d0aDFCd4JB钽805\P1T"-ۃ2QUbUhAf>dAZC?e6%q`ָ8WE>ZX؊}h=65 ITS^ (('{qfKr3Bq<d{ud=,>"keXr3!+o !,m ̗p}h3E{qӀ 1{HGe}o,g/T|VE("C.Jx ,- V3E`-3,r܃$>n]-l9,B; V+\hdsb2Hg[ZchIPZ *߱-h*'/AOGFYmSLy~#ok%By5O"jRϘ9N:龋ř',xZkqbϧV8|1x7} ),${T3tF:su1:#-߹Q Mji,[wt즽iTu ;:/o>xRlGjo;t@o,vA24BA۱^`0 !lH7"}c{HC7=$o!A!['Ic"l"Lm{SFv{y>SL_a.4;MugGWwVr.%H+X^(hG mKʐ_iw 7f\/K$DL)͉'hEil'hS꫍wڼ_ѪMq\KvFOnˏ^5u uKJ_'߻'e?=9?rnIJ{szOp"{Y'S]@ҽ@ϯ>;(H7{~ܠol']@σ hR1^, U\UTUU5^T7nQV5T T}D5HujnGUCUU WQUWEuACSwU[ͨY5 JVkZN- j\ETR:c:.S' JA-h`LU N!.T UBVz Bp(!  |BC)<'a8fu 4b=h?02_aF1?%q!Vmc0Lqgynb~}ypq-\ 6p0;>>cw~???Ob_')YKt~:{d)"%favAEa-ʾ Nn9//(7O&< kI_Zүc~t}aWL]1®ܹ®|+&?^cмO:-X] .եX]V~KV*}^W_ ;L**aeW +M +M kI.,"UvvwT) ;4vxݚ xUյ}>n$ILID@d& "20L0dgn:[|FT|X iK] il ;#Ú#Yg9ngo!U]w|Pa*k؂m؎}8C^W3j*KSo-@f:͠7(f,f4fc3gMv`7b?0]jNOS jIm-KH3%QΝn=})g$Wh4*k4&DDi g4F v@ivi{vQ;h]P]S7md[vVcC}BvamۚvȬ:J,D4^\NKoS6ݴHH5Jesz*uU{\A|neSĪԧ/֩/E7uI]V-Ŵi%մF]QV<`V=KExzj!AzNC֩j Sk﨤UEO z:jگ:Cڨ6\iO UEmUTνTn+ȶrR4/ǻ96fc_l8lqD1/ jZJ|^CjZ{RR7MܢE4Ƞ֪\㋗;gՒ<YC{ita:BG#[|S⧰n)0.+XYYTElM y)ݹr=¾w?K4-z E"Bbɶog/>;f]1,5r¬4j.iU0f6җtMͫB^E ˰+xU]+:^6`#6? U5FUQUSs=q?RTS?o<+ $Q(uaI$ex~- QUP8 zERxMP uwFr=対3WU31K|\Yy?#d_Yuk^*v;:IwT/+Jʍvjn [˭Nrpܙ,w?Onz[תަ}z>>zg?`\0>X:X&X6X\ߛ;34<`;2O$ntd_MC1XB4{j}q}}{ZF-[ jעԭƓnC!MBkw;ϲc9K V VG/crn/PGd3 h}zbkp@T/뗑jbS 6<6N?ӟ}C@/vm(EחUb`C$7 /HMP{]b:b6[+?R?<\)YQfcnCUbx$goeøԐ}k,mFHNp v&|ı (W_ ylJu[9?"K&@&5fԚ+ԗRb<Y\7di5)rf8D'$3ty@*ݰ,˵ YQV`Uߺh."@Wd b%:Z+]FO_v{Wh ڋƺ_ơh<:zt-ծeMܯE+_V6&ZD5c6Sц9mL39fsKx9wٗ<,EX<`ʌA f7fZ2ъY0КY2˺U fEk-9{YZLV3?cra6?`6O3ܸ.wǡO gP}jL9:PW"LaocV}i_wW;mvy;E=] n2^Ѳ> ъAJaDh5L-'hoo'k!oooox{6\[G[GGBf^uVPDWBm4f#Bɪ~oV֫~ɫѷߧ7Gw'̟+~4n5I63 7fk^3349bqNQSѩTu95ZNi4wZ:mvN{tv.NWy<|\Ӟ. ⺄.ct)t<\&z%9ko5ASD(mJiijZ6lk3ؤa&Ì4c83L6L9a~lN?Isgxxc2P tyPLJz  x՘gtU%g4tϱM{ `JNz !$ޫB woZ^[{FYKF#lB+d)Nd!Z]@Fd}DEe YBVST9MN3L_lY\A < 'R*R4"H'EFYD1"Vċl"!r\.ʖX$r|"(*JҢh#ډ'DOG1LGbXLdUX#p84>O3G_t:f#mA[6l6&"ʎ.:"˶X,VɵˆUnM.S\$13r QIV%œD-kZ,+KrmoHLvdEQQ4d]YNף07\8 n܃pPIO)%C-DDk:Elf],gP{(j aL%L)"F͋ڊI>6o/Tۨ!bϭئɲzO\>q$}]GOԔI0J%Wj̡4\s}Y>i'6§ZQ§m#M|6E/k&>Zn+v-؃{b8Dtߧ)D)IGzZY Emq ~lH-Ao x肿ĖD7sפEW:i[E&уRƶeMeTƾOUTNY@f'Q# EA=jcRFmvjgwCg{F4;ͰOi}"^'|u>_ (mi ]:ڽv?uXDK2-^Q{ 2e Nnn LUjKiuT*jFwq:S67(; T~D] fSu;9n0NWGgAW(LK](vqXMTD'5YM؋vSjinԻgUgjdǨjZ~RKRLjZV5SULZoڠ6_&Yj"=ËS[VMmW;NKV{^OY:::N:Ϊs꼺.DuI]VWUuM]W7MuKVw]ު|X=PoꑛfwD=UsBTx!zd #0FhNn3^:‡0om&q2Xxius\5vӼw)0ul#0LiO0fl\Kk[Yh7?xk7s˼2̏f,1K2/ [Wˏ+r;#.%.XU*pe6܏.\Ey2.Żl^Wͅzս|z/ ^*w-v]vWץz]VE]aWDEb+r*cJWUs5\-Ww ]c5s-\+ڻz>솹xhiy'=q u?a͙;w.L\,!| k2b8@ h8H!qscqT'IqJg9[\EhqM\ qSw]s?}B~,c9 `)|?.낺.Kº.K뢺 |h[J GGɼ48^eR e-/m9|c+[[Bhٺdm=b[nv=a{PQ;TvURe/ մSFtcgP];ع~JYͶi}ay6>tl,J_a17XŒX2EX~+O t?8.$)%J6#6&P&ۖ2vaS@Q]O.?{s~/En~/7+~̯wkCc=cr>.\b ĺXs ͵.:) s#nM7ܔ[J\q=u7pO˽?~܇9L x%WlOl/ۗrRM(8y"}̟g)sy>/81,\q}ǭC۟Tp\+cSlͱ6O-5'pn-nmw௸Nx?BrNι9KqIʥ jaClMLS3Lem3%._p#n2eLiSGpyxUS3y& N }Rw|9G~"OU<>W_r¬4jQ.)_'jfm7/B7xc` ½ {Y100ٷ ce, ?#Tn6a C [?2LAblSY12=FfE}gP]5PPxVisV$NBuyij?B0`B,.JPZ)v}~͕ig7~Z}M I;Ôa|ϻ:zw JgVvt٢0:2Q0:o6! "!S(M{Us; ہM%ʨ"IIqV5f>oNbA FIF#+ "vpe=b ^;tiLp?$3r($$ ~_G~%zODw'k" o ts'#Xv(h+L1+bƔ?$/94;9u}7f2%k' ?>ex[GɞP/'2,Gɘ 3eXMzI٢멉S^eeX/B;OMflUԍ(3]~@!Mii5s:%.xEf4Tk7HrzLCoVI ֟U1Gfl&gg?d.b;H8yldK6V_A&D$M߄RR0%呱7MSj^wi M9)o`9Ә1\%gl]@|١E,gTeJr,RIyT2mX (Q!C% :TC*˯{]-#K>YJr>,G+*|dVsEC}"O㣸*29h82J^c@+96*DKI\!ã9WgǍ`N4zcO7d5d."ˈ/;:tEUZ/*UX*h"wzlbuELi..~[f B^WBzڋǢA9 }s+xYa=ͬdχ.lyR{(]/Jzq3^lG^}'KX̲JXh .m`D.Gh[q#GTNෝnPM~eYCjnh50|}"綢jK]E=f9(K*zfK+:vkb>vKMb|9- 1 s8_˘ŏO5 ]EW!Z5y |ʆyDq;R SǞ dZК-aaǜ_0a0Asgs_37a1A`9 :aeEGi>m}-t?ᰉn?AԈ?iԟF_j4bCE7GG|5b1z: xrT8rMox`TU8>疙$-S3f2Lz=$H!B'Ko*XP6PTkyUwߺ}DJν3ɤO6)|;"4 beY,ItL'dtLF$=| ߦb 27shT)_V8do9ͬ 2OId4gQ EÇҹ١l,^e ,ɔaƇiif̜FԲX,l\qcY,pp`2ZmGx>O{?)$|TX&cF?V@ŸTF}Izlo|4z =L*{ ?1Wp&BHZubQ$b2'^Bs5&\g"؄E= #YI?9Af@?xc-B”ևe-%^m/DfĞ[CijԂ|<gu}#%c9X, $/ JHfE V {/W+-.aߵ[m9Y>04= JT+ ο?HQ<2jG%%9RKld4[!xq$TLCy.R#E9Zr+95wU`h`W{ 7%EJRT^rO0F`!P*v%ou֘ ۃrCEure{Vr=tc*rkXn} `G.K$[8-[% #b1|_;䯽'P߿6ԏ/'@xv v<I8eTO@`d_5k~k(UMGcb!Ax\/>?H(9$7myzYYc73g# A0&xXbw4C(V5ʈ cÐzR1 D\@V.3e ?ztw8h(j-Z|jCQs+6SiO4VG_MZs'X5^r#<GΧ Q>v*l]jDl3)S$|g)S`)|?~;܆3>D^G$$ 'KUD36'x]|f}F>OuS;GXﱌ0f(EaGlMd6G[Zk'_kA2U_%VDqHD8L%FOdg ,N,l)83]9 1V>8ӻakEJLR1 53L%Z|yJIu LSiE:,m۬eKd.;T1 tTf|wk hu"I量;]=WBO^P^S<ז/ ^[>l'C8|J͂X0n@RrzyH$14N"$Gh*|bCvBNѸacA ڟ oꆛ.:}jn֮}aOE{wEOw/5t,Vl Z$][[lXV_u{RړYd }\Eo.pǍ~llѡ<?PnC(\ȃyEU>?/Κ%#ڷ6nU'3lK7 9J QsfeC/&SHS7~Oqm*Eh-Z҇]<y"wٕ #,ȏHU.vtĸBJITKei%y͙uufo{z]K z2aqfUuI qLlMV{Օ9ksT}em|XڗYfg驿y:F2%oA?w[0E߸b74 3IfBVdPAeHq#UC]jBFweGdR'^駨kKg?>{iyYeģg#_0u݀tg&siz&|tG[_Ѵ+8=/[81KXfG@0 WUZ8XL'?k;khu탯+ Vtet0Hnt-f⁉1u'/Nu*8QQ=|kAFJae'3,p<3M#JF\ DʿH9既1y~I@#j'FۜL jJUX!Jw5sfO5+Q@'g~ 35Lz!1Yy D * @y4b̥S,{^ T?IZˋ’2ff=}W&)L|Q8ט7UUcָ~ڡc'd@*KVa\zždqK-BB/F2G` >="ƑNњՆY|C6fy 晟ۯ_ar嶪PᲆUvs[rst*3# CaF(;{ d*S,1-,Ֆj=F-FQ'i6f`2NB8s9111[ Fxqi(eҕfnY|=4mf;/%-__\][ܪuI_3x5Y7/'e"c(-/}9mvsC7WUfoM8oaƧV.-UtiA92zVWh,x:w0rp@}! Ёb&>`'Q`\ߛwxnہ`=޺* ~c֞f.-ষot*9GJ^BJXflf[W&}yzSQgvvϢ  \YJq_*I`4O erj;I`WP|R)'*4ʧoٷ@>-kJc3/bZDQ.Wo ^S" Am)[\iII:$"pN 8z8ˏvޅTtjw̭u~JhmI3Eyޕ r+KXnѴ ʇmjo씊Yid?yu]ɖ'޻8Ɉ,lXq~ڢ1j"ֽ,zjoCS3l40Gep(0 ʈ$1Me`Sp-s5&x6v׷Ƣ}*+l #ri`KmZ@um$+tRp0^gkս5K\Omf#O0MVc 8`Dɟu`n!40>OsKW26owNN <|.pɉK9c ek!-3Xs/íF+ȅSqNh ߬B05 5D-3Xh m h2 '.ϕ'bSkFgZBWB$ǒ; SJJ+@o"XF!QDܠ@DS%`Ӝn+hX@_eư/S|ĩ7itX^cZ2qqExrќff,DbEN25oY8,8wG jyךxcqor3*( #(R+/K]1I6 iO@3DƏM6EJY:'R<aA?O/ni Ack;q u3zH m q_',%9G ڿXa&f'K`nS] rಔɭ~:"[ZU-~և>i5~'SQG&j z 2/OOnh/П?C7$BmX;jw3CPc"M0}?܈D "QKF]'jxXߔV瞅`lMB$ڵ[&]5W+ uYOaGsӕ* Ze)i GF8GlfڎNG9LjSQ;㬌ٜjgS=^[&MfƗfɬi)ٯLB"͢5]m\CDȴ>Oӕ>o6&&+rHCBĠ1kZ#fc][CE^LLɳԴ՘:,$؊ū:ku\BfAwm{/DXo}qK~ǽ'NcPj;EbNe+j/[5 "}&(`*zV>MȍhA].<T,$ԶijX M|pXtm_f|NibKdU10r49s[ s3fozK[&攴RT9<(S^?~"ۺx:䅵9#Ո8_p̪?͐\UVƨ6[dJYj՚uVhвPcWW-CK9J6=gBOnuhYjza݉Af]er_Wn  f6B#ϱŮXmZɊ.\24-W8[Zm0NLW6B ,<:?;>+3RWyGWG7Yx'UJ|QwUmä%Ɍ$s*U]j,:F<ӷN߀icÔmUY &y.C$- LuouΚ+Pҧv߼N7ӂ26 E-( ZEޔS̘ǏR'ɺ=}9Y?$0_c U2wdyȭ-D)]pتg^z9R`q[dZ$exn:k&[$M*iytU#R3/Hl>4|۱s7sj$VMd\h_tAg|%U8j/L25].D$>o3&J%4@969C$2O,i-j j_;T P Rǭ0 vA=0CY B]CyZcC砪dݿ|}2f ͢)Ks/g/YsH-_<quMj\p E7RޤKʗi\&06=V3-oByH٩z(^ʫx5/H~%ƛirfc/vYCW5Ec]Z0$¿>Y C,TD%;̅RWm+lyӟj\;DSDD`CS B%f_[drF(E_&'$䘕L5R% wvjl/fXp P'jd~EjZCNN~V#GhBjL5&#p\Tmn;J ~B(Dx~L7?@a{C>/ĖOl.?n Ϯq-&k:.=Д&& Β4%1ŨIqD1ƓizZ sak:/H rWPaŔA7_̗%"*\+װ Z!g I1$אBr%) .K)v6@X~wl|q|=''qYJN-UٹyU.K`kIDK: DA"C $d4S Ho(2! wjv\~lodf}}@|C1EbңUŒ4>OH='mNCyZ)QbZ#kl^Ǿh.QY~L%J$s '^ٕMvNo^ћ[iW椥RSӖVkyoAr SRYY\\YY V TxB=_Ɣ&Zgҩ%B9eKY/増|p].GF]b`RilY$o" +ym97(I4D \zH'”ʓækhI|DM$znwjJB._BN9WSc"kׂWl_C |sX%S 7`f C~Α$}! T`VK"Hj i_qadHKRKn)ϣqN;YNHLe2FN}7[n\5HR,^ȧ.pD@h<892,!Isu^Œ~zVj<~4I+R　/q}!k>_LX~H0Cu_Kjлt=bA(w-z(LS/ؗCN﫵 o[Z F[WgলYw_ 7 rG'e#{kJ^u cϐ\{泍سGZn{,R5G1B[uZrOY:A,6xuY "ke5ݻ46N02Ls|C^e;PLv /13C T3܆<%o;!׼ۓbz)ҝZ5Vr[~3- E_4fV9FcfQi\ʌ~Uh|.gO8m>/enz|!i ^0"ӵj7 0CMWOw]>oeV{yPۭe2X.,z[j<"YٻE^[dT6c>ǽ8\u3qXn0Bw3a԰ؤ</iœswAxZ8㑣BԨYOs`n:;;8oDϔoϒ~^$P.=+<[ȴVLTd8)ǰgAGR#Mcл.9~1:-8$YX]ٗ;i7!u`N&cw(F.nXfwMRgX9((Vb_5p:Yv**F3qK!EM? g }L%}P"]%+I8@Np.4?Q=Gxi^fVuښ ٘8 :z{S:1 &+ċ>^Nd[ÜjG"G? S zH+ԩ8 Id_˜}.>ruХ'KOD}v)ϰL?z*9L<*ʉ_D +Y=T10e,W HBS?SdKOh9*'&*┙&jHi&%5zwk ҁwi3GWG~F4kѫO("82S9!ι?+9#s:lX}c}# yzH~2 +[{[{k0"{_;[=f"Xv>Yē9c#(Jٮ[qߏ=w~Fy7r#w`t+Լ#aw NY̙fltm!h+i2 38$%vt}GzZWޱ4wե],(k'@UcǗ(=)9!':U[`Mke]r\)/JUirH3xq{2H،AvG-:5<94}fM;'}UaRjʋaY;kW{j jlI\Qlޕwf5Je)WU6Xl4%yZ - uyh::_XyLtƺYA~VኴBiS=TT3r>lid>,.`Emoތ"sRl=Z;7NxNVvg fgwWV~nفPh>,=}كkmOS9{3]]ٹ@t'ʅPM<ģeCP g0B@$CubZ#VƔ ϖQducXw-mQW1^d힋Juipl}ₗ,6g:7٫=H}j~mƇW-YkƆƜjdti`,P#A8 1KME=F TljqY!lD-;{]%Hk ?侉Z֩Ji+Jl~qF݇`,nc'V29bOcQHe.5d"CbH ]UYI~ 4aHbc$ i#+Zs: C- +C';ɮ۷e9+ZawI͇8#D0n">4`OS_S?FH:u\ ZX}#@K[]i,ȆHlM"I<'IJ}~sT baW\V$6TjҊ2dܘ3l|SK2|Zyznf?")Yɕrv7h̓)Վ/B Q~zeՋwdilb5#l魅-O/~[6{ :wn")P[w0߇h*\ F%#C8 ~bB&ycC.L~'l-\k]y䞷և*4d8xoZOVY uKHlk~ 0=v@f{C]sfWz1cpѝE+*s~#|Rm9qpcflYFlFR:>޶5`jT+$|3]xӽxQ//HjR ?ٽ5^X=c(鬉gNTr-;sf W5YВg,{䬻nQN@ܟ[D"0CIH\Yuylw}U):{{d?BM0Unà߀OqPF^p~ \)xO̸(к|[@a؀~Q6+ ?~g:n_9WENPD_;6Əz-OOmyO|%C5lT|kk|7e+g_=®ӟiyPgW (#a3^@598(" Ydn<"[jzL秩 YmuvkZո%<VʪzZ9r7ʃѻQ,ѻQ"וaG{TϵolAGRqG Yuj6-{Ԇh݋Ў;j7PWԼas~ +?FS)m^M_eB*2?:,ݗvM(cUsqQ~y4luOx0_дBc̈́2vj4ayh-ziA6`Zf"WA`7&%4|W>Q6g=6)ZjGR [[`:?k& M1wbWS4ͭrST hݚ 5W$ȅx+F#2s8zXdb-.uvs;t ^sAw=7Yk]?sMEo7]ksڀLI$u  g{`s+Oz:zT:b(<8Gfs%'r R.B@^_m;(,t~T $Kۉd.tՎȕ*9MV CѕbPV~* 2B;1?7 tfF>aIM9::řgMN>P*,|n tL^ H\RyѨ nPvZgM9㯭bqɭL[.!~b)'^!zMf#\H-MN_'vlڑ-}[F|~|gdΞ}GUXN=}9ӷnOo?OtޚI<uk׼w['y?m06(]C9`>Kˏ}]= g`BwJg zDIꏟeid]͐ZMBgԼ<=Jr>w611C4q1-hFtmi@{~ +?5U@-ĎO52V>D5p|#z#"C=ߘ:ipNI 7j"0 a@!s8-w| . Cqu[Ɓ/#Oǹ^tCF!Amo qxSaL-P3am<)CV-ԚOx-Znbڒ9VCYAm$_ ѥH4DF5%`hHm'T'UQ] o'#j D3P" ؜(Qٗ|踕 y*ܴ<=^e醸tXSZ=`YSuҫo ,To%>3 DV3RYfoݼq杛~׹kPVv,w r׳?suM?vﭷ `.80VQU|j;*3[W%j:21OEBOIkTSeZ󃮺&Sݽq]OZsncR 9{fwS5e 9*iv҂^BliˮXqvKI3'O/T0iΡS#CBRΒM{ں朔$5Ù{*ߜc(\z}M&,ž.lme-ʋ->nU!Ɯ_2s3ȀQCxY"rg,7?s3Wcgj!w>c?3bݣƋlɷaB~Lk* GC޽{Cepb*|H\6312KexZ?:/07i>IiI* |o_6f OKΒo!iao- 43U6[;[KM&>ڒ3Q;if-537RI74+ݗg2<y9 d-Ҽp,v1^'/"l!vϝ]rlGzρTT4i OցS AL&>Ff.ߔL '@Uy;jo>A\rL\.mm7_!j%ZQ6~sZDЪV H5* #734<47I'-#^50#M1H+s,u6z g>XDZ'zޫڶ}6ˎ( |sčt%7 /̙hor*!b1Sˠ=Mw^L9_J-/()θJ8n"dΙyS993J`| =jlƷoh_護>e[7ng 9W?;89PiՃ^]ĕyZDgɷ @~x?s4F30Pg"G}7,#R{p@-n"GhC;??>gvM7[fRRrTl2Qehc63= gyfOZ<IfȆ:tf؏f6fʣT<C鱕o"2L;y$9W1ǔ21)Gfh}hqt,DChz驁Oo)|_WpقnGP'Pi )YT-8#ٱ_H2.+7zu9 MrX!~vR&31lzFWަp$ #3 fX`QB@J*(YΘqU ?v9)|r_WQӧ3xZzWƫml>w+ 驣ˉG: ֆF4{qc|t ĒǀcB{'F*'U2QVyϞjܨ$ZUQjVF{Bo60#hL&ysM"lY0R&^ڕʍlrJ{[tgڕKţ$Gw8<+֬d6PLH,oyH;f M+4 G*S(ui&cO3*gwwoò~ĘR]MĥR"Lo "ˉ,ec F[Nw(w.kۗ)- 3ė/tF"Z+db| L4.e]M↬PtmH~}-ݭ5/_%³+i~a]ᓌK:7ZDc(N,])5[f{[ p-5!#lQ'0Nńp#BgͲk"l5؜t*N^ץ8\_gQ*E@⬐|)c  GHi3B)r TIbW$-ı1r4)"P e^gr\p[!.2+23gM{…'p!mVAxX4|Y+UBKFrh1%[t-rp6X=wl_i[O:f26BcɈ=R{µ,,PEo7 y3m1Bq $" H D-1P=ve&_dΗ"B@e@ <+3ՏMqRvn0d\+3*@8_D(P\|!p._A|.aoM20h: aX@c(Cty!]^ac8W@EFl3pH*2qgON&IDS8vN0ͧ}O=pwR~yS蛑wGcMOF11)ceUoOȔ5 žcџg^ᜇwđww+1ĻdOޕQck;Ra#_l;ymԟ +Ӆܾ[[O(.^qbʢ[[(*Zq +pY@U0.gQ@p@YԳKG"0n9l {;p$nƂEq.ы-}>/7$~ڵ|DeTK !"QA1cg2C|`@>{U 웵kÅpĦ'vN-ROXAej7fzvdbTM ^_cwt?zoqqiIY/bDq1"!E)4s^}A~Qij "HB![9Qf @UK2D d '#@eă|VvvBsۮdU|МCh13VcD|Ѱ؁Nd"]c{if+КB`,NJ&G's#? t7(iPD"JEqRC0dk_HĐ˚+3vG蘊SbD,DQTEq1/ǶGY"V367)x"6 ;4=9~偌e.[ZPׅJ*gxǣ>Qvi5 mg4>8ʳmTV>15r٣1\pI{Vf}NEY =1P2Zs*whV,w\=F=75{w_yg?>DS3yOxif\EvG5ᘰU& W%|k<?UK>DmQw=R싴KBsLek[:n\~ &^H@kKJx|>-t=v>suǾ&OGǂdՄ'pS*T$u3o>mo;gZWYGnՓNyzWؚXU t^3`vq(N7WF͑ORga[Z73ܺ,i}V>%fHK˴PCT-_υ4dِ&GlMN['L/~1 = |4Yr&GBڐ=4s/;~mKmZO}>ҷ+KUC[[s;rkp ;ܾ2/T. h}-5Zs<3S+DuKѬA꓃/w@f}c'6,S=?'}®RZiA*[#=Ùj}NSJ")|)G Ct"OZ!\{{p>[!Ykvc %7:_=~z?x_߯o;nl_\Tx-G-IXҵg{2+RX|2*6}rfnuǛNxvAMTPIp0f!du=)t ,YZZwv%4؛J3%{aQnԇo\~"X8YXY|Li?j ۅsFcQh"I,&(mֶl5Z3EcGdcOKw;9g>91e,(Mݷd.[rpR.$#Bc7^=z;HMm '%6ɘGA}3F'#Jܤ`NM }>gƋД;xJ&$"VBN:P;Ԫe ]TJ'DfZ-UmA]ހ;Rk\a?qHW1U:֗k֗jw+S=j_[Z|-B{/!gwu:?m׼2%V:#2v81&T*6Gv%Y9%p+57k k&uC])#rеD{Cܮ @iv #?\*> SNk(@ĪݪwqpsMq9U:/ϳVDt+ʚ"v%_,yoǮk_2^W9ɗ:U*,*繳N׽`iCҠ#ְ ӀM+GwʫB5 6*v޿p}EBRhO r sfLEm ];I>: \VhC^SծO\V>-{Eqr>,mtbrJg.!kR*YwE9B։XRNIUAtTg$gսKk.*,S5Kw-.Z~">fӷe`7¥tI]1̎tUWfmm-gxvHft'Ɓ'}U7 WԎg%M6\㡱bBhY쨧JBCB/:T؜u{7c6%_[m 8Lhp2B\/%o]oW;ߎow$6 r9w3p(n(=ZORȎd 0 (s݉ծ)OjeP7!ܓh+s`"K=R`XR<]ɕ=A}՗j<\^anLyXN <$}FJ'CODXtVf*f}F|Gݮ⠅=ȋR8lȀhN_ RK۝F|M#zɆaeLB+~c_K_zHck'#t[ewTz*&v)T 10S DYr|A}GS;_, *cW:),܅4o}[x6z'j·􏤱o;_xV1_E u^U;o6_ص֙иѝ˖D*YۭO)p$DDSZ}}ii}s޼>rHz?ʯ_w]}tO W "z:~efλvW}[oҥ8}΅*L(n@B3lLjNJ FA('Dq˘$j/*+jַ^Nh;vVhg͹ڑ8O"I߷׷׷QXmMI5mP5%%kڂ=9cV<ĮB^\fe = K:F,yaxQz;%9x9\Ta?xG?YpURȑ;/sv o J=OZ @C )v)F8N\{ui+8/Y-YY6.Df3"A,݃uuݾ㽃1ƶĶvǐ w$vDPV}c3Ib?'뷩IF8!ΡXOҾicfMyzN>5fOñMz8Ǔ38~ 6-O>o1:l l7UVq5wm{p[?i(---En`_Yپn 7|ʶ4iX"mg~̐/G1Kn%[;#̼lF~tLGAb{GJj|7K xmsEgz{WkHEB g&Pqx 41X/&b. OF@Dlk/.P+D[ 5.@=*yp!^6,GO||SMKrx"6)c&yvHŖ r{-%l}`IQNWyn[})\l4{늵tXnMuZR&JqXjcC6+2& ؔfȳX[#Vsn;&PJjԃ8{ݥ<ٟ6ĉ=L<0p_kˊ]Bpbx7l9:C'bvt,qF"&T7蓈'B\aZ7zl-۟±( MnIr ,!<#ݰbe>5 HeZRy}w.\3{ѡ#r:6g -fq(*3J8`t3+KKmwsl82(>GBGG|.`LpeFA-]i0Zfgdx5w?KfR\1g̪o3{ǒ{á*'NMaH& H$y25tt iw;Q?Y O;& 6;L x(Ҕa4D W$$;Vj2G}ojDᴾypƛeK6pU2q,~;HMሢ\ pj8ۘ1+iCݎ{޺jaaRDUۙkTl^ԶT7ȄGR B&}5a HJL֢]P6fY.Szo JӧAG6g08ŋ-8H-vg_X?\Os5 ` sO7J⠿=|}]VfVvjmyE֝-8 {Z:ձ:_e0yj`OTqe0I.E|2jJe!g/tEui3 3LX43l+h 4Lb*ܷlE[[J̲SJszGAkS6pMsPQUKmFczL `|2@ˉ1 c,5¢ei t2nۻ[+.36Z:ǯ~WKe ck O7EXOòg&E=;^;>^7FQ-~mcyUIIUNڙ D9KN ӑܱgΜ^o9A4^Y\ecA6=H$1)EV 4 1ad[Yg$ r=MX :ů+]:jv -3--פqtaIf~!~UyF-JoLKd&r2 <0l:CҁÌP+i dY9p>0UZebI iaciu9R k:W7U@xIdcpKe6YFK1j |;(ӈn̦}T@>ؘ N3Y=eLw9rK* EǓT̎ ka6nr:K{Oŧ2R3/ARfd:K]eݙ"ITȆ"]k&(v@#^jtIt/8/Setia~A5ΤdǕ0xĆ8qc^QڝS -PK-y]x0J }v 3MKz ʘޢQG*#Fc2)R謥zgV>\vUl~ BUi{مVơ*O`T7<.T*LD ,OhQa6,-L|@(uFG<ϲ n N{rYev7;$܍NC}6RP׾H^["8B1ىc}N|ue?g!BG#xvp@Tpx fQn%h Aݽ4MԣhuK;v"8BJbN$ӞFR@tK4+ 1Np>34Uc`LjLw yVD{k&XOW\X9(I/5_g>GnsbhZњ)Ǖ,2M}LYVM)v%B;FQ\Znn7 z@ ֕D&A֗*p\=W=Ʒ/& CAl{8pQnU`A[T,@U;DQnQLr;~iď_yZ 68·Aà:NV;p$O\37)5776IJM&Owu=;xF< a~8tF0? F&%} :% elN[ I.!o+$ &g ho.U9gE)UWB={Zg༑sY[}knyz;ھ t749pSzkJT='}qh!dZ_ƸN99.IJٜۖR$fђ*}Yu3Km4$;g.tpny$O-vu gG݃֌i5 9qq}lo@VCHִ>%;hvRaܜJ[dy|P|}ХR;C:cЗP$OB69dЇ a VB "mU UmUmPۤp^NJvJ5IfK&Ji1+,OL7ԵnKW(r8\W;âor0H(.M '=N̗,@rۼ̎cKr+H%u\ܽ,MaGaW, >Q66 _Kl3lz:햬ǻx|Sں+Wj$X]nZC;ш8/6qMFmP_Կ>Zfdʈ<'*:r!\UJ52(@wR}l'NG?/W;"`JH(l4~mkręKxG[BGfEcXp ΌQ;ہ/#ƢkU$32 FðQ ϸ\&b3F wGWzm)>ޓ8P7NP*ҹNA*y .k/xq:9x=s%鬴STS$4>,Iv\sl,+!UFNq2c3|: Dl<͛ #evd>G0')o6Sp0ذ([6@R"mx=Hf"}zAIǵh|89c) *Wm:3r_!O BnMVV5 ǦPq\2uf' 1pcWiy(edE4ɌaSjcUVBY .$Hdj.+C!i(?LS&3F|oa+:oOe[塏y6Z\ȁx"se^y05N &AF}A|4QJ) +ZSHxX4/cP.X;2>._7+sEbטdk?{-ϕyE_1!Ӭ8U_& zZ! 9S sd8lJ3\ *K\с?Ծ;,q6 &ؿkF^攠lZkaI;J Tf5(s!\IufqJGI$Xģ'3.O9eZ~ʟ51eTqzqRۧQa N`?b+LD93g&bfg䁘g< I]?%Z&ܦ(mǭ[' \lws3rr2V$2c߱:DөrYeOC=)Ō{Mb_pȀʛ^{tFԧm.418/iȳX19(dls|J˪SPFȋ< IdT9 d(ڋ+LdR݆-} Ngn@|WWow{Wdq"5zi6-3kԥ.:/)5|FL_5oI'0FIPtixc(S~ţ뒛r̓^ֹs7GyF^80vԞ7+uZn<ǠB]ƕyu^ td_eBHPۈ}&@-SUZ,[Ӝ.EfEF9")oXw%uK[GpZ[hMO gUK`u ~9wk^j'a5gzvh7 s8Mk䬸kzKHW+ T\)~{x^(!9Ͼ@ہD=j6AH|LHO~HUEU+'R%@MD&r iYfz_r`hj`YkY5PhwKqG/ AExďOeNM쩧lW3yh`ˏCVyK[tTΝq4fmu&1 gL0*̉Ye~[qo8[VƋMN([ 䔬q%\^WۊBM'ѨPf$5:=$l/)}0'{wQR8,n=ۤb_3Q' Ngg j_CXF1/ )8(׿)9;0[VJ.|_K%.9>L/6@փye7i.Bz-z8Ec/\,Gq!6v؃ ?ƶYrK~.~nz :t]^uzvTu:SRhYEW{,*䴨t? ?m33;稓=K7||8$t@RCIH{*† >P>#5?Ȍt2U*@}C~)Wf VRoω}b33gNbg7iZP>:K'XPՁ=h^= :'%ap?'ئ6zX^&CpkyOA^Έ*_ٻw={{޽={3 0 {u & tz5F-=-Ѫ5hLΒ'smʰ 0`KLMye?,6Oi@wr;`!}>"; v+jXcQ:J)رtP#kki3_3Xy4-*ܜ$Lx4{N@c}7IldL`%RLJ]K2L Owp#ql_P q`G^xnwRz񯈥X{-NĊ^ro>#nJ1Y`v^G|5%lčƌ@>ݸ֗/;Q0X%,AcCY݃ǜvw h1 SWv,YQޫzkX4=/!Go{w| CaI47|{@/7{vz 1'< 8ixt`{B[@N7 X]G#B1 Qڋ)uƌ@!^.Nl_F[O*pR&$yr*^\A¼\^f'e <>,&z1RlA Qm,.&1>^aKeX9ʡd9Fm•c{OqhNO2ƞ NM'rT{ )% Eq YIO E ^4*}I/f%؍F{z!ʰ]tBvhiZ7wd=P7TL.+&&3b&>p룗Rύt)oǟG'}[SmN풣D+N5旓ƀ d2L5Z'7lܶp{C&#"- U]bQd@u&6yTB}<B{C?Q# q87]qb__qvh'o7|&"3= tkuԏpKHA*NJ.1 *;yZjv\aOׇ<G 賳x8Ӟւ}nWBiCґ::ZZhu(>wƇ޿9GX6sU RB—YvCA4b!cR8^e՗I&ZV  rxlñZ!L'7ؔ&+4 u'c8v;$,dyoe)RrIU!]hΝյ'ܘn:M4Ҋ'>N<^|ӳ?gΟY3I4\z(%`LiS A7ܳaǞ7frgwɶg׍~,ʨKUp~\䶁7lYu^_eHG5ٻphp@G}prU]N8O’m}[ϫxW{חCg7j uy}m67}MH\I=dj{qt̶S+󖝚͚mmxujy@<:xkV?ΜvzvMs65;~<0Y`R2x+n6S_k%%J@e4JёZМ>Բ'#-U(@)lNRԃΉʭ-yk:38QuR'ζX͏^Ħb&Ԭj ~ɹ7Ͱ&8"7wo@sx{WVԪcs4$'?53qc|oҡU(`LȹdmxG oMxּw͸a0lD7]o BL#l#? nx59H>Ɗcl=J}M0\,DPҹyw_`rXvԠƟ|Jf՛= ^V [@)Wn3М@r!CzCD O IX*& uy0IbˎNgvȯAa D|w3IwLI\N,mq>L8z/"wފЕCZAUK3,)(YwϼzmGZSgӆ!/&~\2NZ> ^qh!WCg$hWftV4*=tٽG3㛕{y9 ^}:d{I6#Fa<81z3K䣇~,zm'йE`(3'̔QZa%UN|[yaɓOiZE s}O3.cFw8>td\yo#eƜY&5)Q.YA;тByL}2˨KQH;rpE]* <-&OPn!0{c_s>mʬ}| _i&qbe hHexu_H"GeN JHoGSg %%--3|6FgoLJj\?׬kmr]9RqUn'!{3%GִapD#C Djq s ҬEz|[1V5u'gy{h^-pjfVbf짮CiiW5lKntdv7z$u_g}7Yд5抴x-'Yk7y3zocH֕4ki%3s&DŢ2lQK/u%߸%+&L5{qOvFguGݢ5w͝~] _}DS8/1|VCM1)D U5Tn9uIv-E7%֯xQY2ƅkZ%uE7 ԩn=Ʋ^&ugO΅7_ކ r;W[ՙf^`]VfM\pͶUn,̠_ehC5T\' euEC7֑dvu Q&ܘTTw'RruFQ@6 a3}󤮉&$T5ݱG"Sd,9=w/^/JlruSj9'E E3iB( )iTJh+74/|fGi1EZc kr|2Čb6FZ9?W"&+^,]u`bLo妁EOR7KNo|kӋnnϾ1/=} <EPIfæV"mA9lIQz{eG/KCs>֪䙹yr4o}1ȃq{$4w;bIW!.`L,"LC|2@GKkpVaMEגAfp<}U,_fRJ25 %v>CQdS ءzj D2YZvz`iǶפUtUtV]sҒX|+Ԩ*rUb%=)۸E v׭ybsD\첪ULRG Qhkou > 7¸Bc YE]rgWR7i@BLӪJZ5B:K7?".hצ({ޡ,5g6DzjK,ʹ NoS6nc)+FSm&2ڂZjo[ndsVnkڿvSemCe椚kÇO Tc۬q!kY{K֖a˒,ɶ%o;ގ8;Ȃ0Be= B-\nK˥-]-#uѶ}}|99H9zUvxѶk*e'#t" ( 8{ yꞔҞ":UW_^9zus޼=V|t:ZkCek@󫩚֚fsŜЀBtKŇ{kO=c5d2Mps[ÊLܲfjCo\K&;l`ĥG+Esak.qvoh)^iϠR}2=fgw]1YoT^5u}ax'f>N&z"CmYy7tQ<) Y3 sdϜքc{TO ׇ8scG*V;=3f} &ʝӥ[=}ŕ}"[luKaZf9ZVylt&_Tȃ RUTڶ#cwn69{pYF03䷫!'jTx>W )Z hYrʳ4lUi.d3?!(wd/\Jm~IJ7"n}De2'Jt=,[*ŴnZ4Ueބ*@Λn,F{,VQ^+(}P6_&EIC{$3/,iږ⑻7U,^>kĪ\0=޷^[cŁ^:NY4!`osˤ9@\q]@g)1h횀[\~FV%k 1ip^@j 263Mmy{"89Hq$I{VJLzT@x@UA;q+7W + ö&vLp|2{Od$>yy~>(Ĉ7gүlCgXD6x=أ$])dЦxXqbwnmw_uEъ/pH3?HU+V_usF77JSoCJCU[(a(Pqq[w+U~'LDq'oB#L nC14(.>In-^VzZO[+B__vWUjtUC`CAԥtNoԮo/=b^+~+]{{JRܟJ=/R_Yc5Ԑg Hea{aqJ$*BKx.ܳ.g Sx]owou5T<j֐ZO;&Ga"80ڬ,(G ~tW3hy{m^M/쩹AkWc86d``LS9TRL+ FJ[zyb]* a# m&)y&e(PW̽P?jȱGBmA%9azP贑HRwg꾺2K;5O\zAtly8/k=6V'yn;KڑDj"ϋWĵ֕n]Eŕ'F/ioasYG@<4(ߞ{?uM7i{(4a25%wS1X?rUMnVk[+)]~{gO8'OtYQYzW]oloQ\Cy{Ou\%!Ur&WB-tFie_UYr]v (YLRpH&4KusI/iJH/o<`bDH.W8>iJڡ25fҙg%/_2%Nm3KZDʅ○EHcS>4&e9+&Cp#Oҁ:t1PY}mեI.g 6c(Q cjFQ 78.ߵkʚ-^}2xZ--EQ_¾yQ)X5GքcP0ܙtaF)I~6?˾ۜ N;%") Hu/ܳxc16#!ŸW6l5 # ]GsJOn?2\holUo*1 ֵ5CBw _kkYUU9X4hLn؞/DyȔ#NaSSWTTɊ?{)S2xuΥĭp̂((ZM<밋D(мP=R8LdU r #>(h9Y:,xCv?Լ"4 I߱*g!+XUWdoB`( V^߭"o[F*37<}*9ųJ}MrTZPnhwv坎ujWc=6Դ!-1^ M%EU;Ϭ[wfgUQ窠w&`M7bn7%S'|S5x*ps-^7EOA\FY92ſ~Jevz0˝:uB.FLRq?v ζˁ>bB> g6R\S{N 4F)Co(5p V$asa5$Ev]y";ViN:xm/z %EʍvHӠMi|zǖE,{7~:HiRHpDqg/".g?F Mۘ,1% [d똧R]PP yxXi(tB@KeCrJI _W-ZkҰB 3.xGu &=a, ec1W|WagQ̨+x^-ކo^;'>4{Ìw}{S'jg@BZX#$!^O[zV^awkiٷ(8m{ڪMKWt}31<@`9TtQC L!BMML CX˕'+J5<:r*{9w~eMт.56Wm\5gEEG!V*\)2*GY3~x'E BR[zcAyg0E!k]RV"B$h&%B@,hn~ vsG#_gDh1O$wSݏ|3Ŏ/:F^'ӣU:B/~kR2߾hEDGkSR:G'U#>GinٻO mܨ+bW&wQ/3%́*&m"bec?|_WXPqeU#! W1 Rfe9R ^etb 0f?Vg6V\u}krD,pbq,+s}]`Ah_3IÃ3 %i1MF!|Y,qJ2LJ#sbqPRaUp'v;%xi⟏wyǏ,Ʋy9-O jmYP7|s>t-wgkb._f+q?m;M$).|ĝC'u2,r[[7FB8X UR/Nr\dr(q1/[k!F.: "_J%+\dh ɵy G:(# iѰe2z(jwxյƦPZOogi[P%3 {|U ʮq%%>b4eymwD*1߫ji>Z8euHuIKrR /wZrlj ؜ےodOSRq<\a!)dkUsaW/ [Ruk=3eG\q:WB׺@SQᵟx}ԍi=b3W?'2(|4jA?Fx^WA>*HP^'HݰɹS@H/VSkܩ=/ny4~4UjwkǞT+QmN[=Ɵ "N5Ni0Q|Xk4*(B>Pvo7KK +˔=z4\4Vnj3\!c (8d+[U|:gېb`(˫1LNѾ$WCiH%<ω z+CYe- pH Jظ`iOUIc~'be eJ޽ɑT4p̣@khz]V| ㆆUu/hX|$Q;+3B]>c +Wi ,Y;.uLw޼1 `$%99i<2H!:>RB{C -)T$rSXD|u&)B{$ׅUU.i ZsN-2Ъq6^RbbKcKlVigZꖺ]+K>k9TƥEk@Q: ){!;p)馏wda_?^צv`Ɉ./[DFf@ވ@P!OQl9ygPX%k{QQ&#IaO)zQ:d,g{ jf6u\2#1K4`n2^'plb:bZ x%jcsc}wO%_= 1O^p46HTYh%_ Z4rv+Q(B9Q4 \k%Irb1$5^C&I]#bpΒyRcFvEלȓ2-+ti&mʖʠ 1x400J˓ŕ[cT‡4T*fyQޤ* zN^B =6.-jt۱sw$m|z+5h>HNNNi#K'H‚990-,粦tX4@h:,`3a[ENce_mA3ʩ'vx`:k ]:N ys\dVfBZIqZhgPw_ߴ RS%-EvDXN_O&Gu6:w/J49(]d`,L S %ﾊRHpVjG(p]>qwybGYܹ{UQ_/Z_mJ04T3wn޸#vɺCI\s͑AUoKnSE[瓕((x.BlJ)+EG1'"^]Uz3]gV Vm}ѽ=tvmDw;=sSҶ㯬]{x{w9wPբ\2 H5c 0Ƌq}Kښw]Kk7s]&`SP$*m,iU@S'-Hϕ.ݑFKD7גu{V?vUfGpvYۡdž["R':اI%>Zq쯳h|.'TM<rݦ‚mM eaL_IƄwt 'e GMz05.xK65;zSQuKþI+Qc3iBr.ha&Qe+/qA/r]}"Ǵ TnG qD/Åh\1iֹ~r!"܏7Gᓤ]Lo6 2^$1, d+@Q$qY؃3όm`A <u>AhcEs@ ~ KGޟf;f.ڪF⽹؁Q%0gǺی,l|6C?J!^OPv=ʼn|!ɗ~IMp>&VE^_4N_)g i([Y^Uo>^њy c`x$ @,FK 1˔MŢ9Sl5We!%g#ʚ{^NQ{dZ/$kT)s "Uk JЪ ,'2`05{Mz٠1_P꟞bpBHxJr$ &|"@ Ejiwh> CrK TFbi܁{Zp^= N5##~,ypX>(\7CAD%T \:Zkl9Қ5/]b+5vNKCY/kiK`ΆWd-۫Gа-bz6pOk+5tͶ(6%K w@CuCȹ$LQ@n7lLow_^.r/4LW,ףy\g4tK.+͟?_5g+2ctv\Y>''BA=Co CrQn-! 8;GCY]> 0kp} **Ƽy~m_d跱JUn(Pd3FL^&S~L&8K B6Ad6CۻnT=~'A2ZuOJ@U G"pФ,>, E ^'D +erAo/yg)!l'wkTLw"ۨz$vn.Vt@ϏrjZ5IK&̈1zR|a*$B 7ɠi|m//Tat $RITlI(hTP8)LepD%ˮ1s!ވP]X٦ T:ǹĔ^lj$klio:+PjˤNk]5RX+Kn2OㅯGL!knWӤ1 ۗn@[=^wc*"sc_*ĪJ2X[1/~C#+1e|2V.o vK+UQ>ͿD?lt}eL,[νVT?;ybzr21MvUx۟ټ*Bs֜:IeHAuj H):mF []^D]k819 ~˒l/*S5[8s|5~G/&N<S(׀(:Hdq7~>Ŗ_B`nil$ GTV_7U b%2<6j~@#0n!cg"P@4`zTc4@ j"߲t,PLH1G=u?}7}bd6kn}uBj-Q+UKR ֽA|~Ƕ G#mp$9raʃ~ãRgJ@IO+;چ-%NaW;{"`sw7Ebk9uv)k H̭pˍKs JT[[% }IZ  7 #(02顅ʢHHJ ֟bKbHnUYfA$ת%,]K0?EĄ}S*21傸XJUjNsx5ڠM&+ ˤlm[=]GVv@F{1eCV`trjh'[3To'OF{֒ث6Ű*?9˖-(XZo (U 8& /%v z BMb;ӰKߧbfg8wOEIstHd6r.뷅^ މ%\^z!?d߆ltߐ̴hEjxZ"E%ie4|uitAB,.'3nHv^GS5H2+ȼ% Ѱ>M\$"OO^cױWn3)Ѓ<>|'K/-\'TeWT ؗѽ χ~}鲋\5#HLJ}-h&*e\2R5w| S,YnnnX\Zdj}U$pi89eՑ "4 ͘MhUUۏKl,Cu?DQ]s|dڂp`@/krsk}]^|Ȏd~jMPwS4d5|Klq[<;umqh15$&2Lj9K Mgi:%VdnMf pZWYLlZ,3h;ߩS4*%{nUl,49%dfIi],lZ t8TVz5?]ɩe{J UmC4C'tq,қe5RX~>>#WbEh>s? #C .Y$,xd,&19 $%S(Z;ټl"c6@rЛ X|W}.yhX .YзWNKƕ5Fo{rBa7K\PWDۂ蝁2;C=Qoxs( >Bus̖%o2鍗8)A$ 6JtG6n_mT# h? I_By= m&ndJ؉Ɯ 5eV}Q_[TGhh~E#O@}"):V]+wA=lsCL)0 ? o_1 [?j/uqU Փx3k2[!)ϰ>cK\7ܸ&D5]%Fa>2>xe-[Q"8hzhIQ W*k45֫eym͑OSDY7e%*V6h.~)7C5 d#3Jg>qM+v K]l>a7oIVt5 1 "/ItaPxA7k=^W솙3,- ՚%>`1&; 4і沵LH.ulmnaṪ& 9^MK2[ ꭯mԸ;jV50fr<%[)L^cm{[vTP2b2EVw6m:NJQ3sxMHlҷd^?+H}s/e ~c"^S)zuzVIofz7[LϒЍL}V{6vm dg?DVKj+u*"gD' lF#[mF E/_h:rmz-V,Ǥ^s>^Vkř|[.ȡ=b]2ɵ4FsM=.O5/hax>h~#YecfzCax>8ojOg:V0 +ߥenI[N9]{th˛u녣G/lڱ/L+k!wkVh&nyc+upN+BF'ZC bT~A7h3Վ:|0-WFj]Y\d4k*̵e-G_Yx뽓Y GE稞4^1 !W5~m{,)dkN?yͼx33gQRٙ}ǎ=p\[}ui8>B-%~'$BXr ; ߂/զ%/1k Yٌ #md1Lg^ M5 S!Rs '9UgnlT&ބYW4 jE!@LP ^#BԈˍO߷}ӫp/vk|)'6m/;;p8;iDtę+E-DUkcL>zK?c$ҐaHo.l=uÆ[֯'Iaz>綛\Y} z|γgܸ|:VJ㏞>(z,QO zh?Wа7]cCأє4Z .SqTM:>~ nyGeB&=[0=FQ)<ї.? JS۠q5 %K%ʇ|bí+lXSdAyl+23% ;1@kċc$PȎw#әcc߷-2x" 7n*?: ;݁#c{IPu7vw;w\uۄp靟b.5px`G]ޥn2h<]6^--*Ṫe?kO߾ ~ pv0*n@'I/#NE=͌ (Bdq~,y`PohI^F|(ISSC܁.^#s5_Q20~0:Iن{&'PĆކ _5g #H[?4=4Q&ep{ip.R)ǟ;YijFŞފ E~YӞQIEװIwZ/iX|.4R4gꧫL~Qʮ&ǚj l(Lݓmdl&CH^ ۏrIWS٣KsypEy>KM%>{{HqqIw%W~!b@u{y) #e_2)CT?{\=&P8?cɱ蘢x8uxeT[2s Vedޛd2m:A`ʟ;AÔYoM~ h!5ҀFbB %1 =  c],&a!zaeRǘŋMqdEAP!8..dݴV۰T؋Ks"!Se56V羝?O\IV;YE#ζlZv^T̑;hMyϒs ;2W')ڙd  (+81^]^[d'QE9> 6 k,rU"T2Ie[ʚ^Ԯ` Iڴǒ,~v?:*@|fk7ūJ֭l^8.prP14\Ť9] L<@#>qfeWI4@ 'nu|1э0عpI|FA5oɒW&&YWWNn!j7So8R8@ЊI3BoD@ßE]) o7xhǏco3q :f,bAor@Vt5qΦLi8_jp,Lo+uU9Y|vtuӢ>o/9w;d pRt'?Q>"M'v??5)pR ÷㴜._ha)K< 8/(JØƼ?ΕM>Q1R-g{y,xϽeo!BuȻ;(" o>{6:ߵԾ@&Sn3}yA^%} } CdIt^T08u$yrffrjfow0bh'+ z\bV6f3Q5c[644lh1K>5psY8-OcZ:дZbY Q6K~I0[.kqA\R EV!a|6([&m+t7I&LjBhm3 :]LkY[,3UO!Rc]c Aʥ Y9Z2_^ {HY-cc>ly Z&1f_c:u Z $9e!Jp,r+~^ ug흤l-2kŤgibUx\H'8e2x_z2IXZ=<)UKdǠ\t(0-pDCgU32EkrO.ZSSJY9&tÛiaL.)OsX9yESbl+e5)EF?xϥEr4|&yZ ɗs5GW,uv+"WP`|v.[jPט FFUo? !2q mPe:Eb: _ofTy>m|,m*tR-[ $LUkْ,PT.%7s[#\YS.[-FFoeV&)UVQ(ug"&XrL:VFbLo qsA,X7 5ce W tY̠qLRJµZ/ L}tgު 2FߛZ-$o2yX hV*∲d~[`j.3:tV]ѯٹgfٹ|Ruy\20宾zbHSe3HUmTb9CJxbF*X\">Kp8c_VVL!4Yk4N5lzjvb>KZi󓎢B5TW#R~5 &nЪ'.>S6;$kZhZMWI^ԉUV{c>ްR-+w8xGBJ^M? H29àx*_> K_yY1*>VY@(Ԙj_SMJ K9ybV(XTrWŷ˥|ؗX;cE*XPUR.JWYgQ)Te>,,JʚOQkm_Q:`vhYaԝ}%A6NZtNЅrG0@ր![͢xM;vx9ЇdF{tYnBl|b`q.$0Ŷb\//.'.䚝#v+R>^kh |[^rT,^]|"wǖ] jr$N'.+1)H 9".ΠKvP>T bUWݥ8K'jMڰĩF)ӵјX=߭ōvfEz+0- 9:k<CtУ=nUɵ$V dL[:@if!JҝKF'U8pQ>R!x|ѢuΒkz\\A;ű87̣ޛ?6.acw' N)y(/UWQ7Ă2 4e0BڛHwxk[ Ze=OqDJq'<[UJƒշuj ^W*jT϶j8 `[)G @QhѭڪJBEU$X-0)C #;`%KpD/haҨ%םȢ,Lꬾspiu˃C5J2/w:M/n2ڢh/ͅپf}yTZPfhOP3!ܙܗv8tNseȨ~L) ]6PBT$cD#h[WA-t{ν13ϐpΐ9doNh/iTaЂ #~o x?˪]1[ݱSCaG%v$bo[esWʜrZ_Ǥ;"!o 5ށM #M^Ѯ<=`mc" [RQ6;NJ_`ˑX\ȑOO[XbA b;uCo9Fl=+n˖,[{{7BI B ȥ^%.]* wfWey3;{7YtP:ԐJ_+KWzb6ܾ׶xK]֮ q1L{ V¤`FÊG'P$SzzsN#&֍HQІZN C6c,S 64혜CT g=^2QŨ$j<&T kRHVz,81dCetEtT'!#*YqG +Ò[T}Ʋ_.㢚ڎe$$H9I"LorcY+ T\iF.+>+, 'C Uї;4Y}@v0g FdPh"!Uo2 ZHy "lʊB$Yƴ"E6Zz w"@=dT 5&Bm ;{ˑCr۱ˆ-X=R? O &Q9aad/Fjf%şP[gRɗ'$vZ9l![rRt̸l7Z܍TflɌd4>uwU;|>3ԥ.k#)eh|l腫L*ޔUe+*)+08A#gys\rn|B.咉\v>þբX;O;̒+2}yGŚM!ϾC&Ċ(\&to(gKOp|zh]^z ~U$ F>͓1<% V$ӆ{dFLQ"S.[R[,I"&f~Klxg#bب.Ur$XQ)N򀰵C8E"aۦMtBnRtr'کaWrm|D:i|B|z#rkksSަyE _| €Vp'ȇwB"r&:urB9s ί壎q'41пNӛzHpyjOSx)%5TKU d3l$e@B\ak"ecN-4 U\WΓHE2{v5'Iok`roa32R4dd1ꔾ gzJp2JQf&bZ rD{zQNX1W(ap&C'4UBK!ƣԨJW D@{?Цlܓsަr£"2+)JiCn*y; 3UFX1D /_HwcBqp+ # ᤍhL(+\RA֓Ѿ2e.?;mjfukpY&dd$ftgO)^y_-^sN[ZZ[8Fl9ɇ^kdxi?P:H:rm14Nਖ਼=&sRۡXX.0yrq͊˩U/3љ϶jźdQ%v!1?h[|oy_fdp,"P'C`b)ǘ{I F9a[X 0;tƀ tnMR~yc+pL>1k2K^?Q*b;lew ,^o![_30\+8Ir"jL&xmͫ3'F1L2NZhc/Z5$~žC1~ĝ#f袅):kNc<$25IU,8 /-u*h } Vw}.dvN]!#{A*wF/p֮TشbUd >"I2YRe`AJKZ7ywvvz{vuu<2 k!ZF! lAIO,HX nTJOm:=Hٜ13m`\WeL4c I)#Vi\e9F;iSĉ]c&-HGO1#G1 ֤"Bb_7<fG5nԁ{F)ٯSʸ( Vک܋y|#wP*tZ%ۣr#g$h"ePɍRWM_fW0+$x)]别̷pKwq_3?V0<1 N4 Po!` (T$6!6Ϙר:y'NϾ}`yĽD'ݐme7]l еmtZit 䉶K}W}f31B?NZ!%Uf]3Va ^hu x$R|{_*cOS9;+O ]bc'7SqF? ;FQ߉pcamxgwFp~zow-+;wGgsxoH[tT >[fM'cLjn!e5MľB9gUD`HA6-?̙ !qf\YNh4Jwu  8 HE AfII*; Z9#Q+ES&KG ͓s%!lw:tǦJqZ;y@ߍG}<-:-㏎"#kQ޹FyToWrӅ ` x|#wbbce cp5)Isͪ1'ɕ`IsqU^ ٿ j- -@y(9,VeqJQ唓;d6}L_G'>D= %nitv$5x͛SR77لߔ2'زO'`|oچYm-{ζ;_6m}Rz5p.| (5#ƂN.j2^" ^WWz fx`-$T f: %y'A^ZII#i@W"UIM'S֘48s|rY7;bN΃k8Ov*=fA P6,@  /\TEK;Ov]f>Gl+Isr[h %VkR2`X)MRGxGiK9d̘ex;NBX3i.B:i: R;2\tWUHb+!]s:j,vetWg*YU]ieXTx.sBYfTGC]XYFW6!7ĪÕ _׸sm\WN5l:9 7$]%y- uϣ-ZK{nCM{&MS-N8W!+rcS,+)>gÊ1-Kk֢SN-.(Yn v+9`QRlP=Ϸ0In*EG`BΜԤιذ-u?")=tv³h,bt>Fpn(W|z֗m0SOzMwo*`E^Ű/K! ZVպ)UV!Bvk!\ V2R]9ZY˖^bmgoF ;[=}HaI3SP 9V ([,y`CO ;q/C@;z.^Ic.4Ƣ{ .:^'x3rPXe ?X-sRG"SSmZuzVWkXmVVz`<g߉ A5ŠcNtF^h%&S幫odo>-_cŲc}LVLoʀqȭ:Ý:ݩdi/JTrg8| ?@TRz&:A?Ӏx{ 0?f}{VOq?ǖ8\זpҘKV7͐C},R0fq ͪRWն KF5WQ3m{GJl)jHQsǢ}f'.1(~sܬpFǟQrQ`zGeҩޜvM ;֛TTYZ|Zbutz8ņڏƷl@~uO_uGx%W%e]wHgC7Y4̩OOQmtx}rNQ#JV_epܲarf[Y[Mz4ZHS/m1eH|/ qdBCR&:]ʦ*]<8JdzXˡ產Cj f)UV@#|T枃g1aѨ=cWT,Qk {ụ ,I6ؤUbqUv%IjR&ѓeYߟ } ZٹiݶcBR817'7džw)@J݊/Qʉ9M΄,dᐱ?<9Ɲ\4MʜiN,# >oQ G 68/r[o?/'>"Zy |; Wu,11+˧%)BL]e Pêax'c!d]Ek $4*C‹|P5C)}4qL٨&- J)ԐQ7e< Zzrr͋_ZNy}r>h^{tX]o'BD2&fIg#:ՠKlq#H`38AG_Op*pb/3}gF1&wmjiޗc/gҘUr>kסwY|R. 3yOt$F%۰mbw/L(()E$dgj60Ab_ѱ-]=g9s(… '᝱`y%1:@]")g~;S݌ ߈0ODv .9ؾO;]`2VVEUs-/:t@o-nu.(ΪrWM&7de^E먄2`k$@8TOjl.w1 *<4B^±5IS#;~/S>;O}I >7uD/Wf{SAξLE]h^cٶHm:1뵐v=܃䵟~ ;d c޴ymy; _/}( `0,t /_o~;JRV'4)^LQDӄ/3#k1 wB^M|XVX!)@=|^z?|=tU i)pCsPk3l2a[ J0lBvFOZ{'N9B'Jd1Xq28G E|N4;;5ˈ}2R{ϞRd~ZAU$ɅY:>+k|ØVE,%y}}΢eM9wƾ AsSQLt&%Q(ktt QxAMI7L,xj +ʧT2 P:s41H5 Đy2)Nd7d&nkxܗmEn5SR iB{&^^Ƽoޜƞ,S˫'HԤ|"=3Ku5~5Ky-?<ӜuJ8_u upguB* ǎkw49f98)x]ܡ ܹi 0GDŽq~&`Dw_0.~)gN} (l=vZa1O, O/8ƀ}p|Շ:Ku%z\I6>=ŋKOީD{D7Oⅰp5\FY8mC h9dGF.E㪣9J*PbYIlq뉽ܖ|kj7% 侚MP"wL^9W;h\I)DY'ffMo/SswNW&d٧z+w..kw.+̃ | 5$k2B1B/90l!_Do'qb& zL0: .To-y?0[ze?pA(z?K85>M;.sš_uڢ x%\GL&~gKU@E[ATNJ&{LOxh[3u6$6=`Nqyyp;^}ZOzFcyʏր0}}Zdz "sbḦQ"9?+X Mr6j#K=I?I15*l WvgrU8o+d\e`a<IsfdUjė _Kfv{bJf?yt$`8AeN+fs&ƆPu_2nB( poE ݞD/h54z֤g.UO.upT-MqUJFVia)}cFU幕k<ˊC\% &ZW63}5K,*9[L`@xv*$}+yTw3qL+C重W^@ɑ<2{I-WojmTlX2r 8?lwsbb\i=BMeo-vշ߾|S掾@ uzq@Tf % f ~s\3C:Zqe*G.u0QlAOK ~,f aɓ#[)~b4p|_"y,)нEcŀ*/?3{/w^o;Ĝ{Mܝ A3nn)/u΅Po#0:Nl$u] ep-Υu| C=_ ? [1KctD yiF䑧@E=佟)ܘ[aԄCmVB 4-Ӵ'+Y}662&Iz)/PPq.,TYnNɥ@V9lyfR5iNfh oN3`яσ{>} >;M'&)Ka§DI2̀,ƙ#R%7C$ ,4!y[No8kGŮ6֢꿂nO:5Ңg/}wTtXo#) J*i3Gl!~EM \ӈ?ۨCxӢ__3 FBaY43wDh­pm om {NL}p֌s3#o Pb$hll$?VWEYI.h}n;߁ocX?{fM-„a 0Tp8Bj։i2OEpq;~He^ܽo_dNln,7vޖ%hQ@Viހ>;#U[U\0D9'!76h=_L[} μI(ϘlHQnObZ1_vb7ɎNHbJ/~‹)[m;R{ 6ڲZIMCM +6t &o_4S(QN*H-a͝bv"oNw![Ӌʒ mw5SF1t kT]/(5kVI7"T 6:KaCԉ5uϐ{ L&B4oyWdptVO`L|܏Ẋq(&3Ǜ(?Jf׻ΔzSe4hVxYfedG]6ø yg֣fӲęPћ:gLVgg}~g]uRn^RUl43tY1hCoَRtQeD6' U,_ZR(B4Nz `}G牓Z#jc9 jOoBQU@Jr284g*ʱ Ω7xu<Ӱ8mz˵\'Uqœ%X;;~ϖ]/J®lZ # Xf OwvU#c j(SGPrbާb b.iq;?6&ks=qOj 8 {rԺ\{tyO1-3z B_nBXA՝)tT%Q(H#2Ly Lg؋&bTyrYmh:PUEؑ974OO'-ýp:x(ib+ EmJ#OouQXm՜ ۞6܄EUD HRl]WE^ave"ՕjI񧏙8&=euPrK|eH2ZZ2ַscv \Hg[vjR }ok7'OvѪ7 s&U\XH,F:S*IB%@Gc gXV%'m#7N_j[60Xfjfw75q_>93i|>G/q .ql[ru NÏ;ϗW "/qͳ޳0jYvPKX^&>f˖=U{2^_fٛ_&-YeKz+Bl{jғ V_m#ӷ@mdL 'vE=t"@l#)|fX \GL C+%৺$b?~"HTB|i(;EHb_$ :\~d#&IS+A=إ# M&O'+LUb+_zBGpݤ-^e*x.g) /DC3v?FY8->$!mV]"냛oZi*W2׮\;U |Y<&ߌӞ%}俟K5zuѢwnopݽlU肽7YAzb-P Er!tT⢸NK-n,aJ̮/ xZ]9sqA66]tWC{q4e#ǵ58{+mZJR=weoᶽw4v흐ZiKa` gu%='Z*L6J2` A^Oab5*N\:B\+dHCB?uXne7fԑT^bA[z*}O"_`3+j%-awߖO B`m$rڮ5ݲ{ ٪) J 7(-.imյWPh8ֹorfN)k;$6 e)׼zyCqE-Lʹu+iěuvYѦC+ثt~gXc/W9. Ɨ<Q+c\,z>oPVlfYf[ԱfrR)i*\aT+ -I`y夃TXbg,?C6$A h97L~,9٬q<, }}#iDdNL},H܏I]^mjMjNGQ Te܇:-{-sMLQDriuS뚾lc'gD$L sF-%)۫*&WKƕK"WcE|JT&$E1]V>ojQP&cx 73a{GWJۦezaZC 0;kU8[ .q|ey&B!"aV0frn#(%VJ'J rBC3om_HT%lqO^F{vyEH\:B,b=ge-#ضVUVz;Vi^\ZrK7 _r)[[#1zm%btOtFĆ\GXѿct[wlq.t466 S0.a{}]xsYȇʝWgEhpK <7~ U Y{&~urOJdJ.k<̽~J;zݦʎX{f-ZȂt pwgdO,s6#@ĵ&8KfV ^>oi9u;2Xִ9!yUz]5i0qcQu4+py;puoV`ͽ%iuݝê(oMyMY {VW2-aO| eN"j fd Ap ||HVrEʼ)m,wJjY~P[Z!$')k5ꓒbc[a1A|F:(QP 'Db_GP>ҽ )hqN׸=~=SWk{7<4ÑZ''4,]1} cBOk2BF0W-[?vK  h==kJY,j@ejN@P4_ge%jievI:zXU+TjcҵQr>SL`(v9,/QUP|hv8at26deg.2i3 U-Oz Yw>068:Տa`Ij>oC q9WQG:‹^LLuc'_:x hں3s)pSf/iF];"̳?A _ڙZ3`w; !%1˜Z:3|"Jteb{nwj ~,OjKLM?><=PH,9"'/?4)!)l\ٜزhyi BQ-UN=\5j%\utNM㈫T $u|TX>郗o%on7GH<0W6,N((MhQeZ-945-s\gyb?P5Jobd5u|n\X9&%R}-b#:As&_doS'frmUZmAy-'579E\"Ung \#OؐdIDWd |aQQhPC d~O )r0ij{Ǒ;ZqliY'}fiF̧w{&,*.UJFp$ īf'߿~\źGL}j{C}?y$}Eڄs3C:Zv)clHtմ j볈lJrՉplô,c FKu\%2QU;FE8Q;_,]KG/}tɗ/]iv4cgwMJC_1zm_<77w.MfP?nCg_Gl+eK$Pt2_0I` IֿXf NX>&,kO0m" ^rBJUX5ƐbXhP pcx bҨM(Ur3,'x~~{Zulë=Ml;`@;ěuOiUlTk/?سL,{ʡ{}N!mGP:7s\lnh<^/6%_E%C0ao"۞TlȖC?R:IJ|A*EUx6-2Jfɡ{Pt|fTfœ#!s|-|f%XtS֙S"KWR.' #T۶g1w 7hMקmpxq9$,FN2|CU8-1ZmRjUB U= qkx8\gqC2ָ#;v]֛\mЙҹISMvr=lֶc_дm_mq'?Adv8†է'O9Ahv:ן[)u$$+gs+$Kk1PXc1 1sctKE(HE1Ai dq*Xt{ nhqm'رXSԝN$J cpI:{ 5@fH3c|c>M%w7s? a\]UeAFn :#>+X,j*@jꢕgD+SMd~g׈'&NƫSGH':fB#5v.8ڝ^`RT9LApPBLt,vAtc@;u$.,jFnRO %YO:LmD5|1ښ|ҩEqg[k$jɳ_,Nw{1oǘp'38+^>6WgћhA <䝠|Ofl/zk5ƐS>b{65etחt]l{+ڿozo{'p, ʣ ?IpXGiKeVDzfz#w/ToNM5M8nqZ CMvȒԖ7'+ydX2֬?E,RԂ4㿏y}|Xf6X.;6Os!;Rp69"ܚ*#k bddYJIq 7>:ssy#Pġ>u,C} }D)T晱lHA+~ЫHzrFiԦ jS&OVR%.m=>=99{:&Kܺ,!'嬖2+<à e|O/֨B iT ҩ@.~i[UzZZzնO}zG}Hw\XPVYYP#YHއqLҦX_><K=XϕˤbteZ)(nz%U뵺qHDA X6u 71C },@lľb ¯kkNLn%}{;Vs0Yϣ}`$_p?rhO r%ΡY,8qٳ>3A}N>8] hsWG(ŝy:4l rp(o`@SCql F.X={]criڌ0NZ<|l= +'nM3rtȌKحΎ99-Ƣ"O{tΠܩi$ysOxhEu[O'Yl*(bgW  ,<&LB{ÝdTxې$! 4!Аp;(!;h;Obd+O$'\%'RǮ>ztyh<]g^'D4N+ |md~rn@0lnݵvO6 HݔY`˛Tn7Lv4O>v͓s'u>85_R&TvVXڳ;+dmDu(+_#Rz0PRݹ㋌_m,_mvǨ2[[3UӫWԬ~|W׬X=uj]]M=n)hE# -t961n/jIJ1t|夻gϼ{Im<5/oֹ mqB/'*8e(FJJwc23,^666(2 7b|V)ǸVvN23'nj[?<1]JoͮKU*S, G ]/-`Hᢑ[.| yOeer&!&f4qw87+FoF5o6y>PV=;Z[ &X8ՠƹ/4RϠ4QnO ۝^ǧ)IOS#i'i 06W5$m'Q'zn < |GRxf"ǛQFVq.¥477 0Lgo=;b{JƝ[G ާ/pqrENl񦃱E[c)uYz=?C)tIФXXY1Ӈē<Ex엁3Eu=E[6GV\׀0~.E0\s1l S9u $X64kn"D>pfr0`me*:voȅ,Lk'lj?v;s=sۄ6ؕ#'lnl)G2D+E+Gƶ&V㥬 XHzkd5B.q&B%]@ >S2ܝYFq 0&5/1~$|B] s̮↙TQ~ ^oS씨8 dϤ;OPW4!̰gvB,nfw|ݧنց uZj'#c.pm ׇXt"@R,(f^dρ"d?H.j,xͯOc6`lRq52)yd&Rc#eb]5)P>^ӟUᾆIK͑r,Ti 6Uvʛ"ozf.mjJxΛwj&f58~g0wsR4`\D=˝13|9m"MFQV|`3T";Z&JFXoiX='xot)1p=bcVRq>hv#5a9 FdBzmE(!pHr]oRpաU8=*u/ϖaS\bS҉Q=:wg81Q {0X?n{Ө_Ǡwz)@a{'&ԟ&$c*~x``+>eoB-aZe6K+ZJcsz9|wYeϪL_417M#nȖh2c;9 0()1iC sWl/NdK0JmdYR &~/4}\6ϠJNT-Ej1wN޷-jؖy͕o7-ȕƩbMTBt=[m "Wutuw#SZeRJL蔑gr9b%ǩg!LB|<11?ɬGG4:keb'X``ILpK+ cw-qavLgS̝=^R2)<{gDk6DK6bOC α!ǎZˋGPד>}z5| zQ=끙yPeu=5ٺWPwׯ>{61>?%sJ`1w.m,$@{`=MaW v% z*&%%PO$6 u‘ׄXf9Lq8,>'$4etNfYK3;'˾4RJtwzR%NԄmzL9jsKm4B/[dZ&u\*xt3|d6+GN~yO<˧Mb"$nuF;)w]"Eh?$܅kx)B̼ ~Siv0ݧߞ< #L=CFw2>?ʊ6;\O+S ;KF~ю𹑄#8j.vO*'>De!G}EׅׅZSnt$Ŝby@%w 4)Mz~[$x:;@ܽo6QSx2o[poЄj4M}FWoA>*PRW[sx~jA/i=Jk&j{T8'>ՏՅKQ:"{`U.w͝UIS%I.&9f/VZ:Fޢ9M2RY($SLF̏TxL֊.EfULRL*ƭ&Z%D-Ilrqktyz"R㛕YPx\z;ؑ!MHGJNQ}2CЫA-}teRҽ&uvPHKƛ:E=E؋ERL+bUEVR-;\\>.;:*Yup {wM"B͋ 8zZNdRQJUSV.QK1Fmbkz Wxޓ>4Aisŧrܝ30'I$ԩ"clf>6p5KsC W'o7n\A4d *lMYMs?`ZqtRq3UU:ׯ?SSބMn\PO+isށHxVהEI!fTT=wcŢr!*wh(o!FynQVV&%J>0eƿSMAuKP} EĕƿB.,aR4t]cTWt۵6Z*˪K+p RYOI8qXkƮRDѢʼF-rm_ LT3ցhh2@&]}..IjKKk2= t8, N57y_1xЄcHȑe-vY'GŅϚ?M↽T"4,H+X|`a~eXA炰Z `CT*j ~?ˤif_02<$`xX)JWC`yl"р%#2;:,k"c~Pz]DK,'_A?MaAf#|+tZ[MxjJD`a6}=[KҝS+ /K*| ׉`F{+X7߀k_k#v `ڈU@D`/AyG/(a-ExòSp[xh$ra4(xôj H`a6}=[K!^0_ tW< |&\aKOx8`U) $ MBV Әc\au(]>?[$6; `xXH`,Cx!<!CA|EF`V숿tcHGQV;G3 %m0yGq2 |a|+tZ[M kò+@M$`\HҽLsA0 F`oh3 |,@. E2?yy$Ÿ!"p( _fw0\T!CvX G+O|MJr#+>"Zpf+3NZhZэ(eqBrb)IɼsßpĈEcϾ dc/eٞzWNz$HN}?Km}9r sDϼ}H? TďI`$ RPH* }+4y 4F`DnR)A }۫έ@*FCW6m85fk++$nYz3rG H:9%]~;oq-;'ț]U5&egOZUS#>P57#+g/6?I:1⁦]7[ԲY}{s=o ܌ހ*Лڛ:;nHQ!X~Gy@ V/[4 i[yH))U( Рq0*W!E6ͨ B <`*w8*\śt%2b`{%;/Вwgܬ޹ߥ /-;szT2\\M>u7F̕@k;lN>ݺuE,dnBBy7!eP[F:9;{QL>7m2#nؓ׳id=y޼=~wrw4/=^9CE sYo:_j217^?֒Fl[olfqAK"'?gH1pA|c3&ƙc4&tIb嚌Θ^v.(Beaqk>?fpiӧ4  ^CC>}Y2?x-OoQ0|07U}^<g٩WDTW41}LsBElB{o!;@{'+GKƺ朊= D\mjBuzKwZ~Vg?K@$4NeTCx^ĬNo,<oM?*pҪMf~_?gKڳ ь}66j9LVW@wL0l=uW‡KVw{̸)IHm:5 M/4)yE9= 9ɕ,oB5 _Hl CP>v%'; ܆ F{e{ű" 'djsrL̚ђc6JRलݍZh)jWUb4tMmb@DiHm^Z6nuNVAO}--D3р+O gݙ:SMڤSi-W')b70uvIH{꡾#WWzfnyFi錛6,:\q"<36ЂW]QPUg/(E*UvV/1B}{!^E8@P3UR^ 2O{aCW_!2i3f/H K>?+rGఫ4UL&eTO/--*-+/%MU7tx65ob=t_ Id܇BmBՊAEs}68c# \Y̌&i ׏ɐ=s҆--ݚvBaLzp750%˾#O-UnJJj]a+Mޞ7鬝w щ}CNlAq"^9N#WŘHgKWIJ`wZZ˶&ӗ;[ Z Ikr|0Ζ<=~X~W6¾2P0!ص^,e0tr\8q&pt/C6A2tx(t'"cKG|qpQ9;pw LkyXZ%Ab+4n_%gy-Q{MwN%w+@oB yt{~Rx9sFtg>:;2vf$ s l9pDt 5LrP5ސ8%אn6r4pHv.[h\r!p!ReD5S1HPgp^e;@U9Ĵ2MtI2F%8dc^`m]<˦,(HD,ύAh 9ab$.9/NJBهҪO3)0,Z=^dr&r^Af6ή' 3J#(ZSl WHĊn 5uy}B,xu}NѹolQl=]}PRK6\7NI4siJVW8okt#|'`]-UB4k~Q/t^p#|Yʥ%KԉvRã I̎\2օޞoz)Z `3Jn.3rlwEм$x5:}aG=;v3mˏq&IJUbu7'e;`G4g%]{&vR)kv)ܣq|ۤV\h|0edsu/*Y/>Ϲ8(Z{5"!}ktùs #vX<ܹ~v8 )n5*W{^2}~3Ͽ.  Ȃv;CBx84Z]7nBz@u~۶76m< {a67g7*_v 7eKuaMrx3J5k' 9|>/QA;670$-Cӧqݩ|yW 8vv~zUzH~\asDK~9||qnVA+G,ID{drV&޾"Ýk\mjJfw%K%ҳ$ mb|*t:2a݅ӛSmusd'ɘWhe/h<;*n$:Z iLc$W/rդEd c^%$R\WݲlxR]cyvfMܱB4%QD$Z3r"mb|<(uӇ)٭hϘPyB\}bWn<܂u/I =5<C5ؕFJ ñ+5ފSg]I< &V!^tq}#nٞ-fZSf<>>aqU[nVî:X~tMrL;DSВS홴tfcl7) ?OR .p˗N=EK'hO^ҸrlFFDmR~q,F5ֶۚ{s:nj[mSV6棠]&mb ЃLjЭ̋1 +!9&⛟aT9AՕqgeq[Do@ OߕjMCκy,WAdӐ2~:t94c GgHMUd6mQR [m Ƿ=!wР"wezo$%e?p>ZJd'.k^1:--%H̕fܜ\zᚇ ? N4G\Vc '_[s3oSIp Wч|< \]; '?Z`"QkL̵ASu2x]`]8V0Ӱq}w57}o B}`_FvQ]~˹;L6\0۵j _]ԇUiJ"Fw&@d /g|4>%/9LUnZGP|0w!xH/L,kܝ=sb}c==kSzNkl\=Y Mwp?bVYųų$x x QĽ.B҆* ͗w)w_nHrx;?[&\\Tx)\=No5Th\(|d'_ۙߧ?8I#*O\CM6߶^%{ Q1|'_grx ygkÍK_!a>8<֪8LG8[齔RxQK]6I bEfYBPI{I)IKHQ+3мW|8~Z,dRZy+\+'MLW]+VcTOYg0%CkW4ڌq樌 UI'w>&jH|Ief@&">g],? y/{BlzKE&MbyB3B* }+ /fK%xI"1/B#z=wOb$ᢤ"906WG? ߻GgA)kMSj+.`粫jw6`Yz xV'҅ W!DC*OJi%Ҭj5MKT~D77hzlU(d\0>Kt\ s.4,?FA#>|5@s:Z'Ko_ EuP]`3vC9y /9WxII1</\h)"%$a$E\9tٶ!ʾ%XP?>"s0"1I2T#a(LUT3ܙW q-6ƞJBSja(i۳FF/oifTL*pC?K_0`@4>J-!DfNC`C7$DURmɕv)#h>I ln6zz[2UHhn9H ns~:KTR`.휿IHط̗ki4zzFkPot$(9O]wQWT,Oc$9o9>9l77 Ɯ`޽wpm*`󿝧[W&0 'qZ s l5n1y좜_Sd>D߹  IX>OE+޷D?EqA -0Ϳ?h>Op>Y9 |}2SKHI6GAWMg-;%dI [PgǗٛjP۽u4FNY?f]^h@4T13(r˸iܥQ)$h [.Lȯ싘\w1 0%WǀqI*6?0}:䎾#KL/S5dO9fiԳijW G?!YƜ'n]yRM$1`}8=c}a,*p3pe_`:( Fp;*Ђ2{cv EI"6`M[o7-ܾ/룴qiφ楧Eb͛јmtK̾NuZ[cðM9qrc=na؟61]T7,#"Q+RYHq ˅C&:='*0r#<1ncs/S_e5Aj}u#+ rQ=\2t"YEM")ǀEuOf3ࣆ; 7XbO^%q'̑ЅtC}@L%1>>}JY-pI(އVN(VO~_^wC$nr(O Ƌ*# jᢰv#EyBG 46{: y˙{&&xx cK'8SenޗKWf&A ijLsCL2aJc4G4#r9d#(z$C4>MZ4ב4a<͞4LsJӌCi<!i\H\>6'Zg^1vܖ4!k m &Rڊ6{Q1of%G{IRh< ٧;x}..=/-*wir䎄*AL9k)ƸkVT6≷wq=)S`6XK(I[Ë +CfW4tzHYq Ya}eCA *'~`_+Eڛ$.:PGd4ΊZ%-@Zb @]v{=J7 H;|@'̤ ̠!)Ӏh?Ef3qQMf>GP^Y7/pz7 AO>H 950EA jntsG.h[^]5-sX)g=.`zܔ&IBW8zɈu'N-~ntYTl^YCj#VMI:`G.6=6k{ܩ#VOʤaw +wNYw &2\5ꬮO(㴓V!C4v|`_"P3 UBeqrGEjggn"$2FڃX,oMނ{:Ē!d&B:U kΑXD7ZKz7'G[XD?b3[֜x}W)D5J;HT*YJZ^I_=*)QD]yob"U[j?5hY68NOjӷBbG(wCs?'YLuu€%B\unEKN| @1#xT0')KqG v/%'5T溵[NU=ĩWh!%j5a.%u8*t@Tf剜DHx1S/Ϧ6n{/5x߆8]}v eT*Y^+?k-2bk2f 1zKXObE#HMF.p?po}.+%,&Z#gr뛩??5 3|)gL<! .~/:A||mIҋ:{h$qf"^|#ߚ;`RH8?~f?9%x|7a_/@C;ep $ݑ LCo<)wDF;6D0I0 ,?;!("1=k\ , Dv"w='rSAX) . ?!E'[.3s c!SABz o /~s|B3AzayQ炰 œM$kFE#+cYhj@<0G0*>`<,?x $[Oh+a&/yA9ҹmaL_`w!qS шQq4WSBM_{gA/0_{ ru6s9 ==A`y%]8F(F!]V5#yVMA$ΐJ%<)Pʆ#$oEgعx\Nڎ齍-.EzE/90E(} ρԿ"gO|O)qGt)7ī{;bZjꉄxvip>w|/G6k=f:d!y_Hߏ9~t 6| 'OOC=. cp˳[wQ!y1CA>pεw9zˇO%l |LW\NT?[L~@3%\NaFH \ D0/Vd84XO4NX<#1oGBG[O\ԣ\V$gQ3 ˔8kz![ҏ>X>= W iЯc6,sk|YҜF_[[c7n6"UPd`q&q8 8&#8.3q/<8 caxeHps,~ 1CjPͮn.]ᇃc&i5葚=z/|<_l\he/XdqpO_8}5'" p> "(]x1 $ v_Q?D)/~ 'ZCFD@8e0h8te91/py4yD>8fLuIDb ~ GI"JD_x}ȤBq)2`aa7IWt! ,QCN˾HB( 4}ɠDz8q!AG}8(D8K"wU$79sYO"I4H{ ǹ8I!gۺ Ir=@R{KvYy !^X@tB_7uʺ|h݁CRxFw$F`I4O@YBQK#4 ! #KP W|DSL:r ca{d\zQ0q&Qtwt^t }( (.(,AeT@d\Qg7p o{N77{oMSNsnU8vx<}WiϐA9\壀t?2ԃ`4 M?1z5&)˕!fAuHP댚}-Bɒ?22~2QĈ"&|, }8_(ї~/A̓K@c NRx2 :I,sp$7IOEGCalҋSIw70m.fb>"E6S`B3Jt)/3IO @pԧ7 !"3JM`BiI? M:Ʂ)lRO@/>57:B}<=2H"h?^hC(}6-EMqi]FFh lz@$$[DHA^~h .}o D__-T8V. ^4^*N`gVٕ AŃ6034o1 =G&N00h3W \9q Ġ-k*4dA/@MWX[Y|~[u=l}I/F}Gs2hb}v|}8_LόSXV_aϡMdD>Q॑FOpbڠǎ6,;/ c3Ue 4•۠+h8.-ؠ}P%1)/A/ mit 4d&hMw\_/"A#t_4LC4Bl^fzk` Yw'(htOn`IЉk}vW>q#)ry ؜Y{%N*F/w)֨瞁DC8 2c_+0{Q!t FLG>#~p }`x&WCDzԐߠ70A!wRwP|ww$afjMC|f뀌R/ ВʑmQ6!@ӕb@k,澁<c@e/s*[@|H z>U}${v>z,GDs(\!{daA+w97{e;\MTW'cbBl|?A-m:PUs3*twѤ'w1Cu 9 +{*/SU~TV}o>uћ^|WI EQO>uTo H^Is)aί=N b:ebogr4'r6)vrH BwHJ.M-=B12)#CC^E ~k @G&s`>/d  .pzC~̿ޓ: y9ԟPt^.pT87>?8xHcmf|'pL/v?@bg$k~</%x;GRg]3e~j/$mJpYYCпϲĸj5$˥sPNYhlc(Y (?iNÕcrXM1W@Nrr,2lyyueq?K->R |#SX@jz(y/9c53\b< HՈCro^֬ _8@AC݋*"Kúº}"\K-gjҚ W_5*/l NE" 4S-C OFK6M*͙8oK0GX`}WUSXD81<+d~, P m>¹NT87ǡ[A]FOڿN+edp]fs4͌ʩ{aXIY=V hpv .pGp]~dA/УYX]3]Q-|JzU,[3!i %^Zǿz2!oP}",bLT못!}t?byHH&:om`Kݐv@(H_ :EIDvhIψƍPP0j M,IS QM~6B_(K?~P;V>y)]nWx?NZ/`~ WAAJݬ2pC1쑷@]?|-WHm qig[C n7h+ ?y/h0k1 xL'uX^!^C7(蟐Jc^%[~|qiFr!X~ڐQ^gOK!鶐tHzc/7 c"ǖ0&DioT(U755LEDg~xnB:@᷸AOl_ w>8svƦANQ)oakP*MJowcJ~i{r̾{۪uo^\7 d#%ߖY M"NQѷq*$5T~vHY@@{tΜ:y~V~ܗ=0s{wB<ŐߧA}?%v*%y^"ǩq[pM :E^EѽG115_׋ ôڙBk1 Ht ʄs{$# 1I.["|J}!}-wϹ]kȹv!4l#ݮ z=?%aoD@ek"+_ 5V O_ yc2?%G'8Ip_C/40أx3$$=hm|ɂ<[eet*2YD__^"Xp,取[U@f0'E\ \ \S~:uDO%\ \ 1~%bHztNHfArD!rlH:G0SHz2%=D>ոi)B΃ IoW@]}#km8 GI}X_ Pj?#o?a$aa-)\ ?/<o :jʄtqFpkB8N>S/"c,k/pfw3X僤}n+"s˃ko} F3W A~'rP?zgc0c Z+17F@8  U|o׳jvRFz-ݸ_xI7`ћA1ŗq ꥿ F0,blU2e'ִi3fXZWÙ=HAgĜ9  {,C@cKC+%z>aitdG}M>]%`'…Φ mp/ȏgG?"XX *mnM#f+ՙ<,O`/ex9//qoKs80?a:f2mv+p~څ - ȹ7mu򮺞oq/gX/3EbƵǺpyJ^;+.Q'Url w{[gb ۋb8 &y ==:R^·0olf;d=xZc0YfwyCUUL=Mk O}RӚKgG'::>m%~vWtCt]& { H3"YXZ`JǹƙmǩWh4bIs"szL^]`P2Kuo~h. CqPW2ŢqY?iޕѨR:މuT߫X,[;ƟC} )45rM?oxޣG%pk{ZMd bFZ͑CK&Ͻ`k@,NHbX۾  ~)B/ׁ0ܠ^mɳDπdSB{$#9'>M,=Dz${ -D(MtP Z'Ž?Ikzy5l1E&I{~q r`q oM.}d38,RaUl|6r>׮?dNJp.@"K }M I}*ʑ>'RNOS/|1H5aqua@/'r-xq'cW)8n^/1?!ᕄN ;Bu si0އ.O5F&v襭OMẁ7߼̚&3}2yFMFW>̼$ma)ܞd /y@y-#UExsgO_zL%$pWA}C@YG1Bګ%N6'7HE7}aђQ !L>D8_ .>Us׬ H.{Gdٻa}A-]ߔN ? ~?~O4 \CbPv7@. DsH]d\ ƻ H܅g%M?n[hdS;Pl0of)lxLz q~௤ (*)N"J <k7 L-YT1[o\t74i^֐h!roI7ä:@a1%=^ДS]1ӟ^^ԒMBu̟UѯНQ>CX2]%RSǰUv/oib~n\>IH' ґ1\ v#k w[v{Tdc߼Tƾo?A!Ǣ EI~` O/Nt}\&Wih|84*>p`f=  ߢO:R&_uֳo~ OK8 '=SML%So~LOE~%Tķq.%O\-/7,O;% FGKa9w%y>GƆ稘ɑ%~&z?p'Y:Ka[xz^X9AOlvS( rϓc&{I~y 3 .䝊)J(,,O;%^#ã%/j<>*M'SXvo*5QrIh&96% I1LI:;Sz N!1|b4Gua9d ~ˁ~hq q6a} )E-Nö7|V0BQ-?djƹ-@.G0׻m#{`zl7K: 1פߎ!P'X9_25Rgm)򟡺8$l~87_D2|q¿ w5!x߆zB?J?W]v ^;}vwEw"fICUWeSPgex6[S&5B͠%=?^zFCc󸦼K|8ǔ:>SWX+z%ǡ-%xa'f5rog&߫wK~. ?'JS$Y2\=U_E}gT U[ Gw3u, dd-s>v[~no'=m:ᚡ9ɫ_7vDd[j 8ٳ] eGSj\R`gH$QlB~M|9IO$`ٝZ #C`5pv0?E\V%GH2wc~pJeIe> \Y um~nf8]TzD1 |{#L;С=ñScw(JbtX2+% eyC8ʅs 5ޡ=^_Qlx\:'#@f8iڦoZ'Q΁_G(\cw4_k26&w/i=甛&\=.vkU9֫!}ƺb}1^dG0U6BP2jt/y C'1(EYprNIM!/ʀc= 6~'!8ʂ"p)pISNvcH@̥ͽvBsTk}FSM3\S<ŚqsniadnNw%+,5u\YR]umͯN웵9m֑(4JYZ_xfIIM=4lA4¤43٫X8fUeq -ˠ=v {;JC{;܇]]1U!k- ,CQz=)4:N(&z#4q!0d:Bbo%|S1<>3't+R0-3.BHھSg/Ůe2{Ġ#bJAjў9jgJdRY&@Ȝ؉lZ`]+ljդ)h{5#3A 5Jb03t 5^Lܜպ}tH͐_p3P3p8#|WXñc]MƱ AQ֏=Yw)X|Ȥ*Xӎߒ۸ 0{3vHB~P'cV=a |w*-~HO#S #>EcȾ%#=bK<'M/І͝cQ)*3vdRg¹b)=s8*uhiG/赠 ?cNyqB_tO A ~<4gs:i*&nBgmOҹcpj{8\  Sbq'o\\*zD33LMqc*g$]2J+sܿ n*R:Q?zGP18̈́7A@3yU= 5DHWb;ch."6}TE{_,vA0bmc^Zx"{.Si'v&C<7)v| W{;85t{ڝqHglg7LJ2IF G&JJeҳ#/'KZ΄ʢ+%a祈7637HşS'%#EөK^>Q('G'c_ 9cZZ_V :F}DٳB=w-.thiA1Vkf٠JngM)^]QfSc"ŊA!-?J潞l].,0mcrF_XTXDQbgWm`+YyqG;KݓGtg t;bi d N N`~Bh+sS-L><emz:9P]ED(.-JL̪p*m,}gi,GX9J\*LO|%EFV<|ov /cJ*i[?y@O~킴Y/c̅Y+y{|6|xOM h*'c'T ^SBw1 X ?'%Eϻ}oS,:{C:R]{vF; LнRb}{y}qv}B:e6 gUf gn.ʿvByQP%GL-` jۗA,H=3xA bѮ;tzºh;֊NQ\3#7Zq^`.^4(o-) FO+u# .Z:)s&g)n0 g [ o'bxNG8#OJ19;cG ^RНǞL{´-zrQގM==S|VB %S%PEExV5vWe[}pO4t|P'xu7w-[Hwdh@^AK^"}K[;Z>s$(_h%SKAof.ྛ/YaQ9)$:t3kqN2pr'SC< ]֣GڰC-nЧ4[<#e(CK)I3#ߕ¼mQH8]*~d+L2 U%|o |R%HEeMp([#1k$e"]xa߯vMq-uՉ5'xbUkwx}O f%֩񉄿/|G7m8@PBexJj3D?Rx?= BzoQ8aM$=;ť8f=-weꙏ-CRERfTOt}ig7&jw17%#zEFҿ#, 7폈m`(vRj19.g@g:A]b9nHQ$|U|q-x?-x/~B_uEs!sxa K֖ 9"VYY-[!94qzV 9GBh _zX ,g1K{Q?, EI?)6&S‡t.ڢ7d6w$(̜4D؄._Si;aʄE2g%SgJ4rvgf[&%m#zC KJvUfa透yj>|%ZR I2RC.llkîs?ֻ29vސW^}{v6ߎ}%u?qs oC|׌}!B /DF^wedё)_vhخ:#ղzۄo'Ӹ>kgzzB1D>V]Χ*{uz7kEvbbvpXIa?wx7pzJܻ<Rfd}5<܇+n OWpwo NtS#$~ MB &DF=AYePoHQ} AG罤jY=MRn/At#ގuso^5ARս!j=rLS iU<]٭7}[ QrAϡ ~XhaıqEt됨C4#ӭ51ڰ0Rz,,W |R%H:)K[Y{7¾nYO$}SNBcz-ER /3 {B:/rQv㱽 2\eqnޏ$|-¡/6B:z0Q~,6 gyܮ1nc9H4;~HUG9gW_%ߑJ(֊Ux;x+(~kXE|[Võ<.de%&n_??IJSKʑ%sļtɆx2Pʇ۰-*_oC q~Dz"d/I_`L)~G!pJˌd?]1sq1΄OT~v[1}$O?;h=8{.Mmn\u %?F-~h7:7PaMM#?F^oB2r;ga߫wK~E!a-EB(M>{åSNeyW/lvs(^TfDCp}"%xV_AߟHߧR#'%$/\y^ dc%wKx?)"/Lr[K Jsgm1\w`D{Y\LܡH,Gib|<3HO+v>L~q(ޏ>Xs/bн=][kK><{`xviJL͖a)\\81$!1*ۯdh{uNn75L:FgP?g\%UL7\ qϙ.*?S<o,AIV\ƒHs/OG'徳pT1&lfGfU=02aMٺX/ı hFR_\`sPE { wS[CT/爊Mkmln'i-*f ́m`9j לlK8g69\U#%J5~NkAmnͲЕ[T7l3m֠0HjX1:ʼĴdUT˧fVS:ޣK`?&'ge.͏ŒӷxJ,W ?O@F;SspԁW?>*Es'Z ֪3J$;V^W@'Ƅ~ÊMN*ӝ_՜ך;ps\'O6.쫫8*g1:`!Q6?PZ&ݖZOr1W紪ɕyOL.]94j+?ό UtN*pWo,aO))D'B1CAI=Z=d&0ũͥ.kz͝Ms$- 2ro3 8p s>f7&u:^}-V[Jik6 qBCN%PCݪPm- =xGٔfxn^ ?eNMOJ5I{@&H/_q)9P׃:cPfrU5{)ޑf6"z.m.If1q6 S/sfzt堃n)qt _:#7Rdy5iV0p#4OGwȥX/5LuA wUb87y w)9Y?K/ʯ'N֑6t%kIo~P7Iu.._MSyp ׳zf~3g?0/(/ַ۟~f33Կa o|-3f:flI+GC# fK>y"]0ħ '#[X49i d;-WCZ+0W7V n:bVƨWLJjܾ6Ǎ.2eaSk`l;JȜOG&Yi~4 SRSqT*ruj^gIp&<5[.ԛ&wivFS=`6@k0ƛj =IHS OTפ}:7 GP@3xD0ҥJ|NDq%̽ʠo6^o?&Z3jzu/dا39ٍy {S;<)P3ţׁEc[0@UѾw`c5q*N$1Z}]t{#:z8FC: u/QaBPV޽ՇӰLe_z墹h}%lqXE מ1hJ3~ t,^\h4sl%nm y[L?%s$OzJӨv<۠WUEWpƸO0[EF`DlXgEw?>इÕυ_K]Mj'bj4.!δvA86[ɛdY֣oZbwzo¶9.VJ hi#!>UoL3Gfq.#=%. o|xS]1n#`ީcexgON WZ>MM8{v(X^»d^<6s2OJ?Q@NL'.bq.˙cBta/q?FX $WF"<-SN9,4E[t'1)J-l@U]$U \N#PbtUOsؗ^?7"~5(i'QypͲ7!/h@>YR}E,2foqBqǏoo?d|Y0`9U׼ nOW僂Qw<9eJK=`ʓwO[v.~][~p 9Qng4^[[hO k`|P^+/#_'x?qhOKx!x@%o@A?!>Qdx`?,O߉OŸ.C0!K^2JoOKt~rHz}^oPg:ٸSNؿ%I#5Z9'x"i G#oPԮR*. |D-ω8N9$rU\akåKrpc9,ZJ%^o[^KzU%3"εDk" WD#SR*7"#bwBQ( ~Kе]q!˓݃L-E߈̟}LSm :/P?:TXz0,^K X?^G= Z+x==,H KAA?D~~B_E]^M=#",on R{=D>IrL:Wh.[ӱ/y/뛥0"ۥt,oY/t5O(ga ۹%{q4khTEҺIfO&7K ya4ಕTh&"VУ&MzҺ=yb>AOq-߅5Q^+ >˟u蟖 !!xo@rx 7$74+ Js^-a|%9A ;yp Ed/Ԭ Eq^?Z}SqyטxʞsUP47jB}DO%ELZ8v0Ÿۧi>Y{%B~bnSd ?IsPx&^+q~%%"^o@A7ED!eJKx(-!ڔz& 4#83JTfMBt-dtƚ Qt>zˇ>]#rp̹ CӃ9~݄]+fghIV6w/X C-FƍocdEU,wLnV#SsjYMZ+hkpc{´5 CIϖ  ?,7@\ZRkJ8p7ԥeLY) ǚ8֔@VKs6 b<zc-Kо3on΀+ R褋,ig[$1y/^=|R?$Zß ,߱bc?l,{MM福O`YvqN7RyR/sAx'IxE`g.t $ _M`fX1ܶ4g)m0g QX;cb<&<, yFS `!(:S`Aΐn(wg&$d83n ӧwL/M)HHȀ)eVkF:  ,V%B e1iwZ<@Q[-Ph l;i܀A&6Ɯ3!{woɏKI>kI#}3#{JMy@}Ec(6Mΰ•Z9#O~Xk5u$kָ8 1nS'vt\Ɨ_agJҽi*ds%~Diw1/ ZǺL]mCJքşV%"΀2\#FGͯRmSKd-;$,/qXT?&\Bd sj^$CW e:SkMK3&|yE0aWCcEOPP\O𫟤_wmW-ljR'd6JkQ L.m)l.i-MoT(FTX, tR,}b_$Xğ9? e(C쳺.+iSH^x))]VCJck)6hn/Mw29^܁!rKJ.5ę䧶q?ӷB UU{˼e2+q֯o[~Ku릣2"Vgi] ׶~:78FU~PFS63 fѿ쿩Iⶓu+cڑ ЂspU3Z@qƶF?h0@xb=ۢ/^ zL,H4mh+Qv-A~ڵ ǟ&s/tG؆`o۴MչP5Iv1G5GnyWL*#T.s|3kxƕz <*cJpoXeʭ,{?T5lE-y^4ƽA_TwFX_O9]N-Ŏ4%(QngƚޝΝ;t%()ɇ@cN^`rؾEUO}{bZMI NPg_Yױ΄lj;`爞t<ti͛?'V>gcjp1bzы֭t3Xi78w&.Uº@LzhAQT oM Dkyf0E5xǗrƐ^v3]J^ME/{8+32t1t#ԥu vimZ>NkrQm}V]Cdhb h张T!&9|R\^ښ141&=5g֥=+^)&h\ q$=) 'f6&$6fͅyyf&&%%Zϳ|{ZJJw[rohb)"@n4uяZu))(˱TZ{{ {ߩo&p/эTCź޲de'm/j8Ŀʿ^(֜G\u՘G3s5HEkQQ (xp{,CE7K5T3JXVcՌ"PG>Q3*/f?uئ.pܕ@QkH>ZfKՒEV۲$K[8 'g#`R,Mf38䐓в(8(Nwd&&cH}{֌ێ đA.m˥="TҴ4SS`.kq،QaHA,C5j=}>[&l긩 ^L.ȅ=6|&"koNPCԼN^[vGMTtrlfQW`Dkk@Z4J'a sltNQ^SSiȕVZ5+P*TVK: cymqeA񹘑mJ ˖^v ʞ.{w'q!?p\mr봬Q6Zۤb!-kRLHxa'$#\+]gP[W¶qӊ:O3$:윬,KXgIIg劣ט7ZHTEJؗ sb])DEEPYO abyJ#Z*sAzf{)sV&5\vRmG΅f2m1(R) 6V3y {|5I*rlYFNed3)S -ΐhBleWY&s\Oo28N-喤y )#p*\7lQVʴFK -TQ: @f{a}'O/)UɕϝkU赘qQp@8lWv%@K3zȊАdHoU@x)1/ܰ4Mhq\F8>ˉsL؇= O)M&Q JB_v4;} >u>P+t=.hG 6;! řpzCf.4  -H y:腵(J!uzUxUޑKtazMfcC]ҬV3ge@8&8oC| jVp O9sZLd4Ut\;FZjR-nc#J]Yfܼm\*k %e|V Wg^[wx|iJ|QWRKM[VTdd(]Mzfv)YL& Ox'#.P ])fT0ә޺r ay׊Z\'=*!41ƇM<! W2m'$%m??QMlٱ8GɷehrT~AECذ`l|F],k.XDw-Wx{< " N'Z]%ܫa51E^o-w{51<1o55c9-B|Ql!g=Ă$=~(1I?`vy{hOa#vL&K x}x_8 {Xxb?@`/>$@MYXU2wZ `&g&-*3*FL]W7ϱ`r+}}ᢰ&އeK81Τ=AKn8%g;K/- ~Vv"ނbw.^>&8n'I+QB0O:,oE^[3ntALFM״?̑C7Tfҩz}ezMۘ=cqQӇtX׬vYW">a7w\†qqC'dG)m(V;V6%BލWv5͏%"V!?<;MLn\&7uHӓ_Z6-8Ե7,\plg~w]1s7lh϶mLG^ܯfg:MB+t3W|D\'TOΠT fu`vEjnEjGӷo{t6ܡQaM+X 1q_zHIҿl"was"ܹ3]IN"nؼ0nO}p(A<&b@2eN:FV^0ygWg`Py1?խ6u97֡N,X3ueEμQc2h=~%c=<J^Y|ｗvv N1A';|\ O+˸:YuŒ*OtTlճy={ݛ~(u0Pk$O=zRsn1c&#"`dZ:\Z0-|Jچ]QA1Ix4's"Eb.CR/wK8}Rp;gԮZ1cBAx; qPOS A[2R@J}e)h WV;5 o]Tuܯ1UU'{<qX=pQ73;+#/, '(6.P P `Qs7_ẍ́qkw 6\ƞ;^rfq]Wjgg{2JAs=RT#{v > <~ΊR1b>P<1O?aOM9'1.E~Rnӧf#߂= z [ Kia:T4>>FtPޑnڦ➀FF 01BVS`/r:ct&5v??^ƿa|ç譌4Ms5!P`#Rl,E%Ow " 7"9Fl$Z#+[a{|rG[W7.7騗TJKl]ђ[ʦvCY+,f|튗Ͼ5<գspܼl+SQ)Ôw}3ٳׯi uqnFu_kNNk_5|?sZ& >5;?I%_z,=Ĝ}t.GDA($XdI*儔] )eUpsaFkF-w3ҁvďg\r:?$Sg%f:r{Fmvy;̄oWJX!+&Mv|1("yǼ!5;PNN(h&*t|gkMht=eRs\8|b*PSpߦ-GW:%:=VeqKA+堭AߧA:QlI?ʉ؈/6<1bFy_׿0V^:qg&\> ӂ>I=-cs)Ara⎑Ia/N}ꇌed.w@*slVlW(vo2mlX Η,ܯ~hsKE 2m2 ˘t# eM-URRtHQ=|gP/qx>m[ PTym1]FeĭV! Ua}*ZcDBlTGǒ|lyG=kU0x"aghHX#~# ,0뉰EKx#8Ir O0]ԩӻ-i4hzo"利>'f,_YU*x ~vǣ'`R`>޿;B]w#H> 5XHLU9Q_WWRA>&XknDDQJIF0/ lୄ g.qzoBfJ\!D4%CaA|b+BQ1$ZRʺŔէ$LrOnc$7ຯoNǍ nSF Sߤ:w1~ڍa8qFwn1"M(/0zAy>~ ?&K!p"k987LTŘ9!2 8^dZ7g_=<եb_Zt4_Jh2G#}؎7#N05OG25W-i.O2)I#)"ChB4OA4~Vُ  +tygNBhV Ck1ڠl#aaEmv}qlM8-WuO>0Vin޳"~ܣ\LǶsʬo3Vk0>un9v"rR_<y@J  xc`d``/ko"Ȁ<xݚytEǿ]D@@P,$$, / Hd9 3* :#o(T<( :.7# ˸̘W7\B3?=s~UUu~F }2?wPvF8*=ZJL>{C<-.B%)qw,7&pdq.i]\t5leU${qm _&n?8EځNηBF*E{d:/#3!La|6Pj..H Ab~$#b $H:4wR<|a?0˘uo;|}MHn(oFo%ƣ=$"]=Ⱦۆn'IwQCwj0g:8.BYj2-HwvRt]u /gHv#dlOQx l-nyKWGs3-FpW^.yW2.i9( W2Ç&ԕe`8 n #.{F+(yjo>$͹ ԝ'sP]]ȇ>~x. o }eFqb[@Mh#S%;ߣ:Qv̵`}o(Y䓫jiHZ;e]9a lbrN`  qi#Mpy+qws,,2ڈN Lw7"׻c2-}?=rJdI I#_mF+ 9/~rlLe|NjPrR@2EdJrq,V [-c@+T)j$Xg YJI :25R0҇$ $$ "T*D75x7H [5soquP 2 ¯} ,JUw!9q[b,[Hfᡀ2;"幤sm#OM5|NU"IO_?VuܥL7zOɬ3eV?(T Nb6E$nRv Ocv%:Y~*Ⱥ%QSOZM)XbebM&Ly8~b2k|%ӎO1o&׍SxvwP\1ҾExoA=)o&s9nLXopM]@Wt_7܅h^+Qu@ur <̱5SOL XRW`bc4@ךLG_w4mYXՋy~ twJqNy1mf}rQ-ϯ< Se@j~uD;2ض*k>ƪǮ;ElR֓esY.wEzvnFg J'T 1vQM+Q徝dyeD/?G>u6L]6ewrlewA?V9ߧݳ6aEִC1(TA, ro JhwH푈IOֈq9v i+~g3_C-D[>jo?מ '>`ڞΛlzؾkV\D{g5!h͹ \O&p]e-icJ_巚X).t*=#h4:&cr\kB1ӛr}s#ނN>;HeN'hi:4̓OK5.]3scH}5.qL Ʃ8W[r7W_?a>җNzY$;Xo,:39] ;A/:e2s=G?iXR-X{9Z=miw":Y*b ~Vov)Ywc4ƹ܍~Wy>׊hW_r/X AY>m֯L-qBΣSۘswr՜bQf xnSycWk+Lʹǿ~<^#2qDxmw#P.ڸPb>߃[pugGvsIJY'e-[I7޽ 6wڏ.P҆a?Cs ' Z/^W)w9&RbKr~,66Me! i-J=؆s &sG5 7~P|?Y&m'5.퉎ޥ?|L=u-m &Mo\Ei\` m%qFAڌs^#WCbG_zyw'o;Q2zkֲ@curo܏>#{O$=notsAiފ o-ZU_^w _pt343gL~vXq}~ҝ>] c{>׳?["k}dr>4 bx<{u;1wb"…csi' >亿;)8=N&$[8-v:ep;*{ӾM~"2`X6#L{gF)3{:0o0cE~w4'%d:"!=9 U?jgM]\I'[.R'$~XgKr }F$Hl/=MļIz#%Q{ߓ Mze?D{+w}7iĠ]C!Am6{8QQ}P/hWݜFXbK0Ju`ߨڕbu}0{zP篧}C {Zs=}l8KhC!_HWw>,{ǭiyjpF'edy G歼cΏ&[+96?:;XMdD~\ӸOdn6^^]#k.gq~N P|ju&feHZgggY0vǯOp.ٜ_!8|ם[s^X? |!h4#ݸ紌3@Jo0{Ǩfp6[J}f+gSO |)D>@ԹDC9hQ=?B/>9|P,9sy!\9җiܷٚ91liq^9s{_ Π%x;&S"}y^?܎*VҬ'+3YcAc#53֌^A?&nb(Ŝ?riOُͥuM}͙;_-H@rV֤D3d GA9{$ɧFɭ hOM;GtjA02=jS.OyLϣ<gQ)π(ji'iG0 ;ubCd\ժƶ缣JcgOͣ#kHN$Vm`#G~`NEq:v4}G?7Նې0_JyHvʝ![6w•hX~D#wy.qui *cV+̣ߪ66c8jqR1bbZ{3*^l#7#jgϭQ[}r2!J&PfZ.ҷE ̀_(u 2Cz_!-]T-|pȟQuȽzrn(C5==-luڗrn}y:1=9)7|? V#f'e2iD)[g׆d_y1N4! uyWT7֟MgG>D4gШzg;Vdyy}L|2FWGA;#yO$BP vħ^!}no2u]sT\9N|z\|WhU?$Cvz]٨MkkQpn>B31k!/FSq y|@d1a.n_j7c} %&_N;G;Rѫ#>3%+*)gcv:b)g[^yо WXr/E ~4 Eu\x|7=5K,4:|7Y/7060Fgt)Q !]mا]p;?O ju~3|M1ųoʐ WaXoVO_- _KXCe L 1>[lYϐo^44mD\,>[gJ|O:+xo 5HŔLw{7?_^w:k;:!cvwΥ=v? H58'%1~g0~kOIM|ޢޢ8&>oȽ]m>a5㿶;, 6W3>j2;vD}k(;0\,vBݟ+놱HU˱|mmYTE"#rlBz Yp2"wk!9PX#Y_$N| AmW"_euvcO'JAQD 8Qe|1F=G/s2@UUW8 hf|AB߈no^_7u'Bu[~P͛{oCF>g՜as,%4 _Mx$y\e,i^}4ㆷHFْ r,̀05YШUewm7.3븍=wBpPƭ06"8I3?y]u~~WNERT+/J.ʲn ɁFZ[ﳾwZ_ <+3x9eU~j QY<89085,zve_ɕu|J凁/t"9^֟V9i"p)pV\e lx>/7404*+Wuoˮl ~(ʗ<+e`)fc%Wb &UĊća|q} ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰ ̰Μ'Ip>'y'y'y_'uZ'uZ'uZ'uZ'uZ'qzO.pMysO <7U'^uje+ng^흎ߥl/ LoveFq̣H`;^ղNeΜ }ʍV_׳n?r|8'=/:9j7* HGUUQUpċUz^ō:܄ x&P7(0w\_X:߈ 7{lv|7ߋc&8 搓W?ѷx;[x~ww{xދ?<9 :fQNjǜ_GoS#l$$ 4" FI1#&},0Yfy,0q)4~ţkOuތ୸9b*GL利1w#n܍s7bF8|GzoGvoGvoGyuعk<_?9p-?%\<[߀W\R=x3!zHHE^:$s\!29-(:hϹ:qxnHhHpT T +::h|?ǟkOuތ୸ jFĻjCGލ{Ȼ85CxPgBG>C0Hǰ;8rxE<'8*2"-e<2*2kMx߂[6|;nmߍtƪoYr/sKȽC!O³BD.R䉱gsGpuH32rKd1cL1 ,qUaxf\?rf%2TzdX`ίb &/ !^Gn zb9XX:6-lc޵U}kU_ZתVU}kU_ZתVU}kU_gWn|m n8ʿ^Ux5^Wmܕ/sYyf=Ϭ;7Gxw8>V_}"=CՁeQ\Ycv'<~<^Q9D@b˭֊' D"d+]'Vlr񭁯w_1?=xwQ問'?y;=iGBb<긲jOW]9+'K/r+1sx'&dx&D_8ST[;6?O2< Op<\m8W WFYf"2h^9\g8W&q/~=|$2\sȡo ʁsB7x~;U5WG.+ȕ/gm?߳xu9wzַ<__ <x@??* eW ޿++GOrg CV%pl`0pb gprY8lSകKg \s'܁2ZӬ'~5trh6&nh6&nh6&nh6&nh6Y_MF1~o`h6&nh6&n+7M|+7M|+7M|+7M|+7M|+7M|+7M|+7*G. `._S7 xNv+7daW_xQg]휫ssvι9W<|x.o;p'^w*WD&/ۍ]֎]6xβsV>t,}xo89!]%. !|5(>VUpr\+1篺3̱Ŀ75x-5 7[p ߆oǭ =^~[58| ~(rp|<ybn+w^QֲWrs+? +lsqz,?-pex+|O3%9Sp xUw8ށ;zg?'2~gٕ{> lW !%{ssò+|,2~'M{>/ Xu7Y~ ??=3?/? o[qxoǫ wc|?_}K\@ |ća=ǰ; WJ"cxeT$~'x ^o܂oŷq+nn|7|sKOȡ>p|nO".Eo,[۟x.ow܉sqv\?[y ?o ~?G1?o-C0CXcE]%(Gm .okZ|^oƷ|+ ߎ[qnw{%"WD.R䉱oS.bG,~%2~,~b9XX:6-lc'p;UߩNwST};UߩNwST};UߩNw?G~9rvU+_8*Y?kgoj-۽e/gEom-;Ga8,~Y6mը^ը^ը^ը^ը^ը^ը^ը^ը^ը^XD5p$2~`X`؊ߑoG+~G"pKdD`)fc%:5c6v'ί\?qZ?qL1 ,)t;N)t;N'#β'["' a8*ְ lb `[ٸ˿_Uz\ǃXw_9 ߁;p'x=9tF|GCgKp-_gx:\||9^E |%^K|mF|nK |{V| wN|w{8URCc8j`[N$N4,<ހCw9CƏQ~oO'Si ~?/?Ke ~5?;|/>-O |>ʳxÁqS |SqI_/O:k~|1p]['oY븾|W7G9u;|_x%ˏYc|xE?8_,W V+8+_x^z|k.2Ǘ{fL ++W>'o~7θ>x?s-ǫ6/%~x0 {8- =? 'SہO ?<_ӏ7ϴ,|6|Kqu󬟊#!O_/ ׼?~rb\?14]c{suő33!|ؙq>댟Y3'ϬuaG{Y.zVt~n?cX:Oxx?n?\n}gց'xt(Z:0:s?gYFgYFgY^1:szu3ϬwuO?ϬG폟YKϬ;?OU:gցwϬcnރ#y??RT<(8pY9G? Eb\ރb̽!uC.]~g3;yΠ׫O|ݩwg+g܋ߌv|tG]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ]Yڕ7>O=9>>iYl<>qt?>ʩ8m_//Ӽ+?Ca=x5A|G;|_?pUΉ<ē'c<ē'Ox q% >+чqx|nC80|PHwȟ`tṕFFC]a%+3+CWqWPՊFOGV~MC{Y;/7003YɁSo]ш /7404*+Wuor+_ <+rS0K!'ul`[Nd՚!|;|3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3 :3#x~`x?003̱G_ֱMla;]G"}S0'iO:5w &b9XX:6-lc'XX=XXرS0Ku~kX6m ;=oHd`X`    ?  ?_9? a8_!?ul`[Nd>c[>'֙:sXga93u֙:sXga93u֙:sXga93u֙:sXga93u֙:sXga93u֙:sXga93uљ#:sDg93Gtљ#:sDg93Gtљ#:sDg93Gtљ#:sDg93Gtљ#:sDg93Gtљ#:sDg93Guՙ:sTgQ93Guՙ:sTgQ93Guՙ:sTgQ93Guՙ:sTgQ93Guՙ:sTgQ93Guՙ:sTgQYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙEYԙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%Yҙ%93tәc:sLg193tәc:sLg193tәc:sLg193tәc:sLg193tәc:sLg193tәc:sLg ۿx0#/z0_=xG=ۣgGW\9998s=zG=ףy<_ ~A+wߊ w+20t?C39_u~A|Fߊ |,2]@T'Vd \ǫx 7p^7efL Bݬqq`JK|#^_&Z[ߊo÷V܆|/rl1l`[I[+2A}+2p?; މ»{^7>?.Q\ĥ[c7ouKx̙?EߊL$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" HD%,`K$X" vy^^y5/?L_O ux+CawyaǏ:s/_ٸsKe_ůG\ĥ0k<^u^|U*| wN|W / |hmC/2<ٱ9V0W/Z{Іˇηrs/Yy^UV.Wkkco6gn뭼!vu2+ |}Cc86mNN ~~?5{0~oďx~?Og9<~_/W'?txs6H)Ԑ~AOp3VƓg6o>7kks6H󬜊#֟"|1i9~$p$n |ć7>j GqR1m?qq6H@;9~$px  xim7X垵ӨE6mq6H7N+O/m {4m |· x0oލ{^7o~'\mjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve]YjWڕve$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&2 ILe,`$X&r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\,`%X.r K\`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+$X! VHB`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J VJR`+%X)J 6q+pMphŹ3%9Sp xUs;p'^w878qnp4\GrFF/ό8poo8p|4h7E_ k4ZWMV>OO 5':~o[V܇_ èIhŹeWs9o_ |#^:|3[mv܊p;߃as%\[sGq"o V9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9Uίr~_*W9K:܄ x&UMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMPUMP5݌WU1l`[I8wUsW5wUsW5wUsW5wUsW5wUsW5wUsW5w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5sW3w5R3/5R3/5R3/5R3/5R3/5R3/5R3/5R3/5R3/5R3/5R3/5R3/5ίq~k_85k_:u_:nm q.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.n.QߣGuR7)uR7)uR7)uR7)uR7)uR7)uR7)uR7)uR7)uR7)uR7)uR7)u)n^n^n^n^n^n^n^Wr(U~Z௭<c_[x_/[*~=r".7 o_«w.܍;]Cg+_exV}9p]M`ov7t^"ǯWzW9_ =ڈebb?18ބO,~?_/je(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQvce(;F1ʎQv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSv8e);NqʎSaҰ{iؽ4^v/ KaҰ{iؽ4^v) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiإ4Rv) ]J.aҰKiؓ4I$ {=IÞaOҰ'iؓ4I$ {=IÞaOҰ'iؓ4I$ {=IÞaOҰ'i؍4Fv# Hna7Ұi؇4C! }H&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Mor~&79Moq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[8-oq~[e/Ӗ)mSrNi˝Җ;-wJ[)m j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j69mos~ۜ69mos~ۜ69mos~ۜ69mos~ۜ69mos~;w8p~;wqngDtLDDt*_u8NGttLGttLGgٻ9F1NJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJǤtLJߚ5k:t阣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣9꘣91M1M1ML2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2ʄ*L2$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRv$e');IINRve(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvSe(;E)NQvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSvӔ4e);MiNSv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CPv3 eg(;CRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);KYRv,eg);K9Qv󰗞};G9ws};G9ws};G9ws};G9ws};G9ws};G9ws};G9ws};G9ws};G9ws};G9w󔝧O}S}Tߧ>O}S}Tߧ>O}S_ :pWOЁ a8*ְ lb MTMTMTMTMTMTMTMTMTMTMU]U]U]U]U]U]U]U]U]U]U# a8*ְ lb kPT?~@PT?~@PT?ߡߡߡߡߡߡѝ}u|2Զn KwS IzBzmFne/mْݖVQʒ --і|̖]"ib[Nl밤n"A=8,>yS3JJJJJJJJJчC!}>DчC!}>DчC!0}>LӇa0}>LӇa0}>Logϔt6[e[kl}#~F5gԈQ#~F5gԈQ#~F5gԈQ#~F5gԈQ#~F5gԈQ#~FGQ(}>JGQ(}>JGQ(}>Fc1}>Fc1}>Fq8}>Nq8}>Nq8}>NCCCCCCCCCCCCCCCCCCCCCO' }>AO' }>AO' $}>IO'I$}>IO'I$}>IOҧS)}>EOѧS)}>EOѧS)}>MOӧi4}>MOӧi4}>MOӧ }>Cg3 }>Cg3 }>CgY,}>KgY,}>KgY,}>Gs9}>Gs9}>Gy<}>Oy<}>Oy<}>O_/ }@_/ }@_/ "}H_/E"}H_/E"}H_/җK%}D_/їK%}D_/їK%}L_/ӗe2}L_/ӗe2}L_/ӗ }B_W+ }B_W+ }B_WU*}J_WU*}J_WU*}F_k5}F_k5}F_u:}N_u:}N_u:}Nߠo7 }Aߠo7 }Aߠo7 &}Iߤo7M&}Iߤo7M&}Iߤoҷ[-}Eߢoѷ[-}Eߢoѷ[-}{ٶ;t6mu>؞mUf][e[klv*UhʽoٟOK1ϧ[e[kl}')}>n;Novz;Novz;NoӟKw}(R=lS=<ճ=lklqn_OڧlzAw;zAw;zAw;Nz'Iw;Nz'Iw;NzEwѻ].zEwѻ].zEwѻnz7Mwӻnz7Mwӻnz7C{=zC{=zC{=^z/K{^z/K{^z/K}>zG}>zG}>z=ݓItS+*{Z[g}Ջ^t]EW/zeW]]vueW]]vueWW\]quWW\]quWW\]uuUWW]]uuUWW]]u5jՐ!WC\ r5ꚫkꚫkꚫ\%W/zK^r\ v5jհaWî] 꺫뮮꺫뮮ꆫnꆫnꆫ]eW/zˮ^v]Wz+^qW\ꦫnꦫnꦫ[nꖫ[nꖫ[n궫ۮn궫ۮnq5jՈW#F\q5jըQWF]u5j՘1Wc\s5jոqW]w5jո W&\Mp5jՄ W&]Mt5jդIWOn`ٟN5t_s\5Wzk^s]uWz^w7\ Wozp7\uu]Ww]uu]Ww]u7]MWoz՛tfvtߞvg~ۛ{G~[pt>ޖ{2ݷ۟Ow};ݟ}$ݟޕ|3ݹ9PtvOs{>+O?w>b?c ڱbW]~nڭ;dhaGFtc~%|zO {՛__g\mtܞ;w|ݕY;bg~7w~!RkN[O=?]^a[ro[H^>}~Ct_DwZɞ/ L[f]޼g# _=~%[ʮe/>y޴m;}t3 ?L{?H/N}Oc/Qu~;j}RvfɧlZY׻~mkUo/ײw߲vϯ/>ߩ~";;;;;;;;;;;;;;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;Jt?eM[N;ӯ>߳z~߾mlmzڇr}m6oVö:[o %}>mϦ;֯ռZޏ|~W|~/|6'ӝ{oy?Rޣs6#t߻m:mݼ'}nwl{!]O}m?}H={oOh죹A!?c?k?;>h>9n&;ξg{_{vg_埳w~#5uO?ߴn+-mya_ۿ/^Cv^w߰/Wm;{Fw석SvY;g]~w/j{n\OgͳSmkl=j=iO{ڞgm=g&l/؋Ŷ6\۞i^g/eZv}޵of{_{)TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPMB5j )TSPM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSHM"5Ej)RSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5j)VSXMb5jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QSDM5%jJԔ)QS$¼GsOùGe-Ź-6.緍Jw"tk3w>m.trJwj?j+v5WZ0u+KwV{~7w|+mcc}vNelm}ٿ9o#5uO?ߴn+-mtu#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG@:u#PG:\G/s5toꦫnꦫ?Q<xy>y􉔒u .!"ؕɒ%g]"F6alcɞ-eIEY}~?u<}L_"DZA!JC-q'S$EX.AFKA1PtjB^Jr<:L Ǣő "7>{D&Q[f֤ xޓbwdsmNd+r:U.rÏ)O ~ߧλ5 g?׳_<@V1S!RH<"AP=ACa8ATHi؁ (o y%[RR8~8@ m^eѫ ʎrU}yXi)OKy+1*]~AP+Ϋ8bUͥz xqrq 6h5¹/\[zP*:>u~n&uեza^or50W5Rh|4V?ZǨ~U3XX88ǫqޫq{>nx9aLDh֓dfbrإ)1)|bS ib:ds~N~a3,,x<9ڇͣy}HQ{_ )S1=__5Ep]vEr=x"|c~xXfN,Ky4.RRP>rS}H1T3I5T=9_fYr+JWѷ Ux24:hKKiVfYckg 5]XKZ:S-?d٠nTQߍ4ls/6m3ʹnc [yVQ~ pL1y~Lqq|W:>t?9 N)NzJ)3~N 3ޑdz>]9^{O=;`_?|%;sɎi'/oj.e_1?ʧkz\S{vOnLοTsomޡ.̻>g WPE823l Bň#A?Ab|XOB|fZ#.#УbGzg%Arb_zB''3 XPBMrF׹f"G蕧8ϧqΛW|yL%AB)=yz D܂sPA0QΊZdX*Xiq>iARxҷzBerE9gp(ǷǷBЧ"V©TBsU^T]Njj_~uE_T_4Eéi.5t_K%k{^ΗA>bfuCk_suikpgoj!.̾^M5QC_ 145UfjPnK֒w̠VDkN F2϶S[Җ >Վ/ഷW :؍|ȋvޑwN; :{E.ttߕxtŧ+| usޣPw<{]^zCO@/7{>P_\8xqIA(,KS"S={);$:;X[)wRh ğ?C<b.~'29T0=4 p#hHG4~sr1>azq1o,cg8qx3@; r'|^OD5$&=I4LkON=; n9fSN?SN5 ipۓO?W$۱vq_>w B3LϾKسEl_fs|?Qw_W^qMk_uNu~7:n ܀ސwCݐtLw9~׳t ~h{_{';,H! -DS!^.Ч0 \zGɍw>QxS|򭨾`_gq3)̒/ɗrJRg)ZKgi>@K9}<WSaEŤJfY*˫ UyQ.T[^E &Լ䬶}"^}VuՅUԃQϜ7:7]v6y5r^7Ʊ&kwv{V1%5^5>a4wlg ZfKZk)}ii-kIGK>^؁6jڸo#M:-߂m ~}k˧V/&yXW,by[~n}lo{kϓ|o/=i`nsͦ#:y; N8t] . م]]pgW t3v=^=̧Q/Z{Lzk/9xЛ8Y}x}}˧UGqxG8<#x<#xi!$cYmN]`N .D:hHq"މfh|"~t~p_zW_cGhhFCz}2Xknhc?Ox~硿k O_aD9qhg&˜cIv5IM= 4Meߧm< iݜt 3N^%뙌G$M^%7 3ΐ 3̐3C ޵/4L\fzfŸILZ/,=flme^x0ll-g6f1[lgts3lg o\˻ϵsi y>?pޅ{|/v۹jwݭvzg>?pڣ8{쁳8{|ҶNU^{W^o}o}oGx?Ļx~O O7ߜ~^~soy97|s>;AzЮ4fA?h;!wH80·q>̃<880q8>>wDj?kϏz~|x_pc8cޫޫW3=|? NwRII4rO=%SrO=)O|ovovwi 4^gYYoffw><9xw9x:yg_0 /z֋fuQϋz^E>A|ì?>Oſ`/|o^6˼l6\6fs\ Wp\+0tp/_U_U_~\U{ͳkkv k4]u5\:7 =ӽ 4ӐNC:&oڛjo-rK[mܦ6鿭;j悔|zֻ]s{{qO$b(8e)r[{gO{R]6>f3lyҖG_9><<}^S UG\4H="_$"yKA9ak4xĩPBWl m! *G!< m!= +l+,0^av^y(QE{(p=J^^D"zѣ"8?EySNQ8ESNQ8E.*b8Sb9/漘΋Q?Ͱ/ g%pVKoJSF ޔMIJS7%bIXҎX)*eJٱR2Rv+e̼(mJ۱v*.,|p{2 nep+[V2 neq+˧ʚGYSeas^y9圗o<;+Ͽ<.pg<+Y WpEgETw2Εse+X*¿*\UQUOUU}GUjps5sjWwX5^jUtt0fQ,ja5wzG1h#Zh߁5}Wħw&̚<)9E-9`ҳOj~OFm׵=al؛WbUΫW_u̥muC_1`Ɵ< j_p_#]u]׺Y=s=3x7 뫭>إ%>-hs+SNviy{u:n@OGyt4wxD[gyt] ]pʋux{>p{' =y{E[/s>}Q{lc_~S8wOwO I3,&S f`y>}?8}7]:$yI'gϒ9l P`wxW?oil8)+-(ҲŊ!AdnRdnwnwٝ쭏]|t)\Ho>H"ｙݻLRu~ݑ1A,y6S(؟ߣ;f&|Fy}4PQfΆ1G>y?`m*%d2؆DilkOQ~.{(olwb{M8]_o![ls?۬9_w~lQ~=r`탿ECv t!KEIs)JJ|~rxضm5)%)y|_I'\f<.Jw'›݄OT*+WMI}!UЎ Ki2'>KK҉g} %)d=9ţ!b1_Qr<%.D0OOOJg{E9."n-Mp Lu+lf҂Sե>-| * ]˙H%RϤSyX*ݔ%`eȥK[a։v8خ^B,/%w]t *W@.<@q*5 @uQH+fZ^U92Vy0~•0θ_7-F %MM"%LZE sU Tޭ[kas(ש+IpN_[S ^ CsTѦM9WsIgZz/҅F)ay!liEh9"3Oȫ`NKy6撗sdD@Ax wH(@%~6M^ ƙO|f6--i%4,КI/vDjϤQPZ88o I}c%"@^L"M*'QAxV r=+*1glkG!.L,S}N+Mu6`YSid zÚt顭',m( R[m6-#9.+1\ u1MGY_IgHa#t'"~Gu;%$nFXwi 9U4PԔwQ S@Mv%c7*7Ma)re'Aq+zZ MR ^Yv"=S ºJ:w}qQK?k,\VV~]Sf}^9e{|oU"u{leN#_)WMbEfSQo$U%_at+5[9?lq0wS9X _'<1mo~NooAgssssssssssssssWB/b/R/rռUUռս55^Wx7[[[[mmmmmmmmmv:qxoM&y^M~o7 zCް7;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;߻лȻػĻԻ̻ܻ»һʻڻƻֻλ޻ѻɻٻŻջͻݻûӻ˻ۻǻ׻ϻ{{{{{{{{{{{ʹ{{{{{{{{{{{{{{{{{{{{{8%!F8'(d$Ef"3YȬd62;I"syȼd>2?Y,H" EȢd18Y,I"KeȲd9O$CdB]ndwٓE&}~dr9D&Capr9E&ǐcqxr9DN&Sitr9E&sy|r\D.&Kerr\E&אkuzrDn&[mvrE&{}~y&Ogs|E&ߐow{D~&_owE&PԣR(TRE:Ltf: Fgs9\tn:G Bta].FK%Rti ].G+JBCј&4it*]Nנk:m&-Ztm:CץtCݘnB71tsݒnEmvt{:@;8:N]t"Di ݑD{dG3t]T+ݍN{ҽt/ݏO҃z(=NGңz,=OO'ғz*=NϠgҳz.=O/ҋz)^NWҫz-^Oo7қz+Nwһz/O҇(}ЙǙ  $}>M"}L_ &}Mߡ!~L? %~M#L'Mas1dlFl6+`sl6/` l([-Ζ`Kl,[-V`+X,b1KX2**lU[du`M Vl4[c ؆l#1ۄm6ccl %ۊmͶa۲l,ہuqll_۟d!Pv;dG1Xv;Nd')Tv;dg9\v;].d%Rv]dW5Zvnd7-Vvdw=^v=d#Q{=dO3Y{^d/+U{do;]{}>d'S}d_7[~d?/Wd?epN9 s>3,|V>s<|^>/ "|Q_/K2|Y_W+ ycgw|=|GyS|!>wS|7;߃{}|???C0~8?ɏGc8~_/K2~9_ɯWk:~=o7[6~;w{>~??G18?ɟOg9<_/W5:ow=>?O39ɿ_o;=?_7;#\ "` !|!!FQb&1E*f9Ĝb.1G+Ăb!XD,*%Ēb)XF,+ˋĊb%QD,L*jbeXU&Vk5E]4DStBb--bHl,6Bl)[mĶb;+vb/&.1QLݢG(vbbY A*1jgx*vbO[#@q8X"Hq8Z#lj Dq8Y"NLq8[#BqX\".JqG\#׉ FqY"nN yT<.{}~xP<$GcqxR<%ψgsyxQ$^WkuxS%w{ί}P|$>OgsR|%߈ow{Q$~_owS%O}3}+?G#QL,l\<|B"bR2r J~ȏO_Wv&kku7gkI~_?____ooooooooow;qxO'~O~?C?????????yyy?OOOOOOOO///////s/woooooooot>svtzN???????????????:G'gW7gt'I.Jr)Gər9M.sʹr9O/p~ ʅr\L..Kʥr\N./W+ʕdE2Ld*3˪3 9Ț3U,Wr ˆlYR%ז:r]\_n 7ɍ&rS#7[-VrkVn'cS]%'I[Nn^ΞWN}_N;9(ENrK-yyH^,/ yJ^-yI,oyK-|H>, |J>-qqvu|I,_ |K-ߑH~,? J~-ΗvI,K-q>Qr)TJjFj5MͮPsj5OͯP jZL-pQKjZN-VP+TE*RJT2*jUZ]TuPMա UjZGS Ԇj#Dm6Scj JmQ۪jAuqjD5IuIɪO)jg5ՐVjW]T{>j__T!Pu:\TG1Xu:^NT')Tu:]Tg9\u:_].T%Ru\]TW5Zu^ݠnT7-Vu]ݡTw=^u_=T#Qz\=TO3Yz^^T/+Uz]To;]z_}>T'S\}T_7[^~T?/W]T?,@*`T0S0s0K0k0[0{0G0g0W0w0O0o0_0@`PpHhXxDdTtLl\|BbRP ԂUUՂՃ55zAGPeVv0:X'X7X/X? 0(8$4,lllllllll v:q`BL &AOcSL`Js0 CpK055-=#3+;'7/?8 808(888$848,8<8"828*8:8&868.8>8!818)898%858-8=8#838+8;8'878/8? 0(8$4,<"2*:&6.>!1)9%5-=#3+;'7/?x x0x(x8x$x4x,xx!x1x)x9xE TZDR_NhC19GIt3~ *wJ"EO08-09$t,&N?R]d*.tD)ka?s]h\T5JUT5JUT5JU_W5FjZm5]{O۵+# +(G4ioBx۞֜ .B7囘OtՐ~뢪VWXWC]D4ZID.2]hD'=zC=ۡ0H3٨A#)HFҳf)HzC=a5zC=a乙8zj'wlMIn+ kkM7_:'OlUKf]C|&tz[xM{&M$u{5;kզc0dt3lBWP2Ӛw{+igCݨW={MMo۵BQ~6 rSdsX #Su8"[ic&Z9kkg<$ 6Uf9`hJ 6>'hbN:ڍnzQUЏ 26 L xBްk3p 6;N=^xu:7@6R@5@hl׋ `خ%aўި%5t !3*歊~W{VgU`|CFЅQbo`ݛvu&淽a{}Z`kdZfZfz#dz#dZfU]vOeaeaea5R9@G9H1)  (Sqk( t2@' <̶nq`D0"jYPr?Gs?tsA<ADUе=AEADT]Ȥ2)^W"Ȩ2* BVEUX@+.\@,daoFmd[1>~aF}Q ;*&)`Vku`B A/B A/B A/Bk˚,A?#Џ@?#Џ@?t#Ѝ@7t#ЍA7tcЍA7tcЍA7ƸcЏA?cЏA?O@7tCguh'ESLN Km;_eh7x39堗c~rQ?G9گ{ SCя:W:WZؤS{,@X%*5@si2,jJ'Ig8J[9^IOr@} $6N`% zM= I&D#'XvIJ)tҶk0u& C'@R!z=Oj,uđ:N:" c_$M+/ib&歉ykb} /.J$`Τļŀ)`XlvA4D^9-'vnxޞNguT ]G9^Xeе0i@9϶B9o`ۊlTxmZߛuX|/l:0 ƈvT`T* v*=`wT`UꚊpnl87:j-]\10h`Ws8-bW32sO{욣~#{bec5 ~Pq6ͽ@N0MTh-MsSVMXj X )V6K25efJm a>¾E--ozi g3 G!3J 3J 3J 3Bf8 q2(dQȌMG!3Bfd~fd~f8 q2(d"όG!3Bf8 qMsûqMsrf5nNͮʍk47in\ܘE1rrc,ʍY(7fQn̢ܘE1rc, _冯rWUn*7| _冯rWUn*7| _冯rWUn*7| _冯rWUn*7| _冯rWUn*7|D8H 0{MˌֻߐQQp>n7!ʮl|H d,I2&ɦ˞$.tH>ͼO;ImI+NN;i4]t&NN;)o3ӵv %#w?MT+ш1Wj <fff"6FvJlORMh&uںfmi߶FOӬ+Yei>4#V4w[_ED?֗YE9 ##ghyoyݼVI`uL9=9Vc0aضqmcdze 6iSbd-+ڔ0ԦS"}DDY@@ZEYA ie0ǿ%KU8{A m ,A,r{o#DVN8&T )kߑ R.DJdn<3zѭ_Rf#FnϡqtYF$vH *TZRJ Zxo4Ko::ݷ,p˰ZsʔN O8 ?#@S[t+Bͪ0x ӂax*o`( f`$6ׂR ޮ !V}C#7nɽC=Jta]ҵ=+"u&qoT1ܔAF#;0= x};ھ$+V&,mFl89ml~Y:b\=&o^MfX2 TEjci75g#{ Y DT DR DP7ޓ(:vHme A|lwi1`1mˌ/V2:iH 0"#DP3)sEn1o9zy0E{>}reXkwj4{0#TEɷ2[ͰH1f:MjOKkCa )e .EL,\ Է)Fom.ŷ55Z":m9m7hr !,;X g@`EG`a' d",,l~}mc1, 0RTtZkFH[}Rg0ǞK=ViAkau ظM FwZ]̻ڛ ^F-A}ar$ 8+/;%L&q _ްM7JX%Vl 뵄>,qè as{U\*%*CR\Yxr .(q>os%nZecawq mD xH[[[{q%̰fYY{8%N-J%JYwnYC={Y<ߴCelcm }bR M_¸*!IJO%,ᘲÎBa!C^{ye(0)mo :.mIP6'.0ڃ)ŴE50l6 x $6Ua}5ē $6uߴc_!zL Jy6c59Fy64omP6VN>81lTa橁x8Y:C@aϦ!ʣލL .YS\R,python3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-bold.woff2000066400000000000000000005511201451074743100243060ustar00rootroot00000000000000wOF2P +~f`$f  D>6$< @ o 9[_zwjz2%$d':R9!*z]Ep{ *j6n=2dvdA:nei_ ;$u)m8Nβkx[/*D@M'zDEHd YryE|]Fm,]s6p(5 A*cUA kj}cuyo6Eł45r iu̒dg!W+$#+:"Dg~uM)or: jxC7Y{)M hM3qTd 2HHX`*)́ AwZ[rv&Br֔fIY<¶-_uvEZ=N$A1Uځ2dvDZNybѩp$ !$̒P0'`(cƠ%@Ba.l9ؽ$`1IU vYbjP jV\kOW( tIL{FZ8Upld (mxhg(g-6L}= wB]gaQK#H":L"WCbqҷ$a@FIeQ-Y&85R*Y4] lM5)Љ$HQ0uY3BGQJcPqlhc*c*!]a'%'-ɡnG;މS+@PZ:j*(5ᨃ'ta>^iJ?⍪lNe:L9r)홣HcvֳEB!V7rrnRZz9= r] s 2E$| \ѱ4-T>|iCx]ҞT!^%N#qTM ktEpߋ78,j(0A.!'SoZa2mwAB$d9~Y._/یU$HHt(^Zȯ,p-"g3eX-ƈGdh]kk\oeC&qح K*cnd [1rݷ0;vyjaoeGA6 GՃZ`;u&OD5J]mF,BLֵR._=-6j^r?sQYrdߡ^)/VZ!f'#98K(sj W9ރyɚJ4ya1+ :d e.tߜҾR+*68:_u#|*X0r•fEfdwVZCmmNVy/%:^w7q6M /+sWvϸE#PV:1^׭o{;@m^Fao}7fzVrc)1|<)xEuqr?﹍خ;o Yt:ˁ~wwayFKy oo Eun{&=`HបfŹ|+*b1,}}^Eq-y7yH(ESnQ Cyy݃"P81l.>V-Xvaa]6k:&VDd>'y7L H2b4P+ mlM=)` ne<#ktyGt;?tLv #W-.EhC,9h>b1nB?aYzB9);?hL(TĂr ?C%$lڏ[.\p,ҙ  vo 46 */@ `#"Uε>lh*J[(تۣ]p]]_Ȉ+QhݓrԄ#$U+}: k &jy[Q_G+jHuM;~(:?? tu8F4 &i^>/7L37)Lrx׆D(2tA+]k*i*Dԍm ?^l Ed6q-[EA6ӁZ̡aٴO}v.I.XJMOE(5$;)TbA)倰p@@+F.H@D00Db$FkEc."zpZP"_Nj2z'jg|j!^ճ^Y!p[VjqXD5Pkd,W̴6mZVV}}{X߂pp),58n41#vqalBBk{AsV:)L&s`;rW+ IGi,>W:WL)Jf0fT?/B{^g!!)pdmJI 'l Yfٲض$6[BW҅s_vssY*5Qq}J*13p"v7ih'0OĞ1g&ﺽTO?{O˕b$.%Oz, οB]H?%Wy[]5AROeEF`OGŬ40C0n^E3+FHD QPQ0 ^}}+mrֲΑfM=^0XXRWt@!JUa NJRnpEQE4ClXJ<8DNN8iJ$"*7TnQ`&-ebI $d(NW10K#z}P&Ԅ$P5p36k5 M|nT5/ 3qUYR,_ :ZL?^.s+_DSvYC D7d.. , 1bzWŭ&FQ#["-T(F`fRjrJ!;в0?PEQ?EFFh4(?j.%9{-X\.E?]@Vk)p[YYᗅP L?/H4`?',D*%AMvS?mo+_~a s)⬝QƂ0pXk\/Dd5^hxRE ]&q0Z Zc`1.vREh4F((:((( .FA(KpQnJ}g?-"w_\b\JT;jYoNNe_`T!@(*NAƁ~n&kچx\{X(h%*4x'͕ R 6+Q` M'tk6t"] m!H%˶e2N}🨵Ԟ?5 oEꅤY-Wup> $HyO,P% ^:Ϛm0޲ZI;CD^ZmIrK.!U_3HŒtOE[h\̰X$0IDӰo޼ƏJD3HT~?'G9d, ,"x:*g숗;$PH3!4aX‰( t&:&0>_-~KH씈L&leKe %v&>˻H _'=h\Fse'uIA+l.?1? |`}h0i2uCRDXS'F^P{ >J <Fwdx fRnhSqikp%i?<ӳjJ$׋)zliݽ F7 =x~?Z{~x#/XFŁG%>wOeDz^$TJZjbU:uYw$p%ne]$&C7NJt=u}6H  Z2 F!Z3~n8eXb$`x1v h63 W "}#^ADžeH%fþ׼D;`ik~簆 2Շbim1~/_.!GDk523EQMDZ8f>? 22]q `wShEQEQ~(nae?X*ɠ;0ˑn_lrHs2GX(W)O(r&HM,g r)P.TDeEÁQ=PZSUsF(ƅl"ίWzJ!(8'O$|4+]5%0%e@"؊oO: -t#$W8T7:/ƂЀ}$;Ugsccw8{W; 6 -@ZUJ?Nuˌ*_iA?]T&hWxw? W >K @U{/t?ؠTzf'U]=ػw!fqa{恌KQi˘,k$L)жzZig26 twګ +Ԙ0Ev*=ww*THTh RʶWZaK`tR#ԟ`2K 44ٜH‘Qik,Z Pnuƚ tE& @ CPII$EiHiLP$1:5YJc֛hM.. o .5dS{򝠧.*3A. z,65mчg]HDDAdXC(ԝU[IM(|ݑr!~;"K;u'xܘfB!e\C[7b. Hb+UAizGCk~Z0-"" E ۪N^D$quK$xRam(̅ k3d0!F3νXL! 2HY,-,R-˴`v5 8]՞_l3~R !'E>V-HU<](\SPX[޽g3̜Y5~&]t=NrfN{}jjoypu ]o{pQ(ۻS0y n}`|X]1Ypq)V3-Zv 츶qt7CQ~;DE"6L.3Qe&/rWN@66AϪ&+ˁl?!}8̵]?Ӽ`? „2.:C@v@9F!zLrDIN)^^ rlҹsyz04S]oIsխVX']L&*&HHJI2W[pӦ[w[СG=Oyi~6j}mq[ؾj翝cs9/\Zb N}x92M?>&{H}ISr1~Z/І?~^+ ?5NVo0"(V_DIVzS WKw}BD%I"eOXG@BkQ,S;ܕZܳ2*@ ltn0QLr"qy-i fRIpE-b&Zpܑ3_]+A]=o,X*w.71hQ\& %tlB8&b$(E*4H_< b~ώ~|x&w1%u|ڔ4@ yV\A*kH1q}JJf 4ΐ3 St&ҵEQVI]YCE1/LJS5zM|TWC'EwWlyEq ( .wVCP.ZN̤pAiܺ)?ԩ9LGe$R, ([*&@qwbNY`(yhHRRm/BfXf#},ǩ(u=?8I(i!„2.R6$ ]ЄiKvserUJZS-X^ݩb8ARty~}h}o\<ջaDJ|%a<VVnUGۏ޷!Ys1Nut&|<˦i/ڡժ=@Yvh\;/BE:.Io 컫͟.H"&6&$2B0boJq`pa}DU Ӳ;`R$E3, d4-V]VTM QZ(Ipi^$HPTAjA1\CQь`4/-Vk] C0xk.Kb#S㜥TNV΀LRmg@rj@FP 'HaQrC !PD1X@$)Td9q=@(KrEJJqus> I (Mffw8]j7=EPr!6X,y|**(u8($L8˜p#(r`,-Zac7X߯Oke2{q+:D&2Vy{'O B8Uu5OE'G5]->$ߛ8CpF< )dڑK`P?4rI$YEFtҳfW HCd23Xe_2վr%"*ԴHr)L\ԓ^{%dȺPF*nx|6 qf֕nBO;pُ7@U޸DQF\N,+Tl i'Zu) 转^ZwV޲>XG { gl~"k#!xQ} yq?EMZܔ{Zt{K]T~_#1g#jAgYjzĘC WfAtfz9!?ĊY1KexG+ Jd%zO66P^=z9P 8^VMU\]7y} gG.=CQz$ҧ}x͗:5N\Uʉ((˜`ܽy', b8ARtxyjg}慵^Z`~ۋZ=v'6ԏa6 ֜J,u0"ss*v9Lo~}Էfk]m/z߆UՖtFB-HaQ[kgx餡$$NVwޣm@"+v$H9e`IL[)'SNoMqNo0̀B0b8AR4rgɹ%R!A1fXDIVTM7Lv\oxJFAR?cbe6lvYQ5E ZT94.n[{A^ܕ󿟒P8#$P9鼘6mxedKp~r J*/:--J qdR7ދrD||HwK\=}C#cS3^oa14F?%oI J3,6\q 3Ēz$W tJI+p =< `phxA&j;.YQ5M豀 /„2 aĒR **ڻNf+j=ȥf;JH!}ﷄogA34$@{"RQV"-^ /BB5[xFQ]#ޝa{إ gF9)bɃbw&|ϚZdy/3!B/1ou; [[e[E%JGv@g'mِg"7ݬӕO4?t-S3݃Ko<{zrF̲i N14fq @VFiDاAv~;n솯#>qTH1,.P'pw7݃ru-lpE O^ؠi^fEuaCfR4eFӈ6&ŝ9! dBVijƈ'`Z$<\ӧ=)FTt5̋RY]F+\Mttk]d1d!Q~sGG[bO-5}t|v:> Us'}|}X1ԑst#g:ə-iϸߘSק殇-|j 'ydf^|?.ճݞћqZ'Q1j95yz;Uj(O%voh-Y`/M0;*gndxE3&Pv1Nvi﫾LOBwqA3Ò" ˸ s؁[com!(b"f,3- 6b+ld_42S7K!LבJ=iU+䇊O褖\ o ҩ[DVlYʢ%;|rs>>Uq0YZ~4']ˠA]:`NJ2y LUj4Z0A1 )a[@VTŖ*Q\EUQmZ&8tflw)LeזlN۳6ƘYqٹS~{_^桱c eTXk:V6`M+O/ǰqor ?Ӹ>9"G%~퍷.} /+``v:EPP1 +.}6E^{FE{VNћA#HfV6vQqu;7[ @R"m ђ̻a2YXyXJCO?YW\+3mG9.wtLPQVuB e\H5M&$:I`Y7eefdDAMaEՔSAH_jqCeԘM>ᤫYΌhb9^0[6cSʖU1Ihe9^ ̂#+is21a;x gbc|Gu;4brץqd&%Q2?csS$eOiO-xԻ͘'Z:MCN16 o`3D-7-FX=Ey N4/ޏ(JQ4Il!;^| ֥ZKLY:訓κ誛z0g-000+M'MNSN oS[w))iRR5oOX^m]AG&fBs_g6@k #(䛨qvm$qcGTV[ M '<Nx_397=̲@vر Č* Ac[0%](Ӎ̕+fGX"7`k޲ڢv[n3Eð/K°D'w;d~TVhh[_zB0b8AR4r .=pdEtwRL<@Rpt4cwnm!%u[3XeYL7+ϭH(ro3!PxjA0c24CP(ZJK1ڥib 9H}@OTAVrHwJ*K},pe\Hu>ĔK= "L(B*mlpnv@ޮ p\h7౾GKmשvk^6ђ| aBndjYL=\+j 8/߯&{ABOV/PG>h,OZ̥@1QKR?J4#SfژO\ u%^pt*Wʯ!5~Y/uz:<} ]Mm[| B%UmqEl')A,8_`:0IWEnlCe]Y` 7XϬ1E^z#aBA*b%>QSRʢ9`w6 ,FxFpݽqfxta_J%Ӄ5Hz0A'&D8=ME G!¸AXa26f+IYfXp#c""SUJk/`  #($E3, $+v^G6{X\#BI`Lq07>)Zv+CU]Ym HBVTM7jz>&Q.xAdE@#tôlloq.Yu9uLT[2K2\RD%GvlcObS1j'3dhnokgf6^ kxQj"^D\)j,݇|&=W~PlQr~tK<Ȋb~.׹%^u76pQ$"^R(Uj$ !A1 )a9>QQr硴 @FP 'HfXDIVT-1lv%3g! $+ „fDIVT @ eaZA}Y]=)!.J8װ\'V8=&z0COםX2ֽ<[L{غ=g)aVgwu_YCgJ@e2[V]ME!AC^y7|tX.^w"^%Yo0rr{f%YQ50-&^I<ֆ)ՄTT uTj] @qF<)AfՎyv>z^7^7wq"Q\Dsi<!Hv(PYh4`LeZkO&䓀B$ ]1(){NCψL=X&XX0D J#Y^"Hf8^h2[6!A1 )a9>(ɊtǟXVQʙĈ:kݵjᮞKYG JjaZ"LhZ;^%YQ5&iَk%]Z1["'pE@qLХ= |)k^=RLeFp>'h{;Y-t%DnI$[ZW;@<ٰTZ Oy׽P0E{8xA|G!HJTi`ph 􊒬Ngivi^%YQ50-&o"(Ɋ0L7LvU 2bTwCP qn᪁9. ^LNR%fC(-8NEs|j*,Ch\FE_:Zہ^#`=bdȦITl nf̶bVATVIlD ER,/^[# )R@j +`7J:]zo_NͰ/43ZxDnO#=0̬Uwe~JVE7L/ɲ WQtݦ=!bF!„2.:bʥ6zSOQ%(U^kIuf0O6\Z9 V%9?WKit9TZ˕RIHؚ).ZN]Ǐ 3>ʌKۆv_y>>dNͰ/gjj1DTT_ѥ*U+Bj!nZA;^%YQ5&iَ{q7-E!x*)s2y/V@Nd咚L F1ƷIte"c$I1'fTIPr74(U&p|_pX &`cş FV(/2TۧF+ͳ|blʹz*yؽ{=Faaޯ!A1 )a9^%YQk420חX{@ȗqyFD\5ɤ-3jg+遰ՃR4kP$IJٝ1T$I$I$IA/j/+e 5fݤխL:xFoT AðomM;C̪+}H2&{7r񘜅VX.8/-8 ) d/ǟ"xN(soiO`4(j;H H+!9ΠzIY51 DG:?na]p׏A$uHif y&4j4=,/7fW/ „20-qa+^󏇸^ L` xnhʈI[DdHs*t|+ E AWI))0U:i> uC*bͻt'09ekכ"`3;5{#EO/΅ +YS>Ԃz810A6:J% xWj3ڳJM ^яfAƀWy'}jH5yo̡Bz:Pڶ-&pK5.4ߔB;GbgDS5`k\x\D^@fV׆.3wiONn:&rbYV1*4%(hi]P- *@zJE ^"K&6A&cl\*:Mxh:x}0l:aOKxYOUoNiS>Z fXJ, cv5#AEo4; xH&ĮxחB~yy <h|ZG3*:kκ~a_aݶu8e[4w;OU̷eY P9eͣovOWKU_+n絀r( 4AuS4銣j2p-UAC nDh;@n3ȸ&-վq9^;1\5 do ]5QO(pڷXeDH4fL*bT9Sa="ErE-A+AWczpēgcggfυ}q~`fVOmnwQg8 ?͊¬5`{^6jpەёiH.4ˤm  ÁY!m| &{k'<>nxCbȲD(DhBQ|y~^˫&U$Hi,dB1-#tyl& do 0 oĸeנ0FL+Ê9=M. "inn;NMNpԾXǡ"@J^A -Lؾʨ SEeTOLĶ7Jn4yu5yz;Fny@߫5t1Ģ]%8JVI\2(34Ō>F޹YjRC4*DiW\ccПkfƑmd{Fu(˒%4Ω*mKy[maFґ@+Ho {x%͢hӡNOHu~7^iN+])$*.* "V;L Q {|C߽ yOIyFiԋ1G0ai8hDɌCeU V؎CNShY96i@4QED3Uj9E+J7BXb ~oUAGwz:cD,f2MS {գ)9ĥ yFϢ>ka0)ywH*dF/ӃY7n^#˰#f&ĴrSpJO բ Slٻm.Ϗ;څLp4araSN !| .i|xxzы4 LZ' KiC›“{S'|+s4hQS  2N~WG 3gs1W%JL ʈYpgNcȶV]%K6X8/ uN\ R-R"t5IT1^!q`(R(<W%Iܿy't--'iQ vi8ڈm?~T 3"Aa6s[y['@zI-B& VóZՓQnwHq~H̶:12WnZ]T}% 0@7b7냔M<|VHնq(y<69v%j߅p }<ˏ3!|NQ>DP\I%6߁w FP KR·n/yk=Oz^`cJY) QU Ӳkϧݞ~;B1g9^dEM "a9^%YY޻5tôڲ/LZffX vZܗeoz?(mYrQT(UPϢ$a "%Y @\2nx4>B$,\y40-jkg*7:Gn%N_nƭ;m=Aa~p ^%Fa&Ej;B4|1'Ǘ'=4t`Pڮp/J4}W82#(_rr,{2>_nD:rzgu= x˸zŽ= v<|xmB-6kZjn!!+e"V> sLWW{{[[{|N.?9Kdf` a޽B$I2{ BOO;=\f6UPY(t뻟jplwc̄#đAFTB xDVSE FiJ?OzZyΟS>Dnk`>ȸ'"izN;1!S_q$5jL*}f <#&> 4ӟ[nM[ew VO4uq{ qAb#GmvEDq(bdMu9QH||pvlVet]caկ<]lhyKïh`ݖwm<=+"cjkJ̒y'16rOꕱ_R1|:GxDM\$'pЬ{T/s9 >+Ot4ɑg)X}󓃿;d'dđ-ySxLLZg1-Jjc֮#XXm:ؕri "D*+*F B0b8AR4342p&0),E LE2?8.tmCtOZ=~vhJfg_1\3b?]JG `9j~KokzxbTȬDg a}QT$&ɏW#EFRBAE 03Y!ZV1mQ1M;.@{Q劊hs?NƋʚӲX'CEl#Bnvq2(22b?{ "dI$y:&#MXq2m+V_U}jǩX/)'5lm?B ($E3,?3>TZ^f _԰wZ }?Ǖv+b3ArAO$)TzZ20]~U 4*7O{| VBG$ە\n7|ᾏ0~~2<ϛM)B0b8/4r$+e;y-iDC9΢lF9Ҹ~c42˭ҪhXcug"3jK}oP㬇(=|#"`pd8^2-V钻U4?` *,N"eJڰ3X"P* rF #(kĦ(d47M, ffwԵ\@a"HдUGxiq 3 p ^>_={MoX7042615$@apҋ i= H"S4:iiemckgjáOX.;syy>6z2X }1zh Fv|R)yS,T{f'jxܐb\H;vw;BX"JZ!A1 )a==3Ͻ++NY]BvJx BԌhh2 mOZ!$e Y ˲W/anVhDFfꖻPLtc 祸xٌ>;T?R) <|HKd1,C={z1 e| $ )c|=ʾ+<5gCesxf52ަWS"#A*ì<4'" dDHB@FPlM͒py$EC@(KLL0UBom'%$-o|+4r JjaZm}?./$lR?}*z@Ͱ/#骟l@^I(>$E3, d4-VtɊn7걥~ e5Zt47WVNͰ/T q'1$S)8~ RS kOGuT7KTCM%b&+s|0UD*oU2g.[*қ}٢hU ^-+@[ٻTD)wWn ,FF#gZHs"{۫֬#c1eu~5FgV1cČ+6D@ *ޥ@6f)q?:=FoU617iIq/G_rIgw|!qxV:9&N?z`phS QU j;=<.rS.7r J3nBaZ"L7Z{ +i&$E3, d4-VtɊn7_뱀 T2E˫d2~g)X#b

APYԚj2i0g/XVl͓ " pmuW{O  >oq_2R9[@%kW _-?2Q(ɒY3f֖#>_5Ϡ]&VH ֖X`-O-sId}q/GӮCXm7D[c6t %H*#cȵ~K~_cu,Evx,_]nn.uC,Q&϶ppbU HMƭBCx|!_UM-޳EZ &A$)T` E%P54! cV)`p%, $+e;GK9 j $+ f,"zGO?NݦO%lƽS.r*-~dpC[(&j;fFX ,C8#&;ާ6DZ2QM Zi=Ǐ:υ~w=}C#cS3 u0 #^-PhLus"B"S4:iiemckgjءO 7~!"qE%VZv?< MͰ/dXmv%+=fH6tL0 ߶t(d''BT 2lK%HJG3zfxq'1/hf4Sod<~m|q&Ӣ^!&j +%YQ.w= !A1 )a9^%YQsqV38=<.t8]nO9<^%YQ50-&tU1DQUaBnj{ +mvǩr;|n[J`CTT%Y|8STR^*<&$<)wnPʆ͟U ,ep &_pQQV.<+TT@Yz}si9(UjM:t4a)I ($EcO;mP+ٽjO8??Y Ԇ0_YF)U|korhR5_?[>gY#<JXҀ)|T/GC3jѨl椑"LB(Bf=GLi)c1cn TsV<3>"ebT`  &k]xr+[~wQOŝyhzUiO{6W誔UU/ƳgbkXsgJd}{ND NHoT49 ۋ˂ qxzf;\ʽVUw`GGfG*{E9&ln B/ n. N6/=<ŎJTeOi,¢ZJ|pMѶ` |k'`iP3EDH%ZegꭠJT X?}DmE[i {yzp D2Q#/xB asTsu,TIDIp3&+HDQEQbQredYed:JD8 Ix | _u]|><<<B 1c f$I$I$ >ё@BR !PJ)%\` $9kyOodHDi- 7Z:zaDhm牓?x\f4q͇=Oh9\p߹S Q; ܥ?5 y>s=_nWvĮTeLnڲXo) Ǐ+DmdgB#O=Pݷ*[:m->Wg|Ӥ^)+I6B~'U]?-o* Uj>y1ֱW ~=F9k `phxA&j;]j;?dܧKEU@UX_( šD+m}C&| *Hkg8֐PFE IWP˙B  QU j;=<.?KNODWxz 2 ;@FP 'HfXO$J:]5o~/{QUaBnd7UvEypow^߷#P8 ~A*q)Y>lUߞ=e=u9Y'mɉ;B 7C+AFD ."~f!StҔK1t޶}uNkz]1L 'b0 +m־w*U_ԣ;41n<0yX @biִ!OT:Svƪv.gxIH|`vr[{\K}p5̧ $No0̀B0b8AR4rgK Z/ܨ66[6{=!„2M;s#`tRjRgzr/?:sr ~C]DrexAj`&„2mTČ`l=(AXe&0e1c*]2_?.pQk  #($E3,{+p?TKkD҆#b ˙%D9 ffGDE0MQ ixAdEtô:]~Jzkoy3 4sA\'G8^. S@0e[#0"Kb4aH԰&Ycr T5*!H'mTܬ.6kzE^#)By Cuec>,MJ% @ y2z *D_CrlKEem&Ԣ:_u(}:vhA#Yh)4ocv}Z_tii,gEP au8&=j>R1K/e EwtFp{aCMb?¹MmW޻İ+,%+fz^݉#!(aTj93J o8'3  9w2PYAp<9zѡy?Գ XR)I;OEtLg^ج[s؆(Ym22jv Ϧ5qדo +$~w:h2vI ^L- $gD5\C eB0b8I (MffU༾t & a`N4r&A&C2wPJ%*I P$I$I$I$`y2` N8RIjR0 )dRY|v\sjcINHmv #Ѷ%նAXHE$YDP 'HfXDIVT'9NͰWw);oPЄ"D&WR֤5ƞVlaq A1 ) bxp^)Ǻw;=,WҒ a=n}C$@ eqo6y68*k`6Q:~ n @yApdXmDP@FP ')a9^%l첢jz7 e"Qڀ%RT(UFP $E3zr`\.42,")W!Ojb;v@R(ݶm{Pm۶m۶m۶۶m,PvȰaT(UP>Ih&Әxk'Nv/`͆}9vߪx>bb> >?|],`%D!Rt0w4@A XNd Qn&8'PTꭱe;|v Fllij hZo&TmI{3j0>ۿ? ^ZRJ)_' !A1hxA&jˊ\@(-SLEf:f?9,|$PhTI*^ٻ|2w{ ^^S J}onaًIfl$IȌd'usMg'r%cnX:5z'U{\h++m%>aa,I;P oelꆮ;0-$E3, d4-V]VTMϳ*dϾNԱm}Zz_ZKmV!$ I$I$I$ $Iznw@4 I$I(vY P~ )Ih&SxaW8Q/2+68nWC?(jZhjx0]~.&SL+8P&j3Y6pK%hkh$Q_/E{9n 808K X0%o۶m۶m3Vm4DD\,r퇫T `fxlJ[@j YR@vqJ 0IU[\UY=N=l9qb z7*<8uι,lw @?PiHQDSm3XY;,E@ YCINGJ\:G߀䥱IFh#\ R0*6qr{`]&N6߾P}"L(F?a*VS,}/dqstMژękMmvW_DžI3g$n;;w|տH/l`,d0krue[L4_8-i-Tׅae{Tξ&/Ӛ `pQ2.+声-k(?RUU/Ɲ# $I4 }؋otc1dz11բfؾtH"h]’5#9aXQsx{sz6Mɦ1$`h?ʐO#]ICt|tP"q8S$1o)No9K`G3-j9&3X~P>?͏QMi!ݢXoN턔15ml~W6Ϊsjڸ6.%G#I~$9?IdSRŶ|߷l2!NˑI4`3Qpw"rH$Q@ P$ `(R*##SSQ'Yݚ5Q5h ۓ:`KunQRH؀ytL &*KV!S<}xR`R㱞w X =_?[kuzd =o0tGaBt:]W@uX$f[d6DaRL$J @I3, ^2' !H"N2Las4^>~A0S5Z1_6`pDIVT a0 $ "L &͉BX"+RjԚka3z,`CNj0B*mo}_>cK:f3b]F^}Տ7?Q3>> .!oqfkjh0qNKH (8|pl'BX"JZ!A1 )a laE,*Ƃ 3%"5Clfrn ,p2l;<1BpPGwURM ]m*v(+FaMhOh 1ľDP5Ԑ%nO6*NH7o%$n#s4-e^K>yF(pNͰ$!x$2B0b;Lۿ #( |#nZx`DdT4d:ʒM&'yiGm $Et(MffU(z}=n HfXwŪ0(a wQX>`phxA&j;.YQ5A "L(sJv:$Ֆ%gBR!($Lq1o"XY2>o:$:玝Pe+VY!;r! +8\_ %R\T5Z rT_ʀQ,1t)4,d~y ,iugU}Z&fVh mz?_E/"B_ V)0X`;p:ѢlOz ooVqxv(4z3|+&Ҧ'1(o5Q "3g00-x"=E~X6\^D^g$fU  {a̐ eb/7R ǵKI3@({Dα{4ڌ`4/-V:o"VʗӒ`Bmbd22615YÂ!@-x%ZHBKp /^ERdQ4:bsvs 3ĒKzy騴KSOp wcsdι- ;\.*@R"P 'HJG3{\#,|$I/ aK;D@+HB š,Z+%)ZQDruImuv0b]dcӏ9Q5V޳n&3[fJF(f@Mn?mBmqR#,0@!r(i^Di|*yBzH<¥s_˦A&Siܜ ֕=QFm@|HDcNmFʯMD~3)'$m HX!DDDօWiwpfW3Бx5-7؝I rm1-VtɊnC {$3кйhQ-ji[>}<߮^Th)c H*.݌*3Z,eݥ3 \q@jڲ^fI/'uMy9-$9e`T@ wzцixAdEtô:]庽 K-< ] iHh)f O˾zVk$C -špކ3P~F V HUR!9g:\Q!Y%Vzk68,ƒʕW9\>sL(·\+pnL|C*|-omcsX1e4xӵͽr7'W`N U&4]׋i;m fP-A};z| ɠr &f:?OVi,xDv#G.j;>N6-ChόyXIu& 1xA;,ca$S3}e P<$'r<5GCaRM% 5,*hƤCT"H~A"X_>+SBLPR0 A"H܋67(}% XfLA+Lח##RqeU-\Ӫ p=m;Y4aHc֓RMRz1y/G:5E @ 8:7f7TuU?\fL#MPC!8J"3FIXlظv?[s:9!(\QDC,q(){gT,v*2*Z+z V=.~Eu( ~]2:[Ǖ}TH±ס;O+Ujkdeh|lsR);ߴMZwݸzCg]>,i\xܟ תUPU@_2Z`h#qv BX"JZᙏoxAdEDPe;;o<քS-w?a+5QSRiG|E\3z14kmX(DZOIړ&o):!J\`ȨUpp9S,q/ HJTi4`phNφ2!A1 )a9^%YQyfw{xzy;]\pܞ SQU aB"/tôl5WE'bhIy<t"9Qy@hua p29?DD ʸJ|i@|\I"q ₋zNRel>{9t[NP ^$Ih+qi$Y*~'UpRw9T,!&`i0Gw]^3,˃\Y=Tr10¤5hpA'F0XMϣS?9ÝR Yx9Rv=!J DWh1hcK3P UǦ֣F FK)I}QPv.p2/i v;hV%a $&0Vm0BqrL100001*$lm8ji@Df;Y%ʋ#aR>mџRQM+Zs7h͗pZlx+zvr212cͣ_߿T.usNsBU$J 4JƉ$()T%TDfԍГ6za6\A0 0vtB09tǑt kb~Ed1dJ3%Sœ*v \*rZp:kՕMWs-:i:!LAf|>3KdzB].ەc=s#ɀI8;}>y3XE.j_ªZbT`Ml_ ^=ݳV\x&E&ù)<<y d`фc{$ډS$/̗|,((չQ@LJ'^ϣgxY;c=c\#/]ĄS/1:ZO{bS3stzP1؛>tgp^o9٣S5ULӦSi4jco:d:M9G s]dE*-_،#1dk*kԼJ׾P$(Oi@:p0W g g(1Y|)(jũR޺lX dp2cd֯T2 5<<o5}?>S?rm!z7YۀPpmytnucot땿#?E_)Lƕ5*l*ȊYf ŠVg5/'iul`r&f"\^[+B~AZ{pjwK {2;<|q-3`gſҏ}18*jUx#KYVv[pSʮXtTύ܄:$")&)aHt^1k{[Q:9ʱO%2Z缙Kѫ"\vG"}Tt"H I4f3NY$$)%7h="EKYeDQ>xILǰͷu]m~ᳫ'Qe!/#iecԊef\ocOY,Ar"Ϧњk+Xp[<\o˲P\CM暜Yj: ;HMM8h'444/Eٞ^[3fCq>a9G&,tnqM pp.EEL XQLʰ~\}P? 3Safa!|ʑ\e|V*x\3Tn,))LY!4m%؉#$ o!.)5HZRt6NN}b!H%J-B4LƬ Rn"5zl ,k)2xIaO Ƙ4 4opEiXB5ց3 =8A†l/ivH-%иd3|CP`[tqroΊ=݇csV꣢qcQ@՟8SPrvŬa -e=s%xDіR&ekSLf.Y*=thFȲ3&h Bd{%EEªRd0$xbŒ9ST3Y,洄li/3>IsVj&a$c4G3䧇f/?_G[N.P 0{ubg}wmwwk0̫k,N@<6v`R?fM>vrf죉&/j8^/0_oݘF 17JS]pлXػnhM/0(ϰGXk˗Z'f,Xq5 Aq B+Aj1Vl0u߲^o.)@wu^N9Va 9X@?J0Zqm\*?T.nEk7:'1RLw̜/}Q{Ox=7#o*ׅ萔S?i")Iwה&+ON:}-vw8MLeXg╩IT{c%]X8o{Bp0t 5,vaF!"LzRL 6%hʹ'Hؐ0aƒp"T1, *K,UW3J 0b3]-p-XXXB` Dla\0@t(g'Vytz|m0RGߠJuSPꯍ͛;o$BoQp & G[zrr[}ދ"I#GD" Y|h kҋ+u,Vo[W\$KJT]fуj0͊\.h+kӑ=u08NT^D .,P- ](ю# *{%Vڲ-˲DYJZň%ʩ $w檤!Y #aO\pRo>B2 }G\(G"XZr%a $\ T` (:bb9CwI:'@=\ZS՘ZPFf5]투JāY{:< F=[42jE=3wތDW]wݍ4 X@tpo3nxbn7rG|ٙ]+%8|S8,F < <`tW8G@∛5s+s5[ *^b&k}q5 smb1kjU8(ZqcԋA?!9x=pjC  79J};N Д_4fTbU9U#S˃ިRl=@6,gӳM4Yz Oyf!h5k1E+GCT2ED.c ꒰p˵ż{Y7xD_>b3, eRa*bJr>{l; Pc1 $h^ bXmaBW>}QB'{yP- 69'p4??8"9jy>7>' 077 _e~v "VD+R2? %4fqHK @#orw($E3, $+@FP 'Hf`K %HI-|4o TԚ>qGENN^!= b8ARt ?s S-o\~EN!]V]mnMSkNo_uɔP󜰈9(A_󖑶FGkȒKiSW;?d)HsH4V!#oON1 />xX\U3x4$]ȕfSW]ɵ:h2vI yŠpyqb8u]צdfw'I01,ǫn/:r bTjspqWB!@Iaqxid '8Fm3"bR2uP `pa9^%YQ50-q9}0s  "kz3KdEMc%D4r JjaZm V}ͤuXm7栴ϩS8aDGшU.dVnP^MӜqA)'y0o,+Jp„Mx"ly! ?!H "3]4^8\}M16E}١߬ #,7% HM7' ˁ'IlT3׆C" !J^ >"daW+ M|#g@a˟t MM%XByoo߃h;+tQ[z,}C R:h2[6!A1 )a9^dEuBn@FP 'Hf k506΂vƷva{pxˣC ]F8ruVBQU jn*;m}$$i:O|33>zQ! (OęxG0(RaMwILV)V8H r*As\Y . UM(XBF0X+FySn3SPhmepYkfpQ#my_,t&=p\*jhӖ/q =5IokT 3 ?(e}il۶m۶mLoDmVpSncWfaTDiB(۴ղҫ/W c^vLrP#$aB6w"_DVX sy|P$HerRhAFP 'HfX=O= /\B:@wq9){u3A?I@Dk2 ׋.W(H9Wd2[$ „20,ggRtL˥/^qAR4r .r1 #(>#&j;.YQ5vbx!# fIpVwTX yKG!d#K$*8VQj_?09aJӈ~<-wӃjB$Ec]sˠn.TFҗ7f +.t'O!!H 8%H6i4F[2peVWmx3Xi!(Zr-Xc5KكPOU ^4k/t ه9b Xp)apJ12dfaec5sMsw ƴQrEݰX2Na 6vQ\ܢň "L (ɊƱ ڰ`Mj{ 8 L I$8] [֠l?%7ޖ^ObP Pu/zC?n]WkH&3`wNͰpE3NI㾞?$ &iz>`IfXDh2[60hxAweM6X^^׀IB$J{! *"""""""""/Ch0ZkZk BNaμ0m sBV!lv?"9h$>;KV~< .a *>c.a #(^9_b]mg%M>BsnGa.x_cǧqEzA>T!?&=%L nޔпJ bC>;hC|fps{W%wڻ]_ƾ[wr7߃%n >@٣Nc/<%L, <^FȞ; zZGk_j# xS"&S{㛣&G&p [2c>$H.G:xgM{-"Zs 2H j؅,2!ffH4I~FrIHJ 7 ElrVH[ݫs2Opwgt+l(z&$r}eQwS l & XHp5o<倀8'Y.l S (EsO )ixAdEtôlVp J53U̚-V={0Lӳ*iA M?K @ Qɚ1@+ie˧U *"b8AR:z1J[(P-><2냱,רIb&+L+`\2)+t`'FOҝ\)QQbn6{@'U3"vy[Ex>TUf aC%K]c! *U4@8=*sĦwI:釡jphxA zq-42XX[Bl)b=OV<lU@-WA? ^*@Vj_0ÀD)ҼaY؃}ac<:F"MX_ [9BȽ qghЫ=G엢r#r[i>h:iw"}L} 9t}7qH\ \ƥ\k%*6~U{-eOՁ˙T</4Zb$J:͡0,g&aV&]:xG58Pr~d %\Xp[5x`T*Vs'./,+os&eY*=*Kt,C{?6)nV,ϱaj΅)\B{Æc-~qqYɌ kv1oڞ=*"m.Ct,;?|t#N܏kpпoD#"P$B>(J]>Me$hэ|i dw#"5_K Z)'Dh(U eX# Ō;̉#3BYsAОPNWWpj`-do46~@@ rMrͳ]Ysz8JH"Ie+*3CJB$2dj(͐DVn5Bs]Z#B$wUFMW>ȣXxy֐NͰ/ڟh;mr2ln^%YQ50-&J9nSjt5ëKFUH<Pkau6"JuU'.( )6 P1E`XKPcZF,r1/Bb+tB5 /)I+/5D*c)'Oy[qˆy m7/K"E0G]P3~0+s*Q"Y-R2K[ɲ#z x`VH߂1tm*L`ʉ?'.0S?.U<}(*O!@J(4k9&5q=>s2$Cxfu]zt2(Kze"h=(P2qhZԄZ2\a@qI=MU%;#Ɠuy1SWz^iJ@dF?H7Fؑɮ[ҜgqSlTאPՀ  8ㅐ8PD  k>t41ߺl$NuilR4;$lcˉCwJSoT8aA tt$j$2Ki47/*J!V~$&\ @][nR^fiv:v3|CPX0[tJ pA lvJp+T0 ^ E=iY&"vqod\S%B59߻\]i5'GD-O '$V^6<(Y.6 =ICr…[ E;]d~6b(s# ,oYD1Xtp߯nWt]uolH\c  #($E3,{>b" }PRJ{;~'yT7.\!7=͔I~:kޞ_$r+XοOPxnVB0b8AF[x $+6mxQjE`phxA&j;.YQ5+^z,`CNj0B*mX$yvX#IeZNJ)~ZC*Е0S%&J%dR>OJym !.?B l&sQ ĪD|fDyRDЖ$ />P4j' .dIavk<"K,*R@ $7J:]o#^ q ٴ@? VߦPzNOR[XSEk@)jeE=2- ި|nnF X&A&h4(DpEM $쥒QzI136aݻi2YPRJ& /Db~m`94- óWը?e:?(ﾤ%ַD6$z>e¤QxZN.!2||yn3Y\:_|M@*ŤyQDcu]#1r"FBXdj<=͋b*9+Yu`a aCp+40&bP bZa?& W}Rfl g*=[j֪FtUJuՌdzUw;ͳoXnk#$-E"H(Dѝ'O$+Te+*digxLd.Fh!&^xjbR8իWϛ@lze0Ĵ Qy;^{PW)%/,]lXdwEYڨ!4L!hDLW)NfC|P B0b8AR4r Jj~'\ZeV㸪8Tq\(Ɋ0L7Lv\U&?|s,B] peSϓ+HxT%0ES$)%~HJyymʡr=vk88E8BlZfkzg- $Kwu>DEBCm[-UU@Q `phxAdET;%6K|X%WTI:2GΑx~ m.{u90"nz%no?JoScK-D'XHOә"c௧ߞOʽؿCeTTDZwB)ȼI7}Z_TW4AtHu>QFeP,BK@t?f> ,`Ir' B2,Ѵ{;Y_(AN#NwG0^[Ll2;#GE}2$/66]~> X9ƙ; %?1% /vIKI?LnX_XZq@q[T5nmXsY3?fF?̟ޯ_0huW& ek2_m*vZG 4Fgu+3j2$g8Loޕc M>TNzp ap88UA(1  jքhb8ҋ.khb@1@݉MQ-؉We;?qQ -X8x:zaL"YXEYq$, }'C/RN6CuZk} y0Kٸ乣b:ުN|i/=8O 泼TJ7 ; ȝR>xG:8<|xLJO;VVnD`Z#lzHC9b5x#Zfb˚ضHJ/|~ Υ+}FBӃwpqnl@!ih_`D~}>RJg,tD/*W찇TGk;pPG$@pj2fBE*M$- ׭[7Xj$oV39 4 3N33%BB1ܺ>*!B!̈"=ՊH_Pk yuBVOS7z*O q]j\W^`F'+JhF1 ;NQF3}]泹EM (JN-u)3n$ c8)1O\Sҵ:tY^dw> çۇ9b Xpw Zk-:kZtim;.-rIDnh6FٰĽtˍ2 ץB)Н3&h"}%!u/M:5 AR*R Ej5"Нz.,Z ʏ)ˣ+?RŴLa9TU28wo;$T&ڜ,ԝwÉ!o' Tr BҝޱٮAҒ %~>qEDiH! 38 gq$rӆV,pY[! &Md!+N۴:4tC0H!;nco @6g*c,$3ym/Y)Ah״å䀧x+Mt!ր̿K"TSJ96"kkzzD{J 2S߹Gp10Ig&ǭ hpKiF Y BbF%a84ޭ^7_,$N}IFA&-/-Hxr=K`2M)>3i :D,001eMW#$]doi+ _!3X}'lT]ږBE*UV낢[~, ae>k1#ZzI V?2_m ~ 1sa͞%^7@-BZݕkQu%du0*x/.oERo=j:(`"D J )R@  NIn;^%YQ5&iَˌnP?6OKe-]DpL22U.|q+^m_o-i[3'2賫hQ-YKYDrV9 9葌X̽N"V^mo6H j||0[}lUYOfB.X0ksMW@N;J$=Zw覡G6Nlؿ(ojQlݦuY>RN\|c)M~\+'IЄB1 ,EaO#TǠ~Pȸ)`r=_Yrwmu89VI"^-ǜ^0Tb!VIM%q46u"ّnCۚ^u(QKnE?*T*IgҒ{Qh>ۻ4Cxr?uJXK{qJH|'q ڐN4Z-fc-ZX JтNͰ*ZR,[R*605#$j3T6;X`yt mAzJ(Jdv1I-ZUϓ]V8B 3*rk<+~51G&FJޒF2!mAXi<3mhh=n HfXđΘQ>8$C]1gɖNJM: #($E3, Sh߈lKVTMw{4%PTAj8$A1 )mknk1z!t'о君ɌBqq `zd9uf^'HI,|npxFQCa}|x AFLDbƂvpovvQ(Yql$`h# P uH 0aUY`<ŁsK:iq?)8Gg&mWX B+XE x=Q|rʕ +@jĆKn{IUEuTv@U)>l]4S]ns38n lU$*mڙ d BB@!B.GI]xԯV!B64I!r%)a ){2Hs;sS>ݾ+~w뢀B}?"^->+lJSBmF캐Bo?:Ʉ Awj,[}cP%/piN`(;Z"c00x;EػȔ /=)є *%K~PyMSO3Ew>Q4骀$3TLŪiZ~Ú@T1(:+[5fYaÕ@ҵtnɊJo7"a^< ꅛœAiVx2 Q`@ %R_>DvJǿz[ngE8kD5f\Qs* kFNѾl7ļ:mCQg#H _T@%.0^A~m$Itp l1łt}UFz@K7DQn|?޺C@1 hoXA'{ټXd/H֕=xTvsKFLӣ"|x7"LA*Y!Ͽ|gϜ*tv/B~F^G8^('] uݍ./LP-I K޼dUMVDhrH^X7O:FP 'H/{}<G\3 9VoXTyc3".*~T?L:uhqYQYl-yd „2ݸ7[3?̓&I^Ruh~tSCY=vQ-]M1 #(Ͱ/dXmvYQ5=$! ;$H,B;!(p47M, ffwZ I C0x+6Z:zF&f@`G Qh 'Id Fg0YlN\_ %R"Jqus> I (Mffw8]j5P"1A"4w8'^!F@JLE g32&d9?*[jJ%2+5튘; Aۑ+H$I$I$I::\\93b%y4䞿;~yz% Xԩ/6I_@N/AA䣏G~*yXio0 6je\0/ F;@FP 'HfX@cZ#DP78c_L$<(ܻ*s1 -^z>ɄQUAEv3%sܜ 1$1 n]9`9zF(+FI6A2+x`h̶CBC! & 宽r"Ź JFH- c0;V0^ U?}׆G,-3vu$a:JXҮI .X;;isRbu SDt$F7Om6.)E} |mWH k#6Ll7q/͵gv֙m_VjvD)i;1Vx.B2-6@MNݤ$ē@7{w)`gB`5"88 `$ , 'p| <Ή"yh^a0 D$%Q$S \@0 _d2 vr3Bhue*m&6a3XffvjiQZQ:1Tጥu  8\<}`ǂʲUĪVWn_] IPI%`xnߤÆDlHigL3 ʠ xgw\>"?{#r#CFU< cҊ[?mFFۤЀdbAhcb+o1(o{C(Dcz%E];Y_qCDei~~H\7u=DEI$lJРPmY˛.0}qQ9(\FW6fi 鰗U1cO,* sZ%2Ad+KCXk `^=Kk,1Mndumk;!ny̴ۛ0uԑ3$TSn[6C Rev+1Y(iF…"bUu}N~` [>WJD6.+>?ԀE.6Q BU'&{,2av-s. H,j0,j6i_Hn[YlC{_0w)~j'x0;o(X;\T܅0,hV墝k0,%㳍VP<㮸 qge-6۩3QG֠$a` \΋ON.n&ԙ\_GTX7(8Ind\Eh}[>gN^+:/i#NQBsHRq0Pn"Y>ބS 0̏%SN4F4G W#a9?%˂oGs.I~ȦRf\1OE DV5nEhm .nQLs؞oKP71n_@05OD3@f"?ŕ^;(o։^, нWø$m:[2BѥMs2'ŔW-bĈ,c5yic}t"n,n9QY ] A*%cn,W6Vʁ:W0/ьM&m!)[ڏ5:?/Y 4V Ϸc~3у!8t==hs₟TK`? R "rEbSѠP/ 2E~ ~ʿX@?QBqL,!DB]W#@R𫏇`Hfdic$S `i=E$+9L!F0VKͤZcqkT8*.sD\D$9 yBh2YT-8ya1tSE$+zig]y:ՆM0L`Ϟ |8]CkK*V c 6Íg{L(϶`Pú8#V2Ů X)1z0ިS<]բx,X*!h(,&iv:dr[FVQXG96P]A( \f:G/)J,޾y0X0xcmmmxxzA]Z)/-8I!?goGzkDaڙK%UN4l4_lΫʵ9W5532ߤ1mv ^cjA*b˒<յsFsYҦe;uNsnȕQ0 欚6:9jCN06AeP9t O-1WqWOʉB)5XߵXǬ08 sKP/M瓢,iK]=ESL]\YZBSj8yQ|ka"6}x#+ZM!]ڧ6oi;*{`AAON<פ!R@by@ڒ\RX^Gx"\8"+!"+1Y_LK!H;/k:[0'mV~ǀ}2p ?`a4伯` ;? /zΏ R1eFUU~⍎^`7s6ph.y#^Uy0T:j6uV 5490ZnaAA* 0 $)<K)H`SPeu(+̮H1!X,tjCԽ@Wl=lh}` D;õgm(/9\® *®!:Ppqmd*by+3j)$"D @=X^Q5PZ ^NdUkP:XG0u, {)i6TP^g.8H8En^\@K,3\RP2ƞ sPtI!I`,g^?P$,s! ;C$aBRH˜:F"X"=R@Pv(XQ O v":J>ZSV"4?|ЙvV>.H0+k\`۝e.ma@ [ 7q|;]d^uto_!MipB,?$C"+#11 DwŮh6P"= b>bM%F"j_yO9筚LHi ]zL 3.$k,Do7 r\PBV7BdZhdr! h'd"Gd}Ԁ`eT{8iYVzT,Ěמ9WuBs躑͝>Vhu7mIj# = vl^^CvyOlQCcaӱIa?·Xuf@K/sglq^ZaweY/s.Iu[@7Z5}Rtq,'Fe)Sx<9 ZmsqKX^eSf$j,ةfΙ,s qk}?=4kck`)k 'KPDbq;-3m*;7U: rrb(n1LvXqh!| 42*YȆmnZ[<>;Sl9>}3%~kϰYu{!6/ fTv"իrir)) ԯp.jCЈ|6˰ѿ%>?fWKf [I obs۵~ U V?`GR"polPVcfg:?(RxQ%g+Q@k'{mHN`@@InVK 7ytG'7M P'HT#fhh4qg!} qg"`Rm $D8K`.`4uuӑp%{l~~A% ZH$[H$]ZD35tubi7 erZ+u; L>~[tfyP{ڠ`2v֓z||V3|q-?ǟkU龘FWG+C!W>msbi$bi#(JJi.mK(4Ab+DF^H JVW!0gEKQ4! ,@#ZHS ߔQMkƳmc%~)=6Oc1v{xnc&5[2Bط’ӗ/r8Oi=qvsHxX6C>[N>Kb1;zezݹ/ \4p& œуŞo̷"R Fti(yC&BA3>EGF"fzxc*z*IWN ]f/WA|[.E>G͠TBܪވ# lϋI7z+4,<"&.!1)MаoF 1%7Y|0HXmvG'gW7w+k[;{O/A1 )a PuMdQDS=?EYVm#/3ރMm[FrI,TZ~EmiV#FBbBC Ou@ B^UnDYDrҴ/E}~ZEk4gzk-v4`Ѳgr /SG<}o !x'bhT(itZG)/LH!ۑbD&)|b1ջW^:Z^\ŽCPӄnqi_wC!1!Plp1D<> ˀAxØr,J&YS_Su^L4C =}?,,,no'ACAl6xI jrܥ &EmFe9<'v׎a0{F&eP*6R%igKFU?꘧4vv:y5'Y@TOxʅEђ,bb)i[H<PU,tCڨn)!;@,p7_ K#=فJ! Uo!"CY]sıu`׍Oxh {}s$KZUlT5yco,nH󀜶s?nT K(T~c*"VDz~XY5M)4RĔ "4mE69$"AO_.?h@]l_?AyRvF&fVʸ1 =-Zإ+nDPƅTnݹQߓg/^yӗo?~Af-۴/Z) =N>  @@bQs=1߈"L(B*@bQc$5 1oʙ> ·rRv'z}Ģ恬Tރr+mgY1I1s&[w/Xh r<@V@#+:tYA` DGX@D18Hc{,2b%8 rFay01GrNbBA<#|&ʷZU!tRqpŧ%pX8xC  $ !A1ЃY9y| A1$E0hx&qK$+LPQUQUӕ`@b(!p'AP`qx`"W4Lw| L-vZNnbsGΕj;=du{tr3tM5UrW!)32*&CȚ+INOKQv c8=E%5 EeںƪꚺrcK{mI&ֶ;{QY^CLTuv})ںvu-`iemcQY^U)ڴ]bʥ^i1gx>o0p Ӳm\_SzkׯKORE.ʪnZN/ʪnڮxQ@ICʩSøpX8 LX0 X@y|{c;NǻA}>Ki^m?k̵}ss߿.!g0YlRi㸞QU Ric@|mIyEum|zu? F_3i#'Ϗ, '":*,;}V\/oXd6=GPp=5i3#\`Ohg7< #ij`7d8ѱH^*Jm;c3~hGюꈗ[p=ỾG|WA &GQfk8te\F@0F;}qV*,+)/?2,M`G: r,lJ_>$Yo 0ܞvtgj[#+ݡKRPC"!'xq.|; By!퐛j.(V<ǵÚS1XQzOd]'!cmIPl]U (㳁tj-$2f-"`/Gޢ4JO4\ y4MnG(DQ_~_?t-#KkT"Uf/K5cjʱ?I2#.-EAr,$BHj4cDW vM@%nqфW>0< )MЉ OZ?]h}h!ZϠ2~\:L-`xlc^q'x/KZnx$v3HBO-xZNj 5A71knSȶw w[;5;s\џ ,91`fyI_cɌ3yA)QAS1jjL4'mӑrvfz~_*8M;xפkx\?/zi{#ϊ@+]iAW:[EN^cIf& )tkŔIH0a"a%Z~[9e/БPp 3X VQ(Z@F +l޻lq-.m/)qo:Sdr˯ 2__gcrژ޶(Re `@4w {8k?^Q{h,t/O,N{y{pb6}sJk܉3Nv)f$9'\OdY4v:O}'tE)j88N;$)u[i>yB¼/) J4zbh=Rؼ5M<`evӑL)8"g{cat2{w.?~UTϼJ:K z純8ȹ-hS0ť7}˂gcB(& 04e{]|CL\ճY={{Xͭ=Pe\u>DPNwܱb^|OȍY^p$'d*Qҙl.QY.=3M1o 95+NjBɄ% O #d2U9kyW$j`Ier FZ@Ϙ4$Դ:zʸ4 (mĢX_@IEMC Nʰ „2N*!Gp?Of8bj}}Gvjmw29Y.oy #X1=384:6>1_X/f9q.s|ʣw>y{tot󓧯~;]tQ|8y?8y{Ji}ή޾.$rZ76[h,B~xQY^CLTuv})ںw>W}}fг'XļNK^Ѷ0$P Ocy)̐&yH(aީTN%W峉mT`4GQΓtnE| x`kzT5&i pԋ735PL#4Sxc>f>c[4JʨEVQ <Thk$Z}j6ĢyrV]EEư {ˀv-Zbt# ܈`ceQV]?G*{`j&on*nrV|OӀwii:?G}jWBk=F oC̨`mኛRjpǞ%6E5C-iVIGw: U2 $iELl Z`}ҙ.43xUi.O2>`olóM!^ BY̕" wz F&- uN)~7vQBX AҾBy) WP*8GӒ 5z;EmP;!\}m$n`9Fu}[Qkʟz(X0ESkA/t/gfQq}0}iz*kdގNO]Ngƿj="qkY mli-I+hOT -01,t5#<繘>Mcs+ :}NZOZ%EYrѐ|&ޝB.%SRxMǽ݌BN}ve%r&M*"-#];o@83klk]A4Gi(Dq84"nљ'h' $d3pQVRsI'Zh@*G"x)-]Ô#/y/?l'ƧTRa3-"eoH$G3tkt4L;6'D !EC6 08yƄAgCz:|ŨQ1NQf|!Ej" 򅋖x[w MDP y#\~#@:'Tuq !v$9ָ6S-~fӪg($' 7bWħDŽ-!|Rt>'_8*Ġ 4)Qd14@6`C5=r}.E7 O[93V]DW?^Cx?1SZŽ7%ėF%&/͓fTc7FH#E}&/jlPnZdݗ{/$TYT-v_^>BפW Z|\6**+=Sw6 d5[ZL XZ-}PjTq\gkjoVZҪַp'{X}gk rx{`XN0XXcUFd?Q'^8g0x !؊E6W8$bZ8:bq݇WB9(&d Jwy/{?`}{D͜Wg'g6ts^H.˔vwG<9=~OGohjiXb՚u;p@ e\Hɳ޼0قF&fVʸ<\FJF9XknO68Ymx tϵ8389[?@k0f#nP?zH=Cu?=ZiS3O6*zۛks>Y\=L*.RLk/Nv9uEaڎ{ZM0uf [`zQ>uҬ׮³_N XF-*\ΤܻcY݁sɩ`\k5I9D4J>~EMA%dΐ~<NJG͆_#}B)s!fjL;X9e|b[}VBUS{1m/wV:-c;,Ʈ5TY=G Z 5E 'Ula!(Q* RC4L4ͱBI8:u~A+&R8+`q V·ǭ+C ['6YH%?&cRڞ2:@?"q%S3nL5+WTb^>m+p4[^*I Vd-lVSp.s"_ LvaIO;n菙EdUAg4=P[\*͑ 4o3ؖas]c:;?; x>56ptqn3>eĦH ~wyҸP?Gݹ`C˜! JvaxrkP:TzAोŁ‘_`!"2*:&6.>!)T&W(UjV7_ICSgǵrS7J+߄q[իіUr=qm.wZZ޽o$(r VsAñu"Vado'J@r]_Ru tn4,J#}Bꋴj~RQFGA'I$`8F;qΟx Jp} l_ r*Cp$F}32s!PPg꾌 ? 2,+sb0ǂGH+V<L>8&O8gpƟĝo87= ).1?.,ߊfz '\r\&WqW52`t}+&ͼVm}wQbƉ/}w$yG_Ϙƒ=6pf8y\&5nr*>K^;?{߿Pآ.)-o̯kBreA5uב7 ~׬qJ܁{;ǻ=Bj +kZVD @)K+r-eT FTi+QLYȕ'0 YfY[c: hӮS~mB(!D&%L\y(TXRĉ QR˿n՗p?;a!҆jFo͹ _o>W+p7G-(cKPD= SĂX?j$[JMKj0r=G5{E = ^BgcN,nx$ZZu5zPDQ428,-w,[_O%ui箸W:gpABExReUtIת7 *NIU)οwjW42Dg_I[U멳:=Vd 58ћZ$I01m 4 uܫc'64li#M]1=ެ^Ww(_ZY}Q8*A@$m+橫]~a&Uʣ7| asxg_||HH,j}_k0"(ȗ\Ǧ{ 8Ols5(v.n׮ LQ$K.C:e&jYoE^U7d-f.ީ!#%P@6, +nyYmٗc$̛4S0K_PE$^x/ܗ_h2(W-ֲ%.oIGʚ7l=yᕬ2^\ a CӘE`J_?EWHZKȲ n }bYL{@ʋ}}|o{SpPXIS_]e_^%U-dTcS4鈊FD >IZ?yaC!H-@vv#{5a)5Bכ.Nq%n}lA4G+g)Prg-lB?cAKwx~Xss,3dX&w9WSo, ȱtkPp洨mS`Sն EB:C8lR-f u+dYiX< } /m,O~dCCR%H_dH)Id|r_ wEcCllR>6nd"qJ|^B&.<'|%,< TנbC傾)b5GDc= lC>֢?1+DΫ r4UȈSijy͜#])hf9ŦZbZZ:7F7ڨMF.3wʝs#7*<$+#Qa% -Y;gKtLک /)S~E5?a3##G'NΟ] 8q  /NPSNlkta2G5 ӲxB6 wzot[yNmmo;]'A% Fp4{r]?E@p#L c9ѥn0JwFXуH(hX8xD>r2Hk(t-6ɛYR*2{0J',6){7zlY9*QRzMZuF$i8ּw%G1jiTwS$,uiK_2ʛ~OzJXhDh] ;b*TӨE.DTC*uN=؀4@jcRZF2<~MD@rµd_sXu )0]6S7|"G=G8T3.pW4yK5i wPnbR1ENeeɢlk7mhSPH1)U:r1R"]l 7LٞŪnUr_+}_Nf1Vo0./iZGx%*h cd˜;;UR7nJn"wa a%DKOKsCWE!`Ӓ)>)$M1 7fo/,r, Bn)u߬7l4LX.veadppr%GID8M\(r \*ŕpeXn!7[C8ZSpZk[WO@Vz)7R7rS"K{'k~~`جX%&Z:u?_#Zv zv3{LWMp8s  Xg "[@!E.y@|%yGX]g} ~So\ŪC?4/e[ޅǔ^ڽ?" xm8 υͯ0eo*_Б8>O?}YEmUǾyo7sBCLK)J1| )~=b򁮦r$iFpl[SJ[A]OНHrkڼN\[I]֓{JO=;1.g^'>9ygJRgPo]2>k ;K?f_=n56Vr\ۇESB䷉? kB Kp.xeF֦iibp~! T/6_85gwTيSг S0$f%DDE"pwgdB>m gjӋ j`3-4f5%XRe%ҜRMlm,li†5EW ]VK~?ۈr[{-Cy-o|quje q3~F(S,5刽Y/q˜ q^-f&Lsέ^`+GnGc"!ư =s06̘[{T.MC؀@[uz$+&ﵬ-nm﷮-eU[Mmz32եsvnڜ/l+sZ/+ݎ6M}]BskkJlmM;zPP{۾w;BW,XV[^Tx_sEWRie'QC߳WSmuPc%jEDwl畴p=Q{=iY[O;OČ:]<>w՜tOdTM>i{ dp.L:'qy=prm0ꨧFx P{)Jutz Wt6,;حvQ s6.;>#XX$_6㞯QȐ]CC m1Ɇ5ћ;ڳ܇. So>X\7OJdk{nrgSQ嬼Y&n\WtאG4 m1&|*cUJ55tmw_"+m{྇)VL{jQIbݚraO' hS)B//\>!m_2Ui_T.zA1r΢?Bs(L'NWTQX1Gb6aњ L(ӀY(ØN $sR4[_}GKwaɧu1{^=z@p#]th[x70=o"[A v0.඗ #^yo8~G^ D   xApL"Y~~eV[9*XC-4b:w^289L+ͱp|,,K’.Ձgݻdu 5k{޲1,;# %m;dN9^zwwy{+b{5Ro G]*D A E c ñ+G`HM_-v>'oލYJOv2m9f^i޲҄ <%*$źwI0 HL B`k+,X=#&Fgwyq _'޸fGTNe՝,WX6F9K.Vb1Sn `kX17U4R(盽}R NovΟK2VA0K `96`Jpѵ%|]B7_^ɎW^B46G ә@Z^E-ȳH` r]Jmr!w%٠N y)&b!*6uš4⿨#Y}hyk!$͏ԁYGѣiQ}0]x̾ޙ+U9:#`VXl䚽1;]Hm(bVꮬo@װd=PX럟40SVE>0:*P?@'#U{MV 3%+K*gF,N]Ӹ퀅@-,=I֤a Yl%QMSn~dS1I.mYJE h`L㲊O^OjĖc^Y- , l .y6:8j3 XFRd__@+__ j| 4{?ei4 ~%G5b59_;T @x!YZgP'F|4KE^كp7 jro5hw _j6lx1%!vj"`ԵI3>k:(ar';-xЃxއS| Yٱxk$"^LVRƛP #'XaOc}\~A\ 7 /F%LCU@l7c9I@7<_C *GklKUX a6ger -U%Av|U~_v:e"yX9ֳQê\$NB*o׎V\/=@l`N[RE}Sxti#ՠY4mKѽT= ?-z&=M{o#;s=W''`sK{Z}o{z]׭ۥٿ4j#pTP/KSe]tV&Za`祡8U)zoBl7ScxZ(rNz2n/),A|l{I~ GX4"8-ջ@Mv(ǿ5b5>3|7O7ɲYّՀ m?c)ahlXeM`8Br{_ $9`.[ H8Tr1K3 =9쳛>gfN5V\߻㯧U.rxi[bdc[x2o6֧{iGwΐU ?^^Ѓu\2NI #7 OEt7)vL!"dvJl$q3"W禽}f<8*Αߩ7u:_Y3foL)E'ղ 4 /V6u\5v sR7lħ\N^Wp،5rs9`vǾ"7-8 iaTlruW0_x)#O|BflGs F /q! sF9o.Wq{-oJ1IRKz;K6bגU^.4X@'c :_vsjaY|+}v'ԎPd6lEpTuv?%_=l eԗ+K-bN,ڄ:yV3=贃YL-Byᦕ kroy ?P}ݘKΧuW vggv7rZĦù4?|! xr%^x8u1h̢?o;hdE!~Wo|le_Mza%b)F_NBlْF`Tx aHXhLy!J,AN^Q@8ABDrA:y*u,%{d #nA0NnL^YP A3օ~+k19}Qu^Fh gHBl]x9m4+%|O2Jl7+{K㈎6Gwb O:tp['l㓷\.u2]?~VЎ&ќK2V~+$mWQR>L kb՟Wu6Ԃ[_TÛ0fhEzs7mSmELRA`ݥr/ 2GpfߚJ%/"ed'Փh ;M$ ^60xm:*F(EZuJ5 !Q@G^?VenJ_>epk ( "P"eU@N+ctc(.P%5"։ R'y8r ?.f௷I;@ •f7psDc:%y5^R27*!el Yc8P? *b57\#.cI^䯨3pJأRA 7D?Ouާ٨ mfq#Ijk,:[Ϧn ~.!{t*wOODxEbYVH Ss|Bd+s@珄Uߋjs ż;Yž:~8[!^yhr|_)#*\uұz5 5KqpvZxR6ֹ(Qy4٠G$P ͭ@%\TR)ngHg@qcWL)wtGiiKR,;<:n.*Q9Ye w'% ñlD"!% O/L99=M0}fQBJ3} 0e_QP&t{{N݇3//22tDү:cRbYu)#a$ ̯RG'jH NE\f_h+HǗk - 60qL7psm-ͷTsidB"o"Uty/_WI!%+2ԇK r]HjN'QMd<1z޻%~T[6Pa멀& g# A;ou*+ "0~;u‘ vB4 T (ιx(ɓP#ANNJ^р-]FPrx)tdj[2T618jCsDПCY?9iDa{z}\-#q/v0;/cM潝P$erI /A7: 6ÉW^"w W̉g͑8.,ӛ}f\^~v }fh1NX nlxnԷ6|FIٱN!fZ@3 6f|38.2c=cÝ,t\û^:$21zHD9ɜA; r\KNiBxx(U];GK F<˟"ŘSj oEzQ[F=H?U$vΩv^D\BBj}p*6QT6i-đR9 CUlY3PjY@(D2̇%xLN30S"!xB% 1]*MЅw1zv ,p}5E! E'5o˹18EǦ$T=D%6f-#xG3ج++mŊmSbHm4&piK %̥dV+',N׋}w${ Kg磠9آQ̌7Hw#IQ[EL*Iy\jHU1J= |̔UVTYRd_L[J]q&1T}Ѿ^/H4McTiA~-}ZR)}|-$rJyziꥬ'uӂn~Άv2%ȑP6BkC+Ŋ>ցG+k=;.̍OJ"ݞҰ, s Y-c IUNIEPɼAœϚ7@.1 !:%jVLud1 S=Ѿ (TG# %I*Q\BQE̍ӢvIZ0`x"VZh^Ԕ(o^iqq6@/~-'̑b*߲f^T/6qb"pI`7N4ߦ1%0Ot=REƜg~[,v _˜K9K 6~JV-/ÓOZ]=d:“ ρJibgH2*d#X!F5/K"k훴+rL(LqFq*/HJIj [J2߻Gor'˻A+ yC3L3/|XW{hhr @*lcCSr8c&d%@qYBj|z.یoPȥq@xfUQR|OWwҴo^Kǂ v; 5SBEEd=aGxX-H囜 =^Ex#d|\tkRvil 7ZֆSO8XB#+Ʃ1&%+. |X 4I  PŸ/:: e$/hU16r#N'*j5L*FM^Z Qa!b8TMY 5c324+͂GFV u\ @|E,fEy#aN|3Uq v+eS.xyfm=zsLhH!mY.tGQfjEC ڼ-Nppm$Dڃv1΢S~sdX~('cV?#MiR.]PsR y#=eӤ&kyK4:Bp~[rLt6qVPR@3dY_r^jV=alE4K5G4~4ړF,!Kw9n* 鰐HZylݺ Β$ndiKV l;(;57;2Dr$$r?)Eb.̚, e4nxod@ChQKut466,א:B풴w5Œ\ dgU+Ѥu*/{DڴQ.o*>9@]evHokVYӱN8g`Ytһg"[v1;:^퀋 W5ה˯7 P>B|RVYLV \oKeDBe{bk[1*\[7H &DkG`a/3vb7zS-.PG}Vk3ZRj:%a U%!\Ab8%UkV)Z*uW'HaToK.0f+2PpZ7lN JT*F/Jm,ʳK{-Rp=)pҜeIg]k( 4 Nee[_U0y/riѱ ]hXGlBۊjuDm gi0(HkKx97:V]ܐm: i>VDNlo X \m/"؜?{*+Eq/WzhTUXMPԎY mR9j} VTHsdě32-9@hjkf[TS IR-52t==4i8ĐT{tGRc*HV]SҠ7RO2ӒCUnV]IMb] D>bvPfUpƢ_.!IaOHg!$cfNJ^*r=;ב ϹLug=~mna`#@}Y&ANܾF>\^9Kj̿mz C*ǒ#jYR^=p`n]v eWuſm]J]ԟtt] CĚZx3,]eb@ F7jv+q:/&(wLJ!7ew{貱oŲ[DRNtM5Plk@'bVx0ߜsydu9SNUA-31w+}ۂX60=[bl;2^mќ1v/gjBA75N0a&QM3 恞}hЪyjY3FLVN!pxZD^ȩq\X!3#U'kl6_۵4X1/Ҥkƅ zD܌‘q w1-o[W ) xѣ\gP]*By{.zZuޓDk.Fh c]|=xc4d+Ѱ 3*N/3Yi-{ tnn@Xn=p3HTwdoVHU ?2,;ÆX jr/"1TUٕZT\9/+ÅVaёN*x0e=Bp‡Wiy + ֊Dhh؀@%Q&kq&}?h<}Iq#v Yk e=r|]zqdn^.X{,)d }'@_ӞAavI%кg7t*j$̢^"MCv~‡D =}+wI U;F̰Ǐ5CTj( I9`ۻ2ǭ8-:[P O%.9D7i}l+0SbS>F` 2}KPV&,Vzd*N(EE%U y߇}[,j]+|NZ+S!fߓrCS}Qw K/ecH387qAC"pkC v4׶x׮/1WL`M{uD1LG%6{yAp$YxaӈN/z`G [ٶ^)!YtyQe5fA]"" ˳ F3UW7]{Lb,C ?=ۄp_CmnbQmv:}n-x~Bq31Եfg"J*Wf 0n}｝Mqq9/$53"s^{w^1_a6aeqǞ F6tL R#2z8{~Ǔ"uJdE\ctcQPQ*L Lj8F_ N4ّ|6ʅyy JyTw1 }&ZYxP\GH|%^)CE8íЇ9tۧ'F8'M^!aVX&{"%x쮠k9M7coաb>#E٢'}rZ3 ֳ,΢lhqÇQ\mrU*?>UqXi5^| P|jƭU-O#_k(McrkZ{PDn(eUc49Dr5Wg /r<˟2dt/n7fpdw ,=F!FN^fǷn*?n0Lp˔FY"`]}$ YK* p]!*z l v i iԕtSM Pt1MNޡ[$ RloPy2Fz˩aN\>xW$r>1lq)A6L׮_OHqHL_Nr]R=S"cs+((o„Q2ʸ'W&B l)PHNIu^T(#>IӾꍬ"RA`OJ Vj+B T@Op^&=}iaSӔfo u#9zxJW;S.>B B⭗Ըu1:7@J/~*U<!QeԽ̍g^`C8S"&~ D5F㊵yϾ{ӏ!z\![5x\0oSx\}2j[z" #2[D>`}]e4Dt>$1Fg~憈T\ ŀplI(Ro0{NXacX"Pex><wr5i'$ u:2߼ea yfj,a<|.P*%9[n?3!Kȡ#1⋼s F?rylin3]mP,mF 1`G;LR#yzGM۫er@>5޸3;ho\*ÔjJL q &yFwWwX5ejѻc{84qcy\3?@$fpc4'[aX}%Q a$N;c0@$TN`_)bt?[﫩ą3 ͱsX zC kC WE*/PI.MvbcmVS?)78b!̲a ?󄸻R.@`J^_%!1 wjAXQIS|90]Vb>ɰ7iO\;s_<2%0$xV dLţVsnoB|VPվ>\bG !nZ2n8ڄLyd yJg'b.ds{yE:{hpg {;71ObDD7L3[Yj/U#$ ȯnCZŮca`ʍ-q!xVV$\*&4©gc}=BqŊ1llL&×L&٧GPZAA@\MA- BT #Jն@z`g5qhNW0?Qs=3j1ǟ䜎[ GUh#ۣL>kܒf-(CVQօRoSZ1%9FA%R6cG:FM˹ |BM`n ԋ#ALGR!JL,ٿA,KxSfU~^Z|IeZE\vA^s Ɋ-xcO, *! Nb&)-ӳ2CoWQZ:$0;ѯP\_Er(]^UwP7Tw?H]ͼ~LF8Cl*WKr y2I&vt@2wț6K1`j%i5#ߙ&N]Tt C&2R;+ !z>Wv8,6xQQEw1%*e< W=5N`U˓ݼmd@a b*ҥ?Pm{Ǜ=A7m3;Lnذՙ6 K1S׷}X:d{6&>otPwD {=)Z\\dk}$tVCqn]0zƥyٌrV/"ĕ0][3ue7ЬGQUl^i؎\ǫ1s +܌,*;:D!@DpN+^+HC(KCQ0ܝH1Lka"\fq)frzvMpjHihio Cwi@s"L&:1@%waU!SdQÊԅk}LdN$A_!mG$<[|ȁJJ,+&$OVd.vI鳖0i7uFTi(3.CScs;:eC?;3h=g,gAkObb:_PoQ'שd=>nO^~ϊmܰzM,ui jpЊCC@zsῲB"z\7DdPz/ O <JyttnTwD4OX4Uzs:bTO#Eyj :4C52RvVE!Fx蔲҂&jWV%cY)Jx#6'r" $9Obnk`)d ZlҶSJ iMa99Ѵ3_zHJڅgûvaG=@&1zfry-p9]",ټn 3XB/ycSH\j NY V?f -P2\ls }޻ -/_6"z^X8Ǎ~n4h_Mbh+2rEf;wM]D  C^h;E(%7lmבSOqZX@Db"cp4 ˲#a Kظ,. `R7o:"M )d6 Tخ1aDGЧ[63k'ߨL"-'EM hRhGj ANYfu\feS1'.T]**>I:j`#f* tXr#g'"Xoh:,ij3qtMn646q^P(Sgb^/<.v ̻24$㘇NJ!Ê,έ~;:8=T*;Q/N; sUe׎kޔ5zhQs0MbBCaקjzbw_Eaݗp% =`ވ1@hwk;0w_"CD>鉳;7a{tQV8U>iZ_əT !~hpgsB !ijs@Kj+B4%xNj&EIP30Fy%ϫaڍr-MֿFra #IHz?:w{SN"uR[[zȓCϭIj ;WuEcfFIAwOMzWi<L;;G Ger2kMvDzn¾ |R5Q0履HٷPSЭqq'R'*-wG+-A[q1tO t{ȫ5)H0Zrj?pDtu;{ 2e=eݢt0ڒ/y@bEG,!Í[0wĬdZCsy0ojYwU9')QvTgmc[ѼHmb%ndI?)YX*Hʊ^2 |X=M= ٚ!Mw*x< l=rNnB Uq[GzZ1EXnV8 DV/A@FzLJΓsB)P,R0uy7~$ҁ룹2;3TGG싶e2]Th9~cHZ^]5vDnuK"'E_AFp怬wdgz;<7xEiiM->˺ DVMJ_1}7AߠcU]2 UY^[p%R=̧%V1+4+l>s@jOXlV(F1lKp#n:&aXD hGFY#u$:O c%]}Iȳs_0K7T"\>H+Tx*Z,ѶRB79e#Ԟ)6wr4D&*F |`Jizu T^Jse߬!j,>!mZsc}bS3ӭPN!K3ᶆE&nTqZn}/,ҵ5K faݺ#js;'kFCwA q6}+AJօ>d\Cͅ+# ;S G{ogٞz\alӏxDhxvU[1 TLw)'1~ nYsUR$?.G2;)ѕiȢ$`a#gs7W҅G."+C豢aU2ե&'G|Sz\jc׈^ƯZJL0b~+`s< EpcM9w^߿} ,\S92S(+@ؔBBJ4PP[. l8| V!s>iYb -.5CR>JUu7}T͖cc%=sW5yf} E.C'0.tt7I !eiOh&+І2Z:(4YQ _BYSlqhD#Ń@qnE׉Ipj{uAYu UVqd@7hNĎSH¶ <\1& C&ܴnw;$ ]'M/m=j(PڡgEZV^R224m"w5,z ^^2pgCSdSGc"x=zz*í6utn4gƃ>~}^'0sw^pK /դm՟[eWR |O5A3ZV bT(9EuHť2;Ѥ|&W5/sQ`  $TIjd˸0V/5%/wĹoͽ GUҢ^Q޽$/)ۡ-'HD7-0@jaK.cZk< | :űkR SU.6øU7AURBQž,m;v6Ns•π_{EV KYz !aHۖ]0*tYO fʫJfvŭYLM6(U 2~`%cu8e6S 7VA"/Ae7noH:pyA2C_ȟcˣ6CnLKǖ.KpIU%f8=N0>̓Lu2{p7>Ng;G~V.>ꟅmmMՉ 1GYi۽y?>i#\6H"V9͇4{4EN#;E&J_'"wUGz5jOPݰݿqE|~ƠnV(Ґ썒=o͑xyϙ2E0uȟ*V f3׷QDEl>;%όs^~8.|erӘ X|q\DEc[YkίA%?xB^KS';j&}nBO"o6"v׀{HsQ7Q_Ob^Tn*58o͙lܱrPjy| h,H`Fآ\ї`$sIiDoHh2"C&n>te=Xυ˸Yyޏm $劤}N6@ FҒص1՜d0$ =*ƣ%{H>͂Q>˙2 f3QB]Ljxq#,A||$Ө5X.a_6+ 4U_HtIį$p+  zB:@0?{Gsث9ݪL1-H,X+xA->Hb,gC΁UpHm1j/],0މo3]vڰ5uwG`Do$Ֆo{6z+IU5J8LUQ^ϑ fSf z<^ [6chbbY&pJ yҢumҒ-Jrz|F+3:F 3j(ʛ5kL\0GnT E:2 ?|etS!*rR7Ck#Nh9Tѫa Rd3ky7_xodЍ0QWDOg f722ZOC6986ľ-&1ܨQƨ p hDs@D@0̙6X)im9gx_}=/t%bUHԭ].aV`R邚u-?Zrc8Zb6$} tD}'ҍ3rq;+vS% #THnxBj쪼6+MW)$(ՈeR4npLfzNR15irݮjCJZ2.}jY[ i E?p> k-JBwBj Ė"/p? IfCVҫB]لϿ4Vr򨈄sR{#O"2:׏};5!Xd%L1qW&b.g&6\LJ<;^<(+O6|Eg t^-qm $vļk1%InNzыhPmd,}DF{ _C?]ZeKqQ]sMP^y()4s3:$P#}}@p$ ~iOtRRVȋoceC<\j,\D6m1}/]5e+P 7c-0Z_P6g; p`LPT<#(XI SΈY\)a3`0An&¥h6dRBaЫ .0T]X NHzW|;4:GERO9k$)ic fFV^9 5=J2 w~biRɶ ݨ사_+]!˷I#i0<z;xLԣjcEgjfQ)aw' |79|sWbe|kqDyh؊ѕRݴ}@\Yq&RNlBybQI䴂4}r>,G0/>{+3-PW5",WHG2G?g !ǥ|/q>KoiVcU7޴t]!R"r<(tB*U("y7p #LL=8aHtJ&˃2h֐?, yEo n29RB$Z1 "J!@#ߖ~aA@RW ε -QiL JeB[(丬iLcLvP)׮#9 YLr'naqݕ #G"JwGIp:)*ſ3َ/~':r#mL4 (Fh',ONWB0HET! ! 3LV}"~dIax+ȏFD+4N#[dF;N!HZ.c"e 8Y$%ЂH.߃єM0@ LD~@rñׄII*^B]u~,ӗGB`>G\ᵋYesdόQduDãqfNBH LF:7$IA+ V_bIoKY'- ^QTVZc@Dk ͎xE%*nL덩4-[С ExBNQ0ag¡wi<-E@y $P#$A y96@D˂/|aGS0JK:@+#*EӖӐZiFExj!*XouNr rSf6.&@e֏>dMȲfg%,Cex4v%JYlʎm7Z`Z!k~2AP2}A#uqr< Z+;/^Ϳmd;%ì\Wu`MZ ?uQ}E 'Z}GI`)ٜ첃_CSUhmM^Pzd#1)5_;p oEhһG.̬O I%~ۧ9>_H2g}=46 "T?~MB.Jx{Iըw:0dhMt b~qDSVTV6͢Kj+Nd12Nv@'U(Ji荌.7_t+4E $\eb[Ub@qBĊg`O5P:F-F S=6)y/q}0&3W].ۉrV(8Hw)_O~޳Ol`Vxkŝ 7RDmJfTOoV *D(I<#|<(1E~pw c)&d=[zBg1uw.7̖rKW[)qm,3o(r U&5i.-1Լrgq0A",(۠1I%*0@UG0G 57Kgnıs+n^+AnU}m'uc*T16ҥrM`eoc. 9̈́UqX_(%4"K4 ts({K'Go+>՗BmkmDܻgnVT;}xm!0]vj ?j`z{5 Mc_ { FmEͶ 4-58MA\uDx: nKR}A5 sVuy c E7.ʃYDɦB|&cG)*đieS!1ؽ!$A %MP #kyv#õ*l[E$1ZƬ I}!*V{2Z q.5]Dܼ"PiaBzH?J+MwJđK!Zx"d[xPU:Y ~zy!'uѣ|D-F^&@!U ,cc8k/5|&3Db zwq/rCT&ĤLJf_.9j?U${o*|OQHMd&ۭlGJ7o vlµG?k-j},i&5QQoiBGbv8CMa$~U/3~ #aP4/%^2GA|KP*%M5K:~!w3q+@@3]HYݱ@U(rSiQ˶n)o k!Ͳq;*o1=|۷{c<_ (1xm8+Q)3` r=*~L3/P)_Vų򓊲nҙ(پkU E]')͏flƌl1+IyяI=h}xzs[ّRtvM֨5D"7HX -q셞stiqvHgk>דPCH vTT p\swo_5͙8 a3B{sc^5 [U&j y"PTv|J)8Y+DYCUQm7\zgZXi_s?Zʁ^1 '^eK %eXw,I&Mo!7E|Yڰ.YR W4 gA͟l>- kFJ<=Pf\"Gd>y5S2멽fDH&0o9{"6CͫR .JBOJ~{ee|R KBjW|V2i!)Ijn1`F~DY'P3UxB;ȼ—Z~w+d |+6Yg|3k_}rߠML®rQst32w,M}o 8AVπ37<,o#5"8'xS'B3/ɫ꺡)&Kk|Q_9XʔStI Xo}fɅ5{*(;0y=10~p4e.Im[(dћҹs0.<ҵ^I}NHeeL6IYNņR=lt fT [cc*iŨoN?FL s|+K<%N)F%UلIvG3[cg,F27:k.qb8ivW{,^r:݌Jfqh~Znʹcɇ0)VlVA9i6S1qo |8X]e-XvIZa!w8-ry/[uQGF0O ue*o]y1׻rƞhKYCH7 cCMg3UeY:&ҖzD!O)Ͼ/ F\k٥Q[`2ӓ=L^avI$I /́Г?⇝dQCVZb}j>3AJYDQc}UYOÞ ؘ[Z[7l'0ǼyOGoӹ?ECcy-|eCObg{kRSGx8'!~@RSJK.7 ${]ɔfҚPNz cNOV8E96o88Z?%lϼ χekaV*utz63^֘YtB393:ΎK7\f`Э[fPf"Kcc-Z<[bDH] $bѵ_}1*\vXP3KIdkԊju_Ƣb/Gpe` 6mBi-\xJu@RԿOI\|;'¤0Dn2r:QYub{JܽI[rZxOMa(^m=#r"㵨R5;fq60 Ыx{iH }-(u lD1sEL➁NI8? r2Xb 1j~F:b2 *dK$ge?b5 Ƶ?\, dڶ~[b,* ?a]H . aӎ8)•Z/)'dֿ8ťXո;I!Lg?P<+DKѱ\fj-k6$FS.[bbKb5%( ѓQ^Nb+P:\rC/vnz 5?o[S{!+@"q8**s*p =w|ѻٌ3t =?lT0C>.xc*h +~31< F@T.+ZʙSr t$T,~C;)^2c04^ocS} SL2wp\,+X_0IF Gl^y=b8`ϙQwfc!wxBa_'cSո^gIs33W}?6͎ׄ@Q\Ɔx̍8nЪ ߀cCJǦrKw|q2{e@^8^lSW\^|p%HxߨT[Y@Y$/(fn%nﺊ\ X4{.j_m<<HnH #⭨ZwUemˋI  .TWNUB wymDU9xC/:^*a{->ԖL- gd|2V3(*]x!Igy@`v❓XKk Fz9TC74uPEtxcrR#*g:JE\hI%4. s^Gn/Afd%i em1"6fQmn" pR}z,Zd+veI` %/4ARqJ2G,OyB[`dV= /qeD%H.fE%s1hJ%cY|_U>l?-;݆wNeʹ5_+=qBujj{Y C{4 i(e# sTӑ5LFxMBf_j g7-t+om:qߛ0r]!Ca!jv~B3쀭K.6aM`v]~-< >u\p@+g?UOi9eX K*~INVc4y6OcNzN-kS3{ 7d$ $V:ONh8GO|<&ؽ!#Z ܽ7/ *n$!4$&Pckw)(sMd.7٨N_ϟ&,ܤLtrр-PdPQb JKn]`6boAGiUz;eg"^_Px(UUnR%FnR-wWc%-igR*l_KP,cGI]g"yg/ߨl)1S}6eNh29ͻ)6MEˏEf2,φrV:c2ސ׌Bwpn:Ó0ґͧ ڴ|a䢌Já}G yyak\kQQjTi ʬỀɥx0A] l9y9P_, ^hi~8zLkef[ubmlk6kIŒ׋oZ[[ ""y:_O 0x$]8;qV ...ܭRIU?g~JbdOp,Au/ 厮T\tr2M${06h*ݤ!%ˆ=ToF~ZJ2C Xߍ1Y/"ӵg*c3[Jff.^xA4 ۲40ר?LE;:B }y,RN䲍lA4YC~Q۴r@|.7t?:u9R)% bdi?BnWD i/V^ba#,V4şX[fi_%Vq M O;P?[R~\Tl/rOSO}_eqdGI>S+f/% 'Ocy H+jyahV#8i9lf7'"_/jHMm4cxRYKRGjI8sX j|rm O g?" ۚyQ*_2ِIn7!4jm|lF>.ɯqڜlep/B =XKo|_2ΑO3wq8q2Ѓ& XV> j L^&!( [8k;@eb&%~V}ų鿗 WY!pZzXm~,1K;.Z'e'3Zt 85ɥˆlF;3y[ƍߧ)KsQgT֣k;q f@䁃euqGmWGڹhxUi{u%#j)1H0|Adط2>`ݰýOTmj)zr7uiWIwwHP&ց |RUa#]SoVfr|S,$@e BW#"\I`yC?U^x]: ( `Qhׯw!;\6@Gv01Ȯ/lX?,( mP\n sw-3dg()7H7mylkVv7 lۀL=]„`m$CxH, Al&K晦nX+[jV5k݄\#X9jC[rjɨθeRh[E!NF #N[03\u9>\ԕ翠C}1س+V]A <\9 f]@f֊=9IAqj8Xt14|[(ļreP8lm5QDC3{R U b2u5S6;%跭+A?H W; u /$ÐWH@UahkN4&N< .'bH?D'X4fдz7-m(2h jGl߉-wnj{vNܸ R;[c|,6F| 6໢[e”@}CWYbF|#W숚5G蔽)% O} ۅܮU?f+wEtVȈ3z "UfPlۘwmh`)zfLyb;rB]%T~iKT^7 qG>;5qdy2%q5%X%٣^u d.eF}{cq܎a^"F!<4v֖\o fqpE[XxqB`‘ɨ5#F?0UiH뎂#N23ԬKg7N$_,i:p;}z#LΟ$#u4BQQD 4^'͚KM*>$-م$ XaNR뱦hlAqrU~D85~x`zHpURzuXP]-v=&!KC?;zZ\hpAkM5=AǪ%O`JO\t]:"񚝞 ڀZSt6.ehCW~:uʷ4=dFtwmJ*S0H$ aƕ11nC|r^ C9Gii˔s[ujWc rZ0<^-իPY)KDɋ =l!Z )ǷV GFxexJ.ɝ,n_ڠm҆c̼*υ']AR/_vq/7.N9Q|e պJ3V;pny3Q#x9oz6-* qKcY#DZ'_#!~McO-x+\I-Kk4/&hu @ZXqs=` |?AepRf Yer[*3 |*J\/vZ㰷 J} : ݩֲ*zv@Ѭ*Yڐ[Lt`h[4JɴQuk.06_j@~ONAقLsL:Ytx#"i^H/Un)&SwˎWŘ_cpqwtUKQ&㑁9Kn~EdI#4jMK}e9;UC[%?Z$nCH:[k qBkb} 7du !|hsU4VAjbh RXuoG8 ˁx'wD0->*[WUБsHW jdeuU>+қ aΰeΘ8aWK/h.Wiry!ȁ@LځH6YD%C@-|p6={:,]$d>Oj|C1.;HW$hlN1AFg.F6#3Po Ւez={lF0;NJ񋡥|3Hgw`eďK C ic,#iy^Fh-]l{douH~~l.zNa$FPxN"LZoz 5dV#woaZkrCy<-F(|WKZstrҩ|/%-eGNW/WB7eJG? _L@r̈́SJ,Pnb^5A$=YcXgoĘGq]^E$&XY0B"%ө9 ldq8H/ڹb:o7|3CO ؘFSJj-P(l_=O ov_]UG򁹈2]rhHX4:`67z C/E05`Y^Yv6.eqPwKi r6gaN#; ozfmIBT(^$ |/%# W;> ,m"8ދ `l\ Mq9ׄ>{Ĕʁ>e8nnAg0z]vUσ/Cf?Zm)g=?K5_-M:%¯B-ˑmt:9RQ=}%JޮQ[6fmD{xtB35I+d Bwx$zTCct5ڀ.i`tA5.FB8LLJGY6Pe c'Dc]_K9{4IVM., =_mAcG>؍AG@"0]VyBxVDUAg xX\.G q^!LHdFd5 E#hg1(,hLo;9mJnZI0jfZ8BpkUwtMk$zĞ M2RgnRiYN JsS\}ȭXE"y  $vK-yg̡GĂ.i'^8JZno|tPq7-gi-]]&j.}r.yXKZzm¸>s ?[oQ AAuȖn|ʗՐڔ0 /O%U*O=בt||yk u &k5 Ư渲7>NJ*C[b6= )9Nƾ#u:=9b[7 fOTxρ*7mdm)T..}vؚA|8ޙW5'[j~/[Z-Y!@F#bᙒ Ƣ cpSY?^(Ì,4j:\Lg̭M h*bBc;>y eOa0?o>XEEnAvx&wmF3<L SVmid8G4Z;?&Ĕ^?;1P`]"bT]GՒ "*r(sTaο_I.Qr~>#~p%.M5 }Pd+|L(i@)z\&ވwq&Bw>w;G1gtMQut֏r 0Qohh 6Ԍ SqC=ަq󈭺ey`0!j!++)wqM?h5eA9}0NFSj oH8r#H"]`c2vzn mґ%Zt j2[Ye>O3$P2`~P`$UǿώYi\BdBrfԸ OE*sݸtyX\5Ly T76Z}'PZbXAIp ".zg<@kգ%^coZ,ŷ6q0/D84,#uI.EY Yֵ՝,=bKV˗3W[/̍;O("-QTtƉ97K˖,6SVݢN?c0tth Ye|^_̼ R19~D 8Gёrr泠~zl' cwCAjDOK9MCӫD76@?+9@B2lSg}egЊ_pGxW+靮C"8!Z])X*,9 }m1)nִ7uu6؁Mv+)m?RmԩQL %Y/ tz&|>])ѓ !#6f]PfAD& 4([yy"XqwkyD?%Ҫ(xIXFcQYFճq%1EwIjutcG f)|+ϰX37B,`37@pUb :,yDB% CC)Q\w~5oKtDBdё?u VhmRF'3/Ji*Fx땩5?h c0QscW'[!ՋtƁHU@NmĿi ̟3 4dtllV-$F~;0M62݇bAWl|fw0eIf6tC`h:$q1u$ESe @[uLfǴVuFq5q$gJ.mW Y ca[cXcE`5uqvn}#w/9sYP>l p,";svWõ;;WWf6z>jXD¦ ,N7}hEIbiBvg4=m65!ؑPVS[cж EA:^ƈswMA63鰨:3'nf)m8ikKegL[_p+]m))=V3&2C)veN;G~8&мܡŇ2X,CęH۫d!ŗ Ȣ?wTਞα'c$kMMbP4 $t%5=v( 8SԝW ~Ű7el8eƸHMqWXCkluH!?0rnmn2fCe(=otpRf .6ř|6]eweX>=^yk9ks@9|oMOXM_LuI1!kelZ;xi$^3RFBr'"&1r~BNh#7fЕb)l; ne$(˧G!)ڲ}:8,bM܃ ٶPpFGfCDyqp9 39j??8x"䏹~RvUt|" 4 fW42Yvr*!sl,ObF2fE6Z!@݁X̝U&$]F^DQr"8\܋&^ѓҴ'89cݒH^(<C^!-GeD^ \Yzů= s'ɺ|ss=iCS8Ƕ@`5*1gb HN7jX]Z oj2WCZ>By[3jySq;xP7#`X_#u GZ67]7(!T_)%~[`^ݧ:ޙ',-?1!.g&MCπ^hAej~0Oqf|q,^% J}]}0όG'+dֲ7$1SiݷblPQ 0XF<"k}RȻ:k~?m ?|/>P#+e ז$2:WVcK[V@(D#\w%.N(|MGo&lȟ:}]B2[p|2tݱIv6=|ӞW닪Rڃmvͺ Vku'J2ISܤCONkj ܊eb=YڬQ+[STV)Zs~'qD0 RN=q?]*/R,v_ ˃~Hh hFr|jar 9 oɝĥƾp-qbZx.me䀐15P{qs4ziLBqX ڕF^Wf6cl>`[Va/׮卥yAu_T-Ơ?/_>[/kyΓqޥ6ڶ03BKZ'燙)Anj1.:R Z*h#=:8BeàJB(NTDʛ[[_t҇/JK38MMm#8|A,DC32N0ڒ~196Ѧی3t-|,1@_4"qk JNtD2X/xe?s|Ȟ6 (pP2|::sș #fny=[}T*Hk_(e(Qj() LP(fR~^).(^(GE}wC;P^Ne$2eR\;gy @Wh q~ngk8y[[`%R(8i%c@2\:n=7Eݕ⽥?Ɩ%\Ox'>x@)[^;w&zp ^\t=nt.hl le';IW@.J ogqmbQrj_@{փ CƵL59B̯]i-ā j ppR fnNHo]E715TΑۆXVQx#U}\V!="?J@H 'c=siP9ޟ8WYhEP7~uʐU pt9b;&*h!m-{C X*l;,Ls'̿~OANja'rJ\/e~0c] askxt$@Eۄ5 ꑪ~]Gx+4WdV5)4ɸ_]S&P Dƶ57 ?ôfy9GGD;9H{'=ca>'۫_jf޼.b*Fjʸӏ,qNw dF|#$(Zh|ox3X]a^$yS"&,'ؼ_?Di5,{;z9lůvLr@쐣 U8檐f%g- .:h_!_^8$鯳v]%':;3OWEGuk<0݁ưj갈[|O-ѥYrYUdA}5xPjY=bAB{F^G)hH|tMJ!qKc9W3{_b<)1Ib܉Hp_\XnOѰJ=oL>}|3WSכf@b4ꣿTE@syV-yuNEڲ2уSA+ G1(a[i/({(*?e,9eA%VFqAdΟcoeK3kkB%ds ?@En<^]EԦDYC:UA:5cGHQVs9[Ne|3J!'u % t|: r,rpo *sG] Ֆ$L3YnD~˳~(Ig4b%`lh"W ZN!\®_:~-R$\8]_]OH`oI X3=Vc~'>: 0~e}X~zM"E .-te6nh> (<4YU]i7f!L%3ҘU&#yݽ>r"1}TRHJk@\73߃~Uڎs'% 3ꙫ*TR*ph)e &I<NS 6hNigcʜ;lc9q%<8g%|}蹤cvrԺ*^IuiŲVmW`wtldP1P'?ZnwxC)א0)0ȶKСI6wp䏭aFbcGlp>0K{0ziVb)O`.`6$Rݾ VZ-,SΠyE>*_v`MXVEhxDH *Hy ʋf> Ё7̳ y\3B3]kHxVd9P]y(֝KJ,tr͋SJ eUݽmCDHR/'o'b86hD~BuHU;_M)(FI{WKOHO ;\@hlxDh0HVffdwa+8NpQI@ޑ nҙRDlF=Q#NY! ԸRR輓Aw H<׷ZYfAkytShSviH',l;_vu1R96OD3rsFh/`=@5tVʙEc,P:Ԍ5ܷ0z X{Dz*>í?;Kwp٧?8XjFXttO{ZJU-]<#`8ԕ$4nG_h2fB^O@=w ձ ȝNXA('on,ST¤M~tMFATht!?dƊBbo"ȧ< 'yCߥ b>E ^Â=0y4 lM%p!olK\L T0aCzsNmZrj \QN08:d2\jdUAnԉ+jhY6.)yfB%k x/BnJM\͚2va ڥﲡ?JsRg'+7(Ox<`סDF2hIztS>a>` ^ B&xO,Ϝ1f h#}EI)}Su N*J ?ٓd0\>/V67ǔ*Lghxσa /Oo"ǙX1^ܜsrQF'.%/$ p9Tp (m֪N>`RT0I[h4^oL=OmeQ粷wpb+)\F겸 3$j Ŀvl=pYY 6bRLjrn"4=+gr )kg=Zh6qb+BTNK}Q~ WOc+3[R7?ҖR` ~“oYN1SUjZD[01!58dža<}!$qi1}KGv ~,0vIzf<<&ܶɌ~/~~9p`bqMU[g%/!ve )]_Ro J r u/_ (paŋ\b uB<Z7%A?Ѡ^QЏ9/Dt(fQ3RNk/zBG/,'#vC]³5+(GU!O#G=ww mI6jEh'ɋ+U7 ^wދ8ZRfs1b[1\WdFI3/1ެw;]tt&"鸥:QmX cgOɴB'ل `u2~tXM&MEz::DB-֜7=:6*r$:FyU \*o_gz F3#;2`\4S#2 $$M^^%WpmzF˪nT|gyk=sNGpsuTrPe%u"ea|nNAp02 Y g-k\H|->Y L8rj@\AI~Z5?hZk1.A>y]$`yz%q xCdx6W7m 줗KU|-H ԥ0k.hgZhs !W4m:*yz,_2&>ZOrf,8YR)/.$jY3rqØ1'WOJZ"2/$1N{M)OTdr&dp2ϝ 1dbic>J?= |Yo]nGVgunZcG$a6C1641c[vCby$f}9&sǪ %Ƅdz3(^x)3^sYQy> W!A>戼լkw/@<& h5)[ӂ-# T&v1V*5"ř(VsUlRgmA;)F#s`wRS[r5q tځryڟi }#] ;7M5>7nR\䤈-M4ٕ9t^Ơe=zcd+=QM6ڤoa9 7Mj\"^Iš7>%)I*4~6=ѻGE_%skFCQ\7i2si1?h0:4Ig #*A:ܔ]Ptw k|.[̿>3VD%&Z:"LԀ!$d$ wŇ>]-t<ۤGk$G߾f@ꪑנD-pK|U&N9]DUYւ2lJպG0rRTfebo%"3rG$M*T}"gy}qs?9:.Yb-R2GE_/yYs(ͤ# timdD+퓝JU1tbϻwuPB. h/q 'kN-H Arj@.IUec=8xfWZW]X_=f,Y_8Fy'-15ö@zOd5{^ϴyɷAdl\Z ^khh@lŒ c%pK7 k9.lbiM&3xFVbOu]gɀ. { ӎY+-%؎ GO"D2-GZQNT\"#JBsn  aP+uPr R`+b_@G"?c817+j xXYK8jr`^y>EtO\D~jB+:'v9p+A3Ƈc~&.f}orQ$bH}evh[(c+G]d #& S-t+6T;lQ E UQFIEAGAbE+вO~OfYa8-kkOO#o^ˢIH}. Ǩ0;D=$<ԍOL hɬL}nB11.'Z rE9.;HM\@WFN0S6XwF! ?tiŴUoyƸ[X߿usx(oaXY"Q  6y|&@P>vqnB|]!Id Q1Y&{jE:%(UPu,͛"x ~-lނ'Hۦk$W88"!rБ)ҢVsF+V<#-NX(,TǦ u">"=*b y"^2JF KH-eUe '³)lSGq)2wm))ȈgJ|2:U@ 9M ]k#ȄꝒ߿"VZeˮ݅ZQԟu:&tg!ZYg26awL0mws7IHo0oס'i S{n~ĚMSNjs.cwj,}ơv=\CEQPZs'2{Iz⬤`UÒj<^BĈ˹*cS٥$̤Zh*a|v,YAЖj(̫dHy d)+eqsVe%cpɋ%-zT^pgΝE<#,9O+9j痕|)u QyVHfI.#-G!1Č#Ahӓ QsQ0! Pl7HV}!NazCIr!SPmѷLXf.<ߏދWGx+}3ڶy_bHtU͊kz2ڦA&+7)J2|mó9䍽{zmͺe^ˤ`6H\8[9iF$1m 3̇/4ϞOX.kX.2> b>% I[Yj?rGIɑv06ILmAEN ְc1a6i9PǞj\a*RQY-6sV^(ʜ(Z:nM Mx`<}61i cȏFoIf `7h gON뾮Š!h6,z  |^;g'v>܈g:F c*$\y'vFm:1v!]#{z]Iad^UˎK,|I*.MMPȈ+,۽@73u;3{@{p&!g~~Ŭ-T3A-̟hK%ߊ7T³1.MrCvv~CQ[xj;n3kZW=U<= p¢ ^{>89n Dvc*uy > X((˺.sVe ͣct7f3q!1;C5Ν`lRR}[jg$t8?+!9| kѮ/xcmFr}Ds-"N)ĵsO圭GZožfY0p -Ãh,zwE>^ } ]^.͉OskRg#e[lKqQYT ]j:kltȔ^<=\\Vڝ1?97q=Cs,dMПghNj^eSǶ|xY!br$]cci,% ,]ssfT(5sX{Eʜ}̡oxX<F(^(ioQG-aĎ :sKG^p+LB+1;ϪAY=֍ YebPV`Cʦ]VMPd~:[qQ)?QUdte-VW.97.9ݔd|[}o;U=^$JQۈff:v2W')PiC鎾CE B ؓUt}~qnָ~hة++qG"ԙĖ g< j;&lF9ITטmkT$*nxW/ aWZHblS@2/T</]áwH(k&iAz(Z .>8oX,һFپY_SWz+dQKfn)Nm. 3 .|!|PR Ѳo/Go:K Wj|B? 618б/ݎp"\fd_20RiA4`E%%_˃2YVxlcM\8rW8nR-s,-7c' y|X/„7HAih`dQ5Ap:s{S8@Xhz%¢wepk68FM?}v#r: q2rL&~Bѹghob~j Y%X"6A_MɬL@d/P.?tQ ,,fP1NMy2*pMag(x _ru+Q)n>-s}KHO-86+ӉQZw[ݬRm֪Zw<1]1?# i"_ 9Y zz;UwpQLv=F #E݈8Yё FbV#' K̮F DCp EImEu'6m_<&(''D#ak |Ueo}_ 1u{j[kgp0(=TAbBr>4t&HD#vc9ׂ+q'o,tb:Z~KQUGQߋ"PYtĿK ߘ, 7h@{@Hks>AXRة GC({4AI q^'i\. lШG׶ߵo޸vxiors~t $^Wh\~wDy>֗/%kyң*9ox[n1`zDЩ7#_4O5V7-wuFE<ߎZds2KA-DPA*^ViΙ ?ׄҫZ/NIyN\0$# Y+!ϊ%x F|>oɧcҽd D'x׹4~chi> 9ƴ-O"n|S@8tó3uޠ*Cz >}P6h/%gzO}ٷ7Byӎ x| C=(N0w\OM+Wt9ɫ'Lԍ.Z[N3R'3t\ƾ(<ǧTU>jaa ӝ}sA_AŻPfdy_car Ne&QInqt̶qWoZIv9wXrb3W fF󝂇Owe$$Nwk+'mim}1RRXszc:L$4b`gqWP›^ͨ/͠T(8?ahܾG*3 `^ bdi.}Xv#GoWs'?(A_obWzzx9$CHx>[eekv~YXIA?[ә2w җT}uu`8U#JB'8$JE S\X)V122GzW 6-^/z}Cei4nS B,{EMlv*eG_io?} z*+5> rގ F'y>COY~үY+b-6 ubm=.}˃͙ZtsPb\'  f%`y{9%sHy33mp88f*9ƧlF&(>:0E<7t/WK)#]^KQa&#UxD^tq"*M//MHv&3<٦ʰ19`Aa[3O =tBVitpflKI?'.U5=N[AR]p? :!&st yNsq<=[;߂ajS=An&N"/{{Bo>s7h\0>=3] $n^ uvzieAoA+UV, m8?[Qg\׫􏙀Y(! |=0Z:%ܚBؙ *}0J opxC{2 JkCJ%c/?2. yU7Vo%caW[$+]whVz텵%oxqJr`6޼␜~@WWAiPgȑWE吩 ]ꇐ'`f bk/ $݊'chG6oFdj#?{j:K'~#uFf z{֔" }][)pZQ/>'xl ~ّm-d'WPM@PpY/Ew2@\?h-:K5F02O֑ŷ]zBZUzqYޜru 5Ν^Q=c37v쓈1k_zgnQ#TqdߦCoI @=A!ׂȏ0?\pnhK#R*g owl=C'̹YY~H6Q rns5z ZA\GƠ|yqq?O71f3sxGKqSn n cGȴz׃vAXf%zl^ћEP:o,^x;~6W3UXdbϧ,!; Y=*#ƴAqһ=3)0JZI !dƺ^\竴ٓt^јv6QVƘoTg'P1ʋ천1ҕsݴ/Ԛ9BfydݻQ%A#\Z1P^[ufuޒnnaUJ1nx2h{O @Gl4oϽ'A_P->#}5[qppx,,TJl$nC/>Lܝ30mPk䞑êF,14-6m>ķ(`=Cѯͺ o(3^DZIh"NU>Gba1Hd ,q2(ɹNU~M=wC̐b3 05ns I2>3pwzۇFs}|Gs||Fil B IyǷѓX|{Htz#;腌J&,TOu9JIh&_p^,;'$n]0S2ac\ mㄍ}NUq~Ͽ(LDng^aۃ,Ӓs5-p3/>:8Ρ=sX:g-F<04z~]^yѡɜD&`^]_?IVMg֘ExI(a3Zn ړ){RH"3j1\Q3S"o(mJgQ^ hf9bjQhk}ϝw(}<^o_cw]$&{Tsb*;?SۭJ7?O57Q GInKwm9,t#;({59G69$BVuY_O֚}Eٓ2{V(7!+ 1 ZsGvt+@\༶qys^އJU9ksN _{u4kaSQXv뛾ڡ:M9>ht zSsusKHr%2Ԩ+ӯRBݏ󴯟&c cWݎ_1 6RĀ^nFRb`N*" )hp*3aN/́CL: E0wr#\*iFaGbK`e-3AKyK;_ȕ KoϟՓ] AIY<;c~r7;)ns/+p_<_*{04Ο1LN FE0D~tĔN.\:uz7~ 2K\EdLSj8J3='-"@4/GiR, Jp@x%2h^+me&QC9+b- ܐb"ozs 'R*M%"$˝Iڻ]^A7%Lbح Ejnsyp2VqxMuZV]&RXFjT~ZGhǍ]<2ܟ+XJD{,DN$GAxEds Lf%2д >nX'Oz ̤(*S>8A{2Jq)M↵հZ%#DV bji+QR_YtezۡhQ`>_{"QPᐌy W5j# qo/oUrGgm,STN#LpL1hOh4t6vpt!bqL|ÆcO.f:w|z,8:j閽)5z4ˆd^Hx , b"dO1⦽̩k6-;:yfN/St5ƹoWl%m~U"O߿cӺnUc{Ahơ<ݳw-ːŢ'ҟ|͝u{-@m#z6V*iKc:Vi(!w{o#2ߖv?qkvg lI9 y!wŽ՞UIn<}uE53oƜ=9uqXӡq{4P@(v0>z0|fF[1L^!;3i-ݜF׮sQQgZO5jDho<Wk$20i`$Ƥ =Z8\oR%~j#xys ]L=Jv W ~B={%CBkm9#;ے^3|׎#۠dh܎x'po^[ yTpH$2exT(zC3*垀[|'y+rC$1`}8p~>_ H]J $omIzc%8@< 5w.ǔRN4ʭ$bُ3v $.ދ'H#+@[M?v6q?μʂ姃cw]EJS7ƈc6;gxzL!=QPmBct%EۑS1L[&"eP2QR]]R/Ecp7&ϑViHˋJO]a|[ enc{ɃV4Cr@S 8N>aICUyژ$m;x[) haaEؙqyn޲I\9r\`oY8}qB5qdt֫%vˣZێZ6=jA.ɶE?i?Z-T j\AQߙ3Ⱥi({; $ɪ%<ܝ3wRҮ'a@~ ,>ӝHⰚ]:.(Q2bsiK2٪hSxcTySVgU8 74CI-=䮋"|WOrjs=t-&ABw!Y(>(-ڥӭ XtY#ݙK5Ƙ00BOR ;.U=hϱ]U-֟8Fl>/i8ezHa?-6ʗԪBP*5(O/#@9#hjs0׏%V.G'fؠvHdf؈\=ϊTa]tbM4a@!az!a[{f:X1T1 - R B(g 2y } 4>u0tN/H3u*(e4 x35YjY.'\9N1VF7YHȔG2R2!L#v j>Ekf!`\VYa\5t팡Bn0dh$kPRΰUls1n_?G> h`֞4 AU%#Faj?m#{IDwfθqfYu"[(Ay".Y5 t` v(ê$QY䰜{Q sMvVv;ֶ*vZ4UaKU@ 4d D6|IWL1DC)IZKcz]6~)!Jg]p9&ȋ>sWnS b:TWrR|t][&bj5)SoQ24y;)zHUǔ#H7nTTZ,6 5#dch:$. BZck=w3?ԇ /|g0p0Ǎ{jiM >VY-YNqg(vAiX1V l8NM} oI>1cݘA.r 2[]'a/K7f9 8+6T?%VCʬ)̟DhxD,L4FoJe#7Uq6,m\*ul(|-8+:*8X<[L|92J5VNVl6uTSeV&2R A%v9cc ~eϴ~@hGGu+u6yz]A0;RB%BP`2dzʭ}wk*u˚Ck{m.9sɇ>|f,#)9楁j+KۈowQ2蘆ܫB{}dJ^H:T Aeŏ@ܖnM|^+'xCC_oS|"qގH(#s.I [!]iW4zUV2 ɏ o.:;%F͓>ҷ CI})Dz,b)HzgIfO5%oM#IEuJzI2!L*Hr wp%x~kЗ0u#jNqjv8pnh6:]FNƚnCo:fFZ@Q;M7mJ 땅 "ϘLa{"81h@|in!9i}ſCV8Pe6#y5FGRU3\2)wCcrt*d(~Vh n ƬG着]SP<үs| #X)Y޼'|Ŗ'qoh[buƣjSE)V36iֳsὁ,[%c.<! miqHg_1`8E^2\G9I]qUZ,- >FߒR"e`vK˦UFg[[\bcFM!Fol¨K+"Lо &.PݪݡST 6’VcyKiA6ຨ 7oUt/a`}! /qӪ1c2L_"֥9?gb|LGڇ5j1ߨslp6vv4 v6ҡjǷW<d5xr~' i`NzQh=vrNsxU6L<>"hL%\W?y[apDxmT$j>c,q0aˇ`6'0ږ+KB.ˑh8)nrR]8ٔ(Kq:l-,v n?H5kz3;d`kK\+LA,*(`E,^'J3l KbѤmK\_7:UNB2dJzڕV籬&]Eщ JxM߬}̡o+uxޞ&uc/;Q8i12- %׷Vr zf`Mrd\ьh0cjfOǦ1&/{ at2rV*,cd|JS"|ޟeԐzT^Vs %n9jU"lJ~I2Ȥ;є܆ c')$~F~4R Od|d}TF jjIM96c%v)8<I| E@sR[V(!QW!W:iR(K9GB.|lY@ZfT5 Rԉ_N.LѲQ̋iKoä.Ro}윀RreiͫWoQqV-Ȼ [ I(#`qogIKJg^Xr 2x˪/ΜI5wyoq #>qbV5 =h/_+v^,%.1:RHzr<"< mxrL>O(NOd=Ǿ)Ehicy@21ze EW| yh]1Z#lׁ0_:# !}k"7i,(2G'Q1tzһ{G–HYYf^E0xH\_1yޢ]f۲M/ Oz<`Jd f1ߴrˆ4KЪoK\\-E rI'^`"[!=89cf};IecN'^!T 9+IԂw\>=ole(陬P%+ Ѓ2AD+LԺ|>Wˣ~ZT۠9$t`l im#mAoj{"hqDxx珐j3]MWEQ׻˕=!d>6^8!Ks[CRCLĦDԂBm(1*sՅtTP?NP>PW̗@0AXxn&Q{?Iܡ++3>H?³kϢ8cu:9TJeZ:LVK[e67nNӯr4^]_AhkR6 1ԧHm YJms+yS7ujfbFJ=&xj/Z@RF,Bv ϦkYigC5"@bgLCWz ֺ+9* /vo f9B"x '|I'&S4MX g;{ AN-  C9Ph :EAm'?x)SC, %bJƬsÆd61r hɖQ=̋$K2WnI&͸h^#o~*ő_A9Hc5B +n'OUNzVaQ4@{,H(KF'C +7AKM)]ɬ8[xR>MerܥI~oa>0hZi,_n|՜'$Ҭ *+t ƞơS6 024AG1k0,6͡m̀yjN!QX=(=M[aw]u 丣Pu( Gr565_PΡ'=ug[wh•7P 3x>B=G+\=[4Z|" R(#?z~g_'{igrQqpm{(/eW< jMg70qⓅ4*2}#Vܹa!RÎIe Gys'*η4+gǜF_hi#%آ{eߝs qb]M4줫Sz&y O[9{1pm 8y?m=Cfd#?MQ@6Ƀ/,`ߏ@.-e(tGT.,sttiH#9 eKr@vWTa4t|Azhs|7:6s\\Bܬ s қIpsZ{; {n_.ξ #XEo"kb/C+ʞiR%XnvOFR,s7=ٱeg|S> MD*4ʘG|lD}\/-MUL,$9VJƏqs@N׈|vKH" i> fҕD%Yܺ9Z΂vRԿY^2Vžf΂h&^t@N =h*XOgsKѳȌw-@s ScLQU|_!KR`')]4lK~IT hHkTܾ<؇]7VtcT|p\lPF {ٳ&Y6r sn5-]f>0ФI`޳l~rg,0UG5> TJkEPr¹LDuY(> g+ZR6&x 'Orf`LK)껒"l 5ENH M=ƅR꺝Šp}nyW>}ޤHje<3n "dr2𐨷ð(\5}&I[Qq=wvR~_G-zI@;ӊ)F?-Cys4BypКڨrJs6:T+ycHC.Du'z n硤5nq{^TôGN_ )d!Q`Ӈ[_> Iw嗿:D;GXsm{8ኇ"`ZCS]=ɀ>?4΁=XHV'+ԱBS54wϳifV⓶ҩmu3EBwЇ]zuj&/VH|7Οm0$>r}K){%o^FkP2FawJ]+_Vң !sUʓqHK:<(F n1+7{*I;8~1Јfr55CսR{'\H0yqϙNz5LNִro Z߽q%9ԡIޕ,.T7[sшINA˟W"aҹ˟Wfp-{vD2g CVWx08He79FGS94CS!v3eƄIzL˘3oS34X,aܑAr{0t8򻰨*,׮TV\m؍])ۚb]zz><8D@~O1Pa[^ ={gg_0 /T„8DL*6"`k @K5bqQYQñs);;^vY䯄 ̀Ckks(b2)t5e`^E&i8Xq̮Fp> -tܥj{ؗ${'GouP kOX~F63j%qi?aZ; 7T󑌇S2/ɫDq4-q K JZ>uH jnK_Zihkh>\,('P~*6tG>IjRjO -R-J6={e`c p6߲%a9ۑ\"m~/kvKJB >Kـާo(OԽ. %0`Y38 }OkZ *2߹I/2;Tda0+vwn0t](9 Qw=a\]&ql*@ %_~S8=d;Xb~n9\@ܻ(cV|6z(BNBAn={4W7l9οDˉu,`m{u^ըw%N}if}QV'ĄEHte@;8'cqfgб6Cdv Mo69th'|QkeP~xFZG帽F0PҘQmOslf΃OMuE~b{!0H2!8ԗ6^27ڎv2k,ݻ%{r`2ǟC͆"HT 04Fr|gf iAHR6_C;F阼m }>$ZC&Yqaϙ8Tm Ull^6寲];oOܮ`$eH[9Y:(^k^d<})Xx)spm|kn#n>!dɉ7<'s ٩Xm^éDQ5зF=d@$3voqoQ^n 9U:Ann)SSren[(zu!-x}6^!ɗ(mtH xC4/{U59,s gJB-ݿWaW?)*hpȒRhb:AdΡ7 .\d;Q}' zQ:S_~#dYxv9K3Ԗ7I5RaMs \شUՋ-ʡMlTvו.Xb ͽ~yyv:sA  _7'؊ mc.NfnZb4NvnUCӒKS.I1>.2 ay>q8[7gJ룴VskCP3 gG,b&5EμJwxcW5]uHv\fXoۃxz1()R :wBtB4?k֒.@mQ_TlJu/S`z;,kH\j,IIcy_gIK+0 'gX9]js|}57xn@,=ef.`#u2OtǔR\>]~VmlD1/M=57mކij$}]ϭ+X% H;-PŃm*p˷UÇ] =doB;!\mbU5eQ6]bWcۀ9+]Qp~'cر̱y yp 9o~ lMZTW4r-kg2Q4F^j~2Le0 g X ~c4aKBIb$5a-zQcXd(dl1Mh<-0=hslڬYêF|TmrLPLR\ޱ"V^>.mu+tmEyaK&s2&S\?aPaǂ5mR [4mp3UyH:Mm  n3tXNXr`RI~ܤF53_4!}c;ȋ_Uৎ_c'Ϥ{fTQtgDE=þMt\q.F1EYTAm:tuN{D n!aN:i#ipdS>JR`2:kXNkTXe/!bY9Ld)ws'FdHިl_QNaU @ð NϺof2kg:؁f0rB -|Ƙ)r@BX] gO!%p&3,S) ]jͥ:o{ۥz7!_jK~b`4O4Ĝ#g 7! 쌙 *rKBͳ{|n3AgK4>hRиox>YCk u`~L&mh .<ҟmceר+IP^1fqDPȇ+\|j?yzP_G8q)t{:,T# repSDx:NjP ^81<_WG}H 5C5IWwҺ9? 9 A q*ycmٶj05%ޒǚ6[em㛖S}6~sv2w,YVI8.4_|h|$vMsBvH~e|EMqJ[V¤ؿ(pbO:lX4 m̱u5_ƂNTG ջe뼿|;cqBt*^>id{+z5qC$S4{LB+|A-jS; Hv4FIr}Kn*5e>I=QC߯Aκ)H1U+j=ApÒolnFlj- C~Z$:jE`r6!S.͓N>%=bmhR [TP QW8QoI0,'wŨu#,>kڜ.ONר/q.xP79;/!R@E3jd-)]kq\-'yPCWT9(7vvp`Vd5M%ZQPxY.hg4؟*qaHXO8ְ4b@+%J ̒h@Sn$"E]Q3?)9{N;('(ׄ}v5xjly zSQ:4t!3 嗨`gsy8(^Ng3NuD |T5FG8uZ/oBB18D^m&~Õ*SGvyb`fm$krG0 N+zQVEK~&ZyN9(;*0wc7\f9sh6nrhV>]̇2|ӄuTĤچk> l7pYY:&[z-Oi4"JlL-73/njqPvM>a&`M6dmt н]N_.wqјP'ϧ\jNS-TwF> u,oz[h['xtj57ÏI{SA 69vpq&6碶&GvΝuy 8pQ(s*2pEB mt`ky?±O}O~_GVrd9t}-Gz^l~&T1$+WY~ xL^WQ@L_/0oa"I!/3]R@sGhܭ?Hc>7lMֳ|̰)y]TwtXbckHJ}*)]0[ǿ񂘊@k|`Oc*]"\wkD`K{&zm"&9z/7ܼy}Xk:gYݴ#Pb~'I4)AyNDb ڻItJ8_hz"C%{GJjj{i㙾XTO b_Or jȮIz=(5]MfKYidj"dS2pnZqܷ io9,ѝ'kVa"d`%CWiTUa{r4tO}U[z:ݗSԟ5Ĥ4NuǑS锅U#nL_+2ޟQNVX]I ɬ*jOm̨>nw5U5ˇwթmKT4^Z=>4,9Lq,\sTlDt؊}"}0{d|zEJ7uݟ಻Z)9ȟ 0͖(%Bjڦ͈ڮ!.;^<%ݹp=plCQmOSavPI@6=gaK22QSIŠXj!ϝKq?AMvYa|ɝ`"=bw(Р6+$q͝_ۺZ-2Ӝ{\rgHp&ޖ-S7/Eg{ViNM뗦n5k&Y)Tʾ"jb՚iI}WTa8 Z -PR8&:\JciBqQE C9(ūf)%]ݝpݭpla=xi7ۆ_SX?{ɿk|}KZ~d㝄~OzQ}Uz~=Dm "U:+̼e؟L w mM(*zл"B录(Ow)NDD^ g_&i:נB-.pV2goN\ 7~Mun# K[V*F޾jJV˕jRҘm;i5]u['j/kFtV})XNef91d i$ޖ#U]qNkV %z+-KG{Dlx-%MwjH6xf} ʈ_ FPLrlG m҄} Tha+3Kmŝb5s~#v"ߊ R.LB)m(',1\"MOh*qԔJBf- FQȴΏTl8fei[2\8Mi"գB$L®kUwk:Bӈ/J4~K2߲{((ux3^򚷼pAg{+fX5 y\]%𿮹ү;IGWgX1*s\_,`  #gb. CW[RHxu؁=%"Ś}H!G=Mڒ9Ls} cj-ȹC$ewG,pT`@=r$eBƶd^]>dy1Ҷϲڇ奲N|(0Hq-[|/9թh /޴Z$0ʊ(KBc!Ԑb ]>.E|PNMTHOvV"HK]{:u?a5M"Òe9J1Q־8E2;]2Kw-1q7LFSE=FMoٓX/qեs^HH׏Ѐa^hxHioILߤ̞7+~5 /J_I= >dw١0wזtxƓ \˲0w?I["yܵa0eʌ>c=<۽o}Dxΐc^$j{?F%JJD4eh+:k(N莍΍Lz#z #axʴF%>x03kq0hHͪ1q/K Կn?hf5Lc@!1Q8!C},q0hHLtNx p[83\%ܟ6iP h=)T"#;Ed`C=*:8JtGi'*`^sawu~lx]E|F]sFh[kG)uUfԵH=#dW"?+s_^6$I+g? MNm- &CFA~Kb ,]DҋY%Sod>ʂ#_Vfjn=ۺ}kɦxDQƹC9; #U5eF>B^N@R/Q'Vn46Aݔы6`| g%s\J4׍A|_Flౖ?e}Ȧ/RGTg=q0}ۦֺ|6o)(+ӦnV?@}>~v#??0MyOs 7a˰Y .M@?ٝ4 *h X6VU+ 3Gm\ήCCe}>ygeET)gJvnj;(sg;IarWݒǑ/;M{Ȑz j+7x'ύ6s NnZ `pNL܃N hQ*^iz8'7-aY?nfԙ?;u3vM#<^!ihT<1xM;J}=gA.4x^σ;mpBG G8GpsgLpCVϴU% y9>c:X_L?ZZon(q<@l[M{喂A=3l/w.qxs;~ԿM ;ĆY^?̐ttk$`<&_t㑸~B:>R^ki"1T j{8ΖZ)l D=\~/Bh蜟RߘYf (k~XrZ*D7{aAg%~iys &$ɿ yn͖%nJS|tO{%?„GqDolG!$l4GS-e-R&_l '>a J fb.ԳKMVuuj.=bа9#DƏ_AZ0_Nr:tdth̚!KϜa;9J=-Bag 3­hk̿%笞9MfG;+oEesLm 㚥aGC4=ؽ`VmWϝ$&ɚg,S)gU,1mωp6hL2[ݼǀAS`Nˁ/,_LQ:17Ky5xyo\tas{O =9e;}|h{ebw$geq;s:$v\[<,g`=w6[ T3f,V64$KG7=o|$Y}kj:zB]RqF8IR.Mtȟ;61eePOQ}15ҹ;*'=﫧{wxTdr|e \T\JxamԼL'z4OsH7Zۚ]yĨ+V/3O\+0dE}б\6m$k~jU}ZVEg%M'B[ıGEk|K`1tyK@-e ;׿9*Hf%Nhiz~lƾeѹ-{ۣ]lQUyt =8ʧ^Df5!s$_tjjiFR)w.GW與xŎKnrQ!z09|4T ͢kFAluvקPZƍF2*kҹܑYDЈEp%?ė~- F`>'@-+}Akz)*㈊71 )[d H>A&Rr13 LL 6".>4l饏5/t ,DGhAkGJ}FX* ($vu,}e]Tл*$g_UR~ڀi*|k+5%A׵ͅn"ePzX0Ri f5!$.RpF"1GЫg/6VRfىޡtwJC#@RdTffH|kR20ba!93kyEM;g̥ 57/ fhWVg{kF#+Q]]#O+rj-{[cw /%6Z#7XN~xCxXшK{= DW+0o8k9S#nc+!%vQ!v蠰x+`$R=1 eR Y٤BCHZ%NlDؽ`}4p(8JGkwP[SF=-Tŝ(VtX*ϙiZZ.K'~Er}])q4O8ņR n$R:"9\L$ИHU$(LdRgGڃޢ^7jR!jYS"X3LoRR ء=f qK,:5rx1eю ܋#b  Zb =䍇EZj.h^P#,_rR rʠP#u1) L_Xm^Zֳ4N(!ݖHs,$)RO5uWjF* oo^CL5D`dQcXk %q9E$'n#HepѰ.U0*q FU;s^f {LE^1Kj=^BeMB#4{G;EO+a!J7^Q>ZZRp.t¸N(f/qbP+@ĘW_ q"|T|L1D,K&'RVp ʭ`5A+Nk;7-1֪D֠zJ(0\AF ۀZ\f"?x#L?HPI֞`(Oc3d3tSLىf|)2`&n myC/Y+G{5vţxLFnҖYDyd 8"/VA,Z auեDud+1;p<fS/;K#4IzE).CnIb)咆@񪕒+I)h m([ B"iz)Ġ|*`b+r7`tNe8&2Muɦ& aOXsF0!] P^JjH#A*L>@)c\,OX5PX@ٝ@ԣG" $ʀpq/YjLtΚ|W ֽPm9;W0?]qLy.]\o盧W fko,*9vgx}'/a@2ဆ7Lf׮] T$WŒu:3ޙI^r6IiUH'ƥw05x\2*JET/"2Ƀb[\¾ǻĖxfM|H$M*Fo|G'XPoaډ2 r#ᦺ"M+K; ˩@#tص*b2A&^NrVhAl_I nq!=5z8 5bL(OѫszT4ᵠDžpZ1:,cpٹ9[,׻(_%c}eNH&*zJk 6nsiC#o)m$ 2Bl U#VX5!)w&` ;gTmPEgZFVffdK"czZy O BA V&z.+۲׺rTfG[$eTȜYkZ>I7v'ڔ7j-@`7a 8Ek@%T[OJ}6̠ETEW*x4O! sEAJYCdğY5Yk$Q}DMkXa"0<=KϵJR zedL9VYq;CyM)ێg}r\a唕[Kqh5a8t.ʬ =Cٍr[ԻYr .Sh"ޣg&xTx?:&9lsWPh3B!.̮I9mǰ4irIf47# ֠j\B%.>uԺZ CyS zv;Y%|7N 7訕c%U]`zMStK58!Zɻ]E߾|Nn3fBkb`4xX5|mj^Y3uQY(Ȩ1)| q=A&i"9v}g"/WENFZK0aoj!v(Q̎BqmUqS3]UAVG`aK]y%ҙ\yπӽ]>\WY?Kĩ /N-Bs(1'y9,MVJ&4M&Hlh4HˁQÑvJaTbKK&H(iߝC˪ GAڭȖ@BE-R~v+3QDTVFcR"s7*CYK0 'GG&j|FSpbtNjR)Agv:b ɕҲs֞nz* 4 K'aI"LkEFH8fXޝr?z+%u'yZz5YS*N{~B5FRQkO NL9=B-\,RqRs M q:#j*k> n (DQLwPu7D6u+c]tmWpA_}ȑ=uM.u\ 䔳Sҗ!JFr%GwsX:Ax$NӦY/2xfkB$ǘ?n#tQJiwk2d5]ElW&DWh$.ko_ [~A,(Է~͝|90Z:x^1}lL?^]61 "ye" {ӁU{Ţj'zqlj9n1!%Z:z + x3ؚ0=1b)S,F=*șO[L,1ya\jΆXhCɅd^̐m>q#{:=!"N{!AhIfNZ_Oˀ ڞ:a@_aL{MH5[:w d!Iwz I7(茌ŗΜl43AK! ,()4B ,̴ٴj@ދ>=`k :X5D)R@; ŧ1 0S<apF)9EԳ8mxtdw`->.b}t FVp:Iw6fGg꡼M l=X '-e eV衡QMa_nf|Ԙ%ߌ{&Od7O^s8Y!v6-Gp7Yσ,$o=*ih /Tg!؝-$IF. [O~.Hʼn݃w@e֭E^Jf'ZK9b1j$V̭l X~Dĕ ڿЖ|5ݭ O uĝbm<{>&TA+1 2~Ǔ O~=>wJ=rЁ64 `#ʴRۙ"?K>b5l6ֺzE˻fj˴ (Gߩ@+[@pT ̈́I9JȩFN0d %Ѱ"R@\d1s"~[Ό@^w*zg0!o"$|DHx9:/ T|rQN0r$4T9Tyjg|rZZۉT_%ցLgerq \kŮe3?TuE:1~y|r8FږКl>Pې5/e\G-݊hvͺ)Π_m-lk;#Ёt|4m =[ԉ x2K1KS ޜRt yD09kfKF;}y#3>VM|_q)9w:K>SK]dM{1+o>\iV4×~Y}-ºY,#1܊ oGM셅\Of#jڧ*E0Lv.B.*9cB8j]|qP+2]LN$Ƹ< {t̹.,qڡ1P1 :E^ӗ55Dfx؈TG~)NZ ,Ia[fn)|x5r1ZLeh< cwT^@s((~^< g qI'3֜;Y E[f+缆n iU/J]sy'%Vݥ)zs+F@{5@{@f5 S+J@[[$z4V՛ ̐d[đp&<Mߝ$5Ĕ<< %6.1y 3~II)  1beSGcjT "߆HC%tCƙLCX: aϮ1.w/f=K3ݶQ,O|</xF_@D(#F +~D( -zI|kT*8'8I wSʃ4H_Qʌf){40ẆXIMqpSaYPF/9`ig@]Џe-nyLo]b 1 @$ @ A1mIT 'HJG@$:Χ3iDDDDq8h m%7֛bFnS޷Ш'baBUA2,lf(T'mH:IAVQ%x9#!Sxr2[4%937Iem:3`Ȉ1YgE= <8xBʌ/A1`؜k["DXd@lx&\H +-K_ϐ+㪕 '| E)<+ss83Sq : 7jZ"+ &eH3g(;:6:v Vg&f1×Ĥe@(-n<J,Z=É 2lj^oђ(zȿ_1כXk+ݚrh.d": r)XmvYQ5}a yGLib1O& 0P0b 놛ns}8@/:d(AcpxL &YUHC{gK;+Pb3諒ac $J L(F"*,J+/( 0L<=^Rjv/ L(F"xuwwwwwwwww?zLifN`W7y6I$I$I*\=,ˀ#?f8E+=+y JrP0LK`g4)%RJ)ZkTzc5>K|8ڮϴg۶m۶mvXt$I$Id_iGM`؝DIAPgT)RJ)RJ)cch $I$I$T$I$I{N/ 4o_wufR{DIAPg pܕ1_s0xao/w9V}rgcsD"}߾}u~<`0XR`0{K̗pTPPdP:`)ucyy 'bх+Q$ifp$Dj )uxĔKm#u`0 `0DOD8$2J$3,7-6֫?ΈT]:#5 pmdGNcp$&R2 9%QLb_XGJl[x8bjuc>D/pI!QԈ"-0<̈́D^s\E*-kV٭U;oZ%onsFʴ}VL$"fI2P'huKzKX h c6qnbKrmkwIJf B+Ħ.ǻUeqe lk09chXnp> }=ȟ_ξ=ЎFC_cCvz{s_B$E}}}Nz355.8Έ{Ç ŎA]u3+ }56?1sO}цV)06}ܢ=ZK2Xύձ)kg>:[sk ӽ VȞ 9)N뎟ub=zmq^vBƾD9>{u*_ۓ:SN;ƬRp^v/|f~wCD$2?ޡiKu^B&L 0)`bbbbm5R )R8p^Q?-3㇙/}ZAW1ϵ~c2\}矻~ʹ|4BOVֺJirdtǫԂ۸e|-ZZ:rKPY&e,.("nW/`0ZbR2u_ϭo"&BW_fM;:a f4%c#O!q|!5hs@@~s჋&Cҝ6I$I$vFW$54LJ]ֶPRg/n:_ //Gh^~0pE>+ &LUdN<-DhKqzzFg֍4/#2ŭ~Z P4`pQ2.+5z{2̧І#b8A ˙gӗB7@0b8Ͱ/nV;=V0-09bMln衷7#5ؾ;>uo|;P^¸E!4ǀ%1QҸ MMYÉ\G%YQ50-&tm`phxA&ڏQsYLAIyH ҡ 2 F]x#HX &x)Imܲ{Cl݋BB{$403z{ \fU!ͬ,V{D͵nD""#dDf3? fڜ=u3NUկXjO,vPL)k73g{_ٞZ ̣mZXV6`d+0$+lB7k?Mҡ2XBc)IT-8Q`ab,׭@ ʿVLٚ2KS8^%9PaBVLQ?֔Y(Ɂ ʴ/1Q<Շ(̫ڼ)D(@r Jr)aBV oP=_=3UUUUUUUUUUU7[9( 3q#$I)PE4MӖ0  >VP(i8 0gj&WU!(~-RRN~G\Q?L˺۷#l``[2sb踪(&JK?qo5Ws}n_PQy}W")^I]ZOjy%Q{v^1Ioh1C8s)$d\z `Ϫ?҂iH"):y;`q k3jYj yYXtEzW%YQ5aBv Jj"L( Ӳsқ~"s`.LOd.. \4h Gn4Bbh!C8]Ut 2*g*_JbBTJ ^R{4[6tk̯̮^հpUUUUUUUUUUUUUUUUUUUUUUUUU 0C~\mp-#P$m9<ܴFUPo*o`Ԗ^} Ӛ[ OVס/$zdϵ]+On"+)@r@4cT1c NPaN{SX9'2\FcgZY ƁDIJC&iΈM!)أJ/ L(F]H$I$I 8~mRj([aB6zk0#G̱O}ExHDDDDDDDDDDDUUUUUUUUUU @ I$I$IJ$I$Il۶m۶mƁ OAO$I$Im۶m۶mVs9s9s3333333333#I$I$IJ$I$IZk~Che Ja @tG%Te+\TiRt |ƮgӟYyLdM^+5\L%26IDlYk`~K&8  IO:R:{3ƪaFV:vlL̀e[J=%(e4ɐ~zz՗f0%oRxVt&k#'{՚S/NYod]r8rb3 Җ+] SUWk}Gz:B#f.%)Ujټh-+gjpkgO F=…`vS ĆT\"3Yi=#$t ׇ?-S=fJ[80~1BKwO &C9J-:v~XA|}g'K .%v{mq{{x8 #;,/əA$olfY_# @5;*C:5!ֶlXÓsu.)?\9 ҂y% Ak17ͭ|ċ\mm"mv-wN-}OVOIXcC q+ ՌRLעfֳNs;|NgN# p.iUaz[4{y(-pr {˭fLNVҧJh3'BYZOXcvfA_Nzm6"*Ji؜Jxk'eí{ S/SK@Lңh⿀x7'E+fd_bᬇjt4\S~MuI eD9tCNz"eËVYԥsc{M>:ٍIl&X!>X%)^j`hEКzrId}#.d\AF؟r0f520!K23/8^s YCEoMV.-.8oXI1 p7XPT9&9ĵf[LT#> t&29i GFLYZTRy qsmSË^eRHՉ=azEB-|I`AmJ,BXlU;rWM|+W 4%˸4*)O%}oXγǽوBEQ #A\BM:9RR=rM!d]wY?Бew~sEmȧmӛOSABDr-ʣhF/ N=00 L"YZz"@L)a<[O] v\Gm1cAġ?2ʝH!.&.zZ1H]BlqdxRCҤ]Lf)1:knԲ5LV6]z5eܾ9v/ )Y쾇s+OUT^uW5Нj뻇ap__mk{;کo#5ho{>O}n?ǟ/M6t36|_B-=(0k8崣l O٠._!mNj!JPgftCSQ+jZZcv7GZ@ga'ieU7m4/fz?@FP 'HfXDIVTM7Lv\(N,/ʪnڮi^m?Ov֛n8Ηx"ܴ]?2.ƺɇrzB7X2zo/lŷM,z=tA1 )aIn::OfyQVuv0NZ7ԕ6+ w*xx$ "L cT&W(Uj2qy5dfy̼uzvqus'5Z^DIVTxAdEʕn5| lxe Fg0YlȂs_ UV+x[;{u:# $i%H DB;8:9PZtpy|P$HerRhu4aNRnGXH"S4:ÕH, e-RNo0̊,]"=0M`v勅O@"2r J05 -=f-L, oصjЮS.0! )a9^%0e& (4` &  Hˮ0JZ5ә[-ml vN._WٕroPD1X@$)T"i\\[~g3,vHw%Rv;h2[}(N\Ģצҏ!A )a9U&j;.YQ5w/+KW6vN.naM/o`V7 wZ%YQ ^n{KR4r J¿Ocv8>~# "!ApL"YX!PD1X@$)Td9\_ %R\T5Z`4-V6vN.nM>( XH DBLBX"JZ Fb]\=(a9^%YQ50-q=?8I(i~yY8{d(J·g}M-fע /L~eMn5W @ NzKdy,z=t=Z`ǣtN/E3, $+rlwѲ_@FP 'HfXDIVTM7LˆNfyQV L p:a=Kr9DzF|t~8  W[JwUW 寂Wƞ,cҾJ-ʫ̘לa1RM T!S#EݖTlsܤ'^ B*kC:QDNe;^«#IӁaޗUhJ.Hv<9"ǁoۢb+iB&B:Rs:c1 7|$U R.s9B!BH9܃Ԩ|rN z ˓mu P I .UJoyf;҈<̿گE?٭'(".(QT3׽%rR m%Wo+kp JbvB[י#I9Aݛ 7'ϨYe cKrȅTڲSB:n Bjv\J)V!RERJ)9vuTQ=}1ie8n[.Җ_2@.ҖRJ)Ǥ5c1kkc "MA.Wj7!&J"ؓJMjODg(dtF꘴MphV9^ysFirZf0\E.dLr fdha/{z'OsIx= 3~ slxq8?=żZoh M߮Byj?O}~TW6Hl{6UvM\(Ttf  e^7yLBXv0rKnƺipizgqOvc۶mpo)YT py)lb\jۍΨ".^ǐ7fC~`ߦo}9Gk5띥!JKC.XgϘ8zuIBEE-Bdy7\ h D2LBܩ\jM:zjz MlF̂}W\jRU Η*葠gyǔkLhcr!.&I\ m@%;iY'TfQ,'sR.!}?HZ;`I~>>_;0؏B1PT@Å\Hui'H)J)RJiZks~{O{VecEФ*ySxl8[ΓVؼHj VbQ\ns4-^vno_@FNH0OW)]բB* _ @8B/QPj ~NӻCYc 0 c/,ll5i2ӹۜC<e3~I3(S9fJEP[֖X"""""""!v[!OEH,,%_1e4AHf ,dބ{]I& V΃vdUv"C}o#匃!m3ytHAX)֑ы/ 'br7mW%*G<Қg79__o&+IWmvgk~ vOGDg]xK:h23`q^8tx*}mNvѴaɌ}'KҦG_Uڞp]5H*1+Ml%l$._A>dwJ1KpC+t7<˅gPgǺΘ\"lC(1PA4];ĨS5 !6BKs9s!B!RJ)TJ)RJkZJ"J)RJc1@DDDDs9\!_D 맜wHo@aB+b=R/5FScG#V2ge#+;qEg}!w\&EYt__}jS.ę>|묒WǏJdwUYG!S)&Q0 Ak+dz{aMB3?l?H̓J+&mu`Ζ}u:\UY[ǥp󳠴ܙEZ 1Rk96[AM#emcISaFzi*& %[F}ټ"~,6=OyxFT|4| UӺ~>nk1NF,Iw4Hۛ)t8^ LuLi M6Id0 V4D ٌeTZU  |^ӧKʞ)s5Hp_Ld_OұtOY0h\9G4ѺX4.iC>:G zZ)? /8j }-0ctEI~+O:"1"}}^Laܞ7y4c3Ksqwy3|xg}Q@K]"`fQU8 a_Ca&.9Jt/ёѸaO˼L)7_1Q(DlZZ%e=9ʏ]TXfH,|\?:wT\8LSbWdٵ^Z,a&zɇ1'/%6f侣@ylhI2 g=e/ݮiPma*is7SCEL}偸]ͺyoQD}Sgps8'SC{zl;kpŎaTgYk1,ΐh; `7lz5U\KATaFq,;Qf(\V>-_0YLظ`^}tW<qݧm {ZR`cc z󰩓hl_F*u{!X~rDv*j ~{)!UK@il75|z_ @z>9d` 3Yd7Dh?:ˮ7zduޘ~voҫSeo},3OPOxSwk<ýM' ʀ_GuZ-&J H l:@J)k~Nx~qjyowvE0pbNi,@!a W썗i\ϥԳGP8Uequ ީu~Ɲ}.l} y"2"݀_T;@TANo;2U[xQXFzk11Kd5CB.{y'" a-*,:SB5($ްoWTe?`ۥYcBP)ģ}T1Mfwxt8_k=|-Y54adrXy\ +م.@dٳ}NY9P7t V{su?T drw G`xt?xi*sǂQp8iS,Oj aL sFcTZq" _5&vWNw^/ujdfVz6Qսϣfd4]AQ0(KU,L e/avIT8Pu'L@(h!nR= Y4<o/.vG=1)C|ڈ(p(yQ®ͱk|Zhՙ;rبYl%+I6F_n} hעg=27Z_N.v܊{I!7PYTt-8~rS=ϸI4Q)tX5bDZxGNa' ŵ&Qt}@1\St77|_<~vhx<]>F5]q2 ^<.qW7bDԙ::~c~aذS75ظX㿗[*@>S >0uj6f;w׿2Z mqȸ嬖.WῂVu7_cn\q7ϾyEmεtݑ Y׎ڞk{wv=هf :qn溧f6~jy<8T3[>3u=4nzAw˼7m/v}1^,xk;op,xｴc^ˣz`K}o>罹NYv2:׭eEDc"b>\fY.nōh+wvL?dxR*^>*&uoW -XX[<*ҸY:#QH'.'G1fcF-QoɂrqF$}џdA9[ܽX@a dp#ahcaLI0< SQ&MQqqxJ τ`< sx<8g_W侸Wa]C|">;37YwTz2;qbC)!.du\&tǝsbMsWq(F|j+Tqs:q1Ff^y8P7218T|aL0Yl|R6΀0 f30wN㻰s߃>2X!4X685>/`d\/~7~%&7_&ȖEY *I'S~_a'&.a}A8cI0Cd)Ȃlȁ\i8ypJf*P#Jj!*htd))0A<4z^+Soo~ݢix4-MClS2&ho3 ">8%E JtQrAєNk,dxOrx_~i" wJ^2 + #e!Ez 嫆eay0U>gxD.3yWF QQd0j6G.=1o1Ɋثe0|"3`ܛ!|$&"&MV⿓_zgG0Kw0B41 ).+b>wӜGpJ*Q[peW2Z1(˔nrhFh-Wk2Q+DS$ĚLj"$Rܗ>r݌ȵY& ݭ%aic,S+X8ΨC"s9Sz :xY+~1eJ4tG #Y\2}Mk;Bݸ4g-kXӬiֱuakXֱua mM(:^0aQkK0r,0 Yd,*}h劉Jwi͸jk8 X_z 6װq7A=eL1Kl3 {`t늋=t8 fȀ|2JW8dy-6,E^Cd̀VhB3t;+tp zC n`ݍ~ `۩۩۩ééééé6 `;쀟v. {`/p!8 G(48' 2dA6E ʼn ŲX@\v(p BTCjV`AHY0@@,I 4F@SЖZ@KHDH+erֲPifh )V6NT.p'tVz@O=` R.R.R,R,eYj]J `:<xG)xG)xG)?)x2y /  ؙ)oBXx>>ᚫP P P P P6s& w ~2RtVy+ݼnJ7o[tVy+ݼnJ7o[tVy+ݼnJ7o[tVy+ݼnJ7o[tVy+ݼnJ7oU dR E`b(28xbr' /ASDC Ă&4 ]xz  4'B\ WxwU&Kpy;._ȀZh3SCœ&>tͧ SBt.FF!P7)xW3hҁ砸WC߇?}3uW={гYfqY3K-3~W"0޲/eofד+~O:~h=f4 )r/pEdS  $coLNg<g.}>C}>;SSSvPvPvPvPvPvPSSSSSSSSևWR?寧*z1|:ӜH?o -.z||6|aE?_L?_,n+mg0Y>Xm6g볍lc}>.ϴ91s) 0SeV0 3bFvfAE7c4"Zh.HU\7Fh+3ФC܂VCѫkJϫ*=Jϫ2~WUwU]~WUwU]~WUqUz\WH'}+g]N͗4_n#w5;#&>!.eux5I\VwU]UzWUOQ5ST?/U`g(;J?q0 0 0 R`40&$ SAx7ȭ8`56Fmd56Vrt+9Jn%G[ r4urA:Q90~(5~+j-Fj-Fj72-|V?HS;5NS;5NS;5NS;5NS;5NS;5NS;5NS;UNSRT-~KRT-~KRT-RmT-~KRT-~KRT-~KRT-~KRT-~KRT-~KRT-~KRT-~KRT-~KRT-~KQTGQTGQTUipԨ[vknڭQU|/ZK#3ɮ̈U]㷥8݅^y5- a^v.ȕnG'b@<17=LVp\ /7L^L?Rb7=KcG7T5|+?;s\6jg}쒸crd6{;C>7{;#gt7{9߳^{scس,aҝ}J P*О*К;Y%% *H/߃#=g;ҷwo}f_O~}= }e`"TTav@chW5:*G #E!N ;{L֋!W/G 9J6J6J6O<g308W/CpQ8ipN@:d)ȂlȁreW+ c 3Aw<?z/TA5Qu q-8oܮ4F@Ss4ZB$B\v٫J+tǽuZNP_zB;O\!9a]>ᚫ` s_:ʱװQθTEoxla+l:e;쀟vo v `?p8 H` ȄSِ`p,C|S)s`"A1@,,b10Ľba,2tC wH1؛qM1 GxGf-7Lc `XixDQQĐX.LQ+9~,CbA'Hlgc.E 13br [tۀ{U:aJQ_{B/ Ҋ ⱾjC9+7qF0F 8`"L)+U"^ B-@ ~)JL 4FL MY8V Vľ0BY쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃쳃B,}0F0FA 10q0&D/˰HZV{>C'0FE?C1`cZŞhh{ { { { { { { { { {QsT6r222H Rq--T }^>/@/gr*J^.@/ crz*M\\\\!ݓ8i&f"idZS2+TCtvmģx1W+ NjjO&"n$n!tXNC5 YWmffsg?ٴ"'ȅ F0pM<{Hd?GLp$u/ 3~I_Rq$\* J¡p$* J‘p$) GJ‘p$) GJ‘p$Hا>4;Ҍp$' Iqp$' Iqp$' Iqp$'I$Zqu޻ \:<+OOq|Vd$t>= }[;gvә8sTgqlLwаYwfʟp8{d^CX.։:X'rub$։:ON$։:X'DbHu"N$։:X'DbHu"N$-ŇHIbHu"N$։:X'DbHu"N$։:X7Zu1u1u  ֘ZؘZؘZؘU ̮-gvO3Gɹ\,LrFn%EW3L`Ef&2,X' Z85N`X85N`mX9uN`X9uN`X9;kÝpg="w6;{;{;{;Kpgm"w&rgm!8$@CqH  !8$@CB8I f$3 3!"7g>aqL̫8/gQ3[& }[2BHOk9kf_TꦊuAzR/.:Y @<:{*hr7ÇQDt^k~҇]^C3}&s >0Is LF3}&656HՓn'0tvGM՛C{'<**Lz t>@ӟ:dxd2U)S]$Ʌdr!X@ނí:m=cȇ1Ø uxڎAScac}_ ѻd!|H&ɇd!|H&ɇd!|H&ɇd!Ya>.1o_ݯDk5~Mt ~6m@ۀot ~Aޓ̑dZ1?#EN4zVBO3&ID)rtȹf߳'链O~6/- *"]ȻN49cHG\Cnw;N{'I錄w;N{'I錄w;N{'I錄w;N{'Ie =)^G|^ x adX,=a擄 LeEw7qEN'Iw;NgF~=NJ8888888888888888888888888+erK;g~ݰ> p1Hp$!2dA6@.X4<8 P%)5ңBA7A7Eo)bSM"7Eop+|UOhVxX+< $RӻaxGxX+< kZawP'o"R¿QIunkƵ јnk7.WWJOW[UU^x&_Ņ.~L}#>Ÿ?aB굟g"3FŴ<'4~^U+7ќgg{[dF˿ǪUE~Lq;ןy&CzϮY(qTa&ȐVYwH+E+eW#uRXi9V<9XD[9*?EaKu'D 2W|arӸnmCwpB?pfӆi_/NDD%GoK޷D̛@\6Džrml\[]w"6 waq#Q妸8>O|=Lx f09,y0^yߕp/ A0C8dh[EXe)K*8ꊔ<3M= zq?=0|o !|=c2 ÈLugL#y< Rzt9`\Ӧ u6Dy{|=0 scu8`zGޓMKjz_\iJ2jZ.L[M#yδBcZ)MO!*yeL3K3e_rid+_F3ma+l`{f?/+`=~8#pAa*4qVy8 dLvgə8|\z 5,[q_DD1(y_yd|.W>+_6w3>?'2>?'2ɾLL9׸J1~*Ӎq\+_F EXRxRa+)P2̬!3kl!k}4F0FA 10q0&Da <0GaLǤ8<O O,xfb+&ɺb+&ɺb+&ɺb+&ɺb+&ɺb+&:Y"\d>2X1|S >'+u%`| alo[]v ;7a}A8ciImEOj9m8.E:OYYLSɴY"jߐ]dSW+ȦTM6ɎZayS׊kEԵ"ZuVD]+QjkEԵ"ZuVD]+Q׊k5Ե"ZuVC]+"[~1.b#SldLt!gl|%__Wm:w- _qG7w3w^̝+6|ņWȏ_){=L7D$_OYtĆ~bON' $?q'6$?Ol$dl$z?O's~bOl ?'6Ć~bOlI5~RT'I5~RT'I5~O?q'ā8~O?q'ā8~O?q'ā8~O~bOl ?'6Ć~bOl ?'6Ć~bOl ?'6Ć7~O?q'nč7~O?q'nč7~bO?'VĊX+~bO?'VĊX+~bO?)OJR?)OJR?)OJR?)OJR?)OJR?)OJR?OC nGjɰb|ZW/ƅJTU2ptfq5q3CwIq|\#5ҙ,Go7f-l8H6p 8H> v 5w 8H>ΐ~wHqt!wHqt!wH| o!-d̷2B[| o!-d̷2B[| o!-d̷2B[| o!md̷62F|o#md~9_N旓d~9_N旓d~9_N旓d~9_N旓d~9_N旓d~9_N旓d~ iMO/{GѿǢ+w춏S+}JF^/_<Qwu*\tg*.c#o%!TJURE*TQ*UTz hj4TnBC5BC51 hF^hF^h&jBFC5Pj4T hFC5Pj4T hFC5؉ib+DDqf鈿Vyu"A"|Oi",Y̋YD~FW#*kn|BCD Q?Y4 fx#-D B"o![~B-D B-D /"[-^,߳{|ςY= g,3{f|ό=3g3{f|ό=3g3{f|ό=3g3{;6 K FR;+CҵpD &%DaQyPyPyPyPyPyPyPyPyP_KV|Ɋ/Y%+dŗ_KV|Ɋ/Y%+dŗ_KV|Ɋ/Y%+dŗO:#>An[r+PV\'RC׏z2P{Q;Q;QW`/ @HԋJԉJԉ:Ӊd{7ޱpnÍwx^DiU(͉Ҝ(͉Ҝ(͉Ҝ(͉Ҝ(͉Ҝ(͍(͍(͍(͍(͍(͍(͍(͍(͍(͍(͍(͍(͍(UJV*QZ%JDi(ѝ{އTX>:̏(͏Q/4/J4J4J4J4J4J4J4J4J4J4J4/J4/J4/J4/J4/J4/J4/J4/J4/J4/J4/J4E1\*Vnk9ݠxmF]WUQuΤ+˙eMk֪^m?d+ň +R1}R(O'D B?!O'D B?!O'D B?!< ^(x(>83wa䠓ܻ@=:3?y"\䘋s].RR:|Gu8Yl}ArE9?9"\^ \䑋rC.rE!9"\䐋r);Ga#ahcaLI0< Sxtx m?O0fS0 kߏ6b k7NkKDO򡢳lXe(mI҆*Ѐ ????????????г;.GYx(U[=gª r'Imd;qF?nBרO2.F<*XZF5G^acPR.DQi\e?}fp,cp[(1=RzѢ9W="ꦡ4Tנ4PVJCYi(+ e4PV*CYe( e2UPV*CYe( e2UPV*CYe( e2UPV*CYe(eU U*PVʪ@Y(Zb_Kk}-%ľZb_Kk}-%ľZb_Kk}-%ľkLKEܿHkd _M!~!_~!_~!_%~!_~!_gٸ~6gٸ~6gٸ~6gٸ~6gٸ~6gٸ~6T(0,삷)KÿK0~CT*3󟉼uY6bduɋs]v@Px~ܗ\I\W_]SV\W:ĕp/ F~#swوgn=ޯ}ރ_@T@T@T@T?]xE /?1g_/gV'"?^=X00 "?t.T R\*Kp.T R\*Kp.T R\*Kp;b]츋w.vŎq;b]츋w.vŎq;b]츋wq.Ł8p]wq.Ł8p]wq.Ł8p]hx_s4JBi0xl nX¼(̋(ˋro??F:>9jd~5_r(Njr(Njr(Njr(Njr(Njr(Njr(Njr(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<(ǃr<( T*SrPNʩB9U(̯&=F~X`ݫ|fTY-| badj"*+*+*+*+*+*+*+*++++++++++++++QaFuOU::: USэjOd58V .tTêTVՑLBeT~FTNUSU>N :vb~VϊY1?+gb~VϊY1?+gb~VϊY1?+gԠSvjN کA;5h}xV-ڋUêbUGXhOVvV.$+J$+J$+JҤ. p1Hp҉^(ىNM$+5NT?KR' Oy!;ѱ;ѱ;ѱ;ѱ;ѱ;ѱ;ѱ;ѱ퉶3N vn{apa8Gq8頢hh䝞~ 8g~'ż(y\R]1UUijTXXipw4bKQf 3OaדudF 8}8 ͞f?0Ȓqr#3 +b $3b; 4u\+u mav2WQV2\(?3j݈Qa;s<(uhհAFh~r1+Qϕӌ HN} rj#)Э#cel3% V-VЅhqbXsrx+Fdt/#2b5#:#U0R)#E3Vc3mWCk,"FaETVIdEv"vV䘸xH-fla>*#mr8 5d"k +h\JX\Ü AD +&繲W67 |8x`OYg"+]E1 MG^vbaa[Y8wopp2#菬G YV3:Ȍh53ɌFk˘xf6QYc(60H(O`1f:k=*=Y}άҘxffF!f3 'sȽcJq%@=,'4pc`3^Dn 7L~ќu@K>-L|ws;;x!rsùb (*wFAT,HmiB#1YJ桒]d>*T/dgd>*/R|T2_8F B;X|\߮r}>}O8!.}aקJ2wɭ}9RN\3|kSCTE7UGUP}TEUGEQ}TD_"g}AQ|T3TPڹv!T/v>>΢#T=Bz>rC3zUOիACPA9T z%YTTTkZƧV|Y2z^*ч>*W}TF2ggȔ!3e)zFjʃЬӅP%=TIz@ Q%CTU2DQ!Ch܋CʨkLԿ1&FB!FaKmFA1|l-! T##3 ق3Z{*_Eo Y5R9Qoj/ #+PB.>dwB(JWVTU*OOQ%xQ%xQA,$JVN\e'e'NDjh""TDEF)Bc%%bVB#hF~kJkƊ$5_3!W""XYì:Vd+Y̊,fEJXVYQYUQY|%Jp׋ѧ]ws׻nw}>]KkVѤ&54IPѤ |/:~vN=x!p?qt{,S9ܕYѨWqMABTjbCl6 g(p2b0d>w;ud1wWsw]1wbNArq3/fO0̼2choS57zk 8xA1Btu6yDqa䎪*9r'%I wr"=38G,ڐ_cі;)N*D4NJ;p'PjKb}^g,k < Da($ ˍ%z; 19VRseAw#&~7A7A;a!&Uq)%.vǝq'eI1)N.KEf1[=, '#A.3zETF%YDk b{¿wU3gDr\e_p'%~T,(r1B%P,T UdUdUdUdUBPE,T UBD?B/-Nfn%h2>H4U]c7D4RK#;§#?G>QFTDOTh-%繳YH'z=>J$I;svֺh'DhZYK4f5Kq)gW#=l"j{E^-Z|s `5=韌:ID A]SO}_4ͨ#K7}yfQ7^f|l{=Bf[³<[_*]滘q%3y oёLAȎa9~VʬY뻛s?%`+2YH#1K.e F.]R4e }b!#:.('y xc#c<Ę'c͘>r+5U}=3m^a՛7FKsj$ G4(QhKpmȮWk|4>߂jɳxƕp3]-^\̣'{^{s$|<7.ro'9%ߜXASfF'Kn[V.KnU[Uy ( 48`p \q#$&%*zK5!p/ A0PHap O[0 R`40&$/W>&qo'٥"KZÿyg BAy, qwJyY,!Dߩhd:֒m.\b[!]p'"܅w"}f3da\kXRޅ%5=Q}+QOQp(3&QCz{Ԩ<~D5ǏqΥR嶨5>/`| +_C䯔D*gDӣ?EWl%F'"E}L>fgʌ,Wj+ffl7tlFM? NECѭcw=p@cOpLn+Vl) jOqqO6qr|[|mX`1 K`tmKp!83Ěu|ҿfǿd!9%K֢Aɺ{\x-nn ]t^@_w25ˍeq8TO`|*?Zuoenkqq#?T%Nz\U1A<4Jh W@3h-KID_?:*P#(A)Jn3EC BACh14K\gˊ=y /6TQ6QP\E7@V7T\"*""M7BҲZ(J)$Cdf2ӴHh$I izϽx}43d/u ^5xk]/u ^5xkRo5xG\/u ^7%:.u7Խڥ+.u׹]RwKݫ]]]]j|ns{P}b6T bCP#6TQZlņj;?φj\Ns %` UJ6TɆ*P%dCl UJ/PKlAH j̆P3jޞP[l6f׀m{l]~lC=0ϵa u PG/RE[6[ǖz̖j.tST=bOJaM]Ŧ?0מjr kOS%{W[%=UJŧ{vny\Os͞gOoOoOaOaO?SwSwS|njj쪖Z쪖gWU-vU]bW=`WU-vȿZŮjZŮU#jZŮjZŮjZŮjZŮjZŮjZŮjZŮjZ^G9ZgWUGy=9zs9sͼ;Y{ԋњh]8ƙikcӿfp1l͙-vk­X+%v>IW٭ѻ>n8ⴰkN 3-o,|g\pӋM'Dk0P8;\Ҹ_EQqD;g\|Eӏ1~DS|[hN\mҰM ]wV|E+G_Wl__j-ժ=;c؇‚< _-ugF kʘu Foi7}R}τ>>> ='D]aGpdݪ>,fa.aaO~v#»ÝAx/kCc/SX(P}]C*&[^zcPxc!SwB;-՝;/}?u.cq>W ;$>O3,>y/$"Np*4|U}WӣCWyu1.UWb^]p9w9\ }|<}QG4>?ľ@ NjX}l>yci}]͞|}Η}Iўڐ>]Րs 7|o=; чp/T6l:c_Qg5}.jk:JSc6}ñm<::#FW7.⍗Z z܀ev7afboTv/Kpom}Ђ !XGN[ц*:$юt=X^!46X ؈MxO1pgf 1y#NG0F21-`+\ƟӍSNa;sᾸg<:cfl|@|žx5^׆;^x=:orތY>/;&CGXO5} 'p<>O >|' 8 'c.S%/+*N#M_3-o,5s0< p!"|!~'ViӥӐ'kŸvj_Ne7]k=6SMׇBh1ڱn 5-n6gӭ gd{6ݎ;R܉ w܋߇֦?A,CXQ a]fZE{E_?~ڣ ݱ>v69B7~GG_X=}Bh+ӜN3yfmN eę8 8 Wg ?/pmhmXqsh~\ WDGs?%s]\\\\\\\\\\t h.Wuk00#fv)-ŷ|.=7 66C_mۗg7}\.Sl+r ͸q~qVZц 7aox+vwxލ^Cp(8kA|>-Gࣞ>cFµ 5Ep&wp60x..q1b#?%m!QQG;EpQG;Eu9Q\Gsoak㯝.MXŸd?7-n;$2222222䨲ʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʐʃ*:;;;;;;7Յzl4q4a^c/Ŏ8+팢Q3vF(E;hg팢Q3vF(E;hg팢Q3vF(E;hgC)ha148q|ӄ9x^F쀗q.sl:hMօQ2d- k1M;]hsrԪuͥ.f .+e& Ϸ%rDݻ׵O*|PR;jzsh75YMoVӛf5YMoVӛvs;ֽv;pցz/>:n?:>|>O;×~+:b#.:#?꘏swgq][gu֝{ysKϸ{YqtAC/nӗ%|m`o{\_ګ>`N/zޫ?wW_^ƫO7Wop5]KjkVk\Nr݊V_~M7.qUOܸ'o:ξ77-)u݊oںaю^hE,zߢ-ʢ޴tՋnZt,Zh̢E-~=mZ_Y|_+?#9%rA7O|| nN7ܼ歷ݲvˡs vo-(n5~^փo=Koֻn]q[>wێpѷ}n߶nG9sݿ[;sݵ][嗢2-Ѻ/tFoN {pt:.gxޡߧD/sCw3m9 =8y8Bhx`}_ }/]|\_⻽뺐6X>d{ӭpLb=d>6ԝ5L7g١ױ°N} C'!dw:TwCX% ZP$L.tyݡ7 u~=+B#v1ǼU;V;]YI=G2Ѽʺ @>H(׍z?o,+FWԍd݄eIW%l۪>mqu & k!UԿ(t?z?y |sfn tOP~#AoIlvG͒&}lޟ]C4gV͊BvlOfy):faҳ_g675:xv[tm ~yGPE:*j7;(:! uz62{K?x k7cR땵^yZoZ׍p?~?A,CXQ .?pC?Op q)2 pW\ 7܊vw` ~7]XqcA|A|AˣYZCZ Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z !߄G<ɸd|3*>"J(ñ4XN+U<2?36ldzs6ՅRS=ߚf s";%x)vAk7>RJ_q:o | g8+䚾q\q.w=\b?ďcM;"op~_'\kp-ׁqnį8dn-,w.,ݸ⾰hxVa#xhCaVc bhG~) !46666666&Oiz::-s />Ym6Z֐v=^WaO{yO4'OX ?a'OZ ?a'Yw}bG{uZiZkZkZewX=Rc52H^k}~|-:-n+'RK)ӏkklt^Lin*: !BBH<.CR!Q)BXR aBxL!$BR خBZ蚹7ÿLܛ)&D oouP]jKMt=zfԦGucI]<;O]jr2|mFBmta 6h&#Uae`5)(yI)@R3JD9Qzv(O%RTND|sTQ%$J۽X߅UuK;}cxVGۢ#ϑuz?{_ϩP>PYevoWM~(<RBjWH iBZSRRJ+NԣV+NS*8:_{9կRQkUZթVUQ[8] TGz^ȨRS]jkqqWܸ [\ꙹڿSvK؟KvRc 5֥ƺfՇL̊;2YJY =Pi PiYׅR0ZZK5jrRkj-j-ֺfy^[:mBvbK*OfaWnP> GC4(XDxxħi|p>1_)NWU87q3mly8|\ }|<}J>.FRe).XƕiJiJiJijL7Gommx*zUpZ6E/k(E5Lz^%ڵakgQNQMؔMؔMؔMؔMؗؔMؔMؔMؔMؔMؔMؔMؔMؔMؔMؔ-؂?b *6bS*6bS/T|_Wqt,4^k+\qn4B܄EXq;j9j9j9j9j9j9jj9j9j9j9j9j9jM-'rB-'rB-'rB-'rB-'rB-'rB-'rB-'rB-'rB-'rZNZNZNZNZNZNZNZNZ~ZNZNZNZNZNZNaP P !oě<ތ7**烔ßG*{u9|!WIͽC;/K鄚N鄚N鄚N鄚N鄚N鄚NDb?\fj:j:j:j:j:j:j:j:twߍQx{S]wNuݩ;uTםS]wNuݫ{uU׽7\}?{c% uݫ{uU׽W]^uݫ{uU׽W]^uݫ{uU׽W]^uݫ{uU]K]w.uݥuR]K]w.uݥuR]K]w.uݥ;uuݡ;uQ=G]u.!"PS۵64Scj{Lm1=XNkg]2솗M-MPqއ >#aXVU~_WU~_WU~_WU~_WU~_WU~_WU~_ת~_ת~Vݪ[wnU߭U}Vݪ[wnU߭U}Vݪ[wnU߭U}Vݪժ['U}Vݪ[wnU߭U}Vݪ[wnU߭U}TSwNUߩ;U}TSwNUߩ;U}TMկQkTUFկQkTUFկQkTUFկQkTUFկQkTUFկQkTUFէT~GUQ'T}Wӓ!ݴ3M>7ߥT~GK^'w3?S?S???Kw).ߥ*?Y1a|BߜlP)߮B'^6o|OzvToKDѾQC}ގwxލ^<_2:sqJtdtZk8=d3-o{YP=N q.E>b~4R>*]s"Gkn |'WG]rS]s?3 ~)W65s?3s`F+O͔RgO+ ʿOgä*O*O+O+iViTY߫+v_PWB~iIş~oSn{~rƗfnok?J?))WJT*OϨqߩs*?*Sg~Jw+u ?{~S= v[dR+u3GT}VէU}JgU>s>ꓪ>׫UiUS9US'oMNʴViU߭׫\߯귨S)U^կUW USkT}RկUT}N~UUU3S5׫u>s>S8S9U^կS)UVկݳOvUߥsWgTiU߭T}W9UV9U߫׫}m3-T}R'U}r竾3nR}Zѧ}JkVg}Vg}Fg}Vg}Rg}Fg}Ig}Jѧ}Ng}Fgg>賊>}A'}Jѧ}Iї}ru{kZg}vפO*ONJEgQk:5ߣUQI5Tj>{|r|Lg|Fg5?߼L5woc^&ۙPoVoR.jj~'5oѧ-J~ߢ(-J~ߢ(-J~oTJA7(%ߠo|oP JA7(%ߠ|O*O*O*O*O*O*O*O*O*O*O*O*O*ߠ)O*O*O*O*O*O*O*O*O*_J>J>J>J>J>J>J>J>߭J>J>J>J>J>J~T'|R'|R'WI%TI%z%j%˔|P{)Õ{|Nߩk %%SwPoM!J>J>J>J>J>J>J>J>J>J>J>J>J>J>J~/%TI%TI%TI%TI%TI%TI%TI%TI%TI%TI%TI%TJ>J>*>*>*>*>*~\gU;Tz^ůWUz^ůWUz^ůW9S9S9SRϩϩϩϩϩϩϩϩϩϩϩϩϩϩϩϩOOkǕ*>*>*>*>*>*>*>*>S*>*WW*_~߯U|IŗT|IŗT|YŗU|YŗU|YŗU|YŗU|YŗU|YŗU|YŗU|Yŏq?UWezݡ;wPʻCyw(ݡ;wPʻCyw(ݡ;wPʻCyw(ݡ;wQ=ʻGy(ݣ{wN+N+N+N+N+N+N+N+N+N+N+N+N+ݣ3;3;3;3Mn7+(((*.ݥwR]ʻKyw).ݥwR]ʻKyw).ݥwR]ʻKywܞAyw==;{wN+N+N+S9Ri=mITITIViViV`}~ޫwRq'w9Yq7+f}_ %9W=BގwV%ݪ[tnUҭJEI(%ݦmF$KѮ***UEV]UTtUE>ݧo]9:%~78ڭ="*۪r[m}PnUda'oЬjW֙GmUvLVE@+ڪ*VE[UUER+VZ{D[>֝*[Ue*j%CA>LnP ,兩E/o=aI?BUu1.ꢪ.ʢ,ʢ,ZEWFQATQUUЯj:BPUUuPUU˿jZ-jZU٢o-f٢o-f٢o-,f٢o-f٢o-f٢o-f٢o-f٢o-5}El7[k,f٢o-f٢o-5}El7[k,f""٢?΢?΢?j2?hp[\7F}2s\fy.q&,b܌[p+no[>Ϫ*>Ϫ*ʾV́VJ+fҊYiŬbVZ1+VJ+fҊYiŬbVZ1+VJ+fҊYiŬbVZ1+VJ+fbVLڊI[1i+&mŤS[U ˢjYT-eQ,EղZUˢjYT-eQ,EղZզªE}-~"-~"-~"-~"-~"-~&MOG1neVneVn [y#2rKt4Wٷʦ C~ ?f5 23B_pxCɞN;鹱B.:y#|GE;E;w((:Qt|GE;w((:Qt|GGtĬ:bye#垎:bT:rO׻&\{=5~ y<:v|kՠ.zKlq FFѾ,̎5E{;fћC{Ѿ^zrPD~;8 _N  ᆺGԝ/$z[]s(~;B[(5aXI| gY|'8_I8sE/T|Eon~YQSch&Y9XnW+3\:z{56+\7af.ڥq)2܍{]NWUkPZVVhxi7kΗU+|WWn.]Z;w;QUX᫰Wa _ +|V**,,,,,,,,,G+vB;t,AwAw~ج;hڿo;hںvn8h#ڈm_W{lѓBkv֠oW-U vBj]ЮZhW-R mB[j-ЖZhK-R mB[j-ЖZhK-R 흅YY6MMg4}6MMg4}6M=g3}L=g3}L=g3}L=g3}L=g1}vLg06̠ 3h .Ko.vK2h -vˠ2h -vˠ2h +ʠϠ2h +ʠ2h +ʠ2h :J *ʄ2aL*ʄ2a*Jo)vJ[ۮlspT{#^b_ Š}1h_ Š}1hS 6!~'͸q~Zj; rM4'O'j},ǎ m)_L+!K ^R8UcUrqwKڧ^r0;Dž'g?ǜ9۝3v>'hK0c>:fkj`g[ccqom,?179]kwǓ1t9Gcx}%l+\9y3K1vyן~ӏ}/!ǐ5<}b\3o{y{̹.w˝~/Lk{@1v!&;5ڡa0lx*zITǃW9tXĎ򞏏Xkc_NG^32,zəDI/KwG㱧;%S###>w#hZp-8Z8!8w!| ˨]:Nu~G]#0L q.Ŀ>E%>.C?Op ea[l lnEW{v{qӏXNN [[7'kݷdRA(lU? y֪=ֶ_9uG*WuosGgh Pqqqq/s,) hkpmH) elm RA6HHcُ,6;؈Mē،!0c Xh=k%1 lEOOxS؆x!3f,0c v3 8>ΰ3 8-0la [[ކq&N880q18+?I|p>xz#x,EP A"(X`,EP A"(X`,EP A"(X`,EP l߁%]XqtЂ !XG(Zц*:$юt z)A?a17qO`Ob30#K| EP8&0 mf[O36ldz3B.lS>۔6MlS>۔6MlS>ۚvgv./nx:l V\+Xq+0g0>xvaܲ+6r g9Ì<ÌlfaF[㽡v&ަ[|?{ގaXxXxXx'Yx'Yx'Yx'Yx'Yx'Yx'Yx'Yx2=q|>Nq"pr8e.p,\f2 Ye.p,\f2 YxXx,\fQ.  $ Op,\e* WYUp,\d#^ogxLg4qVg5q&K1f.2s:uߨݢ,]f鱙6.t,]eLo|Atong2Kgx'Yz'Yz'Yz'Yz'Yՙ6.Ϻ*LYwedI.3$SO2$SO2$S4r G Q81(q8ħi|p|]NpN\|Kuk^8Au,- aBb!lyAoY,m6 a66o)[ Bo)[ B;s)2܍{p/+߇{-xb9Va#xhCaVc bhk1jAZĨ1jA-Q ,1 b̂ F5=h EP8&Uƒ=,١-zme)70l[LWr-r-7g ,e?[e~l9Ζl l-l9ΖGG-~AW,e/Oe-KlYb[زĖ%,e-KlYb[زĖ%,e-KlYb[زĖ%,e-KlYb[زĖ%gq]Yf2[ٲ̖ |-{_Mf%e#8voETPDGT&AEjQg**ZPj@@$dhڦj7wE]ݺs\kiʻ<]@t-]tKE -t R 2H -Ct2D -Ct2D -Ct2D -Ct2D -Ct2D -Ct2D -Ct2D -Ct2D -Ct2D -Ct2L -t02L -t02L -t02ú2L -t02L -t02L -tZe-ݲnYK[-k閵tZn[:Nn[:Nn[:Nn[:Nn[:Nn[:Nn[:Nn[:Nn[:Nn[:Nen[en[en[en[en[enf2XW-ytܐ_*|ϭ O7T_3ɸp258 'd\u'd6ǿ[k8 ^T܋{Qq/*EŽ^]5܋kQq-*EõעZT\kq5?ŇkZ|ŇkZ|ŇkZ|ŇkZ|ŇkZ|ŇkZ|ŇkZ|ŇkZ| עZ4\ µp-.\O.\ µp-.\ µp-.\ µp-.\ µp-.\ µp-.\ µp-*EŵעZT\kQq-*EŵעZT\kQq-*EŵTZq-ոj\K5R_5\kp-Eõh עZ4\kp-Xõh עZ4\kp-EõhZ4\kp-Eõh עZ4\kp-Eõh?ŏkZ?ŏkZ?ŏkZ?ŅkqZ\ŅkqZ\ŅkqZ\ŅkqZ\ŅkqZ\ŅkqZ\ŅkqZ\ŏkZ?ŏkZ?ŏkZ]<=<Bq-7|\K RkZjp-5\K RkZjp-5\K RkӻײRk)µZp-E"\KJ?ą+qJ\ą+Jjp%5} O4zdQ-T])aR5_xo #kTdz̷+O;Odm]y879ܛ,*qgg-##eglӥߐ)S3#&#ne`Z?.=2j7xN2 ?1 ?1?1:>xna5|_&p2 0Y̽ D{ƙAtogixB?mF~oxH$aL7Mp3m0n;΀0 fÓ{%N>Xa>+`!<B{V;,NS'bd1u:YL,VeW5| `#|'xZցuixZցuixZցu<O:n dO:<O:<O:<ON<:N/Ë>/Ë>/ËIn/jn/Ƌn/ƋN/ċ:N*ċ:N/9N/;N/ċ:N/ċ:N/ꤏ:n/zn/Ƌn/ƋVExjh5^/ZƋVSx=?^Ϗx=?^Ϗx=?x=?^Ϗx=?^Ϗx=MJ] sa7'͉s7?͏B]TzJ f>8 wIp*N' OΗt@].8nnz5}H͝Tv7Me/S˩Ts7ռj^xJW%T]TmTmTSl1D `;|PTr*^]%TyM5wSKN/yRKe \SUJ5W*\TsjRUJ5W*\TsjRUJ5W*\TsjRUJ5Wul/Klm2! vNBAߡ?w_"%p) 0Fep9\`4\ Ws\ c:IWYyp7 YO4I$tF:I#NR@')I $t:INR@')I $t:INR@')I $t:INR@')I $t:IM'qITb7M%vSTb7M%vSTb7ϿJL%vSTb7M%vTb7M%vSݱn*Jn*Jn*Jn*q9J\N%.S˩Tr*q9J\N%.S˩Tr*c9XNe,2S˩TYRUJUV*UY*TeRUJUV*UY*TeRUJUV*UY***PK%Tr U\@}M&!@RUJUVʪ(X'՘)|V<SF{^{ϐA__& xG6+=6{&qM>H ݉Q0П c`*У@"ФaM6hSMqL4*Ш@kB4*Ш@ nfUpu:^X+v,1X$gggg'9S!p:zE^QGW+%V/=T 5O֥߭K#K#K)6]4ޱUƚ%n/oMf\auqf\auÌgeͻo.7~?'=ka+5vH.Aw=l}/05fc]@__O3ZZZZc}7{PRRRR}>} | }!]2_oaldzWGQ/l-vȄ,;adC8`7\ `?A>("8pJ08ke2zNKޥSҩwԻt]:.]>AKޥSҩwԻt]:.zNKޥSm 8Fh![3)Kv-5[;$@ ݠd\ö/km2GfBL^S/өtѣSsL7=ّꝕNj\{\3_ ^.\l%r qgd0M;L7ݦi23RjRK5 mUׅf6C20G.'f `Hs.'qx箰0߇mmgm~FQm~FQm~FQm~FQm~FQm~FQm~FQm~FQ~6Jߌ75F}SojM75F +wǾۃ+Qv.s8pO=RFGFQzd^EuQz]^EuQz]^EuQz]^EuQz]^EuNi:^4zFB_h ~/4FB_h ~/4FB_h ~/4FB_h ~/4FB_h ~/4F]PoM/gKzjv{M.SQ!f㌞'SETQ{f&`UG 2m z䊮8cL_䢟\'rBNcJb wzt#7[f֋vխknxc{7u;ѿQcu{cijd3ybu["a|z1m/#x^tg濈WDwN{a#6)ۅϞ[G\ _B;U"%p) ѕN\d( WU0p \ `<$BL0 0pL&n[6Ý пģ?4Jj4P5"TӕDf{L]7v˰&Z/@lB4P4FuШA:hTQ4w;륋d.2hT5A2hTʠWpP&{2G ~_`l-vȄ,;adC8`7\ p )J)PPŘՂ} Qhfh Z a!J tnz~*Q%5FԨURJjTIv*48Yp6ƼGQx $<OC ,gYX ^%x^Wx3^#@k5Pv T]ծj@k5P쭬{zC ״7CL\G5IW,S=|;}US9jPGޫF%ŞA .fLa,Y.Y.Y.(OZQ*8J&U,ޔS65;٨_?,JxëYTɨ0dSpC; F|TTBJʈ~ P~kzD{Z;jwW9bxH.L\X1WmQ[qV ܳl=[qϿkZqVkZqVܭwkZqVܭwkZqVܭwkKfWd>\jŵZqV\jŵZqV\jŵZqV\j}$N}!l х!Fľm@dzMYSwНq>^uu<Ӟ\'DmGw{g{{OdQ}rᬺ3l_! GRbWbW+_! WB+_! WB+N񿈑+_! WB+_! WBO!vh98KŵBbppاbpA\guqA\guqA\guqA\guqA\guqA\guqA\guqA\ggup!E_-$Sz0n1[ F 8FٌVjZmBMh 6&ڄVj}N1dhNZp{tmnǠQcPž cd2={ghOg]q<261 3缓ޑUw 05}I չݿ0/+ȶ,jOG1/8#90WKeV~^gqv~qtݍMScWl<~Mnyvu9}Ʊ;cgǎw%ߺ1OګMGkb1su|xuq4ۇ]zq@lx=W0;Fb\U6K,iׅuq] R>:N3[~TFWRs{ԎiWbgtYb{[{$J#F*Kަ[ڽ=93UT4Ž!{,|)4h_2KQ{~e7gVV1+==h46񼺾 -ƞcϻ=t<lȂ2;~ Ɣۑ/=5f4"U#3&3&sq ͋:и9gYų,i*ג{y62Cqu{#420Q9XthP~#6{=Y2R/dzC+ϋ2A2>*bg^,9r-&G>?* hQ$?(.Q9yB*\&Q#oK{WN` LGeu d ߯p bbb';+;+bJT=2_|YEd|DXVf$KB\S/*oU#wp /Ug|W BvY>K,/lxUn#ۈ6"mDtFDk6"n#ۈ6"n#ۈh-FDmDnS[kSIb ۵>t[Kzldm1'5x&['*u0Tnip#7-p+v0flw\wK}p?,,WuXo@p xޅ`%@Y|kX{| )|N::| _ | `#G ~_` a lm2! vNِ { ʣ"K8/t2 E;QzrcTUCT|_3Pu.9ރ\TU/!ף({ ~:EݯT㻞SI+,Vezp%(4.AKP.AKP.AKPh MCi(4 4BPh MCi(4 4BPh MCi(4 4BPh MC(4tBQh: MG^< "x OS4x<x^eAdd@Add@Add@Add@Adj2`5 XM&Vɀdj2`5 XM&Vɀdj2`5 H%RɀT2 H%RɀT2 H%RɀT2 H%RɀT2 H%RɀT2 H%RɀT2 ~H[ 1gv SPy ?QޘнQ41+1+1+1+1+1+1+1+1+1+1+oź0r1H.Fb^GWa.Dޅȷ$ɧy"BQ ),'5x&}݇}G}G}G}G}G}G}G}G}G}G}G}G}G}G}G}G}G}gz澞gz澞gz澞S;adC8`7\,w'9̵u s?Ϯ3"ߝ92{osQmy*SB1ˋ)pb(f 3f0 TB*c!`bY}@?b1<Y 0f1,ŀMWdY 3af1,0fbY 3af1,0fbY 3af1,0fbY 99ႎɨ&L R3uUГ^/2>+Mp'<r_}Nf{ ~0DV`{&f{+cy!p :M't" DtDt{Dt8NFa"gw:LDp0:9^husMWdW+$ӟ$\k9D$JRNFX4fD4f]h6&D4&ZBr% u2HNCd":&ZZ}vn"ڝvO+ڝv|g;-Md&\~s ǞA57yvE]_oW۳g㞗qq/}Q~:z|:EN>ɐ"AhjsdzeJޱ2 eWwE﷡+zwFh>wE3|"ODh~OBsr4砤}zf>'}2z9TŨ}P*o@˨PmTcdBqEj.T]Pd+lEQC(؂[Q` lAm(6@/ lF(،Q[Q`iЉ*M4t6.ݖTRd͒,;ulpHe7vͨ%D %؂ [Pa *lA~ GPzQ`%*,Mm Z9_ [Qa3kEy-NCuP]3kAm-(oFQ(JC=P,rjiE-VҊZZPJ JiE)(flD!QF^;: N(U֡ h4fҌZZP4  VqDHMbhcT ulc泙叨'k-?~$Kd9ȶJ핫-ubQh{q1 .?׋q H'*of"Ht#7lr Þ'H@nFh0^#fc#chgхamFۇbmhvh1ڟiOFړd}e+i7F##H0ZF W 7uٌ[c=e^#02Y_fuN#S)6V9rG=(b)ɔ$i:a2M1MEii7M7)9D!"մؔL-3-L/^M^'jL*GG3Wg5's_י' SS7o0!.50̳sp\|1Ҽ1yƜlNO$b9Kbyyќj~Kd~qCyyxʜe)]\ļ\%^01*s#Fdn_[-CWDfm%͒&,-EcZQaI|!j,_YQkEx!"NgJ7iy0.RIg{2?o e)[=7~3>wg=~pN›'(NI!);ioRARIRyR MyCִ [~c8vͺM^>{==uw z/ۂ7d-yAU 𢅗/sσ7z?S?FCOV{L+#p*;uLhF9p;ݨDuU;IE9˓ 8Jn2\ 9XwT >ᵻ;ٵ8팺 GznnnnGtwFhOm6b=}>͑r5@Tc;yzg t;=t?/@ t|XG:Ac4]σn!?OD'"#yD<|"!"!zG=t::\=֡G8,zo%ENh3CD\"z7kѡd"hYYY4(!&ɢXiKJ}BM&VEȢյ02g sgD L&s's^f/9ɜ5#HthE3.F.]60RXV'@y,WnRpe)|,E;KR,E;pc)dz3Fp\Ŋ+*V_LϜpnYJ])E[ -BTRpo)8BR,-5yz-í-@K8cKAKqi)49MCqiҾE^*zel4:NGt4:CϘyhtmzLAy8Z }7=~Wǥq),=.ye|nUY'B /3]l=3c0KbzAN+D}AwZdwlES_s7뚧>/`{a욢~Pf_ԯk|S!eH_c~nvfKss9zufu55k,k{ ~ )dztgssYׯfΥffVfdXIdȢ>R[z:96ԪԪԪdvjvjfjfjfjfja2^9n;,'ġՉEz_x|仟UXUX#y_E{:K{w?%߽~QEW|9_E|>!*Va>O37 kZE0䬗^KzW/'_g7MzY/9my_mUEjqq}v饧S)qy%䱟<~<`H3zL=}z~E QKz_?'䯗cǫfVYVY*w#9^EWUx9enwUTts\~1bwPdV3jC1 dYl9laX9/4,hΏ1GGs~4 ќCshg(7}@k *VT:LtC>tC>tC>t؈}0Jk˴I$]Хp}"f# M?"Yhޒ>}hҏ&}h҇&d#lDb#^RA/Pޖh -6؆b#ZlDh-6EZF؈}hчh1 -nA[-nA!3G~G~苹N?Z?_aYg ߭(+; [Y<"* &N8o:3Q$T0 tGP$TLASPxT0LAף)` *8tGPA؊F\;q7;Pٸ'pqO:q~8 LB-bǣ [壔I(eJRΌ]J)d*Jَ壒I*?)vRZwT=v;,j+yW:J:%uǙnBM7~*Xskͨ;ꎪ[cwfI(j[p5uF]QlcEדCw] ¦)(lRNfwfݜ9)nw>2wg$I1wW pzNNs#31*2qA:n#c'eh(?24]3tWt.CEYW7ZuQuU8#12ZfU@gUOekg(d:+C_Et*cݱ }"T}Zge5ZFKnFGEt*cݱXEE*"RJHh"SvNQGjd:D'$dL#V >ClH+UH$^%bg^/t:sRwҥd{ wOWǾm'tO*XUvrIVr;6*SQ6pme;Gy7z^8S5dv3].B9>W+{zp6W GlGy~1ށw {ia=J r#WcPl|8:^PtsŏVG+8QN>WL+F=H_ f`* f)4.XwgxcCF⩿_\V_ŋs=T(%3J zqPu)c,GL/\9J!皏ciOKߤI A=t18@ m`8㒒w"X〒G>'!8d A2C>q'!8|O9o8սa1_w)F}a at{5^ދ׏G^wj_EWUD|_ދAɳ7QgE9Z%q[fQre+GQ:P 3f BЈ^ZB!4:ZBCgp{9gs]6p?s8矙3Wr~Ϲùo754 EF~dEO89Un1{f/ua qZ,FFa#bY0f1B'Џz|j||||#{M>GX-fWBP 5@+&"n"`ᓢM:<۬8aXw7Z˳l C_ӄ8[s~Y~<Š*P9ƫz:TFaYQh?7D!{Wk(*(*3T (*(*(*(*ߣh! +Q5s͜{3̹7 yZs^y>yѻGݕO!_%)zL洁L,'˙ۆ?H9&DS@Sqj@#?CC՟)[+MѱGONӨl籽،o?b@9 ܂[P?2伂90œ_ r~AEi ~8 y|23;]D; ='/ŗK:G~m4&[+ ԁcWTqWf(aݞ/W2F%?qܛ=?qO%|(1zц" rw^<71 kУsU^zz:G@ut#3:Gr=^gYoٌ2a[v=ȶ*eN`-{fo^nFbݬFu.͜N٬T]$[,־dYaltIܯ>Smf㧒mXӆXӆXӆ8ԣztRN5;Qk2kdul5D~4MGd|(>apB)TֶUmXVнt+@ ^YG 6k?O3W,[ wQxK\Ʋ>ȃB(<J;I7, s2>_/0_3_3_[A6րQ 1PUC(sj~*@\l{x~Dnd72ō2+N$qИJf2?lk=r3\N~:]gE~H~H~#?,s9E~fW9gYM~搟9!?sbs9}}|X$jd9$',r2"',rr99EN֑d59ENHNfYd59\NN搓9}6"99gE~.'?]rfT3Lj6e2ru\]N.'WjE.'WYjC19C:A'9!sr0"r8v a0^@tYtW4>rbN5筯ۯ  {_ 0A8@W\&W&"D4*DSeT?UO?Z=b٣g|qj :p1f zsFTb,0c_]X3cuT2JSx*O%Q Q#raqjG?nv" 4^%{tE,k[: ҍhU_7zz@A\_B;\P.a0Fep9\J 0kaDH 0&u0Tnip#7-p+v1<C($sUC} 5Fpa\ct :dw%+Yen֋?}c 2>>mq,E[XYl\ 5^مcE1g&>jqm?Y'b\&ΐk!Α^qL7gͷp{LW9 <#t(kҫ xR]V>` |,mS_UQE,8.a?A_gC ۮ sہeŶ7Ţ/~Пq/8_g')p*Oc{<*9$3e8 Ζ+F':|YKe̦2fSD"%p) 0FTHAr `6́`䶓K_v9+x$޶6 [yL8zL Qʵb2N,W\%IP/(oɭJԔOd+e 碫<`Li\f{~8~> =8H_KDڙO$ OBhL8 &$HB!)VE|"QCDo>q>TčVY sY3a|̛yѾhous-ļy=Ǽ7c|̙91g>ǜ3sc|̙91_>|/(_fLFHi#-bENOGxͬ^C^CTC73>7e~LI0)0iXۥv)]j}jdR2e)LYj >P[vZ,w]ԍǬ3->g3=x3Ì0=x3S9efy6,b{,ea{"y,fv!3{'3{33{3{3{3{33{3;v1w012l73{7ìǬ>¬Ǭ`VaVfO<fqNYa{fq&,0=Tf/&+J"C{|!=D߯"C{|!=oF7![EQߜo5B"C{x!=D"Cۈx!=D"C{x!=D"C{x!=D%D| !K"C{x_r\"57#j<=# x(7 x(7VsU*`>0 O̧SA嵤KRE!EO\ A7@Mp3 !0p#a10xs1Ha.<OS4̃g`> ' b,/SoG㻣]Z_bζ۞S/WkLl`iaٓKb|"뿄?#X 2ç|n#ďֵOl*H P b:BԀx 68ԅoa|{~5p `=lTH_`#lͰp pފ~ܐ `7d^B6HU\]#&LQBCq5!8D2|(3>9J}C_#~}į>G_#~}į>G_#~}į }0Fhca p{ާqłZKL; 1TO~6}>a.<OS4̃g`>s# ^d, ;Lke"А2P)DO}/zF5Vb\E2'`s\1|s\1|s\0*ՄU~ZV>zY1?|B"O+o:!N"ۄ4!2ML"ӄ4!2MȦ #D=Bd#D1Bd#D1Bd#D1Bd#D1Bd#D1Bd#D6QKCdؾ^WUx 2 m.C2 m.C沪 >6C|hm >6C|hm >ԓ{p4p94Xt.Awul?ny[@/e 2^z@/e 2^z@/e 2^z@/e 2^z@/e 2^ˀOQr!!(RGy(1(2.)q@J+e XAP !jt.@ t wp0!Lȁ;@][* 1Yd%)҂GFDx5B5Y~oƿk KmQ(RB  ?(jY~j,^\ *)j$Dg]fэǺ-d[y>*RPE H(ω|Q6d,5M5_[%zPǓ_gF WWW.5 M^w+y@fFq^Q3eʞ,ۗq:(s%_>XD}Ȝ|Yj.8)rWY`>#K,BfZLN3-\bv(uLi`Lӿ?dO]q~Yb=*3m}+~ 0nAp نaQ0Xamp;Q5~C 3f"gQc| ++;| R5 dZ*O'Eu\!3|uԂڐm%6 3ߨ0 > (L&Ia~Dɭwe})|SJP w֚i(.7uL=hi/4^44Mk|֫E VroBCs}9>Fsmу 7k:B?7 n00#`$Z'0xr.q ?e4Qz:@hxQ5j~_ר5j~_ר5j~ }WuԨ5j{^ר5j{ a16BChcm !1.BCb] !t1d_`#lͰ A7d.B ha- t0]?B8E׼p J A(04./о@FQkFQkFQkFQkF0F#c} a0z@a= 0Z@ ha- 0Z@ ha- 0: Rk1ԘAj 5f3H Rc1Ԙl!h_ }/M*h)VDxkѳs1\>s1\>s1\>s1\>s1\>s }0Fhca pq06 & w44z:ۻ 3`&ⱇΖB\!nYbDL\xi|x< , ^{Byʺ;8;AaY5F3̖Ǣf;-ǏQOȽ8l_†7y[6-.…BP B!\( p.\[fVP u,E)\( p.e-%VΏ8;?Ώ8;?Ώ:?Ώ:?Ώ:?Ώ:?Ώ9y" xsMx ކa |G%K{@M.fYbV.fYbV.fYbV.fYbV.\Q>(W+qEJ+@[sCIet :C ݠ;0 !0Ha q0&p<NS.`.(n`.(>xށ%|Rr>8BV!wU*] qWʷ2]Yj~a k!~u6@*/6f[`;tȀL! a>cypRGP(GA 8 n B2K C9hp Nï FU@܀:o@7P yuހ:oPkȽj<ԄZPpRSOZB=uEqwG]l ,QCuMxKԱu= 6v΢Et3pwbC=Abr3 C`( 0 F `J>{e7y1zrJhw1Ya=*cf#c1cD挓޴߈7{F̕-jhlvY$AhGkƉ+dH0-;_$ʯӨS;ԨT|~*>?O+++S8ʹ9wDa L`Lf}~xf,x~xo>{^<sz^<sz^WgKWx RgXaB,'@KHV@[j tnz@OzqaLC0GQA2<s xa<YxƷ__ b9 o> o> o> o> o> o> o> o>yOVwG B `=lTH_`#lͰ A7d.ȒuF]ٽٰr R{>b^Gxp\l'28 !C9hp Nү0APG+Vw}à1uBh ZB"'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh'F}Qh' ̄Y <afTq O< P:< yx^7`1 osw` |G>e>oZKRxu:^j/ZKRxu:^j/ZKRxu:^j/ZKRxu:^j/ZKRxu:^j/NNNNNNNNNNNNNNNNNNNNNNJj:):):):):):):)8+qVR㬤YIg%5Jj8+qVRW"2l\Ũj!`#ek&yȸo ʨ~5qE%-Ì^qɎJq8q7ث~e{أ\[Yε\&r \d-Z圻s/~Kq%6=gXK~wWQrԃQv`Y_8h\ۙ`/1'UX/цNPFF8N}Q}׾i|_|'sSd Q1S8?ucםo{.ɱ'׽cw&͆3tˊ\zVx~eaB,u/x![f-*,\[<ڕ~Y(_O?82KJqEx8ٍwމ-%[-Lr ShœTob$37,ʠp3vMMŝNhj"/pP/9L!g[M>?f|̥z=#Iվ1y[jN2[O3֍ϳdEio/ùܿ@(q0.q[ǘoc̷1ٌl{SG%X/+*uvejW=Zp*.\RPaQ0XaP1z;PmaL;a LԻ`Lf}p?<f̆6YA2<s xa<YxX} "xobxނxރ~#`^2`~O~ oJT=? B `=lTH_`#lͰ  gh( Y.\`N.wkjU\pZ+k̎Q̆dl9jyrdȆ Ul>>>YT;7Ȇ-%S!}2s*Z* [&X&qbee`y)qe9qee1U1ŲȲHLayCeyfƋˬ F&bx`m+fYW9֟)"ٺޚ*ikuxzzHd=l=,^XOXu6xۖhk->Mlm y橩S#ެ^6n6¾4VDn[앱qK*40/7jdT[??t5[ռ⚞eϭj7sskZ{Az\~QTܚUz}k8gg3θfϽ5oܼq?zܪ[|x q/[ˁۂ{[k5urmŭ}?q~UmR:l5/跳[DJˏ/?0?ӭ21Gn*R#goayH$j+]DUؕn"V#)D5[쵄1 =IǷM̤7U)v(=ڻ}Hzsz\fj 67[PT.jtZA=D!;)| WWw~wGX?ZHa i lMVp6#_)Ӳ@|X5dEWJW SYc̪FS=Sq?kQ\eՏCUVTYÍꫴ_뛿Ok^vs,2q7, ȉ* Yu@JPV/WIA !RF9r"R~J!B*-!!7z`rl_9V̊$r(́2n>k]W52h.ղXYb+|)}UFvB ^B6xEBe"c2$z9>=@Чӟ KnOЧi1}ǣi#Q1uDnɬŜŬ"u>٠l+Y@jjj6?e8q];(rzE/S'|rȥS{wE[^[kOoաxzA+=V "3W6.1b'\@&3cQ o:q8G(T3Ӌ: }[@oӷπ߂HҿE~=B3u A?3wIڻzꉯ\J_߽Y1f1f fm=Y=0k& ѝHJp"X^WX^ͬI"z5CǥzW=걚r+8Vl+[r,c){VeP=/9O8pn98+/z7& {KWcqh} x}،6Hg/Ee/EG {h;Њ=$;{3Cy+5^+ o4,;aQV>6 Nٛc8jy-1qfP(h^[W'!Xu)Ѩ3KqAܧpAg6Ejgqq~If)n3<Կ7m6W6^2dzB-< 8Rܦ4ut_Pq^I)|?7o*VYS`,56; E2JO6_ms^z&v1,)2BR\@R\ KAe2BR\:X d.EVLqL!)(BS2`' J J^B6sA*@>`*p#B1ճrBTa( N+HtP cc`>R\Rr;Q6tL uWQY3J~ ~3}+uiNDG ZEʛF*N/\lDy~ nzn[=Kf=軇t|]xrk8 z8 pP>/Qp\Fz(ߘzM4P.5$ט?__7`%|-<%[3re>YϡiakmOȓ.a-`5|?hmC7d. Y<@ֳ~ȅ#28 !C9hp NïIy.@'4vr=~r3ufv A0玀\2G%X/+*uzܠ a a0FHa q0&-p+0&dTG t{aS̄Y <ax9$0')x30`a|_JWI;| ?`FVk'X )3R! ~ 6 .{r\l^_ЯX z)+4VNM5J1LZ*PD/7ȟ;jC#4u1j#gVZYזEa9c\:Jo-#)D}&o>#Met!R)ˈSD "H %DN4Q !G V C+J0Q, ˈeD2aѰhXF4,# eD2aѰhXF4,# ˈD2aѰhM4,# a"!L$0e|W߳RQ:;qJW )!OJDN"U"#XwNKh=pHoۈ0Q0(GITF?#~8FQ359^l 2"XD)D}^ P3>+,{+?Lsg!gG-f;FܫpvR@zU@T@|^wT-ţE}]|SB1P.#q{|خNls=lS'JL0_ɯxded%dDžhbjb+Ԏ|'SDe|ߞ-ُvh?*>슿\k?%RY.\He*%4éRg~f~5&fq> \^Im')xZnUY!UCJ ŜK5!Uˣ(QɱPOڡɨEȻQȹDlJ@@q'u6\|/;:";ˇL]EϢa#Ƙa>/RkdЯSk$ҝ7&?M͟  QwԇPSjCM}59ij栦9ij栦9ij栦9ij栦9ij栦9ij栦^j5uPS/jEMk-QS/5I-S5QӐ0 QS)4 5MCMP44 5MCMP44 5MCMP44 5MCMP44 5MCMPT45MEMSQT45MEMSQT45MEMSQT45MEMSQT45MEMSQT45MEMSQ-tj!(?QПQΝ({g(Rm8J6ʸGVv~c/~֕*)%f6#_~__,ݘɝU{0l}Sf{*y/w9:#wW#5ޝFށ̭vemr6hMSf ZZ;Y}֌rfPL$x9x9=Uv._`#쓳P{P͙9WXԗQ( ֕tU-Qu#*ZOP9r,nx2L3WnGQoGYYo*a1Y㈗ct8d, '}-F^FGѱб CGrCb+z x^D\ACV=MƁ&@q8P74MƁq8dh24MƁ&@qnh24u@+ʊk5f 1טk  1טk5f 1k5qA\c܎LCwƣ;уAGS@/ z)z==D@у'Ѓ;z= acQl a{g[j[)n)Gg_ MiKe2p϶ UohlqDnjq%:P7Ŏ~vs ՖW T[5%хgs3LwE>ۗ[ފ3PoƏ867r6lOLZkjS3ιnSfԻfZ\+g]69 }Ǒ^f^'o4g=ϽLk97ofondx^՛&˚{阦Sh`ӔfJ孧f6[<|Lyaƿ^L0.ᑖ[Jjumj.jE~6m.jtW|=/]fng:Dsa"uTUu~͊.q׬#.]m%]u{e{έGT[[tOG nMew*n#7_!_$'|cu6i۪ϕ'؅xt>H;H;>H;H;>>d4چ,% fSɩ5ɩWSɩ-ȩSȩMȩlrj 9FN.cɯt>F}Ʀ/Ne$Neq~E3(W=Ϩi}0 o5D7@5bM{C% ZCh WB;ܕa0 0 F( c`,0nM~Fi}4Ѵ^Ѵ>GhZ~7ձ8_M//ŗGZ܈7Mkq4-Ѵ8GhZMkZ6FhZMkim4Ѵ6FhZMkim4Ѵ6FhZMkim4ҿ@Q3^ʹvzQ e Rj&WBKffka.4:,fƵ [ TY$2b[W&+u#h)a8HmZF]XjǩOO\uWZ[qL}q ͑lma9獜svzRܞֿ޿`_pާ9=۸2;қ")X'\o.د_Idc4vooEt5ؓ"{2{rGﹾ_bgw>΋nluw=蝽n?Uס/1lpn$/:e ;l[sP5F`ocvVƊ^0f4'͉1&۷D Ġ;Mѝ D{bО'A{bО'A{bО'A{bО'A{bО'A{bО'퉩 .aZ ֝m}EC Z+TV2M٪ƪYYqY2+UfʬT*ReVN٩2;UfT*SevN٩VmQe6F٨2UflT*Qe6F٨2Ufl'zXZKkc*p7̂EG!VrJ=Wh}#oH LtXZKciu,ձg[M屴^cZ%)I:bg]AoQw=haz+ gr0VZNZ is0~9hU jEZӪ*%SOWvKkӚ& t7X:Kc`,ֶuX:Kc`,t0X:KWT^qF>y\I8#3+NzI 81 ĀpbA 81 Āpq/3D zA+qJ4R^Wxz&Q缱uZ9ZR1F+Ξs5{FsqwM#H@sԈ#5:HMWnu{ZBQOƳj{i^W:= BU 1=fW+c-Xybmrؖ=5v5ٶ&xcMU4RS2DRԧkv5_&} tk87lrU\YUmWrf8ά!gր3kș59+8+8́u;2)MKu2;C ֏̃̃̃̃yP?23e-x 5h'~PiySU;gtK>s2vNN''dq8rxH=#y㉢ 0tWN8'd|l265'cdlq26N8'cvNI;c'}줏>vq~.D=#.<_ԝ_UQ? !w%eȒ.瓇~#w>~}"[8ƻ^kFB#xe<9#Ԡ[ή73Gb\7xa?G5"̑8; vC_|Q`9DZ:gT,Y*r=IwW+=ոȞ|] J^OB_%#yyU@tW| y!^16{5{XϪr{hz+ʽrq+G^98f2^YTmʽtexvw=k^p>ryآejU;TXc>fAK-̠}ڌu}ƺ>c]8w9T Z+r^jI+----e-eeRmJ^m`[`}Z&Gj$ZD+;Z{U&-a---.&2LKoKWKoKoKoKNKNKoK2OKoKOK%Uۮ_sl 7i{cڞ@xE0Q~G?4Z 5F?\C?hC3=O-1*mLDQLZUUEc}јhL_4/Ƒ_;iL_4/7~ۘhL_4ViDM% )8 jVP@bDCeo_ zs Nלrmzzm'y6LcWc#8j"AY!ƻ.Xw`MZ۴l&- e#ؿ?^ZZՐV5U i*ʠ^_6!-m&QTYު$@š67D@DPvwEqWtQ}wwpQP5J@@d M2_;!,.KJuu]ν9OާԴPjZ@M i3m-ԶPj[@m m-gVLPKufjrYszV.5 hZ(5 hZ(5 hZ(5 h: k ab4R\B).'|;\7jmAe.G~߸e4=[" A=38W q+8yvxFzfpƎ$l̃Poܧg!i9آܭ9J6G8R,؊ҪѤ*ZUW+}k?g̞b>jԁvqϱb1jV1juVyHeҵQ>QQQ975Q5Q5Q5Q5Q>s|t_FS-9~Hz"1Z$Fh-EbH"1Z$Fh-1\@ SdJP:n|5ߊFb{]ό#q#}$>OGhm#}w~&BGh#{v=BGhRP)k>?')Tp8gxꄅe9&J(JFt(O(J(J(J(J(J(J(J(JXN&= :ZVèUE/I͢,J͢,J͢,J͢,J͢,J͢,J͢,Gp^2nUʣV1n 7q#=n5ͣy4Q`,v:7p::3t 9Éa5ͧm>ͧ6S|jOmm>ͧb+hiiGiIW1Ut_*J>O*J>O*J>O*J>-1PF±0%\H NgRN-F|3OQQRjo$8;lh~p[۩dPFDD)ZQ[;{ yӯQzJy6s=Yj~Dm/l6WQczC­$# m?O[m:o'P:.+~=γsK`^*Z]A% ?I{^-<.eғ<Ѽcَ xNKzN/կn7WO|$s= %:i_kF{`Wz֫@ f,zzF-jަsuAoUKtZ7IhޢVgIZ'OHZͶ5WͪM)T]~nN4`ۛm]-^/ߙO簢y_50mUY7~#x<Gcq]k1Qk',>Sitp8\p  DpjOK2p9\ sG18x< Og9B`}X_.<'8XebVI9W#;Ye%w(#;ObŜtϏSX0`0 p0q`48'Dp8Sitp87߁-Vpw{4^]\5k6jiE ҙz.\z׋z%2V\X +sae.5_LY`.(|ll! dl|o\ Z`:| >3L0 | >/% | J7[0y`>, "=X %%`)X2lcM~;.l^oxl!2ߎ&, 9"qZ:u ߎ:5qB +G(ю ʝm{ɔm*j:w%C!k*O)-JI"/ZG ʬB<35rwp|{57}?|N*tmd`bJρ́l3$ڽNoso18OfXk7zfWJffLry^s/gZY*P(J=I9R)<(6Ԩa]vٰwð.Ō0IF+b=8hjy(z_֧qz=s<롞0}[tWӫ8ρ00 X@ 3{zu6-kQ?_Ot7zEI?}E _r~'2DOCΐ !#*9ڷuix!vB)k>[q~a}6iƖ_0IF֏X :.H P JQŗG{Ek,ᔵZ?n  =,[Z)STJ/M Itzeq2iӒ/#}g12m%5Az+c^{^v?;R=0&3.e,\d PyA+slSaO2&^eLLcL,(}1cJRQofB)sN4כU_s٨BuDZsZC#pbGDOZcßYsօ J=[)|c /ڥ,{7at 5Tgbbkl26ẝכU鬹=IO[m_}__4 84ח-o_Uu,i_ھ}]1p{MD% >Li`Y -naՇ^ļG3˝cuR-r/3NjI;>:]NV!ev2 W*3;ĹGUS.ξ3}鎴rX茖{ry`%A;mm66۝_39LαNUiKUDMԤ9y$K Z8O&ﭕ _[BěsWs\o9G]_zU_`_|_|D?0ח2/`N X-Vۢ6S۵v[=ոKx@l[GTj]ImQ-v%DI&R-*wa```````]w:p=߹[biϾwEo:=|?^l`XOAɷ]ۡ~TNžo:9L]nWϙ#ds33b\3(Üj+__U+ԥvh~}nSW>BQѪ;= S;CaBu^/Qmԟ[OU)fUUL7=KuӰbEXfz!Ujhd#iS]w]g:0KU3Tl~XW`~=D?ƥu2B?ݪWꩾa`8FQ80ƀXDO'qp*8 g0 B0QbSƩ5XTq*8k5NbSƩ5XTq*86k껑~>-XG_]axDO1/o^Uj0\1=|<Ow?3Y3^/> xu3o;Nf/ j{^l/e`-vBabI,4):sz -jX:b<@[_oǝP8V\~|,T|Or uoә曈\0?'?ӯ%GIuL baz#@oGOT}(fc` `F`8ǃ10NN p&8 ѷbFerp]Z[ޯ Fp?{p nw;]n܋O/TԳhF_8 C=8pyo4F(pް'+aG.욬'cƸ P6esݪgԷ{YHzT_zL/p=/宗` ^4:l=}p~s﹛{|LX,0y`>S5#_7.wx>#1fYS >_9Ko`.( B|2}J PV TԂ:P6`l;`'n p^nY~Aa2A(1rA+oZ6 h'Z@G .+8OkLp?x< 3Ŭk1Z̺5LWk`z ow{z>|030|s+5(߀o\P ;,`1,K2 ?V(jTu0*P WV-`6-`+ئXI]/vN 4g  < ,`? ,=ˎ(1.=ğoG@dsA+ZzUϪWUv4xFY OV'xF|>VWpz8Y}յdup:8Y,'p4'+p,'KpNV'+dpr8Y9NV'U*dpMp 8YVobծAzk$8;G~/قf+fuinV7+*fnۻ^H'ge~%g Y~%g Y~%gri߄YW[ق%j ZsW/|-_K|-]ppj8[.w7 30|sv`fW t=A`z#@oG~( p,`w#Q|I8_Η%|I8_Η%|I8_ W+|ep28_ W+|ep28_ W+|ep28_ W+|ep8/p8o%o%o%o%o%/p8/p8/p8/p8/p8/p8/Kp/Kp/Kp/Kpo9o9o9o9o9o9o9o%o%o%o%o%o%o/pz8_=W竇|pz8_=Χ|pz8_=Wop:8_W竃|up:8_W竃|q8_|q8_|q8_|q8_|q8_|q8_|q8_|up:8_W竃|up/Kp/KpW+|pr8_9W+|pr8_9W+|pr8_9W+|pr8_9W+|pr8_9W 竆U|pj8_5W 竆U|pj8_5W 竆U|p 8_W 竄U*|pJ8&8&8_W竀U*|p 8_W 竄U*|pJ8_mp80pj8`5X N%WR6+RgJ $~ ׯ/=TY|ĵl_hq},MmEknMwYOm'7ߞN5o듵ڐ:qFļcѻU{}R~H+:GL7n9k(u^1K 0gmi,;{}ggڎ& K|>&菥#=H_OeSnMNJxz}ҮfLs~C>ebX~kxߨ?lkEmZQ_,VUO@\B_$[wѢcێfzXNJ) Ss޷*}ymE\Km5_7Vߒ{^g[\L`.}OWuK=r=I-r=S>Y,O-zD/Ryc7SH8s2-hyi|RzdϤbϯ[87QAbnbη>Şgx>ԏ{m-KMOJM>魿d9U?'[nhH.҂ϥJ"%s?5MAk~匧VܕS:6іj]Ǻ.aakkvqq:Q:u:u:_u櫣++JoB UA}W}ݫ=={AMMuoKu}I_^Bs"LrMbŮ9%tLzڔHOӦSo ?e}$OaX Y9k0LSkKMY̨؇%ab,K$ V+ sU<[ c+bayy47PYPzREͧlǒXbI*X9Lǒ =KDbZc;6kBb X[!CXCXCguأzcu}ԑXQ?GsxԹu.$yż:Kԥ2uW9d^5SԵ<근:ԍXMwfu5[݃ߛ~}pyWyu0G"яԓi-O` T1188Vu1Xl0'#*l2F<8[ZcuJF5_FKFDƆKCD@DƀK@2"2:03 ή+Whddu^p&ovwVuNu7{뺗-Rm]Ucur z z5z<=U<PA;XSe{ܥz={TW\6ޙY&Zug|Fr]]5uuS|C}ǫ߉ ,Kgܶq1=2Z(((ȱdX2rB2rB2rB2r 9n92rZɔ)#c0KY.0\<),3W\sUfjs[Dn˥r-e|ĺՊeN[N**z†SuzYG=ib܎rBGk8nGk5hyИ3Uk5yI\d]i]*z;OZb,_^a*s'kWkŭ YXnܖzOcimlٖbeEw"ޥDg>j4Pʨwy37~?~_?у>g'}Mp= ƻ޽  j8HXk`p]|6d8I9XD[;t0~x密F^DDY;aqTGD /~Jӟ2.WAlu"fmu-o NTZOsOW=q-жN ouT~EJbO>RO w^mJ]*1R=.!u4TʼI'XH,9Q/k*?c q53~'- "y}5ubh/$ҚԾ~^^AlVS[GVCl'tGKI8ׁڮҿ a)zO9gM_ &H;PO ^l52{WOWKޘ~8Gs'#p6KHu˶ KX{YmkC_Ϲw҂UZej(zOE0^"tTU7'_OM78ZRM/o|jxF!3"xy3*BpI<Ƿ8͸mo3v|qیJ[[M<׀dlՋz`GI(b%u /<Vթ0u^wc㰰c[ر)Lx0bF| j^X5aaaDv7`=!8B^^u'|!|9Sr؟!%-Vhb!(Vxa>ŨbPfXf_uZ:bX_3,iubXgH/ u:bX)֙bmXKXKX[X[TXG,#^ʴlcخ) ' ., ., ;6ŎMcS;6ŎMcS;ĎMc[f w5݂݂'*d̀2e g;VNRKJ[DpECT[bF,5Nhc݉ l"}-ȀDA"EZE%KZ<E2$~̖!#$_T$ZbvfK #k5GĚb͙ϔ%џ)џK\HF" $˒ϐ/ _DyDyF ÖϐX-_b=u\>u">D|Q=l\<2rdexː(/_F]v2Z˨ H˔.[i2޲_x`݉ڲ%j3DUe剶bV{-:-\+ZIJ4["8C"8Gclq6[t[t[t[;Ct[t[t[ttnNӬdt[8[BCBCBC[["DD!%BJhI-_"DD%Bl-bkedɓY&_f|edɓY&Of /[n^_1}O,=(qD6CYLyHO8V|*QmL7}%N)\~\ئڟι;?H⻽eupzJk 觜Rk ?(ԹS#~uly%nĹZ|z.XE['1O\KLfO~[FĂ-"TZszW#1s:q(5?S9-ֿM&-\zO09oOrԦ֛˹Jޟ-[c3bap>Ow֖`_[Uuw'Gs6D} 1NTӗ9^?YX^ڶ{5sK;}מosčR9-;3(U.!\tV~>G/QMWǩNn}oj֍TTuwJzHO{֩Ro:ߢmjVERso-Ihz}>{}o3R u7di(bgO)wliK|l9Y>|#FbR'Q[ }،XxŞ7{z.$=Bs\6ẍQ9qF+yFqxk q.}Ne=Q">ltf(f.FtrZDr~ ?&te?2X 33= +b%_bc+sY/u>= ĆbC66Z׸p ){Z2ݕXUfYm`[[Yn"X؏td}{FeZ,<[,˳lX^D,/[,/"-3<"v>%sykg/P^,{%إ\v:XjaF3JeR#Xj-:5*{u2Q xU:jJ^){5F{UPj'XbC @ #F&X^G#jDYw쯃_؟_/c᥺ml(`=F??וe7*4z=``lќ9#Sќ<9Ds$ C'K22DrꞪ7o|&˷ot{v3tvfs窛 0lz[ĦuQIJ Śu/p/PK{sp`ش_l{{eW^cY77ѽIsovoV[NvUŷwz'*qLP=.q{< }z!=nkll3YoOT>|C|O8?qW ;zh?DF{GdhhhfoTMyެdwA*__"?2U_RK8a?j/1[Diwo#ޞ0;"X~Z>ĶuO˰:Dz>^~O^rz& f=A?oH'HB=@al.2~"oOaU1z9W6mMq_8μȯB6Ӓ}c\پiI;^g8u=>O8ս,$_of흇9&OM~aO"^ܴԯ?`67{<wbdc%zMԙ-su9B'[9Y$娐m3&%MkDϱ#b)YSyd"RM=q瞊!Fɓ9xE/sJYȻ)L&{_*u-TquS@gz[>ez<e>{oo^WU^cc}=~3G5UhZkS99e-jll()NYJ hM[lOrJ˟kg4GFstU+T&_:Kg{K ?%ۣ] (ν3,hL}g=H+$Q" 0,0l0Zc=sN^F%#wLѐƐ%["D4nh+uS[rENPK R $%I rUӔ\մS٦R?U2L|aȗN/ p* \0\rzKq_rFIBLr-rÒ\w:i/ܝ[K6{d/$k@r,aKCHr%Hd8Z2zJ&Pd^%f62E zOW{ڪռ KD품D$)=QwPb~KX}$ΑX: tEKXҹKKgH,+tҹE(zDm$n#QtJˑ(:W$n-QbmJ}ܱbs*6wܡbsu.6w\`\|%ő/y$r\|%Y%o ̍Qn_ S-rn,K8b1T8,vڻ_WEh/@{QF:GԁuQF:Gԁ~2|xD'@Q::0BԁQڈ:u Wԁ"QrEu Gԁ\Q:pDu W[ԁ\Q:!@QrD:FԁCDuu Wtt-h#Z@N~G!@QE$QE$ 5Vrf-l|JLŝŢ !G1 t({{jH^MPlɮ -96AK"*968t={@u||ɨɗN3IrcCCUg&:HL9ʖǙY:Eɟɗ$gə$ZFɜ$3$sfd ̙ޢt$:||Kߜfκ!y5$fD(51QI:JMLi$GuNߑ'9-#JJ%',Jd%/8~qp4rh.8k\Zmɕ+ ^T ^ ";@t\+<$ǒdvF%ϯXr\E9D2zJFPwH^PQyHvWӾȾRe<@4w 2DrNKUgQ E'hуJ6=(Wa=d"w.=_`aŢN/ьfA4.4uAG|_+e{slV X~B"uo%2_'#"_ 9;qFu v_ub;+:Ӛs4:Oq«jl-#Mdt97[:-OK9 96}{u 5?Tfcbf/T R̦hq/d֟/d}w#K羸U^IOwxZ>YKߨ8MzJ=O-3S\ R-x&=glT.kzzO-TnOfq?+\{;k#Fzʸ޹$?\fLi Ku.FK[G[k/O:W: 5"bW j9V.\9yʮ,dpVPuKWg3iߪĦ11c=<==#=O,:ͻ3z!n'#B|EK}S|}7c'|_---}[ķԷ̷W[Vr*_WK|};|?vv}iS9f;uuuuuuuu<̥KM,Em[%Ԍs%O*\wɕxSWsjLy%--_b~N[(KaSpEeJ7촓ʠ^f>a i+EkbYe4qbòَ(1%[r%We=]"Q""Q ""Q";I4v9ͱhEs,cw}D;Z+zP7@! /GVW z_D2hկ~QQ Dk-)[T?ST?~>QZd-2h4G%_hYelA_?hE/Bo.pG}ŢE;D*X*{D+Q:ETbH.;D, `;Ht.unuCD*jQ놈Z7DԺQZZW j]kQzZumD'j]umD;TԺQb.j]uYֹ[1[.$j]u}[-ryEEZgZ.KԺuF\^KA.k\S;Sf2G;܊D;Hp+XԺr[V$wZ> nDE;H+Myu*OԺnuD+9@欁=rEr\#W$=rE=rEr\#W$=rEW(=rEr\#W$:`E,Xtp}tEr]hE(`'[&I4N MhD&^4΢ , vM`{&E4.ZZZ ]ͮdKl-5RFwl!֙ /g*KhjevhDG;ZtEG,:`ц6@ta刎JtEDGk#:ZT5-j_4iYeȮ5-KԴdW%jZQӊEMk' Qк],P DGf%^0cHJy+.rT|'k)I rT^,y8`&dɣ'8OgD@?:OkL}_,|P mu\˩B^O>?AvXpv0fYFѴQ.zn -Q,D}2IEClyblycD# ~Uݧ)e,n'67+_i;yz&1|Z^>ڳyH{R} u<ZT\s|^Ε d=ܹ?Vzzӗ)*uoѓU_./E`~f~W[c>X^wbz.S e9~w 3?(;֪OwcAZ>g*uz6XN&osAtVzg%{;Ӽ+Bdy~YQia'GF9kݞ s_s@ث彶e{}wJ$ћ5W6'd`g,=єɘ'?CC4Yv pz_qb"7H>'Y@A|Al@D ۇ;a褷yy9g[|o9|`~8,m6`ep?ZY[XZY̞v8 ,ti3f f߹%5$5҉JCԪw$ QWTZ҉RQx$2%JteHteHt(C=!{BdCU&m2Xgg,'$ΰ%Klsmf'ƚc));#K[>6'܏//—”””||C||C||Cy3 K5oWW@>ZTZD0E8RT ^'!Q-,鳐E,EWޢZj-Z,zEo+ڈ^NL+ډ^⎳NW^+zELBvW^!zE'+z^INb7Q+ډ^q>+ZE-=$WpQ-zH*Š(!Q Rw:CD1h/AQ zն-m-AJ+)ZAW>bǽŎ[Jp]E%$*AJP(*AD%( ,#d<"*AJKTX;~ډJ)*A'9]D%h'*A**AoQ ytPTBQ ډJNTntksD#Dsg;:[jHƪ!:@_;HA(_}eFFrk={$x.Js+ϭd<v2ɨn'o;nqP^w 9WBB2 Y $@; e(]d.(sAG])%|גזĿ%+o)fK)oN;II"B|{IIfD<gV2$#mPmQTJф=(DʆWReذ5~e} "h nP@|` 灉20nw#)< vOo|9jY9o K`UpCp[pgH|`(jj* u :3t^hb [Bw=z*|hJhZ{C ЦPC1 [p8;:>9#37< <$<*<6|jk7o ~0XWo<\^. W[;»3<̌]2/㘌a3N8=c|d\q]gܛPfjƛfLϘ1'یK2k226dl؉3e3#2ffv<4wfA#2d<3̉eNμ!;3|$3dN|+̏3?*4sQD̚M Y,++:}VY=f 5*kl֩YggMȚuEֵY7eݖuwփYe=b+YodA֌ϳJg-*ZUU%kG'dFr".#""DEFGN rIu#G<y"lȫ7#FGfED,,#k"U mQEHUm0-zhwtPtDtLt\yщˢ7Do?H)iѷE?~*Z]]MDFk lWn>sv}d=6쳳'dOʾ"웲o˾;Dz~17 {F%geʮ̮ޒ#{w2c9XX^~cbbc'N]$vUͱc={6r؛wccbsbĖ5؆ض DrZ)shN9r<3wv7 l67flVDĈRDHbH!"R"H)RDSL)RDDRDDD#"FHy)y;b}>?s?yܹs9 5&ۦfٖVmklml[m;lmlmͶcӶV;&Q{žwٻ{ۇGG'ڧاgۗWW77۷wُ['gmCv6rIG111QXXXXhrsltlqlwrupvuwru Nt8}Έ3L9;:89{:8;9:G8G9:Ӝ3s󝋜K+5Mέ}΃f1 ig.r+J:\]\}]\]\#]]\]S\]\s] \]\+]]k]\]\;]{\]\G\-36-nc;wqwOrOupvs/t/q/wr7׹7wOzc8<>O<=]<<==}<=AO紧˼Fkoԛ𦽝u^޾aޑqމ)Y޹eޕ޵ mޝ=C#IoO}f|1_җuu &ffV||}[|}|{}|}G}}|g~?S.n>AQd4L|"R `c\@ HҁN@@@@KdL- AsCX0;{{cビS3 K˃Mu-]S!!duYB/ CPPPPPPРЈШPChrhZhfhNh~hQhihE1&>)5#;/t0:::j 1l [îp  'pp]{Wox@xpxXxdxtx\xbxJxzxVxnxAxqxYxexuxmxCxsx[xgxOxPH%|2|&E9bx"H,d"#]#="#"#C"#1Iّy%UȺȖȮȁȩ2P֡R( bjP~ ˿ψ§ 8>Qy9W9y|̳42Cjl_sg) {^9*pv/C g..4O"K`W +A E~n½tNC0 !4A&Cg+惈mp=[Bc&Zxq&sDI~&POy?|dktu@cڑ(+У--UPpWb~ D>8"hW\yV@i z M'M^+魥q-w@Q ïjV] rnR2<@J,=_W㍨>DVA},NC|0>CUsŴmOdgGqӟ׃j)S`CF~ o+ǵ2R;AРF5ܽh2W{%Y߃W.ڽj ӳpZJh![U[GSV(oAX6"]8:7S3?i?*X SS2n٣dN_Tn:D$KBVo^A~p OQF'<[w[ Se4&Fmg}tȢmRJH}9xON{pGt><w:k[ΙӞAueM@Orꜫ_.)}Z,, 9v(ѺF;p /)*i4i.D0uD2io^y `Gg3ŪMӚ\<3f"[8}K>(iyWiLk2̳ tr'GI++[G]t:_.w^Us̓r%`QzNinxoMnƮk֨lRM}ZsQy'`:Ү됇i?_4FC#\{9 ݅u}IG\Y*˱GuDzM#_ͣMsGGE(q5׆HAրvkgq4طB h{H{}d3F;B RP4Ӯ&>a?BFIZAokC h/Ґ0TjCPcHj e W:4t1\e3\mjFa9*J9%g@N^^*?!oG&lCABg?3%\4NR w #HJuTf ݄Bw寏GAث .( )Ep3~:oms_> ##Lwjma g=ֳaY{Dxb1!;)bᠤpDR J {E H.#BRH"iffῤ[[3pҷo 'OBhV̓F(=-=-KkD9SN"Y+ѕ]t:xΩsW뼺UWL쮻RENS^KG'ޚ=.[6]ozx>#7o=^^oҿ?(ޭoֿ#ޫWLO2?/~}M|A=u*>hp8paK<⋆,/ϖWƮ+[˾.o={#ﹼ?y;^a佚*k޼yo}}wB;sȌyR;Or+*URx6ThtF*M!ҵơۥw)`X/3c'77N7/ 6N2Nn5N3XϤbϥƥƥ$rJASƧ_k7tZZazziM[ƷGGKsOH'2~,iIB~Фdzn#'eiE~Bie~QUZYRS^?Fڙ?6vGJ/__Z'77k7|Uf}辚ɢ~~O꾞t7yU7@NpHAn%? ?}K&OӍ-ϔgFs9{tcUS{嵺䝺?^79kVݔMC; ^M̗Ed&.쫄JaJJC )_8pjم .)\^p]- w-AQd4L|"R Siiiiiii頩tttZĊE"k(P-J:u/UԷh@aE#F+X4hzѬE -+ZYhmцEۊv)_tHQKɢ3EmfY662Is<<<\ocodjamg^h^b^n^en23o4o1o72506572- -Ŏb_q8^*Xܥ[q>-Qo]ݼ=}C#c iޙ9EޥFz&Vn>Ao|Fg|_ԗ}|u^aѾq)Yžeվ ;m=C#I__f1ҟww'ggW[{GgB_ R.n>AQ@c`M`}`S`k`G`w`_`9p,p"p:dAc]@0LN````KdL- !sBX(ʄ:zzCcBCBSC3BCB CKBCBMu-]áSa!lw[Ž/ épppppppCxrxZxfxNx~xQxixE1&>)5#;/|0>>>n1bX#H $"HH]{Wod@dpdXdddtd\dbdJdzdVdndAdqdYdedudmdCdsd[dgdOdPH%r2r&V+e2OY,V,˔u.Z֣wYeCʆ՗)_6ljٌe-)[^l]Ʋ-ev-;PvhSegBDQ_4GSю.nў>AѡQѱцhctMt}tStktGtwt_`9z,z"z:Zʍrk|z /+_Y|mw)_~HyK3m1]Lc'bX&95#;/606$6Q}5RƔ)eMRT4HSRu^aѩq)Yũeթ ͩm=C#ԙT[F1j<5XM&SӹkM5j ^S_3f|ͤ53jf̫YXfyͪu5klU@ᚣ5kN՜M iCCڒv}H:N;{GGǦғ3sӋK+ҍ5M}tk-5֚j@m6QT[W۽WmkՎ];vb鵳j.]\veڵj7nYv#-'kԶet9c2L($3LLLLL̐L}fLf|fRfjfFfvf^fafIfyfU).1%=+7s@ϭ;>oZswEV}Cwde&o@;B348+f=8^ 1J^,K7cȃqC^#87%͈3bJwAS8ň}k`R>owyS| }v:K}xbW m\@ax7$2 óڻ/B~W #L+X}3K!_ W(.rsL u ަQ8H5{x}Z5[:h H7} gpv N<ʕ!?y ؉J; f^i7fHߦCy2JÕ0HHhҳ?9D܉#lFA<] R 1E|XqST+q34HՉ< O43*,è F|=מNT; D<GdsPJd9Z+e\ʿKr@&Ǩ_A>dZFnw!oz/۟Ⓢi ȸW %x(=F)QeУR|_|Ek"HqV %9b0P8t,,*%/P T2 Z( " U<zX6;V.'AZ4dL3 ־8 $:Ggk=BOrmUd ?P]@FB y#>J/rq&"9bn]ip2ts1+"}!,n< Fgc KH3q!bk(+)nk.a "Jm6[`t/Wki#A}1;4 \>GkC#z- с̍j,*=u ˕/^y*D{4gBµ.ZLrjN#"< k S{~N#~50F  A 4 n8Z{SŃ@Ns1YD H XcvfeT>B'b<r֬ ryFNM%bN(sd.jtڻ^dhf־ ֎HTWSo*IKM=oYxY,'qM ?jSC2lzm0g?Tk qd *2 sKv3H-YB3i^'-CkddıA? \ F= }_ZX$U.Mg].y@0Xo D0V4'd6$ks$C31}Ix *:a}ބpni~1Z G43QG?H5Bz|9N$ VgjOM"BiL%ܻ%q4Ǯi:% p7٨[qҤ!E Du[}}oiTL@ A#:y#C3dXѐU1O}0^FXd^E_t*)tUXW:.{Z{)<_ލ4j+@=62~ZJm"}Z?bթjM胫_dX6a 8%C+хwRe/rNyPi/MJbp^zǑF~X"0s`YBFs5&N}0d9?F":2Zg~I{iY91QwirTsʂv4ʜFs hfr\>ñ=3\j1Gş=Rsk'RnOsʱP c(cI'\OEӫWisOprِ1WQy=RknOQ^}C|#cyra":'s(ld>NGƎ#9hJo4ġn@8.bo\]kS/q'_r^:t׽9 J4]L2!WV)#riE-V|-FeN< q'_E.*B{?hHc r:s׸']PiΉM_j*qiNij4ޚs+=hב+rG|vVk|rK/\+!Swr 8cιJhg*if1W4@]ɹeZJw"{AQ{*<F,jNn/Y }DLi?;N-ԯ5_WӕJ\W 9 WUrz"fMn&jX;㈏=pd|-/g"<.MV?Ic(FD޲*~\Ą%g-vWWsqҧR]=K Jcfԕ;} W9#(K˥=/_yye&'TlqYe$B}Q4 \b׈~K}I>4@e kJ@e MVJ&{A.1/LrhnCoC C.k'"k{ gB(J45}UaR>gz\T.jb_Q7WH /邑]ifVIM*.J`IH pp™qf5p_'7*umpja0AN(LnR f+}ShTF +BO/ C厣1a}ٜ%jafwX^aլZ2*LVJ/JY}f~(H?~¬OY|]!Kd-j]Nw#Q|"U|"[w)W_aZfO&ٓYww-l#Kk(6XC!Ύ3cFѯ{Xfƫtku۳u/3^ۙ=3{x5guw3Wnd)9}qqqogOgO&?lhWk ?;䝆#Yņ,(X`a s(R߳0O D ˕J MJX/-JzoVzz):u:(^ؤaRfOVeaMUt1*&ĴISr# ܣ\ƶhј,-;SA,*X$<^BPX$XvEB*3y,:&oa+1R;.DM }J(!:*z*+a*aF)a0Y Ӕ0S s0_ T +Ш5JXMJتJح}J8f%S %VB J0)J*!f:)N ݕK }0@ 0L #0Z 0Q S0] 0W X y^:ysy^:ysy^:y<57_Z#vXϱ9Ҝ^g>,x,K)y*x-j\? hː9@ ¾CO22-Hi~ oӧ@ўȰ'"nAߐx?4d?di.ZA@&)X$/({??(ddT"Opܪ hhM#oQiC [x2Q#-(쯉Ui4D,G\x2?cD]{@!vY߾\nҔ#坐?'I|JX{<*YJ x 4"e)6F!?8!%5j鈯Ԓa@hh:s6FRU߬m,iqG*q#7p~:%8kF6&Z`H~v"~SZ9!SOgdZ9w#ٖ\ZzT`h?4ot/ J@$]LꎼwV44'/5KXjȆhF"cNu I/jE<܇OCdi4@UDǵc 1˕E+gp;Y3Zn՘ݵah̍8 y[Sj]VA ߇~T\?żsFdi둂K#쿸{#zS~W?fבzru3ׯ{P "Nqozo؟ hE4Wa`!ќa*RO4*LhMEExSm.#8؅>;^n S>}|YhڗxʿӧžO"D|!/{[}ѮWy 8x1^h?4=#'Ͼ][ڪYՓӷ m{B wމ8Ns5Y^9WsH1y1ZnWw8yTwT3~xoѴP݋=b_KHwB/~ktx\Wx-젥H^_/4TYz6Tw^G|Ҽ%|k7y?@d '{y6d_voIu~CMECv~!eH2NΆ.:CW/\&q9!W5rM-oAp.2IvO_7;YcUDn /XVD' V4`uM /T[>)B8_w= 龍ttSpast+qn,JŪY.c>#Xb' BVfJvD㥫kJJ=uF4@$^, KC!⟤Qi4Z%ƈHIxUA(~*5g)sI$8wEFZu1{*o NݫFߍݯߠߨ:/_doTƕf;J˞ʛSyq*o-3t7ÖgY%PJeJʍy8ֻ1FuqZ6ֻki87/{ZO|<}4˲^odOdOOdTo͞ӷT.`3?c|xݚ xU֭[!q{X,a5 d ak &AA"" 7@83l}<̈u7F?0}ﮮsN{nw@ Musz$@iY!$5B'OD _oA4ZCC\V耮d XLDfnIr_UبwǢ157nF*`NLu﬎:h_ ;Rp 0 )-Ua!G_b$BTBX)}i@Mq|6<$ 1ע9Z#nD/mtC~ّ Q5Pqn@[G'@ P xL]7rJ p :'n­00 `Ɂha0iQdapp0]8N;:0U8C8[8/} EeUµMm§3 !ħ Cp5_DJX8e* GYDxJCI|ږVF cq' M- I>4l=F8Q8Ux0W8_8{ {0_X , G%Sw-3_Ԗ1̖0JfC,a)#uppp0_X ,̞ۅƒC#’U}JCY9~-~&c*/㾇dE~m~҃<[y8Cr&;?>_5ۃ؊H>؃xN媹>ku+lI%\Snʠ?uj%zQW'!uLV/ߨߪ6&LzN=~5^n=k*s[Yeuw~kUiW߾ | uFO^TUM}>RôV.a5N}>MNw68Mfou6Va}\ЯWku>~ .n~o*Ψ}yѱ;ǡ2S}4Α⬺`ҷ@*zN5Jo{P=uu1}]}ЂNNw'7:C/قlK v&#5Gn׎/P+d3! yu0^{/ڟٟ#ch&gz@/@S 65F[]ؼd&q;՝Hs90b0W ƈc@sBN%8z vg:ENril}2OOW"㹒诼yֿXZwcsɩYa\Wj~jϾѵ{, _aqLDPMY|bg-$v ['8/ .UG(wA4W9\QrP*"L #TB:MgC:K,rJVcY ܿo]<ށ[DGbh:}Ͱ 1Ha>`_UhvrF_Ѷn5m\7vjD7ZA[]Y[C4ɽJIQ,]gf"0@HLǭ {s4nc0v 8nk5?/a ,GGdF1Н=ѓћV`v0]f7lEfk3٭ɼ>hcn֯r3~w/*PO]j@M8PG9ԏpa{knב+nm>rOxW{T{L4=.-m"}U4}MhWh7M$=ݷD{a?wG=G}ΏDE!?ao$#1%3/:k(~:eEdU+?{ڷG~}ks(?Us͹σzrcn[ǭs[+2pϱ_gdV̬$r_鯉wTiYL|vm;K5ڮ&*^{{A7uKZto]Nۃ#1q42כxoieڙon1feƙN3L7wYfoYiS`6̻͟bo[V{zzom -c6o{=+;vMctmuS [VNuGIw}*GZ}Lgkuif&t7&Ť`3Ĥf4434\3,0CfYajl0[379k>3/̗+s|mgy!o+{; R xxY&P tyPLJz  x՘gtU%464`zwLｙC3!B HtB-Ѝvx>oog$i4BI&HB=O&\b[d KvdK\֒eZѲ('+9ENt_9]SzI1 "@$"HDjFEF."BD"&"%*l*%WED QJE[Qt}DwC}D'b'1Q֓d}L5YF9i 5h=m.ݡ{El1[vm/ھ6^ll(.l,k&bl#[˶bVqˆPCn[Vٝ˝r#.]bDK6[ dd1FS&z˪,)KⲄ\'9r(rh*ɚ,cq.īx oFMjJ?ŊbX+FClv[fP앇Hoyp `8&U`da/K U555 ]==#Yy3&"UDDdD#jE1'H22MdH_dȜёm";dR3EdyRQɢRGZ4HYDYd{.ΰ8w}>|H:b!`i ="’, _:QKkH_o//)=-y%=-CK͈#|ԒӒ>2IZc2ῴ,:-s]$-XXny-+muO]./reohbБzmAc Nx|R&$;?Tphp!2pQ,\67ǝDnueeUk16omDGz(yj"k]z,+zy':#Lg.^>yD͚H A9ZJIHO 8#z<H{7E멫&p` {+4^* fMsh)圊qJ1D}QSUT9U^ƯUUQQ}U%UYUQ*VUUT?U݄jmVuySQT]5XS.j&jjFf>S3T 5J}~fCPjJc[Qe=%ǶhE#mޡQ.hlE5atJTcp #@h2;qN۸ۆV5mIq(Zvo؆NRkpFS[JؙT~Mbjn1}nR;un*FUmm0.?CTƎ ZK5^MD5 xJ &Z5?Sm5^MU"QMSKRL-W+JJVkZN*Nm0F6jڪ&#OlKڡv]jڣ}j:CVVGQuLW'owuRR:Ϊs꼺.xuI%ꊺꆺn_Vw=~zֹzgz^W5&So[#a(g0̋Fp^._(o7 Xg0΋+V".`60es\ w'y;W^B0p.43k `64kh~2昷sMl~1KR,7+0ƼXP,ep*,1H岺q.+ ָ+ ;J+ʸkVrv xqQp'ZCVCGu(MqGpMĽKNCgYq6E/.فⲸ"⺸!n⎸k.";z~y;K`1̋W7rX+u]XEt>]Tt]\%t!]~鲭gjq| +ռ2q~'2x#i>g:S\(.^WP>C)tAJ$H-DI-2P2=e·dZNf`ng%ce"l2!sO)=i*Pm&IUerGtY]]5ty]SWеtE]:Vʺ[McUw41Ma\pL qp 6u73s6M ` ܆p]W;ynNxHKǰx {^x U80#;8qc8pZޝu_&?մ3w-9w/>ǁ|E~'x~ ?4i ݂9p^\.jx .H! R@JH! @ZH!dPp" A& QB69 'O 7䁼C(0P C N% aPB9CyPAE9¹ Ds ՠ:ԀP "z2: u0[yo>@=(QA}B&'y9ifMmg?ƾdi[a|o";o }͠9gZZs@h =t :C ݠ;O^/ }wVa0;7 q[0=fan-!;8: N])t\77p*W\mZ,C6'xg>:`R2[mJaRJیRPzۆ2ضaRFlwl{P9;/OkP=;Z逸Z5v9u+]I*bWS/Gc7R_Iui}@_؇4>/co&W4ɾ[bT'ͰkJNM8 nqrήź6O۱ i6ؘvaڍMi6؜a ڏs^W^C[قv(èN*bGRQ#YұKK\fop{%s!.K]:һ`fl[vkq= 6cg]vN؍;s7= wupǍ܇s,< < <$$_tx _;|o5i'گd;NSESF*ϋG'^B?ro捼7۸8\Kp.17)S5&W*9cN9mΙV< <"ˣ+Țrܡ#eΜYu64Lo5on!r#x\3[5KuQUW5GU=7jYiVfYk։:QC433|&ĿQxc` lnn֙ _d/u,,?AxjXg0u9P+j0!j2+.|d5%(ۅXa}WM2xVisV$NBuyij?B0`B,.JPZ)v}~͕ig7~Z}M I;Ôa|ϻ:zw JgVvt٢0:2Q0:o6! "!S(M{Us; ہM%ʨ"IIqV5f>oNbA FIF#+ "vpe=b ^;tiLp?$3r($$ ~_G~%zODw'k" o ts'#Xv(h+L1+bƔ?$/94;9u}7f2%k' ?>ex[GɞP/'2,Gɘ 3eXMzI٢멉S^eeX/B;OMflUԍ(3]~@!Mii5s:%.xEf4Tk7HrzLCoVI ֟U1Gfl&gg?d.b;H8yldK6V_A&D$M߄RR0%呱7MSj^wi M9)o`9Ә1\%gl]@|١E,gTeJr,RIyT2mX (Q!C% :TC*˯{]-#K>YJr>,G+*|dVsEC}"O㣸*29h82J^c@+96*DKI\!ã9WgǍ`N4zcO7d5d."ˈ/;:tEUZ/*UX*h"wzlbuELi..~[f B^WBzڋǢA9 }s+xYa=ͬdχ.lyR{(]/Jzq3^lG^}'KX̲JXh .m`D.Gh[q#GTNෝnPM~eYCjnh50|}"綢jK]E=f9(K*zfK+:vkb>vKMb|9- 1 s8_˘ŏO5 ]EW!Z5y |ʆyDq;R SǞ dZК-aaǜ_0a0Asgs_37a1A`9 :aeEGi>m}-t?ᰉn?AԈ?iԟF_j4bCE7GG|5b1z: xrT8rMoxX[8s @Hb3 l0xx8cgWؙ]ɗiߗi+i]+ }?XWyy{ι b0qF,Hed2,ԛd@r!&5 %[-f!b1dw$N_v8 .ǂIKR)vO_QޮdMJB*z%{^J:iU-]k:47C*G'dK n d%;qf3 @&,(P*Nm?P!Yz!N.RU+ԅ.>A4 HM!t G,`v`1Jͨd5+[+6YO|u|\ q¥x@/PZxo6vsgǪ~ s?./0eXs,)S qE9B΢YmY;&ͮRe՛(CY|'G?D 1&8x׈O h+#oOV{~?_vn y?[.ccL(g xeȊ?>X$- xZS ɜ'O >I }QwS}!z~R#5d&f&V6#0!ǩNnBGOhh<@&nnX#pr"p-YZ[ HJ(^x?Tq-IBdZ NWo>8gjVTZ!r(I_6Қ\]cM*Gsmi6Y?KʷW*B#6Ww|jS_- #{0{H&^xjuꅫUȕ*Ҕ!C㡍6RNߑveHXXKdCxQ/*0 W-h \ W,/XƄ|s9,&\aϩ&0\=㱯ǩ$'83Nw]ؿ MZfrgZI"+Ee.&P19-%^޺+^gM-U¡`BpCO2lʵ3poGv:V.kEvgM篠f 1FICGIjRȐ "G1vR"'픅D:}?~a{v{$=?,& GĈ+`g>şh3CJ!C'))Bz(@X*g ?ZѺFERJa(ܙ/ -Y N@2H?IJ4* 8)f-;Jibcqq$Krn1ܣr*uqltHnW(rt?Iip!PR#ZU:ABZQE$RXn_~/*NO $r 9?;wUhӱU|~E 0dChT覇w윟,)X%>xIs4o|?=2-+&[cL2=CU SU%GZ)tCm~2~>>{qC ߞ轰!T;m7pJM*S g(ᑹA=*Bmk1{HLtwA ‡z5QeoW̡0^r') ޳ &'5ID}>)a^8Oѐ_!뎱kS`yEcIG'{.bW"b/h%ym%O^<'t\񕽹XtYUJJ(% NRx6Έq&\߇G$Χ}O<3S<]Xy3r!}P)bQ1d&l=|{F)Fc)-S^Ѥ 1[G-d2lh E!gN"=/4t`H^1a2fggJ_ >.A}+?;Ҍ.{퓍'##}YԸԸI$nB5sF`j!h*Xjwt ~|G˧S[hLIz-xI sš3ıc=[&]+~\+e+*Ccmd0X/±⨱9>:h: b3"8 Q&W2߱xD ZJ"cE{uDb[}NSh/jPsP@Eਭpm=D|Ğ0oln*1Zxѳe3i!צ8jc$| O6zb $)zo$M2/ǘ02PH6BK+cI |0 Sތ)GCz?In-Kw3Kg˾.\>;qǡC[TޔQ(Je3:{~ .󔧻b >c2$Ė./jוb1@ryzժM2&I* T/km.\Iޢs|Cyz RF|$4YT:&^Z{-qJO{KdmX?|lRX3m/[z(CF (]}zCGsZԳ4B(S$B+HT!1)mqZy {_Zx7% s->]J?o^S!=Zfo%Eyl&ZS6|3kq͞`/&Mȸ07v̂F|pJ [ wb t7szф1"|d.vh$ZnɫHD`2Ud@^YUtg*yEiUMU-.)un!6 S+JlZېfu;慆$6o W WB_Pw'+]3Кbq>B>,&ORf ^onK ua*WR _jPhEZhT& bx+ku B֥IY-*D8BnFx -R~^ᕪhɾ!ءQ)>}bF1Od-9\* b~xn :}qhz9c= W<J OIZ6c̷'FvK@saSe4x"sH2QoH*bsꝉ݋WH|6YT1tW}ko#v^ZXSX ں(uf+ۑo+&\I~`.e.L a]aﮊ0d>g"ާw$#0v cC?!&щ)hP'PS_iW[-jyQOQ} ˆl;lSƌ c.wԜmm7@pU30RVdpΠo%o)P!Kk%/LŎrZd./ˋbdԶ80 O--tNjp;Q碶dgKaS}_#J}cpF6QKTrL:X6?IA,MTJ8gyck˨K)4gւ5m_ۑR҅xloc~6>XxNB%5YKuذ?0W{R{CZv`o@˞ڀ8ۻ!R%c0V2R!#MpQ9`4;bK5o {$XQl XS5e"t["YbjnfTR|eIʓ7$ω]ޔ+TD'!9_4"M$;g;m>gݳ;;ejr}u{ 5yi]c!@i M4R%(ط8*!>/gd 8KRll^H.} ]y\ҜӺrنΨ$#aZH`qQx}kHF{Ƣkѵ.7Ĺp"aqWlﺜ/t#_M2E޼-/T5q؊)r]?5'ef~LVnFOL3\XhwLl;hGL:(ډnj wwLe/T啠B^We)5EfI9vMS¢ӴiE9-4Du̷rP&745^1A!H8b@ioI'XX+l: c +UՋCȭ9(8*F$U9=ԇ0gHzß~Z`@V.O\D$G#i|Q@$y_=p+qFOD  i ex[wR YAd2>GLl1AnbøS8M3SbY?$$m7sSzocD>J>hF_7<ȨN:IlGhXrkY'!:uvP lipk917dAOœ&l3nm3x-m e4(sBhN67 x ޸}2g?DS))m%I3aʷpPk {'hJy=5 y\Av/ͳ$(WV[(s,3VJHaW;I]e-DK!HɈ7܉dR}^\hE+9+] wS/&̚I${',yS9m* )_uBȤ2@,=n2M}7QkП"F4cJp$[m;`A*l SQ%՘Vem?'UT\7f ,p:n,SfLo@ކ;-{px2-#mqyX^OX_mn# Q.)/.Ub29TJL֢1)En%8Zx_oVK:zR** G֫Э uY;ꡬ=\:^'K%1inczݒ8ȂӒ%}RV;5G ZO,,ghQβ%x0mOC;%ch'juL$/($tҌ՜WH^11$ !#U!UQi\AMN_Ӱ`L`fb Q&#fFx<Mf P̻@I+)`J!0*}Ž'Dǵ_sپPw!tYѿ&qjWNv"y/A;NS@-Qӳ 7x~sťVśrsJ2+/Gy KV(z[ԘzF"}l| 7%X!\$f !Fd(~4_%u`$E4t8 A"Iԓ)Pkq% N4 \m\j-ʆ/?[.J;忦Q==i/vy. 2r=:l. cUE}IrCY ey;>UX =N-'"G򤠼˞A"laFH3 Lc*W^{EnS ޞ_=z% au&$0NF!a ,SƅMR4 KƏM)Pu K źuk8_1˥K%`uʆC dzw⤄V9cxѪV'1 |TGBy,*TPO@I(}1SXd{W{ K)/Teꂨ "k*_Dxjx2i8kA]3oۜga~fӓ g˲b0ҳJvi1rq{:yRtwQOƽ&S&r Cs3"\Z܂ɰ38TlK ^Dzl *zSebix4~\_^HvǫK{qcsc_{:L;|]/g_X!g$Ch%aEqt0Y` PL(jJsS*K2DbCs2]B߆hlU.Wq^4"C $:Ӿ[x{ХSBRǮ`!c IH&:`Rw^9%_ʼnu ,L.UnlLKђgXe @/Fmvr5ւ_ 8z%%vUJ7 nН"|QABiRZ ZB/ƔP+8׬H_MuZM>Gy^Zb{ q} νjoŽZdcԡ[IPX;zR۰eN7fLZ}WܞrGy' Z(V_+:jGK@me?gk.evY'SkeI g)}CyhcƙRrO[].Rh/jג+3\!U 0db]K>??f~#P脴A^xιeeF,LsYqY)n#o,?'`ll3K8כb3Q"󅦄|ԧj[֖躳yфxB"6zJR{ۗy(&>ݔⰦ5nYVu!)Ͱ[%-djq¯֍htˊs6\7i\5ˎAΞNdN {U9TL)31}{C ;sѩZ Wݾ}NB 8"YS>]D礔35lVƖZOrӺۍD,y2y)-[R"B،]0_pVڝQ|-{JfɁQ6r'sXrs"Y 9ߪoqs5`NA3,ۙ@eDG%ٞ"Ν_N,[(w$g֧q{jMBZR]MZƜ{{ |!dE$tۓS ҲStCޚ#T9QeE?Ba KPcJ1U +Űe$Z]-,kS^PV Y dPICnZۇY+\!\N_Re==f8̚ehK4^ɋ +w[ &}E8=mz~h!/EuGrjOʐw1wC¼ zө F+) *C4WȋNB̈cT2m=DVJB%$ 35DR}"\}e+"˖%d2Rn)˩r xrVR^dUot_*E WfR<\Jk%b 4zo6Ϧ 6}vBogXH$20ڳԥ'lGGO?8AmgjruzFŦH"fpe!o":zX_xdwr{~Lk@m6c374ܞsUy2;UZg[͹tЬyqcrnM̅|jN$R0zIZ{Lk3{id.YKsSގ!GgoYaj(n&g 4͵c7/L}%j`cn|\Znobxs;&I-۪2O%MOZz^8O>\)!1_ăJHБ,&Π0$ :?xzVq&BfE߽s qhXP8f )=KXXS7̣\D = >  e2\fJ1"vE0~C%Ƈd{n]6ETm]C|_X1$"q{|sbvcoEBU!8`%I`Ɠ$*J^A,ÊXS Cӎ4C|F%ɑFZ-m9O1;;)-X1g{kRlA{F | ]߳ޚזRVGٍ|b!)"[ HBc瀬Q,/pW`Χy*Z5}}\RE7݇f_TJ/%LldnYu]\.b` H8^MkB`cz/I&JOsLF)kF$'' B9D2ɵ> g5įg!~df%E#pxG{Hbצ;oXWӔJpeSik2R эFk_GẹVUE>!eG?5^`N3sz߱>S V:>iqvCG-ejU19>WnZyi ɔX ° }Lj^6)Ƃ0mI Bn7aDL ym-\^8[e¢DwMrvtܔ`_MҶ(݌cK6u#+뭗\TM`c5Ƀ6a7/,!ۙnn$cLT(RB}0zseR&f6ƃXL\,HԢD&㣘g-J1)n/U4,F"Pry)2F5eKqǀi5]g'8gA'Y&vb`j& : , F>V6Hv|!=UXUB'AGLΧ*t% !ALt@b"GK6|[0\n#H4ݐ~-& gN"P;Z9gODQPl)"6ArT":[#bwñ#[Z[B2Uh)Ktn?1I*0\^U]·e&1VUgx|61/!PJUsAF"qW1";QyBTeP nhzY IFm=wEGy*UWp-QrLjp z.A* Q Tjbr=% >?d)ɠ֡Ld1z:`A[ ԨD*LԠ/70+♪|ofVGIpfJUL~Arc 90WӔ/(L`*M#O+F> Jˤ=YWPRj16&7.&(s7r9 x?ڣr^x?mqr/9 r :&N Ӌ`TC(1H{(܎`3_1\y+>"T$Q:3C>BHz![%G& < ‘mԴS`=mP,)h:Dx+_{s-d;6l1g M#tH+uL2o 2Q\ [#^%ꄀK1>o&s/ȇp"ZdZcYctUՎp٠T3 5 ޷L.+#|JF N⍱2JS\)AlJB?(23!\S\ arGy y#|RAQR%]NT@q/6r֨L  gcn$Nzcpf!K3e fxhzAЂ 歹~,= 5'}[X\T x2Rp7w\ BJ q逸2Nw#Wyz|(("4X@Ĕ i1)4!C0KYQՊPS) g;=T ")CKeXHO7&c>CMI1dwM¬oT4ob_iϗLy¬!<#+٭wA0,HU1&IJ^VS)A"gb{RCGKva8av|27'K v~WO{O&*Āk!L<=]ƘD~J^ŀ7r@!d +bŘQI6[ Faub%S]%N8%t z? m[E0W[$jWԔnKnP #&odF!P(Ǭ)9n%ǦYc.BHqÙ[򓢢(O#>%%ޕal!<Ɨct1ύ; xLaouk\-|ͶE`[ne(B: RRkq44Ao>'CBM8N+BfWafM4;ٜm6:5#Αj󃯈7cj4`ll&536.s|دנD@QU6šƯmDOBQae!4b>4UR]|hB,mx,X##+: UbL5X0_ V#vidA3mW#!pE~R8/fe4)$ !l `nj+:gX.@x-lԔ}P'HTcmao9;իL;{b<;vi)R[nY J?4ݱOb;dA0I h2X6CȩXBh:乞Ow3X)S|jޟGLU!"gPrwgokϝ zm9s;Gq38$GB Ș&.aǏil3*v csF(K<;;J]Q0CԎF24G:j">GN<} g<= GC^c5c P;r Fo@VL,WŚ&R Z#֭ F!#Qb'p8b"Y%v.TĉR kJ0y0S+cprቍjG0ԉ"C'ᇻd,@;J 1_J:%B/W<'T>Ρ+H++lr"WWW_-7ye% ]6X[ks[ʻ͊羻c𵃕9t^e[Ѽw'w4!QeZn;]P~tWCb r^u5q`",&2&RMiQ`g^]GnjKAv+@PE#S6}\E.Uoؘܖ[ rۂ1l%V++jF\Gw9R%#geokәcLGQlCcc=yB1-f9锿pXˊ`ɪJ͟*Ii/v³e#;Wl^PG9rί'1ж85Sۜqkѩk jw=Pm"ƎAʒk;cO ƀf|c+;҉iR=ki\ٿdl/XVjL- `Kx5x_#y <;luq{sxVh;+>:oaK\2 QUZ}r$3Tbq&,z6(btukKc_ۜB=פF 怳":K{i{}‰h+2o&) 4cN+gmE`bT uq YT,~EQj\S;[1ب.[~#ʍVER`WR2K[#s_LCznyo^ip`#oYv$ԭiB"ih]*0/9:5˓cxj:hO_iJF#hЕQf(iVxq'S \_PQQLgUJ*tZ2X;@PTW'ok[G+:m(ǒг~juS eKwq.J+Uem>XI3!_- &މ~dބd5G]Ԗ@YTWf(A37)Îen"iƠ[:/?RگRgU>}# Xgsqsqs5?dqoy *:۸Vm&f-]kBbJO` kRZO~3_A8hºb#$E >$APB=,c?zsAMdivOL3K`#5j\kjʗXL9mYvi B^;`m]`yJg|̦066Z\K,,y4}>Yۣ Q|Uܕũk֫ ګ2HLt$H dT9MBG25֊;*b 'rfnL66ox)2Z/O5qve%{T8o;>Z2nueв:iwcۑ.?ė3 ֋$#5c<3AFiBʸ [t;y21b9haR[L#!.}iyVFB.7?OdQzڔٱ@GQG\ڒ߼2\i8B@ aO%!~pۤ^D`|%:BRƾ6p]}Btm+pU >^gQJKʶS4?ӥ好EGFgҗ?йGf> ny[ \NzK[,5@.#:w]U=0!2&G\Ϭ]/j30;g{ߝ驕 E^29ĢM)c{j.%KC4}2DOrq$BT_r- J4ruԂ+:%y\&Z컻0Qp%NwV |dn~?-;$3)&Tfk4]EO$lN|9-%>&=)PY2֝9c@B{I}zrh:L[:3*SIkJE'r/A\[t Jk [{(V |egp䳀'3pzdY&=by㞥MBA|5[=}`;l\$enzbuPbgvOy'sVo[qv=udeL54..*\d AB>4aée^ǗkhUkˁ@S#/35 g#KJM@@GJ=={c;'hr^LGY$%Ⱦ#nJyCfP:.g NaOuWe/QApx Go4q&2篌_}ȊR[֦ j.rCd9Q.T"H-PK-]Bܡ-'!F9=q)x @QYX~MD} G{|5K/P56&$(h"|}ҝF93pץ\eOd:ȂIboB%ʸykifع&_*W"SKkpy^tFy^\g$*.gYҡ[;>}z= =zG!GnTzo~UQ4$]qg l{ E7 9CS#o6&h>׏at OK %X "DeH HLRiK$KTbPp%0 q̬4f%1|{r=Ãs!f2v`RscdPyBQV'cuu ZDG5Ppj3/SX\)#k(%3{yB=ϴ/zumi}v%zu(Γ"CWw!=#idMo)5O]^QenyX2o.dN>@=;M9R2kungsX /xp@V [W<[I0lZ\K0jSGqM0 9ZIӉ<8>ghnr'S BBʅ+&pHҝFK t.tbv?*>8J \b;"Z(X\w[U^*̉)p%Vtqy N|HkI$5X(V٠>Ju;t9>3:~N+(Cl8ES4*_eQ"&= O<8tՑއ!9'PEX4Mjs!/P$<:v߇W Aqa){ܾy6a i?[K0 'VemuxC`8~zJwNwzjV7[-M.r )1ciƴPIH$zV;YGb{o̼y޲')ԫO'Nܻh/\}g8껛x/_ΟMp |u')Ƙ$! %~SN z_P}vxˆ[ (Ob%*,_tn]p a3,gӴB_6yb͵8A]/_S qoGPix_>5E*618zzth]Mufq֓Y”k|Zv<11C:ُ*} kz,: =H{cWS;G$-W_Dځw=0E/d$+hZ'H%$RlIiR?2_#ԛL?9]K5^%Mk6|~Î3-]pMئN&_\NSƮPd ϼ1 O0Hc$7.zg:Bu*pQ s[/m`qF1bheu%[^^7 p'\{aG z@Hf{KG/,.9h^nں-L`N;:Հ n̒P1G3 GmɺbQȜ9&GW+o1伂*7yޤ[$2ҿµ jk:upC{UrW@ ,ԗ_!9=m?$bruCmU Xu>|U}zվҢ<+8muf6F5byA V$"]e9y6WDcr%FE7^C+Fpƨ઀ԾXަ,\aBunzvoGYAjh5~b lzji <-pj8cw^[_ģxj_Xqǵ WUĹj4tQm8:zr1⧬ȚSnBd_!pg7$#QJ4db hc;h㩋,x[<BUhMr_gYĜfҥX<2F6%;+uGW,H죁J-&pk4,JT_E]Y:RF N-Ʌ7Dn:u쨔 ǭDoK_mtiN.|!z񳭅 :mSM5$IfA 1c}ߒJ&.}dlT Xlر\ Eư1֝g{m9N@!UДTUW7lWWeܞS^]#pL l&8(g%1zF1oSNF%xF1(V #EuhvʴO,Lo<#{6mSuj^VtE|U EXL *@N%jdF;'ÿE"8j>Ea@hm'63j&,+1W `&RG(-8?#l%HK.D/k:@ UvEedAeOE&KUC;ҚgŅzNr`tfk6r 8ھ,j hMßI;T%fcfC!W_%x"cZ@kL&~nt[;gS|L'հ!xyIgY~yWFIn=k&b\Ij8~&yW}D;y6U)JfOi,`0~ 2 .# ~K`dnfgaϨC9vEB;[I91q@npqJ7D9El.ONZ<9j1p?Kt3O5E-Z>;z}oȷUOѤ\a][xs4) |+"&sJC6{`/y'G/&i3R,h9sÖD}tP <@ XMiBy6gr08EE33t;\)4ĸf4=[Xq'3)E\i0+DpmG=lMc9d89+E*$paķ?a2q9bEɟÏ-8?΁r7GC!&/zm ܸ U7l9_d( hQEb83S<_mN7K ۺJpbMCά:!ow}v p BĆ`֢9x@LUaloi$fɳ^6/@xқVEZI$בN:wv f3g R9o@Qu_eݍU[{BUZT->z{#z>0w?xv%#7# 5B(8~MU2S7@OZt$̰qQ2KB kyMUsoo:nNԁ\ρ <ݘ&7%Ѧ^osY+'>ڢșaK λ|b^zAMJdyg#[gii"?yW],ϷUIU*[{1kR2v|ί[Yҟ56QJ<"ep|0 )  _KvW%rn`>}+Co}Wꁆ#Qߕ\s}sB}Y@PjB:ބn&߅_{#X7]:oKifd\1̉Lk.3ѕ6P=뱃v cm⧐A'l @coR`_4!!@GGn5ez`=1aUDpwDGǷaԧa. x+M6fTS pBp4.ƒ뱃Ca./ԧSg8n0clCߒBg4i΁RrA*2SˬOON?0Oeߓɉ&>d։3SgsL{Lx4or2cKc7}ewW`b .p%^SQaL?O<ɤۿNBV\zxUz1<{e=#9(d2U|Y_ywy=gpouU sr^USw0kJ;~? cÚْjݙs8E5LEs<nƂlU+!FE;1b PH<9N5e"rem xS7֟=p~"G''Bl (xLԹwA+R b:ge:J d3pTƸzXi`gŌm{.vΝViFDbEB OD7a$0o-ovcr ͳ[̰􎝭DRjNv+W/m+je֭ -^IG{z\dM$FB'c?v)F34a'}HbiDD}WK@ 8ff"p.Ʉ:GN0d ڬCYIl#!Y(i*k mo~r!ZFQJ7 @j8Ρ]me2PD哺)ew)dˡ ]NrqARlr%QV,0\5Tؓ&a9qf er[\GMVj`"u7:M(x)RQ&]W 7q3eS&p6x*:XavئDm^: i 7 v6 0a{}| Qg ɿ̑DPqt|هi9T@opϜ @,1sj'Vp"KgJ1aApXNN Ҳ(43s)K4響 ޟ ];p̏mY)(e`(9=M[~xΘhAcL 33+˻KdUn΋F,II=.{{p30ʩ(y.WP'66r˟=# w4Ud}%_>:t޲ORܛ_ui/\\*h%PA&UN+= #,gv1%ٹf^roNo젋^@ 9kY>m%Kg^A;FP3Y!_Zk;WAeѪ}}hj~$ܳܕ5|CgŚPaZOnJ1:R"BX+.Þ=4ٖki->!J!=n;R-H׸@ALYJ-.:P*Wz>%#$k C1Ff,p M=WQɻ#b@V h5i@U gK{i*:RO޾ћ~m_,?VH)n$sWrIR}Z GR >XJkZ(֊@Pġʓx EaX VsrL: R$ R+ ./Öa3EQ ʵ3h dl@HHMr##H)_qB DET[gT*l4bRDP*{85.Ǟn9Dg`3bø 7w3ff!mJֶkK捷7#OEĜ%mEkڂ5Ԃx*K !atN,tW<(+ʄD5h"G^c)/))ɗޘJ-Zzsf:IdS t_c5RʣiRumc]GÊҎ0kt , >6g9%%`֜P.G4:seb-ff='qv?l,jsPJg6}}kc!^\߾ktgh(wFdFw±ض-䀰!c`{i? v8k 7SS`%G"axĬ*ǬjiuE^X!H.}vM \=?pbI"9l dz^d.;dGnXuV`a|S2=DۥײXq?a OGg8tጭe[M;1Vw`GGpyrU}=6uAZ/NTflY+;fU}2? z {6=܀U-ny39@ܴBCۅ&ơT%u}n<(7U0V vfQQ*„)(<|4,Ӂ4pi b957|Ds?N 6{5NTvnS[\LLA[ZŹ0W2v˛v+8hQZeV7jI;P tA6->rp>ػ‹9f>.&Ҙd9,t لu;Xڴ=[^7l@Yp!ȵ?b7LSS!2+_q:H/̆RgQW8MHvej݊[dNJ DR_4DM Mc&{ 7Lمn??`Q[̾֊,Y*(ؤ}vo { Qv5ޒ;6#ӣHG 7nS7'@DH-^uA=_u2'kc+ /wi3,'mm6mL̶ۍR 57R.CHJBq?Φ6%EPiYs)Hg+̪`up_>2ysCqB3%z QI|z[PEBH PZXK(B|e)ziv8|;Q ~HfGͫKzoYrӤ$e<>VѶJ;^9nE1O u,j(m&+w4>7mN6S:@'%"d.ÿ{bKB[Kuo}}jp@`[x_aK1Z$aGAwV}IuW-Lb[_,Q3oDsPDb.J廙Ѳ8!-v-wjKݝ;<9EԐPCDv{p ;ӧ2-DxګGN%pA[b l~ +7C``׋릾n=Mekm*7uyM]A6=΋w}`YƆy{_ݸ]H[ + (^ .Q,+$`hyjTplm۶a]2R^,xX-V~tpQ0N^  kI3ċBnOM 7IJ%)${U+}c 齎km 9 }GN[)j`vZݲuKd\raa*qR{IF;G4ѹUU/?^>ݵvuglo59\K:c.lPC,MƒH;Uj͒m[-h__KlGjp_2Òk) ";A^#Q@۟ژW);?XN~Ls3o^^4NnkWj{A^YL<˓/ ; $i*'A /jiڒZw#Cb]ī +]5ge{Gԝ`禊UO8y2 n 6Ze236DFxj`9'5YB&oV|pqހ6XTaMehx~ą^R퍋]`{تuz:,@!#g9|R9Sm6Hmz\H5&;.^PY .U-D_ =ˮLX8&2C9ȭM fOeulҌžWZ80X܂}WŖ^ߒ>:~yqV}Pk)kgۈO@UiealFo[kT}9g惣y+ 7=is>}PβycY`tApņ*S[Qǖ67=aGQ?͇{ 6/6e[қVP!=ּv-塾]u׮/d NzDd4cL(c@NlHMlj5 %V f5YUn8*t竼,՝>|m͙E@yfy]e1Hhp6Wᤁ;隗y| C1p+h=M}L7#C{1|;}/|?7 >[K@p?@[ќ[7vhgQG%E@E{ԃo/)̓ڷ_cة5 F>c]!ԁ+,m8Kiv܉gvc֝C<.-\>sMpb?S*T-ʴֲDqzkl,{m9rh͚eẰ]kؒ7 |[ZL\sSJSS@3U>bE_|mwHTk P{YŪ:t]]0,,<^Q;&Y⬅WYDB2ս:7.۶`mPG u]y'Z~wSJ-m ñN,`Z֎:l4A>ue=zBD(J, Ⲝ A M ^Pq+2wiytm__ P;ImuY=I-T1x];F.gP[喵k(B'5#ˋy)J!N!O?9W4( 1.<$fLHpx]&P~j'* ,9; Nحp"g4mail"jzXߴ,x5# 4-+Ukn);NJ$jOJ*%ea2m`ۗx]HFmn$)+E׭JW\I!KZH,ܘey^ڮIɲEr)Kxj&ė5Xjn(^Ww+ivoiqS:#b|m[4Q(2z`Fv$HYPhU(n!eo4`a,Όx[rյiy=)^]dHְ;5KUu)HR&:iϳ2J=4R?{ ^zN8!Q1ŒϒlVub$Б\4{*r]En%C+vM:귪dLK*X2k&#5mk*O(V(.N}GjS,Cp'k,ñOY] |Sg>9M&A7x"tA- SRp$?aT8G5݈S^q;;.ĝ_PhVm" (\<_!Բzp"v6`RA0:{3AֳD@9T)؟um\\:QF$8Nۀџ7N֘2TɡY4/lOr|_^;gvY,o'N~!6'7Orygs, 2.Cqr<ݘw .'e)kB]zu3Ϥ)E.M J/fRlyJ+X6J'\L2.UŘlѶUl}^ *:u~s%+v'+RLo$K.$cʩeۤz [m>q<ĮQńVJ y{ 8N생Ե`N !%H0J 8`(e8)H 5 ~͓BoFQ!W'݋ĬzcXx:@G'3lHόP:dcoND~ž_n>e׀O%+?ً]l-8bE׼vcij @p84}4?y7%ѭsh6J"EKұIP:xK(ۘ噅x}6#/4Aza'x2a~S>Y02yhO]9BMPC~yzW6TޙWQH+G lI2 a 3Y%:u\bN䎠_&K*4_|aJRE'ПMԢjYa 7Y 4I`8K"[ /el/\aI;ݜlOJlP,8#/m-Fm1Y"* J653cRFxkxc[9^n&Frnmw^5'rFO~.56Eq2'~)pi:;e(Htl@ӧysp7J @M}f=Z?8/ ^q:13 ̗qF=@g3> Ѭ!egk驵Wʵ N+mQ(,)jǪbi_Ճ24f?{|i_=+V/MfUkcp(=ҾHK1]ԑ<;]W&x<oyfNX YX7_\~gvUH]r^UkewԿAlB *5/[\%}ހkv EolЮZgolZTyώ'^H3/'%ćm2LM<}2QD,a* 5vXpwo߃nejN`=O_/O;=j"G=Ih ^b@z ƲwSDyc'|Ne$ݚ2e&G^lQ ?~~ [Pn[-u$u)p6oU{Ė8YX~#lZѼ'Z2B? mٰe¹[ =8cg؇Ɖ`эۿezbY~`L_eʹ$_~hIޡ=bíKzzk7C'o~g5:Y9N]z3sAĥ@ DF;CFR`@jk>ו)xӺƴ\h0ڪjheJgk!\=Wܫo5 EjNK\*Էir67 FÒJu'g0og$@I@,$ p#KȅK3x~7 $╤O}pdhQ8+}z0 KYK򴢁vIf(9S]i֞k3YskW$֞sCnp mio)q2HuRyNҨBBi6X7 yF㊊4Ր.-j` ~7 17뱫Kй=iX}#fzf=܍x6Wn`8aGC+ ؾLKIbⷴkK)Bmp})YDe 'Ul9W3]gDWLw^i;d~^JZϞ-u; {s,GJBfvt`J-U:U,Ӗո 3}mnw3~*H?9s2)#k)_z{ɤ LLk"&SD2.3Tc& Hߟ%k06vT7=|H)S KPO .#iglGɜƊ:n}kd # rV6NK} 2dsn^*>{G=klp⸊n :ynqN#Y#!c& \#c9MR{]v#jl8(ex8GKr& 605a/WK E3:0vd7:C5n=uxˌO[y<)l`c4Rh S%S)Ԧ+@- cpHs N7!>qA |{v\tBy|&|C}h.ҩS@Vd2!2 lђ~e _2>%wsW[H1j麮`iss@*םkd<\ȭu*ɬIE;fJiv(Tl~8N,Wm"9o9b^}RNM#ǫ89dnzuԬMKVETXQpe3z(kS:f*zSVM=e†-5 jb܊>pI(wQ9k_[M[ܢ q*LAHɏ%S1(V"P*$ dv=P&6Fl®gs݉TMv*iڮ#C!DMė9 bo_E:/c0rDͽh.cs@ekeTzUhi[挒ꈕ7iRr9EM`J-VMp`6kxd)GȫQ o{ΑwanxyQ[~H}vhIz @ NozO>}wʎ~;4'ngCaQxC/<6C2٤@2Dl6j 8CT>N q)_#։RN,arjqY.å'}V=ܩ[.` q>{^]emY˒%Y,yoY{xI8ٛL&аihK[:h)FJ[^ Ki|?^Gн99~&މ=._5|R=;Jz'bO-uCC̅BK[BҞ"? ~^sm/9Z/I'dX<:0>yK*_w;¸7/> }*Ǧj:vʖ?%=F堿m<ثרIJBZ]з ڻhgުJAr(e"Jދ* )ۇyR'\E QF!ypGx[#`LZӄ!WB..B7^0VC0XIlҷKrKQdBlJu+s00ԻIEC: #ۀĽ]` K| N%G<؜ˤfۤ:"-6Si\ uhL*As]Rz~iːپJsocFm_7֤OHmx1g:3#]+r5Aߥe\i>` s` BK-KyRLu䀯2}Q'Yk3L]2m O`ܨTG*^Sdfzpw`o',c[x}xAGaeER1Qj=HL 2hVf/4BjLD 5q:'? lA4*/LGA];rew:-`rX*Fݷw#DkΈa Gz JC)ABe@_gxJ1w8!Ku Yej#Ax-x s$Jp No,ϧuBתU?0GHeIS9ii?K_n%RΜE5X U:z҆7L~\|9fnj_ %&-(b%::4SdEPyU"Bc[9Ai>'_g2Cd K/ |jYQ:L{(f*&?o>MO ťvfxO*1OpӸY'>§ʊH`XDz23dJPJ'e }czI'RuL #,zM*}DC$hTEO}PNN u2& 3 Et=XOBLnlwO$S^jVj3dX _:It I%J7ADb4x ۓKC${c,E6Ƹim ?k(1Qh,Po9Srdpx"\cq[r<LN133tNg2E0dZԋ9T20 apQ`hQD3(_.FCQ1љ W{lAĒb]Gv̖;|*ʘ%;E3-N3|qc V\CJe#9^Fz¥E"BPz;{w6UE#_i5OTzef}Ttdt{0 ^g5 O"&?&-p'g,N234EU L~xkΖ9<6u}Ϸ&6!=ϡƿ~t$ӑɢ >-{x2"ȯ}1 7% u{>jj]ެch<* 9j;Z2Z3+4&vH M' {F|ޠ3cut緭Sљ|ӳ`kȤ %[lS/snjzTT/oF;Qjʃc(29GgOO@{b.|JzI7 &d/vLm󮦾;6w:VFkrH%@NpνCJ\5ra]a +C&ozo}{Շ^QdJn.pV ܃ʔWQN))Tu8B:svm͖ٛg+sšC\aAvT r$(j(3Tyb=mFᗥE~q4t[^.PIdq7:|6g1y/iDeawR*>>3䯜%W 9f8'Imՙt),gl(ٙon/eUB\ĝe3 {xӐ-z TgEP_(&-{oO` Iñ"л**@?Ǫ 4 L[l0*?#3PZ9 q8ZqUl\C^@LjKsުF*"^SjkXCt  xq7SsLhS7DBYL F]}(vV>};X}YDSCx>0)vĠUΕG"=>L)PXr7Wu+L?zn)w1GePm%O@~1h]nT0dR w8yu qdӵ-sh9)62־pK㋷4Kюp6 8LD1\ ;;XF[HQ1 z3z tBu0^J@\HO=vSH_>'Ba~>%?>I2\Ȫ}/lO,Z`ݔv/zȔͨ/ 5o3H{ JUy 12 cwW:ڷJ/{Ǿc\ۧ.o)FTd5ONV[KWw:GWUftk;:\*άfh-Z T4+!< BhP&ysw^=|(1>eˡzLY,>M 9ժmLYZf 4]@b93lkl";ĝik>F ]WxQuGQDr oL[[j<2b7` LĤaCeS4<\3^@(3&`l4;C}z={?xvt3~yi_ۧ߬ R[y}=As]L"MTV|E:^mRlzv3Yj/؞CfS| l-jcob?=[ !mGpD_PPP&'h{wmdOwMJqA:/5 "\b{xTN}%boW4KWz""/HT&T@}D<i+"vA>6Ÿ54 {VG|YxG" gUpN7Gͻے$k x rn=e .SݝӾˡֱsyݑ[4Q$8j7W51H6?S#S(66pY? QM edI5V,XT~vj2o(d.:qOs-/0Ygڒ,9ϦMzpݽýυ-iEq=>#GHiH|vi\yτR3i_W38T±Kr7獿0GkN7opS-C!Ffg=Z@ s1po xg$An_ к3R((m{ \Lp(/׹?h לH%)q y?qpX_TKOl*V3o̓Jg=*Tܿ"Vw O'Ɏ(JZ&,yJԗm)E-Ub)35br49UIȸ9T<a}jPg t:Ӭ6Yd(:\D'Vqvgǯ8Jw\Q0I;q]`oP&!~9;n8bkb7],E+sXw ?[ _}.xDg.B!v;BT@40$!S@DBZwbbwr'GОC>߇HLpzDpR|:Q੎p"+zc7^zָʦJ3UQ_~vVb\pv[0RizZ}w{ e2&lA_-46]NDRҒH@nzc}EOμ@]Lv5 Y8Jw<聆7Y_ko&2lI,noI%ķ¦?w޻0ny Tg tcjIܨ _dЂ8U::%|Xt~@_lʓ_ر އDJc ^K4igk^#TmTL+sJu'/>֪rG3kc_L՚mB>֬@k>>D^ A'*p@U5; WBD*t3pe+%\Op,-8Cl5u WFcf0&G#barC#p&V|)b^!1* I&Rq-ۡ 'CNHY֬jK&ѥQU.ͣ@,Um X'O>x7$|w_-t#"WBᒱz9Y̒\cIvGX>0C 83!1jIŝ*~[A̷+?fM;\ܶ@iG^Όv֪>/68JnhյOmК̽yq,7X0"_ZkZCF'O _qPXFuj@i c zG_:ol.f1ͺpWm 슫,9#Q ]~I^XW$Bo7>AނG&kf:LJ-uY9& 5Xs -vom`Lyˍe}ِU`$rW`(̩4fe+<&RUa'RAx "l\%* c$k`! g|vG * :G>JF YfTJQL1U^BB'W<@X)va6TLĝ+i*4|`X>qqTOZ\ō.eVk[FiI)z3B* ck+XbQO㔋1o">Jkf'% 4džĜpO]^vqVLg0jWy|DD҄ PsSB1tyF̎lVb@.V {/Zw̛cqa :c[g܈qYg`/x?{oKρB v)Eq' )LE!v۸XITkwU2MCG9Y`r96TlI!˳4đ;gP8 4?4xdJ) oT  +,coWW^UA.(ژ !askn+V!7oH| \yEa=,U9S{i}Re Zs=Г2q.L=RP;2֭ Jלls&]並ʡ>cqv5:r=f*wil1l&Cb*nvX h-l% cA!z:qoBf‰e|zP U㯇d:-tv[ʷ=:yx^fk,yI[LX ;ˬ$L% Mu k [y*T1ޛFUyǺGܟ<^,i(T4ˀZ{r'+et ೏H!ژ475qR+Sg"l8yA:5C\5 1~7Ÿ́vnĊ BCPۍX:Ф7H%U:f~&AN%4=t>;.Z兴W%ag~@d4:T0ts5<1h@  vm DuE (r"M@}ENJLI(ޝe*p`3p&8eBWW]4he`-fi]&F谽A+K8:yze[LUAߛy4G0߄ 0t&v3|~ FHM_RR!\fH fyM]vJbz*^VVI/R}}twO e"(cn'd§<KkBhsHo.+"Ѡ<,cꕯ.8R7b%4g){8ّԼkۻKlt|k>jktarg4=!][# /a1{?5"Q`Ml 5}-UKsY|kR .5v yCFb}W\E#hAPT18|$D/V)/;u}^]?klNK NR̫CdgBS9Q*[8ʜPoSEmhY8*١|R̲VqVf@M}M@8}؅4KrI-q䚍y]U%)*¡rX/Ϊt& ʗ)4rhrJ'+ǓP>6jgcBSC^#.Ty<<f+m Y, Nɿsp=O"0#*[vEQfg+Z>> H,F 59͢ jmb6ؼוPrfA"ٗWґa"nTzr}P׾!UWg3b>Ev@ܧcˤ@W*+.O0ZYkzrTf{؛wkLH>5Bs8| gڹ,qK$#cTB:h ]4Ah}a~E9y32=o!b!Z*9G&E$ 5"!t6"O g=xbs u2nŪx$V{CmquNVxO϶҉r%J?d2IrrzcrST_ғ[+:W=`3^7scS)x| +)n "&AWJ537X> T|8`kv&VB?ԑ܄Q? %Iˏ#G+`7^hUE#b?K5zrZr(>L)':JNNp =]oB\3qń؂xIK|}(pXs^ižÃ 2 oGu08Ȧ.@UP`t ɐL~;KukMW@T-";. t q*tԍ߽:JV'{'o_$k*޸8׏ 8&0fj0+aY!\IbȿF~OBӘTH%xyxb&>y$ nH4z 4s 3X2&DfPMp1nz}!:e?32#\,Яlr@h #($p:`]婲x Q3ՙ< ?z#%?-$τɅFy t_VH؂IqF7X֋n' Dev§(6~-b@FD_|¦/kВS 3紬.kݝ =v'&NQƦzۂjm9zKV7[מ8{7_vjPAcUm]u _ ="f?Xvnj+qLb[VVcA Z X)) o3Od7J35"+fm5ԁUB[/^%}\mLŭT(xo8qBzЫ&2ktR Ddouu~#SHjf ס:_E ʮ]JZ@шP7aK%Ѷtm8y[c 0׾\e4 SJZPF?WIlga־=M%~d ?apsq:O{{xCۦ^De>b,O YI$;XmMK#Z p K73G4FF6J> $-|Osw0ahoz rPAB/"6q;kb |?aPp hi{I3j{ g-pa?nn+uL`scc+I:hp{UJg2Y8 X!%sp L<4m|_jn?ҩ0$w|5(/L#rtʗ7p. V=jzUyw!-L,*f"1⥲aB kX"(8Kڃdr%f AFq B^h ؇G7B1L;݇w>2*a: E6\ nB'kMV'DQɯoSwTᐷ9LcJF1N;mہo͖$M~'ߘEpGѼT b?RL_7:%5C$U4_ի\X G…)(.,;tMa8Ymsa<kr&%ZXĘ_eB(f||MA]W1;S_.Y15L;b9bBIkML_lbCܔ%o*(۰^iIH"%swgbM*T;0ڛrg^t{~|!vx(ѽpE2z>ŸH"17gIuY0kz;jύ$wijs9Gw 6nh?M qfqZ߇oiϹ|x!/" hqw㴴d*5Kptc[ $Ox$E*r]w+}L~yˤ)iJm+$p&iTPlYWf&q0 4uJ$"O#;RRI(Dbefߒ3D4kcSusv=iT# f2lN- gY{{Jc5  .dM;/ $98*pJ+8Wwؕc3ٵsmYΒUL(0b%C^V֖y~-^KQ3}jqueϜmRr 'kmK(=8- 8͇ >槥%pK IDBTҐTGaOaI(@6Kh _eg20ɕG #=J ޴|-jSz}’n.GHˍRz4pPLg<^.Z7rS+qe"PRAIA"iۍ,LD"@$. yOד)xN $ q頋 ME6͑QvU>X=\;7gOagb&w>f\M}g2fφ9F;Xf*.޻{D6e;o37E, oO{x"t7zks8kl?6LxG ڳ>Q5d v|{hWOAiyQT\§AOM=h1)baJ=}G$b`Ii("kI!6]杸md桵[~gOI쬁뤶|,$qe|m-sYrC}hSpû޺Zޑ*:حwp#Y!I9 Dԅۀ%h;;Š\1Rl$T\oz˥dO NfQLՁ6+"s[Vmȝ=74; zh*oŒ֚ێnjo8|S @DYԗB {l[< Zغ3S?o(]loۗcKVnopׯhh0b*Ĝu lh6`'Wi,sЉ$VHJֵ iY!3lEaAU6kt ʙn2e, x0 MTz'[n;|EPs<)!էc56jo;RYĒ\#]m.!?pCQYO.>V^{ DU" U,A7aM=Ȗήu,3@7QF5R-`ӖTh[f!Xin1Fi<M4+@ KZGK:xӚ3ؕ(q[RqLYwU-Xҁ+hۖRl҄D&/ѕ~%^^y@ yg5ya/_n{#\TjHg:x)P9O.~ 6rrWx_x8 5",|TviX` d_t%+ǣ4?v<%Uܘ4ވ`%$a7m71+:JY\ߒ%mnTyV^vŏ\84ӲdC |]^{6Gɀ.ΟD_<ѼOџ>؉3N \G>;~~|$HcWȋ S QQ_(_۱7}Ix_dn:k\l:]0}!סぎ`~͵CÒ]{ !xy)vEIy|hl[W+YTkՊN0l`.S46ˋxP(|xKG>n;ux+OF+iI$gqj#qҽ)11 ZP$׺/âZFf˙"eg`35| 5:;j,Tnm%RO\rt 6K?/oD ufۈ.ЙQ V|fǷLÍx́'2"Su/4u ρ!e }8A37_"8gjckVF[Ցh+ P- -0z͉N>,hLhE n{JjJ6ݿwu5W;N[JKfr?eSCg~HU]κ% TdWt<QRF4uֺ}@Q5;Te1{ulO5˲Ƣ,Ym޽29^82;Gϯjfɝ9Jg^G sr1x7-A^fO{@ж+Я 珣/.Wr/!rwxxz#E?|r<{xK6UJ:S0Fl)K%r>#Ο\ au)~@\ ?|ܾߴmJGDftզ*}E;y~Se=Pkup{i߰*޳(V ǀ| F=c.QWOs<|~_}^#A97$aC9 %J썫Ä6 QwmzWx/`/I3Z|uև[ ڢ ދ{Zŭ0W㯵WcwAo)u-`MwQ%}ȋMf%x4<=ѵmڻDZ^t-w wbO|ʍm:6C(.5&晥L ?[ B6M㪝DeAʾMxe&nh4C>APdQ Ot3uheYs0njr\mk .k>ϣ97p 庾os:6* 3Y:]m7 = &|Ѷ$ѽvz\R|I8cle>!B(ot9~Hn [nynTվL]:GGP3gzK6ʝ%& r]%i[/}Ug:o#Emfz#ec:Gсf:pн@Ӓ%PDp5>aeU }w:U,5DShUp9pg@1hٷY(%$3yT(40JC)+~A w3 ?dɏx5 J-# }0 bP9/$kQ*B1T ]: %LgCz|֕%PȁJ}mj4Z@>hv wL$"݇a@Ur×*ў߉vY$#T+`g';]>A8/:)\?%+:jOVQ>Q]V&jk !(sʉ'W%4 k6m C_(l\%6p~S;!n4bԚnd ݽ0y;eZp??>O$YqY' C%"Q,Sb4VA^J? ra1@s0Bnf<Ȁꥭ\Xbj1ODa5 '65Y /]?xog2=Hjx%; z=E y/džu:@ȳM2N<l,q!+J#^~#h&o a7ذvDՖxعR舧Pk%&j} \襒lg{ɛVg1-bkN{ȫ,__c/kғYwCBe)u9aوZ'-)ҭSG4݉`M Bi7vYA&q[4 a"7#CT&GU!/[qZxu؟^Nݕd I YqEm}SAMt.')kdQ1`82B sB+ #v$%\eL_O;h瓛- Ow tYΤY9 k"HPC^"7DڱkVzc|5_I(/ ?w]AH,:*FIS=p-{8 .MǞ,Q[_7 ޗ*+x3' TRi]mjȱ=S0ͬBk`{P}L%FLH<13Q]QM嫶_Sї忾 V\)^~һtEe냝D#\d9:buΆ D鶶]ΊDfUwɳgxCT~}ɼv˶ڛh( ^Y4J_%ŏK=GV;7794㋏R{y:wm{/.,-e)l:kR=6t44pj$t;7MJ?(J~ +j׷%-[., 5y:b|ΝqN@BbmmwMAm?6|~M^Η/ '6-Jȳ;,<3,!.3s&fj$}Vz+nN^{OE .hX.ot{b-ݱ>;) 9u{^?֘Yyfџq!&lɓZ/L$a:f+)S6@,jdԆ﫛PKу6z1Z6է)ȇjb/w{|vyEDe-܏+.ejɼӅ%h.U0ts, eF5~L):۔5(=caٲ757w9<4TᲶobjbhٚ_ߋ"oimg/op3G{ŵ1LUxjv?rU꽩]-(jV9D}XamK]xweyIoSea%qgk)}~0S;Kx3^0D+wDgiWY3l-L؋CzD#"'IJ,+flq&ޒtDre1-rRm@mZu$[vEZ%_և GiPKtT)y>5&_$F3"VVjO{Ɵg[ p29|-;p{[8oq%Sј"řUUpH֗|iۖ$KnNZ>ErT<|l=A6W|vnnpO[p߼ cliE1$a(LtʆhEdL/Y\ >&wec6Gn鎠{ N!9Z=8 Sw}N&i~QҩWkCt(RQ>? E{lc21a)8+ d~7zq-ڝ#Y6+GB]w=e>NFn}}{ldåF44YR M;3VR2v\4TQ3o@څ܉H;c4$- *,Iy6Pi[?ryCB`/o8 Dzn7Ǎ2We2GZdid}W{M2(GO7 {}NKyjÜ?`<7y 8]sCqBgPup*$X$Mc쉽O<%ڼ?ur(da 8Kŕs+w \tXvx QxQ7 FFBŖr!Aأ'8@'1Y$.J:PaW[:!/82ce# ZrjpF(X¸R>RK&L"FOR` ~E)ةtQ_ TtI7_f|&K~٪xx\NqqHYez1^QcW^;1Ďu]4IOjUZ GZq%YLwQnLlb"R^D]%Bu[3uuP֩%9ߧEL 0ǝ:^?u/5*n}'ӻ&)Twچ,и#KWɦN RaySҞxN~8Eg emu4ʵLNZ^p#Ljμ纗fgtB[6zMˋ- e"Z]ʗEe|C\2.e~IA͑ےΐ?˚d|Y >V]G?@d7 q-]w(r\?1F0jPo,rض,wՠx_Nέb`de9VԷtz a@L[2|K'ZV(J_cd"7~{\3U f%B *pY%..MS O&;hL~!im@Xl28$o'`%beK"%0˩/AOF~>" *0?B:#Upis 5muʼn6]naU]"%6ZոU3RFM]0ΛAMC:xOOaW`N2c̲ϰggr$,Dj;%o%°!K9kUBojwNWwc?V#6t59+n\-e\k,"(\~k7\jZ|t,ۅ Y3kw]OLZ2rCpLd:#d^{-p>u;} o3}_EE1.#NE7"~r#?YEs?M7{ǯ3+ &! #wWʓ}!(m~cj~Cy6#wh暁kK<XU#$SŵYqQt'?~wj Jwؑ? Кq&x Bb^Jv7je"tjPQh95S8zGl:6cEF"bdZc{Z9}+uE$9k~& 0}YS02nn|&顁b]nYS`Je<9_!wmAD0"b%Ԩ)K) {ֹ<mDΥ~0,F*#9f Gb*(&/0{#;=.ZSA+ۘFTmJal8%h_ĔQȇJdOEZ3>>Ȭ56^Pn^م2n5gוEm?~nnZk][3AR,o%ĝ(S꭪V.3g-5<* ,ڀMiZ]]Wl6+Y,<C9[*0@`X!&: Yqk~ "KqDx?ޔl՛6"F6kit"#)QeiM~x[MK2^_`p65Y&#W`̔ly'6NyӜh4BTMѴ?_߮j`d1~BZJ #:$1O;<м3 i୯5hzU)kwb+֢;x'~d MrU3xLOqk˗j~+oIxj,k <s0}O'Yp<h7i}SY[[0~uZ;0rJR9Qh{L5J Sȥ"Ufow3Ji,/oJesL>%*g SlVsU>IcKYxX\S2j !]W1WZ*e^jB5mky†IH&Fxjp h2Gǟ-Ӄī-h8lq탥jju&)!:Ś M\UE큱-=Ѩ\a-)uɸKMKȊ[HcdfMT.]+4&z$Edҕt5:'^Η HھTLr(K1ή4Kk6B9^c)lDmP""h")+U85pOC}pY8GaF*DGD: 6ŅOg֒b6k&`}*y5zԈ4F=!'!fb,tFJEoOquN NoT$b( TS$Ө!"$NުbA'w&47}Z;r1_}K"ʹwB&5U$ώrjYt["ݨr\DeAMRۮwV9j;hL[2f 5Qd ]yʛlF eJk,RK1K(W"^wN,Paj`G6"Lڐέ%\HT.cR DQ>aI1TG u#Pnx0xݽn+MxPoᖙB+bY=\j6P0T0f7w%*uv88l\4/8mA *9ẁT#.^Rt,)j~ [ĺ~vJl7X _L8`A~9ɺd*/c; LOV+LkUnޜn P?H0!R Z6P6u; ]\9>gg{&VZVe Z7q?^Gz{[X"LerAPO}k8EV v½"ޞ0SǼlUYQ2KhGKQ֛?Re8)?<5qʙ0NYV(S홪 e;%r1Ljtȍk,pxۚpW;%jݺ,N Mno1|ݷ YO~}=t2e>`ҽ [.KW5: t@hZs=RrY$[)$oݲ>o *t{Z--{ {{]o!ru͙ }t^eZLvH k3]v8GgŋdpHvE-V q-%$W%[tpלi ~Nul. ¹#MY2Tif6([,Ma -]bDb%TG7V*+2vs9dM nYp~-T=؋{≁|yTdeWTc X<]ag`*@-[3 26ԫV/Y2Q1$%Wb+j&r5^&TcV>oRǗ ғOE9:· ^A(@L=HhvUy&7>* n_5wS>/Oe WJä]WZPS)Z ek"z6a?Ǜ'7\=BOlݿo0쉜#ZaS}}8ҕtOaӎ:Zkn@"MAE—pekj:~_ 0e#};eQAOpUg{)vM'cjwֳ \7t Yu17HaE_4'Z8T؍IDk>g_|*$KI1Uun^fe8p%B=~gz2'&ҰP髏HW/qZrT<|N5~1rgmGƭϢo)ns9-WҮmc:<<6%!y.Mr{݃EKew.N-vSv[EFuf>H-4,--¢l+W͞D+:5"\U Muː3v,N<].M?^v@sEo~/IߢN]PE eѿnFiA+fheE1\qI LPgbS7]6g{gdqޚJWٽY{Y"^ۼN!_=sK5L+ J?lp.] Rp0yʙC;ƮRM<, ~\}=_?q)]YܜYS3 SC_6G3V7+39s&fWa!A墥}mR*~M}&MGu0 fc6w\2Dr4$ P]_gUU@o}ڀ/#.y(GnP>%99= G;Ci^H :gUoDi=31 I|KFQ $BeL^W ce#v~&w ȇ]rz9i\lZScM.?,*"lɍ2w5tAip FzKL]%<Zx.QTVlHT|Ut'-[l 2UBTqا $譀b~s0^Սe*5VT*tm3B #Ԍ"iY$o!#D* }A'Kyq$ 7)%vGCACBqxQOFt@GkVZ o-kġ09-/[vi9^ r!cIϓ-_..(Pц]F.?@1-'_YhHe}0nXvA3hiH"3K+[tL( sY٦)bV+HWx7c <=[:C:UAw]@xyZE,} jZI7sGފiS=9r#iP*/n(K" BvCQfш|&dd?>܆pbx.L^5d) lҒ:i !b xq.dt~ c߭-~fؓ6l6dxf}k7wPsͧMeʫ"iiaI@$ZIB-˸^ˉZzǕրNf㷛cp4&ܪ&TZFC# ܥz Ij0-4оuNڵ$4A̦Vuޓ_>61Kw|ˑ Jl8l\<1[ }L~ҍq!0RY[R 9A(9(kRm[2 .!0jZJAHxrIgm#ScjZ`r [e>iSX6K5*j/:6"ugŤ{A_KT`7s췴͛7t` X|.W$ smmp!Q6UY[oS_ZJg xuR'I`\>*a|1Yϴϓ? <{ 7M TvB&њWV$r0HYX6Y._ ,Ғg-^@Ğ! y,UB;={NxQ5?_")#bϺ eM՟X ;5. r<6.Ymg rF1n jICue]icv)6V,nsZܝZ<EɪO5cuζ߰{-@~Fx<ʤtzTlL%dv)N"+j\.T2EsXs9|!߮W2Sᩎ psHGi [2D+52)FvpdR H{vO]}u,M%8o rEAH9SF}j|Tn/$ޚ$<,s ^07%>.t4mwnK6MPF'GO5,\d,$JJJEJ Ad4 0v.U&w(l1VhV &<;eN]7 G3W$~|C5Dn]n6wkXww ^;~;y'LLw]zf4o7r9gYтhd*w0s1)1VLR9),.M0(dKY`-L/qǪ8b,uc1'KnWٮ.= /~(EZ ,cǫ8˛S@n$gvlR:O,v̯q0[ ! $yv.i)dL=2CE!IwY&IUK+:+aZi`{MsC2؊LٵT$N]W1BHR҄(H!CO[bF8+on&{IY3/Z6Ţbc$?Q,iPg Y, 5B-z!a;v\4ckkM7JxN2qNfPU$K ٟ19|HUҵbb*?E>k_[+_k@B*I(uQo'~LYٟ7RUŐkHJ11ΟOu:Y}筊2z':綗Ah,nɷMQvȢLhI m8ɖx!_W"Avcpl3I2S=#VM,zxbRits;kܰbUX4Ayۘ/ڿf6s w*1%7<ɷxL. :)c˘ss/3t^L޽xX2O#znl\:"tr1wZvv&O 2ig VTa+@, e4Rߍ0IFCX@lz4Qp>(6acd\b(A!ʜgR'ﱭ+pc3'x2ϡG}5|X)=ֲQ5l74f\of<%c5J4Nu{f"ٶ1VE _zEHmy }0FtY_cbHCE#4BH%]*8#vEO~YJufnֺbJK~@+4Jթ)D1_De·=[lMZۨB:9ᯏs-sjcs.ej 9ۉczҊnc&쳉3߯cdq{K_ZN㥓P~$ X!go<;<<{~yy vGn0i CnmX~~߲ vl瑓u$&.?{l DKk{kˉ]2EϞxⳓe 7ǯPk?%?s-sA+@X8?G0ps%-T[8wSozI<,#(\wcF?q8s˵p?C`NxΜ܎Yt~mIoWӢsk#;gF \jD%σmbMOn3?zw߃ 7zv՞wZ)>!ϑݼM <P?Ʈ:LX)v&G ʛ;'x* =̓8MJj ~ p|'kU"_E2qJMHq|ihH)@'UB_A$3o)\_ZN>.D%st Re!h@A W4Oְ!9~['<)|Qx@1,V`$Mx5{BJ/XTwx1"N[TS[}ZJcC|tӞd: q9Rᕕk+;U&nh"$~D:cZvZl:B{?u:E~!%b:bVO/6&AjHP߅哟[Lb:"357QLT5LLͱn3D#1kU Ψ~|!R/50>Qe{`jRM;6o՞rTF>%G# ȭܖB9d,fXiUvK R к 'QR1/Kp52 UFw<Uc$Ĩ0\+fC{B&5½ʟq;^)J(0Qn Hrd% m#,}W>+Pv۫-~bAJ-LMdBwYw>jþf#2u{zSERYPחk7d\'JW4x}nk3Y߽A/XO\}z-_0gѾl?.\2T;)r L̑ώҽfSw؜n4 tWyF5~%PGK[?0~˒Lǖ5GlcVڽ]{zFܕEi/?8No(){`)b_4< +v|)g6u#ڳⳒ$;;ˑIv?56 g ]ZTSIz !>3᫅澮/P(Jq7mɗqj]_QhO)P"8s~r+5)DpIzىR[*V g⚮Ɠg^+[CctX +mG_\yx8SacL= jV>c0byw7KNRߓ5Z#V-WH ^Kg>Pjq;~F4 B׈@X!=|s9bԥ=++nr E^Ȇgaͩ J&KQa:Wps{:/Ȉխr YhTk[;{jg讠nF5@QVBzcWBSl=:+hWZ9 T-dn7/9kZZ*hcJ E2 %cvA0YxωBzQBΆLcE!g>7M4C`!/Oiܴg2u>R%%1֮<^R%'"<1Hk"^=?xRQTlEIW e|7M` )WnM,%]=\rPX(ϋF2*Cg!oh/ P4[w5Rjl"8.YkBɂ*EKsZʼnTkBvp>ZO({xKpm9fH_'A(-):|JWB(DZ)1uX͞SӞL: /Ϧޢ yv?fϲpVTwf-$8˕r*`珿uD &|/_-iX{ª\zհ)dȗwP76UNk"x_k \XL ,ͬW8p즶-5Dkj}zP"^򵭫^3q+ַ~Uw=NM2<;6Fg`ZV.MR:ߐфeAO,.FNҲ`4_GaSGq$l@ó6`3)CxBuf+z'fv{`v0!s ?Gp3`g?^>{qK>Q“/b/>.{حvތ)s)kNV5lrՙIΖc= BcBtZ!Ii4t Ol=“<%]:Ҟ( B\2qtnJM>'w֏o07,cJ|c&|2{kSf,\TmZ=nFcF9ǡFu˷voq&+C,09ڈm/dO;ɕO Kv5p d $l'dƂMKg_BLJt"D7# }&[CXu̕`];w9ݐO}4 '[( sJq`RFPIn>)6ʼn0qj8x|wk25ژSH Fr ?33~eI1L%3S|S :M!6YO=By VJ(2{ըh1&>A)b*fخY8dwJە\X^j\_SGC^<"䙫'ѵCp,]>Beg7ڽ:h^Ǐw2/>A&_tZ&X- ` @Fx.l}]G)_!rAHM REwpqwt0(is?.˹h}7㠒!W#" 核jhGmN=R\@ڂ%7lLx# 5 mɷn[B} u]fm6ş>]raKayK @ī;h([c)odz$Ƙ#Ygx&k=7w/ K%ۗ-_M}Ё7(BNd׶OM>Xo% 6]V7O>;1s+L#cATOhphE$.*w4up5D7(jCZ6[><0yQ@D]T,$0\i [F+,Z\!r9W=ZְspOo27%ìC A1&2=QoΥ>0P@GgZd_dd-N0"}=NmR {-Z BeZ@XvEX{mrꯉk;ң(<9 Q%fl3}'06k&3*#vB`1x.յ;~ۏoo[սT K\зZkbu6l;ߑv_ߠxwWo*ka톧B\R!__Y`X?84W(0t j;%Yl!v^~j[ddf%TwS<պGԟ?r$_A~rge݁]}ygUM\ZЧ|{;o;Bx'i],;CrN٦ ZCLR?-\Rr)yZ>3y}?,sK*dA[Ք'in4ݿp=Õ*׌qn fhwwPQ@m>"TYiPV S? HtKM c\cx)3Էl%*k|wتF1Զ NvĉԢ}𱞵/nTbs=ʡ5d&Kdgnyq91 1idҹdmQ`>PNYIU{ǀ2{h %Z|+6Yrvez|k•Yzs@=&]2d]GӋdAZsU%ZB asMd1v!D=`o{&/Shʖx~AhKR*rm}4xzyU=TnOj$^ۂ gXtfuݶ(d浉ŽMў-5ekԩKU%UKcֲ%#W\׭dB❐bӱgd`/hmKu"[/v 1HYlxbF[d:Wܵɿᝈ3r.Lfz;]8_[gl4Ia^f~" y'[òtɠkw#67x&0}:q u֯3Um4}q.6'0 K\^B5q3m!U]"ggbZ@^*J7m·dOb>gȫV%W6xdGƋ߹AH.cB,~g>=߆-{nUyZ|>;}cWebٙade?P6ҧ8SiQ9տi E5Kyrsךsמ=spZ;|\;S}rMK?D69Zsƪ`LKTpj7/n:Wec]3\O  nD2Q=/>_gUVjrwܱR-p)ICɞ5j-$łlI"HӾZݍΠ簝 -x) yWg{oMi9bo_ a`HHL%]Lƛ)ܬ^`h#r&Q~khPzy%qMk7mV}Huk `Td&5?6 ];NË|,ר+{(=_beI1;f7Bc^ؚM]TOQ޿zgyr=E8Z]6&x=al ]qYwQ9X9w] IqZh9js:($jf.:Ý&tljEM1.f㥶gDgo4P8%6jLV8 @["TqeUAZiCTA5T24Z~M9U¤ư:K2&wJmpuYx>u7W}%7s7_TRdD~tHB5%R;**VZK֜u,t%*θz+/5FY/6ZExWx=+w: ZkG{~t{Ҳb= p[#f{DqnZdC?϶u[y %m: _G/Hdpkw_tm4o-i) J.(e,ݫ<-6Z#lz{@Gu\;l]ڦViUv]+H]2ETӋ L1pIܝ-b5I z{o|ᠷy3w{gnkq JҜ{V㫓Ô<<:.kV FAQ@Al9DdH1H)bu1č<QGE4N (KGԃA9"%߯Krg艉ct~c"D(i~ \ߪǏBpHI\da@0E,2%+\#I:Lx.1S3qcS⻅ONjz11yTD6"pË䨒8 N!NNu8gY|{{ 6vnB@ J}8: tyDQʹsnʃ N.Hcm LxQ<ܴ:vt՝Sh?]g00PeVggweGSHx6=p7Nj;7(wnvkSY $Zd,ȧ~pfL\/H&)9jJW@zP{!Ҋm˙WWզ lX%-TlN˜tJVP**"=acZt8kI˭2U\,] <w"3[jtE{tILO*'厎ֽ݉3V^$a"J83v^br~MQ*~L-'KQEQ5E֢{Wէ ;ɾ s9._U|W\HρG֮߶ql Sq}~9}t]z\~}oQ}N%ag04o?Qi$yrO7H6[*֓>wZzr),OXs'qE`BJOHW*@l8Et¾y} 9)A&i{dy]S`d72StAFѳ] ƴ!l/FΓ'Z׃.Xg%̙$'6ׯcpCrSb#΍O/UZQ$2g4G7:RZOWycWr*($rjm6`* }[:Rb ;D :=;`͊% @ʠB*V9cF) p_d@T_eN-p~ÙfﮫT(\TI33 1:LJnr.[(=JK`[*VVLgh`W 26W[L)LT#\Ԁ^ꜻ-Dh2GՁ9”A3Ͽ*Ϡ?ӄdM|X\cɔTjt@z#QmZR($l0nH畀87Ocip&3!Rߵ śWpD1W+ 8Hovs"I1i$uc`"7aqT*D>GVѯU"QML0\p=yNA#%)3&HϟH2#4,C^dZk"5| @ KRz*R`VmO |UKry5:?={kݧggSc"#}~&χ-1 &7!y⎞☺"wuVP(eԜ>Obb(ǒT״ݼWKl(I fZbҵ&-.up_R̨q{3);xH8qn /BŶtf[Jw~ϸa)cA{㳷[GvK >*gix<vzs.4G."On&QNiyyM3@ǃv}?h"|:O}!SwւcSͶ7#^?3rto^A-shloi6vE\Z dT-K4.2EWCu1T}V?~H3}drVZ2X?D8&^,TTp+v]- n !&)f\-NGRJ\.gēN;q9!*';:52WHgi[kT5th!r /W~iyrWefG) FZ62KX?Jq߻^ndIBZ-Zyv;GWI>}2[ZFϘ3Ԑoneх"[6U=*mddcی?= ƯȌ6ȱP*.$\7 UI0B?M̛fք]!-DBgO|K,b ^s&)Dw6od.mRJ0CXڢ;g,,s )M 6k *ΔK1| >%$IN:n*%*R [;}UHSV3-TFgRQ:+gf8krRG;GxTF &P +w9|6Vk9IAx ^Z#(+zT ?#yN;4KuO/~@JٖC=i '<(I)28bU&I"+O' "lW-yHo/^S{.Ϋ[d^E|䵤?/)n縱q^ѳ[.WkyQ\=r)_c*.ta0D6NOlhyZ4JMo:7A\'`=kSd,"ieoT8 (:5Kj_yU"MDbv$d T$eaY^EԋqT: g*O ջG[Oʳf5%F1ex|:CMX:l[pĂݦ}ҨX,,{CEIt7Ÿ(W| /gg%9Ô7Aic|xNYeAƭ$ؒ(Ս._?G»$HuH4_>~C' ~W<tEe&K{u_d?ʡ:lrv޹ yDR7m,Z_p=F]7?E5C+`_|X#[̦lVOy1C9BiE_3~c3BP6U3Rںx0{kIArGX^*w)wkVŰbuZ,Rwa}Yx4vEB_[Zy\aގ`a,D!jà)yeRfqBpQovQtWC=G|(1t + 璊ޞ67 3Y<6:#^BM>[hpnM&@@|%ytB1Ag3wKT!l+<^r<D}1@|KO˲טpxn 3@>gnWdlM'᣽;?q'ϋ9߃Ƀ.kj2iO NxD;S2 muv[G'б}h6UV0Id;;E~4M}=13O=]}u@U \S?&|4c"{TyŅgϗa H),}NnB$\}?d7^a\O\qbaM{w58靀2$?CPnKgTS{d e1II* =U좷!Q<Mw =|nq DO)]m^n2)V@zCqA1/W$R91MY4Vo3h<]_4ϼAP%_ǎzQ$7޵Cn6̹2(7Pǜ}-QΪ޻lxrKceiID<{-|,7}C|Rܸ.+udIGdToWE%Ipof1mHn^hN7E*bn*?5ř O Y@fnqTnZ:kos/:X==u%Y[]豲؎Y-Fۛ*-C58J"G(=JŘDS'pq_9ጅtD>+!uAq!EKوΰ p@vJĊp{{&&f&p>:x{7@3QVrLjYuM (jvMq;T\gBi E|Ald :iF.h(EnQZB]IbG2Eܕ^1\߸+qT7.\R t?iҒARݳj9O7ÙW6.Q)iBd.;i0Iu޻ҙ?e0=wD\\D;,"<ۢUE˥ UCafj=!Rrp#т<UPv4I>({NRh0u5CK<>˛'OZē֒+JYgbD^DZLYJʹE>PΌl]D]B(bt|Wd#"a}AiEVx[Oc56/W&64ջ|.!;nMI֜lPiW, 7ignSpKn0PcY}`eQ>[&E$g'UZR< 9=Sɹ3s?o>\3č9P+R^tL߭ HZ4O <]5xM 3{x&OZse;/\6xs1#+.*?Q2/gz%AT}XffZb|5OF)hC&̑ؖHdsE'¢VٲYvG$Ⱦ>1`F_-u_MXl3AH̅U[6IY%fd %#g <6g}KMvRdU=7:~ [u(1Șf2:M/y ]" _2 Ո~uxsd ,Uap18$$D i @,"vsԫs^wlS:6ԏ~ְ0 W0Y 4YK>'g VHC9rcXrc,ݚ[p;_0c;~)&$_ɘД#H<)=ͅdM2 nI& |o :Ců3%?@t-G3MP2QQ%1eh<+{|?X QkעM,# ۆϩ^= ٳ t;7P2q$ĕ˰`Q5Yդ>,hZ92n )5vB5yˢawAGEk-KS; b%CiktLsx2"/Od39JKB)WÛrW6$D/.^\jztՅ{:ⲖՁ6_=Ѱo %~\+欆PNH_,xĨjY) :(#n@*8й!mQډW)D:Hp36hqߢ8sI9E\w`vF;oY)ʥѦ7ÃĂ |g|MJsվ:QK9Br&G-1=*MdɖQc@PMTJǚk:RPLK,nOJІ@co b1՝'3|0cΞxI^>Z5֙/SRhY4V-qHnh &@'F 2%τ  GQkExolCyFhlmEiEE1aMRC͖ѐ,oKҲ?ztN#1eJNN .aԡ4}2Ui15k; AXZSiYqY^za$㞯V^\=tEfO]ǒY=OZ!IBWbh윻_|OO`g+BR5KP=iN1aҡ kؼf)U%ޮۍM`U.3WeiŮ$mџ[4:U~]Gu?=_>((/tɱdP?*pteY9cuݳA檊+9eE@FUҦ?]m{[rb~5Ig/ۼnKQkʑ@}.y*:5ˮ7'>[7%gif ҺUIT)[\XqjH.:V?bL fC JVMFA`GEs]t\lNB"T~K>pwlfmͦ~sb#V0=9|L*7V,:)(M}`Bo+CH"m$732Ptrxj@g1N||anP6c72 q+Vudcg.ݐޚ+ɘCeܤژޮdߩ "0hKFM|Ό(ӛB~6&BfL͝v=tEDL*#Էy DoH- 4gACTz31{hm*G-zx[YmZ6+_NNs'~0M8r6GH4 U|^4ZW;U*C|UD9s]KJKF;^sGBtyݎ[VpfnA)p;?@:E5lj)}KGS&tg71s{m9 =gktm_HVݫ4=<\M;g'ܺfOj4׺چ#iWV1Qpo~5\]\q->x,ѥis' (y.SJ[ڇz{WPNHsRMrm'i(rD;ٸ6EV$6[ߨ@Z'2|_Ci~$*jmg y)j3-Pn e =hWΛɍb¦o )-t3^ :PBi 2ʏ\7xbap|붢7D#z,U; p" !g$Z:Vo1Sdupo-` ‡ӭYTA*QZ ;\ k7h;ـyT, >_GUi(tq[w m*MP:jn*=^ hŃ xcO-_E,#ZáR9.-X@PG`J( :>DJ|]0X@ั]o8@yr> TNb.D ZPW yμ$ oIS/u8#z?֏h7SǶ\%|T`<Нfd Tٜ >x]B|&w^Üݞ:5-IYo[۝!c3Rɢ \2P\86&S17=:0yV( zϮz"ޱR'ƫj>WiO2\t Z o ]'N` ]hRXұlAr0͎E+{Ϯr/Sf9{V8K(2x=lYq;Y#?-GWKW;Zo[Q&GڐSħmYb\=o]ё>4}5`D3Tޙdǘ ' \w9M=L<3 M)%3>1(/&n 33(S.=g_%?U;u)wu+!S\b恻vsjI.aHkNueŘ4]O5*L_b[b]\!GŖpqg8W؍7l] m|Hֽ(cg"b^ɕQ551ɶpq5*Yx-C_חTS<χ_沉puA\˔eP@`~(: HBZOaPV>OۖRƮs</~V%YQe# j9zYKǾz|yB~l#3ɉKjrC ]_(WPN|)|[q9,N|; EƘl$I"M"-Nw醶݉kWnhۗT:jiZUr.R%U`nM'Wy&DQ8l* =kWN Ҙ<\-EFj#K,r݁p>U#SUS! MaŐvT7iCXDl*Uxgh|E8|o>@7j |ܿA038ċ[^Ʌ([nV<=~L,D (4x*GmDF XQ hlۨD⏘9rlUxiN ̑!D*xėĪO{ 8f\jȬy3F1ؘ$?h'hi"M(=v(ˠ=+ϴz3.}lݞKaJu̝2",Ƀ#:qRVÍWp\ԙ:6"C\1j-ÛB~)Z))J{W@**k })mJȷSS &vF91R [u6OԠJ6B.vFVg1$KD.9Odw/y|-.Ϟ;g'x:73<7op3id3iR:P̞+bh$5ᎶEzmԼ9ҷW/):/0"WM!euA3^R2\! #H`hs!-eK4ZswUTcߟ!&REHڵ1 ªɝ~=0#bgF( R%|̑HYW暥ʮ*' wgq(c瘕%bMҊ^SLC޿'{QQ6⫯ŧ9s`0&3?ap:D"4rOùZdjoB_ aO&ƈC1B}ESJ:UMy2 X')XzX#R"Kδ6=>"jºel'}x!FWݲ? ΧӽoYWJ%i뉣|O.Xp}=+ i؏^p(#Uivm2% iM*7h9N&ݡXfhAjN,Nn ળ>֓7˦W)V̽ b-YZے [7 eh<\ex"6/` [0C7?Mw/y4M;зo܊^s>yMGb|N>cegHAZfmrV]=2fyAZ]Rhu6Ռ)pDƖDM/.?<ӲΎË2W>E^N|wSgѩgrVLa5(9}MfRK2ԚmEnO4#u62Xr^j7\GRW![7 lE~d0@tA FQ">ץ0/5Rd׎<ƜXrZרsz>X11ԯOKb[ >c-IQHHYo+1(?`S2h.cZ[:%Rv,lk7]6)F 9f ib!,.Hȳ%虜!l̥S>rEc\VpVO˰UOͰ %ޔ ~W)uMa"W(5? sȗ~ۨB%y?;X5\/ #ajMBث,Ri,r<*|H=@rzD Aa{%j@ fݯƌhoKTf.Y˺v"88t<8q{yXςi났V6ISY—":rͽL0kus+ˈb(: +y;tQo?%5ΰE"]x1|P}drdr֫P:f"0Gm:".zcSeD"VG`XQ*7޵NޡH WYEያJW6& me{wpx󥅋?<7ƻRdnr[9y'"bKL~,CSv>ӑ>):LBk˂WԶD@ `,+i<ѻJôyxm+~ :6Ȏ /]õAtx9_!1|D]pނp יzp:RG}POH0~>M/9oARҞ SNxe?'1yz =O@b=g!^xY™qQ8fdaNuԦ?oM3-H@B壶¶1_'N?^oF^|:TES$">.Lt)s&#bLI!" |OWH<6xAGȮ]äәp0klslzo\<$L)e ^iC)Dyæn~T%3l"W|ai\[Z18^&~3y~ŭIdTdBϾD.9s2O}oɹncf\'wfִrdTAKu/K2ղnN7zJ >Zɍӕ_z_݋287Vq\9ot^''[ 'Tŀ*hd&ǫW%jTqM-#~G4>пl;4 L Xw6{'Ɉ 2ix2񐝼lw_X-PY/jaa51;sMg&{;NDcG,o!; -]xQ;>/,6T'ԦhbQbP(aEDVEzm+]Ï.KnUhZR3pCoI0з͜nYR;+poR)AZ&Vk|h\M龵#Zzy @*U=y"EӘnD0b+" 3/98ǔZ統xJͤ=2S۰+j %?3_9Q1ѥ^}C#ϵN;j 5> 1Nv+2'{n깏ʟ{;M9WOΧNIC g%No'NA#FpԲ[8o4E yEK}_xf*{[SMc;6D8g;Ex]V'FM,C;n\o4L KrDY)@̋2X 7'>"U3F1owg_EIdWP)&~!~b_j1_\X!t=ה#Z,ٿ? z`e#d}`}BNj8T~q ٕ .ECm㟒;7 ǧV: x)$vJo_\(%*fF`Jkj堙OD 6'9E n N 7>d9%g)[ѸY>B*1@g,7bt30j?!F "0 }#996ɀ ^th&&z PTxAh3(Y-3 k ЧqKA2OҺ::fV9V+#4Hj\{F#iH$6B5ͤR42I cQTp)(X6'Dx8\B`_"cųM2_FLu8se3d2#S %dwɕR# ] mXgس@̛oU~Ad`lր'yD&kb3Et󙴦<'Mf hO,dIt0mfX0 Kgt#2۸a˵&jN:UQh'xװoJYIYg %`K* U!Mv؟5~gUWٙ)U2=# "ctQ .\C}F/dB+)-ʐ+Xl(}ʧz=6RaK, ^ R4;/Kոl\'8j`9^nU=4i_V,+)aiE4H`ɣ()GԊXR-lCB3KIJwBKɣ q:kAo(.E-apkngQcq9*dB,X 0i΋B yX(3?ٓL;H˺-9ց]HlL;-u(*w0q.Z{g8hn նTՒ"PϋvXBl\>"-˗Ma!#_lUA`d`fƓ@^ET'R.ʁԄk&|b3٭QFנaz?%*d]&ǽ҈RyC![WnGąe*L w$<7N}㬻Ǥ+wbG"GQ>s'eIf>OۂimQlFc,P^O2*id6efw#b2g#1H @00@ D=(32N? %I vjp>'8"f2? |e3)yL\Y֔f@XC=6+ɖ$Z\bjy&ZYԗDd'6N^r_Tzmf BH[cRNdYYIdE4dmE&R>[j}21MLc2l1$+)S[WG#KˊaLSE۷,`)d(bO1Q v=͘==LvkFs Y(Ұ5@!9(аZABfv3Pp"T_? 8P3wB^ v6ݗ)=wr6΅};9B#A؋!YT"#b/`})>}N+!!M jh\BsԻ޽ ާʽyy*FVT0߅`(:O@؛N|;AFO)Nƞ7"P1P'1La.N"bJUO5czD܋!rBm|K9V3h{%T2RWC/!OZ])R^ )ʽ1i\;4rTnlwpBmԼ|X.?Lk'a *wwHN`Uܭdr(ؙP@-,-;}zw ,j\v;,FQ2353 !pZ3[rdBI\j`} }{F큰(ث!X#}m {* IIbl'53 KB,'jL @ -"H##ߕOBO2Ӻl4f m<2HӁIApGʟ\d!kjF3-Oi͎-{=D^־ص n%3bd[U*я.QMƜoعA"X;@F2qc-V^ڕ%?LJ|c-CȈx0dgZafQX(u)f33Ԁ2[@JAyoAOT,Nd&+_sa[eŶ s.mo[KzgG iOYE| K{)7gZ,nhW]o~F53.nvqyi&ZFj U npUMUMvt(<J6 K"y!c>*z @EeI TB֪>P^Pw2@q9 zl#b'༇1>GNkq]/1]jʇ|5^j' _'/_2IT'ӤntZ&z?%p 7̢49eήRVësKK!GGf-m<^^,[7{tf?d֛saS0?rLl"e*DqM|cZE*i~.7}hoxtJ4mPXkDA\5@om I:pQtݷ{.qho+ޮ XqlxEyu(ҭ".<# ֊^TKeO HAdZR5gOND x >H Ŭ!3pFa@]<טi8E#@QmmflMeٸPAxYFOUzE^ G6qFQӛgmў_cWU5L\^б4L]2/0r}4V:T8]>M]ÒjVY"2agG՚RC/-$nGf6R\URO5Nzя)۸hzS{F GSSG F{R'X,Ynޝe$]ZnEzq}ߦ2lS_JC@'xd>H@b@,>t WUchApy)ISO{*潓'>kT$%١T8l˴4͊]>pYe8pۖr{F*<.jreœ]eB6;Qлy:6J٤7)of hthMyQV$cDH+ c/)Jψ*HOSLͱ#%H=y(JeUYEG@V ~~qR{ݞߞT<\p?8`ɣ{qf2d$3dLkL@NB#7 (޺ˮ'+yeo]23uWUWWWwWW#r@w#-R8oV2meyUXEوs۲:k%ήЧARr]mVknUjј*C!=Q<.^ K ȁ^r(>wLcffǢ2t؇uG[m Cu*0vpOvǢ9C ~x{E6`ʁkdZ*fk^Tif̍&Z%{gAպu#ZCn =OU[q}q }>QlrfA7*c[bq3oȝ3F'D)\[Szȇ`=L>Z2=,&P¹SA\Z: ϟ;P= ^F~Ė$JfN'8B Ze1`0,Ǹ2)*ȗ3\zJi$&3͵iEҳȵit$ݬbsB*dt$(zVbIsZM7U@r8=|9D@xp|tV*\v,IʸQox5L}vч)ӚyG@:4S?Tƙ_,Nc#rJ'=ȥR&̻6ѐ2V-201) tGn1lSKo.qb7BѲi66&Elr?2'y%wRcs,m [Fҭ]4TѰ-7oNjfn[ YgJUS~Y2ϔeRǦƖ j9 N./^ʛel%qiU*ءmYL՜N4ϱ$&Z6L+MOύ[}Z8}("%cߣ(,QwAI':v Ž 1.o'5['Vs܃|6 n?,'&sC hBI"n$nCh ?*= 9=ldce~eUJGȲ|g^UUލJlŧ0^~ ++ W$:鯮_߹HOM@nWKXۉ'׉aõwЪ_xY+R/edR2d^"Z /tKpr b69(K^@VK хodXpX{*GR K^~/1fX rcY{ nϼtКGO|/e w>9[d o+^aCh9Q(OyjJɷMF>=[TWK:_A׺h_2YC '߇ZpÊ>hUk+Un8VQP?5gat綱YM֮pvej;w0H9Lw?~ǀCtgrVLI ^8jKܶYR~y?α{ w{ϕgesK{+/rRpF`QZdNK6w|ns%A5~r8嶃0Y2|YNWh}!n#9.0Vz'C NXP]I&yi+1 ^GAMNnyzCzoWGC]\⻇=a ue񞠈#` 1^fۢ?YvRRfQڍO&׫k2YY~o+b/luMj(Kj[]1wDb+EWl,K~kɭ8b/d*c7%j0kyyڔ~u?ٱLNuVJ Őbf-K۝GLhJh!M9f$I{Gb]-#G8\-}4|wU)vrM$lTD6V]}`3 \-How $f\շ~nJ3뎾d߿CשoZt}2|u}dÑc~]7eD$*lѾ{An\Lwwzq]Ege1ɇ'x?%s+i} ¯Q=3I=Q {d#t6hQ7pS d o]ۙ& ]BI"^t%ȿK/\!5[Zv߱60 !]l۹3* ܅(*WV-,_ۘWk1.ídGP2bJ\^|v4Ӱ ڬr茶$_a`:{$az[iIuT=o ۴wDq/!6.He(+-{/x0o`n1ъO6&JB78+lٍu-iȕ&/3OSVq.ưʰSbev-8,E5eZmYNљdz> #BYdhIu[]gq-)ݮ# ?bM2yʊA9`rbb\xW W0HUPr]0m1]T2A($MR,ZF|f #ް9Jp# Lx[ 'b:FYWZ?NeZI&@2uJ1%…+aA i`%Eo8O [W"Hν ޢ>hƖʖޖ6voj<+#h$ſdΡI&Bffg„b51)B}ULj-]ETc9}vAc MGn#RV1X =eݸrSe!' q##o_.䔸=/S5IЭџr&P&=>u7ǡIqBẋ*WBZ*a3#Ga;XWs_ csPP7p_$?&8}"&\_sjVA^@0tpZK1`V?pΑ}!F'YZ/sP@9Ql sȲuk4(GQzG|nLqZ_#pγGW&GS`O(J3Ukf.OM +k|9v}dvk1ch(I<0c}{sw\&߿)'ٛX5駍we2*.TF²_?۽Oy;qWO>ee^+Z}Iwcȥ#wMCdtoCjZcqBBqcZj7(')>K?=.766.-83%#&v gqWwy^iXY[@"": ϓMN.uZ<G%1"߽ z)NӥTPlӂS,/.]q'Xd8zYy0i6Gs0gv$dM٤ ͢VͬpNZSoKg2CEl4f wr$M g+7 [qp,,eΠ Y2Aqwv|,$6RހN>ùoL' f=Pljy^oR(MJuQOMAyGxYHϱC1?Md(3 }K{."|}/edO<9gLP6B>w@v$iq^N SG QL@<9(< 7%ċAKٛ Φ*G\ĭGHP{TLh{7 oB] (.6Ys񦝻;N(45+wEkY-3єBkS^ǭHh!6k$425g߯њPL"A ꉮ3o%jd'ifN>s.ovVqkܑ F đ7k.hʓB@15߮PVO\PQ4f>ޛ,WZUt[g7v *)%OX)u75Uȡ1[0fZhw[C]}2'OWHx_[:Z!י\P-dB?DA Rrqwc]mƠdBD.S \~A"0t5x8dupm'8b- \A4}Vz`F~##e 3j~~=h{tR~Yecw3fQ`ՓwRdPrO?u@QuLl|luCSTZF mBAyavb/!wP5Н͞sRք﷨0Cn)nOM򜍋WP`Nd:t.#@Z6Ɨ75ԫjEؕMy˝ QXG\.Ade/>J tiΆ!pB{d.>@+a3h̕(h,ުR5kjPc~R%ܫ;oΐR-gׁuF2wy{]Jr*ILkmߊpؾ2V_JHnP.A-"`JP⸿G I" Y'g>mE?ln{|e_(k貖hk'׀)W)o%6rn%ΆawiQV2=\>9b|''$ ܖa[b.E3h9{34 nYוs/ {H*K ^9_%0vfJkl\L5Wa Ǵ~}nh˘ZLϰ`zB -1y-/)nt ׹Z$U\.8˜t2B\IIZYrU瓀b*nT̗P7ޡRL^'lRc3L@=t#Hw(O6Z7s kH*~[ǨPNsq[ȗ$S0/?_3 _Ć)/73-O y{;bzue.o5QV1es\+VlL]4ţQ3Kꗟ˸kVZӃXSO6Rfe^W{kWd6P~&s1t&Xa’)"ȍk|K?=-+v$Uˍs/ӝCK:vj7-NkZ*%= ,11| }<&@FB hwdy9`1f, vC)hL$u7\;×x{I !4d/zf,xi-I nvr'%(f뺕 VOP" f lEc[Ie@R$aXi-,PЫ5:Ϡ!޶4)*ֵ ֜Z:it\ReVް-[<0eȋpSA\s(ZM 9hifp8#uhm'&3DF.Tl^(}U)n \?Ռ ,Hh52v5wF}H!uD,͗Bx+㩃A,\/4mR3hѥ^||5xM2ޓ 8I*Ҥh:,GM~Ѧ47*Py$UeUOגs *MJpq|rcMj>3cl*AN3Ket,VR,59ff0G&P.k&nM+˟q-SR=j1Hs8X926NDD-{fzSf֊SʨYko2bJGC&h"]=\bͼcY-i裀3h/no8T%e2Y+fL;uvq?T58S{d*xD7k 0o~,$(͠$!'2=(=k;NnQ\-cVJȠ:aXoPlVi~1nx!~_ 0 ='Y/{ mJLZÇ lC=zE{nQEX5qIh?h^06(-yT4OWc 0SQP^ `njpy缂+K] JWm:֪ Y ߁|(S}FcؔҁYi w8OF),x;I*K9wPiMحBz2 jŗك a`?U2=_$ra>]nx Ÿrs' a%l7 < oEA=D:1J"|RܛYآnVF.F`N*[_p3&'$:QOdLq ZBy@e/AxU RTD$)+cT Eu"f[,+إڹ9iL ءfYSZ6ZT=!kfY3LZ|˒a2fX>k"g:O0kZ [q;s}ov`( BN{'qPyyd-vdtX*#׮C@ &u_i`ON]Yn5fQ͖?+7Шz𚼆>nSJXfmynwQ^&K?/qb8&6zW{Q|"&~l"j꧜&igEOVu[j$| />k܏}W!!31 Fo( SypG]RLjɲolo|`^栶ޙ4d|ޢ޲d5|PFN8M%$a1|l~>.AmxV*lǍ֟}V~YɄ} uS|BB~6Ĺը#_QZ{$Fd9y(Ffsq<0d֧K l!=nOgHKړYX/Y|ƢY<%KFfLƏt`-22Q^24]EJc876*f1#Sm̮K[} [UI&-Q]u|N#^?!G^Q oxL M k{ܗ U,+"0*\ ^`K6" OrT r͸V˭厊0 }d6@I}r&k{JlGC40 Űzb {;.¢鷈\;iVm;!rψR\žaYQ& vJAd.%|>9V"C6g=+>_D ^(=-5àBSo_о[1]tǐ IEW.4i|G|?،``t,kAFVXϧte*?N&'$Eě`~JZ^^&ϠNp(r*)<˾*+t^~; ohȨm1 B'l&+=؆z}f,5RDE /嘶"#R_ܫ&zG^WS~镞SUK&=nV*7nl}F4DY~54zcBٜo0ħ /_YaYCB]x7$d^C@sD=>1u[.dJACb/,!Cѹ:̝Q'>A|4x1oHr !)371{Y," 31NChød()s *E.l]AV(%ۅ. _Y54צ,gɮGv,Fwmy너?5,{=,;*I"+]<܏=._%6kl? T:2M <71zy\3sonx} WՏChHp8꫐T}۲ o˒vq?؆peXҔǫq蹻$\EF_)'CnP'!iw-؅4Lm(j8\oŋHFtͧ%gQ X[kM+GaQs za/ߏf|`T*HG>R+MݣK2Bc6u4dV0ٙBh ?S8^wӿqw èghABf\?Uu}ְۊQ+l' H𺞩U,΄E4Ԣ@:'儺V B(SrG߿k٢iw 5[g^Vsy7F/KڰQm?KPHPp@0uÉL@%j,O#PF{s3O?rkw*G%oA-8ccwCw#6p.\لDKӦ0yI)!Q~6㛐2aOITl r#T-daξP-b[m2CERi(t-)~^ |?A<*^?nga+{RWT0k /$6~ wG6O-+Ja, .%XS.d^,C+IQv`(=UmF?J~)޶BqmOkx\ɾ|)_"oOlE[ ;rwOm](UIP}܊C#tZޕn!m #fT'uf/#}m@KS`Mp-皻о\;9S)J". x *(I\2TIƭ~33j 6zsv ?/HN_av?ZK`<&ex;Ak w DyC U^ ,l72\ qaolo/slA I62#w0v7? <_jRhiɱO2AIK!lSs ocRngA?f^$ak2 5|pu| ~ fgj8Cl<(i=jy5~Wf@=>_;y0ӍsIv-Ql)ޞ`_G`|U^*4;zn׳2m#G@6lj4  y.mNq B?ZüNEİu< x9AxYuNӐc:?tfpUBobΊg%\0-'ռn].ϹOc~H9yy!y7.?z.9w_.ȯ@*obo_ճ~t|ǿ_RJS <}L 8N?qoaF{GL8|;O9k<ÏŹ %~?A?u<?SGq֑ {83|9|7?p?zN7֏Y"OmuKn[ s,% e о ۱]b0yqoޔFv_JG^y^ :Ne xroyھeWpOp/>yk *_-ԏfw]o!8)zAq=zJv1VA"Xһ\Im,_^bEQ@#`m󒽓権h̰i(?u>tKNXњpNl]9z1dl;Wȯ ~X -?hL41Ό8p-u~iC{|h]䒅ZTsx,Oꏶj;Bn{:5U|; H #bޤAoQ /RSlpdۤMho?ĩ5,`v쥲Qq&Yn3B`B&Ģ+vahY9\Z˩)dm0Ԁns"߲l)Qy͈*ys?Ƕg<|SzL${=kxy6?4SZb)q(jmߦ;w*!ȩyz>Ol KM]<1[])~a8ٓ ?qw2KplS.9NDwX|贉W=쒣X;1ٱf{}Gn5`L(*@cC&2t-09]jCrcɔjn2]*= [DY@ ph>/YAcJ(ǂĩ};HDYE")rM wl!ȡVdj/oE$ai=>R3@(6`՚2F2צ !{mZk%/c].8eΈw#DlB;ܑL!"a/Rޟ_qɎK8;,":HFa$jne8"٨]P8q)94LU1(+?1[|˯A0|,nwQJCYP>f?q?nnZ#O kq}R(!~BӭςF C}=G<@Y^[_clV]}_e JBaQ_Hr)dD&=X QNk:IIk5d g\~wş [=(Z\M,޳={hN< MPǯs8$7$[E|KS{ۓgF7' |gArI\~Z{\ A.1aPj_ |33{?$/GZ1<ۿ9m8tւHP b7QCBzىu2>:閷nzႱkZJԸ|un̦/au #1=aOq0?KlA$Q&=Ξ"N3xߧߗݍ7"GVxLxd>,>)Uu{)!"Ef1.TtH E& 7m}nQӭov'N9>DuE ]pfs #Y<~j8%v](Oh2swwC+ C׎ڼ:`XNa'@#wQ \'r/s3#Wq}C}_$x)3PJ^#[zy¾~}$;wIc>%pOy1@8}Ù Ad{F>lHUug)ӧXwr?ʭCf]gsys[;wV/=4{k%Ah]ic =MSo$FqlSmONm6MCdIit 8:T讁:RƿF->`}r?,C~+GUUՓID8y綦N1xpc:k3(7k3o>z 2" J #RnԞr#i3aL] B=$^F2ۆpYwf:,E3AN/ɍҙgvw‰$B[ɋq[1vQx Њ^pyd68%Ӈک/t [ sv+y|>m!'ód. yKsӕ!#sC "6†P& SkNv>G;,e\2%Dos51b{vέdaoQ._ǁF#OH9:E[S_# 8\0S=6)"]H cA솰 AWr k/'EXw?'hTJו*F0.?rˈyթ/q>wrt8iν)'hi`ߨM)5*ֳM"MQT~999Pp~o$sX/ g?"ln#Q,(8.&jzC9S5Lrُ~ wV<ɚa3ۙ4+1nӥ)G]6c""YCW&$_GNiIpG3F(X0[iҞ5P2HyF"*Z a~ G?x8?N<7 ¿Dz!A}LyL*< lq J]V(܅K2j{Sh'+!qx0--; 8]X"Qb;6`Ѱ#8 2!yy0wHxl$xBR~X񀤼E%n};y:g~Z~Å}" T׎vU|=?$‹}1=^GwK׋gQ~ ַn&k%x@"g u`/#ό]rR% 1/Y1"]?w~SVPjmZBqDPݳe~ LAwB[Xg>/R9hQo O? X^G#<&#>=o)fp0ы2gOTpO޸ qӼdu,Q5˗qـ)GvInCL\OsP=15gMFعjӕCwiɉ,sLdlqFԉ埖ß!^c~CN7ȼ"41cWA/&>cf{  w' z~cϋ|gHkME`#cRBw|޸BpQ4yi@o1#󃧋z^otQs J[Od1.|n 4ѫYB_boJw&iP_=Ak3dr9}-y%6Iq,.}K+3^"&\f5ii幙6SECNcjRr3bLN>PGPtX˂ή"$7ȯY/> Ms/3ye߅{h+?"KO$p?)Q'/ ąh?Octhʁ\ȮLE_!]p.|̧%s1q{q~!u>Kȡ%Y[| 3B>MP9xǐKOy3DNOMF0SWץq8ydK957-qLQA^7WC俁xyY+!ɻ68/{Sv|OH׺+þ9*GpH!=|*nǛYv",D b8j"K [Ix@B2 >]qw+kk@Zȴ֚Q\|&68u^ #;gt{k[F5GGYf.?4|jswOf綔e:9I*?i^wV$OuRI[Вg]rxm5+˜ih}ЄC%׎Fn# 'Q!6`qܦ8z?C1LV9e\?sk ;/|^Gz-R8xx4/xYva堜,T&g]Fɬp$§zА\d9=g.pH_py~e=r*~M'N|0||~p oGQT4< `dE <@VV\dgU|3iʼ7O(pV^|K ۻ^m.JNEKuJj &_qastq.Y78vZҤp @b+B k bzaM}M $}_']"QR1¨n`>ԫ|ӧz6]Ox[7=k| ئ.u)E;Cb}`Xz%&U-ݺkBݕ ~tJAoxWM7~5yv{6)WE?4^g>|?0J# C\;wζ[Ÿΐ5{:wY9fH>P˃^M 1zւkaT͌[G&כ[KW Mpm5ޛ3q`e 6$Sz\;v`T}z,jzڴ{7tӋiY^³&g`h^gd4$"(W zE.ɝf֪'J)Vc(Pd =3,klijF=jNNfdN=#s;s3k,ܛ{GUsnK2LLڤg& 5z BAQQ]"ZXZ׺PWȝ9޹Lq:{}<99A6un{\Y8foUM\$̬cVPL\Ά`RQ͖RA4=y Eg=<b, f)` pG|ܑ9mAh;Jj>ODdqI38<>v{*6\ U q?0%|yNfX-Ek\,Un{J3|n$ZFvQD0p:"d\8Gip H)_TnQIsϻ]Z^ dDGDc$tN~dg'q~qn݌ $Huiz5olaGOXp( "hk(EO.\M*0ߌM370Lm/.;Azm̆0)QNrD Eg'skM3rjw=4TRku҆jpolCϭ6}F:SH ']x אsHlakتHu{:vf6op3ŷ?OPz9A&۟YWHE4ٗ!h9-i:Sو,o~7V^Xq/?ItO2x~#>g N 7}|X("ȧ,f'eeՆ@0߯ [ӁEΎE_v]E Q,^oR\6Mco LھkBez'h(3o^6%}\F㤼q8glQe7g7Sښ_Z[ZR]Y䩞XX94 Ԙ4۸~ǂj>(3 *eDWŲ(_86r0SMC =(kE:X ̀<_fs"Aa  u/6yM;?7viS[sV➜ c?zLy| *zKF^S۲)ͪs3•K6fpa;JqqMKIǶܽf|~]E(gxYO:8+O ?uC8Ec\fIW#u0ߣ l_Z@􄗔^J4 yYClnyθ -=c~7qB<' wb< @$,]\Mфpc$YQ/%2>.Fgze$wߦaO`yԷrݢj<ި-nɜ2nx|;v\#D/X2]ֆ 1.1^23UN /*T&܊eK>=-^XM)πg `:|$Y׃B; $x!C't/^;=!pؾqK. /'D!yҡQpYQ3Ju7[яc{(zsN@~|]L"7 *auvhl@f|'(Q;o7EڢOP-a@?EtˠSu.%_fib\pb{bׁVm ڙ)A~Cqj{'qg/ܭ2mT'9 ~bpE o o(7+$="8Jp]!@ G΋KtTc~lhNW["v'd|p"x[#P,Y;}wıݺn}ġ)ġnޞ- -8n:d$Xa Z\i{&q{8c g&% ޵.ol2ݪ]~|ninK]zҼ ԽyAcNLgBI|6#MiYV&ů0k Z4_iKʬMhFN[q"A=Zކ*zg9BsH>ݒշ|}k!NPf}Iӧ@g4ۅ5iV 2: >oT+mTSSrY[<<{ڄGK 'G, #{89x'Y&"'_ s#e='DHgNoHp]+Y-x&""R(ǾD]Xe#"+A\X_qcOb,C{5{!$Xʑ_-#")KZ OHo- $9P:|0e#P^^qH87PB?%,YbS'5Ckjtc>1/瞳+{_t]ԇAao2ma?%[%|K_9*^^K#3"/mWFѤX(OJz `B)qEy/m=H k#y1HaTX{'4Z ǗP,qnUѱ`C]SWzOK% K:|3'GwɁWG+|1_Ky3c<~Ba~CE~./{=ۺGz[.ۻҰ ,{']T"ae5M[(ߜyYj#cXśI|}^"gQę 7=_^ep4bS.= /s+=+3T7)ˀ;stN֭+r?x~+ yCZ?xI7po]0_en?<|#V4CļJ<9R#} [ e oe\lScp/H7WmM}6ېTǩz6)6X(4RypqSoPX œ o1w~Tq،To Sj5xw3ƛW7T,[xұLW*SoW.T '+`| q}|>oP^]W!=o3g@HyN>><~B#\Гep:elM'p=5K7=0y6FPU ~OvpgdzDg/藩:?N0Am(cڏ {QFD~cm-;ANDUaH =tP ۀy.wT1h"t1.8GfSϽoBWjTGx ʏa]p :dBY|nl?%>EMp mw@е-rja?PP#[Þ^K`GގZ=ԷT7:;=l$Έx^NHnoDy= m߸_vRwB: 1"n2Pw7ʢ5ch3a> 0Nm=Sa~r"]azg߿xyk$:sɒN)aSѶ>~e2rRe7"y>ǵsV]ro7GyZd),v|!!S_F|?&eN5 K_ޞì!HBmzt b"A] ,td%rRaQ@; \!E3$zFsfCrwubbإ3u=UI_P~0/ϚKB,a]b'= ql_{8 )QK>Psbb62퇈Ğw:bviDJkx}._ƙ8~,sgbhGٟ 8}p1tnc= .+!/ ,M>w{Forc5 T:c-!{6Y,t ^ogK1߼lgOX0,|oBpC9̋S%6eմ%Wu,ӴNlK ޅV&zJs4CFokLG7U:VՔsŚTzڙ5+/673dze`X<Ʋjz̊:N$,Z22떉-% 7A&my]ZLqsZ37 M1$pնx |y$b7/XV^t=&kArudڀN+>&T>i gXkƗUUť&ƪtÖ ޺% z5gHIIvA$ %c +e͙dQ `pKR7Ww1]Uť%K2 >XB+oR\WDTˠ6]Oo2F?n‡yM`UkrZ^ߕ v4]ڹvCjy7#"`VA e&˔IoJS8 T68CzCêr{ֹ `i A'5kcԱ͕鞚%y9Tug8 =ނLg we{ oMCr$a0$ey&Y\1asLe>TD|@Sr=K8(О0+t)LבoEwƻ >;?>ۆvӍϭoLA^%`J{t1G6ip͜|icMo!=A'+8(!9IHOAWùJveNL!x n~¹ X 4X:fM¢b͊5 Vr] F~^}N|ߝ^=a5,c ?p-Ƒ1y5%#?%dK1.80E׈Gl|[ 2 4{u6-lfl:9jRtqvP7IOS5"Z7@;Q|Ff%'}zfTTZ$$G5?gݭ1D{ϙ Sj8dt=)C,FIl*v`֒;0l ./L DT fXc0w]h6t:5 Il8&@36A#;(޻{710s|En5,TG~}:hNq4>< 4b 4/Z7y#IBW*D5*S{-&* ?nya'% "̻ʹJȭOShZi8v֐Bc\)rFΤj,kN-g+AWT q49Z>l(_<'+%>*A7hff1FWhUpRNOTQq*k -P W<,+xx( Qz:rP*~W@,a8Hʹdb<`HZͮjI x[侱;-PP/ {^y  KTj ރ5vwvr>@v}/yߋp×˸ ?#Aoq>G@>++Я̸Q/&oPB`<,CPZ%=?i^/}c\ 3Y~+9֓>՗.ϟ>~e~>WHCE9U?:| [1 `v>L^KåK!{anTF|rAZ2R :H+rȩ-(\쩞xÐI9a1V:cfV}ƜuX9t'f[O.ƚMTV];j.'v<{\^f2[vLiO}p;ENc&\\TX\L&art??WN; Z}j -:ԡtG_FŴFU*ZW'FшJ)AJiO'O\倡nPQE k'2 Q??r KՑݫ8Y56$^{7[<`7܊4Kb =Nʭ$gXjUAbdV t\D{w`}_6}%OfeYmgAS9Z5LtWԪ`;I ?)iDԤj)yU> p@M96O2xnG(뫗t+f C-ٵD*~gQiJc3XjR"ǟvٲ1?GxZ5ʅ ;}vU˵Zwfpom>%~œd{_#iNp%8hЖujv}x24EN2mLs=3u҆-y/PEĖrZŋ\|p;5_l|0~/^.W@b ŏtd?EX]#_zqQ^7(b]}WɅu`z{|^y+}T|VO"]~ncJ7z?s2 qƾ!6τit #9".5(j1ozZx2af x ,BQ,ڇLݖ#{_ܼnAӸ]L(5,Q.K/ 9[pxY/H|l~hgqٚr8eUEw)͆1% aˆ-÷Y9oXT-߾Nivtn[3+6 ~ ˠ瀝$ }T{jmKz$;UV;YHh^9БCco_P&H<R[a} w4.Acc :懏^>и41aU ?q ~:ӵ%Jql<^Q~E"^8^o0]G<.7qQ^7qڑ&Y;ᶖ%/r,} =Jjo9{֮݁?6~֚I4{{-ügXx=ølJOJq.J؎Py{g0ߺej?>: XX^'zz0젌>%9"dFq ?sl2 f'@ت5%f3S2kTL t-kRY)RY_6VsRH.k{S4ŷxKj90ecp iFY1F՞*j4)FZƣ{mHLݯg XlpD L-KHG :tדRIWi\|y)?t<+˫ķN_Բm+]>ijpf1hdyI&7//P4UgW-jT%ҙ*Gfxj:Qk;*xWIKfsvU%4pd'\qIXkn2LHVz!wA2J,dB)ud\۞65 T4(3CH4Fh/j8ܾ~=5?fKqIU*)' JJeB3`΄gK #tݙµ^N}`εJkVb6mJAx'~whEa%/ȉl[Kk4j7Eiw^n%6=[!-tR]&v/ w'sQ\*E㦀CH^g.ֻ/MS*}3QD[ ڮpŭoVȶ򡡬4&;E75fٞI-AƑ6[rãCgW Q(:ꑮG;Enȩ /,t䍜]yJMS5>8FOͤbfi("'>/ԇ E)G\ HO(gCB8@\.tg%#q)fn]n2ۉTZTNbSm_mZ+)~G~cs8EB+VW\9 %X@7)i/`E5ILYgfw=3!?˜~?3LF:j7^4F6$=x݄T͊k +g$3Wf*kF:W'(4r>t<}9êwdnP.C} [0ջ|qA\#BYgY xG>~$[ǯsr~\8-&ttтkKAb:z%?;Q 4t%ԎlRآI>|3C|ۧ]̱8 SbbR 6MWu|6MB8u \YTLF'8:F,)9( ˟_v\B8FqJrfQ07yܼ }?#݄ee*E%kOPwS3ʜUL3l0zDK9+Q1* :>uHX Չe$m)h/ #o21ϋ_Dӭ\8lӣaվm4sd!R6p}r2 5M23zL`3iW4֤4%9VC¿Rd>;1-&&C~E#!y.-)UW96̕2e|Ҽ]ӧni# [01hBpzM`38<7L=J #n`6t>!mI\$9 aBrtDQ{3e?2Wu4ێJ>'iC0er 3+>i0 ~ᕭ*`+ƴwCW@|4 IX-3 c(W r}hC`6oY&bB/ɠJ硬Ih-]% XZ|\X]ylˬ5Nc}}z\$N<ҕF3*м/CL|4E)C -L: N A;48h²k/ùGaq^`9DJYz@ ~3Q I}}!$THT}'`y7mp=0ro2PLP:"/?Ռ=8dyRM*T8{jkQܚ@[Ddh+)v͠ eC eͦ5ZSj;qƱ\W!.S%Ùh+%M)rS2,]⏝%gqd61eS\_J,>>Z)@Y& 9] mΔD&nie"1w?OrBPY:zٟh>SxcsBFeu1:o{Y6Z>_FKBb8 mӪ'557%'RKF>X`A-)gOcc}e ڈ]ͫ*kuS]%̟5۰oo}j5S5VUrWzװ/zn:/L{Peb7Q)] Wov3E{mt-;PUgۖ(sTg2ascp83$^ԘǸ8 E5]6_ZWa[6_z+"ݺ8xq~voâ oa+S3QDgqmb*3AK5I4+Cg 2r݁}"%Fb+s*%a}T|1̱חFӛ#Ccw_/C"4ǚ2: vy5ñLw*no6:;xRŽvwvneiOm]11?z<@n t.Ӹ vև?xFJDu:yLQQk*=d+Ɵ1x ?U ?( ?/$Ae@25P-Ɉq[&.mZ&'U6&RO>7FYV Lp5 M58b1+#OHZw± b3x ܜXqnv'$u@ `>LGcx r ԥ {Rbt Gtϥfz* Sq*_Z?^>/6_/^w 95)E.h7k\k]Le_ ހ Y0G j"XR҄2͕TE:>)oMaJUʤ$ Rm0Ӆ &2ɐ")΅&rd@?&HP痗;HU h7VelN~wiFlbY{avm,[Jr|{\(Sr ;Ғ9T3eDh uu_ %#'IJ׺U.gBhkJEZI]bp;`3-XB޳TLMHS6)ju>+-S)R>WpyX C_{3.Xf/)SxDd [cS@Kfqf@M%B]] -;LӺI6|FEv G8 qaVtf*iJBґA%c qS)D?9*- XLpJ}b9-Y^ʅ-ؤ oltzS9Wޗap}8p^xֲ6Ub0XiPvϯzL  ׾h"hѯ \'92_ ~%&XFj(uS,7(8Ѥ:sM4*zeЌ|?Q[(H tJ%R#.ДTӗkLNoݶ_h&ߜpZ'I&*4#C+U~~Pcõ1OJDnP!*hgJ|ϱ0il47>DO-'.P4AU/VR5|J?Ϳ4:c |߻ʹ yպt }N^M9mhh|wZ> 1 y)_s&ɟĔqό\Xxnӄ6[`pb$ R ]6|v >D|KW)vv4ބlA>b>j|f;}={M/F6W6~I\/N̉^yW!֑zQ<Ib[(Ms@!Y YF9Лif W.m/P5tnCo m]c0;w9ZbN6.t$?NBA;ɳ=ֲd[oۇt򲱲lY ZXNjs+8B 2RNBog9`-TFj :.Ӳ}?qfʡLPP*zcfS7ԯF(VkLIwnmu;FKc h9ʘ4ı(<P+Y|>vR( ι0(It+YD)YD8睖7$2)sb08)>o0'қf,[Sj][F_xPȅ],c#ۻqRsp.t8Wʐ&Eܧ"] k]32Y4 Rj(G7|ڍnmTXGl#뗶9}% 5|̞yXwԝ5u}y('??+\oܠQtmꍗjyz~G& mAܪָk wvR%m['MVvμmmSf//;2? /OA^J%so_֞u`c8׊9JTkZ#dB~dn- "{'i=薕&H [lx&L۾gNIɂw̜+&e-JxMNuq( [uv%$'?  }; ,[+gWܜQA7wڎv@1I**p1'3guP(aX7:қ=l\ҜҺ̼1>lLٰ5c3W%ܠj;jۥ ޶\iL_\9)q%L`0odr95Md8b:ux1[͛oւ/Wkm Ȕemۧ=7C<̗xD?YCIa>uL:/jXl0u y oWњzH()CR/Ns%8//\mOhVϫmͪB"jv炼1T"հ.5։o·# %o Id6quS;gZй'_ImigMbq1j> 7f~s$^~ {=U=&q[^G27YƟ.4n074\KU[˦ I֘S̱lF7-V7ݠLB=lyԑdzE0/ l1WmZR|[:E^ýV'qk@Uqg!|9!}|$ M8-Mxgo`$Y2J7]|S+ ֔hLTQcR+&WJk/x-7j.xsn=MDEo ѵPBzDpEGA/wՠԀx]b .-8_$C <&^X:.qkE[Q=M%`1dz}jHZ;L \|R\D|Sð&ʊqEql%i0Fc{8ZR5]2ۮ美F}k .<@<-/4oi~^C =97;>@*yȅUU*bjJ6m85U-j[UGNmq+j|(5$?3?9aʰUO,YEoIz*܈/0$߁}6g3ϭ֐I#ө]$iT5bylC^Y^cHzQ(tDNvOل .snSάfq5oT;qWsn*ZL7[]ҕ]:}Ŋ.V\pci7ˌ$DB4qWJpc}OK /shKҦ旤/۟SZ/>b6@ \]ˊC 1Ax` /gd[ZQG7#Y}ny&Sߖ7}m8a G1F+`I}Cg1ɝ#Yy(/>[hjgu]wJ>*OFְk:5y!qlTko_ *}ࣱB\\{|q[,mxl?߇ (-ku_iw~Mv]g bokS+s\[&g vr[cjs'[%dԬP 0ƯҔ6wRqz*J?m\(zkFrqSE͌'IlcĮ"{P1Ek53=Cp!}?2tW\~ Ӏڗ1xJ444.EM-@s *MR2&I>:Ҏ#HڢGc !r< Sz&bg;^ r}8sPW0ݤ/)4|manSz{_đW~w6,rKT {9NWL9>Vt;@76@q/acEK3P1FC!z#8;lRl3)0}f&eo=ۃ gT~bnmO]G v@~3FB޿Oyai$eU2Ռ{Jgb_egt;,p1ߟ# $W=ONkt7%U. -X[.rgtR 9tzgm>6_~E^GuxN!곈}6x|0Tb)N3h^1ŒKv Frػ`\6\B{ K-ӊ A,O`CL9"Y15 Јd6FԲ;H!C$jtF !=mKՌK>Zr[eӖ:m^’]e6%uL(uz*@ .n=O08WC:!aZ9)&*-UCrNZ9@/`e_ /Ģk?Qɦ=X*#M<ĮR7Z3H5}"w5GP k3pKEx-T=?0ӐY.qmSB^)8kXIri,H X Ă33 uN% & SMr}*Pl>aS@%DE#x&N$rפM`$kJ Cf=َ*rh.َ4 `4:B ucZ@Cucu=*ʞJ"iF{4:,aOkzH|FA71{$8Z=^ȓ\=G:p&ž@Mp$'Ğ>ٓ P=I홣 \!0О%ߏ8oec.4fym2f7,,/H2 _:}(!,0(L$Ҏ{')PQH=FTȡU֣(=2RDR샇%= BQQZUGc"4~-_؏5x &ûP\ ,.!L(gAe Q! ȅ0]ei ydmRƇ3q@(£XҰOy U@bye$ .ҡqA*$BQxLvpA3`u V2 LOL]JP%Ϩ>Hx1 1nACye@iDs 2$##`y4`a@qD,9 hh>z|S4$>DPOH;0J%4 g}@9D˅_:z¡~8/݅JjC ΂*Pq(H{! d ?\-v޷:Y&A*Q8ٻyIϒ.zE(z$*qP?:>t(1!:$$$xPS ,GMZf qִff q š/g 7:ր7@J7:PXuϓƓ96%_-tc)"X dO3@r@|ǠL(@AKsgCg(UfsL3DFЦ?'a<؜@qRH'@c"x;e:-k/38] kz?xP4{PS0Gm>6^^"keYV5AΉQy򳖶ڜɉ0(+E]~InLAj#;ibEof.u}K1z=“ x oQגx_ fuG?7k.~3W%=J0?H)\/6Â^=''YڽH?=Sow3FL; Yx0!K*+|ɦeAȥ/p6\<ߞLuAbdr]v3<~wOX2tReɰڠ_%C'W g\>S09f!O_0HOxyZ}D%ϕõ E1enmb;/bxjaGwEaXm.(TNi*qx,.S?mGC2ug7A)qS6hIYϏ@g>H 1]P_J {f*9a\=aYp3W3vF Y,-ѿGk H0yLUpnxT8!lbk˪jyKgޘ` Z-Up',v=ћdOI7U+F AVcС)" F|N5cʱ8Mb A~)NJfp*+n*o"Vm65-ITA"J3gu lA. !?c/ I᷆ߠio+Z)|J^e=znX5 @7@hEU1,[O!/$/Pax^d`; |#_Z mԾ[j_+MSx߁ ^snb8J rߊ:FqLH'嬗v0a^Wv }zZ >:"t>ptx{btwlVURO{XI&Z]"VJ¦P`~귿Q52|>.5<8CX:tbe͍*э*wLer,Ce bqAgO07 8݆^\#d-"4S`Ѱq^0ݡіUɣ0)F=gH {hEG/KG%|@61>ŕKnt (8"ߜТ֍ Jޣ!Ӟ{vą _fdK|Ztd]a5]dy7&=&5}9`PR 7(Q7U!ɅۯE| ULmhÔ-ΤP\llՙeۗeFeQ-完YmOռ |rk,}fͨ{Z>0,wҤnϣ}g<3??^ǚ=tN> Infr׳+V6Ycץponh(6m?Ûux7 MZpX~J׬))VZ:{ wFZvܤ*򞴏\tUݱgֵ76-6{ŹG/\.lc~0Ķ 2{z"&l!2<& 'fʡG#{wKG s'??4tJYS F=74JK]My55FhfL9@gg "|͹ޢmwDo`onUuSG>LVi]$ZVm4Xds56i!t4Txo蓓)f"tf n伕!Gʇ ںn+k@JgYl)'p'R"%A*,_F؞1~6Plߙ+& 2"\Y1jo` ^jM+3#Ǟ^mێ=t#ᮟqEv_?sw* *.vU=p+ |&spW9W=qSWNi~Į9Ȝoݽ]Ӧd9 :rBkGǠa f bYA/_< y@  k V   xݚ ڀw~{)$ClcfɰdjgȜ!2tT*ȡ4dSGDTd.Q{^~6s]}=kw]S^?o9fW:"k D2(#0Cre)P%C'umI~>x'#o[ަ7G_Jp&r]L0Ƞry.7Sdd,J(z8➁$IbJIs\#ImzPF^v'BeiJ."cᶑ0DATE TK9/.m2~`rI1SZR8T6ȍ iﭷz$ŒJ ]i);eBrC.I4d!C[&%uǣBYGRƜf4EEy\[iY+9uj+$OwJicc;OהyMFV D.d2ftf<5ԇ%D_]GikOּxjB]…W9a*!l1եi'ϒ["=H[6t7j.}GS~&2( *Aa VVv="5s%EW#<Y֛oY\{a< #ЕԐ k]-Ld L)qe w"X ajL{a:,MGAJ&[@(WFJfѶKUeQe(}Ȫ$[u.M<'^!bQ~}_Ǹx$AZ2o2el~#TgݺdIzԸ4.̵o+;v\d"wkӐ58M(tRt-6O<`#s-kgl 3=]yssXr1W7Z]`5HJ`Kѕ?ص zIɫ26IS'kyGctUZe}IWG*뽲?A^k#]"=JUp61~f*AZ:(BzczT~Ma]g*bUFfr0iHpIt& LndI1wlu=~◖2`{ob1Y;bKkQRY$Gʲ8^WkfynXΪ`ht_{KxK %Y|IPI3ow挑z]n=T4IhwdWOکjk$UF[MQ:UNvZD<y)uG ߍQo.v1K2~@/}ڝF(@w-'T]_$/&Cn0}!cnlRմfv7Z'HmbJYXE;nlƌj.-I{oeLߥ<[JMG=0ڀ~;%F2{}4q\v@PNFck=N^lNl;relӛIa] x܇{/mr"il/$Qi{ .Yq右۱i.=NU[d`HvS2n%=^>Dz ^OZ{WPQ5gWW}llNe*KmvnL9%JifYǦ-c_/TyyZ/ Q坑݃6!^a֒Eź0=;;>y:'#3݋4rb%1Rpl~9gHH=id [%6$Q/ľ܄}N*Ό-3V yeqF͓kNI%MMYm ~?].wdHyI$uN'eζ7DmH&aNZ#c\v9_&ʠvYd+o>7Y_vżu[:\f s$pKn?VJ3S1粈c?MX_Y v ]o.Aw+u ;>U_'W^؁'*[9 :<޽ ]62O'H"`_bEqaߖft;:hLt=]]z1tcޥ&`_ޝ:wMn8J,l7m }uٛԒnYt)I3 vn,EM^@=B⺲"""|ݔ0[kV~ulʟi\]e1ҁ޾ m=5b0؋19&XowVZA$l5n7Kwo\<]2v8]ݞCSI<6G21/ƫ2轚2X_FَrIjW=Jګny rfTϿEnvv t:\:ct /+?sMb0t@)I3a/h{ad~&4؃䂢+BUam~ȡ{Q\3%&)5UMIT ų=? ;o$uJz]ukTY\9Κ+%myꏀ]W)0`$lA ~gkJv~v3a!#ﱏ/~)zw:ԅN vܾ̽K۾2O֢½!c,s=g5/ !pPޑ {6{i9k_2kD?b'gͣ\.&e> @: 2> M2sRDgP `sgn^oȞp0G6zYw_YΘMѯ5+e@7^ݰWz乇v:{_7q6fZewGvH ~tH<)%)G4%nQW/1IjSFE~2&$Jȹ_f{N M(=#R^ lxa6O>gO^+4&*ȢpԆxf&FP XXBk)9X݃!NڵR.RVVX=N v;]^{/c)vo$#~s輻wf15fd7#v[`yW"v_5sJxvwY_‡Lx|7ۿX^awh zBxDli[F޶r"+r*6no6"6 >"mRNa灚swgv>cT<H9%2qml=wgxi>ʷ9~ymYۑ; $bfvӣG?eEsn_șܛ {]gj/xYw3%+bߋ dڧrŞ耏({zjjGר[_q V_lwj]6ݏJ}wOQ[w_"sEcT1⥤vK\m,$A mYp>|%gD߱:P]7n/ρin/kOkkpHSH>t.pgGcROY/ %%[!W f{;.EImi8Ō2&1o&;gbd8?;MN |rI 7\4o|^&[zGsr\|XI=6>GRZfFJJ{# }r*. ϏxE7 @քP)=Ys ^¿$_c( % j^yِ5| a";E |,=GΒg;L#IRwP;u{9 %oSg>o>C^^@~Ǒ8័O%\~ dS _Ź12Yq<yq3dK?@:_;`kшy|F3-:"YVM>#wȱ߻;}qx?J:ܽfwӲmP?mRݹ6qK±J[z/V76;*wPJAKxH$,Ifh.=N?em0?<3F*%Ύ'C@zx!߆һ!/ȋgRRԃ135<{J7*[<>Ɯ _p\ )5sn\7X]Y,j6@f2g2tٟa1 8;͸Nd4kH{x$ydey^figzFP!Fڨ4/FQdW1pfΜ8Ԩ&7E!Zme# 8{N:wz9(GŁzx`hd~p4paCp70?oq QixF]#1#G3pRs4n+kg^9 ww}xA{Cc/wc.goϰ9oG.GL1 ,@֕드yPݞx06w<6>kxtU#0r?7)4~?/!"[Ke ފ_ůmu~owkx]#?%=w=zGw| >ig?/:vxkwW`?rnx\Ȑ6D|>9'%QMk X7rLdnڋ&nS%^bӛl_-xUYoŷǼ߅x߃Xź!lb;8˸Q~oO6x7ރ}cM?"gmzŸa_ExTyt*^GO$>x'qx||3iy8g1tȫ-[C!2dZLˊiY1""xތOgy/a_ƯUކ_o76~1%4Os4Os4GOs4GOs4N4wL[?mO[[C_xrgޭOs D;߉aW8ϕo S_ȫoG8OK}}<&h|QMA/B8&Eeç eÑAOMx3~ ? xR֠i_[^ކ_o76~ߋލī #t!#p̃}5d~yOK|G;| `?2d~ ܈Ix Yd| ^oŷhU4|/*ĵi?ŏFDdHWc"C":\rd%2a#S0K<*ְ lb B*Y5dŸꑕP=#S0K<*ְ lb <ŵO _:pJYtS\)~k?ŵX:6-lc'pTߦ6շMmoS}Tߦ6շMmoS}Tߦ6շCwCP};TAtAtAtAtAT};UߩNwST};UߩNwST};Uߩ^2ׄOP723̱2oû8[C~mp?'2 s,b &KTDKTDKTDKTDKTDKTDKTDKTDKTDKTDKTTKUTKUTKUTKUTKUTKUTKUTKUTKUTKUT7 "L1 ,/˼2̻.˼2̻.ݮt+Jwݮt+Jwݮt+Jwݮt+Jwݮt+Jwݮt{TߣG=Q}{TߣG=Q}{Tߣ7TZ4n sP=zdX`_ֱMla;lec.s٘\61lec.s٘\61lec.s٘_____________________RRRRRRRRRRRRRRRRRRRRR+BmӑVd)fce] ƭs 9DaxUaO}S}Tߧ>O}S}Tߧ>O}S}TK9jE&b9X^]WyUuw]]WyUuw]]W{uw]]W{uw]]W{54^Ckhz M54ֻkZֻkZֻ zqtdxWd)fceû^8`X`s#û"L1 ,ӑ] a zItdxWd)fce_ s_xǑ/vÿ8n~w|/ց:Y? )tGn 79S{8ƊyOxVwo|~rG9G <מ|/8x=WEG#w_m[{.KsΞqu4gw {[GS{bh%^o+q=?[*ߊo÷?;.abuyh3/ ˸x~4я8ވǛ?gsy/a_ƯUކ_o7#18WnǗ聁O <<8vہ'||pÃ'/ <3 G18otˎ-^=˞W>{ "FGW<ߏuIOY=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳{V~Y=+g߳3>3/+q[ܿ93Wѿ(pm#u䣎|lp,L NXO'ۿOj>{;gOXX?{07lM,{l9Gn|(2rcAW~oowq=9r?"7`Cx=O^}d܊'>(>s>s82ް>y`|5|)>y>Ϗ +- ?lVQ~ȰBdz} ܉A QQ^=ʫGy(yqQO|#Sn3x`yϋ{»}W8r+[pg>Go|.2~wd>s1?hp{gvշ]oW}{ #oT}{>5]au]z82T?SD |rpnswExQWՁ;gtӝt9yNwӝt9yNwӝp/ ^=#\od3\zëz#o  + ]γyv9. 7d/11pKw n |_x,?a%VKۗX9/r^p^=ӫgzLW<'| ۟Kߵg/ xTq~ x{n2tP?)Yl}(>7 ŧ)fc%p|kX6mU}{U߫^WU}{U߫^WU}{U߫^=ou(>o}P|Y[oWul`[N`|~.0~3a(>L1 ,~ۯculױ:_~ۯculױ:_~ۯculy7ߐ~C y7ߐ~C y7ߐ~C y7ߐ~C y7[㳧)03̱2 ~4n?{ ~`%2>L0 s,b &wNG&b9X^Js׹\u:Wz+Ε^Jqko`%2> L0 s,b &礁ӑ9i`)fceS203̱28[ߠjFJ`%2~#%03̱85c6vk|ZƧ5>iOk|ZiuiZiuiZA{=hzZރVA{=hzZރVA{=hwxfx`+? ^_xwo,Ƕj3gx*`Gȍμ=M=}~ ?=+^+l<|/W"+k|5^KR|-_o ]2܍{0Žؓz'g~ `kX b3*5vTss8 K+7#Q~oOMqތOg9<~0ނ_/WV*~ oï77{;} n*?7N9IxlO8̓OId9G̓O ?vN:>jVgS{NvSgn??4<^;u<|<|ay5cO|Ÿc'8p_#7'88؟>ǎ W ߼a VOp1c pW7ųmOp_n8/;{_a=?+ƇQu{Qoxu7'8;ۏ#?=#c/2> oojGkOgW:zOTa^IUF~?v,>>HƵzZ=Hӟ 8H>?hs1Cd;S$N~Ig3S[O=dbYCd "xD2xd}J'~ŸHH 0CD2D2w>v5> P|"D2p8֊O$7zuS<[|"!P|"D2,{^a=z>HO$dq?|z>H|z>H'=ECVD2_ <H60CD2p75Ț?HދO$j!+/ ?7pvcI''y|8]S!KÃO9px8<'$|`D|Jr8"8Oç3:ßzU^ : eᰪ'ɇea|X&ɇe2pXg*ay{8pEael967P7B={+eᐥsKCBWC.>^U9sO䖠x*n } ۡZ1?jXK w%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%mWv%ZH́!֬5ZXNwVxt\ +?>yN}">%V~'~#p{a<9QoDŽwE^[:Ӹ^uWמ>2NO}֑/o|uEk;_ N`_8;>z-q-S0K<K'ul`[NdG"/܈p??ۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺۺwK8[.e`%2ޥ L0 s,b &x903̱c#S0/o_g/ }xT8[ +*x}d\Q#[pFÊ߅VTVT`XQ#+*ߝ g+*?S0K<WT` &ȸ+*p7F܄x4!5Y6f}۬ommַY6f}۬ommַY6f}۬ommַY6f}۬ommַY6f}۬ommַY6f}۬ommַY6f}۬o[mmѷ-E߶}ۢo[mmѷ-E߶}ۢo[mmѷ-E߶}ۢo[mmѷ-E߶}ۢo[mmѷ-E߶}ۢo[mmѷ-E߶}ۢo[mmѷ-6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6oc6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6o6ovv=|@+'W<Ox9<Ǒ#n؄/ o-2-2-ӑzWy^=ϫ{|zW/^x^__ y#/tHBBB;l',|6mi_4<.en܃)ud9_֛l_?5p^T<.e\2gR^2*\gw)|a_Snwߥ<.e[bo͍\2 ~o›Si ~?_CE<_ &ށ`{/~?n'^o]ߥ iw)B\.9>GW+v;|̫G2ppnBj]2$|rT3.exIT-.ek X720Aw2кdߥ ,xw)}? |cމkZߍb6y\e\KQ~oORnȳw)2!_Dߥ 18W2p'x Nߥ |GߥIa"yD&0|?^Dbx6yx>^+Ux5/%x)_7`.vux^n{4kQfh ۱wg\%\\18ވǛ7,~?_CE<_ f7'~;%pyN}">?v4> g$[OIS{'N /~'>9SۏƫN >^QvJ`?8ongS|ovJ,^ivJ+GSFoގz<&~;%'~;%pXS?aOvJoދO>z2'~;e$5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq).5ťRS\jKMq). _ |nɁwkp/fsepӁ #/j%wھ{/ )d{c^0 ~o›Si ~?_CE< ފ_6:~w;5^{?xu7`y90?(G !܀8|"> OKvl_q>o6|;{x߃Xŕ/d~?Ï'm?8R*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSR*T9)UNrJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjR8)5NqJSjRx#5HG4<>471rcTC#?f|_"Gϊ}xJ|^W۾_Z|߀؍7b)ŦcZx=7,~?_CE<_ f gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=CZz3 gh=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZzֳ,gi=KYZ7L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô04L; Nô&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&49)MNirJS&4y#MiHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#-iHGZ<x#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miHG<6y#miH69)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8)NpJS:t8e9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wlܱsf9wli=OyZz󴞧BG#}>BG#}>BGQ(}>JGQ(}>JGQ(}>Jc1}>Fc1}>Fc1(S<&kd sf5;jwԸAO' }>AO'I$}>IO'I$}>IO'I$}>IOѧS)}>EOѧS)}>EOѧS)}>MOӧi4}>MOӧi4}>MOӧ3 }>Cg3 }>Cg3 }>CgY,}>KgY,}>KgY}>Gs9}>Gs9}>Gy<}>Oy<}>Oy<}@_/ }@_/ }@_/ E"}H_/E"}H_/E"}H_/їK%}D_/їK%}D_/їK%}L_/ӗe2}L_/ӗe2}L_/ӗ+ }B_W+ }B_W+ }B_WU*}J_WU*}J_WU}F_k5}F_k5}F_u:}N_u:}N_u:}Aߠo7 }Aߠo7 }Aߠo7=AO=AO=AO=AO=AODo0˜H4HRdu;5|C)ߒDO'ѓI$z=DO'ѓI$z=DO'ѓIdz2=LO'ӓdz2=LO'ӓdz2=LOSTz*=JOSTz*=JOSTz*=FOi4z=FOi4z=FOIpτ?PRduaکSkNZ;vjڥKk.]Zviڥ[knZvkڭ[k=Z{hڣGk^Z{jګWk^}ZiڧOk>}Z [sI|8ݏ4}<&kd^!_M|;z=Cϡs9z=Cϡs9z=Cϡs\z.=Kϥs\z.=Kϥs\z.=Gϣy=Oϧ|z>=Oϧ|z>=O/ z^@/ z^@/ CehEY)cFʺ0_zYe^zYe^:uPAZj:uH!CZi:uHaZk:uXV{Q^E{Q^E{Q^E{Q^E{Q^E{QD/ыE"z^D/ыE"z^D/ыEbz1^L/Ӌbz1^L/Ӌbz1^L/K%z ^B/K%z ^B/K%z ^J/KRz)^J/KRz)^J/Ke2z^F/e2z^F/e2z^F/rz9^N/rz9^N/rz^AW+ z^AW+ z^AW+Jz%^IW+Jz%^IW+Jz%^EWѫU*z^EWѫU*z^EWѫUjz5^MWӫjz5^MWӫjz5^M _$ ҏzQz|GyT5Vv |Kf ^Ck5z ^Ck5z ^CkZz-^KkZz-^KkZz-^Gu:z^Gu:z^Guzz=^Ozz=^Ozz=^O7 z@o7 z@o7 zHo7Fz#Ho7Fz#Ho7''''''''''''''''''''''''''''''''''''''''''M&zDo7ћM&zDo7ћM&zD?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?M?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?C?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?K?Ko7ӛfz3Lo7ӛfz3Lo7ӛf999999999999999999999yyyyyyyyyyyyyyyyyyyyyEEEEEEEEEEEEEEEEEEEEE%%%%%%%%%%%%%%%%%%%%%eeeeeeeeeeeeeeeeeeeeez Bo[-z Bo[-z Bo[Vz+Jo[Vz+Jo[Vz+~~~~~~~~~~~~~~~~~~~~~Fom6zFom6zFomvz;Novz;Novz;Now;zAw;zAw;z藊a9OR1(_*Y)cF:U|]!ߔoɷw;Nz'Iw;Nz'Iw;NC__$=ԣ,2C=ʣ򘬑N{}|U&_o7[0].zEwѻ].zEwѻ].zMwӻnz7Mwӻnz7MwӻzC{=zC{=zC{^z/K{^z/K{^z/G}>zG}>zG~z?O~z?O~z?O}>@}>@ }>HA }>HA }>HҿQ2G1Y#ke]Wj]պuUUZWi]ӺuM5kZ״i]׺u]uZ׵k]׺uC Z7nhкuSMZ7njԺuS-[ZniҺuKmZnkֺu[m<=%ya+JyT5Vօ955555555uO={ZiӺuO}Zk׺u_Zh=z@111111111Zj=zPCZi=zH#GZk=zXcZk=zD'ZOh=zTSZOj=zL3gZϴi=zLk\k\k\k\k\k\k\k\k\kBkBkBkBkBkBkBkBkBkRkRkRkRkRkRkRkRkRkJkJkJkJkJkJkJkJkJkZkZkZkZkZkZkZkZkZkFkFkFkFkFkFkFkFkFkVkVkVkVkVkVkVkVkVkNkNkNkNkNkNkNkNkNwzGwzGZϵk=z\sZѯ-=5ua+JyT5Vօ~ [QVʣ򘬑.eeeeeeeeeUUUUUUUUU555555555uuuuuuuuuwzW]wzW]wߑJ~Gf؊RduC?eʈ~QyLZ_NzF0V<&kd 3E+E+E+E+E+E+E+E+E+U+U+U+U+U+U+U+U+U+M+M+M+M+M+M+M+M+M+]+]+]+]+]+]+]+]+]+C+C+C+C+C+C+C+C+Ck-Z[hmڢEk Z/h Z/h Z[jmڪUkVZ[222222222>(V<&kd s6mZ۴imڦMk֋Z/j֋Z/j֋Z/iKZ/iKZ/imڮ]kvZ۵kmڡCkZ;vhڡ$eo}M䅹maĶ0w$~50n9ɝManx|h'T_L3{z}XtJ|,ˏ$Qį(So_yWEP>4E8Ҕ'?x7œxRNhg_sN,0˅\L| % SV=^TS6L$~-#HI̩)*5=zԌR?l #HfLy=$'|%z6{F'ߕ_M_6Ef0?̽|؛$RLW$o$܈9=W,c2[~3!c,:ѽx$FוLNIeEģw2[s7);ݤm'n~ȼ. ?ug>,?SftLxOnqjLg6'1ӈ9ӈT|*bN&dbN&dbN&dbN&dbN&dbN&dbN&dbN&dbN&dbN&d|6lSmrVY*Ye9,g嬲|ZXrbYN,ˉe9,'IJXrbYN,ˉe9,'IJ\{krY=˵g,מڳ\{krY=˵g,מڳ]i+vٮ4ەflט]ckvٮ15flw0v]Evٮ"UdlW*]Evٮ"UdlW*3P_aįQįqį(S&~3sQfh%O 󧉟s8|mWhXbk0ljτq'򣔯EϤ|=z}J7@i9m!zA_I/?_((ʌEWy<(7oߖZo忓#PbEe,eѩf#BV*Y-$[3h',_CGM|Mv*|#SoʷkS/u%e}_A'jɸ&%o?.B~K+ow;a6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"lD`#؈F6"A/07ca27caVʣ򘬑.;ZwhѺuG;Qy<xy>~&T-)ːJ%Q"*QI`,!̐el%/Ge߷2B/8~:yHjPǵzHG8WGcz9!{j6pIi|#񡱿Z7 r:hƏfm^YƳu9gy5 o s-N+^y+r^Fkn꾈Ëxě0_2^/󰍺mF}[5mWVmgۙmfkWj^ӛ俎Mkox}ڂqzw].Ntδvޅ==꺫~7>y|{>C>>QOī'܏a|{W/zK?V>櫏Ӿ5K!dҟgi(o OO :b0nnC.TPwp#x7Oɷ<śQ<mfG6Zg~fXXZǪ?V^4yif/iSgh8Υ#P+N1 2ЋL:xL0W\缘H$'y^&{՘ o,O> f:?/},WټZQolf/ۜe_ڣ5q>ÏyqzNrjp'i?ųS;epigOw}7Osk& "5P5[Xba=Ÿ0uQZ1wbusCBq{g}qn{$ߞtFC#И?~\?6ׄޅbM=CBf7us>5׷g,,?|Z g[yK-³^ ^|>{n26>N:~Wj^_:o87ſ:Zh.;xٷǙw]yLgs^~tM{xJwX7<&nw|݃z!O?!;K#==c=ySO>c}a³}bzכO^CO_~C,Y;@B[A rv0rx=T&_ >5ާ1OhWb;ccXif)M4s÷r/{rQ[樃:7z_o oݛ}Sޔ[jE[wyG3Qwߑ{ge'='|:묧auY~]gߣ{b=g:U4u,t\tSntэ>;; vx׌PhЌ|CG{S͞fc>v;ezĜ|Lo\o5\ =^|_}+/Kk?O^f Y߈4 3x?P@~ ‹A0،7، VsLJu6ճ ?K:?GpgG9Oq=HgF:3ҙΌQjhF1Z2܎v3|>sٲ'h|2αΎXge4f=͌48pgoqg/t8n֥.]. ^fv_ߺ |3̤%ӹL=̤<ǫ3ޙ;;kMpsDNa2NOd&|bm9"o 4,yYeς,Ms*Sy?U:?ƩgSMmgri|kijNL49tNw=Ìx7Ϥw&fb/h/q,~lZgll{_kv=2le)f6:یeM\6ﹴUk.o`ͳ>--77ioo= < //xx9r`ȁ\w/ -4W ["YD"8Kw.ݹtҝKw.i]Lb3,fi1.6C-,K`-D%ֈ/UkZKZjZKq\RZ}ė2ZWK/r_nhyZnr%W?Oxzxo{ xnTcaW6i\s+?s3[=Ӿmm6=&gmM].o;vݎk;C7s;iINvҰ]< 9]}ì۟ɇvYqv^4a//9}i>G>z9`_{A{oA!!up|9wGG`yQGayQGay?11?7e98aNfO?yO':)qʜ2'sFD峖Z>k]^8D 芄]Y1DW5 Q!]5\5=]#6 |F/8C,Ct]W*m~B~!Ʃ0N7QT-/f5BTT^QyEqqvUEq:Ds+n)zOe|*SNe|S*tTUUaT[7լ%Or# Fus3ίjTq m߇SMj:_Ϛxx?`pAgtA׵\r]Z7}'}{FTum:jQ[>gߡQ}c꘡ߞQ}U84P ml>}VӋ?[[ h\ʬBfk[y~/K0_~6[[69ėvV ە#=^"z> چ)O|JS#U^*R\5PC?0}wx700?7ajwfp#G)}O(ތ2k((?sh^}f3kcQ{cy0`3Vtާ}iOv:JW7t7ηsa2+/Q p0C}GG#QɣLȔ]xx3hqjOTs\O$i,g2ϧȟb>:w,N߲̗oh*TL7 _4|+Gӝ~:^O3x: ^L}a /K\TK̂5W~uyJg-ov9ї9telڳeӚmֲmzs\y|ּ;_,u=ȡ#|ǃm-cE|Z"\s)Whz_K-R>,ygpKl9]+\f*}v7dL5|o׿|]OX:Zz3?<7dzQ/7_ӯfW^M{mff6flf=Bg[Vڶoߜ6緙;ߖvxgwށw<ߒN|wz.vکNv7d.4NzݍnGoh޾}~ӰZ|PAC}agpXp1GxwG=ucr cדq |Ow_t0N:/:Iޜ>2`69iN߼?= g0ʣ7OYg9+>c|'FSy}_?Ey=`pp/ʫQ$k(ǃDyc Ճ(?d*Y?d9d2XYD[[>õ?G=v(F}V2ʫ(g^56YY:kcGC_GCv>5̪|+!|KEBK奒٥JV}dwmjRJRSnVNک3Sy\o o6~RY9jLZ _vT_K딩^7Rjtbl6ק^h'1}vðz:&d?9:z=::5L AG'ފL^p3䦍wA&$O2QV̤G/W?WFEx'70t-'"|"Jg>UNmZT s5N-]h–h#2 ?d yULi)/]\R\r2(ODŽ] S 832O֦%Z2Ҏ?/х))5vT֥/vo&[{piRXc-PchbӸJ:iETűuk&cƒ<+*161L3Y]@RJVu* _r4q|mUK@$`.BZ5^u SIO1M)')tC '` ꦼy4o4xܼɞ2j6c)yK6\وg#X.{ V VX.αKה|o]IS󔀶a%h`-X{xsoٔr *9ؖ&!`̀PV]V EA?χn"HBG4qƅ*:PԔwQ l/c'LNa)be'Aqnϋ&_ ^Y"=S w aP%%E~5] ,\VUovo[Yϋy5Lް~uoWh'c۽kx|FjzNETez 79O&h71Ma`)h~EXǨؑCwXSdvSsŻNy8qq>;o!w1 ca*/,xm|6m%'effX.mJ)ܦ\{K23333333333o)M<Ѭl͌`4͌篕_㸞C%\,,Lpv>sq˜\ 愮DqεN|$Nԝߝ̕N*pVqVuVsVw:9)wG#ݙܙYYϝuٜQ\ν<|B"bR2r }JκnY YߍWM ݺ99ss󵳙3-UU-55ݵ܆6NgKl6ζvYnrusw7p7tGc--ݭܭmmݱNrr9 n;ѝNv{7ܝ^w;o;Sݝwr]in^>~A!aQ1q I)iY9yE%eU5u M-m]=}C#cS3s K+k[usvfvrfupnvnqntnrtrvq.s.wfs::k:8;78!;NpprwvpF:;;;: Qssssss#ݏ܏O~~~~~~~~~~~s<<,QyIOy7---||,\,,\--\-----------ռЋKԫ{{:^66F{y{xzycͽ--mm^7M𺽉$ozS>ߛ xސ7MvvvNNNNNNNN........nnnnnnnnr.^^^^^^^^>>>>>>>>~~~~~~~MB #I 2Df&Yldv2E&y|d~Y,D&EbdqY,E&ːerdyYDV&5$!) UjduYE4I')IE&Qd]Yl@6$Fdc ٔlFƐdKٚlC%ۑX"x2tdLzȎd'K>O$CdB]ndwٓE&}~dr9D&Capr9E&ǐcqxr9DN&Sitr9E&sy|r\D.&Kerr\E&אkuzrDn&[mvrE&{}~y&Ogs|E&ߐow{D~&_owEuG QNtIg3Yt6:;Isyt>:?].H Et18].IKet9<]HW+ iDcДiFsZUt5:]Iע Aku(.]O7t#1݄nJ7ct %݊nMt,݁vqt<@D:N=/tGShSt!:Lwt7;݃I{}t??=HC0z8=IGc8z<=HO'S4z:=IϢgs^H/K2z9^IWk:z=Ho7[6z;Iw{>z?}>HG1g33;8;?89?9?:?;;I}>C E}B_M}CߥC~B?K~CGBO9e#28g)l$fal6'al [-al $[-͖a˲l"[j,dYRVgYVal &[5XkNVaغl=>ۀmFl)یa-ؖl+5ۆm˶c۳lƱlf$6NMa}Me;6Ȇ0ۅMcl'ۋav ;av$;͎aDzv";Na v&;av!].a v%]ͮaײv#nav'a {=a ${=͞aϲ"{^a &{a!}>a %};a߲#~a'[83ι>\#L|f> gs9\|n> B|a_/K%R|i _/Ǘ+J|e^!x:x _Wk5Z;xwW|m|C>o7Mf| ߜo[6|[ߞ;.>x7'ɼw| |*ߙA>ć.|ߕw{=^|oߗA`~?G#QUc#8~4?Ϗ D~?OL~?B~_/J~_ï F~oN~A?uI?ß Eyv8Wkuw{}?Ogsſow{_owWp' .Jb)f3YĬb61C)syļb>1XyyyJ,<- EĢb1XB,)KeIJb9XA(V+E$bTE&rQUĪb5XC) !Sku(XO/6b#Dl*6s&1bsRl%ۈmv γs5$+v]b/&n1QLEQ$z'TbH ]4M.{bO/q8L.Gq8N/Np>'q8M.gq8O/.:/;/:/bqT\&.W+UjqV\'7MfqU&nw;]nqW'8_;CaxT<&O'SixV<'/KecxU&^o8;:=NW)rxO/>L|._N|/~?MO.:\G;{>| ΀8??????????????_C?c?Sgo~*jZ~~_?___oooo ;C.f4? ~?џO{^S]in^>ή~A!n^ΞaQ1q I)iY9yE%eU5u M-mG]=}C#cS3s K+k[;{G'gW>ξ~7wO/o??#]I"dK!})!GʙrK9sM.sʹr9O/ :ȅr\L..Kʥr\N./W+ʕʲ&CX&2u\r\M.אkʵdCvȦs씥r9J+ד rHn,7Bn)[mr;+w]r/'n9QNeQ${'TrH]4M.{ʽrO/ʃy.Oʧ|N>/_/ʗ|M.ߐoʷ|O/?ʏL~._ʯN~/?ʟMO.ʿQQT1ŕPJ@P#Ljf5UͦfWs9\jn5WͧW BjaZT-WK%RjiZV-W+JjeUSTT ZUVWk5Z:TSuRUjmUjC5Zm6VMfj\mT[6j[^U;.5NWT&ɪGvRjSjY A5.jUvW{=^joWWA`u:TWG#Qhu:VW'Idu:UNWg3Ylu:WW EbuT].WW+UjuV]W7MfuUݦnWw;]nuWݧWCazT=WO'SizV=W/KezU^Wo7[mzWWGcT}>W_/WkV}W?OgU~W?_ H@@~ `d0S0s0K0k0[0{0G0g0W0w0O0o0_0@`PpHhXxDdTtLl\|BbRrP ҠdA*jZA#AgPUvN0*X7X/X? 0lllll 6  ;]`|0!&AOcSL `js0 CpK0-5-=#3+;'7/?8 808(888$848,8<8"828*8:8&868.8>8!818)898%858-8=8#838+8;8'878/8? 0(8$4,<"2*:&6.>!1)9%5-=#3+;'7/?x x0x(x8x$x4x,xx!x1x)x9xE ZDR_NlCθ1]#e$~>xl- u"E'[uzL&"E*.4L4,EZXc{L%(F5JQrk\5\c乡Yօn]$=㇧LޕN# k(F4ioBx۞֜ .B7u?1P~"Eaơ."]bx:$ETu]hD'=zC=ۡ0H뺳Q-tE#I~XHu?5^POg>t,3';C>kfnWJ䚊o ͣ]Sti lrP_kʸ ]ޖ=F=lӞISF{F=톍uNEǵZӱQXc46wKtOi;ݽhў^CM {D(b20 jܔ!mzdd*VgZXI-}#'tt Zt&aaQC=f9` k gWm>'_'t#Ѝ/jv+A~ԀWG]va}h'>ѹѩSt6Fbt.1:]Km;M7tO7|-=LJz)-];g=?a|wPK&a["F޶!ROja]?ԯFn3NXXXXXXXXoXXXXzZUz/6.4Fa50e9`lvtlunt"E.2](д=ePϔˮi53i0?_Nn^`0 aZ$p'dmmmm2 LB&z!^D/d2 LB&z!IѓSrXtBDt6K^DhW4+MN ͬ̊VEH.]"E jPc#G%8 5F1B3ՋLbz1S^T/f3hTTi1bkXc@I+)HFJ4>oS}ަMy6mT>oS}ަMy6M5F1a]6ՇmToT^T?O3}ΦnB#A]Ղ^%`['8xBց zӈ^hH/A.j`]Xl~elkZ*gFcr; (C3?C37 |!|":('|"{%^":* ":+*+*{. .=AE؛t[aF aFػt_0|T{ق` u 0,M@ /B /B /B kZ#?#?#7|#7|c7|c7?c?O?|M@?qfu)褠)OѿA_tot5E20?gh~OzS} 550O o~}؁quo֧;;;;|;|aD"lu)apG1ITMPjRLh׉vh׉vh %Q]v%|%4_;QiM&`Wm\NJܸq@q}U t˲Ш,m;+۵9QX?έUs(Ip$m?Εrs%yI`+'h9$ l_~HC8c4hoH0 V7`} |6}`s`!CvA{ )Hp'm?K~$ us:4.`?&$ش ve]`%Mv_ļ51oM1%E 4 30o1` 1 yiFom)}4Fg :=z*|1 b4{ikڰ~:@:*TCϻwDv v w٥o|7?<=r{I=znBx3LL_C)1}I%5}IM_R3R9O ~j P7 Gu3uýn(33f73 nfp# (75EF"#qH\d$.2EF"#qQ CpWnG FbﱙfQ0k/_东ĘFc#al06B!Fc#8`na)kjbϤNj)‘;k>ۑZ[o]U`ۊl-*}iAo};x^!ua9 a԰jWjWjߚvG )54#HnlZ8b`иv-c5W5#Sub#qm2` X/)q8^K0j kZxNKe1_֓6HCXOkmfmR `܆Ĉb?1O'F#Ĉb?1Dumm2O P P보#M&6dbC&1d\a*F%t@k9Qhe8.l..n..pQ[JY{`X6ڰ=-΅-<[wl{@~\Vz\gkxz9i2?e5O7|b 9lDY pa sLM9&sL$H1 |W:뤅l0d1XMM B\>"\u$AW԰ ᴩåU뷄C {gdhYp a|Ѹv5.e{ML^#)O ^<{`ᅫp`fh@} ѮnY>6 ([swa\~@VNLTj-MSSMiָDZpi3Mt4lj)N*=ZuffƄJ *5&T )/Jnۻt2NCi:cP5311/,a^jf֑#)n4aԇj .Ϭɔ)IJvhX&xKxKxKxKxKxKxKm-ZFmtͧB$Bħ簅!j!jC *G=u'^>9"tb:4.LhNɷ!HWR4UsFغv b%2fVM5/x٦RBʶLtl{G(W`}DK{(1%"%l㲉/y!T"W~蕈Ux^Mcxn=~=%jdӗ5]T C]~ӇS F-h XMnCcUVӟC|#t *W;Lᴬ [{tj <3jQ_Rf#FoɌM XKxC{ YA$vrVfVV=(ggD{U@*iVިuuYXtߊ(q5ujPnn'|x>䖱Eؑ)""6soa.-oh8 g$6Ԃk}n1>ڬѓ[ޮrborىZډ] ṎjDodɽ|͡JOھ$ϮHD B|F*{[oބEVm-Ìo^MfX2ՃS,2 dQ2-Jd6YH(H/a*0Ke=ӓ(lͺ v[ m:zûۼVc Dc1ږ9_d0JtqgJFHIYi@D =Ӭ[oў->Ō:A+Isrf ̛|+C/ju@dyĘ֙Q7{}ZY emdOTȖRH)%R]6J-5-2\Y$ +V]ӭ6AQ"-D:D4%J;Hs(;q|36w񰴩Ӎ9 HQBi;U;f9[]%g0ǞN栵0|غ%lf9!{-Y.MٍunC#520I|1%%elUxk#ү0mAЇU6\[h={Ua) ]k MikeL)?X*3S uC!32C!I3,ۤx14F77toӓ$Gnas 1hx[$´+aҕ6W#zvO(!XyM'+O=# 3F=8X3̪LMw5LZhмwO*vg5&| !Co%2J'l'm\'m$$0/m㪥8ouZXVX$~p7R>flZ7x"5{#mꮦ0?c//7GZczl5/uv)` X-d f3JQ0f|VHlߦfլcLAZC cJm, ?=,Q h@ ei oM aۖgHYI&]Y1636!p:TGW++ {i23enJ-ґvƷД)cS&LMip75M njpSlbF&XhdbQp 6fAQ@ii>|YiC{[}u[GKd$ {AJڲ릵im68?v"xTZU7N[faK{ Yc?,3Q+~eF6v°JUpD'>6Mi&Goöi:ؤ+yMgŧQiӇ"i#4/\:g6Ԏxb!PTSuteV^z~9TC-\A lDav`;q/**=G./\+x*x*x*|PL`U% nUek{Io Z8*K:*K/iaNT"sĶ(J{{D&Si*m yLوZEa6=U)j:MlV T̽nxyuM6ûjZ5Ch)6L͆q˅#şoٰ.hxzdhO"{"$`4ld@ ;'<͝_T$V1rSb^PGq[Bߢ!dn}$6R_Dž6VN>81lTa橁x8Y:C@aϦ!ʣލL .YS\R,python3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-normal-italic.woff2000066400000000000000000005761701451074743100261350ustar00rootroot00000000000000wOF2x ^f`$f  Pg6$< @ 1o 9[D)(#FdGu]K&VC"'+I$ݶ]vA7QHuu@:AZKP2ȖbUv /OU]Ad.M|@n.oR"x`R X@Q%ȧdJ4RQM(_T+)++TTVUׄT+%GM7T/jl 9MZ2%mE6 %@WRkaYf÷줢]=a!qGҔ#G~a%t|oq7S2lU*곖㖲h 4yjyi` ,tҢ|.StF|H)QK1Z U7uɄ8_ͫz @%'H-TR`-㑮SZOCz$YdiCW-0vȑYo܈6mě im^tu딹E.2AUa_>j 2WM\fQ@[z(6UE'o=Z&ķ Y-MQKŴi`䛎"uAhVRɎFV^J̒x8Ij>OxEȓjQ: v^y MސvcnؖGɣ i4 S1ۇ,,b|QD~WRƋ B tTC 0ȧ@!8E#)TG>;81;8V(w1GVHM*F+)@[*U%;cn|`AB >v7`%zskI=*5lқqms aD h Yr~*܏'!sAI=Œ6i _ٶA̳g PQŞ8g~ f>B>"*eiW\|>=wOBt)O}'א#V3>Kjn޼9AEgY6!4LXZ2Lp?|+JkvbPatnjv pNjjN"U6`h>z9W ٽ a{ިn"(eFe7BqeTa%GQE,8y^y5N ([IU .y Yx0ڋ% .xa7?; =\­:Ոl~Z2FLj\")R4(#R&!|VzoTZtF)kjmPM/~`|vDBLbJURs?J邮L$>CIh\L$E}O`:n2E;ib].0 0dQc BUBd2IaaTPճy9s잹PBU"F9s,\ U*Tnbx( @edQeMePY1"`%|—쨌a>C'Ԝs1Ous`ҔVwg* [2{ hvlSS)G{Rsр>c-O)"NBuq2t4@5lٓ,`.YB^ &򷍋hOsY֭7X +VlwC2q}qP![)j\8iwwU7Is%#i"/`4;fs;q]J5=\q7d^}F7LF=WX4J/4ek.O-; yEWoy0':Yo?=WW⿗[l<9j;V]>$"+:,f2bQP2yA\bWӡZ6O?|lY|/)>/N3 E1Lo C?L_R+6|7s_ Go?V~9/?Z%@ Y@H/GSW_D*MKc\-qycw^20~+Oɑ^/fCp-Ydi7vͯ,[k/hU)Ko7B4)Oxs`:X<4HGКx%UG1nnT$deեm0L],Yd*]M grԍSI7ˇo1zL6YDeԩI$zc0`Ā*Q #,i;.O#IS~unwݢ`Ȑh D o_{~~\'B!4iD.)E"lr` : <6KV-wUyŋf ل4\ڒU=3S'(HPA@9usSn#bn"sʕbjk{tfQ%V"׾!͒6SJ I42JF+gWdG{AHM .g|a*m}u Ԉ a.=V?Og///3_8e['SlnL)0 f--RJ1yyI^<yb\q`rO-LN$k)z~ Wd*uЭ/iwၨ AfݕU`l9*!00"99 @q*+@&PHHA[ #NQ8}zLH2F MWÞ ~so_vnvjN%,5%9h?$fŀVVtfvh"D(S#5O OX!5!Ss[jP1e0EEB~5 B`B/aKj]Z٨z0MDsF%E/ɠAP)¼s288T0EoѡiDH4(ZrƊ@흘~[>LEQ%6D)UL]p be<-AU/6.CӦqF)=OX%nNUYilʛMO.C.csxK'"bC0'!  b㘮3BB[[~ *q3b8WWuBPNED<0CD96۸uEOOOOOOh4Fh4zzzz(((Phm=>9$dQs%AKO9]fU|HP/97~*ʗ-qp8qL2[]#SΊ?CcsUZ).tF:L)64`fաf⥝`wK"Mb{ sc47"""&X᪦KRecD"S<)|۽8\\&l1 A8GH&+׉bmp5Y% D 2 DQ|E\ ܒ[T7sSb_H3@yq{oà$* f`,)Ce>ԃ->;M+) fcZZ@tG~]Y@^Uݥ]Pą;|?'i 5M$fdLghzx>܀EXʑA'[gFc,|"ͬe=C$mETɀP@ǣ?TjӋF0D©(T+2AM/SaA i6>+"Vl"6=S:{cǺD VJ$"=ھ伣~>'>, t"VKQibV>s,w{ ߪLĆhtL) pezbm}4"9JFb$F鄌*ѧ46owo){rn[ 4m凋'-i)hE(Qr5&_wzR|6f(E6z6~wf 6{Z$u+ B/kon o>,MN-k{lGt-LKoV7]O_)jz]F%w5:<6֫;ftF|;0Hl+JӒMx;K9(h4FQ !݇$d߭o(+.0YͲ^7" KޖaJ{^fv l}M"6b7_4`SIK(5I PR4 mhʙMz Z4irsN@DhUsC~< ?t5SU1!ai@@7-޹>܁u j]".%͗\4mo_\J'u&]4xJ$eVܘa;Is@ kI=&1<>o](`r4~Z p.EttwI] g\Hc4{WXlebV4P7` IEa,Q'm(84,A|V+˾b_)))" l0T zKxtYt"wvSLjZ!QiH|_o>OpFF(?n+\qJ\i;S QUm{}ʥD Y,|NaUFf~}q4Ȼ%}N-o ICiː&O{R8Xx ai,G"XD@ަnOH4ƀud(//\їTU4_Ř(B"/+˪*io=C4t?0կ8F5eԜ#`Zq!j}m{AC)V4KrIF6f)'xo}oޝ݈)BBa#8w,+|ogb!k+lgey!H )h$ o(%[- ""!k߉MC {*VUTUT1qE_ Ǎ:ABi7$O gcu^?z otFLD{sN%/,!EDDSgRyOǪFW*|9>[UUmUKeX[>zx A,HJyϜ}[ {kB0F!1aL>S8'cLLGM/L"RD1~xs(7+9WBoل$lGG;2,4sp31;zmoIA@.9uHZ:ư`L/_߲z[PbI%2p?E@M]Mtfscty$@`5pԻB!UJTtLr6P_B0>d~1aF ,on MP!<5-=*FaYF"@M%}2Zп=ޑX#ovJDžW+ ;~{$? OcwN\Dhg Ff3^'bjfnait0>?xYl}̀[?A5{"zJqygWV)^Jx.a ;B?ϪduO/Mha(#0A qⓐZMNZjUKz`SO3E! %GM9ǏG )XtX\0}X9L5lVN) DmO٭eb2o ^lxs6&G,OM0^ۜW/=r]d]j#bAb/:t 9.{<.EFjGܦ|ʰf9.Zohx48dʟTЛ8i5;e{#iڇj~ʱm:3P;D{^?5txRo%g-O*-WkߨԾgO:`oQc0 …otdWm#lW˯Ew A%h5bҭn7ny_?aM< *NT;nO8Cl `Hk0Cdi S ?e\Hbʥ>q3K~Z53m;8NpyAY/, 9~~EJ&+US׎U7Qf XoICTxu͘>3cd4oW_?ñ5Nx:]6|~.s^g"(̙lNy\**S3RIvɾqI1,'MךQTMB]]فi_$P֑{Wi9F=2Lxf Ytz`I"`phxA4[lS핿$ d]zle{q bXfi2:qW7hYt ~qy ]n!\*y} N8& n|% ,X\Q3Z!{Djq 34 ㇸ%ǾM90[~m̽ڪ{1*-ףz._̦2Q%D>Ӣ( gUϚH 'f@gla >:!%s^)#(+ "6...X.R3N–B|R[f x?7N|6 4+h(j5zqcL9c}A,&ajz&aZ͇O_ԫ5ZAFP 'HfXDI)7]pp+A, "1!$Ͱ%YQ5ݰ*V4 $TAD&Ir~zU4ts_V+C;v3F;菧:jʦ4f2زMRd%|2hn}[C5yx!kk[_|y R)~8dti#]ךo[B9ڡA*VKHMﶲ_ Owu|Όz|<8vxlzth)ji:6ch[1]i.#l6ȍ}-"> iX|%~qzxN[sQCqIކe>֧$I)2ԥJ01_qg*6$CBf䨶׃ߏ^3-+z&q[V!Fun'5 >#=Qh 6Gv@+=6<:f|ٰ~uMA[N(MGmgԁwz1Gg+I̕ZY紊|VH mEqZ]1yhً4> !R3M@"rjƦxޫ4=\hʥ:ΙG|*ƽ6eoH+vpC1bbfyڳv7ndڶ -г!wZ]oJw68͊NytB$2ڎ˃g`DEe}l;,(/8׾ Q11wt.w.o.:ޟ153aLo'~;zK\6ZO Sc %,.p>;=/{Ѻ/Mߝ6hgc51Zjޫ1M,>ЙbQ+H#\VvxX­W +[hI@KLMC$Oo)cv*3j$k@h?K3@h.'7ߜyc"Sצ\[ky. ;.BXCR~nN^i Z 6U'laz5m$`N"y%GϘNYN-@$/X(k=ѮzaSy3jW]xx[21( Y,}0aؐ'<琇j(U aCbIsHjV:tfӃ^ւkS&(h ЋɺR(@LY2*Wks 7r{&F:4kѪ' kp\ȡxp=&7<|䏇'#($E3,xAdEtï(Tiu|)D{_𡏤%=]P4  P0 )l QP1k-AR4r T=bqzU"# vi# hBMKNÖ́zn HۚQ۶x_1ڸ Q"r/(Tzs sL彊 ~oBOE(ywd@$UdέM4[+HQ25 l4?PQdsw:xjfQsEjj1}v#]n^d̪ZAMQ e=C\W6}#;Ub ʪ*([?i e0|ƞaO4ܭޯĈ$szHajhxjG5 mD2T)K n9UGh5qz-xZwA!&e2 6D"K C mkYSi0e) T*?Y!Ubg .࿵QVN lٵII3VjQP3KB2ڮ S&(i cHE%}ԗ&W!;ϑ5kqHHԳ=%& ($,dr=1>GmcBAͮTcES>v$VZ0ۏ'#($E3,xAdEtL1daBR7pȯ.|QkԗT@FoIQf%;Hya( 'HftD`bE%`p@Ͱ/B CV7FI hX%٦N+]9dDP0S,J%mo bX{eAp=|Y_$>bjr<♏KϫIJݢY,4"9@~C(4/] ߖ)hy`̷?G͏XFC ƺ+v={g.\O^nI Q,LUtQ]rQT"RXA\!i}Cu%h8AќfOR3іt9uv':ſf?z^dX0-Ll)@ e\H-/(C_j8]r@sTYU@KOY'M;ɼ_3К&HerR%Uo%88bWAR4r|:8bኂhx JjaZ6ew?6qtxq#@)}貏;_J>'lsLKy qA{+;VUUU@p۶%IK$0ov`i+Hb*NbLx*[n+N:{ )9ٟd1Q'l~cXK^/R$&qr!!NͰ/hDQDn&z „2.ҖAmwAh WDJUʣ>q7z[3L$d&J\ Ӳ. »X )a9@$nM7-ثJ4`ZPT֖muA.[H巤<0^p%<_s/J')j` ~!}a,.4B2Y 9 Fέ~WG ?Z2 R|^C r?=GH0,I%YQ50-q ɿ7ؑ 5Dbx*Mmh:2H "n"vY\JH:Xʷ |aOF܇-5cD.*#:NJ)Y|"C)Srr"V\U_c /6́g®k D0[aphxAdEE3,'P RB0b8Aㅤ\50-r{"݇OG,$HfX $+k{)3 P_ֆ>Q%@X=$O tr636Ε <& p.S]%<_cm9%+^FUÉph9jy^eEGt.}S@bQ5`z5~7g|e,; QK%(&;xyH~} \F̗>w0ҤP%.f „2.|z!iUJ]4iab;G"L(B*mus>̟et ն3+-׶Ҭ2үB  Nչ 8љ,mARۑS] g~\>8"L(bV+W0b8AR4r JREI)jaZ؎ʸJ[k#.O$K)TeDQK4;tVn6^kNr#qIVT-]q,(HfX $+es}lm)p U KT21? /~q4ǘ{摻=誀]UH'H‘s^7O?ϖZm zqLqrw:>oY*$SO^yZ%4%HY=1-+7glΤRO I #*栃BBvp 6C7C-gz|<ኌb#($E3, $+0EJP%YQ50-qE4 $E3,QU Ӳ7Ф%oO =u[ƫNyp^Wh @A$IG)8*\-݄Į*ڊoaKІ82F<O<ms Io8ȅZ+:NMjWgC% o ),ƏЅ"x Ŏ3Ҥc0 `0  PU:J2HQ#.qhx JjaZ4wJk*-[j.q=" @>{|Jel;'8Hhӻ+;3QK2;D E9\\5~? 8Hl&GMݤy؊L ݜJ(BBJ ́xCW_2Zw5|w}q'1b~%΃1ew JUƱdL<8JeLlhl 5} -= qlBӎ#l:[=e/X?l| xH;e<#|< yHMDmHC̤fI9.Q1IygQp2R)Ef5)ihY5F*blGZl$&jҁ.̹aI:<'jxqZ`ka*PӒ%;sRgS j"[|1iOPpGhq"%[VC^pBg`h \9wpVZ򿲯#oSK6ϴ~NM]#<5 MJßHC}8ۄxSd3P|,y-K(5笓 9:eJgX#{QY37.nh]+j{J"{|Cdi&20ySnYM]C:=*d2Leaf7X~hDO)1q|&AuYK%Eg/?/ c#hϢi~AC;Z՝[|5^q.!%޸uG7ӭάivwr>O`~5mFRNmm&SUmgW{ީ ) `߲]d%S"l'^,GaM7ep/>~|O=jȜF :=XL2@?|Nrqnv/1»_-sy4E!F:]ҊAW%֯funn= !X_s5s .$Y/e֔#$OU׵f+[de褲k8P:#w:ԣ>=NG2G8|ι) @.*H1)cۖhU\vv-N2|TjׯF||A&=Tŏ܎ eȊ^ePX[`IxL"=!2"-2+76ʞ 1HW;XdŬJ EdH%KM2X׳IӳDYG[ŝ zoی0Z4ׁ3MIQyl3y!|!~dO77:gU$XR"DK%Xj:ʈ~1ĶxE[fS5J13nM5)&PL"<ߔ.0'&6V,C7bbW@u+HyP'8>ܨZ,ClvP$!~^=k-7X8 }D$dUz"r nl;( wDycq]5 Rx"Kgʢ\]Ƭ)|*ȞYpDbjl5h!\#2j9GcaHc˜qF W8)KIW*S67*16+{wwȉe;==Ͼ(?C3WV#oã=9=c?+cG p7RE{,j?OUI)< c ,`}Ã^yW8$|R`0>4G | {€gϬ%{/|e>Q>>V' 9/#FF)iQc Lb4rGE@5֘7ry=܃R&cb>P̓5$9pXgM6nM )$4HU^" n""߿g3 s9sI$IfEepU u`?t#""""""{`x<ɽ7'؃ CzD$dz~`r(,_#/߮\'CsO:ϓǷ~1evqX?h;~󩒳:!G|x㽷 n̈eAt#繅In9FvʾR}>:hߌn$5;9TEK^O\|eU~+G=/nuг⼟FbBMI;'rY~޲Ѫcʲ:8v7/c|.fL4{q<*|7Y +֣?{/'L0A s]7 ےA)ut -a{ )εm|vzm1SI_t:LqD&ʢŴKe+6,>'N#Ϛs yaE6`08 m>%].#{rkt~֤p(>/6>gZ?uzY *>77[RHgH@m^q[~ 0D@ A#L"}HR>2Cm\1 JTn + K3j8Ԋ:fI\:;6Mo%( 7xZ 02i%_\5x| va$Iubj-]aeLfw F)7nرGyҋ^讬o傁}TWʮ +3CkrRnգCb59..i @Ab!#9f L00 2"!pK@Vzˆ7Mg(| #jjAD k\8ǿog~m; _;{Цg[%!Cg 8߀(Ɋiَ}Ӄ"f%c'=uq '8ׅm;x3U#sYTV*]Unj$Pu6~8 Mt12g8Ll f3̼sCءFGלUN9y~B˝+ֈؚ%I 9ҙVYVDԭ-J5h&J-hզ]]uC;ԙ|y<(?K%KNo& 1 J r ZlS쎸Ք+iKY|ͫI6;|!@)1SeFQ5=6Lˮα씜 /؛yg7t3٧)!$H9p2ϱC<mx6jT(MhhAۍCGfxZhC(W`3ydTe/'_݃.XlOlm؞[N'(qQ7UИUЂB:M\Qwvu;tWք__eś-5 q^1\-w7XΎ*UBVL(MUrI8_$2J3kwY @@ A#L"ab$!' C3cv J(, 0Sa%aQֈZꘗb,Y t<@F ="H|,M$m:n!ك]lɞ^2W0ԘbfN33 pĥuX#b`jޭ!зk+‚"ZiNqRRzyJkXvp Hh&ARFN7jNbhHzά ORRY _+䏊/}c6« %,+*jk:0@FP 'HfXqR"6ۑgh u)FLLP 'H8z0B^aN N *M5_0kI$I|@QcѢPb cMC B0b8AemOEE'u#^%cE (m )@İ/%I\TV$+]ә4 2 ^%YQ50-ۡxE3,G/J2HQ v\DPƅT2v9jlF|!b8AR4rEjaZx ?mPjBm[~sy+E|8+ &hy[^C#g/ o.OVGЀ2F1xH\w-Shքڑ8 <:6xOߎ#̧}NHd@A$IR Cz=DU H,Q1NQ+zg>p D$/Ա}." g %{e&. {a42;  g3'0pIpb`i6%XDL99$Dnx/&$!a> Q?FgI0$rsyJ]b4BX1w04ؠ>0)ZŠ7X4$ :B(?@7\Z1L`:foF+X2"y0ĘU>Yv$j5@rA"k{6®~}f@b +zirv\:ݧڧGY܃fDJzW|JU^uôgXxeDPڀg/5ZM BJ'HfXqrɕ$3UjV 2iQ4yBF ٥\eD oG(ﵟ@#V&N\S 68AiQx $I$I H08Qϐ)40-q=04ZLGb#($E3, bdbw8]n,xhu`4AFP 'Ȳ؊Ф9 Q_:VEX@ bXĒHwQ&W(U.8v1a~1,xAdEtôlͰA("E=0 eNJ {0w;KځǓSx@ ejaZOGքӍa9 $+e;h$.PșH0b8AR4r($E3,QU Ӳ)Ȑ(Yo?|4ÀvF(M:VRaW|B!\&I_EflzC7^A8;j$k5Nrsxv1F᭐FH! T^p vfܭv 0-Ll>;_ q!ܞ9+s˷E"rRվ&I{|p`$*8 )S:hVs}`!gĎ,D\"Ӡ,uVƒ"UR } K4޺dPsQi{9> h]^ԥSq@{f&ɓ>2S/>啵QH%Z|{-bbejYN>l}'d8hMin+N+w˷ B[N0+ 3%փ.K.]ducU "*VyNE]dHEEe, X D$dh1|\&q!5jBj޼+V7FI hX%٦N+k'/i答y%ni77f9/kpPc8AR4^yrJgmB,esj;<} :r9]S1 [""cؑMc?*ຮ\I$I*I$I$I$I$I$I$I/kxLZcҸ񡤤mh2NV[(A:,Q!1 t `=wٰ]֖J~xSjd $kLOT^,y\%V/KhZ(6L^;KYI븚Xmq !P+!5$E3액Uݟ%D͑WfN(\$*qA1$E3, -7iSdhi葉]e^w-CG5J͗3H\-ϓ2Y\Ϥ̊=rʲA|e1U_z) 2WltX" dWD ٥?كBP ߨj$Ҋo?d􎰼i{3Ic0|k*s?dA/1׈m $ۈllhӪt$F_rr#o2%m[$5.Ћ6e鲙ʳ,%1Z5 lS/HOsb'9 KTE獆  $.!I3id茰ǑWx}1ғJ$+ ޡ8Aç*xxOFP 'HfX(ɊF7kCs &L(B*îf~҅@@&H"!L(B){ǀ\n;%d Q~+ú $P NͰ[gsֶJ,CqQbIX,rPr*Chuz`4NͰ/fUmtyx/>LΎ|4c`V7lF%1xtǍiӨl:fr^ν "%c̾X Μx鬗$IL20}9(O2]6|O}$ݎC> xCך_9r!EBAaN'vFsnߴԭW)zf޼ URnX!wfn#Cɪ)QqdaEM0!*qPN-|*.YrνoL5 ܲyK(nR楜3ؤ9-|Tʴ? PEP:i۳Q'~Ğe wdgQTcnpʿ;!muP$'*b˔`[blNӒ$aekq p4]r(`i1 ie_=vS;zM͈mTUzbs'9%?KrR!k";Z%:g\7 =/<yTį|)rUmX"˔Ӝ)r۸EW9ռ췼Yyi].x%ڥ3(bVBj /쇅[G֏v_N'ċDۓ}4jsT]tes,`x L --6WJ9vGusYHs:ZBB!{,Pit#n gH?yzON"&!)VܱA ^ޘO=ٜ/BUhb1~xyw\6o#{C0p|Ύ1* &)Mz97.'y>2i&TUUWNrww).->ӱS&IOܴfl.w%8VA{"V-6o5_#""EjBӺf&׹q-|NF|G\~r1߯B?wosN e/|_vS5Tss/ħE:7,o[?_˽ Җ?ZQ*z'I3*f+ڎ1O\sI-' @߻'#Rdӂc9j5VD۞vSvXP,d3}]a˨7[kyd .'Ҿ'd?u:zlLDe7"" y5ψ! ƔhF7$jY USM@xh5d+eeI3kyxW|UONoԸˈ! r7O8,F +{Oi=E8JnݤȼY@ZDIU Vr(M|NS]R͉yj()! #RXhZ+m ڸH֬ "G39"OV(?gMIII\3xnIBBƗ/fjQZ"o_+|K]?\ A:fMBlj.;N٥4۫:N_tBb}g:>NJIqNדʦP e@q6K%(4dlYgjLfRL9#|xC3y4)7E/^Y:?B)fȁ>>8֚?oFic֮LЍME.,2=jE,2#?J.\Utsկv; qP9`򿾂]O\>$%'5>MPvk6n?w=i|xDGxH6q-78x̜?aMJ% qj>gϲg{x%58}bOCunr2JĻFX>>CrMY施s+\ Wpg~]:~a9 BYX`/a/'l GF&|GR0K4t;V*+g *8G67{!C9Л',֎ {*6V r@),^Gŋ-X#ң0;\E͐Idž5L6)h[s*Amwc GFl/Ĝf)Y\c]}Yw,ʢ\xhK=i}lfro>皱Heݒ2o;%^&q*w{1@c:9c c"+ ȹ" 8Qjmiiߛ*@kA "#99/MΣǮ/nxZ{xvAPi>rL;uW:n.p,YNjX>i_Bϡ'ꈭo8=``ACMpzr((20Bovsc*(M!6Fp"j-rwta 'QeYs.N57&>σ~3SjZq\Qb2l]ڝv @|G[V}u갹G&khR@h,{., ._: K9Z--`5ŀ͎M{L6{F Pc5.̑磊ryE/",n[Cְ5p[\# ~XL|FWAa5aN_Ek4 DGIY:NVzAϳC`Uzz5a{v>eH;aiTn1);rq$4LY( ^t\R|oC]+5y"36jL+}Cj3RKC,(L}4y/G*vr PW`@ӱb3.傴ENdj5bDk5J(@lulYFHV0md*jg. sE?qqc^Y,ѥSH-: +ԪGaw 3=yspRC(5V>k]Y}K|jÕYeD>;הvxw!~ۥ%BJYZo,Q*8hdH*Vb4s*$ 6׽ q3:rtfZ:ni V1/IJl w$NVtz U@5ćnsS:d2 бnR[3My*o\8eGeȊ^f%OO0O43>\d  Yf|E$^G!Ib!oDZ=đ&qtw$b4u "UdLZhVMBbpF'9&Oz5/WT\._.(JO4\b8st^zwm(4b5/BA9ȻX\$Swi{3۾{MLЌ0ʷiCs"tV4] f) 8s YȥX*e]SnT ƌ<C'V2Z9VP+#h?mBi:cpe a hb >Ҡ,V f<3"j>YMK M˓K.%?2yxٲ[u&p? B_$Q  И|%9ETSmS{e$yJ>jКG׷z. va0H;vfmt]-GoX~v{>p=w+b38eZʌɂG^g$YZ"Ve]6$s7] O[|p!<튔Π2>/PyG_<74`y('hժU6mڴi6[izv?g7ׄT"}f¦8W %8%!mÿd*RxmatQ1۶lMa-1 s|pm1$lDW'wa"Z-}i&:ykNn'#38A z#Al[g%I]byGpY 4O߰J <|fb&FͰ/@uvMgFP 'HfX(ɊF,^X݆"JI8I嶲(/Ӹ)&7 2fZwNi$Iĕ0 bA4[~yRk:0NͰ/lSn|Wu `phxAU^+pRƓN"JL3" +E]iuzuM7L DPƅT2r{W p\%wX{c`vz٧]nqrw?o4KW|nVϚ,ZeP c$tVTMp6L3y>~:JE!hPǘ@Q&'@0.*D'#$ԯ`v Vب}Haiѡf' }s{fX,bGj!_?Z}~~XSMۢ ͘O(|R?b8A 9^B*.!)%-u@UqqANIUrpPĒNo0,V6vqp8lAP )a9^dEmN5IpBѲPQ50-;Hp J,(ndb;G"L(B*m;9#ȊWO|"I ĜV^(FTd< լmj$ 0׬D$?s03si_ dffffjq(HH{P( Bh'$ޙ: +ЄHP`X8xćRqcPp0ATGC YanY|1@_{~~9tEUkkPzC9JW m;B-Wb!/Y'j~&w~P`^x[<$]B/O8.+Y9^垙0š2KiA$ɳH`c׬Ew[±kf ,-Gق>kͰ/J5]^yr{KBv&EBvwJV\e8$%Z9RzKH٧瞴'b/˿'S|+UrsM:mU˖ݧ0=1O3-< B"qb I< S SL!vQiAOΥ}bRo-+ x,G@xewNKq/n4lMQDiab;qe?jU"7)ڷ'&$OsuXyda5rHI[R \MS`f C)HA3*`RV{wśi „KjlJӆ_3| ~Em8dɼ}rWWt_*/`StvuOc4\̅LI*HY'.Oeh%Lv{V 5=zV/tnKn$q=}H`HY;@OgzN# W0p4e HfXD%YQGOy.W1$ҏ=,W%I^ ?ݷ{auZ 0Ղ\iD"H6H@VflE,i|`ph/n&q!<:.-xIg( L>>El)BCWPjVƗC, b8ARQU Ӳzx&T"e;tG6zt/tİ/%R\TU2o{ >}/Al uի!Hŋ1ș=Trτ; Abnmg;]݊uXO?ilnɌƛ|獖z& j-6[:3eC&adɿ5leW ch87m/o #L' wÇwňD?ĒV!7C,. a H9p2Xʎgdɵ< ?[\Mn6%rȨXēO|^y&3Y^ok CyƓ9FBޑLp`zԪ1Y]rp>!2B%Aˬƒ=Z RL}k~- 5/c73+/6'q(JjU_8d (FͰ/J6{mCM7Xp؎=!{ģ!PDcfV3yB1*JF#I (6~aXxw.("Qx 8|n:HB1<AR1,wk+֛>X8 L !(g^B֫ݫ)jnr1S:te !vbEr]j^˧od|O\g QT}o\~^wBxR2(=hyK"G4O ދ\Ӆ K^C)}ep=aȓ#RdԌLŽWWW 'JthQQ?>a,]~𹟪ݼzpz/~_8kU8s{jgx^{w6իWիWo{+7 æ;rMaHO"ͣyo9 x>ɐݴiC.:Okehx"#.B+V}&ܷSt=-׸= m!lZYV5%]< n&\ximC֣Ƥ x! dT+;\.wD&Pz%GWQ8KqxWYFPEGBU= 4-{Z<˳#k>ٴ"sbM.)hĄba˸8?xCNv\vT1[O͘HE V|?E{RW4ut/cծ_˶t?^*JL< eR s\xFsp 7}N yA|j1#$3*Nfŀf,{\.%'\LeyVTp5SO&pPD ]TrMo1+ WbѯgQ kK Ht2^yVn3uW-+{3UŁsx^ُ.l'H'{k,Cj7P:ÞF8N۲'~n0hȰz'Ƽg_LWLǚy cq>"D-F$&y ǬF&:[{8 _NKW+&Ȣ&qr:Ղ$+]ә4 2~a9 $+e;hfQDt Qp>4 ;i'ȦR!qIVTM7Lv\Yhx JjaZvMO?o)ФaTBD5h}GE}/d֤^FXDŽ.={>/SW h1  6Z=99H $+rیxo<}ZrTIY(aq;@:=HQNd&EqF _k!<9 %i"M2"<3@fZV1АMjx3a*1@cc6w=Ley9d"*>fnQ|-?Kr>7GQ._>ٷQT@oA.e𷠑4Jcړ~^y>_ZPQY=JDhc6ޡ=4P:,j$ 3QdFl4 40֣P gVĤ|  Jj7bh@$e)@O! L(Bhk:~;3A$yQ2: Hx,!N* 'HfpF=;t _׌Y.L~Ne k$0@(ɊU9,9b2[#HfXD%YQ횮*ªVIWtFôAİ/%R\Tbߝ9;A^4`x ,E("U@ e0:0@FP 'HfXD*6p<<^U+Bd!A1 =aN2rj&^R_=K\;.#\xS7 ^JLNlTú8x.'smbTBVr J*M.5"9.S]sa=U{Kuia 9E>nPm)}7rws 6UUĘ>)ifXHJM#6a}ZD&qQ3aza9 $+e;hТ$5Rô0ף&q!t- @Ak pItl?]^#2 @(P%YQ50-qE n@Ͱ DIVTM7LVq\`sSA1:$Pf*$2x4Q'y 5-*JƘTnS"^;`>ŧNc:w/qH=UӍs nsɡ.;8ETU:C貎ډ'vIlq~x꯼BzNB¯BE|l,E_%Sᓢ+vQIdUH*sDXi̵q8A.bD0ɏoڹ zUxY ؃qhi aC&UܭVKr:/ Q8ey}qҶm۞іqR6LqtąP2Ϝzz۱ZL(43erwUxsU%}==}[pIo9d_O6ûHv&׃g(YHUrEB!,gfvGuBf_Vdr<5333s0sE\('C^~3ܡ1&q/ЁN(f2p2ۺ#^uCL\[J|W ZpO,׻϶c1ƘcZWA[HlvS77FpZ$0xPq(ᒢD(Ɋi+H/4-7) !}xg&ؕ$P4A`)3>Ȯ3L,'Rܙ+O7_]+R͊]l /'.3 0eȩfOw Mk2Л8̵sR+fԟ8܈8Df8rI[fuEPELZHiab;GO"L(B*mηIX\LQ%8XIuEc@2V`>PZ<(>BLZRHܲ>m'ݔetbVd?9]ÿ6lP嶰3funJ՟w {>3=7͵?qS_+}f4wլ-BdUlG#zI(C%f$˿BYN{e :>Z.p(L]O*ޞ9AlYY+Y G=(3(52&^ηn1 .e;w{)j6o_?>Q}Z}+k=$,ҭk+BC_2;QU #b|hy3cW3T;>I0R0+"I$eXQ1qֹғ`jq dj ;澴[otQ}_P̚`6k&ͥ)WGj4`j>GHE;Z$\v*_dՖ=uq|Arj"<\UlW4vBEm11e܈jw )⑰{iCëPHqtQ#~XbpE[a#,ך[0-ceseEI\kSآxАV n93/h&@;R4igZ&EUK*uKQrnYC x _M4_`%&aVÛ9l|כPbgH@PHXDT&Cg9r8Z+I9]fFyI[KR锤+ln=ڕ˔v.C%&J~ 3>!b넸g?l>b&l"68^r{*ty\_[u)I!%ITIF6 $Iq!Qj#ӁQ~?jxrg׹bBO,ċ^0#gjJY߹< $&9AB_^s#՚n```aLȊתĠ'ڻdVWW y o VD<ث\U=ѤFC`sdߍFE-"Ūb &qsI=Jy:\?hW萘ҮxZPP roh4j V*![M!N#H'lB Q%!nC<$4 3%VSZpȣ VmKg.pE(VŒRPFQ,Qb=J ԭpXC <1X~t-m䞜 9 #ɓ2t#+'"pXX!ބ;P<#: tg0 pV"p'2JN!3r-4i4 oophH& 39O 1U3Mߢ7˨:Fuj$dv^:2"ISѡkuv:}sNhֆfpy PtLh^&IJLoijj1ޕ_R%\T/Y!чcս:zOg؆:gO6 .X^@k=J'iɊm `;%U?DLq{f_=+ڼ5R˿xF'i]!,}Ɩ*ɉb +0>qS5 Cl{p\60_ꍈ咂hx JjaZvF~zϗ =MAQ%.7ߗ3O&` ='vv&M0rM+XQEǝ4B]"stΜVS1!.Y[ *G@/ j uhttËwݙp&do?ֆ}1#ԯ^@}$+<$\,遵i?V^[~~uk{ *8 | jj @~Ǟζ&ǜ ,w sC4@Oh!jmlb:6j ei@mK=+S?^?Oz." I:1Od-@kI1$IJȹtf ɵ:mI8 '<$z%˞ԥÂㇰ+QbڎxHCy"ΐCY !$I%$)T}ri\wM^w[M0nZu5i֢uwA/o_.G[XSkStOf>LW^t[{*&?حhM_'Ж{@L6aNI8CX$# [TYf nۤF +pTl$o ;u4g%A@]\(Z@:PW AP>Ӊ(:oq G*(nfRMujkuս|Qm0r~X,eY]d{.ƘmY!\FXK>#KP<$m\#'%IAI$I$+$IM']2iT$I$I HnZ"rAffr@dEtJ?=6{7hPt$I#xM 1D%|+>0 |)}Bo mI 'ShB'\D.]z+#Ufq"u H 7ą)4/Rl{a9 `!iGywPsx FLPwv[ oX԰HDٜ-EEײi'Б| ɦPlN9;!F 3tuv 2jnHlO.8bL0uea[B B-d\]o{\;h+&O<Q-؊d &u<'&83s~B2fomdIaӿxe Vd~WRutCIm'ǹK^F]ʗjV5iu;ւz|O{o :b\) i8:_evN+odzA6b1UnY__mh;]Mynͬ g (t"Qmq8pAwvjjnphflQjFQ50-ۡ8Ex Rs 2fߌ18Ea$?7wWy]Ӳ`  0nzsؑ{Z;dxr>/:qw< ?$0DIBΤWfTYkaV14b,5vEy1~bʹ2٤ks1>B3i̟Ӡޢyݨx?ג`}+fAe5+fm̕um3}hV e}Z4(wգ+tJ \oh%NͰ/ %ajϥ!vN/ RiY7L DPƅT2r{&DP&QV5ݴlWUBd0= `-l O,VyKeYK<+Ua]LȧLMC:2fΔ*jik4CotHfªt $+]ӥQ#($E3,ЫDIVTM7ҳZDE 0~nLwk\ߺ^4İ%HV~۔i pux-αl'!/2+ą$I]9HNIs{_8x?3Tƀ@0-yW鈳&w(Z׫# )a9^OQl8^UB?s3 ]u= &q!}:q9]wѥ8PP Ra3_}3{4/EBAakric`b >vfhc`NA0Us"lIQCө/!#-ZnNOO>=KrC)l}IlXxddEHiU_ m!qr_/3eiWڳV/1¾3ֽK=;t~m7՛Ͻg2xt?a3I)7y{ xO | ߗ"7ifl=+Yx "J^Ft^l${L,p ˕yP9Vh4xNPT31[W^JT}9 E/@di4$]]EmwHߗ%#Ym=Q\; x߂KK~6sp`()!-5*eHHVi,L\,.+.WʙX*_r%1S 'Pm4d Iq!o7ݹD!ɧ}_xghݲ?:B}FhAĵEzkO==ml#F.i,Uß9Ȫ9z-< 2(D@n *-tJ|3fZ5vd*GD ^KD"gQ78^--W -u dL6|eGsxw= w-&ap::srvj gca:*T%hrE/j~/9;x >|x_l&o=gdKhH\Iy>*h+'ļ.ͥ0r-ÍكL-,X:WWכ%8TV ti|eyݩt8h-wOM^8e9dh`0R(p]8ΰ][џ RNSO[s LJZP,uRf6n&Myp ys~M#j /||s͚/:X9S|p )ӧvza*qxf،Tj2OZ,E'茍dw,#m_7cMn/JXhZH#JS&5(7g$`BN #a&Vi1eDl1&fBIZ T:?gcߎK_agej;E] 5vC͆-nR:g+~bgPL· nMe0_BE(ŔJnGWaPuUT[Z$@tя8CΌBB5Ǽ$6z ^:ŲD9IM@2cd$3LGrJ*տ)S&˱OWCǰ aPaS(S$4:f68N.u`/28Ѵh@T+d4zb3@`0L`TF3&+Q'&Mj2R( 2+bR걤$$Eik@M0hгO='^z!y z.4i郣"餃>3[nM*Apdfs7([H`+]D"-sbp'+ )⏓G6hJȝ*E'gɕ_]ID%@Fk|*%V-)_>Y=k6QfBU:_6pܑ# `[2G 26݋dZ~T.Pxu2nKOovsCx}vM*5-dZzF5Sx&ՑQ6u+44d}3]=ubIs) ^e60v!>gDURB4K/$.>GCR$G i] RmA2M7!x}ߗbs=<)2^>;s;h}G2g-K +͌)H*|f+6EDѰ B62d1cQ(G>UUȫQҰ^15?_um^]렮fWcxDK?s4eƬMnpMüixђ;ZF˛WU1hSB8 ;֯]=vװQ= />]9rh𱍸r rRۧk!Z,SԂ7!&AP߇_ȧ^J yaHGaN}9?&ǹŰɘw3{^0a؇<~y)=<g/sfe@Q/8G SL,k}k@1ge xb JEC,zK9sz 6 E^Gda?7o4:2#( 4h<2Gt r$:M[. WEf8$|aOWW+<Д&61,"}ZudӮ1NUZxҬ ,KҎi+rm5M+T"j*w[sxU,޴j-|Ka.`xफ़v!4"~z.F~_ɢesoðVA8D15T"N Hv bM -|7Ϩf8VA(!ckB(G nRޟ~ZrJhxYd͓33m/}!Pn~"y"XjvwF[MG2Z fEq{Aa╋1"$CYg5Xwк̊uuLWP9y?KBJ``d8 `"C6NuWf]i#Sy8r֡UVKuJRXy8H u@­)RGoh1HFͩȌ&2%pg;Nt@0$7H<]thZlK+f<:5SiM;dЌdL$,fdg#- U(CY?r~>PM;ĘP$r`ȴJ*\*gTUb/[<ؤyyX]7#hn,6eYVf嵹~kx-[?nPu '.Z]G['IBmOcz`DBxMpCx-G/&g 3 qff$/42_YTNU7}[f2 !rԙcku"ߏOns֎ҮIOդzEoCQIZgw*5~ZX|VQժs| P(X'm=+ㇲ"v]kܡ(uߊ\zVʋV(<$B%k-5J =8H:- GNG_F*Q0]kh:aKzx i#tl\\hZ1!odDFSDJyx%iʯ$-RDlQ9 SWr}?&<첫dYկ!1$TZrIi;_!1 :-.;F*F?]Uv鮺Wxoj}ACnY︾x\=G]XӍv.ؔʟHyz/9{U ;(!NЪ\7-n2[o}V%6xNkP~ۦeS˕q=asO;vx>f>ztq ^XW[jܳlm O¶WM.w(vMGp8 [= 7a-D3rhdj5YT 3DrAi7D'& ?wP'#pf;ۛ d>d(hPҁK|*OC_~ [u h=ggk@xq86;-52qy?1G׀H1ŀHdo[tc%!c|&2W6ȿ?h'J* =fA,iyO5۬vO:Dgڭp۳_lu`w:—mԺe<֕ hD=wE<2ʔo,4/ 998Dl4/-9B2Ixj$5%AR5%MRC6,an2RfJJq(sR|o5t)=ADKT&-OCOyL٘ڦtX-W5?6@ENj *"x bPsQwlrs=w@GlKrW"d/y P10P1bIsNRD[wξsTt$| /r5,1]Vgs :sX)eN+=WJA>(5_4g?Wj8#awK:/3^ْJ:$w}5Ê.H<(;z1 MYn# ;'6ٵ2a}Ki#lV ;/je5JƁ&Y:1? qN:(xQBɾӸ` Q2tsl7>]#|l_r+I"æ!:\S!i(YT ; R#ܜIGKQDD rȩBrМ9821)!"8NubTXI%8 JHJTKb~!VGcd dT3Ί Q:tU x U!?swFVe+Wy8 x2=#v2Etôl ,}'u>Ĵ.L|5 44)wfv[rbo  [ o|mAtIrέu] f(6$Dex0;lJnEWWƦc]n{nq*5=7h[dHp0I3Nv(д-zG]hj_{3ûOɀ3 ̆I_īO6 0MiNK39? dxg&tƊQRR1bsDbT&rUdN4#C.89^%Y`pϿSbxfՎekrMXd \ i7֨0&rasl=P V¢EOÜ hDh|v.y ǪpjsWߚm'4nse,ɒl֋@ڽxX6ʸ Pi2ֱ>sFI1E1Wtò]yd=@9ݽ#k:׏HVϞ FzXB3!.ĔKm}vz"gk0'|Oۮyd=@9ݽ;RP10qr3`9A*DM" 8QѡD,SXc}csK,i-V(AP$#35Oej#} P)LmNlͅ1O Ga$*Qh&E2'W =I,UuJbh]fR-v!`85>76Ēb2I646[#T&_6RLJ rW)iC'iebr_BLs[:"YWOӧ_P(EZI **I:AdEt::QY^UU%ĔKm=U IY9y$+%loTX=G+T:N"8FAFc,D2 :HJQcΖ3O{GgRjY6JGgDMV4Iu )iY9IEYiܗS.܉yrq9n_?0Liَ)-aZv\ 3WVDIVTM7LKHVi#:<>U4,&q! )mc/Ģlnd(&X۰ixtbznaymŪgf,.MWև @Ќ̱qCCbX6JȌgQ<@Tʾ.FZh'$rVo b\vLRZk*NHґ.'^54tPUTElKKb#Cc7Ӽ~ט׽g̵}bTJ/rmBp%5 08,<*:S\BJЬ k&Yfǁ37{xO|X+5Zyv}O1zyUJy 9 ?YZ]jBLwSirwNӟl@>#ÚgkIm{`%qzX\|y$<|WO|`~: #"y. >,:Sq%lЌ$`=,:~me<򆈽y+3ʜ {$F(@)0mo3KdSRb~5pf%|KNdd@pHO() K" 0nxy*&oJ`_+0Tt|d#{"N@E)Tj *i{6+[bDB΅ yp"2,B4 %mvhø6=Y 5Gȼ@J-ɦU99CjmȽj8AjЂA0?# Hx!ɗL\KHv^^'y&U>Vʹ=ozgQx^~%*H0パa5 ̏= l9͎\(Υ .Smꖓ[\+6y V8UL=:Sj^;cF]f,|:g `Jdj-¬-:]UhGd$Η24/yf";#|Ӣ6jJ/lGuUU].3i+婀5+6ǘݛygN準ͶG?o]F5uTDKgNHC\: bo6q0@%Ngajʸ?6d^d|3wT|v/kM[gb3BN m %hV51=[F36kh G\\P#1X"9 rJ=,K ʴfj\zFfJQ4HFf<+IT@%A5p7$$rVo b\vLRZk0ۜu4Zt`KD:W(*"ՉLX%\Rˑ (N,/*ĪNMbʥ!(4N<aBǜTZWO R4rHs"L(!@QPR0 &c 9yt! RV_2-Uox(4@"X̓ 9rspKjlX+5ZYtF]4''ą$$dd Ta9LDP=65*?ƓlXqZ7ݼ_qum88k.Ͱ$h8N%T/_y.8I(:5mK)z>84EB5t0ՁMs Kӳ kAf` 8኎ Eq2 B`Yd)tL*ji6.2hqImzW\ћec(:i;y] S|cT)W(El\kt1 o8,0NxmaZz>><|SJ#fEvQo4[0-ePh 3gEp% N[σh2_m@(Uj'4]Dd9!0dsQd*Jgq.8I\Ne|?oyY81{=ϘkǦ$S3srq^q^~ҢJJeCQƪn.Ju.ĔKm]}. : (>c8F30H(PĀ3)5#JU6}%K˴O.(,*)oj-(,.+TTZQ]Ywi^z?ڏ~_aڊU#'nY\-G _Ae5ekW5j"&)UQEJ!Q54j*)I:?궇7SC#s+[{'WCc3s+kOvN;j)M>1oo4LMΛ9y}m]=}"L(B*@XH,jNu<2>15=;7?yY81u?3羿Ҿmg̻{޷X,zM0.iλafwPMB," Ss2YŽ~N[o0ɸAdY1ujZ()ect(T~}wmgܮ}5O&S{شYЩt*7dg(f;b ԕ yGrh;IWG.,7L̴e,ֵƤEؓzM(=Z2%Ly`{\ᚨr0(A [$krYɔr2Eޯ[6y`Bu_!0\3ɔ%[8/cM4e&k7ʝM0 =.ʈ7T jj%[+ *4I: *+T"2OgPZ$Inp@#yNj~%~cW苮1%5%ܐHjcflZ'hpm405M <~h /-;W:XP(zن[ }qFl?0YTR$^I{Ƶl% T,&ZJy @rqW(22zcwδ&Sae{PB@ 舯J+̈Eee;> -;Ob怅p @9Ĉvo2-Qyn'LH =gӵJAbboi1Y926h4~ϳ27rzDl>b#ز p{Q?HP}4i>dZ4BlQƆ1C wE+".ED(>'GԈLX |}^g7lKtD1;{(D4%ִF)` 4k* xJbS "5$zpfKFdhR3I@q'8iƈlg{ǐ]I؂5Z.*$CHW~zǢr1 /8AO%܇@0,Xy*#o6[W*JtYN0\Fe~B: !N`zlaOKR~J'Iő)~)s7Ң:[E}|)\a@`Z8Kˑf u% OSm) UYpGbBJ&ZD10:cy݈]f$;x_[ج;Ryr9sqZNgxY;W'C7H@,⑦2  .STx:-Ь(M <Tx <].ayՏ͇鍇d^0;1D,iA;KMwp.s$㧀•HR]D ieFFs]Qoo_/1" ~)Pd] 0w " bϫvcnSFгY[מ-VC[ѦĮF^yc-ymUELIk+\ b&Yi>'x$疓1) 2/trW{CõH#OY3j\yfn]6nz:ǟM \{6R{?(ݟ7c6μ)&;4?I?t OWHF׈/p=)v8i^>3 Hq=<~>88.S녖R<n6fe~w |OJ=x*yt(=#JbfENg ]Y aT(i ƹzi%%i[==)!yC71P0*Pqh,Yu<1f 0B%JܺTl9fvنc7HBŃa<-L`)gDc.H氌y?.!JL%+W[+G=ʠaxF%y)cο{Vz(rwE A4x+0oJxKfoFS,Bx/`rXeM*H[YMr>"4J7 YxW6YA槯8%lpD@Պ4ƠM Ug %⼆ݔN&a.9 T"%;̧'(Zɘ_yzHFL"HXѴU_sB˜"/g 5beodY9)ءD_6u)2P1azs-6U&]խ hjˆعkas<>ʆoa=!5އrzV`ۍ2ӂݦ[i?p~ 3h&!!ɻfd%L̝řK%_DÅ޼ƶR/̕TwspQ6Дo n{D,nz}oMnS\,Zp-Tb*IA_Z}w꿨^kcGui_W69|MT[-!qg|<4$0>_ u~]A}_x8v6˅]'"ޗs/ޑڊ<|ǁ_ |)k߁h!XEZ&M !+*7_3bAWljI1 :jzN>᙮KJHM,W/wuv (vv ;}zT2TnSw~s0%]7{4s. E`rZ`l"L(B*buptrvqus+d-m]=}C# K@PƅT^>?dǟ|xv={ߕiSUăy(%rSV_PY?8šTv9Obb 2=֤V:y(eӫ|tvr"Uu҇ (tLB18P[~M+*݋1$yf,Ոz Hh {deirx?8LDpyyYDU ]T$#)wnіkgS$l5nЇFC;(ޭ ͸8Zb Zf4`B )Iy*gݢ{u|lTPbkӜhJF+-C#)1adFO~Ԑ&V"d2 cK}*mKbc(mvHg|[ Vkm hdJVΈ*yY*Ȩ4,SkP[ S0lX''*JR5r" @K~>aM@>;m]hy='U`%Փ.),NnH)z.>.ذ_6K<ݡ3CmS۠fqC]j]T*;d\T;3 Qˡc+JU1/*՛5-EQ(8aFw8LLbHDA|lht(rmKU55D^'.ۙ];1*fvlNȆfw }\wErPȎ+K2raB'{Dqr&v/hޚ*w00dfG}5,9>DmY4+De |y{t;|'1;N?I08[wX@d ˕܉Lmp8=@Z1_'-_^kDžxΝ=6D>:ˍ\7܉w(,tzs_\YHn6l?>׻ǦG}sȆP;"6kDA_s 2ec0חrx=kcLBwL&op'E|J 2^HŚ- .07A8aUW{i k:Iy8hbqq&+N,/SMwbҞa USWC)TmƖ3tkǠOWKY#Gv%+O\S!Zm1  6SPCquF_&5e`CAXC;Eȃڵ <Hkq@w$:"_.\1 ƛDr7kȃ3LV|X@WZwHcYj/zˋޓԕ}EӠt[ @n=NPPp)9%Uաۀf!Uګ"``Q2 ) 4}aS suX|BioԸ˕"X6\R*UkgȄ尊|}ՋaPw^#*F#|@ȬIԢ;נY1KJH8(wW+"BvM3-i?tzt?S4qwL0q?8_Ȑp,qx$i^^W>5$J3D+RVkcҜevE"Exzqwǿ$倠J+&7ɯ6p%JlכߤɄV|utY;=&%v 01sz"!QJucdhDM =mT\Fzo($,۰({~/X\ *F d=gD:;c:.eL譖SȝY\݉&N=ϓsʄ%Pb|&[rxZT~!J)J2,s#P0RZ(6 оˌ~}3K%X?ȕCɵ8fY[Gq:ψ<|[n7_<>wr3Asy,7'y܍q*m+A| .A~ǫՇI277t6P69psC+Xp8ru1 _̸a.|Iy|6,ɿ'Lيܰ&zMDir5 Eq+([bRպijMg L̘pyB-i%]ϗxGs[ j[>+Ocs{?36a? eh 'OLT `bۓ.Ryō6nҽQ(PHi&z՛[I&@7 Wꛓ>=džp˺~BFW>Io-i3ŜeMbUd׍Gt 1ʮ2=v* ɡw8(|y |P[0?v-l˗M|9.S`c25`)<$K*eS'־#k q ta4  YJcYKDF*@QŕTZYM9 3:1хĴ[8 l$Im Hts-hO`ߧk*MNUyh:Ӆ4^ CPʮޡF|{uÒsܣg%r+QE|\qThajY{UsZ7|f;x//N-U!n1B~X޶V&s?<-+F2y؅z ̀pCԆE&guxxNtmZv%nhG2=r/=Wt5] 9=bp Maܣ)_F?nؙz-&i>z>I>!bsڌEF7MovXU1ֻo`Zf Xu (=E *RJB@S贊ILG-LLdqll`e!uAy`Ro;6d:;EMj#溕3έנӔ41-ٲ#+tw*UF&' 6O~+eG Ͱ/CfG,¾h*&Ń5#{{I$/o8B@y3{?1v,S/~UKF'AħWxɁsYJ{2!>ʕ˿TJ˭>z9>HժP˔YH[Jґ8-,pufJ>HCq͉9>'yde[kʵl>} Ǚ-s4G\ihFfkr)-X]C$Vj qn޿Gɱ*xpdד%dVjhU*+_-{;(xRη,<?P}ROc.pk,e@xJL~z՘{ge{Nr3@O~@KAӤ6CaEyJ2Y.:Y +ըM iL c^JSp}]ܽb{Պ{BeIw TO8eW$2ߠd$KV+" pϵliU`ώ  !yS5TKrQv/@j)X)!GxԿb9/;֣me׉I<$X>==x?Wv١Q>e)lxSm?&FP#SwkJ~Ϣ|7sg:fw~2NOV3tɯo]3 ֧/9z4txۻqw4,kٖ/'=V+ee0Vt;/6,.Ca( $_,Ty&uRhy]7Mcn39)hwf}͟sbNΩ9=?O0c3f)"`eFX,dfv/r2T=sOM3|gû|Fog6<[}w㼹ckϭý > ﳕ+/W-}uǠ/,?݆³ <ׯ!haa?UT]jȚ m E9=tO̚8%9gJ]6U=qFMX8\̄<mD $=Fd:)tlNCN=cF3[b3^E~eo`nk*pm7igU4+ӠyMz_$ֵ**e Qf]ae#˷c#nכxSvб͛tۮmEvo-ɭkx)7Fsc|4}Ӈd[pdQg9V{uUdeo5`C 7I}TB&dSM?\l/+w-R˵K[놟6jvk;긓N;iR{/*Pÿ_oŊ(y]Uh ;~XGY9|ɒЄmȉD ʼnܣqfEY狂bQLړvKBox|_zhѓI!ƌ4FpHte;kt >g*lu '7bwGuǯHa(>fi7Ae<|@ŇԨBQ:n*Tl|"-*z^T/MxM͏i]ۦ^;6p:q{ t}Vݝ'Oޞ٫;(hJjZzFf?,,*)*fh{״/BujB-*O]9:Ath:auNb?{sz*ً _Cn-L}/3jٚ|}_n8y W}7? :QQg4,{V햘(6⣄(1JR!5hԤ89yW5]_-TԿ/W}<m y[wi+}+z^?=o2XkbcPƩ\J.nUըU^FMhiuX|J7}#+ƅ4դǧķ͕Оp* kd@94b99&;? va}<N ''!- 2 )(Pt8F3Iӱ4]27&2!k[{o[6gkG.j_nޅڪvvh8.I}qz(1GԱcGEMa/;B^uAvQ'/ƝbiYuHHc0:;C:7g>~a596\5n"Qjnwk~~/P&3,l=-Yco/Mgafeji..KF XDt6h\;lyoZC, RPګs*`ֽY 5U6S}OOΏ(Pۘ9cs!_/ܼ_*/ 9o;}r!!Bѹqܐ~NH+^ʺ&A=[,ujUc=#=٣=S=݃C]T4^OjS4ԢSe t+7.n^>mYH6ڤVzYn['NKq]NGFt` ճv$v{ׯrx1Z_3myzw?^dhg<F k#>,u{Z//uOs@^eۿfsҗz2C=[4!&GК"q!о-4 %%#my[.fF1M'dzz/YL炂u f 3X{)SH \^0[J( "epሒ9+9իX*T a :c 8ܽ^-Ǒ:i.0_Dhot& h+-8zS9O6W.< (Y#mN^aN$>9"u:,A%AKWcYmUSR2!RC r=mVLUzºopL}I޾7 l?ʨf}!8̷jJRWLKD Fv91HW2{u%gpOi…WZ.rBK% }zN1z^AG>]rcbnՕ֋%$2:ZcȚǟdD ZMGt|` @R,Tb&Ij\&R}1<\t0G_"0Jw2'X!MĜ#\i[d،h,nvZ G#ցa /X `d  @^*&)$Qz@>fקg(e;X[oGW~rq\ g]=p!H#gS7~#Yvt?(ZՖ'*%G$=×GI@3M43ϾmjW4*ܠ^xio/N,HY-dZ&;yρiԙZ #Z^HJJ E =k" @|-ܷДxF(*G[ \=(ع0OBs>-yٕs d"WF I ^*a15s)fi1U *//ig1J\P;%LPR0P=n>GP54^0"/\4j(R`nqLogÕ Dmƹ#ؒ >w5B$obb D$gXy+zQa kSJDX#PC O1@ԛZIDx ݁4ƿ0zs!4/Hiiq/ƍcI Ө"VjCıb dNOW=\bƯCF^.i&__GH|}90h*&"#ص4Y V\'OI1BV!J%('Ѐ8.=uRiO'aEF ?1`O Yh, u3# !h ÓGQu>EG'p{9]y=1{bi*P?SO2кDѩ̖f2y{[a "h]kN 0uf,Ta(2FdĪ@y툤liͧ.v8*z+1=#0cZƳ8D4qS"&Dr˙Z@1pA0QO(VVlZ,4 ^S| t_ֿTPh>E9"h/T˞TMed(R3˴ю$$Jp2Ck$8Q"ƈ(N/`SJU .R}NlK0۹NM(}Av)LE$R*I0"m *SPWֿ~ZPJ[\7u1 ô{t%NOq#Z$73wJm/ yߝ(\d8/˫qsҚD#N~gkzq@ũǛjlrn6/, F'.V^^aXuٜ "{5kf|fNyM+&Wz #bc+ ZaKn -Hjy08Ma8r)YZp7P^}S0'(T6%Oc?ȝsfRV:μf:A@_(kiuo0]ՠSd:Rmz&:U~{pEV]oQkQ|_]^LhG¼{7j`_=ddC11s)k9h7'-Oc^ȟrlh\-0} 7Ď,m^̲ASyz6}ډyYC`h6}0l 7waJ_]SFDH(M䀌jb4j5Fj "&D^W7l?Oؙp+=v&sbEL@2lXbU/ \]k,ڑ$J7(JzTC 0VX/ rַeD dVCnRXA7G-ܥ[9"SCO"ʭi*H Յ+{7挊ՙDHX_ȑk{&l)ۄFW/ѪURz8gx0?~=#N54b]nl.&XO*QXmmUhY%4(NčYPVjp-OhP0"7Â-@hAh[[RpVed;bJg"/[Q"=T&oB1R Gp0C`pU4^pajs:uӓ#x$|`{p/o&!%RaR7d| hh,E_|J:lK_;)&Br)k|9FIB]^)s5UZD/S+WmrG$S-vMIJsfSWtӑEE2|f%O0Ϧ^6=z;":XnKRԦE}"~ OXYS2ŁI(@@pEłDxJ/v8~WıaԔBTI^'VܛPEXE-OéP~WDey{]DpsKReB,YYl*DLq7}ߓQ4Om ^i#B5lJmzuS/`϶ ;H*HB}?\Uf X.׭tE-#z+G/"1ɃU /"ޥ`ČO ؗ46bD JpiIsf 豄e'evj&\rv@anCAA[y7n_Gs$D ) ΨSPPwc3˂L@B&SG۫$v Y<"} w߈/)dDdDL:-jYl]aBb4vw>;FOj*m. kn)%Q9hZ0v5n ;;+E8Ց^dVV TЇzM)Lb"cLj5q1]qrAɷȝ'm5tkZ rxӽZX*V.AM'˗Uq'΃d;jBy/5stHXCPeZcvv)گHAuHkSxg䔪 . H~mMzZSyshd|j䚇"9Gv ><þ^8n ٧g$qB{MP,5 , 4녡ƶ~~B!1Q1%>0> σwMDP}پ|3L/θ u>ZkEqf)42JVbigqmڅoFP46Yv6h;Ihی3Ç.rFTȝ~L|*FZmLW{YX=RFKwh%{qP)RB`)ɗSXU}1@On$_O<u{Ay}ݠN6Fw@+Xߖ[i̊ p]iǥ铀6# (kq#i91PR"&;8 ޳w8U.6,|k Vv8N;Ý{l M!L5{lbvA-O w$jң^Z+ѾW b'Xނo"pb ފq `Yz SKoY6%;6Dhf'<.`Ǖn;ρe;_U5s!՟;l v)5dMDO6!贤7N-δ9HKU6)%"l ܳi1ٕXl%L4DM2Jw.n6rvgFlZ @Bс8;6ꀱwzAB#q 3 r#hNjvȃX \qz`ޗǾ %#,ϗ0ʫ0MQ]Uvw==oҊvSbf,tGQܠ^ciI X(uEBz ̨e{܎0 s\G`ѕL2T%|5:Z9)J0P$Xsݎ=/3mTOD=4Qd*$;յ _93oрdD ΒPgW(4+E %֌(iA fd’/?FLB:m_  zW@>'C&a ۉ"q͠'nGԨG"gXKg?ISɟjE~Rk[avL J]NY}^5>f6_Y5JQ# (L2n)f=UUlvq@)n1kX"O_-f.eu4mڳg0|F P0󝋳8&aߴŖ倘QC7ۢ`/ LVMOIS F_Hv97ExN) Srr~6 h# %I;Ⱦ DGSW`|a4ۢ2)j`@ f6'#+{X1pdQuǡ\H'fS=co&l+ѢFx;=v uVq̶,rQ%#c{j[9Ou=fp)x1ѓnm ,=e'XyH+<ꥏ')89zl#7q1U:\r ?"M 2"oR-jnrBhvL;>m'$A#rZ",pTU,(٥)i*g d^~KW,_ {[(@d-VD,$Qut8˻`-#yiv?'YUhݖ o@VJˈQr[c~V"2tê\DQ̥M.2$8ƋEI3\h"GrWW2γiϑkG  e@E0cs* yh:ۿa8HAOnBEKA&E_oU~M޳-Ru@ lP縷fa.ӥfWjA Z2C[k>fA 8u0qE^DkW5*>g򭿎W(B"W#@0w*d6W_^T3BZ }*0\p͎WF41,dҹ ݥϊ+@gHյΚy)+`dz03tg~>yuq2Q/B S23T[_Sf .tEI6XkSRִ{Bb,)I!oۈ;`MۊGz8)Jj*1/ 'IïދpCFmhCa^'!}@c)}pTysCtjX("%nz8OU IW:-nkjVf䮭֧o֨砳j-X Hk<Mh^ug  sviAΗ4 MH^Py_B MGbk&n{zwͻAɼCo?a[ߴ_._}m($ J4LtknY>xũ&Oy`8H2"|=|)P{#NB%Ee\!=F=gmYZ*Se=ܚx{r𧛽kd,tf:+sv:@땒uMJ/Vf6܃5BhHvT2_X7̋ZS~8'8[p`UB̗Z-|lj`u5Υ~UA3G~ a>od>{#i xE75߫i͐p`@2GF诖GhĶ uE6;ZԿ$mӁr[nzKu xGgˮLakWFdhUgC*B\+p:n=71ǔS iJDI廡鐵D!:nF$'6yB#规(VuPqr/*"냃xv  K4 grcrad|R7 \BQwS YM>]~GH("ƕzb7|,H3A UzW:Iv,t! ^DSJ _^zA ,t6/CV]VHmt)KGscGX;/Ns1DH>J¬$3i705Ƨ+7&աcS+V76pÚ4vP!/]'BLu(ｼ#S-ZŠ}'~)YH"fR{]j*N* SH.ݩipJ#@oHkSfۢ,cΞ+igzjDxQ3vAߧ~B1X3jOѬ]P4߻l8Mry_M޿wΥ1=v:dw I^0nW'B*osm_*`Y6J^盠hvrBFXuqT֩u/bўh?+%cۆjB ANy'S;[i\JBg˕>3e:p2B{F R镵SʢX=ɖwz nj%aTDMqⷍW,}uSf—mxA}hn6=Y?F)ڷyNNр, \ ?iaϐTrlm2 !u;aeTKpnI+*N 4@='qvi tr\UǦ[FBi4ek`{&~: >p:({GoUk)-0* OvaX#*e@! ^pg 'y!mM&pyO@:HN4C`TPr%NIiCk;~b$}'"n+תi&RfgE (YjKޖ1>-u2ɃƸW zB~@CH5vpwq)=!)eyyDHogwSA_v?QLƞ߿/66q%u,5ͥnwӜCFWfYm3Q3pڻ㚃IKüP` v[:P28zT,k zr0bث?K%D*1O )Ѹ7Np,A+ g{Dۋ##fH!ìq$9hK0XGh"mэ ƌENԭ X wZvv-^&ex kmXY}~]Z{)TruI |`k 8@CzL4wCUbh]ZK{JQjK5cVɁƆ UD7[^e"\Μ`Ȩ캯$LؚT>tu|@QT;-NvvIW`=oKfɢ$h}[7Wh-^1BϘLL>\Jjs mnh&\c^x ͦ2 }bK c JžDZ:"]ZA<$Rdeɣ Tk*ˀՔ]-m9Z9UvA@$F|^%˫íVYS_%Bg)MggwFh!ȳg*SEY"|̤?S:sy1dzٷ-vBv-w`imLp<|k4eIdHQѬ8S5HQ)3C"Ms. Ty8K;5w,p[ -w5uS[j9XӎD^5w@q8 I5.3eև 8aVc\(kh l@4mb?p\v(Q0dn=c5ʹ@iB8n#k<=B'A}&PTrݬ"jw)U3_I2|BV s̊QxqF\R QwC:ۂ/ Lx5Km]hʉsyI!ėwxعm{`+*sHb7 *V&is"*Py I#k4s 'Ae⧸+y:(A#q iN{/zT?pOx>>"/| '0喗0[`h?cǏr]=؛EH ~JkTڍs K{EZYqeyd=:a^G kа1ֱ!@E1ƹ~_5?7ݨ{e;r!xQM~՚ O,aMrZ؅_w]q5fr rM rLcnMm[vгK8@TA w>ۯhKkW)mg}GC戙\U$ZXf[;/h\Le4BCq^ {9~EI48+1N$IU;uR^:eYOAE)J%i3@۟ ]_ :SI-1KK_ KT,M!򁛱e5̳۪XKH/,>xȝ# iM( XCBﲷPmu'`(\q ‡9W1#Gl^2X>'Rm~z%OmS*[bVP;\{rN]ٯgg@ uyP]CTE*or/q RO"kL:(?["ϳZ)^>4BK䌬bl!(*zjЇpSz:(N:~#PWUHU,g{Z( WudG*@L\ T&zei?}Xxd8Ҵ9aj 1؇-i|b?&#$ˀ# r%Hʾ`?FOmJn`d Hȶ.#@0`1E0{I,}l~Ţ&tIE3ԥ *!PVũ܌&(tVNzdHRP> SycȥK;;nETHJ$[]]X|#?Uߙd~KO"Z`4Xtyřu]^x w'VGߕ։@~=f7)<.Qt}"#fȠ%+i(l&J%k?'nSQbi(k wV1oPMZ?]0g! ko8-f }nTG0m,@(8 4^# wBsHgds_'e ɜPs=ə*P5af32=%Z  #xBw&2T>(f Bn!-̅ʍܻcf{<TihJO( :[x+QGH&@k9y"jm݉)*gdӔ; Fsii~rCˌ'1 ʢRXlzHOgpSʛ #E%@J6fKt-^>t0G*٪k%T6h :'Nʊϣ )ƉSJ ^I~rm4r<`(֧Cag.r0)&~nا#g'3:>-4qtuLrMLJVy}2΋.sݢټT 2ձ_T6A25ai>f{Ovh?DnÑ54m-cb^@O4znp0O _CEp'tz5njkֽ%OT ,+QtN+$O#[׍Ӧи$Z;i'{(WKVK7Ɓ}UFX6K.҉Wa"1/2M uMH`Yd=4g56:B[ Na j1?qlj?~)ƁnwK8w0/HڈYf8n43kk/C@-d,6/_0V3~p}X>5 3.Xi'``7'0vx#, ۇK|sm"P7EzSO.m­q!? utpnVdzI>|Hƚ/T^ze'wc ,1(TgXŇq.k;>?bN093ԧ.@rc o 3J1 bDC+Td:Vլorcy nVkAzأ$A' %DT@cNn!~K>t*j%*iG/q3W:N D.J=CoBy{^KʥEfbqE__S$ර# !Sڄbj 67^gcT ɥC.Iܸ lD_A/:Csj;r5`fuYOO0~ '"|X h1犊c@Pr`,P/8pͫ'Fڄ֧- r-҉{< [B@lGTqw{h[. iI4swg`|ھ_JVȆ``>f*ip~&C6 ;KxZAlG-2QE]6#Mm̆Ů׾&XhyG}+Է˨A#/BQaZy?(pUzbGCsݽwԇ({Fagv5U+B1/*0t$ܘlPq!MNvMHtmeiaBfD=29'˨p ҍt@4TJC|"eU"a-ʷ,/`71(;D!sb>^y>Ї0݂X>)RR!48#'0G x 90Hia5dN)#MS\s+P:+`+o 64!*_BrjS8-mS+^ovg/ןql&^A$_7 sZ*P*\}Vy"~!S,y#:?IV=^>Q."Xs*%Rh]rZ%6n=Q8e5 MM~=O5JZ׹zg?wTXXEɒ-Zt8Xط'%2v#&{kh$kb\(:J3"I$+}A+A{߯EmWyK"H~f궇s_<:oL'eX Hn״5 ԿRcT8q_ʿF\lb$Z4 X@:F<4ZXwY^ܧ0t)]ݿx4@ c*bA;X6rҠnej0U}pWk(r!"a MC8[&b< 7%e4TkK y=C+`v|!\ʳq@}B0 ^ Cr!J7&b "nOJldF%3/?/6 5i 5pkMY g> W+(aGq-F-ivGe0WDzE}J j!.PU^*]>UD nNkxP80fJ4Kշ[as:*~A  tz뿵 _B2A bHc˝1AP _X *2ҷh#4X|ϋO1uLke|NJҬXw͈2d0$b@هXLFs -90$hSԣ]<<`t jIРE#X]}pba 遼Mn09341QǒxPMD(?9 j}` ui<ۦu)]kRXA9&b( j*۹ȓi>@;mIM(-6@X1㻈-FbG5sVHf˰AZ QjiM]4OXxXz_. 4PxkdXV]|8ot*dx15NgK8cZ A1Ȉ)拝h1YxX硛L* b(|E ?,6z.Tu8Ef1`` ~B=9eF>FAzu+ jHP:H  uS@s$c%YPv&HlUŸyט 7.X }HtNg g]g* >YZٚ[f}f(eNqA_[Çfo_EV=gveA'#3YrFASB3&{n+T_$ g p3EqVGʢ,fQcFcf$a4p1SNlҢޣ%EЬbcmЦ^yy-+;O7 tgLRlVP^2x tØb)[1K`4:4qdTbًJr W&製;l0"Q% oeB^Ҫ .=4+4p8ĩY#fJ픜нD: "5ރZT-,Ϫm$OتD澊&=WY~OG"djVF$b@CPjp)]Eov@jh+1w!+wmy0d<\P@ōcأAQt;a uxoW(6&?m߃mk\%Հ~A:ox!]"񵶙Iv 0a'N*BgU+ޝ銚$s{U-yn+ur!mBS1cT5%;0Q:*f|yqDG>ebTa&[ uDۗR?:'<)7`5Y`/΁uV޶[׿XtИחj\hX':k+kKMe ~fs.Qu-2kChܕkMH`3ˋ7bFy^O n 8>a_2)& U `!p*b)vTxo/Gqu0a*AF2>.RL'fm l ! 1zzjoFQՌ$Pf#mֹ80uk2dY~q` ٟd2`uMv`uH`e;hf۝nzX.6bx4}+\p{@g$pa^AK\6c ,j`Լ]he1c(b{BH5 ¢,q? ЩIVBX}F<n|8/|倰>gu+K'J ;i'XT9wRFaY=1~r';ˈ| ${GhsWh;֥4L'{?BG* g|3IQ& ʸ~ }6%vOot& n fes yKI^X(pY4L1Ekm`b:L;*ȣ9_ WeIq(_ )f"%`4jpVߗ~5_}><DuL{K"f'R[A;"Nnc(ʵuIվJ *+Zf+; a {=k|%WԯR .঱wz\80hZv157M^x-P*׆2zfS@unnQL 7=-#M-ĄG_QWOJMR)Da`W|38[뭕8,/ < xsYE||F)Po<28}M%Mf/RPXH&ȧv^lږ6BNz- yo!ۂ]Qɼ_wDA b!X!iN ^heQfQ+@x~񺎃bdc[fEjX#íPS~j1WZDQyV)nJXٹ铄y*9RV{זVWqԧ 2wJJ[FяVҒ"g-I߂yV ĸ:a֑Ԋmdb:75)Ih\ ;&}#*Dblv絫7؎5t\2#D(ҽe z;ESVԹmooQKyQFSMU]uvCl$nСR.fZ޿ D;}䅅ȁrȘS@/*WTn^t2t*>HeJ% &'w&3Sul3g(F_uV9WoIaV=y}`J?fF9Q,Pk}֫=܄1jv[J(v hNؑO6^(hwB=Q(9,c, +A3jF.'%f_l3}f%rOr?li_*(}(ƣ ?l67TNeɂ2E<(=|EG_<#Mթr],rISR/~9~ȁҐ=ƽOSbrgȴW04Kn`63|6C BKdMbrٷ؈W%8$K3z`vE6J /wG)|/fA]u/&wB݅%=)Z8:4"g+n3"9 2/H̐|Ҏ|W5"$-QCz!jKR/U$^eQ湐S,~Rd3+XF3[G˧p  !r)qIΟѹJŌ-MՇ#aIWyXVh TZ }SHKpJ׭DD̴j0g `mP|jaE0]:uM.B2X 0}995a*YʇK V.4}hxz@@m5 >CgO@$HpNն-Z% ղ(TAD9UDp'+bڱX G`0`ju{R&sӿJcXx-F5LmU_G1{lC2BS%,>If.8UePڨ ]{/D7bFL`ұWТ;iurݜ=q=}Osvs%( m 2_{\t{vg~EHb [j`k$wٺpCx7Crp/Iǡ z GE3nJĎ17o4bFRA_…ԣ1L ʧ=c&hғV}W>G,at%P'G nǚg豞VzS1U&s^2>NW%;"SJ^2~}:Q * .L ܻY3"ЂKB84ts1V9IΓMC.q2ZH" DN:LÐQ`EXRA&ka`7\ҳӌiAlUDߣ. bk~gThY=/@h3BT;h*XS˘˖;Sb M]\2YDAYwxѨSG/zFOV{E=e oDtfh-.'\5ZS3}n7y6 DF8³`j̶%gUsb,5g-YbD^(DshBRw0p 9羰xx7!.pDÞ)ONy2Dz(Z>}Wv{ZOv:I\*qOf;t?{&d |/8|F=%TWpI yA,§nbˎ2r`CSnՎɒl!Kzx !/,?2NYx'_ZɰW]ퟻO:ocS(WUwCÖF/Ԯ4BGT2Y#țv" .4]g;@HA2?m ZGGnkH z*_qݨ,hB==(p$<,?L+U^wۧro %wĶ?U>=LߵA⼬$+=[1x Lǰy]@~߷dOc Fwv`=4MǺ׺::?D: 3y`vj|5u4ܲX]j> c "|:60s6Lu]" VAIjPI~r kk! e<|}X u_(lPWh}誫'C^t+ȪeB^s9^Pt=7~sK~EE=!wyo[[QNTGm%[mq5).4Սk7 ^zXmv>x=M~MX D6]ii"=ks:zdg1X[%G?+vdbhN=Q;2nƜ*Ս F?"s/55eҗ1oMխ-Ee/R`" ^:( U񔩦>+o 7uc[eVQ~aX謲+qesFل\@7jHHBN)Mum(mH.ۜ-Бс ;[+{Eα*HI2)JH\# 41bMZzyeґgo09cATB:n39(5/ eէcs9W9WqdTf\5g4"t4bwٯS6V _!M2g[us'$-*ou9pR5,T_+.T]+DiܙpcU073Ғ3 ۯ-Ѻ["Q{-퇛IGY(:].Cr8fd\(GJKNO/.}ubH7'z&E"_qE7tS X67AC'&lm[ 8$g;oL(72[w$ڵW=NO5+ίÍ=TT't>V;g, iZjz-F2ljI |":w2btnn^|2z==N4| Ev]=pzWa;p2<%Be*nlVʳN|x3ۮϰaR"7kdQ}`H-Dg~V[2zӹ^XvNAxĮ}*0?+@ѳl#ˠP9!YٝגWv;SMTd5Cc }a|4 E-"ǶC^WSƒ 8XspFQx:l/:Q (T֤5jܑ]Pfe F i"1Ng 3NNNˬŷ(!B~x4³%[E{le*Z;\f_*/UJ3:Ф9 څfXQjBIZBhy.Ҋ/%1=~3`['?i>4k3i[t%}Uv%;k%獁܀Oќ74]1]c[iod5pGee{:XgsF jS(^ö@]fQ/ 4ЎeűFc]FfƸn5ĵeSap'VV Y4k".݇uXi?l~:If顮*CJֽ+:s:Y  ")_xDgV(YLt"֒in顬^߽lMXi$M^‹x,hd q nN$.j@ $qbDw,\=?N钝.U$ `g*lrlJ"-́Cޔ8(6Lh,?l,],ޕ T?aZXT5+WA 0 ?I&"@BRXWrC6\UO蚒@ 'R 4Bt;L^-zͶ>4#DX,8nv.TT˖6 wv.;Obh_}"&a ,zfƒ=e":"I8rgatyL%5iv#R,Dא1`6+IgE%X~Z[Dߊ Vj0v^ j &(>6s?#AbŸ1~XK@9b h#.Pc f`٥TĬb ~6h2NK1?'JR&48 W%]{ :u{~S)y4Q!Ֆu M]cܮO ڜm0tTU/r,YFub,-Ӂ*1%GcyR_%m0oG_7Y>x\OI We?}#Y5[̖,[nAԖb"gJXUԓl$N֟ꕻI5HޒٔS ,Ο&9NF\=R.#R1xIH.]7ܤzJ}2տ#,!JgC%à`ғdI3K(KU͢2 #"I V)ቧ#y@xP (1V_+`M,V D6fչ;|) ? 0]/ˢ im͌&&[j*$:9?_?ѻAł Jtk \ۘЉa31a{Djj}TIhhI) r:M ȫ3om9v1PXx!F )JN`͍5_I!ZGv)qb~/.rz%#-&t!6K*&#'q!~";m+|ewOAs+@&a)xŴ"{q.UDW ƱϥLEPA# s|ЭhńҐi v1ĩRs?!8& wt &Gm[U0N$=tdI,l]>ѡi^KS2s󒮇ZzOJ[.ZP,e%}:@t~k'HvF<ƐSgkّ+ .pZiKWv!mXN󞼔}x hVQʇQdRRvLTB +xFܥ3O~P tIws_Xb/sWZCٓM yũյP pVS'2 G|WG\όS3 )ytXu?ې [HpU@K5麐NqpNU,5 4]?m 6PT^ѷEiXlg9+er7RkBG ,Z#/҆c!f'0؝ k\_u}F>3Gs,\ꢥ=+Rlp8;eav#-vgrSQ<S%Jb?^dSKŢ1{'=iT@X֐9pfFhJ*o$IﭐDJQUϛV5<6.*c w6CVg F׌Y];򋙚xJH*x*Ltlw o8#ݰF8;ҪNqQP.+&S9l}7cbhHh xI,l$$JvLRbl.DJnuMJl'ZC{+ϤNE|λCٮEV?#'QG3F+ސvW~Te ,VFmHܔc$x.w6"@o=/1%'hIf0S>: KP<&:<~[NV2 xjRЪGE%弬,/bBi(/!JE=]gMzovTg=Kh?\j~@ӭTmu5Ei_JRk瞓*A> :峸,$+veaUekא+[5P/ύΤD L$_ m|%[!ꥬ9jc ; pSlӋZ@|ԅ+?[u6@lqCT]Z~m_ZNMŦF9ʞb؄ , x_!*?d7O0[7!"v ؐp CWlى;?5f?I; oN am'eI;2'hc>n x&tYy?nQ 78q ؕƩl\Qލqu{ڛ$ćK\"A+\.ͰCދ+(d}Nf<*,wx`iЌG' 3J"aU5g7-'jIbv1a.(E-d5WhdFg8jɳRbtSqѦz!ķ0+Dpt7älk%22M!Yyb'RKo j/߅Gv$U^kPlj<-7 -Ac 0E$}R kX5àI^Jet$$uy-6" +a8k\>!c.OPam}uFN"L/#nhoA̫FI89;%vFNH0*&JEԍ/#sJNUDH?rLA&mXG)pDD]jxxVz}}+6!uH'ҩh>5wz 3 *`:J 'ظ3SF__#0AD)V|9<9bi0%nA/1`\;#U9f1]!-]8A@;Y/_`AQ*&9Copv98@ w*+-@D$ElI"ClG'{<` * ̰H7.+T0o06biIJ+4J֞qAUa)I1++;&.]߄iA ^ԘwV!MOk*78*:#鉺/c,50RToSW:!״W) ZJA=Io@?{c':Koho? ]p*YI_ekP &Q3=O$D7=WҿQk iD;Q2&MBmGyw(GP8%&;`AK^;6ncV M[5Cdm-?ꉩCϰ8T P ל/S x)Xce\OYDRDʙJfo(}?51}@t|*pC  $Or \Y674gnEMq}b.i:@nDư$N_! cr2Y>Q؄RR& HeO[x@ [ŝ̌4/e64_E򐼔) G7XyZ&c?>XdImFh+֒oZVLoS*T,Zc'M߆S[-ϟk.b5K[ }?M?fG~BgVۋG>8 ~3B[F3xK_sx-̪Xn#mU"V؛!zrq"ShC*mCZֳ V~? ԰NX^p4Uh݀l>U4P?`WUXb9>k-tUpux`ل)WfR]9_1KGZp ;@&CYC@y"+j07'J. Jƶ)rL6't](jzv~R[7uC` y`hHGշvȞDCTZ_z.fI} jW9GVJH֌Q^OԺ+n j~UupH8{09I97= {_ Wp߲̋RbW؉5irNK{/  nU z(S%L(4xXꇈc#e\TQ8NR]b`EW)x[wsz#SKI3)y@"dvr}U^"Bؼ^[Nd˷ɹ\~2Ԭi+Ŏ9YZ@ˆ@cU?4"F\mVfﷺ׽w%33w bECikrZ 󨣨Lay .i6Z[b6kTv嗛9|I֪hUv7fBc,v䑳Nwn6b&GVty7nxY4JCOECph$Emspx4$%}G`Ս:g5;B!~9RzC<K".1h1џ`(`?#"9g]JTOm=XW8̹Pңärn#UO9peةHrC !##u=rmqlGw9 lQ{6CQ Kg.VLIeS8,;U S8Q#DtBIܾv\ΓvSIBw"iZOWT9)m7??[]]CŴW?7OK6wGGX(BymUOK*#? !d![]t݂SgwJ@>, !A '{j@eZ_cI;GgK%$..< *|k.n܄RW E9 &S3xG a} @>58nL`iJsBgB1̠ ˍ\#8*W7qޖ=p))4 :gp1r;Gj$Ms'.23gcӁޔ|lSZqiU)eFe.e{4obm։7G8[3{ß1UZ`mĬ˱4*zb2]|;@0 cv٫[,{ Px{PMV.kSyD#QnQҼҎDCɞT)+*Oj0j 038:h]F!J)bqA:[1S>~` "d\tZI(%gS؝S<&A… ,K2MRU1ӜULj3v@z2Uc{fvwlN􌍌 KE6V쓟/Za|i)ݕ:m mcojKv@,Dn?P~J KkI_p(ffG2hU o4o79Z̪m=(/-i9bHqhV(Wo_$@B};|q\1>+[:צ'&$Ƥ}Z# H^rS7f€GR2'ju+W'n^k&v0?8Y[q89u)cٖh4XaDأA'K=!#bdwLC{x4CJ;*/:[)8Vq{r~d$]n (M#w %imϔ^7G>CW ]=ySeǁ,/WZ=* E(9)o?}uP)'a zhȲG'$IôhN.a ~KV폌eM9n`fgҙm?fWRL^DZ>k m|e?m!R^Ԫ`&Y7x{iq}B-㖱Uw#7H9~ÌHX+†6/+]a ֤IXLp^&+Wr4 Y.TfOT%=* {/7y_!6!|cU^lS9bþ el@7# 81 أd2*1M;S՛ٻ0x̓뒋 րb;x+6Kw{X'p0d·EJAZ{K}Zqӑ^7.־հg v_XHB~Vʜ)+^% O9vNRW*(?eMf D{3/+h*z=5oD4zm fY<%)w :&b3q*ݩDՍ=kLְ`9mGXH)M'+/&ڗe}HlH M'$L8W!jLҪqYeť@D@tboE]:΃we@h@, -xuFyذ 7SgP}:ZQ,Q_?46^ 9cs*jtRЯ7yί&T~}uXB Njc#x|BkW$pd`ZEdݟԿk:K?03Dj`'okUB`U͜bK[\& Vnt",jNhAyTiR 1uM|iJϸͲ椴#Q@§gTޞ&>ݥgO,4)/GEOvu%\o#FWRj:IjdglG?jq*lg|ߡ>aZ(3ukWMx)5=ef5.mrW%uɌ|ݸKۓQ,yn}/sXf_^ˀ/B}`hJAYcB\*MDFaG:r?7 Rs4?m\=c3vD7VutkH8%l*bgеfBO&>qsxv&if5'D6΃Q/;TMLY&RE{%@Via;0CpQt8)249&d$XxQ⢺vס}V$>mLC7tER lsPXi&`RC Pi.!)Kv5nv0{zs%}CVm*.w%g{\u"n1P=7q—p <4d^Xo9xE $dɕ|(OP>q˳%V^&V;@/T -g orKLh_TMߟxt* E3!_\9YO<;r8j}ثNyME ٵt|,K' 0+.^0t>xlWҶw({te Ur9.VA!HW0}0HlhoY2j?&*G%x`q,50?ӭW*YDzgB>C'dìP\p:z+b"lqGYe+ \1nQwW\Jsq%3N?4}HKa YIVϱy_* >zs{ڻY(p3dײ2t;<p#=iSty1MY_ԦPdx4U|_6998Q@y &V'{ynvcOLNv~0s;.ӮO17>^w?x԰Zr+¿e O\QKv zIr'`ԆEu[H:lh[oYu?eZn/h@oI92+ G8`Z¬Y:n}|:M!15\qcEZl-!%@=B7xI&0tҾ$,I30ZjUoj4:0'MQCꙻ^F՟( *#X؋;,jc.sZϠ3 5LBr\VzL9\f {R#BS*ӧ,a͔p?Hyg% fk_gJ`PwxS:)GҪUou9PZ K6ZBwT$YXH(5 :ãVf k09ڬJ/W8>&*¨ª@sRXxr:10ui鶤ΆZzjjE7,dwі?r9b;SϚJP1ݤdu瓗yO-Θ5{+BcsF˭בVy!]㦥BA>Dko˭(j#αZHTGU ={4޳^6;Z?\dW*HTVʼnͩØFfT Ε C^iW--[[!6b6!-{ˍe |ÕU=בr^Eoʱ71񋃉s1[ 7H*gSb$ӫ  2:/gx^`Y3af%.B)YiSFԪfsZ`Ʒ؋Mm1bf)}m̬Q2i'TBCgc֨z ڿP?7P=GlT+G;tj` //>KiGU3#49 c+pᴨ   CHqeuW4{:xثRkf$l9]/D#>>P~nʶkm5P\b "haѺ53kɥut&[Tݻ2ϔ]HiH*,]ԃn PފpR+kAF v ɢ4J.eYC!Rɲ皟-{_a 7|-o&jAQ>(^RY3v7bȊq,#3(7!IaN͢Rqځ`[/{+%'+SV*j$\Fpp;$ u,FvrꖵguZU*:Auڛ`-<gj9Kd*UCD\[-^z=FGLL !1gG6?$W&5.NBevBeX&5y]n[D?/^C.2Wb1Ͷ5=F$ ,xUe r"ib(2Uaa׊/†=;$PSfM+yfAW m7$щQTЦ&P:4U*&Q{c y$BdpF kϘPL]%T](񃎏Y c4X ׾Һ `IȶJJg@D(X(`'Z0E 9XC*mXY suV8&eѽ ,b+Na-}3ˮ[5EޫcV#ăJԢ|/RNt2TJpiɊrEIZ@PV%=92QS+~=[Ԭ e-zH$\Ϗg= 6爞O$Lm]MHkZOplD2o s/ td_ InLQ NZhIu7W]Jh.ﶿDq01ț_T׍).9_*Cz= ?a#q+L}p$*llփѧ) 7]|hwNwUx|(*hc @doo9!R%FEY䇂ΉJHme{Zi؜l^g4OE/\V O>g8 _Š̟Xw^H\$wE^s6uûZf 9x{ٝ^-K4+C >yRH S$ѩP xE*!i*Q&(*Aw[-LRo-)˯6 NOKlrIVR*W@.Ny7{mW;%Xc, @,-ib-ʰ}}:(b;uJO~q![ >pq,{Ku~8 oMec'O)p*/M}8u>_4(t,;.`kFxkŘ8ڏV{=Êi e/[.j7xPdi|}tGCQyg99/ϥ@b\k{T޴9?,I=O2ӲwI'{uq$H8\'rFD$Md,$_.UfSlH VF7dC.sȏ  ˆ'&Rmh'Ƙ5GgMY ráTψVU l^< UTe2E+_QwEK,LyA9<0ʶl/e lt naQzJ R)3🜁OzŸ޿yMV#' z޵2HD{r/mE}iv>sx! ܲ=g;tBA 8e5IoOּcn4f~ dOtGfK~x2ՠsv̪ TE*w3Vۦ$kWD =3GE\a'&ͻ gjvSj筆64R>v v'-;vtś&;"" Z"1mqul@׺c#ىi`B#ǍE9jOVh5C/,<ϭڤriO^0c(_4˶wP[L`\"533oZ:k ݊?tEVc,J$qWrQ+@VCV?}.$˶nl]d?IU v<AB>ߒh 8˧Yhl3gQdi}"̽na5Q&v"B98Py'ƹ-r"UcrQ;4WQyhU"chjoT;gò,Ҍ/xMkbs+ر`e~:Kkk6B%+b tfKs?Dg{8 [.AHJ :6jBW2:ɿC9TmZ},Zk xS&Cqr&^-|'@ 2Ncv#%^![LĖn ,zaybφ0 2*QA*RAJ*iR vHy<^~ɒ+՚K|Hn.3O׾uyGٷ;";a@=/ˆ4*P1ik*ѣ cx=cS ۝O('z`=c xpz nmuomqtIΕUan`a#FPV!od5W^@!f),6u8bQ_t_buyvW1Ëʕ"c:́_cV:p,;+qqEb席 MnJ:E}̆mSaZg3t=ogpeâ3G;;x[ՙ.f2'{YWDn V}=嫚уi*o RGd΢.g OW #mOxb~U.<Y>(jܙԟ'?q"s"y/£#V*&r{Z_} u[ۋ08eGԙ64{w,g֝?=~Hj*Y<.@rsI3.Ec)@lDJ6NΒ8K>'tՈ= j%h?T=Gj{3)~m'~-kX6.WښH$P\`w{98h>iT) WCذR*8q0[0(R2~ y*DJoVD~2~= T/ڜ9ila)R5Uv|PW *z&V]x y2U/v-"`b>gO#V kp7,d 77)j(_k\q}#F &sdI1%LGP8cԫmdl0|:TbzquyDZgCm<=K/w" =#,;xڴOPa8}7-QN۬Ѣbcq?2jj3{AV2]ƴP|96ƚU\gI3I-M>Yj5VT$)-p=5Dڲ_XX⡱5U\ýrhW!6_W&|'O |Q7ϬJ{>h9&p37W= ?G&}YY8i%r 9vT774"#hA6P &A_jLc*"gMJ:EpZp^bMF7OM1w#l>V2dv[ބ Iu4fy/f`X -JZG&r!w(1[o(<Ҍ}x[+? WUfqsL)1Cjl ! MjMNizXC/aSn/Bc5]ݠGptFu99?\ {r};*Wi7iʂntmZ,_^KK؎-ri~yszs(wHOᬪ OԈu&t#iQٵX'RXDJ݆MDgpR**T}q5-ꄙ.7!=rpAڭ"дJg+Sgga{A7m=d^2ے/?-/j%V泲杲 u8`.y]U}i!ދ@c!H!CH}ꜧ }k ?rڞ. =o_1ަ2받~N4f)aT2(И5P/O{ eO(bZA$b{ӎO6]/pD?t]$*LՕp0H[oy9Ln 4I >`c /Zs[0XS#AF{S^_A~i鬟v+%r;ӳ@SYM z$-Q?r<'LkG& ynK[ˀj!Glj4|u^K R=ʯdd"gKcoo5+_o;e ux.wv:»ϰpFv%8sPGTj8>Y դ0)JU{En$* rj߮{;KJ>nUpx~A:8 fkM k)>SC8UAgZZћL[`a1APGaKDUR7hFdur{ܧY_4 ~=*˲rҥ @MvYlwO~ o)xcZ@x!= !_X8p,?>2,ҁN7=gjGj:Kkd}+{by,[֭/7]lmeK-B<($ӓ%b5 )_@"XMbdƤ*q妹e<jj494;&b:NU@w B]ah 䰞Fi.LM -٧;V/4p5nqd52ty)FZBDdUxPdD%e%x[ eb'tߓD&l:ץ2/P\J Љjrq YY&hr9sS0 +' ik%<\*Jݖ/RIU/LeU*In@' _U/ >Oؠ.a qB<-Ζ(Dr8JtS+IQwnVE}T#&Iv*3rCq*zţts 1]+[S2(&@Y$!iaj!qYODwCF4J>K]_7<ա״Әr|Rs/C2GvV'Ā@:baNH4䑿b4<2"bmӳb#]BDlP'W#O75X7Ļ+t&< :iUWƭlygVez`*@sa$'&p}YHǕz?bI]*oWD.u?uwpfveBL' 5‚Y+:-K&Fԗ~C8xM\EPa9Vӧ"./Ș*<`ϏOMm~;G m|&F29HG[31/h[Q,?xj=kba2n&9ܱx-:qW"zmQ7}4yW]p%\5ҵjSjBzҖ|TUWJʈyzATUr Z#%RϔW1_"7\|t4wj G7KuL)+a Tpx@ m6n]e/F@E\GGs\%G*v[JjD'8<*xt?Z8]LuK/@ҥ9@+bL "sXubuL)S;F>@|{/ B:PiqFE]RLhtbpBrEsܲlϝBR d{3`j'J5rHΆk*)+,]s}#T<C ÐJTEھ8nPH g Ȏ.*ބ@QORec1fMc,Q aؠ{dhC@npWBsd<x"v[ W 7ᚁ3QVSk}q.Q !"YRˉ֏uilߍ?bCWvYkӍepZ#qMf-ne=CtKb5j[>DkB-4|tԖw9PTv$j~Yw?^`ö1TL7W=at5gykn 3 l#y-P2(qv<#2N| o٨V>@PhzA*~j2^H6U+mf2}V6b*MMn$" mMI JbXWxܯ Iu{VF1ݎV Ԋ;W1MFM B/( 107 !!7Lɓ:j7±\8fHM6HMb}:^΅/Plp-I6|,!^/߽gTuqTp\K'P0&Nk,"ۺO \F[ Հn jϳߖV]v1lB̋2 p5 "άo7.*|3DPx G?hyĞ64@nDhjm!S7_y>1mK&XM@ϭ+ 䕄nLkX>6zOD/j+/ ^ ݐ˖JS2.PaBQɞOe}A7z!85c54iɣ~eA~ԠFb2?^a[>MkhZf*kLeRFmve~U #O"iXQ 2D] P4򐀹%U$)1ŒJX͸l-pBț-Mӱp$YA%(AK[-,9]?`݌ ly0o_RWcD|DjaK,˺ٚZD&yj0lPՆ劻{c;[_:jX.8jߘހE;% )?to?­?nPJ*w"V&9Ka7Hx6Q3QI4"m~tw{~CwcG_<s4MhXyi[idtWD%N"]ڦk&a`n_J:py 7_gvjyDhOWIAEdPHwHkh:hUWiIXi])`~[e;u6"URUM^, D'ng림17!ZQY{3oXq`gPIJ9%/*a}5SK{%n -QΦu9bA֡hdz#@ރUh&,룐S$q@zLlf3>74"V3}r؅Ev@ܞL{OzmTDPTk]UvrZ4>N=,@h|p_ǫ[k13뭀uo?6U>ZQKOJ&nEyTRiQz;M,iY5/X4Z- !ƫf!xaT $ōmߖlPި۷oL,Υ%\OfB1Yj#l< c-~qcEx as.D- W놳NVwgLZ1De89 pFwCVU ޮvBO}7vhFt^SnYO #'pFf#܀\yZp0i6cru5'5kJ<)=R#Ld NVDfBP%&gsO Ww}؁Qs}RZyS~STz#ũ)AА9\AG' v-QJ' м Lc?%/"2QbPA%˷ue&Ȭ?e_']YdeB7*{2)zNtqiW]qn4`jɤRD:k ^/`q|Hֻm+Bz= S=hs[鲲>+E勡yӴF dZX4{.lXV{+|]UU\Or GߣjE;LM(Ȁ^7-` 0tj݋3ZBi4(b13U<LOWc)m5b%]?M⦿ P gWNmMnyfMϡ ̈́:%)O (q^fW%u2VS|O^<<&0B xK^:!5pu%&D0.M /ٔj"{`"E 0q"Fh+^j`*ώW|3-pm>5ul5Zj^OR(+b+36]6rzf OkwUjH[/>nUj3V-*Nmر#U<;>te-dcߣ7ПCҏ+Hv1ڐL7`Z,OcΟmu'>pV ^O:*vF=I_ŠFD8Rtc  =: PjFEde{J{Wy٢MJ/n5,HE-+\$ sE|p +d@<^EߘMT zn'*$m݃bVri2 Z˜'aBO)N#0ϫ )Q)NM~$Ʒ @ ci|"wSdPվqIrĈW_AU>3joHōf|'DyEig{hfECZG`R2p8}E Wv F7JâU%Wf59pzSJ{ěXD<5Sh%4o"7i}Kc@Ý*X^esSM3}KVC%,26_-fQFE-; *k Zv/԰|ƀK YY1+|bȏrKٷO6 2'E5Yhy\Ś#]Ynv3rӟeh֥e{]Uf&L]X ݖl>q-uѐlJRV\z3̗otj9deXϏVXEcnFh=XʉOJpAx0 c`V؄7RWfϞXcR81ެ}/nT)rT3P+5˦)gYNx<@DGQ\;[J'[!;Vϟḧ́=~u)e[\6?^Knv_af&)U"<& kQ[P}QV7^0)2JKA| 6g8W.y!8 DWRBu3*(pa7g~R7#~!hZ('Pґ7IU1a )?c)`R{Xt:Sc3?w HX/iJ!rJ.pKT֤J2VLFEEq#,&O|F~(ÐWm@zYZ+kZc%;jaoO+\]nƔS0lw bf-$e0tCHS`Z D5exS3blG M0jLQWZ|},KQELlF#5U4wwpPuԑrI73-ōۖ d/g.Z]cb&'ZlgLSZt0Pi`kDcv]"N?ԆHkTl&N޿1)57F}U1jT+H#n {$^Eh % <!}/t6]g~a>m-#dM>ta%o=;F"ѼFŤ.MpΊO9tRT r'!P/Or0=FYR !?`ִ< hk#<$"j:2`ްqD\tV\ ͜'[UEm#Z[T,2ol㞣D@4Tãjce 9'M$@Ӭ\ h(׉*{s.BakT #ɃI] c귊Pb1ЅʪHv;ͽ$E2&Oݠ Ӡ8 0YZ=nCT~/dbǴV0ݒ`9{czlb.M vOpLP3 gԽP9[Ԇsqc֕pR KHppH%U( Ƌ+tJlǜZ94=Wރx>uh́ k&T5@9G5d?* J7킇^ESRBn"qcy].aRY_)Ie"A\LJ {ӭZo4TX'Vɺ8XUReVZsFx# pW6gǠpi^E".U%]~ S h-K/L)wj&P@\Q/Q@]p*j%˾}qv- K}/S)p'u>1oGr:hAתT>U2_cmr\Q<ӛ+3hF]BrmQֱzbCg3e>޺XմŒzGr,C a>mB  %r136P@d bo(,z) ]C\Ak ڗw*( H PLpQn@\JYbpD7C2TPSpr֥ހhKaHgRNQ\\9(rO+*/N*zkb>_Oc`dD$BSI=_:E#&ü)8Hn[LĆG8 MRn +Pz%@$(MCol!/v QEQҬ`XN@[}Z2^5J8}d\&-ô.lau 1~o&"((@pRPAY͛xL'AXjұ9-W7c7# f< Er8ezrAP d.V]Cɍ[?)X&Uh|ؼ4B۟*w,P}$Qb"}(^&I𫫸=A&Z8on!dn/#N}fѣP~h +q[ g g&r8!-S$íB u":r={N0[4>~Rn^uUG-vm$L9ٷ+fTcL\|hGIiOUxy, [tkɖҞJ폈'ihlK=leyÕrtcŶ}u15R4RQG{,+2 K¤A 2Jxf[p4z{eaJ2YiOiVB.po82(63XDCXYC ¿t[7gr@NOjSlN~c7 \!EIR6@ I1 97A0xEO4ffrA$VJ+vr L-wY цaf"FA?7<59_j,+inx0cKqU6@/:ՅcBzgV*dlAHy\бc(eXV-MM1IYIY7$ɚ-)/Vs *A۠W !!@eO>| ͡^̙z e 7]+]<1Ӵr˦51DJR)-M( l|wP:88r$wE"zK[bnX7$Å@lN 0Um],#EK:˾d < g?T$OjFїޣW U}Q3ieD`4{||!Z NئyYcŐףk\KN`*qQ3|" GV%2})]ϜOrϯ}jU'j$dz)~ױ3Ijxsr=\cjgQ"Ѿh8Dn֙rʾ2amFAhHh< !*raǜ\ryY R!oDvXks4msVh쐍#wfmJl;~<r!mdeDV >ڷˀ&ٕbl,XrioWU㻝ПfUF,?޷JlLMdB  @T&WUk:A"y!l慇ŴrLOxѵ?$f`B '[@5}SuL7jOyGS[W]鸶SRbr()eS]MNնg_xS>(IV(cz Ŗ WkRگjT9h*bứrR~+%_mYٍ?XL{(0#3>FO7H+Ma? f'H}US ع̺mY\t+>8tB%Kѯ.?M\8UՑ &;lU?v^eH{ ;+:' Օ]yq=zXEdc *'ҭf`X_Δd >Ѥ/CvNp>&E|_ I ~_ 㳡O)K-F~irƇZ0Mz|.`LN:Ԯ q ֫db]96B M.xkҬ[|2"\D&(ŵX_aNf ]yPLr\u2s }n-QfڌrDtqmB!y >;y1#8yVgK" rIc:"Ujo{5vRDQ2T '#H(99@$0v"N-˞X}К1(w||C0>%IPD|0@@t- M1 e7?p6y7vĘdF6zGϏ7NzZ?8G;U'!UCæwbCZ*o kz);P^!.=g1女MYJא<,VaR-!Jt;,Zm=&d>xAǧ8M̥Pa*upA0o5NYJ# AE-JC+%9f2BN꯱>&6`w1_(Elf(n6O*)*$=>POu*;tX}ro/}MÓ.kV[͑1לs$|pjZ߸̠]wtnB|&L xΡ}'K};Ldͪրއ ô X_ 2~Yf1sb *mj0\u0t.JKq/һ7W)n_O;*D]S\iYUh<9.Դki2SֳH~S ߲:mHh/M* zH4njROy_'(U^죉s + J_Dplk*qց\C av?UаRG,ig_UH6PK4!id?JU"cm.Y׽ HFxmƻ!IDG= $LFGs҉& A>L<+jmW&k0g>_ajq-1%e&yӾ1gz "/A|&RUM8͏ah _m?pgGMjZ)K(^BV<ھMQ+2->*\FV<66+ʨMCy.boJT] e1z8򾠬Aa1'=OhGM"uQxeϤV+wܾh7lXSc/ٜ v.`^6隯)e^Td6V#4BK{洂pG[N:]t+jc+zGFJ\ɒz`p骧\U6a!կ%vb ?N뗻wP;k2E'G{ۢO<:ТáwXkEufQ3OX vKNx>Kf޾e{/: {_g3fjݶ)!_޵{EU}k#KYx`gvcUҨv`;aiH U|ߋ'!k@<´|%ҒJ)v -Yϡ'14vf5+O)7*_I(/#3gV E!kkA@:<Ѐ"O QN{[?TzRܬe5PE@ t̜~=f_AKP!Jr@R8I/W+^vC$5=V3*j>}M2O*:E2ԛ/S.qg. UȥmyEW]9Aysj9f#IS Yݺ\p79z0 ?tL 04sƽ+?v7B4x /Y!ԊpF @nbVc68Zi!'p1.'(#cA} pMRnjDmO0޻͡˴K//@p \|qAXey'X$N0 HdCB[@- e$֯X& 9_d]EJOWoC:Fjs2T>=`-8G TY/y X%T:4\=k{.u"-=#64/iFH0.D; TC$k }\'L !gەPDў7?UV]Z.3a'w]Ih‘8QrRziIgw(ou 5caj'JEMANl JmL+eqcT:"VuŹ{Pt3>ŦT݉ܣY2ܱRT6Q}/m+ϑft d)^45%C-}&SڠQ-e{xhzɷOzf!6X N"t hס*5|܋Xvv6?E4 қk |YBz9l/7NK87=ib^n_Nh.-/@=HT,;I@t$rd_;jCo,K˚_ Pr1<p%/(WMO(|sK$5*IH5< H)lJ*{W2YxQ$Bol.Raqhs@D*gȄt1ZKX<$PIi JJ˕/1eޯgfb>$Y㧤,TFPY$ȧPrx0^F0ps]~+ZN"jEӸH4[/PmGXE&:֙BK9 `bwxD~y]P -ݔ\t뀍>g)3,62AWh5@x]VQUwAaRK vrҨ:;ZkU&D꭫Z ؗ(V~ƎFF4!h>mGPClR=?򖅠Kr-Prp8٢< J5y};Nʋ7¸Yr c(W/;h_=YS. 9us%IWl1a쮯f034&b\I=d Yvv~Ok7|f(V8iFZ|+8&@14h1,dmCz02A,տbTv?+ mpm O-_l~4 uԇ-jV&c*L}y_oe[UkTnr9I!\} ^(C2rWvs=J Iv/*rO)LU;K-rA#r3)'oAr:(k:ͯ%LXjK0P*wa9.oIm#Mvb c{;/maQR2"k%.왉t DY>LZe5&{˱NHG\}bH g(D%e6'FiSPIvORp↤D/6QzW4J$R_ͨ1Nd$M {&C+_iE[.5Jqams h+;+"ySq܇V4]rZI >MxTd@¾>A^=hj~g($? > )l<"ߪ;aΩ `}}K"_S%dBAcD %QJSqXk`[ϿDmL&d>YDHђq~o=Ģ;4e(֣bM$!&6R$]#"We=6gΩ*iOi,rf;1< ,ZeKogh'eWp#㓖JL2q.T@hzyND3  Z'Mwv`V}yIq<%krj4F]A28p3[T s}8)csj~ :TE, I3sr$M>Le&·'-ܐ$ @&u c#3.;==XŚp`Iۦ)YѨHv{ z[( 2U&YJ=Ӑ݅>Ve]10r|*(4zҏ^S =g2hG5A9461"ꇩy !X[r/#q鲏ʾ`똎%)ƌ?9) *h0cHB j"  jt PX{ f* A5 ѝpܯ]Z矐*;Q\d}7Lyey $`ؗi'ˬ?6۽{ۼ57Bס߄W~“TSD_" U#Ld ˻&u ?gD @Bi+裆C(GW y•; I1E$c! ]0GFRIq`5'06(Qll〸v;}*lhٶ;E]5K5 /;hw[`d0{Q6>`leأ+[W^;6z1cN~Y#JdhZPLt±06c@\-{AQI! +EE#kR^QKՐ"76 >/D8(-=iV¹cٰ3v.]=R\ms48ǰw6qqbx+=mzVĸNbՂ{ZO4O5 9-Qm\zrMsbAѳ ^ _KZ驛#M}}yađ~j=fۨ{qˤ5}{粪 0C` fzI7guFb~[zϲuҪXYwp7J"Y>-F }֟s0b9F4+;а 2Yr;]k^Ⱦs٠7".7JҚf "} @zSA L? Zo"].薉GqrVR겶{ۧ1j$>}-%g4tR+{zW-?ASFȩȞ5P_A9m>}+e^7 vlG6qNy6=_˻5dhlkW֩7%yWW=%TLk{02N!pVVn?O~g0{?0G-X&yNT2_I \Xk=qx Z)按8JR\URu>טf(_(ya$G76]"bFRnR:J:i[VY"]5 ܸ X1V0?(~̬YG@wU~|@ 3e~Z /!iotb?q`Yؤ9 eHy*۾>P.{Rf٬<^LnUB2;jE~;Ńufiq( 3qVumSNˑ_~ŧS>Eqɢj.ڤBtcHҡE٪gd'*DU>Hr3|V(}+ic>+DDe$HDQ}Զő_,½!N8Z؋Y;m=QeWS:ڭ663mx)lx]A7Z31 t?]J#4~)HJ$Qdn5.W7|)> sP4)b {fazXGVzHaƑe.HL4u~mnM}0G'S!!^}Ӌ7R5BYTK_PUe1F jf*kUmh'9)DhųFc|9b=ʊ'n7%(W` f"Fܝ W}ԛY PlͥҚʹB*T`oY"WӚN[a^OcGA8;eєo8\{*/,댈aԃ~.88e~^"a7tj╀?f4~;!&i 7򽡅޾~Eyڡ+ڵjToaH3nEnO}K(}}2šY7l#o<,9BUN?}Bk0}c x9uKK;mbjFɃY-lNKMMC \x:PI^:/ Z afZAѷ0]Mȍ%M* 8cGjclڴ,g+ ReqВdŐ͌zԢ^X)qʙW8R#DIBU?@U;9 ~A7enD-"#VT˺ڠ˗7#km.LS MWdMr]wm_H2A} \YkO!eGv~ ­Z;7ٚZxL\}+G8[ڔD!&J-2,FKnVA5Z$ _Z)eZ |9S-rJ:0m$W|3)NzBPmfO6Lfi,xV4xݘZ"kpE/5>Ab*%c.%/95$.is~Fs-=1 bCŲ>k^aB|.%.a?>I/?H=@?h`Oܵo4,$ۑmD`$JV/%BUĺ/0/k`~}䳵AK,G'Iƛs`X^x YZb}ݝΥ9(Fx-C:씤7\̱`RS@T -ÜהL[isх:Ɇ @ \rPw{~ }JIoREPȭ&D)4 CTp ײܼnon*d~/ٽY='c{6i@8D5LEup%l7r%cj/Zf)e2wٌlg/o),Pun<1+_WlmH/bgjujLrgq NǬ~ rx9Bl͹[Ņ39g@%5kC3\Il (EKloBVz g'!3}_-G&xlΞ:"c~_B>pY#4TP O\Bwa>wݨ1 Wf̚XsCֶEau5"0M^j9mCS!@Z%䱭ḺymNT}ILM c-h1Ƕat1LmXerꦋ)ɏ g so. 1f7mJ½+=4=iF,V>#WӋHo&Hp/!11WܩQ|/ ƫjr|(ՂC~U!X[:'tG~xs-ˡ(G6֭=$. ]Wl4.\f&~ޱ3 4x>*C_-C+_mn^-Cyq GT6{QmpnШax\cf#<|۔ئ}{<:ToXq$lN\v|OMn:fq;=Z CLWE_/\w|lJ^ 2WQGK׹-QF;榮XU#. m,܅1a+.u.DƠvn1>PTjn_RR)n;| R^dX/b.?@+\_ͪ0o}⻋&c gL_/:WU oEƕ+aR[nYIO k h]x#׃#ŏ(3)*B :syRËh|(G1p:xn| Ԇ~/Z[5nV^CO=0 `[ /?sDr4? G3jcFLSp9)mDIb#NЙt* ) eFLLۈ$UDX"(Xašb^–&5h:IUҌYU9m#M' *j0*=FQ#t g%8u5|zG!vv0H(ByDQ:)͹J[߫;SquS1{ /kjpEy€z0LO` /`)Aj|g>u6AJ)8 {FpHnywiVwavcPGEOA| ЌUmDu15vs7 r* U[ ʲqORP+kr3lku+ AF@e-xWI#T}}h&6|+ "oך` m`iVK;˚SɌlkmT"zWf 2K<+8|`{K ؚZpyzRp Ԁӌ7o2uٖ޿%}|^^:KuSHwJGqR).\iMĞZ_\BELng;͖)z&_t>aS[ÆCuȇb[0Kbc=_tч{$eRh [2 ja^%=g\J5Pa8a&!m>Ϊ40t T/\9}$ oA*qTAYB^TH SWYCڹ{ǔkϿ>njv|Oy!@ $WR Ǯ[q&9o[TJՃm"@<;oa?/?kG~# JXϖK'8|bXCoǝY?qWw=?ЇWgP ZϮbڪei|$[pE/CO\P5iCm|ő.I(r\R)FdGRKvyjrDQr|{ux#%f/˩$Ӵ kjq*5J[~ہ L>[*>,֑͙$8wđ5^ʐYz)R O.m3Q( AB4gkÆF׸ʅ޺ fSc$\W&=LVs_0)|+se~Tl8JV[[*F]bi)|-"d?FS,*L"F^`#}vdC>h{S0u4.yXw=BΔΧ2FK IlWTV4Ejcvt\9?MaI_sæ8@a1g EVƸz(a-R?@:7g+g]C䶠NjlGCk`X$hk`<ڧnfaA{ɩn*Um](vVqMn2FL '95VZ)Nr|JiQPZFI,>\J&DwvfՌ|[/:TQꭒBn n\9ȥn#=ڊ|[8n@t]#b. 0qp8ldN ]g~8SｻCr[B'g+;eO7$~M:!hځؒ5QS$ˌWon dTg| X]G̜e/_CVrG',7p\PP ;w\ rb~jOS7tIAejum^kwExa*b=[҆c W6ՊKn[ɖvڝtke(}5HRt{Z+.k-oBtDHkWt@ϓ)3ѿ,hpjnWfQ\T[k Ig!0'ۄ q &">|Q\Gy<׃bq/W>X=]Pwi E[^aF|jLn'|"[l#l~nz| 74uKuFGb:6< UmPsRղ7-jG#I@Wzs " ۝y0iy[˾@7 WQXM1΁}p5ڲXN0 NQ"=H "&%pK 35p%*_.15h=`3mcWZO~ 85h-Qhɍk,5Ҍ9>r-0W#pGT_cY]bAD4+pEq3ʧ#7EA?koHexMuxePn"6uQ|1}'::$%-q!L}N؍ [ Y 73=zv/kwv7ָuzΔ{xxޱQ%KYChw-/VFO;d#c6ތ,/{̥\⟗Q=e`6,_,֬`vATD[_!>Uex{^_M[{ .! 9Qp_3k,o.5ε{kbz, vx;j+ʻ|lY|$hČ|gqO/ʻdRp4}0x#Ń+5L+ 3GZ /ƞb IA+GG\>:GCe u\TQio`mBR|nA}Uz虝NHp CunE{f Dx8NfOcG璊$GHf% G舃bA)O$ f+#i4a&d}eRyVzYRrBT8:0{kߝƣ #)]Uaf9ʦx7=e4D'Ωw= )q 'dq^f'l `ׯo_g4vzM[%(ʩG5o0/Wq˅B^Ϻ z<% GM$jC)h'!םX*HPwҋ/1cY/*yӲxX|Z';^e1*DF:Qi&E$ cIꑕu]eU| r]   !U$%\q"&Ń ƧQ\A0؍ 0_DЭOp>< o)CU>\KΚ?p= UQk+qrb}8tJ&*{e܌B]hxO Ce&ewW$י2ʏ5D doƀoDv9&@y~xX$iL{'x1 qhȭh`kƁQ1o6xy\I׍tW얢d~ya70@EP{0* 5\[=mN!KN >< =Kj~b@!Gm L#0.Kx~n7 ib!yjWM5Zd3O+drk ;zYCR*ׯ+ BU?-M7{u@(nզ!gQIi(T~dU xB$ւs^`꠳ %`tAwcB|X\f47QJ#QG+>֝`]uk| V@'}֡l/T?ؘWK>>b|.fbC>B{Q.{f倁u$<]so{= MO8|"eVr?F6Pk/iF^\Уf-B4Z4F!AYl.E&?*>W~gd. SAZ`cF:i@ 햝O>PN-]PktڲTr\kXӌ6,Ԓ}s*~OξС<`]vwdGϪi熍&v7fLe*XD2PVI |>?UiY|s&-QP߸q^Isuf擰y2h4UfEtEt !C k*/5zɘ2#=~"+|4ZVSXI>nv Go8F\\7&-̩uYpIr!?(BB_br 7b\@ -|I-x+卪 E$3o74(q f3d%Cti1(;T$+c]4K5'Gr'@n.dMV˒^rFvsڻК(MI\Yh_K0}*(HB[$DƜi.Œ唝:P߾)?A]HCJgfeܪ20vi˜52y{،F)JlE2gb؁"v9geA?kףCKӢa3I:U2CqڬuYZ9Z1'I7{\Zp'm\e|301zBh[3]}h⭗RH@)} x\ 0~X}ayL̖wf{:* kv%: /S?M Q# w1:aɕ &=D*)Hl8dԎ00--7yh#g= 7GI50Xf3J[99X&Gsq+ +*&ǯftWĵ#whා+MT'oH3(s5I'~ⴷ,\=M8.2'uỳ0~(RMG˕pIX>.F8_y'w1葑AֽcDkv:1;rY%{܍Jz;Ctm20&BBƎ(K/3#xTpٓ4l<6R@Əq*&W$}v`=&A4{hw0j2?[P^ujlWUv=ڇy=PHCRkZoIԐcv2}.=h\4|أ>m?.XJ,H\jeX #qNrYґŦU؍ C}=6yjB4RkR(@491g*F_ζՕe@Fsc"W]1CmFonZ,ՀG5oc6߰CL'xjc 84ۯr oܬE(,(W#7 ؗfژ&BD3 =R:c^Z/~5; cqyB9ŗF>Y?>5k8^9a;!DxU~] ӷsr]Þ^B>C3<\#{L kzxN)YxrrM]a2n65Wy l}KoO05abb]ղ~okh/?\I(IUi#=~9y TvQ;"q>m} "Koh?Y· lgUϑ4LЧYt 'l#/5mm 2?×p_ r΁?K 2 Xxog367w OM2 *y j M[=4&󆐘yfwGw&yQIh.Fqؾ-;NvUb O(r֝{ np?tz `wA5pDdՠ[nxx2K^ #n49`*lTVNR5lS=Nv` 빠% \0[N nXj) -u\[zxE@ihimdX4Eٿ>n"&aD*8Y}b䁙}+t]2(o3" 1x'?ꭙ Xͳ9h֧pLq~:oOLEEy.S <uaU?*}Yak$>_/rl|l4L)I' z׬&#%RK-(-w@oJe "PoU6|ǨQm;`]*ʛ݃l.XV.ve.1f+2GH؊`xg B?)j-"` 0ia0ؖttwl/A,cjg@t\/Ԙ5x@lqÉ!ȫZy $Y^(bx XwV^6!g̬Ju /d*1Mֳ̎ :K)Ǿ7LP06"u^/4ot/xन聥:ٖ $nb!33*Nv*直wgXMXM e@X+ hҦ@s?ut tz#ȮQzH]Jk! K/96Us隠Iv5rs+wtp.s.VdOrl34A%y;(j*BP̢maE5Xèe $Bݞ(6C~c_(]op.k%ިå vh ޗ0q``!L&|pf8Aef˚A}zp}z]hƟlvӿv@0Z O7dexke`Kݵڡӄ߆(זl~7{-RLi5 %O\"1vᄦ%yОgdJ@Eh!Z 4]>=C1DzIM8hޯCJRP.+ђao6N;!!&Iу'u]3=ב52NC)gHy^"fĚފ~5YժEޅ}aOQcQ pYl?5<#`16bxM?/J"Ciw?N3S_5ISboJ eZvcf\&lr!wѸR'+maޭzۇ@㝏d̓NPsEU> WNzͤ&U{ 2N3wP܆/QH-1RB" LUk5# ]ݏl`n8?~5^Dq]-܁O)\{Nz 7owr fbK pmK v2ȩ Go^%&05 y agY?['Ρu(o*fKs Nh?,\X#Uq58g8xn@aECy$?:Xw؊?b?3Kh˘o0AE/H O-$ȍQ!n>i}gy9N̐I͞uO=,/36vIk DGɮYng-(܀::G͙%LԖ96 S%9KBK#_j?5H-AVUAp靈iȏĝm9Ε Uo m-Z+)O~a"͡I|EcE6.D>;VtWd1f ZIjc {iU'OX4,dmM CKĘd{19߇vavވ;9m4݀pGߡ+9͟?zj/x[b}JZGqZ>)BBɛ HD ATȦ& H}k6o@Y'I 9R(EG `1=i2dAoǟQ V 1 @#aC_(vltKjn@$a"46Bg jjL]J;q&^pS#Y!rKZ "N .+u)q ?R$oчROgWƎls(nֆ"˜o޳kv_܇!-]Auq 0maB߀8 IoS\3 eP:^i>^o!@$`-`# ۵ }H I=nVdtc3vX,L 'Wjv6]uC|:133 p)ĖnǛOa..I*@H_&rљ)קerA>A s !s܀Gb}[w6$QY~J}qJNﬕR .a P+@? {Ym:kGńO9sj:˅`Vyda苷BLj}*\U_7"=Mڪb1!n=-P6mSR' h ϕېjgD';*7qH:KY&[I2:س.@i ՗&Iy(9\+t&BW)PEKZrgyc"B#Q -yOcEE!p{T\_u{̩ )ެI$?ͬ841Tp(lp+1LDod ^}]_]R\KBDrE+ЮD^D.^(#Jf|k2,GZqSW$ r*R [;οN IpU@+=ScMTQo[!S 3s0er3- 嘘PebOCP2]kJ uRIF?,NdBkNk>Rv*Y^_7M23hL7T=:Nd/mrDH?u,4?-hGv<݃. _oFw{xq"VG'm(5:њQ:Y}uh"Ќפ Cm [qx!خ؂\i($M$87D%=9G/3ܧb{W ^: ԁ9|B螡^B1' (E4F[aepՒxT5A/:QDK OX@&2 >45 0rͻԀ?H-:$Us8"1c lStu/N#jخ=R 3TpȅMPh|Ś>Ngٶ0d# `kڲKI^dg>o3ΛI[kGŗ VqPZ6%nY1}Kedz×Gj ae#_z#2r| PK/Um~_ )(De.XSUdVo-otXj7>[9+E_X?Ϭ};qb$&'g_Q%?18_^7xsOS۴xpJ M#?\)׋O#A/cpM 鳣m/mF59glE L{?CŲ⠜Ir|7|7;r̉o7oɤG8<@vqL]`w3O?]L;#Q]uaU~.PWJi!U:镔] Jf7+ȝÖ~ί'*SĨ&+"D[6a*&UߵD!QU q),(ɀ!Rq Ig 2-oh%/1h"N7D_ncisfuIޛ QoqOPBZ 1m; ѝG z;Q[CT [g@`@KS uU)y4_g陲XG|}bYE 颊.5T "wI=m!m*,Utlgf],Yt#~E$-VX.HJEk">5I\ }/> Q"!jz?TƆo* - {RNp᥂ܔ~ 2;KP越>cCiNިک_ÕYi󖨡GC%E $SgI~QjEo EgnjNxI?}b Y4>Ra 2aEfSۂt$ 2S*i C)jx>O"q`׆{"}vbLЈCg9XBd쇇fbU`3oUI1*dd=*Z֩υ7]O$/}k O`׺ _EѠ "|Q`ӘvtWZNsVaNPF$^*'xr |[ g9XE' SKzxn[TTaJDM͚Wc{Xu#W??EW8f3cw['DopJfZ:%K;Ti⟏:)d%M[~Ò@r"q7M ,^|ӥ2m/zic3;qXnRa8a5(xG?P aїƙX%_dz=B7Đ. yM]jo$u`н蝩w؋BXKEx`H[ϣѓz]VaHO!3b <x:=xbzQ/D`=^2$\35;jtJ1<q*mӵLTD* .ӝI{dL8iiԶ :y˪P& Wx2GN!}ɫj  B^!԰ ۶?$듑_f Pj*ӠP_"(vrHFaNܡ `*j5^ :eҊ_2= O-O*|aܮw@#'{*d[Ǟ0aR0 rw~gt/Kkx"?捷]+C;v7LO88& N'12߂]H4J WL~n(oe e$'?ܱ;+7: $ΖظD3f\.t@;$PHJ OySR#[6j %B^-2ir|G3sx5$dչb=ܯ|>ګ[c0U.Jj uASS6)i}=zgAmA"$n-h4%ʹIZxpyRLf6%໴ywGu^m. adabEͤd8)qa^ BCdq zp/؀+0NysyEAgM.,m0}@煴mau@#ĂogڀHqݔڋ 93>BW.㷛' P QQ,|)"l ³j[?Y_՝̨Xf.`5L]Ċ3,RS{!.n˜Q@-Oysˈm/"P[ָ 4;!p'wESJ>J\6)P W_%O'e Vff,ȉj#:a [ĉ+G7aGLGo$Gq 沴X8ɞ%'~ =Sgs،uD'?@пC/@}O!k$wwk=g;!fYCϢX lW&q2 zUduIx?}Yd0}Xa"zV-`q͢1oǦѹRtmafjk{~-\Y+U8s1pp4fx; hN(o'Nۉe'P"RUKYP GyPwP0) hwvQn͔^ega3\(Os|2t3I:"'HGQN4BhiskRE 2B0P\Gl~ B?2C)"PPHYifJlnfUKpH3Xn5GH'ڰ{Nq ۯX'7kte!ɬg讻<ȓz+o*4{-N/|uJ:GRH|ÛT'#C|^!ն^q)NQA0@VrsƞFb%S7\~ǟy[b*ыw|$S!Ko\4 c"AA9<^B. LA)(p.iҟ<9H?kBE~PS@gBf+01/X̴@ Z <1N|J$[Ji_U}NG7X @M|xA~T2p &f^4#w߾wktT% ="$4fƙ7QLIdj6>dx*),2jOHE%De /}]GďyKy=؟4jџ$@{j$Bϰ[W`*y/CxAS3ʴo@>ae7Dw`p&7ƶ'9O2 YWCm4T',t,g=c,7gCbUYY7a6Hv+0R9ٙv.G-y[molz_g][Cm81x-Zp! uHYR3-A=m;8|?%c 6.P&43-a>~@#|;~[l5؉5Eue? UX[XLFv5nYHᅹ^bB)WsN-ʊΩ`a%W+%bg$y(,ۍ}   5!.-E|Ua̒y1sl&J%.;㫲*߫2MT2P)l6Aٞ %q RO0UE(*0TLUTX5l(Q7[rRqCxHvempzkՁVi.`:jf4'nV ggNL&VQ0]`.bnᨖd>)4 3CD/k0J6;RekU$1<3`J, @,dnsu&Y]Tv'F-Zzqa&0#N%Mݮs7z)V0Idڹ|^)_H=I<9lp3N*0L[:9vCӫ8?(LX!N JT:ogٰSs_d;,,})k"p'ͫvJ{ OC kV-+Mrj5ޮ7>ig8J):5!_QWx=.Jcְ5S0>\BpQ Z ź"75X>*.δ$~St2e%Jޥ*ˬO`I >M0Z׌۝kw,\73=4ٶFvEp2og-=StE ¿h ^fY5հ6 O1+9)up|Mwb1R_bud-yN{CrQ񀬮ۚWG(dv3:dg Վ_ǜ4<XEZ[KVSȷB5UKX&3|1qBNKdS)BSs=#lՁaY6 },|Ff=0mA}Q*sBܹ}]݄90|a ?pa"P~_XwۖH27ۘ_zJt;7qm7pj0~J5 Gvq|Jhq咽RS "Bq^TAM^b; ;nHӥV2K}{)/2t7-c`asq4;&h\vCRNk|["|QzE5Jd&=u4aa#L,-NBb)"g+X0"8ހ9,p?^Ƹ]@o}^cS,ۏ_UOcJ9MK"پŦӛZvJDR>0 ܶ oj94rkk? 'fRyWV֛R*9~)T,m;\g8]kfbE˄Ͽ"lܙEpo@"evh|gš,)& wz2,Z$63#0_ E`k~b0]f2[UM?ƪ䨅 [{y֯ Ԧjd9d rEZ6]sZ2WtSR 穲@3hgm2VNRq/[+>~7F%6$uHp7.= A5c>t9sT ai/{jd I5|-Cm5 ߝ.acرOHnPj=gq/UG\r\ \Pt^`os~|1q/f,IbƳ9'ωaIs%rf:\0Ulj*CxMä555߃qK*TGf] F ZuF3 0@ΑgDZ,WC~8ds9ҝ2K3df#*IMYb=/ 玏S-}FF̋ Oɹ2VX72ˆpWO=JLc{yoKO#WHzn9V"^u|-71 viRGV e?swe1*Oxω۶_}Aq8/<׻ ԓNnDA'ca' GxV߽IHG7l\H~ݝSrCC7AovWM~_ٝ^|}mUo@:C1]ZyXz*8VWTg!>ΖjUl2ew됬@nCҭ&,΋+en#Ļڮm!ʠu';2s[ZTod>ɮ>{4$ܽmAh G"L dlݸuEyjdDy3gy%uT zt -I=̔/ߊ;y}XrE XOa  zrV3޼ѲNq +%q_KdY.h_?:5h=ɡ\w!d_ {;ާZ[ WG:oVo}Q;XZbּ/S 4g)PGX?e~Z*mݳղ4qy?XKly^lXW%oP2}2fFiyZ}w|6mRn/tKfIvn{ZcUs5U9[Y|4Rq۫k-m@!aɄ<./o3 4z0QckͨX)Žb-_<:g8OͷxsLۮg܅!3|~._!܊S}2;`Ox*puZf%'\9 믯lGsbZibͷMnIGjTZWW25TSNvsaVΦםEP"xc2 I.ñhH$&  s(b یЧd2׹Zgd aDW4Ud@ APM=0J 5@Ke4JoBF[늝5w\f߈Is_m?KРy˗; OA2hIϦ@9N ˙\&1iꝎ67 Qsb(;)+eN2 7I f]Մ0+tQu;`=^5sdSKg}*19lgK2>  e{(ys4Kx MՃN5?74HwaŔf=7!HT&߅_E`/XEK7Vׄ>$~舮)May5lB}yKLt?YL R9XnIɶΤ*Zi܁0|)&+ZVNvO[čf+crl)pѯI+@,v+z:Z(zⒹHBVB.r+ĉToF:fmh\CB.AAxKP߭h"V+.W[Oi+-WLLRg"MrHla;ڳQ2 GUD mR1/{%>td`k-TlU.߻f"Yױc <&Rj-d|=8 5Dp1ϸ:̀}Zv碎9jչR7BXHhF ]MU^DX?FS/n̍luQL(RaoPX3/ELx BW=u~ƽ#x=Z/ \ESޔgIЁn %pU J$yjsy߫@+.jIᑍkhIn@myL>L9-j.d:,m%/&?iH?,/?e`p;%jU0u: &ƈ;ѡib/2.~'U&Z$y):\$,bA"q(SZdId%Y A"z -iwb*rO1tРZa[(F{[_~#dt# 0cw&A2`NGHP"ncKmW n\m" `V3? H%IUGSnL oWEuJ;[LMyr 4]WsWٌE*S0K∳dy8J t`\l]!YTYE^杣q/-J<ۓԸ5?^?ạCHi<$ =;ȉ.@L)ȗoq-1'>!Ks>/}cz!JLI2EA'9{f=)[#0n= n H6Fݱ{|P/’Gu9 IR02VΏ,ىCYr0H] |<$, &d !DJ<\a !WjļX*Se>RoUz9T70{Nhc-pa)^X4yQÃhs:C{r^["11_J5浖7>/hnDL:d%}H^&x<||Dnb׃ IS$/R`>hh,9Mg\$UR2+a V.tg~(qq4{EK*=BIێt"C `׀B2ߨNdLjgB1p8 rp${:b bb4&X;AXmڱNZ#S2z1טn$Rҹ* f"Dd#-'=Mf' ic(5}kaqgƹ, _"ޫk 4)(QJU|y7k|oN%L#Y )YgI6DТ }@[G|V)%$-f#cF7`G7 03Sڳ;*%Q6PˉHZ<V;-H_Ͼ Gm}QF%)wA5[ 9CEƀx#R;2Jj"c$ӟn侩BLW$?j{cWE(ŲhL3h@*biY"\h| Z8$8K"Y,:`&\ԣyvfJκNF$L̘#bEYOU36!&T0H-Z EX~{xY%uRU[ HZbko=o5Z(s \rPy8IӔP#C?ОdO: !U5=GgƈRI ~6|t9 E棟L;ݕ֍CE$S.xpnM`]0Ҏ>#] M<3qwTov2tmFQ^j{uc@'z2]dQpjex7DQYǝ3rL 2Gi߆~- }ou蟳G7Z!B >PDgQK.O.H|j31&~ B(c52S`UCuH- KI|x>(ZP=W`lktLu,q~Uђ٪cm|7OdĥLT1/54X<[@"i]-oR %wϦ3bVG `{a݁#]l7twg n],tE!Џ+7.18z A^TfH+,5FlwR po*vcW$ӓ:BҮq?u y` 1/cKi3.R+|i ٨Fm =$?o4AgE!j}ty# xMsxpE ҈kT'oxs2I. 3ƜTMGG8|I B RB@ϣ:D1XΙNrnJS# |dHFf jXjuo %p g1JP\IOGQ(+^: qϑ'7xK $7vnxx_z]G)Qm%,e)8*TF ,<'h+.'#.IT,GnDV./^ӧۡ`SBIf'*H11BC}IYXPa-IBe?\Te&jgYH &C=8pOy.2b Lcq߄AJ@l[ JOz5IJ~aigSNw/i)"[@Ղр,feݡ787ebX|Ѡ1*r9)c.5OtL)CC`nzٸJJVVc/wyKgXҘ?XM"Y,m<tqU3mfOPo tJ>{WWã\ԝ0%,ګcXͽubbZ?3u,?DZ7IY-9u#sQ=EBdF,#ȁņv$'B`ƅcl$~tqm(& AmiaU~br[ Ф_y&G5q jm,j`!v 9CTX^\=B# kM{x\„k*La's_8xʦĎ#rp"ҢB$€$kepG<\'0zA)HT TB%Q)hA}`%~'J&>i}@AL[Ep+"-HfÂ-mY^q~yJb#ٿT^ŵ͍^i3ר[ѼKQ7NQ k]E{Rd@f.DD$dm)%$~%]*ڰ7rAz\/!t#DF/K&G$PRPdE+dēV8<3^!Ȱd&y},ĬwA1 .iJ[, UmɿjAQ[^'5K@rS nǺ1bSk%bgd+HS4"_0%+dd(baAT y0ΏER 1C& 3ERn 5tAóM(Yf]@Gkwn+"HtQ&Ӟ|%[{rBsКzZϨZЦEŹGu8o܉^3o|5:aG6ײB+EؼZO-+Uy Վ֤w{lxc}znR¤wmdMz5k3=_Z!e(0nJ,u.xvyzaIi\Ef=>Vg$k60ǖ$jfM9(0P"{ծmu9Fc UtOhт#|fc $ S]Ȋ%{6xgyA)cw* _]za.& sĊ%Z1vsadҠ$F<@⹂1x9;$'NlVyKER|A#Lآ NBbjН5SViv Tci<_6yZtӷdRkw?u)y[Ησs}K?h.$̯ǝyjw#`Ԩt?P~% XމmZXg%v&4Z&<` dwoiJ6zH8 Ϝt̜ZY*=_3Ȉי%Pn»UPNK=zhMd(f,9jTʙ؜ uBiL|O#;(-S!/ien ?GCfC0OQ){H[b,ޣ1wib;QR9{et%OəOG+@Ֆ]OTw\FE%MPFLƧƾ9dyr\0Qgyf%` K&f-y#1h^mn=3cFQL9N\~rOb:t)5>>>XNR|s+5&Xk^cG|%ʼOq`ԷcZmLR4d^X8y|"өqi{<*(ESuR^-:̘v}hXt4f&jF96S6wR-- ?wT F)\`# L$t)"QbibZaZFrMV߿VuKC]¬z֒rI<ΫDxxI(Rx#1KwZhas02E|F9$1.{dxRY.lv˥,ī·"D<+:+I */Vڡy9v1TCMth_DcO<nWN fTWr WLgs')kA[1.@e1ATkxa4`<>0~sl^~+Ϣw1fqg@t#0 9q|q0Q?Y y/G'jQ0K~n {vx0j]<g"YUf=`NtIP`.A_$/_s/FEh0dǖ7++6 LtZ1m}q$uU%zv'd.6T#'.o1Hs0ȧXZ`Ui,l-朻1&Y92~Lm~H^^^F-1s^8)?j4&^DbʉfV"(T z֜0(of &H\ɺ R1}*gرC1-QUFkގC|K$0B)B*m!y=0F=UqFBi<[qhg Ae+y &}#@ѽ,Vթm+PB" ~fyZa4J`Jw!(KqIH+mq=0܋Eiَ=Zxhuh2N%Vް oaO݁`qDR>2Uv{a~0ۺ4}8@0״]?"LRic150;lȜY1c}'䆶7 %@Ed1IRrVά"KK9lJU9*{\_˒wWueTfM%@-` ,X` ,X>,X,X` ,aMju,vգ~+H FƳyIԪ Ͱ JxeqvtN " elxDxAsQ_j"E=a(myu"Henhh*ZւaX!>"kOm33dϺFC0-;= r*_ߣ$I$IVpq,EOH" (aX!ΈPƯecBZv{d$I$I$I$I$|ڋ"BY!It{$I$I$ e|bތ Xq"eZ:)eǹA@\|{[|c+6VeEkElC:7L+Du SHˎsÚLDLDDD3{_eB0 p!Iߟ+Qj N;{pZVD-~㋛Sfb̲tQf8猠h4 )F诧N? i__XBP792|Zkֺ jjӌkc* 2Ie,)kԖӠ@Bc8E3/WA%7*6k$5^6HI=')TژqL~P!6y@ 1R[sQz'SE^W<]Q KQT=֏YW5VdQev{Rz6A/1}=k9Υ5qf%%J^ife<]*TaVf#LQD͒,JUFmfս`lI?/k,Mo7ZhlQq 0pйR]6pwp{J[cpw1og%-pyB hWg]s[D k[ء[ r Vl|'bǖT# 6,td~g-9@AI/+Z3g \S-OB4bʎ^FWNG >`PJf<'@b<|r_\[5{nM9xQɬUTӲydn :yw ~<8B%__]ω ҫ} iW D0`i3ԑTY,:fΪc9tPsU.Q>/-}wh'%سy@*֝(YQ8888i d$h-$n;!$g,Uo~Bwć @p=Y%T"Q7deQ)=$_<#xH$DfSn >ŴRߗyeHQ3͌s2dc9\JQQIHbNxR9L!VNe.=Kߟʜ}lh#^=٨7#^e9r*704261ihnBw@$QUꊝqI}[T S _bT-S%!r-ʛ~ 4E{IVrȦ3ӕ*M q.c}ˈ}w>af +Z Z_ۻ3c$3`\>a 33fFM]Snݘ3r^s~Ə2Kw;ҚEx"kx2c1c1ZI?Xi08$"BYRUUUUUUUUUUUUUU}y.$i6@D(+e[Wso +B_^08_T "ߵr\.Wف9ڐzFPƯecBZv}_R "R "oqmHhjA2^1L!-{ Q'@w\UUUUUUUUU]3.M5ERx4?1JZk;Ŗgrw|mu:/7gh8;D e\ܷ-P[taX(Ɋi+a9~ ;ZH2HQڏ'Id @LyT 0KjaZ8ֹ D(Ɋi؛7%~r] *$p ֱ#37$iϘ.A9Z%v.WŮo;776QUUUU^U߽aK*Kjwƃw3!0[B$j ڕ%蹀 P^'eq#ъ|V!v:M2m>듯ak˟mvܙ!JuB7LޟKx0EF _ @tj(P vԯ8JHJSj5q?rci&a(ƈfn 0؆tn camRuk/<BP 6(`$]5"@*aYמI$IO$I$I$I$I$mx|eKD2ޚnBZvWOP-9e"|5ZT& sA$0 BRJ({_*_Zr bXnRI$UUUU2aڌYs^>l:$I$I$I$I$I$I$%I$I$I$I$I$I$GAY˚yUt4A3F.)`wYfhhz zN6\m IW"HPeMhvzFqIVTʹls"HfX $+?@)d9y4h4h- xUVt:`'Mg_,-,Ui~{ 2Ѝ'ёwz C? ;h,X`@*Vkji'Toaegq |$ @i@gP Hn1 f7#b5< "G֢Nqo/ͩ $0ѵ&Q;#',ۡE3,`5#¹L.)hx JjaZη& &$tĮ* `[9ll : 0&ʳ<}SzzڤE-cfx|';;_$fͶ4><Ï M0\&esJ_]'>g|vx#_VڭB\i!5ecBZ8m'?!18C2^1L!-{ޙ I$I$I抭Q>K#733+e08mwm۶m۶m}p|[)o۵R> 222L!-{8:z` !B!B!ԃ:W5$I$I$yfffffffffffH$I$If3333333333#I$I$IJ$I$I {Gw kAsy.4K DI$`S* $IVy\Qp| gK*"weZ:)eǹ/@L;I$I$Im۶m۶m6,n. I$I,|c I$I5Y$I$I` I$I$IJ$I$Il۶m۶mP*@""""""""""FP> ^"2VjBZ8x_$I$I$ɶm۶m۶+PDDDDDDDDDDpS13333333333@DDDDDߚSDaRJ)RJM_ZkZk=J:c1c*QeZkSDas9sM_{{?J0l (ujm۶m۶mUUUUU\SUUUU>(TCPk:)ea2)6$^"2)e۠ @$I$I$I$I$ٶm۶m۶Z }s>serG@Z.U:( G( g( W(Nꟴ_9 'jA( p6U‰p\9 'jI( p6pp6p6p6x*GDmV‰_9 'jCrNԆ`( Q8Q:#TUZk~8Q{gNԪHI$ضmUU ^'j姮24 m6DB'aabVp8!B*%۠P2Rn "!I$)I$k$Ilpo\u?0 @i` "c9 `nx4bʎ^FWNc<__|/P Wކ~ ZH6#;@p{41W@!@,@>X,/dca+D"T&펆B=J@btKכR^#RN/2j8s**`\_SK[G--#וa5/}hEZ9~xiKu890q+l`+*-8NvAo7f!r!?١ߊ4ZMn9w9mp4HDyul67ƨޔ_A ޛNjWiŻ8(j%\\k|emYr/>x!z"ݸ2cqp(Y>`ژrC Jt{VD0tYV>o:$[Op鴔9lA5VQi]E1"|-zϹ6Ϸv)vNT)FC J>ĹK3 v:(rSKs+ pPu҂gq5ґALj*;v6ĸ* pa"AHU\G#%jma8!O}a:gi/ĩXIDWՊ1cW=I5[]`#Xj"5vN.ZBhkjj עV,3;e;a'ieU7m4/apti JTM74 첞IE yF2RiFS+j54#6+GDD6 j8xZ !%#B -=EʂLl]vY/ $ o" 2YlEbTSrTUo4[N Gt6_,Ww3P8I޿(L3x6' R*4r J˺)$zw1G>kt ]V01(>P$HerRhuzw}v Ͼ]\=<}$2J3,6O H,錵>]zO@m:OBЯ , ɻ.=TYGsg𣣫o Ү̧niܮ<{ڎ'L"W(;]S(rE%eʺǦ1X^!n]:jSg9#xdwݎˊiَM_a')eU7mrI\v<_(ɊiَAʼn1i7 FP 'HfXDIViَA)Hs IUd:/+e"KJ6Wj.=d3GYZjmvr-릴·cƇb98{5#! KDG@61,l\<̘ѻV~Y=$d&\HQň'^D J*IHfɮnfWPb%Jr*ApTk$XPaE%Z3js>N }W'lTrRᆛ՛_l9rAWVb%JIn^FMhՆy%֣W-\9ϋDve+VYg}d6mٶcׂEKq{'"/>"b="L(1BLJ俻Vb8e/LPNoptrvqu3c`b1KVDDLzd ihDmooiΡS \ܪTQNQ2ū[^H DKG4:8nf-nw[.4W54Ҋ<4/݉K 0Pt#y`=7뢱x!Ad*Eq`eدI Jc-\d ˌ"g{UltL~b/{/.moo(*S BR(mθU Z g7Oer`~7#Q #0MW[V,<ѭɷ|F35^cXr!U+RJ)ZcVRD*mَ k0߄41(Bԅ+٤3^T> k?֣ƻ~g~(;阮6a-w8BB )r!U+>(|}J$ 8 )]}F~N,dZ藒y)d@.*`B REmCJA9.179s΅B!2uNqϮK+5~/uGsj!-یu(D/(ڽ\ͳ܈[x=]:Zq$3h.i-SgV;.{bZ4y#j;sF\69Re?-r!3(1=UUUUU`-C`Lv=뉘'^+$UXep*psLQ ȅTQYJ)+ RERJ)RZkVi{&a+ `ىO6@΅3܊=Њ@:gl52s;Nx4m6sM/=-xt[1 ަklkFFCKy4uIæ5e}Mh#ԻJ.0TD!]S?ude9}GN{׃z^D篻ϟOTta}×|eOO:C:k͒yhOgn'hͧO.ݻF wY޴49)C x˳{Cl?>H[Qb-C!8} ̏T 90P8Y='O[sjB9N }kN"?RڛTH!FHJ}Hɓ c;W}r-j)_gFN{NU auL;=ոՏ(M?l܇F Y]VcWh`$KAa#W]rk-˓b14_%(pXU\19^"?M}^~k8-Dp'+M_-eˢkݰf0q(f4L>ӿOǀ;)w~I9~֦fԬ\e O_n&ڄ_Y7Ѯ!R,խd>Ƣy =5}}zsBC5.LoG~VtΓmW;$w+pB\vG"2ѻ(DCs>AɃ[aމk:WsIԮw)RfkbV\zInp?޷UTK$m&}W߇z'C:]ƟapOo[_F??9f?k1PI8DfuW4<=ő, T|t}|DP48R>AXѤGeI{gr ބLj+,#i|3Ϯu_8)p̅:x?T~^l6~:,DgmC/x01^O@1z_C['M,/Ye'#w-Q&K IkvT*8eX#i'#L}u×aJ.wc2szUzjKř7o'L_TӅ؃%E~/$+9_ȸw,&$unX*S)?27MWhNdr2W7^T'c)~}V}?Q:)KrnZ#]>7*[9xT\s.U˵nxn@2?˚mai#ldN -w6y'V*kQ齖{/bh.;2їE48jv x"bCX d% bP\`6O aqx0(pGō$LL:2'Ohu<A@qs|g2O!q@qA@ÆH7m y@ F8>0BGhԱMNbL.ӣT(mNM12s@/ry{y<ʹ#ti0(VU^]jf옳bef{e5okc3|ZfQ.tO?DFg)<_|i)x*ftbYz;ՇRPIy{n9N`ֺgqrMO.=J5Ѳ2TBuBUJQ뒜q8ç;/@^FAKJEk^-eR7K-GF2SEk$m4zuIdti۔) 쏅?K$K+>ʅ(Ql[')TŌntiSz2׫&nj&nj}L t"d'$'K+!gd4S7|oяVܘ kM1!R+:+]r!Y- X<۴oEgf.&F4 rOX/|VYr>3+sH? 烌7OTzW՝o{=r!Oac V$I="""""3333sBKo1 J)RJc1@DDDDs9|0Vbx>K, .? Pve:,¦֯u)B*`5SF~p72c͜ӜMb1Xʿ !D2@.`RJ)OM+\4n=&X[ slnǰ¨@Q-"9hh$.v^NZB/^|/ޫf5U%ſNYg&<& P5I9>Y$x dR$߯uGuwjAoiYpython3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-normal.woff000066400000000000000000011337101451074743100245760ustar00rootroot00000000000000wOFF EGPOSŴQ&QGSUB44(fS|-OS/2h``icmapAHcvt  o:(fpgm| gasp$glyf, ]z^head<667Uhheat!$ hmtx٘/<+kernpkӿlocaZ /@maxpx namex4]=Ipost6joXprep$o i:x xSU۶q'EdZ * ʬPQD(  "(L-- m(M4m)N|߃d'mku}$tBxT\a #n~Eۧf?6}@k"CDg!Gaq'^nq@L=LD7G qbb˵ǣGԍ׎!M\;>tq׎otvܸ۵㡢ksW DH=Ant! {#VEE̿1c"VETnRV*E kQÏ5#kܨqU_my7eFw7gVp[A-okjvmnn3Ѷ >Ϳmm+noɿnOi@Mm9ڡk;>c;>?Nٝtw.Owz㵏tܶmEׇ>sn>-[k٨ L鿻ݝާ-e>]:v3on{ou;C /|c;gٜ]3q<}nyΛ6Ҭ#/V-ؑ7 #Opw"eEl}fg.~z^w+;o^5tՃV|lxwW#B!rh,Oeh)Vh+K_b,[, %V4qZ(R8?]Cc!h/ & Y&C^w䛡.K'E;txN].=' 7{/0½0}0 CAH`40Gxx`"q2<.F>KȍB8I,G/ND~ L[#C)#o|~ky~:?#G^wuy ^w\?OF1,)0F^Ebx,Gȓrמw<-݆l-j̉LE}.D}WWbqעa^<>-[DrTdSē|_or4պ2O7V:ux<0E{R~sIBB!O!D"kg>Y\VDBk@~TViLc4h) Ѣn,oaY5f&b,b6X /Q8älo*nJ7oDUIKYM;YTF3QFu2KM>g9dq#Quㄢ"8 gU+Fےo7qzyh* Z4 t?122s<%$0|›pIVGYլEhu5CNL?3FjX!#ƈUJ9ͥdp@[W^^7^}'Jd1b]V;؝]t93 ]+td=@|}0A0!0paQ0j!x0dI,c0% )ixó^f,90{}</>ĵx,  Ka,rTSdސEbY$ HHD,#sBK| kp͐%"+ukyk7{|| !|[alvǰ?X߰~G,є4HsDenᥲ8G2/FD>COg9 `;쀝 >Du~WQB#h M&+h\A 4 A h 5p;.0[V+dJz%YRY/ ރMއ` |[alv*>s[~8]9Q~p Ni Ȅ`\3BC\K)P(+UP*K' PPP~jARABC :CUCh}o}4 M!4GlnVB{:Ωq@WwAOzAo@_a d9 `80FY?F8xG`*3Rw{]N ['TwQwaVq[iԮP)m_M]x /g3L7QMff5^ l<n6;iIѓN'FO:t=z5ddddddkIГ']C>t }5kw_zwܵ.V%T9ԦiTYQgX_zL"zrG(*j %i\ }"W zV?3Ѽ[E40h,?Ih-ZA[y,wnў*:B;d x %R2Hp a0A!C?C꿀/_KP /A% n`7Q(M& vDn- k.RST?OST?OST?TT?OST?OST?OST?OST?OST%zI^RT%zI^RTj"H&RTj"H&RTj"VoH&RTj"HUj"H&RT2JMRD*5JMRD*5JMRD*5JMRD*5JMRD*5JMRD*5JMRD*uJR)*uJR)*uJRyyG}yyG}yyG}yyG}yyG}yyާ,kPITUJ?Y1]yGw}]h]/]_?榅D7nZLԖc75\+p \W#3%h<%k:-:\] 5dlRUjJ W*5\Ԡ?00U-ߩ8xK{,  _R__Wut=们+81,z,zBѹ;rVW!Ws\%WmBy~t1bb>b:XmMv#6Y`bs0y9؜BlN!6݈ͱYgKGjC՚zT0Z3gjI?KC/,&V{wǴiMӁGNj*Bs#OY/z&ͨRoJߔ?b#q 5xIU?M&L&&H@} r0o0o$p't c/->p~q!b0C@axFHa h*!xa'@%&~D@6N ' 9flϕ3 b ^">Ę {b,  KaL$'rX!gr~tPQ>]n^jPY7~Sw9.Xlr8?wJ(CHH9rx\/ !7R |uB`t#CHnql[BvNn~0:iR#l65y8l9A?"0ir!ˀ|~Z 2#!|/FHHHHHHHHHHHHHHHHHHHHHHHHHHHH|FGNg9 `;쀝 >2_zh 4&pD@)ĘB)͠9kʭp@^PZCh C;{m>[# }翀/+w9W;Sp@ i9us\3߹e!+ PоR([~rRP5W 53 Nbp0!8QCx=(nnnnnnnnnnnn>V8C5x ?A"< tx",J*J*!1^*,ee_r¯d [6w`|O6Fx6fx>-!|[alvǀ> a/|>!8,B}%z3BC\r }\@1XP eTZƦMU9r4UhCL&7JdPNõ oxP#@@@@Q0X';^&;rdL-N.~!Xi\Dv|(\x?`\[2wH+"]adHqnh+N~"oi?ӴjTY`3w#D{}{I. l ~?ۂmģ^Ƈf?2|>8^DnMX={KJ\G Oo%Ɗ牏,b` 1p9&sjJjJVUX*XςuVmVJ8Y+ܹvu.Y]gqYuwRWSW;d%;XVb;wsrwsYq4w(X7swpXV{7;<,bowSA#wd سVui`z#0,f|Y \7W/㪍jC!rG4]&F_^ݻ\!X}7(JE}nevǘV̲٭gvØM{$3ͣ"YOEuM'vBacȪQD2i_.b}XE(m"k<=Ditwqg0Qc2H_7!ACVq+qoPuO%% ܇=Y(p,r}Y7pl1wȿLu~V#d c)3ۘY% g ̮ 3B3ˢx5E7yN7D~JOwnni]וCWL e0j\/nSE0eF-Gmh-sFdchvF378iF;֊s#GNFͨ' `3zQ/1Q9Z7 #d藺3j1qF,`ēʈXhՌVg~CBj2.c.e[gD #p3}#RfА-=hN>}$]D ^_])u5BQQPC}[@x %K:9b-} ? p/?}0asa b10C0<a< t1 0S0? XI\+D3h.VVM^JLuu],]7񊮗-p`7Z'&EI0E=)]ɐbF,xB6p[č!G⺐v >ׅ3›@(+ n ?"v(<x b{A0' p*@5 ^|k fB#h MK<)Ăo[6h(=5Uu)N]=n}#gAh7C.A>E, H[P(2p P*5DvFv:wED;QǸ&zS]{/0½0UCa xFHa q< xB,WX) *LJ.kHrq%:C-xlmvNK58p2J*}J*}J*}J*}JUWկP_VVVVVVVVVVV"WQWQWQWQWKL~-]!ڣv"b}W}ye^) 6w Q~[x0 = Bh"] Ɨ?\wWe'gxuS^90o:e먥E,. 38O 9z(8b,#↱a,.\FQŹbqXEH\'׉ubqX\'׉e2lFquw]GpqwGpq>FQTV@ t`OKX$|6} D{jtIɊD"H+D"H+D"H+D"E*bL~\4b%Wu;kČ1F̸38f<?3q̸3nq1 \1jk;=6QFJf2#%8р3Ùrfkμ3D|ΙXVa^?AƠTFq"?("EĠ"bPD A 1u("EĠ"bPD A1("^1GǸufacv<acv<acv<ac6@ (ܝ) |` (;Vc/b@XXXA)k;Vc;Vc;Vc;Vc;VPT=UEc' **x2z(^PQҾ +" +" +" +" +" +" +" h**139Ό#Hsi#MS8C ̉ن3Gr惜93sfwی3BUI6+`q%+9 |Oy y?zHV~>mZI6w4M4 DE JhAoӂަM4M zhzhMoMoMoMoMoMoMoMoMoMoMoMoMoMoM%oI\*桲yha胒$b?)y0/N@>D?Ԃ~PsC-臢釢釢釢釢Cvs'!o$Qy^A_Ԃ(://///$E( IgQ"(((Q G-ZEEEEEEEEEYIxVg%YIxV0#/K | ;{8=\<=\<=\;zvpõkG׎..=\'zNp:uD׉=\'zytU29qu9'SpݓZPm- y B»ûqYa-8 ڨڋڼe$W*J;uɑͨ)tJF wB{_)3ry^]•zc*kظa0r;QncL[ fyY^OgY~A?렟u:gY~A?렟u:gY~A?렟u:gY~A?렟u:gby/|x1:BX%H%2RX./~M?\ h?SZpn2 YCO,u:}z_Au:Bv'Av;z`=#t;`}>Av;`}>Av;^@(A8O~ބU߂a-C6Fx6fx>]Ͻw=ܻ{sz]Ͻw=g9|_W5o[~8A8ezY7C.A>E,njlj'ZMqh\;׎Ƶ mړpi#~\;׎Ƶqh\;׎ƵPCic?=Uz>j"-erzkrCr+~vKjxE Ca(r8A<a q<<x"L,_n8h/)8vxNnr3`fQڟyݵvC/e=/qw/`λԦ0j.<~P61\(08xG` O3^}ϗ c[WO8@!I˭"C:~?_@K";*hϡ4"OKNqEn"+6YBğ#Cz_!r-T?Q:& 1t+YJ4dW;` dMUYJiDZ!VHi"Hi"H+TFdD(/s\ xV|5!G9N0flsy'K 3 ]cwAw=n}0A0!R5 a0A#a=VJX+c%zD=VJX+c%zD=VJX+c%zD!zjLa̅aEXIbx>x2W"j* j* j* j* װ6Fx6fx>-!|[alvǰ>=)|e!i"%EODB*LT~.E,-Dp.rH gPfQni +%aS\ =+8'0fY_;N`f'0f<(/"Ӊt<(O'Ӊt<(O'Ӊt<($3L<($3L<($3L<($3L<($3L<($3L<($-D(B[r Qn!-D(6FۈrQn#mD(6FۈrQn#mD(6FۈrQn#mDyhNGyע\THWC3[J't*wrQ!|(CMM]RȦRȮS)dS)dS)dS)dS)dS)dS)dשT T Gȋ_9֭V|5#sJAAAAAA>P/  CA><#OP>#OP PPPPPPPPPPvv8G-'ea7F^_Fv@ދP})j<Ԝ/ m|rDNBN_KQ;^g /CΠ½(܍(܉(x:}tԫ(ՉR(ՉR(ՉR(ՉR(ՉR(э(э(э(э(э(э(э(э(э(э(э(э(э(ы(ы(ы(ы(_W~NzKe@.B.B.B.B.B.B.B.B.FnFnFnFnFnFnFnFnFnFnFnFn|'ԖC}) P'2eWKhBA~@ShU&/qf!.L3dJ;T蔃ܜUlDt{m #ձ6FdӜl=g;9ۇ* J`'rxd<5ˉ_#1Tfddw Y{)^Wཪ>;л;л;л;л;л;л;л;л;л;л;л;л;{z@W ^+{:-A%hKE[*RіT-mhKE[*RіT-mhKE[*RіT-m"UPev"G_rzb=;Y}g+'vtvBGE$2Ms콕ZCPk{=jmZCPk{=jmZCPk{=jm'Nh{ m+QF߫w4]+ZT⻞@DFFMa/"uF5|?=|Q Q)T{ WCagEftX8HeVSˬ֍Q\5ʟS=E %S( >OS( >OS( >O`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6`# 6` v` v` v` v`_װ5 _װ5 _װ5 _װ5 _װ5 _װ5 Cm21 p21MF<&ʗP"CFP 6Am LG&# yd<2A LG&# yd<2A LG&#ZDh5fLV3j&ZDh5fLV3j&ZDh5fLV3ѪW*ͨρ⊉PWg2?K5N^({\GJݒ^uh&n+ paً(R:m(چm(ق=:i|4.Eե\ivx O'_F6TmC6mC6mC6mC6mC6mC6mC6mEVmEVmEVmEVmEVmEVmEVmEVmEVmEVmEVmEVmEɗ첇]v.{ea=첇]v.{ea=첇]v.{ea=Gf %5-]/`܁il|!?/.=R)(!o*R){ϳFQ|Wߣ>= Ѐ h}}z]BoZjDe~aÝN0so%֐%0]Z | / T*g_eE~qоg5~VjY ?g5~VjY ?g5~VjY ?g5~VjY ?g5Ǔۓۓ{Ǔ ;#+MVBV$* ׾ya5cGOh򫞴ɽT9Sޤ]b\rZ.VjX-b\rZ.VjX-b\rZ.VjX-B;>C;>C;>C;>C;>Vt +ښgE[X12Vt+ڕ~utal`lGv;a| g䣱W:u'~_O\ J:ց0DU䊪{@?wU4i w䐅SsӇD=΢+~'jY߆k~G_2ɣANeA.óNI;NQ-jaW4F^1-&.`M찉6&va;lbM찉6&vaה<{dIA~V gYO{7y2\os샜}ۑO@(?2~FQRj;}ՓNmJ9UP |wG.9*7nF9& դQGj+ }'_W(~rp/(B+8 դq(& Ť4T~' `6́<̓i111110f, s`.</Hj! kVހ7a5 kX'Qq>*G8|TQq>*G8|TQq>*G8|T+D5yI_վ=zУGN(z<rP}:uF0RN}v*{]҃)uFg*VT2ZY铯ǧ0Ach"n n$S7A4qr3)B3kr4ny V(56c;yw:q'q777`PG;CZʱ P7+J^_stV5OWրc9 |^Jg0 0cictNa`8yap|P8RkG2n42)2GA T> |ǥOI, pQ[rx<Iue^a*D:}PYÊ fE*9լ;?o)_uWךqMf?ec7yEu9] Ŭ$RrsBCp\/1]dN8&rbMZ!Z抇 ōDѷ2g3ZFΈ*#k=s1w#3qF\Ӵ'e%=fcJ'F#jC\5HѦ,(a2F&_XbV A)3pqbVՊ)HEy3Y(#Fs?o!BPF :ʝ?͝{١Ōc32F$~u}/lvk P?s$kwY G⁉vAVYt1X*ne3̤Yx'\G_uLyy1 ;a/.1lfI P"`?1̤\t`/)$,>!)f25h txJeftCyGƺFXј59L^b&Wyvz@ne=cp\"}zǩr/H'}*Cy~- n%P e${YX.2L.Er\d 2T%Er,( UIz 9>|d*j@r d*zp*T袊L)4mBMd-Y2"sR\hfYf*YKd"4TbE; S! rN&{Bsd1YU\d1W)*b4WeRn5|_ #8ɏ2" Ш"h.2"ЮVJ2Om:ʫFq(Ύn5" D@sfbn%zݥ q:zr9Z]Ι~tG~tG>tZNԏNӏ>ӏ6TN+ѦmjЧ}4GF:j׬EMׇ=ƝqD>> @GrmS8i8Y|,H?M?BG~Z>ӏ>TY+gJG~tG~*G~4G9h4mѢѠikKKfGg^tEg^mЊщ}ч]Pݜ9Aus tRN*.4 B# eG}ч}ч}ч:5ey?ʎbv{q:;\Ugwv t~;[cwCܯv;v;vv1;]]̮Ujn~'7a'7*v/vw+g{{حٙ--u:nd[٥Qv(t]vw*3נ_ė)_t7-[myFe<_A LΨ}XT>n!n!=c%R+Nz=^|ӂg^//4j;.QQ!w]pW9h̄L2K53.`iʌ-ŒfjiݓYeY~,Әe<,^fgfkaV03 ;03.٥1;A&L/*zyS{_by/Y\MJZUΚT&Zm2YB֥Jm"_eD/nf6Bˢk0e*e>h;ݐh"wa v3v:3cѧjf ߋ7J3 xeUPpJ*U'1s|?d#7FR ӘփzUV{x{x fF43b5#^O2b9# #^f+ F̈}!Pquّ]1ojAp}"34Q/XWh߅WVREέ!JlDI5q :@SKsD+h-ϋ6V&;"N&rX!3J8kO"]>(r0F2!1ID~;[ܝ2l6'(q<.gzz?9gP#s=[[vYl Yl wCڂΝa2}oǾjs%q0Gx(lj<Lg9`6l5fEm|~;쀝 >ݰGE~~Co;}T1GE抶uvyN4򊈊,(T)Ch14Fp3O}*Si*mZB+h m- w+JXtsF9H~n4q< xy^D L OTx Sg`:< )Y0[́<̃`LPbx ax2x |~}Lr!.BFob P(2p P߂_[;+߀dEQeF@QdAeQAAEZFI2]ZҔR@ P Ns{99w眵\/n49 N2d;4vi Sf~",^CQ& :fq學>t;1jGssq pˑ{Vk9ZH#^9R(>ksdϭʞ[=*{nMܪu;ww`ޙ޹*{_ {}URufﻛ*{_ {}URuf{}dzֿ-[boײeK_˖-}-[ZlkײE_O[d-2` Ee-r/[^Țl{"Ee-r/[SlE>![dȇ"Ee3-f[LU)l1bLaS-f [>?ȥNs\4(js9"W"/WC*}2ɵN2IБsZ<>nm':]prG#uGβy0xXsV9+xaY Q  M4lh.D M$L),?fvr3yf3|٘0 hd ,eˑ+C2&۩x3<9Z؄C$xFYDp"__h2s?/܆uRy'ekY'n"?;lRklAnӽy}2t?9GMӸr9`p9o]!ϙB `v0;!Bcn( LRxze&x#et)Aeܩ,K:Fo|HD )؎\ Ủ9I&)2=vrn Η%s,0?Kp9˸ps}^D޳,K@i!dd)|Y,1yn#G̷YSN0Ry02L1u be)G Y儘8N&= Ӌ_C<:ؗb?֗>%6Kcgϱ Y6Xm"6Wc#m2`CG_S_#ML˼Ri$ޒ *lsU;U2P[1)9ZYD+Z.crY\F з}+@ з}+@ 0o[Vo[Vo[Vo[Vo[VPj#4+X65ѷL-Em!ӷ:Q$: sq\ |,B,2YnK֗+.{HqZ>zlFl·،-[$QOMf )؎; ~ObbtYALR"`~Qq92Q=|XP; qEp ΢[uw2M T|2SR5 !8MB' )wj&(0#"5 Th$n^D>9TNk|bP{X7{6R^9ZgtAWtGSUpLz1ت x0oa;m$QxGc&Ԧ`*>4L't,?,̕,a>`!cxL_aAj˱+ _KC[o b3;lE"mHv9.?g_{q4"1D8\Dq 6(,.2n&nICMXֺ1SGk=S_?!Ymypކ|myT&Z9ZYD+3 o}/-^B;GtD'肮W]d큞Wzlxa0`(0 [Fbh1c̥o?ދ(Ƞu֏Yyןʳ֙uxx:i<`޷2[a1K,WXx$`9V`%Vku-:l&|؂HB2!۱c'va7Ȁ˚4#SX1L qyGۜe!/~0Z(E7d&|f0?mpG-vKOq? Ȋդc ĥɃq2)|qbxn^n$k^բX ,꡻zO4쥂B<|N4^:N꥓z^:N꥓z^:N꥓z^:N꥓z^:N꥓z^:N꥓z^:N꥓z^:N꥓z^:NS.:NS.:Nu_tI=-Ni+ލ2!#Dy\\W蒞_zq~͇"7brtmWו)tCt=䷦&7c4NH0E>*qKґYz.,{t3̣!r<̣+/)>s\,WUKt0/Kt0/K\t0}7mM3Yfɥl&st96OG_ŒBJCC?ПџѝѝѕёЁ8|\$Lߩa cLL9^9fcea>`!lu)2Gˌe2cz1̘^fL/3ˌe2cz1̘^fL/3ˌeq1ϸg\3.󌋣գ3.y;@7xw0ysbñ xmڡ=:#:qyEX1J1Z,#qX"&ݦL/(3u7ԋLS="KM<66_Kڏn?nv:Ы3;laws\ؤ+tLxM1VL}Cl_vmOOl3=9c KĒ זgL^+r5 Yjͨ53,]{M n֮;֏[?cuk7(jmh񁍝6Pkc&uSM8֦ݛ6雊7]2nˌ-K[cߒ%ckV['Ě-;%8!qf ;'f$N2#іh$$=(uR~o&H43iMRbI'IO$Jq W%۲491ywrZRדu֋H|mgu֙mmնmϾͿRjL2!e]ʑ\^c{}>})n?vv3wّviO4T}meaN`w0;|s9!EC4% -,ZZ9f/|"KIp'}Ip'}Ip'}Ip'}Ip'}Ip'}Ip'}Ip.4:8c511r'b&T4L'? sXt!I;,Op/@f/ZyqQLo#Qs.#WepG+]J8RzG*>yt?`ze L<em,B"Γ SV\%y8:N8:N8:%te'km(/(?2[~veW()e?;9(JPҸL,VB(⺎ŋJyrIyLJ<"bH9+(\5ܞRn7yq:)cyM<%T7BMYffA,sf K Vi7yy|ϲkuMn[laf/|O2] i1bca=e7頯:諎^|%Y[KcH[c2;̌}\kZgl%jmt['Iumt[GQ;̊u^Q/֐9~y:T^ pz9eX:ibzEbf#/WU*Ul;Թ,<,2#n,Q:l&|؂HbBOf )/*u'va7~ ?33"Ϫ{O, RqDfGLd!Ǒ#'#'y)6BF8(o8,"U Q9^Dwz'Iwz'Iwz'Iwz'IwZ,P*8wn܃{QMXFiukZ=xE>@+HԚzZSQMkβ YvFtE7tG*ߵ`c}_70qN71 FmTR6 b40|1h'dLǘ3)fa6`.<,b, /oR|e- *ײDc_4Ec6h/hI`_4Ec_4Ec_4EEc_}`_4EKC:aQd dv veN@G.N"8 `G,N,Cڵ3(f<7y\_m^R5p]5ECkSmmhgy xmڡ=:#:etFtE7z^k>~?u x0oa;Qx~8Q:[?d90a cLt|31 a,~yXEX%K! XXUX-Z>7X؀؄o["IH5۱c'va7HϚ4#C^f";̔V8<l(z,#T,\~"2z`BXƟ wxB[)ŭ㾎^*mqiHYqdO\,y]i81Xh~*AuZ#,k6=4hLih.Si4Te*2fJLY,h4Te*F,m4KF,m4KF,m4KF,m4KF,m4KF,m4KF,m4KF,m4KҠYFG4R]Kv.SiTڥNL],e2vE.si\e.2vK̥].sile62v/D*P5Z Ny>i6f!seK<,H73,ZqZg.33ROKͶ.v86fkhH+n* 7M*\{rsi|BZ"ηqfvh򤲞Nzm^Fzm^Fzm\Zo.7֛NՕd)7{JMf|3hiii Oͣf+>f1Zn6{v\o.;<6ۣr휷4lᱴY6\cwNgъ+NEⲿӺ/Gr-+{_y\T6tКsiͩ4Zs*9|֜KkΥ5+͹7͹7+ij+ :KΥAgӠ/UVyhihYLZt&--:k~h5XI3}Di9iQZyyV} {{,sZ7˽2NΧaҰSiY4Tv* ;OöuyƜUϧmivڶNi:m;vNi:[q4nƭӸSi:[qhihh:;֝N#h:[yy4L4TNcbeQLX8*i:-<O ϧpSiᩴTZA ώY'}4@lm駍gSiii6ڸ6ޅ6^6nh6ڸ6nGn6JOiji4Xw|x*m<6~6~6>6~6~6Mϣڸ6ji(Z1)9ZYDZK9ϣ ^h /3+@O^e5f1c ?CX7Yᬿrfg}-o1 $$cR;K,hiu-'Ńj)`iY񐥄?U[꽨p?<ꢡ kTFeQGTQsq<'QO3hFҭ6aٔe34gEKt~;z'zUޘ(S'a&f3|٘#sY~yXeGuX ؈Ma+$z,9F)؎; ~OY"3_Y߃'YALU"B6#G'#'9-biC(i38s8 dy쳪 +\J^ͅM}A\CQr[6_M" 2Ucy=D&M:¢5Z=Q_{\ў-X\jxZkYv^:guFtE7tGIUpz丩 x0oa;Im$Qxf`Xc&9HcFӦcLt|"s,?1i0s0Wi_XXcҖ+,C~2: ` Pa0o(xc y<7,'pI0STiO0b&f3̕/0Aߴ7Mb,X HrJjy5i-:l&|؂HB2!۱c'va7~׬")" 8" k͔5O7#'|O6cV;_rbyjp>Q֛(œ6_#ej 5nZԊ[#}q*g&?.5Йq霏\˓~,}"&,4| 4GXڨz8{DC47AS4hVh1<9-^gD;GtD'肮W@=*^CoA_C 701C&K!zѢxcd1 z *ˏ 1 >fb>瘍9/0@担X$b.KyV,e=<:|6yM,Q( i"#p)q+'oG>'#p]ƪP+|*ܬ{aa\ߪ;WVt3d~TCߗ4=z *ZGe˺TYOI|5tss|-ArfX̉\.Ifq,wԜŬRs.2h>igesLGf#3QLGftdf:23\5N :ʤ|M~r0oq¸zoO w7ߗ06$Qdf m mLU~DfoO cɢW5~DfL1pu2[K^}-Édfl=<{X=2<z>NEDK\- 1cKU$BaYTZU1^pJYPcT'9O}YZ%,3- M Ϣ%Z'>h"%C{t@Gt.nx=ߞ,=Y?u oO|oO|i(i| ,0!&a2dlC cvw,'D .[rEmIq&&Y X/Do9+YJX7dz,R+{Q~TxE!50jCeP?GQ!cxx 4AC0MX6e Yog]e ;z'zUޘ(Q'a&f3|٘#~V0 ׀䪴A6UڠA6UڠJTi*m7)*mP A6UڠJTi*mP ߤ䪴A6IUi*mP GdzDq9z:rq)6BF8(o8sdy쿪 (\3J^T !( D9-q/VE5 ThL-]^TIhjoRjTDMKZ,5&T<5gنAhם]MhY@Op^M78vj}яg91T701C&a8w#Y»>`,>80j̽s6AL`.Ӧk3X~c.fa6 yXET[r _a- *9`c6&b3;lE"mHv0_iWNn~/{pH|E2C3 I!`C(qVe3vm(}%;.˳\;il?J@~_iW~ZSԲxuPxi~?u x0oa;Qx'Xdz@{DLd|)1 fS,|0 K%+,C<+P:ֵ-6c V$" ؆l|؅ݨMJߚ47)L8g˓O:rqy)P v7b}%7QfC-e6}̏q+D⽸բvZ`yPőqid\:#Y&"bM\EKBk<'3h "0exf!_OĤ:21#W -pqFy^p粗GG>Q%▌a_i[ie4$}m>ڈk#{(255hٺ2Q)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)>)~%SJLZ |<gLS0mOa4a,f,f,f,f,f,f,f,f,f,f,f,f,VmHv؉]؍#~{p8"uL)Sgԙ2uL)Sg````ԙ030u&L Sgԙ0u&L Sgԙ0u&L Sgԙ0u&L]'. Sgԙ0u&L Sgԙ0u&L SWth&(0#BZBn^TieJϔX).L[kvL3Lr:$3Lr:$3Lr:$3LrFbh1ca<&c$3Lr:$3Lr:^9W2t sHR;!sHR;!sHR;!sHR;!sHR;!sHR;!sHR.!KHR.!KHR4}:[ZLsd)s4I4I4IKN*dn9͑+X$q=Αw1GQ#Un2%ϙ>LǦ22#赘o#^Sx-+-Ni 8pHϑ#MGx4i{s)HS&#MۊLJ!5U۫w`~={8{$}!>D҇HI"C{t!!=DH"C{t!=DH"C$wqD H!)D"HItIV;?iycN.SM} Sy4\0syNqD>-!WW9^J6^lRk㻧9p)0p$:ⓔ\:&I>QSJ+=\>#%}brKO+~~P*?$zb_g擕(9rLP9+|#+dE/;,⢟_e{^z^"`E/[xne<2G1\n_xDE"ιs.~Vy'2r!QE(<5繍6*wAau:F|wWg/4@a<#1J4Y.Y".BڎbxUfsoG!b[q+\U9Wu\G(Ty'GrR8&9&9&H2rltЗ}e}'1 4@ZZg#(fp3Kڣ:^FgtAWt+^x7/?u xä+wo>oĨm=1cY~} O$L돢`,|S̔,|1s0_`cB,/Y.ez.}gϘyg_cLGLe *5{)ܞ2G.P I ]|HD `;vpYOa_318L!`C.I2bwVyB^R_^'fd9UNjZV9UNjZV9UNjZV9UNjZV9UNjZV9UNjZV9UNjZUiUF Y$d}A>@bʘbʘbʘbʘbʘbҫ~,`p0 8fYA}}}G}}}G}t}]G}t}]G}t}]G}t}]G}t|_tݏ84yMM!llllllllllllllllΆy~?% !( D9-q/ߐҥ ߾._[U^_AGHw#}t>GHI/YF^n=D$zDnKI0&}$DWHt/"$Da=LHtD7HtD7HtD7HtD7HtD7Ht#=$z)naR R R ݤaRGI i$Mi4 h>)O擢h>)O擢~ROIQ?)'E~ROIQ?)'E~ROIQ?)'E~ROIQ?)'Eäh nRMIQ7)&E^RKIQ7)&EݤunRMIQ7)&EݤunRMIQ7)&EݤunRMAAAAAAAAA^!EWH+R )zRCzHQ)!E=h aR4LI0)&Eäh aR4LI0)&Eäh aR4LI0)&Eäh aR4LI0)&Eäh aR4LI0)&Eäh aR4LI0)&Eäh nRMIQ7)&EݤunRMIQ7)&EݤunRMIQ7)&EݤunRMI0)&Eäh aR4LI0)&Eä~ROIQ?)'E>RGHQ)#E}>RGHQ)#E}>RGHQ)#E}>RGHQ)#E}>RGHQ)#E}h !R4DH)"ECh !R4DH)"ECh !R4DH)$EY*0 2n aMIV7&Y$kd !5DF~Uh7=M.&e+{ z-l夭6HI[|2{KBk</-^C{t@Gt.nx= 5FE?x0C0obHږA6HIi mm A6@I i mm~OH i'mNem6i{M&moIۤm6i#m}ti7iiK{I SGT_Ici\ %EH")dAO2I$$m6'/~_ٵ$_$sd~d.#H2d.#H2d.#o̷IR9HVv )$H2R:@Jet)]FJ~ROJH)$o~knknknknknknknv1]:uLי3\g:O] L7n0ܠk."""""""""u9 +k5JӃaz0=x9O}hDdzYϡ}3gsCyQ/DB <'Q/zIK^D$%Q/zIK^D$%Q/O^z!ꅨ^z!P/z9ˡ^rCP/z9ˡ^rCP/z9ˡ^rCP/z9ˡ^rCP/z9ˡ^rCP/z9ˡ^rCP/?|9z9ˡ^rCP/BrF4Q/ziK^ҨFvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvkGvˢ^E,eQ/zYˢ^E,eQ/zYˢ^E,eQY{Vܩg3w;̝zN=s'">)YKq ".A% D\K1:gE,"f1ab1"f1jOB"1)DL!b/""b/"1-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂-؂U=qG<"=q~xחSBT'A "f1S[[[[[["S؁x N'FOVh :BRqsBkkέZWޝ[TEǷ܂-؂-؂-؂-؂-؊ P[P1-؂-؂-B*SA *fP1T̠b3A *fP1T̠b3A *fP1T̠b3A *fP1T̠bU` SB*P{Q{QSB*P1)TLb SB*P1)TLb SB*P1)TLb [P[P[P[P[P[P[P[P[PWjT\Qq5*Fը؋؋؋yṬbG<*Q1yṬbG<*Q1F/*P1)TLb SB*P1)TLb SB*P1)TLb SB*P1_|=6T̠b3A *fP1Z؊؊؊؊؊؊؊؊؊؊؊؊؊؊؊؊؊؊؊*>؁؁؁؋8*>8*>8*>qtk)TLb Sz*V~TGjzgsCVg]=S>SOUW)U*T\Pe>q>%}s6dBU[O ^OlAnD!bKpm'Om'.G[1:D g؏؏؏؏؏؏؏؏؏؏؏؏؏؏؏>Ύ19D!b)"v#b7"v#b7"v#b7"v'ώW[gG[W!*D\q"BU"2D\q".Ce !2D\-؂-؂-R3``FX3{k.575~_--k & H\yJ[`b{Wb-dj>beDmV_G42VE#g4L^zu aС@pA3Jg$NM|7;D⢠` {Q%Fݭ-us; 8{܁(ZSi}et]Mߠoҵm W0nl+=8W&~grcشtet|$ݔtSnzGnz&-ݤt#;ݦtSnMQ)J7xtSnM(tJ7tJ7=Mt#݄MQIK7t AHMN)VɮCn:Cn:CnRMJyMv&GjII-E(H-i%ZRK(tH->-䤕$:$IeRT)_ۣVG=JZBII(RP:$ $$RPJJIB)I(% $$RPJJIB)I(% $$RPJJIB)I(% Tf!3-Ѩ(%#H(=J#%PJZBPz$ GBPz$ GBPz$ GBPz$ GBPz$ GBPz$ ;uk$5 eFBY#PJQB)J(E (%RPJQB)J(E (%RPJQB)J(E (%RPJQB)J(E (%RPJQB)J(E (J(J(J(J(J(J(J#H(=J#H(=J#H(=J#H(=J#H(=J#H(=J#H(J(J(J(J(J(PrJNBI(9 %'$P:$ CBP:$ CBP:$ CBP:$ CBP:$ CBP:$ CBP:$ CBP:$ CBP:$ CBP:$ CBII() %%$PRJJBII() %%$PRJJBII() %%$PPOmgm$4I&MId$4I&MId$4I #H =HOCܫˋT25JI `&jƟXj #ONKBEw'՜ #xVʹeeꨏϹOvW/PyTǡv މo5{!T!&!&!!!.!Xs.2n!"3×##M_U:MMtCԯv#{7齞ġtzg|gwl.F7!!~: FG~~ި깶5F8߁Х[|FV6u Ojlz+{jԐ=?#G`u&G^R lj=yc^lnvkm>v]pgƳnJ ?E!G#ȟſ'NN o=}WFi#HG?Z=>Y{\hcI?Eϣ,t<?YѬHOOOf3l\4]Z|V+g+i9[-w$$n9?9r~%w]r~en|/Xojj;8χV>%euy +E?R?,wiyQ+6˕Ӳ~gV/uyCO𽜜fy=-wiN?=^z4:Ct}#H:cXG tG_^J9Nd:өa:-?΢t}.z/ˣ+KeIWעNWE1s9f.嘹3cr\oAҭ4~L?Ff}LJlnR7c1fv>ݬi4cVfxU*lo4c1f}L>YӬi4c>&mIZyV'iIZyJ\Aږ©Npj-NũՒKbZJaU'V*UXՉUԉO)lĢycAߤYt }out}V7Fay&;Ӣ~oŰV%z Xd:fD#5tyӥQ RՉ[)ꬱ/5:aQV RQ(WsIn~Mo>̗%KԸ'ܸ'h6VVЬt=1q.WEcg4,eRr)xz GGGGGGGGGV9?;>w:#(:cCtO'ЉtLt:>LtIgGl(Cٝs]pKa}3>n/t]]Ό;CwF|s07`ns3 f07̝s17bs)8>B;,qaԜ(GNphq߆o3Õ3S7Mnǽ8wpwpwpwpwpgp8 \OD]XU9۵ewp^t^tp8R9#v[t .g~g;)>KvL=.M5?Ѓ g؞vDKizizizizio/] m> 2B+)>;r9n========L¤.L¤.L¤.L¤.L¤.L¤.L¤.L¤.L>\9#pYC:h`z-韝5<6 WnÕpYē]BT0FәeH4E4E4rc.㳎3\~Χ (> yˋbH~g9>ON_WkvV9yout=g6&,]W3Mg7s\28 ep.s\28 ep.s\28 ep.s\28 ep.s\28 e*gf\ssqn.Ź87V>9zQ3%jVzکC~xV:ezVRuWߋӋs8׋s8׋s8׋s8׋s8@|p{nUgSSSn.źX7orysǤZ=*]!tqܒ%YU^os=+FO'ٷĉ}+h#3uX뢴|-83.Oѧ3~9?pkM% `.py|I ~A_Š/'M|"q<(7qqp=5W6=lݗ MHOg flOG1z<荴#DMKp]i7L'Eoi_ڏAӻ=>j;ЁtMCat8AGQttpQ]0]|*`'Fe 7mԚ6,4$7 MCrШ4*ArШ4*ArШ4*ArШ4*ArШ4*ArШ4*ArШ4*ArШ4*Ao:)z1cY$ípkI:gyⰨ7h(q#\F|SsgG?ҝQ;.RT)棬1FeQcT1FeQcT1Feѭ);*KrĨ1*G0$/ C0$/ C0$/ CV!yaH^!yaH^!yaH^!yaH^!yaH^QQQQQQQQQ!eu[kmZfkm&֪nPK|^iNyƆ෕omݻ8gyh"ۏW~ 'kk#)................qF2\+e j׫z/ׁX?i}ۧE+^ؠ_ؠOؠ 귨~귨~귨~귨~귨~CQEvjvj(6ٻ {d] {A {o wA.ٻ {d] wA..ٻ {d] wA.ٻ {tQMtQMtQMtQMtQMtQMtQMtQMtQMzDGzD pA.Y d,\ pA.Y d,\ pA.Y d,\ pA)X[[[[[֖lm)[[֖lM)XS ֔5`M)XS ֔5`M)XS ++ߝP 2ZAF+hylC|>Y MWq Ty۩ /U%[?ks_NjGɨuGvyw%ޔ828.qw'ZKNOOﱥ5ޖ"D?/]{o^ܻǽ{*(k+T{4%_[I=yw{ɨ:rujcI:5j5*os7[ӽ:euwyV\͕5msd` C6Ȑ 2by19Ak9AkAkAkYRD9n9\;L潒vAnkAnkAnk䶆 5{qDGtzg۳3 {OѭjOoάUQ#VoF<7 +lʖlʖlʖl-e^ e0DT|b_Jї*嵑*Cy9.B9._s=zd<ğLB9,M<|$rX(rX(尼rX^ P P P P P orX(rX(rX(rX(rX(rXXE %jI<5,[U([U([U([U([UX9Ws!]Dӧ,}.ӿ+9W<7O#4O#4O#4O#4O#4";S(;S(;şW<'b3{;/[T|u:_etBgƺ-g ,%~dOXBޭՔ0Mp(}6M$vq9[[+^UX}i=}˽۲o*ewB^|#{sO/T T?W1yo[t喱>wg˖\)5ţ}cjsqn}r#–{UݲGil.2cRM̫uEknŏywv)C)s }w7v=%OV-kݦ9_zcxrS[fcQl}J16Ò[ֺ9Qo')_\ZdmDt]ݳ?-7-ޜ2_xvϰ3^UWdDzI-ϲ,/Tzq?TNV\͕{=^Ϲsڬ#g|FtOfM=馊gtqT-NǷm^7 ->h_jznsUW{=^ny|e->>wKEBgG 럠/ֿ6a2'[]Mo}ޗ;.5qOFA#2?Z4*)oD^:nT>r}ﻣ.#ed A*Yuk.l_r YӢ/wGݵE{\W7n46|9h4+|9h4+|9h7|9h7+J9h7+J9(SYѲkow{}@?ZD?E. }fF V6G里tH4:Ct}#H:cXG tbpLt:>LtIy"]Jt}L3J }F_j͊o7\KߦznM4Kߣf~Hҏ'چmt;i~IwН+{t/|Z 7[gZw[81,:PTwqtGqt3GY\=gq=g9})q,nfΞٳ8{Vݵ/뮋~ 9|ָh˸M3MFq^zYߢhI4+\9+gq,ŕrWY\9+gql͕r6W\9+gsl͕r6W\9+gsl͕r6W\9+gsl͕r>W\9+s|ϕΈ"th8>J\AOyI:. ">EgstIrB_ ~!/\rB_ ~!/\r}37s<~y\?q<~y\?q<~9\?ps~9\?ps~9\?psFVF Kꗸzm)}FZٔ^3b1166x16y[à:ȫ|;h zAsޜi}8*>\.EDjRz)M}~ k.s4@yZgTaGhTVז]6yKkRѸ(U huD?;>ם@')nOV֝R՝(SwIgEkt2~ DƍDER M;HGh^.h d'C~%}Yḧ́%UR^_1!Ch QGÏކbX7.Ǽƍ91rDO8>C..zʹz]Q":V덼Gz#덼덼>^oF^oo )Z'y<󍵥?Fo|c]qO],7}#g&g f8~ohfFsmw&YFȆߨ>zo71kF'ԟ߱1;q}l2zVDGybB섷N's0^o ?x$^4I\ύ|?ϟT~ύ's#?~retE'>M|psƬ#|Nloa*swqWjƸiƸi̊Y1nÊY1n㦵4Mct7qӘղIcâBpG<;Zۊk=M%.H+ ƸiƸi8i8N1Nj8Nz;h-墱 V1*^F36uAT%N1+g{8gk8fX:%([KgF6]jWڕ%]j7cV8`3?d2YنlCV!+ېm8c0c0cY/[JAMp`iA8#qFH8+I8;M|"q~P8>qE⪠!qC`R;oJ&2[D!س樚}kP_ 59Ԡ洚ӃԜYsfsjfd'j. Vsa5|Kk. 15W|-8檚jQkj \WsSpZ57gZ5?Ij༚'jKS5j߬iY̪I֬ nI䂟׬)w Ռ)Qg~$X^ڏ/Aw/jUյ6]P A탵 0H<; +fnNqC> &5&nvgaNޤ9nhIwm'ohwh߼כOzW\|sq׽vԮswoOvnu{_!I4y/yEfWߩ{|fwt;8u>ۧ);c[æ|]ǚߴˏ.So}9}GN?cE?73_5[o?>oO:{۳ g>9;x3 Ͽ碳.z/o]C>C>Z@}t#-@>C -@>IfiUJRF5O-Y%4}HӇ4}HӇ4}HӇ4}Hs#!M!i~4?BjiaaF>Y. Х]eOOO M!M,@H@&yA&yA&Y(,aY ?!?!?!?!ǹ$'o$ZH i"-@F&41Q*-@ԇJ}fTnE[QVTxpjA&>L\e'i "-Uxo_fOcs|jOUC; Lgl^[_JH+lqEuG |j(QTGiGȾf [3 :+ŀQ^(_29A>h%8#=h.QGt#J:#J9Q%UܙX*:(t:ʇCiG|HwUpFfT퀪P*5R3*5*3r@UU9`T.QQ1Q}՗1jvQߨo7jg3FQKTWQu zՕ8wQ{sr F+FĤh{1n^̹smcν֑ǹZ9pνs;sUh&;/p5{Q|չM{G^n~Q)Zl3#x>Dh03`fbWw>v=0f LD LD3a&@Fʷ4lH;~˽1~˽}/q|R4=$NΔ?ŵˢb$I]h&DL4&3d&DH2f5v rDh_3y1=fh_ɋyq1/.F2Af 33E'vv.Pnx1/FӸ4.8 ]N<=gp-\1gXwG=;f Ld!?Er;D2Afr52=p^5>ȑvfF=QϦ|V+>{T]WYٮkU;riלwW=k-Yov/k'o 5gYε❋uszZVYVYsZVY$,8.~8 =Y/RT|fjIѓV'FOO;?`z{?NoGtn!m|*6!ߙJ?lT{pu*?3*?x;.Biw`ϩʏIϨLt. ߻]oUVUQUMGTjFfTj¾YUk*1܌ͨڌGTmFծS9UQ:S  a;r3*7rs9Syu3:UjVê1^1s1s1sQ1ir131& x/kyyJ3 u i)=<͘GTl:?`aN] *2iȳ,帜gYks%3xƑkۢյˣ#}+ꎍV-WvooMx!{x= C+b^9y)z]]ߍUW[:\=\uuGՇǢ 3( ־rG?**s9NUAn٭\>JI8??r0(EFn9~9~9~x+sVrC4?OsW69Q}o\0SQuO利1U7U_;}ɕ.⣊_#&$w 5[puk%A㝾kk0x 5fud6yE"^XT1]eVFy#KT^|`nSK?GNDKѩ 7<Q񫑕Go,شջRǧd߶ ~ҽ_=~?iXw x:NGZwVZ'U/>sOo-|ͬQ1x+ߌH?B[)y9'/圼J99''#)Yx,GR<Hj'q}Ϝ4g+JsҜl`/5Uv.5>Te[ &=pｪbJT-ѭUä;17ٝɝŝ\ɥ\ɥ\ɥ\ɝTE[gU_ &lMZy?g}kX f,$gڌp`8EVj £7l:iאOq%p '\ Wr<p}>}7~?qcl(^̵(V\[kmuꈭƩh=lkö=lkiS?y!#o= 鞃{+<^'Y3ll_@oriVme4cq-nYՙEzyǯnL\l&.2oo3ح6f¹f\vq˸e2nwf`ծ͟KuEzY6rxE奶Աī1 E7FSYsl~W~UۈjQm#mD6FTۈj򎨶6FGqGqGqįڎIj=~Qg}o?{OZJ9ugYm]/* i1S1ů>8΂,8ݕx x x x x x x x ⟭A*D[.\oʏ{޴?MR蓌)ܰy+y}}5ΠoAUY%zgp<:dzs<:dz{]5VHx,vϰğy]o>3שqV̉~{ M7 %tO[Y%s&2?k'ovϟu?ZϵAG.9g'my ;]ыtn՝;}Uiڝ*>z4UwJgӤt]hӴ8.q^ݝ;ͽ;-X3rEM]Е[7ڣrz*~n^|noU(Z/ BhTGՑ++ӑ{Z[G&6wWyWy׍Ӎkx8hxhSwڣg3tJ}]A*;`8K0(mn׵]/EHDROlr<ի V'rWvdZZߦQ`_kq(=FQO|BOYmWGT^zϞe.B/_z}JrXwT_w }z@'.@ffyY^`T/_FP+QQl(GZh}oFnF@?'2 ƢX}f>3}_1hx2j Z5Sf,gV=nRM,U;WMI]ߥRMI]7uR7&uݤun.ES'gjlJ QqQ-Qs7bFU\;Ƽcw1;~5F=?[b\Wq-ŵQkKW嵀]s7+Zkx o]m}[k:ZIٿT|~vϵs\k?ϵ~vUuEJ(]}L3J*j}out=;$kHPqfgz:]nKo|{;]H;E$o`o]i7zLi\Ks4"3owD?02wﲂN. - = =$Ѵ`: >glp8AGQt4C҇8:N$:Nt*? |U}&LZvU웬"신[E *(XqCDEeQT X -$B! ]ҴMH@ ޏ̂')n_hxғ0َ=L1^%X a bU2g{fl&p|+k)FJpRA/}.}?@yI?äB?ylWS=fܺ[gGQxeiϖyY엞/𞯊*xnskgc֥s >/` u`~Y33EIqt!IipB)bgmyrKZBIghc٩ ݦ%b-@W=>~p0te!@ۛ) igYxf\^<|x^`,E:,7MX -a9 Xvu`|δH)dr QyԔpN.irJ{S)&\ӄk*2n> ~G2BFWZ|(*sUUAu5Ԇ*h*QV!4B3np;tμg*J=J? +0 w0#hk45{ƽF^2YI0TāxAy '`| W| W\+kqŵZeQyr8 w;gᎳpY,q+xއ3%[a%|c>9|k`-%|kl,Q ?6Hkgۭ쁽@ܫ8G 1 IȂl8! PP.*(7A9T΃G^\_7gaǼdп?㘨v݌cy]`Cna0FV8 `:̀< 0\"x^*K yH}2շa92S]JVǢ Oa5|:X_Wwx | ;{~` la$v;a!^H}~d8)p@*A:+LW3q Niȁ?Μw|Ny(ϙG,s3;e\P %P*n(rm>^'-f?\𫴐[*sÖDž1 "I;oE,+d(W쓟dJ,3u0DT7 uMws} mQ0X3Lp'\)OVr#ifpSG-ܿU3mN)vs_"9{/vŔ-~0ɦb)gDH1ٹ5ME]x]i%V(mXƈQMe<,)]} 򦨪,Fs}g DusC7/s67۹ޒ뭸Qߤ۬k0mGc8q49"aP׏FUNZ??JD;rR~01YyCbeK5"9v)2cYֲ͚uam9&8 g34D\ù>Fr}10x'D q}L|m[\@dKʖZRn ȇІ2LԧasmTl'NP*fzHHo9[-Cz!吲HYY()Fl()Fl(^*^&i T~v²ԇh8GhJi2ԑVPQ:uU? HkNfeRHt*y,95-Rem"dZH=y(mi}M<2A B, 9Vพjtj< >i 5|&+uJd5=OS:X_WMtHD kJ1L'E$Jm`6RX Vjr H`NR'X V+u:J`NR'X V+u:J`NR'XВКe1Ж=tb6oVstsV|ΊY9+>g @wY" `.zbX!_, =BF<14nq+,+HуREQJON( =ʢ˗n|)=B/0 =~8=nJ/,R=7Q,ܾ?0}atg=zFOL'iƟ鍿荇iF qq%]! X62FLw+ʔCOCOR B/K-RvZ'SϘh?SKh @[htN@W=>~p0 w0#`$088%(a JXTӥ4Cjp1-F h0b4ZFha4ZFh ֌NFcha4Ƙ2D<(=)bFQiaTZFQiaTU%0*-J ¨0*-J ¨0*-J ¨0*-J ¨0*-J ¨z๯ =tڞjjjDKKKKKTnr7UMU*wSTnr7UMU*wSTnr7UMU/J(/J%X V) Y.X k&,eRDCC@͍577Œ^op; Z)A KC,bTBZwݤu7iMZwliap\*uqusnnԭ:sm(['p<T4?^Q2kPJQllX+b~JM8šg`ziuGRP(Wʕre\(WuڃrF\Pt+岡\Q#(qJG2Ps(WʕrYQ>6璃QҠDN^GzEzl.F(r\nˍrQ.7F(r\nˍrQ.7F(r\nˍrQ.7F(r\nˍrQ.7F(r\nˍrQ.7F(r\nˍrQ.7F(r\nˍr\9g9>jr\\PV(WCeBZ<~p0`CnaQ0X^y/,^W`7eX&=Tb/;5nr;!su=]דe/出>?-&Δ'hBڧP7Sz[@VGZ^:X_W}-/;?alL THty9eJ eP p|Kp~eyI]JV | 35zAeo[& #[`+  gOCP=pp.r ChJ3ο zqA/.8^ќ5٢5rhKotNMY=c{B/ }/ .` 00  `40=0&½pLfSaLv3ZZ8\P %P ҁ:pTQ8Ü) I^R%uzIڼ4 p|2Kp~ TG7}G=gL$<.td }M'2ia]^9Rck휰ǣD-p8Vߊ[Eg]ѝI8dZqR+Njq<( sLO몓9km:,#w@vѵྖ,I#2en'&tC,uCa ɧifo*տx;,ֵxjxjSPJ{I~M`3 a,o$ /b1R~Vjxjxjxjxjxjxjxjxjxjԫ˩WSS^E:q"p8ͅp6\8 gsl.M6 wsn.ͥUp7\ wsn.ͅp7\ ws)?Oϰ `;$RGH(!Leplp2,ȆSpe,+h8VЊZq@RԒUT師:C2g2qL,[&eD}5Jjo{h&nR[XkXq +a5װV\êN)0tTg˙p?<C0<c s0\X"oPPөKahorxޕd1S2EhV͊YQ4k0Ԣ>jQZ4G-?jS U$3"Eqaay8TdPz\-N" )nx65b:f:ȓ0Hi(a0#`$Gh~9x'D q}L'Q2Q-* d K]c-1f14xGi KE5]QEQ:V;D ]Zדe/P`~$$qBM10S nOV qfcm ;GT m"nVvN%nVC 7A}.tnzAo}gﺷIT$|Ҕ_F\^si04O' I|`>I0$O' I$|`>I0$O' I$|`>I0$O'Mڈ= O 9(2OS ",Wa,#=He2c鱌XFz,#9HeZXK 6 | ;{[g ĸvK&D(Q2J%D(Q2J%D(Q2J%D(Q2J%DɤsssssssjuRk@Ms&YH >DAB3 ZB+hm=tnzAo},V0 w0#`$Ƃ:BX/+^a ! H$b鰀tX@:,  au|+#X')sZXK S*cJl=?Oϰ `;쀝ta$H0XBQ-0Nq8S)N'p8 ܡ!qD#H1qD#H1qDB8^e9S}Kp~E;4#I$H$HIҌ$iF^#IHRb$)1IJ$F*+E0tI:$F#IHa$0RO%֫ |8JmV|Mj$5F#IHRc$1Ij$5F#IHRchjDO1]o=۩b.*GXEC&:7H ){=<c+KjS\~W܆e[_,CjNQ :6jh.@5QTUN^PMDM5_tcw &/hE`'O&ޥw9WĻ.v9y-bѲ5ǧ>hOam78>ǃsKɡ>w~s1[@`ԵkG0Qo)PnzP>ͨn$?#1"-!!3ԙNL'u:I,,,tRg:IvҴ4m'MIvҴ4m'MIvҴ4m'MIvҴ4m'MIvҴ4m'MIvҴ4m'MIvҴ4m'MIvҴ4m'M۩3_I~Ҵ4'MI~Ҵ4'MI~Ҵ4'MI~ҴIFu$k?j1OiiAviiAviiAvS$$zg[Ե]OX{ILz.zj.z:IwdžH(觰&#S$t?5'I~..&'$t?N:s;N:s;N:sugL =+=+IvҺvҺn'Iv)y[x1]';B}_h_4=8<k`-%|ū}[աԄZP" _+% @i14 n۠9`10=0jg>:ZDPG+ u1Sh:Z) uBPG+0K~Fe.*]T,vQY좲EE1b*9Ts(PQ̡CE1T'I~%Q:=HAHCpR? (+8,ȆSpr p;8vV"pI;ՅNuaS]ة.Tv ;ՅNuaS]ة.Tv ;Յ] %@@UOu᧺S].T~ ?ՅOu᧺S].T~ ?ՅOu᧺S].T~ ?ՅOu᧺S].T~ ?ՅOu᧺S].T~ ?ՅOu᧺S].T~ ?Յ¯Nu,pLp/L0  <#(<8̆90 *?JO%㧒SdT2~*?*AJqP8RT)U*AJqP8RT)U*AJqP8RT)U*AJqP8RT)U*AJqP8RT)U*IJqR8RT)N'U*IJqR8RT)N'U*IJqR8RT)RSJ9Er*U)ST)NNNNNNNNNNB䗳fh.C h" If휅Ny&U*I㤊~)[L\y4xƟ rFE?\bYkҙ,hvթέiСYF å0203-3T *A}_CߨzF zV(^E"JTWx>8Ew+aؾ*}!;!S]n|Pl^i`hd'GL3e6Wߒ3k8w=8sa^ԵySVG x&+gΕxL^&a]T&Q~M'E$Ri_` !ş oe'yKY{2{w($͟UZ s]y\C4hh14 n۠9-%ּgHpwhͭn2Qr['u%{;9;Wr;yGmPyd/HI0׾)MNq=%Wՙ^ s6Th;w5ߛkF>U1;]o߲Vćs3Z5TPb>4Okk' SƆYc3c1Q,22&WI5Ř.02)]LF 籖FQ¦i7y5Jܢ6hh$BfV4jTMUKeZVZ8rJ97ZpnF8.Fr}1x'D q}L.T̮̖E(v~R(JVd(Q(JV9Q2 %+CP2 %+CP2Umd9JVd(Y9JVd(Y9JVd(Y9JVd(Y9JVd(Y9JVd(Y9JVd%(Y JVd%(Y JVd>̇P2JC|(%d>̇P2JC|(%d>̇P2JC|(%dE(%+BɊP"%+BɊP"%g6(E%+B.dE(Y%y,.ͅP4B\( Esh.ͅP4B\( Esh.ͅPrE+GQrE+GQrE+GQrE+GQrE+GQrE+GfdκX$~&Q<v]} 5PPKS:yHwSfnGs]8u>DIm=.Z5 LטM)m<۹,o򨮥~}p> dQ.iI}2SCr3 evHBpB<bY %P*΄1ˡ{}^xB`!>s|ΐ_ iRsi0QfB%5 ]i+]er206#ea-UeDj(MEҭF z4 dHm޽2QnY:&,[Ý\x<_d&\j,PRi/Y=$ {d9)pl~HiN`#Ps1yla;;eYATZ_A='CW[i,t>&h!=S\^U3syf NBm("pp^Y?̀Hrb&$%.qJ!a#a00*h jpnḙ9nI9vU_E$:z-I"L$q Ig86}Qcñ9ϱϱM2`?D`<-"8Ve2XQ\8'sDy0^ "DDiWZZDotB}8>a aiӴ'*Z鴲VN~QR<%JoRKڊ[icB0OC5h"alk-PH/7іeTG[fі94v$LaZx̧= iӴe^ aCӴ]mB[u^FjѢn^y owD{3v{d>5Ϭ{Mx׽O}^ՁWWE:׽ ɫ]v}ۻ]FǠڮ9J{ƫIۥϼvi&}qUhQW{uU^ΫL^Agyy^+#<,㫀W6Ozq^ lG-皵-z؎vm&3" 烟& my d[IeJ3%,;8Y, df +46wfvp_CobES7 >Y*,VA +#\ RX!)ld f#+ Α yeWErI^ 7,tMr/K"x^h٫Z:UWZA;f+5/̈́Klpz_hYI6ppu@fIژ ~ntS!PZ3 ZCCg]t;^@_]@wLNi5A` 2a0B8xt.yrxރX!ӕa%|c>9|kUֱ\_Wo[&  ?6Hkg+{`/P*@*A:c`p NCb<оBWgk(P#.ԃӀe4Pj+;l Cv]`Cn a 2x&DTāxxXxf u>,^W`1 @!`| > Xka/+@[TEl=?Oϰ `;쀝KRwC"쁽`?pR THt8 Vq,N\'! 8KC:s"pA1@)~_|_# p|2@qTǩ}^X@͗'Q-TmMGan(¨ZRŖqqPn6X˝s 8z@Ld9O˕my{8'!`| > Xka/+_7-lmr<_\n$WD8ECj}:Ln,nHXJZ `}r_1y6$+کǖaiM=w8} AMWѦhc1tm6=FMWѦhU*tm6]EMѦhU1m̧=Ӟ~t m Z0-a'n2ϧ#i&ՠоhd]Q=wў^=؟vц{GMs&c1|1c1|$aaׯ9uo_->>{'O16цe6t'Nt7I'N]]'F\M{+}ڔk|t2pKHdŸ?Q]Ҏ>Q򇸹BxXV$'H?}gQc-`>3NHHHh67u)0%e3Y?v}`ߔͤlңOi*W4@V eP.?᱙C<_|“0):;勢|E f9&o?"?uStSZ tħ)))oѿппj@7>1/S ԅ Rv&DM،5j jԀRΤI 8p&5`'jsͩZPB ׄVjfk7Q5&a~@֘z1ZD~c P UlVHǶ2N0NoeuP5O=k<5O=jznd/wL.b X...NbV\j҃\\;vj\ ۄ6b_.mp4)w ҍ3qM8&iΔ3L;q.uqMq8c1rq8F.c1ۄcl16pM8&c ؄cl1|8>Çcp 1|8>Çcp 1|8>#H1p#H1p#H1p#H1p#H1p#H1p#H12p #12p #12p +a18ǰVÊcXq +a18ǰVÊcXq +a18ǰVÊcXqtj8F:a1j8F:a1n1ҩ8+7!cq 7؍c1vq8nc7؍c1vq8nc7؍c1q8vc;؎cl1q8vc;؎cl1q8vc;؎cl1iq.*Db#. H*.17xOP 3 _u/G?nAu~BqP܉{Pt4zQW@Y(J<ʒ$Q(De2@Zrtj۹rOFyѺ *y]?E&u[ѺкXT_N7}_uIlݾ꿅-c+ٺlN{?fSaX8 LBgSqT^ZX3LE#窪;tෟ i0C,cR%Ĩe7Zh?.1LB;%zAn ax av:؄nFS?GS_BSo#t*@: } | ^nB/W-nDnNښhcz =RBO! =R)S桭yhk܌F桑yhdC#<4r3܌FnF#<42܌F桑yhdm&vAmD7 Dڠqиm&8݉@wZ;;;;-ННvt+845ѝD4d Yq3iw幌$>˭eG6,TG:GGգC{dו1}qk? "t !LOkwDk{JwM題gq;'t} o+ =]Lty?rG <<&pha#akv]r o>P{^ 1_JܟrЪU]^-.x-O|Zj\svެF\J5áN͡?֬soJͯO"/2nI~KA_zVoQ@ Qͺ+_ʣc,ΎnXG!8yW/^QFk-ܨ'/&-eM5n״vvYlDGk?or-k}[yU'K~LrL^O*myڷЯ;>=in;+_:Wov=\j <'Y\s9s^K_.~u.W/]kv[nkΥLjeɟ.=~G35>mhU֥[ߡ}7{H326<H33l<|#w;>&$;$rC*4rx~#9<WDr& rx~HOO>& i4rxEv1Miw;CJ9xD)QJ!琿w;FN#i4w;l#/`#/676򲍼l'l me~a/leyنo yF^mxG^KK:9-$mִ5ztKfΰ}l_~p'uk6F,Rg9#V:-\Yu{|WQzefY2+s7~|U|OnMs>;uíT:WJ\_eloͱqGg:1.ԃq^,Ό[1F1Fz$j0SDWc*]?F4T7snGսb/2=gϪP=͞bس0_KK׌c7KYԏD֪\ek2<֒<%p~Wex^ <#ϋg gW[⋭.zMtB`gr_¿mŤ#/B?DO'Q'QugȎGq8Q(o7c(k5qFq\8Q(>a{W:;qGqܣ8Q({=qGqܣ8Q(u!mT4P= 4Jz:kλ-ѴE4mM[D-oѴE4mM[DѴE4mM[Df"-ih"-ih"z={Zeز>lYlB{DѴG4M{DѴG4M{DѴG4M{DѴGڣ1Qck~]z H z~sK%4Nt.?8m;,JZ|0͟+B #gp3~ݑ| ⵕז«v]~zXm"=yڥCtI#*>s۔F )HHo"k{{[ݵ..5 M^@J *s'1DP~~s'sgΜ{93h"Zpۻ e"k,"o`7F~#^aW`Uwc߃5Ryýw*#`?G>\B~DA~DA~iN#{{`=G#{{` -)^F`F`F`F`}Zr$d}@_3C`&fL&dxHa$FH7R+ER+ER+ER+ae dJJJJJ5aV`V`V`V`V`V`VݕL8r /itp8s$p K\w0S3`&f"03X +}K_))a'܄vq`ǁvq`t༐;Ӂvq`ǁvq`DZs9  yvrǷ[ڂve3.zQNoA`8 `0 eՆUVmXa5Vs`5Vs`5VmXaՆUVmXm`+a5 V{7K`-&ڰjê 6ڰjê =`{UVmXaՆUVmXaՆUVmX́XY Xuejxxjڰjê 6ڰjê 6ڰjê 6ڰjGDdva'va'vRaD` lK[7fot5DstఇBЖ=!=`%3{:\܃эhu QzKJϠISzBJϦlJPZ^9j,;[`wUSU5#So {h%3(5G* kf kf kk. AҩQOjlϯSjKFSF~ebk. k. Flq ,. ,. ,¢-,¢-,¢-,,¢-,}YYE[Xt]E`Xt]E`Xt]E`Xt]k0fl;mwӴhn-Nt䝁V{ 춂fv{`w=70<p;Nwv0ݱ` v8mA;]8N2wH!Ns𕟌 ?pVrn&-v4Jr(!^_6k?84$Q|3Z>UQB9V?y8&GkyvGkyԿ?OK>7Σhx c0<1 n}r0<1 ax c19s<{q8IU?x c0<1 ax c0N>N>N>N>N>N>aeJXZ\K-#Y-Ƴu&8–]ز-O/;ԗ5^VgBŤW)TFe?{/{F{=|B];F<l4q#FCq#q!886^=vل8GCq#q!8,3 ̒s{>sat>UgY}f #! n/FB0`=3mQK&]Ngˮ-xѢ))ǣ>xтG -xтG SтG -xtֿ+>=7;L}l `<8r-p՛\~<Y?f=[S{0Kϵ% \=o+w]0ywTTovo@` OsճTR;0_oT ^k"Z2_μ<>zZ|5$֫ՠRoPk^v!z%]Yoo)]{v:ROݨߑwg8W> \.%Rp\wNw@o?8 ` `F` cvg,ppS [60wp/{<O'SiO x</Ke xmS؟M+/մtZit;;\&2٭*j;9s{+y~sZژjE'z']5RJ\xKbxQFmzREilW*m<_Fg(,Ea) KQXR(,Ec8p(8 #S &p,8 N'k0vn7-Vp#[i4vzq c߃:'o}{Xa >5|Xka >.mW)?0|JvzU7Zl$@`'v~DoIx<ρ Ex^1o7xS{}|>O4XO;w `)Xz]*P ցP փ ku2~'VX} v̻}r>ArL[ݙaX~UUTUR}!F_FE&DTcje Q݌TGdձ~oXry#C)P|PM~ZШ^RS(q7g 9OE ޥVV3g+ ~_fVFɥs5ԉjqw}H~GC%xa<>iHysCB =z.Ѻϙ}9?Q s>1ﶘbO~J~Sp58"r1{1xs9TIJ_2m AuF7otGc Í5F}=Vsza{ &[uNbE-%JC;S +lSnqg8X,(t3ŸNi{6LiHS)siHQv { "M>{*\J^xFPo_iQ}+Hw밫 w nĚ7p7 $qWp܋䍁r•vj}~+5Xx{a9Jx>M_hr;9zR m= gc}ϳa}4͒{O飰y"o|{wf N?oaqZYZkx>*2Q!{= {a7`+J{=#MMMMn֟rv~1Є<-ܢW4j w>j1:LK{YnN}~@i~ OS,:_ Y%|19R\N4jB6W*6W+=duVOY]ԻV7]lT!O9?ͳnR>ni 2VwZ(˺NivZ"5mԃNwf ˻"Z`\x -#qp]u}_*#~?8 ` `F` c8//4/4///4/4/4/4/4/4/4///4/4///4<_8!Z_>׬WXGp$ǀcqOJ޺ \ YuzpܤZ7} &vW;{]|>gzs^G/3?xjoSNW*BxCq׷u~ፀ$sT|it{fHW)fآ'Ը,[>sϹouXZnTR-\?&k.t=e'z>/OQ` !`(`$FC0xp88LG(p48 ǃ$}:Y_Sչ

].2/w+*p e\˙:p=n7[60Ynؐ8.ۻfl]`  '#(}1V6Ek2JD_棾+Tߵz&owNC?gt,x<^/*x^G[P6Pu<8̑ƃ߁y`>X/ ѧkjׄvˬGpIp,O x<^p6 ^/W5:x$<}x#13L0S7[0|y`>XE{`X~U ցփ `#6-`+H: l;N ?=@[l ~A& 'p7i`j=xp88LQ2hp 8'S/4p:+p}&8 

\ر} ndp;w{};#z(x <O,x<^//e xlxLo;]/0Gc LW~/ 0_٠| ߂20߁y`>Xb^z]b e`9XWլW*P ցP փ ` lzTv˜vCn4L?3*PTꀶ=@@MBMaj0;A zޠ :L^/$2xRL)^/S)˔*!#(0ƀ`8ƃ`8LG7Z: ǃ$ /SNO3,9|O28\q\.%~)e^TW+U{-:p=n7[60ow͝!ii^%WAE]Ee|W|S:r髬 BӽWL5B+7ysZo]^Er={ԏB=[8cT<_~qhטľ&9$LyJDI?Li=mM0Q&zDO( $p2-][N~){3&zi ځ`wfY>4yNqST(E8z,BEcQX=EEcQX =Cϣ[&ɢh,&bh,&bh,&bh,&bh,&bh,&bh,&bh,&bh%hr4Y MV&FUɪ_3>oI]V.jˢ(,*tYeqtY]GeU,.8,.8,.*e貵貍貕FCEfhq`8\\hѪ<GhhK|:m5:-NVӪiU:-Nb:-Nb:-NޛjWkU*Z CUgh-fbhXp)zmbJOU趨9Iיbx^WkhZg+dL<l-lj Zlj ڀ(mA;t7XoAmAmAmAmA׹ʊh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z VVBEjQZEEj1Z Cj1ZEEjQZEEjQZEEjQZEEjQZEEjQZEEjQZ Cj1Z Cj1Z Cj1Z Cj1Z C-A-A-A-A-A-A-AjhrZ9ZVVBUժjUh*ZZVVFUժjjhjZ5ZVVFUժjhjnZZ VVBUժjUh*ZZ VVBUժVբh(Z-Vբh(Z-Vբh(Z-Vբh(Z-Vբh(Z-Vբh(Z-Vբh迩h8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-Vh8Z-V*jhJZ%ZVVDU*jhJZ%ZVVDU*jhJZ%ZVV[V[V[V[V[V[V[V[V[VۈVۈV[V[V[V[V[V[V[V[V[V[V[V[V[V[V[V[-ZZ9@ VEEoQ[EU*oJ[%-&z*=UjBj^lu֛4hetAg#Go'c>>8ESEkߥek7?|qvWAs:T{I ߯ M =FKs1g>Y> [*GuV?No ޤFbi55`ޢk&om"g1.|o R2dݝ{v*woUt~˫|o֋diz[#kgԭVo-k~gSޠ??Rj^SC:"_w}&ƒ2@/\G!s[sn}|*o~zr]~Ub>F/0-嘷3]Vܺ;Yc[}<ǾȚ;׳W$[c%5ְJon-$i֮G^涱݃^ﭳ^/u536[FQg=WR﷯{1ڰ6X6 p]_#}]C# z>ї5lJ.O6JLu-`;ae^![km[o6)s׎;7~VH ,O2=ѵ0Xk dΤ/Jڜԣy>kM {aVcF;no=}tV1Ճxh)ߩ6=Qt=LO&}Ṡ@uӗ\ʛL'mc҇GڬL'd?vF_37NыƙA5Pq~\? RӅv<>H}'TJ>Ǖ<=o^zrސJ?_Ϋ]{~zMC_A5QooIS2?K!={n/Z_S۲lˊ5اyr{Pi}>Vxh/} ulb? n/'(~ε7nO w9fK 3OuSAZZ1977T T|Q|c}Tgxxwo蛨zzNzNU;W TKKՠjp2Xڄڨa_pL|5ҼؼRf^mޢ24R'7Sgϛͷ+\u,WUf۬1kսscV Tzʳ:Vo5gW5gMPT:ƺBŭv#`=h=d߭G7ot9v(w|LOFUX>#,ՉOsZʖv2h*|_,LUA8Z.$-grG(7 K~ǫhlix:-i3U,Ysl;%|(\Z:[ZڔKK;~iiSZ:@K s/fzyWٴ5_b,y4_0_S!uk0LSjb66sr̝؇%ab0VbJb%adJFa+ͰÙŤŤa1bzuJ..RP&6tʲŒKRٮ%lגZvS_b3n˻T,-v-Sy&kk5YCX_B/nR=T_쭟ꏭ P3?PħH'N_ēwŒs$\u>(b>>YR>e|R*J]'K]'Uql|ԝ|ZVw=|"A''|ھB"fnKlȝ=ݙٰݘwdT=RT{=Q *>>LcML$ OS쇙>bOS%l{ELKT {jm(ˮ70boWSڗDU٢Vgwvǧ Ò_p#ud9G[Q%%}лzj.DENE Я[P?-r ߒ^hu>ʐUD)uΛ,l~6OK9;bTl5jcɓXaDXwʔe;}}]_Rw篒=@/f힎u5Z;%ޜ]Q1=VxC}P[># k헏ːMphe>N%2G/kF&m9KhZ:je1mv{&{ڳW=N'a6UCvJ EϢGzFܹR;!~n<:Vg.v?mٺwfilTdf7l٘}ֿ2=Nv%pQbWk9dD }|߆TZ ܶ۫$7~@ʘ%t;,h͝nϐW49H^|,~n(zZE*3IɱʱTYXon %#SkG6^wS,OA{:u ٪z*TߵhPA\UrD(dTdu(SE%: +uuKEw\&:rW#樫PWVtu#GGDA$ f**uܥnRu{x;cߍVݏ^/x5uOj VᙳO^(>{q'/B|Jɫa⓫'OP {\ol4szc# o|a?Qx%Ɵ]k^c{\k\^ ]ˌiinxXW,Qتv} Z}CP徏i:},`c'CMh{K.YzB">4%4)+PWbIͰ'nT7Q|[խ|Kt~t3Ego.hZZEbXd3梓âCb.SE!B:9D'7KRbX%jZbRb~4Q)xfbabث%{5^}0}0f@l7 ĂwPNk'fKfHԦ)je[bٖX%me[bٖX%mebٖX#ڴDmžâ6â6 Q)6SDmLʟRќh4ќi9Ds͙)3K4gh9]Uޔ7G2(Ľ~1o7KĒ89fDʭwaH,FQq2G"Q-Qq3CIT\(pүr%6JOh!1mkf f3žSž}bžM,c[I86 qlX؀ı-%͓6Ob|]%v J5]b\Wű$^Kǒ,%_֐Di}NW7vMkű$ 5dq&čcӤOJl!0SaFj Yol!є%!jb7/_Joϼ%cdI̕%=Ep]p$dI̔>+QhD9Hnɒ(/Q߼ļ%nFђ|%$KIĨ~'YO$dI>2*n-ld,4&3Id9$D~lC$dIH'MR$ʵ%m&QnHܐDiI[(QnDrɕO}Z٧}r+g\9ǐh@rvȕC Z˹DS7>oJ7gI/_"t0s%fI̒8eagg*?kUά{ [)v^zW~z?We~lO-:~Ǫzמk,"n`}VuDz^JB>js`b!If{yr<,K#zFiRb{mQWqw`}vͱ& f&o_B}+Q@k/n޷?Y{{eWc_I=^&qY廚K>HߋejU d}$Gg-O"R~Tˤw핑ڽhSMLFÿssXmJd.h#xn/k5}߱ZoKk_ ~7 b$ַ_y~^~!~s/7Yfܒ'ݜ>U+Œ~uG-q֋XC,Zs[d>T{j>"ʵ*ǧu|j"Uf(TmD3a# fF3Uhd93T7UQdFZ3"FDu0FGdt6ٌFwC??]/UsA`UCjתQj?ww?Rux#CCՑCee`mVLs9Ek.05Zu:NrrUg:8׫G)mCzB}tT:NęU:Ej,&¬O7av3nR[*Ru|l 6O|´B{(2 FP!#Jj&eKkZeEh2l#v͡ӤsshbhM[fK[fЖvEsEsEsEӢ+ Һ+ mƟ1 A{6󥴺Ma~.c~󱆐XCPV6MQXFiFekb%J2J2J2J2JJ䊕JJ,[+Jld2#rIX_,/bVA]e:rCl!`IT {ŞRSL4,lɰcUj5vSRkĪbIŒzb;;T'E즳MgTW2,C#H1R؄#Z(ieb޵6b6FG5r&h8}i'Jҍ.Ft3a1n>%,O1$Q)S%qiUɸ4ɭ%JE L0}.S?P)R_Tݰ¯X2+$X,տ@BRRYĦ]+lV3+lg~6Za&fҿſE`[Yשߡww2Zj n,a^Ng|VڮB$`L8Ga QсCTJ`L` cc֝xG`zd`"%8;⠕8h%#Ɉ qLFdH)WOzu*%-Mۃ̾f_cb*ʵrz1hMTXWYWnʷZ1,kJR!k5%Q+ʴʪRc;LskٜQ]b0t=%''}}2_`__c_ï772Qk*hoV͝n!ޛnNҟ{JLLuuzHO"=ّZzr Kώ3ߙ"g [ ?GT^*%iSåR:*R>H$9OGL"qg!1t=%׳l:{'2w&JJDug{ߍt]ޒӺ\M9Hg.XH\F~X_j_$ |a~Rgv\Zykw5?ҧ'R=C%r=E%%O`'s7R>ѽ ݴ}.QdCX۫ Տj_'G0K};^{ \NtM^1l}snDD O~e)q$3$ eϚ{zύd˽cAs3}l11Mf359:FZ,i>p9:ٛ_Q '6:J%D7?}gQ28Է(gԟ=M,(gW9=Jm/J-ww0%i}ih;cwV#VS~&~'3{--V^tǮz߹ԯo\HMo~klwr}祽~E.w(42 Y;٥m"yO7g۰~2'K s$5A+Yve[y@7./4H8|n,BFq%q-qcTOB׻Bh h`sDɽ-S.‹q~n|% Ht& { ^א\96ʱ%WmH=RG#ULku\Z-AYZWo&r>Wҷm|7&]kmrM\ 3䚼#S䚼#G5y\X2je\wdhJ"UF˵zKՏkeD0b^w+}b?H}ͧADŽ$sc|8!uDc%Α:["$K,SbEwK_?9O?gJ<^3%r/s_K<^"b3%r/s+KeR&Ԇ(a2bX$e`G8=dJ1,$ nH2I0*C!yɖAGG}ZHާzKzZJgzKzKXF͍\ $4$V-54^}n&d%)lRh2ʦ4cQ?oDz_ެWOjr<]%WjV֫ނ\&#]ͩQ]ѓFYHL?i_Aڼ {_=9 ZݫQ*dKmSWN]C>5c܆1+{|O].}jVI "+Zc}<Y+ܧO|Kwq㖩Fܨc:_I/Ue!a1qÈ'6bۉ ~XkGp'qy:QEmdq I)i3sT=}C#cSs9œa4g__ߙf̌KerGs\e6+Jst,VnVw7 {=|. -'qϔ#4%wq~2>rMpYܣV~m5{*2Br)%%-#-? #ezW(453SeHh3 oul0S]<'Y~ygY7w|1nsJ S7 ̀L}p3Tcdȕ^CψHd=6gKDbEb۵{l%{{l{l"絔|^ZH>Pyk#i$6@ri%vI.`ɥ \`ɥ\`ɥ \ZNɔZdr%>W˓)aɮJvd,ɮ]˖%ٵf]$fKv͒ZHF-96Krl9c$fI-Krl,ɱɱ%[Prl~ɱ0ɮ \Oriɥ%s"?;@),ZD)|%Qk#ɨEnbɫH^-_)Zɮ>Œc+W{~$ٯ"ٯ,ٯJWs~Jy1j.ٯ<~WddlL'ɁJ,Ur`]%!90Kr`,Ɂ$fI̖XHr`=$XHr`9$[r`I̒X,Ɂu-90Kr`Ɂْk&90K#$+gn˕HgɊY$+fIV̖-.rN"r6.w@˽OŒH,\bXw*Xl9̄J&ld†9 3X_L&ٯr>JWk~O*WPI,"J˽RrT+U,JK,"J˽RrT+U,JKZɽRrT+U,JK^-"g:?;ۙc("**"""*^"""*"""UQUQ?QQU""[QXA}?/yx{ĨnD 1* ͥī!^e||: l}3i! Z}u}Kc픿g^dVi40_ ۾ˬK|Q|>Zs;i>|WL1>M$?C}CSYqb)m*m^!cg, o}mX&iA$ԃ??cVV8SӳM]n+V%^dPKk[0?k/߲;~^h J\r]O1 >}_Ӭ^Ma|}5U;9"uYM5_/nmk1<:bww"c 56I?ǚf6bwq<27\QT4}|ٗ{?;n.J@%XӟU{6)iwBU]y+_n|-ӯþ\ܔ_hT <5-G(Bӟy2yqv|ގz(Wx/k3VpZJ [2`*"d>[T+.̓Xaf|2g1/f}mbVכzYV7l&f1 70giinzKrv>0Y@י%Nέi  / a1X0 "= {oagagwzqv#Xaaɛ`[X zBYMflEخDj)9U<~sv)k]-R3,R [T)ڴڴڴڴڴڴڴttҳ®FN_矅_ ϿA9<xnx^xixVx|"i.:|~|~=|~fE >>J"> > AԬHq/o_%|z-{Wཚ8< W{5!WB,:xYxax%saxax-E ߻732n/nnn$nfEJ^w ^w^w-n} nn=nZx. Y(֬Hv뮂ם]; ە";H^wRxׂf]uc21Y: IbϜϜ`663ö1lЬf _jBv.vve.fMKXŅh/hwb;[[V·l߲|R%-}-[t÷·«,W)tUUU«tA׈*Sx"S11 jֽT{4!gsEXJCy1eV2Zh=M2b֏y7}]`f2aT$xDd=#NF^FFcRaԁQgFdԇQF̣2h &1h#3-drF[h3mv2bVef O3:$(Ȉ8 #Y2Ȩ z1be#kX1h, &3bޞeZh)V3Zh#-3ňY5fa$#fE[sS%#!YhY%hX▌eeeeeeeeeeeeeeeeeeeee匥*YVc[C֨5aZ[[[;YZ{X{[YZXGXG[Y'ZX[gYZX[YWZX[7YZwXw[YZZgmĦYlNm1[Vokc`lficodjicodjamg[h[b[n[e[k`lfico;d;f;a;m;gvfw}=b3.^aQ i9Eu-]3F0;9#hhXXXXXX88hpr- K[( Rm :t.VгOAAC F)_0`j ,)X^`m v)_pXitڜntFqg99999999999߹ȹԹ¹ڹιѹŹݹ˹yyyyy\fq]!Wԕpe]]]\]]=\]\]C\#\]\]S\]\s] \]\+]k\]\[];\]\]G] Snֻ-n;wqwpwvwstqwrutqwOrOupvs/t/q/wruopovostqwrspv+B[W, 3- v,RؽWa *[8pr™s .*\Zpu[ *[xp“g =qx<'zggggggggggggggggggggg稧ss,E"oQ(\+J)PԹ[QϢ>E -Y4h|ѤE3f+ZXhyѪE6m+YhѡcE'NRk>oƽoKo[oGoowo/o_`0(Xd4L|"R j:Fv.^aqIocTl.v{šhq8[ܺ}q={+X#>s/Rz___g_7_O__ PHx$T l|rs/*_Z|u[ʷ*[~pgCRr+U Y1b|Ť3*fW̫XXbyŪ*6WlYbšc'*NW Ӱ1l þp0 ÙppppppppcTitTz*he2[ٺ}eʮ=*{WX9rDq+TNU9rAe++TTrG}+V6T<!}qF@$ERHHHHHHHȠȘx"43|Pw?"igx]U×闀﹨ȯjq q!fAx*w]g\>wT+y*bȓ.C1 A pn#k@qX4 D@z\W4r X܄G5 v̴C>2)87)>ދ4_Gׁ Qނg5"T2o܏k݉qK%]x )KKJӟQGwh-Փ"=.|tU}Ui5eګ)zG@^{h0C-"Rs&| l cٚ?BC:'Ƒ8ͨs{\D^3j9>Dk w)ڲ|PP\K5w :A|VE~y8#j9iZ4u f.EM (G<R |:H\CNTCI oq]+gj[zi+:`UrCn|&V8  V#\B_% {H&zvT./jsK(hZ5#pFB^E=󹉏wT_*=& # g i#B4_{] jrλ8*}IԴo>B3oB_i͠bMjFޘ'e#kE6jPlTyK.CUbϭ_>؅EW4BlUl@)VG \eJs(>?CTkxM܋T|+@3G9vӠVr籼44G@D3SpoҨXVfK}p܏P!O r[B@́f5^v"b).Ң⑽ I+g;;LI.`r_'?ڋ ã1T/#9x\vfPpU$.ܫ"%j$_(9(?hz 'Rl`-$!B[]aX_aڱ0# 5|sGje]yo9"5X' 6Nj1b,^xARQЃv"]1+EcCgy,Zz3?#X cc -=JEbW`3a$mѷ@N'dNҧd=1K~G%KK"/ӵ7;2ylvE -(}n@țz졧iMmMԉ:rX4Fr5ݢb| 09%FPS%~|$+"gprV_|,>$>DΉψ'ss.W++WQ\-U0ފ,Eh)HNT( KEWh#H%B[L tp5Ej/uJ]7ROo]:,b]pTW.U*{uwdzz;uutXwD{Ww\PwZ*0&)aަ  a}Dx(=apnaafël8gi[8v37.?3@b\eozEzʸ2u nlc|Klh32M,45/LXjrb)d YS[vB[⦴Tgj)36unh bw-nM;L}LLw27 Ɗ1'1=l(5=jzTgzii844K|44[lc)ML[LOd)>me-mq;Osߛ7'.4kzW\lzt\|`s"s9in-n01ۚ{{Cij<T}Ds13l1w "x,kk[[[[[;;;;;kj5O&TIdkZ״TӵGM~5kԌ]3fb͔5j,Y\fe͚5j]`њS5g$[θ7x*^o_____?????WKkZw6Xfj[ֶXۥ{mھjU;vBi3kί]TvEuknU@'k6&9HxD(M$DDDDDDDĐĈĸĔĬĂIJĚĦĎľDCTl$IKҙ&p2L%mݒ=}C#c㓓S3 K˓kے;{ǒ'R4eLR/LERT&261%=+75 585,5*565!595-535'5?(4":.1%=+7u u8u3\"M@ q-ȅbi3Z9(C97s(Ư  <gǁNùqDʷ 0G<|؂@p qz)O#\^#91w|呾)B+=<)qpN|r^#F>ý 7ړ#Βpԉ 8>#346(ԺRzE1Lk HQ$ ,$ijQwqճ^Z g#Y.W7$;hhp:Ҡ{m@pEjɅi5]$5Q H4]۸#*ҁ.2MXoTVf4%C#2~w!9R g=y"8u\y[OiJx UG+]%[\[u22Ӥ(<7qB;RF5-CyAӉ@5~]7 p<>~9[p-+Jy68Aӓ?~7i4?=U#@ WH,BwQ3Usx (?yOKB %~yH}rh-|kgU(tSlԆ֕:$IMP/E<> }K!=ܪ[^Ay</>鼠֏r.fzqnZDQQ} \&% .QN%La!sK#ɯϵAsk?W?4 )"P W38 +E+.ԌBM>`\NF}<4R?'5=ϧKpgbboEC kjMYO[H)3aSH*GCzkk:P~ls'zbc'4[nbxkbF (>֜&gZKÀsqI62@`WsDӣ标`֠rQX}<rآ,˃RӔyJ!x'k5%^2viRs/+Ԛ!{z0o v&џ;N>H0qlQQi) ;A@>S(^J5,Zx r>#<-ط=n5> 6^X:K ܢ94-8jqEط"(4)AkwR+~T%WR!g珹]L@+\WxG 5 WkU ~ &x^F170 X;*r.  !V><0Lm>s9w$֪HH?@3=fG>MHN6]"ghfn+2 TQu%o;M pozuT[,EQ+Fo!%D>XPo:Œ̃>IefGEX:$oa 079{\̼Ej}* 49GzOǑ|n/VV,xJdy!Ӛۗۥܲ9Qnq ne)|,TU̼/k\@X/ 8?Jy=={UP/<^:e 4u (RG:9p/7_(OQW7t$%+D{JßWR"G y)_v7Ie7g[5Zse>ؘە6as9yWT{8Hg~vE {! EI!^VpkM5Qw;D؄b#C4|rѤ)~~,k*kӌ"pdsr r<6^$? È6({ y4q՝䝫$#|qI K4jct>yxV+89/JJM\r\k4%G9#+Qbć{)UyNc+'AQ[s/Gn*hCB$[˹."^HYNZJ4>xhV.rSP#ɨ6`wiˑ\UP[ԣAdGdY}Oʯz;OkO3EŃ|l_N>4WuK.1u@h+QSBk%l U<9U xlѫ*Σ)K FER7- #c "BDL_.*͌SM߲RY}nO|9l*v:wO23DAxzH0)o|KH{{1/I<;/KATQyw?_syTȟu,'S,>!>IR'->#>K U4 4[AI'Ki-}Lj/AέVJe:B 7u/Vչ5tmn$m;ݻU,ݡknK驪!}7uPc|dI+M"hrBoruҟL1SLڙ[(n3$eFӫ7t7413[[~n~tnu<O?ҏ./?*B1y[Ty~=YKX{7\!QQQQQkFubԕQFc4F#f4DFSMg4\F -fJFkgVF;fAFG50:,aQQQ 0a0V L 39|aTX! -vaW8 &B4|yR~rH`m3giqU92rr&''gr2}aq1rSpdJg_v6oQӓyg琏Rb*}6w / ae~$$,b:N&vRwrWhqe#O>wfhHO\O.j$"~WQ8 >o-<4gt{j=D r/e-Jx'M[oSHG|J@ K@LJ<ս$wBw|P)jnG9i^f0>{Ϸ KwA]_ {(AV;zN ܢ7VwZ \;Zi?Cr3^'5*"rq4XRRSF~ =Z*=_ WKSWp ~廨 .jZ32P!ʎj vWy [PVƵ ߓ".C |@VJj45zittFAy>\o4W45PGr5^s\ir=*:";UQ+sG ֩cY锪?ݱ܁:wV ۳NyrzWk!껰DPڽ7p.s,w̧5쏇O]N=DK[DnEHMxT6 h$aS%jÀ?}rRר p=WγjEU0)޳8עN AX sVWԣ2"0 m| (>Gׁ\>;0%~u/|'FHoUߛQX>ooFy{3B r2illlvF>6/cFVtv/G+^"M[N̹!kpZT!R ɵ]"ymkD^%.vKU #Fk~FΰdJ)|'I<^ᮒ*v3ɣ$rJRy4y#hEHixv旿Sj7]_qfvxgC_T_(ğ xenfQyХwh,F>"lDrJ_NBz};}{[o߮奔CKM}o1qI?O?ҟo7A0Ph z`4 flGnRC!h(7 1TjCLN6F,[eݲGk夜rR^n+]"OSezyPV$mփzлȣ)ҏ>k hnXKZҥtp=]F mQ1"/ (.v^oo~'&6žfO_/l+^G#?#őN1a8V'!>#V;~ ֏aR@KR#*skIZґuXz:Nۺ0 skIZҧi"}Gդդsj}5ln_Mqj|_եw&6#au=X]:KұX] V>եsKL)#.bNwZv9T/Tw"TAnGݹ*R]E^76xݚ xUյ}>n$ILID@d& "20L0dgn:[|FT|X iK] il ;#Ú#Yg9ngo!U]w|Pa*k؂m؎}8C^W3j*KSo-@f:͠7(f,f4fc3gMv`7b?0]jNOS jIm-KH3%QΝn=})g$Wh4*k4&DDi g4F v@ivi{vQ;h]P]S7md[vVcC}BvamۚvȬ:J,D4^\NKoS6ݴHH5Jesz*uU{\A|neSĪԧ/֩/E7uI]V-Ŵi%մF]QV<`V=KExzj!AzNC֩j Sk﨤UEO z:jگ:Cڨ6\iO UEmUTνTn+ȶrR4/ǻ96fc_l8lqD1/ jZJ|^CjZ{RR7MܢE4Ƞ֪\㋗;gՒ<YC{ita:BG#[|S⧰n)0.+XYYTElM y)ݹr=¾w?K4-z E"Bbɶog/>;f]1,5r¬4j.iU0f6җtMͫB^E ˰+xU]+:^6`#6? U5FUQUSs=q?RTS?o<+ $Q(uaI$ex~- QUP8 zERxMP uwFr=対3WU31K|\Yy?#d_Yuk^*v;:IwT/+Jʍvjn [˭Nrpܙ,w?Onz[תަ}z>>zg?`\0>X:X&X6X\ߛ;34<`;2O$ntd_MC1XB4{j}q}}{ZF-[ jעԭƓnC!MBkw;ϲc9K V VG/crn/PGd3 h}zbkp@T/뗑jbS 6<6N?ӟ}C@/vm(EחUb`C$7 /HMP{]b:b6[+?R?<\)YQfcnCUbx$goeøԐ}k,mFHNp v&|ı (W_ ylJu[9?"K&@&5fԚ+ԗRb<Y\7di5)rf8D'$3ty@*ݰ,˵ YQV`Uߺh."@Wd b%:Z+]FO_v{Wh ڋƺ_ơh<:zt-ծeMܯE+_V6&ZD5c6Sц9mL39fsKx9wٗ<,EX<`ʌA f7fZ2ъY0КY2˺U fEk-9{YZLV3?cra6?`6O3ܸ.wǡO gP}jL9:PW"LaocV}i_wW;mvy;E=] n2^Ѳ> ъAJaDh5L-'hoo'k!oooox{6\[G[GGBf^uVPDWBm4f#Bɪ~oV֫~ɫѷߧ7Gw'̟+~4n5I63 7fk^3349bqNQSѩTu95ZNi4wZ:mvN{tv.NWy<|\Ӟ. ⺄.ct)t<\&z%9ko5ASD(mJiijZ6lk3ؤa&Ì4c83L6L9a~lN?IsSxxY&P tyPLJz  x՘gtU%g4tϱM{ `JNz !$ޫB woZ^[{FYKF#lB+d)Nd!Z]@Fd}DEe YBVST9MN3L_lY\A < 'R*R4"H'EFYD1"Vċl"!r\.ʖX$r|"(*JҢh#ډ'DOG1LGbXLdUX#p84>O3G_t:f#mA[6l6&"ʎ.:"˶X,VɵˆUnM.S\$13r QIV%œD-kZ,+KrmoHLvdEQQ4d]YNף07\8 n܃pPIO)%C-DDk:Elf],gP{(j aL%L)"F͋ڊI>6o/Tۨ!bϭئɲzO\>q$}]GOԔI0J%Wj̡4\s}Y>i'6§ZQ§m#M|6E/k&>Zn+v-؃{b8Dtߧ)D)IGzZY Emq ~lH-Ao x肿ĖD7sפEW:i[E&уRƶeMeTƾOUTNY@f'Q# EA=jcRFmvjgwCg{F4;ͰOi}"^'|u>_ (mi ]:ڽv?uXDK2-^Q{ 2e Nnn LUjKiuT*jFwq:S67(; T~D] fSu;9n0NWGgAW(LK](vqXMTD'5YM؋vSjinԻgUgjdǨjZ~RKRLjZV5SULZoڠ6_&Yj"=ËS[VMmW;NKV{^OY:::N:Ϊs꼺.DuI]VWUuM]W7MuKVw]ު|X=PoꑛfwD=UsBTx!zd #0FhNn3^:‡0om&q2Xxius\5vӼw)0ul#0LiO0fl\Kk[Yh7?xk7s˼2̏f,1K2/ [Wˏ+r;#.%.XU*pe6܏.\Ey2.Żl^Wͅzս|z/ ^*w-v]vWץz]VE]aWDEb+r*cJWUs5\-Ww ]c5s-\+ڻz>솹xhiy'=q u?a͙;w.L\,!| k2b8@ h8H!qscqT'IqJg9[\EhqM\ qSw]s?}B~,c9 `)|?.낺.Kº.K뢺 |h[J GGɼ48^eR e-/m9|c+[[Bhٺdm=b[nv=a{PQ;TvURe/ մSFtcgP];ع~JYͶi}ay6>tl,J_a17XŒX2EX~+O t?8.$)%J6#6&P&ۖ2vaS@Q]O.?{s~/En~/7+~̯wkCc=cr>.\b ĺXs ͵.:) s#nM7ܔ[J\q=u7pO˽?~܇9L x%WlOl/ۗrRM(8y"}̟g)sy>/81,\q}ǭC۟Tp\+cSlͱ6O-5'pn-nmw௸Nx?BrNι9KqIʥ jaClMLS3Lem3%._p#n2eLiSGpyxUS3y& N }Rw|9G~"OU<>W_r¬4jQ.)_'jfm7/B7xc` lnn֙ _d/u,?AxjXg2**@uꚀ0!j2+.|d5%(ۅ3MjxVisV$NBuyij?B0`B,.JPZ)v}~͕ig7~Z}M I;Ôa|ϻ:zw JgVvt٢0:2Q0:o6! "!S(M{Us; ہM%ʨ"IIqV5f>oNbA FIF#+ "vpe=b ^;tiLp?$3r($$ ~_G~%zODw'k" o ts'#Xv(h+L1+bƔ?$/94;9u}7f2%k' ?>ex[GɞP/'2,Gɘ 3eXMzI٢멉S^eeX/B;OMflUԍ(3]~@!Mii5s:%.xEf4Tk7HrzLCoVI ֟U1Gfl&gg?d.b;H8yldK6V_A&D$M߄RR0%呱7MSj^wi M9)o`9Ә1\%gl]@|١E,gTeJr,RIyT2mX (Q!C% :TC*˯{]-#K>YJr>,G+*|dVsEC}"O㣸*29h82J^c@+96*DKI\!ã9WgǍ`N4zcO7d5d."ˈ/;:tEUZ/*UX*h"wzlbuELi..~[f B^WBzڋǢA9 }s+xYa=ͬdχ.lyR{(]/Jzq3^lG^}'KX̲JXh .m`D.Gh[q#GTNෝnPM~eYCjnh50|}"綢jK]E=f9(K*zfK+:vkb>vKMb|9- 1 s8_˘ŏO5 ]EW!Z5y |ʆyDq;R SǞ dZК-aaǜ_0a0Asgs_37a1A`9 :aeEGi>m}-t?ᰉn?AԈ?iԟF_j4bCE7GG|5b1z: xrT8rMox \W8,IHȾ$$! %;(((nhmjj-}Q;efL;igmyq*y}~"OBr{ι{,`kQf2Y,YJc ͚ESf3lOo%F/YVP]wxfB>8ΨԘH:3˩I$3:1wMRZusάTouFբZ䊋IHqJrZbDR%ę=d< cY,a)X,'H 7B xJB?#(l2&fh m53A u4pIW Sf-l % SYMitϭW1 $3)$ϲd-J=H Bǐ>qxEӵc#C_7ebiJeOm/Ă2Xt/-o lN[? m墨$c@Y8^Z]( 7\*RX IkmTZ3 aKbAa=}Ϳ@D\-RNǤxa+^]ӳ"@: ǔ 716͘L(~?C];:gR<\u4=7XunhSoZ~T l>aYƠ0 F @(|fK}WB&#ṗGNz!ApbFcƎqA!6q`d_5O'N)4uȄ߱c<]#g!!bC`D> XlՉI4&3*×5'>l|oH֠b1Y|\<^ d#| _nXĪ#խ{ywiŁ?l꺫c {AegBubI c,CooϷW:b@R4@; O\vN"G[M_'΂Gb| >:>r '3ԥ3GW+3&C2BK+΁?'}"'%c`,ݗuGІo,a"n /cK:16)Ҍ伞"%E"% iLd"_Y @ʡU^GbkK 2<>#EW`ʴr.^-pD#5r^9LE<,M/sˢ@?ykw@)߆x<|Ӡ!t zdÁ>#T##RZwޫ諊 446h>PnsUe ;% \<pHU;#𮽦IR1&'LR?Y/c+qؖhwKdJ{pMϠ?lA;d!? j9T@+^\AOE.S@pyԏt[em|ކc6zJV*FSS-ŠwrDf H1qq5;܈(+ěӤ.zK|qy?MjQQ]A^+!ny]yĝz5 :@0MgVȬ}n<-3g\-=*wp 9&'gٞg=K#gS~pg\p;:~vvXec=}t<^Fe xnScهbkEP|Ҽ]Cؗ}guݿ6N 5%ԋ`ȣUwWz!['i!KPFѩk+OREZ6кk;j NRy{s"kLC9Mc0(U->.[Mb]ݖ,mu-YlYOX#z{*\P*S>,o;_v`~S$"艀@p8L!$-7e?7#xkR*h6y doؼ=#Ek[F<-bMf_M*56[EfQ(=#.뙹eNy ]4-Sz*&]ڤSF1;>ռ5ܱR;EP誻1ːg8< FHFb3H%OxOܖ8?' F^E3@1-ׯ>OF߽o[N?r-̤ ̣>i;uл蚻o{wjj Xˑřu O8a?RfEcbxZǜi0d1$sCx+!)Ʌ~@OCKLmKZCz6l%IG90[Xiu`KB&+)S;;sURMx0$c-Ytr:kDnI)y }fz댱F9 It>&iMcfB?|6 81[ĕ+dUTCFJ$Sd|Rr `3NJ`͆fX %m6qGzQMB;lËj:Kp]{蹰vO&*δvsaS3(\Q;*!wYHX]SS=i~GZniqua̘ /)Um.ZX뛝A$0`c}?|"+=`#qfC9Iy-ޜS t} ZW;ܜa9ұŘǐ0Ɠi(_Lg=]!~x]êEy|oFt\LUܶ2C/-?ߏm_<ׯ${b- EmXiJ4Ex~y:”dh:bL߁n\Ȳ@"a˟2(ĀqPiklZhs_Ҹ[~z~wlY-[/ ,&;KE8ajZ^9Y=4-ɴĸnۥpP@aDUT_Co=/=۹{}meCU{ _]}}HCp<&#ׄW1dجl`%lzUJ6XYeYe+m 9ÚڎY}{,G7)c8WݼB)?Qsϕl,=,&ےܸfLQᮧ̼m 64|>wg/rYL4zuh\ȥeICäG홛obg/X]ؖ.uWoTퟅ'-J(ñYeRORb{$TDC4:`QJGH61H9Wƨf^6MG_H%Y P< E)md+[:W",X0 P{K9^0€w}sB{2i4KM(o yIG-Nysim2rO7ȿ#o2t4M%SV<9}}gm/_ZlB4a[ý}u-ǖes8Bpjin$y, =^jdnq=C18LeGz Z"9f8'pM'f"17%?u~z@ڧwI >:B~}@c2-s<|]$"MaRZ7~Y3THCǖ9Ӓ>8i^\613 ghmi"?(:F&y{Rs2jFIkPz,î3q0Ul=Z 9]^PI~TRFIA߉EHuac_R]5ϟL"+4_Ox(!>87֩i*|b]%2<^C't13}5cz2zL#+& EpJj Ĝ27tS€#:Ah 1YӷBw}|Uqnd;äa MĆa*kjy#@ޖB#mÜ8&ɬ_r0Mgؓ9a$Ǧ4OnBuHhIJso5\/#V KQ")M/5&cL$V/yi>;O@sgrv%8Mq&߿^oJ>LeK /%FԲʼw3T:x0 ӾsƯ뉻)8)1Uu3UI,޸~7MHktB[F7lmoiG#ee7 L7<ؗuɺ fXw81ϒح{xX~n&<l=7ϓN@",ٺFyTBk'FDXSK ) [l↧ bD cɨ[i;Ϊ_I/N`lUXmWpE&ʫ.]73A"w-b"LT~NZ|\wYALL{fkHE,u/dN蒡E9iq4g6ng}da_,W%}9%J-ه{}wvYq2{ixf{u)H˲K<a)^6߷ʚnoyagwUeWY>y-0EB9). !Pۢ7l*XpdUx*1|'yаya}R>y4LF8 uST윓!cdžyfoŖT't@.&ɖ UaNh&h 4\n߃Q)IBx2&t߄"O!Ĉx"sl5a\WP0݋Q:췓id\O-)0Ρ Ɗw?"q>o@I#}+5٥ b/;T kԌ4a-@t]ޡyvׯu~a65c]?QEKʣ<(H=Ȁ&!ʵ&LDJFxeSac2Ѐ+7R@΍EfqAz?¯P 4ኃFR ~44%@kR{j !yFhEX::M}kW~T\hC]0i[d =Spꍍ =U>pG[Di\ouJl||i~އQwDKV rSMtvg`<>ptV-q)Q2M*gvt= -'Y,PqeCC˖ˏ>|r;AfK;KJvvŝ#k_{S:<=ve^1A*d jhaʪe}U1X[V|+ߖW%@j46?twh}f붖s /$J/^GtZͳ">((KêQ$l(4%MX n#d FԖˡ4)4jGłTbڐ^/:*'gQȫ۝!V7"Q1=r#)XڏE2׷fyP떤4L6:K \aVlׁڕ7< [R- l~=ZQWJy2N8'b̹wAa۠kx8Ҧmitٔ㲳;A[7L#: sY7> <.pͱ~~|S:+n^] Έ@{=r><ν2Tvcre$ʆnY%mWGzkR+J-GPQtɞܽ-\-zS.ԑܱuC>;W)ƤfTs::w'T**U`K1̢5Ʌ:&LvM5+7}Q3KHE87z}SWMl9^Bn25j,Fd/)~혇7/27-uuC۝TivwL犹r;GGo Fuz8YNOď|wD1yU<6PZK@cCLuH)ˉsWV:wVνT)%kR;SUujsN긡͏|K]yNW-őX4r}c\r,E.{z]*M1G'=15.<EYTtLQ- %"5W"hZڒ{L,:4"r\o.遽rQEOI* M.5hj Xȗ= bj? `~Bhyz>DQ@+;Yeb%P&`q~D1sb|oXvq'BroGl@ ]]$O;F]v<9N7N`S RV1 齽6i:cqp!.T~zVN{똺j2z9YA-׋n1GpC `GBLkuҟv0g#|=u4&şIKNg0fa oK\dc6udžM8gSgPcČ'zŠBg6F=O#I0ꩽ yI Br 6_%Ea#L#D*1_kb)1[Erȿ\`4Gcx#52BoyJ5w/O%tR+r%)Dg*!'* %P:-JHGs@zal=E3V׬Q_WWT[K^9&.x8AWWOOW /sv6H"@"63]#9ҐQErD2U%\БYQy!\Tأw-AL%F38ԧ7bn"%5]i-rg'O*AVV OTe袞(_S))˂kYw)!Mʈ-{Nӌp? SPb>ĤΪњ6,^E ]z'tHp8OdԂH)iɥMɦV_̴HU2oY1CMqD[9@)beˊ1D. HUJ97٠$iB~N,Q9GL=?~()pSg/NˍWmJU suf8z$"+? iHމS8(PbB P$r%ߝR'' ##+ddoIm &= dVAR/ 79!x)ӡ؆5 6K/(R%Ė <p~AL$F[QJ foW#V*!r8ؿz6nKpl۴,'֤KIII7[1vM|"MS]64sWbZEjz 񨄸pO!MAud usGP+-boKO~IߘEuffuY,EYEl]CCYz 5B >uR]ATͫGզѮ̈ -Ih4GUX=V]NuouuopPb"̞ډ3r5$GM# MY6Ak6122"0v``ٛzO0Eb^hO Lw%d-IQ\GS<6a Ye@Y ݠ'Er%a·IG&x!Bɍ)vkCcL"EMQqY&H6'-&MA(ݦa-(I k*w\)qTR{΢#P5Mc 5Uū㢼jgK)oj5k<+qHSH\)X=gO|N76A}IH!_HB[tA8q&5!6y'n+#80ev=#$\@ "Ca+GE"jDBa$*V^„"J`"21gV0>h7щp3̴N(!9DBg3}gC°'CaB v~bƘm&Wl/>!pa\e" &E, O.z |,Q?ku"A+ FJz)oH!0|=M+Ƞ(,E?b6W0J83H/%f#G}*dGF܆]@d>^}L'ӛh94V=mhRGfҠCꚍRdo&Zr%`vD"Wos7p bKJHٴ\ `cFdk)iSg:t2o^^Ƨ=W(#4 ֊)-..$]@+ 1iFoGI  ɇみ'vKYfsbIQԔnMUbL~²z"^(oqLlIjTTjIlL7˓zl/Hj NYHMEDUrj (`H)Y \fwzاly MB͖~N{c lz^ŢF#9VV4F q3n ?7]Rn%/YKγD&RO#|K}Wc"$DfF3J%ۀ8)aFf _U<]X+=Y-)t=ʦXou^< }yUc%T,jlC:.4{fN`!Ó(Gc~I4GߪH-CsDR"<.OS~'؁ ɓtߦY?1t1v.*+"_u _I h .+wFu4'EkD}NS91M͉O̸9 _>3-4d(.HS l6TWm(>jtbǵ7ko^3gNveB[!s60+0 @[f uS9}!T1* V{v$09KE=UXrt߯(OH$,G2RGcŊhj& ;Kqb, EGx`s̡YWlfd1epf7s̃^:4PP00eò_}Åm{ P5ؼǶWbrc] GڶK ضGӴ:}"?#j`铤x\_y/Wm29O.TdkԽ]M˦ ڏ,H'#d#9p&&$Dw-h NrFtN2ZZ;f]]IS㿪 9K9p`%9g[+OwE?= ;4W9K֜~}ő<xez- =FC Bg)%%g,qڋRg'qڜ4[IVBxTe םS! ^"Ҍs]Ď#z7*Qt'( >zk#[`4'&>3F iKFX:T\ܮȅM, 39YPgȎ[Rq5ˌIk/lΈ~VuU۳Nw5r _t/ϭXTߧ]8 0Ho(Xq,)l_?ՅTxS/1kUSi8 lc>,a];6rNk tMopRh =D{ؼ25ég;F/Ձ|ԷO= $SsX|M:DN>qtw!A7sng-DiKO7ܲD ot&fe5>cdZpe'v}z)P_8cDm;O}SsAu>2>g㪭RWi-,< юc P0㎡ڈX!5; *J优,z|Gh  wP "1ppϽ֪5b 㪋R`2;تK3V4Z?*T>Vͧ}ؖ|یfY>ȇ5:'ƣ:jH| NWd'|˖Y9d5vhY6l wKaoMwь*3Q'ʹy҅@Q/^JuTPR r ¿9X8ϠfY ^/J.&DLiځlS±xMSC{--6TmH;{|cFbŁ-Mƴ P/j3ag(klQmojm[JJ͵oNjSXz2m{kvڼ0#M ,QWAQM8şL1RP.iڋ:2W޿`(^3cQf_ 3"r`avWblp-^t*q'=g#*FA4F6L(Rg#q@;0("*Fmwe4<N#b[F%R¤j 0u$9*(b귷: 1!ŭF"L,_.l:-SLG!BJk!qN}wƖtgu e=`֑!-g0V(UvK. *-ƿSp,)zN:uCʸ|+R h0|}o'[;@>L&>ٝeϯ]o:YR}ʊ]{eHg,Pg<${Pȱ)gtlOթSs-śUŤF|dlHf -fD(ϙ0Fu1CR?c0S^e<,Refmw_qpZz\y\VfixMٍ$7+{eo_ww;7Lcܓkmk9r9lY95bt5(&WΎ]%{ܓ+sjymrnv⎞ߒmUOY>xOo\wP- 3+9kvk!]{n&qC.W=\]}ӵ@oׁ]e;_Z[JJoyivpQ &.Gc*tRd)T9b24/C=D!5M7Hkٌ y.ժMԳh>.EI8ACWq}&6j>U nTnz 3Pf;tf<荥HPyȚp;|cwQ?R3)D?nRҍ`j"O9*6H8\ZlDVȓPP)X0DzIs'h6TһyS⦔镾Ma*&uشhGArX(pDW;64+FY׾xKƙ݀*LWF7ƖdcvOi`oonR/CP؀eFgAs2:K&l'rosVg-axK@HcMHcke2Z$Rdh|Sn֊DZ|kCЈ jȯ e߲X=x4:A (ǖYՆhyW#*UPr+Ͼh~$?ޣ 񱃾L7vE-֔eն3 b~1k4_k"#i;Y#rBP＄>);|:Rӵ/Ubd`r =3:42˕k(!fPx_iF!+-9V$zPL 5QE ˿ycan8ĕ6^磷"*! m  =Յ`Ş%n>O]e E%"9w\bm(LGA"}vgy% -ح;EDY%)Y"ǎe(^Z#g@p֒r&B&n/0s-DW_v.{lCޖ\3:OM"eKkG\җ\PSfEeT,#e垎Ջ8T]޶3;T'7-r>ޓTe5 šL-+xgU#XvaVla'395Q12՝PGe/0ݤ2.VJmRxvGNSUIA ltїod,aj8wGL_0ZtiHe&7TXyxɂB'z2Yԥs 6Iؼ<4TcD?NM_p+i%aϜk0W]vx cu5oV>NUc ʭ^dx[ n W5l-(̚Cˇssc;q'޹);g}salfhA:ggN8nsk ?21 _ܿzFItq4[Bk{ {s ]Ԅvxn'>_NY >;G*_v_[Y*.ʄ -.2:V7S_4箥>һ<5Sͧ>nr;EXS㱕zjl:W[~sn~oի޼=1-g :k;.a|'ϡO%tq=1c7I.ߤ7gw1;pߗMB x>7RHտ3ߞ6:UFs(ozn)Mvs! 7/IXb tx]F '7@rIg<c\CUGC#dž5U%KY·k͛=P"ď.Q?{/E+ D(Q$Pc6 u#z"G͹ZO|"uhs[ tG09c$_M<{g/|k|>K ÅühCo _#Pi=5?D܏7GUՍ3ܵ|x61>^IC`f{gׂq [|s# ,"6*".xE裁;1y}u}L3ZN T1/$FB1vtB dO8uz.ddބCor:%)]"Cy/̱n#s_3 /M~̬٣z&y%BY%=&✱KWFG:4cEUlف;򎕹N 7/?,}<<°Ňο9P3.7$ n'>'A v 0FGislB]PPsd/K,Yo*^SMm3]{a1sC1j4h6\_@șp`N*oh7aY7]_ki!“WNl.EjCg쇹1jB|@(VfxKu]/4m"o {w~ckMtF|΢.Hwz5)Xu.)F'1X)0vdP,$3ķtń1nS;[j}gZ/Tia`u21J¥0gP/ ljC*r0'-ölž<1$Ud/(qD:e opou,'ZT+Pa2-h%ms~+r9O紺Uս{{,{ qiRWUn3OT*x5J6JN{U^2oRp'gv ʭQj3{o&kRfjTHjlH8"~iFʺ)V Jׄ63˴)$~:aS'\RHhe.v*PC$E9U]#A?>)0;WLCa[iXG O! )e4 >v.Xp}^L3p]vI'O>5w={x}Qa}x< c =3;P!В4,W)Ms3i7;eŧ7ORhDz_ re|[dʹָBk%J˦6It^B{t HмSVͻZ[wݲ> No|uoYW7>8H=qOW'2k̙; 6ʕRIRjjg% n|Ոh~8f::v_{:R|@+ƿଁYˬar50k?;3VPE>JǞ$h?f8C0}ك>E>vۓYf؆6}&H۔nZy9cM5ٶ꧞LnKA3\Jl*E׿.8qhhjW`s'ic@>!ࡌ}p> n|H@p~}fʡuمkOYD8Zs{*l* |$>#c \|Kva垗z7\^TV!E7O ,'KsSfYM/Kz*SV&rGTYٓ[f,! IƤK-; |!tof=0~m{JX{:_\ϼS}+ш?krσ0g͹ET}]scZNǴVڲ+L|O{ϥU&s$)qFgT,ǶEFWM|X- '2cf|JO^{z{ox-Zmo-ڕvZޛ-˒,rp 0bZi!$$@x $@$@(^3Jl|޹Μ9sf9yL9ƱGCOoԯAؓ?à+jo<(/tG(3F#=o=ëa xH&wT.,*ZXˆĖ 3YRc{z}+7{BIh{ F e*O6sT}VC"Y18B, ^ǧt2"aS::y̠Į]'؍RGǤ__a8 ON~ 3kַ}rj}^ 23>j4-s涶8ָSM9Yʦ!mPbv7TfpחX"cάuf[c2a ոL2RKs\M++5gYT>Arl"i~t@:Wk٫|jT#8* \Z; #=3tU[) 4cw&%\U^a+sꓹr9 bQ&QnaM =;ފkIϥ%ITg/בDb(#ԗ` GT|.`Zl18O+(]:' Y&Pwv569 ތe 2Yj0}tzIbDk0}҂< f5Z4`{r 2 :.40_⏃ {΅YD?qUy~Xc_?^z뉛21:cxq„X A{k>+7}n V43Ȧ:mȻA{iZh1e]31إN Xx:q-0la=kx?ΌJ2r2㜐LOxJTׂm*MOTQW|Ac-uTYƬqdpS(KL֠,+cX@ =0/3t,N/ Q:y/dd KUb*Lk4>F 0/X۳ ws~a"p{w&>>kvyo2-2b핺X݌-XXl3ꟷbw2{׏b-l_٣qlfFL@>=Q9Rs{l3dr SԦftX,VÕ"xx ϲի>/1&}Ζ|4#K R`lw:gMpE*LGZ_C $q*lݑffl^!#RuNOp%rD+zDχO OW%r-//ۦGtq8ODׄud$tfp*M(*&S Q /jZDT\ 5~m,s%ck-Hx iVooPFkT^n/NG򽽽iMZ5iU^C+mysɼtBL9M/|4X>RׇpɥQxapg-M/u󝸟7kqYR 2kƞyj/' 5,zl 5n~bd۫*J3/iSȡV20[Ce%JXݐ jSpO-"O{eyE=tb,]\\5V<ֽSOޕֵO֝6Rl鶶;oZӭm,Ogέ*,(`A tի*-5{O?}eߵolwWp5.wEL{HpdFl$9Yز}KsRR˶ou`jvmi2Kw͚._%W d׺k|LȎkŰLV 'zJf@GH026G\e˅,$zwk}5#AJή[ݹ5SK N?1rJq4[K Aj"g22t&$Ǐ{(X [  8\<>L'hV j+CXW@ˬI6•F:yFOtD|#uxǑSЦW{=)ęFۑS=is x"EOp zcTtKbEASlyĒt}%Ó%Π \ΤKEuu.UjՑbv܎<\vqm[^\k[Q\ͻ^/OJ*룿PVuyaVj0!P nXfSf"b{(` T9*gɭwsr\ Vr,e038|l{4e(38?XQ?G׻ Kn%?Ƽx,e(||1EÁ̼:U9Zw2[[C)C}&8jݢ)f@ΪC򮛞XXˑ%ʃ%^M;B_}!;٨r+K;Ԯ|_xJRxRܡEk)V-XZ{w[byC &QnkgU xm#/;Z819kO :%u2%})2zq}^99YUƗ ꛶[zS(^h79LBaz}{Z!ZI)e65gl#6CdYG͈1 1K vDeEk)R+iiIlIx}*J c12$eI^h+Pܰ5 cμ,/%`߮;.bKiR?ұwu8NM,<#:'cd |ZIEDf!ob}m# cm/sQ2S.KL+tuE(k^mJ'y @v޽^4'% T.74~sGjz׶5.B竭dO}YT4?llٛiHzsјݜ>\+a@e2}vғ 8(pz S\8߫2'}pnwU-nw*j^ 2"'p@~߿gtwQoҒUh]URջaǤC›h|D1Ph[zY5.>^1(> ߂նGS@)bߖ]Z5O+oju&_L=~Y2%XVPZ J*tZ0_oFP6u+CɯcF"njitFᬾ Ezz6n\;:X]};:T]}zX/x>u2~ut>t2_OW' To}UU[G~BK]%7RϾߣﻖWa_Bg t*;-%4r Ȟ[b4 ) @1]!<퇥iq:DqGu9SQjɱ29)`n}VKin IMdZv`޹+sM:L_FSa6%Td0Kljb ni~Ɗs7Pєd-.ipYʚٜP/$oMLwo=ڶ{اQ-f=f:glAcy6ge?i+ fms7pg_ 6 jo?49Z(r{VΒSt >:}~g췎Vl 6VފڧE/ñGB\U (Dz2.L_bus!{N5yV pgoUrzC4K)t,rtcztIA T\_O~Xx sqxc}؜9^屹WVnC's*+da~ǣmm3cmmQ_? 0~p@1p4VeBA |r LC=O@A;?#dCTxSUsg>wcyC@ djb0~C] h22{`Ν)$˩K~NX? zΠ{́96~Og(KGq?QꉉM֯91x0Mmw4Ι̑cyy]cmQޣ;v]M =-} =/O4웅ukn{b,R^\{p}JaMV{<]` DOZƢ i[Nejkkʼ5&` udvd#5A//H+do o)j5ppXITYb va?kXs}˲j<37>bB޲ʕ-.{Z 9aT.6.4~jҋ[JI~}`3 paUTnNP8$$F0r8.Fl@+%x9EtQc%NdU: }w)ߏl ^>\P6VH -I+m J?4xNzɹvNpuH]3?P8Z\4).λV>?;6223NL*.0xL1?@.HZL+;"i%": D{}[v~&^NwVO7m+I0m|.o{ytɵ,x~EJź06oTZu7:aڛS`N$`;L~ua4J>f_08PEiGV*ƹN ỏa~ ‚}{Q'uد|!r!O"?/lnnS98%2~^MeRHc8}"(7hr-T?Ow0F)DQo3έXW' y}OTH.XWŹLbȯBXvƌ1m(NJAS!˸|{R\O)'YPڹX4F^n-x1J &HW贮4u2w'1rCO [Av7 Ԟhޅqda mzD.xI۸zM&c@ᡞ(|PoQ^ڞ;,Ju1fٮv7)`[>?x&j.cǪ,i`xc IW5◊b9͒s`ďPDwX,[xM#gʕh̶{-,"-ɓb2+Zԕ5/diMP-+xy% '>KQ)5oNn- /T@6ABj J?3Tb5g:˗a K"-`bѲ*(/"^]vn,6C5A=' 3~67g-Dy!sNהmN򙜺X a6*Vlfp߮t'iI3e#&fgqA2˒gՌBGyWlZATuQ೥~_11_~zĊ4 C$GqKrY҇R3|‘Zv&B;K5%0uTG43֟;-atfx^hrpI.b91?ш7:!c=xVlv+»?"F9>;'c/WP651El1jw:(/ö!,s(-iQ6F Fl'2 VR;dI=0 _L@'ZOv4wIۼ$7cnUNWP], t0)s8w}:ҋh:&Nm[[UcΪJJ2oK3Ry55isӔݼ^Qsx(XqO[ eVzf I.H Kћ[ X⓴Š_*wGu-{pK[sBHjy,ŦNdwyHx4ጙ> mTcpܨjIni*4Qٚc?錕T X|ЕqLPOB} j]ZGDeӁk8ýDPҒ7$炇HuQSbP)L!s|@G21VKs)1C)iz"ſ4=ޯG֫h:&~?yǖw$+:^ .BO~2Qc_u+>|)PH`\O-kg1.ˠ҅?_ dxΌK YE9ij88c"PaӇ"̑$ԇnw,TY֘ך LR,یeGn={'PH|&RN?U t28"~?2*䰌>#Y8}M)X GlzxRO&ci&t\ "p A& xtli&3+=v, R5C%(slPdئjZGBK&O"GGI($#" `9٤/rQƕex&&kI9]A*ۣ iITy4UѸkCTu !v" C3e0 ҶGѤ21`AMf`eDhĄ&+Xn™M!({)P}AnL7QI,"(e2=8;-ytJ!+=Jf^f:l7ie0& D]fz[w&+C>IarqR[/3SK [9v‹0/پ *MrZ2e/3\\:6G'qt6 jGtW(dv5Dq@t?xM(0b9`31Wſ/OeHxPfJjdFLZ?27(b92~*:(̢9Y.V@]f8x1`;ln ȟѸIћDTjLDl+>x֙Aڻs]7 v УiF{_^+0? 2 )"up9i}zkַ^~cگJ#l+$rU_Xɶo'N90'{9ov&X٘f@^L;>,GTZo]UN_/Dy4IZ9ӵKO-;6i^3-QJf 4uC`Đp԰z-FkAㆩD4>XtHc@aN/Jڃn%x%FmBwt( "aϥ;{M(;b㉋i?YzyӾꑭKC{B]9%WvY7voxln w5HI=GXϡ=Fy=[O&g\[_Ϥ4,8 xa6Ë[? MI^{q*|2`mk~2C\ Fo>$2 XNn܃//Ɣ-߼m5+c_|zlJ|IM6i7YQQוc@`:;5 Ο/Zӕe/ <=I1XXFxC9wNʿ㑸KOPggbGC|8~ Lkį%7v?™'Dm{% 99cci䦗ZrܭR6ѓuonE m6zHۃ,}W)8M4ړjRJ=gV2>?Ӳ)Z Y&AܵԮgZ9?~9T3{PNѲ)hSD[ a7L%_&_eLFϼYUHKYrkw +UծӺ1xZaLҹ'U̲Ԉb`,_ Qyl HK5u\ĿA<Ѹ b2:.":6h:t0aԟQ|%3=q:OZQq`a>Bw%Ԣ/w_-c CVs L[MJ9{;%cr@.YFl]21α_SLLN+hqL?S^zOIMR2ddx+*MIR~[0Wv9slb8aj5oK5-S qUuTg&8 !ށg SN9K(:c8|PpX]B)yξn]Byg㇄<L`ry2N`72 +CDLPZ".R%YMK} %_JLfS7 B>S 沩`E-aZv.˥pyX5{?~~8qe>{?:u1~;۸]EUq 롟EmL6El#b62c}jm^4cwW(txd="~ESLDm{혊 ,SWCxYSnA=GRU wz!auG׮2cr* -TqFu ou42Z;;XrV_d䬙Um(뉓i,GPj@^h&'ڂ!lrEtEz*hH"1lX&jMaD?OHƲyZ+3.62*HR8a#A*83~wt)Lu z xnYvŴ]˛P9`K"yv> <0>*fba&s΁7Qe3i0tf߃ =軙|׊"ZCoRƙgK:]geeU,16O4\Īz# T ͑|<|Zbk2,-G 4W%{@&2nk̑Xa4f':>8=~ꫤbo|8))JLHvD`qIAKԃmy[؄j[Vy~'a*^OR~§EqĢ VeCٚPHUMW(P$@SAswBYg+ٳWQYIQT& z?1] :iG mQTeu|s,]+.UUV֛*&)v'JD7ó;UX;HˡU@~}ϑ 615,2)l֙u`;%]dԺIdϱCYT#Ҍ&y{{7s 9g}?ËO' Kӧ>#{61oRｗyX%qnD,'*Ȏ* qN< f7m42,qPv@ ]m].6{qi˚Z:֟^^f]C|8iJ @R3,O˝#5)0L>K (α_AHp|vFt?E돱T0|PY5$A3;y{E0#G|@]E\54ߘ+=:*įFĻT0Ϗ*aj1x<3\ !7eōqj!Solx\(zQD2UieBd,l0>Ǎ0.ϝɅZSWX+HÀԙ"]&5J̀#]A7}Tha̸Fo n2l_XٰѓB,e'T6OH&+>6`~NlJV;F:9 0Ym7 [^McӴEFSc nhr[GT@JJ&O2mL؄ɘ`q"Po_$ԛo)kw>R&%hiYD~dAR=0GiILݶJj2j;̹]#5~6N?Gc]tDZM\>|w]9y@ɗݩOIK7ϝ`Aq?OLEPq\n3 '{1٪LK\ۼ24q\6H~-{+WK~[C߳]}lH`( 6e6ʵ :G}ib c.pUh5fRȗKZU 4|;`U{59V+`G!-߰,6="*Qaesz\OXu k98wCE%á&FLpdz=šX?Ir s] dacG?}!(Z4ʏnJ뒓ud%% II3"SAe Zx2/bBȫØ5e;M9-~kɔ䘨mȏm=W$7>e V[QSY̳=Y-%QkoCZmiwze0bmv*&]FWm pb15E%Ub4dfxN|yK#lM`UXjx˖4<0Sԓ~v)!jÀ'љ!>}OaszgE2c2A$Y'Ԙ6mn*1)$%*eX.F1vf2h˹$ J%l63xY0 Sh0 2s3my\)'?',#Y+V(1˜ňrEQw.Jٍ _($dsZs!oP.%؍#aGԒ (یIH ʏ:mc9m ?M/Ɗy$84*;n9O2tNJxroJϥ7}7"8p;HRt ešJ-jTcȻR;UDwDWuVu5t]6 *0 _~)..R5sfUA^e qa|xow[/LGRX'ޤmv]*y|(he L8tMȍvȫ[j^Yk E6v;4y4WB9&33zH$;$z5'G%3N`d#Ljƌ{*lظ:ۨ_VZ۱۷>&T8PxE^Iڍ1$b"?t+8)UB\Ӻ4*wo{da럫I$"Zfhڑ79{κ[孡ЖK(m{: קa_sn=kJvW6y@qnSLWǙF%W5rm.EW~hAǯ:[{_>;%3NuO^fgdf䢛q+8U ŋ2[\q@"SeyXּcⶊ T$b.?|NL/ 20v` r~n/׬ #Tqu tSO[uAL >K}ww 5XiJf„Q`{J&ĕl*Z-@yB1`J?ؙ%ȃ畉Pw3\/;~ )+ ?5BhWہ,kHGmeWO߸dݡ?oomsB;^Pz J{o_>lwVSz\_/LQ?[|tV%on*QBJM)2מ; *ɣbaҭk?Q Tғ_SK kԎW[=-?Ҿ59sgKT!W ~lHGYYU9v 崖V*&ɚ7zCU&g r̆d ?b]QoLs\TԔˈ+Tֆ~'kyv)vJt#=.  $rW5zqwEK=-Ue*p?X-3Ã? -z؁u.H0p M2u/:ConXAE?32,1 5YƇpK Ps8_9<`Ѫ$>c:ʄwqwO+|Dax$$րj=ÿ&zmZdM?Bymk\rp~qyіQu/fe19>2馢.{Vۼ*svIVAx'+*,sj *uV/q(=_ot x_D lګc4BRhaf ґ}.fv,t/6'wB{o? d>Y1`u{Ѿ@$QD/`li]fkW B!]ڣ=~dk?:w>1i'HOfЄA)fਰM)gϾޗn]Η7zniXLbPºDg<4zpo@5˰ͲfƝ^+g3xy3zn^ۓudkx_.fƥzL]y=NX#eU o4'i -[;EE'絭iNu6s,DH!a) 5DBSKOG7^ϕ?P#[ ,=u9Ϭk$Mǖ4x笯Rnz${{NzOp2 N{]gR0HQ}׎|tvuqǾG : K̬h3c\}[eOOȲ_ݹB'| =̂Ϯ[}aWeG}x~_d54y<(UF_z{bewOoэ[xcMYny I3Nn2FoATd;}hH2&>~;,9zC>S: NINMDBKPPw*:]y+'àjc"7멸CTX+$oOE6_Yi&u3:t,t|5m~rK*vWH|D*h>h;x:V vr9/װ}'Bֶ [ 6Se+cCiehg2ER"z탫vW,yX[ny xǞnwޒ?\!HlI̯|uA}K*);E4$ ;\R!Ci 0p'W- @ c'=Aeh|iS~ާ]-q%~Qٜ-wMoBv~R;T2>P爄dC`¡2Lf]=aɥg9Gdju4QG#?=Z|pBչmh-Ɵg6W>Z#<{{jUR.L9lRH0\2О]}:r=gsxN)g\uہz gO\yy|(\97=RmB~Fڢhs 18y< 0ڷ3#OPgI+yKD'0k<\P>l/-X>қg.Y*4Pws Y_Vjv[OUE}ԯXֳMm9Z$Kֲ,Key[{v{I-{RP@[Zhou-D=G%z?_8N}RRyHD>YZM/l)Y ?~w73'w%M;?7>EuWok@y{0(dg-.ý(pi\M{t#-i$OvKn1iLNI4Z죝6@tuJ)D~-L+2%Im-_Bo~=mϑ=w}}* Z仑kwςeCI<~Rg ukCj6 JKi'u _ 才Hi֚KpHs֎f1[.^/0v\{t7x!^gt&5Eo"C-Z%#H zT7yٓ4o'?_a\X]w+72R_orX}y-B2P8QO1Դ`i{a3S=GKyWt~fP`5(kŒy55yv!]q Uv(ʑks7xf-,8R6H\4O bo+&IU֠ Z~C3g^&Ǽ -3i.?*صs-EWzc;;" FK@4$4Z`Y_[6]jZI%}VGEټssO MO*s֒\Kۡ>CW_- 3mm2(H(q=.?Re0TXͥesȘ5iO^,rg$X)!"EoB6gy; 0%lѵQ`sE1LF]?z|4Û\ݒCjGN Ignz>8GxK Ky~DS|C)\}~ɉIZbw|D$[ԗ%$W_l 9׉}v3EeP؄F:CzJHt[:%g5D&X97C#nwxv7?M|6%-3ּ(,:EJ.hgZGjg>r] t0G+s"1WQC|7Y4$3[vSX r hY.#Rz'ry%Ka*4Vg+FkC_Ԙ\[]l5'r]k++5V9#xžWB^9q*#2YHZ3C_`En-藩gK'mŔݵENW9"ވ l2sU E{'SI-ؿl AYxoq|z<4Wv>8yV/|Re%.d-] ##N'-AsňJ1 i|{<#:ig 6!ĄSRjL<;77r5 vv9E # w~pvR dMZ!h 0cUf̹g)UG)U.cm2KLq|zI$CcK9N ,,]`n$lBO/3fQ[Hߠ?ſqm!5{YBo1S5M%LtqoLStj}~Hk*Twn{vOi=bYG Z BYᯬ`ɱbrg_Ĕ?.tFz"А2a)?ڞ ~C Ӂ "XmŻ/=pӁM#=&rpnmd) ]2 4-mdQwo:in) YRg/\}4_Pm_Tu~"d|TVwF֝k^B2Y%-`GjkOVe* ÇnMb{\-E,JEylو |QP25G>2.UOV0N#*CӇjvuMQ}sm)r,\DzQy!G=w!jA6W+P)4u h = ^')~7#dDz`?GzZ]9(jtYfo-RmB&jz{KS{]OI,kmv!"VCplkuYh`cetDct$b0qO?uwe]JޭTb,nnWok\zYt |W~k:IOt3v<Bk5R9Pi9ҁgoȏW(5nX>r^j"h끎Ʀw$4H-$KOk'z/S=ԣEU%u3s,o+Eq_q8j_Qs٬#3i|VAγ~K[h Z,!SWdH|SA6jZRx ͇(([{+Ɛ' wtq^tSSn/l))jq+4%<&G_;wwFM|.ۭ/vk*'* 4kasOV_s!XN[;%074ֲ286p 4i"6ÃsUVK99hlVӟlnGG9oِ0::.qon yO,[{kkaE[h~]*_:bg]gg=`0H<-nmzm3ilX) үlFR]SEԵGG0LxOE@DFG_6vu/ArA2`- 9bRp;mqX3#i)/ n|S=M [Xk% oqV•Aݜ|[r? )"/̇ []M\5[2meULy6(J < ˍ+i>@#2 H>8n*FZ?I5пoǗ֪" }W_O XWȟB,Hh$<DZ]t-X Ő${&u:z @f^{jZ%E>Ɣy@xrGPs9:jhFOnR]8U-3uOKw p7aѓŇN0{C^7Ltin/'ۼ5ny n[>!۹䵺ԫ*m4}FG(ņ?@{O'dr1YH,>@,vA+f+-|;S:zt]Rm 9݀WiG3@R{ЧzȻ!?),e- 2q,O[[[Пܝ[&c;kjvv9l y2OUnj;:6}]7a.c@,)Ecx1-]o^g6=^k=DG(Ou-bU͵ӫW/Bv$LJY%ޢkT. z;uڂhy@+)EzyCƣ>5/[;트 &2 P]/H<҇~壹D#ze9DbÁ;xZiWK ӽxoS "Jc^N>O*[͵Za{/g:.dz`>R{D͛V"U90nbOLkC]}ms `xpsagSX[0++]T{ A> 5>v(9BH_: TH{F3KV]O(r: )C,trSnJY$XF }2q 9 E"$}ЖJCav "?Ľ5|B' ,ь,xT1CGe-8`xfMtd1L-MgcS=Gk.}J3.Ҟó蒇 :2-i+1?O9jEu:.Y +QDa&7ގ Od3ǯk 2`5fl>_t)a4 `eHd%e$hCoɑ66ҤPgނ0>s\cБKDÚLOR"27(_0*r6]b+6Wv"8h C6 *qlߑIYb_ >g_V篲1`7+P ZE ( 5W$2X_eL*Oe*>RWbSï*~/1N+E}NbE,e#r8oH KI ^SΓ^U<N%cEI7S2^֐vusױr9ߥq:/*ql3E#׃[o@ׄ}4mo3*Ye\u2Rxmr/Ǹdd8DcZ(Df,uI Gz 5S6Thp.2jj +ly&X7ةE`ss\'zR 6-b}lgJ{WbRV) *LB^#30-ui_o*dJ niqTzs&a ?DG`[Kj}>)?=he f[ b{U-^ٸM{M5D;7ꡠ ?`׀H"ċ%]H 3_,H-Dƒ$&Bl[0@؆Y8O.e"l:rѦXub^K~a-+*TbB(j݇Q$į25r%  C~)I d&F$I3ڈ"X&LbqY畉ŮjCFoj̨ԅE!N_-.k4 C]!׵.%qY\9![aG1q"\i\*uz%9?^LT4+{=3ȻKu  ވy 7_ELzIGr=@{R>~3gP/2$knIt=6(ejT0sWUMa,trj; 6jy,QYXPB|y<4RijmehW=P(Wh8*E"(K(| z4$a:dΫX2FrZq .H< .fYZa^-R)__>~Dq< i|hOuϔ߼:)J֫7\EY9j#i;-J΁pצ%}COeH r]H opC.<\f-VZDI1am|sp@{.mSzۜǮIw&g2՛ ! ~\W}rU +TTi8 @2 *¤G/OO:HL g62w$dAģ]~.VY.#K82h߹A/FʂvߌHǮוM]Ҋ 2Tň2؏t;ߺܭR(ry%@?|+]*[aiS)=qk𺊗o Gʵ}%̚g~OS'0Ԭ)QYYVU6ӹb݀v4Zyr~cf6MR4u&O Ѣ+b`$G_є2+1V14b&E:WEȈ?r,f'$.D<(rH_:ⱜ$ޝ*OgLح˰W(hY^Z*j2w(5 "gIuԟ{?ΟE]pi}n&^"g uLMؽRmTسkOa :W;:<"K$hb˨s9sw|XOG6F4WmՏd; wFٝ[$*#`2l:]%<|^ =c6Mm<1i_HQ'gr]- $$a`qѳb5,)d'M.l)hoe tNwh*1fN; K}n+\l4*rIZ fK*s' .!-NN>J@<`d8l]?Tʣߐrv˖8Ӵb)o`$.U*8 꾌|T=,)|\Bې9tRVjd+ObSdŢ\Y/ QG]2@zVO9  hhZ cyK&㒋?Y /e~<)enRaP5J:kI;S$M:cm2.Ќ';?aGEϫ߰" sXφXZRRH. 򸖤 #&WgT\͡0'Zm? ]nL2g:X4->-4vΰܣ%Gc*:Xwd*>\>XZ O+}jpo[G\c5n$F Oo9nDGwrc HtئP(2埝5xr$|wXyݶk+ȯbT*s[ѵķI^M2@A>"'~AhLjoOd5&4Y[AäLل߃= tqPX`' i"6moZŃ\O/Է &[?+#?GBZ6I?_Gzq2Q :tŃmyM "`, O,Ox7c}lJluSw<zPoÌb̼?嶟O}M 0M,|H.NMZY/`W kXڏ ;މʪo|ݮX1| 5Y\ ;muy'Hy<J5Fy@OxToia0J$z$;&"p ^y'DjmCӥ?=y%2ɴl\m"2*٩#GGt˙Tze-i ڗEtY>f^2;{}*פJ˪‰Y={R#YF:#ųv< Jܲ 'iS)P&zF"[j*PhAB=q D{$!DX[W螫t݌o #KmC&e"LMV7Ӿl ,"k[B%fB![\730ژ,̬jTҹ}h4*1roJmڳz%,<bЉcBqړɪ[|Lls׵^ @J'Cby~XyoA -:~59 1eDf7y$Gr KH`Zd-,F9 @}nm-iڃK~ƃ!2t$EoƨHY{c+5bٔ K ;Ֆ@ۚlub щ1@(K'6U(?O^%?=',N9BͿ h14< \0Z cNޢ,AG<*3,=WS~%WQ}FϢj1"y#|sZvCR[}8S27-xK+M#9$ b ~'~T/20 PNY00C%7VJXҜ"S3L0s=&0? a~g| ^״Fe6zEn3T;]A]ɪIi_up3-:ۚ$M;Ol 6a]?bsum/);w*:bzlamX5K3غrk7]~oruODw=Ѫ;kW47m-(U5-!*X,qpfSd79JK-IH6ŁK<8^獡5#gzl]C?+8م#JG.޹u/#æ@~ VE {J!^6p6JX7d~3*j>7HD1*Va-+*qȪ@gK-LB(<}z0K,ƛY`rdd,NKͪ=f rp krv=]NMî~cɡ„p$"0&+T"j;.t:ֿ863`.8.1?up8!1I(&0&8=3wIp);M/ZZiPgl?hN"Gmr4eˁ}eYg"Gu ."A2-D*og3!k`; /|77 ѩ;)W8b|ߑ;%'-J]%a ,U_lm[jP Ǣ٥5'= %Ћ=vjɟp/ Mb]f?˗ #s/6v oeub>irr0 'mK[ n"G1ZH䣛oFwHȇx!;XVX.P}cuuǾy7rOCtK{G k bm]%#ã#>w3)`1Ge:5X^1'vCKE9PdԵo*]+zʛR4–jDbswr}D̂k|KSݷǷ߉\%{I.I-;̡2Z+w*[?8*o}[+.#=e޲[<g5_(\`)Y`PH.I>N$`lH9f|؇EP}pS;GȢQ6HNۢߨW\X5Npnr:XJy¥pâ- Q ؓ˔l쫶X4sYt?Jé3' ׏jÝ4MlwٸՓmFw?{n̋Ry Bظ\ *0Yd@7c=_Džn-1Zb.{cnC6D`Cy`qo^ |b757 \VOOlryE",]ec; FOsiXZT;RZ9۔4[Y_HϛV3}.\ [s3 a/ɓDT-_1<|L𲾤j$$4[Z:{94ZeRO.D <Ƨ'͢>PX31is7:ho<35xmzڻxL pUV%&ݍrL%E6Mp} URqa#Bb_ڨCԧ n2XL'}\7g^m$ .U]`fJXg&3X{d,= 1. {wkO guZ!요حͭPa`R*UACHWhL*A$оNch9̟KPdȡӲh_] }&$K UB +4(n1;*{dO;lfO&PYA=Q3rY"cL ~bũ4MbK?ݘiJI,KqY=zYkx v/\`,Q+`57bv6rIz d4[4'3S>i™) ?@c\*<~n- D-䖠E3q#`Me P}r^XqPÙdI ~&` *y?Li ,]r.P50O=1=LOsM<Đv >=X[0'Cl)2,bV;6mcewn(0)AVH>1pW݀5'X= JÕd@z|VDKG .%/8+X<9K:')>~7h.]^wL`B,\=V(疩h[zq ]nOˇJ *]~'!i}׈=Wٹ%u>WU؆ڞ*~ ۈaЫ>hXE22wq8t 4_Jo24>ѧp?#D1vI%6F'\2%#6J_{AZP'ͨH02O_ЫMNʆ @10v6жLiP1_L!-wHf99]YY[.+Ƣ_&O"o:.[]sĐEA8An4)An7yl0`JbDZkbc~cu*?I?IxyCu ;gBM!̄7z Dvr7{ԅ~x88qX002H ${`gϖϲBF ,>/!?.̾>,3DeJۇ}GCμ, BDolYesi(s)0vhgrl!,.)789LҜtB+O#mBCHb(p4|I$vMa͖$=٦ U>5JEQ'K%NSoUiLQeT WS"pܩ7# L)]N(.[%T'[.AB-;co9z Naᯠ 7qgqJ߂^MI;voj !,j vaB(kR 1){FOh|/|o4 sM<:~7 A߬Y@_Gv,d/±9ȻpZ*kF2Ox/@-?w(%>3ndCo9L3T~smTו ^#Ӆ;|[;9 ln>5^T4~ 8cl0,3'ް I@mvz] O/֩CH#i!\E+\r,ŧY [qԎ\ 69ndAG.rkw=.֊V2ؔ|m_ğ6V[=^S2kOQHq#%_OԈo>b!L"wc>' ooKza2B5|c|_/4kEUs9@,PkjvtS_D9b%OT^9<;ڪّj?dWW. x7 Wi rFo.Ti[=2!¶^{U#3OvchiXURH̍h!ψ j;"I-f -YVЩ-c H8T'RwEZq0+|26CZ.bFqYJ<-4n lj ޠZTSYQ:u![68k&"YFr)J/b2(.h rH^9\&Wj "fndo*O*Rk2dwKI%mZ2^myc_P4Zao)u =N2`Oj|,m/\\X_-+EtMh׮m_*v|%Rz464JXeg&&p”Tm'LKլS$*\j׋P./hwt*WUKzfn  ݞB1~<[ofMZUL{r .-5oK 0:JM!؋B/pR+j ']TQa+[EJ6?Pͳd.2;zZ?ݦUbpZ*щZ r}j44phҖ -!ldB-P IER\%ef=n}p@uZV3>RB%)֫&5bCzߕh!B&eTҠ,qEz {*,PUm=ue>`VFY[X@ kP>%qHG>"aAOtt[$V& X> kdneT(Oc5UN1Y>pmבerbྐ :E;1X%/##[jߍ&w)#<ҤbIBƉ}&} &J|Owm^JvB|{Ⱦ]}-D̏ѣlž Kl>e J&NGѻyRg_|ֲ G̵<`QT `9`^eü$Xi!hh‘}%nn :9c)\R-ъl tg1Lǭ/%<&B-1xXd..F1P.s:!) }?\S4i. tʴnTi. Vkln 3mեC{Ce}dC`ݺx;Ѩj =NNg(|P\]o.k=yM=M``+Ƿ:-N^3x^)x-n7eVr1uڇo 9si:fsl776=AعIbUE㰨"Eo" C:V{)wEwv+89 ."R} }/IMWnd~^293GNRl;I0[io,:Pٴ>R)⡃4G|MIn'0hhMZ<_ɦ|۝RطՋ}[cb㽖 -K+K"Pl'9%=s9uVNCrD[C5ntLƘ:^c~.K@a&pB]j@ Ӂ3_jqPj3g~xo_k3+cb(鸰$댥uu&R4P׾1xK'r'`9| =vx '@7Dأ㎷Pe\6/om>>Ĩzb>g}nkD><_6#QG{"=#Z4 НVAE p<>wcdU>(};G|pMzF(.K>^px` j]" Xy-mpHZ\QVUUVPTVV;+j-.Rs%A8沇YTT_uؕ(=## X@d;6!&h0I6OȋV+52oqiz͗+ ,Sa'ZUjLhJOТ0 ef/k %Kxe;Z,Nֹ5"ÑGYc΢d_[`ir<&EQ\"9U sz_Mv, 팮L1lRVIE>h |1K0ݔ,ƪ,F+ڡySQ= 畀A]tgqd4CHo۹/}!ދs4|i8ؐE6σK1 Td\a Mv쉎R: 18 L \R$_beBrR-JfNDJI\٪(w {GB:BuW93'oFDIS^*9 X+1 zs$)_/9OBȋEt]_ 2 VQZf! X*2B❵kϙ{Zw6lxv4lPw<+8n?ŧ2}AiVRL#T݆ |B"G2a÷icz1 0\.b.QH * !]s <Lj"*'#.SeDN)8l|r\g i5QTĔ|KH T'VPAJNGRBUO\zvD ؋ߴ̮jE*9͡Xϱ41&+Ex!$zPI6ʓ-$CĖ?>/ndY4Vmfl8_,3"CsApc`ErU*c<;Yby1)/09q]E؟nO qL)eb[˙Z: u] weuwE~y5JK.wztԼ6b->K[›M(S{|.Ei~ˬKX,6e5gWy>Il'3\$ 9!Bss.hS)^E,'JqF)ܥuMQ޼,SG+b2=f6K+{ xΐKj2}N(e,| (m=(PC[G>/cs's J+92i0ebs"94Xxy*)+<=4Ī$+3%$&rrg @c,*<5Sq 9{- Z؆ ӔŊA(Oi/–btf*-%uOn,K>Y'G $3fso?s ?[M׬0:zIwOlb{c<*P^푟.wFtӽeIO O\3o<, 6/x8r?`V 2IB{肌G;W7p˷U{:޶{禜8xc`[GO?;EtmEH@!"~^/k`NHk4kˌ>UNJFU}q/sL)2X*S9gF#{BrD"(f6;$2eioJXwxB6N&A"hУg* 9Fj: zB 'TH+.}yq=3+3*]<50zi bZ{$bݨ%|ˆ"+.ggJJ +n.H5f(V-K`ǂsFA1V(D'?^P$Tf=Yg6IVEjmO2Ff+)fu ;el{]*,U~=b<1B=nUZ7jݻO KgzϮiT"7mWOgD+轹nuFl쌶N:3yV6OԶ0}֫+GWUr\:rSQu(x1LI" ٻtaT]f*w%+08 L^kRo։8 ul;e/^YTFyb@)J.sv yCKs 7tU;j3<uwdLn-uQ֓]p1{Ig7J;~Ci 㥡}ZK>J @y1JuY/NpiZy}]*)l @=&JI^_{iKDV)M?5U&--6 EGTfP@`vفPsSVZ~IT|[AοND^kԒS=_[j-ArNv|*X#F y<;&RWm0`ɷDf,"bsN>Ո8QZ-Uu54׺VۭJj(P~[d } SoN J}53jI|K7v_91mTe f ߭jgs ˓ VmBS~C]#.՚+?'HScVk. —2T]U6 K xގ u2sFbktm JQmZ׾9VץTɩyPOe =e14'RR-5~J=L>2CrwZY* @r9u͌ܓsgյk9jPFTFF_} hЕŃ)'o5! A5T#̗GHg!0%}Ҹp6['HX)*l tىtK>DQ]T(3'._2_OR4"cC?iJSe/~^SkczT%Miq*2 l>Yk%KtR!0z^,e 7· A-2˜te)}L~tr%H/yɖӰ:|ma'kVЬ`Lٓ'y;FA+}BUmGn ~w(#lXXy</Q`7-X*M#T:Q0 @Q[A{Zfkdbzvu?0<nSqpUMY(,"0 ^K`#&aqM}GTʍ  V_puϴ]/.횋0Ld&n QXU\ۃ8bC8=]oH5HEOX{vS ۈ#G!u3E ȂDþR,d$@, R/΍ϖuE.?(ґL=~oW zܻ/q@gH 4 E|JMy Ԉ T@it&1 ')kL|1Gb]BQf*#t6CiO^5qCn ?cn’yAyMEaɇ9oNZq gjM_3678--KGvX+a[ׯ#vQb~F?xUa`uې9n1ƿ' ~/WqesԯB!8֟AuTb3e bdeb@lk>A70!->YkE#.o @(E5ڑjnl9rݱ. D܂5Bw׳@hƬ1_9euMsk4 ;u;2k4&购ݙ)Z"DYl׀) 6_ DMTsӖ7Uu[Q[-Q|H?C#yn*HK)'߁d"S!`~}4=ӟ ?,Tc\#_i(< 5ob |`4Z  KU&<1ePHr CDEA92[#Nyy-xZw:\sRo!.HB oJHb8B捣7YyU<=vQD0YvÍa^bO{[f>Txُv&mm^63 b5'ݿ~)4ɡJgQ%Nvsgvp yeg2 2BxL9IE1?V-#C?,`l!9 ;aAEPҖi1OxΒnQWI\W"l$ivkg8?|/R6 MYr߬W h+?ߴ5, 0?@t/([(WwYBZ/6QbA%y\O;Wh G~L68>A4Jp| w.fL_ YH[,2'Fe갘1mFQ5q%j=ܒWƔ( Erl$R;I20|;/! whvv?mX>r,!%~ɏ)W%U$^%PxJ!X`V4(<].|uCOu{ڧ¤IR<ѸzFtlLa|{? =Yj6zn(, / ^\mYpV'7 SIylX, VH+|a~J%%xOމps7v?Ϟ]Gm?ӣD=CŖnj xgKaۡ#G8>=Hbi@5'sղ你>FEW)zpFl1REͼ| (AsP if8Oȶm?ۜW Zݵ =9K5~_ñTAd ;G$& fBal*Q0wV;?yzSkgZMp}jUkŊ>wO[TTW}J'^Z;3w鮞GWb[?^2Ϝw1ԹC>zE l>uΜ68O욱vMm~[ss*T'Kbnﻰ`~JG"bfnw7hOvY1.TaqK+][,8rq2{OÄ|C mg 'F؈(Gi7yrvd&N6Df_-!KNUGv~K}wBB>M5Oc]C74buc]յܞT*Y=q=9at]5'Ҫ+4{律@f] _Rڢ)"Ԩ٥w7D>"T(F)%OwA^HٽX-D-\PosL+*Y`悿c#1)iFh$c<2Y|zh>)w1`؀"sdfv:!._ޡ#b(Kc1`tgJom7wO6D^Aou}%кuCY_d1^|ׇm xa} S|XH$.,-)k:[0Th7zX,)95mظ[\P!Wd|nj&DC:4XG[F*pXiPOZgPVxZf*S 6cowjSf8__;Av'ok/m%i hd*x5Fd2΀Hht* 횉dml{wCJaWHÚa/b8ɋpZcGnTXc]'3/T!'i+pMm(;D Ѝ .ged%qESSWw=,g|3W "=}U.+_ otzҵfA_wkm|3贆p_f?swC˾~&ի9=3V^+1!d7 O>kPFA-m̔gR8[nC t\_c E@t|p (%1c݄cAσKO`m~x2.@1tдIC.Ϣg-"j8%d!n?O|ۍ2@M;sH*ΐ?tU"KCNJ> MIH=Iib~6>N>s'C󇇃zK1!1`f2z`>:=Q1%yYI? 94:;?!J-_Zj}wneI#+jѠ 9 W~6% 9}82C6-&//EI!d>;? ïilfsPJUNV8|l W 6uKJ :%JAe”Wi+i86_ceCp@X_Whψ࿧gSϵƒ:} >x.5F G,R!&mlL4d\;ښˣC:V@8stN %b:O tib`%_xxe`ZsS\-[mϽF~`Z7.| hA@ݏ!t7-3?$wl/_L1z D{x4"9_3<3Qf"\yg<+T$u 4OFp?5ώ1?+m?D-e,{/=~"OpD!{dBJT Nꋌ{(lDlǿ~'&Voxj&/q\Gp7\p˔, *X vҼUO܁='N[JqXi^o>(%ïmwykUG/iC ]>^ n~ϳ+ %9x== 1қKX(4EKU-ߩQe5*wO&J'k֍ưf] }bƂazP d_|g,21/xc<1q:7k 10F`"4Ck'ƻpկQґY $O<0pkZ9<xs^[Q{ڟK#צ756F5VXڄgxñMxh# kٚ6)wѢԆl21--V(R,j՞$/Lmp5Kʓ e41V0q&*M.|_5"3؜ ʶ߭}5c2UdSUzyB.Zt?39"΢d T@2 wl0UnK- Ĕ4Ǻ* Ԫ[޾E'{#ZW~eij6(|jS CbʣQiDwA;Zycw{Y;4{(^C)!P>)A~'2o~m#'zף^sm88,T:`{2p٠"פ% ؃|^z;3&c~A'{zUkDWNG \>6VvH-xfn{p^s *"+< M0_RU\hʨY啡זD`QHx W1MڙJhÙ&T0wW?I`e ՚ê(r/^4h ,?4؉y *X5WsT|CLOz8OxOl`x1y/}Ag!m,̜4\jv.zh.z83sYۖC10ֈ~DFAvz_ 琏dEm&YR B^f1SN̙7^ЃI&vpd> J5w 9×<3ʩJ1""%~ke6Q`z04衏ޢr,]ؾ 3jkYKC8/I8/ J Baڡ™ OPM@ QKF~tGɿI7J%n&k Kp6el>1ǢsT$61VQc”l5_\ܠvbK 2U&%sA=9Y-8xuo7cogΖE+6 /v'w$oSv>c"_PPl4ľBBȕ`CW^4~DKlʋ0z^v ol|rϘ}xE$s_V%d%.\ {B[r @`6]4h{ jg;NCP'g)uhj*AAc_z `'(K뭩(yA(5g+ =CoWWaEn3~p_cP*b.;Di _Ay25k[Si0Y教&zB>ǕqO;yP|9tQSʋ/&KWm^#\ZOi`/Ճ/lӶS۠W`Ȉr7*6Y<=K(?žb=yS͹9EEn^Xy dm#mu `d%Tm]:5 8Ss`ƕ5Hw5œ|tKlKn|eVfZ^ߖqȚV(sg(~Y{ jo["NORg&sX xZ:Ag Y @kV$A6rg_c"VLے3*ņE?"qU}U.,dƗekݺ/ʔCLz&BrBv4qġEs&DO^o?gnVx!"'c0,@K!%& -k;óng7ߎCO j-Xm@&gSN|LCkimɖ #M,ӣV?)+By(r>xaYǎ +3fod&-5ү>R d4 r~X"AJXaY`#wPC&e3XP([7c[bnec>CwRv, fR,Ccc,a1M5 ̭˘zϒW ?ՏݝKƃ@L:=*t-IDS$+);>{*npxG/^iv.\W]h4sQ~etg][A#߿}xNg\e'Q\n5um 4?]d)ɏ.¶I{35fCM a҉!A@ egXf;uhRD)H-LyۘcVrr.…+A<% W]V|h@1D1N0V>46=Vo-z(G{נ>>hӤ689`{y& jESs(dP({70~7#(isfXOwN㧽Nh<;Y/KچF Fo2ӈ_1$nQ_G3Lhe2`3J+EU[IksZOW\^X}Kޑͮc55뛓r_~ƅ\hKS׾clyWV%7;Y}k)%RK?._S#iaehÛoU3/riOwHSdu_3tTgZ"Ý"IU$ƈY _}ww_$gޞчE}φ_339A<|Ijc47R8б3_V60V C롡7T ^h%Ba(GH?~N'{B pk]&/:}Upn,\1OW&?!/& 41QthP>ͅ);]=vJљ\ OOws=$M]qj.Ԭ>Ӛ9Ԃn9^·z}|{}]7xa \;ȓP/pm) Tl0n)&Yp24T3smϞVܞP2, *꿰`^[)ǒ=%P (Vx }t9_oUYg[Fj/nKlϏ[ne9]RDN%9 1sgyc:PAV&%#ˆcGF D4Zj@U}}}:E]#0ğenw|LJ'N}C^rɡq˯iEF ^_[wWWN5jOWG:WoC ?3(L/PPQ4~Re]KqdN|z`@~=uSwQ&S p<wǯw}SX Y;͡ o솂mw7!AKJ:9l󧓋(Ag-qePc6'ֆah;7͒M,j_s ?PڝZM _Y{C[*+-Od9as_;oZc)_05lt UO5AYc TQ_<7J&_j%yU yez_rV\5i_Zk3wh#mkc<0۸ߕ0wHKNk3Ju"~D4 C*?N 3[9̊2Ϋ_yө :=svu2HlMO-˗}/Zl2>4$s*5j*7T,ϕG+.$ڶUp_TF8OꜨFN'vb NeP_WՐ8Ő੫Pdkú1Rى=4s-0-͸f)T cmJf8ѻK[̌Zk[Xr{Z7f'C֞:3dSM<]bmRV'}#J$ 1M+:q  =<ĜAY.Ha}D/](HU$yCmGLvhnj꜃mrOb%m^=v5=1ѦvU#9T^\+96# F6A 6_mrP:}?cYTE5Ү GڵԮS)*2̘@䉣kBGԮ8߬2373װkJ##&eݷ|e\fßy|1D` BZmĘ^ڼS;xc[iNFFNsqR+O?_U\\W:4>ga՛cO(Yya9(cU:,4HYUW*Eҝj0[P H0 ;GQN#ILz@P)㢥8a5hJ0JFo4x^'88*}:^5=hYL Y4"=SBPu_!"h(Y9\.g=[_A#18j9g;%눽WI^!)!Yc6VhEmP[ ]#`c+{^Kʝw~pez83S8q;q;a`<Ύg&8A8ɍ&' T[ݯ8ULzƱ9Lw;qv 7JS&ȃhc&' ҧlod 9㰤pVJ.qt.WyRwy<<|ճdaK~G )&'P"c5N_skJҋ "=*a$ٲ%EdْdYq:S餐F'J- HB BQb=}Ksw/`Ioμٝ}3JVw,64FT{m£3c ­xD$sXx|uXx,gXx2xXx< h/5Yͱ VH_G/Jpw2upN'K=~D;wgΝt\^,EƿAOMYe)*-(_[n7崨 ࡝@<(@E)/^jOj\<&~4&FU46 ioj_zv7oS#O~uR'FL=30Cf@sK#k燨Ł:q20@#Ow%@Izl]!2)^裌9ًN3+`p$\t*:(Em:/XhKl_R!!פ4WTZTZys^Y8̕oߐ4n~ur~Mcdͻcƴ+<6{WP.#qbˇr􏲃JXON뫄tLom\j#~=ۘW;pj)"ژ1#LESw\twcn[(S\h|ZnUʭQKq[Zimk&5gm--:#;{ֺanss_qeߎ딄o.*,YܜҼtqKֈ☘”˜10\dzE%KSE))E8]дqBJʄM-}SR&O ˙X\4!+44kXf6Z6ႛZ'eeO*. Gz=n p2c9ZN 暈e~Oe ETQp[=։[mO1J¥REm /2S72;F)vֆi}9TE^K2QzL:_GR~*/f$e2Hwy:$.GX$+>xߋHiKS-$!*6mVn]_gN+SrZb‚JSR/mRO&[Z]3&#%tqeahŊa<@g /6wf"ZRRZPbHR5_βH/͐T$ȏK̓$d/x_LIH296˕ǛO,qS" eM9<.|li[ZZҲmpӪBqlX5da c+;33UWN쬌u%%%K0n~ ΄ݐ@P%w躚\了\8O~S,do;^ 6Q&n5^3i^ҳ=ʂYi&'S"&%Ce<X똀o52!U^,&o_+2^$ꛀNob*j}8).mRExHp1U0ŎZm\ƹtp&j9.]wSPZ~=0S)i'}1ὁO"S ̞L#$يNŦ;KfoKfP*׫"38nn3;A5>:#LׁV%c{9'3rsx{o{XHTK_@ƧCʫ wo[l^r;2E]xdkqa]'agLCsvK#i6~\$e)=,iP:]cBjio[R%?ޑi?j?ܖPiv8zk|A)<43=.5N,qXPw;g !qXQ[*Ik0~T,So'N<>8)A}S=LguaQϲIq5}H%/| e U_E D VwM|Tچ.~ARAE/\rz%q+}o)n\y f~=I=l?  2e5ɚpL[ޑ*)H5 TגtRvuwZX. J+M6FG[ƒ`i6Ro-6ĂAĈ@r|M߯מq?A栓?3hl'gb]kLN&OpG;vX~ X .\.v7?i*M$T=ovjL׀Ï" &q';sx}zQ7+H7=mR 1!2:2XKMd Vi`DrdNSWIBdv&4ﴋjx=zA^+;7g'7'7}&nK^2j4PG  ?2Dy( ,Qz"PAu065A݃0V%t*v Tn QlPxQ'7'@f0?L+<É&:d٢3\ݔ3 ̝%JH=&X3h5}}t rMA3yP]5= &ɻdA F=$a†|u;9RBm&d K4)_Z[~vpP]ߘD~cs蘅Jr`ˌW4U-gɑL=ʴd䌰#ph*2Ӓ3TM"5o SmrwNu7VLp|f /rml0 ix-;:H]{{_ ?/} O4& .…BQXV3FkjX)Ta&H4c WOAEo3m6VfD8'?1C-GQuE FgbF Pױ۠0HFru fXĭW+V8ǐVՉ:$S`BѬ*;T$5ᡵ5aڂt&\A`k5ÞX[P. -BoYVR10]Rs-^]r׽$]40>;?$"FfJ d%TK&SJ쌲4pa4a䀴ʰHD"k aNʠ *Jf&ʴB+,R LʑT*[IZlMv4RMKR%i{7̃+o-?fDMK02'B,) i*'*08 DcTpRX[1VAnQ|,jlj(*,1D+f2Y`'ΕM0Fht4%@*"Μ?bU Z̵` HL1èuҬ4 2׋c6  ^$Z7-"Pr].|ݡXo߾-oώ,eZ,fn[a#_f o %G~zCj[oN9wٹ3sq8'cD 'TGL&U+Zpz`IAI,.#cOP]ZfÎ W|m1dT_pLiX]p +_JTrMpڼ_+y̝Iby  3QZ*\kK GAaUudc %ʈxSq (߂KJm$Ha^TQ9&!3*Iv4)M u"!Q=)ٱU s 2~75U`%i2@a) 1}"-I"dVVgIik+m*ȼk^%V^AtO'bdpD$l&t |tjqԢ׬jYUW'v ' (df5$‘!o D yg~[S  By}GEGL.-SvGQJ[߱vkY!\)Ť$s.]ߚo_\6r+=aI*M - 1à+W'g=+}Ҳ||YTPb~~E d~cAD+D dhN9ȪZI36`ךc"+ZP"ϛBl3ATSW?jgg?}\gfw?5S;s$؏f+`Ww7gQ%E{in[/tаlg3TOftDK\/`Fw@_Xl&#0))hѤ_XuK(YiV1NJ\uFF:76SU+NFNJvlg =m (r~1Sf3Y<fN`rk>pk.^5޽s*o˃7?ɦ7gb|ƲkOR]%uz!Ăo/s?9*j+|; P&J;#m3vܪJ&88:t_y;2۾q\_C Κsu E_'1ޜ^FYKyn?3l_I8&t-e~lڀn&FL6 <0{3nǸ[z gO.Uv9X&9՘9no\p*S^kFakNb@U< VӺҨն2rDQa0eiNGZ.*SjR!MX}!]uٹlZYn]Y`xǗXۗ/iO0)C`VM|$eNΨӀ&(kXVŔ#u m髞qrU<ȽDPPtR&-x٘>wMpҡD} iɉzLj(O-mhfmu ;)fN('ͺ,< o(/8#H{iLL`Ĕ#Wk]ٵfm4Fmw].߶ZuU";9hSvk)RrϘfm\):'VKT褉eUK%f>nS]KrZ:V"+ړWSgɮ>o* 'KqY^Nj<:rVAƱyzPxdP >NdUKn̼J} [CY.C.7fX0k k~BN"&-Y3CiB5Z[Q\tN.|`]"#{`F|-V'ŗHJYW:,44/]iU1Y1NkQԊ{Fl^m蜶y I,sP68>W@MEAQ^$$Roԁ>^A|s+3_=o1[uwIiQ1 Ya0g%E_( - [MpZDSꔪZ-gpzІ_D4xRIhϭWT>#Earv\GSgNafAh2T:_+Zag6)IXK {/l!Q]PoL s0eh+`oXJNflu(}[J]&~"3Y2;>φ*Nܬ3^Hx'*g|7k^*wgHfn؁YKf=9N=P[c6z\eԛIt'ڣ %%ʒk̢$V+ o7xCt/ת]C*Jx9xك!o", 5/,yZgGͻ``Ʌ[$}#N >ilQ/dX4/ȩ;rGN i-^ x4 f0 ^3m 7$Pa ҕp^XRq97#US {’ѹ)'.W:H#~,߀1{.]Bû1M͵"VK#f*;,plYɿ.-'﮵#77OkgJ sZ+vƆ#+Wr*YT{9mHʒT7*x}t|pxlx|!W%=WDCt6YEIi#U- 5u{Js&8._Iet(kf6*6JuU\vtЖYA#U  Z S`Qٍm`P,l`v vf# bp Ăq0+fCP.ht V vYj 3&ո(]Aצ}zJN{auZ~AjCn{΀+WL-(H]ei6UinNopyHwãZּ(aU/Wkݡ6_Xv)A.4 v $5/H)A#!-H(-eft ttȌDilrxHY2uAdd9NQtF ~ԈTSaGO /őDY&A" G'{zpYO& bibFvB4G6G[ SfgJAA$TERh 2q-#QQ`~ hZI Mfl5$G3P$f Pɹ 2} ! HA݊Kє/2PFarfDNɁq!HPHvEH d b"&a&hbF,yD.+[g+sy90Iƴ0Yy9I`SaJb*:%Iq_~P N(Rf?p_0"0C<3 A6G/AJ5&+NɝD@.RmbQE~U|]URBԠ&yE 06.kW%(Ūꄙ2,>Q(Jn_D̒kKQ[#xӭ/R4 cjf9Jbuxb. ۍjoCWW.|S 2L%Knt3D8G߇p:ul0 gZc Z˖2igǦFԦើ <Mii76+٧iuoaK{gs^*<$hԊL$XήdM`x줼GmɃ)MI>[%GŸJy?:u#U R>0oN3G/uC$yE5`SwƇ⃵AA欎2KRü9ގIX"T ^LÚ&Xxn7ŒPW0^ ?IM/f' 4*2 w]=c5H>yj4f\lQ!T*lA?LF%w)]szs7^ËDuiFۏso& rxbF5reG ^A|<kQJF7We$$zRRZ5ĭ/uKv3Ͻѵm{낽qT^膾F㲹F;1s8>Qzג(ޚQȶ/r!#tkMIL& nY3N$e4>bIד[:$}J*9χeGڴfE>"Ơlp뱐({ԟ+ݘOoܕͼʝ\>EF2 HIvqD~% W#5UNnYe7 T%H;yTݯ>^i֬ K.MeDhAI"7C\C* M uy&I֓xo'g[_;O` ᳬ;$ݴă\B):NPnrkfLړCpBSђ|[xdV&c_ \o5;F "ͳퟋUI-x nC1\Kqu\|79X^6Z̃ =Q'ZDp€kb Z+Y5]7EMeO"TkDTeC5~ ED%>0Atl2 |2 C)\*3Im@|FĠqgo"_82 Ϯ·!){j`ݽd Z<t޿Q( } !2%xA2dJC)M8wpP&Q2@(e;BT" > f@"RSl\5x=[xw#͑N\h &XeڝF%8sbQtDz>)2#TR$-B-f^~ X8ރNo ywIoݷ̇9MK/U]P:\K6qY_Y/ -?(ӷC;ñVN8 ʀc\ORa۷ɉx|Udk ?E #:D-'tN_\ ]䟛/Y4v߈O x&ou0T_oLG{ZT׿1˟PE* Ӫ? }6BmHN07c杷mlEkbj5+fM?.\qõw#5qf0ә&3Gx(9om6jj\)'ܱ8o ;p\#SwΏ?ܿO><|XW ɋha|>\'?\, t?KʐpWC%+>k|K:?:tj߾*llwƝi

\y8Š{F5{~#G4P?_}:2 'Nm&%_n_:J"}ڤZ PwlD B7ɒ\w-WNN~2d'?23 IjA[(2zRvO#Kx v4Y-o0?_"LYPnD(>IzBz+|yk)0_|PL6;bC6z/^4ygrpz?=ڡi6籱uӤxh/cqzdocV6q<}rI]{x_/iwElyXe{-wFwWbwO{`[<Ӎ}bA*礎94p8$u;Qƭ{rqFWZh-7!ھs=@)&:oֶq N(Q&5eM)3ѫ sBh0C|Ip%m{9]t [[@\}wW=01 Gp}rj3 >m1咏>Vݘ z0=.vP׏P?Pw31s˶ͻӬMtf꾅u͝BϬAL cJ)dý2E4;ȧ7GOݺIHҲ od|&. Ԟ덒;N7Id?5.VRYYfLܼkI3B|؃kZ4T#GB$89jZev؁Sp b*Iak7^7g, ~0V2@$Q[bDA 9F*qv2_?M5ppv%-f<]ɔ1|g!t&tN8Nlw}|| _F>/CBr~0[$̸ͯa<@A2UÖ9YL* Ari)*/S*9!2Q|ɤI9̢a˜|+E<(ž?Y`c>% ?(~[ii,*.Z|vCEņXߍho*8pL猧}yzFK۔2-NkP3Rݵڰc~68cr {o? /̝{^s7$1:K(@#&F J177˝>70B)GпǎW\//"!&aɰ,V9 ߩk UC"F:I%?v UؔҐeyebI->(\LP;B`$\S=fߞ=jWǀ~${[WY>{fUI[&(FUj$xNҪ 7?n[u V&GAZ__BVEI  VD4>ܚ:%FǮ" tk2R4Ny/YVء1PgU5eF+jVC͘>1m"10"t|GUXko)k At7 2|u֗f05.:CKjȅ/g>#NѮumEֱ/y,; WE$a'x =@9).oՌ4'~%G=Smqܹ5z`43.<%L\X%՚?.&(a2ChVCFmJ Ῡ`9!Ni۪!`AH&Jڐm-)@pu;-lIva5n- 1v\;j aKx)إ0!Xs!!G>g 9J㽠p9Y]JhfCHa_%LjF"ZI)ӌeb:Y@) RBfHC@SMQp]&[2ۓI r8e0D&v:('/Fnxiqjl5Hp?_? %F8.v0m0]3HaDp{ۙ_f#v?|};RY?Ù |_!cʰ'_L A D5{>>8!㈏P<>DSrz2 vCz "d8aLxZybBUq VD+l EyXg㎩l7-x$CXN3b'r;En=Pn*6*vZ,_頃no2 m̽ \_ћwp=I W?v&&XNu?H!׏}#,;8}4 h~ 9ߞ#\f 72䕐sÝ8Iա4ΘUW)ʅ!Hu|Br_o3vj czR.u*D0Kdk\x s/@撐`P5&O 5Te7,|(omldȬMOupkd$tHBW)%v|@k=;=|J}#w]mSp+H膢\;遱澕{[{T'RA/,<入rBa=%{=ѧ-x%K{ +`VyaB!e{ kp"qڅ&6V{X$Gnw!x ;\v'!Y/0MMw [/ ޜ罰쿙 ?a$H`/xaoy, ^; y^X!} W ygS}0B6s2.+w}{&GsOw qd>`.r ց*OAm fN[wqݏ`Mj_G7~H9ܻz(s[)=y2`vz[<ߎ{LgXPdr] v7MM4}sP>ɞ W@H }!nNQ84XIg`KF_.<‹}ZN}(c°8SCg_ X"yNNSF,+>pEbwtC>sts 3aL`"!v)yE/a! OX=be"S cD45qyqb \ "ƥpAC:qFͤNL*պ9XJ9{Y E6c92,Ee^~!hU@vj`Zt9iH}IUu8Oh-ÿp'iyچ`۹ᑧ [8̃pP<$xZqx= ¨kަ#}k%#fҕ|' /[6y:󩮻|j6!'yu:"BM)52 ?1ZF.0;Wh?e~4m#yx uHlX)i9[0l~&/0'QorM$1V7erV ?Oo9@QLT#FLlxX,lSMFso'5vh?ץۉQ TDRp;q4n³~4vr i'B1or? E ٓk%ǜ#F"χ"+o`<7 Xrt' qc^fv@@C?BlG#=c{p.BJ-mϤkڞ5=lϿV|*fd8O(= &-2 bx\}GZ+?!d ;y~V(!Z:>Kr:S4cs<52^s4~4fNG\oفX|%h^B14&LHME :g( Bu!zz~ ȾpUo|>6p}ͩ_/ >>F=)OK,vb< J(]c 8m'5Id<T,Y#98kD&?Dd0xA>:F9  cYK 9sĭ%c{ g\i`.Ξ2Bz [FL=]16 l0=-~!Si^Cϡءء7wO꼦,g& k`+:5 ޶ ,Gk=Vr R C+A~&'k꿕 {E?e/p|\΃C}M?#4x3c09>˓3ݗ} ]%pC?={ 2sD9o֔͢@X!{]@ǀ B Q 3@ȏp}'u,ke@49!›4Țs Isl$3ɴLI23=$H(!@BA@4jBA\ յ꺻(!{oޛoWM{ιsz7>ςB52 ,|_Uj-4y~!Xc8ޟeSp?!֟zZ0VC˅? PCn@Z IMt 7H<[_\qv0qC]գ/ o zt6ݍ'mSʥ΅t;ҿk$T iAkzTVU%_ kv،8\INeо;B>}'W_3K! 5l$D_r/4D_CpYLC5cHh}Lk}A۩ȷ? *ȷK}͗}w^#׻ #M*ׄq\h҂A- ׌kFs5;46DD_Ӄ_cDk:>#5,;A5*p鯧Rl.q[*mFjxwsMchhl7)ϹS+Fa~Ճ/D0 %KT~҈&ׁkqLCգo1rO(m5dF`-!})Y"Z x~v@cŸ[}46r|s͠l5^UO\> .l5u60 n P A~=K< @s"|nٔs#N){Rnx{RK,Lޜ^49Jل-R3Kɬ:P|N+A9W-;jxVEpK|{Mnπ:+LI'!ϨeuPO@w$pv,wM?9ٻ#G?I<%&No΁e0E.&p~!ݵFW޼ڕ{l_Ͻß6;|TSw} (-wzQt^!H;>>;ڠpk9{}tr5N1m>?s~s{GMm>-E.>`Uܧru8NmGdp9T.lΡqj,j/1# F`> ÊYM-6=9 @4?CKw(># O!^('-̏?d6~ uR^NIXuFjQjЦ U<9z./ǙVc y%!DDG,k,?^]$6Owt8>30?c&+.=0tg-3վG-Wm@1x}bl;j|۔)Ж;-ß܅zE%WR۫AN%9N7f5`| 9|#YB1:nކIm֛}SP+fV&3 J ,Ĝc A&:x# iB d'NTmm3oN?^K~1ٌcui;ivDIDFG1Ä<9ķ'AygŸ Bs77A"n:$O]:qMKg_ƙHL(=",xC==mr偋 F#ՇW" B?jGE?/u2z~o2\'p!L7 U>O<"~ Q,=.dq]voh{eQFFe|-J$PT7H6Û ;Dդz-aH3kFDmΠ#sr+)>.}ՕGQ5$fY0xC2GEǙRZne .EOMH H H?Ey]DA龑u7P~}@Sr(Cͷ?_pؾvUHH~}+gXg~ć^)4[?Y34Vq"pk: [Iy/VQz&-n3=>Ig\κ6= sY⛧.r#1=+@1Ai;zfI=Zqn5EOԍ-]vS{qҷLa W$*!  &P$^XA7yYR @uu%NأN1~c]8.KqO}j|d\s1+$~BLjy@9>QF]9"h igv݃ceO3#cOģ|61΀9 @<ΰ}:l f}CːeD2M[߬M+I4(Dm3 {(iF#D]Nvaof# SG d!]̻xxtqUM0q*ĕ%̮n"팽{?~K?`/*i-8K}Ϥ8{oGmD)s8P8 xwYG{ E(Wq?mi}޼ʾ쪒_&rinQj4(I??i⎋LsNOmٸ$AE( 1W!R #OD p&_=TCm`AFzwzja'c`%ŞT&:)~%nuJvòEmб;K|.y\.1"$<#RݪEGR>:uێˉcCvۅNW(aouPQ/ύ: \'5GA^mf.9G}G 8`xo'$ݵ9Z伾3{;GWkmsn=-$zq*>lE"R 2sv~"q!=E{فޅLb$◂%UU}M33j*NeXn]?C5B瓎iQ5^xw 1~N9Wu<3x(b?*I1'3.p;cX9{a\ǯǢpsW)#'pK^8._%OTQ}K usЗy7$yID |qMϐ{_E+/`?َq_p0S)O NeNe8o&\3"^K/N%+%+ЯR2t+IF=`\EOzc}Hk7tя|91\U Ho@[}#c}(U%Հ ?c] 5S?? ܂ϯ ʢ8$ lnvHg"Ə)}:G/Al v/E @o'xy'z`THEf~A^⿳bN A;Gq^Ix /C8'z/a89/'8txC<WxV^5\}8@?cx ̞r=(%azTHkĢ;^`0d c ڊu(=CQMQQ7Q|TܼƘrLp.'aS$HHْLa'C~'M߿Z]K|LAK'A/ 7joҫS^~iyFSNCޏM\P6w.tV*!qy۵9?8gڠg/NǧuB%/(C$g$n'|MX8@khA\p܆"8jK[E߱tz5*hv@v'&pV?~E^&Bڛ=L. i0;1%\,[uliL`KJԟ;Ș;ӁŌ  %QC4ř VNAk7غҫJr|¶k]bKbyVD^밝{";x8TI\,J/oo"~,Dqml|^($8ZIMD8ܞdMw=GQjct:5]MH FV`*q'bYID<6 a ,=B70)Z8B;Tq#zܷ'&?*m"~ 41)~Iğ{DI)gex?pFp6ILIpďh7.b7A|IvB5N~_ 4HCXrDz庆WC_7"(eɌh6GRJƧzRvrܳ 4QL+z(Ef}27N+ȚNz+_}GνHqj)=5-~6wBhI}}p{9-~=*Sj/~Ö7DcBn\^i x:0~T+C?G~t .'j45a貑9k^^UV:3Ɔ;'j>tG~$b }>rY8$<2>\矗ps?w)C `6l\"xH"GD|4IVU3@64"5]i7@߲p9B}||(RMn^)p4Ѵ\auNp(X7(<5/X^s' s<rs+ 8Wȏq1"1>|+ }|Kewp|'/I ncs!fĿ9q}5CKߕOރ(s-f!iRS^IKV,TYcO:#iiVʶۖVY9ᙋ^Ϝ띙NWAe9aGOxxqo<99-ٜVY?,=tĊ-nlh+-F)8.ޤZ.g7Iu֋=s~:"}'×Yu떼mj9ަc]<}1+̏W4̏- su?sQ0[I,Wr z_o3{3@esNnZ'w7r H7 y-\D_o,eN\Ht ۉR؎*O,~ETgWdׯ|f{5]?ڂ2&@4~//2|?)q?Ə?K8VǕqXixr$]ߑuBVGV~%IkieQt1Dt|p\ROp\(TnEo} _w6z$wZΖAI@Y5k5jԮwnmV+y^ Zq[ *yYw2x\<-yk)IPm6257$~TDďc%RL~=$qU?c~2Ÿ3qJ&JY"eg 2]ZljnZíXMNI nV$EK1:+7N=oQQ:U"cgP?*m"~?'qL?PnYչJ@uݡH7&122D$SJz}UTr p wD,Kvo|>c\|K}I=b'ecDHܫsΖ{:/>}9o9N6.'t30QGx gzc>z3ojGZ\Pk5[)$MO(>1"~^χC7oRi#4LY`zv$]ٸ%:Aܼ'DYDŽ,6y~pֆxA8,(BmiH:Zxÿ>䒣 r]j<|՘Aq jSF˰6liF[c"5ߌg2*R Ɣdjֲ{lmfGuMUsFxA7tu`YEy׊vDOF?-E Xğ#Uz aQa=_RY&r5rC6n#1z!5M3Y,/7r&_#>>[Rm m!lPEhh {1.wrACTUFP):WH./Mlרh%WNnS;0Gα΃[Moz}G#ƞ݊5_YC PLz^*7'xef&$fZYI~{@/639&&9_)׿HrU'O'%ǜ_,;.u3#C.ihPƳ"=0L'͠*ZZČ.o3x\urȓP%ׂ4ٻ"j֦sߎa*%_itf_1P",ݦsjс)NR4'cGV4QgG"Vz9BœW>k|pkQWfƇ|k= g-q59dηF9Ȼ6=cpWSdyQZB@U8Ex|< |VH~}߰q|9 v.-Qآ!WEۼ똼3UG |)7tYT6۰Y+Ӛ9pn9/kdkJƌVLS4㼅5l7Z8)y+˅rP/}H_G"|B~,|b?Ǎ\;ƣй} a$rs8zJX*%u7{]\7cSK&MoF26R)N[Ё clո{i[3`kǴz"7K,a.G:pŞ>IB}1aޫ/r tG}RϬHh@*K(q$U)ߍ9W+U 3hs_ .5Ax%"-^J:p˦AnĐ!hjGהoA%QQ?)͐E&9)Y#D.sicN/@F뎘mWd2jlf!>6n7o v1n?,a= QaIs"6z)kE:X~̽Jo/}b-\zY:3 \`|o!yy}j kH%nË 3f;5gyԨԭ@QY d,~umkk%ϙm?N؟kJ%Kx_d C> P E~˳ ="@Br Fg ^T,.wVe=egqgX厮7@lr@):x<6RWc68oکchք:ʎ6YjYdoCTaf^R;H.$<5pr>-U?~7]>7kᬤw/ _aw/2?A?Ah,8I`IYDa}(ܡL:JsNεXxt~Z]^jj{{G;U r|5FQS`77t7tr3^dž"uٟD.?\y;\((20Bm_i䥩NQ;9n^AR.zm!|1TN?`f |)xW 6n*}Ua @#`%vrPձ6Qf2ՔP'a,q] #uJdN3SxݳNBW`w UhBRˢl.>1ZA[b?Ymw+nGqC@z\٤*Ƚ ɲTw.R0oy!>f**;AY8˧nҧ6YٶdŒ'yFτ!%юʧm0?Z׉sxR"JUܠge-ipDZog0ZSRKѨ'4O*?=ԫܒ~\ ) :sWIЎMRw"ME o7 kYw0 n_Dٙ*8Zed"X7ݴV=OGcsoT[ 1YU#iNu4.yjiS֕DEAl|uZgzmSۯVL?ꦴtc[<멵zJ\Dܝ$&((>~6~*=^[1CfAS$Gb)g;Ǘ.(+n^ޠ;|y 7*$lq/(UYGNJ6YwL淣;ΐa7a]vTR,-#\AIDZ=SAn_7ǚ }@zxAG|Q^8B܄? IW!!$vG͔xqo/-?֯z,sml4*?h=w.P<,\#u55PGwșܺR&h{<@ۻQVt9u{n6>= -$xm3lxgj/W10Wi3u:B)qlyBG]AhWC;vŜ 8JEScPSAM[jJtuO9PheTp  6 NMď+ʗpg<ˏoNjHFE w ito$!?v+\_m;0k:[;uBԔMxAm@'k7-ؖTa~ļ'VR,#isEs{ǤrYb-{f+T.2lJUȓʞ4W](+ufuiIXS b `->op!#-'-jM?ggqD꘏ kz7^+%Mh<׍x2o㨋THpKjRgA|wl:na7wڢ<[V x gE^;y^oKy}8G#ܩ8mS1σv<90/ TД(HNpTKFy}C6^>,ug|vec?^'-j GaCV8o Rѫixv!h2G; ohe(ge2%HLiUGe)gMo>O=?S'Ͷ7jg)7w:xw!pSxVEp&j;cqܽb*,׳+"N\1'?duApD|=X@xz$wx KdȲ؏OKdu-"cCbug$tb%q鸠nx@˧HqHύgwP_܂$ɐ0~->c4uH39a #3}P2ȑ]bꈢ%vspI{翓 u]0/ uBkPvѓµc'9Mm֌^S閕\f8UǖV2y:Q]U_W[p":-m}]u ]o?#Npo:9úzQ^#)оTE;\"KRg-}u5ip+Gܺ枫o=T+lBkBRU˯,\Yі6C[r/p:W2{BGm!ě( &pz A-~4.M5::hM# o;͑|(exS= _LOu|g5W$9[B_q)}^_ߓ8l?6+KKn c^ ~Ѻ/>!;3q|wM/?k{L"'n`gC~8K~Kq{KNIE|+q+[v1бBe gj,x:\D+nʽ:F eq]Az.WTjCP(a-3*k ~P[o"kyWfgQa) 8Ե) g ]_BYPv\_IVCsbwKF1iY")?񧮊NB3<^ ']Xc?+d]Eȯ+&,mFz?lT+uUi4hi뛵hmG_\H_]b.+8q*sN l^(f:9!!I,ij ޽y]3̏/| ?ga)9!:9>>x;g;}xv ;: z=U\Bg!c=v-sP^,KNH.i}԰ef2fLsbҘtWuSf%4yg>I濸:cPXb3F)Y3=kS+GL:J5fА]T~+qjm>i),64\PP^,.hSx%$UqgWŲ&qvjh-Ns5N/3ΊTQWQȦZ 0t %jZ\EFSeҝ* V9 *}aFFuJ2FM|dz.q*ܢDt's KlF+b\?P"c1t/T n6rrTPjA7QTۤixTrsrrssdTwleuKr5IآQEκU#LdWzn<>Ĩcȡ2 ,ʈXLZꋒ"]dZd.@YtcTlfÄ oaV}uivvrm2vi/͝ 6n=<(Ю!QBg=c=>51:njhG!{ 9mh{!Ѣ%./ h'Hօ}/߯4+ijm&)BJCoiZmnܿb㢣jhc7iC,Pl*UrKIVFr=6{ٚȰyE6p3n] EÊ)_Nɲ)}W[t:LY_V hd]*AV]jњi6eYANOd(_y+t4J g:>[CEEe-E7A;[u:v6hDi!z.I9B"#hV c}ɔ!lw uZ!y}zLh!V3!a.鑩UP&O1f⤷ lVMLФU.tUa{N|vIU/qM䥟ZvJB,uTO1P^R07둸d57SarN۽Tcq&;gkvvK߹oA#PH]+>*(?Kh0yiY b:;ѕ7zgBVRYn[Jf9/Lײ̎~hjLkGO2\eQwGO0%R(Fg z;Jv<݃V$; ;8vN-Ô܃`rؖחQt;ضmFKV<,SΛ^|~{2_ 9[,yjv<@+Tu *=5uʩ+0Sb HL6nʹYuvKjoIݰZm+aMe+tO濲$٣[glx77_a?C8~{589/'857_? _ WZ n@ߏ_qA.у?!I+ & 3."NL/s[Cr|-9Jp, ^|0x]! zYprW"^%E:expn$tz HzP\DAߟ{H!C~TL!2d 4=x%s"^ 7p|Wx w'_ qâ!zWnjk;,>1]ԅZ?]{/V{v>Jr}?^oүЛWo|W;_Do~Iz&}rނ?',ߟMz ztԠ4qзk*rBL_2>8ħWVp~41R%'ѫO6YT=62h7i26o6q NW]hQ*\w_oX$qrXe{ۛW𻠾5<1S ^Kωx9Oy~}wtI7 D_B|W|`|W;1(s_xq؆>m?vuEmQ ZmEր˂ld_"d" ?- Wk849/ׅЯ?*a4_kEJ7z>-E C\q0S]ťlLAբTV`>z{{']P7x۟V=zۛњ3g}YH*w'X^ M=xR$OHq.=q*^9"Ka`u ?_Cߝ:N'rP\ER NGn6>@5Tr6؄Ka#̘ -EC>|.i``9;a V^nS*sbc;o˭MK(ɴ-JUP7:yvs xHDr@ nG8)3q!~Kw&%1~&7}/.TE /ab1w9uXx]pGQ%&jdgdU,I T -Oj zciCnDwbCUq}eŤWdҒ O,͈MD+0\;]ߴta$jO" wTBW@gZH&˨^kk4G̯9׍p}zz=ſ3/zzU<% Q #CG@hfuӗN2tDF:L:H &{}ZVCGGۥ<5eDO#('iH ۙ+fjxZS{̏TJn:`2īz-TbRS11zjfbDgM$˥ǩ䣙 ;F[pC/²fg 9$[!uP{38}[ֳ»".4%[ȨQF*#tљ/uv#F-.;rD.UuOqy(5ܰ5ܷ`%,DTQ:~Ld+}וhD(V՚Gi>+#Mjlef4~}k%?,qgbfs!*r}܉ƗیexrGq\g| ݉/w$Sp9Csޖę7B~n;s_x/8ԱC M!~!1p_`p6l'jjZtb2M )#{i{;Ъ47U/4دU/so*[i!-wTF9Y8V@(#&aPAb,='zj&uK]o>3j]iGxe\Pj@F+nGnpsY3m$/8S_{+zS^|rŹԒ\\ܜgYlY4&gZP,klv } =f%IYg6g WT@ W/8xԭ 'N>qar%ep3L4 'q)cU)$9.li!yjiBtUJvI~A&&Rf {t:Y+V MajhB AfFɪmq*V,vW =BF yִ @h2(fTDS_Dv O닄fm1aBUYlHZkrKOҠ;3y7b\Y'l8ROuZPb'IzV*qS3q!\#  @Le#QzI}oHPyKt7+ҙ|o~ q#OmBj:[p!ϝ [T.;:=ZHe1IٍP)~a'wME NB6@y|_;Xp.{y"LDi+1P01ep2 ^ΛVSѿ#J\&*bX~+쫗6ypKf/=WA=F3 <'W\/3oi҂\'T_ԔX_И]Vqo3 P8 \7PЂԛrSW-'͙x0,t _7 3 f6/KIu8SS%6W=l-,9 s͸^X@3508)M:  sP|tH{zwJsR/١y =F'B(k6:g2*%N}<p֕eILcp7~Gj lVU*Xۛmm[ۚ mތan(|};Ɏ&{4f5P׳l.`iO*~)X J] qs@ZXZhȋ ҉McM)Ug]99 eMv;3j-迕}j1>W+TCѲЙU{?3{%O6һ q Fu&:W:P)%Yv#r'woSGH] |յͷ̾/$gf23Idf/d%$!h@lT"h TO'vkyU+ Z{dhe={wƏg9yY$2'ڋ:ZpANYtRo,kee .o˳d[zzv0Z8mzg2q6;dEսɎ<$GN}D1 VR"BѣE54`b#Gj>-kN2=q-^nili)\Y6-( pYrJ|rYrdj̗QB 4s)0AL,l{c!gN(8'0s7@6TfI?1W45 nRG&~Kn'oq?y`znaƋ* ɃWa1ٴ2¹f#=ьtyu& JdDt^[Tv/JNjL_$~<)?U7Qhuhƻ*r|0Ne0(D 2$ ee#8:;U-+ t&ˏ"3sB,zELdeۇT y Lj@Qv ==/̛iOH6 Ze9GTTO#\.rxzo3L.g2[Nlf-t76XR~E,gCHlXfZ] S$`^.G%?0,zngN7ЩZ\a,@Y%eV́/`_yںֹ=:fH^'`ՙ7uD!Fwsi[F tyO#'Q X)nnh|?csfESgkh@tGBGH '{أ'w2Tfhǔ0"K~C >7ldD)'9B{a{wpc`\43~Է7.>+pΔ3W_}ӊq~L@="mwo 4:;vz < \c8 (( єh2Q()W\\&ٖMBJ@^YbfKQ!۝L$JdF8Y(DYJ\e1J)'W]Z,ט'x4}YJrFXXվ̦B)1ôHA=}fv֬"XiWgT2y´`dF k MxBbΨ.'ֻ:ϻ&Xm )nvM^f/;<}o zҊi~=lO!-@-`(7`N7vB3R,)e>GK3H2'ؙb5Ŗ+v+{M҂J/Vi)4 1_-lOs IN6kb9mu,ԅP3(rD.y3b8Hx¶-ԑǓzqT.{2,Sx~҇@qp3v8@""ٹa V׼B[r[xQO*:#&"b8Ύᕘ9bÄTߩT0JhgtMacjPhM OK %S.aѸ rBRH#1%`9F!]!S)ٿB*5ByJo䃪su:~vBRY8&7O"< b: 3)~G'~2{t{*hisl mV1NvGW>ݤT7ǤNRHv}!rP݂_$ #(Gd183/%؃I mtފ_@g6ǩgx + ťqVd[J?Y`Ȝ+YݒUzhE}DbM{-r![qyVAy/rVLg} e ОP 99|]=yt0P8^m!Yϯ uziu>l𜥥m:xD#b ,Y`4 ILOOɹcmi^OIaU{V:4mjߟW4sǙF~B;oM@hCJ*J}jEA`-O_ºȁ8r wh,㘀17W Vł^2DAB.sk]+K[rTzqvٙwX?xóC_{Xl0{;fUI]/nZ*9ِw-^~xGw}]N<=mE莊ӛegiTu><5kڵ0T륲l{}=a _~!zo+Zh TAnUdYs+Ӵ%QN{ldM7f~"7H!Wv[:Z=59?@OfFښE3: E;Յxx|k' Kv64oi7>B>6O ؎}u9d)ul+jGmwdCt '?vX?8qЮ7#. ,g HtʬEw5fdXo߳Ǐo{cjg~zminع\ʲ3n_ 0: ޑ:VY/7Z# 3Gx mY{"vAdО>Ŀ)Qz9'M]V6Y \nh+t}%D&)i/wd R62"QAB)x|V $Ҍ.;&iA}J* +WQ)]|gg2|Vm+:{!˅s1],cϞdt!b4Խkh -8ꨱ_H9șd ?,)!*XظI5rwv.>o?]y;j+ڋsyR9ET2zJdH--Y]nWvqyr&ƚggOfzy ٟ\Ύ.]e~ux)LϿw I20U?L,\4I 4^XT4ѸlBZ=E!=|z5>`W-jTdwn@$/J%VIHdb}K%b[w19=o-\R"ߺªĆ*uQ^hT Ϛl +-2v|g*{:M T<^b_hc х*V CZMhdMDXʮx1^ ]h٫{wlU +Em`GmL2NO]xWKXQ_]SdWj5y/}T/ )UU(v{eDs+  %A>w`3w1QB}9B,ybmJwFb:NnOU $݌".V6|+Oc@N'ZB>c^M HRD% tڋHɻ,K$z5e.֥'%jmV84: +I^: 5IEWCfYDGՉ%ӕlUvҩw#x~6n?+rׄ-p/חۂz*F*[?@!&f<~_eH3hra.s;OAgERV[g+Ȳ2h4 _1W"'砿C(?~aD8TIą>),bK'G<=N.Q&ɓ6.{NpXJ M4%bKr/l=5vb?_ 6/smb< _ĺX\k">KLǷP l~$LH޵wn;ݱΣKT1~f]ݕ 8`\*32ǣE}uvFZ }rǗ{R> zE|j{/Q,׫8$K-pW{"ŕCq2Oӥض٣P_c(cF7~-7OM`w|`l)Fc xĽC[KrS"*{h&CfkߤgQD/\S`<_8ER7=y kΠǀ@=&F&F z,Z4Gl 5"GR 64 rrMC:7ڣGz8\9YxjּpOh@] ïn呑Kj% ᶍ/>-lХOn'IiiI>!obmFh7='8fӳqv햮`kK=sv;|cy]݅K̯z/YQѕɭdJ_<y? Dm xc`d``/k߯r2EykxݚyxU5ǿ$ "e,TZ-PEBi -Eq.U(CEeFGEP(Vee ¸"=MNn\u>y$''7y&ye4:?8:{rGqڵ bTkⳍ(t~dv<ahtsA\@?BE (O0c:m>H܃9tv^ Kh"O;)HE-GvD גyQ-a$۔_@\=Bs9×0|5H=4a5p4|XoW@#k ߵFH*@,&[PNXqk{NnNWe 31}r< kfb)D4Y:`oCWtAgbȝuF!6p#&p%XHڈO)HT1&(PfG#ƞvCtfEWk .{#ڞ,+ VK;sd*cg}- /A=bEN"jK1\HXqe&m<$L$l"Y_cҔ' w$)r PTcBwƱ R0-wJ}|,Q.20B,Ah1w+(wF#&)a8rGZL,r^FZweưE:r7mp@s}#шdR?Ωj n+ s1ӜD:e_F@@g3Iq1;λd=zo|/X7 +w b']h>YL\Tr\fɫH&lw؃2{[?'[``jP`mUvTZ0sً2QsZP\`wDry'H~FQa zʽ Jcxy/$C:I#{晭as dz2 r7ĭ ·uv}0䏔hDYLxґ$0=]`;L.:d9 +8b Lc`Cryd2KxRg}І:&S^Gߛ!=ztSd )$t[+1L#чL%ɕ=&#h2d\2Cae/eN!IƔ4RͶ㼉\G*1$Dl &ϳ r; S市c~\9=\ΏN\I8yRgO#9~L$*(s'8!;N&/ާNW5r1 ϵr99O~.E9r.>EqĪ0{Lc(G9r=haWyGNpX=/muޓ!吏bH`UN_.kIT$jوcL axp;:T܍lgDtR1v/9or$+h3Do料JZD'ݜ+P]WGvxc*o߮'r:?z^ |Ѻ8vSe|ME.ۿ='%vvڐԽ̗D<[nhQ=3͹.RqK5]Wq}|ONّ]ב+qhrGq'X*|Xf,פ1ط{~>g|Mԁw"ξ^ eh&"هhͱ5gG!Aӆ\FNGlI VXqxܒe'#moLj Y$YW{{t|m{h; 'z<շsYjk#MkK{kdcʹQc-g?5Ѧn-$Rlw@"5mmج\ r ݇}F+){8#U;eC/S?݋hWIޗ^0-X'wr| )a/sk)^u2o3Dve/=^ #)+>X*ngD7ǹ{mi_+R=BXĵo%D+{/j!!l}?:PvJ֝J}R)7?Z`};#Uu {+)ױ"<;rໝpyċ1;6Qk."A_A7ǩ:feEw~rV<{~I"kԺO4eUM{Ԝ< P3O!Qd Jvip/UYI{9h5Vgzs3׃Qc|~Ë얹>.}&?Ug _sw"Zڍ9hWn=![qOLQRgj^0>Uy9҉il"{661rs7^^Xe/Hل1owe)Ol/ID!l1͵T%Vڝ8iR6g*ۂmnJ1es\;ydfRx*vɟ˕( B23dy2Uwֈ as2p*5#/^{9p.~?wVaOy5g.Eŵi qɤa<{aެixΏi Yxe2ǽv2.)O{{Lza~^̋kKHQI+O%1!V8/Zݭk ;3!Vp T~9{_Jb=9U|oۯv`x8ep9yRTl[~|v 3է#_!iu mQ>gBM}(3j'^!o0K'{s?|2FW䗗Ag䠟Hཁw SRwd/#sO^rw~+W?4BSE68K u(&HP`&-m?K>j~^}@ժ~rηje|^mо2}e>3ޫ@+TY1d_K(Xw]4e$︟sy_t%=yY#3S~wXNkYdE3F1S.w{?}~uHӾFh:5~GAىXvt U8Ǹw2_! qN'J3^~2_әwg~6 _4Ά "STX[߫󡾻;ﾂZȷ|w\luCRZgZCBS=Qg+g}03BwDM +) 7zww7h?8NPcvcq;r!`#_L9ǙWΚHb%lw.SLE-ߚW5 )SB۫-}o0mWC}ؔ_[;}uƏ- )5*/0wsd5כu(G)M8w\jMEOBuCQJaar%x^Qʯ(C:(i"i+?#u֮PFwDd?6GӘPdڦ>IJpɧQ>JO*QjR](`e(p/u Y*eR(5*DQ}TGaR܃Q 2oxh*Q>#S~g0 |$I=W<" {tE{n/n^h7HCi= sMhX{_ul~uvNWt7V2Rx$yee}BwssqQ*F[@PPFٰ\lx(`7[MｩSqDpGMN0(n_ba(mc|?k]^k=kWkk GF###xl8Ƒ {|5~&7ی1w|+x/#? 3rȆ-'|!/GΌ9#?g _1|^p'7 ;_}U1#'_ǿ^>|~pjs g_C+5> JJJJJJJJJJJJJJJJJJJJJJJJJJJ *vb' *vBTslk;U섨XN9AMNP&O :Op'\ y!x2[4xEđ+'«|=Amq!O pzX _3r迧3>>p]<ޔγ0N=7tO vF_Oߚ#7cor-Gt}6*OMZ?-]z[nNr໇/ g|}ޏn(~ ?[?şs'_o.2j/a۱TmKIm˶WpO<>9e\~G~(x2FG~&gYwaJHȴ}&F#߀)xXyZRk!!i;exdHھ_}2d\ːq2.C#C>J|-«|߂)Ⴔǧ:ou~nS')xp#⇆'?l18~?/x ފ_HX牷to;Xik;mk;m?û縈k;^ ´ 7c =yeK#ea{Xea{XelQuGUwTQuGUwTQ G5pTQ G5pTQ Gu)ۥl]v)ۥl]v)sTQ=GsTQ=GsԌ+q3pθW8 g\+^OkaX9޿s_sHΑC;Guxf0'~/>oދ_02;GZwNOݑ3K O >?~at?+΍Ho$~ʧ/$n^;{NN=x kx^s,|%^_,[J/\FZ#ym䍉NI,xOs{s6<|8 /r;KJض_:;|T#/3ᣃ4xQRy[ ,Kx)^}x9O|5^J|-nxn-OkfN5|v0:F)9[Ǿ|']Z߅7n|߇׏?d(~ ?OtNxi# ?G|pS?YFO'4<2gbOSni3O ܾ3{oN|$egp'7܍| l0moqtl [:{>Hwm?ćҽl_tmç wycƗҝn\Gٸiwqôid) iMoiMt[:ۦ}M/u^#~yG6]h"^OHۛqM>U>9#l_(xS-_6rG:v˷Gl,l=ߤ+z=O龶{Ry?ÓݑU-6~/]?k8>1ŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1_ bŀ/|1ͧ_>pjO#8|31ߤP3ٴ!mo:`g\Hp|0-Qamd=_c=U<8|Rb=*q=iĸߥ=b;-ql_?\qmvRx~GP⶯?tsqGxwG7 >#xp{ھteL{n~7qsҞq'i|j}#Mo6%?b+0U?V_G~g37͂ӣggF=c?k8g~)[7۾WlFwGn 3rqΧgF4#jr莨ɩTjCMv5١&;&g$j#jjCMv5١&;dPjCMv5١&;dPjCMvɎI\Ci"1+⥣LѳG"R.܉ O N<}{5^+9yqs\9yus\9yus缨9TTd|LnbTç#q_vγyv;nO:r{g =r#G?g/-=x[ No 5274r۞*IYϢRo{h-ƟnO=vuǺcnX{=vuǺcnX{=vu'Tx^5^5^5^5^5^5^5^5^5^5EQϛFF࿏^k9݉}.e>2<0rR#') 75qߧ-F|7ߋCa~?O'Si ~?/x ފ_Φ:k|oؓ1|^p'7 ;1}78 OpN-x&;Kg_o7C .I^4}{!MgH^5홾\% [pIBi†KҷNL^ހ7ҷ3~ ~hxrö?Ïgsyތ% I^ގwզo/o1zw=A(uIB ^ wq'}{!x/އHC8LO^nMዃH{o/ , V/p^+5W*7-8IBp|;ߙ\J\ yaxaod<O3/$/$;KCᅴ}Ҟc;8*yoGʏOcǶ+?3V~bZVXi18~?/x ފ_HXto1ӞO?n9.OTX0]C 7cZcǞ L+VXiU/W+܏Wkux^Lk~ضzN+x|szG7; gb9Xb_6m`{f?hf?hf?hf?hf?hf?hf?hf?hf?hf?hfO! >7w]!sḺ{xbza9Xb<~=~=~=~=~=~Mmo6x۴ ަm6miMtTQMG5tTQMG5tDzOLo50K.>8ۇ'nw]|X`]{ó6 ab9Xbq3tƝθw:Ng;qoMor}xΆ7MnX`]ߑuӻ` 3̱ҷD=]["["fc%Vxul`[v::::::::::7RFHs#un΍Թ:7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7Y7u=#[_pxRpsӃwgxnm})x/7|YYQ lHtO⧌|_WIzVq_ھ_ ^NIYx*\<ijp]x6y ||_jm2|9^5|]Ҷxx߈Mf| :6Զ Lnka;N4,<.[mv|.mF|7ߋ!0~?Ï?')4~&xKz1<9(|5::6ݖζx>KEe_Mھȱc6+_'7?{p^1|rt[>^=NFHn<|^[^F M߮$뿧[xGkWH[}o1f3(|[n `'|>㪎XG{Sç/gn}g:$#'Lu~:?bΏ/ vz [:[z]P3k|- > I1 ',G.>Sᑴ4|:>|N2rqo۱tK|(]Ck|k;}x{紽*s=WO ]Xina4#6Yb=M998nKg>}^ _fsھQcfWXɡvۨ L+X/#[#σH츋X1cĿbX ޞcMFcM&~]M~?jj%M+yS+}&[7۾WlFwGn 3rצV^Mpf:qt<8Oy:qty6?'}%wyÓǧO >:>=;Hq/_>'0|柧 {Ý #IL܏t+@~)xz% 柧_F 0 ,/#3_F 6-lcKL8ޛ'P~|0&***************************q>}ta3s}ΰ9ӧgL3}zOY>=˧gtOwtOwtOwtOwtOwO]ۅ7 ' <OS-x1x4 /bok<Zopデ;<%Ù˂ss\~5`Ot8LkKOߚfI{n>z˅_}үn0kp-T :1b]n77 {{EM~ ~?0bcq>k x3ނ6<3bۃ+k.~~5t7?p/?4ǣ)lçx>}x?>M|7IÝM7 ӯǗ|) erkx1fi _ ' eZ!_+U/OO_ k_g?^Ux5^o7[:O] _=IA.H|;߉| 3ގwWN~o7[m~b<?şs'DoӯqWӯJ߽ .^U\K_  ~uKMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMr$gMrүgS~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM~gM*֤bM*֤bM*֤bM*֤bM*֤bM*֤bM*֤bM*֤bM*֤bM*^4 \4X=|F_ 7͞gE# 墍I#?tO⧌yWӞ[%mo=+moKۗk:|51q),<5˶b^FnTmg9龶{Ѷ]m;9xcsF7|Eb|}KO >3xyFj _>UrN:g .p qgqߊo÷;wImF|7ߋ!0~?Ï?')4~& 8} +(|.N `'q[Xy>]|poφbO- w.N d\t[XP-aM:sVroaUoaW-]-qôM#[X74WV8nKgK 4r--~yd[Xu1fOe.N >ӷ\boal䎴OVG|q֖ӷ]oaǿb-i<} +U-6~?1} +[X[2dtN2If:L'$3dtN2If:L'$3dtN2If:L'$3dt2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!3=d2CfzL!sy\03^#i{'>?2B\ֶ\_ֿKxxߘtm۞rgy><3\g9vXo;9xFwEbg{Iն=x^5>Uf]۶w x#߃A~?ŏI~?xB OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|'(>A OP|֓$'i=IIZOz֓$'i=II*ORyʓT$'MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|4ŧ)>MiOS|3 gh=CZz3 gh=CZPy3T gG9Q|s(>G9Q|sh=G9Zzsh=G9Zzsh=G9Zzsh=G9Zzsh=G9Zzsh=G9Zzsh=G9Zzsh=G9Zzs<e`Ot{_!wf {e}++Y-kd|||R>%gs0].zEwѻ].zEwѻ].z:rgxS=e}>(jY#ke)|F>+χqzqzqzqzqz______________________ _ snֵP>Pz{dN^I|Z>#üNNκκκκκκu^gu^yz}^q^gu^gu^gu^gu>zG}>zG}>zG~z?O~z?O~z?+#+Y)jY#ke][ xo2e{ˀ-[ xo2e{ˀ-[ xo2e>HA }>HA }>HC!}>DчC!}>DчC!}>DӇa0}>LӇa0}>LӇa}>BG#}>BG#}>BGQ(}>JGQ(}>JGQ(}>Fc1}>Fc1}>Fcq8}>Nq8}>Nq8}>NO' }>AO' }>AO' }>IO'I$}>IO'I$}>IO'S)}>EOѧS)}>EOѧS)}>EOӧi4}>MOӧi4}>MOӧi }>Cg3 }>Cg3 }>CgY,}>KgY,}>KgY,}>Gs9}>Gs9}>Gsy<}>Oy<}>Oy<}>O/ }@_/ }@_/ }H_/E"}H_/E"}H_/K%}D_/їK%}D_/їK%}D_/ӗe2}L_/ӗe2}L_/ӗe }B_W+ }B_W+ }B_WU*}J_WU*}J_WU*}F_k5}F_k5}F_k𺫛3sGe#euǷZa2jY)jY#keZ^kzZkZAk Z6hmڠA+K+K+K+K+K+K+K+K+KkFZ6jmڨQk&MZ6imڤIk&.p;̇\wì2aV=ZZY'/F|J>-anoooooooooooooooooooos9z=Cϡs9z=Cϡs9z}}}}}}}}}}}}}}}}}}}}}=Kϥs\z.=Kϥs\z.=Kϥsu;ur5Vօ֣Zj=֣Zj=.]ZviڥKk.ǴzL1ǴzL1Ǵvkڭ[knZvk幋=Oϧ|z>=Oϧ|z^@/ z^@/ z^@/ Bz!^H/ Bz!^H/ Bz!^D/ыE"z^D/ыE"z^D/ыEbz1^L/Ӌbz1^L/Ӌbz1^L/K%z ^B/K%z ^B/K%z ^J/KRz)^J/KRz)^J/Ke2z^F/e2z^F/e2z^F/rz9^N/rz9^N/rz^AW+ z^AW+ z^AW+Jz%^IW+Jz%^IW+Jz%'ԷC̼o˞P>Pz{dN^I|Z>#ìWѫU*z^EWѫU*z^EWѫU*z5^MWӫjz5^MWӫjz5^MWk5z ^Ck5z ^Ck5z ^KkZz-^KkZz-^Kk:z^Gu:z^Gu:z^Gzz=^Ozz=^Ozz=$$$$$$$$$$$$$$$$$$$$$444444444444444444444 ,,,,,,,,,,,,,,,,,,,,,<<<<<<<<<<<<<<<<<<<<<@o7 z@o7 z@o7߲ sܙٵB[vaG]r5V >Q>)Og9|Fz#Ho7Fz#Ho7Fz#HB?3[QGPr5V >Q>)Og9|M&zDo7ћM&zDo7ћM&zDo7ӛfz3Lo7ӛfz3Lo7ӛfz Bo[-z Bo[-z Bo[Vz+Jo[Vz+Jo[Vz+Fom6zFom6zFomvz;Novz;Novz;Now;zAw;zAw;zIw;Nz'Iw;Nz'Iw;/ ~h'/ ~h'/ƋZ/j֋Z/j֋Z/iKZ/iKZ/i]ԺuQEZ.j]ԺuI%KZ.i]ҺuYeZ.k]ֺuY+ZWh]ѺuEV&ya+JGVY+|Ye^zYe^zY5kZ״i]ӺuMuZ׵k]׺u]u^^^^^^^^^>>>>>>>>>Z7nhкuC Z7njԺuSMZ7^zEW^zEW^ѺuK-[ZniҺ֫Zj֫ZjkZikZikZnkֺu[mZhѺuG;ZwhZkZk555555555555555555555555555555555555555555555555555555ðU(Vr5Vօ9555555555555555555555555555555555555555555555555555555{ʜ)s2{ʜ)s2{ʼּּּּּּּּV:l凹#ʰe#eua֛Zoj֛Zoj[Zoi[Zoi={ZiӺuO=z[mz[mzGwzGwމZZ5am2~C32yA|;C/zKG|/+^_jfw_;K}ؓG/ݙOx(OOf>2ayaCa>[ւ\Kr9V\kג^XD-+_ 3%әoE_i=;04g_}^o\wa|0 1rSdmW}Of ,-~Me^gvYu?#d~1̪G lIǢ ?_G2Zw2w3f'7;omldIs6DG2!2e<f_ʾ`My˓WmyG.gG 3[ᬺ-x'wOP8G¯+uxld3*M?2^ev/g7D#llllllllllllll=l=l=l=l=l=l=l=l=NT=NT=NTq';IINwĝ$$q';IINwĝ$$q';IINwvTa+SτPv=<[;}~$Q4Qf{i?# w6 ;[w3a(z<'~%l#ѩ¯SJ;W >U¬{dN^I|Z>#ÜzҺx׍u7Һ0<]_7<;aNsvhs6?a /Fԃy=uυCXDZb|K$/+K/_ɿ#"*V{5u 2ߒC~[~OOeW[Kl-׵MfLf0$$a& 3IILf0$$a& 3IILf0$$a& 3IILf0$$a& 3IILf0$$a& 3IILf0$$a&I3IILf4$$i&I3IILf4$$i&I3IILf4$$i&I3IILf4$$i&I3IILf4$$i&I3IILf4$e&)3IILRf2$e&)3IILRf2$e&)3IILRf2$e&)3IILRf2$e&)3IILRf2$e&)3IILRf6$m&i3IILf6$m&i3IILf6$m&i3IILf6$m&i3IILf6$m&i3IILf6$m&i3IG3y0/ 1̇dfwy(;aD=7 ݿh0f69T#a? \̔y),"ktOg9o_/&,[dL6.;d|!/'E(/KeWȯȯʿ'^~M~]~CfE`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{؋^"E`/{!'aFكO#euaֺu[mZnkE?A7lxwt5w`k H" $* IwHh"MШJOTTr<p}q}֚kιoFXaA)AZ"Kx[;=Z,jℸwmĞ +J ܽ?I냠byЮ νg>7b<8P 2?|. H (zDU b>0Q׃dN<U=Uի*'xJS@zj_6*D["p%1=v_5^)~&P✬6N )撒lSi*]6a9rGx$#{_G;h8cpc.i?jl.qOxyN0 M{0l&;I$8̃xSVT0NOS3M4Nt;6CL1יjf3̤&͢wpo6lZg;[jfc2t=yc '9~U?yr[{/x{oE/K祸-KpY뛴,-:RnwgݫG&/3ɤ+L24L45Z{uz;ow~,}+ ,5 ,ѻG{ϗխ^Oz!.> ]8~Lz|l/?q=dzړO}~-}o~0˃vWyrtX8}sڏ(1ui9 ';IO~2\s!\raɣK{%_;iu;4Ӵ 9?k?{Y|e_kz꿱[t;`ësr|sz[ھ?ws~y_ .ϫqp_G"vӞ_2Kܟ^eE߿ßq;_+sîz_U]`?aP{óM_~é_R9a^c|@={0Wc]曈`s.b~C侦P$CP%y{.a0p9#HG6h{8F1GP/o}zJ+͕0Wv~5_W4L<25sXgomߦ<3Y|xٻ{ώ{uSg߄6xw8f7bV[pzmgm<˵_pr=ug6y|΃gD?O|g<;KY8_ku߸S9Goiֽy}w/|G/zKv/'{r0~g?{_y:7+yE+]+\s]UyWyv֫rkw5n';~ oa&7`冺f}֛v/~ߒ [-ś[jow +h8އ/Jꢮh#z D !?B~ q!Psv;`ݑ#a]w w[~'. w)DE &{D} _p -$ |/-%bO}s q%?0#?ICt>$?2ZO \t~.\KUyQFbY["["H*AwC(Eq+ʧ E(EZ+zD( GwxEgϣD'h.f~jA)b+Ƴbm%ijK/#>#4©t>Kޕ|~q)O[y*] Kx+򲢳|ȻxUݕ8/+2_'=*U͠*}CWùW><3fLgt~Nsz? /^Ջ=cuͻ,# 7Ĺ71/?Mnλ|knVaׂ7-G z[kw}+[9oEO+ӚwյqvixGc=%N:Չ`w̤N;p< cyph5`ϣՌ{c-NU;f>Xo8a>4?2Lm j&y4)Ny :TL9`LwM9r }fșafr&f;S*rfχ;|^\Xyq}0PBz  v᷈d=_"-g/":b<ۓpb^,VXb=^/u{f /m{K.OKq\r]*wܥrjo /s[fO&o9,lӱ\rzRY WB|Zv>+`JVJVRJwr-U42UW9_şհWӲW.\t6G™2e(=_&ΙxQFk`{k^Z ֪_KZ{VZykX:9܉u9_:<.?y6_,Y`g΂6K|[3>3o;rdɖ-'Lmo6ء zl;ac6wjxyn4F6F7r]j>7۩~loWݳj7,3͛{>l=Bwc >[قV\ k+8VX[am 6X`m 6X`mdtm]v|;N9;hAw^;v9К/r3f90w s'̝0w s'̝0w C>~h>r>2#wѷ>ûpE.v.se>?>俇w7ݭ~ݼ=b}kck߽wk?SwSwd>{}x>wg~~=8 r9HA{wPA\rLL!yvCx^;a?0އq:a>s>7ssܾ0/0/ 9G:\rD(Gq=Ώs c>c~ c8.:n}'N'p: {|ߓ>'ݑIw:eNُSv;SO΅ ;v.\XraʅǏ<~ʣ/<ˣ//ӗ}:mNis>uOg=_ Nw9x[=[y<Λyxq~_'%|?e.{~˞__4YJo<q+\a>a>WqJUUso5 [pM5:~iNGΟ8 nooM{xڿ{2[fp [8J "H✸D z?G"Ztk.'~ ""E ~ *(Gpo{k6q>wD*q;Ğ NgwƈbqW p p[ݝ#NA=08DQF bIQB8¡P¾>ߛVgŕ !!DDIG$%H"/Ư0~+[<*£"YD}Q5EDRknQEUbtñ]Y\}q+nv |SY |J.ġ ~;o༁5 4 po !^ qoOC|hOC|N#|Fz5§>4טa4Xư;o̷hFS3 459MmNSs[x-wKҝj鎴-ݑHK:ZђVt­V4򷣕Vyk筝vt ]m=moVmi[Ԗ4-MmB[nkvé^^:O:j:ґXrcq;VX=by{,c8q,N83ۉם=g;{Y]g;Ostǵ?z<۞z^;ԋ%7^Qo|zG}#-}`c_}}aSlUKߗ~Ixesx +fW{ǯ{?H}O,Qn"f&D u0_bFCw:I y(Cj(l7y7K73 0nW2ܳx0ޏT3H~QhF=1|4qc8wcr&{4 xLy9ωON6xO:} w*pƗiMt^N g4=SLffogsY-w޳NGy.2ɰgЛ tgw9͡m.^ͥw.v`G<{5r;χr]` hZ>s:1 P`wxWn)Y14x"!p"MG<Ѳe DAc;;؞qwώ[ CrACnR $ ڭ߯Y2~ګX | {l.'Q^cߣDy=,l"ʛq;2k(D!e?d߯Q~~2mAm|}c6ͿDy=:Vl]Fy ?Ey ŪGy{olѯ~(GG;WM=*/+Sd8Rjtbl~pb|2o ~ _i?bIo^Ar .V0GOONR,ƐZ/ފLN `ru ͳLM+lf҂g+_>-t * ]˱H%RϤSy*ޔ%ȥK;"։?غE2/%wt *W@=@q*7 @uRH+Z^U92Vy0~ƕ0θ4;-R %L|"%LZY sU TޭZCs(ש+IpN_[S >^}i!Ե@jj*LK[(%,/-M5 m2Gd~0yULi)'kc&WNU8iTx+ > 94ygtyk>7V"X  4zr^UquǚXkn 9KsZ5qcxt0<Ṟ'$o%QVyuD s~CT 7"1\=m-BZ5~~i3^a3cZS&)tC ` ꦼ}9s%{ ٌYX g,e{yl~lfXj&X28` 7Ǯ𮘄L';WK?O]18z[s*Igg LmqO"_xL݈xwD}J+MU6`YSid zÚt顭',) Rw[m2-6XǙv_O&th:nκxpM"%UE>,"НvJKHܽ: N <rh>8)6R6nen8{RʨO:.>/~u3m?[EV-z)`5uCt⢖~t=64CY:̖]_s 7U"sloiNS_O(WMO"vө7_at+5[9?l>`gS;D ?VocecGZVϿI ayO3OAqۭnx|&4Άq5,boG3  oG3xm\6Ӷ-$efvͻ=MRnKr]{K23333333333ÿҾJ_'FC9+:[9_㸞C],,Lpr>sv˜] ℮DqεN|$NdNJ*tsS8pGܙܙYϝYl\ν<|B"bR2r} J:nY YύWYM ͝ݪss󵳙3ӭ+;8[kku6gKh6ζvYnvqusw7p7t7r7v7q7u7sǸ[[[[۸ۺ۹ۻcs^u;.5ws;v{7ܝ^w;o;Sܝwr]ܩn^>~A!aQ1q I)iY9yE%eU5u M-m]=}C#cS3s K+k[uuvfrtpfqpnvnqntnrtrvq.s.wfu::k83;;78 'pF8;k:;;8#C(9Y9}99}9}΁AG'w?u?s?wptrvquswptrvquswptrv<89;s8s:s9s;:{c{S^FzYYټٽ99yy;Q7ηέ1%B" ΉI΅BΩΙEim"ޢbޒR2޲r ފJ^ ȋK˽WVVVVV^kz^Zhoo]o=o}ooCo#ocooSo3o7y ^7ћu{=ގN^7)ހ7 y.ToWo7owooOo/oooo_o?o@ `P0pH(hX8xD$dT4t L,l\<|B"bR2r J*jZ:zF&fV6vN.n^>~A!aQ1q I)biY9yE%eU5u M-m]=}C#cS3s K+k[;{G'gW7wO/oxJDHH@FdLf!d2'M!d Y,L!d $Y,M!˒d"YTHH"$#9YBV%dMR' $ %YMFuȺd=>ـlH6"MȦd32lN [d-َlOƒH'GƓ L$H7!;H/LH?Bv&d a Jv%dOٛC%@r9B%Hr9C%Ǒ Dr9BN%Lr9C%Br\B.%Jr\C%ב FrBn%NrC%Ay%K|C%ߑGB~%OCRJ) SI :3љ,tV:Asѹ^H/K2z9^IWk:z=Ho7[6z;Iw{>z?}>HG1gCgg>w.pw~ps~r~t~vw')4}>K%2}J_7-6}Kߣ#1~J?/+5~K'3J?/79e#28g)l$fb3Yجl66;bsyؼl>6?[-b Eآl18[-ɖbKeزl9<[Vb,a)XΪVfUjlu[Y5Y+Xbkl.[6`l)یa-ؖl+5ۆm˶c۳lƱlb$z؎l'&>ϦdCl¦]nlwۓf}~lv;fCapv;Ŏfǰcqxv;NfSitv;fsy|v].fKerv]Ůfװkuzvnf[mvvf{}~{=fGcq{=Şfϰgsy{^fWku{fw{}}>fOgs}žf߰ow{~f_owf)=N8s.%W<#H>gYl|v>y||~_/Eb|q_/ŗer|y_+<ySWyW| &o^:|]_o7&|S7[-V|k ߖoǷc'INO}O;>ȇ0߅O|'ߋ~ ?~$?͏~"?O ~&?~!_/ ~%_ͯ~#o~' ? $?͟"_ &!? %Ϳ#'p' .Jb)Fb1M.sb1O/ bXL,.KbXN,/V+DE"HD*2*bUX]!uM! QbXG+ Ćb#Dl*6cb Jl-ۊbAtqb D1ItIɢO)bg1 ǜGqbH ;.bU&v{=^boW'A`q8T&G#Qhq8V''Idq8U&Ng3Ylq8W' EbqT\&.W+U_jqV\'7MfqU&nw;'.Qq[#AxX<"IxZ<#ω ExY"^Mx[#9CX|">KZ|#߉GY"~O[;{3ΓS>q| G33ssss KKKK+++?#??3?~_ٙt^pusq&~Zh]=}C#cS3? ~?џw=N~?)?.TW7CwO/o_?@ `P0peE%???????????????????????߿пȿؿĿԿ¿ܹÿ¿ҿʿڿƿֿο޿ѿɿٿſտͿݿÿؿ˿ۿǿ׿qvr&;N____:;;S;gG:ҕ$J&җR*r%g3Yr69C)syr>9\M.( Er1\B.)Ker9\A(WH2d.ΰ3"kT\E*W5䚲.);d!K\[uzr}Pn$7Mfr\n![ɭ6r[^;N9Nwvd('n#w;9;9{8{9{^9Y~9E,r9U*w=r/G+ y*')|O>+%|E*_7-|G+ߓ#D~*?/+F~+;_'E*?/D9U"*WR)jfR3YԬj65CͩRsyԼj>5Z@-R EԢj1Z9G-RKeԲj9ZAVRH*QTVVUjjuZSUC5U*TRkjZO6PjLQ-Ԗj+FmS۫jթƩjR$խzԎj'ի&>կՀTCjX]njwSV}~ju:PVCSapu:RVǨcqxu:QNVSitu:SVsy|uP].VKeruR]VרkuzuQݤnV[mvuSݥV{}~zP=VGcqzR=VϨgsyzQ^VWkuzSVw{}P}>VOgsR}Vߨow{Q~V_owSVN^@" F#QL,l\<|B"bR2r JA%($H,ȃjP VV V V V A#hAZ````````````LyEeUuMm]}06!  AW01t=NAo09 )@0 .```````````1SiI}]; :_o|@)&1܉c+iH.>@V3ӕL;QHu颪Z+ n]5GuQrR(UR(UR(U~U_ժiktZt?ѡVCu.Z] c]5u"h%.]thTlzTc#tgJ^jL#eI~iL#& k̇fP?9^[7'975|G9{*؋dEC=tsA7]|UA/@AEQt!"Ȥ{%^ "Ȩ2*j YAVEcdVT}ȮsdXT=ȲzؓdZAEmjTnAEuC'TC@J `XM@ A/B A/B A/B A-kZ#Џ@?#Џ@?#Ѝ@7t#Ѝ@7tcЍA7tcЍA7A?cЏA?O@?tM~ՑONvR3E;)S/ N~䨗^Q?Gh5jO k_G?__T:گ~tSW=WtX7@ o~6@"@tz'jTZUUX z4  IDKMDKMH@@HH_ZW, fڋE?6iS;U6lcǠw0& 7haN$;awI[ϥZ˰Yz+Jz'Ij+ lz%>IGIa#'_84,57$M3O&X`u ')AlIz#0b IƇ0zrJ@W_{aeyBpqwhf< H Q~l/NS?z-sgS.PjԄ΁֋bkl5փaajkazixjZN֪f5Å5X35kfffpkfpkM22elĔ)3S榬 G#pdf#2B\3Ȍ. ndp#F72 nlpc957WBɜ[I[\{X(|ɟM_;5}IM_Rӗ%5}I8=BOyk3Ӂ<2BfZ0<ef&2C(7ع nnpsGQ5FEUk.ܪ5 E"qp\d8.2 E"qQF{'1}k\V˒ O 2Ê1z`g6k/89U8'581581[a0al06L& Ɔ cÄa0al0T3i%ZpZ>v"E*m+^RY}۷iA|o{;޶aC0|#R=Rn+W*8gT讂Q]Tk*scùtsmĴàq]ጷa T`\Uxq`XMj^R@P+z-m^K2k$ajAǪJW_[R#H-Fqz ###aİb?1O 'aİbdpUg?<5;kݥiiii(FByiMsquvĿKL{i/1%Df 9|ިDdD~9<E.gR{5zס9bm߯_ֶ՞c$cC-NoJ###lRDY !y6T]лm&F_$F_$F_$TM޹qHHpx-}Ԍ|Қl}0R7#L9{vF 7CX#t~<ՄāDW$B jڰثEh 'C+8-jɆf뉖=R[+Őq!v9_Z.x7qnƐ@d. ̡>k9k_gfz=h6$]~C49:4Qͷ4MY5b1Rc-X8.SbԔ) 1Rw D\]OL61SqI.ccD8(Vm;5N g.|f(((8 q2(dQȌG!36Ufffff8 q2(dQȌ<3Bf8 q2(d5 5ʍk47%7;!7*7in\ܸqMsc,ʍʍY(7fQn̢ܘE1rc,ʍY(7| _冯rWUn*7| _冯rWUn*7| _冯rWUn*7| _冯rWUn*7| _冯rWUt"25-3ZB~CFG={4ߴ`J+!hVZ$I˘$.{|LBbl9"m7j>]$r'L;i8]tNL;i:]SC[L%dSߩs\4RD#ZFĸ^AЛ&+#~jjjt)=ImB[7Mh&Ny}>MZWdyӌXQouZz&Cu2Zu #0cǵi 8-p[MyB=XhSlJSNiežGieU3{K8.q[V\Ϩ_*SEHIpt`BFa&E0# Դ&e@ȘJ4kPihݦ<b;gn3iDG~I]qO3CZB?udP#5D PieKlcH *2T6hu=GG,L_Xt߲(-j)S:!0(?{*ℯ7OEl1v\F6)L ] H"7U`\ H*^K{6ĆX ͪܰ{'v>#gd{+UtJBDԙǽQBLpS&s(lqPtkPDX#pJH䲴IY`o`oIw}d`\8i"pQPrI{6al*,R5"GjVԴlU&d5>+Q)I)A)*lzON6!; 2">-:ƀ&bc-3r̿X` i#q*DTTC }Ƽi[b-faݍU`Rac&ʴl5: kĘtLx7 U>- Ų6 RK)1s.Pߦ zLX#8*j v4kݠv%,KX @`r  k\9i9 ަXYX/OV |с~TR=큓EuN="AVZ ӽ]Y\,k<3QbKd67-WyO7 *6>̾P;( 9. .GaLIWd=&ݦ[^wA>A8 ]UHkHN3elĔ)_sSVMY;qF5277 nnpjp 69`EV]ܪ5r91r91r91r91r٤ ݇fް1gdzxԲ0 +:g#nÜ☰Ո X,oasDnڶb v؁U^W ֹjYֶ w?<7D p-s +qe&6vfkakhf-cdš myT]6ޙw%˲5{!:=&.$dW0^3pنd MmVjeOREn({ N~[<(i@;uz\{^ҪM7: ؍F9phJw!X؋Hbk"uUx)2elĔ6f VξޮN]Sr;xua$g0aCЈW(H-[`sTO*[ԽRӎ}uD)3%2|*Iیɞ<ҼC5]9>K꜇VY5yf%'?5m\n11[؎wCdOߑD+/nj{03g3̰g̝ 'יBoSEf>oP+5ibO\B{?njVfjf{cF #-NHkfL6,5m\fSdJl.lrS M _ՐYiR[ObivY1~WJͮj^kVqI-jldz6j:kUby+mt'ӆLP-1mX<%f{ӌ81#f|`M3 {iZWKnzmEO[PrC?E`=3l5 ֌?[3lpl5֌?[3l5#kFת· [W,;MvVFG}QEY"ժ?b/ |C*oq=b\F+8A2|)2%=F5׆MaSr+fxcp"(b##c_Ɲ  ؜E)2h8<lPlp6Wc6V>6VN>81lTa橁x8Y:C@aϦ!ʣލL .YS\R,python3-saml-1.16.0/docs/saml2/_static/css/fonts/lato-normal.woff2000066400000000000000000005446641451074743100246750ustar00rootroot00000000000000wOF2ɴ ENf`$f  `w6$< @ =o 9[wuA΅/H"tvؾ%I?mSV@%%)yP)խގ! מʇc4+;g䋸gKNPqWmuD "炐{bJ$SaZ}& C @ J.t%}rEW15V5Z\]@0]F}C)5*oJFZf.,ЄOxJx %< r/cʦ@]{0+0;8h:TZ^]:狎jP) BVrcšQ6FI5zX7>P#810dj8ƹX_=F0n+P&`b{C Cn#ƴIziܔmFǡ͋n,rHM(6EJxGh[fa"BsHM"iٔB*qáp9R4nǢڎhBt(6, jv4jnֲ0;R$@IR~l(n Z??*!mΒ`&%}V1;`~A_Y M6Zt3 HI"1HɡVzx8VTy;qC)<"Vۗ Sz 4h9#/o܆PVYVt 'LLiJfFyu{g~ (T~2ʱSxKMJ*)fJ=̔mT:F?4)p䐺SB'DTIi|`>6=8~H)o¬/ T3R;PLyZh3zӳX{<}x|wyb7Zh2@-g;p^pT+ !](_ExKNL4D .TLKyF,[^{%gt}xV]AWLioc %l7a,UUW܆,md/ZO.jXQLj-t[ V;Bv}YϮhEH7w6JNp N`)ngIp%y^}|)y) Cjrz2k4 A`kt5rظh5_->ԟ oUq TrW6"E;]D|&b̮>EhzHa+2{[8H<"ȓ Qh%uǨɠ57lxʎ;!3RpGHLZӽ8?[μ$(@hSgolm1?aav8'>oβ }Y 0kp4=POȧ33)@Oר4/_aARzF@z|YنUsO<ﮥ=2R -hvtfM/;D㰔8r\U>?!ƅJ9ZLOZ瞾iJ`^c $ x2-;=K O߈KomM^4pớ _xV,n+%nI݂ݥȧ"jeMkVڟ _Ӷ8Dm&5X%Ȯr2g롍$KVNĜ|B)>g^]̧ _w!g(M7Eतwц[)R)0 ) PBG(A1ż{P&%=JKS<3wLڻnMX^)oS/7?ol}I,vVw{l= NJ@׾ǜ5l@ΚmN?9x yG_ *\V,6Rخ֎Ke<3}=W\%(~Vp:@MrkZ@jr0R5|{E%w#z| #rѭ_]tPRZ*G. ] ^9X4X)}+sffL >hR6a5v+ѐc*c M}=9)sú-k-Ƣ"#i}zfyVM54T)4 1203PMӽcfgL o)b *hRz&m\3%w@!XZvw0'Kv71Zݥ_$~tVd>TP<agٍxN'!cAMtK-!Us#_4\0W2mKOx&i0X&쁨f`DW]q\sqGDE1tߕ?(܁L/6k:) 䎅 ϗ* Lj2]f 5{@A8 =8(J`E`A&㏆1hf#z p(((t:NEQEQEQEQEQnp`MQMӴBEQE `? R!л~`MǘWmQlBEtَ7KGal۷ ,,fGa҄e1J$Ɨa6lo{a{!b0u76tņʌ@ZQ@$[ o0Z(7po}B$[QU ͔#lٝYJ`kp : ZxȞ5zMuZ,'8O," @(rp32Jp(_ұm]H:=`sTJE^&0vAn3O.\U0_GS* l\ ܝ9|?}퓼Lr骺.$RC28;lB1([*[?e=yF^#JFҮ|ش>s&EK!޳ r b V@ɵL8[ tj l((((((Fh4FGGGGGGѣ!kGT\(c+0o HĕI$I/SB#  p?;:=?3ĊR*b*T&~AP-&+Q ]8ijqM,֜E MJ Pl6a`bc~%&EJS:(%ns\@_mw̮,0uhA Wk}wd~8t̸:}fв. %@9X^:g..4*wk T(b=8hkoÖrFia o -1vFƍpmgM:NbD cV/YHoF%f՜b;|O%kD2e(mά#L)OxU?G(9" OYQSU㝢صnT E/ ,R]t3CsɝOS*%@$jKj :Pa'a4/Hhw{?gh-6zR /2W\r2l;,䷵O94GLޝM+T+t(ryD1)rYmOlA84#CKN_CuVU{F0@@cYS{}^iC.,|DF[T𰅃TBRJ@Q?M:P} ;%*]_Ke %kڥ@TW|?FC^mi qډhm$ϋUp-9IyIO{0A!I$WC!E9ɴYSW[#JW7G` l?_3S;It퀮q󆎖=<<.i+?X h/ھo-$pIsq9|I=&F AP~E=CGGdSK%JpQkޜ7EMiGYҫlfhE=y!%ĦM_BuPN_( B񋟪귪jR fc%)76!٬kMn8X,f(j ɣ7~pm$,Pijv^$y- SHS& ;J&FD*f -hiȺ1bWW׮&rߢ($ۍ>&Q$=W)Rz"F,>r>F9}T4 !SP`/]e^M͝2 2HY7t-MJ_G3&bd"Mw&,R0eN[߲zyД,Bd ی(Ck7wnTBge,[I>"ful߮%bkg섫TiS&P2qNVVO֙eLqY$VeY}>^#MPž_l `-`.SuYC2gPDN}I~UcF:bٶY&$%𣩟.X_ifVZ}41 k'7o {[Xs QpȂJM}ݸk2a8X;P&[%K16KT$?S{iޞ  l Gފ'([pC zR$'."w]gjE<7Eܕ/7&7n) j=*\-o@l?ZG恄TTϛa\UVP,Ʀۗ*ZkjڒKVT2ÝD>̡{ "11+ʪW~S=c1 ѡ6wG Yb#Ez!RIZck1uϔ ݴDDx1aK+~@Dp AD_)uwco_OV| !"!̉^MIWҿaga+[!zDwNtsJ&c0+Bӽ2D3Gn?^_uKYBUakB!Si(t3W&yY|Ϣ^rQ5ַcTDӹoZ#"FkZkG) }ߙ{߳ڈF(eԘ R=*bmx F<4)UBa1f1ssi^ɿ9ZkEĈwSK$.+1CPd+(or7/]`a61={ؤw1伾*f{(@7tx~mE N+ XdWu,TToeJxTa hN6e.Yν{1BLQ!KPa+>!>vA]'gSPBQ1ƥrq# OEiIZ(fܱ٣` 8+uAJT[ІA"Hf2'{U3&qXRȦ*老zaټ;V92LѶg l\M~j7%ڮ+-%f񓏑A^or`];P{f>_?MfJ-*:t*[ҊL|bbqERsC燻ǟc_s~3kJsRGO;g?wƹci~l_k7}3Xy*xmc}Xڙ`4KYĂw –^7)E=Tll8/f/E>[vWAQU+BuB!fmЎ`_ >SpJ1b$H!=]لMoe?lo׳#ٙ5n)36%ÕCkڵա#DUsRics9Va .O04QUӍٞN2JU)n.{[_+ೈro:9+ 1E5$@$)TQf|2 dTv2νV }-& '&*lWZxWkzsM*sd ( B%HerRhuz%rBU #(Ͱ/U Ӳ!70 !2ÆxAI Fj;+(:ira $+Uk:{i+:AG 'o) /d\ Fgmcx~8:9Rf / /JjC&q!6q2 ` #( /Jjt #($E3, teE<^n- :@0b8#)a9^opJ,jlm]DX'ful%Dԡ4 QĒ(:#L1_ 9V<ᐴpނ%a Ja',uSwdYZP, Lt. R.Ŋ_VJqk/Ƿ3VN7stx&GAcTPN[ FV100dew5v0b3. |OA(h*5,YMD yXv<\S= .` ?2Tn-G)y%{`];"~Y-ԇP; o7Wei h4jJ!@bI4syz:Ӫԏm}A2_W|V{կD 5?8ڵv) A1p8]Ͱ/n-aU8B30IP$ "J, J q  MYFŪe \( b^#Ic WlvSsv6rh;& Je؈8CfԕrFΙXҭHjph7b=97O%ͺX\8rTX*A6iMzD)Z/$I|2)HֈYI (9]nYQ5קeB^@0b8#)a9^oKG$+z-" 3]z81U%#rQS 51ɪ0݇E$LBwNYnz`mAY Zٓ)[BH5bo-42vz=8fDʸg<"v(`bu&Z6I6ǭ)nQB{s7]eg&muxŋEEd> GFCG@`bi{7Zϊdm#2PJb `خjb詃*riS\" 'f( u^fP N ~Ѻ?|wl`#~n'S4ƌ֏-+HU4;V,X~4 VmC+W?yϐ˳pQƆ.qEIS%Bt(6ȨwkMWhr $?{'ڿej1LkdPjQG&2y7}V>doVeWaYF6iw!{b/KfyKF9ΛM7ɶ)N'cXiDvn9l|fSSt42&mGSȅ;`地u%Ij|ϋ9G5*tmEG&e图m gK˵ /Aᕝ&ѯC_;$]77hKQ)Q8n"o%!?iJJ^XCT(.&X@Lb=P\@6ФUG轠Znh R (>2I% I@PwJgҴ%rzM?L!YU>fJ'%vER) p+,tà2ydC`V"Pp -VT>bwar@DBL,/n흇qI %<0~hYO %9XE2 Ƒ:L:73–2^emldP'r'FK6V<#2*/T $ lpʄ^!mѮCGpb4[qWf/`X0DIʅ4̺EЋY0B@½\HBI Wq fbomdyRy+@G bbQ `zY6V[[v* @%]yD_2*VXE-alKo PiJqȗǕX) OeU(XEwTU4[6F QUӍ3QJ6DIVT-w} 7^TBZ`@ "L `py|ڵ)O[mvD(JU5Z`/3гnYQ5w?oo6-+tôl~b_!)JjfmaPf sAV AV;inl#&꼀΀r mo 9"G\H((K -+WፓRXU.AK[s3#29, e'r*g,RMY9NQQqҨ2#x?; ZIN(3α2+}|njˀA*maNȞ02y#+hV%ay"956O{P3JIE ٸTͦC7 +om4+ 53?9ҁ@YɮPഗ2|@ =Pb'/5!p(r+Twդ^X}ie+tpGm3 gS~W rxu$3MnSPq5ΗDF߲cRU+AEW ' Jr,iShyY]_˶-hD@) rq~ %\uzc`Qolbj9Yf}@Ñ %/'SWUNc,^s "ӤLܱ/R/Iͼ-9$E3, $+ev`9oݳk$vY6.hϯnO_Gg!Hfr> YQBn Y@ ev\s3ރOmΖn$ص:kL`2 '\*Fˑm^jWku73iX՝t#`Y0lrx/_2Ӳ6mQ)yUB}0O#?_EG0? zt}P$HerH2o-V#vGr 'Hf\(ɊKʸU'[~ FbNxb8AR4r JH(Ɋ ,0ێa:V;N{X9" y"cY yH?_~a_aMg+YQDC,q()T3*]^SvOmB/t{h':3|ZNNPC4Ix2oq]G0aM!:gmO |3,7R27< 0Md$̔>@B!B!D"IEI$H$I$I`[hO($I2yƊXDX g-up~5vD[}3׮,ԓt4rvZDoi~+P\ O$2ryE\B*a5;@7/̴ LnBa1qc PRNMC/a^EdBYV..<\QV|U$׹n<{W>8#[?YT%9;K^m|@)}#~]\8@'d Fg0YlEbI@0 )as $+NC/"L(Bf131ᔁC6pOQ" AGNͰ/5 Jja "L(zY=*]$rrA y Bj\Lxz:vz!S܀1c&*gşR:, jH(w 1,R{Vx}p5BRk $qaqɸD0PUUUU_곶V MH߿lL.Lgy|HXLlNXy VK Q9Rswn%DJ EnRx+s$OY;肢=XH!8DIN: =#rAe͓bSg'gW71ѱg#3s K~NPitpy|P$TO&W(UjVSav}axo Mgbm,Ɖ.(`raD($E3, $+jp%YQ50&qq=o1KjcIKT@&)?,@*ģ$^Ͱ芮0ՙ~e#w}:$,>nW{UQ']ۓ]\܇*d Fg0YlEbIvdrRhDw~xOp QZVQU XaBW\MiOr Vpȑ}2%he/r9 -yYY=SFKG]޽"#& zﶥ,ڒʔWKa\p0@hw7I+(p_•E]QӞ*nLݷv:mQ+uy(iTigFDIVTM7L`A ev\XXW;p}i"nK Z*5i MffhD0Q8Xנ8Ae6ERic1R[smai9FS"H(2=k -Wa5t8l`xIL5'Jz©\ گ6q^dzfB wl/?!^$I)gu&p )a9^%YQ50-}7 gq-ϜRRqz QWNͰ/DQU XaBw V)BTbP`@  $JTG.m+kux<.U<0CK}r.: r1CX3k, [-})Av QYv)%&T-b% ]@HB46ulI 6葸ת(\T|0#g obZM<<<<<<<)N "hxAdEtô RfYeYeYeYeYeY1eևz%ְ},GB>,q_^zz[^ ?]4-1$rV*RTf 45巶0s,f-5P~P(AB^o+/BVjP3Q~-ikwQ7 X(ǣp)ja]sěWs _3IuJ{yFx7=#MWEIVTM7LEaBwx5 zuAxerQ P);lʅKi5_i=#7RvrO9|/IxEZ/Y}S7w?Y9L(q~~WWɁ)%:8 ┒pNzҭ`c?w`QU XaBb|YU KJ;O_&_ U"),0fΠ+L0uɛQ9`O-{,N$S|JBrP o9p]M:z1NY3kG<9  4K(e?sG-&yI} _JrG_aNUy FbNj#($E3, $+jM p%YQ50&qq=1ħSj)}+ 𚂨qDfXIN쓃\C-Ʋ0! Gs[3.7+t}9JW 8h(e ưdEDH0P+4ЛɜE͏ㆧ#DXLL,nQP33=&HGE@%FHA'!MBj}g0Z͢ɡȧ.(eJe6TR6[ۇs ,\Hc`VEOYЧMQQ.B#t3Os2Zb00;_`D^)z222Rю2̑y_AEkH@/t BِH-M.0w{w{v.Pκ݅p4.HR ~(`{[>^ٞ{Lxn&})ܑ߸y ϊ׻1!ofӃmʣ}.VowѓYY7곢{`a߇7!ujG|R-릾_>0_c hyɑA  w6*&\mf"m?U|3]ljbjNW]>WjJN[5v@wQ|DʃpξJvZQR< 9O9!p]]_+#*Gw(1Xfɠs9+z"F مh~渃ܲz Y Ծq N~[xY,WYP4Yvb ~\mGOa,TKRFb7$3]_(b2ĈO=Y ` {Tg<'=  Ot7nx0s5. +y3(?%?`qz◎nڂ=a+øqyA^q+#FFG.N鐻w e *Kgw稫Gq]w9̎oi`9{0؍O96<4ect ^>@U!pjiٖ($4qxq(""kD BLIB"AJ J.F2WcwY8XC ]I%_ѹ1d -XkDž=!}!$aK8b$#B5Rʔoa7YhQ6`l%=YV'V ᔂ5}W5ÜwZfnO߸s hl.WΒ4f &J1ەvYe̳B?uˬ~z׹!T3x-m8s>348T B (Gckg=ܔ,= QHhe24 1B YNシ'T7Tȱݥ~FL| ΍qwtS -)l؉=PHGAuiDȾS¤2+BAI9s+Ai<*voh81RK:^MLF̙_ /ʴ5)˥szeT*kim=zs{}XNIq1U3O(Wk.܌'}Vsb؀ߠtXk NuZ2 0o0w-pһtpT&UfdxeN1LaYRח U= 2jɩSS5 .#OR2J }4'Es[6`yBғ^L =-zć!W=P 5˩F}Pn.a%BtQl),< \  - $r6H}УGjz ' ]:!d6H)( -('30E ۼ}X{+_*Cd[%Mr+XJvAIa ?xEV,XsRz4EP[u"Y$xE>Q G^Ƣ`Dդqn臓(\S'wĭn3IPRr<""WN*#:2R{ >[p[gCvZ_vv/-?? VAdx("#430NLfu.6Y3Gsc3Qǂ?jN8Źxd08R?̌Iol^740333<[>^5 h(*MFk`G9;)sź}>[>QAimdrKv=0)Y|}C4!uh%_XJSYY~P/ў5ȟvp`L l.M8e/]N )ttF; ɑ<*F3(>,;C[9$Їѐ_UfZز8rjZUBb"N @$2Phfd[[NgQ-`Bl:*E2㦮f3c 8\_ QbT&W(UjV72h7tI r ɊZp0 ]fX  eIV7?3Q5ZB(ɊDuBa)1! ¬u!Zwzq̾c=ߋK lfnҷxk߱p3FK@4mS5Q`h|0\1X&^P2/٤3t\jZI[ĂCaK$YQO?\6Pyݗj>N'蕳a @FĤdy7_< Pw?T&ƼGlM fekhx$+EpJ) x'"/ _ܝuY^^ުWH} =/\ih1LbT꾟6yyz} Ew!B~~I/;A8 ް~L3mL,nƌ֦Mm>j>, sNfƹq^B!B!B!еsEQޢ(^ zJJ)e12p|{R؉₆ꬦ-VSu9,trC)KKo-ߖycN8mS>G@O.n 8zSlwu+%6Gu뮷#Ec~V5 S!$+5;mw=. ,CotM0.Ne.dyP/e:ʩ**j78+F>Lh$?4+L]^Q!Qd Z4 fq 7<%q$JJEv\Rr6&UPuڰhQ*jw'ë߯\AVW vK~_8b7݃%ϥnU&¿ojh r\d=1a9+s(xjD?JCVB$+`b&d @S( dsI*HI9P"4><eAlϡ}(#PE=3:חshz=}N~Hd{YCe=ڜvxvSߡJTGB;ƣ\UrLɟKY:rS͗x\g`+6}9D`8Gz x,@FP 'Hn(U^OTA سD%#Q.Ɋ16M[`)^%YF M}Q8mBs}bx˴l‚ܨ~nJA P(Ɋϥ5g+ E3,yAdfw)KiNqB(NPsr JV3NͰ/Ux}aZ2GrI$I$I#F`4b4\ S߲m qn^Qif0rlAQi(^czGK-0k_;#lȷ-{/~ES#7jz O1`#s.{L>XE-~5jAxkbA0bwNͰ/nHB_aDIVTM7~PюB; .RK;gh'kW+j2 go`efʫ;-7 )SFJk٦Y8|*pivIZgw~T׊e XaBY̽\ W"MLY1gA`-mآpfG]q2 :c9lB'hNKRސ\vxX Ð_4}zWqaAT\"„O]'HK2BRk:hkr0[RyIVZp:0 ~0yxA n@-TZ2$+j7_m;VSrYmvD(CoF?GHfXDrˊy>0-۟>)wWZQDQ'& Q}W2IW*w &mo x#* +BRQڑՊ^uw yM R_oPL[B0##r7Ƿ"f})ʋWo@n=|M;vdawT;4y L0C)d't2ө)um]uDžT4`fp,;2vޢ`i,뤉BT,&wXYh{sOLxѺm?v`\i:9#9j0 T&m[[Cy+I\QPY iF —ۯ(OΖ+؊H!++G**ʩF5ƅx o6'jfSZ4-f}b PZZ€8Rl֌~kz1 FoM&8&tpmSYۉ6yu8\kqn'g7T׼1G$<( BMN'=yC$r2d+u֒8i%{|qr*/ʏC-GjH—oec`:@c&xXsҬ0k̴n'lTK%ܲ͢Od;@Zgr>|r༬B +$RXb%$+Rr`Ļ& 4[6F QUӍ+I^Ve+")3+Zd0쪟# Jj!e3p$a @ $WZ0#ȯ*Ī\X:F5RJl #ITA FL,lŘؔӫ0Z3dhgyј yb8/*,ȷ 39,1 %S}틟n(b QuD$+& „2n;Ezּ"F#숓 mN{=h 8bh<Ex $}JJOO bd|N !|ȶJqȩ Ȭq)+XXb%$+CS.gH^MMhXm($E3, $+%^_ߐڨ(`h5s52[5j1 JjQy٬3#R_i9$K+%%] ǘR8E)W)g9uU 5jUzy /Ay'|%*DDB0b-F& Td  A$Tt(8xAY*iSp{|g'bV V!$&Q\#„2~ q=^NWՄ{3nw?LekX`l OPD%R\T5Z`l f+@Yj, J]!p –^-m$dEunѐ`p6b,\<(9]nYQ uO ? TC)Zp^e4 ]{ 3a7m -k!eL[J-(2]"Sj9^l"d#fG0shdNͰ_zQU ࠧj,V"fX(ɊS: =P~P0hkQgvF=G 'HfXDrˊy>0-[/ #(w AR4r ꏆY=(%YQZ= :00,&ҿYg@ߒA3̨7615 ˬYc-2"`@0b8BLBXR)&0 'HfrQU &q!_zx`4-Vt03A1 )a9^%YQW?6:AdEtDPmn_vuL7k⭥؏qm^}#6l 8`d*܂P~Mxo+fAuNZqHR܇LxbX+6su'{a1 Sʺʽțl ;P 'HfXDIVTM7G8gيm`h٪MaW`(ɊFڝ_iN?2(XTwR7Y9 g(ۧ* $FY3*rqX&e|GI_"1J *B )º{V`ޚ^(馊uњvwAy-nL^{ ~s^G,ǯ+ʮ$61aՖdtQ4r Jja}Pˁ` tΰ/:IVTh2[mvS]3 ztiƑY8iAR4#np/p={)YQFk3n&rq?jNe;_Fb gňEO%Q΁2vA,?/&ߓQk(y tD鈈`i24mtC.q\Hv*#jpAe6_ "V Ў3-, %!*&.(yŹB80H*\L{` +Hy .6GNp3&?ع\t8HunܥJUuQ nڅ=8Sƕ6r]U_ BpWo) 1[:Zby|{+/{K1?<Iʏ&7L BfDbƮȅTJkbA0bwNͰ/n\c+a躮inhai2 0uXgCc*KGW>jۅGʴK~XqH|,WKuO8CcيBV^")Tq̳2vd(qy|"<. S̮fw-+ [ŵ4i#(QU *M&s~԰#0dEa~pQrܲjfeqE3, NUo0V\Ig6;`X"LxAd*yV7_} 睪AO LPkt6v&ٕ_&4[2I W/JjC&q!6qoswPi/JVHB0b8AR4r JN[VTirPFP 't$E3, "5vRTPU0DZQ 5A Qt< {rQSXYF %$+TYU@*x*@j`@1 )a$++.{D2.ַusoLfaqj{~ޕ|%A d$=`U_mb9 UE'1fn|`"L+<[Q8)p)BcIop2YOxx h2:/A&' @FP ')a9^%-+eC@B01r $YQlNua90Q[ՠ T=ݤ* Ųr@H%R\mLf+MhX!A1 )aBdQU0 1@`p3IEIVJk`pBGR4r I0fP%YQ  eYD*!((!bC3 3ǒDbV1 ﶄ&0ԑA6@.Ҕ] phxAdEtctO(\!LYDַs 7(uDDDDD{}n0j-)\P@a$J)6߹R暹Ƕm*^u7ܯ"|ptH6f.Sk^̜k D*W(rAIfXDrˊi $!#(Ͱ/:IVTh2[mvSsE6;`X"LxAdFz3>qC LPkt6vJ/o-PzA1 )aBrQU0 E!A1/mffffff63)o eqh$I?6ҟ{͞ PJ)RJ).%____q{P{ƿt 3ϫX뺎?_q]ǎwU[ktMuBչw{segfoO%~<P JH$D"H$D"H$0ђZ[A3DX'fݿ</;:Ր`N/v\"a *GzIHWҠP(J!"3uLu͇2az͈CnRY90qYfoL3뻉(((ݺw0\e1n_ .`A$I$I$IA`ff@@$^{֗b-E%"I$n@wI$Ezhۧ[~hN$/[  P6#mrKVugrMFBd-˅l8 ,?a'->r@ZJV܁ %wnZ Q+0\c288vK$IcJ4k ™9® =Ceya6 p41o00 (b㡆9ZcWy)mjb/_Y0i4`\,ehYfFQ5m`5Sj#D" )MiNJ^Gg`3Jp>L$)8Dv\99{Xr{00l/On8%$+\lK*ܫR5A9f92ʼ>=q fV[f+5HeTr !]W_9@aɟLEbTR@ e\Hus{'_PH~}>y2Y^]HNb\ő ReUURZkxRe7A R9rsAVZ [.2/K tVמNNy7"r<@v 9E"G*jR E ez/HIqIθ½ڮ& -'`ptQ4r JjaޯX+G-U,˲f|fdYey|qČB05.H4pJwQ'Ɋ7MfpjU;yyH˳38AN^)D*+9[])m@FP 'HfXе(Ɋn DPƅTX!A18篅Q# #(:H-%Q;Kl@|(;)%!K>Ji Jb;g($;CBdĭĉD\>DzO*XwOff 5!j"Uk, PsGYY1$1a#9pޕ):JßDX-"9E]@"-ѝ,8oiJ9ER;vlde~ҍ8]YC}S E1c1c1j5&\Hu`( !A*+*F,%^cTP5# Fg=$$H eUB #(  JN[VTM7Lˮ_5|隰#ANyA .%5V2n}"Z])m@ZhdA1 )ayY@FP '(t #($E3, teE<^n-g pᄎhxA1M$+V딭  eYuYTBD zAF Kk9P|kEV|M -S 񸱳+ ۅpRt,yGO=tzs 3Ec[dٮ&{K5~x[U4Hl,@Hj4gbfaecq 1 kU-o"b-3~ش&'Se+-eetkPue* R -kCg-"u^G)fbbXTAf׭HTy_|ИQU};MKO1|V u:\;a⒑/rq4]Iza6f0Z|7R. _;xY ȱs1z)F0B0b8AR4r0;qeE<^nϾZ"XA%f=7P;ߣ҂<8hZ޿aiRlT&3TRW5*9]owϾX(z6i¿X_]HI@h4 = *z񂨓dE&fw85W=l̝{%CAR4#FIAtôl懳귽k;0㹣cAFL(owUaU`r>j +HiwNB$H?4X!N ƸxF\%QA ճL[' 4N0WfFIiZV\5?O[3$eHL憌L=ɒ5wbRU2m۔%:O!ä)ꩋ+* lm = Z<}#|s]$9N Oa;o4m`*[!J4Պ)4⫽,!;V^ S2WZ^G h1f=ߌqhA#x3!e){d+ .0:5# ಈo07bh{-nr3Pt-()E7XF mo{ԅKh<7k  SΥ͞khg!k886<[[ru]8qe*nD he!N$h&qk0ш"VAKQjኵ\X{-:o^2X3xvˎ4iD.8?q3uO'?^=_,ʏ=:4ڔ}XֈȊ"bDINQ9u2y%U/K 0̨7615 ˬYc-]"Xګf(8|u)WPW醠 ;0ט88zo$ޭD)Mv!3,17p̍-* Ɏqx3uwbݱXww,OSMs< ӘfBj﵂t'9*qr}O!A1L &H,)5)+*F[l =( '($E3, $+jMp%YQ50&qq4_f}놈QM,w|oHGhBˀ]d,w(t fd* sݯ ;YUv~x[^֨ɟhkVIM_BX"!ʼMhXmph͵\%YQ5pz aBXl =@FP 'HfXDIVԚ(Ɋ ,0ێek;a\@3ht'KKɞM;'m/J@FP 'S4:x&4[6F1 )a,cD~[tҎ9/eͥKN)oGAR&@כ,?6ѯ7 8xFcʥ>&,$5>?)kPˑԏi oђY%H^fl%a8ax1$,jz381)(nxl'+qJ Onkl,KCy,s\.s8--˲,k$.D42_5aqq)R2rf4Ӗp:qJM>y(7x?z5{J֚X@f*8_ޔÔ;ff X9 ?dX?Îmȇy.lPnQ@zFGTfB,m=8̽lB<#'_~H%Tk]:xÑקE; !MF՗wܪʀ#`Ͷ^c\YuF OFә\ ; |]갗PQ븙|Ae!t딹zRRL*EÊ}ܜ>(Dx, y9rٜ9*6gDz%{Fo#~A?㘟 G.//=$G_ +˴?0ьx2ھg;sy4wQo,fՒ}| ]ٵ,۬݇uxx7^RÀm\SwP8թ8CtLN5񰖨Q d,vShe ,{$4GῊ2'0!>[(gvɄ: !r]%a5K&'E>RB9P5R1Ĵ&duDƩ.[;*WդWɣU+iQË!Q}:_iR\cLGdYr /|eKQ\0$F]mom![e.?8B\tq1&$?%ea"]t2$9 9R4>6fS_=hXv_CZRz& wpjcvTNǷyrUX.k-)|>G}W/iQ|J"U{je'(e >NM ]h&Eg^ɵY1vf:.s L *J(X\קc l;xO&ȧF3Ð˕ʏlt`k]IGݟ{n$蠑xh`(, 3DmkNz%%K 6$HUB"H! t ڛJc'-pk RJhJ>*rKc/ޏ#ߍB+)+9DE_p1_ oKN*pF=ba.faͶeکwY/ULYXt^,s2 T71<\gn=6ar.d.4S 2 v: I6^j0YGMYmqa8ꭷ*4sH Sig0Y|sŰÝYnB:hz!3,y1h@`25C/ e9ձUv&z (T E-3:es^ϟP5[{~dgG1{8(yY̹i!R}Y?SyZLԐ@醶Lm!R hG3|p7<5"DDLK}+W4m5N7֪+X9̤bKːys9=#bgTL}4 $3D"(01 8b52$)E*Eʤ2oa#*#sL>E}ơztOgtY^?ekB V}e&yidjɒYJ_rD` 0عZf2ϗ[5lRud\}K6ĕ#Zhm[Sms{h҉‹}c،p'ea0 XP05,c/Ш>&M (XXދ`0XPQ,#>Q\M~aˀLhe1?I4jDrjc":bFe8JJ{u~~QTCaԯ.e1 > ";H; @sY!F6bYvbUDf```xl(QOC P,׉SpЮ58PsMkwzC/m8!c EAn*t)]q]W_G11@Ͳf9: WY!;;8h0cCgd("δ*0"Hglp8"h/ILLLE{솯i,wq>.~ +202 Q?D*Kg]Dy4:\GR,9A h` КVJg_GĚ\LB-AvViaϭ//ӯM22}.iafs|Bk_U,̻SHI3iNqcu1cƌ %gW%acx6 //9tjRll$7ŹwNG:g+qG9Km*!Iȍg@jۜNR峖cloϫ#w(]nT4| z?CYTbHԀ~zNa p1Bޞ:EbnIȨxPy9R!6Cf(e1$j@^=WZQ\a]/x)=$t_C$ aN|pDńYhD3F`O'ݛGbm|O=UJbeR,&] ~5{a~\v0 UgCt>bУˠrй& Dxבv >[ܣW!Y79}IcO/蘒jB+tXPxN*wՒlVPzBYskAtɜjיxA ބIVO,S@* GE@GVC+KFl)GR~]ܱ<^cW]b6Dg&-FAC|<`7 r+Lp:SU6mϴm'~׾AטTRW%ϗ"+7f~[ž~_3Q' jBڑ K4l8H9buj`uF dW z7mPOߡB7%ߑp; KWBύ4 wjSzi.Ǿ& CTN8.fXDIVTM7q.}s,s $%:l9"07x hxAdŧU1 YQ5@ ' wU40,Wa ) \ х˺tq|PD%R\T5Z`>44[6.@q2 Z cʸJ_$Yrʓ;f_@ 7aҔzi uB5`pQrܲvc:bnLJނd"B*B-Gx9$I$ TUoRg; QrܲjO7LVw|ٗ3_r Ce'y԰jՈĒaʳˈ3426ސ>gͦک䩧LVWw]a:۩<-g \<+8{KMȊҥJ $_)]*5 q +S34YtTO+%}ln~YTO$U=n{w@r#}`'w5ȸ~s|s\!$^s+?mB§S`ǠBյMuKyS +(!8xA*4 '4q_BYChZ# D*RW (=⸔a`*껀gf !7ɌIb-?>v:u 63p~8(Lp{M#'MZCmڑt$ 塋i&!1It?!3xQ AUu4TC_ (" !A1L & thXmNͰ/n8]n>7{lǶڞD K u4pnQ_k۞ZثK[&vN]-n8]nDPƅTXųd%($oQO e 2[:L͹Ka;g>נii{ol{ت7Q{qoGSlIL^I}n Kr%cqǝVLN,,9C%0'ܚrJ3XBL)ر9,|߷GM R*"lF$YQvpr'x%O&e>,yG ~.NQQ QDH2Ի챵jObmgĕYe?KnM*G;hXm($5ð/nH"_XQU32|T uHǚ Qs^AQ)1fV,l#TGH_r<"Peʕ'_BEC:sBQ/fӄ W5Z)#`f A /< ݘ`phxa}:qeE<^n Qx҄@0! ˙JuKmvR#(B6Y/J1R`j}Y!%l(#######MI$D i0P(dάnL4F:dooR0#####㨔"70va|P0y݇Ð(g`dbfar3^-MG,aB/TQa3'| q 2fheUU """""rgtxs-p ) W_ TU" Cۜ 70[o!հ? g2< #(Ͱ/U Ӳr[w[6;`X"LxAdYq|6֯*G~12``V$r9${-W2ܻ@wdd@SAix(1$+ח,w.n"""""ύpUd\?2e6c]*%[]u68SBd:/f+$dTKF3!2X&l:k $#+gɍ&d8 >S7EdFXݩa"$Fr"?^ ;㴝G&*i?mK;;3rdhΜ2y_en[_p ̮͈ZP5lU>}b)HpA?^2!'Rm&Z qC i%kF7i'45芆 b7s2O6,z5Gdri13NUɄ5ɬϊ [w8(s(p(%G?p;>nB\+w u#p(~ 4qb)O3’X`YQq_~#'NGkx/$6l1O)~'έepv~FtoI5)/lI(!.'~EF:)4kօt35%hz{xt S g e](:|[{l?OY3цuۀ67Zfe;(i?g?%Rq/GD]1()TgDNݻ|3uvjt"g\j5{>TM6bm۱*`./ĒJ JN/Me{X=xpٱ8'#oC#($E3, $+j-(Ɋ ,0ێ:\upD~Dą_b^sq$Fx2B !8^R?ngQ$9aYC8! t J0:.I :<6&դ@`s Rmy6f֜-o>XxFbˑoJs8Iqm56brQw3>ƱJeļ pn4oB]hGU< <^H@.1 FUi\ 6upY>B?-o3g٘(wYS#ȴ\XjJN+0̢ J+jpGYcҮG~dj%ԅ<Qѭ/7f# fB]mkJPEEՍ/ٷH>U4IͬúWJ;}}˷.wP{\,iҜ%<(*>fX2V7`BbUN$RjA'Dl7w, vBSF dR>Ic n_ύ gTӸ`0e@2+p(v1#QV@&#P>yd1O=H$"NK!-`Ok9`1FTMZY.u %YQ5α5c?gm/k9VŘ:DZJޖJ yg$0-[.JUձ I $} 'PeG#8|##hV`R5fEӳ̭5m>TsmVZU:\U>씰3w `8=B}V:0tYj3_ RUiH՛m`;O> J!V0b8ARPO[_ %RR()m@j`xb}6&. Jjt= „2.$2vX"Kmx(gʂT1; NͰ/5zAdEtDPm7hhE;OSG]Z:Ľ%PYeOa[(;dZZ-Z"){`!it-(YR(wW_{d^rv߽k{$qJldM|$r=1s=xctG7ÕwVRl/+.T wrTbV!I.F:E:)y=s uʓjRNC)k5UzT}1R5ld*QS!jCI=J$|26@iR%`>A$~\ཥ +SPJsr/QݙXx@?ࣥXk̦ϱ&?Au{!)7ɟNېQgYҦ2B͉k+](ީ2zx!zjOB Ϭ;]~Hp|¤QOaOT]䉩 ӠuLj1&(GUcm./v2g񰧗qowony"pz㓑tn9l}qdg.tr L{@.PӍd1)((vKi3 "hxAdEtô:VNΖ$ ܢ@$+& „2n;er,Xk{u%{`r:.ݐ9Er4:j>s7[ܪ!hy:h7}Q=zyAxWжEo)@3KO32+bj"HF&fV6"iAFP 'S4:bs<@(Kli'DI (Ɋic7w@}O(}c1DAkgyO.cRTs_k݅Ou5pܗ (#sMT+v}̽w;Up? 1"v"+t9ÌzcS̱56ٲu BZFa <רAش9 $oO^E |~?~R\"eZ.sg+ ޕ-Uyu{?_ir[X 1c9ے׋q;oc+_w/ bt+6o=_͇ Ttꊍ'ow1ǿ3h6 gUrL-@CzwIv33Û>gjLdئ 6Z!yxR#A>n7@C7S#<>d ~_JHZ9ɮLQk,SNC2.`Py9~0p]6E_gS P|#f86WN]୶8p\o6`#=>LG}}z;,˓˓G-2LI߾mt#F|JoS=CNWDѤ4Z_Q cAfXAz) ft)t|6H"]ExYJ[K/M FA?[ߜ6gi}^I[,ĸ[J9! b[ eDȄyi?vVr3ԣYII|J %'qsa?<=3O'(y'U,2&KY9`98G5 ؈ %>CXS6٠!قzn"A aHwSa{[^~γ Z^ֱO"41U;&OBk܇̑_r:M w?c97~'P9o/LQfgVJ'YK#/oi 2ksUB 8tUSz/xȬt9īU!fd'i:E- Y5Xf d p(d6ƆLSD%""EBaB!BE=e؀q5M~N3gzd:grkRj_n jv/?UcvT33͔峀–ԱjFCrxl{27'NȖSI?mi{GCpxRь3g/l2 u"72(L1ŮW|u'`YʈGkݩ&2.Tdp 'U$'ʯy4G~m6HHOkxqriC}V2/r5q6as!*ö {l&`ۆd2Qy'H_?Dri!pl/{#ZQm=sSf/AQZ;0+S,2e7Rfm,͖6Qպ.@:n._ UL&fOFt^<5zwdj~1 y#ǃ\DKKwg|3}Ls#PwAJlTGV'_?D"˪2˭ 2)RO3AEQyN]x§q&xN/VA6 HNQ#?q3w3]kÐs C" >_KĻ^۲Uu<`S/7!\㾌8%XΙs\Ɲir$͖lS ⇙ٙ]!mx CN\0h3 ¿eʫl[e`3%󸔻2 wc/h iwOpΎG.,#S{2^#Gar&{_ÜI6oo.ޠ"l {#VnG}QAY;]<ﭻ6Yflӷ;%p!E43,OHw0kI3b;K%j-zcM/sT'";K_U#=͡z$>l 2uLE1E}˟]8b8!.0W8n2Pd!٠(Tn#<>yKI;(IT~ouڨ%Ef݁b8AR4r Jj1QP~w RȒ*Ofzrm2W* o.@g/b XaBÅPO;t>d:sλ0{$Du%o\o/OUob- ((I1gʍ0aGI$IS^PegK²,"R["-HI f5l$~SB{H7?{2 La+QESdwOж,i=!4>//xAwì x_d# Z7ԯԬcV=B &QGj/Ԫ+ܲ/ܙbHK09:ぶ՞ܾ`aө0}1"0~Fn&U7G2Y#_'9f2r=;L-;qkzu; nU=BXݡ3沘-OiRҶvy7wcJ:7+nU]~>=SսBq?^ g4%x9#dWn!ݚ88jh];h=EwVK-hk\rp &g* 4,z;R,2k>$92=ޛ>mRjW<,y+&`ʾ0Vqǚz<{; Hƃ "GFWM.3s k c{d^p$`Ś+ J3b‚"hXmXHQ,q()T3*r<\/|.B$YQ+dw齃cA#"lul 97!*z_؄/]7}' chEyD*Wy@j`@1 )a9^%YQ5X>y5)zsbVOjvՇCDIVTM7j֬%[%̂N6(-/ѫ,fbLbKs0Bx-X@ 9UE?iv Ga$2J3nVM߶qwH\Tv"?## #(Ͱ/mȊi! DW1wQ'Ɋ7Ϗ|=j „DIV5Z`LMN}PRFP 'HfXpǢ$+=4aBRic+c`p3OZ%YQkF: QrܲjO7L˖RUi A1БͰ/@7_%YQO6b3Gl(11Yј0k6 DJ1y4 }>YB1# ko2sՑ*j1 BP.TáA$R&p8/޸=v"TQ ]T<μu;Ri` ݂s}-B'Lj C.ۑ{w5@4.~V,/hxAdEtü ZFg-Iy&V` #(Ͱ/U Ӳ_H" 'Er $YQlN@:ꇑByl4"#&|S6|ϞG$IZ*I˟12\?; i=5CIpJ})`d0/nj--?#) [\)'Ր3q03ҁ̈́=H`# Jԛ?8Pg@[$lp$)疹egl~oz9 J7 AfI )$fۿ%Xԯ 8ifnkhܲ&? 6N, gL~֍,,eO#`Ds6b35704(4fxAm^/~tx!XU.^X\ga9qVd T\`{f}F(`hR-"x:zA+ L Պ<1`S(N:zO^x`Spf(gg,;X/m >UEMuZFpjD`)"l[0Ow3+&vďymZu nؽ\2.eѴ !E3qu`ݩ.BHNdSu7(ke21huїf[̜ģ'j7ۼkx87ߟ j5zg0[t`%J f|#V:Ⱥ%'9a/<#@G$*s=(UO{o6230U`W•܈jcWP{~4TJYn/^l*Oz-NiE\ )cCX$Ei ҏ!#ʆcwHxN1KSDw:TAz%R5i.2lF.%k E:\)F't1k C #/GZQh aQJ]_5r:S:A9O `J6txH4JS@ cKM8pK葭 ѣm r}nL!.O:ߨb,2UdQe>΂F[2eZF|B~LrV:Gj`QmpxMI3ZAm;tW#YP_]PWC9KE1as pC+2 'i1BdH+"ņHK@"h|H|9",Wu'N>^y:" HnC:dZW"ǵJ3inp״bw=v1׋ y|: w?le=>Eg4}RHrC4y(O%#cHYfH l $2SOӢ~ 4Olu9f?4`iug- w OR7I<ʍĝM_M۳>{sth ~?_^e־?> dnϙ e3̀[Y !z4, DHh]{lKLc J)ƾpH{eI:I1+t|ZD? }[:!ҧ}RurUR2it!8Ib1{CEn+0X؊Z_(cCXHSAG|obW7"m)ZXیyy,EJk V99e L3sP4u̍GVV ""gʖ=hT'Ò]wcaGwRyC]̸UxPPJ"jˮe-໢'W ~HaґSeTjsA3>Q,Z6Ji z+z/8.xU褋ߖF'5>) +#X,_$a~C]wrAGz/l|ޔ$N!ZVr(,"#jO1i'h%H<EM%4En|$l[B._{: )cOh$Gz9puMwZZw:Ҷ ;Kx+]T Mmqb9^T=_=!_?XMKuA ^k_]~z{,#fwnMl%XHJ(AҤT3)C f&hِye=h0` -kpROZ`?~3[v%i75){ )tCqdE3BMhcD'8G??ta[$$e+R`a⒝b?ܝQ8+ThR "#K^irSeEtݸgyw+mb33 |+zNx 6+n6tn3 :pejYZ^۱ VNNdafx[G#5wTu>i!ѼwiC!ws>٭?g|ljF!+#ڠ|ԚCW20D%џsϊci~D_ 6s i:iWWa0ft]d Jp$JS 8X7glBl7 3FAHD~MHdy{ rQ.8˽R'f%"ojc4Ж{nA "o6Zdžąa*#Vphk\ u!#V:hDf+5сXp'Q\Z/3Ͷ]p%` c`t /| # K moP2b{H E:-RLw(j%LpcSdD"8DW329Z帤+:8Hܐv{(lT0+}ݲ~FGԆnqUwmz(j Am\cp8WAWEE#!AlT,y# #PV`AJ_kۀ۷ )AAzF? 5)"DOAI E2pӸ·t`( 6KTT6 ,X jQph-p^CBl%5 /HCF0>ybb-&'!d>8D^P {E7KpLavp^_5c teKmiG_{tÎIu;h iWc֌'n­v:ugn*`@"Q^܊8,+'Hnmڕ,.u懱crɡؗQc=xz -uEl*WAMPࡰȲZ1nVS5BP8g̊/}u>sֱ őܛgWn( .(=íN?+޲翩RkK[δ{)|]kjVnLFl DDSD-Dp@?`U?-42o7%c҆B57!>ϕ$eTSySZ!۶Ԓ4 7x! fiAyVMR2?\TʉO.sd0~}4!sE. 1gw3v%oQO+^gp&W#L3@"(TiC ϱpx8t`4k1P ?27 >nx K[# j5+V*pzAҪvlz(& 6Z_?o*Lc0NdtCt&Ĥ=d(Y(iCJi\N-4 w4H!)}%^ @va߲fnYh`01!,674™NړH$6$m,bL€H$(Q#ͻޙgca# QT@`nڦV% _@B r'.#mHs [턹`;vbੌE>Q:!g;ZbҶft<1,S#Xȉ~ ' 蘆@jS i 6 Cj!a(8DJQ^(5{z*Qv\5rPodДJ`Q$[(}.IB$95 8fn۴KWV˯_?awǗ~/!!$iCs[-ges;pr@;J }MOON>e4alKI|wn #J>OTdM<TA7XkҖˋ⦳|c~^9Cg4þ_Kgs(H &l2)E@ZBPx%=P Y/t~j*Umq֛x'M&BcCȘמ c?܃WAЅ(ǰyj 3V'? (Z\s> }Ţt#WW욘#l!2 $)zP{X2CUP$yHTIhf%@Oa0*Et(*AB||[1>9#@`HdeRǔ!-#ҔЯm݅ڋZ=;^PpH㺞5%ydElBZ 6bԘq65g%{rGl$#37(XL\BRJZFVN^Ut1Wвd޺IM|4BgFX (iF"IG a DlA 2pP* xVbt i Ӏ*@`~`  HX0,23{wN>O_n9:P3v?RT3uF1O @Q&=#5;qvv/ |>ťrDRHj(@ ^ R-BgP" mDcN)"W@^[mmH\\\.)MpNұ`@Ux5LƐũGL<4*ӡهk}{NQ" Zwѵ]&0 ޕ4Kgߓ]:1' (UHVW"~Tt%X伶 +~ЏTn9sۅ8GKe7P}_zKeaqO@ky(JtOn?L?A{4YANXidMW*YiIvS{Tԫpž'j۞'ҫrܯ~wO0_FTDTLjl-˗$,D(p]\׌ vz`1Ma,N͞%I.JSVb@1!CkĻ{1z 4OՎ%Y}뾺nEKY-ejwY]mr34YUkkw*\hMrSϵ_m/T_UrEW`ֺK$7rNz0Nw]3 a_"h"Z_0&"1FbeM^?o7~Nk#>]3V5״w]X-x:l]QW>aM~TKہSX".JZcI K+kmljY6U4ų+3;ܽ.^NMH(CqYT5NͰ/34V2@2G36tO,jjރr_;Xe?ڍtZo(i~ﻸ|" 0Ex`p  (308d:j=i^6~yYwDolnEQ 1H@ 2҅TRk1 )a9^`k_PD.krd*'7 M `NK#py|FP Ix&/2Qq )iY9 0 #$ G Qh '0cvq2`a^H-8 $+%BQ5ݰ-I^FP Ix& DP GX> #Rc8AR4rH,jMSUP,ԖTڲz JjaZ,U sIT"+N/Ɋ 0-[H[i㸞/:߼Xgjnaemkg_$HerT J!6y.nHEåySҴ]QY^U$dh5kծSO Ӳ6b\=j,S&0aD+kd*lm`ѹ˚^mrU $򢬢8$i咮ظ(N,EY!)S.G2,G3Xl.?ڍtZo(i~ V/܌V\~0Nnq^8I|W<)k8;^!P QlftCr%;m`je˾{5y ؛>% ^gH:\ƀ 5x/i  (44;!֍fł'Rr,I͒ˑVb?)ɬyRy.)lF$V-\3ދXEll/(Y njzh Sc`w Z?2~ |k@UrDE} K,E ?fOÃԤ<4i0ډSTùέ¶~)X4/@}힅^ &6!)4䜣k +HȣXY:tf_%Z}IX PQ t8u/!FW† Z(Lf@A^j0^ߩBwYq&6Xq$ -;jj7fC]& sY.n?HhՎy.~X^b!I, NUS!؄3lJW`H?Hi4q4І@B[e'N:=.MuhG\nUMas8EͽA&:jjjb\uUf*}b{$9cRr=}\\(kSuvi|r1wrvIF봜#Tp6uYϙ7V|Ӆ!Vlwgpe/]ֱP$e:ktL]лa #mG5쾮ϲA R=~v/w G#p"Dp[rufx#4]"#B.4ujoΆgWjʌIÚ&:Hb\#,-M?u>ZA3]q"uRۥư >WZ1t?N!uc wօ.I.5'6—yLSkοNߖuؼ|Wa{vH4hiϪE0ȡ҉Cdd?Y6Ml;곬[s߶Ehk;pSVD;7w7Stտ3q xI7<_^I>3YH*BDDG8 ER^*N F^[mo~æNRlfoH9b@ՠ;Nُz\g ozWLSNL:AƁs1} ZOk9vCU?S=>탹:;2_lrØwtǷsknw u,ﾹSp:x57y &hMP Cd:v}~M?>չ%4/PWJxIT0|ioj~,:vޗ}F8lg<!/B3/Q9Qpo6n(_->V5gꢄo-|5T"8)3Z=h6*"(jp5x+0; Fp~н--{,GEsrј!ǃdBPR-!?%8L&iAjii؎Dz9r{鴛Z$2t\>^dEnǁr(s2S iLSwpn6G}#lde'Q/`\ 9L U.+^ u!U2a`ZylYVnV .yc$;N-1&&prg* u:HF|U.p1gL=OAp'|lJ=DJf/9Lg%G]_T^q |t"2w|6߮_N%{2\K^7Q,BTהJEmǕ``T/#1*]q3Q´̄j]@^r@R*[z.V5DVV`Cfɟ& s[teeaZ~Ak-̣ +㛖F])6]YG2I&#)OFdf.a̫΍I^KDuC^b\,q^N^F6GBՎz7MAΩ/)\#F NĦjw'NJE"'>@-yՒ盂y$6S e|v)_|sr>A+lqr9ڣ-D+zӶn|n 출GhvX R$5g"̾C2eKҀ54 4NXc"̄lRu4j١p(+ڳ.EeWuQC2H> mkaw1 Q)蛩!  4=PQPm22X[ϖ{'#M69Ї=;5RuEh !Yk-l) {'~Qc fDYXP#6^xU߆^,Hj zXV60?Ѫdl ;sVfQm}^j';u./v< :kMsI{ni}hy0ye) CΖVt9`mfK3_9%LG-ג֜C>-qsY :>YxYc8K+a'^w>CgHw#Zg`X!@/o`VNZ)~0F6 mOaP-~86a)~t3bQP%2tq x=zzƒa><'gzS%-10܉[ [ OgV~M=Ykuߒj cbg۟(Wt}fwuD= uywE`(όu/sZT6bZ A$.u8=p!~99ZiP,0FEaE!ʆDl6wZHd_ݒXL.FmHL zӠf̅fP~>VliBfL힛2[|{,4?Ֆ#^<_Sm"rMbua~7KgZW'#+$ ~06b Y!\!Lg?o,$O]"0%ZR%?K-ipʣtXc$)%_*~_¨۝ز/U 3$EcN=]ZVQ| 9ʰn!dFmr͗@38@xHȸp!*!0bM DL(N" !2QK#v`2\<&YXBdYT5oMwM}~f/5;Ln(z:Ė5tf>4߻mOc2rY*z*1'qܕЖ8YѓA]bE%&(I'8ދ'zqZ|;&g&?iXe&['Q|JUY {E\%f{R>ueu{W&='^T{r#}$鬞m4̳͚6[7DŽhA* Ui1j3p HYB<5̀ɀ|>K_ 7}wAkOGm}h}/}?4vT$Her #Rc8AR4rڧWbaiemckg „2.huzqaшƩUS+ F+<9cx_λ]Z~t༮:﷒,~Bz*Z `?P5eZ9 6 5[WG_+o^Kq<`~ZP GʆaFz2l̉L˿+rE`~Nԁ%PsvUL!Ho@/ &>'_C`GoοbjI!k`:wߚBwL'c{ z~dg?rvߏ P񈮙N ~ jȽ^0ZXۣw65Ë' %-4nH}lnnh((6VR,yOg)D_HKf s{xn?\Le?&c~oAyUN535z[IFm dnm.h гP.{|?ݱ/tXncFo/lAU*ih /{G- FΗĶ2~er m#5lE`#?5-lfMce=ҥ&>Ht):PF'G0RdRP,NWb1/ +LS`̼s-ԅGcJC$'S0?m- `tLz=[Wq`/#q)n*V|0du9oݦF6nw# 816O2Ic%WE)Ր.u{6ps+q/WG7-UTWس+&lagN.` I7QFJ*[V/pAQ +_IP[1+| fm-\;/O{%X#D!]V8iӦϘ9{B-VD5%K.Sm~)ͅQ\*WVEuj70tSԨY)^~05 wxG+gdf%%c`fDXdJG5u;g<>+/ *G\ i{Q# ?\ơ9ŏ|aS}ˊOzv~W!S*9+)|zKGifڥ{}%Ojd20Vo lb`GkkeAY造W[|iUZV`A((Q!;6z-5kUĒBV' uyi:Y,:a:B֍A! SV9RˬTBL8`aXpeʻ6U4 bevw{CőH9QJ #D# 1'lnԉ,E* W Z y*"\Q-9 *z0HK%G7\kB-4]0ʇfecwhJ|Ol^ca{,_yp:[)A"}!Vs)EtYv{Y\1 ?ƾ1#P$#=@)AHJʠA?Dl;1P, XzEF\C""I1,uh/cTx=Bgʒ- <|ύp;]}cWo hs2|jsV^ _5,Uu k֡R6izY> X't_juJ) ul񸣨%|#U>F!ʂʋF{y=l!1yh]%̆IKG  .E EXzzm5H>Dd60$m)p/{5\uiw#S`++veTfũ*:[EuΙm'<)OEs͓czR4'+z`i=Έ!"m&)6JUժSRRst2b*:m&mcmfjiR[t(lt9A+5Yu0B2T_,bHG'ʘ@aj#UC0`z s=dm#Eg)_5$c,Ī|ࡸxqf8Qő_|΃I`c$ɫTx@'4deo7lőaL"|j^55K53p2!\%]u׊@'(,*.)-#߽ $^'=h=卪1cPѲHHbߐ-v-_eߒSR2srQO3A5&82ܣz> h__ v p6[m&"K:tT&W(Xj)RoݤlQPC$2dzm,$?ou5jdVI :exDJ(N>1GϏ]%Jt(i(nD17?-o{ǻ|x%M9t%Pc4-+=JxUGFŵ[CgRdO217*wW4.mQVm.kwU׎?.Rnl-oe4$2Fg0YlE>dُi^mVg_T ' V!E ? ?o)K_2.o0X;ȟOvqM wwwߨ.8@A`jV9 u0+ !kxj~8y@#-,%;麴هwmquM+ܶ 9m~N%\Ku~s`2X_=\k.+p>8=)Y\"C0}EgGGRk\&L)84Må!xyCD2`^b'XeKVw|dl;wi\uiwJ8ueJؑ@ݍ*)42kEtFҭwUh'{t$  wץ.tRnwߕZt*T/GGRIF :Ř0F cq0X] a 4Xt,HO%ka]gܹL&.`v ϪXp [ 't\` kInHTV za%T'oH ekz^ɊJh *&g 9$^}6{9uI!GiU;6!\s|sza^x$zID^9 h@ȣ(`TQHlN'(+-% = )!yNw;?S&);T<02D4$`* u~ykLFir[ܜr C_ԛ(IҤː)KP?\6Ӯ9{Ҽ:h`;ym~Tѭ%O1'jxAI+$FF&-u5`43͵"Eق]Z(-'ޑ3^׏[N!eC?'_^~b( \FӶF%kөG!fc>F W#<7?@x@8@(7 yX3\6I5hW GJ0 tj^c&IZ>,*@ hm[иE׈J0 Lb2u;5^zqEf1XB(fr¼V`\,[bvE^Z^/]'bOi xYdouiKj"<C2_J &-FtV@#hw~fu&w8ۗĢuurɨ~[RDկBB_U[g ~}~{&]qj]_r]y]ʃ-G u l/ڽ𡠑9IYH3x]zCOkvY ߕ>CsR(^Igjq- pr?8gKg{,"u.F0 @xl!-P 8`^%B9ݑBt_fL+aKad.Avȵ􅆕)NQy1.%W ΂XM\>|ĮMeקZ:9䎅Vx\P(>L_Qu%()g` {*,#956 2`$a֧ݔsńiXK׼4_s;"uRϪr:7pDk: g:4#hhh8x$r "E#hǨ&1q bRzr kgIT_kW1\k:!e(҆ɶlj0LKlT49W1:00*_!% <|Y)Dң٣YrA0 B:LrS}`Mx=ʿr:y4mJ֛1ܹC|?%KblIq^`Jw_\߳=Bǘ?r(k,b m;:g Bhn:mFjbqv=gB [,PRwbV{塞닝d'/7/Jyn5p]/%dZ._R mjoqS+ ʔC|nqTA;FE>A#s%, L,lvsˇhN(XL\BRJZFVNo3D7Ϗ':A /3ݽ#7t-wuGwT4Ovlz'nge:N&> Oɝq$%5w;툰">Fwzg43۸-3URBO*ڔ3PBMIJS!O}=U9g9:6:JD$#  {*N` \ȲEBqpvm!2E~|e"W:ThЕRkrnu:t1U[d;qy\t\~S;_q|?/߃}r}1YE,')I̪֒gies,Her]]L.I:}YE ,w#뇚ㅌ3qWq}{?e_&Ϭ\q?7_W=}|}&y]A8xo) \_ qODSEѐPHOO+W񐅼7?+Fzx#JЇg1Xtiê":K->Ӫ>ۓ.SwRùo/ h?'Sy>agYkJr22LkHp943LR,26YEi\ @%.enN=t?Շީ7l}XG d+1Vǭzc3ll(4".SmjuD0 `CA# "!c1qv IH)(ihYXsWg rTIЭ*zUӅn `!O@)Jd w^ʂS B(H;Ls<\s ެ5iI?i?sV,mcSZoHB"Z[;SPRQ3021֣WI pܱtϭ 0"{ybKü5o}y~,O^_1^gff7`n6 Lb+O|I|\Wq7Vn-o;xٶ};ȽÖ@W$&A@DS(rjFpE1(=(Y)Qifm8ve/y&5ڥ!NʪOvrװF4Jڄ&յmųp_z! vO x"NiC>PhhMld-FjlmnbW2ZO8=9^8K0zWen|M2׎浗_w_q^lGWտ8!dF}TE% 5mfG5Yatf%}nQJJȷFЁUbѕ/RT B(FaT L M-| W*;Plyx|ؒGrUuM5@ &ZlH G)%b8*R ȩ8beΔ>l_jRF|%,p?q,{; d':2Yv>)O{ӟg:7T6ɐk.ժڴ 5Zj]{*T}c#_7t<A͜;yCg3ulb`/+oǮ`MyֿuKݭѝ}42ֳH{+\'2yw<dž#\6_H/oScut ~iD`\KRp%gFD;BpZu1I'ف, TN]J) W)yBe)(DsĪe}U3p,ȝJ`?5ķNSR`"Cy(`tgz!| _7&0e8-U%F\:S5%ApBFx3 쩬$!-vGʣa]a.V^L);V'=N#5%HXR "GQ k:H[}ikG gC^ z͎#ň+FkbVӱ4_hr(hK7n^@VXMZh"bfVz{)(ݹUmڋ`nw2O.4^ )Ͼ.'{K2NW1b `]j)EUXm֮8(}eAT;0uؾu<Ҧ Ho\ *s!oBԫxgxuAK䮪jWX{B G쳔vkfnXD?aqBHNQ"R`&n\Yb#6~[聛[t`1绫vD[2{VgD#[PU+jafG> SNh~ۙw#;\ aΫLIjz^![YipN\qD-ͅ-_4dquQ S ~+GT;T0Iր%ÔQ{&@/}ݭ.Jsŀ ƷL @LoI|ca)NL0@bd%X2-B3qMMcqkcGn$Lf7{l)Caاig hqd<0k+U p5h0Ψ@J`\JAZ⺵[67aYϒplbQ1ͽetVe[ܦқRU$pz+6|kac,e0$wuw3oXs;mK}nb,yM fLwuMźU!kSYT.69 c{_u#f[SFo{7ϙ6m5o'AXވ7҈oskzb i44hS7 D]o/դEߘn a"pc5ʶ& a\zn-G647Nenxk WeAFy k! 31rKL@^{{  hKu4c PHg.Y}-ָE!%j5Mhݾlzo?|^pgn>Q}0ɜo򘬚[*–{- ,~Zb bۂ#LF:!1^I0y7+lu,mo9JJ,pct0m;m ;[@2p+Gl?[^L!q8aGͣpҸ6.>g ܚ#kmW||QOP.rVGbH9 vxw8t02Lf,4#=ѯ*ncܠ.Z:Ql,*lC~ GLq.F+ngH"dk\sdFuqꠦǑm._2Z* H}!!Ĝ妴~/jʐ-Kь='ju\څHmT [Gi)N2aV$g4!d:AP:+6Ifm:kPؑxmJ 9nEZ kHr\ h{7\V~F FS U24f`iHGu<(!.!Q,^]Ϲ;K jbT`ԌEwġ'J?p~P!BmCxGi t&nPbL3X=Vec םIeLL|ya`{ZaI+ (̳x.KܨMϧ(!n1~Nj'VoklR"lNANWQmJpA.ݡ[?c<>2ȱ;raϯԞ'ۚsU ǶgSAWja/>M"v;=SZI u`i`yVdǥzuJi8I\4|2Io d8vV\"$%*܆t^/O)㸉$A4"s$/^ǎ]7  a+RvCThn8B=.uҡhk]\q(z>uE𨂲lܔ M۪@h\sox!+*NrOC8К:S(m9J|ǰa3&hAK4~8I d{>϶9UԠ+QhG,bNذ>EEJ[pMVs)L3i{ nQ+0OBY1@z`'c ޔ+˚ ĦZF :u\ ϊ,ja;НSŮZU( ܙŐNgk TsY=AߘZ}ZnUS95sTeB4gp[}4v<_$Ěll>rCdRWp #\&Ł;*}_@;J8\uXwwwƮQd;Sa3Xr6ՁN7ws *\28OοD!!wtDf'~Y;&Ǭ-m8^\:cOddGK9U|>xɿ-J6X!k/ m,1nXdU4IS⑰Z5w(=n]?؊WJs;[TY+7Sƚ1,=UPdV*}HDTaδhbKF l5wna3\ؚqV幾8^$vrPOPE->G@_51I P {3f)XBjf2m[G}j0?T~+J{?m+oR7MtϼK"cNxm2< '1<%lwg3R/tw .'͍xGNlvҨ>d7/ dKB nP1J2xۋHrD X&ܤS N]/BJd<Ӫud!O` p;(p.4+ݔ.s.Y/: 9g!8uT9bRLٙbċN&/G&`D\(B>1bZ3Ф[v෨z;J&ncC-zb,"9V t9=)LPgP*`LɃ^6_¦ndhx0 ol>Y&wJ]zXT!>"Vhy#GKE4~.f"n[Gl٩zKqϰacg*A5> @]`bU%b)9d)OA;uw>{a7NGMQ0Ai|m<>yNC &?MphOynF9uBy6Y6-W CE]|=72l`:Z+n$VL8sJ$#y9`v5:̺C7T4bj2S[##8eU6sE~ o~RN[ʸ5L0bgu~J+̯yb̻wKK| n imwlB"b40_5 7r es `3WN}2\_f'kv'dQw㥢 ,B?q|XpɋL]TF٦&3耒Kd4&mh#'BڹI3&)ӗ!ioކs*:&[7S?eɞ5N4*t蹻0[,c}q;B,N s`$^ eUXP$ZO ٹO@Y>uu@+{ʫ#ޒ̗SCHqU~kºYWWX c m*!J''ws Mzr#u?gz79L) ? ?I/%a0V!)5}ǫ&ç XoG^`oeL/b]{k0Hovl; ]==;1T]LƅPeY% 2LaDh+v* t9-FdXZ vb(p@Sv'wqÔm>^Ђ.j3%UZ ȊS8#Zv64f9xa+&:Ed[8>E"M$2̌ؼw<-]kya)o2%%Ϝvp$1vA42.m9kUܫ|x{qt&hW*0SO g`瘥;nlХWRpsuNn[S~vEI f m &Oyb:БwB&\iy'E{`Q;]TM"Qi\ $8Sq!ln |SAY(HOfAW}Q݉{} )Rt@sJ+K+2gSS*S*.8Ty uwsK36m-"MY.zm|GϨ9سIJiIe1asō$RkUZ <䩁 /|"mۙN&CيM@#prH) l=q0o CKa~MdY^x !xP˄cp wLԦA+cn{@^CUGOXγCw!XLykGwHy E uMۑz<D[&]$IgyI]('-+vpiHQtXg 4x{d*ɢ1vRɶAF0?͋DxٚuX12c0 ALFΙx :rWYE4C$$y 6߄9(a>;) >ADtmx06P}3xz~N69pI3KLh&Ԭ @~~[K*Bb"BG۸wa.usiDiTr6ò#lvT Oe8jя<89WDLϵPu}҉,EWb~=Ն,,7 ڕ]t"@K:*#EHρY{66.ZZpyGJD<e>,$}cKSԔ-,nUM_m,ƖlNZdF$gw}=ȩ4oP}7b7Ff3Z)YJa+?8(weFnDܝqv^BRlDep1E,FǠ8zQF !qƘ$0a"l莴cz(t&Ni!T2LvcKu j_yA0McXa-rFyQnCp~i;E3 \,9 P8\/+Fpj>q*pbՄ@UۼGybtPa | 8c8y"9Ӥ 3cT㎜<n?ofDw&qU}gL !lPLh<{ 'Տ_~6=BBl՘˜_.)N$ʚfp\cZVU‹k3 q(1t1>b 0 Q,p]BLZpf5]bm s,V.עhw~B<'7Β 's 4,5qTQ \pN cqyr.0Ma>Ka2|Q8[[ Ѵ#ϖNt>gi=nyꃎksx1#_g8[%5? MdR#MMIpdć('w`"1 8 B5+(i4hS)&wc>heI%K*ʡl6@V3S h+@=gBPaV%ً&=_u O"U@tXrkAW >l%cHqLxڸ >@cX) G\C1ܤ(}pFƺ:7QźiSK.i^RHXRus?t HCOš}|v֏bP&eVZ2Bo+cԐWXKuZoKsXfBށ=UrKGwkdQP Ef0B1uk@kk7N&DY=19ߑ"g2I>W=ԕF.ޱ'2,WyeE<%Ums5?R[K{*OEB`U>V LvmgM=tOG"6@Fl]IVu;BL~]_4OOWHDjONAGܺFRT Jl'q fX5:}ڎ 4HmūN^5R]A /1+ kf +Ʋ&܈ zDb[/YoxW{ͧ(S vS$A(Est,\=Fւ :_ 9B F7WU;@Ex6 +89 _w.vv2qf#fJ*jvϕ>,vh :vt]X{73k-f#9+HVk,#{";؁3m6﷏ L!eZ;.*A&Jjodk\\N6dl^TV]Aj:nO_JT ME=*YH @Meknnrn 9 ɇ0~hWNt=@o֒m_ Fwc.VH\„Gh/Iml?f&@󙃋6IjEܞ>9'ߔ㣛PSu^(WO{^܅ˬ(b_t*ΰhM7Ԧ[l*Z%m/ 7 Ec3^!0ģ-[2Vd{hhrյ`mq*W^} X)' My}Rq':)_Fc H'r8[#3h({%ӐA}'6P@h PHu5#3)mXa+6,P8B+YSXdh,|m vȈ.#/NR]ɔ"X2$FrXiƇ4hwe$r!S͔G3M)E1nP쯾)غ~#wÒFtAH5Ra2D֪̎ZpEFߐ9͂Ő*rEP-%n $7*Xi$%tz-}B`GMTfb&LM6%gE˕O~}>TQ'U{5=RvS[B ++A\,£X^Q)brе-߬}7-Ʈ̹khX&p]z@S"'6ympzҹnrn򹦋6]w9de-QcHMv1'w~%-́wχNgPZ]6=SAٙ+ZS"p-/ ƂUm/)}:IPyMuJ.t>!( r|ۉ!\|O'EE"{f1AQM`MvJA'N98$Fh1_CH;eoL}waQ聯m@ ~r?'y0 켗cW穹GTEQ뀜ZOֶPTM0O6%Tke]ˆ`nQWI*A3ld.etW;J_9.\AHoe8Ua5[P@3?M~7ڞǹ$q(Uز~A{f e[4SͶ0j).FU7ꢮ)8Vؒ2>*vݑ]8?brhig:inmF`<(&ƼͦLWB f7Pey)?Wm1FSB2P^oX64 CNث+%ܽelZR~$be X0-VHQ-4arzaم4;y#s`Md*[ӏ!GLzvj:2,̆ՙ3䘔l,1?u JR !"kuÜ2ـ!&D-$zT-E:yA|xS&O͐s戕UQʸDṽl_ͺ v "b=b;7S<ޛ*[i7jxg24h9PgɌ'IN ƂlNIqHo]@R&+AJZ f`SAmHkeGoȹݶҁn^  `L0^[ˢqjé^}vp S1vӯ~zM$xu| FAç XtBh4͐1x wZ$p=5#Igq3@ʖ6ƂP<8r g7!0PդW<vOaHf|教Yi Ikܥ?Htߦ4dS VƼoًƖ{%T ګO9ICK"{YiA H<ƽu p(t6 ͉lj5DmԽtP5ɔyږ"yfLWB~~xxq찎1 _kBXnoV74H/,x57 u2X@Ot\q_$r]Ki!w̥/8|F5TqZޭ0/ rNL Aӭir:PU:eQT&®u]"Kmj'6&H߿O/4R?+>7,hjݷ< JE61{j pOP~5!=hs7Mx;9V-Я|sM2܄E 29BIAws@KJZ :"p.N.gXs}`Bn#+;BMIi,ڝt<b3\Sy3h7}Ĥ0}Q-RV=RۂR}{@-1 d REŨ2;e؃"$~t Z]E4€otVaò!QPz|՟j,`]GB ﮭ;+^I^*VSWn3R\`+Q| k0k !Dkùkm*+MtDənrrPc+UDsPD-H9@WHx()g޵^ޜFpMqpg|S<6LļjqƲOQk_*l?KxRl}JnUkT.kL}2X5 ČAhlܸBA܏s(pw`XsiY.3l7\ۄ9uzxԝm'jwŬB4=5IZs\ptԝ5{I9PY.gF`|* P-$:\.7Z^dl9Q ^gr=Iϱnn})|0#*?*x!! M\c6r8THv d 33_z[%v]*r#npڂxW„9cWPY{3pb7ncМm*m鉝>Oc%2RURwx`Q6A{LOP&9&uxcoA71%.{Hʳ+[c4n[,2n/+2:DkL YdN;|㊑.h%QoNbzKѾ5;kI[hvt~&Ӈ9U3>X9ܼfwJ-qom0 az$:Gdj9{AmЦb9eiM#A[Hq`! IĠFQAfl to),jzRkvr[]y5D<;/X֢vPeu3 N]ݤrGocIDkxj6BJO+y1TmMـ-V({*X :*¡xe!"ׅ'GjÚa\&T4Hk3G<9̷&aLY"1Guס͹rz!){ht;;|{u8χv3B+3(k)꿗O\ ?`Gfӈi`rS/u<,wu9N*{튘[ZdxN:`H~,.Pmt/}Q].iI መGZSp{JuAqm &p>TI+4ĶTjaSP6?qR!_WH$Ӑaߴ[Ҷ)8!$o\vW`x+066ax~U1>ט RM7~8 `{ k[ ӥ]0Ao$$}%I-w*>` )M)B5G~ /GEXE\}UT\%HE$anD߶D9W(o"!_7U b e}?d>2I٩'I| ;ô{pkXA HdhZ˄&[ {3nK)(%6޸yB PZ_]c850(@*ﮰoHP.SK *h T@'kb  * f(Ivx%@)?tyCjF_꽟|vGT˯M>3wlڤaΞ+9gf2Z;̍X>:RW%lC4"WqtXԽj?u+ۅ^"<)ᑧRZd0 35nIj hń R"$pWPML  7hf[h"JzG '?)M 0];+=Ѿ.xB1<pvPU +EǾNtWS>{VC(5؁2X,H6_« eWH+Ew/¸+\P%Yl#^! uܢ$b* >^O@DLS1Wя]m]R~!Yyq[jE`Ů E\`˟f ([6bh0^6Б̢ɓTN$ 0JKQg.gwR+S?SZ>3>%][B:BnZ ڔLdoj'ieX/"K1áuaˋW|'z+(`p:YLcq ~QZjN{5600ɬ7bi_>ҝ-;&6L @B f b9Jk,IO"B 4ԋ`3(01K_-H=Ƞ>'b5@=5rh_NG^TP=y\oDM\^Pjhɇ3rʉРFZ4 ڎ-/9$`BJ1Nƌہ-)~iv%CCzK./bkI.ջ_f}]Ȋ"buƶA28C*LѥAI"ؤ(\2%$/\*ȎײFH2t5Z.IGy[pKtJGkW,gxŌ8Gn!׬kR_Oxt? j77Pl[oy/#Wwc.Lx]Ff~zld]~ߴ~&-QC9uKX;v~ ͮ/>[1n, ;fr\|b@aTb0+ל۞"_ðjV0{/짊:ej= nI`02,Xf*3}$=3P +a3z>S#5JOr̚ԧ ߤ8H*#|:h#˸ 5Y+-O?iyc Pf!r0sbN%Fmc͛[$~k<`QcZyФ+ XBcٛjj7a081}Յ} ]pMwٟw3~gBm׌|*QOJ|(UotW2kF|'-ըwex}2D84Laex?>suPt޾8ǭ:t 3WS&ܩ/2CI*RϭEk4D85g6Ae'[c0!\7ը nvZ2։(+^0v#5|4X{%W8TF\c16\U8'Rcy=}} eY1"bNQ4mU  &qPK4i̳xZuG<=" F*RbF| 'm>$kj;YE *f+D:@y,xix0K尺̭](17S6M -l";f`D'ʁܣ.R+xRNhps!/{y6N]m{V5I7/摅8pG凤Ey\jvgSeDxL&OdOdKYUxB~Ct >WATnxb:ͤ-t3V~iB̢3c% 7I%e6c^؍Sv;gE*ֶOirKc` S#A*l1vŰ:!$YfpoȈ#: 2yx^daEJzXo\ϔ=fjRDн \"vo1=8oCWOG5Du.oIz`Dg N29G&9-`] ;+KTُS8ͤ<#Nge4-;(;O)v^zf)|QC yU8ixCݼdq Ӹ1(mG|s/fQDŽ?`*_{˪Q_%<_tq#g)68Օb]^nig/҈(ZL*VPeG_Oc` U$-c1YkfC_ŀpWd (7);m-`3aܵ"Ӌb~䏿SS7 ([~jgLI`~ _BND ~CA4mRm9?/ՀCRO'"+$~;o ]a:"L ^l1ae9@!ܯ!Q?AKv9Tv|`7HgB 5{QUyr^Z 7NĢ 7]WQGxmhtQCH{X(X*hۅ=T )6-Tr=ʰYUL?@uѺ'"2|:M7$ S'T8Pw܉hPJ՗)op:bcH}}i t)ۇ?r (c]/sT:y. K=|ROFʝz_(ϋVsN f8=)f 7b *%htDg?X';FY%+V @HЅan7Sylǁ{][rBI 6+ ^ (`n2OcMW4o{{0$ - .;I"c 7aw=@O! }P䬋pZ,@k`!+ݧ_FnIf52D pwl[=$bmYl?w1Y1\K78`6]bEHV#!hhOqr= &u7OhNƗI"JGd N]cG=4XxF]kQ}t&cOHb5G` ;ϴ=[Y:`8)'s:i&*Ѝ!lxuqWiV|w^,PנmCMCDWEO>xP9ԣPU<}:Q\`X29/'//dK$DGJ棳Tm^˭~&Iy8(CG4VQ^BXvϯ'V}M=KH'ۼ $5y&Vk{rG ;E\ُg{Z7-BUosY`@k>ci@^98f"Aanrs )-vb8g:TM[ޫ^ң^,w)f$Hw\ADG5S ye$2Ҕȧy#ţa EyJ󳐡0OVȭ]+؍!` pKm{iH[ru0q]~؁1J6^"X4<|z7YF F3WܥhvÞ\IrOqOhN dDW+]T\^,n`L[ P8Ph-VHa 7BIp$zyQ^.mea<*M"S-&ҢШPn|.("F *oU1!N%{R"H!}"@ Zovޗ`*dLa3))2įK&fخ:k$#e4e-c!#Iku@,"p3BRBIi=螥PHJ-KlG`Mc]\A Kr ?v(M^?h%]Kr%#P:єA3jBLmw0Q]b1ہ|&Ki*ÞCI$D[ YBy3bc'BŚ>_W?zLjb5`X+ac7G/GP7ea~BD dp?U4R.(OM\(1Gȹ Zw&zX%4n$y1i^lӫf؛?לEq;AgW,8,r**57\'sx3+صNiƦ\n<\adž0s9R #xe/G< ef{]T2sqLOgn>/.lPsh7tyQ4~4*%b\PZoR?/^h@4le%&9ߛOmMnw@so/򋶍JXF`H,-I{}M6&e۵B ~FGO\N)(աiykI@5h[YGз=uOĀ/Dvv:} jgkz]fF?03|BQڰ֔s¿a xDZ}3ys\ ;_Fx:F.)o9.'vnUry;=5?P* s7ՐpCͼ[% }QF'rS5ϳn :W';!v8ՌUm86K%s j83HP'} 4Q$ 4@?q-) vܡmw_Wj>+Ln gF5۱OIژ^U~g)\73mH >w/WZ]V;Vi<tu4&貭'3Zs̻Bs ,Fv'ʀ&.UWK+_U1$tqTOLv3,ض2)G]ru!5 9 >?}VګZs/.xR *cǷ 8᫚QU8OvK;׾lX\ x`Uho/~ĺ1Xo}tA8~ ='*\jWP6FAh.欸miVTJ2ꜼeqB˛n5dذ4OD&c3"hBsȤ?,eX,IiA2soJx|H|1K?_y̒ |=%#NpJt^5S䒄[ v 3o.g=rgš7  R4T ')ر -8+L2vb4vvtw;wBN\oЀF~'.' Ť+E!cߐ-ajsjF{aK?߿9Rp.w_yXG,0&W5oyґn>~o8uJ*?ĻDm/Dbg2[|K- 3DELWM<'ia ,8ͺ fk=B{&_)Vcp-,/FiV{!,"g-Z4,Ge%aY/ [@ܷK:s|vg%a1) vAz'tS)3ϖGNXŴj"32zE~`h/nnvMagNYlɗXO9"i+yu _Uf@#ihҿ`.p"=4BVAX<0ITJCtt󶓹2W5vdqo%ſg瀂ZAmG_`7ܴ$d%;o8=1(MTs;j1Xj.J,Xlw1Jh\ˤn2EX"-uS euGqR4̓\ZVsD 'li_k [n⬎wT LP?gu7 c[նE.P9>ѻvnl;\xS/pkktJ >*(yݎ=ˆ-}(bGc{WY؄#[ [/$xEjkTpԶàQl կrIMxj;z<뫴/~ xQ;Ƭ+eE!<.,^"F;ՁŌ%I벒|Lx(1Ä@L0?8%ۭ)E#_V pRM0re`tR cdy/`cQH}qe`jjRi%Pic(0 fsݵNJ298)@@s4=F&K7պDDg&n6'*a)j[?5u1d"[tٷ:ɗVEQJC%1j.dWSd~E",)j) OTJT+rT 2,z丒^f>I*%+9CGPiK8P}V;r;̃gE귭wyNu;Wp}+XGªz g Mw EThFώ&7n[G:eA'/,hZ,J5eܵu#ZVz6f3-cRd-ōTpuf0k+ eql}O|A&|R$?~|wPuOIW9b(A/j;+ f)O1S 9Ȯ=މ]Gha]}agFPs~>s"_>j,ːGV4jٜou;'b:ep3] &ֵƝ z/\ʈu@'Z[0&]ϤdrSV of]f…^TwzOhp$da/{ZDzzOŚUuD;vkMTy_)BvubSI^6ԇ32ʧz|ŒX!:?y MY3ezNŠ}.}/L X9u;HB̓"JfcZynC nDV~hʎo}oDIhY(k;z>fS@Bdv: OgE7bCj(m cbhL!Zz]oiCNۓ$HqRQ'W^E&1͞w$)-n%odGf0J]c\xSC wtE 7XqF;-W_c$ʖZ:4}Y jNS\!v|o+ȤVS}Ϛd!TyILCVm?cgTmEnβJzǟ;rO(b,}vTH~Ȯi-mȡ0U;q~QNul;>_fAG+-䛢Nny3mҦ5_tkw1>_i3jPǎulی(K_l$/Lذ7{6 ^jxܜܼY\wKMT|߀v׮>݁7xqvk{`_s+4AڬMgmЅc&O_ m H.(ۙY'UL]Xue3ydbo3f\g=!{M1* HMH] U铣"1}9R@嗡*:€g,4 )QSJ&:g\\U_S|`Vx|zB;eоcV ǒH"LIi2i Zԡ!Dn.]Ev>D^Iq;FYNR~?fdZr@kƨXQde[gvhp4Euqvbs Bm&7.ׁ, qiO}hxW;j$~'ķ7wVj;/ǃ2v9mrEF-trqa\2AL嚰;:[%Ȍ=6/Y[]263p\'B|?vV(;_)"( *f(Lǝp9P_%N'W܁:U[5Wa)0#z~PDuQ)ʅJ|nj^SȾHDžP{AA@B ,uNqwYZU6$}?xc/ Gݢ́Lal;"N uIy\D'؝ts2jeEa䰕 @kA+pPvDǥY ),8RrD;3ſ`2;UL-g PX~m]_IaÛ?i׎*O@U%[>'&TGor~%|ֿWvyzr)`_M< aS]0<H <=}UUٹ!U+%zt#^1׆9 ;/YQ΄BQ<6wMMΧa@S!_ ^@k+F4C+'X5kWk]qutp4!}W Lvo铃~ ۶;yovͻjCNz5A4҈^7!zY'Kg) \SZ_aᰩbm@CRaA$hE|S:48Y,j CNB 8# CiDŲ.%.rQW$패fL2'S #n]gv4󫋀UX;a I!.?g] (Ւt|yBgr9)u,iZnեy,z"t軧-5xU {'pY۴ ;HPauIkX#pkN \#!o@pQR%!1]k VZ#(&m^oA 7 P`,^ȷWS'E*:i⬼{Rv%[.Uy^[bZZ OukNELnDGye^[a}Ng$4AQ(wc aBM ː=ZQ2WEx6NQ_fRG3O8^knkv>,Op!/46d˵Q-u7_X>"XݡBOB9mFrޡ77Q-]ܴ&>\x'˅(q9Ѯ Ȓr?V,C9v;/Q ')MObTGBdO#6m}q=wj4]#ſYK.O#枻bϋ~rO2<qҕxI Ԡɢ؞Q~pBNo Lj̈ oʡ()th[:P.Y0ҷ_is pqZ[iBF xݼLTi|lB_DX.x';oCy4 zY\ÄϭY!<"UYI$up{Yy켞;D>]S$m C碂aփ*;7 }7ѐxb5ēKix8N; m:5?ʲͷ3SiEToioVK9uLvExtZ+ΔY)ud?ܧL)dKpP?MH'|FZX^Z+:ldl'2aU]TְXH- s\xSiC-klȣȊBam?&rt/5MIބpK !Aə})5"SB`H:j/7LϳMP|m`yZ@#-I]y ͦ~ZU7)\Ғzsx|HfGLgl\ױLedvufY}x 'RSzu7Te@U_ǃ)@ ~┠$p.uD_GvпvEPcG~rq/o=3{ϗhWKb+ Ԭ&ǘ6CN(5 8 R9lHW]=Kս*cduevؼ X_3cd!3f(,̽Bٮj+#V#ݳĤIώᙥ9 {zgO˧Wc546E6Tz>\4[Ȣ2Y\'%M6 ͬH'CD3w[늩!j'4HO3@>DNN݌}s&~YgEM Ɏ:>,u P\=vQp1(Lw+"c uR;.eHSaY5K) #:2NY+hAblJưi?0:Z^:ZB&{ J'idLo#.NM*ۚqUx .ܽh` Qc]4p'L?|ƛXe"Ѝ{,;Onj<,kNrбefiЅ$ʏ^-Pu!QcmΫ :!v2_St?Z5-7t"Y_2b&4|I_7忟 #Rg>xT2ȲvN1eGXԐɯy'& _v>šf152#?bUd{>;|I=W0Ahy}"@xݲAm<,W߈Fn 3EF7lMmZjV#yU z?~8 dDGm%+x΍HV~F+Ix`ovoH~Vyiv/L\aW7"A/[Sp?Hf\0_hT4RR̍8P]t]R.H\騘Jۺ;O$ńyQMӷ5kMN/OxdoN*fw uFv)MAA5D{Gn%iMžQEҳg=( ]fN&e^&Bw ϸ&N^>y,I2i!-bՋR !j,cX`)}ִ3n)c*ZIt엚X{f10/~~hRqla$0Y7@r^$R-)-)E|Ud5!I50<&,7a,k+Nlͬ o0k tA\ sјou=0s)F _`kd_kki2 "̦B$0y5iW,Te ƟA/^ⳗ˻AWH&,2dzOI鏎 sشe\sw4˗e;hF/͝OWy\O߷Z֌|횷#gOё/{^؎ȎXRlu #x: $|)O;+}ٸf6ucy FlPh@12 (ORȣ]jHޒuFrϋWoK&fF4WJ) tqUw Z- T:|(kמ&Y!2:ĶmbB[+6؄BkVPizzEv)o$`-\YY: u-x/ձᙖ桙f8c\bwR]jCa O2 P]⿦f@ s–׻bLl?OK)猰% ;``^Fp}}6bujJVݲ=A@gE-{]zG, гu!2'%E2d8Jzи-dU\z:GQpCc\^6tyIC-%$ÓM Cv=s}vauAâ >0ID5}cfVAA0"R6ފ޸#5I\=L{CS.<|whQԝ"&2*y GL(L $˕PGFqʿ3S||U%W+(~[3<\ȟz`)6|BoEBt釉~PFܳ+G8%Ggzt6/p^f፸.ߌ}5b[_0# ,[bX?nR*"Uӭ@VđZށpzsOH| ) +HqJfɶ3 +d 'E0DQVvc_,+OĔ8>n!$=Zί^X6"[kɛ%%ϼ?ƭ;{d y FFT܉m rM4BTeŌ.c8gZ`,4,вԆ=RY71*ۙ2) CI،Y #}w\K zKr41ᙴ(k#owR"prx4kGEҴHekqKBfK*VRJ;3a>@^7 TٴhY (%K{aGHIR૥$WA!g U*Z^ c1_}-q4@ UN{@a=[J(dyҹZqQ'Wqߐ{!U9ee~QPi_{3EQJ %Aa82xj ՇSrz!i |`OG<^e"TGع!2;h%vDۃݷu?<_? EGTQ|Y@07^ڇ@J>(ؕuA^ }Jsg-yAӆ:S+XOφ]NX~1YTa#ƑVrKsk#F$as9Fê^,WiE]QO&FKаJ v4DH HNAvZ:̜lDv71 }gM YF}g>?_bq]_@s}&MƳJ8yV>=XABɲ ~dqj4([s!d8c Zw7,U#́gI{.}_S f==xwߛ5P/vﯭk{`GP*KFyAiDct熲jf27}/tYTnsP+&Ɏkz݂sKG5LV] I70}3R؇E28ÇǾfö^636%<%D:;ftXK)UiUOlMPI1d ť`Yޓi8x¨bbP < N{5|^i@W}r](ɛD{NGZq5K@aò_}xHn%> {9R'$O/7S֊M4x^'BW+*V(ŒA-k!/gm."vʐ! Ez"C9c[^P9J u! 8WqİnHquPA2QAĵ>nKfN|/B ytPZ~ܐCBw{X2ph>|(~UEJv.+ݻrl bZD&ԃqTAkwfWTHT1Iiθ,Wl`4jv'Yu4!G31ਂoC[ QQ?up1GP'=VdIa;.6)q\%]tCNOU*R4ӁrՐF'DpL[;1< s)At,zl@n7&?Vw,z3OY zImu"Z=Խz/?%դE/r414bRY  *As2!d3ssmwwR<ml2r;_c.y70}W}k))Om<|=Os7l^ۘ7#yN_ m#} 'fF k8+їGZ˅G1N'%N2Ol˼:0zӸ ? ( 3sO}yHUS!g02I{?[[a-vGq鼍sޕwxX&z")$ {|=۵#Ozi\, Ӫ(q-/?^w폘1?ayW\Kh] e/q Lzp*ffY?wV>l2G)UԂA-Y;~R9qfm,IWMLnEh(}B9@?SK8g݁k BA}!)8m1ch-XУA;<~g Ke:ɂV4' '9=LakHhg+]csfȐr1z%JB^ bE!}h`9LRlI )@oxCa EPX<98C \c w}=BGv:\@9AuQ؟m 81ŗbƧj ~k_J>zJ2ͽ4Єtl@kO}*&@(''dfك(*@ۗ<^K?ͨڐeW=\RPP( |ɾT[9PUYi 5lzIk/bTm2gI|EQ`$8)ʫks Q,Z3UC=C2hV0CY󘕙 f4f}+y ߏSN~4foLvZ{ MQiVg@Ob&!5j~ L>BaJG1c+;3Nmk$_>vűq0Mf%hN䵷v]]i|#(C:&F>qXΩ]D[zk%TlJ*_lVyʶR2=+LDK`w6;9C-vbE/&Zd(l̰m~Ϩ)I N*V15A'%$C~?ׇi١֥)O4g >tA]t(-) |:Qd9M \BD.6 "SOI&׸7T<#n͔)hw(>Bp}\Bo{ j6E7P}Җ$%r[;N`nuJJ_9lA۬%UGW.fY6Ly)RV.Xot7BTV06Dk{uΖ1w7XbDCҞZ96]>^eSp/ n'v'oRΩ.r=IW!ha'ŧZ;0[la-ZkΠRq6gXLY2og55۸.o.#'+O*TdQ_eL2{Hb&IݼVb'K&ItԳ~78zG "Y^Ҥ,I@ vb6o{ N Dr#a<1Y>ϙ hw!RAF$H" 5!;yZFGd=MSBaFHƞ)f.,^$d(G\Y~kn:fG܄,+Sv |{W~}* "?W[*M%YjtUf\6hQ"-LښW9.S*K ubf˷: q5I۝ j*0PVNS-P1""2ȪYʅɶv~F j_%N˰I/5&I_۟|4 ݜ* m-&\Hq5RM;]gxBv`TYá\w5Z`n%z8TI= k;jqm Cg$]6wqݥ28wX} @oNbd_I4jFŎ(&ѯޚ\*F⨦ άg||==̨3gXޓvfbwɢ' b=Hb4_ oV|tnT  Dmpqc#A_ガcֿ1NFf32YڝoJ*/:89?s-ɝ<'!nM[ɉ?/_\>]cv+]yY+,15O4tv0]w6?Oؓ ??F H3`G5Wוu)]5 X 4$ekJc|`Oeu +s4#5],N'10K(.)5@-0}`k@+&zJˍ"0Dy~KKLq$"Au rr#6Xt&MJJD:*#sOR'O~qSF V AJWeNcL\OT¸ӻV;&UqK*UM/zh99' K@HM-4fSaG@>aF5?Uڮ8g`cm)%-<*}a!n*#2xuq ri!MKi mAGJܕex捠4PAK͠& *⿺$r22ns[͚Y-pƳRjv+(,aؘFBlaڒė}jfڗڕֿauFwmO:oA1x!yEۦM-BB­v,fK$֯2lǚ A\olZX 645Vb6"d1愓I #qK=[,ERlrHqiwo\/v{r rFrᇃ**}OA'x|$ݘW "Sftic ,hL{'ekEo ~4A]L;PiUP&+8!bXMƿݕ_;J~Tu,H#<ʫDhfܡ~@:cCrgOS#=W?v\S %,Rm5Ak'd  Sy,ɗWa]$FpYT(lJ2(,ߋ#>IlmYLOhց+Kˋ[m<Ζf,f}F(Ă[m$ĬA*5|H8iOg}SMOń?@!%͚S`bE^7*=d95/gmޝKVSH"}eJ{ʊQCA;9?U`v!Mݫ\S~О8kUc܋m{JLއe<*(alX}7m Q~ `mȪm]@G0YoB}c!񾟒qerEU~Ѵ4TqʀX.{ @yϭmZ89bͳ} oݷ[,vr{c+J_`V'՜ڄ9AUb;{dفLj% :t|vz-POaQLa`NuTEXpR=&LOM (0TMY e::ɉJ붶I.H6ӗ[z]r1YmRQ)]@k̎>VO\DUL岶L:hR$|l>g=Kj%I&54@!sZ4W-(Ugps>s.N|̏z\Ў=)Fyo8gF!._0~(PgroyxpWi|c{/DO!EdYc;,rŜZ,g:iT|rKl#4@/㲦jWru̺ӫv@#+3MJ<<{8>h{m.g#z#w@'cjhC%)#VK;Q.С1jpo:jʲ4VTGSc(ҁF*b`&9vLqNխ$x;T Nbod1mp2f> 5@4H Mf ;v6 _N1t}WcY 73P&u%"n[Ӂjvjۼt4l*oEsZ-p3 ߋ[KSo6a0ja܋DQS̨l+㖁YAQ+sSWCΤxzĞ9, 3`0\8%|| pOQ(&HAmgp˲D0XPkO-Ь^dD_lIBBsTMt$qX۱1TcR6`JkCT->EUov̖hgb$.y J Ux|,eTּ2Ɂ螀6I$JQyl{6\Eiw 9th6+)1G8{чlQǟzcc;S 2b" /*PyZI\Dm\=pS5ݹp[0zR ,RxqSfg7]+l*5=P=b wQN#ʗZ0rZJe2Ũ2ʡB.|R񳞷AbceN08^a0 *Wҵ;i#Kz&c2Dx_S} &C,w'XbiԽ}&ĠoWW.Ͽjhz/Sv g`<x$0*GX4 8&[ZT3V+[B]LM,kޯ:)".IRgf#pDUJ@|Y0OE:Zu[2qz݀Mڵx `IU˿70~ v*%qfunq< w!C)mɤ|ϟN<-߀dTOvɴ9Ï9ukբ#8ٳ7Ɵ 0AFikS$ J1ǕIC 9iJmz)XS.%"#,no"$F,nج9A3dS{![?[l*ǹVFK'B [?(os"%&xVrIV~qK_>m'o",=(x ,d(Qr?aWɥLR()K͗ejQ0@I6JG= LhOP,9)V Kq>R}P':;7L&H@j0GI5 [әÁ@NVM7yc{}JC;-|8k"mX9Jn|) +ϫAGu`62`7/ ^$m75xZ VC dYd>5VBj ﭶNmKhHm◥% ?*(9D5+OmPN&l9}'ߓa_`YvVfٓ|6|dL@eg,IZa 3(!Χ$P};Ckx.ը+'>`YT`2~xilTpKG[I] 4+tC} d0 Ft2YNvOVM %J!BnM9͖E^Eتnȏ蠢*ʞp&Xz'fpMm>6ݾDg#c3xq~KhʨSlJƀ4?FẎ*CJ^Ǐ72No_yܾMrA1ޤM=^KaIHZ}{N.> $'ItG^i&7Kp[lBq5wۡ5|NR3/o@v;bny}u߻@%-͚X` {|={?QNrqd_cp) J [S.Qv>'4Ч lӛ;bhYjpJ<@,gNƬ9w/Ec[?rm)Z[;ge6ndU)>֞ V֛׮V Pş+mʁ~e[gB/++mhγ- _ p."7D]n,5IFN< [|l~Ip:YagSuT@m\VPaC7@Ҙw&"hF _{y2Yr1iH;fjӳ7Q`+#_3?A@K {c prkdJO);e32%x'WK]*YL@Ҁ,}rW'Wcϗ1sZZ'8]E}V:K"fZ pV/q-:1fZWFs_M:Iz9}ZJ򜘛!:#zݥX`F%c;/4`qL\%f+ O:WФ 5`lWwsb6;Q2kk۸=v"L3]նT;^: 4iP٢zWt"Qc "E Xf,9l/E _Spef^9Ȳ>d)p6a +/sMI҄a2 +&r -$૕{@ &+h{ro,=r@8fmHKr&t:Jj<'lC_Qv_cEh6mBW%Hq o?>#ە~g8~d5^YR-~GkVͪ![տNF-%q&t RyE=ǺPa .k"ΒLlz&6C–yhu˯"lRH tѿXv^5L <56-+. 9\)L)!njY(z'D}57_+۵ðЗq #mXG~'g扞[VW%~yD]=6 #V_$54*Nk ) vɚltU"(I{o!~|VYzkXFP9s/Q/W;yae4/tJB'Hf 28 PN;o4zղYdQ,Cf2bc̳1PUEQ[#}s@$"/}GYa E#[l3NM8]3u% #r#t.BmW? L:(\CUL{H)`/oo},/YZ2I{`8x)M  L+\ي=b7bR*_7y{CZ`7gO{_:ū\5)h!TzUƄ` EG W*jiAr[}q_3.D|ϐ'V6??-ߜjU*|՝"Cvd.mݭ74h<*AO@AOY"&10g;^5BT0PHCa kDe̝o-> |*ԚS"&@Za ,ă8p& pJ:-xym|qsb^T9bUl%Ns/ rM_dgp5SdɄ89vPP$>qm1ΦZxSC#:vR#qn[Igk#7Y-iQjsp9Nӆ'}KO]{xSq ̐& a֟/] +F ʕ#rX*=l4VM ʦ>B۷$*eXCc.(e_8HS~CxA*(Ze^m-/ʼnpuؾ_"4g@\V8ux9Jtqs([y¶|#vGlchh/䚦a|N2"7cū dd'Ŷ5$g')]ψȔ: 9$(vd\=PD_zКx!g~,nX͍ґ'fbTFǒG7rkȏ̟rDy:}82TemVLώu|ݢɲ&lD)<{mjR*M{Ȱ 2B[nӂ*p0vq īc(W1ZYC'ELﲦ?jUZd_1u9CbsiS(RKDh A4F)&i6pF)OaShVx'<%v|70`P]^ $Iw8'ZԥIbSehx-œ2 tuXas4,T~i,"J'e_O #OG3E Ruix%r޵uGR*LI M{7"ѻ=JF`zKKpjPU- KNE | Goo(+9bvY#V2Tx='jX鑑pMH%c$9ǀM([#v4)Н씭\ +WS[;ٖ$_! dP1%)߬^'U𶌆d]vSx}~fPߩlVPqiZ:,Y_3C}P 3wHf |=.͐=ofi+%sO/" :O{Ƀiۑ-a(ikZo3HS>C,*; j3LWK2pʢP_ E7?*!])1g;G h9v%1 -oA!XFݚt~׮?UL~" D>7d ,ss0mZ}"RL]skbq4BeY J`y<ˡK1y*@ƃtz YRm*F<ؒ9D=ʀ*R^h.B€0F  0m;Mo S{\59<t )!D*nkuQ5Cn(vp19-{mv;e{L"q<#O&_˯e{CKTsl*+3޹4(*UYw>Ûյ[@i,l$Ul utl J38m @HKꃓ(3BFUɂ>AV#D2a#4SC.#+V.X" OXqtdB;{o׌əeɬy=RuߧdgJ$-PbǪY٬UI.O}'mUMM+1++WtƆLkF&[ =av(zvKLߓ6VFRnM&m>YNV.bbRn})?x_(DnhUV(A1FמR[Cm ۹Q464~}dv釳u,ekwYBC.z@~?~eښFF1)[7%(<" kVxx;)%j;naլ~ Wja+*-0Mb%&8GF׳7geH}@h4r*%d^ii ~<^0 GiQ .&eW`6l<Ŗ+=YK3Sh4)R]{8bٙ} /*sh9oUEyd24Vm;y>Dw@WvY`OĿӱWu)+ӫ,V([po~W)X0D%R]P"Yb#I#ֳlWC-LT%}EHi pkF8 |;v}{.%4,jUW*B%~0?*l T*0j. `N!O'ſK$4~ᆰ:!~eBk\߼0huV0)̃ w\K8݅4uYx _͌V8pҶLdgJnF:hn\p{ @*jM,s8-DZyjLƩ梙Zf7ޛI[qͷs>.0vȁP}sΕX꺒 M ,ۦ4|גrmN\,9<>xLC4R"4f9F4UGc qd}7R]5u*x;`LFT0{дlgY9tuhpmZAJA )*i} nj+x+7 %Vp`؀5[jO% TX}^6SߪgŐr}__Y-&Y`W2f~DJ_Xrp]~rQQcPF..p#Vv}.)n|Too,u9,a>2]`x )U1Mr<.AxNP-|Ɯ)UE"VM>U^7T?X5cldcmJ\ cxR'J$ fǍ_a!yRL[H[[k3y4$)&j #ҳ鰓=:iUҞ&͒熈KK?ٽYЌk>FW$ri6NXm]0 hRH !OF%FALivKАC&a149J53XI7Q}}O!x  jDI yV[ڀPk%k4"B>pHMA. #4 K2`!Q~wQm2漡s흒ߜ3륞AK?SolrcՔxvq0H=ft}kf_c̊ =DOnDWpg`A: 1|;l9h9, c_| 43ѹ>G#).`9/Z?c=^k={ z"V^b[mDPZS?gLMeb{~u{r&,zj<N;{A<@MfN *if,\iꆉQ㬫Y%'ְWQ[cWGʹyM7\&2aU;XEǗ+lxz>kvk:.:v5 (ܕOy*rSXbEp/z~-z ~du#˘[ i$Q)ۃ9GM vwUO46llʌd=7e CGU)Bt!,HBYd[˂ń?GGo)e 5E!J/X?}}ʩń—%>Hǿ1m]i} {R4Lb#9flvzkj{L5[G}br+eRx6M/9OCp%LEeRWp˿a7X/,L{܂Xs'pț*ܳ/p}sG@#%i@ 8w_F>0<~z8'ÉdɎ;hֻ_σ pLASn?$$ċ *ړ]^@j@/ \ 8V"7 )Hף+ X1|E/_Գ:j>ןWJ;?}3wL[ȕB'BE{ߣњzTg8{{/TΰEݛ+V?87lF2qS{5Xr3 j4^Y X*|v%ӣ\<]en?_;Mve+FY2Y1SΟR5 pz6f|-{XS3Vlvoq~:n|>M ]gP̋hӳ(YxBoV +$Z~ʭ. m=QЋN_gN}:y(LAR7NG(ghǤ~T\?nΝ((律LlI h,񴜃9+ t3h#'}3iivc0JO2נ'1 ]X:{6N蔕qfϡ8gIQ1ᷣ->;b/Xyz8{ 9UQS 7n3$gVf&LwZ^v;>jԘ&:L.o2KH _=1PX$e"Q(nj1/Y1 v7/ k&0'F>*5V4\=$ _;Eq7XҚ+51Ac3 >~6w 챡WF@է gD }ۆ%<ԀiLqK, i{|qqdo55+]8'Qڟ1xho/ :,ij]Dom@ ;ܯ1Orʳ{K"cOBZZo ߵ{*[3hd9 y8L7>.^JD-WYtĜ1H}wDBa۸3S/"E&텓jwL/6B̀d7NR9U.)5rb iYlӜ(7 "))?*JIt+K68~of[B\n_#`@d̚nbr7:P]}{EwX06^\sxi-U_KA 8i;XM =w3i1|iO -1/0%AR ) yWxX3SX)%UCAM ReK`.GQodʂ3a0-eO(%{ޤHRM2RF0{9Qo"gx*<,AjBJ5WMHnԇ6Aʆpϒ`-K^蚥%Zsg*=҇x2#®`/Z =oeNe-!/87)i{~XWq%NL$s+nFYVg8?0k?v |KC %mw[@aG</-651)}_|s,TLd9'N\! 4Msr]Bsg4Y>ysR'%C6#KPZ;M_ƿnK`OCˠgUMQEoCk1MG4AXxeac]FU %U[6 %'wg}2pm5rZX^2ŴZ!- >vYH (g%=FW`ςPt p\"RJnzw਒N{hڲjc- 3\7{[pAvE6WJO |ЀJ.ܴ>`̑ws/uS{cdH\.CI0XI—K)AJR&"^㻃&[94fAtXo1Rv/eze#?vJɒszQ5䭂zS#0_yΙjYJJOrp{);*3iSfSy[sV9#!ŝM~~U{ہ3% q4Z !LvASؘWXd/LIoENxa`͸P>F /vXC^u&O-SA' XMԶY=;K hx:4ftIk焼ƠƯ6~[Ӷ1~h2;2\R /Z]?A c»s*/mpl)NцI6&8޵q[&l3'S[ 8##в7ղHzb jDzՋůt,},\ pS@t^Vby$TnJ 14VwJ%.i;h?Mj7!aژڒabze15]}8qsl Ai43rQye/A{d%A|MZa[|fqmvR ٹ'JͶެ0ݞD6iZ$_:45kF;w Gڿl"pUW9:v][cAo9!NoAz.*!,D~2]90T~hmRtwEUC%J)ůy_%g~ھ.i·Kƥ{Ī҉Bvq*%WtaXMGOm[A$QV/uW>)o>ґ1C}WY:nRd64ba o{6LJ0l>~;Y$M2u3zzF,iЉGiNT—l޼fCAQf嵾1ZH4C] QTT ):XLV <@f`=.^Թ=`=>S_i"QzBczq:h?p485ۑ0Q<_"Ʊh=6Y m)eʡo6\[( "(V!ԗ>g EHn ܆I=xԊxlryc;.U<&-+(o?a(kk023 H)CP\PؙLawe%9*RB hwhcox7)LqbHԂ+/V Q7K琳 rEWx+-O댾 [ ms=荈\AXA[SE hVv7&^FݗE% k #GJ~+9E/9F%MR1 `UpvbYv"מڹ `Stytc,a)$:Wk]BQ/Uc"bW \yE1Ϧ3d},{`OjW^0-JWl#%GdrD0^O/r{WmY]X6s 㼜 3x(;x_z_Y޵bqua=_"A<&F9RAQΉ߼TԬ4=a&2B@>|d[u^3% ɪe[NZ!3>N7ǫŒ7gq}LcGL-Q_*C#G'y $÷ց9҆R3CVP+$>ą:;'H4U/9 3lJp[;-ĸrsAk:zT8"NIbF4ڢz]廬YGs "lT~p||@$8-NR{zK۰ͧy^0*|DJieqZ4%ye:4WG{kK-"~vtL;}o &:5?DZ=ilx\0z> |Hy '/NVۄ9W(-INO7zhx@2_@k#4A,@.M 4S}T>>M' #z1ݔcWrxׯ) 0[UENuq'00;wj|bVr]($Z`Mf^% ʅ$%WGܦN%CYw3)Na9>WgGjaz'" 2qQ=ܘeQt-*^ǫ"$p&5F.@S1IZ >N*L > BS<-)ַ( S羖mF&h^&H}RBgx}#)`eE,[N#Ai΢5֜LH1F0EvvtB[Ba<\W'!{gtk7kUJG){a\d\LyOXFr FYY=j5N{kB$&m/,raq!;7Dلf;7*[\29G,QG5."vòB>!ڃw_wNp,vbigc usQԕ2]zvÆ.T]5͋=z6EAza9R1>`)O8uDWw(ܠ(Y{?ݪ.%3yt_χYؒi /5=RcNTǻ4YU>y}{/;w o{ЪhTP^ͳڹuƺ WFQW!Sd=xx ؎?FYt`iآ)I;͛#Mi< $ԃre UcqNzWYrO<;+-!w X0?, ȁD2fZiK9 ԏr瞅mktPKG_V寇Fge" YkO&qnzT:P~RP i3AX+!r-뇃Y+V1;Bl胂 L1VW>_OOGm kg1R*Ag`c47*΀\\^hś:cf`G+2/N[, 5ԝ N%NEFCYեUI_?NAJZD\qk󬢒fR^z+aP8sr7 994CCXLQ,,,UO'@Zu \+ꢴV*/LU+rVu4򯽂$q:׊bDI+` :,V~h(PÜ?5޶}ṫqoLpPL| 2@X^$~<Zp 9,\ZXr#9֗txh?WGS.>!lgW#]W7[cPΤoYlEƫ.}y&^_Ԇ$KӰ۪q<"Da._C1RH6 W)֠!K>2:FcnkTӁ mܾ> hW|ԑSOG vכ˝,@iW4+'='6͐ax lxҿ !f=/'6fyKmaf v5v=Qu>`ta;Z`6;YN?k6c!zjU)*9'uf<]MWYNčbCfM>L[ܐp@l\`@Ͱf|NVVǠ+ڎ0;k;b'uR)Uͺ/gwF;_CrI K ΅ s ߌZFD zV(ɳRi68\yeGٞwz/#_YT 1_LqJ7rx sbDza_0@آ. IkYh[ۂŒxT9lS{ܘM/oRRЌLQ3*8#YvuX\8tkruP_5O#gjA6CD0e Z9YU:i`.!o+*]]Q%{\pj̇ݫRUotM/>==%va/W_Q8 :\ƚGpXpY;ll(|<̛E`Lo(2YiTv6mik5܎\0N԰[Ŝ%!,akh[x%N c2(>iQ*$/PbWE[תQjLqrm qKYCU6|̤u}ZARi|IY^Y.SG$JKVAS["UWή8zx*H*=5MƲ)`n4ݐ/9P~*S'_EռC[#&IA_K LAi#WY8n~ `dz)HZVP2K/7qʶH` )+M:\֯=W_N%W[F2۵z{ITo e>LVU]-2H=/g*ٞ7$i6,y9e>4H,%E ެ LʄÆq>ͬ<}70cF[tgfdte+lW٫%`~@] >䋩7dͱ<'3dBI)'m1;E|5}OّׯC=?O,JoqaqX6|sN:6u.lMvsGY7O\e?7Lnմvn;ًW=4W,1?ɨ[рϜ)pV/jb(#YyØën8:3cEvkG enO?,a]*NHMN˾:"8gɊ<+}gC'Fi*U=Aһַ#~}hzxٚa!;kU,k`pPMԐ(Ѐj( s_n;pdÏĦ 2,7>JvjK ,T,STF2_,s1ӑ!i1g᫼fNn'|ҭ 2* B0(f"_!ḵ SqF@p]hrFv }5/cGÐHMl˭'ʥz-RP4yMLfgI0ZFZqt¤.C KY;G1@p ַn /O zi6I%X5r"E-_/ BeEWJƒ8DgSBqo8?';V O ! Q @AZ qxTJp=ML]QVIv%@Q.}(O-& 8RM63ȏoX|6'M4|ߩdXNDQFk '+Hgu >]`WP;yxa;͈Ud?Eܩ{Hff5K8S"װVg9I u BP3:mLa>0u>bj5{hiE=Q5teY/%~6Ӫx!p 5rSΒ1,8:pR&TdTIwvoߤd'~CԓF3J'E[[maEfQB}-2C|nxdJ=W@杔 ev ,jJ>|OOCFeL36ceᬶ|=GәO/ϼyΐOmYiu튪+ -fJ71|튃S#G*?y0שhtgf 9ci:`6ԩ5Mf![[Df{*nbJ7G 85Pn%ԁFQC{ew%\7R9çK{ Ep}^O~JRe330rtUA "p F3!cnh^hiA2r~iۅ$0y$Xo暲4}*w"{KۿGlD^ ԐuZv>C=|:t4FKoW@qy !] i /lђNn13o/G)zsd+J=Y5!liM\^FR5AvH7Nr05a$(ѐAE2{(l:ZmZZf?ϲl>|=ݞƛM^slKZPuSo/6ORfڅY{ZOtf>OӈI*!/l͟n{SLm5Z˖ͻɊۃf,K\o0Ϯm] wi'<}-7Ur&:NL^$ 2[Jy0#kz#L#:ԏ:0*⓾>T +Jj6p-.6®PFc ,)V3TzuA*dk@q1ִsd"OՍق.?&-S8|=#{˅󣺏e*l!*»qXНƀ*O|R,,pnՠPgr$<U

ZO.s bqlp|xB@ڻS^>AwueƢcbMh׈|E{CzTLiFxa o}݇. Dm鞸hzuEcx7sG0%lq!s$H[u\$O?̑^컉bmK;W0,܌V(X=Ayxy8ȫCTq{?wOzZ*d\ i"m=_GAEj̯pMTFR*7֊ (nWlvwsFuL&վ9(w!.XaN5Vobrɇ/6U*eol$zZ8'EA!-֣ ^֑x`sݥڇǗ^맠E_`J }t0.[+2Ɉ5sx:/"Z$ R}c #fU8bƐ=1E[r ׸[P# ul&%_ޙ'U@%{NlD`tSXer$e}5Vo~TgK[N7x=kC}]9ێOʦKMuYurSJyeAAj7bڥ #ЍRw yK5} GlLWFsCtCgnSI0WQ1OܵQCM:i?q z*F]>a2fRD3цQϗ Ò#wlT`&O[] {CM'C^ێfB|XtS1YTa-ämwS,;6NT,pm_TK wSb%˵"v|e$%5Yk,"hLOYWvsބ '1<nbq;F=dq,v#caJ0i }c)cWu4f4n r:.&/7E YB.9Ť(ҧO$9P<i"Umb\$.|nN& Z'=-deKaĸ]A #+t~^6NFlE6 FcX(6Fam޲ߎT*bxY1s0 Y 6l* 񉖻W&,b{ķ"_U$x2-p4k Ywc$QycmncK ^uq1fBI LgVO Y1;q^tg'F)JkٿM&AE P ?}-^0WÍ*%Q% TK鉼nliMdf۲D(HKH„,NTe妊^ȋ *ǥ kT$Ng;ܒn ' #^hkD[f?*K`DAMdE粣|FA. ILad'oTlZ1{I9[ܳ7XqUov~/)A/@}JjHn#!1&+"ݺ'\.5[y_ZES]EuV+x"oɌuvxWPṾv EϝY׳]Ix}DYFOb EXq=A1dt__me x@F'Sbm!lTξV`G{e"SF&r>9qWEW`_Kyxޚ%dkf oC/qâHeʲxfjtC# Adj[&):Y!~n1\Md<6\0J.pNɟֈ5C|S}?0wS.׋Laq@SJ.MxQ{d85B }6Ƶ&n`o6sK}?^4Նmn'7\aޙ;i(Vu ^ $o[ +y f+.TCH@L6 ,zWN ⑂zK6>[!Lֆbs3 9njOAŽU: ./7e 9T9$PV`O ۦNr|x~=5-C.=udO22-(Q]cc!${5g(@9![0Q4~#m/ )\,@7yEGFd] ;6׼>:|?D6{l_Ӻ7f!g|zeg6|OeވUDbĐxodk5ۅIU 铋pdd;5)8cMˤ3k5QKG9)K=aS)9>bי' elԞcE- 7nY)u6W |3k 8VaٷzL`b3ʲWnrF(bqϋ*꥽u]>M;Q(LAyRDY߮OQ4H[)#ANS-rZ#[6pb@i[&==?}Uߧ(#I=Q8"$ެaxq.+ *!PSǓmj6Y@D_6}W,ޢ47W8[ys &pC)xrr<<{BE88QH[;I,e 'gm[\*M!MͮC?ߔyN;ۙ#cҳ!#~s5یCR%_V}qΏ*@Rs7EpFdY`o;0 1/M6l⭩ej00XiC ^M KkWT8øXDtߤ JQY7b+djoJ&'O?yVJ[&f#]2se@<:<@nUἁI[ Nx: XQ9~ݯafVSr7Ř @I2a7Iץcΰ}ON҄& ϭ#C~5FiN.:M ޺Z%nN>O@Owֱ9[|փ939:s!a*Ф*CZɩ˩n3/l{]z쎖J V_B4d8e~_DL;gl?7B?>J+rPw?*@*4-AGU.3r疶?-ij Sʮq3s'sizn(}@ojƷ鎖 Ǝ)лi>wx)Nv k#?:Rn<M-}|ĘMaJ)kXuP|`t]f,"=Vz"LA`zH'.6cG=mp !Qarxs7Wh_m(fǂ;]w0wu&.ȷrd+3iyYD$gߝ߰M>&|qL˟?$K^4 28ާC\_̪aiI34!Ks&]Fط1wdsiW <ŮmF-YrE2n󢫜J9;8'1{XCq`ffK [ وyQ)  8ChaaHFX7g`A8MzN91[h>)gH^v =W!(] ((n>A7n6$E3PEO?g,0l.,43 bJۼQy7LLץȠh@"~yٰaJ7hU|i.ēXa>y=6dxeeLĬ4YQXVvggqՉu)U7̯s`#z@\V4CO;dqlZC.O,`Sx@- ?'R5 ǁ`v'ş)7rڼJ2W^ӳlN8&j x'=* U+O*]6ǁGYI0tװFɖHHY6r f4pO;F5m^ݒʛQgU_j VsҰo[=z| i+[VB*duCmLՌqGQ9*k` Zɺffpd6,qqNÞGOݧgE4ǑmO$w'ߥGnĤ+DŪaF/:uG:*608!JiQDq# (Ea9;e͠ wￛ($dy_|ogV'Ј?roT+V%sʧ& Xhu% նy.kYYM\rA6NB`\$ҫ8ez0pW)HM aF3"P` I<[m;ng@⇥h/LJj:jGθZ-e-MϛB @r@Nl8{ɕFb~@3!SOuK d5x/\c*7i̛c߳:.8W˹tʹd( N\|RH-I3{y< ؤ!I:$M2ǸAwfv]-? _"VC##I]vuL^vM➾6fʧN%FjS eM1j޽%õiZ X5S29Lgýuc穝S'iTsh>[w D xps @&[6@:HcRqn#ݽ;b*ⷌ-T&2wM,hs9 ,`{ nRv_XLPq[=bcrnl5ào?L M_s< n$mpv>°nh 6 rf+&\7 }n?B#βQ 'HED%$iFܑkf_Qh}˭/ J!ͮmHlyv$~i|*xJIf?撖6]RtWݎ]bOAW/ܢ-L\#EN)U=N)ҌM͗{9ӒlWX%3gc vgsÛŘ c5i$q{ ;3uZq,ijU\Re˸c&7 RA"ڒQB}1*E/So(i]w7u?%=Rlc8Caޞ5P". |h%v64+\'}En~ذэ/݉òi u>4P7{HH7碦xFGrJ5Cľ҈[%do$KKr}Dh*tѿ<1sNw֞,(?$[ ?؝J.Qd׿1^rfZDfEejN0ZnS#cmPB~ %QF0HSڍ6{{]ܶj/ٷ݁P7ql#F/CV@oyK@\L-ob]ӗmJYT6V1ᯕiUYv];'`SN@=F41x\ݼ#$V%rE%:衞!-$uhiu$9ŧ#L);\SeJ*`0''ѯ ~hFPv̱Ev39$tsp5)/I >== E6G /]17]r.0Ik͛)q(͐9:Q`U8f7:0SdBsjiOS3vd7d\a6-Ks2@<-}xV)}@0x˭M[[#ۨ_JyC۳3Oaf.=:^a 192͂Kw$8Ȼ8cOjW܏nrg}:ֹi 8F6KF6vO+R艬6BZ9p-Nr ìn8AQxFqb? FCp w:Dy𭀹~L,l4$ AJR-^hl/s^H13@ͭ)Ο$txY2u}R/&lrYK?X}D)O *?YCQ;>]z.ڤe7焔]IF<sn \Nݘ\N>cd7|$* :9G6|gøwsPWh_B?`*mLO+ '0yg86-zZL jYxx|d.t`|+q_†*v /';ROqp@<:n ` ߽4[c`#p[@G_jt×}nM |#/3?`8Tao*tf|[3߮Į?,k/M]#M? c>nA~^9ߝx/J3ƥy.PokK8%c"Oj W@MZK%320\+X3ߚk5 Lz>IjQF4/KdzlqvG@h{ {шӯƻTCs'T>Gո:]y }JKͥCMEe@>\yx+Y*>''9]: [ W^r0BNdIJ A30K9ݎ@iREDtm1 z 3DjuKgmQ}_`׬S' Tmq%ִNǧ푣ueICsGXŪ1.Ĺ'Bl[So-Ͳj@I)oVLIb)3Rj`c=L|rKm)bCNEb#xAЖu^m[tVi~$ CĶvl?[4[p^^qfG%mnm2ox oX1{G\9N½;/Ty=uwxA`T 3徐klm࿐+o٩.ҟ‰[C$se.2eŞNqr?#\'Ґ8%m_/{Gf=S;> ѮoGv]ܓNotFَ9*Η&#r}xI~Rȑw%OX `9X9Nİ} (Ƥx>TQ.P)bPDP$#X -gQF}ȩW&f m.: mA/ysqb5h܂Vs\ys\@Rr&4]ʱ;~Ak,x]xR|\jrNga̧sLZ*\) \4Sa*f]5lL2PPcGMtֽ[?aQ԰фٖNRbj8 PzURqR)|x6Dk3p8sOr:u-gaĴ(oն6JJ=5~6'r/b`I}ӌDO t_Ӟ+/EV#^1ߤv-Hj0/q7t7&_Hi)rכA'v*I;vOFNϧ*jԥHe 9}qt=a S<(m$7s9Մ"2S6;cgƺV]|C(}!N,"Gm%v p<8ljXh2zv(J 3܉} , ubvgFsG{]r֬9r.dU&W85Zf: M˭0bր^V"0G58G3?7P/ Pkh1^Mar)]G ejV'fy:c G ޭ1)ƊXJRhiuF(5Dp ¾ܩaJ{mҳX &S(أh7L;K&q°@<$s㳣4kMG^Y}y pB]o=' 2 H_: :JmooIT SI}>r>rJ j%nsd,eX!r̈W I~0Tr셯at+Eid !d:#DZ)aA*Q8XpaSCs t A<:g4 )jXչ;uDNi= [eL3uL7ӼtCԷjI kWG>!6,kB'yUz *|:t|X'dQp#!pt*¯B7N+p=I53Hrz-N@*v_ ͞mO" { I ÜYbpT38{0D*6rs6F[xmP`jkRخfQĿ6<7x\{ hA0Pz(>IP&+@F'הvtWi(!6oSm Ӂ(C PBF)1Y _!ʏ+{[r/T@I0ľi9 NJĨWFC CR ie/+mc(7k!)I)c.X +zWS=ʐmNXGKfrF;(avu+ k4rL˅XF$"-c0vC)3=`PPU `O=`PQP!EK e0+(\R۫eUyJ ) iu[Z5x!I"vǰDvԣ8d6=zZ.u?#kk}[1m7qa,L5c9SF;@>61, hAΣѻP7TM-3$сrΊUj 6$~eX_eUur9jnt&l9?Թ =;^xNn0?ZOg=J;RЌA֐kIw=/WFgsd<#SO2 SaRȢHF+˰ B^ #Qq%ծӅYEԄ2*>#NN+sv^d8.|r# G@ 2UDU!Z7 **H|tiQhw:3(֏]JS0Mg0?L!8i*X[d< T-,sH2½"`S*;hǺX(R' @O{K:(Aް6x_ ɪ@jy|TAJ!nz 3Gtj(n: |hZZBZr "VQYa;H`Ǹ#&R;[%6MP0ub HlZ4%ƮIi?WFX$yx^ڵom5Y}2i6Zkv:Uφwnӷy e3:[B>[Kpw08c9\Jh tJlMh!3('vx`u=SQ[r &n7s(g~A(lR"Z5z_R:0ެ' 7o)Cl"{h2%m|21$,QU֚6 M>0ϋShLL葕~vYV3zḯ΁w`)p6rDpa4x aQ6CA1xP-12SYy (H*d\u[[+q+AӐ;rJ,pq2q ~ oQQZ! ^B4K!_ f%唂gC UF^ UZ:ZY8G6T^Fh52-1He Pk(-2 _ϠU}ў M4ͥTDR6xU~ Pb9 s5ke$bMHCi^V%JQmDCYHB*rnMÁ!((OEIԞ(ah MrWwWe2lH@P?_D>ayQ]g՛MƎȑT _&;pwg NBѪc}*'zkKyJ&wJRT5s\~K({:eg?s:-Wn،rQ$?"Ԑ4v9Mb mvw$NG˖],Ap0}!UiskRq )xGuRy[uPAl>}sbՖ+vnٻKa6pf[fI>1e~HG -IJJtrԩI d[똬=,5{{&n z8'p^8ju6 y;uJ|вk]%%wm9}s `8Y;j 菁qE *R% }^u Oҩp~ިꐲ2k)`KDm)3s Қ O-2V}ns.ٌ d<5DDi۬'5bĵWSh/KBDIտQ${o01@yN|W Y#v~a1ҎAuG+?簀9FBWo̭5?bp ӠnA۞XNܲNGx#k?R|H}4֟vQ ”4_N5~Jsnv{ u'oȹ۔ۮ)ErgV1)`FZ1ZG׀3JS{w>;6Ƹd{onC /c}%Wm%:+ ,*o«y+!ɤ垵 ΪH|[]kS-(& U-|&'0Xā4Wp կ_U-<'v!j l!^eNw EZv~H;xHٸ'#y=`Gyd6Cu*m$8J0soo"ⁱi%嫴eb2Fk= p=?$lifZ |O ]à87˦rrbnw aT̞D? dZf6A]GzR_+qk)E>7}H8O\ ZaH~Vָvpm.ŧr [{Q{ycĪm+( >EUS?7NUÖ` 뭈@q-xe zy>EV`yZUɐ2g]voJ 2rͷc[NQc%5dM%MA(,r{ٗGshrv 5j@ 1YǍaaB[e\z 3 mY>mnkКt 3PCU՜K w?~F^rr^$\iXz(~} 6 ~1+uT`gEuz[sѣ1)kJ0rogg~Gr|NXo#ɄY|aqt@ 9**oFgQGKeȼiyx'Q1zuto1ɟ)\^}Ex ~6YQ njiXR~icm?|J23c(E?c:懇'9#`~Gʗޗr;<ۤge Е*vRx˸T j1ئP8t N&Y{LB 0׃R)!Fbm2ia쥳Z`-~0kyepU_R0wHoЇψ;'=h;3'3Tlfy.Q:Qe{<3Gm&:&1^"iwdrL 4p .d$ki.?V d""$sO sc;dЊνdji4 lX07~ 5BQ*ɰ)Yz̧=EEWvl6QoijP3M" LLY"2N<>26H d7#k' w A=+*3 x)ܦ$s}^ЊL*@yFz1uQ@j`ρأɪḳY& !@UWl"n)Hj1I;daZ+= TPzPTU_F (w5--rn&}={uՓ~ h4P <טpmk?!oj?X Q(g&@ C4 /x(+ Q~ܧ91P dbط~G{s\iu''=>c>+;wvH߶QѴ>ziR͝'*;)IЂϟ5>~Y,6ԃgWZ|Ϋ^wٓ\Nun7{-LӺB;QM:F&Q]m`EȔ8v[Q92cN]"-].GQDf(m8"u q{ǫfޮi/ZbKwTe*眹<ZM>5NlDaq-*l%[8?*:=D =2pJϙ)iQD?h;'w&fdz"w%sV Ni(C08BcxePkQ7( q !!Ļ@aQv[O=[3p7HsS4~}:y`aY18tA 7R_Casd Fg0Yl!C R_ҟU/ѕ)TF&fV6vNѸJ?j:zΛjލ#NͰ.ψº-jW4x`sM̪r{z0m-6< {ܹJKaBgͶfǺj$fsιGm~ffffffffff$I$I$a?pcMyVA dl0%V^:k=-6z;]I$I$ J\"Lfaafߒ|;;̶$I$I$zZ%k Dl6'l;3`\GUUUUCW$I$I4a25qKTH0]c9aK8 ܷmB!!B2T۶@XViizk@@BԔ2eS0v`)q%[Yq-<Y8kg 7Xs& }_n03B!e/34 \vCRT B]r# !*)p5y2j#j4ʌdQv^.>!1ɤ5cs,HTT$il9@D1X@$)Td=y/ˌB!) yE_Bv_A$2J3BZB0b8<-ySyl,Z/Uă@ ZWgEPLbQ)3 fآp۽5DJWM}O owP!f`7 !Ld'BkX9<90ҽɜr | rT+G٫z7+/=5ݶx1}h[D]\KwRI-8o} _L3?}xUoZہs_]_3‹<9 ރ$EEOy\D&\sN>wߡ"iw9dމ!q X7@wdx4gh|P d=K/"zhv@)ג&(jWX*7 ?ë{ No`ٯ~>E4M4MӿtDXa+3o-`%I$]L] q<]琪05utfkKcH(#Uo xdsL.T%لdM-Ŵhcxނj-6t'JRU%IDQm"oHi߭@FX%I$I$!  c::::::::q^2zTD̹B؃1Dжv–Jq᛽R*"L쇖\ ;H%V^6NRi3 0~Z Hrn0lNRi3N#|u]u] 0 0 @//rTfP(*1VM] jiYBlocvUg($:s@(K29Pd9\_ %ZoBRkG'7`4-VtȁFP 'HfXDIVԣ9I (9]XSerp)t:3蔰Iu)3_vUŚkhvl|#RHRT*JODDROu_9ƮLʶJrTw+=5ݶx1}h[yRO8dT)5ŧ4})'=e""雂֘;ezH>b33ys|`9, \rg8>0tYd%_d bП p_lHk5fAkmOꀝzʛHͭ]Nϣ/pCOc+L[hￕ[ťs2bJ)s(B3soj2{Uߛu4gmn/^> l-E/N/ #^ymݙs>雂kbG}fOgn7(ZT]x9B%do`˛sqk %`xjj}ʼUl<%x\X[™OiuIR۠1i9עZf{\y'*MJo6tտꔲMZY a"-uBșLwgL3_*e*zەnoxn>6zHn7JQdTڀ%Y"e t%TFn7f$SAB-1,ۡ7pWqۏ~a033S[.z XOZ.uG-t/l(&Y_i7襏=k}˩܏GE2)fpMR4c #^y eb;\"f Eg-.W „ͶTڌola2t=,,* ~d1#OJaBf [*m2$D/z1)VI"Lhl;aKMܭ\H@ɜ_߲fW)Ňr&ϿX7Q ]Vu -YBN(3% 66vUUUUUUUUUUUUUըh42"rKtcp"HL D"dUpz>ajBOҾ$S9֪7akX"8v#.   `2P}ZƊpj3Mh`z:~* 51Z\iڧE\A,( ;^MQ L|fIރ&LBrC 8S45-\o81T( @.}8ւDŌ#%!R +{#\<|B"bIieIIC;__?R( Jja "L(޽ڞ<4^jd0ab&G&DZZ @6:(  =5b`}CYG>f~ZCx꯯2ύJvfy&cU RD̒ikV`zAwr- ha_x} >jWo „f9aK83t^t=K&4 [*m" """"""""""`}Xܳ$̎–Jq >H (:.B!B!B" H=a2t}JT &tl{[*m{H@ I2Pܐ$IJ(jn$Il57m(jnH 57$I$I$#"" 57DDDD́憙YDD$P܈UUUU33@Qscfff@);OAUUUUUUUUUU Ș eA0cr5)ɜɜɜ5I]k/<0 `0 ;W3333$Iw{}uz7&mfrvv@J "DDDDQJ!""" 3ffffɈHJ[Zn _""""3333I^4mI3m۶m۶m6$I$I$I3333333333$I$I$;H$I$Il۶m۶m@g G^ tu 5M4Mf[z>~]@QsD 57!@QsCDDDf57̒@Qs#"""U 57E͍{9FE͍$I(jn,k,Pܘy6x}R:qaK1aB'.l3c6f"Lą-6ce @ f0T d &t80Tڌq7&t–J2^ „N\Ri3 „N\Ri3ADADDD  „g9&t%#"0#"""U @ UUUU]Z% "Lh6TڌhMTUkcXeYS@ fs–Jqz L?dH$I$I I$I$IJ$I$I+wmY)RJiZkc1cZk!7>Ʋ@Q뎦@'P@QAEmP 0,P@Q Emt:] I6E4(j0L ˲6<(j#B(6@QIEmz}!Eֲ$I[J$Im۶$IҶmm۶-"P쯀RUUUE*K.8 TUy~ut}nx Q~+jFB)paLBk,Yz-zF~mzgR/Cp];\ ),w۽_KJV1x8(\fU okb{譇Wγ ЇeT~'>|U3e &Co( ߒ& dٖPÆփOD9KA'Px-poG\oJ&B>z{jo/s}gx<]erO%ty8@PI+VBчp}Wיղ6u=zw6^ Ɇ+& ;+)Vv?/~ {)`IX\fƆҷ/۟GG?Ɵozs=eA9"4ɞ 8wӬjDO_PNy]m{U?)'ߣ_it#VRC ,Ű,[4w*CCF>`R^g%Y)SAgAФNP _O& h;xf‹H49I' A:a ꤅6K+(M.%E|\,0x&V@dhʳDaq; k8,a*JPtbđԅH)A~cScNR@?n<4 [GJY ޙ:+G{p&n>BH 9jazJ#$1J"|xOPU*k[IJYND $?i[GCȍ/Kֻ\PɫU9q -噛s}xVЋ[8J.MrSAԤv˙@y.]-@l[RBVҋ:t6*goC^Vsyhz{mҮ~m~D&Ԋ$u)DNk~tͬ(E+ҁctɔOĽ{S8L91 h ~%餃Ltzr[Ɨ] G_&&o~y-{pm'ݪw=8NZZvY,rCu|!q<_ݤ#ɆU}64ڊdRXrEwvld ' zH{ a^EX F5+}Ͻ84\E0BAg K,}WEc@|B3`KLMIE]Kiy'ئT"YKݕ˲K9NJUdJz3M{d3 5MIaG@jF1ܒs! 5Ķ">f.ƯE;A$ڭ(V oztL)Ҋ od4װ^i!t+Z+cj(wx&E ~$.󱨺 -VWhL5<;vB*ݒ,.ޑփ8뚋DUR",/ոLc6e$$eTj?tN\=_ Ȥ"،q)HwZ]N_)2hK V3.U^E5>#QY3uDQ?ʹE,Õ\&-&M Jx|qm WiQ*H/v)tHkY:vRG 颉Y`A!mTzR\xU})W+ȷ&+'1<@qtK],àE|7<=scVRi=?ʚxPM/Zo(z|;m,W[lOɖc6.>p!Oc_A:L#7@+n׿ Aeηk@ NjGXAֲqk&;{~^0A 8I`\HǓ)e42B$B#/#'r_LK/[؊)*+*FvƏN  B(4$2WLbs<@(K^d╳T$ TCEÓ$0DmLg2h9L`xtg v~qyu8͒a__) #X\d_ֳZ7v1BNwSfɗquD&g[Iu>D~rt6_,W6`Cb!\ Lv\%ϯfB!z+"LhIB*=L+J/yhƭöҫK0<:NNN/.ohCU>z>C\g>zO?-$UAΗ39N"'{BOyb^kǘ5]ROt_'۬t/_.,/Zt4 i\,=(\~T@H@& พ4nڮfa^t{-,U55Lgr6fyQVuvBs !A1 )a9^%YQ50-q=1Ur޺~yY7L(YHm"R?и#,<=;d#&a:/fw{0!S./OuW"ūk5:s!q=?#'ieU7mzüO6t40/Wv?ON QU Ӳp?OI (ɊiَAIEYM{\o]?Ӽ&VtRicFG'g?bZoyvΘ6qr,ing9] 9pr!   _:4jҬE6@;2:&6.>4vSPRQ30218oYLoznv 2<>5hԤYVmuԥ[^} Em~Ҕ-fyLɜy-X$z9yNGglQPl&98|Q=^>cw@ap`qxQQD(義_ݾ>}|א??xzt/ &^BXK 139Ы!;9(\ժS_W(XL\BRJZol< #(43g߫?X"LxAdEOoI-è;-@'H`v:72BRk:hmckgor0[x9bT_(4:d`,C6 Ffo3$ lEbIF J惂Fs%cg( @,O *`H, J:ɬ L,lvN W7<| ~A!aQĔ_jK•Jpg- L,}f9-qZ]7#CP7hM1_,W"כn8ΗBӍ0tdR|)8mN08Bc ,O *`./ !A1 )a9^%YQ5A z)Sn֧r˭quõhxAF`<~hDczz}~KFWvcp;138#_~[,90 _g_*B?\ k"J)D&. )BN0-[SǸtQ1p&fjh`잕@ҋ)r!U+klo$bx3IgG}-6&4|"2#YeYe#T-]fYs!U;ʌ1c| MRBҋ.!8s΅B!rpRqItMu BYvJ0PH+{* T e&F 뤅{pi >T+Rr^,-QfOs亦NUڂBI/-+pV(=nS3*VjJf~cZחlJ:#P& J.Jg gf Jɲa\H˞2v٩0-IM/"J)Z*_:T8ed?..҆i;'52@.҆iRJ)9Imc1VV14:DbZ)ٮrmX,ք(bv (vR0LIj/)27wKH,Q,G&G#Ϯ&-J,iKbh"2iA > #nٱ.5>-X#.}wчS}W/߯IߨMB iݝ7J+yW[ *6=&*{4)NOC ĥ6NRy! k b eXѥCkb44ʸ[qDciaSTR^}SrԦVE]Mb5K>Sz:Skv2( 2ScP2^K=D߂~O֢V”<%ybLΑZ@ ReBldI&IQ0m 3ZĴeWS5С!a$DJ ΚrK;oRJRJ)Zk{_k*;~O}?8S Шw)_\N.uJ#Rp)X*-7°{{jWRpvl~4q*wQ9܂$T?z-”7Sܢ>,j U&` N}2ĈLP|2Y<1M.6ܾo?hcMņIrlf0YlLuElT&$P\?4ڐS"P,7OX"""""""{J7<7DlQ!E?}C2H1(9ۋj% B3!ynlg&I@bgh\^Y6<q21ůt]kЉy c{B"}h83`;" ܵvwsv4E=ӡƳޫ5a톬m-su1kMb7[,z;xSqZ-k6yb=J49o\#ߗ {XDY3y}8 ˰9ӥ.x. @A H"Ď%hPn'`輻]Z-)ByL{Z6\+iu?Fņ}׃v17z&A֯Wk?M_ppRGNF}z3[CE%s/QlY"i!g9#dbRn̻ QNMճޙNJݒC'* z\d(ȢڋGR8$ْ s3o |Sz_/4G&AwUoB`2mƭ$l2͌mҭ"B,+=Zkr]yw^ eit!Ղw (3\K ܾYEd z>gL/.Xcg=i'rǬ|~U{T#ˮeGYRdi9 *I(;[i >ǐy=T\|T{KKk<ýMOAۗ\̚S2ވ]Xi5'FkZt5.j\yQM-kήHbW3k9Ξby W썛ekSK(.U-FwY\=){mS/qe}>Y6DAfg>Rd teu=]h5~9{Iȿ*Ne\HMO)RJ) O8x6 ^c@@lpqPeGtg0;QQ2Hw}JjAm- sҜ=qk֨VJ(.PZ) nuz u br.WЫL|t%[PZDG·vLن[;Qm"RQVu9)Jn̷72h#Ad0RWQ?\1A.Uf JbPP`݌?\GMŸ́ F8¥/7Z1:2֛+~+^|ϢUQu g}0Hp;'wl]_sǛP\P%`ړKd@KTY%@@qЮHL\ǵt) ̜rNesLj+t|X'm?ݨ&to&ݤЙ8 ᕮRm5ẑ-^LTN<"W hE{kx3`ZP)Snfj@0dEƎ+2R5[+zlxIȸK!z/`хg1Y\sd<-g>G{Wjٮ4e 'J ŬVfd">oDEwwfyitW!^MT\vݓCŠK"f13w )w]>{8D!fךH{t/ :9yn!8`6#P"jPφbĠQ?niX'9^bHhLr Y)hL£5J*,kQaW *XmNe\HR BlV-X烶[~RPz;KKQ?%V 5jCe6oɣhM!sj3:s0KUxr)L$&G߯7C'gP hsnqᒰ)Jzi^#'>Z}D2?$ ӿ ND]ޕaK'tb>vhOYooa񒴀Yyۜy;<python3-saml-1.16.0/docs/saml2/_static/css/theme.css000066400000000000000000004102221451074743100221440ustar00rootroot00000000000000html{box-sizing:border-box}*,:after,:before{box-sizing:inherit}article,aside,details,figcaption,figure,footer,header,hgroup,nav,section{display:block}audio,canvas,video{display:inline-block;*display:inline;*zoom:1}[hidden],audio:not([controls]){display:none}*{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}blockquote{margin:0}dfn{font-style:italic}ins{background:#ff9;text-decoration:none}ins,mark{color:#000}mark{background:#ff0;font-style:italic;font-weight:700}.rst-content code,.rst-content tt,code,kbd,pre,samp{font-family:monospace,serif;_font-family:courier new,monospace;font-size:1em}pre{white-space:pre}q{quotes:none}q:after,q:before{content:"";content:none}small{font-size:85%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}dl,ol,ul{margin:0;padding:0;list-style:none;list-style-image:none}li{list-style:none}dd{margin:0}img{border:0;-ms-interpolation-mode:bicubic;vertical-align:middle;max-width:100%}svg:not(:root){overflow:hidden}figure,form{margin:0}label{cursor:pointer}button,input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}button,input{line-height:normal}button,input[type=button],input[type=reset],input[type=submit]{cursor:pointer;-webkit-appearance:button;*overflow:visible}button[disabled],input[disabled]{cursor:default}input[type=search]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}textarea{resize:vertical}table{border-collapse:collapse;border-spacing:0}td{vertical-align:top}.chromeframe{margin:.2em 0;background:#ccc;color:#000;padding:.2em 0}.ir{display:block;border:0;text-indent:-999em;overflow:hidden;background-color:transparent;background-repeat:no-repeat;text-align:left;direction:ltr;*line-height:0}.ir br{display:none}.hidden{display:none!important;visibility:hidden}.visuallyhidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.visuallyhidden.focusable:active,.visuallyhidden.focusable:focus{clip:auto;height:auto;margin:0;overflow:visible;position:static;width:auto}.invisible{visibility:hidden}.relative{position:relative}big,small{font-size:100%}@media print{body,html,section{background:none!important}*{box-shadow:none!important;text-shadow:none!important;filter:none!important;-ms-filter:none!important}a,a:visited{text-decoration:underline}.ir a:after,a[href^="#"]:after,a[href^="javascript:"]:after{content:""}blockquote,pre{page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}@page{margin:.5cm}.rst-content .toctree-wrapper>p.caption,h2,h3,p{orphans:3;widows:3}.rst-content .toctree-wrapper>p.caption,h2,h3{page-break-after:avoid}}.btn,.fa:before,.icon:before,.rst-content .admonition,.rst-content .admonition-title:before,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .code-block-caption .headerlink:before,.rst-content .danger,.rst-content .eqno .headerlink:before,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-alert,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before,input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week],select,textarea{-webkit-font-smoothing:antialiased}.clearfix{*zoom:1}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}/*! * Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:FontAwesome;src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713);src:url(fonts/fontawesome-webfont.eot?674f50d287a8c48dc19ba404d20fe713?#iefix&v=4.7.0) format("embedded-opentype"),url(fonts/fontawesome-webfont.woff2?af7ae505a9eed503f8b8e6982036873e) format("woff2"),url(fonts/fontawesome-webfont.woff?fee66e712a8a08eef5805a46892932ad) format("woff"),url(fonts/fontawesome-webfont.ttf?b06871f281fee6b241d60582ae9369b9) format("truetype"),url(fonts/fontawesome-webfont.svg?912ec66d7572ff821749319396470bde#fontawesomeregular) format("svg");font-weight:400;font-style:normal}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571em;text-align:center}.fa-ul{padding-left:0;margin-left:2.14286em;list-style-type:none}.fa-ul>li{position:relative}.fa-li{position:absolute;left:-2.14286em;width:2.14286em;top:.14286em;text-align:center}.fa-li.fa-lg{left:-1.85714em}.fa-border{padding:.2em .25em .15em;border:.08em solid #eee;border-radius:.1em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa-pull-left.icon,.fa.fa-pull-left,.rst-content .code-block-caption .fa-pull-left.headerlink,.rst-content .eqno .fa-pull-left.headerlink,.rst-content .fa-pull-left.admonition-title,.rst-content code.download span.fa-pull-left:first-child,.rst-content dl dt .fa-pull-left.headerlink,.rst-content h1 .fa-pull-left.headerlink,.rst-content h2 .fa-pull-left.headerlink,.rst-content h3 .fa-pull-left.headerlink,.rst-content h4 .fa-pull-left.headerlink,.rst-content h5 .fa-pull-left.headerlink,.rst-content h6 .fa-pull-left.headerlink,.rst-content p .fa-pull-left.headerlink,.rst-content table>caption .fa-pull-left.headerlink,.rst-content tt.download span.fa-pull-left:first-child,.wy-menu-vertical li.current>a button.fa-pull-left.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-left.toctree-expand,.wy-menu-vertical li button.fa-pull-left.toctree-expand{margin-right:.3em}.fa-pull-right.icon,.fa.fa-pull-right,.rst-content .code-block-caption .fa-pull-right.headerlink,.rst-content .eqno .fa-pull-right.headerlink,.rst-content .fa-pull-right.admonition-title,.rst-content code.download span.fa-pull-right:first-child,.rst-content dl dt .fa-pull-right.headerlink,.rst-content h1 .fa-pull-right.headerlink,.rst-content h2 .fa-pull-right.headerlink,.rst-content h3 .fa-pull-right.headerlink,.rst-content h4 .fa-pull-right.headerlink,.rst-content h5 .fa-pull-right.headerlink,.rst-content h6 .fa-pull-right.headerlink,.rst-content p .fa-pull-right.headerlink,.rst-content table>caption .fa-pull-right.headerlink,.rst-content tt.download span.fa-pull-right:first-child,.wy-menu-vertical li.current>a button.fa-pull-right.toctree-expand,.wy-menu-vertical li.on a button.fa-pull-right.toctree-expand,.wy-menu-vertical li button.fa-pull-right.toctree-expand{margin-left:.3em}.pull-right{float:right}.pull-left{float:left}.fa.pull-left,.pull-left.icon,.rst-content .code-block-caption .pull-left.headerlink,.rst-content .eqno .pull-left.headerlink,.rst-content .pull-left.admonition-title,.rst-content code.download span.pull-left:first-child,.rst-content dl dt .pull-left.headerlink,.rst-content h1 .pull-left.headerlink,.rst-content h2 .pull-left.headerlink,.rst-content h3 .pull-left.headerlink,.rst-content h4 .pull-left.headerlink,.rst-content h5 .pull-left.headerlink,.rst-content h6 .pull-left.headerlink,.rst-content p .pull-left.headerlink,.rst-content table>caption .pull-left.headerlink,.rst-content tt.download span.pull-left:first-child,.wy-menu-vertical li.current>a button.pull-left.toctree-expand,.wy-menu-vertical li.on a button.pull-left.toctree-expand,.wy-menu-vertical li button.pull-left.toctree-expand{margin-right:.3em}.fa.pull-right,.pull-right.icon,.rst-content .code-block-caption .pull-right.headerlink,.rst-content .eqno .pull-right.headerlink,.rst-content .pull-right.admonition-title,.rst-content code.download span.pull-right:first-child,.rst-content dl dt .pull-right.headerlink,.rst-content h1 .pull-right.headerlink,.rst-content h2 .pull-right.headerlink,.rst-content h3 .pull-right.headerlink,.rst-content h4 .pull-right.headerlink,.rst-content h5 .pull-right.headerlink,.rst-content h6 .pull-right.headerlink,.rst-content p .pull-right.headerlink,.rst-content table>caption .pull-right.headerlink,.rst-content tt.download span.pull-right:first-child,.wy-menu-vertical li.current>a button.pull-right.toctree-expand,.wy-menu-vertical li.on a button.pull-right.toctree-expand,.wy-menu-vertical li button.pull-right.toctree-expand{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s linear infinite}.fa-pulse{-webkit-animation:fa-spin 1s steps(8) infinite;animation:fa-spin 1s steps(8) infinite}@-webkit-keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);-ms-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)";-webkit-transform:rotate(270deg);-ms-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=0, mirror=1)";-webkit-transform:scaleX(-1);-ms-transform:scaleX(-1);transform:scaleX(-1)}.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)";-webkit-transform:scaleY(-1);-ms-transform:scaleY(-1);transform:scaleY(-1)}:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{filter:none}.fa-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:middle}.fa-stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:""}.fa-music:before{content:""}.fa-search:before,.icon-search:before{content:""}.fa-envelope-o:before{content:""}.fa-heart:before{content:""}.fa-star:before{content:""}.fa-star-o:before{content:""}.fa-user:before{content:""}.fa-film:before{content:""}.fa-th-large:before{content:""}.fa-th:before{content:""}.fa-th-list:before{content:""}.fa-check:before{content:""}.fa-close:before,.fa-remove:before,.fa-times:before{content:""}.fa-search-plus:before{content:""}.fa-search-minus:before{content:""}.fa-power-off:before{content:""}.fa-signal:before{content:""}.fa-cog:before,.fa-gear:before{content:""}.fa-trash-o:before{content:""}.fa-home:before,.icon-home:before{content:""}.fa-file-o:before{content:""}.fa-clock-o:before{content:""}.fa-road:before{content:""}.fa-download:before,.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{content:""}.fa-arrow-circle-o-down:before{content:""}.fa-arrow-circle-o-up:before{content:""}.fa-inbox:before{content:""}.fa-play-circle-o:before{content:""}.fa-repeat:before,.fa-rotate-right:before{content:""}.fa-refresh:before{content:""}.fa-list-alt:before{content:""}.fa-lock:before{content:""}.fa-flag:before{content:""}.fa-headphones:before{content:""}.fa-volume-off:before{content:""}.fa-volume-down:before{content:""}.fa-volume-up:before{content:""}.fa-qrcode:before{content:""}.fa-barcode:before{content:""}.fa-tag:before{content:""}.fa-tags:before{content:""}.fa-book:before,.icon-book:before{content:""}.fa-bookmark:before{content:""}.fa-print:before{content:""}.fa-camera:before{content:""}.fa-font:before{content:""}.fa-bold:before{content:""}.fa-italic:before{content:""}.fa-text-height:before{content:""}.fa-text-width:before{content:""}.fa-align-left:before{content:""}.fa-align-center:before{content:""}.fa-align-right:before{content:""}.fa-align-justify:before{content:""}.fa-list:before{content:""}.fa-dedent:before,.fa-outdent:before{content:""}.fa-indent:before{content:""}.fa-video-camera:before{content:""}.fa-image:before,.fa-photo:before,.fa-picture-o:before{content:""}.fa-pencil:before{content:""}.fa-map-marker:before{content:""}.fa-adjust:before{content:""}.fa-tint:before{content:""}.fa-edit:before,.fa-pencil-square-o:before{content:""}.fa-share-square-o:before{content:""}.fa-check-square-o:before{content:""}.fa-arrows:before{content:""}.fa-step-backward:before{content:""}.fa-fast-backward:before{content:""}.fa-backward:before{content:""}.fa-play:before{content:""}.fa-pause:before{content:""}.fa-stop:before{content:""}.fa-forward:before{content:""}.fa-fast-forward:before{content:""}.fa-step-forward:before{content:""}.fa-eject:before{content:""}.fa-chevron-left:before{content:""}.fa-chevron-right:before{content:""}.fa-plus-circle:before{content:""}.fa-minus-circle:before{content:""}.fa-times-circle:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before{content:""}.fa-check-circle:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before{content:""}.fa-question-circle:before{content:""}.fa-info-circle:before{content:""}.fa-crosshairs:before{content:""}.fa-times-circle-o:before{content:""}.fa-check-circle-o:before{content:""}.fa-ban:before{content:""}.fa-arrow-left:before{content:""}.fa-arrow-right:before{content:""}.fa-arrow-up:before{content:""}.fa-arrow-down:before{content:""}.fa-mail-forward:before,.fa-share:before{content:""}.fa-expand:before{content:""}.fa-compress:before{content:""}.fa-plus:before{content:""}.fa-minus:before{content:""}.fa-asterisk:before{content:""}.fa-exclamation-circle:before,.rst-content .admonition-title:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before{content:""}.fa-gift:before{content:""}.fa-leaf:before{content:""}.fa-fire:before,.icon-fire:before{content:""}.fa-eye:before{content:""}.fa-eye-slash:before{content:""}.fa-exclamation-triangle:before,.fa-warning:before{content:""}.fa-plane:before{content:""}.fa-calendar:before{content:""}.fa-random:before{content:""}.fa-comment:before{content:""}.fa-magnet:before{content:""}.fa-chevron-up:before{content:""}.fa-chevron-down:before{content:""}.fa-retweet:before{content:""}.fa-shopping-cart:before{content:""}.fa-folder:before{content:""}.fa-folder-open:before{content:""}.fa-arrows-v:before{content:""}.fa-arrows-h:before{content:""}.fa-bar-chart-o:before,.fa-bar-chart:before{content:""}.fa-twitter-square:before{content:""}.fa-facebook-square:before{content:""}.fa-camera-retro:before{content:""}.fa-key:before{content:""}.fa-cogs:before,.fa-gears:before{content:""}.fa-comments:before{content:""}.fa-thumbs-o-up:before{content:""}.fa-thumbs-o-down:before{content:""}.fa-star-half:before{content:""}.fa-heart-o:before{content:""}.fa-sign-out:before{content:""}.fa-linkedin-square:before{content:""}.fa-thumb-tack:before{content:""}.fa-external-link:before{content:""}.fa-sign-in:before{content:""}.fa-trophy:before{content:""}.fa-github-square:before{content:""}.fa-upload:before{content:""}.fa-lemon-o:before{content:""}.fa-phone:before{content:""}.fa-square-o:before{content:""}.fa-bookmark-o:before{content:""}.fa-phone-square:before{content:""}.fa-twitter:before{content:""}.fa-facebook-f:before,.fa-facebook:before{content:""}.fa-github:before,.icon-github:before{content:""}.fa-unlock:before{content:""}.fa-credit-card:before{content:""}.fa-feed:before,.fa-rss:before{content:""}.fa-hdd-o:before{content:""}.fa-bullhorn:before{content:""}.fa-bell:before{content:""}.fa-certificate:before{content:""}.fa-hand-o-right:before{content:""}.fa-hand-o-left:before{content:""}.fa-hand-o-up:before{content:""}.fa-hand-o-down:before{content:""}.fa-arrow-circle-left:before,.icon-circle-arrow-left:before{content:""}.fa-arrow-circle-right:before,.icon-circle-arrow-right:before{content:""}.fa-arrow-circle-up:before{content:""}.fa-arrow-circle-down:before{content:""}.fa-globe:before{content:""}.fa-wrench:before{content:""}.fa-tasks:before{content:""}.fa-filter:before{content:""}.fa-briefcase:before{content:""}.fa-arrows-alt:before{content:""}.fa-group:before,.fa-users:before{content:""}.fa-chain:before,.fa-link:before,.icon-link:before{content:""}.fa-cloud:before{content:""}.fa-flask:before{content:""}.fa-cut:before,.fa-scissors:before{content:""}.fa-copy:before,.fa-files-o:before{content:""}.fa-paperclip:before{content:""}.fa-floppy-o:before,.fa-save:before{content:""}.fa-square:before{content:""}.fa-bars:before,.fa-navicon:before,.fa-reorder:before{content:""}.fa-list-ul:before{content:""}.fa-list-ol:before{content:""}.fa-strikethrough:before{content:""}.fa-underline:before{content:""}.fa-table:before{content:""}.fa-magic:before{content:""}.fa-truck:before{content:""}.fa-pinterest:before{content:""}.fa-pinterest-square:before{content:""}.fa-google-plus-square:before{content:""}.fa-google-plus:before{content:""}.fa-money:before{content:""}.fa-caret-down:before,.icon-caret-down:before,.wy-dropdown .caret:before{content:""}.fa-caret-up:before{content:""}.fa-caret-left:before{content:""}.fa-caret-right:before{content:""}.fa-columns:before{content:""}.fa-sort:before,.fa-unsorted:before{content:""}.fa-sort-desc:before,.fa-sort-down:before{content:""}.fa-sort-asc:before,.fa-sort-up:before{content:""}.fa-envelope:before{content:""}.fa-linkedin:before{content:""}.fa-rotate-left:before,.fa-undo:before{content:""}.fa-gavel:before,.fa-legal:before{content:""}.fa-dashboard:before,.fa-tachometer:before{content:""}.fa-comment-o:before{content:""}.fa-comments-o:before{content:""}.fa-bolt:before,.fa-flash:before{content:""}.fa-sitemap:before{content:""}.fa-umbrella:before{content:""}.fa-clipboard:before,.fa-paste:before{content:""}.fa-lightbulb-o:before{content:""}.fa-exchange:before{content:""}.fa-cloud-download:before{content:""}.fa-cloud-upload:before{content:""}.fa-user-md:before{content:""}.fa-stethoscope:before{content:""}.fa-suitcase:before{content:""}.fa-bell-o:before{content:""}.fa-coffee:before{content:""}.fa-cutlery:before{content:""}.fa-file-text-o:before{content:""}.fa-building-o:before{content:""}.fa-hospital-o:before{content:""}.fa-ambulance:before{content:""}.fa-medkit:before{content:""}.fa-fighter-jet:before{content:""}.fa-beer:before{content:""}.fa-h-square:before{content:""}.fa-plus-square:before{content:""}.fa-angle-double-left:before{content:""}.fa-angle-double-right:before{content:""}.fa-angle-double-up:before{content:""}.fa-angle-double-down:before{content:""}.fa-angle-left:before{content:""}.fa-angle-right:before{content:""}.fa-angle-up:before{content:""}.fa-angle-down:before{content:""}.fa-desktop:before{content:""}.fa-laptop:before{content:""}.fa-tablet:before{content:""}.fa-mobile-phone:before,.fa-mobile:before{content:""}.fa-circle-o:before{content:""}.fa-quote-left:before{content:""}.fa-quote-right:before{content:""}.fa-spinner:before{content:""}.fa-circle:before{content:""}.fa-mail-reply:before,.fa-reply:before{content:""}.fa-github-alt:before{content:""}.fa-folder-o:before{content:""}.fa-folder-open-o:before{content:""}.fa-smile-o:before{content:""}.fa-frown-o:before{content:""}.fa-meh-o:before{content:""}.fa-gamepad:before{content:""}.fa-keyboard-o:before{content:""}.fa-flag-o:before{content:""}.fa-flag-checkered:before{content:""}.fa-terminal:before{content:""}.fa-code:before{content:""}.fa-mail-reply-all:before,.fa-reply-all:before{content:""}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before{content:""}.fa-location-arrow:before{content:""}.fa-crop:before{content:""}.fa-code-fork:before{content:""}.fa-chain-broken:before,.fa-unlink:before{content:""}.fa-question:before{content:""}.fa-info:before{content:""}.fa-exclamation:before{content:""}.fa-superscript:before{content:""}.fa-subscript:before{content:""}.fa-eraser:before{content:""}.fa-puzzle-piece:before{content:""}.fa-microphone:before{content:""}.fa-microphone-slash:before{content:""}.fa-shield:before{content:""}.fa-calendar-o:before{content:""}.fa-fire-extinguisher:before{content:""}.fa-rocket:before{content:""}.fa-maxcdn:before{content:""}.fa-chevron-circle-left:before{content:""}.fa-chevron-circle-right:before{content:""}.fa-chevron-circle-up:before{content:""}.fa-chevron-circle-down:before{content:""}.fa-html5:before{content:""}.fa-css3:before{content:""}.fa-anchor:before{content:""}.fa-unlock-alt:before{content:""}.fa-bullseye:before{content:""}.fa-ellipsis-h:before{content:""}.fa-ellipsis-v:before{content:""}.fa-rss-square:before{content:""}.fa-play-circle:before{content:""}.fa-ticket:before{content:""}.fa-minus-square:before{content:""}.fa-minus-square-o:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before{content:""}.fa-level-up:before{content:""}.fa-level-down:before{content:""}.fa-check-square:before{content:""}.fa-pencil-square:before{content:""}.fa-external-link-square:before{content:""}.fa-share-square:before{content:""}.fa-compass:before{content:""}.fa-caret-square-o-down:before,.fa-toggle-down:before{content:""}.fa-caret-square-o-up:before,.fa-toggle-up:before{content:""}.fa-caret-square-o-right:before,.fa-toggle-right:before{content:""}.fa-eur:before,.fa-euro:before{content:""}.fa-gbp:before{content:""}.fa-dollar:before,.fa-usd:before{content:""}.fa-inr:before,.fa-rupee:before{content:""}.fa-cny:before,.fa-jpy:before,.fa-rmb:before,.fa-yen:before{content:""}.fa-rouble:before,.fa-rub:before,.fa-ruble:before{content:""}.fa-krw:before,.fa-won:before{content:""}.fa-bitcoin:before,.fa-btc:before{content:""}.fa-file:before{content:""}.fa-file-text:before{content:""}.fa-sort-alpha-asc:before{content:""}.fa-sort-alpha-desc:before{content:""}.fa-sort-amount-asc:before{content:""}.fa-sort-amount-desc:before{content:""}.fa-sort-numeric-asc:before{content:""}.fa-sort-numeric-desc:before{content:""}.fa-thumbs-up:before{content:""}.fa-thumbs-down:before{content:""}.fa-youtube-square:before{content:""}.fa-youtube:before{content:""}.fa-xing:before{content:""}.fa-xing-square:before{content:""}.fa-youtube-play:before{content:""}.fa-dropbox:before{content:""}.fa-stack-overflow:before{content:""}.fa-instagram:before{content:""}.fa-flickr:before{content:""}.fa-adn:before{content:""}.fa-bitbucket:before,.icon-bitbucket:before{content:""}.fa-bitbucket-square:before{content:""}.fa-tumblr:before{content:""}.fa-tumblr-square:before{content:""}.fa-long-arrow-down:before{content:""}.fa-long-arrow-up:before{content:""}.fa-long-arrow-left:before{content:""}.fa-long-arrow-right:before{content:""}.fa-apple:before{content:""}.fa-windows:before{content:""}.fa-android:before{content:""}.fa-linux:before{content:""}.fa-dribbble:before{content:""}.fa-skype:before{content:""}.fa-foursquare:before{content:""}.fa-trello:before{content:""}.fa-female:before{content:""}.fa-male:before{content:""}.fa-gittip:before,.fa-gratipay:before{content:""}.fa-sun-o:before{content:""}.fa-moon-o:before{content:""}.fa-archive:before{content:""}.fa-bug:before{content:""}.fa-vk:before{content:""}.fa-weibo:before{content:""}.fa-renren:before{content:""}.fa-pagelines:before{content:""}.fa-stack-exchange:before{content:""}.fa-arrow-circle-o-right:before{content:""}.fa-arrow-circle-o-left:before{content:""}.fa-caret-square-o-left:before,.fa-toggle-left:before{content:""}.fa-dot-circle-o:before{content:""}.fa-wheelchair:before{content:""}.fa-vimeo-square:before{content:""}.fa-try:before,.fa-turkish-lira:before{content:""}.fa-plus-square-o:before,.wy-menu-vertical li button.toctree-expand:before{content:""}.fa-space-shuttle:before{content:""}.fa-slack:before{content:""}.fa-envelope-square:before{content:""}.fa-wordpress:before{content:""}.fa-openid:before{content:""}.fa-bank:before,.fa-institution:before,.fa-university:before{content:""}.fa-graduation-cap:before,.fa-mortar-board:before{content:""}.fa-yahoo:before{content:""}.fa-google:before{content:""}.fa-reddit:before{content:""}.fa-reddit-square:before{content:""}.fa-stumbleupon-circle:before{content:""}.fa-stumbleupon:before{content:""}.fa-delicious:before{content:""}.fa-digg:before{content:""}.fa-pied-piper-pp:before{content:""}.fa-pied-piper-alt:before{content:""}.fa-drupal:before{content:""}.fa-joomla:before{content:""}.fa-language:before{content:""}.fa-fax:before{content:""}.fa-building:before{content:""}.fa-child:before{content:""}.fa-paw:before{content:""}.fa-spoon:before{content:""}.fa-cube:before{content:""}.fa-cubes:before{content:""}.fa-behance:before{content:""}.fa-behance-square:before{content:""}.fa-steam:before{content:""}.fa-steam-square:before{content:""}.fa-recycle:before{content:""}.fa-automobile:before,.fa-car:before{content:""}.fa-cab:before,.fa-taxi:before{content:""}.fa-tree:before{content:""}.fa-spotify:before{content:""}.fa-deviantart:before{content:""}.fa-soundcloud:before{content:""}.fa-database:before{content:""}.fa-file-pdf-o:before{content:""}.fa-file-word-o:before{content:""}.fa-file-excel-o:before{content:""}.fa-file-powerpoint-o:before{content:""}.fa-file-image-o:before,.fa-file-photo-o:before,.fa-file-picture-o:before{content:""}.fa-file-archive-o:before,.fa-file-zip-o:before{content:""}.fa-file-audio-o:before,.fa-file-sound-o:before{content:""}.fa-file-movie-o:before,.fa-file-video-o:before{content:""}.fa-file-code-o:before{content:""}.fa-vine:before{content:""}.fa-codepen:before{content:""}.fa-jsfiddle:before{content:""}.fa-life-bouy:before,.fa-life-buoy:before,.fa-life-ring:before,.fa-life-saver:before,.fa-support:before{content:""}.fa-circle-o-notch:before{content:""}.fa-ra:before,.fa-rebel:before,.fa-resistance:before{content:""}.fa-empire:before,.fa-ge:before{content:""}.fa-git-square:before{content:""}.fa-git:before{content:""}.fa-hacker-news:before,.fa-y-combinator-square:before,.fa-yc-square:before{content:""}.fa-tencent-weibo:before{content:""}.fa-qq:before{content:""}.fa-wechat:before,.fa-weixin:before{content:""}.fa-paper-plane:before,.fa-send:before{content:""}.fa-paper-plane-o:before,.fa-send-o:before{content:""}.fa-history:before{content:""}.fa-circle-thin:before{content:""}.fa-header:before{content:""}.fa-paragraph:before{content:""}.fa-sliders:before{content:""}.fa-share-alt:before{content:""}.fa-share-alt-square:before{content:""}.fa-bomb:before{content:""}.fa-futbol-o:before,.fa-soccer-ball-o:before{content:""}.fa-tty:before{content:""}.fa-binoculars:before{content:""}.fa-plug:before{content:""}.fa-slideshare:before{content:""}.fa-twitch:before{content:""}.fa-yelp:before{content:""}.fa-newspaper-o:before{content:""}.fa-wifi:before{content:""}.fa-calculator:before{content:""}.fa-paypal:before{content:""}.fa-google-wallet:before{content:""}.fa-cc-visa:before{content:""}.fa-cc-mastercard:before{content:""}.fa-cc-discover:before{content:""}.fa-cc-amex:before{content:""}.fa-cc-paypal:before{content:""}.fa-cc-stripe:before{content:""}.fa-bell-slash:before{content:""}.fa-bell-slash-o:before{content:""}.fa-trash:before{content:""}.fa-copyright:before{content:""}.fa-at:before{content:""}.fa-eyedropper:before{content:""}.fa-paint-brush:before{content:""}.fa-birthday-cake:before{content:""}.fa-area-chart:before{content:""}.fa-pie-chart:before{content:""}.fa-line-chart:before{content:""}.fa-lastfm:before{content:""}.fa-lastfm-square:before{content:""}.fa-toggle-off:before{content:""}.fa-toggle-on:before{content:""}.fa-bicycle:before{content:""}.fa-bus:before{content:""}.fa-ioxhost:before{content:""}.fa-angellist:before{content:""}.fa-cc:before{content:""}.fa-ils:before,.fa-shekel:before,.fa-sheqel:before{content:""}.fa-meanpath:before{content:""}.fa-buysellads:before{content:""}.fa-connectdevelop:before{content:""}.fa-dashcube:before{content:""}.fa-forumbee:before{content:""}.fa-leanpub:before{content:""}.fa-sellsy:before{content:""}.fa-shirtsinbulk:before{content:""}.fa-simplybuilt:before{content:""}.fa-skyatlas:before{content:""}.fa-cart-plus:before{content:""}.fa-cart-arrow-down:before{content:""}.fa-diamond:before{content:""}.fa-ship:before{content:""}.fa-user-secret:before{content:""}.fa-motorcycle:before{content:""}.fa-street-view:before{content:""}.fa-heartbeat:before{content:""}.fa-venus:before{content:""}.fa-mars:before{content:""}.fa-mercury:before{content:""}.fa-intersex:before,.fa-transgender:before{content:""}.fa-transgender-alt:before{content:""}.fa-venus-double:before{content:""}.fa-mars-double:before{content:""}.fa-venus-mars:before{content:""}.fa-mars-stroke:before{content:""}.fa-mars-stroke-v:before{content:""}.fa-mars-stroke-h:before{content:""}.fa-neuter:before{content:""}.fa-genderless:before{content:""}.fa-facebook-official:before{content:""}.fa-pinterest-p:before{content:""}.fa-whatsapp:before{content:""}.fa-server:before{content:""}.fa-user-plus:before{content:""}.fa-user-times:before{content:""}.fa-bed:before,.fa-hotel:before{content:""}.fa-viacoin:before{content:""}.fa-train:before{content:""}.fa-subway:before{content:""}.fa-medium:before{content:""}.fa-y-combinator:before,.fa-yc:before{content:""}.fa-optin-monster:before{content:""}.fa-opencart:before{content:""}.fa-expeditedssl:before{content:""}.fa-battery-4:before,.fa-battery-full:before,.fa-battery:before{content:""}.fa-battery-3:before,.fa-battery-three-quarters:before{content:""}.fa-battery-2:before,.fa-battery-half:before{content:""}.fa-battery-1:before,.fa-battery-quarter:before{content:""}.fa-battery-0:before,.fa-battery-empty:before{content:""}.fa-mouse-pointer:before{content:""}.fa-i-cursor:before{content:""}.fa-object-group:before{content:""}.fa-object-ungroup:before{content:""}.fa-sticky-note:before{content:""}.fa-sticky-note-o:before{content:""}.fa-cc-jcb:before{content:""}.fa-cc-diners-club:before{content:""}.fa-clone:before{content:""}.fa-balance-scale:before{content:""}.fa-hourglass-o:before{content:""}.fa-hourglass-1:before,.fa-hourglass-start:before{content:""}.fa-hourglass-2:before,.fa-hourglass-half:before{content:""}.fa-hourglass-3:before,.fa-hourglass-end:before{content:""}.fa-hourglass:before{content:""}.fa-hand-grab-o:before,.fa-hand-rock-o:before{content:""}.fa-hand-paper-o:before,.fa-hand-stop-o:before{content:""}.fa-hand-scissors-o:before{content:""}.fa-hand-lizard-o:before{content:""}.fa-hand-spock-o:before{content:""}.fa-hand-pointer-o:before{content:""}.fa-hand-peace-o:before{content:""}.fa-trademark:before{content:""}.fa-registered:before{content:""}.fa-creative-commons:before{content:""}.fa-gg:before{content:""}.fa-gg-circle:before{content:""}.fa-tripadvisor:before{content:""}.fa-odnoklassniki:before{content:""}.fa-odnoklassniki-square:before{content:""}.fa-get-pocket:before{content:""}.fa-wikipedia-w:before{content:""}.fa-safari:before{content:""}.fa-chrome:before{content:""}.fa-firefox:before{content:""}.fa-opera:before{content:""}.fa-internet-explorer:before{content:""}.fa-television:before,.fa-tv:before{content:""}.fa-contao:before{content:""}.fa-500px:before{content:""}.fa-amazon:before{content:""}.fa-calendar-plus-o:before{content:""}.fa-calendar-minus-o:before{content:""}.fa-calendar-times-o:before{content:""}.fa-calendar-check-o:before{content:""}.fa-industry:before{content:""}.fa-map-pin:before{content:""}.fa-map-signs:before{content:""}.fa-map-o:before{content:""}.fa-map:before{content:""}.fa-commenting:before{content:""}.fa-commenting-o:before{content:""}.fa-houzz:before{content:""}.fa-vimeo:before{content:""}.fa-black-tie:before{content:""}.fa-fonticons:before{content:""}.fa-reddit-alien:before{content:""}.fa-edge:before{content:""}.fa-credit-card-alt:before{content:""}.fa-codiepie:before{content:""}.fa-modx:before{content:""}.fa-fort-awesome:before{content:""}.fa-usb:before{content:""}.fa-product-hunt:before{content:""}.fa-mixcloud:before{content:""}.fa-scribd:before{content:""}.fa-pause-circle:before{content:""}.fa-pause-circle-o:before{content:""}.fa-stop-circle:before{content:""}.fa-stop-circle-o:before{content:""}.fa-shopping-bag:before{content:""}.fa-shopping-basket:before{content:""}.fa-hashtag:before{content:""}.fa-bluetooth:before{content:""}.fa-bluetooth-b:before{content:""}.fa-percent:before{content:""}.fa-gitlab:before,.icon-gitlab:before{content:""}.fa-wpbeginner:before{content:""}.fa-wpforms:before{content:""}.fa-envira:before{content:""}.fa-universal-access:before{content:""}.fa-wheelchair-alt:before{content:""}.fa-question-circle-o:before{content:""}.fa-blind:before{content:""}.fa-audio-description:before{content:""}.fa-volume-control-phone:before{content:""}.fa-braille:before{content:""}.fa-assistive-listening-systems:before{content:""}.fa-american-sign-language-interpreting:before,.fa-asl-interpreting:before{content:""}.fa-deaf:before,.fa-deafness:before,.fa-hard-of-hearing:before{content:""}.fa-glide:before{content:""}.fa-glide-g:before{content:""}.fa-sign-language:before,.fa-signing:before{content:""}.fa-low-vision:before{content:""}.fa-viadeo:before{content:""}.fa-viadeo-square:before{content:""}.fa-snapchat:before{content:""}.fa-snapchat-ghost:before{content:""}.fa-snapchat-square:before{content:""}.fa-pied-piper:before{content:""}.fa-first-order:before{content:""}.fa-yoast:before{content:""}.fa-themeisle:before{content:""}.fa-google-plus-circle:before,.fa-google-plus-official:before{content:""}.fa-fa:before,.fa-font-awesome:before{content:""}.fa-handshake-o:before{content:""}.fa-envelope-open:before{content:""}.fa-envelope-open-o:before{content:""}.fa-linode:before{content:""}.fa-address-book:before{content:""}.fa-address-book-o:before{content:""}.fa-address-card:before,.fa-vcard:before{content:""}.fa-address-card-o:before,.fa-vcard-o:before{content:""}.fa-user-circle:before{content:""}.fa-user-circle-o:before{content:""}.fa-user-o:before{content:""}.fa-id-badge:before{content:""}.fa-drivers-license:before,.fa-id-card:before{content:""}.fa-drivers-license-o:before,.fa-id-card-o:before{content:""}.fa-quora:before{content:""}.fa-free-code-camp:before{content:""}.fa-telegram:before{content:""}.fa-thermometer-4:before,.fa-thermometer-full:before,.fa-thermometer:before{content:""}.fa-thermometer-3:before,.fa-thermometer-three-quarters:before{content:""}.fa-thermometer-2:before,.fa-thermometer-half:before{content:""}.fa-thermometer-1:before,.fa-thermometer-quarter:before{content:""}.fa-thermometer-0:before,.fa-thermometer-empty:before{content:""}.fa-shower:before{content:""}.fa-bath:before,.fa-bathtub:before,.fa-s15:before{content:""}.fa-podcast:before{content:""}.fa-window-maximize:before{content:""}.fa-window-minimize:before{content:""}.fa-window-restore:before{content:""}.fa-times-rectangle:before,.fa-window-close:before{content:""}.fa-times-rectangle-o:before,.fa-window-close-o:before{content:""}.fa-bandcamp:before{content:""}.fa-grav:before{content:""}.fa-etsy:before{content:""}.fa-imdb:before{content:""}.fa-ravelry:before{content:""}.fa-eercast:before{content:""}.fa-microchip:before{content:""}.fa-snowflake-o:before{content:""}.fa-superpowers:before{content:""}.fa-wpexplorer:before{content:""}.fa-meetup:before{content:""}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}.fa,.icon,.rst-content .admonition-title,.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content code.download span:first-child,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink,.rst-content tt.download span:first-child,.wy-dropdown .caret,.wy-inline-validate.wy-inline-validate-danger .wy-input-context,.wy-inline-validate.wy-inline-validate-info .wy-input-context,.wy-inline-validate.wy-inline-validate-success .wy-input-context,.wy-inline-validate.wy-inline-validate-warning .wy-input-context,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li button.toctree-expand{font-family:inherit}.fa:before,.icon:before,.rst-content .admonition-title:before,.rst-content .code-block-caption .headerlink:before,.rst-content .eqno .headerlink:before,.rst-content code.download span:first-child:before,.rst-content dl dt .headerlink:before,.rst-content h1 .headerlink:before,.rst-content h2 .headerlink:before,.rst-content h3 .headerlink:before,.rst-content h4 .headerlink:before,.rst-content h5 .headerlink:before,.rst-content h6 .headerlink:before,.rst-content p.caption .headerlink:before,.rst-content p .headerlink:before,.rst-content table>caption .headerlink:before,.rst-content tt.download span:first-child:before,.wy-dropdown .caret:before,.wy-inline-validate.wy-inline-validate-danger .wy-input-context:before,.wy-inline-validate.wy-inline-validate-info .wy-input-context:before,.wy-inline-validate.wy-inline-validate-success .wy-input-context:before,.wy-inline-validate.wy-inline-validate-warning .wy-input-context:before,.wy-menu-vertical li.current>a button.toctree-expand:before,.wy-menu-vertical li.on a button.toctree-expand:before,.wy-menu-vertical li button.toctree-expand:before{font-family:FontAwesome;display:inline-block;font-style:normal;font-weight:400;line-height:1;text-decoration:inherit}.rst-content .code-block-caption a .headerlink,.rst-content .eqno a .headerlink,.rst-content a .admonition-title,.rst-content code.download a span:first-child,.rst-content dl dt a .headerlink,.rst-content h1 a .headerlink,.rst-content h2 a .headerlink,.rst-content h3 a .headerlink,.rst-content h4 a .headerlink,.rst-content h5 a .headerlink,.rst-content h6 a .headerlink,.rst-content p.caption a .headerlink,.rst-content p a .headerlink,.rst-content table>caption a .headerlink,.rst-content tt.download a span:first-child,.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand,.wy-menu-vertical li a button.toctree-expand,a .fa,a .icon,a .rst-content .admonition-title,a .rst-content .code-block-caption .headerlink,a .rst-content .eqno .headerlink,a .rst-content code.download span:first-child,a .rst-content dl dt .headerlink,a .rst-content h1 .headerlink,a .rst-content h2 .headerlink,a .rst-content h3 .headerlink,a .rst-content h4 .headerlink,a .rst-content h5 .headerlink,a .rst-content h6 .headerlink,a .rst-content p.caption .headerlink,a .rst-content p .headerlink,a .rst-content table>caption .headerlink,a .rst-content tt.download span:first-child,a .wy-menu-vertical li button.toctree-expand{display:inline-block;text-decoration:inherit}.btn .fa,.btn .icon,.btn .rst-content .admonition-title,.btn .rst-content .code-block-caption .headerlink,.btn .rst-content .eqno .headerlink,.btn .rst-content code.download span:first-child,.btn .rst-content dl dt .headerlink,.btn .rst-content h1 .headerlink,.btn .rst-content h2 .headerlink,.btn .rst-content h3 .headerlink,.btn .rst-content h4 .headerlink,.btn .rst-content h5 .headerlink,.btn .rst-content h6 .headerlink,.btn .rst-content p .headerlink,.btn .rst-content table>caption .headerlink,.btn .rst-content tt.download span:first-child,.btn .wy-menu-vertical li.current>a button.toctree-expand,.btn .wy-menu-vertical li.on a button.toctree-expand,.btn .wy-menu-vertical li button.toctree-expand,.nav .fa,.nav .icon,.nav .rst-content .admonition-title,.nav .rst-content .code-block-caption .headerlink,.nav .rst-content .eqno .headerlink,.nav .rst-content code.download span:first-child,.nav .rst-content dl dt .headerlink,.nav .rst-content h1 .headerlink,.nav .rst-content h2 .headerlink,.nav .rst-content h3 .headerlink,.nav .rst-content h4 .headerlink,.nav .rst-content h5 .headerlink,.nav .rst-content h6 .headerlink,.nav .rst-content p .headerlink,.nav .rst-content table>caption .headerlink,.nav .rst-content tt.download span:first-child,.nav .wy-menu-vertical li.current>a button.toctree-expand,.nav .wy-menu-vertical li.on a button.toctree-expand,.nav .wy-menu-vertical li button.toctree-expand,.rst-content .btn .admonition-title,.rst-content .code-block-caption .btn .headerlink,.rst-content .code-block-caption .nav .headerlink,.rst-content .eqno .btn .headerlink,.rst-content .eqno .nav .headerlink,.rst-content .nav .admonition-title,.rst-content code.download .btn span:first-child,.rst-content code.download .nav span:first-child,.rst-content dl dt .btn .headerlink,.rst-content dl dt .nav .headerlink,.rst-content h1 .btn .headerlink,.rst-content h1 .nav .headerlink,.rst-content h2 .btn .headerlink,.rst-content h2 .nav .headerlink,.rst-content h3 .btn .headerlink,.rst-content h3 .nav .headerlink,.rst-content h4 .btn .headerlink,.rst-content h4 .nav .headerlink,.rst-content h5 .btn .headerlink,.rst-content h5 .nav .headerlink,.rst-content h6 .btn .headerlink,.rst-content h6 .nav .headerlink,.rst-content p .btn .headerlink,.rst-content p .nav .headerlink,.rst-content table>caption .btn .headerlink,.rst-content table>caption .nav .headerlink,.rst-content tt.download .btn span:first-child,.rst-content tt.download .nav span:first-child,.wy-menu-vertical li .btn button.toctree-expand,.wy-menu-vertical li.current>a .btn button.toctree-expand,.wy-menu-vertical li.current>a .nav button.toctree-expand,.wy-menu-vertical li .nav button.toctree-expand,.wy-menu-vertical li.on a .btn button.toctree-expand,.wy-menu-vertical li.on a .nav button.toctree-expand{display:inline}.btn .fa-large.icon,.btn .fa.fa-large,.btn .rst-content .code-block-caption .fa-large.headerlink,.btn .rst-content .eqno .fa-large.headerlink,.btn .rst-content .fa-large.admonition-title,.btn .rst-content code.download span.fa-large:first-child,.btn .rst-content dl dt .fa-large.headerlink,.btn .rst-content h1 .fa-large.headerlink,.btn .rst-content h2 .fa-large.headerlink,.btn .rst-content h3 .fa-large.headerlink,.btn .rst-content h4 .fa-large.headerlink,.btn .rst-content h5 .fa-large.headerlink,.btn .rst-content h6 .fa-large.headerlink,.btn .rst-content p .fa-large.headerlink,.btn .rst-content table>caption .fa-large.headerlink,.btn .rst-content tt.download span.fa-large:first-child,.btn .wy-menu-vertical li button.fa-large.toctree-expand,.nav .fa-large.icon,.nav .fa.fa-large,.nav .rst-content .code-block-caption .fa-large.headerlink,.nav .rst-content .eqno .fa-large.headerlink,.nav .rst-content .fa-large.admonition-title,.nav .rst-content code.download span.fa-large:first-child,.nav .rst-content dl dt .fa-large.headerlink,.nav .rst-content h1 .fa-large.headerlink,.nav .rst-content h2 .fa-large.headerlink,.nav .rst-content h3 .fa-large.headerlink,.nav .rst-content h4 .fa-large.headerlink,.nav .rst-content h5 .fa-large.headerlink,.nav .rst-content h6 .fa-large.headerlink,.nav .rst-content p .fa-large.headerlink,.nav .rst-content table>caption .fa-large.headerlink,.nav .rst-content tt.download span.fa-large:first-child,.nav .wy-menu-vertical li button.fa-large.toctree-expand,.rst-content .btn .fa-large.admonition-title,.rst-content .code-block-caption .btn .fa-large.headerlink,.rst-content .code-block-caption .nav .fa-large.headerlink,.rst-content .eqno .btn .fa-large.headerlink,.rst-content .eqno .nav .fa-large.headerlink,.rst-content .nav .fa-large.admonition-title,.rst-content code.download .btn span.fa-large:first-child,.rst-content code.download .nav span.fa-large:first-child,.rst-content dl dt .btn .fa-large.headerlink,.rst-content dl dt .nav .fa-large.headerlink,.rst-content h1 .btn .fa-large.headerlink,.rst-content h1 .nav .fa-large.headerlink,.rst-content h2 .btn .fa-large.headerlink,.rst-content h2 .nav .fa-large.headerlink,.rst-content h3 .btn .fa-large.headerlink,.rst-content h3 .nav .fa-large.headerlink,.rst-content h4 .btn .fa-large.headerlink,.rst-content h4 .nav .fa-large.headerlink,.rst-content h5 .btn .fa-large.headerlink,.rst-content h5 .nav .fa-large.headerlink,.rst-content h6 .btn .fa-large.headerlink,.rst-content h6 .nav .fa-large.headerlink,.rst-content p .btn .fa-large.headerlink,.rst-content p .nav .fa-large.headerlink,.rst-content table>caption .btn .fa-large.headerlink,.rst-content table>caption .nav .fa-large.headerlink,.rst-content tt.download .btn span.fa-large:first-child,.rst-content tt.download .nav span.fa-large:first-child,.wy-menu-vertical li .btn button.fa-large.toctree-expand,.wy-menu-vertical li .nav button.fa-large.toctree-expand{line-height:.9em}.btn .fa-spin.icon,.btn .fa.fa-spin,.btn .rst-content .code-block-caption .fa-spin.headerlink,.btn .rst-content .eqno .fa-spin.headerlink,.btn .rst-content .fa-spin.admonition-title,.btn .rst-content code.download span.fa-spin:first-child,.btn .rst-content dl dt .fa-spin.headerlink,.btn .rst-content h1 .fa-spin.headerlink,.btn .rst-content h2 .fa-spin.headerlink,.btn .rst-content h3 .fa-spin.headerlink,.btn .rst-content h4 .fa-spin.headerlink,.btn .rst-content h5 .fa-spin.headerlink,.btn .rst-content h6 .fa-spin.headerlink,.btn .rst-content p .fa-spin.headerlink,.btn .rst-content table>caption .fa-spin.headerlink,.btn .rst-content tt.download span.fa-spin:first-child,.btn .wy-menu-vertical li button.fa-spin.toctree-expand,.nav .fa-spin.icon,.nav .fa.fa-spin,.nav .rst-content .code-block-caption .fa-spin.headerlink,.nav .rst-content .eqno .fa-spin.headerlink,.nav .rst-content .fa-spin.admonition-title,.nav .rst-content code.download span.fa-spin:first-child,.nav .rst-content dl dt .fa-spin.headerlink,.nav .rst-content h1 .fa-spin.headerlink,.nav .rst-content h2 .fa-spin.headerlink,.nav .rst-content h3 .fa-spin.headerlink,.nav .rst-content h4 .fa-spin.headerlink,.nav .rst-content h5 .fa-spin.headerlink,.nav .rst-content h6 .fa-spin.headerlink,.nav .rst-content p .fa-spin.headerlink,.nav .rst-content table>caption .fa-spin.headerlink,.nav .rst-content tt.download span.fa-spin:first-child,.nav .wy-menu-vertical li button.fa-spin.toctree-expand,.rst-content .btn .fa-spin.admonition-title,.rst-content .code-block-caption .btn .fa-spin.headerlink,.rst-content .code-block-caption .nav .fa-spin.headerlink,.rst-content .eqno .btn .fa-spin.headerlink,.rst-content .eqno .nav .fa-spin.headerlink,.rst-content .nav .fa-spin.admonition-title,.rst-content code.download .btn span.fa-spin:first-child,.rst-content code.download .nav span.fa-spin:first-child,.rst-content dl dt .btn .fa-spin.headerlink,.rst-content dl dt .nav .fa-spin.headerlink,.rst-content h1 .btn .fa-spin.headerlink,.rst-content h1 .nav .fa-spin.headerlink,.rst-content h2 .btn .fa-spin.headerlink,.rst-content h2 .nav .fa-spin.headerlink,.rst-content h3 .btn .fa-spin.headerlink,.rst-content h3 .nav .fa-spin.headerlink,.rst-content h4 .btn .fa-spin.headerlink,.rst-content h4 .nav .fa-spin.headerlink,.rst-content h5 .btn .fa-spin.headerlink,.rst-content h5 .nav .fa-spin.headerlink,.rst-content h6 .btn .fa-spin.headerlink,.rst-content h6 .nav .fa-spin.headerlink,.rst-content p .btn .fa-spin.headerlink,.rst-content p .nav .fa-spin.headerlink,.rst-content table>caption .btn .fa-spin.headerlink,.rst-content table>caption .nav .fa-spin.headerlink,.rst-content tt.download .btn span.fa-spin:first-child,.rst-content tt.download .nav span.fa-spin:first-child,.wy-menu-vertical li .btn button.fa-spin.toctree-expand,.wy-menu-vertical li .nav button.fa-spin.toctree-expand{display:inline-block}.btn.fa:before,.btn.icon:before,.rst-content .btn.admonition-title:before,.rst-content .code-block-caption .btn.headerlink:before,.rst-content .eqno .btn.headerlink:before,.rst-content code.download span.btn:first-child:before,.rst-content dl dt .btn.headerlink:before,.rst-content h1 .btn.headerlink:before,.rst-content h2 .btn.headerlink:before,.rst-content h3 .btn.headerlink:before,.rst-content h4 .btn.headerlink:before,.rst-content h5 .btn.headerlink:before,.rst-content h6 .btn.headerlink:before,.rst-content p .btn.headerlink:before,.rst-content table>caption .btn.headerlink:before,.rst-content tt.download span.btn:first-child:before,.wy-menu-vertical li button.btn.toctree-expand:before{opacity:.5;-webkit-transition:opacity .05s ease-in;-moz-transition:opacity .05s ease-in;transition:opacity .05s ease-in}.btn.fa:hover:before,.btn.icon:hover:before,.rst-content .btn.admonition-title:hover:before,.rst-content .code-block-caption .btn.headerlink:hover:before,.rst-content .eqno .btn.headerlink:hover:before,.rst-content code.download span.btn:first-child:hover:before,.rst-content dl dt .btn.headerlink:hover:before,.rst-content h1 .btn.headerlink:hover:before,.rst-content h2 .btn.headerlink:hover:before,.rst-content h3 .btn.headerlink:hover:before,.rst-content h4 .btn.headerlink:hover:before,.rst-content h5 .btn.headerlink:hover:before,.rst-content h6 .btn.headerlink:hover:before,.rst-content p .btn.headerlink:hover:before,.rst-content table>caption .btn.headerlink:hover:before,.rst-content tt.download span.btn:first-child:hover:before,.wy-menu-vertical li button.btn.toctree-expand:hover:before{opacity:1}.btn-mini .fa:before,.btn-mini .icon:before,.btn-mini .rst-content .admonition-title:before,.btn-mini .rst-content .code-block-caption .headerlink:before,.btn-mini .rst-content .eqno .headerlink:before,.btn-mini .rst-content code.download span:first-child:before,.btn-mini .rst-content dl dt .headerlink:before,.btn-mini .rst-content h1 .headerlink:before,.btn-mini .rst-content h2 .headerlink:before,.btn-mini .rst-content h3 .headerlink:before,.btn-mini .rst-content h4 .headerlink:before,.btn-mini .rst-content h5 .headerlink:before,.btn-mini .rst-content h6 .headerlink:before,.btn-mini .rst-content p .headerlink:before,.btn-mini .rst-content table>caption .headerlink:before,.btn-mini .rst-content tt.download span:first-child:before,.btn-mini .wy-menu-vertical li button.toctree-expand:before,.rst-content .btn-mini .admonition-title:before,.rst-content .code-block-caption .btn-mini .headerlink:before,.rst-content .eqno .btn-mini .headerlink:before,.rst-content code.download .btn-mini span:first-child:before,.rst-content dl dt .btn-mini .headerlink:before,.rst-content h1 .btn-mini .headerlink:before,.rst-content h2 .btn-mini .headerlink:before,.rst-content h3 .btn-mini .headerlink:before,.rst-content h4 .btn-mini .headerlink:before,.rst-content h5 .btn-mini .headerlink:before,.rst-content h6 .btn-mini .headerlink:before,.rst-content p .btn-mini .headerlink:before,.rst-content table>caption .btn-mini .headerlink:before,.rst-content tt.download .btn-mini span:first-child:before,.wy-menu-vertical li .btn-mini button.toctree-expand:before{font-size:14px;vertical-align:-15%}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning,.wy-alert{padding:12px;line-height:24px;margin-bottom:24px;background:#e7f2fa}.rst-content .admonition-title,.wy-alert-title{font-weight:700;display:block;color:#fff;background:#6ab0de;padding:6px 12px;margin:-12px -12px 12px}.rst-content .danger,.rst-content .error,.rst-content .wy-alert-danger.admonition,.rst-content .wy-alert-danger.admonition-todo,.rst-content .wy-alert-danger.attention,.rst-content .wy-alert-danger.caution,.rst-content .wy-alert-danger.hint,.rst-content .wy-alert-danger.important,.rst-content .wy-alert-danger.note,.rst-content .wy-alert-danger.seealso,.rst-content .wy-alert-danger.tip,.rst-content .wy-alert-danger.warning,.wy-alert.wy-alert-danger{background:#fdf3f2}.rst-content .danger .admonition-title,.rst-content .danger .wy-alert-title,.rst-content .error .admonition-title,.rst-content .error .wy-alert-title,.rst-content .wy-alert-danger.admonition-todo .admonition-title,.rst-content .wy-alert-danger.admonition-todo .wy-alert-title,.rst-content .wy-alert-danger.admonition .admonition-title,.rst-content .wy-alert-danger.admonition .wy-alert-title,.rst-content .wy-alert-danger.attention .admonition-title,.rst-content .wy-alert-danger.attention .wy-alert-title,.rst-content .wy-alert-danger.caution .admonition-title,.rst-content .wy-alert-danger.caution .wy-alert-title,.rst-content .wy-alert-danger.hint .admonition-title,.rst-content .wy-alert-danger.hint .wy-alert-title,.rst-content .wy-alert-danger.important .admonition-title,.rst-content .wy-alert-danger.important .wy-alert-title,.rst-content .wy-alert-danger.note .admonition-title,.rst-content .wy-alert-danger.note .wy-alert-title,.rst-content .wy-alert-danger.seealso .admonition-title,.rst-content .wy-alert-danger.seealso .wy-alert-title,.rst-content .wy-alert-danger.tip .admonition-title,.rst-content .wy-alert-danger.tip .wy-alert-title,.rst-content .wy-alert-danger.warning .admonition-title,.rst-content .wy-alert-danger.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-danger .admonition-title,.wy-alert.wy-alert-danger .rst-content .admonition-title,.wy-alert.wy-alert-danger .wy-alert-title{background:#f29f97}.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .warning,.rst-content .wy-alert-warning.admonition,.rst-content .wy-alert-warning.danger,.rst-content .wy-alert-warning.error,.rst-content .wy-alert-warning.hint,.rst-content .wy-alert-warning.important,.rst-content .wy-alert-warning.note,.rst-content .wy-alert-warning.seealso,.rst-content .wy-alert-warning.tip,.wy-alert.wy-alert-warning{background:#ffedcc}.rst-content .admonition-todo .admonition-title,.rst-content .admonition-todo .wy-alert-title,.rst-content .attention .admonition-title,.rst-content .attention .wy-alert-title,.rst-content .caution .admonition-title,.rst-content .caution .wy-alert-title,.rst-content .warning .admonition-title,.rst-content .warning .wy-alert-title,.rst-content .wy-alert-warning.admonition .admonition-title,.rst-content .wy-alert-warning.admonition .wy-alert-title,.rst-content .wy-alert-warning.danger .admonition-title,.rst-content .wy-alert-warning.danger .wy-alert-title,.rst-content .wy-alert-warning.error .admonition-title,.rst-content .wy-alert-warning.error .wy-alert-title,.rst-content .wy-alert-warning.hint .admonition-title,.rst-content .wy-alert-warning.hint .wy-alert-title,.rst-content .wy-alert-warning.important .admonition-title,.rst-content .wy-alert-warning.important .wy-alert-title,.rst-content .wy-alert-warning.note .admonition-title,.rst-content .wy-alert-warning.note .wy-alert-title,.rst-content .wy-alert-warning.seealso .admonition-title,.rst-content .wy-alert-warning.seealso .wy-alert-title,.rst-content .wy-alert-warning.tip .admonition-title,.rst-content .wy-alert-warning.tip .wy-alert-title,.rst-content .wy-alert.wy-alert-warning .admonition-title,.wy-alert.wy-alert-warning .rst-content .admonition-title,.wy-alert.wy-alert-warning .wy-alert-title{background:#f0b37e}.rst-content .note,.rst-content .seealso,.rst-content .wy-alert-info.admonition,.rst-content .wy-alert-info.admonition-todo,.rst-content .wy-alert-info.attention,.rst-content .wy-alert-info.caution,.rst-content .wy-alert-info.danger,.rst-content .wy-alert-info.error,.rst-content .wy-alert-info.hint,.rst-content .wy-alert-info.important,.rst-content .wy-alert-info.tip,.rst-content .wy-alert-info.warning,.wy-alert.wy-alert-info{background:#e7f2fa}.rst-content .note .admonition-title,.rst-content .note .wy-alert-title,.rst-content .seealso .admonition-title,.rst-content .seealso .wy-alert-title,.rst-content .wy-alert-info.admonition-todo .admonition-title,.rst-content .wy-alert-info.admonition-todo .wy-alert-title,.rst-content .wy-alert-info.admonition .admonition-title,.rst-content .wy-alert-info.admonition .wy-alert-title,.rst-content .wy-alert-info.attention .admonition-title,.rst-content .wy-alert-info.attention .wy-alert-title,.rst-content .wy-alert-info.caution .admonition-title,.rst-content .wy-alert-info.caution .wy-alert-title,.rst-content .wy-alert-info.danger .admonition-title,.rst-content .wy-alert-info.danger .wy-alert-title,.rst-content .wy-alert-info.error .admonition-title,.rst-content .wy-alert-info.error .wy-alert-title,.rst-content .wy-alert-info.hint .admonition-title,.rst-content .wy-alert-info.hint .wy-alert-title,.rst-content .wy-alert-info.important .admonition-title,.rst-content .wy-alert-info.important .wy-alert-title,.rst-content .wy-alert-info.tip .admonition-title,.rst-content .wy-alert-info.tip .wy-alert-title,.rst-content .wy-alert-info.warning .admonition-title,.rst-content .wy-alert-info.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-info .admonition-title,.wy-alert.wy-alert-info .rst-content .admonition-title,.wy-alert.wy-alert-info .wy-alert-title{background:#6ab0de}.rst-content .hint,.rst-content .important,.rst-content .tip,.rst-content .wy-alert-success.admonition,.rst-content .wy-alert-success.admonition-todo,.rst-content .wy-alert-success.attention,.rst-content .wy-alert-success.caution,.rst-content .wy-alert-success.danger,.rst-content .wy-alert-success.error,.rst-content .wy-alert-success.note,.rst-content .wy-alert-success.seealso,.rst-content .wy-alert-success.warning,.wy-alert.wy-alert-success{background:#dbfaf4}.rst-content .hint .admonition-title,.rst-content .hint .wy-alert-title,.rst-content .important .admonition-title,.rst-content .important .wy-alert-title,.rst-content .tip .admonition-title,.rst-content .tip .wy-alert-title,.rst-content .wy-alert-success.admonition-todo .admonition-title,.rst-content .wy-alert-success.admonition-todo .wy-alert-title,.rst-content .wy-alert-success.admonition .admonition-title,.rst-content .wy-alert-success.admonition .wy-alert-title,.rst-content .wy-alert-success.attention .admonition-title,.rst-content .wy-alert-success.attention .wy-alert-title,.rst-content .wy-alert-success.caution .admonition-title,.rst-content .wy-alert-success.caution .wy-alert-title,.rst-content .wy-alert-success.danger .admonition-title,.rst-content .wy-alert-success.danger .wy-alert-title,.rst-content .wy-alert-success.error .admonition-title,.rst-content .wy-alert-success.error .wy-alert-title,.rst-content .wy-alert-success.note .admonition-title,.rst-content .wy-alert-success.note .wy-alert-title,.rst-content .wy-alert-success.seealso .admonition-title,.rst-content .wy-alert-success.seealso .wy-alert-title,.rst-content .wy-alert-success.warning .admonition-title,.rst-content .wy-alert-success.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-success .admonition-title,.wy-alert.wy-alert-success .rst-content .admonition-title,.wy-alert.wy-alert-success .wy-alert-title{background:#1abc9c}.rst-content .wy-alert-neutral.admonition,.rst-content .wy-alert-neutral.admonition-todo,.rst-content .wy-alert-neutral.attention,.rst-content .wy-alert-neutral.caution,.rst-content .wy-alert-neutral.danger,.rst-content .wy-alert-neutral.error,.rst-content .wy-alert-neutral.hint,.rst-content .wy-alert-neutral.important,.rst-content .wy-alert-neutral.note,.rst-content .wy-alert-neutral.seealso,.rst-content .wy-alert-neutral.tip,.rst-content .wy-alert-neutral.warning,.wy-alert.wy-alert-neutral{background:#f3f6f6}.rst-content .wy-alert-neutral.admonition-todo .admonition-title,.rst-content .wy-alert-neutral.admonition-todo .wy-alert-title,.rst-content .wy-alert-neutral.admonition .admonition-title,.rst-content .wy-alert-neutral.admonition .wy-alert-title,.rst-content .wy-alert-neutral.attention .admonition-title,.rst-content .wy-alert-neutral.attention .wy-alert-title,.rst-content .wy-alert-neutral.caution .admonition-title,.rst-content .wy-alert-neutral.caution .wy-alert-title,.rst-content .wy-alert-neutral.danger .admonition-title,.rst-content .wy-alert-neutral.danger .wy-alert-title,.rst-content .wy-alert-neutral.error .admonition-title,.rst-content .wy-alert-neutral.error .wy-alert-title,.rst-content .wy-alert-neutral.hint .admonition-title,.rst-content .wy-alert-neutral.hint .wy-alert-title,.rst-content .wy-alert-neutral.important .admonition-title,.rst-content .wy-alert-neutral.important .wy-alert-title,.rst-content .wy-alert-neutral.note .admonition-title,.rst-content .wy-alert-neutral.note .wy-alert-title,.rst-content .wy-alert-neutral.seealso .admonition-title,.rst-content .wy-alert-neutral.seealso .wy-alert-title,.rst-content .wy-alert-neutral.tip .admonition-title,.rst-content .wy-alert-neutral.tip .wy-alert-title,.rst-content .wy-alert-neutral.warning .admonition-title,.rst-content .wy-alert-neutral.warning .wy-alert-title,.rst-content .wy-alert.wy-alert-neutral .admonition-title,.wy-alert.wy-alert-neutral .rst-content .admonition-title,.wy-alert.wy-alert-neutral .wy-alert-title{color:#404040;background:#e1e4e5}.rst-content .wy-alert-neutral.admonition-todo a,.rst-content .wy-alert-neutral.admonition a,.rst-content .wy-alert-neutral.attention a,.rst-content .wy-alert-neutral.caution a,.rst-content .wy-alert-neutral.danger a,.rst-content .wy-alert-neutral.error a,.rst-content .wy-alert-neutral.hint a,.rst-content .wy-alert-neutral.important a,.rst-content .wy-alert-neutral.note a,.rst-content .wy-alert-neutral.seealso a,.rst-content .wy-alert-neutral.tip a,.rst-content .wy-alert-neutral.warning a,.wy-alert.wy-alert-neutral a{color:#2980b9}.rst-content .admonition-todo p:last-child,.rst-content .admonition p:last-child,.rst-content .attention p:last-child,.rst-content .caution p:last-child,.rst-content .danger p:last-child,.rst-content .error p:last-child,.rst-content .hint p:last-child,.rst-content .important p:last-child,.rst-content .note p:last-child,.rst-content .seealso p:last-child,.rst-content .tip p:last-child,.rst-content .warning p:last-child,.wy-alert p:last-child{margin-bottom:0}.wy-tray-container{position:fixed;bottom:0;left:0;z-index:600}.wy-tray-container li{display:block;width:300px;background:transparent;color:#fff;text-align:center;box-shadow:0 5px 5px 0 rgba(0,0,0,.1);padding:0 24px;min-width:20%;opacity:0;height:0;line-height:56px;overflow:hidden;-webkit-transition:all .3s ease-in;-moz-transition:all .3s ease-in;transition:all .3s ease-in}.wy-tray-container li.wy-tray-item-success{background:#27ae60}.wy-tray-container li.wy-tray-item-info{background:#2980b9}.wy-tray-container li.wy-tray-item-warning{background:#e67e22}.wy-tray-container li.wy-tray-item-danger{background:#e74c3c}.wy-tray-container li.on{opacity:1;height:56px}@media screen and (max-width:768px){.wy-tray-container{bottom:auto;top:0;width:100%}.wy-tray-container li{width:100%}}button{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle;cursor:pointer;line-height:normal;-webkit-appearance:button;*overflow:visible}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}button[disabled]{cursor:default}.btn{display:inline-block;border-radius:2px;line-height:normal;white-space:nowrap;text-align:center;cursor:pointer;font-size:100%;padding:6px 12px 8px;color:#fff;border:1px solid rgba(0,0,0,.1);background-color:#27ae60;text-decoration:none;font-weight:400;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 2px -1px hsla(0,0%,100%,.5),inset 0 -2px 0 0 rgba(0,0,0,.1);outline-none:false;vertical-align:middle;*display:inline;zoom:1;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-transition:all .1s linear;-moz-transition:all .1s linear;transition:all .1s linear}.btn-hover{background:#2e8ece;color:#fff}.btn:hover{background:#2cc36b;color:#fff}.btn:focus{background:#2cc36b;outline:0}.btn:active{box-shadow:inset 0 -1px 0 0 rgba(0,0,0,.05),inset 0 2px 0 0 rgba(0,0,0,.1);padding:8px 12px 6px}.btn:visited{color:#fff}.btn-disabled,.btn-disabled:active,.btn-disabled:focus,.btn-disabled:hover,.btn:disabled{background-image:none;filter:progid:DXImageTransform.Microsoft.gradient(enabled = false);filter:alpha(opacity=40);opacity:.4;cursor:not-allowed;box-shadow:none}.btn::-moz-focus-inner{padding:0;border:0}.btn-small{font-size:80%}.btn-info{background-color:#2980b9!important}.btn-info:hover{background-color:#2e8ece!important}.btn-neutral{background-color:#f3f6f6!important;color:#404040!important}.btn-neutral:hover{background-color:#e5ebeb!important;color:#404040}.btn-neutral:visited{color:#404040!important}.btn-success{background-color:#27ae60!important}.btn-success:hover{background-color:#295!important}.btn-danger{background-color:#e74c3c!important}.btn-danger:hover{background-color:#ea6153!important}.btn-warning{background-color:#e67e22!important}.btn-warning:hover{background-color:#e98b39!important}.btn-invert{background-color:#222}.btn-invert:hover{background-color:#2f2f2f!important}.btn-link{background-color:transparent!important;color:#2980b9;box-shadow:none;border-color:transparent!important}.btn-link:active,.btn-link:hover{background-color:transparent!important;color:#409ad5!important;box-shadow:none}.btn-link:visited{color:#9b59b6}.wy-btn-group .btn,.wy-control .btn{vertical-align:middle}.wy-btn-group{margin-bottom:24px;*zoom:1}.wy-btn-group:after,.wy-btn-group:before{display:table;content:""}.wy-btn-group:after{clear:both}.wy-dropdown{position:relative;display:inline-block}.wy-dropdown-active .wy-dropdown-menu{display:block}.wy-dropdown-menu{position:absolute;left:0;display:none;float:left;top:100%;min-width:100%;background:#fcfcfc;z-index:100;border:1px solid #cfd7dd;box-shadow:0 2px 2px 0 rgba(0,0,0,.1);padding:12px}.wy-dropdown-menu>dd>a{display:block;clear:both;color:#404040;white-space:nowrap;font-size:90%;padding:0 12px;cursor:pointer}.wy-dropdown-menu>dd>a:hover{background:#2980b9;color:#fff}.wy-dropdown-menu>dd.divider{border-top:1px solid #cfd7dd;margin:6px 0}.wy-dropdown-menu>dd.search{padding-bottom:12px}.wy-dropdown-menu>dd.search input[type=search]{width:100%}.wy-dropdown-menu>dd.call-to-action{background:#e3e3e3;text-transform:uppercase;font-weight:500;font-size:80%}.wy-dropdown-menu>dd.call-to-action:hover{background:#e3e3e3}.wy-dropdown-menu>dd.call-to-action .btn{color:#fff}.wy-dropdown.wy-dropdown-up .wy-dropdown-menu{bottom:100%;top:auto;left:auto;right:0}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu{background:#fcfcfc;margin-top:2px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a{padding:6px 12px}.wy-dropdown.wy-dropdown-bubble .wy-dropdown-menu a:hover{background:#2980b9;color:#fff}.wy-dropdown.wy-dropdown-left .wy-dropdown-menu{right:0;left:auto;text-align:right}.wy-dropdown-arrow:before{content:" ";border-bottom:5px solid #f5f5f5;border-left:5px solid transparent;border-right:5px solid transparent;position:absolute;display:block;top:-4px;left:50%;margin-left:-3px}.wy-dropdown-arrow.wy-dropdown-arrow-left:before{left:11px}.wy-form-stacked select{display:block}.wy-form-aligned .wy-help-inline,.wy-form-aligned input,.wy-form-aligned label,.wy-form-aligned select,.wy-form-aligned textarea{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-form-aligned .wy-control-group>label{display:inline-block;vertical-align:middle;width:10em;margin:6px 12px 0 0;float:left}.wy-form-aligned .wy-control{float:left}.wy-form-aligned .wy-control label{display:block}.wy-form-aligned .wy-control select{margin-top:6px}fieldset{margin:0}fieldset,legend{border:0;padding:0}legend{width:100%;white-space:normal;margin-bottom:24px;font-size:150%;*margin-left:-7px}label,legend{display:block}label{margin:0 0 .3125em;color:#333;font-size:90%}input,select,textarea{font-size:100%;margin:0;vertical-align:baseline;*vertical-align:middle}.wy-control-group{margin-bottom:24px;max-width:1200px;margin-left:auto;margin-right:auto;*zoom:1}.wy-control-group:after,.wy-control-group:before{display:table;content:""}.wy-control-group:after{clear:both}.wy-control-group.wy-control-group-required>label:after{content:" *";color:#e74c3c}.wy-control-group .wy-form-full,.wy-control-group .wy-form-halves,.wy-control-group .wy-form-thirds{padding-bottom:12px}.wy-control-group .wy-form-full input[type=color],.wy-control-group .wy-form-full input[type=date],.wy-control-group .wy-form-full input[type=datetime-local],.wy-control-group .wy-form-full input[type=datetime],.wy-control-group .wy-form-full input[type=email],.wy-control-group .wy-form-full input[type=month],.wy-control-group .wy-form-full input[type=number],.wy-control-group .wy-form-full input[type=password],.wy-control-group .wy-form-full input[type=search],.wy-control-group .wy-form-full input[type=tel],.wy-control-group .wy-form-full input[type=text],.wy-control-group .wy-form-full input[type=time],.wy-control-group .wy-form-full input[type=url],.wy-control-group .wy-form-full input[type=week],.wy-control-group .wy-form-full select,.wy-control-group .wy-form-halves input[type=color],.wy-control-group .wy-form-halves input[type=date],.wy-control-group .wy-form-halves input[type=datetime-local],.wy-control-group .wy-form-halves input[type=datetime],.wy-control-group .wy-form-halves input[type=email],.wy-control-group .wy-form-halves input[type=month],.wy-control-group .wy-form-halves input[type=number],.wy-control-group .wy-form-halves input[type=password],.wy-control-group .wy-form-halves input[type=search],.wy-control-group .wy-form-halves input[type=tel],.wy-control-group .wy-form-halves input[type=text],.wy-control-group .wy-form-halves input[type=time],.wy-control-group .wy-form-halves input[type=url],.wy-control-group .wy-form-halves input[type=week],.wy-control-group .wy-form-halves select,.wy-control-group .wy-form-thirds input[type=color],.wy-control-group .wy-form-thirds input[type=date],.wy-control-group .wy-form-thirds input[type=datetime-local],.wy-control-group .wy-form-thirds input[type=datetime],.wy-control-group .wy-form-thirds input[type=email],.wy-control-group .wy-form-thirds input[type=month],.wy-control-group .wy-form-thirds input[type=number],.wy-control-group .wy-form-thirds input[type=password],.wy-control-group .wy-form-thirds input[type=search],.wy-control-group .wy-form-thirds input[type=tel],.wy-control-group .wy-form-thirds input[type=text],.wy-control-group .wy-form-thirds input[type=time],.wy-control-group .wy-form-thirds input[type=url],.wy-control-group .wy-form-thirds input[type=week],.wy-control-group .wy-form-thirds select{width:100%}.wy-control-group .wy-form-full{float:left;display:block;width:100%;margin-right:0}.wy-control-group .wy-form-full:last-child{margin-right:0}.wy-control-group .wy-form-halves{float:left;display:block;margin-right:2.35765%;width:48.82117%}.wy-control-group .wy-form-halves:last-child,.wy-control-group .wy-form-halves:nth-of-type(2n){margin-right:0}.wy-control-group .wy-form-halves:nth-of-type(odd){clear:left}.wy-control-group .wy-form-thirds{float:left;display:block;margin-right:2.35765%;width:31.76157%}.wy-control-group .wy-form-thirds:last-child,.wy-control-group .wy-form-thirds:nth-of-type(3n){margin-right:0}.wy-control-group .wy-form-thirds:nth-of-type(3n+1){clear:left}.wy-control-group.wy-control-group-no-input .wy-control,.wy-control-no-input{margin:6px 0 0;font-size:90%}.wy-control-no-input{display:inline-block}.wy-control-group.fluid-input input[type=color],.wy-control-group.fluid-input input[type=date],.wy-control-group.fluid-input input[type=datetime-local],.wy-control-group.fluid-input input[type=datetime],.wy-control-group.fluid-input input[type=email],.wy-control-group.fluid-input input[type=month],.wy-control-group.fluid-input input[type=number],.wy-control-group.fluid-input input[type=password],.wy-control-group.fluid-input input[type=search],.wy-control-group.fluid-input input[type=tel],.wy-control-group.fluid-input input[type=text],.wy-control-group.fluid-input input[type=time],.wy-control-group.fluid-input input[type=url],.wy-control-group.fluid-input input[type=week]{width:100%}.wy-form-message-inline{padding-left:.3em;color:#666;font-size:90%}.wy-form-message{display:block;color:#999;font-size:70%;margin-top:.3125em;font-style:italic}.wy-form-message p{font-size:inherit;font-style:italic;margin-bottom:6px}.wy-form-message p:last-child{margin-bottom:0}input{line-height:normal}input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;*overflow:visible}input[type=color],input[type=date],input[type=datetime-local],input[type=datetime],input[type=email],input[type=month],input[type=number],input[type=password],input[type=search],input[type=tel],input[type=text],input[type=time],input[type=url],input[type=week]{-webkit-appearance:none;padding:6px;display:inline-block;border:1px solid #ccc;font-size:80%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;box-shadow:inset 0 1px 3px #ddd;border-radius:0;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}input[type=datetime-local]{padding:.34375em .625em}input[disabled]{cursor:default}input[type=checkbox],input[type=radio]{padding:0;margin-right:.3125em;*height:13px;*width:13px}input[type=checkbox],input[type=radio],input[type=search]{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}input[type=color]:focus,input[type=date]:focus,input[type=datetime-local]:focus,input[type=datetime]:focus,input[type=email]:focus,input[type=month]:focus,input[type=number]:focus,input[type=password]:focus,input[type=search]:focus,input[type=tel]:focus,input[type=text]:focus,input[type=time]:focus,input[type=url]:focus,input[type=week]:focus{outline:0;outline:thin dotted\9;border-color:#333}input.no-focus:focus{border-color:#ccc!important}input[type=checkbox]:focus,input[type=file]:focus,input[type=radio]:focus{outline:thin dotted #333;outline:1px auto #129fea}input[type=color][disabled],input[type=date][disabled],input[type=datetime-local][disabled],input[type=datetime][disabled],input[type=email][disabled],input[type=month][disabled],input[type=number][disabled],input[type=password][disabled],input[type=search][disabled],input[type=tel][disabled],input[type=text][disabled],input[type=time][disabled],input[type=url][disabled],input[type=week][disabled]{cursor:not-allowed;background-color:#fafafa}input:focus:invalid,select:focus:invalid,textarea:focus:invalid{color:#e74c3c;border:1px solid #e74c3c}input:focus:invalid:focus,select:focus:invalid:focus,textarea:focus:invalid:focus{border-color:#e74c3c}input[type=checkbox]:focus:invalid:focus,input[type=file]:focus:invalid:focus,input[type=radio]:focus:invalid:focus{outline-color:#e74c3c}input.wy-input-large{padding:12px;font-size:100%}textarea{overflow:auto;vertical-align:top;width:100%;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif}select,textarea{padding:.5em .625em;display:inline-block;border:1px solid #ccc;font-size:80%;box-shadow:inset 0 1px 3px #ddd;-webkit-transition:border .3s linear;-moz-transition:border .3s linear;transition:border .3s linear}select{border:1px solid #ccc;background-color:#fff}select[multiple]{height:auto}select:focus,textarea:focus{outline:0}input[readonly],select[disabled],select[readonly],textarea[disabled],textarea[readonly]{cursor:not-allowed;background-color:#fafafa}input[type=checkbox][disabled],input[type=radio][disabled]{cursor:not-allowed}.wy-checkbox,.wy-radio{margin:6px 0;color:#404040;display:block}.wy-checkbox input,.wy-radio input{vertical-align:baseline}.wy-form-message-inline{display:inline-block;*display:inline;*zoom:1;vertical-align:middle}.wy-input-prefix,.wy-input-suffix{white-space:nowrap;padding:6px}.wy-input-prefix .wy-input-context,.wy-input-suffix .wy-input-context{line-height:27px;padding:0 8px;display:inline-block;font-size:80%;background-color:#f3f6f6;border:1px solid #ccc;color:#999}.wy-input-suffix .wy-input-context{border-left:0}.wy-input-prefix .wy-input-context{border-right:0}.wy-switch{position:relative;display:block;height:24px;margin-top:12px;cursor:pointer}.wy-switch:before{left:0;top:0;width:36px;height:12px;background:#ccc}.wy-switch:after,.wy-switch:before{position:absolute;content:"";display:block;border-radius:4px;-webkit-transition:all .2s ease-in-out;-moz-transition:all .2s ease-in-out;transition:all .2s ease-in-out}.wy-switch:after{width:18px;height:18px;background:#999;left:-3px;top:-3px}.wy-switch span{position:absolute;left:48px;display:block;font-size:12px;color:#ccc;line-height:1}.wy-switch.active:before{background:#1e8449}.wy-switch.active:after{left:24px;background:#27ae60}.wy-switch.disabled{cursor:not-allowed;opacity:.8}.wy-control-group.wy-control-group-error .wy-form-message,.wy-control-group.wy-control-group-error>label{color:#e74c3c}.wy-control-group.wy-control-group-error input[type=color],.wy-control-group.wy-control-group-error input[type=date],.wy-control-group.wy-control-group-error input[type=datetime-local],.wy-control-group.wy-control-group-error input[type=datetime],.wy-control-group.wy-control-group-error input[type=email],.wy-control-group.wy-control-group-error input[type=month],.wy-control-group.wy-control-group-error input[type=number],.wy-control-group.wy-control-group-error input[type=password],.wy-control-group.wy-control-group-error input[type=search],.wy-control-group.wy-control-group-error input[type=tel],.wy-control-group.wy-control-group-error input[type=text],.wy-control-group.wy-control-group-error input[type=time],.wy-control-group.wy-control-group-error input[type=url],.wy-control-group.wy-control-group-error input[type=week],.wy-control-group.wy-control-group-error textarea{border:1px solid #e74c3c}.wy-inline-validate{white-space:nowrap}.wy-inline-validate .wy-input-context{padding:.5em .625em;display:inline-block;font-size:80%}.wy-inline-validate.wy-inline-validate-success .wy-input-context{color:#27ae60}.wy-inline-validate.wy-inline-validate-danger .wy-input-context{color:#e74c3c}.wy-inline-validate.wy-inline-validate-warning .wy-input-context{color:#e67e22}.wy-inline-validate.wy-inline-validate-info .wy-input-context{color:#2980b9}.rotate-90{-webkit-transform:rotate(90deg);-moz-transform:rotate(90deg);-ms-transform:rotate(90deg);-o-transform:rotate(90deg);transform:rotate(90deg)}.rotate-180{-webkit-transform:rotate(180deg);-moz-transform:rotate(180deg);-ms-transform:rotate(180deg);-o-transform:rotate(180deg);transform:rotate(180deg)}.rotate-270{-webkit-transform:rotate(270deg);-moz-transform:rotate(270deg);-ms-transform:rotate(270deg);-o-transform:rotate(270deg);transform:rotate(270deg)}.mirror{-webkit-transform:scaleX(-1);-moz-transform:scaleX(-1);-ms-transform:scaleX(-1);-o-transform:scaleX(-1);transform:scaleX(-1)}.mirror.rotate-90{-webkit-transform:scaleX(-1) rotate(90deg);-moz-transform:scaleX(-1) rotate(90deg);-ms-transform:scaleX(-1) rotate(90deg);-o-transform:scaleX(-1) rotate(90deg);transform:scaleX(-1) rotate(90deg)}.mirror.rotate-180{-webkit-transform:scaleX(-1) rotate(180deg);-moz-transform:scaleX(-1) rotate(180deg);-ms-transform:scaleX(-1) rotate(180deg);-o-transform:scaleX(-1) rotate(180deg);transform:scaleX(-1) rotate(180deg)}.mirror.rotate-270{-webkit-transform:scaleX(-1) rotate(270deg);-moz-transform:scaleX(-1) rotate(270deg);-ms-transform:scaleX(-1) rotate(270deg);-o-transform:scaleX(-1) rotate(270deg);transform:scaleX(-1) rotate(270deg)}@media only screen and (max-width:480px){.wy-form button[type=submit]{margin:.7em 0 0}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=text],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week],.wy-form label{margin-bottom:.3em;display:block}.wy-form input[type=color],.wy-form input[type=date],.wy-form input[type=datetime-local],.wy-form input[type=datetime],.wy-form input[type=email],.wy-form input[type=month],.wy-form input[type=number],.wy-form input[type=password],.wy-form input[type=search],.wy-form input[type=tel],.wy-form input[type=time],.wy-form input[type=url],.wy-form input[type=week]{margin-bottom:0}.wy-form-aligned .wy-control-group label{margin-bottom:.3em;text-align:left;display:block;width:100%}.wy-form-aligned .wy-control{margin:1.5em 0 0}.wy-form-message,.wy-form-message-inline,.wy-form .wy-help-inline{display:block;font-size:80%;padding:6px 0}}@media screen and (max-width:768px){.tablet-hide{display:none}}@media screen and (max-width:480px){.mobile-hide{display:none}}.float-left{float:left}.float-right{float:right}.full-width{width:100%}.rst-content table.docutils,.rst-content table.field-list,.wy-table{border-collapse:collapse;border-spacing:0;empty-cells:show;margin-bottom:24px}.rst-content table.docutils caption,.rst-content table.field-list caption,.wy-table caption{color:#000;font:italic 85%/1 arial,sans-serif;padding:1em 0;text-align:center}.rst-content table.docutils td,.rst-content table.docutils th,.rst-content table.field-list td,.rst-content table.field-list th,.wy-table td,.wy-table th{font-size:90%;margin:0;overflow:visible;padding:8px 16px}.rst-content table.docutils td:first-child,.rst-content table.docutils th:first-child,.rst-content table.field-list td:first-child,.rst-content table.field-list th:first-child,.wy-table td:first-child,.wy-table th:first-child{border-left-width:0}.rst-content table.docutils thead,.rst-content table.field-list thead,.wy-table thead{color:#000;text-align:left;vertical-align:bottom;white-space:nowrap}.rst-content table.docutils thead th,.rst-content table.field-list thead th,.wy-table thead th{font-weight:700;border-bottom:2px solid #e1e4e5}.rst-content table.docutils td,.rst-content table.field-list td,.wy-table td{background-color:transparent;vertical-align:middle}.rst-content table.docutils td p,.rst-content table.field-list td p,.wy-table td p{line-height:18px}.rst-content table.docutils td p:last-child,.rst-content table.field-list td p:last-child,.wy-table td p:last-child{margin-bottom:0}.rst-content table.docutils .wy-table-cell-min,.rst-content table.field-list .wy-table-cell-min,.wy-table .wy-table-cell-min{width:1%;padding-right:0}.rst-content table.docutils .wy-table-cell-min input[type=checkbox],.rst-content table.field-list .wy-table-cell-min input[type=checkbox],.wy-table .wy-table-cell-min input[type=checkbox]{margin:0}.wy-table-secondary{color:grey;font-size:90%}.wy-table-tertiary{color:grey;font-size:80%}.rst-content table.docutils:not(.field-list) tr:nth-child(2n-1) td,.wy-table-backed,.wy-table-odd td,.wy-table-striped tr:nth-child(2n-1) td{background-color:#f3f6f6}.rst-content table.docutils,.wy-table-bordered-all{border:1px solid #e1e4e5}.rst-content table.docutils td,.wy-table-bordered-all td{border-bottom:1px solid #e1e4e5;border-left:1px solid #e1e4e5}.rst-content table.docutils tbody>tr:last-child td,.wy-table-bordered-all tbody>tr:last-child td{border-bottom-width:0}.wy-table-bordered{border:1px solid #e1e4e5}.wy-table-bordered-rows td{border-bottom:1px solid #e1e4e5}.wy-table-bordered-rows tbody>tr:last-child td{border-bottom-width:0}.wy-table-horizontal td,.wy-table-horizontal th{border-width:0 0 1px;border-bottom:1px solid #e1e4e5}.wy-table-horizontal tbody>tr:last-child td{border-bottom-width:0}.wy-table-responsive{margin-bottom:24px;max-width:100%;overflow:auto}.wy-table-responsive table{margin-bottom:0!important}.wy-table-responsive table td,.wy-table-responsive table th{white-space:nowrap}a{color:#2980b9;text-decoration:none;cursor:pointer}a:hover{color:#3091d1}a:visited{color:#9b59b6}html{height:100%}body,html{overflow-x:hidden}body{font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;font-weight:400;color:#404040;min-height:100%;background:#edf0f2}.wy-text-left{text-align:left}.wy-text-center{text-align:center}.wy-text-right{text-align:right}.wy-text-large{font-size:120%}.wy-text-normal{font-size:100%}.wy-text-small,small{font-size:80%}.wy-text-strike{text-decoration:line-through}.wy-text-warning{color:#e67e22!important}a.wy-text-warning:hover{color:#eb9950!important}.wy-text-info{color:#2980b9!important}a.wy-text-info:hover{color:#409ad5!important}.wy-text-success{color:#27ae60!important}a.wy-text-success:hover{color:#36d278!important}.wy-text-danger{color:#e74c3c!important}a.wy-text-danger:hover{color:#ed7669!important}.wy-text-neutral{color:#404040!important}a.wy-text-neutral:hover{color:#595959!important}.rst-content .toctree-wrapper>p.caption,h1,h2,h3,h4,h5,h6,legend{margin-top:0;font-weight:700;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif}p{line-height:24px;font-size:16px;margin:0 0 24px}h1{font-size:175%}.rst-content .toctree-wrapper>p.caption,h2{font-size:150%}h3{font-size:125%}h4{font-size:115%}h5{font-size:110%}h6{font-size:100%}hr{display:block;height:1px;border:0;border-top:1px solid #e1e4e5;margin:24px 0;padding:0}.rst-content code,.rst-content tt,code{white-space:nowrap;max-width:100%;background:#fff;border:1px solid #e1e4e5;font-size:75%;padding:0 5px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#e74c3c;overflow-x:auto}.rst-content tt.code-large,code.code-large{font-size:90%}.rst-content .section ul,.rst-content .toctree-wrapper ul,.rst-content section ul,.wy-plain-list-disc,article ul{list-style:disc;line-height:24px;margin-bottom:24px}.rst-content .section ul li,.rst-content .toctree-wrapper ul li,.rst-content section ul li,.wy-plain-list-disc li,article ul li{list-style:disc;margin-left:24px}.rst-content .section ul li p:last-child,.rst-content .section ul li ul,.rst-content .toctree-wrapper ul li p:last-child,.rst-content .toctree-wrapper ul li ul,.rst-content section ul li p:last-child,.rst-content section ul li ul,.wy-plain-list-disc li p:last-child,.wy-plain-list-disc li ul,article ul li p:last-child,article ul li ul{margin-bottom:0}.rst-content .section ul li li,.rst-content .toctree-wrapper ul li li,.rst-content section ul li li,.wy-plain-list-disc li li,article ul li li{list-style:circle}.rst-content .section ul li li li,.rst-content .toctree-wrapper ul li li li,.rst-content section ul li li li,.wy-plain-list-disc li li li,article ul li li li{list-style:square}.rst-content .section ul li ol li,.rst-content .toctree-wrapper ul li ol li,.rst-content section ul li ol li,.wy-plain-list-disc li ol li,article ul li ol li{list-style:decimal}.rst-content .section ol,.rst-content .section ol.arabic,.rst-content .toctree-wrapper ol,.rst-content .toctree-wrapper ol.arabic,.rst-content section ol,.rst-content section ol.arabic,.wy-plain-list-decimal,article ol{list-style:decimal;line-height:24px;margin-bottom:24px}.rst-content .section ol.arabic li,.rst-content .section ol li,.rst-content .toctree-wrapper ol.arabic li,.rst-content .toctree-wrapper ol li,.rst-content section ol.arabic li,.rst-content section ol li,.wy-plain-list-decimal li,article ol li{list-style:decimal;margin-left:24px}.rst-content .section ol.arabic li ul,.rst-content .section ol li p:last-child,.rst-content .section ol li ul,.rst-content .toctree-wrapper ol.arabic li ul,.rst-content .toctree-wrapper ol li p:last-child,.rst-content .toctree-wrapper ol li ul,.rst-content section ol.arabic li ul,.rst-content section ol li p:last-child,.rst-content section ol li ul,.wy-plain-list-decimal li p:last-child,.wy-plain-list-decimal li ul,article ol li p:last-child,article ol li ul{margin-bottom:0}.rst-content .section ol.arabic li ul li,.rst-content .section ol li ul li,.rst-content .toctree-wrapper ol.arabic li ul li,.rst-content .toctree-wrapper ol li ul li,.rst-content section ol.arabic li ul li,.rst-content section ol li ul li,.wy-plain-list-decimal li ul li,article ol li ul li{list-style:disc}.wy-breadcrumbs{*zoom:1}.wy-breadcrumbs:after,.wy-breadcrumbs:before{display:table;content:""}.wy-breadcrumbs:after{clear:both}.wy-breadcrumbs>li{display:inline-block;padding-top:5px}.wy-breadcrumbs>li.wy-breadcrumbs-aside{float:right}.rst-content .wy-breadcrumbs>li code,.rst-content .wy-breadcrumbs>li tt,.wy-breadcrumbs>li .rst-content tt,.wy-breadcrumbs>li code{all:inherit;color:inherit}.breadcrumb-item:before{content:"/";color:#bbb;font-size:13px;padding:0 6px 0 3px}.wy-breadcrumbs-extra{margin-bottom:0;color:#b3b3b3;font-size:80%;display:inline-block}@media screen and (max-width:480px){.wy-breadcrumbs-extra,.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}@media print{.wy-breadcrumbs li.wy-breadcrumbs-aside{display:none}}html{font-size:16px}.wy-affix{position:fixed;top:1.618em}.wy-menu a:hover{text-decoration:none}.wy-menu-horiz{*zoom:1}.wy-menu-horiz:after,.wy-menu-horiz:before{display:table;content:""}.wy-menu-horiz:after{clear:both}.wy-menu-horiz li,.wy-menu-horiz ul{display:inline-block}.wy-menu-horiz li:hover{background:hsla(0,0%,100%,.1)}.wy-menu-horiz li.divide-left{border-left:1px solid #404040}.wy-menu-horiz li.divide-right{border-right:1px solid #404040}.wy-menu-horiz a{height:32px;display:inline-block;line-height:32px;padding:0 16px}.wy-menu-vertical{width:300px}.wy-menu-vertical header,.wy-menu-vertical p.caption{color:#55a5d9;height:32px;line-height:32px;padding:0 1.618em;margin:12px 0 0;display:block;font-weight:700;text-transform:uppercase;font-size:85%;white-space:nowrap}.wy-menu-vertical ul{margin-bottom:0}.wy-menu-vertical li.divide-top{border-top:1px solid #404040}.wy-menu-vertical li.divide-bottom{border-bottom:1px solid #404040}.wy-menu-vertical li.current{background:#e3e3e3}.wy-menu-vertical li.current a{color:grey;border-right:1px solid #c9c9c9;padding:.4045em 2.427em}.wy-menu-vertical li.current a:hover{background:#d6d6d6}.rst-content .wy-menu-vertical li tt,.wy-menu-vertical li .rst-content tt,.wy-menu-vertical li code{border:none;background:inherit;color:inherit;padding-left:0;padding-right:0}.wy-menu-vertical li button.toctree-expand{display:block;float:left;margin-left:-1.2em;line-height:18px;color:#4d4d4d;border:none;background:none;padding:0}.wy-menu-vertical li.current>a,.wy-menu-vertical li.on a{color:#404040;font-weight:700;position:relative;background:#fcfcfc;border:none;padding:.4045em 1.618em}.wy-menu-vertical li.current>a:hover,.wy-menu-vertical li.on a:hover{background:#fcfcfc}.wy-menu-vertical li.current>a:hover button.toctree-expand,.wy-menu-vertical li.on a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.current>a button.toctree-expand,.wy-menu-vertical li.on a button.toctree-expand{display:block;line-height:18px;color:#333}.wy-menu-vertical li.toctree-l1.current>a{border-bottom:1px solid #c9c9c9;border-top:1px solid #c9c9c9}.wy-menu-vertical .toctree-l1.current .toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .toctree-l11>ul{display:none}.wy-menu-vertical .toctree-l1.current .current.toctree-l2>ul,.wy-menu-vertical .toctree-l2.current .current.toctree-l3>ul,.wy-menu-vertical .toctree-l3.current .current.toctree-l4>ul,.wy-menu-vertical .toctree-l4.current .current.toctree-l5>ul,.wy-menu-vertical .toctree-l5.current .current.toctree-l6>ul,.wy-menu-vertical .toctree-l6.current .current.toctree-l7>ul,.wy-menu-vertical .toctree-l7.current .current.toctree-l8>ul,.wy-menu-vertical .toctree-l8.current .current.toctree-l9>ul,.wy-menu-vertical .toctree-l9.current .current.toctree-l10>ul,.wy-menu-vertical .toctree-l10.current .current.toctree-l11>ul{display:block}.wy-menu-vertical li.toctree-l3,.wy-menu-vertical li.toctree-l4{font-size:.9em}.wy-menu-vertical li.toctree-l2 a,.wy-menu-vertical li.toctree-l3 a,.wy-menu-vertical li.toctree-l4 a,.wy-menu-vertical li.toctree-l5 a,.wy-menu-vertical li.toctree-l6 a,.wy-menu-vertical li.toctree-l7 a,.wy-menu-vertical li.toctree-l8 a,.wy-menu-vertical li.toctree-l9 a,.wy-menu-vertical li.toctree-l10 a{color:#404040}.wy-menu-vertical li.toctree-l2 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l3 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l4 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l5 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l6 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l7 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l8 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l9 a:hover button.toctree-expand,.wy-menu-vertical li.toctree-l10 a:hover button.toctree-expand{color:grey}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a,.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a,.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a,.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a,.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a,.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a,.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a,.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{display:block}.wy-menu-vertical li.toctree-l2.current>a{padding:.4045em 2.427em}.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{padding:.4045em 1.618em .4045em 4.045em}.wy-menu-vertical li.toctree-l3.current>a{padding:.4045em 4.045em}.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{padding:.4045em 1.618em .4045em 5.663em}.wy-menu-vertical li.toctree-l4.current>a{padding:.4045em 5.663em}.wy-menu-vertical li.toctree-l4.current li.toctree-l5>a{padding:.4045em 1.618em .4045em 7.281em}.wy-menu-vertical li.toctree-l5.current>a{padding:.4045em 7.281em}.wy-menu-vertical li.toctree-l5.current li.toctree-l6>a{padding:.4045em 1.618em .4045em 8.899em}.wy-menu-vertical li.toctree-l6.current>a{padding:.4045em 8.899em}.wy-menu-vertical li.toctree-l6.current li.toctree-l7>a{padding:.4045em 1.618em .4045em 10.517em}.wy-menu-vertical li.toctree-l7.current>a{padding:.4045em 10.517em}.wy-menu-vertical li.toctree-l7.current li.toctree-l8>a{padding:.4045em 1.618em .4045em 12.135em}.wy-menu-vertical li.toctree-l8.current>a{padding:.4045em 12.135em}.wy-menu-vertical li.toctree-l8.current li.toctree-l9>a{padding:.4045em 1.618em .4045em 13.753em}.wy-menu-vertical li.toctree-l9.current>a{padding:.4045em 13.753em}.wy-menu-vertical li.toctree-l9.current li.toctree-l10>a{padding:.4045em 1.618em .4045em 15.371em}.wy-menu-vertical li.toctree-l10.current>a{padding:.4045em 15.371em}.wy-menu-vertical li.toctree-l10.current li.toctree-l11>a{padding:.4045em 1.618em .4045em 16.989em}.wy-menu-vertical li.toctree-l2.current>a,.wy-menu-vertical li.toctree-l2.current li.toctree-l3>a{background:#c9c9c9}.wy-menu-vertical li.toctree-l2 button.toctree-expand{color:#a3a3a3}.wy-menu-vertical li.toctree-l3.current>a,.wy-menu-vertical li.toctree-l3.current li.toctree-l4>a{background:#bdbdbd}.wy-menu-vertical li.toctree-l3 button.toctree-expand{color:#969696}.wy-menu-vertical li.current ul{display:block}.wy-menu-vertical li ul{margin-bottom:0;display:none}.wy-menu-vertical li ul li a{margin-bottom:0;color:#d9d9d9;font-weight:400}.wy-menu-vertical a{line-height:18px;padding:.4045em 1.618em;display:block;position:relative;font-size:90%;color:#d9d9d9}.wy-menu-vertical a:hover{background-color:#4e4a4a;cursor:pointer}.wy-menu-vertical a:hover button.toctree-expand{color:#d9d9d9}.wy-menu-vertical a:active{background-color:#2980b9;cursor:pointer;color:#fff}.wy-menu-vertical a:active button.toctree-expand{color:#fff}.wy-side-nav-search{display:block;width:300px;padding:.809em;margin-bottom:.809em;z-index:200;background-color:#2980b9;text-align:center;color:#fcfcfc}.wy-side-nav-search input[type=text]{width:100%;border-radius:50px;padding:6px 12px;border-color:#2472a4}.wy-side-nav-search img{display:block;margin:auto auto .809em;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-side-nav-search .wy-dropdown>a,.wy-side-nav-search>a{color:#fcfcfc;font-size:100%;font-weight:700;display:inline-block;padding:4px 6px;margin-bottom:.809em;max-width:100%}.wy-side-nav-search .wy-dropdown>a:hover,.wy-side-nav-search>a:hover{background:hsla(0,0%,100%,.1)}.wy-side-nav-search .wy-dropdown>a img.logo,.wy-side-nav-search>a img.logo{display:block;margin:0 auto;height:auto;width:auto;border-radius:0;max-width:100%;background:transparent}.wy-side-nav-search .wy-dropdown>a.icon img.logo,.wy-side-nav-search>a.icon img.logo{margin-top:.85em}.wy-side-nav-search>div.version{margin-top:-.4045em;margin-bottom:.809em;font-weight:400;color:hsla(0,0%,100%,.3)}.wy-nav .wy-menu-vertical header{color:#2980b9}.wy-nav .wy-menu-vertical a{color:#b3b3b3}.wy-nav .wy-menu-vertical a:hover{background-color:#2980b9;color:#fff}[data-menu-wrap]{-webkit-transition:all .2s ease-in;-moz-transition:all .2s ease-in;transition:all .2s ease-in;position:absolute;opacity:1;width:100%;opacity:0}[data-menu-wrap].move-center{left:0;right:auto;opacity:1}[data-menu-wrap].move-left{right:auto;left:-100%;opacity:0}[data-menu-wrap].move-right{right:-100%;left:auto;opacity:0}.wy-body-for-nav{background:#fcfcfc}.wy-grid-for-nav{position:absolute;width:100%;height:100%}.wy-nav-side{position:fixed;top:0;bottom:0;left:0;padding-bottom:2em;width:300px;overflow-x:hidden;overflow-y:hidden;min-height:100%;color:#9b9b9b;background:#343131;z-index:200}.wy-side-scroll{width:320px;position:relative;overflow-x:hidden;overflow-y:scroll;height:100%}.wy-nav-top{display:none;background:#2980b9;color:#fff;padding:.4045em .809em;position:relative;line-height:50px;text-align:center;font-size:100%;*zoom:1}.wy-nav-top:after,.wy-nav-top:before{display:table;content:""}.wy-nav-top:after{clear:both}.wy-nav-top a{color:#fff;font-weight:700}.wy-nav-top img{margin-right:12px;height:45px;width:45px;background-color:#2980b9;padding:5px;border-radius:100%}.wy-nav-top i{font-size:30px;float:left;cursor:pointer;padding-top:inherit}.wy-nav-content-wrap{margin-left:300px;background:#fcfcfc;min-height:100%}.wy-nav-content{padding:1.618em 3.236em;height:100%;max-width:800px;margin:auto}.wy-body-mask{position:fixed;width:100%;height:100%;background:rgba(0,0,0,.2);display:none;z-index:499}.wy-body-mask.on{display:block}footer{color:grey}footer p{margin-bottom:12px}.rst-content footer span.commit tt,footer span.commit .rst-content tt,footer span.commit code{padding:0;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:1em;background:none;border:none;color:grey}.rst-footer-buttons{*zoom:1}.rst-footer-buttons:after,.rst-footer-buttons:before{width:100%;display:table;content:""}.rst-footer-buttons:after{clear:both}.rst-breadcrumbs-buttons{margin-top:12px;*zoom:1}.rst-breadcrumbs-buttons:after,.rst-breadcrumbs-buttons:before{display:table;content:""}.rst-breadcrumbs-buttons:after{clear:both}#search-results .search li{margin-bottom:24px;border-bottom:1px solid #e1e4e5;padding-bottom:24px}#search-results .search li:first-child{border-top:1px solid #e1e4e5;padding-top:24px}#search-results .search li a{font-size:120%;margin-bottom:12px;display:inline-block}#search-results .context{color:grey;font-size:90%}.genindextable li>ul{margin-left:24px}@media screen and (max-width:768px){.wy-body-for-nav{background:#fcfcfc}.wy-nav-top{display:block}.wy-nav-side{left:-300px}.wy-nav-side.shift{width:85%;left:0}.wy-menu.wy-menu-vertical,.wy-side-nav-search,.wy-side-scroll{width:auto}.wy-nav-content-wrap{margin-left:0}.wy-nav-content-wrap .wy-nav-content{padding:1.618em}.wy-nav-content-wrap.shift{position:fixed;min-width:100%;left:85%;top:0;height:100%;overflow:hidden}}@media screen and (min-width:1100px){.wy-nav-content-wrap{background:rgba(0,0,0,.05)}.wy-nav-content{margin:0;background:#fcfcfc}}@media print{.rst-versions,.wy-nav-side,footer{display:none}.wy-nav-content-wrap{margin-left:0}}.rst-versions{position:fixed;bottom:0;left:0;width:300px;color:#fcfcfc;background:#1f1d1d;font-family:Lato,proxima-nova,Helvetica Neue,Arial,sans-serif;z-index:400}.rst-versions a{color:#2980b9;text-decoration:none}.rst-versions .rst-badge-small{display:none}.rst-versions .rst-current-version{padding:12px;background-color:#272525;display:block;text-align:right;font-size:90%;cursor:pointer;color:#27ae60;*zoom:1}.rst-versions .rst-current-version:after,.rst-versions .rst-current-version:before{display:table;content:""}.rst-versions .rst-current-version:after{clear:both}.rst-content .code-block-caption .rst-versions .rst-current-version .headerlink,.rst-content .eqno .rst-versions .rst-current-version .headerlink,.rst-content .rst-versions .rst-current-version .admonition-title,.rst-content code.download .rst-versions .rst-current-version span:first-child,.rst-content dl dt .rst-versions .rst-current-version .headerlink,.rst-content h1 .rst-versions .rst-current-version .headerlink,.rst-content h2 .rst-versions .rst-current-version .headerlink,.rst-content h3 .rst-versions .rst-current-version .headerlink,.rst-content h4 .rst-versions .rst-current-version .headerlink,.rst-content h5 .rst-versions .rst-current-version .headerlink,.rst-content h6 .rst-versions .rst-current-version .headerlink,.rst-content p .rst-versions .rst-current-version .headerlink,.rst-content table>caption .rst-versions .rst-current-version .headerlink,.rst-content tt.download .rst-versions .rst-current-version span:first-child,.rst-versions .rst-current-version .fa,.rst-versions .rst-current-version .icon,.rst-versions .rst-current-version .rst-content .admonition-title,.rst-versions .rst-current-version .rst-content .code-block-caption .headerlink,.rst-versions .rst-current-version .rst-content .eqno .headerlink,.rst-versions .rst-current-version .rst-content code.download span:first-child,.rst-versions .rst-current-version .rst-content dl dt .headerlink,.rst-versions .rst-current-version .rst-content h1 .headerlink,.rst-versions .rst-current-version .rst-content h2 .headerlink,.rst-versions .rst-current-version .rst-content h3 .headerlink,.rst-versions .rst-current-version .rst-content h4 .headerlink,.rst-versions .rst-current-version .rst-content h5 .headerlink,.rst-versions .rst-current-version .rst-content h6 .headerlink,.rst-versions .rst-current-version .rst-content p .headerlink,.rst-versions .rst-current-version .rst-content table>caption .headerlink,.rst-versions .rst-current-version .rst-content tt.download span:first-child,.rst-versions .rst-current-version .wy-menu-vertical li button.toctree-expand,.wy-menu-vertical li .rst-versions .rst-current-version button.toctree-expand{color:#fcfcfc}.rst-versions .rst-current-version .fa-book,.rst-versions .rst-current-version .icon-book{float:left}.rst-versions .rst-current-version.rst-out-of-date{background-color:#e74c3c;color:#fff}.rst-versions .rst-current-version.rst-active-old-version{background-color:#f1c40f;color:#000}.rst-versions.shift-up{height:auto;max-height:100%;overflow-y:scroll}.rst-versions.shift-up .rst-other-versions{display:block}.rst-versions .rst-other-versions{font-size:90%;padding:12px;color:grey;display:none}.rst-versions .rst-other-versions hr{display:block;height:1px;border:0;margin:20px 0;padding:0;border-top:1px solid #413d3d}.rst-versions .rst-other-versions dd{display:inline-block;margin:0}.rst-versions .rst-other-versions dd a{display:inline-block;padding:6px;color:#fcfcfc}.rst-versions.rst-badge{width:auto;bottom:20px;right:20px;left:auto;border:none;max-width:300px;max-height:90%}.rst-versions.rst-badge .fa-book,.rst-versions.rst-badge .icon-book{float:none;line-height:30px}.rst-versions.rst-badge.shift-up .rst-current-version{text-align:right}.rst-versions.rst-badge.shift-up .rst-current-version .fa-book,.rst-versions.rst-badge.shift-up .rst-current-version .icon-book{float:left}.rst-versions.rst-badge>.rst-current-version{width:auto;height:30px;line-height:30px;padding:0 6px;display:block;text-align:center}@media screen and (max-width:768px){.rst-versions{width:85%;display:none}.rst-versions.shift{display:block}}.rst-content .toctree-wrapper>p.caption,.rst-content h1,.rst-content h2,.rst-content h3,.rst-content h4,.rst-content h5,.rst-content h6{margin-bottom:24px}.rst-content img{max-width:100%;height:auto}.rst-content div.figure,.rst-content figure{margin-bottom:24px}.rst-content div.figure .caption-text,.rst-content figure .caption-text{font-style:italic}.rst-content div.figure p:last-child.caption,.rst-content figure p:last-child.caption{margin-bottom:0}.rst-content div.figure.align-center,.rst-content figure.align-center{text-align:center}.rst-content .section>a>img,.rst-content .section>img,.rst-content section>a>img,.rst-content section>img{margin-bottom:24px}.rst-content abbr[title]{text-decoration:none}.rst-content.style-external-links a.reference.external:after{font-family:FontAwesome;content:"\f08e";color:#b3b3b3;vertical-align:super;font-size:60%;margin:0 .2em}.rst-content blockquote{margin-left:24px;line-height:24px;margin-bottom:24px}.rst-content pre.literal-block{white-space:pre;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;display:block;overflow:auto}.rst-content div[class^=highlight],.rst-content pre.literal-block{border:1px solid #e1e4e5;overflow-x:auto;margin:1px 0 24px}.rst-content div[class^=highlight] div[class^=highlight],.rst-content pre.literal-block div[class^=highlight]{padding:0;border:none;margin:0}.rst-content div[class^=highlight] td.code{width:100%}.rst-content .linenodiv pre{border-right:1px solid #e6e9ea;margin:0;padding:12px;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;user-select:none;pointer-events:none}.rst-content div[class^=highlight] pre{white-space:pre;margin:0;padding:12px;display:block;overflow:auto}.rst-content div[class^=highlight] pre .hll{display:block;margin:0 -12px;padding:0 12px}.rst-content .linenodiv pre,.rst-content div[class^=highlight] pre,.rst-content pre.literal-block{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;font-size:12px;line-height:1.4}.rst-content div.highlight .gp,.rst-content div.highlight span.linenos{user-select:none;pointer-events:none}.rst-content div.highlight span.linenos{display:inline-block;padding-left:0;padding-right:12px;margin-right:12px;border-right:1px solid #e6e9ea}.rst-content .code-block-caption{font-style:italic;font-size:85%;line-height:1;padding:1em 0;text-align:center}@media print{.rst-content .codeblock,.rst-content div[class^=highlight],.rst-content div[class^=highlight] pre{white-space:pre-wrap}}.rst-content .admonition,.rst-content .admonition-todo,.rst-content .attention,.rst-content .caution,.rst-content .danger,.rst-content .error,.rst-content .hint,.rst-content .important,.rst-content .note,.rst-content .seealso,.rst-content .tip,.rst-content .warning{clear:both}.rst-content .admonition-todo .last,.rst-content .admonition-todo>:last-child,.rst-content .admonition .last,.rst-content .admonition>:last-child,.rst-content .attention .last,.rst-content .attention>:last-child,.rst-content .caution .last,.rst-content .caution>:last-child,.rst-content .danger .last,.rst-content .danger>:last-child,.rst-content .error .last,.rst-content .error>:last-child,.rst-content .hint .last,.rst-content .hint>:last-child,.rst-content .important .last,.rst-content .important>:last-child,.rst-content .note .last,.rst-content .note>:last-child,.rst-content .seealso .last,.rst-content .seealso>:last-child,.rst-content .tip .last,.rst-content .tip>:last-child,.rst-content .warning .last,.rst-content .warning>:last-child{margin-bottom:0}.rst-content .admonition-title:before{margin-right:4px}.rst-content .admonition table{border-color:rgba(0,0,0,.1)}.rst-content .admonition table td,.rst-content .admonition table th{background:transparent!important;border-color:rgba(0,0,0,.1)!important}.rst-content .section ol.loweralpha,.rst-content .section ol.loweralpha>li,.rst-content .toctree-wrapper ol.loweralpha,.rst-content .toctree-wrapper ol.loweralpha>li,.rst-content section ol.loweralpha,.rst-content section ol.loweralpha>li{list-style:lower-alpha}.rst-content .section ol.upperalpha,.rst-content .section ol.upperalpha>li,.rst-content .toctree-wrapper ol.upperalpha,.rst-content .toctree-wrapper ol.upperalpha>li,.rst-content section ol.upperalpha,.rst-content section ol.upperalpha>li{list-style:upper-alpha}.rst-content .section ol li>*,.rst-content .section ul li>*,.rst-content .toctree-wrapper ol li>*,.rst-content .toctree-wrapper ul li>*,.rst-content section ol li>*,.rst-content section ul li>*{margin-top:12px;margin-bottom:12px}.rst-content .section ol li>:first-child,.rst-content .section ul li>:first-child,.rst-content .toctree-wrapper ol li>:first-child,.rst-content .toctree-wrapper ul li>:first-child,.rst-content section ol li>:first-child,.rst-content section ul li>:first-child{margin-top:0}.rst-content .section ol li>p,.rst-content .section ol li>p:last-child,.rst-content .section ul li>p,.rst-content .section ul li>p:last-child,.rst-content .toctree-wrapper ol li>p,.rst-content .toctree-wrapper ol li>p:last-child,.rst-content .toctree-wrapper ul li>p,.rst-content .toctree-wrapper ul li>p:last-child,.rst-content section ol li>p,.rst-content section ol li>p:last-child,.rst-content section ul li>p,.rst-content section ul li>p:last-child{margin-bottom:12px}.rst-content .section ol li>p:only-child,.rst-content .section ol li>p:only-child:last-child,.rst-content .section ul li>p:only-child,.rst-content .section ul li>p:only-child:last-child,.rst-content .toctree-wrapper ol li>p:only-child,.rst-content .toctree-wrapper ol li>p:only-child:last-child,.rst-content .toctree-wrapper ul li>p:only-child,.rst-content .toctree-wrapper ul li>p:only-child:last-child,.rst-content section ol li>p:only-child,.rst-content section ol li>p:only-child:last-child,.rst-content section ul li>p:only-child,.rst-content section ul li>p:only-child:last-child{margin-bottom:0}.rst-content .section ol li>ol,.rst-content .section ol li>ul,.rst-content .section ul li>ol,.rst-content .section ul li>ul,.rst-content .toctree-wrapper ol li>ol,.rst-content .toctree-wrapper ol li>ul,.rst-content .toctree-wrapper ul li>ol,.rst-content .toctree-wrapper ul li>ul,.rst-content section ol li>ol,.rst-content section ol li>ul,.rst-content section ul li>ol,.rst-content section ul li>ul{margin-bottom:12px}.rst-content .section ol.simple li>*,.rst-content .section ol.simple li ol,.rst-content .section ol.simple li ul,.rst-content .section ul.simple li>*,.rst-content .section ul.simple li ol,.rst-content .section ul.simple li ul,.rst-content .toctree-wrapper ol.simple li>*,.rst-content .toctree-wrapper ol.simple li ol,.rst-content .toctree-wrapper ol.simple li ul,.rst-content .toctree-wrapper ul.simple li>*,.rst-content .toctree-wrapper ul.simple li ol,.rst-content .toctree-wrapper ul.simple li ul,.rst-content section ol.simple li>*,.rst-content section ol.simple li ol,.rst-content section ol.simple li ul,.rst-content section ul.simple li>*,.rst-content section ul.simple li ol,.rst-content section ul.simple li ul{margin-top:0;margin-bottom:0}.rst-content .line-block{margin-left:0;margin-bottom:24px;line-height:24px}.rst-content .line-block .line-block{margin-left:24px;margin-bottom:0}.rst-content .topic-title{font-weight:700;margin-bottom:12px}.rst-content .toc-backref{color:#404040}.rst-content .align-right{float:right;margin:0 0 24px 24px}.rst-content .align-left{float:left;margin:0 24px 24px 0}.rst-content .align-center{margin:auto}.rst-content .align-center:not(table){display:block}.rst-content .code-block-caption .headerlink,.rst-content .eqno .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink,.rst-content dl dt .headerlink,.rst-content h1 .headerlink,.rst-content h2 .headerlink,.rst-content h3 .headerlink,.rst-content h4 .headerlink,.rst-content h5 .headerlink,.rst-content h6 .headerlink,.rst-content p.caption .headerlink,.rst-content p .headerlink,.rst-content table>caption .headerlink{opacity:0;font-size:14px;font-family:FontAwesome;margin-left:.5em}.rst-content .code-block-caption .headerlink:focus,.rst-content .code-block-caption:hover .headerlink,.rst-content .eqno .headerlink:focus,.rst-content .eqno:hover .headerlink,.rst-content .toctree-wrapper>p.caption .headerlink:focus,.rst-content .toctree-wrapper>p.caption:hover .headerlink,.rst-content dl dt .headerlink:focus,.rst-content dl dt:hover .headerlink,.rst-content h1 .headerlink:focus,.rst-content h1:hover .headerlink,.rst-content h2 .headerlink:focus,.rst-content h2:hover .headerlink,.rst-content h3 .headerlink:focus,.rst-content h3:hover .headerlink,.rst-content h4 .headerlink:focus,.rst-content h4:hover .headerlink,.rst-content h5 .headerlink:focus,.rst-content h5:hover .headerlink,.rst-content h6 .headerlink:focus,.rst-content h6:hover .headerlink,.rst-content p.caption .headerlink:focus,.rst-content p.caption:hover .headerlink,.rst-content p .headerlink:focus,.rst-content p:hover .headerlink,.rst-content table>caption .headerlink:focus,.rst-content table>caption:hover .headerlink{opacity:1}.rst-content p a{overflow-wrap:anywhere}.rst-content .wy-table td p,.rst-content .wy-table td ul,.rst-content .wy-table th p,.rst-content .wy-table th ul,.rst-content table.docutils td p,.rst-content table.docutils td ul,.rst-content table.docutils th p,.rst-content table.docutils th ul,.rst-content table.field-list td p,.rst-content table.field-list td ul,.rst-content table.field-list th p,.rst-content table.field-list th ul{font-size:inherit}.rst-content .btn:focus{outline:2px solid}.rst-content table>caption .headerlink:after{font-size:12px}.rst-content .centered{text-align:center}.rst-content .sidebar{float:right;width:40%;display:block;margin:0 0 24px 24px;padding:24px;background:#f3f6f6;border:1px solid #e1e4e5}.rst-content .sidebar dl,.rst-content .sidebar p,.rst-content .sidebar ul{font-size:90%}.rst-content .sidebar .last,.rst-content .sidebar>:last-child{margin-bottom:0}.rst-content .sidebar .sidebar-title{display:block;font-family:Roboto Slab,ff-tisa-web-pro,Georgia,Arial,sans-serif;font-weight:700;background:#e1e4e5;padding:6px 12px;margin:-24px -24px 24px;font-size:100%}.rst-content .highlighted{background:#f1c40f;box-shadow:0 0 0 2px #f1c40f;display:inline;font-weight:700}.rst-content .citation-reference,.rst-content .footnote-reference{vertical-align:baseline;position:relative;top:-.4em;line-height:0;font-size:90%}.rst-content .citation-reference>span.fn-bracket,.rst-content .footnote-reference>span.fn-bracket{display:none}.rst-content .hlist{width:100%}.rst-content dl dt span.classifier:before{content:" : "}.rst-content dl dt span.classifier-delimiter{display:none!important}html.writer-html4 .rst-content table.docutils.citation,html.writer-html4 .rst-content table.docutils.footnote{background:none;border:none}html.writer-html4 .rst-content table.docutils.citation td,html.writer-html4 .rst-content table.docutils.citation tr,html.writer-html4 .rst-content table.docutils.footnote td,html.writer-html4 .rst-content table.docutils.footnote tr{border:none;background-color:transparent!important;white-space:normal}html.writer-html4 .rst-content table.docutils.citation td.label,html.writer-html4 .rst-content table.docutils.footnote td.label{padding-left:0;padding-right:0;vertical-align:top}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.field-list,html.writer-html5 .rst-content dl.footnote{display:grid;grid-template-columns:auto minmax(80%,95%)}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dt{display:inline-grid;grid-template-columns:max-content auto}html.writer-html5 .rst-content aside.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content div.citation{display:grid;grid-template-columns:auto auto minmax(.65rem,auto) minmax(40%,95%)}html.writer-html5 .rst-content aside.citation>span.label,html.writer-html5 .rst-content aside.footnote>span.label,html.writer-html5 .rst-content div.citation>span.label{grid-column-start:1;grid-column-end:2}html.writer-html5 .rst-content aside.citation>span.backrefs,html.writer-html5 .rst-content aside.footnote>span.backrefs,html.writer-html5 .rst-content div.citation>span.backrefs{grid-column-start:2;grid-column-end:3;grid-row-start:1;grid-row-end:3}html.writer-html5 .rst-content aside.citation>p,html.writer-html5 .rst-content aside.footnote>p,html.writer-html5 .rst-content div.citation>p{grid-column-start:4;grid-column-end:5}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.field-list,html.writer-html5 .rst-content dl.footnote{margin-bottom:24px}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dt{padding-left:1rem}html.writer-html5 .rst-content dl.citation>dd,html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.field-list>dd,html.writer-html5 .rst-content dl.field-list>dt,html.writer-html5 .rst-content dl.footnote>dd,html.writer-html5 .rst-content dl.footnote>dt{margin-bottom:0}html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.footnote{font-size:.9rem}html.writer-html5 .rst-content dl.citation>dt,html.writer-html5 .rst-content dl.footnote>dt{margin:0 .5rem .5rem 0;line-height:1.2rem;word-break:break-all;font-weight:400}html.writer-html5 .rst-content dl.citation>dt>span.brackets:before,html.writer-html5 .rst-content dl.footnote>dt>span.brackets:before{content:"["}html.writer-html5 .rst-content dl.citation>dt>span.brackets:after,html.writer-html5 .rst-content dl.footnote>dt>span.brackets:after{content:"]"}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref{text-align:left;font-style:italic;margin-left:.65rem;word-break:break-word;word-spacing:-.1rem;max-width:5rem}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref>a,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref>a{word-break:keep-all}html.writer-html5 .rst-content dl.citation>dt>span.fn-backref>a:not(:first-child):before,html.writer-html5 .rst-content dl.footnote>dt>span.fn-backref>a:not(:first-child):before{content:" "}html.writer-html5 .rst-content dl.citation>dd,html.writer-html5 .rst-content dl.footnote>dd{margin:0 0 .5rem;line-height:1.2rem}html.writer-html5 .rst-content dl.citation>dd p,html.writer-html5 .rst-content dl.footnote>dd p{font-size:.9rem}html.writer-html5 .rst-content aside.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content div.citation{padding-left:1rem;padding-right:1rem;font-size:.9rem;line-height:1.2rem}html.writer-html5 .rst-content aside.citation p,html.writer-html5 .rst-content aside.footnote p,html.writer-html5 .rst-content div.citation p{font-size:.9rem;line-height:1.2rem;margin-bottom:12px}html.writer-html5 .rst-content aside.citation span.backrefs,html.writer-html5 .rst-content aside.footnote span.backrefs,html.writer-html5 .rst-content div.citation span.backrefs{text-align:left;font-style:italic;margin-left:.65rem;word-break:break-word;word-spacing:-.1rem;max-width:5rem}html.writer-html5 .rst-content aside.citation span.backrefs>a,html.writer-html5 .rst-content aside.footnote span.backrefs>a,html.writer-html5 .rst-content div.citation span.backrefs>a{word-break:keep-all}html.writer-html5 .rst-content aside.citation span.backrefs>a:not(:first-child):before,html.writer-html5 .rst-content aside.footnote span.backrefs>a:not(:first-child):before,html.writer-html5 .rst-content div.citation span.backrefs>a:not(:first-child):before{content:" "}html.writer-html5 .rst-content aside.citation span.label,html.writer-html5 .rst-content aside.footnote span.label,html.writer-html5 .rst-content div.citation span.label{line-height:1.2rem}html.writer-html5 .rst-content aside.citation-list,html.writer-html5 .rst-content aside.footnote-list,html.writer-html5 .rst-content div.citation-list{margin-bottom:24px}html.writer-html5 .rst-content dl.option-list kbd{font-size:.9rem}.rst-content table.docutils.footnote,html.writer-html4 .rst-content table.docutils.citation,html.writer-html5 .rst-content aside.footnote,html.writer-html5 .rst-content aside.footnote-list aside.footnote,html.writer-html5 .rst-content div.citation-list>div.citation,html.writer-html5 .rst-content dl.citation,html.writer-html5 .rst-content dl.footnote{color:grey}.rst-content table.docutils.footnote code,.rst-content table.docutils.footnote tt,html.writer-html4 .rst-content table.docutils.citation code,html.writer-html4 .rst-content table.docutils.citation tt,html.writer-html5 .rst-content aside.footnote-list aside.footnote code,html.writer-html5 .rst-content aside.footnote-list aside.footnote tt,html.writer-html5 .rst-content aside.footnote code,html.writer-html5 .rst-content aside.footnote tt,html.writer-html5 .rst-content div.citation-list>div.citation code,html.writer-html5 .rst-content div.citation-list>div.citation tt,html.writer-html5 .rst-content dl.citation code,html.writer-html5 .rst-content dl.citation tt,html.writer-html5 .rst-content dl.footnote code,html.writer-html5 .rst-content dl.footnote tt{color:#555}.rst-content .wy-table-responsive.citation,.rst-content .wy-table-responsive.footnote{margin-bottom:0}.rst-content .wy-table-responsive.citation+:not(.citation),.rst-content .wy-table-responsive.footnote+:not(.footnote){margin-top:24px}.rst-content .wy-table-responsive.citation:last-child,.rst-content .wy-table-responsive.footnote:last-child{margin-bottom:24px}.rst-content table.docutils th{border-color:#e1e4e5}html.writer-html5 .rst-content table.docutils th{border:1px solid #e1e4e5}html.writer-html5 .rst-content table.docutils td>p,html.writer-html5 .rst-content table.docutils th>p{line-height:1rem;margin-bottom:0;font-size:.9rem}.rst-content table.docutils td .last,.rst-content table.docutils td .last>:last-child{margin-bottom:0}.rst-content table.field-list,.rst-content table.field-list td{border:none}.rst-content table.field-list td p{line-height:inherit}.rst-content table.field-list td>strong{display:inline-block}.rst-content table.field-list .field-name{padding-right:10px;text-align:left;white-space:nowrap}.rst-content table.field-list .field-body{text-align:left}.rst-content code,.rst-content tt{color:#000;font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;padding:2px 5px}.rst-content code big,.rst-content code em,.rst-content tt big,.rst-content tt em{font-size:100%!important;line-height:normal}.rst-content code.literal,.rst-content tt.literal{color:#e74c3c;white-space:normal}.rst-content code.xref,.rst-content tt.xref,a .rst-content code,a .rst-content tt{font-weight:700;color:#404040;overflow-wrap:normal}.rst-content kbd,.rst-content pre,.rst-content samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace}.rst-content a code,.rst-content a tt{color:#2980b9}.rst-content dl{margin-bottom:24px}.rst-content dl dt{font-weight:700;margin-bottom:12px}.rst-content dl ol,.rst-content dl p,.rst-content dl table,.rst-content dl ul{margin-bottom:12px}.rst-content dl dd{margin:0 0 12px 24px;line-height:24px}.rst-content dl dd>ol:last-child,.rst-content dl dd>p:last-child,.rst-content dl dd>table:last-child,.rst-content dl dd>ul:last-child{margin-bottom:0}html.writer-html4 .rst-content dl:not(.docutils),html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple){margin-bottom:24px}html.writer-html4 .rst-content dl:not(.docutils)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt{display:table;margin:6px 0;font-size:90%;line-height:normal;background:#e7f2fa;color:#2980b9;border-top:3px solid #6ab0de;padding:6px;position:relative}html.writer-html4 .rst-content dl:not(.docutils)>dt:before,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt:before{color:#6ab0de}html.writer-html4 .rst-content dl:not(.docutils)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt{margin-bottom:6px;border:none;border-left:3px solid #ccc;background:#f0f0f0;color:#555}html.writer-html4 .rst-content dl:not(.docutils) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) dl:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt .headerlink{color:#404040;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils)>dt:first-child,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple)>dt:first-child{margin-top:0}html.writer-html4 .rst-content dl:not(.docutils) code.descclassname,html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descclassname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descname{background-color:transparent;border:none;padding:0;font-size:100%!important}html.writer-html4 .rst-content dl:not(.docutils) code.descname,html.writer-html4 .rst-content dl:not(.docutils) tt.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) code.descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) tt.descname{font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .optional,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .optional{display:inline-block;padding:0 4px;color:#000;font-weight:700}html.writer-html4 .rst-content dl:not(.docutils) .property,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .property{display:inline-block;padding-right:8px;max-width:100%}html.writer-html4 .rst-content dl:not(.docutils) .k,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .k{font-style:italic}html.writer-html4 .rst-content dl:not(.docutils) .descclassname,html.writer-html4 .rst-content dl:not(.docutils) .descname,html.writer-html4 .rst-content dl:not(.docutils) .sig-name,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .descclassname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .descname,html.writer-html5 .rst-content dl[class]:not(.option-list):not(.field-list):not(.footnote):not(.citation):not(.glossary):not(.simple) .sig-name{font-family:SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,Courier,monospace;color:#000}.rst-content .viewcode-back,.rst-content .viewcode-link{display:inline-block;color:#27ae60;font-size:80%;padding-left:24px}.rst-content .viewcode-back{display:block;float:right}.rst-content p.rubric{margin-bottom:12px;font-weight:700}.rst-content code.download,.rst-content tt.download{background:inherit;padding:inherit;font-weight:400;font-family:inherit;font-size:inherit;color:inherit;border:inherit;white-space:inherit}.rst-content code.download span:first-child,.rst-content tt.download span:first-child{-webkit-font-smoothing:subpixel-antialiased}.rst-content code.download span:first-child:before,.rst-content tt.download span:first-child:before{margin-right:4px}.rst-content .guilabel,.rst-content .menuselection{font-size:80%;font-weight:700;border-radius:4px;padding:2.4px 6px;margin:auto 2px}.rst-content .guilabel,.rst-content .menuselection{border:1px solid #7fbbe3;background:#e7f2fa}.rst-content :not(dl.option-list)>:not(dt):not(kbd):not(.kbd)>.kbd,.rst-content :not(dl.option-list)>:not(dt):not(kbd):not(.kbd)>kbd{color:inherit;font-size:80%;background-color:#fff;border:1px solid #a6a6a6;border-radius:4px;box-shadow:0 2px grey;padding:2.4px 6px;margin:auto 0}.rst-content .versionmodified{font-style:italic}@media screen and (max-width:480px){.rst-content .sidebar{width:100%}}span[id*=MathJax-Span]{color:#404040}.math{text-align:center}@font-face{font-family:Lato;src:url(fonts/lato-normal.woff2?bd03a2cc277bbbc338d464e679fe9942) format("woff2"),url(fonts/lato-normal.woff?27bd77b9162d388cb8d4c4217c7c5e2a) format("woff");font-weight:400;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold.woff2?cccb897485813c7c256901dbca54ecf2) format("woff2"),url(fonts/lato-bold.woff?d878b6c29b10beca227e9eef4246111b) format("woff");font-weight:700;font-style:normal;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-bold-italic.woff2?0b6bb6725576b072c5d0b02ecdd1900d) format("woff2"),url(fonts/lato-bold-italic.woff?9c7e4e9eb485b4a121c760e61bc3707c) format("woff");font-weight:700;font-style:italic;font-display:block}@font-face{font-family:Lato;src:url(fonts/lato-normal-italic.woff2?4eb103b4d12be57cb1d040ed5e162e9d) format("woff2"),url(fonts/lato-normal-italic.woff?f28f2d6482446544ef1ea1ccc6dd5892) format("woff");font-weight:400;font-style:italic;font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:400;src:url(fonts/Roboto-Slab-Regular.woff2?7abf5b8d04d26a2cafea937019bca958) format("woff2"),url(fonts/Roboto-Slab-Regular.woff?c1be9284088d487c5e3ff0a10a92e58c) format("woff");font-display:block}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:700;src:url(fonts/Roboto-Slab-Bold.woff2?9984f4a9bda09be08e83f2506954adbe) format("woff2"),url(fonts/Roboto-Slab-Bold.woff?bed5564a116b05148e3b3bea6fb1162a) format("woff");font-display:block}python3-saml-1.16.0/docs/saml2/_static/doctools.js000066400000000000000000000105701451074743100217260ustar00rootroot00000000000000/* * doctools.js * ~~~~~~~~~~~ * * Base JavaScript utilities for all Sphinx HTML documentation. * * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ "use strict"; const BLACKLISTED_KEY_CONTROL_ELEMENTS = new Set([ "TEXTAREA", "INPUT", "SELECT", "BUTTON", ]); const _ready = (callback) => { if (document.readyState !== "loading") { callback(); } else { document.addEventListener("DOMContentLoaded", callback); } }; /** * Small JavaScript module for the documentation. */ const Documentation = { init: () => { Documentation.initDomainIndexTable(); Documentation.initOnKeyListeners(); }, /** * i18n support */ TRANSLATIONS: {}, PLURAL_EXPR: (n) => (n === 1 ? 0 : 1), LOCALE: "unknown", // gettext and ngettext don't access this so that the functions // can safely bound to a different name (_ = Documentation.gettext) gettext: (string) => { const translated = Documentation.TRANSLATIONS[string]; switch (typeof translated) { case "undefined": return string; // no translation case "string": return translated; // translation exists default: return translated[0]; // (singular, plural) translation tuple exists } }, ngettext: (singular, plural, n) => { const translated = Documentation.TRANSLATIONS[singular]; if (typeof translated !== "undefined") return translated[Documentation.PLURAL_EXPR(n)]; return n === 1 ? singular : plural; }, addTranslations: (catalog) => { Object.assign(Documentation.TRANSLATIONS, catalog.messages); Documentation.PLURAL_EXPR = new Function( "n", `return (${catalog.plural_expr})` ); Documentation.LOCALE = catalog.locale; }, /** * helper function to focus on search bar */ focusSearchBar: () => { document.querySelectorAll("input[name=q]")[0]?.focus(); }, /** * Initialise the domain index toggle buttons */ initDomainIndexTable: () => { const toggler = (el) => { const idNumber = el.id.substr(7); const toggledRows = document.querySelectorAll(`tr.cg-${idNumber}`); if (el.src.substr(-9) === "minus.png") { el.src = `${el.src.substr(0, el.src.length - 9)}plus.png`; toggledRows.forEach((el) => (el.style.display = "none")); } else { el.src = `${el.src.substr(0, el.src.length - 8)}minus.png`; toggledRows.forEach((el) => (el.style.display = "")); } }; const togglerElements = document.querySelectorAll("img.toggler"); togglerElements.forEach((el) => el.addEventListener("click", (event) => toggler(event.currentTarget)) ); togglerElements.forEach((el) => (el.style.display = "")); if (DOCUMENTATION_OPTIONS.COLLAPSE_INDEX) togglerElements.forEach(toggler); }, initOnKeyListeners: () => { // only install a listener if it is really needed if ( !DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS && !DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS ) return; document.addEventListener("keydown", (event) => { // bail for input elements if (BLACKLISTED_KEY_CONTROL_ELEMENTS.has(document.activeElement.tagName)) return; // bail with special keys if (event.altKey || event.ctrlKey || event.metaKey) return; if (!event.shiftKey) { switch (event.key) { case "ArrowLeft": if (!DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS) break; const prevLink = document.querySelector('link[rel="prev"]'); if (prevLink && prevLink.href) { window.location.href = prevLink.href; event.preventDefault(); } break; case "ArrowRight": if (!DOCUMENTATION_OPTIONS.NAVIGATION_WITH_KEYS) break; const nextLink = document.querySelector('link[rel="next"]'); if (nextLink && nextLink.href) { window.location.href = nextLink.href; event.preventDefault(); } break; } } // some keyboard layouts may need Shift to get / switch (event.key) { case "/": if (!DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS) break; Documentation.focusSearchBar(); event.preventDefault(); } }); }, }; // quick alias for translations const _ = Documentation.gettext; _ready(Documentation.init); python3-saml-1.16.0/docs/saml2/_static/documentation_options.js000066400000000000000000000006401451074743100245210ustar00rootroot00000000000000var DOCUMENTATION_OPTIONS = { URL_ROOT: document.getElementById("documentation_options").getAttribute('data-url_root'), VERSION: '1', LANGUAGE: 'en', COLLAPSE_INDEX: false, BUILDER: 'html', FILE_SUFFIX: '.html', LINK_SUFFIX: '.html', HAS_SOURCE: true, SOURCELINK_SUFFIX: '.txt', NAVIGATION_WITH_KEYS: false, SHOW_SEARCH_SUMMARY: true, ENABLE_SEARCH_SHORTCUTS: true, };python3-saml-1.16.0/docs/saml2/_static/file.png000066400000000000000000000004361451074743100211670ustar00rootroot00000000000000PNG  IHDRaIDATxR){l ۶f=@ :3~箄rX$AX-D ~ lj(P%8<<9:: PO&$ l~X&EW^4wQ}^ͣ i0/H/@F)Dzq+j[SU5h/oY G&Lfs|{3%U+S`AFIENDB`python3-saml-1.16.0/docs/saml2/_static/jquery.js000066400000000000000000002566351451074743100214350ustar00rootroot00000000000000/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */ !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="",y.option=!!ce.lastChild;var ge={thead:[1,"","
"],col:[2,"","
"],tr:[2,"","
"],td:[3,"","
"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n",""]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="

",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=y.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=y.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),y.elements=c+" "+a,j(b)}function f(a){var b=x[a[v]];return b||(b={},w++,a[v]=w,x[w]=b),b}function g(a,c,d){if(c||(c=b),q)return c.createElement(a);d||(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():u.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren||t.test(a)||e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a||(a=b),q)return a.createDocumentFragment();c=c||f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache||(b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag()),a.createElement=function(c){return y.shivMethods?g(c,a,b):b.createElem(c)},a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+d().join().replace(/[\w\-:]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(y,b.frag)}function j(a){a||(a=b);var d=f(a);return!y.shivCSS||p||d.hasCSS||(d.hasCSS=!!c(a,"article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}mark{background:#FF0;color:#000}template{display:none}")),q||i(a,d),a}function k(a){for(var b,c=a.getElementsByTagName("*"),e=c.length,f=RegExp("^(?:"+d().join("|")+")$","i"),g=[];e--;)b=c[e],f.test(b.nodeName)&&g.push(b.applyElement(l(b)));return g}function l(a){for(var b,c=a.attributes,d=c.length,e=a.ownerDocument.createElement(A+":"+a.nodeName);d--;)b=c[d],b.specified&&e.setAttribute(b.nodeName,b.nodeValue);return e.style.cssText=a.style.cssText,e}function m(a){for(var b,c=a.split("{"),e=c.length,f=RegExp("(^|[\\s,>+~])("+d().join("|")+")(?=[[\\s,>+~#.:]|$)","gi"),g="$1"+A+"\\:$2";e--;)b=c[e]=c[e].split("}"),b[b.length-1]=b[b.length-1].replace(f,g),c[e]=b.join("}");return c.join("{")}function n(a){for(var b=a.length;b--;)a[b].removeNode()}function o(a){function b(){clearTimeout(g._removeSheetTimer),d&&d.removeNode(!0),d=null}var d,e,g=f(a),h=a.namespaces,i=a.parentWindow;return!B||a.printShived?a:("undefined"==typeof h[A]&&h.add(A),i.attachEvent("onbeforeprint",function(){b();for(var f,g,h,i=a.styleSheets,j=[],l=i.length,n=Array(l);l--;)n[l]=i[l];for(;h=n.pop();)if(!h.disabled&&z.test(h.media)){try{f=h.imports,g=f.length}catch(o){g=0}for(l=0;g>l;l++)n.push(f[l]);try{j.push(h.cssText)}catch(o){}}j=m(j.reverse().join("")),e=k(a),d=c(a,j)}),i.attachEvent("onafterprint",function(){n(e),clearTimeout(g._removeSheetTimer),g._removeSheetTimer=setTimeout(b,500)}),a.printShived=!0,a)}var p,q,r="3.7.3",s=a.html5||{},t=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,u=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,v="_html5shiv",w=0,x={};!function(){try{var a=b.createElement("a");a.innerHTML="",p="hidden"in a,q=1==a.childNodes.length||function(){b.createElement("a");var a=b.createDocumentFragment();return"undefined"==typeof a.cloneNode||"undefined"==typeof a.createDocumentFragment||"undefined"==typeof a.createElement}()}catch(c){p=!0,q=!0}}();var y={elements:s.elements||"abbr article aside audio bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output picture progress section summary template time video",version:r,shivCSS:s.shivCSS!==!1,supportsUnknownElements:q,shivMethods:s.shivMethods!==!1,type:"default",shivDocument:j,createElement:g,createDocumentFragment:h,addElements:e};a.html5=y,j(b);var z=/^$|\b(?:all|print)\b/,A="html5shiv",B=!q&&function(){var c=b.documentElement;return!("undefined"==typeof b.namespaces||"undefined"==typeof b.parentWindow||"undefined"==typeof c.applyElement||"undefined"==typeof c.removeNode||"undefined"==typeof a.attachEvent)}();y.type+=" print",y.shivPrint=o,o(b),"object"==typeof module&&module.exports&&(module.exports=y)}("undefined"!=typeof window?window:this,document);python3-saml-1.16.0/docs/saml2/_static/js/html5shiv.min.js000066400000000000000000000052561451074743100232260ustar00rootroot00000000000000/** * @preserve HTML5 Shiv 3.7.3 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 Licensed */ !function(a,b){function c(a,b){var c=a.createElement("p"),d=a.getElementsByTagName("head")[0]||a.documentElement;return c.innerHTML="x",d.insertBefore(c.lastChild,d.firstChild)}function d(){var a=t.elements;return"string"==typeof a?a.split(" "):a}function e(a,b){var c=t.elements;"string"!=typeof c&&(c=c.join(" ")),"string"!=typeof a&&(a=a.join(" ")),t.elements=c+" "+a,j(b)}function f(a){var b=s[a[q]];return b||(b={},r++,a[q]=r,s[r]=b),b}function g(a,c,d){if(c||(c=b),l)return c.createElement(a);d||(d=f(c));var e;return e=d.cache[a]?d.cache[a].cloneNode():p.test(a)?(d.cache[a]=d.createElem(a)).cloneNode():d.createElem(a),!e.canHaveChildren||o.test(a)||e.tagUrn?e:d.frag.appendChild(e)}function h(a,c){if(a||(a=b),l)return a.createDocumentFragment();c=c||f(a);for(var e=c.frag.cloneNode(),g=0,h=d(),i=h.length;i>g;g++)e.createElement(h[g]);return e}function i(a,b){b.cache||(b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag()),a.createElement=function(c){return t.shivMethods?g(c,a,b):b.createElem(c)},a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&("+d().join().replace(/[\w\-:]+/g,function(a){return b.createElem(a),b.frag.createElement(a),'c("'+a+'")'})+");return n}")(t,b.frag)}function j(a){a||(a=b);var d=f(a);return!t.shivCSS||k||d.hasCSS||(d.hasCSS=!!c(a,"article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}mark{background:#FF0;color:#000}template{display:none}")),l||i(a,d),a}var k,l,m="3.7.3-pre",n=a.html5||{},o=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,p=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,q="_html5shiv",r=0,s={};!function(){try{var a=b.createElement("a");a.innerHTML="",k="hidden"in a,l=1==a.childNodes.length||function(){b.createElement("a");var a=b.createDocumentFragment();return"undefined"==typeof a.cloneNode||"undefined"==typeof a.createDocumentFragment||"undefined"==typeof a.createElement}()}catch(c){k=!0,l=!0}}();var t={elements:n.elements||"abbr article aside audio bdi canvas data datalist details dialog figcaption figure footer header hgroup main mark meter nav output picture progress section summary template time video",version:m,shivCSS:n.shivCSS!==!1,supportsUnknownElements:l,shivMethods:n.shivMethods!==!1,type:"default",shivDocument:j,createElement:g,createDocumentFragment:h,addElements:e};a.html5=t,j(b),"object"==typeof module&&module.exports&&(module.exports=t)}("undefined"!=typeof window?window:this,document);python3-saml-1.16.0/docs/saml2/_static/js/theme.js000066400000000000000000000116371451074743100216230ustar00rootroot00000000000000!function(n){var e={};function t(i){if(e[i])return e[i].exports;var o=e[i]={i:i,l:!1,exports:{}};return n[i].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=n,t.c=e,t.d=function(n,e,i){t.o(n,e)||Object.defineProperty(n,e,{enumerable:!0,get:i})},t.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},t.t=function(n,e){if(1&e&&(n=t(n)),8&e)return n;if(4&e&&"object"==typeof n&&n&&n.__esModule)return n;var i=Object.create(null);if(t.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:n}),2&e&&"string"!=typeof n)for(var o in n)t.d(i,o,function(e){return n[e]}.bind(null,o));return i},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,"a",e),e},t.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},t.p="",t(t.s=0)}([function(n,e,t){t(1),n.exports=t(3)},function(n,e,t){(function(){var e="undefined"!=typeof window?window.jQuery:t(2);n.exports.ThemeNav={navBar:null,win:null,winScroll:!1,winResize:!1,linkScroll:!1,winPosition:0,winHeight:null,docHeight:null,isRunning:!1,enable:function(n){var t=this;void 0===n&&(n=!0),t.isRunning||(t.isRunning=!0,e((function(e){t.init(e),t.reset(),t.win.on("hashchange",t.reset),n&&t.win.on("scroll",(function(){t.linkScroll||t.winScroll||(t.winScroll=!0,requestAnimationFrame((function(){t.onScroll()})))})),t.win.on("resize",(function(){t.winResize||(t.winResize=!0,requestAnimationFrame((function(){t.onResize()})))})),t.onResize()})))},enableSticky:function(){this.enable(!0)},init:function(n){n(document);var e=this;this.navBar=n("div.wy-side-scroll:first"),this.win=n(window),n(document).on("click","[data-toggle='wy-nav-top']",(function(){n("[data-toggle='wy-nav-shift']").toggleClass("shift"),n("[data-toggle='rst-versions']").toggleClass("shift")})).on("click",".wy-menu-vertical .current ul li a",(function(){var t=n(this);n("[data-toggle='wy-nav-shift']").removeClass("shift"),n("[data-toggle='rst-versions']").toggleClass("shift"),e.toggleCurrent(t),e.hashChange()})).on("click","[data-toggle='rst-current-version']",(function(){n("[data-toggle='rst-versions']").toggleClass("shift-up")})),n("table.docutils:not(.field-list,.footnote,.citation)").wrap("
"),n("table.docutils.footnote").wrap("
"),n("table.docutils.citation").wrap("
"),n(".wy-menu-vertical ul").not(".simple").siblings("a").each((function(){var t=n(this);expand=n(''),expand.on("click",(function(n){return e.toggleCurrent(t),n.stopPropagation(),!1})),t.prepend(expand)}))},reset:function(){var n=encodeURI(window.location.hash)||"#";try{var e=$(".wy-menu-vertical"),t=e.find('[href="'+n+'"]');if(0===t.length){var i=$('.document [id="'+n.substring(1)+'"]').closest("div.section");0===(t=e.find('[href="#'+i.attr("id")+'"]')).length&&(t=e.find('[href="#"]'))}if(t.length>0){$(".wy-menu-vertical .current").removeClass("current").attr("aria-expanded","false"),t.addClass("current").attr("aria-expanded","true"),t.closest("li.toctree-l1").parent().addClass("current").attr("aria-expanded","true");for(let n=1;n<=10;n++)t.closest("li.toctree-l"+n).addClass("current").attr("aria-expanded","true");t[0].scrollIntoView()}}catch(n){console.log("Error expanding nav for anchor",n)}},onScroll:function(){this.winScroll=!1;var n=this.win.scrollTop(),e=n+this.winHeight,t=this.navBar.scrollTop()+(n-this.winPosition);n<0||e>this.docHeight||(this.navBar.scrollTop(t),this.winPosition=n)},onResize:function(){this.winResize=!1,this.winHeight=this.win.height(),this.docHeight=$(document).height()},hashChange:function(){this.linkScroll=!0,this.win.one("hashchange",(function(){this.linkScroll=!1}))},toggleCurrent:function(n){var e=n.closest("li");e.siblings("li.current").removeClass("current").attr("aria-expanded","false"),e.siblings().find("li.current").removeClass("current").attr("aria-expanded","false");var t=e.find("> ul li");t.length&&(t.removeClass("current").attr("aria-expanded","false"),e.toggleClass("current").attr("aria-expanded",(function(n,e){return"true"==e?"false":"true"})))}},"undefined"!=typeof window&&(window.SphinxRtdTheme={Navigation:n.exports.ThemeNav,StickyNav:n.exports.ThemeNav}),function(){for(var n=0,e=["ms","moz","webkit","o"],t=0;t0 var meq1 = "^(" + C + ")?" + V + C + "(" + V + ")?$"; // [C]VC[V] is m=1 var mgr1 = "^(" + C + ")?" + V + C + V + C; // [C]VCVC... is m>1 var s_v = "^(" + C + ")?" + v; // vowel in stem this.stemWord = function (w) { var stem; var suffix; var firstch; var origword = w; if (w.length < 3) return w; var re; var re2; var re3; var re4; firstch = w.substr(0,1); if (firstch == "y") w = firstch.toUpperCase() + w.substr(1); // Step 1a re = /^(.+?)(ss|i)es$/; re2 = /^(.+?)([^s])s$/; if (re.test(w)) w = w.replace(re,"$1$2"); else if (re2.test(w)) w = w.replace(re2,"$1$2"); // Step 1b re = /^(.+?)eed$/; re2 = /^(.+?)(ed|ing)$/; if (re.test(w)) { var fp = re.exec(w); re = new RegExp(mgr0); if (re.test(fp[1])) { re = /.$/; w = w.replace(re,""); } } else if (re2.test(w)) { var fp = re2.exec(w); stem = fp[1]; re2 = new RegExp(s_v); if (re2.test(stem)) { w = stem; re2 = /(at|bl|iz)$/; re3 = new RegExp("([^aeiouylsz])\\1$"); re4 = new RegExp("^" + C + v + "[^aeiouwxy]$"); if (re2.test(w)) w = w + "e"; else if (re3.test(w)) { re = /.$/; w = w.replace(re,""); } else if (re4.test(w)) w = w + "e"; } } // Step 1c re = /^(.+?)y$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(s_v); if (re.test(stem)) w = stem + "i"; } // Step 2 re = /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; suffix = fp[2]; re = new RegExp(mgr0); if (re.test(stem)) w = stem + step2list[suffix]; } // Step 3 re = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; suffix = fp[2]; re = new RegExp(mgr0); if (re.test(stem)) w = stem + step3list[suffix]; } // Step 4 re = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/; re2 = /^(.+?)(s|t)(ion)$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(mgr1); if (re.test(stem)) w = stem; } else if (re2.test(w)) { var fp = re2.exec(w); stem = fp[1] + fp[2]; re2 = new RegExp(mgr1); if (re2.test(stem)) w = stem; } // Step 5 re = /^(.+?)e$/; if (re.test(w)) { var fp = re.exec(w); stem = fp[1]; re = new RegExp(mgr1); re2 = new RegExp(meq1); re3 = new RegExp("^" + C + v + "[^aeiouwxy]$"); if (re.test(stem) || (re2.test(stem) && !(re3.test(stem)))) w = stem; } re = /ll$/; re2 = new RegExp(mgr1); if (re.test(w) && re2.test(w)) { re = /.$/; w = w.replace(re,""); } // and turn initial Y back to y if (firstch == "y") w = firstch.toLowerCase() + w.substr(1); return w; } } python3-saml-1.16.0/docs/saml2/_static/minus.png000066400000000000000000000001321451074743100213740ustar00rootroot00000000000000PNG  IHDR (!IDATxc8 g>@;(!&]f2nNIENDB`python3-saml-1.16.0/docs/saml2/_static/plus.png000066400000000000000000000001321451074743100212240ustar00rootroot00000000000000PNG  IHDR (!IDATxc8 g>@;([[U @l-!a@IENDB`python3-saml-1.16.0/docs/saml2/_static/pygments.css000066400000000000000000000114461451074743100221250ustar00rootroot00000000000000pre { line-height: 125%; } td.linenos .normal { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; } span.linenos { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; } td.linenos .special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; } span.linenos.special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; } .highlight .hll { background-color: #ffffcc } .highlight { background: #f8f8f8; } .highlight .c { color: #3D7B7B; font-style: italic } /* Comment */ .highlight .err { border: 1px solid #FF0000 } /* Error */ .highlight .k { color: #008000; font-weight: bold } /* Keyword */ .highlight .o { color: #666666 } /* Operator */ .highlight .ch { color: #3D7B7B; font-style: italic } /* Comment.Hashbang */ .highlight .cm { color: #3D7B7B; font-style: italic } /* Comment.Multiline */ .highlight .cp { color: #9C6500 } /* Comment.Preproc */ .highlight .cpf { color: #3D7B7B; font-style: italic } /* Comment.PreprocFile */ .highlight .c1 { color: #3D7B7B; font-style: italic } /* Comment.Single */ .highlight .cs { color: #3D7B7B; font-style: italic } /* Comment.Special */ .highlight .gd { color: #A00000 } /* Generic.Deleted */ .highlight .ge { font-style: italic } /* Generic.Emph */ .highlight .ges { font-weight: bold; font-style: italic } /* Generic.EmphStrong */ .highlight .gr { color: #E40000 } /* Generic.Error */ .highlight .gh { color: #000080; font-weight: bold } /* Generic.Heading */ .highlight .gi { color: #008400 } /* Generic.Inserted */ .highlight .go { color: #717171 } /* Generic.Output */ .highlight .gp { color: #000080; font-weight: bold } /* Generic.Prompt */ .highlight .gs { font-weight: bold } /* Generic.Strong */ .highlight .gu { color: #800080; font-weight: bold } /* Generic.Subheading */ .highlight .gt { color: #0044DD } /* Generic.Traceback */ .highlight .kc { color: #008000; font-weight: bold } /* Keyword.Constant */ .highlight .kd { color: #008000; font-weight: bold } /* Keyword.Declaration */ .highlight .kn { color: #008000; font-weight: bold } /* Keyword.Namespace */ .highlight .kp { color: #008000 } /* Keyword.Pseudo */ .highlight .kr { color: #008000; font-weight: bold } /* Keyword.Reserved */ .highlight .kt { color: #B00040 } /* Keyword.Type */ .highlight .m { color: #666666 } /* Literal.Number */ .highlight .s { color: #BA2121 } /* Literal.String */ .highlight .na { color: #687822 } /* Name.Attribute */ .highlight .nb { color: #008000 } /* Name.Builtin */ .highlight .nc { color: #0000FF; font-weight: bold } /* Name.Class */ .highlight .no { color: #880000 } /* Name.Constant */ .highlight .nd { color: #AA22FF } /* Name.Decorator */ .highlight .ni { color: #717171; font-weight: bold } /* Name.Entity */ .highlight .ne { color: #CB3F38; font-weight: bold } /* Name.Exception */ .highlight .nf { color: #0000FF } /* Name.Function */ .highlight .nl { color: #767600 } /* Name.Label */ .highlight .nn { color: #0000FF; font-weight: bold } /* Name.Namespace */ .highlight .nt { color: #008000; font-weight: bold } /* Name.Tag */ .highlight .nv { color: #19177C } /* Name.Variable */ .highlight .ow { color: #AA22FF; font-weight: bold } /* Operator.Word */ .highlight .w { color: #bbbbbb } /* Text.Whitespace */ .highlight .mb { color: #666666 } /* Literal.Number.Bin */ .highlight .mf { color: #666666 } /* Literal.Number.Float */ .highlight .mh { color: #666666 } /* Literal.Number.Hex */ .highlight .mi { color: #666666 } /* Literal.Number.Integer */ .highlight .mo { color: #666666 } /* Literal.Number.Oct */ .highlight .sa { color: #BA2121 } /* Literal.String.Affix */ .highlight .sb { color: #BA2121 } /* Literal.String.Backtick */ .highlight .sc { color: #BA2121 } /* Literal.String.Char */ .highlight .dl { color: #BA2121 } /* Literal.String.Delimiter */ .highlight .sd { color: #BA2121; font-style: italic } /* Literal.String.Doc */ .highlight .s2 { color: #BA2121 } /* Literal.String.Double */ .highlight .se { color: #AA5D1F; font-weight: bold } /* Literal.String.Escape */ .highlight .sh { color: #BA2121 } /* Literal.String.Heredoc */ .highlight .si { color: #A45A77; font-weight: bold } /* Literal.String.Interpol */ .highlight .sx { color: #008000 } /* Literal.String.Other */ .highlight .sr { color: #A45A77 } /* Literal.String.Regex */ .highlight .s1 { color: #BA2121 } /* Literal.String.Single */ .highlight .ss { color: #19177C } /* Literal.String.Symbol */ .highlight .bp { color: #008000 } /* Name.Builtin.Pseudo */ .highlight .fm { color: #0000FF } /* Name.Function.Magic */ .highlight .vc { color: #19177C } /* Name.Variable.Class */ .highlight .vg { color: #19177C } /* Name.Variable.Global */ .highlight .vi { color: #19177C } /* Name.Variable.Instance */ .highlight .vm { color: #19177C } /* Name.Variable.Magic */ .highlight .il { color: #666666 } /* Literal.Number.Integer.Long */python3-saml-1.16.0/docs/saml2/_static/searchtools.js000066400000000000000000000434471451074743100224370ustar00rootroot00000000000000/* * searchtools.js * ~~~~~~~~~~~~~~~~ * * Sphinx JavaScript utilities for the full-text search. * * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ "use strict"; /** * Simple result scoring code. */ if (typeof Scorer === "undefined") { var Scorer = { // Implement the following function to further tweak the score for each result // The function takes a result array [docname, title, anchor, descr, score, filename] // and returns the new score. /* score: result => { const [docname, title, anchor, descr, score, filename] = result return score }, */ // query matches the full name of an object objNameMatch: 11, // or matches in the last dotted part of the object name objPartialMatch: 6, // Additive scores depending on the priority of the object objPrio: { 0: 15, // used to be importantResults 1: 5, // used to be objectResults 2: -5, // used to be unimportantResults }, // Used when the priority is not in the mapping. objPrioDefault: 0, // query found in title title: 15, partialTitle: 7, // query found in terms term: 5, partialTerm: 2, }; } const _removeChildren = (element) => { while (element && element.lastChild) element.removeChild(element.lastChild); }; /** * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Regular_Expressions#escaping */ const _escapeRegExp = (string) => string.replace(/[.*+\-?^${}()|[\]\\]/g, "\\$&"); // $& means the whole matched string const _displayItem = (item, searchTerms) => { const docBuilder = DOCUMENTATION_OPTIONS.BUILDER; const docUrlRoot = DOCUMENTATION_OPTIONS.URL_ROOT; const docFileSuffix = DOCUMENTATION_OPTIONS.FILE_SUFFIX; const docLinkSuffix = DOCUMENTATION_OPTIONS.LINK_SUFFIX; const showSearchSummary = DOCUMENTATION_OPTIONS.SHOW_SEARCH_SUMMARY; const [docName, title, anchor, descr, score, _filename] = item; let listItem = document.createElement("li"); let requestUrl; let linkUrl; if (docBuilder === "dirhtml") { // dirhtml builder let dirname = docName + "/"; if (dirname.match(/\/index\/$/)) dirname = dirname.substring(0, dirname.length - 6); else if (dirname === "index/") dirname = ""; requestUrl = docUrlRoot + dirname; linkUrl = requestUrl; } else { // normal html builders requestUrl = docUrlRoot + docName + docFileSuffix; linkUrl = docName + docLinkSuffix; } let linkEl = listItem.appendChild(document.createElement("a")); linkEl.href = linkUrl + anchor; linkEl.dataset.score = score; linkEl.innerHTML = title; if (descr) listItem.appendChild(document.createElement("span")).innerHTML = " (" + descr + ")"; else if (showSearchSummary) fetch(requestUrl) .then((responseData) => responseData.text()) .then((data) => { if (data) listItem.appendChild( Search.makeSearchSummary(data, searchTerms) ); }); Search.output.appendChild(listItem); }; const _finishSearch = (resultCount) => { Search.stopPulse(); Search.title.innerText = _("Search Results"); if (!resultCount) Search.status.innerText = Documentation.gettext( "Your search did not match any documents. Please make sure that all words are spelled correctly and that you've selected enough categories." ); else Search.status.innerText = _( `Search finished, found ${resultCount} page(s) matching the search query.` ); }; const _displayNextItem = ( results, resultCount, searchTerms ) => { // results left, load the summary and display it // this is intended to be dynamic (don't sub resultsCount) if (results.length) { _displayItem(results.pop(), searchTerms); setTimeout( () => _displayNextItem(results, resultCount, searchTerms), 5 ); } // search finished, update title and status message else _finishSearch(resultCount); }; /** * Default splitQuery function. Can be overridden in ``sphinx.search`` with a * custom function per language. * * The regular expression works by splitting the string on consecutive characters * that are not Unicode letters, numbers, underscores, or emoji characters. * This is the same as ``\W+`` in Python, preserving the surrogate pair area. */ if (typeof splitQuery === "undefined") { var splitQuery = (query) => query .split(/[^\p{Letter}\p{Number}_\p{Emoji_Presentation}]+/gu) .filter(term => term) // remove remaining empty strings } /** * Search Module */ const Search = { _index: null, _queued_query: null, _pulse_status: -1, htmlToText: (htmlString) => { const htmlElement = new DOMParser().parseFromString(htmlString, 'text/html'); htmlElement.querySelectorAll(".headerlink").forEach((el) => { el.remove() }); const docContent = htmlElement.querySelector('[role="main"]'); if (docContent !== undefined) return docContent.textContent; console.warn( "Content block not found. Sphinx search tries to obtain it via '[role=main]'. Could you check your theme or template." ); return ""; }, init: () => { const query = new URLSearchParams(window.location.search).get("q"); document .querySelectorAll('input[name="q"]') .forEach((el) => (el.value = query)); if (query) Search.performSearch(query); }, loadIndex: (url) => (document.body.appendChild(document.createElement("script")).src = url), setIndex: (index) => { Search._index = index; if (Search._queued_query !== null) { const query = Search._queued_query; Search._queued_query = null; Search.query(query); } }, hasIndex: () => Search._index !== null, deferQuery: (query) => (Search._queued_query = query), stopPulse: () => (Search._pulse_status = -1), startPulse: () => { if (Search._pulse_status >= 0) return; const pulse = () => { Search._pulse_status = (Search._pulse_status + 1) % 4; Search.dots.innerText = ".".repeat(Search._pulse_status); if (Search._pulse_status >= 0) window.setTimeout(pulse, 500); }; pulse(); }, /** * perform a search for something (or wait until index is loaded) */ performSearch: (query) => { // create the required interface elements const searchText = document.createElement("h2"); searchText.textContent = _("Searching"); const searchSummary = document.createElement("p"); searchSummary.classList.add("search-summary"); searchSummary.innerText = ""; const searchList = document.createElement("ul"); searchList.classList.add("search"); const out = document.getElementById("search-results"); Search.title = out.appendChild(searchText); Search.dots = Search.title.appendChild(document.createElement("span")); Search.status = out.appendChild(searchSummary); Search.output = out.appendChild(searchList); const searchProgress = document.getElementById("search-progress"); // Some themes don't use the search progress node if (searchProgress) { searchProgress.innerText = _("Preparing search..."); } Search.startPulse(); // index already loaded, the browser was quick! if (Search.hasIndex()) Search.query(query); else Search.deferQuery(query); }, /** * execute search (requires search index to be loaded) */ query: (query) => { const filenames = Search._index.filenames; const docNames = Search._index.docnames; const titles = Search._index.titles; const allTitles = Search._index.alltitles; const indexEntries = Search._index.indexentries; // stem the search terms and add them to the correct list const stemmer = new Stemmer(); const searchTerms = new Set(); const excludedTerms = new Set(); const highlightTerms = new Set(); const objectTerms = new Set(splitQuery(query.toLowerCase().trim())); splitQuery(query.trim()).forEach((queryTerm) => { const queryTermLower = queryTerm.toLowerCase(); // maybe skip this "word" // stopwords array is from language_data.js if ( stopwords.indexOf(queryTermLower) !== -1 || queryTerm.match(/^\d+$/) ) return; // stem the word let word = stemmer.stemWord(queryTermLower); // select the correct list if (word[0] === "-") excludedTerms.add(word.substr(1)); else { searchTerms.add(word); highlightTerms.add(queryTermLower); } }); if (SPHINX_HIGHLIGHT_ENABLED) { // set in sphinx_highlight.js localStorage.setItem("sphinx_highlight_terms", [...highlightTerms].join(" ")) } // console.debug("SEARCH: searching for:"); // console.info("required: ", [...searchTerms]); // console.info("excluded: ", [...excludedTerms]); // array of [docname, title, anchor, descr, score, filename] let results = []; _removeChildren(document.getElementById("search-progress")); const queryLower = query.toLowerCase(); for (const [title, foundTitles] of Object.entries(allTitles)) { if (title.toLowerCase().includes(queryLower) && (queryLower.length >= title.length/2)) { for (const [file, id] of foundTitles) { let score = Math.round(100 * queryLower.length / title.length) results.push([ docNames[file], titles[file] !== title ? `${titles[file]} > ${title}` : title, id !== null ? "#" + id : "", null, score, filenames[file], ]); } } } // search for explicit entries in index directives for (const [entry, foundEntries] of Object.entries(indexEntries)) { if (entry.includes(queryLower) && (queryLower.length >= entry.length/2)) { for (const [file, id] of foundEntries) { let score = Math.round(100 * queryLower.length / entry.length) results.push([ docNames[file], titles[file], id ? "#" + id : "", null, score, filenames[file], ]); } } } // lookup as object objectTerms.forEach((term) => results.push(...Search.performObjectSearch(term, objectTerms)) ); // lookup as search terms in fulltext results.push(...Search.performTermsSearch(searchTerms, excludedTerms)); // let the scorer override scores with a custom scoring function if (Scorer.score) results.forEach((item) => (item[4] = Scorer.score(item))); // now sort the results by score (in opposite order of appearance, since the // display function below uses pop() to retrieve items) and then // alphabetically results.sort((a, b) => { const leftScore = a[4]; const rightScore = b[4]; if (leftScore === rightScore) { // same score: sort alphabetically const leftTitle = a[1].toLowerCase(); const rightTitle = b[1].toLowerCase(); if (leftTitle === rightTitle) return 0; return leftTitle > rightTitle ? -1 : 1; // inverted is intentional } return leftScore > rightScore ? 1 : -1; }); // remove duplicate search results // note the reversing of results, so that in the case of duplicates, the highest-scoring entry is kept let seen = new Set(); results = results.reverse().reduce((acc, result) => { let resultStr = result.slice(0, 4).concat([result[5]]).map(v => String(v)).join(','); if (!seen.has(resultStr)) { acc.push(result); seen.add(resultStr); } return acc; }, []); results = results.reverse(); // for debugging //Search.lastresults = results.slice(); // a copy // console.info("search results:", Search.lastresults); // print the results _displayNextItem(results, results.length, searchTerms); }, /** * search for object names */ performObjectSearch: (object, objectTerms) => { const filenames = Search._index.filenames; const docNames = Search._index.docnames; const objects = Search._index.objects; const objNames = Search._index.objnames; const titles = Search._index.titles; const results = []; const objectSearchCallback = (prefix, match) => { const name = match[4] const fullname = (prefix ? prefix + "." : "") + name; const fullnameLower = fullname.toLowerCase(); if (fullnameLower.indexOf(object) < 0) return; let score = 0; const parts = fullnameLower.split("."); // check for different match types: exact matches of full name or // "last name" (i.e. last dotted part) if (fullnameLower === object || parts.slice(-1)[0] === object) score += Scorer.objNameMatch; else if (parts.slice(-1)[0].indexOf(object) > -1) score += Scorer.objPartialMatch; // matches in last name const objName = objNames[match[1]][2]; const title = titles[match[0]]; // If more than one term searched for, we require other words to be // found in the name/title/description const otherTerms = new Set(objectTerms); otherTerms.delete(object); if (otherTerms.size > 0) { const haystack = `${prefix} ${name} ${objName} ${title}`.toLowerCase(); if ( [...otherTerms].some((otherTerm) => haystack.indexOf(otherTerm) < 0) ) return; } let anchor = match[3]; if (anchor === "") anchor = fullname; else if (anchor === "-") anchor = objNames[match[1]][1] + "-" + fullname; const descr = objName + _(", in ") + title; // add custom score for some objects according to scorer if (Scorer.objPrio.hasOwnProperty(match[2])) score += Scorer.objPrio[match[2]]; else score += Scorer.objPrioDefault; results.push([ docNames[match[0]], fullname, "#" + anchor, descr, score, filenames[match[0]], ]); }; Object.keys(objects).forEach((prefix) => objects[prefix].forEach((array) => objectSearchCallback(prefix, array) ) ); return results; }, /** * search for full-text terms in the index */ performTermsSearch: (searchTerms, excludedTerms) => { // prepare search const terms = Search._index.terms; const titleTerms = Search._index.titleterms; const filenames = Search._index.filenames; const docNames = Search._index.docnames; const titles = Search._index.titles; const scoreMap = new Map(); const fileMap = new Map(); // perform the search on the required terms searchTerms.forEach((word) => { const files = []; const arr = [ { files: terms[word], score: Scorer.term }, { files: titleTerms[word], score: Scorer.title }, ]; // add support for partial matches if (word.length > 2) { const escapedWord = _escapeRegExp(word); Object.keys(terms).forEach((term) => { if (term.match(escapedWord) && !terms[word]) arr.push({ files: terms[term], score: Scorer.partialTerm }); }); Object.keys(titleTerms).forEach((term) => { if (term.match(escapedWord) && !titleTerms[word]) arr.push({ files: titleTerms[word], score: Scorer.partialTitle }); }); } // no match but word was a required one if (arr.every((record) => record.files === undefined)) return; // found search word in contents arr.forEach((record) => { if (record.files === undefined) return; let recordFiles = record.files; if (recordFiles.length === undefined) recordFiles = [recordFiles]; files.push(...recordFiles); // set score for the word in each file recordFiles.forEach((file) => { if (!scoreMap.has(file)) scoreMap.set(file, {}); scoreMap.get(file)[word] = record.score; }); }); // create the mapping files.forEach((file) => { if (fileMap.has(file) && fileMap.get(file).indexOf(word) === -1) fileMap.get(file).push(word); else fileMap.set(file, [word]); }); }); // now check if the files don't contain excluded terms const results = []; for (const [file, wordList] of fileMap) { // check if all requirements are matched // as search terms with length < 3 are discarded const filteredTermCount = [...searchTerms].filter( (term) => term.length > 2 ).length; if ( wordList.length !== searchTerms.size && wordList.length !== filteredTermCount ) continue; // ensure that none of the excluded terms is in the search result if ( [...excludedTerms].some( (term) => terms[term] === file || titleTerms[term] === file || (terms[term] || []).includes(file) || (titleTerms[term] || []).includes(file) ) ) break; // select one (max) score for the file. const score = Math.max(...wordList.map((w) => scoreMap.get(file)[w])); // add result to the result list results.push([ docNames[file], titles[file], "", null, score, filenames[file], ]); } return results; }, /** * helper function to return a node containing the * search summary for a given text. keywords is a list * of stemmed words. */ makeSearchSummary: (htmlText, keywords) => { const text = Search.htmlToText(htmlText); if (text === "") return null; const textLower = text.toLowerCase(); const actualStartPosition = [...keywords] .map((k) => textLower.indexOf(k.toLowerCase())) .filter((i) => i > -1) .slice(-1)[0]; const startWithContext = Math.max(actualStartPosition - 120, 0); const top = startWithContext === 0 ? "" : "..."; const tail = startWithContext + 240 < text.length ? "..." : ""; let summary = document.createElement("p"); summary.classList.add("context"); summary.textContent = top + text.substr(startWithContext, 240).trim() + tail; return summary; }, }; _ready(Search.init); python3-saml-1.16.0/docs/saml2/_static/sphinx_highlight.js000066400000000000000000000111501451074743100234330ustar00rootroot00000000000000/* Highlighting utilities for Sphinx HTML documentation. */ "use strict"; const SPHINX_HIGHLIGHT_ENABLED = true /** * highlight a given string on a node by wrapping it in * span elements with the given class name. */ const _highlight = (node, addItems, text, className) => { if (node.nodeType === Node.TEXT_NODE) { const val = node.nodeValue; const parent = node.parentNode; const pos = val.toLowerCase().indexOf(text); if ( pos >= 0 && !parent.classList.contains(className) && !parent.classList.contains("nohighlight") ) { let span; const closestNode = parent.closest("body, svg, foreignObject"); const isInSVG = closestNode && closestNode.matches("svg"); if (isInSVG) { span = document.createElementNS("http://www.w3.org/2000/svg", "tspan"); } else { span = document.createElement("span"); span.classList.add(className); } span.appendChild(document.createTextNode(val.substr(pos, text.length))); parent.insertBefore( span, parent.insertBefore( document.createTextNode(val.substr(pos + text.length)), node.nextSibling ) ); node.nodeValue = val.substr(0, pos); if (isInSVG) { const rect = document.createElementNS( "http://www.w3.org/2000/svg", "rect" ); const bbox = parent.getBBox(); rect.x.baseVal.value = bbox.x; rect.y.baseVal.value = bbox.y; rect.width.baseVal.value = bbox.width; rect.height.baseVal.value = bbox.height; rect.setAttribute("class", className); addItems.push({ parent: parent, target: rect }); } } } else if (node.matches && !node.matches("button, select, textarea")) { node.childNodes.forEach((el) => _highlight(el, addItems, text, className)); } }; const _highlightText = (thisNode, text, className) => { let addItems = []; _highlight(thisNode, addItems, text, className); addItems.forEach((obj) => obj.parent.insertAdjacentElement("beforebegin", obj.target) ); }; /** * Small JavaScript module for the documentation. */ const SphinxHighlight = { /** * highlight the search words provided in localstorage in the text */ highlightSearchWords: () => { if (!SPHINX_HIGHLIGHT_ENABLED) return; // bail if no highlight // get and clear terms from localstorage const url = new URL(window.location); const highlight = localStorage.getItem("sphinx_highlight_terms") || url.searchParams.get("highlight") || ""; localStorage.removeItem("sphinx_highlight_terms") url.searchParams.delete("highlight"); window.history.replaceState({}, "", url); // get individual terms from highlight string const terms = highlight.toLowerCase().split(/\s+/).filter(x => x); if (terms.length === 0) return; // nothing to do // There should never be more than one element matching "div.body" const divBody = document.querySelectorAll("div.body"); const body = divBody.length ? divBody[0] : document.querySelector("body"); window.setTimeout(() => { terms.forEach((term) => _highlightText(body, term, "highlighted")); }, 10); const searchBox = document.getElementById("searchbox"); if (searchBox === null) return; searchBox.appendChild( document .createRange() .createContextualFragment( '

' + '' + _("Hide Search Matches") + "

" ) ); }, /** * helper function to hide the search marks again */ hideSearchWords: () => { document .querySelectorAll("#searchbox .highlight-link") .forEach((el) => el.remove()); document .querySelectorAll("span.highlighted") .forEach((el) => el.classList.remove("highlighted")); localStorage.removeItem("sphinx_highlight_terms") }, initEscapeListener: () => { // only install a listener if it is really needed if (!DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS) return; document.addEventListener("keydown", (event) => { // bail for input elements if (BLACKLISTED_KEY_CONTROL_ELEMENTS.has(document.activeElement.tagName)) return; // bail with special keys if (event.shiftKey || event.altKey || event.ctrlKey || event.metaKey) return; if (DOCUMENTATION_OPTIONS.ENABLE_SEARCH_SHORTCUTS && (event.key === "Escape")) { SphinxHighlight.hideSearchWords(); event.preventDefault(); } }); }, }; _ready(SphinxHighlight.highlightSearchWords); _ready(SphinxHighlight.initEscapeListener); python3-saml-1.16.0/docs/saml2/genindex.html000066400000000000000000002413061451074743100206060ustar00rootroot00000000000000 Index — SAML Python2/3 Toolkit 1 documentation
  • Index

Index

A | B | C | D | E | F | G | I | K | L | M | N | O | P | Q | R | S | T | U | V | W | X

A

B

C

D

E

F

G

I

K

L

M

N

O

  • onelogin
  • onelogin.saml2
  • onelogin.saml2.auth
  • onelogin.saml2.authn_request
  • onelogin.saml2.compat
  • onelogin.saml2.constants
  • onelogin.saml2.errors
  • onelogin.saml2.idp_metadata_parser
  • onelogin.saml2.logout_request
  • onelogin.saml2.logout_response
  • onelogin.saml2.metadata
  • onelogin.saml2.response

P

Q

R

S

T

U

V

W

X

python3-saml-1.16.0/docs/saml2/index.html000066400000000000000000000164051451074743100201140ustar00rootroot00000000000000 Welcome to SAML Python2/3 Toolkit’s documentation! — SAML Python2/3 Toolkit 1 documentation
python3-saml-1.16.0/docs/saml2/modules.html000066400000000000000000000152421451074743100204530ustar00rootroot00000000000000 onelogin — SAML Python2/3 Toolkit 1 documentation
python3-saml-1.16.0/docs/saml2/objects.inv000066400000000000000000000065511451074743100202670ustar00rootroot00000000000000# Sphinx inventory version 2 # Project: SAML Python2/3 Toolkit # Version: # The remainder of this file is compressed using zlib. xŝ˖83-OgvUޑ g2m 8/+  3{517O27_*lb5!P$6q:ٽ͢2!&Yn"&_S}uiPg˧vJ3ϰHIPwHM(9$EIZ*3Y4eiA쏴F4L?4W%%# 6ޘ?R.F&yˮQ[0cƯ24RG( ӂ),WM0K)y@=T f6у"Ka[RHAn(@cto m @7ԲxۀB@);*n.nqWuJt3Y+l?<Ea@ɸss@֕ͨ,d3J8ۣ$sұ3ئ.ldrCYN #^4?0c])w:<"l4rd$Ag1̶@Kk) ReVRp>ӍJI_EдjFCCToȽA ~G5@>}p ݜy/]]q 0c> ל0w-mvo4ԌSknL0[l\<,9t_α=U(T̳5/ \"칁\?bBW-8 #[(p<5C ŀ2X3ceN 5ʁz p_?3>_]1`{{}_zزMoŤܾ><εn/-G!2Zi.}X* yPIRA7=m /L wMgƃ'  ZഐUkHvn#QeT,ϖ =!(kk>ۓxfhaqEjwNKw1Acxh:5&p47gZlիpqlW|,>z# {O=BZx-]j+tT}[_Neƽ 0;h@6F;-;}Y?R3熋,6 ̦_6Mkfn-7 UPϼ"%ܥ^|؛%sN6gfջ?h=Upn:R]p'bf5>P~H#=GVaNZe4|d~\,ŋ4OU=FR Jnc~ ϖt%0ym=%8`b} (֎Pʘ6lYqTf1޻wNkx (ۿPvyBB<Wx\[WIu`İ5{52{K5lu8B~"fSsvT]G |Q }pmLiKȦVk|[{Zҿ naˠ$0l,<o8-cxE+Gn;j2#gpD`cE"ge[oT* !l;4mFGFqHqD5؉XEgׇ34`9LMs aLp0uH,!``^ASHHZeރD\/tUMr39ϒ!'7a2sp hY(ڃ~$p⊙Vⴘ道7~'S!E*7a`*ڋ@M<]T4‚"]$|:+7-dKIJYŢ)"{rE@Y2Pl.ၼ #J{(!(A6-r/K}4ܽxF쇩LcC<@BKj< 8C: *ea UŻ,?$&IL.iZn+10Kih%́8G7\V⴨ށ@d-"=1*; HU}«eBcHR_S'0慼 [ 6AF%X#&+zɃN bA0pFHM ~`6(`kRc; ib4 6\E"*77;EQWk\ K<.wa(éSkփ#4Nd.[сaڏK^<:/TwT:O_?ڭăgP&*gdW_>E$"2.It ˄nYXl n* itsmFW\ HD dڍۑprFE !0o3 II^mmb{}4=.zA5~ gl iY+oP'ס4h+A73gY0Lnlٔ$ Xٟ#+Gs45 *_zQ$="} Ȳcd8 F-]8VC8ŏ92O:H@jܦ]pJ;6G: ]V P/(֤TE5ղj-Jz 揵/J󀿇; ੪y_hH*s ޿xTΏ<.>iL ߘe*" f݋4&xI t_}i YeB ;@kedX}C(`8x3zًQne+w,$IyWtI};مwjU/I\ooIl\TkCNRf}W:|6ǖ)фj 4 /$_īDIѽv EDjqdyݯ2J@=]!"" +L>^MOML?:IlK&4T{.?YO1iO+T܃wлv1B.EqXm59eG?%ؐ|}|։B6:^Af1/?Npython3-saml-1.16.0/docs/saml2/onelogin.html000066400000000000000000003200311451074743100206100ustar00rootroot00000000000000 onelogin package — SAML Python2/3 Toolkit 1 documentation

onelogin package

Subpackages

Module contents

Add SAML support to your Python softwares using this library.

SAML Python toolkit let you build a SP (Service Provider) over your Python application and connect it to any IdP (Identity Provider).

Supports:

  • SSO and SLO (SP-Initiated and IdP-Initiated).

  • Assertion and nameId encryption.

  • Assertion signature.

  • Message signature: AuthNRequest, LogoutRequest, LogoutResponses.

  • Enable an Assertion Consumer Service endpoint.

  • Enable a Single Logout Service endpoint.

  • Publish the SP metadata (which can be signed).

python3-saml-1.16.0/docs/saml2/onelogin.saml2.html000066400000000000000000013023251451074743100216340ustar00rootroot00000000000000 onelogin.saml2 package — SAML Python2/3 Toolkit 1 documentation

onelogin.saml2 package

Submodules

onelogin.saml2.auth module

OneLogin_Saml2_Auth class

Main class of SAML Python Toolkit.

Initializes the SP SAML instance

class onelogin.saml2.auth.OneLogin_Saml2_Auth(request_data, old_settings=None, custom_base_path=None)[source]

Bases: object

This class implements the SP SAML instance.

Defines the methods that you can invoke in your application in order to add SAML support (initiates SSO, initiates SLO, processes a SAML Response, a Logout Request or a Logout Response).

add_request_signature(request_data, sign_algorithm='http://www.w3.org/2001/04/xmldsig-more#rsa-sha256')[source]

Builds the Signature of the SAML Request.

Parameters:

  • request_data (dict) – The Request parameters

  • sign_algorithm (string) – Signature algorithm method

add_response_signature(response_data, sign_algorithm='http://www.w3.org/2001/04/xmldsig-more#rsa-sha256')[source]

Builds the Signature of the SAML Response. :param response_data: The Response parameters :type response_data: dict

Parameters:

sign_algorithm (string) – Signature algorithm method

authn_request_class

alias of OneLogin_Saml2_Authn_Request

get_attribute(name)[source]

Returns the requested SAML attribute.

Parameters:

name (string) – Name of the attribute

Returns:

Attribute value(s) if exists or None

Return type:

list

get_attributes()[source]

Returns the set of SAML attributes.

Returns:

SAML attributes

Return type:

dict

get_errors()[source]

Returns a list with code errors if something went wrong

Returns:

List of errors

Return type:

list

get_friendlyname_attribute(friendlyname)[source]

Returns the requested SAML attribute searched by FriendlyName.

Parameters:

friendlyname (string) – FriendlyName of the attribute

Returns:

Attribute value(s) if exists or None

Return type:

list

get_friendlyname_attributes()[source]

Returns the set of SAML attributes indexed by FiendlyName.

Returns:

SAML attributes

Return type:

dict

get_last_assertion_id()[source]
Returns:

The ID of the last assertion processed.

Return type:

string

get_last_assertion_issue_instant()[source]
Returns:

The IssueInstant of the last assertion processed.

Return type:

unix/posix timestamp|None

get_last_assertion_not_on_or_after()[source]

The NotOnOrAfter value of the valid SubjectConfirmationData node (if any) of the last assertion processed

get_last_authn_contexts()[source]
Returns:

The list of authentication contexts sent in the last SAML Response.

Return type:

list

get_last_error_reason()[source]

Returns the reason for the last error

Returns:

Reason of the last error

Return type:

None | string

get_last_message_id()[source]
Returns:

The ID of the last Response SAML message processed.

Return type:

string

get_last_request_id()[source]
Returns:

The ID of the last Request SAML message generated.

Return type:

string

get_last_request_xml()[source]

Retrieves the raw XML sent in the last SAML request :returns: SAML request XML :rtype: string|None

get_last_response_in_response_to()[source]
Returns:

InResponseTo attribute of the last Response SAML processed or None if it is not present.

Return type:

string

get_last_response_xml(pretty_print_if_possible=False)[source]

Retrieves the raw XML (decrypted) of the last SAML response, or the last Logout Response generated or processed :returns: SAML response XML :rtype: string|None

get_nameid()[source]

Returns the nameID.

Returns:

NameID

Return type:

string|None

get_nameid_format()[source]

Returns the nameID Format.

Returns:

NameID Format

Return type:

string|None

get_nameid_nq()[source]

Returns the nameID NameQualifier of the Assertion.

Returns:

NameID NameQualifier

Return type:

string|None

get_nameid_spnq()[source]

Returns the nameID SP NameQualifier of the Assertion.

Returns:

NameID SP NameQualifier

Return type:

string|None

get_session_expiration()[source]

Returns the SessionNotOnOrAfter from the AuthnStatement. :returns: The SessionNotOnOrAfter of the assertion :rtype: unix/posix timestamp|None

get_session_index()[source]

Returns the SessionIndex from the AuthnStatement. :returns: The SessionIndex of the assertion :rtype: string

get_settings()[source]

Returns the settings info :return: Setting info :rtype: OneLogin_Saml2_Setting object

get_slo_response_url()[source]

Gets the SLO return URL for IdP-initiated logout.

Returns:

an URL, the SLO return endpoint of the IdP

Return type:

string

get_slo_url()[source]

Gets the SLO URL.

Returns:

An URL, the SLO endpoint of the IdP

Return type:

string

get_sso_url()[source]

Gets the SSO URL.

Returns:

An URL, the SSO endpoint of the IdP

Return type:

string

is_authenticated()[source]

Checks if the user is authenticated or not.

Returns:

True if is authenticated, False if not

Return type:

bool

login(return_to=None, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None)[source]

Initiates the SSO process.

Parameters:

  • return_to (string) – Optional argument. The target URL the user should be redirected to after login.

  • force_authn (bool) – Optional argument. When true the AuthNRequest will set the ForceAuthn=’true’.

  • is_passive (bool) – Optional argument. When true the AuthNRequest will set the Ispassive=’true’.

  • set_nameid_policy (bool) – Optional argument. When true the AuthNRequest will set a nameIdPolicy element.

  • name_id_value_req (string) – Optional argument. Indicates to the IdP the subject that should be authenticated

Returns:

Redirection URL

Return type:

string

logout(return_to=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None)[source]

Initiates the SLO process.

Parameters:

  • return_to (string) – Optional argument. The target URL the user should be redirected to after logout.

  • name_id (string) – The NameID that will be set in the LogoutRequest.

  • session_index (string) – SessionIndex that identifies the session of the user.

  • nq – IDP Name Qualifier

  • name_id_format – The NameID Format that will be set in the LogoutRequest.

  • spnq – SP Name Qualifier

Type:

string

Type:

string

Type:

string

Returns:

Redirection URL

logout_request_class

alias of OneLogin_Saml2_Logout_Request

logout_response_class

alias of OneLogin_Saml2_Logout_Response

process_response(request_id=None)[source]

Process the SAML Response sent by the IdP.

Parameters:

request_id (string) – Is an optional argument. Is the ID of the AuthNRequest sent by this SP to the IdP.

Raises:

OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND, when a POST with a SAMLResponse is not found

process_slo(keep_local_session=False, request_id=None, delete_session_cb=None)[source]

Process the SAML Logout Response / Logout Request sent by the IdP.

Parameters:

  • keep_local_session (bool) – When false will destroy the local session, otherwise will destroy it

  • request_id (string) – The ID of the LogoutRequest sent by this SP to the IdP

Returns:

Redirection url

redirect_to(url=None, parameters={})[source]

Redirects the user to the URL passed by parameter or to the URL that we defined in our SSO Request.

Parameters:

  • url (string) – The target URL to redirect the user

  • parameters (dict) – Extra parameters to be passed as part of the URL

Returns:

Redirection URL

response_class

alias of OneLogin_Saml2_Response

set_strict(value)[source]

Set the strict mode active/disable

Parameters:

value (bool) –

store_valid_response(response)[source]
validate_request_signature(request_data)[source]

Validate Request Signature

Parameters:

request_data (dict) – The Request data

validate_response_signature(request_data)[source]

Validate Response Signature

Parameters:

request_data (dict) – The Request data

onelogin.saml2.authn_request module

OneLogin_Saml2_Authn_Request class

AuthNRequest class of SAML Python Toolkit.

class onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request(settings, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None)[source]

Bases: object

This class handles an AuthNRequest. It builds an AuthNRequest object.

get_id()[source]

Returns the AuthNRequest ID. :return: AuthNRequest ID :rtype: string

get_request(deflate=True)[source]

Returns unsigned AuthnRequest. :param deflate: It makes the deflate process optional :type: bool :return: AuthnRequest maybe deflated and base64 encoded :rtype: str object

get_xml()[source]

Returns the XML that will be sent as part of the request :return: XML request body :rtype: string

onelogin.saml2.compat module

py3 compatibility class

onelogin.saml2.compat.to_bytes(data)[source]

return bytes

onelogin.saml2.compat.to_string(data)[source]

convert to string

onelogin.saml2.compat.utf8(data)[source]

return utf8-encoded string

onelogin.saml2.constants module

OneLogin_Saml2_Constants class

Constants class of SAML Python Toolkit.

class onelogin.saml2.constants.OneLogin_Saml2_Constants[source]

Bases: object

This class defines all the constants that will be used in the SAML Python Toolkit.

AC_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos'
AC_PASSWORD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password'
AC_PASSWORD_PROTECTED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport'
AC_SMARTCARD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard'
AC_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified'
AC_X509 = 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'
AES128_CBC = 'http://www.w3.org/2001/04/xmlenc#aes128-cbc'
AES192_CBC = 'http://www.w3.org/2001/04/xmlenc#aes192-cbc'
AES256_CBC = 'http://www.w3.org/2001/04/xmlenc#aes256-cbc'
ALLOWED_CLOCK_DRIFT = 300
ATTRNAME_FORMAT_BASIC = 'urn:oasis:names:tc:SAML:2.0:attrname-format:basic'
ATTRNAME_FORMAT_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified'
ATTRNAME_FORMAT_URI = 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri'
BINDING_DEFLATE = 'urn:oasis:names:tc:SAML:2.0:bindings:URL-Encoding:DEFLATE'
BINDING_HTTP_ARTIFACT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact'
BINDING_HTTP_POST = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'
BINDING_HTTP_REDIRECT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
BINDING_SOAP = 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP'
CM_BEARER = 'urn:oasis:names:tc:SAML:2.0:cm:bearer'
CM_HOLDER_KEY = 'urn:oasis:names:tc:SAML:2.0:cm:holder-of-key'
CM_SENDER_VOUCHES = 'urn:oasis:names:tc:SAML:2.0:cm:sender-vouches'
DEPRECATED_ALGORITHMS = ['http://www.w3.org/2000/09/xmldsig#dsa-sha1', 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'http://www.w3.org/2000/09/xmldsig#sha1']
DSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#dsa-sha1'
NAMEID_EMAIL_ADDRESS = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'
NAMEID_ENCRYPTED = 'urn:oasis:names:tc:SAML:2.0:nameid-format:encrypted'
NAMEID_ENTITY = 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity'
NAMEID_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos'
NAMEID_PERSISTENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent'
NAMEID_TRANSIENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient'
NAMEID_UNSPECIFIED = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'
NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName'
NAMEID_X509_SUBJECT_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName'
NSMAP = {'ds': 'http://www.w3.org/2000/09/xmldsig#', 'md': 'urn:oasis:names:tc:SAML:2.0:metadata', 'saml': 'urn:oasis:names:tc:SAML:2.0:assertion', 'samlp': 'urn:oasis:names:tc:SAML:2.0:protocol', 'xenc': 'http://www.w3.org/2001/04/xmlenc#'}
NS_DS = 'http://www.w3.org/2000/09/xmldsig#'
NS_MD = 'urn:oasis:names:tc:SAML:2.0:metadata'
NS_PREFIX_DS = 'ds'
NS_PREFIX_MD = 'md'
NS_PREFIX_SAML = 'saml'
NS_PREFIX_SAMLP = 'samlp'
NS_PREFIX_XENC = 'xenc'
NS_PREFIX_XS = 'xs'
NS_PREFIX_XSD = 'xsd'
NS_PREFIX_XSI = 'xsi'
NS_SAML = 'urn:oasis:names:tc:SAML:2.0:assertion'
NS_SAMLP = 'urn:oasis:names:tc:SAML:2.0:protocol'
NS_SOAP = 'http://schemas.xmlsoap.org/soap/envelope/'
NS_XENC = 'http://www.w3.org/2001/04/xmlenc#'
NS_XS = 'http://www.w3.org/2001/XMLSchema'
NS_XSI = 'http://www.w3.org/2001/XMLSchema-instance'
RSA_1_5 = 'http://www.w3.org/2001/04/xmlenc#rsa-1_5'
RSA_OAEP_MGF1P = 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p'
RSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1'
RSA_SHA256 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256'
RSA_SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384'
RSA_SHA512 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512'
SHA1 = 'http://www.w3.org/2000/09/xmldsig#sha1'
SHA256 = 'http://www.w3.org/2001/04/xmlenc#sha256'
SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#sha384'
SHA512 = 'http://www.w3.org/2001/04/xmlenc#sha512'
STATUS_NO_PASSIVE = 'urn:oasis:names:tc:SAML:2.0:status:NoPassive'
STATUS_PARTIAL_LOGOUT = 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout'
STATUS_PROXY_COUNT_EXCEEDED = 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded'
STATUS_REQUESTER = 'urn:oasis:names:tc:SAML:2.0:status:Requester'
STATUS_RESPONDER = 'urn:oasis:names:tc:SAML:2.0:status:Responder'
STATUS_SUCCESS = 'urn:oasis:names:tc:SAML:2.0:status:Success'
STATUS_VERSION_MISMATCH = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch'
TRIPLEDES_CBC = 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc'

onelogin.saml2.errors module

OneLogin_Saml2_Error class

Error class of SAML Python Toolkit.

Defines common Error codes and has a custom initializator.

exception onelogin.saml2.errors.OneLogin_Saml2_Error(message, code=0, errors=None)[source]

Bases: Exception

This class implements a custom Exception handler. Defines custom error codes.

CERT_NOT_FOUND = 4
METADATA_SP_INVALID = 3
PRIVATE_KEY_FILE_NOT_FOUND = 7
PRIVATE_KEY_NOT_FOUND = 13
PUBLIC_CERT_FILE_NOT_FOUND = 6
REDIRECT_INVALID_URL = 5
SAML_LOGOUTMESSAGE_NOT_FOUND = 9
SAML_LOGOUTREQUEST_INVALID = 10
SAML_LOGOUTRESPONSE_INVALID = 11
SAML_RESPONSE_NOT_FOUND = 8
SAML_SINGLE_LOGOUT_NOT_SUPPORTED = 12
SETTINGS_FILE_NOT_FOUND = 0
SETTINGS_INVALID = 2
SETTINGS_INVALID_SYNTAX = 1
SP_CERTS_NOT_FOUND = 4
UNSUPPORTED_SETTINGS_OBJECT = 14
exception onelogin.saml2.errors.OneLogin_Saml2_ValidationError(message, code=0, errors=None)[source]

Bases: Exception

This class implements another custom Exception handler, related to exceptions that happens during validation process. Defines custom error codes .

ASSERTION_EXPIRED = 20
ASSERTION_TOO_EARLY = 19
AUTHN_CONTEXT_MISMATCH = 45
CHILDREN_NODE_NOT_FOUND_IN_KEYINFO = 36
DEPRECATED_DIGEST_METHOD = 47
DEPRECATED_SIGNATURE_METHOD = 46
DUPLICATED_ATTRIBUTE_NAME_FOUND = 41
DUPLICATED_ID_IN_SIGNED_ELEMENTS = 8
DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS = 10
EMPTY_DESTINATION = 25
EMPTY_NAMEID = 39
ENCRYPTED_ATTRIBUTES = 23
ID_NOT_FOUND_IN_SIGNED_ELEMENT = 7
INVALID_SIGNATURE = 42
INVALID_SIGNED_ELEMENT = 9
INVALID_XML_FORMAT = 14
ISSUER_MULTIPLE_IN_RESPONSE = 27
ISSUER_NOT_FOUND_IN_ASSERTION = 28
KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA = 35
MISSING_CONDITIONS = 18
MISSING_ID = 1
MISSING_STATUS = 3
MISSING_STATUS_CODE = 4
NO_ATTRIBUTESTATEMENT = 22
NO_ENCRYPTED_ASSERTION = 16
NO_ENCRYPTED_NAMEID = 17
NO_NAMEID = 38
NO_SIGNATURE_FOUND = 34
NO_SIGNED_ASSERTION = 33
NO_SIGNED_MESSAGE = 32
RESPONSE_EXPIRED = 44
SESSION_EXPIRED = 30
SP_NAME_QUALIFIER_NAME_MISMATCH = 40
STATUS_CODE_IS_NOT_SUCCESS = 5
UNEXPECTED_SIGNED_ELEMENTS = 11
UNSUPPORTED_RETRIEVAL_METHOD = 37
UNSUPPORTED_SAML_VERSION = 0
WRONG_AUDIENCE = 26
WRONG_DESTINATION = 24
WRONG_INRESPONSETO = 15
WRONG_ISSUER = 29
WRONG_NUMBER_OF_ASSERTIONS = 2
WRONG_NUMBER_OF_AUTHSTATEMENTS = 21
WRONG_NUMBER_OF_SIGNATURES = 43
WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION = 13
WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE = 12
WRONG_SIGNED_ELEMENT = 6
WRONG_SUBJECTCONFIRMATION = 31

onelogin.saml2.idp_metadata_parser module

OneLogin_Saml2_IdPMetadataParser class Metadata class of SAML Python Toolkit.

class onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser[source]

Bases: object

A class that contain methods related to obtaining and parsing metadata from IdP

This class does not validate in any way the URL that is introduced, make sure to validate it properly before use it in a get_metadata method.

classmethod get_metadata(url, validate_cert=True, timeout=None, headers=None)[source]

Gets the metadata XML from the provided URL :param url: Url where the XML of the Identity Provider Metadata is published. :type url: string

Parameters:

  • validate_cert (bool) – If the url uses https schema, that flag enables or not the verification of the associated certificate.

  • timeout (int) – Timeout in seconds to wait for metadata response

  • headers (dict) – Extra headers to send in the request

Returns:

metadata XML

Return type:

string

static merge_settings(settings, new_metadata_settings)[source]

Will update the settings with the provided new settings data extracted from the IdP metadata :param settings: Current settings dict data :type settings: dict :param new_metadata_settings: Settings to be merged (extracted from IdP metadata after parsing) :type new_metadata_settings: dict :returns: merged settings :rtype: dict

classmethod parse(idp_metadata, required_sso_binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', required_slo_binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', entity_id=None)[source]

Parses the Identity Provider metadata and return a dict with extracted data.

If there are multiple <IDPSSODescriptor> tags, parse only the first.

Parses only those SSO endpoints with the same binding as given by the required_sso_binding parameter.

Parses only those SLO endpoints with the same binding as given by the required_slo_binding parameter.

If the metadata specifies multiple SSO endpoints with the required binding, extract only the first (the same holds true for SLO endpoints).

Parameters:

  • idp_metadata (string) – XML of the Identity Provider Metadata.

  • required_sso_binding (one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT or OneLogin_Saml2_Constants.BINDING_HTTP_POST) – Parse only POST or REDIRECT SSO endpoints.

  • required_slo_binding (one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT or OneLogin_Saml2_Constants.BINDING_HTTP_POST) – Parse only POST or REDIRECT SLO endpoints.

  • entity_id (string) – Specify the entity_id of the EntityDescriptor that you want to parse a XML that contains multiple EntityDescriptor.

Returns:

settings dict with extracted data

Return type:

dict

classmethod parse_remote(url, validate_cert=True, entity_id=None, timeout=None, **kwargs)[source]

Gets the metadata XML from the provided URL and parse it, returning a dict with extracted data :param url: Url where the XML of the Identity Provider Metadata is published. :type url: string

Parameters:

  • validate_cert (bool) – If the url uses https schema, that flag enables or not the verification of the associated certificate.

  • entity_id (string) – Specify the entity_id of the EntityDescriptor that you want to parse a XML that contains multiple EntityDescriptor.

  • timeout (int) – Timeout in seconds to wait for metadata response

Returns:

settings dict with extracted data

Return type:

dict

onelogin.saml2.idp_metadata_parser.dict_deep_merge(a, b, path=None)[source]

Deep-merge dictionary b into dictionary a.

Kudos to http://stackoverflow.com/a/7205107/145400

onelogin.saml2.logout_request module

OneLogin_Saml2_Logout_Request class

Logout Request class of SAML Python Toolkit.

class onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request(settings, request=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None)[source]

Bases: object

This class handles a Logout Request.

Builds a Logout Response object and validates it.

get_error()[source]

After executing a validation process, if it fails this method returns the cause

classmethod get_id(request)[source]

Returns the ID of the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :return: string ID :rtype: str object

classmethod get_issuer(request)[source]

Gets the Issuer of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :return: The Issuer :rtype: string

classmethod get_nameid(request, key=None)[source]

Gets the NameID of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Value :rtype: string

classmethod get_nameid_data(request, key=None)[source]

Gets the NameID Data of the the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Data (Value, Format, NameQualifier, SPNameQualifier) :rtype: dict

classmethod get_nameid_format(request, key=None)[source]

Gets the NameID Format of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Format :rtype: string

get_request(deflate=True)[source]

Returns the Logout Request deflated, base64encoded :param deflate: It makes the deflate process optional :type: bool :return: Logout Request maybe deflated and base64 encoded :rtype: str object

classmethod get_session_indexes(request)[source]

Gets the SessionIndexes from the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :return: The SessionIndex value :rtype: list

get_xml()[source]

Returns the XML that will be sent as part of the request or that was received at the SP :return: XML request body :rtype: string

is_valid(request_data, raise_exceptions=False)[source]

Checks if the Logout Request received is valid :param request_data: Request Data :type request_data: dict

Parameters:

raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Returns:

If the Logout Request is or not valid

Return type:

boolean

onelogin.saml2.logout_response module

OneLogin_Saml2_Logout_Response class

Logout Response class of SAML Python Toolkit.

class onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response(settings, response=None)[source]

Bases: object

This class handles a Logout Response. It Builds or parses a Logout Response object and validates it.

build(in_response_to, status='urn:oasis:names:tc:SAML:2.0:status:Success')[source]

Creates a Logout Response object. :param in_response_to: InResponseTo value for the Logout Response. :type in_response_to: string :param: status: The status of the response :type: status: string

get_error()[source]

After executing a validation process, if it fails this method returns the cause

get_in_response_to()[source]

Gets the ID of the LogoutRequest which this response is in response to :returns: ID of LogoutRequest this LogoutResponse is in response to or None if it is not present :rtype: str

get_issuer()[source]

Gets the Issuer of the Logout Response Message :return: The Issuer :rtype: string

get_response(deflate=True)[source]

Returns a Logout Response object. :param deflate: It makes the deflate process optional :type: bool :return: Logout Response maybe deflated and base64 encoded :rtype: string

get_status()[source]

Gets the Status :return: The Status :rtype: string

get_xml()[source]

Returns the XML that will be sent as part of the response or that was received at the SP :return: XML response body :rtype: string

is_valid(request_data, request_id=None, raise_exceptions=False)[source]

Determines if the SAML LogoutResponse is valid :param request_id: The ID of the LogoutRequest sent by this SP to the IdP :type request_id: string

Parameters:

raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Returns:

Returns if the SAML LogoutResponse is or not valid

Return type:

boolean

onelogin.saml2.metadata module

OneLoginSaml2Metadata class

Metadata class of SAML Python Toolkit.

class onelogin.saml2.metadata.OneLogin_Saml2_Metadata[source]

Bases: object

A class that contains methods related to the metadata of the SP

TIME_CACHED = 604800
TIME_VALID = 172800
classmethod add_x509_key_descriptors(metadata, cert=None, add_encryption=True)[source]

Adds the x509 descriptors (sign/encryption) to the metadata The same cert will be used for sign/encrypt

Parameters:

  • metadata (string) – SAML Metadata XML

  • cert (string) – x509 cert

  • add_encryption (boolean) – Determines if the KeyDescriptor[use=”encryption”] should be added.

Returns:

Metadata with KeyDescriptors

Return type:

string

classmethod builder(sp, authnsign=False, wsign=False, valid_until=None, cache_duration=None, contacts=None, organization=None)[source]

Builds the metadata of the SP

Parameters:

  • sp (string) – The SP data

  • authnsign (string) – authnRequestsSigned attribute

  • wsign (string) – wantAssertionsSigned attribute

  • valid_until (string|DateTime|Timestamp) – Metadata’s expiry date

  • cache_duration (int|string) – Duration of the cache in seconds

  • contacts (dict) – Contacts info

  • organization (dict) – Organization info

static sign_metadata(metadata, key, cert, sign_algorithm='http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', digest_algorithm='http://www.w3.org/2001/04/xmlenc#sha256')[source]

Signs the metadata with the key/cert provided

Parameters:

  • metadata (string) – SAML Metadata XML

  • key (string) – x509 key

  • cert (string) – x509 cert

  • sign_algorithm (string) – Signature algorithm method

  • digest_algorithm (string) – Digest algorithm method

Returns:

Signed Metadata

Return type:

string

onelogin.saml2.response module

OneLogin_Saml2_Response class

SAML Response class of SAML Python Toolkit.

class onelogin.saml2.response.OneLogin_Saml2_Response(settings, response)[source]

Bases: object

This class handles a SAML Response. It parses or validates a Logout Response object.

check_one_authnstatement()[source]

Checks that the samlp:Response/saml:Assertion/saml:AuthnStatement element exists and is unique.

check_one_condition()[source]

Checks that the samlp:Response/saml:Assertion/saml:Conditions element exists and is unique.

check_status()[source]

Check if the status of the response is success or not

Raises:

Exception. If the status is not success

get_assertion_id()[source]
Returns:

the ID of the assertion in the response

Return type:

string

get_assertion_issue_instant()[source]
Returns:

the IssueInstant of the assertion in the response

Return type:

unix/posix timestamp|None

get_assertion_not_on_or_after()[source]

Returns the NotOnOrAfter value of the valid SubjectConfirmationData node if any

get_attributes()[source]

Gets the Attributes from the AttributeStatement element. EncryptedAttributes are not supported

get_audiences()[source]

Gets the audiences

Returns:

The valid audiences for the SAML Response

Return type:

list

get_authn_contexts()[source]

Gets the authentication contexts

Returns:

The authentication classes for the SAML Response

Return type:

list

get_error()[source]

After executing a validation process, if it fails this method returns the cause

get_friendlyname_attributes()[source]

Gets the Attributes from the AttributeStatement element indexed by FiendlyName. EncryptedAttributes are not supported

get_id()[source]
Returns:

the ID of the response

Return type:

string

get_in_response_to()[source]

Gets the ID of the request which this response is in response to :returns: ID of AuthNRequest this Response is in response to or None if it is not present :rtype: str

get_issuers()[source]

Gets the issuers (from message and from assertion)

Returns:

The issuers

Return type:

list

get_nameid()[source]

Gets the NameID provided by the SAML Response from the IdP

Returns:

NameID (value)

Return type:

string|None

get_nameid_data()[source]

Gets the NameID Data provided by the SAML Response from the IdP

Returns:

Name ID Data (Value, Format, NameQualifier, SPNameQualifier)

Return type:

dict

get_nameid_format()[source]

Gets the NameID Format provided by the SAML Response from the IdP

Returns:

NameID Format

Return type:

string|None

get_nameid_nq()[source]

Gets the NameID NameQualifier provided by the SAML Response from the IdP

Returns:

NameID NameQualifier

Return type:

string|None

get_nameid_spnq()[source]

Gets the NameID SP NameQualifier provided by the SAML response from the IdP.

Returns:

NameID SP NameQualifier

Return type:

string|None

get_session_index()[source]

Gets the SessionIndex from the AuthnStatement Could be used to be stored in the local session in order to be used in a future Logout Request that the SP could send to the SP, to set what specific session must be deleted

Returns:

The SessionIndex value

Return type:

string|None

get_session_not_on_or_after()[source]

Gets the SessionNotOnOrAfter from the AuthnStatement Could be used to set the local session expiration

Returns:

The SessionNotOnOrAfter value

Return type:

time|None

get_xml_document()[source]

Returns the SAML Response document (If contains an encrypted assertion, decrypts it)

Returns:

Decrypted XML response document

Return type:

DOMDocument

is_valid(request_data, request_id=None, raise_exceptions=False)[source]

Validates the response object.

Parameters:

  • request_data (dict) – Request Data

  • request_id (string) – Optional argument. The ID of the AuthNRequest sent by this SP to the IdP

  • raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Returns:

True if the SAML Response is valid, False if not

Return type:

bool

process_signed_elements()[source]
Verifies the signature nodes:

  • Checks that are Response or Assertion

  • Check that IDs and reference URI are unique and consistent.

Returns:

The signed elements tag names

Return type:

list

validate_num_assertions()[source]

Verifies that the document only contains a single Assertion (encrypted or not)

Returns:

True if only 1 assertion encrypted or not

Return type:

bool

validate_signed_elements(signed_elements)[source]

Verifies that the document has the expected signed nodes.

Parameters:

  • signed_elements (list) – The signed elements to be checked

  • raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

validate_timestamps()[source]

Verifies that the document is valid according to Conditions Element

Returns:

True if the condition is valid, False otherwise

Return type:

bool

onelogin.saml2.settings module

OneLogin_Saml2_Settings class

Copyright (c) 2010-2021 OneLogin, Inc. MIT License

Setting class of OneLogin’s Python Toolkit.

class onelogin.saml2.settings.OneLogin_Saml2_Settings(settings=None, custom_base_path=None, sp_validation_only=False)[source]

Bases: object

Handles the settings of the Python toolkits.

check_idp_settings(settings)[source]

Checks the IdP settings info. :param settings: Dict with settings data :type settings: dict :returns: Errors found on the IdP settings data :rtype: list

check_settings(settings)[source]

Checks the settings info.

Parameters:

settings (dict) – Dict with settings data

Returns:

Errors found on the settings data

Return type:

list

check_sp_certs()[source]

Checks if the x509 certs of the SP exists and are valid. :returns: If the x509 certs of the SP exists and are valid :rtype: boolean

check_sp_settings(settings)[source]

Checks the SP settings info. :param settings: Dict with settings data :type settings: dict :returns: Errors found on the SP settings data :rtype: list

format_idp_cert()[source]

Formats the IdP cert.

format_idp_cert_multi()[source]

Formats the Multple IdP certs.

format_sp_cert()[source]

Formats the SP cert.

format_sp_cert_new()[source]

Formats the SP cert.

format_sp_key()[source]

Formats the private key.

get_base_path()[source]

Returns base path

Returns:

The base toolkit folder path

Return type:

string

get_cert_path()[source]

Returns cert path

Returns:

The cert folder path

Return type:

string

get_contacts()[source]

Gets contact data.

Returns:

Contacts info

Return type:

dict

get_errors()[source]

Returns an array with the errors, the array is empty when the settings is ok.

Returns:

Errors

Return type:

list

get_idp_cert()[source]

Returns the x509 public cert of the IdP. :returns: IdP public cert :rtype: string

get_idp_data()[source]

Gets the IdP data.

Returns:

IdP info

Return type:

dict

get_idp_slo_response_url()[source]

Gets the IdP SLO return URL for IdP-initiated logout.

Returns:

an URL, the SLO return endpoint of the IdP

Return type:

string

get_idp_slo_url()[source]

Gets the IdP SLO URL.

Returns:

An URL, the SLO endpoint of the IdP

Return type:

string

get_idp_sso_url()[source]

Gets the IdP SSO URL.

Returns:

An URL, the SSO endpoint of the IdP

Return type:

string

get_lib_path()[source]

Returns lib path

Returns:

The library folder path

Return type:

string

get_organization()[source]

Gets organization data.

Returns:

Organization info

Return type:

dict

get_schemas_path()[source]

Returns schema path

Returns:

The schema folder path

Return type:

string

get_security_data()[source]

Gets security data.

Returns:

Security info

Return type:

dict

get_sp_cert()[source]

Returns the x509 public cert of the SP. :returns: SP public cert :rtype: string or None

get_sp_cert_new()[source]

Returns the x509 public of the SP planned to be used soon instead the other public cert :returns: SP public cert new :rtype: string or None

get_sp_data()[source]

Gets the SP data.

Returns:

SP info

Return type:

dict

get_sp_key()[source]

Returns the x509 private key of the SP. :returns: SP private key :rtype: string or None

get_sp_metadata()[source]

Gets the SP metadata. The XML representation. :returns: SP metadata (xml) :rtype: string

is_debug_active()[source]

Returns if the debug is active.

Returns:

Debug parameter

Return type:

boolean

is_strict()[source]

Returns if the ‘strict’ mode is active.

Returns:

Strict parameter

Return type:

boolean

metadata_class

alias of OneLogin_Saml2_Metadata

set_cert_path(path)[source]

Set a new cert path

set_strict(value)[source]

Activates or deactivates the strict mode.

Parameters:

value (boolean) – Strict parameter

validate_metadata(xml)[source]

Validates an XML SP Metadata.

Parameters:

xml (string) – Metadata’s XML that will be validate

Returns:

The list of found errors

Return type:

list

onelogin.saml2.settings.validate_url(url, allow_single_label_domain=False)[source]

Auxiliary method to validate an urllib :param url: An url to be validated :type url: string :param allow_single_label_domain: In order to allow or not single label domain :type url: bool :returns: True if the url is valid :rtype: bool

onelogin.saml2.utils module

OneLogin_Saml2_Utils class

Auxiliary class of SAML Python Toolkit.

class onelogin.saml2.utils.OneLogin_Saml2_Utils[source]

Bases: object

Auxiliary class that contains several utility methods to parse time, urls, add sign, encrypt, decrypt, sign validation, handle xml …

ASSERTION_SIGNATURE_XPATH = '/samlp:Response/saml:Assertion/ds:Signature'
RESPONSE_SIGNATURE_XPATH = '/samlp:Response/ds:Signature'
TIME_FORMAT = '%Y-%m-%dT%H:%M:%SZ'
TIME_FORMAT_2 = '%Y-%m-%dT%H:%M:%S.%fZ'
TIME_FORMAT_WITH_FRAGMENT = re.compile('^(\\d{4,4}-\\d{2,2}-\\d{2,2}T\\d{2,2}:\\d{2,2}:\\d{2,2})(\\.\\d*)?Z?$')
static add_sign(xml, key, cert, debug=False, sign_algorithm='http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', digest_algorithm='http://www.w3.org/2001/04/xmlenc#sha256')[source]

Adds signature key and senders certificate to an element (Message or Assertion).

Parameters:

  • xml – The element we should sign

  • key – The private key

  • cert – The public

  • debug – Activate the xmlsec debug

  • sign_algorithm (string) – Signature algorithm method

  • digest_algorithm (string) – Digest algorithm method

Type:

string | Document

Type:

string

Type:

string

Type:

bool

Returns:

Signed XML

Return type:

string

static b64decode(data)[source]

base64 decode

static b64encode(data)[source]

base64 encode

static calculate_x509_fingerprint(x509_cert, alg='sha1')[source]

Calculates the fingerprint of a formatted x509cert.

Parameters:

  • x509_cert – x509 cert formatted

  • alg – The algorithm to build the fingerprint

Type:

string

Type:

string

Returns:

fingerprint

Return type:

string

static decode_base64_and_inflate(value, ignore_zip=False)[source]

base64 decodes and then inflates according to RFC1951 :param value: a deflated and encoded string :type value: string :param ignore_zip: ignore zip errors :returns: the string after decoding and inflating :rtype: string

static decrypt_element(encrypted_data, key, debug=False, inplace=False)[source]

Decrypts an encrypted element.

Parameters:

  • encrypted_data – The encrypted data.

  • key – The key.

  • debug – Activate the xmlsec debug

  • inplace – update passed data with decrypted result

Type:

lxml.etree.Element | DOMElement | basestring

Type:

string

Type:

bool

Type:

bool

Returns:

The decrypted element.

Return type:

lxml.etree.Element

static deflate_and_base64_encode(value)[source]

Deflates and then base64 encodes a string :param value: The string to deflate and encode :type value: string :returns: The deflated and encoded string :rtype: string

static delete_local_session(callback=None)[source]

Deletes the local session.

static escape_url(url, lowercase_urlencoding=False)[source]

escape the non-safe symbols in url The encoding used by ADFS 3.0 is not compatible with python’s quote_plus (ADFS produces lower case hex numbers and quote_plus produces upper case hex numbers) :param url: the url to escape :type url: str

Parameters:

lowercase_urlencoding (boolean) – lowercase or no

Returns:

the escaped url

:rtype str

static format_cert(cert, heads=True)[source]

Returns a x509 cert (adding header & footer if required).

Parameters:

  • cert – A x509 unformatted cert

  • heads – True if we want to include head and footer

Type:

string

Type:

boolean

Returns:

Formatted cert

Return type:

string

static format_finger_print(fingerprint)[source]

Formats a fingerprint.

Parameters:

fingerprint – fingerprint

Type:

string

Returns:

Formatted fingerprint

Return type:

string

static format_private_key(key, heads=True)[source]

Returns a private key (adding header & footer if required).

:param key A private key :type: string

Parameters:

heads – True if we want to include head and footer

Type:

boolean

Returns:

Formated private key

Return type:

string

static generate_name_id(value, sp_nq, sp_format=None, cert=None, debug=False, nq=None)[source]

Generates a nameID.

Parameters:

  • value – fingerprint

  • sp_nq – SP Name Qualifier

  • sp_format – SP Format

  • cert – IdP Public Cert to encrypt the nameID

  • debug – Activate the xmlsec debug

  • nq – IDP Name Qualifier

Type:

string

Type:

string

Type:

string

Type:

string

Type:

bool

Returns:

DOMElement | XMLSec nameID

Return type:

string

Type:

string

static generate_unique_id()[source]

Generates an unique string (used for example as ID for assertions).

Returns:

A unique string

Return type:

string

static get_expire_time(cache_duration=None, valid_until=None)[source]

Compares 2 dates and returns the earliest.

Parameters:

  • cache_duration – The duration, as a string.

  • valid_until – The valid until date, as a string or as a timestamp

Type:

string

Type:

string

Returns:

The expiration time.

Return type:

int

static get_self_host(request_data)[source]

Returns the current host (which may include a port number part).

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

The current host

Return type:

string

static get_self_routed_url_no_query(request_data)[source]

Returns the routed URL of the current host + current view.

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

The url of current host + current view

Return type:

string

static get_self_url(request_data)[source]

Returns the URL of the current host + current view + query.

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

The url of current host + current view + query

Return type:

string

static get_self_url_host(request_data)[source]

Returns the protocol + the current host + the port (if different than common ports).

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

Url

Return type:

string

static get_self_url_no_query(request_data)[source]

Returns the URL of the current host + current view.

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

The url of current host + current view

Return type:

string

static get_status(dom)[source]

Gets Status from a Response.

Parameters:

dom – The Response as XML

Type:

Document

Returns:

The Status, an array with the code and a message.

Return type:

dict

static is_https(request_data)[source]

Checks if https or http.

Parameters:

request_data – The request as a dict

Type:

dict

Returns:

False if https is not active

Return type:

boolean

static normalize_url(url)[source]

Returns normalized URL for comparison. This method converts the netloc to lowercase, as it should be case-insensitive (per RFC 4343, RFC 7617) If standardization fails, the original URL is returned Python documentation indicates that URL split also normalizes query strings if empty query fields are present

Parameters:

url (String) – URL

Returns:

A normalized URL, or the given URL string if parsing fails

Return type:

String

static now()[source]
Returns:

unix timestamp of actual time.

Return type:

int

static parse_SAML_to_time(timestr)[source]

Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(.s+)?Z to a UNIX timestamp. The sub-second part is ignored.

Parameters:

timestr – The time we should convert (SAML Timestamp).

Type:

string

Returns:

Converted to a unix timestamp.

Return type:

int

static parse_duration(duration, timestamp=None)[source]

Interprets a ISO8601 duration value relative to a given timestamp.

Parameters:

  • duration – The duration, as a string.

  • timestamp – The unix timestamp we should apply the duration to. Optional, default to the current time.

Type:

string

Type:

string

Returns:

The new timestamp, after the duration is applied.

Return type:

int

static parse_time_to_SAML(time)[source]

Converts a UNIX timestamp to SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(.s+)?Z.

Parameters:

time – The time we should convert (DateTime).

Type:

string

Returns:

SAML2 timestamp.

Return type:

string

static redirect(url, parameters={}, request_data={})[source]

Executes a redirection to the provided url (or return the target url).

Parameters:

  • url – The target url

  • parameters – Extra parameters to be passed as part of the url

  • request_data – The request as a dict

Type:

string

Type:

dict

Type:

dict

Returns:

Url

Return type:

string

static sign_binary(msg, key, algorithm=__Transform('rsa-sha256', 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', 8), debug=False)[source]

Sign binary message

Parameters:

  • msg – The element we should validate

  • key – The private key

  • debug – Activate the xmlsec debug

Type:

bytes

Type:

string

Type:

bool

:return signed message :rtype str

static validate_binary_sign(signed_query, signature, cert=None, algorithm='http://www.w3.org/2001/04/xmldsig-more#rsa-sha256', debug=False)[source]

Validates signed binary data (Used to validate GET Signature).

Parameters:

  • signed_query – The element we should validate

  • signature – The signature that will be validate

  • cert – The public cert

  • algorithm – Signature algorithm

  • debug – Activate the xmlsec debug

Type:

string

Type:

string

Type:

string

Type:

string

Type:

bool

static validate_metadata_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False)[source]

Validates a signature of a EntityDescriptor.

Parameters:

  • xml – The element we should validate

  • cert – The public cert

  • fingerprint – The fingerprint of the public cert

  • fingerprintalg – The algorithm used to build the fingerprint

  • validatecert – If true, will verify the signature and if the cert is valid.

  • debug – Activate the xmlsec debug

  • raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Type:

string | Document

Type:

string

Type:

string

Type:

string

Type:

bool

Type:

bool

static validate_node_sign(signature_node, elem, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False)[source]

Validates a signature node.

Parameters:

  • signature_node – The signature node

  • xml – The element we should validate

  • cert – The public cert

  • fingerprint – The fingerprint of the public cert

  • fingerprintalg – The algorithm used to build the fingerprint

  • validatecert – If true, will verify the signature and if the cert is valid.

  • debug – Activate the xmlsec debug

  • raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Type:

Node

Type:

Document

Type:

string

Type:

string

Type:

string

Type:

bool

Type:

bool

static validate_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False, xpath=None, multicerts=None)[source]

Validates a signature (Message or Assertion).

Parameters:

  • xml – The element we should validate

  • cert – The public cert

  • fingerprint – The fingerprint of the public cert

  • fingerprintalg – The algorithm used to build the fingerprint

  • validatecert – If true, will verify the signature and if the cert is valid.

  • debug – Activate the xmlsec debug

  • xpath – The xpath of the signed element

  • multicerts – Multiple public certs

  • raise_exceptions (Boolean) – Whether to return false on failure or raise an exception

Type:

string | Document

Type:

string

Type:

string

Type:

string

Type:

bool

Type:

bool

Type:

string

Type:

list

onelogin.saml2.utils.return_false_on_exception(func)[source]

Decorator. When applied to a function, it will, by default, suppress any exceptions raised by that function and return False. It may be overridden by passing a “raise_exceptions” keyword argument when calling the wrapped function.

onelogin.saml2.xml_templates module

OneLogin_Saml2_Auth class

Main class of SAML Python Toolkit.

Initializes the SP SAML instance

class onelogin.saml2.xml_templates.OneLogin_Saml2_Templates[source]

Bases: object

ATTRIBUTE = '\n        <saml:Attribute Name="%s" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">\n            <saml:AttributeValue xsi:type="xs:string">%s</saml:AttributeValue>\n        </saml:Attribute>'
AUTHN_REQUEST = '<samlp:AuthnRequest\n  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\n  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"\n  ID="%(id)s"\n  Version="2.0"%(provider_name)s%(force_authn_str)s%(is_passive_str)s\n  IssueInstant="%(issue_instant)s"\n  Destination="%(destination)s"\n  ProtocolBinding="%(acs_binding)s"\n  AssertionConsumerServiceURL="%(assertion_url)s"%(attr_consuming_service_str)s>\n    <saml:Issuer>%(entity_id)s</saml:Issuer>%(subject_str)s%(nameid_policy_str)s\n%(requested_authn_context_str)s\n</samlp:AuthnRequest>'
LOGOUT_REQUEST = '<samlp:LogoutRequest\n  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\n  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"\n  ID="%(id)s"\n  Version="2.0"\n  IssueInstant="%(issue_instant)s"\n  Destination="%(single_logout_url)s">\n    <saml:Issuer>%(entity_id)s</saml:Issuer>\n    %(name_id)s\n    %(session_index)s\n</samlp:LogoutRequest>'
LOGOUT_RESPONSE = '<samlp:LogoutResponse\n  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\n  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"\n  ID="%(id)s"\n  Version="2.0"\n  IssueInstant="%(issue_instant)s"\n  Destination="%(destination)s"\n  InResponseTo="%(in_response_to)s">\n    <saml:Issuer>%(entity_id)s</saml:Issuer>\n    <samlp:Status>\n        <samlp:StatusCode Value="%(status)s" />\n    </samlp:Status>\n</samlp:LogoutResponse>'
MD_ATTR_CONSUMER_SERVICE = '        <md:AttributeConsumingService index="1">\n            <md:ServiceName xml:lang="en">%(service_name)s</md:ServiceName>\n%(attr_cs_desc)s%(requested_attribute_str)s\n        </md:AttributeConsumingService>\n'
MD_CONTACT_PERSON = '    <md:ContactPerson contactType="%(type)s">\n        <md:GivenName>%(name)s</md:GivenName>\n        <md:EmailAddress>%(email)s</md:EmailAddress>\n    </md:ContactPerson>'
MD_ENTITY_DESCRIPTOR = '<?xml version="1.0"?>\n<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"\n                     %(valid)s\n                     %(cache)s\n                     entityID="%(entity_id)s">\n    <md:SPSSODescriptor AuthnRequestsSigned="%(authnsign)s" WantAssertionsSigned="%(wsign)s" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">\n%(sls)s        <md:NameIDFormat>%(name_id_format)s</md:NameIDFormat>\n        <md:AssertionConsumerService Binding="%(binding)s"\n                                     Location="%(location)s"\n                                     index="1" />\n%(attribute_consuming_service)s    </md:SPSSODescriptor>\n%(organization)s\n%(contacts)s\n</md:EntityDescriptor>'
MD_ORGANISATION = '    <md:Organization>\n        <md:OrganizationName xml:lang="%(lang)s">%(name)s</md:OrganizationName>\n        <md:OrganizationDisplayName xml:lang="%(lang)s">%(display_name)s</md:OrganizationDisplayName>\n        <md:OrganizationURL xml:lang="%(lang)s">%(url)s</md:OrganizationURL>\n    </md:Organization>'
MD_REQUESTED_ATTRIBUTE = '            <md:RequestedAttribute Name="%(req_attr_name)s"%(req_attr_nameformat_str)s%(req_attr_isrequired_str)s%(req_attr_aux_str)s'
MD_SLS = '        <md:SingleLogoutService Binding="%(binding)s"\n                                Location="%(location)s" />\n'
RESPONSE = '<samlp:Response\n  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\n  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"\n  ID="%(id)s"\n  InResponseTo="%(in_response_to)s"\n  Version="2.0"\n  IssueInstant="%(issue_instant)s"\n  Destination="%(destination)s">\n    <saml:Issuer>%(entity_id)s</saml:Issuer>\n    <samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">\n        <samlp:StatusCode\n          xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"\n          Value="%(status)s">\n        </samlp:StatusCode>\n    </samlp:Status>\n    <saml:Assertion\n        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"\n        xmlns:xs="http://www.w3.org/2001/XMLSchema"\n        Version="2.0"\n        ID="%(assertion_id)s"\n        IssueInstant="%(issue_instant)s">\n        <saml:Issuer>%(entity_id)s</saml:Issuer>\n        <saml:Subject>\n            <saml:NameID\n              NameQualifier="%(entity_id)s"\n              SPNameQualifier="%(requester)s"\n              Format="%(name_id_policy)s">%(name_id)s</saml:NameID>\n            <saml:SubjectConfirmation Method="%(cm)s">\n                <saml:SubjectConfirmationData\n                  NotOnOrAfter="%(not_after)s"\n                  InResponseTo="%(in_response_to)s"\n                  Recipient="%(destination)s">\n                </saml:SubjectConfirmationData>\n            </saml:SubjectConfirmation>\n        </saml:Subject>\n        <saml:Conditions NotBefore="%(not_before)s" NotOnOrAfter="%(not_after)s">\n            <saml:AudienceRestriction>\n                <saml:Audience>%(requester)s</saml:Audience>\n            </saml:AudienceRestriction>\n        </saml:Conditions>\n        <saml:AuthnStatement\n          AuthnInstant="%(issue_instant)s"\n          SessionIndex="%(session_index)s"\n          SessionNotOnOrAfter="%(not_after)s">\n%(authn_context)s\n        </saml:AuthnStatement>\n        <saml:AttributeStatement>\n%(attributes)s\n        </saml:AttributeStatement>\n    </saml:Assertion>\n</samlp:Response>'

onelogin.saml2.xml_utils module

OneLogin_Saml2_XML class

Auxiliary class of SAML Python Toolkit.

class onelogin.saml2.xml_utils.OneLogin_Saml2_XML[source]

Bases: object

static cleanup_namespaces(tree_or_element, top_nsmap=None, keep_ns_prefixes=None)[source]

Keeps the xmlns:xs namespace intact when etree.cleanup_namespaces is invoked. :param tree_or_element: An XML tree or element :type tree_or_element: etree.Element :param top_nsmap: A mapping from namespace prefixes to namespace URIs :type top_nsmap: dict :param keep_ns_prefixes: List of prefixes that should not be removed as part of the cleanup :type keep_ns_prefixes: list :returns: An XML tree or element :rtype: etree.Element

static dump(elem, pretty_print=True, with_tail=True)

Writes an element tree or element structure to sys.stdout. This function should be used for debugging only.

static element_text(node)[source]
static extract_tag_text(xml, tagname)[source]
static make_child(_parent, _tag, attrib=None, nsmap=None, **_extra)

SubElement(_parent, _tag, attrib=None, nsmap=None, **_extra)

Subelement factory. This function creates an element instance, and appends it to an existing element.

static make_root(_tag, attrib=None, nsmap=None, **_extra)

Element(_tag, attrib=None, nsmap=None, **_extra)

Element factory. This function returns an object implementing the Element interface.

Also look at the _Element.makeelement() and _BaseParser.makeelement() methods, which provide a faster way to create an Element within a specific document or parser context.

static query(dom, query, context=None, tagid=None)[source]

Extracts nodes that match the query from the Element

Parameters:

  • dom – The root of the lxml objet

  • query (String) – Xpath Expresion

  • context – Context Node

  • tagid – Tag ID

Type:

Element

Type:

string

Type:

DOMElement

Returns:

The queried nodes

Return type:

list

static to_etree(xml)[source]

Parses an XML document or fragment from a string. :param xml: the string to parse :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :returns: the root node :rtype: OneLogin_Saml2_XML._element_class

static to_string(xml, **kwargs)[source]

Serialize an element to an encoded string representation of its XML tree. :param xml: The root node :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :returns: string representation of xml :rtype: string

static validate_xml(xml, schema, debug=False)[source]

Validates a xml against a schema :param xml: The xml that will be validated :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :param schema: The schema :type schema: string :param debug: If debug is active, the parse-errors will be showed :type debug: bool :returns: Error code or the DomDocument of the xml :rtype: xml.dom.minidom.Document

onelogin.saml2.xmlparser module

lxml.etree protection

exception onelogin.saml2.xmlparser.DTDForbidden(name, sysid, pubid)[source]

Bases: ValueError

Document type definition is forbidden

exception onelogin.saml2.xmlparser.EntitiesForbidden(name, value, base, sysid, pubid, notation_name)[source]

Bases: ValueError

Entity definition is forbidden

class onelogin.saml2.xmlparser.GlobalParserTLS[source]

Bases: _local

Thread local context for custom parser instances

createDefaultParser()[source]
element_class

alias of RestrictedElement

getDefaultParser()[source]
parser_config = {'huge_tree': False, 'no_network': True, 'remove_comments': True, 'remove_pis': True, 'resolve_entities': False}
setDefaultParser(parser)[source]
exception onelogin.saml2.xmlparser.NotSupportedError[source]

Bases: ValueError

The operation is not supported

class onelogin.saml2.xmlparser.RestrictedElement[source]

Bases: ElementBase

A restricted Element class that filters out instances of some classes

blacklist = (<class 'lxml.etree._Entity'>, <class 'lxml.etree._ProcessingInstruction'>, <class 'lxml.etree._Comment'>)
getchildren(self)[source]

Returns all direct children. The elements are returned in document order.

Deprecated:

Note that this method has been deprecated as of ElementTree 1.3 and lxml 2.0. New code should use list(element) or simply iterate over elements.

getiterator(self, tag=None, *tags)[source]

Returns a sequence or iterator of all elements in the subtree in document order (depth first pre-order), starting with this element.

Can be restricted to find only elements with specific tags, see iter.

Deprecated:

Note that this method is deprecated as of ElementTree 1.3 and lxml 2.0. It returns an iterator in lxml, which diverges from the original ElementTree behaviour. If you want an efficient iterator, use the element.iter() method instead. You should only use this method in new code if you require backwards compatibility with older versions of lxml or ElementTree.

iter(self, tag=None, *tags)[source]

Iterate over all elements in the subtree in document order (depth first pre-order), starting with this element.

Can be restricted to find only elements with specific tags: pass "{ns}localname" as tag. Either or both of ns and localname can be * for a wildcard; ns can be empty for no namespace. "localname" is equivalent to "{}localname" (i.e. no namespace) but "*" is "{*}*" (any or no namespace), not "{}*".

You can also pass the Element, Comment, ProcessingInstruction and Entity factory functions to look only for the specific element type.

Passing multiple tags (or a sequence of tags) instead of a single tag will let the iterator return all elements matching any of these tags, in document order.

iterchildren(self, tag=None, *tags, reversed=False)[source]

Iterate over the children of this element.

As opposed to using normal iteration on this element, the returned elements can be reversed with the ‘reversed’ keyword and restricted to find only elements with specific tags, see iter.

iterdescendants(self, tag=None, *tags)[source]

Iterate over the descendants of this element in document order.

As opposed to el.iter(), this iterator does not yield the element itself. The returned elements can be restricted to find only elements with specific tags, see iter.

itersiblings(self, tag=None, *tags, preceding=False)[source]

Iterate over the following or preceding siblings of this element.

The direction is determined by the ‘preceding’ keyword which defaults to False, i.e. forward iteration over the following siblings. When True, the iterator yields the preceding siblings in reverse document order, i.e. starting right before the current element and going backwards.

Can be restricted to find only elements with specific tags, see iter.

onelogin.saml2.xmlparser.XML(text, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True)
onelogin.saml2.xmlparser.check_docinfo(elementtree, forbid_dtd=False, forbid_entities=True)[source]

Check docinfo of an element tree for DTD and entity declarations The check for entity declarations needs lxml 3 or newer. lxml 2.x does not support dtd.iterentities().

onelogin.saml2.xmlparser.fromstring(text, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True)[source]
onelogin.saml2.xmlparser.getDefaultParser()
onelogin.saml2.xmlparser.iterparse(*args, **kwargs)[source]
onelogin.saml2.xmlparser.parse(source, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True)[source]

Module contents

Add SAML support to your Python softwares using this library.

SAML Python toolkit let you build a SP (Service Provider) over your Python application and connect it to any IdP (Identity Provider).

Supports:

  • SSO and SLO (SP-Initiated and IdP-Initiated).

  • Assertion and nameId encryption.

  • Assertion signature.

  • Message signature: AuthNRequest, LogoutRequest, LogoutResponses.

  • Enable an Assertion Consumer Service endpoint.

  • Enable a Single Logout Service endpoint.

  • Publish the SP metadata (which can be signed).

python3-saml-1.16.0/docs/saml2/py-modindex.html000066400000000000000000000170711451074743100212420ustar00rootroot00000000000000 Python Module Index — SAML Python2/3 Toolkit 1 documentation
  • Python Module Index
python3-saml-1.16.0/docs/saml2/search.html000066400000000000000000000074531451074743100202550ustar00rootroot00000000000000 Search — SAML Python2/3 Toolkit 1 documentation
  • Search
python3-saml-1.16.0/docs/saml2/searchindex.js000066400000000000000000002713521451074743100207560ustar00rootroot00000000000000Search.setIndex({"docnames": ["index", "modules", "onelogin", "onelogin.saml2"], "filenames": ["index.rst", "modules.rst", "onelogin.rst", "onelogin.saml2.rst"], "titles": ["Welcome to SAML Python2/3 Toolkit\u2019s documentation!", "onelogin", "onelogin package", "onelogin.saml2 package"], "terms": {"onelogin": 0, "packag": [0, 1], "subpackag": [0, 1], "saml2": [0, 1, 2], "submodul": [0, 1, 2], "auth": [0, 1, 2], "modul": [0, 1], "authn_request": [0, 1, 2], "compat": [0, 1, 2], "constant": [0, 1, 2], "error": [0, 1, 2], "idp_metadata_pars": [0, 1, 2], "logout_request": [0, 1, 2], "logout_respons": [0, 1, 2], "metadata": [0, 1, 2], "respons": [0, 1, 2], "set": [0, 1, 2], "util": [0, 1, 2], "xml_templat": [0, 1, 2], "xml_util": [0, 1, 2], "xmlparser": [0, 1, 2], "content": 1, "onelogin_saml2_auth": [2, 3], "add_request_signatur": [2, 3], "add_response_signatur": [2, 3], "authn_request_class": [2, 3], "get_attribut": [2, 3], "get_error": [2, 3], "get_friendlyname_attribut": [2, 3], "get_last_assertion_id": [2, 3], "get_last_assertion_issue_inst": [2, 3], "get_last_assertion_not_on_or_aft": [2, 3], "get_last_authn_context": [2, 3], "get_last_error_reason": [2, 3], "get_last_message_id": [2, 3], "get_last_request_id": [2, 3], "get_last_request_xml": [2, 3], "get_last_response_in_response_to": [2, 3], "get_last_response_xml": [2, 3], "get_nameid": [2, 3], "get_nameid_format": [2, 3], "get_nameid_nq": [2, 3], "get_nameid_spnq": [2, 3], "get_session_expir": [2, 3], "get_session_index": [2, 3], "get_set": [2, 3], "get_slo_response_url": [2, 3], "get_slo_url": [2, 3], "get_sso_url": [2, 3], "is_authent": [2, 3], "login": [2, 3], "logout": [2, 3], "logout_request_class": [2, 3], "logout_response_class": [2, 3], "process_respons": [2, 3], "process_slo": [2, 3], "redirect_to": [2, 3], "response_class": [2, 3], "set_strict": [2, 3], "store_valid_respons": [2, 3], "validate_request_signatur": [2, 3], "validate_response_signatur": [2, 3], "onelogin_saml2_authn_request": [2, 3], "get_id": [2, 3], "get_request": [2, 3], "get_xml": [2, 3], "to_byt": [2, 3], "to_str": [2, 3], "utf8": [2, 3], "onelogin_saml2_const": [2, 3], "ac_kerbero": [2, 3], "ac_password": [2, 3], "ac_password_protect": [2, 3], "ac_smartcard": [2, 3], "ac_unspecifi": [2, 3], "ac_x509": [2, 3], "aes128_cbc": [2, 3], "aes192_cbc": [2, 3], "aes256_cbc": [2, 3], "allowed_clock_drift": [2, 3], "attrname_format_bas": [2, 3], "attrname_format_unspecifi": [2, 3], "attrname_format_uri": [2, 3], "binding_defl": [2, 3], "binding_http_artifact": [2, 3], "binding_http_post": [2, 3], "binding_http_redirect": [2, 3], "binding_soap": [2, 3], "cm_bearer": [2, 3], "cm_holder_kei": [2, 3], "cm_sender_vouch": [2, 3], "deprecated_algorithm": [2, 3], "dsa_sha1": [2, 3], "nameid_email_address": [2, 3], "nameid_encrypt": [2, 3], "nameid_ent": [2, 3], "nameid_kerbero": [2, 3], "nameid_persist": [2, 3], "nameid_transi": [2, 3], "nameid_unspecifi": [2, 3], "nameid_windows_domain_qualified_nam": [2, 3], "nameid_x509_subject_nam": [2, 3], "nsmap": [2, 3], "ns_d": [2, 3], "ns_md": [2, 3], "ns_prefix_d": [2, 3], "ns_prefix_md": [2, 3], "ns_prefix_saml": [2, 3], "ns_prefix_samlp": [2, 3], "ns_prefix_xenc": [2, 3], "ns_prefix_x": [2, 3], "ns_prefix_xsd": [2, 3], "ns_prefix_xsi": [2, 3], "ns_saml": [2, 3], "ns_samlp": [2, 3], "ns_soap": [2, 3], "ns_xenc": [2, 3], "ns_x": [2, 3], "ns_xsi": [2, 3], "rsa_1_5": [2, 3], "rsa_oaep_mgf1p": [2, 3], "rsa_sha1": [2, 3], "rsa_sha256": [2, 3], "rsa_sha384": [2, 3], "rsa_sha512": [2, 3], "sha1": [2, 3], "sha256": [2, 3], "sha384": [2, 3], "sha512": [2, 3], "status_no_pass": [2, 3], "status_partial_logout": [2, 3], "status_proxy_count_exceed": [2, 3], "status_request": [2, 3], "status_respond": [2, 3], "status_success": [2, 3], "status_version_mismatch": [2, 3], "tripledes_cbc": [2, 3], "onelogin_saml2_error": [2, 3], "cert_not_found": [2, 3], "metadata_sp_invalid": [2, 3], "private_key_file_not_found": [2, 3], "private_key_not_found": [2, 3], "public_cert_file_not_found": [2, 3], "redirect_invalid_url": [2, 3], "saml_logoutmessage_not_found": [2, 3], "saml_logoutrequest_invalid": [2, 3], "saml_logoutresponse_invalid": [2, 3], "saml_response_not_found": [2, 3], "saml_single_logout_not_support": [2, 3], "settings_file_not_found": [2, 3], "settings_invalid": [2, 3], "settings_invalid_syntax": [2, 3], "sp_certs_not_found": [2, 3], "unsupported_settings_object": [2, 3], "onelogin_saml2_validationerror": [2, 3], "assertion_expir": [2, 3], "assertion_too_earli": [2, 3], "authn_context_mismatch": [2, 3], "children_node_not_found_in_keyinfo": [2, 3], "deprecated_digest_method": [2, 3], "deprecated_signature_method": [2, 3], "duplicated_attribute_name_found": [2, 3], "duplicated_id_in_signed_el": [2, 3], "duplicated_reference_in_signed_el": [2, 3], "empty_destin": [2, 3], "empty_nameid": [2, 3], "encrypted_attribut": [2, 3], "id_not_found_in_signed_el": [2, 3], "invalid_signatur": [2, 3], "invalid_signed_el": [2, 3], "invalid_xml_format": [2, 3], "issuer_multiple_in_respons": [2, 3], "issuer_not_found_in_assert": [2, 3], "keyinfo_not_found_in_encrypted_data": [2, 3], "missing_condit": [2, 3], "missing_id": [2, 3], "missing_statu": [2, 3], "missing_status_cod": [2, 3], "no_attributestat": [2, 3], "no_encrypted_assert": [2, 3], "no_encrypted_nameid": [2, 3], "no_nameid": [2, 3], "no_signature_found": [2, 3], "no_signed_assert": [2, 3], "no_signed_messag": [2, 3], "response_expir": [2, 3], "session_expir": [2, 3], "sp_name_qualifier_name_mismatch": [2, 3], "status_code_is_not_success": [2, 3], "unexpected_signed_el": [2, 3], "unsupported_retrieval_method": [2, 3], "unsupported_saml_vers": [2, 3], "wrong_audi": [2, 3], "wrong_destin": [2, 3], "wrong_inresponseto": [2, 3], "wrong_issu": [2, 3], "wrong_number_of_assert": [2, 3], "wrong_number_of_authstat": [2, 3], "wrong_number_of_signatur": [2, 3], "wrong_number_of_signatures_in_assert": [2, 3], "wrong_number_of_signatures_in_respons": [2, 3], "wrong_signed_el": [2, 3], "wrong_subjectconfirm": [2, 3], "onelogin_saml2_idpmetadatapars": [2, 3], "get_metadata": [2, 3], "merge_set": [2, 3], "pars": [2, 3], "parse_remot": [2, 3], "dict_deep_merg": [2, 3], "onelogin_saml2_logout_request": [2, 3], "get_issu": [2, 3], "get_nameid_data": [2, 3], "is_valid": [2, 3], "onelogin_saml2_logout_respons": [2, 3], "build": [2, 3], "get_in_response_to": [2, 3], "get_respons": [2, 3], "get_statu": [2, 3], "onelogin_saml2_metadata": [2, 3], "time_cach": [2, 3], "time_valid": [2, 3], "add_x509_key_descriptor": [2, 3], "builder": [2, 3], "sign_metadata": [2, 3], "onelogin_saml2_respons": [2, 3], "check_one_authnstat": [2, 3], "check_one_condit": [2, 3], "check_statu": [2, 3], "get_assertion_id": [2, 3], "get_assertion_issue_inst": [2, 3], "get_assertion_not_on_or_aft": [2, 3], "get_audi": [2, 3], "get_authn_context": [2, 3], "get_session_not_on_or_aft": [2, 3], "get_xml_docu": [2, 3], "process_signed_el": [2, 3], "validate_num_assert": [2, 3], "validate_signed_el": [2, 3], "validate_timestamp": [2, 3], "onelogin_saml2_set": [2, 3], "check_idp_set": [2, 3], "check_set": [2, 3], "check_sp_cert": [2, 3], "check_sp_set": [2, 3], "format_idp_cert": [2, 3], "format_idp_cert_multi": [2, 3], "format_sp_cert": [2, 3], "format_sp_cert_new": [2, 3], "format_sp_kei": [2, 3], "get_base_path": [2, 3], "get_cert_path": [2, 3], "get_contact": [2, 3], "get_idp_cert": [2, 3], "get_idp_data": [2, 3], "get_idp_slo_response_url": [2, 3], "get_idp_slo_url": [2, 3], "get_idp_sso_url": [2, 3], "get_lib_path": [2, 3], "get_organ": [2, 3], "get_schemas_path": [2, 3], "get_security_data": [2, 3], "get_sp_cert": [2, 3], "get_sp_cert_new": [2, 3], "get_sp_data": [2, 3], "get_sp_kei": [2, 3], "get_sp_metadata": [2, 3], "is_debug_act": [2, 3], "is_strict": [2, 3], "metadata_class": [2, 3], "set_cert_path": [2, 3], "validate_metadata": [2, 3], "validate_url": [2, 3], "onelogin_saml2_util": [2, 3], "assertion_signature_xpath": [2, 3], "response_signature_xpath": [2, 3], "time_format": [2, 3], "time_format_2": [2, 3], "time_format_with_frag": [2, 3], "add_sign": [2, 3], "b64decod": [2, 3], "b64encod": [2, 3], "calculate_x509_fingerprint": [2, 3], "decode_base64_and_infl": [2, 3], "decrypt_el": [2, 3], "deflate_and_base64_encod": [2, 3], "delete_local_sess": [2, 3], "escape_url": [2, 3], "format_cert": [2, 3], "format_finger_print": [2, 3], "format_private_kei": [2, 3], "generate_name_id": [2, 3], "generate_unique_id": [2, 3], "get_expire_tim": [2, 3], "get_self_host": [2, 3], "get_self_routed_url_no_queri": [2, 3], "get_self_url": [2, 3], "get_self_url_host": [2, 3], "get_self_url_no_queri": [2, 3], "is_http": [2, 3], "normalize_url": [2, 3], "now": [2, 3], "parse_saml_to_tim": [2, 3], "parse_dur": [2, 3], "parse_time_to_saml": [2, 3], "redirect": [2, 3], "sign_binari": [2, 3], "validate_binary_sign": [2, 3], "validate_metadata_sign": [2, 3], "validate_node_sign": [2, 3], "validate_sign": [2, 3], "return_false_on_except": [2, 3], "onelogin_saml2_templ": [2, 3], "attribut": [2, 3], "md_attr_consumer_servic": [2, 3], "md_contact_person": [2, 3], "md_entity_descriptor": [2, 3], "md_organis": [2, 3], "md_requested_attribut": [2, 3], "md_sl": [2, 3], "onelogin_saml2_xml": [2, 3], "cleanup_namespac": [2, 3], "dump": [2, 3], "element_text": [2, 3], "extract_tag_text": [2, 3], "make_child": [2, 3], "make_root": [2, 3], "queri": [2, 3], "to_etre": [2, 3], "validate_xml": [2, 3], "dtdforbidden": [2, 3], "entitiesforbidden": [2, 3], "globalparsertl": [2, 3], "createdefaultpars": [2, 3], "element_class": [2, 3], "getdefaultpars": [2, 3], "parser_config": [2, 3], "setdefaultpars": [2, 3], "notsupportederror": [2, 3], "restrictedel": [2, 3], "blacklist": [2, 3], "getchildren": [2, 3], "getiter": [2, 3], "iter": [2, 3], "iterchildren": [2, 3], "iterdescend": [2, 3], "iters": [2, 3], "xml": [2, 3], "check_docinfo": [2, 3], "fromstr": [2, 3], "iterpars": [2, 3], "add": [2, 3], "saml": [2, 3], "support": [2, 3], "your": [2, 3], "python": [2, 3], "softwar": [2, 3], "us": [2, 3], "thi": [2, 3], "librari": [2, 3], "toolkit": [2, 3], "let": [2, 3], "you": [2, 3], "sp": [2, 3], "servic": [2, 3], "provid": [2, 3], "over": [2, 3], "applic": [2, 3], "connect": [2, 3], "ani": [2, 3], "idp": [2, 3], "ident": [2, 3], "sso": [2, 3], "slo": [2, 3], "initi": [2, 3], "assert": [2, 3], "nameid": [2, 3], "encrypt": [2, 3], "signatur": [2, 3], "messag": [2, 3], "authnrequest": [2, 3], "logoutrequest": [2, 3], "logoutrespons": [2, 3], "enabl": [2, 3], "an": [2, 3], "consum": [2, 3], "endpoint": [2, 3], "singl": [2, 3], "publish": [2, 3], "which": [2, 3], "can": [2, 3], "sign": [2, 3], "class": 3, "main": 3, "instanc": 3, "request_data": 3, "old_set": 3, "none": 3, "custom_base_path": 3, "sourc": 3, "base": 3, "object": 3, "implement": 3, "defin": 3, "method": 3, "invok": 3, "order": 3, "process": 3, "request": 3, "sign_algorithm": 3, "http": 3, "www": 3, "w3": 3, "org": 3, "2001": 3, "04": 3, "xmldsig": 3, "more": 3, "rsa": 3, "paramet": 3, "dict": 3, "The": 3, "string": 3, "algorithm": 3, "response_data": 3, "param": 3, "type": 3, "alia": 3, "name": 3, "return": 3, "valu": 3, "": 3, "exist": 3, "list": 3, "code": 3, "someth": 3, "went": 3, "wrong": 3, "friendlynam": 3, "search": 3, "index": 3, "fiendlynam": 3, "id": 3, "last": 3, "issueinst": 3, "unix": 3, "posix": 3, "timestamp": 3, "notonoraft": 3, "valid": 3, "subjectconfirmationdata": 3, "node": 3, "authent": 3, "context": 3, "sent": 3, "reason": 3, "gener": 3, "retriev": 3, "raw": 3, "rtype": 3, "inresponseto": 3, "i": 3, "present": 3, "pretty_print_if_poss": 3, "fals": 3, "decrypt": 3, "format": 3, "namequalifi": 3, "sessionnotonoraft": 3, "from": 3, "authnstat": 3, "sessionindex": 3, "info": 3, "get": 3, "url": 3, "check": 3, "user": 3, "true": 3, "bool": 3, "return_to": 3, "force_authn": 3, "is_pass": 3, "set_nameid_polici": 3, "name_id_value_req": 3, "option": 3, "argument": 3, "target": 3, "should": 3, "after": 3, "when": 3, "forceauthn": 3, "ispass": 3, "nameidpolici": 3, "element": 3, "indic": 3, "subject": 3, "name_id": 3, "session_index": 3, "nq": 3, "name_id_format": 3, "spnq": 3, "identifi": 3, "session": 3, "qualifi": 3, "request_id": 3, "rais": 3, "post": 3, "samlrespons": 3, "found": 3, "keep_local_sess": 3, "delete_session_cb": 3, "destroi": 3, "local": 3, "otherwis": 3, "pass": 3, "we": 3, "our": 3, "extra": 3, "part": 3, "strict": 3, "mode": 3, "activ": 3, "disabl": 3, "data": 3, "handl": 3, "It": 3, "deflat": 3, "unsign": 3, "make": 3, "mayb": 3, "base64": 3, "encod": 3, "str": 3, "bodi": 3, "py3": 3, "byte": 3, "convert": 3, "all": 3, "urn": 3, "oasi": 3, "tc": 3, "2": 3, "0": 3, "ac": 3, "kerbero": 3, "password": 3, "passwordprotectedtransport": 3, "smartcard": 3, "unspecifi": 3, "x509": 3, "xmlenc": 3, "aes128": 3, "cbc": 3, "aes192": 3, "aes256": 3, "300": 3, "attrnam": 3, "basic": 3, "uri": 3, "bind": 3, "artifact": 3, "soap": 3, "cm": 3, "bearer": 3, "holder": 3, "kei": 3, "sender": 3, "vouch": 3, "2000": 3, "09": 3, "dsa": 3, "1": 3, "emailaddress": 3, "entiti": 3, "persist": 3, "transient": 3, "windowsdomainqualifiednam": 3, "x509subjectnam": 3, "d": 3, "md": 3, "samlp": 3, "protocol": 3, "xenc": 3, "x": 3, "xsd": 3, "xsi": 3, "schema": 3, "xmlsoap": 3, "envelop": 3, "xmlschema": 3, "1_5": 3, "oaep": 3, "mgf1p": 3, "statu": 3, "nopass": 3, "partiallogout": 3, "proxycountexceed": 3, "respond": 3, "success": 3, "versionmismatch": 3, "tripled": 3, "common": 3, "ha": 3, "custom": 3, "initializ": 3, "except": 3, "handler": 3, "4": 3, "3": 3, "7": 3, "13": 3, "6": 3, "5": 3, "9": 3, "10": 3, "11": 3, "8": 3, "12": 3, "14": 3, "anoth": 3, "relat": 3, "happen": 3, "dure": 3, "20": 3, "19": 3, "45": 3, "36": 3, "47": 3, "46": 3, "41": 3, "25": 3, "39": 3, "23": 3, "42": 3, "27": 3, "28": 3, "35": 3, "18": 3, "22": 3, "16": 3, "17": 3, "38": 3, "34": 3, "33": 3, "32": 3, "44": 3, "30": 3, "40": 3, "37": 3, "26": 3, "24": 3, "15": 3, "29": 3, "21": 3, "43": 3, "31": 3, "A": 3, "contain": 3, "obtain": 3, "doe": 3, "wai": 3, "introduc": 3, "sure": 3, "properli": 3, "befor": 3, "classmethod": 3, "validate_cert": 3, "timeout": 3, "header": 3, "where": 3, "If": 3, "flag": 3, "verif": 3, "associ": 3, "certif": 3, "int": 3, "second": 3, "wait": 3, "send": 3, "static": 3, "new_metadata_set": 3, "Will": 3, "updat": 3, "new": 3, "extract": 3, "current": 3, "merg": 3, "idp_metadata": 3, "required_sso_bind": 3, "required_slo_bind": 3, "entity_id": 3, "ar": 3, "multipl": 3, "idpssodescriptor": 3, "tag": 3, "onli": 3, "first": 3, "those": 3, "same": 3, "given": 3, "specifi": 3, "requir": 3, "hold": 3, "one": 3, "entitydescriptor": 3, "want": 3, "kwarg": 3, "b": 3, "path": 3, "deep": 3, "dictionari": 3, "kudo": 3, "stackoverflow": 3, "com": 3, "7205107": 3, "145400": 3, "execut": 3, "fail": 3, "caus": 3, "domdocu": 3, "issuer": 3, "spnamequalifi": 3, "base64encod": 3, "wa": 3, "receiv": 3, "raise_except": 3, "boolean": 3, "whether": 3, "failur": 3, "in_response_to": 3, "creat": 3, "determin": 3, "oneloginsaml2metadata": 3, "604800": 3, "172800": 3, "cert": 3, "add_encrypt": 3, "descriptor": 3, "keydescriptor": 3, "ad": 3, "authnsign": 3, "wsign": 3, "valid_until": 3, "cache_dur": 3, "contact": 3, "organ": 3, "authnrequestssign": 3, "wantassertionssign": 3, "datetim": 3, "expiri": 3, "date": 3, "durat": 3, "cach": 3, "digest_algorithm": 3, "digest": 3, "uniqu": 3, "condit": 3, "attributestat": 3, "encryptedattribut": 3, "audienc": 3, "could": 3, "store": 3, "futur": 3, "what": 3, "specif": 3, "must": 3, "delet": 3, "expir": 3, "time": 3, "document": 3, "verifi": 3, "refer": 3, "consist": 3, "signed_el": 3, "expect": 3, "accord": 3, "copyright": 3, "c": 3, "2010": 3, "2021": 3, "inc": 3, "mit": 3, "licens": 3, "sp_validation_onli": 3, "multpl": 3, "privat": 3, "folder": 3, "arrai": 3, "empti": 3, "ok": 3, "public": 3, "lib": 3, "secur": 3, "plan": 3, "soon": 3, "instead": 3, "other": 3, "represent": 3, "debug": 3, "deactiv": 3, "allow_single_label_domain": 3, "auxiliari": 3, "urllib": 3, "In": 3, "allow": 3, "label": 3, "domain": 3, "sever": 3, "y": 3, "m": 3, "dt": 3, "h": 3, "sz": 3, "fz": 3, "re": 3, "compil": 3, "t": 3, "z": 3, "xmlsec": 3, "decod": 3, "x509_cert": 3, "alg": 3, "calcul": 3, "fingerprint": 3, "x509cert": 3, "ignore_zip": 3, "inflat": 3, "rfc1951": 3, "ignor": 3, "zip": 3, "encrypted_data": 3, "inplac": 3, "result": 3, "lxml": 3, "etre": 3, "domel": 3, "basestr": 3, "callback": 3, "lowercase_urlencod": 3, "escap": 3, "non": 3, "safe": 3, "symbol": 3, "adf": 3, "quote_plu": 3, "produc": 3, "lower": 3, "case": 3, "hex": 3, "number": 3, "upper": 3, "lowercas": 3, "head": 3, "footer": 3, "unformat": 3, "includ": 3, "sp_nq": 3, "sp_format": 3, "exampl": 3, "compar": 3, "earliest": 3, "until": 3, "host": 3, "mai": 3, "port": 3, "rout": 3, "view": 3, "differ": 3, "than": 3, "dom": 3, "normal": 3, "comparison": 3, "netloc": 3, "insensit": 3, "per": 3, "rfc": 3, "4343": 3, "7617": 3, "standard": 3, "origin": 3, "split": 3, "also": 3, "field": 3, "actual": 3, "timestr": 3, "form": 3, "yyyi": 3, "mm": 3, "ddthh": 3, "ss": 3, "sub": 3, "interpret": 3, "iso8601": 3, "rel": 3, "appli": 3, "default": 3, "msg": 3, "__transform": 3, "binari": 3, "signed_queri": 3, "fingerprintalg": 3, "validatecert": 3, "signature_nod": 3, "elem": 3, "xpath": 3, "multicert": 3, "func": 3, "decor": 3, "function": 3, "suppress": 3, "overridden": 3, "keyword": 3, "call": 3, "wrap": 3, "n": 3, "nameformat": 3, "attributevalu": 3, "xmln": 3, "version": 3, "provider_nam": 3, "force_authn_str": 3, "is_passive_str": 3, "issue_inst": 3, "destin": 3, "protocolbind": 3, "acs_bind": 3, "assertionconsumerserviceurl": 3, "assertion_url": 3, "attr_consuming_service_str": 3, "subject_str": 3, "nameid_policy_str": 3, "requested_authn_context_str": 3, "single_logout_url": 3, "statuscod": 3, "attributeconsumingservic": 3, "servicenam": 3, "lang": 3, "en": 3, "service_nam": 3, "attr_cs_desc": 3, "requested_attribute_str": 3, "contactperson": 3, "contacttyp": 3, "givennam": 3, "email": 3, "entityid": 3, "spssodescriptor": 3, "protocolsupportenumer": 3, "sl": 3, "nameidformat": 3, "assertionconsumerservic": 3, "locat": 3, "attribute_consuming_servic": 3, "organizationnam": 3, "organizationdisplaynam": 3, "display_nam": 3, "organizationurl": 3, "requestedattribut": 3, "req_attr_nam": 3, "req_attr_nameformat_str": 3, "req_attr_isrequired_str": 3, "req_attr_aux_str": 3, "singlelogoutservic": 3, "assertion_id": 3, "name_id_polici": 3, "subjectconfirm": 3, "not_aft": 3, "recipi": 3, "notbefor": 3, "not_befor": 3, "audiencerestrict": 3, "authninst": 3, "authn_context": 3, "tree_or_el": 3, "top_nsmap": 3, "keep_ns_prefix": 3, "keep": 3, "namespac": 3, "intact": 3, "tree": 3, "map": 3, "prefix": 3, "remov": 3, "cleanup": 3, "pretty_print": 3, "with_tail": 3, "write": 3, "structur": 3, "sy": 3, "stdout": 3, "tagnam": 3, "_parent": 3, "_tag": 3, "attrib": 3, "_extra": 3, "subel": 3, "factori": 3, "append": 3, "interfac": 3, "look": 3, "_element": 3, "makeel": 3, "_basepars": 3, "faster": 3, "within": 3, "parser": 3, "tagid": 3, "match": 3, "root": 3, "objet": 3, "expres": 3, "fragment": 3, "minidom": 3, "_element_class": 3, "serial": 3, "its": 3, "against": 3, "show": 3, "protect": 3, "sysid": 3, "pubid": 3, "valueerror": 3, "definit": 3, "forbidden": 3, "notation_nam": 3, "_local": 3, "thread": 3, "huge_tre": 3, "no_network": 3, "remove_com": 3, "remove_pi": 3, "resolve_ent": 3, "oper": 3, "elementbas": 3, "restrict": 3, "filter": 3, "out": 3, "some": 3, "_entiti": 3, "_processinginstruct": 3, "_comment": 3, "self": 3, "direct": 3, "children": 3, "deprec": 3, "note": 3, "been": 3, "elementtre": 3, "simpli": 3, "sequenc": 3, "subtre": 3, "depth": 3, "pre": 3, "start": 3, "find": 3, "see": 3, "diverg": 3, "behaviour": 3, "effici": 3, "backward": 3, "older": 3, "localnam": 3, "either": 3, "both": 3, "wildcard": 3, "equival": 3, "e": 3, "comment": 3, "processinginstruct": 3, "revers": 3, "As": 3, "oppos": 3, "descend": 3, "el": 3, "yield": 3, "itself": 3, "preced": 3, "follow": 3, "sibl": 3, "forward": 3, "right": 3, "go": 3, "text": 3, "base_url": 3, "forbid_dtd": 3, "forbid_ent": 3, "docinfo": 3, "dtd": 3, "declar": 3, "need": 3, "newer": 3, "iterent": 3, "arg": 3}, "objects": {"": [[2, 0, 0, "-", "onelogin"]], "onelogin": [[3, 0, 0, "-", "saml2"]], "onelogin.saml2": [[3, 0, 0, "-", "auth"], [3, 0, 0, "-", "authn_request"], [3, 0, 0, "-", "compat"], [3, 0, 0, "-", "constants"], [3, 0, 0, "-", "errors"], [3, 0, 0, "-", "idp_metadata_parser"], [3, 0, 0, "-", "logout_request"], [3, 0, 0, "-", "logout_response"], [3, 0, 0, "-", "metadata"], [3, 0, 0, "-", "response"], [3, 0, 0, "-", "settings"], [3, 0, 0, "-", "utils"], [3, 0, 0, "-", "xml_templates"], [3, 0, 0, "-", "xml_utils"], [3, 0, 0, "-", "xmlparser"]], "onelogin.saml2.auth": [[3, 1, 1, "", "OneLogin_Saml2_Auth"]], "onelogin.saml2.auth.OneLogin_Saml2_Auth": [[3, 2, 1, "", "add_request_signature"], [3, 2, 1, "", "add_response_signature"], [3, 3, 1, "", "authn_request_class"], [3, 2, 1, "", "get_attribute"], [3, 2, 1, "", "get_attributes"], [3, 2, 1, "", "get_errors"], [3, 2, 1, "", "get_friendlyname_attribute"], [3, 2, 1, "", "get_friendlyname_attributes"], [3, 2, 1, "", "get_last_assertion_id"], [3, 2, 1, "", "get_last_assertion_issue_instant"], [3, 2, 1, "", "get_last_assertion_not_on_or_after"], [3, 2, 1, "", "get_last_authn_contexts"], [3, 2, 1, "", "get_last_error_reason"], [3, 2, 1, "", "get_last_message_id"], [3, 2, 1, "", "get_last_request_id"], [3, 2, 1, "", "get_last_request_xml"], [3, 2, 1, "", "get_last_response_in_response_to"], [3, 2, 1, "", "get_last_response_xml"], [3, 2, 1, "", "get_nameid"], [3, 2, 1, "", "get_nameid_format"], [3, 2, 1, "", "get_nameid_nq"], [3, 2, 1, "", "get_nameid_spnq"], [3, 2, 1, "", "get_session_expiration"], [3, 2, 1, "", "get_session_index"], [3, 2, 1, "", "get_settings"], [3, 2, 1, "", "get_slo_response_url"], [3, 2, 1, "", "get_slo_url"], [3, 2, 1, "", "get_sso_url"], [3, 2, 1, "", "is_authenticated"], [3, 2, 1, "", "login"], [3, 2, 1, "", "logout"], [3, 3, 1, "", "logout_request_class"], [3, 3, 1, "", "logout_response_class"], [3, 2, 1, "", "process_response"], [3, 2, 1, "", "process_slo"], [3, 2, 1, "", "redirect_to"], [3, 3, 1, "", "response_class"], [3, 2, 1, "", "set_strict"], [3, 2, 1, "", "store_valid_response"], [3, 2, 1, "", "validate_request_signature"], [3, 2, 1, "", "validate_response_signature"]], "onelogin.saml2.authn_request": [[3, 1, 1, "", "OneLogin_Saml2_Authn_Request"]], "onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request": [[3, 2, 1, "", "get_id"], [3, 2, 1, "", "get_request"], [3, 2, 1, "", "get_xml"]], "onelogin.saml2.compat": [[3, 4, 1, "", "to_bytes"], [3, 4, 1, "", "to_string"], [3, 4, 1, "", "utf8"]], "onelogin.saml2.constants": [[3, 1, 1, "", "OneLogin_Saml2_Constants"]], "onelogin.saml2.constants.OneLogin_Saml2_Constants": [[3, 3, 1, "", "AC_KERBEROS"], [3, 3, 1, "", "AC_PASSWORD"], [3, 3, 1, "", "AC_PASSWORD_PROTECTED"], [3, 3, 1, "", "AC_SMARTCARD"], [3, 3, 1, "", "AC_UNSPECIFIED"], [3, 3, 1, "", "AC_X509"], [3, 3, 1, "", "AES128_CBC"], [3, 3, 1, "", "AES192_CBC"], [3, 3, 1, "", "AES256_CBC"], [3, 3, 1, "", "ALLOWED_CLOCK_DRIFT"], [3, 3, 1, "", "ATTRNAME_FORMAT_BASIC"], [3, 3, 1, "", "ATTRNAME_FORMAT_UNSPECIFIED"], [3, 3, 1, "", "ATTRNAME_FORMAT_URI"], [3, 3, 1, "", "BINDING_DEFLATE"], [3, 3, 1, "", "BINDING_HTTP_ARTIFACT"], [3, 3, 1, "", "BINDING_HTTP_POST"], [3, 3, 1, "", "BINDING_HTTP_REDIRECT"], [3, 3, 1, "", "BINDING_SOAP"], [3, 3, 1, "", "CM_BEARER"], [3, 3, 1, "", "CM_HOLDER_KEY"], [3, 3, 1, "", "CM_SENDER_VOUCHES"], [3, 3, 1, "", "DEPRECATED_ALGORITHMS"], [3, 3, 1, "", "DSA_SHA1"], [3, 3, 1, "", "NAMEID_EMAIL_ADDRESS"], [3, 3, 1, "", "NAMEID_ENCRYPTED"], [3, 3, 1, "", "NAMEID_ENTITY"], [3, 3, 1, "", "NAMEID_KERBEROS"], [3, 3, 1, "", "NAMEID_PERSISTENT"], [3, 3, 1, "", "NAMEID_TRANSIENT"], [3, 3, 1, "", "NAMEID_UNSPECIFIED"], [3, 3, 1, "", "NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME"], [3, 3, 1, "", "NAMEID_X509_SUBJECT_NAME"], [3, 3, 1, "", "NSMAP"], [3, 3, 1, "", "NS_DS"], [3, 3, 1, "", "NS_MD"], [3, 3, 1, "", "NS_PREFIX_DS"], [3, 3, 1, "", "NS_PREFIX_MD"], [3, 3, 1, "", "NS_PREFIX_SAML"], [3, 3, 1, "", "NS_PREFIX_SAMLP"], [3, 3, 1, "", "NS_PREFIX_XENC"], [3, 3, 1, "", "NS_PREFIX_XS"], [3, 3, 1, "", "NS_PREFIX_XSD"], [3, 3, 1, "", "NS_PREFIX_XSI"], [3, 3, 1, "", "NS_SAML"], [3, 3, 1, "", "NS_SAMLP"], [3, 3, 1, "", "NS_SOAP"], [3, 3, 1, "", "NS_XENC"], [3, 3, 1, "", "NS_XS"], [3, 3, 1, "", "NS_XSI"], [3, 3, 1, "", "RSA_1_5"], [3, 3, 1, "", "RSA_OAEP_MGF1P"], [3, 3, 1, "", "RSA_SHA1"], [3, 3, 1, "", "RSA_SHA256"], [3, 3, 1, "", "RSA_SHA384"], [3, 3, 1, "", "RSA_SHA512"], [3, 3, 1, "", "SHA1"], [3, 3, 1, "", "SHA256"], [3, 3, 1, "", "SHA384"], [3, 3, 1, "", "SHA512"], [3, 3, 1, "", "STATUS_NO_PASSIVE"], [3, 3, 1, "", "STATUS_PARTIAL_LOGOUT"], [3, 3, 1, "", "STATUS_PROXY_COUNT_EXCEEDED"], [3, 3, 1, "", "STATUS_REQUESTER"], [3, 3, 1, "", "STATUS_RESPONDER"], [3, 3, 1, "", "STATUS_SUCCESS"], [3, 3, 1, "", "STATUS_VERSION_MISMATCH"], [3, 3, 1, "", "TRIPLEDES_CBC"]], "onelogin.saml2.errors": [[3, 5, 1, "", "OneLogin_Saml2_Error"], [3, 5, 1, "", "OneLogin_Saml2_ValidationError"]], "onelogin.saml2.errors.OneLogin_Saml2_Error": [[3, 3, 1, "", "CERT_NOT_FOUND"], [3, 3, 1, "", "METADATA_SP_INVALID"], [3, 3, 1, "", "PRIVATE_KEY_FILE_NOT_FOUND"], [3, 3, 1, "", "PRIVATE_KEY_NOT_FOUND"], [3, 3, 1, "", "PUBLIC_CERT_FILE_NOT_FOUND"], [3, 3, 1, "", "REDIRECT_INVALID_URL"], [3, 3, 1, "", "SAML_LOGOUTMESSAGE_NOT_FOUND"], [3, 3, 1, "", "SAML_LOGOUTREQUEST_INVALID"], [3, 3, 1, "", "SAML_LOGOUTRESPONSE_INVALID"], [3, 3, 1, "", "SAML_RESPONSE_NOT_FOUND"], [3, 3, 1, "", "SAML_SINGLE_LOGOUT_NOT_SUPPORTED"], [3, 3, 1, "", "SETTINGS_FILE_NOT_FOUND"], [3, 3, 1, "", "SETTINGS_INVALID"], [3, 3, 1, "", "SETTINGS_INVALID_SYNTAX"], [3, 3, 1, "", "SP_CERTS_NOT_FOUND"], [3, 3, 1, "", "UNSUPPORTED_SETTINGS_OBJECT"]], "onelogin.saml2.errors.OneLogin_Saml2_ValidationError": [[3, 3, 1, "", "ASSERTION_EXPIRED"], [3, 3, 1, "", "ASSERTION_TOO_EARLY"], [3, 3, 1, "", "AUTHN_CONTEXT_MISMATCH"], [3, 3, 1, "", "CHILDREN_NODE_NOT_FOUND_IN_KEYINFO"], [3, 3, 1, "", "DEPRECATED_DIGEST_METHOD"], [3, 3, 1, "", "DEPRECATED_SIGNATURE_METHOD"], [3, 3, 1, "", "DUPLICATED_ATTRIBUTE_NAME_FOUND"], [3, 3, 1, "", "DUPLICATED_ID_IN_SIGNED_ELEMENTS"], [3, 3, 1, "", "DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS"], [3, 3, 1, "", "EMPTY_DESTINATION"], [3, 3, 1, "", "EMPTY_NAMEID"], [3, 3, 1, "", "ENCRYPTED_ATTRIBUTES"], [3, 3, 1, "", "ID_NOT_FOUND_IN_SIGNED_ELEMENT"], [3, 3, 1, "", "INVALID_SIGNATURE"], [3, 3, 1, "", "INVALID_SIGNED_ELEMENT"], [3, 3, 1, "", "INVALID_XML_FORMAT"], [3, 3, 1, "", "ISSUER_MULTIPLE_IN_RESPONSE"], [3, 3, 1, "", "ISSUER_NOT_FOUND_IN_ASSERTION"], [3, 3, 1, "", "KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA"], [3, 3, 1, "", "MISSING_CONDITIONS"], [3, 3, 1, "", "MISSING_ID"], [3, 3, 1, "", "MISSING_STATUS"], [3, 3, 1, "", "MISSING_STATUS_CODE"], [3, 3, 1, "", "NO_ATTRIBUTESTATEMENT"], [3, 3, 1, "", "NO_ENCRYPTED_ASSERTION"], [3, 3, 1, "", "NO_ENCRYPTED_NAMEID"], [3, 3, 1, "", "NO_NAMEID"], [3, 3, 1, "", "NO_SIGNATURE_FOUND"], [3, 3, 1, "", "NO_SIGNED_ASSERTION"], [3, 3, 1, "", "NO_SIGNED_MESSAGE"], [3, 3, 1, "", "RESPONSE_EXPIRED"], [3, 3, 1, "", "SESSION_EXPIRED"], [3, 3, 1, "", "SP_NAME_QUALIFIER_NAME_MISMATCH"], [3, 3, 1, "", "STATUS_CODE_IS_NOT_SUCCESS"], [3, 3, 1, "", "UNEXPECTED_SIGNED_ELEMENTS"], [3, 3, 1, "", "UNSUPPORTED_RETRIEVAL_METHOD"], [3, 3, 1, "", "UNSUPPORTED_SAML_VERSION"], [3, 3, 1, "", "WRONG_AUDIENCE"], [3, 3, 1, "", "WRONG_DESTINATION"], [3, 3, 1, "", "WRONG_INRESPONSETO"], [3, 3, 1, "", "WRONG_ISSUER"], [3, 3, 1, "", "WRONG_NUMBER_OF_ASSERTIONS"], [3, 3, 1, "", "WRONG_NUMBER_OF_AUTHSTATEMENTS"], [3, 3, 1, "", "WRONG_NUMBER_OF_SIGNATURES"], [3, 3, 1, "", "WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION"], [3, 3, 1, "", "WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE"], [3, 3, 1, "", "WRONG_SIGNED_ELEMENT"], [3, 3, 1, "", "WRONG_SUBJECTCONFIRMATION"]], "onelogin.saml2.idp_metadata_parser": [[3, 1, 1, "", "OneLogin_Saml2_IdPMetadataParser"], [3, 4, 1, "", "dict_deep_merge"]], "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser": [[3, 2, 1, "", "get_metadata"], [3, 2, 1, "", "merge_settings"], [3, 2, 1, "", "parse"], [3, 2, 1, "", "parse_remote"]], "onelogin.saml2.logout_request": [[3, 1, 1, "", "OneLogin_Saml2_Logout_Request"]], "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request": [[3, 2, 1, "", "get_error"], [3, 2, 1, "", "get_id"], [3, 2, 1, "", "get_issuer"], [3, 2, 1, "", "get_nameid"], [3, 2, 1, "", "get_nameid_data"], [3, 2, 1, "", "get_nameid_format"], [3, 2, 1, "", "get_request"], [3, 2, 1, "", "get_session_indexes"], [3, 2, 1, "", "get_xml"], [3, 2, 1, "", "is_valid"]], "onelogin.saml2.logout_response": [[3, 1, 1, "", "OneLogin_Saml2_Logout_Response"]], "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response": [[3, 2, 1, "", "build"], [3, 2, 1, "", "get_error"], [3, 2, 1, "", "get_in_response_to"], [3, 2, 1, "", "get_issuer"], [3, 2, 1, "", "get_response"], [3, 2, 1, "", "get_status"], [3, 2, 1, "", "get_xml"], [3, 2, 1, "", "is_valid"]], "onelogin.saml2.metadata": [[3, 1, 1, "", "OneLogin_Saml2_Metadata"]], "onelogin.saml2.metadata.OneLogin_Saml2_Metadata": [[3, 3, 1, "", "TIME_CACHED"], [3, 3, 1, "", "TIME_VALID"], [3, 2, 1, "", "add_x509_key_descriptors"], [3, 2, 1, "", "builder"], [3, 2, 1, "", "sign_metadata"]], "onelogin.saml2.response": [[3, 1, 1, "", "OneLogin_Saml2_Response"]], "onelogin.saml2.response.OneLogin_Saml2_Response": [[3, 2, 1, "", "check_one_authnstatement"], [3, 2, 1, "", "check_one_condition"], [3, 2, 1, "", "check_status"], [3, 2, 1, "", "get_assertion_id"], [3, 2, 1, "", "get_assertion_issue_instant"], [3, 2, 1, "", "get_assertion_not_on_or_after"], [3, 2, 1, "", "get_attributes"], [3, 2, 1, "", "get_audiences"], [3, 2, 1, "", "get_authn_contexts"], [3, 2, 1, "", "get_error"], [3, 2, 1, "", "get_friendlyname_attributes"], [3, 2, 1, "", "get_id"], [3, 2, 1, "", "get_in_response_to"], [3, 2, 1, "", "get_issuers"], [3, 2, 1, "", "get_nameid"], [3, 2, 1, "", "get_nameid_data"], [3, 2, 1, "", "get_nameid_format"], [3, 2, 1, "", "get_nameid_nq"], [3, 2, 1, "", "get_nameid_spnq"], [3, 2, 1, "", "get_session_index"], [3, 2, 1, "", "get_session_not_on_or_after"], [3, 2, 1, "", "get_xml_document"], [3, 2, 1, "", "is_valid"], [3, 2, 1, "", "process_signed_elements"], [3, 2, 1, "", "validate_num_assertions"], [3, 2, 1, "", "validate_signed_elements"], [3, 2, 1, "", "validate_timestamps"]], "onelogin.saml2.settings": [[3, 1, 1, "", "OneLogin_Saml2_Settings"], [3, 4, 1, "", "validate_url"]], "onelogin.saml2.settings.OneLogin_Saml2_Settings": [[3, 2, 1, "", "check_idp_settings"], [3, 2, 1, "", "check_settings"], [3, 2, 1, "", "check_sp_certs"], [3, 2, 1, "", "check_sp_settings"], [3, 2, 1, "", "format_idp_cert"], [3, 2, 1, "", "format_idp_cert_multi"], [3, 2, 1, "", "format_sp_cert"], [3, 2, 1, "", "format_sp_cert_new"], [3, 2, 1, "", "format_sp_key"], [3, 2, 1, "", "get_base_path"], [3, 2, 1, "", "get_cert_path"], [3, 2, 1, "", "get_contacts"], [3, 2, 1, "", "get_errors"], [3, 2, 1, "", "get_idp_cert"], [3, 2, 1, "", "get_idp_data"], [3, 2, 1, "", "get_idp_slo_response_url"], [3, 2, 1, "", "get_idp_slo_url"], [3, 2, 1, "", "get_idp_sso_url"], [3, 2, 1, "", "get_lib_path"], [3, 2, 1, "", "get_organization"], [3, 2, 1, "", "get_schemas_path"], [3, 2, 1, "", "get_security_data"], [3, 2, 1, "", "get_sp_cert"], [3, 2, 1, "", "get_sp_cert_new"], [3, 2, 1, "", "get_sp_data"], [3, 2, 1, "", "get_sp_key"], [3, 2, 1, "", "get_sp_metadata"], [3, 2, 1, "", "is_debug_active"], [3, 2, 1, "", "is_strict"], [3, 3, 1, "", "metadata_class"], [3, 2, 1, "", "set_cert_path"], [3, 2, 1, "", "set_strict"], [3, 2, 1, "", "validate_metadata"]], "onelogin.saml2.utils": [[3, 1, 1, "", "OneLogin_Saml2_Utils"], [3, 4, 1, "", "return_false_on_exception"]], "onelogin.saml2.utils.OneLogin_Saml2_Utils": [[3, 3, 1, "", "ASSERTION_SIGNATURE_XPATH"], [3, 3, 1, "", "RESPONSE_SIGNATURE_XPATH"], [3, 3, 1, "", "TIME_FORMAT"], [3, 3, 1, "", "TIME_FORMAT_2"], [3, 3, 1, "", "TIME_FORMAT_WITH_FRAGMENT"], [3, 2, 1, "", "add_sign"], [3, 2, 1, "", "b64decode"], [3, 2, 1, "", "b64encode"], [3, 2, 1, "", "calculate_x509_fingerprint"], [3, 2, 1, "", "decode_base64_and_inflate"], [3, 2, 1, "", "decrypt_element"], [3, 2, 1, "", "deflate_and_base64_encode"], [3, 2, 1, "", "delete_local_session"], [3, 2, 1, "", "escape_url"], [3, 2, 1, "", "format_cert"], [3, 2, 1, "", "format_finger_print"], [3, 2, 1, "", "format_private_key"], [3, 2, 1, "", "generate_name_id"], [3, 2, 1, "", "generate_unique_id"], [3, 2, 1, "", "get_expire_time"], [3, 2, 1, "", "get_self_host"], [3, 2, 1, "", "get_self_routed_url_no_query"], [3, 2, 1, "", "get_self_url"], [3, 2, 1, "", "get_self_url_host"], [3, 2, 1, "", "get_self_url_no_query"], [3, 2, 1, "", "get_status"], [3, 2, 1, "", "is_https"], [3, 2, 1, "", "normalize_url"], [3, 2, 1, "", "now"], [3, 2, 1, "", "parse_SAML_to_time"], [3, 2, 1, "", "parse_duration"], [3, 2, 1, "", "parse_time_to_SAML"], [3, 2, 1, "", "redirect"], [3, 2, 1, "", "sign_binary"], [3, 2, 1, "", "validate_binary_sign"], [3, 2, 1, "", "validate_metadata_sign"], [3, 2, 1, "", "validate_node_sign"], [3, 2, 1, "", "validate_sign"]], "onelogin.saml2.xml_templates": [[3, 1, 1, "", "OneLogin_Saml2_Templates"]], "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates": [[3, 3, 1, "", "ATTRIBUTE"], [3, 3, 1, "", "AUTHN_REQUEST"], [3, 3, 1, "", "LOGOUT_REQUEST"], [3, 3, 1, "", "LOGOUT_RESPONSE"], [3, 3, 1, "", "MD_ATTR_CONSUMER_SERVICE"], [3, 3, 1, "", "MD_CONTACT_PERSON"], [3, 3, 1, "", "MD_ENTITY_DESCRIPTOR"], [3, 3, 1, "", "MD_ORGANISATION"], [3, 3, 1, "", "MD_REQUESTED_ATTRIBUTE"], [3, 3, 1, "", "MD_SLS"], [3, 3, 1, "", "RESPONSE"]], "onelogin.saml2.xml_utils": [[3, 1, 1, "", "OneLogin_Saml2_XML"]], "onelogin.saml2.xml_utils.OneLogin_Saml2_XML": [[3, 2, 1, "", "cleanup_namespaces"], [3, 2, 1, "", "dump"], [3, 2, 1, "", "element_text"], [3, 2, 1, "", "extract_tag_text"], [3, 2, 1, "", "make_child"], [3, 2, 1, "", "make_root"], [3, 2, 1, "", "query"], [3, 2, 1, "", "to_etree"], [3, 2, 1, "", "to_string"], [3, 2, 1, "", "validate_xml"]], "onelogin.saml2.xmlparser": [[3, 5, 1, "", "DTDForbidden"], [3, 5, 1, "", "EntitiesForbidden"], [3, 1, 1, "", "GlobalParserTLS"], [3, 5, 1, "", "NotSupportedError"], [3, 1, 1, "", "RestrictedElement"], [3, 4, 1, "", "XML"], [3, 4, 1, "", "check_docinfo"], [3, 4, 1, "", "fromstring"], [3, 4, 1, "", "getDefaultParser"], [3, 4, 1, "", "iterparse"], [3, 4, 1, "", "parse"]], "onelogin.saml2.xmlparser.GlobalParserTLS": [[3, 2, 1, "", "createDefaultParser"], [3, 3, 1, "", "element_class"], [3, 2, 1, "", "getDefaultParser"], [3, 3, 1, "", "parser_config"], [3, 2, 1, "", "setDefaultParser"]], "onelogin.saml2.xmlparser.RestrictedElement": [[3, 3, 1, "", "blacklist"], [3, 2, 1, "", "getchildren"], [3, 2, 1, "", "getiterator"], [3, 2, 1, "", "iter"], [3, 2, 1, "", "iterchildren"], [3, 2, 1, "", "iterdescendants"], [3, 2, 1, "", "itersiblings"]]}, "objtypes": {"0": "py:module", "1": "py:class", "2": "py:method", "3": "py:attribute", "4": "py:function", "5": "py:exception"}, "objnames": {"0": ["py", "module", "Python module"], "1": ["py", "class", "Python class"], "2": ["py", "method", "Python method"], "3": ["py", "attribute", "Python attribute"], "4": ["py", "function", "Python function"], "5": ["py", "exception", "Python exception"]}, "titleterms": {"welcom": 0, "saml": 0, "python2": 0, "3": 0, "toolkit": 0, "": 0, "document": 0, "content": [0, 2, 3], "onelogin": [1, 2, 3], "packag": [2, 3], "subpackag": 2, "modul": [2, 3], "saml2": 3, "submodul": 3, "auth": 3, "authn_request": 3, "compat": 3, "constant": 3, "error": 3, "idp_metadata_pars": 3, "logout_request": 3, "logout_respons": 3, "metadata": 3, "respons": 3, "set": 3, "util": 3, "xml_templat": 3, "xml_util": 3, "xmlparser": 3}, "envversion": {"sphinx.domains.c": 3, "sphinx.domains.changeset": 1, "sphinx.domains.citation": 1, "sphinx.domains.cpp": 9, "sphinx.domains.index": 1, "sphinx.domains.javascript": 3, "sphinx.domains.math": 2, "sphinx.domains.python": 4, "sphinx.domains.rst": 2, "sphinx.domains.std": 2, "sphinx.ext.viewcode": 1, "sphinx": 58}, "alltitles": {"Welcome to SAML Python2/3 Toolkit\u2019s documentation!": [[0, "welcome-to-saml-python2-3-toolkit-s-documentation"]], "Contents:": [[0, null]], "onelogin": [[1, "onelogin"]], "onelogin package": [[2, "onelogin-package"]], "Subpackages": [[2, "subpackages"]], "Module contents": [[2, "module-onelogin"], [3, "module-onelogin.saml2"]], "onelogin.saml2 package": [[3, "onelogin-saml2-package"]], "Submodules": [[3, "submodules"]], "onelogin.saml2.auth module": [[3, "module-onelogin.saml2.auth"]], "onelogin.saml2.authn_request module": [[3, "module-onelogin.saml2.authn_request"]], "onelogin.saml2.compat module": [[3, "module-onelogin.saml2.compat"]], "onelogin.saml2.constants module": [[3, "module-onelogin.saml2.constants"]], "onelogin.saml2.errors module": [[3, "module-onelogin.saml2.errors"]], "onelogin.saml2.idp_metadata_parser module": [[3, "module-onelogin.saml2.idp_metadata_parser"]], "onelogin.saml2.logout_request module": [[3, "module-onelogin.saml2.logout_request"]], "onelogin.saml2.logout_response module": [[3, "module-onelogin.saml2.logout_response"]], "onelogin.saml2.metadata module": [[3, "module-onelogin.saml2.metadata"]], "onelogin.saml2.response module": [[3, "module-onelogin.saml2.response"]], "onelogin.saml2.settings module": [[3, "module-onelogin.saml2.settings"]], "onelogin.saml2.utils module": [[3, "module-onelogin.saml2.utils"]], "onelogin.saml2.xml_templates module": [[3, "module-onelogin.saml2.xml_templates"]], "onelogin.saml2.xml_utils module": [[3, "module-onelogin.saml2.xml_utils"]], "onelogin.saml2.xmlparser module": [[3, "module-onelogin.saml2.xmlparser"]]}, "indexentries": {"module": [[2, "module-onelogin"], [3, "module-onelogin.saml2"], [3, "module-onelogin.saml2.auth"], [3, "module-onelogin.saml2.authn_request"], [3, "module-onelogin.saml2.compat"], [3, "module-onelogin.saml2.constants"], [3, "module-onelogin.saml2.errors"], [3, "module-onelogin.saml2.idp_metadata_parser"], [3, "module-onelogin.saml2.logout_request"], [3, "module-onelogin.saml2.logout_response"], [3, "module-onelogin.saml2.metadata"], [3, "module-onelogin.saml2.response"], [3, "module-onelogin.saml2.settings"], [3, "module-onelogin.saml2.utils"], [3, "module-onelogin.saml2.xml_templates"], [3, "module-onelogin.saml2.xml_utils"], [3, "module-onelogin.saml2.xmlparser"]], "onelogin": [[2, "module-onelogin"]], "ac_kerberos (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_KERBEROS"]], "ac_password (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_PASSWORD"]], "ac_password_protected (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_PASSWORD_PROTECTED"]], "ac_smartcard (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_SMARTCARD"]], "ac_unspecified (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_UNSPECIFIED"]], "ac_x509 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AC_X509"]], "aes128_cbc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AES128_CBC"]], "aes192_cbc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AES192_CBC"]], "aes256_cbc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.AES256_CBC"]], "allowed_clock_drift (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.ALLOWED_CLOCK_DRIFT"]], "assertion_expired (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ASSERTION_EXPIRED"]], "assertion_signature_xpath (onelogin.saml2.utils.onelogin_saml2_utils attribute)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH"]], "assertion_too_early (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ASSERTION_TOO_EARLY"]], "attribute (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.ATTRIBUTE"]], "attrname_format_basic (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.ATTRNAME_FORMAT_BASIC"]], "attrname_format_unspecified (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.ATTRNAME_FORMAT_UNSPECIFIED"]], "attrname_format_uri (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.ATTRNAME_FORMAT_URI"]], "authn_context_mismatch (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.AUTHN_CONTEXT_MISMATCH"]], "authn_request (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.AUTHN_REQUEST"]], "binding_deflate (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.BINDING_DEFLATE"]], "binding_http_artifact (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.BINDING_HTTP_ARTIFACT"]], "binding_http_post (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.BINDING_HTTP_POST"]], "binding_http_redirect (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT"]], "binding_soap (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.BINDING_SOAP"]], "cert_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.CERT_NOT_FOUND"]], "children_node_not_found_in_keyinfo (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.CHILDREN_NODE_NOT_FOUND_IN_KEYINFO"]], "cm_bearer (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.CM_BEARER"]], "cm_holder_key (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.CM_HOLDER_KEY"]], "cm_sender_vouches (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.CM_SENDER_VOUCHES"]], "deprecated_algorithms (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS"]], "deprecated_digest_method (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.DEPRECATED_DIGEST_METHOD"]], "deprecated_signature_method (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.DEPRECATED_SIGNATURE_METHOD"]], "dsa_sha1 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.DSA_SHA1"]], "dtdforbidden": [[3, "onelogin.saml2.xmlparser.DTDForbidden"]], "duplicated_attribute_name_found (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.DUPLICATED_ATTRIBUTE_NAME_FOUND"]], "duplicated_id_in_signed_elements (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.DUPLICATED_ID_IN_SIGNED_ELEMENTS"]], "duplicated_reference_in_signed_elements (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS"]], "empty_destination (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.EMPTY_DESTINATION"]], "empty_nameid (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.EMPTY_NAMEID"]], "encrypted_attributes (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ENCRYPTED_ATTRIBUTES"]], "entitiesforbidden": [[3, "onelogin.saml2.xmlparser.EntitiesForbidden"]], "globalparsertls (class in onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS"]], "id_not_found_in_signed_element (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ID_NOT_FOUND_IN_SIGNED_ELEMENT"]], "invalid_signature (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.INVALID_SIGNATURE"]], "invalid_signed_element (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.INVALID_SIGNED_ELEMENT"]], "invalid_xml_format (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT"]], "issuer_multiple_in_response (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ISSUER_MULTIPLE_IN_RESPONSE"]], "issuer_not_found_in_assertion (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.ISSUER_NOT_FOUND_IN_ASSERTION"]], "keyinfo_not_found_in_encrypted_data (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA"]], "logout_request (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.LOGOUT_REQUEST"]], "logout_response (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.LOGOUT_RESPONSE"]], "md_attr_consumer_service (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_ATTR_CONSUMER_SERVICE"]], "md_contact_person (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_CONTACT_PERSON"]], "md_entity_descriptor (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_ENTITY_DESCRIPTOR"]], "md_organisation (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_ORGANISATION"]], "md_requested_attribute (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_REQUESTED_ATTRIBUTE"]], "md_sls (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.MD_SLS"]], "metadata_sp_invalid (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.METADATA_SP_INVALID"]], "missing_conditions (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.MISSING_CONDITIONS"]], "missing_id (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.MISSING_ID"]], "missing_status (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.MISSING_STATUS"]], "missing_status_code (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.MISSING_STATUS_CODE"]], "nameid_email_address (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_EMAIL_ADDRESS"]], "nameid_encrypted (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_ENCRYPTED"]], "nameid_entity (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_ENTITY"]], "nameid_kerberos (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_KERBEROS"]], "nameid_persistent (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_PERSISTENT"]], "nameid_transient (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_TRANSIENT"]], "nameid_unspecified (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED"]], "nameid_windows_domain_qualified_name (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME"]], "nameid_x509_subject_name (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NAMEID_X509_SUBJECT_NAME"]], "no_attributestatement (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_ATTRIBUTESTATEMENT"]], "no_encrypted_assertion (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_ENCRYPTED_ASSERTION"]], "no_encrypted_nameid (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_ENCRYPTED_NAMEID"]], "no_nameid (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_NAMEID"]], "no_signature_found (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_SIGNATURE_FOUND"]], "no_signed_assertion (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_SIGNED_ASSERTION"]], "no_signed_message (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE"]], "nsmap (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NSMAP"]], "ns_ds (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_DS"]], "ns_md (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_MD"]], "ns_prefix_ds (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_DS"]], "ns_prefix_md (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_MD"]], "ns_prefix_saml (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_SAML"]], "ns_prefix_samlp (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_SAMLP"]], "ns_prefix_xenc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_XENC"]], "ns_prefix_xs (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_XS"]], "ns_prefix_xsd (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_XSD"]], "ns_prefix_xsi (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_PREFIX_XSI"]], "ns_saml (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_SAML"]], "ns_samlp (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_SAMLP"]], "ns_soap (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_SOAP"]], "ns_xenc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_XENC"]], "ns_xs (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_XS"]], "ns_xsi (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.NS_XSI"]], "notsupportederror": [[3, "onelogin.saml2.xmlparser.NotSupportedError"]], "onelogin_saml2_auth (class in onelogin.saml2.auth)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth"]], "onelogin_saml2_authn_request (class in onelogin.saml2.authn_request)": [[3, "onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request"]], "onelogin_saml2_constants (class in onelogin.saml2.constants)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants"]], "onelogin_saml2_error": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error"]], "onelogin_saml2_idpmetadataparser (class in onelogin.saml2.idp_metadata_parser)": [[3, "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser"]], "onelogin_saml2_logout_request (class in onelogin.saml2.logout_request)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request"]], "onelogin_saml2_logout_response (class in onelogin.saml2.logout_response)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response"]], "onelogin_saml2_metadata (class in onelogin.saml2.metadata)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata"]], "onelogin_saml2_response (class in onelogin.saml2.response)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response"]], "onelogin_saml2_settings (class in onelogin.saml2.settings)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings"]], "onelogin_saml2_templates (class in onelogin.saml2.xml_templates)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates"]], "onelogin_saml2_utils (class in onelogin.saml2.utils)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils"]], "onelogin_saml2_validationerror": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError"]], "onelogin_saml2_xml (class in onelogin.saml2.xml_utils)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML"]], "private_key_file_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.PRIVATE_KEY_FILE_NOT_FOUND"]], "private_key_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND"]], "public_cert_file_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.PUBLIC_CERT_FILE_NOT_FOUND"]], "redirect_invalid_url (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.REDIRECT_INVALID_URL"]], "response (onelogin.saml2.xml_templates.onelogin_saml2_templates attribute)": [[3, "onelogin.saml2.xml_templates.OneLogin_Saml2_Templates.RESPONSE"]], "response_expired (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.RESPONSE_EXPIRED"]], "response_signature_xpath (onelogin.saml2.utils.onelogin_saml2_utils attribute)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH"]], "rsa_1_5 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_1_5"]], "rsa_oaep_mgf1p (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_OAEP_MGF1P"]], "rsa_sha1 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_SHA1"]], "rsa_sha256 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_SHA256"]], "rsa_sha384 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_SHA384"]], "rsa_sha512 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.RSA_SHA512"]], "restrictedelement (class in onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.RestrictedElement"]], "saml_logoutmessage_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SAML_LOGOUTMESSAGE_NOT_FOUND"]], "saml_logoutrequest_invalid (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SAML_LOGOUTREQUEST_INVALID"]], "saml_logoutresponse_invalid (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SAML_LOGOUTRESPONSE_INVALID"]], "saml_response_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND"]], "saml_single_logout_not_supported (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SAML_SINGLE_LOGOUT_NOT_SUPPORTED"]], "session_expired (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.SESSION_EXPIRED"]], "settings_file_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SETTINGS_FILE_NOT_FOUND"]], "settings_invalid (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SETTINGS_INVALID"]], "settings_invalid_syntax (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SETTINGS_INVALID_SYNTAX"]], "sha1 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.SHA1"]], "sha256 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.SHA256"]], "sha384 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.SHA384"]], "sha512 (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.SHA512"]], "sp_certs_not_found (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.SP_CERTS_NOT_FOUND"]], "sp_name_qualifier_name_mismatch (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.SP_NAME_QUALIFIER_NAME_MISMATCH"]], "status_code_is_not_success (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.STATUS_CODE_IS_NOT_SUCCESS"]], "status_no_passive (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_NO_PASSIVE"]], "status_partial_logout (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_PARTIAL_LOGOUT"]], "status_proxy_count_exceeded (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_PROXY_COUNT_EXCEEDED"]], "status_requester (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_REQUESTER"]], "status_responder (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_RESPONDER"]], "status_success (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_SUCCESS"]], "status_version_mismatch (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.STATUS_VERSION_MISMATCH"]], "time_cached (onelogin.saml2.metadata.onelogin_saml2_metadata attribute)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata.TIME_CACHED"]], "time_format (onelogin.saml2.utils.onelogin_saml2_utils attribute)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.TIME_FORMAT"]], "time_format_2 (onelogin.saml2.utils.onelogin_saml2_utils attribute)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.TIME_FORMAT_2"]], "time_format_with_fragment (onelogin.saml2.utils.onelogin_saml2_utils attribute)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.TIME_FORMAT_WITH_FRAGMENT"]], "time_valid (onelogin.saml2.metadata.onelogin_saml2_metadata attribute)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata.TIME_VALID"]], "tripledes_cbc (onelogin.saml2.constants.onelogin_saml2_constants attribute)": [[3, "onelogin.saml2.constants.OneLogin_Saml2_Constants.TRIPLEDES_CBC"]], "unexpected_signed_elements (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.UNEXPECTED_SIGNED_ELEMENTS"]], "unsupported_retrieval_method (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.UNSUPPORTED_RETRIEVAL_METHOD"]], "unsupported_saml_version (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.UNSUPPORTED_SAML_VERSION"]], "unsupported_settings_object (onelogin.saml2.errors.onelogin_saml2_error attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_Error.UNSUPPORTED_SETTINGS_OBJECT"]], "wrong_audience (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_AUDIENCE"]], "wrong_destination (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_DESTINATION"]], "wrong_inresponseto (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_INRESPONSETO"]], "wrong_issuer (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_ISSUER"]], "wrong_number_of_assertions (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS"]], "wrong_number_of_authstatements (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_AUTHSTATEMENTS"]], "wrong_number_of_signatures (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES"]], "wrong_number_of_signatures_in_assertion (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION"]], "wrong_number_of_signatures_in_response (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE"]], "wrong_signed_element (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_SIGNED_ELEMENT"]], "wrong_subjectconfirmation (onelogin.saml2.errors.onelogin_saml2_validationerror attribute)": [[3, "onelogin.saml2.errors.OneLogin_Saml2_ValidationError.WRONG_SUBJECTCONFIRMATION"]], "xml() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.XML"]], "add_request_signature() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.add_request_signature"]], "add_response_signature() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.add_response_signature"]], "add_sign() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.add_sign"]], "add_x509_key_descriptors() (onelogin.saml2.metadata.onelogin_saml2_metadata class method)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata.add_x509_key_descriptors"]], "authn_request_class (onelogin.saml2.auth.onelogin_saml2_auth attribute)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.authn_request_class"]], "b64decode() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.b64decode"]], "b64encode() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.b64encode"]], "blacklist (onelogin.saml2.xmlparser.restrictedelement attribute)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.blacklist"]], "build() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.build"]], "builder() (onelogin.saml2.metadata.onelogin_saml2_metadata class method)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata.builder"]], "calculate_x509_fingerprint() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.calculate_x509_fingerprint"]], "check_docinfo() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.check_docinfo"]], "check_idp_settings() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.check_idp_settings"]], "check_one_authnstatement() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.check_one_authnstatement"]], "check_one_condition() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.check_one_condition"]], "check_settings() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.check_settings"]], "check_sp_certs() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.check_sp_certs"]], "check_sp_settings() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.check_sp_settings"]], "check_status() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.check_status"]], "cleanup_namespaces() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.cleanup_namespaces"]], "createdefaultparser() (onelogin.saml2.xmlparser.globalparsertls method)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS.createDefaultParser"]], "decode_base64_and_inflate() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.decode_base64_and_inflate"]], "decrypt_element() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.decrypt_element"]], "deflate_and_base64_encode() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.deflate_and_base64_encode"]], "delete_local_session() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.delete_local_session"]], "dict_deep_merge() (in module onelogin.saml2.idp_metadata_parser)": [[3, "onelogin.saml2.idp_metadata_parser.dict_deep_merge"]], "dump() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.dump"]], "element_class (onelogin.saml2.xmlparser.globalparsertls attribute)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS.element_class"]], "element_text() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.element_text"]], "escape_url() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.escape_url"]], "extract_tag_text() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.extract_tag_text"]], "format_cert() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.format_cert"]], "format_finger_print() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.format_finger_print"]], "format_idp_cert() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.format_idp_cert"]], "format_idp_cert_multi() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.format_idp_cert_multi"]], "format_private_key() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.format_private_key"]], "format_sp_cert() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.format_sp_cert"]], "format_sp_cert_new() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.format_sp_cert_new"]], "format_sp_key() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.format_sp_key"]], "fromstring() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.fromstring"]], "generate_name_id() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.generate_name_id"]], "generate_unique_id() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.generate_unique_id"]], "getdefaultparser() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.getDefaultParser"]], "getdefaultparser() (onelogin.saml2.xmlparser.globalparsertls method)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS.getDefaultParser"]], "get_assertion_id() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_assertion_id"]], "get_assertion_issue_instant() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_assertion_issue_instant"]], "get_assertion_not_on_or_after() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_assertion_not_on_or_after"]], "get_attribute() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_attribute"]], "get_attributes() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_attributes"]], "get_attributes() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_attributes"]], "get_audiences() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_audiences"]], "get_authn_contexts() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_authn_contexts"]], "get_base_path() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_base_path"]], "get_cert_path() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_cert_path"]], "get_contacts() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_contacts"]], "get_error() (onelogin.saml2.logout_request.onelogin_saml2_logout_request method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_error"]], "get_error() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_error"]], "get_error() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_error"]], "get_errors() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_errors"]], "get_errors() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_errors"]], "get_expire_time() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_expire_time"]], "get_friendlyname_attribute() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_friendlyname_attribute"]], "get_friendlyname_attributes() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_friendlyname_attributes"]], "get_friendlyname_attributes() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_friendlyname_attributes"]], "get_id() (onelogin.saml2.authn_request.onelogin_saml2_authn_request method)": [[3, "onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request.get_id"]], "get_id() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_id"]], "get_id() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_id"]], "get_idp_cert() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_idp_cert"]], "get_idp_data() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_idp_data"]], "get_idp_slo_response_url() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_idp_slo_response_url"]], "get_idp_slo_url() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_idp_slo_url"]], "get_idp_sso_url() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_idp_sso_url"]], "get_in_response_to() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_in_response_to"]], "get_in_response_to() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_in_response_to"]], "get_issuer() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_issuer"]], "get_issuer() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_issuer"]], "get_issuers() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_issuers"]], "get_last_assertion_id() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_assertion_id"]], "get_last_assertion_issue_instant() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_assertion_issue_instant"]], "get_last_assertion_not_on_or_after() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_assertion_not_on_or_after"]], "get_last_authn_contexts() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_authn_contexts"]], "get_last_error_reason() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_error_reason"]], "get_last_message_id() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_message_id"]], "get_last_request_id() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_request_id"]], "get_last_request_xml() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_request_xml"]], "get_last_response_in_response_to() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_response_in_response_to"]], "get_last_response_xml() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_last_response_xml"]], "get_lib_path() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_lib_path"]], "get_metadata() (onelogin.saml2.idp_metadata_parser.onelogin_saml2_idpmetadataparser class method)": [[3, "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser.get_metadata"]], "get_nameid() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_nameid"]], "get_nameid() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_nameid"]], "get_nameid() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_nameid"]], "get_nameid_data() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_nameid_data"]], "get_nameid_data() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_nameid_data"]], "get_nameid_format() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_nameid_format"]], "get_nameid_format() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_nameid_format"]], "get_nameid_format() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_nameid_format"]], "get_nameid_nq() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_nameid_nq"]], "get_nameid_nq() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_nameid_nq"]], "get_nameid_spnq() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_nameid_spnq"]], "get_nameid_spnq() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_nameid_spnq"]], "get_organization() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_organization"]], "get_request() (onelogin.saml2.authn_request.onelogin_saml2_authn_request method)": [[3, "onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request.get_request"]], "get_request() (onelogin.saml2.logout_request.onelogin_saml2_logout_request method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_request"]], "get_response() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_response"]], "get_schemas_path() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_schemas_path"]], "get_security_data() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_security_data"]], "get_self_host() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_self_host"]], "get_self_routed_url_no_query() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_self_routed_url_no_query"]], "get_self_url() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_self_url"]], "get_self_url_host() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_self_url_host"]], "get_self_url_no_query() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_self_url_no_query"]], "get_session_expiration() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_session_expiration"]], "get_session_index() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_session_index"]], "get_session_index() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_session_index"]], "get_session_indexes() (onelogin.saml2.logout_request.onelogin_saml2_logout_request class method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_session_indexes"]], "get_session_not_on_or_after() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_session_not_on_or_after"]], "get_settings() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_settings"]], "get_slo_response_url() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_slo_response_url"]], "get_slo_url() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_slo_url"]], "get_sp_cert() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_sp_cert"]], "get_sp_cert_new() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_sp_cert_new"]], "get_sp_data() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_sp_data"]], "get_sp_key() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_sp_key"]], "get_sp_metadata() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.get_sp_metadata"]], "get_sso_url() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.get_sso_url"]], "get_status() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_status"]], "get_status() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.get_status"]], "get_xml() (onelogin.saml2.authn_request.onelogin_saml2_authn_request method)": [[3, "onelogin.saml2.authn_request.OneLogin_Saml2_Authn_Request.get_xml"]], "get_xml() (onelogin.saml2.logout_request.onelogin_saml2_logout_request method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.get_xml"]], "get_xml() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.get_xml"]], "get_xml_document() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.get_xml_document"]], "getchildren() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.getchildren"]], "getiterator() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.getiterator"]], "is_authenticated() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.is_authenticated"]], "is_debug_active() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.is_debug_active"]], "is_https() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.is_https"]], "is_strict() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.is_strict"]], "is_valid() (onelogin.saml2.logout_request.onelogin_saml2_logout_request method)": [[3, "onelogin.saml2.logout_request.OneLogin_Saml2_Logout_Request.is_valid"]], "is_valid() (onelogin.saml2.logout_response.onelogin_saml2_logout_response method)": [[3, "onelogin.saml2.logout_response.OneLogin_Saml2_Logout_Response.is_valid"]], "is_valid() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.is_valid"]], "iter() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.iter"]], "iterchildren() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.iterchildren"]], "iterdescendants() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.iterdescendants"]], "iterparse() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.iterparse"]], "itersiblings() (onelogin.saml2.xmlparser.restrictedelement method)": [[3, "onelogin.saml2.xmlparser.RestrictedElement.itersiblings"]], "login() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.login"]], "logout() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.logout"]], "logout_request_class (onelogin.saml2.auth.onelogin_saml2_auth attribute)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.logout_request_class"]], "logout_response_class (onelogin.saml2.auth.onelogin_saml2_auth attribute)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.logout_response_class"]], "make_child() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.make_child"]], "make_root() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.make_root"]], "merge_settings() (onelogin.saml2.idp_metadata_parser.onelogin_saml2_idpmetadataparser static method)": [[3, "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser.merge_settings"]], "metadata_class (onelogin.saml2.settings.onelogin_saml2_settings attribute)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.metadata_class"]], "normalize_url() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.normalize_url"]], "now() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.now"]], "onelogin.saml2": [[3, "module-onelogin.saml2"]], "onelogin.saml2.auth": [[3, "module-onelogin.saml2.auth"]], "onelogin.saml2.authn_request": [[3, "module-onelogin.saml2.authn_request"]], "onelogin.saml2.compat": [[3, "module-onelogin.saml2.compat"]], "onelogin.saml2.constants": [[3, "module-onelogin.saml2.constants"]], "onelogin.saml2.errors": [[3, "module-onelogin.saml2.errors"]], "onelogin.saml2.idp_metadata_parser": [[3, "module-onelogin.saml2.idp_metadata_parser"]], "onelogin.saml2.logout_request": [[3, "module-onelogin.saml2.logout_request"]], "onelogin.saml2.logout_response": [[3, "module-onelogin.saml2.logout_response"]], "onelogin.saml2.metadata": [[3, "module-onelogin.saml2.metadata"]], "onelogin.saml2.response": [[3, "module-onelogin.saml2.response"]], "onelogin.saml2.settings": [[3, "module-onelogin.saml2.settings"]], "onelogin.saml2.utils": [[3, "module-onelogin.saml2.utils"]], "onelogin.saml2.xml_templates": [[3, "module-onelogin.saml2.xml_templates"]], "onelogin.saml2.xml_utils": [[3, "module-onelogin.saml2.xml_utils"]], "onelogin.saml2.xmlparser": [[3, "module-onelogin.saml2.xmlparser"]], "parse() (in module onelogin.saml2.xmlparser)": [[3, "onelogin.saml2.xmlparser.parse"]], "parse() (onelogin.saml2.idp_metadata_parser.onelogin_saml2_idpmetadataparser class method)": [[3, "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser.parse"]], "parse_saml_to_time() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.parse_SAML_to_time"]], "parse_duration() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.parse_duration"]], "parse_remote() (onelogin.saml2.idp_metadata_parser.onelogin_saml2_idpmetadataparser class method)": [[3, "onelogin.saml2.idp_metadata_parser.OneLogin_Saml2_IdPMetadataParser.parse_remote"]], "parse_time_to_saml() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.parse_time_to_SAML"]], "parser_config (onelogin.saml2.xmlparser.globalparsertls attribute)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS.parser_config"]], "process_response() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.process_response"]], "process_signed_elements() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.process_signed_elements"]], "process_slo() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.process_slo"]], "query() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.query"]], "redirect() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.redirect"]], "redirect_to() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.redirect_to"]], "response_class (onelogin.saml2.auth.onelogin_saml2_auth attribute)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.response_class"]], "return_false_on_exception() (in module onelogin.saml2.utils)": [[3, "onelogin.saml2.utils.return_false_on_exception"]], "setdefaultparser() (onelogin.saml2.xmlparser.globalparsertls method)": [[3, "onelogin.saml2.xmlparser.GlobalParserTLS.setDefaultParser"]], "set_cert_path() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.set_cert_path"]], "set_strict() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.set_strict"]], "set_strict() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.set_strict"]], "sign_binary() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.sign_binary"]], "sign_metadata() (onelogin.saml2.metadata.onelogin_saml2_metadata static method)": [[3, "onelogin.saml2.metadata.OneLogin_Saml2_Metadata.sign_metadata"]], "store_valid_response() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.store_valid_response"]], "to_bytes() (in module onelogin.saml2.compat)": [[3, "onelogin.saml2.compat.to_bytes"]], "to_etree() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.to_etree"]], "to_string() (in module onelogin.saml2.compat)": [[3, "onelogin.saml2.compat.to_string"]], "to_string() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.to_string"]], "utf8() (in module onelogin.saml2.compat)": [[3, "onelogin.saml2.compat.utf8"]], "validate_binary_sign() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.validate_binary_sign"]], "validate_metadata() (onelogin.saml2.settings.onelogin_saml2_settings method)": [[3, "onelogin.saml2.settings.OneLogin_Saml2_Settings.validate_metadata"]], "validate_metadata_sign() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.validate_metadata_sign"]], "validate_node_sign() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.validate_node_sign"]], "validate_num_assertions() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.validate_num_assertions"]], "validate_request_signature() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.validate_request_signature"]], "validate_response_signature() (onelogin.saml2.auth.onelogin_saml2_auth method)": [[3, "onelogin.saml2.auth.OneLogin_Saml2_Auth.validate_response_signature"]], "validate_sign() (onelogin.saml2.utils.onelogin_saml2_utils static method)": [[3, "onelogin.saml2.utils.OneLogin_Saml2_Utils.validate_sign"]], "validate_signed_elements() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.validate_signed_elements"]], "validate_timestamps() (onelogin.saml2.response.onelogin_saml2_response method)": [[3, "onelogin.saml2.response.OneLogin_Saml2_Response.validate_timestamps"]], "validate_url() (in module onelogin.saml2.settings)": [[3, "onelogin.saml2.settings.validate_url"]], "validate_xml() (onelogin.saml2.xml_utils.onelogin_saml2_xml static method)": [[3, "onelogin.saml2.xml_utils.OneLogin_Saml2_XML.validate_xml"]]}})python3-saml-1.16.0/pyproject.toml000066400000000000000000000102631451074743100170610ustar00rootroot00000000000000[tool.poetry] name = "python3-saml" version = "1.16.0" description = "Saml Python Toolkit. Add SAML support to your Python software using this library" license = "Apache-2.0" authors = ["SAML-Toolkits "] maintainers = ["Sixto Martin "] readme = "README.md" homepage = "https://saml.info" repository = "https://github.com/SAML-Toolkits/python3-saml" keywords = [ "saml", "saml2", "sso", "xmlsec", "federation", "identity", ] classifiers = [ "Topic :: Software Development :: Build Tools", "Topic :: Software Development :: Libraries :: Python Modules", ] packages = [ { include = "onelogin", from = "src" }, { include = "onelogin/saml2", from = "src" }, ] include = [ { path = "src/onelogin/saml2/schemas"}, { path = "tests", format = "sdist" } ] [tool.poetry.urls] "Bug Tracker" = "https://github.com/SAML-Toolkits/python3-saml/issues" [tool.poetry.dependencies] python = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*" lxml = ">=4.6.5, !=4.7.0" xmlsec = ">=1.3.9" isodate = ">=0.6.1" #[tool.poetry.group.dev] #optional = true #[tool.poetry.group.dev.dependencies] #black = "*" #isort = {version = "^5.10.1", extras = ["pyproject"]} flake8 = { version = ">=3.6.0, <=5.0.0", optional = true} #Flake8-pyproject = "^1.1.0.post0" #flake8-bugbear = "^22.8.23" #flake8-logging-format = "^0.7.5" #ipdb = "^0.13.9" #[tool.poetry.group.test.dependencies] freezegun= { version = ">=0.3.11, <=1.1.0", optional = true} pytest = { version = ">=4.6.11", optional = true} coverage = { version = ">=4.5.2", optional = true} #pylint = ">=1.9.4" [tool.poetry.extras] test = ["flake8", "freezegun", "pytest", "coverage"] #[tool.poetry.group.test] #optional = true #[tool.poetry.group.coverage] #optional = true #[tool.poetry.group.coverage.dependencies] #coverage = ">=4.5.2" #pytest-cov = "*" #[tool.poetry.group.docs] #optional = true #[tool.poetry.group.docs.dependencies] #sphinx = "*" [build-system] requires = [ "poetry>=1.1.15", "setuptools >= 40.1.0", "wheel" ] build-backend = "poetry.core.masonry.api" [tool.pytest.ini_options] minversion = "4.6.11" addopts = "-ra -vvv" testpaths = [ "tests", ] pythonpath = [ "tests", ] [tool.coverage.run] branch = true source = ["src/onelogin/saml2"] [tool.coverage.report] exclude_lines = [ "pragma: no cover", "def __repr__", "def __str__", "raise AssertionError", "raise NotImplementedError", "if __name__ == .__main__.:", "if TYPE_CHECKING:", "if typing.TYPE_CHECKING:", ] ignore_errors = true [tool.coverage.html] directory = "cov_html" [tool.flake8] max-line-length = 210 max-complexity = 22 count = true show-source = true statistics = true disable-noqa = false # 'ignore' defaults to: E121,E123,E126,E226,E24,E704,W503,W504 extend-ignore = [ 'B904', 'B006', 'B950', 'B017', 'C901', 'E501', 'E731', ] per-file-ignores = [ '__init__.py:F401', ] # 'select' defaults to: E,F,W,C90 extend-select = [ # * Default warnings reported by flake8-bugbear (B) - # https://github.com/PyCQA/flake8-bugbear#list-of-warnings 'B', # * The B950 flake8-bugbear opinionated warnings - # https://github.com/PyCQA/flake8-bugbear#opinionated-warnings 'B9', ] extend-exclude = [ '.github', '.gitlab', '.Python', '.*.pyc', '.*.pyo', '.*.pyd', '.*.py.class', '*.egg-info', 'venv*', '.venv*', '.*_cache', 'lib', 'lib64', '.*.so', 'build', 'dist', 'sdist', 'wheels', ] [tool.black] line-length = 200 extend-exclude = ''' # A regex preceded with ^/ will apply only to files and directories # in the root of the project. ( \.pytest_cache ) ''' [tool.isort] profile = 'black' # The 'black' profile means: # multi_line_output = 3 # include_trailing_comma = true # force_grid_wrap = 0 # use_parentheses = true # ensure_newline_before_comments = true # line_length = 88 line_length = 200 # override black provile line_length force_single_line = true # override black profile multi_line_output star_first = true group_by_package = true force_sort_within_sections = true lines_after_imports = 2 honor_noqa = true atomic = true ignore_comments = true skip_gitignore = true src_paths = [ 'src', 'tests', ] python3-saml-1.16.0/setup.cfg000066400000000000000000000001471451074743100157660ustar00rootroot00000000000000[flake8] ignore = E731,W504,E501 max-complexity = 48 max-line-length = 1900 [wheel] python-tag = py27 python3-saml-1.16.0/setup.py000066400000000000000000000032061451074743100156560ustar00rootroot00000000000000#! /usr/bin/env python # -*- coding: utf-8 -*- from setuptools import setup setup( name='python3-saml', version='1.16.0', description='Saml Python Toolkit. Add SAML support to your Python software using this library', classifiers=[ 'Development Status :: 5 - Production/Stable', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'Operating System :: OS Independent', 'Programming Language :: Python :: 2.7', 'Programming Language :: Python :: 3.5', 'Programming Language :: Python :: 3.6', 'Programming Language :: Python :: 3.7', 'Programming Language :: Python :: 3.8', 'Programming Language :: Python :: 3.9', 'Programming Language :: Python :: 3.10', 'Programming Language :: Python :: 3.11', 'Programming Language :: Python :: 3.12', ], license='MIT', url='https://github.com/SAML-Toolkits/python3-saml', packages=['onelogin', 'onelogin/saml2'], include_package_data=True, package_data={ 'onelogin/saml2/schemas': ['*.xsd'], }, package_dir={ '': 'src', }, test_suite='tests', install_requires=[ 'lxml>=4.6.5, !=4.7.0', 'isodate>=0.6.1', 'xmlsec>=1.3.9' ], dependency_links=['http://github.com/mehcode/python-xmlsec/tarball/master'], extras_require={ 'test': ( 'coverage>=4.5.2', 'freezegun>=0.3.11, <=1.1.0', # 'pylint>=1.9.4', 'flake8>=3.6.0, <=5.0.0', 'pytest>=4.6', ), }, keywords='saml saml2 sso xmlsec federation identity', ) python3-saml-1.16.0/src/000077500000000000000000000000001451074743100147325ustar00rootroot00000000000000python3-saml-1.16.0/src/onelogin/000077500000000000000000000000001451074743100165445ustar00rootroot00000000000000python3-saml-1.16.0/src/onelogin/__init__.py000066400000000000000000000010551451074743100206560ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ Add SAML support to your Python softwares using this library. SAML Python toolkit let you build a SP (Service Provider) over your Python application and connect it to any IdP (Identity Provider). Supports: * SSO and SLO (SP-Initiated and IdP-Initiated). * Assertion and nameId encryption. * Assertion signature. * Message signature: AuthNRequest, LogoutRequest, LogoutResponses. * Enable an Assertion Consumer Service endpoint. * Enable a Single Logout Service endpoint. * Publish the SP metadata (which can be signed). """ python3-saml-1.16.0/src/onelogin/saml2/000077500000000000000000000000001451074743100175625ustar00rootroot00000000000000python3-saml-1.16.0/src/onelogin/saml2/__init__.py000066400000000000000000000010551451074743100216740ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ Add SAML support to your Python softwares using this library. SAML Python toolkit let you build a SP (Service Provider) over your Python application and connect it to any IdP (Identity Provider). Supports: * SSO and SLO (SP-Initiated and IdP-Initiated). * Assertion and nameId encryption. * Assertion signature. * Message signature: AuthNRequest, LogoutRequest, LogoutResponses. * Enable an Assertion Consumer Service endpoint. * Enable a Single Logout Service endpoint. * Publish the SP metadata (which can be signed). """ python3-saml-1.16.0/src/onelogin/saml2/auth.py000066400000000000000000000706461451074743100211120ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Auth class Main class of SAML Python Toolkit. Initializes the SP SAML instance """ import xmlsec from onelogin.saml2 import compat from onelogin.saml2.authn_request import OneLogin_Saml2_Authn_Request from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.logout_request import OneLogin_Saml2_Logout_Request from onelogin.saml2.logout_response import OneLogin_Saml2_Logout_Response from onelogin.saml2.response import OneLogin_Saml2_Response from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError from onelogin.saml2.xmlparser import tostring class OneLogin_Saml2_Auth(object): """ This class implements the SP SAML instance. Defines the methods that you can invoke in your application in order to add SAML support (initiates SSO, initiates SLO, processes a SAML Response, a Logout Request or a Logout Response). """ authn_request_class = OneLogin_Saml2_Authn_Request logout_request_class = OneLogin_Saml2_Logout_Request logout_response_class = OneLogin_Saml2_Logout_Response response_class = OneLogin_Saml2_Response def __init__(self, request_data, old_settings=None, custom_base_path=None): """ Initializes the SP SAML instance. :param request_data: Request Data :type request_data: dict :param old_settings: Optional. SAML Toolkit Settings :type old_settings: dict :param custom_base_path: Optional. Path where are stored the settings file and the cert folder :type custom_base_path: string """ self._request_data = request_data if isinstance(old_settings, OneLogin_Saml2_Settings): self._settings = old_settings else: self._settings = OneLogin_Saml2_Settings(old_settings, custom_base_path) self._attributes = dict() self._friendlyname_attributes = dict() self._nameid = None self._nameid_format = None self._nameid_nq = None self._nameid_spnq = None self._session_index = None self._session_expiration = None self._authenticated = False self._errors = [] self._error_reason = None self._last_request_id = None self._last_message_id = None self._last_assertion_id = None self._last_assertion_issue_instant = None self._last_authn_contexts = [] self._last_request = None self._last_response = None self._last_response_in_response_to = None self._last_assertion_not_on_or_after = None def get_settings(self): """ Returns the settings info :return: Setting info :rtype: OneLogin_Saml2_Setting object """ return self._settings def set_strict(self, value): """ Set the strict mode active/disable :param value: :type value: bool """ assert isinstance(value, bool) self._settings.set_strict(value) def store_valid_response(self, response): self._attributes = response.get_attributes() self._friendlyname_attributes = response.get_friendlyname_attributes() self._nameid = response.get_nameid() self._nameid_format = response.get_nameid_format() self._nameid_nq = response.get_nameid_nq() self._nameid_spnq = response.get_nameid_spnq() self._session_index = response.get_session_index() self._session_expiration = response.get_session_not_on_or_after() self._last_message_id = response.get_id() self._last_assertion_id = response.get_assertion_id() self._last_assertion_issue_instant = response.get_assertion_issue_instant() self._last_authn_contexts = response.get_authn_contexts() self._authenticated = True self._last_response_in_response_to = response.get_in_response_to() self._last_assertion_not_on_or_after = response.get_assertion_not_on_or_after() def process_response(self, request_id=None): """ Process the SAML Response sent by the IdP. :param request_id: Is an optional argument. Is the ID of the AuthNRequest sent by this SP to the IdP. :type request_id: string :raises: OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND, when a POST with a SAMLResponse is not found """ self._errors = [] self._error_reason = None if 'post_data' in self._request_data and 'SAMLResponse' in self._request_data['post_data']: # AuthnResponse -- HTTP_POST Binding response = self.response_class(self._settings, self._request_data['post_data']['SAMLResponse']) self._last_response = response.get_xml_document() if response.is_valid(self._request_data, request_id): self.store_valid_response(response) else: self._errors.append('invalid_response') self._error_reason = response.get_error() else: self._errors.append('invalid_binding') raise OneLogin_Saml2_Error( 'SAML Response not found, Only supported HTTP_POST Binding', OneLogin_Saml2_Error.SAML_RESPONSE_NOT_FOUND ) def process_slo(self, keep_local_session=False, request_id=None, delete_session_cb=None): """ Process the SAML Logout Response / Logout Request sent by the IdP. :param keep_local_session: When false will destroy the local session, otherwise will destroy it :type keep_local_session: bool :param request_id: The ID of the LogoutRequest sent by this SP to the IdP :type request_id: string :returns: Redirection url """ self._errors = [] self._error_reason = None get_data = 'get_data' in self._request_data and self._request_data['get_data'] if get_data and 'SAMLResponse' in get_data: logout_response = self.logout_response_class(self._settings, get_data['SAMLResponse']) self._last_response = logout_response.get_xml() if not self.validate_response_signature(get_data): self._errors.append('invalid_logout_response_signature') self._errors.append('Signature validation failed. Logout Response rejected') elif not logout_response.is_valid(self._request_data, request_id): self._errors.append('invalid_logout_response') elif logout_response.get_status() != OneLogin_Saml2_Constants.STATUS_SUCCESS: self._errors.append('logout_not_success') else: self._last_message_id = logout_response.id if not keep_local_session: OneLogin_Saml2_Utils.delete_local_session(delete_session_cb) elif get_data and 'SAMLRequest' in get_data: logout_request = self.logout_request_class(self._settings, get_data['SAMLRequest']) self._last_request = logout_request.get_xml() if not self.validate_request_signature(get_data): self._errors.append("invalid_logout_request_signature") self._errors.append('Signature validation failed. Logout Request rejected') elif not logout_request.is_valid(self._request_data): self._errors.append('invalid_logout_request') else: if not keep_local_session: OneLogin_Saml2_Utils.delete_local_session(delete_session_cb) in_response_to = logout_request.id self._last_message_id = logout_request.id response_builder = self.logout_response_class(self._settings) response_builder.build(in_response_to) self._last_response = response_builder.get_xml() logout_response = response_builder.get_response() parameters = {'SAMLResponse': logout_response} if 'RelayState' in self._request_data['get_data']: parameters['RelayState'] = self._request_data['get_data']['RelayState'] security = self._settings.get_security_data() if security['logoutResponseSigned']: self.add_response_signature(parameters, security['signatureAlgorithm']) return self.redirect_to(self.get_slo_response_url(), parameters) else: self._errors.append('invalid_binding') raise OneLogin_Saml2_Error( 'SAML LogoutRequest/LogoutResponse not found. Only supported HTTP_REDIRECT Binding', OneLogin_Saml2_Error.SAML_LOGOUTMESSAGE_NOT_FOUND ) def redirect_to(self, url=None, parameters={}): """ Redirects the user to the URL passed by parameter or to the URL that we defined in our SSO Request. :param url: The target URL to redirect the user :type url: string :param parameters: Extra parameters to be passed as part of the URL :type parameters: dict :returns: Redirection URL """ if url is None and 'RelayState' in self._request_data['get_data']: url = self._request_data['get_data']['RelayState'] return OneLogin_Saml2_Utils.redirect(url, parameters, request_data=self._request_data) def is_authenticated(self): """ Checks if the user is authenticated or not. :returns: True if is authenticated, False if not :rtype: bool """ return self._authenticated def get_attributes(self): """ Returns the set of SAML attributes. :returns: SAML attributes :rtype: dict """ return self._attributes def get_friendlyname_attributes(self): """ Returns the set of SAML attributes indexed by FiendlyName. :returns: SAML attributes :rtype: dict """ return self._friendlyname_attributes def get_nameid(self): """ Returns the nameID. :returns: NameID :rtype: string|None """ return self._nameid def get_nameid_format(self): """ Returns the nameID Format. :returns: NameID Format :rtype: string|None """ return self._nameid_format def get_nameid_nq(self): """ Returns the nameID NameQualifier of the Assertion. :returns: NameID NameQualifier :rtype: string|None """ return self._nameid_nq def get_nameid_spnq(self): """ Returns the nameID SP NameQualifier of the Assertion. :returns: NameID SP NameQualifier :rtype: string|None """ return self._nameid_spnq def get_session_index(self): """ Returns the SessionIndex from the AuthnStatement. :returns: The SessionIndex of the assertion :rtype: string """ return self._session_index def get_session_expiration(self): """ Returns the SessionNotOnOrAfter from the AuthnStatement. :returns: The SessionNotOnOrAfter of the assertion :rtype: unix/posix timestamp|None """ return self._session_expiration def get_last_assertion_not_on_or_after(self): """ The NotOnOrAfter value of the valid SubjectConfirmationData node (if any) of the last assertion processed """ return self._last_assertion_not_on_or_after def get_errors(self): """ Returns a list with code errors if something went wrong :returns: List of errors :rtype: list """ return self._errors def get_last_error_reason(self): """ Returns the reason for the last error :returns: Reason of the last error :rtype: None | string """ return self._error_reason def get_attribute(self, name): """ Returns the requested SAML attribute. :param name: Name of the attribute :type name: string :returns: Attribute value(s) if exists or None :rtype: list """ assert isinstance(name, compat.str_type) return self._attributes.get(name) def get_friendlyname_attribute(self, friendlyname): """ Returns the requested SAML attribute searched by FriendlyName. :param friendlyname: FriendlyName of the attribute :type friendlyname: string :returns: Attribute value(s) if exists or None :rtype: list """ assert isinstance(friendlyname, compat.str_type) return self._friendlyname_attributes.get(friendlyname) def get_last_request_id(self): """ :returns: The ID of the last Request SAML message generated. :rtype: string """ return self._last_request_id def get_last_message_id(self): """ :returns: The ID of the last Response SAML message processed. :rtype: string """ return self._last_message_id def get_last_assertion_id(self): """ :returns: The ID of the last assertion processed. :rtype: string """ return self._last_assertion_id def get_last_assertion_issue_instant(self): """ :returns: The IssueInstant of the last assertion processed. :rtype: unix/posix timestamp|None """ return self._last_assertion_issue_instant def get_last_authn_contexts(self): """ :returns: The list of authentication contexts sent in the last SAML Response. :rtype: list """ return self._last_authn_contexts def get_last_response_in_response_to(self): """ :returns: InResponseTo attribute of the last Response SAML processed or None if it is not present. :rtype: string """ return self._last_response_in_response_to def login(self, return_to=None, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None): """ Initiates the SSO process. :param return_to: Optional argument. The target URL the user should be redirected to after login. :type return_to: string :param force_authn: Optional argument. When true the AuthNRequest will set the ForceAuthn='true'. :type force_authn: bool :param is_passive: Optional argument. When true the AuthNRequest will set the Ispassive='true'. :type is_passive: bool :param set_nameid_policy: Optional argument. When true the AuthNRequest will set a nameIdPolicy element. :type set_nameid_policy: bool :param name_id_value_req: Optional argument. Indicates to the IdP the subject that should be authenticated :type name_id_value_req: string :returns: Redirection URL :rtype: string """ authn_request = self.authn_request_class(self._settings, force_authn, is_passive, set_nameid_policy, name_id_value_req) self._last_request = authn_request.get_xml() self._last_request_id = authn_request.get_id() saml_request = authn_request.get_request() parameters = {'SAMLRequest': saml_request} if return_to is not None: parameters['RelayState'] = return_to else: parameters['RelayState'] = OneLogin_Saml2_Utils.get_self_url_no_query(self._request_data) security = self._settings.get_security_data() if security.get('authnRequestsSigned', False): self.add_request_signature(parameters, security['signatureAlgorithm']) return self.redirect_to(self.get_sso_url(), parameters) def logout(self, return_to=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None): """ Initiates the SLO process. :param return_to: Optional argument. The target URL the user should be redirected to after logout. :type return_to: string :param name_id: The NameID that will be set in the LogoutRequest. :type name_id: string :param session_index: SessionIndex that identifies the session of the user. :type session_index: string :param nq: IDP Name Qualifier :type: string :param name_id_format: The NameID Format that will be set in the LogoutRequest. :type: string :param spnq: SP Name Qualifier :type: string :returns: Redirection URL """ slo_url = self.get_slo_url() if slo_url is None: raise OneLogin_Saml2_Error( 'The IdP does not support Single Log Out', OneLogin_Saml2_Error.SAML_SINGLE_LOGOUT_NOT_SUPPORTED ) if name_id is None and self._nameid is not None: name_id = self._nameid if name_id_format is None and self._nameid_format is not None: name_id_format = self._nameid_format logout_request = self.logout_request_class( self._settings, name_id=name_id, session_index=session_index, nq=nq, name_id_format=name_id_format, spnq=spnq ) self._last_request = logout_request.get_xml() self._last_request_id = logout_request.id parameters = {'SAMLRequest': logout_request.get_request()} if return_to is not None: parameters['RelayState'] = return_to else: parameters['RelayState'] = OneLogin_Saml2_Utils.get_self_url_no_query(self._request_data) security = self._settings.get_security_data() if security.get('logoutRequestSigned', False): self.add_request_signature(parameters, security['signatureAlgorithm']) return self.redirect_to(slo_url, parameters) def get_sso_url(self): """ Gets the SSO URL. :returns: An URL, the SSO endpoint of the IdP :rtype: string """ return self._settings.get_idp_sso_url() def get_slo_url(self): """ Gets the SLO URL. :returns: An URL, the SLO endpoint of the IdP :rtype: string """ return self._settings.get_idp_slo_url() def get_slo_response_url(self): """ Gets the SLO return URL for IdP-initiated logout. :returns: an URL, the SLO return endpoint of the IdP :rtype: string """ return self._settings.get_idp_slo_response_url() def add_request_signature(self, request_data, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256): """ Builds the Signature of the SAML Request. :param request_data: The Request parameters :type request_data: dict :param sign_algorithm: Signature algorithm method :type sign_algorithm: string """ return self._build_signature(request_data, 'SAMLRequest', sign_algorithm) def add_response_signature(self, response_data, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256): """ Builds the Signature of the SAML Response. :param response_data: The Response parameters :type response_data: dict :param sign_algorithm: Signature algorithm method :type sign_algorithm: string """ return self._build_signature(response_data, 'SAMLResponse', sign_algorithm) @staticmethod def _build_sign_query_from_qs(query_string, saml_type): """ Build sign query from query string :param query_string: The query string :type query_string: str :param saml_type: The target URL the user should be redirected to :type saml_type: string SAMLRequest | SAMLResponse """ args = ('%s=' % saml_type, 'RelayState=', 'SigAlg=') parts = query_string.split('&') # Join in the order of arguments rather than the original order of parts. return '&'.join(part for arg in args for part in parts if part.startswith(arg)) @staticmethod def _build_sign_query(saml_data, relay_state, algorithm, saml_type, lowercase_urlencoding=False): """ Build sign query :param saml_data: The Request data :type saml_data: str :param relay_state: The Relay State :type relay_state: str :param algorithm: The Signature Algorithm :type algorithm: str :param saml_type: The target URL the user should be redirected to :type saml_type: string SAMLRequest | SAMLResponse :param lowercase_urlencoding: lowercase or no :type lowercase_urlencoding: boolean """ sign_data = ['%s=%s' % (saml_type, OneLogin_Saml2_Utils.escape_url(saml_data, lowercase_urlencoding))] if relay_state is not None: sign_data.append('RelayState=%s' % OneLogin_Saml2_Utils.escape_url(relay_state, lowercase_urlencoding)) sign_data.append('SigAlg=%s' % OneLogin_Saml2_Utils.escape_url(algorithm, lowercase_urlencoding)) return '&'.join(sign_data) def _build_signature(self, data, saml_type, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256): """ Builds the Signature :param data: The Request data :type data: dict :param saml_type: The target URL the user should be redirected to :type saml_type: string SAMLRequest | SAMLResponse :param sign_algorithm: Signature algorithm method :type sign_algorithm: string """ assert saml_type in ('SAMLRequest', 'SAMLResponse') key = self.get_settings().get_sp_key() if not key: raise OneLogin_Saml2_Error( "Trying to sign the %s but can't load the SP private key." % saml_type, OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND ) msg = self._build_sign_query(data[saml_type], data.get('RelayState', None), sign_algorithm, saml_type) sign_algorithm_transform_map = { OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256, OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384, OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512 } sign_algorithm_transform = sign_algorithm_transform_map.get(sign_algorithm, xmlsec.Transform.RSA_SHA256) signature = OneLogin_Saml2_Utils.sign_binary(msg, key, sign_algorithm_transform, self._settings.is_debug_active()) data['Signature'] = OneLogin_Saml2_Utils.b64encode(signature) data['SigAlg'] = sign_algorithm def validate_request_signature(self, request_data): """ Validate Request Signature :param request_data: The Request data :type request_data: dict """ return self._validate_signature(request_data, 'SAMLRequest') def validate_response_signature(self, request_data): """ Validate Response Signature :param request_data: The Request data :type request_data: dict """ return self._validate_signature(request_data, 'SAMLResponse') def _validate_signature(self, data, saml_type, raise_exceptions=False): """ Validate Signature :param data: The Request data :type data: dict :param cert: The certificate to check signature :type cert: str :param saml_type: The target URL the user should be redirected to :type saml_type: string SAMLRequest | SAMLResponse :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean """ try: signature = data.get('Signature', None) if signature is None: if self._settings.is_strict() and self._settings.get_security_data().get('wantMessagesSigned', False): raise OneLogin_Saml2_ValidationError( 'The %s is not signed. Rejected.' % saml_type, OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE ) return True idp_data = self.get_settings().get_idp_data() exists_x509cert = self.get_settings().get_idp_cert() is not None exists_multix509sign = 'x509certMulti' in idp_data and \ 'signing' in idp_data['x509certMulti'] and \ idp_data['x509certMulti']['signing'] if not (exists_x509cert or exists_multix509sign): error_msg = 'In order to validate the sign on the %s, the x509cert of the IdP is required' % saml_type self._errors.append(error_msg) raise OneLogin_Saml2_Error( error_msg, OneLogin_Saml2_Error.CERT_NOT_FOUND ) sign_alg = data.get('SigAlg', OneLogin_Saml2_Constants.RSA_SHA1) if isinstance(sign_alg, bytes): sign_alg = sign_alg.decode('utf8') security = self._settings.get_security_data() reject_deprecated_alg = security.get('rejectDeprecatedAlgorithm', False) if reject_deprecated_alg: if sign_alg in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS: raise OneLogin_Saml2_ValidationError( 'Deprecated signature algorithm found: %s' % sign_alg, OneLogin_Saml2_ValidationError.DEPRECATED_SIGNATURE_METHOD ) query_string = self._request_data.get('query_string') if query_string and self._request_data.get('validate_signature_from_qs'): signed_query = self._build_sign_query_from_qs(query_string, saml_type) else: lowercase_urlencoding = self._request_data.get('lowercase_urlencoding', False) signed_query = self._build_sign_query(data[saml_type], data.get('RelayState'), sign_alg, saml_type, lowercase_urlencoding) if exists_multix509sign: for cert in idp_data['x509certMulti']['signing']: if OneLogin_Saml2_Utils.validate_binary_sign(signed_query, OneLogin_Saml2_Utils.b64decode(signature), cert, sign_alg): return True raise OneLogin_Saml2_ValidationError( 'Signature validation failed. %s rejected' % saml_type, OneLogin_Saml2_ValidationError.INVALID_SIGNATURE ) else: cert = self.get_settings().get_idp_cert() if not OneLogin_Saml2_Utils.validate_binary_sign(signed_query, OneLogin_Saml2_Utils.b64decode(signature), cert, sign_alg, self._settings.is_debug_active()): raise OneLogin_Saml2_ValidationError( 'Signature validation failed. %s rejected' % saml_type, OneLogin_Saml2_ValidationError.INVALID_SIGNATURE ) return True except Exception as e: self._error_reason = str(e) if raise_exceptions: raise e return False def get_last_response_xml(self, pretty_print_if_possible=False): """ Retrieves the raw XML (decrypted) of the last SAML response, or the last Logout Response generated or processed :returns: SAML response XML :rtype: string|None """ response = None if self._last_response is not None: if isinstance(self._last_response, compat.str_type): response = self._last_response else: response = tostring(self._last_response, encoding='unicode', pretty_print=pretty_print_if_possible) return response def get_last_request_xml(self): """ Retrieves the raw XML sent in the last SAML request :returns: SAML request XML :rtype: string|None """ return self._last_request or None python3-saml-1.16.0/src/onelogin/saml2/authn_request.py000066400000000000000000000143471451074743100230340ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Authn_Request class AuthNRequest class of SAML Python Toolkit. """ from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates class OneLogin_Saml2_Authn_Request(object): """ This class handles an AuthNRequest. It builds an AuthNRequest object. """ def __init__(self, settings, force_authn=False, is_passive=False, set_nameid_policy=True, name_id_value_req=None): """ Constructs the AuthnRequest object. :param settings: OSetting data :type settings: OneLogin_Saml2_Settings :param force_authn: Optional argument. When true the AuthNRequest will set the ForceAuthn='true'. :type force_authn: bool :param is_passive: Optional argument. When true the AuthNRequest will set the Ispassive='true'. :type is_passive: bool :param set_nameid_policy: Optional argument. When true the AuthNRequest will set a nameIdPolicy element. :type set_nameid_policy: bool :param name_id_value_req: Optional argument. Indicates to the IdP the subject that should be authenticated :type name_id_value_req: string """ self._settings = settings sp_data = self._settings.get_sp_data() idp_data = self._settings.get_idp_data() security = self._settings.get_security_data() self._id = self._generate_request_id() issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now()) destination = idp_data['singleSignOnService']['url'] provider_name_str = '' organization_data = settings.get_organization() if isinstance(organization_data, dict) and organization_data: langs = organization_data if 'en-US' in langs: lang = 'en-US' else: lang = sorted(langs)[0] display_name = 'displayname' in organization_data[lang] and organization_data[lang]['displayname'] if display_name: provider_name_str = "\n" + ' ProviderName="%s"' % organization_data[lang]['displayname'] force_authn_str = '' if force_authn is True: force_authn_str = "\n" + ' ForceAuthn="true"' is_passive_str = '' if is_passive is True: is_passive_str = "\n" + ' IsPassive="true"' subject_str = '' if name_id_value_req: subject_str = """ %s """ % (sp_data['NameIDFormat'], name_id_value_req) nameid_policy_str = '' if set_nameid_policy: name_id_policy_format = sp_data['NameIDFormat'] if security['wantNameIdEncrypted']: name_id_policy_format = OneLogin_Saml2_Constants.NAMEID_ENCRYPTED nameid_policy_str = """ """ % name_id_policy_format requested_authn_context_str = '' if security['requestedAuthnContext'] is not False: authn_comparison = security['requestedAuthnContextComparison'] if security['requestedAuthnContext'] is True: requested_authn_context_str = """ urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport """ % authn_comparison else: requested_authn_context_str = ' ' % authn_comparison for authn_context in security['requestedAuthnContext']: requested_authn_context_str += '%s' % authn_context requested_authn_context_str += ' ' attr_consuming_service_str = '' if 'attributeConsumingService' in sp_data and sp_data['attributeConsumingService']: attr_consuming_service_str = "\n AttributeConsumingServiceIndex=\"%s\"" % sp_data['attributeConsumingService'].get('index', '1') request = OneLogin_Saml2_Templates.AUTHN_REQUEST % \ { 'id': self._id, 'provider_name': provider_name_str, 'force_authn_str': force_authn_str, 'is_passive_str': is_passive_str, 'issue_instant': issue_instant, 'destination': destination, 'assertion_url': sp_data['assertionConsumerService']['url'], 'entity_id': sp_data['entityId'], 'subject_str': subject_str, 'nameid_policy_str': nameid_policy_str, 'requested_authn_context_str': requested_authn_context_str, 'attr_consuming_service_str': attr_consuming_service_str, 'acs_binding': sp_data['assertionConsumerService'].get('binding', 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST') } self._authn_request = request def _generate_request_id(self): """ Generate an unique request ID. """ return OneLogin_Saml2_Utils.generate_unique_id() def get_request(self, deflate=True): """ Returns unsigned AuthnRequest. :param deflate: It makes the deflate process optional :type: bool :return: AuthnRequest maybe deflated and base64 encoded :rtype: str object """ if deflate: request = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._authn_request) else: request = OneLogin_Saml2_Utils.b64encode(self._authn_request) return request def get_id(self): """ Returns the AuthNRequest ID. :return: AuthNRequest ID :rtype: string """ return self._id def get_xml(self): """ Returns the XML that will be sent as part of the request :return: XML request body :rtype: string """ return self._authn_request python3-saml-1.16.0/src/onelogin/saml2/compat.py000066400000000000000000000026321451074743100214220ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ py3 compatibility class """ from __future__ import absolute_import, print_function, with_statement try: basestring except NameError: basestring = str try: unicode except NameError: unicode = str if isinstance(b'', type('')): # py 2.x text_types = (basestring,) # noqa bytes_type = bytes str_type = basestring # noqa def utf8(data): """ return utf8-encoded string """ if isinstance(data, basestring): return data.decode("utf8") return unicode(data) def to_string(data): """ return string """ if isinstance(data, unicode): return data.encode("utf8") return str(data) def to_bytes(data): """ return bytes """ if isinstance(data, unicode): return data.encode("utf8") return str(data) else: # py 3.x text_types = (bytes, str) bytes_type = bytes str_type = str def utf8(data): """ return utf8-encoded string """ if isinstance(data, bytes): return data.decode("utf8") return str(data) def to_string(data): """convert to string""" if isinstance(data, bytes): return data.decode("utf8") return str(data) def to_bytes(data): """return bytes""" if isinstance(data, str): return data.encode("utf8") return bytes(data) python3-saml-1.16.0/src/onelogin/saml2/constants.py000066400000000000000000000115761451074743100221620ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Constants class Constants class of SAML Python Toolkit. """ class OneLogin_Saml2_Constants(object): """ This class defines all the constants that will be used in the SAML Python Toolkit. """ # Value added to the current time in time condition validations ALLOWED_CLOCK_DRIFT = 300 # NameID Formats NAMEID_EMAIL_ADDRESS = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' NAMEID_X509_SUBJECT_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName' NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME = 'urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName' NAMEID_UNSPECIFIED = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified' NAMEID_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos' NAMEID_ENTITY = 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity' NAMEID_TRANSIENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' NAMEID_PERSISTENT = 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent' NAMEID_ENCRYPTED = 'urn:oasis:names:tc:SAML:2.0:nameid-format:encrypted' # Attribute Name Formats ATTRNAME_FORMAT_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified' ATTRNAME_FORMAT_URI = 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri' ATTRNAME_FORMAT_BASIC = 'urn:oasis:names:tc:SAML:2.0:attrname-format:basic' # Namespaces NS_SAML = 'urn:oasis:names:tc:SAML:2.0:assertion' NS_SAMLP = 'urn:oasis:names:tc:SAML:2.0:protocol' NS_SOAP = 'http://schemas.xmlsoap.org/soap/envelope/' NS_MD = 'urn:oasis:names:tc:SAML:2.0:metadata' NS_XS = 'http://www.w3.org/2001/XMLSchema' NS_XSI = 'http://www.w3.org/2001/XMLSchema-instance' NS_XENC = 'http://www.w3.org/2001/04/xmlenc#' NS_DS = 'http://www.w3.org/2000/09/xmldsig#' # Namespace Prefixes NS_PREFIX_SAML = 'saml' NS_PREFIX_SAMLP = 'samlp' NS_PREFIX_MD = 'md' NS_PREFIX_XS = 'xs' NS_PREFIX_XSI = 'xsi' NS_PREFIX_XSD = 'xsd' NS_PREFIX_XENC = 'xenc' NS_PREFIX_DS = 'ds' # Prefix:Namespace Mappings NSMAP = { NS_PREFIX_SAMLP: NS_SAMLP, NS_PREFIX_SAML: NS_SAML, NS_PREFIX_DS: NS_DS, NS_PREFIX_XENC: NS_XENC, NS_PREFIX_MD: NS_MD } # Bindings BINDING_HTTP_POST = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' BINDING_HTTP_REDIRECT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' BINDING_HTTP_ARTIFACT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact' BINDING_SOAP = 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP' BINDING_DEFLATE = 'urn:oasis:names:tc:SAML:2.0:bindings:URL-Encoding:DEFLATE' # Auth Context Class AC_UNSPECIFIED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified' AC_PASSWORD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password' AC_PASSWORD_PROTECTED = 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' AC_X509 = 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509' AC_SMARTCARD = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard' AC_KERBEROS = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos' # Subject Confirmation CM_BEARER = 'urn:oasis:names:tc:SAML:2.0:cm:bearer' CM_HOLDER_KEY = 'urn:oasis:names:tc:SAML:2.0:cm:holder-of-key' CM_SENDER_VOUCHES = 'urn:oasis:names:tc:SAML:2.0:cm:sender-vouches' # Status Codes STATUS_SUCCESS = 'urn:oasis:names:tc:SAML:2.0:status:Success' STATUS_REQUESTER = 'urn:oasis:names:tc:SAML:2.0:status:Requester' STATUS_RESPONDER = 'urn:oasis:names:tc:SAML:2.0:status:Responder' STATUS_VERSION_MISMATCH = 'urn:oasis:names:tc:SAML:2.0:status:VersionMismatch' STATUS_NO_PASSIVE = 'urn:oasis:names:tc:SAML:2.0:status:NoPassive' STATUS_PARTIAL_LOGOUT = 'urn:oasis:names:tc:SAML:2.0:status:PartialLogout' STATUS_PROXY_COUNT_EXCEEDED = 'urn:oasis:names:tc:SAML:2.0:status:ProxyCountExceeded' # Sign & Crypto SHA1 = 'http://www.w3.org/2000/09/xmldsig#sha1' SHA256 = 'http://www.w3.org/2001/04/xmlenc#sha256' SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#sha384' SHA512 = 'http://www.w3.org/2001/04/xmlenc#sha512' DSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' RSA_SHA1 = 'http://www.w3.org/2000/09/xmldsig#rsa-sha1' RSA_SHA256 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' RSA_SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384' RSA_SHA512 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512' # Enc TRIPLEDES_CBC = 'http://www.w3.org/2001/04/xmlenc#tripledes-cbc' AES128_CBC = 'http://www.w3.org/2001/04/xmlenc#aes128-cbc' AES192_CBC = 'http://www.w3.org/2001/04/xmlenc#aes192-cbc' AES256_CBC = 'http://www.w3.org/2001/04/xmlenc#aes256-cbc' RSA_1_5 = 'http://www.w3.org/2001/04/xmlenc#rsa-1_5' RSA_OAEP_MGF1P = 'http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p' # Define here the deprecated algorithms DEPRECATED_ALGORITHMS = [DSA_SHA1, RSA_SHA1, SHA1] python3-saml-1.16.0/src/onelogin/saml2/errors.py000066400000000000000000000070461451074743100214570ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Error class Error class of SAML Python Toolkit. Defines common Error codes and has a custom initializator. """ class OneLogin_Saml2_Error(Exception): """ This class implements a custom Exception handler. Defines custom error codes. """ # Errors SETTINGS_FILE_NOT_FOUND = 0 SETTINGS_INVALID_SYNTAX = 1 SETTINGS_INVALID = 2 METADATA_SP_INVALID = 3 # SP_CERTS_NOT_FOUND is deprecated, use CERT_NOT_FOUND instead SP_CERTS_NOT_FOUND = 4 CERT_NOT_FOUND = 4 REDIRECT_INVALID_URL = 5 PUBLIC_CERT_FILE_NOT_FOUND = 6 PRIVATE_KEY_FILE_NOT_FOUND = 7 SAML_RESPONSE_NOT_FOUND = 8 SAML_LOGOUTMESSAGE_NOT_FOUND = 9 SAML_LOGOUTREQUEST_INVALID = 10 SAML_LOGOUTRESPONSE_INVALID = 11 SAML_SINGLE_LOGOUT_NOT_SUPPORTED = 12 PRIVATE_KEY_NOT_FOUND = 13 UNSUPPORTED_SETTINGS_OBJECT = 14 def __init__(self, message, code=0, errors=None): """ Initializes the Exception instance. Arguments are: * (str) message. Describes the error. * (int) code. The code error (defined in the error class). """ assert isinstance(code, int) if errors is not None: message = message % errors Exception.__init__(self, message) self.code = code class OneLogin_Saml2_ValidationError(Exception): """ This class implements another custom Exception handler, related to exceptions that happens during validation process. Defines custom error codes . """ # Validation Errors UNSUPPORTED_SAML_VERSION = 0 MISSING_ID = 1 WRONG_NUMBER_OF_ASSERTIONS = 2 MISSING_STATUS = 3 MISSING_STATUS_CODE = 4 STATUS_CODE_IS_NOT_SUCCESS = 5 WRONG_SIGNED_ELEMENT = 6 ID_NOT_FOUND_IN_SIGNED_ELEMENT = 7 DUPLICATED_ID_IN_SIGNED_ELEMENTS = 8 INVALID_SIGNED_ELEMENT = 9 DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS = 10 UNEXPECTED_SIGNED_ELEMENTS = 11 WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE = 12 WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION = 13 INVALID_XML_FORMAT = 14 WRONG_INRESPONSETO = 15 NO_ENCRYPTED_ASSERTION = 16 NO_ENCRYPTED_NAMEID = 17 MISSING_CONDITIONS = 18 ASSERTION_TOO_EARLY = 19 ASSERTION_EXPIRED = 20 WRONG_NUMBER_OF_AUTHSTATEMENTS = 21 NO_ATTRIBUTESTATEMENT = 22 ENCRYPTED_ATTRIBUTES = 23 WRONG_DESTINATION = 24 EMPTY_DESTINATION = 25 WRONG_AUDIENCE = 26 ISSUER_MULTIPLE_IN_RESPONSE = 27 ISSUER_NOT_FOUND_IN_ASSERTION = 28 WRONG_ISSUER = 29 SESSION_EXPIRED = 30 WRONG_SUBJECTCONFIRMATION = 31 NO_SIGNED_MESSAGE = 32 NO_SIGNED_ASSERTION = 33 NO_SIGNATURE_FOUND = 34 KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA = 35 CHILDREN_NODE_NOT_FOUND_IN_KEYINFO = 36 UNSUPPORTED_RETRIEVAL_METHOD = 37 NO_NAMEID = 38 EMPTY_NAMEID = 39 SP_NAME_QUALIFIER_NAME_MISMATCH = 40 DUPLICATED_ATTRIBUTE_NAME_FOUND = 41 INVALID_SIGNATURE = 42 WRONG_NUMBER_OF_SIGNATURES = 43 RESPONSE_EXPIRED = 44 AUTHN_CONTEXT_MISMATCH = 45 DEPRECATED_SIGNATURE_METHOD = 46 DEPRECATED_DIGEST_METHOD = 47 def __init__(self, message, code=0, errors=None): """ Initializes the Exception instance. Arguments are: * (str) message. Describes the error. * (int) code. The code error (defined in the error class). """ assert isinstance(code, int) if errors is not None: message = message % errors Exception.__init__(self, message) self.code = code python3-saml-1.16.0/src/onelogin/saml2/idp_metadata_parser.py000066400000000000000000000267121451074743100241340ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_IdPMetadataParser class Metadata class of SAML Python Toolkit. """ from copy import deepcopy try: import urllib.request as urllib2 except ImportError: import urllib2 import ssl from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.xml_utils import OneLogin_Saml2_XML class OneLogin_Saml2_IdPMetadataParser(object): """ A class that contain methods related to obtaining and parsing metadata from IdP This class does not validate in any way the URL that is introduced, make sure to validate it properly before use it in a get_metadata method. """ @classmethod def get_metadata(cls, url, validate_cert=True, timeout=None, headers=None): """ Gets the metadata XML from the provided URL :param url: Url where the XML of the Identity Provider Metadata is published. :type url: string :param validate_cert: If the url uses https schema, that flag enables or not the verification of the associated certificate. :type validate_cert: bool :param timeout: Timeout in seconds to wait for metadata response :type timeout: int :param headers: Extra headers to send in the request :type headers: dict :returns: metadata XML :rtype: string """ valid = False request = urllib2.Request(url, headers=headers or {}) if validate_cert: response = urllib2.urlopen(request, timeout=timeout) else: ctx = ssl.create_default_context() ctx.check_hostname = False ctx.verify_mode = ssl.CERT_NONE response = urllib2.urlopen(request, context=ctx, timeout=timeout) xml = response.read() if xml: try: dom = OneLogin_Saml2_XML.to_etree(xml) idp_descriptor_nodes = OneLogin_Saml2_XML.query(dom, '//md:IDPSSODescriptor') if idp_descriptor_nodes: valid = True except Exception: pass if not valid: raise Exception('Not valid IdP XML found from URL: %s' % (url)) return xml @classmethod def parse_remote(cls, url, validate_cert=True, entity_id=None, timeout=None, **kwargs): """ Gets the metadata XML from the provided URL and parse it, returning a dict with extracted data :param url: Url where the XML of the Identity Provider Metadata is published. :type url: string :param validate_cert: If the url uses https schema, that flag enables or not the verification of the associated certificate. :type validate_cert: bool :param entity_id: Specify the entity_id of the EntityDescriptor that you want to parse a XML that contains multiple EntityDescriptor. :type entity_id: string :param timeout: Timeout in seconds to wait for metadata response :type timeout: int :returns: settings dict with extracted data :rtype: dict """ idp_metadata = cls.get_metadata(url, validate_cert, timeout, headers=kwargs.pop('headers', None)) return cls.parse(idp_metadata, entity_id=entity_id, **kwargs) @classmethod def parse( cls, idp_metadata, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT, entity_id=None): """ Parses the Identity Provider metadata and return a dict with extracted data. If there are multiple tags, parse only the first. Parses only those SSO endpoints with the same binding as given by the `required_sso_binding` parameter. Parses only those SLO endpoints with the same binding as given by the `required_slo_binding` parameter. If the metadata specifies multiple SSO endpoints with the required binding, extract only the first (the same holds true for SLO endpoints). :param idp_metadata: XML of the Identity Provider Metadata. :type idp_metadata: string :param required_sso_binding: Parse only POST or REDIRECT SSO endpoints. :type required_sso_binding: one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT or OneLogin_Saml2_Constants.BINDING_HTTP_POST :param required_slo_binding: Parse only POST or REDIRECT SLO endpoints. :type required_slo_binding: one of OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT or OneLogin_Saml2_Constants.BINDING_HTTP_POST :param entity_id: Specify the entity_id of the EntityDescriptor that you want to parse a XML that contains multiple EntityDescriptor. :type entity_id: string :returns: settings dict with extracted data :rtype: dict """ data = {} dom = OneLogin_Saml2_XML.to_etree(idp_metadata) idp_entity_id = want_authn_requests_signed = idp_name_id_format = idp_sso_url = idp_slo_url = certs = None entity_desc_path = '//md:EntityDescriptor' if entity_id: entity_desc_path += "[@entityID='%s']" % entity_id entity_descriptor_nodes = OneLogin_Saml2_XML.query(dom, entity_desc_path) if len(entity_descriptor_nodes) > 0: entity_descriptor_node = entity_descriptor_nodes[0] idp_descriptor_nodes = OneLogin_Saml2_XML.query(entity_descriptor_node, './md:IDPSSODescriptor') if len(idp_descriptor_nodes) > 0: idp_descriptor_node = idp_descriptor_nodes[0] idp_entity_id = entity_descriptor_node.get('entityID', None) want_authn_requests_signed = idp_descriptor_node.get('WantAuthnRequestsSigned', None) name_id_format_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, './md:NameIDFormat') if len(name_id_format_nodes) > 0: idp_name_id_format = OneLogin_Saml2_XML.element_text(name_id_format_nodes[0]) sso_nodes = OneLogin_Saml2_XML.query( idp_descriptor_node, "./md:SingleSignOnService[@Binding='%s']" % required_sso_binding ) if len(sso_nodes) > 0: idp_sso_url = sso_nodes[0].get('Location', None) slo_nodes = OneLogin_Saml2_XML.query( idp_descriptor_node, "./md:SingleLogoutService[@Binding='%s']" % required_slo_binding ) if len(slo_nodes) > 0: idp_slo_url = slo_nodes[0].get('Location', None) signing_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, "./md:KeyDescriptor[not(contains(@use, 'encryption'))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate") encryption_nodes = OneLogin_Saml2_XML.query(idp_descriptor_node, "./md:KeyDescriptor[not(contains(@use, 'signing'))]/ds:KeyInfo/ds:X509Data/ds:X509Certificate") if len(signing_nodes) > 0 or len(encryption_nodes) > 0: certs = {} if len(signing_nodes) > 0: certs['signing'] = [] for cert_node in signing_nodes: certs['signing'].append(''.join(OneLogin_Saml2_XML.element_text(cert_node).split())) if len(encryption_nodes) > 0: certs['encryption'] = [] for cert_node in encryption_nodes: certs['encryption'].append(''.join(OneLogin_Saml2_XML.element_text(cert_node).split())) data['idp'] = {} if idp_entity_id is not None: data['idp']['entityId'] = idp_entity_id if idp_sso_url is not None: data['idp']['singleSignOnService'] = {} data['idp']['singleSignOnService']['url'] = idp_sso_url data['idp']['singleSignOnService']['binding'] = required_sso_binding if idp_slo_url is not None: data['idp']['singleLogoutService'] = {} data['idp']['singleLogoutService']['url'] = idp_slo_url data['idp']['singleLogoutService']['binding'] = required_slo_binding if want_authn_requests_signed is not None: data['security'] = {} data['security']['authnRequestsSigned'] = want_authn_requests_signed == "true" if idp_name_id_format: data['sp'] = {} data['sp']['NameIDFormat'] = idp_name_id_format if certs is not None: if (len(certs) == 1 and (('signing' in certs and len(certs['signing']) == 1) or ('encryption' in certs and len(certs['encryption']) == 1))) or \ (('signing' in certs and len(certs['signing']) == 1) and ('encryption' in certs and len(certs['encryption']) == 1 and certs['signing'][0] == certs['encryption'][0])): if 'signing' in certs: data['idp']['x509cert'] = certs['signing'][0] else: data['idp']['x509cert'] = certs['encryption'][0] else: data['idp']['x509certMulti'] = certs return data @staticmethod def merge_settings(settings, new_metadata_settings): """ Will update the settings with the provided new settings data extracted from the IdP metadata :param settings: Current settings dict data :type settings: dict :param new_metadata_settings: Settings to be merged (extracted from IdP metadata after parsing) :type new_metadata_settings: dict :returns: merged settings :rtype: dict """ for d in (settings, new_metadata_settings): if not isinstance(d, dict): raise TypeError('Both arguments must be dictionaries.') # Guarantee to not modify original data (`settings.copy()` would not # be sufficient, as it's just a shallow copy). result_settings = deepcopy(settings) # previously I will take care of cert stuff if 'idp' in new_metadata_settings and 'idp' in result_settings: if new_metadata_settings['idp'].get('x509cert', None) and result_settings['idp'].get('x509certMulti', None): del result_settings['idp']['x509certMulti'] if new_metadata_settings['idp'].get('x509certMulti', None) and result_settings['idp'].get('x509cert', None): del result_settings['idp']['x509cert'] # Merge `new_metadata_settings` into `result_settings`. dict_deep_merge(result_settings, new_metadata_settings) return result_settings def dict_deep_merge(a, b, path=None): """Deep-merge dictionary `b` into dictionary `a`. Kudos to http://stackoverflow.com/a/7205107/145400 """ if path is None: path = [] for key in b: if key in a: if isinstance(a[key], dict) and isinstance(b[key], dict): dict_deep_merge(a[key], b[key], path + [str(key)]) elif a[key] == b[key]: # Key conflict, but equal value. pass else: # Key/value conflict. Prioritize b over a. a[key] = b[key] else: a[key] = b[key] return a python3-saml-1.16.0/src/onelogin/saml2/logout_request.py000066400000000000000000000324611451074743100232230ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Logout_Request class Logout Request class of SAML Python Toolkit. """ from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates from onelogin.saml2.xml_utils import OneLogin_Saml2_XML class OneLogin_Saml2_Logout_Request(object): """ This class handles a Logout Request. Builds a Logout Response object and validates it. """ def __init__(self, settings, request=None, name_id=None, session_index=None, nq=None, name_id_format=None, spnq=None): """ Constructs the Logout Request object. :param settings: Setting data :type settings: OneLogin_Saml2_Settings :param request: Optional. A LogoutRequest to be loaded instead build one. :type request: string :param name_id: The NameID that will be set in the LogoutRequest. :type name_id: string :param session_index: SessionIndex that identifies the session of the user. :type session_index: string :param nq: IDP Name Qualifier :type: string :param name_id_format: The NameID Format that will be set in the LogoutRequest. :type: string :param spnq: SP Name Qualifier :type: string """ self._settings = settings self._error = None self.id = None if request is None: sp_data = self._settings.get_sp_data() idp_data = self._settings.get_idp_data() security = self._settings.get_security_data() self.id = self._generate_request_id() issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now()) cert = None if security['nameIdEncrypted']: exists_multix509enc = 'x509certMulti' in idp_data and \ 'encryption' in idp_data['x509certMulti'] and \ idp_data['x509certMulti']['encryption'] if exists_multix509enc: cert = idp_data['x509certMulti']['encryption'][0] else: cert = self._settings.get_idp_cert() if name_id is not None: if not name_id_format and sp_data['NameIDFormat'] != OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED: name_id_format = sp_data['NameIDFormat'] else: name_id = idp_data['entityId'] name_id_format = OneLogin_Saml2_Constants.NAMEID_ENTITY # From saml-core-2.0-os 8.3.6, when the entity Format is used: # "The NameQualifier, SPNameQualifier, and SPProvidedID attributes # MUST be omitted. if name_id_format and name_id_format == OneLogin_Saml2_Constants.NAMEID_ENTITY: nq = None spnq = None # NameID Format UNSPECIFIED omitted if name_id_format and name_id_format == OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED: name_id_format = None name_id_obj = OneLogin_Saml2_Utils.generate_name_id( name_id, spnq, name_id_format, cert, False, nq ) if session_index: session_index_str = '%s' % session_index else: session_index_str = '' logout_request = OneLogin_Saml2_Templates.LOGOUT_REQUEST % \ { 'id': self.id, 'issue_instant': issue_instant, 'single_logout_url': self._settings.get_idp_slo_url(), 'entity_id': sp_data['entityId'], 'name_id': name_id_obj, 'session_index': session_index_str, } else: logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(request, ignore_zip=True) self.id = self.get_id(logout_request) self._logout_request = compat.to_string(logout_request) def get_request(self, deflate=True): """ Returns the Logout Request deflated, base64encoded :param deflate: It makes the deflate process optional :type: bool :return: Logout Request maybe deflated and base64 encoded :rtype: str object """ if deflate: request = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._logout_request) else: request = OneLogin_Saml2_Utils.b64encode(self._logout_request) return request def get_xml(self): """ Returns the XML that will be sent as part of the request or that was received at the SP :return: XML request body :rtype: string """ return self._logout_request @classmethod def get_id(cls, request): """ Returns the ID of the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :return: string ID :rtype: str object """ elem = OneLogin_Saml2_XML.to_etree(request) return elem.get('ID', None) @classmethod def get_nameid_data(cls, request, key=None): """ Gets the NameID Data of the the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Data (Value, Format, NameQualifier, SPNameQualifier) :rtype: dict """ elem = OneLogin_Saml2_XML.to_etree(request) name_id = None encrypted_entries = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:EncryptedID') if len(encrypted_entries) == 1: if key is None: raise OneLogin_Saml2_Error( 'Private Key is required in order to decrypt the NameID, check settings', OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND ) encrypted_data_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:EncryptedID/xenc:EncryptedData') if len(encrypted_data_nodes) == 1: encrypted_data = encrypted_data_nodes[0] name_id = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key) else: entries = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:NameID') if len(entries) == 1: name_id = entries[0] if name_id is None: raise OneLogin_Saml2_ValidationError( 'NameID not found in the Logout Request', OneLogin_Saml2_ValidationError.NO_NAMEID ) name_id_data = { 'Value': OneLogin_Saml2_XML.element_text(name_id) } for attr in ['Format', 'SPNameQualifier', 'NameQualifier']: if attr in name_id.attrib: name_id_data[attr] = name_id.attrib[attr] return name_id_data @classmethod def get_nameid(cls, request, key=None): """ Gets the NameID of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Value :rtype: string """ name_id = cls.get_nameid_data(request, key) return name_id['Value'] @classmethod def get_nameid_format(cls, request, key=None): """ Gets the NameID Format of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :param key: The SP key :type key: string :return: Name ID Format :rtype: string """ name_id_format = None name_id_data = cls.get_nameid_data(request, key) if name_id_data and 'Format' in name_id_data.keys(): name_id_format = name_id_data['Format'] return name_id_format @classmethod def get_issuer(cls, request): """ Gets the Issuer of the Logout Request Message :param request: Logout Request Message :type request: string|DOMDocument :return: The Issuer :rtype: string """ elem = OneLogin_Saml2_XML.to_etree(request) issuer = None issuer_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/saml:Issuer') if len(issuer_nodes) == 1: issuer = OneLogin_Saml2_XML.element_text(issuer_nodes[0]) return issuer @classmethod def get_session_indexes(cls, request): """ Gets the SessionIndexes from the Logout Request :param request: Logout Request Message :type request: string|DOMDocument :return: The SessionIndex value :rtype: list """ elem = OneLogin_Saml2_XML.to_etree(request) session_indexes = [] session_index_nodes = OneLogin_Saml2_XML.query(elem, '/samlp:LogoutRequest/samlp:SessionIndex') for session_index_node in session_index_nodes: session_indexes.append(OneLogin_Saml2_XML.element_text(session_index_node)) return session_indexes def is_valid(self, request_data, raise_exceptions=False): """ Checks if the Logout Request received is valid :param request_data: Request Data :type request_data: dict :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean :return: If the Logout Request is or not valid :rtype: boolean """ self._error = None try: root = OneLogin_Saml2_XML.to_etree(self._logout_request) idp_data = self._settings.get_idp_data() idp_entity_id = idp_data['entityId'] get_data = ('get_data' in request_data and request_data['get_data']) or dict() if self._settings.is_strict(): res = OneLogin_Saml2_XML.validate_xml(root, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active()) if isinstance(res, str): raise OneLogin_Saml2_ValidationError( 'Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd', OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT ) security = self._settings.get_security_data() current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) # Check NotOnOrAfter if root.get('NotOnOrAfter', None): na = OneLogin_Saml2_Utils.parse_SAML_to_time(root.get('NotOnOrAfter')) if na <= OneLogin_Saml2_Utils.now(): raise OneLogin_Saml2_ValidationError( 'Could not validate timestamp: expired. Check system clock.)', OneLogin_Saml2_ValidationError.RESPONSE_EXPIRED ) # Check destination destination = root.get('Destination', None) if destination: if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)): raise OneLogin_Saml2_ValidationError( 'The LogoutRequest was received at ' '%(currentURL)s instead of %(destination)s' % { 'currentURL': current_url, 'destination': destination, }, OneLogin_Saml2_ValidationError.WRONG_DESTINATION ) # Check issuer issuer = self.get_issuer(root) if issuer is not None and issuer != idp_entity_id: raise OneLogin_Saml2_ValidationError( 'Invalid issuer in the Logout Request (expected %(idpEntityId)s, got %(issuer)s)' % { 'idpEntityId': idp_entity_id, 'issuer': issuer }, OneLogin_Saml2_ValidationError.WRONG_ISSUER ) if security['wantMessagesSigned']: if 'Signature' not in get_data: raise OneLogin_Saml2_ValidationError( 'The Message of the Logout Request is not signed and the SP require it', OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE ) return True except Exception as err: # pylint: disable=R0801 self._error = str(err) debug = self._settings.is_debug_active() if debug: print(err) if raise_exceptions: raise return False def get_error(self): """ After executing a validation process, if it fails this method returns the cause """ return self._error def _generate_request_id(self): """ Generate an unique logout request ID. """ return OneLogin_Saml2_Utils.generate_unique_id() python3-saml-1.16.0/src/onelogin/saml2/logout_response.py000066400000000000000000000204211451074743100233620ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Logout_Response class Logout Response class of SAML Python Toolkit. """ from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_ValidationError from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates from onelogin.saml2.xml_utils import OneLogin_Saml2_XML class OneLogin_Saml2_Logout_Response(object): """ This class handles a Logout Response. It Builds or parses a Logout Response object and validates it. """ def __init__(self, settings, response=None): """ Constructs a Logout Response object (Initialize params from settings and if provided load the Logout Response. Arguments are: * (OneLogin_Saml2_Settings) settings. Setting data * (string) response. An UUEncoded SAML Logout response from the IdP. """ self._settings = settings self._error = None self.id = None if response is not None: self._logout_response = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(response, ignore_zip=True)) self.document = OneLogin_Saml2_XML.to_etree(self._logout_response) self.id = self.document.get('ID', None) def get_issuer(self): """ Gets the Issuer of the Logout Response Message :return: The Issuer :rtype: string """ issuer = None issuer_nodes = self._query('/samlp:LogoutResponse/saml:Issuer') if len(issuer_nodes) == 1: issuer = OneLogin_Saml2_XML.element_text(issuer_nodes[0]) return issuer def get_status(self): """ Gets the Status :return: The Status :rtype: string """ entries = self._query('/samlp:LogoutResponse/samlp:Status/samlp:StatusCode') if len(entries) == 0: return None status = entries[0].attrib['Value'] return status def is_valid(self, request_data, request_id=None, raise_exceptions=False): """ Determines if the SAML LogoutResponse is valid :param request_id: The ID of the LogoutRequest sent by this SP to the IdP :type request_id: string :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean :return: Returns if the SAML LogoutResponse is or not valid :rtype: boolean """ self._error = None try: idp_data = self._settings.get_idp_data() idp_entity_id = idp_data['entityId'] get_data = request_data['get_data'] if self._settings.is_strict(): res = OneLogin_Saml2_XML.validate_xml(self.document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active()) if isinstance(res, str): raise OneLogin_Saml2_ValidationError( 'Invalid SAML Logout Request. Not match the saml-schema-protocol-2.0.xsd', OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT ) security = self._settings.get_security_data() # Check if the InResponseTo of the Logout Response matches the ID of the Logout Request (requestId) if provided in_response_to = self.get_in_response_to() if request_id is not None and in_response_to and in_response_to != request_id: raise OneLogin_Saml2_ValidationError( 'The InResponseTo of the Logout Response: %s, does not match the ID of the Logout request sent by the SP: %s' % (in_response_to, request_id), OneLogin_Saml2_ValidationError.WRONG_INRESPONSETO ) # Check issuer issuer = self.get_issuer() if issuer is not None and issuer != idp_entity_id: raise OneLogin_Saml2_ValidationError( 'Invalid issuer in the Logout Response (expected %(idpEntityId)s, got %(issuer)s)' % { 'idpEntityId': idp_entity_id, 'issuer': issuer }, OneLogin_Saml2_ValidationError.WRONG_ISSUER ) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) # Check destination destination = self.document.get('Destination', None) if destination: if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)): raise OneLogin_Saml2_ValidationError( 'The LogoutResponse was received at %s instead of %s' % (current_url, destination), OneLogin_Saml2_ValidationError.WRONG_DESTINATION ) if security['wantMessagesSigned']: if 'Signature' not in get_data: raise OneLogin_Saml2_ValidationError( 'The Message of the Logout Response is not signed and the SP require it', OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE ) return True # pylint: disable=R0801 except Exception as err: self._error = str(err) debug = self._settings.is_debug_active() if debug: print(err) if raise_exceptions: raise return False def _query(self, query): """ Extracts a node from the Etree (Logout Response Message) :param query: Xpath Expression :type query: string :return: The queried node :rtype: Element """ return OneLogin_Saml2_XML.query(self.document, query) def build(self, in_response_to, status=OneLogin_Saml2_Constants.STATUS_SUCCESS): """ Creates a Logout Response object. :param in_response_to: InResponseTo value for the Logout Response. :type in_response_to: string :param: status: The status of the response :type: status: string """ sp_data = self._settings.get_sp_data() self.id = self._generate_request_id() issue_instant = OneLogin_Saml2_Utils.parse_time_to_SAML(OneLogin_Saml2_Utils.now()) logout_response = OneLogin_Saml2_Templates.LOGOUT_RESPONSE % { "id": self.id, "issue_instant": issue_instant, "destination": self._settings.get_idp_slo_response_url(), "in_response_to": in_response_to, "entity_id": sp_data["entityId"], "status": status, } self._logout_response = logout_response def get_in_response_to(self): """ Gets the ID of the LogoutRequest which this response is in response to :returns: ID of LogoutRequest this LogoutResponse is in response to or None if it is not present :rtype: str """ return self.document.get('InResponseTo') def get_response(self, deflate=True): """ Returns a Logout Response object. :param deflate: It makes the deflate process optional :type: bool :return: Logout Response maybe deflated and base64 encoded :rtype: string """ if deflate: response = OneLogin_Saml2_Utils.deflate_and_base64_encode(self._logout_response) else: response = OneLogin_Saml2_Utils.b64encode(self._logout_response) return response def get_error(self): """ After executing a validation process, if it fails this method returns the cause """ return self._error def get_xml(self): """ Returns the XML that will be sent as part of the response or that was received at the SP :return: XML response body :rtype: string """ return self._logout_response def _generate_request_id(self): """ Generate an unique logout response ID. """ return OneLogin_Saml2_Utils.generate_unique_id() python3-saml-1.16.0/src/onelogin/saml2/metadata.py000066400000000000000000000260461451074743100217240ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLoginSaml2Metadata class Metadata class of SAML Python Toolkit. """ from time import gmtime, strftime, time from datetime import datetime from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xml_templates import OneLogin_Saml2_Templates from onelogin.saml2.xml_utils import OneLogin_Saml2_XML try: basestring except NameError: basestring = str class OneLogin_Saml2_Metadata(object): """ A class that contains methods related to the metadata of the SP """ TIME_VALID = 172800 # 2 days TIME_CACHED = 604800 # 1 week @classmethod def builder(cls, sp, authnsign=False, wsign=False, valid_until=None, cache_duration=None, contacts=None, organization=None): """ Builds the metadata of the SP :param sp: The SP data :type sp: string :param authnsign: authnRequestsSigned attribute :type authnsign: string :param wsign: wantAssertionsSigned attribute :type wsign: string :param valid_until: Metadata's expiry date :type valid_until: string|DateTime|Timestamp :param cache_duration: Duration of the cache in seconds :type cache_duration: int|string :param contacts: Contacts info :type contacts: dict :param organization: Organization info :type organization: dict """ if valid_until is None: valid_until = int(time()) + cls.TIME_VALID if not isinstance(valid_until, basestring): if isinstance(valid_until, datetime): valid_until_time = valid_until.timetuple() else: valid_until_time = gmtime(valid_until) valid_until_str = strftime(r'%Y-%m-%dT%H:%M:%SZ', valid_until_time) else: valid_until_str = valid_until if cache_duration is None: cache_duration = cls.TIME_CACHED if not isinstance(cache_duration, compat.str_type): cache_duration_str = 'PT%sS' % cache_duration # Period of Time x Seconds else: cache_duration_str = cache_duration if contacts is None: contacts = {} if organization is None: organization = {} sls = '' if 'singleLogoutService' in sp and 'url' in sp['singleLogoutService']: sls = OneLogin_Saml2_Templates.MD_SLS % \ { 'binding': sp['singleLogoutService']['binding'], 'location': sp['singleLogoutService']['url'], } str_authnsign = 'true' if authnsign else 'false' str_wsign = 'true' if wsign else 'false' str_organization = '' if len(organization) > 0: organization_names = [] organization_displaynames = [] organization_urls = [] for (lang, info) in organization.items(): organization_names.append(""" %s""" % (lang, info['name'])) organization_displaynames.append(""" %s""" % (lang, info['displayname'])) organization_urls.append(""" %s""" % (lang, info['url'])) org_data = '\n'.join(organization_names) + '\n' + '\n'.join(organization_displaynames) + '\n' + '\n'.join(organization_urls) str_organization = """ \n%(org)s\n """ % {'org': org_data} str_contacts = '' if len(contacts) > 0: contacts_info = [] for (ctype, info) in contacts.items(): contact = OneLogin_Saml2_Templates.MD_CONTACT_PERSON % \ { 'type': ctype, 'name': info['givenName'], 'email': info['emailAddress'], } contacts_info.append(contact) str_contacts = '\n'.join(contacts_info) str_attribute_consuming_service = '' if 'attributeConsumingService' in sp and len(sp['attributeConsumingService']): attr_cs_desc_str = '' if "serviceDescription" in sp['attributeConsumingService']: attr_cs_desc_str = """ %s """ % sp['attributeConsumingService']['serviceDescription'] requested_attribute_data = [] for req_attribs in sp['attributeConsumingService']['requestedAttributes']: req_attr_nameformat_str = req_attr_friendlyname_str = req_attr_isrequired_str = '' req_attr_aux_str = ' />' if 'nameFormat' in req_attribs.keys() and req_attribs['nameFormat']: req_attr_nameformat_str = " NameFormat=\"%s\"" % req_attribs['nameFormat'] if 'friendlyName' in req_attribs.keys() and req_attribs['friendlyName']: req_attr_friendlyname_str = " FriendlyName=\"%s\"" % req_attribs['friendlyName'] if 'isRequired' in req_attribs.keys() and req_attribs['isRequired']: req_attr_isrequired_str = " isRequired=\"%s\"" % 'true' if req_attribs['isRequired'] else 'false' if 'attributeValue' in req_attribs.keys() and req_attribs['attributeValue']: if isinstance(req_attribs['attributeValue'], basestring): req_attribs['attributeValue'] = [req_attribs['attributeValue']] req_attr_aux_str = ">" for attrValue in req_attribs['attributeValue']: req_attr_aux_str += """ %(attributeValue)s""" % \ { 'attributeValue': attrValue } req_attr_aux_str += """ """ requested_attribute = """ %(service_name)s %(attr_cs_desc)s%(requested_attribute_str)s """ % \ { 'service_name': sp['attributeConsumingService']['serviceName'], 'attr_cs_desc': attr_cs_desc_str, 'attribute_consuming_service_index': sp['attributeConsumingService'].get('index', '1'), 'requested_attribute_str': '\n'.join(requested_attribute_data) } metadata = OneLogin_Saml2_Templates.MD_ENTITY_DESCRIPTOR % \ { 'valid': ('validUntil="%s"' % valid_until_str) if valid_until_str else '', 'cache': ('cacheDuration="%s"' % cache_duration_str) if cache_duration_str else '', 'entity_id': sp['entityId'], 'authnsign': str_authnsign, 'wsign': str_wsign, 'name_id_format': sp['NameIDFormat'], 'binding': sp['assertionConsumerService']['binding'], 'location': sp['assertionConsumerService']['url'], 'sls': sls, 'organization': str_organization, 'contacts': str_contacts, 'attribute_consuming_service': str_attribute_consuming_service } return metadata @staticmethod def sign_metadata(metadata, key, cert, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256, digest_algorithm=OneLogin_Saml2_Constants.SHA256): """ Signs the metadata with the key/cert provided :param metadata: SAML Metadata XML :type metadata: string :param key: x509 key :type key: string :param cert: x509 cert :type cert: string :returns: Signed Metadata :rtype: string :param sign_algorithm: Signature algorithm method :type sign_algorithm: string :param digest_algorithm: Digest algorithm method :type digest_algorithm: string """ return OneLogin_Saml2_Utils.add_sign(metadata, key, cert, False, sign_algorithm, digest_algorithm) @staticmethod def _add_x509_key_descriptors(root, cert, signing): key_descriptor = OneLogin_Saml2_XML.make_child(root, '{%s}KeyDescriptor' % OneLogin_Saml2_Constants.NS_MD) root.remove(key_descriptor) root.insert(0, key_descriptor) key_info = OneLogin_Saml2_XML.make_child(key_descriptor, '{%s}KeyInfo' % OneLogin_Saml2_Constants.NS_DS) key_data = OneLogin_Saml2_XML.make_child(key_info, '{%s}X509Data' % OneLogin_Saml2_Constants.NS_DS) x509_certificate = OneLogin_Saml2_XML.make_child(key_data, '{%s}X509Certificate' % OneLogin_Saml2_Constants.NS_DS) x509_certificate.text = OneLogin_Saml2_Utils.format_cert(cert, False) key_descriptor.set('use', ('encryption', 'signing')[signing]) @classmethod def add_x509_key_descriptors(cls, metadata, cert=None, add_encryption=True): """ Adds the x509 descriptors (sign/encryption) to the metadata The same cert will be used for sign/encrypt :param metadata: SAML Metadata XML :type metadata: string :param cert: x509 cert :type cert: string :param add_encryption: Determines if the KeyDescriptor[use="encryption"] should be added. :type add_encryption: boolean :returns: Metadata with KeyDescriptors :rtype: string """ if cert is None or cert == '': return metadata try: root = OneLogin_Saml2_XML.to_etree(metadata) except Exception as e: raise Exception('Error parsing metadata. ' + str(e)) assert root.tag == '{%s}EntityDescriptor' % OneLogin_Saml2_Constants.NS_MD try: sp_sso_descriptor = next(root.iterfind('.//md:SPSSODescriptor', namespaces=OneLogin_Saml2_Constants.NSMAP)) except StopIteration: raise Exception('Malformed metadata.') if add_encryption: cls._add_x509_key_descriptors(sp_sso_descriptor, cert, False) cls._add_x509_key_descriptors(sp_sso_descriptor, cert, True) return OneLogin_Saml2_XML.to_string(root) python3-saml-1.16.0/src/onelogin/saml2/response.py000066400000000000000000001240541451074743100220000ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Response class SAML Response class of SAML Python Toolkit. """ from copy import deepcopy from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError, return_false_on_exception from onelogin.saml2.xml_utils import OneLogin_Saml2_XML class OneLogin_Saml2_Response(object): """ This class handles a SAML Response. It parses or validates a Logout Response object. """ def __init__(self, settings, response): """ Constructs the response object. :param settings: The setting info :type settings: OneLogin_Saml2_Setting object :param response: The base64 encoded, XML string containing the samlp:Response :type response: string """ self._settings = settings self._error = None self.response = OneLogin_Saml2_Utils.b64decode(response) self.document = OneLogin_Saml2_XML.to_etree(self.response) self.decrypted_document = None self.encrypted = None self.valid_scd_not_on_or_after = None # Quick check for the presence of EncryptedAssertion encrypted_assertion_nodes = self._query('/samlp:Response/saml:EncryptedAssertion') if encrypted_assertion_nodes: decrypted_document = deepcopy(self.document) self.encrypted = True self.decrypted_document = self._decrypt_assertion(decrypted_document) def is_valid(self, request_data, request_id=None, raise_exceptions=False): """ Validates the response object. :param request_data: Request Data :type request_data: dict :param request_id: Optional argument. The ID of the AuthNRequest sent by this SP to the IdP :type request_id: string :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean :returns: True if the SAML Response is valid, False if not :rtype: bool """ self._error = None try: # Checks SAML version if self.document.get('Version', None) != '2.0': raise OneLogin_Saml2_ValidationError( 'Unsupported SAML version', OneLogin_Saml2_ValidationError.UNSUPPORTED_SAML_VERSION ) # Checks that ID exists if self.document.get('ID', None) is None: raise OneLogin_Saml2_ValidationError( 'Missing ID attribute on SAML Response', OneLogin_Saml2_ValidationError.MISSING_ID ) # Checks that the response has the SUCCESS status self.check_status() # Checks that the response only has one assertion if not self.validate_num_assertions(): raise OneLogin_Saml2_ValidationError( 'SAML Response must contain 1 assertion', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS ) idp_data = self._settings.get_idp_data() idp_entity_id = idp_data['entityId'] sp_data = self._settings.get_sp_data() sp_entity_id = sp_data['entityId'] signed_elements = self.process_signed_elements() has_signed_response = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP in signed_elements has_signed_assertion = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML in signed_elements if self._settings.is_strict(): no_valid_xml_msg = 'Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd' res = OneLogin_Saml2_XML.validate_xml(self.document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active()) if isinstance(res, str): raise OneLogin_Saml2_ValidationError( no_valid_xml_msg, OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT ) # If encrypted, check also the decrypted document if self.encrypted: res = OneLogin_Saml2_XML.validate_xml(self.decrypted_document, 'saml-schema-protocol-2.0.xsd', self._settings.is_debug_active()) if isinstance(res, str): raise OneLogin_Saml2_ValidationError( no_valid_xml_msg, OneLogin_Saml2_ValidationError.INVALID_XML_FORMAT ) security = self._settings.get_security_data() current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) # Check if the InResponseTo of the Response matchs the ID of the AuthNRequest (requestId) if provided in_response_to = self.get_in_response_to() if in_response_to is not None and request_id is not None: if in_response_to != request_id: raise OneLogin_Saml2_ValidationError( 'The InResponseTo of the Response: %s, does not match the ID of the AuthNRequest sent by the SP: %s' % (in_response_to, request_id), OneLogin_Saml2_ValidationError.WRONG_INRESPONSETO ) if not self.encrypted and security['wantAssertionsEncrypted']: raise OneLogin_Saml2_ValidationError( 'The assertion of the Response is not encrypted and the SP require it', OneLogin_Saml2_ValidationError.NO_ENCRYPTED_ASSERTION ) if security['wantNameIdEncrypted']: encrypted_nameid_nodes = self._query_assertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData') if len(encrypted_nameid_nodes) != 1: raise OneLogin_Saml2_ValidationError( 'The NameID of the Response is not encrypted and the SP require it', OneLogin_Saml2_ValidationError.NO_ENCRYPTED_NAMEID ) # Checks that a Conditions element exists if not self.check_one_condition(): raise OneLogin_Saml2_ValidationError( 'The Assertion must include a Conditions element', OneLogin_Saml2_ValidationError.MISSING_CONDITIONS ) # Validates Assertion timestamps self.validate_timestamps(raise_exceptions=True) # Checks that an AuthnStatement element exists and is unique if not self.check_one_authnstatement(): raise OneLogin_Saml2_ValidationError( 'The Assertion must include an AuthnStatement element', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_AUTHSTATEMENTS ) # Checks that the response has all of the AuthnContexts that we provided in the request. # Only check if failOnAuthnContextMismatch is true and requestedAuthnContext is set to a list. requested_authn_contexts = security['requestedAuthnContext'] if security['failOnAuthnContextMismatch'] and requested_authn_contexts and requested_authn_contexts is not True: authn_contexts = self.get_authn_contexts() unmatched_contexts = set(authn_contexts).difference(requested_authn_contexts) if unmatched_contexts: raise OneLogin_Saml2_ValidationError( 'The AuthnContext "%s" was not a requested context "%s"' % (', '.join(unmatched_contexts), ', '.join(requested_authn_contexts)), OneLogin_Saml2_ValidationError.AUTHN_CONTEXT_MISMATCH ) # Checks that there is at least one AttributeStatement if required attribute_statement_nodes = self._query_assertion('/saml:AttributeStatement') if security.get('wantAttributeStatement', True) and not attribute_statement_nodes: raise OneLogin_Saml2_ValidationError( 'There is no AttributeStatement on the Response', OneLogin_Saml2_ValidationError.NO_ATTRIBUTESTATEMENT ) encrypted_attributes_nodes = self._query_assertion('/saml:AttributeStatement/saml:EncryptedAttribute') if encrypted_attributes_nodes: raise OneLogin_Saml2_ValidationError( 'There is an EncryptedAttribute in the Response and this SP not support them', OneLogin_Saml2_ValidationError.ENCRYPTED_ATTRIBUTES ) # Checks destination destination = self.document.get('Destination', None) if destination: if not OneLogin_Saml2_Utils.normalize_url(url=destination).startswith(OneLogin_Saml2_Utils.normalize_url(url=current_url)): # TODO: Review if following lines are required, since we can control the # request_data # current_url_routed = OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data) # if not destination.startswith(current_url_routed): raise OneLogin_Saml2_ValidationError( 'The response was received at %s instead of %s' % (current_url, destination), OneLogin_Saml2_ValidationError.WRONG_DESTINATION ) elif destination == '': raise OneLogin_Saml2_ValidationError( 'The response has an empty Destination value', OneLogin_Saml2_ValidationError.EMPTY_DESTINATION ) # Checks audience valid_audiences = self.get_audiences() if valid_audiences and sp_entity_id not in valid_audiences: raise OneLogin_Saml2_ValidationError( '%s is not a valid audience for this Response' % sp_entity_id, OneLogin_Saml2_ValidationError.WRONG_AUDIENCE ) # Checks the issuers issuers = self.get_issuers() for issuer in issuers: if issuer is None or issuer != idp_entity_id: raise OneLogin_Saml2_ValidationError( 'Invalid issuer in the Assertion/Response (expected %(idpEntityId)s, got %(issuer)s)' % { 'idpEntityId': idp_entity_id, 'issuer': issuer }, OneLogin_Saml2_ValidationError.WRONG_ISSUER ) # Checks the session Expiration session_expiration = self.get_session_not_on_or_after() if session_expiration and session_expiration <= OneLogin_Saml2_Utils.now(): raise OneLogin_Saml2_ValidationError( 'The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response', OneLogin_Saml2_ValidationError.SESSION_EXPIRED ) # Checks the SubjectConfirmation, at least one SubjectConfirmation must be valid any_subject_confirmation = False subject_confirmation_nodes = self._query_assertion('/saml:Subject/saml:SubjectConfirmation') for scn in subject_confirmation_nodes: method = scn.get('Method', None) if method and method != OneLogin_Saml2_Constants.CM_BEARER: continue sc_data = scn.find('saml:SubjectConfirmationData', namespaces=OneLogin_Saml2_Constants.NSMAP) if sc_data is None: continue else: irt = sc_data.get('InResponseTo', None) if in_response_to and irt and irt != in_response_to: continue recipient = sc_data.get('Recipient', None) if recipient and current_url not in recipient: continue nooa = sc_data.get('NotOnOrAfter', None) if nooa: parsed_nooa = OneLogin_Saml2_Utils.parse_SAML_to_time(nooa) if parsed_nooa <= OneLogin_Saml2_Utils.now(): continue nb = sc_data.get('NotBefore', None) if nb: parsed_nb = OneLogin_Saml2_Utils.parse_SAML_to_time(nb) if parsed_nb > OneLogin_Saml2_Utils.now(): continue if nooa: self.valid_scd_not_on_or_after = OneLogin_Saml2_Utils.parse_SAML_to_time(nooa) any_subject_confirmation = True break if not any_subject_confirmation: raise OneLogin_Saml2_ValidationError( 'A valid SubjectConfirmation was not found on this Response', OneLogin_Saml2_ValidationError.WRONG_SUBJECTCONFIRMATION ) if security['wantAssertionsSigned'] and not has_signed_assertion: raise OneLogin_Saml2_ValidationError( 'The Assertion of the Response is not signed and the SP require it', OneLogin_Saml2_ValidationError.NO_SIGNED_ASSERTION ) if security['wantMessagesSigned'] and not has_signed_response: raise OneLogin_Saml2_ValidationError( 'The Message of the Response is not signed and the SP require it', OneLogin_Saml2_ValidationError.NO_SIGNED_MESSAGE ) if not signed_elements or (not has_signed_response and not has_signed_assertion): raise OneLogin_Saml2_ValidationError( 'No Signature found. SAML Response rejected', OneLogin_Saml2_ValidationError.NO_SIGNATURE_FOUND ) else: cert = self._settings.get_idp_cert() fingerprint = idp_data.get('certFingerprint', None) if fingerprint: fingerprint = OneLogin_Saml2_Utils.format_finger_print(fingerprint) fingerprintalg = idp_data.get('certFingerprintAlgorithm', None) multicerts = None if 'x509certMulti' in idp_data and 'signing' in idp_data['x509certMulti'] and idp_data['x509certMulti']['signing']: multicerts = idp_data['x509certMulti']['signing'] # If find a Signature on the Response, validates it checking the original response if has_signed_response and not OneLogin_Saml2_Utils.validate_sign(self.document, cert, fingerprint, fingerprintalg, xpath=OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH, multicerts=multicerts, raise_exceptions=False): raise OneLogin_Saml2_ValidationError( 'Signature validation failed. SAML Response rejected', OneLogin_Saml2_ValidationError.INVALID_SIGNATURE ) document_check_assertion = self.decrypted_document if self.encrypted else self.document if has_signed_assertion and not OneLogin_Saml2_Utils.validate_sign(document_check_assertion, cert, fingerprint, fingerprintalg, xpath=OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH, multicerts=multicerts, raise_exceptions=False): raise OneLogin_Saml2_ValidationError( 'Signature validation failed. SAML Response rejected', OneLogin_Saml2_ValidationError.INVALID_SIGNATURE ) return True except Exception as err: self._error = str(err) debug = self._settings.is_debug_active() if debug: print(err) if raise_exceptions: raise return False def check_status(self): """ Check if the status of the response is success or not :raises: Exception. If the status is not success """ status = OneLogin_Saml2_Utils.get_status(self.document) code = status.get('code', None) if code and code != OneLogin_Saml2_Constants.STATUS_SUCCESS: splited_code = code.split(':') printable_code = splited_code.pop() status_exception_msg = 'The status code of the Response was not Success, was %s' % printable_code status_msg = status.get('msg', None) if status_msg: status_exception_msg += ' -> ' + status_msg raise OneLogin_Saml2_ValidationError( status_exception_msg, OneLogin_Saml2_ValidationError.STATUS_CODE_IS_NOT_SUCCESS ) def check_one_condition(self): """ Checks that the samlp:Response/saml:Assertion/saml:Conditions element exists and is unique. """ condition_nodes = self._query_assertion('/saml:Conditions') if len(condition_nodes) == 1: return True else: return False def check_one_authnstatement(self): """ Checks that the samlp:Response/saml:Assertion/saml:AuthnStatement element exists and is unique. """ authnstatement_nodes = self._query_assertion('/saml:AuthnStatement') if len(authnstatement_nodes) == 1: return True else: return False def get_audiences(self): """ Gets the audiences :returns: The valid audiences for the SAML Response :rtype: list """ audience_nodes = self._query_assertion('/saml:Conditions/saml:AudienceRestriction/saml:Audience') return [OneLogin_Saml2_XML.element_text(node) for node in audience_nodes if OneLogin_Saml2_XML.element_text(node) is not None] def get_authn_contexts(self): """ Gets the authentication contexts :returns: The authentication classes for the SAML Response :rtype: list """ authn_context_nodes = self._query_assertion('/saml:AuthnStatement/saml:AuthnContext/saml:AuthnContextClassRef') return [OneLogin_Saml2_XML.element_text(node) for node in authn_context_nodes] def get_in_response_to(self): """ Gets the ID of the request which this response is in response to :returns: ID of AuthNRequest this Response is in response to or None if it is not present :rtype: str """ return self.document.get('InResponseTo') def get_issuers(self): """ Gets the issuers (from message and from assertion) :returns: The issuers :rtype: list """ issuers = set() message_issuer_nodes = OneLogin_Saml2_XML.query(self.document, '/samlp:Response/saml:Issuer') if len(message_issuer_nodes) > 0: if len(message_issuer_nodes) == 1: issuer_value = OneLogin_Saml2_XML.element_text(message_issuer_nodes[0]) if issuer_value: issuers.add(issuer_value) else: raise OneLogin_Saml2_ValidationError( 'Issuer of the Response is multiple.', OneLogin_Saml2_ValidationError.ISSUER_MULTIPLE_IN_RESPONSE ) assertion_issuer_nodes = self._query_assertion('/saml:Issuer') if len(assertion_issuer_nodes) == 1: issuer_value = OneLogin_Saml2_XML.element_text(assertion_issuer_nodes[0]) if issuer_value: issuers.add(issuer_value) else: raise OneLogin_Saml2_ValidationError( 'Issuer of the Assertion not found or multiple.', OneLogin_Saml2_ValidationError.ISSUER_NOT_FOUND_IN_ASSERTION ) return list(set(issuers)) def get_nameid_data(self): """ Gets the NameID Data provided by the SAML Response from the IdP :returns: Name ID Data (Value, Format, NameQualifier, SPNameQualifier) :rtype: dict """ nameid = None nameid_data = {} encrypted_id_data_nodes = self._query_assertion('/saml:Subject/saml:EncryptedID/xenc:EncryptedData') if encrypted_id_data_nodes: encrypted_data = encrypted_id_data_nodes[0] key = self._settings.get_sp_key() nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key) else: nameid_nodes = self._query_assertion('/saml:Subject/saml:NameID') if nameid_nodes: nameid = nameid_nodes[0] is_strict = self._settings.is_strict() want_nameid = self._settings.get_security_data().get('wantNameId', True) if nameid is None: if is_strict and want_nameid: raise OneLogin_Saml2_ValidationError( 'NameID not found in the assertion of the Response', OneLogin_Saml2_ValidationError.NO_NAMEID ) else: if is_strict and want_nameid and not OneLogin_Saml2_XML.element_text(nameid): raise OneLogin_Saml2_ValidationError( 'An empty NameID value found', OneLogin_Saml2_ValidationError.EMPTY_NAMEID ) nameid_data = {'Value': OneLogin_Saml2_XML.element_text(nameid)} for attr in ['Format', 'SPNameQualifier', 'NameQualifier']: value = nameid.get(attr, None) if value: if is_strict and attr == 'SPNameQualifier': sp_data = self._settings.get_sp_data() sp_entity_id = sp_data.get('entityId', '') if sp_entity_id != value: raise OneLogin_Saml2_ValidationError( 'The SPNameQualifier value mistmatch the SP entityID value.', OneLogin_Saml2_ValidationError.SP_NAME_QUALIFIER_NAME_MISMATCH ) nameid_data[attr] = value return nameid_data def get_nameid(self): """ Gets the NameID provided by the SAML Response from the IdP :returns: NameID (value) :rtype: string|None """ nameid_value = None nameid_data = self.get_nameid_data() if nameid_data and 'Value' in nameid_data.keys(): nameid_value = nameid_data['Value'] return nameid_value def get_nameid_format(self): """ Gets the NameID Format provided by the SAML Response from the IdP :returns: NameID Format :rtype: string|None """ nameid_format = None nameid_data = self.get_nameid_data() if nameid_data and 'Format' in nameid_data.keys(): nameid_format = nameid_data['Format'] return nameid_format def get_nameid_nq(self): """ Gets the NameID NameQualifier provided by the SAML Response from the IdP :returns: NameID NameQualifier :rtype: string|None """ nameid_nq = None nameid_data = self.get_nameid_data() if nameid_data and 'NameQualifier' in nameid_data.keys(): nameid_nq = nameid_data['NameQualifier'] return nameid_nq def get_nameid_spnq(self): """ Gets the NameID SP NameQualifier provided by the SAML response from the IdP. :returns: NameID SP NameQualifier :rtype: string|None """ nameid_spnq = None nameid_data = self.get_nameid_data() if nameid_data and 'SPNameQualifier' in nameid_data.keys(): nameid_spnq = nameid_data['SPNameQualifier'] return nameid_spnq def get_session_not_on_or_after(self): """ Gets the SessionNotOnOrAfter from the AuthnStatement Could be used to set the local session expiration :returns: The SessionNotOnOrAfter value :rtype: time|None """ not_on_or_after = None authn_statement_nodes = self._query_assertion('/saml:AuthnStatement[@SessionNotOnOrAfter]') if authn_statement_nodes: not_on_or_after = OneLogin_Saml2_Utils.parse_SAML_to_time(authn_statement_nodes[0].get('SessionNotOnOrAfter')) return not_on_or_after def get_assertion_not_on_or_after(self): """ Returns the NotOnOrAfter value of the valid SubjectConfirmationData node if any """ return self.valid_scd_not_on_or_after def get_session_index(self): """ Gets the SessionIndex from the AuthnStatement Could be used to be stored in the local session in order to be used in a future Logout Request that the SP could send to the SP, to set what specific session must be deleted :returns: The SessionIndex value :rtype: string|None """ session_index = None authn_statement_nodes = self._query_assertion('/saml:AuthnStatement[@SessionIndex]') if authn_statement_nodes: session_index = authn_statement_nodes[0].get('SessionIndex') return session_index def get_attributes(self): """ Gets the Attributes from the AttributeStatement element. EncryptedAttributes are not supported """ return self._get_attributes('Name') def get_friendlyname_attributes(self): """ Gets the Attributes from the AttributeStatement element indexed by FiendlyName. EncryptedAttributes are not supported """ return self._get_attributes('FriendlyName') def _get_attributes(self, attr_name): allow_duplicates = self._settings.get_security_data().get('allowRepeatAttributeName', False) attributes = {} attribute_nodes = self._query_assertion('/saml:AttributeStatement/saml:Attribute') for attribute_node in attribute_nodes: attr_key = attribute_node.get(attr_name) if attr_key: if not allow_duplicates and attr_key in attributes: raise OneLogin_Saml2_ValidationError( 'Found an Attribute element with duplicated ' + attr_name, OneLogin_Saml2_ValidationError.DUPLICATED_ATTRIBUTE_NAME_FOUND ) values = [] for attr in attribute_node.iterchildren('{%s}AttributeValue' % OneLogin_Saml2_Constants.NSMAP['saml']): attr_text = OneLogin_Saml2_XML.element_text(attr) if attr_text: attr_text = attr_text.strip() if attr_text: values.append(attr_text) # Parse any nested NameID children for nameid in attr.iterchildren('{%s}NameID' % OneLogin_Saml2_Constants.NSMAP['saml']): values.append({ 'NameID': { 'Format': nameid.get('Format'), 'NameQualifier': nameid.get('NameQualifier'), 'value': nameid.text } }) if attr_key in attributes: attributes[attr_key].extend(values) else: attributes[attr_key] = values return attributes def validate_num_assertions(self): """ Verifies that the document only contains a single Assertion (encrypted or not) :returns: True if only 1 assertion encrypted or not :rtype: bool """ encrypted_assertion_nodes = OneLogin_Saml2_XML.query(self.document, '//saml:EncryptedAssertion') assertion_nodes = OneLogin_Saml2_XML.query(self.document, '//saml:Assertion') valid = len(encrypted_assertion_nodes) + len(assertion_nodes) == 1 if (self.encrypted): assertion_nodes = OneLogin_Saml2_XML.query(self.decrypted_document, '//saml:Assertion') valid = valid and len(assertion_nodes) == 1 return valid def process_signed_elements(self): """ Verifies the signature nodes: - Checks that are Response or Assertion - Check that IDs and reference URI are unique and consistent. :returns: The signed elements tag names :rtype: list """ sign_nodes = self._query('//ds:Signature') signed_elements = [] verified_seis = [] verified_ids = [] response_tag = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP assertion_tag = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML security = self._settings.get_security_data() reject_deprecated_alg = security.get('rejectDeprecatedAlgorithm', False) for sign_node in sign_nodes: signed_element = sign_node.getparent().tag if signed_element != response_tag and signed_element != assertion_tag: raise OneLogin_Saml2_ValidationError( 'Invalid Signature Element %s SAML Response rejected' % signed_element, OneLogin_Saml2_ValidationError.WRONG_SIGNED_ELEMENT ) if not sign_node.getparent().get('ID'): raise OneLogin_Saml2_ValidationError( 'Signed Element must contain an ID. SAML Response rejected', OneLogin_Saml2_ValidationError.ID_NOT_FOUND_IN_SIGNED_ELEMENT ) id_value = sign_node.getparent().get('ID') if id_value in verified_ids: raise OneLogin_Saml2_ValidationError( 'Duplicated ID. SAML Response rejected', OneLogin_Saml2_ValidationError.DUPLICATED_ID_IN_SIGNED_ELEMENTS ) verified_ids.append(id_value) # Check that reference URI matches the parent ID and no duplicate References or IDs ref = OneLogin_Saml2_XML.query(sign_node, './/ds:Reference') if ref: ref = ref[0] if ref.get('URI'): sei = ref.get('URI')[1:] if sei != id_value: raise OneLogin_Saml2_ValidationError( 'Found an invalid Signed Element. SAML Response rejected', OneLogin_Saml2_ValidationError.INVALID_SIGNED_ELEMENT ) if sei in verified_seis: raise OneLogin_Saml2_ValidationError( 'Duplicated Reference URI. SAML Response rejected', OneLogin_Saml2_ValidationError.DUPLICATED_REFERENCE_IN_SIGNED_ELEMENTS ) verified_seis.append(sei) # Check the signature and digest algorithm if reject_deprecated_alg: sig_method_node = OneLogin_Saml2_XML.query(sign_node, './/ds:SignatureMethod') if sig_method_node: sig_method = sig_method_node[0].get("Algorithm") if sig_method in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS: raise OneLogin_Saml2_ValidationError( 'Deprecated signature algorithm found: %s' % sig_method, OneLogin_Saml2_ValidationError.DEPRECATED_SIGNATURE_METHOD ) dig_method_node = OneLogin_Saml2_XML.query(sign_node, './/ds:DigestMethod') if dig_method_node: dig_method = dig_method_node[0].get("Algorithm") if dig_method in OneLogin_Saml2_Constants.DEPRECATED_ALGORITHMS: raise OneLogin_Saml2_ValidationError( 'Deprecated digest algorithm found: %s' % dig_method, OneLogin_Saml2_ValidationError.DEPRECATED_DIGEST_METHOD ) signed_elements.append(signed_element) if signed_elements: if not self.validate_signed_elements(signed_elements, raise_exceptions=True): raise OneLogin_Saml2_ValidationError( 'Found an unexpected Signature Element. SAML Response rejected', OneLogin_Saml2_ValidationError.UNEXPECTED_SIGNED_ELEMENTS ) return signed_elements @return_false_on_exception def validate_signed_elements(self, signed_elements): """ Verifies that the document has the expected signed nodes. :param signed_elements: The signed elements to be checked :type signed_elements: list :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean """ if len(signed_elements) > 2: return False response_tag = '{%s}Response' % OneLogin_Saml2_Constants.NS_SAMLP assertion_tag = '{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML if (response_tag in signed_elements and signed_elements.count(response_tag) > 1) or \ (assertion_tag in signed_elements and signed_elements.count(assertion_tag) > 1) or \ (response_tag not in signed_elements and assertion_tag not in signed_elements): return False # Check that the signed elements found here, are the ones that will be verified # by OneLogin_Saml2_Utils.validate_sign if response_tag in signed_elements: expected_signature_nodes = OneLogin_Saml2_XML.query(self.document, OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH) if len(expected_signature_nodes) != 1: raise OneLogin_Saml2_ValidationError( 'Unexpected number of Response signatures found. SAML Response rejected.', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_RESPONSE ) if assertion_tag in signed_elements: expected_signature_nodes = self._query(OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH) if len(expected_signature_nodes) != 1: raise OneLogin_Saml2_ValidationError( 'Unexpected number of Assertion signatures found. SAML Response rejected.', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES_IN_ASSERTION ) return True @return_false_on_exception def validate_timestamps(self): """ Verifies that the document is valid according to Conditions Element :returns: True if the condition is valid, False otherwise :rtype: bool """ conditions_nodes = self._query_assertion('/saml:Conditions') for conditions_node in conditions_nodes: nb_attr = conditions_node.get('NotBefore') nooa_attr = conditions_node.get('NotOnOrAfter') if nb_attr and OneLogin_Saml2_Utils.parse_SAML_to_time(nb_attr) > OneLogin_Saml2_Utils.now() + OneLogin_Saml2_Constants.ALLOWED_CLOCK_DRIFT: raise OneLogin_Saml2_ValidationError( 'Could not validate timestamp: not yet valid. Check system clock.', OneLogin_Saml2_ValidationError.ASSERTION_TOO_EARLY ) if nooa_attr and OneLogin_Saml2_Utils.parse_SAML_to_time(nooa_attr) + OneLogin_Saml2_Constants.ALLOWED_CLOCK_DRIFT <= OneLogin_Saml2_Utils.now(): raise OneLogin_Saml2_ValidationError( 'Could not validate timestamp: expired. Check system clock.', OneLogin_Saml2_ValidationError.ASSERTION_EXPIRED ) return True def _query_assertion(self, xpath_expr): """ Extracts nodes that match the query from the Assertion :param xpath_expr: Xpath Expresion :type xpath_expr: String :returns: The queried nodes :rtype: list """ assertion_expr = '/saml:Assertion' signature_expr = '/ds:Signature/ds:SignedInfo/ds:Reference' signed_assertion_query = '/samlp:Response' + assertion_expr + signature_expr assertion_reference_nodes = self._query(signed_assertion_query) tagid = None if not assertion_reference_nodes: # Check if the message is signed signed_message_query = '/samlp:Response' + signature_expr message_reference_nodes = self._query(signed_message_query) if message_reference_nodes: message_id = message_reference_nodes[0].get('URI') final_query = "/samlp:Response[@ID=$tagid]/" tagid = message_id[1:] else: final_query = "/samlp:Response" final_query += assertion_expr else: assertion_id = assertion_reference_nodes[0].get('URI') final_query = '/samlp:Response' + assertion_expr + "[@ID=$tagid]" tagid = assertion_id[1:] final_query += xpath_expr return self._query(final_query, tagid) def _query(self, query, tagid=None): """ Extracts nodes that match the query from the Response :param query: Xpath Expresion :type query: String :param tagid: Tag ID :type query: String :returns: The queried nodes :rtype: list """ if self.encrypted: document = self.decrypted_document else: document = self.document return OneLogin_Saml2_XML.query(document, query, None, tagid) def _decrypt_assertion(self, xml): """ Decrypts the Assertion :raises: Exception if no private key available :param xml: Encrypted Assertion :type xml: Element :returns: Decrypted Assertion :rtype: Element """ key = self._settings.get_sp_key() debug = self._settings.is_debug_active() if not key: raise OneLogin_Saml2_Error( 'No private key available to decrypt the assertion, check settings', OneLogin_Saml2_Error.PRIVATE_KEY_NOT_FOUND ) encrypted_assertion_nodes = OneLogin_Saml2_XML.query(xml, '/samlp:Response/saml:EncryptedAssertion') if encrypted_assertion_nodes: encrypted_data_nodes = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], '//saml:EncryptedAssertion/xenc:EncryptedData') if encrypted_data_nodes: keyinfo = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], '//saml:EncryptedAssertion/xenc:EncryptedData/ds:KeyInfo') if not keyinfo: raise OneLogin_Saml2_ValidationError( 'No KeyInfo present, invalid Assertion', OneLogin_Saml2_ValidationError.KEYINFO_NOT_FOUND_IN_ENCRYPTED_DATA ) keyinfo = keyinfo[0] children = keyinfo.getchildren() if not children: raise OneLogin_Saml2_ValidationError( 'KeyInfo has no children nodes, invalid Assertion', OneLogin_Saml2_ValidationError.CHILDREN_NODE_NOT_FOUND_IN_KEYINFO ) for child in children: if 'RetrievalMethod' in child.tag: if child.attrib['Type'] != 'http://www.w3.org/2001/04/xmlenc#EncryptedKey': raise OneLogin_Saml2_ValidationError( 'Unsupported Retrieval Method found', OneLogin_Saml2_ValidationError.UNSUPPORTED_RETRIEVAL_METHOD ) uri = child.attrib['URI'] if not uri.startswith('#'): break uri = uri.split('#')[1] encrypted_key = OneLogin_Saml2_XML.query(encrypted_assertion_nodes[0], './xenc:EncryptedKey[@Id=$tagid]', None, uri) if encrypted_key: keyinfo.append(encrypted_key[0]) encrypted_data = encrypted_data_nodes[0] decrypted = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key, debug=debug, inplace=True) xml.replace(encrypted_assertion_nodes[0], decrypted) return xml def get_error(self): """ After executing a validation process, if it fails this method returns the cause """ return self._error def get_xml_document(self): """ Returns the SAML Response document (If contains an encrypted assertion, decrypts it) :return: Decrypted XML response document :rtype: DOMDocument """ if self.encrypted: return self.decrypted_document else: return self.document def get_id(self): """ :returns: the ID of the response :rtype: string """ return self.document.get('ID', None) def get_assertion_id(self): """ :returns: the ID of the assertion in the response :rtype: string """ if not self.validate_num_assertions(): raise OneLogin_Saml2_ValidationError( 'SAML Response must contain 1 assertion', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS ) return self._query_assertion('')[0].get('ID', None) def get_assertion_issue_instant(self): """ :returns: the IssueInstant of the assertion in the response :rtype: unix/posix timestamp|None """ if not self.validate_num_assertions(): raise OneLogin_Saml2_ValidationError( 'SAML Response must contain 1 assertion', OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_ASSERTIONS ) issue_instant = self._query_assertion('')[0].get('IssueInstant', None) return OneLogin_Saml2_Utils.parse_SAML_to_time(issue_instant) python3-saml-1.16.0/src/onelogin/saml2/schemas/000077500000000000000000000000001451074743100212055ustar00rootroot00000000000000python3-saml-1.16.0/src/onelogin/saml2/schemas/saml-schema-assertion-2.0.xsd000066400000000000000000000307461451074743100264330ustar00rootroot00000000000000 Document identifier: saml-schema-assertion-2.0 Location: http://docs.oasis-open.org/security/saml/v2.0/ Revision history: V1.0 (November, 2002): Initial Standard Schema. V1.1 (September, 2003): Updates within the same V1.0 namespace. V2.0 (March, 2005): New assertion schema for SAML V2.0 namespace. python3-saml-1.16.0/src/onelogin/saml2/schemas/saml-schema-authn-context-2.0.xsd000066400000000000000000000013721451074743100272160ustar00rootroot00000000000000 Document identifier: saml-schema-authn-context-2.0 Location: http://docs.oasis-open.org/security/saml/v2.0/ Revision history: V2.0 (March, 2005): New core authentication context schema for SAML V2.0. This is just an include of all types from the schema referred to in the include statement below. python3-saml-1.16.0/src/onelogin/saml2/schemas/saml-schema-authn-context-types-2.0.xsd000066400000000000000000000711331451074743100303620ustar00rootroot00000000000000 Document identifier: saml-schema-authn-context-types-2.0 Location: http://docs.oasis-open.org/security/saml/v2.0/ Revision history: V2.0 (March, 2005): New core authentication context schema types for SAML V2.0. A particular assertion on an identity provider's part with respect to the authentication context associated with an authentication assertion. Refers to those characteristics that describe the processes and mechanisms the Authentication Authority uses to initially create an association between a Principal and the identity (or name) by which the Principal will be known This element indicates that identification has been performed in a physical face-to-face meeting with the principal and not in an online manner. Refers to those characterstics that describe how the 'secret' (the knowledge or possession of which allows the Principal to authenticate to the Authentication Authority) is kept secure This element indicates the types and strengths of facilities of a UA used to protect a shared secret key from unauthorized access and/or use. This element indicates the types and strengths of facilities of a UA used to protect a private key from unauthorized access and/or use. The actions that must be performed before the private key can be used. Whether or not the private key is shared with the certificate authority. In which medium is the key stored. memory - the key is stored in memory. smartcard - the key is stored in a smartcard. token - the key is stored in a hardware token. MobileDevice - the key is stored in a mobile device. MobileAuthCard - the key is stored in a mobile authentication card. This element indicates that a password (or passphrase) has been used to authenticate the Principal to a remote system. This element indicates that a Pin (Personal Identification Number) has been used to authenticate the Principal to some local system in order to activate a key. This element indicates that a hardware or software token is used as a method of identifying the Principal. This element indicates that a time synchronization token is used to identify the Principal. hardware - the time synchonization token has been implemented in hardware. software - the time synchronization token has been implemented in software. SeedLength - the length, in bits, of the random seed used in the time synchronization token. This element indicates that a smartcard is used to identity the Principal. This element indicates the minimum and/or maximum ASCII length of the password which is enforced (by the UA or the IdP). In other words, this is the minimum and/or maximum number of ASCII characters required to represent a valid password. min - the minimum number of ASCII characters required in a valid password, as enforced by the UA or the IdP. max - the maximum number of ASCII characters required in a valid password, as enforced by the UA or the IdP. This element indicates the length of time for which an PIN-based authentication is valid. Indicates whether the password was chosen by the Principal or auto-supplied by the Authentication Authority. principalchosen - the Principal is allowed to choose the value of the password. This is true even if the initial password is chosen at random by the UA or the IdP and the Principal is then free to change the password. automatic - the password is chosen by the UA or the IdP to be cryptographically strong in some sense, or to satisfy certain password rules, and that the Principal is not free to change it or to choose a new password. Refers to those characteristics that define the mechanisms by which the Principal authenticates to the Authentication Authority. The method that a Principal employs to perform authentication to local system components. The method applied to validate a principal's authentication across a network Supports Authenticators with nested combinations of additional complexity. Indicates that the Principal has been strongly authenticated in a previous session during which the IdP has set a cookie in the UA. During the present session the Principal has only been authenticated by the UA returning the cookie to the IdP. Rather like PreviousSession but using stronger security. A secret that was established in a previous session with the Authentication Authority has been cached by the local system and is now re-used (e.g. a Master Secret is used to derive new session keys in TLS, SSL, WTLS). This element indicates that the Principal has been authenticated by a zero knowledge technique as specified in ISO/IEC 9798-5. This element indicates that the Principal has been authenticated by a challenge-response protocol utilizing shared secret keys and symmetric cryptography. This element indicates that the Principal has been authenticated by a mechanism which involves the Principal computing a digital signature over at least challenge data provided by the IdP. The local system has a private key but it is used in decryption mode, rather than signature mode. For example, the Authentication Authority generates a secret and encrypts it using the local system's public key: the local system then proves it has decrypted the secret. The local system has a private key and uses it for shared secret key agreement with the Authentication Authority (e.g. via Diffie Helman). This element indicates that the Principal has been authenticated through connection from a particular IP address. The local system and Authentication Authority share a secret key. The local system uses this to encrypt a randomised string to pass to the Authentication Authority. The protocol across which Authenticator information is transferred to an Authentication Authority verifier. This element indicates that the Authenticator has been transmitted using bare HTTP utilizing no additional security protocols. This element indicates that the Authenticator has been transmitted using a transport mechanism protected by an IPSEC session. This element indicates that the Authenticator has been transmitted using a transport mechanism protected by a WTLS session. This element indicates that the Authenticator has been transmitted solely across a mobile network using no additional security mechanism. This element indicates that the Authenticator has been transmitted using a transport mechnanism protected by an SSL or TLS session. Refers to those characteristics that describe procedural security controls employed by the Authentication Authority. Provides a mechanism for linking to external (likely human readable) documents in which additional business agreements, (e.g. liability constraints, obligations, etc) can be placed. This attribute indicates whether or not the Identification mechanisms allow the actions of the Principal to be linked to an actual end user. This element indicates that the Key Activation Limit is defined as a specific duration of time. This element indicates that the Key Activation Limit is defined as a number of usages. This element indicates that the Key Activation Limit is the session. python3-saml-1.16.0/src/onelogin/saml2/schemas/saml-schema-metadata-2.0.xsd000066400000000000000000000370271451074743100262030ustar00rootroot00000000000000 Document identifier: saml-schema-metadata-2.0 Location: http://docs.oasis-open.org/security/saml/v2.0/ Revision history: V2.0 (March, 2005): Schema for SAML metadata, first published in SAML 2.0. python3-saml-1.16.0/src/onelogin/saml2/schemas/saml-schema-protocol-2.0.xsd000066400000000000000000000322321451074743100262550ustar00rootroot00000000000000 Document identifier: saml-schema-protocol-2.0 Location: http://docs.oasis-open.org/security/saml/v2.0/ Revision history: V1.0 (November, 2002): Initial Standard Schema. V1.1 (September, 2003): Updates within the same V1.0 namespace. V2.0 (March, 2005): New protocol schema based in a SAML V2.0 namespace. python3-saml-1.16.0/src/onelogin/saml2/schemas/sstc-metadata-attr.xsd000066400000000000000000000021631451074743100254310ustar00rootroot00000000000000 Document title: SAML V2.0 Metadata Extention for Entity Attributes Schema Document identifier: sstc-metadata-attr.xsd Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security Revision history: V1.0 (November 2008): Initial version. python3-saml-1.16.0/src/onelogin/saml2/schemas/sstc-saml-attribute-ext.xsd000066400000000000000000000013341451074743100264330ustar00rootroot00000000000000 Document title: SAML V2.0 Attribute Extension Schema Document identifier: sstc-saml-attribute-ext.xsd Location: http://www.oasis-open.org/committees/documents.php?wg_abbrev=security Revision history: V1.0 (October 2008): Initial version. python3-saml-1.16.0/src/onelogin/saml2/schemas/sstc-saml-metadata-algsupport-v1.0.xsd000066400000000000000000000026551451074743100303010ustar00rootroot00000000000000 Document title: Metadata Extension Schema for SAML V2.0 Metadata Profile for Algorithm Support Version 1.0 Document identifier: sstc-saml-metadata-algsupport.xsd Location: http://docs.oasis-open.org/security/saml/Post2.0/ Revision history: V1.0 (June 2010): Initial version. python3-saml-1.16.0/src/onelogin/saml2/schemas/sstc-saml-metadata-ui-v1.0.xsd000066400000000000000000000060321451074743100265070ustar00rootroot00000000000000 Document title: Metadata Extension Schema for SAML V2.0 Metadata Extensions for Login and Discovery User Interface Version 1.0 Document identifier: sstc-saml-metadata-ui-v1.0.xsd Location: http://docs.oasis-open.org/security/saml/Post2.0/ Revision history: 16 November 2010: Added Keywords element/type. 01 November 2010 Changed filename. September 2010: Initial version. python3-saml-1.16.0/src/onelogin/saml2/schemas/xenc-schema.xsd000066400000000000000000000113361451074743100241240ustar00rootroot00000000000000 python3-saml-1.16.0/src/onelogin/saml2/schemas/xml.xsd000066400000000000000000000212041451074743100225240ustar00rootroot00000000000000

About the XML namespace

This schema document describes the XML namespace, in a form suitable for import by other schema documents.

See http://www.w3.org/XML/1998/namespace.html and http://www.w3.org/TR/REC-xml for information about this namespace.

Note that local names in this namespace are intended to be defined only by the World Wide Web Consortium or its subgroups. The names currently defined in this namespace are listed below. They should not be used with conflicting semantics by any Working Group, specification, or document instance.

See further below in this document for more information about how to refer to this schema document from your own XSD schema documents and about the namespace-versioning policy governing this schema document.

lang (as an attribute name)

denotes an attribute whose value is a language code for the natural language of the content of any element; its value is inherited. This name is reserved by virtue of its definition in the XML specification.

Notes

Attempting to install the relevant ISO 2- and 3-letter codes as the enumerated possible values is probably never going to be a realistic possibility.

See BCP 47 at http://www.rfc-editor.org/rfc/bcp/bcp47.txt and the IANA language subtag registry at http://www.iana.org/assignments/language-subtag-registry for further information.

The union allows for the 'un-declaration' of xml:lang with the empty string.

space (as an attribute name)

denotes an attribute whose value is a keyword indicating what whitespace processing discipline is intended for the content of the element; its value is inherited. This name is reserved by virtue of its definition in the XML specification.

base (as an attribute name)

denotes an attribute whose value provides a URI to be used as the base for interpreting any relative URIs in the scope of the element on which it appears; its value is inherited. This name is reserved by virtue of its definition in the XML Base specification.

See http://www.w3.org/TR/xmlbase/ for information about this attribute.

id (as an attribute name)

denotes an attribute whose value should be interpreted as if declared to be of type ID. This name is reserved by virtue of its definition in the xml:id specification.

See http://www.w3.org/TR/xml-id/ for information about this attribute.

Father (in any context at all)

denotes Jon Bosak, the chair of the original XML Working Group. This name is reserved by the following decision of the W3C XML Plenary and XML Coordination groups:

In appreciation for his vision, leadership and dedication the W3C XML Plenary on this 10th day of February, 2000, reserves for Jon Bosak in perpetuity the XML name "xml:Father".

About this schema document

This schema defines attributes and an attribute group suitable for use by schemas wishing to allow xml:base, xml:lang, xml:space or xml:id attributes on elements they define.

To enable this, such a schema must import this schema for the XML namespace, e.g. as follows: 

          <schema . . .>
           . . .
           <import namespace="http://www.w3.org/XML/1998/namespace"
                      schemaLocation="http://www.w3.org/2001/xml.xsd"/>

or 

           <import namespace="http://www.w3.org/XML/1998/namespace"
                      schemaLocation="http://www.w3.org/2009/01/xml.xsd"/>

Subsequently, qualified reference to any of the attributes or the group defined below will have the desired effect, e.g. 

          <type . . .>
           . . .
           <attributeGroup ref="xml:specialAttrs"/>

will define a type which will schema-validate an instance element with any of those attributes.

Versioning policy for this schema document

In keeping with the XML Schema WG's standard versioning policy, this schema document will persist at http://www.w3.org/2009/01/xml.xsd.

At the date of issue it can also be found at http://www.w3.org/2001/xml.xsd.

The schema document at that URI may however change in the future, in order to remain compatible with the latest version of XML Schema itself, or with the XML namespace itself. In other words, if the XML Schema or XML namespaces change, the version of this document at http://www.w3.org/2001/xml.xsd will change accordingly; the version at http://www.w3.org/2009/01/xml.xsd will not change.

Previous dated (and unchanging) versions of this schema document are at:

python3-saml-1.16.0/src/onelogin/saml2/schemas/xmldsig-core-schema.xsd000066400000000000000000000234231451074743100255640ustar00rootroot00000000000000 python3-saml-1.16.0/src/onelogin/saml2/settings.py000066400000000000000000000753401451074743100220050ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Settings class Copyright (c) 2010-2021 OneLogin, Inc. MIT License Setting class of OneLogin's Python Toolkit. """ from time import time import re from os.path import dirname, exists, join, sep from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.errors import OneLogin_Saml2_Error from onelogin.saml2.metadata import OneLogin_Saml2_Metadata from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xml_utils import OneLogin_Saml2_XML try: import ujson as json except ImportError: import json try: basestring except NameError: basestring = str # Regex from Django Software Foundation and individual contributors. # Released under a BSD 3-Clause License url_regex = re.compile( r'^(?:[a-z0-9\.\-]*)://' # scheme is validated separately r'(?:(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_])?\.)+(?:[A-Z]{2,6}\.?|[A-Z0-9-]{2,}\.?)|' # domain... r'localhost|' # localhost... r'\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|' # ...or ipv4 r'\[?[A-F0-9]*:[A-F0-9:]+\]?)' # ...or ipv6 r'(?::\d+)?' # optional port r'(?:/?|[/?]\S+)$', re.IGNORECASE) url_regex_single_label_domain = re.compile( r'^(?:[a-z0-9\.\-]*)://' # scheme is validated separately r'(?:(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_])?\.)+(?:[A-Z]{2,6}\.?|[A-Z0-9-]{2,}\.?)|' # domain... r'(?:[A-Z0-9_](?:[A-Z0-9-_]{0,61}[A-Z0-9_]))|' # single-label-domain r'localhost|' # localhost... r'\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}|' # ...or ipv4 r'\[?[A-F0-9]*:[A-F0-9:]+\]?)' # ...or ipv6 r'(?::\d+)?' # optional port r'(?:/?|[/?]\S+)$', re.IGNORECASE) url_schemes = ['http', 'https', 'ftp', 'ftps'] def validate_url(url, allow_single_label_domain=False): """ Auxiliary method to validate an urllib :param url: An url to be validated :type url: string :param allow_single_label_domain: In order to allow or not single label domain :type url: bool :returns: True if the url is valid :rtype: bool """ scheme = url.split('://')[0].lower() if scheme not in url_schemes: return False if allow_single_label_domain: if not bool(url_regex_single_label_domain.search(url)): return False else: if not bool(url_regex.search(url)): return False return True class OneLogin_Saml2_Settings(object): """ Handles the settings of the Python toolkits. """ metadata_class = OneLogin_Saml2_Metadata def __init__(self, settings=None, custom_base_path=None, sp_validation_only=False): """ Initializes the settings: - Sets the paths of the different folders - Loads settings info from settings file or array/object provided :param settings: SAML Toolkit Settings :type settings: dict :param custom_base_path: Path where are stored the settings file and the cert folder :type custom_base_path: string :param sp_validation_only: Avoid the IdP validation :type sp_validation_only: boolean """ self._sp_validation_only = sp_validation_only self._paths = {} self._strict = True self._debug = False self._sp = {} self._idp = {} self._security = {} self._contacts = {} self._organization = {} self._errors = [] self._load_paths(base_path=custom_base_path) self._update_paths(settings) if settings is None: try: valid = self._load_settings_from_file() except Exception as e: raise e if not valid: raise OneLogin_Saml2_Error( 'Invalid dict settings at the file: %s', OneLogin_Saml2_Error.SETTINGS_INVALID, ','.join(self._errors) ) elif isinstance(settings, dict): if not self._load_settings_from_dict(settings): raise OneLogin_Saml2_Error( 'Invalid dict settings: %s', OneLogin_Saml2_Error.SETTINGS_INVALID, ','.join(self._errors) ) else: raise OneLogin_Saml2_Error( 'Unsupported settings object', OneLogin_Saml2_Error.UNSUPPORTED_SETTINGS_OBJECT ) self.format_idp_cert() if 'x509certMulti' in self._idp: self.format_idp_cert_multi() self.format_sp_cert() if 'x509certNew' in self._sp: self.format_sp_cert_new() self.format_sp_key() def _load_paths(self, base_path=None): """ Set the paths of the different folders """ if base_path is None: base_path = dirname(dirname(dirname(__file__))) if not base_path.endswith(sep): base_path += sep self._paths = { 'base': base_path, 'cert': base_path + 'certs' + sep, 'lib': dirname(__file__) + sep } def _update_paths(self, settings): """ Set custom paths if necessary """ if not isinstance(settings, dict): return if 'custom_base_path' in settings: base_path = settings['custom_base_path'] base_path = join(dirname(__file__), base_path) self._load_paths(base_path) def get_base_path(self): """ Returns base path :return: The base toolkit folder path :rtype: string """ return self._paths['base'] def get_cert_path(self): """ Returns cert path :return: The cert folder path :rtype: string """ return self._paths['cert'] def set_cert_path(self, path): """ Set a new cert path """ self._paths['cert'] = path def get_lib_path(self): """ Returns lib path :return: The library folder path :rtype: string """ return self._paths['lib'] def get_schemas_path(self): """ Returns schema path :return: The schema folder path :rtype: string """ return self._paths['lib'] + 'schemas/' def _load_settings_from_dict(self, settings): """ Loads settings info from a settings Dict :param settings: SAML Toolkit Settings :type settings: dict :returns: True if the settings info is valid :rtype: boolean """ errors = self.check_settings(settings) if len(errors) == 0: self._errors = [] self._sp = settings['sp'] self._idp = settings.get('idp', {}) self._strict = settings.get('strict', True) self._debug = settings.get('debug', False) self._security = settings.get('security', {}) self._contacts = settings.get('contactPerson', {}) self._organization = settings.get('organization', {}) self._add_default_values() return True self._errors = errors return False def _load_settings_from_file(self): """ Loads settings info from the settings json file :returns: True if the settings info is valid :rtype: boolean """ filename = self.get_base_path() + 'settings.json' if not exists(filename): raise OneLogin_Saml2_Error( 'Settings file not found: %s', OneLogin_Saml2_Error.SETTINGS_FILE_NOT_FOUND, filename ) # In the php toolkit instead of being a json file it is a php file and # it is directly included with open(filename, 'r') as json_data: settings = json.loads(json_data.read()) advanced_filename = self.get_base_path() + 'advanced_settings.json' if exists(advanced_filename): with open(advanced_filename, 'r') as json_data: settings.update(json.loads(json_data.read())) # Merge settings return self._load_settings_from_dict(settings) def _add_default_values(self): """ Add default values if the settings info is not complete """ self._sp.setdefault('assertionConsumerService', {}) self._sp['assertionConsumerService'].setdefault('binding', OneLogin_Saml2_Constants.BINDING_HTTP_POST) self._sp.setdefault('attributeConsumingService', {}) self._sp.setdefault('singleLogoutService', {}) self._sp['singleLogoutService'].setdefault('binding', OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT) self._idp.setdefault('singleLogoutService', {}) # Related to nameID self._sp.setdefault('NameIDFormat', OneLogin_Saml2_Constants.NAMEID_UNSPECIFIED) self._security.setdefault('nameIdEncrypted', False) # Metadata format self._security.setdefault('metadataValidUntil', None) # None means use default self._security.setdefault('metadataCacheDuration', None) # None means use default # Sign provided self._security.setdefault('authnRequestsSigned', False) self._security.setdefault('logoutRequestSigned', False) self._security.setdefault('logoutResponseSigned', False) self._security.setdefault('signMetadata', False) # Sign expected self._security.setdefault('wantMessagesSigned', False) self._security.setdefault('wantAssertionsSigned', False) # NameID element expected self._security.setdefault('wantNameId', True) # Encrypt expected self._security.setdefault('wantAssertionsEncrypted', False) self._security.setdefault('wantNameIdEncrypted', False) # Signature Algorithm self._security.setdefault('signatureAlgorithm', OneLogin_Saml2_Constants.RSA_SHA256) # Digest Algorithm self._security.setdefault('digestAlgorithm', OneLogin_Saml2_Constants.SHA256) # Reject Deprecated Algorithms self._security.setdefault('rejectDeprecatedAlgorithm', False) # AttributeStatement required by default self._security.setdefault('wantAttributeStatement', True) # Disallow duplicate attribute names by default self._security.setdefault('allowRepeatAttributeName', False) self._idp.setdefault('x509cert', '') self._idp.setdefault('certFingerprint', '') self._idp.setdefault('certFingerprintAlgorithm', 'sha1') self._sp.setdefault('x509cert', '') self._sp.setdefault('privateKey', '') self._security.setdefault('requestedAuthnContext', True) self._security.setdefault('requestedAuthnContextComparison', 'exact') self._security.setdefault('failOnAuthnContextMismatch', False) def check_settings(self, settings): """ Checks the settings info. :param settings: Dict with settings data :type settings: dict :returns: Errors found on the settings data :rtype: list """ assert isinstance(settings, dict) errors = [] if not isinstance(settings, dict) or len(settings) == 0: errors.append('invalid_syntax') else: if not self._sp_validation_only: errors += self.check_idp_settings(settings) sp_errors = self.check_sp_settings(settings) errors += sp_errors return errors def check_idp_settings(self, settings): """ Checks the IdP settings info. :param settings: Dict with settings data :type settings: dict :returns: Errors found on the IdP settings data :rtype: list """ assert isinstance(settings, dict) errors = [] if not isinstance(settings, dict) or len(settings) == 0: errors.append('invalid_syntax') else: if not settings.get('idp'): errors.append('idp_not_found') else: allow_single_domain_urls = self._get_allow_single_label_domain(settings) idp = settings['idp'] if not idp.get('entityId'): errors.append('idp_entityId_not_found') if not idp.get('singleSignOnService', {}).get('url'): errors.append('idp_sso_not_found') elif not validate_url(idp['singleSignOnService']['url'], allow_single_domain_urls): errors.append('idp_sso_url_invalid') slo_url = idp.get('singleLogoutService', {}).get('url') if slo_url and not validate_url(slo_url, allow_single_domain_urls): errors.append('idp_slo_url_invalid') if 'security' in settings: security = settings['security'] exists_x509 = bool(idp.get('x509cert')) exists_fingerprint = bool(idp.get('certFingerprint')) exists_multix509sign = 'x509certMulti' in idp and \ 'signing' in idp['x509certMulti'] and \ idp['x509certMulti']['signing'] exists_multix509enc = 'x509certMulti' in idp and \ 'encryption' in idp['x509certMulti'] and \ idp['x509certMulti']['encryption'] want_assert_sign = bool(security.get('wantAssertionsSigned')) want_mes_signed = bool(security.get('wantMessagesSigned')) nameid_enc = bool(security.get('nameIdEncrypted')) if (want_assert_sign or want_mes_signed) and \ not (exists_x509 or exists_fingerprint or exists_multix509sign): errors.append('idp_cert_or_fingerprint_not_found_and_required') if nameid_enc and not (exists_x509 or exists_multix509enc): errors.append('idp_cert_not_found_and_required') return errors def check_sp_settings(self, settings): """ Checks the SP settings info. :param settings: Dict with settings data :type settings: dict :returns: Errors found on the SP settings data :rtype: list """ assert isinstance(settings, dict) errors = [] if not isinstance(settings, dict) or not settings: errors.append('invalid_syntax') else: if not settings.get('sp'): errors.append('sp_not_found') else: allow_single_domain_urls = self._get_allow_single_label_domain(settings) # check_sp_certs uses self._sp so I add it old_sp = self._sp self._sp = settings['sp'] sp = settings['sp'] security = settings.get('security', {}) if not sp.get('entityId'): errors.append('sp_entityId_not_found') if not sp.get('assertionConsumerService', {}).get('url'): errors.append('sp_acs_not_found') elif not validate_url(sp['assertionConsumerService']['url'], allow_single_domain_urls): errors.append('sp_acs_url_invalid') if sp.get('attributeConsumingService'): attributeConsumingService = sp['attributeConsumingService'] if 'serviceName' not in attributeConsumingService: errors.append('sp_attributeConsumingService_serviceName_not_found') elif not isinstance(attributeConsumingService['serviceName'], basestring): errors.append('sp_attributeConsumingService_serviceName_type_invalid') if 'requestedAttributes' not in attributeConsumingService: errors.append('sp_attributeConsumingService_requestedAttributes_not_found') elif not isinstance(attributeConsumingService['requestedAttributes'], list): errors.append('sp_attributeConsumingService_serviceName_type_invalid') else: for req_attrib in attributeConsumingService['requestedAttributes']: if 'name' not in req_attrib: errors.append('sp_attributeConsumingService_requestedAttributes_name_not_found') if 'name' in req_attrib and not req_attrib['name'].strip(): errors.append('sp_attributeConsumingService_requestedAttributes_name_invalid') if 'attributeValue' in req_attrib and type(req_attrib['attributeValue']) != list: errors.append('sp_attributeConsumingService_requestedAttributes_attributeValue_type_invalid') if 'isRequired' in req_attrib and type(req_attrib['isRequired']) != bool: errors.append('sp_attributeConsumingService_requestedAttributes_isRequired_type_invalid') if "serviceDescription" in attributeConsumingService and not isinstance(attributeConsumingService['serviceDescription'], basestring): errors.append('sp_attributeConsumingService_serviceDescription_type_invalid') slo_url = sp.get('singleLogoutService', {}).get('url') if slo_url and not validate_url(slo_url, allow_single_domain_urls): errors.append('sp_sls_url_invalid') if 'signMetadata' in security and isinstance(security['signMetadata'], dict): if 'keyFileName' not in security['signMetadata'] or \ 'certFileName' not in security['signMetadata']: errors.append('sp_signMetadata_invalid') authn_sign = bool(security.get('authnRequestsSigned')) logout_req_sign = bool(security.get('logoutRequestSigned')) logout_res_sign = bool(security.get('logoutResponseSigned')) want_assert_enc = bool(security.get('wantAssertionsEncrypted')) want_nameid_enc = bool(security.get('wantNameIdEncrypted')) if not self.check_sp_certs(): if authn_sign or logout_req_sign or logout_res_sign or \ want_assert_enc or want_nameid_enc: errors.append('sp_cert_not_found_and_required') if 'contactPerson' in settings: types = settings['contactPerson'] valid_types = ['technical', 'support', 'administrative', 'billing', 'other'] for c_type in types: if c_type not in valid_types: errors.append('contact_type_invalid') break for c_type in settings['contactPerson']: contact = settings['contactPerson'][c_type] if ('givenName' not in contact or len(contact['givenName']) == 0) or \ ('emailAddress' not in contact or len(contact['emailAddress']) == 0): errors.append('contact_not_enought_data') break if 'organization' in settings: for org in settings['organization']: organization = settings['organization'][org] if ('name' not in organization or len(organization['name']) == 0) or \ ('displayname' not in organization or len(organization['displayname']) == 0) or \ ('url' not in organization or len(organization['url']) == 0): errors.append('organization_not_enought_data') break # Restores the value that had the self._sp if 'old_sp' in locals(): self._sp = old_sp return errors def check_sp_certs(self): """ Checks if the x509 certs of the SP exists and are valid. :returns: If the x509 certs of the SP exists and are valid :rtype: boolean """ key = self.get_sp_key() cert = self.get_sp_cert() return key is not None and cert is not None def get_idp_sso_url(self): """ Gets the IdP SSO URL. :returns: An URL, the SSO endpoint of the IdP :rtype: string """ idp_data = self.get_idp_data() return idp_data['singleSignOnService']['url'] def get_idp_slo_url(self): """ Gets the IdP SLO URL. :returns: An URL, the SLO endpoint of the IdP :rtype: string """ idp_data = self.get_idp_data() if 'url' in idp_data['singleLogoutService']: return idp_data['singleLogoutService']['url'] def get_idp_slo_response_url(self): """ Gets the IdP SLO return URL for IdP-initiated logout. :returns: an URL, the SLO return endpoint of the IdP :rtype: string """ idp_data = self.get_idp_data() if 'url' in idp_data['singleLogoutService']: return idp_data['singleLogoutService'].get('responseUrl', self.get_idp_slo_url()) def get_sp_key(self): """ Returns the x509 private key of the SP. :returns: SP private key :rtype: string or None """ key = self._sp.get('privateKey') key_file_name = self._paths['cert'] + 'sp.key' if not key and exists(key_file_name): with open(key_file_name) as f: key = f.read() return key or None def get_sp_cert(self): """ Returns the x509 public cert of the SP. :returns: SP public cert :rtype: string or None """ cert = self._sp.get('x509cert') cert_file_name = self._paths['cert'] + 'sp.crt' if not cert and exists(cert_file_name): with open(cert_file_name) as f: cert = f.read() return cert or None def get_sp_cert_new(self): """ Returns the x509 public of the SP planned to be used soon instead the other public cert :returns: SP public cert new :rtype: string or None """ cert = self._sp.get('x509certNew') cert_file_name = self._paths['cert'] + 'sp_new.crt' if not cert and exists(cert_file_name): with open(cert_file_name) as f: cert = f.read() return cert or None def get_idp_cert(self): """ Returns the x509 public cert of the IdP. :returns: IdP public cert :rtype: string """ cert = self._idp.get('x509cert') cert_file_name = self.get_cert_path() + 'idp.crt' if not cert and exists(cert_file_name): with open(cert_file_name) as f: cert = f.read() return cert or None def get_idp_data(self): """ Gets the IdP data. :returns: IdP info :rtype: dict """ return self._idp def get_sp_data(self): """ Gets the SP data. :returns: SP info :rtype: dict """ return self._sp def get_security_data(self): """ Gets security data. :returns: Security info :rtype: dict """ return self._security def get_contacts(self): """ Gets contact data. :returns: Contacts info :rtype: dict """ return self._contacts def get_organization(self): """ Gets organization data. :returns: Organization info :rtype: dict """ return self._organization def get_sp_metadata(self): """ Gets the SP metadata. The XML representation. :returns: SP metadata (xml) :rtype: string """ metadata = self.metadata_class.builder( self._sp, self._security['authnRequestsSigned'], self._security['wantAssertionsSigned'], self._security['metadataValidUntil'], self._security['metadataCacheDuration'], self.get_contacts(), self.get_organization() ) add_encryption = self._security['wantNameIdEncrypted'] or self._security['wantAssertionsEncrypted'] cert_new = self.get_sp_cert_new() metadata = self.metadata_class.add_x509_key_descriptors(metadata, cert_new, add_encryption) cert = self.get_sp_cert() metadata = self.metadata_class.add_x509_key_descriptors(metadata, cert, add_encryption) # Sign metadata if 'signMetadata' in self._security and self._security['signMetadata'] is not False: if self._security['signMetadata'] is True: # Use the SP's normal key to sign the metadata: if not cert: raise OneLogin_Saml2_Error( 'Cannot sign metadata: missing SP public key certificate.', OneLogin_Saml2_Error.PUBLIC_CERT_FILE_NOT_FOUND ) cert_metadata = cert key_metadata = self.get_sp_key() if not key_metadata: raise OneLogin_Saml2_Error( 'Cannot sign metadata: missing SP private key.', OneLogin_Saml2_Error.PRIVATE_KEY_FILE_NOT_FOUND ) else: # Use a custom key to sign the metadata: if ('keyFileName' not in self._security['signMetadata'] or 'certFileName' not in self._security['signMetadata']): raise OneLogin_Saml2_Error( 'Invalid Setting: signMetadata value of the sp is not valid', OneLogin_Saml2_Error.SETTINGS_INVALID_SYNTAX ) key_file_name = self._security['signMetadata']['keyFileName'] cert_file_name = self._security['signMetadata']['certFileName'] key_metadata_file = self._paths['cert'] + key_file_name cert_metadata_file = self._paths['cert'] + cert_file_name try: with open(key_metadata_file, 'r') as f_metadata_key: key_metadata = f_metadata_key.read() except IOError: raise OneLogin_Saml2_Error( 'Private key file not readable: %s', OneLogin_Saml2_Error.PRIVATE_KEY_FILE_NOT_FOUND, key_metadata_file ) try: with open(cert_metadata_file, 'r') as f_metadata_cert: cert_metadata = f_metadata_cert.read() except IOError: raise OneLogin_Saml2_Error( 'Public cert file not readable: %s', OneLogin_Saml2_Error.PUBLIC_CERT_FILE_NOT_FOUND, cert_metadata_file ) signature_algorithm = self._security['signatureAlgorithm'] digest_algorithm = self._security['digestAlgorithm'] metadata = self.metadata_class.sign_metadata(metadata, key_metadata, cert_metadata, signature_algorithm, digest_algorithm) return metadata def validate_metadata(self, xml): """ Validates an XML SP Metadata. :param xml: Metadata's XML that will be validate :type xml: string :returns: The list of found errors :rtype: list """ assert isinstance(xml, compat.text_types) if len(xml) == 0: raise Exception('Empty string supplied as input') errors = [] root = OneLogin_Saml2_XML.validate_xml(xml, 'saml-schema-metadata-2.0.xsd', self._debug) if isinstance(root, str): errors.append(root) else: if root.tag != '{%s}EntityDescriptor' % OneLogin_Saml2_Constants.NS_MD: errors.append('noEntityDescriptor_xml') else: if (len(root.findall('.//md:SPSSODescriptor', namespaces=OneLogin_Saml2_Constants.NSMAP))) != 1: errors.append('onlySPSSODescriptor_allowed_xml') else: valid_until, cache_duration = root.get('validUntil'), root.get('cacheDuration') if valid_until: valid_until = OneLogin_Saml2_Utils.parse_SAML_to_time(valid_until) expire_time = OneLogin_Saml2_Utils.get_expire_time(cache_duration, valid_until) if expire_time is not None and int(time()) > int(expire_time): errors.append('expired_xml') # TODO: Validate Sign return errors def format_idp_cert(self): """ Formats the IdP cert. """ self._idp['x509cert'] = OneLogin_Saml2_Utils.format_cert(self._idp['x509cert']) def format_idp_cert_multi(self): """ Formats the Multple IdP certs. """ if 'x509certMulti' in self._idp: if 'signing' in self._idp['x509certMulti']: for idx in range(len(self._idp['x509certMulti']['signing'])): self._idp['x509certMulti']['signing'][idx] = OneLogin_Saml2_Utils.format_cert(self._idp['x509certMulti']['signing'][idx]) if 'encryption' in self._idp['x509certMulti']: for idx in range(len(self._idp['x509certMulti']['encryption'])): self._idp['x509certMulti']['encryption'][idx] = OneLogin_Saml2_Utils.format_cert(self._idp['x509certMulti']['encryption'][idx]) def format_sp_cert(self): """ Formats the SP cert. """ self._sp['x509cert'] = OneLogin_Saml2_Utils.format_cert(self._sp['x509cert']) def format_sp_cert_new(self): """ Formats the SP cert. """ self._sp['x509certNew'] = OneLogin_Saml2_Utils.format_cert(self._sp['x509certNew']) def format_sp_key(self): """ Formats the private key. """ self._sp['privateKey'] = OneLogin_Saml2_Utils.format_private_key(self._sp['privateKey']) def get_errors(self): """ Returns an array with the errors, the array is empty when the settings is ok. :returns: Errors :rtype: list """ return self._errors def set_strict(self, value): """ Activates or deactivates the strict mode. :param value: Strict parameter :type value: boolean """ assert isinstance(value, bool) self._strict = value def is_strict(self): """ Returns if the 'strict' mode is active. :returns: Strict parameter :rtype: boolean """ return self._strict def is_debug_active(self): """ Returns if the debug is active. :returns: Debug parameter :rtype: boolean """ return self._debug def _get_allow_single_label_domain(self, settings): security = settings.get('security', {}) return 'allowSingleLabelDomains' in security.keys() and security['allowSingleLabelDomains'] python3-saml-1.16.0/src/onelogin/saml2/utils.py000066400000000000000000001127541451074743100213060ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Utils class Auxiliary class of SAML Python Toolkit. """ import base64 import warnings from copy import deepcopy import calendar from datetime import datetime from hashlib import sha1, sha256, sha384, sha512 from isodate import parse_duration as duration_parser import re from textwrap import wrap from functools import wraps from uuid import uuid4 from xml.dom.minidom import Element import zlib import xmlsec from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.errors import OneLogin_Saml2_Error, OneLogin_Saml2_ValidationError from onelogin.saml2.xml_utils import OneLogin_Saml2_XML try: from urllib.parse import quote_plus, urlsplit, urlunsplit # py3 except ImportError: from urlparse import urlsplit, urlunsplit from urllib import quote_plus # py2 def return_false_on_exception(func): """ Decorator. When applied to a function, it will, by default, suppress any exceptions raised by that function and return False. It may be overridden by passing a "raise_exceptions" keyword argument when calling the wrapped function. """ @wraps(func) def exceptfalse(*args, **kwargs): if not kwargs.pop('raise_exceptions', False): try: return func(*args, **kwargs) except Exception: return False else: return func(*args, **kwargs) return exceptfalse class OneLogin_Saml2_Utils(object): """ Auxiliary class that contains several utility methods to parse time, urls, add sign, encrypt, decrypt, sign validation, handle xml ... """ RESPONSE_SIGNATURE_XPATH = '/samlp:Response/ds:Signature' ASSERTION_SIGNATURE_XPATH = '/samlp:Response/saml:Assertion/ds:Signature' TIME_FORMAT = "%Y-%m-%dT%H:%M:%SZ" TIME_FORMAT_2 = "%Y-%m-%dT%H:%M:%S.%fZ" TIME_FORMAT_WITH_FRAGMENT = re.compile(r'^(\d{4,4}-\d{2,2}-\d{2,2}T\d{2,2}:\d{2,2}:\d{2,2})(\.\d*)?Z?$') @staticmethod def escape_url(url, lowercase_urlencoding=False): """ escape the non-safe symbols in url The encoding used by ADFS 3.0 is not compatible with python's quote_plus (ADFS produces lower case hex numbers and quote_plus produces upper case hex numbers) :param url: the url to escape :type url: str :param lowercase_urlencoding: lowercase or no :type lowercase_urlencoding: boolean :return: the escaped url :rtype str """ encoded = quote_plus(url) return re.sub(r"%[A-F0-9]{2}", lambda m: m.group(0).lower(), encoded) if lowercase_urlencoding else encoded @staticmethod def b64encode(data): """base64 encode""" return compat.to_string(base64.b64encode(compat.to_bytes(data))) @staticmethod def b64decode(data): """base64 decode""" return base64.b64decode(data) @staticmethod def decode_base64_and_inflate(value, ignore_zip=False): """ base64 decodes and then inflates according to RFC1951 :param value: a deflated and encoded string :type value: string :param ignore_zip: ignore zip errors :returns: the string after decoding and inflating :rtype: string """ encoded = OneLogin_Saml2_Utils.b64decode(value) try: return zlib.decompress(encoded, -15) except zlib.error: if not ignore_zip: raise return encoded @staticmethod def deflate_and_base64_encode(value): """ Deflates and then base64 encodes a string :param value: The string to deflate and encode :type value: string :returns: The deflated and encoded string :rtype: string """ return OneLogin_Saml2_Utils.b64encode(zlib.compress(compat.to_bytes(value))[2:-4]) @staticmethod def format_cert(cert, heads=True): """ Returns a x509 cert (adding header & footer if required). :param cert: A x509 unformatted cert :type: string :param heads: True if we want to include head and footer :type: boolean :returns: Formatted cert :rtype: string """ x509_cert = cert.replace('\x0D', '') x509_cert = x509_cert.replace('\r', '') x509_cert = x509_cert.replace('\n', '') if len(x509_cert) > 0: x509_cert = x509_cert.replace('-----BEGIN CERTIFICATE-----', '') x509_cert = x509_cert.replace('-----END CERTIFICATE-----', '') x509_cert = x509_cert.replace(' ', '') if heads: x509_cert = "-----BEGIN CERTIFICATE-----\n" + "\n".join(wrap(x509_cert, 64)) + "\n-----END CERTIFICATE-----\n" return x509_cert @staticmethod def format_private_key(key, heads=True): """ Returns a private key (adding header & footer if required). :param key A private key :type: string :param heads: True if we want to include head and footer :type: boolean :returns: Formated private key :rtype: string """ private_key = key.replace('\x0D', '') private_key = private_key.replace('\r', '') private_key = private_key.replace('\n', '') if len(private_key) > 0: if private_key.find('-----BEGIN PRIVATE KEY-----') != -1: private_key = private_key.replace('-----BEGIN PRIVATE KEY-----', '') private_key = private_key.replace('-----END PRIVATE KEY-----', '') private_key = private_key.replace(' ', '') if heads: private_key = "-----BEGIN PRIVATE KEY-----\n" + "\n".join(wrap(private_key, 64)) + "\n-----END PRIVATE KEY-----\n" else: private_key = private_key.replace('-----BEGIN RSA PRIVATE KEY-----', '') private_key = private_key.replace('-----END RSA PRIVATE KEY-----', '') private_key = private_key.replace(' ', '') if heads: private_key = "-----BEGIN RSA PRIVATE KEY-----\n" + "\n".join(wrap(private_key, 64)) + "\n-----END RSA PRIVATE KEY-----\n" return private_key @staticmethod def redirect(url, parameters={}, request_data={}): """ Executes a redirection to the provided url (or return the target url). :param url: The target url :type: string :param parameters: Extra parameters to be passed as part of the url :type: dict :param request_data: The request as a dict :type: dict :returns: Url :rtype: string """ assert isinstance(url, compat.str_type) assert isinstance(parameters, dict) if url.startswith('/'): url = '%s%s' % (OneLogin_Saml2_Utils.get_self_url_host(request_data), url) # Verify that the URL is to a http or https site. if re.search('^https?://', url, flags=re.IGNORECASE) is None: raise OneLogin_Saml2_Error( 'Redirect to invalid URL: ' + url, OneLogin_Saml2_Error.REDIRECT_INVALID_URL ) # Add encoded parameters if url.find('?') < 0: param_prefix = '?' else: param_prefix = '&' for name, value in parameters.items(): if value is None: param = OneLogin_Saml2_Utils.escape_url(name) elif isinstance(value, list): param = '' for val in value: param += OneLogin_Saml2_Utils.escape_url(name) + '[]=' + OneLogin_Saml2_Utils.escape_url(val) + '&' if len(param) > 0: param = param[0:-1] else: param = OneLogin_Saml2_Utils.escape_url(name) + '=' + OneLogin_Saml2_Utils.escape_url(value) if param: url += param_prefix + param param_prefix = '&' return url @staticmethod def get_self_url_host(request_data): """ Returns the protocol + the current host + the port (if different than common ports). :param request_data: The request as a dict :type: dict :return: Url :rtype: string """ current_host = OneLogin_Saml2_Utils.get_self_host(request_data) protocol = 'https' if OneLogin_Saml2_Utils.is_https(request_data) else 'http' if request_data.get('server_port') is not None: warnings.warn( 'The server_port key in request data is deprecated. ' 'The http_host key should include a port, if required.', category=DeprecationWarning, ) port_suffix = ':%s' % request_data['server_port'] if not current_host.endswith(port_suffix): if not ((protocol == 'https' and port_suffix == ':443') or (protocol == 'http' and port_suffix == ':80')): current_host += port_suffix return '%s://%s' % (protocol, current_host) @staticmethod def get_self_host(request_data): """ Returns the current host (which may include a port number part). :param request_data: The request as a dict :type: dict :return: The current host :rtype: string """ if 'http_host' in request_data: return request_data['http_host'] elif 'server_name' in request_data: warnings.warn("The server_name key in request data is undocumented & deprecated.", category=DeprecationWarning) return request_data['server_name'] raise Exception('No hostname defined') @staticmethod def is_https(request_data): """ Checks if https or http. :param request_data: The request as a dict :type: dict :return: False if https is not active :rtype: boolean """ is_https = 'https' in request_data and request_data['https'] != 'off' # TODO: this use of server_port should be removed too is_https = is_https or ('server_port' in request_data and str(request_data['server_port']) == '443') return is_https @staticmethod def get_self_url_no_query(request_data): """ Returns the URL of the current host + current view. :param request_data: The request as a dict :type: dict :return: The url of current host + current view :rtype: string """ self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data) script_name = request_data['script_name'] if script_name: if script_name[0] != '/': script_name = '/' + script_name else: script_name = '' self_url_no_query = self_url_host + script_name if 'path_info' in request_data: self_url_no_query += request_data['path_info'] return self_url_no_query @staticmethod def get_self_routed_url_no_query(request_data): """ Returns the routed URL of the current host + current view. :param request_data: The request as a dict :type: dict :return: The url of current host + current view :rtype: string """ self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data) route = '' if 'request_uri' in request_data and request_data['request_uri']: route = request_data['request_uri'] if 'query_string' in request_data and request_data['query_string']: route = route.replace(request_data['query_string'], '') return self_url_host + route @staticmethod def get_self_url(request_data): """ Returns the URL of the current host + current view + query. :param request_data: The request as a dict :type: dict :return: The url of current host + current view + query :rtype: string """ self_url_host = OneLogin_Saml2_Utils.get_self_url_host(request_data) request_uri = '' if 'request_uri' in request_data: request_uri = request_data['request_uri'] if not request_uri.startswith('/'): match = re.search('^https?://[^/]*(/.*)', request_uri) if match is not None: request_uri = match.groups()[0] return self_url_host + request_uri @staticmethod def generate_unique_id(): """ Generates an unique string (used for example as ID for assertions). :return: A unique string :rtype: string """ return 'ONELOGIN_%s' % sha1(compat.to_bytes(uuid4().hex)).hexdigest() @staticmethod def parse_time_to_SAML(time): r""" Converts a UNIX timestamp to SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z. :param time: The time we should convert (DateTime). :type: string :return: SAML2 timestamp. :rtype: string """ data = datetime.utcfromtimestamp(float(time)) return data.strftime(OneLogin_Saml2_Utils.TIME_FORMAT) @staticmethod def parse_SAML_to_time(timestr): r""" Converts a SAML2 timestamp on the form yyyy-mm-ddThh:mm:ss(\.s+)?Z to a UNIX timestamp. The sub-second part is ignored. :param timestr: The time we should convert (SAML Timestamp). :type: string :return: Converted to a unix timestamp. :rtype: int """ try: data = datetime.strptime(timestr, OneLogin_Saml2_Utils.TIME_FORMAT) except ValueError: try: data = datetime.strptime(timestr, OneLogin_Saml2_Utils.TIME_FORMAT_2) except ValueError: elem = OneLogin_Saml2_Utils.TIME_FORMAT_WITH_FRAGMENT.match(timestr) if not elem: raise Exception("time data %s does not match format %s" % (timestr, r'yyyy-mm-ddThh:mm:ss(\.s+)?Z')) data = datetime.strptime(elem.groups()[0] + "Z", OneLogin_Saml2_Utils.TIME_FORMAT) return calendar.timegm(data.utctimetuple()) @staticmethod def now(): """ :return: unix timestamp of actual time. :rtype: int """ return calendar.timegm(datetime.utcnow().utctimetuple()) @staticmethod def parse_duration(duration, timestamp=None): """ Interprets a ISO8601 duration value relative to a given timestamp. :param duration: The duration, as a string. :type: string :param timestamp: The unix timestamp we should apply the duration to. Optional, default to the current time. :type: string :return: The new timestamp, after the duration is applied. :rtype: int """ assert isinstance(duration, compat.str_type) assert timestamp is None or isinstance(timestamp, int) timedelta = duration_parser(duration) if timestamp is None: data = datetime.utcnow() + timedelta else: data = datetime.utcfromtimestamp(timestamp) + timedelta return calendar.timegm(data.utctimetuple()) @staticmethod def get_expire_time(cache_duration=None, valid_until=None): """ Compares 2 dates and returns the earliest. :param cache_duration: The duration, as a string. :type: string :param valid_until: The valid until date, as a string or as a timestamp :type: string :return: The expiration time. :rtype: int """ expire_time = None if cache_duration is not None: expire_time = OneLogin_Saml2_Utils.parse_duration(cache_duration) if valid_until is not None: if isinstance(valid_until, int): valid_until_time = valid_until else: valid_until_time = OneLogin_Saml2_Utils.parse_SAML_to_time(valid_until) if expire_time is None or expire_time > valid_until_time: expire_time = valid_until_time if expire_time is not None: return '%d' % expire_time return None @staticmethod def delete_local_session(callback=None): """ Deletes the local session. """ if callback is not None: callback() @staticmethod def calculate_x509_fingerprint(x509_cert, alg='sha1'): """ Calculates the fingerprint of a formatted x509cert. :param x509_cert: x509 cert formatted :type: string :param alg: The algorithm to build the fingerprint :type: string :returns: fingerprint :rtype: string """ assert isinstance(x509_cert, compat.str_type) lines = x509_cert.split('\n') data = '' inData = False for line in lines: # Remove '\r' from end of line if present. line = line.rstrip() if not inData: if line == '-----BEGIN CERTIFICATE-----': inData = True elif line == '-----BEGIN PUBLIC KEY-----' or line == '-----BEGIN RSA PRIVATE KEY-----': # This isn't an X509 certificate. return None else: if line == '-----END CERTIFICATE-----': break # Append the current line to the certificate data. data += line if not data: return None decoded_data = base64.b64decode(compat.to_bytes(data)) if alg == 'sha512': fingerprint = sha512(decoded_data) elif alg == 'sha384': fingerprint = sha384(decoded_data) elif alg == 'sha256': fingerprint = sha256(decoded_data) else: fingerprint = sha1(decoded_data) return fingerprint.hexdigest().lower() @staticmethod def format_finger_print(fingerprint): """ Formats a fingerprint. :param fingerprint: fingerprint :type: string :returns: Formatted fingerprint :rtype: string """ formatted_fingerprint = fingerprint.replace(':', '') return formatted_fingerprint.lower() @staticmethod def generate_name_id(value, sp_nq, sp_format=None, cert=None, debug=False, nq=None): """ Generates a nameID. :param value: fingerprint :type: string :param sp_nq: SP Name Qualifier :type: string :param sp_format: SP Format :type: string :param cert: IdP Public Cert to encrypt the nameID :type: string :param debug: Activate the xmlsec debug :type: bool :returns: DOMElement | XMLSec nameID :rtype: string :param nq: IDP Name Qualifier :type: string """ root = OneLogin_Saml2_XML.make_root("{%s}container" % OneLogin_Saml2_Constants.NS_SAML) name_id = OneLogin_Saml2_XML.make_child(root, '{%s}NameID' % OneLogin_Saml2_Constants.NS_SAML) if sp_nq is not None: name_id.set('SPNameQualifier', sp_nq) if sp_format is not None: name_id.set('Format', sp_format) if nq is not None: name_id.set('NameQualifier', nq) name_id.text = value if cert is not None: xmlsec.enable_debug_trace(debug) # Load the public cert manager = xmlsec.KeysManager() manager.add_key(xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None)) # Prepare for encryption enc_data = xmlsec.template.encrypted_data_create( root, xmlsec.Transform.AES128, type=xmlsec.EncryptionType.ELEMENT, ns="xenc") xmlsec.template.encrypted_data_ensure_cipher_value(enc_data) key_info = xmlsec.template.encrypted_data_ensure_key_info(enc_data, ns="dsig") enc_key = xmlsec.template.add_encrypted_key(key_info, xmlsec.Transform.RSA_OAEP) xmlsec.template.encrypted_data_ensure_cipher_value(enc_key) # Encrypt! enc_ctx = xmlsec.EncryptionContext(manager) enc_ctx.key = xmlsec.Key.generate(xmlsec.KeyData.AES, 128, xmlsec.KeyDataType.SESSION) enc_data = enc_ctx.encrypt_xml(enc_data, name_id) return '' + compat.to_string(OneLogin_Saml2_XML.to_string(enc_data)) + '' else: return OneLogin_Saml2_XML.extract_tag_text(root, "saml:NameID") @staticmethod def get_status(dom): """ Gets Status from a Response. :param dom: The Response as XML :type: Document :returns: The Status, an array with the code and a message. :rtype: dict """ status = {} status_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status') if len(status_entry) != 1: raise OneLogin_Saml2_ValidationError( 'Missing Status on response', OneLogin_Saml2_ValidationError.MISSING_STATUS ) code_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusCode', status_entry[0]) if len(code_entry) != 1: raise OneLogin_Saml2_ValidationError( 'Missing Status Code on response', OneLogin_Saml2_ValidationError.MISSING_STATUS_CODE ) code = code_entry[0].values()[0] status['code'] = code status['msg'] = '' message_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusMessage', status_entry[0]) if len(message_entry) == 0: subcode_entry = OneLogin_Saml2_XML.query(dom, '/samlp:Response/samlp:Status/samlp:StatusCode/samlp:StatusCode', status_entry[0]) if len(subcode_entry) == 1: status['msg'] = subcode_entry[0].values()[0] elif len(message_entry) == 1: status['msg'] = OneLogin_Saml2_XML.element_text(message_entry[0]) return status @staticmethod def decrypt_element(encrypted_data, key, debug=False, inplace=False): """ Decrypts an encrypted element. :param encrypted_data: The encrypted data. :type: lxml.etree.Element | DOMElement | basestring :param key: The key. :type: string :param debug: Activate the xmlsec debug :type: bool :param inplace: update passed data with decrypted result :type: bool :returns: The decrypted element. :rtype: lxml.etree.Element """ if isinstance(encrypted_data, Element): encrypted_data = OneLogin_Saml2_XML.to_etree(str(encrypted_data.toxml())) if not inplace and isinstance(encrypted_data, OneLogin_Saml2_XML._element_class): encrypted_data = deepcopy(encrypted_data) elif isinstance(encrypted_data, OneLogin_Saml2_XML._text_class): encrypted_data = OneLogin_Saml2_XML._parse_etree(encrypted_data) xmlsec.enable_debug_trace(debug) manager = xmlsec.KeysManager() manager.add_key(xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None)) enc_ctx = xmlsec.EncryptionContext(manager) return enc_ctx.decrypt(encrypted_data) @staticmethod def add_sign(xml, key, cert, debug=False, sign_algorithm=OneLogin_Saml2_Constants.RSA_SHA256, digest_algorithm=OneLogin_Saml2_Constants.SHA256): """ Adds signature key and senders certificate to an element (Message or Assertion). :param xml: The element we should sign :type: string | Document :param key: The private key :type: string :param cert: The public :type: string :param debug: Activate the xmlsec debug :type: bool :param sign_algorithm: Signature algorithm method :type sign_algorithm: string :param digest_algorithm: Digest algorithm method :type digest_algorithm: string :returns: Signed XML :rtype: string """ if xml is None or xml == '': raise Exception('Empty string supplied as input') elem = OneLogin_Saml2_XML.to_etree(xml) sign_algorithm_transform_map = { OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256, OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384, OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512 } sign_algorithm_transform = sign_algorithm_transform_map.get(sign_algorithm, xmlsec.Transform.RSA_SHA256) signature = xmlsec.template.create(elem, xmlsec.Transform.EXCL_C14N, sign_algorithm_transform, ns='ds') issuer = OneLogin_Saml2_XML.query(elem, '//saml:Issuer') if len(issuer) > 0: issuer = issuer[0] issuer.addnext(signature) elem_to_sign = issuer.getparent() else: entity_descriptor = OneLogin_Saml2_XML.query(elem, '//md:EntityDescriptor') if len(entity_descriptor) > 0: elem.insert(0, signature) else: elem[0].insert(0, signature) elem_to_sign = elem elem_id = elem_to_sign.get('ID', None) if elem_id is not None: if elem_id: elem_id = '#' + elem_id else: generated_id = generated_id = OneLogin_Saml2_Utils.generate_unique_id() elem_id = '#' + generated_id elem_to_sign.attrib['ID'] = generated_id xmlsec.enable_debug_trace(debug) xmlsec.tree.add_ids(elem_to_sign, ["ID"]) digest_algorithm_transform_map = { OneLogin_Saml2_Constants.SHA1: xmlsec.Transform.SHA1, OneLogin_Saml2_Constants.SHA256: xmlsec.Transform.SHA256, OneLogin_Saml2_Constants.SHA384: xmlsec.Transform.SHA384, OneLogin_Saml2_Constants.SHA512: xmlsec.Transform.SHA512 } digest_algorithm_transform = digest_algorithm_transform_map.get(digest_algorithm, xmlsec.Transform.SHA256) ref = xmlsec.template.add_reference(signature, digest_algorithm_transform, uri=elem_id) xmlsec.template.add_transform(ref, xmlsec.Transform.ENVELOPED) xmlsec.template.add_transform(ref, xmlsec.Transform.EXCL_C14N) key_info = xmlsec.template.ensure_key_info(signature) xmlsec.template.add_x509_data(key_info) dsig_ctx = xmlsec.SignatureContext() sign_key = xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None) sign_key.load_cert_from_memory(cert, xmlsec.KeyFormat.PEM) dsig_ctx.key = sign_key dsig_ctx.sign(signature) return OneLogin_Saml2_XML.to_string(elem) @staticmethod @return_false_on_exception def validate_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False, xpath=None, multicerts=None): """ Validates a signature (Message or Assertion). :param xml: The element we should validate :type: string | Document :param cert: The public cert :type: string :param fingerprint: The fingerprint of the public cert :type: string :param fingerprintalg: The algorithm used to build the fingerprint :type: string :param validatecert: If true, will verify the signature and if the cert is valid. :type: bool :param debug: Activate the xmlsec debug :type: bool :param xpath: The xpath of the signed element :type: string :param multicerts: Multiple public certs :type: list :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean """ if xml is None or xml == '': raise Exception('Empty string supplied as input') elem = OneLogin_Saml2_XML.to_etree(xml) xmlsec.enable_debug_trace(debug) xmlsec.tree.add_ids(elem, ["ID"]) if xpath: signature_nodes = OneLogin_Saml2_XML.query(elem, xpath) else: signature_nodes = OneLogin_Saml2_XML.query(elem, OneLogin_Saml2_Utils.RESPONSE_SIGNATURE_XPATH) if len(signature_nodes) == 0: signature_nodes = OneLogin_Saml2_XML.query(elem, OneLogin_Saml2_Utils.ASSERTION_SIGNATURE_XPATH) if len(signature_nodes) == 1: signature_node = signature_nodes[0] if not multicerts: return OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, debug, raise_exceptions=True) else: # If multiple certs are provided, I may ignore cert and # fingerprint provided by the method and just check the # certs multicerts fingerprint = fingerprintalg = None for cert in multicerts: if OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, False, raise_exceptions=False): return True raise OneLogin_Saml2_ValidationError( 'Signature validation failed. SAML Response rejected.', OneLogin_Saml2_ValidationError.INVALID_SIGNATURE ) else: raise OneLogin_Saml2_ValidationError( 'Expected exactly one signature node; got {}.'.format(len(signature_nodes)), OneLogin_Saml2_ValidationError.WRONG_NUMBER_OF_SIGNATURES ) @staticmethod @return_false_on_exception def validate_metadata_sign(xml, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False): """ Validates a signature of a EntityDescriptor. :param xml: The element we should validate :type: string | Document :param cert: The public cert :type: string :param fingerprint: The fingerprint of the public cert :type: string :param fingerprintalg: The algorithm used to build the fingerprint :type: string :param validatecert: If true, will verify the signature and if the cert is valid. :type: bool :param debug: Activate the xmlsec debug :type: bool :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean """ if xml is None or xml == '': raise Exception('Empty string supplied as input') elem = OneLogin_Saml2_XML.to_etree(xml) xmlsec.enable_debug_trace(debug) xmlsec.tree.add_ids(elem, ["ID"]) signature_nodes = OneLogin_Saml2_XML.query(elem, '/md:EntitiesDescriptor/ds:Signature') if len(signature_nodes) == 0: signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/ds:Signature') if len(signature_nodes) == 0: signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/md:SPSSODescriptor/ds:Signature') signature_nodes += OneLogin_Saml2_XML.query(elem, '/md:EntityDescriptor/md:IDPSSODescriptor/ds:Signature') if len(signature_nodes) > 0: for signature_node in signature_nodes: # Raises exception if invalid OneLogin_Saml2_Utils.validate_node_sign(signature_node, elem, cert, fingerprint, fingerprintalg, validatecert, debug, raise_exceptions=True) return True else: raise Exception('Could not validate metadata signature: No signature nodes found.') @staticmethod @return_false_on_exception def validate_node_sign(signature_node, elem, cert=None, fingerprint=None, fingerprintalg='sha1', validatecert=False, debug=False): """ Validates a signature node. :param signature_node: The signature node :type: Node :param xml: The element we should validate :type: Document :param cert: The public cert :type: string :param fingerprint: The fingerprint of the public cert :type: string :param fingerprintalg: The algorithm used to build the fingerprint :type: string :param validatecert: If true, will verify the signature and if the cert is valid. :type: bool :param debug: Activate the xmlsec debug :type: bool :param raise_exceptions: Whether to return false on failure or raise an exception :type raise_exceptions: Boolean """ if (cert is None or cert == '') and fingerprint: x509_certificate_nodes = OneLogin_Saml2_XML.query(signature_node, '//ds:Signature/ds:KeyInfo/ds:X509Data/ds:X509Certificate') if len(x509_certificate_nodes) > 0: x509_certificate_node = x509_certificate_nodes[0] x509_cert_value = OneLogin_Saml2_XML.element_text(x509_certificate_node) x509_cert_value_formatted = OneLogin_Saml2_Utils.format_cert(x509_cert_value) x509_fingerprint_value = OneLogin_Saml2_Utils.calculate_x509_fingerprint(x509_cert_value_formatted, fingerprintalg) if fingerprint == x509_fingerprint_value: cert = x509_cert_value_formatted if cert is None or cert == '': raise OneLogin_Saml2_Error( 'Could not validate node signature: No certificate provided.', OneLogin_Saml2_Error.CERT_NOT_FOUND ) # Check if Reference URI is empty # reference_elem = OneLogin_Saml2_XML.query(signature_node, '//ds:Reference') # if len(reference_elem) > 0: # if reference_elem[0].get('URI') == '': # reference_elem[0].set('URI', '#%s' % signature_node.getparent().get('ID')) if validatecert: manager = xmlsec.KeysManager() manager.load_cert_from_memory(cert, xmlsec.KeyFormat.CERT_PEM, xmlsec.KeyDataType.TRUSTED) dsig_ctx = xmlsec.SignatureContext(manager) else: dsig_ctx = xmlsec.SignatureContext() dsig_ctx.key = xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None) dsig_ctx.set_enabled_key_data([xmlsec.KeyData.X509]) try: dsig_ctx.verify(signature_node) except Exception as err: raise OneLogin_Saml2_ValidationError( 'Signature validation failed. SAML Response rejected. %s', OneLogin_Saml2_ValidationError.INVALID_SIGNATURE, str(err) ) return True @staticmethod def sign_binary(msg, key, algorithm=xmlsec.Transform.RSA_SHA256, debug=False): """ Sign binary message :param msg: The element we should validate :type: bytes :param key: The private key :type: string :param debug: Activate the xmlsec debug :type: bool :return signed message :rtype str """ if isinstance(msg, str): msg = msg.encode('utf8') xmlsec.enable_debug_trace(debug) dsig_ctx = xmlsec.SignatureContext() dsig_ctx.key = xmlsec.Key.from_memory(key, xmlsec.KeyFormat.PEM, None) return dsig_ctx.sign_binary(compat.to_bytes(msg), algorithm) @staticmethod def validate_binary_sign(signed_query, signature, cert=None, algorithm=OneLogin_Saml2_Constants.RSA_SHA256, debug=False): """ Validates signed binary data (Used to validate GET Signature). :param signed_query: The element we should validate :type: string :param signature: The signature that will be validate :type: string :param cert: The public cert :type: string :param algorithm: Signature algorithm :type: string :param debug: Activate the xmlsec debug :type: bool """ try: xmlsec.enable_debug_trace(debug) dsig_ctx = xmlsec.SignatureContext() dsig_ctx.key = xmlsec.Key.from_memory(cert, xmlsec.KeyFormat.CERT_PEM, None) sign_algorithm_transform_map = { OneLogin_Saml2_Constants.DSA_SHA1: xmlsec.Transform.DSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA1: xmlsec.Transform.RSA_SHA1, OneLogin_Saml2_Constants.RSA_SHA256: xmlsec.Transform.RSA_SHA256, OneLogin_Saml2_Constants.RSA_SHA384: xmlsec.Transform.RSA_SHA384, OneLogin_Saml2_Constants.RSA_SHA512: xmlsec.Transform.RSA_SHA512 } sign_algorithm_transform = sign_algorithm_transform_map.get(algorithm, xmlsec.Transform.RSA_SHA256) dsig_ctx.verify_binary(compat.to_bytes(signed_query), sign_algorithm_transform, compat.to_bytes(signature)) return True except xmlsec.Error as e: if debug: print(e) return False @staticmethod def normalize_url(url): """ Returns normalized URL for comparison. This method converts the netloc to lowercase, as it should be case-insensitive (per RFC 4343, RFC 7617) If standardization fails, the original URL is returned Python documentation indicates that URL split also normalizes query strings if empty query fields are present :param url: URL :type url: String :returns: A normalized URL, or the given URL string if parsing fails :rtype: String """ try: scheme, netloc, path, query, fragment = urlsplit(url) normalized_url = urlunsplit((scheme.lower(), netloc.lower(), path, query, fragment)) return normalized_url except Exception: return url python3-saml-1.16.0/src/onelogin/saml2/xml_templates.py000066400000000000000000000127421451074743100230200ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_Auth class Main class of SAML Python Toolkit. Initializes the SP SAML instance """ class OneLogin_Saml2_Templates(object): ATTRIBUTE = """ %s """ AUTHN_REQUEST = """\ %(entity_id)s%(subject_str)s%(nameid_policy_str)s %(requested_authn_context_str)s """ LOGOUT_REQUEST = """\ %(entity_id)s %(name_id)s %(session_index)s """ LOGOUT_RESPONSE = """\ %(entity_id)s """ MD_CONTACT_PERSON = """\ %(name)s %(email)s """ MD_SLS = """\ \n""" MD_REQUESTED_ATTRIBUTE = """\ %(service_name)s %(attr_cs_desc)s%(requested_attribute_str)s \n""" MD_ENTITY_DESCRIPTOR = """\ %(sls)s %(name_id_format)s %(attribute_consuming_service)s %(organization)s %(contacts)s """ MD_ORGANISATION = """\ %(name)s %(display_name)s %(url)s """ RESPONSE = """\ %(entity_id)s %(entity_id)s %(name_id)s %(requester)s %(authn_context)s %(attributes)s """ python3-saml-1.16.0/src/onelogin/saml2/xml_utils.py000066400000000000000000000134141451074743100221570ustar00rootroot00000000000000# -*- coding: utf-8 -*- """ OneLogin_Saml2_XML class Auxiliary class of SAML Python Toolkit. """ from os.path import join, dirname from lxml import etree from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.xmlparser import tostring, fromstring for prefix, url in OneLogin_Saml2_Constants.NSMAP.items(): etree.register_namespace(prefix, url) class OneLogin_Saml2_XML(object): _element_class = type(etree.Element('root')) _parse_etree = staticmethod(fromstring) _schema_class = etree.XMLSchema _text_class = compat.text_types _bytes_class = compat.bytes_type _unparse_etree = staticmethod(tostring) dump = staticmethod(etree.dump) make_root = staticmethod(etree.Element) make_child = staticmethod(etree.SubElement) @staticmethod def to_string(xml, **kwargs): """ Serialize an element to an encoded string representation of its XML tree. :param xml: The root node :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :returns: string representation of xml :rtype: string """ if isinstance(xml, OneLogin_Saml2_XML._text_class): return xml if isinstance(xml, OneLogin_Saml2_XML._element_class): OneLogin_Saml2_XML.cleanup_namespaces(xml) return OneLogin_Saml2_XML._unparse_etree(xml, **kwargs) raise ValueError("unsupported type %r" % type(xml)) @staticmethod def to_etree(xml): """ Parses an XML document or fragment from a string. :param xml: the string to parse :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :returns: the root node :rtype: OneLogin_Saml2_XML._element_class """ if isinstance(xml, OneLogin_Saml2_XML._element_class): return xml if isinstance(xml, OneLogin_Saml2_XML._bytes_class): return OneLogin_Saml2_XML._parse_etree(xml, forbid_dtd=True, forbid_entities=True) if isinstance(xml, OneLogin_Saml2_XML._text_class): return OneLogin_Saml2_XML._parse_etree(compat.to_bytes(xml), forbid_dtd=True, forbid_entities=True) raise ValueError('unsupported type %r' % type(xml)) @staticmethod def validate_xml(xml, schema, debug=False): """ Validates a xml against a schema :param xml: The xml that will be validated :type xml: str|bytes|xml.dom.minidom.Document|etree.Element :param schema: The schema :type schema: string :param debug: If debug is active, the parse-errors will be showed :type debug: bool :returns: Error code or the DomDocument of the xml :rtype: xml.dom.minidom.Document """ assert isinstance(schema, compat.str_type) try: xml = OneLogin_Saml2_XML.to_etree(xml) except Exception as e: if debug: print(e) return 'unloaded_xml' schema_file = join(dirname(__file__), 'schemas', schema) with open(schema_file, 'r') as f_schema: xmlschema = OneLogin_Saml2_XML._schema_class(etree.parse(f_schema)) if not xmlschema.validate(xml): if debug: print('Errors validating the metadata: ') for error in xmlschema.error_log: print(error.message) return 'invalid_xml' return xml @staticmethod def query(dom, query, context=None, tagid=None): """ Extracts nodes that match the query from the Element :param dom: The root of the lxml objet :type: Element :param query: Xpath Expresion :type: string :param context: Context Node :type: DOMElement :param tagid: Tag ID :type query: String :returns: The queried nodes :rtype: list """ if context is None: source = dom else: source = context if tagid is None: return source.xpath(query, namespaces=OneLogin_Saml2_Constants.NSMAP) else: return source.xpath(query, tagid=tagid, namespaces=OneLogin_Saml2_Constants.NSMAP) @staticmethod def cleanup_namespaces(tree_or_element, top_nsmap=None, keep_ns_prefixes=None): """ Keeps the xmlns:xs namespace intact when etree.cleanup_namespaces is invoked. :param tree_or_element: An XML tree or element :type tree_or_element: etree.Element :param top_nsmap: A mapping from namespace prefixes to namespace URIs :type top_nsmap: dict :param keep_ns_prefixes: List of prefixes that should not be removed as part of the cleanup :type keep_ns_prefixes: list :returns: An XML tree or element :rtype: etree.Element """ all_prefixes_to_keep = [ OneLogin_Saml2_Constants.NS_PREFIX_XS, OneLogin_Saml2_Constants.NS_PREFIX_XSI, OneLogin_Saml2_Constants.NS_PREFIX_XSD ] if keep_ns_prefixes: all_prefixes_to_keep = list(set(all_prefixes_to_keep.extend(keep_ns_prefixes))) return etree.cleanup_namespaces(tree_or_element, keep_ns_prefixes=all_prefixes_to_keep) @staticmethod def extract_tag_text(xml, tagname): open_tag = compat.to_bytes("<%s" % tagname) close_tag = compat.to_bytes("" % tagname) xml = OneLogin_Saml2_XML.to_string(xml) start = xml.find(open_tag) assert start != -1 end = xml.find(close_tag, start) + len(close_tag) assert end != -1 return compat.to_string(xml[start:end]) @staticmethod def element_text(node): # Double check, the LXML Parser already removes comments etree.strip_tags(node, etree.Comment) return node.text python3-saml-1.16.0/src/onelogin/saml2/xmlparser.py000066400000000000000000000132721451074743100221560ustar00rootroot00000000000000# -*- coding: utf-8 -*- # Based on the lxml example from defusedxml # DTDForbidden, EntitiesForbidden, NotSupportedError are clones of the classes defined at defusedxml # # Copyright (c) 2013 by Christian Heimes # Licensed to PSF under a Contributor Agreement. # See https://www.python.org/psf/license for licensing details. """lxml.etree protection""" from __future__ import print_function, absolute_import import threading from lxml import etree as _etree LXML3 = _etree.LXML_VERSION[0] >= 3 __origin__ = "lxml.etree" tostring = _etree.tostring class DTDForbidden(ValueError): """Document type definition is forbidden """ def __init__(self, name, sysid, pubid): super(DTDForbidden, self).__init__() self.name = name self.sysid = sysid self.pubid = pubid def __str__(self): tpl = "DTDForbidden(name='{}', system_id={!r}, public_id={!r})" return tpl.format(self.name, self.sysid, self.pubid) class EntitiesForbidden(ValueError): """Entity definition is forbidden """ def __init__(self, name, value, base, sysid, pubid, notation_name): super(EntitiesForbidden, self).__init__() self.name = name self.value = value self.base = base self.sysid = sysid self.pubid = pubid self.notation_name = notation_name def __str__(self): tpl = "EntitiesForbidden(name='{}', system_id={!r}, public_id={!r})" return tpl.format(self.name, self.sysid, self.pubid) class NotSupportedError(ValueError): """The operation is not supported """ class RestrictedElement(_etree.ElementBase): """A restricted Element class that filters out instances of some classes """ __slots__ = () blacklist = (_etree._Entity, _etree._ProcessingInstruction, _etree._Comment) def _filter(self, iterator): blacklist = self.blacklist for child in iterator: if isinstance(child, blacklist): continue yield child def __iter__(self): iterator = super(RestrictedElement, self).__iter__() return self._filter(iterator) def iterchildren(self, tag=None, reversed=False): iterator = super(RestrictedElement, self).iterchildren(tag=tag, reversed=reversed) return self._filter(iterator) def iter(self, tag=None, *tags): iterator = super(RestrictedElement, self).iter(tag=tag, *tags) return self._filter(iterator) def iterdescendants(self, tag=None, *tags): iterator = super(RestrictedElement, self).iterdescendants(tag=tag, *tags) return self._filter(iterator) def itersiblings(self, tag=None, preceding=False): iterator = super(RestrictedElement, self).itersiblings(tag=tag, preceding=preceding) return self._filter(iterator) def getchildren(self): iterator = super(RestrictedElement, self).__iter__() return list(self._filter(iterator)) def getiterator(self, tag=None): iterator = super(RestrictedElement, self).getiterator(tag) return self._filter(iterator) class GlobalParserTLS(threading.local): """Thread local context for custom parser instances """ parser_config = { "resolve_entities": False, 'remove_comments': True, 'no_network': True, 'remove_pis': True, 'huge_tree': False } element_class = RestrictedElement def createDefaultParser(self): parser = _etree.XMLParser(**self.parser_config) element_class = self.element_class if self.element_class is not None: lookup = _etree.ElementDefaultClassLookup(element=element_class) parser.set_element_class_lookup(lookup) return parser def setDefaultParser(self, parser): self._default_parser = parser def getDefaultParser(self): parser = getattr(self, "_default_parser", None) if parser is None: parser = self.createDefaultParser() self.setDefaultParser(parser) return parser _parser_tls = GlobalParserTLS() getDefaultParser = _parser_tls.getDefaultParser def check_docinfo(elementtree, forbid_dtd=False, forbid_entities=True): """Check docinfo of an element tree for DTD and entity declarations The check for entity declarations needs lxml 3 or newer. lxml 2.x does not support dtd.iterentities(). """ docinfo = elementtree.docinfo if docinfo.doctype: if forbid_dtd: raise DTDForbidden(docinfo.doctype, docinfo.system_url, docinfo.public_id) if forbid_entities and not LXML3: # lxml < 3 has no iterentities() raise NotSupportedError("Unable to check for entity declarations " "in lxml 2.x") if forbid_entities: for dtd in docinfo.internalDTD, docinfo.externalDTD: if dtd is None: continue for entity in dtd.iterentities(): raise EntitiesForbidden(entity.name, entity.content, None, None, None, None) def parse(source, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True): if parser is None: parser = getDefaultParser() elementtree = _etree.parse(source, parser, base_url=base_url) check_docinfo(elementtree, forbid_dtd, forbid_entities) return elementtree def fromstring(text, parser=None, base_url=None, forbid_dtd=True, forbid_entities=True): if parser is None: parser = getDefaultParser() rootelement = _etree.fromstring(text, parser, base_url=base_url) elementtree = rootelement.getroottree() check_docinfo(elementtree, forbid_dtd, forbid_entities) return rootelement XML = fromstring def iterparse(*args, **kwargs): raise NotSupportedError("iterparse not available") python3-saml-1.16.0/tests/000077500000000000000000000000001451074743100153055ustar00rootroot00000000000000python3-saml-1.16.0/tests/__init__.py000066400000000000000000000000001451074743100174040ustar00rootroot00000000000000python3-saml-1.16.0/tests/certs/000077500000000000000000000000001451074743100164255ustar00rootroot00000000000000python3-saml-1.16.0/tests/certs/certificate1000066400000000000000000000012041451074743100207100ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIBrTCCAaGgAwIBAgIBATADBgEAMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApD YWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9uZUxv Z2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMB4XDTEwMTAxMTIxMTUxMloX DTE1MTAxMTIxMTUxMlowZzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3Ju aWExFTATBgNVBAcMDFNhbnRhIE1vbmljYTERMA8GA1UECgwIT25lTG9naW4xGTAX BgNVBAMMEGFwcC5vbmVsb2dpbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ AoGBAMPmjfjy7L35oDpeBXBoRVCgktPkLno9DOEWB7MgYMMVKs2B6ymWQLEWrDug MK1hkzWFhIb5fqWLGbWy0J0veGR9/gHOQG+rD/I36xAXnkdiXXhzoiAG/zQxM0ed MOUf40n314FC8moErcUg6QabttzesO59HFz6shPuxcWaVAgxAgMBAAEwAwYBAAMB AA== -----END CERTIFICATE----- python3-saml-1.16.0/tests/coverage.rc000066400000000000000000000010461451074743100174270ustar00rootroot00000000000000[run] branch = True omit = [paths] source = src/onelogin/saml2 [report] # Regexes for lines to exclude from consideration exclude_lines = # Have to re-enable the standard pragma pragma: no cover # Don't complain about missing debug-only code: def __repr__ if self\.debug if debug # Don't complain if tests don't hit defensive assertion code: raise AssertionError raise NotImplementedError # Don't complain if non-runnable code isn't run: if 0: if __name__ == .__main__.: ignore_errors = True python3-saml-1.16.0/tests/data/000077500000000000000000000000001451074743100162165ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/customPath/000077500000000000000000000000001451074743100203455ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/customPath/advanced_settings.json000066400000000000000000000011121451074743100247200ustar00rootroot00000000000000{ "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/data/customPath/certs/000077500000000000000000000000001451074743100214655ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/customPath/certs/idp.crt000066400000000000000000000016371451074743100227620ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMC Tk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYD VQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG 9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4 MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xi ZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2Zl aWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5v MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LO NoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHIS KOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d 1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8 BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7n bK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2Qar Q4/67OZfHd7R+POBXhophSMv1ZOo -----END CERTIFICATE-----python3-saml-1.16.0/tests/data/customPath/certs/metadata.crt000077500000000000000000000016401451074743100237630ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMC Tk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYD VQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG 9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4 MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xi ZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2Zl aWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5v MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LO NoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHIS KOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d 1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8 BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7n bK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2Qar Q4/67OZfHd7R+POBXhophSMv1ZOo -----END CERTIFICATE----- python3-saml-1.16.0/tests/data/customPath/certs/metadata.key000077500000000000000000000015731451074743100237700ustar00rootroot00000000000000-----BEGIN RSA PRIVATE KEY----- MIICXgIBAAKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9 IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+ PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQAB AoGAD4/Z4LWVWV6D1qMIp1Gzr0ZmdWTE1SPdZ7Ej8glGnCzPdguCPuzbhGXmIg0V J5D+02wsqws1zd48JSMXXM8zkYZVwQYIPUsNn5FetQpwxDIMPmhHg+QNBgwOnk8J K2sIjjLPL7qY7Itv7LT7Gvm5qSOkZ33RCgXcgz+okEIQMYkCQQDzbTOyDL0c5WQV 6A2k06T/azdhUdGXF9C0+WkWSfNaovmTgRXh1G+jMlr82Snz4p4/STt7P/XtyWzF 3pkVgZr3AkEA7nPjXwHlttNEMo6AtxHd47nizK2NUN803ElIUT8P9KSCoERmSXq6 6PDekGNic4ldpsSvOeYCk8MAYoDBy9kvVwJBAMLgX4xg6lzhv7hR5+pWjTb1rIY6 rCHbrPfU264+UZXz9v2BT/VUznLF81WMvStD9xAPHpFS6R0OLghSZhdzhI0CQQDL 8Duvfxzrn4b9QlmduV8wLERoT6rEVxKLsPVz316TGrxJvBZLk/cV0SRZE1cZf4uk XSWMfEcJ/0Zt+LdG1CqjAkEAqwLSglJ9Dy3HpgMz4vAAyZWzAxvyA1zW0no9GOLc PQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aMg== -----END RSA PRIVATE KEY----- python3-saml-1.16.0/tests/data/customPath/certs/sp.crt000077500000000000000000000016401451074743100226250ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMC Tk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYD VQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG 9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4 MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xi ZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2Zl aWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5v MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LO NoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHIS KOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d 1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8 BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7n bK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2Qar Q4/67OZfHd7R+POBXhophSMv1ZOo -----END CERTIFICATE----- python3-saml-1.16.0/tests/data/customPath/certs/sp.key000077500000000000000000000015731451074743100226320ustar00rootroot00000000000000-----BEGIN RSA PRIVATE KEY----- MIICXgIBAAKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9 IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+ PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQAB AoGAD4/Z4LWVWV6D1qMIp1Gzr0ZmdWTE1SPdZ7Ej8glGnCzPdguCPuzbhGXmIg0V J5D+02wsqws1zd48JSMXXM8zkYZVwQYIPUsNn5FetQpwxDIMPmhHg+QNBgwOnk8J K2sIjjLPL7qY7Itv7LT7Gvm5qSOkZ33RCgXcgz+okEIQMYkCQQDzbTOyDL0c5WQV 6A2k06T/azdhUdGXF9C0+WkWSfNaovmTgRXh1G+jMlr82Snz4p4/STt7P/XtyWzF 3pkVgZr3AkEA7nPjXwHlttNEMo6AtxHd47nizK2NUN803ElIUT8P9KSCoERmSXq6 6PDekGNic4ldpsSvOeYCk8MAYoDBy9kvVwJBAMLgX4xg6lzhv7hR5+pWjTb1rIY6 rCHbrPfU264+UZXz9v2BT/VUznLF81WMvStD9xAPHpFS6R0OLghSZhdzhI0CQQDL 8Duvfxzrn4b9QlmduV8wLERoT6rEVxKLsPVz316TGrxJvBZLk/cV0SRZE1cZf4uk XSWMfEcJ/0Zt+LdG1CqjAkEAqwLSglJ9Dy3HpgMz4vAAyZWzAxvyA1zW0no9GOLc PQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aMg== -----END RSA PRIVATE KEY----- python3-saml-1.16.0/tests/data/customPath/settings.json000077700000000000000000000000001451074743100301752../../settings/settings1.jsonustar00rootroot00000000000000python3-saml-1.16.0/tests/data/logout_requests/000077500000000000000000000000001451074743100214625ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/logout_requests/invalids/000077500000000000000000000000001451074743100232735ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/logout_requests/invalids/invalid_issuer.xml000066400000000000000000000014651451074743100270430ustar00rootroot00000000000000 https://example.hello.com/access/saml ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c python3-saml-1.16.0/tests/data/logout_requests/invalids/invalid_issuer.xml.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 python3-saml-1.16.0/tests/data/logout_requests/invalids/no_nameId.xml000066400000000000000000000011121451074743100257010ustar00rootroot00000000000000 https://example.hello.com/access/saml python3-saml-1.16.0/tests/data/logout_requests/invalids/not_after_failed.xml000066400000000000000000000014311451074743100273010ustar00rootroot00000000000000 http://idp.example.com/ ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c python3-saml-1.16.0/tests/data/logout_requests/invalids/not_after_failed.xml.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-saml-1.16.0/tests/data/logout_requests/logout_request.xml000066400000000000000000000013401451074743100252630ustar00rootroot00000000000000 http://idp.example.com/ ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c python3-saml-1.16.0/tests/data/logout_requests/logout_request.xml.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-saml-1.16.0/tests/data/logout_requests/logout_request_deflated.xml.base64000066400000000000000000000007301451074743100302000ustar00rootroot00000000000000fZJNT4NAEIbvTfofCPfCLh8VNi2NSdWQ1Fat8eDFrMtgSWB3ZRbTny+ltTYG3NNkduaZj3dmi31VWl9QY6Hk3KYOsRfJeDRDXpWardSHaswTfDaAxmojJbLuZ243tWSKY4FM8gqQGcG21/cr5jmE6VoZJVRpj0dW3/sF/c/hiFCbtrEhULqc25v1zWpzl67fPBpGgRBZzgX3p5wGIYc4JkHgZSKLp+85TAkNKQzBXn6W0JYeLIjYQCrRcGnaQEL9CfUmlDyTgPkx8+nrUOay3WAhuekq7IzRzHXRNHnuCFW5IDOtCmnwwsISHb3TQ8Dk6O+UYl1fdXLiFpl2YM8rXUJHn7mXQZd563bn6dLaPhyMx4aXRV5AfW7wL6ivl1tVV9wMC0kd2nmKbJJ3oayRqEEcKmV9wOSsKIVWPEG9GGgeeZ6ISDwlUSstJb4IATxxJThQcZrvOMzhet2e802+AQ==python3-saml-1.16.0/tests/data/logout_requests/logout_request_encrypted_nameid.xml000066400000000000000000000036501451074743100306630ustar00rootroot00000000000000 http://stuff.com/endpoints/metadata.php Dqhp3WPaoV7i2ry6ZywsfTa0ctWf9a37+BTPLlIycvpRqSObwvBoEGCezXpxUaMTNcFp6p7qSzyGpAbf/h3Qowt1gQqhTn04ofGOwXoMD21Pr5DCbjs9roU005DExjLCFKbf5P3de8QZh5Lcz3dVBU3y1Kc6wku/RuD/HfYBy7g= h1PDxhhKkO/IyIb4G5JFoHnBhaNj7n8fh8jqjHhFkRZtwpS/9HXENF3R+1F6XeHs3YfhbLJDHJroQPJwh4PjRUQnPYHdH5YbriR59VI0H9DoMWaJvd9wEMnH6FniXak9npP8BFPhV0uW1r3ynZ8mfn6DkBzC/IORRsmDrQv3IAcp+3J/rRui51ccH60xkff4dWsBYHBIHspuDNz8EU02Ho+hSayN3x1e4WuSdIOF0SRkh4r1mQ00/q2PHExdxmHr4wLQe8DkBFmdt+FxuEpjOIzyWgdJ1TbvgfjBe7a10PiiPO3inMy29ObLo0l4fkHH python3-saml-1.16.0/tests/data/logout_requests/logout_request_with_encoding.xml000066400000000000000000000013611451074743100301670ustar00rootroot00000000000000 http://idp.example.com/ ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c python3-saml-1.16.0/tests/data/logout_requests/logout_request_with_sessionindex.xml000066400000000000000000000014671451074743100311230ustar00rootroot00000000000000 http://idp.example.com/ ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c _ac72a76526cb6ca19f8438e73879a0e6c8ae5131 python3-saml-1.16.0/tests/data/logout_responses/000077500000000000000000000000001451074743100216305ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/logout_responses/invalids/000077500000000000000000000000001451074743100234415ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/logout_responses/invalids/no_status.xml.base64000066400000000000000000000006051451074743100272660ustar00rootroot00000000000000fZLBasMwDIbvfYqSexM7TkxtmsKgYxS6Fraywy7FseU1kNgmcqCPvy7bWBnLdLJk+ft/Ia9QdW2QO//mh/gEGLxDmF+61qEcr6pk6J30ChuUTnWAMmr5fPe4k3lKZOh99Nq3yWz+Z/yA/ucoROhj490UaLupkpMVAJzWRpjacsYJt0oJBaympCyWpqwZL7mtl6WYwrxAj1eVKrmKTkohDrB1GJWL10ZC2YLmC0qOpJBMSEZfp15uAGPjVBwVzjEGmWUYB2tT7bsMnAm+cRFvTthiGs5h0or7XsnRV8lhf787PGz3p5yWy0JrY5VWjCtalAqEIEWRG20Ery1wQksKU9j1WF99rEWO0/brL7eNCSlcVBdaGD2vstum2Wf6+7us3wE= python3-saml-1.16.0/tests/data/logout_responses/invalids/status_code_responder.xml.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 python3-saml-1.16.0/tests/data/logout_responses/logout_response.xml000066400000000000000000000012751451074743100256060ustar00rootroot00000000000000 http://idp.example.com/ python3-saml-1.16.0/tests/data/logout_responses/logout_response.xml.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 python3-saml-1.16.0/tests/data/logout_responses/logout_response_deflated.xml.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 python3-saml-1.16.0/tests/data/logout_responses/logout_response_with_encoding.xml000066400000000000000000000013441451074743100305040ustar00rootroot00000000000000 http://idp.example.com/ python3-saml-1.16.0/tests/data/logout_responses/logout_response_with_encoding_deflated.xml.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 python3-saml-1.16.0/tests/data/metadata/000077500000000000000000000000001451074743100177765ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/metadata/entities_metadata.xml000066400000000000000000000147711451074743100242160ustar00rootroot00000000000000 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 python3-saml-1.16.0/tests/data/metadata/expired_metadata_settings1.xml000066400000000000000000000055551451074743100260330ustar00rootroot00000000000000 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 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/metadata/idp_metadata.xml000066400000000000000000000051631451074743100231410ustar00rootroot00000000000000 MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z 0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 1sE= urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress Support support@example.com python3-saml-1.16.0/tests/data/metadata/idp_metadata2.xml000066400000000000000000000047721451074743100232300ustar00rootroot00000000000000 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 urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress urn:oasis:names:tc:SAML:2.0:nameid-format:persistent urn:oasis:names:tc:SAML:2.0:nameid-format:transient python3-saml-1.16.0/tests/data/metadata/idp_metadata_different_sign_and_encrypt_cert.xml000066400000000000000000000105361451074743100316120ustar00rootroot00000000000000 MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z 0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 1sE= MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo 3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t 1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress Support support@example.com python3-saml-1.16.0/tests/data/metadata/idp_metadata_multi_certs.xml000066400000000000000000000122131451074743100255450ustar00rootroot00000000000000 MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo 3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t 1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== 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 MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo 3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t 1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== urn:oasis:names:tc:SAML:2.0:nameid-format:transient python3-saml-1.16.0/tests/data/metadata/idp_metadata_multi_signing_certs.xml000066400000000000000000000122111451074743100272610ustar00rootroot00000000000000 MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo 3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t 1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== 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 MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEF BQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJj aWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwW T25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUy MjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChz Z2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNV BAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo 3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRw tnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xx VRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5 L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t 1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCB pIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYD VQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQL DAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaC FD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0B AQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXM GI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65c hjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIB vlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37 MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZ WQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw== urn:oasis:names:tc:SAML:2.0:nameid-format:transient python3-saml-1.16.0/tests/data/metadata/idp_metadata_same_sign_and_encrypt_cert.xml000066400000000000000000000103751451074743100305720ustar00rootroot00000000000000 MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z 0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 1sE= MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzET MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYD VQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2 MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQI DApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9u ZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z 0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sT gf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0m Tr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SF zRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJ UAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNV HSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJV UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREw DwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAO BgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHu AuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcV gG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJ sTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClP TbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWu QOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh78 1sE= urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress Support support@example.com python3-saml-1.16.0/tests/data/metadata/idp_multiple_descriptors.xml000066400000000000000000000252421451074743100256350ustar00rootroot00000000000000 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 LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxekNDQXhTZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBRENCaGpFTE1Ba0dBMVVFQmhNQ1FWVXgKRERBS0JnTlZCQWdUQTA1VFZ6RVBNQTBHQTFVRUJ4TUdVM2xrYm1WNU1Rd3dDZ1lEVlFRS0RBTlFTVlF4Q1RBSApCZ05WQkFzTUFERVlNQllHQTFVRUF3d1BiR0YzY21WdVkyVndhWFF1WTI5dE1TVXdJd1lKS29aSWh2Y05BUWtCCkRCWnNZWGR5Wlc1alpTNXdhWFJBWjIxaGFXd3VZMjl0TUI0WERURXlNRFF4T1RJeU5UUXhPRm9YRFRNeU1EUXgKTkRJeU5UUXhPRm93Z1lZeEN6QUpCZ05WQkFZVEFrRlZNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVApCbE41Wkc1bGVURU1NQW9HQTFVRUNnd0RVRWxVTVFrd0J3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psCmJtTmxjR2wwTG1OdmJURWxNQ01HQ1NxR1NJYjNEUUVKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnYKYlRDQm56QU5CZ2txaGtpRzl3MEJBUUVGQUFPQmpRQXdnWWtDZ1lFQXFqaWUzUjJvaStwRGFldndJeXMvbWJVVApubkdsa3h0ZGlrcnExMXZleHd4SmlQTmhtaHFSVzNtVXVKRXpsbElkVkw2RW14R1lUcXBxZjkzSGxoa3NhZUowCjhVZ2pQOVVtTVlyaFZKdTFqY0ZXVjdmei9yKzIxL2F3VG5EVjlzTVlRcXVJUllZeTdiRzByMU9iaXdkb3ZudGsKN2dGSTA2WjB2WmFjREU1Ym9xVUNBd0VBQWFPQ0FTVXdnZ0VoTUFrR0ExVWRFd1FDTUFBd0N3WURWUjBQQkFRRApBZ1VnTUIwR0ExVWREZ1FXQkJTUk9OOEdKOG8rOGpnRnRqa3R3WmRxeDZCUnlUQVRCZ05WSFNVRUREQUtCZ2dyCkJnRUZCUWNEQVRBZEJnbGdoa2dCaHZoQ0FRMEVFQllPVkdWemRDQllOVEE1SUdObGNuUXdnYk1HQTFVZEl3U0IKcXpDQnFJQVVrVGpmQmlmS1B2STRCYlk1TGNHWGFzZWdVY21oZ1l5a2dZa3dnWVl4Q3pBSkJnTlZCQVlUQWtGVgpNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVEJsTjVaRzVsZVRFTU1Bb0dBMVVFQ2d3RFVFbFVNUWt3CkJ3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psYm1ObGNHbDBMbU52YlRFbE1DTUdDU3FHU0liM0RRRUoKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnZiWUlCQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9CZ1FDRQpUQWVKVERTQVc2ejFVRlRWN1FyZWg0VUxGT1JhajkrZUN1RjNLV0RIYyswSVFDajlyZG5ERzRRL3dmNy9yYVEwCkpuUFFDU0NkclBMSmV5b1BIN1FhVHdvYUY3ZHpWdzRMQ3N5TkpURld4NGNNNTBWdzZSNWZET2dpQzhic2ZmUzgKQkptb3VscnJaRE5OVmpHOG1XNmNMeHJZdlZRT3JSVmVjQ0ZJZ3NzQ2JBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress urn:oasis:names:tc:SAML:2.0:nameid-format:persistent LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxekNDQXhTZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBRENCaGpFTE1Ba0dBMVVFQmhNQ1FWVXgKRERBS0JnTlZCQWdUQTA1VFZ6RVBNQTBHQTFVRUJ4TUdVM2xrYm1WNU1Rd3dDZ1lEVlFRS0RBTlFTVlF4Q1RBSApCZ05WQkFzTUFERVlNQllHQTFVRUF3d1BiR0YzY21WdVkyVndhWFF1WTI5dE1TVXdJd1lKS29aSWh2Y05BUWtCCkRCWnNZWGR5Wlc1alpTNXdhWFJBWjIxaGFXd3VZMjl0TUI0WERURXlNRFF4T1RJeU5UUXhPRm9YRFRNeU1EUXgKTkRJeU5UUXhPRm93Z1lZeEN6QUpCZ05WQkFZVEFrRlZNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVApCbE41Wkc1bGVURU1NQW9HQTFVRUNnd0RVRWxVTVFrd0J3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psCmJtTmxjR2wwTG1OdmJURWxNQ01HQ1NxR1NJYjNEUUVKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnYKYlRDQm56QU5CZ2txaGtpRzl3MEJBUUVGQUFPQmpRQXdnWWtDZ1lFQXFqaWUzUjJvaStwRGFldndJeXMvbWJVVApubkdsa3h0ZGlrcnExMXZleHd4SmlQTmhtaHFSVzNtVXVKRXpsbElkVkw2RW14R1lUcXBxZjkzSGxoa3NhZUowCjhVZ2pQOVVtTVlyaFZKdTFqY0ZXVjdmei9yKzIxL2F3VG5EVjlzTVlRcXVJUllZeTdiRzByMU9iaXdkb3ZudGsKN2dGSTA2WjB2WmFjREU1Ym9xVUNBd0VBQWFPQ0FTVXdnZ0VoTUFrR0ExVWRFd1FDTUFBd0N3WURWUjBQQkFRRApBZ1VnTUIwR0ExVWREZ1FXQkJTUk9OOEdKOG8rOGpnRnRqa3R3WmRxeDZCUnlUQVRCZ05WSFNVRUREQUtCZ2dyCkJnRUZCUWNEQVRBZEJnbGdoa2dCaHZoQ0FRMEVFQllPVkdWemRDQllOVEE1SUdObGNuUXdnYk1HQTFVZEl3U0IKcXpDQnFJQVVrVGpmQmlmS1B2STRCYlk1TGNHWGFzZWdVY21oZ1l5a2dZa3dnWVl4Q3pBSkJnTlZCQVlUQWtGVgpNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVEJsTjVaRzVsZVRFTU1Bb0dBMVVFQ2d3RFVFbFVNUWt3CkJ3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psYm1ObGNHbDBMbU52YlRFbE1DTUdDU3FHU0liM0RRRUoKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnZiWUlCQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9CZ1FDRQpUQWVKVERTQVc2ejFVRlRWN1FyZWg0VUxGT1JhajkrZUN1RjNLV0RIYyswSVFDajlyZG5ERzRRL3dmNy9yYVEwCkpuUFFDU0NkclBMSmV5b1BIN1FhVHdvYUY3ZHpWdzRMQ3N5TkpURld4NGNNNTBWdzZSNWZET2dpQzhic2ZmUzgKQkptb3VscnJaRE5OVmpHOG1XNmNMeHJZdlZRT3JSVmVjQ0ZJZ3NzQ2JBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURxekNDQXhTZ0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBRENCaGpFTE1Ba0dBMVVFQmhNQ1FWVXgKRERBS0JnTlZCQWdUQTA1VFZ6RVBNQTBHQTFVRUJ4TUdVM2xrYm1WNU1Rd3dDZ1lEVlFRS0RBTlFTVlF4Q1RBSApCZ05WQkFzTUFERVlNQllHQTFVRUF3d1BiR0YzY21WdVkyVndhWFF1WTI5dE1TVXdJd1lKS29aSWh2Y05BUWtCCkRCWnNZWGR5Wlc1alpTNXdhWFJBWjIxaGFXd3VZMjl0TUI0WERURXlNRFF4T1RJeU5UUXhPRm9YRFRNeU1EUXgKTkRJeU5UUXhPRm93Z1lZeEN6QUpCZ05WQkFZVEFrRlZNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVApCbE41Wkc1bGVURU1NQW9HQTFVRUNnd0RVRWxVTVFrd0J3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psCmJtTmxjR2wwTG1OdmJURWxNQ01HQ1NxR1NJYjNEUUVKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnYKYlRDQm56QU5CZ2txaGtpRzl3MEJBUUVGQUFPQmpRQXdnWWtDZ1lFQXFqaWUzUjJvaStwRGFldndJeXMvbWJVVApubkdsa3h0ZGlrcnExMXZleHd4SmlQTmhtaHFSVzNtVXVKRXpsbElkVkw2RW14R1lUcXBxZjkzSGxoa3NhZUowCjhVZ2pQOVVtTVlyaFZKdTFqY0ZXVjdmei9yKzIxL2F3VG5EVjlzTVlRcXVJUllZeTdiRzByMU9iaXdkb3ZudGsKN2dGSTA2WjB2WmFjREU1Ym9xVUNBd0VBQWFPQ0FTVXdnZ0VoTUFrR0ExVWRFd1FDTUFBd0N3WURWUjBQQkFRRApBZ1VnTUIwR0ExVWREZ1FXQkJTUk9OOEdKOG8rOGpnRnRqa3R3WmRxeDZCUnlUQVRCZ05WSFNVRUREQUtCZ2dyCkJnRUZCUWNEQVRBZEJnbGdoa2dCaHZoQ0FRMEVFQllPVkdWemRDQllOVEE1SUdObGNuUXdnYk1HQTFVZEl3U0IKcXpDQnFJQVVrVGpmQmlmS1B2STRCYlk1TGNHWGFzZWdVY21oZ1l5a2dZa3dnWVl4Q3pBSkJnTlZCQVlUQWtGVgpNUXd3Q2dZRFZRUUlFd05PVTFjeER6QU5CZ05WQkFjVEJsTjVaRzVsZVRFTU1Bb0dBMVVFQ2d3RFVFbFVNUWt3CkJ3WURWUVFMREFBeEdEQVdCZ05WQkFNTUQyeGhkM0psYm1ObGNHbDBMbU52YlRFbE1DTUdDU3FHU0liM0RRRUoKQVF3V2JHRjNjbVZ1WTJVdWNHbDBRR2R0WVdsc0xtTnZiWUlCQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9CZ1FDRQpUQWVKVERTQVc2ejFVRlRWN1FyZWg0VUxGT1JhajkrZUN1RjNLV0RIYyswSVFDajlyZG5ERzRRL3dmNy9yYVEwCkpuUFFDU0NkclBMSmV5b1BIN1FhVHdvYUY3ZHpWdzRMQ3N5TkpURld4NGNNNTBWdzZSNWZET2dpQzhic2ZmUzgKQkptb3VscnJaRE5OVmpHOG1XNmNMeHJZdlZRT3JSVmVjQ0ZJZ3NzQ2JBPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress urn:oasis:names:tc:SAML:2.0:nameid-format:persistent python3-saml-1.16.0/tests/data/metadata/metadata_bad_order_settings1.xml000066400000000000000000000017341451074743100263070ustar00rootroot00000000000000 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/metadata/metadata_settings1.xml000066400000000000000000000017341451074743100243060ustar00rootroot00000000000000 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/metadata/no_expiration_mark_metadata.xml000066400000000000000000000015621451074743100262540ustar00rootroot00000000000000 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/metadata/noentity_metadata_settings1.xml000066400000000000000000000055571451074743100262460ustar00rootroot00000000000000 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 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/metadata/signed_metadata_settings1.xml000066400000000000000000000125701451074743100256370ustar00rootroot00000000000000 +FoWTQxwj75/mQK600oN7ZobfqU=lm/ZJWEoAOeBD+bqimMLJEECySqYSRkcJ5KVU8mKORh044go2YSN5MLyJe9772506FsWf9UxCMV+EhBl7wj4k1E1/SAXQ3GhdWr8qTTBZ4QiVSeB/ReqFQaD/W0vlrYLwu1f+hMoEGdalqsFOetjBSsuiRi3n6qHY2x3ePIXCXY= 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 MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMCTk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYDVQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xiZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2ZlaWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5vMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7nbK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2QarQ4/67OZfHd7R+POBXhophSMv1ZOo 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 urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress sp_test SP test http://sp.example.com technical_name technical@example.com support_name support@example.com python3-saml-1.16.0/tests/data/metadata/signed_metadata_settings2.xml000066400000000000000000000120071451074743100256330ustar00rootroot00000000000000 q+ufWp5Xleex2jt5NJHoLUORbyc=WIL36kstHjnFnHRc78dVDVL2htsi4GVOOUDXby7ht77aJbe4nknoES6eqvMgiznL QX3nIeJBkfLtnl2i3dh7mk1RBsFS7G3R00u7ADW+8GqkLMn/Tl7+qaRi6/iiCScs l/TrnoiY/emDNREboGVgts99NHSF53COW5tSnUwqNAg= MIICbDCCAdWgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBTMQswCQYDVQQGEwJ1czET MBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRgwFgYD VQQDDA9pZHAuZXhhbXBsZS5jb20wHhcNMTQwOTIzMTIyNDA4WhcNNDIwMjA4MTIy NDA4WjBTMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UE CgwMT25lbG9naW4gSW5jMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wgZ8wDQYJ KoZIhvcNAQEBBQADgY0AMIGJAoGBAOWA+YHU7cvPOrBOfxCscsYTJB+kH3MaA9BF rSHFS+KcR6cw7oPSktIJxUgvDpQbtfNcOkE/tuOPBDoech7AXfvH6d7Bw7xtW8PP J2mB5Hn/HGW2roYhxmfh3tR5SdwN6i4ERVF8eLkvwCHsNQyK2Ref0DAJvpBNZMHC pS24916/AgMBAAGjUDBOMB0GA1UdDgQWBBQ77/qVeiigfhYDITplCNtJKZTM8DAf BgNVHSMEGDAWgBQ77/qVeiigfhYDITplCNtJKZTM8DAMBgNVHRMEBTADAQH/MA0G CSqGSIb3DQEBDQUAA4GBAJO2j/1uO80E5C2PM6Fk9mzerrbkxl7AZ/mvlbOn+sNZ E+VZ1AntYuG8ekbJpJtG1YfRfc7EA9mEtqvv4dhv7zBy4nK49OR+KpIBjItWB5kY vrqMLKBa32sMbgqqUqeF1ENXKjpvLSuPdfGJZA3dNa/+Dyb8GGqWe707zLyc5F8m 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 urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified sp_test SP test http://sp.example.com technical_name technical@example.com support_name support@example.com python3-saml-1.16.0/tests/data/metadata/testshib-providers.xml000066400000000000000000000471741451074743100243750ustar00rootroot00000000000000 testshib.org TestShib Test IdP TestShib IdP. Use this as a source of attributes for your test SP. https://www.testshib.org/testshibtwo.jpg MIIDAzCCAeugAwIBAgIVAPX0G6LuoXnKS0Muei006mVSBXbvMA0GCSqGSIb3DQEB CwUAMBsxGTAXBgNVBAMMEGlkcC50ZXN0c2hpYi5vcmcwHhcNMTYwODIzMjEyMDU0 WhcNMzYwODIzMjEyMDU0WjAbMRkwFwYDVQQDDBBpZHAudGVzdHNoaWIub3JnMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9C4J2DiRTEhJAWzPt1S3ryh m3M2P3hPpwJwvt2q948vdTUxhhvNMuc3M3S4WNh6JYBs53R+YmjqJAII4ShMGNEm lGnSVfHorex7IxikpuDPKV3SNf28mCAZbQrX+hWA+ann/uifVzqXktOjs6DdzdBn xoVhniXgC8WCJwKcx6JO/hHsH1rG/0DSDeZFpTTcZHj4S9MlLNUtt5JxRzV/MmmB 3ObaX0CMqsSWUOQeE4nylSlp5RWHCnx70cs9kwz5WrflnbnzCeHU2sdbNotBEeTH ot6a2cj/pXlRJIgPsrL/4VSicPZcGYMJMPoLTJ8mdy6mpR6nbCmP7dVbCIm/DQID AQABoz4wPDAdBgNVHQ4EFgQUUfaDa2mPi24x09yWp1OFXmZ2GPswGwYDVR0RBBQw EoIQaWRwLnRlc3RzaGliLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEASKKgqTxhqBzR OZ1eVy++si+eTTUQZU4+8UywSKLia2RattaAPMAcXUjO+3cYOQXLVASdlJtt+8QP dRkfp8SiJemHPXC8BES83pogJPYEGJsKo19l4XFJHPnPy+Dsn3mlJyOfAa8RyWBS 80u5lrvAcr2TJXt9fXgkYs7BOCigxtZoR8flceGRlAZ4p5FPPxQR6NDYb645jtOT MVr3zgfjP6Wh2dt+2p04LG7ENJn8/gEwtXVuXCsPoSCDx9Y0QmyXTJNdV1aB0AhO RkWPlFYwp+zOyOIR+3m1+pqWFpn0eT/HrxpdKa74FA3R2kq4R7dXe4G0kUgXTdqX MLRKhDgdmA== urn:mace:shibboleth:1.0:nameIdentifier urn:oasis:names:tc:SAML:2.0:nameid-format:transient MIIEDjCCAvagAwIBAgIBADANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzEV MBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMREwDwYD VQQKEwhUZXN0U2hpYjEZMBcGA1UEAxMQaWRwLnRlc3RzaGliLm9yZzAeFw0wNjA4 MzAyMTEyMjVaFw0xNjA4MjcyMTEyMjVaMGcxCzAJBgNVBAYTAlVTMRUwEwYDVQQI EwxQZW5uc3lsdmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxETAPBgNVBAoTCFRl c3RTaGliMRkwFwYDVQQDExBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEArYkCGuTmJp9eAOSGHwRJo1SNatB5ZOKqDM9ysg7C yVTDClcpu93gSP10nH4gkCZOlnESNgttg0r+MqL8tfJC6ybddEFB3YBo8PZajKSe 3OQ01Ow3yT4I+Wdg1tsTpSge9gEz7SrC07EkYmHuPtd71CHiUaCWDv+xVfUQX0aT NPFmDixzUjoYzbGDrtAyCqA8f9CN2txIfJnpHE6q6CmKcoLADS4UrNPlhHSzd614 kR/JYiks0K4kbRqCQF0Dv0P5Di+rEfefC6glV8ysC8dB5/9nb0yh/ojRuJGmgMWH gWk6h0ihjihqiu4jACovUZ7vVOCgSE5Ipn7OIwqd93zp2wIDAQABo4HEMIHBMB0G A1UdDgQWBBSsBQ869nh83KqZr5jArr4/7b+QazCBkQYDVR0jBIGJMIGGgBSsBQ86 9nh83KqZr5jArr4/7b+Qa6FrpGkwZzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBl bm5zeWx2YW5pYTETMBEGA1UEBxMKUGl0dHNidXJnaDERMA8GA1UEChMIVGVzdFNo aWIxGTAXBgNVBAMTEGlkcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN BgkqhkiG9w0BAQUFAAOCAQEAjR29PhrCbk8qLN5MFfSVk98t3CT9jHZoYxd8QMRL I4j7iYQxXiGJTT1FXs1nd4Rha9un+LqTfeMMYqISdDDI6tv8iNpkOAvZZUosVkUo 93pv1T0RPz35hcHHYq2yee59HJOco2bFlcsH8JBXRSRrJ3Q7Eut+z9uo80JdGNJ4 /SJy5UorZ8KazGj16lfJhOBXldgrhppQBb0Nq6HKHguqmwRfJ+WkxemZXzhediAj Geka8nz8JjwxpUjAiSWYKLtJhGEaTqCYxCCX2Dw+dOTqUzHOZ7WKv4JXPK5G/Uhr 8K/qhmFT2nIQi538n6rVYLeWj8Bbnl+ev0peYzxFyF5sQA== urn:mace:shibboleth:1.0:nameIdentifier urn:oasis:names:tc:SAML:2.0:nameid-format:transient TestShib Two Identity Provider TestShib Two http://www.testshib.org/testshib-two/ Nate Klingenstein ndk@internet2.edu TestShib Test SP TestShib SP. Log into this to test your machine. Once logged in check that all attributes that you expected have been released. https://www.testshib.org/testshibtwo.jpg MIIEPjCCAyagAwIBAgIBADANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQGEwJVUzEV MBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1cmdoMSIwIAYD VQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3ZpZGVyMRgwFgYDVQQDEw9zcC50ZXN0 c2hpYi5vcmcwHhcNMDYwODMwMjEyNDM5WhcNMTYwODI3MjEyNDM5WjB3MQswCQYD VQQGEwJVUzEVMBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYDVQQHEwpQaXR0c2J1 cmdoMSIwIAYDVQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3ZpZGVyMRgwFgYDVQQD Ew9zcC50ZXN0c2hpYi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJyR6ZP6MXkQ9z6RRziT0AuCabDd3x1m7nLO9ZRPbr0v1LsU+nnC363jO8nGEq sqkgiZ/bSsO5lvjEt4ehff57ERio2Qk9cYw8XCgmYccVXKH9M+QVO1MQwErNobWb AjiVkuhWcwLWQwTDBowfKXI87SA7KR7sFUymNx5z1aoRvk3GM++tiPY6u4shy8c7 vpWbVfisfTfvef/y+galxjPUQYHmegu7vCbjYP3On0V7/Ivzr+r2aPhp8egxt00Q XpilNai12LBYV3Nv/lMsUzBeB7+CdXRVjZOHGuQ8mGqEbsj8MBXvcxIKbcpeK5Zi JCVXPfarzuriM1G5y5QkKW+LAgMBAAGjgdQwgdEwHQYDVR0OBBYEFKB6wPDxwYrY StNjU5P4b4AjBVQVMIGhBgNVHSMEgZkwgZaAFKB6wPDxwYrYStNjU5P4b4AjBVQV oXukeTB3MQswCQYDVQQGEwJVUzEVMBMGA1UECBMMUGVubnN5bHZhbmlhMRMwEQYD VQQHEwpQaXR0c2J1cmdoMSIwIAYDVQQKExlUZXN0U2hpYiBTZXJ2aWNlIFByb3Zp ZGVyMRgwFgYDVQQDEw9zcC50ZXN0c2hpYi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN BgkqhkiG9w0BAQUFAAOCAQEAc06Kgt7ZP6g2TIZgMbFxg6vKwvDL0+2dzF11Onpl 5sbtkPaNIcj24lQ4vajCrrGKdzHXo9m54BzrdRJ7xDYtw0dbu37l1IZVmiZr12eE Iay/5YMU+aWP1z70h867ZQ7/7Y4HW345rdiS6EW663oH732wSYNt9kr7/0Uer3KD 9CuPuOidBacospDaFyfsaJruE99Kd6Eu/w5KLAGG+m0iqENCziDGzVA47TngKz2v PVA+aokoOyoz3b53qeti77ijatSEoKjxheBWpO+eoJeGq/e49Um3M2ogIX/JAlMa Inh+vYSYngQB2sx9LGkR9KHaMKNIGCDehk93Xla4pWJx1w== urn:oasis:names:tc:SAML:2.0:nameid-format:transient urn:mace:shibboleth:1.0:nameIdentifier TestShib Two Service Provider TestShib Two http://www.testshib.org/testshib-two/ Nate Klingenstein ndk@internet2.edu python3-saml-1.16.0/tests/data/metadata/unparsed_metadata.xml000066400000000000000000000017351451074743100242070ustar00rootroot00000000000000 urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified python3-saml-1.16.0/tests/data/misc/000077500000000000000000000000001451074743100171515ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/misc/sp2.key000066400000000000000000000016241451074743100203720ustar00rootroot00000000000000-----BEGIN PRIVATE KEY----- MIICeAIBADANBgkqhkiG9w0BAQEFAASCAmIwggJeAgEAAoGBAOK9uFHs/nXrH9Lc GorG6lB7Qs42iWK6mIE56wI7dIdsOuXf6r0ht+d+YTTis24xw+wjEHXrVN0Okh6w sKftzxo8chIo60+UB5NlKdvxAC7tpGNmrf49us/m5bdNx8IY+0pPK0c6B786Uluj Tvx1WFdDXh3UQPBclbWtFe5S3gLxAgMBAAECgYAPj9ngtZVZXoPWowinUbOvRmZ1 ZMTVI91nsSPyCUacLM92C4I+7NuEZeYiDRUnkP7TbCyrCzXN3jwlIxdczzORhlXB Bgg9Sw2fkV61CnDEMgw+aEeD5A0GDA6eTwkrawiOMs8vupjsi2/stPsa+bmpI6Rn fdEKBdyDP6iQQhAxiQJBAPNtM7IMvRzlZBXoDaTTpP9rN2FR0ZcX0LT5aRZJ81qi +ZOBFeHUb6MyWvzZKfPinj9JO3s/9e3JbMXemRWBmvcCQQDuc+NfAeW200QyjoC3 Ed3jueLMrY1Q3zTcSUhRPw/0pIKgRGZJerro8N6QY2JziV2mxK855gKTwwBigMHL 2S9XAkEAwuBfjGDqXOG/uFHn6laNNvWshjqsIdus99Tbrj5RlfP2/YFP9VTOcsXz VYy9K0P3EA8ekVLpHQ4uCFJmF3OEjQJBAMvwO69/HOufhv1CWZ25XzAsRGhPqsRX Eouw9XPfXpMavEm8FkuT9xXRJFkTVxl/i6RdJYx8Rwn/Rm34t0bUKqMCQQCrAtKC Un0PLcemAzPi8ADJlbMDG/IDXNbSej0Y4tw9Cdho1Q38XLZJi0RNdNvQJD1fWu3x 9+QU/vJr7lMLzdoy -----END PRIVATE KEY----- python3-saml-1.16.0/tests/data/misc/sp3.key000066400000000000000000000015731451074743100203760ustar00rootroot00000000000000-----BEGIN RSA PRIVATE KEY----- MIICXgIBAAKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9 IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+ PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQAB AoGAD4/Z4LWVWV6D1qMIp1Gzr0ZmdWTE1SPdZ7Ej8glGnCzPdguCPuzbhGXmIg0V J5D+02wsqws1zd48JSMXXM8zkYZVwQYIPUsNn5FetQpwxDIMPmhHg+QNBgwOnk8J K2sIjjLPL7qY7Itv7LT7Gvm5qSOkZ33RCgXcgz+okEIQMYkCQQDzbTOyDL0c5WQV 6A2k06T/azdhUdGXF9C0+WkWSfNaovmTgRXh1G+jMlr82Snz4p4/STt7P/XtyWzF 3pkVgZr3AkEA7nPjXwHlttNEMo6AtxHd47nizK2NUN803ElIUT8P9KSCoERmSXq6 6PDekGNic4ldpsSvOeYCk8MAYoDBy9kvVwJBAMLgX4xg6lzhv7hR5+pWjTb1rIY6 rCHbrPfU264+UZXz9v2BT/VUznLF81WMvStD9xAPHpFS6R0OLghSZhdzhI0CQQDL 8Duvfxzrn4b9QlmduV8wLERoT6rEVxKLsPVz316TGrxJvBZLk/cV0SRZE1cZf4uk XSWMfEcJ/0Zt+LdG1CqjAkEAqwLSglJ9Dy3HpgMz4vAAyZWzAxvyA1zW0no9GOLc PQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aCg== -----END RSA PRIVATE KEY----- python3-saml-1.16.0/tests/data/misc/sp4.key000066400000000000000000000032501451074743100203710ustar00rootroot00000000000000-----BEGIN PRIVATE KEY----- MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQD4ZrcXcjCBOQS7 stUabuXPYnXKvcoJUrMVPRX1zfrXvpfghCrykbL1TKoqGfmEA9oNRoMBOmZCgLlK eb0TfuEO/u1jf4rRFcK7U/dYEiX74bQgUnJUWTfFlhwPjxGhn9zDrc2tSpworJBV amyBZIo5Beap5OJLote/Wqp1DZjNyEZ2m8m+lv8udmejmlo5RMoIzuG3VdH6ADC9 LKF+QsXC/HRZBhLE/y+75/XrNODvX8eM8+9Xp21QlVF1EIZDfNQ2iHsA8GEpJDC5 aomTW/xExBysejnwP2ROrfm3PIfP64EbB4G01f8eErlXeUD0oQ0gECgIXsJpfBkD IWMHwx3/AgMBAAECggEAdbLNvFlJ7GDlAj75RJ4ZXAuOPrNw4LwDyON53U9tNP7F HgfiBa/NuPdLhclq9geRMUsg1dsjCw3NPiGy2mL7JszaFJQhZXLHI1Xk1CE9SD0o yUvniln/2CqJP0IOG6QQydM3qo24snkZpq9XnHPUHrLSGdwu8aHGUpAWRoJbzdzR tBWBn6SlkuaE52vcGh7eMdKSICRCg2/gg6LIi89pkiI9tfozAL2LPcDTRGp3DA3w U6OO8k+d1La4s9G0i22OGSwPxGerTHnBIzpeM/ivRwBypFy3EV9bbjQlheI53xAo ZMmGeSnQ89MWgY64pnWrX862Mf1EZYTjumDe2dl1kQKBgQD9pBG2BbcQ8qieTf84 92LeOYTPRdd0N+gdyDKKorRO772zgxBwpSwO285nzy/FKSnpJIDtuee6OFClnDor Ui6lG1WPQeoSEdH1V10XkfSaoFOz7Hyv9H2dCLvW/VO9KYq07VAmQcvNZnqIW+tI edSHcQ3I8tnw4CiFa0BPvdhk9wKBgQD6tiuN2NvuNFFLvwpBGp3hjGyn6siyXDyP 8IXQmP66NxKqcX/NafVO3bVh6VrPGd7PL1PloQZ5EBG2PPtRdf/g4aeZKZleCUXm 9OgMEOUqdbTP9TGrmgNPtNBx3jnhnX/GTy/7GK77YlXEVplezWaerwRM7NCFCtp2 W6K1M961OQKBgQDDSznr2hirrvuP8GRMW4a/rrAI3DDZplZN4CCySDbm9IcvGgJl iXgT9MDHg2q3t0sy3U18PYEkDEpkSZcsVfneXN6TEGCHCzuLWXovNM2O5VWtmrAi 1vCFIf1nuuRoKP1I89SbsFuYyogcSBIwWsX+h1ji2cJfSmlI2VzKSVW93wKBgQDA sqwfRoMkP0oM8jUrfQ3Egm4xUiAYFxTlfXUcs7t13UaXgs08USifCYGUVAvcCoJa tIHDiVS0UEmMzKpOHmghrM9oxbR/tpjnv21reMDrNbVX8ZnPz3ykEtHz816BrtC6 17qFQJ+d0CMj2XvghfdOGC8yAQL0fzcSqbQRmmCe4QKBgFWY9fqHEKdG/UlxZfBB C/QRNTJsrbZf9Ok/o1h6BHnK64xUc4elShEwV9IdC4QNW0UCr7WXoGLUkhfUphId q//KUDNc7VrWj5URsZcGi7WMkqNm9kPkpeuh3iSvh3+q7tK0/yfuj9ZQOjKzQnit VZBooJAJGdSqYgitpyxB71/n -----END PRIVATE KEY----- python3-saml-1.16.0/tests/data/requests/000077500000000000000000000000001451074743100200715ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/requests/authn_request.xml000066400000000000000000000017321451074743100235050ustar00rootroot00000000000000 http://idp.example.com/metadata urn:oasis:names:tc:SAML:2.0:ac:classes:Password python3-saml-1.16.0/tests/data/requests/authn_request.xml.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 python3-saml-1.16.0/tests/data/responses/000077500000000000000000000000001451074743100202375ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/responses/adfs_response.xml.base64000066400000000000000000000126261451074743100247060ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+CjxzYW1scDpSZXNwb25zZSB4bWxuczpz YW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiBJ RD0iXzAyNjNhMDdiLTIwNWYtNDc5Yy05MGZjLTc0OTU3MTVlY2JiZiIgVmVy c2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMjJUMTI6NDk6MzAu MzQ4WiIgRGVzdGluYXRpb249Imh0dHBzOi8vc29tZW9uZS5leGFtcGxlLmNv bS9lbmRwb2ludCIgQ29uc2VudD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 Mi4wOmNvbnNlbnQ6dW5zcGVjaWZpZWQiIEluUmVzcG9uc2VUbz0iX2ZjNGEz NGIwLTdlZmItMDEyZS1jYWFlLTc4MmJjYjEzYmIzOCI+CiAgPElzc3VlciB4 bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI+ aHR0cDovL2xvZ2luLmV4YW1wbGUuY29tL2lzc3VlcjwvSXNzdWVyPgogIDxz YW1scDpTdGF0dXM+CiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJu Om9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAg PC9zYW1scDpTdGF0dXM+CiAgPEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lz Om5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il83MjFiNGE1YS1k N2UxLTQ4NjEtOTc1NC1hOWIxOTdiNmY5YWIiIElzc3VlSW5zdGFudD0iMjAx MS0wNi0yMlQxMjo0OTozMC4zNDhaIiBWZXJzaW9uPSIyLjAiPgogICAgPElz c3Vlcj5odHRwOi8vbG9naW4uZXhhbXBsZS5jb20vaXNzdWVyPC9Jc3N1ZXI+ CiAgICA8ZHM6U2lnbmF0dXJlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9y Zy8yMDAwLzA5L3htbGRzaWcjIj4KICAgICAgPGRzOlNpZ25lZEluZm8+CiAg ICAgICAgPGRzOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJo dHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz4KICAg ICAgICA8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3 dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPgog ICAgICAgIDxkczpSZWZlcmVuY2UgVVJJPSIjXzcyMWI0YTVhLWQ3ZTEtNDg2 MS05NzU0LWE5YjE5N2I2ZjlhYiI+CiAgICAgICAgICA8ZHM6VHJhbnNmb3Jt cz4KICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6 Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0 dXJlIi8+CiAgICAgICAgICAgIDxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJo dHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz4KICAg ICAgICAgIDwvZHM6VHJhbnNmb3Jtcz4KICAgICAgICAgIDxkczpEaWdlc3RN ZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3ht bGVuYyNzaGEyNTYiLz4KICAgICAgICAgIDxkczpEaWdlc3RWYWx1ZT52NTN3 cW80ZllESzhVY3JPVWNPV2cyemxKL2NIVnVtWVMwS2pycm5WdUprPTwvZHM6 RGlnZXN0VmFsdWU+CiAgICAgICAgPC9kczpSZWZlcmVuY2U+CiAgICAgIDwv ZHM6U2lnbmVkSW5mbz4KICAgICAgPGRzOlNpZ25hdHVyZVZhbHVlPlowOXBl d1k3ekZ2OTFobjkwbHgwRUVubE1HTkw5elVKWk14SVI2cW9mTFpPWk1sVG5Y TjV6RnNmKzFYUFBJWVpMdzVsQ0dqanRtZE5seGR2NzJ6TkZsTVROUnFaN0lp SXd2azVHUk0zenZBV3NOT1k2ZEI0YzVxamU0UkhxL2ZySkdCZ04vZ2VWeFZt bjNMWmQ1WmNrdWh1UzFzN0ZKQW9MVWNaRUxKL25jZ1JEZGdqQUUrcjhHdGFO a3U0VVRCUkdBZnRsMFBXbUFTMDdsbGU2bGFTVVBSQmRCRE5sVlN6R0FQT3lY UDE2ZUkxOWJvbllMaGpiOHVoY0N0bWdicnJhbkpVVGxZc1htcnhvaGNGdW4r eWZxVFdXd2l4OW1SUXRBdEFFOW5nSUUwVkRkTC9reFR0NktOb1B6d2tlajVW eFNMRkFncTJ1M3JaTWN1WUdadTFIUT09PC9kczpTaWduYXR1cmVWYWx1ZT4K ICAgICAgPEtleUluZm8geG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAv MDkveG1sZHNpZyMiPgogICAgICAgIDxkczpYNTA5RGF0YT4KICAgICAgICAg IDxkczpYNTA5Q2VydGlmaWNhdGU+TUlJQzVEQ0NBY3lnQXdJQkFnSVFOQlRr dDdxaWNhcEtOc0lYTWNrOHhUQU5CZ2txaGtpRzl3MEJBUXNGQURBdU1Td3dL Z1lEVlFRREV5TkJSRVpUSUZOcFoyNXBibWNnTFNCc2IyZHBiaTVrY21WemIz VnlZMlZ6TG1OdmJUQWVGdzB4TVRBMk1UQXhPRFUyTURGYUZ3MHhNakEyTURr eE9EVTJNREZhTUM0eExEQXFCZ05WQkFNVEkwRkVSbE1nVTJsbmJtbHVaeUF0 SUd4dloybHVMbVJ5WlhOdmRYSmpaWE11WTI5dE1JSUJJakFOQmdrcWhraUc5 dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBcTdBTURHbkJISUd3dDlLUHRM RDBNMEVYR3VabldHQW1iNXAyRkRjRnp0SkhPSThXWVBxZVJwaHpWU0VrZ1h0 UEloNUp4M2VsUzZoVm43SFZqMld2eklENmpwQjQ1bzhpRGs4UFdnaTE0ZnhH V0U1bzFQaUI4WHJlMWM1dnMySUc1YVBXSUQ1dUM2YkQwWGduTDk1TWdPOUhH UFBTUVJGbnVqS05xekZRZHRvQkpJSmF3QWVEL2kveHM3RmpGazl4MWZBMEV5 TENuaCtlYWZmSXBvcmIrMXh4VzJENkQzbVJUZ2ZIeFhyV1I4VzRqSG5pZ2da aHFkRGhVeHZFYWlRRlRiSU4yRCt6eUI3YVF3UUNIU0ZwZXJCYytSNUZsbGdu R0FhK3NqYjZnMUZYYmVobUVHd1NheHdSWklEQWhqSVFtYTV3WDV5V0pEeEZ6 UjRwc1RlRlJRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElCQVFCekFQ QzJRUStVdHZrcVFZMm8vam9IR3RudUx5Zmt3ZDc2NERjR0RsY1lLVktFYURD dm5KeDNneXdSVU9ERVJoRGh1Zkpid3I3T29YVmRodzcwTnRURU11Z0pGcjI5 U2d4bjNDaVRpeVBGU0RHang5MTFhYkt4dEpTQkludkkwMEFqWCtWbElaaG95 ODNZWU9SWEZjeWIrVXZoMnIyU1pVM0FDTnA4TTNjWlI2SjFFREJoUEtZd0VF VWs4TlRNbVpMM3ZXanFMWldUeVRUaFRyUUYvbEg5UENsdzlPMjl1d2lmaXEy WHpTeVNyMy9QSHh6cE1Sa0w5YzRFaTQ1UURtYWdlckFVUndlcTVwVVc4QzNV QVVqTExWY1hrLzJwZXZaRU43MFlndDVwMmZBZ3M4NE9KaERSS2lIR3BhcmlF bWo0THNKR1pzcDdxRkpwbjErTWlqUmU8L2RzOlg1MDlDZXJ0aWZpY2F0ZT4K ICAgICAgICA8L2RzOlg1MDlEYXRhPgogICAgICA8L0tleUluZm8+CiAgICA8 L2RzOlNpZ25hdHVyZT4KICAgIDxTdWJqZWN0PgogICAgICA8TmFtZUlEIEZv cm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3Jt YXQ6ZW1haWxBZGRyZXNzIj5oZWxsb0BleGFtcGxlLmNvbTwvTmFtZUlEPgog ICAgICA8U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpu YW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPgogICAgICAgIDxTdWJqZWN0 Q29uZmlybWF0aW9uRGF0YSBJblJlc3BvbnNlVG89Il9mYzRhMzRiMC03ZWZi LTAxMmUtY2FhZS03ODJiY2IxM2JiMzgiIE5vdE9uT3JBZnRlcj0iMjAxMS0w Ni0yMlQxMjo1NDozMC4zNDhaIiBSZWNpcGllbnQ9Imh0dHBzOi8vc29tZW9u ZS5leGFtcGxlLmNvbS9lbmRwb2ludCIvPgogICAgICA8L1N1YmplY3RDb25m aXJtYXRpb24+CiAgICA8L1N1YmplY3Q+CiAgICA8Q29uZGl0aW9ucyBOb3RC ZWZvcmU9IjIwMTEtMDYtMjJUMTI6NDk6MzAuMzMyWiIgTm90T25PckFmdGVy PSIyMDExLTA2LTIyVDEzOjQ5OjMwLjMzMloiPgogICAgICA8QXVkaWVuY2VS ZXN0cmljdGlvbj4KICAgICAgICA8QXVkaWVuY2U+ZXhhbXBsZS5jb208L0F1 ZGllbmNlPgogICAgICA8L0F1ZGllbmNlUmVzdHJpY3Rpb24+CiAgICA8L0Nv bmRpdGlvbnM+CiAgICA8QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIy MDExLTA2LTIyVDEyOjQ5OjMwLjExMloiIFNlc3Npb25JbmRleD0iXzcyMWI0 YTVhLWQ3ZTEtNDg2MS05NzU0LWE5YjE5N2I2ZjlhYiI+CiAgICAgIDxBdXRo bkNvbnRleHQ+CiAgICAgICAgPEF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpv YXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkUHJv dGVjdGVkVHJhbnNwb3J0PC9BdXRobkNvbnRleHRDbGFzc1JlZj4KICAgICAg PC9BdXRobkNvbnRleHQ+CiAgICA8L0F1dGhuU3RhdGVtZW50PgogIDwvQXNz ZXJ0aW9uPgo8L3NhbWxwOlJlc3BvbnNlPgo=python3-saml-1.16.0/tests/data/responses/decrypted_valid_encrypted_assertion.xml000066400000000000000000000054331451074743100302740ustar00rootroot00000000000000 http://idp.example.com/ http://idp.example.com/_68392312d490db6d355555cfbbd8ec95d746516f60http://stuff.com/endpoints/metadata.phpurn:oasis:names:tc:SAML:2.0:ac:classes:Passwordtesttest@example.comtestwaa2useradmin python3-saml-1.16.0/tests/data/responses/double_signed_encrypted_assertion.xml.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 python3-saml-1.16.0/tests/data/responses/double_signed_encrypted_assertion2.xml.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python3-saml-1.16.0/tests/data/responses/double_signed_response.xml.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 python3-saml-1.16.0/tests/data/responses/double_signed_response2.xml.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python3-saml-1.16.0/tests/data/responses/expired_response.xml.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-saml-1.16.0/tests/data/responses/invalids/000077500000000000000000000000001451074743100220505ustar00rootroot00000000000000python3-saml-1.16.0/tests/data/responses/invalids/bad_reference.xml.base64000066400000000000000000000211651451074743100264260ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIElEPSJwZngwNWYzY2UxMC0xNjE1LWYzZWEtYTk4OC02MGUzODBiMzI5OWYiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAyLTE5VDAxOjM3OjAxWiIgRGVzdGluYXRpb249Imh0dHBzOi8vZXhhbXBsZS5jb20vbmV3b25lbG9naW4vZGVtbzEvaW5kZXgucGhwP2FjcyIgSW5SZXNwb25zZVRvPSJPTkVMT0dJTl81ZmU5ZDZlNDk5YjJmMDkxMzIwNmFhYjNmNzE5MTcyOTA0OWJiODA3Ij48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9leGFtcGxlLmNvbS9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICA8ZHM6U2lnbmVkSW5mbz48ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZngwNWYzY2UxMC0xNjE1LWYzZWEtYTk4OC02MGUzODBiMzI5OWYiPjxkczpUcmFuc2Zvcm1zPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48L2RzOlRyYW5zZm9ybXM+PGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PGRzOkRpZ2VzdFZhbHVlPmpBZ290RjBKK1JLMS9LODd3MjRNTUMyK1pScz08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+cFhmM3Z3T1p2dGZtZjdNTWNPU0cwMzkyU213bnBJb0FqZ2dzVmErUlNJRE1Td0tTckwzcWw3SnlZQjVTaXZxL0xYODlUYXF5WTJ4MFBnTWl4YXY0bjFHMTFDM3NtbFJBTXJEZTZ2UnRJbUpVc2xTR2s5N3pQaHlvUStKNW9nUVBkNlZsTVR6OEtXemZxdE9QRGY1ZGwyWXlKcG9rZU9OVE0xemM0SkdNM0dBPTwvZHM6U2lnbmF0dXJlVmFsdWU+DQo8ZHM6S2V5SW5mbz48ZHM6WDUwOURhdGE+PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFOQmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05WQkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXhoYm1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYwZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZhTUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJUYjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVGVkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FHU0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBRZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIxNjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQNXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2JxWStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdSK1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1scDpTdGF0dXM+PHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPjwvc2FtbHA6U3RhdHVzPjxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZnhiNGVjOWM4YS00OGViLWZkYTItN2Y3NC1mYTFhMTA1YTk5ZmUiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAyLTE5VDAxOjM3OjAxWiI+PHNhbWw6SXNzdWVyPmh0dHBzOi8vZXhhbXBsZS5jb20vc2ltcGxlc2FtbC9zYW1sMi9pZHAvbWV0YWRhdGEucGhwPC9zYW1sOklzc3Vlcj48ZHM6U2lnbmF0dXJlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgPGRzOlNpZ25lZEluZm8+PGRzOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz4NCiAgICA8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8+DQogIDxkczpSZWZlcmVuY2UgVVJJPSIjcGZ4YjRlYzljOGEtNDhlYi1mZGEyLTdmNzQtZmExYTEwNWE5OWZlIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+PC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjc2hhMSIvPjxkczpEaWdlc3RWYWx1ZT5obnBUOWN1ZTZ0Qks0SVpPajUwZU1tM21DZ0k9PC9kczpEaWdlc3RWYWx1ZT48L2RzOlJlZmVyZW5jZT48L2RzOlNpZ25lZEluZm8+PGRzOlNpZ25hdHVyZVZhbHVlPnJBMGZMWjdLa2wzSndzTEtYRHdhRmNnNkxuS0hSeklVcng2bU5YMVRvOXpNQ3ZDVUQvb1BZVmFFZU10bnhZWTQ2ZnNtYU52c0tpdWdpeGRWekxMMzhLbUFZOHVNVGV6aEd2ejJWZUhVb3I0dTRoeGZRbHNPdDJmdXpBRTZEYnF2SVZLMHdqeDNSWTA4WC91T0NSOXVQY3B5NEJCc1EzeFBsNFF2aXBKalNOTT08L2RzOlNpZ25hdHVyZVZhbHVlPg0KPGRzOktleUluZm8+PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU+TUlJQ2dUQ0NBZW9DQ1FDYk9scldEZFg3RlRBTkJna3Foa2lHOXcwQkFRVUZBRENCaERFTE1Ba0dBMVVFQmhNQ1RrOHhHREFXQmdOVkJBZ1REMEZ1WkhKbFlYTWdVMjlzWW1WeVp6RU1NQW9HQTFVRUJ4TURSbTl2TVJBd0RnWURWUVFLRXdkVlRrbE9SVlJVTVJnd0ZnWURWUVFERXc5bVpXbGtaUzVsY214aGJtY3VibTh4SVRBZkJna3Foa2lHOXcwQkNRRVdFbUZ1WkhKbFlYTkFkVzVwYm1WMGRDNXViekFlRncwd056QTJNVFV4TWpBeE16VmFGdzB3TnpBNE1UUXhNakF4TXpWYU1JR0VNUXN3Q1FZRFZRUUdFd0pPVHpFWU1CWUdBMVVFQ0JNUFFXNWtjbVZoY3lCVGIyeGlaWEpuTVF3d0NnWURWUVFIRXdOR2IyOHhFREFPQmdOVkJBb1RCMVZPU1U1RlZGUXhHREFXQmdOVkJBTVREMlpsYVdSbExtVnliR0Z1Wnk1dWJ6RWhNQjhHQ1NxR1NJYjNEUUVKQVJZU1lXNWtjbVZoYzBCMWJtbHVaWFIwTG01dk1JR2ZNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0R05BRENCaVFLQmdRRGl2YmhSN1A1MTZ4L1MzQnFLeHVwUWUwTE9Ob2xpdXBpQk9lc0NPM1NIYkRybDMrcTlJYmZuZm1FMDRyTnVNY1BzSXhCMTYxVGREcEllc0xDbjdjOGFQSElTS090UGxBZVRaU25iOFFBdTdhUmpacTMrUGJyUDV1VzNUY2ZDR1B0S1R5dEhPZ2UvT2xKYm8wNzhkVmhYUTE0ZDFFRHdYSlcxclJYdVV0NEM4UUlEQVFBQk1BMEdDU3FHU0liM0RRRUJCUVVBQTRHQkFDRFZmcDg2SE9icVkrZThCVW9XUTkrVk1ReDFBU0RvaEJqd09zZzJXeWtVcVJYRitkTGZjVUg5ZFdSNjNDdFpJS0ZEYlN0Tm9tUG5RejduYksrb255Z3dCc3BWRWJuSHVVaWhacTNaVWRtdW1RcUN3NFV2cy8xVXZxM29yT28vV0pWaFR5dkxnRlZLMlFhclE0LzY3T1pmSGQ3UitQT0JYaG9waFNNdjFaT288L2RzOlg1MDlDZXJ0aWZpY2F0ZT48L2RzOlg1MDlEYXRhPjwvZHM6S2V5SW5mbz48L2RzOlNpZ25hdHVyZT48c2FtbDpTdWJqZWN0PjxzYW1sOk5hbWVJRCBTUE5hbWVRdWFsaWZpZXI9Imh0dHBzOi8vZXhhbXBsZS5jb20vbmV3b25lbG9naW4vZGVtbzEvbWV0YWRhdGEucGhwIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+NDkyODgyNjE1YWNmMzFjODA5NmI2MjcyNDVkNzZhZTUzMDM2YzA5MDwvc2FtbDpOYW1lSUQ+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyMy0wOC0yM1QwNjo1NzowMVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9leGFtcGxlLmNvbS9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWw6U3ViamVjdD48c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNC0wMi0xOVQwMTozNjozMVoiIE5vdE9uT3JBZnRlcj0iMjAyMy0wOC0yM1QwNjo1NzowMVoiPjxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PHNhbWw6QXVkaWVuY2U+aHR0cHM6Ly9leGFtcGxlLmNvbS9uZXdvbmVsb2dpbi9kZW1vMS9tZXRhZGF0YS5waHA8L3NhbWw6QXVkaWVuY2U+PC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PC9zYW1sOkNvbmRpdGlvbnM+PHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDE0LTAyLTE5VDAxOjM3OjAxWiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAxNC0wMi0xOVQwOTozNzowMVoiIFNlc3Npb25JbmRleD0iXzYyNzNkNzdiOGNkZTBjMzMzZWM3OWQyMmE5ZmEwMDAzYjlmZTJkNzVjYiI+PHNhbWw6QXV0aG5Db250ZXh0PjxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPjwvc2FtbDpBdXRobkNvbnRleHQ+PC9zYW1sOkF1dGhuU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48c2FtbDpBdHRyaWJ1dGUgTmFtZT0idWlkIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5leGFtcGxldXNlcjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj51c2VyQGV4YW1wbGUuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5UZXN0PC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9InNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5Vc2VyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImVkdVBlcnNvbkFmZmlsaWF0aW9uIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj51c2VyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPmFkbWluPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U+ python3-saml-1.16.0/tests/data/responses/invalids/duplicated_attributes.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/empty_destination.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/empty_nameid.xml.base64000066400000000000000000000210311451074743100263250ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeDlhMWFkNWU0LWMyZTQtMzYxZS04Y2ZlLWVjZWUwNTQwOGUwOCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciPjxzYW1sOklzc3Vlcj5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21ldGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDlhMWFkNWU0LWMyZTQtMzYxZS04Y2ZlLWVjZWUwNTQwOGUwOCI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+M2ZsdVpsMWdxY01WSWVsamtqYllWS2k2MDFrPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT54cmhEYS95Z25kSzRFY1VVSCtTVXdUT0xlU3ZWbE1OSUI2MXY3bm1zcVJld1NmSkxHWVU3UVdidFFvVWUzSGdlS1BqK1FlUktKbHZ1ZG1qSWY5TFp5VlBvazYvTEpsT01HemEzbHZPUGVBSzJ1bmtFbW8wY1VCVHZNUGJ1V3gxdUIzOVJhazFLSE5WYzB5Z1FOU1h2dFZ6ZU4vQVNOZFNmeTd0Si9jZEM0OWc9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDgxYWNhMTc4LTUxYjEtMGRlMS00MDM1LTg5NmI5ZDNhYzFmZSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIj48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICA8ZHM6U2lnbmVkSW5mbz48ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZng4MWFjYTE3OC01MWIxLTBkZTEtNDAzNS04OTZiOWQzYWMxZmUiPjxkczpUcmFuc2Zvcm1zPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48L2RzOlRyYW5zZm9ybXM+PGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PGRzOkRpZ2VzdFZhbHVlPkpqRllNVmkwNTMrSWR6czBnU0NXelg1R0w0MD08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+MVVxOUVNMTRUak5yQWxGaUhQTzdoRU5BZjNIejV4UUNra255TjZGMjdacHBmUnE5VzAzbDVKRnIrdk56WC9KZnBjdUxnNzdXZHhoVXdaeGtESzk0djlMbE1yK1lBSmtUeUhxUFAzYXZNWG5BcW0vaG9CeG11Skw4aXpTS2xITWU1NFA1Y1R3QVlrZ1Y0dW1XNGxpaHE1bUI1bU1DTWI2b0theU1pT0Niekw0PTwvZHM6U2lnbmF0dXJlVmFsdWU+DQo8ZHM6S2V5SW5mbz48ZHM6WDUwOURhdGE+PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFOQmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05WQkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXhoYm1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYwZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZhTUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJUYjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVGVkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FHU0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBRZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIxNjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQNXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2JxWStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdSK1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIi8+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjk5My0wOC0yM1QwNjo1NzowMVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWw6U3ViamVjdD48c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNC0wMi0xOVQwMTozNjozMVoiIE5vdE9uT3JBZnRlcj0iMjk5My0wOC0yM1QwNjo1NzowMVoiPjxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PHNhbWw6QXVkaWVuY2U+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9tZXRhZGF0YS5waHA8L3NhbWw6QXVkaWVuY2U+PC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PC9zYW1sOkNvbmRpdGlvbnM+PHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDE0LTAyLTE5VDAxOjM3OjAxWiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjk5My0wMi0xOVQwOTozNzowMVoiIFNlc3Npb25JbmRleD0iXzYyNzNkNzdiOGNkZTBjMzMzZWM3OWQyMmE5ZmEwMDAzYjlmZTJkNzVjYiI+PHNhbWw6QXV0aG5Db250ZXh0PjxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPjwvc2FtbDpBdXRobkNvbnRleHQ+PC9zYW1sOkF1dGhuU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48c2FtbDpBdHRyaWJ1dGUgTmFtZT0idWlkIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5zbWFydGluPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9Im1haWwiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnNtYXJ0aW5AeWFjby5lczwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJjbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+U2l4dG8zPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9InNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5NYXJ0aW4yPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImVkdVBlcnNvbkFmZmlsaWF0aW9uIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj51c2VyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPmFkbWluPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U+ python3-saml-1.16.0/tests/data/responses/invalids/encrypted_attrs.xml.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python3-saml-1.16.0/tests/data/responses/invalids/encrypted_nameID_without_EncMethod.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/encrypted_nameID_without_keyinfo.xml.base64000066400000000000000000000226211451074743100324010ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIElEPSJwZng4NDMwYjFkZS1mNTU0LTQ5M2YtNjMyZS00YTIxZTBhMGRkZDQiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAzLTA5VDEyOjIzOjM3WiIgRGVzdGluYXRpb249Imh0dHBzOi8vcGl0YnVsay5uby1pcC5vcmcvbmV3b25lbG9naW4vZGVtbzEvaW5kZXgucGhwP2FjcyIgSW5SZXNwb25zZVRvPSJPTkVMT0dJTl9iZjM3MmI5ZDY3ZDBjODlkMGNmMWFmM2ZmNjI1ZWE3YzA1MWM5ODg1Ij48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICA8ZHM6U2lnbmVkSW5mbz48ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZng4NDMwYjFkZS1mNTU0LTQ5M2YtNjMyZS00YTIxZTBhMGRkZDQiPjxkczpUcmFuc2Zvcm1zPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48L2RzOlRyYW5zZm9ybXM+PGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PGRzOkRpZ2VzdFZhbHVlPkhENDgxVEsxVmtPMGVaNGUxL2Vma1VJTVVCaz08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+bWZrcnh5SlU4MG1hMWwwQ2xUU2tObTgzajVZQ0Y3YUt2bDJqRmVsVU04M3RuaitwNDB1RXRITjkrbHBJQVgrZEZkNnNCR3JEdUk0Q21lOTZuQ2lDK05mb2Y5MnpYaUcrWExCbFR2K0Z0cWxaZUgxc0ZNTFhuOWwxTHNLT0dPbjM5alA4bklUSGtYL0VkYjRucENNZlpQeWZ2b3M1dkMwbUtnWlFKZ1JtcG5vPTwvZHM6U2lnbmF0dXJlVmFsdWU+DQo8ZHM6S2V5SW5mbz48ZHM6WDUwOURhdGE+PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFOQmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05WQkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXhoYm1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYwZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZhTUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJUYjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVGVkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FHU0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBRZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIxNjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQNXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2JxWStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdSK1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1scDpTdGF0dXM+PHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPjwvc2FtbHA6U3RhdHVzPjxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZnhkMDhjOTU2Ny1lNzUxLTY2ODItMGEwYS1hNDUwZDZmMTUxZTAiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAzLTA5VDEyOjIzOjM3WiI+PHNhbWw6SXNzdWVyPmh0dHBzOi8vcGl0YnVsay5uby1pcC5vcmcvc2ltcGxlc2FtbC9zYW1sMi9pZHAvbWV0YWRhdGEucGhwPC9zYW1sOklzc3Vlcj48ZHM6U2lnbmF0dXJlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgPGRzOlNpZ25lZEluZm8+PGRzOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz4NCiAgICA8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8+DQogIDxkczpSZWZlcmVuY2UgVVJJPSIjcGZ4ZDA4Yzk1NjctZTc1MS02NjgyLTBhMGEtYTQ1MGQ2ZjE1MWUwIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+PC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjc2hhMSIvPjxkczpEaWdlc3RWYWx1ZT42alZGMVZEMGJwVW1BVm1ERzlLeGxqMmFOUTA9PC9kczpEaWdlc3RWYWx1ZT48L2RzOlJlZmVyZW5jZT48L2RzOlNpZ25lZEluZm8+PGRzOlNpZ25hdHVyZVZhbHVlPlU3YTdFVWdxeDFiRC9ZaW9uTldPVWVMMHRJR0dRSU5ad1V6N1FBODNhYmxlVnE5dGtKbUsvWm8wak10MnluWHgxelA4K0M1bjNDRTY4TnZ4and5S2RFQUExUjAwblpneDRMR0JnZWl2WVBrazRBb0p6Q0RBbE11M1VLelZ0SU90dTV1VjFNMmVGc0NJY2RUcXBRMGt2b2pVQUVZWVhObSt6Y2xkcnVZWGQ1dz08L2RzOlNpZ25hdHVyZVZhbHVlPg0KPGRzOktleUluZm8+PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU+TUlJQ2dUQ0NBZW9DQ1FDYk9scldEZFg3RlRBTkJna3Foa2lHOXcwQkFRVUZBRENCaERFTE1Ba0dBMVVFQmhNQ1RrOHhHREFXQmdOVkJBZ1REMEZ1WkhKbFlYTWdVMjlzWW1WeVp6RU1NQW9HQTFVRUJ4TURSbTl2TVJBd0RnWURWUVFLRXdkVlRrbE9SVlJVTVJnd0ZnWURWUVFERXc5bVpXbGtaUzVsY214aGJtY3VibTh4SVRBZkJna3Foa2lHOXcwQkNRRVdFbUZ1WkhKbFlYTkFkVzVwYm1WMGRDNXViekFlRncwd056QTJNVFV4TWpBeE16VmFGdzB3TnpBNE1UUXhNakF4TXpWYU1JR0VNUXN3Q1FZRFZRUUdFd0pPVHpFWU1CWUdBMVVFQ0JNUFFXNWtjbVZoY3lCVGIyeGlaWEpuTVF3d0NnWURWUVFIRXdOR2IyOHhFREFPQmdOVkJBb1RCMVZPU1U1RlZGUXhHREFXQmdOVkJBTVREMlpsYVdSbExtVnliR0Z1Wnk1dWJ6RWhNQjhHQ1NxR1NJYjNEUUVKQVJZU1lXNWtjbVZoYzBCMWJtbHVaWFIwTG01dk1JR2ZNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0R05BRENCaVFLQmdRRGl2YmhSN1A1MTZ4L1MzQnFLeHVwUWUwTE9Ob2xpdXBpQk9lc0NPM1NIYkRybDMrcTlJYmZuZm1FMDRyTnVNY1BzSXhCMTYxVGREcEllc0xDbjdjOGFQSElTS090UGxBZVRaU25iOFFBdTdhUmpacTMrUGJyUDV1VzNUY2ZDR1B0S1R5dEhPZ2UvT2xKYm8wNzhkVmhYUTE0ZDFFRHdYSlcxclJYdVV0NEM4UUlEQVFBQk1BMEdDU3FHU0liM0RRRUJCUVVBQTRHQkFDRFZmcDg2SE9icVkrZThCVW9XUTkrVk1ReDFBU0RvaEJqd09zZzJXeWtVcVJYRitkTGZjVUg5ZFdSNjNDdFpJS0ZEYlN0Tm9tUG5RejduYksrb255Z3dCc3BWRWJuSHVVaWhacTNaVWRtdW1RcUN3NFV2cy8xVXZxM29yT28vV0pWaFR5dkxnRlZLMlFhclE0LzY3T1pmSGQ3UitQT0JYaG9waFNNdjFaT288L2RzOlg1MDlDZXJ0aWZpY2F0ZT48L2RzOlg1MDlEYXRhPjwvZHM6S2V5SW5mbz48L2RzOlNpZ25hdHVyZT48c2FtbDpTdWJqZWN0PjxzYW1sOkVuY3J5cHRlZElEPjx4ZW5jOkVuY3J5cHRlZERhdGEgeG1sbnM6eGVuYz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjIiB4bWxuczpkc2lnPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIiBUeXBlPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNFbGVtZW50Ij48eGVuYzpFbmNyeXB0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjYWVzMTI4LWNiYyIvPjx4ZW5jOkNpcGhlckRhdGE+DQogICAgICA8eGVuYzpDaXBoZXJWYWx1ZT5sbjMrVTFWTTJjQ0I1TjF3SHJnM2llTDM0VEg3RXQvRGVYbytBTlJHRE52OXhtRk9zdWFKbmcwdS9XbHl6RjRNdHFsaWViRGVDQjVTWVRPRURxNFRsVVJ6NkFYSHBINVEzWWthK25rbWV5YWMrVnNpcjRwenlwblJoL29MeWRRV3dNcUlmTUIwM3hrc3l4SVM1Qk5kSzRjYnpaa3Z0bGtYL0ZrRnZUQnJLUzBsU1A4M2VlV2l4STRNell2QTVtK1R1SXpjRXQrUUdvc0FQZ0pCdERITEdYaUlhenRSWGFCSzV0eUxLcDdCMnVHVytWY2JaUTVmZVdlUTVtQ0p4WFBYYjJ0OXNMQ1ExRUVBQ2dOQitJMGFiejFhS1l4TitFandQd2pDVVFaZnFnYjlVY0xQRXBDanFzckdEMFpPSWxQYjJRcmJjNHFWc2NMaUlWRDZvaWxGWFM5QzhzbTA3dmJJTzA3SUhoU1ovRm9jK3AzbCsvQVRVb0I4eTc1SEp2TzE8L3hlbmM6Q2lwaGVyVmFsdWU+DQogICA8L3hlbmM6Q2lwaGVyRGF0YT4NCjwveGVuYzpFbmNyeXB0ZWREYXRhPjwvc2FtbDpFbmNyeXB0ZWRJRD48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDIzLTA5LTEwVDE3OjQzOjM3WiIgUmVjaXBpZW50PSJodHRwczovL3BpdGJ1bGsubm8taXAub3JnL25ld29uZWxvZ2luL2RlbW8xL2luZGV4LnBocD9hY3MiIEluUmVzcG9uc2VUbz0iT05FTE9HSU5fYmYzNzJiOWQ2N2QwYzg5ZDBjZjFhZjNmZjYyNWVhN2MwNTFjOTg4NSIvPjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0PjxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDE0LTAzLTA5VDEyOjIzOjA3WiIgTm90T25PckFmdGVyPSIyMDIzLTA5LTEwVDE3OjQzOjM3WiI+PHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL25ld29uZWxvZ2luL2RlbW8xL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3NhbWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTQtMDMtMDlUMTI6MjM6MzdaIiBTZXNzaW9uTm90T25PckFmdGVyPSIyMDE0LTAzLTA5VDIwOjIzOjM3WiIgU2Vzc2lvbkluZGV4PSJfOTQ0YmZjYWNiMGQ4MzJiMTJlNGJjZjc3NGUwMmJiZTVmNjQ1NWM2ODAzIj48c2FtbDpBdXRobkNvbnRleHQ+PHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+PC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJ1aWQiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnRlc3Q8L3NhbWw6QXR0cmlidXRlVmFsdWU+PC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0ibWFpbCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdEBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJjbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdDwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJzbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+d2FhMjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJlZHVQZXJzb25BZmZpbGlhdGlvbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dXNlcjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5hZG1pbjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg== python3-saml-1.16.0/tests/data/responses/invalids/invalid_audience.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/invalid_issuer_assertion.xml.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python3-saml-1.16.0/tests/data/responses/invalids/invalid_issuer_message.xml.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python3-saml-1.16.0/tests/data/responses/invalids/invalid_sessionindex.xml.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-saml-1.16.0/tests/data/responses/invalids/invalid_subjectconfirmation_inresponse.xml.base64000066400000000000000000000055741451074743100337130ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCI+DQogIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+DQogIDxzYW1scDpTdGF0dXM+DQogICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPiAgICANCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAyMC0wNi0xN1QxNDo1OToxNFoiIFJlY2lwaWVudD0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iaW52YWxpZF9pbnJlc3BvbnNlIi8+DQogICAgICA8L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4NCiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0wNi0xN1QxNDo1Mzo0NFoiIE5vdE9uT3JBZnRlcj0iMjA5OS0wNi0xN1QxNDo1OToxNFoiPg0KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICAgICAgPHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPg0KICAgICAgPC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgPC9zYW1sOkNvbmRpdGlvbnM+DQogICAgPHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDExLTA2LTE3VDE0OjU0OjA3WiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjA5OS0wNi0xN1QyMjo1NDoxNFoiIFNlc3Npb25JbmRleD0iXzUxYmUzNzk2NWZlYjU1NzlkODAzMTQxMDc2OTM2ZGMyZTlkMWQ5OGViZiI+DQogICAgICA8c2FtbDpBdXRobkNvbnRleHQ+DQogICAgICAgIDxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPg0KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4NCiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+DQogICAgPHNhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9Im1haWwiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPg0KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5zb21lb25lQGV4YW1wbGUuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPg0KICAgICAgPC9zYW1sOkF0dHJpYnV0ZT4NCiAgICA8L3NhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICA8L3NhbWw6QXNzZXJ0aW9uPg0KPC9zYW1scDpSZXNwb25zZT4=python3-saml-1.16.0/tests/data/responses/invalids/invalid_subjectconfirmation_nb.xml.base64000066400000000000000000000056211451074743100321160ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeGMzMmFlZDY3LTgyMGYtNDI5Ni0wYzIwLTIwNWExMGRkNTc4NyIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIiBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCI+DQogIDxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+DQogIDxzYW1scDpTdGF0dXM+DQogICAgPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPg0KICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDc4NDE5OTFjLWM3M2YtNDAzNS1lMmVlLWMxNzBjMGUxZDNlNCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDYtMTdUMTQ6NTQ6MTRaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPiAgICANCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaGVsbG8uY29tIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdEJlZm9yZT0iMjk5OS0wNi0xN1QxNDo1OToxNFoiIFJlY2lwaWVudD0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiIEluUmVzcG9uc2VUbz0iXzU3YmNiZjcwLTdiMWYtMDEyZS1jODIxLTc4MmJjYjEzYmIzOCIvPg0KICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+DQogICAgPC9zYW1sOlN1YmplY3Q+DQogICAgPHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTAtMDYtMTdUMTQ6NTM6NDRaIiBOb3RPbk9yQWZ0ZXI9IjI5OTktMDYtMTdUMTQ6NTk6MTRaIj4NCiAgICAgIDxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgICAgIDxzYW1sOkF1ZGllbmNlPmh0dHA6Ly9zdHVmZi5jb20vZW5kcG9pbnRzL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0xN1QxNDo1NDowN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjI5OTktMDYtMTdUMjI6NTQ6MTRaIiBTZXNzaW9uSW5kZXg9Il81MWJlMzc5NjVmZWI1NTc5ZDgwMzE0MTA3NjkzNmRjMmU5ZDFkOThlYmYiPg0KICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Pg0KICAgICAgICA8c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj4NCiAgICAgIDwvc2FtbDpBdXRobkNvbnRleHQ+DQogICAgPC9zYW1sOkF1dGhuU3RhdGVtZW50Pg0KICAgIDxzYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c29tZW9uZUBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ python3-saml-1.16.0/tests/data/responses/invalids/invalid_subjectconfirmation_noa.xml.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-saml-1.16.0/tests/data/responses/invalids/invalid_subjectconfirmation_recipient.xml.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-saml-1.16.0/tests/data/responses/invalids/multiple_assertions.xml.base64000066400000000000000000000232761451074743100277740ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIElEPSJHT1NBTUxSMTI5MDExNzQ1NzE3OTQiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDEwLTExLTE4VDIxOjU3OjM3WiIgRGVzdGluYXRpb249IntyZWNpcGllbnR9Ij4NCiAgPHNhbWxwOlN0YXR1cz4NCiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+PC9zYW1scDpTdGF0dXM+DQogIDxzYW1sOkFzc2VydGlvbiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIFZlcnNpb249IjIuMCIgSUQ9InBmeGE0NjU3NGRmLWIzYjAtYTA2YS0yM2M4LTYzNjQxMzE5ODc3MiIgSXNzdWVJbnN0YW50PSIyMDEwLTExLTE4VDIxOjU3OjM3WiI+DQogICAgPHNhbWw6SXNzdWVyPmh0dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sL21ldGFkYXRhLzEzNTkwPC9zYW1sOklzc3Vlcj4NCiAgICA8ZHM6U2lnbmF0dXJlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgICAgIDxkczpTaWduZWRJbmZvPg0KICAgICAgICA8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgICAgICA8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8+DQogICAgICAgIDxkczpSZWZlcmVuY2UgVVJJPSIjcGZ4YTQ2NTc0ZGYtYjNiMC1hMDZhLTIzYzgtNjM2NDEzMTk4NzcyIj4NCiAgICAgICAgICA8ZHM6VHJhbnNmb3Jtcz4NCiAgICAgICAgICAgIDxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPg0KICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgICAgICAgIDwvZHM6VHJhbnNmb3Jtcz4NCiAgICAgICAgICA8ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz4NCiAgICAgICAgICA8ZHM6RGlnZXN0VmFsdWU+cEpRN01TL2VrNEtSUldHbXYvSDQzUmVIWU1zPTwvZHM6RGlnZXN0VmFsdWU+DQogICAgICAgIDwvZHM6UmVmZXJlbmNlPg0KICAgICAgPC9kczpTaWduZWRJbmZvPg0KICAgICAgPGRzOlNpZ25hdHVyZVZhbHVlPnlpdmVLY1BkRHB1RE5qNnNoclEzQUJ3ci9jQTNDcnlEMnBoRy94TFpzektXeFU1L21sYUt0OGV3YlpPZEtLdnRPczJwSEJ5NUR1YTNrOTRBRit6eEd5ZWw1Z09vd21veVhKcitBT3Ira1BPMHZsaTFWOG8zaFBQVVp3UmdTWDZROXBTMUNxUWdoS2lFYXNSeXlscXFKVWFQWXptT3pPRTgvWGxNa3dpV21PMD08L2RzOlNpZ25hdHVyZVZhbHVlPg0KICAgICAgPGRzOktleUluZm8+DQogICAgICAgIDxkczpYNTA5RGF0YT4NCiAgICAgICAgICA8ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUJyVENDQWFHZ0F3SUJBZ0lCQVRBREJnRUFNR2N4Q3pBSkJnTlZCQVlUQWxWVE1STXdFUVlEVlFRSURBcERZV3hwWm05eWJtbGhNUlV3RXdZRFZRUUhEQXhUWVc1MFlTQk5iMjVwWTJFeEVUQVBCZ05WQkFvTUNFOXVaVXh2WjJsdU1Sa3dGd1lEVlFRRERCQmhjSEF1YjI1bGJHOW5hVzR1WTI5dE1CNFhEVEV3TURNd09UQTVOVGcwTlZvWERURTFNRE13T1RBNU5UZzBOVm93WnpFTE1Ba0dBMVVFQmhNQ1ZWTXhFekFSQmdOVkJBZ01Da05oYkdsbWIzSnVhV0V4RlRBVEJnTlZCQWNNREZOaGJuUmhJRTF2Ym1sallURVJNQThHQTFVRUNnd0lUMjVsVEc5bmFXNHhHVEFYQmdOVkJBTU1FR0Z3Y0M1dmJtVnNiMmRwYmk1amIyMHdnWjh3RFFZSktvWklodmNOQVFFQkJRQURnWTBBTUlHSkFvR0JBT2pTdTFmalB5OGQ1dzRReUwxK3pkNGhJdzFNa2tmZjRXWS9UTEc4T1prVTVZVFNXbW1IUEQ1a3ZZSDV1b1hTLzZxUTgxcVhwUjJ3VjhDVG93WkpVTGcwOWRkUmRSbjhRc3FqMUZ5T0M1c2xFM3kyYloyb0Z1YTcyb2YvNDlmcHVqbkZUNktuUTYxQ0JNcWxEb1RRcU9UNjJ2R0o4blA2TVpXdkE2c3hxdWQ1QWdNQkFBRXdBd1lCQUFNQkFBPT08L2RzOlg1MDlDZXJ0aWZpY2F0ZT4NCiAgICAgICAgPC9kczpYNTA5RGF0YT4NCiAgICAgIDwvZHM6S2V5SW5mbz4NCiAgICA8L2RzOlNpZ25hdHVyZT4NCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5zdXBwb3J0QG9uZWxvZ2luLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxMC0xMS0xOFQyMjowMjozN1oiIFJlY2lwaWVudD0ie3JlY2lwaWVudH0iLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4NCiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0xMS0xOFQyMTo1MjozN1oiIE5vdE9uT3JBZnRlcj0iMjAxMC0xMS0xOFQyMjowMjozN1oiPg0KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICAgICAgPHNhbWw6QXVkaWVuY2U+e2F1ZGllbmNlfTwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMC0xMS0xOFQyMTo1NzozN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMTAtMTEtMTlUMjE6NTc6MzdaIiBTZXNzaW9uSW5kZXg9Il81MzFjMzJkMjgzYmRmZjdlMDRlNDg3YmNkYmM0ZGQ4ZCI+DQogICAgICA8c2FtbDpBdXRobkNvbnRleHQ+DQogICAgICAgIDxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPg0KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4NCiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+DQogICAgPHNhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9InVpZCI+DQogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOnN0cmluZyI+ZGVtbzwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0iYW5vdGhlcl92YWx1ZSI+DQogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOnN0cmluZyI+dmFsdWU8L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICA8L3NhbWw6QXR0cmlidXRlPg0KICAgIDwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+DQogIDwvc2FtbDpBc3NlcnRpb24+DQogIDxzYW1sOkFzc2VydGlvbiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIFZlcnNpb249IjIuMCIgSUQ9InBmeGE0NjU3NGRmLWIzYjAtYTA2YS0yM2M4LTYzNjQxMzE5ODc3MyIgSXNzdWVJbnN0YW50PSIyMDEwLTExLTE4VDIxOjU3OjQ1WiI+DQogICAgPHNhbWw6SXNzdWVyPmh0dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sL21ldGFkYXRhLzEzNTkwPC9zYW1sOklzc3Vlcj4NCiAgICA8ZHM6U2lnbmF0dXJlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgICAgIDxkczpTaWduZWRJbmZvPg0KICAgICAgICA8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgICAgICA8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8+DQogICAgICAgIDxkczpSZWZlcmVuY2UgVVJJPSIjcGZ4YTQ2NTc0ZGYtYjNiMC1hMDZhLTIzYzgtNjM2NDEzMTk4NzcyIj4NCiAgICAgICAgICA8ZHM6VHJhbnNmb3Jtcz4NCiAgICAgICAgICAgIDxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPg0KICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgICAgICAgIDwvZHM6VHJhbnNmb3Jtcz4NCiAgICAgICAgICA8ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz4NCiAgICAgICAgICA8ZHM6RGlnZXN0VmFsdWU+cEpRN01TL2VrNEtSUldHbXYvSDQzUmVIWU1zPTwvZHM6RGlnZXN0VmFsdWU+DQogICAgICAgIDwvZHM6UmVmZXJlbmNlPg0KICAgICAgPC9kczpTaWduZWRJbmZvPg0KICAgICAgPGRzOlNpZ25hdHVyZVZhbHVlPnlpdmVLY1BkRHB1RE5qNnNoclEzQUJ3ci9jQTNDcnlEMnBoRy94TFpzektXeFU1L21sYUt0OGV3YlpPZEtLdnRPczJwSEJ5NUR1YTNrOTRBRit6eEd5ZWw1Z09vd21veVhKcitBT3Ira1BPMHZsaTFWOG8zaFBQVVp3UmdTWDZROXBTMUNxUWdoS2lFYXNSeXlscXFKVWFQWXptT3pPRTgvWGxNa3dpV21PMD08L2RzOlNpZ25hdHVyZVZhbHVlPg0KICAgICAgPGRzOktleUluZm8+DQogICAgICAgIDxkczpYNTA5RGF0YT4NCiAgICAgICAgICA8ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUJyVENDQWFHZ0F3SUJBZ0lCQVRBREJnRUFNR2N4Q3pBSkJnTlZCQVlUQWxWVE1STXdFUVlEVlFRSURBcERZV3hwWm05eWJtbGhNUlV3RXdZRFZRUUhEQXhUWVc1MFlTQk5iMjVwWTJFeEVUQVBCZ05WQkFvTUNFOXVaVXh2WjJsdU1Sa3dGd1lEVlFRRERCQmhjSEF1YjI1bGJHOW5hVzR1WTI5dE1CNFhEVEV3TURNd09UQTVOVGcwTlZvWERURTFNRE13T1RBNU5UZzBOVm93WnpFTE1Ba0dBMVVFQmhNQ1ZWTXhFekFSQmdOVkJBZ01Da05oYkdsbWIzSnVhV0V4RlRBVEJnTlZCQWNNREZOaGJuUmhJRTF2Ym1sallURVJNQThHQTFVRUNnd0lUMjVsVEc5bmFXNHhHVEFYQmdOVkJBTU1FR0Z3Y0M1dmJtVnNiMmRwYmk1amIyMHdnWjh3RFFZSktvWklodmNOQVFFQkJRQURnWTBBTUlHSkFvR0JBT2pTdTFmalB5OGQ1dzRReUwxK3pkNGhJdzFNa2tmZjRXWS9UTEc4T1prVTVZVFNXbW1IUEQ1a3ZZSDV1b1hTLzZxUTgxcVhwUjJ3VjhDVG93WkpVTGcwOWRkUmRSbjhRc3FqMUZ5T0M1c2xFM3kyYloyb0Z1YTcyb2YvNDlmcHVqbkZUNktuUTYxQ0JNcWxEb1RRcU9UNjJ2R0o4blA2TVpXdkE2c3hxdWQ1QWdNQkFBRXdBd1lCQUFNQkFBPT08L2RzOlg1MDlDZXJ0aWZpY2F0ZT4NCiAgICAgICAgPC9kczpYNTA5RGF0YT4NCiAgICAgIDwvZHM6S2V5SW5mbz4NCiAgICA8L2RzOlNpZ25hdHVyZT4NCiAgICA8c2FtbDpTdWJqZWN0Pg0KICAgICAgPHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5zdXBwb3J0QG9uZWxvZ2luLmNvbTwvc2FtbDpOYW1lSUQ+DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxMC0xMS0xOFQyMjowMjo0NVoiIFJlY2lwaWVudD0ie3JlY2lwaWVudH0iLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4NCiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMC0xMS0xOFQyMTo1MjozN1oiIE5vdE9uT3JBZnRlcj0iMjAxMC0xMS0xOFQyMjowMjo0NVoiPg0KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAgICAgICAgPHNhbWw6QXVkaWVuY2U+e2F1ZGllbmNlfTwvc2FtbDpBdWRpZW5jZT4NCiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgIDwvc2FtbDpDb25kaXRpb25zPg0KICAgIDxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMC0xMS0xOFQyMTo1Nzo0NVoiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMTAtMTEtMTlUMjE6NTc6NDVaIiBTZXNzaW9uSW5kZXg9Il81MzFjMzJkMjgzYmRmZjdlMDRlNDg3YmNkYmM0ZGQ4ZCI+DQogICAgICA8c2FtbDpBdXRobkNvbnRleHQ+DQogICAgICAgIDxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPg0KICAgICAgPC9zYW1sOkF1dGhuQ29udGV4dD4NCiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+DQogICAgPHNhbWw6QXR0cmlidXRlU3RhdGVtZW50Pg0KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWU9InVpZCI+DQogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOnN0cmluZyI+ZGVtbzwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0iYW5vdGhlcl92YWx1ZSI+DQogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOnN0cmluZyI+dmFsdWU8L3NhbWw6QXR0cmlidXRlVmFsdWU+DQogICAgICA8L3NhbWw6QXR0cmlidXRlPg0KICAgIDwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+DQogIDwvc2FtbDpBc3NlcnRpb24+DQo8L3NhbWxwOlJlc3BvbnNlPg== python3-saml-1.16.0/tests/data/responses/invalids/no_authnstatement.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_conditions.xml.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python3-saml-1.16.0/tests/data/responses/invalids/no_id.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_issuer_assertion.xml.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-saml-1.16.0/tests/data/responses/invalids/no_issuer_response.xml.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python3-saml-1.16.0/tests/data/responses/invalids/no_key.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_nameid.xml.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python3-saml-1.16.0/tests/data/responses/invalids/no_saml2.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_signature.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_status.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_status_code.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/no_subjectconfirmation_data.xml.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python3-saml-1.16.0/tests/data/responses/invalids/no_subjectconfirmation_method.xml.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python3-saml-1.16.0/tests/data/responses/invalids/not_after_failed.xml.base64000066400000000000000000000073451451074743100271530ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIElEPSJwZnhmYTk3ZWVkNS03NTg4LTBkMjMtMmFkNy1mYTY2ZjI4OTM3ODgiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAyLTE5VDAxOjA1OjQ5WiIgRGVzdGluYXRpb249Imh0dHBzOi8vZXhhbXBsZS5jb20vbmV3b25lbG9naW4vZGVtbzEvaW5kZXgucGhwP2FjcyIgSW5SZXNwb25zZVRvPSJPTkVMT0dJTl9hZjNkNGE3MTBmYzhiMzA1ODg0Yjk2ZDAwOTRhYjYyODgwMmY1NjkyIj48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9leGFtcGxlLmNvbS9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxzYW1sOkFzc2VydGlvbiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIElEPSJwZng3ZTQ4ZmQ3NS1jZTJiLTYwZWQtMjllZS1lNzk4NDZjOTU5YzYiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDE0LTAyLTE5VDAxOjA1OjQ5WiI+PHNhbWw6SXNzdWVyPmh0dHBzOi8vZXhhbXBsZS5jb20vc2ltcGxlc2FtbC9zYW1sMi9pZHAvbWV0YWRhdGEucGhwPC9zYW1sOklzc3Vlcj4NCjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaHR0cHM6Ly9leGFtcGxlLmNvbS9uZXdvbmVsb2dpbi9kZW1vMS9tZXRhZGF0YS5waHAiIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj40OTI4ODI2MTVhY2YzMWM4MDk2YjYyNzI0NWQ3NmFlNTMwMzZjMDkwPC9zYW1sOk5hbWVJRD48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDE0LTAyLTE5VDAxOjEwOjQ5WiIgUmVjaXBpZW50PSJodHRwczovL2V4YW1wbGUuY29tL25ld29uZWxvZ2luL2RlbW8xL2luZGV4LnBocD9hY3MiIEluUmVzcG9uc2VUbz0iT05FTE9HSU5fYWYzZDRhNzEwZmM4YjMwNTg4NGI5NmQwMDk0YWI2Mjg4MDJmNTY5MiIvPjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0PjxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDE0LTAyLTE5VDAxOjA1OjE5WiIgTm90T25PckFmdGVyPSIyMDE0LTAyLTE5VDAxOjEwOjQ5WiI+PHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5odHRwczovL2V4YW1wbGUuY29tL25ld29uZWxvZ2luL2RlbW8xL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3NhbWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTQtMDItMThUMTk6NDI6MjBaIiBTZXNzaW9uTm90T25PckFmdGVyPSIyMDE0LTAyLTE5VDA5OjA1OjQ5WiIgU2Vzc2lvbkluZGV4PSJfMGY0ZjE4OGRjMWJmZDNiZmVhMzZhMTYzNGE3NDQxNTgzYWZjM2IzNzgxIj48c2FtbDpBdXRobkNvbnRleHQ+PHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+PC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJ1aWQiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnVzZXI8L3NhbWw6QXR0cmlidXRlVmFsdWU+PC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0ibWFpbCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dXNlckBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJjbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdDwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJzbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dXNlcjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJlZHVQZXJzb25BZmZpbGlhdGlvbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dXNlcjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5hZG1pbjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg== python3-saml-1.16.0/tests/data/responses/invalids/not_before_failed.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/response_encrypted_attrs.xml.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python3-saml-1.16.0/tests/data/responses/invalids/signature_wrapping_attack.xml.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python3-saml-1.16.0/tests/data/responses/invalids/signature_wrapping_attack2.xml.base64000066400000000000000000000243741451074743100312100ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCjxuczA6UmVzcG9uc2UgeG1sbnM6bnMwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOm5zMT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgeG1sbnM6bnMyPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiBEZXN0aW5hdGlvbj0iaHR0cDovL2xpbmdvbi5jYXRhbG9naXguc2U6ODA4Ny8iIElEPSJpZC12cU9RNzJKQ3BwWGFCV25CRSIgSW5SZXNwb25zZVRvPSJpZDEyIiBJc3N1ZUluc3RhbnQ9IjIwMTktMTItMjBUMTI6MTU6MTZaIiBWZXJzaW9uPSIyLjAiPjxuczE6SXNzdWVyIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOm5hbWVpZC1mb3JtYXQ6ZW50aXR5Ij51cm46bWFjZTpleGFtcGxlLmNvbTpzYW1sOnJvbGFuZDppZHA8L25zMTpJc3N1ZXI+PG5zMDpTdGF0dXM+PG5zMDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nlc3MiLz48L25zMDpTdGF0dXM+PG5zMTpBc3NlcnRpb24gSUQ9ImlkLVNQT09GRURfQVNTRVJUSU9OIiBJc3N1ZUluc3RhbnQ9IjIwMTktMTItMjBUMTI6MTU6MTZaIiBWZXJzaW9uPSIyLjAiPjxuczE6SXNzdWVyIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOm5hbWVpZC1mb3JtYXQ6ZW50aXR5Ij51cm46bWFjZTpleGFtcGxlLmNvbTpzYW1sOnJvbGFuZDppZHA8L25zMTpJc3N1ZXI+PG5zMjpTaWduYXR1cmUgSWQ9IlNpZ25hdHVyZTIiPjxuczI6U2lnbmVkSW5mbz48bnMyOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48bnMyOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPjxuczI6UmVmZXJlbmNlIFVSST0iI2lkLUFhOUlXZkR4SlZJWDZHUXllIj48bnMyOlRyYW5zZm9ybXM+PG5zMjpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxuczI6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+PC9uczI6VHJhbnNmb3Jtcz48bnMyOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PG5zMjpEaWdlc3RWYWx1ZT5FV0J2UVVscndRYnRyQWp1VVhrU0JBVnNaNTA9PC9uczI6RGlnZXN0VmFsdWU+PC9uczI6UmVmZXJlbmNlPjwvbnMyOlNpZ25lZEluZm8+PG5zMjpTaWduYXR1cmVWYWx1ZT5tNHpSZ1RXbGVNY3gxZEZib2VpWWxiaURpZ0hXQVZoSFZhK0dMTisrRUxOTUZEdXR1ekJ4YzN0dTZva3lhTlFHVzNsZXUzMnd6YmZkcGI1KzNSbHBHb0tqMndQWDU3MC9FTUpqNHV3OTFYZlhzWmZwTlArNUdsZ05UOHcvZWxEbUJYaEcvS3dtU080NzdJbWswc3pLb3ZUQk1WSG1vM1FPZCtiYS8vZFZzSkU9PC9uczI6U2lnbmF0dXJlVmFsdWU+PG5zMjpLZXlJbmZvPjxuczI6WDUwOURhdGE+PG5zMjpYNTA5Q2VydGlmaWNhdGU+TUlJQ3NEQ0NBaG1nQXdJQkFnSUpBSnJ6cVNTd21EWTlNQTBHQ1NxR1NJYjNEUUVCQlFVQU1FVXhDekFKQmdOVkJBWVRBa0ZWTVJNd0VRWURWUVFJRXdwVGIyMWxMVk4wWVhSbE1TRXdId1lEVlFRS0V4aEpiblJsY201bGRDQlhhV1JuYVhSeklGQjBlU0JNZEdRd0hoY05NRGt4TURBMk1UazBPVFF4V2hjTk1Ea3hNVEExTVRrME9UUXhXakJGTVFzd0NRWURWUVFHRXdKQlZURVRNQkVHQTFVRUNCTUtVMjl0WlMxVGRHRjBaVEVoTUI4R0ExVUVDaE1ZU1c1MFpYSnVaWFFnVjJsa1oybDBjeUJRZEhrZ1RIUmtNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURKZzJjbXM3TXFqbmlUOEZpL1hrTkhaTlBiTlZReU1VTVhFOXRYT2Rxd1lDQTFjYzh2UWR6a2loc2NRTVh5M2lQdzJjTWdnQnU2Z2pNVE9TT3hFQ2t1dlg1WkNjbEtyOHBYQUpNNWNZNmdWT2FWTzJQZFRaY3ZEQktHYmlhTmVmaUV3NWhub1pvbXFaR3A4d0hOTEFVa3d0SDl2anFxdnh5Uy92Y2xjNmsyZXdJREFRQUJvNEduTUlHa01CMEdBMVVkRGdRV0JCUmVQc0tIS1lKc2lvakU3OFpXWGNjSzlLNGFKVEIxQmdOVkhTTUViakJzZ0JSZVBzS0hLWUpzaW9qRTc4WldYY2NLOUs0YUphRkpwRWN3UlRFTE1Ba0dBMVVFQmhNQ1FWVXhFekFSQmdOVkJBZ1RDbE52YldVdFUzUmhkR1V4SVRBZkJnTlZCQW9UR0VsdWRHVnlibVYwSUZkcFpHZHBkSE1nVUhSNUlFeDBaSUlKQUpyenFTU3dtRFk5TUF3R0ExVWRFd1FGTUFNQkFmOHdEUVlKS29aSWh2Y05BUUVGQlFBRGdZRUFKU3JLT0V6SE83VEw1Y3k2aDNxaCszK0pBazhIYkdCVytjYlg2S0JDQXcvbXpVOGZsSzI1dm5Xd1hTM2R2MkZGM0FvZDAvUzdBV05mS2liNVUvU0E5bkphei9tV2VGOVMwZmFyejlBUUZjOC9OU3pBemFWcTdZYk00RjZmNk4yRlJsN0dpa2RYUkNlZDQ1ajZtclB6R3prM0VDYnVwRm5xeVJFSDMrWlBTZGs9PC9uczI6WDUwOUNlcnRpZmljYXRlPjwvbnMyOlg1MDlEYXRhPjwvbnMyOktleUluZm8+PC9uczI6U2lnbmF0dXJlPjxuczE6U3ViamVjdD48bnMxOk5hbWVJRCBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpuYW1laWQtZm9ybWF0OnRyYW5zaWVudCIgTmFtZVF1YWxpZmllcj0iIiBTUE5hbWVRdWFsaWZpZXI9ImlkMTIiPkFOT1RIRVJfSUQ8L25zMTpOYW1lSUQ+PG5zMTpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+PG5zMTpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBJblJlc3BvbnNlVG89ImlkMTIiIE5vdE9uT3JBZnRlcj0iMjAxOS0xMi0yMFQxMjoyMDoxNloiIFJlY2lwaWVudD0iaHR0cDovL2xpbmdvbi5jYXRhbG9naXguc2U6ODA4Ny8iLz48L25zMTpTdWJqZWN0Q29uZmlybWF0aW9uPjwvbnMxOlN1YmplY3Q+PG5zMTpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxOS0xMi0yMFQxMjoxNToxNloiIE5vdE9uT3JBZnRlcj0iMjAxOS0xMi0yMFQxMjoyMDoxNloiPjxuczE6QXVkaWVuY2VSZXN0cmljdGlvbj48bnMxOkF1ZGllbmNlPnVybjptYWNlOmV4YW1wbGUuY29tOnNhbWw6cm9sYW5kOnNwPC9uczE6QXVkaWVuY2U+PC9uczE6QXVkaWVuY2VSZXN0cmljdGlvbj48L25zMTpDb25kaXRpb25zPjxuczE6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDE5LTEyLTIwVDEyOjE1OjE2WiIgU2Vzc2lvbkluZGV4PSJpZC1lRWhOQ2M1QlNpZXNWT2w4QiI+PG5zMTpBdXRobkNvbnRleHQ+PG5zMTpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpJbnRlcm5ldFByb3RvY29sUGFzc3dvcmQ8L25zMTpBdXRobkNvbnRleHRDbGFzc1JlZj48bnMxOkF1dGhlbnRpY2F0aW5nQXV0aG9yaXR5Pmh0dHA6Ly93d3cuZXhhbXBsZS5jb20vbG9naW48L25zMTpBdXRoZW50aWNhdGluZ0F1dGhvcml0eT48L25zMTpBdXRobkNvbnRleHQ+PC9uczE6QXV0aG5TdGF0ZW1lbnQ+PG5zMTpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PG5zMTpBdHRyaWJ1dGUgRnJpZW5kbHlOYW1lPSJlZHVQZXJzb25BZmZpbGlhdGlvbiIgTmFtZT0idXJuOm9pZDoxLjMuNi4xLjQuMS41OTIzLjEuMS4xLjEiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dXJpIj48bnMxOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeHNpOnR5cGU9InhzOnN0cmluZyI+c3RhZmY8L25zMTpBdHRyaWJ1dGVWYWx1ZT48bnMxOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeHNpOnR5cGU9InhzOnN0cmluZyI+QURNSU48L25zMTpBdHRyaWJ1dGVWYWx1ZT48L25zMTpBdHRyaWJ1dGU+PG5zMTpBdHRyaWJ1dGUgRnJpZW5kbHlOYW1lPSJtYWlsIiBOYW1lPSJ1cm46b2lkOjAuOS4yMzQyLjE5MjAwMzAwLjEwMC4xLjMiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dXJpIj48bnMxOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeHNpOnR5cGU9InhzOnN0cmluZyI+SEFDS0VSQGdtYWlsLmNvbTwvbnMxOkF0dHJpYnV0ZVZhbHVlPjwvbnMxOkF0dHJpYnV0ZT48bnMxOkF0dHJpYnV0ZSBGcmllbmRseU5hbWU9ImdpdmVuTmFtZSIgTmFtZT0idXJuOm9pZDoyLjUuNC40MiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDp1cmkiPjxuczE6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4c2k6dHlwZT0ieHM6c3RyaW5nIj5EZXJlazwvbnMxOkF0dHJpYnV0ZVZhbHVlPjwvbnMxOkF0dHJpYnV0ZT48bnMxOkF0dHJpYnV0ZSBGcmllbmRseU5hbWU9InN1ck5hbWUiIE5hbWU9InVybjpvaWQ6Mi41LjQuNCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDp1cmkiPjxuczE6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4c2k6dHlwZT0ieHM6c3RyaW5nIj5KZXRlcjwvbnMxOkF0dHJpYnV0ZVZhbHVlPjwvbnMxOkF0dHJpYnV0ZT48bnMxOkF0dHJpYnV0ZSBGcmllbmRseU5hbWU9InRpdGxlIiBOYW1lPSJ1cm46b2lkOjIuNS40LjEyIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVyaSI+PG5zMTpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhzaTp0eXBlPSJ4czpzdHJpbmciPnNob3J0c3RvcDwvbnMxOkF0dHJpYnV0ZVZhbHVlPjwvbnMxOkF0dHJpYnV0ZT48L25zMTpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PC9uczE6QXNzZXJ0aW9uPg0KPFhTV19BVFRBQ0s+DQo8bnMxOkFzc2VydGlvbiBJRD0iaWQtQWE5SVdmRHhKVklYNkdReWUiIElzc3VlSW5zdGFudD0iMjAxOS0xMi0yMFQxMjoxNToxNloiIFZlcnNpb249IjIuMCI+PG5zMTpJc3N1ZXIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDplbnRpdHkiPnVybjptYWNlOmV4YW1wbGUuY29tOnNhbWw6cm9sYW5kOmlkcDwvbnMxOklzc3Vlcj48bnMxOlN1YmplY3Q+PG5zMTpOYW1lSUQgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDp0cmFuc2llbnQiIE5hbWVRdWFsaWZpZXI9IiIgU1BOYW1lUXVhbGlmaWVyPSJpZDEyIj5hYzViMjJiYjhlYWM0YTI2ZWQwN2E1NTQzMmEwZmUwZGEyNDNmNmU5MTFhYTYxNGNmZjQwMmM0NGQ3Y2RlYzM2PC9uczE6TmFtZUlEPjxuczE6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxuczE6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgSW5SZXNwb25zZVRvPSJpZDEyIiBOb3RPbk9yQWZ0ZXI9IjIwMTktMTItMjBUMTI6MjA6MTZaIiBSZWNpcGllbnQ9Imh0dHA6Ly9saW5nb24uY2F0YWxvZ2l4LnNlOjgwODcvIi8+PC9uczE6U3ViamVjdENvbmZpcm1hdGlvbj48L25zMTpTdWJqZWN0PjxuczE6Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMTktMTItMjBUMTI6MTU6MTZaIiBOb3RPbk9yQWZ0ZXI9IjIwMTktMTItMjBUMTI6MjA6MTZaIj48bnMxOkF1ZGllbmNlUmVzdHJpY3Rpb24+PG5zMTpBdWRpZW5jZT51cm46bWFjZTpleGFtcGxlLmNvbTpzYW1sOnJvbGFuZDpzcDwvbnMxOkF1ZGllbmNlPjwvbnMxOkF1ZGllbmNlUmVzdHJpY3Rpb24+PC9uczE6Q29uZGl0aW9ucz48bnMxOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxOS0xMi0yMFQxMjoxNToxNloiIFNlc3Npb25JbmRleD0iaWQtZUVoTkNjNUJTaWVzVk9sOEIiPjxuczE6QXV0aG5Db250ZXh0PjxuczE6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6SW50ZXJuZXRQcm90b2NvbFBhc3N3b3JkPC9uczE6QXV0aG5Db250ZXh0Q2xhc3NSZWY+PG5zMTpBdXRoZW50aWNhdGluZ0F1dGhvcml0eT5odHRwOi8vd3d3LmV4YW1wbGUuY29tL2xvZ2luPC9uczE6QXV0aGVudGljYXRpbmdBdXRob3JpdHk+PC9uczE6QXV0aG5Db250ZXh0PjwvbnMxOkF1dGhuU3RhdGVtZW50PjxuczE6QXR0cmlidXRlU3RhdGVtZW50PjxuczE6QXR0cmlidXRlIEZyaWVuZGx5TmFtZT0iZWR1UGVyc29uQWZmaWxpYXRpb24iIE5hbWU9InVybjpvaWQ6MS4zLjYuMS40LjEuNTkyMy4xLjEuMS4xIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVyaSI+PG5zMTpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhzaTp0eXBlPSJ4czpzdHJpbmciPnN0YWZmPC9uczE6QXR0cmlidXRlVmFsdWU+PG5zMTpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhzaTp0eXBlPSJ4czpzdHJpbmciPm1lbWJlcjwvbnMxOkF0dHJpYnV0ZVZhbHVlPjwvbnMxOkF0dHJpYnV0ZT48bnMxOkF0dHJpYnV0ZSBGcmllbmRseU5hbWU9Im1haWwiIE5hbWU9InVybjpvaWQ6MC45LjIzNDIuMTkyMDAzMDAuMTAwLjEuMyIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDp1cmkiPjxuczE6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4c2k6dHlwZT0ieHM6c3RyaW5nIj5mb29AZ21haWwuY29tPC9uczE6QXR0cmlidXRlVmFsdWU+PC9uczE6QXR0cmlidXRlPjxuczE6QXR0cmlidXRlIEZyaWVuZGx5TmFtZT0iZ2l2ZW5OYW1lIiBOYW1lPSJ1cm46b2lkOjIuNS40LjQyIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVyaSI+PG5zMTpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhzaTp0eXBlPSJ4czpzdHJpbmciPkRlcmVrPC9uczE6QXR0cmlidXRlVmFsdWU+PC9uczE6QXR0cmlidXRlPjxuczE6QXR0cmlidXRlIEZyaWVuZGx5TmFtZT0ic3VyTmFtZSIgTmFtZT0idXJuOm9pZDoyLjUuNC40IiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVyaSI+PG5zMTpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhzaTp0eXBlPSJ4czpzdHJpbmciPkpldGVyPC9uczE6QXR0cmlidXRlVmFsdWU+PC9uczE6QXR0cmlidXRlPjxuczE6QXR0cmlidXRlIEZyaWVuZGx5TmFtZT0idGl0bGUiIE5hbWU9InVybjpvaWQ6Mi41LjQuMTIiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dXJpIj48bnMxOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeHNpOnR5cGU9InhzOnN0cmluZyI+c2hvcnRzdG9wPC9uczE6QXR0cmlidXRlVmFsdWU+PC9uczE6QXR0cmlidXRlPjwvbnMxOkF0dHJpYnV0ZVN0YXRlbWVudD48L25zMTpBc3NlcnRpb24+DQo8L1hTV19BVFRBQ0s+DQo8L25zMDpSZXNwb25zZT4=python3-saml-1.16.0/tests/data/responses/invalids/signed_assertion_response.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/status_code_responder.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/status_code_responer_and_msg.xml.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 python3-saml-1.16.0/tests/data/responses/invalids/wrong_spnamequalifier.xml.base64000066400000000000000000000143541451074743100302650ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeDEzNzFkZmU1LTdlMmYtMTdiNy1hODE1LTVmNWU5YTRiNjVkYSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciPjxzYW1sOklzc3Vlcj5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21ldGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDEzNzFkZmU1LTdlMmYtMTdiNy1hODE1LTVmNWU5YTRiNjVkYSI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+c3lrMGNHOHAxOGpSMUtINThKNnR3Z0JNYlhzPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT4yaytTbmhjWWhSV0FLQWdLR2hyMVpZN1ZsSWtWSytsbEFKZncxVnllKzRkWFpZTGh0TkwrMUJ3bWRlVHlLY1BEYjNWSmZtNXRzRGFWRDNtTHVUd2E5L0EvUCt0ZnY0d0t6YVQrdmJvTDl0RVFnNFAwR3hmaWRzbkYrQUM0Z2lLb0VBRE5RbmlaamExR1hhM3VOdi85TEVYV1h4YmZaVGJPNmxLNnlhbGR6UkU9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeGI0ZWM5YzhhLTQ4ZWItZmRhMi03Zjc0LWZhMWExMDVhOTlmZSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIj48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0id3Jvbmctc3AtZW50aXR5aWQiIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj50ZXN0QGV4YW1wbGUuY29tPC9zYW1sOk5hbWVJRD48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDIzLTA4LTIzVDA2OjU3OjAxWiIgUmVjaXBpZW50PSJodHRwczovL3BpdGJ1bGsubm8taXAub3JnL25ld29uZWxvZ2luL2RlbW8xL2luZGV4LnBocD9hY3MiIEluUmVzcG9uc2VUbz0iT05FTE9HSU5fNWZlOWQ2ZTQ5OWIyZjA5MTMyMDZhYWIzZjcxOTE3MjkwNDliYjgwNyIvPjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0PjxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDE0LTAyLTE5VDAxOjM2OjMxWiIgTm90T25PckFmdGVyPSIyMDIzLTA4LTIzVDA2OjU3OjAxWiI+PHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL25ld29uZWxvZ2luL2RlbW8xL21ldGFkYXRhLnBocDwvc2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3NhbWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIiBTZXNzaW9uTm90T25PckFmdGVyPSIyMDE0LTAyLTE5VDA5OjM3OjAxWiIgU2Vzc2lvbkluZGV4PSJfNjI3M2Q3N2I4Y2RlMGMzMzNlYzc5ZDIyYTlmYTAwMDNiOWZlMmQ3NWNiIj48c2FtbDpBdXRobkNvbnRleHQ+PHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+PC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJ1aWQiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPnNtYXJ0aW48L3NhbWw6QXR0cmlidXRlVmFsdWU+PC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0ibWFpbCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdEBleGFtcGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJjbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+U2l4dG8zPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9InNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5NYXJ0aW4yPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImVkdVBlcnNvbkFmZmlsaWF0aW9uIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj51c2VyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPmFkbWluPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U+python3-saml-1.16.0/tests/data/responses/no_audience.xml.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python3-saml-1.16.0/tests/data/responses/open_saml_response.xml000066400000000000000000000066231451074743100246630ustar00rootroot00000000000000 https://idm.orademo.com uHuSry39P16Yh7srS32xESmj4Lw= fdghdfggfd= dfghjkl https://idm.orademo.com someone@example.org hello.com urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport Someone Special python3-saml-1.16.0/tests/data/responses/pretty_decrypted_valid_encrypted_assertion.xml000066400000000000000000000054341451074743100317040ustar00rootroot00000000000000 http://idp.example.com/ http://idp.example.com/_68392312d490db6d355555cfbbd8ec95d746516f60http://stuff.com/endpoints/metadata.phpurn:oasis:names:tc:SAML:2.0:ac:classes:Passwordtesttest@example.comtestwaa2useradmin python3-saml-1.16.0/tests/data/responses/pretty_signed_message_response.xml000066400000000000000000000117371451074743100272740ustar00rootroot00000000000000 https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php mv5lfRE63rPIrb29tQ6Qbfe/yvY=yQvrNsoSwWXL3rSW3sH6iyfG0ukrq1tyvsydSrs63wz1ayaVY/uXBQuldn1VcQmOZpQgDwnZwjmb5fU+CZejQw5dTtj2mJR50TO1Wj81upVEtQByF2RyOP1GsB27dSeYRTMYsK64ywzIxfltw02BBQUqpz10i3EtlVh46hc+LWY= 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 https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php _b98f98bb1ab512ced653b58baaff543448daed535d https://pitbulk.no-ip.org/newonelogin/demo1/metadata.php urn:oasis:names:tc:SAML:2.0:ac:classes:Password test test@example.com test waa2 user admin python3-saml-1.16.0/tests/data/responses/response1.xml.base64000066400000000000000000000121141451074743100237620ustar00rootroot00000000000000DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgSUQ9IkdPU0FNTFIxMjkwMTE3NDU3MTc5NCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTAtMTEtMThUMjE6NTc6MzdaIiBEZXN0aW5hdGlvbj0ie3JlY2lwaWVudH0iPg0KICA8c2FtbHA6U3RhdHVzPg0KICAgIDxzYW1scDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nlc3MiLz48L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgVmVyc2lvbj0iMi4wIiBJRD0icGZ4YTQ2NTc0ZGYtYjNiMC1hMDZhLTIzYzgtNjM2NDEzMTk4NzcyIiBJc3N1ZUluc3RhbnQ9IjIwMTAtMTEtMThUMjE6NTc6MzdaIj4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cHM6Ly9hcHAub25lbG9naW4uY29tL3NhbWwvbWV0YWRhdGEvMTM1OTA8L3NhbWw6SXNzdWVyPg0KICAgIDxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICAgICAgPGRzOlNpZ25lZEluZm8+DQogICAgICAgIDxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgICAgICAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZnhhNDY1NzRkZi1iM2IwLWEwNmEtMjNjOC02MzY0MTMxOTg3NzIiPg0KICAgICAgICAgIDxkczpUcmFuc2Zvcm1zPg0KICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+DQogICAgICAgICAgICA8ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgICAgICAgPC9kczpUcmFuc2Zvcm1zPg0KICAgICAgICAgIDxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjc2hhMSIvPg0KICAgICAgICAgIDxkczpEaWdlc3RWYWx1ZT5wSlE3TVMvZWs0S1JSV0dtdi9INDNSZUhZTXM9PC9kczpEaWdlc3RWYWx1ZT4NCiAgICAgICAgPC9kczpSZWZlcmVuY2U+DQogICAgICA8L2RzOlNpZ25lZEluZm8+DQogICAgICA8ZHM6U2lnbmF0dXJlVmFsdWU+eWl2ZUtjUGREcHVETmo2c2hyUTNBQndyL2NBM0NyeUQycGhHL3hMWnN6S1d4VTUvbWxhS3Q4ZXdiWk9kS0t2dE9zMnBIQnk1RHVhM2s5NEFGK3p4R3llbDVnT293bW95WEpyK0FPcitrUE8wdmxpMVY4bzNoUFBVWndSZ1NYNlE5cFMxQ3FRZ2hLaUVhc1J5eWxxcUpVYVBZem1Pek9FOC9YbE1rd2lXbU8wPTwvZHM6U2lnbmF0dXJlVmFsdWU+DQogICAgICA8ZHM6S2V5SW5mbz4NCiAgICAgICAgPGRzOlg1MDlEYXRhPg0KICAgICAgICAgIDxkczpYNTA5Q2VydGlmaWNhdGU+TUlJQnJUQ0NBYUdnQXdJQkFnSUJBVEFEQmdFQU1HY3hDekFKQmdOVkJBWVRBbFZUTVJNd0VRWURWUVFJREFwRFlXeHBabTl5Ym1saE1SVXdFd1lEVlFRSERBeFRZVzUwWVNCTmIyNXBZMkV4RVRBUEJnTlZCQW9NQ0U5dVpVeHZaMmx1TVJrd0Z3WURWUVFEREJCaGNIQXViMjVsYkc5bmFXNHVZMjl0TUI0WERURXdNRE13T1RBNU5UZzBOVm9YRFRFMU1ETXdPVEE1TlRnME5Wb3daekVMTUFrR0ExVUVCaE1DVlZNeEV6QVJCZ05WQkFnTUNrTmhiR2xtYjNKdWFXRXhGVEFUQmdOVkJBY01ERk5oYm5SaElFMXZibWxqWVRFUk1BOEdBMVVFQ2d3SVQyNWxURzluYVc0eEdUQVhCZ05WQkFNTUVHRndjQzV2Ym1Wc2IyZHBiaTVqYjIwd2daOHdEUVlKS29aSWh2Y05BUUVCQlFBRGdZMEFNSUdKQW9HQkFPalN1MWZqUHk4ZDV3NFF5TDEremQ0aEl3MU1ra2ZmNFdZL1RMRzhPWmtVNVlUU1dtbUhQRDVrdllINXVvWFMvNnFRODFxWHBSMndWOENUb3daSlVMZzA5ZGRSZFJuOFFzcWoxRnlPQzVzbEUzeTJiWjJvRnVhNzJvZi80OWZwdWpuRlQ2S25RNjFDQk1xbERvVFFxT1Q2MnZHSjhuUDZNWld2QTZzeHF1ZDVBZ01CQUFFd0F3WUJBQU1CQUE9PTwvZHM6WDUwOUNlcnRpZmljYXRlPg0KICAgICAgICA8L2RzOlg1MDlEYXRhPg0KICAgICAgPC9kczpLZXlJbmZvPg0KICAgIDwvZHM6U2lnbmF0dXJlPg0KICAgIDxzYW1sOlN1YmplY3Q+DQogICAgICA8c2FtbDpOYW1lSUQgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDplbWFpbEFkZHJlc3MiPnN1cHBvcnRAb25lbG9naW4uY29tPC9zYW1sOk5hbWVJRD4NCiAgICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVyIj4NCiAgICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDEwLTExLTE4VDIyOjAyOjM3WiIgUmVjaXBpZW50PSJ7cmVjaXBpZW50fSIvPjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPg0KICAgIDwvc2FtbDpTdWJqZWN0Pg0KICAgIDxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDEwLTExLTE4VDIxOjUyOjM3WiIgTm90T25PckFmdGVyPSIyMDEwLTExLTE4VDIyOjAyOjM3WiI+DQogICAgICA8c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPg0KICAgICAgICA8c2FtbDpBdWRpZW5jZT57YXVkaWVuY2V9PC9zYW1sOkF1ZGllbmNlPg0KICAgICAgPC9zYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+DQogICAgPC9zYW1sOkNvbmRpdGlvbnM+DQogICAgPHNhbWw6QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDEwLTExLTE4VDIxOjU3OjM3WiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAxMC0xMS0xOVQyMTo1NzozN1oiIFNlc3Npb25JbmRleD0iXzUzMWMzMmQyODNiZGZmN2UwNGU0ODdiY2RiYzRkZDhkIj4NCiAgICAgIDxzYW1sOkF1dGhuQ29udGV4dD4NCiAgICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+DQogICAgICA8L3NhbWw6QXV0aG5Db250ZXh0Pg0KICAgIDwvc2FtbDpBdXRoblN0YXRlbWVudD4NCiAgICA8c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+DQogICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZT0idWlkIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6c3RyaW5nIj5kZW1vPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPg0KICAgICAgPC9zYW1sOkF0dHJpYnV0ZT4NCiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJhbm90aGVyX3ZhbHVlIj4NCiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6c3RyaW5nIj52YWx1ZTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4NCiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+DQogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD4NCiAgPC9zYW1sOkFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+DQo=python3-saml-1.16.0/tests/data/responses/response1_with_duplicate_attributes.xml.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-saml-1.16.0/tests/data/responses/response1_with_friendlyname.xml.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python3-saml-1.16.0/tests/data/responses/response2.xml.base64000066400000000000000000000112621451074743100237660ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHNhbWwy cDpSZXNwb25zZSB4bWxuczpzYW1sMnA9InVybjpvYXNpczpuYW1lczp0YzpT QU1MOjIuMDpwcm90b2NvbCIgRGVzdGluYXRpb249Imh0dHBzOi8vd2liYmxl MTI5OTY5MzIwOC5leGFtcGxlLmNvbS9hY2Nlc3Mvc2FtbCIgSUQ9ImlkMTMw MzEzOTUyNjA0ODY2MjAwMDE1OTIzNzMwNDciIElzc3VlSW5zdGFudD0iMjAx MS0wNC0xOFQxNToxMjowNS45OTRaIiBWZXJzaW9uPSIyLjAiPgogIDxzYW1s MjpJc3N1ZXIgeG1sbnM6c2FtbDI9InVybjpvYXNpczpuYW1lczp0YzpTQU1M OjIuMDphc3NlcnRpb24iIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNB TUw6Mi4wOm5hbWVpZC1mb3JtYXQ6ZW50aXR5Ij53aWJibGU8L3NhbWwyOklz c3Vlcj4KICA8c2FtbDJwOlN0YXR1cyB4bWxuczpzYW1sMnA9InVybjpvYXNp czpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCI+CiAgICA8c2FtbDJwOlN0 YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpz dGF0dXM6U3VjY2VzcyIvPgogIDwvc2FtbDJwOlN0YXR1cz4KICA8c2FtbDI6 QXNzZXJ0aW9uIHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FN TDoyLjA6YXNzZXJ0aW9uIiBJRD0iaWQxMzAzMTM5NTI2MDU2NjkzMDAwOTI4 Mzg2OTY2IiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDQtMThUMTU6MTI6MDUuOTk0 WiIgVmVyc2lvbj0iMi4wIj4KICAgIDxzYW1sMjpJc3N1ZXIgeG1sbnM6c2Ft bDI9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIEZv cm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOm5hbWVpZC1mb3Jt YXQ6ZW50aXR5Ij53aWJibGU8L3NhbWwyOklzc3Vlcj4KICAgIDxkczpTaWdu YXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1s ZHNpZyMiPgogICAgICA8ZHM6U2lnbmVkSW5mbyB4bWxuczpkcz0iaHR0cDov L3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+CiAgICAgICAgPGRzOkNh bm9uaWNhbGl6YXRpb25NZXRob2QgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMu b3JnLzIwMDAvMDkveG1sZHNpZyMiIEFsZ29yaXRobT0iaHR0cDovL3d3dy53 My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+CiAgICAgICAgPGRzOlNp Z25hdHVyZU1ldGhvZCB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAw MC8wOS94bWxkc2lnIyIgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8y MDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4KICAgICAgICA8ZHM6UmVmZXJl bmNlIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRz aWcjIiBVUkk9IiNpZDEzMDMxMzk1MjYwNTY2OTMwMDA5MjgzODY5NjYiPgog ICAgICAgICAgPGRzOlRyYW5zZm9ybXMgeG1sbnM6ZHM9Imh0dHA6Ly93d3cu dzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPgogICAgICAgICAgICA8ZHM6VHJh bnNmb3JtIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkv eG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+CiAgICAgICAgICAgIDxk czpUcmFuc2Zvcm0geG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAv MDkveG1sZHNpZyMiIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAw MS8xMC94bWwtZXhjLWMxNG4jIj4KICAgICAgICAgICAgICA8ZWM6SW5jbHVz aXZlTmFtZXNwYWNlcyB4bWxuczplYz0iaHR0cDovL3d3dy53My5vcmcvMjAw MS8xMC94bWwtZXhjLWMxNG4jIiBQcmVmaXhMaXN0PSJkcyBzYW1sMiIvPgog ICAgICAgICAgICA8L2RzOlRyYW5zZm9ybT4KICAgICAgICAgIDwvZHM6VHJh bnNmb3Jtcz4KICAgICAgICAgIDxkczpEaWdlc3RNZXRob2QgeG1sbnM6ZHM9 Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiIEFsZ29yaXRo bT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz4K ICAgICAgICAgIDxkczpEaWdlc3RWYWx1ZSB4bWxuczpkcz0iaHR0cDovL3d3 dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+RGlnZXN0IFN0dWZmPC9kczpE aWdlc3RWYWx1ZT4KICAgICAgICA8L2RzOlJlZmVyZW5jZT4KICAgICAgPC9k czpTaWduZWRJbmZvPgogICAgICA8ZHM6U2lnbmF0dXJlVmFsdWUgeG1sbnM6 ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPlNpZ25h dHVyZSBTdHVmZjwvZHM6U2lnbmF0dXJlVmFsdWU+CiAgICAgIDxkczpLZXlJ bmZvPgogICAgICAgIDxkczpYNTA5RGF0YT4KICAgICAgICAgIDxkczpYNTA5 Q2VydGlmaWNhdGU+Q2VydGlmaWNhdGUgU3R1ZmY8L2RzOlg1MDlDZXJ0aWZp Y2F0ZT4KICAgICAgICA8L2RzOlg1MDlEYXRhPgogICAgICA8L2RzOktleUlu Zm8+CiAgICA8L2RzOlNpZ25hdHVyZT4KICAgIDxzYW1sMjpTdWJqZWN0IHht bG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0 aW9uIj4KICAgICAgPHNhbWwyOk5hbWVJRD53aWJibGVAd2liYmxlLmNvbTwv c2FtbDI6TmFtZUlEPgogICAgICA8c2FtbDI6U3ViamVjdENvbmZpcm1hdGlv biBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFy ZXIiPgogICAgICAgIDxzYW1sMjpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBO b3RPbk9yQWZ0ZXI9IjIwMTEtMDQtMThUMTU6MTc6MDYuMDY0WiIgUmVjaXBp ZW50PSJodHRwczovL3dpYmJsZTEyOTk2OTMyMDguZXhhbXBsZS5jb20vYWNj ZXNzL3NhbWwvIi8+CiAgICAgIDwvc2FtbDI6U3ViamVjdENvbmZpcm1hdGlv bj4KICAgIDwvc2FtbDI6U3ViamVjdD4KICAgIDxzYW1sMjpDb25kaXRpb25z IHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNz ZXJ0aW9uIiBOb3RCZWZvcmU9IjIwMTEtMDQtMThUMTU6MDc6MDYuMDY3WiIg Tm90T25PckFmdGVyPSIyMDExLTA0LTE4VDE1OjE3OjA2LjA2NFoiPgogICAg ICA8c2FtbDI6QXVkaWVuY2VSZXN0cmljdGlvbj4KICAgICAgICA8c2FtbDI6 QXVkaWVuY2U+ZXhhbXBsZS5jb208L3NhbWwyOkF1ZGllbmNlPgogICAgICA8 L3NhbWwyOkF1ZGllbmNlUmVzdHJpY3Rpb24+CiAgICA8L3NhbWwyOkNvbmRp dGlvbnM+CiAgICA8c2FtbDI6QXV0aG5TdGF0ZW1lbnQgeG1sbnM6c2FtbDI9 InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIEF1dGhu SW5zdGFudD0iMjAxMS0wNC0xOFQxNToxMjowNS45OTRaIj4KICAgICAgPHNh bWwyOkF1dGhuQ29udGV4dD4KICAgICAgICA8c2FtbDI6QXV0aG5Db250ZXh0 Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNz ZXM6UGFzc3dvcmRQcm90ZWN0ZWRUcmFuc3BvcnQ8L3NhbWwyOkF1dGhuQ29u dGV4dENsYXNzUmVmPgogICAgICA8L3NhbWwyOkF1dGhuQ29udGV4dD4KICAg IDwvc2FtbDI6QXV0aG5TdGF0ZW1lbnQ+CiAgPC9zYW1sMjpBc3NlcnRpb24+ Cjwvc2FtbDJwOlJlc3BvbnNlPgo=python3-saml-1.16.0/tests/data/responses/response3.xml.base64000066400000000000000000000076161451074743100237770ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+CjxzYW1scDpSZXNwb25zZSB4bWxuczpz YW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiBJ RD0iXzZiODVkMGRkLWJmYTgtNGRlZi04MmMyLTg2MjFlMDQ1MjQ3NyIgVmVy c2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMDUtMDJUMTk6NDM6NTQu NjkyWiIgRGVzdGluYXRpb249Imh0dHBzOi8vZXhhbXBsZS5jb20vYWNjZXNz L3NhbWwiIENvbnNlbnQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpj b25zZW50OnVuc3BlY2lmaWVkIiBJblJlc3BvbnNlVG89Il9mYjg0MThkMC01 NzFlLTAxMmUtZWVlMC0wMDUwNTY5MjAwZDAiPgogIDxJc3N1ZXIgeG1sbnM9 InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iPmh0dHA6 Ly9leGFtcGxlLmNvbS9zZXJ2aWNlcy90cnVzdDwvSXNzdWVyPgogIDxzYW1s cDpTdGF0dXM+CiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9h c2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAgPC9z YW1scDpTdGF0dXM+CiAgPEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lzOm5h bWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il9kYmU2YTM2NS05NTgy LTQ2MGYtYjRiMS0xZjc5YmY3MGY3NmIiIElzc3VlSW5zdGFudD0iMjAxMS0w NS0wMlQxOTo0Mzo1NC42NDVaIiBWZXJzaW9uPSIyLjAiPgogICAgPElzc3Vl cj5odHRwOi8vZXhhbXBsZS5jb20vc2VydmljZXMvdHJ1c3Q8L0lzc3Vlcj4K ICAgIDxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3Jn LzIwMDAvMDkveG1sZHNpZyMiPgogICAgICA8ZHM6U2lnbmVkSW5mbz4KICAg ICAgICA8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPgogICAg ICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3 LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4KICAgICAgICA8 ZHM6UmVmZXJlbmNlIFVSST0iI19kYmU2YTM2NS05NTgyLTQ2MGYtYjRiMS0x Zjc5YmY3MGY3NmIiPgogICAgICAgICAgPGRzOlRyYW5zZm9ybXM+CiAgICAg ICAgICAgIDxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3Lncz Lm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPgog ICAgICAgICAgICA8ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3 dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+CiAgICAgICAgICA8 L2RzOlRyYW5zZm9ybXM+CiAgICAgICAgICA8ZHM6RGlnZXN0TWV0aG9kIEFs Z29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3No YTEiLz4KICAgICAgICAgIDxkczpEaWdlc3RWYWx1ZT5EaWdlc3Q8L2RzOkRp Z2VzdFZhbHVlPgogICAgICAgIDwvZHM6UmVmZXJlbmNlPgogICAgICA8L2Rz OlNpZ25lZEluZm8+CiAgICAgIDxkczpTaWduYXR1cmVWYWx1ZT5TaWduYXR1 cmU8L2RzOlNpZ25hdHVyZVZhbHVlPgogICAgICA8S2V5SW5mbyB4bWxucz0i aHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+CiAgICAgICAg PGRzOlg1MDlEYXRhPgogICAgICAgICAgPGRzOlg1MDlDZXJ0aWZpY2F0ZT5T dHVmZjwvZHM6WDUwOUNlcnRpZmljYXRlPgogICAgICAgIDwvZHM6WDUwOURh dGE+CiAgICAgIDwvS2V5SW5mbz4KICAgIDwvZHM6U2lnbmF0dXJlPgogICAg PFN1YmplY3Q+CiAgICAgIDxOYW1lSUQgRm9ybWF0PSJ1cm46b2FzaXM6bmFt ZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDplbWFpbEFkZHJlc3MiPnNv bWVvbmVAZXhhbXBsZS5jb208L05hbWVJRD4KICAgICAgPFN1YmplY3RDb25m aXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6 Y206YmVhcmVyIj4KICAgICAgICA8U3ViamVjdENvbmZpcm1hdGlvbkRhdGEg SW5SZXNwb25zZVRvPSJfZmI4NDE4ZDAtNTcxZS0wMTJlLWVlZTAtMDA1MDU2 OTIwMGQwIiBOb3RPbk9yQWZ0ZXI9IjIwMTEtMDUtMDJUMTk6NDg6NTQuNzA3 WiIgUmVjaXBpZW50PSJodHRwczovL2V4YW1wbGUuY29tL2FjY2Vzcy9zYW1s Ii8+CiAgICAgIDwvU3ViamVjdENvbmZpcm1hdGlvbj4KICAgIDwvU3ViamVj dD4KICAgIDxDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxMS0wNS0wMlQxOTo0 Mzo1NC42NDVaIiBOb3RPbk9yQWZ0ZXI9IjIwMTEtMDUtMDJUMjA6NDM6NTQu NjQ1WiI+CiAgICAgIDxBdWRpZW5jZVJlc3RyaWN0aW9uPgogICAgICAgIDxB dWRpZW5jZT5jb25zdW1lci5leGFtcGxlLmNvbTwvQXVkaWVuY2U+CiAgICAg IDwvQXVkaWVuY2VSZXN0cmljdGlvbj4KICAgIDwvQ29uZGl0aW9ucz4KICAg IDxBdHRyaWJ1dGVTdGF0ZW1lbnQ+CiAgICAgIDxBdHRyaWJ1dGUgTmFtZT0i aHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0 eS9jbGFpbXMvZW1haWxhZGRyZXNzIj4KICAgICAgICA8QXR0cmlidXRlVmFs dWU+c29tZW9uZUBleGFtcGxlLmNvbTwvQXR0cmlidXRlVmFsdWU+CiAgICAg IDwvQXR0cmlidXRlPgogICAgPC9BdHRyaWJ1dGVTdGF0ZW1lbnQ+CiAgICA8 QXV0aG5TdGF0ZW1lbnQgQXV0aG5JbnN0YW50PSIyMDExLTA1LTAyVDE5OjQz OjU0LjI4NVoiIFNlc3Npb25JbmRleD0iX2RiZTZhMzY1LTk1ODItNDYwZi1i NGIxLTFmNzliZjcwZjc2YiI+CiAgICAgIDxBdXRobkNvbnRleHQ+CiAgICAg ICAgPEF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpT QU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkUHJvdGVjdGVkVHJhbnNwb3J0 PC9BdXRobkNvbnRleHRDbGFzc1JlZj4KICAgICAgPC9BdXRobkNvbnRleHQ+ CiAgICA8L0F1dGhuU3RhdGVtZW50PgogIDwvQXNzZXJ0aW9uPgo8L3NhbWxw OlJlc3BvbnNlPgo= python3-saml-1.16.0/tests/data/responses/response4.xml.base64000066400000000000000000000130441451074743100237700ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0 YzpTQU1MOjIuMDphc3NlcnRpb24iIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6 bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIElEPSJHT1NBTUxSMTMwNzE1 NDEyMjM0MDkiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDExLTA2 LTA0VDAyOjIyOjAyWiIgRGVzdGluYXRpb249InJlY2lwaWVudCI+PHNhbWw6 SXNzdWVyPmh0dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sMjwvc2FtbDpJ c3N1ZXI+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0i dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+ PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgVmVyc2lv bj0iMi4wIiBJRD0iZmFrZV9hc3NlcnRpb24iIElzc3VlSW5zdGFudD0iMjAx MS0wNi0wNFQwMjoyMjowMloiPjxzYW1sOklzc3Vlcj5odHRwczovL2FwcC5v bmVsb2dpbi5jb20vc2FtbDI8L3NhbWw6SXNzdWVyPjxzYW1sOlN1YmplY3Q+ PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5ib2d1c0BvbmVsb2dp bi5jb208L3NhbWw6TmFtZUlEPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb24g TWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVy Ij48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9 IjIwMTEtMDYtMDRUMDI6Mjc6MDJaIiBSZWNpcGllbnQ9InJlY2lwaWVudCIv Pjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0Pjxz YW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDExLTA2LTA0VDAyOjE3OjAy WiIgTm90T25PckFmdGVyPSIyMDExLTA2LTA0VDAyOjI3OjAyWiI+PHNhbWw6 QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5hdWRpZW5jZTwv c2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3Nh bWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3Rh bnQ9IjIwMTEtMDYtMDRUMDI6MjI6MDJaIiBTZXNzaW9uTm90T25PckFmdGVy PSIyMDExLTA2LTA1VDAyOjIyOjAyWiIgU2Vzc2lvbkluZGV4PSJfMTZmNTcw ZmJjMDMxNTAwN2EwMzU1ZGZlYTZiM2M0NmMiPjxzYW1sOkF1dGhuQ29udGV4 dD48c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6 dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZFByb3RlY3RlZFRyYW5z cG9ydDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWw6QXV0aG5D b250ZXh0Pjwvc2FtbDpBdXRoblN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9u PjxzYW1sOkFzc2VydGlvbiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcv MjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcv MjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIFZlcnNpb249IjIuMCIgSUQ9InBm eDk1MTZiMGYzLTQ1MzYtMTBmNi1jNmZhLTlkZDUyM2UxNDk4YyIgSXNzdWVJ bnN0YW50PSIyMDExLTA2LTA0VDAyOjIyOjAyWiI+PHNhbWw6SXNzdWVyPmh0 dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sMjwvc2FtbDpJc3N1ZXI+PGRz OlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8w OS94bWxkc2lnIyI+CiAgPGRzOlNpZ25lZEluZm8+PGRzOkNhbm9uaWNhbGl6 YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAx LzEwL3htbC1leGMtYzE0biMiLz4KICAgIDxkczpTaWduYXR1cmVNZXRob2Qg QWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcj cnNhLXNoYTEiLz4KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDk1MTZiMGYz LTQ1MzYtMTBmNi1jNmZhLTlkZDUyM2UxNDk4YyI+PGRzOlRyYW5zZm9ybXM+ PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIw MDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5z Zm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1s LWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9k IEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2ln I3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+L0ZFUHRwVlhKTDJHNzJ1UDZMd2Vv R1ltYnpVPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpT aWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5rSEhrMFFOekMwTFlvVkVQ UnE0MGRNT1puckpSdzdlT1dkWWdJY240MXQ2N25xOHJwVjhpSEF2WWQva0RS MVJKcEc2UjU4K25LRVhtTUFLcFNDY29GeC9tQU1UNjNodzQ5RlhOYWZ4WWhj MGc1bjFSVGhaQURFNlJZSFZpV2pvRHdxZzVCT3FnNnNLNUxlZk5ZM080dVhn QXFyMUw4R3pVNXNtMGlMWm9xSUU9PC9kczpTaWduYXR1cmVWYWx1ZT4KPGRz OktleUluZm8+PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU+TUlJ QnJUQ0NBYUdnQXdJQkFnSUJBVEFEQmdFQU1HY3hDekFKQmdOVkJBWVRBbFZU TVJNd0VRWURWUVFJREFwRFlXeHBabTl5Ym1saE1SVXdFd1lEVlFRSERBeFRZ VzUwWVNCTmIyNXBZMkV4RVRBUEJnTlZCQW9NQ0U5dVpVeHZaMmx1TVJrd0Z3 WURWUVFEREJCaGNIQXViMjVsYkc5bmFXNHVZMjl0TUI0WERURXdNVEF4TVRJ eE1UVXhNbG9YRFRFMU1UQXhNVEl4TVRVeE1sb3daekVMTUFrR0ExVUVCaE1D VlZNeEV6QVJCZ05WQkFnTUNrTmhiR2xtYjNKdWFXRXhGVEFUQmdOVkJBY01E Rk5oYm5SaElFMXZibWxqWVRFUk1BOEdBMVVFQ2d3SVQyNWxURzluYVc0eEdU QVhCZ05WQkFNTUVHRndjQzV2Ym1Wc2IyZHBiaTVqYjIwd2daOHdEUVlKS29a SWh2Y05BUUVCQlFBRGdZMEFNSUdKQW9HQkFNUG1qZmp5N0wzNW9EcGVCWEJv UlZDZ2t0UGtMbm85RE9FV0I3TWdZTU1WS3MyQjZ5bVdRTEVXckR1Z01LMWhr eldGaEliNWZxV0xHYld5MEowdmVHUjkvZ0hPUUcrckQvSTM2eEFYbmtkaVhY aHpvaUFHL3pReE0wZWRNT1VmNDBuMzE0RkM4bW9FcmNVZzZRYWJ0dHplc081 OUhGejZzaFB1eGNXYVZBZ3hBZ01CQUFFd0F3WUJBQU1CQUE9PTwvZHM6WDUw OUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6 U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIEZvcm1hdD0i dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1h aWxBZGRyZXNzIj50ZXN0QG9uZWxvZ2luLmNvbTwvc2FtbDpOYW1lSUQ+PHNh bWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1l czp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJt YXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxMS0wNi0wNFQwMjoyNzowMloi IFJlY2lwaWVudD0icmVjaXBpZW50Ii8+PC9zYW1sOlN1YmplY3RDb25maXJt YXRpb24+PC9zYW1sOlN1YmplY3Q+PHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZv cmU9IjIwMTEtMDYtMDRUMDI6MTc6MDJaIiBOb3RPbk9yQWZ0ZXI9IjIwMTEt MDYtMDRUMDI6Mjc6MDJaIj48c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjxz YW1sOkF1ZGllbmNlPmF1ZGllbmNlPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpB dWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOkF1 dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0wNFQwMjoyMjow MloiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMTEtMDYtMDVUMDI6MjI6MDJa IiBTZXNzaW9uSW5kZXg9Il8xNmY1NzBmYmMwMzE1MDA3YTAzNTVkZmVhNmIz YzQ2YyI+PHNhbWw6QXV0aG5Db250ZXh0PjxzYW1sOkF1dGhuQ29udGV4dENs YXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2Vz OlBhc3N3b3JkUHJvdGVjdGVkVHJhbnNwb3J0PC9zYW1sOkF1dGhuQ29udGV4 dENsYXNzUmVmPjwvc2FtbDpBdXRobkNvbnRleHQ+PC9zYW1sOkF1dGhuU3Rh dGVtZW50Pjwvc2FtbDpBc3NlcnRpb24+PC9zYW1scDpSZXNwb25zZT4=python3-saml-1.16.0/tests/data/responses/response5.xml.base64000066400000000000000000000141121451074743100237660ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHNhbWwy cDpSZXNwb25zZSB4bWxuczpzYW1sMnA9InVybjpvYXNpczpuYW1lczp0YzpT QU1MOjIuMDpwcm90b2NvbCIKICAgICAgICAgICAgICAgICBEZXN0aW5hdGlv bj0iaHR0cHM6Ly9leGFtcGxlc2FtbC5mb29ibGUuY29tL2FjY2Vzcy9zYW1s IiBJRD0iaWQ0MzUwMDE5MDE0NzE3NzIxMDMwODIzNjI0IgogICAgICAgICAg ICAgICAgIElzc3VlSW5zdGFudD0iMjAxMS0wNi0xNFQxODoyNjowMS41MTVa IiBWZXJzaW9uPSIyLjAiPgogICAgPHNhbWwyOklzc3VlciB4bWxuczpzYW1s Mj0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIKICAg ICAgICAgICAgICAgICAgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FN TDoyLjA6bmFtZWlkLWZvcm1hdDplbnRpdHkiPmV4YW1wbGUKICAgIDwvc2Ft bDI6SXNzdWVyPgogICAgPHNhbWwycDpTdGF0dXMgeG1sbnM6c2FtbDJwPSJ1 cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiPgogICAgICAg IDxzYW1sMnA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRj OlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+CiAgICA8L3NhbWwycDpTdGF0 dXM+CiAgICA8c2FtbDI6QXNzZXJ0aW9uIHhtbG5zOnNhbWwyPSJ1cm46b2Fz aXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0iaWQ0MzUwMDE5 MDE2NzIzNzcxNTg0NjA0NzQiCiAgICAgICAgICAgICAgICAgICAgIElzc3Vl SW5zdGFudD0iMjAxMS0wNi0xNFQxODoyNjowMS41MTVaIiBWZXJzaW9uPSIy LjAiPgogICAgICAgIDxzYW1sMjpJc3N1ZXIgRm9ybWF0PSJ1cm46b2FzaXM6 bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDplbnRpdHkiCiAgICAg ICAgICAgICAgICAgICAgICB4bWxuczpzYW1sMj0idXJuOm9hc2lzOm5hbWVz OnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI+ZXhhbXBsZQogICAgICAgIDwvc2Ft bDI6SXNzdWVyPgogICAgICAgIDxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPgogICAgICAgICAg ICA8ZHM6U2lnbmVkSW5mbyB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC8wOS94bWxkc2lnIyI+CiAgICAgICAgICAgICAgICA8ZHM6Q2Fub25p Y2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3Jn LzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIKICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHhtbG5zOmRzPSJodHRwOi8vd3d3Lncz Lm9yZy8yMDAwLzA5L3htbGRzaWcjIi8+CiAgICAgICAgICAgICAgICA8ZHM6 U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcv MjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIgogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC8wOS94bWxkc2lnIyIvPgogICAgICAgICAgICAgICAgPGRzOlJlZmVy ZW5jZSBVUkk9IiNpZDQzNTAwMTkwMTY3MjM3NzE1ODQ2MDQ3NCIgeG1sbnM6 ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPgogICAg ICAgICAgICAgICAgICAgIDxkczpUcmFuc2Zvcm1zIHhtbG5zOmRzPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4KICAgICAgICAgICAg ICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93 d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJl IgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHhtbG5z OmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIi8+CiAg ICAgICAgICAgICAgICAgICAgICAgIDxkczpUcmFuc2Zvcm0gQWxnb3JpdGht PSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgeG1sbnM6ZHM9 Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPgogICAgICAg ICAgICAgICAgICAgICAgICAgICAgPGVjOkluY2x1c2l2ZU5hbWVzcGFjZXMg eG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1j MTRuIyIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFByZWZpeExpc3Q9ImRzIHNhbWwyIi8+CiAgICAgICAg ICAgICAgICAgICAgICAgIDwvZHM6VHJhbnNmb3JtPgogICAgICAgICAgICAg ICAgICAgIDwvZHM6VHJhbnNmb3Jtcz4KICAgICAgICAgICAgICAgICAgICA8 ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcv MjAwMC8wOS94bWxkc2lnI3NoYTEiCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAw MC8wOS94bWxkc2lnIyIvPgogICAgICAgICAgICAgICAgICAgIDxkczpEaWdl c3RWYWx1ZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94 bWxkc2lnIyI+c3R1ZmZpZ0wyeTAybVBXUWxHSU9sbz0KICAgICAgICAgICAg ICAgICAgICA8L2RzOkRpZ2VzdFZhbHVlPgogICAgICAgICAgICAgICAgPC9k czpSZWZlcmVuY2U+CiAgICAgICAgICAgIDwvZHM6U2lnbmVkSW5mbz4KICAg ICAgICAgICAgPGRzOlNpZ25hdHVyZVZhbHVlIHhtbG5zOmRzPSJodHRwOi8v d3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4KICAgICAgICAgICAgICAg IE85REFPSWVFazFYbFgyWVZkaHFVemd4amJBam9XQjdnam1VQmtWdlRFb1dO akYrK2QvcnVFWkFicnVHMXhtblR2VHJ4TXN0S08wRmYKICAgICAgICAgICAg ICAgIDk0VVAyN05yeWM1OExmZlF0dzhEVXQ0WVNtR3k5OFM3aFVqS28yeTcy VTdPQVp1TnJoV0JYcTZodEc0ZzBJNDk4MTNkSWROS2xkS2QKICAgICAgICAg ICAgICAgIGJMSitRMTJIbEM1aUtUWG9pQjQ9CiAgICAgICAgICAgIDwvZHM6 U2lnbmF0dXJlVmFsdWU+CiAgICAgICAgICAgIDxkczpLZXlJbmZvPgogICAg ICAgICAgICAgICAgPGRzOlg1MDlEYXRhPgogICAgICAgICAgICAgICAgICAg IDxkczpYNTA5Q2VydGlmaWNhdGU+CiAgICAgICAgICAgICAgICAgICAgICAg IHN0dWZmLzZwTW9Mc2NaaDJHTUsrVkE9PQogICAgICAgICAgICAgICAgICAg IDwvZHM6WDUwOUNlcnRpZmljYXRlPgogICAgICAgICAgICAgICAgPC9kczpY NTA5RGF0YT4KICAgICAgICAgICAgPC9kczpLZXlJbmZvPgogICAgICAgIDwv ZHM6U2lnbmF0dXJlPgogICAgICAgIDxzYW1sMjpTdWJqZWN0IHhtbG5zOnNh bWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj4K ICAgICAgICAgICAgPHNhbWwyOk5hbWVJRD5zb21lb25lLmV4YW1wbGVAZ21h aWwuY29tPC9zYW1sMjpOYW1lSUQ+CiAgICAgICAgICAgIDxzYW1sMjpTdWJq ZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNB TUw6Mi4wOmNtOmJlYXJlciI+CiAgICAgICAgICAgICAgICA8c2FtbDI6U3Vi amVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDExLTA2LTE0 VDE4OjMxOjAxLjUxNloiCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgUmVjaXBpZW50PSJodHRwczovL2V4YW1wbGVz YW1sLmZvb2JsZS5jb20vYWNjZXNzL3NhbWwvIi8+CiAgICAgICAgICAgIDwv c2FtbDI6U3ViamVjdENvbmZpcm1hdGlvbj4KICAgICAgICA8L3NhbWwyOlN1 YmplY3Q+CiAgICAgICAgPHNhbWwyOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIy MDExLTA2LTE0VDE4OjIxOjAxLjUxNloiIE5vdE9uT3JBZnRlcj0iMjAxMS0w Ni0xNFQxODozMTowMS41MTZaIgogICAgICAgICAgICAgICAgICAgICAgICAg IHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNz ZXJ0aW9uIj4KICAgICAgICAgICAgPHNhbWwyOkF1ZGllbmNlUmVzdHJpY3Rp b24+CiAgICAgICAgICAgICAgICA8c2FtbDI6QXVkaWVuY2U+Zm9vYmxlLmNv bTwvc2FtbDI6QXVkaWVuY2U+CiAgICAgICAgICAgIDwvc2FtbDI6QXVkaWVu Y2VSZXN0cmljdGlvbj4KICAgICAgICA8L3NhbWwyOkNvbmRpdGlvbnM+CiAg ICAgICAgPHNhbWwyOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAx MS0wNi0xNFQxODoyNjowMS41MTVaIgogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB4bWxuczpzYW1sMj0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 Mi4wOmFzc2VydGlvbiI+CiAgICAgICAgICAgIDxzYW1sMjpBdXRobkNvbnRl eHQ+CiAgICAgICAgICAgICAgICA8c2FtbDI6QXV0aG5Db250ZXh0Q2xhc3NS ZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFz c3dvcmRQcm90ZWN0ZWRUcmFuc3BvcnQKICAgICAgICAgICAgICAgIDwvc2Ft bDI6QXV0aG5Db250ZXh0Q2xhc3NSZWY+CiAgICAgICAgICAgIDwvc2FtbDI6 QXV0aG5Db250ZXh0PgogICAgICAgIDwvc2FtbDI6QXV0aG5TdGF0ZW1lbnQ+ CiAgICA8L3NhbWwyOkFzc2VydGlvbj4KPC9zYW1sMnA6UmVzcG9uc2U+ python3-saml-1.16.0/tests/data/responses/response_encrypted_nameid.xml.base64000066400000000000000000000235301451074743100272770ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeDQyN2JmMGJiLTI3MmMtMGFkMC05MGYyLTVmN2ZkOWJhYzQ2OCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDMtMDlUMTI6MjM6MzdaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOX2JmMzcyYjlkNjdkMGM4OWQwY2YxYWYzZmY2MjVlYTdjMDUxYzk4ODUiPjxzYW1sOklzc3Vlcj5odHRwczovL3BpdGJ1bGsubm8taXAub3JnL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21ldGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDQyN2JmMGJiLTI3MmMtMGFkMC05MGYyLTVmN2ZkOWJhYzQ2OCI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+eHRBaE5WaUtVa3VmcUR1eUNHRDBVVE9SbVdBPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5yL0E3SHhVVC9mZ1pXMVBGVkdHOXJTbW5sQU1QVjdnQm4zTjBVdFJ1V0VtTmlaQTVNUUVCSE9JeTA0dFFuSmRXYksrKzAxemh0TmdqRlhGeGduaE5VWFdKdVF4Rnp3SzdvaTRJbHc0amZjQ2tpSFJLVWxubGQ4U3Q1YVBGMUE5bFlWbWxtU0d5dUgzSnlrSjNnVjNaeVJRMjhDc0IvQnBtdi9mbmhleHBhYzQ9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDczY2ZlZWM0LWZkOTMtMzE1OC05ZDI1LWVmZDgzYWM4MjQyYiIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDMtMDlUMTI6MjM6MzdaIj48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHA8L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICA8ZHM6U2lnbmVkSW5mbz48ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZng3M2NmZWVjNC1mZDkzLTMxNTgtOWQyNS1lZmQ4M2FjODI0MmIiPjxkczpUcmFuc2Zvcm1zPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48L2RzOlRyYW5zZm9ybXM+PGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PGRzOkRpZ2VzdFZhbHVlPjJpdzJPZUpRSjA1ellQTkIvSUp3TXdETFRjdz08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+cFFiaUFReWEvKzVxbkhKWWlPQ0dFaUt5RHNSZThKdTlBUlJiVlFlUkd5NWF4VlU5aDYxV0tYSWcwcDI5NlFQMEJBem0rWmt5cXErTUdSVWE4OFNpaWFlbWRma3dRZnd1TS8rTk1FTkRqQmgrR2tob0RmcjN1ZDAzWjNDcHA3dDdTSldWVnF5NGZZVUtzNllaYmJRTG5PVjZPVVphb3R6eFBzUXVSVGlsWmVrPTwvZHM6U2lnbmF0dXJlVmFsdWU+DQo8ZHM6S2V5SW5mbz48ZHM6WDUwOURhdGE+PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFOQmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05WQkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXhoYm1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYwZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZhTUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJUYjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVGVkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FHU0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBRZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIxNjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQNXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2JxWStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdSK1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjA0My0wOS0xMFQxNzo0MzozN1oiIFJlY2lwaWVudD0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOX2JmMzcyYjlkNjdkMGM4OWQwY2YxYWYzZmY2MjVlYTdjMDUxYzk4ODUiLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48c2FtbDpFbmNyeXB0ZWRJRD48eGVuYzpFbmNyeXB0ZWREYXRhIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6ZHNpZz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyIgVHlwZT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjRWxlbWVudCI+PHhlbmM6RW5jcnlwdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI2FlczEyOC1jYmMiLz48ZHNpZzpLZXlJbmZvIHhtbG5zOmRzaWc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPjx4ZW5jOkVuY3J5cHRlZEtleT48eGVuYzpFbmNyeXB0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjcnNhLTFfNSIvPjx4ZW5jOkNpcGhlckRhdGE+PHhlbmM6Q2lwaGVyVmFsdWU+T0J0UmN6b2dyZWc1VmpOS29zL2JOaEEvMjZ1MnFiWko5ZzBvbWpsRGphWEp5N2FJRkJ4WTMyV3ZvcjY3T0VhNm5VV3dUcFpVT3FWR2NLQ1puMGtCWVZJUjFjSGJsTUdhRUNLdEthU25wdUR5UXZ4UDA1Ulp5cG5nUVJ3ZXdSZ0VaZkE5NmhCM2w1bmgzMFNqYmh4U09IbXk0Qi9lWEx1UHlOUWhiMEdadEFzPTwveGVuYzpDaXBoZXJWYWx1ZT48L3hlbmM6Q2lwaGVyRGF0YT48L3hlbmM6RW5jcnlwdGVkS2V5PjwvZHNpZzpLZXlJbmZvPg0KICAgPHhlbmM6Q2lwaGVyRGF0YT4NCiAgICAgIDx4ZW5jOkNpcGhlclZhbHVlPnNwZm8yNndVUlVCc3RnYzdBbG1PM25nem91OUFqUVU0NFhUOUt2ZWcvVTh6Q1FzNU43WXRyazZwREs2Tktic2gvQ1RMaFZKUy9kRFNwd3hzRy9QRDU0WlUrcmdKNGtndGt5YWduSzhydnBwNDJuYjc1YzBzUE1KK0M4dW42VHExeFBRRjlkcEJaVU1sZDI2WUJKQ0d6TG0vcmVDUlpiSk5iNEx3TmRjd3pQTnc4cnJsb1Z2SWhyQjlvWS80a3hwdExFemJmczVHcklxZXZNQnZjeWxpQVhBbFE1QitEZUdPWkhtODJnQmFBVHdxcXNuWkRsbmMyTUtiUWJyVXdLUTZ5NXdPcVByUmxXbFBJUnRLbzRZc2R3PT08L3hlbmM6Q2lwaGVyVmFsdWU+DQogICA8L3hlbmM6Q2lwaGVyRGF0YT4NCjwveGVuYzpFbmNyeXB0ZWREYXRhPjwvc2FtbDpFbmNyeXB0ZWRJRD48L3NhbWw6U3ViamVjdD48c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNC0wMy0wOVQxMjoyMzowN1oiIE5vdE9uT3JBZnRlcj0iMjA0My0wOS0xMFQxNzo0MzozN1oiPjxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxNC0wMy0wOVQxMjoyMzozN1oiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwNDMtMDMtMDlUMjA6MjM6MzdaIiBTZXNzaW9uSW5kZXg9Il85NDRiZmNhY2IwZDgzMmIxMmU0YmNmNzc0ZTAyYmJlNWY2NDU1YzY4MDMiPjxzYW1sOkF1dGhuQ29udGV4dD48c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWw6QXV0aG5Db250ZXh0Pjwvc2FtbDpBdXRoblN0YXRlbWVudD48c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlIE5hbWU9InVpZCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dGVzdDwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj50ZXN0QGV4YW1wbGUuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj50ZXN0PC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9InNuIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj53YWEyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PHNhbWw6QXR0cmlidXRlIE5hbWU9ImVkdVBlcnNvbkFmZmlsaWF0aW9uIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj51c2VyPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPmFkbWluPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U+python3-saml-1.16.0/tests/data/responses/response_node_text_attack.xml.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-saml-1.16.0/tests/data/responses/response_with_ampersands.xml000066400000000000000000000204231451074743100260700ustar00rootroot00000000000000PFJlc3BvbnNlIElzc3VlSW5zdGFudD0iMjAxMS0xMi0wOVQxMToyMzozNC4w NzlaIiBJRD0iWW9FUmhTRkFYYXhWUjFqNWpYMlp1TDhCSkJRIiBWZXJzaW9u PSIyLjAiIHhtbG5zPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJv dG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIu MDphc3NlcnRpb24iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAw LzA5L3htbGRzaWcjIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIw MDEvWE1MU2NoZW1hLWluc3RhbmNlIj4KICA8c2FtbDpJc3N1ZXI+UEYtREVN Tzwvc2FtbDpJc3N1ZXI+CiAgPFN0YXR1cz4KICAgIDxTdGF0dXNDb2RlIFZh bHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nl c3MiLz4KICA8L1N0YXR1cz4KICA8c2FtbDpBc3NlcnRpb24gVmVyc2lvbj0i Mi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTEtMTItMDlUMTE6MjM6MzQuMDgxWiIg SUQ9IlpMZGloS1VSV0JSd3RmOWNnXzBCLmxuZUxMUCI+CiAgICA8c2FtbDpJ c3N1ZXI+UEYtREVNTzwvc2FtbDpJc3N1ZXI+CiAgICA8ZHM6U2lnbmF0dXJl PgogICAgICA8ZHM6U2lnbmVkSW5mbz4KICAgICAgICA8ZHM6Q2Fub25pY2Fs aXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIw MDEvMTAveG1sLWV4Yy1jMTRuIyIvPgogICAgICAgIDxkczpTaWduYXR1cmVN ZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjcnNhLXNoYTEiLz4KICAgICAgICA8ZHM6UmVmZXJlbmNlIFVSST0i I1pMZGloS1VSV0JSd3RmOWNnXzBCLmxuZUxMUCI+CiAgICAgICAgICA8ZHM6 VHJhbnNmb3Jtcz4KICAgICAgICAgICAgPGRzOlRyYW5zZm9ybSBBbGdvcml0 aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9w ZWQtc2lnbmF0dXJlIi8+CiAgICAgICAgICAgIDxkczpUcmFuc2Zvcm0gQWxn b3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0 biMiLz4KICAgICAgICAgIDwvZHM6VHJhbnNmb3Jtcz4KICAgICAgICAgIDxk czpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8y MDAwLzA5L3htbGRzaWcjc2hhMSIvPgogICAgICAgICAgPGRzOkRpZ2VzdFZh bHVlPlBNWmVkc3ZISS80STNiWjNJNnFtTXA0bCtaRT08L2RzOkRpZ2VzdFZh bHVlPgogICAgICAgIDwvZHM6UmVmZXJlbmNlPgogICAgICA8L2RzOlNpZ25l ZEluZm8+CiAgICAgIDxkczpTaWduYXR1cmVWYWx1ZT5ncUYyM2NYSGErUW54 eElnamx3eU5vVnhoZ3p4WGlGMXRiUnUyOXY4OWFsYm1SMnkvREo1UU5XeW5t OWlPeEZUb3AwU0lzTDlBRFI1Cm41MGNkWlF6UkJaZldORFVWaFdHYmc2QTdq UVZuKzdXd216Z2ZZdFMzMjNwTjV5N1A4YkhEYTROMjlMQzNaT29odkdOTDFw d1RQUEUKemd5OTc4cFJNYXBRd0twNmFNMD08L2RzOlNpZ25hdHVyZVZhbHVl PgogICAgICA8ZHM6S2V5SW5mbz4KICAgICAgICA8ZHM6WDUwOURhdGE+CiAg ICAgICAgICA8ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUI3ekNDQVZpZ0F3SUJB Z0lHQVJicWVwZU9NQTBHQ1NxR1NJYjNEUUVCQlFVQU1Ec3hDekFKQmdOVkJB WVRBbFZUTVJnd0ZnWUQKVlFRS0V3OVJkV2xqYXlCVGRHRnlkQ0JCY0hBeEVq QVFCZ05WQkFNVENXeHZZMkZzYUc5emREQWVGdzB3TnpFeU1UY3lNelF3TVRG YQpGdzB4TWpFeU1UVXlNelF3TVRGYU1Ec3hDekFKQmdOVkJBWVRBbFZUTVJn d0ZnWURWUVFLRXc5UmRXbGpheUJUZEdGeWRDQkJjSEF4CkVqQVFCZ05WQkFN VENXeHZZMkZzYUc5emREQ0JuekFOQmdrcWhraUc5dzBCQVFFRkFBT0JqUUF3 Z1lrQ2dZRUFqZWhoMTZqWGE1ekgKTFhpaDhyTkxLTzJ1dlFVb0NXSVd3VFhX ZkZGd1krVXNQUjBDVm44WUlubkppS1hwOFlDZVhDa2hIRXFnU1dVYjJLS0J0 RituSm9NdwpETTNSbkoxeUNYMFoxa1ptTitubXVsR2Z0a1FJNmVrUDV2QnJY OGgvNXp1WThkTmp2TGJjenhCNzVpaDcwMHpoWVRoZUNzYVQ3STFZCmFBVDNB R01DQXdFQUFUQU5CZ2txaGtpRzl3MEJBUVVGQUFPQmdRQnJTOWtNVFR3QTVU M0VKbWpCMkd1RElnRUl1NFE3d3ZyWm9KeG0KWERNUm5IaTBMaHBLbGVUWGIv VlJ6dytRY0dIcVJzSjErUHRKRUhLdzRnNU10ZmtFVzNyYnJtWHVzdmNobXpa SUIxak9sRXRFdVp6TwpxZ2U0Z3JueFpBRzc2MDM2YmZQZmo2aVpLOFlOTWJz TEF5dzVnaGhvOStkUUI4ZWtoR0ROSGxmSjlBPT08L2RzOlg1MDlDZXJ0aWZp Y2F0ZT4KICAgICAgICA8L2RzOlg1MDlEYXRhPgogICAgICAgIDxkczpLZXlW YWx1ZT4KICAgICAgICAgIDxkczpSU0FLZXlWYWx1ZT4KICAgICAgICAgICAg PGRzOk1vZHVsdXM+amVoaDE2alhhNXpITFhpaDhyTkxLTzJ1dlFVb0NXSVd3 VFhXZkZGd1krVXNQUjBDVm44WUlubkppS1hwOFlDZVhDa2hIRXFnU1dVYgoy S0tCdEYrbkpvTXdETTNSbkoxeUNYMFoxa1ptTitubXVsR2Z0a1FJNmVrUDV2 QnJYOGgvNXp1WThkTmp2TGJjenhCNzVpaDcwMHpoCllUaGVDc2FUN0kxWWFB VDNBR009PC9kczpNb2R1bHVzPgogICAgICAgICAgICA8ZHM6RXhwb25lbnQ+ QVFBQjwvZHM6RXhwb25lbnQ+CiAgICAgICAgICA8L2RzOlJTQUtleVZhbHVl PgogICAgICAgIDwvZHM6S2V5VmFsdWU+CiAgICAgIDwvZHM6S2V5SW5mbz4K ICAgIDwvZHM6U2lnbmF0dXJlPgogICAgPHNhbWw6U3ViamVjdD4KICAgICAg PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5qb2huPC9zYW1sOk5h bWVJRD4KICAgICAgPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9 InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPgogICAg ICAgIDxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRl cj0iMjAxMS0xMi0wOVQxMToyODozNC4wODFaIiBSZWNpcGllbnQ9Imh0dHA6 Ly9mYWMuc21hY2thaG8uc3Q6MzAwMC9hdXRoL3NhbWwvY2FsbGJhY2siLz4K ICAgICAgPC9zYW1sOlN1YmplY3RDb25maXJtYXRpb24+CiAgICA8L3NhbWw6 U3ViamVjdD4KICAgIDxzYW1sOkNvbmRpdGlvbnMgTm90T25PckFmdGVyPSIy MDExLTEyLTA5VDExOjI4OjM0LjA4MVoiIE5vdEJlZm9yZT0iMjAxMS0xMi0w OVQxMToxODozNC4wODFaIj4KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmlj dGlvbj4KICAgICAgICA8c2FtbDpBdWRpZW5jZT5mYWM8L3NhbWw6QXVkaWVu Y2U+CiAgICAgIDwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPgogICAgPC9z YW1sOkNvbmRpdGlvbnM+CiAgICA8c2FtbDpBdXRoblN0YXRlbWVudCBBdXRo bkluc3RhbnQ9IjIwMTEtMTItMDlUMTE6MjM6MzQuMDgxWiIgU2Vzc2lvbklu ZGV4PSJaTGRpaEtVUldCUnd0ZjljZ18wQi5sbmVMTFAiPgogICAgICA8c2Ft bDpBdXRobkNvbnRleHQ+CiAgICAgICAgPHNhbWw6QXV0aG5Db250ZXh0Q2xh c3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6 dW5zcGVjaWZpZWQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+CiAgICAg IDwvc2FtbDpBdXRobkNvbnRleHQ+CiAgICA8L3NhbWw6QXV0aG5TdGF0ZW1l bnQ+CiAgICA8c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQgeG1sbnM6eHM9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIj4KICAgICAgPHNhbWw6 QXR0cmlidXRlIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1M OjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiIE5hbWU9IkNvbXBhbnlUeXBl Ij4KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6 c3RyaW5nIj5Va0xpbWl0ZWRDb21wYW55PC9zYW1sOkF0dHJpYnV0ZVZhbHVl PgogICAgICA8L3NhbWw6QXR0cmlidXRlPgogICAgICA8c2FtbDpBdHRyaWJ1 dGUgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0 dHJuYW1lLWZvcm1hdDpiYXNpYyIgTmFtZT0iZm9yZW5hbWUiPgogICAgICAg IDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPkpv aG4mYW1wOzwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4KICAgICAgPC9zYW1sOkF0 dHJpYnV0ZT4KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWVGb3JtYXQ9InVy bjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFz aWMiIE5hbWU9InN1cm5hbWUiPgogICAgICAgIDxzYW1sOkF0dHJpYnV0ZVZh bHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPkRvZTwvc2FtbDpBdHRyaWJ1dGVW YWx1ZT4KICAgICAgPC9zYW1sOkF0dHJpYnV0ZT4KICAgICAgPHNhbWw6QXR0 cmlidXRlIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIu MDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiIE5hbWU9ImFkZHJlc3NfMSI+CiAg ICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmlu ZyI+YWRkcmVzc18xPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPgogICAgICA8L3Nh bWw6QXR0cmlidXRlPgogICAgICA8c2FtbDpBdHRyaWJ1dGUgTmFtZUZvcm1h dD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1h dDpiYXNpYyIgTmFtZT0iYWRkcmVzc18yIj4KICAgICAgICA8c2FtbDpBdHRy aWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5hZGRyZXNzXzI8L3Nh bWw6QXR0cmlidXRlVmFsdWU+CiAgICAgIDwvc2FtbDpBdHRyaWJ1dGU+CiAg ICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFt ZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIiBOYW1lPSJj b21wYW55TmFtZSI+CiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNp OnR5cGU9InhzOnN0cmluZyI+QiAmYW1wOyBHPC9zYW1sOkF0dHJpYnV0ZVZh bHVlPgogICAgICA8L3NhbWw6QXR0cmlidXRlPgogICAgICA8c2FtbDpBdHRy aWJ1dGUgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4w OmF0dHJuYW1lLWZvcm1hdDpiYXNpYyIgTmFtZT0icG9zdGNvZGUiPgogICAg ICAgIDxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmci PkVIMSAxQUI8L3NhbWw6QXR0cmlidXRlVmFsdWU+CiAgICAgIDwvc2FtbDpB dHRyaWJ1dGU+CiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lRm9ybWF0PSJ1 cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJh c2ljIiBOYW1lPSJjaXR5Ij4KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1 ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5jaXR5PC9zYW1sOkF0dHJpYnV0ZVZh bHVlPgogICAgICA8L3NhbWw6QXR0cmlidXRlPgogICAgICA8c2FtbDpBdHRy aWJ1dGUgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4w OmF0dHJuYW1lLWZvcm1hdDpiYXNpYyIgTmFtZT0iY291bnRyeSI+CiAgICAg ICAgPHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+ VW5pdGVkIEtpbmdkb208L3NhbWw6QXR0cmlidXRlVmFsdWU+CiAgICAgIDwv c2FtbDpBdHRyaWJ1dGU+CiAgICAgIDxzYW1sOkF0dHJpYnV0ZSBOYW1lRm9y bWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9y bWF0OmJhc2ljIiBOYW1lPSJ1c2VyRW1haWxJRCI+CiAgICAgICAgPHNhbWw6 QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+am9obkBleGFt cGxlLmNvbTwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT4KICAgICAgPC9zYW1sOkF0 dHJpYnV0ZT4KICAgICAgPHNhbWw6QXR0cmlidXRlIE5hbWVGb3JtYXQ9InVy bjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFz aWMiIE5hbWU9ImNvdW50eSI+CiAgICAgICAgPHNhbWw6QXR0cmlidXRlVmFs dWUgeHNpOnR5cGU9InhzOnN0cmluZyI+Y291bnR5PC9zYW1sOkF0dHJpYnV0 ZVZhbHVlPgogICAgICA8L3NhbWw6QXR0cmlidXRlPgogICAgICA8c2FtbDpB dHRyaWJ1dGUgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyIgTmFtZT0ibW9iaWxlTnVtYmVy Ij4KICAgICAgICA8c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6 c3RyaW5nIj4xMjM0NTY3PC9zYW1sOkF0dHJpYnV0ZVZhbHVlPgogICAgICA8 L3NhbWw6QXR0cmlidXRlPgogICAgPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVu dD4KICA8L3NhbWw6QXNzZXJ0aW9uPgo8L1Jlc3BvbnNlPgo= python3-saml-1.16.0/tests/data/responses/response_with_ampersands.xml.base64000066400000000000000000000130441451074743100271540ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0 YzpTQU1MOjIuMDphc3NlcnRpb24iIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6 bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIElEPSJHT1NBTUxSMTMwNzE1 NDEyMjM0MDkiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDExLTA2 LTA0VDAyOjIyOjAyWiIgRGVzdGluYXRpb249InJlY2lwaWVudCI+PHNhbWw6 SXNzdWVyPmh0dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sMjwvc2FtbDpJ c3N1ZXI+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0i dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+ PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgVmVyc2lv bj0iMi4wIiBJRD0iZmFrZV9hc3NlcnRpb24iIElzc3VlSW5zdGFudD0iMjAx MS0wNi0wNFQwMjoyMjowMloiPjxzYW1sOklzc3Vlcj5odHRwczovL2FwcC5v bmVsb2dpbi5jb20vc2FtbDI8L3NhbWw6SXNzdWVyPjxzYW1sOlN1YmplY3Q+ PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5ib2d1c0BvbmVsb2dp bi5jb208L3NhbWw6TmFtZUlEPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb24g TWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVy Ij48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9 IjIwMTEtMDYtMDRUMDI6Mjc6MDJaIiBSZWNpcGllbnQ9InJlY2lwaWVudCIv Pjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0Pjxz YW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDExLTA2LTA0VDAyOjE3OjAy WiIgTm90T25PckFmdGVyPSIyMDExLTA2LTA0VDAyOjI3OjAyWiI+PHNhbWw6 QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5hdWRpZW5jZTwv c2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3Nh bWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3Rh bnQ9IjIwMTEtMDYtMDRUMDI6MjI6MDJaIiBTZXNzaW9uTm90T25PckFmdGVy PSIyMDExLTA2LTA1VDAyOjIyOjAyWiIgU2Vzc2lvbkluZGV4PSJfMTZmNTcw ZmJjMDMxNTAwN2EwMzU1ZGZlYTZiM2M0NmMiPjxzYW1sOkF1dGhuQ29udGV4 dD48c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6 dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZFByb3RlY3RlZFRyYW5z cG9ydDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWw6QXV0aG5D b250ZXh0Pjwvc2FtbDpBdXRoblN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9u PjxzYW1sOkFzc2VydGlvbiB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcv MjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcv MjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIFZlcnNpb249IjIuMCIgSUQ9InBm eDk1MTZiMGYzLTQ1MzYtMTBmNi1jNmZhLTlkZDUyM2UxNDk4YyIgSXNzdWVJ bnN0YW50PSIyMDExLTA2LTA0VDAyOjIyOjAyWiI+PHNhbWw6SXNzdWVyPmh0 dHBzOi8vYXBwLm9uZWxvZ2luLmNvbS9zYW1sMjwvc2FtbDpJc3N1ZXI+PGRz OlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8w OS94bWxkc2lnIyI+CiAgPGRzOlNpZ25lZEluZm8+PGRzOkNhbm9uaWNhbGl6 YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAx LzEwL3htbC1leGMtYzE0biMiLz4KICAgIDxkczpTaWduYXR1cmVNZXRob2Qg QWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcj cnNhLXNoYTEiLz4KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDk1MTZiMGYz LTQ1MzYtMTBmNi1jNmZhLTlkZDUyM2UxNDk4YyI+PGRzOlRyYW5zZm9ybXM+ PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIw MDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5z Zm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1s LWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9k IEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2ln I3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+L0ZFUHRwVlhKTDJHNzJ1UDZMd2Vv R1ltYnpVPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpT aWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5rSEhrMFFOekMwTFlvVkVQ UnE0MGRNT1puckpSdzdlT1dkWWdJY240MXQ2N25xOHJwVjhpSEF2WWQva0RS MVJKcEc2UjU4K25LRVhtTUFLcFNDY29GeC9tQU1UNjNodzQ5RlhOYWZ4WWhj MGc1bjFSVGhaQURFNlJZSFZpV2pvRHdxZzVCT3FnNnNLNUxlZk5ZM080dVhn QXFyMUw4R3pVNXNtMGlMWm9xSUU9PC9kczpTaWduYXR1cmVWYWx1ZT4KPGRz OktleUluZm8+PGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU+TUlJ QnJUQ0NBYUdnQXdJQkFnSUJBVEFEQmdFQU1HY3hDekFKQmdOVkJBWVRBbFZU TVJNd0VRWURWUVFJREFwRFlXeHBabTl5Ym1saE1SVXdFd1lEVlFRSERBeFRZ VzUwWVNCTmIyNXBZMkV4RVRBUEJnTlZCQW9NQ0U5dVpVeHZaMmx1TVJrd0Z3 WURWUVFEREJCaGNIQXViMjVsYkc5bmFXNHVZMjl0TUI0WERURXdNVEF4TVRJ eE1UVXhNbG9YRFRFMU1UQXhNVEl4TVRVeE1sb3daekVMTUFrR0ExVUVCaE1D VlZNeEV6QVJCZ05WQkFnTUNrTmhiR2xtYjNKdWFXRXhGVEFUQmdOVkJBY01E Rk5oYm5SaElFMXZibWxqWVRFUk1BOEdBMVVFQ2d3SVQyNWxURzluYVc0eEdU QVhCZ05WQkFNTUVHRndjQzV2Ym1Wc2IyZHBiaTVqYjIwd2daOHdEUVlKS29a SWh2Y05BUUVCQlFBRGdZMEFNSUdKQW9HQkFNUG1qZmp5N0wzNW9EcGVCWEJv UlZDZ2t0UGtMbm85RE9FV0I3TWdZTU1WS3MyQjZ5bVdRTEVXckR1Z01LMWhr eldGaEliNWZxV0xHYld5MEowdmVHUjkvZ0hPUUcrckQvSTM2eEFYbmtkaVhY aHpvaUFHL3pReE0wZWRNT1VmNDBuMzE0RkM4bW9FcmNVZzZRYWJ0dHplc081 OUhGejZzaFB1eGNXYVZBZ3hBZ01CQUFFd0F3WUJBQU1CQUE9PTwvZHM6WDUw OUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6 U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIEZvcm1hdD0i dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1h aWxBZGRyZXNzIj50ZXN0QG9uZWxvZ2luLmNvbTwvc2FtbDpOYW1lSUQ+PHNh bWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1l czp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJt YXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxMS0wNi0wNFQwMjoyNzowMloi IFJlY2lwaWVudD0icmVjaXBpZW50Ii8+PC9zYW1sOlN1YmplY3RDb25maXJt YXRpb24+PC9zYW1sOlN1YmplY3Q+PHNhbWw6Q29uZGl0aW9ucyBOb3RCZWZv cmU9IjIwMTEtMDYtMDRUMDI6MTc6MDJaIiBOb3RPbk9yQWZ0ZXI9IjIwMTEt MDYtMDRUMDI6Mjc6MDJaIj48c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjxz YW1sOkF1ZGllbmNlPmF1ZGllbmNlPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpB dWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOkF1 dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxMS0wNi0wNFQwMjoyMjow MloiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwMTEtMDYtMDVUMDI6MjI6MDJa IiBTZXNzaW9uSW5kZXg9Il8xNmY1NzBmYmMwMzE1MDA3YTAzNTVkZmVhNmIz YzQ2YyI+PHNhbWw6QXV0aG5Db250ZXh0PjxzYW1sOkF1dGhuQ29udGV4dENs YXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2Vz OlBhc3N3b3JkUHJvdGVjdGVkVHJhbnNwb3J0PC9zYW1sOkF1dGhuQ29udGV4 dENsYXNzUmVmPjwvc2FtbDpBdXRobkNvbnRleHQ+PC9zYW1sOkF1dGhuU3Rh dGVtZW50Pjwvc2FtbDpBc3NlcnRpb24+PC9zYW1scDpSZXNwb25zZT4=python3-saml-1.16.0/tests/data/responses/response_with_nested_nameid_values.xml.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-saml-1.16.0/tests/data/responses/response_without_assertion_reference_uri.xml.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 python3-saml-1.16.0/tests/data/responses/response_without_reference_uri.xml.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 python3-saml-1.16.0/tests/data/responses/signed_assertion_response.xml.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 python3-saml-1.16.0/tests/data/responses/signed_assertion_response2.xml.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python3-saml-1.16.0/tests/data/responses/signed_encrypted_assertion.xml.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 python3-saml-1.16.0/tests/data/responses/signed_encrypted_assertion2.xml.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.16.0/tests/data/responses/signed_message_encrypted_assertion.xml.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 python3-saml-1.16.0/tests/data/responses/signed_message_encrypted_assertion2.xml.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python3-saml-1.16.0/tests/data/responses/signed_message_response.xml.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 python3-saml-1.16.0/tests/data/responses/signed_message_response2.xml.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 python3-saml-1.16.0/tests/data/responses/simple_saml_php.xml000066400000000000000000000101131451074743100241310ustar00rootroot00000000000000 https://federate.example.net/saml/saml2/idp/metadata.php dVJ592k5xPjCHBCMiJ8eZkPUiT8= LHNK1FJfcOIUuWVKJmGABQ+W98+pQ== MIIQmS6WmmIht3k= https://federate.example.net/saml/saml2/idp/metadata.php mi0IAultZkpsZa1XxGx9X4iAPQg= LqkW39SOYbttYxlGhIBw== MIIGmmIht3k= someone@example.com hello.com urn:oasis:names:tc:SAML:2.0:ac:classes:Password someone@example.com python3-saml-1.16.0/tests/data/responses/unsigned_assertion.xml.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 python3-saml-1.16.0/tests/data/responses/unsigned_response.xml.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 python3-saml-1.16.0/tests/data/responses/unsigned_response_with_miliseconds.xm.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-saml-1.16.0/tests/data/responses/valid_encrypted_assertion.xml.base64000066400000000000000000000151411451074743100273110ustar00rootroot00000000000000PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiDQogICAgICAgICAgICAgICAgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiINCiAgICAgICAgICAgICAgICBJRD0iXzVmNDY4MjQ5NjA5MDQwYzZhMzUxYWMxYmUwZTlmYzYwNTMzZmYwOWQzZCINCiAgICAgICAgICAgICAgICBWZXJzaW9uPSIyLjAiDQogICAgICAgICAgICAgICAgSXNzdWVJbnN0YW50PSIyMDE0LTAzLTI5VDEyOjAxOjU3WiINCiAgICAgICAgICAgICAgICBEZXN0aW5hdGlvbj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvZW5kcG9pbnRzL2Fjcy5waHAiDQogICAgICAgICAgICAgICAgSW5SZXNwb25zZVRvPSJPTkVMT0dJTl9iZTYwYjhjYWY4ZTlkMTliN2EzNTUxYjI0NGYxMTZjOTQ3ZmYyNDdkIg0KICAgICAgICAgICAgICAgID4NCiAgICA8c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPg0KICAgIDxzYW1scDpTdGF0dXM+DQogICAgICAgIDxzYW1scDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6c3RhdHVzOlN1Y2Nlc3MiIC8+DQogICAgPC9zYW1scDpTdGF0dXM+DQogICAgPHNhbWw6RW5jcnlwdGVkQXNzZXJ0aW9uPg0KICAgICAgICA8eGVuYzpFbmNyeXB0ZWREYXRhIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICB4bWxuczpkc2lnPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIFR5cGU9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI0VsZW1lbnQiDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPg0KICAgICAgICAgICAgPHhlbmM6RW5jcnlwdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI2FlczEyOC1jYmMiIC8+DQogICAgICAgICAgICA8ZHNpZzpLZXlJbmZvIHhtbG5zOmRzaWc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICAgICAgICAgICAgICAgIDx4ZW5jOkVuY3J5cHRlZEtleT4NCiAgICAgICAgICAgICAgICAgICAgPHhlbmM6RW5jcnlwdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI3JzYS0xXzUiIC8+DQogICAgICAgICAgICAgICAgICAgIDx4ZW5jOkNpcGhlckRhdGE+DQogICAgICAgICAgICAgICAgICAgICAgICA8eGVuYzpDaXBoZXJWYWx1ZT5JSDQwY3lrYkMzOUJYNDdLMmtpOC9vMjJXR2svbTRZZm9BVlNaRTBUcWwxZTJBdWxxYXlPWklIREZoL25XRzVSWXpWYzVyVjJZU0lXd2JhUmFrTUl0YTMzSDg2KzhaOCtPTXhPNFpRa3RIV2VUbHEvbFFnUm5TZ2gzZ3EwS3BnaUtBbFVBaTJ4Z1Q3ZEw5THlUWUwwejJrVXVLMzdSUDJnTGJjUEVjeVZXcTQ9PC94ZW5jOkNpcGhlclZhbHVlPg0KICAgICAgICAgICAgICAgICAgICA8L3hlbmM6Q2lwaGVyRGF0YT4NCiAgICAgICAgICAgICAgICA8L3hlbmM6RW5jcnlwdGVkS2V5Pg0KICAgICAgICAgICAgPC9kc2lnOktleUluZm8+DQogICAgICAgICAgICA8eGVuYzpDaXBoZXJEYXRhPg0KICAgICAgICAgICAgICAgIDx4ZW5jOkNpcGhlclZhbHVlPmFJWThnMVhJRVNOM1JhejkwMXA2QUNMaEpMNG4vcWp2Z1VIdG90WHk0enBrUG0wNmZxMnpHVlQvcDU4ejdwRGRtZEdtZy9jUTlWSTZiUGNjc0d5allaTnZwUXRVc042bVcyb2VkbTFXV3JsUUhVOFA0VlJkS0M5STJOQXUzc0doNHEyMDlMcE5scmwyRUI2eWw1eUw3N0ZSU2lCOGtDWGdHaks3SU1sUXo4WU1qWE93Z2tNa3BEVUNuSTlWbVhCTmJUNkp4NDdRU3Y1YThFU081RVdnRkdVc3NPZGtVVTA2a1J5YWRxQkl6eXhFM1NnbTR6Vi82ekdzL0xHYlhjRElkM0tyS3A1NlREOGJlQ1Zhei82VjI0WjJRSjFCbjNwZGJndk5XeS9CeFNuczg2bjRncnAvSUE2aU1NNUVlS3IvRWFlaHp1TU5XRlhqdEhWRWloQ3cxaHpVeHpTZ1ZBVmIxRHE0MktIWm5YNDdMUWRxaDdRVXNWamdBU3hrYisxM0hiRnV4eGVOWkkzdWZkcG1SNmtaNGlRZXdYMk10bnJrYUIyeU1VMytWblYzempvc2lYaCtDbEtZemcvMStCMUMvekw0V3RvUEZBUktwQ2ozd1FvQ3E4QWdFWllndkhMWGFObjAxSTN3QTl3dnlsNklEKzExajBQU1JzTzN6SXl5aE9xaDNlYm1TUk1Ya1Z4a2ZFUVg3MXoyMGtNOHovU2tJUjFSVWxvVzFyajJHaUNvQ0dodUY4YmVxeS9QWFZ4VFIxYUl1OUNvbCsxTUIvZldGNXN4c09lUGNSWjE5S21kVVRPZ3paS2R0MkNjcWo3TTVlVDhCTERRbVRQYWtsRWFuUDVYSFBhSGRGYnFldHBnQk5HMDVYd1A1TWczbDNZSmhqd010WWpGejdqSGw0ZzNpV09jaVVlaXNyS21DT0F3ZUFXT3JMYWNLZzh6QThJRjRyTWY5U2IrOWlvamtRQzBIR2FvUWxHKzZuODBRT0pOQkZ5TGRCSFNzZktacmVmZDdGazZFWjlkMDU5cEw1Yks5Q2IyLzFoUGZJRU1EVkpqSkVpeWh5VHllVllmdEJhcVZWa1AvYzRwdE5TSnN6a0lpdlV2YUExeXVHNktMYzcwanlFRUloTVBKVTN1aEtrSGthRnowQWF6a1ZjbG9wY3J3NWNyYVlSMUYweUpBWnBoWnZ1QXBlMGU5TG1iakcwaGNVRUJrOFFjclNZbXp6elgrc3Q4bFdNRjU1blZybFpsTmVBcmtXMXZER3FBT2RmRnlSSjQ2MnRVT3RYQkNVKy9KSzNPVTZmRjQxR2dONmdaNzJuWU5KMWU4Unl6RWxPdzlqNzdaRkxHK0lKMkZnVk1FWlV0a1RFaUwvYWtoc0RDUUI5Vk1rOTNPSFgvL1lVOTUwZXNGQ3RicTcyejloeFVEKzZ3Um5IUWlnMkU4VXo0Mk9WT3VEaEJxQi9sbXZEUmpMYk92NnJCTUVqOFE1VjFmTGpBckdEbWsrbDJKTFhzZm4xeVBLUHdmZ2VtR013RkdRaXM4OU9wY3NoNy9JS1c3VXBhTGFaTFJOeDI2ME9LMXR0RVV6bHkzWG5ZdGM1MjhCWUZtQ0ZybDhveGV0RVZkRVlrWWJEYzNpK1p5Y2t3MjRWeGEyd2ltdk5HY0JCTVVVT1djN3lHM1R6eklPVUpZZFlJUGs0WCtuM2dJS1Q2SGxjdGNvbmpwM1QxMzBSMUFYSGZWeFJyQ2ZsMzJnNDkrL2dsZmtlcnFoOXczeEFwTWVvNWlrNEFzU0lIY0ZKVGdZb2I4elNZbHcwKzd6Q2pIcSt5bkRxOXZ1R1ZGdmt2ODhHSkR3U0ZqQnR2R1pBRnh5Tk9wZVM2UGdsR3o0MjJCRXd3MlA0QUhwR05DaTBEc2pvVW5GKzNmTG1PYzZnZFpvRGpzMHRoN2dLRmE0THd1RWg4RzAxTzc3TUJUVWFqd3ZxMVlldE1CQnBmakY5S1NqYjhtb05yWCttYnY1L2FuT2xzVzJ6cUhwb3Z6QTJWSkVGdmpJcUVqaGtxejFDR25TMUg0aHg5Ny9jS2VqMHZwbmphSjdoL0ZJZVhHUnNRd3h3b3JUNDQ0UW4xSThQUWpBdUN1cjdsWmlvMnRtSDZMakxneDB2TExXdFNWQWx0U0ZydWZlMHoxNE82a1NpZndGelA3cTM0VjQzVmlpelVmZllpQ0FYSDhtRnN3MnBQQ2MvcGdUVXBQMCtJY1pESWY2WGE3M3k2cnd5RkxZZTVuVTJKN0I4YnpIUlh0Ym83Szg2N3IzMzRicWoxbjU0RGFzbDlYQkFQdlpxWU1ac1lEMFJJS2gyZFFwQ3pLeDc4RVdMRHozSndkYy9OZEMyOHRTVDRUVDFVWTBVSTAvNDNPRWlxeHlUUndyMXZrMDNuTEdza00zQlVNUXJRMk9VY3c0RUlCcWpNRW9pQUNWM3QyMmZXcDE2dDAwV2h3U3JPVW9mR25MWEdGcmQ1Q2ZwbE5OQjJqcloxYW1yMlE0QkNaazFRYkpMZkdGTFhDT2ptR24yZlNEY3M0bDNSSTNBdkk4aGx0TWw3NHdDaS9lTjNaVjM3MlZHOG1JendTNzhrc3ViT05lWHJwVUNCNkI1VUdCVzlKS0xBRnVXd2p0STFtOHROTjJaVDZzM2tKb3l5bjZ6S2REWnVLS09ndmIwbURtV0dHZ1VCWnNrOGpUNGNoUUR6aWlCUTZoRjQrZS95MDdVem14QnBENXlNM0VXKzlTVUY5N1g4V3pwamFUNGUycWVwSnlvekkvanA2NitzNkJlV1Fha3hEM05rL0NleHFib0pNNk1jYWdxa3lVeUVBd0JjNWx2djl0RThsRWQxbmlyTlZaa0QwVmxsNm1WcngrYzNxdHNIc1lUdC9YWkF0Q0x2NXpoL2ZDSzF5aXZWRGVmVUdtMXhFbGZMdzVVNnlScEdRWmpETDkxL2kyMUkzS2pJRTc3VVhqdm54OE56Q2RqK2V6blNVNTRZRU5iczdTaWZzWUpoVjB1U3VJeC9MUVZ4ZWtJSjlwMWFzNktnNEJtTDlBdFZ6d25OUi9uVHREcVZRcGlobzBZTUdmVnM0a3dVaGpubjY4ZzFMcEtlL0wwUTZoT3R3d3lRZVhBTkw5cHRzUzBOQWMrQWVrWWNJWHphTFhrblB1VEFFY2lRQnJUR0JEbk83aThoOU9PblVqekZhVnFKY01Pd1A1cnRnMFcxck9PclpoNTNpOWxNY0JwNnhkeWEzWkJ4aGVYL0hkRFdNZ0NUQklmS09vN1hHZFNPWUhhNkpDVmNWb0R1a3dYS1FZTkI1VUhKMHFLNmFyUmR6VTBTaUxEKzhLbFVmb2c5azZTanQzSFFvMkxybEI3Y3dGTFJybW1nWk5wd0RTeTBvTDBKQ1YwUXd6djlKalg2bDVFcnVwWU9QQ3RuWmYvYzUwc0NHUTlBMGkwYUJsdzhsZGRtTFhaa3VJQXdxSUErUlE2czBpWldkRm1TY2RmWncybCsvU0xEMzl6ekxDbTdQdE5CT3MybWVpbjJEMjlPZHdiZ05GYitzc1JRLzNPaW8yYmx4V01rSCtLcXFpU1RHZmlvMUlkdW9QYzVHanhTVEFPbXNmalBkeHJpY1EwdWw1RCt0MXNyaHU2Vm9rYm1JN0xGbURVWjRaRWhsTVZMTHhDWGsvV0pWWTVYK0Fkcmc1MGRKLzJjbW42VmFiWW5FczF5TXFEeDZZUXFObGhvR0l6MHpRRmtuM1g2T0JsRWkrVzBQeFpiVmxJT1hjRmMva0x4VUwxY0V6WkwxV3haUldFanpIdVZPcnFCVEMxNjluWUZUdVdLdWVSN2VxQitXbEl3ekpHZ2RnYUYwVWR3dzNGdnJxYURzSFZhTVFPWDBQSVdsb0xhOWNFSmRVS1dWOW9DeU4wWHpNcERMVC8xYkVkdmVRUXEyNGhSM1FyUitVMGJWdkJNdFptc0g3MTRMdVNtUFovR1ZSaXcwSHErRjhRV2R4bDZmdWJud1ZsV0JtcUlJRVE4VTQ4cXd4WWJaZW1uMVFtS2UvNnRucWU1ZkVVSTlxOXNPSXFDdlFMOGVuUGNLOTBwa3dEYk1EajBxMXRqSFhQeXBzR1VLTkFEUERDOUl1TTFjZ2JLWEUrUWtJOGppOS9EdjUwNnFyam9vb21kVGgvWEs5eXB3ZmorMTY1b0hIOXBrcXE3RHBYbzR5b0RpNVlXeVluOUhObkYzRkc3NXQrRXRUSGtiWjdhUE13R2RISHVob0NERXhtUVJwc1BkQmJDOFBiL3Q5U3ZmSjZ6S05sT2dON2pFYTYvMzVoVXlhMD08L3hlbmM6Q2lwaGVyVmFsdWU+DQogICAgICAgICAgICA8L3hlbmM6Q2lwaGVyRGF0YT4NCiAgICAgICAgPC94ZW5jOkVuY3J5cHRlZERhdGE+DQogICAgPC9zYW1sOkVuY3J5cHRlZEFzc2VydGlvbj4NCjwvc2FtbHA6UmVzcG9uc2U+ python3-saml-1.16.0/tests/data/responses/valid_encrypted_assertion_encrypted_nameid.xml.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.16.0/tests/data/responses/valid_response.xml.base64000066400000000000000000000210701451074743100250610ustar00rootroot00000000000000PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9InBmeDQyYmU0MGJmLTM5YzMtNzdmMC1jNmFlLThiZjJlMjNhMWEyZSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciPjxzYW1sOklzc3Vlcj5odHRwOi8vaWRwLmV4YW1wbGUuY29tLzwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogIDxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+DQogICAgPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNyc2Etc2hhMSIvPg0KICA8ZHM6UmVmZXJlbmNlIFVSST0iI3BmeDQyYmU0MGJmLTM5YzMtNzdmMC1jNmFlLThiZjJlMjNhMWEyZSI+PGRzOlRyYW5zZm9ybXM+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8+PGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvZHM6VHJhbnNmb3Jtcz48ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz48ZHM6RGlnZXN0VmFsdWU+M1JNaTI0V0F2cjlnTHdWZ0NtUDlsM2NneCtFPTwvZHM6RGlnZXN0VmFsdWU+PC9kczpSZWZlcmVuY2U+PC9kczpTaWduZWRJbmZvPjxkczpTaWduYXR1cmVWYWx1ZT5FR2ZSVnRTblJqVkJwdkpMdjExNnhWcmovaDVVQnJlTDNnV0V3ZnNORHkrMU9iaC9XTHZlR01uS2xIN0draHU5eXNIUVkxYzRnSER4SVgyaXZtM3YzVFhqK0V3ZDVhMVE2dXgvbXZJSFRvSUR5SnFLL25LSUtVZFEwTWhIcHVXUnF1OEJoWGZQcnRGdWkzOHRhamJpNjFTUnMxN0ZJc3YvbFJLb1JScWJIYlU9PC9kczpTaWduYXR1cmVWYWx1ZT4NCjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48L2RzOktleUluZm8+PC9kczpTaWduYXR1cmU+PHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8+PC9zYW1scDpTdGF0dXM+PHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9InBmeDU3ZGZkYTYwLWIyMTEtNGNkYS0wZjYzLTZkNWRlYjY5ZTViYiIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMTQtMDItMTlUMDE6Mzc6MDFaIj48c2FtbDpJc3N1ZXI+aHR0cDovL2lkcC5leGFtcGxlLmNvbS88L3NhbWw6SXNzdWVyPjxkczpTaWduYXR1cmUgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICA8ZHM6U2lnbmVkSW5mbz48ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPg0KICAgIDxkczpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiLz4NCiAgPGRzOlJlZmVyZW5jZSBVUkk9IiNwZng1N2RmZGE2MC1iMjExLTRjZGEtMGY2My02ZDVkZWI2OWU1YmIiPjxkczpUcmFuc2Zvcm1zPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIvPjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48L2RzOlRyYW5zZm9ybXM+PGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8+PGRzOkRpZ2VzdFZhbHVlPndIVUpDalpLRWVtd3E2eGZzMkNIbUd3UXNIND08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+Y2VFd0NtbFQ2d3lpdGVLZE5JaVNFLzBoTG5rMkRweEh0K24vdzlhTHp4MmpneDJOTzBiUTFjb0xyYlBmc1A1SjhNYkNBQWRUb20yUkxaTUxIdTNwZjBHeXJ6cUUxTkhIMmthaGJiSWtKYnZJWkhhaE1JaFZNUW1RMzhJMDdQRC8wc3BjdkJqQS9lblk0SWtWR2VQdmUwV3FhaU5ZUGNOeDNaTDJPdENMZEtzPTwvZHM6U2lnbmF0dXJlVmFsdWU+DQo8ZHM6S2V5SW5mbz48ZHM6WDUwOURhdGE+PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFOQmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05WQkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXhoYm1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYwZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZhTUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJUYjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVGVkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FHU0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FHU0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBRZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIxNjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQNXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2JxWStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdSK1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIFNQTmFtZVF1YWxpZmllcj0iaHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OmVtYWlsQWRkcmVzcyI+NDkyODgyNjE1YWNmMzFjODA5NmI2MjcyNDVkNzZhZTUzMDM2YzA5MDwvc2FtbDpOYW1lSUQ+PHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbiBNZXRob2Q9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpjbTpiZWFyZXIiPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjA1NC0wOC0yM1QwNjo1NzowMVoiIFJlY2lwaWVudD0iaHR0cHM6Ly9waXRidWxrLm5vLWlwLm9yZy9uZXdvbmVsb2dpbi9kZW1vMS9pbmRleC5waHA/YWNzIiBJblJlc3BvbnNlVG89Ik9ORUxPR0lOXzVmZTlkNmU0OTliMmYwOTEzMjA2YWFiM2Y3MTkxNzI5MDQ5YmI4MDciLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWw6U3ViamVjdD48c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNC0wMi0xOVQwMTozNjozMVoiIE5vdE9uT3JBZnRlcj0iMjA1NC0wOC0yM1QwNjo1NzowMVoiPjxzYW1sOkF1ZGllbmNlUmVzdHJpY3Rpb24+PHNhbWw6QXVkaWVuY2U+aHR0cDovL3N0dWZmLmNvbS9lbmRwb2ludHMvbWV0YWRhdGEucGhwPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxNC0wMi0xOVQwMTozNzowMVoiIFNlc3Npb25Ob3RPbk9yQWZ0ZXI9IjIwNTQtMDItMTlUMDk6Mzc6MDFaIiBTZXNzaW9uSW5kZXg9Il82MjczZDc3YjhjZGUwYzMzM2VjNzlkMjJhOWZhMDAwM2I5ZmUyZDc1Y2IiPjxzYW1sOkF1dGhuQ29udGV4dD48c2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDpBdXRobkNvbnRleHRDbGFzc1JlZj48L3NhbWw6QXV0aG5Db250ZXh0Pjwvc2FtbDpBdXRoblN0YXRlbWVudD48c2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlIE5hbWU9InVpZCIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+c21hcnRpbjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OmJhc2ljIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5zbWFydGluQHlhY28uZXM8L3NhbWw6QXR0cmlidXRlVmFsdWU+PC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0iY24iIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciPlNpeHRvMzwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJzbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+TWFydGluMjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJlZHVQZXJzb25BZmZpbGlhdGlvbiIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDpiYXNpYyI+PHNhbWw6QXR0cmlidXRlVmFsdWUgeHNpOnR5cGU9InhzOnN0cmluZyI+dXNlcjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4c2k6dHlwZT0ieHM6c3RyaW5nIj5hZG1pbjwvc2FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg==python3-saml-1.16.0/tests/data/responses/valid_response2.xml.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 python3-saml-1.16.0/tests/data/responses/valid_response_with_namequalifier.xml.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python3-saml-1.16.0/tests/data/responses/valid_response_without_inresponseto.xml.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 python3-saml-1.16.0/tests/data/responses/valid_unsigned_response.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 python3-saml-1.16.0/tests/data/responses/valid_unsigned_response.xml.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 python3-saml-1.16.0/tests/data/responses/wrapped_response_2.xml.base64000066400000000000000000000227721451074743100256570ustar00rootroot0000000000000077u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4NCjxzYW1s cDpSZXNwb25zZSB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6 Mi4wOnByb3RvY29sIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FN TDoyLjA6YXNzZXJ0aW9uIiBJRD0iXzI2NTAyNGI0NjAyZmM2OGMwMTQ1YzZlOWM1 NzFkOGY2MjE5ZTZjZmVlMCIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIw MTEtMDYtMTNUMTY6MDI6MjVaIiBEZXN0aW5hdGlvbj0iaHR0cDovL2xvY2FsaG9z dC9waHAtc2FtbC1maXhlZC9jb25zdW1lLnBocCIgSW5SZXNwb25zZVRvPSJfMzI0 NDJhOGMzZDFiYThlYTEzNmMiPg0KICA8c2FtbDpJc3N1ZXI+aHR0cHM6Ly9pZHAv c2ltcGxlc2FtbC9zYW1sMi9pZHAvbWV0YWRhdGEucGhwPC9zYW1sOklzc3Vlcj4N CiAgPHNhbWxwOlN0YXR1cz4NCiAgICA8c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0i dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIiAvPg0K ICA8L3NhbWxwOlN0YXR1cz4NCiAgPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnhzaT0i aHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhtbG5z OnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgSUQ9Il82M2Iw YWVhZWMyYmJiNDU4ZjcxMTUzZjIxODBjNzJjNDM5MzFkM2M5MjAiIFZlcnNpb249 IjIuMCIgSXNzdWVJbnN0YW50PSIyMDExLTA2LTEzVDE2OjAyOjI1WiI+DQogICAg PHNhbWw6SXNzdWVyPmh0dHBzOi8vaWRwL3NpbXBsZXNhbWwvc2FtbDIvaWRwL21l dGFkYXRhLnBocDwvc2FtbDpJc3N1ZXI+DQogICAgPHNhbWw6U3ViamVjdD4NCiAg ICAgIDxzYW1sOk5hbWVJRCBTUE5hbWVRdWFsaWZpZXI9InBocC1zYW1sLWZpeGVk IiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9y bWF0OmVtYWlsQWRkcmVzcyI+cm9vdEBleGFtcGxlLmNvbTwvc2FtbDpOYW1lSUQ+ DQogICAgICA8c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9h c2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+DQogICAgICAgIDxzYW1s OlN1YmplY3RDb25maXJtYXRpb25EYXRhIE5vdE9uT3JBZnRlcj0iMjAxMS0wNi0x M1QxNjowNzoyNVoiIFJlY2lwaWVudD0iaHR0cDovL2xvY2FsaG9zdC9waHAtc2Ft bC1maXhlZC9jb25zdW1lLnBocCIgSW5SZXNwb25zZVRvPSJfMzI0NDJhOGMzZDFi YThlYTEzNmMiIC8+DQogICAgICA8L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj4N CiAgICA8L3NhbWw6U3ViamVjdD4NCiAgICA8c2FtbDpDb25kaXRpb25zIE5vdEJl Zm9yZT0iMjAxMS0wNi0xM1QxNjowMTo1NVoiIE5vdE9uT3JBZnRlcj0iMjAxMS0w Ni0xM1QxNjowNzoyNVoiPg0KICAgICAgPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlv bj4NCiAgICAgICAgPHNhbWw6QXVkaWVuY2U+cGhwLXNhbWwtZml4ZWQ8L3NhbWw6 QXVkaWVuY2U+DQogICAgICA8L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj4NCiAg ICA8L3NhbWw6Q29uZGl0aW9ucz4NCiAgICA8c2FtbDpBdXRoblN0YXRlbWVudCBB dXRobkluc3RhbnQ9IjIwMTEtMDYtMTNUMTI6NDc6MzNaIiBTZXNzaW9uTm90T25P ckFmdGVyPSIyMDExLTA2LTE0VDAwOjAyOjI1WiIgU2Vzc2lvbkluZGV4PSJfNTk5 NGFjYjUyODc4MTc4ZjAyYjY2ZTY5M2RlYmUzNDA3MjU3OTZjZDJjIj4NCiAgICAg IDxzYW1sOkF1dGhuQ29udGV4dD4NCiAgICAgICAgPHNhbWw6QXV0aG5Db250ZXh0 Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6 UGFzc3dvcmQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY+DQogICAgICA8L3Nh bWw6QXV0aG5Db250ZXh0Pg0KICAgIDwvc2FtbDpBdXRoblN0YXRlbWVudD4NCiAg PC9zYW1sOkFzc2VydGlvbj4NCiAgPG1kOkVudGl0eURlc2NyaXB0b3IgeG1sbnM6 bWQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDptZXRhZGF0YSIgeG1sbnM6 ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiIGVudGl0eUlE PSJodHRwczovL2lkcC9zaW1wbGVzYW1sL3NhbWwyL2lkcC9tZXRhZGF0YS5waHAi IElEPSJwZng4YjhmZTFkMC0wZjhmLTJlMDAtYTAwOC1iOThiYmM1ZGExZDAiPg0K ICAgIDxkczpTaWduYXR1cmU+DQogICAgICA8ZHM6U2lnbmVkSW5mbz4NCiAgICAg ICAgPGRzOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8v d3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiIC8+DQogICAgICAgIDxk czpTaWduYXR1cmVNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8y MDAwLzA5L3htbGRzaWcjcnNhLXNoYTEiIC8+DQogICAgICAgIDxkczpSZWZlcmVu Y2UgVVJJPSIjcGZ4OGI4ZmUxZDAtMGY4Zi0yZTAwLWEwMDgtYjk4YmJjNWRhMWQw Ij4NCiAgICAgICAgICA8ZHM6VHJhbnNmb3Jtcz4NCiAgICAgICAgICAgIDxkczpU cmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjZW52ZWxvcGVkLXNpZ25hdHVyZSIgLz4NCiAgICAgICAgICAgIDxkczpU cmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3ht bC1leGMtYzE0biMiIC8+DQogICAgICAgICAgPC9kczpUcmFuc2Zvcm1zPg0KICAg ICAgICAgIDxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3Lncz Lm9yZy8yMDAwLzA5L3htbGRzaWcjc2hhMSIgLz4NCiAgICAgICAgICA8ZHM6RGln ZXN0VmFsdWU+NVVmdy9lUlMwVHpIbC9vc2pMVCtJOGxlUDZVPTwvZHM6RGlnZXN0 VmFsdWU+DQogICAgICAgIDwvZHM6UmVmZXJlbmNlPg0KICAgICAgPC9kczpTaWdu ZWRJbmZvPg0KICAgICAgPGRzOlNpZ25hdHVyZVZhbHVlPkM0OFpLQ2FwQVdsNHBx WlM1ZFhMTmVmdjZSYS9hMXZGSDlGWDZsd3c3RS94VmxtZXFTbHh1WGEra0JicE4r RWFzWmJaMGE4blYxTE1oNGN5TER2ajVnVURyYkhvMG1aOVNhRDBZaFhxcnBQY21H djVmSGZxZFRtRTVJUUs2MjQ0UkFPdk05MklyYU0vU0hRQ0dROE1hdkhTNSs4Nm11 MGdkbjVuNWJrcUU1ND08L2RzOlNpZ25hdHVyZVZhbHVlPg0KICAgICAgPGRzOktl eUluZm8+DQogICAgICAgIDxkczpYNTA5RGF0YT4NCiAgICAgICAgICA8ZHM6WDUw OUNlcnRpZmljYXRlPk1JSUNnVENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtp Rzl3MEJBUVVGQURDQmhERUxNQWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBG dVpISmxZWE1nVTI5c1ltVnlaekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFR S0V3ZFZUa2xPUlZSVU1SZ3dGZ1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04 eElUQWZCZ2txaGtpRzl3MEJDUUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpB ZUZ3MHdOekEyTVRVeE1qQXhNelZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFz d0NRWURWUVFHRXdKT1R6RVlNQllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhK bk1Rd3dDZ1lEVlFRSEV3TkdiMjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RB V0JnTlZCQU1URDJabGFXUmxMbVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFF SkFSWVNZVzVrY21WaGMwQjFibWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFF QkFRVUFBNEdOQURDQmlRS0JnUURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9s aXVwaUJPZXNDTzNTSGJEcmwzK3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJ ZXNMQ243YzhhUEhJU0tPdFBsQWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNm Q0dQdEtUeXRIT2dlL09sSmJvMDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJ REFRQUJNQTBHQ1NxR1NJYjNEUUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVv V1E5K1ZNUXgxQVNEb2hCandPc2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtG RGJTdE5vbVBuUXo3bmJLK29ueWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRV dnMvMVV2cTNvck9vL1dKVmhUeXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhv cGhTTXYxWk9vPC9kczpYNTA5Q2VydGlmaWNhdGU+DQogICAgICAgIDwvZHM6WDUw OURhdGE+DQogICAgICA8L2RzOktleUluZm8+DQogICAgPC9kczpTaWduYXR1cmU+ DQogICAgPG1kOklEUFNTT0Rlc2NyaXB0b3IgcHJvdG9jb2xTdXBwb3J0RW51bWVy YXRpb249InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCI+DQog ICAgICA8bWQ6S2V5RGVzY3JpcHRvciB1c2U9InNpZ25pbmciPg0KICAgICAgICA8 ZHM6S2V5SW5mbyB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94 bWxkc2lnIyI+DQogICAgICAgICAgPGRzOlg1MDlEYXRhPg0KICAgICAgICAgICAg PGRzOlg1MDlDZXJ0aWZpY2F0ZT5NSUlDZ1RDQ0Flb0NDUUNiT2xyV0RkWDdGVEFO QmdrcWhraUc5dzBCQVFVRkFEQ0JoREVMTUFrR0ExVUVCaE1DVGs4eEdEQVdCZ05W QkFnVEQwRnVaSEpsWVhNZ1UyOXNZbVZ5WnpFTU1Bb0dBMVVFQnhNRFJtOXZNUkF3 RGdZRFZRUUtFd2RWVGtsT1JWUlVNUmd3RmdZRFZRUURFdzltWldsa1pTNWxjbXho Ym1jdWJtOHhJVEFmQmdrcWhraUc5dzBCQ1FFV0VtRnVaSEpsWVhOQWRXNXBibVYw ZEM1dWJ6QWVGdzB3TnpBMk1UVXhNakF4TXpWYUZ3MHdOekE0TVRReE1qQXhNelZh TUlHRU1Rc3dDUVlEVlFRR0V3Sk9UekVZTUJZR0ExVUVDQk1QUVc1a2NtVmhjeUJU YjJ4aVpYSm5NUXd3Q2dZRFZRUUhFd05HYjI4eEVEQU9CZ05WQkFvVEIxVk9TVTVG VkZReEdEQVdCZ05WQkFNVEQyWmxhV1JsTG1WeWJHRnVaeTV1YnpFaE1COEdDU3FH U0liM0RRRUpBUllTWVc1a2NtVmhjMEIxYm1sdVpYUjBMbTV2TUlHZk1BMEdDU3FH U0liM0RRRUJBUVVBQTRHTkFEQ0JpUUtCZ1FEaXZiaFI3UDUxNngvUzNCcUt4dXBR ZTBMT05vbGl1cGlCT2VzQ08zU0hiRHJsMytxOUliZm5mbUUwNHJOdU1jUHNJeEIx NjFUZERwSWVzTENuN2M4YVBISVNLT3RQbEFlVFpTbmI4UUF1N2FSalpxMytQYnJQ NXVXM1RjZkNHUHRLVHl0SE9nZS9PbEpibzA3OGRWaFhRMTRkMUVEd1hKVzFyUlh1 VXQ0QzhRSURBUUFCTUEwR0NTcUdTSWIzRFFFQkJRVUFBNEdCQUNEVmZwODZIT2Jx WStlOEJVb1dROStWTVF4MUFTRG9oQmp3T3NnMld5a1VxUlhGK2RMZmNVSDlkV1I2 M0N0WklLRkRiU3ROb21QblF6N25iSytvbnlnd0JzcFZFYm5IdVVpaFpxM1pVZG11 bVFxQ3c0VXZzLzFVdnEzb3JPby9XSlZoVHl2TGdGVksyUWFyUTQvNjdPWmZIZDdS K1BPQlhob3BoU012MVpPbzwvZHM6WDUwOUNlcnRpZmljYXRlPg0KICAgICAgICAg IDwvZHM6WDUwOURhdGE+DQogICAgICAgIDwvZHM6S2V5SW5mbz4NCiAgICAgIDwv bWQ6S2V5RGVzY3JpcHRvcj4NCiAgICAgIDxtZDpLZXlEZXNjcmlwdG9yIHVzZT0i ZW5jcnlwdGlvbiI+DQogICAgICAgIDxkczpLZXlJbmZvIHhtbG5zOmRzPSJodHRw Oi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgICAgICAgICA8ZHM6 WDUwOURhdGE+DQogICAgICAgICAgICA8ZHM6WDUwOUNlcnRpZmljYXRlPk1JSUNn VENDQWVvQ0NRQ2JPbHJXRGRYN0ZUQU5CZ2txaGtpRzl3MEJBUVVGQURDQmhERUxN QWtHQTFVRUJoTUNUazh4R0RBV0JnTlZCQWdURDBGdVpISmxZWE1nVTI5c1ltVnla ekVNTUFvR0ExVUVCeE1EUm05dk1SQXdEZ1lEVlFRS0V3ZFZUa2xPUlZSVU1SZ3dG Z1lEVlFRREV3OW1aV2xrWlM1bGNteGhibWN1Ym04eElUQWZCZ2txaGtpRzl3MEJD UUVXRW1GdVpISmxZWE5BZFc1cGJtVjBkQzV1YnpBZUZ3MHdOekEyTVRVeE1qQXhN elZhRncwd056QTRNVFF4TWpBeE16VmFNSUdFTVFzd0NRWURWUVFHRXdKT1R6RVlN QllHQTFVRUNCTVBRVzVrY21WaGN5QlRiMnhpWlhKbk1Rd3dDZ1lEVlFRSEV3Tkdi Mjh4RURBT0JnTlZCQW9UQjFWT1NVNUZWRlF4R0RBV0JnTlZCQU1URDJabGFXUmxM bVZ5YkdGdVp5NXViekVoTUI4R0NTcUdTSWIzRFFFSkFSWVNZVzVrY21WaGMwQjFi bWx1WlhSMExtNXZNSUdmTUEwR0NTcUdTSWIzRFFFQkFRVUFBNEdOQURDQmlRS0Jn UURpdmJoUjdQNTE2eC9TM0JxS3h1cFFlMExPTm9saXVwaUJPZXNDTzNTSGJEcmwz K3E5SWJmbmZtRTA0ck51TWNQc0l4QjE2MVRkRHBJZXNMQ243YzhhUEhJU0tPdFBs QWVUWlNuYjhRQXU3YVJqWnEzK1BiclA1dVczVGNmQ0dQdEtUeXRIT2dlL09sSmJv MDc4ZFZoWFExNGQxRUR3WEpXMXJSWHVVdDRDOFFJREFRQUJNQTBHQ1NxR1NJYjNE UUVCQlFVQUE0R0JBQ0RWZnA4NkhPYnFZK2U4QlVvV1E5K1ZNUXgxQVNEb2hCandP c2cyV3lrVXFSWEYrZExmY1VIOWRXUjYzQ3RaSUtGRGJTdE5vbVBuUXo3bmJLK29u eWd3QnNwVkVibkh1VWloWnEzWlVkbXVtUXFDdzRVdnMvMVV2cTNvck9vL1dKVmhU eXZMZ0ZWSzJRYXJRNC82N09aZkhkN1IrUE9CWGhvcGhTTXYxWk9vPC9kczpYNTA5 Q2VydGlmaWNhdGU+DQogICAgICAgICAgPC9kczpYNTA5RGF0YT4NCiAgICAgICAg PC9kczpLZXlJbmZvPg0KICAgICAgPC9tZDpLZXlEZXNjcmlwdG9yPg0KICAgICAg PG1kOlNpbmdsZUxvZ291dFNlcnZpY2UgQmluZGluZz0idXJuOm9hc2lzOm5hbWVz OnRjOlNBTUw6Mi4wOmJpbmRpbmdzOkhUVFAtUmVkaXJlY3QiIExvY2F0aW9uPSJo dHRwczovL2lkcC9zaW1wbGVzYW1sL3NhbWwyL2lkcC9TaW5nbGVMb2dvdXRTZXJ2 aWNlLnBocCIgLz4NCiAgICAgIDxtZDpOYW1lSURGb3JtYXQ+dXJuOm9hc2lzOm5h bWVzOnRjOlNBTUw6Mi4wOm5hbWVpZC1mb3JtYXQ6dHJhbnNpZW50PC9tZDpOYW1l SURGb3JtYXQ+DQogICAgICA8bWQ6U2luZ2xlU2lnbk9uU2VydmljZSBCaW5kaW5n PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YmluZGluZ3M6SFRUUC1SZWRp cmVjdCIgTG9jYXRpb249Imh0dHBzOi8vaWRwL3NpbXBsZXNhbWwvc2FtbDIvaWRw L1NTT1NlcnZpY2UucGhwIiAvPg0KICAgIDwvbWQ6SURQU1NPRGVzY3JpcHRvcj4N CiAgICA8bWQ6Q29udGFjdFBlcnNvbiBjb250YWN0VHlwZT0idGVjaG5pY2FsIj4N CiAgICAgIDxtZDpHaXZlbk5hbWU+QW5kcmVhczwvbWQ6R2l2ZW5OYW1lPg0KICAg ICAgPG1kOlN1ck5hbWU+TWF5ZXI8L21kOlN1ck5hbWU+DQogICAgICA8bWQ6RW1h aWxBZGRyZXNzPmFuZHJlYXMubWF5ZXJAd3VlcnRoLmNvbTwvbWQ6RW1haWxBZGRy ZXNzPg0KICAgIDwvbWQ6Q29udGFjdFBlcnNvbj4NCiAgPC9tZDpFbnRpdHlEZXNj cmlwdG9yPg0KPC9zYW1scDpSZXNwb25zZT4= python3-saml-1.16.0/tests/pylint.rc000066400000000000000000000040351451074743100171540ustar00rootroot00000000000000[MASTER] profile=no persistent=yes ignore= cache-size=500 [REPORTS] output-format=text files-output=no reports=yes [BASIC] no-docstring-rgx=__.*__|_.* class-rgx=[A-Z_][a-zA-Z0-9_]+$ function-rgx=[a-zA_][a-zA-Z0-9_]{2,70}$ method-rgx=[a-z_][a-zA-Z0-9_]{2,70}$ const-rgx=(([A-Z_][A-Z0-9_]*)|([a-z_][a-z0-9_]*)|(__.*__)|register|urlpatterns)$ good-names=_,i,j,k,e,qs,pk,setUp,tearDown,el,ns,fd,js,nb,na,sp,SAML_SINGLE_LOGOUT_NOT_SUPPORTED,SAML_SINGLE_LOGOUT_NOT_SUPPORTED,NAMEID_WINDOWS_DOMAIN_QUALIFIED_NAME docstring-min-length=1 disable=E0611,W0703,W0511,W1401,F0401,W0102,E1103,W0212,I0011 [TYPECHECK] # Tells whether missing members accessed in mixin class should be ignored. A # mixin class is detected if its name ends with "mixin" (case insensitive). ignore-mixin-members=yes # List of module names for which member attributes should not be checked # (useful for modules/projects where namespaces are manipulated during runtime # and thus extisting member attributes cannot be deduced by static analysis ignored-modules= # List of classes names for which member attributes should not be checked # (useful for classes with attributes dynamically set). ignored-classes=SQLObject,WSGIRequest # When zope mode is activated, add a predefined set of Zope acquired attributes # to generated-members. zope=no # List of members which are set dynamically and missed by pylint inference # system, and so shouldn't trigger E0201 when accessed. generated-members=objects,DoesNotExist,id,pk,_meta,base_fields,context,views,save # List of method names used to declare (i.e. assign) instance attributes defining-attr-methods=__init__,__new__,setUp [VARIABLES] init-import=no dummy-variables-rgx=_|dummy [SIMILARITIES] min-similarity-lines=6 ignore-comments=yes ignore-docstrings=yes [MISCELLANEOUS] notes=FIXME,XXX,TODO [FORMAT] max-line-length=200 max-module-lines=1200 indent-string=' ' indent-after-paren=4 [DESIGN] max-args=10 max-locals=40 max-returns=6 max-branches=50 max-statements=120 max-parents=10 max-attributes=10 min-public-methods=0 max-public-methods=100 python3-saml-1.16.0/tests/settings/000077500000000000000000000000001451074743100171455ustar00rootroot00000000000000python3-saml-1.16.0/tests/settings/settings.json000077700000000000000000000000001451074743100245072settings1.jsonustar00rootroot00000000000000python3-saml-1.16.0/tests/settings/settings1.json000066400000000000000000000042761451074743100217720ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMCTk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYDVQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xiZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2ZlaWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5vMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7nbK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2QarQ4/67OZfHd7R+POBXhophSMv1ZOo" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings10.json000066400000000000000000000041471451074743100220470ustar00rootroot00000000000000{ "strict": false, "debug": false, "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings11.json000066400000000000000000000043501451074743100220440ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false, "allowRepeatAttributeName": true }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings2.json000066400000000000000000000043041451074743100217630ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "https://idp.example.com/simplesaml/saml2/idp/metadata.php", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings3.json000066400000000000000000000042521451074743100217660ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://pytoolkit.com:8000/metadata/", "assertionConsumerService": { "url": "http://pytoolkit.com:8000/?acs" }, "singleLogoutService": { "url": "http://pytoolkit.com:8000/?sls" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php", "singleSignOnService": { "url": "http://pitbulk.no-ip.org/SSOService.php" }, "singleLogoutService": { "url": "http://pitbulk.no-ip.org/SingleLogoutService.php" }, "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings4.json000066400000000000000000000072541451074743100217740ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://pytoolkit.com:8000/metadata/", "assertionConsumerService": { "url": "http://pytoolkit.com:8000/?acs" }, "attributeConsumingService": { "isDefault": false, "serviceName": "Test Service", "serviceDescription": "Test Service", "requestedAttributes": [ { "name": "urn:oid:2.5.4.42", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "givenName", "isRequired": false }, { "name": "urn:oid:2.5.4.4", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "sn", "isRequired": false }, { "name": "urn:oid:2.16.840.1.113730.3.1.241", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "displayName", "isRequired": false }, { "name": "urn:oid:0.9.2342.19200300.100.1.3", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "mail", "isRequired": false }, { "name": "urn:oid:0.9.2342.19200300.100.1.1", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "uid", "isRequired": false } ] }, "singleLogoutService": { "url": "http://pytoolkit.com:8000/?sls" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php", "singleSignOnService": { "url": "http://pitbulk.no-ip.org/SSOService.php" }, "singleLogoutService": { "url": "http://pitbulk.no-ip.org/SingleLogoutService.php" }, "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings5.json000066400000000000000000000056211451074743100217710ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://pytoolkit.com:8000/metadata/", "assertionConsumerService": { "url": "http://pytoolkit.com:8000/?acs" }, "attributeConsumingService": { "isDefault": false, "serviceName": "Test Service", "serviceDescription": "Test Service", "requestedAttributes": [ { "name": "userType", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:basic", "isRequired": false, "attributeValue": ["userType","admin"] }, { "name": "urn:oid:0.9.2342.19200300.100.1.1", "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "uid", "isRequired": false } ] }, "singleLogoutService": { "url": "http://pytoolkit.com:8000/?sls" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php", "singleSignOnService": { "url": "http://pitbulk.no-ip.org/SSOService.php" }, "singleLogoutService": { "url": "http://pitbulk.no-ip.org/SingleLogoutService.php" }, "x509cert": "MIICbDCCAdWgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBTMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wHhcNMTQwOTIzMTIyNDA4WhcNNDIwMjA4MTIyNDA4WjBTMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOWA+YHU7cvPOrBOfxCscsYTJB+kH3MaA9BFrSHFS+KcR6cw7oPSktIJxUgvDpQbtfNcOkE/tuOPBDoech7AXfvH6d7Bw7xtW8PPJ2mB5Hn/HGW2roYhxmfh3tR5SdwN6i4ERVF8eLkvwCHsNQyK2Ref0DAJvpBNZMHCpS24916/AgMBAAGjUDBOMB0GA1UdDgQWBBQ77/qVeiigfhYDITplCNtJKZTM8DAfBgNVHSMEGDAWgBQ77/qVeiigfhYDITplCNtJKZTM8DAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4GBAJO2j/1uO80E5C2PM6Fk9mzerrbkxl7AZ/mvlbOn+sNZE+VZ1AntYuG8ekbJpJtG1YfRfc7EA9mEtqvv4dhv7zBy4nK49OR+KpIBjItWB5kYvrqMLKBa32sMbgqqUqeF1ENXKjpvLSuPdfGJZA3dNa/+Dyb8GGqWe707zLyc5F8m" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings6.json000066400000000000000000000027171451074743100217750ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "certFingerprint": "AF:E7:1C:28:EF:74:0B:C8:74:25:BE:13:A2:26:3D:37:97:1D:A1:F9", "certFingerprintAlgorithm": "sha1" }, "security": { "authnRequestsSigned": true, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/settings/settings7.json000066400000000000000000000112661451074743100217750ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "privateKey": "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", "x509cert": "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", "x509certNew": "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" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMCTk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYDVQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xiZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2ZlaWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5vMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7nbK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2QarQ4/67OZfHd7R+POBXhophSMv1ZOo" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/tests/settings/settings8.json000066400000000000000000000133111451074743100217670ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", "privateKey": "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", "x509cert": "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" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "", "x509certMulti": { "signing": [ "MIICbDCCAdWgAwIBAgIBADANBgkqhkiG9w0BAQ0FADBTMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wHhcNMTQwOTIzMTIyNDA4WhcNNDIwMjA4MTIyNDA4WjBTMQswCQYDVQQGEwJ1czETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UECgwMT25lbG9naW4gSW5jMRgwFgYDVQQDDA9pZHAuZXhhbXBsZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOWA+YHU7cvPOrBOfxCscsYTJB+kH3MaA9BFrSHFS+KcR6cw7oPSktIJxUgvDpQbtfNcOkE/tuOPBDoech7AXfvH6d7Bw7xtW8PPJ2mB5Hn/HGW2roYhxmfh3tR5SdwN6i4ERVF8eLkvwCHsNQyK2Ref0DAJvpBNZMHCpS24916/AgMBAAGjUDBOMB0GA1UdDgQWBBQ77/qVeiigfhYDITplCNtJKZTM8DAfBgNVHSMEGDAWgBQ77/qVeiigfhYDITplCNtJKZTM8DAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4GBAJO2j/1uO80E5C2PM6Fk9mzerrbkxl7AZ/mvlbOn+sNZE+VZ1AntYuG8ekbJpJtG1YfRfc7EA9mEtqvv4dhv7zBy4nK49OR+KpIBjItWB5kYvrqMLKBa32sMbgqqUqeF1ENXKjpvLSuPdfGJZA3dNa/+Dyb8GGqWe707zLyc5F8m", "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" ], "encryption": [ "MIICgTCCAeoCCQCbOlrWDdX7FTANBgkqhkiG9w0BAQUFADCBhDELMAkGA1UEBhMCTk8xGDAWBgNVBAgTD0FuZHJlYXMgU29sYmVyZzEMMAoGA1UEBxMDRm9vMRAwDgYDVQQKEwdVTklORVRUMRgwFgYDVQQDEw9mZWlkZS5lcmxhbmcubm8xITAfBgkqhkiG9w0BCQEWEmFuZHJlYXNAdW5pbmV0dC5ubzAeFw0wNzA2MTUxMjAxMzVaFw0wNzA4MTQxMjAxMzVaMIGEMQswCQYDVQQGEwJOTzEYMBYGA1UECBMPQW5kcmVhcyBTb2xiZXJnMQwwCgYDVQQHEwNGb28xEDAOBgNVBAoTB1VOSU5FVFQxGDAWBgNVBAMTD2ZlaWRlLmVybGFuZy5ubzEhMB8GCSqGSIb3DQEJARYSYW5kcmVhc0B1bmluZXR0Lm5vMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDivbhR7P516x/S3BqKxupQe0LONoliupiBOesCO3SHbDrl3+q9IbfnfmE04rNuMcPsIxB161TdDpIesLCn7c8aPHISKOtPlAeTZSnb8QAu7aRjZq3+PbrP5uW3TcfCGPtKTytHOge/OlJbo078dVhXQ14d1EDwXJW1rRXuUt4C8QIDAQABMA0GCSqGSIb3DQEBBQUAA4GBACDVfp86HObqY+e8BUoWQ9+VMQx1ASDohBjwOsg2WykUqRXF+dLfcUH9dWR63CtZIKFDbStNomPnQz7nbK+onygwBspVEbnHuUihZq3ZUdmumQqCw4Uvs/1Uvq3orOo/WJVhTyvLgFVK2QarQ4/67OZfHd7R+POBXhophSMv1ZOo" ] } }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } }python3-saml-1.16.0/tests/settings/settings9.json000066400000000000000000000025121451074743100217710ustar00rootroot00000000000000{ "strict": false, "debug": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "entityId": "http://idp.example.com/", "singleSignOnService": { "url": "http://idp.example.com/SSOService.php" }, "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" } }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "givenName": "technical_name", "emailAddress": "technical@example.com" }, "support": { "givenName": "support_name", "emailAddress": "support@example.com" } }, "organization": { "en-US": { "name": "sp_test", "displayname": "SP test", "url": "http://sp.example.com" } } } python3-saml-1.16.0/tests/src/000077500000000000000000000000001451074743100160745ustar00rootroot00000000000000python3-saml-1.16.0/tests/src/OneLogin/000077500000000000000000000000001451074743100176065ustar00rootroot00000000000000python3-saml-1.16.0/tests/src/OneLogin/__init__.py000066400000000000000000000000001451074743100217050ustar00rootroot00000000000000python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/000077500000000000000000000000001451074743100220465ustar00rootroot00000000000000python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/__init__.py000066400000000000000000000000001451074743100241450ustar00rootroot00000000000000python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/auth_test.py000066400000000000000000002271501451074743100244270ustar00rootroot00000000000000# -*- coding: utf-8 -*- from base64 import b64decode, b64encode import json from os.path import dirname, join, exists import unittest from onelogin.saml2 import compat from onelogin.saml2.auth import OneLogin_Saml2_Auth from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils, OneLogin_Saml2_Error from onelogin.saml2.logout_request import OneLogin_Saml2_Logout_Request try: from urllib.parse import urlparse, parse_qs except ImportError: from urlparse import urlparse, parse_qs class OneLogin_Saml2_Auth_Test(unittest.TestCase): data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') # assertRaisesRegexp deprecated on python3 def assertRaisesRegex(self, exception, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRaisesRegex'): return super(OneLogin_Saml2_Auth_Test, self).assertRaisesRegex(exception, regexp, msg=msg) else: return self.assertRaisesRegexp(exception, regexp) def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def get_request(self): return { 'http_host': 'example.com', 'script_name': '/index.html', 'get_data': {} } def testGetSettings(self): """ Tests the get_settings method of the OneLogin_Saml2_Auth class Build a OneLogin_Saml2_Settings object with a setting array and compare the value returned from the method of the auth object """ settings_info = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_info) auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) auth_settings = auth.get_settings() self.assertEqual(settings.get_sp_data(), auth_settings.get_sp_data()) def testGetSSOurl(self): """ Tests the get_sso_url method of the OneLogin_Saml2_Auth class """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertEqual(auth.get_sso_url(), sso_url) def testGetSLOurl(self): """ Tests the get_slo_url method of the OneLogin_Saml2_Auth class """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertEqual(auth.get_slo_url(), slo_url) def testGetSLOresponseUrl(self): """ Tests the get_slo_response_url method of the OneLogin_Saml2_Auth class """ settings_info = self.loadSettingsJSON() settings_info['idp']['singleLogoutService']['responseUrl'] = "http://idp.example.com/SingleLogoutReturn.php" auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) slo_url = settings_info['idp']['singleLogoutService']['responseUrl'] self.assertEqual(auth.get_slo_response_url(), slo_url) # test that the function falls back to the url setting if responseUrl is not set settings_info['idp']['singleLogoutService'].pop('responseUrl') auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertEqual(auth.get_slo_response_url(), slo_url) def testGetSessionIndex(self): """ Tests the get_session_index method of the OneLogin_Saml2_Auth class """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) self.assertIsNone(auth.get_session_index()) request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth2 = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) self.assertIsNone(auth2.get_session_index()) auth2.process_response() self.assertEqual('_6273d77b8cde0c333ec79d22a9fa0003b9fe2d75cb', auth2.get_session_index()) def testGetSessionExpiration(self): """ Tests the get_session_expiration method of the OneLogin_Saml2_Auth class """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) self.assertIsNone(auth.get_session_expiration()) request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth2 = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) self.assertIsNone(auth2.get_session_expiration()) auth2.process_response() self.assertEqual(2655106621, auth2.get_session_expiration()) def testGetLastErrorReason(self): """ Tests the get_last_error_reason method of the OneLogin_Saml2_Auth class Case Invalid Response """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() self.assertEqual(auth.get_last_error_reason(), 'Signature validation failed. SAML Response rejected') def testProcessNoResponse(self): """ Tests the process_response method of the OneLogin_Saml2_Auth class Case No Response, An exception is throw """ auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=self.loadSettingsJSON()) with self.assertRaisesRegex(OneLogin_Saml2_Error, 'SAML Response not found'): auth.process_response() self.assertEqual(auth.get_errors(), ['invalid_binding']) def testProcessResponseInvalid(self): """ Tests the process_response method of the OneLogin_Saml2_Auth class Case Invalid Response, After processing the response the user is not authenticated, attributes are notreturned, no nameID and the error array is not empty, contains 'invalid_response """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() self.assertFalse(auth.is_authenticated()) self.assertEqual(len(auth.get_attributes()), 0) self.assertEqual(auth.get_nameid(), None) self.assertEqual(auth.get_attribute('uid'), None) self.assertEqual(auth.get_errors(), ['invalid_response']) def testProcessResponseInvalidRequestId(self): """ Tests the process_response method of the OneLogin_Saml2_Auth class Case Invalid Response, Invalid requestID """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) plain_message = compat.to_string(b64decode(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': compat.to_string(b64encode(compat.to_bytes(plain_message))) } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) request_id = 'invalid' auth.process_response(request_id) self.assertEqual('No Signature found. SAML Response rejected', auth.get_last_error_reason()) auth.set_strict(True) auth.process_response(request_id) self.assertEqual(auth.get_errors(), ['invalid_response']) self.assertEqual('The InResponseTo of the Response: _57bcbf70-7b1f-012e-c821-782bcb13bb38, does not match the ID of the AuthNRequest sent by the SP: invalid', auth.get_last_error_reason()) valid_request_id = '_57bcbf70-7b1f-012e-c821-782bcb13bb38' auth.process_response(valid_request_id) self.assertEqual('No Signature found. SAML Response rejected', auth.get_last_error_reason()) def testProcessResponseValid(self): """ Tests the process_response method of the OneLogin_Saml2_Auth class Case Valid Response, After processing the response the user is authenticated, attributes are returned, also has a nameID and the error array is empty """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual(len(auth.get_errors()), 0) self.assertEqual('492882615acf31c8096b627245d76ae53036c090', auth.get_nameid()) attributes = auth.get_attributes() self.assertNotEqual(len(attributes), 0) self.assertEqual(auth.get_attribute('mail'), attributes['mail']) friendlyname_attributes = auth.get_friendlyname_attributes() self.assertEqual(len(friendlyname_attributes), 0) session_index = auth.get_session_index() self.assertEqual('_6273d77b8cde0c333ec79d22a9fa0003b9fe2d75cb', session_index) self.assertEqual("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", auth.get_nameid_format()) self.assertIsNone(auth.get_nameid_nq()) self.assertEqual("http://stuff.com/endpoints/metadata.php", auth.get_nameid_spnq()) def testRedirectTo(self): """ Tests the redirect_to method of the OneLogin_Saml2_Auth class (phpunit raises an exception when a redirect is executed, the exception is catched and we check that the targetURL is correct) Case redirect without url parameter """ request_data = self.get_request() relay_state = 'http://sp.example.com' request_data['get_data']['RelayState'] = relay_state auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) target_url = auth.redirect_to() self.assertEqual(target_url, relay_state) def testRedirectTowithUrl(self): """ Tests the redirect_to method of the OneLogin_Saml2_Auth class (phpunit raises an exception when a redirect is executed, the exception is catched and we check that the targetURL is correct) Case redirect with url parameter """ request_data = self.get_request() relay_state = 'http://sp.example.com' url_2 = 'http://sp2.example.com' request_data['get_data']['RelayState'] = relay_state auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) target_url = auth.redirect_to(url_2) self.assertEqual(target_url, url_2) def testProcessNoSLO(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case No Message, An exception is throw """ auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=self.loadSettingsJSON()) with self.assertRaisesRegex(OneLogin_Saml2_Error, 'SAML LogoutRequest/LogoutResponse not found'): auth.process_slo(True) self.assertEqual(auth.get_errors(), ['invalid_binding']) def testProcessSLOResponseInvalid(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Invalid Logout Response """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) request_data['get_data']['SAMLResponse'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_slo(True) self.assertEqual(len(auth.get_errors()), 0) auth.set_strict(True) auth.process_slo(True) # The Destination fails self.assertEqual(auth.get_errors(), ['invalid_logout_response']) auth.set_strict(False) auth.process_slo(True) self.assertEqual(len(auth.get_errors()), 0) def testProcessSLOResponseNoSucess(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Logout Response not success """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_responses', 'invalids', 'status_code_responder.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLResponse'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.set_strict(True) auth.process_slo(True) self.assertEqual(auth.get_errors(), ['logout_not_success']) def testProcessSLOResponseRequestId(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Logout Response with valid and invalid Request ID """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLResponse'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) request_id = 'wrongID' auth.set_strict(True) auth.process_slo(True, request_id) self.assertEqual(auth.get_errors(), ['invalid_logout_response']) request_id = 'ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e' auth.process_slo(True, request_id) self.assertEqual(len(auth.get_errors()), 0) def testProcessSLOResponseValid(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Valid Logout Response """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLResponse'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) # FIXME # if (!isset($_SESSION)) { # $_SESSION = array(); # } # $_SESSION['samltest'] = true; auth.set_strict(True) auth.process_slo(True) self.assertEqual(len(auth.get_errors()), 0) # FIXME # // Session keep alive # $this->assertTrue(isset($_SESSION['samltest'])); # $this->assertTrue($_SESSION['samltest']); def testProcessSLOResponseValidDeletingSession(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Valid Logout Response, validating deleting the local session """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) # FIXME # if (!isset($_SESSION)) { # $_SESSION = array(); # } # $_SESSION['samltest'] = true; # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLResponse'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.set_strict(True) auth.process_slo(False) self.assertEqual(len(auth.get_errors()), 0) # FIXME # $this->assertFalse(isset($_SESSION['samltest'])); def testProcessSLORequestInvalidValid(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Invalid Logout Request """ settings_info = self.loadSettingsJSON() request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) request_data['get_data']['SAMLRequest'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) target_url = auth.process_slo(True) parsed_query = parse_qs(urlparse(target_url)[4]) self.assertEqual(len(auth.get_errors()), 0) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLResponse', parsed_query) # self.assertNotIn('RelayState', parsed_query) auth.set_strict(True) auth.process_slo(True) # Fail due destination missmatch self.assertEqual(auth.get_errors(), ['invalid_logout_request']) auth.set_strict(False) target_url_2 = auth.process_slo(True) parsed_query_2 = parse_qs(urlparse(target_url_2)[4]) self.assertEqual(len(auth.get_errors()), 0) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url_2) self.assertIn('SAMLResponse', parsed_query_2) # self.assertNotIn('RelayState', parsed_query_2) def testProcessSLORequestNotOnOrAfterFailed(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Logout Request NotOnOrAfter failed """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_requests', 'invalids', 'not_after_failed.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLRequest'] = message auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.set_strict(True) auth.process_slo(True) self.assertEqual(auth.get_errors(), ['invalid_logout_request']) def testProcessSLORequestDeletingSession(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Valid Logout Request, validating that the local session is deleted, a LogoutResponse is created and a redirection executed """ settings_info = self.loadSettingsJSON() request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLRequest'] = message # FIXME # if (!isset($_SESSION)) { # $_SESSION = array(); # } # $_SESSION['samltest'] = true; auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) auth.set_strict(True) target_url = auth.process_slo(True) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLResponse', parsed_query) # self.assertNotIn('RelayState', parsed_query) # FIXME // Session is not alive # $this->assertFalse(isset($_SESSION['samltest'])); # $_SESSION['samltest'] = true; auth.set_strict(True) target_url_2 = auth.process_slo(True) target_url_2 = auth.process_slo(True) parsed_query_2 = parse_qs(urlparse(target_url_2)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url_2) self.assertIn('SAMLResponse', parsed_query_2) # self.assertNotIn('RelayState', parsed_query_2) # FIXME // Session is alive # $this->assertTrue(isset($_SESSION['samltest'])); # $this->assertTrue($_SESSION['samltest']); def testProcessSLORequestRelayState(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Valid Logout Request, validating the relayState, a LogoutResponse is created and a redirection executed """ settings_info = self.loadSettingsJSON() request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLRequest'] = message request_data['get_data']['RelayState'] = 'http://relaystate.com' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) auth.set_strict(True) target_url = auth.process_slo(False) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLResponse', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn('http://relaystate.com', parsed_query['RelayState']) def testProcessSLORequestSignedResponse(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth class Case Valid Logout Request, validating the relayState, a signed LogoutResponse is created and a redirection executed """ settings_info = self.loadSettingsJSON() settings_info['security']['logoutResponseSigned'] = True request_data = self.get_request() message = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_data['get_data']['SAMLRequest'] = message request_data['get_data']['RelayState'] = 'http://relaystate.com' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) auth.set_strict(True) target_url = auth.process_slo(False) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLResponse', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn('SigAlg', parsed_query) self.assertIn('Signature', parsed_query) self.assertIn('http://relaystate.com', parsed_query['RelayState']) self.assertIn(OneLogin_Saml2_Constants.RSA_SHA256, parsed_query['SigAlg']) def testLogin(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case Login with no parameters. An AuthnRequest is built an redirect executed """ settings_info = self.loadSettingsJSON() request_data = self.get_request() auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) target_url = auth.login() parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) hostname = OneLogin_Saml2_Utils.get_self_host(request_data) self.assertIn(u'http://%s/index.html' % hostname, parsed_query['RelayState']) def testLoginWithRelayState(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case Login with relayState. An AuthnRequest is built with a the RelayState in the assertion is built and redirect executed """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) relay_state = 'http://sp.example.com' target_url = auth.login(relay_state) parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn(relay_state, parsed_query['RelayState']) def testLoginSigned(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case Login signed. An AuthnRequest signed is built an redirect executed """ settings_info = self.loadSettingsJSON() settings_info['security']['authnRequestsSigned'] = True auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) return_to = u'http://example.com/returnto' target_url = auth.login(return_to) parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn('SigAlg', parsed_query) self.assertIn('Signature', parsed_query) self.assertIn(return_to, parsed_query['RelayState']) self.assertIn(OneLogin_Saml2_Constants.RSA_SHA256, parsed_query['SigAlg']) def testLoginForceAuthN(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case AuthN Request is built with ForceAuthn and redirect executed """ settings_info = self.loadSettingsJSON() return_to = u'http://example.com/returnto' auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url = auth.login(return_to) parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) request = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0])) self.assertNotIn('ForceAuthn="true"', request) auth_2 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url_2 = auth_2.login(return_to, False, False) parsed_query_2 = parse_qs(urlparse(target_url_2)[4]) self.assertIn(sso_url, target_url_2) self.assertIn('SAMLRequest', parsed_query_2) request_2 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query_2['SAMLRequest'][0])) self.assertNotIn('ForceAuthn="true"', request_2) auth_3 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url_3 = auth_3.login(return_to, True, False) parsed_query_3 = parse_qs(urlparse(target_url_3)[4]) self.assertIn(sso_url, target_url_3) self.assertIn('SAMLRequest', parsed_query_3) request_3 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query_3['SAMLRequest'][0])) self.assertIn('ForceAuthn="true"', request_3) def testLoginIsPassive(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case AuthN Request is built with IsPassive and redirect executed """ settings_info = self.loadSettingsJSON() return_to = u'http://example.com/returnto' settings_info['idp']['singleSignOnService']['url'] auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url = auth.login(return_to) parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) request = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0])) self.assertNotIn('IsPassive="true"', request) auth_2 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url_2 = auth_2.login(return_to, False, False) parsed_query_2 = parse_qs(urlparse(target_url_2)[4]) self.assertIn(sso_url, target_url_2) self.assertIn('SAMLRequest', parsed_query_2) request_2 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query_2['SAMLRequest'][0])) self.assertNotIn('IsPassive="true"', request_2) auth_3 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url_3 = auth_3.login(return_to, False, True) parsed_query_3 = parse_qs(urlparse(target_url_3)[4]) self.assertIn(sso_url, target_url_3) self.assertIn('SAMLRequest', parsed_query_3) request_3 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query_3['SAMLRequest'][0])) self.assertIn('IsPassive="true"', request_3) def testLoginSetNameIDPolicy(self): """ Tests the login method of the OneLogin_Saml2_Auth class Case AuthN Request is built with and without NameIDPolicy """ settings_info = self.loadSettingsJSON() return_to = u'http://example.com/returnto' settings_info['idp']['singleSignOnService']['url'] auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url = auth.login(return_to) parsed_query = parse_qs(urlparse(target_url)[4]) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertIn(sso_url, target_url) self.assertIn('SAMLRequest', parsed_query) request = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0])) self.assertIn('', request) self.assertNotIn('', request_2) self.assertIn('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser@example.com', request_2) self.assertIn('', request_2) settings_info['sp']['NameIDFormat'] = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' auth_3 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) target_url_3 = auth_3.login(return_to, name_id_value_req='testuser@example.com') parsed_query_3 = parse_qs(urlparse(target_url_3)[4]) self.assertIn(sso_url, target_url_3) self.assertIn('SAMLRequest', parsed_query_3) request_3 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query_3['SAMLRequest'][0])) self.assertIn('', request_3) self.assertIn('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">testuser@example.com', request_3) self.assertIn('', request_3) def testLogout(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case Logout with no parameters. A logout Request is built and redirect executed """ settings_info = self.loadSettingsJSON() request_data = self.get_request() auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) target_url = auth.logout() parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) hostname = OneLogin_Saml2_Utils.get_self_host(request_data) self.assertIn(u'http://%s/index.html' % hostname, parsed_query['RelayState']) def testLogoutWithRelayState(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case Logout with relayState. A logout Request with a the RelayState in the assertion is built and redirect executed """ settings_info = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) relay_state = 'http://sp.example.com' target_url = auth.logout(relay_state) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn(relay_state, parsed_query['RelayState']) def testLogoutSigned(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case Logout signed. A logout Request signed in the assertion is built and redirect executed """ settings_info = self.loadSettingsJSON() settings_info['security']['logoutRequestSigned'] = True auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) return_to = u'http://example.com/returnto' target_url = auth.logout(return_to) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLRequest', parsed_query) self.assertIn('RelayState', parsed_query) self.assertIn('SigAlg', parsed_query) self.assertIn('Signature', parsed_query) self.assertIn(return_to, parsed_query['RelayState']) self.assertIn(OneLogin_Saml2_Constants.RSA_SHA256, parsed_query['SigAlg']) def testLogoutNoSLO(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case IdP no SLO endpoint. """ settings_info = self.loadSettingsJSON() del settings_info['idp']['singleLogoutService'] auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) # The Header of the redirect produces an Exception with self.assertRaisesRegex(OneLogin_Saml2_Error, 'The IdP does not support Single Log Out'): auth.logout('http://example.com/returnto') def testLogoutNameIDandSessionIndex(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case nameID and sessionIndex as parameters. """ settings_info = self.loadSettingsJSON() request_data = self.get_request() auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) name_id = 'name_id_example' session_index = 'session_index_example' target_url = auth.logout(name_id=name_id, session_index=session_index) parsed_query = parse_qs(urlparse(target_url)[4]) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertIn(slo_url, target_url) self.assertIn('SAMLRequest', parsed_query) logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0]) name_id_from_request = OneLogin_Saml2_Logout_Request.get_nameid(logout_request) sessions_index_in_request = OneLogin_Saml2_Logout_Request.get_session_indexes(logout_request) self.assertIn(session_index, sessions_index_in_request) self.assertEqual(name_id, name_id_from_request) def testLogoutNameID(self): """ Tests the logout method of the OneLogin_Saml2_Auth class Case nameID loaded after process SAML Response """ request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() name_id_from_response = auth.get_nameid() name_id_format_from_response = auth.get_nameid_format() target_url = auth.logout() parsed_query = parse_qs(urlparse(target_url)[4]) self.assertIn('SAMLRequest', parsed_query) logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0]) name_id_from_request = OneLogin_Saml2_Logout_Request.get_nameid(logout_request) name_id_format_from_request = OneLogin_Saml2_Logout_Request.get_nameid_format(logout_request) self.assertEqual(name_id_from_response, name_id_from_request) self.assertEqual(name_id_format_from_response, name_id_format_from_request) new_name_id = "new_name_id" new_name_id_format = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" target_url_2 = auth.logout(name_id=new_name_id, name_id_format=new_name_id_format) parsed_query = parse_qs(urlparse(target_url_2)[4]) self.assertIn('SAMLRequest', parsed_query) logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(parsed_query['SAMLRequest'][0]) name_id_from_request = OneLogin_Saml2_Logout_Request.get_nameid(logout_request) name_id_format_from_request = OneLogin_Saml2_Logout_Request.get_nameid_format(logout_request) self.assertEqual(new_name_id, name_id_from_request) self.assertEqual(new_name_id_format, name_id_format_from_request) def testSetStrict(self): """ Tests the set_strict method of the OneLogin_Saml2_Auth """ settings_info = self.loadSettingsJSON() settings_info['strict'] = False auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings_info) settings = auth.get_settings() self.assertFalse(settings.is_strict()) auth.set_strict(True) settings = auth.get_settings() self.assertTrue(settings.is_strict()) auth.set_strict(False) settings = auth.get_settings() self.assertFalse(settings.is_strict()) self.assertRaises(AssertionError, auth.set_strict, '42') def testIsAuthenticated(self): """ Tests the is_authenticated method of the OneLogin_Saml2_Auth """ request_data = self.get_request() del request_data['get_data'] message = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() self.assertFalse(auth.is_authenticated()) message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=self.loadSettingsJSON()) auth.process_response() self.assertTrue(auth.is_authenticated()) def testGetNameId(self): """ Tests the get_nameid method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() request_data = self.get_request() del request_data['get_data'] message = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertFalse(auth.is_authenticated()) self.assertEqual(auth.get_nameid(), None) message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("492882615acf31c8096b627245d76ae53036c090", auth.get_nameid()) settings_2 = self.loadSettingsJSON('settings2.json') message = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion2.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_2) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("25ddd7d34a7d79db69167625cda56a320adf2876", auth.get_nameid()) def testGetNameIdFormat(self): """ Tests the get_nameid_format method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() request_data = self.get_request() del request_data['get_data'] message = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertFalse(auth.is_authenticated()) self.assertEqual(auth.get_nameid_format(), None) message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", auth.get_nameid_format()) settings_2 = self.loadSettingsJSON('settings2.json') message = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion2.xml.base64')) request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_2) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified", auth.get_nameid_format()) def testGetNameIdNameQualifier(self): """ Tests the get_nameid_nq method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'responses', 'valid_response_with_namequalifier.xml.base64')) request_data = self.get_request() request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) self.assertIsNone(auth.get_nameid_nq()) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("https://test.example.com/saml/metadata", auth.get_nameid_nq()) def testGetNameIdNameQualifier2(self): """ Tests the get_nameid_nq method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) request_data = self.get_request() request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) self.assertIsNone(auth.get_nameid_nq()) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertIsNone(auth.get_nameid_nq()) def testGetNameIdSPNameQualifier(self): """ Tests the get_nameid_spnq method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'responses', 'valid_response_with_namequalifier.xml.base64')) request_data = self.get_request() request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) self.assertIsNone(auth.get_nameid_spnq()) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertIsNone(auth.get_nameid_spnq()) def testGetNameIdSPNameQualifier2(self): """ Tests the get_nameid_spnq method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) request_data = self.get_request() request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) self.assertIsNone(auth.get_nameid_spnq()) auth.process_response() self.assertTrue(auth.is_authenticated()) self.assertEqual("http://stuff.com/endpoints/metadata.php", auth.get_nameid_spnq()) def testBuildRequestSignature(self): """ Tests the build_request_signature method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) relay_state = 'http://relaystate.com' parameters = {"SAMLRequest": message, "RelayState": relay_state} auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings) auth.add_request_signature(parameters) valid_signature = 'CqdIlbO6GieeJFV+PYqyqz1QVJunQXdZZl+ZyIby9O3/eMJM0XHi+TWReRrpgNxKkbmmvx5fp/t7mphbLiVYNMgGINEaaa/OfoaGwU9GM5YCVULA2t7qZBel1yrIXGMxijJizB7UPR2ZMo4G+Wdhx1zbmbB0GYM0A27w6YCe/+k=' self.assertEqual(valid_signature, parameters["Signature"]) settings['sp']['privateKey'] = '' settings['custom_base_path'] = u'invalid/path/' auth2 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings) with self.assertRaisesRegex(OneLogin_Saml2_Error, "Trying to sign the SAMLRequest but can't load the SP private key"): auth2.add_request_signature(parameters) def testBuildResponseSignature(self): """ Tests the build_response_signature method of the OneLogin_Saml2_Auth """ settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) relay_state = 'http://relaystate.com' auth = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings) parameters = {"SAMLResponse": message, 'RelayState': relay_state} auth.add_response_signature(parameters) valid_signature = 'fFGaOuO/2+ch/xlwU5o7iS6R+v2quWchLAtiDyQTxStFQZKY1NsBs/eYIin2Meq7oTl1Ks6tpT6JshH5OwhPh/08K7M2oa6FIKb99cjg+jIJ/WwpuJ5h9SH0XXP8y3RLhCxLIomHDsBOGQK8WvOlXFUg+9nvOaEMNi6raUWrGhA=' self.assertEqual(valid_signature, parameters['Signature']) settings['sp']['privateKey'] = '' settings['custom_base_path'] = u'invalid/path/' auth2 = OneLogin_Saml2_Auth(self.get_request(), old_settings=settings) with self.assertRaisesRegex(OneLogin_Saml2_Error, "Trying to sign the SAMLResponse but can't load the SP private key"): auth2.add_response_signature(parameters) def testIsInValidLogoutResponseSign(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) settings.set_strict(False) request_data['get_data'] = { 'SAMLResponse': 'fZJva8IwEMa/Ssl7TZrW/gnqGHMMwSlM8cXeyLU9NaxNQi9lfvxVZczB5ptwSe733MPdjQma2qmFPdjOvyE5awiDU1MbUpevCetaoyyQJmWgQVK+VOvH14WSQ6Fca70tbc1ukPsEEGHrtTUsmM8mbDfKUhnFci8gliGINI/yXIAAiYnsw6JIRgWWAKlkwRZb6skJ64V6nKjDuSEPxvdPIowHIhpIsQkTFaYqSt9ZMEPy2oC/UEfvHSnOnfZFV38MjR1oN7TtgRv8tAZre9CGV9jYkGtT4Wnoju6Bauprme/ebOyErZbPi9XLfLnDoohwhHGc5WVSVhjCKM6rBMpYQpWJrIizfZ4IZNPxuTPqYrmd/m+EdONqPOfy8yG5rhxv0EMFHs52xvxWaHyd3tqD7+j37clWGGyh7vD+POiSrdZdWSIR49NrhR9R/teGTL8A', 'RelayState': 'https://pitbulk.no-ip.org/newonelogin/demo1/index.php', 'SigAlg': 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'Signature': 'vfWbbc47PkP3ejx4bjKsRX7lo9Ml1WRoE5J5owF/0mnyKHfSY6XbhO1wwjBV5vWdrUVX+xp6slHyAf4YoAsXFS0qhan6txDiZY4Oec6yE+l10iZbzvie06I4GPak4QrQ4gAyXOSzwCrRmJu4gnpeUxZ6IqKtdrKfAYRAcVfNKGA=' } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertEqual([], auth.get_errors()) relay_state = request_data['get_data']['RelayState'] del request_data['get_data']['RelayState'] auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn("invalid_logout_response_signature", auth.get_errors()) request_data['get_data']['RelayState'] = relay_state settings.set_strict(True) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response', auth.get_errors()) settings.set_strict(False) old_signature = request_data['get_data']['Signature'] request_data['get_data']['Signature'] = 'vfWbbc47PkP3ejx4bjKsRX7lo9Ml1WRoE5J5owF/0mnyKHfSY6XbhO1wwjBV5vWdrUVX+xp6slHyAf4YoAsXFS0qhan6txDiZY4Oec6yE+l10iZbzvie06I4GPak4QrQ4gAyXOSzwCrRmJu4gnpeUxZ6IqKtdrKfAYRAcVf3333=' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response_signature', auth.get_errors()) request_data['get_data']['Signature'] = old_signature old_signature_algorithm = request_data['get_data']['SigAlg'] del request_data['get_data']['SigAlg'] auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertEqual([], auth.get_errors()) request_data['get_data']['RelayState'] = 'http://example.com/relaystate' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response_signature', auth.get_errors()) settings.set_strict(True) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message_6 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(request_data['get_data']['SAMLResponse'])) plain_message_6 = plain_message_6.replace('https://pitbulk.no-ip.org/newonelogin/demo1/index.php?sls', current_url) plain_message_6 = plain_message_6.replace('https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php', 'http://idp.example.com/') request_data['get_data']['SAMLResponse'] = compat.to_string(OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message_6)) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response_signature', auth.get_errors()) settings.set_strict(False) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response_signature', auth.get_errors()) request_data['get_data']['SigAlg'] = 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_response_signature', auth.get_errors()) settings_info = self.loadSettingsJSON() settings_info['strict'] = True settings_info['security']['wantMessagesSigned'] = True settings = OneLogin_Saml2_Settings(settings_info) request_data['get_data']['SigAlg'] = old_signature_algorithm old_signature = request_data['get_data']['Signature'] del request_data['get_data']['Signature'] request_data['get_data']['SAMLResponse'] = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message_6) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('Signature validation failed. Logout Response rejected', auth.get_errors()) request_data['get_data']['Signature'] = old_signature settings_info['idp']['certFingerprint'] = 'afe71c28ef740bc87425be13a2263d37971da1f9' del settings_info['idp']['x509cert'] settings_2 = OneLogin_Saml2_Settings(settings_info) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_2) auth.process_slo() self.assertIn('Signature validation failed. Logout Response rejected', auth.get_errors()) def testIsInValidLogoutResponseSignatureRejectingDeprecatedAlgorithm(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': { 'SAMLResponse': 'fZHbasJAEIZfJey9ZrNZc1gSodRSBKtQxYveyGQz1kCyu2Q24OM3jS21UHo3p++f4Z+CoGud2th3O/hXJGcNYXDtWkNqapVs6I2yQA0pAx2S8lrtH142Ssy5cr31VtuW3SH/E0CEvW+sYcF6VbLTIktFLMWZgxQR8DSP85wDB4GJGMOqShYVaoBUsOCIPY1kyUahEScacG3Ig/FjiUdyxuOZ4IcoUVGq4vSNBSsk3xjwE3Xx3qkwJD+cz3NtuxBN7WxjPN1F1NLcXdwob77tONiS7bZPm93zenvCqopxgVJmuU50jREsZF4noKWAOuNZJbNznnBky+LTDDVd2S+/dje1m+MVOtfidEER3g8Vt2fsPfiBfmePtsbgCO2A/9tL07TaD1ojEQuXtw0/ouFfD19+AA==', 'RelayState': 'http://stuff.com/endpoints/endpoints/index.php', 'SigAlg': 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'Signature': 'OV9c4R0COSjN69fAKCpV7Uj/yx6/KFxvbluVCzdK3UuortpNMpgHFF2wYNlMSG9GcYGk6p3I8nB7Z+1TQchMWZOlO/StjAqgtZhtpiwPcWryNuq8vm/6hnJ3zMDhHTS7F8KG4qkCXmJ9sQD3Y31UNcuygBwIbNakvhDT5Qo9Nsw=' } } settings_info = self.loadSettingsJSON('settings8.json') settings_info['security']['rejectDeprecatedAlgorithm'] = True settings = OneLogin_Saml2_Settings(settings_info) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('Signature validation failed. Logout Response rejected', auth.get_errors()) self.assertEqual('Deprecated signature algorithm found: http://www.w3.org/2000/09/xmldsig#rsa-sha1', auth.get_last_error_reason()) def testIsValidLogoutRequestSign(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': { 'SAMLRequest': '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', 'RelayState': '_1037fbc88ec82ce8e770b2bed1119747bb812a07e6', 'SigAlg': 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'Signature': 'XCwCyI5cs7WhiJlB5ktSlWxSBxv+6q2xT3c8L7dLV6NQG9LHWhN7gf8qNsahSXfCzA0Ey9dp5BQ0EdRvAk2DIzKmJY6e3hvAIEp1zglHNjzkgcQmZCcrkK9Czi2Y1WkjOwR/WgUTUWsGJAVqVvlRZuS3zk3nxMrLH6f7toyvuJc=' } } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(request_data['get_data']['SAMLRequest'])) settings.set_strict(False) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertEqual([], auth.get_errors()) relay_state = request_data['get_data']['RelayState'] del request_data['get_data']['RelayState'] auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request_signature', auth.get_errors()) request_data['get_data']['RelayState'] = relay_state settings.set_strict(True) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request', auth.get_errors()) settings.set_strict(False) old_signature = request_data['get_data']['Signature'] request_data['get_data']['Signature'] = 'vfWbbc47PkP3ejx4bjKsRX7lo9Ml1WRoE5J5owF/0mnyKHfSY6XbhO1wwjBV5vWdrUVX+xp6slHyAf4YoAsXFS0qhan6txDiZY4Oec6yE+l10iZbzvie06I4GPak4QrQ4gAyXOSzwCrRmJu4gnpeUxZ6IqKtdrKfAYRAcVf3333=' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request_signature', auth.get_errors()) request_data['get_data']['Signature'] = old_signature old_signature_algorithm = request_data['get_data']['SigAlg'] del request_data['get_data']['SigAlg'] auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertEqual([], auth.get_errors()) settings.set_strict(True) request_2 = request.replace('https://pitbulk.no-ip.org/newonelogin/demo1/index.php?sls', current_url) request_2 = request_2.replace('https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php', 'http://idp.example.com/') request_data['get_data']['SAMLRequest'] = OneLogin_Saml2_Utils.deflate_and_base64_encode(request_2) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request_signature', auth.get_errors()) settings.set_strict(False) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request_signature', auth.get_errors()) request_data['get_data']['SigAlg'] = 'http://www.w3.org/2000/09/xmldsig#dsa-sha1' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('invalid_logout_request_signature', auth.get_errors()) settings_info = self.loadSettingsJSON() settings_info['strict'] = True settings_info['security']['wantMessagesSigned'] = True settings = OneLogin_Saml2_Settings(settings_info) request_data['get_data']['SigAlg'] = old_signature_algorithm old_signature = request_data['get_data']['Signature'] del request_data['get_data']['Signature'] auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('Signature validation failed. Logout Request rejected', auth.get_errors()) request_data['get_data']['Signature'] = old_signature settings_info['idp']['certFingerprint'] = 'afe71c28ef740bc87425be13a2263d37971da1f9' del settings_info['idp']['x509cert'] settings_2 = OneLogin_Saml2_Settings(settings_info) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_2) auth.process_slo() self.assertIn('Signature validation failed. Logout Request rejected', auth.get_errors()) def testIsInValidLogoutRequestSignatureRejectingDeprecatedAlgorithm(self): """ Tests the process_slo method of the OneLogin_Saml2_Auth """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': { 'SAMLRequest': 'fZJNa+MwEIb/itHdiTz6sC0SQyEsBPoB27KHXoIsj7cGW3IlGfLzV7G7kN1DL2KYmeedmRcdgp7GWT26326JP/FzwRCz6zTaoNbKkSzeKqfDEJTVEwYVjXp9eHpUsKNq9i4640Zyh3xP6BDQx8FZkp1PR3KpqexAl72QmpUCS8SW01IiZz2TVVGD4X1VQYlAsl/oQyKPJAklPIQFzzZEbWNK0YLnlOVA3wqpQCoB7yQ7pWsGq+NKfcQ4q/0+xKXvd8ZNe7Td7AYbw10UxrCbP2aSPbv4Yl/8Qx/R3+SB5bTOoXiDQvFNvjnc7lXrIr75kh+6eYdXPc0jrkMO+/umjXhOtpxP2Q/nJx2/9+uWGbq8X1tV9NqGAW0kzaVvoe1AAJeCSWqYaUVRM2SilKKuqDTpFSlszdcK29RthVm9YriZebYdXpsLdhVAB7VJzif3haYMqqTVcl0JMBR4y+s2zak3sf/4v8l/vlHzBw==', 'RelayState': '_1037fbc88ec82ce8e770b2bed1119747bb812a07e6', 'SigAlg': 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'Signature': 'Ouxo9BV6zmq4yrgamT9EbSKy/UmvSxGS8z26lIMgKOEP4LFR/N23RftdANmo4HafrzSfA0YTXwhKDqbOByS0j+Ql8OdQOes7vGioSjo5qq/Bi+5i6jXwQfphnfcHAQiJL4gYVIifkhhHRWpvYeiysF1Y9J02me0izwazFmoRXr4=' } } settings_info = self.loadSettingsJSON('settings8.json') settings_info = self.loadSettingsJSON('settings8.json') settings_info['security']['rejectDeprecatedAlgorithm'] = True settings = OneLogin_Saml2_Settings(settings_info) auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_slo() self.assertIn('Signature validation failed. Logout Request rejected', auth.get_errors()) self.assertEqual('Deprecated signature algorithm found: http://www.w3.org/2000/09/xmldsig#rsa-sha1', auth.get_last_error_reason()) def testGetLastRequestID(self): settings_info = self.loadSettingsJSON() request_data = self.get_request() auth = OneLogin_Saml2_Auth(request_data, old_settings=settings_info) auth.login() id1 = auth.get_last_request_id() self.assertNotEqual(id1, None) auth.logout() id2 = auth.get_last_request_id() self.assertNotEqual(id2, None) self.assertNotEqual(id1, id2) def testGetLastSAMLResponse(self): settings = self.loadSettingsJSON() message = self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64')) message_wrapper = {'post_data': {'SAMLResponse': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_response() expected_message = self.file_contents(join(self.data_path, 'responses', 'pretty_signed_message_response.xml')) self.assertEqual(auth.get_last_response_xml(True), expected_message) # with encrypted assertion message = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) message_wrapper = {'post_data': {'SAMLResponse': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_response() decrypted_response = self.file_contents(join(self.data_path, 'responses', 'decrypted_valid_encrypted_assertion.xml')) self.assertEqual(auth.get_last_response_xml(False), decrypted_response) pretty_decrypted_response = self.file_contents(join(self.data_path, 'responses', 'pretty_decrypted_valid_encrypted_assertion.xml')) self.assertEqual(auth.get_last_response_xml(True), pretty_decrypted_response) def testGetLastAuthnRequest(self): settings = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth({'http_host': 'localhost', 'script_name': 'thing'}, old_settings=settings) auth.login() expectedFragment = ( ' Destination="http://idp.example.com/SSOService.php"\n' ' ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"\n' ' AssertionConsumerServiceURL="http://stuff.com/endpoints/endpoints/acs.php">\n' ' http://stuff.com/endpoints/metadata.php\n' ' \n' ' \n' ' urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport\n' ' \n' ) self.assertIn(expectedFragment, auth.get_last_request_xml()) def testGetLastAuthnContexts(self): settings = self.loadSettingsJSON() request_data = self.get_request() message = self.file_contents( join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertEqual(auth.get_last_authn_contexts(), ['urn:oasis:names:tc:SAML:2.0:ac:classes:Password']) def testGetLastLogoutRequest(self): settings = self.loadSettingsJSON() auth = OneLogin_Saml2_Auth({'http_host': 'localhost', 'script_name': 'thing'}, old_settings=settings) auth.logout() expectedFragment = ( ' Destination="http://idp.example.com/SingleLogoutService.php">\n' ' http://stuff.com/endpoints/metadata.php\n' ' http://idp.example.com/\n' ' \n' ) self.assertIn(expectedFragment, auth.get_last_request_xml()) request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(request) message_wrapper = {'get_data': {'SAMLRequest': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_slo() self.assertEqual(request, auth.get_last_request_xml()) def testGetLastLogoutResponse(self): settings = self.loadSettingsJSON() request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(request) message_wrapper = {'get_data': {'SAMLRequest': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_slo() expectedFragment = ( ' Destination="http://idp.example.com/SingleLogoutService.php"\n' ' InResponseTo="ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e">\n' ' http://stuff.com/endpoints/metadata.php\n' ' \n' ' \n' ' \n' '' ) self.assertIn(expectedFragment, auth.get_last_response_xml()) response = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response.xml')) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(response) message_wrapper = {'get_data': {'SAMLResponse': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_slo() self.assertEqual(response, auth.get_last_response_xml()) def testGetInfoFromLastResponseReceived(self): """ Tests the get_last_response_in_response_to, get_last_message_id, get_last_assertion_id, get_last_assertion_not_on_or_after and get_last_assertion_issue_instant of the OneLogin_Saml2_Auth class """ settings = self.loadSettingsJSON() request_data = self.get_request() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) del request_data['get_data'] request_data['post_data'] = { 'SAMLResponse': message } auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertEqual(auth.get_last_response_in_response_to(), 'ONELOGIN_5fe9d6e499b2f0913206aab3f7191729049bb807') self.assertEqual(auth.get_last_message_id(), 'pfx42be40bf-39c3-77f0-c6ae-8bf2e23a1a2e') self.assertEqual(auth.get_last_assertion_id(), 'pfx57dfda60-b211-4cda-0f63-6d5deb69e5bb') self.assertIsNone(auth.get_last_assertion_not_on_or_after()) self.assertEqual(auth.get_last_assertion_issue_instant(), 1392773821) # NotOnOrAfter is only calculated with strict = true # If invalid, response id and assertion id are not obtained settings['strict'] = True auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertNotEqual(len(auth.get_errors()), 0) self.assertIsNone(auth.get_last_response_in_response_to()) self.assertIsNone(auth.get_last_message_id()) self.assertIsNone(auth.get_last_assertion_id()) self.assertIsNone(auth.get_last_assertion_not_on_or_after()) self.assertIsNone(auth.get_last_assertion_issue_instant()) request_data['https'] = 'on' request_data['http_host'] = 'pitbulk.no-ip.org' request_data['script_name'] = '/newonelogin/demo1/index.php?acs' auth = OneLogin_Saml2_Auth(request_data, old_settings=settings) auth.process_response() self.assertEqual(len(auth.get_errors()), 0) self.assertEqual(auth.get_last_response_in_response_to(), 'ONELOGIN_5fe9d6e499b2f0913206aab3f7191729049bb807') self.assertEqual(auth.get_last_message_id(), 'pfx42be40bf-39c3-77f0-c6ae-8bf2e23a1a2e') self.assertEqual(auth.get_last_assertion_id(), 'pfx57dfda60-b211-4cda-0f63-6d5deb69e5bb') self.assertEqual(auth.get_last_assertion_not_on_or_after(), 2671081021) self.assertEqual(auth.get_last_assertion_issue_instant(), 1392773821) def testGetIdFromLogoutRequest(self): """ Tests the get_last_message_id of the OneLogin_Saml2_Auth class Case Valid Logout request """ settings = self.loadSettingsJSON() request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(request) message_wrapper = {'get_data': {'SAMLRequest': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_slo() self.assertIn(auth.get_last_message_id(), 'ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e') def testGetIdFromLogoutResponse(self): """ Tests the get_last_message_id of the OneLogin_Saml2_Auth class Case Valid Logout response """ settings = self.loadSettingsJSON() response = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response.xml')) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(response) message_wrapper = {'get_data': {'SAMLResponse': message}} auth = OneLogin_Saml2_Auth(message_wrapper, old_settings=settings) auth.process_slo() self.assertIn(auth.get_last_message_id(), '_f9ee61bd9dbf63606faa9ae3b10548d5b3656fb859') python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/authn_request_test.py000066400000000000000000000446121451074743100263550ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists import unittest from onelogin.saml2 import compat from onelogin.saml2.authn_request import OneLogin_Saml2_Authn_Request from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xml_utils import OneLogin_Saml2_XML try: from urllib.parse import urlparse, parse_qs except ImportError: from urlparse import urlparse, parse_qs class OneLogin_Saml2_Authn_Request_Test(unittest.TestCase): settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') # assertRegexpMatches deprecated on python3 def assertRegex(self, text, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRegex'): return super(OneLogin_Saml2_Authn_Request_Test, self).assertRegex(text, regexp, msg) else: return self.assertRegexpMatches(text, regexp, msg) def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def setUp(self): self.__settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) def testCreateRequest(self): """ Tests the OneLogin_Saml2_Authn_Request Constructor. The creation of a deflated SAML Request """ saml_settings = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(saml_settings) settings._organization = { u'en-US': { u'url': u'http://sp.example.com', u'name': u'sp_test' } } authn_request = OneLogin_Saml2_Authn_Request(settings) authn_request_encoded = authn_request.get_request() inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded)) self.assertRegex(inflated, '^', inflated) authn_request_2 = OneLogin_Saml2_Authn_Request(settings, name_id_value_req='testuser@example.com') authn_request_encoded_2 = authn_request_2.get_request() inflated_2 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded_2)) self.assertRegex(inflated_2, '^', inflated_2) self.assertIn('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testuser@example.com', inflated_2) self.assertIn('', inflated_2) saml_settings['sp']['NameIDFormat'] = 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress' settings = OneLogin_Saml2_Settings(saml_settings) authn_request_3 = OneLogin_Saml2_Authn_Request(settings, name_id_value_req='testuser@example.com') authn_request_encoded_3 = authn_request_3.get_request() inflated_3 = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded_3)) self.assertRegex(inflated_3, '^', inflated_3) self.assertIn('Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">testuser@example.com', inflated_3) self.assertIn('', inflated_3) def testCreateDeflatedSAMLRequestURLParameter(self): """ Tests the OneLogin_Saml2_Authn_Request Constructor. The creation of a deflated SAML Request """ authn_request = OneLogin_Saml2_Authn_Request(self.__settings) parameters = { 'SAMLRequest': authn_request.get_request() } auth_url = OneLogin_Saml2_Utils.redirect('http://idp.example.com/SSOService.php', parameters, True) self.assertRegex(auth_url, r'^http://idp\.example\.com\/SSOService\.php\?SAMLRequest=') exploded = urlparse(auth_url) exploded = parse_qs(exploded[4]) payload = exploded['SAMLRequest'][0] inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(payload)) self.assertRegex(inflated, '^') self.assertRegex(inflated, 'http://stuff.com/endpoints/metadata.php') self.assertRegex(inflated, 'Format="urn:oasis:names:tc:SAML:2.0:nameid-format:encrypted"') self.assertRegex(inflated, 'ProviderName="SP prueba"') def testGetID(self): """ Tests the get_id method of the OneLogin_Saml2_Authn_Request. """ saml_settings = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(saml_settings) authn_request = OneLogin_Saml2_Authn_Request(settings) authn_request_encoded = authn_request.get_request() inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded)) document = OneLogin_Saml2_XML.to_etree(inflated) self.assertEqual(authn_request.get_id(), document.get('ID', None)) def testAttributeConsumingService(self): """ Tests that the attributeConsumingServiceIndex is present as an attribute """ saml_settings = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(saml_settings) authn_request = OneLogin_Saml2_Authn_Request(settings) authn_request_encoded = authn_request.get_request() inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded)) self.assertNotIn('AttributeConsumingServiceIndex="1"', inflated) saml_settings = self.loadSettingsJSON('settings4.json') settings = OneLogin_Saml2_Settings(saml_settings) authn_request = OneLogin_Saml2_Authn_Request(settings) authn_request_encoded = authn_request.get_request() inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(authn_request_encoded)) self.assertRegex(inflated, 'AttributeConsumingServiceIndex="1"') python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/error_test.py000066400000000000000000000005211451074743100246060ustar00rootroot00000000000000# -*- coding: utf-8 -*- import unittest from onelogin.saml2.errors import OneLogin_Saml2_Error class OneLogin_Saml2_Error_Test(unittest.TestCase): """ Tests the OneLogin_Saml2_Error Constructor. """ def runTest(self): exception = OneLogin_Saml2_Error('test') self.assertEqual(str(exception), 'test') python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/idp_metadata_parser_test.py000066400000000000000000001516071451074743100274610ustar00rootroot00000000000000# -*- coding: utf-8 -*- try: from urllib.error import URLError except ImportError: from urllib2 import URLError from copy import deepcopy import json from os.path import dirname, join, exists from lxml.etree import XMLSyntaxError import unittest from onelogin.saml2.idp_metadata_parser import OneLogin_Saml2_IdPMetadataParser from onelogin.saml2.constants import OneLogin_Saml2_Constants class OneLogin_Saml2_IdPMetadataParser_Test(unittest.TestCase): # Instruct unittest to not hide diffs upon test failure, even for complex # dictionaries. This prevents the message "Diff is 907 characters long. # Set self.maxDiff to None to see it." from showing up. maxDiff = None data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') def loadSettingsJSON(self, filename='settings1.json'): filename = join(self.settings_path, filename) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testGetMetadata(self): """ Tests the get_metadata method of the OneLogin_Saml2_IdPMetadataParser """ with self.assertRaises(Exception): data = OneLogin_Saml2_IdPMetadataParser.get_metadata('http://google.es') try: data = OneLogin_Saml2_IdPMetadataParser.get_metadata('https://idp.testshib.org/idp/shibboleth') self.assertTrue(data is not None and data is not {}) except URLError: pass def testGetMetadataWithHeaders(self): data = OneLogin_Saml2_IdPMetadataParser.get_metadata('https://samltest.id/saml/providers', headers={'User-Agent': 'Mozilla/5.0'}) self.assertIsNotNone(data) self.assertIn(b'entityID=', data) def testParseRemote(self): """ Tests the parse_remote method of the OneLogin_Saml2_IdPMetadataParser """ with self.assertRaises(Exception): data = OneLogin_Saml2_IdPMetadataParser.parse_remote('http://google.es') try: data = OneLogin_Saml2_IdPMetadataParser.parse_remote('https://idp.testshib.org/idp/shibboleth') except URLError: xml = self.file_contents(join(self.data_path, 'metadata', 'testshib-providers.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml) self.assertTrue(data is not None and data is not {}) expected_settings_json = """ { "sp": { "NameIDFormat": "urn:mace:shibboleth:1.0:nameIdentifier" }, "idp": { "entityId": "https://idp.testshib.org/idp/shibboleth", "x509cert": "MIIDAzCCAeugAwIBAgIVAPX0G6LuoXnKS0Muei006mVSBXbvMA0GCSqGSIb3DQEBCwUAMBsxGTAXBgNVBAMMEGlkcC50ZXN0c2hpYi5vcmcwHhcNMTYwODIzMjEyMDU0WhcNMzYwODIzMjEyMDU0WjAbMRkwFwYDVQQDDBBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9C4J2DiRTEhJAWzPt1S3ryhm3M2P3hPpwJwvt2q948vdTUxhhvNMuc3M3S4WNh6JYBs53R+YmjqJAII4ShMGNEmlGnSVfHorex7IxikpuDPKV3SNf28mCAZbQrX+hWA+ann/uifVzqXktOjs6DdzdBnxoVhniXgC8WCJwKcx6JO/hHsH1rG/0DSDeZFpTTcZHj4S9MlLNUtt5JxRzV/MmmB3ObaX0CMqsSWUOQeE4nylSlp5RWHCnx70cs9kwz5WrflnbnzCeHU2sdbNotBEeTHot6a2cj/pXlRJIgPsrL/4VSicPZcGYMJMPoLTJ8mdy6mpR6nbCmP7dVbCIm/DQIDAQABoz4wPDAdBgNVHQ4EFgQUUfaDa2mPi24x09yWp1OFXmZ2GPswGwYDVR0RBBQwEoIQaWRwLnRlc3RzaGliLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEASKKgqTxhqBzROZ1eVy++si+eTTUQZU4+8UywSKLia2RattaAPMAcXUjO+3cYOQXLVASdlJtt+8QPdRkfp8SiJemHPXC8BES83pogJPYEGJsKo19l4XFJHPnPy+Dsn3mlJyOfAa8RyWBS80u5lrvAcr2TJXt9fXgkYs7BOCigxtZoR8flceGRlAZ4p5FPPxQR6NDYb645jtOTMVr3zgfjP6Wh2dt+2p04LG7ENJn8/gEwtXVuXCsPoSCDx9Y0QmyXTJNdV1aB0AhORkWPlFYwp+zOyOIR+3m1+pqWFpn0eT/HrxpdKa74FA3R2kq4R7dXe4G0kUgXTdqXMLRKhDgdmA==", "singleSignOnService": { "url": "https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) def testParseRemoteWithHeaders(self): """ Tests the parse_remote method passing headers of the OneLogin_Saml2_IdPMetadataParser """ data = OneLogin_Saml2_IdPMetadataParser.parse_remote('https://samltest.id/saml/providers') self.assertEqual(data['idp']['entityId'], 'https://samltest.id/saml/idp') self.assertIsNotNone(data['idp']['singleSignOnService']['url']) self.assertIsNotNone(data['idp']['x509certMulti']) def testParse(self): """ Tests the parse method of the OneLogin_Saml2_IdPMetadataParser """ with self.assertRaises(XMLSyntaxError): data = OneLogin_Saml2_IdPMetadataParser.parse('') xml_sp_metadata = self.file_contents(join(self.data_path, 'metadata', 'metadata_settings1.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml_sp_metadata) self.assertEqual({}, data) xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) # W/o further specification, expect to get the redirect binding SSO # URL extracted. expected_settings_json = """ { "idp": { "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/383123", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509cert": "MIIEHjCCAwagAwIBAgIBATANBgkqhkiG9w0BAQUFADBnMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbTAeFw0xMzA2MDUxNzE2MjBaFw0xODA2MDUxNzE2MjBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRUwEwYDVQQHDAxTYW50YSBNb25pY2ExETAPBgNVBAoMCE9uZUxvZ2luMRkwFwYDVQQDDBBhcHAub25lbG9naW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8rnep4qL2GmhH10pMQyJ2Jae+AQHyfgVjaQZ7Z0QQog5jX91vcJRSMi0XWJnUtOr6lF0dq1+yckjZ92wyLrH+7fvngNO1aV4Mjk9sTgf+iqMrae6y6fRxDt9PXrEFVjvd3vv7QTJf2FuIPy4vVP06Dt8EMkQIr8rmLmU0mTr1k2DkrdtdlCuNFTXuAu3QqfvNCRrRwfNObn9MP6JeOUdcGLJsBjGF8exfcN1SFzRF0JFr3dmOlx761zK5liD0T1sYWnDquatj/JD9fZMbKecBKni1NglH/LVd+b6aJUAr5LulERULUjLqYJRKW31u91/4Qazdo9tbvwqyFxaoUrwIDAQABo4HUMIHRMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPWcXvQSlTXnzZD2xziuoUvrrDedMIGRBgNVHSMEgYkwgYaAFPWcXvQSlTXnzZD2xziuoUvrrDedoWukaTBnMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEVMBMGA1UEBwwMU2FudGEgTW9uaWNhMREwDwYDVQQKDAhPbmVMb2dpbjEZMBcGA1UEAwwQYXBwLm9uZWxvZ2luLmNvbYIBATAOBgNVHQ8BAf8EBAMCBPAwDQYJKoZIhvcNAQEFBQADggEBAB/8xe3rzqXQVxzHyAHuAuPa73ClDoL1cko0Fp8CGcqEIyj6Te9gx5z6wyfv+Lo8RFvBLlnB1lXqbC+fTGcVgG/4oKLJ5UwRFxInqpZPnOAudVNnd0PYOODn9FWs6u+OTIQIaIcPUv3MhB9lwHIJsTk/bs9xcru5TPyLIxLLd6ib/pRceKH2mTkzUd0DYk9CQNXXeoGx/du5B9nh3ClPTbVakRzl3oswgI5MQIphYxkW70SopEh4kOFSRE1ND31NNIq1YrXlgtkguQBFsZWuQOPR6cEwFZzP0tHTYbI839WgxX6hfhIUTUz6mLqq4+3P4BG3+1OXeVDg63y8Uh781sE=", "entityId": "https://app.onelogin.com/saml/metadata/383123" }, "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) def test_parse_testshib_required_binding_sso_redirect(self): """ Test with testshib metadata. Especially test extracting SSO with REDIRECT binding. Note that the testshib metadata does not contain an SLO specification in the first tag. """ expected_settings_json = """ { "sp": { "NameIDFormat": "urn:mace:shibboleth:1.0:nameIdentifier" }, "idp": { "entityId": "https://idp.testshib.org/idp/shibboleth", "x509cert": "MIIDAzCCAeugAwIBAgIVAPX0G6LuoXnKS0Muei006mVSBXbvMA0GCSqGSIb3DQEBCwUAMBsxGTAXBgNVBAMMEGlkcC50ZXN0c2hpYi5vcmcwHhcNMTYwODIzMjEyMDU0WhcNMzYwODIzMjEyMDU0WjAbMRkwFwYDVQQDDBBpZHAudGVzdHNoaWIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9C4J2DiRTEhJAWzPt1S3ryhm3M2P3hPpwJwvt2q948vdTUxhhvNMuc3M3S4WNh6JYBs53R+YmjqJAII4ShMGNEmlGnSVfHorex7IxikpuDPKV3SNf28mCAZbQrX+hWA+ann/uifVzqXktOjs6DdzdBnxoVhniXgC8WCJwKcx6JO/hHsH1rG/0DSDeZFpTTcZHj4S9MlLNUtt5JxRzV/MmmB3ObaX0CMqsSWUOQeE4nylSlp5RWHCnx70cs9kwz5WrflnbnzCeHU2sdbNotBEeTHot6a2cj/pXlRJIgPsrL/4VSicPZcGYMJMPoLTJ8mdy6mpR6nbCmP7dVbCIm/DQIDAQABoz4wPDAdBgNVHQ4EFgQUUfaDa2mPi24x09yWp1OFXmZ2GPswGwYDVR0RBBQwEoIQaWRwLnRlc3RzaGliLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEASKKgqTxhqBzROZ1eVy++si+eTTUQZU4+8UywSKLia2RattaAPMAcXUjO+3cYOQXLVASdlJtt+8QPdRkfp8SiJemHPXC8BES83pogJPYEGJsKo19l4XFJHPnPy+Dsn3mlJyOfAa8RyWBS80u5lrvAcr2TJXt9fXgkYs7BOCigxtZoR8flceGRlAZ4p5FPPxQR6NDYb645jtOTMVr3zgfjP6Wh2dt+2p04LG7ENJn8/gEwtXVuXCsPoSCDx9Y0QmyXTJNdV1aB0AhORkWPlFYwp+zOyOIR+3m1+pqWFpn0eT/HrxpdKa74FA3R2kq4R7dXe4G0kUgXTdqXMLRKhDgdmA==", "singleSignOnService": { "url": "https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ try: xmldoc = OneLogin_Saml2_IdPMetadataParser.get_metadata( 'https://idp.testshib.org/idp/shibboleth') except URLError: xmldoc = self.file_contents(join(self.data_path, 'metadata', 'testshib-providers.xml')) # Parse, require SSO REDIRECT binding, implicitly. settings1 = OneLogin_Saml2_IdPMetadataParser.parse(xmldoc) # Parse, require SSO REDIRECT binding, explicitly. settings2 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT ) expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, settings1) self.assertEqual(expected_settings, settings2) def test_parse_testshib_required_binding_sso_post(self): """ Test with testshib metadata. Especially test extracting SSO with POST binding. """ expected_settings_json = """ { "sp": { "NameIDFormat": "urn:mace:shibboleth:1.0:nameIdentifier" }, "idp": { "entityId": "https://idp.testshib.org/idp/shibboleth", "x509cert": "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", "singleSignOnService": { "url": "https://idp.testshib.org/idp/profile/SAML2/POST/SSO", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" } } } """ try: xmldoc = OneLogin_Saml2_IdPMetadataParser.get_metadata( 'https://idp.testshib.org/idp/shibboleth') except URLError: xmldoc = self.file_contents(join(self.data_path, 'metadata', 'testshib-providers.xml')) # Parse, require POST binding. settings = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST ) expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, settings) def test_parse_required_binding_all(self): """ Test all combinations of the `require_slo_binding` and `require_sso_binding` parameters. Note: IdP metadata contains a single logout (SLO) service and does not specify any endpoint for the POST binding. """ expected_settings_json = """ { "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" }, "idp": { "entityId": "urn:example:idp", "x509cert": "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", "singleSignOnService": { "url": "http://idp.example.com", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "singleLogoutService": { "url": "http://idp.example.com/logout", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ xmldoc = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata2.xml')) expected_settings = json.loads(expected_settings_json) # Parse, require SLO and SSO REDIRECT binding, implicitly. settings1 = OneLogin_Saml2_IdPMetadataParser.parse(xmldoc) # Parse, require SLO and SSO REDIRECT binding, explicitly. settings2 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT ) expected_settings1_2 = deepcopy(expected_settings) self.assertEqual(expected_settings1_2, settings1) self.assertEqual(expected_settings1_2, settings2) settings3 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST ) expected_settings3 = deepcopy(expected_settings) del expected_settings3['idp']['singleLogoutService'] del expected_settings3['idp']['singleSignOnService'] self.assertEqual(expected_settings3, settings3) settings4 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT ) settings5 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST ) expected_settings4_5 = deepcopy(expected_settings) del expected_settings4_5['idp']['singleSignOnService'] self.assertEqual(expected_settings4_5, settings4) self.assertEqual(expected_settings4_5, settings5) settings6 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_sso_binding=OneLogin_Saml2_Constants.BINDING_HTTP_REDIRECT, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST ) settings7 = OneLogin_Saml2_IdPMetadataParser.parse( xmldoc, required_slo_binding=OneLogin_Saml2_Constants.BINDING_HTTP_POST ) expected_settings6_7 = deepcopy(expected_settings) del expected_settings6_7['idp']['singleLogoutService'] self.assertEqual(expected_settings6_7, settings6) self.assertEqual(expected_settings6_7, settings7) def test_parse_with_entity_id(self): """ Tests the parse method of the OneLogin_Saml2_IdPMetadataParser Case: Provide entity_id to identify the desired IdPDescriptor from EntitiesDescriptor """ xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_multiple_descriptors.xml')) # should find first descriptor data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) self.assertEqual("https://foo.example.com/access/saml/idp.xml", data["idp"]["entityId"]) expected_settings_json = """ { "security": {"authnRequestsSigned": true}, "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "singleLogoutService": { "url": "https://hello.example.com/access/saml/logout", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "entityId": "https://foo.example.com/access/saml/idp.xml", "x509cert": "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", "singleSignOnService": { "url": "https://hello.example.com/access/saml/login", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) # should find desired descriptor data2 = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata, entity_id="https://bar.example.com/access/saml/idp.xml") self.assertEqual("https://bar.example.com/access/saml/idp.xml", data2["idp"]["entityId"]) expected_settings_json2 = """ { "security": {"authnRequestsSigned": false}, "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "idp": { "singleLogoutService": { "url": "https://hello.example.com/access/saml/logout", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "entityId": "https://bar.example.com/access/saml/idp.xml", "x509cert": "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", "singleSignOnService": { "url": "https://hello.example.com/access/saml/login", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings2 = json.loads(expected_settings_json2) self.assertEqual(expected_settings2, data2) def test_parse_multi_certs(self): """ Tests the parse method of the OneLogin_Saml2_IdPMetadataParser Case: IdP metadata contains multiple certs """ xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata_multi_certs.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) expected_settings_json = """ { "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" }, "idp": { "singleLogoutService": { "url": "https://idp.examle.com/saml/slo", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509certMulti": { "encryption": [ "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" ], "signing": [ "MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEFBQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJjaWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwWT25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUyMjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRwtnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xxVRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCBpIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaCFD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXMGI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65chjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIBvlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZWQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw==", "MIICZDCCAc2gAwIBAgIBADANBgkqhkiG9w0BAQ0FADBPMQswCQYDVQQGEwJ1czEUMBIGA1UECAwLZXhhbXBsZS5jb20xFDASBgNVBAoMC2V4YW1wbGUuY29tMRQwEgYDVQQDDAtleGFtcGxlLmNvbTAeFw0xNzA0MTUxNjMzMThaFw0xODA0MTUxNjMzMThaME8xCzAJBgNVBAYTAnVzMRQwEgYDVQQIDAtleGFtcGxlLmNvbTEUMBIGA1UECgwLZXhhbXBsZS5jb20xFDASBgNVBAMMC2V4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6GLkl5lDUZdHNDAojp5i24OoPlqrt5TGXJIPqAZYT1hQvJW5nv17MFDHrjmtEnmW4ACKEy0fAX80QWIcHunZSkbEGHb+NG/6oTi5RipXMvmHnfFnPJJ0AdtiLiPE478CV856gXekV4Xx5u3KrylcOgkpYsp0GMIQBDzleMUXlYQIDAQABo1AwTjAdBgNVHQ4EFgQUnP8vlYPGPL2n6ZzDYij2kMDC8wMwHwYDVR0jBBgwFoAUnP8vlYPGPL2n6ZzDYij2kMDC8wMwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQAlQGAl+b8Cpot1g+65lLLjVoY7APJPWLW0klKQNlMU0s4MU+71Y3ExUEOXDAZgKcFoavb1fEOGMwEf38NaJAy1e/l6VNuixXShffq20ymqHQxOG0q8ujeNkgZF9k6XDfn/QZ3AD0o/IrCT7UMc/0QsfgIjWYxwCvp2syApc5CYfQ==" ] }, "entityId": "https://idp.examle.com/saml/metadata", "singleSignOnService": { "url": "https://idp.examle.com/saml/sso", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) def test_parse_multi_singing_certs(self): """ Tests the parse method of the OneLogin_Saml2_IdPMetadataParser Case: IdP metadata contains multiple signing certs and no encryption certs """ xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata_multi_signing_certs.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) expected_settings_json = """ { "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" }, "idp": { "singleLogoutService": { "url": "https://idp.examle.com/saml/slo", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509certMulti": { "signing": [ "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", "MIICZDCCAc2gAwIBAgIBADANBgkqhkiG9w0BAQ0FADBPMQswCQYDVQQGEwJ1czEUMBIGA1UECAwLZXhhbXBsZS5jb20xFDASBgNVBAoMC2V4YW1wbGUuY29tMRQwEgYDVQQDDAtleGFtcGxlLmNvbTAeFw0xNzA0MTUxNjMzMThaFw0xODA0MTUxNjMzMThaME8xCzAJBgNVBAYTAnVzMRQwEgYDVQQIDAtleGFtcGxlLmNvbTEUMBIGA1UECgwLZXhhbXBsZS5jb20xFDASBgNVBAMMC2V4YW1wbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6GLkl5lDUZdHNDAojp5i24OoPlqrt5TGXJIPqAZYT1hQvJW5nv17MFDHrjmtEnmW4ACKEy0fAX80QWIcHunZSkbEGHb+NG/6oTi5RipXMvmHnfFnPJJ0AdtiLiPE478CV856gXekV4Xx5u3KrylcOgkpYsp0GMIQBDzleMUXlYQIDAQABo1AwTjAdBgNVHQ4EFgQUnP8vlYPGPL2n6ZzDYij2kMDC8wMwHwYDVR0jBBgwFoAUnP8vlYPGPL2n6ZzDYij2kMDC8wMwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOBgQAlQGAl+b8Cpot1g+65lLLjVoY7APJPWLW0klKQNlMU0s4MU+71Y3ExUEOXDAZgKcFoavb1fEOGMwEf38NaJAy1e/l6VNuixXShffq20ymqHQxOG0q8ujeNkgZF9k6XDfn/QZ3AD0o/IrCT7UMc/0QsfgIjWYxwCvp2syApc5CYfQ==", "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" ] }, "entityId": "https://idp.examle.com/saml/metadata", "singleSignOnService": { "url": "https://idp.examle.com/saml/sso", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) def test_parse_multi_same_signing_and_encrypt_cert(self): """ Tests the parse method of the OneLogin_Saml2_IdPMetadataParser Case: IdP metadata contains multiple signature cert and encrypt cert that is the same """ xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata_same_sign_and_encrypt_cert.xml')) data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) expected_settings_json = """ { "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" }, "idp": { "x509cert": "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", "entityId": "https://app.onelogin.com/saml/metadata/383123", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/383123", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, data) xml_idp_metadata_2 = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata_different_sign_and_encrypt_cert.xml')) data_2 = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata_2) expected_settings_json_2 = """ { "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" }, "idp": { "x509certMulti": { "encryption": [ "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" ], "signing": [ "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" ] }, "entityId": "https://app.onelogin.com/saml/metadata/383123", "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/383123", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } } } """ expected_settings_2 = json.loads(expected_settings_json_2) self.assertEqual(expected_settings_2, data_2) def test_merge_settings(self): """ Tests the merge_settings method of the OneLogin_Saml2_IdPMetadataParser """ with self.assertRaises(TypeError): settings_result = OneLogin_Saml2_IdPMetadataParser.merge_settings(None, {}) with self.assertRaises(TypeError): settings_result = OneLogin_Saml2_IdPMetadataParser.merge_settings({}, None) xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata.xml')) # Parse XML metadata. data = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) # Read base settings. settings = self.loadSettingsJSON() # Merge settings from XML metadata into base settings, # let XML metadata have priority if there are conflicting # attributes. settings_result = OneLogin_Saml2_IdPMetadataParser.merge_settings(settings, data) # Generate readable JSON representation: # print("%s" % json.dumps(settings_result, indent=2) expected_settings_json = """ { "custom_base_path": "../../../tests/data/customPath/", "contactPerson": { "support": { "emailAddress": "support@example.com", "givenName": "support_name" }, "technical": { "emailAddress": "technical@example.com", "givenName": "technical_name" } }, "idp": { "singleSignOnService": { "url": "https://app.onelogin.com/trust/saml2/http-post/sso/383123", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "entityId": "https://app.onelogin.com/saml/metadata/383123", "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "x509cert": "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" }, "sp": { "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress", "entityId": "http://stuff.com/endpoints/metadata.php", "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" } }, "security": { "wantAssertionsSigned": false, "authnRequestsSigned": false, "signMetadata": false }, "debug": false, "organization": { "en-US": { "displayname": "SP test", "url": "http://sp.example.com", "name": "sp_test" } }, "strict": false } """ expected_settings = json.loads(expected_settings_json) self.assertEqual(expected_settings, settings_result) # Commute merge operation. As the order determines which settings # dictionary has priority, here we expect a different result. settings_result2 = OneLogin_Saml2_IdPMetadataParser.merge_settings(data, settings) expected_settings2_json = """ { "debug": false, "idp": { "singleLogoutService": { "url": "http://idp.example.com/SingleLogoutService.php" }, "singleSignOnService": { "url": "http://idp.example.com/SSOService.php", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "entityId": "http://idp.example.com/", "x509cert": "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" }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "emailAddress": "technical@example.com", "givenName": "technical_name" }, "support": { "emailAddress": "support@example.com", "givenName": "support_name" } }, "strict": false, "sp": { "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "entityId": "http://stuff.com/endpoints/metadata.php", "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" }, "custom_base_path": "../../../tests/data/customPath/", "organization": { "en-US": { "displayname": "SP test", "url": "http://sp.example.com", "name": "sp_test" } } } """ expected_settings2 = json.loads(expected_settings2_json) self.assertEqual(expected_settings2, settings_result2) # Test merging multiple certs xml_idp_metadata = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata_multi_certs.xml')) data3 = OneLogin_Saml2_IdPMetadataParser.parse(xml_idp_metadata) settings_result3 = OneLogin_Saml2_IdPMetadataParser.merge_settings(settings, data3) expected_settings3_json = """ { "debug": false, "strict": false, "custom_base_path": "../../../tests/data/customPath/", "sp": { "singleLogoutService": { "url": "http://stuff.com/endpoints/endpoints/sls.php" }, "assertionConsumerService": { "url": "http://stuff.com/endpoints/endpoints/acs.php" }, "entityId": "http://stuff.com/endpoints/metadata.php", "NameIDFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" }, "idp": { "singleLogoutService": { "url": "https://idp.examle.com/saml/slo", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" }, "x509certMulti": { "encryption": [ "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" ], "signing": [ "MIIEZTCCA02gAwIBAgIUPyy/A3bZAZ4m28PzEUUoT7RJhxIwDQYJKoZIhvcNAQEFBQAwcjELMAkGA1UEBhMCVVMxKzApBgNVBAoMIk9uZUxvZ2luIFRlc3QgKHNnYXJjaWEtdXMtcHJlcHJvZCkxFTATBgNVBAsMDE9uZUxvZ2luIElkUDEfMB0GA1UEAwwWT25lTG9naW4gQWNjb3VudCA4OTE0NjAeFw0xNjA4MDQyMjI5MzdaFw0yMTA4MDUyMjI5MzdaMHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6iqQGcLOCglNO42I2rkzE05UXSiMXT6c8ALThMMiaDw6qqzo3sd/tKK+NcNKWLIIC8TozWVyh5ykUiVZps+08xil7VsTU7E+wKu3kvmOsvw2wlRwtnoKZJwYhnr+RkBa+h1r3ZYUgXm1ZPeHMKj1g18KaWz9+MxYL6BhKqrOzfW/P2xxVRcFH7/pq+ZsDdgNzD2GD+apzY4MZyZj/N6BpBWJ0GlFsmtBegpbX3LBitJuFkk5L4/U/jjF1AJa3boBdCUVfATqO5G03H4XS1GySjBIRQXmlUF52rLjg6xCgWJ30/+t1X+IHLJeixiQ0vxyh6C4/usCEt94cgD1r8ADAgMBAAGjgfIwge8wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPW0DcH0G3IwynWgi74co4wZ6n7gwga8GA1UdIwSBpzCBpIAUPW0DcH0G3IwynWgi74co4wZ6n7ihdqR0MHIxCzAJBgNVBAYTAlVTMSswKQYDVQQKDCJPbmVMb2dpbiBUZXN0IChzZ2FyY2lhLXVzLXByZXByb2QpMRUwEwYDVQQLDAxPbmVMb2dpbiBJZFAxHzAdBgNVBAMMFk9uZUxvZ2luIEFjY291bnQgODkxNDaCFD8svwN22QGeJtvD8xFFKE+0SYcSMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQUFAAOCAQEAQhB4q9jrycwbHrDSoYR1X4LFFzvJ9Us75wQquRHXpdyS9D6HUBXMGI6ahPicXCQrfLgN8vzMIiqZqfySXXv/8/dxe/X4UsWLYKYJHDJmxXD5EmWTa65chjkeP1oJAc8f3CKCpcP2lOBTthbnk2fEVAeLHR4xNdQO0VvGXWO9BliYPpkYqUIBvlm+Fg9mF7AM/Uagq2503XXIE1Lq//HON68P10vNMwLSKOtYLsoTiCnuIKGJqG37MsZVjQ1ZPRcO+LSLkq0i91gFxrOrVCrgztX4JQi5XkvEsYZGIXXjwHqxTVyt3adZWQO0LPxPqRiUqUzyhDhLo/xXNrHCu4VbMw==", "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" ] }, "entityId": "https://idp.examle.com/saml/metadata", "singleSignOnService": { "url": "https://idp.examle.com/saml/sso", "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" } }, "security": { "authnRequestsSigned": false, "wantAssertionsSigned": false, "signMetadata": false }, "contactPerson": { "technical": { "emailAddress": "technical@example.com", "givenName": "technical_name" }, "support": { "emailAddress": "support@example.com", "givenName": "support_name" } }, "organization": { "en-US": { "displayname": "SP test", "url": "http://sp.example.com", "name": "sp_test" } } } """ expected_settings3 = json.loads(expected_settings3_json) self.assertEqual(expected_settings3, settings_result3) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/logout_request_test.py000066400000000000000000000637661451074743100265620ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists import unittest from xml.dom.minidom import parseString from onelogin.saml2 import compat from onelogin.saml2.logout_request import OneLogin_Saml2_Logout_Request from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils try: from urllib.parse import urlparse, parse_qs except ImportError: from urlparse import urlparse, parse_qs class OneLogin_Saml2_Logout_Request_Test(unittest.TestCase): data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') # assertRegexpMatches deprecated on python3 def assertRegex(self, text, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRegex'): return super(OneLogin_Saml2_Logout_Request_Test, self).assertRegex(text, regexp, msg) else: return self.assertRegexpMatches(text, regexp, msg) # assertRaisesRegexp deprecated on python3 def assertRaisesRegex(self, exception, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRaisesRegex'): return super(OneLogin_Saml2_Logout_Request_Test, self).assertRaisesRegex(exception, regexp, msg=msg) else: return self.assertRaisesRegexp(exception, regexp) def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testConstructor(self): """ Tests the OneLogin_Saml2_LogoutRequest Constructor. """ settings_info = self.loadSettingsJSON() settings_info['security']['nameIdEncrypted'] = True settings = OneLogin_Saml2_Settings(settings_info) logout_request = OneLogin_Saml2_Logout_Request(settings) parameters = {'SAMLRequest': logout_request.get_request()} logout_url = OneLogin_Saml2_Utils.redirect('http://idp.example.com/SingleLogoutService.php', parameters, True) self.assertRegex(logout_url, r'^http://idp\.example\.com\/SingleLogoutService\.php\?SAMLRequest=') url_parts = urlparse(logout_url) exploded = parse_qs(url_parts.query) payload = exploded['SAMLRequest'][0] inflated = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(payload)) self.assertRegex(inflated, '^') def testGetIDFromSAMLLogoutRequest(self): """ Tests the get_id method of the OneLogin_Saml2_LogoutRequest """ logout_request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) id1 = OneLogin_Saml2_Logout_Request.get_id(logout_request) self.assertEqual('ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e', id1) dom = parseString(logout_request) id2 = OneLogin_Saml2_Logout_Request.get_id(dom.toxml()) self.assertEqual('ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e', id2) def testGetIDFromDeflatedSAMLLogoutRequest(self): """ Tests the get_id method of the OneLogin_Saml2_LogoutRequest """ deflated_logout_request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_deflated.xml.base64')) logout_request = OneLogin_Saml2_Utils.decode_base64_and_inflate(deflated_logout_request) id1 = OneLogin_Saml2_Logout_Request.get_id(logout_request) self.assertEqual('ONELOGIN_21584ccdfaca36a145ae990442dcd96bfe60151e', id1) def testGetNameIdData(self): """ Tests the get_nameid_data method of the OneLogin_Saml2_LogoutRequest """ expected_name_id_data = { 'Value': 'ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c', 'Format': 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', 'SPNameQualifier': 'http://idp.example.com/' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) name_id_data = OneLogin_Saml2_Logout_Request.get_nameid_data(request) self.assertEqual(expected_name_id_data, name_id_data) dom = parseString(request) name_id_data_2 = OneLogin_Saml2_Logout_Request.get_nameid_data(dom.toxml()) self.assertEqual(expected_name_id_data, name_id_data_2) request_2 = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_encrypted_nameid.xml')) with self.assertRaisesRegex(Exception, 'Key is required in order to decrypt the NameID'): OneLogin_Saml2_Logout_Request.get_nameid(request_2) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() name_id_data_4 = OneLogin_Saml2_Logout_Request.get_nameid_data(request_2, key) expected_name_id_data = { 'Value': 'ONELOGIN_9c86c4542ab9d6fce07f2f7fd335287b9b3cdf69', 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress', 'SPNameQualifier': 'https://pitbulk.no-ip.org/newonelogin/demo1/metadata.php' } self.assertEqual(expected_name_id_data, name_id_data_4) dom_2 = parseString(request_2) encrypted_id_nodes = dom_2.getElementsByTagName('saml:EncryptedID') encrypted_data = encrypted_id_nodes[0].firstChild.nextSibling encrypted_id_nodes[0].removeChild(encrypted_data) with self.assertRaisesRegex(Exception, 'NameID not found in the Logout Request'): OneLogin_Saml2_Logout_Request.get_nameid(dom_2.toxml(), key) inv_request = self.file_contents(join(self.data_path, 'logout_requests', 'invalids', 'no_nameId.xml')) with self.assertRaisesRegex(Exception, 'NameID not found in the Logout Request'): OneLogin_Saml2_Logout_Request.get_nameid(inv_request) idp_data = settings.get_idp_data() expected_name_id_data = { 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress', 'NameQualifier': idp_data['entityId'], 'Value': 'ONELOGIN_9c86c4542ab9d6fce07f2f7fd335287b9b3cdf69' } logout_request = OneLogin_Saml2_Logout_Request(settings, None, expected_name_id_data['Value'], None, idp_data['entityId'], expected_name_id_data['Format']) name_id_data_3 = OneLogin_Saml2_Logout_Request.get_nameid_data(logout_request.get_xml()) self.assertEqual(expected_name_id_data, name_id_data_3) expected_name_id_data = { 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress', 'Value': 'ONELOGIN_9c86c4542ab9d6fce07f2f7fd335287b9b3cdf69' } logout_request = OneLogin_Saml2_Logout_Request(settings, None, expected_name_id_data['Value'], None, None, expected_name_id_data['Format']) name_id_data_4 = OneLogin_Saml2_Logout_Request.get_nameid_data(logout_request.get_xml()) self.assertEqual(expected_name_id_data, name_id_data_4) expected_name_id_data = { 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity', 'Value': 'http://idp.example.com/' } logout_request = OneLogin_Saml2_Logout_Request(settings) name_id_data_5 = OneLogin_Saml2_Logout_Request.get_nameid_data(logout_request.get_xml()) self.assertEqual(expected_name_id_data, name_id_data_5) def testGetNameId(self): """ Tests the get_nameid of the OneLogin_Saml2_LogoutRequest """ request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) name_id = OneLogin_Saml2_Logout_Request.get_nameid(request) self.assertEqual(name_id, 'ONELOGIN_1e442c129e1f822c8096086a1103c5ee2c7cae1c') request_2 = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_encrypted_nameid.xml')) with self.assertRaisesRegex(Exception, 'Key is required in order to decrypt the NameID'): OneLogin_Saml2_Logout_Request.get_nameid(request_2) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() name_id_3 = OneLogin_Saml2_Logout_Request.get_nameid(request_2, key) self.assertEqual('ONELOGIN_9c86c4542ab9d6fce07f2f7fd335287b9b3cdf69', name_id_3) def testGetIssuer(self): """ Tests the get_issuer of the OneLogin_Saml2_LogoutRequest """ request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) issuer = OneLogin_Saml2_Logout_Request.get_issuer(request) self.assertEqual('http://idp.example.com/', issuer) dom = parseString(request) issuer_2 = OneLogin_Saml2_Logout_Request.get_issuer(dom.toxml()) self.assertEqual('http://idp.example.com/', issuer_2) issuer_node = dom.getElementsByTagName('saml:Issuer')[0] issuer_node.parentNode.removeChild(issuer_node) issuer_3 = OneLogin_Saml2_Logout_Request.get_issuer(dom.toxml()) self.assertIsNone(issuer_3) def testGetSessionIndexes(self): """ Tests the get_session_indexes of the OneLogin_Saml2_LogoutRequest """ request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) session_indexes = OneLogin_Saml2_Logout_Request.get_session_indexes(request) self.assertEqual(len(session_indexes), 0) dom = parseString(request) session_indexes_2 = OneLogin_Saml2_Logout_Request.get_session_indexes(dom.toxml()) self.assertEqual(len(session_indexes_2), 0) request_2 = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_with_sessionindex.xml')) session_indexes_3 = OneLogin_Saml2_Logout_Request.get_session_indexes(request_2) self.assertEqual(['_ac72a76526cb6ca19f8438e73879a0e6c8ae5131'], session_indexes_3) def testIsInvalidXML(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest Case Invalid XML """ request = OneLogin_Saml2_Utils.b64encode('invalid') request_data = { 'http_host': 'example.com', 'script_name': 'index.html', } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, request) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, request) self.assertFalse(logout_request2.is_valid(request_data)) def testIsInvalidIssuer(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest Case Invalid Issuer """ request = self.file_contents(join(self.data_path, 'logout_requests', 'invalids', 'invalid_issuer.xml')) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) with self.assertRaisesRegex(Exception, 'Invalid issuer in the Logout Request'): logout_request2.is_valid(request_data, raise_exceptions=True) def testIsInvalidDestination(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest Case Invalid Destination """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) with self.assertRaisesRegex(Exception, 'The LogoutRequest was received at'): logout_request2.is_valid(request_data, raise_exceptions=True) dom = parseString(request) dom.documentElement.setAttribute('Destination', None) logout_request3 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request3.is_valid(request_data)) dom.documentElement.removeAttribute('Destination') logout_request4 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request4.is_valid(request_data)) def testIsInvalidNotOnOrAfter(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest Case Invalid NotOnOrAfter """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'invalids', 'not_after_failed.xml')) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) with self.assertRaisesRegex(Exception, 'Could not validate timestamp: expired. Check system clock.'): logout_request2.is_valid(request_data, raise_exceptions=True) def testIsValid(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertFalse(logout_request2.is_valid(request_data)) settings.set_strict(False) dom = parseString(request) logout_request3 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request3.is_valid(request_data)) settings.set_strict(True) logout_request4 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertFalse(logout_request4.is_valid(request_data)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) logout_request5 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request5.is_valid(request_data)) def testIsValidWithCapitalization(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest """ request_data = { 'http_host': 'exaMPLe.com', 'script_name': 'index.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertFalse(logout_request2.is_valid(request_data)) settings.set_strict(False) dom = parseString(request) logout_request3 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request3.is_valid(request_data)) settings.set_strict(True) logout_request4 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertFalse(logout_request4.is_valid(request_data)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url.lower()) logout_request5 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request5.is_valid(request_data)) def testIsInValidWithCapitalization(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest """ request_data = { 'http_host': 'example.com', 'script_name': 'INdex.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertFalse(logout_request2.is_valid(request_data)) settings.set_strict(False) dom = parseString(request) logout_request3 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request3.is_valid(request_data)) settings.set_strict(True) logout_request4 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertFalse(logout_request4.is_valid(request_data)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url.lower()) logout_request5 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertFalse(logout_request5.is_valid(request_data)) def testIsValidWithXMLEncoding(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutRequest """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request_with_encoding.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request.is_valid(request_data)) settings.set_strict(True) logout_request2 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertFalse(logout_request2.is_valid(request_data)) settings.set_strict(False) dom = parseString(request) logout_request3 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertTrue(logout_request3.is_valid(request_data)) settings.set_strict(True) logout_request4 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(dom.toxml())) self.assertFalse(logout_request4.is_valid(request_data)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) request = request.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) logout_request5 = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertTrue(logout_request5.is_valid(request_data)) def testIsValidRaisesExceptionWhenRaisesArgumentIsTrue(self): request = OneLogin_Saml2_Utils.b64encode('invalid') request_data = { 'http_host': 'example.com', 'script_name': 'index.html', } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) settings.set_strict(True) logout_request = OneLogin_Saml2_Logout_Request(settings, request) self.assertFalse(logout_request.is_valid(request_data)) with self.assertRaises(Exception): logout_request.is_valid(request_data, raise_exceptions=True) def testGetXML(self): """ Tests that we can get the logout request XML directly without going through intermediate steps """ request = self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_request_generated = OneLogin_Saml2_Logout_Request(settings) expectedFragment = ( 'Destination="http://idp.example.com/SingleLogoutService.php">\n' ' http://stuff.com/endpoints/metadata.php\n' ' http://idp.example.com/\n' ' \n' ) self.assertIn(expectedFragment, logout_request_generated.get_xml()) logout_request_processed = OneLogin_Saml2_Logout_Request(settings, OneLogin_Saml2_Utils.b64encode(request)) self.assertEqual(request, logout_request_processed.get_xml()) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/logout_response_test.py000066400000000000000000000457771451074743100267320ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists import unittest from xml.dom.minidom import parseString from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.logout_response import OneLogin_Saml2_Logout_Response from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.utils import OneLogin_Saml2_XML try: from urllib.parse import urlparse, parse_qs except ImportError: from urlparse import urlparse, parse_qs class OneLogin_Saml2_Logout_Response_Test(unittest.TestCase): data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') # assertRegexpMatches deprecated on python3 def assertRegex(self, text, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRegex'): return super(OneLogin_Saml2_Logout_Response_Test, self).assertRegex(text, regexp, msg) else: return self.assertRegexpMatches(text, regexp, msg) # assertRaisesRegexp deprecated on python3 def assertRaisesRegex(self, exception, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRaisesRegex'): return super(OneLogin_Saml2_Logout_Response_Test, self).assertRaisesRegex(exception, regexp, msg=msg) else: return self.assertRaisesRegexp(exception, regexp) def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testConstructor(self): """ Tests the OneLogin_Saml2_LogoutResponse Constructor. """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertRegex(compat.to_string(OneLogin_Saml2_XML.to_string(response.document)), 'invalid') request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) self.assertFalse(response_2.is_valid(request_data)) def testIsInValidRequestId(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse Case invalid request Id """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) request_id = 'invalid_request_id' settings.set_strict(False) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data, request_id)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) self.assertFalse(response_2.is_valid(request_data, request_id)) self.assertIn('The InResponseTo of the Logout Response:', response_2.get_error()) with self.assertRaisesRegex(Exception, 'The InResponseTo of the Logout Response:'): response_2.is_valid(request_data, request_id, raise_exceptions=True) def testIsInValidIssuer(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse Case invalid Issuer """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) plain_message = plain_message.replace('http://idp.example.com/', 'http://invalid.issuer.example.com') message = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) settings.set_strict(False) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'Invalid issuer in the Logout Response'): response_2.is_valid(request_data, raise_exceptions=True) def testIsInValidDestination(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse Case invalid Destination """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) settings.set_strict(False) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'The LogoutResponse was received at'): response_2.is_valid(request_data, raise_exceptions=True) # Empty destination dom = parseString(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) dom.firstChild.setAttribute('Destination', '') xml = dom.toxml() message_3 = OneLogin_Saml2_Utils.deflate_and_base64_encode(xml) response_3 = OneLogin_Saml2_Logout_Response(settings, message_3) self.assertTrue(response_3.is_valid(request_data)) # No destination dom.firstChild.removeAttribute('Destination') xml = dom.toxml() message_4 = OneLogin_Saml2_Utils.deflate_and_base64_encode(xml) response_4 = OneLogin_Saml2_Logout_Response(settings, message_4) self.assertTrue(response_4.is_valid(request_data)) def testIsValid(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'The LogoutResponse was received at'): response_2.is_valid(request_data, raise_exceptions=True) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message_3 = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) response_3 = OneLogin_Saml2_Logout_Response(settings, message_3) self.assertTrue(response_3.is_valid(request_data)) def testIsValidWithCapitalization(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse """ request_data = { 'http_host': 'exaMPLe.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'The LogoutResponse was received at'): response_2.is_valid(request_data, raise_exceptions=True) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data).lower() plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message_3 = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) response_3 = OneLogin_Saml2_Logout_Response(settings, message_3) self.assertTrue(response_3.is_valid(request_data)) def testIsInValidWithCapitalization(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse """ request_data = { 'http_host': 'example.com', 'script_name': 'INdex.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_deflated.xml.base64')) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'The LogoutResponse was received at'): response_2.is_valid(request_data, raise_exceptions=True) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data).lower() plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message_3 = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) response_3 = OneLogin_Saml2_Logout_Response(settings, message_3) self.assertFalse(response_3.is_valid(request_data)) def testIsValidWithXMLEncoding(self): """ Tests the is_valid method of the OneLogin_Saml2_LogoutResponse """ request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response_with_encoding_deflated.xml.base64')) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertTrue(response.is_valid(request_data)) settings.set_strict(True) response_2 = OneLogin_Saml2_Logout_Response(settings, message) with self.assertRaisesRegex(Exception, 'The LogoutResponse was received at'): response_2.is_valid(request_data, raise_exceptions=True) plain_message = compat.to_string(OneLogin_Saml2_Utils.decode_base64_and_inflate(message)) current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/sls.php', current_url) message_3 = OneLogin_Saml2_Utils.deflate_and_base64_encode(plain_message) response_3 = OneLogin_Saml2_Logout_Response(settings, message_3) self.assertTrue(response_3.is_valid(request_data)) def testIsValidRaisesExceptionWhenRaisesArgumentIsTrue(self): message = OneLogin_Saml2_Utils.deflate_and_base64_encode('invalid') request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) settings.set_strict(True) response = OneLogin_Saml2_Logout_Response(settings, message) self.assertFalse(response.is_valid(request_data)) with self.assertRaises(Exception): response.is_valid(request_data, raise_exceptions=True) def testGetXML(self): """ Tests that we can get the logout response XML directly without going through intermediate steps """ response = self.file_contents(join(self.data_path, 'logout_responses', 'logout_response.xml')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) logout_response_generated = OneLogin_Saml2_Logout_Response(settings) logout_response_generated.build("InResponseValue") expectedFragment = ( 'Destination="http://idp.example.com/SingleLogoutService.php"\n' ' InResponseTo="InResponseValue">\n' ' http://stuff.com/endpoints/metadata.php\n' ' \n' ' \n' ' \n' '' ) self.assertIn(expectedFragment, logout_response_generated.get_xml()) logout_response_processed = OneLogin_Saml2_Logout_Response(settings, OneLogin_Saml2_Utils.deflate_and_base64_encode(response)) self.assertEqual(response, logout_response_processed.get_xml()) def testBuildWithStatus(self): """ Tests the build method when called specifying a non-default status for the LogoutResponse. """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) response_builder = OneLogin_Saml2_Logout_Response(settings) response_builder.build("InResponseValue", status=OneLogin_Saml2_Constants.STATUS_REQUESTER) generated_encoded_response = response_builder.get_response() # Parse and verify the status of the response, as the receiver will do: parsed_response = OneLogin_Saml2_Logout_Response(settings, generated_encoded_response) expectedFragment = ( ' \n' ' \n' ' \n' ) self.assertIn(expectedFragment, parsed_response.get_xml()) self.assertEqual(parsed_response.get_status(), OneLogin_Saml2_Constants.STATUS_REQUESTER) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/metadata_test.py000066400000000000000000000357021451074743100252460ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists from time import strftime from datetime import datetime import unittest from onelogin.saml2 import compat from onelogin.saml2.metadata import OneLogin_Saml2_Metadata from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xml_utils import OneLogin_Saml2_XML class OneLogin_Saml2_Metadata_Test(unittest.TestCase): def loadSettingsJSON(self, filename='settings1.json'): filename = join(dirname(__file__), '..', '..', '..', 'settings', filename) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testBuilder(self): """ Tests the builder method of the OneLogin_Saml2_Metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) sp_data = settings.get_sp_data() security = settings.get_security_data() organization = settings.get_organization() contacts = settings.get_contacts() metadata = OneLogin_Saml2_Metadata.builder( sp_data, security['authnRequestsSigned'], security['wantAssertionsSigned'], None, None, contacts, organization ) self.assertIsNotNone(metadata) self.assertIn('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', metadata) self.assertIn('sp_test', metadata) self.assertIn('', metadata) self.assertIn('technical_name', metadata) security['authnRequestsSigned'] = True security['wantAssertionsSigned'] = True del sp_data['singleLogoutService']['url'] metadata2 = OneLogin_Saml2_Metadata.builder( sp_data, security['authnRequestsSigned'], security['wantAssertionsSigned'] ) self.assertIsNotNone(metadata2) self.assertIn('', metadata2) metadata3 = OneLogin_Saml2_Metadata.builder( sp_data, security['authnRequestsSigned'], security['wantAssertionsSigned'], '2014-10-01T11:04:29Z', 'P1Y', contacts, organization ) self.assertIsNotNone(metadata3) self.assertIn(' Test Service Test Service """, metadata) def testBuilderAttributeConsumingServiceWithMultipleAttributeValue(self): settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings5.json')) sp_data = settings.get_sp_data() security = settings.get_security_data() organization = settings.get_organization() contacts = settings.get_contacts() metadata = OneLogin_Saml2_Metadata.builder( sp_data, security['authnRequestsSigned'], security['wantAssertionsSigned'], None, None, contacts, organization ) self.assertIn(""" Test Service Test Service userType admin """, metadata) def testSignMetadata(self): """ Tests the signMetadata method of the OneLogin_Saml2_Metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) sp_data = settings.get_sp_data() security = settings.get_security_data() metadata = OneLogin_Saml2_Metadata.builder( sp_data, security['authnRequestsSigned'], security['wantAssertionsSigned'] ) self.assertIsNotNone(metadata) cert_path = settings.get_cert_path() key = self.file_contents(join(cert_path, 'sp.key')) cert = self.file_contents(join(cert_path, 'sp.crt')) signed_metadata = compat.to_string(OneLogin_Saml2_Metadata.sign_metadata(metadata, key, cert)) self.assertTrue(OneLogin_Saml2_Utils.validate_metadata_sign(signed_metadata, cert)) self.assertIn('', signed_metadata) self.assertIn('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', signed_metadata) self.assertIn('\n', signed_metadata) self.assertIn('', signed_metadata) self.assertIn('', signed_metadata) self.assertIn('\n\n', signed_metadata) with self.assertRaises(Exception) as context: OneLogin_Saml2_Metadata.sign_metadata('', key, cert) exception = context.exception self.assertIn("Empty string supplied as input", str(exception)) signed_metadata_2 = compat.to_string(OneLogin_Saml2_Metadata.sign_metadata(metadata, key, cert, OneLogin_Saml2_Constants.RSA_SHA256, OneLogin_Saml2_Constants.SHA384)) self.assertTrue(OneLogin_Saml2_Utils.validate_metadata_sign(signed_metadata_2, cert)) self.assertIn('', signed_metadata_2) self.assertIn('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', signed_metadata_2) self.assertIn('\n', signed_metadata_2) self.assertIn('', signed_metadata_2) self.assertIn('', signed_metadata_2) self.assertIn('\n\n', signed_metadata_2) root = OneLogin_Saml2_XML.to_etree(signed_metadata_2) first_child = OneLogin_Saml2_XML.query(root, '/md:EntityDescriptor/*[1]')[0] self.assertEqual('{http://www.w3.org/2000/09/xmldsig#}Signature', first_child.tag) def testAddX509KeyDescriptors(self): """ Tests the addX509KeyDescriptors method of the OneLogin_Saml2_Metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) sp_data = settings.get_sp_data() metadata = OneLogin_Saml2_Metadata.builder(sp_data) self.assertNotIn(' something_is_wrong'): response_3.check_status() def testCheckOneCondition(self): """ Tests the check_one_condition method of SamlResponse """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_conditions.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.check_one_condition()) self.assertTrue(response.is_valid(self.get_request_data())) settings.set_strict(True) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) self.assertEqual('The Assertion must include a Conditions element', response.get_error()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.check_one_condition()) def testCheckOneAuthnStatement(self): """ Tests the check_one_authnstatement method of SamlResponse """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_authnstatement.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.check_one_authnstatement()) self.assertTrue(response.is_valid(self.get_request_data())) settings.set_strict(True) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) self.assertEqual('The Assertion must include an AuthnStatement element', response.get_error()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.check_one_authnstatement()) def testGetAudiences(self): """ Tests the get_audiences method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'no_audience.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual([], response.get_audiences()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual(['{audience}'], response_2.get_audiences()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual(['http://stuff.com/endpoints/metadata.php'], response_3.get_audiences()) def testQueryAssertions(self): """ Tests the __query_assertion and __query methods of the OneLogin_Saml2_Response using the get_issuers call """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'adfs_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual(['http://login.example.com/issuer'], response.get_issuers()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual(['http://idp.example.com/'], response_2.get_issuers()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'double_signed_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual(['http://idp.example.com/', 'https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], sorted(response_3.get_issuers())) xml_4 = self.file_contents(join(self.data_path, 'responses', 'double_signed_response.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, xml_4) self.assertEqual(['https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], response_4.get_issuers()) xml_5 = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion.xml.base64')) response_5 = OneLogin_Saml2_Response(settings, xml_5) self.assertEqual(['http://idp.example.com/', 'https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], sorted(response_5.get_issuers())) xml_6 = self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response.xml.base64')) response_6 = OneLogin_Saml2_Response(settings, xml_6) self.assertEqual(['https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], response_6.get_issuers()) xml_7 = self.file_contents(join(self.data_path, 'responses', 'signed_encrypted_assertion.xml.base64')) response_7 = OneLogin_Saml2_Response(settings, xml_7) self.assertEqual(['http://idp.example.com/'], response_7.get_issuers()) def testGetIssuers(self): """ Tests the get_issuers method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'adfs_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual(['http://login.example.com/issuer'], response.get_issuers()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual(['http://idp.example.com/'], response_2.get_issuers()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'double_signed_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual(['http://idp.example.com/', 'https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], sorted(response_3.get_issuers())) xml_4 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_issuer_response.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, xml_4) response_4.get_issuers() self.assertEqual(['https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php'], response_4.get_issuers()) xml_5 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_issuer_assertion.xml.base64')) response_5 = OneLogin_Saml2_Response(settings, xml_5) with self.assertRaisesRegex(Exception, 'Issuer of the Assertion not found or multiple.'): response_5.get_issuers() def testGetSessionIndex(self): """ Tests the get_session_index method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual('_531c32d283bdff7e04e487bcdbc4dd8d', response.get_session_index()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual('_7164a9a9f97828bfdb8d0ebc004a05d2e7d873f70c', response_2.get_session_index()) def testGetAttributes(self): """ Tests the get_attributes method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) expected_attributes = { 'uid': ['demo'], 'another_value': ['value'] } self.assertEqual(expected_attributes, response.get_attributes()) # An assertion that has no attributes should return an empty # array when asked for the attributes xml_2 = self.file_contents(join(self.data_path, 'responses', 'response2.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual({}, response_2.get_attributes()) # Encrypted Attributes are not supported xml_3 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'encrypted_attrs.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual({}, response_3.get_attributes()) # Test retrieving duplicate attributes xml_4 = self.file_contents(join(self.data_path, 'responses', 'response1_with_duplicate_attributes.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, xml_4) with self.assertRaises(OneLogin_Saml2_ValidationError) as duplicate_name_exc: response_4.get_attributes() self.assertIn('Found an Attribute element with duplicated Name', str(duplicate_name_exc.exception)) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings11.json')) expected_attributes = {'another_value': ['value'], 'duplicate_name': ['name1', 'name2'], 'friendly1': ['friendly1'], 'friendly2': ['friendly2'], 'uid': ['demo']} response_5 = OneLogin_Saml2_Response(settings, xml_4) self.assertEqual(expected_attributes, response_5.get_attributes()) def testGetFriendlyAttributes(self): """ Tests the get_friendlyname_attributes method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual({}, response.get_friendlyname_attributes()) expected_attributes = { 'username': ['demo'] } xml_2 = self.file_contents(join(self.data_path, 'responses', 'response1_with_friendlyname.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual(expected_attributes, response_2.get_friendlyname_attributes()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'response2.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual({}, response_3.get_friendlyname_attributes()) xml_4 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'encrypted_attrs.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, xml_4) self.assertEqual({}, response_4.get_friendlyname_attributes()) # Test retrieving duplicate attributes xml_5 = self.file_contents(join(self.data_path, 'responses', 'response1_with_duplicate_attributes.xml.base64')) response_5 = OneLogin_Saml2_Response(settings, xml_5) with self.assertRaises(OneLogin_Saml2_ValidationError) as duplicate_name_exc: response_5.get_friendlyname_attributes() self.assertIn('Found an Attribute element with duplicated FriendlyName', str(duplicate_name_exc.exception)) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings11.json')) expected_attributes = { 'username': ['demo'], 'friendlytest': ['friendly1', 'friendly2'] } response_6 = OneLogin_Saml2_Response(settings, xml_5) self.assertEqual(expected_attributes, response_6.get_friendlyname_attributes()) def testGetEncryptedAttributes(self): """ Tests the get_attributes method of the OneLogin_Saml2_Response with an encrypted response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings8.json')) xml = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion2.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual({ 'uid': ['smartin'], 'mail': ['smartin@yaco.es'], 'cn': ['Sixto3'], 'sn': ['Martin2'], 'phone': [], 'eduPersonAffiliation': ['user', 'admin'], }, response.get_attributes()) def testGetNestedNameIDAttributes(self): """ Tests the getAttributes method of the OneLogin_Saml2_Response with nested nameID data """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response_with_nested_nameid_values.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) expected_attributes = { 'uid': ['demo'], 'another_value': [{ 'NameID': { 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent', 'NameQualifier': 'https://idpID', 'value': 'value' } }] } self.assertEqual(expected_attributes, response.get_attributes()) expected_attributes = { 'another_friendly_value': [{ 'NameID': { 'Format': 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent', 'NameQualifier': 'https://idpID', 'value': 'value' } }] } self.assertEqual(expected_attributes, response.get_friendlyname_attributes()) def testOnlyRetrieveAssertionWithIDThatMatchesSignatureReference(self): """ Tests the get_nameid method of the OneLogin_Saml2_Response The Assertion is unsigned so the method fails """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'wrapped_response_2.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Invalid Signature Element {urn:oasis:names:tc:SAML:2.0:metadata}EntityDescriptor SAML Response rejected'): response.is_valid(self.get_request_data(), raise_exceptions=True) nameid = response.get_nameid() self.assertEqual('root@example.com', nameid) def testDoesNotAllowSignatureWrappingAttack(self): """ Tests the get_nameid method of the OneLogin_Saml2_Response Test that the SignatureWrappingAttack is not allowed """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response4.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual('test@onelogin.com', response.get_nameid()) self.assertFalse(response.is_valid(self.get_request_data())) def testNodeTextAttack(self): """ Tests the get_nameid and get_attributes methods of the OneLogin_Saml2_Response Test that the node text with comment attack (VU#475445) is not allowed """ xml = self.file_contents(join(self.data_path, 'responses', 'response_node_text_attack.xml.base64')) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) response = OneLogin_Saml2_Response(settings, xml) attributes = response.get_attributes() nameid = response.get_nameid() self.assertEqual("smith", attributes.get('surname')[0]) self.assertEqual('support@onelogin.com', nameid) def testGetSessionNotOnOrAfter(self): """ Tests the get_session_not_on_or_after method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual(1290203857, response.get_session_not_on_or_after()) # An assertion that do not specified Session timeout should return NULL xml_2 = self.file_contents(join(self.data_path, 'responses', 'response2.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertEqual(None, response_2.get_session_not_on_or_after()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual(2696012228, response_3.get_session_not_on_or_after()) def testGetInResponseTo(self): """ Tests the retrieval of the InResponseTo attribute """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) # Response without an InResponseTo element should return None xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertIsNone(response.get_in_response_to()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertEqual('ONELOGIN_be60b8caf8e9d19b7a3551b244f116c947ff247d', response_3.get_in_response_to()) def testIsInvalidXML(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case Invalid XML """ message = compat.to_string(OneLogin_Saml2_Utils.b64encode('invalid')) request_data = { 'http_host': 'example.com', 'script_name': 'index.html', 'get_data': {} } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_2.is_valid(request_data)) self.assertEqual('Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd', response_2.get_error()) def testValidateNumAssertions(self): """ Tests the validate_num_assertions method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.validate_num_assertions()) xml_multi_assertion = self.file_contents(join(self.data_path, 'responses', 'invalids', 'multiple_assertions.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_multi_assertion) self.assertFalse(response_2.validate_num_assertions()) def testValidateTimestamps(self): """ Tests the validate_timestamps method of the OneLogin_Saml2_Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.validate_timestamps()) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.validate_timestamps()) xml_3 = self.file_contents(join(self.data_path, 'responses', 'expired_response.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertFalse(response_3.validate_timestamps()) xml_4 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'not_after_failed.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, xml_4) self.assertFalse(response_4.validate_timestamps()) xml_5 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'not_before_failed.xml.base64')) response_5 = OneLogin_Saml2_Response(settings, xml_5) self.assertFalse(response_5.validate_timestamps()) def testValidateVersion(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid version """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_saml2.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Unsupported SAML version'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testValidateID(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid no ID """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_id.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Missing ID attribute on SAML Response'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidReference(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid reference """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) self.assertEqual('Signature validation failed. SAML Response rejected', response.get_error()) with self.assertRaisesRegex(Exception, 'Signature validation failed. SAML Response rejected'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidExpired(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case expired response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'expired_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) response.is_valid(self.get_request_data()) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Could not validate timestamp: expired. Check system clock.'): response_2.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidNoStatement(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case no statement """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_signature.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) response.is_valid(self.get_request_data()) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response_2.is_valid(self.get_request_data())) self.assertEqual('There is no AttributeStatement on the Response', response_2.get_error()) def testIsValidOptionalStatement(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case AttributeStatement is optional """ # shortcut json_settings = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(json_settings) settings.set_strict(True) # want AttributeStatement True by default self.assertTrue(settings.get_security_data()['wantAttributeStatement']) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'signed_assertion_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) self.assertEqual('There is no AttributeStatement on the Response', response.get_error()) # change wantAttributeStatement to optional json_settings['security']['wantAttributeStatement'] = False settings = OneLogin_Saml2_Settings(json_settings) # check settings self.assertFalse(settings.get_security_data()['wantAttributeStatement']) response = OneLogin_Saml2_Response(settings, xml) response.is_valid(self.get_request_data()) self.assertNotEqual('There is no AttributeStatement on the Response', response.get_error()) self.assertEqual('Signature validation failed. SAML Response rejected', response.get_error()) def testIsInValidNoKey(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case no key """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_key.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Signature validation failed. SAML Response rejected'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidDeprecatedAlgorithm(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case Deprecated algorithm used """ settings_dict = self.loadSettingsJSON() settings_dict['security']['rejectDeprecatedAlgorithm'] = True settings = OneLogin_Saml2_Settings(settings_dict) xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Deprecated signature algorithm found: http://www.w3.org/2000/09/xmldsig#rsa-sha1'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidMultipleAssertions(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid multiple assertions """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'multiple_assertions.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'SAML Response must contain 1 assertion'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidEncAttrs(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid Encrypted Attrs """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'encrypted_attrs.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) response.is_valid(self.get_request_data()) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'There is an EncryptedAttribute in the Response and this SP not support them'): response_2.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidDuplicatedAttrs(self): """ Tests the getAttributes method of the OneLogin_Saml2_Response Case duplicated Attrs """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'duplicated_attributes.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Found an Attribute element with duplicated Name'): response.get_attributes() def testIsInValidDestination(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid Destination """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) response = OneLogin_Saml2_Response(settings, message) response.is_valid(self.get_request_data()) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_2.is_valid(self.get_request_data())) self.assertIn('The response was received at', response_2.get_error()) # Empty Destination dom = parseString(b64decode(message)) dom.firstChild.setAttribute('Destination', '') message_2 = OneLogin_Saml2_Utils.b64encode(dom.toxml()) response_3 = OneLogin_Saml2_Response(settings, message_2) self.assertFalse(response_3.is_valid(self.get_request_data())) self.assertIn('The response has an empty Destination value', response_3.get_error()) message_3 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'empty_destination.xml.base64')) response_4 = OneLogin_Saml2_Response(settings, message_3) self.assertFalse(response_4.is_valid(self.get_request_data())) self.assertEqual('The response has an empty Destination value', response_4.get_error()) # No Destination dom.firstChild.removeAttribute('Destination') message_4 = OneLogin_Saml2_Utils.b64encode(dom.toxml()) response_5 = OneLogin_Saml2_Response(settings, message_4) self.assertFalse(response_5.is_valid(self.get_request_data())) self.assertIn('A valid SubjectConfirmation was not found on this Response', response_5.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_2.is_valid(self.get_request_data())) self.assertIn('The response was received at', response_2.get_error()) def testIsInValidDestinationCapitalizationOfElements(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response due to differences in capitalization of path """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) # Test path capitalized settings.set_strict(True) response = OneLogin_Saml2_Response(settings, message) self.assertFalse(response.is_valid(self.get_request_data_path_capitalized())) self.assertIn('The response was received at', response.get_error()) # Test both domain and path capitalized response_2 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_2.is_valid(self.get_request_data_both_capitalized())) self.assertIn('The response was received at', response_2.get_error()) def testIsValidDestinationCapitalizationOfHost(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Valid Response, even if host is differently capitalized (per RFC) """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) # Test domain capitalized settings.set_strict(True) response = OneLogin_Saml2_Response(settings, message) self.assertFalse(response.is_valid(self.get_request_data_domain_capitalized())) self.assertNotIn('The response was received at', response.get_error()) # Assert we got past the destination check, which appears later self.assertIn('A valid SubjectConfirmation was not found', response.get_error()) def testIsInValidAudience(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid Audience """ request_data = { 'http_host': 'stuff.com', 'script_name': '/endpoints/endpoints/acs.php', } settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_audience.xml.base64')) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_2.is_valid(request_data)) self.assertIn('is not a valid audience for this Response', response_2.get_error()) def testIsInValidAuthenticationContext(self): """ Tests that requestedAuthnContext, when set, is compared against the response AuthnContext, which is what you use for two-factor authentication. Without this check you can get back a valid response that didn't complete the two-factor step. """ request_data = self.get_request_data() message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) two_factor_context = 'urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken' password_context = 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password' settings_dict = self.loadSettingsJSON() settings_dict['security']['requestedAuthnContext'] = [two_factor_context] settings_dict['security']['failOnAuthnContextMismatch'] = True settings_dict['strict'] = True settings = OneLogin_Saml2_Settings(settings_dict) # check that we catch when the contexts don't match response = OneLogin_Saml2_Response(settings, message) self.assertFalse(response.is_valid(request_data)) self.assertIn('The AuthnContext "%s" was not a requested context "%s"' % (password_context, two_factor_context), response.get_error()) # now drop in the expected AuthnContextClassRef and see that it passes original_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(message)) two_factor_message = original_message.replace(password_context, two_factor_context) two_factor_message = OneLogin_Saml2_Utils.b64encode(two_factor_message) response = OneLogin_Saml2_Response(settings, two_factor_message) response.is_valid(request_data) # check that we got as far as destination validation, which comes later self.assertIn('The response was received at', response.get_error()) # with the default setting, check that we succeed with our original context settings_dict['security']['requestedAuthnContext'] = True settings = OneLogin_Saml2_Settings(settings_dict) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertIn('The response was received at', response.get_error()) def testIsInValidIssuer(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid Issuer """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_issuer_assertion.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) xml_2 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_issuer_message.xml.base64')) plain_message_2 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_2)) plain_message_2 = plain_message_2.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_2 = OneLogin_Saml2_Utils.b64encode(plain_message_2) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) response_2 = OneLogin_Saml2_Response(settings, message_2) response_2.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_2.get_error()) settings.set_strict(True) response_3 = OneLogin_Saml2_Response(settings, message) with self.assertRaisesRegex(Exception, 'Invalid issuer in the Assertion/Response'): response_3.is_valid(request_data, raise_exceptions=True) response_4 = OneLogin_Saml2_Response(settings, message_2) with self.assertRaisesRegex(Exception, 'Invalid issuer in the Assertion/Response'): response_4.is_valid(request_data, raise_exceptions=True) def testIsInValidSessionIndex(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid SessionIndex """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_sessionindex.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response_2 = OneLogin_Saml2_Response(settings, message) with self.assertRaisesRegex(Exception, 'The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response'): response_2.is_valid(request_data, raise_exceptions=True) def testDatetimeWithMiliseconds(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Sometimes IdPs uses datetimes with miliseconds, this test is to verify that the toolkit supports them """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'unsigned_response_with_miliseconds.xm.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) def testIsInValidSubjectConfirmation(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid SubjectConfirmation """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_subjectconfirmation_method.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) xml_2 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_subjectconfirmation_data.xml.base64')) plain_message_2 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_2)) plain_message_2 = plain_message_2.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_2 = OneLogin_Saml2_Utils.b64encode(plain_message_2) xml_3 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_subjectconfirmation_inresponse.xml.base64')) plain_message_3 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_3)) plain_message_3 = plain_message_3.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_3 = OneLogin_Saml2_Utils.b64encode(plain_message_3) xml_4 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_subjectconfirmation_recipient.xml.base64')) plain_message_4 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_4)) plain_message_4 = plain_message_4.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_4 = OneLogin_Saml2_Utils.b64encode(plain_message_4) xml_5 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_subjectconfirmation_noa.xml.base64')) plain_message_5 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_5)) plain_message_5 = plain_message_5.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_5 = OneLogin_Saml2_Utils.b64encode(plain_message_5) xml_6 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'invalid_subjectconfirmation_nb.xml.base64')) plain_message_6 = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_6)) plain_message_6 = plain_message_6.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message_6 = OneLogin_Saml2_Utils.b64encode(plain_message_6) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) response_2 = OneLogin_Saml2_Response(settings, message_2) response_2.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_2.get_error()) response_3 = OneLogin_Saml2_Response(settings, message_3) response_3.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_3.get_error()) response_4 = OneLogin_Saml2_Response(settings, message_4) response_4.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_4.get_error()) response_5 = OneLogin_Saml2_Response(settings, message_5) response_5.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_5.get_error()) response_6 = OneLogin_Saml2_Response(settings, message_6) response_6.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_6.get_error()) settings.set_strict(True) response = OneLogin_Saml2_Response(settings, message) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response.is_valid(request_data, raise_exceptions=True) response_2 = OneLogin_Saml2_Response(settings, message_2) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response_2.is_valid(request_data, raise_exceptions=True) response_3 = OneLogin_Saml2_Response(settings, message_3) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response_3.is_valid(request_data, raise_exceptions=True) response_4 = OneLogin_Saml2_Response(settings, message_4) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response_4.is_valid(request_data, raise_exceptions=True) response_5 = OneLogin_Saml2_Response(settings, message_5) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response_5.is_valid(request_data, raise_exceptions=True) response_6 = OneLogin_Saml2_Response(settings, message_6) with self.assertRaisesRegex(Exception, 'A valid SubjectConfirmation was not found on this Response'): response_6.is_valid(request_data, raise_exceptions=True) def testIsInValidRequestId(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid requestID """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) response = OneLogin_Saml2_Response(settings, message) request_id = 'invalid' response.is_valid(request_data, request_id) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings.set_strict(True) response = OneLogin_Saml2_Response(settings, message) with self.assertRaisesRegex(Exception, 'The InResponseTo of the Response'): response.is_valid(request_data, request_id, raise_exceptions=True) valid_request_id = '_57bcbf70-7b1f-012e-c821-782bcb13bb38' response.is_valid(request_data, valid_request_id) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) def testIsInValidSignIssues(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid signing issues """ settings_info = self.loadSettingsJSON() request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) settings_info['security']['wantAssertionsSigned'] = False settings = OneLogin_Saml2_Settings(settings_info) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings_info['security']['wantAssertionsSigned'] = True settings_2 = OneLogin_Saml2_Settings(settings_info) response_2 = OneLogin_Saml2_Response(settings_2, message) response_2.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_2.get_error()) settings_info['strict'] = True settings_info['security']['wantAssertionsSigned'] = False settings_3 = OneLogin_Saml2_Settings(settings_info) response_3 = OneLogin_Saml2_Response(settings_3, message) response_3.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_3.get_error()) settings_info['security']['wantAssertionsSigned'] = True settings_4 = OneLogin_Saml2_Settings(settings_info) response_4 = OneLogin_Saml2_Response(settings_4, message) with self.assertRaisesRegex(Exception, 'The Assertion of the Response is not signed and the SP require it'): response_4.is_valid(request_data, raise_exceptions=True) settings_info['security']['wantAssertionsSigned'] = False settings_info['strict'] = False settings_info['security']['wantMessagesSigned'] = False settings_5 = OneLogin_Saml2_Settings(settings_info) response_5 = OneLogin_Saml2_Response(settings_5, message) response_5.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_5.get_error()) settings_info['security']['wantMessagesSigned'] = True settings_6 = OneLogin_Saml2_Settings(settings_info) response_6 = OneLogin_Saml2_Response(settings_6, message) response_6.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_6.get_error()) settings_info['strict'] = True settings_info['security']['wantMessagesSigned'] = False settings_7 = OneLogin_Saml2_Settings(settings_info) response_7 = OneLogin_Saml2_Response(settings_7, message) response_7.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_7.get_error()) settings_info['security']['wantMessagesSigned'] = True settings_8 = OneLogin_Saml2_Settings(settings_info) response_8 = OneLogin_Saml2_Response(settings_8, message) with self.assertRaisesRegex(Exception, 'The Message of the Response is not signed and the SP require it'): response_8.is_valid(request_data, raise_exceptions=True) def testIsInValidEncIssues(self): """ Tests the is_valid method of the OneLogin_Saml2_Response class Case Invalid Response, Invalid encryptation issues """ settings_info = self.loadSettingsJSON() request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) xml = self.file_contents(join(self.data_path, 'responses', 'unsigned_response.xml.base64')) plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml)) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = OneLogin_Saml2_Utils.b64encode(plain_message) settings_info['security']['wantAssertionsEncrypted'] = True settings = OneLogin_Saml2_Settings(settings_info) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) settings_info['strict'] = True settings_info['security']['wantAssertionsEncrypted'] = False settings = OneLogin_Saml2_Settings(settings_info) response_2 = OneLogin_Saml2_Response(settings, message) response_2.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_2.get_error()) settings_info['security']['wantAssertionsEncrypted'] = True settings = OneLogin_Saml2_Settings(settings_info) response_3 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_3.is_valid(request_data)) self.assertEqual('The assertion of the Response is not encrypted and the SP require it', response_3.get_error()) settings_info['security']['wantAssertionsEncrypted'] = False settings_info['security']['wantNameIdEncrypted'] = True settings_info['strict'] = False settings = OneLogin_Saml2_Settings(settings_info) response_4 = OneLogin_Saml2_Response(settings, message) response_4.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_4.get_error()) settings_info['strict'] = True settings = OneLogin_Saml2_Settings(settings_info) response_5 = OneLogin_Saml2_Response(settings, message) self.assertFalse(response_5.is_valid(request_data)) self.assertEqual('The NameID of the Response is not encrypted and the SP require it', response_5.get_error()) def testIsInValidEncIssues_2(self): settings_info_2 = self.loadSettingsJSON('settings3.json') settings_info_2['strict'] = True settings_info_2['security']['wantNameIdEncrypted'] = True settings_2 = OneLogin_Saml2_Settings(settings_info_2) request_data = { 'script_name': '', 'request_uri': '?acs', } for separate_port in (False, True): if separate_port: request_data.update({ 'http_host': 'pytoolkit.com', 'server_port': 8000, }) else: request_data.update({ 'http_host': 'pytoolkit.com:8000', }) message_2 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion_encrypted_nameid.xml.base64')) response_6 = OneLogin_Saml2_Response(settings_2, message_2) self.assertFalse(response_6.is_valid(request_data)) self.assertEqual('The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response', response_6.get_error()) def testIsInValidCert(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid cert """ settings_info = self.loadSettingsJSON() settings_info['idp']['x509cert'] = 'NotValidCert' settings = OneLogin_Saml2_Settings(settings_info) xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'Signature validation failed. SAML Response rejected'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testIsInValidCert2(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case invalid cert2 """ settings_info = self.loadSettingsJSON() settings_info['idp']['x509cert'] = 'MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEU MBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFs IFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290 MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0Ux FDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5h bCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9v dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvt H7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9 uMq/NzgtHj6RQa1wVsfwTz/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzX mk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp/haW+710LX a0Tkx63ubUFfclpxCDezeWWkWaCUN/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzN E0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0p10a3CitlttNCbxWyuHv77+ldU9U0 WicCAwEAAaOB3DCB2TAdBgNVHQ4EFgQUrb2YejS0Jvf6xCZU7wO94CTLVBowCwYD VR0PBAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wgZkGA1UdIwSBkTCBjoAUrb2YejS0 Jvf6xCZU7wO94CTLVBqhc6RxMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRU cnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsx IjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3SCAQEwDQYJKoZIhvcN AQEFBQADggEBALCb4IUlwtYj4g+WBpKdQZic2YR5gdkeWxQHIzZlj7DYd7usQWxH YINRsPkyPef89iYTx4AWpb9a/IfPeHmJIZriTAcKhjW88t5RxNKWt9x+Tu5w/Rw5 6wwCURQtjr0W4MHfRnXnJK3s9EK0hZNwEGe6nQY1ShjTK3rMUUKhemPR5ruhxSvC Nr4TDea9Y355e6cJDUCrat2PisP29owaQgVR1EX1n6diIWgVIEM8med8vSTYqZEX c4g/VhsxOBi0cQ+azcgOno4uG+GMmIPLHzHxREzGBHNJdmAPx/i9F4BrLunMTA5a mnkPIAou1Z5jJh5VkpTYghdae9C8x49OhgQ=' settings = OneLogin_Saml2_Settings(settings_info) xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) def testIsValid(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case valid unsigned response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'valid_unsigned_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) response.is_valid(self.get_request_data()) self.assertEqual('No Signature found. SAML Response rejected', response.get_error()) def testIsValid2(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case valid response2 """ settings_info = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_info) # expired cert xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) settings_info_2 = self.loadSettingsJSON('settings2.json') settings_2 = OneLogin_Saml2_Settings(settings_info_2) xml_2 = self.file_contents(join(self.data_path, 'responses', 'valid_response2.xml.base64')) response_2 = OneLogin_Saml2_Response(settings_2, xml_2) self.assertTrue(response_2.is_valid(self.get_request_data())) settings_info_3 = self.loadSettingsJSON('settings10.json') idp_cert = OneLogin_Saml2_Utils.format_cert(settings_info_3['idp']['x509cert']) settings_info_3['idp']['certFingerprint'] = OneLogin_Saml2_Utils.calculate_x509_fingerprint(idp_cert) settings_info_3['idp']['x509cert'] = '' settings_3 = OneLogin_Saml2_Settings(settings_info_3) response_3 = OneLogin_Saml2_Response(settings_3, xml_2) self.assertTrue(response_3.is_valid(self.get_request_data())) settings_info_3['idp']['certFingerprintAlgorithm'] = 'sha1' settings_4 = OneLogin_Saml2_Settings(settings_info_3) response_4 = OneLogin_Saml2_Response(settings_4, xml_2) self.assertTrue(response_4.is_valid(self.get_request_data())) settings_info_3['idp']['certFingerprintAlgorithm'] = 'sha256' settings_5 = OneLogin_Saml2_Settings(settings_info_3) response_5 = OneLogin_Saml2_Response(settings_5, xml_2) self.assertFalse(response_5.is_valid(self.get_request_data())) settings_info_3['idp']['certFingerprint'] = OneLogin_Saml2_Utils.calculate_x509_fingerprint(idp_cert, 'sha256') settings_6 = OneLogin_Saml2_Settings(settings_info_3) response_6 = OneLogin_Saml2_Response(settings_6, xml_2) self.assertTrue(response_6.is_valid(self.get_request_data())) def testIsValidEnc(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case valid encrypted assertion Signed data can't be modified, so Destination will always fail in strict mode """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) # expired cert xml = self.file_contents(join(self.data_path, 'responses', 'double_signed_encrypted_assertion.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) xml_2 = self.file_contents(join(self.data_path, 'responses', 'signed_encrypted_assertion.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.is_valid(self.get_request_data())) xml_3 = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertTrue(response_3.is_valid(self.get_request_data())) settings_2 = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings2.json')) xml_4 = self.file_contents(join(self.data_path, 'responses', 'double_signed_encrypted_assertion2.xml.base64')) response_4 = OneLogin_Saml2_Response(settings_2, xml_4) self.assertTrue(response_4.is_valid(self.get_request_data())) xml_5 = self.file_contents(join(self.data_path, 'responses', 'signed_encrypted_assertion2.xml.base64')) response_5 = OneLogin_Saml2_Response(settings_2, xml_5) self.assertTrue(response_5.is_valid(self.get_request_data())) xml_6 = self.file_contents(join(self.data_path, 'responses', 'signed_message_encrypted_assertion2.xml.base64')) response_6 = OneLogin_Saml2_Response(settings_2, xml_6) self.assertTrue(response_6.is_valid(self.get_request_data())) settings.set_strict(True) xml_7 = self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion.xml.base64')) # In order to avoid the destination problem plain_message = compat.to_string(OneLogin_Saml2_Utils.b64decode(xml_7)) request_data = { 'http_host': 'example.com', 'script_name': 'index.html' } current_url = OneLogin_Saml2_Utils.get_self_url_no_query(request_data) plain_message = plain_message.replace('http://stuff.com/endpoints/endpoints/acs.php', current_url) message = compat.to_string(OneLogin_Saml2_Utils.b64encode(plain_message)) response_7 = OneLogin_Saml2_Response(settings, message) response_7.is_valid(request_data) self.assertEqual('No Signature found. SAML Response rejected', response_7.get_error()) def testIsValidSign(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case valid sign response / sign assertion / both signed Strict mode will always fail due destination problem, if we manipulate it the sign will fail. """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) # expired cert xml = self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) xml_2 = self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.is_valid(self.get_request_data())) xml_3 = self.file_contents(join(self.data_path, 'responses', 'double_signed_response.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertTrue(response_3.is_valid(self.get_request_data())) settings_2 = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings2.json')) xml_4 = self.file_contents(join(self.data_path, 'responses', 'signed_message_response2.xml.base64')) response_4 = OneLogin_Saml2_Response(settings_2, xml_4) self.assertTrue(response_4.is_valid(self.get_request_data())) xml_5 = self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response2.xml.base64')) response_5 = OneLogin_Saml2_Response(settings_2, xml_5) self.assertTrue(response_5.is_valid(self.get_request_data())) xml_6 = self.file_contents(join(self.data_path, 'responses', 'double_signed_response2.xml.base64')) response_6 = OneLogin_Saml2_Response(settings_2, xml_6) self.assertTrue(response_6.is_valid(self.get_request_data())) dom = parseString(b64decode(xml_4)) dom.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_7 = OneLogin_Saml2_Utils.b64encode(dom.toxml()) response_7 = OneLogin_Saml2_Response(settings, xml_7) # Modified message self.assertFalse(response_7.is_valid(self.get_request_data())) dom_2 = parseString(OneLogin_Saml2_Utils.b64decode(xml_5)) dom_2.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_8 = OneLogin_Saml2_Utils.b64encode(dom_2.toxml()) response_8 = OneLogin_Saml2_Response(settings, xml_8) # Modified message self.assertFalse(response_8.is_valid(self.get_request_data())) dom_3 = parseString(OneLogin_Saml2_Utils.b64decode(xml_6)) dom_3.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_9 = OneLogin_Saml2_Utils.b64encode(dom_3.toxml()) response_9 = OneLogin_Saml2_Response(settings, xml_9) # Modified message self.assertFalse(response_9.is_valid(self.get_request_data())) def testIsValidSignFingerprint(self): """ Tests the is_valid method of the OneLogin_Saml2_Response Case valid sign response / sign assertion / both signed with fingerprint Strict mode will always fail due destination problem, if we manipulate it the sign will fail. """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON("settings6.json")) # expired cert xml = self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) xml_2 = self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response.xml.base64')) response_2 = OneLogin_Saml2_Response(settings, xml_2) self.assertTrue(response_2.is_valid(self.get_request_data())) xml_3 = self.file_contents(join(self.data_path, 'responses', 'double_signed_response.xml.base64')) response_3 = OneLogin_Saml2_Response(settings, xml_3) self.assertTrue(response_3.is_valid(self.get_request_data())) settings_2 = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings2.json')) xml_4 = self.file_contents(join(self.data_path, 'responses', 'signed_message_response2.xml.base64')) response_4 = OneLogin_Saml2_Response(settings_2, xml_4) self.assertTrue(response_4.is_valid(self.get_request_data())) xml_5 = self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response2.xml.base64')) response_5 = OneLogin_Saml2_Response(settings_2, xml_5) self.assertTrue(response_5.is_valid(self.get_request_data())) xml_6 = self.file_contents(join(self.data_path, 'responses', 'double_signed_response2.xml.base64')) response_6 = OneLogin_Saml2_Response(settings_2, xml_6) self.assertTrue(response_6.is_valid(self.get_request_data())) dom = parseString(b64decode(xml_4)) dom.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_7 = OneLogin_Saml2_Utils.b64encode(dom.toxml()) response_7 = OneLogin_Saml2_Response(settings, xml_7) # Modified message self.assertFalse(response_7.is_valid(self.get_request_data())) dom_2 = parseString(OneLogin_Saml2_Utils.b64decode(xml_5)) dom_2.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_8 = OneLogin_Saml2_Utils.b64encode(dom_2.toxml()) response_8 = OneLogin_Saml2_Response(settings, xml_8) # Modified message self.assertFalse(response_8.is_valid(self.get_request_data())) dom_3 = parseString(OneLogin_Saml2_Utils.b64decode(xml_6)) dom_3.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' xml_9 = OneLogin_Saml2_Utils.b64encode(dom_3.toxml()) response_9 = OneLogin_Saml2_Response(settings, xml_9) # Modified message self.assertFalse(response_9.is_valid(self.get_request_data())) def testMessageSignedIsValidSignWithEmptyReferenceURI(self): settings_info = self.loadSettingsJSON("settings10.json") del settings_info['idp']['x509cert'] settings_info['idp']['certFingerprint'] = "657302a5e11a4794a1e50a705988d66c9377575d" settings = OneLogin_Saml2_Settings(settings_info) xml = self.file_contents(join(self.data_path, 'responses', 'response_without_reference_uri.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) def testAssertionSignedIsValidSignWithEmptyReferenceURI(self): settings_info = self.loadSettingsJSON('settings10.json') del settings_info['idp']['x509cert'] settings_info['idp']['certFingerprint'] = "657302a5e11a4794a1e50a705988d66c9377575d" settings = OneLogin_Saml2_Settings(settings_info) xml = self.file_contents(join(self.data_path, 'responses', 'response_without_assertion_reference_uri.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertTrue(response.is_valid(self.get_request_data())) def testIsValidWithoutInResponseTo(self): """ If assertion contains InResponseTo but not the Response tag, we should not compare the assertion InResponseTo value to None. """ # prepare strict settings settings_info = self.loadSettingsJSON() settings_info['strict'] = True settings_info['idp']['entityId'] = 'https://pitbulk.no-ip.org/simplesaml/saml2/idp/metadata.php' settings_info['sp']['entityId'] = 'https://pitbulk.no-ip.org/newonelogin/demo1/metadata.php' settings = OneLogin_Saml2_Settings(settings_info) xml = self.file_contents(join(self.data_path, 'responses', 'valid_response_without_inresponseto.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) not_on_or_after = datetime.strptime('2014-02-19T09:37:01Z', '%Y-%m-%dT%H:%M:%SZ') not_on_or_after -= timedelta(seconds=150) with freeze_time(not_on_or_after): self.assertTrue(response.is_valid({ 'https': 'on', 'http_host': 'pitbulk.no-ip.org', 'script_name': 'newonelogin/demo1/index.php?acs' })) def testIsValidRaisesExceptionWhenRaisesArgumentIsTrue(self): """ Tests that the internal exception gets raised if the raise parameter is True. """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) settings.set_strict(True) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_conditions.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertFalse(response.is_valid(self.get_request_data())) with self.assertRaises(Exception): response.is_valid(self.get_request_data(), raise_exceptions=True) def testStatusCheckBeforeAssertionCheck(self): """ Tests the status of a response is checked before the assertion count. As failed statuses will have no assertions """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'invalids', 'status_code_responder.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) with self.assertRaisesRegex(Exception, 'The status code of the Response was not Success, was Responder'): response.is_valid(self.get_request_data(), raise_exceptions=True) def testGetId(self): """ Tests that we can retrieve the ID of the Response """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual(response.get_id(), 'pfxf209cd60-f060-722b-02e9-4850ac5a2e41') def testGetAssertionId(self): """ Tests that we can retrieve the ID of the Assertion """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) xml = self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64')) response = OneLogin_Saml2_Response(settings, xml) self.assertEqual(response.get_assertion_id(), '_cccd6024116641fe48e0ae2c51220d02755f96c98d') def testGetAssertionNotOnOrAfter(self): """ Tests that we can retrieve the NotOnOrAfter value of the valid SubjectConfirmationData """ settings_data = self.loadSettingsJSON() request_data = self.get_request_data() settings = OneLogin_Saml2_Settings(settings_data) message = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) response = OneLogin_Saml2_Response(settings, message) self.assertIsNone(response.get_assertion_not_on_or_after()) response.is_valid(request_data) self.assertIsNone(response.get_error()) self.assertIsNone(response.get_assertion_not_on_or_after()) settings_data['strict'] = True settings = OneLogin_Saml2_Settings(settings_data) response = OneLogin_Saml2_Response(settings, message) response.is_valid(request_data) self.assertNotEqual(response.get_error(), None) self.assertIsNone(response.get_assertion_not_on_or_after()) request_data['https'] = 'on' request_data['http_host'] = 'pitbulk.no-ip.org' request_data['script_name'] = '/newonelogin/demo1/index.php?acs' response.is_valid(request_data) self.assertIsNone(response.get_error()) self.assertEqual(response.get_assertion_not_on_or_after(), 2671081021) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/settings_test.py000066400000000000000000001435101451074743100253230ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists, sep import unittest from onelogin.saml2 import compat from onelogin.saml2.errors import OneLogin_Saml2_Error from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils class OneLogin_Saml2_Settings_Test(unittest.TestCase): data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testLoadSettingsFromDict(self): """ Tests the OneLogin_Saml2_Settings Constructor. Case load setting from dict """ settings_info = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_info) self.assertEqual(len(settings.get_errors()), 0) del settings_info['contactPerson'] del settings_info['organization'] settings = OneLogin_Saml2_Settings(settings_info) self.assertEqual(len(settings.get_errors()), 0) del settings_info['security'] settings = OneLogin_Saml2_Settings(settings_info) self.assertEqual(len(settings.get_errors()), 0) del settings_info['sp']['NameIDFormat'] del settings_info['idp']['x509cert'] settings_info['idp']['certFingerprint'] = 'afe71c28ef740bc87425be13a2263d37971daA1f9' settings = OneLogin_Saml2_Settings(settings_info) self.assertEqual(len(settings.get_errors()), 0) settings_info['idp']['singleSignOnService']['url'] = 'invalid_url' try: settings_2 = OneLogin_Saml2_Settings(settings_info) self.assertNotEqual(len(settings_2.get_errors()), 0) except Exception as e: self.assertIn('Invalid dict settings: idp_sso_url_invalid', str(e)) settings_info['idp']['singleSignOnService']['url'] = 'http://invalid_domain' try: settings_3 = OneLogin_Saml2_Settings(settings_info) self.assertNotEqual(len(settings_3.get_errors()), 0) except Exception as e: self.assertIn('Invalid dict settings: idp_sso_url_invalid', str(e)) settings_info['idp']['singleSignOnService']['url'] = 'http://single-label-domain' settings_info['security'] = {} settings_info['security']['allowSingleLabelDomains'] = True settings_4 = OneLogin_Saml2_Settings(settings_info) self.assertEqual(len(settings_4.get_errors()), 0) del settings_info['security'] del settings_info['sp'] del settings_info['idp'] try: settings_5 = OneLogin_Saml2_Settings(settings_info) self.assertNotEqual(len(settings_5.get_errors()), 0) except Exception as e: self.assertIn('Invalid dict settings', str(e)) self.assertIn('idp_not_found', str(e)) self.assertIn('sp_not_found', str(e)) settings_info = self.loadSettingsJSON() settings_info['security']['authnRequestsSigned'] = True settings_info['custom_base_path'] = dirname(__file__) try: settings_6 = OneLogin_Saml2_Settings(settings_info) self.assertNotEqual(len(settings_6.get_errors()), 0) except Exception as e: self.assertIn('Invalid dict settings: sp_cert_not_found_and_required', str(e)) settings_info = self.loadSettingsJSON() settings_info['security']['nameIdEncrypted'] = True del settings_info['idp']['x509cert'] try: settings_7 = OneLogin_Saml2_Settings(settings_info) self.assertNotEqual(len(settings_7.get_errors()), 0) except Exception as e: self.assertIn('Invalid dict settings: idp_cert_not_found_and_required', str(e)) def testLoadSettingsFromInvalidData(self): """ Tests the OneLogin_Saml2_Settings Constructor. Case load setting """ invalid_settings = ('param1', 'param2') try: OneLogin_Saml2_Settings(invalid_settings) self.assertTrue(False) except Exception as e: self.assertIn('Unsupported settings object', str(e)) settings = OneLogin_Saml2_Settings(custom_base_path=self.settings_path) self.assertEqual(len(settings.get_errors()), 0) def testLoadSettingsFromFile(self): """ Tests the OneLogin_Saml2_Settings Constructor. Case load setting from file """ custom_base_path = join(dirname(__file__), '..', '..', '..', 'settings') settings = OneLogin_Saml2_Settings(custom_base_path=custom_base_path) self.assertEqual(len(settings.get_errors()), 0) custom_base_path = dirname(__file__) try: OneLogin_Saml2_Settings(custom_base_path=custom_base_path) except Exception as e: self.assertIn('Settings file not found', str(e)) custom_base_path = join(dirname(__file__), '..', '..', '..', 'data', 'customPath') settings_3 = OneLogin_Saml2_Settings(custom_base_path=custom_base_path) self.assertEqual(len(settings_3.get_errors()), 0) def testGetCertPath(self): """ Tests getCertPath method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(custom_base_path=self.settings_path) self.assertEqual(self.settings_path + sep + 'certs' + sep, settings.get_cert_path()) def testSetCertPath(self): """ Tests setCertPath method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(custom_base_path=self.settings_path) self.assertEqual(self.settings_path + sep + 'certs' + sep, settings.get_cert_path()) settings.set_cert_path('/tmp') self.assertEqual('/tmp', settings.get_cert_path()) def testGetLibPath(self): """ Tests getLibPath method of the OneLogin_Saml2_Settings """ settingsInfo = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settingsInfo) path = settings.get_base_path() self.assertEqual(settings.get_lib_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/../../../tests/data/customPath/')) del settingsInfo['custom_base_path'] settings = OneLogin_Saml2_Settings(settingsInfo) path = settings.get_base_path() self.assertEqual(settings.get_lib_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/')) settings = OneLogin_Saml2_Settings(custom_base_path=self.settings_path) path = settings.get_base_path() self.assertEqual(settings.get_lib_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(__file__)))), 'settings/')) def testGetSchemasPath(self): """ Tests getSchemasPath method of the OneLogin_Saml2_Settings """ settingsInfo = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settingsInfo) path = settings.get_base_path() self.assertEqual(settings.get_schemas_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/schemas/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/../../../tests/data/customPath/')) del settingsInfo['custom_base_path'] settings = OneLogin_Saml2_Settings(settingsInfo) path = settings.get_base_path() self.assertEqual(settings.get_schemas_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/schemas/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/')) settings = OneLogin_Saml2_Settings(custom_base_path=self.settings_path) path = settings.get_base_path() self.assertEqual(settings.get_schemas_path(), join(dirname(dirname(dirname(dirname(dirname(__file__))))), 'src/onelogin/saml2/schemas/')) self.assertEqual(path, join(dirname(dirname(dirname(dirname(__file__)))), 'settings/')) def testGetIdPSSOurl(self): """ Tests the get_idp_sso_url method of the OneLogin_Saml2_Settings class """ settings_info = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_info) sso_url = settings_info['idp']['singleSignOnService']['url'] self.assertEqual(settings.get_idp_sso_url(), sso_url) def testGetIdPSLOurl(self): """ Tests the get_idp_slo_url method of the OneLogin_Saml2_Settings class """ settings_info = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_info) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertEqual(settings.get_idp_slo_url(), slo_url) def testGetIdPSLOresponseUrl(self): """ Tests the get_idp_slo_response_url method of the OneLogin_Saml2_Settings class """ settings_info = self.loadSettingsJSON() settings_info['idp']['singleLogoutService']['responseUrl'] = "http://idp.example.com/SingleLogoutReturn.php" settings = OneLogin_Saml2_Settings(settings_info) slo_url = settings_info['idp']['singleLogoutService']['responseUrl'] self.assertEqual(settings.get_idp_slo_response_url(), slo_url) # test that the function falls back to the url setting if responseUrl is not set settings_info['idp']['singleLogoutService'].pop('responseUrl') settings = OneLogin_Saml2_Settings(settings_info) slo_url = settings_info['idp']['singleLogoutService']['url'] self.assertEqual(settings.get_idp_slo_response_url(), slo_url) def testGetSPCert(self): """ Tests the get_sp_cert method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() cert = "-----BEGIN CERTIFICATE-----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\nQ4/67OZfHd7R+POBXhophSMv1ZOo\n-----END CERTIFICATE-----\n" settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert, settings.get_sp_cert()) cert_2 = "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" settings_data['sp']['x509cert'] = cert_2 settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert_2, settings.get_sp_cert()) del settings_data['sp']['x509cert'] del settings_data['custom_base_path'] custom_base_path = dirname(__file__) settings_3 = OneLogin_Saml2_Settings(settings_data, custom_base_path=custom_base_path) self.assertIsNone(settings_3.get_sp_cert()) def testGetSPCertNew(self): """ Tests the get_sp_cert_new method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() cert = "-----BEGIN CERTIFICATE-----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\nQ4/67OZfHd7R+POBXhophSMv1ZOo\n-----END CERTIFICATE-----\n" settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert, settings.get_sp_cert()) self.assertIsNone(settings.get_sp_cert_new()) settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings7.json')) cert_new = "-----BEGIN CERTIFICATE-----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\ndtm2nuZ+twSKqfKwjLdqcoX0p39h7Uw/\n-----END CERTIFICATE-----\n" self.assertEqual(cert, settings.get_sp_cert()) self.assertEqual(cert_new, settings.get_sp_cert_new()) def testGetSPKey(self): """ Tests the get_sp_key method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() key = "-----BEGIN RSA PRIVATE KEY-----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\nPQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aMg==\n-----END RSA PRIVATE KEY-----\n" settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(key, settings.get_sp_key()) key_2 = "-----BEGIN PRIVATE KEY-----\nMIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAOWA+YHU7cvPOrBO\nfxCscsYTJB+kH3MaA9BFrSHFS+KcR6cw7oPSktIJxUgvDpQbtfNcOkE/tuOPBDoe\nch7AXfvH6d7Bw7xtW8PPJ2mB5Hn/HGW2roYhxmfh3tR5SdwN6i4ERVF8eLkvwCHs\nNQyK2Ref0DAJvpBNZMHCpS24916/AgMBAAECgYEA0wDXZPS9hKqMTNh+nnfONioX\nBjhA6fQ7GVtWKDxa3ofMoPyt7ejGL/Hnvcv13Vn02UAsFx1bKrCstDqVtYwrWrnm\nywXyH+o9paJnTmd+cRIjWU8mRvCrxzH5I/Bcvbp1qZoASuqZEaGwNjM6JpW2o3QT\nmHGMALcLUPfEvhApssECQQDy2e65E86HcFhi/Ta8TQ0odDCNbiWA0bI1Iu8B7z+N\nAy1D1+WnCd7w2u9U6CF/k2nFHCsvxEoeANM0z7h5T/XvAkEA8e4JqKmDrfdiakQT\n7nf9svU2jXZtxSbPiIRMafNikDvzZ1vJCZkvdmaWYL70GlDZIwc9ad67rHZ/n/fq\nX1d0MQJAbRpRsJ5gY+KqItbFt3UaWzlP8sowWR5cZJjsLb9RmsV5mYguKYw6t5R0\nf33GRu1wUFimYlBaR/5w5MIJi57LywJATO1a5uWX+G5MPewNxmsjIY91XEAHIYR4\nwzkGLz5z3dciS4BVCZdLD0QJlxPA/MkuckPwFET9uhYn+M7VGKHvUQJBANSDwsY+\nBdCGpi/WRV37HUfwLl07damaFbW3h08PQx8G8SuF7DpN+FPBcI6VhzrIWNRBxWpr\nkgeGioKNfFWzSaM=\n-----END PRIVATE KEY-----\n" settings_data['sp']['privateKey'] = key_2 settings_2 = OneLogin_Saml2_Settings(settings_data) self.assertEqual(key_2, settings_2.get_sp_key()) del settings_data['sp']['privateKey'] del settings_data['custom_base_path'] custom_base_path = dirname(__file__) settings_3 = OneLogin_Saml2_Settings(settings_data, custom_base_path=custom_base_path) self.assertIsNone(settings_3.get_sp_key()) def testGetIDPCert(self): """ Tests the get_idp_cert method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings9.json')) cert = "-----BEGIN CERTIFICATE-----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\nQ4/67OZfHd7R+POBXhophSMv1ZOo\n-----END CERTIFICATE-----" self.assertEqual(cert, settings.get_idp_cert()) settings_data = self.loadSettingsJSON() settings = OneLogin_Saml2_Settings(settings_data) settings_data['idp']['x509cert'] = cert self.assertEqual(cert, settings.get_idp_cert()) del settings_data['idp']['x509cert'] del settings_data['custom_base_path'] custom_base_path = dirname(__file__) settings_3 = OneLogin_Saml2_Settings(settings_data, custom_base_path=custom_base_path) self.assertIsNone(settings_3.get_idp_cert()) def testFormatIdPCert(self): """ Tests the format_idp_cert method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() cert = "-----BEGIN CERTIFICATE-----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\nQ4/67OZfHd7R+POBXhophSMv1ZOo\n-----END CERTIFICATE-----\n" settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert, settings.get_idp_cert()) cert_2 = "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" settings_data['idp']['x509cert'] = cert_2 settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert_2, settings.get_idp_cert()) def testFormatSPCert(self): """ Tests the format_sp_cert method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() cert = "-----BEGIN CERTIFICATE-----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\nQ4/67OZfHd7R+POBXhophSMv1ZOo\n-----END CERTIFICATE-----\n" settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert, settings.get_sp_cert()) settings_data['sp']['x509cert'] = cert settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert, settings.get_sp_cert()) cert_2 = "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" settings_data['sp']['x509cert'] = cert_2 settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(cert_2, settings.get_sp_cert()) def testFormatSPKey(self): """ Tests the format_sp_key method of the OneLogin_Saml2_Settings """ settings_data = self.loadSettingsJSON() key = "-----BEGIN RSA PRIVATE KEY-----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\nPQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aMg==\n-----END RSA PRIVATE KEY-----\n" settings_data['sp']['privateKey'] = key settings = OneLogin_Saml2_Settings(settings_data) self.assertEqual(key, settings.get_sp_key()) key_2 = "-----BEGIN PRIVATE KEY-----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\nkgeGioKNfFWzSaM=\n-----END PRIVATE KEY-----\n" settings_data['sp']['privateKey'] = key_2 settings_2 = OneLogin_Saml2_Settings(settings_data) self.assertEqual(key_2, settings_2.get_sp_key()) def testCheckSPCerts(self): """ Tests the checkSPCerts method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) self.assertTrue(settings.check_sp_certs()) def testCheckSettings(self): """ Tests the checkSettings method of the OneLogin_Saml2_Settings The checkSettings method is private and is used at the constructor """ settings_info = {} try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('Invalid dict settings: invalid_syntax', str(e)) settings_info['strict'] = True try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('idp_not_found', str(e)) self.assertIn('sp_not_found', str(e)) settings_info['idp'] = {} settings_info['idp']['x509cert'] = '' settings_info['sp'] = {} settings_info['sp']['entityID'] = 'SPentityId' settings_info['security'] = {} settings_info['security']['signMetadata'] = False try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('idp_entityId_not_found', str(e)) self.assertIn('idp_sso_not_found', str(e)) self.assertIn('sp_entityId_not_found', str(e)) self.assertIn('sp_acs_not_found', str(e)) # AttributeConsumingService tests # serviceName, requestedAttributes are required settings_info['sp']['attributeConsumingService'] = { "serviceDescription": "Test Service" } try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('sp_attributeConsumingService_serviceName_not_found', str(e)) self.assertIn('sp_attributeConsumingService_requestedAttributes_not_found', str(e)) # requestedAttributes/name is required settings_info['sp']['attributeConsumingService'] = { "serviceName": {}, "serviceDescription": ["Test Service"], "requestedAttributes": [{ "nameFormat": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri", "friendlyName": "givenName", "isRequired": "False" } ] } try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('sp_attributeConsumingService_requestedAttributes_name_not_found', str(e)) self.assertIn('sp_attributeConsumingService_requestedAttributes_isRequired_type_invalid', str(e)) self.assertIn('sp_attributeConsumingService_serviceDescription_type_invalid', str(e)) self.assertIn('sp_attributeConsumingService_serviceName_type_invalid', str(e)) settings_info['idp']['entityID'] = 'entityId' settings_info['idp']['singleSignOnService'] = {} settings_info['idp']['singleSignOnService']['url'] = 'invalid_value' settings_info['idp']['singleLogoutService'] = {} settings_info['idp']['singleLogoutService']['url'] = 'invalid_value' settings_info['sp']['assertionConsumerService'] = {} settings_info['sp']['assertionConsumerService']['url'] = 'invalid_value' settings_info['sp']['singleLogoutService'] = {} settings_info['sp']['singleLogoutService']['url'] = 'invalid_value' try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('idp_sso_url_invalid', str(e)) self.assertIn('idp_slo_url_invalid', str(e)) self.assertIn('sp_acs_url_invalid', str(e)) self.assertIn('sp_sls_url_invalid', str(e)) settings_info['security']['wantAssertionsSigned'] = True try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('idp_cert_or_fingerprint_not_found_and_required', str(e)) settings_info = self.loadSettingsJSON() settings_info['security']['signMetadata'] = {} settings_info['security']['signMetadata']['keyFileName'] = 'metadata.key' settings_info['organization'] = { 'en-US': { 'name': 'miss_information' } } settings_info['contactPerson'] = { 'support': { 'givenName': 'support_name' }, 'auxiliar': { 'givenName': 'auxiliar_name', 'emailAddress': 'auxiliar@example.com' } } try: OneLogin_Saml2_Settings(settings_info) self.assertTrue(False) except Exception as e: self.assertIn('sp_signMetadata_invalid', str(e)) self.assertIn('organization_not_enought_data', str(e)) self.assertIn('contact_type_invalid', str(e)) def testGetSPMetadata(self): """ Tests the getSPMetadata method of the OneLogin_Saml2_Settings Case unsigned metadata """ settings_info = self.loadSettingsJSON() settings_info['security']['wantNameIdEncrypted'] = False settings_info['security']['wantAssertionsEncrypted'] = False settings = OneLogin_Saml2_Settings(settings_info) metadata = compat.to_string(settings.get_sp_metadata()) self.assertNotEqual(len(metadata), 0) self.assertIn('', metadata) self.assertIn('', metadata) self.assertIn('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', metadata) self.assertEqual(1, metadata.count('', metadata) self.assertIn('', metadata) self.assertIn('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', metadata) self.assertIn('\n', metadata) self.assertIn('', metadata) self.assertIn('\n\n', metadata) def testGetSPMetadataSignedNoMetadataCert(self): """ Tests the getSPMetadata method of the OneLogin_Saml2_Settings Case signed metadata with specific certs """ settings_info = self.loadSettingsJSON() if 'security' not in settings_info: settings_info['security'] = {} settings_info['security']['signMetadata'] = {} with self.assertRaises(Exception) as context: OneLogin_Saml2_Settings(settings_info) exception = context.exception self.assertIn("sp_signMetadata_invalid", str(exception)) settings_info['security']['signMetadata'] = { 'keyFileName': 'noexist.key', 'certFileName': 'sp.crt' } settings = OneLogin_Saml2_Settings(settings_info) with self.assertRaises(Exception) as context: settings.get_sp_metadata() exception = context.exception self.assertIn("Private key file not readable", str(exception)) settings_info['security']['signMetadata'] = { 'keyFileName': 'sp.key', 'certFileName': 'noexist.crt' } settings = OneLogin_Saml2_Settings(settings_info) with self.assertRaises(Exception) as context: settings.get_sp_metadata() exception = context.exception self.assertIn("Public cert file not readable", str(exception)) settings_info['security']['signMetadata'] = 'invalid_value' settings = OneLogin_Saml2_Settings(settings_info) with self.assertRaises(Exception) as context: settings.get_sp_metadata() exception = context.exception self.assertIn("Invalid Setting: signMetadata value of the sp is not valid", str(exception)) def testValidateMetadata(self): """ Tests the validateMetadata method of the OneLogin_Saml2_Settings Case valid metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) metadata = settings.get_sp_metadata() self.assertEqual(len(settings.validate_metadata(metadata)), 0) xml = self.file_contents(join(self.data_path, 'metadata', 'metadata_settings1.xml')) self.assertEqual(len(settings.validate_metadata(xml)), 0) xml_2 = 'invalid' self.assertIn('invalid_xml', settings.validate_metadata(xml_2)) xml_3 = self.file_contents(join(self.data_path, 'metadata', 'entities_metadata.xml')) self.assertIn('noEntityDescriptor_xml', settings.validate_metadata(xml_3)) xml_4 = self.file_contents(join(self.data_path, 'metadata', 'idp_metadata.xml')) self.assertIn('onlySPSSODescriptor_allowed_xml', settings.validate_metadata(xml_4)) xml_5 = self.file_contents(join(self.data_path, 'metadata', 'no_expiration_mark_metadata.xml')) self.assertEqual(len(settings.validate_metadata(xml_5)), 0) def testValidateMetadataExpired(self): """ Tests the validateMetadata method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) metadata = self.file_contents(join(self.data_path, 'metadata', 'expired_metadata_settings1.xml')) errors = settings.validate_metadata(metadata) self.assertNotEqual(len(metadata), 0) self.assertIn('expired_xml', errors) def testValidateMetadataNoXML(self): """ Tests the validateMetadata method of the OneLogin_Saml2_Settings Case no metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) metadata = '' with self.assertRaises(Exception) as context: settings.validate_metadata(metadata) exception = context.exception self.assertIn("t", str(exception)) metadata = '' errors = settings.validate_metadata(metadata) self.assertNotEqual(len(errors), 0) self.assertIn('unloaded_xml', errors) def testValidateMetadataNoEntity(self): """ Tests the validateMetadata method of the OneLogin_Saml2_Settings Case invalid xml metadata """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) metadata = self.file_contents(join(self.data_path, 'metadata', 'noentity_metadata_settings1.xml')) errors = settings.validate_metadata(metadata) self.assertNotEqual(len(metadata), 0) self.assertIn('invalid_xml', errors) def testGetIdPData(self): """ Tests the getIdPData method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) idp_data = settings.get_idp_data() self.assertNotEqual(len(idp_data), 0) self.assertIn('entityId', idp_data) self.assertIn('singleSignOnService', idp_data) self.assertIn('singleLogoutService', idp_data) self.assertIn('x509cert', idp_data) self.assertEqual('http://idp.example.com/', idp_data['entityId']) self.assertEqual('http://idp.example.com/SSOService.php', idp_data['singleSignOnService']['url']) self.assertEqual('http://idp.example.com/SingleLogoutService.php', idp_data['singleLogoutService']['url']) x509cert = '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' formated_x509_cert = OneLogin_Saml2_Utils.format_cert(x509cert) self.assertEqual(formated_x509_cert, idp_data['x509cert']) def testGetSPData(self): """ Tests the getSPData method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) sp_data = settings.get_sp_data() self.assertNotEqual(len(sp_data), 0) self.assertIn('entityId', sp_data) self.assertIn('assertionConsumerService', sp_data) self.assertIn('singleLogoutService', sp_data) self.assertIn('NameIDFormat', sp_data) self.assertEqual('http://stuff.com/endpoints/metadata.php', sp_data['entityId']) self.assertEqual('http://stuff.com/endpoints/endpoints/acs.php', sp_data['assertionConsumerService']['url']) self.assertEqual('http://stuff.com/endpoints/endpoints/sls.php', sp_data['singleLogoutService']['url']) self.assertEqual('urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', sp_data['NameIDFormat']) def testGetSecurityData(self): """ Tests the getSecurityData method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) security = settings.get_security_data() self.assertNotEqual(len(security), 0) self.assertIn('nameIdEncrypted', security) self.assertIn('authnRequestsSigned', security) self.assertIn('logoutRequestSigned', security) self.assertIn('logoutResponseSigned', security) self.assertIn('signMetadata', security) self.assertIn('wantMessagesSigned', security) self.assertIn('wantAssertionsSigned', security) self.assertIn('requestedAuthnContext', security) self.assertIn('wantNameId', security) self.assertIn('wantNameIdEncrypted', security) def testGetDefaultSecurityValues(self): """ Tests default values of Security advanced sesettings """ settings_json = self.loadSettingsJSON() del settings_json['security'] settings = OneLogin_Saml2_Settings(settings_json) security = settings.get_security_data() self.assertIn('nameIdEncrypted', security) self.assertFalse(security.get('nameIdEncrypted')) self.assertIn('authnRequestsSigned', security) self.assertFalse(security.get('authnRequestsSigned')) self.assertIn('logoutRequestSigned', security) self.assertFalse(security.get('logoutRequestSigned')) self.assertIn('logoutResponseSigned', security) self.assertFalse(security.get('logoutResponseSigned')) self.assertIn('signMetadata', security) self.assertFalse(security.get('signMetadata')) self.assertIn('wantMessagesSigned', security) self.assertFalse(security.get('wantMessagesSigned')) self.assertIn('wantAssertionsSigned', security) self.assertFalse(security.get('wantAssertionsSigned')) self.assertIn('requestedAuthnContext', security) self.assertTrue(security.get('requestedAuthnContext')) self.assertIn('wantNameId', security) self.assertTrue(security.get('wantNameId')) self.assertIn('wantNameIdEncrypted', security) self.assertFalse(security.get('wantNameIdEncrypted')) def testGetContacts(self): """ Tests the getContacts method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) contacts = settings.get_contacts() self.assertNotEqual(len(contacts), 0) self.assertEqual('technical_name', contacts['technical']['givenName']) self.assertEqual('technical@example.com', contacts['technical']['emailAddress']) self.assertEqual('support_name', contacts['support']['givenName']) self.assertEqual('support@example.com', contacts['support']['emailAddress']) def testGetOrganization(self): """ Tests the getOrganization method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) organization = settings.get_organization() self.assertNotEqual(len(organization), 0) self.assertEqual('sp_test', organization['en-US']['name']) self.assertEqual('SP test', organization['en-US']['displayname']) self.assertEqual('http://sp.example.com', organization['en-US']['url']) def testSetStrict(self): """ Tests the setStrict method of the OneLogin_Saml2_Settings """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) self.assertFalse(settings.is_strict()) settings.set_strict(True) self.assertTrue(settings.is_strict()) settings.set_strict(False) self.assertFalse(settings.is_strict()) self.assertRaises(AssertionError, settings.set_strict, 'a') def testIsStrict(self): """ Tests the isStrict method of the OneLogin_Saml2_Settings """ settings_info = self.loadSettingsJSON() del settings_info['strict'] settings = OneLogin_Saml2_Settings(settings_info) self.assertTrue(settings.is_strict()) settings_info['strict'] = False settings_2 = OneLogin_Saml2_Settings(settings_info) self.assertFalse(settings_2.is_strict()) settings_info['strict'] = True settings_3 = OneLogin_Saml2_Settings(settings_info) self.assertTrue(settings_3.is_strict()) def testIsDebugActive(self): """ Tests the isDebugActive method of the OneLogin_Saml2_Settings """ settings_info = self.loadSettingsJSON() del settings_info['debug'] settings = OneLogin_Saml2_Settings(settings_info) self.assertFalse(settings.is_debug_active()) settings_info['debug'] = False settings_2 = OneLogin_Saml2_Settings(settings_info) self.assertFalse(settings_2.is_debug_active()) settings_info['debug'] = True settings_3 = OneLogin_Saml2_Settings(settings_info) self.assertTrue(settings_3.is_debug_active()) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/signed_response_test.py000066400000000000000000000036401451074743100266510ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json from os.path import dirname, join, exists import unittest from onelogin.saml2.response import OneLogin_Saml2_Response from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils class OneLogin_Saml2_SignedResponse_Test(unittest.TestCase): data_path = join(dirname(__file__), '..', '..', '..', 'data') def loadSettingsJSON(self): filename = join(dirname(__file__), '..', '..', '..', 'settings', 'settings1.json') if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testResponseSignedAssertionNot(self): """ Tests the getNameId method of the OneLogin_Saml2_Response Case valid signed response, unsigned assertion """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'open_saml_response.xml')) response = OneLogin_Saml2_Response(settings, OneLogin_Saml2_Utils.b64encode(message)) self.assertEqual('someone@example.org', response.get_nameid()) def testResponseAndAssertionSigned(self): """ Tests the getNameId method of the OneLogin_Saml2_Response Case valid signed response, signed assertion """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) message = self.file_contents(join(self.data_path, 'responses', 'simple_saml_php.xml')) response = OneLogin_Saml2_Response(settings, OneLogin_Saml2_Utils.b64encode(message)) self.assertEqual('someone@example.com', response.get_nameid()) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/utils_test.py000066400000000000000000001372031451074743100246250ustar00rootroot00000000000000# -*- coding: utf-8 -*- from base64 import b64decode import json from lxml import etree from os.path import dirname, join, exists import unittest from xml.dom.minidom import parseString from onelogin.saml2 import compat from onelogin.saml2.constants import OneLogin_Saml2_Constants from onelogin.saml2.settings import OneLogin_Saml2_Settings from onelogin.saml2.utils import OneLogin_Saml2_Utils from onelogin.saml2.xmlparser import fromstring class OneLogin_Saml2_Utils_Test(unittest.TestCase): data_path = join(dirname(dirname(dirname(dirname(__file__)))), 'data') settings_path = join(dirname(dirname(dirname(dirname(__file__)))), 'settings') # assertRegexpMatches deprecated on python3 def assertRaisesRegex(self, exception, regexp, msg=None): if hasattr(unittest.TestCase, 'assertRaisesRegex'): return super(OneLogin_Saml2_Utils_Test, self).assertRaisesRegex(exception, regexp, msg=msg) else: return self.assertRaisesRegexp(exception, regexp) def loadSettingsJSON(self, name='settings1.json'): filename = join(self.settings_path, name) if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testFormatCert(self): """ Tests the format_cert method of the OneLogin_Saml2_Utils """ settings_info = self.loadSettingsJSON() cert = settings_info['idp']['x509cert'] self.assertNotIn('-----BEGIN CERTIFICATE-----', cert) self.assertNotIn('-----END CERTIFICATE-----', cert) self.assertEqual(len(cert), 860) formated_cert1 = OneLogin_Saml2_Utils.format_cert(cert) self.assertIn('-----BEGIN CERTIFICATE-----', formated_cert1) self.assertIn('-----END CERTIFICATE-----', formated_cert1) formated_cert2 = OneLogin_Saml2_Utils.format_cert(cert, True) self.assertEqual(formated_cert1, formated_cert2) formated_cert3 = OneLogin_Saml2_Utils.format_cert(cert, False) self.assertNotIn('-----BEGIN CERTIFICATE-----', formated_cert3) self.assertNotIn('-----END CERTIFICATE-----', formated_cert3) self.assertEqual(len(formated_cert3), 860) def testFormatPrivateKey(self): """ Tests the format_private_key method of the OneLogin_Saml2_Utils """ key = "-----BEGIN RSA PRIVATE KEY-----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\nPQnYaNUN/Fy2SYtETXTb0CQ9X1rt8ffkFP7ya+5TC83aMg==\n-----END RSA PRIVATE KEY-----\n" formated_key = OneLogin_Saml2_Utils.format_private_key(key, True) self.assertIn('-----BEGIN RSA PRIVATE KEY-----', formated_key) self.assertIn('-----END RSA PRIVATE KEY-----', formated_key) self.assertEqual(len(formated_key), 891) formated_key = OneLogin_Saml2_Utils.format_private_key(key, False) self.assertNotIn('-----BEGIN RSA PRIVATE KEY-----', formated_key) self.assertNotIn('-----END RSA PRIVATE KEY-----', formated_key) self.assertEqual(len(formated_key), 816) key_2 = "-----BEGIN PRIVATE KEY-----\nMIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAM62buSW9Zgh7CmZ\nouJekK0ac9sgEZkspemjv7SyE6Hbdz+KmUr3C7MI6JuPfVyJbxvMDf3FbgBBK7r5\nyfGgehXwplLMZj8glvV3NkdLMLPWmaw9U5sOzRoym46pVvsEo1PUL2qDK5Wrsm1g\nuY1KIDSHL59NQ7PzDKgm1dxioeXFAgMBAAECgYA/fvRzTReloo3rfWD2Tfv84EpE\nPgaJ2ZghO4Zwl97F8icgIo/R4i760Lq6xgnI+gJiNHz7vcB7XYl0RrRMf3HgbA7z\npJxREmOVltESDHy6lH0TmCdv9xMmHltB+pbGOhqBvuGgFbEOR73lDDV0ln2rEITJ\nA2zjYF+hWe8b0JFeQQJBAOsIIIlHAMngjhCQDD6kla/vce972gCFU7ZeFw16ZMmb\n8W4rGRfQoQWYxSLAFIFsYewSBTccanyYbBNe3njki3ECQQDhJ4cgV6VpTwez4dkp\nU/xCHKoReedAEJhXucTNGpiIqu+TDgIz9aRbrgnUKkS1s06UJhcDRTl/+pCSRRt/\nCA2VAkBkPw4pn1hNwvK1S8t9OJQD+5xcKjZcvIFtKoqonAi7GUGL3OQSDVFw4q1K\n2iSk40aM+06wJ/WfeR+3z2ISrGBxAkAJ20YiF1QpcQlASbHNCl0vs7uKOlDyUAer\nR3mjFPf6e6kzQdi815MTZGIPxK3vWmMlPymgvgYPYTO1A4t5myulAkEA1QioAWcJ\noO26qhUlFRBCR8BMJoVPImV7ndVHE7usHdJvP7V2P9RyuRcMCTVul8RRmyoh/+yG\n4ghMaHo/v0YY5Q==\n-----END PRIVATE KEY-----\n" formated_key_2 = OneLogin_Saml2_Utils.format_private_key(key_2, True) self.assertIn('-----BEGIN PRIVATE KEY-----', formated_key_2) self.assertIn('-----END PRIVATE KEY-----', formated_key_2) self.assertEqual(len(formated_key_2), 916) formated_key_2 = OneLogin_Saml2_Utils.format_private_key(key_2, False) self.assertNotIn('-----BEGIN PRIVATE KEY-----', formated_key_2) self.assertNotIn('-----END PRIVATE KEY-----', formated_key_2) self.assertEqual(len(formated_key_2), 848) key_3 = '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' formated_key_3 = OneLogin_Saml2_Utils.format_private_key(key_3, True) self.assertIn('-----BEGIN RSA PRIVATE KEY-----', formated_key_3) self.assertIn('-----END RSA PRIVATE KEY-----', formated_key_3) self.assertEqual(len(formated_key_3), 924) formated_key_3 = OneLogin_Saml2_Utils.format_private_key(key_3, False) self.assertNotIn('-----BEGIN PRIVATE KEY-----', formated_key_3) self.assertNotIn('-----END PRIVATE KEY-----', formated_key_3) self.assertNotIn('-----BEGIN RSA PRIVATE KEY-----', formated_key_3) self.assertNotIn('-----END RSA PRIVATE KEY-----', formated_key_3) self.assertEqual(len(formated_key_3), 848) def testRedirect(self): """ Tests the redirect method of the OneLogin_Saml2_Utils """ request_data = { 'http_host': 'example.com' } # Check relative and absolute hostname = OneLogin_Saml2_Utils.get_self_host(request_data) url = 'http://%s/example' % hostname url2 = '/example' target_url = OneLogin_Saml2_Utils.redirect(url, {}, request_data) target_url2 = OneLogin_Saml2_Utils.redirect(url2, {}, request_data) self.assertEqual(target_url, target_url2) # Check that accept http/https and reject other protocols url3 = 'https://%s/example?test=true' % hostname url4 = 'ftp://%s/example' % hostname target_url3 = OneLogin_Saml2_Utils.redirect(url3, {}, request_data) self.assertIn('test=true', target_url3) with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.redirect(url4, {}, request_data) exception = context.exception self.assertIn("Redirect to invalid URL", str(exception)) # Review parameter prefix parameters1 = { 'value1': 'a' } target_url5 = OneLogin_Saml2_Utils.redirect(url, parameters1, request_data) self.assertEqual('http://%s/example?value1=a' % hostname, target_url5) target_url6 = OneLogin_Saml2_Utils.redirect(url3, parameters1, request_data) self.assertEqual('https://%s/example?test=true&value1=a' % hostname, target_url6) # Review parameters parameters2 = { 'alphavalue': 'a', 'numvaluelist': ['1', '2'], 'testing': None } target_url7 = OneLogin_Saml2_Utils.redirect(url, parameters2, request_data) parameters2_decoded = {"alphavalue": "alphavalue=a", "numvaluelist": "numvaluelist[]=1&numvaluelist[]=2", "testing": "testing"} parameters2_str = "&".join(parameters2_decoded[x] for x in parameters2) self.assertEqual('http://%s/example?%s' % (hostname, parameters2_str), target_url7) parameters3 = { 'alphavalue': 'a', 'emptynumvaluelist': [], 'numvaluelist': [''], } parameters3_decoded = {"alphavalue": "alphavalue=a", "numvaluelist": "numvaluelist[]="} parameters3_str = "&".join((parameters3_decoded[x] for x in parameters3.keys() if x in parameters3_decoded)) target_url8 = OneLogin_Saml2_Utils.redirect(url, parameters3, request_data) self.assertEqual('http://%s/example?%s' % (hostname, parameters3_str), target_url8) def testGetselfhost(self): """ Tests the get_self_host method of the OneLogin_Saml2_Utils """ request_data = {} with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.get_self_url_host(request_data) exception = context.exception self.assertIn("No hostname defined", str(exception)) request_data = { 'server_name': 'example.com' } self.assertEqual('example.com', OneLogin_Saml2_Utils.get_self_host(request_data)) request_data = { 'http_host': 'example.com' } self.assertEqual('example.com', OneLogin_Saml2_Utils.get_self_host(request_data)) request_data = { 'http_host': 'example.com:443' } self.assertEqual('example.com:443', OneLogin_Saml2_Utils.get_self_host(request_data)) request_data = { 'http_host': 'example.com:ok' } self.assertEqual('example.com:ok', OneLogin_Saml2_Utils.get_self_host(request_data)) def testisHTTPS(self): """ Tests the is_https method of the OneLogin_Saml2_Utils """ request_data = { 'https': 'off' } self.assertFalse(OneLogin_Saml2_Utils.is_https(request_data)) request_data = { 'https': 'on' } self.assertTrue(OneLogin_Saml2_Utils.is_https(request_data)) request_data = { 'server_port': '443' } self.assertTrue(OneLogin_Saml2_Utils.is_https(request_data)) def testGetSelfURLhost(self): """ Tests the get_self_url_host method of the OneLogin_Saml2_Utils """ request_data = { 'http_host': 'example.com' } self.assertEqual('http://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['server_port'] = '80' self.assertEqual('http://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['server_port'] = '81' self.assertEqual('http://example.com:81', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['server_port'] = '443' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) del request_data['server_port'] request_data['https'] = 'on' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['server_port'] = '444' self.assertEqual('https://example.com:444', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['server_port'] = '443' request_data['request_uri'] = '' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['request_uri'] = '/' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['request_uri'] = 'onelogin/' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['request_uri'] = '/onelogin' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data['request_uri'] = 'https://example.com/onelogin/sso' self.assertEqual('https://example.com', OneLogin_Saml2_Utils.get_self_url_host(request_data)) request_data2 = { 'request_uri': 'example.com/onelogin/sso' } with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.get_self_url_host(request_data2) exception = context.exception self.assertIn("No hostname defined", str(exception)) def testGetSelfURL(self): """ Tests the get_self_url method of the OneLogin_Saml2_Utils """ request_data = { 'http_host': 'example.com' } url = OneLogin_Saml2_Utils.get_self_url_host(request_data) self.assertEqual(url, OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '' self.assertEqual(url, OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '/' self.assertEqual(url + '/', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = 'index.html' self.assertEqual(url + 'index.html', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '?index.html' self.assertEqual(url + '?index.html', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '/index.html' self.assertEqual(url + '/index.html', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '/index.html?testing' self.assertEqual(url + '/index.html?testing', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = '/test/index.html?testing' self.assertEqual(url + '/test/index.html?testing', OneLogin_Saml2_Utils.get_self_url(request_data)) request_data['request_uri'] = 'https://example.com/testing' self.assertEqual(url + '/testing', OneLogin_Saml2_Utils.get_self_url(request_data)) def testGetSelfURLNoQuery(self): """ Tests the get_self_url_no_query method of the OneLogin_Saml2_Utils """ request_data = { 'http_host': 'example.com', 'script_name': '/index.html' } url = OneLogin_Saml2_Utils.get_self_url_host(request_data) + request_data['script_name'] self.assertEqual(url, OneLogin_Saml2_Utils.get_self_url_no_query(request_data)) request_data['path_info'] = '/test' self.assertEqual(url + '/test', OneLogin_Saml2_Utils.get_self_url_no_query(request_data)) def testGetSelfRoutedURLNoQuery(self): """ Tests the get_self_routed_url_no_query method of the OneLogin_Saml2_Utils """ request_data = { 'http_host': 'example.com', 'request_uri': '/example1/route?x=test', 'query_string': '?x=test' } url = OneLogin_Saml2_Utils.get_self_url_host(request_data) + '/example1/route' self.assertEqual(url, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data)) request_data_2 = { 'http_host': 'example.com', 'request_uri': '', } url_2 = OneLogin_Saml2_Utils.get_self_url_host(request_data_2) self.assertEqual(url_2, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data_2)) request_data_3 = { 'http_host': 'example.com', } url_3 = OneLogin_Saml2_Utils.get_self_url_host(request_data_3) self.assertEqual(url_3, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data_3)) request_data_4 = { 'http_host': 'example.com', 'request_uri': '/example1/route/test/', 'query_string': '?invalid=1' } url_4 = OneLogin_Saml2_Utils.get_self_url_host(request_data_4) + '/example1/route/test/' self.assertEqual(url_4, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data_4)) request_data_5 = { 'http_host': 'example.com', 'request_uri': '/example1/route/test/', 'query_string': '' } url_5 = OneLogin_Saml2_Utils.get_self_url_host(request_data_5) + '/example1/route/test/' self.assertEqual(url_5, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data_5)) request_data_6 = { 'http_host': 'example.com', 'request_uri': '/example1/route/test/', } url_6 = OneLogin_Saml2_Utils.get_self_url_host(request_data_6) + '/example1/route/test/' self.assertEqual(url_6, OneLogin_Saml2_Utils.get_self_routed_url_no_query(request_data_6)) def testGetStatus(self): """ Gets the status of a message """ xml = self.file_contents(join(self.data_path, 'responses', 'response1.xml.base64')) xml = b64decode(xml) dom = etree.fromstring(xml) status = OneLogin_Saml2_Utils.get_status(dom) self.assertEqual(OneLogin_Saml2_Constants.STATUS_SUCCESS, status['code']) xml2 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'status_code_responder.xml.base64')) xml2 = b64decode(xml2) dom2 = etree.fromstring(xml2) status2 = OneLogin_Saml2_Utils.get_status(dom2) self.assertEqual(OneLogin_Saml2_Constants.STATUS_RESPONDER, status2['code']) self.assertEqual('', status2['msg']) xml3 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'status_code_responer_and_msg.xml.base64')) xml3 = b64decode(xml3) dom3 = etree.fromstring(xml3) status3 = OneLogin_Saml2_Utils.get_status(dom3) self.assertEqual(OneLogin_Saml2_Constants.STATUS_RESPONDER, status3['code']) self.assertEqual('something_is_wrong', status3['msg']) xml_inv = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_status.xml.base64')) xml_inv = b64decode(xml_inv) dom_inv = etree.fromstring(xml_inv) with self.assertRaisesRegex(Exception, 'Missing Status on response'): OneLogin_Saml2_Utils.get_status(dom_inv) xml_inv2 = self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_status_code.xml.base64')) xml_inv2 = b64decode(xml_inv2) dom_inv2 = etree.fromstring(xml_inv2) with self.assertRaisesRegex(Exception, 'Missing Status Code on response'): OneLogin_Saml2_Utils.get_status(dom_inv2) def testParseDuration(self): """ Tests the parse_duration method of the OneLogin_Saml2_Utils """ duration = 'PT1393462294S' timestamp = 1393876825 parsed_duration = OneLogin_Saml2_Utils.parse_duration(duration, timestamp) self.assertEqual(2787339119, parsed_duration) parsed_duration_2 = OneLogin_Saml2_Utils.parse_duration(duration) self.assertTrue(parsed_duration_2 > parsed_duration) invalid_duration = 'PT1Y' with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.parse_duration(invalid_duration) exception = context.exception self.assertIn("Unrecognised ISO 8601 date format", str(exception)) new_duration = 'P1Y1M' parsed_duration_4 = OneLogin_Saml2_Utils.parse_duration(new_duration, timestamp) self.assertEqual(1428091225, parsed_duration_4) neg_duration = '-P14M' parsed_duration_5 = OneLogin_Saml2_Utils.parse_duration(neg_duration, timestamp) self.assertEqual(1357243225, parsed_duration_5) def testParseSAML2Time(self): """ Tests the parse_SAML_to_time method of the OneLogin_Saml2_Utils """ time = 1386650371 saml_time = '2013-12-10T04:39:31Z' self.assertEqual(time, OneLogin_Saml2_Utils.parse_SAML_to_time(saml_time)) with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.parse_SAML_to_time('invalidSAMLTime') exception = context.exception self.assertIn("does not match format", str(exception)) # Now test if toolkit supports miliseconds saml_time2 = '2013-12-10T04:39:31.120Z' self.assertEqual(time, OneLogin_Saml2_Utils.parse_SAML_to_time(saml_time2)) # Now test if toolkit supports microseconds saml_time3 = '2013-12-10T04:39:31.120240Z' self.assertEqual(time, OneLogin_Saml2_Utils.parse_SAML_to_time(saml_time3)) # Now test if toolkit supports nanoseconds saml_time4 = '2013-12-10T04:39:31.120240360Z' self.assertEqual(time, OneLogin_Saml2_Utils.parse_SAML_to_time(saml_time4)) def testParseTime2SAML(self): """ Tests the parse_time_to_SAML method of the OneLogin_Saml2_Utils """ time = 1386650371 saml_time = '2013-12-10T04:39:31Z' self.assertEqual(saml_time, OneLogin_Saml2_Utils.parse_time_to_SAML(time)) with self.assertRaises(Exception) as context: OneLogin_Saml2_Utils.parse_time_to_SAML('invalidtime') exception = context.exception self.assertIn("could not convert string to float", str(exception)) def testGetExpireTime(self): """ Tests the get_expire_time method of the OneLogin_Saml2_Utils """ self.assertEqual(None, OneLogin_Saml2_Utils.get_expire_time()) self.assertNotEqual(None, OneLogin_Saml2_Utils.get_expire_time('PT360000S')) self.assertEqual('1291955971', OneLogin_Saml2_Utils.get_expire_time('PT360000S', '2010-12-10T04:39:31Z')) self.assertEqual('1291955971', OneLogin_Saml2_Utils.get_expire_time('PT360000S', 1291955971)) self.assertNotEqual('3311642371', OneLogin_Saml2_Utils.get_expire_time('PT360000S', '2074-12-10T04:39:31Z')) self.assertNotEqual('3311642371', OneLogin_Saml2_Utils.get_expire_time('PT360000S', 1418186371)) def _generate_name_id_element(self, name_qualifier): name_id_value = 'value' entity_id = 'sp-entity-id' name_id_format = 'name-id-format' raw_name_id = OneLogin_Saml2_Utils.generate_name_id( name_id_value, entity_id, name_id_format, nq=name_qualifier, ) parser = etree.XMLParser(recover=True) return etree.fromstring(raw_name_id, parser) def testNameidGenerationIncludesNameQualifierAttribute(self): """ Tests the inclusion of NameQualifier in the generateNameId method of the OneLogin_Saml2_Utils """ idp_name_qualifier = 'idp-name-qualifier' idp_name_qualifier_attribute = ('NameQualifier', idp_name_qualifier) name_id = self._generate_name_id_element(idp_name_qualifier) self.assertIn(idp_name_qualifier_attribute, name_id.attrib.items()) def testNameidGenerationDoesNotIncludeNameQualifierAttribute(self): """ Tests the (not) inclusion of NameQualifier in the generateNameId method of the OneLogin_Saml2_Utils """ idp_name_qualifier = None not_expected_attribute = 'NameQualifier' name_id = self._generate_name_id_element(idp_name_qualifier) self.assertNotIn(not_expected_attribute, name_id.attrib.keys()) def testGenerateNameIdWithoutFormat(self): """ Tests the generateNameId method of the OneLogin_Saml2_Utils """ name_id_value = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' name_id_format = None name_id = OneLogin_Saml2_Utils.generate_name_id(name_id_value, None, name_id_format) expected_name_id = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' self.assertEqual(name_id, expected_name_id) def testGenerateNameIdWithSPNameQualifier(self): """ Tests the generateNameId method of the OneLogin_Saml2_Utils """ name_id_value = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' entity_id = 'http://stuff.com/endpoints/metadata.php' name_id_format = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified' name_id = OneLogin_Saml2_Utils.generate_name_id(name_id_value, entity_id, name_id_format) expected_name_id = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' self.assertEqual(expected_name_id, name_id) settings_info = self.loadSettingsJSON() x509cert = settings_info['idp']['x509cert'] key = OneLogin_Saml2_Utils.format_cert(x509cert) name_id_enc = OneLogin_Saml2_Utils.generate_name_id(name_id_value, entity_id, name_id_format, key) expected_name_id_enc = '\n\n\n\n\n\n' self.assertIn(expected_name_id_enc, name_id_enc) def testGenerateNameIdWithoutSPNameQualifier(self): """ Tests the generateNameId method of the OneLogin_Saml2_Utils """ name_id_value = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' name_id_format = 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified' name_id = OneLogin_Saml2_Utils.generate_name_id(name_id_value, None, name_id_format) expected_name_id = 'ONELOGIN_ce998811003f4e60f8b07a311dc641621379cfde' self.assertEqual(expected_name_id, name_id) settings_info = self.loadSettingsJSON() x509cert = settings_info['idp']['x509cert'] key = OneLogin_Saml2_Utils.format_cert(x509cert) name_id_enc = OneLogin_Saml2_Utils.generate_name_id(name_id_value, None, name_id_format, key) expected_name_id_enc = '\n\n\n\n\n\n' self.assertIn(expected_name_id_enc, name_id_enc) def testCalculateX509Fingerprint(self): """ Tests the calculateX509Fingerprint method of the OneLogin_Saml2_Utils """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) cert_path = settings.get_cert_path() key = self.file_contents(cert_path + 'sp.key') cert = self.file_contents(cert_path + 'sp.crt') self.assertEqual(None, OneLogin_Saml2_Utils.calculate_x509_fingerprint(key)) self.assertEqual('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert)) self.assertEqual('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert, 'sha1')) self.assertEqual('c51cfa06c7a49767f6eab18238eae1c56708e29264da3d11f538a12cd2c357ba', OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert, 'sha256')) self.assertEqual('bc5826e6f9429247254bae5e3c650e6968a36a62d23075eb168134978d88600559c10830c28711b2c29c7947c0c2eb1d', OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert, 'sha384')) self.assertEqual('3db29251b97559c67988ea0754cb0573fc409b6f75d89282d57cfb75089539b0bbdb2dcd9ec6e032549ecbc466439d5992e18db2cf5494ca2fe1b2e16f348dff', OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert, 'sha512')) def testDeleteLocalSession(self): """ Tests the delete_local_session method of the OneLogin_Saml2_Utils """ global local_session_test local_session_test = 1 OneLogin_Saml2_Utils.delete_local_session() self.assertEqual(1, local_session_test) dscb = lambda: self.session_cear() OneLogin_Saml2_Utils.delete_local_session(dscb) self.assertEqual(0, local_session_test) def session_cear(self): """ Auxiliar method to test the delete_local_session method of the OneLogin_Saml2_Utils """ global local_session_test local_session_test = 0 def testFormatFingerPrint(self): """ Tests the format_finger_print method of the OneLogin_Saml2_Utils """ finger_print_1 = 'AF:E7:1C:28:EF:74:0B:C8:74:25:BE:13:A2:26:3D:37:97:1D:A1:F9' self.assertEqual('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils.format_finger_print(finger_print_1)) finger_print_2 = 'afe71c28ef740bc87425be13a2263d37971da1f9' self.assertEqual('afe71c28ef740bc87425be13a2263d37971da1f9', OneLogin_Saml2_Utils.format_finger_print(finger_print_2)) def testDecryptElement(self): """ Tests the decrypt_element method of the OneLogin_Saml2_Utils """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() xml_nameid_enc = b64decode(self.file_contents(join(self.data_path, 'responses', 'response_encrypted_nameid.xml.base64'))) dom_nameid_enc = etree.fromstring(xml_nameid_enc) encrypted_nameid_nodes = dom_nameid_enc.find('.//saml:EncryptedID', namespaces=OneLogin_Saml2_Constants.NSMAP) encrypted_data = encrypted_nameid_nodes[0] decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key) self.assertEqual('saml:NameID', decrypted_nameid.tag) self.assertEqual('2de11defd199f8d5bb63f9b7deb265ba5c675c10', decrypted_nameid.text) xml_assertion_enc = b64decode(self.file_contents(join(self.data_path, 'responses', 'valid_encrypted_assertion_encrypted_nameid.xml.base64'))) dom_assertion_enc = etree.fromstring(xml_assertion_enc) encrypted_assertion_enc_nodes = dom_assertion_enc.find('.//saml:EncryptedAssertion', namespaces=OneLogin_Saml2_Constants.NSMAP) encrypted_data_assert = encrypted_assertion_enc_nodes[0] decrypted_assertion = OneLogin_Saml2_Utils.decrypt_element(encrypted_data_assert, key) self.assertEqual('{%s}Assertion' % OneLogin_Saml2_Constants.NS_SAML, decrypted_assertion.tag) self.assertEqual('_6fe189b1c241827773902f2b1d3a843418206a5c97', decrypted_assertion.get('ID')) encrypted_nameid_nodes = decrypted_assertion.xpath('./saml:Subject/saml:EncryptedID', namespaces=OneLogin_Saml2_Constants.NSMAP) encrypted_data = encrypted_nameid_nodes[0][0] decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key) self.assertEqual('{%s}NameID' % OneLogin_Saml2_Constants.NS_SAML, decrypted_nameid.tag) self.assertEqual('457bdb600de717891c77647b0806ce59c089d5b8', decrypted_nameid.text) key_2_file_name = join(self.data_path, 'misc', 'sp2.key') f = open(key_2_file_name, 'r') key2 = f.read() f.close() # sp.key and sp2.key are equivalent we should be able to decrypt the nameID again decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key2) self.assertIn('{%s}NameID' % (OneLogin_Saml2_Constants.NS_SAML), decrypted_nameid.tag) self.assertEqual('457bdb600de717891c77647b0806ce59c089d5b8', decrypted_nameid.text) key_3_file_name = join(self.data_path, 'misc', 'sp3.key') f = open(key_3_file_name, 'r') key3 = f.read() f.close() # sp.key and sp3.key are equivalent we should be able to decrypt the nameID again decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key3) self.assertIn('{%s}NameID' % (OneLogin_Saml2_Constants.NS_SAML), decrypted_nameid.tag) self.assertEqual('457bdb600de717891c77647b0806ce59c089d5b8', decrypted_nameid.text) key_4_file_name = join(self.data_path, 'misc', 'sp4.key') f = open(key_4_file_name, 'r') key4 = f.read() f.close() with self.assertRaisesRegex(Exception, "(1, 'failed to decrypt')"): OneLogin_Saml2_Utils.decrypt_element(encrypted_data, key4) xml_nameid_enc_2 = b64decode(self.file_contents(join(self.data_path, 'responses', 'invalids', 'encrypted_nameID_without_EncMethod.xml.base64'))) dom_nameid_enc_2 = parseString(xml_nameid_enc_2) encrypted_nameid_nodes_2 = dom_nameid_enc_2.getElementsByTagName('saml:EncryptedID') encrypted_data_2 = encrypted_nameid_nodes_2[0].firstChild with self.assertRaisesRegex(Exception, "(1, 'failed to decrypt')"): OneLogin_Saml2_Utils.decrypt_element(encrypted_data_2, key) xml_nameid_enc_3 = b64decode(self.file_contents(join(self.data_path, 'responses', 'invalids', 'encrypted_nameID_without_keyinfo.xml.base64'))) dom_nameid_enc_3 = parseString(xml_nameid_enc_3) encrypted_nameid_nodes_3 = dom_nameid_enc_3.getElementsByTagName('saml:EncryptedID') encrypted_data_3 = encrypted_nameid_nodes_3[0].firstChild with self.assertRaisesRegex(Exception, "(1, 'failed to decrypt')"): OneLogin_Saml2_Utils.decrypt_element(encrypted_data_3, key) def testDecryptElementInplace(self): """ Tests the decrypt_element method of the OneLogin_Saml2_Utils with inplace=True """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() xml_nameid_enc = b64decode(self.file_contents(join(self.data_path, 'responses', 'response_encrypted_nameid.xml.base64'))) dom = fromstring(xml_nameid_enc) encrypted_node = dom.xpath('//saml:EncryptedID/xenc:EncryptedData', namespaces=OneLogin_Saml2_Constants.NSMAP)[0] # can be decrypted twice when copy the node first for _ in range(2): decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_node, key, inplace=False) self.assertIn('NameID', decrypted_nameid.tag) self.assertEqual('2de11defd199f8d5bb63f9b7deb265ba5c675c10', decrypted_nameid.text) # can only be decrypted once in place decrypted_nameid = OneLogin_Saml2_Utils.decrypt_element(encrypted_node, key, inplace=True) self.assertIn('NameID', decrypted_nameid.tag) self.assertEqual('2de11defd199f8d5bb63f9b7deb265ba5c675c10', decrypted_nameid.text) # can't be decrypted twice since it has been decrypted inplace with self.assertRaisesRegex(Exception, "(1, 'failed to decrypt')"): OneLogin_Saml2_Utils.decrypt_element(encrypted_node, key, inplace=True) def testAddSign(self): """ Tests the add_sign method of the OneLogin_Saml2_Utils """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() cert = settings.get_sp_cert() xml_authn = b64decode(self.file_contents(join(self.data_path, 'requests', 'authn_request.xml.base64'))) xml_authn_signed = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn, key, cert)) self.assertIn('', xml_authn_signed) res = parseString(xml_authn_signed) ds_signature = res.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature.tagName) xml_authn_dom = parseString(xml_authn) xml_authn_signed_2 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn_dom.toxml(), key, cert)) self.assertIn('', xml_authn_signed_2) res_2 = parseString(xml_authn_signed_2) ds_signature_2 = res_2.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_2.tagName) xml_authn_signed_3 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn_dom.firstChild.toxml(), key, cert)) self.assertIn('', xml_authn_signed_3) res_3 = parseString(xml_authn_signed_3) ds_signature_3 = res_3.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_3.tagName) xml_authn_etree = etree.fromstring(xml_authn) xml_authn_signed_4 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn_etree, key, cert)) self.assertIn('', xml_authn_signed_4) res_4 = parseString(xml_authn_signed_4) ds_signature_4 = res_4.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_4.tagName) xml_authn_signed_5 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn_etree, key, cert)) self.assertIn('', xml_authn_signed_5) res_5 = parseString(xml_authn_signed_5) ds_signature_5 = res_5.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_5.tagName) xml_logout_req = b64decode(self.file_contents(join(self.data_path, 'logout_requests', 'logout_request.xml.base64'))) xml_logout_req_signed = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_logout_req, key, cert)) self.assertIn('', xml_logout_req_signed) res_6 = parseString(xml_logout_req_signed) ds_signature_6 = res_6.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_6.tagName) xml_logout_res = b64decode(self.file_contents(join(self.data_path, 'logout_responses', 'logout_response.xml.base64'))) xml_logout_res_signed = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_logout_res, key, cert)) self.assertIn('', xml_logout_res_signed) res_7 = parseString(xml_logout_res_signed) ds_signature_7 = res_7.firstChild.firstChild.nextSibling.nextSibling self.assertIn('ds:Signature', ds_signature_7.tagName) xml_metadata = self.file_contents(join(self.data_path, 'metadata', 'metadata_settings1.xml')) xml_metadata_signed = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_metadata, key, cert)) self.assertIn('', xml_metadata_signed) res_8 = parseString(xml_metadata_signed) ds_signature_8 = res_8.firstChild.firstChild.nextSibling self.assertIn('ds:Signature', ds_signature_8.tagName) def testAddSignCheckAlg(self): """ Tests the add_sign method of the OneLogin_Saml2_Utils Case: Review signature & digest algorithm """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) key = settings.get_sp_key() cert = settings.get_sp_cert() xml_authn = b64decode(self.file_contents(join(self.data_path, 'requests', 'authn_request.xml.base64'))) xml_authn_signed = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn, key, cert)) self.assertIn('', xml_authn_signed) self.assertIn('', xml_authn_signed) self.assertIn('', xml_authn_signed) xml_authn_signed_2 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn, key, cert, False, OneLogin_Saml2_Constants.RSA_SHA256, OneLogin_Saml2_Constants.SHA384)) self.assertIn('', xml_authn_signed_2) self.assertIn('', xml_authn_signed_2) self.assertIn('', xml_authn_signed_2) xml_authn_signed_3 = compat.to_string(OneLogin_Saml2_Utils.add_sign(xml_authn, key, cert, False, OneLogin_Saml2_Constants.RSA_SHA384, OneLogin_Saml2_Constants.SHA512)) self.assertIn('', xml_authn_signed_3) self.assertIn('', xml_authn_signed_3) self.assertIn('', xml_authn_signed_3) def testValidateSign(self): """ Tests the validate_sign method of the OneLogin_Saml2_Utils """ settings = OneLogin_Saml2_Settings(self.loadSettingsJSON()) idp_data = settings.get_idp_data() cert = idp_data['x509cert'] settings_2 = OneLogin_Saml2_Settings(self.loadSettingsJSON('settings2.json')) idp_data2 = settings_2.get_idp_data() cert_2 = idp_data2['x509cert'] fingerprint_2 = OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert_2) fingerprint_2_256 = OneLogin_Saml2_Utils.calculate_x509_fingerprint(cert_2, 'sha256') try: self.assertFalse(OneLogin_Saml2_Utils.validate_sign('', cert)) except Exception as e: self.assertEqual('Empty string supplied as input', str(e)) # expired cert xml_metadata_signed = self.file_contents(join(self.data_path, 'metadata', 'signed_metadata_settings1.xml')) self.assertTrue(OneLogin_Saml2_Utils.validate_metadata_sign(xml_metadata_signed, cert)) # expired cert, verified it self.assertFalse(OneLogin_Saml2_Utils.validate_metadata_sign(xml_metadata_signed, cert, validatecert=True)) xml_metadata_signed_2 = self.file_contents(join(self.data_path, 'metadata', 'signed_metadata_settings2.xml')) self.assertTrue(OneLogin_Saml2_Utils.validate_metadata_sign(xml_metadata_signed_2, cert_2)) self.assertTrue(OneLogin_Saml2_Utils.validate_metadata_sign(xml_metadata_signed_2, None, fingerprint_2)) xml_response_msg_signed = b64decode(self.file_contents(join(self.data_path, 'responses', 'signed_message_response.xml.base64'))) # expired cert self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed, cert)) # expired cert, verified it self.assertFalse(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed, cert, validatecert=True)) # modified cert other_cert_path = join(dirname(__file__), '..', '..', '..', 'certs') f = open(other_cert_path + '/certificate1', 'r') cert_x = f.read() f.close() self.assertFalse(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed, cert_x)) self.assertFalse(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed, cert_x, validatecert=True)) xml_response_msg_signed_2 = b64decode(self.file_contents(join(self.data_path, 'responses', 'signed_message_response2.xml.base64'))) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed_2, cert_2)) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed_2, None, fingerprint_2)) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed_2, None, fingerprint_2, 'sha1')) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_msg_signed_2, None, fingerprint_2_256, 'sha256')) xml_response_assert_signed = b64decode(self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response.xml.base64'))) # expired cert self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_assert_signed, cert)) # expired cert, verified it self.assertFalse(OneLogin_Saml2_Utils.validate_sign(xml_response_assert_signed, cert, validatecert=True)) xml_response_assert_signed_2 = b64decode(self.file_contents(join(self.data_path, 'responses', 'signed_assertion_response2.xml.base64'))) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_assert_signed_2, cert_2)) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_assert_signed_2, None, fingerprint_2)) xml_response_double_signed = b64decode(self.file_contents(join(self.data_path, 'responses', 'double_signed_response.xml.base64'))) # expired cert self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_double_signed, cert)) # expired cert, verified it self.assertFalse(OneLogin_Saml2_Utils.validate_sign(xml_response_double_signed, cert, validatecert=True)) xml_response_double_signed_2 = b64decode(self.file_contents(join(self.data_path, 'responses', 'double_signed_response2.xml.base64'))) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_double_signed_2, cert_2)) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(xml_response_double_signed_2, None, fingerprint_2)) dom = parseString(xml_response_msg_signed_2) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(dom.toxml(), cert_2)) dom.firstChild.firstChild.firstChild.nodeValue = 'https://idp.example.com/simplesaml/saml2/idp/metadata.php' dom.firstChild.getAttributeNode('ID').nodeValue = u'_34fg27g212d63k1f923845324475802ac0fc24530b' # Reference validation failed self.assertFalse(OneLogin_Saml2_Utils.validate_sign(dom.toxml(), cert_2)) invalid_fingerprint = 'afe71c34ef740bc87434be13a2263d31271da1f9' # Wrong fingerprint self.assertFalse(OneLogin_Saml2_Utils.validate_metadata_sign(xml_metadata_signed_2, None, invalid_fingerprint)) dom_2 = parseString(xml_response_double_signed_2) self.assertTrue(OneLogin_Saml2_Utils.validate_sign(dom_2.toxml(), cert_2)) dom_2.firstChild.firstChild.firstChild.nodeValue = 'https://example.com/other-idp' # Modified message self.assertFalse(OneLogin_Saml2_Utils.validate_sign(dom_2.toxml(), cert_2)) # Try to validate directly the Assertion dom_3 = parseString(xml_response_double_signed_2) assert_elem_3 = dom_3.firstChild.firstChild.nextSibling.nextSibling.nextSibling assert_elem_3.setAttributeNS(OneLogin_Saml2_Constants.NS_SAML, 'xmlns:saml', OneLogin_Saml2_Constants.NS_SAML) self.assertFalse(OneLogin_Saml2_Utils.validate_sign(assert_elem_3.toxml(), cert_2)) # Wrong scheme no_signed = b64decode(self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_signature.xml.base64'))) self.assertFalse(OneLogin_Saml2_Utils.validate_sign(no_signed, cert)) no_key = b64decode(self.file_contents(join(self.data_path, 'responses', 'invalids', 'no_key.xml.base64'))) self.assertFalse(OneLogin_Saml2_Utils.validate_sign(no_key, cert)) # Signature Wrapping attack wrapping_attack1 = b64decode(self.file_contents(join(self.data_path, 'responses', 'invalids', 'signature_wrapping_attack.xml.base64'))) self.assertFalse(OneLogin_Saml2_Utils.validate_sign(wrapping_attack1, cert)) def testNormalizeUrl(self): base_url = 'https://blah.com/path' capital_scheme = 'hTTps://blah.com/path' capital_domain = 'https://blAH.Com/path' capital_path = 'https://blah.com/PAth' capital_all = 'HTTPS://BLAH.COM/PATH' self.assertIn(base_url, OneLogin_Saml2_Utils.normalize_url(capital_scheme)) self.assertIn(base_url, OneLogin_Saml2_Utils.normalize_url(capital_domain)) self.assertNotIn(base_url, OneLogin_Saml2_Utils.normalize_url(capital_path)) self.assertNotIn(base_url, OneLogin_Saml2_Utils.normalize_url(capital_all)) python3-saml-1.16.0/tests/src/OneLogin/saml2_tests/xml_utils_test.py000066400000000000000000000152501451074743100255020ustar00rootroot00000000000000# -*- coding: utf-8 -*- import json import unittest import xmlsec from base64 import b64decode from lxml import etree from os.path import dirname, join, exists from onelogin.saml2.utils import OneLogin_Saml2_XML class TestOneLoginSaml2Xml(unittest.TestCase): data_path = join(dirname(__file__), '..', '..', '..', 'data') def loadSettingsJSON(self, filename=None): if filename: filename = join(dirname(__file__), '..', '..', '..', 'settings', filename) else: filename = join(dirname(__file__), '..', '..', '..', 'settings', 'settings1.json') if exists(filename): stream = open(filename, 'r') settings = json.load(stream) stream.close() return settings else: raise Exception('Settings json file does not exist') def file_contents(self, filename): f = open(filename, 'r') content = f.read() f.close() return content def testLibxml2(self): """ Tests that libxml2 versions used by xmlsec and lxml are compatible If this test fails, reinstall lxml without using binary to ensure it is linked to same version of libxml2 as xmlsec: pip install --force-reinstall --no-binary lxml lxml See https://bugs.launchpad.net/lxml/+bug/1960668 """ env = etree.fromstring('') sig = xmlsec.template.create( env, xmlsec.Transform.EXCL_C14N, xmlsec.Transform.RSA_SHA256, ns="ds" ) ds = etree.QName(sig).namespace cm = sig.find(".//{%s}CanonicalizationMethod" % ds) self.assertIsNotNone(cm) def testValidateXML(self): """ Tests the validate_xml method of the OneLogin_Saml2_XML """ metadata_unloaded = '' res = OneLogin_Saml2_XML.validate_xml(metadata_unloaded, 'saml-schema-metadata-2.0.xsd') self.assertIsInstance(res, str) self.assertIn('unloaded_xml', res) metadata_invalid = self.file_contents(join(self.data_path, 'metadata', 'noentity_metadata_settings1.xml')) res = OneLogin_Saml2_XML.validate_xml(metadata_invalid, 'saml-schema-metadata-2.0.xsd') self.assertIsInstance(res, str) self.assertIn('invalid_xml', res) metadata_expired = self.file_contents(join(self.data_path, 'metadata', 'expired_metadata_settings1.xml')) res = OneLogin_Saml2_XML.validate_xml(metadata_expired, 'saml-schema-metadata-2.0.xsd') self.assertIsInstance(res, OneLogin_Saml2_XML._element_class) metadata_ok = self.file_contents(join(self.data_path, 'metadata', 'metadata_settings1.xml')) res = OneLogin_Saml2_XML.validate_xml(metadata_ok, 'saml-schema-metadata-2.0.xsd') self.assertIsInstance(res, OneLogin_Saml2_XML._element_class) def testToString(self): """ Tests the to_string method of the OneLogin_Saml2_XML """ xml = 'test1' elem = etree.fromstring(xml) bxml = xml.encode('utf8') self.assertIs(xml, OneLogin_Saml2_XML.to_string(xml)) self.assertIs(bxml, OneLogin_Saml2_XML.to_string(bxml)) self.assertEqual(etree.tostring(elem), OneLogin_Saml2_XML.to_string(elem)) with self.assertRaises(ValueError) as context: OneLogin_Saml2_XML.to_string(1) exception = context.exception self.assertIn("unsupported type", str(exception)) def testToElement(self): """ Tests the to_etree method of the OneLogin_Saml2_XML """ xml = 'test1' elem = etree.fromstring(xml) xml_expected = etree.tostring(elem) res = OneLogin_Saml2_XML.to_etree(xml) self.assertIsInstance(res, etree._Element) self.assertEqual(xml_expected, etree.tostring(res)) res = OneLogin_Saml2_XML.to_etree(xml.encode('utf8')) self.assertIsInstance(res, etree._Element) self.assertEqual(xml_expected, etree.tostring(res)) self.assertIsInstance(res, etree._Element) self.assertEqual(xml_expected, etree.tostring(res)) res = OneLogin_Saml2_XML.to_etree(elem) self.assertIs(res, elem) with self.assertRaises(ValueError) as context: OneLogin_Saml2_XML.to_etree(1) exception = context.exception self.assertIn("unsupported type", str(exception)) def testQuery(self): """ Tests the query method of the OneLogin_Saml2_Utils """ xml = self.file_contents(join(self.data_path, 'responses', 'valid_response.xml.base64')) xml = b64decode(xml) dom = etree.fromstring(xml) assertion_nodes = OneLogin_Saml2_XML.query(dom, '/samlp:Response/saml:Assertion') self.assertEqual(1, len(assertion_nodes)) assertion = assertion_nodes[0] self.assertIn('Assertion', assertion.tag) attribute_statement_nodes = OneLogin_Saml2_XML.query(dom, '/samlp:Response/saml:Assertion/saml:AttributeStatement') self.assertEqual(1, len(assertion_nodes)) attribute_statement = attribute_statement_nodes[0] self.assertIn('AttributeStatement', attribute_statement.tag) attribute_statement_nodes_2 = OneLogin_Saml2_XML.query(dom, './saml:AttributeStatement', assertion) self.assertEqual(1, len(attribute_statement_nodes_2)) attribute_statement_2 = attribute_statement_nodes_2[0] self.assertEqual(attribute_statement, attribute_statement_2) signature_res_nodes = OneLogin_Saml2_XML.query(dom, '/samlp:Response/ds:Signature') self.assertEqual(1, len(signature_res_nodes)) signature_res = signature_res_nodes[0] self.assertIn('Signature', signature_res.tag) signature_nodes = OneLogin_Saml2_XML.query(dom, '/samlp:Response/saml:Assertion/ds:Signature') self.assertEqual(1, len(signature_nodes)) signature = signature_nodes[0] self.assertIn('Signature', signature.tag) signature_nodes_2 = OneLogin_Saml2_XML.query(dom, './ds:Signature', assertion) self.assertEqual(1, len(signature_nodes_2)) signature2 = signature_nodes_2[0] self.assertNotEqual(signature_res, signature2) self.assertEqual(signature, signature2) signature_nodes_3 = OneLogin_Saml2_XML.query(dom, './ds:SignatureValue', assertion) self.assertEqual(0, len(signature_nodes_3)) signature_nodes_4 = OneLogin_Saml2_XML.query(dom, './ds:Signature/ds:SignatureValue', assertion) self.assertEqual(1, len(signature_nodes_4)) signature_nodes_5 = OneLogin_Saml2_XML.query(dom, './/ds:SignatureValue', assertion) self.assertEqual(1, len(signature_nodes_5)) python3-saml-1.16.0/tests/src/__init__.py000066400000000000000000000000001451074743100201730ustar00rootroot00000000000000